]>
Commit | Line | Data |
---|---|---|
347ea7b0 PK |
1 | commit 2545f7485c4676c52855750b992d8c1921e559c4 |
2 | Merge: 93a41eb 83df348 | |
3 | Author: Brad Spengler <spender@grsecurity.net> | |
4 | Date: Mon Nov 23 20:30:33 2015 -0500 | |
5 | ||
6 | Merge branch 'pax-test' into grsec-test | |
7 | ||
8 | commit 83df3482b33ef4d8192a253a6852e9a9db1f7dca | |
9 | Author: Brad Spengler <spender@grsecurity.net> | |
10 | Date: Mon Nov 23 20:30:16 2015 -0500 | |
11 | ||
12 | Update to pax-linux-4.2.6-test23.patch: | |
13 | - fixed gcc-common.h regression under gcc-5, reported by Arnaud and coldhak | |
14 | - fixed ath10k compile error with the size overflow plugin, reported by victor and careta (https://forums.grsecurity.net/viewtopic.php?t=4323) | |
15 | ||
16 | drivers/net/wireless/ath/ath10k/ce.c | 4 ++-- | |
17 | tools/gcc/gcc-common.h | 13 ++++++------- | |
18 | 2 files changed, 8 insertions(+), 9 deletions(-) | |
19 | ||
20 | commit 93a41eb6e3a7ab9446658b6d2ec4623014b55232 | |
21 | Author: Brad Spengler <spender@grsecurity.net> | |
22 | Date: Sun Nov 22 17:14:38 2015 -0500 | |
23 | ||
24 | update gcc-common.h | |
25 | ||
26 | tools/gcc/gcc-common.h | 13 ++++++------- | |
27 | 1 files changed, 6 insertions(+), 7 deletions(-) | |
28 | ||
29 | commit 7da11be9f025bd8193f03f9b32697bc1ce8ac650 | |
30 | Author: Andrew Cooper <andrew.cooper3@citrix.com> | |
31 | Date: Wed Jun 3 10:31:14 2015 +0100 | |
32 | ||
33 | x86/cpu: Fix SMAP check in PVOPS environments | |
34 | ||
35 | There appears to be no formal statement of what pv_irq_ops.save_fl() is | |
36 | supposed to return precisely. Native returns the full flags, while lguest and | |
37 | Xen only return the Interrupt Flag, and both have comments by the | |
38 | implementations stating that only the Interrupt Flag is looked at. This may | |
39 | have been true when initially implemented, but no longer is. | |
40 | ||
41 | To make matters worse, the Xen PVOP leaves the upper bits undefined, making | |
42 | the BUG_ON() undefined behaviour. Experimentally, this now trips for 32bit PV | |
43 | guests on Broadwell hardware. The BUG_ON() is consistent for an individual | |
44 | build, but not consistent for all builds. It has also been a sitting timebomb | |
45 | since SMAP support was introduced. | |
46 | ||
47 | Use native_save_fl() instead, which will obtain an accurate view of the AC | |
48 | flag. | |
49 | ||
50 | Signed-off-by: Andrew Cooper <andrew.cooper3@citrix.com> | |
51 | Reviewed-by: David Vrabel <david.vrabel@citrix.com> | |
52 | Tested-by: Rusty Russell <rusty@rustcorp.com.au> | |
53 | Cc: Rusty Russell <rusty@rustcorp.com.au> | |
54 | Cc: Konrad Rzeszutek Wilk <konrad.wilk@oracle.com> | |
55 | Cc: Boris Ostrovsky <boris.ostrovsky@oracle.com> | |
56 | Cc: <lguest@lists.ozlabs.org> | |
57 | Cc: Xen-devel <xen-devel@lists.xen.org> | |
58 | CC: stable@vger.kernel.org | |
59 | Link: http://lkml.kernel.org/r/1433323874-6927-1-git-send-email-andrew.cooper3@citrix.com | |
60 | Signed-off-by: Thomas Gleixner <tglx@linutronix.de> | |
61 | ||
62 | arch/x86/kernel/cpu/common.c | 3 +-- | |
63 | 1 files changed, 1 insertions(+), 2 deletions(-) | |
64 | ||
65 | commit 08ce34cf092b9f1b5311f156df4182a282bf7acc | |
66 | Author: Dave Hansen <dave.hansen@linux.intel.com> | |
67 | Date: Wed Nov 11 10:19:31 2015 -0800 | |
68 | ||
69 | x86/mpx: Do proper get_user() when running 32-bit binaries on 64-bit kernels | |
70 | ||
71 | When you call get_user(foo, bar), you effectively do a | |
72 | ||
73 | copy_from_user(&foo, bar, sizeof(*bar)); | |
74 | ||
75 | Note that the sizeof() is implicit. | |
76 | ||
77 | When we reach out to userspace to try to zap an entire "bounds | |
78 | table" we need to go read a "bounds directory entry" in order to | |
79 | locate the table's address. The size of a "directory entry" | |
80 | depends on the binary being run and is always the size of a | |
81 | pointer. | |
82 | ||
83 | But, when we have a 64-bit kernel and a 32-bit application, the | |
84 | directory entry is still only 32-bits long, but we fetch it with | |
85 | a 64-bit pointer which makes get_user() does a 64-bit fetch. | |
86 | Reading 4 extra bytes isn't harmful, unless we are at the end of | |
87 | and run off the table. It might also cause the zero page to get | |
88 | faulted in unnecessarily even if you are not at the end. | |
89 | ||
90 | Fix it up by doing a special 32-bit get_user() via a cast when | |
91 | we have 32-bit userspace. | |
92 | ||
93 | Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> | |
94 | Cc: <stable@vger.kernel.org> | |
95 | Cc: Andy Lutomirski <luto@amacapital.net> | |
96 | Cc: Borislav Petkov <bp@alien8.de> | |
97 | Cc: Brian Gerst <brgerst@gmail.com> | |
98 | Cc: Dave Hansen <dave@sr71.net> | |
99 | Cc: Denys Vlasenko <dvlasenk@redhat.com> | |
100 | Cc: H. Peter Anvin <hpa@zytor.com> | |
101 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
102 | Cc: Peter Zijlstra <peterz@infradead.org> | |
103 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
104 | Link: http://lkml.kernel.org/r/20151111181931.3ACF6822@viggo.jf.intel.com | |
105 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
106 | ||
107 | arch/x86/mm/mpx.c | 25 ++++++++++++++++++++++++- | |
108 | 1 files changed, 24 insertions(+), 1 deletions(-) | |
109 | ||
110 | commit 9e1e1d1d6f6f41b13a6e85f25e27aee4410f58bf | |
111 | Author: Dave Hansen <dave.hansen@linux.intel.com> | |
112 | Date: Wed Nov 11 10:19:34 2015 -0800 | |
113 | ||
114 | x86/mpx: Fix 32-bit address space calculation | |
115 | ||
116 | I received a bug report that running 32-bit MPX binaries on | |
117 | 64-bit kernels was broken. I traced it down to this little code | |
118 | snippet. We were switching our "number of bounds directory | |
119 | entries" calculation correctly. But, we didn't switch the other | |
120 | side of the calculation: the virtual space size. | |
121 | ||
122 | This meant that we were calculating an absurd size for | |
123 | bd_entry_virt_space() on 32-bit because we used the 64-bit | |
124 | virt_space. | |
125 | ||
126 | This was _also_ broken for 32-bit kernels running on 64-bit | |
127 | hardware since boot_cpu_data.x86_virt_bits=48 even when running | |
128 | in 32-bit mode. | |
129 | ||
130 | Correct that and properly handle all 3 possible cases: | |
131 | ||
132 | 1. 32-bit binary on 64-bit kernel | |
133 | 2. 64-bit binary on 64-bit kernel | |
134 | 3. 32-bit binary on 32-bit kernel | |
135 | ||
136 | This manifested in having bounds tables not properly unmapped. | |
137 | It "leaked" memory but had no functional impact otherwise. | |
138 | ||
139 | Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> | |
140 | Cc: <stable@vger.kernel.org> | |
141 | Cc: Andy Lutomirski <luto@amacapital.net> | |
142 | Cc: Borislav Petkov <bp@alien8.de> | |
143 | Cc: Brian Gerst <brgerst@gmail.com> | |
144 | Cc: Dave Hansen <dave@sr71.net> | |
145 | Cc: Denys Vlasenko <dvlasenk@redhat.com> | |
146 | Cc: H. Peter Anvin <hpa@zytor.com> | |
147 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
148 | Cc: Peter Zijlstra <peterz@infradead.org> | |
149 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
150 | Link: http://lkml.kernel.org/r/20151111181934.FA7FAC34@viggo.jf.intel.com | |
151 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
152 | ||
153 | arch/x86/mm/mpx.c | 22 +++++++++++++++++----- | |
154 | 1 files changed, 17 insertions(+), 5 deletions(-) | |
155 | ||
156 | commit c197eee75054d90aafe695c0edb4f25feb469292 | |
157 | Author: Huaitong Han <huaitong.han@intel.com> | |
158 | Date: Fri Nov 6 17:00:23 2015 +0800 | |
159 | ||
160 | x86/fpu: Fix get_xsave_addr() behavior under virtualization | |
161 | ||
162 | KVM uses the get_xsave_addr() function in a different fashion from | |
163 | the native kernel, in that the 'xsave' parameter belongs to guest vcpu, | |
164 | not the currently running task. | |
165 | ||
166 | But 'xsave' is replaced with current task's (host) xsave structure, so | |
167 | get_xsave_addr() will incorrectly return the bad xsave address to KVM. | |
168 | ||
169 | Fix it so that the passed in 'xsave' address is used - as intended | |
170 | originally. | |
171 | ||
172 | Signed-off-by: Huaitong Han <huaitong.han@intel.com> | |
173 | Reviewed-by: Dave Hansen <dave.hansen@linux.intel.com> | |
174 | Cc: <stable@vger.kernel.org> | |
175 | Cc: Andy Lutomirski <luto@amacapital.net> | |
176 | Cc: Paolo Bonzini <pbonzini@redhat.com> | |
177 | Cc: Borislav Petkov <bp@alien8.de> | |
178 | Cc: Fenghua Yu <fenghua.yu@intel.com> | |
179 | Cc: H. Peter Anvin <hpa@zytor.com> | |
180 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
181 | Cc: Oleg Nesterov <oleg@redhat.com> | |
182 | Cc: Peter Zijlstra <peterz@infradead.org> | |
183 | Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com> | |
184 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
185 | Cc: dave.hansen@intel.com | |
186 | Link: http://lkml.kernel.org/r/1446800423-21622-1-git-send-email-huaitong.han@intel.com | |
187 | [ Tidied up the changelog. ] | |
188 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
189 | ||
190 | Conflicts: | |
191 | ||
192 | arch/x86/kernel/fpu/xstate.c | |
193 | ||
194 | arch/x86/kernel/fpu/xstate.c | 1 - | |
195 | 1 files changed, 0 insertions(+), 1 deletions(-) | |
196 | ||
197 | commit 460cdd8a9a19731ce27333866943eed81cba1d96 | |
198 | Author: Dave Hansen <dave.hansen@linux.intel.com> | |
199 | Date: Tue Nov 10 16:23:54 2015 -0800 | |
200 | ||
201 | x86/fpu: Fix 32-bit signal frame handling | |
202 | ||
203 | (This should have gone to LKML originally. Sorry for the extra | |
204 | noise, folks on the cc.) | |
205 | ||
206 | Background: | |
207 | ||
208 | Signal frames on x86 have two formats: | |
209 | ||
210 | 1. For 32-bit executables (whether on a real 32-bit kernel or | |
211 | under 32-bit emulation on a 64-bit kernel) we have a | |
212 | 'fpregset_t' that includes the "FSAVE" registers. | |
213 | ||
214 | 2. For 64-bit executables (on 64-bit kernels obviously), the | |
215 | 'fpregset_t' is smaller and does not contain the "FSAVE" | |
216 | state. | |
217 | ||
218 | When creating the signal frame, we have to be aware of whether | |
219 | we are running a 32 or 64-bit executable so we create the | |
220 | correct format signal frame. | |
221 | ||
222 | Problem: | |
223 | ||
224 | save_xstate_epilog() uses 'fx_sw_reserved_ia32' whenever it is | |
225 | called for a 32-bit executable. This is for real 32-bit and | |
226 | ia32 emulation. | |
227 | ||
228 | But, fpu__init_prepare_fx_sw_frame() only initializes | |
229 | 'fx_sw_reserved_ia32' when emulation is enabled, *NOT* for real | |
230 | 32-bit kernels. | |
231 | ||
232 | This leads to really wierd situations where 32-bit programs | |
233 | lose their extended state when returning from a signal handler. | |
234 | The kernel copies the uninitialized (zero) 'fx_sw_reserved_ia32' | |
235 | out to userspace in save_xstate_epilog(). But when returning | |
236 | from the signal, the kernel errors out in check_for_xstate() | |
237 | when it does not see FP_XSTATE_MAGIC1 present (because it was | |
238 | zeroed). This leads to the FPU/XSAVE state being initialized. | |
239 | ||
240 | For MPX, this leads to the most permissive state and means we | |
241 | silently lose bounds violations. I think this would also mean | |
242 | that we could lose *ANY* FPU/SSE/AVX state. I'm not sure why | |
243 | no one has spotted this bug. | |
244 | ||
245 | I believe this was broken by: | |
246 | ||
247 | 72a671ced66d ("x86, fpu: Unify signal handling code paths for x86 and x86_64 kernels") | |
248 | ||
249 | way back in 2012. | |
250 | ||
251 | Signed-off-by: Dave Hansen <dave.hansen@linux.intel.com> | |
252 | Cc: <stable@vger.kernel.org> | |
253 | Cc: Andy Lutomirski <luto@amacapital.net> | |
254 | Cc: Borislav Petkov <bp@alien8.de> | |
255 | Cc: Brian Gerst <brgerst@gmail.com> | |
256 | Cc: Denys Vlasenko <dvlasenk@redhat.com> | |
257 | Cc: H. Peter Anvin <hpa@zytor.com> | |
258 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
259 | Cc: Peter Zijlstra <peterz@infradead.org> | |
260 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
261 | Cc: dave@sr71.net | |
262 | Cc: fenghua.yu@intel.com | |
263 | Cc: yu-cheng.yu@intel.com | |
264 | Link: http://lkml.kernel.org/r/20151111002354.A0799571@viggo.jf.intel.com | |
265 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
266 | ||
267 | arch/x86/kernel/fpu/signal.c | 11 +++++------ | |
268 | 1 files changed, 5 insertions(+), 6 deletions(-) | |
269 | ||
a375b63a PK |
270 | commit c3f2cc8921a08fff1fbad9127dd7a30c4a953e88 |
271 | Author: Brad Spengler <spender@grsecurity.net> | |
272 | Date: Sat Nov 21 18:36:58 2015 -0500 | |
273 | ||
274 | Fix gcc 5.x compilation, reported by Arnaud and coldhak | |
275 | ||
276 | tools/gcc/gcc-common.h | 2 +- | |
277 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
278 | ||
d53f4099 PK |
279 | commit f0ea1bc982c60c1c39d0f95d9f3db0ec799387ca |
280 | Merge: 3929e88 c692401 | |
281 | Author: Brad Spengler <spender@grsecurity.net> | |
282 | Date: Sat Nov 21 15:41:38 2015 -0500 | |
283 | ||
284 | Merge branch 'pax-test' into grsec-test | |
285 | ||
286 | commit c69240179ca6ff101670f4859bb0e9a9deb85359 | |
287 | Author: Brad Spengler <spender@grsecurity.net> | |
288 | Date: Sat Nov 21 15:41:06 2015 -0500 | |
289 | ||
290 | Update to pax-linux-4.2.6-test22.patch: | |
291 | - made the previous READ_ONCE/WRITE_ONCE fix compatible with gcc PR 58145 | |
292 | ||
293 | include/linux/compiler.h | 11 +++++++---- | |
294 | 1 files changed, 7 insertions(+), 4 deletions(-) | |
295 | ||
296 | commit 3929e882e451b177af1a615858f0a96a7cd734b1 | |
297 | Author: Brad Spengler <spender@grsecurity.net> | |
298 | Date: Sat Nov 21 13:14:25 2015 -0500 | |
299 | ||
300 | remove disable_kill option entirely for the final 4.2 release | |
301 | ||
302 | fs/exec.c | 11 ----------- | |
303 | security/Kconfig | 5 ----- | |
304 | 2 files changed, 0 insertions(+), 16 deletions(-) | |
305 | ||
306 | commit 91633d0eebc41553ea77b5fa7559aa806a60008c | |
307 | Author: Brad Spengler <spender@grsecurity.net> | |
308 | Date: Sat Nov 21 07:38:10 2015 -0500 | |
309 | ||
310 | compile fix | |
311 | ||
312 | net/unix/af_unix.c | 1 + | |
313 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
314 | ||
315 | commit 0afc2f69e7f948995522f6e1dbb957ed84abd9b9 | |
316 | Author: Brad Spengler <spender@grsecurity.net> | |
317 | Date: Sat Nov 21 07:14:43 2015 -0500 | |
318 | ||
319 | Revert previous AF_UNIX fix: | |
320 | http://www.spinics.net/lists/netdev/msg318826.html | |
321 | and apply new one by Jason Baron: | |
322 | https://lkml.org/lkml/2015/9/29/825 | |
323 | ||
324 | include/net/af_unix.h | 1 + | |
325 | net/unix/af_unix.c | 36 ++++++++++++++++++++++++++++++------ | |
326 | 2 files changed, 31 insertions(+), 6 deletions(-) | |
327 | ||
328 | commit 0a3eec2b3d110042af4e0a9f1e87458262fce1eb | |
329 | Merge: 917a60c 8fd74af | |
330 | Author: Brad Spengler <spender@grsecurity.net> | |
331 | Date: Sat Nov 21 06:50:33 2015 -0500 | |
332 | ||
333 | Merge branch 'pax-test' into grsec-test | |
334 | ||
335 | commit 8fd74afe08ee45516a9daf2593f31c176516cb55 | |
336 | Author: Brad Spengler <spender@grsecurity.net> | |
337 | Date: Sat Nov 21 06:49:57 2015 -0500 | |
338 | ||
339 | Update to pax-linux-4.2.6-test21.patch: | |
340 | - fixed a size overflow plugin bug that could cause a compiler error | |
341 | - Emese fixed a size overflow false positive in xfrm4_mode_tunnel_input, reported by Arnaud <arnaud@drno.eu> | |
342 | - updated gcc-common.h to support gcc-6 | |
343 | - fixed some undefined behaviour in READ_ONCE/WRITE_ONCE | |
344 | ||
345 | include/linux/compiler.h | 38 +++---------------- | |
346 | tools/gcc/gcc-common.h | 39 ++++++++++++++++---- | |
347 | tools/gcc/initify_plugin.c | 4 +- | |
348 | .../disable_size_overflow_hash.data | 7 +++- | |
349 | .../size_overflow_plugin/intentional_overflow.c | 2 +- | |
350 | .../size_overflow_plugin/size_overflow_hash.data | 9 +---- | |
351 | .../size_overflow_plugin/size_overflow_transform.c | 4 +- | |
352 | 7 files changed, 50 insertions(+), 53 deletions(-) | |
353 | ||
6e783cc3 PK |
354 | commit 917a60c749d80121229a1752874ff8a606778fc5 |
355 | Merge: 76fc822 77d474f | |
356 | Author: Brad Spengler <spender@grsecurity.net> | |
357 | Date: Wed Nov 18 19:58:31 2015 -0500 | |
358 | ||
359 | Merge branch 'pax-test' into grsec-test | |
360 | ||
361 | commit 77d474f0bcb2e5acafc78c66c456d1aebaac14b3 | |
362 | Author: Brad Spengler <spender@grsecurity.net> | |
363 | Date: Wed Nov 18 19:58:08 2015 -0500 | |
364 | ||
365 | Update to pax-linux-4.2.6-test20.patch: | |
366 | - constified some vdso/vsyscall related code/data | |
367 | ||
368 | arch/x86/entry/vdso/vdso2c.h | 4 ++-- | |
369 | arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +- | |
370 | arch/x86/mm/ioremap.c | 2 +- | |
371 | mm/debug.c | 3 +++ | |
372 | 4 files changed, 7 insertions(+), 4 deletions(-) | |
373 | ||
374 | commit 76fc8223b2e6b6c950702adfdb055dd5da90657c | |
375 | Author: Brad Spengler <spender@grsecurity.net> | |
376 | Date: Wed Nov 18 17:40:27 2015 -0500 | |
377 | ||
378 | Allow processes with CAP_SYS_PTRACE to ignore /proc/pid restrictions, | |
379 | as reported by Andrew | |
380 | ||
381 | fs/proc/base.c | 2 +- | |
382 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
383 | ||
fb116cbb PK |
384 | commit 708c2e025f8a05b76f319cfa5fa624d37d8ef6f3 |
385 | Author: Brad Spengler <spender@grsecurity.net> | |
386 | Date: Tue Nov 17 18:43:24 2015 -0500 | |
387 | ||
388 | Fix multiple character encodings in patch, reported by IooNag on the forums | |
389 | ||
390 | grsecurity/Makefile | 2 +- | |
391 | net/netfilter/xt_gradm.c | 2 +- | |
392 | 2 files changed, 2 insertions(+), 2 deletions(-) | |
393 | ||
394 | commit d1f7534df8687fd05858fd45805b1185eafe38a7 | |
395 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
396 | Date: Tue Nov 17 15:10:59 2015 +0100 | |
397 | ||
398 | af_unix: take receive queue lock while appending new skb | |
399 | ||
400 | While possibly in future we don't necessarily need to use | |
401 | sk_buff_head.lock this is a rather larger change, as it affects the | |
402 | af_unix fd garbage collector, diag and socket cleanups. This is too much | |
403 | for a stable patch. | |
404 | ||
405 | For the time being grab sk_buff_head.lock without disabling bh and irqs, | |
406 | so don't use locked skb_queue_tail. | |
407 | ||
408 | Fixes: 869e7c62486e ("net: af_unix: implement stream sendpage support") | |
409 | Cc: Eric Dumazet <edumazet@google.com> | |
410 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
411 | Reported-by: Eric Dumazet <edumazet@google.com> | |
412 | Acked-by: Eric Dumazet <edumazet@google.com> | |
413 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
414 | ||
415 | net/unix/af_unix.c | 5 ++++- | |
416 | 1 files changed, 4 insertions(+), 1 deletions(-) | |
417 | ||
418 | commit 0df914e7a66a4807bac7762ab33ba3020944ef6b | |
419 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
420 | Date: Mon Nov 16 16:25:56 2015 +0100 | |
421 | ||
422 | af_unix: don't append consumed skbs to sk_receive_queue | |
423 | ||
424 | In case multiple writes to a unix stream socket race we could end up in a | |
425 | situation where we pre-allocate a new skb for use in unix_stream_sendpage | |
426 | but have to free it again in the locked section because another skb | |
427 | has been appended meanwhile, which we must use. Accidentally we didn't | |
428 | clear the pointer after consuming it and so we touched freed memory | |
429 | while appending it to the sk_receive_queue. So, clear the pointer after | |
430 | consuming the skb. | |
431 | ||
432 | This bug has been found with syzkaller | |
433 | (http://github.com/google/syzkaller) by Dmitry Vyukov. | |
434 | ||
435 | Fixes: 869e7c62486e ("net: af_unix: implement stream sendpage support") | |
436 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
437 | Cc: Dmitry Vyukov <dvyukov@google.com> | |
438 | Cc: Eric Dumazet <eric.dumazet@gmail.com> | |
439 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
440 | Acked-by: Eric Dumazet <edumazet@google.com> | |
441 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
442 | ||
443 | net/unix/af_unix.c | 1 + | |
444 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
445 | ||
446 | commit ac8466abcd0ae871cd38d868e1a4e903b92ffc48 | |
447 | Author: Jason A. Donenfeld <Jason@zx2c4.com> | |
448 | Date: Thu Nov 12 17:35:58 2015 +0100 | |
449 | ||
450 | ip_tunnel: disable preemption when updating per-cpu tstats | |
451 | ||
452 | Drivers like vxlan use the recently introduced | |
453 | udp_tunnel_xmit_skb/udp_tunnel6_xmit_skb APIs. udp_tunnel6_xmit_skb | |
454 | makes use of ip6tunnel_xmit, and ip6tunnel_xmit, after sending the | |
455 | packet, updates the struct stats using the usual | |
456 | u64_stats_update_begin/end calls on this_cpu_ptr(dev->tstats). | |
457 | udp_tunnel_xmit_skb makes use of iptunnel_xmit, which doesn't touch | |
458 | tstats, so drivers like vxlan, immediately after, call | |
459 | iptunnel_xmit_stats, which does the same thing - calls | |
460 | u64_stats_update_begin/end on this_cpu_ptr(dev->tstats). | |
461 | ||
462 | While vxlan is probably fine (I don't know?), calling a similar function | |
463 | from, say, an unbound workqueue, on a fully preemptable kernel causes | |
464 | real issues: | |
465 | ||
466 | [ 188.434537] BUG: using smp_processor_id() in preemptible [00000000] code: kworker/u8:0/6 | |
467 | [ 188.435579] caller is debug_smp_processor_id+0x17/0x20 | |
468 | [ 188.435583] CPU: 0 PID: 6 Comm: kworker/u8:0 Not tainted 4.2.6 #2 | |
469 | [ 188.435607] Call Trace: | |
470 | [ 188.435611] [<ffffffff8234e936>] dump_stack+0x4f/0x7b | |
471 | [ 188.435615] [<ffffffff81915f3d>] check_preemption_disabled+0x19d/0x1c0 | |
472 | [ 188.435619] [<ffffffff81915f77>] debug_smp_processor_id+0x17/0x20 | |
473 | ||
474 | The solution would be to protect the whole | |
475 | this_cpu_ptr(dev->tstats)/u64_stats_update_begin/end blocks with | |
476 | disabling preemption and then reenabling it. | |
477 | ||
478 | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> | |
479 | Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
480 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
481 | ||
482 | include/net/ip6_tunnel.h | 3 ++- | |
483 | include/net/ip_tunnels.h | 3 ++- | |
484 | 2 files changed, 4 insertions(+), 2 deletions(-) | |
485 | ||
486 | commit 44665148f06b73ea0c253a1a34d15689674d7421 | |
487 | Author: Mathias Krause <minipli@googlemail.com> | |
488 | Date: Fri Nov 6 16:30:38 2015 -0800 | |
489 | ||
490 | printk: prevent userland from spoofing kernel messages | |
491 | ||
492 | The following statement of ABI/testing/dev-kmsg is not quite right: | |
493 | ||
494 | It is not possible to inject messages from userspace with the | |
495 | facility number LOG_KERN (0), to make sure that the origin of the | |
496 | messages can always be reliably determined. | |
497 | ||
498 | Userland actually can inject messages with a facility of 0 by abusing the | |
499 | fact that the facility is stored in a u8 data type. By using a facility | |
500 | which is a multiple of 256 the assignment of msg->facility in log_store() | |
501 | implicitly truncates it to 0, i.e. LOG_KERN, allowing users of /dev/kmsg | |
502 | to spoof kernel messages as shown below: | |
503 | ||
504 | The following call... | |
505 | # printf '<%d>Kernel panic - not syncing: beer empty\n' 0 >/dev/kmsg | |
506 | ...leads to the following log entry (dmesg -x | tail -n 1): | |
507 | user :emerg : [ 66.137758] Kernel panic - not syncing: beer empty | |
508 | ||
509 | However, this call... | |
510 | # printf '<%d>Kernel panic - not syncing: beer empty\n' 0x800 >/dev/kmsg | |
511 | ...leads to the slightly different log entry (note the kernel facility): | |
512 | kern :emerg : [ 74.177343] Kernel panic - not syncing: beer empty | |
513 | ||
514 | Fix that by limiting the user provided facility to 8 bit right from the | |
515 | beginning and catch the truncation early. | |
516 | ||
517 | Fixes: 7ff9554bb578 ("printk: convert byte-buffer to variable-length...") | |
518 | Signed-off-by: Mathias Krause <minipli@googlemail.com> | |
519 | Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
520 | Cc: Petr Mladek <pmladek@suse.cz> | |
521 | Cc: Alex Elder <elder@linaro.org> | |
522 | Cc: Joe Perches <joe@perches.com> | |
523 | Cc: Kay Sievers <kay@vrfy.org> | |
524 | Cc: <stable@vger.kernel.org> | |
525 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
526 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
527 | ||
528 | kernel/printk/printk.c | 13 ++++++++----- | |
529 | 1 files changed, 8 insertions(+), 5 deletions(-) | |
530 | ||
531 | commit bef8fb168317597f02c00ab4075ff094dcdfd2c6 | |
532 | Author: Borislav Petkov <bp@suse.de> | |
533 | Date: Thu Nov 5 16:57:56 2015 +0100 | |
534 | ||
535 | x86/cpu: Call verify_cpu() after having entered long mode too | |
536 | ||
537 | When we get loaded by a 64-bit bootloader, kernel entry point is | |
538 | startup_64 in head_64.S. We don't trust any and all bootloaders because | |
539 | some will fiddle with CPU configuration so we go ahead and massage each | |
540 | CPU into sanity again. | |
541 | ||
542 | For example, some dell BIOSes have this XD disable feature which set | |
543 | IA32_MISC_ENABLE[34] and disable NX. This might be some dumb workaround | |
544 | for other OSes but Linux sure doesn't need it. | |
545 | ||
546 | A similar thing is present in the Surface 3 firmware - see | |
547 | https://bugzilla.kernel.org/show_bug.cgi?id=106051 - which sets this bit | |
548 | only on the BSP: | |
549 | ||
550 | # rdmsr -a 0x1a0 | |
551 | 400850089 | |
552 | 850089 | |
553 | 850089 | |
554 | 850089 | |
555 | ||
556 | I know, right?! | |
557 | ||
558 | There's not even an off switch in there. | |
559 | ||
560 | So fix all those cases by sanitizing the 64-bit entry point too. For | |
561 | that, make verify_cpu() callable in 64-bit mode also. | |
562 | ||
563 | Requested-and-debugged-by: "H. Peter Anvin" <hpa@zytor.com> | |
564 | Reported-and-tested-by: Bastien Nocera <bugzilla@hadess.net> | |
565 | Signed-off-by: Borislav Petkov <bp@suse.de> | |
566 | Cc: Matt Fleming <matt@codeblueprint.co.uk> | |
567 | Cc: Peter Zijlstra <peterz@infradead.org> | |
568 | Cc: stable@vger.kernel.org | |
569 | Link: http://lkml.kernel.org/r/1446739076-21303-1-git-send-email-bp@alien8.de | |
570 | Signed-off-by: Thomas Gleixner <tglx@linutronix.de> | |
571 | ||
572 | Conflicts: | |
573 | ||
574 | arch/x86/kernel/head_64.S | |
575 | ||
576 | arch/x86/kernel/head_64.S | 9 +++++++++ | |
577 | arch/x86/kernel/verify_cpu.S | 12 +++++++----- | |
578 | 2 files changed, 16 insertions(+), 5 deletions(-) | |
579 | ||
580 | commit 9cb084208a9589a6a5be01d2b7df88843f4b01a4 | |
581 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
582 | Date: Tue Nov 10 16:23:15 2015 +0100 | |
583 | ||
584 | af-unix: fix use-after-free with concurrent readers while splicing | |
585 | ||
586 | During splicing an af-unix socket to a pipe we have to drop all | |
587 | af-unix socket locks. While doing so we allow another reader to enter | |
588 | unix_stream_read_generic which can read, copy and finally free another | |
589 | skb. If exactly this skb is just in process of being spliced we get a | |
590 | use-after-free report by kasan. | |
591 | ||
592 | First, we must make sure to not have a free while the skb is used during | |
593 | the splice operation. We simply increment its use counter before unlocking | |
594 | the reader lock. | |
595 | ||
596 | Stream sockets have the nice characteristic that we don't care about | |
597 | zero length writes and they never reach the peer socket's queue. That | |
598 | said, we can take the UNIXCB.consumed field as the indicator if the | |
599 | skb was already freed from the socket's receive queue. If the skb was | |
600 | fully consumed after we locked the reader side again we know it has been | |
601 | dropped by a second reader. We indicate a short read to user space and | |
602 | abort the current splice operation. | |
603 | ||
604 | This bug has been found with syzkaller | |
605 | (http://github.com/google/syzkaller) by Dmitry Vyukov. | |
606 | ||
607 | Fixes: 2b514574f7e8 ("net: af_unix: implement splice for stream af_unix sockets") | |
608 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
609 | Cc: Dmitry Vyukov <dvyukov@google.com> | |
610 | Cc: Eric Dumazet <eric.dumazet@gmail.com> | |
611 | Acked-by: Eric Dumazet <edumazet@google.com> | |
612 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
613 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
614 | ||
615 | net/unix/af_unix.c | 18 ++++++++++++++++++ | |
616 | 1 files changed, 18 insertions(+), 0 deletions(-) | |
617 | ||
90cab73e PK |
618 | commit 4e75d2b7d6546add44f0951e78410b131a1e660d |
619 | Author: Brad Spengler <spender@grsecurity.net> | |
620 | Date: Sat Nov 14 15:08:46 2015 -0500 | |
621 | ||
622 | switch the default for SIZE_OVERFLOW_KILL to n, later we'll remove | |
623 | the option entirely | |
624 | Distros should make sure their users report all overflows printed to the | |
625 | kernel logs so the underlying issues can be fixed | |
626 | ||
627 | security/Kconfig | 2 +- | |
628 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
629 | ||
630 | commit 2e37eb35e0f1ba5a0feac5264a7b24d89376d0a2 | |
631 | Author: Brad Spengler <spender@grsecurity.net> | |
632 | Date: Sat Nov 14 15:07:51 2015 -0500 | |
633 | ||
634 | Resync with PaX | |
635 | ||
636 | fs/btrfs/inode.c | 12 ++++++++++++ | |
637 | 1 files changed, 12 insertions(+), 0 deletions(-) | |
638 | ||
639 | commit 2f63d2552f38c700902d17bf9b591d82f39a3fb5 | |
640 | Merge: 5e0ec21 823b1bc | |
641 | Author: Brad Spengler <spender@grsecurity.net> | |
642 | Date: Sat Nov 14 14:29:16 2015 -0500 | |
643 | ||
644 | Merge branch 'pax-test' into grsec-test | |
645 | ||
646 | commit 823b1bc5a8e670f7ddfa98ee0d83762bffab28fb | |
647 | Author: Brad Spengler <spender@grsecurity.net> | |
648 | Date: Sat Nov 14 14:28:35 2015 -0500 | |
649 | ||
650 | Update to pax-linux-4.2.6-test19.patch: | |
651 | - David Sterba updated the fix for one of the previous btrfs problems | |
652 | - Emese and Rasmus Villemoes <linux@rasmusvillemoes.dk> fixed a few bugs in the initify plugin | |
653 | - fixed debian package generation to support building out-of-tree modules with plugins, reported by Elie Roudninski <elie.roudninski@gmail.com> | |
654 | ||
655 | fs/btrfs/delayed-inode.c | 3 +- | |
656 | fs/btrfs/delayed-inode.h | 2 +- | |
657 | fs/btrfs/inode.c | 2 +- | |
658 | scripts/package/builddeb | 2 +- | |
659 | tools/gcc/initify_plugin.c | 264 ++++++++++++++++++++++++++++++-------------- | |
660 | 5 files changed, 188 insertions(+), 85 deletions(-) | |
661 | ||
76e55d26 PK |
662 | commit 5e0ec21349bb3aeead0701ef51df3086ad377979 |
663 | Author: Brad Spengler <spender@grsecurity.net> | |
664 | Date: Thu Nov 12 19:54:21 2015 -0500 | |
665 | ||
666 | Revert https://patchwork.kernel.org/patch/7585611/ for now as it's been reported | |
667 | to cause userland hangs, similar to previous bugs seen in the past | |
668 | ||
669 | fs/btrfs/inode.c | 12 ------------ | |
670 | 1 files changed, 0 insertions(+), 12 deletions(-) | |
671 | ||
672 | commit 65402b5a6125cc95c3223a0da8f2817e13bf18ec | |
673 | Author: françois romieu <romieu@fr.zoreil.com> | |
674 | Date: Wed Nov 11 23:35:18 2015 +0100 | |
675 | ||
676 | r8169: fix kasan reported skb use-after-free. | |
677 | ||
678 | Signed-off-by: Francois Romieu <romieu@fr.zoreil.com> | |
679 | Reported-by: Dave Jones <davej@codemonkey.org.uk> | |
680 | Fixes: d7d2d89d4b0af ("r8169: Add software counter for multicast packages") | |
681 | Acked-by: Eric Dumazet <edumazet@google.com> | |
682 | Acked-by: Corinna Vinschen <vinschen@redhat.com> | |
683 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
684 | ||
685 | drivers/net/ethernet/realtek/r8169.c | 3 +++ | |
686 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
687 | ||
688 | commit bbfcbb7b1e086062aa17358927e14e394830b8a3 | |
689 | Author: Anthony Lineham <anthony.lineham@alliedtelesis.co.nz> | |
690 | Date: Thu Oct 22 11:17:03 2015 +1300 | |
691 | ||
692 | netfilter: Fix removal of GRE expectation entries created by PPTP | |
693 | ||
694 | The uninitialized tuple structure caused incorrect hash calculation | |
695 | and the lookup failed. | |
696 | ||
697 | Link: https://bugzilla.kernel.org/show_bug.cgi?id=106441 | |
698 | Signed-off-by: Anthony Lineham <anthony.lineham@alliedtelesis.co.nz> | |
699 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
700 | ||
701 | net/ipv4/netfilter/nf_nat_pptp.c | 2 +- | |
702 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
703 | ||
704 | commit d7cb19f37a91603021e2bed6417766ecca315bd0 | |
705 | Author: Paolo Bonzini <pbonzini@redhat.com> | |
706 | Date: Tue Nov 10 09:14:39 2015 +0100 | |
707 | ||
708 | KVM: svm: unconditionally intercept #DB | |
709 | ||
710 | This is needed to avoid the possibility that the guest triggers | |
711 | an infinite stream of #DB exceptions (CVE-2015-8104). | |
712 | ||
713 | VMX is not affected: because it does not save DR6 in the VMCS, | |
714 | it already intercepts #DB unconditionally. | |
715 | ||
716 | Reported-by: Jan Beulich <jbeulich@suse.com> | |
717 | Cc: stable@vger.kernel.org | |
718 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | |
719 | ||
720 | arch/x86/kvm/svm.c | 14 +++----------- | |
721 | 1 files changed, 3 insertions(+), 11 deletions(-) | |
722 | ||
723 | commit 5b241ac6551e1675e1cbbc4a74fa1c698ada28f4 | |
724 | Author: Eric Northup <digitaleric@google.com> | |
725 | Date: Tue Nov 3 18:03:53 2015 +0100 | |
