]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blob - test/changelog-test.txt
39e5710a6cb9b4397a418ce2d782fe779a520f05
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
1 commit ae14b26dc8becf26b63cbcbe1ff865ee332699a6
2 Merge: 9d9a962 0e82a4c
3 Author: Brad Spengler <spender@grsecurity.net>
4 Date: Wed Jun 29 21:59:37 2016 -0400
5
6 Merge branch 'pax-test' into grsec-test
7
8 commit 0e82a4c62fbaea6bb193c8aa0bd9968325d4f28f
9 Author: Brad Spengler <spender@grsecurity.net>
10 Date: Wed Jun 29 21:58:53 2016 -0400
11
12 Backport from pax-linux-4.6.3-test9.patch:
13 - fixed a compile error with the brcmnand driver under CONSTIFY, reported by blake and spender
14 - fixed a few sections on constified pernet_operations objects
15
16 drivers/mtd/nand/brcmnand/brcmnand.h | 2 +-
17 drivers/net/loopback.c | 2 +-
18 fs/proc/proc_net.c | 2 +-
19 include/linux/netdevice.h | 2 +-
20 kernel/audit.c | 2 +-
21 net/core/dev.c | 4 ++--
22 net/core/net-procfs.c | 4 ++--
23 net/core/net_namespace.c | 2 +-
24 net/core/sock.c | 2 +-
25 net/ipv4/af_inet.c | 4 ++--
26 net/ipv4/devinet.c | 2 +-
27 net/ipv4/icmp.c | 2 +-
28 net/ipv4/proc.c | 2 +-
29 net/ipv4/raw.c | 2 +-
30 net/ipv4/route.c | 8 ++++----
31 net/ipv4/sysctl_net_ipv4.c | 2 +-
32 net/ipv4/tcp_ipv4.c | 2 +-
33 net/ipv4/tcp_metrics.c | 2 +-
34 net/ipv4/xfrm4_policy.c | 2 +-
35 net/netlink/af_netlink.c | 2 +-
36 net/xfrm/xfrm_policy.c | 2 +-
37 scripts/gcc-plugins/gcc-common.h | 4 ++--
38 22 files changed, 29 insertions(+), 29 deletions(-)
39
40 commit 9d9a962d41feb6c669e922dc745274d6837e65a0
41 Author: Brad Spengler <spender@grsecurity.net>
42 Date: Wed Jun 29 09:37:24 2016 -0400
43
44 Fix section conflict
45
46 drivers/hwmon/dell-smm-hwmon.c | 2 +-
47 1 file changed, 1 insertion(+), 1 deletion(-)
48
49 commit da933a642cfedfd5c8aeea6b639b7c4281c09ac0
50 Merge: 86572f86 cf76181
51 Author: Brad Spengler <spender@grsecurity.net>
52 Date: Wed Jun 29 09:23:24 2016 -0400
53
54 Merge branch 'pax-test' into grsec-test
55
56 commit cf761817d0edbf2b54534346ad3db500202c9f78
57 Author: Brad Spengler <spender@grsecurity.net>
58 Date: Wed Jun 29 09:22:59 2016 -0400
59
60 Update to pax-linux-4.5.7-test19.patch:
61 - fixed constify compile regression that triggered on aliases of certain constified variables, reported by Yves-Alexis Perez <corsac@corsac.net>
62
63 drivers/clk/socfpga/clk-gate-a10.c | 2 +-
64 drivers/clk/socfpga/clk-pll-a10.c | 2 +-
65 drivers/hwmon/dell-smm-hwmon.c | 2 +-
66 scripts/gcc-plugins/constify_plugin.c | 11 ++++++++++-
67 scripts/gcc-plugins/gcc-common.h | 1 +
68 5 files changed, 14 insertions(+), 4 deletions(-)
69
70 commit 86572f86f379b0e6e22bf5dacb327ed0f4b43fbf
71 Author: Brad Spengler <spender@grsecurity.net>
72 Date: Tue Jun 28 21:29:02 2016 -0400
73
74 Fix section conflict caught by recent constify plugin improvements
75
76 drivers/hwmon/dell-smm-hwmon.c | 2 +-
77 1 file changed, 1 insertion(+), 1 deletion(-)
78
79 commit f6702b62ac3f7b94968ccebbfef7b33d16752926
80 Author: Brad Spengler <spender@grsecurity.net>
81 Date: Tue Jun 28 20:55:33 2016 -0400
82
83 Mark some ARM _ops __read_only for consistency
84
85 drivers/clk/socfpga/clk-gate-a10.c | 2 +-
86 drivers/clk/socfpga/clk-pll-a10.c | 2 +-
87 2 files changed, 2 insertions(+), 2 deletions(-)
88
89 commit 4766cd23999675173175ff7563bdf2c785ecb9de
90 Merge: a256990 791e52d
91 Author: Brad Spengler <spender@grsecurity.net>
92 Date: Tue Jun 28 20:52:20 2016 -0400
93
94 Merge branch 'pax-test' into grsec-test
95
96 commit 791e52d5d1ef361e6f2fdf2dc3cf51ca712788b2
97 Author: Brad Spengler <spender@grsecurity.net>
98 Date: Tue Jun 28 20:51:37 2016 -0400
99
100 Update to pax-linux-4.5.7-test18.patch:
101 - fixed a compile error of the constify plugin under older gcc versions
102 - Emese added a few nocapture attributes to powerpc as well
103 - fixed a few compile errors due to writes to constified fptrs on arm, reported by blake and spender
104 - fixed compile error with certain gcc versions when plugins were passed twice, reported by spender
105 - fixed regression causing random execve failures under UDEREF/amd64 and with ASLR disabled, reported by jotik
106 - taught the constify plugin to detect section mismatches of constified objects
107 - fixed a few section mismatches of constified objects that triggered LTO compilation errors
108 - changed the recent hyperv fix to be LTO compatible
109
110 arch/powerpc/include/asm/string.h | 18 ++--
111 arch/x86/Kconfig | 6 +-
112 arch/x86/boot/string.h | 4 +-
113 drivers/clk/socfpga/clk-gate-a10.c | 7 +-
114 drivers/clk/socfpga/clk-pll-a10.c | 7 +-
115 drivers/hv/hv.c | 3 +-
116 drivers/hwmon/applesmc.c | 2 +-
117 drivers/hwmon/dell-smm-hwmon.c | 2 +-
118 drivers/iommu/io-pgtable-arm.c | 2 +-
119 drivers/leds/leds-clevo-mail.c | 2 +-
120 drivers/leds/leds-ss4200.c | 2 +-
121 drivers/platform/chrome/chromeos_laptop.c | 2 +-
122 drivers/platform/chrome/cros_ec_lpc.c | 2 +-
123 include/linux/memory.h | 2 +-
124 init/Makefile | 3 -
125 scripts/Makefile.gcc-plugins | 2 +
126 scripts/gcc-plugins/constify_plugin.c | 131 +++++++++++++++++++++---------
127 scripts/gcc-plugins/gcc-common.h | 13 +++
128 18 files changed, 141 insertions(+), 69 deletions(-)
129
130 commit a256990dcb829c5a2f7ef5935dccb5f5faf5b5aa
131 Author: Brad Spengler <spender@grsecurity.net>
132 Date: Tue Jun 28 19:16:51 2016 -0400
133
134 !GRKERNSEC compile fixes
135
136 fs/proc/base.c | 2 ++
137 fs/proc/task_mmu.c | 4 ++++
138 fs/proc/task_nommu.c | 2 +-
139 3 files changed, 7 insertions(+), 1 deletion(-)
140
141 commit ed27bdf50d7ab1ed254e12e71639b5da9bc7981c
142 Author: Brad Spengler <spender@grsecurity.net>
143 Date: Tue Jun 28 18:51:23 2016 -0400
144
145 Allow active ptracers access to /proc/pid/maps and /proc/pid/mem for tasks
146 they are ptracing. Also clean up the maps code to avoid duplicate PaX flag
147 checks. Thanks to ekleog for reporting and testing, and Robert O'Callahan
148 for collaborating on changes/cleanups to rr to fix support for grsecurity.
149
150 fs/proc/base.c | 24 +++++++++++++++++++-----
151 fs/proc/internal.h | 7 +++++--
152 fs/proc/task_mmu.c | 45 +++++++++++++++++++++------------------------
153 fs/proc/task_nommu.c | 2 +-
154 include/linux/sched.h | 21 +++++++++++++++++++++
155 5 files changed, 67 insertions(+), 32 deletions(-)
156
157 commit 489fa0be1ea2ce2665611bc315f229486c64dbc5
158 Author: Brad Spengler <spender@grsecurity.net>
159 Date: Mon Jun 27 23:19:52 2016 -0400
160
161 Historically we did not trigger a BUG() on REFCOUNT violations due to the risk
162 of false positives, some of which took months or longer to exhibit themselves.
163 Initially, in fact, there was no task killing at all involved due to the risk of
164 a legitimate increment following a full set of intentional "leaky" increments
165 causing the wrong process to be killed and the wrong user to be banned (or a
166 panic ensuing). These risks were also weighed against the risk documented in
167 the REFCOUNT blog and elsewhere of a race on x86 where the refcount could
168 surpass INT_MAX. Regardless of whether the race is practical or not (and ways
169 of addressing that race are already mentioned in the REFCOUNT blog) given the
170 recent development of a GCC plugin to proactively tease out false positives
171 mentioned above, it's safe enough now to simply BUG() on refcount overflow
172 attempts. This handles both the race case as well as the case of atomic_t being
173 used when atomic64_t is really necessary to be able to express the full amount
174 of object references (when grsecurity's kernel bruteforce defense is enabled as
175 it is by default).
176
177 Suggested by Jann Horn at: http://www.openwall.com/lists/kernel-hardening/2016/06/25/2
178
179 fs/exec.c | 5 +----
180 1 file changed, 1 insertion(+), 4 deletions(-)
181
182 commit 0fb349e90e9de1d35ab4e7cd33b0f230b30c340f
183 Author: Brad Spengler <spender@grsecurity.net>
184 Date: Mon Jun 27 17:14:06 2016 -0400
185
186 Fix a UAF only triggerable by privileged root processes on the
187 short-lived delayed_cred pointer by grabbing a reference where
188 applicable at fork time -- not a security issue
189 Thanks to Jann Horn for the report
190
191 kernel/fork.c | 5 +++++
192 1 file changed, 5 insertions(+)
193
194 commit 6eb392861c72839f7af44d0e57927f362a2a0df5
195 Author: Brad Spengler <spender@grsecurity.net>
196 Date: Sun Jun 26 18:07:05 2016 -0400
197
198 compile fix
199
200 fs/posix_acl.c | 2 +-
201 1 file changed, 1 insertion(+), 1 deletion(-)
202
203 commit 1eed3a4206abdd68b35537dcff1b1832b28d4617
204 Author: Ben Hutchings <ben@decadent.org.uk>
205 Date: Wed Jun 22 19:43:35 2016 +0100
206
207 nfsd: check permissions when setting ACLs
208
209 Use set_posix_acl, which includes proper permission checks, instead of
210 calling ->set_acl directly. Without this anyone may be able to grant
211 themselves permissions to a file by setting the ACL.
212
213 Lock the inode to make the new checks atomic with respect to set_acl.
214 (Also, nfsd was the only caller of set_acl not locking the inode, so I
215 suspect this may fix other races.)
216
217 This also simplifies the code, and ensures our ACLs are checked by
218 posix_acl_valid.
219
220 The permission checks and the inode locking were lost with commit
221 4ac7249e, which changed nfsd to use the set_acl inode operation directly
222 instead of going through xattr handlers.
223
224 Reported-by: David Sinquin <david@sinquin.eu>
225 [agreunba@redhat.com: use set_posix_acl]
226 Fixes: 4ac7249e
227 Cc: Christoph Hellwig <hch@infradead.org>
228 Cc: Al Viro <viro@zeniv.linux.org.uk>
229 Cc: stable@vger.kernel.org
230 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
231
232 fs/nfsd/nfs2acl.c | 20 ++++++++++----------
233 fs/nfsd/nfs3acl.c | 16 +++++++---------
234 fs/nfsd/nfs4acl.c | 16 ++++++++--------
235 3 files changed, 25 insertions(+), 27 deletions(-)
236
237 commit d5be7c0c7a8e0408e9faf62dcaaf2471fe19d3a0
238 Author: Andreas Gruenbacher <agruenba@redhat.com>
239 Date: Wed Jun 22 23:57:25 2016 +0200
240
241 posix_acl: Add set_posix_acl
242
243 Factor out part of posix_acl_xattr_set into a common function that takes
244 a posix_acl, which nfsd can also call.
245
246 The prototype already exists in include/linux/posix_acl.h.
247
248 Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
249 Cc: stable@vger.kernel.org
250 Cc: Christoph Hellwig <hch@infradead.org>
251 Cc: Al Viro <viro@zeniv.linux.org.uk>
252 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
253
254 fs/posix_acl.c | 46 +++++++++++++++++++++++++++-------------------
255 1 file changed, 27 insertions(+), 19 deletions(-)
256
257 commit 5d722e6ce47a1c1987e862c84c4b56ddbc4423de
258 Author: Brad Spengler <spender@grsecurity.net>
259 Date: Sun Jun 26 17:33:38 2016 -0400
260
261 Fix ICE caused by duplicate plugin loads from the recent plugin
262 infrastructure changes
263
264 init/Makefile | 3 ---
265 1 file changed, 3 deletions(-)
266
267 commit 278d24df4f61ab171288187e6952ace4a82d42dc
268 Merge: 0c59418 83e55cb
269 Author: Brad Spengler <spender@grsecurity.net>
270 Date: Sun Jun 26 12:40:25 2016 -0400
271
272 Merge branch 'pax-test' into grsec-test
273
274 commit 83e55cbeedfb0b8712de995457c395b1ba8fe936
275 Author: Brad Spengler <spender@grsecurity.net>
276 Date: Sun Jun 26 12:11:40 2016 -0400
277
278 Update to pax-linux-4.5.7-test16.patch:
279 - imported a few more gcc plugin infrastructure changes from Emese's upstreaming work
280
281 .gitignore | 1 +
282 Makefile | 1 +
283 drivers/hv/hv.c | 2 +-
284 fs/namespace.c | 3 +-
285 include/linux/init.h | 4 +-
286 scripts/Makefile | 3 +-
287 scripts/Makefile.clean | 3 +-
288 scripts/Makefile.gcc-plugins | 5 ++-
289 scripts/Makefile.host | 7 ++-
290 scripts/gcc-plugins/Makefile | 54 +++++++----------------
291 scripts/gcc-plugins/rap_plugin/Makefile | 2 +
292 scripts/gcc-plugins/size_overflow_plugin/Makefile | 2 +
293 12 files changed, 39 insertions(+), 48 deletions(-)
294
295 commit 0c59418c05aa82cc46806b2b9b324d44ad5f043b
296 Author: Scott Bauer <sbauer@plzdonthack.me>
297 Date: Thu Jun 23 08:59:47 2016 -0600
298
299 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
300
301 This patch validates the num_values parameter from userland during the
302 HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
303 to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
304 leading to a heap overflow.
305
306 Cc: stable@vger.kernel.org
307 Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
308 Signed-off-by: Jiri Kosina <jkosina@suse.cz>
309
310 drivers/hid/usbhid/hiddev.c | 10 +++++-----
311 1 file changed, 5 insertions(+), 5 deletions(-)
312
313 commit 6c4919ead98c7342acecbd28f781dd2c3a37be4e
314 Author: Brad Spengler <spender@grsecurity.net>
315 Date: Sat Jun 25 07:22:44 2016 -0400
316
317 fix typo
318
319 scripts/Makefile.gcc-plugins | 2 +-
320 1 file changed, 1 insertion(+), 1 deletion(-)
321
322 commit 44fc4dd89969440d883528361bf65e6e82e35b49
323 Author: Brad Spengler <spender@grsecurity.net>
324 Date: Fri Jun 24 19:37:20 2016 -0400
325
326 RANDSTRUCT compile fix
327
328 drivers/gpu/drm/amd/powerplay/hwmgr/fiji_thermal.c | 20 ++++++++++----------
329 drivers/gpu/drm/amd/powerplay/hwmgr/tonga_thermal.c | 20 ++++++++++----------
330 2 files changed, 20 insertions(+), 20 deletions(-)
331
332 commit 08022b387ddd8856d39ace5d6f92636c7d1b422a
333 Author: Brad Spengler <spender@grsecurity.net>
334 Date: Fri Jun 24 19:22:39 2016 -0400
335
336 RANDSTRUCT compile fix
337
338 .../drm/amd/powerplay/hwmgr/cz_clockpowergating.c | 12 +++--
339 drivers/gpu/drm/amd/powerplay/hwmgr/cz_hwmgr.c | 58 +++++++++++-----------
340 2 files changed, 38 insertions(+), 32 deletions(-)
341
342 commit f48aea278530eb71ce2f9a24dc9e245f29d530ba
343 Author: Brad Spengler <spender@grsecurity.net>
344 Date: Fri Jun 24 18:52:19 2016 -0400
345
346 compile fix
347
348 drivers/hv/hv.c | 2 +-
349 1 file changed, 1 insertion(+), 1 deletion(-)
350
351 commit 1ce67be0c2ccf325fc5110ee052a8d0b08f09959
352 Author: Brad Spengler <spender@grsecurity.net>
353 Date: Fri Jun 24 17:45:26 2016 -0400
354
355 Add missing entries for RANDSTRUCT to scripts/Makefile.gcc-plugins
356 Bug introduced during 4.5 port during merging with upstream bikeshedding
357 scripts/gcc-plugins/Makefile was updated properly, but scripts/Makefile.gcc-plugins was not
358 This unfortunately means RANDSTRUCT was silently not enabled for all of the 4.5 patches to date
359
360 scripts/Makefile.gcc-plugins | 5 +++++
361 1 file changed, 5 insertions(+)
362
363 commit 6bf5265035d4617a1ef7845e7915389e1c65647b
364 Merge: c881b58 542e9e9
365 Author: Brad Spengler <spender@grsecurity.net>
366 Date: Fri Jun 24 17:01:33 2016 -0400
367
368 Merge branch 'pax-test' into grsec-test
369
370 commit 542e9e9a75e654b7e352025ecc67c6a2f98d8ea2
371 Author: Brad Spengler <spender@grsecurity.net>
372 Date: Fri Jun 24 17:00:25 2016 -0400
373
374 Update to pax-linux-4.5.7-test14.patch:
375 - synchronized with Emese's gcc plugin related changes headed upstream
376 - fixed a REFCOUNT false positive in nf_conntrack_init_net, reported by minipli
377 - fixed a regression in the recent Hyper-V support under !KERNEXEC
378
379 Makefile | 9 ---------
380 arch/x86/entry/vdso/vma.c | 2 +-
381 drivers/hv/hv.c | 2 +-
382 include/linux/compiler-gcc.h | 2 ++
383 include/linux/init.h | 8 +-------
384 include/linux/random.h | 8 ++++----
385 mm/page_alloc.c | 8 +++++---
386 net/netfilter/nf_conntrack_core.c | 4 ++--
387 scripts/Kbuild.include | 10 +++++++---
388 scripts/Makefile.gcc-plugins | 31 ++++++++++++++++++++++++-------
389 scripts/gcc-plugin.sh | 14 ++++++++++++++
390 security/Kconfig | 3 ++-
391 12 files changed, 63 insertions(+), 38 deletions(-)
392
393 commit c881b58ba51680e30758c1ea12058cd76c578672
394 Author: Brad Spengler <spender@grsecurity.net>
395 Date: Wed Jun 22 19:27:11 2016 -0400
396
397 compile fix
398
399 arch/x86/mm/init.c | 2 +-
400 1 file changed, 1 insertion(+), 1 deletion(-)
401
402 commit 6f889875e9f23d3d5a4751d09cc47f6e39eb9e1b
403 Author: Brad Spengler <spender@grsecurity.net>
404 Date: Wed Jun 22 17:37:53 2016 -0400
405
406 Don't bother further restricting /dev/mem when GRKERNSEC_KMEM is disabled,
407 fixes tboot use
408 Reported by Mark van Dijk
409 Previous MSR problem was also reported by Mark van Dijk
410
411 arch/x86/mm/init.c | 16 +++++-----------
412 1 file changed, 5 insertions(+), 11 deletions(-)
413
414 commit 1b99e76b8f41a8495ff085ffccab0e1bc8abed59
415 Author: Brad Spengler <spender@grsecurity.net>
416 Date: Wed Jun 22 17:22:14 2016 -0400
417
418 Whitelist writes to MSR_IA32_ENERGY_PERF_BIAS
419
420 arch/x86/kernel/msr.c | 6 ++++--
421 1 file changed, 4 insertions(+), 2 deletions(-)
422
423 commit 8c013d99d311850cade58ed5f9da05fb7f2c2873
424 Merge: 33e588f 9b2decf
425 Author: Brad Spengler <spender@grsecurity.net>
426 Date: Wed Jun 22 07:46:27 2016 -0400
427
428 Merge branch 'pax-test' into grsec-test
429
430 commit 9b2decf0bccddae6e630a2548d53d2a9718891a3
431 Author: Brad Spengler <spender@grsecurity.net>
432 Date: Wed Jun 22 07:46:03 2016 -0400
433
434 Update to pax-linux-4.5.7-test13.patch:
435 - fixed a bad function pointer cast in dma_buf_show caught by RAP, by Mathias Krause <minipli@googlemail.com>
436 - fixed a bad function type in the intel cstate sysfs code caught by RAP, reported by sth0R (https://forums.grsecurity.net/viewtopic.php?f=3&t=4497)
437 - worked around an intentional integer overflow in the PCI resource sizing code caught by the size overflow plugin, reported by kysse/Ville Vuorinen
438 - fixed an integer underflow in the ELF coredump code caught by the size overflow plugin, reported by Dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4495)
439 - fixed Hyper-V's hypercall page allocation to work under !KERNEXEC as well, reported by btnet (https://forums.grsecurity.net/viewtopic.php?f=3&t=3911), based on an idea by Pablo Sole (https://bugs.alpinelinux.org/issues/1021#note-27)
440 - fixed a REFCOUNT false positive in wpan_phy_new
441
442 arch/x86/include/asm/pgtable_64.h | 2 +-
443 arch/x86/kernel/cpu/perf_event_intel_cstate.c | 6 +++---
444 arch/x86/kernel/head_64.S | 10 ++++++++--
445 arch/x86/xen/mmu.c | 10 ++++++++--
446 drivers/dma-buf/dma-buf.c | 5 ++---
447 drivers/hv/hv.c | 23 +++++++----------------
448 drivers/pci/setup-bus.c | 8 ++++++--
449 fs/exec.c | 4 ++--
450 include/linux/types.h | 2 ++
451 net/ieee802154/core.c | 6 +++---
452 10 files changed, 42 insertions(+), 34 deletions(-)
453
454 commit 33e588f130c19cac089c2b0d70c939bee84ba812
455 Author: Brad Spengler <spender@grsecurity.net>
456 Date: Fri Jun 17 20:15:46 2016 -0400
457
458 Update KSTACKOVERFLOW dependency, update documentation
459
460 grsecurity/Kconfig | 8 ++++----
461 1 file changed, 4 insertions(+), 4 deletions(-)
462
463 commit d877624a8034129afc61dcc0f6127d69ee7a08d5
464 Author: Brad Spengler <spender@grsecurity.net>
465 Date: Wed Jun 15 06:28:18 2016 -0400
466
467 Backport fix for http://seclists.org/oss-sec/2016/q2/553
468
469 security/keys/key.c | 2 +-
470 1 file changed, 1 insertion(+), 1 deletion(-)
471
472 commit 39c61be367e5f1e1e0a08592ab3b23e71779ac9f
473 Merge: c63d655 66f9687
474 Author: Brad Spengler <spender@grsecurity.net>
475 Date: Tue Jun 14 18:19:37 2016 -0400
476
477 Merge branch 'pax-test' into grsec-test
478
479 commit 66f968756cfcc3ab040ad99deb570fb445108fb9
480 Author: Brad Spengler <spender@grsecurity.net>
481 Date: Tue Jun 14 18:19:04 2016 -0400
482
483 Update to pax-linux-4.5.5-test12.patch:
484 - fixed a KERNEXEC regression when writing to /proc/sys/kernel/watchdog_cpumask, reported by shadowdaemon
485 - Emese worked around a gcc induced intentional integer overflow in jfs that triggered a size overflow report, reported by g66 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4486)
486 - Emese relicensed the size overflow plugin to GPLv2 only
487 - Emese added size overflow coverage for vmnet in the hash tables, reported by Shawn <citypw@gmail.com>
488 - Emese enhanced the latent entropy in various ways (https://github.com/ephox-gcc-plugins/latent_entropy/commits/master)
489 - fixed pax_sanitize_slab=off for kmalloc and boot caches, by Mathias Krause <minipli@ld-linux.so>
490 - eliminated the memory overhead of SLUB sanitization, by Mathias Krause <minipli@ld-linux.so>
491
492 kernel/smpboot.c | 3 +
493 mm/slab.c | 2 +
494 mm/slab.h | 15 +
495 mm/slab_common.c | 7 -
496 mm/slob.c | 2 +
497 mm/slub.c | 8 +-
498 scripts/gcc-plugins/latent_entropy_plugin.c | 361 +++++++++++++++------
499 .../disable_size_overflow_hash.data | 1 +
500 .../insert_size_overflow_asm.c | 2 +-
501 .../size_overflow_plugin/intentional_overflow.c | 2 +-
502 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
503 .../size_overflow_plugin/size_overflow_debug.c | 2 +-
504 .../size_overflow_plugin/size_overflow_hash.data | 1 -
505 .../size_overflow_hash_aux.data | 5 +
506 .../size_overflow_plugin/size_overflow_ipa.c | 2 +-
507 .../size_overflow_plugin/size_overflow_misc.c | 2 +-
508 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
509 .../size_overflow_plugin_hash.c | 2 +-
510 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
511 .../size_overflow_transform_core.c | 2 +-
512 20 files changed, 310 insertions(+), 115 deletions(-)
513
514 commit c63d655907910533ed9d50671e98774b4b797578
515 Author: Tejun Heo <tj@kernel.org>
516 Date: Wed May 25 11:48:25 2016 -0400
517
518 percpu: fix synchronization between synchronous map extension and chunk destruction
519
520 For non-atomic allocations, pcpu_alloc() can try to extend the area
521 map synchronously after dropping pcpu_lock; however, the extension
522 wasn't synchronized against chunk destruction and the chunk might get
523 freed while extension is in progress.
524
525 This patch fixes the bug by putting most of non-atomic allocations
526 under pcpu_alloc_mutex to synchronize against pcpu_balance_work which
527 is responsible for async chunk management including destruction.
528
529 Signed-off-by: Tejun Heo <tj@kernel.org>
530 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
531 Reported-by: Vlastimil Babka <vbabka@suse.cz>
532 Reported-by: Sasha Levin <sasha.levin@oracle.com>
533 Cc: stable@vger.kernel.org # v3.18+
534 Fixes: 1a4d76076cda ("percpu: implement asynchronous chunk population")
535
536 mm/percpu.c | 16 ++++++++--------
537 1 file changed, 8 insertions(+), 8 deletions(-)
538
539 commit 63442a31da7b33c5d6ab80254a2af78616b91aa8
540 Author: Tejun Heo <tj@kernel.org>
541 Date: Wed May 25 11:48:25 2016 -0400
542
543 percpu: fix synchronization between chunk->map_extend_work and chunk destruction
544
545 Atomic allocations can trigger async map extensions which is serviced
546 by chunk->map_extend_work. pcpu_balance_work which is responsible for
547 destroying idle chunks wasn't synchronizing properly against
548 chunk->map_extend_work and may end up freeing the chunk while the work
549 item is still in flight.
550
551 This patch fixes the bug by rolling async map extension operations
552 into pcpu_balance_work.
553
554 Signed-off-by: Tejun Heo <tj@kernel.org>
555 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
556 Reported-by: Vlastimil Babka <vbabka@suse.cz>
557 Reported-by: Sasha Levin <sasha.levin@oracle.com>
558 Cc: stable@vger.kernel.org # v3.18+
559 Fixes: 9c824b6a172c ("percpu: make sure chunk->map array has available space")
560
561 mm/percpu.c | 57 ++++++++++++++++++++++++++++++++++++---------------------
562 1 file changed, 36 insertions(+), 21 deletions(-)
563
564 commit 7187611ba0d834ec7db27904c0cdf07bc9bc7d8f
565 Author: Brad Spengler <spender@grsecurity.net>
566 Date: Sat Jun 11 19:54:40 2016 -0400
567
568 Only bother establishing the PTEs for the vmap'd stack on creation
569
570 fs/exec.c | 1 -
571 include/linux/sched.h | 9 ++++-----
572 kernel/fork.c | 3 ++-
573 kernel/sched/core.c | 2 --
574 4 files changed, 6 insertions(+), 9 deletions(-)
575
576 commit a6e150dfb383fcb4c8d5294c59f2d21425ff9f72
577 Author: Brad Spengler <spender@grsecurity.net>
578 Date: Sat Jun 11 13:18:33 2016 -0400
579
580 Work around upstream's use of probe_kernel_address in alignment handling
581 which uses KERNEL_DS but wants to access userland memory directly --
582 not allowed by PaX. Reported by jotik
583
584 arch/arm/mm/alignment.c | 24 ++++++++++++++++++++----
585 1 file changed, 20 insertions(+), 4 deletions(-)
586
587 commit 1646af929d2465bc7a21a3c180de677e0b0b7950
588 Author: Dave Chinner <dchinner@redhat.com>
589 Date: Wed May 18 14:09:12 2016 +1000
590
591 xfs: mark reclaimed inodes invalid earlier
592
593 The last thing we do before using call_rcu() on an xfs_inode to be
594 freed is mark it as invalid. This means there is a window between
595 when we know for certain that the inode is going to be freed and
596 when we do actually mark it as "freed".
597
598 This is important in the context of RCU lookups - we can look up the
599 inode, find that it is valid, and then use it as such not realising
600 that it is in the final stages of being freed.
601
602 As such, mark the inode as being invalid the moment we know it is
603 going to be reclaimed. This can be done while we still hold the
604 XFS_ILOCK_EXCL and the flush lock in xfs_inode_reclaim, meaning that
605 it occurs well before we remove it from the radix tree, and that
606 the i_flags_lock, the XFS_ILOCK and the inode flush lock all act as
607 synchronisation points for detecting that an inode is about to go
608 away.
609
610 For defensive purposes, this allows us to add a further check to
611 xfs_iflush_cluster to ensure we skip inodes that are being freed
612 after we grab the XFS_ILOCK_SHARED and the flush lock - we know that
613 if the inode number if valid while we have these locks held we know
614 that it has not progressed through reclaim to the point where it is
615 clean and is about to be freed.
616
617 [bfoster: fixed __xfs_inode_clear_reclaim() using ip->i_ino after it
618 had already been zeroed.]
619
620 Signed-off-by: Dave Chinner <dchinner@redhat.com>
621 Reviewed-by: Brian Foster <bfoster@redhat.com>
622 Signed-off-by: Dave Chinner <david@fromorbit.com>
623
624 fs/xfs/xfs_icache.c | 46 ++++++++++++++++++++++++++++++++++------------
625 fs/xfs/xfs_inode.c | 13 +++++++++++++
626 2 files changed, 47 insertions(+), 12 deletions(-)
627
628 commit 096f3d24e77f4cd8fe50008623b26c89cb00ccda
629 Author: Dave Chinner <dchinner@redhat.com>
630 Date: Wed May 18 14:01:53 2016 +1000
631
632 xfs: xfs_inode_free() isn't RCU safe
633
634 The xfs_inode freed in xfs_inode_free() has multiple allocated
635 structures attached to it. We free these in xfs_inode_free() before
636 we mark the inode as invalid, and before we run call_rcu() to queue
637 the structure for freeing.
638
639 Unfortunately, this freeing can race with other accesses that are in
640 the RCU current grace period that have found the inode in the radix
641 tree with a valid state. This includes xfs_iflush_cluster(), which
642 calls xfs_inode_clean(), and that accesses the inode log item on the
643 xfs_inode.
644
645 The log item structure is freed in xfs_inode_free(), so there is the
646 possibility we can be accessing freed memory in xfs_iflush_cluster()
647 after validating the xfs_inode structure as being valid for this RCU
648 context. Hence we can get spuriously incorrect clean state returned
649 from such checks. This can lead to use thinking the inode is dirty
650 when it is, in fact, clean, and so incorrectly attaching it to the
651 buffer for IO and completion processing.
652
653 This then leads to use-after-free situations on the xfs_inode itself
654 if the IO completes after the current RCU grace period expires. The
655 buffer callbacks will access the xfs_inode and try to do all sorts
656 of things it shouldn't with freed memory.
657
658 IOWs, xfs_iflush_cluster() only works correctly when racing with
659 inode reclaim if the inode log item is present and correctly stating
660 the inode is clean. If the inode is being freed, then reclaim has
661 already made sure the inode is clean, and hence xfs_iflush_cluster
662 can skip it. However, we are accessing the inode inode under RCU
663 read lock protection and so also must ensure that all dynamically
664 allocated memory we reference in this context is not freed until the
665 RCU grace period expires.
666
667 To fix this, move all the potential memory freeing into
668 xfs_inode_free_callback() so that we are guarantee RCU protected
669 lookup code will always have the memory structures it needs
670 available during the RCU grace period that lookup races can occur
671 in.
672
673 Discovered-by: Brain Foster <bfoster@redhat.com>
674 Signed-off-by: Dave Chinner <dchinner@redhat.com>
675 Reviewed-by: Christoph Hellwig <hch@lst.de>
676 Signed-off-by: Dave Chinner <david@fromorbit.com>
677
678 fs/xfs/xfs_icache.c | 14 +++++++-------
679 1 file changed, 7 insertions(+), 7 deletions(-)
680
681 commit eaec09dbc18fe0ae7905b33b4c819a467a0e801d
682 Author: Jann Horn <jannh@google.com>
683 Date: Wed Jun 1 11:55:07 2016 +0200
684
685 sched: panic on corrupted stack end
686
687 Until now, hitting this BUG_ON caused a recursive oops (because oops
688 handling involves do_exit(), which calls into the scheduler, which in
689 turn raises an oops), which caused stuff below the stack to be
690 overwritten until a panic happened (e.g. via an oops in interrupt
691 context, caused by the overwritten CPU index in the thread_info).
692
693 Just panic directly.
694
695 Signed-off-by: Jann Horn <jannh@google.com>
696 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
697
698 kernel/sched/core.c | 3 ++-
699 1 file changed, 2 insertions(+), 1 deletion(-)
700
701 commit 96894afd3cbd735ed9230f058a32865dec270da2
702 Author: Jann Horn <jannh@google.com>
703 Date: Wed Jun 1 11:55:06 2016 +0200
704
705 ecryptfs: forbid opening files without mmap handler
706
707 This prevents users from triggering a stack overflow through a recursive
708 invocation of pagefault handling that involves mapping procfs files into
709 virtual memory.
710
711 Signed-off-by: Jann Horn <jannh@google.com>
712 Acked-by: Tyler Hicks <tyhicks@canonical.com>
713 Cc: stable@vger.kernel.org
714 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
715
716 fs/ecryptfs/kthread.c | 13 +++++++++++--
717 1 file changed, 11 insertions(+), 2 deletions(-)
718
719 commit 06608cb36ab8329c7cf03fdabc86fb7f64a2656d
720 Author: Jann Horn <jannh@google.com>
721 Date: Wed Jun 1 11:55:05 2016 +0200
722
723 proc: prevent stacking filesystems on top
724
725 This prevents stacking filesystems (ecryptfs and overlayfs) from using
726 procfs as lower filesystem. There is too much magic going on inside
727 procfs, and there is no good reason to stack stuff on top of procfs.
728
729 (For example, procfs does access checks in VFS open handlers, and
730 ecryptfs by design calls open handlers from a kernel thread that doesn't
731 drop privileges or so.)
732
733 Signed-off-by: Jann Horn <jannh@google.com>
734 Cc: stable@vger.kernel.org
735 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
736
737 fs/proc/root.c | 7 +++++++
738 1 file changed, 7 insertions(+)
739
740 commit 7cff8ffababda8d77e7e3a3f2621b26269279b9a
741 Author: Al Viro <viro@zeniv.linux.org.uk>
742 Date: Wed May 4 14:04:13 2016 -0400
743
744 ecryptfs: fix handling of directory opening
745
746 First of all, trying to open them r/w is idiocy; it's guaranteed to fail.
747 Moreover, assigning ->f_pos and assuming that everything will work is
748 blatantly broken - try that with e.g. tmpfs as underlying layer and watch
749 the fireworks. There may be a non-trivial amount of state associated with
750 current IO position, well beyond the numeric offset. Using the single
751 struct file associated with underlying inode is really not a good idea;
752 we ought to open one for each ecryptfs directory struct file.
753
754 Additionally, file_operations both for directories and non-directories are
755 full of pointless methods; non-directories should *not* have ->iterate(),
756 directories should not have ->flush(), ->fasync() and ->splice_read().
757
758 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
759
760 fs/ecryptfs/file.c | 71 ++++++++++++++++++++++++++++++++++++++++++------------
761 1 file changed, 55 insertions(+), 16 deletions(-)
762
763 commit b690dcd62ad1433e69d391a267ce01534c19d20a
764 Author: Brad Spengler <spender@grsecurity.net>
765 Date: Wed Jun 8 20:59:28 2016 -0400
766
767 fix compiler warnings
768
769 fs/exec.c | 4 ++--
770 1 file changed, 2 insertions(+), 2 deletions(-)
771
772 commit 5d43ec1fb9c94f0c2644e0d09a8257442134a0ce
773 Author: Brad Spengler <spender@grsecurity.net>
774 Date: Wed Jun 8 20:52:00 2016 -0400
775
776 Avoid some UB
777
778 fs/exec.c | 8 ++++----
779 1 file changed, 4 insertions(+), 4 deletions(-)
780
781 commit d34347de1cae1f7bd8ea4223d5baca5da8ea4529
782 Author: Brad Spengler <spender@grsecurity.net>
783 Date: Wed Jun 8 20:23:27 2016 -0400
784
785 compile fix
786
787 kernel/smpboot.c | 1 +
788 1 file changed, 1 insertion(+)
789
790 commit 4dfdd6b803d58fec94306a4ff437d500a9c80908
791 Author: Brad Spengler <spender@grsecurity.net>
792 Date: Wed Jun 8 20:13:34 2016 -0400
793
794 Add open/close around cpumask modification, reported by shadowdaemon
795 Triggered by writing to /proc/sys/kernel/watchdog_cpumask
796
797 kernel/smpboot.c | 2 ++
798 1 file changed, 2 insertions(+)
799
800 commit 1ee24693e22a535dbede927beba7b90cd8559eb4
801 Merge: 11150b9 dec4686
802 Author: Brad Spengler <spender@grsecurity.net>
803 Date: Wed Jun 8 07:39:26 2016 -0400
804
805 Merge branch 'pax-test' into grsec-test
806
807 commit dec468678ead461fc786adfbb2505b6ef66a371a
808 Merge: 85a5882 8c596d1
809 Author: Brad Spengler <spender@grsecurity.net>
810 Date: Wed Jun 8 07:39:18 2016 -0400
811
812 Merge branch 'linux-4.5.y' into pax-test
813
814 commit 11150b92c4cd78ec6a22ad0ff682faf2354b4445
815 Author: Brad Spengler <spender@grsecurity.net>
816 Date: Sun Jun 5 14:18:34 2016 -0400
817
818 compile fix
819
820 grsecurity/grsec_tpe.c | 4 ++--
821 include/linux/uidgid.h | 1 +
822 2 files changed, 3 insertions(+), 2 deletions(-)
823
824 commit 6e548aad3425733ed443e4a3232205935f0d4939
825 Author: Brad Spengler <spender@grsecurity.net>
826 Date: Sun Jun 5 08:19:09 2016 -0400
827
828 Workaround some Debian bike-shedding so that group-writable /bin dirs
829 (with group ownership of root) don't trigger TPE violations
830 Reported by jvoisin
831
832 grsecurity/grsec_tpe.c | 4 ++--
833 1 file changed, 2 insertions(+), 2 deletions(-)
834
835 commit 735ea2028ce017246358d22ec81dc6db73499770
836 Author: Brad Spengler <spender@grsecurity.net>
837 Date: Sun Jun 5 04:23:15 2016 -0400
838
839 move another instance of is_privileged_binary outside of atomic
840
841 grsecurity/gracl_segv.c | 4 +++-
842 1 file changed, 3 insertions(+), 1 deletion(-)
843
844 commit e08a7bcc7b7a1e423b5346bcef85d9a92185f65f
845 Merge: d094457 85a5882
846 Author: Brad Spengler <spender@grsecurity.net>
847 Date: Sun Jun 5 04:09:29 2016 -0400
848
849 Merge branch 'pax-test' into grsec-test
850
851 commit 85a588299f41d6a116b8d07d902de986968a84b0
852 Merge: 89f00c3 ec2a755
853 Author: Brad Spengler <spender@grsecurity.net>
854 Date: Sun Jun 5 04:08:42 2016 -0400
855
856 Merge branch 'linux-4.5.y' into pax-test
857
858 commit d094457eb90a693f7007b7f4b26c2132137c7ed2
859 Author: Brad Spengler <spender@grsecurity.net>
860 Date: Mon May 30 10:15:11 2016 -0400
861
862 move privilege/xattr check outside of locks to prevent warning, reported by shadowdaemon
863
864 grsecurity/grsec_sig.c | 7 +++++--
865 1 file changed, 5 insertions(+), 2 deletions(-)
866
867 commit 2fad2bb3392409d98498b3af53cf39f2475e4b70
868 Author: Brad Spengler <spender@grsecurity.net>
869 Date: Sun May 29 10:11:27 2016 -0400
870
871 Fix another harmless warning
872
873 fs/proc/proc_sysctl.c | 2 +-
874 1 file changed, 1 insertion(+), 1 deletion(-)
875
876 commit d62f996e40c87e46b20f45e16819f92d49f3e926
877 Author: Brad Spengler <spender@grsecurity.net>
878 Date: Sun May 29 09:56:32 2016 -0400
879
880 Fix more harmless compiler warnings
881
882 grsecurity/gracl_policy.c | 8 ++++----
883 1 file changed, 4 insertions(+), 4 deletions(-)
884
885 commit 558b784a2b87e337d12bae07d60f435c2f06d849
886 Author: Brad Spengler <spender@grsecurity.net>
887 Date: Sun May 29 09:47:50 2016 -0400
888
889 Fix more harmless warnings
890
891 grsecurity/gracl.c | 6 +++---
892 1 file changed, 3 insertions(+), 3 deletions(-)
893
894 commit 32ec63339ab130758e6941d7f1d8993e41956980
895 Author: Brad Spengler <spender@grsecurity.net>
896 Date: Sun May 29 09:41:23 2016 -0400
897
898 Fix another warning
899
900 include/linux/sched.h | 1 +
901 1 file changed, 1 insertion(+)
902
903 commit 789369de0dbde1fedd2d5cb0ee3474e160af187c
904 Author: Brad Spengler <spender@grsecurity.net>
905 Date: Sun May 29 09:22:05 2016 -0400
906
907 Fix some harmless compiler warnings
908
909 grsecurity/grsum.c | 4 ++--
910 1 file changed, 2 insertions(+), 2 deletions(-)
911
912 commit ed18543a205c206d0aa8ee6b04c606579823b7b3
913 Merge: b0b4143 89f00c3
914 Author: Brad Spengler <spender@grsecurity.net>
915 Date: Sun May 29 08:34:18 2016 -0400
916
917 Merge branch 'pax-test' into grsec-test
918
919 commit 89f00c3b596a62ae5bcfe4920e9d05b9a94be7fa
920 Author: Brad Spengler <spender@grsecurity.net>
921 Date: Sun May 29 08:26:37 2016 -0400
922
923 Update to pax-linux-4.5.5-test11.patch:
924 - fixed arm kuser helper emulation for thumb mode userland, reported by Wizzup(https://forums.grsecurity.net/viewtopic.php?f=3&t=4479)
925 - fixed incorrect function pointer casts in bcache caught by RAP, reported by torsten (https://forums.grsecurity.net/viewtopic.php?f=3&t=4482)
926 - worked around a few intentional integer underflows in the xhci driver caught by the size overflow plugin, reported by Dennis Wassenberg <dennis.wassenberg@secunet.com>
927 - moved gcc plugins from tools/gcc to scripts/gcc-plugins and simplified the plugin build system, by Emese
928 - changed the constify and latent entropy plugins to use a consistent command line switch for compile-time disabling
929 - cleaned up a few unusued macros, whitespace, inline asm constraints, etc
930 - hid the lvalue casts needed for constify behind the const_cast macro, by Mathias Krause <minipli@ld-linux.so>
931
932 Makefile | 50 +-
933 arch/Kconfig | 14 +
934 arch/arm/Kconfig | 1 +
935 arch/arm/boot/compressed/Makefile | 2 +
936 arch/arm/mach-exynos/suspend.c | 4 +-
937 arch/arm/mach-omap2/powerdomains43xx_data.c | 2 +-
938 arch/arm/mach-shmobile/platsmp-apmu.c | 2 +-
939 arch/arm/mm/fault.c | 14 +
940 arch/arm64/Kconfig | 1 +
941 arch/mips/Kconfig | 1 +
942 arch/powerpc/Kconfig | 1 +
943 arch/powerpc/include/asm/atomic.h | 7 +-
944 arch/powerpc/kernel/Makefile | 8 +-
945 arch/sparc/Kconfig | 1 +
946 arch/um/Makefile | 4 +-
947 arch/x86/Kconfig | 1 +
948 arch/x86/boot/Makefile | 3 -
949 arch/x86/boot/compressed/Makefile | 3 -
950 arch/x86/entry/common.c | 2 +-
951 arch/x86/include/asm/thread_info.h | 27 -
952 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 2 +-
953 arch/x86/kernel/cpu/perf_event_intel_pt.c | 10 +-
954 arch/x86/kernel/i8259.c | 4 +-
955 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
956 arch/x86/oprofile/nmi_int.c | 2 +-
957 arch/x86/oprofile/op_model_amd.c | 6 +-
958 arch/x86/oprofile/op_model_ppro.c | 4 +-
959 arch/x86/pci/vmd.c | 2 +-
960 arch/x86/realmode/rm/Makefile | 3 -
961 drivers/acpi/bgrt.c | 4 +-
962 drivers/ata/libata-core.c | 2 +-
963 drivers/ata/pata_arasan_cf.c | 2 +-
964 drivers/base/platform-msi.c | 14 +-
965 drivers/base/power/domain.c | 4 +-
966 drivers/bus/arm-cci.c | 6 +-
967 drivers/cdrom/cdrom.c | 2 +-
968 drivers/clk/socfpga/clk-gate.c | 4 +-
969 drivers/clk/socfpga/clk-pll.c | 4 +-
970 drivers/clk/ti/clk.c | 4 +-
971 drivers/cpufreq/acpi-cpufreq.c | 8 +-
972 drivers/cpufreq/cpufreq-dt.c | 2 +-
973 drivers/cpufreq/cpufreq.c | 8 +-
974 drivers/cpufreq/cpufreq_ondemand.c | 4 +-
975 drivers/cpufreq/p4-clockmod.c | 6 +-
976 drivers/cpufreq/speedstep-centrino.c | 2 +-
977 drivers/firmware/dmi_scan.c | 8 +-
978 drivers/firmware/efi/efi.c | 10 +-
979 drivers/firmware/google/memconsole.c | 2 +-
980 drivers/gpio/gpiolib.c | 8 +-
981 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +-
982 drivers/gpu/drm/i810/i810_drv.c | 2 +-
983 drivers/gpu/drm/i915/i915_irq.c | 86 +-
984 drivers/gpu/drm/i915/intel_display.c | 6 +-
985 drivers/gpu/drm/mga/mga_drv.c | 2 +-
986 drivers/gpu/drm/omapdrm/dss/display.c | 6 +-
987 drivers/gpu/drm/qxl/qxl_drv.c | 2 +-
988 drivers/gpu/drm/qxl/qxl_ttm.c | 4 +-
989 drivers/gpu/drm/r128/r128_drv.c | 2 +-
990 drivers/gpu/drm/radeon/radeon_drv.c | 2 +-
991 drivers/gpu/drm/savage/savage_drv.c | 2 +-
992 drivers/gpu/drm/sis/sis_drv.c | 2 +-
993 drivers/gpu/drm/tegra/dc.c | 2 +-
994 drivers/gpu/drm/tegra/sor.c | 2 +-
995 drivers/gpu/drm/via/via_drv.c | 2 +-
996 drivers/idle/intel_idle.c | 4 +-
997 drivers/infiniband/hw/qib/qib.h | 1 -
998 drivers/iommu/arm-smmu.c | 4 +-
999 drivers/isdn/hardware/eicon/mntfunc.c | 2 +-
1000 drivers/md/bcache/btree.c | 11 +-
1001 drivers/md/bcache/closure.c | 4 +-
1002 drivers/md/bcache/closure.h | 8 +-
1003 drivers/md/bcache/journal.c | 16 +-
1004 drivers/md/bcache/movinggc.c | 12 +-
1005 drivers/md/bcache/request.c | 54 +-
1006 drivers/md/bcache/request.h | 2 +-
1007 drivers/md/bcache/super.c | 30 +-
1008 drivers/md/bcache/writeback.c | 12 +-
1009 drivers/media/platform/am437x/am437x-vpfe.c | 2 +-
1010 drivers/mfd/twl4030-irq.c | 4 +-
1011 drivers/misc/c2port/core.c | 2 +-
1012 drivers/misc/mic/scif/scif_api.c | 8 +-
1013 drivers/mmc/host/mmci.c | 2 +-
1014 drivers/mmc/host/omap_hsmmc.c | 2 +-
1015 drivers/mmc/host/sdhci-esdhc-imx.c | 2 +-
1016 drivers/mmc/host/sdhci-s3c.c | 6 +-
1017 drivers/net/ethernet/cavium/liquidio/lio_main.c | 2 +-
1018 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 4 +-
1019 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 2 +-
1020 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 6 +-
1021 drivers/net/macvlan.c | 14 +-
1022 drivers/net/wireless/ath/ath9k/main.c | 20 +-
1023 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 2 +-
1024 drivers/net/wireless/mac80211_hwsim.c | 22 +-
1025 drivers/net/wireless/ti/wl1251/sdio.c | 8 +-
1026 drivers/net/wireless/ti/wl12xx/main.c | 4 +-
1027 drivers/net/wireless/ti/wl18xx/main.c | 4 +-
1028 drivers/of/fdt.c | 2 +-
1029 drivers/pci/hotplug/acpiphp_ibm.c | 2 +-
1030 drivers/pci/hotplug/cpcihp_zt5550.c | 6 +-
1031 drivers/pci/hotplug/pci_hotplug_core.c | 4 +-
1032 drivers/pci/msi.c | 12 +-
1033 drivers/pinctrl/pinctrl-at91.c | 2 +-
1034 drivers/platform/x86/msi-laptop.c | 12 +-
1035 drivers/power/reset/at91-reset.c | 2 +-
1036 drivers/powercap/powercap_sys.c | 6 +-
1037 drivers/regulator/max8660.c | 4 +-
1038 drivers/regulator/max8973-regulator.c | 12 +-
1039 drivers/regulator/mc13892-regulator.c | 4 +-
1040 drivers/rtc/rtc-armada38x.c | 4 +-
1041 drivers/rtc/rtc-cmos.c | 2 +-
1042 drivers/rtc/rtc-m48t59.c | 2 +-
1043 drivers/rtc/rtc-rx8010.c | 6 +-
1044 drivers/rtc/rtc-test.c | 4 +-
1045 drivers/scsi/aacraid/aachba.c | 4 +-
1046 drivers/scsi/lpfc/lpfc_init.c | 4 +-
1047 drivers/scsi/qla2xxx/qla_os.c | 4 +-
1048 drivers/staging/sm750fb/sm750.c | 8 +-
1049 drivers/thermal/cpu_cooling.c | 6 +-
1050 drivers/thermal/int340x_thermal/int3400_thermal.c | 4 +-
1051 drivers/thermal/of-thermal.c | 12 +-
1052 drivers/tty/pty.c | 2 +-
1053 drivers/tty/serial/8250/8250_core.c | 6 +-
1054 drivers/tty/serial/kgdb_nmi.c | 2 +-
1055 drivers/usb/host/xhci-ring.c | 52 +-
1056 drivers/video/fbdev/aty/atyfb_base.c | 4 +-
1057 drivers/video/fbdev/aty/mach64_cursor.c | 2 +-
1058 drivers/video/fbdev/core/fb_defio.c | 6 +-
1059 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 12 +-
1060 drivers/video/fbdev/nvidia/nvidia.c | 18 +-
1061 drivers/video/fbdev/omap2/omapfb/dss/display.c | 6 +-
1062 drivers/video/fbdev/s1d13xxxfb.c | 4 +-
1063 drivers/video/fbdev/smscufx.c | 2 +-
1064 drivers/video/fbdev/udlfb.c | 2 +-
1065 drivers/video/fbdev/uvesafb.c | 4 +-
1066 drivers/video/fbdev/vesafb.c | 2 +-
1067 fs/fuse/cuse.c | 6 +-
1068 fs/jffs2/file.c | 2 +-
1069 fs/nls/nls_base.c | 4 +-
1070 fs/nls/nls_euc-jp.c | 4 +-
1071 fs/nls/nls_koi8-ru.c | 4 +-
1072 fs/proc/proc_sysctl.c | 4 +-
1073 fs/tracefs/inode.c | 4 +-
1074 include/linux/compiler-gcc.h | 1 +
1075 include/linux/compiler.h | 4 +
1076 include/linux/seq_buf.h | 2 +-
1077 include/linux/sysfs.h | 2 +-
1078 kernel/cgroup.c | 14 +-
1079 kernel/irq/msi.c | 12 +-
1080 kernel/notifier.c | 4 +-
1081 kernel/pid.c | 2 +-
1082 kernel/trace/trace_output.c | 8 +-
1083 net/core/rtnetlink.c | 2 +-
1084 net/xfrm/xfrm_state.c | 2 +-
1085 scripts/Makefile | 1 +
1086 scripts/Makefile.gcc-plugins | 138 +-
1087 scripts/Makefile.host | 6 +-
1088 scripts/gcc-plugin.sh | 4 +-
1089 scripts/gcc-plugins/Makefile | 45 +
1090 scripts/gcc-plugins/checker_plugin.c | 496 +
1091 scripts/gcc-plugins/colorize_plugin.c | 162 +
1092 scripts/gcc-plugins/constify_plugin.c | 521 +
1093 scripts/gcc-plugins/gcc-common.h | 879 +
1094 scripts/gcc-plugins/gcc-generate-gimple-pass.h | 175 +
1095 scripts/gcc-plugins/gcc-generate-ipa-pass.h | 289 +
1096 scripts/gcc-plugins/gcc-generate-rtl-pass.h | 175 +
1097 scripts/gcc-plugins/gcc-generate-simple_ipa-pass.h | 175 +
1098 scripts/gcc-plugins/initify_plugin.c | 536 +
1099 scripts/gcc-plugins/kallocstat_plugin.c | 135 +
1100 scripts/gcc-plugins/kernexec_plugin.c | 407 +
1101 scripts/gcc-plugins/latent_entropy_plugin.c | 438 +
1102 scripts/gcc-plugins/rap_plugin/Makefile | 4 +
1103 scripts/gcc-plugins/rap_plugin/rap.h | 36 +
1104 scripts/gcc-plugins/rap_plugin/rap_fptr_pass.c | 220 +
1105 scripts/gcc-plugins/rap_plugin/rap_hash.c | 382 +
1106 scripts/gcc-plugins/rap_plugin/rap_plugin.c | 511 +
1107 scripts/gcc-plugins/rap_plugin/sip.c | 96 +
1108 .../gcc-plugins/size_overflow_plugin/.gitignore | 3 +
1109 scripts/gcc-plugins/size_overflow_plugin/Makefile | 28 +
1110 .../disable_size_overflow_hash.data | 12444 +++++++++++
1111 .../generate_size_overflow_hash.sh | 103 +
1112 .../insert_size_overflow_asm.c | 369 +
1113 .../size_overflow_plugin/intentional_overflow.c | 1166 +
1114 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
1115 .../size_overflow_plugin/size_overflow.h | 331 +
1116 .../size_overflow_plugin/size_overflow_debug.c | 194 +
1117 .../size_overflow_plugin/size_overflow_hash.data | 21504 +++++++++++++++++++
1118 .../size_overflow_hash_aux.data | 92 +
1119 .../size_overflow_plugin/size_overflow_ipa.c | 1163 +
1120 .../size_overflow_plugin/size_overflow_misc.c | 505 +
1121 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
1122 .../size_overflow_plugin_hash.c | 352 +
1123 .../size_overflow_plugin/size_overflow_transform.c | 743 +
1124 .../size_overflow_transform_core.c | 1025 +
1125 scripts/gcc-plugins/stackleak_plugin.c | 350 +
1126 scripts/gcc-plugins/structleak_plugin.c | 239 +
1127 scripts/package/builddeb | 2 +-
1128 security/Kconfig | 8 +-
1129 sound/soc/codecs/sti-sas.c | 8 +-
1130 sound/soc/soc-ac97.c | 4 +-
1131 tools/gcc/Makefile | 46 -
1132 tools/gcc/checker_plugin.c | 496 -
1133 tools/gcc/colorize_plugin.c | 162 -
1134 tools/gcc/constify_plugin.c | 521 -
1135 tools/gcc/gcc-common.h | 879 -
1136 tools/gcc/gcc-generate-gimple-pass.h | 175 -
1137 tools/gcc/gcc-generate-ipa-pass.h | 289 -
1138 tools/gcc/gcc-generate-rtl-pass.h | 175 -
1139 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 -
1140 tools/gcc/initify_plugin.c | 536 -
1141 tools/gcc/kallocstat_plugin.c | 135 -
1142 tools/gcc/kernexec_plugin.c | 407 -
1143 tools/gcc/latent_entropy_plugin.c | 422 -
1144 tools/gcc/rap_plugin/Makefile | 4 -
1145 tools/gcc/rap_plugin/rap.h | 36 -
1146 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 -
1147 tools/gcc/rap_plugin/rap_hash.c | 382 -
1148 tools/gcc/rap_plugin/rap_plugin.c | 511 -
1149 tools/gcc/rap_plugin/sip.c | 96 -
1150 tools/gcc/size_overflow_plugin/.gitignore | 3 -
1151 tools/gcc/size_overflow_plugin/Makefile | 28 -
1152 .../disable_size_overflow_hash.data | 12444 -----------
1153 .../generate_size_overflow_hash.sh | 103 -
1154 .../insert_size_overflow_asm.c | 369 -
1155 .../size_overflow_plugin/intentional_overflow.c | 1166 -
1156 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 -
1157 tools/gcc/size_overflow_plugin/size_overflow.h | 331 -
1158 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 -
1159 .../size_overflow_plugin/size_overflow_hash.data | 21504 -------------------
1160 .../size_overflow_hash_aux.data | 92 -
1161 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 -
1162 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 -
1163 .../size_overflow_plugin/size_overflow_plugin.c | 290 -
1164 .../size_overflow_plugin_hash.c | 352 -
1165 .../size_overflow_plugin/size_overflow_transform.c | 743 -
1166 .../size_overflow_transform_core.c | 1025 -
1167 tools/gcc/stackleak_plugin.c | 350 -
1168 tools/gcc/structleak_plugin.c | 239 -
1169 237 files changed, 47340 insertions(+), 47276 deletions(-)
1170
1171 commit b0b41430a8c9e6e5067c896c07d361e527e298e8
1172 Author: Brad Spengler <spender@grsecurity.net>
1173 Date: Sat May 21 13:59:19 2016 -0400
1174
1175 Fix gcc assert properly, from Emese Revfy
1176
1177 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1178 tools/gcc/size_overflow_plugin/size_overflow_plugin.c | 2 +-
1179 2 files changed, 2 insertions(+), 2 deletions(-)
1180
1181 commit 5e7a47f06420603b0f26f1b45fe2ab02838795c9
1182 Merge: f844209 5929595
1183 Author: Brad Spengler <spender@grsecurity.net>
1184 Date: Fri May 20 20:19:27 2016 -0400
1185
1186 Merge branch 'pax-test' into grsec-test
1187
1188 commit 5929595ec558e9282901842bdf9e4a981751fb08
1189 Author: Brad Spengler <spender@grsecurity.net>
1190 Date: Fri May 20 20:18:58 2016 -0400
1191
1192 Update to pax-linux-4.5.5-test9.patch:
1193 - fixed a few more incorrect fptr casts for RAP
1194
1195 arch/x86/math-emu/fpu_etc.c | 9 +++++++--
1196 arch/x86/math-emu/fpu_trig.c | 13 +++++++++----
1197 arch/x86/math-emu/reg_constant.c | 7 ++++++-
1198 drivers/isdn/hisax/hfc_2bds0.c | 4 ++--
1199 drivers/isdn/hisax/hfcscard.c | 6 ++++--
1200 drivers/isdn/hisax/saphir.c | 5 +++--
1201 drivers/isdn/hisax/teleint.c | 5 +++--
1202 drivers/media/pci/sta2x11/sta2x11_vip.c | 5 +++--
1203 drivers/net/hamradio/baycom_epp.c | 2 +-
1204 9 files changed, 38 insertions(+), 18 deletions(-)
1205
1206 commit f84420916698cdf33a81f046206d050e2c3e6966
1207 Merge: fa18ce2 445754e
1208 Author: Brad Spengler <spender@grsecurity.net>
1209 Date: Fri May 20 18:52:20 2016 -0400
1210
1211 Merge branch 'pax-test' into grsec-test
1212
1213 commit 445754e5717176c2b3431a0cde1e90df51cc43e2
1214 Author: Brad Spengler <spender@grsecurity.net>
1215 Date: Fri May 20 18:51:52 2016 -0400
1216
1217 Update to pax-linux-4.5.4-test8.patch:
1218 - fixed a USERCOPY report in the mwifiex driver, by Dennis Wassenberg <dennis.wassenberg@secunet.com> and Mathias Krause <minipli@ld-linux.so>
1219
1220 drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 2 +-
1221 drivers/net/wireless/marvell/mwifiex/pcie.c | 4 ++--
1222 drivers/net/wireless/marvell/mwifiex/sdio.c | 10 ++++------
1223 3 files changed, 7 insertions(+), 9 deletions(-)
1224
1225 commit fa18ce2d37a92442162fb72b8f85ee86120ffacb
1226 Author: Brad Spengler <spender@grsecurity.net>
1227 Date: Thu May 19 18:30:08 2016 -0400
1228
1229 Update size_overflow hash, from Dr. Toth
1230
1231 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1232 1 file changed, 1 insertion(+)
1233
1234 commit 61c487965dbc34618fe292663759d6fa0515bcad
1235 Merge: fbc84d2 a734dbd
1236 Author: Brad Spengler <spender@grsecurity.net>
1237 Date: Thu May 19 06:26:52 2016 -0400
1238
1239 Merge branch 'pax-test' into grsec-test
1240
1241 commit a734dbda8b785c38baa1858df2bffc89b45d070a
1242 Merge: 238dfca 3b41b7e
1243 Author: Brad Spengler <spender@grsecurity.net>
1244 Date: Thu May 19 06:24:25 2016 -0400
1245
1246 Merge branch 'linux-4.5.y' into pax-test
1247
1248 commit fbc84d202d311b4dc09bcc922678df60b6e76614
1249 Merge: 84fa82c 238dfca
1250 Author: Brad Spengler <spender@grsecurity.net>
1251 Date: Fri May 13 18:00:06 2016 -0400
1252
1253 Merge branch 'pax-test' into grsec-test
1254
1255 commit 238dfca3ffe87f4410e67c8ceb554b9ce4f3132b
1256 Author: Brad Spengler <spender@grsecurity.net>
1257 Date: Fri May 13 17:59:42 2016 -0400
1258
1259 Compile fix for older gcc
1260
1261 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1262 1 file changed, 1 insertion(+), 1 deletion(-)
1263
1264 commit 84fa82c59fa5051e1485a3dcc857b87b70dbc18d
1265 Merge: 2cece8e 4654023
1266 Author: Brad Spengler <spender@grsecurity.net>
1267 Date: Fri May 13 17:31:49 2016 -0400
1268
1269 Merge branch 'pax-test' into grsec-test
1270
1271 commit 4654023e72b0834142594eee879e657664498443
1272 Author: Brad Spengler <spender@grsecurity.net>
1273 Date: Fri May 13 17:29:38 2016 -0400
1274
1275 Update to pax-linux-4.5.4-test7.patch:
1276 - changed the RAP hash emission code to accomodate x86 disassemblers, suggested by Mathias Krause <minipli@ld-linux.so>
1277 - fixed a few size overflow false positives in JFS due to the lack of endian conversion macros for signed types, reported by ryonaloli via hunger
1278 - fixed a compiler assert triggered by the size overflow plugin
1279
1280 tools/gcc/rap_plugin/rap_plugin.c | 39 ++++++++++++++++++----
1281 .../disable_size_overflow_hash.data | 3 ++
1282 .../size_overflow_plugin/intentional_overflow.c | 2 +-
1283 .../size_overflow_plugin/size_overflow_hash.data | 3 --
1284 4 files changed, 36 insertions(+), 11 deletions(-)
1285
1286 commit 2cece8e8e0e2fce9943345c0ebebd7436929868e
1287 Merge: 6df0471 ea68d2e
1288 Author: Brad Spengler <spender@grsecurity.net>
1289 Date: Thu May 12 18:41:15 2016 -0400
1290
1291 Merge branch 'pax-test' into grsec-test
1292
1293 commit ea68d2e7123a83aba24db99d5ef487b1397fd6d0
1294 Author: Brad Spengler <spender@grsecurity.net>
1295 Date: Thu May 12 18:40:50 2016 -0400
1296
1297 Update to pax-linux-4.5.3-test6.patch:
1298 - really fixed https://forums.grsecurity.net/viewtopic.php?f=3&t=4473
1299 - the nfsd_proc_read fix for RAP had a typo causing an oops, reported by Carlos Carvalho (https://forums.grsecurity.net/viewtopic.php?f=3&t=4471)
1300 - fixed a few format string warnings in the RAP hash emission code, reported by Dwokfur
1301
1302 drivers/net/ppp/pptp.c | 1 -
1303 fs/nfsd/nfsproc.c | 2 +-
1304 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1305 tools/gcc/rap_plugin/rap_plugin.c | 14 ++++++++++----
1306 4 files changed, 12 insertions(+), 7 deletions(-)
1307
1308 commit 6df04719a7cf4d3f60c9e6190f8eb4b986ce2b1b
1309 Author: David Howells <dhowells@redhat.com>
1310 Date: Tue Feb 23 11:03:12 2016 +0000
1311
1312 KEYS: Fix ASN.1 indefinite length object parsing
1313
1314 This fixes CVE-2016-0758.
1315
1316 In the ASN.1 decoder, when the length field of an ASN.1 value is extracted,
1317 it isn't validated against the remaining amount of data before being added
1318 to the cursor. With a sufficiently large size indicated, the check:
1319
1320 datalen - dp < 2
1321
1322 may then fail due to integer overflow.
1323
1324 Fix this by checking the length indicated against the amount of remaining
1325 data in both places a definite length is determined.
1326
1327 Whilst we're at it, make the following changes:
1328
1329 (1) Check the maximum size of extended length does not exceed the capacity
1330 of the variable it's being stored in (len) rather than the type that
1331 variable is assumed to be (size_t).
1332
1333 (2) Compare the EOC tag to the symbolic constant ASN1_EOC rather than the
1334 integer 0.
1335
1336 (3) To reduce confusion, move the initialisation of len outside of:
1337
1338 for (len = 0; n > 0; n--) {
1339
1340 since it doesn't have anything to do with the loop counter n.
1341
1342 Signed-off-by: David Howells <dhowells@redhat.com>
1343 Reviewed-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
1344 Acked-by: David Woodhouse <David.Woodhouse@intel.com>
1345 Acked-by: Peter Jones <pjones@redhat.com>
1346
1347 lib/asn1_decoder.c | 16 +++++++++-------
1348 1 file changed, 9 insertions(+), 7 deletions(-)
1349
1350 commit acb6cef8047476b8afc3ff3f07286b9e36de1b77
1351 Merge: 735f14a a7c9bec
1352 Author: Brad Spengler <spender@grsecurity.net>
1353 Date: Wed May 11 17:05:21 2016 -0400
1354
1355 Merge branch 'pax-test' into grsec-test
1356
1357 commit a7c9bec57dea73ceee1246a64df55038ea840be9
1358 Merge: f5bd134 a29ab35
1359 Author: Brad Spengler <spender@grsecurity.net>
1360 Date: Wed May 11 17:04:48 2016 -0400
1361
1362 Merge branch 'linux-4.5.y' into pax-test
1363
1364 commit 735f14a2b5562cd1329b263a81781d59dacffd3e
1365 Author: Brad Spengler <spender@grsecurity.net>
1366 Date: Wed May 11 06:57:40 2016 -0400
1367
1368 Fix typo in nfsd RAP changes causing oops reported by Carlos Carvalho
1369 at: https://forums.grsecurity.net/viewtopic.php?f=3&t=4471
1370
1371 fs/nfsd/nfsproc.c | 2 +-
1372 1 file changed, 1 insertion(+), 1 deletion(-)
1373
1374 commit 35e1e615072d0bb885b38ee1b2ada7a0a6a91f9d
1375 Merge: 9e3e5ae3e f5bd134
1376 Author: Brad Spengler <spender@grsecurity.net>
1377 Date: Tue May 10 20:56:54 2016 -0400
1378
1379 Merge branch 'pax-test' into grsec-test
1380
1381 commit f5bd1342fa631bb3b69a2e8919785c827c4edf74
1382 Author: Brad Spengler <spender@grsecurity.net>
1383 Date: Tue May 10 20:55:57 2016 -0400
1384
1385 Update to pax-linux-4.5.3-test5.patch:
1386 - marked all indirectly callable x86 asm crypto functions, reported by Dwokfur and minipli (https://forums.grsecurity.net/viewtopic.php?f=3&t=4468)
1387 - worked around an intentional integer overflow introduced by gcc-6 that triggered a size overflow false positive, reported by hooruD, chron and Fen (https://forums.grsecurity.net/viewtopic.php?f=3&t=4469)
1388 - made some preparations for enabling RAP on i386 as well, will have to wait due to KERNEXEC
1389
1390 arch/x86/crypto/aesni-intel_asm.S | 6 +++---
1391 arch/x86/crypto/sha-mb/sha1_mb_mgr_flush_avx2.S | 4 ++--
1392 arch/x86/crypto/sha-mb/sha1_mb_mgr_submit_avx2.S | 2 +-
1393 arch/x86/crypto/sha256_ni_asm.S | 2 +-
1394 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
1395 arch/x86/entry/common.c | 1 -
1396 include/linux/linkage.h | 22 +++++++++++++++-------
1397 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1398 tools/gcc/rap_plugin/rap_hash.c | 1 +
1399 tools/gcc/rap_plugin/rap_plugin.c | 18 +++++++++---------
1400 .../disable_size_overflow_hash.data | 1 +
1401 .../size_overflow_plugin/size_overflow_hash.data | 1 -
1402 12 files changed, 35 insertions(+), 27 deletions(-)
1403
1404 commit 9e3e5ae3e9ed69452d4133490dd1831376b9a1e8
1405 Merge: e5983fd cfcaa03
1406 Author: Brad Spengler <spender@grsecurity.net>
1407 Date: Sun May 8 08:04:18 2016 -0400
1408
1409 Merge branch 'pax-test' into grsec-test
1410
1411 commit cfcaa036dd3756fc32e083a7c486c1143d93fd22
1412 Author: Brad Spengler <spender@grsecurity.net>
1413 Date: Sun May 8 08:03:53 2016 -0400
1414
1415 Update to pax-linux-4.5.3-test4.patch:
1416 - fixed a few incorrect function types (mostly start_xmit callbacks) found by RAP, reported by cinder (https://forums.grsecurity.net/viewtopic.php?f=3&t=4466)
1417
1418 drivers/char/tpm/tpm-chip.c | 7 ++++++-
1419 drivers/net/can/bfin_can.c | 2 +-
1420 drivers/net/can/flexcan.c | 2 +-
1421 drivers/net/ethernet/adi/bfin_mac.c | 2 +-
1422 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
1423 drivers/net/ethernet/amd/7990.c | 2 +-
1424 drivers/net/ethernet/amd/7990.h | 2 +-
1425 drivers/net/ethernet/amd/atarilance.c | 4 ++--
1426 drivers/net/ethernet/amd/declance.c | 2 +-
1427 drivers/net/ethernet/amd/sun3lance.c | 4 ++--
1428 drivers/net/ethernet/amd/sunlance.c | 2 +-
1429 drivers/net/ethernet/broadcom/bcm63xx_enet.c | 2 +-
1430 drivers/net/ethernet/davicom/dm9000.c | 2 +-
1431 drivers/net/ethernet/faraday/ftgmac100.c | 2 +-
1432 drivers/net/ethernet/faraday/ftmac100.c | 2 +-
1433 drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
1434 drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
1435 drivers/net/ethernet/freescale/gianfar.c | 4 ++--
1436 drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
1437 drivers/net/ethernet/i825xx/lib82596.c | 4 ++--
1438 drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +-
1439 drivers/net/ethernet/ibm/emac/core.c | 4 ++--
1440 drivers/net/ethernet/micrel/ks8695net.c | 2 +-
1441 drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
1442 drivers/net/ethernet/netx-eth.c | 2 +-
1443 drivers/net/ethernet/nuvoton/w90p910_ether.c | 2 +-
1444 drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
1445 drivers/net/ethernet/seeq/sgiseeq.c | 2 +-
1446 drivers/net/ethernet/sgi/ioc3-eth.c | 4 ++--
1447 drivers/net/ethernet/smsc/smc911x.c | 2 +-
1448 drivers/net/ethernet/smsc/smc91x.c | 2 +-
1449 drivers/net/ethernet/sun/sunbmac.c | 2 +-
1450 drivers/net/ethernet/sun/sunqe.c | 2 +-
1451 drivers/net/ethernet/sun/sunvnet.c | 10 +++++-----
1452 drivers/net/ethernet/ti/cpmac.c | 2 +-
1453 drivers/net/ethernet/ti/netcp_core.c | 2 +-
1454 drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
1455 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 2 +-
1456 drivers/net/xen-netback/interface.c | 2 +-
1457 drivers/net/xen-netfront.c | 2 +-
1458 40 files changed, 55 insertions(+), 50 deletions(-)
1459
1460 commit e5983fd19799feb3bf947cd0dc2b5435deee3332
1461 Merge: 5ecb84f a235ecd
1462 Author: Brad Spengler <spender@grsecurity.net>
1463 Date: Sat May 7 00:00:42 2016 -0400
1464
1465 Merge branch 'pax-test' into grsec-test
1466
1467 commit a235ecd8bdece417e83f9cf89c76607bf15955dc
1468 Author: Brad Spengler <spender@grsecurity.net>
1469 Date: Fri May 6 23:59:34 2016 -0400
1470
1471 Update to pax-linux-4.5.3-test3.patch:
1472 - fixed some more of PARAVIRT for RAP, reported by hunger
1473 - Emese increased the coverage of initify by marking up str* and mem* functions
1474 - added error reporting for refusing to load modules incompatible with KERNEXEC's 'or' method, reported by Martin Väth (https://bugs.gentoo.org/show_bug.cgi?id=581726)
1475
1476 arch/arm/include/asm/string.h | 10 ++---
1477 arch/arm64/include/asm/string.h | 22 +++++------
1478 arch/x86/boot/string.h | 4 +-
1479 arch/x86/include/asm/string_32.h | 20 +++++-----
1480 arch/x86/include/asm/string_64.h | 16 ++++----
1481 arch/x86/kernel/paravirt-spinlocks.c | 22 +++++++++--
1482 arch/x86/xen/mmu.c | 6 ++-
1483 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 ++---
1484 include/linux/string.h | 70 +++++++++++++++++-----------------
1485 include/linux/syscalls.h | 2 +-
1486 kernel/module.c | 4 +-
1487 mm/fadvise.c | 2 +-
1488 tools/gcc/randomize_layout_seed.h | 1 -
1489 tools/gcc/rap_plugin/rap_plugin.c | 7 +++-
1490 14 files changed, 109 insertions(+), 87 deletions(-)
1491
1492 commit 5ecb84f55a9bdf8b39054c23d90646ba0591ce1c
1493 Author: Brad Spengler <spender@grsecurity.net>
1494 Date: Fri May 6 08:51:58 2016 -0400
1495
1496 Remove !PARAVIRT dependency on RAP
1497
1498 security/Kconfig | 2 +-
1499 1 file changed, 1 insertion(+), 1 deletion(-)
1500
1501 commit eecd10d7c579d2601c384c1e9e0f062a8dda40e7
1502 Author: Brad Spengler <spender@grsecurity.net>
1503 Date: Fri May 6 06:34:48 2016 -0400
1504
1505 Update copyright year
1506
1507 tools/gcc/randomize_layout_plugin.c | 2 +-
1508 1 file changed, 1 insertion(+), 1 deletion(-)
1509
1510 commit 7d7e01439c2601abcae2ecfc66a883be258a2691
1511 Merge: 3315e83 c2aa83b
1512 Author: Brad Spengler <spender@grsecurity.net>
1513 Date: Fri May 6 06:34:25 2016 -0400
1514
1515 Merge branch 'pax-test' into grsec-test
1516
1517 commit c2aa83bf2d65989c262ff33312874ee7fe38606a
1518 Author: Brad Spengler <spender@grsecurity.net>
1519 Date: Fri May 6 06:34:04 2016 -0400
1520
1521 Update to pax-linux-4.5.2-test2.patch:
1522 - minipli fixed a few missing hunks left out from the 4.5 port
1523 - fixed a regression in handling user.pax.flags on tmpfs, reported by blueness and Stebalien (https://forums.grsecurity.net/viewtopic.php?f=3&t=4462)
1524 - fixed a few compile regressions on arm, reported by Wizzup
1525 - fixed PARAVIRT for RAP, reported by spender
1526 - fixed the very old PAGEEXEC/i386 TLB reload code for SMAP (not that it could work there), reported by spender
1527 - Emese fixed a false positive size overflow report caused by gcc-5 and newer, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4455)
1528
1529 arch/arm/Kconfig | 2 +-
1530 arch/arm/include/asm/domain.h | 2 +-
1531 arch/arm/kernel/process.c | 6 +
1532 arch/mips/mm/mmap.c | 27 ++++
1533 arch/powerpc/kernel/process.c | 39 +++++
1534 arch/s390/kernel/process.c | 13 ++
1535 arch/x86/entry/entry_32.S | 2 +-
1536 arch/x86/include/asm/fixmap.h | 2 +-
1537 arch/x86/kernel/paravirt.c | 90 +++++++++--
1538 arch/x86/mm/fault.c | 2 +
1539 arch/x86/mm/pgtable.c | 2 +-
1540 drivers/cpufreq/intel_pstate.c | 2 +-
1541 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 +-
1542 drivers/net/ethernet/8390/ax88796.c | 4 +-
1543 drivers/oprofile/oprofilefs.c | 4 +-
1544 drivers/platform/x86/thinkpad_acpi.c | 1 -
1545 fs/xattr.c | 2 +-
1546 include/asm-generic/atomic-long.h | 4 +
1547 include/uapi/linux/xattr.h | 3 +-
1548 kernel/module.c | 2 +-
1549 mm/shmem.c | 2 -
1550 security/Kconfig | 2 +
1551 .../insert_size_overflow_asm.c | 2 +-
1552 .../size_overflow_plugin/intentional_overflow.c | 80 ++++++++--
1553 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
1554 tools/gcc/size_overflow_plugin/size_overflow.h | 8 +-
1555 .../gcc/size_overflow_plugin/size_overflow_debug.c | 2 +-
1556 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 2 +-
1557 .../gcc/size_overflow_plugin/size_overflow_misc.c | 2 +-
1558 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
1559 .../size_overflow_plugin_hash.c | 2 +-
1560 .../size_overflow_plugin/size_overflow_transform.c | 34 ++---
1561 .../size_overflow_transform_core.c | 170 +++++++++++----------
1562 33 files changed, 370 insertions(+), 156 deletions(-)
1563
1564 commit 3315e83c1e9738784da3c1c5836dd13b7593a8f1
1565 Author: Brad Spengler <spender@grsecurity.net>
1566 Date: Wed May 4 21:03:36 2016 -0400
1567
1568 Add PAGEEXEC support for i386 !PAE on SMAP-capable processors
1569 (won't be used by anyone, just for correctness sake)
1570
1571 arch/x86/mm/fault.c | 2 ++
1572 1 file changed, 2 insertions(+)
1573
1574 commit b9e96108d2092c12e42e1810a62aec85f6ddc501
1575 Merge: 6d98323 a3273aa
1576 Author: Brad Spengler <spender@grsecurity.net>
1577 Date: Wed May 4 19:06:44 2016 -0400
1578
1579 Merge branch 'pax-test' into grsec-test
1580
1581 commit a3273aa2488f9e201620ee53af1acfd99c58650a
1582 Merge: e0e4c2c fbc310e
1583 Author: Brad Spengler <spender@grsecurity.net>
1584 Date: Wed May 4 19:06:36 2016 -0400
1585
1586 Merge branch 'linux-4.5.y' into pax-test
1587
1588 commit 6d98323e0b511bdb77b9ef11d84207219331ac69
1589 Author: Brad Spengler <spender@grsecurity.net>
1590 Date: Tue May 3 21:58:09 2016 -0400
1591
1592 Backport fix from http://www.spinics.net/lists/linux-usb/msg140243.html
1593
1594 drivers/usb/core/devio.c | 9 +++++----
1595 1 file changed, 5 insertions(+), 4 deletions(-)
1596
1597 commit b003c68f96dd6a483b515290756816b6c909f34f
1598 Author: Brad Spengler <spender@grsecurity.net>
1599 Date: Sun May 1 12:06:48 2016 -0400
1600
1601 Add note about RANDSTRUCT and the gcc runtime library exception
1602
1603 tools/gcc/randomize_layout_plugin.c | 5 +++++
1604 1 file changed, 5 insertions(+)
1605
1606 commit fe375f07d31c5d561fcca4016f7c33e885fa3586
1607 Author: Brad Spengler <spender@grsecurity.net>
1608 Date: Fri Apr 29 06:22:29 2016 -0400
1609
1610 Revert change to regmap_access_show()
1611
1612 drivers/base/regmap/regmap-debugfs.c | 3 +--
1613 1 file changed, 1 insertion(+), 2 deletions(-)
1614
1615 commit 3f5df6e7cf9716b4854fb282b6eb22cb1e52e92a
1616 Author: Brad Spengler <spender@grsecurity.net>
1617 Date: Fri Apr 29 06:20:12 2016 -0400
1618
1619 Merge a number of fixes from Mathias Krause
1620
1621 arch/x86/entry/entry_32.S | 2 +-
1622 drivers/base/regmap/regmap-debugfs.c | 3 ++-
1623 drivers/cpufreq/intel_pstate.c | 2 +-
1624 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 ++++++-
1625 drivers/oprofile/oprofilefs.c | 4 ++--
1626 drivers/platform/x86/thinkpad_acpi.c | 1 -
1627 init/Kconfig | 1 -
1628 kernel/module.c | 4 +---
1629 8 files changed, 13 insertions(+), 11 deletions(-)
1630
1631 commit 127927d7e57793eca299226cb31ecd9d235bbd62
1632 Author: Brad Spengler <spender@grsecurity.net>
1633 Date: Thu Apr 28 20:58:04 2016 -0400
1634
1635 Add temporary dependency on !PARAVIRT for RAP until some fallout can be fixed
1636
1637 security/Kconfig | 2 +-
1638 1 file changed, 1 insertion(+), 1 deletion(-)
1639
1640 commit d37fff4904eee095ce50ea522efbfaf2a4bcb47e
1641 Author: Brad Spengler <spender@grsecurity.net>
1642 Date: Thu Apr 28 18:44:18 2016 -0400
1643
1644 Update to pax-linux-4.5.2-test1y.patch
1645
1646 tools/gcc/rap_plugin/rap_plugin.c | 6 ++++--
1647 1 file changed, 4 insertions(+), 2 deletions(-)
1648
1649 commit 5e309719b190a24dccd73c8b6ae388bd7f34660b
1650 Merge: ac01f5e e0e4c2c
1651 Author: Brad Spengler <spender@grsecurity.net>
1652 Date: Thu Apr 28 17:37:37 2016 -0400
1653
1654 Merge branch 'pax-test' into grsec-test
1655
1656 commit e0e4c2ce05e0cd594b716a1e12d91928a0d083fd
1657 Author: Brad Spengler <spender@grsecurity.net>
1658 Date: Thu Apr 28 17:36:23 2016 -0400
1659
1660 Update to pax-linux-4.5.2-test1x.patch
1661
1662 arch/x86/include/asm/alternative-asm.h | 8 --------
1663 drivers/lguest/core.c | 2 +-
1664 kernel/sched/deadline.c | 4 ++--
1665 mm/swap.c | 7 ++++++-
1666 tools/gcc/colorize_plugin.c | 2 +-
1667 tools/gcc/gcc-common.h | 21 +++++++++++++++++++++
1668 6 files changed, 31 insertions(+), 13 deletions(-)
1669
1670 commit ac01f5eb279d93b10d63f87c9d851e039ab1bc3e
1671 Author: Brad Spengler <spender@grsecurity.net>
1672 Date: Thu Apr 28 17:35:14 2016 -0400
1673
1674 Initial import of grsecurity 3.1 for 4.5.2 with limited RAP support
1675
1676 Documentation/dontdiff | 2 +
1677 Documentation/kernel-parameters.txt | 11 +
1678 Documentation/sysctl/kernel.txt | 15 +
1679 Makefile | 5 +-
1680 arch/alpha/include/asm/cache.h | 4 +-
1681 arch/alpha/kernel/osf_sys.c | 12 +-
1682 arch/arc/Kconfig | 1 +
1683 arch/arm/Kconfig | 1 +
1684 arch/arm/Kconfig.debug | 1 +
1685 arch/arm/include/asm/thread_info.h | 7 +-
1686 arch/arm/kernel/entry-common.S | 8 +-
1687 arch/arm/kernel/process.c | 4 +-
1688 arch/arm/kernel/ptrace.c | 9 +
1689 arch/arm/kernel/traps.c | 7 +-
1690 arch/arm/mm/Kconfig | 4 +-
1691 arch/arm/mm/fault.c | 40 +-
1692 arch/arm/mm/mmap.c | 8 +-
1693 arch/arm/net/bpf_jit_32.c | 51 +-
1694 arch/arm64/Kconfig.debug | 1 +
1695 arch/avr32/include/asm/cache.h | 4 +-
1696 arch/blackfin/Kconfig.debug | 1 +
1697 arch/blackfin/include/asm/cache.h | 3 +-
1698 arch/cris/include/arch-v10/arch/cache.h | 3 +-
1699 arch/cris/include/arch-v32/arch/cache.h | 3 +-
1700 arch/frv/include/asm/cache.h | 3 +-
1701 arch/frv/mm/elf-fdpic.c | 4 +-
1702 arch/hexagon/include/asm/cache.h | 6 +-
1703 arch/ia64/Kconfig | 1 +
1704 arch/ia64/include/asm/cache.h | 3 +-
1705 arch/ia64/kernel/sys_ia64.c | 2 +
1706 arch/ia64/mm/hugetlbpage.c | 2 +
1707 arch/m32r/include/asm/cache.h | 4 +-
1708 arch/m68k/include/asm/cache.h | 4 +-
1709 arch/metag/mm/hugetlbpage.c | 1 +
1710 arch/microblaze/include/asm/cache.h | 3 +-
1711 arch/mips/Kconfig | 1 +
1712 arch/mips/include/asm/thread_info.h | 11 +-
1713 arch/mips/kernel/irq.c | 3 +
1714 arch/mips/kernel/ptrace.c | 9 +
1715 arch/mips/mm/mmap.c | 4 +-
1716 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
1717 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
1718 arch/nios2/lib/memset.c | 2 +-
1719 arch/openrisc/include/asm/cache.h | 4 +-
1720 arch/parisc/include/asm/cache.h | 3 +
1721 arch/parisc/kernel/sys_parisc.c | 4 +
1722 arch/powerpc/Kconfig | 1 +
1723 arch/powerpc/include/asm/cache.h | 4 +-
1724 arch/powerpc/include/asm/thread_info.h | 5 +-
1725 arch/powerpc/kernel/Makefile | 2 +
1726 arch/powerpc/kernel/irq.c | 3 +
1727 arch/powerpc/kernel/process.c | 10 +-
1728 arch/powerpc/kernel/ptrace.c | 14 +
1729 arch/powerpc/kernel/traps.c | 5 +
1730 arch/powerpc/mm/slice.c | 2 +-
1731 arch/s390/Kconfig.debug | 1 +
1732 arch/s390/include/asm/cache.h | 4 +-
1733 arch/score/include/asm/cache.h | 4 +-
1734 arch/sh/include/asm/cache.h | 3 +-
1735 arch/sh/mm/mmap.c | 6 +-
1736 arch/sparc/include/asm/cache.h | 4 +-
1737 arch/sparc/include/asm/pgalloc_64.h | 1 +
1738 arch/sparc/include/asm/thread_info_64.h | 8 +-
1739 arch/sparc/kernel/process_32.c | 6 +-
1740 arch/sparc/kernel/process_64.c | 8 +-
1741 arch/sparc/kernel/ptrace_64.c | 14 +
1742 arch/sparc/kernel/sys_sparc_64.c | 8 +-
1743 arch/sparc/kernel/syscalls.S | 8 +-
1744 arch/sparc/kernel/traps_32.c | 8 +-
1745 arch/sparc/kernel/traps_64.c | 28 +-
1746 arch/sparc/kernel/unaligned_64.c | 2 +-
1747 arch/sparc/mm/fault_64.c | 2 +-
1748 arch/sparc/mm/hugetlbpage.c | 15 +-
1749 arch/tile/Kconfig | 1 +
1750 arch/tile/include/asm/cache.h | 3 +-
1751 arch/tile/mm/hugetlbpage.c | 2 +
1752 arch/um/include/asm/cache.h | 3 +-
1753 arch/unicore32/include/asm/cache.h | 6 +-
1754 arch/x86/Kconfig | 21 +
1755 arch/x86/Kconfig.debug | 2 +
1756 arch/x86/crypto/sha-mb/sha1_mb.c | 4 +-
1757 arch/x86/entry/common.c | 14 +
1758 arch/x86/entry/entry_32.S | 2 +-
1759 arch/x86/entry/entry_64.S | 2 +-
1760 arch/x86/ia32/ia32_aout.c | 2 +
1761 arch/x86/include/asm/floppy.h | 20 +-
1762 arch/x86/include/asm/fpu/types.h | 69 +-
1763 arch/x86/include/asm/io.h | 2 +-
1764 arch/x86/include/asm/page.h | 12 +-
1765 arch/x86/include/asm/paravirt_types.h | 21 +-
1766 arch/x86/include/asm/processor.h | 12 +-
1767 arch/x86/include/asm/thread_info.h | 6 +-
1768 arch/x86/kernel/dumpstack.c | 10 +-
1769 arch/x86/kernel/dumpstack_32.c | 2 +-
1770 arch/x86/kernel/dumpstack_64.c | 2 +-
1771 arch/x86/kernel/ioport.c | 13 +
1772 arch/x86/kernel/irq_32.c | 3 +
1773 arch/x86/kernel/irq_64.c | 4 +
1774 arch/x86/kernel/ldt.c | 18 +
1775 arch/x86/kernel/msr.c | 10 +
1776 arch/x86/kernel/ptrace.c | 14 +
1777 arch/x86/kernel/signal.c | 9 +-
1778 arch/x86/kernel/sys_i386_32.c | 9 +-
1779 arch/x86/kernel/sys_x86_64.c | 8 +-
1780 arch/x86/kernel/traps.c | 5 +
1781 arch/x86/kernel/verify_cpu.S | 1 +
1782 arch/x86/kernel/vm86_32.c | 15 +
1783 arch/x86/mm/fault.c | 12 +-
1784 arch/x86/mm/hugetlbpage.c | 15 +-
1785 arch/x86/mm/init.c | 66 +-
1786 arch/x86/mm/init_32.c | 6 +-
1787 arch/x86/net/bpf_jit_comp.c | 4 +
1788 arch/x86/platform/efi/efi_64.c | 2 +-
1789 arch/x86/xen/Kconfig | 1 +
1790 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
1791 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
1792 crypto/scatterwalk.c | 10 +-
1793 drivers/acpi/acpica/hwxfsleep.c | 11 +-
1794 drivers/acpi/custom_method.c | 4 +
1795 drivers/block/cciss.h | 30 +-
1796 drivers/block/smart1,2.h | 40 +-
1797 drivers/cdrom/cdrom.c | 2 +-
1798 drivers/char/Kconfig | 4 +-
1799 drivers/char/genrtc.c | 1 +
1800 drivers/char/mem.c | 17 +
1801 drivers/char/random.c | 5 +-
1802 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
1803 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +
1804 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +
1805 drivers/crypto/marvell/cesa.h | 3 +-
1806 drivers/crypto/marvell/hash.c | 106 +-
1807 drivers/firewire/ohci.c | 4 +
1808 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 78 +-
1809 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
1810 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
1811 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
1812 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
1813 drivers/hid/hid-wiimote-debug.c | 2 +-
1814 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
1815 drivers/input/touchscreen/sur40.c | 21 +-
1816 drivers/iommu/Kconfig | 1 +
1817 drivers/iommu/amd_iommu.c | 14 +-
1818 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
1819 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
1820 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
1821 drivers/isdn/i4l/isdn_concap.c | 6 +-
1822 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
1823 drivers/lguest/core.c | 2 +-
1824 drivers/md/bcache/Kconfig | 1 +
1825 drivers/md/raid5.c | 8 +
1826 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
1827 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
1828 drivers/media/radio/radio-cadet.c | 5 +-
1829 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
1830 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
1831 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
1832 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
1833 drivers/message/fusion/mptbase.c | 9 +
1834 drivers/misc/sgi-xp/xp_main.c | 12 +-
1835 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
1836 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
1837 drivers/net/hyperv/hyperv_net.h | 7 +-
1838 drivers/net/hyperv/netvsc_drv.c | 5 +-
1839 drivers/net/hyperv/rndis_filter.c | 4 +-
1840 drivers/net/wan/lmc/lmc_media.c | 97 +-
1841 drivers/net/wan/z85230.c | 24 +-
1842 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
1843 drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 2 +-
1844 drivers/pci/proc.c | 9 +
1845 drivers/platform/x86/asus-wmi.c | 12 +
1846 drivers/rtc/rtc-dev.c | 3 +
1847 drivers/scsi/bfa/bfa_fcs.c | 19 +-
1848 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
1849 drivers/scsi/bfa/bfa_modules.h | 12 +-
1850 drivers/scsi/cxgbi/libcxgbi.c | 1 +
1851 drivers/scsi/hpsa.h | 40 +-
1852 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
1853 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
1854 drivers/staging/wilc1000/host_interface.h | 1 +
1855 drivers/staging/wilc1000/wilc_spi.c | 1 +
1856 drivers/tty/serial/uartlite.c | 4 +-
1857 drivers/tty/sysrq.c | 2 +-
1858 drivers/tty/tty_io.c | 4 +
1859 drivers/tty/vt/keyboard.c | 22 +-
1860 drivers/uio/uio.c | 6 +-
1861 drivers/usb/core/hub.c | 5 +
1862 drivers/usb/gadget/function/f_uac1.c | 1 +
1863 drivers/usb/gadget/function/u_uac1.c | 1 +
1864 drivers/usb/host/hwa-hc.c | 9 +-
1865 drivers/usb/usbip/usbip_common.c | 11 +
1866 drivers/usb/usbip/vhci_sysfs.c | 2 +-
1867 drivers/video/fbdev/arcfb.c | 2 +-
1868 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
1869 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
1870 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
1871 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
1872 drivers/xen/xenfs/xenstored.c | 5 +
1873 firmware/Makefile | 2 +
1874 firmware/WHENCE | 20 +-
1875 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
1876 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
1877 fs/attr.c | 4 +
1878 fs/autofs4/waitq.c | 9 +
1879 fs/binfmt_aout.c | 7 +
1880 fs/binfmt_elf.c | 40 +-
1881 fs/compat.c | 20 +-
1882 fs/coredump.c | 17 +-
1883 fs/dcache.c | 3 +
1884 fs/debugfs/inode.c | 19 +-
1885 fs/ecryptfs/keystore.c | 6 +-
1886 fs/exec.c | 235 +-
1887 fs/ext2/balloc.c | 4 +-
1888 fs/ext2/super.c | 8 +-
1889 fs/ext4/balloc.c | 4 +-
1890 fs/ext4/extents.c | 2 +-
1891 fs/fcntl.c | 4 +
1892 fs/fhandle.c | 3 +-
1893 fs/file.c | 4 +
1894 fs/filesystems.c | 4 +
1895 fs/fs_struct.c | 20 +-
1896 fs/hugetlbfs/inode.c | 5 +-
1897 fs/inode.c | 8 +-
1898 fs/kernfs/dir.c | 6 +
1899 fs/mount.h | 4 +-
1900 fs/namei.c | 295 +-
1901 fs/namespace.c | 24 +
1902 fs/nfsd/nfscache.c | 2 +-
1903 fs/open.c | 38 +
1904 fs/overlayfs/inode.c | 3 +
1905 fs/overlayfs/super.c | 6 +-
1906 fs/pipe.c | 2 +-
1907 fs/posix_acl.c | 15 +-
1908 fs/proc/Kconfig | 10 +-
1909 fs/proc/array.c | 67 +-
1910 fs/proc/base.c | 175 +-
1911 fs/proc/cmdline.c | 4 +
1912 fs/proc/devices.c | 4 +
1913 fs/proc/fd.c | 13 +-
1914 fs/proc/generic.c | 64 +
1915 fs/proc/inode.c | 17 +
1916 fs/proc/internal.h | 11 +-
1917 fs/proc/interrupts.c | 4 +
1918 fs/proc/kcore.c | 3 +
1919 fs/proc/proc_net.c | 31 +
1920 fs/proc/proc_sysctl.c | 52 +-
1921 fs/proc/root.c | 8 +
1922 fs/proc/stat.c | 69 +-
1923 fs/proc/task_mmu.c | 66 +-
1924 fs/readdir.c | 19 +
1925 fs/reiserfs/item_ops.c | 24 +-
1926 fs/reiserfs/super.c | 4 +
1927 fs/select.c | 2 +
1928 fs/seq_file.c | 30 +-
1929 fs/stat.c | 20 +-
1930 fs/sysfs/dir.c | 30 +-
1931 fs/utimes.c | 7 +
1932 fs/xattr.c | 26 +-
1933 grsecurity/Kconfig | 1205 ++++
1934 grsecurity/Makefile | 54 +
1935 grsecurity/gracl.c | 2757 +++++++++
1936 grsecurity/gracl_alloc.c | 105 +
1937 grsecurity/gracl_cap.c | 127 +
1938 grsecurity/gracl_compat.c | 269 +
1939 grsecurity/gracl_fs.c | 448 ++
1940 grsecurity/gracl_ip.c | 386 ++
1941 grsecurity/gracl_learn.c | 207 +
1942 grsecurity/gracl_policy.c | 1784 ++++++
1943 grsecurity/gracl_res.c | 68 +
1944 grsecurity/gracl_segv.c | 304 +
1945 grsecurity/gracl_shm.c | 40 +
1946 grsecurity/grsec_chdir.c | 19 +
1947 grsecurity/grsec_chroot.c | 506 ++
1948 grsecurity/grsec_disabled.c | 445 ++
1949 grsecurity/grsec_exec.c | 189 +
1950 grsecurity/grsec_fifo.c | 26 +
1951 grsecurity/grsec_fork.c | 23 +
1952 grsecurity/grsec_init.c | 294 +
1953 grsecurity/grsec_ipc.c | 48 +
1954 grsecurity/grsec_link.c | 65 +
1955 grsecurity/grsec_log.c | 340 +
1956 grsecurity/grsec_mem.c | 48 +
1957 grsecurity/grsec_mount.c | 65 +
1958 grsecurity/grsec_pax.c | 47 +
1959 grsecurity/grsec_proc.c | 20 +
1960 grsecurity/grsec_ptrace.c | 30 +
1961 grsecurity/grsec_sig.c | 245 +
1962 grsecurity/grsec_sock.c | 244 +
1963 grsecurity/grsec_sysctl.c | 497 ++
1964 grsecurity/grsec_time.c | 16 +
1965 grsecurity/grsec_tpe.c | 78 +
1966 grsecurity/grsec_tty.c | 18 +
1967 grsecurity/grsec_usb.c | 15 +
1968 grsecurity/grsum.c | 54 +
1969 include/linux/binfmts.h | 5 +-
1970 include/linux/capability.h | 13 +
1971 include/linux/compiler-gcc.h | 5 +
1972 include/linux/compiler.h | 8 +
1973 include/linux/cred.h | 8 +-
1974 include/linux/dcache.h | 5 +-
1975 include/linux/fs.h | 24 +-
1976 include/linux/fs_struct.h | 2 +-
1977 include/linux/fsnotify.h | 6 +
1978 include/linux/gracl.h | 342 ++
1979 include/linux/gracl_compat.h | 156 +
1980 include/linux/gralloc.h | 9 +
1981 include/linux/grdefs.h | 140 +
1982 include/linux/grinternal.h | 231 +
1983 include/linux/grmsg.h | 120 +
1984 include/linux/grsecurity.h | 259 +
1985 include/linux/grsock.h | 19 +
1986 include/linux/ipc.h | 2 +-
1987 include/linux/ipc_namespace.h | 2 +-
1988 include/linux/kallsyms.h | 18 +-
1989 include/linux/key-type.h | 4 +-
1990 include/linux/kmod.h | 5 +
1991 include/linux/kobject.h | 2 +-
1992 include/linux/lsm_hooks.h | 4 +-
1993 include/linux/mm.h | 12 +
1994 include/linux/mm_types.h | 4 +-
1995 include/linux/module.h | 5 +-
1996 include/linux/mount.h | 2 +-
1997 include/linux/msg.h | 2 +-
1998 include/linux/netfilter/xt_gradm.h | 9 +
1999 include/linux/path.h | 4 +-
2000 include/linux/perf_event.h | 13 +-
2001 include/linux/pid_namespace.h | 2 +-
2002 include/linux/printk.h | 2 +-
2003 include/linux/proc_fs.h | 22 +-
2004 include/linux/proc_ns.h | 2 +-
2005 include/linux/random.h | 2 +-
2006 include/linux/rbtree_augmented.h | 4 +-
2007 include/linux/scatterlist.h | 12 +-
2008 include/linux/sched.h | 114 +-
2009 include/linux/security.h | 1 +
2010 include/linux/sem.h | 2 +-
2011 include/linux/seq_file.h | 5 +
2012 include/linux/shm.h | 6 +-
2013 include/linux/skbuff.h | 3 +
2014 include/linux/slab.h | 9 -
2015 include/linux/sysctl.h | 8 +-
2016 include/linux/thread_info.h | 6 +-
2017 include/linux/tty.h | 2 +-
2018 include/linux/tty_driver.h | 4 +-
2019 include/linux/uidgid.h | 5 +
2020 include/linux/user_namespace.h | 2 +-
2021 include/linux/utsname.h | 2 +-
2022 include/linux/vermagic.h | 16 +-
2023 include/linux/vmalloc.h | 8 +
2024 include/net/af_unix.h | 2 +-
2025 include/net/ip.h | 2 +-
2026 include/net/neighbour.h | 2 +-
2027 include/net/net_namespace.h | 2 +-
2028 include/net/sctp/structs.h | 2 +-
2029 include/net/sock.h | 2 +-
2030 include/trace/events/fs.h | 53 +
2031 include/uapi/linux/personality.h | 1 +
2032 init/Kconfig | 4 +
2033 init/main.c | 46 +-
2034 ipc/mqueue.c | 1 +
2035 ipc/msg.c | 3 +-
2036 ipc/msgutil.c | 4 +-
2037 ipc/sem.c | 3 +-
2038 ipc/shm.c | 26 +-
2039 ipc/util.c | 6 +
2040 kernel/auditsc.c | 2 +-
2041 kernel/bpf/syscall.c | 10 +-
2042 kernel/bpf/verifier.c | 1 -
2043 kernel/capability.c | 41 +-
2044 kernel/cgroup.c | 5 +-
2045 kernel/compat.c | 1 +
2046 kernel/configs.c | 11 +
2047 kernel/cred.c | 112 +-
2048 kernel/events/core.c | 14 +-
2049 kernel/exit.c | 10 +-
2050 kernel/fork.c | 86 +-
2051 kernel/futex.c | 4 +-
2052 kernel/kallsyms.c | 9 +
2053 kernel/kcmp.c | 4 +
2054 kernel/kexec_core.c | 2 +-
2055 kernel/kmod.c | 96 +-
2056 kernel/kprobes.c | 9 +-
2057 kernel/ksysfs.c | 2 +
2058 kernel/locking/lockdep_proc.c | 10 +-
2059 kernel/module.c | 110 +-
2060 kernel/panic.c | 4 +-
2061 kernel/pid.c | 18 +-
2062 kernel/power/Kconfig | 2 +
2063 kernel/printk/printk.c | 7 +-
2064 kernel/ptrace.c | 50 +-
2065 kernel/resource.c | 10 +
2066 kernel/sched/core.c | 11 +-
2067 kernel/sched/debug.c | 4 +
2068 kernel/signal.c | 37 +-
2069 kernel/sys.c | 64 +-
2070 kernel/sysctl.c | 172 +-
2071 kernel/taskstats.c | 6 +
2072 kernel/time/posix-timers.c | 8 +
2073 kernel/time/time.c | 5 +
2074 kernel/time/timekeeping.c | 3 +
2075 kernel/time/timer_list.c | 13 +-
2076 kernel/time/timer_stats.c | 10 +-
2077 kernel/trace/Kconfig | 2 +
2078 kernel/trace/trace_syscalls.c | 8 +
2079 kernel/user_namespace.c | 15 +
2080 kernel/workqueue.c | 29 +
2081 lib/Kconfig.debug | 12 +-
2082 lib/Kconfig.kasan | 2 +-
2083 lib/is_single_threaded.c | 3 +
2084 lib/list_debug.c | 65 +-
2085 lib/nlattr.c | 2 +
2086 lib/rbtree.c | 4 +-
2087 lib/vsprintf.c | 39 +-
2088 localversion-grsec | 1 +
2089 mm/Kconfig | 8 +-
2090 mm/Kconfig.debug | 1 +
2091 mm/filemap.c | 8 +-
2092 mm/kmemleak.c | 4 +-
2093 mm/memory.c | 2 +-
2094 mm/mempolicy.c | 12 +-
2095 mm/migrate.c | 3 +-
2096 mm/mlock.c | 11 +-
2097 mm/mmap.c | 127 +-
2098 mm/mprotect.c | 8 +
2099 mm/oom_kill.c | 4 +
2100 mm/page_alloc.c | 2 +-
2101 mm/process_vm_access.c | 6 +
2102 mm/shmem.c | 2 +-
2103 mm/slab.c | 14 +-
2104 mm/slab_common.c | 2 +-
2105 mm/slob.c | 12 +
2106 mm/slub.c | 33 +-
2107 mm/swap.c | 6 +-
2108 mm/util.c | 3 +
2109 mm/vmalloc.c | 82 +-
2110 mm/vmstat.c | 29 +-
2111 net/appletalk/atalk_proc.c | 2 +-
2112 net/atm/lec.c | 6 +-
2113 net/atm/mpoa_caches.c | 43 +-
2114 net/bridge/netfilter/ebtables.c | 4 +
2115 net/can/bcm.c | 2 +-
2116 net/can/proc.c | 2 +-
2117 net/core/dev_ioctl.c | 7 +-
2118 net/core/filter.c | 8 +-
2119 net/core/net-procfs.c | 17 +-
2120 net/core/pktgen.c | 2 +-
2121 net/core/sock.c | 23 +-
2122 net/core/sysctl_net_core.c | 2 +-
2123 net/decnet/dn_dev.c | 2 +-
2124 net/ipv4/devinet.c | 6 +-
2125 net/ipv4/inet_hashtables.c | 4 +
2126 net/ipv4/ip_input.c | 7 +
2127 net/ipv4/ip_sockglue.c | 3 +-
2128 net/ipv4/netfilter/arp_tables.c | 43 +-
2129 net/ipv4/netfilter/ip_tables.c | 48 +-
2130 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
2131 net/ipv4/route.c | 6 +-
2132 net/ipv4/tcp_input.c | 6 +-
2133 net/ipv4/tcp_ipv4.c | 24 +-
2134 net/ipv4/tcp_minisocks.c | 9 +-
2135 net/ipv4/tcp_timer.c | 11 +
2136 net/ipv4/udp.c | 24 +
2137 net/ipv6/addrconf.c | 13 +-
2138 net/ipv6/netfilter/ip6_tables.c | 48 +-
2139 net/ipv6/proc.c | 2 +-
2140 net/ipv6/tcp_ipv6.c | 23 +-
2141 net/ipv6/udp.c | 7 +
2142 net/ipx/ipx_proc.c | 2 +-
2143 net/irda/irproc.c | 2 +-
2144 net/llc/llc_proc.c | 2 +-
2145 net/netfilter/Kconfig | 10 +
2146 net/netfilter/Makefile | 1 +
2147 net/netfilter/nf_conntrack_core.c | 8 +
2148 net/netfilter/xt_gradm.c | 51 +
2149 net/netfilter/xt_hashlimit.c | 4 +-
2150 net/netfilter/xt_recent.c | 2 +-
2151 net/packet/af_packet.c | 1 +
2152 net/sctp/bind_addr.c | 14 +-
2153 net/sctp/protocol.c | 1 +
2154 net/sctp/sm_make_chunk.c | 3 +-
2155 net/sctp/socket.c | 4 +-
2156 net/socket.c | 75 +-
2157 net/sunrpc/Kconfig | 1 +
2158 net/sunrpc/cache.c | 2 +-
2159 net/sunrpc/stats.c | 2 +-
2160 net/sysctl_net.c | 2 +-
2161 net/unix/af_unix.c | 52 +-
2162 net/vmw_vsock/vmci_transport_notify.c | 30 +-
2163 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
2164 net/x25/sysctl_net_x25.c | 2 +-
2165 net/x25/x25_proc.c | 2 +-
2166 scripts/package/Makefile | 2 +-
2167 scripts/package/mkspec | 41 +-
2168 security/Kconfig | 364 +-
2169 security/apparmor/file.c | 4 +-
2170 security/apparmor/lsm.c | 8 +-
2171 security/commoncap.c | 29 +
2172 security/keys/internal.h | 2 +-
2173 security/min_addr.c | 2 +
2174 security/tomoyo/file.c | 12 +-
2175 security/tomoyo/mount.c | 4 +
2176 security/tomoyo/tomoyo.c | 20 +-
2177 security/yama/Kconfig | 2 +-
2178 sound/synth/emux/emux_seq.c | 14 +-
2179 sound/usb/line6/driver.c | 40 +-
2180 sound/usb/line6/toneport.c | 12 +-
2181 tools/gcc/.gitignore | 1 +
2182 tools/gcc/Makefile | 12 +
2183 tools/gcc/gen-random-seed.sh | 8 +
2184 tools/gcc/randomize_layout_plugin.c | 935 +++
2185 tools/gcc/randomize_layout_seed.h | 1 -
2186 .../size_overflow_plugin/size_overflow_hash.data | 202 +-
2187 511 files changed, 32630 insertions(+), 3134 deletions(-)
2188
2189 commit a89837d0fc99aab94b5c8b975215de260271c1f7
2190 Author: Brad Spengler <spender@grsecurity.net>
2191 Date: Wed Apr 27 20:43:37 2016 -0400
2192
2193 Initial port of PaX to 4.5.2 with a limited form of RAP
2194 (< 1/5th the total size of the full developed RAP plugin)
2195 No retaddr protection via XOR canary
2196 No C++ support
2197 No LTO support
2198 Removal of a few optimization passes
2199 No compile time reporting of bad fptr casts
2200
2201 The RAP plugin should therefore be used only to compile an
2202 appropriate vanilla kernel with this patch.
2203
2204 Documentation/dontdiff | 46 +-
2205 Documentation/kbuild/makefiles.txt | 39 +-
2206 Documentation/kernel-parameters.txt | 28 +
2207 Makefile | 52 +-
2208 arch/alpha/include/asm/atomic.h | 10 +
2209 arch/alpha/include/asm/elf.h | 7 +
2210 arch/alpha/include/asm/pgalloc.h | 6 +
2211 arch/alpha/include/asm/pgtable.h | 11 +
2212 arch/alpha/kernel/module.c | 2 +-
2213 arch/alpha/kernel/osf_sys.c | 8 +-
2214 arch/alpha/mm/fault.c | 141 +-
2215 arch/arm/Kconfig | 3 +-
2216 arch/arm/include/asm/atomic.h | 323 +-
2217 arch/arm/include/asm/cache.h | 5 +-
2218 arch/arm/include/asm/cacheflush.h | 2 +-
2219 arch/arm/include/asm/checksum.h | 14 +-
2220 arch/arm/include/asm/cmpxchg.h | 4 +
2221 arch/arm/include/asm/cpuidle.h | 2 +-
2222 arch/arm/include/asm/domain.h | 42 +-
2223 arch/arm/include/asm/elf.h | 9 +-
2224 arch/arm/include/asm/fncpy.h | 2 +
2225 arch/arm/include/asm/futex.h | 1 +
2226 arch/arm/include/asm/kmap_types.h | 2 +-
2227 arch/arm/include/asm/mach/dma.h | 2 +-
2228 arch/arm/include/asm/mach/map.h | 16 +-
2229 arch/arm/include/asm/outercache.h | 2 +-
2230 arch/arm/include/asm/page.h | 3 +-
2231 arch/arm/include/asm/pgalloc.h | 20 +
2232 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
2233 arch/arm/include/asm/pgtable-2level.h | 3 +
2234 arch/arm/include/asm/pgtable-3level.h | 3 +
2235 arch/arm/include/asm/pgtable.h | 54 +-
2236 arch/arm/include/asm/smp.h | 2 +-
2237 arch/arm/include/asm/thread_info.h | 3 +
2238 arch/arm/include/asm/tls.h | 3 +
2239 arch/arm/include/asm/uaccess.h | 113 +-
2240 arch/arm/include/uapi/asm/ptrace.h | 2 +-
2241 arch/arm/kernel/armksyms.c | 2 +-
2242 arch/arm/kernel/cpuidle.c | 2 +-
2243 arch/arm/kernel/entry-armv.S | 109 +-
2244 arch/arm/kernel/entry-common.S | 40 +-
2245 arch/arm/kernel/entry-header.S | 55 +
2246 arch/arm/kernel/fiq.c | 3 +
2247 arch/arm/kernel/module-plts.c | 7 +-
2248 arch/arm/kernel/module.c | 38 +-
2249 arch/arm/kernel/patch.c | 2 +
2250 arch/arm/kernel/process.c | 92 +-
2251 arch/arm/kernel/reboot.c | 1 +
2252 arch/arm/kernel/setup.c | 20 +-
2253 arch/arm/kernel/signal.c | 35 +-
2254 arch/arm/kernel/smp.c | 2 +-
2255 arch/arm/kernel/tcm.c | 4 +-
2256 arch/arm/kernel/vmlinux.lds.S | 6 +-
2257 arch/arm/kvm/arm.c | 8 +-
2258 arch/arm/lib/copy_page.S | 1 +
2259 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2260 arch/arm/lib/delay.c | 2 +-
2261 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
2262 arch/arm/mach-exynos/suspend.c | 6 +-
2263 arch/arm/mach-mvebu/coherency.c | 4 +-
2264 arch/arm/mach-omap2/board-n8x0.c | 2 +-
2265 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
2266 arch/arm/mach-omap2/omap-smp.c | 1 +
2267 arch/arm/mach-omap2/omap_device.c | 4 +-
2268 arch/arm/mach-omap2/omap_device.h | 4 +-
2269 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2270 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2271 arch/arm/mach-omap2/wd_timer.c | 6 +-
2272 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
2273 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
2274 arch/arm/mach-tegra/irq.c | 1 +
2275 arch/arm/mach-ux500/pm.c | 1 +
2276 arch/arm/mach-zynq/platsmp.c | 1 +
2277 arch/arm/mm/Kconfig | 6 +-
2278 arch/arm/mm/cache-l2x0.c | 2 +-
2279 arch/arm/mm/context.c | 10 +-
2280 arch/arm/mm/fault.c | 146 +
2281 arch/arm/mm/fault.h | 12 +
2282 arch/arm/mm/init.c | 39 +
2283 arch/arm/mm/ioremap.c | 4 +-
2284 arch/arm/mm/mmap.c | 36 +-
2285 arch/arm/mm/mmu.c | 162 +-
2286 arch/arm/net/bpf_jit_32.c | 3 +
2287 arch/arm/plat-iop/setup.c | 2 +-
2288 arch/arm/plat-omap/sram.c | 2 +
2289 arch/arm64/include/asm/atomic.h | 10 +
2290 arch/arm64/include/asm/percpu.h | 8 +-
2291 arch/arm64/include/asm/pgalloc.h | 5 +
2292 arch/arm64/include/asm/uaccess.h | 1 +
2293 arch/arm64/mm/dma-mapping.c | 2 +-
2294 arch/avr32/include/asm/elf.h | 8 +-
2295 arch/avr32/include/asm/kmap_types.h | 4 +-
2296 arch/avr32/mm/fault.c | 27 +
2297 arch/frv/include/asm/atomic.h | 10 +
2298 arch/frv/include/asm/kmap_types.h | 2 +-
2299 arch/frv/mm/elf-fdpic.c | 3 +-
2300 arch/ia64/Makefile | 1 +
2301 arch/ia64/include/asm/atomic.h | 10 +
2302 arch/ia64/include/asm/elf.h | 7 +
2303 arch/ia64/include/asm/pgalloc.h | 12 +
2304 arch/ia64/include/asm/pgtable.h | 13 +-
2305 arch/ia64/include/asm/spinlock.h | 2 +-
2306 arch/ia64/include/asm/uaccess.h | 27 +-
2307 arch/ia64/kernel/module.c | 20 +-
2308 arch/ia64/kernel/palinfo.c | 2 +-
2309 arch/ia64/kernel/sys_ia64.c | 7 +
2310 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2311 arch/ia64/mm/fault.c | 32 +-
2312 arch/ia64/mm/init.c | 15 +-
2313 arch/m32r/lib/usercopy.c | 6 +
2314 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
2315 arch/mips/include/asm/atomic.h | 372 +-
2316 arch/mips/include/asm/cache.h | 3 +-
2317 arch/mips/include/asm/elf.h | 7 +
2318 arch/mips/include/asm/exec.h | 2 +-
2319 arch/mips/include/asm/hw_irq.h | 2 +-
2320 arch/mips/include/asm/local.h | 57 +
2321 arch/mips/include/asm/page.h | 2 +-
2322 arch/mips/include/asm/pgalloc.h | 5 +
2323 arch/mips/include/asm/pgtable.h | 3 +
2324 arch/mips/include/asm/uaccess.h | 1 +
2325 arch/mips/kernel/binfmt_elfn32.c | 7 +
2326 arch/mips/kernel/binfmt_elfo32.c | 7 +
2327 arch/mips/kernel/irq-gt641xx.c | 2 +-
2328 arch/mips/kernel/irq.c | 6 +-
2329 arch/mips/kernel/pm-cps.c | 2 +-
2330 arch/mips/kernel/process.c | 12 -
2331 arch/mips/kernel/sync-r4k.c | 24 +-
2332 arch/mips/kernel/traps.c | 13 +-
2333 arch/mips/lib/ashldi3.c | 21 +-
2334 arch/mips/lib/ashrdi3.c | 19 +-
2335 arch/mips/lib/libgcc.h | 12 +-
2336 arch/mips/mm/fault.c | 25 +
2337 arch/mips/mm/init.c | 4 +-
2338 arch/mips/mm/mmap.c | 51 +-
2339 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2340 arch/mips/sni/rm200.c | 2 +-
2341 arch/mips/vr41xx/common/icu.c | 2 +-
2342 arch/mips/vr41xx/common/irq.c | 4 +-
2343 arch/parisc/include/asm/atomic.h | 10 +
2344 arch/parisc/include/asm/elf.h | 7 +
2345 arch/parisc/include/asm/pgalloc.h | 6 +
2346 arch/parisc/include/asm/pgtable.h | 11 +
2347 arch/parisc/include/asm/uaccess.h | 4 +-
2348 arch/parisc/kernel/module.c | 26 +-
2349 arch/parisc/kernel/sys_parisc.c | 15 +
2350 arch/parisc/kernel/traps.c | 4 +-
2351 arch/parisc/mm/fault.c | 140 +-
2352 arch/powerpc/include/asm/atomic.h | 329 +-
2353 arch/powerpc/include/asm/book3s/32/hash.h | 1 +
2354 arch/powerpc/include/asm/elf.h | 12 +
2355 arch/powerpc/include/asm/exec.h | 2 +-
2356 arch/powerpc/include/asm/kmap_types.h | 2 +-
2357 arch/powerpc/include/asm/local.h | 46 +
2358 arch/powerpc/include/asm/mman.h | 2 +-
2359 arch/powerpc/include/asm/page.h | 8 +-
2360 arch/powerpc/include/asm/page_64.h | 7 +-
2361 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2362 arch/powerpc/include/asm/pgtable.h | 1 +
2363 arch/powerpc/include/asm/reg.h | 1 +
2364 arch/powerpc/include/asm/smp.h | 2 +-
2365 arch/powerpc/include/asm/spinlock.h | 42 +-
2366 arch/powerpc/include/asm/uaccess.h | 141 +-
2367 arch/powerpc/kernel/Makefile | 5 +
2368 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2369 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2370 arch/powerpc/kernel/module_32.c | 15 +-
2371 arch/powerpc/kernel/process.c | 46 -
2372 arch/powerpc/kernel/signal_32.c | 2 +-
2373 arch/powerpc/kernel/signal_64.c | 2 +-
2374 arch/powerpc/kernel/traps.c | 21 +
2375 arch/powerpc/kernel/vdso.c | 5 +-
2376 arch/powerpc/lib/usercopy_64.c | 18 -
2377 arch/powerpc/mm/fault.c | 56 +-
2378 arch/powerpc/mm/mmap.c | 16 +
2379 arch/powerpc/mm/slice.c | 21 +-
2380 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
2381 arch/s390/include/asm/atomic.h | 10 +
2382 arch/s390/include/asm/elf.h | 7 +
2383 arch/s390/include/asm/exec.h | 2 +-
2384 arch/s390/include/asm/uaccess.h | 13 +-
2385 arch/s390/kernel/module.c | 22 +-
2386 arch/s390/kernel/process.c | 20 -
2387 arch/s390/mm/mmap.c | 22 +-
2388 arch/score/include/asm/exec.h | 2 +-
2389 arch/score/kernel/process.c | 5 -
2390 arch/sh/mm/mmap.c | 28 +-
2391 arch/sparc/include/asm/atomic_64.h | 110 +-
2392 arch/sparc/include/asm/cache.h | 2 +-
2393 arch/sparc/include/asm/elf_32.h | 7 +
2394 arch/sparc/include/asm/elf_64.h | 7 +
2395 arch/sparc/include/asm/pgalloc_32.h | 1 +
2396 arch/sparc/include/asm/pgalloc_64.h | 1 +
2397 arch/sparc/include/asm/pgtable.h | 4 +
2398 arch/sparc/include/asm/pgtable_32.h | 15 +-
2399 arch/sparc/include/asm/pgtsrmmu.h | 5 +
2400 arch/sparc/include/asm/setup.h | 4 +-
2401 arch/sparc/include/asm/spinlock_64.h | 35 +-
2402 arch/sparc/include/asm/thread_info_32.h | 1 +
2403 arch/sparc/include/asm/thread_info_64.h | 2 +
2404 arch/sparc/include/asm/uaccess.h | 1 +
2405 arch/sparc/include/asm/uaccess_32.h | 28 +-
2406 arch/sparc/include/asm/uaccess_64.h | 24 +-
2407 arch/sparc/kernel/Makefile | 2 +-
2408 arch/sparc/kernel/prom_common.c | 2 +-
2409 arch/sparc/kernel/smp_64.c | 8 +-
2410 arch/sparc/kernel/sys_sparc_32.c | 2 +-
2411 arch/sparc/kernel/sys_sparc_64.c | 58 +-
2412 arch/sparc/kernel/traps_64.c | 27 +-
2413 arch/sparc/lib/Makefile | 2 +-
2414 arch/sparc/lib/atomic_64.S | 57 +-
2415 arch/sparc/lib/ksyms.c | 6 +-
2416 arch/sparc/mm/Makefile | 2 +-
2417 arch/sparc/mm/fault_32.c | 292 +
2418 arch/sparc/mm/fault_64.c | 486 +
2419 arch/sparc/mm/hugetlbpage.c | 30 +-
2420 arch/sparc/mm/init_64.c | 10 +-
2421 arch/tile/include/asm/atomic_64.h | 10 +
2422 arch/tile/include/asm/uaccess.h | 4 +-
2423 arch/um/Makefile | 4 +
2424 arch/um/include/asm/kmap_types.h | 2 +-
2425 arch/um/include/asm/page.h | 3 +
2426 arch/um/include/asm/pgtable-3level.h | 1 +
2427 arch/um/kernel/process.c | 16 -
2428 arch/x86/Kconfig | 26 +-
2429 arch/x86/Kconfig.cpu | 6 +-
2430 arch/x86/Kconfig.debug | 4 +-
2431 arch/x86/Makefile | 13 +-
2432 arch/x86/boot/Makefile | 3 +
2433 arch/x86/boot/bitops.h | 4 +-
2434 arch/x86/boot/boot.h | 2 +-
2435 arch/x86/boot/compressed/Makefile | 20 +
2436 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
2437 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
2438 arch/x86/boot/compressed/head_32.S | 4 +-
2439 arch/x86/boot/compressed/head_64.S | 12 +-
2440 arch/x86/boot/compressed/misc.c | 11 +-
2441 arch/x86/boot/cpucheck.c | 16 +-
2442 arch/x86/boot/header.S | 6 +-
2443 arch/x86/boot/memory.c | 2 +-
2444 arch/x86/boot/video-vesa.c | 1 +
2445 arch/x86/boot/video.c | 2 +-
2446 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
2447 arch/x86/crypto/aesni-intel_asm.S | 110 +-
2448 arch/x86/crypto/aesni-intel_glue.c | 4 +-
2449 arch/x86/crypto/blowfish-x86_64-asm_64.S | 11 +-
2450 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 22 +-
2451 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 22 +-
2452 arch/x86/crypto/camellia-x86_64-asm_64.S | 11 +-
2453 arch/x86/crypto/camellia_aesni_avx2_glue.c | 18 +-
2454 arch/x86/crypto/camellia_aesni_avx_glue.c | 18 +-
2455 arch/x86/crypto/camellia_glue.c | 8 +-
2456 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 55 +-
2457 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 37 +-
2458 arch/x86/crypto/cast6_avx_glue.c | 16 +-
2459 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
2460 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
2461 arch/x86/crypto/glue_helper.c | 2 +-
2462 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
2463 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 21 +-
2464 arch/x86/crypto/serpent-avx2-asm_64.S | 21 +-
2465 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
2466 arch/x86/crypto/serpent_avx2_glue.c | 14 +-
2467 arch/x86/crypto/serpent_avx_glue.c | 18 +-
2468 arch/x86/crypto/serpent_sse2_glue.c | 4 +-
2469 arch/x86/crypto/sha1_ssse3_asm.S | 13 +-
2470 arch/x86/crypto/sha1_ssse3_glue.c | 56 +-
2471 arch/x86/crypto/sha256-avx-asm.S | 5 +-
2472 arch/x86/crypto/sha256-avx2-asm.S | 5 +-
2473 arch/x86/crypto/sha256-ssse3-asm.S | 6 +-
2474 arch/x86/crypto/sha256_ssse3_glue.c | 26 +-
2475 arch/x86/crypto/sha512-avx-asm.S | 5 +-
2476 arch/x86/crypto/sha512-avx2-asm.S | 5 +-
2477 arch/x86/crypto/sha512-ssse3-asm.S | 5 +-
2478 arch/x86/crypto/sha512_ssse3_glue.c | 22 +-
2479 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 37 +-
2480 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
2481 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 6 +-
2482 arch/x86/crypto/twofish-x86_64-asm_64.S | 7 +-
2483 arch/x86/crypto/twofish_avx_glue.c | 21 +-
2484 arch/x86/crypto/twofish_glue.c | 4 +-
2485 arch/x86/crypto/twofish_glue_3way.c | 12 +-
2486 arch/x86/entry/Makefile | 2 +
2487 arch/x86/entry/calling.h | 86 +-
2488 arch/x86/entry/common.c | 70 +-
2489 arch/x86/entry/entry_32.S | 311 +-
2490 arch/x86/entry/entry_64.S | 629 +-
2491 arch/x86/entry/entry_64_compat.S | 115 +-
2492 arch/x86/entry/thunk_64.S | 2 +
2493 arch/x86/entry/vdso/Makefile | 5 +-
2494 arch/x86/entry/vdso/vclock_gettime.c | 2 +-
2495 arch/x86/entry/vdso/vdso2c.h | 8 +-
2496 arch/x86/entry/vdso/vma.c | 37 +-
2497 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
2498 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
2499 arch/x86/ia32/ia32_signal.c | 23 +-
2500 arch/x86/ia32/sys_ia32.c | 42 +-
2501 arch/x86/include/asm/alternative-asm.h | 51 +-
2502 arch/x86/include/asm/alternative.h | 4 +-
2503 arch/x86/include/asm/apic.h | 2 +-
2504 arch/x86/include/asm/apm.h | 4 +-
2505 arch/x86/include/asm/atomic.h | 230 +-
2506 arch/x86/include/asm/atomic64_32.h | 100 +
2507 arch/x86/include/asm/atomic64_64.h | 164 +-
2508 arch/x86/include/asm/bitops.h | 18 +-
2509 arch/x86/include/asm/boot.h | 2 +-
2510 arch/x86/include/asm/cache.h | 5 +-
2511 arch/x86/include/asm/checksum_32.h | 12 +-
2512 arch/x86/include/asm/cmpxchg.h | 39 +
2513 arch/x86/include/asm/compat.h | 4 +
2514 arch/x86/include/asm/cpufeature.h | 16 +-
2515 arch/x86/include/asm/crypto/camellia.h | 30 +-
2516 arch/x86/include/asm/crypto/glue_helper.h | 10 +-
2517 arch/x86/include/asm/crypto/serpent-avx.h | 18 +-
2518 arch/x86/include/asm/crypto/serpent-sse2.h | 8 +-
2519 arch/x86/include/asm/crypto/twofish.h | 10 +-
2520 arch/x86/include/asm/desc.h | 78 +-
2521 arch/x86/include/asm/desc_defs.h | 6 +
2522 arch/x86/include/asm/div64.h | 2 +-
2523 arch/x86/include/asm/dma.h | 2 +
2524 arch/x86/include/asm/elf.h | 33 +-
2525 arch/x86/include/asm/emergency-restart.h | 2 +-
2526 arch/x86/include/asm/fpu/internal.h | 38 +-
2527 arch/x86/include/asm/fpu/types.h | 5 +-
2528 arch/x86/include/asm/futex.h | 14 +-
2529 arch/x86/include/asm/hw_irq.h | 4 +-
2530 arch/x86/include/asm/hypervisor.h | 2 +-
2531 arch/x86/include/asm/i8259.h | 2 +-
2532 arch/x86/include/asm/io.h | 22 +-
2533 arch/x86/include/asm/irqflags.h | 5 +
2534 arch/x86/include/asm/kprobes.h | 9 +-
2535 arch/x86/include/asm/kvm_emulate.h | 7 +-
2536 arch/x86/include/asm/local.h | 106 +-
2537 arch/x86/include/asm/mman.h | 15 +
2538 arch/x86/include/asm/mmu.h | 14 +-
2539 arch/x86/include/asm/mmu_context.h | 133 +-
2540 arch/x86/include/asm/module.h | 23 +-
2541 arch/x86/include/asm/nmi.h | 19 +-
2542 arch/x86/include/asm/page.h | 1 +
2543 arch/x86/include/asm/page_32.h | 12 +-
2544 arch/x86/include/asm/page_64.h | 14 +-
2545 arch/x86/include/asm/paravirt.h | 46 +-
2546 arch/x86/include/asm/paravirt_types.h | 13 +-
2547 arch/x86/include/asm/pgalloc.h | 23 +
2548 arch/x86/include/asm/pgtable-2level.h | 2 +
2549 arch/x86/include/asm/pgtable-3level.h | 7 +
2550 arch/x86/include/asm/pgtable.h | 126 +-
2551 arch/x86/include/asm/pgtable_32.h | 14 +-
2552 arch/x86/include/asm/pgtable_32_types.h | 24 +-
2553 arch/x86/include/asm/pgtable_64.h | 23 +-
2554 arch/x86/include/asm/pgtable_64_types.h | 5 +
2555 arch/x86/include/asm/pgtable_types.h | 27 +-
2556 arch/x86/include/asm/pmem.h | 2 +-
2557 arch/x86/include/asm/preempt.h | 2 +-
2558 arch/x86/include/asm/processor.h | 57 +-
2559 arch/x86/include/asm/ptrace.h | 15 +-
2560 arch/x86/include/asm/realmode.h | 4 +-
2561 arch/x86/include/asm/reboot.h | 10 +-
2562 arch/x86/include/asm/rmwcc.h | 84 +-
2563 arch/x86/include/asm/rwsem.h | 60 +-
2564 arch/x86/include/asm/segment.h | 27 +-
2565 arch/x86/include/asm/smap.h | 43 +
2566 arch/x86/include/asm/smp.h | 14 +-
2567 arch/x86/include/asm/stackprotector.h | 4 +-
2568 arch/x86/include/asm/stacktrace.h | 34 +-
2569 arch/x86/include/asm/switch_to.h | 4 +-
2570 arch/x86/include/asm/sys_ia32.h | 6 +-
2571 arch/x86/include/asm/thread_info.h | 27 +-
2572 arch/x86/include/asm/tlbflush.h | 77 +-
2573 arch/x86/include/asm/traps.h | 4 +-
2574 arch/x86/include/asm/uaccess.h | 210 +-
2575 arch/x86/include/asm/uaccess_32.h | 28 +-
2576 arch/x86/include/asm/uaccess_64.h | 169 +-
2577 arch/x86/include/asm/word-at-a-time.h | 2 +-
2578 arch/x86/include/asm/x86_init.h | 10 +-
2579 arch/x86/include/asm/xen/page.h | 2 +-
2580 arch/x86/include/uapi/asm/e820.h | 2 +-
2581 arch/x86/kernel/Makefile | 2 +-
2582 arch/x86/kernel/acpi/boot.c | 4 +-
2583 arch/x86/kernel/acpi/sleep.c | 4 +
2584 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
2585 arch/x86/kernel/alternative.c | 124 +-
2586 arch/x86/kernel/apic/apic.c | 4 +-
2587 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
2588 arch/x86/kernel/apic/apic_noop.c | 2 +-
2589 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
2590 arch/x86/kernel/apic/io_apic.c | 10 +-
2591 arch/x86/kernel/apic/msi.c | 2 +-
2592 arch/x86/kernel/apic/probe_32.c | 4 +-
2593 arch/x86/kernel/apic/vector.c | 2 +
2594 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
2595 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
2596 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
2597 arch/x86/kernel/apm_32.c | 21 +-
2598 arch/x86/kernel/asm-offsets.c | 20 +
2599 arch/x86/kernel/asm-offsets_64.c | 1 +
2600 arch/x86/kernel/cpu/Makefile | 4 -
2601 arch/x86/kernel/cpu/amd.c | 2 +-
2602 arch/x86/kernel/cpu/bugs_64.c | 2 +
2603 arch/x86/kernel/cpu/common.c | 202 +-
2604 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
2605 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
2606 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
2607 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
2608 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
2609 arch/x86/kernel/cpu/mshyperv.c | 2 +-
2610 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2611 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
2612 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
2613 arch/x86/kernel/cpu/perf_event.c | 10 +-
2614 arch/x86/kernel/cpu/perf_event.h | 2 +-
2615 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 8 +-
2616 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
2617 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
2618 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
2619 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
2620 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
2621 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
2622 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 8 +-
2623 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 6 +-
2624 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 14 +-
2625 arch/x86/kernel/cpu/vmware.c | 2 +-
2626 arch/x86/kernel/crash_dump_64.c | 2 +-
2627 arch/x86/kernel/doublefault.c | 8 +-
2628 arch/x86/kernel/dumpstack.c | 24 +-
2629 arch/x86/kernel/dumpstack_32.c | 25 +-
2630 arch/x86/kernel/dumpstack_64.c | 72 +-
2631 arch/x86/kernel/e820.c | 4 +-
2632 arch/x86/kernel/early_printk.c | 1 +
2633 arch/x86/kernel/espfix_64.c | 44 +-
2634 arch/x86/kernel/fpu/core.c | 24 +-
2635 arch/x86/kernel/fpu/init.c | 49 +-
2636 arch/x86/kernel/fpu/regset.c | 22 +-
2637 arch/x86/kernel/fpu/signal.c | 20 +-
2638 arch/x86/kernel/fpu/xstate.c | 6 +-
2639 arch/x86/kernel/ftrace.c | 18 +-
2640 arch/x86/kernel/head64.c | 14 +-
2641 arch/x86/kernel/head_32.S | 237 +-
2642 arch/x86/kernel/head_64.S | 173 +-
2643 arch/x86/kernel/i386_ksyms_32.c | 12 +
2644 arch/x86/kernel/i8259.c | 10 +-
2645 arch/x86/kernel/io_delay.c | 2 +-
2646 arch/x86/kernel/ioport.c | 2 +-
2647 arch/x86/kernel/irq.c | 8 +-
2648 arch/x86/kernel/irq_32.c | 45 +-
2649 arch/x86/kernel/jump_label.c | 10 +-
2650 arch/x86/kernel/kgdb.c | 21 +-
2651 arch/x86/kernel/kprobes/core.c | 28 +-
2652 arch/x86/kernel/kprobes/opt.c | 16 +-
2653 arch/x86/kernel/ksysfs.c | 2 +-
2654 arch/x86/kernel/kvm.c | 2 +-
2655 arch/x86/kernel/kvmclock.c | 20 +-
2656 arch/x86/kernel/ldt.c | 25 +
2657 arch/x86/kernel/livepatch.c | 9 +-
2658 arch/x86/kernel/machine_kexec_32.c | 6 +-
2659 arch/x86/kernel/mcount_64.S | 21 +-
2660 arch/x86/kernel/module.c | 78 +-
2661 arch/x86/kernel/msr.c | 2 +-
2662 arch/x86/kernel/nmi.c | 34 +-
2663 arch/x86/kernel/nmi_selftest.c | 4 +-
2664 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
2665 arch/x86/kernel/paravirt.c | 43 +-
2666 arch/x86/kernel/paravirt_patch_64.c | 8 +
2667 arch/x86/kernel/pci-calgary_64.c | 2 +-
2668 arch/x86/kernel/pci-iommu_table.c | 2 +-
2669 arch/x86/kernel/pci-swiotlb.c | 2 +-
2670 arch/x86/kernel/process.c | 80 +-
2671 arch/x86/kernel/process_32.c | 29 +-
2672 arch/x86/kernel/process_64.c | 14 +-
2673 arch/x86/kernel/ptrace.c | 20 +-
2674 arch/x86/kernel/pvclock.c | 8 +-
2675 arch/x86/kernel/reboot.c | 44 +-
2676 arch/x86/kernel/reboot_fixups_32.c | 2 +-
2677 arch/x86/kernel/relocate_kernel_64.S | 3 +-
2678 arch/x86/kernel/setup.c | 29 +-
2679 arch/x86/kernel/setup_percpu.c | 29 +-
2680 arch/x86/kernel/signal.c | 17 +-
2681 arch/x86/kernel/smp.c | 2 +-
2682 arch/x86/kernel/smpboot.c | 29 +-
2683 arch/x86/kernel/step.c | 6 +-
2684 arch/x86/kernel/sys_i386_32.c | 184 +
2685 arch/x86/kernel/sys_x86_64.c | 28 +-
2686 arch/x86/kernel/tboot.c | 22 +-
2687 arch/x86/kernel/time.c | 8 +-
2688 arch/x86/kernel/tls.c | 7 +-
2689 arch/x86/kernel/tracepoint.c | 4 +-
2690 arch/x86/kernel/traps.c | 64 +-
2691 arch/x86/kernel/tsc.c | 2 +-
2692 arch/x86/kernel/uprobes.c | 4 +-
2693 arch/x86/kernel/vm86_32.c | 6 +-
2694 arch/x86/kernel/vmlinux.lds.S | 153 +-
2695 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
2696 arch/x86/kernel/x86_init.c | 6 +-
2697 arch/x86/kvm/cpuid.c | 21 +-
2698 arch/x86/kvm/emulate.c | 20 +-
2699 arch/x86/kvm/i8259.c | 10 +-
2700 arch/x86/kvm/ioapic.c | 2 +
2701 arch/x86/kvm/lapic.c | 2 +-
2702 arch/x86/kvm/paging_tmpl.h | 2 +-
2703 arch/x86/kvm/svm.c | 10 +-
2704 arch/x86/kvm/vmx.c | 60 +-
2705 arch/x86/kvm/x86.c | 44 +-
2706 arch/x86/lguest/boot.c | 3 +-
2707 arch/x86/lib/atomic64_386_32.S | 164 +
2708 arch/x86/lib/atomic64_cx8_32.S | 98 +-
2709 arch/x86/lib/checksum_32.S | 99 +-
2710 arch/x86/lib/clear_page_64.S | 3 +
2711 arch/x86/lib/cmpxchg16b_emu.S | 3 +
2712 arch/x86/lib/copy_page_64.S | 14 +-
2713 arch/x86/lib/copy_user_64.S | 66 +-
2714 arch/x86/lib/csum-copy_64.S | 14 +-
2715 arch/x86/lib/csum-wrappers_64.c | 8 +-
2716 arch/x86/lib/getuser.S | 74 +-
2717 arch/x86/lib/insn.c | 8 +-
2718 arch/x86/lib/iomap_copy_64.S | 2 +
2719 arch/x86/lib/memcpy_64.S | 6 +
2720 arch/x86/lib/memmove_64.S | 3 +-
2721 arch/x86/lib/memset_64.S | 3 +
2722 arch/x86/lib/mmx_32.c | 243 +-
2723 arch/x86/lib/msr-reg.S | 2 +
2724 arch/x86/lib/putuser.S | 87 +-
2725 arch/x86/lib/rwsem.S | 6 +-
2726 arch/x86/lib/usercopy_32.c | 359 +-
2727 arch/x86/lib/usercopy_64.c | 22 +-
2728 arch/x86/math-emu/fpu_aux.c | 2 +-
2729 arch/x86/math-emu/fpu_entry.c | 4 +-
2730 arch/x86/math-emu/fpu_system.h | 2 +-
2731 arch/x86/mm/Makefile | 4 +
2732 arch/x86/mm/extable.c | 26 +-
2733 arch/x86/mm/fault.c | 570 +-
2734 arch/x86/mm/gup.c | 6 +-
2735 arch/x86/mm/highmem_32.c | 6 +
2736 arch/x86/mm/hugetlbpage.c | 24 +-
2737 arch/x86/mm/init.c | 111 +-
2738 arch/x86/mm/init_32.c | 111 +-
2739 arch/x86/mm/init_64.c | 46 +-
2740 arch/x86/mm/iomap_32.c | 4 +
2741 arch/x86/mm/ioremap.c | 52 +-
2742 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
2743 arch/x86/mm/mmap.c | 40 +-
2744 arch/x86/mm/mmio-mod.c | 10 +-
2745 arch/x86/mm/mpx.c | 6 +-
2746 arch/x86/mm/numa.c | 2 +-
2747 arch/x86/mm/pageattr.c | 42 +-
2748 arch/x86/mm/pat.c | 12 +-
2749 arch/x86/mm/pat_rbtree.c | 2 +-
2750 arch/x86/mm/pf_in.c | 10 +-
2751 arch/x86/mm/pgtable.c | 209 +-
2752 arch/x86/mm/pgtable_32.c | 3 +
2753 arch/x86/mm/setup_nx.c | 7 +
2754 arch/x86/mm/tlb.c | 4 +
2755 arch/x86/mm/uderef_64.c | 37 +
2756 arch/x86/net/bpf_jit.S | 11 +
2757 arch/x86/net/bpf_jit_comp.c | 13 +-
2758 arch/x86/oprofile/backtrace.c | 6 +-
2759 arch/x86/oprofile/nmi_int.c | 10 +-
2760 arch/x86/oprofile/op_model_amd.c | 8 +-
2761 arch/x86/oprofile/op_model_ppro.c | 7 +-
2762 arch/x86/oprofile/op_x86_model.h | 2 +-
2763 arch/x86/pci/intel_mid_pci.c | 2 +-
2764 arch/x86/pci/irq.c | 8 +-
2765 arch/x86/pci/pcbios.c | 112 +-
2766 arch/x86/pci/vmd.c | 4 +-
2767 arch/x86/platform/efi/efi_32.c | 24 +
2768 arch/x86/platform/efi/efi_64.c | 26 +-
2769 arch/x86/platform/efi/efi_stub_32.S | 64 +-
2770 arch/x86/platform/efi/efi_stub_64.S | 2 +
2771 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
2772 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
2773 arch/x86/platform/intel-mid/mfld.c | 4 +-
2774 arch/x86/platform/intel-mid/mrfl.c | 2 +-
2775 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
2776 arch/x86/platform/olpc/olpc_dt.c | 2 +-
2777 arch/x86/power/cpu.c | 11 +-
2778 arch/x86/realmode/init.c | 10 +-
2779 arch/x86/realmode/rm/Makefile | 3 +
2780 arch/x86/realmode/rm/header.S | 4 +-
2781 arch/x86/realmode/rm/reboot.S | 4 +
2782 arch/x86/realmode/rm/trampoline_32.S | 12 +-
2783 arch/x86/realmode/rm/trampoline_64.S | 3 +-
2784 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
2785 arch/x86/tools/Makefile | 2 +-
2786 arch/x86/tools/relocs.c | 97 +-
2787 arch/x86/um/mem_32.c | 2 +-
2788 arch/x86/um/tls_32.c | 2 +-
2789 arch/x86/xen/enlighten.c | 52 +-
2790 arch/x86/xen/mmu.c | 19 +-
2791 arch/x86/xen/smp.c | 16 +-
2792 arch/x86/xen/xen-asm_32.S | 2 +-
2793 arch/x86/xen/xen-head.S | 11 +
2794 arch/x86/xen/xen-ops.h | 2 -
2795 block/bio.c | 4 +-
2796 block/blk-cgroup.c | 18 +-
2797 block/blk-map.c | 2 +-
2798 block/blk-softirq.c | 2 +-
2799 block/bsg.c | 12 +-
2800 block/cfq-iosched.c | 4 +-
2801 block/compat_ioctl.c | 4 +-
2802 block/genhd.c | 9 +-
2803 block/partitions/efi.c | 8 +-
2804 block/scsi_ioctl.c | 29 +-
2805 crypto/cast6_generic.c | 6 +-
2806 crypto/cryptd.c | 4 +-
2807 crypto/crypto_user.c | 2 +-
2808 crypto/pcrypt.c | 2 +-
2809 crypto/salsa20_generic.c | 16 +-
2810 crypto/serpent_generic.c | 6 +-
2811 crypto/zlib.c | 12 +-
2812 drivers/acpi/ac.c | 2 +-
2813 drivers/acpi/acpi_video.c | 2 +-
2814 drivers/acpi/apei/apei-internal.h | 2 +-
2815 drivers/acpi/apei/ghes.c | 10 +-
2816 drivers/acpi/battery.c | 2 +-
2817 drivers/acpi/bgrt.c | 6 +-
2818 drivers/acpi/blacklist.c | 4 +-
2819 drivers/acpi/bus.c | 4 +-
2820 drivers/acpi/device_pm.c | 4 +-
2821 drivers/acpi/ec.c | 6 +-
2822 drivers/acpi/pci_slot.c | 2 +-
2823 drivers/acpi/processor_idle.c | 2 +-
2824 drivers/acpi/processor_pdc.c | 2 +-
2825 drivers/acpi/sleep.c | 2 +-
2826 drivers/acpi/sysfs.c | 14 +-
2827 drivers/acpi/thermal.c | 2 +-
2828 drivers/acpi/video_detect.c | 7 +-
2829 drivers/android/binder.c | 2 +-
2830 drivers/ata/libata-core.c | 12 +-
2831 drivers/ata/libata-scsi.c | 2 +-
2832 drivers/ata/libata.h | 2 +-
2833 drivers/ata/pata_arasan_cf.c | 4 +-
2834 drivers/atm/adummy.c | 2 +-
2835 drivers/atm/ambassador.c | 8 +-
2836 drivers/atm/atmtcp.c | 14 +-
2837 drivers/atm/eni.c | 10 +-
2838 drivers/atm/firestream.c | 8 +-
2839 drivers/atm/fore200e.c | 14 +-
2840 drivers/atm/he.c | 18 +-
2841 drivers/atm/horizon.c | 4 +-
2842 drivers/atm/idt77252.c | 36 +-
2843 drivers/atm/iphase.c | 34 +-
2844 drivers/atm/lanai.c | 12 +-
2845 drivers/atm/nicstar.c | 46 +-
2846 drivers/atm/solos-pci.c | 4 +-
2847 drivers/atm/suni.c | 4 +-
2848 drivers/atm/uPD98402.c | 16 +-
2849 drivers/atm/zatm.c | 6 +-
2850 drivers/base/bus.c | 4 +-
2851 drivers/base/devres.c | 4 +-
2852 drivers/base/devtmpfs.c | 8 +-
2853 drivers/base/node.c | 2 +-
2854 drivers/base/platform-msi.c | 20 +-
2855 drivers/base/power/domain.c | 6 +-
2856 drivers/base/power/runtime.c | 61 +-
2857 drivers/base/power/sysfs.c | 2 +-
2858 drivers/base/power/wakeup.c | 8 +-
2859 drivers/base/regmap/regmap-debugfs.c | 4 +-
2860 drivers/base/regmap/regmap.c | 4 +-
2861 drivers/base/syscore.c | 4 +-
2862 drivers/block/cciss.c | 28 +-
2863 drivers/block/cciss.h | 2 +-
2864 drivers/block/cpqarray.c | 28 +-
2865 drivers/block/cpqarray.h | 2 +-
2866 drivers/block/drbd/drbd_bitmap.c | 2 +-
2867 drivers/block/drbd/drbd_int.h | 8 +-
2868 drivers/block/drbd/drbd_main.c | 12 +-
2869 drivers/block/drbd/drbd_nl.c | 16 +-
2870 drivers/block/drbd/drbd_receiver.c | 38 +-
2871 drivers/block/drbd/drbd_state.c | 12 +-
2872 drivers/block/drbd/drbd_state.h | 2 +-
2873 drivers/block/drbd/drbd_state_change.h | 8 +-
2874 drivers/block/drbd/drbd_worker.c | 14 +-
2875 drivers/block/floppy.c | 8 +-
2876 drivers/block/pktcdvd.c | 4 +-
2877 drivers/block/rbd.c | 2 +-
2878 drivers/bluetooth/btwilink.c | 2 +-
2879 drivers/bus/arm-cci.c | 12 +-
2880 drivers/cdrom/cdrom.c | 11 +-
2881 drivers/cdrom/gdrom.c | 1 -
2882 drivers/char/agp/compat_ioctl.c | 2 +-
2883 drivers/char/agp/frontend.c | 4 +-
2884 drivers/char/agp/intel-gtt.c | 4 +-
2885 drivers/char/hpet.c | 2 +-
2886 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
2887 drivers/char/ipmi/ipmi_poweroff.c | 2 +-
2888 drivers/char/ipmi/ipmi_si_intf.c | 12 +-
2889 drivers/char/ipmi/ipmi_ssif.c | 12 +-
2890 drivers/char/mem.c | 47 +-
2891 drivers/char/nvram.c | 2 +-
2892 drivers/char/pcmcia/synclink_cs.c | 16 +-
2893 drivers/char/random.c | 12 +-
2894 drivers/char/sonypi.c | 11 +-
2895 drivers/char/tpm/tpm_acpi.c | 3 +-
2896 drivers/char/tpm/tpm_eventlog.c | 5 +-
2897 drivers/char/virtio_console.c | 6 +-
2898 drivers/clk/clk-composite.c | 2 +-
2899 drivers/clk/samsung/clk.h | 2 +-
2900 drivers/clk/socfpga/clk-gate.c | 9 +-
2901 drivers/clk/socfpga/clk-pll.c | 9 +-
2902 drivers/clk/ti/clk.c | 8 +-
2903 drivers/cpufreq/acpi-cpufreq.c | 17 +-
2904 drivers/cpufreq/cpufreq-dt.c | 4 +-
2905 drivers/cpufreq/cpufreq.c | 27 +-
2906 drivers/cpufreq/cpufreq_governor.c | 2 +-
2907 drivers/cpufreq/cpufreq_governor.h | 10 +-
2908 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
2909 drivers/cpufreq/intel_pstate.c | 54 +-
2910 drivers/cpufreq/p4-clockmod.c | 12 +-
2911 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
2912 drivers/cpufreq/speedstep-centrino.c | 7 +-
2913 drivers/cpuidle/driver.c | 2 +-
2914 drivers/cpuidle/dt_idle_states.c | 2 +-
2915 drivers/cpuidle/governor.c | 2 +-
2916 drivers/cpuidle/governors/ladder.c | 13 +-
2917 drivers/cpuidle/sysfs.c | 2 +-
2918 drivers/crypto/hifn_795x.c | 4 +-
2919 drivers/crypto/qat/qat_common/adf_aer.c | 2 +-
2920 drivers/crypto/qat/qat_common/adf_sriov.c | 4 +-
2921 drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +-
2922 drivers/devfreq/devfreq.c | 4 +-
2923 drivers/dma/sh/shdma-base.c | 4 +-
2924 drivers/dma/sh/shdmac.c | 2 +-
2925 drivers/edac/edac_device.c | 4 +-
2926 drivers/edac/edac_device_sysfs.c | 2 +-
2927 drivers/edac/edac_mc_sysfs.c | 4 +-
2928 drivers/edac/edac_module.c | 2 +-
2929 drivers/edac/edac_pci.c | 4 +-
2930 drivers/edac/edac_pci_sysfs.c | 22 +-
2931 drivers/edac/mce_amd.h | 2 +-
2932 drivers/firewire/core-card.c | 6 +-
2933 drivers/firewire/core-cdev.c | 4 +-
2934 drivers/firewire/core-device.c | 2 +-
2935 drivers/firewire/core-iso.c | 2 +-
2936 drivers/firewire/core-transaction.c | 1 +
2937 drivers/firewire/core.h | 1 +
2938 drivers/firmware/dmi-id.c | 9 +-
2939 drivers/firmware/dmi_scan.c | 12 +-
2940 drivers/firmware/efi/cper.c | 8 +-
2941 drivers/firmware/efi/efi.c | 12 +-
2942 drivers/firmware/efi/efivars.c | 2 +-
2943 drivers/firmware/efi/runtime-map.c | 2 +-
2944 drivers/firmware/google/gsmi.c | 2 +-
2945 drivers/firmware/google/memconsole.c | 7 +-
2946 drivers/firmware/memmap.c | 2 +-
2947 drivers/firmware/psci.c | 2 +-
2948 drivers/gpio/gpio-davinci.c | 6 +-
2949 drivers/gpio/gpio-em.c | 2 +-
2950 drivers/gpio/gpio-ich.c | 2 +-
2951 drivers/gpio/gpio-omap.c | 4 +-
2952 drivers/gpio/gpio-rcar.c | 2 +-
2953 drivers/gpio/gpio-vr41xx.c | 2 +-
2954 drivers/gpio/gpiolib.c | 12 +-
2955 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +-
2956 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 2 +-
2957 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 8 +-
2958 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
2959 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
2960 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
2961 drivers/gpu/drm/amd/amdgpu/fiji_smc.c | 4 +-
2962 drivers/gpu/drm/amd/amdgpu/iceland_smc.c | 4 +-
2963 drivers/gpu/drm/amd/amdgpu/tonga_smc.c | 4 +-
2964 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
2965 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
2966 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
2967 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
2968 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
2969 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
2970 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
2971 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
2972 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
2973 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
2974 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
2975 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
2976 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
2977 drivers/gpu/drm/armada/armada_drv.c | 3 +-
2978 drivers/gpu/drm/ast/ast_mode.c | 2 +-
2979 drivers/gpu/drm/bochs/bochs_kms.c | 2 +-
2980 drivers/gpu/drm/drm_atomic.c | 7 +-
2981 drivers/gpu/drm/drm_crtc.c | 10 +-
2982 drivers/gpu/drm/drm_drv.c | 2 +-
2983 drivers/gpu/drm/drm_fops.c | 12 +-
2984 drivers/gpu/drm/drm_global.c | 14 +-
2985 drivers/gpu/drm/drm_info.c | 13 +-
2986 drivers/gpu/drm/drm_ioc32.c | 13 +-
2987 drivers/gpu/drm/drm_ioctl.c | 2 +-
2988 drivers/gpu/drm/drm_irq.c | 7 +-
2989 drivers/gpu/drm/drm_pci.c | 9 +-
2990 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
2991 drivers/gpu/drm/exynos/exynos_drm_g2d.c | 7 +-
2992 drivers/gpu/drm/gma500/cdv_intel_crt.c | 2 +-
2993 drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +-
2994 drivers/gpu/drm/gma500/cdv_intel_hdmi.c | 2 +-
2995 drivers/gpu/drm/gma500/cdv_intel_lvds.c | 2 +-
2996 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 8 +-
2997 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
2998 drivers/gpu/drm/gma500/psb_drv.c | 1 -
2999 drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
3000 drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
3001 drivers/gpu/drm/gma500/psb_intel_sdvo.c | 2 +-
3002 drivers/gpu/drm/i2c/tda998x_drv.c | 2 +-
3003 drivers/gpu/drm/i810/i810_dma.c | 2 +-
3004 drivers/gpu/drm/i810/i810_drv.c | 6 +-
3005 drivers/gpu/drm/i810/i810_drv.h | 6 +-
3006 drivers/gpu/drm/i915/dvo.h | 2 +-
3007 drivers/gpu/drm/i915/i915_dma.c | 4 +-
3008 drivers/gpu/drm/i915/i915_drv.c | 7 +-
3009 drivers/gpu/drm/i915/i915_drv.h | 2 +-
3010 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
3011 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
3012 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
3013 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
3014 drivers/gpu/drm/i915/i915_irq.c | 88 +-
3015 drivers/gpu/drm/i915/intel_display.c | 26 +-
3016 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
3017 drivers/gpu/drm/mga/mga_drv.c | 5 +-
3018 drivers/gpu/drm/mga/mga_drv.h | 6 +-
3019 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
3020 drivers/gpu/drm/mga/mga_irq.c | 8 +-
3021 drivers/gpu/drm/mga/mga_state.c | 2 +-
3022 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 +-
3023 drivers/gpu/drm/nouveau/nouveau_acpi.c | 2 +-
3024 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
3025 drivers/gpu/drm/nouveau/nouveau_connector.c | 2 +-
3026 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
3027 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
3028 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
3029 drivers/gpu/drm/nouveau/nouveau_usif.c | 7 +-
3030 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
3031 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 7 +-
3032 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 7 +-
3033 drivers/gpu/drm/omapdrm/Makefile | 2 +-
3034 drivers/gpu/drm/omapdrm/dss/display.c | 8 +-
3035 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
3036 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
3037 drivers/gpu/drm/qxl/qxl_display.c | 2 +-
3038 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
3039 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
3040 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
3041 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
3042 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
3043 drivers/gpu/drm/r128/r128_cce.c | 2 +-
3044 drivers/gpu/drm/r128/r128_drv.c | 4 +-
3045 drivers/gpu/drm/r128/r128_drv.h | 6 +-
3046 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
3047 drivers/gpu/drm/r128/r128_irq.c | 4 +-
3048 drivers/gpu/drm/r128/r128_state.c | 6 +-
3049 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
3050 drivers/gpu/drm/radeon/radeon_atpx_handler.c | 2 +-
3051 drivers/gpu/drm/radeon/radeon_connectors.c | 10 +-
3052 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
3053 drivers/gpu/drm/radeon/radeon_drv.c | 11 +-
3054 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
3055 drivers/gpu/drm/radeon/radeon_kms.c | 8 +-
3056 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
3057 drivers/gpu/drm/savage/savage_bci.c | 2 +-
3058 drivers/gpu/drm/savage/savage_drv.c | 5 +-
3059 drivers/gpu/drm/savage/savage_drv.h | 2 +-
3060 drivers/gpu/drm/sis/sis_drv.c | 5 +-
3061 drivers/gpu/drm/sis/sis_drv.h | 2 +-
3062 drivers/gpu/drm/sis/sis_mm.c | 2 +-
3063 drivers/gpu/drm/tegra/dc.c | 2 +-
3064 drivers/gpu/drm/tegra/dsi.c | 2 +-
3065 drivers/gpu/drm/tegra/hdmi.c | 2 +-
3066 drivers/gpu/drm/tegra/sor.c | 7 +-
3067 drivers/gpu/drm/tilcdc/Makefile | 6 +-
3068 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
3069 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
3070 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
3071 drivers/gpu/drm/udl/udl_connector.c | 2 +-
3072 drivers/gpu/drm/udl/udl_fb.c | 1 -
3073 drivers/gpu/drm/vc4/vc4_drv.c | 8 +-
3074 drivers/gpu/drm/via/via_dma.c | 2 +-
3075 drivers/gpu/drm/via/via_drv.c | 5 +-
3076 drivers/gpu/drm/via/via_drv.h | 6 +-
3077 drivers/gpu/drm/via/via_irq.c | 18 +-
3078 drivers/gpu/drm/virtio/virtgpu_display.c | 2 +-
3079 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
3080 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 7 +-
3081 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
3082 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
3083 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
3084 drivers/gpu/vga/vga_switcheroo.c | 4 +-
3085 drivers/hid/hid-core.c | 4 +-
3086 drivers/hid/hid-magicmouse.c | 2 +-
3087 drivers/hid/hid-sensor-custom.c | 2 +-
3088 drivers/hv/channel.c | 6 +-
3089 drivers/hv/hv.c | 4 +-
3090 drivers/hv/hv_balloon.c | 18 +-
3091 drivers/hv/hyperv_vmbus.h | 2 +-
3092 drivers/hwmon/acpi_power_meter.c | 6 +-
3093 drivers/hwmon/applesmc.c | 2 +-
3094 drivers/hwmon/asus_atk0110.c | 10 +-
3095 drivers/hwmon/coretemp.c | 2 +-
3096 drivers/hwmon/dell-smm-hwmon.c | 2 +-
3097 drivers/hwmon/ibmaem.c | 2 +-
3098 drivers/hwmon/iio_hwmon.c | 2 +-
3099 drivers/hwmon/nct6683.c | 6 +-
3100 drivers/hwmon/nct6775.c | 6 +-
3101 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
3102 drivers/hwmon/sht15.c | 12 +-
3103 drivers/hwmon/via-cputemp.c | 2 +-
3104 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
3105 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
3106 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
3107 drivers/i2c/i2c-dev.c | 2 +-
3108 drivers/ide/ide-cd.c | 2 +-
3109 drivers/ide/ide-disk.c | 2 +-
3110 drivers/ide/ide.c | 4 +-
3111 drivers/idle/intel_idle.c | 6 +-
3112 drivers/iio/industrialio-core.c | 2 +-
3113 drivers/iio/magnetometer/ak8975.c | 2 +-
3114 drivers/infiniband/core/cm.c | 46 +-
3115 drivers/infiniband/core/fmr_pool.c | 20 +-
3116 drivers/infiniband/core/netlink.c | 5 +-
3117 drivers/infiniband/core/ucm.c | 4 +-
3118 drivers/infiniband/core/uverbs_cmd.c | 3 +
3119 drivers/infiniband/hw/cxgb4/device.c | 6 +-
3120 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
3121 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
3122 drivers/infiniband/hw/mlx4/mad.c | 2 +-
3123 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
3124 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
3125 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
3126 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
3127 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
3128 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
3129 drivers/infiniband/hw/nes/nes.c | 4 +-
3130 drivers/infiniband/hw/nes/nes.h | 40 +-
3131 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
3132 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
3133 drivers/infiniband/hw/nes/nes_nic.c | 42 +-
3134 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
3135 drivers/infiniband/hw/qib/qib.h | 1 +
3136 drivers/infiniband/hw/qib/qib_iba7322.c | 4 +-
3137 drivers/infiniband/hw/qib/qib_pcie.c | 2 +-
3138 drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
3139 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
3140 drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
3141 drivers/input/evdev.c | 2 +-
3142 drivers/input/gameport/gameport.c | 4 +-
3143 drivers/input/input.c | 4 +-
3144 drivers/input/joystick/sidewinder.c | 1 +
3145 drivers/input/misc/ims-pcu.c | 4 +-
3146 drivers/input/mouse/psmouse.h | 2 +-
3147 drivers/input/mousedev.c | 2 +-
3148 drivers/input/serio/serio.c | 4 +-
3149 drivers/input/serio/serio_raw.c | 4 +-
3150 drivers/input/touchscreen/htcpen.c | 2 +-
3151 drivers/iommu/arm-smmu-v3.c | 2 +-
3152 drivers/iommu/arm-smmu.c | 42 +-
3153 drivers/iommu/io-pgtable-arm.c | 98 +-
3154 drivers/iommu/io-pgtable.c | 11 +-
3155 drivers/iommu/io-pgtable.h | 21 +-
3156 drivers/iommu/iommu.c | 2 +-
3157 drivers/iommu/ipmmu-vmsa.c | 13 +-
3158 drivers/iommu/irq_remapping.c | 2 +-
3159 drivers/irqchip/irq-gic.c | 2 +-
3160 drivers/irqchip/irq-i8259.c | 2 +-
3161 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
3162 drivers/irqchip/irq-ts4800.c | 2 +-
3163 drivers/isdn/capi/capi.c | 10 +-
3164 drivers/isdn/gigaset/interface.c | 8 +-
3165 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
3166 drivers/isdn/hardware/avm/b1.c | 4 +-
3167 drivers/isdn/hardware/eicon/capifunc.c | 6 +-
3168 drivers/isdn/hardware/eicon/dadapter.c | 18 +-
3169 drivers/isdn/hardware/eicon/diddfunc.c | 7 +-
3170 drivers/isdn/hardware/eicon/divasfunc.c | 9 +-
3171 drivers/isdn/hardware/eicon/divasync.h | 2 +-
3172 drivers/isdn/hardware/eicon/idifunc.c | 9 +-
3173 drivers/isdn/hardware/eicon/mntfunc.c | 13 +-
3174 drivers/isdn/hardware/mISDN/avmfritz.c | 2 +-
3175 drivers/isdn/hardware/mISDN/hfcmulti.c | 7 +-
3176 drivers/isdn/hardware/mISDN/hfcpci.c | 16 +-
3177 drivers/isdn/hardware/mISDN/mISDNinfineon.c | 7 +-
3178 drivers/isdn/hardware/mISDN/mISDNipac.c | 5 +-
3179 drivers/isdn/hardware/mISDN/netjet.c | 2 +-
3180 drivers/isdn/hardware/mISDN/speedfax.c | 7 +-
3181 drivers/isdn/hardware/mISDN/w6692.c | 7 +-
3182 drivers/isdn/hisax/amd7930_fn.c | 5 +-
3183 drivers/isdn/hisax/arcofi.c | 5 +-
3184 drivers/isdn/hisax/diva.c | 7 +-
3185 drivers/isdn/hisax/elsa.c | 9 +-
3186 drivers/isdn/hisax/fsm.c | 5 +-
3187 drivers/isdn/hisax/hfc4s8s_l1.c | 14 +-
3188 drivers/isdn/hisax/hfc_pci.c | 10 +-
3189 drivers/isdn/hisax/hfc_sx.c | 10 +-
3190 drivers/isdn/hisax/hfc_usb.c | 12 +-
3191 drivers/isdn/hisax/icc.c | 5 +-
3192 drivers/isdn/hisax/ipacx.c | 7 +-
3193 drivers/isdn/hisax/isac.c | 5 +-
3194 drivers/isdn/hisax/isar.c | 5 +-
3195 drivers/isdn/hisax/isdnl3.c | 5 +-
3196 drivers/isdn/hisax/w6692.c | 5 +-
3197 drivers/isdn/i4l/isdn_common.c | 2 +
3198 drivers/isdn/i4l/isdn_tty.c | 22 +-
3199 drivers/isdn/icn/icn.c | 2 +-
3200 drivers/isdn/mISDN/dsp.h | 4 +-
3201 drivers/isdn/mISDN/dsp_cmx.c | 4 +-
3202 drivers/isdn/mISDN/dsp_core.c | 4 +-
3203 drivers/isdn/mISDN/dsp_tones.c | 4 +-
3204 drivers/isdn/mISDN/fsm.c | 5 +-
3205 drivers/isdn/mISDN/l1oip_core.c | 8 +-
3206 drivers/lguest/core.c | 9 +-
3207 drivers/lguest/page_tables.c | 2 +-
3208 drivers/lguest/x86/core.c | 12 +-
3209 drivers/lguest/x86/switcher_32.S | 27 +-
3210 drivers/lightnvm/rrpc.c | 4 +-
3211 drivers/lightnvm/rrpc.h | 2 +-
3212 drivers/md/bcache/alloc.c | 2 +-
3213 drivers/md/bcache/bcache.h | 10 +-
3214 drivers/md/bcache/btree.c | 2 +-
3215 drivers/md/bcache/closure.h | 2 +-
3216 drivers/md/bcache/io.c | 10 +-
3217 drivers/md/bcache/journal.c | 2 +-
3218 drivers/md/bcache/stats.c | 26 +-
3219 drivers/md/bcache/stats.h | 16 +-
3220 drivers/md/bcache/super.c | 2 +-
3221 drivers/md/bcache/sysfs.c | 20 +-
3222 drivers/md/bitmap.c | 2 +-
3223 drivers/md/dm-cache-target.c | 116 +-
3224 drivers/md/dm-ioctl.c | 2 +-
3225 drivers/md/dm-raid.c | 2 +-
3226 drivers/md/dm-raid1.c | 18 +-
3227 drivers/md/dm-stats.c | 6 +-
3228 drivers/md/dm-stripe.c | 10 +-
3229 drivers/md/dm-table.c | 2 +-
3230 drivers/md/dm-thin-metadata.c | 4 +-
3231 drivers/md/dm.c | 28 +-
3232 drivers/md/md.c | 41 +-
3233 drivers/md/md.h | 8 +-
3234 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3235 drivers/md/persistent-data/dm-space-map.h | 1 +
3236 drivers/md/raid1.c | 8 +-
3237 drivers/md/raid10.c | 20 +-
3238 drivers/md/raid5.c | 26 +-
3239 drivers/media/dvb-core/dvb_net.c | 2 +-
3240 drivers/media/dvb-core/dvbdev.c | 2 +-
3241 drivers/media/dvb-frontends/af9033.h | 2 +-
3242 drivers/media/dvb-frontends/cx24116.c | 2 +-
3243 drivers/media/dvb-frontends/cx24117.c | 2 +-
3244 drivers/media/dvb-frontends/cx24120.c | 2 +-
3245 drivers/media/dvb-frontends/cx24123.c | 2 +-
3246 drivers/media/dvb-frontends/cxd2820r_core.c | 2 +-
3247 drivers/media/dvb-frontends/dib3000.h | 2 +-
3248 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3249 drivers/media/dvb-frontends/dib8000.h | 2 +-
3250 drivers/media/dvb-frontends/hd29l2.c | 2 +-
3251 drivers/media/dvb-frontends/lgdt3306a.c | 2 +-
3252 drivers/media/dvb-frontends/mt312.c | 6 +-
3253 drivers/media/dvb-frontends/s921.c | 2 +-
3254 drivers/media/pci/bt8xx/dst.c | 2 +-
3255 drivers/media/pci/cx88/cx88-video.c | 6 +-
3256 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
3257 drivers/media/pci/pt1/va1j5jf8007s.c | 2 +-
3258 drivers/media/pci/pt1/va1j5jf8007t.c | 2 +-
3259 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3260 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3261 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
3262 drivers/media/pci/tw68/tw68-core.c | 2 +-
3263 drivers/media/pci/zoran/zoran.h | 1 -
3264 drivers/media/pci/zoran/zoran_card.c | 4 +-
3265 drivers/media/pci/zoran/zoran_driver.c | 3 -
3266 drivers/media/platform/omap/omap_vout.c | 11 +-
3267 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3268 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3269 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3270 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3271 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
3272 drivers/media/platform/soc_camera/soc_camera.c | 2 +-
3273 drivers/media/radio/radio-cadet.c | 2 +
3274 drivers/media/radio/radio-maxiradio.c | 2 +-
3275 drivers/media/radio/radio-shark.c | 2 +-
3276 drivers/media/radio/radio-shark2.c | 2 +-
3277 drivers/media/radio/radio-si476x.c | 2 +-
3278 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
3279 drivers/media/usb/pvrusb2/pvrusb2-context.c | 8 +-
3280 drivers/media/usb/pvrusb2/pvrusb2-dvb.c | 7 +-
3281 drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 +-
3282 drivers/media/usb/pvrusb2/pvrusb2-std.c | 2 +-
3283 drivers/media/usb/pvrusb2/pvrusb2-v4l2.c | 6 +-
3284 drivers/media/usb/uvc/uvc_driver.c | 4 +-
3285 drivers/media/v4l2-core/v4l2-common.c | 2 +-
3286 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
3287 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3288 drivers/media/v4l2-core/v4l2-ioctl.c | 293 +-
3289 drivers/memory/omap-gpmc.c | 21 +-
3290 drivers/message/fusion/mptbase.c | 4 +-
3291 drivers/message/fusion/mptlan.c | 2 +-
3292 drivers/message/fusion/mptsas.c | 34 +-
3293 drivers/mfd/ab8500-debugfs.c | 2 +-
3294 drivers/mfd/kempld-core.c | 2 +-
3295 drivers/mfd/max8925-i2c.c | 2 +-
3296 drivers/mfd/tps65910.c | 2 +-
3297 drivers/mfd/twl4030-irq.c | 9 +-
3298 drivers/misc/c2port/core.c | 4 +-
3299 drivers/misc/kgdbts.c | 6 +-
3300 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3301 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
3302 drivers/misc/mic/scif/scif_api.c | 10 +-
3303 drivers/misc/mic/scif/scif_rb.c | 8 +-
3304 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3305 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3306 drivers/misc/sgi-gru/grutables.h | 158 +-
3307 drivers/misc/sgi-xp/xp.h | 2 +-
3308 drivers/misc/sgi-xp/xp_main.c | 57 +-
3309 drivers/misc/sgi-xp/xpc.h | 3 +-
3310 drivers/misc/sgi-xp/xpc_main.c | 2 +-
3311 drivers/misc/sgi-xp/xpnet.c | 2 +-
3312 drivers/misc/ti-st/st_kim.c | 32 +-
3313 drivers/mmc/card/mmc_test.c | 4 +-
3314 drivers/mmc/host/dw_mmc.h | 2 +-
3315 drivers/mmc/host/mmci.c | 4 +-
3316 drivers/mmc/host/omap_hsmmc.c | 4 +-
3317 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3318 drivers/mmc/host/sdhci-s3c.c | 8 +-
3319 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3320 drivers/mtd/devices/block2mtd.c | 2 +-
3321 drivers/mtd/devices/phram.c | 2 +-
3322 drivers/mtd/maps/gpio-addr-flash.c | 2 +-
3323 drivers/mtd/maps/latch-addr-flash.c | 2 +-
3324 drivers/mtd/maps/pci.c | 4 +-
3325 drivers/mtd/maps/pcmciamtd.c | 8 +-
3326 drivers/mtd/maps/sbc_gxx.c | 2 +-
3327 drivers/mtd/nand/cafe_nand.c | 18 +-
3328 drivers/mtd/nand/denali.c | 1 +
3329 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
3330 drivers/mtd/nftlmount.c | 1 +
3331 drivers/mtd/sm_ftl.c | 2 +-
3332 drivers/mtd/ubi/build.c | 2 +-
3333 drivers/net/bonding/bond_netlink.c | 2 +-
3334 drivers/net/caif/caif_hsi.c | 4 +-
3335 drivers/net/caif/caif_serial.c | 2 +-
3336 drivers/net/caif/caif_spi.c | 2 +-
3337 drivers/net/caif/caif_virtio.c | 2 +-
3338 drivers/net/can/Kconfig | 2 +-
3339 drivers/net/can/dev.c | 2 +-
3340 drivers/net/can/janz-ican3.c | 2 +-
3341 drivers/net/can/led.c | 2 +-
3342 drivers/net/can/sun4i_can.c | 2 +-
3343 drivers/net/can/vcan.c | 2 +-
3344 drivers/net/can/xilinx_can.c | 2 +-
3345 drivers/net/dummy.c | 2 +-
3346 drivers/net/ethernet/8390/ax88796.c | 4 +-
3347 drivers/net/ethernet/8390/axnet_cs.c | 4 +-
3348 drivers/net/ethernet/8390/ne2k-pci.c | 6 +-
3349 drivers/net/ethernet/8390/pcnet_cs.c | 4 +-
3350 drivers/net/ethernet/altera/altera_tse_main.c | 6 +-
3351 drivers/net/ethernet/amd/amd8111e.c | 5 +-
3352 drivers/net/ethernet/amd/pcnet32.c | 7 +-
3353 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
3354 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
3355 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
3356 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3357 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 66 +-
3358 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3359 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3360 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
3361 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
3362 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
3363 drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
3364 drivers/net/ethernet/arc/emac_main.c | 2 +-
3365 drivers/net/ethernet/atheros/alx/main.c | 2 +-
3366 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
3367 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
3368 drivers/net/ethernet/aurora/nb8800.c | 2 +-
3369 drivers/net/ethernet/broadcom/bnx2.c | 2 +-
3370 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3371 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 216 +-
3372 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 4 +-
3373 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
3374 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3375 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3376 drivers/net/ethernet/broadcom/tg3.c | 2 +-
3377 drivers/net/ethernet/broadcom/tg3.h | 1 +
3378 drivers/net/ethernet/brocade/bna/bfa_cs.h | 42 +-
3379 drivers/net/ethernet/brocade/bna/bfa_ioc.c | 10 +-
3380 drivers/net/ethernet/brocade/bna/bfa_ioc.h | 4 +-
3381 drivers/net/ethernet/brocade/bna/bfa_msgq.h | 8 +-
3382 drivers/net/ethernet/brocade/bna/bna_enet.c | 6 +-
3383 drivers/net/ethernet/brocade/bna/bna_tx_rx.c | 6 +-
3384 drivers/net/ethernet/brocade/bna/bna_types.h | 24 +-
3385 drivers/net/ethernet/brocade/bna/bnad.c | 11 +-
3386 drivers/net/ethernet/cadence/macb.c | 4 +-
3387 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3388 drivers/net/ethernet/cavium/liquidio/lio_main.c | 15 +-
3389 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
3390 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
3391 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
3392 drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 2 +-
3393 drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 2 +-
3394 drivers/net/ethernet/dec/tulip/de4x5.c | 13 +-
3395 drivers/net/ethernet/emulex/benet/be_main.c | 4 +-
3396 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3397 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3398 drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
3399 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +-
3400 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 6 +-
3401 drivers/net/ethernet/intel/e100.c | 2 +-
3402 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
3403 drivers/net/ethernet/intel/e1000e/netdev.c | 2 +-
3404 drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 2 +-
3405 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3406 drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
3407 drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
3408 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
3409 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
3410 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +-
3411 drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
3412 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
3413 drivers/net/ethernet/mellanox/mlx4/main.c | 2 +-
3414 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +-
3415 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
3416 drivers/net/ethernet/micrel/ks8851_mll.c | 2 +-
3417 drivers/net/ethernet/neterion/s2io.c | 2 +-
3418 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3419 drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
3420 .../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
3421 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
3422 .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
3423 .../net/ethernet/qlogic/netxen/netxen_nic_main.c | 2 +-
3424 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3425 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3426 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 +-
3427 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3428 drivers/net/ethernet/realtek/r8169.c | 8 +-
3429 drivers/net/ethernet/renesas/sh_eth.c | 2 +-
3430 drivers/net/ethernet/rocker/rocker.c | 4 +-
3431 drivers/net/ethernet/sfc/ptp.c | 2 +-
3432 drivers/net/ethernet/sfc/selftest.c | 20 +-
3433 drivers/net/ethernet/smsc/smsc911x.c | 2 +-
3434 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
3435 drivers/net/ethernet/synopsys/dwc_eth_qos.c | 2 +-
3436 drivers/net/ethernet/via/via-rhine.c | 2 +-
3437 drivers/net/ethernet/wiznet/w5100.c | 2 +-
3438 drivers/net/ethernet/wiznet/w5300.c | 2 +-
3439 drivers/net/geneve.c | 2 +-
3440 drivers/net/hyperv/hyperv_net.h | 2 +-
3441 drivers/net/hyperv/netvsc_drv.c | 2 +-
3442 drivers/net/hyperv/rndis_filter.c | 7 +-
3443 drivers/net/ifb.c | 2 +-
3444 drivers/net/ipvlan/ipvlan_core.c | 2 +-
3445 drivers/net/ipvlan/ipvlan_main.c | 6 +-
3446 drivers/net/irda/sh_irda.c | 2 +-
3447 drivers/net/irda/vlsi_ir.c | 18 +-
3448 drivers/net/irda/vlsi_ir.h | 14 +-
3449 drivers/net/macvlan.c | 20 +-
3450 drivers/net/macvtap.c | 10 +-
3451 drivers/net/nlmon.c | 2 +-
3452 drivers/net/phy/phy_device.c | 6 +-
3453 drivers/net/plip/plip.c | 2 +-
3454 drivers/net/ppp/ppp_generic.c | 4 +-
3455 drivers/net/ppp/pptp.c | 1 +
3456 drivers/net/rionet.c | 2 +-
3457 drivers/net/slip/slhc.c | 2 +-
3458 drivers/net/team/team.c | 4 +-
3459 drivers/net/tun.c | 7 +-
3460 drivers/net/usb/hso.c | 28 +-
3461 drivers/net/usb/ipheth.c | 2 +-
3462 drivers/net/usb/r8152.c | 2 +-
3463 drivers/net/usb/sierra_net.c | 4 +-
3464 drivers/net/virtio_net.c | 2 +-
3465 drivers/net/vrf.c | 4 +-
3466 drivers/net/vxlan.c | 4 +-
3467 drivers/net/wimax/i2400m/rx.c | 2 +-
3468 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3469 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3470 drivers/net/wireless/ath/ath6kl/core.h | 2 +-
3471 drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
3472 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3473 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3474 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3475 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3476 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3477 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3478 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3479 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3480 drivers/net/wireless/ath/wil6210/pcie_bus.c | 2 +-
3481 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3482 drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
3483 drivers/net/wireless/atmel/atmel.c | 183 +-
3484 drivers/net/wireless/broadcom/b43/phy_lp.c | 2 +-
3485 drivers/net/wireless/broadcom/b43legacy/main.c | 5 +-
3486 .../broadcom/brcm80211/brcmsmac/phy/phy_cmn.c | 3 +-
3487 .../broadcom/brcm80211/brcmsmac/phy_shim.c | 5 +-
3488 .../broadcom/brcm80211/brcmsmac/phy_shim.h | 2 +-
3489 drivers/net/wireless/cisco/airo.c | 201 +-
3490 drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
3491 drivers/net/wireless/intel/ipw2x00/ipw2200.c | 6 +-
3492 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 11 +-
3493 drivers/net/wireless/intel/iwlegacy/4965-mac.c | 7 +-
3494 drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 34 +-
3495 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 4 +-
3496 drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 2 +-
3497 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +-
3498 .../net/wireless/intersil/hostap/hostap_ioctl.c | 134 +-
3499 drivers/net/wireless/intersil/orinoco/wext.c | 131 +-
3500 drivers/net/wireless/intersil/prism54/isl_ioctl.c | 292 +-
3501 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3502 drivers/net/wireless/marvell/mwifiex/main.c | 2 +-
3503 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 4 +-
3504 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 4 +-
3505 drivers/net/wireless/ralink/rt2x00/rt2500usb.c | 4 +-
3506 drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 6 +-
3507 drivers/net/wireless/ralink/rt2x00/rt2x00.h | 2 +-
3508 drivers/net/wireless/ralink/rt2x00/rt2x00queue.c | 4 +-
3509 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 4 +-
3510 drivers/net/wireless/ralink/rt2x00/rt73usb.c | 4 +-
3511 drivers/net/wireless/realtek/rtlwifi/base.c | 14 +-
3512 drivers/net/wireless/realtek/rtlwifi/base.h | 4 +-
3513 drivers/net/wireless/realtek/rtlwifi/pci.c | 15 +-
3514 drivers/net/wireless/realtek/rtlwifi/ps.c | 6 +-
3515 drivers/net/wireless/realtek/rtlwifi/ps.h | 6 +-
3516 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3517 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3518 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3519 drivers/net/wireless/zydas/zd1201.c | 192 +-
3520 drivers/nvme/host/pci.c | 2 +-
3521 drivers/of/fdt.c | 4 +-
3522 drivers/oprofile/buffer_sync.c | 8 +-
3523 drivers/oprofile/event_buffer.c | 2 +-
3524 drivers/oprofile/oprof.c | 2 +-
3525 drivers/oprofile/oprofile_stats.c | 10 +-
3526 drivers/oprofile/oprofile_stats.h | 10 +-
3527 drivers/oprofile/oprofilefs.c | 2 +-
3528 drivers/oprofile/timer_int.c | 2 +-
3529 drivers/parport/procfs.c | 4 +-
3530 drivers/pci/host/pci-host-generic.c | 2 +-
3531 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3532 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3533 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3534 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3535 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3536 drivers/pci/hotplug/pciehp_core.c | 2 +-
3537 drivers/pci/msi.c | 22 +-
3538 drivers/pci/pci-sysfs.c | 6 +-
3539 drivers/pci/pci.h | 4 +-
3540 drivers/pci/pcie/aspm.c | 10 +-
3541 drivers/pci/pcie/portdrv_pci.c | 2 +-
3542 drivers/pci/probe.c | 2 +-
3543 drivers/pci/setup-bus.c | 2 +-
3544 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3545 drivers/pinctrl/pinctrl-at91.c | 5 +-
3546 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3547 drivers/platform/x86/alienware-wmi.c | 4 +-
3548 drivers/platform/x86/apple-gmux.c | 2 +-
3549 drivers/platform/x86/compal-laptop.c | 2 +-
3550 drivers/platform/x86/hdaps.c | 2 +-
3551 drivers/platform/x86/ibm_rtl.c | 2 +-
3552 drivers/platform/x86/intel_oaktrail.c | 2 +-
3553 drivers/platform/x86/msi-laptop.c | 16 +-
3554 drivers/platform/x86/msi-wmi.c | 2 +-
3555 drivers/platform/x86/samsung-laptop.c | 2 +-
3556 drivers/platform/x86/samsung-q10.c | 2 +-
3557 drivers/platform/x86/sony-laptop.c | 14 +-
3558 drivers/platform/x86/thinkpad_acpi.c | 11 +-
3559 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3560 drivers/pnp/pnpbios/core.c | 2 +-
3561 drivers/power/pda_power.c | 7 +-
3562 drivers/power/power_supply.h | 4 +-
3563 drivers/power/power_supply_core.c | 7 +-
3564 drivers/power/power_supply_sysfs.c | 6 +-
3565 drivers/power/reset/at91-reset.c | 5 +-
3566 drivers/powercap/powercap_sys.c | 136 +-
3567 drivers/ptp/ptp_private.h | 2 +-
3568 drivers/ptp/ptp_sysfs.c | 2 +-
3569 drivers/regulator/core.c | 4 +-
3570 drivers/regulator/max8660.c | 6 +-
3571 drivers/regulator/max8973-regulator.c | 16 +-
3572 drivers/regulator/mc13892-regulator.c | 8 +-
3573 drivers/remoteproc/remoteproc_core.c | 26 +-
3574 drivers/rtc/rtc-armada38x.c | 7 +-
3575 drivers/rtc/rtc-cmos.c | 4 +-
3576 drivers/rtc/rtc-ds1307.c | 2 +-
3577 drivers/rtc/rtc-m48t59.c | 4 +-
3578 drivers/rtc/rtc-rv8803.c | 15 +-
3579 drivers/rtc/rtc-rx8010.c | 8 +-
3580 drivers/rtc/rtc-test.c | 6 +-
3581 drivers/scsi/aacraid/aachba.c | 11 +-
3582 drivers/scsi/aic7xxx/aic79xx.h | 2 +-
3583 drivers/scsi/aic7xxx/aic79xx_core.c | 11 +-
3584 drivers/scsi/be2iscsi/be_main.c | 2 +-
3585 drivers/scsi/bfa/bfa.h | 4 +-
3586 drivers/scsi/bfa/bfa_core.c | 4 +-
3587 drivers/scsi/bfa/bfa_cs.h | 124 +-
3588 drivers/scsi/bfa/bfa_fcpim.h | 14 +-
3589 drivers/scsi/bfa/bfa_fcs.h | 34 +-
3590 drivers/scsi/bfa/bfa_fcs_fcpim.c | 6 +-
3591 drivers/scsi/bfa/bfa_fcs_lport.c | 4 +-
3592 drivers/scsi/bfa/bfa_fcs_rport.c | 4 +-
3593 drivers/scsi/bfa/bfa_ioc.c | 8 +-
3594 drivers/scsi/bfa/bfa_ioc.h | 16 +-
3595 drivers/scsi/bfa/bfa_svc.c | 12 +-
3596 drivers/scsi/bfa/bfa_svc.h | 20 +-
3597 drivers/scsi/bfa/bfad.c | 12 +-
3598 drivers/scsi/bfa/bfad_bsg.c | 8 +-
3599 drivers/scsi/bfa/bfad_drv.h | 5 +-
3600 drivers/scsi/csiostor/csio_defs.h | 19 +-
3601 drivers/scsi/csiostor/csio_hw.c | 67 +-
3602 drivers/scsi/csiostor/csio_init.c | 2 +-
3603 drivers/scsi/csiostor/csio_lnode.c | 32 +-
3604 drivers/scsi/csiostor/csio_rnode.c | 28 +-
3605 drivers/scsi/csiostor/csio_scsi.c | 37 +-
3606 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3607 drivers/scsi/fcoe/fcoe_transport.c | 16 +-
3608 drivers/scsi/hosts.c | 4 +-
3609 drivers/scsi/hpsa.c | 38 +-
3610 drivers/scsi/hpsa.h | 2 +-
3611 drivers/scsi/hptiop.c | 2 -
3612 drivers/scsi/hptiop.h | 1 -
3613 drivers/scsi/ipr.c | 32 +-
3614 drivers/scsi/ipr.h | 2 +-
3615 drivers/scsi/libfc/fc_exch.c | 50 +-
3616 drivers/scsi/libsas/sas_ata.c | 2 +-
3617 drivers/scsi/lpfc/lpfc.h | 8 +-
3618 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3619 drivers/scsi/lpfc/lpfc_init.c | 8 +-
3620 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3621 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3622 drivers/scsi/mpt3sas/mpt3sas_base.c | 2 +-
3623 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
3624 drivers/scsi/pmcraid.c | 46 +-
3625 drivers/scsi/pmcraid.h | 8 +-
3626 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3627 drivers/scsi/qla2xxx/qla_gbl.h | 8 +-
3628 drivers/scsi/qla2xxx/qla_os.c | 15 +-
3629 drivers/scsi/qla2xxx/qla_target.c | 16 +-
3630 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3631 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3632 drivers/scsi/qla4xxx/ql4_os.c | 15 +-
3633 drivers/scsi/scsi.c | 2 +-
3634 drivers/scsi/scsi_lib.c | 8 +-
3635 drivers/scsi/scsi_sysfs.c | 2 +-
3636 drivers/scsi/scsi_transport_fc.c | 8 +-
3637 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3638 drivers/scsi/scsi_transport_spi.c | 2 +-
3639 drivers/scsi/scsi_transport_srp.c | 8 +-
3640 drivers/scsi/sd.c | 6 +-
3641 drivers/scsi/sg.c | 2 +-
3642 drivers/scsi/sr.c | 21 +-
3643 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3644 drivers/spi/spi.c | 2 +-
3645 drivers/staging/android/timed_output.c | 6 +-
3646 drivers/staging/comedi/comedi_fops.c | 8 +-
3647 drivers/staging/fbtft/fbtft-core.c | 2 +-
3648 drivers/staging/fbtft/fbtft.h | 2 +-
3649 drivers/staging/gdm724x/gdm_lte.c | 2 +-
3650 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3651 drivers/staging/gdm72xx/gdm_wimax.c | 2 +-
3652 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3653 drivers/staging/iio/adc/ad7280a.c | 4 +-
3654 .../staging/lustre/lnet/klnds/socklnd/socklnd.h | 6 +-
3655 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3656 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3657 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3658 .../lustre/lustre/include/lustre/lustre_idl.h | 92 +-
3659 drivers/staging/lustre/lustre/include/lustre_dlm.h | 8 +-
3660 drivers/staging/lustre/lustre/include/lustre_net.h | 2 +-
3661 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3662 drivers/staging/lustre/lustre/ldlm/ldlm_request.c | 5 +-
3663 drivers/staging/lustre/lustre/llite/dir.c | 2 +-
3664 drivers/staging/lustre/lustre/lov/lov_io.c | 62 +-
3665 drivers/staging/lustre/lustre/obdclass/llog_swab.c | 24 +-
3666 drivers/staging/lustre/lustre/osc/osc_request.c | 24 +-
3667 drivers/staging/lustre/lustre/ptlrpc/layout.c | 7 +-
3668 .../staging/lustre/lustre/ptlrpc/pack_generic.c | 151 +-
3669 drivers/staging/octeon/ethernet-rx.c | 24 +-
3670 drivers/staging/octeon/ethernet.c | 8 +-
3671 drivers/staging/panel/panel.c | 4 +-
3672 drivers/staging/rdma/hfi1/pcie.c | 2 +-
3673 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 18 +-
3674 drivers/staging/rtl8188eu/hal/rtl8188eu_recv.c | 2 +-
3675 drivers/staging/rtl8188eu/hal/rtl8188eu_xmit.c | 2 +-
3676 drivers/staging/rtl8188eu/include/Hal8188EPhyCfg.h | 8 -
3677 drivers/staging/rtl8188eu/include/hal_intf.h | 5 +-
3678 drivers/staging/rtl8188eu/include/odm_precomp.h | 2 +-
3679 drivers/staging/rtl8188eu/include/recv_osdep.h | 1 -
3680 drivers/staging/rtl8188eu/include/rtl8188e_recv.h | 2 +-
3681 drivers/staging/rtl8188eu/include/rtl8188e_xmit.h | 2 +-
3682 drivers/staging/rtl8188eu/include/rtw_cmd.h | 1 -
3683 drivers/staging/rtl8188eu/include/rtw_eeprom.h | 6 -
3684 drivers/staging/rtl8188eu/include/rtw_ioctl.h | 9 -
3685 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 12 +-
3686 drivers/staging/rtl8188eu/include/xmit_osdep.h | 2 +-
3687 drivers/staging/rtl8188eu/os_dep/usb_ops_linux.c | 4 +-
3688 drivers/staging/rtl8188eu/os_dep/xmit_linux.c | 2 +-
3689 drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 49 +-
3690 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 4 +-
3691 drivers/staging/rtl8192e/rtl8192e/rtl_dm.c | 10 +-
3692 drivers/staging/rtl8192e/rtl8192e/rtl_dm.h | 4 +-
3693 drivers/staging/rtl8192e/rtl8192e/rtl_ps.c | 6 +-
3694 drivers/staging/rtl8192e/rtl8192e/rtl_ps.h | 3 +-
3695 drivers/staging/rtl8192e/rtl8192e/rtl_wx.c | 48 +-
3696 drivers/staging/rtl8192e/rtllib.h | 4 +-
3697 drivers/staging/rtl8192e/rtllib_softmac.c | 32 +-
3698 drivers/staging/rtl8192e/rtllib_softmac_wx.c | 2 +-
3699 drivers/staging/rtl8192e/rtllib_tx.c | 2 +-
3700 drivers/staging/rtl8192u/ieee80211/ieee80211.h | 2 +-
3701 .../staging/rtl8192u/ieee80211/ieee80211_softmac.c | 6 +-
3702 drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c | 2 +-
3703 drivers/staging/rtl8192u/r8192U_core.c | 7 +-
3704 drivers/staging/rtl8712/rtl8712_recv.c | 6 +-
3705 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3706 drivers/staging/rtl8712/rtl871x_ioctl.h | 14 -
3707 drivers/staging/rtl8712/rtl871x_xmit.c | 2 +-
3708 drivers/staging/rtl8712/rtl871x_xmit.h | 2 +-
3709 drivers/staging/rtl8712/usb_ops_linux.c | 2 +-
3710 drivers/staging/rtl8712/xmit_linux.c | 2 +-
3711 drivers/staging/rtl8712/xmit_osdep.h | 2 +-
3712 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 +-
3713 drivers/staging/rtl8723au/core/rtw_xmit.c | 2 +-
3714 drivers/staging/rtl8723au/hal/rtl8723au_recv.c | 2 +-
3715 drivers/staging/rtl8723au/hal/usb_ops_linux.c | 4 +-
3716 drivers/staging/rtl8723au/include/Hal8723APhyCfg.h | 8 -
3717 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
3718 drivers/staging/rtl8723au/include/hal_intf.h | 2 -
3719 drivers/staging/rtl8723au/include/recv_osdep.h | 1 -
3720 drivers/staging/rtl8723au/include/rtw_ap.h | 2 -
3721 drivers/staging/rtl8723au/include/rtw_cmd.h | 1 -
3722 drivers/staging/rtl8723au/include/rtw_eeprom.h | 7 -
3723 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 14 +-
3724 drivers/staging/rtl8723au/include/usb_ops.h | 8 +-
3725 drivers/staging/rtl8723au/include/xmit_osdep.h | 2 +-
3726 drivers/staging/rtl8723au/os_dep/ioctl_cfg80211.c | 2 +-
3727 drivers/staging/rtl8723au/os_dep/xmit_linux.c | 2 +-
3728 drivers/staging/sm750fb/sm750.c | 14 +-
3729 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
3730 drivers/staging/unisys/visornic/visornic_main.c | 2 +-
3731 drivers/staging/wilc1000/linux_wlan.c | 2 +-
3732 drivers/staging/wilc1000/wilc_spi.c | 2 -
3733 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
3734 drivers/staging/wlan-ng/p80211netdev.c | 2 +-
3735 drivers/target/sbp/sbp_target.c | 4 +-
3736 drivers/thermal/cpu_cooling.c | 9 +-
3737 drivers/thermal/devfreq_cooling.c | 19 +-
3738 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
3739 drivers/thermal/of-thermal.c | 17 +-
3740 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
3741 drivers/tty/cyclades.c | 6 +-
3742 drivers/tty/hvc/hvc_console.c | 14 +-
3743 drivers/tty/hvc/hvcs.c | 21 +-
3744 drivers/tty/hvc/hvsi.c | 22 +-
3745 drivers/tty/hvc/hvsi_lib.c | 4 +-
3746 drivers/tty/ipwireless/tty.c | 27 +-
3747 drivers/tty/moxa.c | 2 +-
3748 drivers/tty/n_gsm.c | 6 +-
3749 drivers/tty/n_tty.c | 28 +-
3750 drivers/tty/pty.c | 4 +-
3751 drivers/tty/rocket.c | 6 +-
3752 drivers/tty/serial/8250/8250_core.c | 10 +-
3753 drivers/tty/serial/8250/8250_pci.c | 2 +-
3754 drivers/tty/serial/ifx6x60.c | 2 +-
3755 drivers/tty/serial/ioc4_serial.c | 6 +-
3756 drivers/tty/serial/jsm/jsm_driver.c | 2 +-
3757 drivers/tty/serial/kgdb_nmi.c | 4 +-
3758 drivers/tty/serial/kgdboc.c | 34 +-
3759 drivers/tty/serial/msm_serial.c | 4 +-
3760 drivers/tty/serial/samsung.c | 9 +-
3761 drivers/tty/serial/serial_core.c | 8 +-
3762 drivers/tty/synclink.c | 34 +-
3763 drivers/tty/synclink_gt.c | 28 +-
3764 drivers/tty/synclinkmp.c | 34 +-
3765 drivers/tty/tty_io.c | 2 +-
3766 drivers/tty/tty_ldisc.c | 8 +-
3767 drivers/tty/tty_port.c | 22 +-
3768 drivers/uio/uio.c | 13 +-
3769 drivers/usb/atm/cxacru.c | 2 +-
3770 drivers/usb/atm/usbatm.c | 24 +-
3771 drivers/usb/class/cdc-acm.h | 2 +-
3772 drivers/usb/core/devices.c | 6 +-
3773 drivers/usb/core/devio.c | 12 +-
3774 drivers/usb/core/hcd.c | 4 +-
3775 drivers/usb/core/sysfs.c | 2 +-
3776 drivers/usb/core/usb.c | 2 +-
3777 drivers/usb/early/ehci-dbgp.c | 16 +-
3778 drivers/usb/gadget/function/f_phonet.c | 2 +-
3779 drivers/usb/gadget/function/u_serial.c | 22 +-
3780 drivers/usb/gadget/legacy/inode.c | 4 +-
3781 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3782 drivers/usb/host/ehci-hcd.c | 2 +-
3783 drivers/usb/host/ehci-hub.c | 4 +-
3784 drivers/usb/host/ehci-q.c | 4 +-
3785 drivers/usb/host/fotg210-hcd.c | 2 +-
3786 drivers/usb/host/hwa-hc.c | 2 +-
3787 drivers/usb/host/ohci-hcd.c | 2 +-
3788 drivers/usb/host/r8a66597.h | 2 +-
3789 drivers/usb/host/uhci-hcd.c | 2 +-
3790 drivers/usb/host/xhci-pci.c | 2 +-
3791 drivers/usb/host/xhci.c | 2 +-
3792 drivers/usb/misc/appledisplay.c | 4 +-
3793 drivers/usb/misc/sisusbvga/sisusb_con.c | 98 +-
3794 drivers/usb/serial/console.c | 8 +-
3795 drivers/usb/storage/transport.c | 2 +-
3796 drivers/usb/storage/usb.c | 2 +-
3797 drivers/usb/storage/usb.h | 2 +-
3798 drivers/usb/usbip/vhci.h | 2 +-
3799 drivers/usb/usbip/vhci_hcd.c | 6 +-
3800 drivers/usb/usbip/vhci_rx.c | 2 +-
3801 drivers/usb/wusbcore/wa-hc.h | 4 +-
3802 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3803 drivers/vfio/pci/vfio_pci.c | 2 +-
3804 drivers/vhost/vringh.c | 20 +-
3805 drivers/video/backlight/kb3886_bl.c | 2 +-
3806 drivers/video/console/dummycon.c | 96 +-
3807 drivers/video/console/fbcon.c | 2 +-
3808 drivers/video/console/vgacon.c | 23 +-
3809 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3810 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3811 drivers/video/fbdev/aty/mach64_ct.c | 5 +-
3812 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3813 drivers/video/fbdev/aty/mach64_gx.c | 17 +-
3814 drivers/video/fbdev/core/fb_defio.c | 6 +-
3815 drivers/video/fbdev/core/fbmem.c | 12 +-
3816 drivers/video/fbdev/hyperv_fb.c | 4 +-
3817 drivers/video/fbdev/i810/i810_accel.c | 1 +
3818 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
3819 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3820 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3821 drivers/video/fbdev/omap2/omapfb/dss/display.c | 8 +-
3822 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
3823 drivers/video/fbdev/sis/sis_main.h | 2 +-
3824 drivers/video/fbdev/smscufx.c | 4 +-
3825 drivers/video/fbdev/udlfb.c | 36 +-
3826 drivers/video/fbdev/uvesafb.c | 52 +-
3827 drivers/video/fbdev/vesafb.c | 58 +-
3828 drivers/video/fbdev/via/via_clock.h | 2 +-
3829 drivers/xen/events/events_base.c | 6 +-
3830 drivers/xen/xen-pciback/pci_stub.c | 2 +-
3831 fs/9p/vfs_addr.c | 2 +-
3832 fs/9p/vfs_inode_dotl.c | 4 +-
3833 fs/Kconfig.binfmt | 2 +-
3834 fs/afs/file.c | 8 +-
3835 fs/afs/inode.c | 4 +-
3836 fs/afs/internal.h | 4 +-
3837 fs/aio.c | 2 +-
3838 fs/autofs4/waitq.c | 2 +-
3839 fs/befs/endian.h | 6 +-
3840 fs/binfmt_aout.c | 23 +-
3841 fs/binfmt_elf.c | 670 +-
3842 fs/binfmt_elf_fdpic.c | 4 +-
3843 fs/block_dev.c | 2 +-
3844 fs/btrfs/ctree.c | 11 +-
3845 fs/btrfs/ctree.h | 4 +-
3846 fs/btrfs/delayed-inode.c | 6 +-
3847 fs/btrfs/delayed-inode.h | 4 +-
3848 fs/btrfs/delayed-ref.c | 4 +-
3849 fs/btrfs/disk-io.c | 4 +-
3850 fs/btrfs/extent_map.c | 8 +-
3851 fs/btrfs/file.c | 4 +-
3852 fs/btrfs/free-space-cache.h | 1 +
3853 fs/btrfs/raid56.c | 30 +-
3854 fs/btrfs/super.c | 2 +-
3855 fs/btrfs/sysfs.c | 2 +-
3856 fs/btrfs/tests/btrfs-tests.c | 2 +-
3857 fs/btrfs/tests/free-space-tests.c | 2 +-
3858 fs/btrfs/transaction.c | 2 +-
3859 fs/btrfs/tree-log.c | 8 +-
3860 fs/btrfs/tree-log.h | 2 +-
3861 fs/btrfs/volumes.c | 14 +-
3862 fs/btrfs/volumes.h | 22 +-
3863 fs/buffer.c | 2 +-
3864 fs/cachefiles/bind.c | 6 +-
3865 fs/cachefiles/daemon.c | 8 +-
3866 fs/cachefiles/internal.h | 12 +-
3867 fs/cachefiles/namei.c | 2 +-
3868 fs/cachefiles/proc.c | 12 +-
3869 fs/ceph/dir.c | 12 +-
3870 fs/ceph/super.c | 4 +-
3871 fs/cifs/cifs_debug.c | 12 +-
3872 fs/cifs/cifsfs.c | 8 +-
3873 fs/cifs/cifsglob.h | 54 +-
3874 fs/cifs/file.c | 14 +-
3875 fs/cifs/misc.c | 4 +-
3876 fs/cifs/smb1ops.c | 80 +-
3877 fs/cifs/smb2ops.c | 84 +-
3878 fs/cifs/smb2pdu.c | 3 +-
3879 fs/coda/cache.c | 10 +-
3880 fs/coda/dir.c | 5 +-
3881 fs/compat.c | 9 +-
3882 fs/compat_binfmt_elf.c | 2 +
3883 fs/compat_ioctl.c | 12 +-
3884 fs/configfs/dir.c | 10 +-
3885 fs/coredump.c | 18 +-
3886 fs/dcache.c | 64 +-
3887 fs/ecryptfs/inode.c | 2 +-
3888 fs/ecryptfs/miscdev.c | 2 +-
3889 fs/exec.c | 365 +-
3890 fs/exofs/inode.c | 7 +-
3891 fs/ext2/xattr.c | 5 +-
3892 fs/ext4/ext4.h | 20 +-
3893 fs/ext4/mballoc.c | 44 +-
3894 fs/ext4/resize.c | 16 +-
3895 fs/ext4/super.c | 2 +-
3896 fs/ext4/sysfs.c | 2 +-
3897 fs/ext4/xattr.c | 5 +-
3898 fs/fhandle.c | 5 +-
3899 fs/file.c | 18 +-
3900 fs/freevxfs/vxfs_inode.c | 8 +-
3901 fs/freevxfs/vxfs_inode.h | 4 +-
3902 fs/fs-writeback.c | 11 +-
3903 fs/fs_struct.c | 8 +-
3904 fs/fscache/cookie.c | 40 +-
3905 fs/fscache/internal.h | 202 +-
3906 fs/fscache/object.c | 26 +-
3907 fs/fscache/operation.c | 38 +-
3908 fs/fscache/page.c | 110 +-
3909 fs/fscache/stats.c | 348 +-
3910 fs/fuse/cuse.c | 10 +-
3911 fs/fuse/dev.c | 4 +-
3912 fs/fuse/file.c | 4 +-
3913 fs/fuse/inode.c | 4 +-
3914 fs/gfs2/aops.c | 2 +-
3915 fs/gfs2/file.c | 2 +-
3916 fs/gfs2/glock.c | 22 +-
3917 fs/gfs2/glops.c | 4 +-
3918 fs/gfs2/quota.c | 6 +-
3919 fs/hugetlbfs/inode.c | 13 +-
3920 fs/inode.c | 4 +-
3921 fs/jbd2/commit.c | 2 +-
3922 fs/jbd2/transaction.c | 4 +-
3923 fs/jffs2/erase.c | 3 +-
3924 fs/jffs2/file.c | 3 +-
3925 fs/jffs2/fs.c | 2 +-
3926 fs/jffs2/os-linux.h | 2 +-
3927 fs/jffs2/wbuf.c | 3 +-
3928 fs/jfs/super.c | 2 +-
3929 fs/kernfs/dir.c | 2 +-
3930 fs/kernfs/file.c | 20 +-
3931 fs/libfs.c | 10 +-
3932 fs/lockd/clnt4xdr.c | 46 +-
3933 fs/lockd/clntproc.c | 4 +-
3934 fs/lockd/clntxdr.c | 44 +-
3935 fs/lockd/mon.c | 24 +-
3936 fs/lockd/svc.c | 2 +-
3937 fs/lockd/svc4proc.c | 69 +-
3938 fs/lockd/svcproc.c | 75 +-
3939 fs/lockd/xdr.c | 44 +-
3940 fs/lockd/xdr4.c | 41 +-
3941 fs/logfs/dev_bdev.c | 13 +-
3942 fs/logfs/dev_mtd.c | 13 +-
3943 fs/logfs/dir.c | 4 +-
3944 fs/logfs/logfs.h | 5 +-
3945 fs/logfs/readwrite.c | 2 +-
3946 fs/logfs/segment.c | 2 +-
3947 fs/logfs/super.c | 39 -
3948 fs/namei.c | 16 +-
3949 fs/namespace.c | 16 +-
3950 fs/nfs/callback.h | 18 +-
3951 fs/nfs/callback_proc.c | 26 +-
3952 fs/nfs/callback_xdr.c | 73 +-
3953 fs/nfs/dir.c | 5 +-
3954 fs/nfs/inode.c | 6 +-
3955 fs/nfs/internal.h | 5 +-
3956 fs/nfs/mount_clnt.c | 26 +-
3957 fs/nfs/nfs2xdr.c | 101 +-
3958 fs/nfs/nfs3xdr.c | 201 +-
3959 fs/nfs/nfs42xdr.c | 60 +-
3960 fs/nfs/nfs4xdr.c | 507 +-
3961 fs/nfs/read.c | 2 +-
3962 fs/nfs/symlink.c | 6 +-
3963 fs/nfsd/current_stateid.h | 24 +-
3964 fs/nfsd/nfs2acl.c | 85 +-
3965 fs/nfsd/nfs3acl.c | 44 +-
3966 fs/nfsd/nfs3proc.c | 271 +-
3967 fs/nfsd/nfs3xdr.c | 171 +-
3968 fs/nfsd/nfs4callback.c | 31 +-
3969 fs/nfsd/nfs4proc.c | 320 +-
3970 fs/nfsd/nfs4state.c | 111 +-
3971 fs/nfsd/nfs4xdr.c | 564 +-
3972 fs/nfsd/nfscache.c | 11 +-
3973 fs/nfsd/nfsproc.c | 193 +-
3974 fs/nfsd/nfsxdr.c | 96 +-
3975 fs/nfsd/vfs.c | 6 +-
3976 fs/nfsd/xdr.h | 50 +-
3977 fs/nfsd/xdr3.h | 100 +-
3978 fs/nfsd/xdr4.h | 50 +-
3979 fs/nls/nls_base.c | 26 +-
3980 fs/nls/nls_cp932.c | 2 +-
3981 fs/nls/nls_cp936.c | 2 +-
3982 fs/nls/nls_cp949.c | 2 +-
3983 fs/nls/nls_cp950.c | 2 +-
3984 fs/nls/nls_euc-jp.c | 8 +-
3985 fs/nls/nls_koi8-ru.c | 8 +-
3986 fs/notify/fanotify/fanotify_user.c | 4 +-
3987 fs/notify/notification.c | 4 +-
3988 fs/ntfs/dir.c | 4 +-
3989 fs/ntfs/inode.c | 19 +-
3990 fs/ntfs/inode.h | 4 +-
3991 fs/ntfs/mft.c | 4 +-
3992 fs/ntfs/super.c | 8 +-
3993 fs/ocfs2/dlm/dlmcommon.h | 4 +-
3994 fs/ocfs2/dlm/dlmdebug.c | 10 +-
3995 fs/ocfs2/dlm/dlmdomain.c | 4 +-
3996 fs/ocfs2/dlm/dlmmaster.c | 4 +-
3997 fs/ocfs2/dlmfs/dlmfs.c | 4 +-
3998 fs/ocfs2/localalloc.c | 2 +-
3999 fs/ocfs2/ocfs2.h | 10 +-
4000 fs/ocfs2/suballoc.c | 12 +-
4001 fs/ocfs2/super.c | 20 +-
4002 fs/overlayfs/copy_up.c | 2 +-
4003 fs/pipe.c | 72 +-
4004 fs/posix_acl.c | 4 +-
4005 fs/proc/array.c | 20 +
4006 fs/proc/base.c | 7 +-
4007 fs/proc/kcore.c | 36 +-
4008 fs/proc/meminfo.c | 2 +-
4009 fs/proc/nommu.c | 2 +-
4010 fs/proc/proc_sysctl.c | 26 +-
4011 fs/proc/task_mmu.c | 39 +-
4012 fs/proc/task_nommu.c | 6 +-
4013 fs/proc/vmcore.c | 16 +-
4014 fs/qnx6/qnx6.h | 4 +-
4015 fs/quota/netlink.c | 4 +-
4016 fs/read_write.c | 34 +-
4017 fs/readdir.c | 3 +-
4018 fs/reiserfs/do_balan.c | 2 +-
4019 fs/reiserfs/procfs.c | 2 +-
4020 fs/reiserfs/reiserfs.h | 4 +-
4021 fs/select.c | 2 +-
4022 fs/seq_file.c | 4 +-
4023 fs/splice.c | 43 +-
4024 fs/squashfs/xattr.c | 10 +-
4025 fs/super.c | 3 +-
4026 fs/sysv/sysv.h | 2 +-
4027 fs/tracefs/inode.c | 8 +-
4028 fs/ubifs/find.c | 34 +-
4029 fs/ubifs/lprops.c | 5 +-
4030 fs/udf/misc.c | 2 +-
4031 fs/ufs/swab.h | 4 +-
4032 fs/userfaultfd.c | 2 +-
4033 fs/xattr.c | 21 +
4034 fs/xfs/libxfs/xfs_bmap.c | 2 +-
4035 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
4036 fs/xfs/xfs_dir2_readdir.c | 7 +-
4037 fs/xfs/xfs_ioctl.c | 2 +-
4038 fs/xfs/xfs_linux.h | 4 +-
4039 include/acpi/ghes.h | 2 +-
4040 include/asm-generic/4level-fixup.h | 2 +
4041 include/asm-generic/atomic-long.h | 176 +-
4042 include/asm-generic/atomic64.h | 12 +
4043 include/asm-generic/bitops/__fls.h | 2 +-
4044 include/asm-generic/bitops/fls.h | 2 +-
4045 include/asm-generic/bitops/fls64.h | 4 +-
4046 include/asm-generic/bug.h | 6 +-
4047 include/asm-generic/cache.h | 4 +-
4048 include/asm-generic/emergency-restart.h | 2 +-
4049 include/asm-generic/kmap_types.h | 4 +-
4050 include/asm-generic/local.h | 13 +
4051 include/asm-generic/pgtable-nopmd.h | 18 +-
4052 include/asm-generic/pgtable-nopud.h | 15 +-
4053 include/asm-generic/pgtable.h | 16 +
4054 include/asm-generic/sections.h | 1 +
4055 include/asm-generic/uaccess.h | 16 +
4056 include/asm-generic/vmlinux.lds.h | 15 +-
4057 include/crypto/algapi.h | 2 +-
4058 include/crypto/cast6.h | 4 +-
4059 include/crypto/serpent.h | 4 +-
4060 include/crypto/xts.h | 2 +-
4061 include/drm/drmP.h | 19 +-
4062 include/drm/drm_mm.h | 2 +-
4063 include/drm/drm_modeset_helper_vtables.h | 2 +-
4064 include/drm/i915_pciids.h | 2 +-
4065 include/drm/intel-gtt.h | 4 +-
4066 include/drm/ttm/ttm_memory.h | 2 +-
4067 include/drm/ttm/ttm_page_alloc.h | 1 +
4068 include/keys/asymmetric-subtype.h | 2 +-
4069 include/keys/encrypted-type.h | 2 +-
4070 include/keys/rxrpc-type.h | 2 +-
4071 include/keys/user-type.h | 2 +-
4072 include/linux/atmdev.h | 4 +-
4073 include/linux/atomic.h | 12 +-
4074 include/linux/audit.h | 2 +-
4075 include/linux/average.h | 2 +-
4076 include/linux/binfmts.h | 3 +-
4077 include/linux/bitmap.h | 2 +-
4078 include/linux/bitops.h | 8 +-
4079 include/linux/blk-cgroup.h | 24 +-
4080 include/linux/blkdev.h | 2 +-
4081 include/linux/blktrace_api.h | 2 +-
4082 include/linux/cache.h | 8 +
4083 include/linux/cdrom.h | 1 -
4084 include/linux/cgroup-defs.h | 2 +-
4085 include/linux/cleancache.h | 2 +-
4086 include/linux/clk-provider.h | 1 +
4087 include/linux/compat.h | 15 +-
4088 include/linux/compiler-gcc.h | 30 +-
4089 include/linux/compiler.h | 193 +-
4090 include/linux/configfs.h | 2 +-
4091 include/linux/cpufreq.h | 7 +-
4092 include/linux/cpuidle.h | 5 +-
4093 include/linux/cpumask.h | 14 +-
4094 include/linux/crypto.h | 4 +-
4095 include/linux/ctype.h | 2 +-
4096 include/linux/dcache.h | 4 +-
4097 include/linux/decompress/mm.h | 2 +-
4098 include/linux/devfreq.h | 2 +-
4099 include/linux/device.h | 7 +-
4100 include/linux/dma-mapping.h | 2 +-
4101 include/linux/efi.h | 1 +
4102 include/linux/elf.h | 2 +
4103 include/linux/err.h | 4 +-
4104 include/linux/extcon.h | 2 +-
4105 include/linux/fb.h | 3 +-
4106 include/linux/fdtable.h | 2 +-
4107 include/linux/firewire.h | 2 +-
4108 include/linux/fs.h | 5 +-
4109 include/linux/fs_struct.h | 2 +-
4110 include/linux/fscache-cache.h | 2 +-
4111 include/linux/fscache.h | 2 +-
4112 include/linux/fsnotify.h | 2 +-
4113 include/linux/genhd.h | 4 +-
4114 include/linux/genl_magic_func.h | 2 +-
4115 include/linux/genl_magic_struct.h | 4 +-
4116 include/linux/gfp.h | 14 +-
4117 include/linux/highmem.h | 12 +
4118 include/linux/hugetlb.h | 2 +-
4119 include/linux/hugetlb_cgroup.h | 11 +
4120 include/linux/hwmon-sysfs.h | 6 +-
4121 include/linux/i2c.h | 1 +
4122 include/linux/if_pppox.h | 2 +-
4123 include/linux/init.h | 12 +-
4124 include/linux/init_task.h | 7 +
4125 include/linux/interrupt.h | 6 +-
4126 include/linux/iommu.h | 2 +-
4127 include/linux/ioport.h | 2 +-
4128 include/linux/ipc.h | 2 +-
4129 include/linux/irq.h | 5 +-
4130 include/linux/irqdesc.h | 2 +-
4131 include/linux/irqdomain.h | 3 +
4132 include/linux/jbd2.h | 2 +-
4133 include/linux/jiffies.h | 16 +-
4134 include/linux/kallsyms.h | 18 +-
4135 include/linux/key-type.h | 2 +-
4136 include/linux/kgdb.h | 6 +-
4137 include/linux/kmemleak.h | 4 +-
4138 include/linux/kobject.h | 3 +-
4139 include/linux/kobject_ns.h | 2 +-
4140 include/linux/kref.h | 2 +-
4141 include/linux/libata.h | 2 +-
4142 include/linux/linkage.h | 12 +
4143 include/linux/list.h | 15 +
4144 include/linux/lockd/xdr.h | 34 +-
4145 include/linux/lockd/xdr4.h | 34 +-
4146 include/linux/lockref.h | 26 +-
4147 include/linux/math64.h | 10 +-
4148 include/linux/memcontrol.h | 2 +-
4149 include/linux/mempolicy.h | 7 +
4150 include/linux/mm.h | 97 +-
4151 include/linux/mm_types.h | 20 +
4152 include/linux/mmiotrace.h | 4 +-
4153 include/linux/mmzone.h | 2 +-
4154 include/linux/mod_devicetable.h | 4 +-
4155 include/linux/module.h | 58 +-
4156 include/linux/moduleloader.h | 16 +
4157 include/linux/moduleparam.h | 12 +-
4158 include/linux/net.h | 2 +-
4159 include/linux/netdevice.h | 7 +-
4160 include/linux/netfilter.h | 2 +-
4161 include/linux/netfilter/ipset/ip_set_comment.h | 3 +-
4162 include/linux/netfilter/nfnetlink.h | 2 +-
4163 include/linux/netlink.h | 12 +-
4164 include/linux/nls.h | 4 +-
4165 include/linux/notifier.h | 3 +-
4166 include/linux/oprofile.h | 4 +-
4167 include/linux/padata.h | 2 +-
4168 include/linux/pagemap.h | 4 +-
4169 include/linux/pci_hotplug.h | 3 +-
4170 include/linux/percpu.h | 2 +-
4171 include/linux/perf_event.h | 12 +-
4172 include/linux/pid.h | 4 +-
4173 include/linux/pipe_fs_i.h | 8 +-
4174 include/linux/pm.h | 1 +
4175 include/linux/pm_domain.h | 2 +-
4176 include/linux/pm_runtime.h | 2 +-
4177 include/linux/pnp.h | 2 +-
4178 include/linux/poison.h | 4 +-
4179 include/linux/power/smartreflex.h | 2 +-
4180 include/linux/ppp-comp.h | 2 +-
4181 include/linux/preempt.h | 21 +
4182 include/linux/printk.h | 2 +-
4183 include/linux/proc_ns.h | 2 +-
4184 include/linux/psci.h | 2 +-
4185 include/linux/quota.h | 2 +-
4186 include/linux/random.h | 19 +-
4187 include/linux/rculist.h | 16 +
4188 include/linux/rcupdate.h | 8 +
4189 include/linux/reboot.h | 14 +-
4190 include/linux/regset.h | 3 +-
4191 include/linux/relay.h | 2 +-
4192 include/linux/rio.h | 2 +-
4193 include/linux/rmap.h | 4 +-
4194 include/linux/sched.h | 76 +-
4195 include/linux/sched/sysctl.h | 1 +
4196 include/linux/scif.h | 2 +-
4197 include/linux/semaphore.h | 2 +-
4198 include/linux/seq_file.h | 1 +
4199 include/linux/seqlock.h | 10 +
4200 include/linux/signal.h | 2 +-
4201 include/linux/skbuff.h | 12 +-
4202 include/linux/slab.h | 47 +-
4203 include/linux/slab_def.h | 14 +-
4204 include/linux/slub_def.h | 2 +-
4205 include/linux/smp.h | 2 +
4206 include/linux/sock_diag.h | 2 +-
4207 include/linux/sonet.h | 2 +-
4208 include/linux/spinlock.h | 17 +-
4209 include/linux/srcu.h | 5 +-
4210 include/linux/sunrpc/addr.h | 8 +-
4211 include/linux/sunrpc/clnt.h | 2 +-
4212 include/linux/sunrpc/svc.h | 2 +-
4213 include/linux/sunrpc/svc_rdma.h | 18 +-
4214 include/linux/sunrpc/svcauth.h | 2 +-
4215 include/linux/swapops.h | 10 +-
4216 include/linux/swiotlb.h | 3 +-
4217 include/linux/syscalls.h | 34 +-
4218 include/linux/syscore_ops.h | 2 +-
4219 include/linux/sysctl.h | 3 +-
4220 include/linux/sysfs.h | 9 +-
4221 include/linux/sysrq.h | 3 +-
4222 include/linux/tcp.h | 14 +-
4223 include/linux/thread_info.h | 7 +
4224 include/linux/tty.h | 4 +-
4225 include/linux/tty_driver.h | 2 +-
4226 include/linux/tty_ldisc.h | 2 +-
4227 include/linux/types.h | 16 +
4228 include/linux/uaccess.h | 2 +-
4229 include/linux/uio_driver.h | 2 +-
4230 include/linux/unaligned/access_ok.h | 24 +-
4231 include/linux/usb.h | 12 +-
4232 include/linux/usb/hcd.h | 1 +
4233 include/linux/usb/renesas_usbhs.h | 2 +-
4234 include/linux/vermagic.h | 21 +-
4235 include/linux/vga_switcheroo.h | 8 +-
4236 include/linux/vmalloc.h | 7 +-
4237 include/linux/vmstat.h | 24 +-
4238 include/linux/writeback.h | 3 +-
4239 include/linux/xattr.h | 5 +-
4240 include/linux/zlib.h | 3 +-
4241 include/media/v4l2-dev.h | 2 +-
4242 include/media/v4l2-device.h | 2 +-
4243 include/net/9p/transport.h | 2 +-
4244 include/net/bluetooth/l2cap.h | 2 +-
4245 include/net/bonding.h | 2 +-
4246 include/net/caif/cfctrl.h | 6 +-
4247 include/net/cfg80211-wext.h | 20 +-
4248 include/net/cfg802154.h | 2 +-
4249 include/net/fib_rules.h | 3 +-
4250 include/net/flow.h | 2 +-
4251 include/net/genetlink.h | 2 +-
4252 include/net/gro_cells.h | 2 +-
4253 include/net/inet_connection_sock.h | 2 +-
4254 include/net/inet_sock.h | 2 +-
4255 include/net/inetpeer.h | 2 +-
4256 include/net/ip_fib.h | 2 +-
4257 include/net/ip_vs.h | 8 +-
4258 include/net/ipv6.h | 2 +-
4259 include/net/irda/ircomm_tty.h | 1 +
4260 include/net/irda/irias_object.h | 2 +-
4261 include/net/irda/irlmp.h | 1 +
4262 include/net/irda/irlmp_event.h | 6 +-
4263 include/net/irda/timer.h | 6 +-
4264 include/net/iucv/af_iucv.h | 2 +-
4265 include/net/llc_c_ac.h | 2 +-
4266 include/net/llc_c_ev.h | 4 +-
4267 include/net/llc_c_st.h | 2 +-
4268 include/net/llc_s_ac.h | 2 +-
4269 include/net/llc_s_st.h | 2 +-
4270 include/net/mac80211.h | 6 +-
4271 include/net/neighbour.h | 4 +-
4272 include/net/net_namespace.h | 18 +-
4273 include/net/netfilter/nf_conntrack.h | 2 +-
4274 include/net/netlink.h | 2 +-
4275 include/net/netns/conntrack.h | 6 +-
4276 include/net/netns/ipv4.h | 4 +-
4277 include/net/netns/ipv6.h | 4 +-
4278 include/net/netns/xfrm.h | 2 +-
4279 include/net/ping.h | 2 +-
4280 include/net/protocol.h | 4 +-
4281 include/net/rtnetlink.h | 2 +-
4282 include/net/sctp/checksum.h | 4 +-
4283 include/net/sctp/sm.h | 4 +-
4284 include/net/sctp/structs.h | 2 +-
4285 include/net/snmp.h | 10 +-
4286 include/net/sock.h | 12 +-
4287 include/net/tcp.h | 8 +-
4288 include/net/xfrm.h | 15 +-
4289 include/rdma/ib_cm.h | 8 +-
4290 include/rdma/iw_cm.h | 2 +-
4291 include/scsi/libfc.h | 3 +-
4292 include/scsi/scsi_device.h | 6 +-
4293 include/scsi/scsi_driver.h | 2 +-
4294 include/scsi/scsi_transport_fc.h | 3 +-
4295 include/scsi/sg.h | 2 +-
4296 include/sound/compress_driver.h | 2 +-
4297 include/sound/control.h | 4 +-
4298 include/sound/pcm.h | 2 +-
4299 include/sound/rawmidi.h | 3 +-
4300 include/sound/seq_kernel.h | 2 +-
4301 include/sound/soc.h | 4 +-
4302 include/trace/events/irq.h | 4 +-
4303 include/uapi/linux/a.out.h | 8 +
4304 include/uapi/linux/bcache.h | 5 +-
4305 include/uapi/linux/byteorder/little_endian.h | 28 +-
4306 include/uapi/linux/connector.h | 2 +-
4307 include/uapi/linux/elf.h | 28 +
4308 include/uapi/linux/screen_info.h | 2 +-
4309 include/uapi/linux/swab.h | 6 +-
4310 include/uapi/linux/xattr.h | 4 +
4311 include/video/udlfb.h | 8 +-
4312 include/video/uvesafb.h | 1 +
4313 init/Kconfig | 2 +-
4314 init/Makefile | 3 +
4315 init/do_mounts.c | 16 +-
4316 init/do_mounts.h | 8 +-
4317 init/do_mounts_initrd.c | 30 +-
4318 init/do_mounts_md.c | 6 +-
4319 init/init_task.c | 4 +
4320 init/initramfs.c | 38 +-
4321 init/main.c | 30 +-
4322 ipc/compat.c | 4 +-
4323 ipc/ipc_sysctl.c | 14 +-
4324 ipc/mq_sysctl.c | 4 +-
4325 ipc/sem.c | 4 +-
4326 ipc/shm.c | 8 +-
4327 kernel/audit.c | 8 +-
4328 kernel/auditsc.c | 4 +-
4329 kernel/bpf/core.c | 28 +-
4330 kernel/capability.c | 3 +
4331 kernel/cgroup.c | 29 +-
4332 kernel/compat.c | 38 +-
4333 kernel/debug/debug_core.c | 16 +-
4334 kernel/debug/kdb/kdb_main.c | 4 +-
4335 kernel/events/core.c | 38 +-
4336 kernel/events/internal.h | 10 +-
4337 kernel/events/uprobes.c | 2 +-
4338 kernel/exit.c | 27 +-
4339 kernel/fork.c | 175 +-
4340 kernel/futex.c | 11 +-
4341 kernel/futex_compat.c | 2 +-
4342 kernel/irq/manage.c | 2 +-
4343 kernel/irq/msi.c | 19 +-
4344 kernel/irq/spurious.c | 2 +-
4345 kernel/jump_label.c | 5 +
4346 kernel/kallsyms.c | 40 +-
4347 kernel/kexec.c | 3 +-
4348 kernel/kmod.c | 8 +-
4349 kernel/kprobes.c | 4 +-
4350 kernel/ksysfs.c | 2 +-
4351 kernel/locking/lockdep.c | 7 +-
4352 kernel/locking/mutex-debug.c | 12 +-
4353 kernel/locking/mutex-debug.h | 4 +-
4354 kernel/locking/mutex.c | 6 +-
4355 kernel/module.c | 403 +-
4356 kernel/notifier.c | 17 +-
4357 kernel/padata.c | 4 +-
4358 kernel/panic.c | 11 +-
4359 kernel/pid.c | 6 +-
4360 kernel/pid_namespace.c | 2 +-
4361 kernel/power/process.c | 12 +-
4362 kernel/profile.c | 14 +-
4363 kernel/ptrace.c | 8 +-
4364 kernel/rcu/rcutorture.c | 60 +-
4365 kernel/rcu/tiny.c | 4 +-
4366 kernel/rcu/tree.c | 42 +-
4367 kernel/rcu/tree.h | 16 +-
4368 kernel/rcu/tree_plugin.h | 18 +-
4369 kernel/rcu/tree_trace.c | 14 +-
4370 kernel/resource.c | 4 +-
4371 kernel/sched/auto_group.c | 4 +-
4372 kernel/sched/core.c | 49 +-
4373 kernel/sched/fair.c | 2 +-
4374 kernel/sched/rt.c | 4 +-
4375 kernel/sched/sched.h | 13 +-
4376 kernel/signal.c | 28 +-
4377 kernel/smp.c | 2 +-
4378 kernel/smpboot.c | 4 +-
4379 kernel/softirq.c | 12 +-
4380 kernel/stop_machine.c | 2 +-
4381 kernel/sys.c | 10 +-
4382 kernel/sys_ni.c | 4 +-
4383 kernel/sysctl.c | 34 +-
4384 kernel/time/alarmtimer.c | 4 +-
4385 kernel/time/posix-clock.c | 8 +-
4386 kernel/time/posix-cpu-timers.c | 4 +-
4387 kernel/time/posix-timers.c | 36 +-
4388 kernel/time/timer.c | 2 +-
4389 kernel/time/timer_stats.c | 10 +-
4390 kernel/trace/blktrace.c | 6 +-
4391 kernel/trace/ftrace.c | 33 +-
4392 kernel/trace/ring_buffer.c | 96 +-
4393 kernel/trace/trace.c | 2 +-
4394 kernel/trace/trace.h | 2 +-
4395 kernel/trace/trace_clock.c | 4 +-
4396 kernel/trace/trace_events.c | 1 -
4397 kernel/trace/trace_functions_graph.c | 4 +-
4398 kernel/trace/trace_mmiotrace.c | 8 +-
4399 kernel/trace/trace_output.c | 10 +-
4400 kernel/trace/trace_seq.c | 2 +-
4401 kernel/trace/trace_stack.c | 2 +-
4402 kernel/user.c | 2 +-
4403 kernel/user_namespace.c | 2 +-
4404 kernel/utsname_sysctl.c | 2 +-
4405 kernel/watchdog.c | 2 +-
4406 kernel/workqueue.c | 8 +-
4407 lib/Kconfig.debug | 8 +-
4408 lib/Makefile | 2 +-
4409 lib/bitmap.c | 8 +-
4410 lib/bug.c | 2 +
4411 lib/debugobjects.c | 2 +-
4412 lib/decompress_bunzip2.c | 3 +-
4413 lib/decompress_unlzma.c | 4 +-
4414 lib/div64.c | 4 +-
4415 lib/dma-debug.c | 4 +-
4416 lib/inflate.c | 2 +-
4417 lib/ioremap.c | 4 +-
4418 lib/irq_poll.c | 2 +-
4419 lib/kobject.c | 4 +-
4420 lib/list_debug.c | 126 +-
4421 lib/lockref.c | 44 +-
4422 lib/percpu-refcount.c | 2 +-
4423 lib/radix-tree.c | 2 +-
4424 lib/random32.c | 2 +-
4425 lib/rhashtable.c | 4 +-
4426 lib/show_mem.c | 2 +-
4427 lib/strncpy_from_user.c | 2 +-
4428 lib/strnlen_user.c | 2 +-
4429 lib/swiotlb.c | 2 +-
4430 lib/usercopy.c | 6 +
4431 lib/vsprintf.c | 12 +-
4432 mm/Kconfig | 6 +-
4433 mm/backing-dev.c | 4 +-
4434 mm/debug.c | 3 +
4435 mm/filemap.c | 10 +-
4436 mm/gup.c | 13 +-
4437 mm/highmem.c | 6 +-
4438 mm/hugetlb.c | 125 +-
4439 mm/hugetlb_cgroup.c | 60 +-
4440 mm/internal.h | 3 +-
4441 mm/maccess.c | 12 +-
4442 mm/madvise.c | 37 +
4443 mm/memcontrol.c | 6 +-
4444 mm/memory-failure.c | 6 +-
4445 mm/memory.c | 424 +-
4446 mm/mempolicy.c | 25 +
4447 mm/mlock.c | 18 +-
4448 mm/mm_init.c | 2 +-
4449 mm/mmap.c | 573 +-
4450 mm/mprotect.c | 137 +-
4451 mm/mremap.c | 39 +-
4452 mm/nommu.c | 21 +-
4453 mm/page-writeback.c | 2 +-
4454 mm/page_alloc.c | 53 +-
4455 mm/percpu.c | 2 +-
4456 mm/process_vm_access.c | 14 +-
4457 mm/readahead.c | 2 +-
4458 mm/rmap.c | 43 +-
4459 mm/shmem.c | 37 +-
4460 mm/slab.c | 111 +-
4461 mm/slab.h | 22 +-
4462 mm/slab_common.c | 86 +-
4463 mm/slob.c | 218 +-
4464 mm/slub.c | 111 +-
4465 mm/sparse-vmemmap.c | 4 +-
4466 mm/sparse.c | 2 +-
4467 mm/swap.c | 2 +
4468 mm/swapfile.c | 12 +-
4469 mm/util.c | 6 +
4470 mm/vmalloc.c | 116 +-
4471 mm/vmstat.c | 12 +-
4472 net/8021q/vlan.c | 5 +-
4473 net/8021q/vlan_netlink.c | 2 +-
4474 net/9p/mod.c | 4 +-
4475 net/9p/trans_fd.c | 2 +-
4476 net/atm/atm_misc.c | 8 +-
4477 net/atm/lec.h | 2 +-
4478 net/atm/proc.c | 6 +-
4479 net/atm/resources.c | 4 +-
4480 net/ax25/sysctl_net_ax25.c | 2 +-
4481 net/batman-adv/bat_iv_ogm.c | 8 +-
4482 net/batman-adv/fragmentation.c | 2 +-
4483 net/batman-adv/routing.c | 4 +-
4484 net/batman-adv/soft-interface.c | 12 +-
4485 net/batman-adv/sysfs.c | 40 +-
4486 net/batman-adv/sysfs.h | 4 +-
4487 net/batman-adv/translation-table.c | 14 +-
4488 net/batman-adv/types.h | 8 +-
4489 net/bluetooth/hci_sock.c | 2 +-
4490 net/bluetooth/l2cap_core.c | 6 +-
4491 net/bluetooth/l2cap_sock.c | 12 +-
4492 net/bluetooth/rfcomm/sock.c | 4 +-
4493 net/bluetooth/rfcomm/tty.c | 4 +-
4494 net/bridge/br_netlink.c | 2 +-
4495 net/bridge/netfilter/ebtables.c | 6 +-
4496 net/caif/cfctrl.c | 11 +-
4497 net/caif/chnl_net.c | 4 +-
4498 net/can/af_can.c | 2 +-
4499 net/can/gw.c | 6 +-
4500 net/ceph/ceph_common.c | 2 +-
4501 net/ceph/messenger.c | 4 +-
4502 net/compat.c | 26 +-
4503 net/core/datagram.c | 2 +-
4504 net/core/dev.c | 16 +-
4505 net/core/filter.c | 2 +-
4506 net/core/flow.c | 6 +-
4507 net/core/neighbour.c | 18 +-
4508 net/core/net-sysfs.c | 2 +-
4509 net/core/net_namespace.c | 8 +-
4510 net/core/netpoll.c | 4 +-
4511 net/core/rtnetlink.c | 17 +-
4512 net/core/scm.c | 12 +-
4513 net/core/skbuff.c | 11 +-
4514 net/core/sock.c | 28 +-
4515 net/core/sock_diag.c | 15 +-
4516 net/core/sysctl_net_core.c | 22 +-
4517 net/decnet/af_decnet.c | 1 +
4518 net/decnet/sysctl_net_decnet.c | 4 +-
4519 net/dsa/dsa.c | 2 +-
4520 net/hsr/hsr_device.c | 2 +-
4521 net/hsr/hsr_netlink.c | 2 +-
4522 net/ieee802154/6lowpan/core.c | 2 +-
4523 net/ieee802154/6lowpan/reassembly.c | 14 +-
4524 net/ipv4/af_inet.c | 2 +-
4525 net/ipv4/arp.c | 2 +-
4526 net/ipv4/devinet.c | 18 +-
4527 net/ipv4/fib_frontend.c | 6 +-
4528 net/ipv4/fib_semantics.c | 2 +-
4529 net/ipv4/inet_connection_sock.c | 4 +-
4530 net/ipv4/inet_diag.c | 4 +-
4531 net/ipv4/inet_timewait_sock.c | 2 +-
4532 net/ipv4/inetpeer.c | 2 +-
4533 net/ipv4/ip_fragment.c | 15 +-
4534 net/ipv4/ip_gre.c | 6 +-
4535 net/ipv4/ip_sockglue.c | 2 +-
4536 net/ipv4/ip_vti.c | 4 +-
4537 net/ipv4/ipconfig.c | 6 +-
4538 net/ipv4/ipip.c | 4 +-
4539 net/ipv4/netfilter/arp_tables.c | 12 +-
4540 net/ipv4/netfilter/ip_tables.c | 12 +-
4541 net/ipv4/ping.c | 14 +-
4542 net/ipv4/proc.c | 8 +-
4543 net/ipv4/raw.c | 14 +-
4544 net/ipv4/route.c | 32 +-