726 | ||
727 | KVM: x86: work around infinite loop in microcode when #AC is delivered | |
728 | ||
729 | It was found that a guest can DoS a host by triggering an infinite | |
730 | stream of "alignment check" (#AC) exceptions. This causes the | |
731 | microcode to enter an infinite loop where the core never receives | |
732 | another interrupt. The host kernel panics pretty quickly due to the | |
733 | effects (CVE-2015-5307). | |
734 | ||
735 | Signed-off-by: Eric Northup <digitaleric@google.com> | |
736 | Cc: stable@vger.kernel.org | |
737 | Signed-off-by: Paolo Bonzini <pbonzini@redhat.com> | |
738 | ||
739 | arch/x86/include/uapi/asm/svm.h | 1 + | |
740 | arch/x86/kvm/svm.c | 8 ++++++++ | |
741 | arch/x86/kvm/vmx.c | 5 ++++- | |
742 | 3 files changed, 13 insertions(+), 1 deletions(-) | |
743 | ||
744 | commit 6113725aaaf6626522b93732f29dd36370695a89 | |
745 | Author: Daniel Borkmann <daniel@iogearbox.net> | |
746 | Date: Thu Nov 5 00:01:51 2015 +0100 | |
747 | ||
748 | debugfs: fix refcount imbalance in start_creating | |
749 | ||
750 | In debugfs' start_creating(), we pin the file system to safely access | |
751 | its root. When we failed to create a file, we unpin the file system via | |
752 | failed_creating() to release the mount count and eventually the reference | |
753 | of the vfsmount. | |
754 | ||
755 | However, when we run into an error during lookup_one_len() when still | |
756 | in start_creating(), we only release the parent's mutex but not so the | |
757 | reference on the mount. Looks like it was done in the past, but after | |
758 | splitting portions of __create_file() into start_creating() and | |
759 | end_creating() via 190afd81e4a5 ("debugfs: split the beginning and the | |
760 | end of __create_file() off"), this seemed missed. Noticed during code | |
761 | review. | |
762 | ||
763 | Fixes: 190afd81e4a5 ("debugfs: split the beginning and the end of __create_file() off") | |
764 | Cc: stable@vger.kernel.org # v4.0+ | |
765 | Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> | |
766 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
767 | ||
768 | fs/debugfs/inode.c | 6 +++++- | |
769 | 1 files changed, 5 insertions(+), 1 deletions(-) | |
770 | ||
771 | commit e91f8a6717837a8a64b6e86317a1373ec9cd6c04 | |
772 | Author: Maciej W. Rozycki <macro@imgtec.com> | |
773 | Date: Mon Oct 26 15:48:19 2015 +0000 | |
774 | ||
775 | binfmt_elf: Don't clobber passed executable's file header | |
776 | ||
777 | Do not clobber the buffer space passed from `search_binary_handler' and | |
778 | originally preloaded by `prepare_binprm' with the executable's file | |
779 | header by overwriting it with its interpreter's file header. Instead | |
780 | keep the buffer space intact and directly use the data structure locally | |
781 | allocated for the interpreter's file header, fixing a bug introduced in | |
782 | 2.1.14 with loadable module support (linux-mips.org commit beb11695 | |
783 | [Import of Linux/MIPS 2.1.14], predating kernel.org repo's history). | |
784 | Adjust the amount of data read from the interpreter's file accordingly. | |
785 | ||
786 | This was not an issue before loadable module support, because back then | |
787 | `load_elf_binary' was executed only once for a given ELF executable, | |
788 | whether the function succeeded or failed. | |
789 | ||
790 | With loadable module support supported and enabled, upon a failure of | |
791 | `load_elf_binary' -- which may for example be caused by architecture | |
792 | code rejecting an executable due to a missing hardware feature requested | |
793 | in the file header -- a module load is attempted and then the function | |
794 | reexecuted by `search_binary_handler'. With the executable's file | |
795 | header replaced with its interpreter's file header the executable can | |
796 | then be erroneously accepted in this subsequent attempt. | |
797 | ||
798 | Cc: stable@vger.kernel.org # all the way back | |
799 | Signed-off-by: Maciej W. Rozycki <macro@imgtec.com> | |
800 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
801 | ||
802 | fs/binfmt_elf.c | 10 +++++----- | |
803 | 1 files changed, 5 insertions(+), 5 deletions(-) | |
804 | ||
2d1b3edc PK |
805 | commit 9c49029fe4cb9a52cb174aebfd5946a9d26b9956 |
806 | Merge: 5482e7e 7033393 | |
807 | Author: Brad Spengler <spender@grsecurity.net> | |
808 | Date: Mon Nov 9 19:51:58 2015 -0500 | |
809 | ||
810 | Merge branch 'pax-test' into grsec-test | |
811 | ||
812 | commit 70333935932c9f3eb333a354dd760b4233efcc37 | |
813 | Author: Brad Spengler <spender@grsecurity.net> | |
814 | Date: Mon Nov 9 19:51:19 2015 -0500 | |
815 | ||
816 | Update to pax-linux-4.2.6-test18.patch: | |
817 | - cleaned up the last of the FPU changes, by spender | |
818 | - fixed a few KERNEXEC regressions (backported from 4.3) | |
819 | - Emese fixed a few size overflow false positives in kvm, reported by Christian Roessner (https://bugs.gentoo.org/show_bug.cgi?id=558138#c23) | |
820 | - David Sterba fixed a few integer overflows in btrfs caught by the size overflow plugin (https://patchwork.kernel.org/patch/7585611/ and https://patchwork.kernel.org/patch/7582351/), reported by Victor, Stebalien and alan.d (https://forums.grsecurity.net/viewtopic.php?f=1&t=4284) | |
821 | ||
822 | arch/x86/include/asm/fpu/internal.h | 2 +- | |
823 | arch/x86/include/asm/fpu/types.h | 1 - | |
824 | arch/x86/kernel/apic/apic.c | 4 ++- | |
825 | arch/x86/kernel/fpu/init.c | 36 -------------------- | |
826 | arch/x86/kernel/process_64.c | 6 +-- | |
827 | arch/x86/kernel/vsmp_64.c | 13 +++++-- | |
828 | drivers/acpi/video_detect.c | 2 +- | |
829 | drivers/lguest/core.c | 2 +- | |
830 | fs/btrfs/file.c | 10 ++++-- | |
831 | fs/btrfs/inode.c | 12 ++++++ | |
832 | .../disable_size_overflow_hash.data | 5 ++- | |
833 | .../size_overflow_plugin/size_overflow_hash.data | 7 +--- | |
834 | 12 files changed, 42 insertions(+), 58 deletions(-) | |
835 | ||
836 | commit 5482e7eb4ba3c5cc90472ccdb1bfe2cec64413e2 | |
837 | Merge: 81e2642 682ba19 | |
838 | Author: Brad Spengler <spender@grsecurity.net> | |
839 | Date: Mon Nov 9 18:19:48 2015 -0500 | |
840 | ||
841 | Merge branch 'pax-test' into grsec-test | |
842 | ||
843 | Conflicts: | |
844 | drivers/pci/pci-sysfs.c | |
845 | ||
846 | commit 682ba19ce305f501c9bc5c42a76f2c7442aa22fc | |
847 | Merge: 7755256 1c02865 | |
848 | Author: Brad Spengler <spender@grsecurity.net> | |
849 | Date: Mon Nov 9 18:18:24 2015 -0500 | |
850 | ||
851 | Merge branch 'linux-4.2.y' into pax-test | |
852 | ||
29c15a34 PK |
853 | commit 81e26429b7a36f0c75de3ab42754256720c0a159 |
854 | Author: Brad Spengler <spender@grsecurity.net> | |
855 | Date: Mon Nov 9 07:37:30 2015 -0500 | |
856 | ||
857 | btrfs: fix signed overflow in btrfs_sync_file | |
858 | ||
859 | The calculation of range length in btrfs_sync_file leads to signed | |
860 | overflow. This was caught by PaX gcc SIZE_OVERFLOW plugin. | |
861 | ||
862 | https://forums.grsecurity.net/viewtopic.php?f=1&t=4284 | |
863 | ||
864 | The fsync call passes 0 and LLONG_MAX, the range length does not fit to | |
865 | loff_t and overflows, but the value is converted to u64 so it silently | |
866 | works as expected. | |
867 | ||
868 | The minimal fix is a typecast to u64, switching functions to take | |
869 | (start, end) instead of (start, len) would be more intrusive. | |
870 | ||
871 | Coccinelle script found that there's one more opencoded calculation of | |
872 | the length. | |
873 | ||
874 | <smpl> | |
875 | @@ | |
876 | loff_t start, end; | |
877 | @@ | |
878 | * end - start | |
879 | </smpl> | |
880 | ||
881 | CC: stable@vger.kernel.org | |
882 | Signed-off-by: David Sterba <dsterba@suse.com> | |
883 | ||
884 | fs/btrfs/file.c | 10 +++++++--- | |
885 | 1 files changed, 7 insertions(+), 3 deletions(-) | |
886 | ||
4d865a41 PK |
887 | commit 07fd498a96e2d589ad743851c0dec482a92e0429 |
888 | Author: Brad Spengler <spender@grsecurity.net> | |
889 | Date: Sun Nov 8 17:04:31 2015 -0500 | |
890 | ||
891 | Fix an upstream type confusion bug exposed by RANDSTRUCT: | |
892 | at the beginning of each sem_array/shmid_kernel/msg_queue | |
893 | struct is an kern_ipc_perm struct. Unlike every other place in the | |
894 | kernel where some field must be at an explicit location, there's | |
895 | no documentation at all that the kern_ipc_perm must be at the beginning | |
896 | of these structs. Previously, shmid_kernel and kern_ipc_perm were both | |
897 | randomized with RANDSTRUCT. The problem arises due to the show() handler | |
898 | for /proc for msg/sem/shm -- what it is provided is a pointer to | |
899 | a kern_ipc_perm struct (as a void *) which each show() handler then | |
900 | assumes can be implicitly cast to its own particular struct type without | |
901 | any kind of container_of being performed. Fix this by doing the proper | |
902 | type conversions for each via container_of, and randomize the sem and msg | |
903 | structs while we're at it. | |
904 | ||
905 | include/linux/msg.h | 2 +- | |
906 | include/linux/sem.h | 2 +- | |
907 | ipc/msg.c | 3 ++- | |
908 | ipc/sem.c | 3 ++- | |
909 | ipc/shm.c | 3 ++- | |
910 | 5 files changed, 8 insertions(+), 5 deletions(-) | |
911 | ||
912 | commit 6591e1a526c544936975cd3515d8def09e8026f0 | |
913 | Author: Brad Spengler <spender@grsecurity.net> | |
914 | Date: Tue Nov 3 19:36:05 2015 -0500 | |
915 | ||
916 | Properly fix the PCI sysfs node check that was recently improperly fixed | |
917 | upstream (it's under CAP_SYS_ADMIN so it's not really serious) | |
918 | Reported by Mathias Krause | |
919 | ||
920 | drivers/pci/pci-sysfs.c | 2 +- | |
921 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
922 | ||
923 | commit ece03d4d07f29634687b2ea5edb7cab23888cff3 | |
924 | Merge: 715e674 7755256 | |
925 | Author: Brad Spengler <spender@grsecurity.net> | |
926 | Date: Mon Nov 2 21:32:10 2015 -0500 | |
927 | ||
928 | Merge branch 'pax-test' into grsec-test | |
929 | ||
930 | commit 775525660a6353feb261ad6232f6acbc23826bf4 | |
931 | Author: Brad Spengler <spender@grsecurity.net> | |
932 | Date: Mon Nov 2 21:31:21 2015 -0500 | |
933 | ||
934 | Update to pax-linux-4.2.5-test17.patch: | |
935 | - Emese fixed a bunch of size overflow reports: | |
936 | - https://forums.grsecurity.net/viewtopic.php?f=3&t=4290 | |
937 | - https://forums.grsecurity.net/viewtopic.php?f=3&t=4291 | |
938 | - https://forums.grsecurity.net/viewtopic.php?f=3&t=4288 | |
939 | - https://forums.grsecurity.net/viewtopic.php?f=3&t=4285 | |
940 | - https://forums.grsecurity.net/viewtopic.php?f=3&t=4283 | |
941 | - https://forums.grsecurity.net/viewtopic.php?f=3&t=4287 | |
942 | - https://forums.grsecurity.net/viewtopic.php?f=3&t=4289 | |
943 | - https://bugs.archlinux.org/task/46798 | |
944 | - fixed the x86 fpu code some more, reported by spender and others (https://bugs.gentoo.org/show_bug.cgi?id=563804, https://bugs.archlinux.org/task/46764) | |
945 | ||
946 | arch/x86/include/asm/fpu/internal.h | 4 +- | |
947 | arch/x86/kernel/fpu/core.c | 2 +- | |
948 | arch/x86/kernel/process.c | 3 +- | |
949 | arch/x86/kernel/process_64.c | 6 +- | |
950 | drivers/usb/class/cdc-acm.h | 2 +- | |
951 | drivers/video/console/fbcon.c | 2 +- | |
952 | fs/dlm/lowcomms.c | 2 +- | |
953 | include/linux/usb.h | 8 +- | |
954 | .../disable_size_overflow_hash.data | 15 +- | |
955 | .../size_overflow_plugin/intentional_overflow.c | 3 + | |
956 | .../size_overflow_plugin/size_overflow_hash.data | 373 ++++++++++++++++---- | |
957 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 3 +- | |
958 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
959 | 13 files changed, 329 insertions(+), 96 deletions(-) | |
960 | ||
0a2b3309 PK |
961 | commit 715e674a838f08748044bce459380762e9c1cd29 |
962 | Author: Sasha Levin <sasha.levin@oracle.com> | |
963 | Date: Wed Oct 7 11:03:28 2015 -0500 | |
964 | ||
965 | PCI: Prevent out of bounds access in numa_node override | |
966 | ||
967 | 63692df103e9 ("PCI: Allow numa_node override via sysfs") didn't check that | |
968 | the numa node provided by userspace is valid. Passing a node number too | |
969 | high would attempt to access invalid memory and trigger a kernel panic. | |
970 | ||
971 | Fixes: 63692df103e9 ("PCI: Allow numa_node override via sysfs") | |
972 | Signed-off-by: Sasha Levin <sasha.levin@oracle.com> | |
973 | Signed-off-by: Bjorn Helgaas <bhelgaas@google.com> | |
974 | CC: stable@vger.kernel.org # v3.19+ | |
975 | ||
976 | drivers/pci/pci-sysfs.c | 2 +- | |
977 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
978 | ||
979 | commit 6abe1bb892fe394df80dd4267a8bd2874d537e4e | |
980 | Author: David Howells <dhowells@redhat.com> | |
981 | Date: Fri Sep 18 11:45:12 2015 +0100 | |
982 | ||
983 | ovl: use O_LARGEFILE in ovl_copy_up() | |
984 | ||
985 | Open the lower file with O_LARGEFILE in ovl_copy_up(). | |
986 | ||
987 | Pass O_LARGEFILE unconditionally in ovl_copy_up_data() as it's purely for | |
988 | catching 32-bit userspace dealing with a file large enough that it'll be | |
989 | mishandled if the application isn't aware that there might be an integer | |
990 | overflow. Inside the kernel, there shouldn't be any problems. | |
991 | ||
992 | Reported-by: Ulrich Obergfell <uobergfe@redhat.com> | |
993 | Signed-off-by: David Howells <dhowells@redhat.com> | |
994 | Signed-off-by: Miklos Szeredi <miklos@szeredi.hu> | |
995 | Cc: <stable@vger.kernel.org> # v3.18+ | |
996 | ||
997 | fs/overlayfs/copy_up.c | 4 ++-- | |
998 | 1 files changed, 2 insertions(+), 2 deletions(-) | |
999 | ||
1000 | commit bf5e23398e4a82e28fe0801337a4b78ca951a1d9 | |
1001 | Author: David Howells <dhowells@redhat.com> | |
1002 | Date: Fri Sep 18 11:45:22 2015 +0100 | |
1003 | ||
1004 | ovl: fix dentry reference leak | |
1005 | ||
1006 | In ovl_copy_up_locked(), newdentry is leaked if the function exits through | |
1007 | out_cleanup as this just to out after calling ovl_cleanup() - which doesn't | |
1008 | actually release the ref on newdentry. | |
1009 | ||
1010 | The out_cleanup segment should instead exit through out2 as certainly | |
1011 | newdentry leaks - and possibly upper does also, though this isn't caught | |
1012 | given the catch of newdentry. | |
1013 | ||
1014 | Without this fix, something like the following is seen: | |
1015 | ||
1016 | BUG: Dentry ffff880023e9eb20{i=f861,n=#ffff880023e82d90} still in use (1) [unmount of tmpfs tmpfs] | |
1017 | BUG: Dentry ffff880023ece640{i=0,n=bigfile} still in use (1) [unmount of tmpfs tmpfs] | |
1018 | ||
1019 | when unmounting the upper layer after an error occurred in copyup. | |
1020 | ||
1021 | An error can be induced by creating a big file in a lower layer with | |
1022 | something like: | |
1023 | ||
1024 | dd if=/dev/zero of=/lower/a/bigfile bs=65536 count=1 seek=$((0xf000)) | |
1025 | ||
1026 | to create a large file (4.1G). Overlay an upper layer that is too small | |
1027 | (on tmpfs might do) and then induce a copy up by opening it writably. | |
1028 | ||
1029 | Reported-by: Ulrich Obergfell <uobergfe@redhat.com> | |
1030 | Signed-off-by: David Howells <dhowells@redhat.com> | |
1031 | Signed-off-by: Miklos Szeredi <miklos@szeredi.hu> | |
1032 | Cc: <stable@vger.kernel.org> # v3.18+ | |
1033 | ||
1034 | fs/overlayfs/copy_up.c | 2 +- | |
1035 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1036 | ||
1037 | commit da93976d3355abae09d9fd6a68e7dea77ed619d1 | |
1038 | Author: Miklos Szeredi <miklos@szeredi.hu> | |
1039 | Date: Mon Oct 12 15:56:20 2015 +0200 | |
1040 | ||
1041 | ovl: fix open in stacked overlay | |
1042 | ||
1043 | If two overlayfs filesystems are stacked on top of each other, then we need | |
1044 | recursion in ovl_d_select_inode(). | |
1045 | ||
1046 | I guess d_backing_inode() is supposed to do that. But currently it doesn't | |
1047 | and that functionality is open coded in vfs_open(). This is now copied | |
1048 | into ovl_d_select_inode() to fix this regression. | |
1049 | ||
1050 | Reported-by: Alban Crequy <alban.crequy@gmail.com> | |
1051 | Signed-off-by: Miklos Szeredi <miklos@szeredi.hu> | |
1052 | Fixes: 4bacc9c9234c ("overlayfs: Make f_path always point to the overlay...") | |
1053 | Cc: David Howells <dhowells@redhat.com> | |
1054 | Cc: <stable@vger.kernel.org> # v4.2+ | |
1055 | ||
1056 | fs/overlayfs/inode.c | 3 +++ | |
1057 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
1058 | ||
1059 | commit 0ddd9cf6149717882b81c946149bf55332d763ae | |
1060 | Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru> | |
1061 | Date: Mon Aug 24 15:57:18 2015 +0300 | |
1062 | ||
1063 | ovl: free stack of paths in ovl_fill_super | |
1064 | ||
1065 | This fixes small memory leak after mount. | |
1066 | ||
1067 | Kmemleak report: | |
1068 | ||
1069 | unreferenced object 0xffff88003683fe00 (size 16): | |
1070 | comm "mount", pid 2029, jiffies 4294909563 (age 33.380s) | |
1071 | hex dump (first 16 bytes): | |
1072 | 20 27 1f bb 00 88 ff ff 40 4b 0f 36 02 88 ff ff '......@K.6.... | |
1073 | backtrace: | |
1074 | [<ffffffff811f8cd4>] create_object+0x124/0x2c0 | |
1075 | [<ffffffff817a059b>] kmemleak_alloc+0x7b/0xc0 | |
1076 | [<ffffffff811dffe6>] __kmalloc+0x106/0x340 | |
1077 | [<ffffffffa01b7a29>] ovl_fill_super+0x389/0x9a0 [overlay] | |
1078 | [<ffffffff81200ac4>] mount_nodev+0x54/0xa0 | |
1079 | [<ffffffffa01b7118>] ovl_mount+0x18/0x20 [overlay] | |
1080 | [<ffffffff81201ab3>] mount_fs+0x43/0x170 | |
1081 | [<ffffffff81220d34>] vfs_kern_mount+0x74/0x170 | |
1082 | [<ffffffff812233ad>] do_mount+0x22d/0xdf0 | |
1083 | [<ffffffff812242cb>] SyS_mount+0x7b/0xc0 | |
1084 | [<ffffffff817b6bee>] entry_SYSCALL_64_fastpath+0x12/0x76 | |
1085 | [<ffffffffffffffff>] 0xffffffffffffffff | |
1086 | ||
1087 | Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru> | |
1088 | Signed-off-by: Miklos Szeredi <miklos@szeredi.hu> | |
1089 | Fixes: a78d9f0d5d5c ("ovl: support multiple lower layers") | |
1090 | Cc: <stable@vger.kernel.org> # v4.0+ | |
1091 | ||
1092 | fs/overlayfs/super.c | 1 + | |
1093 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
1094 | ||
1095 | commit b86575c9973b9ad55d659fd8a6be8f864435ad0e | |
1096 | Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru> | |
1097 | Date: Mon Aug 24 15:57:19 2015 +0300 | |
1098 | ||
1099 | ovl: free lower_mnt array in ovl_put_super | |
1100 | ||
1101 | This fixes memory leak after umount. | |
1102 | ||
1103 | Kmemleak report: | |
1104 | ||
1105 | unreferenced object 0xffff8800ba791010 (size 8): | |
1106 | comm "mount", pid 2394, jiffies 4294996294 (age 53.920s) | |
1107 | hex dump (first 8 bytes): | |
1108 | 20 1c 13 02 00 88 ff ff ....... | |
1109 | backtrace: | |
1110 | [<ffffffff811f8cd4>] create_object+0x124/0x2c0 | |
1111 | [<ffffffff817a059b>] kmemleak_alloc+0x7b/0xc0 | |
1112 | [<ffffffff811dffe6>] __kmalloc+0x106/0x340 | |
1113 | [<ffffffffa0152bfc>] ovl_fill_super+0x55c/0x9b0 [overlay] | |
1114 | [<ffffffff81200ac4>] mount_nodev+0x54/0xa0 | |
1115 | [<ffffffffa0152118>] ovl_mount+0x18/0x20 [overlay] | |
1116 | [<ffffffff81201ab3>] mount_fs+0x43/0x170 | |
1117 | [<ffffffff81220d34>] vfs_kern_mount+0x74/0x170 | |
1118 | [<ffffffff812233ad>] do_mount+0x22d/0xdf0 | |
1119 | [<ffffffff812242cb>] SyS_mount+0x7b/0xc0 | |
1120 | [<ffffffff817b6bee>] entry_SYSCALL_64_fastpath+0x12/0x76 | |
1121 | [<ffffffffffffffff>] 0xffffffffffffffff | |
1122 | ||
1123 | Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru> | |
1124 | Signed-off-by: Miklos Szeredi <miklos@szeredi.hu> | |
1125 | Fixes: dd662667e6d3 ("ovl: add mutli-layer infrastructure") | |
1126 | Cc: <stable@vger.kernel.org> # v4.0+ | |
1127 | ||
1128 | fs/overlayfs/super.c | 1 + | |
1129 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
1130 | ||
1131 | commit 9f49b5376fae99cd590d13726e2633bc0a53b6db | |
1132 | Author: Linus Torvalds <torvalds@linux-foundation.org> | |
1133 | Date: Sun Nov 1 17:09:15 2015 -0800 | |
1134 | ||
1135 | mm: get rid of 'vmalloc_info' from /proc/meminfo | |
1136 | ||
1137 | It turns out that at least some versions of glibc end up reading | |
1138 | /proc/meminfo at every single startup, because glibc wants to know the | |
1139 | amount of memory the machine has. And while that's arguably insane, | |
1140 | it's just how things are. | |
1141 | ||
1142 | And it turns out that it's not all that expensive most of the time, but | |
1143 | the vmalloc information statistics (amount of virtual memory used in the | |
1144 | vmalloc space, and the biggest remaining chunk) can be rather expensive | |
1145 | to compute. | |
1146 | ||
1147 | The 'get_vmalloc_info()' function actually showed up on my profiles as | |
1148 | 4% of the CPU usage of "make test" in the git source repository, because | |
1149 | the git tests are lots of very short-lived shell-scripts etc. | |
1150 | ||
1151 | It turns out that apparently this same silly vmalloc info gathering | |
1152 | shows up on the facebook servers too, according to Dave Jones. So it's | |
1153 | not just "make test" for git. | |
1154 | ||
1155 | We had two patches to just cache the information (one by me, one by | |
1156 | Ingo) to mitigate this issue, but the whole vmalloc information of of | |
1157 | rather dubious value to begin with, and people who *actually* want to | |
1158 | know what the situation is wrt the vmalloc area should just look at the | |
1159 | much more complete /proc/vmallocinfo instead. | |
1160 | ||
1161 | In fact, according to my testing - and perhaps more importantly, | |
1162 | according to that big search engine in the sky: Google - there is | |
1163 | nothing out there that actually cares about those two expensive fields: | |
1164 | VmallocUsed and VmallocChunk. | |
1165 | ||
1166 | So let's try to just remove them entirely. Actually, this just removes | |
1167 | the computation and reports the numbers as zero for now, just to try to | |
1168 | be minimally intrusive. | |
1169 | ||
1170 | If this breaks anything, we'll obviously have to re-introduce the code | |
1171 | to compute this all and add the caching patches on top. But if given | |
1172 | the option, I'd really prefer to just remove this bad idea entirely | |
1173 | rather than add even more code to work around our historical mistake | |
1174 | that likely nobody really cares about. | |
1175 | ||
1176 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
1177 | ||
1178 | fs/proc/meminfo.c | 7 ++----- | |
1179 | include/linux/vmalloc.h | 12 ------------ | |
1180 | mm/vmalloc.c | 47 ----------------------------------------------- | |
1181 | 3 files changed, 2 insertions(+), 64 deletions(-) | |
1182 | ||
1183 | commit 66425129a550275398f886498d957284539bb331 | |
1184 | Author: Marek Vasut <marex@denx.de> | |
1185 | Date: Fri Oct 30 13:48:19 2015 +0100 | |
1186 | ||
1187 | can: Use correct type in sizeof() in nla_put() | |
1188 | ||
1189 | The sizeof() is invoked on an incorrect variable, likely due to some | |
1190 | copy-paste error, and this might result in memory corruption. Fix this. | |
1191 | ||
1192 | Signed-off-by: Marek Vasut <marex@denx.de> | |
1193 | Cc: Wolfgang Grandegger <wg@grandegger.com> | |
1194 | Cc: netdev@vger.kernel.org | |
1195 | Cc: linux-stable <stable@vger.kernel.org> | |
1196 | Signed-off-by: Marc Kleine-Budde <mkl@pengutronix.de> | |
1197 | ||
1198 | drivers/net/can/dev.c | 2 +- | |
1199 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1200 | ||
1201 | commit 8c8e802a86f8faf2519710db043339e1cc953bc4 | |
1202 | Author: Brad Spengler <spender@grsecurity.net> | |
1203 | Date: Mon Nov 2 17:20:52 2015 -0500 | |
1204 | ||
1205 | Fix the FPU code properly by copying the dynamically-sized FPU state on | |
1206 | each clone of the task struct, making it equivalent to the new FPU-in-task-struct code | |
1207 | ||
1208 | Fix is from the PaX Team | |
1209 | ||
1210 | arch/x86/kernel/process.c | 2 ++ | |
1211 | 1 files changed, 2 insertions(+), 0 deletions(-) | |
1212 | ||
1213 | commit 036bc2e2231c76f7eb470bfef67b6bc26187aeae | |
1214 | Author: Brad Spengler <spender@grsecurity.net> | |
1215 | Date: Mon Nov 2 17:19:43 2015 -0500 | |
1216 | ||
1217 | Revert the forced eagerfpu since it's now fixed properly | |
1218 | ||
1219 | arch/x86/kernel/fpu/init.c | 3 --- | |
1220 | 1 files changed, 0 insertions(+), 3 deletions(-) | |
1221 | ||
1222 | commit a08ab82bcf321704f6a228c7924b860510c6d610 | |
1223 | Author: Carol L Soto <clsoto@linux.vnet.ibm.com> | |
1224 | Date: Tue Oct 27 17:36:20 2015 +0200 | |
1225 | ||
1226 | net/mlx4: Copy/set only sizeof struct mlx4_eqe bytes | |
1227 | ||
1228 | When doing memcpy/memset of EQEs, we should use sizeof struct | |
1229 | mlx4_eqe as the base size and not caps.eqe_size which could be bigger. | |
1230 | ||
1231 | If caps.eqe_size is bigger than the struct mlx4_eqe then we corrupt | |
1232 | data in the master context. | |
1233 | ||
1234 | When using a 64 byte stride, the memcpy copied over 63 bytes to the | |
1235 | slave_eq structure. This resulted in copying over the entire eqe of | |
1236 | interest, including its ownership bit -- and also 31 bytes of garbage | |
1237 | into the next WQE in the slave EQ -- which did NOT include the ownership | |
1238 | bit (and therefore had no impact). | |
1239 | ||
1240 | However, once the stride is increased to 128, we are overwriting the | |
1241 | ownership bits of *three* eqes in the slave_eq struct. This results | |
1242 | in an incorrect ownership bit for those eqes, which causes the eq to | |
1243 | seem to be full. The issue therefore surfaced only once 128-byte EQEs | |
1244 | started being used in SRIOV and (overarchitectures that have 128/256 | |
1245 | byte cache-lines such as PPC) - e.g after commit 77507aa249ae | |
1246 | "net/mlx4_core: Enable CQE/EQE stride support". | |
1247 | ||
1248 | Fixes: 08ff32352d6f ('mlx4: 64-byte CQE/EQE support') | |
1249 | Signed-off-by: Carol L Soto <clsoto@linux.vnet.ibm.com> | |
1250 | Signed-off-by: Jack Morgenstein <jackm@dev.mellanox.co.il> | |
1251 | Signed-off-by: Or Gerlitz <ogerlitz@mellanox.com> | |
1252 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1253 | ||
1254 | drivers/net/ethernet/mellanox/mlx4/cmd.c | 2 +- | |
1255 | drivers/net/ethernet/mellanox/mlx4/eq.c | 2 +- | |
1256 | 2 files changed, 2 insertions(+), 2 deletions(-) | |
1257 | ||
1258 | commit 811ab3b52935612def289efa5e9e2aa973f16f26 | |
1259 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
1260 | Date: Wed Oct 28 13:21:04 2015 +0100 | |
1261 | ||
1262 | ipv6: protect mtu calculation of wrap-around and infinite loop by rounding issues | |
1263 | ||
1264 | Raw sockets with hdrincl enabled can insert ipv6 extension headers | |
1265 | right into the data stream. In case we need to fragment those packets, | |
1266 | we reparse the options header to find the place where we can insert | |
1267 | the fragment header. If the extension headers exceed the link's MTU we | |
1268 | actually cannot make progress in such a case. | |
1269 | ||
1270 | Instead of ending up in broken arithmetic or rounding towards 0 and | |
1271 | entering an endless loop in ip6_fragment, just prevent those cases by | |
1272 | aborting early and signal -EMSGSIZE to user space. | |
1273 | ||
1274 | This is the second version of the patch which doesn't use the | |
1275 | overflow_usub function, which got reverted for now. | |
1276 | ||
1277 | Suggested-by: Linus Torvalds <torvalds@linux-foundation.org> | |
1278 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
1279 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
1280 | Cc: Dmitry Vyukov <dvyukov@google.com> | |
1281 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
1282 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1283 | ||
1284 | net/ipv6/ip6_output.c | 2 ++ | |
1285 | 1 files changed, 2 insertions(+), 0 deletions(-) | |
1286 | ||
1287 | commit f074980442c7c3ff4a75c711ff18204dfb4131b8 | |
1288 | Author: Brad Spengler <spender@grsecurity.net> | |
1289 | Date: Thu Oct 29 18:19:02 2015 -0400 | |
1290 | ||
1291 | Revert "ipv6: protect mtu calculation of wrap-around and infinite loop by rounding issues" | |
1292 | ||
1293 | This reverts commit 18d5034650b637ec479f41d98e3912398b3e3efc. | |
1294 | ||
1295 | net/ipv6/ip6_output.c | 6 +----- | |
1296 | 1 files changed, 1 insertions(+), 5 deletions(-) | |
1297 | ||
1298 | commit 53e629c2d13ed09f4c889925482606f82a65bd1d | |
1299 | Author: Brad Spengler <spender@grsecurity.net> | |
1300 | Date: Thu Oct 29 18:18:55 2015 -0400 | |
1301 | ||
1302 | Revert "overflow-arith: begin to add support for overflow builtin functions" | |
1303 | ||
1304 | This reverts commit cfd0008de8db38841f7f06b979482900994717b9. | |
1305 | ||
1306 | Conflicts: | |
1307 | ||
1308 | include/linux/compiler-gcc.h | |
1309 | ||
1310 | include/linux/compiler-gcc.h | 4 ---- | |
1311 | include/linux/overflow-arith.h | 18 ------------------ | |
1312 | 2 files changed, 0 insertions(+), 22 deletions(-) | |
1313 | ||
1314 | commit 225122602b5b7fd58ec5c2a4a1a4a9a29fe7a02a | |
1315 | Author: Brad Spengler <spender@grsecurity.net> | |
1316 | Date: Thu Oct 29 09:00:11 2015 -0400 | |
1317 | ||
1318 | Update size_overflow plugin | |
1319 | ||
1320 | .../size_overflow_plugin/intentional_overflow.c | 3 +++ | |
1321 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
1322 | 2 files changed, 4 insertions(+), 1 deletions(-) | |
1323 | ||
c3f73f4b PK |
1324 | commit 2bf85cb1c3df45d59d8b59aeacf63cbbee360175 |
1325 | Author: Brad Spengler <spender@grsecurity.net> | |
1326 | Date: Thu Oct 29 08:52:07 2015 -0400 | |
1327 | ||
1328 | Temporarily disable the builtin_overflow again as the kernexec plugin also has problems with it | |
1329 | ||
1330 | include/linux/compiler-gcc.h | 2 +- | |
1331 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1332 | ||
d60a514c PK |
1333 | commit a41c8c4d880b6005e874bf5440e24713da8483cd |
1334 | Author: Brad Spengler <spender@grsecurity.net> | |
1335 | Date: Wed Oct 28 19:28:30 2015 -0400 | |
1336 | ||
1337 | temporarily work around issue with the dynamic FPU state and lazy FPU mode | |
1338 | upstream configures FPU mode based on the eagerfpu variable before it's ever actually | |
1339 | set by the commandline parser (so eagerfpu= on the commandline has no effect) | |
1340 | ||
1341 | arch/x86/kernel/fpu/init.c | 3 +++ | |
1342 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
1343 | ||
1344 | commit 8452f9d5cfabda9228496050a16bc8728c0ebbb7 | |
1345 | Author: Brad Spengler <spender@grsecurity.net> | |
1346 | Date: Wed Oct 28 19:25:55 2015 -0400 | |
1347 | ||
1348 | Remove/reorder some code due to the reverting of the FPU-state-in-task_struct code | |
1349 | ||
1350 | arch/x86/include/asm/fpu/types.h | 69 ++++++++++++++++++-------------------- | |
1351 | arch/x86/include/asm/processor.h | 10 ++---- | |
1352 | arch/x86/kernel/fpu/init.c | 20 ----------- | |
1353 | include/linux/sched.h | 4 +- | |
1354 | 4 files changed, 38 insertions(+), 65 deletions(-) | |
1355 | ||
1356 | commit c2127bd4215f8f02a1391bef3bde55d0bb1c19bc | |
1357 | Author: Brad Spengler <spender@grsecurity.net> | |
1358 | Date: Tue Oct 27 23:38:11 2015 -0400 | |
1359 | ||
1360 | fix typo | |
1361 | ||
1362 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 2 +- | |
1363 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1364 | ||
1365 | commit c588def7b5713c31fef2b848bfebf0d727791b82 | |
1366 | Author: Brad Spengler <spender@grsecurity.net> | |
1367 | Date: Tue Oct 27 21:09:04 2015 -0400 | |
1368 | ||
1369 | remove the PAGE_SIZE padding from fpregs_state since it's not included as part | |
1370 | of the task struct | |
1371 | ||
1372 | arch/x86/include/asm/fpu/types.h | 1 - | |
1373 | 1 files changed, 0 insertions(+), 1 deletions(-) | |
1374 | ||
1375 | commit 3bd1e5915353fee1f347577f0e80d925910695f9 | |
1376 | Author: Herbert Xu <herbert@gondor.apana.org.au> | |
1377 | Date: Mon Oct 19 18:23:57 2015 +0800 | |
1378 | ||
1379 | crypto: api - Only abort operations on fatal signal | |
1380 | ||
1381 | Currently a number of Crypto API operations may fail when a signal | |
1382 | occurs. This causes nasty problems as the caller of those operations | |
1383 | are often not in a good position to restart the operation. | |
1384 | ||
1385 | In fact there is currently no need for those operations to be | |
1386 | interrupted by user signals at all. All we need is for them to | |
1387 | be killable. | |
1388 | ||
1389 | This patch replaces the relevant calls of signal_pending with | |
1390 | fatal_signal_pending, and wait_for_completion_interruptible with | |
1391 | wait_for_completion_killable, respectively. | |
1392 | ||
1393 | Cc: stable@vger.kernel.org | |
1394 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
1395 | ||
1396 | crypto/ablkcipher.c | 2 +- | |
1397 | crypto/algapi.c | 2 +- | |
1398 | crypto/api.c | 6 +++--- | |
1399 | crypto/crypto_user.c | 2 +- | |
1400 | 4 files changed, 6 insertions(+), 6 deletions(-) | |
1401 | ||
1402 | commit 2b278f02de77bd3d0ffb4c64bc56b702d4e27e49 | |
1403 | Author: Brad Spengler <spender@grsecurity.net> | |
1404 | Date: Tue Oct 27 18:02:42 2015 -0400 | |
1405 | ||
1406 | Update a comment | |
1407 | ||
1408 | arch/x86/include/asm/fpu/internal.h | 2 +- | |
1409 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1410 | ||
1411 | commit 66cbab70d87485c22946485bfd375c3e88140213 | |
1412 | Merge: cad84c5 8610c94 | |
1413 | Author: Brad Spengler <spender@grsecurity.net> | |
1414 | Date: Tue Oct 27 07:44:23 2015 -0400 | |
1415 | ||
1416 | Merge branch 'pax-test' into grsec-test | |
1417 | ||
1418 | commit 8610c949a76ac2a09b334f41c35cb8e7a04a0ce8 | |
1419 | Merge: a851b41 f69d603 | |
1420 | Author: Brad Spengler <spender@grsecurity.net> | |
1421 | Date: Tue Oct 27 07:44:14 2015 -0400 | |
1422 | ||
1423 | Merge branch 'linux-4.2.y' into pax-test | |
1424 | ||