4545 net/ipv4/sysctl_net_ipv4.c | 22 +-
4546 net/ipv4/tcp_input.c | 6 +-
4547 net/ipv4/tcp_probe.c | 2 +-
4548 net/ipv4/udp.c | 10 +-
4549 net/ipv4/xfrm4_mode_transport.c | 2 +-
4550 net/ipv4/xfrm4_policy.c | 17 +-
4551 net/ipv4/xfrm4_state.c | 4 +-
4552 net/ipv6/addrconf.c | 24 +-
4553 net/ipv6/af_inet6.c | 2 +-
4554 net/ipv6/datagram.c | 2 +-
4555 net/ipv6/icmp.c | 2 +-
4556 net/ipv6/inet6_hashtables.c | 2 +-
4557 net/ipv6/ip6_fib.c | 4 +-
4558 net/ipv6/ip6_gre.c | 10 +-
4559 net/ipv6/ip6_tunnel.c | 4 +-
4560 net/ipv6/ip6_vti.c | 4 +-
4561 net/ipv6/ipv6_sockglue.c | 2 +-
4562 net/ipv6/ndisc.c | 2 +-
4563 net/ipv6/netfilter/ip6_tables.c | 12 +-
4564 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4565 net/ipv6/ping.c | 33 +-
4566 net/ipv6/proc.c | 10 +-
4567 net/ipv6/raw.c | 17 +-
4568 net/ipv6/reassembly.c | 13 +-
4569 net/ipv6/route.c | 2 +-
4570 net/ipv6/sit.c | 4 +-
4571 net/ipv6/sysctl_net_ipv6.c | 2 +-
4572 net/ipv6/udp.c | 6 +-
4573 net/ipv6/xfrm6_mode_transport.c | 2 +-
4574 net/ipv6/xfrm6_policy.c | 17 +-
4575 net/irda/discovery.c | 2 +-
4576 net/irda/ircomm/ircomm_core.c | 13 +-
4577 net/irda/ircomm/ircomm_tty.c | 24 +-
4578 net/irda/ircomm/ircomm_tty_attach.c | 4 +-
4579 net/irda/irda_device.c | 14 +-
4580 net/irda/iriap.c | 14 +-
4581 net/irda/irias_object.c | 10 +-
4582 net/irda/irlan/irlan_client.c | 2 +-
4583 net/irda/irlap.c | 15 +-
4584 net/irda/irlap_event.c | 2 +-
4585 net/irda/irlmp.c | 21 +-
4586 net/irda/irlmp_event.c | 6 +-
4587 net/irda/irnet/irnet.h | 2 +-
4588 net/irda/irnet/irnet_irda.c | 6 +-
4589 net/irda/irttp.c | 8 +-
4590 net/irda/timer.c | 24 +-
4591 net/iucv/af_iucv.c | 4 +-
4592 net/iucv/iucv.c | 2 +-
4593 net/key/af_key.c | 4 +-
4594 net/l2tp/l2tp_eth.c | 40 +-
4595 net/l2tp/l2tp_ip.c | 2 +-
4596 net/l2tp/l2tp_ip6.c | 2 +-
4597 net/mac80211/cfg.c | 10 +-
4598 net/mac80211/debugfs.c | 2 +-
4599 net/mac80211/debugfs_key.c | 4 +-
4600 net/mac80211/ieee80211_i.h | 3 +-
4601 net/mac80211/iface.c | 20 +-
4602 net/mac80211/key.c | 4 +-
4603 net/mac80211/main.c | 2 +-
4604 net/mac80211/pm.c | 4 +-
4605 net/mac80211/rate.c | 2 +-
4606 net/mac80211/sta_info.c | 2 +-
4607 net/mac80211/tx.c | 2 +-
4608 net/mac80211/util.c | 8 +-
4609 net/mac80211/wpa.c | 10 +-
4610 net/mac802154/iface.c | 6 +-
4611 net/mpls/af_mpls.c | 10 +-
4612 net/netfilter/ipset/ip_set_core.c | 7 +-
4613 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4614 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4615 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4616 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4617 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4618 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4619 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4620 net/netfilter/nf_conntrack_acct.c | 2 +-
4621 net/netfilter/nf_conntrack_core.c | 2 +-
4622 net/netfilter/nf_conntrack_ecache.c | 2 +-
4623 net/netfilter/nf_conntrack_helper.c | 2 +-
4624 net/netfilter/nf_conntrack_netlink.c | 22 +-
4625 net/netfilter/nf_conntrack_proto.c | 2 +-
4626 net/netfilter/nf_conntrack_standalone.c | 2 +-
4627 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4628 net/netfilter/nf_log.c | 10 +-
4629 net/netfilter/nf_nat_ftp.c | 2 +-
4630 net/netfilter/nf_nat_irc.c | 2 +-
4631 net/netfilter/nf_sockopt.c | 4 +-
4632 net/netfilter/nf_tables_api.c | 13 +-
4633 net/netfilter/nfnetlink_acct.c | 7 +-
4634 net/netfilter/nfnetlink_cthelper.c | 2 +-
4635 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4636 net/netfilter/nfnetlink_log.c | 4 +-
4637 net/netfilter/nft_compat.c | 9 +-
4638 net/netfilter/xt_IDLETIMER.c | 12 +-
4639 net/netfilter/xt_statistic.c | 8 +-
4640 net/netlink/af_netlink.c | 14 +-
4641 net/netlink/diag.c | 2 +-
4642 net/netlink/genetlink.c | 14 +-
4643 net/openvswitch/vport-geneve.c | 7 +-
4644 net/openvswitch/vport-gre.c | 7 +-
4645 net/openvswitch/vport-internal_dev.c | 4 +-
4646 net/openvswitch/vport-netdev.c | 7 +-
4647 net/openvswitch/vport-vxlan.c | 7 +-
4648 net/packet/af_packet.c | 26 +-
4649 net/packet/diag.c | 2 +-
4650 net/packet/internal.h | 6 +-
4651 net/phonet/pep.c | 6 +-
4652 net/phonet/socket.c | 2 +-
4653 net/phonet/sysctl.c | 2 +-
4654 net/rds/cong.c | 6 +-
4655 net/rds/ib.h | 2 +-
4656 net/rds/ib_cm.c | 2 +-
4657 net/rds/ib_recv.c | 4 +-
4658 net/rds/iw.h | 2 +-
4659 net/rds/iw_cm.c | 2 +-
4660 net/rds/iw_recv.c | 4 +-
4661 net/rds/rds.h | 2 +-
4662 net/rds/tcp.c | 2 +-
4663 net/rds/tcp.h | 6 +-
4664 net/rds/tcp_send.c | 2 +-
4665 net/rxrpc/af_rxrpc.c | 2 +-
4666 net/rxrpc/ar-ack.c | 14 +-
4667 net/rxrpc/ar-call.c | 2 +-
4668 net/rxrpc/ar-connection.c | 2 +-
4669 net/rxrpc/ar-connevent.c | 2 +-
4670 net/rxrpc/ar-input.c | 4 +-
4671 net/rxrpc/ar-internal.h | 8 +-
4672 net/rxrpc/ar-local.c | 2 +-
4673 net/rxrpc/ar-output.c | 4 +-
4674 net/rxrpc/ar-peer.c | 2 +-
4675 net/rxrpc/ar-proc.c | 4 +-
4676 net/rxrpc/ar-transport.c | 2 +-
4677 net/rxrpc/rxkad.c | 4 +-
4678 net/sched/sch_generic.c | 4 +-
4679 net/sched/sch_tbf.c | 9 +-
4680 net/sctp/ipv6.c | 6 +-
4681 net/sctp/protocol.c | 10 +-
4682 net/sctp/sm_sideeffect.c | 4 +-
4683 net/sctp/socket.c | 21 +-
4684 net/sctp/sysctl.c | 10 +-
4685 net/socket.c | 18 +-
4686 net/sunrpc/auth_gss/gss_rpc_upcall.c | 4 +-
4687 net/sunrpc/auth_gss/gss_rpc_xdr.c | 11 +-
4688 net/sunrpc/auth_gss/gss_rpc_xdr.h | 8 +-
4689 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4690 net/sunrpc/clnt.c | 4 +-
4691 net/sunrpc/rpcb_clnt.c | 66 +-
4692 net/sunrpc/sched.c | 4 +-
4693 net/sunrpc/svc.c | 8 +-
4694 net/sunrpc/svcauth_unix.c | 2 +-
4695 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4696 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4697 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4698 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4699 net/tipc/netlink_compat.c | 12 +-
4700 net/tipc/subscr.c | 2 +-
4701 net/unix/diag.c | 2 +-
4702 net/unix/sysctl_net_unix.c | 2 +-
4703 net/wireless/scan.c | 3 +-
4704 net/wireless/wext-compat.c | 140 +-
4705 net/wireless/wext-compat.h | 8 +-
4706 net/wireless/wext-core.c | 19 +-
4707 net/wireless/wext-sme.c | 5 +-
4708 net/xfrm/xfrm_policy.c | 16 +-
4709 net/xfrm/xfrm_state.c | 37 +-
4710 net/xfrm/xfrm_sysctl.c | 2 +-
4711 net/xfrm/xfrm_user.c | 2 +-
4712 scripts/Kbuild.include | 2 +-
4713 scripts/Makefile.build | 2 +-
4714 scripts/Makefile.clean | 3 +-
4715 scripts/Makefile.extrawarn | 4 +
4716 scripts/Makefile.gcc-plugins | 69 +
4717 scripts/Makefile.host | 68 +-
4718 scripts/basic/fixdep.c | 12 +-
4719 scripts/dtc/checks.c | 14 +-
4720 scripts/dtc/data.c | 6 +-
4721 scripts/dtc/flattree.c | 8 +-
4722 scripts/dtc/livetree.c | 4 +-
4723 scripts/gcc-plugin.sh | 51 +
4724 scripts/headers_install.sh | 1 +
4725 scripts/kallsyms.c | 4 +-
4726 scripts/kconfig/lkc.h | 5 +-
4727 scripts/kconfig/menu.c | 2 +-
4728 scripts/kconfig/symbol.c | 6 +-
4729 scripts/link-vmlinux.sh | 2 +-
4730 scripts/mod/file2alias.c | 14 +-
4731 scripts/mod/modpost.c | 40 +-
4732 scripts/mod/modpost.h | 6 +-
4733 scripts/mod/sumversion.c | 2 +-
4734 scripts/module-common.lds | 4 +
4735 scripts/package/builddeb | 1 +
4736 scripts/pnmtologo.c | 6 +-
4737 scripts/sortextable.h | 6 +-
4738 scripts/tags.sh | 2 +-
4739 security/Kconfig | 703 +-
4740 security/apparmor/include/policy.h | 2 +-
4741 security/apparmor/lsm.c | 16 +-
4742 security/apparmor/policy.c | 4 +-
4743 security/integrity/ima/ima.h | 4 +-
4744 security/integrity/ima/ima_api.c | 2 +-
4745 security/integrity/ima/ima_fs.c | 4 +-
4746 security/integrity/ima/ima_queue.c | 2 +-
4747 security/keys/internal.h | 8 +-
4748 security/keys/key.c | 18 +-
4749 security/keys/keyring.c | 4 -
4750 security/selinux/avc.c | 6 +-
4751 security/selinux/include/xfrm.h | 2 +-
4752 security/yama/yama_lsm.c | 2 +-
4753 sound/aoa/codecs/onyx.c | 7 +-
4754 sound/aoa/codecs/onyx.h | 1 +
4755 sound/core/oss/pcm_oss.c | 18 +-
4756 sound/core/pcm_compat.c | 2 +-
4757 sound/core/pcm_lib.c | 3 +-
4758 sound/core/pcm_native.c | 4 +-
4759 sound/core/rawmidi.c | 5 +-
4760 sound/core/seq/oss/seq_oss_synth.c | 4 +-
4761 sound/core/seq/seq_clientmgr.c | 10 +-
4762 sound/core/seq/seq_compat.c | 2 +-
4763 sound/core/seq/seq_fifo.c | 6 +-
4764 sound/core/seq/seq_fifo.h | 2 +-
4765 sound/core/seq/seq_memory.c | 18 +-
4766 sound/core/seq/seq_midi.c | 5 +-
4767 sound/core/seq/seq_virmidi.c | 2 +-
4768 sound/core/sound.c | 2 +-
4769 sound/drivers/mts64.c | 14 +-
4770 sound/drivers/opl4/opl4_lib.c | 2 +-
4771 sound/drivers/portman2x4.c | 3 +-
4772 sound/firewire/amdtp-am824.c | 2 +-
4773 sound/firewire/amdtp-stream.c | 4 +-
4774 sound/firewire/amdtp-stream.h | 2 +-
4775 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4776 sound/firewire/isight.c | 10 +-
4777 sound/firewire/oxfw/oxfw-scs1x.c | 8 +-
4778 sound/oss/sb_audio.c | 2 +-
4779 sound/oss/swarm_cs4297a.c | 6 +-
4780 sound/pci/als300.c | 2 +-
4781 sound/pci/aw2/aw2-alsa.c | 2 -
4782 sound/pci/aw2/aw2-saa7146.c | 4 +-
4783 sound/pci/ctxfi/ctamixer.c | 14 +-
4784 sound/pci/ctxfi/ctamixer.h | 8 +-
4785 sound/pci/ctxfi/ctatc.c | 20 +-
4786 sound/pci/ctxfi/ctdaio.c | 6 +-
4787 sound/pci/ctxfi/ctdaio.h | 4 +-
4788 sound/pci/ctxfi/ctsrc.c | 13 +-
4789 sound/pci/ctxfi/ctsrc.h | 8 +-
4790 sound/pci/hda/hda_codec.c | 2 +-
4791 sound/pci/ymfpci/ymfpci.h | 2 +-
4792 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4793 sound/soc/codecs/cx20442.c | 8 +-
4794 sound/soc/codecs/sti-sas.c | 10 +-
4795 sound/soc/codecs/tlv320dac33.c | 7 +-
4796 sound/soc/codecs/uda1380.c | 7 +-
4797 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4798 sound/soc/soc-ac97.c | 6 +-
4799 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4800 tools/gcc/Makefile | 46 +
4801 tools/gcc/checker_plugin.c | 496 +
4802 tools/gcc/colorize_plugin.c | 162 +
4803 tools/gcc/constify_plugin.c | 521 +
4804 tools/gcc/gcc-common.h | 858 +
4805 tools/gcc/gcc-generate-gimple-pass.h | 175 +
4806 tools/gcc/gcc-generate-ipa-pass.h | 289 +
4807 tools/gcc/gcc-generate-rtl-pass.h | 175 +
4808 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 +
4809 tools/gcc/initify_plugin.c | 536 +
4810 tools/gcc/kallocstat_plugin.c | 135 +
4811 tools/gcc/kernexec_plugin.c | 407 +
4812 tools/gcc/latent_entropy_plugin.c | 422 +
4813 tools/gcc/randomize_layout_seed.h | 1 +
4814 tools/gcc/rap_plugin/Makefile | 4 +
4815 tools/gcc/rap_plugin/rap.h | 36 +
4816 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 +
4817 tools/gcc/rap_plugin/rap_hash.c | 381 +
4818 tools/gcc/rap_plugin/rap_plugin.c | 477 +
4819 tools/gcc/rap_plugin/sip.c | 96 +
4820 tools/gcc/size_overflow_plugin/.gitignore | 3 +
4821 tools/gcc/size_overflow_plugin/Makefile | 28 +
4822 .../disable_size_overflow_hash.data | 12440 +++++++++++
4823 .../generate_size_overflow_hash.sh | 103 +
4824 .../insert_size_overflow_asm.c | 369 +
4825 .../size_overflow_plugin/intentional_overflow.c | 1118 +
4826 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4827 tools/gcc/size_overflow_plugin/size_overflow.h | 329 +
4828 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4829 .../size_overflow_plugin/size_overflow_hash.data | 21508 +++++++++++++++++++
4830 .../size_overflow_hash_aux.data | 92 +
4831 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 +
4832 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4833 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
4834 .../size_overflow_plugin_hash.c | 352 +
4835 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4836 .../size_overflow_transform_core.c | 1015 +
4837 tools/gcc/stackleak_plugin.c | 350 +
4838 tools/gcc/structleak_plugin.c | 239 +
4839 tools/include/linux/compiler.h | 8 +
4840 tools/perf/util/include/asm/alternative-asm.h | 3 +
4841 tools/virtio/linux/uaccess.h | 2 +-
4842 virt/kvm/kvm_main.c | 42 +-
4843 2639 files changed, 76327 insertions(+), 13888 deletions(-)
4844 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
4845 Author: Brad Spengler <spender@grsecurity.net>
4846 Date: Mon Apr 25 20:40:53 2016 -0400
4847
4848 Fix DoS in n_tty_receive_buf_common reported by marcan at:
4849 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
4850 and via lengthy diatribe on Twitter:
4851 https://twitter.com/marcan42/status/724740708104474626
4852 https://twitter.com/marcan42/status/724740985146609664
4853 https://twitter.com/marcan42/status/724741270325760000
4854 https://twitter.com/marcan42/status/724742465199050752
4855 https://twitter.com/marcan42/status/724745886794833920
4856 https://twitter.com/marcan42/status/724749571495075840
4857 https://twitter.com/marcan42/status/724746427285409796
4858 https://twitter.com/marcan42/status/724743150263095296
4859 https://twitter.com/marcan42/status/724757473433808896
4860
4861 Fix it correctly instead of using the incorrect fix suggested
4862 by marcan (aka "try reading the code next time")
4863 The original code was meant to fix an integer truncation issue
4864 that would also have caused a SIZE_OVERFLOW "DoS".
4865
4866 drivers/tty/n_tty.c | 9 +++++----
4867 1 file changed, 5 insertions(+), 4 deletions(-)
4868
4869 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
4870 Author: Brad Spengler <spender@grsecurity.net>
4871 Date: Mon Apr 25 19:52:33 2016 -0400
4872
4873 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
4874 reported by jotik at:
4875 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
4876 patch from Mathias Krause
4877
4878 fs/proc/base.c | 2 +-
4879 1 file changed, 1 insertion(+), 1 deletion(-)
4880
4881 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
4882 Author: Jiri Benc <jbenc@redhat.com>
4883 Date: Fri Apr 22 13:09:13 2016 +0200
4884
4885 cxgbi: fix uninitialized flowi6
4886
4887 ip6_route_output looks into different fields in the passed flowi6 structure,
4888 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
4889 first.
4890
4891 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
4892 Signed-off-by: Jiri Benc <jbenc@redhat.com>
4893 Signed-off-by: David S. Miller <davem@davemloft.net>
4894
4895 drivers/scsi/cxgbi/libcxgbi.c | 1 +
4896 1 file changed, 1 insertion(+)
4897
4898 commit ec65caa32652841a5be21d6e73146921af16d7a8
4899 Author: Brad Spengler <spender@grsecurity.net>
4900 Date: Wed Apr 20 20:59:43 2016 -0400
4901
4902 Make /proc/sched_debug only readable by root, mentioned in
4903 recent NCC Group paper on Linux containers
4904
4905 kernel/sched/debug.c | 4 ++++
4906 1 file changed, 4 insertions(+)
4907
4908 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
4909 Merge: 463149f ff26083
4910 Author: Brad Spengler <spender@grsecurity.net>
4911 Date: Wed Apr 20 17:55:53 2016 -0400
4912
4913 Merge branch 'pax-test' into grsec-test
4914
4915 commit ff260839e610d2bc1b0c579edd7deb0028198f01
4916 Author: Brad Spengler <spender@grsecurity.net>
4917 Date: Wed Apr 20 17:55:24 2016 -0400
4918
4919 Update to pax-linux-4.4.8-test14.patch:
4920 - Emese fixed some CodingStyle issues in the latent entropy plugin
4921 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4922
4923 arch/mips/include/asm/cache.h | 3 ++-
4924 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
4925 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
4926 arch/mips/lib/libgcc.h | 12 +++++++++---
4927 drivers/idle/intel_idle.c | 6 ++++--
4928 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
4929 6 files changed, 57 insertions(+), 33 deletions(-)
4930
4931 commit 463149f47a64db4b26a13009f83ed73d393a209c
4932 Author: Xiaodong Liu <xiaodong.liu@intel.com>
4933 Date: Tue Apr 12 09:45:51 2016 +0000
4934
4935 crypto: sha1-mb - use corrcet pointer while completing jobs
4936
4937 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
4938 when check and complete other jobs. If the memory of first completed req
4939 is freed, while still completing other jobs in the func, kernel will
4940 crash since NULL pointer is assigned to RIP.
4941
4942 Cc: <stable@vger.kernel.org>
4943 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
4944 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
4945 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4946
4947 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
4948 1 file changed, 2 insertions(+), 2 deletions(-)
4949
4950 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
4951 Author: Tom Lendacky <thomas.lendacky@amd.com>
4952 Date: Wed Apr 13 10:52:25 2016 -0500
4953
4954 crypto: ccp - Prevent information leakage on export
4955
4956 Prevent information from leaking to userspace by doing a memset to 0 of
4957 the export state structure before setting the structure values and copying
4958 it. This prevents un-initialized padding areas from being copied into the
4959 export area.
4960
4961 Cc: <stable@vger.kernel.org> # 3.14.x-
4962 Reported-by: Ben Hutchings <ben@decadent.org.uk>
4963 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
4964 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4965
4966 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
4967 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
4968 2 files changed, 6 insertions(+)
4969
4970 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
4971 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4972 Date: Mon Apr 18 14:33:54 2016 +0300
4973
4974 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
4975
4976 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
4977 order-0 memory allocations in RX path"), so here is no reason for depleting
4978 reserves. Generic __netdev_alloc_frag() implements the same logic.
4979
4980 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4981 Acked-by: Eric Dumazet <edumazet@google.com>
4982 Signed-off-by: David S. Miller <davem@davemloft.net>
4983
4984 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
4985 1 file changed, 1 insertion(+), 1 deletion(-)
4986
4987 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
4988 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
4989 Date: Thu Mar 17 18:00:29 2016 +0000
4990
4991 USB: usbip: fix potential out-of-bounds write
4992
4993 Fix potential out-of-bounds write to urb->transfer_buffer
4994 usbip handles network communication directly in the kernel. When receiving a
4995 packet from its peer, usbip code parses headers according to protocol. As
4996 part of this parsing urb->actual_length is filled. Since the input for
4997 urb->actual_length comes from the network, it should be treated as untrusted.
4998 Any entity controlling the network may put any value in the input and the
4999 preallocated urb->transfer_buffer may not be large enough to hold the data.
5000 Thus, the malicious entity is able to write arbitrary data to kernel memory.
5001
5002 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
5003 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5004
5005 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
5006 1 file changed, 11 insertions(+)
5007
5008 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
5009 Merge: d60a24d f5fe5fd
5010 Author: Brad Spengler <spender@grsecurity.net>
5011 Date: Wed Apr 20 17:35:58 2016 -0400
5012
5013 Merge branch 'pax-test' into grsec-test
5014
5015 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
5016 Merge: a107ba2 8c9aef0
5017 Author: Brad Spengler <spender@grsecurity.net>
5018 Date: Wed Apr 20 17:35:29 2016 -0400
5019
5020 Merge branch 'linux-4.4.y' into pax-test
5021
5022 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
5023 Author: Brad Spengler <spender@grsecurity.net>
5024 Date: Mon Apr 18 17:48:10 2016 -0400
5025
5026 fix cast for constify change, reported by pipacs
5027
5028 drivers/idle/intel_idle.c | 4 ++--
5029 1 file changed, 2 insertions(+), 2 deletions(-)
5030
5031 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
5032 Author: Brad Spengler <spender@grsecurity.net>
5033 Date: Fri Apr 15 21:31:07 2016 -0400
5034
5035 Use proper type for function pointer
5036
5037 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
5038 1 file changed, 3 insertions(+), 3 deletions(-)
5039
5040 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
5041 Author: Brad Spengler <spender@grsecurity.net>
5042 Date: Fri Apr 15 21:24:04 2016 -0400
5043
5044 Fix skylake cstates compat with constify
5045
5046 drivers/idle/intel_idle.c | 6 ++++--
5047 1 file changed, 4 insertions(+), 2 deletions(-)
5048
5049 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
5050 Author: Brad Spengler <spender@grsecurity.net>
5051 Date: Fri Apr 15 21:10:44 2016 -0400
5052
5053 Update size_overflow hash table
5054
5055 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
5056 1 file changed, 2 insertions(+), 1 deletion(-)
5057
5058 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
5059 Author: Brad Spengler <spender@grsecurity.net>
5060 Date: Fri Apr 15 20:52:37 2016 -0400
5061
5062 compile fix
5063
5064 fs/coredump.c | 3 ---
5065 1 file changed, 3 deletions(-)
5066
5067 commit 967224da52bd98d078b1237aea5ec9e622238fba
5068 Merge: 92771d6 a107ba2
5069 Author: Brad Spengler <spender@grsecurity.net>
5070 Date: Fri Apr 15 20:30:23 2016 -0400
5071
5072 Merge branch 'pax-test' into grsec-test
5073
5074 commit a107ba25214d9694eb836fb04c782ad694977b91
5075 Merge: 4d8fc00 b40108b
5076 Author: Brad Spengler <spender@grsecurity.net>
5077 Date: Fri Apr 15 20:18:26 2016 -0400
5078
5079 Merge branch 'linux-4.4.y' into pax-test
5080
5081 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
5082 Author: Brad Spengler <spender@grsecurity.net>
5083 Date: Sun Apr 10 07:18:03 2016 -0400
5084
5085 From: Mathias Krause <minipli@googlemail.com>
5086 To: "David S. Miller" <davem@davemloft.net>
5087 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
5088 Emelyanov <xemul@parallels.com>
5089 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
5090 interface
5091
5092 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
5093 pdiag_put_mclist() leaks uninitialized heap bytes via the
5094 PACKET_DIAG_MCLIST netlink attribute.
5095
5096 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
5097
5098 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
5099 Signed-off-by: Mathias Krause <minipli@googlemail.com>
5100 Cc: Eric W. Biederman <ebiederm@xmission.com>
5101 Cc: Pavel Emelyanov <xemul@parallels.com>
5102 ---
5103 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
5104 to userland before the introduction of the packet_diag interface.
5105 Therefore the "Fixes:" line on that commit.
5106
5107 net/packet/af_packet.c | 1 +
5108 1 file changed, 1 insertion(+)
5109
5110 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
5111 Author: Jakub Sitnicki <jkbs@redhat.com>
5112 Date: Tue Apr 5 18:41:08 2016 +0200
5113
5114 ipv6: Count in extension headers in skb->network_header
5115
5116 When sending a UDPv6 message longer than MTU, account for the length
5117 of fragmentable IPv6 extension headers in skb->network_header offset.
5118 Same as we do in alloc_new_skb path in __ip6_append_data().
5119
5120 This ensures that later on __ip6_make_skb() will make space in
5121 headroom for fragmentable extension headers:
5122
5123 /* move skb->data to ip header from ext header */
5124 if (skb->data < skb_network_header(skb))
5125 __skb_pull(skb, skb_network_offset(skb));
5126
5127 Prevents a splat due to skb_under_panic:
5128
5129 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
5130 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
5131 ------------[ cut here ]------------
5132 kernel BUG at net/core/skbuff.c:104!
5133 invalid opcode: 0000 [#1] KASAN
5134 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
5135 [...]
5136 Call Trace:
5137 [<ffffffff813eb7b9>] skb_push+0x79/0x80
5138 [<ffffffff8143397b>] eth_header+0x2b/0x100
5139 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
5140 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
5141 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
5142 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
5143 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
5144 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
5145 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
5146 [...]
5147
5148 Reported-by: Ji Jianwen <jiji@redhat.com>
5149 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
5150 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
5151 Signed-off-by: David S. Miller <davem@davemloft.net>
5152
5153 net/ipv6/ip6_output.c | 8 ++++----
5154 1 file changed, 4 insertions(+), 4 deletions(-)
5155
5156 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
5157 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5158 Date: Fri Apr 1 17:17:50 2016 -0300
5159
5160 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
5161
5162 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
5163 before ip6_tnl_create2 is called. When register_netdevice is called, there
5164 is no linkinfo attribute in the NEWLINK message because of that.
5165
5166 Setting rtnl_link_ops before calling register_netdevice fixes that.
5167
5168 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
5169 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5170 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
5171 Signed-off-by: David S. Miller <davem@davemloft.net>
5172
5173 net/ipv6/ip6_tunnel.c | 2 +-
5174 1 file changed, 1 insertion(+), 1 deletion(-)
5175
5176 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
5177 Author: Brad Spengler <spender@grsecurity.net>
5178 Date: Tue Apr 5 21:12:44 2016 -0400
5179
5180 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
5181
5182 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
5183 1 file changed, 12 insertions(+), 6 deletions(-)
5184
5185 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
5186 Author: Brad Spengler <spender@grsecurity.net>
5187 Date: Sun Apr 3 20:10:10 2016 -0400
5188
5189 Fix RANDSTRUCT support on ARM
5190
5191 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
5192 1 file changed, 52 insertions(+), 2 deletions(-)
5193
5194 commit bd893a75ab49f6ea5a216eb334471507337118ba
5195 Merge: 87b7f1d 4d8fc00
5196 Author: Brad Spengler <spender@grsecurity.net>
5197 Date: Sat Apr 2 11:54:20 2016 -0400
5198
5199 Merge branch 'pax-test' into grsec-test
5200
5201 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
5202 Author: Brad Spengler <spender@grsecurity.net>
5203 Date: Sat Apr 2 11:53:53 2016 -0400
5204
5205 Update to pax-linux-4.4.6-test13.patch:
5206 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
5207 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
5208
5209 arch/mips/include/asm/atomic.h | 4 ----
5210 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
5211 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
5212 3 files changed, 1 insertion(+), 5 deletions(-)
5213
5214 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
5215 Merge: 3335266 3abdad0
5216 Author: Brad Spengler <spender@grsecurity.net>
5217 Date: Sat Apr 2 11:19:17 2016 -0400
5218
5219 Merge branch 'pax-test' into grsec-test
5220
5221 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
5222 Author: Brad Spengler <spender@grsecurity.net>
5223 Date: Sat Apr 2 11:12:56 2016 -0400
5224
5225 Update to pax-linux-4.4.6-test12.patch:
5226 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
5227 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
5228 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
5229 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
5230 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
5231 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
5232 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
5233 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
5234 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
5235 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
5236 - fixed a gratuitous userland dereference in the amd64 stack walker
5237 - added latent entropy gathering to a few more functions
5238 - constified a few smp_hotplug_thread instances
5239
5240 arch/x86/entry/vdso/Makefile | 1 +
5241 arch/x86/include/asm/cpufeature.h | 1 -
5242 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
5243 arch/x86/kernel/head_32.S | 6 +++---
5244 arch/x86/mm/fault.c | 2 +-
5245 drivers/iommu/arm-smmu.c | 2 +-
5246 drivers/net/ppp/pptp.c | 1 +
5247 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
5248 fs/nfs/internal.h | 5 +++--
5249 fs/proc/kcore.c | 2 +-
5250 kernel/module.c | 6 +++---
5251 kernel/rcu/tree.c | 2 +-
5252 kernel/softirq.c | 2 +-
5253 kernel/stop_machine.c | 2 +-
5254 net/ipv6/xfrm6_mode_transport.c | 2 +-
5255 net/sched/sch_tbf.c | 9 ++++++---
5256 scripts/Makefile.gcc-plugins | 13 +++----------
5257 scripts/Makefile.host | 3 +--
5258 .../disable_size_overflow_hash.data | 4 +++-
5259 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
5260 20 files changed, 40 insertions(+), 48 deletions(-)
5261
5262 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
5263 Author: Mika Penttilä <mika.penttila@nextfour.com>
5264 Date: Mon Feb 22 17:56:52 2016 +0100
5265
5266 ARM: 8544/1: set_memory_xx fixes
5267
5268 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
5269
5270 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
5271 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
5272
5273 arch/arm/mm/pageattr.c | 3 +++
5274 1 file changed, 3 insertions(+)
5275
5276 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
5277 Author: Josh Boyer <jwboyer@fedoraproject.org>
5278 Date: Mon Mar 14 10:42:38 2016 -0400
5279
5280 USB: iowarrior: fix oops with malicious USB descriptors
5281
5282 The iowarrior driver expects at least one valid endpoint. If given
5283 malicious descriptors that specify 0 for the number of endpoints,
5284 it will crash in the probe function. Ensure there is at least
5285 one endpoint on the interface before using it.
5286
5287 The full report of this issue can be found here:
5288 http://seclists.org/bugtraq/2016/Mar/87
5289
5290 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5291 Cc: stable <stable@vger.kernel.org>
5292 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
5293 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5294
5295 drivers/usb/misc/iowarrior.c | 6 ++++++
5296 1 file changed, 6 insertions(+)
5297
5298 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
5299 Author: Oliver Neukum <oneukum@suse.com>
5300 Date: Tue Mar 15 10:14:04 2016 +0100
5301
5302 USB: cdc-acm: more sanity checking
5303
5304 An attack has become available which pretends to be a quirky
5305 device circumventing normal sanity checks and crashes the kernel
5306 by an insufficient number of interfaces. This patch adds a check
5307 to the code path for quirky devices.
5308
5309 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5310 CC: stable@vger.kernel.org
5311 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5312
5313 drivers/usb/class/cdc-acm.c | 3 +++
5314 1 file changed, 3 insertions(+)
5315
5316 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
5317 Author: Oliver Neukum <oneukum@suse.com>
5318 Date: Wed Mar 16 13:26:17 2016 +0100
5319
5320 USB: usb_driver_claim_interface: add sanity checking
5321
5322 Attacks that trick drivers into passing a NULL pointer
5323 to usb_driver_claim_interface() using forged descriptors are
5324 known. This thwarts them by sanity checking.
5325
5326 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5327 CC: stable@vger.kernel.org
5328 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5329
5330 drivers/usb/core/driver.c | 6 +++++-
5331 1 file changed, 5 insertions(+), 1 deletion(-)
5332
5333 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
5334 Author: Paolo Bonzini <pbonzini@redhat.com>
5335 Date: Mon Mar 21 10:15:25 2016 +0100
5336
5337 KVM: fix spin_lock_init order on x86
5338
5339 Moving the initialization earlier is needed in 4.6 because
5340 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
5341 complain:
5342
5343 [ 284.440294] INFO: trying to register non-static key.
5344 [ 284.445259] the code is fine but needs lockdep annotation.
5345 [ 284.450736] turning off the locking correctness validator.
5346 ...
5347 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
5348 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5349 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
5350 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5351 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
5352 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
5353 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
5354 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
5355
5356 However, it also helps fixing a preexisting problem, which is why this
5357 patch is also good for stable kernels: kvm_create_vm was incrementing
5358 current->mm->mm_count but not decrementing it at the out_err label (in
5359 case kvm_init_mmu_notifier failed). The new initialization order makes
5360 it possible to add the required mmdrop without adding a new error label.
5361
5362 Cc: stable@vger.kernel.org
5363 Reported-by: Borislav Petkov <bp@alien8.de>
5364 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5365
5366 virt/kvm/kvm_main.c | 21 +++++++++++----------
5367 1 file changed, 11 insertions(+), 10 deletions(-)
5368
5369 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
5370 Author: Paolo Bonzini <pbonzini@redhat.com>
5371 Date: Fri Mar 18 16:53:42 2016 +0100
5372
5373 KVM: VMX: avoid guest hang on invalid invvpid instruction
5374
5375 A guest executing an invalid invvpid instruction would hang
5376 because the instruction pointer was not updated.
5377
5378 Reported-by: jmontleo@redhat.com
5379 Tested-by: jmontleo@redhat.com
5380 Cc: stable@vger.kernel.org
5381 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
5382 Reviewed-by: David Matlack <dmatlack@google.com>
5383 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5384
5385 arch/x86/kvm/vmx.c | 1 +
5386 1 file changed, 1 insertion(+)
5387
5388 commit 602caaece277e5e21ae43771398bbf7778061beb
5389 Author: Paolo Bonzini <pbonzini@redhat.com>
5390 Date: Fri Mar 18 16:53:29 2016 +0100
5391
5392 KVM: VMX: avoid guest hang on invalid invept instruction
5393
5394 A guest executing an invalid invept instruction would hang
5395 because the instruction pointer was not updated.
5396
5397 Cc: stable@vger.kernel.org
5398 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
5399 Reviewed-by: David Matlack <dmatlack@google.com>
5400 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5401
5402 arch/x86/kvm/vmx.c | 1 +
5403 1 file changed, 1 insertion(+)
5404
5405 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
5406 Author: Jann Horn <jann@thejh.net>
5407 Date: Tue Mar 22 14:25:36 2016 -0700
5408
5409 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
5410
5411 This commit fixes the following security hole affecting systems where
5412 all of the following conditions are fulfilled:
5413
5414 - The fs.suid_dumpable sysctl is set to 2.
5415 - The kernel.core_pattern sysctl's value starts with "/". (Systems
5416 where kernel.core_pattern starts with "|/" are not affected.)
5417 - Unprivileged user namespace creation is permitted. (This is
5418 true on Linux >=3.8, but some distributions disallow it by
5419 default using a distro patch.)
5420
5421 Under these conditions, if a program executes under secure exec rules,
5422 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
5423 namespace, changes its root directory and crashes, the coredump will be
5424 written using fsuid=0 and a path derived from kernel.core_pattern - but
5425 this path is interpreted relative to the root directory of the process,
5426 allowing the attacker to control where a coredump will be written with
5427 root privileges.
5428
5429 To fix the security issue, always interpret core_pattern for dumps that
5430 are written under SUID_DUMP_ROOT relative to the root directory of init.
5431
5432 Signed-off-by: Jann Horn <jann@thejh.net>
5433 Acked-by: Kees Cook <keescook@chromium.org>
5434 Cc: Al Viro <viro@zeniv.linux.org.uk>
5435 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
5436 Cc: Andy Lutomirski <luto@kernel.org>
5437 Cc: Oleg Nesterov <oleg@redhat.com>
5438 Cc: <stable@vger.kernel.org>
5439 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5440 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5441
5442 arch/um/drivers/mconsole_kern.c | 2 +-
5443 fs/coredump.c | 31 +++++++++++++++++++++++++++----
5444 fs/fhandle.c | 2 +-
5445 fs/open.c | 6 ++----
5446 include/linux/fs.h | 2 +-
5447 kernel/sysctl_binary.c | 2 +-
5448 6 files changed, 33 insertions(+), 12 deletions(-)
5449
5450 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
5451 Author: Takashi Iwai <tiwai@suse.de>
5452 Date: Fri Apr 1 12:28:16 2016 +0200
5453
5454 ALSA: timer: Use mod_timer() for rearming the system timer
5455
5456 ALSA system timer backend stops the timer via del_timer() without sync
5457 and leaves del_timer_sync() at the close instead. This is because of
5458 the restriction by the design of ALSA timer: namely, the stop callback
5459 may be called from the timer handler, and calling the sync shall lead
5460 to a hangup. However, this also triggers a kernel BUG() when the
5461 timer is rearmed immediately after stopping without sync:
5462 kernel BUG at kernel/time/timer.c:966!
5463 Call Trace:
5464 <IRQ>
5465 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
5466 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
5467 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
5468 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
5469 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
5470 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
5471 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
5472 ....
5473
5474 It's the place where add_timer() checks the pending timer. It's clear
5475 that this may happen after the immediate restart without sync in our
5476 cases.
5477
5478 So, the workaround here is just to use mod_timer() instead of
5479 add_timer(). This looks like a band-aid fix, but it's a right move,
5480 as snd_timer_interrupt() takes care of the continuous rearm of timer.
5481
5482 Reported-by: Jiri Slaby <jslaby@suse.cz>
5483 Cc: <stable@vger.kernel.org>
5484 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5485
5486 sound/core/timer.c | 4 ++--
5487 1 file changed, 2 insertions(+), 2 deletions(-)
5488
5489 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
5490 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5491 Date: Wed Mar 30 11:40:43 2016 +0200
5492
5493 drm/udl: Use unlocked gem unreferencing
5494
5495 For drm_gem_object_unreference callers are required to hold
5496 dev->struct_mutex, which these paths don't. Enforcing this requirement
5497 has become a bit more strict with
5498
5499 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
5500 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5501 Date: Thu Oct 15 09:36:25 2015 +0200
5502
5503 drm/gem: Check locking in drm_gem_object_unreference
5504
5505 Cc: stable@vger.kernel.org
5506 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
5507 Signed-off-by: Dave Airlie <airlied@redhat.com>
5508
5509 drivers/gpu/drm/udl/udl_fb.c | 2 +-
5510 drivers/gpu/drm/udl/udl_gem.c | 2 +-
5511 2 files changed, 2 insertions(+), 2 deletions(-)
5512
5513 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
5514 Author: Jan Kara <jack@suse.com>
5515 Date: Mon Dec 7 14:34:49 2015 -0500
5516
5517 ext4: fix races of writeback with punch hole and zero range
5518
5519 When doing delayed allocation, update of on-disk inode size is postponed
5520 until IO submission time. However hole punch or zero range fallocate
5521 calls can end up discarding the tail page cache page and thus on-disk
5522 inode size would never be properly updated.
5523
5524 Make sure the on-disk inode size is updated before truncating page
5525 cache.
5526
5527 Signed-off-by: Jan Kara <jack@suse.com>
5528 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5529
5530 fs/ext4/ext4.h | 3 +++
5531 fs/ext4/extents.c | 5 +++++
5532 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
5533 3 files changed, 42 insertions(+), 1 deletion(-)
5534
5535 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
5536 Author: Jan Kara <jack@suse.com>
5537 Date: Mon Dec 7 14:31:11 2015 -0500
5538
5539 ext4: fix races between buffered IO and collapse / insert range
5540
5541 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
5542 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
5543 faults. If buffered write or write via mmap manages to squeeze between
5544 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
5545 implementations, the written data is simply discarded by
5546 truncate_pagecache() although it should have been shifted.
5547
5548 Fix the problem by moving filemap_write_and_wait_range() call inside
5549 i_mutex and i_mmap_sem. That way we are protected against races with
5550 both buffered writes and page faults.
5551
5552 Signed-off-by: Jan Kara <jack@suse.com>
5553 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5554
5555 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
5556 1 file changed, 31 insertions(+), 28 deletions(-)
5557
5558 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
5559 Author: Jan Kara <jack@suse.com>
5560 Date: Mon Dec 7 14:29:17 2015 -0500
5561
5562 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
5563
5564 Currently ext4_alloc_file_blocks() was handling protection against
5565 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
5566 and sometimes not and DIO protection ranks above it (although strictly
5567 speaking this cannot currently create any deadlocks). Also
5568 ext4_zero_range() was actually getting & releasing unlocked DIO
5569 protection twice in some cases. Luckily it didn't introduce any real bug
5570 but it was a land mine waiting to be stepped on. So move DIO protection
5571 out from ext4_alloc_file_blocks() into the two callsites.
5572
5573 Signed-off-by: Jan Kara <jack@suse.com>
5574 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5575
5576 fs/ext4/extents.c | 21 ++++++++++-----------
5577 1 file changed, 10 insertions(+), 11 deletions(-)
5578
5579 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
5580 Author: Jan Kara <jack@suse.com>
5581 Date: Mon Dec 7 14:28:03 2015 -0500
5582
5583 ext4: fix races between page faults and hole punching
5584
5585 Currently, page faults and hole punching are completely unsynchronized.
5586 This can result in page fault faulting in a page into a range that we
5587 are punching after truncate_pagecache_range() has been called and thus
5588 we can end up with a page mapped to disk blocks that will be shortly
5589 freed. Filesystem corruption will shortly follow. Note that the same
5590 race is avoided for truncate by checking page fault offset against
5591 i_size but there isn't similar mechanism available for punching holes.
5592
5593 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
5594 grab it for writing over truncate, hole punching, and other functions
5595 removing blocks from extent tree and for read over page faults. We
5596 cannot easily use i_data_sem for this since that ranks below transaction
5597 start and we need something ranking above it so that it can be held over
5598 the whole truncate / hole punching operation. Also remove various
5599 workarounds we had in the code to reduce race window when page fault
5600 could have created pages with stale mapping information.
5601
5602 Signed-off-by: Jan Kara <jack@suse.com>
5603 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5604
5605 fs/ext4/ext4.h | 10 +++++++++
5606 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
5607 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
5608 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
5609 fs/ext4/super.c | 1 +
5610 fs/ext4/truncate.h | 2 ++
5611 6 files changed, 127 insertions(+), 42 deletions(-)
5612
5613 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
5614 Author: Guenter Roeck <linux@roeck-us.net>
5615 Date: Sat Mar 26 12:28:05 2016 -0700
5616
5617 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
5618
5619 arm:pxa_defconfig can result in the following crash if the max1111 driver
5620 is not instantiated.
5621
5622 Unhandled fault: page domain fault (0x01b) at 0x00000000
5623 pgd = c0004000
5624 [00000000] *pgd=00000000
5625 Internal error: : 1b [#1] PREEMPT ARM
5626 Modules linked in:
5627 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
5628 Hardware name: SHARP Akita
5629 Workqueue: events sharpsl_charge_toggle
5630 task: c390a000 ti: c391e000 task.ti: c391e000
5631 PC is at max1111_read_channel+0x20/0x30
5632 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
5633 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
5634 ...
5635 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
5636 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
5637 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
5638 (spitzpm_read_devdata+0x5c/0xc4)
5639 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
5640 (sharpsl_check_battery_temp+0x78/0x110)
5641 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
5642 (sharpsl_charge_toggle+0x48/0x110)
5643 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
5644 (process_one_work+0x14c/0x48c)
5645 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
5646 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
5647 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
5648
5649 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
5650 module and thus not necessarily loaded. While building SPI_PXA2XX into the
5651 kernel would make the problem disappear, it appears prudent to ensure that
5652 the driver is instantiated before accessing its data structures.
5653
5654 Cc: Arnd Bergmann <arnd@arndb.de>
5655 Cc: stable@vger.kernel.org
5656 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
5657
5658 drivers/hwmon/max1111.c | 6 ++++++
5659 1 file changed, 6 insertions(+)
5660
5661 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
5662 Author: Nicolai Stange <nicstange@gmail.com>
5663 Date: Sun Mar 20 23:23:46 2016 +0100
5664
5665 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
5666
5667 Despite what the DocBook comment to pkcs7_validate_trust() says, the
5668 *_trusted argument is never set to false.
5669
5670 pkcs7_validate_trust() only positively sets *_trusted upon encountering
5671 a trusted PKCS#7 SignedInfo block.
5672
5673 This is quite unfortunate since its callers, system_verify_data() for
5674 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
5675
5676 Indeed, UBSAN splats when attempting to load the uninitialized local
5677 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
5678
5679 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
5680 load of value 82 is not a valid value for type '_Bool'
5681 [...]
5682 Call Trace:
5683 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
5684 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
5685 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
5686 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
5687 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
5688 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
5689 [<ffffffff814b83f0>] ? kfree+0x220/0x370
5690 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
5691 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
5692 [<ffffffff813c391a>] system_verify_data+0xca/0x170
5693 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
5694 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
5695 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
5696 [...]
5697
5698 The implication is that pkcs7_validate_trust() effectively grants trust
5699 when it really shouldn't have.
5700
5701 Fix this by explicitly setting *_trusted to false at the very beginning
5702 of pkcs7_validate_trust().
5703
5704 Cc: <stable@vger.kernel.org>
5705 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5706 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5707
5708 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
5709 1 file changed, 2 insertions(+)
5710
5711 commit 1052826f7352ccc98167129b0b83222f45d50046
5712 Author: Florian Westphal <fw@strlen.de>
5713 Date: Tue Mar 22 18:02:49 2016 +0100
5714
5715 netfilter: x_tables: validate e->target_offset early
5716
5717 We should check that e->target_offset is sane before
5718 mark_source_chains gets called since it will fetch the target entry
5719 for loop detection.
5720
5721 Signed-off-by: Florian Westphal <fw@strlen.de>
5722 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5723
5724 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
5725 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
5726 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
5727 3 files changed, 24 insertions(+), 27 deletions(-)
5728
5729 commit b35d19509e8dab157214e46dd24314663ccf554f
5730 Author: Florian Westphal <fw@strlen.de>
5731 Date: Tue Mar 22 18:02:50 2016 +0100
5732
5733 netfilter: x_tables: make sure e->next_offset covers remaining blob size
5734
5735 Otherwise this function may read data beyond the ruleset blob.
5736
5737 Signed-off-by: Florian Westphal <fw@strlen.de>
5738 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5739
5740 net/ipv4/netfilter/arp_tables.c | 6 ++++--
5741 net/ipv4/netfilter/ip_tables.c | 6 ++++--
5742 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
5743 3 files changed, 12 insertions(+), 6 deletions(-)
5744
5745 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
5746 Author: Florian Westphal <fw@strlen.de>
5747 Date: Tue Mar 22 18:02:52 2016 +0100
5748
5749 netfilter: x_tables: fix unconditional helper
5750
5751 Ben Hawkes says:
5752
5753 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
5754 is possible for a user-supplied ipt_entry structure to have a large
5755 next_offset field. This field is not bounds checked prior to writing a
5756 counter value at the supplied offset.
5757
5758 Problem is that mark_source_chains should not have been called --
5759 the rule doesn't have a next entry, so its supposed to return
5760 an absolute verdict of either ACCEPT or DROP.
5761
5762 However, the function conditional() doesn't work as the name implies.
5763 It only checks that the rule is using wildcard address matching.
5764
5765 However, an unconditional rule must also not be using any matches
5766 (no -m args).
5767
5768 The underflow validator only checked the addresses, therefore
5769 passing the 'unconditional absolute verdict' test, while
5770 mark_source_chains also tested for presence of matches, and thus
5771 proceeeded to the next (not-existent) rule.
5772
5773 Unify this so that all the callers have same idea of 'unconditional rule'.
5774
5775 Reported-by: Ben Hawkes <hawkes@google.com>
5776 Signed-off-by: Florian Westphal <fw@strlen.de>
5777 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5778
5779 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
5780 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
5781 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
5782 3 files changed, 31 insertions(+), 33 deletions(-)
5783
5784 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
5785 Author: Pablo Neira Ayuso <pablo@netfilter.org>
5786 Date: Thu Mar 24 21:29:53 2016 +0100
5787
5788 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
5789
5790 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
5791 in ebtables and all the x_tables variants and their respective compat
5792 code. Uncovered by KASAN.
5793
5794 Reported-by: Baozeng Ding <sploving1@gmail.com>
5795 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5796
5797 net/bridge/netfilter/ebtables.c | 4 ++++
5798 net/ipv4/netfilter/arp_tables.c | 2 ++
5799 net/ipv4/netfilter/ip_tables.c | 2 ++
5800 net/ipv6/netfilter/ip6_tables.c | 2 ++
5801 4 files changed, 10 insertions(+)
5802
5803 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
5804 Author: Nicolai Stange <nicstange@gmail.com>
5805 Date: Fri Mar 25 14:22:14 2016 -0700
5806
5807 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
5808
5809 If
5810 - generic_file_read_iter() gets called with a zero read length,
5811 - the read offset is at a page boundary,
5812 - IOCB_DIRECT is not set
5813 - and the page in question hasn't made it into the page cache yet,
5814 then do_generic_file_read() will trigger a readahead with a req_size hint
5815 of zero.
5816
5817 Since roundup_pow_of_two(0) is undefined, UBSAN reports
5818
5819 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
5820 shift exponent 64 is too large for 64-bit type 'long unsigned int'
5821 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
5822 [...]
5823 Call Trace:
5824 [...]
5825 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
5826 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
5827 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
5828 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
5829 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
5830 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
5831 [...]
5832 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
5833 [...]
5834
5835 when get_init_ra_size() gets called from ondemand_readahead().
5836
5837 The net effect is that the initial readahead size is arch dependent for
5838 requested read lengths of zero: for example, since
5839
5840 1UL << (sizeof(unsigned long) * 8)
5841
5842 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
5843 size becomes 4 on the former and 0 on the latter.
5844
5845 What's more, whether or not the file access timestamp is updated for zero
5846 length reads is decided differently for the two cases of IOCB_DIRECT
5847 being set or cleared: in the first case, generic_file_read_iter()
5848 explicitly skips updating that timestamp while in the latter case, it is
5849 always updated through the call to do_generic_file_read().
5850
5851 According to POSIX, zero length reads "do not modify the last data access
5852 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
5853
5854 Let generic_file_read_iter() unconditionally check the requested read
5855 length at its entry and return immediately with success if it is zero.
5856
5857 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5858 Cc: Al Viro <viro@zeniv.linux.org.uk>
5859 Reviewed-by: Jan Kara <jack@suse.cz>
5860 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5861 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5862
5863 mm/filemap.c | 7 ++++---
5864 1 file changed, 4 insertions(+), 3 deletions(-)
5865
5866 commit 604785419da498d7e876a0191b2e11626db706bb
5867 Author: Oliver Neukum <oneukum@suse.com>
5868 Date: Thu Mar 17 14:00:17 2016 -0700
5869
5870 Input: ims-pcu - sanity check against missing interfaces
5871
5872 A malicious device missing interface can make the driver oops.
5873 Add sanity checking.
5874
5875 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5876 CC: stable@vger.kernel.org
5877 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5878
5879 drivers/input/misc/ims-pcu.c | 4 ++++
5880 1 file changed, 4 insertions(+)
5881
5882 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
5883 Author: Vladis Dronov <vdronov@redhat.com>
5884 Date: Wed Mar 23 11:53:46 2016 -0700
5885
5886 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
5887
5888 The ati_remote2 driver expects at least two interfaces with one
5889 endpoint each. If given malicious descriptor that specify one
5890 interface or no endpoints, it will crash in the probe function.
5891 Ensure there is at least two interfaces and one endpoint for each
5892 interface before using it.
5893
5894 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
5895
5896 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5897 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
5898 Cc: stable@vger.kernel.org
5899 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5900
5901 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
5902 1 file changed, 30 insertions(+), 6 deletions(-)
5903
5904 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
5905 Author: Oliver Neukum <oneukum@suse.com>
5906 Date: Wed Mar 23 14:36:56 2016 -0700
5907
5908 Input: sur40 - fix DMA on stack
5909
5910 During the initialisation the driver uses a buffer on the stack for DMA.
5911 That violates the cache coherency rules. The fix is to allocate the buffer
5912 with kmalloc().
5913
5914 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5915 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5916
5917 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
5918 1 file changed, 14 insertions(+), 7 deletions(-)
5919
5920 commit 015dd03669b2ab646723f6b123377e4ef5694a10
5921 Author: Haiyang Zhang <haiyangz@microsoft.com>
5922 Date: Wed Mar 23 09:43:10 2016 -0700
5923
5924 hv_netvsc: Fix the array sizes to be max supported channels
5925
5926 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
5927 hosts. We use it for the related array sizes instead of using NR_CPUS,
5928 which may be set to several thousands.
5929 This patch reduces possible memory allocation failures.
5930
5931 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5932 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5933 Signed-off-by: David S. Miller <davem@davemloft.net>
5934
5935 drivers/net/hyperv/hyperv_net.h | 7 ++++---
5936 drivers/net/hyperv/rndis_filter.c | 4 ++--
5937 2 files changed, 6 insertions(+), 5 deletions(-)
5938
5939 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
5940 Author: Haiyang Zhang <haiyangz@microsoft.com>
5941 Date: Wed Mar 23 09:43:09 2016 -0700
5942
5943 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
5944
5945 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
5946 the nvdev->num_chn into a temp variable for later usage.
5947
5948 (Please also include this patch into stable branch.)
5949
5950 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5951 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5952 Signed-off-by: David S. Miller <davem@davemloft.net>
5953
5954 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
5955 1 file changed, 4 insertions(+), 1 deletion(-)
5956
5957 commit 7409626e43fe871cede30ac926425938f3ccddaf
5958 Author: Guillaume Nault <g.nault@alphalink.fr>
5959 Date: Wed Mar 23 16:38:55 2016 +0100
5960
5961 ppp: take reference on channels netns
5962
5963 Let channels hold a reference on their network namespace.
5964 Some channel types, like ppp_async and ppp_synctty, can have their
5965 userspace controller running in a different namespace. Therefore they
5966 can't rely on them to preclude their netns from being removed from
5967 under them.
5968
5969 ==================================================================
5970 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
5971 addr ffff880064e217e0
5972 Read of size 8 by task syz-executor/11581
5973 =============================================================================
5974 BUG net_namespace (Not tainted): kasan: bad access detected
5975 -----------------------------------------------------------------------------
5976
5977 Disabling lock debugging due to kernel taint
5978 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
5979 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
5980 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
5981 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
5982 [< inline >] slab_alloc kernel/mm/slub.c:2574
5983 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
5984 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
5985 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
5986 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
5987 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
5988 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
5989 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
5990 [< inline >] copy_process kernel/kernel/fork.c:1274
5991 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
5992 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
5993 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
5994 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
5995
5996 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
5997 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
5998 [< inline >] slab_free kernel/mm/slub.c:2805
5999 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
6000 [< inline >] net_free kernel/net/core/net_namespace.c:341
6001 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
6002 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
6003 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
6004 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
6005 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
6006 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
6007 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
6008 flags=0x5fffc0000004080
6009 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
6010
6011 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
6012 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
6013 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
6014 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
6015 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
6016 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
6017 Call Trace:
6018 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
6019 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
6020 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
6021 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
6022 [< inline >] print_address_description kernel/mm/kasan/report.c:138
6023 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
6024 [< inline >] kasan_report kernel/mm/kasan/report.c:259
6025 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
6026 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
6027 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
6028 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
6029 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
6030 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
6031 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
6032 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
6033 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
6034 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
6035 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
6036 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
6037 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
6038 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
6039 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
6040 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
6041 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
6042 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
6043 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
6044 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
6045 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
6046 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
6047 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
6048 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
6049 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
6050 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
6051 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
6052 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
6053 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
6054 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
6055 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
6056 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
6057 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
6058 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
6059 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
6060 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
6061 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
6062 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
6063 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
6064 Memory state around the buggy address:
6065 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6066 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6067 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6068 ^
6069 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6070 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6071 ==================================================================
6072
6073 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
6074 Reported-by: Baozeng Ding <sploving1@gmail.com>
6075 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
6076 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
6077 Signed-off-by: David S. Miller <davem@davemloft.net>
6078
6079 drivers/net/ppp/ppp_generic.c | 4 +++-
6080 1 file changed, 3 insertions(+), 1 deletion(-)
6081
6082 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
6083 Author: Herbert Xu <herbert@gondor.apana.org.au>
6084 Date: Wed Mar 16 17:06:01 2016 +0800
6085
6086 eCryptfs: Use skcipher and shash
6087
6088 eCryptfs: Fix null pointer dereference on kzalloc error path
6089
6090 The conversion to skcipher and shash added a couple of null pointer
6091 dereference bugs on the kzalloc failure path. This patch fixes them.
6092
6093 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
6094 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
6095 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6096
6097 fs/ecryptfs/keystore.c | 6 ++----
6098 1 file changed, 2 insertions(+), 4 deletions(-)
6099
6100 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
6101 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
6102 Date: Thu Mar 17 10:21:34 2016 +0100
6103
6104 crypto: marvell/cesa - fix memory leak
6105
6106 Crypto requests are not guaranteed to be finalized (->final() call),
6107 and can be freed at any moment, without getting any notification from
6108 the core. This can lead to memory leaks of the ->cache buffer.
6109
6110 Make this buffer part of the request object, and allocate an extra buffer
6111 from the DMA cache pool when doing DMA operations.
6112
6113 As a side effect, this patch also fixes another bug related to cache
6114 allocation and DMA operations. When the core allocates a new request and
6115 import an existing state, a cache buffer can be allocated (depending
6116 on the state). The problem is, at that very moment, we don't know yet
6117 whether the request will use DMA or not, and since everything is
6118 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
6119 should allocate a buffer for standard operation. But when
6120 mv_cesa_ahash_free_cache() is called, req->type has been set to
6121 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
6122 call (the buffer passed in argument has not been allocated from the pool).
6123
6124 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
6125 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
6126 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6127
6128 drivers/crypto/marvell/cesa.h | 3 +-
6129 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
6130 2 files changed, 20 insertions(+), 69 deletions(-)
6131
6132 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
6133 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
6134 Date: Thu Mar 17 10:21:35 2016 +0100
6135
6136 crypto: marvell/cesa - initialize hash states
6137
6138 ->export() might be called before we have done an update operation,
6139 and in this case the ->state field is left uninitialized.
6140 Put the correct default value when initializing the request.
6141
6142 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
6143 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6144
6145 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
6146 1 file changed, 20 insertions(+)
6147
6148 commit 23879f055d23e82c2f78cceca22c33e631973977
6149 Author: David S. Miller <davem@davemloft.net>
6150 Date: Sun Mar 13 23:28:00 2016 -0400
6151
6152 ipv4: Don't do expensive useless work during inetdev destroy.
6153
6154 When an inetdev is destroyed, every address assigned to the interface
6155 is removed. And in this scenerio we do two pointless things which can
6156 be very expensive if the number of assigned interfaces is large:
6157
6158 1) Address promotion. We are deleting all addresses, so there is no
6159 point in doing this.
6160
6161 2) A full nf conntrack table purge for every address. We only need to
6162 do this once, as is already caught by the existing
6163 masq_dev_notifier so masq_inet_event() can skip this.
6164
6165 Reported-by: Solar Designer <solar@openwall.com>
6166 Signed-off-by: David S. Miller <davem@davemloft.net>
6167 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
6168
6169 net/ipv4/devinet.c | 4 ++++
6170 net/ipv4/fib_frontend.c | 4 ++++
6171 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
6172 3 files changed, 18 insertions(+), 2 deletions(-)
6173
6174 commit 60394231e840e884024592a76a6c5612433d3756
6175 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6176 Date: Tue Mar 8 10:34:28 2016 -0300
6177
6178 sctp: fix copying more bytes than expected in sctp_add_bind_addr
6179
6180 Dmitry reported that sctp_add_bind_addr may read more bytes than
6181 expected in case the parameter is a IPv4 addr supplied by the user
6182 through calls such as sctp_bindx_add(), because it always copies
6183 sizeof(union sctp_addr) while the buffer may be just a struct
6184 sockaddr_in, which is smaller.
6185
6186 This patch then fixes it by limiting the memcpy to the min between the
6187 union size and a (new parameter) provided addr size. Where possible this
6188 parameter still is the size of that union, except for reading from
6189 user-provided buffers, which then it accounts for protocol type.
6190
6191 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6192 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6193 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6194 Signed-off-by: David S. Miller <davem@davemloft.net>
6195
6196 include/net/sctp/structs.h | 2 +-
6197 net/sctp/bind_addr.c | 14 ++++++++------
6198 net/sctp/protocol.c | 1 +
6199 net/sctp/sm_make_chunk.c | 3 ++-
6200 net/sctp/socket.c | 4 +++-
6201 5 files changed, 15 insertions(+), 9 deletions(-)
6202
6203 commit 9831caa50e1453818c5ec618890291f028b7992f
6204 Author: Brad Spengler <spender@grsecurity.net>
6205 Date: Mon Mar 28 19:20:28 2016 -0400
6206
6207 Also allow /bin/false as needed by systemd
6208
6209 kernel/kmod.c | 2 +-
6210 1 file changed, 1 insertion(+), 1 deletion(-)
6211
6212 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
6213 Author: Brad Spengler <spender@grsecurity.net>
6214 Date: Tue Mar 22 16:59:43 2016 -0400
6215
6216 Fix size_overflow FP reported by marcan at:
6217 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
6218
6219 net/ipv6/xfrm6_mode_transport.c | 2 +-
6220 1 file changed, 1 insertion(+), 1 deletion(-)
6221
6222 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
6223 Merge: 0d0ec9e c0b77a7
6224 Author: Brad Spengler <spender@grsecurity.net>
6225 Date: Wed Mar 16 20:20:40 2016 -0400
6226
6227 Merge branch 'pax-test' into grsec-test
6228
6229 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
6230 Merge: 10d57c1 0d19123
6231 Author: Brad Spengler <spender@grsecurity.net>
6232 Date: Wed Mar 16 20:20:27 2016 -0400
6233
6234 Merge branch 'linux-4.4.y' into pax-test
6235
6236 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
6237 Author: Brad Spengler <spender@grsecurity.net>
6238 Date: Mon Mar 14 20:15:47 2016 -0400
6239
6240 Invert logic to clean up code
6241
6242 fs/namei.c | 32 +++++++-------------------------
6243 grsecurity/grsec_chroot.c | 10 +++++-----
6244 2 files changed, 12 insertions(+), 30 deletions(-)
6245
6246 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
6247 Author: Brad Spengler <spender@grsecurity.net>
6248 Date: Mon Mar 14 19:59:36 2016 -0400
6249
6250 compile fix
6251
6252 fs/namei.c | 5 ++---
6253 1 file changed, 2 insertions(+), 3 deletions(-)
6254
6255 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
6256 Author: Brad Spengler <spender@grsecurity.net>
6257 Date: Mon Mar 14 19:57:53 2016 -0400
6258
6259 Also handle renames
6260
6261 fs/namei.c | 9 +++++++++
6262 1 file changed, 9 insertions(+)
6263
6264 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
6265 Author: Brad Spengler <spender@grsecurity.net>
6266 Date: Mon Mar 14 19:45:56 2016 -0400
6267
6268 Add additional check to cover lookup family of functions
6269
6270 fs/namei.c | 9 +++++++++
6271 1 file changed, 9 insertions(+)
6272
6273 commit c3df846baa7873fb99401136f220676b87452918
6274 Author: Brad Spengler <spender@grsecurity.net>
6275 Date: Mon Mar 14 18:42:37 2016 -0400
6276
6277 compile fix
6278
6279 fs/namei.c | 2 +-
6280 1 file changed, 1 insertion(+), 1 deletion(-)
6281
6282 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
6283 Author: Brad Spengler <spender@grsecurity.net>
6284 Date: Mon Mar 14 18:34:40 2016 -0400
6285
6286 Fix recent chroot check on the create side, as reported by
6287 Toralf Foerster
6288
6289 fs/namei.c | 26 ++++++++++++++++----------
6290 1 file changed, 16 insertions(+), 10 deletions(-)
6291
6292 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
6293 Author: Paolo Bonzini <pbonzini@redhat.com>
6294 Date: Tue Mar 8 12:13:39 2016 +0100
6295
6296 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
6297
6298 Yes, all of these are needed. :) This is admittedly a bit odd, but
6299 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
6300 and of course ept=0.
6301
6302 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
6303 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
6304 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
6305 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
6306 restarts execution. This will still cause a user write to fault, while
6307 supervisor writes will succeed. User reads will fault spuriously now,
6308 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
6309 will be enabled and supervisor writes disabled, going back to the
6310 originary situation where supervisor writes fault spuriously.
6311
6312 When SMEP is in effect, however, U=0 will enable kernel execution of
6313 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6314 with U=0. If the guest has not enabled NX, the result is a continuous
6315 stream of page faults due to the NX bit being reserved.
6316
6317 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
6318 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
6319 control, so they do not use user-return notifiers for EFER---if they did,
6320 EFER.NX would be forced to the same value as the host).
6321
6322 There is another bug in the reserved bit check, which I've split to a
6323 separate patch for easier application to stable kernels.
6324
6325 Cc: stable@vger.kernel.org
6326 Cc: Andy Lutomirski <luto@amacapital.net>
6327 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
6328 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
6329 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6330
6331 Documentation/virtual/kvm/mmu.txt | 3 ++-
6332 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
6333 2 files changed, 25 insertions(+), 14 deletions(-)
6334
6335 commit 802a88e57b141e9643e93afb7805813ad8da22f3
6336 Author: Paolo Bonzini <pbonzini@redhat.com>
6337 Date: Wed Mar 9 14:28:02 2016 +0100
6338
6339 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
6340
6341 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
6342 CR0.WP=1. These pages' SPTEs flip continuously between two states:
6343 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
6344 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
6345
6346 When SMEP is in effect, however, U=0 will enable kernel execution of
6347 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6348 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
6349 When guest EFER has the NX bit cleared, the reserved bit check thinks
6350 that the latter state is invalid; teach it that the smep_andnot_wp case
6351 will also use the NX bit of SPTEs.
6352
6353 Cc: stable@vger.kernel.org
6354 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
6355 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
6356 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6357
6358 arch/x86/kvm/mmu.c | 4 +++-
6359 1 file changed, 3 insertions(+), 1 deletion(-)
6360
6361 commit 3925851224428c1d2bca32cf33821befb947c4f3
6362 Author: Ming Lei <ming.lei@canonical.com>
6363 Date: Sat Mar 12 22:56:19 2016 +0800
6364
6365 block: don't optimize for non-cloned bio in bio_get_last_bvec()
6366
6367 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
6368 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
6369 because the start postion may have been moved in the middle of
6370 the bvec, such as splitting in the middle of bvec.
6371
6372 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
6373 Cc: stable@vger.kernel.org
6374 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
6375 Signed-off-by: Ming Lei <ming.lei@canonical.com>
6376 Signed-off-by: Jens Axboe <axboe@fb.com>
6377
6378 include/linux/bio.h | 5 -----
6379 1 file changed, 5 deletions(-)
6380
6381 commit db541463b4a0926bebdbac743c8736fb9e903d58
6382 Author: Borislav Petkov <bp@alien8.de>
6383 Date: Fri Mar 11 12:32:06 2016 +0100
6384
6385 x86/fpu: Fix eager-FPU handling on legacy FPU machines
6386
6387 i486 derived cores like Intel Quark support only the very old,
6388 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
6389 our FPU code wasn't handling the saving and restoring there
6390 properly in the 'eagerfpu' case.
6391
6392 So after we made eagerfpu the default for all CPU types:
6393
6394 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
6395
6396 these old FPU designs broke. First, Andy Shevchenko reported a splat:
6397
6398 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
6399
6400 which was us trying to execute FXRSTOR on those machines even though
6401 they don't support it.
6402
6403 After taking care of that, Bryan O'Donoghue reported that a simple FPU
6404 test still failed because we weren't initializing the FPU state properly
6405 on those machines.
6406
6407 Take care of all that.
6408
6409 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
6410 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
6411 Signed-off-by: Borislav Petkov <bp@suse.de>
6412 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
6413 Cc: Andrew Morton <akpm@linux-foundation.org>
6414 Cc: Andy Lutomirski <luto@amacapital.net>
6415 Cc: Borislav Petkov <bp@alien8.de>
6416 Cc: Brian Gerst <brgerst@gmail.com>
6417 Cc: Dave Hansen <dave.hansen@linux.intel.com>
6418 Cc: Denys Vlasenko <dvlasenk@redhat.com>
6419 Cc: Fenghua Yu <fenghua.yu@intel.com>
6420 Cc: H. Peter Anvin <hpa@zytor.com>
6421 Cc: Oleg Nesterov <oleg@redhat.com>
6422 Cc: Peter Zijlstra <peterz@infradead.org>
6423 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6424 Cc: Thomas Gleixner <tglx@linutronix.de>
6425 Cc: Yu-cheng <yu-cheng.yu@intel.com>
6426 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
6427 Signed-off-by: Ingo Molnar <mingo@kernel.org>
6428
6429 arch/x86/kernel/fpu/core.c | 4 +++-
6430 arch/x86/kernel/fpu/init.c | 2 +-
6431 2 files changed, 4 insertions(+), 2 deletions(-)
6432
6433 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
6434 Author: Brad Spengler <spender@grsecurity.net>
6435 Date: Sun Mar 13 11:35:56 2016 -0400
6436
6437 Compile fixes
6438
6439 fs/namei.c | 2 +-
6440 grsecurity/grsec_chroot.c | 2 +-
6441 include/linux/grsecurity.h | 2 +-
6442 3 files changed, 3 insertions(+), 3 deletions(-)
6443
6444 commit aab25a3496c4683c5858056960010119fb7d9a5a
6445 Author: Brad Spengler <spender@grsecurity.net>
6446 Date: Sun Mar 13 10:53:59 2016 -0400
6447
6448 Use fput instead of put_filp()
6449
6450 fs/namei.c | 4 ++--
6451 1 file changed, 2 insertions(+), 2 deletions(-)
6452
6453 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
6454 Author: Brad Spengler <spender@grsecurity.net>
6455 Date: Sun Mar 13 10:30:54 2016 -0400
6456
6457 Update MPROTECT_COMPAT config description, disable by default
6458
6459 security/Kconfig | 18 ++++++------------
6460 1 file changed, 6 insertions(+), 12 deletions(-)
6461
6462 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
6463 Author: Brad Spengler <spender@grsecurity.net>
6464 Date: Sun Mar 13 10:35:55 2016 -0400
6465
6466 As reported by Jann Horn, chroot scenarios where the chrooting application
6467 brings in a directory fd can be used to access any file outside of the chroot
6468 via *at syscalls. To maintain compatibility with Chromium and other apps,
6469 we specifically only disallow relative accesses off a directory fd when the
6470 final path is not located under that directory described by the fd and exists
6471 outside of the chroot. This additional restriction will exist under the
6472 current GRKERNSEC_CHROOT_FCHDIR option.
6473
6474 fs/namei.c | 9 +++++++++
6475 grsecurity/Kconfig | 10 ++++++----
6476 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
6477 include/linux/grmsg.h | 1 +
6478 include/linux/grsecurity.h | 1 +
6479 5 files changed, 56 insertions(+), 4 deletions(-)
6480
6481 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
6482 Author: Brad Spengler <spender@grsecurity.net>
6483 Date: Thu Mar 10 22:17:16 2016 -0500
6484
6485 Update size_overflow hash table
6486
6487 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6488 1 file changed, 1 insertion(+)
6489
6490 commit 29f25ddda6a5625340df26beb394279fefea2b49
6491 Author: Brad Spengler <spender@grsecurity.net>
6492 Date: Thu Mar 10 22:16:04 2016 -0500
6493
6494 Fix module support
6495
6496 kernel/module.c | 3 ++-
6497 1 file changed, 2 insertions(+), 1 deletion(-)
6498
6499 commit b057a45636b626e7eaf03077ed0916b95fea054c
6500 Merge: ba5ee94 10d57c1
6501 Author: Brad Spengler <spender@grsecurity.net>
6502 Date: Thu Mar 10 21:36:10 2016 -0500
6503
6504 Merge branch 'pax-test' into grsec-test
6505
6506 commit 10d57c107e7fabffbe616b14efab73df585576c2
6507 Merge: 1cbae46 62e2195
6508 Author: Brad Spengler <spender@grsecurity.net>
6509 Date: Thu Mar 10 21:34:58 2016 -0500
6510
6511 Update to pax-linux-4.4.5-test9.patch:
6512 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
6513 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
6514 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
6515 - compile the x86 vdso without plugins, reported by Emese
6516 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
6517 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
6518
6519 Merge branch 'linux-4.4.y' into pax-test
6520
6521 commit ba5ee94199b11c1429559a08c2158677dd8f1761
6522 Author: Brad Spengler <spender@grsecurity.net>
6523 Date: Thu Mar 3 20:20:19 2016 -0500
6524
6525 Update size_overflow hash table
6526
6527 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6528 1 file changed, 1 insertion(+)
6529
6530 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
6531 Merge: 335c04c 1cbae46
6532 Author: Brad Spengler <spender@grsecurity.net>
6533 Date: Thu Mar 3 20:04:00 2016 -0500
6534
6535 Merge branch 'pax-test' into grsec-test
6536
6537 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
6538 Merge: a51cdb8 c252409
6539 Author: Brad Spengler <spender@grsecurity.net>
6540 Date: Thu Mar 3 19:57:43 2016 -0500
6541
6542 Merge branch 'linux-4.4.y' into pax-test
6543
6544 commit 335c04c8146a696a6101a9c69dbd47f11383549e
6545 Merge: 897877e a51cdb8
6546 Author: Brad Spengler <spender@grsecurity.net>
6547 Date: Tue Mar 1 17:57:24 2016 -0500
6548
6549 Merge branch 'pax-test' into grsec-test
6550
6551 commit a51cdb83569b450858737a30d2be043d87d7ddc1
6552 Author: Brad Spengler <spender@grsecurity.net>
6553 Date: Tue Mar 1 17:56:43 2016 -0500
6554
6555 Update to pax-linux-4.4.3-test6.patch:
6556 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
6557 - fixed a few section mismatches on notifier_block variables
6558 - fixed a few REFCOUNT false positives found by Emese's plugin
6559 - constified hypervisor_x86
6560
6561 arch/x86/include/asm/hypervisor.h | 2 +-
6562 arch/x86/kernel/cpu/mshyperv.c | 2 +-
6563 arch/x86/kernel/cpu/vmware.c | 2 +-
6564 arch/x86/kernel/kvm.c | 2 +-
6565 drivers/lightnvm/rrpc.c | 4 ++--
6566 drivers/lightnvm/rrpc.h | 2 +-
6567 drivers/net/can/led.c | 2 +-
6568 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
6569 drivers/net/ethernet/rocker/rocker.c | 4 ++--
6570 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
6571 drivers/net/vrf.c | 2 +-
6572 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
6573 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
6574 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
6575 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
6576 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
6577 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
6578 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
6579 fs/proc/kcore.c | 2 +-
6580 mm/hugetlb_cgroup.c | 8 ++++----
6581 mm/mm_init.c | 2 +-
6582 mm/slub.c | 2 +-
6583 net/mac802154/iface.c | 2 +-
6584 23 files changed, 41 insertions(+), 41 deletions(-)
6585
6586 commit 897877e79629a0b854e98cb666a9d898256d45a7
6587 Merge: 1ffa5d5 4f4b213
6588 Author: Brad Spengler <spender@grsecurity.net>
6589 Date: Sun Feb 28 20:54:59 2016 -0500
6590
6591 Merge branch 'pax-test' into grsec-test
6592
6593 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
6594 Author: Brad Spengler <spender@grsecurity.net>
6595 Date: Sun Feb 28 20:54:06 2016 -0500
6596
6597 Update to pax-linux-4.4.3-test5.patch:
6598 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
6599 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
6600 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
6601 - added a generator for SIMPLE_IPA passes as well
6602
6603 include/linux/cgroup-defs.h | 2 +-
6604 include/linux/hugetlb.h | 2 +-
6605 include/linux/hugetlb_cgroup.h | 11 ++
6606 include/net/xfrm.h | 2 +-
6607 kernel/cgroup.c | 29 ++--
6608 mm/hugetlb.c | 55 ++++++-
6609 mm/hugetlb_cgroup.c | 60 ++-----
6610 mm/mmap.c | 38 ++---
6611 net/xfrm/xfrm_state.c | 4 +-
6612 tools/gcc/constify_plugin.c | 5 +-
6613 tools/gcc/gcc-common.h | 42 +++--
6614 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
6615 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
6616 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
6617 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
6618 tools/gcc/size_overflow_plugin/.gitignore | 1 +
6619 .../disable_size_overflow_hash.data | 7 +-
6620 .../size_overflow_plugin/size_overflow_hash.data | 3 -
6621 18 files changed, 385 insertions(+), 146 deletions(-)
6622
6623 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
6624 Author: Brad Spengler <spender@grsecurity.net>
6625 Date: Sun Feb 28 20:43:02 2016 -0500
6626
6627 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
6628 enabled
6629
6630 grsecurity/grsec_sig.c | 3 +--
6631 1 file changed, 1 insertion(+), 2 deletions(-)
6632
6633 commit cfdb373a77c88d01c1539e605e28143af5981571
6634 Author: Brad Spengler <spender@grsecurity.net>
6635 Date: Sun Feb 28 19:12:39 2016 -0500
6636
6637 compile fix
6638
6639 grsecurity/gracl_segv.c | 2 +-
6640 grsecurity/grsec_sig.c | 2 +-
6641 2 files changed, 2 insertions(+), 2 deletions(-)
6642
6643 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
6644 Author: Brad Spengler <spender@grsecurity.net>
6645 Date: Sun Feb 28 18:24:50 2016 -0500
6646
6647 Update the daemon check in handling of anti-bruteforcing of suid binaries
6648 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
6649 could create unprivileged copies of the suid binary via ptrace, inject
6650 code into them, and fork+exec a privileged copy. A crash then in the
6651 privileged copy would trigger the daemon detection which could be avoided
6652 by simply terminating the original process. Defeat this by using our
6653 is_privileged_binary() function against the task's mm->binfmt->file to detect
6654 an fscaps-enabled or suid/sgid binary being involved.
6655
6656 Also update the RBAC RES_CRASH code to use is_privileged_binary().
6657
6658 grsecurity/gracl_segv.c | 15 +--------------
6659 grsecurity/grsec_sig.c | 3 ++-
6660 2 files changed, 3 insertions(+), 15 deletions(-)
6661
6662 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
6663 Author: Brad Spengler <spender@grsecurity.net>
6664 Date: Sun Feb 28 15:06:32 2016 -0500
6665
6666 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
6667 could dump out an unreadable suid binary by creating a script that used
6668 that binary as an interpreter.
6669
6670 fs/exec.c | 14 +++++++++-----
6671 1 file changed, 9 insertions(+), 5 deletions(-)
6672
6673 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
6674 Merge: 2d35d52 8327ee6
6675 Author: Brad Spengler <spender@grsecurity.net>
6676 Date: Thu Feb 25 18:44:11 2016 -0500
6677
6678 Merge branch 'pax-test' into grsec-test
6679
6680 Conflicts:
6681 fs/proc/base.c
6682 kernel/ptrace.c
6683 mm/process_vm_access.c
6684
6685 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
6686 Merge: 09d53c7 2134d97
6687 Author: Brad Spengler <spender@grsecurity.net>
6688 Date: Thu Feb 25 18:36:46 2016 -0500
6689
6690 Merge branch 'linux-4.4.y' into pax-test
6691
6692 Conflicts:
6693 mm/mmap.c
6694
6695 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
6696 Author: Brad Spengler <spender@grsecurity.net>
6697 Date: Wed Feb 24 07:59:12 2016 -0500
6698
6699 Remove /proc/pid/map_files which we had previously prevented via
6700 an inverted dependency on checkpoint/restart, but clearly should have
6701 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
6702 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
6703 processes of the same UID. Thanks to Mathias Krause for the report!
6704
6705 fs/proc/base.c | 2 ++
6706 1 file changed, 2 insertions(+)
6707
6708 commit e4f1e517092222aa28179b20e14c0ddfb2796049
6709 Author: Brad Spengler <spender@grsecurity.net>
6710 Date: Thu Feb 18 19:32:39 2016 -0500
6711
6712 Update size_overflow hash table
6713
6714 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
6715 1 file changed, 131 insertions(+), 27 deletions(-)
6716
6717 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
6718 Author: Brad Spengler <spender@grsecurity.net>
6719 Date: Thu Feb 18 18:52:37 2016 -0500
6720
6721 Update size_overflow hash table
6722
6723 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
6724 1 file changed, 237 insertions(+), 56 deletions(-)
6725
6726 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
6727 Author: Brad Spengler <spender@grsecurity.net>
6728 Date: Thu Feb 18 18:23:03 2016 -0500
6729
6730 compile fix
6731
6732 tools/gcc/randomize_layout_plugin.c | 2 +-
6733 1 file changed, 1 insertion(+), 1 deletion(-)
6734
6735 commit 024d2af98b755712daff6ed7c49af921da4e8883
6736 Author: Brad Spengler <spender@grsecurity.net>
6737 Date: Thu Feb 18 18:19:47 2016 -0500
6738
6739 compile fix
6740
6741 tools/gcc/randomize_layout_plugin.c | 2 +-
6742 1 file changed, 1 insertion(+), 1 deletion(-)
6743
6744 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
6745 Author: Brad Spengler <spender@grsecurity.net>
6746 Date: Thu Feb 18 18:16:32 2016 -0500
6747
6748 compile fix
6749
6750 tools/gcc/randomize_layout_plugin.c | 9 +++++----
6751 1 file changed, 5 insertions(+), 4 deletions(-)
6752
6753 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
6754 Author: Brad Spengler <spender@grsecurity.net>
6755 Date: Thu Feb 18 17:54:51 2016 -0500
6756
6757 Compile fix
6758
6759 tools/gcc/randomize_layout_plugin.c | 2 +-
6760 1 file changed, 1 insertion(+), 1 deletion(-)
6761
6762 commit 13823395101c4228ecded4b624583389ee13bfb3
6763 Author: Brad Spengler <spender@grsecurity.net>
6764 Date: Thu Feb 18 17:35:21 2016 -0500
6765
6766 compile fix
6767
6768 Makefile | 5 +----
6769 1 file changed, 1 insertion(+), 4 deletions(-)
6770
6771 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
6772 Merge: 45cbb7e 09d53c7
6773 Author: Brad Spengler <spender@grsecurity.net>
6774 Date: Thu Feb 18 16:40:51 2016 -0500
6775
6776 Merge branch 'pax-test' into grsec-test
6777
6778 Conflicts:
6779 Makefile
6780 include/linux/genl_magic_struct.h
6781 scripts/mod/modpost.c
6782 tools/gcc/size_overflow_plugin/size_overflow_hash.data
6783
6784 commit 09d53c74140e87e886a28980cedbb7e771f2a356
6785 Author: Brad Spengler <spender@grsecurity.net>
6786 Date: Thu Feb 18 16:24:02 2016 -0500
6787
6788 Update to pax-linux-4.4.2-test4.patch:
6789 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
6790 - moved gcc plugin related makefile bits into a separate file, by Emese
6791 - changed modpost to report writable function pointers separately
6792 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
6793 - reduced the size of the compat syscall entry points on amd64
6794 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
6795 - Emese regenerated the size overflow hash table for 4.4
6796 - all plugins now use the new pass generator headers
6797
6798 Makefile | 73 +-
6799 arch/x86/entry/entry_64.S | 2 +-
6800 arch/x86/entry/entry_64_compat.S | 48 +-
6801 fs/exec.c | 3 +
6802 include/linux/genl_magic_struct.h | 4 +-
6803 include/linux/memcontrol.h | 2 +-
6804 ipc/shm.c | 2 +-
6805 mm/memcontrol.c | 6 +-
6806 scripts/Makefile.extrawarn | 4 +
6807 scripts/Makefile.gcc-plugins | 69 +
6808 scripts/mod/modpost.c | 15 +-
6809 tools/gcc/checker_plugin.c | 71 +-
6810 tools/gcc/colorize_plugin.c | 65 +-
6811 tools/gcc/constify_plugin.c | 65 +-
6812 tools/gcc/gcc-generate-gimple-pass.h | 172 +
6813 tools/gcc/gcc-generate-ipa-pass.h | 286 +
6814 tools/gcc/gcc-generate-rtl-pass.h | 172 +
6815 tools/gcc/initify_plugin.c | 74 +-
6816 tools/gcc/kallocstat_plugin.c | 65 +-
6817 tools/gcc/kernexec_plugin.c | 184 +-
6818 tools/gcc/latent_entropy_plugin.c | 71 +-
6819 tools/gcc/randomize_layout_seed.h | 1 -
6820 .../disable_size_overflow_hash.h | 152601 ------------------
6821 .../insert_size_overflow_asm.c | 71 +-
6822 .../size_overflow_plugin/intentional_overflow.c | 6 +-
6823 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
6824 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
6825 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
6826 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
6827 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
6828 .../size_overflow_transform_core.c | 2 +-
6829 tools/gcc/stackleak_plugin.c | 132 +-
6830 tools/gcc/structleak_plugin.c | 67 +-
6831 33 files changed, 2238 insertions(+), 155123 deletions(-)
6832
6833 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
6834 Merge: 3b5448b 0c85110
6835 Author: Brad Spengler <spender@grsecurity.net>
6836 Date: Wed Feb 17 19:11:25 2016 -0500
6837
6838 Merge branch 'pax-test' into grsec-test
6839
6840 commit 0c851109f683896aaff8a310bbfa943272b47516
6841 Merge: 6cb4f49 1cb8570
6842 Author: Brad Spengler <spender@grsecurity.net>
6843 Date: Wed Feb 17 19:11:21 2016 -0500
6844
6845 Merge branch 'linux-4.4.y' into pax-test
6846
6847 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
6848 Author: Brad Spengler <spender@grsecurity.net>
6849 Date: Mon Feb 15 18:02:40 2016 -0500
6850
6851 Fix a drbd bug reported by iamb on the forums:
6852 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
6853 which caused a size_overflow report
6854
6855 include/linux/genl_magic_struct.h | 4 ++--
6856 1 file changed, 2 insertions(+), 2 deletions(-)
6857
6858 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
6859 Author: Brad Spengler <spender@grsecurity.net>
6860 Date: Mon Feb 15 13:20:38 2016 -0500
6861
6862 compile fix
6863
6864 drivers/staging/wilc1000/host_interface.h | 1 +
6865 1 file changed, 1 insertion(+)
6866
6867 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
6868 Author: Brad Spengler <spender@grsecurity.net>
6869 Date: Mon Feb 15 12:54:52 2016 -0500
6870
6871 Update size_overflow hash table
6872
6873 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
6874 1 file changed, 17 insertions(+), 4 deletions(-)
6875
6876 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
6877 Author: Brad Spengler <spender@grsecurity.net>
6878 Date: Mon Feb 15 12:53:54 2016 -0500
6879
6880 compile fix
6881
6882 drivers/staging/wilc1000/wilc_spi.c | 1 -
6883 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
6884 2 files changed, 1 insertion(+), 2 deletions(-)
6885
6886 commit a9dd4481db099082967585be8e153899e5fd24c7
6887 Author: Brad Spengler <spender@grsecurity.net>
6888 Date: Mon Feb 15 12:52:32 2016 -0500
6889
6890 compile fix
6891
6892 fs/proc/fd.c | 2 --
6893 1 file changed, 2 deletions(-)
6894
6895 commit 5acb4fa0063460807096429f073181d1c5a3e566
6896 Author: Brad Spengler <spender@grsecurity.net>
6897 Date: Mon Feb 15 12:32:13 2016 -0500
6898
6899 Update size_overflow hash table
6900
6901 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
6902 1 file changed, 182 insertions(+), 42 deletions(-)
6903
6904 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
6905 Author: Brad Spengler <spender@grsecurity.net>
6906 Date: Mon Feb 15 12:31:16 2016 -0500
6907
6908 compile fix
6909
6910 drivers/staging/wilc1000/wilc_spi.c | 1 +
6911 1 file changed, 1 insertion(+)
6912
6913 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
6914 Author: Brad Spengler <spender@grsecurity.net>
6915 Date: Mon Feb 15 12:28:36 2016 -0500
6916
6917 RANDSTRUCT compile fix
6918
6919 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
6920 1 file changed, 16 insertions(+), 16 deletions(-)
6921
6922 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
6923 Author: Brad Spengler <spender@grsecurity.net>
6924 Date: Mon Feb 15 12:24:49 2016 -0500
6925
6926 RANDSTRUCT compile fix
6927
6928 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
6929 1 file changed, 17 insertions(+), 17 deletions(-)
6930
6931 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
6932 Author: Hariprasad S <hariprasad@chelsio.com>
6933 Date: Fri Dec 11 13:59:17 2015 +0530
6934
6935 iw_cxgb3: Fix incorrectly returning error on success
6936
6937 The cxgb3_*_send() functions return NET_XMIT_ values, which are
6938 positive integers values. So don't treat positive return values
6939 as an error.
6940
6941 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
6942 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
6943 Signed-off-by: Doug Ledford <dledford@redhat.com>
6944
6945 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
6946 1 file changed, 2 insertions(+), 2 deletions(-)
6947
6948 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
6949 Author: Daniel Borkmann <daniel@iogearbox.net>
6950 Date: Wed Feb 10 16:47:11 2016 +0100
6951
6952 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
6953
6954 When ctx access is used, the kernel often needs to expand/rewrite
6955 instructions, so after that patching, branch offsets have to be
6956 adjusted for both forward and backward jumps in the new eBPF program,
6957 but for backward jumps it fails to account the delta. Meaning, for
6958 example, if the expansion happens exactly on the insn that sits at
6959 the jump target, it doesn't fix up the back jump offset.
6960
6961 Analysis on what the check in adjust_branches() is currently doing:
6962
6963 /* adjust offset of jmps if necessary */
6964 if (i < pos && i + insn->off + 1 > pos)
6965 insn->off += delta;
6966 else if (i > pos && i + insn->off + 1 < pos)
6967 insn->off -= delta;
6968
6969 First condition (forward jumps):
6970
6971 Before: After:
6972
6973 insns[0] insns[0]
6974 insns[1] <--- i/insn insns[1] <--- i/insn
6975 insns[2] <--- pos insns[P] <--- pos
6976 insns[3] insns[P] `------| delta
6977 insns[4] <--- target_X insns[P] `-----|
6978 insns[5] insns[3]
6979 insns[4] <--- target_X
6980 insns[5]
6981
6982 First case is if we cross pos-boundary and the jump instruction was
6983 before pos. This is handeled correctly. I.e. if i == pos, then this
6984 would mean our jump that we currently check was the patchlet itself
6985 that we just injected. Since such patchlets are self-contained and
6986 have no awareness of any insns before or after the patched one, the
6987 delta is correctly not adjusted. Also, for the second condition in
6988 case of i + insn->off + 1 == pos, means we jump to that newly patched
6989 instruction, so no offset adjustment are needed. That part is correct.
6990
6991 Second condition (backward jumps):
6992
6993 Before: After:
6994
6995 insns[0] insns[0]
6996 insns[1] <--- target_X insns[1] <--- target_X
6997 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
6998 insns[3] insns[P] `------| delta
6999 insns[4] <--- i/insn insns[P] `-----|
7000 insns[5] insns[3]
7001 insns[4] <--- i/insn
7002 insns[5]
7003
7004 Second interesting case is where we cross pos-boundary and the jump
7005 instruction was after pos. Backward jump with i == pos would be
7006 impossible and pose a bug somewhere in the patchlet, so the first
7007 condition checking i > pos is okay only by itself. However, i +
7008 insn->off + 1 < pos does not always work as intended to trigger the
7009 adjustment. It works when jump targets would be far off where the
7010 delta wouldn't matter. But, for example, where the fixed insn->off
7011 before pointed to pos (target_Y), it now points to pos + delta, so
7012 that additional room needs to be taken into account for the check.
7013 This means that i) both tests here need to be adjusted into pos + delta,
7014 and ii) for the second condition, the test needs to be <= as pos
7015 itself can be a target in the backjump, too.
7016
7017 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
7018 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
7019 Signed-off-by: David S. Miller <davem@davemloft.net>
7020
7021 kernel/bpf/verifier.c | 2 +-
7022 1 file changed, 1 insertion(+), 1 deletion(-)
7023
7024 commit 61b513b644116e77313addf65970db58f4981608
7025 Author: Ryan Ware <ware@linux.intel.com>
7026 Date: Thu Feb 11 15:58:44 2016 -0800
7027
7028 EVM: Use crypto_memneq() for digest comparisons
7029
7030 This patch fixes vulnerability CVE-2016-2085. The problem exists
7031 because the vm_verify_hmac() function includes a use of memcmp().
7032 Unfortunately, this allows timing side channel attacks; specifically
7033 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
7034 the memcmp() to the cryptographically safe crypto_memneq().
7035
7036 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
7037 Signed-off-by: Ryan Ware <ware@linux.intel.com>
7038 Cc: stable@vger.kernel.org
7039 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
7040 Signed-off-by: James Morris <james.l.morris@oracle.com>
7041
7042 security/integrity/evm/evm_main.c | 3 ++-
7043 1 file changed, 2 insertions(+), 1 deletion(-)
7044
7045 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
7046 Author: Michael McConville <mmcco@mykolab.com>
7047 Date: Fri Feb 5 20:46:25 2016 -0500
7048
7049 dscc4: Undefined signed int shift
7050
7051 My analysis in the below mail applies, although the second part is
7052 unnecessary because i isn't used in arithmetic operations here:
7053
7054 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
7055
7056 Thanks for your time.
7057
7058 Signed-off-by: Michael McConville <mmcco@mykolab.com>
7059 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
7060 Signed-off-by: David S. Miller <davem@davemloft.net>
7061
7062 drivers/net/wan/dscc4.c | 2 +-
7063 1 file changed, 1 insertion(+), 1 deletion(-)
7064
7065 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
7066 Author: Andrey Konovalov <andreyknvl@gmail.com>
7067 Date: Sat Feb 13 11:08:06 2016 +0300
7068
7069 ALSA: usb-audio: avoid freeing umidi object twice
7070
7071 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
7072 when tearing down the rawmidi interface. So we shouldn't try to free it
7073 in snd_usbmidi_create() after having registered the rawmidi interface.
7074
7075 Found by KASAN.
7076
7077 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
7078 Acked-by: Clemens Ladisch <clemens@ladisch.de>
7079 Cc: <stable@vger.kernel.org>
7080 Signed-off-by: Takashi Iwai <tiwai@suse.de>
7081
7082 sound/usb/midi.c | 1 -
7083 1 file changed, 1 deletion(-)
7084
7085 commit ed3a8ab1976674d56e258da93639e61f1446e703
7086 Author: zengtao <prime.zeng@huawei.com>
7087 Date: Tue Feb 2 11:38:34 2016 +0800
7088
7089 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
7090
7091 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
7092 overflows in the timeval/timespec to cputime conversion.
7093
7094 Currently the following functions are affected:
7095 1. setitimer()
7096 2. timer_create/timer_settime()
7097 3. sys_clock_nanosleep
7098
7099 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
7100 enabled, which is required for CONFIG_NO_HZ_FULL.
7101
7102 Enforce u64 conversion to prevent the overflow.
7103
7104 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
7105 Signed-off-by: zengtao <prime.zeng@huawei.com>
7106 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
7107 Cc: <fweisbec@gmail.com>
7108 Cc: stable@vger.kernel.org
7109 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
7110 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
7111
7112 include/asm-generic/cputime_nsecs.h | 5 +++--
7113 1 file changed, 3 insertions(+), 2 deletions(-)
7114
7115 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
7116 Author: Brad Spengler <spender@grsecurity.net>
7117 Date: Mon Feb 15 11:55:18 2016 -0500
7118
7119 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
7120 count as actual mismatches
7121
7122 scripts/mod/modpost.c | 3 ++-
7123 1 file changed, 2 insertions(+), 1 deletion(-)
7124
7125 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
7126 Author: Brad Spengler <spender@grsecurity.net>
7127 Date: Mon Feb 15 11:44:36 2016 -0500
7128
7129 Compile fix
7130
7131 tools/gcc/randomize_layout_seed.h | 1 -
7132 1 file changed, 1 deletion(-)
7133
7134 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
7135 Author: Brad Spengler <spender@grsecurity.net>
7136 Date: Mon Feb 15 11:27:32 2016 -0500
7137
7138 disable USELIB
7139
7140 init/Kconfig | 3 ++-
7141 1 file changed, 2 insertions(+), 1 deletion(-)
7142
7143 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
7144 Author: Brad Spengler <spender@grsecurity.net>
7145 Date: Mon Feb 15 11:23:56 2016 -0500
7146
7147 compile fix
7148
7149 fs/proc/fd.c | 2 +-
7150 1 file changed, 1 insertion(+), 1 deletion(-)
7151
7152 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
7153 Author: Brad Spengler <spender@grsecurity.net>
7154 Date: Mon Feb 15 11:19:26 2016 -0500
7155
7156 Initial import of grsecurity for Linux 4.4.1
7157
7158 Documentation/dontdiff | 2 +
7159 Documentation/kernel-parameters.txt | 11 +
7160 Documentation/sysctl/fs.txt | 23 +
7161 Documentation/sysctl/kernel.txt | 15 +
7162 Makefile | 18 +-
7163 arch/alpha/include/asm/cache.h | 4 +-
7164 arch/alpha/kernel/osf_sys.c | 12 +-
7165 arch/arc/Kconfig | 1 +
7166 arch/arm/Kconfig | 1 +
7167 arch/arm/Kconfig.debug | 1 +
7168 arch/arm/include/asm/thread_info.h | 7 +-
7169 arch/arm/kernel/entry-common.S | 8 +-
7170 arch/arm/kernel/process.c | 4 +-
7171 arch/arm/kernel/ptrace.c | 9 +
7172 arch/arm/kernel/traps.c | 7 +-
7173 arch/arm/mm/Kconfig | 4 +-
7174 arch/arm/mm/fault.c | 40 +-
7175 arch/arm/mm/mmap.c | 8 +-
7176 arch/arm/net/bpf_jit_32.c | 51 +-
7177 arch/arm64/Kconfig.debug | 1 +
7178 arch/avr32/include/asm/cache.h | 4 +-
7179 arch/blackfin/Kconfig.debug | 1 +
7180 arch/blackfin/include/asm/cache.h | 3 +-
7181 arch/cris/include/arch-v10/arch/cache.h | 3 +-
7182 arch/cris/include/arch-v32/arch/cache.h | 3 +-
7183 arch/frv/include/asm/cache.h | 3 +-
7184 arch/frv/mm/elf-fdpic.c | 4 +-
7185 arch/hexagon/include/asm/cache.h | 6 +-
7186 arch/ia64/Kconfig | 1 +
7187 arch/ia64/include/asm/cache.h | 3 +-
7188 arch/ia64/kernel/sys_ia64.c | 2 +
7189 arch/ia64/mm/hugetlbpage.c | 2 +
7190 arch/m32r/include/asm/cache.h | 4 +-
7191 arch/m68k/include/asm/cache.h | 4 +-
7192 arch/metag/mm/hugetlbpage.c | 1 +
7193 arch/microblaze/include/asm/cache.h | 3 +-
7194 arch/mips/Kconfig | 1 +
7195 arch/mips/include/asm/cache.h | 3 +-
7196 arch/mips/include/asm/thread_info.h | 11 +-
7197 arch/mips/kernel/irq.c | 3 +
7198 arch/mips/kernel/ptrace.c | 9 +
7199 arch/mips/mm/mmap.c | 4 +-
7200 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
7201 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
7202 arch/openrisc/include/asm/cache.h | 4 +-
7203 arch/parisc/include/asm/cache.h | 3 +
7204 arch/parisc/kernel/sys_parisc.c | 4 +
7205 arch/powerpc/Kconfig | 1 +
7206 arch/powerpc/include/asm/cache.h | 4 +-
7207 arch/powerpc/include/asm/thread_info.h | 5 +-
7208 arch/powerpc/kernel/Makefile | 2 +
7209 arch/powerpc/kernel/irq.c | 3 +
7210 arch/powerpc/kernel/process.c | 10 +-
7211 arch/powerpc/kernel/ptrace.c | 14 +
7212 arch/powerpc/kernel/traps.c | 5 +
7213 arch/powerpc/mm/slice.c | 2 +-
7214 arch/s390/Kconfig.debug | 1 +
7215 arch/s390/include/asm/cache.h | 4 +-
7216 arch/score/include/asm/cache.h | 4 +-
7217 arch/sh/include/asm/cache.h | 3 +-
7218 arch/sh/mm/mmap.c | 6 +-
7219 arch/sparc/include/asm/cache.h | 4 +-
7220 arch/sparc/include/asm/pgalloc_64.h | 1 +
7221 arch/sparc/include/asm/thread_info_64.h | 8 +-
7222 arch/sparc/kernel/process_32.c | 6 +-
7223 arch/sparc/kernel/process_64.c | 8 +-
7224 arch/sparc/kernel/ptrace_64.c | 14 +
7225 arch/sparc/kernel/sys_sparc_64.c | 8 +-
7226 arch/sparc/kernel/syscalls.S | 8 +-
7227 arch/sparc/kernel/traps_32.c | 8 +-
7228 arch/sparc/kernel/traps_64.c | 28 +-
7229 arch/sparc/kernel/unaligned_64.c | 2 +-
7230 arch/sparc/mm/fault_64.c | 2 +-
7231 arch/sparc/mm/hugetlbpage.c | 15 +-
7232 arch/tile/Kconfig | 1 +
7233 arch/tile/include/asm/cache.h | 3 +-
7234 arch/tile/mm/hugetlbpage.c | 2 +
7235 arch/um/include/asm/cache.h | 3 +-
7236 arch/unicore32/include/asm/cache.h | 6 +-
7237 arch/x86/Kconfig | 21 +
7238 arch/x86/Kconfig.debug | 2 +
7239 arch/x86/entry/common.c | 14 +
7240 arch/x86/entry/entry_32.S | 2 +-
7241 arch/x86/entry/entry_64.S | 2 +-
7242 arch/x86/ia32/ia32_aout.c | 2 +
7243 arch/x86/include/asm/floppy.h | 20 +-
7244 arch/x86/include/asm/fpu/types.h | 69 +-
7245 arch/x86/include/asm/io.h | 2 +-
7246 arch/x86/include/asm/page.h | 12 +-
7247 arch/x86/include/asm/paravirt_types.h | 23 +-
7248 arch/x86/include/asm/pgtable_types.h | 6 +-
7249 arch/x86/include/asm/processor.h | 12 +-
7250 arch/x86/include/asm/thread_info.h | 6 +-
7251 arch/x86/include/asm/uaccess.h | 2 +-
7252 arch/x86/kernel/dumpstack.c | 10 +-
7253 arch/x86/kernel/dumpstack_32.c | 2 +-
7254 arch/x86/kernel/dumpstack_64.c | 2 +-
7255 arch/x86/kernel/ioport.c | 13 +
7256 arch/x86/kernel/irq_32.c | 3 +
7257 arch/x86/kernel/irq_64.c | 4 +
7258 arch/x86/kernel/ldt.c | 18 +
7259 arch/x86/kernel/msr.c | 10 +
7260 arch/x86/kernel/ptrace.c | 14 +
7261 arch/x86/kernel/signal.c | 9 +-
7262 arch/x86/kernel/sys_i386_32.c | 9 +-
7263 arch/x86/kernel/sys_x86_64.c | 8 +-
7264 arch/x86/kernel/traps.c | 5 +
7265 arch/x86/kernel/verify_cpu.S | 1 +
7266 arch/x86/kernel/vm86_32.c | 15 +
7267 arch/x86/mm/fault.c | 12 +-
7268 arch/x86/mm/hugetlbpage.c | 15 +-
7269 arch/x86/mm/init.c | 66 +-
7270 arch/x86/mm/init_32.c | 6 +-
7271 arch/x86/mm/pageattr.c | 4 +-
7272 arch/x86/net/bpf_jit_comp.c | 4 +
7273 arch/x86/platform/efi/efi_64.c | 2 +-
7274 arch/x86/xen/Kconfig | 1 +
7275 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
7276 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
7277 crypto/scatterwalk.c | 10 +-
7278 drivers/acpi/acpica/hwxfsleep.c | 11 +-
7279 drivers/acpi/custom_method.c | 4 +
7280 drivers/block/cciss.h | 30 +-
7281 drivers/block/smart1,2.h | 40 +-
7282 drivers/cdrom/cdrom.c | 2 +-
7283 drivers/char/Kconfig | 4 +-
7284 drivers/char/genrtc.c | 1 +
7285 drivers/char/mem.c | 17 +
7286 drivers/char/random.c | 5 +-
7287 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
7288 drivers/firewire/ohci.c | 4 +
7289 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
7290 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
7291 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
7292 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
7293 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
7294 drivers/hid/hid-wiimote-debug.c | 2 +-
7295 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
7296 drivers/iommu/Kconfig | 1 +
7297 drivers/iommu/amd_iommu.c | 14 +-
7298 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
7299 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
7300 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
7301 drivers/isdn/i4l/isdn_concap.c | 6 +-
7302 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
7303 drivers/md/bcache/Kconfig | 1 +
7304 drivers/md/raid5.c | 8 +
7305 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
7306 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
7307 drivers/media/radio/radio-cadet.c | 5 +-
7308 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
7309 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
7310 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
7311 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
7312 drivers/message/fusion/mptbase.c | 9 +
7313 drivers/misc/sgi-xp/xp_main.c | 12 +-
7314 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
7315 drivers/net/ppp/pptp.c | 34 +-
7316 drivers/net/wan/lmc/lmc_media.c | 97 +-
7317 drivers/net/wan/z85230.c | 24 +-
7318 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
7319 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
7320 drivers/pci/proc.c | 9 +
7321 drivers/platform/x86/asus-wmi.c | 12 +
7322 drivers/rtc/rtc-dev.c | 3 +
7323 drivers/scsi/bfa/bfa_fcs.c | 19 +-
7324 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
7325 drivers/scsi/bfa/bfa_modules.h | 12 +-
7326 drivers/scsi/hpsa.h | 40 +-
7327 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
7328 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
7329 drivers/tty/serial/uartlite.c | 4 +-
7330 drivers/tty/sysrq.c | 2 +-
7331 drivers/tty/tty_io.c | 4 +
7332 drivers/tty/vt/keyboard.c | 22 +-
7333 drivers/uio/uio.c | 6 +-
7334 drivers/usb/core/hub.c | 5 +
7335 drivers/usb/gadget/function/f_uac1.c | 1 +
7336 drivers/usb/gadget/function/u_uac1.c | 1 +
7337 drivers/usb/host/hwa-hc.c | 9 +-
7338 drivers/usb/usbip/vhci_sysfs.c | 2 +-
7339 drivers/video/fbdev/arcfb.c | 2 +-
7340 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
7341 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
7342 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
7343 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
7344 drivers/xen/xenfs/xenstored.c | 5 +
7345 firmware/Makefile | 2 +
7346 firmware/WHENCE | 20 +-
7347 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
7348 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
7349 fs/attr.c | 4 +
7350 fs/autofs4/waitq.c | 9 +
7351 fs/binfmt_aout.c | 7 +
7352 fs/binfmt_elf.c | 40 +-
7353 fs/compat.c | 20 +-
7354 fs/compat_ioctl.c | 253 +-
7355 fs/coredump.c | 17 +-
7356 fs/dcache.c | 3 +
7357 fs/debugfs/inode.c | 11 +-
7358 fs/exec.c | 231 +-
7359 fs/ext2/balloc.c | 4 +-
7360 fs/ext2/super.c | 8 +-
7361 fs/ext4/balloc.c | 4 +-
7362 fs/ext4/extents.c | 2 +-
7363 fs/fcntl.c | 4 +
7364 fs/fhandle.c | 3 +-
7365 fs/file.c | 4 +
7366 fs/filesystems.c | 4 +
7367 fs/fs_struct.c | 20 +-
7368 fs/hugetlbfs/inode.c | 24 +-
7369 fs/inode.c | 8 +-
7370 fs/internal.h | 7 +
7371 fs/ioctl.c | 4 +-
7372 fs/kernfs/dir.c | 6 +
7373 fs/mount.h | 4 +-
7374 fs/namei.c | 283 +-
7375 fs/namespace.c | 24 +
7376 fs/nfsd/nfscache.c | 2 +-
7377 fs/open.c | 38 +
7378 fs/overlayfs/inode.c | 3 +
7379 fs/overlayfs/super.c | 6 +-
7380 fs/pipe.c | 49 +-
7381 fs/posix_acl.c | 15 +-
7382 fs/proc/Kconfig | 10 +-
7383 fs/proc/array.c | 69 +-
7384 fs/proc/base.c | 186 +-
7385 fs/proc/cmdline.c | 4 +
7386 fs/proc/devices.c | 4 +
7387 fs/proc/fd.c | 12 +-
7388 fs/proc/generic.c | 64 +
7389 fs/proc/inode.c | 17 +
7390 fs/proc/internal.h | 11 +-
7391 fs/proc/interrupts.c | 4 +
7392 fs/proc/kcore.c | 3 +
7393 fs/proc/namespaces.c | 4 +-
7394 fs/proc/proc_net.c | 31 +
7395 fs/proc/proc_sysctl.c | 52 +-
7396 fs/proc/root.c | 8 +
7397 fs/proc/stat.c | 69 +-
7398 fs/proc/task_mmu.c | 66 +-
7399 fs/readdir.c | 19 +
7400 fs/reiserfs/item_ops.c | 24 +-
7401 fs/reiserfs/super.c | 4 +
7402 fs/select.c | 2 +
7403 fs/seq_file.c | 30 +-
7404 fs/stat.c | 20 +-
7405 fs/sysfs/dir.c | 30 +-
7406 fs/utimes.c | 7 +
7407 fs/xattr.c | 26 +-
7408 grsecurity/Kconfig | 1203 ++++
7409 grsecurity/Makefile | 54 +
7410 grsecurity/gracl.c | 2757 +++++++++
7411 grsecurity/gracl_alloc.c | 105 +
7412 grsecurity/gracl_cap.c | 127 +
7413 grsecurity/gracl_compat.c | 269 +
7414 grsecurity/gracl_fs.c | 448 ++
7415 grsecurity/gracl_ip.c | 386 ++
7416 grsecurity/gracl_learn.c | 207 +
7417 grsecurity/gracl_policy.c | 1786 ++++++
7418 grsecurity/gracl_res.c | 68 +
7419 grsecurity/gracl_segv.c | 304 +
7420 grsecurity/gracl_shm.c | 40 +
7421 grsecurity/grsec_chdir.c | 19 +
7422 grsecurity/grsec_chroot.c | 467 ++
7423 grsecurity/grsec_disabled.c | 445 ++
7424 grsecurity/grsec_exec.c | 189 +
7425 grsecurity/grsec_fifo.c | 26 +
7426 grsecurity/grsec_fork.c | 23 +
7427 grsecurity/grsec_init.c | 294 +
7428 grsecurity/grsec_ipc.c | 48 +
7429 grsecurity/grsec_link.c | 65 +
7430 grsecurity/grsec_log.c | 340 +
7431 grsecurity/grsec_mem.c | 48 +
7432 grsecurity/grsec_mount.c | 65 +
7433 grsecurity/grsec_pax.c | 47 +
7434 grsecurity/grsec_proc.c | 20 +
7435 grsecurity/grsec_ptrace.c | 30 +
7436 grsecurity/grsec_sig.c | 245 +
7437 grsecurity/grsec_sock.c | 244 +
7438 grsecurity/grsec_sysctl.c | 497 ++
7439 grsecurity/grsec_time.c | 16 +
7440 grsecurity/grsec_tpe.c | 78 +
7441 grsecurity/grsec_tty.c | 18 +
7442 grsecurity/grsec_usb.c | 15 +
7443 grsecurity/grsum.c | 54 +
7444 include/linux/binfmts.h | 5 +-
7445 include/linux/capability.h | 13 +
7446 include/linux/compiler-gcc.h | 5 +
7447 include/linux/compiler.h | 8 +
7448 include/linux/cred.h | 8 +-
7449 include/linux/dcache.h | 5 +-
7450 include/linux/fs.h | 26 +-
7451 include/linux/fs_struct.h | 2 +-
7452 include/linux/fsnotify.h | 6 +
7453 include/linux/gracl.h | 342 ++
7454 include/linux/gracl_compat.h | 156 +
7455 include/linux/gralloc.h | 9 +
7456 include/linux/grdefs.h | 140 +
7457 include/linux/grinternal.h | 231 +
7458 include/linux/grmsg.h | 119 +
7459 include/linux/grsecurity.h | 258 +
7460 include/linux/grsock.h | 19 +
7461 include/linux/ipc.h | 2 +-
7462 include/linux/ipc_namespace.h | 2 +-
7463 include/linux/kallsyms.h | 18 +-
7464 include/linux/key-type.h | 4 +-
7465 include/linux/kmod.h | 5 +
7466 include/linux/kobject.h | 2 +-
7467 include/linux/lsm_hooks.h | 4 +-
7468 include/linux/mm.h | 12 +
7469 include/linux/mm_types.h | 4 +-
7470 include/linux/module.h | 5 +-
7471 include/linux/mount.h | 2 +-
7472 include/linux/msg.h | 2 +-
7473 include/linux/netfilter/xt_gradm.h | 9 +
7474 include/linux/path.h | 4 +-
7475 include/linux/perf_event.h | 13 +-
7476 include/linux/pid_namespace.h | 2 +-
7477 include/linux/pipe_fs_i.h | 4 +
7478 include/linux/poison.h | 2 +-
7479 include/linux/printk.h | 2 +-
7480 include/linux/proc_fs.h | 22 +-
7481 include/linux/proc_ns.h | 2 +-
7482 include/linux/ptrace.h | 24 +-
7483 include/linux/radix-tree.h | 22 +-
7484 include/linux/random.h | 2 +-
7485 include/linux/rbtree_augmented.h | 4 +-
7486 include/linux/scatterlist.h | 12 +-
7487 include/linux/sched.h | 115 +-
7488 include/linux/security.h | 1 +
7489 include/linux/sem.h | 2 +-
7490 include/linux/seq_file.h | 5 +
7491 include/linux/shm.h | 6 +-
7492 include/linux/shmem_fs.h | 5 +-
7493 include/linux/skbuff.h | 3 +
7494 include/linux/slab.h | 9 -
7495 include/linux/sysctl.h | 8 +-
7496 include/linux/thread_info.h | 6 +-
7497 include/linux/tty.h | 2 +-
7498 include/linux/tty_driver.h | 4 +-
7499 include/linux/uidgid.h | 5 +
7500 include/linux/user_namespace.h | 2 +-
7501 include/linux/utsname.h | 2 +-
7502 include/linux/vermagic.h | 16 +-
7503 include/linux/vmalloc.h | 8 +
7504 include/net/af_unix.h | 6 +-
7505 include/net/ip.h | 2 +-
7506 include/net/neighbour.h | 2 +-
7507 include/net/net_namespace.h | 2 +-
7508 include/net/netfilter/nf_conntrack_core.h | 8 +-
7509 include/net/scm.h | 1 +
7510 include/net/sock.h | 2 +-
7511 include/trace/events/fs.h | 53 +
7512 include/uapi/linux/personality.h | 1 +
7513 init/Kconfig | 2 +
7514 init/main.c | 46 +-
7515 ipc/mqueue.c | 1 +
7516 ipc/msg.c | 3 +-
7517 ipc/msgutil.c | 4 +-
7518 ipc/sem.c | 3 +-
7519 ipc/shm.c | 26 +-
7520 ipc/util.c | 6 +
7521 kernel/auditsc.c | 2 +-
7522 kernel/bpf/syscall.c | 10 +-
7523 kernel/capability.c | 41 +-
7524 kernel/cgroup.c | 5 +-
7525 kernel/compat.c | 1 +
7526 kernel/configs.c | 11 +
7527 kernel/cred.c | 112 +-
7528 kernel/events/core.c | 16 +-
7529 kernel/exit.c | 10 +-
7530 kernel/fork.c | 86 +-
7531 kernel/futex.c | 6 +-
7532 kernel/futex_compat.c | 2 +-
7533 kernel/kallsyms.c | 9 +
7534 kernel/kcmp.c | 8 +-
7535 kernel/kexec_core.c | 2 +-
7536 kernel/kmod.c | 96 +-
7537 kernel/kprobes.c | 9 +-
7538 kernel/ksysfs.c | 2 +
7539 kernel/locking/lockdep_proc.c | 10 +-
7540 kernel/module.c | 108 +-
7541 kernel/panic.c | 4 +-
7542 kernel/pid.c | 18 +-
7543 kernel/power/Kconfig | 2 +
7544 kernel/printk/printk.c | 7 +-
7545 kernel/ptrace.c | 89 +-
7546 kernel/resource.c | 10 +
7547 kernel/sched/core.c | 11 +-
7548 kernel/seccomp.c | 22 +-
7549 kernel/signal.c | 37 +-
7550 kernel/sys.c | 64 +-
7551 kernel/sysctl.c | 186 +-
7552 kernel/taskstats.c | 6 +
7553 kernel/time/posix-timers.c | 8 +
7554 kernel/time/time.c | 5 +
7555 kernel/time/timekeeping.c | 3 +
7556 kernel/time/timer_list.c | 13 +-
7557 kernel/time/timer_stats.c | 10 +-
7558 kernel/trace/Kconfig | 2 +
7559 kernel/trace/trace_syscalls.c | 8 +
7560 kernel/user_namespace.c | 15 +
7561 lib/Kconfig.debug | 13 +-
7562 lib/Kconfig.kasan | 2 +-
7563 lib/is_single_threaded.c | 3 +
7564 lib/list_debug.c | 65 +-
7565 lib/nlattr.c | 2 +
7566 lib/radix-tree.c | 12 +-
7567 lib/rbtree.c | 4 +-
7568 lib/vsprintf.c | 39 +-
7569 localversion-grsec | 1 +
7570 mm/Kconfig | 8 +-
7571 mm/Kconfig.debug | 1 +
7572 mm/filemap.c | 1 +
7573 mm/kmemleak.c | 4 +-
7574 mm/memory.c | 2 +-
7575 mm/mempolicy.c | 12 +-
7576 mm/migrate.c | 3 +-
7577 mm/mlock.c | 11 +-
7578 mm/mmap.c | 103 +-
7579 mm/mprotect.c | 8 +
7580 mm/oom_kill.c | 4 +
7581 mm/page_alloc.c | 2 +-
7582 mm/process_vm_access.c | 8 +-
7583 mm/shmem.c | 11 +-
7584 mm/slab.c | 14 +-
7585 mm/slab_common.c | 2 +-
7586 mm/slob.c | 12 +
7587 mm/slub.c | 33 +-
7588 mm/util.c | 3 +
7589 mm/vmalloc.c | 82 +-
7590 mm/vmstat.c | 29 +-
7591 net/appletalk/atalk_proc.c | 2 +-
7592 net/atm/lec.c | 6 +-
7593 net/atm/mpoa_caches.c | 42 +-
7594 net/can/bcm.c | 2 +-
7595 net/can/proc.c | 2 +-
7596 net/core/dev_ioctl.c | 7 +-
7597 net/core/filter.c | 8 +-
7598 net/core/net-procfs.c | 17 +-
7599 net/core/pktgen.c | 2 +-
7600 net/core/scm.c | 7 +
7601 net/core/sock.c | 3 +-
7602 net/core/sysctl_net_core.c | 2 +-
7603 net/decnet/dn_dev.c | 2 +-
7604 net/ipv4/Kconfig | 1 +
7605 net/ipv4/devinet.c | 6 +-
7606 net/ipv4/inet_hashtables.c | 4 +
7607 net/ipv4/ip_input.c | 7 +
7608 net/ipv4/ip_sockglue.c | 3 +-
7609 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7610 net/ipv4/route.c | 6 +-
7611 net/ipv4/tcp_input.c | 6 +-
7612 net/ipv4/tcp_ipv4.c | 24 +-
7613 net/ipv4/tcp_minisocks.c | 9 +-
7614 net/ipv4/tcp_timer.c | 11 +
7615 net/ipv4/udp.c | 24 +
7616 net/ipv6/Kconfig | 1 +
7617 net/ipv6/addrconf.c | 13 +-
7618 net/ipv6/proc.c | 2 +-
7619 net/ipv6/tcp_ipv6.c | 23 +-
7620 net/ipv6/udp.c | 7 +
7621 net/ipx/ipx_proc.c | 2 +-
7622 net/irda/irproc.c | 2 +-
7623 net/iucv/af_iucv.c | 3 +
7624 net/llc/llc_proc.c | 2 +-
7625 net/netfilter/Kconfig | 10 +
7626 net/netfilter/Makefile | 1 +
7627 net/netfilter/nf_conntrack_core.c | 46 +-
7628 net/netfilter/nf_conntrack_helper.c | 2 +-
7629 net/netfilter/nf_conntrack_netlink.c | 2 +-
7630 net/netfilter/xt_gradm.c | 51 +
7631 net/netfilter/xt_hashlimit.c | 4 +-
7632 net/netfilter/xt_recent.c | 2 +-
7633 net/openvswitch/actions.c | 19 +-
7634 net/sctp/sm_sideeffect.c | 11 +-
7635 net/sctp/sm_statefuns.c | 17 +-
7636 net/socket.c | 75 +-
7637 net/sunrpc/Kconfig | 1 +
7638 net/sunrpc/cache.c | 2 +-
7639 net/sunrpc/stats.c | 2 +-
7640 net/sysctl_net.c | 2 +-
7641 net/unix/af_unix.c | 57 +-
7642 net/unix/garbage.c | 8 +-
7643 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7644 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7645 net/x25/sysctl_net_x25.c | 2 +-
7646 net/x25/x25_proc.c | 2 +-
7647 scripts/package/Makefile | 2 +-
7648 scripts/package/mkspec | 41 +-
7649 security/Kconfig | 369 +-
7650 security/apparmor/file.c | 4 +-
7651 security/apparmor/lsm.c | 8 +-
7652 security/commoncap.c | 36 +-
7653 security/keys/internal.h | 2 +-
7654 security/min_addr.c | 2 +
7655 security/smack/smack_lsm.c | 8 +-
7656 security/tomoyo/file.c | 12 +-
7657 security/tomoyo/mount.c | 4 +
7658 security/tomoyo/tomoyo.c | 20 +-
7659 security/yama/Kconfig | 2 +-
7660 security/yama/yama_lsm.c | 4 +-
7661 sound/core/timer.c | 4 +-
7662 sound/synth/emux/emux_seq.c | 14 +-
7663 sound/usb/line6/driver.c | 40 +-
7664 sound/usb/line6/toneport.c | 12 +-
7665 tools/gcc/.gitignore | 1 +
7666 tools/gcc/Makefile | 12 +
7667 tools/gcc/gen-random-seed.sh | 8 +
7668 tools/gcc/randomize_layout_plugin.c | 930 +++
7669 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7670 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
7671 513 files changed, 33007 insertions(+), 3251 deletions(-)
7672
7673 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
7674 Author: Brad Spengler <spender@grsecurity.net>
7675 Date: Mon Feb 15 10:51:41 2016 -0500
7676
7677 Initial import of pax-linux-4.4.1-test3.patch
7678
7679 Documentation/dontdiff | 46 +-
7680 Documentation/kbuild/makefiles.txt | 39 +-
7681 Documentation/kernel-parameters.txt | 28 +
7682 Makefile | 119 +-
7683 arch/alpha/include/asm/atomic.h | 10 +
7684 arch/alpha/include/asm/elf.h | 7 +
7685 arch/alpha/include/asm/pgalloc.h | 6 +
7686 arch/alpha/include/asm/pgtable.h | 11 +
7687 arch/alpha/kernel/module.c | 2 +-
7688 arch/alpha/kernel/osf_sys.c | 8 +-
7689 arch/alpha/mm/fault.c | 141 +-
7690 arch/arm/Kconfig | 3 +-
7691 arch/arm/include/asm/atomic.h | 323 +-
7692 arch/arm/include/asm/cache.h | 5 +-
7693 arch/arm/include/asm/cacheflush.h | 2 +-
7694 arch/arm/include/asm/checksum.h | 14 +-
7695 arch/arm/include/asm/cmpxchg.h | 4 +
7696 arch/arm/include/asm/cpuidle.h | 2 +-
7697 arch/arm/include/asm/domain.h | 42 +-
7698 arch/arm/include/asm/elf.h | 9 +-
7699 arch/arm/include/asm/fncpy.h | 2 +
7700 arch/arm/include/asm/futex.h | 1 +
7701 arch/arm/include/asm/kmap_types.h | 2 +-
7702 arch/arm/include/asm/mach/dma.h | 2 +-
7703 arch/arm/include/asm/mach/map.h | 16 +-
7704 arch/arm/include/asm/outercache.h | 2 +-
7705 arch/arm/include/asm/page.h | 3 +-
7706 arch/arm/include/asm/pgalloc.h | 20 +
7707 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7708 arch/arm/include/asm/pgtable-2level.h | 3 +
7709 arch/arm/include/asm/pgtable-3level.h | 3 +
7710 arch/arm/include/asm/pgtable.h | 54 +-
7711 arch/arm/include/asm/smp.h | 2 +-
7712 arch/arm/include/asm/thread_info.h | 3 +
7713 arch/arm/include/asm/tls.h | 3 +
7714 arch/arm/include/asm/uaccess.h | 113 +-
7715 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7716 arch/arm/kernel/armksyms.c | 2 +-
7717 arch/arm/kernel/cpuidle.c | 2 +-
7718 arch/arm/kernel/entry-armv.S | 109 +-
7719 arch/arm/kernel/entry-common.S | 40 +-
7720 arch/arm/kernel/entry-header.S | 55 +
7721 arch/arm/kernel/fiq.c | 3 +
7722 arch/arm/kernel/module-plts.c | 7 +-
7723 arch/arm/kernel/module.c | 38 +-
7724 arch/arm/kernel/patch.c | 2 +
7725 arch/arm/kernel/process.c | 92 +-
7726 arch/arm/kernel/reboot.c | 1 +
7727 arch/arm/kernel/setup.c | 20 +-
7728 arch/arm/kernel/signal.c | 35 +-
7729 arch/arm/kernel/smp.c | 2 +-
7730 arch/arm/kernel/tcm.c | 4 +-
7731 arch/arm/kernel/vmlinux.lds.S | 6 +-
7732 arch/arm/kvm/arm.c | 8 +-
7733 arch/arm/lib/copy_page.S | 1 +
7734 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7735 arch/arm/lib/delay.c | 2 +-
7736 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7737 arch/arm/mach-exynos/suspend.c | 6 +-
7738 arch/arm/mach-mvebu/coherency.c | 4 +-
7739 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7740 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7741 arch/arm/mach-omap2/omap-smp.c | 1 +
7742 arch/arm/mach-omap2/omap_device.c | 4 +-
7743 arch/arm/mach-omap2/omap_device.h | 4 +-
7744 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7745 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7746 arch/arm/mach-omap2/wd_timer.c | 6 +-
7747 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7748 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7749 arch/arm/mach-tegra/irq.c | 1 +
7750 arch/arm/mach-ux500/pm.c | 1 +
7751 arch/arm/mach-zynq/platsmp.c | 1 +
7752 arch/arm/mm/Kconfig | 6 +-
7753 arch/arm/mm/cache-l2x0.c | 2 +-
7754 arch/arm/mm/context.c | 10 +-
7755 arch/arm/mm/fault.c | 146 +
7756 arch/arm/mm/fault.h | 12 +
7757 arch/arm/mm/init.c | 39 +
7758 arch/arm/mm/ioremap.c | 4 +-
7759 arch/arm/mm/mmap.c | 30 +-
7760 arch/arm/mm/mmu.c | 162 +-
7761 arch/arm/net/bpf_jit_32.c | 3 +
7762 arch/arm/plat-iop/setup.c | 2 +-
7763 arch/arm/plat-omap/sram.c | 2 +
7764 arch/arm64/include/asm/atomic.h | 10 +
7765 arch/arm64/include/asm/percpu.h | 8 +-
7766 arch/arm64/include/asm/pgalloc.h | 5 +
7767 arch/arm64/include/asm/uaccess.h | 1 +
7768 arch/arm64/mm/dma-mapping.c | 2 +-
7769 arch/avr32/include/asm/elf.h | 8 +-
7770 arch/avr32/include/asm/kmap_types.h | 4 +-
7771 arch/avr32/mm/fault.c | 27 +
7772 arch/frv/include/asm/atomic.h | 10 +
7773 arch/frv/include/asm/kmap_types.h | 2 +-
7774 arch/frv/mm/elf-fdpic.c | 3 +-
7775 arch/ia64/Makefile | 1 +
7776 arch/ia64/include/asm/atomic.h | 10 +
7777 arch/ia64/include/asm/elf.h | 7 +
7778 arch/ia64/include/asm/pgalloc.h | 12 +
7779 arch/ia64/include/asm/pgtable.h | 13 +-
7780 arch/ia64/include/asm/spinlock.h | 2 +-
7781 arch/ia64/include/asm/uaccess.h | 27 +-
7782 arch/ia64/kernel/module.c | 45 +-
7783 arch/ia64/kernel/palinfo.c | 2 +-
7784 arch/ia64/kernel/sys_ia64.c | 7 +
7785 arch/ia64/kernel/vmlinux.lds.S | 2 +-
7786 arch/ia64/mm/fault.c | 32 +-
7787 arch/ia64/mm/init.c | 15 +-
7788 arch/m32r/lib/usercopy.c | 6 +
7789 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
7790 arch/mips/include/asm/atomic.h | 368 +-
7791 arch/mips/include/asm/elf.h | 7 +
7792 arch/mips/include/asm/exec.h | 2 +-
7793 arch/mips/include/asm/hw_irq.h | 2 +-
7794 arch/mips/include/asm/local.h | 57 +
7795 arch/mips/include/asm/page.h | 2 +-
7796 arch/mips/include/asm/pgalloc.h | 5 +
7797 arch/mips/include/asm/pgtable.h | 3 +
7798 arch/mips/include/asm/uaccess.h | 1 +
7799 arch/mips/kernel/binfmt_elfn32.c | 7 +
7800 arch/mips/kernel/binfmt_elfo32.c | 7 +
7801 arch/mips/kernel/irq-gt641xx.c | 2 +-
7802 arch/mips/kernel/irq.c | 6 +-
7803 arch/mips/kernel/pm-cps.c | 2 +-
7804 arch/mips/kernel/process.c | 12 -
7805 arch/mips/kernel/sync-r4k.c | 24 +-
7806 arch/mips/kernel/traps.c | 13 +-
7807 arch/mips/mm/fault.c | 25 +
7808 arch/mips/mm/mmap.c | 51 +-
7809 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
7810 arch/mips/sni/rm200.c | 2 +-
7811 arch/mips/vr41xx/common/icu.c | 2 +-
7812 arch/mips/vr41xx/common/irq.c | 4 +-
7813 arch/parisc/include/asm/atomic.h | 10 +
7814 arch/parisc/include/asm/elf.h | 7 +
7815 arch/parisc/include/asm/pgalloc.h | 6 +
7816 arch/parisc/include/asm/pgtable.h | 11 +
7817 arch/parisc/include/asm/uaccess.h | 4 +-
7818 arch/parisc/kernel/module.c | 50 +-
7819 arch/parisc/kernel/sys_parisc.c | 15 +
7820 arch/parisc/kernel/traps.c | 4 +-
7821 arch/parisc/mm/fault.c | 140 +-
7822 arch/powerpc/include/asm/atomic.h | 329 +-
7823 arch/powerpc/include/asm/elf.h | 12 +
7824 arch/powerpc/include/asm/exec.h | 2 +-
7825 arch/powerpc/include/asm/kmap_types.h | 2 +-
7826 arch/powerpc/include/asm/local.h | 46 +
7827 arch/powerpc/include/asm/mman.h | 2 +-
7828 arch/powerpc/include/asm/page.h | 8 +-
7829 arch/powerpc/include/asm/page_64.h | 7 +-
7830 arch/powerpc/include/asm/pgalloc-64.h | 7 +
7831 arch/powerpc/include/asm/pgtable.h | 1 +
7832 arch/powerpc/include/asm/pte-hash32.h | 1 +
7833 arch/powerpc/include/asm/reg.h | 1 +
7834 arch/powerpc/include/asm/smp.h | 2 +-
7835 arch/powerpc/include/asm/spinlock.h | 42 +-
7836 arch/powerpc/include/asm/uaccess.h | 141 +-
7837 arch/powerpc/kernel/Makefile | 5 +
7838 arch/powerpc/kernel/exceptions-64e.S | 4 +-
7839 arch/powerpc/kernel/exceptions-64s.S | 2 +-
7840 arch/powerpc/kernel/module_32.c | 15 +-
7841 arch/powerpc/kernel/process.c | 46 -
7842 arch/powerpc/kernel/signal_32.c | 2 +-
7843 arch/powerpc/kernel/signal_64.c | 2 +-
7844 arch/powerpc/kernel/traps.c | 21 +
7845 arch/powerpc/kernel/vdso.c | 5 +-
7846 arch/powerpc/lib/usercopy_64.c | 18 -
7847 arch/powerpc/mm/fault.c | 56 +-
7848 arch/powerpc/mm/mmap.c | 16 +
7849 arch/powerpc/mm/slice.c | 13 +-
7850 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
7851 arch/s390/include/asm/atomic.h | 10 +
7852 arch/s390/include/asm/elf.h | 7 +
7853 arch/s390/include/asm/exec.h | 2 +-
7854 arch/s390/include/asm/uaccess.h | 13 +-
7855 arch/s390/kernel/module.c | 22 +-
7856 arch/s390/kernel/process.c | 20 -
7857 arch/s390/mm/mmap.c | 16 +
7858 arch/score/include/asm/exec.h | 2 +-
7859 arch/score/kernel/process.c | 5 -
7860 arch/sh/mm/mmap.c | 22 +-
7861 arch/sparc/include/asm/atomic_64.h | 110 +-
7862 arch/sparc/include/asm/cache.h | 2 +-
7863 arch/sparc/include/asm/elf_32.h | 7 +
7864 arch/sparc/include/asm/elf_64.h | 7 +
7865 arch/sparc/include/asm/pgalloc_32.h | 1 +
7866 arch/sparc/include/asm/pgalloc_64.h | 1 +
7867 arch/sparc/include/asm/pgtable.h | 4 +
7868 arch/sparc/include/asm/pgtable_32.h | 15 +-
7869 arch/sparc/include/asm/pgtsrmmu.h | 5 +
7870 arch/sparc/include/asm/setup.h | 4 +-
7871 arch/sparc/include/asm/spinlock_64.h | 35 +-
7872 arch/sparc/include/asm/thread_info_32.h | 1 +
7873 arch/sparc/include/asm/thread_info_64.h | 2 +
7874 arch/sparc/include/asm/uaccess.h | 1 +
7875 arch/sparc/include/asm/uaccess_32.h | 28 +-
7876 arch/sparc/include/asm/uaccess_64.h | 24 +-
7877 arch/sparc/kernel/Makefile | 2 +-
7878 arch/sparc/kernel/prom_common.c | 2 +-
7879 arch/sparc/kernel/smp_64.c | 8 +-
7880 arch/sparc/kernel/sys_sparc_32.c | 2 +-
7881 arch/sparc/kernel/sys_sparc_64.c | 52 +-
7882 arch/sparc/kernel/traps_64.c | 27 +-
7883 arch/sparc/lib/Makefile | 2 +-
7884 arch/sparc/lib/atomic_64.S | 57 +-
7885 arch/sparc/lib/ksyms.c | 6 +-
7886 arch/sparc/mm/Makefile | 2 +-
7887 arch/sparc/mm/fault_32.c | 292 +
7888 arch/sparc/mm/fault_64.c | 486 +
7889 arch/sparc/mm/hugetlbpage.c | 22 +-
7890 arch/sparc/mm/init_64.c | 10 +-
7891 arch/tile/include/asm/atomic_64.h | 10 +
7892 arch/tile/include/asm/uaccess.h | 4 +-
7893 arch/um/Makefile | 4 +
7894 arch/um/include/asm/kmap_types.h | 2 +-
7895 arch/um/include/asm/page.h | 3 +
7896 arch/um/include/asm/pgtable-3level.h | 1 +
7897 arch/um/kernel/process.c | 16 -
7898 arch/x86/Kconfig | 26 +-
7899 arch/x86/Kconfig.cpu | 6 +-
7900 arch/x86/Kconfig.debug | 4 +-
7901 arch/x86/Makefile | 13 +-
7902 arch/x86/boot/Makefile | 3 +
7903 arch/x86/boot/bitops.h | 4 +-
7904 arch/x86/boot/boot.h | 2 +-
7905 arch/x86/boot/compressed/Makefile | 3 +
7906 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
7907 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
7908 arch/x86/boot/compressed/head_32.S | 4 +-
7909 arch/x86/boot/compressed/head_64.S | 12 +-
7910 arch/x86/boot/compressed/misc.c | 11 +-
7911 arch/x86/boot/cpucheck.c | 16 +-
7912 arch/x86/boot/header.S | 6 +-
7913 arch/x86/boot/memory.c | 2 +-
7914 arch/x86/boot/video-vesa.c | 1 +
7915 arch/x86/boot/video.c | 2 +-
7916 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
7917 arch/x86/crypto/aesni-intel_asm.S | 106 +-
7918 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
7919 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
7920 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
7921 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
7922 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
7923 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
7924 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
7925 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
7926 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
7927 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
7928 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
7929 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
7930 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
7931 arch/x86/crypto/sha256-avx-asm.S | 2 +
7932 arch/x86/crypto/sha256-avx2-asm.S | 2 +
7933 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
7934 arch/x86/crypto/sha512-avx-asm.S | 2 +
7935 arch/x86/crypto/sha512-avx2-asm.S | 2 +
7936 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
7937 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
7938 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
7939 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
7940 arch/x86/entry/calling.h | 86 +-
7941 arch/x86/entry/common.c | 28 +-
7942 arch/x86/entry/entry_32.S | 311 +-
7943 arch/x86/entry/entry_64.S | 625 +-
7944 arch/x86/entry/entry_64_compat.S | 67 +-
7945 arch/x86/entry/thunk_64.S | 2 +
7946 arch/x86/entry/vdso/Makefile | 2 +-
7947 arch/x86/entry/vdso/vdso2c.h | 8 +-
7948 arch/x86/entry/vdso/vma.c | 37 +-
7949 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
7950 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
7951 arch/x86/ia32/ia32_signal.c | 23 +-
7952 arch/x86/ia32/sys_ia32.c | 42 +-
7953 arch/x86/include/asm/alternative-asm.h | 43 +-
7954 arch/x86/include/asm/alternative.h | 4 +-
7955 arch/x86/include/asm/apic.h | 2 +-
7956 arch/x86/include/asm/apm.h | 4 +-
7957 arch/x86/include/asm/atomic.h | 230 +-
7958 arch/x86/include/asm/atomic64_32.h | 100 +
7959 arch/x86/include/asm/atomic64_64.h | 164 +-
7960 arch/x86/include/asm/bitops.h | 18 +-
7961 arch/x86/include/asm/boot.h | 2 +-
7962 arch/x86/include/asm/cache.h | 5 +-
7963 arch/x86/include/asm/checksum_32.h | 12 +-
7964 arch/x86/include/asm/cmpxchg.h | 39 +
7965 arch/x86/include/asm/compat.h | 4 +
7966 arch/x86/include/asm/cpufeature.h | 17 +-
7967 arch/x86/include/asm/desc.h | 78 +-
7968 arch/x86/include/asm/desc_defs.h | 6 +
7969 arch/x86/include/asm/div64.h | 2 +-
7970 arch/x86/include/asm/dma.h | 2 +
7971 arch/x86/include/asm/elf.h | 33 +-
7972 arch/x86/include/asm/emergency-restart.h | 2 +-
7973 arch/x86/include/asm/fpu/internal.h | 42 +-
7974 arch/x86/include/asm/fpu/types.h | 5 +-
7975 arch/x86/include/asm/futex.h | 14 +-
7976 arch/x86/include/asm/hw_irq.h | 4 +-
7977 arch/x86/include/asm/i8259.h | 2 +-
7978 arch/x86/include/asm/io.h | 22 +-
7979 arch/x86/include/asm/irqflags.h | 5 +
7980 arch/x86/include/asm/kprobes.h | 9 +-
7981 arch/x86/include/asm/local.h | 106 +-
7982 arch/x86/include/asm/mman.h | 15 +
7983 arch/x86/include/asm/mmu.h | 14 +-
7984 arch/x86/include/asm/mmu_context.h | 133 +-
7985 arch/x86/include/asm/module.h | 17 +-
7986 arch/x86/include/asm/nmi.h | 19 +-
7987 arch/x86/include/asm/page.h | 1 +
7988 arch/x86/include/asm/page_32.h | 12 +-
7989 arch/x86/include/asm/page_64.h | 14 +-
7990 arch/x86/include/asm/paravirt.h | 46 +-
7991 arch/x86/include/asm/paravirt_types.h | 15 +-
7992 arch/x86/include/asm/pgalloc.h | 23 +
7993 arch/x86/include/asm/pgtable-2level.h | 2 +
7994 arch/x86/include/asm/pgtable-3level.h | 7 +
7995 arch/x86/include/asm/pgtable.h | 126 +-
7996 arch/x86/include/asm/pgtable_32.h | 14 +-
7997 arch/x86/include/asm/pgtable_32_types.h | 24 +-
7998 arch/x86/include/asm/pgtable_64.h | 23 +-
7999 arch/x86/include/asm/pgtable_64_types.h | 5 +
8000 arch/x86/include/asm/pgtable_types.h | 26 +-
8001 arch/x86/include/asm/pmem.h | 2 +-
8002 arch/x86/include/asm/preempt.h | 2 +-
8003 arch/x86/include/asm/processor.h | 57 +-
8004 arch/x86/include/asm/ptrace.h | 15 +-
8005 arch/x86/include/asm/realmode.h | 4 +-
8006 arch/x86/include/asm/reboot.h | 10 +-
8007 arch/x86/include/asm/rmwcc.h | 84 +-
8008 arch/x86/include/asm/rwsem.h | 60 +-
8009 arch/x86/include/asm/segment.h | 27 +-
8010 arch/x86/include/asm/smap.h | 43 +
8011 arch/x86/include/asm/smp.h | 14 +-
8012 arch/x86/include/asm/stackprotector.h | 4 +-
8013 arch/x86/include/asm/stacktrace.h | 34 +-
8014 arch/x86/include/asm/switch_to.h | 4 +-
8015 arch/x86/include/asm/sys_ia32.h | 6 +-
8016 arch/x86/include/asm/thread_info.h | 27 +-
8017 arch/x86/include/asm/tlbflush.h | 77 +-
8018 arch/x86/include/asm/uaccess.h | 210 +-
8019 arch/x86/include/asm/uaccess_32.h | 28 +-
8020 arch/x86/include/asm/uaccess_64.h | 169 +-
8021 arch/x86/include/asm/word-at-a-time.h | 2 +-
8022 arch/x86/include/asm/x86_init.h | 10 +-
8023 arch/x86/include/asm/xen/page.h | 2 +-
8024 arch/x86/include/uapi/asm/e820.h | 2 +-
8025 arch/x86/kernel/Makefile | 2 +-
8026 arch/x86/kernel/acpi/boot.c | 4 +-
8027 arch/x86/kernel/acpi/sleep.c | 4 +
8028 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
8029 arch/x86/kernel/alternative.c | 124 +-
8030 arch/x86/kernel/apic/apic.c | 4 +-
8031 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
8032 arch/x86/kernel/apic/apic_noop.c | 2 +-
8033 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
8034 arch/x86/kernel/apic/io_apic.c | 8 +-
8035 arch/x86/kernel/apic/msi.c | 2 +-
8036 arch/x86/kernel/apic/probe_32.c | 4 +-
8037 arch/x86/kernel/apic/vector.c | 2 +
8038 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
8039 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
8040 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
8041 arch/x86/kernel/apm_32.c | 21 +-
8042 arch/x86/kernel/asm-offsets.c | 20 +
8043 arch/x86/kernel/asm-offsets_64.c | 1 +
8044 arch/x86/kernel/cpu/Makefile | 4 -
8045 arch/x86/kernel/cpu/amd.c | 2 +-
8046 arch/x86/kernel/cpu/bugs_64.c | 2 +
8047 arch/x86/kernel/cpu/common.c | 202 +-
8048 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
8049 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
8050 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
8051 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
8052 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
8053 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
8054 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
8055 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
8056 arch/x86/kernel/cpu/perf_event.c | 10 +-
8057 arch/x86/kernel/cpu/perf_event.h | 2 +-
8058 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
8059 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
8060 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
8061 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
8062 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
8063 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
8064 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
8065 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
8066 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
8067 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
8068 arch/x86/kernel/crash_dump_64.c | 2 +-
8069 arch/x86/kernel/doublefault.c | 8 +-
8070 arch/x86/kernel/dumpstack.c | 24 +-
8071 arch/x86/kernel/dumpstack_32.c | 25 +-
8072 arch/x86/kernel/dumpstack_64.c | 62 +-
8073 arch/x86/kernel/e820.c | 4 +-
8074 arch/x86/kernel/early_printk.c | 1 +
8075 arch/x86/kernel/espfix_64.c | 44 +-
8076 arch/x86/kernel/fpu/core.c | 24 +-
8077 arch/x86/kernel/fpu/init.c | 40 +-
8078 arch/x86/kernel/fpu/regset.c | 22 +-
8079 arch/x86/kernel/fpu/signal.c | 20 +-
8080 arch/x86/kernel/fpu/xstate.c | 6 +-
8081 arch/x86/kernel/ftrace.c | 18 +-
8082 arch/x86/kernel/head64.c | 14 +-
8083 arch/x86/kernel/head_32.S | 235 +-
8084 arch/x86/kernel/head_64.S | 173 +-
8085 arch/x86/kernel/i386_ksyms_32.c | 12 +
8086 arch/x86/kernel/i8259.c | 10 +-
8087 arch/x86/kernel/io_delay.c | 2 +-
8088 arch/x86/kernel/ioport.c | 2 +-
8089 arch/x86/kernel/irq.c | 8 +-
8090 arch/x86/kernel/irq_32.c | 45 +-
8091 arch/x86/kernel/jump_label.c | 10 +-
8092 arch/x86/kernel/kgdb.c | 21 +-
8093 arch/x86/kernel/kprobes/core.c | 28 +-
8094 arch/x86/kernel/kprobes/opt.c | 16 +-
8095 arch/x86/kernel/ksysfs.c | 2 +-
8096 arch/x86/kernel/kvmclock.c | 20 +-
8097 arch/x86/kernel/ldt.c | 25 +
8098 arch/x86/kernel/livepatch.c | 11 +-
8099 arch/x86/kernel/machine_kexec_32.c | 6 +-
8100 arch/x86/kernel/mcount_64.S | 19 +-
8101 arch/x86/kernel/module.c | 78 +-
8102 arch/x86/kernel/msr.c | 2 +-
8103 arch/x86/kernel/nmi.c | 34 +-
8104 arch/x86/kernel/nmi_selftest.c | 4 +-
8105 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
8106 arch/x86/kernel/paravirt.c | 45 +-
8107 arch/x86/kernel/paravirt_patch_64.c | 8 +
8108 arch/x86/kernel/pci-calgary_64.c | 2 +-
8109 arch/x86/kernel/pci-iommu_table.c | 2 +-
8110 arch/x86/kernel/pci-swiotlb.c | 2 +-
8111 arch/x86/kernel/process.c | 80 +-
8112 arch/x86/kernel/process_32.c | 29 +-
8113 arch/x86/kernel/process_64.c | 14 +-
8114 arch/x86/kernel/ptrace.c | 20 +-
8115 arch/x86/kernel/pvclock.c | 8 +-
8116 arch/x86/kernel/reboot.c | 44 +-
8117 arch/x86/kernel/reboot_fixups_32.c | 2 +-
8118 arch/x86/kernel/relocate_kernel_64.S | 3 +-
8119 arch/x86/kernel/setup.c | 29 +-
8120 arch/x86/kernel/setup_percpu.c | 29 +-
8121 arch/x86/kernel/signal.c | 17 +-
8122 arch/x86/kernel/smp.c | 2 +-
8123 arch/x86/kernel/smpboot.c | 29 +-
8124 arch/x86/kernel/step.c | 6 +-
8125 arch/x86/kernel/sys_i386_32.c | 184 +
8126 arch/x86/kernel/sys_x86_64.c | 22 +-
8127 arch/x86/kernel/tboot.c | 22 +-
8128 arch/x86/kernel/time.c | 8 +-
8129 arch/x86/kernel/tls.c | 7 +-
8130 arch/x86/kernel/tracepoint.c | 4 +-
8131 arch/x86/kernel/traps.c | 53 +-
8132 arch/x86/kernel/tsc.c | 2 +-
8133 arch/x86/kernel/uprobes.c | 4 +-
8134 arch/x86/kernel/vm86_32.c | 6 +-
8135 arch/x86/kernel/vmlinux.lds.S | 153 +-
8136 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
8137 arch/x86/kernel/x86_init.c | 6 +-
8138 arch/x86/kvm/cpuid.c | 21 +-
8139 arch/x86/kvm/emulate.c | 6 +-
8140 arch/x86/kvm/i8259.c | 10 +-
8141 arch/x86/kvm/ioapic.c | 2 +
8142 arch/x86/kvm/lapic.c | 2 +-
8143 arch/x86/kvm/paging_tmpl.h | 2 +-
8144 arch/x86/kvm/svm.c | 10 +-
8145 arch/x86/kvm/vmx.c | 62 +-
8146 arch/x86/kvm/x86.c | 44 +-
8147 arch/x86/lguest/boot.c | 3 +-
8148 arch/x86/lib/atomic64_386_32.S | 164 +
8149 arch/x86/lib/atomic64_cx8_32.S | 98 +-
8150 arch/x86/lib/checksum_32.S | 99 +-
8151 arch/x86/lib/clear_page_64.S | 3 +
8152 arch/x86/lib/cmpxchg16b_emu.S | 3 +
8153 arch/x86/lib/copy_page_64.S | 14 +-
8154 arch/x86/lib/copy_user_64.S | 66 +-
8155 arch/x86/lib/csum-copy_64.S | 14 +-
8156 arch/x86/lib/csum-wrappers_64.c | 8 +-
8157 arch/x86/lib/getuser.S | 74 +-
8158 arch/x86/lib/insn.c | 8 +-
8159 arch/x86/lib/iomap_copy_64.S | 2 +
8160 arch/x86/lib/memcpy_64.S | 6 +
8161 arch/x86/lib/memmove_64.S | 3 +-
8162 arch/x86/lib/memset_64.S | 3 +
8163 arch/x86/lib/mmx_32.c | 243 +-
8164 arch/x86/lib/msr-reg.S | 2 +
8165 arch/x86/lib/putuser.S | 87 +-
8166 arch/x86/lib/rwsem.S | 6 +-
8167 arch/x86/lib/usercopy_32.c | 359 +-
8168 arch/x86/lib/usercopy_64.c | 22 +-
8169 arch/x86/math-emu/fpu_aux.c | 2 +-
8170 arch/x86/math-emu/fpu_entry.c | 4 +-
8171 arch/x86/math-emu/fpu_system.h | 2 +-
8172 arch/x86/mm/Makefile | 4 +
8173 arch/x86/mm/extable.c | 26 +-
8174 arch/x86/mm/fault.c | 570 +-
8175 arch/x86/mm/gup.c | 6 +-
8176 arch/x86/mm/highmem_32.c | 6 +
8177 arch/x86/mm/hugetlbpage.c | 24 +-
8178 arch/x86/mm/init.c | 111 +-
8179 arch/x86/mm/init_32.c | 111 +-
8180 arch/x86/mm/init_64.c | 46 +-
8181 arch/x86/mm/iomap_32.c | 4 +
8182 arch/x86/mm/ioremap.c | 52 +-
8183 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
8184 arch/x86/mm/mmap.c | 40 +-
8185 arch/x86/mm/mmio-mod.c | 10 +-
8186 arch/x86/mm/mpx.c | 6 +-
8187 arch/x86/mm/numa.c | 4 +-
8188 arch/x86/mm/pageattr.c | 42 +-
8189 arch/x86/mm/pat.c | 12 +-
8190 arch/x86/mm/pat_rbtree.c | 2 +-
8191 arch/x86/mm/pf_in.c | 10 +-
8192 arch/x86/mm/pgtable.c | 214 +-
8193 arch/x86/mm/pgtable_32.c | 3 +
8194 arch/x86/mm/setup_nx.c | 7 +
8195 arch/x86/mm/tlb.c | 4 +
8196 arch/x86/mm/uderef_64.c | 37 +
8197 arch/x86/net/bpf_jit.S | 11 +
8198 arch/x86/net/bpf_jit_comp.c | 13 +-
8199 arch/x86/oprofile/backtrace.c | 6 +-
8200 arch/x86/oprofile/nmi_int.c | 8 +-
8201 arch/x86/oprofile/op_model_amd.c | 8 +-
8202 arch/x86/oprofile/op_model_ppro.c | 7 +-
8203 arch/x86/oprofile/op_x86_model.h | 2 +-
8204 arch/x86/pci/intel_mid_pci.c | 2 +-
8205 arch/x86/pci/irq.c | 8 +-
8206 arch/x86/pci/pcbios.c | 144 +-
8207 arch/x86/platform/efi/efi_32.c | 24 +
8208 arch/x86/platform/efi/efi_64.c | 26 +-
8209 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8210 arch/x86/platform/efi/efi_stub_64.S | 2 +
8211 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
8212 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
8213 arch/x86/platform/intel-mid/mfld.c | 4 +-
8214 arch/x86/platform/intel-mid/mrfl.c | 2 +-
8215 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
8216 arch/x86/platform/olpc/olpc_dt.c | 2 +-
8217 arch/x86/power/cpu.c | 11 +-
8218 arch/x86/realmode/init.c | 10 +-
8219 arch/x86/realmode/rm/Makefile | 3 +
8220 arch/x86/realmode/rm/header.S | 4 +-
8221 arch/x86/realmode/rm/reboot.S | 4 +
8222 arch/x86/realmode/rm/trampoline_32.S | 12 +-
8223 arch/x86/realmode/rm/trampoline_64.S | 3 +-
8224 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
8225 arch/x86/tools/Makefile | 2 +-
8226 arch/x86/tools/relocs.c | 96 +-
8227 arch/x86/um/mem_32.c | 2 +-
8228 arch/x86/um/tls_32.c | 2 +-
8229 arch/x86/xen/enlighten.c | 50 +-
8230 arch/x86/xen/mmu.c | 19 +-
8231 arch/x86/xen/smp.c | 16 +-
8232 arch/x86/xen/xen-asm_32.S | 2 +-
8233 arch/x86/xen/xen-head.S | 11 +
8234 arch/x86/xen/xen-ops.h | 2 -
8235 block/bio.c | 4 +-
8236 block/blk-cgroup.c | 18 +-
8237 block/blk-iopoll.c | 2 +-
8238 block/blk-map.c | 2 +-
8239 block/blk-softirq.c | 2 +-
8240 block/bsg.c | 12 +-
8241 block/cfq-iosched.c | 4 +-
8242 block/compat_ioctl.c | 4 +-
8243 block/genhd.c | 9 +-
8244 block/partitions/efi.c | 8 +-
8245 block/scsi_ioctl.c | 29 +-
8246 crypto/cryptd.c | 4 +-
8247 crypto/crypto_user.c | 8 +-
8248 crypto/pcrypt.c | 2 +-
8249 crypto/zlib.c | 12 +-
8250 drivers/acpi/acpi_video.c | 2 +-
8251 drivers/acpi/apei/apei-internal.h | 2 +-
8252 drivers/acpi/apei/ghes.c | 10 +-
8253 drivers/acpi/bgrt.c | 6 +-
8254 drivers/acpi/blacklist.c | 4 +-
8255 drivers/acpi/bus.c | 4 +-
8256 drivers/acpi/device_pm.c | 4 +-
8257 drivers/acpi/ec.c | 2 +-
8258 drivers/acpi/pci_slot.c | 2 +-
8259 drivers/acpi/processor_idle.c | 2 +-
8260 drivers/acpi/processor_pdc.c | 2 +-
8261 drivers/acpi/sleep.c | 2 +-
8262 drivers/acpi/sysfs.c | 4 +-
8263 drivers/acpi/thermal.c | 2 +-
8264 drivers/acpi/video_detect.c | 7 +-
8265 drivers/ata/libata-core.c | 12 +-
8266 drivers/ata/libata-scsi.c | 2 +-
8267 drivers/ata/libata.h | 2 +-
8268 drivers/ata/pata_arasan_cf.c | 4 +-
8269 drivers/atm/adummy.c | 2 +-
8270 drivers/atm/ambassador.c | 8 +-
8271 drivers/atm/atmtcp.c | 14 +-
8272 drivers/atm/eni.c | 10 +-
8273 drivers/atm/firestream.c | 8 +-
8274 drivers/atm/fore200e.c | 14 +-
8275 drivers/atm/he.c | 18 +-
8276 drivers/atm/horizon.c | 4 +-
8277 drivers/atm/idt77252.c | 36 +-
8278 drivers/atm/iphase.c | 34 +-
8279 drivers/atm/lanai.c | 12 +-
8280 drivers/atm/nicstar.c | 46 +-
8281 drivers/atm/solos-pci.c | 4 +-
8282 drivers/atm/suni.c | 4 +-
8283 drivers/atm/uPD98402.c | 16 +-
8284 drivers/atm/zatm.c | 6 +-
8285 drivers/base/bus.c | 4 +-
8286 drivers/base/devres.c | 4 +-
8287 drivers/base/devtmpfs.c | 8 +-
8288 drivers/base/node.c | 2 +-
8289 drivers/base/platform-msi.c | 20 +-
8290 drivers/base/power/domain.c | 7 +-
8291 drivers/base/power/runtime.c | 6 +-
8292 drivers/base/power/sysfs.c | 2 +-
8293 drivers/base/power/wakeup.c | 8 +-
8294 drivers/base/regmap/regmap-debugfs.c | 4 +-
8295 drivers/base/regmap/regmap.c | 4 +-
8296 drivers/base/syscore.c | 4 +-
8297 drivers/block/cciss.c | 28 +-
8298 drivers/block/cciss.h | 2 +-
8299 drivers/block/cpqarray.c | 28 +-
8300 drivers/block/cpqarray.h | 2 +-
8301 drivers/block/drbd/drbd_bitmap.c | 2 +-
8302 drivers/block/drbd/drbd_int.h | 8 +-
8303 drivers/block/drbd/drbd_main.c | 12 +-
8304 drivers/block/drbd/drbd_nl.c | 4 +-
8305 drivers/block/drbd/drbd_receiver.c | 38 +-
8306 drivers/block/drbd/drbd_worker.c | 14 +-
8307 drivers/block/pktcdvd.c | 4 +-
8308 drivers/block/rbd.c | 2 +-
8309 drivers/bluetooth/btwilink.c | 2 +-
8310 drivers/bus/arm-cci.c | 12 +-
8311 drivers/cdrom/cdrom.c | 11 +-
8312 drivers/cdrom/gdrom.c | 1 -
8313 drivers/char/agp/compat_ioctl.c | 2 +-
8314 drivers/char/agp/frontend.c | 4 +-
8315 drivers/char/agp/intel-gtt.c | 4 +-
8316 drivers/char/hpet.c | 2 +-
8317 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
8318 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8319 drivers/char/ipmi/ipmi_ssif.c | 12 +-
8320 drivers/char/mem.c | 47 +-
8321 drivers/char/nvram.c | 2 +-
8322 drivers/char/pcmcia/synclink_cs.c | 16 +-
8323 drivers/char/random.c | 12 +-
8324 drivers/char/sonypi.c | 11 +-
8325 drivers/char/tpm/tpm_acpi.c | 3 +-
8326 drivers/char/tpm/tpm_eventlog.c | 5 +-
8327 drivers/char/virtio_console.c | 6 +-
8328 drivers/clk/clk-composite.c | 2 +-
8329 drivers/clk/samsung/clk.h | 2 +-
8330 drivers/clk/socfpga/clk-gate.c | 9 +-
8331 drivers/clk/socfpga/clk-pll.c | 9 +-
8332 drivers/clk/ti/clk.c | 8 +-
8333 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8334 drivers/cpufreq/cpufreq-dt.c | 4 +-
8335 drivers/cpufreq/cpufreq.c | 30 +-
8336 drivers/cpufreq/cpufreq_governor.c | 2 +-
8337 drivers/cpufreq/cpufreq_governor.h | 4 +-
8338 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
8339 drivers/cpufreq/intel_pstate.c | 38 +-
8340 drivers/cpufreq/p4-clockmod.c | 12 +-
8341 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
8342 drivers/cpufreq/speedstep-centrino.c | 7 +-
8343 drivers/cpuidle/driver.c | 2 +-
8344 drivers/cpuidle/dt_idle_states.c | 2 +-
8345 drivers/cpuidle/governor.c | 2 +-
8346 drivers/cpuidle/sysfs.c | 2 +-
8347 drivers/crypto/hifn_795x.c | 4 +-
8348 drivers/devfreq/devfreq.c | 4 +-
8349 drivers/dma/sh/shdma-base.c | 4 +-
8350 drivers/dma/sh/shdmac.c | 2 +-
8351 drivers/edac/edac_device.c | 4 +-
8352 drivers/edac/edac_mc_sysfs.c | 2 +-
8353 drivers/edac/edac_pci.c | 4 +-
8354 drivers/edac/edac_pci_sysfs.c | 22 +-
8355 drivers/edac/mce_amd.h | 2 +-
8356 drivers/firewire/core-card.c | 6 +-
8357 drivers/firewire/core-device.c | 2 +-
8358 drivers/firewire/core-transaction.c | 1 +
8359 drivers/firewire/core.h | 1 +
8360 drivers/firmware/dmi-id.c | 2 +-
8361 drivers/firmware/dmi_scan.c | 12 +-
8362 drivers/firmware/efi/cper.c | 8 +-
8363 drivers/firmware/efi/efi.c | 12 +-
8364 drivers/firmware/efi/efivars.c | 2 +-
8365 drivers/firmware/efi/runtime-map.c | 2 +-
8366 drivers/firmware/google/gsmi.c | 2 +-
8367 drivers/firmware/google/memconsole.c | 7 +-
8368 drivers/firmware/memmap.c | 2 +-
8369 drivers/firmware/psci.c | 2 +-
8370 drivers/gpio/gpio-davinci.c | 6 +-
8371 drivers/gpio/gpio-em.c | 2 +-
8372 drivers/gpio/gpio-ich.c | 2 +-
8373 drivers/gpio/gpio-omap.c | 4 +-
8374 drivers/gpio/gpio-rcar.c | 2 +-
8375 drivers/gpio/gpio-vr41xx.c | 2 +-
8376 drivers/gpio/gpiolib.c | 12 +-
8377 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
8378 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
8379 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
8380 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
8381 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
8382 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
8383 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
8384 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
8385 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
8386 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
8387 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
8388 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
8389 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
8390 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
8391 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
8392 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
8393 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
8394 drivers/gpu/drm/armada/armada_drv.c | 3 +-
8395 drivers/gpu/drm/drm_crtc.c | 2 +-
8396 drivers/gpu/drm/drm_drv.c | 2 +-
8397 drivers/gpu/drm/drm_fops.c | 12 +-
8398 drivers/gpu/drm/drm_global.c | 14 +-
8399 drivers/gpu/drm/drm_info.c | 13 +-
8400 drivers/gpu/drm/drm_ioc32.c | 13 +-
8401 drivers/gpu/drm/drm_ioctl.c | 2 +-
8402 drivers/gpu/drm/drm_pci.c | 9 +-
8403 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
8404 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
8405 drivers/gpu/drm/gma500/psb_drv.c | 1 -
8406 drivers/gpu/drm/i810/i810_dma.c | 2 +-
8407 drivers/gpu/drm/i810/i810_drv.c | 6 +-
8408 drivers/gpu/drm/i810/i810_drv.h | 6 +-
8409 drivers/gpu/drm/i915/i915_dma.c | 4 +-
8410 drivers/gpu/drm/i915/i915_drv.c | 7 +-
8411 drivers/gpu/drm/i915/i915_drv.h | 2 +-
8412 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
8413 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
8414 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
8415 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
8416 drivers/gpu/drm/i915/i915_irq.c | 88 +-
8417 drivers/gpu/drm/i915/intel_display.c | 26 +-
8418 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
8419 drivers/gpu/drm/mga/mga_drv.c | 5 +-
8420 drivers/gpu/drm/mga/mga_drv.h | 6 +-
8421 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
8422 drivers/gpu/drm/mga/mga_irq.c | 8 +-
8423 drivers/gpu/drm/mga/mga_state.c | 2 +-
8424 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
8425 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
8426 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
8427 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
8428 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
8429 drivers/gpu/drm/omapdrm/Makefile | 2 +-
8430 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
8431 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
8432 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
8433 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
8434 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
8435 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
8436 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
8437 drivers/gpu/drm/r128/r128_cce.c | 2 +-
8438 drivers/gpu/drm/r128/r128_drv.c | 4 +-
8439 drivers/gpu/drm/r128/r128_drv.h | 6 +-
8440 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
8441 drivers/gpu/drm/r128/r128_irq.c | 4 +-
8442 drivers/gpu/drm/r128/r128_state.c | 6 +-
8443 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
8444 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
8445 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
8446 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
8447 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
8448 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
8449 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
8450 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
8451 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
8452 drivers/gpu/drm/savage/savage_bci.c | 2 +-
8453 drivers/gpu/drm/savage/savage_drv.c | 5 +-
8454 drivers/gpu/drm/savage/savage_drv.h | 2 +-
8455 drivers/gpu/drm/sis/sis_drv.c | 5 +-
8456 drivers/gpu/drm/sis/sis_drv.h | 2 +-
8457 drivers/gpu/drm/sis/sis_mm.c | 2 +-
8458 drivers/gpu/drm/tegra/dc.c | 2 +-
8459 drivers/gpu/drm/tegra/dsi.c | 2 +-
8460 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8461 drivers/gpu/drm/tegra/sor.c | 7 +-
8462 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8463 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8464 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8465 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8466 drivers/gpu/drm/udl/udl_fb.c | 1 -
8467 drivers/gpu/drm/via/via_dma.c | 2 +-
8468 drivers/gpu/drm/via/via_drv.c | 5 +-
8469 drivers/gpu/drm/via/via_drv.h | 6 +-
8470 drivers/gpu/drm/via/via_irq.c | 18 +-
8471 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8472 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8473 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8474 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8475 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8476 drivers/hid/hid-core.c | 4 +-
8477 drivers/hid/hid-sensor-custom.c | 2 +-
8478 drivers/hv/channel.c | 6 +-
8479 drivers/hv/hv.c | 4 +-
8480 drivers/hv/hv_balloon.c | 18 +-
8481 drivers/hv/hyperv_vmbus.h | 2 +-
8482 drivers/hwmon/acpi_power_meter.c | 6 +-
8483 drivers/hwmon/applesmc.c | 2 +-
8484 drivers/hwmon/asus_atk0110.c | 10 +-
8485 drivers/hwmon/coretemp.c | 2 +-
8486 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8487 drivers/hwmon/ibmaem.c | 2 +-
8488 drivers/hwmon/iio_hwmon.c | 2 +-
8489 drivers/hwmon/nct6683.c | 6 +-
8490 drivers/hwmon/nct6775.c | 6 +-
8491 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8492 drivers/hwmon/sht15.c | 12 +-
8493 drivers/hwmon/via-cputemp.c | 2 +-
8494 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8495 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
8496 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8497 drivers/i2c/i2c-dev.c | 2 +-
8498 drivers/ide/ide-cd.c | 2 +-
8499 drivers/ide/ide-disk.c | 2 +-
8500 drivers/iio/industrialio-core.c | 2 +-
8501 drivers/iio/magnetometer/ak8975.c | 2 +-
8502 drivers/infiniband/core/cm.c | 32 +-
8503 drivers/infiniband/core/fmr_pool.c | 20 +-
8504 drivers/infiniband/core/netlink.c | 5 +-
8505 drivers/infiniband/core/uverbs_cmd.c | 3 +
8506 drivers/infiniband/hw/cxgb4/device.c | 6 +-
8507 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
8508 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8509 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8510 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8511 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8512 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8513 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8514 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8515 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8516 drivers/infiniband/hw/nes/nes.c | 4 +-
8517 drivers/infiniband/hw/nes/nes.h | 40 +-
8518 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8519 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8520 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8521 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8522 drivers/infiniband/hw/qib/qib.h | 1 +
8523 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8524 drivers/input/evdev.c | 2 +-
8525 drivers/input/gameport/gameport.c | 4 +-
8526 drivers/input/input.c | 4 +-
8527 drivers/input/joystick/sidewinder.c | 1 +
8528 drivers/input/misc/ims-pcu.c | 4 +-
8529 drivers/input/mouse/psmouse.h | 2 +-
8530 drivers/input/mousedev.c | 2 +-
8531 drivers/input/serio/serio.c | 4 +-
8532 drivers/input/serio/serio_raw.c | 4 +-
8533 drivers/input/touchscreen/htcpen.c | 2 +-
8534 drivers/iommu/arm-smmu-v3.c | 2 +-
8535 drivers/iommu/arm-smmu.c | 43 +-
8536 drivers/iommu/io-pgtable-arm.c | 101 +-
8537 drivers/iommu/io-pgtable.c | 11 +-
8538 drivers/iommu/io-pgtable.h | 19 +-
8539 drivers/iommu/iommu.c | 2 +-
8540 drivers/iommu/ipmmu-vmsa.c | 13 +-
8541 drivers/iommu/irq_remapping.c | 2 +-
8542 drivers/irqchip/irq-gic.c | 2 +-
8543 drivers/irqchip/irq-i8259.c | 2 +-
8544 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8545 drivers/isdn/capi/capi.c | 10 +-
8546 drivers/isdn/gigaset/interface.c | 8 +-
8547 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8548 drivers/isdn/hardware/avm/b1.c | 4 +-
8549 drivers/isdn/i4l/isdn_common.c | 2 +
8550 drivers/isdn/i4l/isdn_tty.c | 22 +-
8551 drivers/isdn/icn/icn.c | 2 +-
8552 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8553 drivers/lguest/core.c | 10 +-
8554 drivers/lguest/page_tables.c | 2 +-
8555 drivers/lguest/x86/core.c | 12 +-
8556 drivers/lguest/x86/switcher_32.S | 27 +-
8557 drivers/md/bcache/alloc.c | 2 +-
8558 drivers/md/bcache/bcache.h | 10 +-
8559 drivers/md/bcache/btree.c | 2 +-
8560 drivers/md/bcache/closure.h | 2 +-
8561 drivers/md/bcache/io.c | 10 +-
8562 drivers/md/bcache/journal.c | 2 +-
8563 drivers/md/bcache/stats.c | 26 +-
8564 drivers/md/bcache/stats.h | 16 +-
8565 drivers/md/bcache/super.c | 2 +-
8566 drivers/md/bcache/sysfs.c | 20 +-
8567 drivers/md/bitmap.c | 2 +-
8568 drivers/md/dm-cache-target.c | 98 +-
8569 drivers/md/dm-ioctl.c | 2 +-
8570 drivers/md/dm-raid.c | 2 +-
8571 drivers/md/dm-raid1.c | 18 +-
8572 drivers/md/dm-stats.c | 6 +-
8573 drivers/md/dm-stripe.c | 10 +-
8574 drivers/md/dm-table.c | 2 +-
8575 drivers/md/dm-thin-metadata.c | 4 +-
8576 drivers/md/dm.c | 28 +-
8577 drivers/md/md.c | 37 +-
8578 drivers/md/md.h | 8 +-
8579 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8580 drivers/md/persistent-data/dm-space-map.h | 1 +
8581 drivers/md/raid1.c | 8 +-
8582 drivers/md/raid10.c | 20 +-
8583 drivers/md/raid5.c | 26 +-
8584 drivers/media/dvb-core/dvbdev.c | 2 +-
8585 drivers/media/dvb-frontends/af9033.h | 2 +-
8586 drivers/media/dvb-frontends/dib3000.h | 2 +-
8587 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8588 drivers/media/dvb-frontends/dib8000.h | 2 +-
8589 drivers/media/pci/cx88/cx88-video.c | 6 +-
8590 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8591 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8592 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8593 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8594 drivers/media/pci/tw68/tw68-core.c | 2 +-
8595 drivers/media/pci/zoran/zoran.h | 1 -
8596 drivers/media/pci/zoran/zoran_driver.c | 3 -
8597 drivers/media/platform/omap/omap_vout.c | 11 +-
8598 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8599 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8600 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8601 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8602 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8603 drivers/media/radio/radio-cadet.c | 2 +
8604 drivers/media/radio/radio-maxiradio.c | 2 +-
8605 drivers/media/radio/radio-shark.c | 2 +-
8606 drivers/media/radio/radio-shark2.c | 2 +-
8607 drivers/media/radio/radio-si476x.c | 2 +-
8608 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8609 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8610 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8611 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8612 drivers/memory/omap-gpmc.c | 21 +-
8613 drivers/message/fusion/mptsas.c | 34 +-
8614 drivers/mfd/ab8500-debugfs.c | 2 +-
8615 drivers/mfd/kempld-core.c | 2 +-
8616 drivers/mfd/max8925-i2c.c | 2 +-
8617 drivers/mfd/tps65910.c | 2 +-
8618 drivers/mfd/twl4030-irq.c | 9 +-
8619 drivers/misc/c2port/core.c | 4 +-
8620 drivers/misc/kgdbts.c | 4 +-
8621 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8622 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8623 drivers/misc/mic/scif/scif_api.c | 10 +-
8624 drivers/misc/mic/scif/scif_rb.c | 8 +-
8625 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8626 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8627 drivers/misc/sgi-gru/grutables.h | 158 +-
8628 drivers/misc/sgi-xp/xp.h | 2 +-
8629 drivers/misc/sgi-xp/xpc.h | 3 +-
8630 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8631 drivers/mmc/host/dw_mmc.h | 2 +-
8632 drivers/mmc/host/mmci.c | 4 +-
8633 drivers/mmc/host/omap_hsmmc.c | 4 +-
8634 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8635 drivers/mmc/host/sdhci-s3c.c | 8 +-
8636 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8637 drivers/mtd/nand/denali.c | 1 +
8638 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8639 drivers/mtd/nftlmount.c | 1 +
8640 drivers/mtd/sm_ftl.c | 2 +-
8641 drivers/net/bonding/bond_netlink.c | 2 +-
8642 drivers/net/caif/caif_hsi.c | 2 +-
8643 drivers/net/can/Kconfig | 2 +-
8644 drivers/net/can/dev.c | 2 +-
8645 drivers/net/can/vcan.c | 2 +-
8646 drivers/net/dummy.c | 2 +-
8647 drivers/net/ethernet/8390/ax88796.c | 4 +-
8648 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8649 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8650 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8651 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8652 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8653 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8654 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8655 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8656 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8657 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8658 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8659 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8660 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8661 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8662 drivers/net/ethernet/broadcom/tg3.h | 1 +
8663 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8664 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8665 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8666 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8667 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8668 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8669 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8670 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8671 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8672 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8673 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8674 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8675 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
8676 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8677 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8678 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8679 drivers/net/ethernet/realtek/r8169.c | 8 +-
8680 drivers/net/ethernet/sfc/ptp.c | 2 +-
8681 drivers/net/ethernet/sfc/selftest.c | 20 +-
8682 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8683 drivers/net/ethernet/via/via-rhine.c | 2 +-
8684 drivers/net/geneve.c | 2 +-
8685 drivers/net/hyperv/hyperv_net.h | 2 +-
8686 drivers/net/hyperv/rndis_filter.c | 7 +-
8687 drivers/net/ifb.c | 2 +-
8688 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8689 drivers/net/irda/vlsi_ir.c | 18 +-
8690 drivers/net/irda/vlsi_ir.h | 14 +-
8691 drivers/net/macvlan.c | 20 +-
8692 drivers/net/macvtap.c | 10 +-
8693 drivers/net/nlmon.c | 2 +-
8694 drivers/net/phy/phy_device.c | 6 +-
8695 drivers/net/ppp/ppp_generic.c | 4 +-
8696 drivers/net/slip/slhc.c | 2 +-
8697 drivers/net/team/team.c | 4 +-
8698 drivers/net/tun.c | 7 +-
8699 drivers/net/usb/hso.c | 23 +-
8700 drivers/net/usb/r8152.c | 2 +-
8701 drivers/net/usb/sierra_net.c | 4 +-
8702 drivers/net/virtio_net.c | 2 +-
8703 drivers/net/vrf.c | 2 +-
8704 drivers/net/vxlan.c | 4 +-
8705 drivers/net/wimax/i2400m/rx.c | 2 +-
8706 drivers/net/wireless/airo.c | 2 +-
8707 drivers/net/wireless/at76c50x-usb.c | 2 +-
8708 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8709 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8710 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8711 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8712 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8713 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8714 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
8715 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
8716 drivers/net/wireless/ath/carl9170/main.c | 10 +-
8717 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
8718 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8719 drivers/net/wireless/b43/phy_lp.c | 2 +-
8720 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8721 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8722 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
8723 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
8724 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8725 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8726 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8727 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8728 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8729 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8730 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8731 drivers/of/fdt.c | 4 +-
8732 drivers/oprofile/buffer_sync.c | 8 +-
8733 drivers/oprofile/event_buffer.c | 2 +-
8734 drivers/oprofile/oprof.c | 2 +-
8735 drivers/oprofile/oprofile_stats.c | 10 +-
8736 drivers/oprofile/oprofile_stats.h | 10 +-
8737 drivers/oprofile/oprofilefs.c | 6 +-
8738 drivers/oprofile/timer_int.c | 2 +-
8739 drivers/parport/procfs.c | 4 +-
8740 drivers/pci/host/pci-host-generic.c | 2 +-
8741 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8742 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8743 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8744 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8745 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8746 drivers/pci/hotplug/pciehp_core.c | 2 +-
8747 drivers/pci/msi.c | 22 +-
8748 drivers/pci/pci-sysfs.c | 6 +-
8749 drivers/pci/pci.h | 2 +-
8750 drivers/pci/pcie/aspm.c | 6 +-
8751 drivers/pci/pcie/portdrv_pci.c | 2 +-
8752 drivers/pci/probe.c | 2 +-
8753 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8754 drivers/pinctrl/pinctrl-at91.c | 5 +-
8755 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8756 drivers/platform/x86/alienware-wmi.c | 4 +-
8757 drivers/platform/x86/compal-laptop.c | 2 +-
8758 drivers/platform/x86/hdaps.c | 2 +-
8759 drivers/platform/x86/ibm_rtl.c | 2 +-
8760 drivers/platform/x86/intel_oaktrail.c | 2 +-
8761 drivers/platform/x86/msi-laptop.c | 16 +-
8762 drivers/platform/x86/msi-wmi.c | 2 +-
8763 drivers/platform/x86/samsung-laptop.c | 2 +-
8764 drivers/platform/x86/samsung-q10.c | 2 +-
8765 drivers/platform/x86/sony-laptop.c | 14 +-
8766 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8767 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8768 drivers/pnp/pnpbios/core.c | 2 +-
8769 drivers/power/pda_power.c | 7 +-
8770 drivers/power/power_supply.h | 4 +-
8771 drivers/power/power_supply_core.c | 7 +-
8772 drivers/power/power_supply_sysfs.c | 6 +-
8773 drivers/power/reset/at91-reset.c | 5 +-
8774 drivers/powercap/powercap_sys.c | 136 +-
8775 drivers/ptp/ptp_private.h | 2 +-
8776 drivers/ptp/ptp_sysfs.c | 2 +-
8777 drivers/regulator/core.c | 4 +-
8778 drivers/regulator/max8660.c | 6 +-
8779 drivers/regulator/max8973-regulator.c | 16 +-
8780 drivers/regulator/mc13892-regulator.c | 8 +-
8781 drivers/rtc/rtc-armada38x.c | 7 +-
8782 drivers/rtc/rtc-cmos.c | 4 +-
8783 drivers/rtc/rtc-ds1307.c | 2 +-
8784 drivers/rtc/rtc-m48t59.c | 4 +-
8785 drivers/rtc/rtc-rv8803.c | 15 +-
8786 drivers/rtc/rtc-test.c | 6 +-
8787 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8788 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8789 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8790 drivers/scsi/hosts.c | 4 +-
8791 drivers/scsi/hpsa.c | 38 +-
8792 drivers/scsi/hpsa.h | 2 +-
8793 drivers/scsi/hptiop.c | 2 -
8794 drivers/scsi/hptiop.h | 1 -
8795 drivers/scsi/ipr.c | 6 +-
8796 drivers/scsi/ipr.h | 2 +-
8797 drivers/scsi/libfc/fc_exch.c | 50 +-
8798 drivers/scsi/libsas/sas_ata.c | 2 +-
8799 drivers/scsi/lpfc/lpfc.h | 8 +-
8800 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8801 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8802 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8803 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8804 drivers/scsi/pmcraid.c | 20 +-
8805 drivers/scsi/pmcraid.h | 8 +-
8806 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8807 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8808 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8809 drivers/scsi/qla2xxx/qla_target.c | 10 +-
8810 drivers/scsi/qla2xxx/qla_target.h | 2 +-
8811 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8812 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8813 drivers/scsi/scsi.c | 2 +-
8814 drivers/scsi/scsi_lib.c | 8 +-
8815 drivers/scsi/scsi_sysfs.c | 2 +-
8816 drivers/scsi/scsi_transport_fc.c | 8 +-
8817 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8818 drivers/scsi/scsi_transport_srp.c | 6 +-
8819 drivers/scsi/sd.c | 6 +-
8820 drivers/scsi/sg.c | 2 +-
8821 drivers/scsi/sr.c | 21 +-
8822 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8823 drivers/spi/spi.c | 2 +-
8824 drivers/staging/android/timed_output.c | 6 +-
8825 drivers/staging/comedi/comedi_fops.c | 8 +-
8826 drivers/staging/fbtft/fbtft-core.c | 2 +-
8827 drivers/staging/fbtft/fbtft.h | 2 +-
8828 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8829 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8830 drivers/staging/iio/adc/ad7280a.c | 4 +-
8831 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8832 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8833 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8834 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8835 drivers/staging/lustre/lustre/include/obd.h | 2 +-
8836 drivers/staging/octeon/ethernet-rx.c | 20 +-
8837 drivers/staging/octeon/ethernet.c | 8 +-
8838 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
8839 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
8840 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
8841 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
8842 drivers/staging/sm750fb/sm750.c | 14 +-
8843 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
8844 drivers/target/sbp/sbp_target.c | 4 +-
8845 drivers/thermal/cpu_cooling.c | 9 +-
8846 drivers/thermal/devfreq_cooling.c | 19 +-
8847 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8848 drivers/thermal/of-thermal.c | 17 +-
8849 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
8850 drivers/tty/cyclades.c | 6 +-
8851 drivers/tty/hvc/hvc_console.c | 14 +-
8852 drivers/tty/hvc/hvcs.c | 21 +-
8853 drivers/tty/hvc/hvsi.c | 22 +-
8854 drivers/tty/hvc/hvsi_lib.c | 4 +-
8855 drivers/tty/ipwireless/tty.c | 27 +-
8856 drivers/tty/moxa.c | 2 +-
8857 drivers/tty/n_gsm.c | 4 +-
8858 drivers/tty/n_tty.c | 19 +-
8859 drivers/tty/pty.c | 4 +-
8860 drivers/tty/rocket.c | 6 +-
8861 drivers/tty/serial/8250/8250_core.c | 10 +-
8862 drivers/tty/serial/ifx6x60.c | 2 +-
8863 drivers/tty/serial/ioc4_serial.c | 6 +-
8864 drivers/tty/serial/kgdb_nmi.c | 4 +-
8865 drivers/tty/serial/kgdboc.c | 32 +-
8866 drivers/tty/serial/msm_serial.c | 4 +-
8867 drivers/tty/serial/samsung.c | 9 +-
8868 drivers/tty/serial/serial_core.c | 8 +-
8869 drivers/tty/synclink.c | 34 +-
8870 drivers/tty/synclink_gt.c | 28 +-
8871 drivers/tty/synclinkmp.c | 34 +-
8872 drivers/tty/tty_io.c | 2 +-
8873 drivers/tty/tty_ldisc.c | 8 +-
8874 drivers/tty/tty_port.c | 22 +-
8875 drivers/uio/uio.c | 13 +-
8876 drivers/usb/atm/cxacru.c | 2 +-
8877 drivers/usb/atm/usbatm.c | 24 +-
8878 drivers/usb/class/cdc-acm.h | 2 +-
8879 drivers/usb/core/devices.c | 6 +-
8880 drivers/usb/core/devio.c | 12 +-
8881 drivers/usb/core/hcd.c | 4 +-
8882 drivers/usb/core/sysfs.c | 2 +-
8883 drivers/usb/core/usb.c | 2 +-
8884 drivers/usb/early/ehci-dbgp.c | 16 +-
8885 drivers/usb/gadget/function/u_serial.c | 22 +-
8886 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
8887 drivers/usb/host/ehci-hcd.c | 2 +-
8888 drivers/usb/host/ehci-hub.c | 4 +-
8889 drivers/usb/host/ehci-q.c | 4 +-
8890 drivers/usb/host/fotg210-hcd.c | 2 +-
8891 drivers/usb/host/hwa-hc.c | 2 +-
8892 drivers/usb/host/ohci-hcd.c | 2 +-
8893 drivers/usb/host/r8a66597.h | 2 +-
8894 drivers/usb/host/uhci-hcd.c | 2 +-
8895 drivers/usb/host/xhci-pci.c | 2 +-
8896 drivers/usb/host/xhci.c | 2 +-
8897 drivers/usb/misc/appledisplay.c | 4 +-
8898 drivers/usb/serial/console.c | 8 +-
8899 drivers/usb/storage/transport.c | 2 +-
8900 drivers/usb/storage/usb.c | 2 +-
8901 drivers/usb/storage/usb.h | 2 +-
8902 drivers/usb/usbip/vhci.h | 2 +-
8903 drivers/usb/usbip/vhci_hcd.c | 6 +-
8904 drivers/usb/usbip/vhci_rx.c | 2 +-
8905 drivers/usb/wusbcore/wa-hc.h | 4 +-
8906 drivers/usb/wusbcore/wa-xfer.c | 2 +-
8907 drivers/vhost/vringh.c | 20 +-
8908 drivers/video/backlight/kb3886_bl.c | 2 +-
8909 drivers/video/console/fbcon.c | 2 +-
8910 drivers/video/fbdev/aty/aty128fb.c | 2 +-
8911 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
8912 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
8913 drivers/video/fbdev/core/fb_defio.c | 6 +-
8914 drivers/video/fbdev/core/fbmem.c | 12 +-
8915 drivers/video/fbdev/hyperv_fb.c | 4 +-
8916 drivers/video/fbdev/i810/i810_accel.c | 1 +
8917 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
8918 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
8919 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
8920 drivers/video/fbdev/omap2/dss/display.c | 8 +-
8921 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
8922 drivers/video/fbdev/smscufx.c | 4 +-
8923 drivers/video/fbdev/udlfb.c | 36 +-
8924 drivers/video/fbdev/uvesafb.c | 52 +-
8925 drivers/video/fbdev/vesafb.c | 58 +-
8926 drivers/video/fbdev/via/via_clock.h | 2 +-
8927 drivers/xen/events/events_base.c | 6 +-
8928 fs/Kconfig.binfmt | 2 +-
8929 fs/afs/inode.c | 4 +-
8930 fs/aio.c | 2 +-
8931 fs/autofs4/waitq.c | 2 +-
8932 fs/befs/endian.h | 6 +-
8933 fs/binfmt_aout.c | 23 +-
8934 fs/binfmt_elf.c | 670 +-
8935 fs/binfmt_elf_fdpic.c | 4 +-
8936 fs/block_dev.c | 2 +-
8937 fs/btrfs/ctree.c | 11 +-
8938 fs/btrfs/ctree.h | 4 +-
8939 fs/btrfs/delayed-inode.c | 9 +-
8940 fs/btrfs/delayed-inode.h | 6 +-
8941 fs/btrfs/delayed-ref.c | 4 +-
8942 fs/btrfs/disk-io.c | 4 +-
8943 fs/btrfs/extent_map.c | 8 +-
8944 fs/btrfs/file.c | 4 +-
8945 fs/btrfs/inode.c | 14 +-
8946 fs/btrfs/raid56.c | 32 +-
8947 fs/btrfs/super.c | 2 +-
8948 fs/btrfs/sysfs.c | 2 +-
8949 fs/btrfs/tests/btrfs-tests.c | 2 +-
8950 fs/btrfs/tests/free-space-tests.c | 8 +-
8951 fs/btrfs/transaction.c | 2 +-
8952 fs/btrfs/tree-log.c | 8 +-
8953 fs/btrfs/tree-log.h | 2 +-
8954 fs/btrfs/volumes.c | 14 +-
8955 fs/btrfs/volumes.h | 22 +-
8956 fs/buffer.c | 2 +-
8957 fs/cachefiles/bind.c | 6 +-
8958 fs/cachefiles/daemon.c | 8 +-
8959 fs/cachefiles/internal.h | 12 +-
8960 fs/cachefiles/namei.c | 2 +-
8961 fs/cachefiles/proc.c | 12 +-
8962 fs/ceph/dir.c | 12 +-
8963 fs/ceph/super.c | 4 +-
8964 fs/cifs/cifs_debug.c | 12 +-
8965 fs/cifs/cifsfs.c | 8 +-
8966 fs/cifs/cifsglob.h | 54 +-
8967 fs/cifs/file.c | 12 +-
8968 fs/cifs/misc.c | 4 +-
8969 fs/cifs/smb1ops.c | 80 +-
8970 fs/cifs/smb2ops.c | 84 +-
8971 fs/cifs/smb2pdu.c | 3 +-
8972 fs/coda/cache.c | 10 +-
8973 fs/compat.c | 7 +-
8974 fs/compat_binfmt_elf.c | 2 +
8975 fs/compat_ioctl.c | 12 +-
8976 fs/configfs/dir.c | 10 +-
8977 fs/coredump.c | 18 +-
8978 fs/dcache.c | 64 +-
8979 fs/ecryptfs/inode.c | 2 +-
8980 fs/ecryptfs/miscdev.c | 2 +-
8981 fs/exec.c | 362 +-
8982 fs/ext2/xattr.c | 5 +-
8983 fs/ext4/ext4.h | 20 +-
8984 fs/ext4/mballoc.c | 44 +-
8985 fs/ext4/resize.c | 16 +-
8986 fs/ext4/super.c | 2 +-
8987 fs/ext4/sysfs.c | 2 +-
8988 fs/ext4/xattr.c | 5 +-
8989 fs/fhandle.c | 5 +-
8990 fs/file.c | 18 +-
8991 fs/fs-writeback.c | 11 +-
8992 fs/fs_struct.c | 8 +-
8993 fs/fscache/cookie.c | 40 +-
8994 fs/fscache/internal.h | 202 +-
8995 fs/fscache/object.c | 26 +-
8996 fs/fscache/operation.c | 38 +-
8997 fs/fscache/page.c | 110 +-
8998 fs/fscache/stats.c | 348 +-
8999 fs/fuse/cuse.c | 10 +-
9000 fs/fuse/dev.c | 4 +-
9001 fs/gfs2/file.c | 2 +-
9002 fs/gfs2/glock.c | 22 +-
9003 fs/gfs2/glops.c | 4 +-
9004 fs/gfs2/quota.c | 6 +-
9005 fs/hugetlbfs/inode.c | 13 +-
9006 fs/inode.c | 4 +-
9007 fs/jbd2/commit.c | 2 +-
9008 fs/jbd2/transaction.c | 4 +-
9009 fs/jffs2/erase.c | 3 +-
9010 fs/jffs2/wbuf.c | 3 +-
9011 fs/jfs/super.c | 2 +-
9012 fs/kernfs/dir.c | 2 +-
9013 fs/kernfs/file.c | 20 +-
9014 fs/libfs.c | 10 +-
9015 fs/lockd/clntproc.c | 4 +-
9016 fs/namei.c | 16 +-
9017 fs/namespace.c | 16 +-
9018 fs/nfs/callback_xdr.c | 2 +-
9019 fs/nfs/inode.c | 6 +-
9020 fs/nfsd/nfs4proc.c | 2 +-
9021 fs/nfsd/nfs4xdr.c | 2 +-
9022 fs/nfsd/nfscache.c | 11 +-
9023 fs/nfsd/vfs.c | 6 +-
9024 fs/nls/nls_base.c | 26 +-
9025 fs/nls/nls_euc-jp.c | 6 +-
9026 fs/nls/nls_koi8-ru.c | 6 +-
9027 fs/notify/fanotify/fanotify_user.c | 4 +-
9028 fs/notify/notification.c | 4 +-
9029 fs/ntfs/dir.c | 2 +-
9030 fs/ntfs/super.c | 6 +-
9031 fs/ocfs2/dlm/dlmcommon.h | 4 +-
9032 fs/ocfs2/dlm/dlmdebug.c | 10 +-
9033 fs/ocfs2/dlm/dlmdomain.c | 4 +-
9034 fs/ocfs2/dlm/dlmmaster.c | 4 +-
9035 fs/ocfs2/localalloc.c | 2 +-
9036 fs/ocfs2/ocfs2.h | 10 +-
9037 fs/ocfs2/suballoc.c | 12 +-
9038 fs/ocfs2/super.c | 20 +-
9039 fs/overlayfs/copy_up.c | 2 +-
9040 fs/pipe.c | 72 +-
9041 fs/posix_acl.c | 4 +-
9042 fs/proc/array.c | 20 +
9043 fs/proc/base.c | 4 +-
9044 fs/proc/kcore.c | 34 +-
9045 fs/proc/meminfo.c | 2 +-
9046 fs/proc/nommu.c | 2 +-
9047 fs/proc/proc_sysctl.c | 26 +-
9048 fs/proc/task_mmu.c | 42 +-
9049 fs/proc/task_nommu.c | 4 +-
9050 fs/proc/vmcore.c | 16 +-
9051 fs/qnx6/qnx6.h | 4 +-
9052 fs/quota/netlink.c | 4 +-
9053 fs/read_write.c | 2 +-
9054 fs/readdir.c | 3 +-
9055 fs/reiserfs/do_balan.c | 2 +-
9056 fs/reiserfs/procfs.c | 2 +-
9057 fs/reiserfs/reiserfs.h | 4 +-
9058 fs/seq_file.c | 4 +-
9059 fs/splice.c | 43 +-
9060 fs/squashfs/xattr.c | 12 +-
9061 fs/super.c | 3 +-
9062 fs/sysv/sysv.h | 2 +-
9063 fs/tracefs/inode.c | 8 +-
9064 fs/udf/misc.c | 2 +-
9065 fs/ufs/swab.h | 4 +-
9066 fs/userfaultfd.c | 2 +-
9067 fs/xattr.c | 21 +
9068 fs/xfs/libxfs/xfs_bmap.c | 2 +-
9069 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
9070 fs/xfs/xfs_dir2_readdir.c | 7 +-
9071 fs/xfs/xfs_ioctl.c | 2 +-
9072 fs/xfs/xfs_linux.h | 4 +-
9073 include/acpi/ghes.h | 2 +-
9074 include/asm-generic/4level-fixup.h | 2 +
9075 include/asm-generic/atomic-long.h | 176 +-
9076 include/asm-generic/atomic64.h | 12 +
9077 include/asm-generic/bitops/__fls.h | 2 +-
9078 include/asm-generic/bitops/fls.h | 2 +-
9079 include/asm-generic/bitops/fls64.h | 4 +-
9080 include/asm-generic/bug.h | 6 +-
9081 include/asm-generic/cache.h | 4 +-
9082 include/asm-generic/emergency-restart.h | 2 +-
9083 include/asm-generic/kmap_types.h | 4 +-
9084 include/asm-generic/local.h | 13 +
9085 include/asm-generic/pgtable-nopmd.h | 18 +-
9086 include/asm-generic/pgtable-nopud.h | 15 +-
9087 include/asm-generic/pgtable.h | 16 +
9088 include/asm-generic/sections.h | 1 +
9089 include/asm-generic/uaccess.h | 16 +
9090 include/asm-generic/vmlinux.lds.h | 15 +-
9091 include/crypto/algapi.h | 2 +-
9092 include/drm/drmP.h | 19 +-
9093 include/drm/drm_crtc_helper.h | 2 +-
9094 include/drm/drm_mm.h | 2 +-
9095 include/drm/i915_pciids.h | 2 +-
9096 include/drm/intel-gtt.h | 4 +-
9097 include/drm/ttm/ttm_memory.h | 2 +-
9098 include/drm/ttm/ttm_page_alloc.h | 1 +
9099 include/keys/asymmetric-subtype.h | 2 +-
9100 include/linux/atmdev.h | 4 +-
9101 include/linux/atomic.h | 2 +-
9102 include/linux/audit.h | 2 +-
9103 include/linux/average.h | 2 +-
9104 include/linux/binfmts.h | 3 +-
9105 include/linux/bitmap.h | 2 +-
9106 include/linux/bitops.h | 8 +-
9107 include/linux/blk-cgroup.h | 24 +-
9108 include/linux/blkdev.h | 2 +-
9109 include/linux/blktrace_api.h | 2 +-
9110 include/linux/cache.h | 8 +
9111 include/linux/cdrom.h | 1 -
9112 include/linux/cleancache.h | 2 +-
9113 include/linux/clk-provider.h | 1 +
9114 include/linux/compat.h | 6 +-
9115 include/linux/compiler-gcc.h | 28 +-
9116 include/linux/compiler.h | 193 +-
9117 include/linux/configfs.h | 2 +-
9118 include/linux/cpufreq.h | 3 +-
9119 include/linux/cpuidle.h | 5 +-
9120 include/linux/cpumask.h | 14 +-
9121 include/linux/crypto.h | 4 +-
9122 include/linux/ctype.h | 2 +-
9123 include/linux/dcache.h | 4 +-
9124 include/linux/decompress/mm.h | 2 +-
9125 include/linux/devfreq.h | 2 +-
9126 include/linux/device.h | 7 +-
9127 include/linux/dma-mapping.h | 2 +-
9128 include/linux/efi.h | 1 +
9129 include/linux/elf.h | 2 +
9130 include/linux/err.h | 4 +-
9131 include/linux/extcon.h | 2 +-
9132 include/linux/fb.h | 3 +-
9133 include/linux/fdtable.h | 2 +-
9134 include/linux/fs.h | 5 +-
9135 include/linux/fs_struct.h | 2 +-
9136 include/linux/fscache-cache.h | 2 +-
9137 include/linux/fscache.h | 2 +-
9138 include/linux/fsnotify.h | 2 +-
9139 include/linux/genhd.h | 4 +-
9140 include/linux/genl_magic_func.h | 2 +-
9141 include/linux/gfp.h | 12 +-
9142 include/linux/highmem.h | 12 +
9143 include/linux/hwmon-sysfs.h | 6 +-
9144 include/linux/i2c.h | 1 +
9145 include/linux/if_pppox.h | 2 +-
9146 include/linux/init.h | 12 +-
9147 include/linux/init_task.h | 7 +
9148 include/linux/interrupt.h | 6 +-
9149 include/linux/iommu.h | 2 +-
9150 include/linux/ioport.h | 2 +-
9151 include/linux/ipc.h | 2 +-
9152 include/linux/irq.h | 5 +-
9153 include/linux/irqdesc.h | 2 +-
9154 include/linux/irqdomain.h | 3 +
9155 include/linux/jbd2.h | 2 +-
9156 include/linux/jiffies.h | 16 +-
9157 include/linux/key-type.h | 2 +-
9158 include/linux/kgdb.h | 6 +-
9159 include/linux/kmemleak.h | 4 +-
9160 include/linux/kobject.h | 3 +-
9161 include/linux/kobject_ns.h | 2 +-
9162 include/linux/kref.h | 2 +-
9163 include/linux/libata.h | 2 +-
9164 include/linux/linkage.h | 1 +
9165 include/linux/list.h | 15 +
9166 include/linux/lockref.h | 26 +-
9167 include/linux/math64.h | 10 +-
9168 include/linux/mempolicy.h | 7 +
9169 include/linux/mm.h | 102 +-
9170 include/linux/mm_types.h | 20 +
9171 include/linux/mmiotrace.h | 4 +-
9172 include/linux/mmzone.h | 2 +-
9173 include/linux/mod_devicetable.h | 4 +-
9174 include/linux/module.h | 69 +-
9175 include/linux/moduleloader.h | 16 +
9176 include/linux/moduleparam.h | 4 +-
9177 include/linux/net.h | 2 +-
9178 include/linux/netdevice.h | 7 +-
9179 include/linux/netfilter.h | 2 +-
9180 include/linux/netfilter/nfnetlink.h | 2 +-
9181 include/linux/netlink.h | 12 +-
9182 include/linux/nls.h | 4 +-
9183 include/linux/notifier.h | 3 +-
9184 include/linux/oprofile.h | 4 +-
9185 include/linux/padata.h | 2 +-
9186 include/linux/pci_hotplug.h | 3 +-
9187 include/linux/percpu.h | 2 +-
9188 include/linux/perf_event.h | 12 +-
9189 include/linux/pipe_fs_i.h | 8 +-
9190 include/linux/pm.h | 1 +
9191 include/linux/pm_domain.h | 2 +-
9192 include/linux/pm_runtime.h | 2 +-
9193 include/linux/pnp.h | 2 +-
9194 include/linux/poison.h | 4 +-
9195 include/linux/power/smartreflex.h | 2 +-
9196 include/linux/ppp-comp.h | 2 +-
9197 include/linux/preempt.h | 21 +
9198 include/linux/proc_ns.h | 2 +-
9199 include/linux/psci.h | 2 +-
9200 include/linux/quota.h | 2 +-
9201 include/linux/random.h | 19 +-
9202 include/linux/rculist.h | 16 +
9203 include/linux/rcupdate.h | 8 +
9204 include/linux/reboot.h | 14 +-
9205 include/linux/regset.h | 3 +-
9206 include/linux/relay.h | 2 +-
9207 include/linux/rio.h | 2 +-
9208 include/linux/rmap.h | 4 +-
9209 include/linux/sched.h | 76 +-
9210 include/linux/sched/sysctl.h | 1 +
9211 include/linux/scif.h | 2 +-
9212 include/linux/semaphore.h | 2 +-
9213 include/linux/seq_file.h | 1 +
9214 include/linux/seqlock.h | 10 +
9215 include/linux/signal.h | 2 +-
9216 include/linux/skbuff.h | 12 +-
9217 include/linux/slab.h | 47 +-
9218 include/linux/slab_def.h | 14 +-
9219 include/linux/slub_def.h | 2 +-
9220 include/linux/smp.h | 2 +
9221 include/linux/sock_diag.h | 2 +-
9222 include/linux/sonet.h | 2 +-
9223 include/linux/spinlock.h | 17 +-
9224 include/linux/srcu.h | 5 +-
9225 include/linux/sunrpc/addr.h | 8 +-
9226 include/linux/sunrpc/clnt.h | 2 +-
9227 include/linux/sunrpc/svc.h | 2 +-
9228 include/linux/sunrpc/svc_rdma.h | 18 +-
9229 include/linux/sunrpc/svcauth.h | 2 +-
9230 include/linux/swapops.h | 10 +-
9231 include/linux/swiotlb.h | 3 +-
9232 include/linux/syscalls.h | 23 +-
9233 include/linux/syscore_ops.h | 2 +-
9234 include/linux/sysctl.h | 3 +-
9235 include/linux/sysfs.h | 9 +-
9236 include/linux/sysrq.h | 3 +-
9237 include/linux/tcp.h | 14 +-
9238 include/linux/thread_info.h | 7 +
9239 include/linux/tty.h | 4 +-
9240 include/linux/tty_driver.h | 2 +-
9241 include/linux/tty_ldisc.h | 2 +-
9242 include/linux/types.h | 16 +
9243 include/linux/uaccess.h | 2 +-
9244 include/linux/uio_driver.h | 2 +-
9245 include/linux/unaligned/access_ok.h | 24 +-
9246 include/linux/usb.h | 12 +-
9247 include/linux/usb/hcd.h | 1 +
9248 include/linux/usb/renesas_usbhs.h | 2 +-
9249 include/linux/vermagic.h | 21 +-
9250 include/linux/vga_switcheroo.h | 8 +-
9251 include/linux/vmalloc.h | 7 +-
9252 include/linux/vmstat.h | 24 +-
9253 include/linux/writeback.h | 3 +-
9254 include/linux/xattr.h | 5 +-
9255 include/linux/zlib.h | 3 +-
9256 include/media/v4l2-dev.h | 2 +-
9257 include/media/v4l2-device.h | 2 +-
9258 include/net/9p/transport.h | 2 +-
9259 include/net/bluetooth/l2cap.h | 2 +-
9260 include/net/bonding.h | 2 +-
9261 include/net/caif/cfctrl.h | 6 +-
9262 include/net/cfg802154.h | 2 +-
9263 include/net/flow.h | 2 +-
9264 include/net/genetlink.h | 2 +-
9265 include/net/gro_cells.h | 2 +-
9266 include/net/inet_connection_sock.h | 2 +-
9267 include/net/inet_sock.h | 2 +-
9268 include/net/inetpeer.h | 2 +-
9269 include/net/ip_fib.h | 2 +-
9270 include/net/ip_vs.h | 8 +-
9271 include/net/ipv6.h | 2 +-
9272 include/net/irda/ircomm_tty.h | 1 +
9273 include/net/iucv/af_iucv.h | 2 +-
9274 include/net/llc_c_ac.h | 2 +-
9275 include/net/llc_c_ev.h | 4 +-
9276 include/net/llc_c_st.h | 2 +-
9277 include/net/llc_s_ac.h | 2 +-
9278 include/net/llc_s_st.h | 2 +-
9279 include/net/mac80211.h | 6 +-
9280 include/net/neighbour.h | 4 +-
9281 include/net/net_namespace.h | 18 +-
9282 include/net/netlink.h | 2 +-
9283 include/net/netns/conntrack.h | 6 +-
9284 include/net/netns/ipv4.h | 4 +-
9285 include/net/netns/ipv6.h | 4 +-
9286 include/net/netns/xfrm.h | 2 +-
9287 include/net/ping.h | 2 +-
9288 include/net/protocol.h | 4 +-
9289 include/net/rtnetlink.h | 2 +-
9290 include/net/sctp/checksum.h | 4 +-
9291 include/net/sctp/sm.h | 4 +-
9292 include/net/sctp/structs.h | 2 +-
9293 include/net/snmp.h | 10 +-
9294 include/net/sock.h | 12 +-
9295 include/net/tcp.h | 8 +-
9296 include/net/xfrm.h | 13 +-
9297 include/rdma/iw_cm.h | 2 +-
9298 include/scsi/libfc.h | 3 +-
9299 include/scsi/scsi_device.h | 6 +-
9300 include/scsi/scsi_driver.h | 2 +-
9301 include/scsi/scsi_transport_fc.h | 3 +-
9302 include/scsi/sg.h | 2 +-
9303 include/sound/compress_driver.h | 2 +-
9304 include/sound/soc.h | 4 +-
9305 include/trace/events/irq.h | 4 +-
9306 include/uapi/linux/a.out.h | 8 +
9307 include/uapi/linux/bcache.h | 5 +-
9308 include/uapi/linux/byteorder/little_endian.h | 28 +-
9309 include/uapi/linux/connector.h | 2 +-
9310 include/uapi/linux/elf.h | 28 +
9311 include/uapi/linux/screen_info.h | 2 +-
9312 include/uapi/linux/swab.h | 6 +-
9313 include/uapi/linux/xattr.h | 4 +
9314 include/video/udlfb.h | 8 +-
9315 include/video/uvesafb.h | 1 +
9316 init/Kconfig | 2 +-
9317 init/Makefile | 3 +
9318 init/do_mounts.c | 14 +-
9319 init/do_mounts.h | 8 +-
9320 init/do_mounts_initrd.c | 30 +-
9321 init/do_mounts_md.c | 6 +-
9322 init/init_task.c | 4 +
9323 init/initramfs.c | 38 +-
9324 init/main.c | 30 +-
9325 ipc/compat.c | 4 +-
9326 ipc/ipc_sysctl.c | 14 +-
9327 ipc/mq_sysctl.c | 4 +-
9328 ipc/sem.c | 4 +-
9329 ipc/shm.c | 6 +
9330 kernel/audit.c | 8 +-
9331 kernel/auditsc.c | 4 +-
9332 kernel/bpf/core.c | 7 +-
9333 kernel/capability.c | 3 +
9334 kernel/compat.c | 38 +-
9335 kernel/debug/debug_core.c | 16 +-
9336 kernel/debug/kdb/kdb_main.c | 4 +-
9337 kernel/events/core.c | 30 +-
9338 kernel/events/internal.h | 10 +-
9339 kernel/events/uprobes.c | 2 +-
9340 kernel/exit.c | 27 +-
9341 kernel/fork.c | 175 +-
9342 kernel/futex.c | 11 +-
9343 kernel/futex_compat.c | 2 +-
9344 kernel/gcov/base.c | 7 +-
9345 kernel/irq/manage.c | 2 +-
9346 kernel/irq/msi.c | 19 +-
9347 kernel/irq/spurious.c | 2 +-
9348 kernel/jump_label.c | 5 +
9349 kernel/kallsyms.c | 37 +-
9350 kernel/kexec.c | 3 +-
9351 kernel/kmod.c | 8 +-
9352 kernel/kprobes.c | 4 +-
9353 kernel/ksysfs.c | 2 +-
9354 kernel/locking/lockdep.c | 7 +-
9355 kernel/locking/mutex-debug.c | 12 +-
9356 kernel/locking/mutex-debug.h | 4 +-
9357 kernel/locking/mutex.c | 6 +-
9358 kernel/module.c | 422 +-
9359 kernel/notifier.c | 17 +-
9360 kernel/padata.c | 4 +-
9361 kernel/panic.c | 5 +-
9362 kernel/pid.c | 2 +-
9363 kernel/pid_namespace.c | 2 +-
9364 kernel/power/process.c | 12 +-
9365 kernel/profile.c | 14 +-
9366 kernel/ptrace.c | 8 +-
9367 kernel/rcu/rcutorture.c | 60 +-
9368 kernel/rcu/tiny.c | 4 +-
9369 kernel/rcu/tree.c | 42 +-
9370 kernel/rcu/tree.h | 16 +-
9371 kernel/rcu/tree_plugin.h | 18 +-
9372 kernel/rcu/tree_trace.c | 14 +-
9373 kernel/resource.c | 4 +-
9374 kernel/sched/auto_group.c | 4 +-
9375 kernel/sched/core.c | 45 +-
9376 kernel/sched/fair.c | 2 +-
9377 kernel/sched/sched.h | 2 +-