1425 | commit cad84c52f547c8ba47ddcf39d1f260f55350f0c2 | |
1426 | Author: Brad Spengler <spender@grsecurity.net> | |
1427 | Date: Mon Oct 26 07:33:21 2015 -0400 | |
1428 | ||
1429 | re-enable builtin_overflow support | |
1430 | ||
1431 | include/linux/compiler-gcc.h | 3 +-- | |
1432 | 1 files changed, 1 insertions(+), 2 deletions(-) | |
1433 | ||
1434 | commit 6e281aebbf456c27ce530055d5668bc5829c02a8 | |
1435 | Author: Brad Spengler <spender@grsecurity.net> | |
1436 | Date: Mon Oct 26 07:32:15 2015 -0400 | |
1437 | ||
1438 | Update the size_overflow plugin from Emese to fix the ICE on builtin_overflow use | |
1439 | ||
1440 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 3 ++- | |
1441 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
1442 | 2 files changed, 3 insertions(+), 2 deletions(-) | |
1443 | ||
1444 | commit 75ed97df02fc6eb862df511da6ca690de3d0f15c | |
1445 | Author: Brad Spengler <spender@grsecurity.net> | |
1446 | Date: Mon Oct 26 07:17:00 2015 -0400 | |
1447 | ||
1448 | Fix from Emese for a size_overflow report in the fbcon code on the | |
1449 | 'softback_lines' global variable | |
1450 | ||
1451 | drivers/video/console/fbcon.c | 2 +- | |
1452 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1453 | ||
134f4180 PK |
1454 | commit b088cabd42c6fe825baa27f40ab450ad75e571d3 |
1455 | Author: Brad Spengler <spender@grsecurity.net> | |
1456 | Date: Sun Oct 25 18:09:55 2015 -0400 | |
1457 | ||
1458 | Temporarily work around an ICE on GCC >= 5 reported by Daniel Micay due to | |
1459 | backporting of __builtin_usub_overflow | |
1460 | ||
1461 | include/linux/compiler-gcc.h | 3 ++- | |
1462 | 1 files changed, 2 insertions(+), 1 deletions(-) | |
1463 | ||
1464 | commit ba858f46865c6751af3ddba03b176e4d5ecf85c1 | |
1465 | Author: Brad Spengler <spender@grsecurity.net> | |
1466 | Date: Sun Oct 25 17:59:17 2015 -0400 | |
1467 | ||
1468 | Update size_overflow hash table | |
1469 | ||
1470 | .../disable_size_overflow_hash.data | 7 +++++++ | |
1471 | .../size_overflow_plugin/size_overflow_hash.data | 9 +-------- | |
1472 | 2 files changed, 8 insertions(+), 8 deletions(-) | |
1473 | ||
1474 | commit ba803bceaea0283b38e91c1d3176bf0671786269 | |
1475 | Author: Brad Spengler <spender@grsecurity.net> | |
1476 | Date: Sun Oct 25 15:31:17 2015 -0400 | |
1477 | ||
1478 | Fix oversight in pipacs' removal of FPU state from the task struct: | |
1479 | fpu_copy was performing an OOB copy starting from the address of the 'state' | |
1480 | pointer in the fpu struct instead of starting from the address pointed | |
1481 | to by the state pointer. Reported at: | |
1482 | https://bugs.archlinux.org/task/46764 | |
1483 | ||
1484 | arch/x86/include/asm/fpu/internal.h | 4 ++-- | |
1485 | arch/x86/kernel/fpu/core.c | 2 +- | |
1486 | 2 files changed, 3 insertions(+), 3 deletions(-) | |
1487 | ||
46c36e49 PK |
1488 | commit 26e7d31c5b5c970c50297d2b8be165e9c9ab9d83 |
1489 | Merge: 85d8735 a851b41 | |
1490 | Author: Brad Spengler <spender@grsecurity.net> | |
1491 | Date: Sun Oct 25 13:39:21 2015 -0400 | |
1492 | ||
1493 | Merge branch 'pax-test' into grsec-test | |
1494 | ||
1495 | commit a851b41415a0402d76f10712b6950ddff3872a22 | |
1496 | Author: Brad Spengler <spender@grsecurity.net> | |
1497 | Date: Sun Oct 25 13:38:25 2015 -0400 | |
1498 | ||
1499 | Update to latest size_overflow plugin release: | |
1500 | Temporarily ignore bitfield types: https://bugs.archlinux.org/task/46798 | |
1501 | Use SI or wider type for the size_overflow type: https://forums.grsecurity.net/viewtopic.php?t=4293&p=15655#p15655 | |
1502 | ||
1503 | .../size_overflow_plugin/intentional_overflow.c | 3 +++ | |
1504 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
1505 | .../size_overflow_plugin/size_overflow_transform.c | 7 +++++++ | |
1506 | .../size_overflow_transform_core.c | 2 -- | |
1507 | 4 files changed, 11 insertions(+), 3 deletions(-) | |
1508 | ||
1509 | commit 85d8735a1d1190e3ad2e3f032ae88f811090fdfc | |
1510 | Author: Brad Spengler <spender@grsecurity.net> | |
1511 | Date: Sun Oct 25 13:01:32 2015 -0400 | |
1512 | ||
1513 | fpu doesn't live on the task_struct with PaX, so don't even bother computing some task_size | |
1514 | variable that isn't used for anything | |
1515 | ||
1516 | arch/x86/kernel/fpu/init.c | 14 -------------- | |
1517 | 1 files changed, 0 insertions(+), 14 deletions(-) | |
1518 | ||
1519 | commit cfd0008de8db38841f7f06b979482900994717b9 | |
1520 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
1521 | Date: Fri Oct 16 11:32:42 2015 +0200 | |
1522 | ||
1523 | overflow-arith: begin to add support for overflow builtin functions | |
1524 | ||
1525 | The idea of the overflow-arith.h header is to collect overflow checking | |
1526 | functions in one central place. | |
1527 | ||
1528 | If gcc compiler supports the __builtin_overflow_* builtins we use them | |
1529 | because they might give better performance, otherwise the code falls | |
1530 | back to normal overflow checking functions. | |
1531 | ||
1532 | The builtin_overflow functions are supported by gcc-5 and clang. The | |
1533 | matter of supporting clang is to just provide a corresponding | |
1534 | CC_HAVE_BUILTIN_OVERFLOW, because the specific overflow checking builtins | |
1535 | don't differ between gcc and clang. | |
1536 | ||
1537 | I just provide overflow_usub function here as I intend this to get merged | |
1538 | into net, more functions will definitely follow as they are needed. | |
1539 | ||
1540 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
1541 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1542 | ||
1543 | include/linux/compiler-gcc.h | 4 ++++ | |
1544 | include/linux/overflow-arith.h | 18 ++++++++++++++++++ | |
1545 | 2 files changed, 22 insertions(+), 0 deletions(-) | |
1546 | ||
1547 | commit 18d5034650b637ec479f41d98e3912398b3e3efc | |
1548 | Author: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
1549 | Date: Fri Oct 16 11:32:43 2015 +0200 | |
1550 | ||
1551 | ipv6: protect mtu calculation of wrap-around and infinite loop by rounding issues | |
1552 | ||
1553 | Raw sockets with hdrincl enabled can insert ipv6 extension headers | |
1554 | right into the data stream. In case we need to fragment those packets, | |
1555 | we reparse the options header to find the place where we can insert | |
1556 | the fragment header. If the extension headers exceed the link's MTU we | |
1557 | actually cannot make progress in such a case. | |
1558 | ||
1559 | Instead of ending up in broken arithmetic or rounding towards 0 and | |
1560 | entering an endless loop in ip6_fragment, just prevent those cases by | |
1561 | aborting early and signal -EMSGSIZE to user space. | |
1562 | ||
1563 | Reported-by: Dmitry Vyukov <dvyukov@google.com> | |
1564 | Cc: Dmitry Vyukov <dvyukov@google.com> | |
1565 | Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> | |
1566 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1567 | ||
1568 | net/ipv6/ip6_output.c | 6 +++++- | |
1569 | 1 files changed, 5 insertions(+), 1 deletions(-) | |
1570 | ||
1571 | commit 0e1d1c0f1981b4049a70d23dce4c69daf19f020b | |
1572 | Merge: c81314c 9470e78 | |
1573 | Author: Brad Spengler <spender@grsecurity.net> | |
1574 | Date: Sun Oct 25 11:51:44 2015 -0400 | |
1575 | ||
1576 | Merge branch 'pax-test' into grsec-test | |
1577 | ||
1578 | commit 9470e7893a9a1bf15f9b7d412dc09bebb59105e8 | |
1579 | Author: Brad Spengler <spender@grsecurity.net> | |
1580 | Date: Sun Oct 25 11:50:54 2015 -0400 | |
1581 | ||
1582 | Temporary squelching of overflow warning on skb_transport_offset(), will be fixed properly after H2HC | |
1583 | ||
1584 | include/linux/skbuff.h | 2 +- | |
1585 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1586 | ||
1587 | commit c81314ce278e9cfa3322881a6133c2c7e53b9430 | |
1588 | Author: Brad Spengler <spender@grsecurity.net> | |
1589 | Date: Sat Oct 24 23:13:36 2015 -0400 | |
1590 | ||
1591 | Update recordmcount/fixdep paths in RPM spec, from Andrew | |
1592 | ||
1593 | scripts/package/mkspec | 4 ++-- | |
1594 | 1 files changed, 2 insertions(+), 2 deletions(-) | |
1595 | ||
1596 | commit 798e4296bd55778b5e77f1db69c1bb972419590f | |
1597 | Author: Brad Spengler <spender@grsecurity.net> | |
1598 | Date: Sat Oct 24 23:11:22 2015 -0400 | |
1599 | ||
1600 | Update size_overflow hash table | |
1601 | ||
1602 | .../disable_size_overflow_hash.data | 3 +++ | |
1603 | .../size_overflow_plugin/size_overflow_hash.data | 5 +---- | |
1604 | 2 files changed, 4 insertions(+), 4 deletions(-) | |
1605 | ||
68b0b791 PK |
1606 | commit d9ef04f20fc634595883d1c1950c32a8fe04df22 |
1607 | Author: Brad Spengler <spender@grsecurity.net> | |
1608 | Date: Sat Oct 24 08:27:29 2015 -0400 | |
1609 | ||
1610 | Fix from Emese for https://forums.grsecurity.net/viewtopic.php?f=3&t=4291 | |
1611 | ||
1612 | drivers/usb/class/cdc-acm.h | 2 +- | |
1613 | include/linux/usb.h | 8 ++++---- | |
1614 | 2 files changed, 5 insertions(+), 5 deletions(-) | |
1615 | ||
1616 | commit eea46f1d247f5f63e3762da91a41cba76567800f | |
1617 | Author: Brad Spengler <spender@grsecurity.net> | |
1618 | Date: Fri Oct 23 18:24:57 2015 -0400 | |
1619 | ||
1620 | Update size_overflow hash tables | |
1621 | ||
1622 | .../disable_size_overflow_hash.data | 5 ++++- | |
1623 | .../size_overflow_plugin/size_overflow_hash.data | 5 +---- | |
1624 | 2 files changed, 5 insertions(+), 5 deletions(-) | |
1625 | ||
31a7c07c PK |
1626 | commit 8f521b864bd7428f3ad42613416c106d1d619c4d |
1627 | Merge: 26adf00 285f0d1 | |
1628 | Author: Brad Spengler <spender@grsecurity.net> | |
1629 | Date: Thu Oct 22 19:41:57 2015 -0400 | |
1630 | ||
1631 | Merge branch 'pax-test' into grsec-test | |
1632 | ||
1633 | Conflicts: | |
1634 | drivers/gpu/drm/drm_lock.c | |
1635 | ||
1636 | commit 285f0d1cda31b45ee217b90861677c032cb6550b | |
1637 | Merge: d6dc25f 190bd21 | |
1638 | Author: Brad Spengler <spender@grsecurity.net> | |
1639 | Date: Thu Oct 22 19:40:34 2015 -0400 | |
1640 | ||
1641 | Merge branch 'linux-4.2.y' into pax-test | |
1642 | ||
1643 | Conflicts: | |
1644 | arch/x86/kernel/process_64.c | |
1645 | ||
1646 | commit 26adf00caf8f4ebf155422082d4e8b8e4eb60eef | |
1647 | Author: Eric W. Biederman <ebiederm@xmission.com> | |
1648 | Date: Sat Aug 15 13:36:12 2015 -0500 | |
1649 | ||
1650 | dcache: Handle escaped paths in prepend_path | |
1651 | ||
1652 | A rename can result in a dentry that by walking up d_parent | |
1653 | will never reach it's mnt_root. For lack of a better term | |
1654 | I call this an escaped path. | |
1655 | ||
1656 | prepend_path is called by four different functions __d_path, | |
1657 | d_absolute_path, d_path, and getcwd. | |
1658 | ||
1659 | __d_path only wants to see paths are connected to the root it passes | |
1660 | in. So __d_path needs prepend_path to return an error. | |
1661 | ||
1662 | d_absolute_path similarly wants to see paths that are connected to | |
1663 | some root. Escaped paths are not connected to any mnt_root so | |
1664 | d_absolute_path needs prepend_path to return an error greater | |
1665 | than 1. So escaped paths will be treated like paths on lazily | |
1666 | unmounted mounts. | |
1667 | ||
1668 | getcwd needs to prepend "(unreachable)" so getcwd also needs | |
1669 | prepend_path to return an error. | |
1670 | ||
1671 | d_path is the interesting hold out. d_path just wants to print | |
1672 | something, and does not care about the weird cases. Which raises | |
1673 | the question what should be printed? | |
1674 | ||
1675 | Given that <escaped_path>/<anything> should result in -ENOENT I | |
1676 | believe it is desirable for escaped paths to be printed as empty | |
1677 | paths. As there are not really any meaninful path components when | |
1678 | considered from the perspective of a mount tree. | |
1679 | ||
1680 | So tweak prepend_path to return an empty path with an new error | |
1681 | code of 3 when it encounters an escaped path. | |
1682 | ||
1683 | Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com> | |
1684 | Signed-off-by: Al Viro <viro@zeniv.linux.org.uk> | |
1685 | ||
1686 | fs/dcache.c | 7 +++++++ | |
1687 | 1 files changed, 7 insertions(+), 0 deletions(-) | |
1688 | ||
1689 | commit d402147a7689356c29bfd46a7cfa6594e517ab95 | |
1690 | Author: Salva Peiró <speirofr@gmail.com> | |
1691 | Date: Wed Oct 14 17:48:02 2015 +0200 | |
1692 | ||
1693 | staging/dgnc: fix info leak in ioctl | |
1694 | ||
1695 | The dgnc_mgmt_ioctl() code fails to initialize the 16 _reserved bytes of | |
1696 | struct digi_dinfo after the ->dinfo_nboards member. Add an explicit | |
1697 | memset(0) before filling the structure to avoid the info leak. | |
1698 | ||
1699 | Signed-off-by: Salva Peiró <speirofr@gmail.com> | |
1700 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
1701 | ||
1702 | drivers/staging/dgnc/dgnc_mgmt.c | 1 + | |
1703 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
1704 | ||
1705 | commit bafc510c4fb4e8a5e69531fdc3a733e58c4bbdbf | |
1706 | Author: Salva Peiró <speirofr@gmail.com> | |
1707 | Date: Wed Oct 7 07:09:26 2015 -0300 | |
1708 | ||
1709 | [media] media/vivid-osd: fix info leak in ioctl | |
1710 | ||
1711 | The vivid_fb_ioctl() code fails to initialize the 16 _reserved bytes of | |
1712 | struct fb_vblank after the ->hcount member. Add an explicit | |
1713 | memset(0) before filling the structure to avoid the info leak. | |
1714 | ||
1715 | Signed-off-by: Salva Peiró <speirofr@gmail.com> | |
1716 | Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com> | |
1717 | Signed-off-by: Mauro Carvalho Chehab <mchehab@osg.samsung.com> | |
1718 | ||
1719 | drivers/media/platform/vivid/vivid-osd.c | 1 + | |
1720 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
1721 | ||
1722 | commit 980a903796ae06366fd5acbcd179ee2dc57fbabf | |
1723 | Author: David Howells <dhowells@redhat.com> | |
1724 | Date: Mon Oct 19 11:20:28 2015 +0100 | |
1725 | ||
1726 | KEYS: Don't permit request_key() to construct a new keyring | |
1727 | ||
1728 | If request_key() is used to find a keyring, only do the search part - don't | |
1729 | do the construction part if the keyring was not found by the search. We | |
1730 | don't really want keyrings in the negative instantiated state since the | |
1731 | rejected/negative instantiation error value in the payload is unioned with | |
1732 | keyring metadata. | |
1733 | ||
1734 | Now the kernel gives an error: | |
1735 | ||
1736 | request_key("keyring", "#selinux,bdekeyring", "keyring", KEY_SPEC_USER_SESSION_KEYRING) = -1 EPERM (Operation not permitted) | |
1737 | ||
1738 | Signed-off-by: David Howells <dhowells@redhat.com> | |
1739 | ||
1740 | security/keys/request_key.c | 3 +++ | |
1741 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
1742 | ||
1743 | commit f705c157ed6f8a9c4c0cf552fd5f054d9d500550 | |
1744 | Author: Dan Carpenter <dan.carpenter@oracle.com> | |
1745 | Date: Mon Oct 19 13:16:49 2015 +0300 | |
1746 | ||
1747 | irda: precedence bug in irlmp_seq_hb_idx() | |
1748 | ||
1749 | This is decrementing the pointer, instead of the value stored in the | |
1750 | pointer. KASan detects it as an out of bounds reference. | |
1751 | ||
1752 | Reported-by: "Berry Cheng 程君(成淼)" <chengmiao.cj@alibaba-inc.com> | |
1753 | Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> | |
1754 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
1755 | ||
1756 | net/irda/irlmp.c | 2 +- | |
1757 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1758 | ||
dc085147 PK |
1759 | commit 4a110451298bfce895ed224e6bbd9201d8605b2b |
1760 | Author: Brad Spengler <spender@grsecurity.net> | |
1761 | Date: Tue Oct 20 19:25:13 2015 -0400 | |
1762 | ||
1763 | Ratelimit the dump_stack as well, both to 15s with a burst of 3, enough not to completely | |
1764 | flood syslog | |
1765 | ||
1766 | fs/exec.c | 11 +++++++++-- | |
1767 | 1 files changed, 9 insertions(+), 2 deletions(-) | |
1768 | ||
1769 | commit 183fc2ae7d90e077fd27623998d82916260a2223 | |
1770 | Merge: a240939 d6dc25f | |
1771 | Author: Brad Spengler <spender@grsecurity.net> | |
1772 | Date: Tue Oct 20 19:16:04 2015 -0400 | |
1773 | ||
1774 | Merge branch 'pax-test' into grsec-test | |
1775 | ||
1776 | Conflicts: | |
1777 | tools/gcc/size_overflow_plugin/size_overflow_plugin.c | |
1778 | ||
1779 | commit d6dc25f193a832e08d8e7cf097d7f70b3dc24776 | |
1780 | Author: Brad Spengler <spender@grsecurity.net> | |
1781 | Date: Tue Oct 20 19:14:41 2015 -0400 | |
1782 | ||
1783 | Update to pax-linux-4.2.3-test16.patch: | |
1784 | - fixed undefined integer shift in proc_do_submiturb, reported by Arnaud <arnaud@drno.eu> | |
1785 | - fixed integer underflow in scm_detach_fds (similar to 1ac70e7ad24a88710cf9b6d7ababaefa2b575df0 upstream), reported by kdave (https://forums.grsecurity.net/viewtopic.php?f=1&t=4286) | |
1786 | - Emese added a temporary workaround for miscompiling the ath10k driver, reported by victor | |
1787 | - Emese fixed a false positive that affected the iwlwifi driver among others, reported by victor | |
1788 | - Emese disabled size overflow checking in acpi_ex_do_math_op and on acpi_object_integer, reported by xxterry1xx and rfnx (https://forums.grsecurity.net/viewtopic.php?f=3&t=4287) | |
1789 | ||
1790 | drivers/net/wireless/ath/ath10k/ce.c | 2 +- | |
1791 | drivers/usb/core/devio.c | 2 +- | |
1792 | fs/dlm/lowcomms.c | 2 +- | |
1793 | net/core/scm.c | 6 ++- | |
1794 | .../disable_size_overflow_hash.data | 4 +- | |
1795 | .../size_overflow_plugin/intentional_overflow.c | 44 -------------------- | |
1796 | tools/gcc/size_overflow_plugin/size_overflow.h | 1 - | |
1797 | .../size_overflow_plugin/size_overflow_hash.data | 4 +- | |
1798 | .../size_overflow_plugin/size_overflow_plugin.c | 4 +- | |
1799 | .../size_overflow_plugin/size_overflow_transform.c | 3 - | |
1800 | .../size_overflow_transform_core.c | 6 +++ | |
1801 | 11 files changed, 19 insertions(+), 59 deletions(-) | |
1802 | ||
a129fb97 PK |
1803 | commit a2409394c2b0d97a9f02bf62ca4c0254602e58a6 |
1804 | Author: Brad Spengler <spender@grsecurity.net> | |
1805 | Date: Tue Oct 20 08:58:25 2015 -0400 | |
1806 | ||
1807 | set default to y | |
1808 | ||
1809 | security/Kconfig | 1 + | |
1810 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
1811 | ||
1812 | commit 3abe24117389419654da44adc87a9a03ad7e3f38 | |
1813 | Author: Brad Spengler <spender@grsecurity.net> | |
1814 | Date: Tue Oct 20 08:08:32 2015 -0400 | |
1815 | ||
1816 | Add a new config option from Emese to allow SIZE_OVERFLOW to be enabled | |
1817 | while having it not kill the userland process in an overflow condition. | |
1818 | This will help us obtain reports over the next few weeks while not making | |
1819 | some percentage of users' machines unusable. | |
1820 | ||
1821 | To enable this option, set CONFIG_PAX_SIZE_OVERFLOW_DISABLE_KILL=y in .config | |
1822 | ||
1823 | fs/exec.c | 5 +++++ | |
1824 | security/Kconfig | 4 ++++ | |
1825 | .../size_overflow_plugin/size_overflow_plugin.c | 4 ++-- | |
1826 | 3 files changed, 11 insertions(+), 2 deletions(-) | |
1827 | ||
07330232 PK |
1828 | commit bcae982f720ce0b3463a81f2b72a4807cb89048b |
1829 | Merge: 0e55d80 128d3a5 | |
1830 | Author: Brad Spengler <spender@grsecurity.net> | |
1831 | Date: Mon Oct 19 18:56:09 2015 -0400 | |
1832 | ||
1833 | Merge branch 'pax-test' into grsec-test | |
1834 | ||
1835 | commit 128d3a5452ab001b29235b05eb0be3334fff3998 | |
1836 | Author: Brad Spengler <spender@grsecurity.net> | |
1837 | Date: Mon Oct 19 18:55:37 2015 -0400 | |
1838 | ||
1839 | Update to pax-linux-4.2.3-test14.patch: | |
1840 | - Emese fixed a false positive size overflow report, reported by gus (https://forums.grsecurity.net/viewtopic.php?t=4280) | |
1841 | - fixed an integer sign mixup in usb_stor_invoke_transport, reported by Arnaud <arnaud@drno.eu> | |
1842 | ||
1843 | drivers/usb/storage/transport.c | 2 +- | |
1844 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
1845 | .../size_overflow_plugin/size_overflow_transform.c | 15 +++- | |
1846 | .../size_overflow_transform_core.c | 90 ++++++++++++++----- | |
1847 | 4 files changed, 81 insertions(+), 28 deletions(-) | |
1848 | ||
ed16389b PK |
1849 | commit 0e55d80a65998266cab71804131a072fcc8ee558 |
1850 | Merge: a61fd15 9c4310f | |
1851 | Author: Brad Spengler <spender@grsecurity.net> | |
1852 | Date: Sat Oct 17 23:15:36 2015 -0400 | |
1853 | ||
1854 | Merge branch 'pax-test' into grsec-test | |
1855 | ||
1856 | commit 9c4310fdb2d19f83affc62eb2698d3763ce8c36b | |
1857 | Author: Brad Spengler <spender@grsecurity.net> | |
1858 | Date: Sat Oct 17 23:15:13 2015 -0400 | |
1859 | ||
1860 | Update to pax-linux-4.2.3-test14.patch: | |
1861 | - reverted some page table hardening that caused too much slowdown under virtualization, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4275) | |
1862 | ||
1863 | arch/x86/include/asm/pgtable-2level.h | 18 ++---------------- | |
1864 | arch/x86/include/asm/pgtable-3level.h | 10 ---------- | |
1865 | arch/x86/include/asm/pgtable_32.h | 2 ++ | |
1866 | arch/x86/include/asm/pgtable_64.h | 18 ++---------------- | |
1867 | arch/x86/mm/highmem_32.c | 2 ++ | |
1868 | arch/x86/mm/init_64.c | 2 ++ | |
1869 | arch/x86/mm/iomap_32.c | 4 ++++ | |
1870 | arch/x86/mm/pageattr.c | 4 ++++ | |
1871 | arch/x86/mm/pgtable.c | 2 ++ | |
1872 | arch/x86/mm/pgtable_32.c | 3 +++ | |
1873 | mm/highmem.c | 5 +++++ | |
1874 | mm/vmalloc.c | 7 +++++++ | |
1875 | 12 files changed, 35 insertions(+), 42 deletions(-) | |
1876 | ||
609ac19a PK |
1877 | commit a61fd152e87bd3ed91194b07f6b1fcbcd165093b |
1878 | Merge: 00f1afa db7a8e5 | |
1879 | Author: Brad Spengler <spender@grsecurity.net> | |
1880 | Date: Sat Oct 17 18:33:48 2015 -0400 | |
1881 | ||
1882 | Merge branch 'pax-test' into grsec-test | |
1883 | ||
1884 | commit db7a8e5c284179889014b5929a40298e1b228fbc | |
1885 | Author: Brad Spengler <spender@grsecurity.net> | |
1886 | Date: Sat Oct 17 18:33:22 2015 -0400 | |
1887 | ||
1888 | Update to pax-linux-4.2.3-test13.patch: | |
1889 | - Emese worked around a sign mixup with wiphy.rts_threshold, reported by gus (https://forums.grsecurity.net/viewtopic.php?f=3&t=4278) | |
1890 | ||
1891 | .../disable_size_overflow_hash.data | 2 ++ | |
1892 | .../size_overflow_plugin/size_overflow_hash.data | 2 -- | |
1893 | 2 files changed, 2 insertions(+), 2 deletions(-) | |
1894 | ||
5bf3f0b0 PK |
1895 | commit 00f1afa694317365e9bd6dc77d2e3e96ae3a68ec |
1896 | Merge: 7098385 57dc21d | |
1897 | Author: Brad Spengler <spender@grsecurity.net> | |
1898 | Date: Sat Oct 17 11:04:56 2015 -0400 | |
1899 | ||
1900 | Merge branch 'pax-test' into grsec-test | |
1901 | ||
1902 | commit 57dc21d203a9fa1312a4abc608da5b3644d29078 | |
1903 | Author: Brad Spengler <spender@grsecurity.net> | |
1904 | Date: Sat Oct 17 11:04:34 2015 -0400 | |
1905 | ||
1906 | Update to pax-linux-4.2.3-test12.patch: | |
1907 | - removed size_overflow_hash.data.prev that was left behind by accident | |
1908 | - Emese fixed a false positive overflow report in the megaraid driver due to a gcc limitation, reported by vortex (https://forums.grsecurity.net/viewtopic.php?f=3&t=4277) | |
1909 | ||
1910 | drivers/scsi/megaraid/megaraid_sas.h | 2 +- | |
1911 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1912 | ||
c84fce4e PK |
1913 | commit 7098385851c43dea6692508c71cd5fbcce3187b2 |
1914 | Merge: bc6d23e 78b0f64 | |
1915 | Author: Brad Spengler <spender@grsecurity.net> | |
1916 | Date: Fri Oct 16 17:45:06 2015 -0400 | |
1917 | ||
1918 | Merge branch 'pax-test' into grsec-test | |
1919 | ||
1920 | Conflicts: | |
1921 | tools/gcc/size_overflow_plugin/intentional_overflow.c | |
1922 | ||
1923 | commit 78b0f643d8d2b870e8ad5df075d4ab79befa4266 | |
1924 | Author: Brad Spengler <spender@grsecurity.net> | |
1925 | Date: Fri Oct 16 17:44:18 2015 -0400 | |
1926 | ||
1927 | Update to pax-linux-4.2.3-test11.patch: | |
1928 | - Emese fixed a few false positives caused by error codes | |
1929 | - simplified the switch_mm code on x86 a bit | |
1930 | ||
1931 | arch/x86/include/asm/mmu_context.h | 118 +++++-------- | |
1932 | include/drm/drm_mm.h | 2 +- | |
1933 | .../size_overflow_plugin/intentional_overflow.c | 11 +- | |
1934 | tools/gcc/size_overflow_plugin/size_overflow.h | 19 ++- | |
1935 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
1936 | .../size_overflow_plugin/size_overflow_transform.c | 178 +++++++++----------- | |
1937 | .../size_overflow_transform_core.c | 31 ++-- | |
1938 | 7 files changed, 169 insertions(+), 192 deletions(-) | |
1939 | ||
1940 | commit bc6d23e3408e389f8a96134f6bc915e9fc8b370b | |
1941 | Author: Brad Spengler <spender@grsecurity.net> | |
1942 | Date: Fri Oct 16 17:28:54 2015 -0400 | |
1943 | ||
1944 | Update rpm devel spec, thanks to Andrew | |
1945 | ||
1946 | scripts/package/mkspec | 3 +++ | |
1947 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
1948 | ||
1949 | commit b3f30cb9207a72a6aa4a78f23f8c5353be0bb27b | |
1950 | Author: Brad Spengler <spender@grsecurity.net> | |
1951 | Date: Thu Oct 15 20:10:56 2015 -0400 | |
1952 | ||
1953 | disable tracing support with GRKERNSEC_KMEM (it forces debugfs support on) | |
1954 | ||
1955 | kernel/trace/Kconfig | 2 +- | |
1956 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
1957 | ||
1958 | commit 82a0c12587f14add438ddf3b558e2278fcb7a387 | |
1959 | Author: Brad Spengler <spender@grsecurity.net> | |
1960 | Date: Thu Oct 15 19:19:43 2015 -0400 | |
1961 | ||
1962 | Force DEBUG_FS off the hard way, since 'select' can cause it to be | |
1963 | inadvertently enabled. Add a backup check that fails the build if | |
1964 | GRKERNSEC_KMEM is enabled with DEBUG_FS | |
1965 | Ditto for PROC_PAGE_MONITOR | |
1966 | ||
1967 | arch/arc/Kconfig | 1 + | |
1968 | arch/arm/Kconfig.debug | 1 + | |
1969 | arch/arm64/Kconfig.debug | 1 + | |
1970 | arch/blackfin/Kconfig.debug | 1 + | |
1971 | arch/s390/Kconfig.debug | 1 + | |
1972 | arch/x86/Kconfig.debug | 2 ++ | |
1973 | drivers/iommu/Kconfig | 1 + | |
1974 | drivers/md/bcache/Kconfig | 1 + | |
1975 | drivers/net/wireless/ath/ath9k/Kconfig | 1 - | |
1976 | include/linux/grsecurity.h | 6 ++++++ | |
1977 | init/Kconfig | 1 + | |
1978 | kernel/trace/Kconfig | 2 ++ | |
1979 | lib/Kconfig.debug | 6 +++++- | |
1980 | mm/Kconfig | 3 +++ | |
1981 | net/sunrpc/Kconfig | 1 + | |
1982 | 15 files changed, 27 insertions(+), 2 deletions(-) | |
1983 | ||
1984 | commit 1b6f8fc8b8100292647638c713326776a0865705 | |
1985 | Author: Brad Spengler <spender@grsecurity.net> | |
1986 | Date: Thu Oct 15 17:58:59 2015 -0400 | |
1987 | ||
1988 | Force DEBUG_FS off in the kernel config, even having it present is a security | |
1989 | risk | |
1990 | ||
1991 | Conflicts: | |
1992 | ||
1993 | lib/Kconfig.debug | |
1994 | ||
1995 | lib/Kconfig.debug | 1 + | |
1996 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
1997 | ||
1998 | commit 21057fc30571f96aa46acf8922417311905d0f2b | |
1999 | Author: Brad Spengler <spender@grsecurity.net> | |
2000 | Date: Thu Oct 15 08:15:33 2015 -0400 | |
2001 | ||
2002 | Backport fix from: https://patchwork.kernel.org/patch/6853351/ | |
2003 | The debug_read_tlb() uses the sprintf() functions directly on the buffer | |
2004 | allocated by buf = kmalloc(count), without taking into account the size | |
2005 | of the buffer, with the consequence corrupting the heap, depending on | |
2006 | the count requested by the user. | |
2007 | ||
2008 | The patch fixes the issue replacing sprintf() by seq_printf(). | |
2009 | ||
2010 | Signed-off-by: Salva Peiró <speirofr@gmail.com> | |
2011 | ||
2012 | drivers/iommu/omap-iommu-debug.c | 26 +++++++------------------- | |
2013 | drivers/iommu/omap-iommu.c | 28 +++++++++++----------------- | |
2014 | drivers/iommu/omap-iommu.h | 3 +-- | |
2015 | 3 files changed, 19 insertions(+), 38 deletions(-) | |
2016 | ||
2017 | commit ba936d19274485bad900a69d679878a50faa50aa | |
2018 | Author: Joe Perches <joe@perches.com> | |
2019 | Date: Wed Oct 14 01:09:40 2015 -0700 | |
2020 | ||
2021 | ethtool: Use kcalloc instead of kmalloc for ethtool_get_strings | |
2022 | ||
2023 | It seems that kernel memory can leak into userspace by a | |
2024 | kmalloc, ethtool_get_strings, then copy_to_user sequence. | |
2025 | ||
2026 | Avoid this by using kcalloc to zero fill the copied buffer. | |
2027 | ||
2028 | Signed-off-by: Joe Perches <joe@perches.com> | |
2029 | Acked-by: Ben Hutchings <ben@decadent.org.uk> | |
2030 | Signed-off-by: David S. Miller <davem@davemloft.net> | |
2031 | ||
2032 | net/core/ethtool.c | 2 +- | |
2033 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
2034 | ||
2035 | commit bae0a8209962cede6a0d486cf2414cac1747f91b | |
2036 | Author: Brad Spengler <spender@grsecurity.net> | |
2037 | Date: Wed Oct 14 19:54:27 2015 -0400 | |
2038 | ||
2039 | Update size_overflow hash table | |
2040 | ||
2041 | .../size_overflow_plugin/size_overflow_hash.data | 53 +++++++++++++++++-- | |
2042 | 1 files changed, 47 insertions(+), 6 deletions(-) | |
2043 | ||
2044 | commit 1d840cc98b8f9b62d3c906ae24385f79c9131e29 | |
2045 | Author: Brad Spengler <spender@grsecurity.net> | |
2046 | Date: Wed Oct 14 19:50:48 2015 -0400 | |
2047 | ||
2048 | Update size_overflow hash table | |
2049 | ||
2050 | .../size_overflow_plugin/size_overflow_hash.data | 1 + | |
2051 | 1 files changed, 1 insertions(+), 0 deletions(-) | |
2052 | ||
2053 | commit fca9b7af6aebd1d80f364d6d849470e917919004 | |
2054 | Author: Brad Spengler <spender@grsecurity.net> | |
2055 | Date: Wed Oct 14 19:47:21 2015 -0400 | |
2056 | ||
2057 | Update size_overflow hash table | |
2058 | ||
2059 | .../size_overflow_plugin/size_overflow_hash.data | 300 ++++++++++++++++---- | |
2060 | 1 files changed, 244 insertions(+), 56 deletions(-) | |
2061 | ||
2062 | commit 07cadc277ba83222698c99091c7da2c28275981f | |
2063 | Author: Brad Spengler <spender@grsecurity.net> | |
2064 | Date: Wed Oct 14 19:39:44 2015 -0400 | |
2065 | ||
2066 | squelch some informational messages only used by Emese | |
2067 | ||
2068 | .../size_overflow_plugin/intentional_overflow.c | 6 +++--- | |
2069 | 1 files changed, 3 insertions(+), 3 deletions(-) | |
2070 | ||
2071 | commit 77eeeac20bde1e0ebd72efe0f7b5c52786411bc7 | |
2072 | Author: Brad Spengler <spender@grsecurity.net> | |
2073 | Date: Wed Oct 14 19:15:56 2015 -0400 | |
2074 | ||
2075 | Re-enable size_overflow | |
2076 | ||
2077 | security/Kconfig | 1 - | |
2078 | 1 files changed, 0 insertions(+), 1 deletions(-) | |
2079 | ||
2080 | commit cb8efa1fd63be1bbcf5e585396cc0ed562d0c624 | |
2081 | Merge: 913cbf6 4c48a7f | |
2082 | Author: Brad Spengler <spender@grsecurity.net> | |
2083 | Date: Wed Oct 14 17:14:42 2015 -0400 | |
2084 | ||
2085 | Merge branch 'pax-test' into grsec-test | |
2086 | ||
2087 | Conflicts: | |
2088 | tools/gcc/size_overflow_plugin/size_overflow_hash.data | |
2089 | ||
2090 | commit 4c48a7fc8df9310f994708b42fe1102a2943917c | |
2091 | Author: Brad Spengler <spender@grsecurity.net> | |
2092 | Date: Wed Oct 14 17:12:54 2015 -0400 | |
2093 | ||
2094 | Update to pax-linux-4.2.3-test10.patch: | |
2095 | - fixed accidentally dropped csum_partial_copy_generic_to_user entry point for pre-P6 i386 configs, by minipli | |
2096 | - Emese fixed a bunch of false positives with the size overflow plugin, let's see how it goes in the real world :) | |
2097 | ||
2098 | arch/x86/include/asm/processor.h | 2 +- | |
2099 | arch/x86/include/asm/ptrace.h | 8 +- | |
2100 | arch/x86/lib/checksum_32.S | 2 + | |
2101 | arch/x86/xen/mmu.c | 2 +- | |
2102 | drivers/ata/libahci.c | 2 +- | |
2103 | drivers/i2c/busses/i2c-diolan-u2c.c | 2 +- | |
2104 | drivers/oprofile/oprofile_files.c | 2 +- | |
2105 | drivers/spi/spidev.c | 2 +- | |
2106 | drivers/tty/n_tty.c | 2 +- | |
2107 | drivers/usb/core/message.c | 6 +- | |
2108 | fs/binfmt_elf.c | 2 +- | |
2109 | fs/ubifs/io.c | 2 +- | |
2110 | include/drm/drm_mm.h | 2 +- | |
2111 | include/linux/completion.h | 12 +- | |
2112 | include/linux/jiffies.h | 10 +- | |
2113 | include/linux/kernel.h | 2 +- | |
2114 | include/linux/mm.h | 2 +- | |
2115 | include/linux/random.h | 4 +- | |
2116 | include/linux/sched.h | 2 +- | |
2117 | include/linux/usb.h | 2 +- | |
2118 | kernel/sched/completion.c | 6 +- | |
2119 | kernel/time/timer.c | 2 +- | |
2120 | lib/bitmap.c | 2 +- | |
2121 | mm/internal.h | 2 +- | |
2122 | net/sunrpc/svcauth_unix.c | 2 +- | |
2123 | .../disable_size_overflow_hash.data |22980 +++++++++++--------- | |
2124 | .../insert_size_overflow_asm.c | 7 + | |
2125 | .../size_overflow_plugin/intentional_overflow.c | 10 +- | |
2126 | tools/gcc/size_overflow_plugin/size_overflow.h | 29 +- | |
2127 | .../gcc/size_overflow_plugin/size_overflow_debug.c | 20 +- | |
2128 | .../size_overflow_plugin/size_overflow_hash.data |14092 ++++++++---- | |
2129 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 252 +- | |
2130 | .../size_overflow_plugin/size_overflow_plugin.c | 2 +- | |
2131 | .../size_overflow_plugin_hash.c | 13 +- | |
2132 | .../size_overflow_plugin/size_overflow_transform.c | 205 +- | |
2133 | .../size_overflow_transform_core.c | 4 +- | |
2134 | 36 files changed, 21958 insertions(+), 15740 deletions(-) | |
2135 | ||
2136 | commit 913cbf6a23fcad570b776b1a5a71242b909c5c99 | |
2137 | Author: Dave Kleikamp <dave.kleikamp@oracle.com> | |
2138 | Date: Mon Oct 5 10:08:51 2015 -0500 | |
2139 | ||
2140 | crypto: sparc - initialize blkcipher.ivsize | |
2141 | ||
2142 | Some of the crypto algorithms write to the initialization vector, | |
2143 | but no space has been allocated for it. This clobbers adjacent memory. | |
2144 | ||
2145 | Cc: stable@vger.kernel.org | |
2146 | Signed-off-by: Dave Kleikamp <dave.kleikamp@oracle.com> | |
2147 | Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> | |
2148 | ||
2149 | arch/sparc/crypto/aes_glue.c | 2 ++ | |
2150 | arch/sparc/crypto/camellia_glue.c | 1 + | |
2151 | arch/sparc/crypto/des_glue.c | 2 ++ | |