9378 kernel/signal.c | 24 +-
9379 kernel/smpboot.c | 4 +-
9380 kernel/softirq.c | 12 +-
9381 kernel/sys.c | 10 +-
9382 kernel/sysctl.c | 34 +-
9383 kernel/time/alarmtimer.c | 2 +-
9384 kernel/time/posix-cpu-timers.c | 4 +-
9385 kernel/time/posix-timers.c | 24 +-
9386 kernel/time/timer.c | 2 +-
9387 kernel/time/timer_stats.c | 10 +-
9388 kernel/trace/blktrace.c | 6 +-
9389 kernel/trace/ftrace.c | 15 +-
9390 kernel/trace/ring_buffer.c | 96 +-
9391 kernel/trace/trace.c | 2 +-
9392 kernel/trace/trace.h | 2 +-
9393 kernel/trace/trace_clock.c | 4 +-
9394 kernel/trace/trace_events.c | 1 -
9395 kernel/trace/trace_functions_graph.c | 4 +-
9396 kernel/trace/trace_mmiotrace.c | 8 +-
9397 kernel/trace/trace_output.c | 10 +-
9398 kernel/trace/trace_seq.c | 2 +-
9399 kernel/trace/trace_stack.c | 2 +-
9400 kernel/user.c | 2 +-
9401 kernel/user_namespace.c | 2 +-
9402 kernel/utsname_sysctl.c | 2 +-
9403 kernel/watchdog.c | 2 +-
9404 kernel/workqueue.c | 8 +-
9405 lib/Kconfig.debug | 8 +-
9406 lib/Makefile | 2 +-
9407 lib/bitmap.c | 8 +-
9408 lib/bug.c | 2 +
9409 lib/debugobjects.c | 2 +-
9410 lib/decompress_bunzip2.c | 3 +-
9411 lib/decompress_unlzma.c | 4 +-
9412 lib/div64.c | 4 +-
9413 lib/dma-debug.c | 4 +-
9414 lib/inflate.c | 2 +-
9415 lib/ioremap.c | 4 +-
9416 lib/kobject.c | 4 +-
9417 lib/list_debug.c | 126 +-
9418 lib/lockref.c | 44 +-
9419 lib/percpu-refcount.c | 2 +-
9420 lib/radix-tree.c | 2 +-
9421 lib/random32.c | 2 +-
9422 lib/rhashtable.c | 4 +-
9423 lib/show_mem.c | 2 +-
9424 lib/strncpy_from_user.c | 2 +-
9425 lib/strnlen_user.c | 2 +-
9426 lib/swiotlb.c | 2 +-
9427 lib/usercopy.c | 6 +
9428 lib/vsprintf.c | 12 +-
9429 mm/Kconfig | 6 +-
9430 mm/backing-dev.c | 4 +-
9431 mm/debug.c | 3 +
9432 mm/filemap.c | 2 +-
9433 mm/gup.c | 13 +-
9434 mm/highmem.c | 6 +-
9435 mm/hugetlb.c | 70 +-
9436 mm/internal.h | 1 +
9437 mm/maccess.c | 12 +-
9438 mm/madvise.c | 37 +
9439 mm/memory-failure.c | 6 +-
9440 mm/memory.c | 424 +-
9441 mm/mempolicy.c | 25 +
9442 mm/mlock.c | 18 +-
9443 mm/mm_init.c | 2 +-
9444 mm/mmap.c | 582 +-
9445 mm/mprotect.c | 137 +-
9446 mm/mremap.c | 39 +-
9447 mm/nommu.c | 21 +-
9448 mm/page-writeback.c | 2 +-
9449 mm/page_alloc.c | 50 +-
9450 mm/percpu.c | 2 +-
9451 mm/process_vm_access.c | 14 +-
9452 mm/rmap.c | 45 +-
9453 mm/shmem.c | 19 +-
9454 mm/slab.c | 111 +-
9455 mm/slab.h | 22 +-
9456 mm/slab_common.c | 86 +-
9457 mm/slob.c | 218 +-
9458 mm/slub.c | 109 +-
9459 mm/sparse-vmemmap.c | 4 +-
9460 mm/sparse.c | 2 +-
9461 mm/swap.c | 2 +
9462 mm/swapfile.c | 12 +-
9463 mm/util.c | 6 +
9464 mm/vmalloc.c | 114 +-
9465 mm/vmstat.c | 12 +-
9466 net/8021q/vlan.c | 5 +-
9467 net/8021q/vlan_netlink.c | 2 +-
9468 net/9p/mod.c | 4 +-
9469 net/9p/trans_fd.c | 2 +-
9470 net/atm/atm_misc.c | 8 +-
9471 net/atm/lec.h | 2 +-
9472 net/atm/proc.c | 6 +-
9473 net/atm/resources.c | 4 +-
9474 net/ax25/sysctl_net_ax25.c | 2 +-
9475 net/batman-adv/bat_iv_ogm.c | 8 +-
9476 net/batman-adv/fragmentation.c | 2 +-
9477 net/batman-adv/routing.c | 4 +-
9478 net/batman-adv/soft-interface.c | 10 +-
9479 net/batman-adv/translation-table.c | 14 +-
9480 net/batman-adv/types.h | 8 +-
9481 net/bluetooth/hci_sock.c | 2 +-
9482 net/bluetooth/l2cap_core.c | 6 +-
9483 net/bluetooth/l2cap_sock.c | 12 +-
9484 net/bluetooth/rfcomm/sock.c | 4 +-
9485 net/bluetooth/rfcomm/tty.c | 4 +-
9486 net/bridge/br_netlink.c | 2 +-
9487 net/bridge/netfilter/ebtables.c | 6 +-
9488 net/caif/cfctrl.c | 11 +-
9489 net/caif/chnl_net.c | 2 +-
9490 net/can/af_can.c | 2 +-
9491 net/can/gw.c | 6 +-
9492 net/ceph/messenger.c | 4 +-
9493 net/compat.c | 26 +-
9494 net/core/datagram.c | 2 +-
9495 net/core/dev.c | 16 +-
9496 net/core/filter.c | 2 +-
9497 net/core/flow.c | 6 +-
9498 net/core/neighbour.c | 18 +-
9499 net/core/net-sysfs.c | 2 +-
9500 net/core/net_namespace.c | 8 +-
9501 net/core/netpoll.c | 4 +-
9502 net/core/rtnetlink.c | 17 +-
9503 net/core/scm.c | 12 +-
9504 net/core/skbuff.c | 11 +-
9505 net/core/sock.c | 28 +-
9506 net/core/sock_diag.c | 15 +-
9507 net/core/sysctl_net_core.c | 22 +-
9508 net/decnet/af_decnet.c | 1 +
9509 net/decnet/sysctl_net_decnet.c | 4 +-
9510 net/dsa/dsa.c | 2 +-
9511 net/hsr/hsr_netlink.c | 2 +-
9512 net/ieee802154/6lowpan/core.c | 2 +-
9513 net/ieee802154/6lowpan/reassembly.c | 14 +-
9514 net/ipv4/af_inet.c | 2 +-
9515 net/ipv4/arp.c | 2 +-
9516 net/ipv4/devinet.c | 18 +-
9517 net/ipv4/fib_frontend.c | 6 +-
9518 net/ipv4/fib_semantics.c | 2 +-
9519 net/ipv4/inet_connection_sock.c | 4 +-
9520 net/ipv4/inet_diag.c | 4 +-
9521 net/ipv4/inet_timewait_sock.c | 2 +-
9522 net/ipv4/inetpeer.c | 2 +-
9523 net/ipv4/ip_fragment.c | 15 +-
9524 net/ipv4/ip_gre.c | 6 +-
9525 net/ipv4/ip_sockglue.c | 2 +-
9526 net/ipv4/ip_vti.c | 4 +-
9527 net/ipv4/ipconfig.c | 6 +-
9528 net/ipv4/ipip.c | 4 +-
9529 net/ipv4/netfilter/arp_tables.c | 12 +-
9530 net/ipv4/netfilter/ip_tables.c | 12 +-
9531 net/ipv4/ping.c | 14 +-
9532 net/ipv4/proc.c | 8 +-
9533 net/ipv4/raw.c | 14 +-
9534 net/ipv4/route.c | 32 +-
9535 net/ipv4/sysctl_net_ipv4.c | 22 +-
9536 net/ipv4/tcp_input.c | 6 +-
9537 net/ipv4/tcp_probe.c | 2 +-
9538 net/ipv4/udp.c | 10 +-
9539 net/ipv4/xfrm4_mode_transport.c | 2 +-
9540 net/ipv4/xfrm4_policy.c | 17 +-
9541 net/ipv4/xfrm4_state.c | 4 +-
9542 net/ipv6/addrconf.c | 22 +-
9543 net/ipv6/af_inet6.c | 2 +-
9544 net/ipv6/datagram.c | 2 +-
9545 net/ipv6/icmp.c | 2 +-
9546 net/ipv6/ip6_fib.c | 4 +-
9547 net/ipv6/ip6_gre.c | 10 +-
9548 net/ipv6/ip6_tunnel.c | 4 +-
9549 net/ipv6/ip6_vti.c | 4 +-
9550 net/ipv6/ipv6_sockglue.c | 2 +-
9551 net/ipv6/ndisc.c | 2 +-
9552 net/ipv6/netfilter/ip6_tables.c | 12 +-
9553 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9554 net/ipv6/ping.c | 33 +-
9555 net/ipv6/proc.c | 10 +-
9556 net/ipv6/raw.c | 17 +-
9557 net/ipv6/reassembly.c | 13 +-
9558 net/ipv6/route.c | 2 +-
9559 net/ipv6/sit.c | 4 +-
9560 net/ipv6/sysctl_net_ipv6.c | 2 +-
9561 net/ipv6/udp.c | 6 +-
9562 net/ipv6/xfrm6_policy.c | 17 +-
9563 net/irda/ircomm/ircomm_tty.c | 18 +-
9564 net/iucv/af_iucv.c | 4 +-
9565 net/iucv/iucv.c | 2 +-
9566 net/key/af_key.c | 4 +-
9567 net/l2tp/l2tp_eth.c | 38 +-
9568 net/l2tp/l2tp_ip.c | 2 +-
9569 net/l2tp/l2tp_ip6.c | 2 +-
9570 net/mac80211/cfg.c | 10 +-
9571 net/mac80211/debugfs_key.c | 4 +-
9572 net/mac80211/ieee80211_i.h | 3 +-
9573 net/mac80211/iface.c | 20 +-
9574 net/mac80211/key.c | 4 +-
9575 net/mac80211/main.c | 2 +-
9576 net/mac80211/pm.c | 4 +-
9577 net/mac80211/rate.c | 2 +-
9578 net/mac80211/sta_info.c | 2 +-
9579 net/mac80211/tx.c | 2 +-
9580 net/mac80211/util.c | 8 +-
9581 net/mac80211/wpa.c | 10 +-
9582 net/mac802154/iface.c | 4 +-
9583 net/mpls/af_mpls.c | 6 +-
9584 net/netfilter/ipset/ip_set_core.c | 4 +-
9585 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9586 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9587 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9588 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9589 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9590 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9591 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9592 net/netfilter/nf_conntrack_acct.c | 2 +-
9593 net/netfilter/nf_conntrack_ecache.c | 2 +-
9594 net/netfilter/nf_conntrack_helper.c | 2 +-
9595 net/netfilter/nf_conntrack_netlink.c | 22 +-
9596 net/netfilter/nf_conntrack_proto.c | 2 +-
9597 net/netfilter/nf_conntrack_standalone.c | 2 +-
9598 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9599 net/netfilter/nf_log.c | 10 +-
9600 net/netfilter/nf_sockopt.c | 4 +-
9601 net/netfilter/nf_tables_api.c | 13 +-
9602 net/netfilter/nfnetlink_acct.c | 7 +-
9603 net/netfilter/nfnetlink_cthelper.c | 2 +-
9604 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9605 net/netfilter/nfnetlink_log.c | 4 +-
9606 net/netfilter/nft_compat.c | 9 +-
9607 net/netfilter/xt_statistic.c | 8 +-
9608 net/netlink/af_netlink.c | 14 +-
9609 net/netlink/diag.c | 2 +-
9610 net/netlink/genetlink.c | 14 +-
9611 net/openvswitch/vport-internal_dev.c | 2 +-
9612 net/packet/af_packet.c | 26 +-
9613 net/packet/diag.c | 2 +-
9614 net/packet/internal.h | 6 +-
9615 net/phonet/pep.c | 6 +-
9616 net/phonet/socket.c | 2 +-
9617 net/phonet/sysctl.c | 2 +-
9618 net/rds/cong.c | 6 +-
9619 net/rds/ib.h | 2 +-
9620 net/rds/ib_cm.c | 2 +-
9621 net/rds/ib_recv.c | 4 +-
9622 net/rds/iw.h | 2 +-
9623 net/rds/iw_cm.c | 2 +-
9624 net/rds/iw_recv.c | 4 +-
9625 net/rds/rds.h | 2 +-
9626 net/rds/tcp.c | 2 +-
9627 net/rds/tcp_send.c | 2 +-
9628 net/rxrpc/af_rxrpc.c | 2 +-
9629 net/rxrpc/ar-ack.c | 14 +-
9630 net/rxrpc/ar-call.c | 2 +-
9631 net/rxrpc/ar-connection.c | 2 +-
9632 net/rxrpc/ar-connevent.c | 2 +-
9633 net/rxrpc/ar-input.c | 4 +-
9634 net/rxrpc/ar-internal.h | 8 +-
9635 net/rxrpc/ar-local.c | 2 +-
9636 net/rxrpc/ar-output.c | 4 +-
9637 net/rxrpc/ar-peer.c | 2 +-
9638 net/rxrpc/ar-proc.c | 4 +-
9639 net/rxrpc/ar-transport.c | 2 +-
9640 net/rxrpc/rxkad.c | 4 +-
9641 net/sched/sch_generic.c | 4 +-
9642 net/sctp/ipv6.c | 6 +-
9643 net/sctp/protocol.c | 10 +-
9644 net/sctp/sm_sideeffect.c | 2 +-
9645 net/sctp/socket.c | 21 +-
9646 net/sctp/sysctl.c | 10 +-
9647 net/socket.c | 18 +-
9648 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9649 net/sunrpc/clnt.c | 4 +-
9650 net/sunrpc/sched.c | 4 +-
9651 net/sunrpc/svc.c | 4 +-
9652 net/sunrpc/svcauth_unix.c | 2 +-
9653 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
9654 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9655 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9656 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9657 net/tipc/netlink_compat.c | 12 +-
9658 net/tipc/subscr.c | 2 +-
9659 net/unix/diag.c | 2 +-
9660 net/unix/sysctl_net_unix.c | 2 +-
9661 net/wireless/wext-core.c | 19 +-
9662 net/xfrm/xfrm_policy.c | 16 +-
9663 net/xfrm/xfrm_state.c | 33 +-
9664 net/xfrm/xfrm_sysctl.c | 2 +-
9665 net/xfrm/xfrm_user.c | 2 +-
9666 scripts/Kbuild.include | 2 +-
9667 scripts/Makefile.build | 2 +-
9668 scripts/Makefile.clean | 3 +-
9669 scripts/Makefile.host | 69 +-
9670 scripts/basic/fixdep.c | 12 +-
9671 scripts/dtc/checks.c | 14 +-
9672 scripts/dtc/data.c | 6 +-
9673 scripts/dtc/flattree.c | 8 +-
9674 scripts/dtc/livetree.c | 4 +-
9675 scripts/gcc-plugin.sh | 51 +
9676 scripts/headers_install.sh | 1 +
9677 scripts/kallsyms.c | 4 +-
9678 scripts/kconfig/lkc.h | 5 +-
9679 scripts/kconfig/menu.c | 2 +-
9680 scripts/kconfig/symbol.c | 6 +-
9681 scripts/link-vmlinux.sh | 2 +-
9682 scripts/mod/file2alias.c | 14 +-
9683 scripts/mod/modpost.c | 25 +-
9684 scripts/mod/modpost.h | 6 +-
9685 scripts/mod/sumversion.c | 2 +-
9686 scripts/module-common.lds | 4 +
9687 scripts/package/builddeb | 1 +
9688 scripts/pnmtologo.c | 6 +-
9689 scripts/sortextable.h | 6 +-
9690 scripts/tags.sh | 2 +-
9691 security/Kconfig | 691 +-
9692 security/apparmor/include/policy.h | 2 +-
9693 security/apparmor/policy.c | 4 +-
9694 security/integrity/ima/ima.h | 4 +-
9695 security/integrity/ima/ima_api.c | 2 +-
9696 security/integrity/ima/ima_fs.c | 4 +-
9697 security/integrity/ima/ima_queue.c | 2 +-
9698 security/keys/internal.h | 8 +-
9699 security/keys/key.c | 18 +-
9700 security/keys/keyring.c | 4 -
9701 security/selinux/avc.c | 6 +-
9702 security/selinux/include/xfrm.h | 2 +-
9703 security/yama/yama_lsm.c | 2 +-
9704 sound/aoa/codecs/onyx.c | 7 +-
9705 sound/aoa/codecs/onyx.h | 1 +
9706 sound/core/oss/pcm_oss.c | 18 +-
9707 sound/core/pcm_compat.c | 2 +-
9708 sound/core/pcm_native.c | 4 +-
9709 sound/core/seq/seq_clientmgr.c | 10 +-
9710 sound/core/seq/seq_compat.c | 2 +-
9711 sound/core/seq/seq_fifo.c | 6 +-
9712 sound/core/seq/seq_fifo.h | 2 +-
9713 sound/core/seq/seq_memory.c | 6 +-
9714 sound/core/sound.c | 2 +-
9715 sound/drivers/mts64.c | 14 +-
9716 sound/drivers/opl4/opl4_lib.c | 2 +-
9717 sound/drivers/portman2x4.c | 3 +-
9718 sound/firewire/amdtp-am824.c | 2 +-
9719 sound/firewire/amdtp-stream.c | 4 +-
9720 sound/firewire/amdtp-stream.h | 2 +-
9721 sound/firewire/digi00x/amdtp-dot.c | 2 +-
9722 sound/firewire/isight.c | 10 +-
9723 sound/firewire/scs1x.c | 8 +-
9724 sound/oss/sb_audio.c | 2 +-
9725 sound/oss/swarm_cs4297a.c | 6 +-
9726 sound/pci/hda/hda_codec.c | 2 +-
9727 sound/pci/ymfpci/ymfpci.h | 2 +-
9728 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9729 sound/soc/codecs/sti-sas.c | 10 +-
9730 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
9731 sound/soc/soc-ac97.c | 6 +-
9732 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9733 tools/gcc/Makefile | 42 +
9734 tools/gcc/checker_plugin.c | 549 +
9735 tools/gcc/colorize_plugin.c | 215 +
9736 tools/gcc/constify_plugin.c | 571 +
9737 tools/gcc/gcc-common.h | 819 +
9738 tools/gcc/initify_plugin.c | 591 +
9739 tools/gcc/kallocstat_plugin.c | 188 +
9740 tools/gcc/kernexec_plugin.c | 549 +
9741 tools/gcc/latent_entropy_plugin.c | 474 +
9742 tools/gcc/randomize_layout_seed.h | 1 +
9743 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9744 tools/gcc/size_overflow_plugin/Makefile | 28 +
9745 .../disable_size_overflow_hash.data | 12434 ++
9746 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
9747 .../generate_size_overflow_hash.sh | 103 +
9748 .../insert_size_overflow_asm.c | 416 +
9749 .../size_overflow_plugin/intentional_overflow.c | 1116 +
9750 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9751 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
9752 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9753 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
9754 .../size_overflow_hash_aux.data | 92 +
9755 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
9756 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9757 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9758 .../size_overflow_plugin_hash.c | 352 +
9759 .../size_overflow_plugin/size_overflow_transform.c | 745 +
9760 .../size_overflow_transform_core.c | 1015 +
9761 tools/gcc/stackleak_plugin.c | 444 +
9762 tools/gcc/structleak_plugin.c | 290 +
9763 tools/include/linux/compiler.h | 8 +
9764 tools/perf/util/include/asm/alternative-asm.h | 3 +
9765 tools/virtio/linux/uaccess.h | 2 +-
9766 virt/kvm/kvm_main.c | 42 +-
9767 2088 files changed, 221599 insertions(+), 9618 deletions(-)
9768 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
9769 Author: Matthew Wilcox <willy@linux.intel.com>
9770 Date: Tue Feb 2 16:57:52 2016 -0800
9771
9772 radix-tree: fix race in gang lookup
9773
9774 If the indirect_ptr bit is set on a slot, that indicates we need to redo
9775 the lookup. Introduce a new function radix_tree_iter_retry() which
9776 forces the loop to retry the lookup by setting 'slot' to NULL and
9777 turning the iterator back to point at the problematic entry.
9778
9779 This is a pretty rare problem to hit at the moment; the lookup has to
9780 race with a grow of the radix tree from a height of 0. The consequences
9781 of hitting this race are that gang lookup could return a pointer to a
9782 radix_tree_node instead of a pointer to whatever the user had inserted
9783 in the tree.
9784
9785 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
9786 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
9787 Cc: Hugh Dickins <hughd@google.com>
9788 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9789 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
9790 Cc: <stable@vger.kernel.org>
9791 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9792 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9793
9794 include/linux/radix-tree.h | 16 ++++++++++++++++
9795 lib/radix-tree.c | 12 ++++++++++--
9796 2 files changed, 26 insertions(+), 2 deletions(-)
9797
9798 commit bf628043b4589c910919a0f221ae7f42aa8cea93
9799 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9800 Date: Wed Feb 3 02:11:03 2016 +0100
9801
9802 unix: correctly track in-flight fds in sending process user_struct
9803
9804 The commit referenced in the Fixes tag incorrectly accounted the number
9805 of in-flight fds over a unix domain socket to the original opener
9806 of the file-descriptor. This allows another process to arbitrary
9807 deplete the original file-openers resource limit for the maximum of
9808 open files. Instead the sending processes and its struct cred should
9809 be credited.
9810
9811 To do so, we add a reference counted struct user_struct pointer to the
9812 scm_fp_list and use it to account for the number of inflight unix fds.
9813
9814 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
9815 Reported-by: David Herrmann <dh.herrmann@gmail.com>
9816 Cc: David Herrmann <dh.herrmann@gmail.com>
9817 Cc: Willy Tarreau <w@1wt.eu>
9818 Cc: Linus Torvalds <torvalds@linux-foundation.org>
9819 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
9820 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9821 Signed-off-by: David S. Miller <davem@davemloft.net>
9822
9823 include/net/af_unix.h | 4 ++--
9824 include/net/scm.h | 1 +
9825 net/core/scm.c | 7 +++++++
9826 net/unix/af_unix.c | 4 ++--
9827 net/unix/garbage.c | 8 ++++----
9828 5 files changed, 16 insertions(+), 8 deletions(-)
9829
9830 commit e830db443ff78d70b7b63536e688d73907face0c
9831 Author: Mike Kravetz <mike.kravetz@oracle.com>
9832 Date: Fri Jan 15 16:57:37 2016 -0800
9833
9834 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
9835
9836 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
9837 argument end is of type pgoff_t. It was being converted to a vaddr
9838 offset and passed to unmap_hugepage_range. However, end was also being
9839 used as an argument to the vma_interval_tree_foreach controlling loop.
9840 In addition, the conversion of end to vaddr offset was incorrect.
9841
9842 hugetlb_vmtruncate_list is called as part of a file truncate or
9843 fallocate hole punch operation.
9844
9845 When truncating a hugetlbfs file, this bug could prevent some pages from
9846 being unmapped. This is possible if there are multiple vmas mapping the
9847 file, and there is a sufficiently sized hole between the mappings. The
9848 size of the hole between two vmas (A,B) must be such that the starting
9849 virtual address of B is greater than (ending virtual address of A <<
9850 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
9851 pages are not properly unmapped during truncate, the following BUG is
9852 hit:
9853
9854 kernel BUG at fs/hugetlbfs/inode.c:428!
9855
9856 In the fallocate hole punch case, this bug could prevent pages from
9857 being unmapped as in the truncate case. However, for hole punch the
9858 result is that unmapped pages will not be removed during the operation.
9859 For hole punch, it is also possible that more pages than desired will be
9860 unmapped. This unnecessary unmapping will cause page faults to
9861 reestablish the mappings on subsequent page access.
9862
9863 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
9864 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
9865 Cc: Hugh Dickins <hughd@google.com>
9866 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
9867 Cc: Davidlohr Bueso <dave@stgolabs.net>
9868 Cc: Dave Hansen <dave.hansen@linux.intel.com>
9869 Cc: <stable@vger.kernel.org> [4.3]
9870 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9871 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9872
9873 fs/hugetlbfs/inode.c | 19 +++++++++++--------
9874 1 files changed, 11 insertions(+), 8 deletions(-)
9875
9876 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
9877 Author: Takashi Iwai <tiwai@suse.de>
9878 Date: Thu Feb 4 17:06:13 2016 +0100
9879
9880 ALSA: timer: Fix leftover link at closing
9881
9882 In ALSA timer core, the active timer instance is managed in
9883 active_list linked list. Each element is added / removed dynamically
9884 at timer start, stop and in timer interrupt. The problem is that
9885 snd_timer_interrupt() has a thinko and leaves the element in
9886 active_list when it's the last opened element. This eventually leads
9887 to list corruption or use-after-free error.
9888
9889 This hasn't been revealed because we used to delete the list forcibly
9890 in snd_timer_stop() in the past. However, the recent fix avoids the
9891 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
9892 corruption due to double start or stop]), and this leak hits reality.
9893
9894 This patch fixes the link management in snd_timer_interrupt(). Now it
9895 simply unlinks no matter which stream is.
9896
9897 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
9898 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9899 Cc: <stable@vger.kernel.org>
9900 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9901
9902 sound/core/timer.c | 4 ++--
9903 1 files changed, 2 insertions(+), 2 deletions(-)
9904
9905 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
9906 Author: Konstantin Khlebnikov <koct9i@gmail.com>
9907 Date: Fri Feb 5 15:37:01 2016 -0800
9908
9909 radix-tree: fix oops after radix_tree_iter_retry
9910
9911 Helper radix_tree_iter_retry() resets next_index to the current index.
9912 In following radix_tree_next_slot current chunk size becomes zero. This
9913 isn't checked and it tries to dereference null pointer in slot.
9914
9915 Tagged iterator is fine because retry happens only at slot 0 where tag
9916 bitmask in iter->tags is filled with single bit.
9917
9918 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
9919 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
9920 Cc: Matthew Wilcox <willy@linux.intel.com>
9921 Cc: Hugh Dickins <hughd@google.com>
9922 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9923 Cc: Jeremiah Mahler <jmmahler@gmail.com>
9924 Cc: <stable@vger.kernel.org>
9925 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9926 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9927
9928 include/linux/radix-tree.h | 6 +++---
9929 1 files changed, 3 insertions(+), 3 deletions(-)
9930
9931 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
9932 Merge: 438be0b 256aeaf
9933 Author: Brad Spengler <spender@grsecurity.net>
9934 Date: Sun Feb 7 08:29:33 2016 -0500
9935
9936 Merge branch 'pax-test' into grsec-test
9937
9938 commit 256aeaf87c22de8edf1f03682a572c590ae07771
9939 Author: Brad Spengler <spender@grsecurity.net>
9940 Date: Sun Feb 7 08:29:09 2016 -0500
9941
9942 Update to pax-linux-4.3.5-test28.patch:
9943 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
9944 - spender fixed UDEREF on arm
9945
9946 arch/arm/Kconfig | 1 +
9947 arch/arm/include/asm/domain.h | 21 ++++++++-
9948 arch/arm/include/asm/futex.h | 9 ----
9949 arch/arm/include/asm/thread_info.h | 3 +
9950 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9951 arch/arm/kernel/entry-armv.S | 2 +-
9952 arch/arm/kernel/process.c | 2 +-
9953 arch/arm/mm/alignment.c | 8 ----
9954 arch/x86/mm/numa.c | 2 +-
9955 security/Kconfig | 1 -
9956 10 files changed, 60 insertions(+), 70 deletions(-)
9957
9958 commit 438be0bd112bd17942b2628c53054dc1007558a1
9959 Author: Brad Spengler <spender@grsecurity.net>
9960 Date: Sat Feb 6 19:50:31 2016 -0500
9961
9962 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
9963 ARM systems reported on the forums
9964
9965 arch/arm/Kconfig | 1 +
9966 arch/arm/include/asm/domain.h | 21 ++++++++-
9967 arch/arm/include/asm/futex.h | 9 ----
9968 arch/arm/include/asm/thread_info.h | 3 +
9969 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9970 arch/arm/kernel/entry-armv.S | 2 +-
9971 arch/arm/kernel/process.c | 2 +-
9972 arch/arm/mm/alignment.c | 8 ----
9973 security/Kconfig | 1 -
9974 9 files changed, 59 insertions(+), 69 deletions(-)
9975
9976 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
9977 Author: Brad Spengler <spender@grsecurity.net>
9978 Date: Sat Feb 6 11:21:53 2016 -0500
9979
9980 Fix another compiler warning
9981
9982 net/ipv4/tcp_input.c | 2 ++
9983 1 files changed, 2 insertions(+), 0 deletions(-)
9984
9985 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
9986 Author: Brad Spengler <spender@grsecurity.net>
9987 Date: Sat Feb 6 11:16:12 2016 -0500
9988
9989 Fix two compiler warnings
9990
9991 kernel/pid.c | 5 ++---
9992 kernel/ptrace.c | 3 ++-
9993 2 files changed, 4 insertions(+), 4 deletions(-)
9994
9995 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
9996 Author: Brad Spengler <spender@grsecurity.net>
9997 Date: Wed Feb 3 21:22:40 2016 -0500
9998
9999 Apply fix for integer truncation in NUMA init code, reported by
10000 x14sg1 on the forums:
10001 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
10002
10003 arch/x86/mm/numa.c | 2 +-
10004 1 files changed, 1 insertions(+), 1 deletions(-)
10005
10006 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
10007 Merge: a781740 016d0d8
10008 Author: Brad Spengler <spender@grsecurity.net>
10009 Date: Wed Feb 3 21:20:58 2016 -0500
10010
10011 Merge branch 'pax-test' into grsec-test
10012
10013 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
10014 Author: Brad Spengler <spender@grsecurity.net>
10015 Date: Wed Feb 3 21:20:10 2016 -0500
10016
10017 Update to pax-linux-4.3.5-test27.patch:
10018 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
10019 - restored padding in fpregs_state for storing AVX-512 state in the future
10020 - constified netlink_dump_control
10021 - added const version of debug_gimple_stmt for gcc plugins, by Emese
10022 - Emese fixed a bug in initify that could have initified too much
10023 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
10024
10025 arch/x86/include/asm/fpu/types.h | 1 +
10026 arch/x86/include/asm/mmu_context.h | 2 +-
10027 block/blk-cgroup.c | 18 ++--
10028 block/cfq-iosched.c | 4 +-
10029 crypto/crypto_user.c | 8 ++-
10030 drivers/acpi/apei/ghes.c | 6 +-
10031 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
10032 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
10033 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
10034 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
10035 drivers/infiniband/core/netlink.c | 5 +-
10036 drivers/infiniband/hw/cxgb4/device.c | 6 +-
10037 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
10038 drivers/md/bcache/alloc.c | 2 +-
10039 drivers/md/bcache/bcache.h | 10 +-
10040 drivers/md/bcache/btree.c | 2 +-
10041 drivers/md/bcache/io.c | 10 +-
10042 drivers/md/bcache/journal.c | 2 +-
10043 drivers/md/bcache/stats.c | 26 +++---
10044 drivers/md/bcache/stats.h | 16 ++--
10045 drivers/md/bcache/super.c | 2 +-
10046 drivers/md/bcache/sysfs.c | 20 +++---
10047 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
10048 drivers/md/dm-raid.c | 2 +-
10049 drivers/md/md.c | 6 +-
10050 drivers/md/md.h | 2 +-
10051 drivers/md/raid1.c | 2 +-
10052 drivers/md/raid10.c | 2 +-
10053 drivers/md/raid5.c | 4 +-
10054 drivers/media/pci/zoran/zoran.h | 1 -
10055 drivers/media/pci/zoran/zoran_driver.c | 3 -
10056 drivers/net/ethernet/sfc/selftest.c | 20 +++---
10057 drivers/net/irda/vlsi_ir.c | 18 ++--
10058 drivers/net/irda/vlsi_ir.h | 14 ++--
10059 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
10060 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
10061 drivers/net/wireless/ath/carl9170/main.c | 10 +-
10062 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
10063 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
10064 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
10065 drivers/scsi/hptiop.c | 2 -
10066 drivers/scsi/hptiop.h | 1 -
10067 drivers/scsi/ipr.c | 6 +-
10068 drivers/scsi/ipr.h | 2 +-
10069 drivers/scsi/qla2xxx/qla_target.c | 10 +-
10070 drivers/scsi/qla2xxx/qla_target.h | 2 +-
10071 fs/btrfs/ctree.c | 2 +-
10072 fs/btrfs/ctree.h | 4 +-
10073 fs/btrfs/delayed-ref.c | 4 +-
10074 fs/btrfs/disk-io.c | 4 +-
10075 fs/btrfs/file.c | 4 +-
10076 fs/btrfs/raid56.c | 32 ++++----
10077 fs/btrfs/tests/btrfs-tests.c | 2 +-
10078 fs/btrfs/transaction.c | 2 +-
10079 fs/btrfs/tree-log.c | 8 +-
10080 fs/btrfs/volumes.c | 14 ++--
10081 fs/btrfs/volumes.h | 22 +++---
10082 fs/jbd2/commit.c | 2 +-
10083 fs/jbd2/transaction.c | 4 +-
10084 fs/ocfs2/dlm/dlmcommon.h | 4 +-
10085 fs/ocfs2/dlm/dlmdebug.c | 10 +-
10086 fs/ocfs2/dlm/dlmdomain.c | 4 +-
10087 fs/ocfs2/dlm/dlmmaster.c | 4 +-
10088 include/acpi/ghes.h | 2 +-
10089 include/linux/blk-cgroup.h | 24 +++---
10090 include/linux/jbd2.h | 2 +-
10091 include/linux/netlink.h | 12 ++--
10092 include/net/cfg802154.h | 2 +-
10093 include/net/mac80211.h | 2 +-
10094 include/net/neighbour.h | 2 +-
10095 kernel/rcu/tree_plugin.h | 4 +-
10096 net/batman-adv/routing.c | 4 +-
10097 net/batman-adv/soft-interface.c | 2 +-
10098 net/batman-adv/translation-table.c | 14 ++--
10099 net/batman-adv/types.h | 2 +-
10100 net/core/neighbour.c | 14 ++--
10101 net/core/rtnetlink.c | 2 +-
10102 net/ipv4/arp.c | 2 +-
10103 net/ipv4/inet_diag.c | 4 +-
10104 net/ipv4/xfrm4_state.c | 4 +-
10105 net/ipv6/ndisc.c | 2 +-
10106 net/mac80211/cfg.c | 2 +-
10107 net/mac80211/debugfs_key.c | 2 +-
10108 net/mac80211/key.c | 4 +-
10109 net/mac80211/tx.c | 2 +-
10110 net/mac80211/wpa.c | 10 +-
10111 net/mac802154/iface.c | 4 +-
10112 net/netfilter/ipset/ip_set_core.c | 2 +-
10113 net/netfilter/nf_conntrack_netlink.c | 22 +++---
10114 net/netfilter/nf_tables_api.c | 13 ++--
10115 net/netfilter/nfnetlink_acct.c | 7 +-
10116 net/netfilter/nfnetlink_cthelper.c | 2 +-
10117 net/netfilter/nfnetlink_cttimeout.c | 2 +-
10118 net/netlink/af_netlink.c | 10 ++-
10119 net/netlink/diag.c | 2 +-
10120 net/netlink/genetlink.c | 14 ++--
10121 net/packet/af_packet.c | 18 ++--
10122 net/packet/diag.c | 2 +-
10123 net/packet/internal.h | 6 +-
10124 net/unix/diag.c | 2 +-
10125 net/xfrm/xfrm_user.c | 2 +-
10126 security/apparmor/include/policy.h | 2 +-
10127 security/apparmor/policy.c | 4 +-
10128 sound/core/seq/seq_clientmgr.c | 2 +-
10129 sound/core/seq/seq_fifo.c | 6 +-
10130 sound/core/seq/seq_fifo.h | 2 +-
10131 tools/gcc/gcc-common.h | 24 ++++--
10132 tools/gcc/initify_plugin.c | 7 +-
10133 tools/lib/api/Makefile | 2 +-
10134 109 files changed, 399 insertions(+), 391 deletions(-)
10135
10136 commit a7817402ac837b1aee07fac42537a02097055098
10137 Author: Matt Fleming <matt@codeblueprint.co.uk>
10138 Date: Fri Jan 29 11:36:10 2016 +0000
10139
10140 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
10141
10142 There are a couple of nasty truncation bugs lurking in the pageattr
10143 code that can be triggered when mapping EFI regions, e.g. when we pass
10144 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
10145 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
10146
10147 Viorel-Cătălin managed to trigger this bug on his Dell machine that
10148 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
10149 When calling populate_pud() the end of the region gets calculated
10150 incorrectly in the following buggy expression,
10151
10152 end = start + (cpa->numpages << PAGE_SHIFT);
10153
10154 And only 188416 pages are mapped. Next, populate_pud() gets invoked
10155 for a second time because of the loop in __change_page_attr_set_clr(),
10156 only this time no pages get mapped because shifting the remaining
10157 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
10158 loop in __change_page_attr_set_clr() spins forever because we fail to
10159 map progress.
10160
10161 Hitting this bug depends very much on the virtual address we pick to
10162 map the large region at and how many pages we map on the initial run
10163 through the loop. This explains why this issue was only recently hit
10164 with the introduction of commit
10165
10166 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
10167 entries bottom-up at runtime, instead of top-down")
10168
10169 It's interesting to note that safe uses of cpa->numpages do exist in
10170 the pageattr code. If instead of shifting ->numpages we multiply by
10171 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
10172 so the result is unsigned long.
10173
10174 To avoid surprises when users try to convert very large cpa->numpages
10175 values to addresses, change the data type from 'int' to 'unsigned
10176 long', thereby making it suitable for shifting by PAGE_SHIFT without
10177 any type casting.
10178
10179 The alternative would be to make liberal use of casting, but that is
10180 far more likely to cause problems in the future when someone adds more
10181 code and fails to cast properly; this bug was difficult enough to
10182 track down in the first place.
10183
10184 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
10185 Acked-by: Borislav Petkov <bp@alien8.de>
10186 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
10187 Cc: <stable@vger.kernel.org>
10188 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
10189 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
10190 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
10191 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10192
10193 arch/x86/mm/pageattr.c | 4 ++--
10194 1 files changed, 2 insertions(+), 2 deletions(-)
10195
10196 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
10197 Author: Jan Beulich <JBeulich@suse.com>
10198 Date: Tue Jan 26 04:15:18 2016 -0700
10199
10200 x86/mm: Fix types used in pgprot cacheability flags translations
10201
10202 For PAE kernels "unsigned long" is not suitable to hold page protection
10203 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
10204 few W+X pages getting reported as insecure during boot (observed namely
10205 for the entire initrd range).
10206
10207 Fixes: 281d4078be ("x86: Make page cache mode a real type")
10208 Signed-off-by: Jan Beulich <jbeulich@suse.com>
10209 Reviewed-by: Juergen Gross <JGross@suse.com>
10210 Cc: stable@vger.kernel.org
10211 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
10212 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10213
10214 arch/x86/include/asm/pgtable_types.h | 6 ++----
10215 1 files changed, 2 insertions(+), 4 deletions(-)
10216
10217 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
10218 Merge: 682d661 f74425b
10219 Author: Brad Spengler <spender@grsecurity.net>
10220 Date: Sun Jan 31 15:06:25 2016 -0500
10221
10222 Merge branch 'pax-test' into grsec-test
10223
10224 Conflicts:
10225 drivers/net/slip/slhc.c
10226 include/linux/sched.h
10227 net/unix/af_unix.c
10228 sound/core/timer.c
10229
10230 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
10231 Merge: d14af1f 849a2d3
10232 Author: Brad Spengler <spender@grsecurity.net>
10233 Date: Sun Jan 31 15:02:55 2016 -0500
10234
10235 Merge branch 'linux-4.3.y' into pax-test
10236
10237 Conflicts:
10238 arch/x86/include/asm/mmu_context.h
10239
10240 commit 682d6611d75542e351c973c8dd74a99d3966c073
10241 Author: Brad Spengler <spender@grsecurity.net>
10242 Date: Sat Jan 30 13:05:03 2016 -0500
10243
10244 Based on a report from Mathias Krause, fix up a number of additional instances
10245 of ulong overflow when passing in values to gr_learn_resource by saturating
10246 to ULONG_MAX
10247
10248 mm/mlock.c | 11 ++++++++---
10249 mm/mmap.c | 16 +++++++++++++---
10250 2 files changed, 21 insertions(+), 6 deletions(-)
10251
10252 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
10253 Author: Jann Horn <jann@thejh.net>
10254 Date: Sat Dec 26 06:00:48 2015 +0100
10255
10256 seccomp: always propagate NO_NEW_PRIVS on tsync
10257
10258 Before this patch, a process with some permissive seccomp filter
10259 that was applied by root without NO_NEW_PRIVS was able to add
10260 more filters to itself without setting NO_NEW_PRIVS by setting
10261 the new filter from a throwaway thread with NO_NEW_PRIVS.
10262
10263 Signed-off-by: Jann Horn <jann@thejh.net>
10264 Cc: stable@vger.kernel.org
10265 Signed-off-by: Kees Cook <keescook@chromium.org>
10266
10267 kernel/seccomp.c | 22 +++++++++++-----------
10268 1 files changed, 11 insertions(+), 11 deletions(-)
10269
10270 commit b85450498a3bbf269441c8963d7574bb3079c838
10271 Merge: 59c216f d14af1f
10272 Author: Brad Spengler <spender@grsecurity.net>
10273 Date: Fri Jan 29 20:54:13 2016 -0500
10274
10275 Merge branch 'pax-test' into grsec-test
10276
10277 commit d14af1f1dd66511f3f0674deee2b572972012b39
10278 Author: Brad Spengler <spender@grsecurity.net>
10279 Date: Fri Jan 29 20:53:51 2016 -0500
10280
10281 Update to pax-linux-4.3.4-test26.patch:
10282 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
10283
10284 fs/cifs/file.c | 2 +-
10285 fs/gfs2/file.c | 2 +-
10286 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
10287 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
10288 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
10289 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
10290 .../size_overflow_transform_core.c | 5 +
10291 7 files changed, 102 insertions(+), 15 deletions(-)
10292
10293 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
10294 Author: Brad Spengler <spender@grsecurity.net>
10295 Date: Wed Jan 27 17:57:21 2016 -0500
10296
10297 Fix a size_overflow report reported by Mathias Krause in our
10298 truncation of an loff_t to an unsigned long when being passed
10299 to gr_learn_resource() (as all resource checks are against unsigned long
10300 values)
10301
10302 fs/attr.c | 5 ++++-
10303 1 files changed, 4 insertions(+), 1 deletions(-)
10304
10305 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
10306 Author: Yuchung Cheng <ycheng@google.com>
10307 Date: Wed Jan 6 12:42:38 2016 -0800
10308
10309 tcp: fix zero cwnd in tcp_cwnd_reduction
10310
10311 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
10312 conditionally") introduced a bug that cwnd may become 0 when both
10313 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
10314 to a div-by-zero if the connection starts another cwnd reduction
10315 phase by setting tp->prior_cwnd to the current cwnd (0) in
10316 tcp_init_cwnd_reduction().
10317
10318 To prevent this we skip PRR operation when nothing is acked or
10319 sacked. Then cwnd must be positive in all cases as long as ssthresh
10320 is positive:
10321
10322 1) The proportional reduction mode
10323 inflight > ssthresh > 0
10324
10325 2) The reduction bound mode
10326 a) inflight == ssthresh > 0
10327
10328 b) inflight < ssthresh
10329 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
10330
10331 Therefore in all cases inflight and sndcnt can not both be 0.
10332 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
10333
10334 In reality this bug is triggered only with a sequence of less common
10335 events. For example, the connection is terminating an ECN-triggered
10336 cwnd reduction with an inflight 0, then it receives reordered/old
10337 ACKs or DSACKs from prior transmission (which acks nothing). Or the
10338 connection is in fast recovery stage that marks everything lost,
10339 but fails to retransmit due to local issues, then receives data
10340 packets from other end which acks nothing.
10341
10342 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
10343 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
10344 Signed-off-by: Yuchung Cheng <ycheng@google.com>
10345 Signed-off-by: Neal Cardwell <ncardwell@google.com>
10346 Signed-off-by: Eric Dumazet <edumazet@google.com>
10347 Signed-off-by: David S. Miller <davem@davemloft.net>
10348
10349 net/ipv4/tcp_input.c | 3 +++
10350 1 files changed, 3 insertions(+), 0 deletions(-)
10351
10352 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
10353 Author: Eric Dumazet <edumazet@google.com>
10354 Date: Sun Jan 24 13:53:50 2016 -0800
10355
10356 af_unix: fix struct pid memory leak
10357
10358 Dmitry reported a struct pid leak detected by a syzkaller program.
10359
10360 Bug happens in unix_stream_recvmsg() when we break the loop when a
10361 signal is pending, without properly releasing scm.
10362
10363 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
10364 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10365 Signed-off-by: Eric Dumazet <edumazet@google.com>
10366 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
10367 Signed-off-by: David S. Miller <davem@davemloft.net>
10368
10369 net/unix/af_unix.c | 1 +
10370 1 files changed, 1 insertions(+), 0 deletions(-)
10371
10372 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
10373 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10374 Date: Fri Jan 22 01:39:43 2016 +0100
10375
10376 pptp: fix illegal memory access caused by multiple bind()s
10377
10378 Several times already this has been reported as kasan reports caused by
10379 syzkaller and trinity and people always looked at RCU races, but it is
10380 much more simple. :)
10381
10382 In case we bind a pptp socket multiple times, we simply add it to
10383 the callid_sock list but don't remove the old binding. Thus the old
10384 socket stays in the bucket with unused call_id indexes and doesn't get
10385 cleaned up. This causes various forms of kasan reports which were hard
10386 to pinpoint.
10387
10388 Simply don't allow multiple binds and correct error handling in
10389 pptp_bind. Also keep sk_state bits in place in pptp_connect.
10390
10391 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
10392 Cc: Dmitry Kozlov <xeb@mail.ru>
10393 Cc: Sasha Levin <sasha.levin@oracle.com>
10394 Cc: Dmitry Vyukov <dvyukov@google.com>
10395 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10396 Cc: Dave Jones <davej@codemonkey.org.uk>
10397 Reported-by: Dave Jones <davej@codemonkey.org.uk>
10398 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10399 Signed-off-by: David S. Miller <davem@davemloft.net>
10400
10401 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
10402 1 files changed, 24 insertions(+), 10 deletions(-)
10403
10404 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
10405 Author: Brad Spengler <spender@grsecurity.net>
10406 Date: Tue Jan 26 18:17:10 2016 -0500
10407
10408 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
10409 wiki but was removed from the config help at some point
10410
10411 grsecurity/Kconfig | 3 +++
10412 1 files changed, 3 insertions(+), 0 deletions(-)
10413
10414 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
10415 Author: Thomas Egerer <hakke_007@gmx.de>
10416 Date: Mon Jan 25 12:58:44 2016 +0100
10417
10418 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
10419
10420 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
10421 to select CRYPTO_ECHAINIV in order to work properly. This solves the
10422 issues caused by a misconfiguration as described in [1].
10423 The original approach, patching crypto/Kconfig was turned down by
10424 Herbert Xu [2].
10425
10426 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
10427 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
10428
10429 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
10430 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
10431 Signed-off-by: David S. Miller <davem@davemloft.net>
10432
10433 net/ipv4/Kconfig | 1 +
10434 net/ipv6/Kconfig | 1 +
10435 2 files changed, 2 insertions(+), 0 deletions(-)
10436
10437 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
10438 Merge: 904114c 6339c1f
10439 Author: Brad Spengler <spender@grsecurity.net>
10440 Date: Tue Jan 26 18:08:40 2016 -0500
10441
10442 Merge branch 'pax-test' into grsec-test
10443
10444 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
10445 Author: Brad Spengler <spender@grsecurity.net>
10446 Date: Tue Jan 26 18:07:51 2016 -0500
10447
10448 Update to pax-linux-4.3.4-test25.patch:
10449 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
10450 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
10451 - fixed a few REFCOUNT false positives in SNMP related statistics
10452
10453 arch/x86/Kconfig | 2 +-
10454 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
10455 include/net/snmp.h | 10 +++++-----
10456 kernel/fork.c | 11 +++++++++--
10457 net/ipv4/proc.c | 8 ++++----
10458 net/ipv6/addrconf.c | 4 ++--
10459 net/ipv6/proc.c | 10 +++++-----
10460 7 files changed, 43 insertions(+), 19 deletions(-)
10461
10462 commit 904114c2fce3fdff5d57e763da56a78960db4e19
10463 Author: Al Viro <viro@zeniv.linux.org.uk>
10464 Date: Fri Jan 22 18:08:52 2016 -0500
10465
10466 make sure that freeing shmem fast symlinks is RCU-delayed
10467
10468 Cc: stable@vger.kernel.org # v4.2+
10469 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10470
10471 include/linux/shmem_fs.h | 5 +----
10472 mm/shmem.c | 9 ++++-----
10473 2 files changed, 5 insertions(+), 9 deletions(-)
10474
10475 commit ab86adee64312a2f827dd516cb199521327943ed
10476 Author: Sasha Levin <sasha.levin@oracle.com>
10477 Date: Mon Jan 18 19:23:51 2016 -0500
10478
10479 netfilter: nf_conntrack: use safer way to lock all buckets
10480
10481 When we need to lock all buckets in the connection hashtable we'd attempt to
10482 lock 1024 spinlocks, which is way more preemption levels than supported by
10483 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
10484 enabled, and if it was - use only 8 buckets(!).
10485
10486 Fix this by using a global lock and synchronize all buckets on it when we
10487 need to lock them all. This is pretty heavyweight, but is only done when we
10488 need to resize the hashtable, and that doesn't happen often enough (or at all).
10489
10490 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10491 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
10492 Reviewed-by: Florian Westphal <fw@strlen.de>
10493 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10494
10495 Conflicts:
10496
10497 net/netfilter/nfnetlink_cttimeout.c
10498
10499 include/net/netfilter/nf_conntrack_core.h | 8 ++----
10500 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
10501 net/netfilter/nf_conntrack_helper.c | 2 +-
10502 net/netfilter/nf_conntrack_netlink.c | 2 +-
10503 4 files changed, 33 insertions(+), 17 deletions(-)
10504
10505 commit 37014723527225481c720484bb788a1a6358072f
10506 Author: Willy Tarreau <w@1wt.eu>
10507 Date: Mon Jan 18 16:36:09 2016 +0100
10508
10509 pipe: limit the per-user amount of pages allocated in pipes
10510
10511 On no-so-small systems, it is possible for a single process to cause an
10512 OOM condition by filling large pipes with data that are never read. A
10513 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
10514 memory. On small systems it may be tricky to set the pipe max size to
10515 prevent this from happening.
10516
10517 This patch makes it possible to enforce a per-user soft limit above
10518 which new pipes will be limited to a single page, effectively limiting
10519 them to 4 kB each, as well as a hard limit above which no new pipes may
10520 be created for this user. This has the effect of protecting the system
10521 against memory abuse without hurting other users, and still allowing
10522 pipes to work correctly though with less data at once.
10523
10524 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
10525 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
10526 default soft limit allows the default number of FDs per process (1024)
10527 to create pipes of the default size (64kB), thus reaching a limit of 64MB
10528 before starting to create only smaller pipes. With 256 processes limited
10529 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
10530 1084 MB of memory allocated for a user. The hard limit is disabled by
10531 default to avoid breaking existing applications that make intensive use
10532 of pipes (eg: for splicing).
10533
10534 Reported-by: socketpair@gmail.com
10535 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10536 Mitigates: CVE-2013-4312 (Linux 2.0+)
10537 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10538 Signed-off-by: Willy Tarreau <w@1wt.eu>
10539 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10540
10541 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
10542 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
10543 include/linux/pipe_fs_i.h | 4 +++
10544 include/linux/sched.h | 1 +
10545 kernel/sysctl.c | 14 ++++++++++++
10546 5 files changed, 87 insertions(+), 2 deletions(-)
10547
10548 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
10549 Merge: 540f2af 7791ecb
10550 Author: Brad Spengler <spender@grsecurity.net>
10551 Date: Sat Jan 23 10:57:11 2016 -0500
10552
10553 Merge branch 'pax-test' into grsec-test
10554
10555 commit 7791ecb84f840343a5646236fd0d34e1fb450793
10556 Merge: 470069c 399588c
10557 Author: Brad Spengler <spender@grsecurity.net>
10558 Date: Sat Jan 23 10:56:47 2016 -0500
10559
10560 Merge branch 'linux-4.3.y' into pax-test
10561
10562 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
10563 Author: Brad Spengler <spender@grsecurity.net>
10564 Date: Tue Jan 19 21:18:47 2016 -0500
10565
10566 Update size_overflow hash table
10567
10568 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
10569 1 files changed, 3 insertions(+), 1 deletions(-)
10570
10571 commit 7e649765626a28437f573f0fbe7a51a04615f041
10572 Author: Brad Spengler <spender@grsecurity.net>
10573 Date: Tue Jan 19 20:29:46 2016 -0500
10574
10575 Backport fix from: https://lkml.org/lkml/2015/12/13/187
10576
10577 fs/ext4/extents.c | 2 +-
10578 1 files changed, 1 insertions(+), 1 deletions(-)
10579
10580 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
10581 Author: Jann Horn <jann@thejh.net>
10582 Date: Tue Jan 5 18:27:30 2016 +0100
10583
10584 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
10585
10586 This replaces all code in fs/compat_ioctl.c that translated
10587 ioctl arguments into a in-kernel structure, then performed
10588 do_ioctl under set_fs(KERNEL_DS), with code that allocates
10589 data on the user stack and can call the VFS ioctl handler
10590 under USER_DS.
10591
10592 This is done as a hardening measure because the caller
10593 does not know what kind of ioctl handler will be invoked,
10594 only that no corresponding compat_ioctl handler exists and
10595 what the ioctl command number is. The accidental
10596 invocation of an unlocked_ioctl handler that unexpectedly
10597 calls copy_to_user could be a severe security issue.
10598
10599 Signed-off-by: Jann Horn <jann@thejh.net>
10600 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10601
10602 Conflicts:
10603
10604 fs/compat_ioctl.c
10605
10606 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
10607 1 files changed, 68 insertions(+), 62 deletions(-)
10608
10609 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
10610 Author: Al Viro <viro@zeniv.linux.org.uk>
10611 Date: Thu Jan 7 09:53:30 2016 -0500
10612
10613 compat_ioctl: don't pass fd around when not needed
10614
10615 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10616
10617 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
10618 fs/internal.h | 7 ++++
10619 fs/ioctl.c | 4 +-
10620 include/linux/fs.h | 2 -
10621 4 files changed, 61 insertions(+), 55 deletions(-)
10622
10623 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
10624 Author: Jann Horn <jann@thejh.net>
10625 Date: Tue Jan 5 18:27:29 2016 +0100
10626
10627 compat_ioctl: don't look up the fd twice
10628
10629 In code in fs/compat_ioctl.c that translates ioctl arguments
10630 into a in-kernel structure, then performs sys_ioctl, possibly
10631 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
10632 calls to do_ioctl calls. do_ioctl is a new function that does
10633 the same thing as sys_ioctl, but doesn't look up the fd again.
10634
10635 This change is made to avoid (potential) security issues
10636 because of ioctl handlers that accept one of the ioctl
10637 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
10638 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
10639 This can happen for multiple reasons:
10640
10641 - The ioctl command number could be reused.
10642 - The ioctl handler might not check the full ioctl
10643 command. This is e.g. true for drm_ioctl.
10644 - The ioctl handler is very special, e.g. cuse_file_ioctl
10645
10646 The real issue is that set_fs(KERNEL_DS) is used here,
10647 but that's fixed in a separate commit
10648 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
10649
10650 This change mitigates potential security issues by
10651 preventing a race that permits invocation of
10652 unlocked_ioctl handlers under KERNEL_DS through compat
10653 code even if a corresponding compat_ioctl handler exists.
10654
10655 So far, no way has been identified to use this to damage
10656 kernel memory without having CAP_SYS_ADMIN in the init ns
10657 (with the capability, doing reads/writes at arbitrary
10658 kernel addresses should be easy through CUSE's ioctl
10659 handler with FUSE_IOCTL_UNRESTRICTED set).
10660
10661 [AV: two missed sys_ioctl() taken care of]
10662
10663 Signed-off-by: Jann Horn <jann@thejh.net>
10664 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10665
10666 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
10667 1 files changed, 68 insertions(+), 54 deletions(-)
10668
10669 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
10670 Author: Vasily Kulikov <segoon@openwall.com>
10671 Date: Fri Jan 15 16:57:55 2016 -0800
10672
10673 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
10674
10675 TIMER_ENTRY_STATIC is defined as a poison pointers which
10676 should point to nowhere. Redefine them using POISON_POINTER_DELTA
10677 arithmetics to make sure they really point to non-mappable area declared
10678 by the target architecture.
10679
10680 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
10681 Acked-by: Thomas Gleixner <tglx@linutronix.de>
10682 Cc: Solar Designer <solar@openwall.com>
10683 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
10684 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
10685 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
10686
10687 Conflicts:
10688
10689 include/linux/poison.h
10690
10691 include/linux/poison.h | 2 +-
10692 1 files changed, 1 insertions(+), 1 deletions(-)
10693
10694 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
10695 Author: Brad Spengler <spender@grsecurity.net>
10696 Date: Tue Jan 19 19:41:44 2016 -0500
10697
10698 Fix ARM compilation, reported by Austin Sepp
10699
10700 grsecurity/grsec_sig.c | 1 +
10701 1 files changed, 1 insertions(+), 0 deletions(-)
10702
10703 commit e15383743443dc43460a2fd73e0db0b608610dca
10704 Author: Takashi Iwai <tiwai@suse.de>
10705 Date: Mon Jan 18 13:52:47 2016 +0100
10706
10707 ALSA: hrtimer: Fix stall by hrtimer_cancel()
10708
10709 hrtimer_cancel() waits for the completion from the callback, thus it
10710 must not be called inside the callback itself. This was already a
10711 problem in the past with ALSA hrtimer driver, and the early commit
10712 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
10713
10714 However, the previous fix is still insufficient: it may still cause a
10715 lockup when the ALSA timer instance reprograms itself in its callback.
10716 Then it invokes the start function even in snd_timer_interrupt() that
10717 is called in hrtimer callback itself, results in a CPU stall. This is
10718 no hypothetical problem but actually triggered by syzkaller fuzzer.
10719
10720 This patch tries to fix the issue again. Now we call
10721 hrtimer_try_to_cancel() at both start and stop functions so that it
10722 won't fall into a deadlock, yet giving some chance to cancel the queue
10723 if the functions have been called outside the callback. The proper
10724 hrtimer_cancel() is called in anyway at closing, so this should be
10725 enough.
10726
10727 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
10728 Cc: <stable@vger.kernel.org>
10729 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10730
10731 sound/core/hrtimer.c | 3 ++-
10732 1 files changed, 2 insertions(+), 1 deletions(-)
10733
10734 commit 12d874daf706e6e7c1ae709141859c809599297e
10735 Author: Takashi Iwai <tiwai@suse.de>
10736 Date: Tue Jan 12 12:38:02 2016 +0100
10737
10738 ALSA: seq: Fix missing NULL check at remove_events ioctl
10739
10740 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
10741 unconditionally even if there is no FIFO assigned, and this leads to
10742 an Oops due to NULL dereference. The fix is just to add a proper NULL
10743 check.
10744
10745 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10746 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10747 Cc: <stable@vger.kernel.org>
10748 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10749
10750 sound/core/seq/seq_clientmgr.c | 2 +-
10751 1 files changed, 1 insertions(+), 1 deletions(-)
10752
10753 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
10754 Author: Takashi Iwai <tiwai@suse.de>
10755 Date: Tue Jan 12 15:36:27 2016 +0100
10756
10757 ALSA: seq: Fix race at timer setup and close
10758
10759 ALSA sequencer code has an open race between the timer setup ioctl and
10760 the close of the client. This was triggered by syzkaller fuzzer, and
10761 a use-after-free was caught there as a result.
10762
10763 This patch papers over it by adding a proper queue->timer_mutex lock
10764 around the timer-related calls in the relevant code path.
10765
10766 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10767 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10768 Cc: <stable@vger.kernel.org>
10769 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10770
10771 sound/core/seq/seq_queue.c | 2 ++
10772 1 files changed, 2 insertions(+), 0 deletions(-)
10773
10774 commit b9e55ab955e59b4a636d78a748be90334a48b485
10775 Author: Takashi Iwai <tiwai@suse.de>
10776 Date: Thu Jan 14 16:30:58 2016 +0100
10777
10778 ALSA: timer: Harden slave timer list handling
10779
10780 A slave timer instance might be still accessible in a racy way while
10781 operating the master instance as it lacks of locking. Since the
10782 master operation is mostly protected with timer->lock, we should cope
10783 with it while changing the slave instance, too. Also, some linked
10784 lists (active_list and ack_list) of slave instances aren't unlinked
10785 immediately at stopping or closing, and this may lead to unexpected
10786 accesses.
10787
10788 This patch tries to address these issues. It adds spin lock of
10789 timer->lock (either from master or slave, which is equivalent) in a
10790 few places. For avoiding a deadlock, we ensure that the global
10791 slave_active_lock is always locked at first before each timer lock.
10792
10793 Also, ack and active_list of slave instances are properly unlinked at
10794 snd_timer_stop() and snd_timer_close().
10795
10796 Last but not least, remove the superfluous call of _snd_timer_stop()
10797 at removing slave links. This is a noop, and calling it may confuse
10798 readers wrt locking. Further cleanup will follow in a later patch.
10799
10800 Actually we've got reports of use-after-free by syzkaller fuzzer, and
10801 this hopefully fixes these issues.
10802
10803 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10804 Cc: <stable@vger.kernel.org>
10805 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10806
10807 sound/core/timer.c | 18 ++++++++++++++----
10808 1 files changed, 14 insertions(+), 4 deletions(-)
10809
10810 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
10811 Author: Takashi Iwai <tiwai@suse.de>
10812 Date: Wed Jan 13 17:48:01 2016 +0100
10813
10814 ALSA: timer: Fix race among timer ioctls
10815
10816 ALSA timer ioctls have an open race and this may lead to a
10817 use-after-free of timer instance object. A simplistic fix is to make
10818 each ioctl exclusive. We have already tread_sem for controlling the
10819 tread, and extend this as a global mutex to be applied to each ioctl.
10820
10821 The downside is, of course, the worse concurrency. But these ioctls
10822 aren't to be parallel accessible, in anyway, so it should be fine to
10823 serialize there.
10824
10825 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10826 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10827 Cc: <stable@vger.kernel.org>
10828 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10829
10830 sound/core/timer.c | 32 +++++++++++++++++++-------------
10831 1 files changed, 19 insertions(+), 13 deletions(-)
10832
10833 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
10834 Author: Takashi Iwai <tiwai@suse.de>
10835 Date: Wed Jan 13 21:35:06 2016 +0100
10836
10837 ALSA: timer: Fix double unlink of active_list
10838
10839 ALSA timer instance object has a couple of linked lists and they are
10840 unlinked unconditionally at snd_timer_stop(). Meanwhile
10841 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
10842 the element list itself unchanged. This ends up with unlinking twice,
10843 and it was caught by syzkaller fuzzer.
10844
10845 The fix is to use list_del_init() variant properly there, too.
10846
10847 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10848 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10849 Cc: <stable@vger.kernel.org>
10850 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10851
10852 sound/core/timer.c | 2 +-
10853 1 files changed, 1 insertions(+), 1 deletions(-)
10854
10855 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
10856 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10857 Date: Mon Jan 18 18:03:48 2016 +0100
10858
10859 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
10860
10861 It was seen that defective configurations of openvswitch could overwrite
10862 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
10863 many recursions within ovs.
10864
10865 This problem arises due to the high stack usage of openvswitch. The rest
10866 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
10867
10868 We use the already existing recursion counter in ovs_execute_actions to
10869 implement an upper bound of 5 recursions.
10870
10871 Cc: Pravin Shelar <pshelar@ovn.org>
10872 Cc: Simon Horman <simon.horman@netronome.com>
10873 Cc: Eric Dumazet <eric.dumazet@gmail.com>
10874 Cc: Simon Horman <simon.horman@netronome.com>
10875 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10876 Signed-off-by: David S. Miller <davem@davemloft.net>
10877
10878 net/openvswitch/actions.c | 19 ++++++++++++++-----
10879 1 files changed, 14 insertions(+), 5 deletions(-)
10880
10881 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
10882 Author: Ursula Braun <ursula.braun@de.ibm.com>
10883 Date: Tue Jan 19 10:41:33 2016 +0100
10884
10885 af_iucv: Validate socket address length in iucv_sock_bind()
10886
10887 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
10888 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10889 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
10890 Signed-off-by: David S. Miller <davem@davemloft.net>
10891
10892 net/iucv/af_iucv.c | 3 +++
10893 1 files changed, 3 insertions(+), 0 deletions(-)
10894
10895 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
10896 Author: Brad Spengler <spender@grsecurity.net>
10897 Date: Tue Jan 19 19:32:54 2016 -0500
10898
10899 Apply the same fix as everyone else for the recent keys vulnerability that is
10900 unexploitable under PAX_REFCOUNT
10901
10902 Make a couple more changes that no one else can/will
10903
10904 include/linux/key-type.h | 4 ++--
10905 ipc/msgutil.c | 4 ++--
10906 security/keys/internal.h | 2 +-
10907 security/keys/process_keys.c | 1 +
10908 4 files changed, 6 insertions(+), 5 deletions(-)
10909
10910 commit b56c3a63f431c193400aee17543021950bd14bc4
10911 Merge: 38b1a3d 470069c
10912 Author: Brad Spengler <spender@grsecurity.net>
10913 Date: Sun Jan 17 18:30:19 2016 -0500
10914
10915 Merge branch 'pax-test' into grsec-test
10916
10917 commit 470069cfedef2180313233d275be5901bd6d1135
10918 Author: Brad Spengler <spender@grsecurity.net>
10919 Date: Sun Jan 17 18:29:59 2016 -0500
10920
10921 Update to pax-linux-4.3.3-test22.patch:
10922 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
10923 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
10924
10925 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
10926 drivers/gpu/drm/drm_pci.c | 3 +++
10927 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
10928 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
10929 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
10930 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
10931 drivers/net/usb/asix_common.c | 3 ++-
10932 include/drm/drmP.h | 1 +
10933 8 files changed, 22 insertions(+), 29 deletions(-)
10934
10935 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
10936 Author: Brad Spengler <spender@grsecurity.net>
10937 Date: Sun Jan 17 12:33:53 2016 -0500
10938
10939 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
10940 mentioned banning execution of suid/sgid binaries, though the kernel
10941 source clearly only mentions banning execution of suid binaries. Since
10942 there's no reason for us to not ban execution of sgid binaries as well,
10943 make the implementation match the Kconfig description.
10944
10945 fs/exec.c | 4 ++--
10946 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
10947 include/linux/sched.h | 4 ++--
10948 3 files changed, 18 insertions(+), 17 deletions(-)
10949
10950 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
10951 Merge: d141a86 ea4a835
10952 Author: Brad Spengler <spender@grsecurity.net>
10953 Date: Sat Jan 16 14:12:22 2016 -0500
10954
10955 Merge branch 'pax-test' into grsec-test
10956
10957 Conflicts:
10958 drivers/gpu/drm/i810/i810_drv.c
10959
10960 commit ea4a835328ada6513ac013986764d6caea8cd348
10961 Author: Brad Spengler <spender@grsecurity.net>
10962 Date: Sat Jan 16 14:11:30 2016 -0500
10963
10964 Update to pax-linux-4.3.3-test21.patch:
10965 - fixed some fallout from the drm_drivers constification, reported by spender
10966
10967 drivers/gpu/drm/armada/armada_drv.c | 3 +--
10968 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
10969 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10970 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
10971 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10972 5 files changed, 8 insertions(+), 6 deletions(-)
10973
10974 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
10975 Author: Brad Spengler <spender@grsecurity.net>
10976 Date: Sat Jan 16 13:16:36 2016 -0500
10977
10978 compile fix
10979
10980 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10981 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
10982 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10983 3 files changed, 5 insertions(+), 3 deletions(-)
10984
10985 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
10986 Merge: 5fa135d bbda879
10987 Author: Brad Spengler <spender@grsecurity.net>
10988 Date: Sat Jan 16 12:59:22 2016 -0500
10989
10990 Merge branch 'pax-test' into grsec-test
10991
10992 commit bbda87914edf63e27fb46670bf3a373f2b963c73
10993 Author: Brad Spengler <spender@grsecurity.net>
10994 Date: Sat Jan 16 12:58:04 2016 -0500
10995
10996 Update to pax-linux-4.3.3-test20.patch:
10997 - constified drm_driver
10998 - Emese fixed a special case in handling __func__ in the initify plugin
10999 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
11000 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
11001
11002 arch/x86/kernel/cpu/perf_event.h | 2 +-
11003 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
11004 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
11005 arch/x86/kernel/uprobes.c | 2 +-
11006 arch/x86/mm/mpx.c | 2 +-
11007 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
11008 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
11009 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
11010 drivers/gpu/drm/drm_pci.c | 6 +-
11011 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
11012 drivers/gpu/drm/i915/i915_dma.c | 2 +-
11013 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
11014 drivers/gpu/drm/i915/i915_drv.h | 2 +-
11015 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
11016 drivers/gpu/drm/mga/mga_drv.c | 5 +-
11017 drivers/gpu/drm/mga/mga_drv.h | 2 +-
11018 drivers/gpu/drm/mga/mga_state.c | 2 +-
11019 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
11020 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
11021 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
11022 drivers/gpu/drm/r128/r128_drv.c | 4 +-
11023 drivers/gpu/drm/r128/r128_drv.h | 2 +-
11024 drivers/gpu/drm/r128/r128_state.c | 2 +-
11025 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
11026 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
11027 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
11028 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
11029 drivers/gpu/drm/savage/savage_bci.c | 2 +-
11030 drivers/gpu/drm/savage/savage_drv.c | 5 +-
11031 drivers/gpu/drm/savage/savage_drv.h | 2 +-
11032 drivers/gpu/drm/sis/sis_drv.c | 5 +-
11033 drivers/gpu/drm/sis/sis_drv.h | 2 +-
11034 drivers/gpu/drm/sis/sis_mm.c | 2 +-
11035 drivers/gpu/drm/via/via_dma.c | 2 +-
11036 drivers/gpu/drm/via/via_drv.c | 5 +-
11037 drivers/gpu/drm/via/via_drv.h | 2 +-
11038 include/drm/drmP.h | 2 +-
11039 mm/slab.c | 2 +-
11040 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
11041 tools/gcc/initify_plugin.c | 15 +++-
11042 .../disable_size_overflow_hash.data | 1 +
11043 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
11044 42 files changed, 156 insertions(+), 110 deletions(-)
11045
11046 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
11047 Author: Brad Spengler <spender@grsecurity.net>
11048 Date: Sat Jan 16 12:19:23 2016 -0500
11049
11050 compile fix
11051
11052 grsecurity/grsec_sig.c | 3 +--
11053 1 files changed, 1 insertions(+), 2 deletions(-)
11054
11055 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
11056 Author: Brad Spengler <spender@grsecurity.net>
11057 Date: Sat Jan 16 12:10:37 2016 -0500
11058
11059 As pointed out by Jann Horn, some distros are starting to circumvent
11060 previous assumptions about the attainability of a user to control
11061 multiple UIDs by handing out suid binaries that allow a user to run
11062 processes (including exploits) under a number of other pre-defined
11063 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
11064 (though it would have to involve some code path that doesn't involve
11065 locks) fix that here by ensuring no more than 8 users on a system can
11066 be banned before a reboot is required. If more are banned, a panic
11067 is triggered.
11068
11069 grsecurity/grsec_sig.c | 8 ++++++++
11070 1 files changed, 8 insertions(+), 0 deletions(-)
11071
11072 commit a8d37776e9521c567ebff6730d49312f72435f08
11073 Author: Eric Dumazet <edumazet@google.com>
11074 Date: Thu Dec 3 11:12:07 2015 -0800
11075
11076 proc: add a reschedule point in proc_readfd_common()
11077
11078 User can pass an arbitrary large buffer to getdents().
11079
11080 It is typically a 32KB buffer used by libc scandir() implementation.
11081
11082 When scanning /proc/{pid}/fd, we can hold cpu way too long,
11083 so add a cond_resched() to be kind with other tasks.
11084
11085 We've seen latencies of more than 50ms on real workloads.
11086
11087 Signed-off-by: Eric Dumazet <edumazet@google.com>
11088 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
11089 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11090
11091 fs/proc/fd.c | 1 +
11092 1 files changed, 1 insertions(+), 0 deletions(-)
11093
11094 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
11095 Author: Rabin Vincent <rabin@rab.in>
11096 Date: Tue Jan 12 20:17:08 2016 +0100
11097
11098 net: bpf: reject invalid shifts
11099
11100 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
11101 constant shift that can't be encoded in the immediate field of the
11102 UBFM/SBFM instructions is passed to the JIT. Since these shifts
11103 amounts, which are negative or >= regsize, are invalid, reject them in
11104 the eBPF verifier and the classic BPF filter checker, for all
11105 architectures.
11106
11107 Signed-off-by: Rabin Vincent <rabin@rab.in>
11108 Acked-by: Alexei Starovoitov <ast@kernel.org>
11109 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11110 Signed-off-by: David S. Miller <davem@davemloft.net>
11111
11112 kernel/bpf/verifier.c | 10 ++++++++++
11113 net/core/filter.c | 5 +++++
11114 2 files changed, 15 insertions(+), 0 deletions(-)
11115
11116 commit c248e115a73496625a1c64660d0eeefd67e55cbf
11117 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11118 Date: Fri Jan 8 11:00:54 2016 -0200
11119
11120 sctp: fix use-after-free in pr_debug statement
11121
11122 Dmitry Vyukov reported a use-after-free in the code expanded by the
11123 macro debug_post_sfx, which is caused by the use of the asoc pointer
11124 after it was freed within sctp_side_effect() scope.
11125
11126 This patch fixes it by allowing sctp_side_effect to clear that asoc
11127 pointer when the TCB is freed.
11128
11129 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
11130 because it will trigger DELETE_TCB too on that same loop.
11131
11132 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
11133 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
11134 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
11135
11136 The macro is already prepared to handle such NULL pointer.
11137
11138 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11139 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11140 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
11141 Signed-off-by: David S. Miller <davem@davemloft.net>
11142
11143 net/sctp/sm_sideeffect.c | 11 ++++++-----
11144 net/sctp/sm_statefuns.c | 17 ++++-------------
11145 2 files changed, 10 insertions(+), 18 deletions(-)
11146
11147 commit 395ea8a9e73e184fc14153a033000bccf4213213
11148 Author: willy tarreau <w@1wt.eu>
11149 Date: Sun Jan 10 07:54:56 2016 +0100
11150
11151 unix: properly account for FDs passed over unix sockets
11152
11153 It is possible for a process to allocate and accumulate far more FDs than
11154 the process' limit by sending them over a unix socket then closing them
11155 to keep the process' fd count low.
11156
11157 This change addresses this problem by keeping track of the number of FDs
11158 in flight per user and preventing non-privileged processes from having
11159 more FDs in flight than their configured FD limit.
11160
11161 Reported-by: socketpair@gmail.com
11162 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
11163 Mitigates: CVE-2013-4312 (Linux 2.0+)
11164 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
11165 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11166 Signed-off-by: Willy Tarreau <w@1wt.eu>
11167 Signed-off-by: David S. Miller <davem@davemloft.net>
11168
11169 include/linux/sched.h | 1 +
11170 net/unix/af_unix.c | 24 ++++++++++++++++++++----
11171 net/unix/garbage.c | 13 ++++++++-----
11172 3 files changed, 29 insertions(+), 9 deletions(-)
11173
11174 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
11175 Author: Sasha Levin <sasha.levin@oracle.com>
11176 Date: Thu Jan 7 14:52:43 2016 -0500
11177
11178 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
11179
11180 proc_dostring() needs an initialized destination string, while the one
11181 provided in proc_sctp_do_hmac_alg() contains stack garbage.
11182
11183 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
11184 accessing invalid memory.
11185
11186 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
11187 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11188 Signed-off-by: David S. Miller <davem@davemloft.net>
11189
11190 net/sctp/sysctl.c | 2 +-
11191 1 files changed, 1 insertions(+), 1 deletions(-)
11192
11193 commit 4014e09faf0fe9054119624ccfff1236e886b554
11194 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11195 Date: Tue Nov 24 17:13:21 2015 -0500
11196
11197 RDS: fix race condition when sending a message on unbound socket
11198
11199 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
11200
11201 Sasha's found a NULL pointer dereference in the RDS connection code when
11202 sending a message to an apparently unbound socket. The problem is caused
11203 by the code checking if the socket is bound in rds_sendmsg(), which checks
11204 the rs_bound_addr field without taking a lock on the socket. This opens a
11205 race where rs_bound_addr is temporarily set but where the transport is not
11206 in rds_bind(), leading to a NULL pointer dereference when trying to
11207 dereference 'trans' in __rds_conn_create().
11208
11209 Vegard wrote a reproducer for this issue, so kindly ask him to share if
11210 you're interested.
11211
11212 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
11213 with this patch, whereas I could without.
11214
11215 Complete earlier incomplete fix to CVE-2015-6937:
11216
11217 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
11218
11219 Cc: David S. Miller <davem@davemloft.net>
11220
11221 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
11222 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
11223 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11224 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11225 Signed-off-by: David S. Miller <davem@davemloft.net>
11226 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
11227
11228 Conflicts:
11229
11230 net/rds/send.c
11231
11232 net/rds/connection.c | 6 ------
11233 1 files changed, 0 insertions(+), 6 deletions(-)
11234
11235 commit 206df8d01104344d7588d801016a281a4cd25556
11236 Author: Sasha Levin <sasha.levin@oracle.com>
11237 Date: Tue Sep 8 10:53:40 2015 -0400
11238
11239 RDS: verify the underlying transport exists before creating a connection
11240
11241 There was no verification that an underlying transport exists when creating
11242 a connection, this would cause dereferencing a NULL ptr.
11243
11244 It might happen on sockets that weren't properly bound before attempting to
11245 send a message, which will cause a NULL ptr deref:
11246
11247 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
11248 [135546.051270] Modules linked in:
11249 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
11250 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
11251 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
11252 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
11253 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
11254 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
11255 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
11256 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
11257 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
11258 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
11259 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
11260 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
11261 [135546.064723] Stack:
11262 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
11263 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
11264 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
11265 [135546.068629] Call Trace:
11266 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
11267 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
11268 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
11269 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
11270 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
11271 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
11272 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
11273 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
11274 [135546.076349] ? __might_fault (mm/memory.c:3795)
11275 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
11276 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
11277 [135546.078856] SYSC_sendto (net/socket.c:1657)
11278 [135546.079596] ? SYSC_connect (net/socket.c:1628)
11279 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
11280 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
11281 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11282 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
11283 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
11284 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11285 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
11286
11287 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11288 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11289 Signed-off-by: David S. Miller <davem@davemloft.net>
11290
11291 net/rds/connection.c | 6 ++++++
11292 1 files changed, 6 insertions(+), 0 deletions(-)
11293
11294 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
11295 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
11296 Date: Tue Jan 5 20:32:47 2016 -0500
11297
11298 ftrace/module: Call clean up function when module init fails early
11299
11300 If the module init code fails after calling ftrace_module_init() and before
11301 calling do_init_module(), we can suffer from a memory leak. This is because
11302 ftrace_module_init() allocates pages to store the locations that ftrace
11303 hooks are placed in the module text. If do_init_module() fails, it still
11304 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
11305 the pages it allocated for the module. But if load_module() fails before
11306 then, the pages allocated by ftrace_module_init() will never be freed.
11307
11308 Call ftrace_release_mod() on the module if load_module() fails before
11309 getting to do_init_module().
11310
11311 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
11312
11313 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
11314 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
11315 Cc: stable@vger.kernel.org # v2.6.38+
11316 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
11317 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11318
11319 include/linux/ftrace.h | 1 +
11320 kernel/module.c | 6 ++++++
11321 2 files changed, 7 insertions(+), 0 deletions(-)
11322
11323 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
11324 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
11325 Date: Wed Jan 6 00:18:48 2016 -0800
11326
11327 net: possible use after free in dst_release
11328
11329 dst_release should not access dst->flags after decrementing
11330 __refcnt to 0. The dst_entry may be in dst_busy_list and
11331 dst_gc_task may dst_destroy it before dst_release gets a chance
11332 to access dst->flags.
11333
11334 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
11335 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
11336 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
11337 Acked-by: Eric Dumazet <edumazet@google.com>
11338 Signed-off-by: David S. Miller <davem@davemloft.net>
11339
11340 net/core/dst.c | 3 ++-
11341 1 files changed, 2 insertions(+), 1 deletions(-)
11342
11343 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
11344 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
11345 Date: Wed Jan 6 14:55:02 2016 +0000
11346
11347 mkiss: fix scribble on freed memory
11348
11349 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
11350 scribble on free memory but added a new one which allows the user to
11351 scribble even more and user controlled data into freed space.
11352
11353 As with 6pack we need to halt the queue before we free the buffers, because
11354 the transmit logic is not protected by the semaphore.
11355
11356 Signed-off-by: Alan Cox <alan@linux.intel.com>
11357 Signed-off-by: David S. Miller <davem@davemloft.net>
11358
11359 drivers/net/hamradio/mkiss.c | 5 +++++
11360 1 files changed, 5 insertions(+), 0 deletions(-)
11361
11362 commit 5cbbcbd32dc1949470f61d342503808fa9555276
11363 Author: David Miller <davem@davemloft.net>
11364 Date: Thu Dec 17 16:05:49 2015 -0500
11365
11366 mkiss: Fix use after free in mkiss_close().
11367
11368 Need to do the unregister_device() after all references to the driver
11369 private have been done.
11370
11371 Signed-off-by: David S. Miller <davem@davemloft.net>
11372
11373 drivers/net/hamradio/mkiss.c | 4 ++--
11374 1 files changed, 2 insertions(+), 2 deletions(-)
11375
11376 commit b00171576794a98068e069a660f0991a6a5190ff
11377 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
11378 Date: Tue Jan 5 11:51:25 2016 +0000
11379
11380 6pack: fix free memory scribbles
11381
11382 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
11383 memory scribble but in doing so replaced it with a different one that allows
11384 the user to control the data and scribble even more.
11385
11386 sixpack_close is called by the tty layer in tty context. The tty context is
11387 protected by sp_get() and sp_put(). However network layer activity via
11388 sp_xmit() is not protected this way. We must therefore stop the queue
11389 otherwise the user gets to dump a buffer mostly of their choice into freed
11390 kernel pages.
11391
11392 Signed-off-by: Alan Cox <alan@linux.intel.com>
11393 Signed-off-by: David S. Miller <davem@davemloft.net>
11394
11395 drivers/net/hamradio/6pack.c | 6 ++++++
11396 1 files changed, 6 insertions(+), 0 deletions(-)
11397
11398 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
11399 Author: David Miller <davem@davemloft.net>
11400 Date: Thu Dec 17 16:05:32 2015 -0500
11401
11402 6pack: Fix use after free in sixpack_close().
11403
11404 Need to do the unregister_device() after all references to the driver
11405 private have been done.
11406
11407 Also we need to use del_timer_sync() for the timers so that we don't
11408 have any asynchronous references after the unregister.
11409
11410 Signed-off-by: David S. Miller <davem@davemloft.net>
11411
11412 drivers/net/hamradio/6pack.c | 8 ++++----
11413 1 files changed, 4 insertions(+), 4 deletions(-)
11414
11415 commit 4f9d532742656b3613d579220fd10c78f24ba37b
11416 Author: Rabin Vincent <rabin@rab.in>
11417 Date: Tue Jan 5 16:23:07 2016 +0100
11418
11419 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
11420
11421 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
11422 instructions since it XORs A with X while all the others replace A with
11423 some loaded value. All the BPF JITs fail to clear A if this is used as
11424 the first instruction in a filter. This was found using american fuzzy
11425 lop.
11426
11427 Add a helper to determine if A needs to be cleared given the first
11428 instruction in a filter, and use this in the JITs. Except for ARM, the
11429 rest have only been compile-tested.
11430
11431 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
11432 Signed-off-by: Rabin Vincent <rabin@rab.in>
11433 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11434 Acked-by: Alexei Starovoitov <ast@kernel.org>
11435 Signed-off-by: David S. Miller <davem@davemloft.net>
11436
11437 arch/arm/net/bpf_jit_32.c | 16 +---------------
11438 arch/mips/net/bpf_jit.c | 16 +---------------
11439 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
11440 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
11441 include/linux/filter.h | 19 +++++++++++++++++++
11442 5 files changed, 25 insertions(+), 56 deletions(-)
11443
11444 commit 570d88f8acfffda92b89ae2e1c47320d47256034
11445 Author: John Fastabend <john.fastabend@gmail.com>
11446 Date: Tue Jan 5 09:11:36 2016 -0800
11447
11448 net: sched: fix missing free per cpu on qstats
11449
11450 When a qdisc is using per cpu stats (currently just the ingress
11451 qdisc) only the bstats are being freed. This also free's the qstats.
11452
11453 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
11454 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
11455 Acked-by: Eric Dumazet <edumazet@google.com>
11456 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11457 Signed-off-by: David S. Miller <davem@davemloft.net>
11458
11459 net/sched/sch_generic.c | 4 +++-
11460 1 files changed, 3 insertions(+), 1 deletions(-)
11461
11462 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
11463 Author: Rabin Vincent <rabin@rab.in>
11464 Date: Tue Jan 5 18:34:04 2016 +0100
11465
11466 ARM: net: bpf: fix zero right shift
11467
11468 The LSR instruction cannot be used to perform a zero right shift since a
11469 0 as the immediate value (imm5) in the LSR instruction encoding means
11470 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
11471
11472 Make the JIT skip generation of the LSR if a zero-shift is requested.
11473
11474 This was found using american fuzzy lop.
11475
11476 Signed-off-by: Rabin Vincent <rabin@rab.in>
11477 Acked-by: Alexei Starovoitov <ast@kernel.org>
11478 Signed-off-by: David S. Miller <davem@davemloft.net>
11479
11480 arch/arm/net/bpf_jit_32.c | 3 ++-
11481 1 files changed, 2 insertions(+), 1 deletions(-)
11482
11483 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
11484 Author: Brad Spengler <spender@grsecurity.net>
11485 Date: Wed Jan 6 20:35:57 2016 -0500
11486
11487 Don't perform hidden lookups in RBAC against the directory of
11488 a file being opened with O_CREAT, reported by Karl Witt
11489
11490 Conflicts:
11491
11492 fs/namei.c
11493
11494 fs/namei.c | 3 ---
11495 1 files changed, 0 insertions(+), 3 deletions(-)
11496
11497 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
11498 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11499 Date: Tue Jan 5 10:46:00 2016 +0100
11500
11501 bridge: Only call /sbin/bridge-stp for the initial network namespace
11502
11503 [I stole this patch from Eric Biederman. He wrote:]
11504
11505 > There is no defined mechanism to pass network namespace information
11506 > into /sbin/bridge-stp therefore don't even try to invoke it except
11507 > for bridge devices in the initial network namespace.
11508 >
11509 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
11510 > invoked for any network device name which if /sbin/bridge-stp does not
11511 > guard against unreasonable arguments or being invoked twice on the
11512 > same network device could cause problems.
11513
11514 [Hannes: changed patch using netns_eq]
11515
11516 Cc: Eric W. Biederman <ebiederm@xmission.com>
11517 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
11518 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11519 Signed-off-by: David S. Miller <davem@davemloft.net>
11520
11521 net/bridge/br_stp_if.c | 5 ++++-
11522 1 files changed, 4 insertions(+), 1 deletions(-)
11523
11524 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
11525 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11526 Date: Wed Dec 23 16:28:40 2015 -0200
11527
11528 sctp: use GFP_USER for user-controlled kmalloc
11529
11530 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11531 missed two other spots.
11532
11533 For connectx, as it's more likely to be used by kernel users of the API,
11534 it detects if GFP_USER should be used or not.
11535
11536 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11537 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11538 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11539 Signed-off-by: David S. Miller <davem@davemloft.net>
11540
11541 net/sctp/socket.c | 9 ++++++---
11542 1 files changed, 6 insertions(+), 3 deletions(-)
11543
11544 commit 5718a1f63c41fc156f729783423b002763779d04
11545 Author: Florian Westphal <fw@strlen.de>
11546 Date: Thu Dec 31 14:26:33 2015 +0100
11547
11548 connector: bump skb->users before callback invocation
11549
11550 Dmitry reports memleak with syskaller program.
11551 Problem is that connector bumps skb usecount but might not invoke callback.
11552
11553 So move skb_get to where we invoke the callback.
11554
11555 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11556 Signed-off-by: Florian Westphal <fw@strlen.de>
11557 Signed-off-by: David S. Miller <davem@davemloft.net>
11558
11559 drivers/connector/connector.c | 11 +++--------
11560 1 files changed, 3 insertions(+), 8 deletions(-)
11561
11562 commit 2e6372e6a97f8d642416899861f91777f44f13b7
11563 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11564 Date: Sun Jan 3 18:56:38 2016 +0000
11565
11566 af_unix: Fix splice-bind deadlock
11567
11568 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
11569 system call and AF_UNIX sockets,
11570
11571 http://lists.openwall.net/netdev/2015/11/06/24
11572
11573 The situation was analyzed as
11574
11575 (a while ago) A: socketpair()
11576 B: splice() from a pipe to /mnt/regular_file
11577 does sb_start_write() on /mnt
11578 C: try to freeze /mnt
11579 wait for B to finish with /mnt
11580 A: bind() try to bind our socket to /mnt/new_socket_name
11581 lock our socket, see it not bound yet
11582 decide that it needs to create something in /mnt
11583 try to do sb_start_write() on /mnt, block (it's
11584 waiting for C).
11585 D: splice() from the same pipe to our socket
11586 lock the pipe, see that socket is connected
11587 try to lock the socket, block waiting for A
11588 B: get around to actually feeding a chunk from
11589 pipe to file, try to lock the pipe. Deadlock.
11590
11591 on 2015/11/10 by Al Viro,
11592
11593 http://lists.openwall.net/netdev/2015/11/10/4
11594
11595 The patch fixes this by removing the kern_path_create related code from
11596 unix_mknod and executing it as part of unix_bind prior acquiring the
11597 readlock of the socket in question. This means that A (as used above)
11598 will sb_start_write on /mnt before it acquires the readlock, hence, it
11599 won't indirectly block B which first did a sb_start_write and then
11600 waited for a thread trying to acquire the readlock. Consequently, A
11601 being blocked by C waiting for B won't cause a deadlock anymore
11602 (effectively, both A and B acquire two locks in opposite order in the
11603 situation described above).
11604
11605 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
11606
11607 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11608 Signed-off-by: David S. Miller <davem@davemloft.net>
11609
11610 Conflicts:
11611
11612 net/unix/af_unix.c
11613
11614 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
11615 1 files changed, 42 insertions(+), 28 deletions(-)
11616
11617 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
11618 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
11619 Date: Thu Dec 31 13:11:28 2015 +0800
11620
11621 tracing: Fix setting of start_index in find_next()
11622
11623 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
11624 panic at t_show.
11625
11626 general protection fault: 0000 [#1] PREEMPT SMP
11627 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
11628 RIP: 0010:[<ffffffff811375b2>]
11629 [<ffffffff811375b2>] t_show+0x22/0xe0
11630 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
11631 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
11632 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
11633 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
11634 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
11635 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
11636 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
11637 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
11638 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
11639 Call Trace:
11640 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
11641 [<ffffffff811b749b>] vfs_read+0x9b/0x160
11642 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
11643 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
11644 ---[ end trace 5bd9eb630614861e ]---
11645 Kernel panic - not syncing: Fatal exception
11646
11647 When the first time find_next calls find_next_mod_format, it should
11648 iterate the trace_bprintk_fmt_list to find the first print format of
11649 the module. However in current code, start_index is smaller than *pos
11650 at first, and code will not iterate the list. Latter container_of will
11651 get the wrong address with former v, which will cause mod_fmt be a
11652 meaningless object and so is the returned mod_fmt->fmt.
11653
11654 This patch will fix it by correcting the start_index. After fixed,
11655 when the first time calls find_next_mod_format, start_index will be
11656 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
11657 get the right module printk format, so is the returned mod_fmt->fmt.
11658
11659 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
11660
11661 Cc: stable@vger.kernel.org # 3.12+
11662 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
11663 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
11664 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11665
11666 kernel/trace/trace_printk.c | 1 +
11667 1 files changed, 1 insertions(+), 0 deletions(-)
11668
11669 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
11670 Author: Al Viro <viro@zeniv.linux.org.uk>
11671 Date: Mon Dec 28 20:47:08 2015 -0500
11672
11673 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
11674
11675 Cc: stable@vger.kernel.org # 3.15+
11676 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
11677 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11678
11679 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
11680 1 files changed, 37 insertions(+), 36 deletions(-)
11681
11682 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
11683 Merge: de243c2 3adc55a
11684 Author: Brad Spengler <spender@grsecurity.net>
11685 Date: Tue Jan 5 18:10:10 2016 -0500
11686
11687 Merge branch 'pax-test' into grsec-test
11688
11689 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
11690 Author: Brad Spengler <spender@grsecurity.net>
11691 Date: Tue Jan 5 18:08:53 2016 -0500
11692
11693 Update to pax-linux-4.3.3-test16.patch:
11694 - small cleanup in entry_64.S on x86
11695 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
11696 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
11697 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
11698 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
11699 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
11700
11701 arch/x86/entry/entry_64.S | 60 +++++-----
11702 arch/x86/kernel/alternative.c | 2 +-
11703 arch/x86/kvm/emulate.c | 4 +-
11704 tools/gcc/initify_plugin.c | 123 +++++++++----------
11705 .../disable_size_overflow_hash.data | 4 +-
11706 .../size_overflow_plugin/size_overflow_hash.data | 2 -
11707 6 files changed, 93 insertions(+), 102 deletions(-)
11708
11709 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
11710 Author: Brad Spengler <spender@grsecurity.net>
11711 Date: Tue Dec 29 18:01:24 2015 -0500
11712
11713 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
11714 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
11715 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
11716
11717 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
11718 against suid/sgid attacks and the flaw above would only eliminate the extra
11719 entropy provided for the brk-managed heap, still leaving it with the minimum
11720 of 16-bit entropy for mmap on x86 and 28 on x64.