2152 | 3 files changed, 5 insertions(+), 0 deletions(-) | |
2153 | ||
ebfb31c7 PK |
2154 | commit 7af7ad1e287067b7ea659dc0dd3e2e355588e246 |
2155 | Author: Brad Spengler <spender@grsecurity.net> | |
2156 | Date: Tue Oct 13 08:03:51 2015 -0400 | |
2157 | ||
2158 | Apply fix by Tejun Heo for upstream bug reported on the forums by Fuxino: | |
2159 | https://forums.grsecurity.net/viewtopic.php?f=3&t=4276#p15570 | |
2160 | ||
2161 | Probably made more easily reproducible via SANITIZE, but we won't know for | |
2162 | sure without a full oops report. | |
2163 | ||
2164 | For some reason even though this patch was marked for 4.2+ stable over a month | |
2165 | ago, it still hasn't hit Greg's tree. | |
2166 | ||
2167 | block/blk-cgroup.c | 3 +++ | |
2168 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
2169 | ||
2170 | commit 8e1f29f9e1af36f71d12213ea6530eb77014c00c | |
2171 | Author: Dmitry Vyukov <dvyukov@google.com> | |
2172 | Date: Thu Sep 17 17:17:10 2015 +0200 | |
2173 | ||
2174 | tty: fix data race on tty_buffer.commit | |
2175 | ||
2176 | Race on buffer data happens when newly committed data is | |
2177 | picked up by an old flush work in the following scenario: | |
2178 | __tty_buffer_request_room does a plain write of tail->commit, | |
2179 | no barriers were executed before that. | |
2180 | At this point flush_to_ldisc reads this new value of commit, | |
2181 | and reads buffer data, no barriers in between. | |
2182 | The committed buffer data is not necessary visible to flush_to_ldisc. | |
2183 | ||
2184 | Similar bug happens when tty_schedule_flip commits data. | |
2185 | ||
2186 | Update commit with smp_store_release and read commit with | |
2187 | smp_load_acquire, as it is commit that signals data readiness. | |
2188 | This is orthogonal to the existing synchronization on tty_buffer.next, | |
2189 | which is required to not dismiss a buffer with unconsumed data. | |
2190 | ||
2191 | The data race was found with KernelThreadSanitizer (KTSAN). | |
2192 | ||
2193 | Signed-off-by: Dmitry Vyukov <dvyukov@google.com> | |
2194 | Reviewed-by: Peter Hurley <peter@hurleysoftware.com> | |
2195 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
2196 | ||
2197 | drivers/tty/tty_buffer.c | 15 ++++++++++++--- | |
2198 | 1 files changed, 12 insertions(+), 3 deletions(-) | |
2199 | ||
2200 | commit d62db216e7182e24317596471c1a3a2a9fb9d1f5 | |
2201 | Author: Peter Hurley <peter@hurleysoftware.com> | |
2202 | Date: Sun Jul 12 20:50:49 2015 -0400 | |
2203 | ||
2204 | tty: Replace smp_rmb/smp_wmb with smp_load_acquire/smp_store_release | |
2205 | ||
2206 | Clarify flip buffer producer/consumer operation; the use of | |
2207 | smp_load_acquire() and smp_store_release() more clearly indicates | |
2208 | which memory access requires a barrier. | |
2209 | ||
2210 | Signed-off-by: Peter Hurley <peter@hurleysoftware.com> | |
2211 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
2212 | ||
2213 | drivers/tty/tty_buffer.c | 10 ++++------ | |
2214 | 1 files changed, 4 insertions(+), 6 deletions(-) | |
2215 | ||
2216 | commit c6bbe8a6097f869b6a3d3c40d456727180573dd9 | |
2217 | Author: Kosuke Tatsukawa <tatsu@ab.jp.nec.com> | |
2218 | Date: Fri Oct 2 08:27:05 2015 +0000 | |
2219 | ||
2220 | tty: fix stall caused by missing memory barrier in drivers/tty/n_tty.c | |
2221 | ||
2222 | My colleague ran into a program stall on a x86_64 server, where | |
2223 | n_tty_read() was waiting for data even if there was data in the buffer | |
2224 | in the pty. kernel stack for the stuck process looks like below. | |
2225 | #0 [ffff88303d107b58] __schedule at ffffffff815c4b20 | |
2226 | #1 [ffff88303d107bd0] schedule at ffffffff815c513e | |
2227 | #2 [ffff88303d107bf0] schedule_timeout at ffffffff815c7818 | |
2228 | #3 [ffff88303d107ca0] wait_woken at ffffffff81096bd2 | |
2229 | #4 [ffff88303d107ce0] n_tty_read at ffffffff8136fa23 | |
2230 | #5 [ffff88303d107dd0] tty_read at ffffffff81368013 | |
2231 | #6 [ffff88303d107e20] __vfs_read at ffffffff811a3704 | |
2232 | #7 [ffff88303d107ec0] vfs_read at ffffffff811a3a57 | |
2233 | #8 [ffff88303d107f00] sys_read at ffffffff811a4306 | |
2234 | #9 [ffff88303d107f50] entry_SYSCALL_64_fastpath at ffffffff815c86d7 | |
2235 | ||
2236 | There seems to be two problems causing this issue. | |
2237 | ||
2238 | First, in drivers/tty/n_tty.c, __receive_buf() stores the data and | |
2239 | updates ldata->commit_head using smp_store_release() and then checks | |
2240 | the wait queue using waitqueue_active(). However, since there is no | |
2241 | memory barrier, __receive_buf() could return without calling | |
2242 | wake_up_interactive_poll(), and at the same time, n_tty_read() could | |
2243 | start to wait in wait_woken() as in the following chart. | |
2244 | ||
2245 | __receive_buf() n_tty_read() | |
2246 | ------------------------------------------------------------------------ | |
2247 | if (waitqueue_active(&tty->read_wait)) | |
2248 | /* Memory operations issued after the | |
2249 | RELEASE may be completed before the | |
2250 | RELEASE operation has completed */ | |
2251 | add_wait_queue(&tty->read_wait, &wait); | |
2252 | ... | |
2253 | if (!input_available_p(tty, 0)) { | |
2254 | smp_store_release(&ldata->commit_head, | |
2255 | ldata->read_head); | |
2256 | ... | |
2257 | timeout = wait_woken(&wait, | |
2258 | TASK_INTERRUPTIBLE, timeout); | |
2259 | ------------------------------------------------------------------------ | |
2260 | ||
2261 | The second problem is that n_tty_read() also lacks a memory barrier | |
2262 | call and could also cause __receive_buf() to return without calling | |
2263 | wake_up_interactive_poll(), and n_tty_read() to wait in wait_woken() | |
2264 | as in the chart below. | |
2265 | ||
2266 | __receive_buf() n_tty_read() | |
2267 | ------------------------------------------------------------------------ | |
2268 | spin_lock_irqsave(&q->lock, flags); | |
2269 | /* from add_wait_queue() */ | |
2270 | ... | |
2271 | if (!input_available_p(tty, 0)) { | |
2272 | /* Memory operations issued after the | |
2273 | RELEASE may be completed before the | |
2274 | RELEASE operation has completed */ | |
2275 | smp_store_release(&ldata->commit_head, | |
2276 | ldata->read_head); | |
2277 | if (waitqueue_active(&tty->read_wait)) | |
2278 | __add_wait_queue(q, wait); | |
2279 | spin_unlock_irqrestore(&q->lock,flags); | |
2280 | /* from add_wait_queue() */ | |
2281 | ... | |
2282 | timeout = wait_woken(&wait, | |
2283 | TASK_INTERRUPTIBLE, timeout); | |
2284 | ------------------------------------------------------------------------ | |
2285 | ||
2286 | There are also other places in drivers/tty/n_tty.c which have similar | |
2287 | calls to waitqueue_active(), so instead of adding many memory barrier | |
2288 | calls, this patch simply removes the call to waitqueue_active(), | |
2289 | leaving just wake_up*() behind. | |
2290 | ||
2291 | This fixes both problems because, even though the memory access before | |
2292 | or after the spinlocks in both wake_up*() and add_wait_queue() can | |
2293 | sneak into the critical section, it cannot go past it and the critical | |
2294 | section assures that they will be serialized (please see "INTER-CPU | |
2295 | ACQUIRING BARRIER EFFECTS" in Documentation/memory-barriers.txt for a | |
2296 | better explanation). Moreover, the resulting code is much simpler. | |
2297 | ||
2298 | Latency measurement using a ping-pong test over a pty doesn't show any | |
2299 | visible performance drop. | |
2300 | ||
2301 | Signed-off-by: Kosuke Tatsukawa <tatsu@ab.jp.nec.com> | |
2302 | Cc: stable@vger.kernel.org | |
2303 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
2304 | ||
2305 | drivers/tty/n_tty.c | 15 +++++---------- | |
2306 | 1 files changed, 5 insertions(+), 10 deletions(-) | |
2307 | ||
2308 | commit 3af2011ac1a085a3e8c57ca3a840aec393b37db3 | |
2309 | Author: Dmitry Vyukov <dvyukov@google.com> | |
2310 | Date: Thu Sep 17 17:17:08 2015 +0200 | |
2311 | ||
2312 | tty: fix data race in flush_to_ldisc | |
2313 | ||
2314 | flush_to_ldisc reads port->itty and checks that it is not NULL, | |
2315 | concurrently release_tty sets port->itty to NULL. It is possible | |
2316 | that flush_to_ldisc loads port->itty once, ensures that it is | |
2317 | not NULL, but then reloads it again and uses. The second load | |
2318 | can already return NULL, which will cause a crash. | |
2319 | ||
2320 | Use READ_ONCE to read port->itty. | |
2321 | ||
2322 | The data race was found with KernelThreadSanitizer (KTSAN). | |
2323 | ||
2324 | Signed-off-by: Dmitry Vyukov <dvyukov@google.com> | |
2325 | Reviewed-by: Peter Hurley <peter@hurleysoftware.com> | |
2326 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
2327 | ||
2328 | drivers/tty/tty_buffer.c | 2 +- | |
2329 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
2330 | ||
2331 | commit 4a433f384b0a5b7e39f969ee8df89c56537d078d | |
2332 | Author: Dmitry Vyukov <dvyukov@google.com> | |
2333 | Date: Thu Sep 17 17:17:09 2015 +0200 | |
2334 | ||
2335 | tty: fix data race in tty_buffer_flush | |
2336 | ||
2337 | tty_buffer_flush frees not acquired buffers. | |
2338 | As the result, for example, read of b->size in tty_buffer_free | |
2339 | can return garbage value which will lead to a huge buffer | |
2340 | hanging in the freelist. This is just the benignest | |
2341 | manifestation of freeing of a not acquired object. | |
2342 | If the object is passed to kfree, heap can be corrupted. | |
2343 | ||
2344 | Acquire visibility over the buffer before freeing it. | |
2345 | ||
2346 | The data race was found with KernelThreadSanitizer (KTSAN). | |
2347 | ||
2348 | Signed-off-by: Dmitry Vyukov <dvyukov@google.com> | |
2349 | Reviewed-by: Peter Hurley <peter@hurleysoftware.com> | |
2350 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
2351 | ||
2352 | drivers/tty/tty_buffer.c | 5 ++++- | |
2353 | 1 files changed, 4 insertions(+), 1 deletions(-) | |
2354 | ||
2355 | commit 1477c439d65debf45ac3164a1615504131fad1ff | |
2356 | Author: Jann Horn <jann@thejh.net> | |
2357 | Date: Sun Oct 4 19:29:12 2015 +0200 | |
2358 | ||
2359 | drivers/tty: require read access for controlling terminal | |
2360 | ||
2361 | This is mostly a hardening fix, given that write-only access to other | |
2362 | users' ttys is usually only given through setgid tty executables. | |
2363 | ||
2364 | Signed-off-by: Jann Horn <jann@thejh.net> | |
2365 | Cc: stable@vger.kernel.org | |
2366 | Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> | |
2367 | ||
2368 | drivers/tty/tty_io.c | 31 +++++++++++++++++++++++++++---- | |
2369 | 1 files changed, 27 insertions(+), 4 deletions(-) | |
2370 | ||
2371 | commit c2d51348729aa244b827216715db7734daf07155 | |
2372 | Author: Brad Spengler <spender@grsecurity.net> | |
2373 | Date: Mon Oct 12 07:19:03 2015 -0400 | |
2374 | ||
2375 | Don't auto-enable UDEREF on x64 with a VirtualBox host | |
2376 | ||
2377 | Conflicts: | |
2378 | ||
2379 | security/Kconfig | |
2380 | ||
2381 | security/Kconfig | 2 +- | |
2382 | 1 files changed, 1 insertions(+), 1 deletions(-) | |
2383 | ||
cf7c63af PK |
2384 | commit 45ff0fe97624b7133be6f0280ab8fda4610b7937 |
2385 | Merge: ca6828e 1c527d2 | |
2386 | Author: Brad Spengler <spender@grsecurity.net> | |
2387 | Date: Sun Oct 11 17:17:58 2015 -0400 | |
2388 | ||
2389 | Merge branch 'pax-test' into grsec-test | |
2390 | ||
2391 | Conflicts: | |
2392 | arch/x86/mm/pgtable.c | |
2393 | ||
2394 | commit 1c527d25ad2ece4cdb4723047625d96b942a3b91 | |
2395 | Author: Brad Spengler <spender@grsecurity.net> | |
2396 | Date: Sun Oct 11 17:16:49 2015 -0400 | |
2397 | ||
2398 | Update to pax-linux-4.2.3-test9.patch: | |
2399 | - really fixed vsyscall/pvclock regression caused by the recent page table hardening, reported by kamil (https://forums.grsecurity.net/viewtopic.php?f=3&t=4272) and quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4275) | |
2400 | - fixed a compilation error caused by the above regression, reported by spender | |
2401 | - fixed an arm compilation error, reported by Emese | |
2402 | ||
2403 | arch/arm/kernel/module-plts.c | 7 +------ | |
2404 | arch/x86/mm/pgtable.c | 21 +++++++++++++++++++-- | |
2405 | 2 files changed, 20 insertions(+), 8 deletions(-) | |
2406 | ||
2407 | commit ca6828e73b10b4a7537b16a37c2c0280523171e1 | |
2408 | Author: Trond Myklebust <trond.myklebust@primarydata.com> | |
2409 | Date: Fri Oct 9 13:44:34 2015 -0400 | |
2410 | ||
2411 | namei: results of d_is_negative() should be checked after dentry revalidation | |
2412 | ||
2413 | Leandro Awa writes: | |
2414 | "After switching to version 4.1.6, our parallelized and distributed | |
2415 | workflows now fail consistently with errors of the form: | |
2416 | ||
2417 | T34: ./regex.c:39:22: error: config.h: No such file or directory | |
2418 | ||
2419 | From our 'git bisect' testing, the following commit appears to be the | |
2420 | possible cause of the behavior we've been seeing: commit 766c4cbfacd8" | |
2421 | ||
2422 | Al Viro says: | |
2423 | "What happens is that 766c4cbfacd8 got the things subtly wrong. | |
2424 | ||
2425 | We used to treat d_is_negative() after lookup_fast() as "fall with | |
2426 | ENOENT". That was wrong - checking ->d_flags outside of ->d_seq | |
2427 | protection is unreliable and failing with hard error on what should've | |
2428 | fallen back to non-RCU pathname resolution is a bug. | |
2429 | ||
2430 | Unfortunately, we'd pulled the test too far up and ran afoul of | |
2431 | another kind of staleness. The dentry might have been absolutely | |
2432 | stable from the RCU point of view (and we might be on UP, etc), but | |
2433 | stale from the remote fs point of view. If ->d_revalidate() returns | |
2434 | "it's actually stale", dentry gets thrown away and the original code | |
2435 | wouldn't even have looked at its ->d_flags. | |
2436 | ||
2437 | What we need is to check ->d_flags where 766c4cbfacd8 does (prior to | |
2438 | ->d_seq validation) but only use the result in cases where we do not | |
2439 | discard this dentry outright" | |
2440 | ||
2441 | Reported-by: Leandro Awa <lawa@nvidia.com> | |
2442 | Link: https://bugzilla.kernel.org/show_bug.cgi?id=104911 | |
2443 | Fixes: 766c4cbfacd8 ("namei: d_is_negative() should be checked...") | |
2444 | Tested-by: Leandro Awa <lawa@nvidia.com> | |
2445 | Cc: stable@vger.kernel.org # v4.1+ | |
2446 | Signed-off-by: Trond Myklebust <trond.myklebust@primarydata.com> | |
2447 | Acked-by: Al Viro <viro@zeniv.linux.org.uk> | |
2448 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
2449 | ||
2450 | fs/namei.c | 8 ++++++-- | |
2451 | 1 files changed, 6 insertions(+), 2 deletions(-) | |
2452 | ||
2453 | commit c0181260ce096a814637ad60e45a64c94840fffa | |
2454 | Author: Matt Fleming <matt.fleming@intel.com> | |
2455 | Date: Fri Sep 25 23:02:18 2015 +0100 | |
2456 | ||
2457 | x86/efi: Fix boot crash by mapping EFI memmap entries bottom-up at runtime, instead of top-down | |
2458 | ||
2459 | Beginning with UEFI v2.5 EFI_PROPERTIES_TABLE was introduced | |
2460 | that signals that the firmware PE/COFF loader supports splitting | |
2461 | code and data sections of PE/COFF images into separate EFI | |
2462 | memory map entries. This allows the kernel to map those regions | |
2463 | with strict memory protections, e.g. EFI_MEMORY_RO for code, | |
2464 | EFI_MEMORY_XP for data, etc. | |
2465 | ||
2466 | Unfortunately, an unwritten requirement of this new feature is | |
2467 | that the regions need to be mapped with the same offsets | |
2468 | relative to each other as observed in the EFI memory map. If | |
2469 | this is not done crashes like this may occur, | |
2470 | ||
2471 | BUG: unable to handle kernel paging request at fffffffefe6086dd | |
2472 | IP: [<fffffffefe6086dd>] 0xfffffffefe6086dd | |
2473 | Call Trace: | |
2474 | [<ffffffff8104c90e>] efi_call+0x7e/0x100 | |
2475 | [<ffffffff81602091>] ? virt_efi_set_variable+0x61/0x90 | |
2476 | [<ffffffff8104c583>] efi_delete_dummy_variable+0x63/0x70 | |
2477 | [<ffffffff81f4e4aa>] efi_enter_virtual_mode+0x383/0x392 | |
2478 | [<ffffffff81f37e1b>] start_kernel+0x38a/0x417 | |
2479 | [<ffffffff81f37495>] x86_64_start_reservations+0x2a/0x2c | |
2480 | [<ffffffff81f37582>] x86_64_start_kernel+0xeb/0xef | |
2481 | ||
2482 | Here 0xfffffffefe6086dd refers to an address the firmware | |
2483 | expects to be mapped but which the OS never claimed was mapped. | |
2484 | The issue is that included in these regions are relative | |
2485 | addresses to other regions which were emitted by the firmware | |
2486 | toolchain before the "splitting" of sections occurred at | |
2487 | runtime. | |
2488 | ||
2489 | Needless to say, we don't satisfy this unwritten requirement on | |
2490 | x86_64 and instead map the EFI memory map entries in reverse | |
2491 | order. The above crash is almost certainly triggerable with any | |
2492 | kernel newer than v3.13 because that's when we rewrote the EFI | |
2493 | runtime region mapping code, in commit d2f7cbe7b26a ("x86/efi: | |
2494 | Runtime services virtual mapping"). For kernel versions before | |
2495 | v3.13 things may work by pure luck depending on the | |
2496 | fragmentation of the kernel virtual address space at the time we | |
2497 | map the EFI regions. | |
2498 | ||
2499 | Instead of mapping the EFI memory map entries in reverse order, | |
2500 | where entry N has a higher virtual address than entry N+1, map | |
2501 | them in the same order as they appear in the EFI memory map to | |
2502 | preserve this relative offset between regions. | |
2503 | ||
2504 | This patch has been kept as small as possible with the intention | |
2505 | that it should be applied aggressively to stable and | |
2506 | distribution kernels. It is very much a bugfix rather than | |
2507 | support for a new feature, since when EFI_PROPERTIES_TABLE is | |
2508 | enabled we must map things as outlined above to even boot - we | |
2509 | have no way of asking the firmware not to split the code/data | |
2510 | regions. | |
2511 | ||
2512 | In fact, this patch doesn't even make use of the more strict | |
2513 | memory protections available in UEFI v2.5. That will come later. | |
2514 | ||
2515 | Suggested-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> | |
2516 | Reported-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> | |
2517 | Signed-off-by: Matt Fleming <matt.fleming@intel.com> | |
2518 | Cc: <stable@vger.kernel.org> | |
2519 | Cc: Borislav Petkov <bp@suse.de> | |
2520 | Cc: Chun-Yi <jlee@suse.com> | |
2521 | Cc: Dave Young <dyoung@redhat.com> | |
2522 | Cc: H. Peter Anvin <hpa@zytor.com> | |
2523 | Cc: James Bottomley <JBottomley@Odin.com> | |
2524 | Cc: Lee, Chun-Yi <jlee@suse.com> | |
2525 | Cc: Leif Lindholm <leif.lindholm@linaro.org> | |
2526 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
2527 | Cc: Matthew Garrett <mjg59@srcf.ucam.org> | |
2528 | Cc: Mike Galbraith <efault@gmx.de> | |
2529 | Cc: Peter Jones <pjones@redhat.com> | |
2530 | Cc: Peter Zijlstra <peterz@infradead.org> | |
2531 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
2532 | Cc: linux-kernel@vger.kernel.org | |
2533 | Link: http://lkml.kernel.org/r/1443218539-7610-2-git-send-email-matt@codeblueprint.co.uk | |
2534 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
2535 | ||
2536 | arch/x86/platform/efi/efi.c | 67 ++++++++++++++++++++++++++++++++++++++++++- | |
2537 | 1 files changed, 66 insertions(+), 1 deletions(-) | |
2538 | ||
2539 | commit 9377caab146791c8c587da3750d6eddcd01bdfba | |
2540 | Author: Ard Biesheuvel <ard.biesheuvel@linaro.org> | |
2541 | Date: Fri Sep 25 23:02:19 2015 +0100 | |
2542 | ||
2543 | arm64/efi: Fix boot crash by not padding between EFI_MEMORY_RUNTIME regions | |
2544 | ||
2545 | The new Properties Table feature introduced in UEFIv2.5 may | |
2546 | split memory regions that cover PE/COFF memory images into | |
2547 | separate code and data regions. Since these regions only differ | |
2548 | in the type (runtime code vs runtime data) and the permission | |
2549 | bits, but not in the memory type attributes (UC/WC/WT/WB), the | |
2550 | spec does not require them to be aligned to 64 KB. | |
2551 | ||
2552 | Since the relative offset of PE/COFF .text and .data segments | |
2553 | cannot be changed on the fly, this means that we can no longer | |
2554 | pad out those regions to be mappable using 64 KB pages. | |
2555 | Unfortunately, there is no annotation in the UEFI memory map | |
2556 | that identifies data regions that were split off from a code | |
2557 | region, so we must apply this logic to all adjacent runtime | |
2558 | regions whose attributes only differ in the permission bits. | |
2559 | ||
2560 | So instead of rounding each memory region to 64 KB alignment at | |
2561 | both ends, only round down regions that are not directly | |
2562 | preceded by another runtime region with the same type | |
2563 | attributes. Since the UEFI spec does not mandate that the memory | |
2564 | map be sorted, this means we also need to sort it first. | |
2565 | ||
2566 | Note that this change will result in all EFI_MEMORY_RUNTIME | |
2567 | regions whose start addresses are not aligned to the OS page | |
2568 | size to be mapped with executable permissions (i.e., on kernels | |
2569 | compiled with 64 KB pages). However, since these mappings are | |
2570 | only active during the time that UEFI Runtime Services are being | |
2571 | invoked, the window for abuse is rather small. | |
2572 | ||
2573 | Tested-by: Mark Salter <msalter@redhat.com> | |
2574 | Tested-by: Mark Rutland <mark.rutland@arm.com> [UEFI 2.4 only] | |
2575 | Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> | |
2576 | Signed-off-by: Matt Fleming <matt.fleming@intel.com> | |
2577 | Reviewed-by: Mark Salter <msalter@redhat.com> | |
2578 | Reviewed-by: Mark Rutland <mark.rutland@arm.com> | |
2579 | Cc: <stable@vger.kernel.org> # v4.0+ | |
2580 | Cc: Catalin Marinas <catalin.marinas@arm.com> | |
2581 | Cc: Leif Lindholm <leif.lindholm@linaro.org> | |
2582 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
2583 | Cc: Mike Galbraith <efault@gmx.de> | |
2584 | Cc: Peter Zijlstra <peterz@infradead.org> | |
2585 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
2586 | Cc: Will Deacon <will.deacon@arm.com> | |
2587 | Cc: linux-kernel@vger.kernel.org | |
2588 | Link: http://lkml.kernel.org/r/1443218539-7610-3-git-send-email-matt@codeblueprint.co.uk | |
2589 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
2590 | ||
2591 | arch/arm64/kernel/efi.c | 3 +- | |
2592 | drivers/firmware/efi/libstub/arm-stub.c | 88 +++++++++++++++++++++++++----- | |
2593 | 2 files changed, 75 insertions(+), 16 deletions(-) | |
2594 | ||
2595 | commit 189124f1e733622c44d72060832af3c68d7ee8bc | |
2596 | Author: Ralf Baechle <ralf@linux-mips.org> | |
2597 | Date: Fri Oct 2 09:48:57 2015 +0200 | |
2598 | ||
2599 | MIPS: BPF: Fix load delay slots. | |
2600 | ||
2601 | The entire bpf_jit_asm.S is written in noreorder mode because "we know | |
2602 | better" according to a comment. This also prevented the assembler from | |
2603 | throwing in the required NOPs for MIPS I processors which have no | |
2604 | load-use interlock, thus the load's consumer might end up using the | |
2605 | old value of the register from prior to the load. | |
2606 | ||
2607 | Fixed by putting the assembler in reorder mode for just the affected | |
2608 | load instructions. This is not enough for gas to actually try to be | |
2609 | clever by looking at the next instruction and inserting a nop only | |
2610 | when needed but as the comment said "we know better", so getting gas | |
2611 | to unconditionally emit a NOP is just right in this case and prevents | |
2612 | adding further ifdefery. | |
2613 | ||
2614 | Signed-off-by: Ralf Baechle <ralf@linux-mips.org> | |
2615 | ||
2616 | arch/mips/net/bpf_jit_asm.S | 4 ++++ | |
2617 | 1 files changed, 4 insertions(+), 0 deletions(-) | |
2618 | ||
2619 | commit b4b012d6599fbc3c6e81f0a03cd59eb9f0095ed8 | |
2620 | Author: Lee, Chun-Yi <joeyli.kernel@gmail.com> | |
2621 | Date: Tue Sep 29 20:58:57 2015 +0800 | |
2622 | ||
2623 | x86/kexec: Fix kexec crash in syscall kexec_file_load() | |
2624 | ||
2625 | The original bug is a page fault crash that sometimes happens | |
2626 | on big machines when preparing ELF headers: | |
2627 | ||
2628 | BUG: unable to handle kernel paging request at ffffc90613fc9000 | |
2629 | IP: [<ffffffff8103d645>] prepare_elf64_ram_headers_callback+0x165/0x260 | |
2630 | ||
2631 | The bug is caused by us under-counting the number of memory ranges | |
2632 | and subsequently not allocating enough ELF header space for them. | |
2633 | The bug is typically masked on smaller systems, because the ELF header | |
2634 | allocation is rounded up to the next page. | |
2635 | ||
2636 | This patch modifies the code in fill_up_crash_elf_data() by using | |
2637 | walk_system_ram_res() instead of walk_system_ram_range() to correctly | |
2638 | count the max number of crash memory ranges. That's because the | |
2639 | walk_system_ram_range() filters out small memory regions that | |
2640 | reside in the same page, but walk_system_ram_res() does not. | |
2641 | ||
2642 | Here's how I found the bug: | |
2643 | ||
2644 | After tracing prepare_elf64_headers() and prepare_elf64_ram_headers_callback(), | |
2645 | the code uses walk_system_ram_res() to fill-in crash memory regions information | |
2646 | to the program header, so it counts those small memory regions that | |
2647 | reside in a page area. | |
2648 | ||
2649 | But, when the kernel was using walk_system_ram_range() in | |
2650 | fill_up_crash_elf_data() to count the number of crash memory regions, | |
2651 | it filters out small regions. | |
2652 | ||
2653 | I printed those small memory regions, for example: | |
2654 | ||
2655 | kexec: Get nr_ram ranges. vaddr=0xffff880077592258 paddr=0x77592258, sz=0xdc0 | |
2656 | ||
2657 | Based on the code in walk_system_ram_range(), this memory region | |
2658 | will be filtered out: | |
2659 | ||
2660 | pfn = (0x77592258 + 0x1000 - 1) >> 12 = 0x77593 | |
2661 | end_pfn = (0x77592258 + 0xfc0 -1 + 1) >> 12 = 0x77593 | |
2662 | end_pfn - pfn = 0x77593 - 0x77593 = 0 <=== if (end_pfn > pfn) is FALSE | |
2663 | ||
2664 | So, the max_nr_ranges that's counted by the kernel doesn't include | |
2665 | small memory regions - causing us to under-allocate the required space. | |
2666 | That causes the page fault crash that happens in a later code path | |
2667 | when preparing ELF headers. | |
2668 | ||
2669 | This bug is not easy to reproduce on small machines that have few | |
2670 | CPUs, because the allocated page aligned ELF buffer has more free | |
2671 | space to cover those small memory regions' PT_LOAD headers. | |
2672 | ||
2673 | Signed-off-by: Lee, Chun-Yi <jlee@suse.com> | |
2674 | Cc: Andy Lutomirski <luto@kernel.org> | |
2675 | Cc: Baoquan He <bhe@redhat.com> | |
2676 | Cc: Jiang Liu <jiang.liu@linux.intel.com> | |
2677 | Cc: Linus Torvalds <torvalds@linux-foundation.org> | |
2678 | Cc: Mike Galbraith <efault@gmx.de> | |
2679 | Cc: Peter Zijlstra <peterz@infradead.org> | |
2680 | Cc: Stephen Rothwell <sfr@canb.auug.org.au> | |
2681 | Cc: Takashi Iwai <tiwai@suse.de> | |
2682 | Cc: Thomas Gleixner <tglx@linutronix.de> | |
2683 | Cc: Viresh Kumar <viresh.kumar@linaro.org> | |
2684 | Cc: Vivek Goyal <vgoyal@redhat.com> | |
2685 | Cc: kexec@lists.infradead.org | |
2686 | Cc: linux-kernel@vger.kernel.org | |
2687 | Cc: <stable@vger.kernel.org> | |
2688 | Link: http://lkml.kernel.org/r/1443531537-29436-1-git-send-email-jlee@suse.com | |
2689 | Signed-off-by: Ingo Molnar <mingo@kernel.org> | |
2690 | ||
2691 | arch/x86/kernel/crash.c | 7 +++---- | |
2692 | 1 files changed, 3 insertions(+), 4 deletions(-) | |
2693 | ||
2694 | commit bf91f1e0162bdd27ebd1411090a81fd9188daa4f | |
2695 | Author: Elad Raz <eladr@mellanox.com> | |
2696 | Date: Sat Aug 22 08:44:11 2015 +0300 | |
2697 | ||
2698 | netfilter: ipset: Fixing unnamed union init | |
2699 | ||
2700 | In continue to proposed Vinson Lee's post [1], this patch fixes compilation | |
2701 | issues founded at gcc 4.4.7. The initialization of .cidr field of unnamed | |
2702 | unions causes compilation error in gcc 4.4.x. | |
2703 | ||
2704 | References | |
2705 | ||
2706 | Visible links | |
2707 | [1] https://lkml.org/lkml/2015/7/5/74 | |
2708 | ||
2709 | Signed-off-by: Elad Raz <eladr@mellanox.com> | |
2710 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
2711 | ||
2712 | net/netfilter/ipset/ip_set_hash_netnet.c | 20 ++++++++++++++++++-- | |
2713 | net/netfilter/ipset/ip_set_hash_netportnet.c | 20 ++++++++++++++++++-- | |
2714 | 2 files changed, 36 insertions(+), 4 deletions(-) | |
2715 | ||
40d5ff9e PK |
2716 | commit fed13a5012b8d7e87a6f9efa2e40e0be28eaecd9 |
2717 | Author: Brad Spengler <spender@grsecurity.net> | |
2718 | Date: Fri Oct 9 23:12:43 2015 -0400 | |
2719 | ||
2720 | compile fix | |
2721 | ||
2722 | arch/x86/mm/pgtable.c | 2 ++ | |
2723 | 1 files changed, 2 insertions(+), 0 deletions(-) | |
2724 | ||
2725 | commit 58edc15a668a6dd90b3f66abc84b509f8fba7505 | |
2726 | Author: Daniel Borkmann <daniel@iogearbox.net> | |
2727 | Date: Mon Aug 31 19:11:02 2015 +0200 | |
2728 | ||
2729 | netfilter: conntrack: use nf_ct_tmpl_free in CT/synproxy error paths | |
2730 | ||
2731 | Commit 0838aa7fcfcd ("netfilter: fix netns dependencies with conntrack | |
2732 | templates") migrated templates to the new allocator api, but forgot to | |
2733 | update error paths for them in CT and synproxy to use nf_ct_tmpl_free() | |
2734 | instead of nf_conntrack_free(). | |
2735 | ||
2736 | Due to that, memory is being freed into the wrong kmemcache, but also | |
2737 | we drop the per net reference count of ct objects causing an imbalance. | |
2738 | ||
2739 | In Brad's case, this leads to a wrap-around of net->ct.count and thus | |
2740 | lets __nf_conntrack_alloc() refuse to create a new ct object: | |
2741 | ||
2742 | [ 10.340913] xt_addrtype: ipv6 does not support BROADCAST matching | |
2743 | [ 10.810168] nf_conntrack: table full, dropping packet | |
2744 | [ 11.917416] r8169 0000:07:00.0 eth0: link up | |
2745 | [ 11.917438] IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready | |
2746 | [ 12.815902] nf_conntrack: table full, dropping packet | |
2747 | [ 15.688561] nf_conntrack: table full, dropping packet | |
2748 | [ 15.689365] nf_conntrack: table full, dropping packet | |
2749 | [ 15.690169] nf_conntrack: table full, dropping packet | |
2750 | [ 15.690967] nf_conntrack: table full, dropping packet | |
2751 | [...] | |
2752 | ||
2753 | With slab debugging, it also reports the wrong kmemcache (kmalloc-512 vs. | |
2754 | nf_conntrack_ffffffff81ce75c0) and reports poison overwrites, etc. Thus, | |
2755 | to fix the problem, export and use nf_ct_tmpl_free() instead. | |
2756 | ||
2757 | Fixes: 0838aa7fcfcd ("netfilter: fix netns dependencies with conntrack templates") | |
2758 | Reported-by: Brad Jackson <bjackson0971@gmail.com> | |
2759 | Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> | |
2760 | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> | |
2761 | ||
2762 | include/net/netfilter/nf_conntrack.h | 1 + | |
2763 | net/netfilter/nf_conntrack_core.c | 3 ++- | |
2764 | net/netfilter/nf_synproxy_core.c | 2 +- | |
2765 | net/netfilter/xt_CT.c | 2 +- | |
2766 | 4 files changed, 5 insertions(+), 3 deletions(-) | |
2767 | ||
2768 | commit 37d26e44573aaa9c3b1f0c36ec9d4bddc008fc03 | |
2769 | Author: Brad Spengler <spender@grsecurity.net> | |
2770 | Date: Fri Oct 9 18:22:54 2015 -0400 | |
2771 | ||
2772 | Fix BUG() in scatterwalk_map_and_copy caused by virt_to_page being | |
2773 | called on the KSTACKOVERFLOW's vmalloc'd stack. Thanks to | |
2774 | Yves-Alexis Perez for the report | |
2775 | ||
2776 | crypto/scatterwalk.c | 10 ++++++++-- | |
2777 | 1 files changed, 8 insertions(+), 2 deletions(-) | |
2778 | ||
2779 | commit 8137d53d2b60023587a48004f0b67946ed6db4a8 | |
2780 | Merge: 147420b a9c991f | |
2781 | Author: Brad Spengler <spender@grsecurity.net> | |
2782 | Date: Fri Oct 9 18:20:32 2015 -0400 | |
2783 | ||
2784 | Merge branch 'pax-test' into grsec-test | |
2785 | ||
2786 | commit a9c991f727bb8daf15838296e301683791c17071 | |
2787 | Author: Brad Spengler <spender@grsecurity.net> | |
2788 | Date: Fri Oct 9 18:20:07 2015 -0400 | |
2789 | ||
2790 | Update to pax-linux-4.2.3-test8.patch: | |
2791 | - fixed vsyscall/pvclock regression caused by the recent page table hardening, reported by kamil (https://forums.grsecurity.net/viewtopic.php?f=3&t=4272) | |
2792 | ||
2793 | arch/x86/kernel/espfix_64.c | 4 +--- | |
2794 | arch/x86/kernel/kvmclock.c | 20 ++++++-------------- | |
2795 | arch/x86/mm/highmem_32.c | 2 ++ | |
2796 | arch/x86/mm/pgtable.c | 33 +++++++++++++++++++++++++++++++++ | |
2797 | 4 files changed, 42 insertions(+), 17 deletions(-) | |
2798 | ||
2799 | commit 147420b0f00c7f20f354e1dfa460b904a3af432b | |
2800 | Author: Brad Spengler <spender@grsecurity.net> | |
2801 | Date: Fri Oct 9 08:54:24 2015 -0400 | |
2802 | ||
2803 | Properly fix the bug reported at: | |
2804 | https://code.google.com/p/android/issues/detail?id=187973 | |
2805 | ||
2806 | drivers/net/slip/slhc.c | 3 +++ | |
2807 | 1 files changed, 3 insertions(+), 0 deletions(-) | |
2808 | ||
afe359a8 PK |
2809 | commit 4918a68ea80e1185ec8f3a94d3a2210552ed0bb5 |
2810 | Merge: 4e736d9 7e02f35 | |
0a9c1e67 | 2811 | Author: Brad Spengler <spender@grsecurity.net> |
afe359a8 | 2812 | Date: Wed Oct 7 20:57:21 2015 -0400 |
0a9c1e67 | 2813 | |
afe359a8 | 2814 | Merge branch 'pax-test' into grsec-test |
ee1b9a5f | 2815 | |
da1216b9 | 2816 | Conflicts: |
afe359a8 | 2817 | arch/x86/kernel/espfix_64.c |
da1216b9 | 2818 | |
afe359a8 PK |
2819 | commit 7e02f35880fd6bdb2f4e7ba07a13d6df1d121008 |
2820 | Author: Brad Spengler <spender@grsecurity.net> | |
2821 | Date: Wed Oct 7 20:54:36 2015 -0400 | |
da1216b9 | 2822 | |
afe359a8 PK |
2823 | Update to pax-linux-4.2.3-test7.patch: |
2824 | - backported vanilla commits b763ec17ac762470eec5be8ebcc43e4f8b2c2b82 and 176fc2d5770a0990eebff903ba680d2edd32e718 | |
2825 | - constified a few more page tables for ESPFIX/amd64 | |
2826 | - fixed xen and the recently added level1_modules_pgt page tables on amd64 | |
ee1b9a5f | 2827 | |
afe359a8 PK |
2828 | arch/x86/include/asm/pgtable_64.h | 1 + |
2829 | arch/x86/kernel/espfix_64.c | 35 +++++++++++++++++++++++---------- | |
2830 | arch/x86/xen/mmu.c | 4 +++ | |
2831 | drivers/base/regmap/regmap-debugfs.c | 14 +++++------- | |
2832 | 4 files changed, 35 insertions(+), 19 deletions(-) | |
ee1b9a5f | 2833 | |
afe359a8 PK |
2834 | commit 4e736d9e568f6cc0d08dfe7519abf9a5d58a5418 |
2835 | Author: Robin Murphy <robin.murphy@arm.com> | |
2836 | Date: Thu Oct 1 15:37:19 2015 -0700 | |
ee1b9a5f | 2837 | |
afe359a8 | 2838 | dmapool: fix overflow condition in pool_find_page() |
ee1b9a5f | 2839 | |
afe359a8 PK |
2840 | If a DMA pool lies at the very top of the dma_addr_t range (as may |
2841 | happen with an IOMMU involved), the calculated end address of the pool | |
2842 | wraps around to zero, and page lookup always fails. | |
ee1b9a5f | 2843 | |
afe359a8 | 2844 | Tweak the relevant calculation to be overflow-proof. |
da1216b9 | 2845 | |
afe359a8 PK |
2846 | Signed-off-by: Robin Murphy <robin.murphy@arm.com> |
2847 | Cc: Arnd Bergmann <arnd@arndb.de> | |
2848 | Cc: Marek Szyprowski <m.szyprowski@samsung.com> | |
2849 | Cc: Sumit Semwal <sumit.semwal@linaro.org> | |
2850 | Cc: Sakari Ailus <sakari.ailus@iki.fi> | |
2851 | Cc: Russell King <rmk+kernel@arm.linux.org.uk> | |
da1216b9 PK |
2852 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> |
2853 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
ee1b9a5f | 2854 | |
afe359a8 | 2855 | mm/dmapool.c | 2 +- |
578d7714 PK |
2856 | 1 files changed, 1 insertions(+), 1 deletions(-) |
2857 | ||
afe359a8 PK |
2858 | commit 96a101a9b4208a6e5f2a0db7599881142e70ba43 |
2859 | Author: Greg Thelen <gthelen@google.com> | |
2860 | Date: Thu Oct 1 15:37:05 2015 -0700 | |
578d7714 | 2861 | |
afe359a8 | 2862 | memcg: make mem_cgroup_read_stat() unsigned |
da1216b9 | 2863 | |
afe359a8 PK |
2864 | mem_cgroup_read_stat() returns a page count by summing per cpu page |
2865 | counters. The summing is racy wrt. updates, so a transient negative | |
2866 | sum is possible. Callers don't want negative values: | |
578d7714 | 2867 | |
afe359a8 PK |
2868 | - mem_cgroup_wb_stats() doesn't want negative nr_dirty or nr_writeback. |
2869 | This could confuse dirty throttling. | |
da1216b9 | 2870 | |
afe359a8 | 2871 | - oom reports and memory.stat shouldn't show confusing negative usage. |
da1216b9 | 2872 | |
afe359a8 | 2873 | - tree_usage() already avoids negatives. |
da1216b9 | 2874 | |
afe359a8 PK |
2875 | Avoid returning negative page counts from mem_cgroup_read_stat() and |
2876 | convert it to unsigned. | |
da1216b9 | 2877 | |
afe359a8 PK |
2878 | [akpm@linux-foundation.org: fix old typo while we're in there] |
2879 | Signed-off-by: Greg Thelen <gthelen@google.com> | |
2880 | Cc: Johannes Weiner <hannes@cmpxchg.org> | |
2881 | Acked-by: Michal Hocko <mhocko@suse.com> | |
2882 | Cc: <stable@vger.kernel.org> [4.2+] | |
2883 | Signed-off-by: Andrew Morton <akpm@linux-foundation.org> | |
2884 | Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org> | |
eeed91c5 | 2885 | |
afe359a8 PK |
2886 | mm/memcontrol.c | 30 ++++++++++++++++++------------ |
2887 | 1 files changed, 18 insertions(+), 12 deletions(-) | |
eeed91c5 | 2888 | |
afe359a8 | 2889 | commit b7808c46650d5f4c09f071566de991af36eb9d37 |
da1216b9 | 2890 | Author: Daniel Borkmann <daniel@iogearbox.net> |
afe359a8 PK |
2891 | Date: Fri Oct 2 12:06:03 2015 +0200 |
2892 | ||
2893 | bpf: fix panic in SO_GET_FILTER with native ebpf programs | |
2894 | ||
2895 | When sockets have a native eBPF program attached through | |
2896 | setsockopt(sk, SOL_SOCKET, SO_ATTACH_BPF, ...), and then try to | |
2897 | dump these over getsockopt(sk, SOL_SOCKET, SO_GET_FILTER, ...), | |
2898 | the following panic appears: | |
2899 | ||
2900 | [49904.178642] BUG: unable to handle kernel NULL pointer dereference at (null) | |
2901 | [49904.178762] IP: [<ffffffff81610fd9>] sk_get_filter+0x39/0x90 | |
2902 | [49904.182000] PGD 86fc9067 PUD 531a1067 PMD 0 | |
2903 | [49904.185196] Oops: 0000 [#1] SMP | |
2904 | [...] | |
2905 | [49904.224677] Call Trace: | |
2906 | [49904.226090] [<ffffffff815e3d49>] sock_getsockopt+0x319/0x740 | |
2907 | [49904.227535] [<ffffffff812f59e3>] ? sock_has_perm+0x63/0x70 | |
2908 | [49904.228953] [<ffffffff815e2fc8>] ? release_sock+0x108/0x150 | |
2909 | [49904.230380] [<ffffffff812f5a43>] ? selinux_socket_getsockopt+0x23/0x30 | |
2910 | [49904.231788] [<ffffffff815dff36>] SyS_getsockopt+0xa6/0xc0 | |
2911 | [49904.233267] [<ffffffff8171b9ae>] entry_SYSCALL_64_fastpath+0x12/0x71 | |
2912 | ||
2913 | The underlying issue is the very same as in commit b382c0865600 | |
2914 | ("sock, diag: fix panic in sock_diag_put_filterinfo"), that is, | |
2915 | native eBPF programs don't store an original program since this | |
2916 | is only needed in cBPF ones. | |
2917 | ||
2918 | However, sk_get_filter() wasn't updated to test for this at the | |
2919 | time when eBPF could be attached. Just throw an error to the user | |
2920 | to indicate that eBPF cannot be dumped over this interface. | |
2921 | That way, it can also be known that a program _is_ attached (as | |
2922 | opposed to just return 0), and a different (future) method needs | |
2923 | to be consulted for a dump. | |
2924 | ||
2925 | Fixes: 89aa075832b0 ("net: sock: allow eBPF programs to be attached to sockets") | |
da1216b9 | 2926 | Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> |
afe359a8 | 2927 | Acked-by: Alexei Starovoitov <ast@plumgrid.com> |
da1216b9 | 2928 | Signed-off-by: David S. Miller <davem@davemloft.net> |
32ca80f1 | 2929 | |
afe359a8 PK |
2930 | net/core/filter.c | 6 +++++- |
2931 | 1 files changed, 5 insertions(+), 1 deletions(-) | |
32ca80f1 | 2932 | |
afe359a8 PK |
2933 | commit 40853c884afb5fc2dcb9f7fc34ef446162566fcc |
2934 | Author: Steve French <smfrench@gmail.com> | |
2935 | Date: Mon Sep 28 17:21:07 2015 -0500 | |
32ca80f1 | 2936 | |
afe359a8 | 2937 | [SMB3] Do not fall back to SMBWriteX in set_file_size error cases |
e1f904d0 | 2938 | |
afe359a8 | 2939 | The error paths in set_file_size for cifs and smb3 are incorrect. |
e1f904d0 | 2940 | |
afe359a8 PK |
2941 | In the unlikely event that a server did not support set file info |
2942 | of the file size, the code incorrectly falls back to trying SMBWriteX | |
2943 | (note that only the original core SMB Write, used for example by DOS, | |
2944 | can set the file size this way - this actually does not work for the more | |
2945 | recent SMBWriteX). The idea was since the old DOS SMB Write could set | |
2946 | the file size if you write zero bytes at that offset then use that if | |
2947 | server rejects the normal set file info call. | |
da1216b9 | 2948 | |
afe359a8 PK |
2949 | Fortunately the SMBWriteX will never be sent on the wire (except when |
2950 | file size is zero) since the length and offset fields were reversed | |
2951 | in the two places in this function that call SMBWriteX causing | |
2952 | the fall back path to return an error. It is also important to never call | |
2953 | an SMB request from an SMB2/sMB3 session (which theoretically would | |
2954 | be possible, and can cause a brief session drop, although the client | |
2955 | recovers) so this should be fixed. In practice this path does not happen | |
2956 | with modern servers but the error fall back to SMBWriteX is clearly wrong. | |
e1f904d0 | 2957 | |
afe359a8 | 2958 | Removing the calls to SMBWriteX in the error paths in cifs_set_file_size |
da1216b9 | 2959 | |
afe359a8 | 2960 | Pointed out by PaX/grsecurity team |
cac6ae42 | 2961 | |
afe359a8 PK |
2962 | Signed-off-by: Steve French <steve.french@primarydata.com> |
2963 | Reported-by: PaX Team <pageexec@freemail.hu> | |
2964 | CC: Emese Revfy <re.emese@gmail.com> | |
2965 | CC: Brad Spengler <spender@grsecurity.net> | |
2966 | CC: Stable <stable@vger.kernel.org> | |
3969d2a7 | 2967 | |
afe359a8 PK |
2968 | fs/cifs/inode.c | 34 ---------------------------------- |
2969 | 1 files changed, 0 insertions(+), 34 deletions(-) | |
3969d2a7 | 2970 | |
afe359a8 | 2971 | commit f5fad97c967a08f4a89513969598b1d3c8232a38 |
3969d2a7 | 2972 | Author: Brad Spengler <spender@grsecurity.net> |
afe359a8 | 2973 | Date: Wed Oct 7 18:22:40 2015 -0400 |
3969d2a7 | 2974 | |
afe359a8 PK |
2975 | Initial import of grsecurity for Linux 4.2.3 |
2976 | Note that size_overflow is currently marked BROKEN | |
76e7c0f9 | 2977 | |
6090327c | 2978 | Documentation/dontdiff | 2 + |
e8242a6d | 2979 | Documentation/kernel-parameters.txt | 7 + |
afe359a8 | 2980 | Documentation/sysctl/kernel.txt | 15 + |
a8b227b4 | 2981 | Makefile | 18 +- |
6090327c PK |
2982 | arch/alpha/include/asm/cache.h | 4 +- |
2983 | arch/alpha/kernel/osf_sys.c | 12 +- | |
2984 | arch/arm/Kconfig | 1 + | |
2985 | arch/arm/include/asm/thread_info.h | 9 +- | |
2986 | arch/arm/kernel/process.c | 4 +- | |
2987 | arch/arm/kernel/ptrace.c | 9 + | |
2988 | arch/arm/kernel/traps.c | 7 +- | |
2989 | arch/arm/mm/Kconfig | 2 +- | |
2990 | arch/arm/mm/fault.c | 40 +- | |
2991 | arch/arm/mm/mmap.c | 8 +- | |
afe359a8 | 2992 | arch/arm/net/bpf_jit_32.c | 51 +- |
6090327c PK |
2993 | arch/avr32/include/asm/cache.h | 4 +- |
2994 | arch/blackfin/include/asm/cache.h | 3 +- | |
2995 | arch/cris/include/arch-v10/arch/cache.h | 3 +- | |
2996 | arch/cris/include/arch-v32/arch/cache.h | 3 +- | |
2997 | arch/frv/include/asm/cache.h | 3 +- | |
2998 | arch/frv/mm/elf-fdpic.c | 4 +- | |
2999 | arch/hexagon/include/asm/cache.h | 6 +- | |
3000 | arch/ia64/Kconfig | 1 + | |
3001 | arch/ia64/include/asm/cache.h | 3 +- | |
3002 | arch/ia64/kernel/sys_ia64.c | 2 + | |
3003 | arch/ia64/mm/hugetlbpage.c | 2 + | |
3004 | arch/m32r/include/asm/cache.h | 4 +- | |
3005 | arch/m68k/include/asm/cache.h | 4 +- | |
3006 | arch/metag/mm/hugetlbpage.c | 1 + | |
3007 | arch/microblaze/include/asm/cache.h | 3 +- | |
3008 | arch/mips/Kconfig | 1 + | |
3009 | arch/mips/include/asm/cache.h | 3 +- | |
3010 | arch/mips/include/asm/thread_info.h | 11 +- | |
da1216b9 | 3011 | arch/mips/kernel/irq.c | 3 + |
6090327c PK |
3012 | arch/mips/kernel/ptrace.c | 9 + |
3013 | arch/mips/mm/mmap.c | 4 +- | |
3014 | arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +- | |
3015 | arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +- | |
3016 | arch/openrisc/include/asm/cache.h | 4 +- | |
3017 | arch/parisc/include/asm/cache.h | 5 +- | |
3018 | arch/parisc/kernel/sys_parisc.c | 4 + | |
3019 | arch/powerpc/Kconfig | 1 + | |
3020 | arch/powerpc/include/asm/cache.h | 3 +- | |
3021 | arch/powerpc/include/asm/thread_info.h | 5 +- | |
3022 | arch/powerpc/kernel/Makefile | 2 + | |
3023 | arch/powerpc/kernel/irq.c | 3 + | |
3024 | arch/powerpc/kernel/process.c | 10 +- | |
3025 | arch/powerpc/kernel/ptrace.c | 14 + | |
3026 | arch/powerpc/kernel/traps.c | 5 + | |
6090327c | 3027 | arch/powerpc/mm/slice.c | 2 +- |
6090327c PK |
3028 | arch/s390/include/asm/cache.h | 4 +- |
3029 | arch/score/include/asm/cache.h | 4 +- | |
3030 | arch/sh/include/asm/cache.h | 3 +- | |
3031 | arch/sh/mm/mmap.c | 6 +- | |
3032 | arch/sparc/include/asm/cache.h | 4 +- | |
0986ccbe PK |
3033 | arch/sparc/include/asm/pgalloc_64.h | 1 + |
3034 | arch/sparc/include/asm/thread_info_64.h | 8 +- | |
6090327c PK |
3035 | arch/sparc/kernel/process_32.c | 6 +- |
3036 | arch/sparc/kernel/process_64.c | 8 +- | |
3037 | arch/sparc/kernel/ptrace_64.c | 14 + | |
3038 | arch/sparc/kernel/sys_sparc_64.c | 8 +- | |
3039 | arch/sparc/kernel/syscalls.S | 8 +- | |
3040 | arch/sparc/kernel/traps_32.c | 8 +- | |
3041 | arch/sparc/kernel/traps_64.c | 28 +- | |
3042 | arch/sparc/kernel/unaligned_64.c | 2 +- | |
3043 | arch/sparc/mm/fault_64.c | 2 +- | |
3044 | arch/sparc/mm/hugetlbpage.c | 15 +- | |
3045 | arch/tile/Kconfig | 1 + | |
3046 | arch/tile/include/asm/cache.h | 3 +- | |
3047 | arch/tile/mm/hugetlbpage.c | 2 + | |
3048 | arch/um/include/asm/cache.h | 3 +- | |
3049 | arch/unicore32/include/asm/cache.h | 6 +- | |
afe359a8 PK |
3050 | arch/x86/Kconfig | 21 + |
3051 | arch/x86/entry/entry_32.S | 2 +- | |
3052 | arch/x86/entry/entry_64.S | 2 +- | |
6090327c PK |
3053 | arch/x86/ia32/ia32_aout.c | 2 + |
3054 | arch/x86/include/asm/floppy.h | 20 +- | |
3055 | arch/x86/include/asm/io.h | 2 +- | |
3056 | arch/x86/include/asm/page.h | 12 +- | |
3057 | arch/x86/include/asm/paravirt_types.h | 23 +- | |
3058 | arch/x86/include/asm/processor.h | 2 +- | |
3059 | arch/x86/include/asm/thread_info.h | 8 +- | |
a8b227b4 | 3060 | arch/x86/kernel/dumpstack.c | 10 +- |
6090327c PK |
3061 | arch/x86/kernel/dumpstack_32.c | 2 +- |
3062 | arch/x86/kernel/dumpstack_64.c | 2 +- | |
8cf17962 | 3063 | arch/x86/kernel/espfix_64.c | 2 +- |
afe359a8 | 3064 | arch/x86/kernel/fpu/init.c | 4 +- |
6090327c PK |
3065 | arch/x86/kernel/ioport.c | 13 + |
3066 | arch/x86/kernel/irq_32.c | 3 + | |
3067 | arch/x86/kernel/irq_64.c | 4 + | |
afe359a8 | 3068 | arch/x86/kernel/ldt.c | 18 + |
6090327c PK |
3069 | arch/x86/kernel/msr.c | 10 + |
3070 | arch/x86/kernel/ptrace.c | 28 + | |
3071 | arch/x86/kernel/signal.c | 9 +- | |
3072 | arch/x86/kernel/sys_i386_32.c | 9 +- | |
3073 | arch/x86/kernel/sys_x86_64.c | 8 +- | |
3074 | arch/x86/kernel/traps.c | 5 + | |
3075 | arch/x86/kernel/verify_cpu.S | 1 + | |
3076 | arch/x86/kernel/vm86_32.c | 16 + | |
3077 | arch/x86/mm/fault.c | 12 +- | |
3078 | arch/x86/mm/hugetlbpage.c | 15 +- | |
3079 | arch/x86/mm/init.c | 66 +- | |
3080 | arch/x86/mm/init_32.c | 6 +- | |
0986ccbe | 3081 | arch/x86/net/bpf_jit_comp.c | 4 + |
a8b227b4 | 3082 | arch/x86/platform/efi/efi_64.c | 2 +- |
6090327c PK |
3083 | arch/x86/xen/Kconfig | 1 + |
3084 | arch/xtensa/variants/dc232b/include/variant/core.h | 2 +- | |
3085 | arch/xtensa/variants/fsf/include/variant/core.h | 3 +- | |
6090327c PK |
3086 | drivers/acpi/acpica/hwxfsleep.c | 11 +- |
3087 | drivers/acpi/custom_method.c | 4 + | |
3088 | drivers/block/cciss.h | 30 +- | |
6090327c PK |
3089 | drivers/block/smart1,2.h | 40 +- |
3090 | drivers/cdrom/cdrom.c | 2 +- | |
3091 | drivers/char/Kconfig | 4 +- | |
3092 | drivers/char/genrtc.c | 1 + | |
3093 | drivers/char/mem.c | 17 + | |
3094 | drivers/char/random.c | 5 +- | |
3095 | drivers/cpufreq/sparc-us3-cpufreq.c | 2 - | |
3096 | drivers/firewire/ohci.c | 4 + | |
da1216b9 PK |
3097 | drivers/gpu/drm/drm_context.c | 50 +- |
3098 | drivers/gpu/drm/drm_drv.c | 11 +- | |
3099 | drivers/gpu/drm/drm_lock.c | 18 +- | |
3100 | drivers/gpu/drm/i915/i915_dma.c | 2 + | |
3101 | drivers/gpu/drm/nouveau/nouveau_drm.c | 3 +- | |
6090327c PK |
3102 | drivers/gpu/drm/nouveau/nouveau_ttm.c | 30 +- |
3103 | drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +- | |
afe359a8 | 3104 | drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +- |
6090327c | 3105 | drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +- |
6090327c PK |
3106 | drivers/hid/hid-wiimote-debug.c | 2 +- |
3107 | drivers/infiniband/hw/nes/nes_cm.c | 22 +- | |
0986ccbe | 3108 | drivers/iommu/amd_iommu.c | 14 +- |
6090327c PK |
3109 | drivers/isdn/gigaset/bas-gigaset.c | 32 +- |
3110 | drivers/isdn/gigaset/ser-gigaset.c | 32 +- | |
3111 | drivers/isdn/gigaset/usb-gigaset.c | 32 +- | |
3112 | drivers/isdn/i4l/isdn_concap.c | 6 +- | |
3113 | drivers/isdn/i4l/isdn_x25iface.c | 16 +- | |
a8b227b4 PK |
3114 | drivers/md/raid5.c | 8 + |
3115 | drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +- | |
6090327c | 3116 | drivers/media/radio/radio-cadet.c | 5 +- |
a8b227b4 PK |
3117 | drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +- |
3118 | drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +- | |
6090327c PK |
3119 | drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +- |
3120 | drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +- | |
3121 | drivers/message/fusion/mptbase.c | 9 + | |
3122 | drivers/misc/sgi-xp/xp_main.c | 12 +- | |
6090327c PK |
3123 | drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +- |
3124 | drivers/net/wan/lmc/lmc_media.c | 97 +- | |
3125 | drivers/net/wan/z85230.c | 24 +- | |
3126 | drivers/net/wireless/zd1211rw/zd_usb.c | 2 +- | |
3127 | drivers/pci/proc.c | 9 + | |
3128 | drivers/platform/x86/asus-wmi.c | 12 + | |
3129 | drivers/rtc/rtc-dev.c | 3 + | |
3130 | drivers/scsi/bfa/bfa_fcs.c | 19 +- | |
3131 | drivers/scsi/bfa/bfa_fcs_lport.c | 29 +- | |
3132 | drivers/scsi/bfa/bfa_modules.h | 12 +- | |
e8242a6d | 3133 | drivers/scsi/hpsa.h | 40 +- |
6090327c PK |
3134 | drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +- |
3135 | drivers/staging/lustre/lustre/libcfs/module.c | 10 +- | |
afe359a8 PK |
3136 | drivers/staging/sm750fb/sm750.c | 3 + |
3137 | drivers/tty/serial/uartlite.c | 4 +- | |
6090327c PK |
3138 | drivers/tty/sysrq.c | 2 +- |
3139 | drivers/tty/vt/keyboard.c | 22 +- | |
3140 | drivers/uio/uio.c | 6 +- | |
3141 | drivers/usb/core/hub.c | 5 + | |
a8b227b4 PK |
3142 | drivers/usb/gadget/function/f_uac1.c | 1 + |
3143 | drivers/usb/gadget/function/u_uac1.c | 1 + | |
6090327c | 3144 | drivers/usb/host/hwa-hc.c | 9 +- |
afe359a8 | 3145 | drivers/usb/usbip/vhci_sysfs.c | 2 +- |
6090327c PK |
3146 | drivers/video/fbdev/arcfb.c | 2 +- |
3147 | drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +- | |
3148 | drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +- | |
3149 | drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +- | |
da1216b9 | 3150 | drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----- |
6090327c | 3151 | drivers/xen/xenfs/xenstored.c | 5 + |
afe359a8 PK |
3152 | firmware/Makefile | 2 + |
3153 | firmware/WHENCE | 20 +- | |
3154 | firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++ | |
da1216b9 | 3155 | firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++ |
6090327c PK |
3156 | fs/attr.c | 1 + |
3157 | fs/autofs4/waitq.c | 9 + | |
3158 | fs/binfmt_aout.c | 7 + | |
3159 | fs/binfmt_elf.c | 40 +- | |
6090327c PK |
3160 | fs/compat.c | 20 +- |
3161 | fs/coredump.c | 17 +- | |
8cf17962 | 3162 | fs/dcache.c | 3 + |
da1216b9 PK |
3163 | fs/debugfs/inode.c | 11 +- |
3164 | fs/exec.c | 218 +- | |
6090327c | 3165 | fs/ext2/balloc.c | 4 +- |
0986ccbe | 3166 | fs/ext2/super.c | 8 +- |
6090327c | 3167 | fs/ext3/balloc.c | 4 +- |
0986ccbe | 3168 | fs/ext3/super.c | 8 +- |
6090327c | 3169 | fs/ext4/balloc.c | 4 +- |
0986ccbe | 3170 | fs/fcntl.c | 4 + |
da1216b9 | 3171 | fs/fhandle.c | 3 +- |
6090327c PK |
3172 | fs/file.c | 4 + |
3173 | fs/filesystems.c | 4 + | |
e8242a6d | 3174 | fs/fs_struct.c | 20 +- |
6090327c | 3175 | fs/hugetlbfs/inode.c | 5 +- |
afe359a8 | 3176 | fs/inode.c | 8 +- |
8cf17962 | 3177 | fs/kernfs/dir.c | 6 + |
6090327c | 3178 | fs/mount.h | 4 +- |
afe359a8 | 3179 | fs/namei.c | 285 +- |
8cf17962 | 3180 | fs/namespace.c | 24 + |
a8b227b4 | 3181 | fs/nfsd/nfscache.c | 2 +- |
6090327c | 3182 | fs/open.c | 38 + |
afe359a8 | 3183 | fs/overlayfs/inode.c | 3 + |
da1216b9 | 3184 | fs/overlayfs/super.c | 6 +- |
6090327c PK |
3185 | fs/pipe.c | 2 +- |
3186 | fs/posix_acl.c | 15 +- | |
3187 | fs/proc/Kconfig | 10 +- | |
0986ccbe | 3188 | fs/proc/array.c | 66 +- |
afe359a8 | 3189 | fs/proc/base.c | 168 +- |
6090327c PK |
3190 | fs/proc/cmdline.c | 4 + |
3191 | fs/proc/devices.c | 4 + | |
3192 | fs/proc/fd.c | 17 +- | |
e8242a6d | 3193 | fs/proc/generic.c | 64 + |
6090327c | 3194 | fs/proc/inode.c | 17 + |
0986ccbe | 3195 | fs/proc/internal.h | 11 +- |
6090327c PK |
3196 | fs/proc/interrupts.c | 4 + |
3197 | fs/proc/kcore.c | 3 + | |
3198 | fs/proc/proc_net.c | 31 + | |
3199 | fs/proc/proc_sysctl.c | 52 +- | |
3200 | fs/proc/root.c | 8 + | |
3201 | fs/proc/stat.c | 69 +- | |
e8242a6d | 3202 | fs/proc/task_mmu.c | 66 +- |
6090327c PK |
3203 | fs/readdir.c | 19 + |
3204 | fs/reiserfs/item_ops.c | 24 +- | |
0986ccbe | 3205 | fs/reiserfs/super.c | 4 + |
6090327c | 3206 | fs/select.c | 2 + |
afe359a8 | 3207 | fs/seq_file.c | 30 +- |
6090327c | 3208 | fs/stat.c | 20 +- |
e8242a6d | 3209 | fs/sysfs/dir.c | 30 +- |
6090327c | 3210 | fs/utimes.c | 7 + |
8cf17962 | 3211 | fs/xattr.c | 26 +- |
da1216b9 | 3212 | grsecurity/Kconfig | 1182 ++++ |
6090327c | 3213 | grsecurity/Makefile | 54 + |
da1216b9 | 3214 | grsecurity/gracl.c | 2757 +++++++++ |
6090327c | 3215 | grsecurity/gracl_alloc.c | 105 + |
a8b227b4 | 3216 | grsecurity/gracl_cap.c | 127 + |
da1216b9 | 3217 | grsecurity/gracl_compat.c | 269 + |
afe359a8 | 3218 | grsecurity/gracl_fs.c | 448 ++ |
da1216b9 PK |
3219 | grsecurity/gracl_ip.c | 386 ++ |
3220 | grsecurity/gracl_learn.c | 207 + | |
3221 | grsecurity/gracl_policy.c | 1786 ++++++ | |
6090327c | 3222 | grsecurity/gracl_res.c | 68 + |
da1216b9 | 3223 | grsecurity/gracl_segv.c | 304 + |
6090327c PK |
3224 | grsecurity/gracl_shm.c | 40 + |
3225 | grsecurity/grsec_chdir.c | 19 + | |
da1216b9 PK |
3226 | grsecurity/grsec_chroot.c | 467 ++ |
3227 | grsecurity/grsec_disabled.c | 445 ++ | |
3228 | grsecurity/grsec_exec.c | 189 + | |
3229 | grsecurity/grsec_fifo.c | 26 + | |
6090327c | 3230 | grsecurity/grsec_fork.c | 23 + |
da1216b9 | 3231 | grsecurity/grsec_init.c | 290 + |
6090327c | 3232 | grsecurity/grsec_ipc.c | 48 + |
afe359a8 PK |
3233 | grsecurity/grsec_link.c | 65 + |
3234 | grsecurity/grsec_log.c | 340 + | |
6090327c PK |
3235 | grsecurity/grsec_mem.c | 48 + |
3236 | grsecurity/grsec_mount.c | 65 + | |
afe359a8 | 3237 | grsecurity/grsec_pax.c | 47 + |
6090327c PK |
3238 | grsecurity/grsec_proc.c | 20 + |
3239 | grsecurity/grsec_ptrace.c | 30 + | |
da1216b9 PK |
3240 | grsecurity/grsec_sig.c | 236 + |
3241 | grsecurity/grsec_sock.c | 244 + | |
3242 | grsecurity/grsec_sysctl.c | 488 ++ | |
6090327c PK |
3243 | grsecurity/grsec_time.c | 16 + |
3244 | grsecurity/grsec_tpe.c | 78 + | |
3245 | grsecurity/grsec_usb.c | 15 + | |
3246 | grsecurity/grsum.c | 64 + | |
da1216b9 | 3247 | include/drm/drmP.h | 23 +- |
6090327c | 3248 | include/linux/binfmts.h | 5 +- |
afe359a8 PK |
3249 | include/linux/capability.h | 13 + |
3250 | include/linux/compiler-gcc.h | 5 + | |
6090327c PK |
3251 | include/linux/compiler.h | 8 + |
3252 | include/linux/cred.h | 8 +- | |
8cf17962 | 3253 | include/linux/dcache.h | 5 +- |
6090327c PK |
3254 | include/linux/fs.h | 24 +- |
3255 | include/linux/fs_struct.h | 2 +- | |
3256 | include/linux/fsnotify.h | 6 + | |
da1216b9 PK |
3257 | include/linux/gracl.h | 342 + |
3258 | include/linux/gracl_compat.h | 156 + | |
6090327c PK |
3259 | include/linux/gralloc.h | 9 + |
3260 | include/linux/grdefs.h | 140 + | |
da1216b9 | 3261 | include/linux/grinternal.h | 230 + |
8cf17962 | 3262 | include/linux/grmsg.h | 118 + |
afe359a8 | 3263 | include/linux/grsecurity.h | 249 + |
6090327c | 3264 | include/linux/grsock.h | 19 + |
afe359a8 | 3265 | include/linux/ipc.h | 2 +- |
6090327c PK |
3266 | include/linux/ipc_namespace.h | 2 +- |
3267 | include/linux/kallsyms.h | 18 +- | |
3268 | include/linux/kmod.h | 5 + | |
3269 | include/linux/kobject.h | 2 +- | |
afe359a8 | 3270 | include/linux/lsm_hooks.h | 4 +- |
8cf17962 | 3271 | include/linux/mm.h | 12 + |
6090327c | 3272 | include/linux/mm_types.h | 4 +- |
afe359a8 | 3273 | include/linux/module.h | 5 +- |
6090327c PK |
3274 | include/linux/mount.h | 2 +- |
3275 | include/linux/netfilter/xt_gradm.h | 9 + | |
3276 | include/linux/path.h | 4 +- | |
3277 | include/linux/perf_event.h | 13 +- | |
3278 | include/linux/pid_namespace.h | 2 +- | |
8cf17962 | 3279 | include/linux/printk.h | 2 +- |
6090327c PK |
3280 | include/linux/proc_fs.h | 22 +- |
3281 | include/linux/proc_ns.h | 2 +- | |
3282 | include/linux/random.h | 2 +- | |
3283 | include/linux/rbtree_augmented.h | 4 +- | |
da1216b9 | 3284 | include/linux/scatterlist.h | 12 +- |
afe359a8 | 3285 | include/linux/sched.h | 110 +- |
6090327c PK |
3286 | include/linux/security.h | 3 +- |
3287 | include/linux/seq_file.h | 5 + | |
afe359a8 | 3288 | include/linux/shm.h | 6 +- |
6090327c PK |
3289 | include/linux/skbuff.h | 3 + |
3290 | include/linux/slab.h | 9 - | |
afe359a8 | 3291 | include/linux/sysctl.h | 8 +- |
6090327c PK |
3292 | include/linux/thread_info.h | 6 +- |
3293 | include/linux/tty.h | 2 +- | |
3294 | include/linux/tty_driver.h | 4 +- | |
3295 | include/linux/uidgid.h | 5 + | |
3296 | include/linux/user_namespace.h | 2 +- | |
3297 | include/linux/utsname.h | 2 +- | |
3298 | include/linux/vermagic.h | 16 +- | |
afe359a8 | 3299 | include/linux/vmalloc.h | 8 + |
6090327c PK |
3300 | include/net/af_unix.h | 2 +- |
3301 | include/net/ip.h | 2 +- | |
3302 | include/net/neighbour.h | 2 +- | |
3303 | include/net/net_namespace.h | 2 +- | |
e8242a6d | 3304 | include/net/sock.h | 2 +- |
6090327c | 3305 | include/trace/events/fs.h | 53 + |
da1216b9 | 3306 | include/uapi/drm/i915_drm.h | 1 + |
6090327c PK |
3307 | include/uapi/linux/personality.h | 1 + |
3308 | init/Kconfig | 3 +- | |
e8242a6d | 3309 | init/main.c | 35 +- |
6090327c | 3310 | ipc/mqueue.c | 1 + |
afe359a8 PK |
3311 | ipc/msg.c | 14 +- |
3312 | ipc/shm.c | 36 +- | |
3313 | ipc/util.c | 14 +- | |
da1216b9 | 3314 | kernel/auditsc.c | 2 +- |
0986ccbe | 3315 | kernel/bpf/syscall.c | 8 +- |
6090327c | 3316 | kernel/capability.c | 41 +- |
0986ccbe | 3317 | kernel/cgroup.c | 5 +- |
6090327c PK |
3318 | kernel/compat.c | 1 + |
3319 | kernel/configs.c | 11 + | |
afe359a8 | 3320 | kernel/cred.c | 112 +- |
6090327c PK |
3321 | kernel/events/core.c | 14 +- |
3322 | kernel/exit.c | 10 +- | |
3323 | kernel/fork.c | 86 +- | |
3324 | kernel/futex.c | 4 +- | |
3325 | kernel/kallsyms.c | 9 + | |
3326 | kernel/kcmp.c | 4 + | |
afe359a8 | 3327 | kernel/kexec.c | 2 +- |
e8242a6d | 3328 | kernel/kmod.c | 95 +- |
6090327c PK |
3329 | kernel/kprobes.c | 7 +- |
3330 | kernel/ksysfs.c | 2 + | |
3331 | kernel/locking/lockdep_proc.c | 10 +- | |
afe359a8 | 3332 | kernel/module.c | 108 +- |
6090327c PK |
3333 | kernel/panic.c | 4 +- |
3334 | kernel/pid.c | 19 +- | |
6090327c | 3335 | kernel/power/Kconfig | 2 + |
afe359a8 | 3336 | kernel/printk/printk.c | 7 +- |
6090327c | 3337 | kernel/ptrace.c | 20 +- |
6090327c PK |
3338 | kernel/resource.c | 10 + |
3339 | kernel/sched/core.c | 11 +- | |
3340 | kernel/signal.c | 37 +- | |
a8b227b4 | 3341 | kernel/sys.c | 64 +- |
afe359a8 | 3342 | kernel/sysctl.c | 180 +- |
6090327c | 3343 | kernel/taskstats.c | 6 + |
a8b227b4 PK |
3344 | kernel/time/posix-timers.c | 8 + |
3345 | kernel/time/time.c | 5 + | |
6090327c | 3346 | kernel/time/timekeeping.c | 3 + |
afe359a8 | 3347 | kernel/time/timer_list.c | 13 +- |
6090327c | 3348 | kernel/time/timer_stats.c | 10 +- |
0986ccbe | 3349 | kernel/trace/trace_syscalls.c | 8 + |
6090327c PK |
3350 | kernel/user_namespace.c | 15 + |
3351 | lib/Kconfig.debug | 7 +- | |
3352 | lib/is_single_threaded.c | 3 + | |
3353 | lib/list_debug.c | 65 +- | |
e8242a6d | 3354 | lib/nlattr.c | 2 + |
6090327c | 3355 | lib/rbtree.c | 4 +- |
afe359a8 | 3356 | lib/vsprintf.c | 39 +- |
6090327c PK |
3357 | localversion-grsec | 1 + |
3358 | mm/Kconfig | 5 +- | |
e8242a6d | 3359 | mm/Kconfig.debug | 1 + |
6090327c | 3360 | mm/filemap.c | 1 + |
afe359a8 | 3361 | mm/hugetlb.c | 8 + |
6090327c | 3362 | mm/kmemleak.c | 4 +- |
da1216b9 | 3363 | mm/memory.c | 2 +- |
6090327c PK |
3364 | mm/mempolicy.c | 12 +- |
3365 | mm/migrate.c | 3 +- | |
3366 | mm/mlock.c | 6 +- | |
e8242a6d | 3367 | mm/mmap.c | 93 +- |
6090327c | 3368 | mm/mprotect.c | 8 + |
e8242a6d | 3369 | mm/page_alloc.c | 2 +- |
6090327c PK |
3370 | mm/process_vm_access.c | 6 + |
3371 | mm/shmem.c | 2 +- | |
afe359a8 | 3372 | mm/slab.c | 27 +- |
6090327c | 3373 | mm/slab_common.c | 2 +- |
afe359a8 PK |
3374 | mm/slob.c | 12 + |
3375 | mm/slub.c | 33 +- | |
6090327c | 3376 | mm/util.c | 3 + |
afe359a8 | 3377 | mm/vmalloc.c | 80 +- |
6090327c PK |
3378 | mm/vmstat.c | 29 +- |
3379 | net/appletalk/atalk_proc.c | 2 +- | |
3380 | net/atm/lec.c | 6 +- | |
3381 | net/atm/mpoa_caches.c | 42 +- | |
3382 | net/can/bcm.c | 2 +- | |
3383 | net/can/proc.c | 2 +- | |
0986ccbe | 3384 | net/core/dev_ioctl.c | 7 +- |
6090327c PK |
3385 | net/core/filter.c | 8 +- |
3386 | net/core/net-procfs.c | 17 +- | |
3387 | net/core/pktgen.c | 2 +- | |
e8242a6d | 3388 | net/core/sock.c | 3 +- |
0986ccbe | 3389 | net/core/sysctl_net_core.c | 2 +- |
6090327c | 3390 | net/decnet/dn_dev.c | 2 +- |
0986ccbe | 3391 | net/ipv4/devinet.c | 6 +- |
6090327c | 3392 | net/ipv4/inet_hashtables.c | 5 + |
a8b227b4 | 3393 | net/ipv4/ip_input.c | 7 + |
6090327c PK |
3394 | net/ipv4/ip_sockglue.c | 3 +- |
3395 | net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +- | |
3396 | net/ipv4/route.c | 6 +- | |
da1216b9 | 3397 | net/ipv4/tcp_input.c | 4 +- |
6090327c PK |
3398 | net/ipv4/tcp_ipv4.c | 24 +- |
3399 | net/ipv4/tcp_minisocks.c | 9 +- | |
3400 | net/ipv4/tcp_timer.c | 11 + | |
3401 | net/ipv4/udp.c | 24 + | |
e8242a6d | 3402 | net/ipv6/addrconf.c | 13 +- |
6090327c PK |
3403 | net/ipv6/proc.c | 2 +- |
3404 | net/ipv6/tcp_ipv6.c | 23 +- | |
3405 | net/ipv6/udp.c | 7 + | |
3406 | net/ipx/ipx_proc.c | 2 +- | |
3407 | net/irda/irproc.c | 2 +- | |
3408 | net/llc/llc_proc.c | 2 +- | |
3409 | net/netfilter/Kconfig | 10 + | |
3410 | net/netfilter/Makefile | 1 + | |
3411 | net/netfilter/nf_conntrack_core.c | 8 + | |
3412 | net/netfilter/xt_gradm.c | 51 + | |
3413 | net/netfilter/xt_hashlimit.c | 4 +- | |
3414 | net/netfilter/xt_recent.c | 2 +- | |
8cf17962 | 3415 | net/socket.c | 71 +- |
6090327c PK |
3416 | net/sunrpc/cache.c | 2 +- |
3417 | net/sunrpc/stats.c | 2 +- | |
3418 | net/sysctl_net.c | 2 +- | |
e8242a6d | 3419 | net/unix/af_unix.c | 52 +- |
6090327c PK |
3420 | net/vmw_vsock/vmci_transport_notify.c | 30 +- |
3421 | net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +- | |
3422 | net/x25/sysctl_net_x25.c | 2 +- | |
3423 | net/x25/x25_proc.c | 2 +- | |
0986ccbe PK |
3424 | scripts/package/Makefile | 2 +- |
3425 | scripts/package/mkspec | 38 +- | |
afe359a8 | 3426 | security/Kconfig | 370 +- |
6090327c PK |
3427 | security/apparmor/file.c | 4 +- |
3428 | security/apparmor/lsm.c | 8 +- | |
3429 | security/commoncap.c | 29 + | |
3430 | security/min_addr.c | 2 + | |
3431 | security/tomoyo/file.c | 12 +- | |
3432 | security/tomoyo/mount.c | 4 + | |
da1216b9 | 3433 | security/tomoyo/tomoyo.c | 20 +- |
6090327c | 3434 | security/yama/Kconfig | 2 +- |
6090327c | 3435 | sound/synth/emux/emux_seq.c | 14 +- |
e8242a6d PK |
3436 | sound/usb/line6/driver.c | 40 +- |
3437 | sound/usb/line6/toneport.c | 12 +- | |
6090327c PK |
3438 | tools/gcc/.gitignore | 1 + |
3439 | tools/gcc/Makefile | 12 + | |
3440 | tools/gcc/gen-random-seed.sh | 8 + | |
afe359a8 PK |
3441 | tools/gcc/randomize_layout_plugin.c | 930 +++ |
3442 | tools/gcc/size_overflow_plugin/.gitignore | 1 + | |
3443 | .../size_overflow_plugin/size_overflow_hash.data | 320 +- | |
3444 | 466 files changed, 32295 insertions(+), 2907 deletions(-) | |
3445 | ||
3446 | commit fc19197ab5a42069863a7d88f1d41eb687697fe9 | |
3447 | Author: Brad Spengler <spender@grsecurity.net> | |
3448 | Date: Sun Oct 4 20:43:51 2015 -0400 | |
3449 | ||
3450 | Update to pax-linux-4.2.3-test6.patch: | |
3451 | - fixed a KERNEXEC/x86 and early ioremap regression, reported by spender | |
3452 | - sanitized a few more top level page table entries on amd64 | |
76e7c0f9 | 3453 | |
afe359a8 PK |
3454 | arch/x86/kernel/espfix_64.c | 2 +- |
3455 | arch/x86/kernel/head_64.S | 8 ++++---- | |
3456 | arch/x86/mm/ioremap.c | 6 +++++- | |
3457 | 3 files changed, 10 insertions(+), 6 deletions(-) | |
3458 | ||
3459 | commit 23ac5415b9ef394e10b1516d3b314c742c6a3e59 | |
3460 | Author: Brad Spengler <spender@grsecurity.net> | |
3461 | Date: Sun Oct 4 17:47:37 2015 -0400 | |
3462 | ||
3463 | Resync with pax-linux-4.2.3-test5.patch | |
3464 | ||
3465 | arch/x86/include/asm/pgtable-2level.h | 20 ++++++++++++++++---- | |
3466 | arch/x86/include/asm/pgtable-3level.h | 8 ++++++++ | |
3467 | arch/x86/include/asm/pgtable_32.h | 2 -- | |
3468 | arch/x86/include/asm/pgtable_64.h | 20 ++++++++++++++++---- | |
3469 | arch/x86/mm/highmem_32.c | 2 -- | |
3470 | arch/x86/mm/init_64.c | 2 -- | |
3471 | arch/x86/mm/iomap_32.c | 4 ---- | |
3472 | arch/x86/mm/ioremap.c | 2 +- | |
3473 | arch/x86/mm/pgtable.c | 2 -- | |
3474 | arch/x86/mm/pgtable_32.c | 3 --- | |
3475 | mm/highmem.c | 6 +----- | |
3476 | mm/vmalloc.c | 12 +----------- | |
3477 | .../size_overflow_plugin/size_overflow_hash.data | 2 -- | |
3478 | 13 files changed, 43 insertions(+), 42 deletions(-) | |
3479 | ||
3480 | commit 25f4bed80f0d87783793a70d6c20080031a1fd38 | |
3481 | Author: Brad Spengler <spender@grsecurity.net> | |
3482 | Date: Sun Oct 4 13:06:32 2015 -0400 | |
3483 | ||
3484 | Update to pax-linux-4.2.3-test5.patch: | |
3485 | - forward port to 4.2.3 | |
3486 | - fixed integer sign conversion errors caused by ieee80211_tx_rate_control.max_rate_idx, caught by the size overflow plugin | |
3487 | - fixed a bug in try_preserve_large_page that caused unnecessary large page split ups | |
3488 | - increased the number of statically allocated kernel page tables under KERNEXEC/amd64 | |
3489 | ||
3490 | arch/x86/include/asm/pgtable-2level.h | 2 ++ | |
3491 | arch/x86/include/asm/pgtable-3level.h | 5 +++++ | |
3492 | arch/x86/include/asm/pgtable_64.h | 2 ++ | |
3493 | arch/x86/kernel/cpu/bugs_64.c | 2 ++ | |
3494 | arch/x86/kernel/head_64.S | 28 +++++++++++++++++++++++----- | |
3495 | arch/x86/kernel/vmlinux.lds.S | 8 +++++++- | |
3496 | arch/x86/mm/init.c | 18 ++++++++++++++---- | |
3497 | arch/x86/mm/ioremap.c | 8 ++++++-- | |
3498 | arch/x86/mm/pageattr.c | 5 ++--- | |