11721
11722 mm/mmap.c | 2 +-
11723 1 files changed, 1 insertions(+), 1 deletions(-)
11724
11725 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
11726 Merge: 436201b 2584340
11727 Author: Brad Spengler <spender@grsecurity.net>
11728 Date: Mon Dec 28 20:30:01 2015 -0500
11729
11730 Merge branch 'pax-test' into grsec-test
11731
11732 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
11733 Author: Brad Spengler <spender@grsecurity.net>
11734 Date: Mon Dec 28 20:29:28 2015 -0500
11735
11736 Update to pax-linux-4.3.3-test14.patch:
11737 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
11738 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
11739 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
11740 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
11741 - fixed an assert in the initify plugin that triggered in vic_register on arm
11742
11743 arch/arm/include/asm/atomic.h | 7 +++++--
11744 arch/arm/include/asm/domain.h | 5 ++---
11745 arch/x86/kernel/tboot.c | 14 +++++++++-----
11746 drivers/hv/channel.c | 4 +---
11747 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
11748 drivers/net/hyperv/rndis_filter.c | 3 +--
11749 fs/exec.c | 4 ++--
11750 include/linux/atomic.h | 15 ---------------
11751 net/core/skbuff.c | 3 ++-
11752 tools/gcc/initify_plugin.c | 4 +++-
11753 10 files changed, 26 insertions(+), 35 deletions(-)
11754
11755 commit 436201b6626b488d173c8076447000077c27b84a
11756 Author: David Howells <dhowells@redhat.com>
11757 Date: Fri Dec 18 01:34:26 2015 +0000
11758
11759 KEYS: Fix race between read and revoke
11760
11761 This fixes CVE-2015-7550.
11762
11763 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
11764 happens between keyctl_read() checking the validity of a key and the key's
11765 semaphore being taken, then the key type read method will see a revoked key.
11766
11767 This causes a problem for the user-defined key type because it assumes in
11768 its read method that there will always be a payload in a non-revoked key
11769 and doesn't check for a NULL pointer.
11770
11771 Fix this by making keyctl_read() check the validity of a key after taking
11772 semaphore instead of before.
11773
11774 I think the bug was introduced with the original keyrings code.
11775
11776 This was discovered by a multithreaded test program generated by syzkaller
11777 (http://github.com/google/syzkaller). Here's a cleaned up version:
11778
11779 #include <sys/types.h>
11780 #include <keyutils.h>
11781 #include <pthread.h>
11782 void *thr0(void *arg)
11783 {
11784 key_serial_t key = (unsigned long)arg;
11785 keyctl_revoke(key);
11786 return 0;
11787 }
11788 void *thr1(void *arg)
11789 {
11790 key_serial_t key = (unsigned long)arg;
11791 char buffer[16];
11792 keyctl_read(key, buffer, 16);
11793 return 0;
11794 }
11795 int main()
11796 {
11797 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
11798 pthread_t th[5];
11799 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
11800 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
11801 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
11802 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
11803 pthread_join(th[0], 0);
11804 pthread_join(th[1], 0);
11805 pthread_join(th[2], 0);
11806 pthread_join(th[3], 0);
11807 return 0;
11808 }
11809
11810 Build as:
11811
11812 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
11813
11814 Run as:
11815
11816 while keyctl-race; do :; done
11817
11818 as it may need several iterations to crash the kernel. The crash can be
11819 summarised as:
11820
11821 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
11822 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
11823 ...
11824 Call Trace:
11825 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
11826 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
11827 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
11828
11829 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11830 Signed-off-by: David Howells <dhowells@redhat.com>
11831 Tested-by: Dmitry Vyukov <dvyukov@google.com>
11832 Cc: stable@vger.kernel.org
11833 Signed-off-by: James Morris <james.l.morris@oracle.com>
11834
11835 security/keys/keyctl.c | 18 +++++++++---------
11836 1 files changed, 9 insertions(+), 9 deletions(-)
11837
11838 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
11839 Author: Brad Spengler <spender@grsecurity.net>
11840 Date: Tue Dec 22 20:44:01 2015 -0500
11841
11842 Add new kernel command-line param: pax_size_overflow_report_only
11843 If a user triggers a size_overflow violation that makes it difficult
11844 to obtain the call trace without serial console/net console, they can
11845 use this option to provide that information to us
11846
11847 Documentation/kernel-parameters.txt | 5 +++++
11848 fs/exec.c | 12 +++++++++---
11849 init/main.c | 11 +++++++++++
11850 3 files changed, 25 insertions(+), 3 deletions(-)
11851
11852 commit 4254a8da5851df8c08cdca5c392916e8c105408d
11853 Author: WANG Cong <xiyou.wangcong@gmail.com>
11854 Date: Mon Dec 21 10:55:45 2015 -0800
11855
11856 addrconf: always initialize sysctl table data
11857
11858 When sysctl performs restrict writes, it allows to write from
11859 a middle position of a sysctl file, which requires us to initialize
11860 the table data before calling proc_dostring() for the write case.
11861
11862 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
11863 Reported-by: Sasha Levin <sasha.levin@oracle.com>
11864 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11865 Tested-by: Sasha Levin <sasha.levin@oracle.com>
11866 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11867 Signed-off-by: David S. Miller <davem@davemloft.net>
11868
11869 net/ipv6/addrconf.c | 11 ++++-------
11870 1 files changed, 4 insertions(+), 7 deletions(-)
11871
11872 commit f8002863fb06c363180637046947a78a6ccb3d33
11873 Author: WANG Cong <xiyou.wangcong@gmail.com>
11874 Date: Wed Dec 16 23:39:04 2015 -0800
11875
11876 net: check both type and procotol for tcp sockets
11877
11878 Dmitry reported the following out-of-bound access:
11879
11880 Call Trace:
11881 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
11882 mm/kasan/report.c:294
11883 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
11884 [< inline >] SYSC_setsockopt net/socket.c:1746
11885 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
11886 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
11887 arch/x86/entry/entry_64.S:185
11888
11889 This is because we mistake a raw socket as a tcp socket.
11890 We should check both sk->sk_type and sk->sk_protocol to ensure
11891 it is a tcp socket.
11892
11893 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
11894
11895 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11896 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
11897 Cc: Eric Dumazet <eric.dumazet@gmail.com>
11898 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11899 Acked-by: Willem de Bruijn <willemb@google.com>
11900 Signed-off-by: David S. Miller <davem@davemloft.net>
11901
11902 net/core/skbuff.c | 3 ++-
11903 net/core/sock.c | 3 ++-
11904 2 files changed, 4 insertions(+), 2 deletions(-)
11905
11906 commit bd6b3399804470a4ad8f34229469ca149dceba3d
11907 Author: Colin Ian King <colin.king@canonical.com>
11908 Date: Fri Dec 18 14:22:01 2015 -0800
11909
11910 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
11911
11912 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
11913 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
11914 the setting of ret after the get_proc_task call and incorrectly left it as
11915 -ESRCH. Instead, return 0 when successful.
11916
11917 Example breakage:
11918
11919 echo 0 > /proc/self/coredump_filter
11920 bash: echo: write error: No such process
11921
11922 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
11923 Signed-off-by: Colin Ian King <colin.king@canonical.com>
11924 Acked-by: Kees Cook <keescook@chromium.org>
11925 Cc: <stable@vger.kernel.org> [4.3+]
11926 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
11927 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
11928
11929 fs/proc/base.c | 1 +
11930 1 files changed, 1 insertions(+), 0 deletions(-)
11931
11932 commit b28aca2b99ed08546778355fb9402c503ff9b29e
11933 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
11934 Date: Tue Dec 22 10:23:44 2015 -0700
11935
11936 block: ensure to split after potentially bouncing a bio
11937
11938 blk_queue_bio() does split then bounce, which makes the segment
11939 counting based on pages before bouncing and could go wrong. Move
11940 the split to after bouncing, like we do for blk-mq, and the we
11941 fix the issue of having the bio count for segments be wrong.
11942
11943 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
11944 Cc: stable@vger.kernel.org
11945 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
11946 Signed-off-by: Jens Axboe <axboe@fb.com>
11947
11948 block/blk-core.c | 4 ++--
11949 1 files changed, 2 insertions(+), 2 deletions(-)
11950
11951 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
11952 Merge: f6f63ae ec72fa5
11953 Author: Brad Spengler <spender@grsecurity.net>
11954 Date: Tue Dec 22 19:46:26 2015 -0500
11955
11956 Merge branch 'pax-test' into grsec-test
11957
11958 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
11959 Author: Brad Spengler <spender@grsecurity.net>
11960 Date: Tue Dec 22 19:45:51 2015 -0500
11961
11962 Update to pax-linux-4.3.3-test13.patch:
11963 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
11964 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
11965
11966 arch/arm/mm/fault.c | 2 +-
11967 arch/x86/mm/fault.c | 2 +-
11968 fs/btrfs/extent_map.c | 8 ++++++--
11969 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
11970 4 files changed, 11 insertions(+), 5 deletions(-)
11971
11972 commit f6f63ae154cd45028add1dc41957878060d77fbf
11973 Author: Brad Spengler <spender@grsecurity.net>
11974 Date: Thu Dec 17 18:43:44 2015 -0500
11975
11976 ptrace_has_cap() checks whether the current process should be
11977 treated as having a certain capability for ptrace checks
11978 against another process. Until now, this was equivalent to
11979 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
11980
11981 However, if a root-owned process wants to enter a user
11982 namespace for some reason without knowing who owns it and
11983 therefore can't change to the namespace owner's uid and gid
11984 before entering, as soon as it has entered the namespace,
11985 the namespace owner can attach to it via ptrace and thereby
11986 gain access to its uid and gid.
11987
11988 While it is possible for the entering process to switch to
11989 the uid of a claimed namespace owner before entering,
11990 causing the attempt to enter to fail if the claimed uid is
11991 wrong, this doesn't solve the problem of determining an
11992 appropriate gid.
11993
11994 With this change, the entering process can first enter the
11995 namespace and then safely inspect the namespace's
11996 properties, e.g. through /proc/self/{uid_map,gid_map},
11997 assuming that the namespace owner doesn't have access to
11998 uid 0.
11999 Signed-off-by: Jann Horn <jann@thejh.net>
12000
12001 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
12002 1 files changed, 25 insertions(+), 5 deletions(-)
12003
12004 commit e314f0fb63020f61543b401ff594e953c2c304e5
12005 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
12006 Date: Tue Dec 15 10:46:17 2015 -0800
12007
12008 net: fix uninitialized variable issue
12009
12010 msg_iocb needs to be initialized on the recv/recvfrom path.
12011 Otherwise afalg will wrongly interpret it as an async call.
12012
12013 Cc: stable@vger.kernel.org
12014 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
12015 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
12016 Signed-off-by: David S. Miller <davem@davemloft.net>
12017
12018 net/socket.c | 1 +
12019 1 files changed, 1 insertions(+), 0 deletions(-)
12020
12021 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
12022 Merge: dfa764c 142edcf
12023 Author: Brad Spengler <spender@grsecurity.net>
12024 Date: Wed Dec 16 21:01:17 2015 -0500
12025
12026 Merge branch 'pax-test' into grsec-test
12027
12028 commit 142edcf1005a57fb8887823565cf0bafad2f313c
12029 Author: Brad Spengler <spender@grsecurity.net>
12030 Date: Wed Dec 16 21:00:57 2015 -0500
12031
12032 Update to pax-linux-4.3.3-test12.patch:
12033 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
12034 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
12035
12036 drivers/tty/n_tty.c | 16 ++++++++--------
12037 .../disable_size_overflow_hash.data | 2 ++
12038 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
12039 3 files changed, 12 insertions(+), 12 deletions(-)
12040
12041 commit dfa764cc549892a5bfc1083cac78b99032cae577
12042 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
12043 Date: Tue Dec 15 22:59:12 2015 +0100
12044
12045 ipv6: automatically enable stable privacy mode if stable_secret set
12046
12047 Bjørn reported that while we switch all interfaces to privacy stable mode
12048 when setting the secret, we don't set this mode for new interfaces. This
12049 does not make sense, so change this behaviour.
12050
12051 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
12052 Reported-by: Bjørn Mork <bjorn@mork.no>
12053 Cc: Bjørn Mork <bjorn@mork.no>
12054 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
12055 Signed-off-by: David S. Miller <davem@davemloft.net>
12056
12057 net/ipv6/addrconf.c | 6 ++++++
12058 1 files changed, 6 insertions(+), 0 deletions(-)
12059
12060 commit c2815a1fee03f222273e77c14e43f960da06f35a
12061 Author: Brad Spengler <spender@grsecurity.net>
12062 Date: Wed Dec 16 13:03:38 2015 -0500
12063
12064 Work around upstream limitation on the number of thread info flags causing a compilation error
12065 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
12066
12067 arch/arm/kernel/entry-common.S | 8 ++++++--
12068 1 files changed, 6 insertions(+), 2 deletions(-)
12069
12070 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
12071 Author: Brad Spengler <spender@grsecurity.net>
12072 Date: Tue Dec 15 19:03:41 2015 -0500
12073
12074 Initial import of grsecurity 3.1 for Linux 4.3.3
12075
12076 Documentation/dontdiff | 2 +
12077 Documentation/kernel-parameters.txt | 7 +
12078 Documentation/sysctl/kernel.txt | 15 +
12079 Makefile | 18 +-
12080 arch/alpha/include/asm/cache.h | 4 +-
12081 arch/alpha/kernel/osf_sys.c | 12 +-
12082 arch/arc/Kconfig | 1 +
12083 arch/arm/Kconfig | 1 +
12084 arch/arm/Kconfig.debug | 1 +
12085 arch/arm/include/asm/thread_info.h | 7 +-
12086 arch/arm/kernel/process.c | 4 +-
12087 arch/arm/kernel/ptrace.c | 9 +
12088 arch/arm/kernel/traps.c | 7 +-
12089 arch/arm/mm/Kconfig | 2 +-
12090 arch/arm/mm/fault.c | 40 +-
12091 arch/arm/mm/mmap.c | 8 +-
12092 arch/arm/net/bpf_jit_32.c | 51 +-
12093 arch/arm64/Kconfig.debug | 1 +
12094 arch/avr32/include/asm/cache.h | 4 +-
12095 arch/blackfin/Kconfig.debug | 1 +
12096 arch/blackfin/include/asm/cache.h | 3 +-
12097 arch/cris/include/arch-v10/arch/cache.h | 3 +-
12098 arch/cris/include/arch-v32/arch/cache.h | 3 +-
12099 arch/frv/include/asm/cache.h | 3 +-
12100 arch/frv/mm/elf-fdpic.c | 4 +-
12101 arch/hexagon/include/asm/cache.h | 6 +-
12102 arch/ia64/Kconfig | 1 +
12103 arch/ia64/include/asm/cache.h | 3 +-
12104 arch/ia64/kernel/sys_ia64.c | 2 +
12105 arch/ia64/mm/hugetlbpage.c | 2 +
12106 arch/m32r/include/asm/cache.h | 4 +-
12107 arch/m68k/include/asm/cache.h | 4 +-
12108 arch/metag/mm/hugetlbpage.c | 1 +
12109 arch/microblaze/include/asm/cache.h | 3 +-
12110 arch/mips/Kconfig | 1 +
12111 arch/mips/include/asm/cache.h | 3 +-
12112 arch/mips/include/asm/thread_info.h | 11 +-
12113 arch/mips/kernel/irq.c | 3 +
12114 arch/mips/kernel/ptrace.c | 9 +
12115 arch/mips/mm/mmap.c | 4 +-
12116 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
12117 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
12118 arch/openrisc/include/asm/cache.h | 4 +-
12119 arch/parisc/include/asm/cache.h | 5 +-
12120 arch/parisc/kernel/sys_parisc.c | 4 +
12121 arch/powerpc/Kconfig | 1 +
12122 arch/powerpc/include/asm/cache.h | 4 +-
12123 arch/powerpc/include/asm/thread_info.h | 5 +-
12124 arch/powerpc/kernel/Makefile | 2 +
12125 arch/powerpc/kernel/irq.c | 3 +
12126 arch/powerpc/kernel/process.c | 10 +-
12127 arch/powerpc/kernel/ptrace.c | 14 +
12128 arch/powerpc/kernel/traps.c | 5 +
12129 arch/powerpc/mm/slice.c | 2 +-
12130 arch/s390/Kconfig.debug | 1 +
12131 arch/s390/include/asm/cache.h | 4 +-
12132 arch/score/include/asm/cache.h | 4 +-
12133 arch/sh/include/asm/cache.h | 3 +-
12134 arch/sh/mm/mmap.c | 6 +-
12135 arch/sparc/include/asm/cache.h | 4 +-
12136 arch/sparc/include/asm/pgalloc_64.h | 1 +
12137 arch/sparc/include/asm/thread_info_64.h | 8 +-
12138 arch/sparc/kernel/process_32.c | 6 +-
12139 arch/sparc/kernel/process_64.c | 8 +-
12140 arch/sparc/kernel/ptrace_64.c | 14 +
12141 arch/sparc/kernel/sys_sparc_64.c | 8 +-
12142 arch/sparc/kernel/syscalls.S | 8 +-
12143 arch/sparc/kernel/traps_32.c | 8 +-
12144 arch/sparc/kernel/traps_64.c | 28 +-
12145 arch/sparc/kernel/unaligned_64.c | 2 +-
12146 arch/sparc/mm/fault_64.c | 2 +-
12147 arch/sparc/mm/hugetlbpage.c | 15 +-
12148 arch/tile/Kconfig | 1 +
12149 arch/tile/include/asm/cache.h | 3 +-
12150 arch/tile/mm/hugetlbpage.c | 2 +
12151 arch/um/include/asm/cache.h | 3 +-
12152 arch/unicore32/include/asm/cache.h | 6 +-
12153 arch/x86/Kconfig | 21 +
12154 arch/x86/Kconfig.debug | 2 +
12155 arch/x86/entry/common.c | 14 +
12156 arch/x86/entry/entry_32.S | 2 +-
12157 arch/x86/entry/entry_64.S | 2 +-
12158 arch/x86/ia32/ia32_aout.c | 2 +
12159 arch/x86/include/asm/floppy.h | 20 +-
12160 arch/x86/include/asm/fpu/types.h | 69 +-
12161 arch/x86/include/asm/io.h | 2 +-
12162 arch/x86/include/asm/page.h | 12 +-
12163 arch/x86/include/asm/paravirt_types.h | 23 +-
12164 arch/x86/include/asm/processor.h | 12 +-
12165 arch/x86/include/asm/thread_info.h | 6 +-
12166 arch/x86/include/asm/uaccess.h | 2 +-
12167 arch/x86/kernel/dumpstack.c | 10 +-
12168 arch/x86/kernel/dumpstack_32.c | 2 +-
12169 arch/x86/kernel/dumpstack_64.c | 2 +-
12170 arch/x86/kernel/ioport.c | 13 +
12171 arch/x86/kernel/irq_32.c | 3 +
12172 arch/x86/kernel/irq_64.c | 4 +
12173 arch/x86/kernel/ldt.c | 18 +
12174 arch/x86/kernel/msr.c | 10 +
12175 arch/x86/kernel/ptrace.c | 14 +
12176 arch/x86/kernel/signal.c | 9 +-
12177 arch/x86/kernel/sys_i386_32.c | 9 +-
12178 arch/x86/kernel/sys_x86_64.c | 8 +-
12179 arch/x86/kernel/traps.c | 5 +
12180 arch/x86/kernel/verify_cpu.S | 1 +
12181 arch/x86/kernel/vm86_32.c | 15 +
12182 arch/x86/kvm/svm.c | 14 +-
12183 arch/x86/mm/fault.c | 12 +-
12184 arch/x86/mm/hugetlbpage.c | 15 +-
12185 arch/x86/mm/init.c | 66 +-
12186 arch/x86/mm/init_32.c | 6 +-
12187 arch/x86/net/bpf_jit_comp.c | 4 +
12188 arch/x86/platform/efi/efi_64.c | 2 +-
12189 arch/x86/xen/Kconfig | 1 +
12190 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
12191 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
12192 crypto/ablkcipher.c | 2 +-
12193 crypto/blkcipher.c | 2 +-
12194 crypto/scatterwalk.c | 10 +-
12195 drivers/acpi/acpica/hwxfsleep.c | 11 +-
12196 drivers/acpi/custom_method.c | 4 +
12197 drivers/block/cciss.h | 30 +-
12198 drivers/block/smart1,2.h | 40 +-
12199 drivers/cdrom/cdrom.c | 2 +-
12200 drivers/char/Kconfig | 4 +-
12201 drivers/char/genrtc.c | 1 +
12202 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
12203 drivers/char/mem.c | 17 +
12204 drivers/char/random.c | 5 +-
12205 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
12206 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
12207 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
12208 drivers/crypto/talitos.c | 2 +-
12209 drivers/firewire/ohci.c | 4 +
12210 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
12211 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
12212 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
12213 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
12214 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
12215 drivers/hid/hid-wiimote-debug.c | 2 +-
12216 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
12217 drivers/iommu/Kconfig | 1 +
12218 drivers/iommu/amd_iommu.c | 14 +-
12219 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
12220 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
12221 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
12222 drivers/isdn/hisax/config.c | 2 +-
12223 drivers/isdn/hisax/hfc_pci.c | 2 +-
12224 drivers/isdn/hisax/hfc_sx.c | 2 +-
12225 drivers/isdn/hisax/q931.c | 6 +-
12226 drivers/isdn/i4l/isdn_concap.c | 6 +-
12227 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
12228 drivers/md/bcache/Kconfig | 1 +
12229 drivers/md/raid5.c | 8 +
12230 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
12231 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
12232 drivers/media/platform/vivid/vivid-osd.c | 1 +
12233 drivers/media/radio/radio-cadet.c | 5 +-
12234 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
12235 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
12236 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
12237 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
12238 drivers/message/fusion/mptbase.c | 9 +
12239 drivers/misc/sgi-xp/xp_main.c | 12 +-
12240 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
12241 drivers/net/ppp/pppoe.c | 14 +-
12242 drivers/net/ppp/pptp.c | 6 +
12243 drivers/net/slip/slhc.c | 3 +
12244 drivers/net/wan/lmc/lmc_media.c | 97 +-
12245 drivers/net/wan/x25_asy.c | 6 +-
12246 drivers/net/wan/z85230.c | 24 +-
12247 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
12248 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
12249 drivers/pci/pci-sysfs.c | 2 +-
12250 drivers/pci/proc.c | 9 +
12251 drivers/platform/x86/asus-wmi.c | 12 +
12252 drivers/rtc/rtc-dev.c | 3 +
12253 drivers/scsi/bfa/bfa_fcs.c | 19 +-
12254 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
12255 drivers/scsi/bfa/bfa_modules.h | 12 +-
12256 drivers/scsi/hpsa.h | 40 +-
12257 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
12258 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
12259 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
12260 drivers/target/target_core_sbc.c | 17 +-
12261 drivers/target/target_core_transport.c | 14 +-
12262 drivers/tty/serial/uartlite.c | 4 +-
12263 drivers/tty/sysrq.c | 2 +-
12264 drivers/tty/vt/keyboard.c | 22 +-
12265 drivers/uio/uio.c | 6 +-
12266 drivers/usb/core/hub.c | 5 +
12267 drivers/usb/gadget/function/f_uac1.c | 1 +
12268 drivers/usb/gadget/function/u_uac1.c | 1 +
12269 drivers/usb/host/hwa-hc.c | 9 +-
12270 drivers/usb/usbip/vhci_sysfs.c | 2 +-
12271 drivers/video/fbdev/arcfb.c | 2 +-
12272 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
12273 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
12274 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
12275 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
12276 drivers/xen/xenfs/xenstored.c | 5 +
12277 firmware/Makefile | 2 +
12278 firmware/WHENCE | 20 +-
12279 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
12280 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
12281 fs/9p/vfs_inode.c | 4 +-
12282 fs/attr.c | 1 +
12283 fs/autofs4/waitq.c | 9 +
12284 fs/binfmt_aout.c | 7 +
12285 fs/binfmt_elf.c | 50 +-
12286 fs/compat.c | 20 +-
12287 fs/coredump.c | 17 +-
12288 fs/dcache.c | 3 +
12289 fs/debugfs/inode.c | 11 +-
12290 fs/exec.c | 219 +-
12291 fs/ext2/balloc.c | 4 +-
12292 fs/ext2/super.c | 8 +-
12293 fs/ext4/balloc.c | 4 +-
12294 fs/fcntl.c | 4 +
12295 fs/fhandle.c | 3 +-
12296 fs/file.c | 4 +
12297 fs/filesystems.c | 4 +
12298 fs/fs_struct.c | 20 +-
12299 fs/hugetlbfs/inode.c | 5 +-
12300 fs/inode.c | 8 +-
12301 fs/kernfs/dir.c | 6 +
12302 fs/mount.h | 4 +-
12303 fs/namei.c | 286 +-
12304 fs/namespace.c | 24 +
12305 fs/nfsd/nfscache.c | 2 +-
12306 fs/open.c | 38 +
12307 fs/overlayfs/inode.c | 11 +-
12308 fs/overlayfs/super.c | 6 +-
12309 fs/pipe.c | 2 +-
12310 fs/posix_acl.c | 15 +-
12311 fs/proc/Kconfig | 10 +-
12312 fs/proc/array.c | 69 +-
12313 fs/proc/base.c | 186 +-
12314 fs/proc/cmdline.c | 4 +
12315 fs/proc/devices.c | 4 +
12316 fs/proc/fd.c | 17 +-
12317 fs/proc/generic.c | 64 +
12318 fs/proc/inode.c | 17 +
12319 fs/proc/internal.h | 11 +-
12320 fs/proc/interrupts.c | 4 +
12321 fs/proc/kcore.c | 3 +
12322 fs/proc/meminfo.c | 7 +-
12323 fs/proc/namespaces.c | 4 +-
12324 fs/proc/proc_net.c | 31 +
12325 fs/proc/proc_sysctl.c | 52 +-
12326 fs/proc/root.c | 8 +
12327 fs/proc/stat.c | 69 +-
12328 fs/proc/task_mmu.c | 66 +-
12329 fs/readdir.c | 19 +
12330 fs/reiserfs/item_ops.c | 24 +-
12331 fs/reiserfs/super.c | 4 +
12332 fs/select.c | 2 +
12333 fs/seq_file.c | 30 +-
12334 fs/splice.c | 8 +
12335 fs/stat.c | 20 +-
12336 fs/sysfs/dir.c | 30 +-
12337 fs/sysv/inode.c | 11 +-
12338 fs/utimes.c | 7 +
12339 fs/xattr.c | 26 +-
12340 grsecurity/Kconfig | 1182 ++++
12341 grsecurity/Makefile | 54 +
12342 grsecurity/gracl.c | 2757 +++++++++
12343 grsecurity/gracl_alloc.c | 105 +
12344 grsecurity/gracl_cap.c | 127 +
12345 grsecurity/gracl_compat.c | 269 +
12346 grsecurity/gracl_fs.c | 448 ++
12347 grsecurity/gracl_ip.c | 386 ++
12348 grsecurity/gracl_learn.c | 207 +
12349 grsecurity/gracl_policy.c | 1786 ++++++
12350 grsecurity/gracl_res.c | 68 +
12351 grsecurity/gracl_segv.c | 304 +
12352 grsecurity/gracl_shm.c | 40 +
12353 grsecurity/grsec_chdir.c | 19 +
12354 grsecurity/grsec_chroot.c | 467 ++
12355 grsecurity/grsec_disabled.c | 445 ++
12356 grsecurity/grsec_exec.c | 189 +
12357 grsecurity/grsec_fifo.c | 26 +
12358 grsecurity/grsec_fork.c | 23 +
12359 grsecurity/grsec_init.c | 290 +
12360 grsecurity/grsec_ipc.c | 48 +
12361 grsecurity/grsec_link.c | 65 +
12362 grsecurity/grsec_log.c | 340 +
12363 grsecurity/grsec_mem.c | 48 +
12364 grsecurity/grsec_mount.c | 65 +
12365 grsecurity/grsec_pax.c | 47 +
12366 grsecurity/grsec_proc.c | 20 +
12367 grsecurity/grsec_ptrace.c | 30 +
12368 grsecurity/grsec_sig.c | 236 +
12369 grsecurity/grsec_sock.c | 244 +
12370 grsecurity/grsec_sysctl.c | 488 ++
12371 grsecurity/grsec_time.c | 16 +
12372 grsecurity/grsec_tpe.c | 78 +
12373 grsecurity/grsec_usb.c | 15 +
12374 grsecurity/grsum.c | 64 +
12375 include/linux/binfmts.h | 5 +-
12376 include/linux/bitops.h | 2 +-
12377 include/linux/capability.h | 13 +
12378 include/linux/compiler-gcc.h | 5 +
12379 include/linux/compiler.h | 8 +
12380 include/linux/cred.h | 8 +-
12381 include/linux/dcache.h | 5 +-
12382 include/linux/fs.h | 24 +-
12383 include/linux/fs_struct.h | 2 +-
12384 include/linux/fsnotify.h | 6 +
12385 include/linux/gracl.h | 342 +
12386 include/linux/gracl_compat.h | 156 +
12387 include/linux/gralloc.h | 9 +
12388 include/linux/grdefs.h | 140 +
12389 include/linux/grinternal.h | 230 +
12390 include/linux/grmsg.h | 118 +
12391 include/linux/grsecurity.h | 255 +
12392 include/linux/grsock.h | 19 +
12393 include/linux/ipc.h | 2 +-
12394 include/linux/ipc_namespace.h | 2 +-
12395 include/linux/kallsyms.h | 18 +-
12396 include/linux/kmod.h | 5 +
12397 include/linux/kobject.h | 2 +-
12398 include/linux/lsm_hooks.h | 4 +-
12399 include/linux/mm.h | 12 +
12400 include/linux/mm_types.h | 4 +-
12401 include/linux/module.h | 5 +-
12402 include/linux/mount.h | 2 +-
12403 include/linux/msg.h | 2 +-
12404 include/linux/netfilter/xt_gradm.h | 9 +
12405 include/linux/path.h | 4 +-
12406 include/linux/perf_event.h | 13 +-
12407 include/linux/pid_namespace.h | 2 +-
12408 include/linux/printk.h | 2 +-
12409 include/linux/proc_fs.h | 22 +-
12410 include/linux/proc_ns.h | 2 +-
12411 include/linux/ptrace.h | 24 +-
12412 include/linux/random.h | 2 +-
12413 include/linux/rbtree_augmented.h | 4 +-
12414 include/linux/scatterlist.h | 12 +-
12415 include/linux/sched.h | 114 +-
12416 include/linux/security.h | 1 +
12417 include/linux/sem.h | 2 +-
12418 include/linux/seq_file.h | 5 +
12419 include/linux/shm.h | 6 +-
12420 include/linux/skbuff.h | 3 +
12421 include/linux/slab.h | 9 -
12422 include/linux/sysctl.h | 8 +-
12423 include/linux/thread_info.h | 6 +-
12424 include/linux/tty.h | 2 +-
12425 include/linux/tty_driver.h | 4 +-
12426 include/linux/uidgid.h | 5 +
12427 include/linux/user_namespace.h | 2 +-
12428 include/linux/utsname.h | 2 +-
12429 include/linux/vermagic.h | 16 +-
12430 include/linux/vmalloc.h | 20 +-
12431 include/net/af_unix.h | 2 +-
12432 include/net/dst.h | 33 +
12433 include/net/ip.h | 2 +-
12434 include/net/neighbour.h | 2 +-
12435 include/net/net_namespace.h | 2 +-
12436 include/net/sock.h | 4 +-
12437 include/target/target_core_base.h | 2 +-
12438 include/trace/events/fs.h | 53 +
12439 include/uapi/linux/personality.h | 1 +
12440 init/Kconfig | 4 +-
12441 init/main.c | 35 +-
12442 ipc/mqueue.c | 1 +
12443 ipc/msg.c | 3 +-
12444 ipc/sem.c | 3 +-
12445 ipc/shm.c | 26 +-
12446 ipc/util.c | 6 +
12447 kernel/auditsc.c | 2 +-
12448 kernel/bpf/syscall.c | 8 +-
12449 kernel/capability.c | 41 +-
12450 kernel/cgroup.c | 5 +-
12451 kernel/compat.c | 1 +
12452 kernel/configs.c | 11 +
12453 kernel/cred.c | 112 +-
12454 kernel/events/core.c | 16 +-
12455 kernel/exit.c | 10 +-
12456 kernel/fork.c | 86 +-
12457 kernel/futex.c | 6 +-
12458 kernel/futex_compat.c | 2 +-
12459 kernel/kallsyms.c | 9 +
12460 kernel/kcmp.c | 8 +-
12461 kernel/kexec_core.c | 2 +-
12462 kernel/kmod.c | 95 +-
12463 kernel/kprobes.c | 7 +-
12464 kernel/ksysfs.c | 2 +
12465 kernel/locking/lockdep_proc.c | 10 +-
12466 kernel/module.c | 108 +-
12467 kernel/panic.c | 4 +-
12468 kernel/pid.c | 23 +-
12469 kernel/power/Kconfig | 2 +
12470 kernel/printk/printk.c | 20 +-
12471 kernel/ptrace.c | 56 +-
12472 kernel/resource.c | 10 +
12473 kernel/sched/core.c | 11 +-
12474 kernel/signal.c | 37 +-
12475 kernel/sys.c | 64 +-
12476 kernel/sysctl.c | 172 +-
12477 kernel/taskstats.c | 6 +
12478 kernel/time/posix-timers.c | 8 +
12479 kernel/time/time.c | 5 +
12480 kernel/time/timekeeping.c | 3 +
12481 kernel/time/timer_list.c | 13 +-
12482 kernel/time/timer_stats.c | 10 +-
12483 kernel/trace/Kconfig | 2 +
12484 kernel/trace/trace_syscalls.c | 8 +
12485 kernel/user_namespace.c | 15 +
12486 lib/Kconfig.debug | 13 +-
12487 lib/Kconfig.kasan | 2 +-
12488 lib/is_single_threaded.c | 3 +
12489 lib/list_debug.c | 65 +-
12490 lib/nlattr.c | 2 +
12491 lib/rbtree.c | 4 +-
12492 lib/vsprintf.c | 39 +-
12493 localversion-grsec | 1 +
12494 mm/Kconfig | 8 +-
12495 mm/Kconfig.debug | 1 +
12496 mm/filemap.c | 1 +
12497 mm/kmemleak.c | 4 +-
12498 mm/memory.c | 2 +-
12499 mm/mempolicy.c | 12 +-
12500 mm/migrate.c | 3 +-
12501 mm/mlock.c | 6 +-
12502 mm/mmap.c | 93 +-
12503 mm/mprotect.c | 8 +
12504 mm/oom_kill.c | 28 +-
12505 mm/page_alloc.c | 2 +-
12506 mm/process_vm_access.c | 8 +-
12507 mm/shmem.c | 36 +-
12508 mm/slab.c | 14 +-
12509 mm/slab_common.c | 2 +-
12510 mm/slob.c | 12 +
12511 mm/slub.c | 33 +-
12512 mm/util.c | 3 +
12513 mm/vmalloc.c | 129 +-
12514 mm/vmstat.c | 29 +-
12515 net/appletalk/atalk_proc.c | 2 +-
12516 net/atm/lec.c | 6 +-
12517 net/atm/mpoa_caches.c | 42 +-
12518 net/bluetooth/sco.c | 3 +
12519 net/can/bcm.c | 2 +-
12520 net/can/proc.c | 2 +-
12521 net/core/dev_ioctl.c | 7 +-
12522 net/core/filter.c | 8 +-
12523 net/core/net-procfs.c | 17 +-
12524 net/core/pktgen.c | 2 +-
12525 net/core/sock.c | 3 +-
12526 net/core/sysctl_net_core.c | 2 +-
12527 net/decnet/dn_dev.c | 2 +-
12528 net/ipv4/devinet.c | 6 +-
12529 net/ipv4/inet_hashtables.c | 4 +
12530 net/ipv4/ip_input.c | 7 +
12531 net/ipv4/ip_sockglue.c | 3 +-
12532 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
12533 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
12534 net/ipv4/route.c | 6 +-
12535 net/ipv4/tcp_input.c | 4 +-
12536 net/ipv4/tcp_ipv4.c | 29 +-
12537 net/ipv4/tcp_minisocks.c | 9 +-
12538 net/ipv4/tcp_timer.c | 11 +
12539 net/ipv4/udp.c | 24 +
12540 net/ipv6/addrconf.c | 13 +-
12541 net/ipv6/proc.c | 2 +-
12542 net/ipv6/tcp_ipv6.c | 26 +-
12543 net/ipv6/udp.c | 7 +
12544 net/ipx/ipx_proc.c | 2 +-
12545 net/irda/irproc.c | 2 +-
12546 net/llc/llc_proc.c | 2 +-
12547 net/netfilter/Kconfig | 10 +
12548 net/netfilter/Makefile | 1 +
12549 net/netfilter/nf_conntrack_core.c | 8 +
12550 net/netfilter/xt_gradm.c | 51 +
12551 net/netfilter/xt_hashlimit.c | 4 +-
12552 net/netfilter/xt_recent.c | 2 +-
12553 net/sched/sch_api.c | 2 +-
12554 net/sctp/socket.c | 4 +-
12555 net/socket.c | 75 +-
12556 net/sunrpc/Kconfig | 1 +
12557 net/sunrpc/cache.c | 2 +-
12558 net/sunrpc/stats.c | 2 +-
12559 net/sysctl_net.c | 2 +-
12560 net/unix/af_unix.c | 52 +-
12561 net/vmw_vsock/vmci_transport_notify.c | 30 +-
12562 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
12563 net/x25/sysctl_net_x25.c | 2 +-
12564 net/x25/x25_proc.c | 2 +-
12565 scripts/package/Makefile | 2 +-
12566 scripts/package/mkspec | 41 +-
12567 security/Kconfig | 369 +-
12568 security/apparmor/file.c | 4 +-
12569 security/apparmor/lsm.c | 8 +-
12570 security/commoncap.c | 36 +-
12571 security/min_addr.c | 2 +
12572 security/smack/smack_lsm.c | 8 +-
12573 security/tomoyo/file.c | 12 +-
12574 security/tomoyo/mount.c | 4 +
12575 security/tomoyo/tomoyo.c | 20 +-
12576 security/yama/Kconfig | 2 +-
12577 security/yama/yama_lsm.c | 4 +-
12578 sound/synth/emux/emux_seq.c | 14 +-
12579 sound/usb/line6/driver.c | 40 +-
12580 sound/usb/line6/toneport.c | 12 +-
12581 tools/gcc/.gitignore | 1 +
12582 tools/gcc/Makefile | 12 +
12583 tools/gcc/gen-random-seed.sh | 8 +
12584 tools/gcc/randomize_layout_plugin.c | 930 +++
12585 tools/gcc/size_overflow_plugin/.gitignore | 1 +
12586 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
12587 511 files changed, 32631 insertions(+), 3196 deletions(-)
12588
12589 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
12590 Author: Brad Spengler <spender@grsecurity.net>
12591 Date: Tue Dec 15 14:31:49 2015 -0500
12592
12593 Update to pax-linux-4.3.3-test11.patch:
12594 - fixed a few compile regressions with the recent plugin changes, reported by spender
12595 - updated the size overflow hash table
12596
12597 tools/gcc/latent_entropy_plugin.c | 2 +-
12598 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
12599 tools/gcc/stackleak_plugin.c | 2 +-
12600 tools/gcc/structleak_plugin.c | 6 +--
12601 4 files changed, 60 insertions(+), 16 deletions(-)
12602
12603 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
12604 Author: Brad Spengler <spender@grsecurity.net>
12605 Date: Tue Dec 15 11:50:24 2015 -0500
12606
12607 Apply structleak ICE fix for gcc < 4.9
12608
12609 tools/gcc/structleak_plugin.c | 4 ++++
12610 1 files changed, 4 insertions(+), 0 deletions(-)
12611
12612 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
12613 Author: Brad Spengler <spender@grsecurity.net>
12614 Date: Tue Dec 15 07:57:06 2015 -0500
12615
12616 Update to pax-linux-4.3.1-test10.patch:
12617 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
12618 - Emese regenerated the size overflow hash tables for 4.3
12619 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
12620 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
12621
12622 arch/x86/entry/entry_64.S | 2 +-
12623 arch/x86/entry/entry_64_compat.S | 15 +-
12624 scripts/package/builddeb | 2 +-
12625 tools/gcc/initify_plugin.c | 11 +-
12626 tools/gcc/latent_entropy_plugin.c | 20 +-
12627 .../disable_size_overflow_hash.data | 4 +
12628 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
12629 tools/gcc/stackleak_plugin.c | 26 +-
12630 tools/gcc/structleak_plugin.c | 21 +-
12631 9 files changed, 3079 insertions(+), 2367 deletions(-)
12632
12633 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
12634 Merge: b5847e6 3548341
12635 Author: Brad Spengler <spender@grsecurity.net>
12636 Date: Tue Dec 15 07:47:56 2015 -0500
12637
12638 Merge branch 'linux-4.3.y' into pax-4_3
12639
12640 Conflicts:
12641 net/unix/af_unix.c
12642
12643 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
12644 Author: Brad Spengler <spender@grsecurity.net>
12645 Date: Wed Dec 9 23:11:36 2015 -0500
12646
12647 Update to pax-linux-4.3.1-test9.patch:
12648 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
12649 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
12650 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
12651 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
12652 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
12653 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
12654 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
12655
12656 Makefile | 6 +
12657 arch/x86/include/asm/compat.h | 4 +
12658 arch/x86/include/asm/dma.h | 2 +
12659 arch/x86/include/asm/pmem.h | 2 +-
12660 arch/x86/include/asm/uaccess.h | 20 +-
12661 arch/x86/kernel/apic/vector.c | 6 +-
12662 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
12663 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
12664 arch/x86/kernel/head_64.S | 1 -
12665 arch/x86/kvm/i8259.c | 10 +-
12666 arch/x86/kvm/ioapic.c | 2 +
12667 arch/x86/kvm/x86.c | 2 +
12668 arch/x86/lib/usercopy_64.c | 2 +-
12669 arch/x86/mm/mpx.c | 4 +-
12670 arch/x86/mm/pageattr.c | 7 +
12671 drivers/base/devres.c | 4 +-
12672 drivers/base/power/runtime.c | 6 +-
12673 drivers/base/regmap/regmap.c | 4 +-
12674 drivers/block/drbd/drbd_receiver.c | 4 +-
12675 drivers/block/drbd/drbd_worker.c | 6 +-
12676 drivers/char/virtio_console.c | 6 +-
12677 drivers/md/dm.c | 12 +-
12678 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
12679 drivers/net/macvtap.c | 4 +-
12680 drivers/video/fbdev/core/fbmem.c | 10 +-
12681 fs/compat.c | 3 +-
12682 fs/coredump.c | 2 +-
12683 fs/dcache.c | 13 +-
12684 fs/fhandle.c | 2 +-
12685 fs/file.c | 14 +-
12686 fs/fs-writeback.c | 11 +-
12687 fs/overlayfs/copy_up.c | 2 +-
12688 fs/readdir.c | 3 +-
12689 fs/super.c | 3 +-
12690 include/linux/compiler.h | 36 ++-
12691 include/linux/rcupdate.h | 8 +
12692 include/linux/sched.h | 4 +-
12693 include/linux/seqlock.h | 10 +
12694 include/linux/spinlock.h | 17 +-
12695 include/linux/srcu.h | 5 +-
12696 include/linux/syscalls.h | 2 +-
12697 include/linux/writeback.h | 3 +-
12698 include/uapi/linux/swab.h | 6 +-
12699 ipc/ipc_sysctl.c | 6 +
12700 kernel/exit.c | 25 +-
12701 kernel/resource.c | 4 +-
12702 kernel/signal.c | 12 +-
12703 kernel/user.c | 2 +-
12704 kernel/workqueue.c | 6 +-
12705 lib/rhashtable.c | 4 +-
12706 net/compat.c | 2 +-
12707 net/ipv4/xfrm4_mode_transport.c | 2 +-
12708 security/keys/internal.h | 8 +-
12709 security/keys/keyring.c | 4 -
12710 sound/core/seq/seq_clientmgr.c | 8 +-
12711 sound/core/seq/seq_compat.c | 2 +-
12712 sound/core/seq/seq_memory.c | 6 +-
12713 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
12714 tools/gcc/gcc-common.h | 1 +
12715 tools/gcc/initify_plugin.c | 33 ++-
12716 .../disable_size_overflow_hash.data | 1 +
12717 .../size_overflow_plugin/size_overflow_hash.data | 1 -
12718 62 files changed, 708 insertions(+), 140 deletions(-)
12719
12720 commit f2634c2f6995f4231616f24ed016f890c701f939
12721 Merge: 1241bff 5f8b236
12722 Author: Brad Spengler <spender@grsecurity.net>
12723 Date: Wed Dec 9 21:50:47 2015 -0500
12724
12725 Merge branch 'linux-4.3.y' into pax-4_3
12726
12727 Conflicts:
12728 arch/x86/kernel/fpu/xstate.c
12729 arch/x86/kernel/head_64.S
12730
12731 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
12732 Author: Brad Spengler <spender@grsecurity.net>
12733 Date: Sun Dec 6 08:44:56 2015 -0500
12734
12735 Update to pax-linux-4.3-test8.patch:
12736 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
12737 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
12738 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
12739 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
12740
12741 Makefile | 5 +++
12742 drivers/md/md.c | 5 ++-
12743 drivers/md/raid1.c | 2 +-
12744 fs/proc/task_mmu.c | 3 ++
12745 .../disable_size_overflow_hash.data | 4 ++-
12746 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
12747 .../size_overflow_plugin/size_overflow_hash.data | 2 -
12748 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
12749 8 files changed, 43 insertions(+), 12 deletions(-)
12750
12751 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
12752 Author: Brad Spengler <spender@grsecurity.net>
12753 Date: Fri Dec 4 14:24:12 2015 -0500
12754
12755 Initial import of pax-linux-4.3-test7.patch
12756
12757 Documentation/dontdiff | 47 +-
12758 Documentation/kbuild/makefiles.txt | 39 +-
12759 Documentation/kernel-parameters.txt | 28 +
12760 Makefile | 108 +-
12761 arch/alpha/include/asm/atomic.h | 10 +
12762 arch/alpha/include/asm/elf.h | 7 +
12763 arch/alpha/include/asm/pgalloc.h | 6 +
12764 arch/alpha/include/asm/pgtable.h | 11 +
12765 arch/alpha/kernel/module.c | 2 +-
12766 arch/alpha/kernel/osf_sys.c | 8 +-
12767 arch/alpha/mm/fault.c | 141 +-
12768 arch/arm/Kconfig | 2 +-
12769 arch/arm/include/asm/atomic.h | 320 +-
12770 arch/arm/include/asm/cache.h | 5 +-
12771 arch/arm/include/asm/cacheflush.h | 2 +-
12772 arch/arm/include/asm/checksum.h | 14 +-
12773 arch/arm/include/asm/cmpxchg.h | 4 +
12774 arch/arm/include/asm/cpuidle.h | 2 +-
12775 arch/arm/include/asm/domain.h | 22 +-
12776 arch/arm/include/asm/elf.h | 9 +-
12777 arch/arm/include/asm/fncpy.h | 2 +
12778 arch/arm/include/asm/futex.h | 10 +
12779 arch/arm/include/asm/kmap_types.h | 2 +-
12780 arch/arm/include/asm/mach/dma.h | 2 +-
12781 arch/arm/include/asm/mach/map.h | 16 +-
12782 arch/arm/include/asm/outercache.h | 2 +-
12783 arch/arm/include/asm/page.h | 3 +-
12784 arch/arm/include/asm/pgalloc.h | 20 +
12785 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
12786 arch/arm/include/asm/pgtable-2level.h | 3 +
12787 arch/arm/include/asm/pgtable-3level.h | 3 +
12788 arch/arm/include/asm/pgtable.h | 54 +-
12789 arch/arm/include/asm/smp.h | 2 +-
12790 arch/arm/include/asm/tls.h | 3 +
12791 arch/arm/include/asm/uaccess.h | 79 +-
12792 arch/arm/include/uapi/asm/ptrace.h | 2 +-
12793 arch/arm/kernel/armksyms.c | 2 +-
12794 arch/arm/kernel/cpuidle.c | 2 +-
12795 arch/arm/kernel/entry-armv.S | 109 +-
12796 arch/arm/kernel/entry-common.S | 40 +-
12797 arch/arm/kernel/entry-header.S | 55 +
12798 arch/arm/kernel/fiq.c | 3 +
12799 arch/arm/kernel/module-plts.c | 7 +-
12800 arch/arm/kernel/module.c | 38 +-
12801 arch/arm/kernel/patch.c | 2 +
12802 arch/arm/kernel/process.c | 90 +-
12803 arch/arm/kernel/reboot.c | 1 +
12804 arch/arm/kernel/setup.c | 20 +-
12805 arch/arm/kernel/signal.c | 35 +-
12806 arch/arm/kernel/smp.c | 2 +-
12807 arch/arm/kernel/tcm.c | 4 +-
12808 arch/arm/kernel/vmlinux.lds.S | 6 +-
12809 arch/arm/kvm/arm.c | 8 +-
12810 arch/arm/lib/copy_page.S | 1 +
12811 arch/arm/lib/csumpartialcopyuser.S | 4 +-
12812 arch/arm/lib/delay.c | 2 +-
12813 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
12814 arch/arm/mach-exynos/suspend.c | 6 +-
12815 arch/arm/mach-mvebu/coherency.c | 4 +-
12816 arch/arm/mach-omap2/board-n8x0.c | 2 +-
12817 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
12818 arch/arm/mach-omap2/omap-smp.c | 1 +
12819 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
12820 arch/arm/mach-omap2/omap_device.c | 4 +-
12821 arch/arm/mach-omap2/omap_device.h | 4 +-
12822 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
12823 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
12824 arch/arm/mach-omap2/wd_timer.c | 6 +-
12825 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
12826 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
12827 arch/arm/mach-tegra/irq.c | 1 +
12828 arch/arm/mach-ux500/pm.c | 1 +
12829 arch/arm/mach-zynq/platsmp.c | 1 +
12830 arch/arm/mm/Kconfig | 6 +-
12831 arch/arm/mm/alignment.c | 8 +
12832 arch/arm/mm/cache-l2x0.c | 2 +-
12833 arch/arm/mm/context.c | 10 +-
12834 arch/arm/mm/fault.c | 146 +
12835 arch/arm/mm/fault.h | 12 +
12836 arch/arm/mm/init.c | 39 +
12837 arch/arm/mm/ioremap.c | 4 +-
12838 arch/arm/mm/mmap.c | 30 +-
12839 arch/arm/mm/mmu.c | 162 +-
12840 arch/arm/net/bpf_jit_32.c | 3 +
12841 arch/arm/plat-iop/setup.c | 2 +-
12842 arch/arm/plat-omap/sram.c | 2 +
12843 arch/arm64/include/asm/atomic.h | 10 +
12844 arch/arm64/include/asm/percpu.h | 8 +-
12845 arch/arm64/include/asm/pgalloc.h | 5 +
12846 arch/arm64/include/asm/uaccess.h | 1 +
12847 arch/arm64/mm/dma-mapping.c | 2 +-
12848 arch/avr32/include/asm/elf.h | 8 +-
12849 arch/avr32/include/asm/kmap_types.h | 4 +-
12850 arch/avr32/mm/fault.c | 27 +
12851 arch/frv/include/asm/atomic.h | 10 +
12852 arch/frv/include/asm/kmap_types.h | 2 +-
12853 arch/frv/mm/elf-fdpic.c | 3 +-
12854 arch/ia64/Makefile | 1 +
12855 arch/ia64/include/asm/atomic.h | 10 +
12856 arch/ia64/include/asm/elf.h | 7 +
12857 arch/ia64/include/asm/pgalloc.h | 12 +
12858 arch/ia64/include/asm/pgtable.h | 13 +-
12859 arch/ia64/include/asm/spinlock.h | 2 +-
12860 arch/ia64/include/asm/uaccess.h | 27 +-
12861 arch/ia64/kernel/module.c | 45 +-
12862 arch/ia64/kernel/palinfo.c | 2 +-
12863 arch/ia64/kernel/sys_ia64.c | 7 +
12864 arch/ia64/kernel/vmlinux.lds.S | 2 +-
12865 arch/ia64/mm/fault.c | 32 +-
12866 arch/ia64/mm/init.c | 15 +-
12867 arch/m32r/lib/usercopy.c | 6 +
12868 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
12869 arch/mips/include/asm/atomic.h | 368 +-
12870 arch/mips/include/asm/elf.h | 7 +
12871 arch/mips/include/asm/exec.h | 2 +-
12872 arch/mips/include/asm/hw_irq.h | 2 +-
12873 arch/mips/include/asm/local.h | 57 +
12874 arch/mips/include/asm/page.h | 2 +-
12875 arch/mips/include/asm/pgalloc.h | 5 +
12876 arch/mips/include/asm/pgtable.h | 3 +
12877 arch/mips/include/asm/uaccess.h | 1 +
12878 arch/mips/kernel/binfmt_elfn32.c | 7 +
12879 arch/mips/kernel/binfmt_elfo32.c | 7 +
12880 arch/mips/kernel/irq-gt641xx.c | 2 +-
12881 arch/mips/kernel/irq.c | 6 +-
12882 arch/mips/kernel/pm-cps.c | 2 +-
12883 arch/mips/kernel/process.c | 12 -
12884 arch/mips/kernel/sync-r4k.c | 24 +-
12885 arch/mips/kernel/traps.c | 13 +-
12886 arch/mips/mm/fault.c | 25 +
12887 arch/mips/mm/mmap.c | 51 +-
12888 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
12889 arch/mips/sni/rm200.c | 2 +-
12890 arch/mips/vr41xx/common/icu.c | 2 +-
12891 arch/mips/vr41xx/common/irq.c | 4 +-
12892 arch/parisc/include/asm/atomic.h | 10 +
12893 arch/parisc/include/asm/elf.h | 7 +
12894 arch/parisc/include/asm/pgalloc.h | 6 +
12895 arch/parisc/include/asm/pgtable.h | 11 +
12896 arch/parisc/include/asm/uaccess.h | 4 +-
12897 arch/parisc/kernel/module.c | 50 +-
12898 arch/parisc/kernel/sys_parisc.c | 15 +
12899 arch/parisc/kernel/traps.c | 4 +-
12900 arch/parisc/mm/fault.c | 140 +-
12901 arch/powerpc/include/asm/atomic.h | 329 +-
12902 arch/powerpc/include/asm/elf.h | 12 +
12903 arch/powerpc/include/asm/exec.h | 2 +-
12904 arch/powerpc/include/asm/kmap_types.h | 2 +-
12905 arch/powerpc/include/asm/local.h | 46 +
12906 arch/powerpc/include/asm/mman.h | 2 +-
12907 arch/powerpc/include/asm/page.h | 8 +-
12908 arch/powerpc/include/asm/page_64.h | 7 +-
12909 arch/powerpc/include/asm/pgalloc-64.h | 7 +
12910 arch/powerpc/include/asm/pgtable.h | 1 +
12911 arch/powerpc/include/asm/pte-hash32.h | 1 +
12912 arch/powerpc/include/asm/reg.h | 1 +
12913 arch/powerpc/include/asm/smp.h | 2 +-
12914 arch/powerpc/include/asm/spinlock.h | 42 +-
12915 arch/powerpc/include/asm/uaccess.h | 141 +-
12916 arch/powerpc/kernel/Makefile | 5 +
12917 arch/powerpc/kernel/exceptions-64e.S | 4 +-
12918 arch/powerpc/kernel/exceptions-64s.S | 2 +-
12919 arch/powerpc/kernel/module_32.c | 15 +-
12920 arch/powerpc/kernel/process.c | 46 -
12921 arch/powerpc/kernel/signal_32.c | 2 +-
12922 arch/powerpc/kernel/signal_64.c | 2 +-
12923 arch/powerpc/kernel/traps.c | 21 +
12924 arch/powerpc/kernel/vdso.c | 5 +-
12925 arch/powerpc/lib/usercopy_64.c | 18 -
12926 arch/powerpc/mm/fault.c | 56 +-
12927 arch/powerpc/mm/mmap.c | 16 +
12928 arch/powerpc/mm/slice.c | 13 +-
12929 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
12930 arch/s390/include/asm/atomic.h | 10 +
12931 arch/s390/include/asm/elf.h | 7 +
12932 arch/s390/include/asm/exec.h | 2 +-
12933 arch/s390/include/asm/uaccess.h | 13 +-
12934 arch/s390/kernel/module.c | 22 +-
12935 arch/s390/kernel/process.c | 24 -
12936 arch/s390/mm/mmap.c | 16 +
12937 arch/score/include/asm/exec.h | 2 +-
12938 arch/score/kernel/process.c | 5 -
12939 arch/sh/mm/mmap.c | 22 +-
12940 arch/sparc/include/asm/atomic_64.h | 110 +-
12941 arch/sparc/include/asm/cache.h | 2 +-
12942 arch/sparc/include/asm/elf_32.h | 7 +
12943 arch/sparc/include/asm/elf_64.h | 7 +
12944 arch/sparc/include/asm/pgalloc_32.h | 1 +
12945 arch/sparc/include/asm/pgalloc_64.h | 1 +
12946 arch/sparc/include/asm/pgtable.h | 4 +
12947 arch/sparc/include/asm/pgtable_32.h | 15 +-
12948 arch/sparc/include/asm/pgtsrmmu.h | 5 +
12949 arch/sparc/include/asm/setup.h | 4 +-
12950 arch/sparc/include/asm/spinlock_64.h | 35 +-
12951 arch/sparc/include/asm/thread_info_32.h | 1 +
12952 arch/sparc/include/asm/thread_info_64.h | 2 +
12953 arch/sparc/include/asm/uaccess.h | 1 +
12954 arch/sparc/include/asm/uaccess_32.h | 28 +-
12955 arch/sparc/include/asm/uaccess_64.h | 24 +-
12956 arch/sparc/kernel/Makefile | 2 +-
12957 arch/sparc/kernel/prom_common.c | 2 +-
12958 arch/sparc/kernel/smp_64.c | 8 +-
12959 arch/sparc/kernel/sys_sparc_32.c | 2 +-
12960 arch/sparc/kernel/sys_sparc_64.c | 52 +-
12961 arch/sparc/kernel/traps_64.c | 27 +-
12962 arch/sparc/lib/Makefile | 2 +-
12963 arch/sparc/lib/atomic_64.S | 57 +-
12964 arch/sparc/lib/ksyms.c | 6 +-
12965 arch/sparc/mm/Makefile | 2 +-
12966 arch/sparc/mm/fault_32.c | 292 +
12967 arch/sparc/mm/fault_64.c | 486 +
12968 arch/sparc/mm/hugetlbpage.c | 22 +-
12969 arch/sparc/mm/init_64.c | 10 +-
12970 arch/tile/include/asm/atomic_64.h | 10 +
12971 arch/tile/include/asm/uaccess.h | 4 +-
12972 arch/um/Makefile | 4 +
12973 arch/um/include/asm/kmap_types.h | 2 +-
12974 arch/um/include/asm/page.h | 3 +
12975 arch/um/include/asm/pgtable-3level.h | 1 +
12976 arch/um/kernel/process.c | 16 -
12977 arch/x86/Kconfig | 15 +-
12978 arch/x86/Kconfig.cpu | 6 +-
12979 arch/x86/Kconfig.debug | 4 +-
12980 arch/x86/Makefile | 13 +-
12981 arch/x86/boot/Makefile | 3 +
12982 arch/x86/boot/bitops.h | 4 +-
12983 arch/x86/boot/boot.h | 2 +-
12984 arch/x86/boot/compressed/Makefile | 3 +
12985 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
12986 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
12987 arch/x86/boot/compressed/head_32.S | 4 +-
12988 arch/x86/boot/compressed/head_64.S | 12 +-
12989 arch/x86/boot/compressed/misc.c | 11 +-
12990 arch/x86/boot/cpucheck.c | 16 +-
12991 arch/x86/boot/header.S | 6 +-
12992 arch/x86/boot/memory.c | 2 +-
12993 arch/x86/boot/video-vesa.c | 1 +
12994 arch/x86/boot/video.c | 2 +-
12995 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
12996 arch/x86/crypto/aesni-intel_asm.S | 106 +-
12997 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
12998 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
12999 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
13000 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
13001 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
13002 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
13003 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
13004 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
13005 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
13006 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
13007 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
13008 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
13009 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
13010 arch/x86/crypto/sha256-avx-asm.S | 2 +
13011 arch/x86/crypto/sha256-avx2-asm.S | 2 +
13012 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
13013 arch/x86/crypto/sha512-avx-asm.S | 2 +
13014 arch/x86/crypto/sha512-avx2-asm.S | 2 +
13015 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
13016 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
13017 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
13018 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
13019 arch/x86/entry/calling.h | 86 +-
13020 arch/x86/entry/common.c | 13 +-
13021 arch/x86/entry/entry_32.S | 351 +-
13022 arch/x86/entry/entry_64.S | 619 +-
13023 arch/x86/entry/entry_64_compat.S | 159 +-
13024 arch/x86/entry/thunk_64.S | 2 +
13025 arch/x86/entry/vdso/Makefile | 2 +-
13026 arch/x86/entry/vdso/vdso2c.h | 8 +-
13027 arch/x86/entry/vdso/vma.c | 41 +-
13028 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
13029 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
13030 arch/x86/ia32/ia32_signal.c | 23 +-
13031 arch/x86/ia32/sys_ia32.c | 42 +-
13032 arch/x86/include/asm/alternative-asm.h | 43 +-
13033 arch/x86/include/asm/alternative.h | 4 +-
13034 arch/x86/include/asm/apic.h | 2 +-
13035 arch/x86/include/asm/apm.h | 4 +-
13036 arch/x86/include/asm/atomic.h | 230 +-
13037 arch/x86/include/asm/atomic64_32.h | 100 +
13038 arch/x86/include/asm/atomic64_64.h | 164 +-
13039 arch/x86/include/asm/bitops.h | 18 +-
13040 arch/x86/include/asm/boot.h | 2 +-
13041 arch/x86/include/asm/cache.h | 5 +-
13042 arch/x86/include/asm/checksum_32.h | 12 +-
13043 arch/x86/include/asm/cmpxchg.h | 39 +
13044 arch/x86/include/asm/compat.h | 2 +-
13045 arch/x86/include/asm/cpufeature.h | 17 +-
13046 arch/x86/include/asm/desc.h | 78 +-
13047 arch/x86/include/asm/desc_defs.h | 6 +
13048 arch/x86/include/asm/div64.h | 2 +-
13049 arch/x86/include/asm/elf.h | 33 +-
13050 arch/x86/include/asm/emergency-restart.h | 2 +-
13051 arch/x86/include/asm/fpu/internal.h | 42 +-
13052 arch/x86/include/asm/fpu/types.h | 6 +-
13053 arch/x86/include/asm/futex.h | 14 +-
13054 arch/x86/include/asm/hw_irq.h | 4 +-
13055 arch/x86/include/asm/i8259.h | 2 +-
13056 arch/x86/include/asm/io.h | 22 +-
13057 arch/x86/include/asm/irqflags.h | 5 +
13058 arch/x86/include/asm/kprobes.h | 9 +-
13059 arch/x86/include/asm/local.h | 106 +-
13060 arch/x86/include/asm/mman.h | 15 +
13061 arch/x86/include/asm/mmu.h | 14 +-
13062 arch/x86/include/asm/mmu_context.h | 114 +-
13063 arch/x86/include/asm/module.h | 17 +-
13064 arch/x86/include/asm/nmi.h | 19 +-
13065 arch/x86/include/asm/page.h | 1 +
13066 arch/x86/include/asm/page_32.h | 12 +-
13067 arch/x86/include/asm/page_64.h | 14 +-
13068 arch/x86/include/asm/paravirt.h | 46 +-
13069 arch/x86/include/asm/paravirt_types.h | 15 +-
13070 arch/x86/include/asm/pgalloc.h | 23 +
13071 arch/x86/include/asm/pgtable-2level.h | 2 +
13072 arch/x86/include/asm/pgtable-3level.h | 7 +
13073 arch/x86/include/asm/pgtable.h | 128 +-
13074 arch/x86/include/asm/pgtable_32.h | 14 +-
13075 arch/x86/include/asm/pgtable_32_types.h | 24 +-
13076 arch/x86/include/asm/pgtable_64.h | 23 +-
13077 arch/x86/include/asm/pgtable_64_types.h | 5 +
13078 arch/x86/include/asm/pgtable_types.h | 26 +-
13079 arch/x86/include/asm/preempt.h | 2 +-
13080 arch/x86/include/asm/processor.h | 57 +-
13081 arch/x86/include/asm/ptrace.h | 13 +-
13082 arch/x86/include/asm/realmode.h | 4 +-
13083 arch/x86/include/asm/reboot.h | 10 +-
13084 arch/x86/include/asm/rmwcc.h | 84 +-
13085 arch/x86/include/asm/rwsem.h | 60 +-
13086 arch/x86/include/asm/segment.h | 27 +-
13087 arch/x86/include/asm/smap.h | 43 +
13088 arch/x86/include/asm/smp.h | 14 +-
13089 arch/x86/include/asm/stackprotector.h | 4 +-
13090 arch/x86/include/asm/stacktrace.h | 32 +-
13091 arch/x86/include/asm/switch_to.h | 4 +-
13092 arch/x86/include/asm/sys_ia32.h | 6 +-
13093 arch/x86/include/asm/thread_info.h | 27 +-
13094 arch/x86/include/asm/tlbflush.h | 77 +-
13095 arch/x86/include/asm/uaccess.h | 192 +-
13096 arch/x86/include/asm/uaccess_32.h | 28 +-
13097 arch/x86/include/asm/uaccess_64.h | 169 +-
13098 arch/x86/include/asm/word-at-a-time.h | 2 +-
13099 arch/x86/include/asm/x86_init.h | 10 +-
13100 arch/x86/include/asm/xen/page.h | 2 +-
13101 arch/x86/include/uapi/asm/e820.h | 2 +-
13102 arch/x86/kernel/Makefile | 2 +-
13103 arch/x86/kernel/acpi/boot.c | 4 +-
13104 arch/x86/kernel/acpi/sleep.c | 4 +
13105 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
13106 arch/x86/kernel/alternative.c | 124 +-
13107 arch/x86/kernel/apic/apic.c | 4 +-
13108 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
13109 arch/x86/kernel/apic/apic_noop.c | 2 +-
13110 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
13111 arch/x86/kernel/apic/io_apic.c | 8 +-
13112 arch/x86/kernel/apic/msi.c | 2 +-
13113 arch/x86/kernel/apic/probe_32.c | 4 +-
13114 arch/x86/kernel/apic/vector.c | 4 +-
13115 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
13116 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
13117 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
13118 arch/x86/kernel/apm_32.c | 21 +-
13119 arch/x86/kernel/asm-offsets.c | 20 +
13120 arch/x86/kernel/asm-offsets_64.c | 1 +
13121 arch/x86/kernel/cpu/Makefile | 4 -
13122 arch/x86/kernel/cpu/amd.c | 2 +-
13123 arch/x86/kernel/cpu/bugs_64.c | 2 +
13124 arch/x86/kernel/cpu/common.c | 202 +-
13125 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
13126 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
13127 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
13128 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
13129 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
13130 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
13131 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
13132 arch/x86/kernel/cpu/perf_event.c | 10 +-
13133 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
13134 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
13135 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
13136 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
13137 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
13138 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
13139 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
13140 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
13141 arch/x86/kernel/crash_dump_64.c | 2 +-
13142 arch/x86/kernel/doublefault.c | 8 +-
13143 arch/x86/kernel/dumpstack.c | 24 +-
13144 arch/x86/kernel/dumpstack_32.c | 25 +-
13145 arch/x86/kernel/dumpstack_64.c | 62 +-
13146 arch/x86/kernel/e820.c | 4 +-
13147 arch/x86/kernel/early_printk.c | 1 +
13148 arch/x86/kernel/espfix_64.c | 44 +-
13149 arch/x86/kernel/fpu/core.c | 24 +-
13150 arch/x86/kernel/fpu/init.c | 40 +-
13151 arch/x86/kernel/fpu/regset.c | 22 +-
13152 arch/x86/kernel/fpu/signal.c | 20 +-
13153 arch/x86/kernel/fpu/xstate.c | 8 +-
13154 arch/x86/kernel/ftrace.c | 18 +-
13155 arch/x86/kernel/head64.c | 14 +-
13156 arch/x86/kernel/head_32.S | 235 +-
13157 arch/x86/kernel/head_64.S | 173 +-
13158 arch/x86/kernel/i386_ksyms_32.c | 12 +
13159 arch/x86/kernel/i8259.c | 10 +-
13160 arch/x86/kernel/io_delay.c | 2 +-
13161 arch/x86/kernel/ioport.c | 2 +-
13162 arch/x86/kernel/irq.c | 8 +-
13163 arch/x86/kernel/irq_32.c | 45 +-
13164 arch/x86/kernel/jump_label.c | 10 +-
13165 arch/x86/kernel/kgdb.c | 21 +-
13166 arch/x86/kernel/kprobes/core.c | 28 +-
13167 arch/x86/kernel/kprobes/opt.c | 16 +-
13168 arch/x86/kernel/ksysfs.c | 2 +-
13169 arch/x86/kernel/kvmclock.c | 20 +-
13170 arch/x86/kernel/ldt.c | 25 +
13171 arch/x86/kernel/livepatch.c | 12 +-
13172 arch/x86/kernel/machine_kexec_32.c | 6 +-
13173 arch/x86/kernel/mcount_64.S | 19 +-
13174 arch/x86/kernel/module.c | 78 +-
13175 arch/x86/kernel/msr.c | 2 +-
13176 arch/x86/kernel/nmi.c | 34 +-
13177 arch/x86/kernel/nmi_selftest.c | 4 +-
13178 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
13179 arch/x86/kernel/paravirt.c | 45 +-
13180 arch/x86/kernel/paravirt_patch_64.c | 8 +
13181 arch/x86/kernel/pci-calgary_64.c | 2 +-
13182 arch/x86/kernel/pci-iommu_table.c | 2 +-
13183 arch/x86/kernel/pci-swiotlb.c | 2 +-
13184 arch/x86/kernel/process.c | 80 +-
13185 arch/x86/kernel/process_32.c | 29 +-
13186 arch/x86/kernel/process_64.c | 14 +-
13187 arch/x86/kernel/ptrace.c | 20 +-
13188 arch/x86/kernel/pvclock.c | 8 +-
13189 arch/x86/kernel/reboot.c | 44 +-
13190 arch/x86/kernel/reboot_fixups_32.c | 2 +-
13191 arch/x86/kernel/relocate_kernel_64.S | 3 +-
13192 arch/x86/kernel/setup.c | 29 +-
13193 arch/x86/kernel/setup_percpu.c | 29 +-
13194 arch/x86/kernel/signal.c | 17 +-
13195 arch/x86/kernel/smp.c | 2 +-
13196 arch/x86/kernel/smpboot.c | 29 +-
13197 arch/x86/kernel/step.c | 6 +-
13198 arch/x86/kernel/sys_i386_32.c | 184 +
13199 arch/x86/kernel/sys_x86_64.c | 22 +-
13200 arch/x86/kernel/tboot.c | 14 +-
13201 arch/x86/kernel/time.c | 8 +-
13202 arch/x86/kernel/tls.c | 7 +-
13203 arch/x86/kernel/tracepoint.c | 4 +-
13204 arch/x86/kernel/traps.c | 53 +-
13205 arch/x86/kernel/tsc.c | 2 +-
13206 arch/x86/kernel/uprobes.c | 2 +-
13207 arch/x86/kernel/vm86_32.c | 6 +-
13208 arch/x86/kernel/vmlinux.lds.S | 153 +-
13209 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
13210 arch/x86/kernel/x86_init.c | 6 +-
13211 arch/x86/kvm/cpuid.c | 21 +-
13212 arch/x86/kvm/emulate.c | 2 +-
13213 arch/x86/kvm/lapic.c | 2 +-
13214 arch/x86/kvm/paging_tmpl.h | 2 +-
13215 arch/x86/kvm/svm.c | 10 +-
13216 arch/x86/kvm/vmx.c | 62 +-
13217 arch/x86/kvm/x86.c | 42 +-
13218 arch/x86/lguest/boot.c | 3 +-
13219 arch/x86/lib/atomic64_386_32.S | 164 +
13220 arch/x86/lib/atomic64_cx8_32.S | 98 +-
13221 arch/x86/lib/checksum_32.S | 99 +-
13222 arch/x86/lib/clear_page_64.S | 3 +
13223 arch/x86/lib/cmpxchg16b_emu.S | 3 +
13224 arch/x86/lib/copy_page_64.S | 14 +-
13225 arch/x86/lib/copy_user_64.S | 66 +-
13226 arch/x86/lib/csum-copy_64.S | 14 +-
13227 arch/x86/lib/csum-wrappers_64.c | 8 +-
13228 arch/x86/lib/getuser.S | 74 +-
13229 arch/x86/lib/insn.c | 8 +-
13230 arch/x86/lib/iomap_copy_64.S | 2 +
13231 arch/x86/lib/memcpy_64.S | 6 +
13232 arch/x86/lib/memmove_64.S | 3 +-
13233 arch/x86/lib/memset_64.S | 3 +
13234 arch/x86/lib/mmx_32.c | 243 +-
13235 arch/x86/lib/msr-reg.S | 2 +
13236 arch/x86/lib/putuser.S | 87 +-
13237 arch/x86/lib/rwsem.S | 6 +-
13238 arch/x86/lib/usercopy_32.c | 359 +-
13239 arch/x86/lib/usercopy_64.c | 20 +-
13240 arch/x86/math-emu/fpu_aux.c | 2 +-
13241 arch/x86/math-emu/fpu_entry.c | 4 +-
13242 arch/x86/math-emu/fpu_system.h | 2 +-
13243 arch/x86/mm/Makefile | 4 +
13244 arch/x86/mm/extable.c | 26 +-
13245 arch/x86/mm/fault.c | 570 +-
13246 arch/x86/mm/gup.c | 6 +-
13247 arch/x86/mm/highmem_32.c | 6 +
13248 arch/x86/mm/hugetlbpage.c | 24 +-
13249 arch/x86/mm/init.c | 111 +-
13250 arch/x86/mm/init_32.c | 111 +-
13251 arch/x86/mm/init_64.c | 46 +-
13252 arch/x86/mm/iomap_32.c | 4 +
13253 arch/x86/mm/ioremap.c | 52 +-
13254 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
13255 arch/x86/mm/mmap.c | 40 +-
13256 arch/x86/mm/mmio-mod.c | 10 +-
13257 arch/x86/mm/numa.c | 2 +-
13258 arch/x86/mm/pageattr.c | 38 +-
13259 arch/x86/mm/pat.c | 12 +-
13260 arch/x86/mm/pat_rbtree.c | 2 +-
13261 arch/x86/mm/pf_in.c | 10 +-
13262 arch/x86/mm/pgtable.c | 214 +-
13263 arch/x86/mm/pgtable_32.c | 3 +
13264 arch/x86/mm/setup_nx.c | 7 +
13265 arch/x86/mm/tlb.c | 4 +
13266 arch/x86/mm/uderef_64.c | 37 +
13267 arch/x86/net/bpf_jit.S | 11 +
13268 arch/x86/net/bpf_jit_comp.c | 13 +-
13269 arch/x86/oprofile/backtrace.c | 6 +-
13270 arch/x86/oprofile/nmi_int.c | 8 +-
13271 arch/x86/oprofile/op_model_amd.c | 8 +-
13272 arch/x86/oprofile/op_model_ppro.c | 7 +-
13273 arch/x86/oprofile/op_x86_model.h | 2 +-
13274 arch/x86/pci/intel_mid_pci.c | 2 +-
13275 arch/x86/pci/irq.c | 8 +-
13276 arch/x86/pci/pcbios.c | 144 +-
13277 arch/x86/platform/efi/efi_32.c | 24 +
13278 arch/x86/platform/efi/efi_64.c | 26 +-
13279 arch/x86/platform/efi/efi_stub_32.S | 64 +-
13280 arch/x86/platform/efi/efi_stub_64.S | 2 +
13281 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
13282 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
13283 arch/x86/platform/intel-mid/mfld.c | 4 +-
13284 arch/x86/platform/intel-mid/mrfl.c | 2 +-
13285 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
13286 arch/x86/platform/olpc/olpc_dt.c | 2 +-
13287 arch/x86/power/cpu.c | 11 +-
13288 arch/x86/realmode/init.c | 10 +-
13289 arch/x86/realmode/rm/Makefile | 3 +
13290 arch/x86/realmode/rm/header.S | 4 +-
13291 arch/x86/realmode/rm/reboot.S | 4 +
13292 arch/x86/realmode/rm/trampoline_32.S | 12 +-
13293 arch/x86/realmode/rm/trampoline_64.S | 3 +-
13294 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
13295 arch/x86/tools/Makefile | 2 +-
13296 arch/x86/tools/relocs.c | 96 +-
13297 arch/x86/um/mem_32.c | 2 +-
13298 arch/x86/um/tls_32.c | 2 +-
13299 arch/x86/xen/enlighten.c | 50 +-
13300 arch/x86/xen/mmu.c | 19 +-
13301 arch/x86/xen/smp.c | 16 +-
13302 arch/x86/xen/xen-asm_32.S | 2 +-
13303 arch/x86/xen/xen-head.S | 11 +
13304 arch/x86/xen/xen-ops.h | 2 -
13305 block/bio.c | 4 +-
13306 block/blk-iopoll.c | 2 +-
13307 block/blk-map.c | 2 +-
13308 block/blk-softirq.c | 2 +-
13309 block/bsg.c | 12 +-
13310 block/compat_ioctl.c | 4 +-
13311 block/genhd.c | 9 +-
13312 block/partitions/efi.c | 8 +-
13313 block/scsi_ioctl.c | 29 +-
13314 crypto/cryptd.c | 4 +-
13315 crypto/pcrypt.c | 2 +-
13316 crypto/zlib.c | 12 +-
13317 drivers/acpi/acpi_video.c | 2 +-
13318 drivers/acpi/apei/apei-internal.h | 2 +-
13319 drivers/acpi/apei/ghes.c | 4 +-
13320 drivers/acpi/bgrt.c | 6 +-
13321 drivers/acpi/blacklist.c | 4 +-
13322 drivers/acpi/bus.c | 4 +-
13323 drivers/acpi/device_pm.c | 4 +-
13324 drivers/acpi/ec.c | 2 +-
13325 drivers/acpi/pci_slot.c | 2 +-
13326 drivers/acpi/processor_idle.c | 2 +-
13327 drivers/acpi/processor_pdc.c | 2 +-
13328 drivers/acpi/sleep.c | 2 +-
13329 drivers/acpi/sysfs.c | 4 +-
13330 drivers/acpi/thermal.c | 2 +-
13331 drivers/acpi/video_detect.c | 7 +-
13332 drivers/ata/libata-core.c | 12 +-
13333 drivers/ata/libata-scsi.c | 2 +-
13334 drivers/ata/libata.h | 2 +-
13335 drivers/ata/pata_arasan_cf.c | 4 +-
13336 drivers/atm/adummy.c | 2 +-
13337 drivers/atm/ambassador.c | 8 +-
13338 drivers/atm/atmtcp.c | 14 +-
13339 drivers/atm/eni.c | 10 +-
13340 drivers/atm/firestream.c | 8 +-
13341 drivers/atm/fore200e.c | 14 +-
13342 drivers/atm/he.c | 18 +-
13343 drivers/atm/horizon.c | 4 +-
13344 drivers/atm/idt77252.c | 36 +-
13345 drivers/atm/iphase.c | 34 +-
13346 drivers/atm/lanai.c | 12 +-
13347 drivers/atm/nicstar.c | 46 +-
13348 drivers/atm/solos-pci.c | 4 +-
13349 drivers/atm/suni.c | 4 +-
13350 drivers/atm/uPD98402.c | 16 +-
13351 drivers/atm/zatm.c | 6 +-
13352 drivers/base/bus.c | 4 +-
13353 drivers/base/devtmpfs.c | 8 +-
13354 drivers/base/node.c | 2 +-
13355 drivers/base/platform-msi.c | 20 +-
13356 drivers/base/power/domain.c | 11 +-
13357 drivers/base/power/sysfs.c | 2 +-
13358 drivers/base/power/wakeup.c | 8 +-
13359 drivers/base/regmap/regmap-debugfs.c | 11 +-
13360 drivers/base/syscore.c | 4 +-
13361 drivers/block/cciss.c | 28 +-
13362 drivers/block/cciss.h | 2 +-
13363 drivers/block/cpqarray.c | 28 +-
13364 drivers/block/cpqarray.h | 2 +-
13365 drivers/block/drbd/drbd_bitmap.c | 2 +-
13366 drivers/block/drbd/drbd_int.h | 8 +-
13367 drivers/block/drbd/drbd_main.c | 12 +-
13368 drivers/block/drbd/drbd_nl.c | 4 +-
13369 drivers/block/drbd/drbd_receiver.c | 34 +-
13370 drivers/block/drbd/drbd_worker.c | 8 +-
13371 drivers/block/pktcdvd.c | 4 +-
13372 drivers/block/rbd.c | 2 +-
13373 drivers/bluetooth/btwilink.c | 2 +-
13374 drivers/bus/arm-cci.c | 12 +-
13375 drivers/cdrom/cdrom.c | 11 +-
13376 drivers/cdrom/gdrom.c | 1 -
13377 drivers/char/agp/compat_ioctl.c | 2 +-
13378 drivers/char/agp/frontend.c | 4 +-
13379 drivers/char/agp/intel-gtt.c | 4 +-
13380 drivers/char/hpet.c | 2 +-
13381 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
13382 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
13383 drivers/char/mem.c | 47 +-
13384 drivers/char/nvram.c | 2 +-
13385 drivers/char/pcmcia/synclink_cs.c | 16 +-
13386 drivers/char/random.c | 12 +-
13387 drivers/char/sonypi.c | 11 +-
13388 drivers/char/tpm/tpm_acpi.c | 3 +-
13389 drivers/char/tpm/tpm_eventlog.c | 4 +-
13390 drivers/char/virtio_console.c | 4 +-
13391 drivers/clk/clk-composite.c | 2 +-
13392 drivers/clk/samsung/clk.h | 2 +-
13393 drivers/clk/socfpga/clk-gate.c | 9 +-
13394 drivers/clk/socfpga/clk-pll.c | 9 +-
13395 drivers/clk/ti/clk.c | 8 +-
13396 drivers/cpufreq/acpi-cpufreq.c | 17 +-
13397 drivers/cpufreq/cpufreq-dt.c | 4 +-
13398 drivers/cpufreq/cpufreq.c | 30 +-
13399 drivers/cpufreq/cpufreq_governor.c | 2 +-
13400 drivers/cpufreq/cpufreq_governor.h | 4 +-
13401 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
13402 drivers/cpufreq/intel_pstate.c | 33 +-
13403 drivers/cpufreq/p4-clockmod.c | 12 +-
13404 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
13405 drivers/cpufreq/speedstep-centrino.c | 7 +-
13406 drivers/cpuidle/driver.c | 2 +-
13407 drivers/cpuidle/dt_idle_states.c | 2 +-
13408 drivers/cpuidle/governor.c | 2 +-
13409 drivers/cpuidle/sysfs.c | 2 +-
13410 drivers/crypto/hifn_795x.c | 4 +-
13411 drivers/devfreq/devfreq.c | 4 +-
13412 drivers/dma/sh/shdma-base.c | 4 +-
13413 drivers/dma/sh/shdmac.c | 2 +-
13414 drivers/edac/edac_device.c | 4 +-
13415 drivers/edac/edac_mc_sysfs.c | 2 +-
13416 drivers/edac/edac_pci.c | 4 +-
13417 drivers/edac/edac_pci_sysfs.c | 22 +-
13418 drivers/edac/mce_amd.h | 2 +-
13419 drivers/firewire/core-card.c | 6 +-
13420 drivers/firewire/core-device.c | 2 +-
13421 drivers/firewire/core-transaction.c | 1 +
13422 drivers/firewire/core.h | 1 +
13423 drivers/firmware/dmi-id.c | 2 +-
13424 drivers/firmware/dmi_scan.c | 12 +-
13425 drivers/firmware/efi/cper.c | 8 +-
13426 drivers/firmware/efi/efi.c | 12 +-
13427 drivers/firmware/efi/efivars.c | 2 +-
13428 drivers/firmware/efi/runtime-map.c | 2 +-
13429 drivers/firmware/google/gsmi.c | 2 +-
13430 drivers/firmware/google/memconsole.c | 7 +-
13431 drivers/firmware/memmap.c | 2 +-
13432 drivers/firmware/psci.c | 2 +-
13433 drivers/gpio/gpio-davinci.c | 6 +-
13434 drivers/gpio/gpio-em.c | 2 +-
13435 drivers/gpio/gpio-ich.c | 2 +-
13436 drivers/gpio/gpio-omap.c | 4 +-
13437 drivers/gpio/gpio-rcar.c | 2 +-
13438 drivers/gpio/gpio-vr41xx.c | 2 +-
13439 drivers/gpio/gpiolib.c | 12 +-
13440 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
13441 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
13442 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
13443 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
13444 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
13445 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
13446 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
13447 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
13448 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
13449 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
13450 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
13451 drivers/gpu/drm/drm_crtc.c | 2 +-
13452 drivers/gpu/drm/drm_drv.c | 2 +-
13453 drivers/gpu/drm/drm_fops.c | 12 +-
13454 drivers/gpu/drm/drm_global.c | 14 +-
13455 drivers/gpu/drm/drm_info.c | 13 +-
13456 drivers/gpu/drm/drm_ioc32.c | 13 +-
13457 drivers/gpu/drm/drm_ioctl.c | 2 +-
13458 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
13459 drivers/gpu/drm/i810/i810_drv.h | 4 +-
13460 drivers/gpu/drm/i915/i915_dma.c | 2 +-
13461 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
13462 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
13463 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
13464 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
13465 drivers/gpu/drm/i915/intel_display.c | 26 +-
13466 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
13467 drivers/gpu/drm/mga/mga_drv.h | 4 +-
13468 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
13469 drivers/gpu/drm/mga/mga_irq.c | 8 +-
13470 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
13471 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
13472 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
13473 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
13474 drivers/gpu/drm/omapdrm/Makefile | 2 +-
13475 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
13476 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
13477 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
13478 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
13479 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
13480 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
13481 drivers/gpu/drm/r128/r128_cce.c | 2 +-
13482 drivers/gpu/drm/r128/r128_drv.h | 4 +-
13483 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
13484 drivers/gpu/drm/r128/r128_irq.c | 4 +-
13485 drivers/gpu/drm/r128/r128_state.c | 4 +-
13486 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
13487 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
13488 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
13489 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
13490 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
13491 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
13492 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
13493 drivers/gpu/drm/tegra/dc.c | 2 +-
13494 drivers/gpu/drm/tegra/dsi.c | 2 +-
13495 drivers/gpu/drm/tegra/hdmi.c | 2 +-
13496 drivers/gpu/drm/tegra/sor.c | 7 +-
13497 drivers/gpu/drm/tilcdc/Makefile | 6 +-
13498 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
13499 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
13500 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
13501 drivers/gpu/drm/udl/udl_fb.c | 1 -
13502 drivers/gpu/drm/via/via_drv.h | 4 +-
13503 drivers/gpu/drm/via/via_irq.c | 18 +-
13504 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
13505 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
13506 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
13507 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
13508 drivers/gpu/vga/vga_switcheroo.c | 4 +-
13509 drivers/hid/hid-core.c | 4 +-
13510 drivers/hid/hid-sensor-custom.c | 2 +-
13511 drivers/hv/channel.c | 2 +-
13512 drivers/hv/hv.c | 4 +-
13513 drivers/hv/hv_balloon.c | 18 +-
13514 drivers/hv/hyperv_vmbus.h | 2 +-
13515 drivers/hwmon/acpi_power_meter.c | 6 +-
13516 drivers/hwmon/applesmc.c | 2 +-
13517 drivers/hwmon/asus_atk0110.c | 10 +-
13518 drivers/hwmon/coretemp.c | 2 +-
13519 drivers/hwmon/dell-smm-hwmon.c | 2 +-
13520 drivers/hwmon/ibmaem.c | 2 +-
13521 drivers/hwmon/iio_hwmon.c | 2 +-
13522 drivers/hwmon/nct6683.c | 6 +-
13523 drivers/hwmon/nct6775.c | 6 +-
13524 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
13525 drivers/hwmon/sht15.c | 12 +-
13526 drivers/hwmon/via-cputemp.c | 2 +-
13527 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
13528 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
13529 drivers/i2c/i2c-dev.c | 2 +-
13530 drivers/ide/ide-cd.c | 2 +-
13531 drivers/ide/ide-disk.c | 2 +-
13532 drivers/iio/industrialio-core.c | 2 +-
13533 drivers/iio/magnetometer/ak8975.c | 2 +-
13534 drivers/infiniband/core/cm.c | 32 +-
13535 drivers/infiniband/core/fmr_pool.c | 20 +-
13536 drivers/infiniband/core/uverbs_cmd.c | 3 +
13537 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
13538 drivers/infiniband/hw/mlx4/mad.c | 2 +-
13539 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
13540 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
13541 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
13542 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
13543 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
13544 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
13545 drivers/infiniband/hw/nes/nes.c | 4 +-
13546 drivers/infiniband/hw/nes/nes.h | 40 +-
13547 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
13548 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
13549 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
13550 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
13551 drivers/infiniband/hw/qib/qib.h | 1 +
13552 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
13553 drivers/input/gameport/gameport.c | 4 +-
13554 drivers/input/input.c | 4 +-
13555 drivers/input/joystick/sidewinder.c | 1 +
13556 drivers/input/joystick/xpad.c | 4 +-
13557 drivers/input/misc/ims-pcu.c | 4 +-
13558 drivers/input/mouse/psmouse.h | 2 +-
13559 drivers/input/mousedev.c | 2 +-
13560 drivers/input/serio/serio.c | 4 +-
13561 drivers/input/serio/serio_raw.c | 4 +-
13562 drivers/input/touchscreen/htcpen.c | 2 +-
13563 drivers/iommu/arm-smmu-v3.c | 2 +-
13564 drivers/iommu/arm-smmu.c | 43 +-
13565 drivers/iommu/io-pgtable-arm.c | 101 +-
13566 drivers/iommu/io-pgtable.c | 11 +-
13567 drivers/iommu/io-pgtable.h | 19 +-
13568 drivers/iommu/iommu.c | 2 +-
13569 drivers/iommu/ipmmu-vmsa.c | 13 +-
13570 drivers/iommu/irq_remapping.c | 2 +-
13571 drivers/irqchip/irq-gic.c | 2 +-
13572 drivers/irqchip/irq-i8259.c | 2 +-
13573 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
13574 drivers/irqchip/irq-renesas-irqc.c | 2 +-
13575 drivers/isdn/capi/capi.c | 10 +-
13576 drivers/isdn/gigaset/interface.c | 8 +-
13577 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
13578 drivers/isdn/hardware/avm/b1.c | 4 +-
13579 drivers/isdn/i4l/isdn_common.c | 2 +
13580 drivers/isdn/i4l/isdn_tty.c | 22 +-
13581 drivers/isdn/icn/icn.c | 2 +-
13582 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
13583 drivers/lguest/core.c | 10 +-
13584 drivers/lguest/page_tables.c | 2 +-
13585 drivers/lguest/x86/core.c | 12 +-
13586 drivers/lguest/x86/switcher_32.S | 27 +-
13587 drivers/md/bcache/closure.h | 2 +-
13588 drivers/md/bitmap.c | 2 +-
13589 drivers/md/dm-ioctl.c | 2 +-
13590 drivers/md/dm-raid1.c | 18 +-
13591 drivers/md/dm-stats.c | 6 +-
13592 drivers/md/dm-stripe.c | 10 +-
13593 drivers/md/dm-table.c | 2 +-
13594 drivers/md/dm-thin-metadata.c | 4 +-
13595 drivers/md/dm.c | 16 +-
13596 drivers/md/md.c | 26 +-
13597 drivers/md/md.h | 6 +-
13598 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
13599 drivers/md/persistent-data/dm-space-map.h | 1 +
13600 drivers/md/raid1.c | 4 +-
13601 drivers/md/raid10.c | 18 +-
13602 drivers/md/raid5.c | 22 +-
13603 drivers/media/dvb-core/dvbdev.c | 2 +-
13604 drivers/media/dvb-frontends/af9033.h | 2 +-
13605 drivers/media/dvb-frontends/dib3000.h | 2 +-
13606 drivers/media/dvb-frontends/dib7000p.h | 2 +-
13607 drivers/media/dvb-frontends/dib8000.h | 2 +-
13608 drivers/media/pci/cx88/cx88-video.c | 6 +-
13609 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
13610 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
13611 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
13612 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
13613 drivers/media/pci/tw68/tw68-core.c | 2 +-
13614 drivers/media/platform/omap/omap_vout.c | 11 +-
13615 drivers/media/platform/s5p-tv/mixer.h | 2 +-
13616 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
13617 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
13618 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
13619 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
13620 drivers/media/radio/radio-cadet.c | 2 +
13621 drivers/media/radio/radio-maxiradio.c | 2 +-
13622 drivers/media/radio/radio-shark.c | 2 +-
13623 drivers/media/radio/radio-shark2.c | 2 +-
13624 drivers/media/radio/radio-si476x.c | 2 +-
13625 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
13626 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
13627 drivers/media/v4l2-core/v4l2-device.c | 4 +-
13628 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
13629 drivers/memory/omap-gpmc.c | 21 +-
13630 drivers/message/fusion/mptsas.c | 34 +-
13631 drivers/mfd/ab8500-debugfs.c | 2 +-
13632 drivers/mfd/kempld-core.c | 2 +-
13633 drivers/mfd/max8925-i2c.c | 2 +-
13634 drivers/mfd/tps65910.c | 2 +-
13635 drivers/mfd/twl4030-irq.c | 9 +-
13636 drivers/mfd/wm5110-tables.c | 2 +-
13637 drivers/mfd/wm8998-tables.c | 2 +-
13638 drivers/misc/c2port/core.c | 4 +-
13639 drivers/misc/kgdbts.c | 4 +-
13640 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
13641 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
13642 drivers/misc/mic/scif/scif_rb.c | 8 +-
13643 drivers/misc/sgi-gru/gruhandles.c | 4 +-
13644 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
13645 drivers/misc/sgi-gru/grutables.h | 154 +-
13646 drivers/misc/sgi-xp/xp.h | 2 +-
13647 drivers/misc/sgi-xp/xpc.h | 3 +-
13648 drivers/misc/sgi-xp/xpc_main.c | 2 +-
13649 drivers/mmc/card/block.c | 2 +-
13650 drivers/mmc/host/dw_mmc.h | 2 +-
13651 drivers/mmc/host/mmci.c | 4 +-
13652 drivers/mmc/host/omap_hsmmc.c | 4 +-
13653 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
13654 drivers/mmc/host/sdhci-s3c.c | 8 +-
13655 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
13656 drivers/mtd/nand/denali.c | 1 +
13657 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
13658 drivers/mtd/nftlmount.c | 1 +
13659 drivers/mtd/sm_ftl.c | 2 +-
13660 drivers/net/bonding/bond_netlink.c | 2 +-
13661 drivers/net/caif/caif_hsi.c | 2 +-
13662 drivers/net/can/Kconfig | 2 +-
13663 drivers/net/can/dev.c | 2 +-
13664 drivers/net/can/vcan.c | 2 +-
13665 drivers/net/dummy.c | 2 +-
13666 drivers/net/ethernet/8390/ax88796.c | 4 +-
13667 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
13668 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
13669 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
13670 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
13671 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
13672 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
13673 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
13674 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
13675 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
13676 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
13677 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
13678 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
13679 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
13680 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
13681 drivers/net/ethernet/broadcom/tg3.h | 1 +
13682 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
13683 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
13684 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
13685 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
13686 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
13687 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
13688 drivers/net/ethernet/faraday/ftmac100.c | 2 +
13689 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
13690 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
13691 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
13692 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
13693 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
13694 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
13695 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
13696 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
13697 drivers/net/ethernet/realtek/r8169.c | 8 +-
13698 drivers/net/ethernet/sfc/ptp.c | 2 +-
13699 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
13700 drivers/net/ethernet/via/via-rhine.c | 2 +-
13701 drivers/net/geneve.c | 2 +-
13702 drivers/net/hyperv/hyperv_net.h | 2 +-
13703 drivers/net/hyperv/rndis_filter.c | 4 +-
13704 drivers/net/ifb.c | 2 +-
13705 drivers/net/ipvlan/ipvlan_core.c | 2 +-
13706 drivers/net/macvlan.c | 20 +-
13707 drivers/net/macvtap.c | 6 +-
13708 drivers/net/nlmon.c | 2 +-
13709 drivers/net/phy/phy_device.c | 6 +-
13710 drivers/net/ppp/ppp_generic.c | 4 +-
13711 drivers/net/slip/slhc.c | 2 +-
13712 drivers/net/team/team.c | 4 +-
13713 drivers/net/tun.c | 7 +-
13714 drivers/net/usb/hso.c | 23 +-
13715 drivers/net/usb/r8152.c | 2 +-
13716 drivers/net/usb/sierra_net.c | 4 +-
13717 drivers/net/virtio_net.c | 2 +-
13718 drivers/net/vrf.c | 2 +-
13719 drivers/net/vxlan.c | 4 +-
13720 drivers/net/wimax/i2400m/rx.c | 2 +-
13721 drivers/net/wireless/airo.c | 2 +-
13722 drivers/net/wireless/at76c50x-usb.c | 2 +-
13723 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
13724 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
13725 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
13726 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
13727 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
13728 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
13729 drivers/net/wireless/ath/ath9k/main.c | 22 +-
13730 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
13731 drivers/net/wireless/b43/phy_lp.c | 2 +-
13732 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
13733 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
13734 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
13735 drivers/net/wireless/mac80211_hwsim.c | 28 +-
13736 drivers/net/wireless/rndis_wlan.c | 2 +-
13737 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
13738 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
13739 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
13740 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
13741 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
13742 drivers/nfc/nfcwilink.c | 2 +-
13743 drivers/of/fdt.c | 4 +-
13744 drivers/oprofile/buffer_sync.c | 8 +-
13745 drivers/oprofile/event_buffer.c | 2 +-
13746 drivers/oprofile/oprof.c | 2 +-
13747 drivers/oprofile/oprofile_stats.c | 10 +-
13748 drivers/oprofile/oprofile_stats.h | 10 +-
13749 drivers/oprofile/oprofilefs.c | 6 +-
13750 drivers/oprofile/timer_int.c | 2 +-
13751 drivers/parport/procfs.c | 4 +-
13752 drivers/pci/host/pci-host-generic.c | 24 +-
13753 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
13754 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
13755 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
13756 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
13757 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
13758 drivers/pci/hotplug/pciehp_core.c | 2 +-
13759 drivers/pci/msi.c | 22 +-
13760 drivers/pci/pci-sysfs.c | 6 +-
13761 drivers/pci/pci.h | 2 +-
13762 drivers/pci/pcie/aspm.c | 6 +-
13763 drivers/pci/pcie/portdrv_pci.c | 2 +-
13764 drivers/pci/probe.c | 2 +-
13765 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
13766 drivers/pinctrl/pinctrl-at91.c | 5 +-
13767 drivers/platform/chrome/chromeos_pstore.c | 2 +-
13768 drivers/platform/x86/alienware-wmi.c | 4 +-
13769 drivers/platform/x86/compal-laptop.c | 2 +-
13770 drivers/platform/x86/hdaps.c | 2 +-
13771 drivers/platform/x86/ibm_rtl.c | 2 +-
13772 drivers/platform/x86/intel_oaktrail.c | 2 +-
13773 drivers/platform/x86/msi-laptop.c | 16 +-
13774 drivers/platform/x86/msi-wmi.c | 2 +-
13775 drivers/platform/x86/samsung-laptop.c | 2 +-
13776 drivers/platform/x86/samsung-q10.c | 2 +-
13777 drivers/platform/x86/sony-laptop.c | 14 +-
13778 drivers/platform/x86/thinkpad_acpi.c | 2 +-
13779 drivers/pnp/pnpbios/bioscalls.c | 14 +-
13780 drivers/pnp/pnpbios/core.c | 2 +-
13781 drivers/power/pda_power.c | 7 +-
13782 drivers/power/power_supply.h | 4 +-
13783 drivers/power/power_supply_core.c | 7 +-
13784 drivers/power/power_supply_sysfs.c | 6 +-
13785 drivers/power/reset/at91-reset.c | 9 +-
13786 drivers/powercap/powercap_sys.c | 136 +-
13787 drivers/ptp/ptp_private.h | 2 +-
13788 drivers/ptp/ptp_sysfs.c | 2 +-
13789 drivers/regulator/core.c | 4 +-
13790 drivers/regulator/max8660.c | 6 +-
13791 drivers/regulator/max8973-regulator.c | 16 +-
13792 drivers/regulator/mc13892-regulator.c | 8 +-
13793 drivers/rtc/rtc-armada38x.c | 7 +-
13794 drivers/rtc/rtc-cmos.c | 4 +-
13795 drivers/rtc/rtc-ds1307.c | 2 +-
13796 drivers/rtc/rtc-m48t59.c | 4 +-
13797 drivers/rtc/rtc-test.c | 6 +-
13798 drivers/scsi/be2iscsi/be_main.c | 2 +-
13799 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
13800 drivers/scsi/bfa/bfa_ioc.h | 4 +-
13801 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
13802 drivers/scsi/hosts.c | 4 +-
13803 drivers/scsi/hpsa.c | 38 +-
13804 drivers/scsi/hpsa.h | 2 +-
13805 drivers/scsi/libfc/fc_exch.c | 50 +-
13806 drivers/scsi/libsas/sas_ata.c | 2 +-
13807 drivers/scsi/lpfc/lpfc.h | 8 +-
13808 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
13809 drivers/scsi/lpfc/lpfc_init.c | 6 +-
13810 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
13811 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
13812 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
13813 drivers/scsi/pmcraid.c | 20 +-
13814 drivers/scsi/pmcraid.h | 8 +-
13815 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
13816 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
13817 drivers/scsi/qla2xxx/qla_os.c | 6 +-
13818 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
13819 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
13820 drivers/scsi/scsi.c | 2 +-
13821 drivers/scsi/scsi_lib.c | 8 +-
13822 drivers/scsi/scsi_sysfs.c | 2 +-
13823 drivers/scsi/scsi_transport_fc.c | 8 +-
13824 drivers/scsi/scsi_transport_iscsi.c | 6 +-
13825 drivers/scsi/scsi_transport_srp.c | 6 +-
13826 drivers/scsi/sd.c | 6 +-
13827 drivers/scsi/sg.c | 2 +-
13828 drivers/scsi/sr.c | 21 +-
13829 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
13830 drivers/spi/spi.c | 2 +-
13831 drivers/staging/android/timed_output.c | 6 +-
13832 drivers/staging/comedi/comedi_fops.c | 8 +-
13833 drivers/staging/fbtft/fbtft-core.c | 2 +-
13834 drivers/staging/fbtft/fbtft.h | 2 +-
13835 drivers/staging/gdm724x/gdm_tty.c | 2 +-
13836 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
13837 drivers/staging/iio/adc/ad7280a.c | 4 +-
13838 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
13839 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
13840 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
13841 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
13842 drivers/staging/lustre/lustre/include/obd.h | 2 +-
13843 drivers/staging/octeon/ethernet-rx.c | 20 +-
13844 drivers/staging/octeon/ethernet.c | 8 +-
13845 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
13846 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
13847 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
13848 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
13849 drivers/staging/sm750fb/sm750.c | 14 +-
13850 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
13851 drivers/target/sbp/sbp_target.c | 4 +-
13852 drivers/thermal/cpu_cooling.c | 9 +-
13853 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
13854 drivers/thermal/of-thermal.c | 17 +-
13855 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
13856 drivers/tty/cyclades.c | 6 +-
13857 drivers/tty/hvc/hvc_console.c | 14 +-
13858 drivers/tty/hvc/hvcs.c | 21 +-
13859 drivers/tty/hvc/hvsi.c | 22 +-
13860 drivers/tty/hvc/hvsi_lib.c | 4 +-
13861 drivers/tty/ipwireless/tty.c | 27 +-
13862 drivers/tty/moxa.c | 2 +-
13863 drivers/tty/n_gsm.c | 4 +-
13864 drivers/tty/n_tty.c | 3 +-
13865 drivers/tty/pty.c | 4 +-
13866 drivers/tty/rocket.c | 6 +-
13867 drivers/tty/serial/8250/8250_core.c | 10 +-
13868 drivers/tty/serial/ifx6x60.c | 2 +-
13869 drivers/tty/serial/ioc4_serial.c | 6 +-
13870 drivers/tty/serial/kgdb_nmi.c | 4 +-
13871 drivers/tty/serial/kgdboc.c | 32 +-
13872 drivers/tty/serial/msm_serial.c | 4 +-
13873 drivers/tty/serial/samsung.c | 9 +-
13874 drivers/tty/serial/serial_core.c | 8 +-
13875 drivers/tty/synclink.c | 34 +-
13876 drivers/tty/synclink_gt.c | 28 +-
13877 drivers/tty/synclinkmp.c | 34 +-
13878 drivers/tty/tty_io.c | 2 +-
13879 drivers/tty/tty_ldisc.c | 8 +-
13880 drivers/tty/tty_port.c | 22 +-
13881 drivers/uio/uio.c | 13 +-
13882 drivers/usb/atm/cxacru.c | 2 +-
13883 drivers/usb/atm/usbatm.c | 24 +-
13884 drivers/usb/class/cdc-acm.h | 2 +-
13885 drivers/usb/core/devices.c | 6 +-
13886 drivers/usb/core/devio.c | 12 +-
13887 drivers/usb/core/hcd.c | 4 +-
13888 drivers/usb/core/sysfs.c | 2 +-
13889 drivers/usb/core/usb.c | 2 +-
13890 drivers/usb/early/ehci-dbgp.c | 16 +-
13891 drivers/usb/gadget/function/u_serial.c | 22 +-
13892 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
13893 drivers/usb/host/ehci-hcd.c | 2 +-
13894 drivers/usb/host/ehci-hub.c | 4 +-
13895 drivers/usb/host/ehci-q.c | 4 +-
13896 drivers/usb/host/fotg210-hcd.c | 2 +-
13897 drivers/usb/host/fusbh200-hcd.c | 2 +-
13898 drivers/usb/host/hwa-hc.c | 2 +-
13899 drivers/usb/host/ohci-hcd.c | 2 +-
13900 drivers/usb/host/r8a66597.h | 2 +-
13901 drivers/usb/host/uhci-hcd.c | 2 +-
13902 drivers/usb/host/xhci-pci.c | 2 +-
13903 drivers/usb/host/xhci.c | 2 +-
13904 drivers/usb/misc/appledisplay.c | 4 +-
13905 drivers/usb/serial/console.c | 8 +-
13906 drivers/usb/storage/transport.c | 2 +-
13907 drivers/usb/storage/usb.c | 2 +-
13908 drivers/usb/storage/usb.h | 2 +-
13909 drivers/usb/usbip/vhci.h | 2 +-
13910 drivers/usb/usbip/vhci_hcd.c | 6 +-
13911 drivers/usb/usbip/vhci_rx.c | 2 +-
13912 drivers/usb/wusbcore/wa-hc.h | 4 +-
13913 drivers/usb/wusbcore/wa-xfer.c | 2 +-
13914 drivers/vfio/vfio.c | 2 +-
13915 drivers/vhost/vringh.c | 20 +-
13916 drivers/video/backlight/kb3886_bl.c | 2 +-
13917 drivers/video/console/fbcon.c | 2 +-
13918 drivers/video/fbdev/aty/aty128fb.c | 2 +-
13919 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
13920 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
13921 drivers/video/fbdev/core/fb_defio.c | 6 +-
13922 drivers/video/fbdev/core/fbmem.c | 2 +-
13923 drivers/video/fbdev/hyperv_fb.c | 4 +-
13924 drivers/video/fbdev/i810/i810_accel.c | 1 +
13925 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
13926 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
13927 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
13928 drivers/video/fbdev/omap2/dss/display.c | 8 +-
13929 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
13930 drivers/video/fbdev/smscufx.c | 4 +-
13931 drivers/video/fbdev/udlfb.c | 36 +-
13932 drivers/video/fbdev/uvesafb.c | 52 +-
13933 drivers/video/fbdev/vesafb.c | 58 +-
13934 drivers/video/fbdev/via/via_clock.h | 2 +-
13935 drivers/xen/events/events_base.c | 6 +-
13936 drivers/xen/evtchn.c | 4 +-
13937 fs/Kconfig.binfmt | 2 +-
13938 fs/afs/inode.c | 4 +-
13939 fs/aio.c | 2 +-
13940 fs/autofs4/waitq.c | 2 +-
13941 fs/befs/endian.h | 6 +-
13942 fs/binfmt_aout.c | 23 +-
13943 fs/binfmt_elf.c | 670 +-
13944 fs/binfmt_elf_fdpic.c | 4 +-
13945 fs/block_dev.c | 2 +-
13946 fs/btrfs/ctree.c | 9 +-
13947 fs/btrfs/delayed-inode.c | 9 +-
13948 fs/btrfs/delayed-inode.h | 6 +-
13949 fs/btrfs/file.c | 10 +-
13950 fs/btrfs/inode.c | 14 +-
13951 fs/btrfs/super.c | 2 +-
13952 fs/btrfs/sysfs.c | 2 +-
13953 fs/btrfs/tests/free-space-tests.c | 8 +-
13954 fs/btrfs/tree-log.h | 2 +-
13955 fs/buffer.c | 2 +-
13956 fs/cachefiles/bind.c | 6 +-
13957 fs/cachefiles/daemon.c | 8 +-
13958 fs/cachefiles/internal.h | 12 +-
13959 fs/cachefiles/namei.c | 2 +-
13960 fs/cachefiles/proc.c | 12 +-
13961 fs/ceph/dir.c | 12 +-
13962 fs/ceph/super.c | 4 +-
13963 fs/cifs/cifs_debug.c | 12 +-
13964 fs/cifs/cifsfs.c | 8 +-
13965 fs/cifs/cifsglob.h | 54 +-
13966 fs/cifs/file.c | 10 +-
13967 fs/cifs/misc.c | 4 +-
13968 fs/cifs/smb1ops.c | 80 +-
13969 fs/cifs/smb2ops.c | 84 +-
13970 fs/cifs/smb2pdu.c | 3 +-
13971 fs/coda/cache.c | 10 +-
13972 fs/compat.c | 4 +-
13973 fs/compat_binfmt_elf.c | 2 +
13974 fs/compat_ioctl.c | 12 +-
13975 fs/configfs/dir.c | 10 +-
13976 fs/coredump.c | 16 +-
13977 fs/dcache.c | 51 +-
13978 fs/ecryptfs/inode.c | 2 +-
13979 fs/ecryptfs/miscdev.c | 2 +-
13980 fs/exec.c | 362 +-
13981 fs/ext2/xattr.c | 5 +-
13982 fs/ext4/ext4.h | 20 +-
13983 fs/ext4/mballoc.c | 44 +-
13984 fs/ext4/resize.c | 16 +-
13985 fs/ext4/super.c | 4 +-
13986 fs/ext4/xattr.c | 5 +-
13987 fs/fhandle.c | 3 +-
13988 fs/file.c | 4 +-
13989 fs/fs_struct.c | 8 +-
13990 fs/fscache/cookie.c | 40 +-
13991 fs/fscache/internal.h | 202 +-
13992 fs/fscache/object.c | 26 +-
13993 fs/fscache/operation.c | 38 +-
13994 fs/fscache/page.c | 110 +-
13995 fs/fscache/stats.c | 348 +-
13996 fs/fuse/cuse.c | 10 +-
13997 fs/fuse/dev.c | 4 +-
13998 fs/gfs2/glock.c | 22 +-
13999 fs/gfs2/glops.c | 4 +-
14000 fs/gfs2/quota.c | 6 +-
14001 fs/hugetlbfs/inode.c | 13 +-
14002 fs/inode.c | 4 +-
14003 fs/jffs2/erase.c | 3 +-
14004 fs/jffs2/wbuf.c | 3 +-
14005 fs/jfs/super.c | 2 +-
14006 fs/kernfs/dir.c | 2 +-
14007 fs/kernfs/file.c | 20 +-
14008 fs/libfs.c | 10 +-
14009 fs/lockd/clntproc.c | 4 +-
14010 fs/namei.c | 16 +-
14011 fs/namespace.c | 16 +-
14012 fs/nfs/callback_xdr.c | 2 +-
14013 fs/nfs/inode.c | 6 +-
14014 fs/nfsd/nfs4proc.c | 2 +-
14015 fs/nfsd/nfs4xdr.c | 2 +-
14016 fs/nfsd/nfscache.c | 11 +-
14017 fs/nfsd/vfs.c | 6 +-
14018 fs/nls/nls_base.c | 26 +-
14019 fs/nls/nls_euc-jp.c | 6 +-
14020 fs/nls/nls_koi8-ru.c | 6 +-
14021 fs/notify/fanotify/fanotify_user.c | 4 +-
14022 fs/notify/notification.c | 4 +-
14023 fs/ntfs/dir.c | 2 +-
14024 fs/ntfs/super.c | 6 +-
14025 fs/ocfs2/localalloc.c | 2 +-
14026 fs/ocfs2/ocfs2.h | 10 +-
14027 fs/ocfs2/suballoc.c | 12 +-
14028 fs/ocfs2/super.c | 20 +-
14029 fs/pipe.c | 72 +-
14030 fs/posix_acl.c | 4 +-
14031 fs/proc/array.c | 20 +
14032 fs/proc/base.c | 4 +-
14033 fs/proc/kcore.c | 34 +-
14034 fs/proc/meminfo.c | 2 +-
14035 fs/proc/nommu.c | 2 +-
14036 fs/proc/proc_sysctl.c | 26 +-
14037 fs/proc/task_mmu.c | 39 +-
14038 fs/proc/task_nommu.c | 4 +-
14039 fs/proc/vmcore.c | 16 +-
14040 fs/qnx6/qnx6.h | 4 +-
14041 fs/quota/netlink.c | 4 +-
14042 fs/read_write.c | 2 +-
14043 fs/reiserfs/do_balan.c | 2 +-
14044 fs/reiserfs/procfs.c | 2 +-
14045 fs/reiserfs/reiserfs.h | 4 +-
14046 fs/seq_file.c | 4 +-
14047 fs/splice.c | 43 +-
14048 fs/squashfs/xattr.c | 12 +-
14049 fs/sysv/sysv.h | 2 +-
14050 fs/tracefs/inode.c | 8 +-
14051 fs/udf/misc.c | 2 +-
14052 fs/ufs/swab.h | 4 +-
14053 fs/userfaultfd.c | 2 +-
14054 fs/xattr.c | 21 +
14055 fs/xfs/libxfs/xfs_bmap.c | 2 +-
14056 fs/xfs/xfs_dir2_readdir.c | 7 +-
14057 fs/xfs/xfs_ioctl.c | 2 +-
14058 fs/xfs/xfs_linux.h | 4 +-
14059 include/asm-generic/4level-fixup.h | 2 +
14060 include/asm-generic/atomic-long.h | 156 +-
14061 include/asm-generic/atomic64.h | 12 +
14062 include/asm-generic/bitops/__fls.h | 2 +-
14063 include/asm-generic/bitops/fls.h | 2 +-
14064 include/asm-generic/bitops/fls64.h | 4 +-
14065 include/asm-generic/bug.h | 6 +-
14066 include/asm-generic/cache.h | 4 +-
14067 include/asm-generic/emergency-restart.h | 2 +-
14068 include/asm-generic/kmap_types.h | 4 +-
14069 include/asm-generic/local.h | 13 +
14070 include/asm-generic/pgtable-nopmd.h | 18 +-
14071 include/asm-generic/pgtable-nopud.h | 15 +-
14072 include/asm-generic/pgtable.h | 16 +
14073 include/asm-generic/sections.h | 1 +
14074 include/asm-generic/uaccess.h | 16 +
14075 include/asm-generic/vmlinux.lds.h | 15 +-
14076 include/crypto/algapi.h | 2 +-
14077 include/drm/drmP.h | 16 +-
14078 include/drm/drm_crtc_helper.h | 2 +-
14079 include/drm/drm_mm.h | 2 +-
14080 include/drm/i915_pciids.h | 2 +-
14081 include/drm/intel-gtt.h | 4 +-
14082 include/drm/ttm/ttm_memory.h | 2 +-
14083 include/drm/ttm/ttm_page_alloc.h | 1 +
14084 include/keys/asymmetric-subtype.h | 2 +-
14085 include/linux/atmdev.h | 4 +-
14086 include/linux/atomic.h | 17 +-
14087 include/linux/audit.h | 2 +-
14088 include/linux/average.h | 2 +-
14089 include/linux/binfmts.h | 3 +-
14090 include/linux/bitmap.h | 2 +-
14091 include/linux/bitops.h | 8 +-
14092 include/linux/blkdev.h | 2 +-
14093 include/linux/blktrace_api.h | 2 +-
14094 include/linux/cache.h | 8 +
14095 include/linux/cdrom.h | 1 -
14096 include/linux/cleancache.h | 2 +-
14097 include/linux/clk-provider.h | 1 +
14098 include/linux/compat.h | 6 +-
14099 include/linux/compiler-gcc.h | 28 +-
14100 include/linux/compiler.h | 157 +-
14101 include/linux/configfs.h | 2 +-
14102 include/linux/cpufreq.h | 3 +-
14103 include/linux/cpuidle.h | 5 +-
14104 include/linux/cpumask.h | 14 +-
14105 include/linux/crypto.h | 4 +-
14106 include/linux/ctype.h | 2 +-
14107 include/linux/dcache.h | 4 +-
14108 include/linux/decompress/mm.h | 2 +-
14109 include/linux/devfreq.h | 2 +-
14110 include/linux/device.h | 7 +-
14111 include/linux/dma-mapping.h | 2 +-
14112 include/linux/efi.h | 1 +
14113 include/linux/elf.h | 2 +
14114 include/linux/err.h | 4 +-
14115 include/linux/extcon.h | 2 +-
14116 include/linux/fb.h | 3 +-
14117 include/linux/fdtable.h | 2 +-
14118 include/linux/fs.h | 5 +-
14119 include/linux/fs_struct.h | 2 +-
14120 include/linux/fscache-cache.h | 2 +-
14121 include/linux/fscache.h | 2 +-
14122 include/linux/fsnotify.h | 2 +-
14123 include/linux/genhd.h | 4 +-
14124 include/linux/genl_magic_func.h | 2 +-
14125 include/linux/gfp.h | 12 +-
14126 include/linux/highmem.h | 12 +
14127 include/linux/hwmon-sysfs.h | 6 +-
14128 include/linux/i2c.h | 1 +
14129 include/linux/if_pppox.h | 2 +-
14130 include/linux/init.h | 12 +-
14131 include/linux/init_task.h | 7 +
14132 include/linux/interrupt.h | 6 +-
14133 include/linux/iommu.h | 2 +-
14134 include/linux/ioport.h | 2 +-
14135 include/linux/ipc.h | 2 +-
14136 include/linux/irq.h | 5 +-
14137 include/linux/irqdesc.h | 2 +-
14138 include/linux/irqdomain.h | 3 +
14139 include/linux/jiffies.h | 16 +-
14140 include/linux/key-type.h | 2 +-
14141 include/linux/kgdb.h | 6 +-
14142 include/linux/kmemleak.h | 4 +-
14143 include/linux/kobject.h | 3 +-
14144 include/linux/kobject_ns.h | 2 +-
14145 include/linux/kref.h | 2 +-
14146 include/linux/libata.h | 2 +-
14147 include/linux/linkage.h | 1 +
14148 include/linux/list.h | 15 +
14149 include/linux/lockref.h | 26 +-
14150 include/linux/math64.h | 10 +-
14151 include/linux/mempolicy.h | 7 +
14152 include/linux/mm.h | 102 +-
14153 include/linux/mm_types.h | 20 +
14154 include/linux/mmiotrace.h | 4 +-
14155 include/linux/mmzone.h | 2 +-
14156 include/linux/mod_devicetable.h | 4 +-
14157 include/linux/module.h | 69 +-
14158 include/linux/moduleloader.h | 16 +
14159 include/linux/moduleparam.h | 4 +-
14160 include/linux/net.h | 2 +-
14161 include/linux/netdevice.h | 7 +-
14162 include/linux/netfilter.h | 2 +-
14163 include/linux/netfilter/nfnetlink.h | 2 +-
14164 include/linux/nls.h | 4 +-
14165 include/linux/notifier.h | 3 +-
14166 include/linux/oprofile.h | 4 +-
14167 include/linux/padata.h | 2 +-
14168 include/linux/pci_hotplug.h | 3 +-
14169 include/linux/percpu.h | 2 +-
14170 include/linux/perf_event.h | 12 +-
14171 include/linux/pipe_fs_i.h | 8 +-
14172 include/linux/pm.h | 1 +
14173 include/linux/pm_domain.h | 4 +-
14174 include/linux/pm_runtime.h | 2 +-
14175 include/linux/pnp.h | 2 +-
14176 include/linux/poison.h | 4 +-
14177 include/linux/power/smartreflex.h | 2 +-
14178 include/linux/ppp-comp.h | 2 +-
14179 include/linux/preempt.h | 21 +
14180 include/linux/proc_ns.h | 2 +-
14181 include/linux/psci.h | 2 +-
14182 include/linux/quota.h | 2 +-
14183 include/linux/random.h | 19 +-
14184 include/linux/rculist.h | 16 +
14185 include/linux/reboot.h | 14 +-
14186 include/linux/regset.h | 3 +-
14187 include/linux/relay.h | 2 +-
14188 include/linux/rio.h | 2 +-
14189 include/linux/rmap.h | 4 +-
14190 include/linux/sched.h | 72 +-
14191 include/linux/sched/sysctl.h | 1 +
14192 include/linux/semaphore.h | 2 +-
14193 include/linux/seq_file.h | 1 +
14194 include/linux/signal.h | 2 +-
14195 include/linux/skbuff.h | 12 +-
14196 include/linux/slab.h | 47 +-
14197 include/linux/slab_def.h | 14 +-
14198 include/linux/slub_def.h | 2 +-
14199 include/linux/smp.h | 2 +
14200 include/linux/sock_diag.h | 2 +-
14201 include/linux/sonet.h | 2 +-
14202 include/linux/sunrpc/addr.h | 8 +-
14203 include/linux/sunrpc/clnt.h | 2 +-
14204 include/linux/sunrpc/svc.h | 2 +-
14205 include/linux/sunrpc/svc_rdma.h | 18 +-
14206 include/linux/sunrpc/svcauth.h | 2 +-
14207 include/linux/swapops.h | 10 +-
14208 include/linux/swiotlb.h | 3 +-
14209 include/linux/syscalls.h | 21 +-
14210 include/linux/syscore_ops.h | 2 +-
14211 include/linux/sysctl.h | 3 +-
14212 include/linux/sysfs.h | 9 +-
14213 include/linux/sysrq.h | 3 +-
14214 include/linux/tcp.h | 14 +-
14215 include/linux/thread_info.h | 7 +
14216 include/linux/tty.h | 4 +-
14217 include/linux/tty_driver.h | 2 +-
14218 include/linux/tty_ldisc.h | 2 +-
14219 include/linux/types.h | 16 +
14220 include/linux/uaccess.h | 6 +-
14221 include/linux/uio_driver.h | 2 +-
14222 include/linux/unaligned/access_ok.h | 24 +-
14223 include/linux/usb.h | 12 +-
14224 include/linux/usb/hcd.h | 1 +
14225 include/linux/usb/renesas_usbhs.h | 2 +-
14226 include/linux/vermagic.h | 21 +-
14227 include/linux/vga_switcheroo.h | 8 +-
14228 include/linux/vmalloc.h | 7 +-
14229 include/linux/vmstat.h | 24 +-
14230 include/linux/xattr.h | 5 +-
14231 include/linux/zlib.h | 3 +-
14232 include/media/v4l2-dev.h | 2 +-
14233 include/media/v4l2-device.h | 2 +-
14234 include/net/9p/transport.h | 2 +-
14235 include/net/bluetooth/l2cap.h | 2 +-
14236 include/net/bonding.h | 2 +-
14237 include/net/caif/cfctrl.h | 6 +-
14238 include/net/flow.h | 2 +-
14239 include/net/genetlink.h | 2 +-
14240 include/net/gro_cells.h | 2 +-
14241 include/net/inet_connection_sock.h | 2 +-
14242 include/net/inet_sock.h | 2 +-
14243 include/net/inetpeer.h | 2 +-
14244 include/net/ip_fib.h | 2 +-
14245 include/net/ip_vs.h | 8 +-
14246 include/net/ipv6.h | 2 +-
14247 include/net/irda/ircomm_tty.h | 1 +
14248 include/net/iucv/af_iucv.h | 2 +-
14249 include/net/llc_c_ac.h | 2 +-
14250 include/net/llc_c_ev.h | 4 +-
14251 include/net/llc_c_st.h | 2 +-
14252 include/net/llc_s_ac.h | 2 +-
14253 include/net/llc_s_st.h | 2 +-
14254 include/net/mac80211.h | 4 +-
14255 include/net/neighbour.h | 2 +-
14256 include/net/net_namespace.h | 18 +-
14257 include/net/netlink.h | 2 +-
14258 include/net/netns/conntrack.h | 6 +-
14259 include/net/netns/ipv4.h | 4 +-
14260 include/net/netns/ipv6.h | 4 +-
14261 include/net/netns/xfrm.h | 2 +-
14262 include/net/ping.h | 2 +-
14263 include/net/protocol.h | 4 +-
14264 include/net/rtnetlink.h | 2 +-
14265 include/net/sctp/checksum.h | 4 +-
14266 include/net/sctp/sm.h | 4 +-
14267 include/net/sctp/structs.h | 2 +-
14268 include/net/sock.h | 12 +-
14269 include/net/tcp.h | 8 +-
14270 include/net/xfrm.h | 13 +-
14271 include/rdma/iw_cm.h | 2 +-
14272 include/scsi/libfc.h | 3 +-
14273 include/scsi/scsi_device.h | 6 +-
14274 include/scsi/scsi_driver.h | 2 +-
14275 include/scsi/scsi_transport_fc.h | 3 +-
14276 include/scsi/sg.h | 2 +-
14277 include/sound/compress_driver.h | 2 +-
14278 include/sound/soc.h | 4 +-
14279 include/trace/events/irq.h | 4 +-
14280 include/uapi/linux/a.out.h | 8 +
14281 include/uapi/linux/bcache.h | 5 +-
14282 include/uapi/linux/byteorder/little_endian.h | 28 +-
14283 include/uapi/linux/connector.h | 2 +-
14284 include/uapi/linux/elf.h | 28 +
14285 include/uapi/linux/screen_info.h | 3 +-
14286 include/uapi/linux/swab.h | 6 +-
14287 include/uapi/linux/xattr.h | 4 +
14288 include/video/udlfb.h | 8 +-
14289 include/video/uvesafb.h | 1 +
14290 init/Kconfig | 2 +-
14291 init/Makefile | 3 +
14292 init/do_mounts.c | 14 +-
14293 init/do_mounts.h | 8 +-
14294 init/do_mounts_initrd.c | 30 +-
14295 init/do_mounts_md.c | 6 +-
14296 init/init_task.c | 4 +
14297 init/initramfs.c | 38 +-
14298 init/main.c | 30 +-
14299 ipc/compat.c | 4 +-
14300 ipc/ipc_sysctl.c | 8 +-
14301 ipc/mq_sysctl.c | 4 +-
14302 ipc/sem.c | 4 +-
14303 ipc/shm.c | 6 +
14304 kernel/audit.c | 8 +-
14305 kernel/auditsc.c | 4 +-
14306 kernel/bpf/core.c | 7 +-
14307 kernel/capability.c | 3 +
14308 kernel/compat.c | 38 +-
14309 kernel/debug/debug_core.c | 16 +-
14310 kernel/debug/kdb/kdb_main.c | 4 +-
14311 kernel/events/core.c | 26 +-
14312 kernel/events/internal.h | 10 +-
14313 kernel/events/uprobes.c | 2 +-
14314 kernel/exit.c | 2 +-
14315 kernel/fork.c | 167 +-
14316 kernel/futex.c | 11 +-
14317 kernel/futex_compat.c | 2 +-
14318 kernel/gcov/base.c | 7 +-
14319 kernel/irq/manage.c | 2 +-
14320 kernel/irq/msi.c | 19 +-
14321 kernel/irq/spurious.c | 2 +-
14322 kernel/jump_label.c | 5 +
14323 kernel/kallsyms.c | 37 +-
14324 kernel/kexec.c | 3 +-
14325 kernel/kmod.c | 8 +-
14326 kernel/kprobes.c | 4 +-
14327 kernel/ksysfs.c | 2 +-
14328 kernel/locking/lockdep.c | 7 +-
14329 kernel/locking/mutex-debug.c | 12 +-
14330 kernel/locking/mutex-debug.h | 4 +-
14331 kernel/locking/mutex.c | 6 +-
14332 kernel/module.c | 422 +-
14333 kernel/notifier.c | 17 +-
14334 kernel/padata.c | 4 +-
14335 kernel/panic.c | 5 +-
14336 kernel/pid.c | 2 +-
14337 kernel/pid_namespace.c | 2 +-
14338 kernel/power/process.c | 12 +-
14339 kernel/profile.c | 14 +-
14340 kernel/ptrace.c | 8 +-
14341 kernel/rcu/rcutorture.c | 60 +-
14342 kernel/rcu/tiny.c | 4 +-
14343 kernel/rcu/tree.c | 44 +-
14344 kernel/rcu/tree.h | 14 +-
14345 kernel/rcu/tree_plugin.h | 14 +-
14346 kernel/rcu/tree_trace.c | 12 +-
14347 kernel/sched/auto_group.c | 4 +-
14348 kernel/sched/core.c | 45 +-
14349 kernel/sched/fair.c | 2 +-
14350 kernel/sched/sched.h | 2 +-
14351 kernel/signal.c | 12 +-
14352 kernel/smpboot.c | 4 +-
14353 kernel/softirq.c | 12 +-
14354 kernel/sys.c | 10 +-
14355 kernel/sysctl.c | 34 +-
14356 kernel/time/alarmtimer.c | 2 +-
14357 kernel/time/posix-cpu-timers.c | 4 +-
14358 kernel/time/posix-timers.c | 24 +-
14359 kernel/time/timer.c | 2 +-
14360 kernel/time/timer_stats.c | 10 +-
14361 kernel/trace/blktrace.c | 6 +-
14362 kernel/trace/ftrace.c | 15 +-
14363 kernel/trace/ring_buffer.c | 96 +-
14364 kernel/trace/trace.c | 2 +-
14365 kernel/trace/trace.h | 2 +-
14366 kernel/trace/trace_clock.c | 4 +-
14367 kernel/trace/trace_events.c | 1 -
14368 kernel/trace/trace_functions_graph.c | 4 +-
14369 kernel/trace/trace_mmiotrace.c | 8 +-
14370 kernel/trace/trace_output.c | 10 +-
14371 kernel/trace/trace_seq.c | 2 +-
14372 kernel/trace/trace_stack.c | 2 +-
14373 kernel/user_namespace.c | 2 +-
14374 kernel/utsname_sysctl.c | 2 +-
14375 kernel/watchdog.c | 2 +-
14376 kernel/workqueue.c | 2 +-
14377 lib/Kconfig.debug | 8 +-
14378 lib/Makefile | 2 +-
14379 lib/bitmap.c | 8 +-
14380 lib/bug.c | 2 +
14381 lib/debugobjects.c | 2 +-
14382 lib/decompress_bunzip2.c | 3 +-
14383 lib/decompress_unlzma.c | 4 +-
14384 lib/div64.c | 4 +-
14385 lib/dma-debug.c | 4 +-
14386 lib/inflate.c | 2 +-
14387 lib/ioremap.c | 4 +-
14388 lib/kobject.c | 4 +-
14389 lib/list_debug.c | 126 +-
14390 lib/lockref.c | 44 +-
14391 lib/percpu-refcount.c | 2 +-
14392 lib/radix-tree.c | 2 +-
14393 lib/random32.c | 2 +-
14394 lib/show_mem.c | 2 +-
14395 lib/strncpy_from_user.c | 2 +-
14396 lib/strnlen_user.c | 2 +-
14397 lib/swiotlb.c | 2 +-
14398 lib/usercopy.c | 6 +
14399 lib/vsprintf.c | 12 +-
14400 mm/Kconfig | 6 +-
14401 mm/backing-dev.c | 4 +-
14402 mm/debug.c | 3 +
14403 mm/filemap.c | 2 +-
14404 mm/gup.c | 13 +-
14405 mm/highmem.c | 6 +-
14406 mm/hugetlb.c | 70 +-
14407 mm/internal.h | 1 +
14408 mm/maccess.c | 4 +-
14409 mm/madvise.c | 37 +
14410 mm/memory-failure.c | 6 +-
14411 mm/memory.c | 424 +-
14412 mm/mempolicy.c | 25 +
14413 mm/mlock.c | 15 +-
14414 mm/mm_init.c | 2 +-
14415 mm/mmap.c | 582 +-
14416 mm/mprotect.c | 137 +-
14417 mm/mremap.c | 39 +-
14418 mm/nommu.c | 21 +-
14419 mm/page-writeback.c | 2 +-
14420 mm/page_alloc.c | 49 +-
14421 mm/percpu.c | 2 +-
14422 mm/process_vm_access.c | 14 +-
14423 mm/rmap.c | 45 +-
14424 mm/shmem.c | 19 +-
14425 mm/slab.c | 109 +-
14426 mm/slab.h | 22 +-
14427 mm/slab_common.c | 86 +-
14428 mm/slob.c | 218 +-
14429 mm/slub.c | 102 +-
14430 mm/sparse-vmemmap.c | 4 +-
14431 mm/sparse.c | 2 +-
14432 mm/swap.c | 2 +
14433 mm/swapfile.c | 12 +-
14434 mm/util.c | 6 +
14435 mm/vmalloc.c | 114 +-
14436 mm/vmstat.c | 12 +-
14437 net/8021q/vlan.c | 5 +-
14438 net/8021q/vlan_netlink.c | 2 +-
14439 net/9p/mod.c | 4 +-
14440 net/9p/trans_fd.c | 2 +-
14441 net/atm/atm_misc.c | 8 +-
14442 net/atm/lec.h | 2 +-
14443 net/atm/proc.c | 6 +-
14444 net/atm/resources.c | 4 +-
14445 net/ax25/sysctl_net_ax25.c | 2 +-
14446 net/batman-adv/bat_iv_ogm.c | 8 +-
14447 net/batman-adv/fragmentation.c | 2 +-
14448 net/batman-adv/soft-interface.c | 8 +-
14449 net/batman-adv/types.h | 6 +-
14450 net/bluetooth/hci_sock.c | 2 +-
14451 net/bluetooth/l2cap_core.c | 6 +-
14452 net/bluetooth/l2cap_sock.c | 12 +-
14453 net/bluetooth/rfcomm/sock.c | 4 +-
14454 net/bluetooth/rfcomm/tty.c | 4 +-
14455 net/bridge/br_netlink.c | 2 +-
14456 net/bridge/netfilter/ebtables.c | 6 +-
14457 net/caif/cfctrl.c | 11 +-
14458 net/caif/chnl_net.c | 2 +-
14459 net/can/af_can.c | 2 +-
14460 net/can/gw.c | 6 +-
14461 net/ceph/messenger.c | 4 +-
14462 net/compat.c | 24 +-
14463 net/core/datagram.c | 2 +-
14464 net/core/dev.c | 16 +-
14465 net/core/filter.c | 2 +-
14466 net/core/flow.c | 6 +-
14467 net/core/neighbour.c | 4 +-
14468 net/core/net-sysfs.c | 2 +-
14469 net/core/net_namespace.c | 8 +-
14470 net/core/netpoll.c | 4 +-
14471 net/core/rtnetlink.c | 15 +-
14472 net/core/scm.c | 14 +-
14473 net/core/skbuff.c | 8 +-
14474 net/core/sock.c | 28 +-
14475 net/core/sock_diag.c | 15 +-
14476 net/core/sysctl_net_core.c | 22 +-
14477 net/decnet/af_decnet.c | 1 +
14478 net/decnet/sysctl_net_decnet.c | 4 +-
14479 net/dsa/dsa.c | 2 +-
14480 net/hsr/hsr_netlink.c | 2 +-
14481 net/ieee802154/6lowpan/core.c | 2 +-
14482 net/ieee802154/6lowpan/reassembly.c | 14 +-
14483 net/ipv4/af_inet.c | 2 +-
14484 net/ipv4/devinet.c | 18 +-
14485 net/ipv4/fib_frontend.c | 6 +-
14486 net/ipv4/fib_semantics.c | 2 +-
14487 net/ipv4/inet_connection_sock.c | 4 +-
14488 net/ipv4/inet_timewait_sock.c | 2 +-
14489 net/ipv4/inetpeer.c | 2 +-
14490 net/ipv4/ip_fragment.c | 15 +-
14491 net/ipv4/ip_gre.c | 6 +-
14492 net/ipv4/ip_sockglue.c | 2 +-
14493 net/ipv4/ip_vti.c | 4 +-
14494 net/ipv4/ipconfig.c | 6 +-
14495 net/ipv4/ipip.c | 4 +-
14496 net/ipv4/netfilter/arp_tables.c | 12 +-
14497 net/ipv4/netfilter/ip_tables.c | 12 +-
14498 net/ipv4/ping.c | 14 +-
14499 net/ipv4/raw.c | 14 +-
14500 net/ipv4/route.c | 32 +-
14501 net/ipv4/sysctl_net_ipv4.c | 22 +-
14502 net/ipv4/tcp_input.c | 6 +-
14503 net/ipv4/tcp_probe.c | 2 +-
14504 net/ipv4/udp.c | 10 +-
14505 net/ipv4/xfrm4_policy.c | 18 +-
14506 net/ipv6/addrconf.c | 18 +-
14507 net/ipv6/af_inet6.c | 2 +-
14508 net/ipv6/datagram.c | 2 +-
14509 net/ipv6/icmp.c | 2 +-
14510 net/ipv6/ip6_fib.c | 4 +-
14511 net/ipv6/ip6_gre.c | 10 +-
14512 net/ipv6/ip6_tunnel.c | 4 +-
14513 net/ipv6/ip6_vti.c | 4 +-
14514 net/ipv6/ipv6_sockglue.c | 2 +-
14515 net/ipv6/netfilter/ip6_tables.c | 12 +-
14516 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
14517 net/ipv6/ping.c | 33 +-
14518 net/ipv6/raw.c | 17 +-
14519 net/ipv6/reassembly.c | 13 +-
14520 net/ipv6/route.c | 2 +-
14521 net/ipv6/sit.c | 4 +-
14522 net/ipv6/sysctl_net_ipv6.c | 2 +-
14523 net/ipv6/udp.c | 6 +-
14524 net/ipv6/xfrm6_policy.c | 17 +-
14525 net/irda/ircomm/ircomm_tty.c | 18 +-
14526 net/iucv/af_iucv.c | 4 +-
14527 net/iucv/iucv.c | 2 +-
14528 net/key/af_key.c | 4 +-
14529 net/l2tp/l2tp_eth.c | 38 +-
14530 net/l2tp/l2tp_ip.c | 2 +-
14531 net/l2tp/l2tp_ip6.c | 2 +-
14532 net/mac80211/cfg.c | 8 +-
14533 net/mac80211/ieee80211_i.h | 3 +-
14534 net/mac80211/iface.c | 20 +-
14535 net/mac80211/main.c | 2 +-
14536 net/mac80211/pm.c | 4 +-
14537 net/mac80211/rate.c | 2 +-
14538 net/mac80211/sta_info.c | 2 +-
14539 net/mac80211/util.c | 8 +-
14540 net/mpls/af_mpls.c | 6 +-
14541 net/netfilter/ipset/ip_set_core.c | 2 +-
14542 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
14543 net/netfilter/ipvs/ip_vs_core.c | 4 +-
14544 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
14545 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
14546 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
14547 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
14548 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
14549 net/netfilter/nf_conntrack_acct.c | 2 +-
14550 net/netfilter/nf_conntrack_ecache.c | 2 +-
14551 net/netfilter/nf_conntrack_helper.c | 2 +-
14552 net/netfilter/nf_conntrack_proto.c | 2 +-
14553 net/netfilter/nf_conntrack_standalone.c | 2 +-
14554 net/netfilter/nf_conntrack_timestamp.c | 2 +-
14555 net/netfilter/nf_log.c | 10 +-
14556 net/netfilter/nf_sockopt.c | 4 +-
14557 net/netfilter/nfnetlink_log.c | 4 +-
14558 net/netfilter/nft_compat.c | 9 +-
14559 net/netfilter/xt_statistic.c | 8 +-
14560 net/netlink/af_netlink.c | 4 +-
14561 net/openvswitch/vport-internal_dev.c | 2 +-
14562 net/packet/af_packet.c | 8 +-
14563 net/phonet/pep.c | 6 +-
14564 net/phonet/socket.c | 2 +-
14565 net/phonet/sysctl.c | 2 +-
14566 net/rds/cong.c | 6 +-
14567 net/rds/ib.h | 2 +-
14568 net/rds/ib_cm.c | 2 +-
14569 net/rds/ib_recv.c | 4 +-
14570 net/rds/iw.h | 2 +-
14571 net/rds/iw_cm.c | 2 +-
14572 net/rds/iw_recv.c | 4 +-
14573 net/rds/rds.h | 2 +-
14574 net/rds/tcp.c | 2 +-
14575 net/rds/tcp_send.c | 2 +-
14576 net/rxrpc/af_rxrpc.c | 2 +-
14577 net/rxrpc/ar-ack.c | 14 +-
14578 net/rxrpc/ar-call.c | 2 +-
14579 net/rxrpc/ar-connection.c | 2 +-
14580 net/rxrpc/ar-connevent.c | 2 +-
14581 net/rxrpc/ar-input.c | 4 +-
14582 net/rxrpc/ar-internal.h | 8 +-
14583 net/rxrpc/ar-local.c | 2 +-
14584 net/rxrpc/ar-output.c | 4 +-
14585 net/rxrpc/ar-peer.c | 2 +-
14586 net/rxrpc/ar-proc.c | 4 +-
14587 net/rxrpc/ar-transport.c | 2 +-
14588 net/rxrpc/rxkad.c | 4 +-
14589 net/sched/sch_generic.c | 4 +-
14590 net/sctp/ipv6.c | 6 +-
14591 net/sctp/protocol.c | 10 +-
14592 net/sctp/sm_sideeffect.c | 2 +-
14593 net/sctp/socket.c | 21 +-
14594 net/sctp/sysctl.c | 10 +-
14595 net/socket.c | 18 +-
14596 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
14597 net/sunrpc/clnt.c | 4 +-
14598 net/sunrpc/sched.c | 4 +-
14599 net/sunrpc/svc.c | 4 +-
14600 net/sunrpc/svcauth_unix.c | 2 +-
14601 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
14602 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
14603 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
14604 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
14605 net/tipc/netlink_compat.c | 12 +-
14606 net/tipc/subscr.c | 2 +-
14607 net/unix/af_unix.c | 7 +-
14608 net/unix/sysctl_net_unix.c | 2 +-
14609 net/wireless/wext-core.c | 19 +-
14610 net/xfrm/xfrm_policy.c | 16 +-
14611 net/xfrm/xfrm_state.c | 33 +-
14612 net/xfrm/xfrm_sysctl.c | 2 +-
14613 scripts/Kbuild.include | 2 +-
14614 scripts/Makefile.build | 2 +-
14615 scripts/Makefile.clean | 3 +-
14616 scripts/Makefile.host | 69 +-
14617 scripts/basic/fixdep.c | 12 +-
14618 scripts/dtc/checks.c | 14 +-
14619 scripts/dtc/data.c | 6 +-
14620 scripts/dtc/flattree.c | 8 +-
14621 scripts/dtc/livetree.c | 4 +-
14622 scripts/gcc-plugin.sh | 51 +
14623 scripts/headers_install.sh | 1 +
14624 scripts/kallsyms.c | 4 +-
14625 scripts/kconfig/lkc.h | 5 +-
14626 scripts/kconfig/menu.c | 2 +-
14627 scripts/kconfig/symbol.c | 6 +-
14628 scripts/link-vmlinux.sh | 2 +-
14629 scripts/mod/file2alias.c | 14 +-
14630 scripts/mod/modpost.c | 25 +-
14631 scripts/mod/modpost.h | 6 +-
14632 scripts/mod/sumversion.c | 2 +-
14633 scripts/module-common.lds | 4 +
14634 scripts/package/builddeb | 1 +
14635 scripts/pnmtologo.c | 6 +-
14636 scripts/sortextable.h | 6 +-
14637 scripts/tags.sh | 2 +-
14638 security/Kconfig | 692 +-
14639 security/integrity/ima/ima.h | 4 +-
14640 security/integrity/ima/ima_api.c | 2 +-
14641 security/integrity/ima/ima_fs.c | 4 +-
14642 security/integrity/ima/ima_queue.c | 2 +-
14643 security/keys/key.c | 18 +-
14644 security/selinux/avc.c | 6 +-
14645 security/selinux/include/xfrm.h | 2 +-
14646 security/yama/yama_lsm.c | 2 +-
14647 sound/aoa/codecs/onyx.c | 7 +-
14648 sound/aoa/codecs/onyx.h | 1 +
14649 sound/core/oss/pcm_oss.c | 18 +-
14650 sound/core/pcm_compat.c | 2 +-
14651 sound/core/pcm_native.c | 4 +-
14652 sound/core/sound.c | 2 +-
14653 sound/drivers/mts64.c | 14 +-
14654 sound/drivers/opl4/opl4_lib.c | 2 +-
14655 sound/drivers/portman2x4.c | 3 +-
14656 sound/firewire/amdtp.c | 4 +-
14657 sound/firewire/amdtp.h | 4 +-
14658 sound/firewire/isight.c | 10 +-
14659 sound/firewire/scs1x.c | 8 +-
14660 sound/oss/sb_audio.c | 2 +-
14661 sound/oss/swarm_cs4297a.c | 6 +-
14662 sound/pci/hda/hda_codec.c | 2 +-
14663 sound/pci/ymfpci/ymfpci.h | 2 +-
14664 sound/pci/ymfpci/ymfpci_main.c | 12 +-
14665 sound/soc/codecs/sti-sas.c | 10 +-
14666 sound/soc/soc-ac97.c | 6 +-
14667 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
14668 tools/gcc/Makefile | 42 +
14669 tools/gcc/checker_plugin.c | 150 +
14670 tools/gcc/colorize_plugin.c | 215 +
14671 tools/gcc/constify_plugin.c | 571 +
14672 tools/gcc/gcc-common.h | 812 +
14673 tools/gcc/initify_plugin.c | 552 +
14674 tools/gcc/kallocstat_plugin.c | 188 +
14675 tools/gcc/kernexec_plugin.c | 549 +
14676 tools/gcc/latent_entropy_plugin.c | 470 +
14677 tools/gcc/size_overflow_plugin/.gitignore | 2 +
14678 tools/gcc/size_overflow_plugin/Makefile | 28 +
14679 .../disable_size_overflow_hash.data |12422 ++++++++++++
14680 .../generate_size_overflow_hash.sh | 103 +
14681 .../insert_size_overflow_asm.c | 416 +
14682 .../size_overflow_plugin/intentional_overflow.c | 1010 +
14683 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
14684 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
14685 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
14686 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
14687 .../size_overflow_hash_aux.data | 92 +
14688 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
14689 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
14690 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
14691 .../size_overflow_plugin_hash.c | 352 +
14692 .../size_overflow_plugin/size_overflow_transform.c | 749 +
14693 .../size_overflow_transform_core.c | 1010 +
14694 tools/gcc/stackleak_plugin.c | 436 +
14695 tools/gcc/structleak_plugin.c | 287 +
14696 tools/include/linux/compiler.h | 8 +
14697 tools/lib/api/Makefile | 2 +-
14698 tools/perf/util/include/asm/alternative-asm.h | 3 +
14699 tools/virtio/linux/uaccess.h | 2 +-
14700 virt/kvm/kvm_main.c | 42 +-
14701 1944 files changed, 66925 insertions(+), 8949 deletions(-)
14702 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
14703 Author: Matthew Wilcox <willy@linux.intel.com>
14704 Date: Tue Feb 2 16:57:52 2016 -0800
14705
14706 radix-tree: fix race in gang lookup
14707
14708 If the indirect_ptr bit is set on a slot, that indicates we need to redo
14709 the lookup. Introduce a new function radix_tree_iter_retry() which
14710 forces the loop to retry the lookup by setting 'slot' to NULL and
14711 turning the iterator back to point at the problematic entry.
14712
14713 This is a pretty rare problem to hit at the moment; the lookup has to
14714 race with a grow of the radix tree from a height of 0. The consequences
14715 of hitting this race are that gang lookup could return a pointer to a
14716 radix_tree_node instead of a pointer to whatever the user had inserted
14717 in the tree.
14718
14719 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
14720 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
14721 Cc: Hugh Dickins <hughd@google.com>
14722 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14723 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
14724 Cc: <stable@vger.kernel.org>
14725 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14726 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14727
14728 include/linux/radix-tree.h | 16 ++++++++++++++++
14729 lib/radix-tree.c | 12 ++++++++++--
14730 2 files changed, 26 insertions(+), 2 deletions(-)
14731
14732 commit bf628043b4589c910919a0f221ae7f42aa8cea93
14733 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14734 Date: Wed Feb 3 02:11:03 2016 +0100
14735
14736 unix: correctly track in-flight fds in sending process user_struct
14737
14738 The commit referenced in the Fixes tag incorrectly accounted the number
14739 of in-flight fds over a unix domain socket to the original opener
14740 of the file-descriptor. This allows another process to arbitrary
14741 deplete the original file-openers resource limit for the maximum of
14742 open files. Instead the sending processes and its struct cred should
14743 be credited.
14744
14745 To do so, we add a reference counted struct user_struct pointer to the
14746 scm_fp_list and use it to account for the number of inflight unix fds.
14747
14748 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
14749 Reported-by: David Herrmann <dh.herrmann@gmail.com>
14750 Cc: David Herrmann <dh.herrmann@gmail.com>
14751 Cc: Willy Tarreau <w@1wt.eu>
14752 Cc: Linus Torvalds <torvalds@linux-foundation.org>
14753 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14754 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14755 Signed-off-by: David S. Miller <davem@davemloft.net>
14756
14757 include/net/af_unix.h | 4 ++--
14758 include/net/scm.h | 1 +
14759 net/core/scm.c | 7 +++++++
14760 net/unix/af_unix.c | 4 ++--
14761 net/unix/garbage.c | 8 ++++----
14762 5 files changed, 16 insertions(+), 8 deletions(-)
14763
14764 commit e830db443ff78d70b7b63536e688d73907face0c
14765 Author: Mike Kravetz <mike.kravetz@oracle.com>
14766 Date: Fri Jan 15 16:57:37 2016 -0800
14767
14768 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
14769
14770 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
14771 argument end is of type pgoff_t. It was being converted to a vaddr
14772 offset and passed to unmap_hugepage_range. However, end was also being
14773 used as an argument to the vma_interval_tree_foreach controlling loop.
14774 In addition, the conversion of end to vaddr offset was incorrect.
14775
14776 hugetlb_vmtruncate_list is called as part of a file truncate or
14777 fallocate hole punch operation.
14778
14779 When truncating a hugetlbfs file, this bug could prevent some pages from
14780 being unmapped. This is possible if there are multiple vmas mapping the
14781 file, and there is a sufficiently sized hole between the mappings. The
14782 size of the hole between two vmas (A,B) must be such that the starting
14783 virtual address of B is greater than (ending virtual address of A <<
14784 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
14785 pages are not properly unmapped during truncate, the following BUG is
14786 hit:
14787
14788 kernel BUG at fs/hugetlbfs/inode.c:428!
14789
14790 In the fallocate hole punch case, this bug could prevent pages from
14791 being unmapped as in the truncate case. However, for hole punch the
14792 result is that unmapped pages will not be removed during the operation.
14793 For hole punch, it is also possible that more pages than desired will be
14794 unmapped. This unnecessary unmapping will cause page faults to
14795 reestablish the mappings on subsequent page access.
14796
14797 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
14798 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
14799 Cc: Hugh Dickins <hughd@google.com>
14800 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
14801 Cc: Davidlohr Bueso <dave@stgolabs.net>
14802 Cc: Dave Hansen <dave.hansen@linux.intel.com>
14803 Cc: <stable@vger.kernel.org> [4.3]
14804 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14805 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14806
14807 fs/hugetlbfs/inode.c | 19 +++++++++++--------
14808 1 files changed, 11 insertions(+), 8 deletions(-)
14809
14810 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
14811 Author: Takashi Iwai <tiwai@suse.de>
14812 Date: Thu Feb 4 17:06:13 2016 +0100
14813
14814 ALSA: timer: Fix leftover link at closing
14815
14816 In ALSA timer core, the active timer instance is managed in
14817 active_list linked list. Each element is added / removed dynamically
14818 at timer start, stop and in timer interrupt. The problem is that
14819 snd_timer_interrupt() has a thinko and leaves the element in
14820 active_list when it's the last opened element. This eventually leads
14821 to list corruption or use-after-free error.
14822
14823 This hasn't been revealed because we used to delete the list forcibly
14824 in snd_timer_stop() in the past. However, the recent fix avoids the
14825 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
14826 corruption due to double start or stop]), and this leak hits reality.
14827
14828 This patch fixes the link management in snd_timer_interrupt(). Now it
14829 simply unlinks no matter which stream is.
14830
14831 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
14832 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14833 Cc: <stable@vger.kernel.org>
14834 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14835
14836 sound/core/timer.c | 4 ++--
14837 1 files changed, 2 insertions(+), 2 deletions(-)
14838
14839 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
14840 Author: Konstantin Khlebnikov <koct9i@gmail.com>
14841 Date: Fri Feb 5 15:37:01 2016 -0800
14842
14843 radix-tree: fix oops after radix_tree_iter_retry
14844
14845 Helper radix_tree_iter_retry() resets next_index to the current index.
14846 In following radix_tree_next_slot current chunk size becomes zero. This
14847 isn't checked and it tries to dereference null pointer in slot.
14848
14849 Tagged iterator is fine because retry happens only at slot 0 where tag
14850 bitmask in iter->tags is filled with single bit.
14851
14852 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
14853 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
14854 Cc: Matthew Wilcox <willy@linux.intel.com>
14855 Cc: Hugh Dickins <hughd@google.com>
14856 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14857 Cc: Jeremiah Mahler <jmmahler@gmail.com>
14858 Cc: <stable@vger.kernel.org>
14859 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14860 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14861
14862 include/linux/radix-tree.h | 6 +++---
14863 1 files changed, 3 insertions(+), 3 deletions(-)
14864
14865 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
14866 Merge: 438be0b 256aeaf
14867 Author: Brad Spengler <spender@grsecurity.net>
14868 Date: Sun Feb 7 08:29:33 2016 -0500
14869
14870 Merge branch 'pax-test' into grsec-test
14871
14872 commit 256aeaf87c22de8edf1f03682a572c590ae07771
14873 Author: Brad Spengler <spender@grsecurity.net>
14874 Date: Sun Feb 7 08:29:09 2016 -0500
14875
14876 Update to pax-linux-4.3.5-test28.patch:
14877 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
14878 - spender fixed UDEREF on arm
14879
14880 arch/arm/Kconfig | 1 +
14881 arch/arm/include/asm/domain.h | 21 ++++++++-
14882 arch/arm/include/asm/futex.h | 9 ----
14883 arch/arm/include/asm/thread_info.h | 3 +
14884 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14885 arch/arm/kernel/entry-armv.S | 2 +-
14886 arch/arm/kernel/process.c | 2 +-
14887 arch/arm/mm/alignment.c | 8 ----
14888 arch/x86/mm/numa.c | 2 +-
14889 security/Kconfig | 1 -
14890 10 files changed, 60 insertions(+), 70 deletions(-)
14891
14892 commit 438be0bd112bd17942b2628c53054dc1007558a1
14893 Author: Brad Spengler <spender@grsecurity.net>
14894 Date: Sat Feb 6 19:50:31 2016 -0500
14895
14896 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
14897 ARM systems reported on the forums
14898
14899 arch/arm/Kconfig | 1 +
14900 arch/arm/include/asm/domain.h | 21 ++++++++-
14901 arch/arm/include/asm/futex.h | 9 ----
14902 arch/arm/include/asm/thread_info.h | 3 +
14903 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14904 arch/arm/kernel/entry-armv.S | 2 +-
14905 arch/arm/kernel/process.c | 2 +-
14906 arch/arm/mm/alignment.c | 8 ----
14907 security/Kconfig | 1 -
14908 9 files changed, 59 insertions(+), 69 deletions(-)
14909
14910 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
14911 Author: Brad Spengler <spender@grsecurity.net>
14912 Date: Sat Feb 6 11:21:53 2016 -0500
14913
14914 Fix another compiler warning
14915
14916 net/ipv4/tcp_input.c | 2 ++
14917 1 files changed, 2 insertions(+), 0 deletions(-)
14918
14919 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
14920 Author: Brad Spengler <spender@grsecurity.net>
14921 Date: Sat Feb 6 11:16:12 2016 -0500
14922
14923 Fix two compiler warnings
14924
14925 kernel/pid.c | 5 ++---
14926 kernel/ptrace.c | 3 ++-
14927 2 files changed, 4 insertions(+), 4 deletions(-)
14928
14929 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
14930 Author: Brad Spengler <spender@grsecurity.net>
14931 Date: Wed Feb 3 21:22:40 2016 -0500
14932
14933 Apply fix for integer truncation in NUMA init code, reported by
14934 x14sg1 on the forums:
14935 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
14936
14937 arch/x86/mm/numa.c | 2 +-
14938 1 files changed, 1 insertions(+), 1 deletions(-)
14939
14940 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
14941 Merge: a781740 016d0d8
14942 Author: Brad Spengler <spender@grsecurity.net>
14943 Date: Wed Feb 3 21:20:58 2016 -0500
14944
14945 Merge branch 'pax-test' into grsec-test
14946
14947 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
14948 Author: Brad Spengler <spender@grsecurity.net>
14949 Date: Wed Feb 3 21:20:10 2016 -0500
14950
14951 Update to pax-linux-4.3.5-test27.patch:
14952 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
14953 - restored padding in fpregs_state for storing AVX-512 state in the future
14954 - constified netlink_dump_control
14955 - added const version of debug_gimple_stmt for gcc plugins, by Emese
14956 - Emese fixed a bug in initify that could have initified too much
14957 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
14958
14959 arch/x86/include/asm/fpu/types.h | 1 +
14960 arch/x86/include/asm/mmu_context.h | 2 +-
14961 block/blk-cgroup.c | 18 ++--
14962 block/cfq-iosched.c | 4 +-
14963 crypto/crypto_user.c | 8 ++-
14964 drivers/acpi/apei/ghes.c | 6 +-
14965 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
14966 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
14967 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
14968 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
14969 drivers/infiniband/core/netlink.c | 5 +-
14970 drivers/infiniband/hw/cxgb4/device.c | 6 +-
14971 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
14972 drivers/md/bcache/alloc.c | 2 +-
14973 drivers/md/bcache/bcache.h | 10 +-
14974 drivers/md/bcache/btree.c | 2 +-
14975 drivers/md/bcache/io.c | 10 +-
14976 drivers/md/bcache/journal.c | 2 +-
14977 drivers/md/bcache/stats.c | 26 +++---
14978 drivers/md/bcache/stats.h | 16 ++--
14979 drivers/md/bcache/super.c | 2 +-
14980 drivers/md/bcache/sysfs.c | 20 +++---
14981 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
14982 drivers/md/dm-raid.c | 2 +-
14983 drivers/md/md.c | 6 +-
14984 drivers/md/md.h | 2 +-
14985 drivers/md/raid1.c | 2 +-
14986 drivers/md/raid10.c | 2 +-
14987 drivers/md/raid5.c | 4 +-
14988 drivers/media/pci/zoran/zoran.h | 1 -
14989 drivers/media/pci/zoran/zoran_driver.c | 3 -
14990 drivers/net/ethernet/sfc/selftest.c | 20 +++---
14991 drivers/net/irda/vlsi_ir.c | 18 ++--
14992 drivers/net/irda/vlsi_ir.h | 14 ++--
14993 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
14994 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
14995 drivers/net/wireless/ath/carl9170/main.c | 10 +-
14996 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
14997 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
14998 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
14999 drivers/scsi/hptiop.c | 2 -
15000 drivers/scsi/hptiop.h | 1 -
15001 drivers/scsi/ipr.c | 6 +-
15002 drivers/scsi/ipr.h | 2 +-
15003 drivers/scsi/qla2xxx/qla_target.c | 10 +-
15004 drivers/scsi/qla2xxx/qla_target.h | 2 +-
15005 fs/btrfs/ctree.c | 2 +-
15006 fs/btrfs/ctree.h | 4 +-
15007 fs/btrfs/delayed-ref.c | 4 +-
15008 fs/btrfs/disk-io.c | 4 +-
15009 fs/btrfs/file.c | 4 +-
15010 fs/btrfs/raid56.c | 32 ++++----
15011 fs/btrfs/tests/btrfs-tests.c | 2 +-
15012 fs/btrfs/transaction.c | 2 +-
15013 fs/btrfs/tree-log.c | 8 +-
15014 fs/btrfs/volumes.c | 14 ++--
15015 fs/btrfs/volumes.h | 22 +++---
15016 fs/jbd2/commit.c | 2 +-
15017 fs/jbd2/transaction.c | 4 +-
15018 fs/ocfs2/dlm/dlmcommon.h | 4 +-
15019 fs/ocfs2/dlm/dlmdebug.c | 10 +-
15020 fs/ocfs2/dlm/dlmdomain.c | 4 +-
15021 fs/ocfs2/dlm/dlmmaster.c | 4 +-
15022 include/acpi/ghes.h | 2 +-
15023 include/linux/blk-cgroup.h | 24 +++---
15024 include/linux/jbd2.h | 2 +-
15025 include/linux/netlink.h | 12 ++--
15026 include/net/cfg802154.h | 2 +-
15027 include/net/mac80211.h | 2 +-
15028 include/net/neighbour.h | 2 +-
15029 kernel/rcu/tree_plugin.h | 4 +-
15030 net/batman-adv/routing.c | 4 +-
15031 net/batman-adv/soft-interface.c | 2 +-
15032 net/batman-adv/translation-table.c | 14 ++--
15033 net/batman-adv/types.h | 2 +-
15034 net/core/neighbour.c | 14 ++--
15035 net/core/rtnetlink.c | 2 +-
15036 net/ipv4/arp.c | 2 +-
15037 net/ipv4/inet_diag.c | 4 +-
15038 net/ipv4/xfrm4_state.c | 4 +-
15039 net/ipv6/ndisc.c | 2 +-
15040 net/mac80211/cfg.c | 2 +-
15041 net/mac80211/debugfs_key.c | 2 +-
15042 net/mac80211/key.c | 4 +-
15043 net/mac80211/tx.c | 2 +-
15044 net/mac80211/wpa.c | 10 +-
15045 net/mac802154/iface.c | 4 +-
15046 net/netfilter/ipset/ip_set_core.c | 2 +-
15047 net/netfilter/nf_conntrack_netlink.c | 22 +++---
15048 net/netfilter/nf_tables_api.c | 13 ++--
15049 net/netfilter/nfnetlink_acct.c | 7 +-
15050 net/netfilter/nfnetlink_cthelper.c | 2 +-
15051 net/netfilter/nfnetlink_cttimeout.c | 2 +-
15052 net/netlink/af_netlink.c | 10 ++-
15053 net/netlink/diag.c | 2 +-
15054 net/netlink/genetlink.c | 14 ++--
15055 net/packet/af_packet.c | 18 ++--
15056 net/packet/diag.c | 2 +-
15057 net/packet/internal.h | 6 +-
15058 net/unix/diag.c | 2 +-
15059 net/xfrm/xfrm_user.c | 2 +-
15060 security/apparmor/include/policy.h | 2 +-
15061 security/apparmor/policy.c | 4 +-
15062 sound/core/seq/seq_clientmgr.c | 2 +-
15063 sound/core/seq/seq_fifo.c | 6 +-
15064 sound/core/seq/seq_fifo.h | 2 +-
15065 tools/gcc/gcc-common.h | 24 ++++--
15066 tools/gcc/initify_plugin.c | 7 +-
15067 tools/lib/api/Makefile | 2 +-
15068 109 files changed, 399 insertions(+), 391 deletions(-)
15069
15070 commit a7817402ac837b1aee07fac42537a02097055098
15071 Author: Matt Fleming <matt@codeblueprint.co.uk>
15072 Date: Fri Jan 29 11:36:10 2016 +0000
15073
15074 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
15075
15076 There are a couple of nasty truncation bugs lurking in the pageattr
15077 code that can be triggered when mapping EFI regions, e.g. when we pass
15078 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
15079 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
15080
15081 Viorel-Cătălin managed to trigger this bug on his Dell machine that
15082 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
15083 When calling populate_pud() the end of the region gets calculated
15084 incorrectly in the following buggy expression,
15085
15086 end = start + (cpa->numpages << PAGE_SHIFT);
15087
15088 And only 188416 pages are mapped. Next, populate_pud() gets invoked
15089 for a second time because of the loop in __change_page_attr_set_clr(),
15090 only this time no pages get mapped because shifting the remaining
15091 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
15092 loop in __change_page_attr_set_clr() spins forever because we fail to
15093 map progress.
15094
15095 Hitting this bug depends very much on the virtual address we pick to
15096 map the large region at and how many pages we map on the initial run
15097 through the loop. This explains why this issue was only recently hit
15098 with the introduction of commit
15099
15100 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
15101 entries bottom-up at runtime, instead of top-down")
15102
15103 It's interesting to note that safe uses of cpa->numpages do exist in
15104 the pageattr code. If instead of shifting ->numpages we multiply by
15105 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
15106 so the result is unsigned long.
15107
15108 To avoid surprises when users try to convert very large cpa->numpages
15109 values to addresses, change the data type from 'int' to 'unsigned
15110 long', thereby making it suitable for shifting by PAGE_SHIFT without
15111 any type casting.
15112
15113 The alternative would be to make liberal use of casting, but that is
15114 far more likely to cause problems in the future when someone adds more
15115 code and fails to cast properly; this bug was difficult enough to
15116 track down in the first place.
15117
15118 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
15119 Acked-by: Borislav Petkov <bp@alien8.de>
15120 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
15121 Cc: <stable@vger.kernel.org>
15122 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
15123 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
15124 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
15125 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
15126
15127 arch/x86/mm/pageattr.c | 4 ++--
15128 1 files changed, 2 insertions(+), 2 deletions(-)
15129
15130 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
15131 Author: Jan Beulich <JBeulich@suse.com>
15132 Date: Tue Jan 26 04:15:18 2016 -0700
15133
15134 x86/mm: Fix types used in pgprot cacheability flags translations
15135
15136 For PAE kernels "unsigned long" is not suitable to hold page protection
15137 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
15138 few W+X pages getting reported as insecure during boot (observed namely
15139 for the entire initrd range).
15140
15141 Fixes: 281d4078be ("x86: Make page cache mode a real type")
15142 Signed-off-by: Jan Beulich <jbeulich@suse.com>
15143 Reviewed-by: Juergen Gross <JGross@suse.com>
15144 Cc: stable@vger.kernel.org
15145 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
15146 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
15147
15148 arch/x86/include/asm/pgtable_types.h | 6 ++----
15149 1 files changed, 2 insertions(+), 4 deletions(-)
15150
15151 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
15152 Merge: 682d661 f74425b
15153 Author: Brad Spengler <spender@grsecurity.net>
15154 Date: Sun Jan 31 15:06:25 2016 -0500
15155
15156 Merge branch 'pax-test' into grsec-test
15157
15158 Conflicts:
15159 drivers/net/slip/slhc.c
15160 include/linux/sched.h
15161 net/unix/af_unix.c
15162 sound/core/timer.c
15163
15164 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
15165 Merge: d14af1f 849a2d3
15166 Author: Brad Spengler <spender@grsecurity.net>
15167 Date: Sun Jan 31 15:02:55 2016 -0500
15168
15169 Merge branch 'linux-4.3.y' into pax-test
15170
15171 Conflicts:
15172 arch/x86/include/asm/mmu_context.h
15173
15174 commit 682d6611d75542e351c973c8dd74a99d3966c073
15175 Author: Brad Spengler <spender@grsecurity.net>
15176 Date: Sat Jan 30 13:05:03 2016 -0500
15177
15178 Based on a report from Mathias Krause, fix up a number of additional instances
15179 of ulong overflow when passing in values to gr_learn_resource by saturating
15180 to ULONG_MAX
15181
15182 mm/mlock.c | 11 ++++++++---
15183 mm/mmap.c | 16 +++++++++++++---
15184 2 files changed, 21 insertions(+), 6 deletions(-)
15185
15186 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
15187 Author: Jann Horn <jann@thejh.net>
15188 Date: Sat Dec 26 06:00:48 2015 +0100
15189
15190 seccomp: always propagate NO_NEW_PRIVS on tsync
15191
15192 Before this patch, a process with some permissive seccomp filter
15193 that was applied by root without NO_NEW_PRIVS was able to add
15194 more filters to itself without setting NO_NEW_PRIVS by setting
15195 the new filter from a throwaway thread with NO_NEW_PRIVS.
15196
15197 Signed-off-by: Jann Horn <jann@thejh.net>
15198 Cc: stable@vger.kernel.org
15199 Signed-off-by: Kees Cook <keescook@chromium.org>
15200
15201 kernel/seccomp.c | 22 +++++++++++-----------
15202 1 files changed, 11 insertions(+), 11 deletions(-)
15203
15204 commit b85450498a3bbf269441c8963d7574bb3079c838
15205 Merge: 59c216f d14af1f
15206 Author: Brad Spengler <spender@grsecurity.net>
15207 Date: Fri Jan 29 20:54:13 2016 -0500
15208
15209 Merge branch 'pax-test' into grsec-test
15210
15211 commit d14af1f1dd66511f3f0674deee2b572972012b39
15212 Author: Brad Spengler <spender@grsecurity.net>
15213 Date: Fri Jan 29 20:53:51 2016 -0500
15214
15215 Update to pax-linux-4.3.4-test26.patch:
15216 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
15217
15218 fs/cifs/file.c | 2 +-
15219 fs/gfs2/file.c | 2 +-
15220 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
15221 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
15222 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
15223 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
15224 .../size_overflow_transform_core.c | 5 +
15225 7 files changed, 102 insertions(+), 15 deletions(-)
15226
15227 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
15228 Author: Brad Spengler <spender@grsecurity.net>
15229 Date: Wed Jan 27 17:57:21 2016 -0500
15230
15231 Fix a size_overflow report reported by Mathias Krause in our
15232 truncation of an loff_t to an unsigned long when being passed
15233 to gr_learn_resource() (as all resource checks are against unsigned long
15234 values)
15235
15236 fs/attr.c | 5 ++++-
15237 1 files changed, 4 insertions(+), 1 deletions(-)
15238
15239 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
15240 Author: Yuchung Cheng <ycheng@google.com>
15241 Date: Wed Jan 6 12:42:38 2016 -0800
15242
15243 tcp: fix zero cwnd in tcp_cwnd_reduction
15244
15245 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
15246 conditionally") introduced a bug that cwnd may become 0 when both
15247 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
15248 to a div-by-zero if the connection starts another cwnd reduction
15249 phase by setting tp->prior_cwnd to the current cwnd (0) in
15250 tcp_init_cwnd_reduction().
15251
15252 To prevent this we skip PRR operation when nothing is acked or
15253 sacked. Then cwnd must be positive in all cases as long as ssthresh
15254 is positive:
15255
15256 1) The proportional reduction mode
15257 inflight > ssthresh > 0
15258
15259 2) The reduction bound mode
15260 a) inflight == ssthresh > 0
15261
15262 b) inflight < ssthresh
15263 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
15264
15265 Therefore in all cases inflight and sndcnt can not both be 0.
15266 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
15267
15268 In reality this bug is triggered only with a sequence of less common
15269 events. For example, the connection is terminating an ECN-triggered
15270 cwnd reduction with an inflight 0, then it receives reordered/old
15271 ACKs or DSACKs from prior transmission (which acks nothing). Or the
15272 connection is in fast recovery stage that marks everything lost,
15273 but fails to retransmit due to local issues, then receives data
15274 packets from other end which acks nothing.
15275
15276 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
15277 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
15278 Signed-off-by: Yuchung Cheng <ycheng@google.com>
15279 Signed-off-by: Neal Cardwell <ncardwell@google.com>
15280 Signed-off-by: Eric Dumazet <edumazet@google.com>
15281 Signed-off-by: David S. Miller <davem@davemloft.net>
15282
15283 net/ipv4/tcp_input.c | 3 +++
15284 1 files changed, 3 insertions(+), 0 deletions(-)
15285
15286 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
15287 Author: Eric Dumazet <edumazet@google.com>
15288 Date: Sun Jan 24 13:53:50 2016 -0800
15289
15290 af_unix: fix struct pid memory leak
15291
15292 Dmitry reported a struct pid leak detected by a syzkaller program.
15293
15294 Bug happens in unix_stream_recvmsg() when we break the loop when a
15295 signal is pending, without properly releasing scm.
15296
15297 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
15298 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15299 Signed-off-by: Eric Dumazet <edumazet@google.com>
15300 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
15301 Signed-off-by: David S. Miller <davem@davemloft.net>
15302
15303 net/unix/af_unix.c | 1 +
15304 1 files changed, 1 insertions(+), 0 deletions(-)
15305
15306 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
15307 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15308 Date: Fri Jan 22 01:39:43 2016 +0100
15309
15310 pptp: fix illegal memory access caused by multiple bind()s
15311
15312 Several times already this has been reported as kasan reports caused by
15313 syzkaller and trinity and people always looked at RCU races, but it is
15314 much more simple. :)
15315
15316 In case we bind a pptp socket multiple times, we simply add it to
15317 the callid_sock list but don't remove the old binding. Thus the old
15318 socket stays in the bucket with unused call_id indexes and doesn't get
15319 cleaned up. This causes various forms of kasan reports which were hard
15320 to pinpoint.
15321
15322 Simply don't allow multiple binds and correct error handling in
15323 pptp_bind. Also keep sk_state bits in place in pptp_connect.
15324
15325 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
15326 Cc: Dmitry Kozlov <xeb@mail.ru>
15327 Cc: Sasha Levin <sasha.levin@oracle.com>
15328 Cc: Dmitry Vyukov <dvyukov@google.com>
15329 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15330 Cc: Dave Jones <davej@codemonkey.org.uk>
15331 Reported-by: Dave Jones <davej@codemonkey.org.uk>
15332 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15333 Signed-off-by: David S. Miller <davem@davemloft.net>
15334
15335 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
15336 1 files changed, 24 insertions(+), 10 deletions(-)
15337
15338 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
15339 Author: Brad Spengler <spender@grsecurity.net>
15340 Date: Tue Jan 26 18:17:10 2016 -0500
15341
15342 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
15343 wiki but was removed from the config help at some point
15344
15345 grsecurity/Kconfig | 3 +++
15346 1 files changed, 3 insertions(+), 0 deletions(-)
15347
15348 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
15349 Author: Thomas Egerer <hakke_007@gmx.de>
15350 Date: Mon Jan 25 12:58:44 2016 +0100
15351
15352 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
15353
15354 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
15355 to select CRYPTO_ECHAINIV in order to work properly. This solves the
15356 issues caused by a misconfiguration as described in [1].
15357 The original approach, patching crypto/Kconfig was turned down by
15358 Herbert Xu [2].
15359
15360 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
15361 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
15362
15363 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
15364 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
15365 Signed-off-by: David S. Miller <davem@davemloft.net>
15366
15367 net/ipv4/Kconfig | 1 +
15368 net/ipv6/Kconfig | 1 +
15369 2 files changed, 2 insertions(+), 0 deletions(-)
15370
15371 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
15372 Merge: 904114c 6339c1f
15373 Author: Brad Spengler <spender@grsecurity.net>
15374 Date: Tue Jan 26 18:08:40 2016 -0500
15375
15376 Merge branch 'pax-test' into grsec-test
15377
15378 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
15379 Author: Brad Spengler <spender@grsecurity.net>
15380 Date: Tue Jan 26 18:07:51 2016 -0500
15381
15382 Update to pax-linux-4.3.4-test25.patch:
15383 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
15384 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
15385 - fixed a few REFCOUNT false positives in SNMP related statistics
15386
15387 arch/x86/Kconfig | 2 +-
15388 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
15389 include/net/snmp.h | 10 +++++-----
15390 kernel/fork.c | 11 +++++++++--
15391 net/ipv4/proc.c | 8 ++++----
15392 net/ipv6/addrconf.c | 4 ++--
15393 net/ipv6/proc.c | 10 +++++-----
15394 7 files changed, 43 insertions(+), 19 deletions(-)
15395
15396 commit 904114c2fce3fdff5d57e763da56a78960db4e19
15397 Author: Al Viro <viro@zeniv.linux.org.uk>
15398 Date: Fri Jan 22 18:08:52 2016 -0500
15399
15400 make sure that freeing shmem fast symlinks is RCU-delayed
15401
15402 Cc: stable@vger.kernel.org # v4.2+
15403 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15404
15405 include/linux/shmem_fs.h | 5 +----
15406 mm/shmem.c | 9 ++++-----
15407 2 files changed, 5 insertions(+), 9 deletions(-)
15408
15409 commit ab86adee64312a2f827dd516cb199521327943ed
15410 Author: Sasha Levin <sasha.levin@oracle.com>
15411 Date: Mon Jan 18 19:23:51 2016 -0500
15412
15413 netfilter: nf_conntrack: use safer way to lock all buckets
15414
15415 When we need to lock all buckets in the connection hashtable we'd attempt to
15416 lock 1024 spinlocks, which is way more preemption levels than supported by
15417 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
15418 enabled, and if it was - use only 8 buckets(!).
15419
15420 Fix this by using a global lock and synchronize all buckets on it when we
15421 need to lock them all. This is pretty heavyweight, but is only done when we
15422 need to resize the hashtable, and that doesn't happen often enough (or at all).
15423
15424 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15425 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
15426 Reviewed-by: Florian Westphal <fw@strlen.de>
15427 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
15428
15429 Conflicts:
15430
15431 net/netfilter/nfnetlink_cttimeout.c
15432
15433 include/net/netfilter/nf_conntrack_core.h | 8 ++----
15434 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
15435 net/netfilter/nf_conntrack_helper.c | 2 +-
15436 net/netfilter/nf_conntrack_netlink.c | 2 +-
15437 4 files changed, 33 insertions(+), 17 deletions(-)
15438
15439 commit 37014723527225481c720484bb788a1a6358072f
15440 Author: Willy Tarreau <w@1wt.eu>
15441 Date: Mon Jan 18 16:36:09 2016 +0100
15442
15443 pipe: limit the per-user amount of pages allocated in pipes
15444
15445 On no-so-small systems, it is possible for a single process to cause an
15446 OOM condition by filling large pipes with data that are never read. A
15447 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
15448 memory. On small systems it may be tricky to set the pipe max size to
15449 prevent this from happening.
15450
15451 This patch makes it possible to enforce a per-user soft limit above
15452 which new pipes will be limited to a single page, effectively limiting
15453 them to 4 kB each, as well as a hard limit above which no new pipes may
15454 be created for this user. This has the effect of protecting the system
15455 against memory abuse without hurting other users, and still allowing
15456 pipes to work correctly though with less data at once.
15457
15458 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
15459 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
15460 default soft limit allows the default number of FDs per process (1024)
15461 to create pipes of the default size (64kB), thus reaching a limit of 64MB
15462 before starting to create only smaller pipes. With 256 processes limited
15463 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
15464 1084 MB of memory allocated for a user. The hard limit is disabled by
15465 default to avoid breaking existing applications that make intensive use
15466 of pipes (eg: for splicing).
15467
15468 Reported-by: socketpair@gmail.com
15469 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15470 Mitigates: CVE-2013-4312 (Linux 2.0+)
15471 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15472 Signed-off-by: Willy Tarreau <w@1wt.eu>
15473 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15474
15475 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
15476 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
15477 include/linux/pipe_fs_i.h | 4 +++
15478 include/linux/sched.h | 1 +
15479 kernel/sysctl.c | 14 ++++++++++++
15480 5 files changed, 87 insertions(+), 2 deletions(-)
15481
15482 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
15483 Merge: 540f2af 7791ecb
15484 Author: Brad Spengler <spender@grsecurity.net>
15485 Date: Sat Jan 23 10:57:11 2016 -0500
15486
15487 Merge branch 'pax-test' into grsec-test
15488
15489 commit 7791ecb84f840343a5646236fd0d34e1fb450793
15490 Merge: 470069c 399588c
15491 Author: Brad Spengler <spender@grsecurity.net>
15492 Date: Sat Jan 23 10:56:47 2016 -0500
15493
15494 Merge branch 'linux-4.3.y' into pax-test
15495
15496 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
15497 Author: Brad Spengler <spender@grsecurity.net>
15498 Date: Tue Jan 19 21:18:47 2016 -0500
15499
15500 Update size_overflow hash table
15501
15502 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
15503 1 files changed, 3 insertions(+), 1 deletions(-)
15504
15505 commit 7e649765626a28437f573f0fbe7a51a04615f041
15506 Author: Brad Spengler <spender@grsecurity.net>
15507 Date: Tue Jan 19 20:29:46 2016 -0500
15508
15509 Backport fix from: https://lkml.org/lkml/2015/12/13/187
15510
15511 fs/ext4/extents.c | 2 +-
15512 1 files changed, 1 insertions(+), 1 deletions(-)
15513
15514 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
15515 Author: Jann Horn <jann@thejh.net>
15516 Date: Tue Jan 5 18:27:30 2016 +0100
15517
15518 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
15519
15520 This replaces all code in fs/compat_ioctl.c that translated
15521 ioctl arguments into a in-kernel structure, then performed
15522 do_ioctl under set_fs(KERNEL_DS), with code that allocates
15523 data on the user stack and can call the VFS ioctl handler
15524 under USER_DS.
15525
15526 This is done as a hardening measure because the caller
15527 does not know what kind of ioctl handler will be invoked,
15528 only that no corresponding compat_ioctl handler exists and
15529 what the ioctl command number is. The accidental
15530 invocation of an unlocked_ioctl handler that unexpectedly
15531 calls copy_to_user could be a severe security issue.
15532
15533 Signed-off-by: Jann Horn <jann@thejh.net>
15534 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15535
15536 Conflicts:
15537
15538 fs/compat_ioctl.c
15539
15540 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
15541 1 files changed, 68 insertions(+), 62 deletions(-)
15542
15543 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
15544 Author: Al Viro <viro@zeniv.linux.org.uk>
15545 Date: Thu Jan 7 09:53:30 2016 -0500
15546
15547 compat_ioctl: don't pass fd around when not needed
15548
15549 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15550
15551 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
15552 fs/internal.h | 7 ++++
15553 fs/ioctl.c | 4 +-
15554 include/linux/fs.h | 2 -
15555 4 files changed, 61 insertions(+), 55 deletions(-)
15556
15557 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
15558 Author: Jann Horn <jann@thejh.net>
15559 Date: Tue Jan 5 18:27:29 2016 +0100
15560
15561 compat_ioctl: don't look up the fd twice
15562
15563 In code in fs/compat_ioctl.c that translates ioctl arguments
15564 into a in-kernel structure, then performs sys_ioctl, possibly
15565 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
15566 calls to do_ioctl calls. do_ioctl is a new function that does
15567 the same thing as sys_ioctl, but doesn't look up the fd again.
15568
15569 This change is made to avoid (potential) security issues
15570 because of ioctl handlers that accept one of the ioctl
15571 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
15572 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
15573 This can happen for multiple reasons:
15574
15575 - The ioctl command number could be reused.
15576 - The ioctl handler might not check the full ioctl
15577 command. This is e.g. true for drm_ioctl.
15578 - The ioctl handler is very special, e.g. cuse_file_ioctl
15579
15580 The real issue is that set_fs(KERNEL_DS) is used here,
15581 but that's fixed in a separate commit
15582 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
15583
15584 This change mitigates potential security issues by
15585 preventing a race that permits invocation of
15586 unlocked_ioctl handlers under KERNEL_DS through compat
15587 code even if a corresponding compat_ioctl handler exists.
15588
15589 So far, no way has been identified to use this to damage
15590 kernel memory without having CAP_SYS_ADMIN in the init ns
15591 (with the capability, doing reads/writes at arbitrary
15592 kernel addresses should be easy through CUSE's ioctl
15593 handler with FUSE_IOCTL_UNRESTRICTED set).
15594
15595 [AV: two missed sys_ioctl() taken care of]
15596
15597 Signed-off-by: Jann Horn <jann@thejh.net>
15598 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15599
15600 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
15601 1 files changed, 68 insertions(+), 54 deletions(-)
15602
15603 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
15604 Author: Vasily Kulikov <segoon@openwall.com>
15605 Date: Fri Jan 15 16:57:55 2016 -0800
15606
15607 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
15608
15609 TIMER_ENTRY_STATIC is defined as a poison pointers which
15610 should point to nowhere. Redefine them using POISON_POINTER_DELTA
15611 arithmetics to make sure they really point to non-mappable area declared
15612 by the target architecture.
15613
15614 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
15615 Acked-by: Thomas Gleixner <tglx@linutronix.de>
15616 Cc: Solar Designer <solar@openwall.com>
15617 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
15618 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
15619 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
15620
15621 Conflicts:
15622
15623 include/linux/poison.h
15624
15625 include/linux/poison.h | 2 +-
15626 1 files changed, 1 insertions(+), 1 deletions(-)
15627
15628 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
15629 Author: Brad Spengler <spender@grsecurity.net>
15630 Date: Tue Jan 19 19:41:44 2016 -0500
15631
15632 Fix ARM compilation, reported by Austin Sepp
15633
15634 grsecurity/grsec_sig.c | 1 +
15635 1 files changed, 1 insertions(+), 0 deletions(-)
15636
15637 commit e15383743443dc43460a2fd73e0db0b608610dca
15638 Author: Takashi Iwai <tiwai@suse.de>
15639 Date: Mon Jan 18 13:52:47 2016 +0100
15640
15641 ALSA: hrtimer: Fix stall by hrtimer_cancel()
15642
15643 hrtimer_cancel() waits for the completion from the callback, thus it
15644 must not be called inside the callback itself. This was already a
15645 problem in the past with ALSA hrtimer driver, and the early commit
15646 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
15647
15648 However, the previous fix is still insufficient: it may still cause a
15649 lockup when the ALSA timer instance reprograms itself in its callback.
15650 Then it invokes the start function even in snd_timer_interrupt() that
15651 is called in hrtimer callback itself, results in a CPU stall. This is
15652 no hypothetical problem but actually triggered by syzkaller fuzzer.
15653
15654 This patch tries to fix the issue again. Now we call
15655 hrtimer_try_to_cancel() at both start and stop functions so that it
15656 won't fall into a deadlock, yet giving some chance to cancel the queue
15657 if the functions have been called outside the callback. The proper
15658 hrtimer_cancel() is called in anyway at closing, so this should be
15659 enough.
15660
15661 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
15662 Cc: <stable@vger.kernel.org>
15663 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15664
15665 sound/core/hrtimer.c | 3 ++-
15666 1 files changed, 2 insertions(+), 1 deletions(-)
15667
15668 commit 12d874daf706e6e7c1ae709141859c809599297e
15669 Author: Takashi Iwai <tiwai@suse.de>
15670 Date: Tue Jan 12 12:38:02 2016 +0100
15671
15672 ALSA: seq: Fix missing NULL check at remove_events ioctl
15673
15674 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
15675 unconditionally even if there is no FIFO assigned, and this leads to
15676 an Oops due to NULL dereference. The fix is just to add a proper NULL
15677 check.
15678
15679 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15680 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15681 Cc: <stable@vger.kernel.org>
15682 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15683
15684 sound/core/seq/seq_clientmgr.c | 2 +-
15685 1 files changed, 1 insertions(+), 1 deletions(-)
15686
15687 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
15688 Author: Takashi Iwai <tiwai@suse.de>
15689 Date: Tue Jan 12 15:36:27 2016 +0100
15690
15691 ALSA: seq: Fix race at timer setup and close
15692
15693 ALSA sequencer code has an open race between the timer setup ioctl and
15694 the close of the client. This was triggered by syzkaller fuzzer, and
15695 a use-after-free was caught there as a result.
15696
15697 This patch papers over it by adding a proper queue->timer_mutex lock
15698 around the timer-related calls in the relevant code path.
15699
15700 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15701 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15702 Cc: <stable@vger.kernel.org>
15703 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15704
15705 sound/core/seq/seq_queue.c | 2 ++
15706 1 files changed, 2 insertions(+), 0 deletions(-)
15707
15708 commit b9e55ab955e59b4a636d78a748be90334a48b485
15709 Author: Takashi Iwai <tiwai@suse.de>
15710 Date: Thu Jan 14 16:30:58 2016 +0100
15711
15712 ALSA: timer: Harden slave timer list handling
15713
15714 A slave timer instance might be still accessible in a racy way while
15715 operating the master instance as it lacks of locking. Since the
15716 master operation is mostly protected with timer->lock, we should cope
15717 with it while changing the slave instance, too. Also, some linked
15718 lists (active_list and ack_list) of slave instances aren't unlinked
15719 immediately at stopping or closing, and this may lead to unexpected
15720 accesses.
15721
15722 This patch tries to address these issues. It adds spin lock of
15723 timer->lock (either from master or slave, which is equivalent) in a
15724 few places. For avoiding a deadlock, we ensure that the global
15725 slave_active_lock is always locked at first before each timer lock.
15726
15727 Also, ack and active_list of slave instances are properly unlinked at
15728 snd_timer_stop() and snd_timer_close().
15729
15730 Last but not least, remove the superfluous call of _snd_timer_stop()
15731 at removing slave links. This is a noop, and calling it may confuse
15732 readers wrt locking. Further cleanup will follow in a later patch.
15733
15734 Actually we've got reports of use-after-free by syzkaller fuzzer, and
15735 this hopefully fixes these issues.
15736
15737 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15738 Cc: <stable@vger.kernel.org>
15739 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15740
15741 sound/core/timer.c | 18 ++++++++++++++----
15742 1 files changed, 14 insertions(+), 4 deletions(-)
15743
15744 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
15745 Author: Takashi Iwai <tiwai@suse.de>
15746 Date: Wed Jan 13 17:48:01 2016 +0100
15747
15748 ALSA: timer: Fix race among timer ioctls
15749
15750 ALSA timer ioctls have an open race and this may lead to a
15751 use-after-free of timer instance object. A simplistic fix is to make
15752 each ioctl exclusive. We have already tread_sem for controlling the
15753 tread, and extend this as a global mutex to be applied to each ioctl.
15754
15755 The downside is, of course, the worse concurrency. But these ioctls
15756 aren't to be parallel accessible, in anyway, so it should be fine to
15757 serialize there.
15758
15759 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15760 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15761 Cc: <stable@vger.kernel.org>
15762 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15763
15764 sound/core/timer.c | 32 +++++++++++++++++++-------------
15765 1 files changed, 19 insertions(+), 13 deletions(-)
15766
15767 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
15768 Author: Takashi Iwai <tiwai@suse.de>
15769 Date: Wed Jan 13 21:35:06 2016 +0100
15770
15771 ALSA: timer: Fix double unlink of active_list
15772
15773 ALSA timer instance object has a couple of linked lists and they are
15774 unlinked unconditionally at snd_timer_stop(). Meanwhile
15775 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
15776 the element list itself unchanged. This ends up with unlinking twice,
15777 and it was caught by syzkaller fuzzer.
15778
15779 The fix is to use list_del_init() variant properly there, too.
15780
15781 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15782 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15783 Cc: <stable@vger.kernel.org>
15784 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15785
15786 sound/core/timer.c | 2 +-
15787 1 files changed, 1 insertions(+), 1 deletions(-)
15788
15789 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
15790 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15791 Date: Mon Jan 18 18:03:48 2016 +0100
15792
15793 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
15794
15795 It was seen that defective configurations of openvswitch could overwrite
15796 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
15797 many recursions within ovs.
15798
15799 This problem arises due to the high stack usage of openvswitch. The rest
15800 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
15801
15802 We use the already existing recursion counter in ovs_execute_actions to
15803 implement an upper bound of 5 recursions.
15804
15805 Cc: Pravin Shelar <pshelar@ovn.org>
15806 Cc: Simon Horman <simon.horman@netronome.com>
15807 Cc: Eric Dumazet <eric.dumazet@gmail.com>
15808 Cc: Simon Horman <simon.horman@netronome.com>
15809 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15810 Signed-off-by: David S. Miller <davem@davemloft.net>
15811
15812 net/openvswitch/actions.c | 19 ++++++++++++++-----
15813 1 files changed, 14 insertions(+), 5 deletions(-)
15814
15815 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
15816 Author: Ursula Braun <ursula.braun@de.ibm.com>
15817 Date: Tue Jan 19 10:41:33 2016 +0100
15818
15819 af_iucv: Validate socket address length in iucv_sock_bind()
15820
15821 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
15822 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15823 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
15824 Signed-off-by: David S. Miller <davem@davemloft.net>
15825
15826 net/iucv/af_iucv.c | 3 +++
15827 1 files changed, 3 insertions(+), 0 deletions(-)
15828
15829 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
15830 Author: Brad Spengler <spender@grsecurity.net>
15831 Date: Tue Jan 19 19:32:54 2016 -0500
15832
15833 Apply the same fix as everyone else for the recent keys vulnerability that is
15834 unexploitable under PAX_REFCOUNT
15835
15836 Make a couple more changes that no one else can/will
15837
15838 include/linux/key-type.h | 4 ++--
15839 ipc/msgutil.c | 4 ++--
15840 security/keys/internal.h | 2 +-
15841 security/keys/process_keys.c | 1 +
15842 4 files changed, 6 insertions(+), 5 deletions(-)
15843
15844 commit b56c3a63f431c193400aee17543021950bd14bc4
15845 Merge: 38b1a3d 470069c
15846 Author: Brad Spengler <spender@grsecurity.net>
15847 Date: Sun Jan 17 18:30:19 2016 -0500
15848
15849 Merge branch 'pax-test' into grsec-test
15850
15851 commit 470069cfedef2180313233d275be5901bd6d1135
15852 Author: Brad Spengler <spender@grsecurity.net>
15853 Date: Sun Jan 17 18:29:59 2016 -0500
15854
15855 Update to pax-linux-4.3.3-test22.patch:
15856 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
15857 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
15858
15859 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
15860 drivers/gpu/drm/drm_pci.c | 3 +++
15861 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
15862 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
15863 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
15864 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
15865 drivers/net/usb/asix_common.c | 3 ++-
15866 include/drm/drmP.h | 1 +
15867 8 files changed, 22 insertions(+), 29 deletions(-)
15868
15869 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
15870 Author: Brad Spengler <spender@grsecurity.net>
15871 Date: Sun Jan 17 12:33:53 2016 -0500
15872
15873 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
15874 mentioned banning execution of suid/sgid binaries, though the kernel
15875 source clearly only mentions banning execution of suid binaries. Since
15876 there's no reason for us to not ban execution of sgid binaries as well,
15877 make the implementation match the Kconfig description.
15878
15879 fs/exec.c | 4 ++--
15880 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
15881 include/linux/sched.h | 4 ++--
15882 3 files changed, 18 insertions(+), 17 deletions(-)
15883
15884 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
15885 Merge: d141a86 ea4a835
15886 Author: Brad Spengler <spender@grsecurity.net>
15887 Date: Sat Jan 16 14:12:22 2016 -0500
15888
15889 Merge branch 'pax-test' into grsec-test
15890
15891 Conflicts:
15892 drivers/gpu/drm/i810/i810_drv.c
15893
15894 commit ea4a835328ada6513ac013986764d6caea8cd348
15895 Author: Brad Spengler <spender@grsecurity.net>
15896 Date: Sat Jan 16 14:11:30 2016 -0500
15897
15898 Update to pax-linux-4.3.3-test21.patch:
15899 - fixed some fallout from the drm_drivers constification, reported by spender
15900
15901 drivers/gpu/drm/armada/armada_drv.c | 3 +--
15902 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
15903 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15904 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
15905 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15906 5 files changed, 8 insertions(+), 6 deletions(-)
15907
15908 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
15909 Author: Brad Spengler <spender@grsecurity.net>
15910 Date: Sat Jan 16 13:16:36 2016 -0500
15911
15912 compile fix
15913
15914 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15915 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
15916 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15917 3 files changed, 5 insertions(+), 3 deletions(-)
15918
15919 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
15920 Merge: 5fa135d bbda879
15921 Author: Brad Spengler <spender@grsecurity.net>
15922 Date: Sat Jan 16 12:59:22 2016 -0500
15923
15924 Merge branch 'pax-test' into grsec-test
15925
15926 commit bbda87914edf63e27fb46670bf3a373f2b963c73
15927 Author: Brad Spengler <spender@grsecurity.net>
15928 Date: Sat Jan 16 12:58:04 2016 -0500
15929
15930 Update to pax-linux-4.3.3-test20.patch:
15931 - constified drm_driver
15932 - Emese fixed a special case in handling __func__ in the initify plugin
15933 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
15934 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
15935
15936 arch/x86/kernel/cpu/perf_event.h | 2 +-
15937 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
15938 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
15939 arch/x86/kernel/uprobes.c | 2 +-
15940 arch/x86/mm/mpx.c | 2 +-
15941 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
15942 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
15943 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
15944 drivers/gpu/drm/drm_pci.c | 6 +-
15945 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
15946 drivers/gpu/drm/i915/i915_dma.c | 2 +-
15947 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
15948 drivers/gpu/drm/i915/i915_drv.h | 2 +-
15949 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
15950 drivers/gpu/drm/mga/mga_drv.c | 5 +-
15951 drivers/gpu/drm/mga/mga_drv.h | 2 +-
15952 drivers/gpu/drm/mga/mga_state.c | 2 +-
15953 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
15954 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
15955 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
15956 drivers/gpu/drm/r128/r128_drv.c | 4 +-
15957 drivers/gpu/drm/r128/r128_drv.h | 2 +-
15958 drivers/gpu/drm/r128/r128_state.c | 2 +-
15959 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
15960 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
15961 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
15962 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
15963 drivers/gpu/drm/savage/savage_bci.c | 2 +-
15964 drivers/gpu/drm/savage/savage_drv.c | 5 +-
15965 drivers/gpu/drm/savage/savage_drv.h | 2 +-
15966 drivers/gpu/drm/sis/sis_drv.c | 5 +-
15967 drivers/gpu/drm/sis/sis_drv.h | 2 +-
15968 drivers/gpu/drm/sis/sis_mm.c | 2 +-
15969 drivers/gpu/drm/via/via_dma.c | 2 +-
15970 drivers/gpu/drm/via/via_drv.c | 5 +-
15971 drivers/gpu/drm/via/via_drv.h | 2 +-
15972 include/drm/drmP.h | 2 +-
15973 mm/slab.c | 2 +-
15974 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
15975 tools/gcc/initify_plugin.c | 15 +++-
15976 .../disable_size_overflow_hash.data | 1 +
15977 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
15978 42 files changed, 156 insertions(+), 110 deletions(-)
15979
15980 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
15981 Author: Brad Spengler <spender@grsecurity.net>
15982 Date: Sat Jan 16 12:19:23 2016 -0500
15983
15984 compile fix
15985
15986 grsecurity/grsec_sig.c | 3 +--
15987 1 files changed, 1 insertions(+), 2 deletions(-)
15988
15989 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
15990 Author: Brad Spengler <spender@grsecurity.net>
15991 Date: Sat Jan 16 12:10:37 2016 -0500
15992
15993 As pointed out by Jann Horn, some distros are starting to circumvent
15994 previous assumptions about the attainability of a user to control
15995 multiple UIDs by handing out suid binaries that allow a user to run
15996 processes (including exploits) under a number of other pre-defined
15997 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
15998 (though it would have to involve some code path that doesn't involve
15999 locks) fix that here by ensuring no more than 8 users on a system can
16000 be banned before a reboot is required. If more are banned, a panic
16001 is triggered.
16002
16003 grsecurity/grsec_sig.c | 8 ++++++++
16004 1 files changed, 8 insertions(+), 0 deletions(-)
16005
16006 commit a8d37776e9521c567ebff6730d49312f72435f08
16007 Author: Eric Dumazet <edumazet@google.com>
16008 Date: Thu Dec 3 11:12:07 2015 -0800
16009
16010 proc: add a reschedule point in proc_readfd_common()
16011
16012 User can pass an arbitrary large buffer to getdents().
16013
16014 It is typically a 32KB buffer used by libc scandir() implementation.
16015
16016 When scanning /proc/{pid}/fd, we can hold cpu way too long,
16017 so add a cond_resched() to be kind with other tasks.
16018
16019 We've seen latencies of more than 50ms on real workloads.
16020
16021 Signed-off-by: Eric Dumazet <edumazet@google.com>
16022 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
16023 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16024
16025 fs/proc/fd.c | 1 +
16026 1 files changed, 1 insertions(+), 0 deletions(-)
16027
16028 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
16029 Author: Rabin Vincent <rabin@rab.in>
16030 Date: Tue Jan 12 20:17:08 2016 +0100
16031
16032 net: bpf: reject invalid shifts
16033
16034 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
16035 constant shift that can't be encoded in the immediate field of the
16036 UBFM/SBFM instructions is passed to the JIT. Since these shifts
16037 amounts, which are negative or >= regsize, are invalid, reject them in
16038 the eBPF verifier and the classic BPF filter checker, for all
16039 architectures.
16040
16041 Signed-off-by: Rabin Vincent <rabin@rab.in>
16042 Acked-by: Alexei Starovoitov <ast@kernel.org>
16043 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16044 Signed-off-by: David S. Miller <davem@davemloft.net>
16045
16046 kernel/bpf/verifier.c | 10 ++++++++++
16047 net/core/filter.c | 5 +++++
16048 2 files changed, 15 insertions(+), 0 deletions(-)
16049
16050 commit c248e115a73496625a1c64660d0eeefd67e55cbf
16051 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16052 Date: Fri Jan 8 11:00:54 2016 -0200
16053
16054 sctp: fix use-after-free in pr_debug statement
16055
16056 Dmitry Vyukov reported a use-after-free in the code expanded by the
16057 macro debug_post_sfx, which is caused by the use of the asoc pointer
16058 after it was freed within sctp_side_effect() scope.
16059
16060 This patch fixes it by allowing sctp_side_effect to clear that asoc
16061 pointer when the TCB is freed.
16062
16063 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
16064 because it will trigger DELETE_TCB too on that same loop.
16065
16066 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
16067 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
16068 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
16069
16070 The macro is already prepared to handle such NULL pointer.
16071
16072 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16073 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16074 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
16075 Signed-off-by: David S. Miller <davem@davemloft.net>
16076
16077 net/sctp/sm_sideeffect.c | 11 ++++++-----
16078 net/sctp/sm_statefuns.c | 17 ++++-------------
16079 2 files changed, 10 insertions(+), 18 deletions(-)
16080
16081 commit 395ea8a9e73e184fc14153a033000bccf4213213
16082 Author: willy tarreau <w@1wt.eu>
16083 Date: Sun Jan 10 07:54:56 2016 +0100
16084
16085 unix: properly account for FDs passed over unix sockets
16086
16087 It is possible for a process to allocate and accumulate far more FDs than
16088 the process' limit by sending them over a unix socket then closing them
16089 to keep the process' fd count low.
16090
16091 This change addresses this problem by keeping track of the number of FDs
16092 in flight per user and preventing non-privileged processes from having
16093 more FDs in flight than their configured FD limit.
16094
16095 Reported-by: socketpair@gmail.com
16096 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
16097 Mitigates: CVE-2013-4312 (Linux 2.0+)
16098 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
16099 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16100 Signed-off-by: Willy Tarreau <w@1wt.eu>
16101 Signed-off-by: David S. Miller <davem@davemloft.net>
16102
16103 include/linux/sched.h | 1 +
16104 net/unix/af_unix.c | 24 ++++++++++++++++++++----
16105 net/unix/garbage.c | 13 ++++++++-----
16106 3 files changed, 29 insertions(+), 9 deletions(-)
16107
16108 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
16109 Author: Sasha Levin <sasha.levin@oracle.com>
16110 Date: Thu Jan 7 14:52:43 2016 -0500
16111
16112 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
16113
16114 proc_dostring() needs an initialized destination string, while the one
16115 provided in proc_sctp_do_hmac_alg() contains stack garbage.
16116
16117 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
16118 accessing invalid memory.
16119
16120 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
16121 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16122 Signed-off-by: David S. Miller <davem@davemloft.net>
16123
16124 net/sctp/sysctl.c | 2 +-
16125 1 files changed, 1 insertions(+), 1 deletions(-)
16126
16127 commit 4014e09faf0fe9054119624ccfff1236e886b554
16128 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
16129 Date: Tue Nov 24 17:13:21 2015 -0500
16130
16131 RDS: fix race condition when sending a message on unbound socket
16132
16133 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
16134
16135 Sasha's found a NULL pointer dereference in the RDS connection code when
16136 sending a message to an apparently unbound socket. The problem is caused
16137 by the code checking if the socket is bound in rds_sendmsg(), which checks
16138 the rs_bound_addr field without taking a lock on the socket. This opens a
16139 race where rs_bound_addr is temporarily set but where the transport is not
16140 in rds_bind(), leading to a NULL pointer dereference when trying to
16141 dereference 'trans' in __rds_conn_create().
16142
16143 Vegard wrote a reproducer for this issue, so kindly ask him to share if
16144 you're interested.
16145
16146 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
16147 with this patch, whereas I could without.
16148
16149 Complete earlier incomplete fix to CVE-2015-6937:
16150
16151 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
16152
16153 Cc: David S. Miller <davem@davemloft.net>
16154
16155 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
16156 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
16157 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16158 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
16159 Signed-off-by: David S. Miller <davem@davemloft.net>
16160 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
16161
16162 Conflicts:
16163
16164 net/rds/send.c
16165
16166 net/rds/connection.c | 6 ------
16167 1 files changed, 0 insertions(+), 6 deletions(-)
16168
16169 commit 206df8d01104344d7588d801016a281a4cd25556
16170 Author: Sasha Levin <sasha.levin@oracle.com>
16171 Date: Tue Sep 8 10:53:40 2015 -0400
16172
16173 RDS: verify the underlying transport exists before creating a connection
16174
16175 There was no verification that an underlying transport exists when creating
16176 a connection, this would cause dereferencing a NULL ptr.
16177
16178 It might happen on sockets that weren't properly bound before attempting to
16179 send a message, which will cause a NULL ptr deref:
16180
16181 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
16182 [135546.051270] Modules linked in:
16183 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
16184 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
16185 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
16186 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
16187 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
16188 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
16189 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
16190 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
16191 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
16192 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
16193 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
16194 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
16195 [135546.064723] Stack:
16196 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
16197 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
16198 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
16199 [135546.068629] Call Trace:
16200 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
16201 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
16202 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
16203 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
16204 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
16205 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
16206 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
16207 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
16208 [135546.076349] ? __might_fault (mm/memory.c:3795)
16209 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
16210 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
16211 [135546.078856] SYSC_sendto (net/socket.c:1657)
16212 [135546.079596] ? SYSC_connect (net/socket.c:1628)
16213 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
16214 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
16215 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16216 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
16217 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
16218 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16219 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
16220
16221 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16222 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16223 Signed-off-by: David S. Miller <davem@davemloft.net>
16224
16225 net/rds/connection.c | 6 ++++++
16226 1 files changed, 6 insertions(+), 0 deletions(-)
16227
16228 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
16229 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
16230 Date: Tue Jan 5 20:32:47 2016 -0500
16231
16232 ftrace/module: Call clean up function when module init fails early
16233
16234 If the module init code fails after calling ftrace_module_init() and before
16235 calling do_init_module(), we can suffer from a memory leak. This is because
16236 ftrace_module_init() allocates pages to store the locations that ftrace
16237 hooks are placed in the module text. If do_init_module() fails, it still
16238 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
16239 the pages it allocated for the module. But if load_module() fails before
16240 then, the pages allocated by ftrace_module_init() will never be freed.
16241
16242 Call ftrace_release_mod() on the module if load_module() fails before
16243 getting to do_init_module().
16244
16245 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
16246
16247 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
16248 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
16249 Cc: stable@vger.kernel.org # v2.6.38+
16250 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
16251 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16252
16253 include/linux/ftrace.h | 1 +
16254 kernel/module.c | 6 ++++++
16255 2 files changed, 7 insertions(+), 0 deletions(-)
16256
16257 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
16258 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
16259 Date: Wed Jan 6 00:18:48 2016 -0800
16260
16261 net: possible use after free in dst_release
16262
16263 dst_release should not access dst->flags after decrementing
16264 __refcnt to 0. The dst_entry may be in dst_busy_list and
16265 dst_gc_task may dst_destroy it before dst_release gets a chance
16266 to access dst->flags.
16267
16268 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
16269 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
16270 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
16271 Acked-by: Eric Dumazet <edumazet@google.com>
16272 Signed-off-by: David S. Miller <davem@davemloft.net>
16273
16274 net/core/dst.c | 3 ++-
16275 1 files changed, 2 insertions(+), 1 deletions(-)
16276
16277 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
16278 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
16279 Date: Wed Jan 6 14:55:02 2016 +0000
16280
16281 mkiss: fix scribble on freed memory
16282
16283 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
16284 scribble on free memory but added a new one which allows the user to
16285 scribble even more and user controlled data into freed space.
16286
16287 As with 6pack we need to halt the queue before we free the buffers, because
16288 the transmit logic is not protected by the semaphore.
16289
16290 Signed-off-by: Alan Cox <alan@linux.intel.com>
16291 Signed-off-by: David S. Miller <davem@davemloft.net>
16292
16293 drivers/net/hamradio/mkiss.c | 5 +++++
16294 1 files changed, 5 insertions(+), 0 deletions(-)
16295
16296 commit 5cbbcbd32dc1949470f61d342503808fa9555276
16297 Author: David Miller <davem@davemloft.net>
16298 Date: Thu Dec 17 16:05:49 2015 -0500
16299
16300 mkiss: Fix use after free in mkiss_close().
16301
16302 Need to do the unregister_device() after all references to the driver
16303 private have been done.
16304
16305 Signed-off-by: David S. Miller <davem@davemloft.net>
16306
16307 drivers/net/hamradio/mkiss.c | 4 ++--
16308 1 files changed, 2 insertions(+), 2 deletions(-)
16309
16310 commit b00171576794a98068e069a660f0991a6a5190ff
16311 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
16312 Date: Tue Jan 5 11:51:25 2016 +0000
16313
16314 6pack: fix free memory scribbles
16315
16316 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
16317 memory scribble but in doing so replaced it with a different one that allows
16318 the user to control the data and scribble even more.
16319
16320 sixpack_close is called by the tty layer in tty context. The tty context is
16321 protected by sp_get() and sp_put(). However network layer activity via
16322 sp_xmit() is not protected this way. We must therefore stop the queue
16323 otherwise the user gets to dump a buffer mostly of their choice into freed
16324 kernel pages.
16325
16326 Signed-off-by: Alan Cox <alan@linux.intel.com>
16327 Signed-off-by: David S. Miller <davem@davemloft.net>
16328
16329 drivers/net/hamradio/6pack.c | 6 ++++++
16330 1 files changed, 6 insertions(+), 0 deletions(-)
16331
16332 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
16333 Author: David Miller <davem@davemloft.net>
16334 Date: Thu Dec 17 16:05:32 2015 -0500
16335
16336 6pack: Fix use after free in sixpack_close().
16337
16338 Need to do the unregister_device() after all references to the driver
16339 private have been done.
16340
16341 Also we need to use del_timer_sync() for the timers so that we don't
16342 have any asynchronous references after the unregister.
16343
16344 Signed-off-by: David S. Miller <davem@davemloft.net>
16345
16346 drivers/net/hamradio/6pack.c | 8 ++++----
16347 1 files changed, 4 insertions(+), 4 deletions(-)
16348
16349 commit 4f9d532742656b3613d579220fd10c78f24ba37b
16350 Author: Rabin Vincent <rabin@rab.in>
16351 Date: Tue Jan 5 16:23:07 2016 +0100
16352
16353 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
16354
16355 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
16356 instructions since it XORs A with X while all the others replace A with
16357 some loaded value. All the BPF JITs fail to clear A if this is used as
16358 the first instruction in a filter. This was found using american fuzzy
16359 lop.
16360
16361 Add a helper to determine if A needs to be cleared given the first
16362 instruction in a filter, and use this in the JITs. Except for ARM, the
16363 rest have only been compile-tested.
16364
16365 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
16366 Signed-off-by: Rabin Vincent <rabin@rab.in>
16367 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16368 Acked-by: Alexei Starovoitov <ast@kernel.org>
16369 Signed-off-by: David S. Miller <davem@davemloft.net>
16370
16371 arch/arm/net/bpf_jit_32.c | 16 +---------------
16372 arch/mips/net/bpf_jit.c | 16 +---------------
16373 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
16374 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
16375 include/linux/filter.h | 19 +++++++++++++++++++
16376 5 files changed, 25 insertions(+), 56 deletions(-)
16377
16378 commit 570d88f8acfffda92b89ae2e1c47320d47256034
16379 Author: John Fastabend <john.fastabend@gmail.com>
16380 Date: Tue Jan 5 09:11:36 2016 -0800
16381
16382 net: sched: fix missing free per cpu on qstats
16383
16384 When a qdisc is using per cpu stats (currently just the ingress
16385 qdisc) only the bstats are being freed. This also free's the qstats.
16386
16387 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
16388 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
16389 Acked-by: Eric Dumazet <edumazet@google.com>
16390 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16391 Signed-off-by: David S. Miller <davem@davemloft.net>
16392
16393 net/sched/sch_generic.c | 4 +++-
16394 1 files changed, 3 insertions(+), 1 deletions(-)
16395
16396 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
16397 Author: Rabin Vincent <rabin@rab.in>
16398 Date: Tue Jan 5 18:34:04 2016 +0100
16399
16400 ARM: net: bpf: fix zero right shift
16401
16402 The LSR instruction cannot be used to perform a zero right shift since a
16403 0 as the immediate value (imm5) in the LSR instruction encoding means
16404 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
16405
16406 Make the JIT skip generation of the LSR if a zero-shift is requested.
16407
16408 This was found using american fuzzy lop.
16409
16410 Signed-off-by: Rabin Vincent <rabin@rab.in>
16411 Acked-by: Alexei Starovoitov <ast@kernel.org>
16412 Signed-off-by: David S. Miller <davem@davemloft.net>
16413
16414 arch/arm/net/bpf_jit_32.c | 3 ++-
16415 1 files changed, 2 insertions(+), 1 deletions(-)
16416
16417 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
16418 Author: Brad Spengler <spender@grsecurity.net>
16419 Date: Wed Jan 6 20:35:57 2016 -0500
16420
16421 Don't perform hidden lookups in RBAC against the directory of
16422 a file being opened with O_CREAT, reported by Karl Witt
16423
16424 Conflicts:
16425
16426 fs/namei.c
16427
16428 fs/namei.c | 3 ---
16429 1 files changed, 0 insertions(+), 3 deletions(-)
16430
16431 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
16432 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16433 Date: Tue Jan 5 10:46:00 2016 +0100
16434
16435 bridge: Only call /sbin/bridge-stp for the initial network namespace
16436
16437 [I stole this patch from Eric Biederman. He wrote:]
16438
16439 > There is no defined mechanism to pass network namespace information
16440 > into /sbin/bridge-stp therefore don't even try to invoke it except
16441 > for bridge devices in the initial network namespace.
16442 >
16443 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
16444 > invoked for any network device name which if /sbin/bridge-stp does not
16445 > guard against unreasonable arguments or being invoked twice on the
16446 > same network device could cause problems.
16447
16448 [Hannes: changed patch using netns_eq]
16449
16450 Cc: Eric W. Biederman <ebiederm@xmission.com>
16451 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
16452 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16453 Signed-off-by: David S. Miller <davem@davemloft.net>
16454
16455 net/bridge/br_stp_if.c | 5 ++++-
16456 1 files changed, 4 insertions(+), 1 deletions(-)
16457
16458 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
16459 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16460 Date: Wed Dec 23 16:28:40 2015 -0200
16461
16462 sctp: use GFP_USER for user-controlled kmalloc
16463
16464 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16465 missed two other spots.
16466
16467 For connectx, as it's more likely to be used by kernel users of the API,
16468 it detects if GFP_USER should be used or not.
16469
16470 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16471 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16472 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16473 Signed-off-by: David S. Miller <davem@davemloft.net>
16474
16475 net/sctp/socket.c | 9 ++++++---
16476 1 files changed, 6 insertions(+), 3 deletions(-)
16477
16478 commit 5718a1f63c41fc156f729783423b002763779d04
16479 Author: Florian Westphal <fw@strlen.de>
16480 Date: Thu Dec 31 14:26:33 2015 +0100
16481
16482 connector: bump skb->users before callback invocation
16483
16484 Dmitry reports memleak with syskaller program.
16485 Problem is that connector bumps skb usecount but might not invoke callback.
16486
16487 So move skb_get to where we invoke the callback.
16488
16489 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16490 Signed-off-by: Florian Westphal <fw@strlen.de>
16491 Signed-off-by: David S. Miller <davem@davemloft.net>
16492
16493 drivers/connector/connector.c | 11 +++--------
16494 1 files changed, 3 insertions(+), 8 deletions(-)
16495
16496 commit 2e6372e6a97f8d642416899861f91777f44f13b7
16497 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16498 Date: Sun Jan 3 18:56:38 2016 +0000
16499
16500 af_unix: Fix splice-bind deadlock
16501
16502 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
16503 system call and AF_UNIX sockets,
16504
16505 http://lists.openwall.net/netdev/2015/11/06/24
16506
16507 The situation was analyzed as
16508
16509 (a while ago) A: socketpair()
16510 B: splice() from a pipe to /mnt/regular_file
16511 does sb_start_write() on /mnt
16512 C: try to freeze /mnt
16513 wait for B to finish with /mnt
16514 A: bind() try to bind our socket to /mnt/new_socket_name
16515 lock our socket, see it not bound yet
16516 decide that it needs to create something in /mnt
16517 try to do sb_start_write() on /mnt, block (it's
16518 waiting for C).
16519 D: splice() from the same pipe to our socket
16520 lock the pipe, see that socket is connected
16521 try to lock the socket, block waiting for A
16522 B: get around to actually feeding a chunk from
16523 pipe to file, try to lock the pipe. Deadlock.
16524
16525 on 2015/11/10 by Al Viro,
16526
16527 http://lists.openwall.net/netdev/2015/11/10/4
16528
16529 The patch fixes this by removing the kern_path_create related code from
16530 unix_mknod and executing it as part of unix_bind prior acquiring the
16531 readlock of the socket in question. This means that A (as used above)
16532 will sb_start_write on /mnt before it acquires the readlock, hence, it
16533 won't indirectly block B which first did a sb_start_write and then
16534 waited for a thread trying to acquire the readlock. Consequently, A
16535 being blocked by C waiting for B won't cause a deadlock anymore
16536 (effectively, both A and B acquire two locks in opposite order in the
16537 situation described above).
16538
16539 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
16540
16541 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16542 Signed-off-by: David S. Miller <davem@davemloft.net>
16543
16544 Conflicts:
16545
16546 net/unix/af_unix.c
16547
16548 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
16549 1 files changed, 42 insertions(+), 28 deletions(-)
16550
16551 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
16552 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
16553 Date: Thu Dec 31 13:11:28 2015 +0800
16554
16555 tracing: Fix setting of start_index in find_next()
16556
16557 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
16558 panic at t_show.
16559
16560 general protection fault: 0000 [#1] PREEMPT SMP
16561 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
16562 RIP: 0010:[<ffffffff811375b2>]
16563 [<ffffffff811375b2>] t_show+0x22/0xe0
16564 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
16565 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
16566 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
16567 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
16568 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
16569 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
16570 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
16571 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
16572 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
16573 Call Trace:
16574 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
16575 [<ffffffff811b749b>] vfs_read+0x9b/0x160
16576 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
16577 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
16578 ---[ end trace 5bd9eb630614861e ]---
16579 Kernel panic - not syncing: Fatal exception
16580
16581 When the first time find_next calls find_next_mod_format, it should
16582 iterate the trace_bprintk_fmt_list to find the first print format of
16583 the module. However in current code, start_index is smaller than *pos
16584 at first, and code will not iterate the list. Latter container_of will
16585 get the wrong address with former v, which will cause mod_fmt be a
16586 meaningless object and so is the returned mod_fmt->fmt.