3499 | arch/x86/mm/pgtable.c | 2 ++ | |
3500 | include/asm-generic/sections.h | 1 + | |
3501 | include/asm-generic/vmlinux.lds.h | 2 ++ | |
3502 | include/net/mac80211.h | 2 +- | |
3503 | mm/vmalloc.c | 7 ++++++- | |
3504 | 14 files changed, 75 insertions(+), 17 deletions(-) | |
3505 | ||
3506 | commit a2dce7cb2e3c389b7ef6c76c15ccdbf506007ddd | |
3507 | Merge: d113ff6 fcba09f | |
3508 | Author: Brad Spengler <spender@grsecurity.net> | |
3509 | Date: Sat Oct 3 09:12:31 2015 -0400 | |
3510 | ||
3511 | Merge branch 'linux-4.2.y' into pax-test | |
3512 | ||
3513 | commit d113ff6e7835e89e2b954503b1a100750ddb43c7 | |
3514 | Author: Brad Spengler <spender@grsecurity.net> | |
3515 | Date: Thu Oct 1 21:34:12 2015 -0400 | |
3516 | ||
3517 | Update to pax-linux-4.2.2-test5.patch: | |
3518 | - fixed a RANDKSTACK regression, reported by spender | |
3519 | - fixed some more compiler warnings due to the ktla_ktva changes, reported by spender | |
3520 | ||
3521 | arch/x86/entry/entry_64.S | 2 ++ | |
3522 | arch/x86/kernel/process.c | 1 + | |
3523 | drivers/hv/hv.c | 2 +- | |
3524 | drivers/lguest/x86/core.c | 4 ++-- | |
3525 | drivers/misc/kgdbts.c | 4 ++-- | |
3526 | drivers/video/fbdev/uvesafb.c | 4 ++-- | |
3527 | fs/binfmt_elf_fdpic.c | 2 +- | |
3528 | 7 files changed, 11 insertions(+), 8 deletions(-) | |
3529 | ||
3530 | commit 149e32a4dddfae46e2490f011870cd4492ca946c | |
3531 | Author: Brad Spengler <spender@grsecurity.net> | |
3532 | Date: Tue Sep 29 16:31:50 2015 -0400 | |
3533 | ||
3534 | Update to pax-linux-4.2.2-test4.patch: | |
3535 | - fixed a few compiler warnings caused by the recently reworked ktla_ktva/ktva_ktla functions, reported by spender | |
3536 | - Emese fixed a size overflow false positive in the IDE driver, reported by spender | |
3537 | ||
3538 | arch/x86/lib/insn.c | 2 +- | |
3539 | drivers/ide/ide-disk.c | 2 +- | |
3540 | drivers/video/fbdev/vesafb.c | 4 ++-- | |
3541 | fs/binfmt_elf.c | 2 +- | |
3542 | .../size_overflow_plugin/size_overflow_plugin.c | 4 ++-- | |
3543 | .../size_overflow_transform_core.c | 11 +++++------ | |
3544 | 6 files changed, 12 insertions(+), 13 deletions(-) | |
3545 | ||
3546 | commit 02c41b848fbaddf82ce98690b23d3d85a94d55fe | |
3547 | Merge: b8b2f5b 7659db3 | |
6090327c | 3548 | Author: Brad Spengler <spender@grsecurity.net> |
afe359a8 | 3549 | Date: Tue Sep 29 15:50:40 2015 -0400 |
76e7c0f9 | 3550 | |
afe359a8 PK |
3551 | Merge branch 'linux-4.2.y' into pax-test |
3552 | ||
3553 | Conflicts: | |
3554 | fs/nfs/inode.c | |
3555 | ||
3556 | commit b8b2f5bc93ced0ca9a8366d0f3fa09abd1ca7ac6 | |
3557 | Author: Brad Spengler <spender@grsecurity.net> | |
3558 | Date: Tue Sep 29 09:13:54 2015 -0400 | |
3559 | ||
3560 | Initial import of pax-linux-4.2.1-test3.patch | |
76e7c0f9 | 3561 | |
6090327c | 3562 | Documentation/dontdiff | 47 +- |
a8b227b4 | 3563 | Documentation/kbuild/makefiles.txt | 39 +- |
0986ccbe | 3564 | Documentation/kernel-parameters.txt | 28 + |
da1216b9 | 3565 | Makefile | 108 +- |
6090327c PK |
3566 | arch/alpha/include/asm/atomic.h | 10 + |
3567 | arch/alpha/include/asm/elf.h | 7 + | |
3568 | arch/alpha/include/asm/pgalloc.h | 6 + | |
3569 | arch/alpha/include/asm/pgtable.h | 11 + | |
3570 | arch/alpha/kernel/module.c | 2 +- | |
3571 | arch/alpha/kernel/osf_sys.c | 8 +- | |
3572 | arch/alpha/mm/fault.c | 141 +- | |
3573 | arch/arm/Kconfig | 2 +- | |
8cf17962 | 3574 | arch/arm/include/asm/atomic.h | 319 +- |
6090327c PK |
3575 | arch/arm/include/asm/barrier.h | 2 +- |
3576 | arch/arm/include/asm/cache.h | 5 +- | |
3577 | arch/arm/include/asm/cacheflush.h | 2 +- | |
3578 | arch/arm/include/asm/checksum.h | 14 +- | |
afe359a8 PK |
3579 | arch/arm/include/asm/cmpxchg.h | 4 + |
3580 | arch/arm/include/asm/cpuidle.h | 2 +- | |
6090327c | 3581 | arch/arm/include/asm/domain.h | 33 +- |
da1216b9 | 3582 | arch/arm/include/asm/elf.h | 9 +- |
6090327c PK |
3583 | arch/arm/include/asm/fncpy.h | 2 + |
3584 | arch/arm/include/asm/futex.h | 10 + | |
3585 | arch/arm/include/asm/kmap_types.h | 2 +- | |
3586 | arch/arm/include/asm/mach/dma.h | 2 +- | |
3587 | arch/arm/include/asm/mach/map.h | 16 +- | |
3588 | arch/arm/include/asm/outercache.h | 2 +- | |
3589 | arch/arm/include/asm/page.h | 3 +- | |
8cf17962 PK |
3590 | arch/arm/include/asm/pgalloc.h | 20 + |
3591 | arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +- | |
6090327c | 3592 | arch/arm/include/asm/pgtable-2level.h | 3 + |
0986ccbe | 3593 | arch/arm/include/asm/pgtable-3level.h | 3 + |
6090327c PK |
3594 | arch/arm/include/asm/pgtable.h | 54 +- |
3595 | arch/arm/include/asm/psci.h | 2 +- | |
3596 | arch/arm/include/asm/smp.h | 2 +- | |
3597 | arch/arm/include/asm/thread_info.h | 6 +- | |
a8b227b4 | 3598 | arch/arm/include/asm/tls.h | 3 + |
afe359a8 | 3599 | arch/arm/include/asm/uaccess.h | 100 +- |
6090327c PK |
3600 | arch/arm/include/uapi/asm/ptrace.h | 2 +- |
3601 | arch/arm/kernel/armksyms.c | 8 +- | |
afe359a8 | 3602 | arch/arm/kernel/cpuidle.c | 2 +- |
6090327c PK |
3603 | arch/arm/kernel/entry-armv.S | 110 +- |
3604 | arch/arm/kernel/entry-common.S | 40 +- | |
3605 | arch/arm/kernel/entry-header.S | 60 + | |
3606 | arch/arm/kernel/fiq.c | 3 + | |
3607 | arch/arm/kernel/head.S | 2 +- | |
afe359a8 | 3608 | arch/arm/kernel/module.c | 38 +- |
6090327c | 3609 | arch/arm/kernel/patch.c | 2 + |
da1216b9 | 3610 | arch/arm/kernel/process.c | 90 +- |
6090327c | 3611 | arch/arm/kernel/psci.c | 2 +- |
da1216b9 | 3612 | arch/arm/kernel/reboot.c | 1 + |
6090327c PK |
3613 | arch/arm/kernel/setup.c | 20 +- |
3614 | arch/arm/kernel/signal.c | 35 +- | |
3615 | arch/arm/kernel/smp.c | 2 +- | |
3616 | arch/arm/kernel/tcm.c | 4 +- | |
a8b227b4 | 3617 | arch/arm/kernel/traps.c | 6 +- |
8cf17962 | 3618 | arch/arm/kernel/vmlinux.lds.S | 6 +- |
a8b227b4 | 3619 | arch/arm/kvm/arm.c | 10 +- |
6090327c PK |
3620 | arch/arm/lib/clear_user.S | 6 +- |
3621 | arch/arm/lib/copy_from_user.S | 6 +- | |
3622 | arch/arm/lib/copy_page.S | 1 + | |
3623 | arch/arm/lib/copy_to_user.S | 6 +- | |
3624 | arch/arm/lib/csumpartialcopyuser.S | 4 +- | |
3625 | arch/arm/lib/delay.c | 2 +- | |
afe359a8 | 3626 | arch/arm/lib/uaccess_with_memcpy.c | 8 +- |
da1216b9 | 3627 | arch/arm/mach-exynos/suspend.c | 6 +- |
a8b227b4 | 3628 | arch/arm/mach-mvebu/coherency.c | 4 +- |
6090327c | 3629 | arch/arm/mach-omap2/board-n8x0.c | 2 +- |
6090327c | 3630 | arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +- |
e8242a6d | 3631 | arch/arm/mach-omap2/omap-smp.c | 1 + |
6090327c PK |
3632 | arch/arm/mach-omap2/omap-wakeupgen.c | 2 +- |
3633 | arch/arm/mach-omap2/omap_device.c | 4 +- | |
3634 | arch/arm/mach-omap2/omap_device.h | 4 +- | |
3635 | arch/arm/mach-omap2/omap_hwmod.c | 4 +- | |
3636 | arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +- | |
3637 | arch/arm/mach-omap2/wd_timer.c | 6 +- | |
afe359a8 PK |
3638 | arch/arm/mach-shmobile/platsmp-apmu.c | 5 +- |
3639 | arch/arm/mach-shmobile/pm-r8a7740.c | 5 +- | |
3640 | arch/arm/mach-shmobile/pm-sh73a0.c | 5 +- | |
6090327c | 3641 | arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +- |
e8242a6d PK |
3642 | arch/arm/mach-tegra/irq.c | 1 + |
3643 | arch/arm/mach-ux500/pm.c | 1 + | |
e8242a6d | 3644 | arch/arm/mach-zynq/platsmp.c | 1 + |
0986ccbe | 3645 | arch/arm/mm/Kconfig | 6 +- |
6090327c PK |
3646 | arch/arm/mm/alignment.c | 8 + |
3647 | arch/arm/mm/cache-l2x0.c | 2 +- | |
3648 | arch/arm/mm/context.c | 10 +- | |
0986ccbe | 3649 | arch/arm/mm/fault.c | 146 + |
6090327c | 3650 | arch/arm/mm/fault.h | 12 + |
8cf17962 | 3651 | arch/arm/mm/init.c | 39 + |
6090327c PK |
3652 | arch/arm/mm/ioremap.c | 4 +- |
3653 | arch/arm/mm/mmap.c | 30 +- | |
3654 | arch/arm/mm/mmu.c | 182 +- | |
0986ccbe | 3655 | arch/arm/net/bpf_jit_32.c | 3 + |
6090327c PK |
3656 | arch/arm/plat-iop/setup.c | 2 +- |
3657 | arch/arm/plat-omap/sram.c | 2 + | |
e8242a6d | 3658 | arch/arm64/include/asm/atomic.h | 10 + |
6090327c | 3659 | arch/arm64/include/asm/barrier.h | 2 +- |
8cf17962 | 3660 | arch/arm64/include/asm/percpu.h | 8 +- |
e8242a6d | 3661 | arch/arm64/include/asm/pgalloc.h | 5 + |
6090327c | 3662 | arch/arm64/include/asm/uaccess.h | 1 + |
e8242a6d | 3663 | arch/arm64/mm/dma-mapping.c | 2 +- |
6090327c PK |
3664 | arch/avr32/include/asm/elf.h | 8 +- |
3665 | arch/avr32/include/asm/kmap_types.h | 4 +- | |
3666 | arch/avr32/mm/fault.c | 27 + | |
3667 | arch/frv/include/asm/atomic.h | 10 + | |
3668 | arch/frv/include/asm/kmap_types.h | 2 +- | |
3669 | arch/frv/mm/elf-fdpic.c | 3 +- | |
a8b227b4 | 3670 | arch/ia64/Makefile | 1 + |
6090327c PK |
3671 | arch/ia64/include/asm/atomic.h | 10 + |
3672 | arch/ia64/include/asm/barrier.h | 2 +- | |
3673 | arch/ia64/include/asm/elf.h | 7 + | |
3674 | arch/ia64/include/asm/pgalloc.h | 12 + | |
3675 | arch/ia64/include/asm/pgtable.h | 13 +- | |
3676 | arch/ia64/include/asm/spinlock.h | 2 +- | |
3677 | arch/ia64/include/asm/uaccess.h | 27 +- | |
8cf17962 | 3678 | arch/ia64/kernel/module.c | 45 +- |
6090327c PK |
3679 | arch/ia64/kernel/palinfo.c | 2 +- |
3680 | arch/ia64/kernel/sys_ia64.c | 7 + | |
3681 | arch/ia64/kernel/vmlinux.lds.S | 2 +- | |
3682 | arch/ia64/mm/fault.c | 32 +- | |
a8b227b4 | 3683 | arch/ia64/mm/init.c | 15 +- |
6090327c PK |
3684 | arch/m32r/lib/usercopy.c | 6 + |
3685 | arch/metag/include/asm/barrier.h | 2 +- | |
3686 | arch/mips/cavium-octeon/dma-octeon.c | 2 +- | |
e8242a6d | 3687 | arch/mips/include/asm/atomic.h | 355 +- |
6090327c | 3688 | arch/mips/include/asm/barrier.h | 2 +- |
da1216b9 | 3689 | arch/mips/include/asm/elf.h | 7 + |
6090327c PK |
3690 | arch/mips/include/asm/exec.h | 2 +- |
3691 | arch/mips/include/asm/hw_irq.h | 2 +- | |
3692 | arch/mips/include/asm/local.h | 57 + | |
3693 | arch/mips/include/asm/page.h | 2 +- | |
3694 | arch/mips/include/asm/pgalloc.h | 5 + | |
3695 | arch/mips/include/asm/pgtable.h | 3 + | |
3696 | arch/mips/include/asm/uaccess.h | 1 + | |
3697 | arch/mips/kernel/binfmt_elfn32.c | 7 + | |
3698 | arch/mips/kernel/binfmt_elfo32.c | 7 + | |
3699 | arch/mips/kernel/i8259.c | 2 +- | |
3700 | arch/mips/kernel/irq-gt641xx.c | 2 +- | |
3701 | arch/mips/kernel/irq.c | 6 +- | |
3702 | arch/mips/kernel/pm-cps.c | 2 +- | |
3703 | arch/mips/kernel/process.c | 12 - | |
6090327c PK |
3704 | arch/mips/kernel/sync-r4k.c | 24 +- |
3705 | arch/mips/kernel/traps.c | 13 +- | |
a8b227b4 | 3706 | arch/mips/kvm/mips.c | 2 +- |
6090327c PK |
3707 | arch/mips/mm/fault.c | 25 + |
3708 | arch/mips/mm/mmap.c | 51 +- | |
6090327c PK |
3709 | arch/mips/sgi-ip27/ip27-nmi.c | 6 +- |
3710 | arch/mips/sni/rm200.c | 2 +- | |
3711 | arch/mips/vr41xx/common/icu.c | 2 +- | |
3712 | arch/mips/vr41xx/common/irq.c | 4 +- | |
3713 | arch/parisc/include/asm/atomic.h | 10 + | |
3714 | arch/parisc/include/asm/elf.h | 7 + | |
3715 | arch/parisc/include/asm/pgalloc.h | 6 + | |
3716 | arch/parisc/include/asm/pgtable.h | 11 + | |
3717 | arch/parisc/include/asm/uaccess.h | 4 +- | |
3718 | arch/parisc/kernel/module.c | 50 +- | |
3719 | arch/parisc/kernel/sys_parisc.c | 15 + | |
3720 | arch/parisc/kernel/traps.c | 4 +- | |
3721 | arch/parisc/mm/fault.c | 140 +- | |
0986ccbe | 3722 | arch/powerpc/include/asm/atomic.h | 329 +- |
6090327c | 3723 | arch/powerpc/include/asm/barrier.h | 2 +- |
da1216b9 | 3724 | arch/powerpc/include/asm/elf.h | 12 + |
6090327c PK |
3725 | arch/powerpc/include/asm/exec.h | 2 +- |
3726 | arch/powerpc/include/asm/kmap_types.h | 2 +- | |
0986ccbe | 3727 | arch/powerpc/include/asm/local.h | 46 + |
6090327c PK |
3728 | arch/powerpc/include/asm/mman.h | 2 +- |
3729 | arch/powerpc/include/asm/page.h | 8 +- | |
3730 | arch/powerpc/include/asm/page_64.h | 7 +- | |
3731 | arch/powerpc/include/asm/pgalloc-64.h | 7 + | |
3732 | arch/powerpc/include/asm/pgtable.h | 1 + | |
3733 | arch/powerpc/include/asm/pte-hash32.h | 1 + | |
3734 | arch/powerpc/include/asm/reg.h | 1 + | |
3735 | arch/powerpc/include/asm/smp.h | 2 +- | |
0986ccbe | 3736 | arch/powerpc/include/asm/spinlock.h | 42 +- |
6090327c | 3737 | arch/powerpc/include/asm/uaccess.h | 141 +- |
8cf17962 | 3738 | arch/powerpc/kernel/Makefile | 5 + |
6090327c PK |
3739 | arch/powerpc/kernel/exceptions-64e.S | 4 +- |
3740 | arch/powerpc/kernel/exceptions-64s.S | 2 +- | |
3741 | arch/powerpc/kernel/module_32.c | 15 +- | |
8cf17962 | 3742 | arch/powerpc/kernel/process.c | 46 - |
6090327c PK |
3743 | arch/powerpc/kernel/signal_32.c | 2 +- |
3744 | arch/powerpc/kernel/signal_64.c | 2 +- | |
0986ccbe | 3745 | arch/powerpc/kernel/traps.c | 21 + |
6090327c PK |
3746 | arch/powerpc/kernel/vdso.c | 5 +- |
3747 | arch/powerpc/kvm/powerpc.c | 2 +- | |
3748 | arch/powerpc/lib/usercopy_64.c | 18 - | |
e8242a6d | 3749 | arch/powerpc/mm/fault.c | 56 +- |
da1216b9 | 3750 | arch/powerpc/mm/mmap.c | 16 + |
6090327c PK |
3751 | arch/powerpc/mm/slice.c | 13 +- |
3752 | arch/powerpc/platforms/cell/spufs/file.c | 4 +- | |
3753 | arch/s390/include/asm/atomic.h | 10 + | |
3754 | arch/s390/include/asm/barrier.h | 2 +- | |
da1216b9 | 3755 | arch/s390/include/asm/elf.h | 7 + |
6090327c PK |
3756 | arch/s390/include/asm/exec.h | 2 +- |
3757 | arch/s390/include/asm/uaccess.h | 13 +- | |
3758 | arch/s390/kernel/module.c | 22 +- | |
e8242a6d | 3759 | arch/s390/kernel/process.c | 24 - |
da1216b9 | 3760 | arch/s390/mm/mmap.c | 16 + |
6090327c PK |
3761 | arch/score/include/asm/exec.h | 2 +- |
3762 | arch/score/kernel/process.c | 5 - | |
3763 | arch/sh/mm/mmap.c | 22 +- | |
0986ccbe | 3764 | arch/sparc/include/asm/atomic_64.h | 110 +- |
6090327c PK |
3765 | arch/sparc/include/asm/barrier_64.h | 2 +- |
3766 | arch/sparc/include/asm/cache.h | 2 +- | |
3767 | arch/sparc/include/asm/elf_32.h | 7 + | |
3768 | arch/sparc/include/asm/elf_64.h | 7 + | |
3769 | arch/sparc/include/asm/pgalloc_32.h | 1 + | |
3770 | arch/sparc/include/asm/pgalloc_64.h | 1 + | |
3771 | arch/sparc/include/asm/pgtable.h | 4 + | |
3772 | arch/sparc/include/asm/pgtable_32.h | 15 +- | |
3773 | arch/sparc/include/asm/pgtsrmmu.h | 5 + | |
3774 | arch/sparc/include/asm/setup.h | 4 +- | |
3775 | arch/sparc/include/asm/spinlock_64.h | 35 +- | |
e8242a6d | 3776 | arch/sparc/include/asm/thread_info_32.h | 1 + |
6090327c PK |
3777 | arch/sparc/include/asm/thread_info_64.h | 2 + |
3778 | arch/sparc/include/asm/uaccess.h | 1 + | |
e8242a6d PK |
3779 | arch/sparc/include/asm/uaccess_32.h | 28 +- |
3780 | arch/sparc/include/asm/uaccess_64.h | 24 +- | |
6090327c PK |
3781 | arch/sparc/kernel/Makefile | 2 +- |
3782 | arch/sparc/kernel/prom_common.c | 2 +- | |
3783 | arch/sparc/kernel/smp_64.c | 8 +- | |
3784 | arch/sparc/kernel/sys_sparc_32.c | 2 +- | |
3785 | arch/sparc/kernel/sys_sparc_64.c | 52 +- | |
3786 | arch/sparc/kernel/traps_64.c | 27 +- | |
3787 | arch/sparc/lib/Makefile | 2 +- | |
0986ccbe PK |
3788 | arch/sparc/lib/atomic_64.S | 57 +- |
3789 | arch/sparc/lib/ksyms.c | 6 +- | |
6090327c PK |
3790 | arch/sparc/mm/Makefile | 2 +- |
3791 | arch/sparc/mm/fault_32.c | 292 + | |
8cf17962 | 3792 | arch/sparc/mm/fault_64.c | 486 + |
6090327c PK |
3793 | arch/sparc/mm/hugetlbpage.c | 22 +- |
3794 | arch/sparc/mm/init_64.c | 10 +- | |
3795 | arch/tile/include/asm/atomic_64.h | 10 + | |
3796 | arch/tile/include/asm/uaccess.h | 4 +- | |
3797 | arch/um/Makefile | 4 + | |
3798 | arch/um/include/asm/kmap_types.h | 2 +- | |
3799 | arch/um/include/asm/page.h | 3 + | |
3800 | arch/um/include/asm/pgtable-3level.h | 1 + | |
3801 | arch/um/kernel/process.c | 16 - | |
afe359a8 | 3802 | arch/x86/Kconfig | 15 +- |
6090327c PK |
3803 | arch/x86/Kconfig.cpu | 6 +- |
3804 | arch/x86/Kconfig.debug | 4 +- | |
a8b227b4 | 3805 | arch/x86/Makefile | 13 +- |
6090327c PK |
3806 | arch/x86/boot/Makefile | 3 + |
3807 | arch/x86/boot/bitops.h | 4 +- | |
3808 | arch/x86/boot/boot.h | 2 +- | |
3809 | arch/x86/boot/compressed/Makefile | 3 + | |
3810 | arch/x86/boot/compressed/efi_stub_32.S | 16 +- | |
8cf17962 | 3811 | arch/x86/boot/compressed/efi_thunk_64.S | 4 +- |
6090327c PK |
3812 | arch/x86/boot/compressed/head_32.S | 4 +- |
3813 | arch/x86/boot/compressed/head_64.S | 12 +- | |
3814 | arch/x86/boot/compressed/misc.c | 11 +- | |
3815 | arch/x86/boot/cpucheck.c | 16 +- | |
3816 | arch/x86/boot/header.S | 6 +- | |
3817 | arch/x86/boot/memory.c | 2 +- | |
3818 | arch/x86/boot/video-vesa.c | 1 + | |
3819 | arch/x86/boot/video.c | 2 +- | |
3820 | arch/x86/crypto/aes-x86_64-asm_64.S | 4 + | |
3821 | arch/x86/crypto/aesni-intel_asm.S | 106 +- | |
3822 | arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 + | |
3823 | arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 + | |
3824 | arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 + | |
3825 | arch/x86/crypto/camellia-x86_64-asm_64.S | 7 + | |
3826 | arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +- | |
3827 | arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +- | |
da1216b9 | 3828 | arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +- |
6090327c PK |
3829 | arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 + |
3830 | arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 + | |
3831 | arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 + | |
3832 | arch/x86/crypto/serpent-avx2-asm_64.S | 9 + | |
3833 | arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 + | |
3834 | arch/x86/crypto/sha1_ssse3_asm.S | 10 +- | |
3835 | arch/x86/crypto/sha256-avx-asm.S | 2 + | |
3836 | arch/x86/crypto/sha256-avx2-asm.S | 2 + | |
3837 | arch/x86/crypto/sha256-ssse3-asm.S | 2 + | |
3838 | arch/x86/crypto/sha512-avx-asm.S | 2 + | |
3839 | arch/x86/crypto/sha512-avx2-asm.S | 2 + | |
3840 | arch/x86/crypto/sha512-ssse3-asm.S | 2 + | |
3841 | arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +- | |
3842 | arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 + | |
3843 | arch/x86/crypto/twofish-x86_64-asm_64.S | 3 + | |
afe359a8 PK |
3844 | arch/x86/entry/calling.h | 92 +- |
3845 | arch/x86/entry/entry_32.S | 360 +- | |
3846 | arch/x86/entry/entry_64.S | 636 +- | |
3847 | arch/x86/entry/entry_64_compat.S | 159 +- | |
3848 | arch/x86/entry/thunk_64.S | 2 + | |
3849 | arch/x86/entry/vdso/Makefile | 2 +- | |
3850 | arch/x86/entry/vdso/vdso2c.h | 4 +- | |
3851 | arch/x86/entry/vdso/vma.c | 41 +- | |
3852 | arch/x86/entry/vsyscall/vsyscall_64.c | 16 +- | |
0986ccbe | 3853 | arch/x86/ia32/ia32_signal.c | 23 +- |
afe359a8 | 3854 | arch/x86/ia32/sys_ia32.c | 42 +- |
da1216b9 | 3855 | arch/x86/include/asm/alternative-asm.h | 43 +- |
6090327c PK |
3856 | arch/x86/include/asm/alternative.h | 4 +- |
3857 | arch/x86/include/asm/apic.h | 2 +- | |
3858 | arch/x86/include/asm/apm.h | 4 +- | |
8cf17962 | 3859 | arch/x86/include/asm/atomic.h | 269 +- |
6090327c | 3860 | arch/x86/include/asm/atomic64_32.h | 100 + |
0986ccbe | 3861 | arch/x86/include/asm/atomic64_64.h | 164 +- |
6090327c PK |
3862 | arch/x86/include/asm/barrier.h | 4 +- |
3863 | arch/x86/include/asm/bitops.h | 18 +- | |
afe359a8 | 3864 | arch/x86/include/asm/boot.h | 2 +- |
6090327c | 3865 | arch/x86/include/asm/cache.h | 5 +- |
6090327c PK |
3866 | arch/x86/include/asm/checksum_32.h | 12 +- |
3867 | arch/x86/include/asm/cmpxchg.h | 39 + | |
3868 | arch/x86/include/asm/compat.h | 2 +- | |
afe359a8 | 3869 | arch/x86/include/asm/cpufeature.h | 17 +- |
6090327c PK |
3870 | arch/x86/include/asm/desc.h | 78 +- |
3871 | arch/x86/include/asm/desc_defs.h | 6 + | |
3872 | arch/x86/include/asm/div64.h | 2 +- | |
da1216b9 | 3873 | arch/x86/include/asm/elf.h | 33 +- |
6090327c | 3874 | arch/x86/include/asm/emergency-restart.h | 2 +- |
afe359a8 PK |
3875 | arch/x86/include/asm/fpu/internal.h | 36 +- |
3876 | arch/x86/include/asm/fpu/types.h | 5 +- | |
6090327c PK |
3877 | arch/x86/include/asm/futex.h | 14 +- |
3878 | arch/x86/include/asm/hw_irq.h | 4 +- | |
3879 | arch/x86/include/asm/i8259.h | 2 +- | |
afe359a8 | 3880 | arch/x86/include/asm/io.h | 22 +- |
6090327c PK |
3881 | arch/x86/include/asm/irqflags.h | 5 + |
3882 | arch/x86/include/asm/kprobes.h | 9 +- | |
3883 | arch/x86/include/asm/local.h | 106 +- | |
3884 | arch/x86/include/asm/mman.h | 15 + | |
afe359a8 PK |
3885 | arch/x86/include/asm/mmu.h | 14 +- |
3886 | arch/x86/include/asm/mmu_context.h | 138 +- | |
6090327c PK |
3887 | arch/x86/include/asm/module.h | 17 +- |
3888 | arch/x86/include/asm/nmi.h | 19 +- | |
3889 | arch/x86/include/asm/page.h | 1 + | |
afe359a8 PK |
3890 | arch/x86/include/asm/page_32.h | 12 +- |
3891 | arch/x86/include/asm/page_64.h | 14 +- | |
6090327c PK |
3892 | arch/x86/include/asm/paravirt.h | 46 +- |
3893 | arch/x86/include/asm/paravirt_types.h | 15 +- | |
3894 | arch/x86/include/asm/pgalloc.h | 23 + | |
3895 | arch/x86/include/asm/pgtable-2level.h | 2 + | |
3896 | arch/x86/include/asm/pgtable-3level.h | 4 + | |
da1216b9 | 3897 | arch/x86/include/asm/pgtable.h | 128 +- |
6090327c | 3898 | arch/x86/include/asm/pgtable_32.h | 14 +- |
afe359a8 | 3899 | arch/x86/include/asm/pgtable_32_types.h | 24 +- |
da1216b9 | 3900 | arch/x86/include/asm/pgtable_64.h | 22 +- |
6090327c PK |
3901 | arch/x86/include/asm/pgtable_64_types.h | 5 + |
3902 | arch/x86/include/asm/pgtable_types.h | 26 +- | |
3903 | arch/x86/include/asm/preempt.h | 2 +- | |
afe359a8 PK |
3904 | arch/x86/include/asm/processor.h | 59 +- |
3905 | arch/x86/include/asm/ptrace.h | 21 +- | |
6090327c PK |
3906 | arch/x86/include/asm/qrwlock.h | 4 +- |
3907 | arch/x86/include/asm/realmode.h | 4 +- | |
3908 | arch/x86/include/asm/reboot.h | 10 +- | |
3909 | arch/x86/include/asm/rmwcc.h | 84 +- | |
3910 | arch/x86/include/asm/rwsem.h | 60 +- | |
da1216b9 PK |
3911 | arch/x86/include/asm/segment.h | 27 +- |
3912 | arch/x86/include/asm/smap.h | 43 + | |
6090327c | 3913 | arch/x86/include/asm/smp.h | 14 +- |
6090327c PK |
3914 | arch/x86/include/asm/stackprotector.h | 4 +- |
3915 | arch/x86/include/asm/stacktrace.h | 32 +- | |
3916 | arch/x86/include/asm/switch_to.h | 4 +- | |
afe359a8 PK |
3917 | arch/x86/include/asm/sys_ia32.h | 6 +- |
3918 | arch/x86/include/asm/thread_info.h | 27 +- | |
3919 | arch/x86/include/asm/tlbflush.h | 77 +- | |
e8242a6d | 3920 | arch/x86/include/asm/uaccess.h | 192 +- |
8cf17962 PK |
3921 | arch/x86/include/asm/uaccess_32.h | 28 +- |
3922 | arch/x86/include/asm/uaccess_64.h | 169 +- | |
6090327c PK |
3923 | arch/x86/include/asm/word-at-a-time.h | 2 +- |
3924 | arch/x86/include/asm/x86_init.h | 10 +- | |
3925 | arch/x86/include/asm/xen/page.h | 2 +- | |
6090327c | 3926 | arch/x86/include/uapi/asm/e820.h | 2 +- |
6090327c PK |
3927 | arch/x86/kernel/Makefile | 2 +- |
3928 | arch/x86/kernel/acpi/boot.c | 4 +- | |
3929 | arch/x86/kernel/acpi/sleep.c | 4 + | |
3930 | arch/x86/kernel/acpi/wakeup_32.S | 6 +- | |
afe359a8 | 3931 | arch/x86/kernel/alternative.c | 124 +- |
6090327c PK |
3932 | arch/x86/kernel/apic/apic.c | 4 +- |
3933 | arch/x86/kernel/apic/apic_flat_64.c | 4 +- | |
3934 | arch/x86/kernel/apic/apic_noop.c | 2 +- | |
3935 | arch/x86/kernel/apic/bigsmp_32.c | 2 +- | |
e8242a6d | 3936 | arch/x86/kernel/apic/io_apic.c | 8 +- |
afe359a8 | 3937 | arch/x86/kernel/apic/msi.c | 2 +- |
6090327c | 3938 | arch/x86/kernel/apic/probe_32.c | 2 +- |
8cf17962 | 3939 | arch/x86/kernel/apic/vector.c | 4 +- |
6090327c PK |
3940 | arch/x86/kernel/apic/x2apic_cluster.c | 4 +- |
3941 | arch/x86/kernel/apic/x2apic_phys.c | 2 +- | |
3942 | arch/x86/kernel/apic/x2apic_uv_x.c | 2 +- | |
e8242a6d | 3943 | arch/x86/kernel/apm_32.c | 21 +- |
6090327c PK |
3944 | arch/x86/kernel/asm-offsets.c | 20 + |
3945 | arch/x86/kernel/asm-offsets_64.c | 1 + | |
3946 | arch/x86/kernel/cpu/Makefile | 4 - | |
3947 | arch/x86/kernel/cpu/amd.c | 2 +- | |
afe359a8 | 3948 | arch/x86/kernel/cpu/common.c | 202 +- |
da1216b9 | 3949 | arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +- |
6090327c PK |
3950 | arch/x86/kernel/cpu/mcheck/mce.c | 31 +- |
3951 | arch/x86/kernel/cpu/mcheck/p5.c | 3 + | |
3952 | arch/x86/kernel/cpu/mcheck/winchip.c | 3 + | |
3953 | arch/x86/kernel/cpu/microcode/core.c | 2 +- | |
3954 | arch/x86/kernel/cpu/microcode/intel.c | 4 +- | |
3955 | arch/x86/kernel/cpu/mtrr/main.c | 2 +- | |
3956 | arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +- | |
afe359a8 | 3957 | arch/x86/kernel/cpu/perf_event.c | 10 +- |
6090327c PK |
3958 | arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +- |
3959 | arch/x86/kernel/cpu/perf_event_intel.c | 6 +- | |
da1216b9 PK |
3960 | arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +- |
3961 | arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +- | |
3962 | arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +- | |
6090327c PK |
3963 | arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +- |
3964 | arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +- | |
3965 | arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +- | |
3966 | arch/x86/kernel/cpuid.c | 2 +- | |
6090327c PK |
3967 | arch/x86/kernel/crash_dump_64.c | 2 +- |
3968 | arch/x86/kernel/doublefault.c | 8 +- | |
da1216b9 PK |
3969 | arch/x86/kernel/dumpstack.c | 24 +- |
3970 | arch/x86/kernel/dumpstack_32.c | 25 +- | |
8cf17962 | 3971 | arch/x86/kernel/dumpstack_64.c | 62 +- |
6090327c PK |
3972 | arch/x86/kernel/e820.c | 4 +- |
3973 | arch/x86/kernel/early_printk.c | 1 + | |
8cf17962 | 3974 | arch/x86/kernel/espfix_64.c | 13 +- |
afe359a8 PK |
3975 | arch/x86/kernel/fpu/core.c | 22 +- |
3976 | arch/x86/kernel/fpu/init.c | 8 +- | |
3977 | arch/x86/kernel/fpu/regset.c | 22 +- | |
3978 | arch/x86/kernel/fpu/signal.c | 20 +- | |
3979 | arch/x86/kernel/fpu/xstate.c | 8 +- | |
da1216b9 | 3980 | arch/x86/kernel/ftrace.c | 18 +- |
afe359a8 PK |
3981 | arch/x86/kernel/head64.c | 14 +- |
3982 | arch/x86/kernel/head_32.S | 235 +- | |
da1216b9 | 3983 | arch/x86/kernel/head_64.S | 149 +- |
6090327c | 3984 | arch/x86/kernel/i386_ksyms_32.c | 12 + |
6090327c PK |
3985 | arch/x86/kernel/i8259.c | 10 +- |
3986 | arch/x86/kernel/io_delay.c | 2 +- | |
3987 | arch/x86/kernel/ioport.c | 2 +- | |
3988 | arch/x86/kernel/irq.c | 8 +- | |
da1216b9 | 3989 | arch/x86/kernel/irq_32.c | 45 +- |
afe359a8 | 3990 | arch/x86/kernel/jump_label.c | 10 +- |
da1216b9 PK |
3991 | arch/x86/kernel/kgdb.c | 21 +- |
3992 | arch/x86/kernel/kprobes/core.c | 28 +- | |
6090327c PK |
3993 | arch/x86/kernel/kprobes/opt.c | 16 +- |
3994 | arch/x86/kernel/ksysfs.c | 2 +- | |
afe359a8 | 3995 | arch/x86/kernel/ldt.c | 25 + |
e8242a6d | 3996 | arch/x86/kernel/livepatch.c | 12 +- |
6090327c | 3997 | arch/x86/kernel/machine_kexec_32.c | 6 +- |
a8b227b4 | 3998 | arch/x86/kernel/mcount_64.S | 19 +- |
6090327c PK |
3999 | arch/x86/kernel/module.c | 78 +- |
4000 | arch/x86/kernel/msr.c | 2 +- | |
4001 | arch/x86/kernel/nmi.c | 34 +- | |
4002 | arch/x86/kernel/nmi_selftest.c | 4 +- | |
4003 | arch/x86/kernel/paravirt-spinlocks.c | 2 +- | |
4004 | arch/x86/kernel/paravirt.c | 45 +- | |
8cf17962 | 4005 | arch/x86/kernel/paravirt_patch_64.c | 8 + |
6090327c PK |
4006 | arch/x86/kernel/pci-calgary_64.c | 2 +- |
4007 | arch/x86/kernel/pci-iommu_table.c | 2 +- | |
4008 | arch/x86/kernel/pci-swiotlb.c | 2 +- | |
afe359a8 PK |
4009 | arch/x86/kernel/process.c | 71 +- |
4010 | arch/x86/kernel/process_32.c | 30 +- | |
4011 | arch/x86/kernel/process_64.c | 19 +- | |
6090327c PK |
4012 | arch/x86/kernel/ptrace.c | 20 +- |
4013 | arch/x86/kernel/pvclock.c | 8 +- | |
e8242a6d | 4014 | arch/x86/kernel/reboot.c | 44 +- |
6090327c PK |
4015 | arch/x86/kernel/reboot_fixups_32.c | 2 +- |
4016 | arch/x86/kernel/relocate_kernel_64.S | 3 +- | |
afe359a8 | 4017 | arch/x86/kernel/setup.c | 29 +- |
6090327c PK |
4018 | arch/x86/kernel/setup_percpu.c | 29 +- |
4019 | arch/x86/kernel/signal.c | 17 +- | |
4020 | arch/x86/kernel/smp.c | 2 +- | |
afe359a8 PK |
4021 | arch/x86/kernel/smpboot.c | 29 +- |
4022 | arch/x86/kernel/step.c | 6 +- | |
6090327c PK |
4023 | arch/x86/kernel/sys_i386_32.c | 184 + |
4024 | arch/x86/kernel/sys_x86_64.c | 22 +- | |
da1216b9 PK |
4025 | arch/x86/kernel/tboot.c | 14 +- |
4026 | arch/x86/kernel/time.c | 8 +- | |
6090327c PK |
4027 | arch/x86/kernel/tls.c | 7 +- |
4028 | arch/x86/kernel/tracepoint.c | 4 +- | |
da1216b9 | 4029 | arch/x86/kernel/traps.c | 53 +- |
6090327c | 4030 | arch/x86/kernel/tsc.c | 2 +- |
da1216b9 | 4031 | arch/x86/kernel/uprobes.c | 2 +- |
6090327c PK |
4032 | arch/x86/kernel/vm86_32.c | 6 +- |
4033 | arch/x86/kernel/vmlinux.lds.S | 147 +- | |
6090327c PK |
4034 | arch/x86/kernel/x8664_ksyms_64.c | 6 +- |
4035 | arch/x86/kernel/x86_init.c | 6 +- | |
6090327c | 4036 | arch/x86/kvm/cpuid.c | 21 +- |
8cf17962 | 4037 | arch/x86/kvm/emulate.c | 2 +- |
6090327c PK |
4038 | arch/x86/kvm/lapic.c | 2 +- |
4039 | arch/x86/kvm/paging_tmpl.h | 2 +- | |
4040 | arch/x86/kvm/svm.c | 8 + | |
e8242a6d | 4041 | arch/x86/kvm/vmx.c | 82 +- |
afe359a8 | 4042 | arch/x86/kvm/x86.c | 44 +- |
6090327c PK |
4043 | arch/x86/lguest/boot.c | 3 +- |
4044 | arch/x86/lib/atomic64_386_32.S | 164 + | |
afe359a8 PK |
4045 | arch/x86/lib/atomic64_cx8_32.S | 98 +- |
4046 | arch/x86/lib/checksum_32.S | 97 +- | |
da1216b9 | 4047 | arch/x86/lib/clear_page_64.S | 3 + |
0986ccbe | 4048 | arch/x86/lib/cmpxchg16b_emu.S | 3 + |
afe359a8 PK |
4049 | arch/x86/lib/copy_page_64.S | 14 +- |
4050 | arch/x86/lib/copy_user_64.S | 66 +- | |
4051 | arch/x86/lib/csum-copy_64.S | 14 +- | |
6090327c PK |
4052 | arch/x86/lib/csum-wrappers_64.c | 8 +- |
4053 | arch/x86/lib/getuser.S | 74 +- | |
8cf17962 | 4054 | arch/x86/lib/insn.c | 8 +- |
6090327c | 4055 | arch/x86/lib/iomap_copy_64.S | 2 + |
da1216b9 PK |
4056 | arch/x86/lib/memcpy_64.S | 6 + |
4057 | arch/x86/lib/memmove_64.S | 3 +- | |
4058 | arch/x86/lib/memset_64.S | 3 + | |
6090327c PK |
4059 | arch/x86/lib/mmx_32.c | 243 +- |
4060 | arch/x86/lib/msr-reg.S | 2 + | |
afe359a8 | 4061 | arch/x86/lib/putuser.S | 87 +- |
6090327c | 4062 | arch/x86/lib/rwsem.S | 6 +- |
afe359a8 | 4063 | arch/x86/lib/usercopy_32.c | 359 +- |
da1216b9 | 4064 | arch/x86/lib/usercopy_64.c | 20 +- |
afe359a8 PK |
4065 | arch/x86/math-emu/fpu_aux.c | 2 +- |
4066 | arch/x86/math-emu/fpu_entry.c | 4 +- | |
4067 | arch/x86/math-emu/fpu_system.h | 2 +- | |
6090327c | 4068 | arch/x86/mm/Makefile | 4 + |
afe359a8 | 4069 | arch/x86/mm/extable.c | 26 +- |
da1216b9 | 4070 | arch/x86/mm/fault.c | 570 +- |
6090327c PK |
4071 | arch/x86/mm/gup.c | 6 +- |
4072 | arch/x86/mm/highmem_32.c | 4 + | |
4073 | arch/x86/mm/hugetlbpage.c | 24 +- | |
4074 | arch/x86/mm/init.c | 101 +- | |
4075 | arch/x86/mm/init_32.c | 111 +- | |
8cf17962 | 4076 | arch/x86/mm/init_64.c | 46 +- |
6090327c | 4077 | arch/x86/mm/iomap_32.c | 4 + |
afe359a8 | 4078 | arch/x86/mm/ioremap.c | 44 +- |
6090327c | 4079 | arch/x86/mm/kmemcheck/kmemcheck.c | 4 +- |
da1216b9 | 4080 | arch/x86/mm/mmap.c | 40 +- |
6090327c PK |
4081 | arch/x86/mm/mmio-mod.c | 10 +- |
4082 | arch/x86/mm/numa.c | 2 +- | |
4083 | arch/x86/mm/pageattr.c | 33 +- | |
afe359a8 | 4084 | arch/x86/mm/pat.c | 12 +- |
6090327c PK |
4085 | arch/x86/mm/pat_rbtree.c | 2 +- |
4086 | arch/x86/mm/pf_in.c | 10 +- | |
e8242a6d | 4087 | arch/x86/mm/pgtable.c | 162 +- |
6090327c | 4088 | arch/x86/mm/pgtable_32.c | 3 + |
6090327c PK |
4089 | arch/x86/mm/setup_nx.c | 7 + |
4090 | arch/x86/mm/tlb.c | 4 + | |
4091 | arch/x86/mm/uderef_64.c | 37 + | |
4092 | arch/x86/net/bpf_jit.S | 11 + | |
8cf17962 | 4093 | arch/x86/net/bpf_jit_comp.c | 13 +- |
da1216b9 | 4094 | arch/x86/oprofile/backtrace.c | 6 +- |
6090327c PK |
4095 | arch/x86/oprofile/nmi_int.c | 8 +- |
4096 | arch/x86/oprofile/op_model_amd.c | 8 +- | |
4097 | arch/x86/oprofile/op_model_ppro.c | 7 +- | |
4098 | arch/x86/oprofile/op_x86_model.h | 2 +- | |
4099 | arch/x86/pci/intel_mid_pci.c | 2 +- | |
4100 | arch/x86/pci/irq.c | 8 +- | |
4101 | arch/x86/pci/pcbios.c | 144 +- | |
4102 | arch/x86/platform/efi/efi_32.c | 24 + | |
da1216b9 | 4103 | arch/x86/platform/efi/efi_64.c | 26 +- |
6090327c | 4104 | arch/x86/platform/efi/efi_stub_32.S | 64 +- |
8cf17962 | 4105 | arch/x86/platform/efi/efi_stub_64.S | 2 + |
e8242a6d | 4106 | arch/x86/platform/intel-mid/intel-mid.c | 5 +- |
a8b227b4 PK |
4107 | arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +- |
4108 | arch/x86/platform/intel-mid/mfld.c | 4 +- | |
4109 | arch/x86/platform/intel-mid/mrfl.c | 2 +- | |
e8242a6d | 4110 | arch/x86/platform/intel-quark/imr_selftest.c | 2 +- |
6090327c PK |
4111 | arch/x86/platform/olpc/olpc_dt.c | 2 +- |
4112 | arch/x86/power/cpu.c | 11 +- | |
4113 | arch/x86/realmode/init.c | 10 +- | |
4114 | arch/x86/realmode/rm/Makefile | 3 + | |
4115 | arch/x86/realmode/rm/header.S | 4 +- | |
da1216b9 | 4116 | arch/x86/realmode/rm/reboot.S | 4 + |
6090327c PK |
4117 | arch/x86/realmode/rm/trampoline_32.S | 12 +- |
4118 | arch/x86/realmode/rm/trampoline_64.S | 3 +- | |
4119 | arch/x86/realmode/rm/wakeup_asm.S | 5 +- | |
4120 | arch/x86/tools/Makefile | 2 +- | |
afe359a8 | 4121 | arch/x86/tools/relocs.c | 96 +- |
6090327c PK |
4122 | arch/x86/um/mem_32.c | 2 +- |
4123 | arch/x86/um/tls_32.c | 2 +- | |
da1216b9 PK |
4124 | arch/x86/xen/enlighten.c | 50 +- |
4125 | arch/x86/xen/mmu.c | 17 +- | |
4126 | arch/x86/xen/smp.c | 16 +- | |
6090327c PK |
4127 | arch/x86/xen/xen-asm_32.S | 2 +- |
4128 | arch/x86/xen/xen-head.S | 11 + | |
4129 | arch/x86/xen/xen-ops.h | 2 - | |
e8242a6d | 4130 | block/bio.c | 4 +- |
6090327c PK |
4131 | block/blk-iopoll.c | 2 +- |
4132 | block/blk-map.c | 2 +- | |
4133 | block/blk-softirq.c | 2 +- | |
4134 | block/bsg.c | 12 +- | |
4135 | block/compat_ioctl.c | 4 +- | |
4136 | block/genhd.c | 9 +- | |
4137 | block/partitions/efi.c | 8 +- | |
4138 | block/scsi_ioctl.c | 29 +- | |
4139 | crypto/cryptd.c | 4 +- | |
4140 | crypto/pcrypt.c | 2 +- | |
e8242a6d | 4141 | crypto/zlib.c | 4 +- |
afe359a8 | 4142 | drivers/acpi/acpi_video.c | 2 +- |
6090327c PK |
4143 | drivers/acpi/apei/apei-internal.h | 2 +- |
4144 | drivers/acpi/apei/ghes.c | 4 +- | |
4145 | drivers/acpi/bgrt.c | 6 +- | |
4146 | drivers/acpi/blacklist.c | 4 +- | |
e8242a6d | 4147 | drivers/acpi/bus.c | 4 +- |
0986ccbe | 4148 | drivers/acpi/device_pm.c | 4 +- |
e8242a6d PK |
4149 | drivers/acpi/ec.c | 2 +- |
4150 | drivers/acpi/pci_slot.c | 2 +- | |
4151 | drivers/acpi/processor_driver.c | 2 +- | |
6090327c | 4152 | drivers/acpi/processor_idle.c | 2 +- |
e8242a6d PK |
4153 | drivers/acpi/processor_pdc.c | 2 +- |
4154 | drivers/acpi/sleep.c | 2 +- | |
6090327c | 4155 | drivers/acpi/sysfs.c | 4 +- |
e8242a6d | 4156 | drivers/acpi/thermal.c | 2 +- |
afe359a8 | 4157 | drivers/acpi/video_detect.c | 7 +- |
6090327c PK |
4158 | drivers/ata/libahci.c | 2 +- |
4159 | drivers/ata/libata-core.c | 12 +- | |
4160 | drivers/ata/libata-scsi.c | 2 +- | |
4161 | drivers/ata/libata.h | 2 +- | |
4162 | drivers/ata/pata_arasan_cf.c | 4 +- | |
4163 | drivers/atm/adummy.c | 2 +- | |
4164 | drivers/atm/ambassador.c | 8 +- | |
4165 | drivers/atm/atmtcp.c | 14 +- | |
4166 | drivers/atm/eni.c | 10 +- | |
4167 | drivers/atm/firestream.c | 8 +- | |
4168 | drivers/atm/fore200e.c | 14 +- | |
4169 | drivers/atm/he.c | 18 +- | |
4170 | drivers/atm/horizon.c | 4 +- | |
4171 | drivers/atm/idt77252.c | 36 +- | |
4172 | drivers/atm/iphase.c | 34 +- | |
4173 | drivers/atm/lanai.c | 12 +- | |
4174 | drivers/atm/nicstar.c | 46 +- | |
4175 | drivers/atm/solos-pci.c | 4 +- | |
4176 | drivers/atm/suni.c | 4 +- | |
4177 | drivers/atm/uPD98402.c | 16 +- | |
4178 | drivers/atm/zatm.c | 6 +- | |
4179 | drivers/base/bus.c | 4 +- | |
4180 | drivers/base/devtmpfs.c | 8 +- | |
4181 | drivers/base/node.c | 2 +- | |
da1216b9 | 4182 | drivers/base/power/domain.c | 11 +- |
6090327c PK |
4183 | drivers/base/power/sysfs.c | 2 +- |
4184 | drivers/base/power/wakeup.c | 8 +- | |
4185 | drivers/base/syscore.c | 4 +- | |
4186 | drivers/block/cciss.c | 28 +- | |
4187 | drivers/block/cciss.h | 2 +- | |
4188 | drivers/block/cpqarray.c | 28 +- | |
4189 | drivers/block/cpqarray.h | 2 +- | |
a8b227b4 | 4190 | drivers/block/drbd/drbd_bitmap.c | 2 +- |
8cf17962 | 4191 | drivers/block/drbd/drbd_int.h | 8 +- |
a8b227b4 | 4192 | drivers/block/drbd/drbd_main.c | 12 +- |
6090327c | 4193 | drivers/block/drbd/drbd_nl.c | 4 +- |
a8b227b4 PK |
4194 | drivers/block/drbd/drbd_receiver.c | 34 +- |
4195 | drivers/block/drbd/drbd_worker.c | 8 +- | |
6090327c | 4196 | drivers/block/pktcdvd.c | 4 +- |
8cf17962 | 4197 | drivers/block/rbd.c | 2 +- |
6090327c PK |
4198 | drivers/bluetooth/btwilink.c | 2 +- |
4199 | drivers/cdrom/cdrom.c | 11 +- | |
4200 | drivers/cdrom/gdrom.c | 1 - | |
4201 | drivers/char/agp/compat_ioctl.c | 2 +- | |
4202 | drivers/char/agp/frontend.c | 4 +- | |
afe359a8 | 4203 | drivers/char/agp/intel-gtt.c | 4 +- |
6090327c | 4204 | drivers/char/hpet.c | 2 +- |
6090327c PK |
4205 | drivers/char/ipmi/ipmi_msghandler.c | 8 +- |
4206 | drivers/char/ipmi/ipmi_si_intf.c | 8 +- | |
8cf17962 | 4207 | drivers/char/mem.c | 47 +- |
6090327c | 4208 | drivers/char/nvram.c | 2 +- |
a8b227b4 PK |
4209 | drivers/char/pcmcia/synclink_cs.c | 16 +- |
4210 | drivers/char/random.c | 12 +- | |
e8242a6d | 4211 | drivers/char/sonypi.c | 11 +- |
6090327c PK |
4212 | drivers/char/tpm/tpm_acpi.c | 3 +- |
4213 | drivers/char/tpm/tpm_eventlog.c | 7 +- | |
4214 | drivers/char/virtio_console.c | 4 +- | |
4215 | drivers/clk/clk-composite.c | 2 +- | |
da1216b9 | 4216 | drivers/clk/samsung/clk.h | 2 +- |
6090327c PK |
4217 | drivers/clk/socfpga/clk-gate.c | 9 +- |
4218 | drivers/clk/socfpga/clk-pll.c | 9 +- | |
4219 | drivers/cpufreq/acpi-cpufreq.c | 17 +- | |
8cf17962 | 4220 | drivers/cpufreq/cpufreq-dt.c | 4 +- |
6090327c | 4221 | drivers/cpufreq/cpufreq.c | 26 +- |
afe359a8 | 4222 | drivers/cpufreq/cpufreq_governor.c | 2 +- |
6090327c PK |
4223 | drivers/cpufreq/cpufreq_governor.h | 4 +- |
4224 | drivers/cpufreq/cpufreq_ondemand.c | 10 +- | |
0986ccbe | 4225 | drivers/cpufreq/intel_pstate.c | 33 +- |
6090327c PK |
4226 | drivers/cpufreq/p4-clockmod.c | 12 +- |
4227 | drivers/cpufreq/sparc-us3-cpufreq.c | 67 +- | |
4228 | drivers/cpufreq/speedstep-centrino.c | 7 +- | |
4229 | drivers/cpuidle/driver.c | 2 +- | |
afe359a8 | 4230 | drivers/cpuidle/dt_idle_states.c | 2 +- |
6090327c PK |
4231 | drivers/cpuidle/governor.c | 2 +- |
4232 | drivers/cpuidle/sysfs.c | 2 +- | |
4233 | drivers/crypto/hifn_795x.c | 4 +- | |
4234 | drivers/devfreq/devfreq.c | 4 +- | |
4235 | drivers/dma/sh/shdma-base.c | 4 +- | |
4236 | drivers/dma/sh/shdmac.c | 2 +- | |
4237 | drivers/edac/edac_device.c | 4 +- | |
da1216b9 | 4238 | drivers/edac/edac_mc_sysfs.c | 2 +- |
6090327c PK |
4239 | drivers/edac/edac_pci.c | 4 +- |
4240 | drivers/edac/edac_pci_sysfs.c | 22 +- | |
4241 | drivers/edac/mce_amd.h | 2 +- | |
4242 | drivers/firewire/core-card.c | 6 +- | |
4243 | drivers/firewire/core-device.c | 2 +- | |
4244 | drivers/firewire/core-transaction.c | 1 + | |
4245 | drivers/firewire/core.h | 1 + | |
4246 | drivers/firmware/dmi-id.c | 2 +- | |
afe359a8 | 4247 | drivers/firmware/dmi_scan.c | 12 +- |
6090327c PK |
4248 | drivers/firmware/efi/cper.c | 8 +- |
4249 | drivers/firmware/efi/efi.c | 12 +- | |
4250 | drivers/firmware/efi/efivars.c | 2 +- | |
e8242a6d PK |
4251 | drivers/firmware/efi/runtime-map.c | 2 +- |
4252 | drivers/firmware/google/gsmi.c | 2 +- | |
4253 | drivers/firmware/google/memconsole.c | 7 +- | |
4254 | drivers/firmware/memmap.c | 2 +- | |
afe359a8 | 4255 | drivers/gpio/gpio-davinci.c | 6 +- |
6090327c PK |
4256 | drivers/gpio/gpio-em.c | 2 +- |
4257 | drivers/gpio/gpio-ich.c | 2 +- | |
afe359a8 | 4258 | drivers/gpio/gpio-omap.c | 4 +- |
6090327c PK |
4259 | drivers/gpio/gpio-rcar.c | 2 +- |
4260 | drivers/gpio/gpio-vr41xx.c | 2 +- | |
a8b227b4 | 4261 | drivers/gpio/gpiolib.c | 13 +- |
afe359a8 PK |
4262 | drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +- |
4263 | drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +- | |
4264 | drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +- | |
4265 | .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +- | |
4266 | .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +- | |
4267 | .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +- | |
4268 | .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +- | |
4269 | drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +- | |
4270 | drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +- | |
e8242a6d | 4271 | drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +- |
afe359a8 | 4272 | .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +- |
6090327c | 4273 | drivers/gpu/drm/drm_crtc.c | 2 +- |
a8b227b4 | 4274 | drivers/gpu/drm/drm_drv.c | 2 +- |
6090327c PK |
4275 | drivers/gpu/drm/drm_fops.c | 12 +- |
4276 | drivers/gpu/drm/drm_global.c | 14 +- | |
4277 | drivers/gpu/drm/drm_info.c | 13 +- | |
4278 | drivers/gpu/drm/drm_ioc32.c | 13 +- | |
a8b227b4 | 4279 | drivers/gpu/drm/drm_ioctl.c | 2 +- |
e8242a6d | 4280 | drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +- |
6090327c | 4281 | drivers/gpu/drm/i810/i810_drv.h | 4 +- |
afe359a8 | 4282 | drivers/gpu/drm/i915/i915_debugfs.c | 2 +- |
6090327c PK |
4283 | drivers/gpu/drm/i915/i915_dma.c | 2 +- |
4284 | drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +- | |
afe359a8 PK |
4285 | drivers/gpu/drm/i915/i915_gem_gtt.c | 32 +- |
4286 | drivers/gpu/drm/i915/i915_gem_gtt.h | 16 +- | |
4287 | drivers/gpu/drm/i915/i915_gem_stolen.c | 2 +- | |
da1216b9 | 4288 | drivers/gpu/drm/i915/i915_ioc32.c | 16 +- |
6090327c | 4289 | drivers/gpu/drm/i915/intel_display.c | 26 +- |
8cf17962 | 4290 | drivers/gpu/drm/imx/imx-drm-core.c | 2 +- |
6090327c | 4291 | drivers/gpu/drm/mga/mga_drv.h | 4 +- |
da1216b9 | 4292 | drivers/gpu/drm/mga/mga_ioc32.c | 10 +- |
6090327c PK |
4293 | drivers/gpu/drm/mga/mga_irq.c | 8 +- |
4294 | drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +- | |
4295 | drivers/gpu/drm/nouveau/nouveau_drm.h | 1 - | |
4296 | drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +- | |
4297 | drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +- | |
afe359a8 | 4298 | drivers/gpu/drm/omapdrm/Makefile | 2 +- |
6090327c PK |
4299 | drivers/gpu/drm/qxl/qxl_cmd.c | 12 +- |
4300 | drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +- | |
4301 | drivers/gpu/drm/qxl/qxl_drv.h | 8 +- | |
4302 | drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +- | |
4303 | drivers/gpu/drm/qxl/qxl_irq.c | 16 +- | |
4304 | drivers/gpu/drm/qxl/qxl_ttm.c | 38 +- | |
4305 | drivers/gpu/drm/r128/r128_cce.c | 2 +- | |
4306 | drivers/gpu/drm/r128/r128_drv.h | 4 +- | |
da1216b9 | 4307 | drivers/gpu/drm/r128/r128_ioc32.c | 10 +- |
6090327c PK |
4308 | drivers/gpu/drm/r128/r128_irq.c | 4 +- |
4309 | drivers/gpu/drm/r128/r128_state.c | 4 +- | |
4310 | drivers/gpu/drm/radeon/mkregtable.c | 4 +- | |
4311 | drivers/gpu/drm/radeon/radeon_device.c | 2 +- | |
4312 | drivers/gpu/drm/radeon/radeon_drv.h | 2 +- | |
da1216b9 | 4313 | drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +- |
6090327c PK |
4314 | drivers/gpu/drm/radeon/radeon_irq.c | 6 +- |
4315 | drivers/gpu/drm/radeon/radeon_state.c | 4 +- | |
4316 | drivers/gpu/drm/radeon/radeon_ttm.c | 4 +- | |
4317 | drivers/gpu/drm/tegra/dc.c | 2 +- | |
4318 | drivers/gpu/drm/tegra/dsi.c | 2 +- | |
4319 | drivers/gpu/drm/tegra/hdmi.c | 2 +- | |
afe359a8 PK |
4320 | drivers/gpu/drm/tegra/sor.c | 7 +- |
4321 | drivers/gpu/drm/tilcdc/Makefile | 6 +- | |
6090327c | 4322 | drivers/gpu/drm/ttm/ttm_memory.c | 4 +- |
0986ccbe PK |
4323 | drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +- |
4324 | drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +- | |
6090327c PK |
4325 | drivers/gpu/drm/udl/udl_fb.c | 1 - |
4326 | drivers/gpu/drm/via/via_drv.h | 4 +- | |
4327 | drivers/gpu/drm/via/via_irq.c | 18 +- | |
afe359a8 PK |
4328 | drivers/gpu/drm/virtio/virtgpu_debugfs.c | 2 +- |
4329 | drivers/gpu/drm/virtio/virtgpu_fence.c | 2 +- | |
6090327c PK |
4330 | drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +- |
4331 | drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +- | |
4332 | drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c | 4 +- | |
4333 | drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +- | |
4334 | drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +- | |
4335 | drivers/gpu/vga/vga_switcheroo.c | 4 +- | |
4336 | drivers/hid/hid-core.c | 4 +- | |
afe359a8 | 4337 | drivers/hid/hid-sensor-custom.c | 2 +- |
e8242a6d | 4338 | drivers/hv/channel.c | 2 +- |
6090327c PK |
4339 | drivers/hv/hv.c | 4 +- |
4340 | drivers/hv/hv_balloon.c | 18 +- | |
4341 | drivers/hv/hyperv_vmbus.h | 2 +- | |
e8242a6d | 4342 | drivers/hwmon/acpi_power_meter.c | 6 +- |
6090327c PK |
4343 | drivers/hwmon/applesmc.c | 2 +- |
4344 | drivers/hwmon/asus_atk0110.c | 10 +- | |
4345 | drivers/hwmon/coretemp.c | 2 +- | |
afe359a8 | 4346 | drivers/hwmon/dell-smm-hwmon.c | 2 +- |
6090327c PK |
4347 | drivers/hwmon/ibmaem.c | 2 +- |
4348 | drivers/hwmon/iio_hwmon.c | 2 +- | |
a8b227b4 | 4349 | drivers/hwmon/nct6683.c | 6 +- |
6090327c PK |
4350 | drivers/hwmon/nct6775.c | 6 +- |
4351 | drivers/hwmon/pmbus/pmbus_core.c | 10 +- | |
4352 | drivers/hwmon/sht15.c | 12 +- | |
4353 | drivers/hwmon/via-cputemp.c | 2 +- | |
4354 | drivers/i2c/busses/i2c-amd756-s4882.c | 2 +- | |
4355 | drivers/i2c/busses/i2c-diolan-u2c.c | 2 +- | |
4356 | drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +- | |
4357 | drivers/i2c/i2c-dev.c | 2 +- | |
4358 | drivers/ide/ide-cd.c | 2 +- | |
4359 | drivers/iio/industrialio-core.c | 2 +- | |
afe359a8 | 4360 | drivers/iio/magnetometer/ak8975.c | 2 +- |
6090327c PK |
4361 | drivers/infiniband/core/cm.c | 32 +- |
4362 | drivers/infiniband/core/fmr_pool.c | 20 +- | |
e8242a6d | 4363 | drivers/infiniband/core/uverbs_cmd.c | 3 + |
6090327c PK |
4364 | drivers/infiniband/hw/cxgb4/mem.c | 4 +- |
4365 | drivers/infiniband/hw/ipath/ipath_rc.c | 6 +- | |
4366 | drivers/infiniband/hw/ipath/ipath_ruc.c | 6 +- | |
4367 | drivers/infiniband/hw/mlx4/mad.c | 2 +- | |
4368 | drivers/infiniband/hw/mlx4/mcg.c | 2 +- | |
4369 | drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +- | |
4370 | drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +- | |
4371 | drivers/infiniband/hw/mthca/mthca_main.c | 2 +- | |
4372 | drivers/infiniband/hw/mthca/mthca_mr.c | 6 +- | |
4373 | drivers/infiniband/hw/mthca/mthca_provider.c | 2 +- | |
4374 | drivers/infiniband/hw/nes/nes.c | 4 +- | |
4375 | drivers/infiniband/hw/nes/nes.h | 40 +- | |
4376 | drivers/infiniband/hw/nes/nes_cm.c | 62 +- | |
4377 | drivers/infiniband/hw/nes/nes_mgt.c | 8 +- | |
4378 | drivers/infiniband/hw/nes/nes_nic.c | 40 +- | |
4379 | drivers/infiniband/hw/nes/nes_verbs.c | 10 +- | |
4380 | drivers/infiniband/hw/qib/qib.h | 1 + | |
0986ccbe | 4381 | drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +- |
6090327c PK |
4382 | drivers/input/gameport/gameport.c | 4 +- |
4383 | drivers/input/input.c | 4 +- | |
4384 | drivers/input/joystick/sidewinder.c | 1 + | |
4385 | drivers/input/joystick/xpad.c | 4 +- | |
4386 | drivers/input/misc/ims-pcu.c | 4 +- | |
4387 | drivers/input/mouse/psmouse.h | 2 +- | |
4388 | drivers/input/mousedev.c | 2 +- | |
4389 | drivers/input/serio/serio.c | 4 +- | |
4390 | drivers/input/serio/serio_raw.c | 4 +- | |
e8242a6d | 4391 | drivers/input/touchscreen/htcpen.c | 2 +- |
da1216b9 PK |
4392 | drivers/iommu/arm-smmu.c | 43 +- |
4393 | drivers/iommu/io-pgtable-arm.c | 101 +- | |
4394 | drivers/iommu/io-pgtable.c | 11 +- | |
4395 | drivers/iommu/io-pgtable.h | 19 +- | |
0986ccbe | 4396 | drivers/iommu/iommu.c | 2 +- |
da1216b9 | 4397 | drivers/iommu/ipmmu-vmsa.c | 13 +- |
afe359a8 | 4398 | drivers/iommu/irq_remapping.c | 2 +- |
da1216b9 | 4399 | drivers/irqchip/irq-gic.c | 2 +- |
8cf17962 | 4400 | drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +- |
6090327c PK |
4401 | drivers/irqchip/irq-renesas-irqc.c | 2 +- |
4402 | drivers/isdn/capi/capi.c | 10 +- | |
4403 | drivers/isdn/gigaset/interface.c | 8 +- | |
4404 | drivers/isdn/gigaset/usb-gigaset.c | 2 +- | |
4405 | drivers/isdn/hardware/avm/b1.c | 4 +- | |
4406 | drivers/isdn/i4l/isdn_common.c | 2 + | |
4407 | drivers/isdn/i4l/isdn_tty.c | 22 +- | |
4408 | drivers/isdn/icn/icn.c | 2 +- | |
4409 | drivers/isdn/mISDN/dsp_cmx.c | 2 +- | |
6090327c PK |
4410 | drivers/lguest/core.c | 10 +- |
4411 | drivers/lguest/page_tables.c | 2 +- | |
4412 | drivers/lguest/x86/core.c | 12 +- | |
4413 | drivers/lguest/x86/switcher_32.S | 27 +- | |
4414 | drivers/md/bcache/closure.h | 2 +- | |
4415 | drivers/md/bitmap.c | 2 +- | |
4416 | drivers/md/dm-ioctl.c | 2 +- | |
afe359a8 | 4417 | drivers/md/dm-raid1.c | 18 +- |
6090327c PK |
4418 | drivers/md/dm-stats.c | 6 +- |
4419 | drivers/md/dm-stripe.c | 10 +- | |
0986ccbe | 4420 | drivers/md/dm-table.c | 2 +- |
6090327c PK |
4421 | drivers/md/dm-thin-metadata.c | 4 +- |
4422 | drivers/md/dm.c | 16 +- | |
4423 | drivers/md/md.c | 26 +- | |
4424 | drivers/md/md.h | 6 +- | |
4425 | drivers/md/persistent-data/dm-space-map-metadata.c | 4 +- | |
4426 | drivers/md/persistent-data/dm-space-map.h | 1 + | |
4427 | drivers/md/raid1.c | 4 +- | |
4428 | drivers/md/raid10.c | 16 +- | |
e8242a6d | 4429 | drivers/md/raid5.c | 22 +- |
6090327c PK |
4430 | drivers/media/dvb-core/dvbdev.c | 2 +- |
4431 | drivers/media/dvb-frontends/af9033.h | 2 +- | |
4432 | drivers/media/dvb-frontends/dib3000.h | 2 +- | |
a8b227b4 PK |
4433 | drivers/media/dvb-frontends/dib7000p.h | 2 +- |
4434 | drivers/media/dvb-frontends/dib8000.h | 2 +- | |
6090327c PK |
4435 | drivers/media/pci/cx88/cx88-video.c | 6 +- |
4436 | drivers/media/pci/ivtv/ivtv-driver.c | 2 +- | |
a8b227b4 PK |
4437 | drivers/media/pci/solo6x10/solo6x10-core.c | 2 +- |
4438 | drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +- | |
4439 | drivers/media/pci/solo6x10/solo6x10.h | 2 +- | |
0986ccbe | 4440 | drivers/media/pci/tw68/tw68-core.c | 2 +- |
6090327c PK |
4441 | drivers/media/platform/omap/omap_vout.c | 11 +- |
4442 | drivers/media/platform/s5p-tv/mixer.h | 2 +- | |
4443 | drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +- | |
4444 | drivers/media/platform/s5p-tv/mixer_reg.c | 2 +- | |
4445 | drivers/media/platform/s5p-tv/mixer_video.c | 24 +- | |
4446 | drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +- | |
6090327c PK |
4447 | drivers/media/radio/radio-cadet.c | 2 + |
4448 | drivers/media/radio/radio-maxiradio.c | 2 +- | |
4449 | drivers/media/radio/radio-shark.c | 2 +- | |
4450 | drivers/media/radio/radio-shark2.c | 2 +- | |
4451 | drivers/media/radio/radio-si476x.c | 2 +- | |
8cf17962 | 4452 | drivers/media/radio/wl128x/fmdrv_common.c | 2 +- |
0986ccbe | 4453 | drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +- |
6090327c PK |
4454 | drivers/media/v4l2-core/v4l2-device.c | 4 +- |
4455 | drivers/media/v4l2-core/v4l2-ioctl.c | 13 +- | |
8cf17962 | 4456 | drivers/memory/omap-gpmc.c | 21 +- |
6090327c | 4457 | drivers/message/fusion/mptsas.c | 34 +- |
6090327c | 4458 | drivers/mfd/ab8500-debugfs.c | 2 +- |
e8242a6d | 4459 | drivers/mfd/kempld-core.c | 2 +- |
6090327c PK |
4460 | drivers/mfd/max8925-i2c.c | 2 +- |
4461 | drivers/mfd/tps65910.c | 2 +- | |
4462 | drivers/mfd/twl4030-irq.c | 9 +- | |
4463 | drivers/misc/c2port/core.c | 4 +- | |
4464 | drivers/misc/eeprom/sunxi_sid.c | 4 +- | |
4465 | drivers/misc/kgdbts.c | 4 +- | |
4466 | drivers/misc/lis3lv02d/lis3lv02d.c | 8 +- | |
4467 | drivers/misc/lis3lv02d/lis3lv02d.h | 2 +- | |
afe359a8 | 4468 | drivers/misc/mic/scif/scif_rb.c | 8 +- |
6090327c PK |
4469 | drivers/misc/sgi-gru/gruhandles.c | 4 +- |
4470 | drivers/misc/sgi-gru/gruprocfs.c | 8 +- | |
4471 | drivers/misc/sgi-gru/grutables.h | 154 +- | |
4472 | drivers/misc/sgi-xp/xp.h | 2 +- | |
4473 | drivers/misc/sgi-xp/xpc.h | 3 +- | |
da1216b9 | 4474 | drivers/misc/sgi-xp/xpc_main.c | 2 +- |
6090327c | 4475 | drivers/mmc/card/block.c | 2 +- |
6090327c PK |
4476 | drivers/mmc/host/dw_mmc.h | 2 +- |
4477 | drivers/mmc/host/mmci.c | 4 +- | |
0986ccbe | 4478 | drivers/mmc/host/omap_hsmmc.c | 4 +- |
6090327c PK |
4479 | drivers/mmc/host/sdhci-esdhc-imx.c | 7 +- |
4480 | drivers/mmc/host/sdhci-s3c.c | 8 +- | |
4481 | drivers/mtd/chips/cfi_cmdset_0020.c | 2 +- | |
4482 | drivers/mtd/nand/denali.c | 1 + | |
0986ccbe | 4483 | drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +- |
6090327c PK |
4484 | drivers/mtd/nftlmount.c | 1 + |
4485 | drivers/mtd/sm_ftl.c | 2 +- | |
4486 | drivers/net/bonding/bond_netlink.c | 2 +- | |
0986ccbe | 4487 | drivers/net/caif/caif_hsi.c | 2 +- |
6090327c | 4488 | drivers/net/can/Kconfig | 2 +- |
0986ccbe PK |
4489 | drivers/net/can/dev.c | 2 +- |
4490 | drivers/net/can/vcan.c | 2 +- | |
4491 | drivers/net/dummy.c | 2 +- | |
6090327c PK |
4492 | drivers/net/ethernet/8390/ax88796.c | 4 +- |
4493 | drivers/net/ethernet/altera/altera_tse_main.c | 4 +- | |
a8b227b4 | 4494 | drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +- |
0986ccbe | 4495 | drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +- |
e8242a6d | 4496 | drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +- |
afe359a8 PK |
4497 | drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +- |
4498 | drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +- | |
4499 | drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +- | |
4500 | drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +- | |
4501 | drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +- | |
a8b227b4 | 4502 | drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +- |
afe359a8 | 4503 | drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +- |
6090327c PK |
4504 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +- |
4505 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +- | |
4506 | drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +- | |
4507 | drivers/net/ethernet/broadcom/tg3.h | 1 + | |
afe359a8 PK |
4508 | drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +- |
4509 | drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +- | |
6090327c | 4510 | drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +- |
6090327c PK |
4511 | drivers/net/ethernet/dec/tulip/de4x5.c | 4 +- |
4512 | drivers/net/ethernet/emulex/benet/be_main.c | 2 +- | |
4513 | drivers/net/ethernet/faraday/ftgmac100.c | 2 + | |
4514 | drivers/net/ethernet/faraday/ftmac100.c | 2 + | |
4515 | drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +- | |
4516 | drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +- | |
0986ccbe | 4517 | drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +- |
afe359a8 | 4518 | drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 4 +- |
6090327c PK |
4519 | drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +- |
4520 | .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +- | |
4521 | .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +- | |
4522 | .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +- | |
4523 | drivers/net/ethernet/realtek/r8169.c | 8 +- | |
4524 | drivers/net/ethernet/sfc/ptp.c | 2 +- | |
4525 | drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +- | |
e8242a6d | 4526 | drivers/net/ethernet/via/via-rhine.c | 2 +- |
6090327c PK |
4527 | drivers/net/hyperv/hyperv_net.h | 2 +- |
4528 | drivers/net/hyperv/rndis_filter.c | 4 +- | |
0986ccbe | 4529 | drivers/net/ifb.c | 2 +- |
afe359a8 | 4530 | drivers/net/ipvlan/ipvlan_core.c | 2 +- |
6090327c | 4531 | drivers/net/macvlan.c | 20 +- |
0986ccbe PK |
4532 | drivers/net/macvtap.c | 6 +- |
4533 | drivers/net/nlmon.c | 2 +- | |
8cf17962 | 4534 | drivers/net/phy/phy_device.c | 6 +- |
6090327c PK |
4535 | drivers/net/ppp/ppp_generic.c | 4 +- |
4536 | drivers/net/slip/slhc.c | 2 +- | |
0986ccbe PK |
4537 | drivers/net/team/team.c | 4 +- |
4538 | drivers/net/tun.c | 7 +- | |
6090327c PK |
4539 | drivers/net/usb/hso.c | 23 +- |
4540 | drivers/net/usb/r8152.c | 2 +- | |
4541 | drivers/net/usb/sierra_net.c | 4 +- | |
4542 | drivers/net/virtio_net.c | 2 +- | |
4543 | drivers/net/vxlan.c | 4 +- | |
4544 | drivers/net/wimax/i2400m/rx.c | 2 +- | |
4545 | drivers/net/wireless/airo.c | 2 +- | |
4546 | drivers/net/wireless/at76c50x-usb.c | 2 +- | |
4547 | drivers/net/wireless/ath/ath10k/htc.c | 7 +- | |
4548 | drivers/net/wireless/ath/ath10k/htc.h | 4 +- | |
a8b227b4 PK |
4549 | drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +- |
4550 | drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +- | |
6090327c | 4551 | drivers/net/wireless/ath/ath9k/hw.h | 4 +- |
a8b227b4 | 4552 | drivers/net/wireless/ath/ath9k/main.c | 22 +- |
6090327c PK |
4553 | drivers/net/wireless/b43/phy_lp.c | 2 +- |
4554 | drivers/net/wireless/iwlegacy/3945-mac.c | 4 +- | |
4555 | drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +- | |
4556 | drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +- | |
4557 | drivers/net/wireless/mac80211_hwsim.c | 28 +- | |
4558 | drivers/net/wireless/rndis_wlan.c | 2 +- | |
4559 | drivers/net/wireless/rt2x00/rt2x00.h | 2 +- | |
4560 | drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +- | |
4561 | drivers/net/wireless/ti/wl1251/sdio.c | 12 +- | |
4562 | drivers/net/wireless/ti/wl12xx/main.c | 8 +- | |
4563 | drivers/net/wireless/ti/wl18xx/main.c | 6 +- | |
4564 | drivers/nfc/nfcwilink.c | 2 +- | |
e8242a6d | 4565 | drivers/of/fdt.c | 4 +- |
6090327c PK |
4566 | drivers/oprofile/buffer_sync.c | 8 +- |
4567 | drivers/oprofile/event_buffer.c | 2 +- | |
4568 | drivers/oprofile/oprof.c | 2 +- | |
4569 | drivers/oprofile/oprofile_files.c | 2 +- | |
4570 | drivers/oprofile/oprofile_stats.c | 10 +- | |
4571 | drivers/oprofile/oprofile_stats.h | 10 +- | |
4572 | drivers/oprofile/oprofilefs.c | 6 +- | |
4573 | drivers/oprofile/timer_int.c | 2 +- | |
4574 | drivers/parport/procfs.c | 4 +- | |
e8242a6d | 4575 | drivers/pci/host/pci-host-generic.c | 24 +- |
6090327c PK |
4576 | drivers/pci/hotplug/acpiphp_ibm.c | 4 +- |
4577 | drivers/pci/hotplug/cpcihp_generic.c | 6 +- | |
4578 | drivers/pci/hotplug/cpcihp_zt5550.c | 14 +- | |
0986ccbe | 4579 | drivers/pci/hotplug/cpqphp_nvram.c | 2 + |
6090327c PK |
4580 | drivers/pci/hotplug/pci_hotplug_core.c | 6 +- |
4581 | drivers/pci/hotplug/pciehp_core.c | 2 +- | |
afe359a8 | 4582 | drivers/pci/msi.c | 21 +- |
6090327c PK |
4583 | drivers/pci/pci-sysfs.c | 6 +- |
4584 | drivers/pci/pci.h | 2 +- | |
4585 | drivers/pci/pcie/aspm.c | 6 +- | |
e8242a6d | 4586 | drivers/pci/pcie/portdrv_pci.c | 2 +- |
6090327c | 4587 | drivers/pci/probe.c | 2 +- |
afe359a8 | 4588 | drivers/pinctrl/pinctrl-at91.c | 5 +- |
e8242a6d | 4589 | drivers/platform/chrome/chromeos_pstore.c | 2 +- |
6090327c | 4590 | drivers/platform/x86/alienware-wmi.c | 4 +- |
e8242a6d PK |
4591 | drivers/platform/x86/compal-laptop.c | 2 +- |
4592 | drivers/platform/x86/hdaps.c | 2 +- | |
4593 | drivers/platform/x86/ibm_rtl.c | 2 +- | |
4594 | drivers/platform/x86/intel_oaktrail.c | 2 +- | |
4595 | drivers/platform/x86/msi-laptop.c | 16 +- | |
6090327c | 4596 | drivers/platform/x86/msi-wmi.c | 2 +- |
e8242a6d PK |
4597 | drivers/platform/x86/samsung-laptop.c | 2 +- |
4598 | drivers/platform/x86/samsung-q10.c | 2 +- | |
4599 | drivers/platform/x86/sony-laptop.c | 14 +- | |
da1216b9 | 4600 | drivers/platform/x86/thinkpad_acpi.c | 2 +- |
6090327c | 4601 | drivers/pnp/pnpbios/bioscalls.c | 14 +- |
e8242a6d | 4602 | drivers/pnp/pnpbios/core.c | 2 +- |
6090327c PK |
4603 | drivers/power/pda_power.c | 7 +- |
4604 | drivers/power/power_supply.h | 4 +- | |
4605 | drivers/power/power_supply_core.c | 7 +- | |
4606 | drivers/power/power_supply_sysfs.c | 6 +- | |
afe359a8 | 4607 | drivers/power/reset/at91-reset.c | 9 +- |
6090327c PK |
4608 | drivers/powercap/powercap_sys.c | 136 +- |
4609 | drivers/ptp/ptp_private.h | 2 +- | |
4610 | drivers/ptp/ptp_sysfs.c | 2 +- | |
4611 | drivers/regulator/core.c | 4 +- | |
4612 | drivers/regulator/max8660.c | 6 +- | |
afe359a8 | 4613 | drivers/regulator/max8973-regulator.c | 16 +- |
8cf17962 | 4614 | drivers/regulator/mc13892-regulator.c | 8 +- |
afe359a8 | 4615 | drivers/rtc/rtc-armada38x.c | 7 +- |
6090327c PK |
4616 | drivers/rtc/rtc-cmos.c | 4 +- |
4617 | drivers/rtc/rtc-ds1307.c | 2 +- | |
4618 | drivers/rtc/rtc-m48t59.c | 4 +- | |
afe359a8 PK |
4619 | drivers/rtc/rtc-test.c | 6 +- |
4620 | drivers/scsi/be2iscsi/be_main.c | 2 +- | |
6090327c PK |
4621 | drivers/scsi/bfa/bfa_fcpim.h | 2 +- |
4622 | drivers/scsi/bfa/bfa_ioc.h | 4 +- | |
4623 | drivers/scsi/fcoe/fcoe_sysfs.c | 12 +- | |
4624 | drivers/scsi/hosts.c | 4 +- | |
afe359a8 | 4625 | drivers/scsi/hpsa.c | 38 +- |
6090327c PK |
4626 | drivers/scsi/hpsa.h | 2 +- |
4627 | drivers/scsi/libfc/fc_exch.c | 50 +- | |
4628 | drivers/scsi/libsas/sas_ata.c | 2 +- | |
4629 | drivers/scsi/lpfc/lpfc.h | 8 +- | |
4630 | drivers/scsi/lpfc/lpfc_debugfs.c | 18 +- | |
4631 | drivers/scsi/lpfc/lpfc_init.c | 6 +- | |
4632 | drivers/scsi/lpfc/lpfc_scsi.c | 10 +- | |
4633 | drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +- | |
4634 | drivers/scsi/pmcraid.c | 20 +- | |
4635 | drivers/scsi/pmcraid.h | 8 +- | |
4636 | drivers/scsi/qla2xxx/qla_attr.c | 4 +- | |
4637 | drivers/scsi/qla2xxx/qla_gbl.h | 4 +- | |
4638 | drivers/scsi/qla2xxx/qla_os.c | 6 +- | |
4639 | drivers/scsi/qla4xxx/ql4_def.h | 2 +- | |
4640 | drivers/scsi/qla4xxx/ql4_os.c | 6 +- | |
da1216b9 | 4641 | drivers/scsi/scsi.c | 2 +- |
8cf17962 | 4642 | drivers/scsi/scsi_lib.c | 8 +- |
6090327c | 4643 | drivers/scsi/scsi_sysfs.c | 2 +- |
6090327c PK |
4644 | drivers/scsi/scsi_transport_fc.c | 8 +- |
4645 | drivers/scsi/scsi_transport_iscsi.c | 6 +- | |
4646 | drivers/scsi/scsi_transport_srp.c | 6 +- | |
da1216b9 | 4647 | drivers/scsi/sd.c | 6 +- |
6090327c | 4648 | drivers/scsi/sg.c | 2 +- |
afe359a8 | 4649 | drivers/scsi/sr.c | 21 +- |
0986ccbe | 4650 | drivers/soc/tegra/fuse/fuse-tegra.c | 2 +- |
6090327c | 4651 | drivers/spi/spi.c | 2 +- |
afe359a8 | 4652 | drivers/spi/spidev.c | 2 +- |
6090327c | 4653 | drivers/staging/android/timed_output.c | 6 +- |
8cf17962 | 4654 | drivers/staging/comedi/comedi_fops.c | 8 +- |
e8242a6d PK |
4655 | drivers/staging/fbtft/fbtft-core.c | 2 +- |
4656 | drivers/staging/fbtft/fbtft.h | 2 +- | |
6090327c | 4657 | drivers/staging/gdm724x/gdm_tty.c | 2 +- |
afe359a8 PK |
4658 | drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +- |
4659 | drivers/staging/iio/adc/ad7280a.c | 4 +- | |
6090327c PK |
4660 | drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +- |
4661 | drivers/staging/lustre/lnet/selftest/framework.c | 4 - | |
4662 | drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +- | |
4663 | drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +- | |
4664 | drivers/staging/lustre/lustre/include/obd.h | 2 +- | |
da1216b9 | 4665 | drivers/staging/lustre/lustre/libcfs/module.c | 6 +- |
6090327c PK |
4666 | drivers/staging/octeon/ethernet-rx.c | 12 +- |
4667 | drivers/staging/octeon/ethernet.c | 8 +- | |
4668 | drivers/staging/rtl8188eu/include/hal_intf.h | 2 +- | |
6090327c | 4669 | drivers/staging/rtl8712/rtl871x_io.h | 2 +- |
afe359a8 PK |
4670 | drivers/staging/sm750fb/sm750.c | 14 +- |
4671 | drivers/staging/unisys/visorbus/visorbus_private.h | 4 +- | |
6090327c PK |
4672 | drivers/target/sbp/sbp_target.c | 4 +- |
4673 | drivers/target/target_core_device.c | 2 +- | |
4674 | drivers/target/target_core_transport.c | 2 +- | |
afe359a8 | 4675 | drivers/thermal/cpu_cooling.c | 9 +- |
0986ccbe | 4676 | drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +- |
8cf17962 | 4677 | drivers/thermal/of-thermal.c | 17 +- |
e8242a6d | 4678 | drivers/thermal/x86_pkg_temp_thermal.c | 2 +- |
6090327c PK |
4679 | drivers/tty/cyclades.c | 6 +- |
4680 | drivers/tty/hvc/hvc_console.c | 14 +- | |
4681 | drivers/tty/hvc/hvcs.c | 21 +- | |
4682 | drivers/tty/hvc/hvsi.c | 22 +- | |
4683 | drivers/tty/hvc/hvsi_lib.c | 4 +- | |
4684 | drivers/tty/ipwireless/tty.c | 27 +- | |
4685 | drivers/tty/moxa.c | 2 +- | |
4686 | drivers/tty/n_gsm.c | 4 +- | |
4687 | drivers/tty/n_tty.c | 5 +- | |
4688 | drivers/tty/pty.c | 4 +- | |
4689 | drivers/tty/rocket.c | 6 +- | |
afe359a8 PK |
4690 | drivers/tty/serial/8250/8250_core.c | 10 +- |
4691 | drivers/tty/serial/ifx6x60.c | 2 +- | |
6090327c PK |
4692 | drivers/tty/serial/ioc4_serial.c | 6 +- |
4693 | drivers/tty/serial/kgdb_nmi.c | 4 +- | |
4694 | drivers/tty/serial/kgdboc.c | 32 +- | |
4695 | drivers/tty/serial/msm_serial.c | 4 +- | |
4696 | drivers/tty/serial/samsung.c | 9 +- | |
4697 | drivers/tty/serial/serial_core.c | 8 +- | |
4698 | drivers/tty/synclink.c | 34 +- | |
4699 | drivers/tty/synclink_gt.c | 28 +- | |
4700 | drivers/tty/synclinkmp.c | 34 +- | |
4701 | drivers/tty/tty_io.c | 2 +- | |
4702 | drivers/tty/tty_ldisc.c | 8 +- | |
4703 | drivers/tty/tty_port.c | 22 +- | |
0986ccbe | 4704 | drivers/uio/uio.c | 13 +- |
6090327c PK |
4705 | drivers/usb/atm/cxacru.c | 2 +- |
4706 | drivers/usb/atm/usbatm.c | 24 +- | |
4707 | drivers/usb/core/devices.c | 6 +- | |
4708 | drivers/usb/core/devio.c | 10 +- | |
4709 | drivers/usb/core/hcd.c | 4 +- | |
4710 | drivers/usb/core/message.c | 6 +- | |
4711 | drivers/usb/core/sysfs.c | 2 +- | |
4712 | drivers/usb/core/usb.c | 2 +- | |
6090327c | 4713 | drivers/usb/early/ehci-dbgp.c | 16 +- |
a8b227b4 | 4714 | drivers/usb/gadget/function/u_serial.c | 22 +- |
afe359a8 PK |
4715 | drivers/usb/gadget/udc/dummy_hcd.c | 2 +- |
4716 | drivers/usb/host/ehci-hcd.c | 2 +- | |
6090327c | 4717 | drivers/usb/host/ehci-hub.c | 4 +- |
afe359a8 PK |
4718 | drivers/usb/host/ehci-q.c | 4 +- |
4719 | drivers/usb/host/fotg210-hcd.c | 2 +- | |
4720 | drivers/usb/host/fusbh200-hcd.c | 2 +- | |
4721 | drivers/usb/host/hwa-hc.c | 2 +- | |
4722 | drivers/usb/host/ohci-hcd.c | 2 +- | |
4723 | drivers/usb/host/r8a66597.h | 2 +- | |
4724 | drivers/usb/host/uhci-hcd.c | 2 +- | |
4725 | drivers/usb/host/xhci-pci.c | 2 +- | |
4726 | drivers/usb/host/xhci.c | 2 +- | |
6090327c PK |
4727 | drivers/usb/misc/appledisplay.c | 4 +- |
4728 | drivers/usb/serial/console.c | 8 +- | |
afe359a8 | 4729 | drivers/usb/storage/usb.c | 2 +- |
6090327c | 4730 | drivers/usb/storage/usb.h | 2 +- |
a8b227b4 PK |
4731 | drivers/usb/usbip/vhci.h | 2 +- |
4732 | drivers/usb/usbip/vhci_hcd.c | 6 +- | |
4733 | drivers/usb/usbip/vhci_rx.c | 2 +- | |
6090327c PK |
4734 | drivers/usb/wusbcore/wa-hc.h | 4 +- |
4735 | drivers/usb/wusbcore/wa-xfer.c | 2 +- | |
4736 | drivers/vfio/vfio.c | 2 +- | |
4737 | drivers/vhost/vringh.c | 20 +- | |
4738 | drivers/video/backlight/kb3886_bl.c | 2 +- | |
4739 | drivers/video/fbdev/aty/aty128fb.c | 2 +- | |
4740 | drivers/video/fbdev/aty/atyfb_base.c | 8 +- | |
4741 | drivers/video/fbdev/aty/mach64_cursor.c | 5 +- | |
4742 | drivers/video/fbdev/core/fb_defio.c | 6 +- | |
4743 | drivers/video/fbdev/core/fbmem.c | 2 +- | |
4744 | drivers/video/fbdev/hyperv_fb.c | 4 +- | |
4745 | drivers/video/fbdev/i810/i810_accel.c | 1 + | |
afe359a8 | 4746 | drivers/video/fbdev/matrox/matroxfb_base.c | 2 +- |
6090327c PK |
4747 | drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +- |
4748 | drivers/video/fbdev/nvidia/nvidia.c | 27 +- | |
4749 | drivers/video/fbdev/omap2/dss/display.c | 8 +- | |
4750 | drivers/video/fbdev/s1d13xxxfb.c | 6 +- | |
4751 | drivers/video/fbdev/smscufx.c | 4 +- | |
4752 | drivers/video/fbdev/udlfb.c | 36 +- | |
4753 | drivers/video/fbdev/uvesafb.c | 52 +- | |
4754 | drivers/video/fbdev/vesafb.c | 58 +- | |
4755 | drivers/video/fbdev/via/via_clock.h | 2 +- | |
e8242a6d | 4756 | drivers/xen/events/events_base.c | 6 +- |
afe359a8 | 4757 | drivers/xen/evtchn.c | 4 +- |
6090327c PK |
4758 | fs/Kconfig.binfmt | 2 +- |
4759 | fs/afs/inode.c | 4 +- | |
4760 | fs/aio.c | 2 +- | |
4761 | fs/autofs4/waitq.c | 2 +- | |
4762 | fs/befs/endian.h | 6 +- | |
4763 | fs/binfmt_aout.c | 23 +- | |
afe359a8 PK |
4764 | fs/binfmt_elf.c | 672 +- |
4765 | fs/binfmt_elf_fdpic.c | 2 +- | |
6090327c PK |
4766 | fs/block_dev.c | 2 +- |
4767 | fs/btrfs/ctree.c | 9 +- | |
4768 | fs/btrfs/delayed-inode.c | 6 +- | |
4769 | fs/btrfs/delayed-inode.h | 4 +- | |
4770 | fs/btrfs/super.c | 2 +- | |
4771 | fs/btrfs/sysfs.c | 2 +- | |
0986ccbe | 4772 | fs/btrfs/tests/free-space-tests.c | 8 +- |
6090327c PK |
4773 | fs/btrfs/tree-log.h | 2 +- |
4774 | fs/buffer.c | 2 +- | |
4775 | fs/cachefiles/bind.c | 6 +- | |
4776 | fs/cachefiles/daemon.c | 8 +- | |
4777 | fs/cachefiles/internal.h | 12 +- | |
4778 | fs/cachefiles/namei.c | 2 +- | |
4779 | fs/cachefiles/proc.c | 12 +- | |
afe359a8 | 4780 | fs/ceph/dir.c | 12 +- |
6090327c PK |
4781 | fs/ceph/super.c | 4 +- |
4782 | fs/cifs/cifs_debug.c | 12 +- | |
4783 | fs/cifs/cifsfs.c | 8 +- | |
4784 | fs/cifs/cifsglob.h | 54 +- | |
4785 | fs/cifs/file.c | 10 +- | |
4786 | fs/cifs/misc.c | 4 +- | |
4787 | fs/cifs/smb1ops.c | 80 +- | |
4788 | fs/cifs/smb2ops.c | 84 +- | |
4789 | fs/cifs/smb2pdu.c | 3 +- | |
4790 | fs/coda/cache.c | 10 +- | |
4791 | fs/compat.c | 4 +- | |
4792 | fs/compat_binfmt_elf.c | 2 + | |
4793 | fs/compat_ioctl.c | 12 +- | |
4794 | fs/configfs/dir.c | 10 +- | |
4795 | fs/coredump.c | 16 +- | |
e8242a6d | 4796 | fs/dcache.c | 51 +- |
6090327c PK |
4797 | fs/ecryptfs/inode.c | 2 +- |
4798 | fs/ecryptfs/miscdev.c | 2 +- | |
8cf17962 | 4799 | fs/exec.c | 362 +- |
6090327c PK |
4800 | fs/ext2/xattr.c | 5 +- |
4801 | fs/ext3/xattr.c | 5 +- | |
4802 | fs/ext4/ext4.h | 20 +- | |
4803 | fs/ext4/mballoc.c | 44 +- | |
4804 | fs/ext4/mmp.c | 2 +- | |
e8242a6d | 4805 | fs/ext4/resize.c | 16 +- |
6090327c PK |
4806 | fs/ext4/super.c | 4 +- |
4807 | fs/ext4/xattr.c | 5 +- | |
4808 | fs/fhandle.c | 3 +- | |
4809 | fs/file.c | 4 +- | |
4810 | fs/fs_struct.c | 8 +- | |
4811 | fs/fscache/cookie.c | 40 +- | |
afe359a8 | 4812 | fs/fscache/internal.h | 202 +- |
6090327c | 4813 | fs/fscache/object.c | 26 +- |
afe359a8 | 4814 | fs/fscache/operation.c | 38 +- |
6090327c | 4815 | fs/fscache/page.c | 110 +- |
afe359a8 | 4816 | fs/fscache/stats.c | 348 +- |
6090327c PK |
4817 | fs/fuse/cuse.c | 10 +- |
4818 | fs/fuse/dev.c | 4 +- | |
e8242a6d PK |
4819 | fs/gfs2/glock.c | 22 +- |
4820 | fs/gfs2/glops.c | 4 +- | |
4821 | fs/gfs2/quota.c | 6 +- | |
6090327c PK |
4822 | fs/hugetlbfs/inode.c | 13 +- |
4823 | fs/inode.c | 4 +- | |
4824 | fs/jffs2/erase.c | 3 +- | |
4825 | fs/jffs2/wbuf.c | 3 +- | |
4826 | fs/jfs/super.c | 2 +- | |
4827 | fs/kernfs/dir.c | 2 +- | |
e8242a6d | 4828 | fs/kernfs/file.c | 20 +- |
afe359a8 | 4829 | fs/libfs.c | 10 +- |
6090327c | 4830 | fs/lockd/clntproc.c | 4 +- |
afe359a8 | 4831 | fs/namei.c | 16 +- |
6090327c PK |
4832 | fs/namespace.c | 16 +- |
4833 | fs/nfs/callback_xdr.c | 2 +- | |
4834 | fs/nfs/inode.c | 6 +- | |
4835 | fs/nfsd/nfs4proc.c | 2 +- | |
4836 | fs/nfsd/nfs4xdr.c | 2 +- | |
a8b227b4 | 4837 | fs/nfsd/nfscache.c | 11 +- |
6090327c | 4838 | fs/nfsd/vfs.c | 6 +- |
a8b227b4 | 4839 | fs/nls/nls_base.c | 26 +- |
6090327c PK |
4840 | fs/nls/nls_euc-jp.c | 6 +- |
4841 | fs/nls/nls_koi8-ru.c | 6 +- | |
4842 | fs/notify/fanotify/fanotify_user.c | 4 +- | |
4843 | fs/notify/notification.c | 4 +- | |
4844 | fs/ntfs/dir.c | 2 +- | |
6090327c PK |
4845 | fs/ntfs/super.c | 6 +- |
4846 | fs/ocfs2/localalloc.c | 2 +- | |
4847 | fs/ocfs2/ocfs2.h | 10 +- | |
4848 | fs/ocfs2/suballoc.c | 12 +- | |
4849 | fs/ocfs2/super.c | 20 +- | |
da1216b9 | 4850 | fs/pipe.c | 72 +- |
6090327c PK |
4851 | fs/posix_acl.c | 4 +- |
4852 | fs/proc/array.c | 20 + | |
4853 | fs/proc/base.c | 4 +- | |
e8242a6d | 4854 | fs/proc/kcore.c | 34 +- |
6090327c PK |
4855 | fs/proc/meminfo.c | 2 +- |
4856 | fs/proc/nommu.c | 2 +- | |
afe359a8 | 4857 | fs/proc/proc_sysctl.c | 26 +- |
6090327c PK |
4858 | fs/proc/task_mmu.c | 39 +- |
4859 | fs/proc/task_nommu.c | 4 +- | |
4860 | fs/proc/vmcore.c | 16 +- | |
4861 | fs/qnx6/qnx6.h | 4 +- | |
4862 | fs/quota/netlink.c | 4 +- | |
4863 | fs/read_write.c | 2 +- | |
4864 | fs/reiserfs/do_balan.c | 2 +- | |
4865 | fs/reiserfs/procfs.c | 2 +- | |
4866 | fs/reiserfs/reiserfs.h | 4 +- | |
4867 | fs/seq_file.c | 4 +- | |
4868 | fs/splice.c | 43 +- | |
da1216b9 | 4869 | fs/squashfs/xattr.c | 12 +- |
6090327c | 4870 | fs/sysv/sysv.h | 2 +- |
afe359a8 | 4871 | fs/tracefs/inode.c | 8 +- |
6090327c PK |
4872 | fs/ubifs/io.c | 2 +- |
4873 | fs/udf/misc.c | 2 +- | |
4874 | fs/ufs/swab.h | 4 +- | |
4875 | fs/xattr.c | 21 + | |
a8b227b4 | 4876 | fs/xfs/libxfs/xfs_bmap.c | 2 +- |
6090327c PK |
4877 | fs/xfs/xfs_dir2_readdir.c | 7 +- |
4878 | fs/xfs/xfs_ioctl.c | 2 +- | |
0986ccbe | 4879 | fs/xfs/xfs_linux.h | 4 +- |
6090327c | 4880 | include/asm-generic/4level-fixup.h | 2 + |
0986ccbe | 4881 | include/asm-generic/atomic-long.h | 214 +- |
6090327c PK |
4882 | include/asm-generic/atomic64.h | 12 + |
4883 | include/asm-generic/barrier.h | 2 +- | |
4884 | include/asm-generic/bitops/__fls.h | 2 +- | |
4885 | include/asm-generic/bitops/fls.h | 2 +- | |
4886 | include/asm-generic/bitops/fls64.h | 4 +- | |
da1216b9 | 4887 | include/asm-generic/bug.h | 6 +- |
6090327c PK |
4888 | include/asm-generic/cache.h | 4 +- |
4889 | include/asm-generic/emergency-restart.h | 2 +- | |
4890 | include/asm-generic/kmap_types.h | 4 +- | |
4891 | include/asm-generic/local.h | 13 + | |
4892 | include/asm-generic/pgtable-nopmd.h | 18 +- | |
4893 | include/asm-generic/pgtable-nopud.h | 15 +- | |
4894 | include/asm-generic/pgtable.h | 16 + | |
4895 | include/asm-generic/uaccess.h | 16 + | |
da1216b9 | 4896 | include/asm-generic/vmlinux.lds.h | 13 +- |
6090327c PK |
4897 | include/crypto/algapi.h | 2 +- |
4898 | include/drm/drmP.h | 16 +- | |
4899 | include/drm/drm_crtc_helper.h | 2 +- | |
afe359a8 | 4900 | include/drm/drm_mm.h | 2 +- |
6090327c | 4901 | include/drm/i915_pciids.h | 2 +- |
afe359a8 | 4902 | include/drm/intel-gtt.h | 4 +- |
6090327c PK |
4903 | include/drm/ttm/ttm_memory.h | 2 +- |
4904 | include/drm/ttm/ttm_page_alloc.h | 1 + | |
4905 | include/keys/asymmetric-subtype.h | 2 +- | |
4906 | include/linux/atmdev.h | 4 +- | |
8cf17962 | 4907 | include/linux/atomic.h | 2 +- |
6090327c PK |
4908 | include/linux/audit.h | 2 +- |
4909 | include/linux/binfmts.h | 3 +- | |
8cf17962 | 4910 | include/linux/bitmap.h | 2 +- |
afe359a8 | 4911 | include/linux/bitops.h | 8 +- |
6090327c PK |
4912 | include/linux/blkdev.h | 2 +- |
4913 | include/linux/blktrace_api.h | 2 +- | |
4914 | include/linux/cache.h | 8 + | |
4915 | include/linux/cdrom.h | 1 - | |
4916 | include/linux/cleancache.h | 2 +- | |
4917 | include/linux/clk-provider.h | 1 + | |
da1216b9 | 4918 | include/linux/compat.h | 6 +- |
afe359a8 PK |
4919 | include/linux/compiler-gcc.h | 28 +- |
4920 | include/linux/compiler.h | 95 +- | |
6090327c PK |
4921 | include/linux/completion.h | 12 +- |
4922 | include/linux/configfs.h | 2 +- | |
4923 | include/linux/cpufreq.h | 3 +- | |
4924 | include/linux/cpuidle.h | 5 +- | |
8cf17962 | 4925 | include/linux/cpumask.h | 14 +- |
afe359a8 | 4926 | include/linux/crypto.h | 4 +- |
6090327c | 4927 | include/linux/ctype.h | 2 +- |
e8242a6d | 4928 | include/linux/dcache.h | 4 +- |
6090327c PK |
4929 | include/linux/decompress/mm.h | 2 +- |
4930 | include/linux/devfreq.h | 2 +- | |
4931 | include/linux/device.h | 7 +- | |
4932 | include/linux/dma-mapping.h | 2 +- | |
6090327c PK |
4933 | include/linux/efi.h | 1 + |
4934 | include/linux/elf.h | 2 + | |
4935 | include/linux/err.h | 4 +- | |
4936 | include/linux/extcon.h | 2 +- | |
e8242a6d | 4937 | include/linux/fb.h | 3 +- |
6090327c | 4938 | include/linux/fdtable.h | 2 +- |
da1216b9 | 4939 | include/linux/fs.h | 5 +- |
6090327c | 4940 | include/linux/fs_struct.h | 2 +- |
afe359a8 | 4941 | include/linux/fscache-cache.h | 2 +- |
6090327c PK |
4942 | include/linux/fscache.h | 2 +- |
4943 | include/linux/fsnotify.h | 2 +- | |
4944 | include/linux/genhd.h | 4 +- | |
4945 | include/linux/genl_magic_func.h | 2 +- | |
4946 | include/linux/gfp.h | 12 +- | |
6090327c PK |
4947 | include/linux/highmem.h | 12 + |
4948 | include/linux/hwmon-sysfs.h | 6 +- | |
4949 | include/linux/i2c.h | 1 + | |
6090327c PK |
4950 | include/linux/if_pppox.h | 2 +- |
4951 | include/linux/init.h | 12 +- | |
4952 | include/linux/init_task.h | 7 + | |
4953 | include/linux/interrupt.h | 6 +- | |
4954 | include/linux/iommu.h | 2 +- | |
4955 | include/linux/ioport.h | 2 +- | |
afe359a8 PK |
4956 | include/linux/ipc.h | 2 +- |
4957 | include/linux/irq.h | 5 +- | |
8cf17962 | 4958 | include/linux/irqdesc.h | 2 +- |
afe359a8 PK |
4959 | include/linux/irqdomain.h | 3 + |
4960 | include/linux/jiffies.h | 30 +- | |
8cf17962 | 4961 | include/linux/kernel.h | 2 +- |
6090327c PK |
4962 | include/linux/key-type.h | 2 +- |
4963 | include/linux/kgdb.h | 6 +- | |
8cf17962 | 4964 | include/linux/kmemleak.h | 4 +- |
6090327c PK |
4965 | include/linux/kobject.h | 3 +- |
4966 | include/linux/kobject_ns.h | 2 +- | |
4967 | include/linux/kref.h | 2 +- | |
4968 | include/linux/kvm_host.h | 4 +- | |
4969 | include/linux/libata.h | 2 +- | |
4970 | include/linux/linkage.h | 1 + | |
4971 | include/linux/list.h | 15 + | |
e8242a6d | 4972 | include/linux/lockref.h | 26 +- |
6090327c PK |
4973 | include/linux/math64.h | 10 +- |
4974 | include/linux/mempolicy.h | 7 + | |
0986ccbe | 4975 | include/linux/mm.h | 104 +- |
6090327c PK |
4976 | include/linux/mm_types.h | 20 + |
4977 | include/linux/mmiotrace.h | 4 +- | |
4978 | include/linux/mmzone.h | 2 +- | |
4979 | include/linux/mod_devicetable.h | 4 +- | |
afe359a8 | 4980 | include/linux/module.h | 69 +- |
6090327c PK |
4981 | include/linux/moduleloader.h | 16 + |
4982 | include/linux/moduleparam.h | 4 +- | |
6090327c PK |
4983 | include/linux/net.h | 2 +- |
4984 | include/linux/netdevice.h | 7 +- | |
4985 | include/linux/netfilter.h | 2 +- | |
4986 | include/linux/netfilter/nfnetlink.h | 2 +- | |
a8b227b4 | 4987 | include/linux/nls.h | 4 +- |
6090327c PK |
4988 | include/linux/notifier.h | 3 +- |
4989 | include/linux/oprofile.h | 4 +- | |
4990 | include/linux/padata.h | 2 +- | |
4991 | include/linux/pci_hotplug.h | 3 +- | |
8cf17962 | 4992 | include/linux/percpu.h | 2 +- |
da1216b9 | 4993 | include/linux/perf_event.h | 12 +- |
6090327c PK |
4994 | include/linux/pipe_fs_i.h | 8 +- |
4995 | include/linux/pm.h | 1 + | |
4996 | include/linux/pm_domain.h | 4 +- | |
4997 | include/linux/pm_runtime.h | 2 +- | |
4998 | include/linux/pnp.h | 2 +- | |
4999 | include/linux/poison.h | 4 +- | |
5000 | include/linux/power/smartreflex.h | 2 +- | |
5001 | include/linux/ppp-comp.h | 2 +- | |
5002 | include/linux/preempt.h | 21 + | |
5003 | include/linux/proc_ns.h | 2 +- | |
5004 | include/linux/quota.h | 2 +- | |
5005 | include/linux/random.h | 23 +- | |
afe359a8 | 5006 | include/linux/rculist.h | 16 + |
6090327c PK |
5007 | include/linux/reboot.h | 14 +- |
5008 | include/linux/regset.h | 3 +- | |
5009 | include/linux/relay.h | 2 +- | |
5010 | include/linux/rio.h | 2 +- | |
5011 | include/linux/rmap.h | 4 +- | |
afe359a8 | 5012 | include/linux/sched.h | 74 +- |
6090327c | 5013 | include/linux/sched/sysctl.h | 1 + |
6090327c PK |
5014 | include/linux/semaphore.h | 2 +- |
5015 | include/linux/seq_file.h | 1 + | |
5016 | include/linux/signal.h | 2 +- | |
8cf17962 | 5017 | include/linux/skbuff.h | 10 +- |
da1216b9 | 5018 | include/linux/slab.h | 47 +- |
6090327c PK |
5019 | include/linux/slab_def.h | 14 +- |
5020 | include/linux/slub_def.h | 2 +- | |
5021 | include/linux/smp.h | 2 + | |
5022 | include/linux/sock_diag.h | 2 +- | |
5023 | include/linux/sonet.h | 2 +- | |
5024 | include/linux/sunrpc/addr.h | 8 +- | |
5025 | include/linux/sunrpc/clnt.h | 2 +- | |
5026 | include/linux/sunrpc/svc.h | 2 +- | |
5027 | include/linux/sunrpc/svc_rdma.h | 18 +- | |
5028 | include/linux/sunrpc/svcauth.h | 2 +- | |
5029 | include/linux/swiotlb.h | 3 +- | |
da1216b9 | 5030 | include/linux/syscalls.h | 21 +- |
6090327c | 5031 | include/linux/syscore_ops.h | 2 +- |
a8b227b4 | 5032 | include/linux/sysctl.h | 3 +- |
6090327c PK |
5033 | include/linux/sysfs.h | 9 +- |
5034 | include/linux/sysrq.h | 3 +- | |
afe359a8 | 5035 | include/linux/tcp.h | 14 +- |
6090327c PK |
5036 | include/linux/thread_info.h | 7 + |
5037 | include/linux/tty.h | 4 +- | |
5038 | include/linux/tty_driver.h | 2 +- | |
5039 | include/linux/tty_ldisc.h | 2 +- | |
5040 | include/linux/types.h | 16 + | |
5041 | include/linux/uaccess.h | 6 +- | |
0986ccbe | 5042 | include/linux/uio_driver.h | 2 +- |
6090327c | 5043 | include/linux/unaligned/access_ok.h | 24 +- |
afe359a8 PK |
5044 | include/linux/usb.h | 6 +- |
5045 | include/linux/usb/hcd.h | 1 + | |
6090327c PK |
5046 | include/linux/usb/renesas_usbhs.h | 2 +- |
5047 | include/linux/vermagic.h | 21 +- | |
5048 | include/linux/vga_switcheroo.h | 8 +- | |
5049 | include/linux/vmalloc.h | 7 +- | |
5050 | include/linux/vmstat.h | 24 +- | |
5051 | include/linux/xattr.h | 5 +- | |
5052 | include/linux/zlib.h | 3 +- | |
5053 | include/media/v4l2-dev.h | 2 +- | |
5054 | include/media/v4l2-device.h | 2 +- | |
5055 | include/net/9p/transport.h | 2 +- | |
5056 | include/net/bluetooth/l2cap.h | 2 +- | |
8cf17962 | 5057 | include/net/bonding.h | 2 +- |
6090327c PK |
5058 | include/net/caif/cfctrl.h | 6 +- |
5059 | include/net/flow.h | 2 +- | |
5060 | include/net/genetlink.h | 2 +- | |
5061 | include/net/gro_cells.h | 2 +- | |
5062 | include/net/inet_connection_sock.h | 2 +- | |
afe359a8 | 5063 | include/net/inet_sock.h | 2 +- |
6090327c PK |
5064 | include/net/inetpeer.h | 2 +- |
5065 | include/net/ip_fib.h | 2 +- | |
5066 | include/net/ip_vs.h | 8 +- | |
5067 | include/net/irda/ircomm_tty.h | 1 + | |
5068 | include/net/iucv/af_iucv.h | 2 +- | |
5069 | include/net/llc_c_ac.h | 2 +- | |
5070 | include/net/llc_c_ev.h | 4 +- | |
5071 | include/net/llc_c_st.h | 2 +- | |
5072 | include/net/llc_s_ac.h | 2 +- | |
5073 | include/net/llc_s_st.h | 2 +- | |
5074 | include/net/mac80211.h | 2 +- | |
5075 | include/net/neighbour.h | 2 +- | |
afe359a8 | 5076 | include/net/net_namespace.h | 18 +- |
6090327c PK |
5077 | include/net/netlink.h | 2 +- |
5078 | include/net/netns/conntrack.h | 6 +- | |
5079 | include/net/netns/ipv4.h | 4 +- | |
5080 | include/net/netns/ipv6.h | 4 +- | |
5081 | include/net/netns/xfrm.h | 2 +- | |
5082 | include/net/ping.h | 2 +- | |
5083 | include/net/protocol.h | 4 +- | |
5084 | include/net/rtnetlink.h | 2 +- | |
5085 | include/net/sctp/checksum.h | 4 +- | |
5086 | include/net/sctp/sm.h | 4 +- | |
5087 | include/net/sctp/structs.h | 2 +- | |
afe359a8 | 5088 | include/net/sock.h | 12 +- |
6090327c PK |
5089 | include/net/tcp.h | 8 +- |
5090 | include/net/xfrm.h | 13 +- | |
5091 | include/rdma/iw_cm.h | 2 +- | |
5092 | include/scsi/libfc.h | 3 +- | |
5093 | include/scsi/scsi_device.h | 6 +- | |
da1216b9 | 5094 | include/scsi/scsi_driver.h | 2 +- |
6090327c | 5095 | include/scsi/scsi_transport_fc.h | 3 +- |
afe359a8 | 5096 | include/scsi/sg.h | 2 +- |
6090327c PK |
5097 | include/sound/compress_driver.h | 2 +- |
5098 | include/sound/soc.h | 4 +- | |
5099 | include/target/target_core_base.h | 2 +- | |
5100 | include/trace/events/irq.h | 4 +- | |
5101 | include/uapi/linux/a.out.h | 8 + | |
5102 | include/uapi/linux/bcache.h | 5 +- | |
5103 | include/uapi/linux/byteorder/little_endian.h | 28 +- | |
afe359a8 | 5104 | include/uapi/linux/connector.h | 2 +- |
6090327c PK |
5105 | include/uapi/linux/elf.h | 28 + |
5106 | include/uapi/linux/screen_info.h | 3 +- | |
5107 | include/uapi/linux/swab.h | 6 +- | |
6090327c PK |
5108 | include/uapi/linux/xattr.h | 4 + |
5109 | include/video/udlfb.h | 8 +- | |
5110 | include/video/uvesafb.h | 1 + | |
5111 | init/Kconfig | 2 +- | |
5112 | init/Makefile | 3 + | |
5113 | init/do_mounts.c | 14 +- | |
5114 | init/do_mounts.h | 8 +- | |
5115 | init/do_mounts_initrd.c | 30 +- | |
5116 | init/do_mounts_md.c | 6 +- | |
5117 | init/init_task.c | 4 + | |
a8b227b4 | 5118 | init/initramfs.c | 38 +- |
afe359a8 | 5119 | init/main.c | 30 +- |
da1216b9 | 5120 | ipc/compat.c | 4 +- |
8cf17962 | 5121 | ipc/ipc_sysctl.c | 8 +- |
6090327c | 5122 | ipc/mq_sysctl.c | 4 +- |
da1216b9 | 5123 | ipc/sem.c | 4 +- |
6090327c | 5124 | ipc/shm.c | 6 + |
6090327c PK |
5125 | kernel/audit.c | 8 +- |
5126 | kernel/auditsc.c | 4 +- | |
8cf17962 | 5127 | kernel/bpf/core.c | 7 +- |
6090327c PK |
5128 | kernel/capability.c | 3 + |
5129 | kernel/compat.c | 38 +- | |
5130 | kernel/debug/debug_core.c | 16 +- | |
5131 | kernel/debug/kdb/kdb_main.c | 4 +- | |
da1216b9 | 5132 | kernel/events/core.c | 26 +- |
6090327c PK |
5133 | kernel/events/internal.h | 10 +- |
5134 | kernel/events/uprobes.c | 2 +- | |
5135 | kernel/exit.c | 2 +- | |
afe359a8 | 5136 | kernel/fork.c | 165 +- |
6090327c PK |
5137 | kernel/futex.c | 11 +- |
5138 | kernel/futex_compat.c | 2 +- | |
5139 | kernel/gcov/base.c | 7 +- | |
8cf17962 | 5140 | kernel/irq/manage.c | 2 +- |
afe359a8 | 5141 | kernel/irq/msi.c | 20 +- |
8cf17962 | 5142 | kernel/irq/spurious.c | 2 +- |
6090327c | 5143 | kernel/jump_label.c | 5 + |
0986ccbe | 5144 | kernel/kallsyms.c | 37 +- |
6090327c PK |
5145 | kernel/kexec.c | 3 +- |
5146 | kernel/kmod.c | 8 +- | |
5147 | kernel/kprobes.c | 4 +- | |
5148 | kernel/ksysfs.c | 2 +- | |
5149 | kernel/locking/lockdep.c | 7 +- | |
6090327c PK |
5150 | kernel/locking/mutex-debug.c | 12 +- |
5151 | kernel/locking/mutex-debug.h | 4 +- | |
5152 | kernel/locking/mutex.c | 6 +- | |
5153 | kernel/locking/rtmutex-tester.c | 24 +- | |
afe359a8 | 5154 | kernel/module.c | 422 +- |
6090327c PK |
5155 | kernel/notifier.c | 17 +- |
5156 | kernel/padata.c | 4 +- | |
5157 | kernel/panic.c | 5 +- | |
5158 | kernel/pid.c | 2 +- | |
5159 | kernel/pid_namespace.c | 2 +- | |
6090327c PK |
5160 | kernel/power/process.c | 12 +- |
5161 | kernel/profile.c | 14 +- | |
5162 | kernel/ptrace.c | 8 +- | |
0986ccbe | 5163 | kernel/rcu/rcutorture.c | 60 +- |
6090327c | 5164 | kernel/rcu/tiny.c | 4 +- |
afe359a8 | 5165 | kernel/rcu/tree.c | 66 +- |
6090327c | 5166 | kernel/rcu/tree.h | 26 +- |
afe359a8 | 5167 | kernel/rcu/tree_plugin.h | 14 +- |
6090327c | 5168 | kernel/rcu/tree_trace.c | 22 +- |
6090327c PK |
5169 | kernel/sched/auto_group.c | 4 +- |
5170 | kernel/sched/completion.c | 6 +- | |
5171 | kernel/sched/core.c | 45 +- | |
afe359a8 | 5172 | kernel/sched/fair.c | 2 +- |
6090327c PK |
5173 | kernel/sched/sched.h | 2 +- |
5174 | kernel/signal.c | 12 +- | |
5175 | kernel/smpboot.c | 4 +- | |
5176 | kernel/softirq.c | 12 +- | |
5177 | kernel/sys.c | 10 +- | |
5178 | kernel/sysctl.c | 34 +- | |
5179 | kernel/time/alarmtimer.c | 2 +- | |
a8b227b4 PK |
5180 | kernel/time/posix-cpu-timers.c | 4 +- |
5181 | kernel/time/posix-timers.c | 24 +- | |
5182 | kernel/time/timer.c | 4 +- | |
6090327c | 5183 | kernel/time/timer_stats.c | 10 +- |
6090327c | 5184 | kernel/trace/blktrace.c | 6 +- |
0986ccbe | 5185 | kernel/trace/ftrace.c | 15 +- |
e8242a6d | 5186 | kernel/trace/ring_buffer.c | 96 +- |
6090327c PK |
5187 | kernel/trace/trace.c | 2 +- |
5188 | kernel/trace/trace.h | 2 +- | |
5189 | kernel/trace/trace_clock.c | 4 +- | |
5190 | kernel/trace/trace_events.c | 1 - | |
0986ccbe | 5191 | kernel/trace/trace_functions_graph.c | 4 +- |
6090327c | 5192 | kernel/trace/trace_mmiotrace.c | 8 +- |
a8b227b4 PK |
5193 | kernel/trace/trace_output.c | 10 +- |
5194 | kernel/trace/trace_seq.c | 2 +- | |
6090327c PK |
5195 | kernel/trace/trace_stack.c | 2 +- |
5196 | kernel/user_namespace.c | 2 +- | |
5197 | kernel/utsname_sysctl.c | 2 +- | |
5198 | kernel/watchdog.c | 2 +- | |
afe359a8 | 5199 | kernel/workqueue.c | 4 +- |
6090327c PK |
5200 | lib/Kconfig.debug | 8 +- |
5201 | lib/Makefile | 2 +- | |
5202 | lib/average.c | 2 +- | |
8cf17962 | 5203 | lib/bitmap.c | 10 +- |
6090327c PK |
5204 | lib/bug.c | 2 + |
5205 | lib/debugobjects.c | 2 +- | |
da1216b9 PK |
5206 | lib/decompress_bunzip2.c | 3 +- |
5207 | lib/decompress_unlzma.c | 4 +- | |
6090327c PK |
5208 | lib/div64.c | 4 +- |
5209 | lib/dma-debug.c | 4 +- | |
6090327c PK |
5210 | lib/inflate.c | 2 +- |
5211 | lib/ioremap.c | 4 +- | |
5212 | lib/kobject.c | 4 +- | |
5213 | lib/list_debug.c | 126 +- | |
e8242a6d | 5214 | lib/lockref.c | 44 +- |
6090327c PK |
5215 | lib/percpu-refcount.c | 2 +- |
5216 | lib/radix-tree.c | 2 +- | |
5217 | lib/random32.c | 2 +- | |
5218 | lib/show_mem.c | 2 +- | |
5219 | lib/strncpy_from_user.c | 2 +- | |
5220 | lib/strnlen_user.c | 2 +- | |
5221 | lib/swiotlb.c | 2 +- | |
5222 | lib/usercopy.c | 6 + | |
5223 | lib/vsprintf.c | 12 +- | |
5224 | mm/Kconfig | 6 +- | |
5225 | mm/backing-dev.c | 4 +- | |
5226 | mm/filemap.c | 2 +- | |
6090327c PK |
5227 | mm/gup.c | 13 +- |
5228 | mm/highmem.c | 7 +- | |
5229 | mm/hugetlb.c | 70 +- | |
5230 | mm/internal.h | 3 +- | |
6090327c | 5231 | mm/maccess.c | 4 +- |
e8242a6d | 5232 | mm/madvise.c | 37 + |
afe359a8 PK |
5233 | mm/memory-failure.c | 34 +- |
5234 | mm/memory.c | 425 +- | |
6090327c PK |
5235 | mm/mempolicy.c | 25 + |
5236 | mm/mlock.c | 15 +- | |
e8242a6d | 5237 | mm/mm_init.c | 2 +- |
da1216b9 | 5238 | mm/mmap.c | 582 +- |
0986ccbe | 5239 | mm/mprotect.c | 137 +- |
6090327c PK |
5240 | mm/mremap.c | 44 +- |
5241 | mm/nommu.c | 21 +- | |
5242 | mm/page-writeback.c | 2 +- | |
afe359a8 | 5243 | mm/page_alloc.c | 49 +- |
6090327c PK |
5244 | mm/percpu.c | 2 +- |
5245 | mm/process_vm_access.c | 14 +- | |
8cf17962 | 5246 | mm/rmap.c | 45 +- |
6090327c | 5247 | mm/shmem.c | 19 +- |
8cf17962 | 5248 | mm/slab.c | 109 +- |
0986ccbe | 5249 | mm/slab.h | 22 +- |
8cf17962 PK |
5250 | mm/slab_common.c | 86 +- |
5251 | mm/slob.c | 218 +- | |
afe359a8 | 5252 | mm/slub.c | 102 +- |
6090327c PK |
5253 | mm/sparse-vmemmap.c | 4 +- |
5254 | mm/sparse.c | 2 +- | |
da1216b9 | 5255 | mm/swap.c | 2 + |
6090327c PK |
5256 | mm/swapfile.c | 12 +- |
5257 | mm/util.c | 6 + | |
e8242a6d | 5258 | mm/vmalloc.c | 112 +- |
6090327c PK |
5259 | mm/vmstat.c | 12 +- |
5260 | net/8021q/vlan.c | 5 +- | |
0986ccbe | 5261 | net/8021q/vlan_netlink.c | 2 +- |
6090327c PK |
5262 | net/9p/mod.c | 4 +- |
5263 | net/9p/trans_fd.c | 2 +- | |
5264 | net/atm/atm_misc.c | 8 +- | |
5265 | net/atm/lec.h | 2 +- | |
5266 | net/atm/proc.c | 6 +- | |
5267 | net/atm/resources.c | 4 +- | |
5268 | net/ax25/sysctl_net_ax25.c | 2 +- | |
5269 | net/batman-adv/bat_iv_ogm.c | 8 +- | |
5270 | net/batman-adv/fragmentation.c | 2 +- | |
0986ccbe | 5271 | net/batman-adv/soft-interface.c | 8 +- |
6090327c PK |
5272 | net/batman-adv/types.h | 6 +- |
5273 | net/bluetooth/hci_sock.c | 2 +- | |
5274 | net/bluetooth/l2cap_core.c | 6 +- | |
5275 | net/bluetooth/l2cap_sock.c | 12 +- | |
5276 | net/bluetooth/rfcomm/sock.c | 4 +- | |
5277 | net/bluetooth/rfcomm/tty.c | 4 +- | |
0986ccbe | 5278 | net/bridge/br_netlink.c | 2 +- |
6090327c PK |
5279 | net/bridge/netfilter/ebtables.c | 6 +- |
5280 | net/caif/cfctrl.c | 11 +- | |
0986ccbe | 5281 | net/caif/chnl_net.c | 2 +- |
6090327c PK |
5282 | net/can/af_can.c | 2 +- |
5283 | net/can/gw.c | 6 +- | |
5284 | net/ceph/messenger.c | 4 +- | |
8cf17962 | 5285 | net/compat.c | 24 +- |
6090327c | 5286 | net/core/datagram.c | 2 +- |
da1216b9 | 5287 | net/core/dev.c | 16 +- |
6090327c | 5288 | net/core/filter.c | 2 +- |
e8242a6d | 5289 | net/core/flow.c | 6 +- |
6090327c PK |
5290 | net/core/neighbour.c | 4 +- |
5291 | net/core/net-sysfs.c | 2 +- | |
5292 | net/core/net_namespace.c | 8 +- | |
5293 | net/core/netpoll.c | 4 +- | |
5294 | net/core/rtnetlink.c | 15 +- | |
5295 | net/core/scm.c | 8 +- | |
5296 | net/core/skbuff.c | 8 +- | |
afe359a8 PK |
5297 | net/core/sock.c | 28 +- |
5298 | net/core/sock_diag.c | 15 +- | |
8cf17962 | 5299 | net/core/sysctl_net_core.c | 22 +- |
6090327c PK |
5300 | net/decnet/af_decnet.c | 1 + |
5301 | net/decnet/sysctl_net_decnet.c | 4 +- | |
afe359a8 | 5302 | net/dsa/dsa.c | 2 +- |
0986ccbe | 5303 | net/hsr/hsr_netlink.c | 2 +- |
e8242a6d PK |
5304 | net/ieee802154/6lowpan/core.c | 2 +- |
5305 | net/ieee802154/6lowpan/reassembly.c | 14 +- | |
0986ccbe | 5306 | net/ipv4/af_inet.c | 2 +- |
6090327c PK |
5307 | net/ipv4/devinet.c | 18 +- |
5308 | net/ipv4/fib_frontend.c | 6 +- | |
5309 | net/ipv4/fib_semantics.c | 2 +- | |
afe359a8 PK |
5310 | net/ipv4/inet_connection_sock.c | 4 +- |
5311 | net/ipv4/inet_timewait_sock.c | 2 +- | |
6090327c PK |
5312 | net/ipv4/inetpeer.c | 2 +- |
5313 | net/ipv4/ip_fragment.c | 15 +- | |
5314 | net/ipv4/ip_gre.c | 6 +- | |
5315 | net/ipv4/ip_sockglue.c | 2 +- | |
5316 | net/ipv4/ip_vti.c | 4 +- | |
5317 | net/ipv4/ipconfig.c | 6 +- | |
5318 | net/ipv4/ipip.c | 4 +- | |
5319 | net/ipv4/netfilter/arp_tables.c | 12 +- | |
5320 | net/ipv4/netfilter/ip_tables.c | 12 +- | |
0986ccbe | 5321 | net/ipv4/ping.c | 14 +- |
6090327c PK |
5322 | net/ipv4/raw.c | 14 +- |
5323 | net/ipv4/route.c | 32 +- | |
5324 | net/ipv4/sysctl_net_ipv4.c | 22 +- | |
afe359a8 | 5325 | net/ipv4/tcp_input.c | 6 +- |
6090327c PK |
5326 | net/ipv4/tcp_probe.c | 2 +- |
5327 | net/ipv4/udp.c | 10 +- | |
5328 | net/ipv4/xfrm4_policy.c | 18 +- | |
da1216b9 | 5329 | net/ipv6/addrconf.c | 16 +- |
6090327c PK |
5330 | net/ipv6/af_inet6.c | 2 +- |
5331 | net/ipv6/datagram.c | 2 +- | |
5332 | net/ipv6/icmp.c | 2 +- | |
0986ccbe | 5333 | net/ipv6/ip6_fib.c | 4 +- |
6090327c PK |
5334 | net/ipv6/ip6_gre.c | 10 +- |
5335 | net/ipv6/ip6_tunnel.c | 4 +- | |
5336 | net/ipv6/ip6_vti.c | 4 +- | |
5337 | net/ipv6/ipv6_sockglue.c | 2 +- | |
5338 | net/ipv6/netfilter/ip6_tables.c | 12 +- | |
5339 | net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +- | |
5340 | net/ipv6/ping.c | 33 +- | |
5341 | net/ipv6/raw.c | 17 +- | |
5342 | net/ipv6/reassembly.c | 13 +- | |
5343 | net/ipv6/route.c | 2 +- | |
5344 | net/ipv6/sit.c | 4 +- | |
5345 | net/ipv6/sysctl_net_ipv6.c | 2 +- | |
5346 | net/ipv6/udp.c | 6 +- | |
afe359a8 | 5347 | net/ipv6/xfrm6_policy.c | 23 +- |
6090327c PK |
5348 | net/irda/ircomm/ircomm_tty.c | 18 +- |
5349 | net/iucv/af_iucv.c | 4 +- | |
5350 | net/iucv/iucv.c | 2 +- | |
5351 | net/key/af_key.c | 4 +- | |
5352 | net/l2tp/l2tp_eth.c | 38 +- | |
e8242a6d PK |
5353 | net/l2tp/l2tp_ip.c | 2 +- |
5354 | net/l2tp/l2tp_ip6.c | 2 +- | |
6090327c PK |
5355 | net/mac80211/cfg.c | 8 +- |
5356 | net/mac80211/ieee80211_i.h | 3 +- | |
afe359a8 | 5357 | net/mac80211/iface.c | 20 +- |
6090327c | 5358 | net/mac80211/main.c | 2 +- |
da1216b9 | 5359 | net/mac80211/pm.c | 4 +- |
6090327c | 5360 | net/mac80211/rate.c | 2 +- |
da1216b9 | 5361 | net/mac80211/sta_info.c | 2 +- |
e8242a6d | 5362 | net/mac80211/util.c | 8 +- |
da1216b9 | 5363 | net/mpls/af_mpls.c | 6 +- |
6090327c PK |
5364 | net/netfilter/ipset/ip_set_core.c | 2 +- |
5365 | net/netfilter/ipvs/ip_vs_conn.c | 6 +- | |
5366 | net/netfilter/ipvs/ip_vs_core.c | 4 +- | |
5367 | net/netfilter/ipvs/ip_vs_ctl.c | 14 +- | |
5368 | net/netfilter/ipvs/ip_vs_lblc.c | 2 +- | |
5369 | net/netfilter/ipvs/ip_vs_lblcr.c | 2 +- | |
5370 | net/netfilter/ipvs/ip_vs_sync.c | 6 +- | |
5371 | net/netfilter/ipvs/ip_vs_xmit.c | 4 +- | |
5372 | net/netfilter/nf_conntrack_acct.c | 2 +- | |
5373 | net/netfilter/nf_conntrack_ecache.c | 2 +- | |
5374 | net/netfilter/nf_conntrack_helper.c | 2 +- | |
5375 | net/netfilter/nf_conntrack_proto.c | 2 +- | |
5376 | net/netfilter/nf_conntrack_standalone.c | 2 +- | |
5377 | net/netfilter/nf_conntrack_timestamp.c | 2 +- | |
5378 | net/netfilter/nf_log.c | 10 +- | |
5379 | net/netfilter/nf_sockopt.c | 4 +- | |
5380 | net/netfilter/nfnetlink_log.c | 4 +- | |
e8242a6d | 5381 | net/netfilter/nft_compat.c | 9 +- |
6090327c PK |
5382 | net/netfilter/xt_statistic.c | 8 +- |
5383 | net/netlink/af_netlink.c | 4 +- | |
0986ccbe PK |
5384 | net/openvswitch/vport-internal_dev.c | 2 +- |
5385 | net/openvswitch/vport.c | 16 +- | |
5386 | net/openvswitch/vport.h | 8 +- | |
da1216b9 | 5387 | net/packet/af_packet.c | 8 +- |
6090327c PK |
5388 | net/phonet/pep.c | 6 +- |
5389 | net/phonet/socket.c | 2 +- | |
5390 | net/phonet/sysctl.c | 2 +- | |
5391 | net/rds/cong.c | 6 +- | |
5392 | net/rds/ib.h | 2 +- | |
5393 | net/rds/ib_cm.c | 2 +- | |
5394 | net/rds/ib_recv.c | 4 +- | |
5395 | net/rds/iw.h | 2 +- | |
5396 | net/rds/iw_cm.c | 2 +- | |
5397 | net/rds/iw_recv.c | 4 +- | |
5398 | net/rds/rds.h | 2 +- | |
5399 | net/rds/tcp.c | 2 +- | |
5400 | net/rds/tcp_send.c | 2 +- | |
5401 | net/rxrpc/af_rxrpc.c | 2 +- | |
5402 | net/rxrpc/ar-ack.c | 14 +- | |
5403 | net/rxrpc/ar-call.c | 2 +- | |
5404 | net/rxrpc/ar-connection.c | 2 +- | |
5405 | net/rxrpc/ar-connevent.c | 2 +- | |
5406 | net/rxrpc/ar-input.c | 4 +- | |
5407 | net/rxrpc/ar-internal.h | 8 +- | |
5408 | net/rxrpc/ar-local.c | 2 +- | |
5409 | net/rxrpc/ar-output.c | 4 +- | |
5410 | net/rxrpc/ar-peer.c | 2 +- | |
5411 | net/rxrpc/ar-proc.c | 4 +- | |
5412 | net/rxrpc/ar-transport.c | 2 +- | |
5413 | net/rxrpc/rxkad.c | 4 +- | |
5414 | net/sched/sch_generic.c | 4 +- | |
5415 | net/sctp/ipv6.c | 6 +- | |
5416 | net/sctp/protocol.c | 10 +- | |
5417 | net/sctp/sm_sideeffect.c | 2 +- | |
5418 | net/sctp/socket.c | 21 +- | |
5419 | net/sctp/sysctl.c | 10 +- | |
8cf17962 | 5420 | net/socket.c | 18 +- |
6090327c PK |
5421 | net/sunrpc/auth_gss/svcauth_gss.c | 4 +- |
5422 | net/sunrpc/clnt.c | 4 +- | |
5423 | net/sunrpc/sched.c | 4 +- | |
5424 | net/sunrpc/svc.c | 4 +- | |
5425 | net/sunrpc/svcauth_unix.c | 4 +- | |
5426 | net/sunrpc/xprtrdma/svc_rdma.c | 38 +- | |
5427 | net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +- | |
5428 | net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +- | |
5429 | net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +- | |
e8242a6d | 5430 | net/tipc/netlink_compat.c | 12 +- |
6090327c | 5431 | net/tipc/subscr.c | 2 +- |
8cf17962 | 5432 | net/unix/af_unix.c | 7 +- |
6090327c PK |
5433 | net/unix/sysctl_net_unix.c | 2 +- |
5434 | net/wireless/wext-core.c | 19 +- | |
5435 | net/xfrm/xfrm_policy.c | 16 +- | |
5436 | net/xfrm/xfrm_state.c | 33 +- | |
5437 | net/xfrm/xfrm_sysctl.c | 2 +- | |
8cf17962 | 5438 | scripts/Kbuild.include | 2 +- |
6090327c PK |
5439 | scripts/Makefile.build | 2 +- |
5440 | scripts/Makefile.clean | 3 +- | |
0986ccbe | 5441 | scripts/Makefile.host | 63 +- |
6090327c | 5442 | scripts/basic/fixdep.c | 12 +- |
afe359a8 PK |
5443 | scripts/dtc/checks.c | 14 +- |
5444 | scripts/dtc/data.c | 6 +- | |
5445 | scripts/dtc/flattree.c | 8 +- | |
5446 | scripts/dtc/livetree.c | 4 +- | |
a8b227b4 | 5447 | scripts/gcc-plugin.sh | 51 + |
6090327c | 5448 | scripts/headers_install.sh | 1 + |
afe359a8 PK |
5449 | scripts/kallsyms.c | 4 +- |
5450 | scripts/kconfig/lkc.h | 5 +- | |
5451 | scripts/kconfig/menu.c | 2 +- | |
5452 | scripts/kconfig/symbol.c | 6 +- | |
6090327c PK |
5453 | scripts/link-vmlinux.sh | 2 +- |
5454 | scripts/mod/file2alias.c | 14 +- | |
5455 | scripts/mod/modpost.c | 25 +- | |
5456 | scripts/mod/modpost.h | 6 +- | |
5457 | scripts/mod/sumversion.c | 2 +- | |
5458 | scripts/module-common.lds | 4 + | |
5459 | scripts/package/builddeb | 1 + | |
5460 | scripts/pnmtologo.c | 6 +- | |
5461 | scripts/sortextable.h | 6 +- | |
a8b227b4 | 5462 | scripts/tags.sh | 2 +- |
afe359a8 | 5463 | security/Kconfig | 691 +- |
6090327c PK |
5464 | security/integrity/ima/ima.h | 4 +- |
5465 | security/integrity/ima/ima_api.c | 2 +- | |
5466 | security/integrity/ima/ima_fs.c | 4 +- | |
5467 | security/integrity/ima/ima_queue.c | 2 +- | |
6090327c | 5468 | security/keys/key.c | 18 +- |
6090327c | 5469 | security/selinux/avc.c | 6 +- |
6090327c | 5470 | security/selinux/include/xfrm.h | 2 +- |
afe359a8 | 5471 | security/yama/yama_lsm.c | 2 +- |
6090327c PK |
5472 | sound/aoa/codecs/onyx.c | 7 +- |
5473 | sound/aoa/codecs/onyx.h | 1 + | |
5474 | sound/core/oss/pcm_oss.c | 18 +- | |
5475 | sound/core/pcm_compat.c | 2 +- | |
5476 | sound/core/pcm_native.c | 4 +- | |
6090327c PK |
5477 | sound/core/sound.c | 2 +- |
5478 | sound/drivers/mts64.c | 14 +- | |
5479 | sound/drivers/opl4/opl4_lib.c | 2 +- | |
5480 | sound/drivers/portman2x4.c | 3 +- | |
5481 | sound/firewire/amdtp.c | 4 +- | |
5482 | sound/firewire/amdtp.h | 4 +- | |
5483 | sound/firewire/isight.c | 10 +- | |
5484 | sound/firewire/scs1x.c | 8 +- | |
5485 | sound/oss/sb_audio.c | 2 +- | |
5486 | sound/oss/swarm_cs4297a.c | 6 +- | |
8cf17962 | 5487 | sound/pci/hda/hda_codec.c | 2 +- |
6090327c PK |
5488 | sound/pci/ymfpci/ymfpci.h | 2 +- |
5489 | sound/pci/ymfpci/ymfpci_main.c | 12 +- | |
8cf17962 | 5490 | sound/soc/soc-ac97.c | 6 +- |
e8242a6d | 5491 | sound/soc/xtensa/xtfpga-i2s.c | 2 +- |
da1216b9 | 5492 | tools/gcc/Makefile | 42 + |
6090327c | 5493 | tools/gcc/checker_plugin.c | 150 + |
e8242a6d | 5494 | tools/gcc/colorize_plugin.c | 215 + |
da1216b9 | 5495 | tools/gcc/constify_plugin.c | 564 + |
afe359a8 | 5496 | tools/gcc/gcc-common.h | 790 + |
da1216b9 | 5497 | tools/gcc/initify_plugin.c | 450 + |
e8242a6d | 5498 | tools/gcc/kallocstat_plugin.c | 188 + |
afe359a8 PK |
5499 | tools/gcc/kernexec_plugin.c | 551 + |
5500 | tools/gcc/latent_entropy_plugin.c | 470 + | |
5501 | tools/gcc/size_overflow_plugin/.gitignore | 2 + | |
5502 | tools/gcc/size_overflow_plugin/Makefile | 26 + | |
5503 | .../disable_size_overflow_hash.data |11008 ++++++++++++++ | |
5504 | .../generate_size_overflow_hash.sh | 103 + | |
e8242a6d | 5505 | .../insert_size_overflow_asm.c | 409 + |
afe359a8 | 5506 | .../size_overflow_plugin/intentional_overflow.c | 980 ++ |
8cf17962 | 5507 | .../size_overflow_plugin/remove_unnecessary_dup.c | 137 + |
afe359a8 PK |
5508 | tools/gcc/size_overflow_plugin/size_overflow.h | 329 + |
5509 | .../gcc/size_overflow_plugin/size_overflow_debug.c | 192 + | |
5510 | .../size_overflow_plugin/size_overflow_hash.data |15719 ++++++++++++++++++++ | |
6090327c | 5511 | .../size_overflow_hash_aux.data | 92 + |
afe359a8 PK |
5512 | tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1373 ++ |
5513 | .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 + | |
5514 | .../size_overflow_plugin/size_overflow_plugin.c | 318 + | |
5515 | .../size_overflow_plugin_hash.c | 353 + | |
5516 | .../size_overflow_plugin/size_overflow_transform.c | 576 + | |
5517 | .../size_overflow_transform_core.c | 962 ++ | |
5518 | tools/gcc/stackleak_plugin.c | 436 + | |
e8242a6d | 5519 | tools/gcc/structleak_plugin.c | 287 + |
6090327c PK |
5520 | tools/include/linux/compiler.h | 8 + |
5521 | tools/lib/api/Makefile | 2 +- | |
5522 | tools/perf/util/include/asm/alternative-asm.h | 3 + | |
5523 | tools/virtio/linux/uaccess.h | 2 +- | |
5524 | virt/kvm/kvm_main.c | 44 +- | |
afe359a8 | 5525 | 1963 files changed, 60342 insertions(+), 8946 deletions(-) |