16587
16588 This patch will fix it by correcting the start_index. After fixed,
16589 when the first time calls find_next_mod_format, start_index will be
16590 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
16591 get the right module printk format, so is the returned mod_fmt->fmt.
16592
16593 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
16594
16595 Cc: stable@vger.kernel.org # 3.12+
16596 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
16597 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
16598 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16599
16600 kernel/trace/trace_printk.c | 1 +
16601 1 files changed, 1 insertions(+), 0 deletions(-)
16602
16603 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
16604 Author: Al Viro <viro@zeniv.linux.org.uk>
16605 Date: Mon Dec 28 20:47:08 2015 -0500
16606
16607 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
16608
16609 Cc: stable@vger.kernel.org # 3.15+
16610 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
16611 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16612
16613 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
16614 1 files changed, 37 insertions(+), 36 deletions(-)
16615
16616 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
16617 Merge: de243c2 3adc55a
16618 Author: Brad Spengler <spender@grsecurity.net>
16619 Date: Tue Jan 5 18:10:10 2016 -0500
16620
16621 Merge branch 'pax-test' into grsec-test
16622
16623 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
16624 Author: Brad Spengler <spender@grsecurity.net>
16625 Date: Tue Jan 5 18:08:53 2016 -0500
16626
16627 Update to pax-linux-4.3.3-test16.patch:
16628 - small cleanup in entry_64.S on x86
16629 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
16630 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
16631 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
16632 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
16633 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
16634
16635 arch/x86/entry/entry_64.S | 60 +++++-----
16636 arch/x86/kernel/alternative.c | 2 +-
16637 arch/x86/kvm/emulate.c | 4 +-
16638 tools/gcc/initify_plugin.c | 123 +++++++++----------
16639 .../disable_size_overflow_hash.data | 4 +-
16640 .../size_overflow_plugin/size_overflow_hash.data | 2 -
16641 6 files changed, 93 insertions(+), 102 deletions(-)
16642
16643 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
16644 Author: Brad Spengler <spender@grsecurity.net>
16645 Date: Tue Dec 29 18:01:24 2015 -0500
16646
16647 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
16648 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
16649 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
16650
16651 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
16652 against suid/sgid attacks and the flaw above would only eliminate the extra
16653 entropy provided for the brk-managed heap, still leaving it with the minimum
16654 of 16-bit entropy for mmap on x86 and 28 on x64.
16655
16656 mm/mmap.c | 2 +-
16657 1 files changed, 1 insertions(+), 1 deletions(-)
16658
16659 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
16660 Merge: 436201b 2584340
16661 Author: Brad Spengler <spender@grsecurity.net>
16662 Date: Mon Dec 28 20:30:01 2015 -0500
16663
16664 Merge branch 'pax-test' into grsec-test
16665
16666 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
16667 Author: Brad Spengler <spender@grsecurity.net>
16668 Date: Mon Dec 28 20:29:28 2015 -0500
16669
16670 Update to pax-linux-4.3.3-test14.patch:
16671 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
16672 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
16673 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
16674 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
16675 - fixed an assert in the initify plugin that triggered in vic_register on arm
16676
16677 arch/arm/include/asm/atomic.h | 7 +++++--
16678 arch/arm/include/asm/domain.h | 5 ++---
16679 arch/x86/kernel/tboot.c | 14 +++++++++-----
16680 drivers/hv/channel.c | 4 +---
16681 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
16682 drivers/net/hyperv/rndis_filter.c | 3 +--
16683 fs/exec.c | 4 ++--
16684 include/linux/atomic.h | 15 ---------------
16685 net/core/skbuff.c | 3 ++-
16686 tools/gcc/initify_plugin.c | 4 +++-
16687 10 files changed, 26 insertions(+), 35 deletions(-)
16688
16689 commit 436201b6626b488d173c8076447000077c27b84a
16690 Author: David Howells <dhowells@redhat.com>
16691 Date: Fri Dec 18 01:34:26 2015 +0000
16692
16693 KEYS: Fix race between read and revoke
16694
16695 This fixes CVE-2015-7550.
16696
16697 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
16698 happens between keyctl_read() checking the validity of a key and the key's
16699 semaphore being taken, then the key type read method will see a revoked key.
16700
16701 This causes a problem for the user-defined key type because it assumes in
16702 its read method that there will always be a payload in a non-revoked key
16703 and doesn't check for a NULL pointer.
16704
16705 Fix this by making keyctl_read() check the validity of a key after taking
16706 semaphore instead of before.
16707
16708 I think the bug was introduced with the original keyrings code.
16709
16710 This was discovered by a multithreaded test program generated by syzkaller
16711 (http://github.com/google/syzkaller). Here's a cleaned up version:
16712
16713 #include <sys/types.h>
16714 #include <keyutils.h>
16715 #include <pthread.h>
16716 void *thr0(void *arg)
16717 {
16718 key_serial_t key = (unsigned long)arg;
16719 keyctl_revoke(key);
16720 return 0;
16721 }
16722 void *thr1(void *arg)
16723 {
16724 key_serial_t key = (unsigned long)arg;
16725 char buffer[16];
16726 keyctl_read(key, buffer, 16);
16727 return 0;
16728 }
16729 int main()
16730 {
16731 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
16732 pthread_t th[5];
16733 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
16734 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
16735 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
16736 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
16737 pthread_join(th[0], 0);
16738 pthread_join(th[1], 0);
16739 pthread_join(th[2], 0);
16740 pthread_join(th[3], 0);
16741 return 0;
16742 }
16743
16744 Build as:
16745
16746 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
16747
16748 Run as:
16749
16750 while keyctl-race; do :; done
16751
16752 as it may need several iterations to crash the kernel. The crash can be
16753 summarised as:
16754
16755 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
16756 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
16757 ...
16758 Call Trace:
16759 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
16760 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
16761 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
16762
16763 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16764 Signed-off-by: David Howells <dhowells@redhat.com>
16765 Tested-by: Dmitry Vyukov <dvyukov@google.com>
16766 Cc: stable@vger.kernel.org
16767 Signed-off-by: James Morris <james.l.morris@oracle.com>
16768
16769 security/keys/keyctl.c | 18 +++++++++---------
16770 1 files changed, 9 insertions(+), 9 deletions(-)
16771
16772 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
16773 Author: Brad Spengler <spender@grsecurity.net>
16774 Date: Tue Dec 22 20:44:01 2015 -0500
16775
16776 Add new kernel command-line param: pax_size_overflow_report_only
16777 If a user triggers a size_overflow violation that makes it difficult
16778 to obtain the call trace without serial console/net console, they can
16779 use this option to provide that information to us
16780
16781 Documentation/kernel-parameters.txt | 5 +++++
16782 fs/exec.c | 12 +++++++++---
16783 init/main.c | 11 +++++++++++
16784 3 files changed, 25 insertions(+), 3 deletions(-)
16785
16786 commit 4254a8da5851df8c08cdca5c392916e8c105408d
16787 Author: WANG Cong <xiyou.wangcong@gmail.com>
16788 Date: Mon Dec 21 10:55:45 2015 -0800
16789
16790 addrconf: always initialize sysctl table data
16791
16792 When sysctl performs restrict writes, it allows to write from
16793 a middle position of a sysctl file, which requires us to initialize
16794 the table data before calling proc_dostring() for the write case.
16795
16796 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
16797 Reported-by: Sasha Levin <sasha.levin@oracle.com>
16798 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16799 Tested-by: Sasha Levin <sasha.levin@oracle.com>
16800 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16801 Signed-off-by: David S. Miller <davem@davemloft.net>
16802
16803 net/ipv6/addrconf.c | 11 ++++-------
16804 1 files changed, 4 insertions(+), 7 deletions(-)
16805
16806 commit f8002863fb06c363180637046947a78a6ccb3d33
16807 Author: WANG Cong <xiyou.wangcong@gmail.com>
16808 Date: Wed Dec 16 23:39:04 2015 -0800
16809
16810 net: check both type and procotol for tcp sockets
16811
16812 Dmitry reported the following out-of-bound access:
16813
16814 Call Trace:
16815 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
16816 mm/kasan/report.c:294
16817 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
16818 [< inline >] SYSC_setsockopt net/socket.c:1746
16819 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
16820 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
16821 arch/x86/entry/entry_64.S:185
16822
16823 This is because we mistake a raw socket as a tcp socket.
16824 We should check both sk->sk_type and sk->sk_protocol to ensure
16825 it is a tcp socket.
16826
16827 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
16828
16829 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16830 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
16831 Cc: Eric Dumazet <eric.dumazet@gmail.com>
16832 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16833 Acked-by: Willem de Bruijn <willemb@google.com>
16834 Signed-off-by: David S. Miller <davem@davemloft.net>
16835
16836 net/core/skbuff.c | 3 ++-
16837 net/core/sock.c | 3 ++-
16838 2 files changed, 4 insertions(+), 2 deletions(-)
16839
16840 commit bd6b3399804470a4ad8f34229469ca149dceba3d
16841 Author: Colin Ian King <colin.king@canonical.com>
16842 Date: Fri Dec 18 14:22:01 2015 -0800
16843
16844 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
16845
16846 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
16847 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
16848 the setting of ret after the get_proc_task call and incorrectly left it as
16849 -ESRCH. Instead, return 0 when successful.
16850
16851 Example breakage:
16852
16853 echo 0 > /proc/self/coredump_filter
16854 bash: echo: write error: No such process
16855
16856 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
16857 Signed-off-by: Colin Ian King <colin.king@canonical.com>
16858 Acked-by: Kees Cook <keescook@chromium.org>
16859 Cc: <stable@vger.kernel.org> [4.3+]
16860 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
16861 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
16862
16863 fs/proc/base.c | 1 +
16864 1 files changed, 1 insertions(+), 0 deletions(-)
16865
16866 commit b28aca2b99ed08546778355fb9402c503ff9b29e
16867 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
16868 Date: Tue Dec 22 10:23:44 2015 -0700
16869
16870 block: ensure to split after potentially bouncing a bio
16871
16872 blk_queue_bio() does split then bounce, which makes the segment
16873 counting based on pages before bouncing and could go wrong. Move
16874 the split to after bouncing, like we do for blk-mq, and the we
16875 fix the issue of having the bio count for segments be wrong.
16876
16877 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
16878 Cc: stable@vger.kernel.org
16879 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
16880 Signed-off-by: Jens Axboe <axboe@fb.com>
16881
16882 block/blk-core.c | 4 ++--
16883 1 files changed, 2 insertions(+), 2 deletions(-)
16884
16885 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
16886 Merge: f6f63ae ec72fa5
16887 Author: Brad Spengler <spender@grsecurity.net>
16888 Date: Tue Dec 22 19:46:26 2015 -0500
16889
16890 Merge branch 'pax-test' into grsec-test
16891
16892 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
16893 Author: Brad Spengler <spender@grsecurity.net>
16894 Date: Tue Dec 22 19:45:51 2015 -0500
16895
16896 Update to pax-linux-4.3.3-test13.patch:
16897 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
16898 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
16899
16900 arch/arm/mm/fault.c | 2 +-
16901 arch/x86/mm/fault.c | 2 +-
16902 fs/btrfs/extent_map.c | 8 ++++++--
16903 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
16904 4 files changed, 11 insertions(+), 5 deletions(-)
16905
16906 commit f6f63ae154cd45028add1dc41957878060d77fbf
16907 Author: Brad Spengler <spender@grsecurity.net>
16908 Date: Thu Dec 17 18:43:44 2015 -0500
16909
16910 ptrace_has_cap() checks whether the current process should be
16911 treated as having a certain capability for ptrace checks
16912 against another process. Until now, this was equivalent to
16913 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
16914
16915 However, if a root-owned process wants to enter a user
16916 namespace for some reason without knowing who owns it and
16917 therefore can't change to the namespace owner's uid and gid
16918 before entering, as soon as it has entered the namespace,
16919 the namespace owner can attach to it via ptrace and thereby
16920 gain access to its uid and gid.
16921
16922 While it is possible for the entering process to switch to
16923 the uid of a claimed namespace owner before entering,
16924 causing the attempt to enter to fail if the claimed uid is
16925 wrong, this doesn't solve the problem of determining an
16926 appropriate gid.
16927
16928 With this change, the entering process can first enter the
16929 namespace and then safely inspect the namespace's
16930 properties, e.g. through /proc/self/{uid_map,gid_map},
16931 assuming that the namespace owner doesn't have access to
16932 uid 0.
16933 Signed-off-by: Jann Horn <jann@thejh.net>
16934
16935 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
16936 1 files changed, 25 insertions(+), 5 deletions(-)
16937
16938 commit e314f0fb63020f61543b401ff594e953c2c304e5
16939 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
16940 Date: Tue Dec 15 10:46:17 2015 -0800
16941
16942 net: fix uninitialized variable issue
16943
16944 msg_iocb needs to be initialized on the recv/recvfrom path.
16945 Otherwise afalg will wrongly interpret it as an async call.
16946
16947 Cc: stable@vger.kernel.org
16948 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
16949 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
16950 Signed-off-by: David S. Miller <davem@davemloft.net>
16951
16952 net/socket.c | 1 +
16953 1 files changed, 1 insertions(+), 0 deletions(-)
16954
16955 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
16956 Merge: dfa764c 142edcf
16957 Author: Brad Spengler <spender@grsecurity.net>
16958 Date: Wed Dec 16 21:01:17 2015 -0500
16959
16960 Merge branch 'pax-test' into grsec-test
16961
16962 commit 142edcf1005a57fb8887823565cf0bafad2f313c
16963 Author: Brad Spengler <spender@grsecurity.net>
16964 Date: Wed Dec 16 21:00:57 2015 -0500
16965
16966 Update to pax-linux-4.3.3-test12.patch:
16967 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
16968 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
16969
16970 drivers/tty/n_tty.c | 16 ++++++++--------
16971 .../disable_size_overflow_hash.data | 2 ++
16972 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
16973 3 files changed, 12 insertions(+), 12 deletions(-)
16974
16975 commit dfa764cc549892a5bfc1083cac78b99032cae577
16976 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16977 Date: Tue Dec 15 22:59:12 2015 +0100
16978
16979 ipv6: automatically enable stable privacy mode if stable_secret set
16980
16981 Bjørn reported that while we switch all interfaces to privacy stable mode
16982 when setting the secret, we don't set this mode for new interfaces. This
16983 does not make sense, so change this behaviour.
16984
16985 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
16986 Reported-by: Bjørn Mork <bjorn@mork.no>
16987 Cc: Bjørn Mork <bjorn@mork.no>
16988 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16989 Signed-off-by: David S. Miller <davem@davemloft.net>
16990
16991 net/ipv6/addrconf.c | 6 ++++++
16992 1 files changed, 6 insertions(+), 0 deletions(-)
16993
16994 commit c2815a1fee03f222273e77c14e43f960da06f35a
16995 Author: Brad Spengler <spender@grsecurity.net>
16996 Date: Wed Dec 16 13:03:38 2015 -0500
16997
16998 Work around upstream limitation on the number of thread info flags causing a compilation error
16999 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
17000
17001 arch/arm/kernel/entry-common.S | 8 ++++++--
17002 1 files changed, 6 insertions(+), 2 deletions(-)
17003
17004 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
17005 Author: Brad Spengler <spender@grsecurity.net>
17006 Date: Tue Dec 15 19:03:41 2015 -0500
17007
17008 Initial import of grsecurity 3.1 for Linux 4.3.3
17009
17010 Documentation/dontdiff | 2 +
17011 Documentation/kernel-parameters.txt | 7 +
17012 Documentation/sysctl/kernel.txt | 15 +
17013 Makefile | 18 +-
17014 arch/alpha/include/asm/cache.h | 4 +-
17015 arch/alpha/kernel/osf_sys.c | 12 +-
17016 arch/arc/Kconfig | 1 +
17017 arch/arm/Kconfig | 1 +
17018 arch/arm/Kconfig.debug | 1 +
17019 arch/arm/include/asm/thread_info.h | 7 +-
17020 arch/arm/kernel/process.c | 4 +-
17021 arch/arm/kernel/ptrace.c | 9 +
17022 arch/arm/kernel/traps.c | 7 +-
17023 arch/arm/mm/Kconfig | 2 +-
17024 arch/arm/mm/fault.c | 40 +-
17025 arch/arm/mm/mmap.c | 8 +-
17026 arch/arm/net/bpf_jit_32.c | 51 +-
17027 arch/arm64/Kconfig.debug | 1 +
17028 arch/avr32/include/asm/cache.h | 4 +-
17029 arch/blackfin/Kconfig.debug | 1 +
17030 arch/blackfin/include/asm/cache.h | 3 +-
17031 arch/cris/include/arch-v10/arch/cache.h | 3 +-
17032 arch/cris/include/arch-v32/arch/cache.h | 3 +-
17033 arch/frv/include/asm/cache.h | 3 +-
17034 arch/frv/mm/elf-fdpic.c | 4 +-
17035 arch/hexagon/include/asm/cache.h | 6 +-
17036 arch/ia64/Kconfig | 1 +
17037 arch/ia64/include/asm/cache.h | 3 +-
17038 arch/ia64/kernel/sys_ia64.c | 2 +
17039 arch/ia64/mm/hugetlbpage.c | 2 +
17040 arch/m32r/include/asm/cache.h | 4 +-
17041 arch/m68k/include/asm/cache.h | 4 +-
17042 arch/metag/mm/hugetlbpage.c | 1 +
17043 arch/microblaze/include/asm/cache.h | 3 +-
17044 arch/mips/Kconfig | 1 +
17045 arch/mips/include/asm/cache.h | 3 +-
17046 arch/mips/include/asm/thread_info.h | 11 +-
17047 arch/mips/kernel/irq.c | 3 +
17048 arch/mips/kernel/ptrace.c | 9 +
17049 arch/mips/mm/mmap.c | 4 +-
17050 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
17051 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
17052 arch/openrisc/include/asm/cache.h | 4 +-
17053 arch/parisc/include/asm/cache.h | 5 +-
17054 arch/parisc/kernel/sys_parisc.c | 4 +
17055 arch/powerpc/Kconfig | 1 +
17056 arch/powerpc/include/asm/cache.h | 4 +-
17057 arch/powerpc/include/asm/thread_info.h | 5 +-
17058 arch/powerpc/kernel/Makefile | 2 +
17059 arch/powerpc/kernel/irq.c | 3 +
17060 arch/powerpc/kernel/process.c | 10 +-
17061 arch/powerpc/kernel/ptrace.c | 14 +
17062 arch/powerpc/kernel/traps.c | 5 +
17063 arch/powerpc/mm/slice.c | 2 +-
17064 arch/s390/Kconfig.debug | 1 +
17065 arch/s390/include/asm/cache.h | 4 +-
17066 arch/score/include/asm/cache.h | 4 +-
17067 arch/sh/include/asm/cache.h | 3 +-
17068 arch/sh/mm/mmap.c | 6 +-
17069 arch/sparc/include/asm/cache.h | 4 +-
17070 arch/sparc/include/asm/pgalloc_64.h | 1 +
17071 arch/sparc/include/asm/thread_info_64.h | 8 +-
17072 arch/sparc/kernel/process_32.c | 6 +-
17073 arch/sparc/kernel/process_64.c | 8 +-
17074 arch/sparc/kernel/ptrace_64.c | 14 +
17075 arch/sparc/kernel/sys_sparc_64.c | 8 +-
17076 arch/sparc/kernel/syscalls.S | 8 +-
17077 arch/sparc/kernel/traps_32.c | 8 +-
17078 arch/sparc/kernel/traps_64.c | 28 +-
17079 arch/sparc/kernel/unaligned_64.c | 2 +-
17080 arch/sparc/mm/fault_64.c | 2 +-
17081 arch/sparc/mm/hugetlbpage.c | 15 +-
17082 arch/tile/Kconfig | 1 +
17083 arch/tile/include/asm/cache.h | 3 +-
17084 arch/tile/mm/hugetlbpage.c | 2 +
17085 arch/um/include/asm/cache.h | 3 +-
17086 arch/unicore32/include/asm/cache.h | 6 +-
17087 arch/x86/Kconfig | 21 +
17088 arch/x86/Kconfig.debug | 2 +
17089 arch/x86/entry/common.c | 14 +
17090 arch/x86/entry/entry_32.S | 2 +-
17091 arch/x86/entry/entry_64.S | 2 +-
17092 arch/x86/ia32/ia32_aout.c | 2 +
17093 arch/x86/include/asm/floppy.h | 20 +-
17094 arch/x86/include/asm/fpu/types.h | 69 +-
17095 arch/x86/include/asm/io.h | 2 +-
17096 arch/x86/include/asm/page.h | 12 +-
17097 arch/x86/include/asm/paravirt_types.h | 23 +-
17098 arch/x86/include/asm/processor.h | 12 +-
17099 arch/x86/include/asm/thread_info.h | 6 +-
17100 arch/x86/include/asm/uaccess.h | 2 +-
17101 arch/x86/kernel/dumpstack.c | 10 +-
17102 arch/x86/kernel/dumpstack_32.c | 2 +-
17103 arch/x86/kernel/dumpstack_64.c | 2 +-
17104 arch/x86/kernel/ioport.c | 13 +
17105 arch/x86/kernel/irq_32.c | 3 +
17106 arch/x86/kernel/irq_64.c | 4 +
17107 arch/x86/kernel/ldt.c | 18 +
17108 arch/x86/kernel/msr.c | 10 +
17109 arch/x86/kernel/ptrace.c | 14 +
17110 arch/x86/kernel/signal.c | 9 +-
17111 arch/x86/kernel/sys_i386_32.c | 9 +-
17112 arch/x86/kernel/sys_x86_64.c | 8 +-
17113 arch/x86/kernel/traps.c | 5 +
17114 arch/x86/kernel/verify_cpu.S | 1 +
17115 arch/x86/kernel/vm86_32.c | 15 +
17116 arch/x86/kvm/svm.c | 14 +-
17117 arch/x86/mm/fault.c | 12 +-
17118 arch/x86/mm/hugetlbpage.c | 15 +-
17119 arch/x86/mm/init.c | 66 +-
17120 arch/x86/mm/init_32.c | 6 +-
17121 arch/x86/net/bpf_jit_comp.c | 4 +
17122 arch/x86/platform/efi/efi_64.c | 2 +-
17123 arch/x86/xen/Kconfig | 1 +
17124 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
17125 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
17126 crypto/ablkcipher.c | 2 +-
17127 crypto/blkcipher.c | 2 +-
17128 crypto/scatterwalk.c | 10 +-
17129 drivers/acpi/acpica/hwxfsleep.c | 11 +-
17130 drivers/acpi/custom_method.c | 4 +
17131 drivers/block/cciss.h | 30 +-
17132 drivers/block/smart1,2.h | 40 +-
17133 drivers/cdrom/cdrom.c | 2 +-
17134 drivers/char/Kconfig | 4 +-
17135 drivers/char/genrtc.c | 1 +
17136 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
17137 drivers/char/mem.c | 17 +
17138 drivers/char/random.c | 5 +-
17139 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
17140 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
17141 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
17142 drivers/crypto/talitos.c | 2 +-
17143 drivers/firewire/ohci.c | 4 +
17144 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
17145 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
17146 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
17147 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
17148 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
17149 drivers/hid/hid-wiimote-debug.c | 2 +-
17150 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
17151 drivers/iommu/Kconfig | 1 +
17152 drivers/iommu/amd_iommu.c | 14 +-
17153 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
17154 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
17155 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
17156 drivers/isdn/hisax/config.c | 2 +-
17157 drivers/isdn/hisax/hfc_pci.c | 2 +-
17158 drivers/isdn/hisax/hfc_sx.c | 2 +-
17159 drivers/isdn/hisax/q931.c | 6 +-
17160 drivers/isdn/i4l/isdn_concap.c | 6 +-
17161 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
17162 drivers/md/bcache/Kconfig | 1 +
17163 drivers/md/raid5.c | 8 +
17164 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
17165 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
17166 drivers/media/platform/vivid/vivid-osd.c | 1 +
17167 drivers/media/radio/radio-cadet.c | 5 +-
17168 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
17169 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
17170 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
17171 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
17172 drivers/message/fusion/mptbase.c | 9 +
17173 drivers/misc/sgi-xp/xp_main.c | 12 +-
17174 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
17175 drivers/net/ppp/pppoe.c | 14 +-
17176 drivers/net/ppp/pptp.c | 6 +
17177 drivers/net/slip/slhc.c | 3 +
17178 drivers/net/wan/lmc/lmc_media.c | 97 +-
17179 drivers/net/wan/x25_asy.c | 6 +-
17180 drivers/net/wan/z85230.c | 24 +-
17181 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
17182 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
17183 drivers/pci/pci-sysfs.c | 2 +-
17184 drivers/pci/proc.c | 9 +
17185 drivers/platform/x86/asus-wmi.c | 12 +
17186 drivers/rtc/rtc-dev.c | 3 +
17187 drivers/scsi/bfa/bfa_fcs.c | 19 +-
17188 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
17189 drivers/scsi/bfa/bfa_modules.h | 12 +-
17190 drivers/scsi/hpsa.h | 40 +-
17191 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
17192 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
17193 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
17194 drivers/target/target_core_sbc.c | 17 +-
17195 drivers/target/target_core_transport.c | 14 +-
17196 drivers/tty/serial/uartlite.c | 4 +-
17197 drivers/tty/sysrq.c | 2 +-
17198 drivers/tty/vt/keyboard.c | 22 +-
17199 drivers/uio/uio.c | 6 +-
17200 drivers/usb/core/hub.c | 5 +
17201 drivers/usb/gadget/function/f_uac1.c | 1 +
17202 drivers/usb/gadget/function/u_uac1.c | 1 +
17203 drivers/usb/host/hwa-hc.c | 9 +-
17204 drivers/usb/usbip/vhci_sysfs.c | 2 +-
17205 drivers/video/fbdev/arcfb.c | 2 +-
17206 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
17207 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
17208 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
17209 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
17210 drivers/xen/xenfs/xenstored.c | 5 +
17211 firmware/Makefile | 2 +
17212 firmware/WHENCE | 20 +-
17213 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
17214 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
17215 fs/9p/vfs_inode.c | 4 +-
17216 fs/attr.c | 1 +
17217 fs/autofs4/waitq.c | 9 +
17218 fs/binfmt_aout.c | 7 +
17219 fs/binfmt_elf.c | 50 +-
17220 fs/compat.c | 20 +-
17221 fs/coredump.c | 17 +-
17222 fs/dcache.c | 3 +
17223 fs/debugfs/inode.c | 11 +-
17224 fs/exec.c | 219 +-
17225 fs/ext2/balloc.c | 4 +-
17226 fs/ext2/super.c | 8 +-
17227 fs/ext4/balloc.c | 4 +-
17228 fs/fcntl.c | 4 +
17229 fs/fhandle.c | 3 +-
17230 fs/file.c | 4 +
17231 fs/filesystems.c | 4 +
17232 fs/fs_struct.c | 20 +-
17233 fs/hugetlbfs/inode.c | 5 +-
17234 fs/inode.c | 8 +-
17235 fs/kernfs/dir.c | 6 +
17236 fs/mount.h | 4 +-
17237 fs/namei.c | 286 +-
17238 fs/namespace.c | 24 +
17239 fs/nfsd/nfscache.c | 2 +-
17240 fs/open.c | 38 +
17241 fs/overlayfs/inode.c | 11 +-
17242 fs/overlayfs/super.c | 6 +-
17243 fs/pipe.c | 2 +-
17244 fs/posix_acl.c | 15 +-
17245 fs/proc/Kconfig | 10 +-
17246 fs/proc/array.c | 69 +-
17247 fs/proc/base.c | 186 +-
17248 fs/proc/cmdline.c | 4 +
17249 fs/proc/devices.c | 4 +
17250 fs/proc/fd.c | 17 +-
17251 fs/proc/generic.c | 64 +
17252 fs/proc/inode.c | 17 +
17253 fs/proc/internal.h | 11 +-
17254 fs/proc/interrupts.c | 4 +
17255 fs/proc/kcore.c | 3 +
17256 fs/proc/meminfo.c | 7 +-
17257 fs/proc/namespaces.c | 4 +-
17258 fs/proc/proc_net.c | 31 +
17259 fs/proc/proc_sysctl.c | 52 +-
17260 fs/proc/root.c | 8 +
17261 fs/proc/stat.c | 69 +-
17262 fs/proc/task_mmu.c | 66 +-
17263 fs/readdir.c | 19 +
17264 fs/reiserfs/item_ops.c | 24 +-
17265 fs/reiserfs/super.c | 4 +
17266 fs/select.c | 2 +
17267 fs/seq_file.c | 30 +-
17268 fs/splice.c | 8 +
17269 fs/stat.c | 20 +-
17270 fs/sysfs/dir.c | 30 +-
17271 fs/sysv/inode.c | 11 +-
17272 fs/utimes.c | 7 +
17273 fs/xattr.c | 26 +-
17274 grsecurity/Kconfig | 1182 ++++
17275 grsecurity/Makefile | 54 +
17276 grsecurity/gracl.c | 2757 +++++++++
17277 grsecurity/gracl_alloc.c | 105 +
17278 grsecurity/gracl_cap.c | 127 +
17279 grsecurity/gracl_compat.c | 269 +
17280 grsecurity/gracl_fs.c | 448 ++
17281 grsecurity/gracl_ip.c | 386 ++
17282 grsecurity/gracl_learn.c | 207 +
17283 grsecurity/gracl_policy.c | 1786 ++++++
17284 grsecurity/gracl_res.c | 68 +
17285 grsecurity/gracl_segv.c | 304 +
17286 grsecurity/gracl_shm.c | 40 +
17287 grsecurity/grsec_chdir.c | 19 +
17288 grsecurity/grsec_chroot.c | 467 ++
17289 grsecurity/grsec_disabled.c | 445 ++
17290 grsecurity/grsec_exec.c | 189 +
17291 grsecurity/grsec_fifo.c | 26 +
17292 grsecurity/grsec_fork.c | 23 +
17293 grsecurity/grsec_init.c | 290 +
17294 grsecurity/grsec_ipc.c | 48 +
17295 grsecurity/grsec_link.c | 65 +
17296 grsecurity/grsec_log.c | 340 +
17297 grsecurity/grsec_mem.c | 48 +
17298 grsecurity/grsec_mount.c | 65 +
17299 grsecurity/grsec_pax.c | 47 +
17300 grsecurity/grsec_proc.c | 20 +
17301 grsecurity/grsec_ptrace.c | 30 +
17302 grsecurity/grsec_sig.c | 236 +
17303 grsecurity/grsec_sock.c | 244 +
17304 grsecurity/grsec_sysctl.c | 488 ++
17305 grsecurity/grsec_time.c | 16 +
17306 grsecurity/grsec_tpe.c | 78 +
17307 grsecurity/grsec_usb.c | 15 +
17308 grsecurity/grsum.c | 64 +
17309 include/linux/binfmts.h | 5 +-
17310 include/linux/bitops.h | 2 +-
17311 include/linux/capability.h | 13 +
17312 include/linux/compiler-gcc.h | 5 +
17313 include/linux/compiler.h | 8 +
17314 include/linux/cred.h | 8 +-
17315 include/linux/dcache.h | 5 +-
17316 include/linux/fs.h | 24 +-
17317 include/linux/fs_struct.h | 2 +-
17318 include/linux/fsnotify.h | 6 +
17319 include/linux/gracl.h | 342 +
17320 include/linux/gracl_compat.h | 156 +
17321 include/linux/gralloc.h | 9 +
17322 include/linux/grdefs.h | 140 +
17323 include/linux/grinternal.h | 230 +
17324 include/linux/grmsg.h | 118 +
17325 include/linux/grsecurity.h | 255 +
17326 include/linux/grsock.h | 19 +
17327 include/linux/ipc.h | 2 +-
17328 include/linux/ipc_namespace.h | 2 +-
17329 include/linux/kallsyms.h | 18 +-
17330 include/linux/kmod.h | 5 +
17331 include/linux/kobject.h | 2 +-
17332 include/linux/lsm_hooks.h | 4 +-
17333 include/linux/mm.h | 12 +
17334 include/linux/mm_types.h | 4 +-
17335 include/linux/module.h | 5 +-
17336 include/linux/mount.h | 2 +-
17337 include/linux/msg.h | 2 +-
17338 include/linux/netfilter/xt_gradm.h | 9 +
17339 include/linux/path.h | 4 +-
17340 include/linux/perf_event.h | 13 +-
17341 include/linux/pid_namespace.h | 2 +-
17342 include/linux/printk.h | 2 +-
17343 include/linux/proc_fs.h | 22 +-
17344 include/linux/proc_ns.h | 2 +-
17345 include/linux/ptrace.h | 24 +-
17346 include/linux/random.h | 2 +-
17347 include/linux/rbtree_augmented.h | 4 +-
17348 include/linux/scatterlist.h | 12 +-
17349 include/linux/sched.h | 114 +-
17350 include/linux/security.h | 1 +
17351 include/linux/sem.h | 2 +-
17352 include/linux/seq_file.h | 5 +
17353 include/linux/shm.h | 6 +-
17354 include/linux/skbuff.h | 3 +
17355 include/linux/slab.h | 9 -
17356 include/linux/sysctl.h | 8 +-
17357 include/linux/thread_info.h | 6 +-
17358 include/linux/tty.h | 2 +-
17359 include/linux/tty_driver.h | 4 +-
17360 include/linux/uidgid.h | 5 +
17361 include/linux/user_namespace.h | 2 +-
17362 include/linux/utsname.h | 2 +-
17363 include/linux/vermagic.h | 16 +-
17364 include/linux/vmalloc.h | 20 +-
17365 include/net/af_unix.h | 2 +-
17366 include/net/dst.h | 33 +
17367 include/net/ip.h | 2 +-
17368 include/net/neighbour.h | 2 +-
17369 include/net/net_namespace.h | 2 +-
17370 include/net/sock.h | 4 +-
17371 include/target/target_core_base.h | 2 +-
17372 include/trace/events/fs.h | 53 +
17373 include/uapi/linux/personality.h | 1 +
17374 init/Kconfig | 4 +-
17375 init/main.c | 35 +-
17376 ipc/mqueue.c | 1 +
17377 ipc/msg.c | 3 +-
17378 ipc/sem.c | 3 +-
17379 ipc/shm.c | 26 +-
17380 ipc/util.c | 6 +
17381 kernel/auditsc.c | 2 +-
17382 kernel/bpf/syscall.c | 8 +-
17383 kernel/capability.c | 41 +-
17384 kernel/cgroup.c | 5 +-
17385 kernel/compat.c | 1 +
17386 kernel/configs.c | 11 +
17387 kernel/cred.c | 112 +-
17388 kernel/events/core.c | 16 +-
17389 kernel/exit.c | 10 +-
17390 kernel/fork.c | 86 +-
17391 kernel/futex.c | 6 +-
17392 kernel/futex_compat.c | 2 +-
17393 kernel/kallsyms.c | 9 +
17394 kernel/kcmp.c | 8 +-
17395 kernel/kexec_core.c | 2 +-
17396 kernel/kmod.c | 95 +-
17397 kernel/kprobes.c | 7 +-
17398 kernel/ksysfs.c | 2 +
17399 kernel/locking/lockdep_proc.c | 10 +-
17400 kernel/module.c | 108 +-
17401 kernel/panic.c | 4 +-
17402 kernel/pid.c | 23 +-
17403 kernel/power/Kconfig | 2 +
17404 kernel/printk/printk.c | 20 +-
17405 kernel/ptrace.c | 56 +-
17406 kernel/resource.c | 10 +
17407 kernel/sched/core.c | 11 +-
17408 kernel/signal.c | 37 +-
17409 kernel/sys.c | 64 +-
17410 kernel/sysctl.c | 172 +-
17411 kernel/taskstats.c | 6 +
17412 kernel/time/posix-timers.c | 8 +
17413 kernel/time/time.c | 5 +
17414 kernel/time/timekeeping.c | 3 +
17415 kernel/time/timer_list.c | 13 +-
17416 kernel/time/timer_stats.c | 10 +-
17417 kernel/trace/Kconfig | 2 +
17418 kernel/trace/trace_syscalls.c | 8 +
17419 kernel/user_namespace.c | 15 +
17420 lib/Kconfig.debug | 13 +-
17421 lib/Kconfig.kasan | 2 +-
17422 lib/is_single_threaded.c | 3 +
17423 lib/list_debug.c | 65 +-
17424 lib/nlattr.c | 2 +
17425 lib/rbtree.c | 4 +-
17426 lib/vsprintf.c | 39 +-
17427 localversion-grsec | 1 +
17428 mm/Kconfig | 8 +-
17429 mm/Kconfig.debug | 1 +
17430 mm/filemap.c | 1 +
17431 mm/kmemleak.c | 4 +-
17432 mm/memory.c | 2 +-
17433 mm/mempolicy.c | 12 +-
17434 mm/migrate.c | 3 +-
17435 mm/mlock.c | 6 +-
17436 mm/mmap.c | 93 +-
17437 mm/mprotect.c | 8 +
17438 mm/oom_kill.c | 28 +-
17439 mm/page_alloc.c | 2 +-
17440 mm/process_vm_access.c | 8 +-
17441 mm/shmem.c | 36 +-
17442 mm/slab.c | 14 +-
17443 mm/slab_common.c | 2 +-
17444 mm/slob.c | 12 +
17445 mm/slub.c | 33 +-
17446 mm/util.c | 3 +
17447 mm/vmalloc.c | 129 +-
17448 mm/vmstat.c | 29 +-
17449 net/appletalk/atalk_proc.c | 2 +-
17450 net/atm/lec.c | 6 +-
17451 net/atm/mpoa_caches.c | 42 +-
17452 net/bluetooth/sco.c | 3 +
17453 net/can/bcm.c | 2 +-
17454 net/can/proc.c | 2 +-
17455 net/core/dev_ioctl.c | 7 +-
17456 net/core/filter.c | 8 +-
17457 net/core/net-procfs.c | 17 +-
17458 net/core/pktgen.c | 2 +-
17459 net/core/sock.c | 3 +-
17460 net/core/sysctl_net_core.c | 2 +-
17461 net/decnet/dn_dev.c | 2 +-
17462 net/ipv4/devinet.c | 6 +-
17463 net/ipv4/inet_hashtables.c | 4 +
17464 net/ipv4/ip_input.c | 7 +
17465 net/ipv4/ip_sockglue.c | 3 +-
17466 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
17467 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
17468 net/ipv4/route.c | 6 +-
17469 net/ipv4/tcp_input.c | 4 +-
17470 net/ipv4/tcp_ipv4.c | 29 +-
17471 net/ipv4/tcp_minisocks.c | 9 +-
17472 net/ipv4/tcp_timer.c | 11 +
17473 net/ipv4/udp.c | 24 +
17474 net/ipv6/addrconf.c | 13 +-
17475 net/ipv6/proc.c | 2 +-
17476 net/ipv6/tcp_ipv6.c | 26 +-
17477 net/ipv6/udp.c | 7 +
17478 net/ipx/ipx_proc.c | 2 +-
17479 net/irda/irproc.c | 2 +-
17480 net/llc/llc_proc.c | 2 +-
17481 net/netfilter/Kconfig | 10 +
17482 net/netfilter/Makefile | 1 +
17483 net/netfilter/nf_conntrack_core.c | 8 +
17484 net/netfilter/xt_gradm.c | 51 +
17485 net/netfilter/xt_hashlimit.c | 4 +-
17486 net/netfilter/xt_recent.c | 2 +-
17487 net/sched/sch_api.c | 2 +-
17488 net/sctp/socket.c | 4 +-
17489 net/socket.c | 75 +-
17490 net/sunrpc/Kconfig | 1 +
17491 net/sunrpc/cache.c | 2 +-
17492 net/sunrpc/stats.c | 2 +-
17493 net/sysctl_net.c | 2 +-
17494 net/unix/af_unix.c | 52 +-
17495 net/vmw_vsock/vmci_transport_notify.c | 30 +-
17496 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
17497 net/x25/sysctl_net_x25.c | 2 +-
17498 net/x25/x25_proc.c | 2 +-
17499 scripts/package/Makefile | 2 +-
17500 scripts/package/mkspec | 41 +-
17501 security/Kconfig | 369 +-
17502 security/apparmor/file.c | 4 +-
17503 security/apparmor/lsm.c | 8 +-
17504 security/commoncap.c | 36 +-
17505 security/min_addr.c | 2 +
17506 security/smack/smack_lsm.c | 8 +-
17507 security/tomoyo/file.c | 12 +-
17508 security/tomoyo/mount.c | 4 +
17509 security/tomoyo/tomoyo.c | 20 +-
17510 security/yama/Kconfig | 2 +-
17511 security/yama/yama_lsm.c | 4 +-
17512 sound/synth/emux/emux_seq.c | 14 +-
17513 sound/usb/line6/driver.c | 40 +-
17514 sound/usb/line6/toneport.c | 12 +-
17515 tools/gcc/.gitignore | 1 +
17516 tools/gcc/Makefile | 12 +
17517 tools/gcc/gen-random-seed.sh | 8 +
17518 tools/gcc/randomize_layout_plugin.c | 930 +++
17519 tools/gcc/size_overflow_plugin/.gitignore | 1 +
17520 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
17521 511 files changed, 32631 insertions(+), 3196 deletions(-)
17522
17523 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
17524 Author: Brad Spengler <spender@grsecurity.net>
17525 Date: Tue Dec 15 14:31:49 2015 -0500
17526
17527 Update to pax-linux-4.3.3-test11.patch:
17528 - fixed a few compile regressions with the recent plugin changes, reported by spender
17529 - updated the size overflow hash table
17530
17531 tools/gcc/latent_entropy_plugin.c | 2 +-
17532 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
17533 tools/gcc/stackleak_plugin.c | 2 +-
17534 tools/gcc/structleak_plugin.c | 6 +--
17535 4 files changed, 60 insertions(+), 16 deletions(-)
17536
17537 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
17538 Author: Brad Spengler <spender@grsecurity.net>
17539 Date: Tue Dec 15 11:50:24 2015 -0500
17540
17541 Apply structleak ICE fix for gcc < 4.9
17542
17543 tools/gcc/structleak_plugin.c | 4 ++++
17544 1 files changed, 4 insertions(+), 0 deletions(-)
17545
17546 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
17547 Author: Brad Spengler <spender@grsecurity.net>
17548 Date: Tue Dec 15 07:57:06 2015 -0500
17549
17550 Update to pax-linux-4.3.1-test10.patch:
17551 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
17552 - Emese regenerated the size overflow hash tables for 4.3
17553 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
17554 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
17555
17556 arch/x86/entry/entry_64.S | 2 +-
17557 arch/x86/entry/entry_64_compat.S | 15 +-
17558 scripts/package/builddeb | 2 +-
17559 tools/gcc/initify_plugin.c | 11 +-
17560 tools/gcc/latent_entropy_plugin.c | 20 +-
17561 .../disable_size_overflow_hash.data | 4 +
17562 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
17563 tools/gcc/stackleak_plugin.c | 26 +-
17564 tools/gcc/structleak_plugin.c | 21 +-
17565 9 files changed, 3079 insertions(+), 2367 deletions(-)
17566
17567 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
17568 Merge: b5847e6 3548341
17569 Author: Brad Spengler <spender@grsecurity.net>
17570 Date: Tue Dec 15 07:47:56 2015 -0500
17571
17572 Merge branch 'linux-4.3.y' into pax-4_3
17573
17574 Conflicts:
17575 net/unix/af_unix.c
17576
17577 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
17578 Author: Brad Spengler <spender@grsecurity.net>
17579 Date: Wed Dec 9 23:11:36 2015 -0500
17580
17581 Update to pax-linux-4.3.1-test9.patch:
17582 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
17583 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
17584 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
17585 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
17586 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
17587 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
17588 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
17589
17590 Makefile | 6 +
17591 arch/x86/include/asm/compat.h | 4 +
17592 arch/x86/include/asm/dma.h | 2 +
17593 arch/x86/include/asm/pmem.h | 2 +-
17594 arch/x86/include/asm/uaccess.h | 20 +-
17595 arch/x86/kernel/apic/vector.c | 6 +-
17596 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
17597 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
17598 arch/x86/kernel/head_64.S | 1 -
17599 arch/x86/kvm/i8259.c | 10 +-
17600 arch/x86/kvm/ioapic.c | 2 +
17601 arch/x86/kvm/x86.c | 2 +
17602 arch/x86/lib/usercopy_64.c | 2 +-
17603 arch/x86/mm/mpx.c | 4 +-
17604 arch/x86/mm/pageattr.c | 7 +
17605 drivers/base/devres.c | 4 +-
17606 drivers/base/power/runtime.c | 6 +-
17607 drivers/base/regmap/regmap.c | 4 +-
17608 drivers/block/drbd/drbd_receiver.c | 4 +-
17609 drivers/block/drbd/drbd_worker.c | 6 +-
17610 drivers/char/virtio_console.c | 6 +-
17611 drivers/md/dm.c | 12 +-
17612 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
17613 drivers/net/macvtap.c | 4 +-
17614 drivers/video/fbdev/core/fbmem.c | 10 +-
17615 fs/compat.c | 3 +-
17616 fs/coredump.c | 2 +-
17617 fs/dcache.c | 13 +-
17618 fs/fhandle.c | 2 +-
17619 fs/file.c | 14 +-
17620 fs/fs-writeback.c | 11 +-
17621 fs/overlayfs/copy_up.c | 2 +-
17622 fs/readdir.c | 3 +-
17623 fs/super.c | 3 +-
17624 include/linux/compiler.h | 36 ++-
17625 include/linux/rcupdate.h | 8 +
17626 include/linux/sched.h | 4 +-
17627 include/linux/seqlock.h | 10 +
17628 include/linux/spinlock.h | 17 +-
17629 include/linux/srcu.h | 5 +-
17630 include/linux/syscalls.h | 2 +-
17631 include/linux/writeback.h | 3 +-
17632 include/uapi/linux/swab.h | 6 +-
17633 ipc/ipc_sysctl.c | 6 +
17634 kernel/exit.c | 25 +-
17635 kernel/resource.c | 4 +-
17636 kernel/signal.c | 12 +-
17637 kernel/user.c | 2 +-
17638 kernel/workqueue.c | 6 +-
17639 lib/rhashtable.c | 4 +-
17640 net/compat.c | 2 +-
17641 net/ipv4/xfrm4_mode_transport.c | 2 +-
17642 security/keys/internal.h | 8 +-
17643 security/keys/keyring.c | 4 -
17644 sound/core/seq/seq_clientmgr.c | 8 +-
17645 sound/core/seq/seq_compat.c | 2 +-
17646 sound/core/seq/seq_memory.c | 6 +-
17647 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
17648 tools/gcc/gcc-common.h | 1 +
17649 tools/gcc/initify_plugin.c | 33 ++-
17650 .../disable_size_overflow_hash.data | 1 +
17651 .../size_overflow_plugin/size_overflow_hash.data | 1 -
17652 62 files changed, 708 insertions(+), 140 deletions(-)
17653
17654 commit f2634c2f6995f4231616f24ed016f890c701f939
17655 Merge: 1241bff 5f8b236
17656 Author: Brad Spengler <spender@grsecurity.net>
17657 Date: Wed Dec 9 21:50:47 2015 -0500
17658
17659 Merge branch 'linux-4.3.y' into pax-4_3
17660
17661 Conflicts:
17662 arch/x86/kernel/fpu/xstate.c
17663 arch/x86/kernel/head_64.S
17664
17665 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
17666 Author: Brad Spengler <spender@grsecurity.net>
17667 Date: Sun Dec 6 08:44:56 2015 -0500
17668
17669 Update to pax-linux-4.3-test8.patch:
17670 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
17671 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
17672 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
17673 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
17674
17675 Makefile | 5 +++
17676 drivers/md/md.c | 5 ++-
17677 drivers/md/raid1.c | 2 +-
17678 fs/proc/task_mmu.c | 3 ++
17679 .../disable_size_overflow_hash.data | 4 ++-
17680 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
17681 .../size_overflow_plugin/size_overflow_hash.data | 2 -
17682 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
17683 8 files changed, 43 insertions(+), 12 deletions(-)
17684
17685 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
17686 Author: Brad Spengler <spender@grsecurity.net>
17687 Date: Fri Dec 4 14:24:12 2015 -0500
17688
17689 Initial import of pax-linux-4.3-test7.patch
17690
17691 Documentation/dontdiff | 47 +-
17692 Documentation/kbuild/makefiles.txt | 39 +-
17693 Documentation/kernel-parameters.txt | 28 +
17694 Makefile | 108 +-
17695 arch/alpha/include/asm/atomic.h | 10 +
17696 arch/alpha/include/asm/elf.h | 7 +
17697 arch/alpha/include/asm/pgalloc.h | 6 +
17698 arch/alpha/include/asm/pgtable.h | 11 +
17699 arch/alpha/kernel/module.c | 2 +-
17700 arch/alpha/kernel/osf_sys.c | 8 +-
17701 arch/alpha/mm/fault.c | 141 +-
17702 arch/arm/Kconfig | 2 +-
17703 arch/arm/include/asm/atomic.h | 320 +-
17704 arch/arm/include/asm/cache.h | 5 +-
17705 arch/arm/include/asm/cacheflush.h | 2 +-
17706 arch/arm/include/asm/checksum.h | 14 +-
17707 arch/arm/include/asm/cmpxchg.h | 4 +
17708 arch/arm/include/asm/cpuidle.h | 2 +-
17709 arch/arm/include/asm/domain.h | 22 +-
17710 arch/arm/include/asm/elf.h | 9 +-
17711 arch/arm/include/asm/fncpy.h | 2 +
17712 arch/arm/include/asm/futex.h | 10 +
17713 arch/arm/include/asm/kmap_types.h | 2 +-
17714 arch/arm/include/asm/mach/dma.h | 2 +-
17715 arch/arm/include/asm/mach/map.h | 16 +-
17716 arch/arm/include/asm/outercache.h | 2 +-
17717 arch/arm/include/asm/page.h | 3 +-
17718 arch/arm/include/asm/pgalloc.h | 20 +
17719 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
17720 arch/arm/include/asm/pgtable-2level.h | 3 +
17721 arch/arm/include/asm/pgtable-3level.h | 3 +
17722 arch/arm/include/asm/pgtable.h | 54 +-
17723 arch/arm/include/asm/smp.h | 2 +-
17724 arch/arm/include/asm/tls.h | 3 +
17725 arch/arm/include/asm/uaccess.h | 79 +-
17726 arch/arm/include/uapi/asm/ptrace.h | 2 +-
17727 arch/arm/kernel/armksyms.c | 2 +-
17728 arch/arm/kernel/cpuidle.c | 2 +-
17729 arch/arm/kernel/entry-armv.S | 109 +-
17730 arch/arm/kernel/entry-common.S | 40 +-
17731 arch/arm/kernel/entry-header.S | 55 +
17732 arch/arm/kernel/fiq.c | 3 +
17733 arch/arm/kernel/module-plts.c | 7 +-
17734 arch/arm/kernel/module.c | 38 +-
17735 arch/arm/kernel/patch.c | 2 +
17736 arch/arm/kernel/process.c | 90 +-
17737 arch/arm/kernel/reboot.c | 1 +
17738 arch/arm/kernel/setup.c | 20 +-
17739 arch/arm/kernel/signal.c | 35 +-
17740 arch/arm/kernel/smp.c | 2 +-
17741 arch/arm/kernel/tcm.c | 4 +-
17742 arch/arm/kernel/vmlinux.lds.S | 6 +-
17743 arch/arm/kvm/arm.c | 8 +-
17744 arch/arm/lib/copy_page.S | 1 +
17745 arch/arm/lib/csumpartialcopyuser.S | 4 +-
17746 arch/arm/lib/delay.c | 2 +-
17747 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
17748 arch/arm/mach-exynos/suspend.c | 6 +-
17749 arch/arm/mach-mvebu/coherency.c | 4 +-
17750 arch/arm/mach-omap2/board-n8x0.c | 2 +-
17751 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
17752 arch/arm/mach-omap2/omap-smp.c | 1 +
17753 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
17754 arch/arm/mach-omap2/omap_device.c | 4 +-
17755 arch/arm/mach-omap2/omap_device.h | 4 +-
17756 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
17757 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
17758 arch/arm/mach-omap2/wd_timer.c | 6 +-
17759 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
17760 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
17761 arch/arm/mach-tegra/irq.c | 1 +
17762 arch/arm/mach-ux500/pm.c | 1 +
17763 arch/arm/mach-zynq/platsmp.c | 1 +
17764 arch/arm/mm/Kconfig | 6 +-
17765 arch/arm/mm/alignment.c | 8 +
17766 arch/arm/mm/cache-l2x0.c | 2 +-
17767 arch/arm/mm/context.c | 10 +-
17768 arch/arm/mm/fault.c | 146 +
17769 arch/arm/mm/fault.h | 12 +
17770 arch/arm/mm/init.c | 39 +
17771 arch/arm/mm/ioremap.c | 4 +-
17772 arch/arm/mm/mmap.c | 30 +-
17773 arch/arm/mm/mmu.c | 162 +-
17774 arch/arm/net/bpf_jit_32.c | 3 +
17775 arch/arm/plat-iop/setup.c | 2 +-
17776 arch/arm/plat-omap/sram.c | 2 +
17777 arch/arm64/include/asm/atomic.h | 10 +
17778 arch/arm64/include/asm/percpu.h | 8 +-
17779 arch/arm64/include/asm/pgalloc.h | 5 +
17780 arch/arm64/include/asm/uaccess.h | 1 +
17781 arch/arm64/mm/dma-mapping.c | 2 +-
17782 arch/avr32/include/asm/elf.h | 8 +-
17783 arch/avr32/include/asm/kmap_types.h | 4 +-
17784 arch/avr32/mm/fault.c | 27 +
17785 arch/frv/include/asm/atomic.h | 10 +
17786 arch/frv/include/asm/kmap_types.h | 2 +-
17787 arch/frv/mm/elf-fdpic.c | 3 +-
17788 arch/ia64/Makefile | 1 +
17789 arch/ia64/include/asm/atomic.h | 10 +
17790 arch/ia64/include/asm/elf.h | 7 +
17791 arch/ia64/include/asm/pgalloc.h | 12 +
17792 arch/ia64/include/asm/pgtable.h | 13 +-
17793 arch/ia64/include/asm/spinlock.h | 2 +-
17794 arch/ia64/include/asm/uaccess.h | 27 +-
17795 arch/ia64/kernel/module.c | 45 +-
17796 arch/ia64/kernel/palinfo.c | 2 +-
17797 arch/ia64/kernel/sys_ia64.c | 7 +
17798 arch/ia64/kernel/vmlinux.lds.S | 2 +-
17799 arch/ia64/mm/fault.c | 32 +-
17800 arch/ia64/mm/init.c | 15 +-
17801 arch/m32r/lib/usercopy.c | 6 +
17802 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
17803 arch/mips/include/asm/atomic.h | 368 +-
17804 arch/mips/include/asm/elf.h | 7 +
17805 arch/mips/include/asm/exec.h | 2 +-
17806 arch/mips/include/asm/hw_irq.h | 2 +-
17807 arch/mips/include/asm/local.h | 57 +
17808 arch/mips/include/asm/page.h | 2 +-
17809 arch/mips/include/asm/pgalloc.h | 5 +
17810 arch/mips/include/asm/pgtable.h | 3 +
17811 arch/mips/include/asm/uaccess.h | 1 +
17812 arch/mips/kernel/binfmt_elfn32.c | 7 +
17813 arch/mips/kernel/binfmt_elfo32.c | 7 +
17814 arch/mips/kernel/irq-gt641xx.c | 2 +-
17815 arch/mips/kernel/irq.c | 6 +-
17816 arch/mips/kernel/pm-cps.c | 2 +-
17817 arch/mips/kernel/process.c | 12 -
17818 arch/mips/kernel/sync-r4k.c | 24 +-
17819 arch/mips/kernel/traps.c | 13 +-
17820 arch/mips/mm/fault.c | 25 +
17821 arch/mips/mm/mmap.c | 51 +-
17822 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
17823 arch/mips/sni/rm200.c | 2 +-
17824 arch/mips/vr41xx/common/icu.c | 2 +-
17825 arch/mips/vr41xx/common/irq.c | 4 +-
17826 arch/parisc/include/asm/atomic.h | 10 +
17827 arch/parisc/include/asm/elf.h | 7 +
17828 arch/parisc/include/asm/pgalloc.h | 6 +
17829 arch/parisc/include/asm/pgtable.h | 11 +
17830 arch/parisc/include/asm/uaccess.h | 4 +-
17831 arch/parisc/kernel/module.c | 50 +-
17832 arch/parisc/kernel/sys_parisc.c | 15 +
17833 arch/parisc/kernel/traps.c | 4 +-
17834 arch/parisc/mm/fault.c | 140 +-
17835 arch/powerpc/include/asm/atomic.h | 329 +-
17836 arch/powerpc/include/asm/elf.h | 12 +
17837 arch/powerpc/include/asm/exec.h | 2 +-
17838 arch/powerpc/include/asm/kmap_types.h | 2 +-
17839 arch/powerpc/include/asm/local.h | 46 +
17840 arch/powerpc/include/asm/mman.h | 2 +-
17841 arch/powerpc/include/asm/page.h | 8 +-
17842 arch/powerpc/include/asm/page_64.h | 7 +-
17843 arch/powerpc/include/asm/pgalloc-64.h | 7 +
17844 arch/powerpc/include/asm/pgtable.h | 1 +
17845 arch/powerpc/include/asm/pte-hash32.h | 1 +
17846 arch/powerpc/include/asm/reg.h | 1 +
17847 arch/powerpc/include/asm/smp.h | 2 +-
17848 arch/powerpc/include/asm/spinlock.h | 42 +-
17849 arch/powerpc/include/asm/uaccess.h | 141 +-
17850 arch/powerpc/kernel/Makefile | 5 +
17851 arch/powerpc/kernel/exceptions-64e.S | 4 +-
17852 arch/powerpc/kernel/exceptions-64s.S | 2 +-
17853 arch/powerpc/kernel/module_32.c | 15 +-
17854 arch/powerpc/kernel/process.c | 46 -
17855 arch/powerpc/kernel/signal_32.c | 2 +-
17856 arch/powerpc/kernel/signal_64.c | 2 +-
17857 arch/powerpc/kernel/traps.c | 21 +
17858 arch/powerpc/kernel/vdso.c | 5 +-
17859 arch/powerpc/lib/usercopy_64.c | 18 -
17860 arch/powerpc/mm/fault.c | 56 +-
17861 arch/powerpc/mm/mmap.c | 16 +
17862 arch/powerpc/mm/slice.c | 13 +-
17863 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
17864 arch/s390/include/asm/atomic.h | 10 +
17865 arch/s390/include/asm/elf.h | 7 +
17866 arch/s390/include/asm/exec.h | 2 +-
17867 arch/s390/include/asm/uaccess.h | 13 +-
17868 arch/s390/kernel/module.c | 22 +-
17869 arch/s390/kernel/process.c | 24 -
17870 arch/s390/mm/mmap.c | 16 +
17871 arch/score/include/asm/exec.h | 2 +-
17872 arch/score/kernel/process.c | 5 -
17873 arch/sh/mm/mmap.c | 22 +-
17874 arch/sparc/include/asm/atomic_64.h | 110 +-
17875 arch/sparc/include/asm/cache.h | 2 +-
17876 arch/sparc/include/asm/elf_32.h | 7 +
17877 arch/sparc/include/asm/elf_64.h | 7 +
17878 arch/sparc/include/asm/pgalloc_32.h | 1 +
17879 arch/sparc/include/asm/pgalloc_64.h | 1 +
17880 arch/sparc/include/asm/pgtable.h | 4 +
17881 arch/sparc/include/asm/pgtable_32.h | 15 +-
17882 arch/sparc/include/asm/pgtsrmmu.h | 5 +
17883 arch/sparc/include/asm/setup.h | 4 +-
17884 arch/sparc/include/asm/spinlock_64.h | 35 +-
17885 arch/sparc/include/asm/thread_info_32.h | 1 +
17886 arch/sparc/include/asm/thread_info_64.h | 2 +
17887 arch/sparc/include/asm/uaccess.h | 1 +
17888 arch/sparc/include/asm/uaccess_32.h | 28 +-
17889 arch/sparc/include/asm/uaccess_64.h | 24 +-
17890 arch/sparc/kernel/Makefile | 2 +-
17891 arch/sparc/kernel/prom_common.c | 2 +-
17892 arch/sparc/kernel/smp_64.c | 8 +-
17893 arch/sparc/kernel/sys_sparc_32.c | 2 +-
17894 arch/sparc/kernel/sys_sparc_64.c | 52 +-
17895 arch/sparc/kernel/traps_64.c | 27 +-
17896 arch/sparc/lib/Makefile | 2 +-
17897 arch/sparc/lib/atomic_64.S | 57 +-
17898 arch/sparc/lib/ksyms.c | 6 +-
17899 arch/sparc/mm/Makefile | 2 +-
17900 arch/sparc/mm/fault_32.c | 292 +
17901 arch/sparc/mm/fault_64.c | 486 +
17902 arch/sparc/mm/hugetlbpage.c | 22 +-
17903 arch/sparc/mm/init_64.c | 10 +-
17904 arch/tile/include/asm/atomic_64.h | 10 +
17905 arch/tile/include/asm/uaccess.h | 4 +-
17906 arch/um/Makefile | 4 +
17907 arch/um/include/asm/kmap_types.h | 2 +-
17908 arch/um/include/asm/page.h | 3 +
17909 arch/um/include/asm/pgtable-3level.h | 1 +
17910 arch/um/kernel/process.c | 16 -
17911 arch/x86/Kconfig | 15 +-
17912 arch/x86/Kconfig.cpu | 6 +-
17913 arch/x86/Kconfig.debug | 4 +-
17914 arch/x86/Makefile | 13 +-
17915 arch/x86/boot/Makefile | 3 +
17916 arch/x86/boot/bitops.h | 4 +-
17917 arch/x86/boot/boot.h | 2 +-
17918 arch/x86/boot/compressed/Makefile | 3 +
17919 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
17920 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
17921 arch/x86/boot/compressed/head_32.S | 4 +-
17922 arch/x86/boot/compressed/head_64.S | 12 +-
17923 arch/x86/boot/compressed/misc.c | 11 +-
17924 arch/x86/boot/cpucheck.c | 16 +-
17925 arch/x86/boot/header.S | 6 +-
17926 arch/x86/boot/memory.c | 2 +-
17927 arch/x86/boot/video-vesa.c | 1 +
17928 arch/x86/boot/video.c | 2 +-
17929 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
17930 arch/x86/crypto/aesni-intel_asm.S | 106 +-
17931 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
17932 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
17933 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
17934 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
17935 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
17936 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
17937 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
17938 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
17939 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
17940 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
17941 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
17942 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
17943 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
17944 arch/x86/crypto/sha256-avx-asm.S | 2 +
17945 arch/x86/crypto/sha256-avx2-asm.S | 2 +
17946 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
17947 arch/x86/crypto/sha512-avx-asm.S | 2 +
17948 arch/x86/crypto/sha512-avx2-asm.S | 2 +
17949 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
17950 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
17951 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
17952 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
17953 arch/x86/entry/calling.h | 86 +-
17954 arch/x86/entry/common.c | 13 +-
17955 arch/x86/entry/entry_32.S | 351 +-
17956 arch/x86/entry/entry_64.S | 619 +-
17957 arch/x86/entry/entry_64_compat.S | 159 +-
17958 arch/x86/entry/thunk_64.S | 2 +
17959 arch/x86/entry/vdso/Makefile | 2 +-
17960 arch/x86/entry/vdso/vdso2c.h | 8 +-
17961 arch/x86/entry/vdso/vma.c | 41 +-
17962 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
17963 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
17964 arch/x86/ia32/ia32_signal.c | 23 +-
17965 arch/x86/ia32/sys_ia32.c | 42 +-
17966 arch/x86/include/asm/alternative-asm.h | 43 +-
17967 arch/x86/include/asm/alternative.h | 4 +-
17968 arch/x86/include/asm/apic.h | 2 +-
17969 arch/x86/include/asm/apm.h | 4 +-
17970 arch/x86/include/asm/atomic.h | 230 +-
17971 arch/x86/include/asm/atomic64_32.h | 100 +
17972 arch/x86/include/asm/atomic64_64.h | 164 +-
17973 arch/x86/include/asm/bitops.h | 18 +-
17974 arch/x86/include/asm/boot.h | 2 +-
17975 arch/x86/include/asm/cache.h | 5 +-
17976 arch/x86/include/asm/checksum_32.h | 12 +-
17977 arch/x86/include/asm/cmpxchg.h | 39 +
17978 arch/x86/include/asm/compat.h | 2 +-
17979 arch/x86/include/asm/cpufeature.h | 17 +-
17980 arch/x86/include/asm/desc.h | 78 +-
17981 arch/x86/include/asm/desc_defs.h | 6 +
17982 arch/x86/include/asm/div64.h | 2 +-
17983 arch/x86/include/asm/elf.h | 33 +-
17984 arch/x86/include/asm/emergency-restart.h | 2 +-
17985 arch/x86/include/asm/fpu/internal.h | 42 +-
17986 arch/x86/include/asm/fpu/types.h | 6 +-
17987 arch/x86/include/asm/futex.h | 14 +-
17988 arch/x86/include/asm/hw_irq.h | 4 +-
17989 arch/x86/include/asm/i8259.h | 2 +-
17990 arch/x86/include/asm/io.h | 22 +-
17991 arch/x86/include/asm/irqflags.h | 5 +
17992 arch/x86/include/asm/kprobes.h | 9 +-
17993 arch/x86/include/asm/local.h | 106 +-
17994 arch/x86/include/asm/mman.h | 15 +
17995 arch/x86/include/asm/mmu.h | 14 +-
17996 arch/x86/include/asm/mmu_context.h | 114 +-
17997 arch/x86/include/asm/module.h | 17 +-
17998 arch/x86/include/asm/nmi.h | 19 +-
17999 arch/x86/include/asm/page.h | 1 +
18000 arch/x86/include/asm/page_32.h | 12 +-
18001 arch/x86/include/asm/page_64.h | 14 +-
18002 arch/x86/include/asm/paravirt.h | 46 +-
18003 arch/x86/include/asm/paravirt_types.h | 15 +-
18004 arch/x86/include/asm/pgalloc.h | 23 +
18005 arch/x86/include/asm/pgtable-2level.h | 2 +
18006 arch/x86/include/asm/pgtable-3level.h | 7 +
18007 arch/x86/include/asm/pgtable.h | 128 +-
18008 arch/x86/include/asm/pgtable_32.h | 14 +-
18009 arch/x86/include/asm/pgtable_32_types.h | 24 +-
18010 arch/x86/include/asm/pgtable_64.h | 23 +-
18011 arch/x86/include/asm/pgtable_64_types.h | 5 +
18012 arch/x86/include/asm/pgtable_types.h | 26 +-
18013 arch/x86/include/asm/preempt.h | 2 +-
18014 arch/x86/include/asm/processor.h | 57 +-
18015 arch/x86/include/asm/ptrace.h | 13 +-
18016 arch/x86/include/asm/realmode.h | 4 +-
18017 arch/x86/include/asm/reboot.h | 10 +-
18018 arch/x86/include/asm/rmwcc.h | 84 +-
18019 arch/x86/include/asm/rwsem.h | 60 +-
18020 arch/x86/include/asm/segment.h | 27 +-
18021 arch/x86/include/asm/smap.h | 43 +
18022 arch/x86/include/asm/smp.h | 14 +-
18023 arch/x86/include/asm/stackprotector.h | 4 +-
18024 arch/x86/include/asm/stacktrace.h | 32 +-
18025 arch/x86/include/asm/switch_to.h | 4 +-
18026 arch/x86/include/asm/sys_ia32.h | 6 +-
18027 arch/x86/include/asm/thread_info.h | 27 +-
18028 arch/x86/include/asm/tlbflush.h | 77 +-
18029 arch/x86/include/asm/uaccess.h | 192 +-
18030 arch/x86/include/asm/uaccess_32.h | 28 +-
18031 arch/x86/include/asm/uaccess_64.h | 169 +-
18032 arch/x86/include/asm/word-at-a-time.h | 2 +-
18033 arch/x86/include/asm/x86_init.h | 10 +-
18034 arch/x86/include/asm/xen/page.h | 2 +-
18035 arch/x86/include/uapi/asm/e820.h | 2 +-
18036 arch/x86/kernel/Makefile | 2 +-
18037 arch/x86/kernel/acpi/boot.c | 4 +-
18038 arch/x86/kernel/acpi/sleep.c | 4 +
18039 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
18040 arch/x86/kernel/alternative.c | 124 +-
18041 arch/x86/kernel/apic/apic.c | 4 +-
18042 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
18043 arch/x86/kernel/apic/apic_noop.c | 2 +-
18044 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
18045 arch/x86/kernel/apic/io_apic.c | 8 +-
18046 arch/x86/kernel/apic/msi.c | 2 +-
18047 arch/x86/kernel/apic/probe_32.c | 4 +-
18048 arch/x86/kernel/apic/vector.c | 4 +-
18049 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
18050 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
18051 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
18052 arch/x86/kernel/apm_32.c | 21 +-
18053 arch/x86/kernel/asm-offsets.c | 20 +
18054 arch/x86/kernel/asm-offsets_64.c | 1 +
18055 arch/x86/kernel/cpu/Makefile | 4 -
18056 arch/x86/kernel/cpu/amd.c | 2 +-
18057 arch/x86/kernel/cpu/bugs_64.c | 2 +
18058 arch/x86/kernel/cpu/common.c | 202 +-
18059 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
18060 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
18061 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
18062 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
18063 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
18064 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
18065 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
18066 arch/x86/kernel/cpu/perf_event.c | 10 +-
18067 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
18068 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
18069 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
18070 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
18071 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
18072 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
18073 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
18074 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
18075 arch/x86/kernel/crash_dump_64.c | 2 +-
18076 arch/x86/kernel/doublefault.c | 8 +-
18077 arch/x86/kernel/dumpstack.c | 24 +-
18078 arch/x86/kernel/dumpstack_32.c | 25 +-
18079 arch/x86/kernel/dumpstack_64.c | 62 +-
18080 arch/x86/kernel/e820.c | 4 +-
18081 arch/x86/kernel/early_printk.c | 1 +
18082 arch/x86/kernel/espfix_64.c | 44 +-
18083 arch/x86/kernel/fpu/core.c | 24 +-
18084 arch/x86/kernel/fpu/init.c | 40 +-
18085 arch/x86/kernel/fpu/regset.c | 22 +-
18086 arch/x86/kernel/fpu/signal.c | 20 +-
18087 arch/x86/kernel/fpu/xstate.c | 8 +-
18088 arch/x86/kernel/ftrace.c | 18 +-
18089 arch/x86/kernel/head64.c | 14 +-
18090 arch/x86/kernel/head_32.S | 235 +-
18091 arch/x86/kernel/head_64.S | 173 +-
18092 arch/x86/kernel/i386_ksyms_32.c | 12 +
18093 arch/x86/kernel/i8259.c | 10 +-
18094 arch/x86/kernel/io_delay.c | 2 +-
18095 arch/x86/kernel/ioport.c | 2 +-
18096 arch/x86/kernel/irq.c | 8 +-
18097 arch/x86/kernel/irq_32.c | 45 +-
18098 arch/x86/kernel/jump_label.c | 10 +-
18099 arch/x86/kernel/kgdb.c | 21 +-
18100 arch/x86/kernel/kprobes/core.c | 28 +-
18101 arch/x86/kernel/kprobes/opt.c | 16 +-
18102 arch/x86/kernel/ksysfs.c | 2 +-
18103 arch/x86/kernel/kvmclock.c | 20 +-
18104 arch/x86/kernel/ldt.c | 25 +
18105 arch/x86/kernel/livepatch.c | 12 +-
18106 arch/x86/kernel/machine_kexec_32.c | 6 +-
18107 arch/x86/kernel/mcount_64.S | 19 +-
18108 arch/x86/kernel/module.c | 78 +-
18109 arch/x86/kernel/msr.c | 2 +-
18110 arch/x86/kernel/nmi.c | 34 +-
18111 arch/x86/kernel/nmi_selftest.c | 4 +-
18112 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
18113 arch/x86/kernel/paravirt.c | 45 +-
18114 arch/x86/kernel/paravirt_patch_64.c | 8 +
18115 arch/x86/kernel/pci-calgary_64.c | 2 +-
18116 arch/x86/kernel/pci-iommu_table.c | 2 +-
18117 arch/x86/kernel/pci-swiotlb.c | 2 +-
18118 arch/x86/kernel/process.c | 80 +-
18119 arch/x86/kernel/process_32.c | 29 +-
18120 arch/x86/kernel/process_64.c | 14 +-
18121 arch/x86/kernel/ptrace.c | 20 +-
18122 arch/x86/kernel/pvclock.c | 8 +-
18123 arch/x86/kernel/reboot.c | 44 +-
18124 arch/x86/kernel/reboot_fixups_32.c | 2 +-
18125 arch/x86/kernel/relocate_kernel_64.S | 3 +-
18126 arch/x86/kernel/setup.c | 29 +-
18127 arch/x86/kernel/setup_percpu.c | 29 +-
18128 arch/x86/kernel/signal.c | 17 +-
18129 arch/x86/kernel/smp.c | 2 +-
18130 arch/x86/kernel/smpboot.c | 29 +-
18131 arch/x86/kernel/step.c | 6 +-
18132 arch/x86/kernel/sys_i386_32.c | 184 +
18133 arch/x86/kernel/sys_x86_64.c | 22 +-
18134 arch/x86/kernel/tboot.c | 14 +-
18135 arch/x86/kernel/time.c | 8 +-
18136 arch/x86/kernel/tls.c | 7 +-
18137 arch/x86/kernel/tracepoint.c | 4 +-
18138 arch/x86/kernel/traps.c | 53 +-
18139 arch/x86/kernel/tsc.c | 2 +-
18140 arch/x86/kernel/uprobes.c | 2 +-
18141 arch/x86/kernel/vm86_32.c | 6 +-
18142 arch/x86/kernel/vmlinux.lds.S | 153 +-
18143 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
18144 arch/x86/kernel/x86_init.c | 6 +-
18145 arch/x86/kvm/cpuid.c | 21 +-
18146 arch/x86/kvm/emulate.c | 2 +-
18147 arch/x86/kvm/lapic.c | 2 +-
18148 arch/x86/kvm/paging_tmpl.h | 2 +-
18149 arch/x86/kvm/svm.c | 10 +-
18150 arch/x86/kvm/vmx.c | 62 +-
18151 arch/x86/kvm/x86.c | 42 +-
18152 arch/x86/lguest/boot.c | 3 +-
18153 arch/x86/lib/atomic64_386_32.S | 164 +
18154 arch/x86/lib/atomic64_cx8_32.S | 98 +-
18155 arch/x86/lib/checksum_32.S | 99 +-
18156 arch/x86/lib/clear_page_64.S | 3 +
18157 arch/x86/lib/cmpxchg16b_emu.S | 3 +
18158 arch/x86/lib/copy_page_64.S | 14 +-
18159 arch/x86/lib/copy_user_64.S | 66 +-
18160 arch/x86/lib/csum-copy_64.S | 14 +-
18161 arch/x86/lib/csum-wrappers_64.c | 8 +-
18162 arch/x86/lib/getuser.S | 74 +-
18163 arch/x86/lib/insn.c | 8 +-
18164 arch/x86/lib/iomap_copy_64.S | 2 +
18165 arch/x86/lib/memcpy_64.S | 6 +
18166 arch/x86/lib/memmove_64.S | 3 +-
18167 arch/x86/lib/memset_64.S | 3 +
18168 arch/x86/lib/mmx_32.c | 243 +-
18169 arch/x86/lib/msr-reg.S | 2 +
18170 arch/x86/lib/putuser.S | 87 +-
18171 arch/x86/lib/rwsem.S | 6 +-
18172 arch/x86/lib/usercopy_32.c | 359 +-
18173 arch/x86/lib/usercopy_64.c | 20 +-
18174 arch/x86/math-emu/fpu_aux.c | 2 +-
18175 arch/x86/math-emu/fpu_entry.c | 4 +-
18176 arch/x86/math-emu/fpu_system.h | 2 +-
18177 arch/x86/mm/Makefile | 4 +
18178 arch/x86/mm/extable.c | 26 +-
18179 arch/x86/mm/fault.c | 570 +-
18180 arch/x86/mm/gup.c | 6 +-
18181 arch/x86/mm/highmem_32.c | 6 +
18182 arch/x86/mm/hugetlbpage.c | 24 +-
18183 arch/x86/mm/init.c | 111 +-
18184 arch/x86/mm/init_32.c | 111 +-
18185 arch/x86/mm/init_64.c | 46 +-
18186 arch/x86/mm/iomap_32.c | 4 +
18187 arch/x86/mm/ioremap.c | 52 +-
18188 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
18189 arch/x86/mm/mmap.c | 40 +-
18190 arch/x86/mm/mmio-mod.c | 10 +-
18191 arch/x86/mm/numa.c | 2 +-
18192 arch/x86/mm/pageattr.c | 38 +-
18193 arch/x86/mm/pat.c | 12 +-
18194 arch/x86/mm/pat_rbtree.c | 2 +-
18195 arch/x86/mm/pf_in.c | 10 +-
18196 arch/x86/mm/pgtable.c | 214 +-
18197 arch/x86/mm/pgtable_32.c | 3 +
18198 arch/x86/mm/setup_nx.c | 7 +
18199 arch/x86/mm/tlb.c | 4 +
18200 arch/x86/mm/uderef_64.c | 37 +
18201 arch/x86/net/bpf_jit.S | 11 +
18202 arch/x86/net/bpf_jit_comp.c | 13 +-
18203 arch/x86/oprofile/backtrace.c | 6 +-
18204 arch/x86/oprofile/nmi_int.c | 8 +-
18205 arch/x86/oprofile/op_model_amd.c | 8 +-
18206 arch/x86/oprofile/op_model_ppro.c | 7 +-
18207 arch/x86/oprofile/op_x86_model.h | 2 +-
18208 arch/x86/pci/intel_mid_pci.c | 2 +-
18209 arch/x86/pci/irq.c | 8 +-
18210 arch/x86/pci/pcbios.c | 144 +-
18211 arch/x86/platform/efi/efi_32.c | 24 +
18212 arch/x86/platform/efi/efi_64.c | 26 +-
18213 arch/x86/platform/efi/efi_stub_32.S | 64 +-
18214 arch/x86/platform/efi/efi_stub_64.S | 2 +
18215 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
18216 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
18217 arch/x86/platform/intel-mid/mfld.c | 4 +-
18218 arch/x86/platform/intel-mid/mrfl.c | 2 +-
18219 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
18220 arch/x86/platform/olpc/olpc_dt.c | 2 +-
18221 arch/x86/power/cpu.c | 11 +-
18222 arch/x86/realmode/init.c | 10 +-
18223 arch/x86/realmode/rm/Makefile | 3 +
18224 arch/x86/realmode/rm/header.S | 4 +-
18225 arch/x86/realmode/rm/reboot.S | 4 +
18226 arch/x86/realmode/rm/trampoline_32.S | 12 +-
18227 arch/x86/realmode/rm/trampoline_64.S | 3 +-
18228 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
18229 arch/x86/tools/Makefile | 2 +-
18230 arch/x86/tools/relocs.c | 96 +-
18231 arch/x86/um/mem_32.c | 2 +-
18232 arch/x86/um/tls_32.c | 2 +-
18233 arch/x86/xen/enlighten.c | 50 +-
18234 arch/x86/xen/mmu.c | 19 +-
18235 arch/x86/xen/smp.c | 16 +-
18236 arch/x86/xen/xen-asm_32.S | 2 +-
18237 arch/x86/xen/xen-head.S | 11 +
18238 arch/x86/xen/xen-ops.h | 2 -
18239 block/bio.c | 4 +-
18240 block/blk-iopoll.c | 2 +-
18241 block/blk-map.c | 2 +-
18242 block/blk-softirq.c | 2 +-
18243 block/bsg.c | 12 +-
18244 block/compat_ioctl.c | 4 +-
18245 block/genhd.c | 9 +-
18246 block/partitions/efi.c | 8 +-
18247 block/scsi_ioctl.c | 29 +-
18248 crypto/cryptd.c | 4 +-
18249 crypto/pcrypt.c | 2 +-
18250 crypto/zlib.c | 12 +-
18251 drivers/acpi/acpi_video.c | 2 +-
18252 drivers/acpi/apei/apei-internal.h | 2 +-
18253 drivers/acpi/apei/ghes.c | 4 +-
18254 drivers/acpi/bgrt.c | 6 +-
18255 drivers/acpi/blacklist.c | 4 +-
18256 drivers/acpi/bus.c | 4 +-
18257 drivers/acpi/device_pm.c | 4 +-
18258 drivers/acpi/ec.c | 2 +-
18259 drivers/acpi/pci_slot.c | 2 +-
18260 drivers/acpi/processor_idle.c | 2 +-
18261 drivers/acpi/processor_pdc.c | 2 +-
18262 drivers/acpi/sleep.c | 2 +-
18263 drivers/acpi/sysfs.c | 4 +-
18264 drivers/acpi/thermal.c | 2 +-
18265 drivers/acpi/video_detect.c | 7 +-
18266 drivers/ata/libata-core.c | 12 +-
18267 drivers/ata/libata-scsi.c | 2 +-
18268 drivers/ata/libata.h | 2 +-
18269 drivers/ata/pata_arasan_cf.c | 4 +-
18270 drivers/atm/adummy.c | 2 +-
18271 drivers/atm/ambassador.c | 8 +-
18272 drivers/atm/atmtcp.c | 14 +-
18273 drivers/atm/eni.c | 10 +-
18274 drivers/atm/firestream.c | 8 +-
18275 drivers/atm/fore200e.c | 14 +-
18276 drivers/atm/he.c | 18 +-
18277 drivers/atm/horizon.c | 4 +-
18278 drivers/atm/idt77252.c | 36 +-
18279 drivers/atm/iphase.c | 34 +-
18280 drivers/atm/lanai.c | 12 +-
18281 drivers/atm/nicstar.c | 46 +-
18282 drivers/atm/solos-pci.c | 4 +-
18283 drivers/atm/suni.c | 4 +-
18284 drivers/atm/uPD98402.c | 16 +-
18285 drivers/atm/zatm.c | 6 +-
18286 drivers/base/bus.c | 4 +-
18287 drivers/base/devtmpfs.c | 8 +-
18288 drivers/base/node.c | 2 +-
18289 drivers/base/platform-msi.c | 20 +-
18290 drivers/base/power/domain.c | 11 +-
18291 drivers/base/power/sysfs.c | 2 +-
18292 drivers/base/power/wakeup.c | 8 +-
18293 drivers/base/regmap/regmap-debugfs.c | 11 +-
18294 drivers/base/syscore.c | 4 +-
18295 drivers/block/cciss.c | 28 +-
18296 drivers/block/cciss.h | 2 +-
18297 drivers/block/cpqarray.c | 28 +-
18298 drivers/block/cpqarray.h | 2 +-
18299 drivers/block/drbd/drbd_bitmap.c | 2 +-
18300 drivers/block/drbd/drbd_int.h | 8 +-
18301 drivers/block/drbd/drbd_main.c | 12 +-
18302 drivers/block/drbd/drbd_nl.c | 4 +-
18303 drivers/block/drbd/drbd_receiver.c | 34 +-
18304 drivers/block/drbd/drbd_worker.c | 8 +-
18305 drivers/block/pktcdvd.c | 4 +-
18306 drivers/block/rbd.c | 2 +-
18307 drivers/bluetooth/btwilink.c | 2 +-
18308 drivers/bus/arm-cci.c | 12 +-
18309 drivers/cdrom/cdrom.c | 11 +-
18310 drivers/cdrom/gdrom.c | 1 -
18311 drivers/char/agp/compat_ioctl.c | 2 +-
18312 drivers/char/agp/frontend.c | 4 +-
18313 drivers/char/agp/intel-gtt.c | 4 +-
18314 drivers/char/hpet.c | 2 +-
18315 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
18316 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
18317 drivers/char/mem.c | 47 +-
18318 drivers/char/nvram.c | 2 +-
18319 drivers/char/pcmcia/synclink_cs.c | 16 +-
18320 drivers/char/random.c | 12 +-
18321 drivers/char/sonypi.c | 11 +-
18322 drivers/char/tpm/tpm_acpi.c | 3 +-
18323 drivers/char/tpm/tpm_eventlog.c | 4 +-
18324 drivers/char/virtio_console.c | 4 +-
18325 drivers/clk/clk-composite.c | 2 +-
18326 drivers/clk/samsung/clk.h | 2 +-
18327 drivers/clk/socfpga/clk-gate.c | 9 +-
18328 drivers/clk/socfpga/clk-pll.c | 9 +-
18329 drivers/clk/ti/clk.c | 8 +-
18330 drivers/cpufreq/acpi-cpufreq.c | 17 +-
18331 drivers/cpufreq/cpufreq-dt.c | 4 +-
18332 drivers/cpufreq/cpufreq.c | 30 +-
18333 drivers/cpufreq/cpufreq_governor.c | 2 +-
18334 drivers/cpufreq/cpufreq_governor.h | 4 +-
18335 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
18336 drivers/cpufreq/intel_pstate.c | 33 +-
18337 drivers/cpufreq/p4-clockmod.c | 12 +-
18338 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
18339 drivers/cpufreq/speedstep-centrino.c | 7 +-
18340 drivers/cpuidle/driver.c | 2 +-
18341 drivers/cpuidle/dt_idle_states.c | 2 +-
18342 drivers/cpuidle/governor.c | 2 +-
18343 drivers/cpuidle/sysfs.c | 2 +-
18344 drivers/crypto/hifn_795x.c | 4 +-
18345 drivers/devfreq/devfreq.c | 4 +-
18346 drivers/dma/sh/shdma-base.c | 4 +-
18347 drivers/dma/sh/shdmac.c | 2 +-
18348 drivers/edac/edac_device.c | 4 +-
18349 drivers/edac/edac_mc_sysfs.c | 2 +-
18350 drivers/edac/edac_pci.c | 4 +-
18351 drivers/edac/edac_pci_sysfs.c | 22 +-
18352 drivers/edac/mce_amd.h | 2 +-
18353 drivers/firewire/core-card.c | 6 +-
18354 drivers/firewire/core-device.c | 2 +-
18355 drivers/firewire/core-transaction.c | 1 +
18356 drivers/firewire/core.h | 1 +
18357 drivers/firmware/dmi-id.c | 2 +-
18358 drivers/firmware/dmi_scan.c | 12 +-
18359 drivers/firmware/efi/cper.c | 8 +-
18360 drivers/firmware/efi/efi.c | 12 +-
18361 drivers/firmware/efi/efivars.c | 2 +-
18362 drivers/firmware/efi/runtime-map.c | 2 +-
18363 drivers/firmware/google/gsmi.c | 2 +-
18364 drivers/firmware/google/memconsole.c | 7 +-
18365 drivers/firmware/memmap.c | 2 +-
18366 drivers/firmware/psci.c | 2 +-
18367 drivers/gpio/gpio-davinci.c | 6 +-
18368 drivers/gpio/gpio-em.c | 2 +-
18369 drivers/gpio/gpio-ich.c | 2 +-
18370 drivers/gpio/gpio-omap.c | 4 +-
18371 drivers/gpio/gpio-rcar.c | 2 +-
18372 drivers/gpio/gpio-vr41xx.c | 2 +-
18373 drivers/gpio/gpiolib.c | 12 +-
18374 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
18375 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
18376 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
18377 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
18378 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
18379 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
18380 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
18381 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
18382 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
18383 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
18384 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
18385 drivers/gpu/drm/drm_crtc.c | 2 +-
18386 drivers/gpu/drm/drm_drv.c | 2 +-
18387 drivers/gpu/drm/drm_fops.c | 12 +-
18388 drivers/gpu/drm/drm_global.c | 14 +-
18389 drivers/gpu/drm/drm_info.c | 13 +-
18390 drivers/gpu/drm/drm_ioc32.c | 13 +-
18391 drivers/gpu/drm/drm_ioctl.c | 2 +-
18392 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
18393 drivers/gpu/drm/i810/i810_drv.h | 4 +-
18394 drivers/gpu/drm/i915/i915_dma.c | 2 +-
18395 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
18396 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
18397 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
18398 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
18399 drivers/gpu/drm/i915/intel_display.c | 26 +-
18400 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
18401 drivers/gpu/drm/mga/mga_drv.h | 4 +-
18402 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
18403 drivers/gpu/drm/mga/mga_irq.c | 8 +-
18404 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
18405 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
18406 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
18407 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
18408 drivers/gpu/drm/omapdrm/Makefile | 2 +-
18409 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
18410 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
18411 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
18412 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
18413 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
18414 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
18415 drivers/gpu/drm/r128/r128_cce.c | 2 +-
18416 drivers/gpu/drm/r128/r128_drv.h | 4 +-
18417 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
18418 drivers/gpu/drm/r128/r128_irq.c | 4 +-
18419 drivers/gpu/drm/r128/r128_state.c | 4 +-
18420 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
18421 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
18422 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
18423 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
18424 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
18425 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
18426 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
18427 drivers/gpu/drm/tegra/dc.c | 2 +-
18428 drivers/gpu/drm/tegra/dsi.c | 2 +-
18429 drivers/gpu/drm/tegra/hdmi.c | 2 +-
18430 drivers/gpu/drm/tegra/sor.c | 7 +-
18431 drivers/gpu/drm/tilcdc/Makefile | 6 +-
18432 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
18433 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
18434 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
18435 drivers/gpu/drm/udl/udl_fb.c | 1 -
18436 drivers/gpu/drm/via/via_drv.h | 4 +-
18437 drivers/gpu/drm/via/via_irq.c | 18 +-
18438 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
18439 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
18440 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
18441 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
18442 drivers/gpu/vga/vga_switcheroo.c | 4 +-
18443 drivers/hid/hid-core.c | 4 +-
18444 drivers/hid/hid-sensor-custom.c | 2 +-
18445 drivers/hv/channel.c | 2 +-
18446 drivers/hv/hv.c | 4 +-
18447 drivers/hv/hv_balloon.c | 18 +-
18448 drivers/hv/hyperv_vmbus.h | 2 +-
18449 drivers/hwmon/acpi_power_meter.c | 6 +-
18450 drivers/hwmon/applesmc.c | 2 +-
18451 drivers/hwmon/asus_atk0110.c | 10 +-
18452 drivers/hwmon/coretemp.c | 2 +-
18453 drivers/hwmon/dell-smm-hwmon.c | 2 +-
18454 drivers/hwmon/ibmaem.c | 2 +-
18455 drivers/hwmon/iio_hwmon.c | 2 +-
18456 drivers/hwmon/nct6683.c | 6 +-
18457 drivers/hwmon/nct6775.c | 6 +-
18458 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
18459 drivers/hwmon/sht15.c | 12 +-
18460 drivers/hwmon/via-cputemp.c | 2 +-
18461 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
18462 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
18463 drivers/i2c/i2c-dev.c | 2 +-
18464 drivers/ide/ide-cd.c | 2 +-
18465 drivers/ide/ide-disk.c | 2 +-
18466 drivers/iio/industrialio-core.c | 2 +-
18467 drivers/iio/magnetometer/ak8975.c | 2 +-
18468 drivers/infiniband/core/cm.c | 32 +-
18469 drivers/infiniband/core/fmr_pool.c | 20 +-
18470 drivers/infiniband/core/uverbs_cmd.c | 3 +
18471 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
18472 drivers/infiniband/hw/mlx4/mad.c | 2 +-
18473 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
18474 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
18475 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
18476 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
18477 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
18478 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
18479 drivers/infiniband/hw/nes/nes.c | 4 +-
18480 drivers/infiniband/hw/nes/nes.h | 40 +-
18481 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
18482 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
18483 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
18484 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
18485 drivers/infiniband/hw/qib/qib.h | 1 +
18486 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
18487 drivers/input/gameport/gameport.c | 4 +-
18488 drivers/input/input.c | 4 +-
18489 drivers/input/joystick/sidewinder.c | 1 +
18490 drivers/input/joystick/xpad.c | 4 +-
18491 drivers/input/misc/ims-pcu.c | 4 +-
18492 drivers/input/mouse/psmouse.h | 2 +-
18493 drivers/input/mousedev.c | 2 +-
18494 drivers/input/serio/serio.c | 4 +-
18495 drivers/input/serio/serio_raw.c | 4 +-
18496 drivers/input/touchscreen/htcpen.c | 2 +-
18497 drivers/iommu/arm-smmu-v3.c | 2 +-
18498 drivers/iommu/arm-smmu.c | 43 +-
18499 drivers/iommu/io-pgtable-arm.c | 101 +-
18500 drivers/iommu/io-pgtable.c | 11 +-
18501 drivers/iommu/io-pgtable.h | 19 +-
18502 drivers/iommu/iommu.c | 2 +-
18503 drivers/iommu/ipmmu-vmsa.c | 13 +-
18504 drivers/iommu/irq_remapping.c | 2 +-
18505 drivers/irqchip/irq-gic.c | 2 +-
18506 drivers/irqchip/irq-i8259.c | 2 +-
18507 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
18508 drivers/irqchip/irq-renesas-irqc.c | 2 +-
18509 drivers/isdn/capi/capi.c | 10 +-
18510 drivers/isdn/gigaset/interface.c | 8 +-
18511 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
18512 drivers/isdn/hardware/avm/b1.c | 4 +-
18513 drivers/isdn/i4l/isdn_common.c | 2 +
18514 drivers/isdn/i4l/isdn_tty.c | 22 +-
18515 drivers/isdn/icn/icn.c | 2 +-
18516 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
18517 drivers/lguest/core.c | 10 +-
18518 drivers/lguest/page_tables.c | 2 +-
18519 drivers/lguest/x86/core.c | 12 +-
18520 drivers/lguest/x86/switcher_32.S | 27 +-
18521 drivers/md/bcache/closure.h | 2 +-
18522 drivers/md/bitmap.c | 2 +-
18523 drivers/md/dm-ioctl.c | 2 +-
18524 drivers/md/dm-raid1.c | 18 +-
18525 drivers/md/dm-stats.c | 6 +-
18526 drivers/md/dm-stripe.c | 10 +-
18527 drivers/md/dm-table.c | 2 +-
18528 drivers/md/dm-thin-metadata.c | 4 +-
18529 drivers/md/dm.c | 16 +-
18530 drivers/md/md.c | 26 +-
18531 drivers/md/md.h | 6 +-
18532 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
18533 drivers/md/persistent-data/dm-space-map.h | 1 +
18534 drivers/md/raid1.c | 4 +-
18535 drivers/md/raid10.c | 18 +-
18536 drivers/md/raid5.c | 22 +-
18537 drivers/media/dvb-core/dvbdev.c | 2 +-
18538 drivers/media/dvb-frontends/af9033.h | 2 +-
18539 drivers/media/dvb-frontends/dib3000.h | 2 +-
18540 drivers/media/dvb-frontends/dib7000p.h | 2 +-
18541 drivers/media/dvb-frontends/dib8000.h | 2 +-
18542 drivers/media/pci/cx88/cx88-video.c | 6 +-
18543 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
18544 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
18545 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
18546 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
18547 drivers/media/pci/tw68/tw68-core.c | 2 +-
18548 drivers/media/platform/omap/omap_vout.c | 11 +-
18549 drivers/media/platform/s5p-tv/mixer.h | 2 +-
18550 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
18551 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
18552 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
18553 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
18554 drivers/media/radio/radio-cadet.c | 2 +
18555 drivers/media/radio/radio-maxiradio.c | 2 +-
18556 drivers/media/radio/radio-shark.c | 2 +-
18557 drivers/media/radio/radio-shark2.c | 2 +-
18558 drivers/media/radio/radio-si476x.c | 2 +-
18559 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
18560 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
18561 drivers/media/v4l2-core/v4l2-device.c | 4 +-
18562 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
18563 drivers/memory/omap-gpmc.c | 21 +-
18564 drivers/message/fusion/mptsas.c | 34 +-
18565 drivers/mfd/ab8500-debugfs.c | 2 +-
18566 drivers/mfd/kempld-core.c | 2 +-
18567 drivers/mfd/max8925-i2c.c | 2 +-
18568 drivers/mfd/tps65910.c | 2 +-
18569 drivers/mfd/twl4030-irq.c | 9 +-
18570 drivers/mfd/wm5110-tables.c | 2 +-
18571 drivers/mfd/wm8998-tables.c | 2 +-
18572 drivers/misc/c2port/core.c | 4 +-
18573 drivers/misc/kgdbts.c | 4 +-
18574 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
18575 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
18576 drivers/misc/mic/scif/scif_rb.c | 8 +-
18577 drivers/misc/sgi-gru/gruhandles.c | 4 +-
18578 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
18579 drivers/misc/sgi-gru/grutables.h | 154 +-
18580 drivers/misc/sgi-xp/xp.h | 2 +-
18581 drivers/misc/sgi-xp/xpc.h | 3 +-
18582 drivers/misc/sgi-xp/xpc_main.c | 2 +-
18583 drivers/mmc/card/block.c | 2 +-
18584 drivers/mmc/host/dw_mmc.h | 2 +-
18585 drivers/mmc/host/mmci.c | 4 +-
18586 drivers/mmc/host/omap_hsmmc.c | 4 +-
18587 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
18588 drivers/mmc/host/sdhci-s3c.c | 8 +-
18589 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
18590 drivers/mtd/nand/denali.c | 1 +
18591 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
18592 drivers/mtd/nftlmount.c | 1 +
18593 drivers/mtd/sm_ftl.c | 2 +-
18594 drivers/net/bonding/bond_netlink.c | 2 +-
18595 drivers/net/caif/caif_hsi.c | 2 +-
18596 drivers/net/can/Kconfig | 2 +-
18597 drivers/net/can/dev.c | 2 +-
18598 drivers/net/can/vcan.c | 2 +-
18599 drivers/net/dummy.c | 2 +-
18600 drivers/net/ethernet/8390/ax88796.c | 4 +-
18601 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
18602 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
18603 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
18604 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
18605 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
18606 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
18607 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
18608 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
18609 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
18610 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
18611 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
18612 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
18613 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
18614 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
18615 drivers/net/ethernet/broadcom/tg3.h | 1 +
18616 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
18617 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
18618 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
18619 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
18620 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
18621 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
18622 drivers/net/ethernet/faraday/ftmac100.c | 2 +
18623 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
18624 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
18625 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
18626 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
18627 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
18628 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
18629 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
18630 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
18631 drivers/net/ethernet/realtek/r8169.c | 8 +-
18632 drivers/net/ethernet/sfc/ptp.c | 2 +-
18633 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
18634 drivers/net/ethernet/via/via-rhine.c | 2 +-
18635 drivers/net/geneve.c | 2 +-
18636 drivers/net/hyperv/hyperv_net.h | 2 +-
18637 drivers/net/hyperv/rndis_filter.c | 4 +-
18638 drivers/net/ifb.c | 2 +-
18639 drivers/net/ipvlan/ipvlan_core.c | 2 +-
18640 drivers/net/macvlan.c | 20 +-
18641 drivers/net/macvtap.c | 6 +-
18642 drivers/net/nlmon.c | 2 +-
18643 drivers/net/phy/phy_device.c | 6 +-
18644 drivers/net/ppp/ppp_generic.c | 4 +-
18645 drivers/net/slip/slhc.c | 2 +-
18646 drivers/net/team/team.c | 4 +-
18647 drivers/net/tun.c | 7 +-
18648 drivers/net/usb/hso.c | 23 +-
18649 drivers/net/usb/r8152.c | 2 +-
18650 drivers/net/usb/sierra_net.c | 4 +-
18651 drivers/net/virtio_net.c | 2 +-
18652 drivers/net/vrf.c | 2 +-
18653 drivers/net/vxlan.c | 4 +-
18654 drivers/net/wimax/i2400m/rx.c | 2 +-
18655 drivers/net/wireless/airo.c | 2 +-
18656 drivers/net/wireless/at76c50x-usb.c | 2 +-
18657 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
18658 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
18659 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
18660 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
18661 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
18662 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
18663 drivers/net/wireless/ath/ath9k/main.c | 22 +-
18664 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
18665 drivers/net/wireless/b43/phy_lp.c | 2 +-
18666 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
18667 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
18668 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
18669 drivers/net/wireless/mac80211_hwsim.c | 28 +-
18670 drivers/net/wireless/rndis_wlan.c | 2 +-
18671 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
18672 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
18673 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
18674 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
18675 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
18676 drivers/nfc/nfcwilink.c | 2 +-
18677 drivers/of/fdt.c | 4 +-
18678 drivers/oprofile/buffer_sync.c | 8 +-
18679 drivers/oprofile/event_buffer.c | 2 +-
18680 drivers/oprofile/oprof.c | 2 +-
18681 drivers/oprofile/oprofile_stats.c | 10 +-
18682 drivers/oprofile/oprofile_stats.h | 10 +-
18683 drivers/oprofile/oprofilefs.c | 6 +-
18684 drivers/oprofile/timer_int.c | 2 +-
18685 drivers/parport/procfs.c | 4 +-
18686 drivers/pci/host/pci-host-generic.c | 24 +-
18687 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
18688 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
18689 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
18690 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
18691 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
18692 drivers/pci/hotplug/pciehp_core.c | 2 +-
18693 drivers/pci/msi.c | 22 +-
18694 drivers/pci/pci-sysfs.c | 6 +-
18695 drivers/pci/pci.h | 2 +-
18696 drivers/pci/pcie/aspm.c | 6 +-
18697 drivers/pci/pcie/portdrv_pci.c | 2 +-
18698 drivers/pci/probe.c | 2 +-
18699 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
18700 drivers/pinctrl/pinctrl-at91.c | 5 +-
18701 drivers/platform/chrome/chromeos_pstore.c | 2 +-
18702 drivers/platform/x86/alienware-wmi.c | 4 +-
18703 drivers/platform/x86/compal-laptop.c | 2 +-
18704 drivers/platform/x86/hdaps.c | 2 +-
18705 drivers/platform/x86/ibm_rtl.c | 2 +-
18706 drivers/platform/x86/intel_oaktrail.c | 2 +-
18707 drivers/platform/x86/msi-laptop.c | 16 +-
18708 drivers/platform/x86/msi-wmi.c | 2 +-
18709 drivers/platform/x86/samsung-laptop.c | 2 +-
18710 drivers/platform/x86/samsung-q10.c | 2 +-
18711 drivers/platform/x86/sony-laptop.c | 14 +-
18712 drivers/platform/x86/thinkpad_acpi.c | 2 +-
18713 drivers/pnp/pnpbios/bioscalls.c | 14 +-
18714 drivers/pnp/pnpbios/core.c | 2 +-
18715 drivers/power/pda_power.c | 7 +-
18716 drivers/power/power_supply.h | 4 +-
18717 drivers/power/power_supply_core.c | 7 +-
18718 drivers/power/power_supply_sysfs.c | 6 +-
18719 drivers/power/reset/at91-reset.c | 9 +-
18720 drivers/powercap/powercap_sys.c | 136 +-
18721 drivers/ptp/ptp_private.h | 2 +-
18722 drivers/ptp/ptp_sysfs.c | 2 +-
18723 drivers/regulator/core.c | 4 +-
18724 drivers/regulator/max8660.c | 6 +-
18725 drivers/regulator/max8973-regulator.c | 16 +-
18726 drivers/regulator/mc13892-regulator.c | 8 +-
18727 drivers/rtc/rtc-armada38x.c | 7 +-
18728 drivers/rtc/rtc-cmos.c | 4 +-
18729 drivers/rtc/rtc-ds1307.c | 2 +-
18730 drivers/rtc/rtc-m48t59.c | 4 +-
18731 drivers/rtc/rtc-test.c | 6 +-
18732 drivers/scsi/be2iscsi/be_main.c | 2 +-
18733 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
18734 drivers/scsi/bfa/bfa_ioc.h | 4 +-
18735 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
18736 drivers/scsi/hosts.c | 4 +-
18737 drivers/scsi/hpsa.c | 38 +-
18738 drivers/scsi/hpsa.h | 2 +-
18739 drivers/scsi/libfc/fc_exch.c | 50 +-
18740 drivers/scsi/libsas/sas_ata.c | 2 +-
18741 drivers/scsi/lpfc/lpfc.h | 8 +-
18742 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
18743 drivers/scsi/lpfc/lpfc_init.c | 6 +-
18744 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
18745 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
18746 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
18747 drivers/scsi/pmcraid.c | 20 +-
18748 drivers/scsi/pmcraid.h | 8 +-
18749 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
18750 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
18751 drivers/scsi/qla2xxx/qla_os.c | 6 +-
18752 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
18753 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
18754 drivers/scsi/scsi.c | 2 +-
18755 drivers/scsi/scsi_lib.c | 8 +-
18756 drivers/scsi/scsi_sysfs.c | 2 +-
18757 drivers/scsi/scsi_transport_fc.c | 8 +-
18758 drivers/scsi/scsi_transport_iscsi.c | 6 +-
18759 drivers/scsi/scsi_transport_srp.c | 6 +-
18760 drivers/scsi/sd.c | 6 +-
18761 drivers/scsi/sg.c | 2 +-
18762 drivers/scsi/sr.c | 21 +-
18763 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
18764 drivers/spi/spi.c | 2 +-
18765 drivers/staging/android/timed_output.c | 6 +-
18766 drivers/staging/comedi/comedi_fops.c | 8 +-
18767 drivers/staging/fbtft/fbtft-core.c | 2 +-
18768 drivers/staging/fbtft/fbtft.h | 2 +-
18769 drivers/staging/gdm724x/gdm_tty.c | 2 +-
18770 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
18771 drivers/staging/iio/adc/ad7280a.c | 4 +-
18772 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
18773 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
18774 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
18775 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
18776 drivers/staging/lustre/lustre/include/obd.h | 2 +-
18777 drivers/staging/octeon/ethernet-rx.c | 20 +-
18778 drivers/staging/octeon/ethernet.c | 8 +-
18779 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
18780 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
18781 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
18782 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
18783 drivers/staging/sm750fb/sm750.c | 14 +-
18784 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
18785 drivers/target/sbp/sbp_target.c | 4 +-
18786 drivers/thermal/cpu_cooling.c | 9 +-
18787 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
18788 drivers/thermal/of-thermal.c | 17 +-
18789 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
18790 drivers/tty/cyclades.c | 6 +-
18791 drivers/tty/hvc/hvc_console.c | 14 +-
18792 drivers/tty/hvc/hvcs.c | 21 +-
18793 drivers/tty/hvc/hvsi.c | 22 +-
18794 drivers/tty/hvc/hvsi_lib.c | 4 +-
18795 drivers/tty/ipwireless/tty.c | 27 +-
18796 drivers/tty/moxa.c | 2 +-
18797 drivers/tty/n_gsm.c | 4 +-
18798 drivers/tty/n_tty.c | 3 +-
18799 drivers/tty/pty.c | 4 +-
18800 drivers/tty/rocket.c | 6 +-
18801 drivers/tty/serial/8250/8250_core.c | 10 +-
18802 drivers/tty/serial/ifx6x60.c | 2 +-
18803 drivers/tty/serial/ioc4_serial.c | 6 +-
18804 drivers/tty/serial/kgdb_nmi.c | 4 +-
18805 drivers/tty/serial/kgdboc.c | 32 +-
18806 drivers/tty/serial/msm_serial.c | 4 +-
18807 drivers/tty/serial/samsung.c | 9 +-
18808 drivers/tty/serial/serial_core.c | 8 +-
18809 drivers/tty/synclink.c | 34 +-
18810 drivers/tty/synclink_gt.c | 28 +-
18811 drivers/tty/synclinkmp.c | 34 +-
18812 drivers/tty/tty_io.c | 2 +-
18813 drivers/tty/tty_ldisc.c | 8 +-
18814 drivers/tty/tty_port.c | 22 +-
18815 drivers/uio/uio.c | 13 +-
18816 drivers/usb/atm/cxacru.c | 2 +-
18817 drivers/usb/atm/usbatm.c | 24 +-
18818 drivers/usb/class/cdc-acm.h | 2 +-
18819 drivers/usb/core/devices.c | 6 +-
18820 drivers/usb/core/devio.c | 12 +-
18821 drivers/usb/core/hcd.c | 4 +-
18822 drivers/usb/core/sysfs.c | 2 +-
18823 drivers/usb/core/usb.c | 2 +-
18824 drivers/usb/early/ehci-dbgp.c | 16 +-
18825 drivers/usb/gadget/function/u_serial.c | 22 +-
18826 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
18827 drivers/usb/host/ehci-hcd.c | 2 +-
18828 drivers/usb/host/ehci-hub.c | 4 +-
18829 drivers/usb/host/ehci-q.c | 4 +-
18830 drivers/usb/host/fotg210-hcd.c | 2 +-
18831 drivers/usb/host/fusbh200-hcd.c | 2 +-
18832 drivers/usb/host/hwa-hc.c | 2 +-
18833 drivers/usb/host/ohci-hcd.c | 2 +-
18834 drivers/usb/host/r8a66597.h | 2 +-
18835 drivers/usb/host/uhci-hcd.c | 2 +-
18836 drivers/usb/host/xhci-pci.c | 2 +-
18837 drivers/usb/host/xhci.c | 2 +-
18838 drivers/usb/misc/appledisplay.c | 4 +-
18839 drivers/usb/serial/console.c | 8 +-
18840 drivers/usb/storage/transport.c | 2 +-
18841 drivers/usb/storage/usb.c | 2 +-
18842 drivers/usb/storage/usb.h | 2 +-
18843 drivers/usb/usbip/vhci.h | 2 +-
18844 drivers/usb/usbip/vhci_hcd.c | 6 +-
18845 drivers/usb/usbip/vhci_rx.c | 2 +-
18846 drivers/usb/wusbcore/wa-hc.h | 4 +-
18847 drivers/usb/wusbcore/wa-xfer.c | 2 +-
18848 drivers/vfio/vfio.c | 2 +-
18849 drivers/vhost/vringh.c | 20 +-
18850 drivers/video/backlight/kb3886_bl.c | 2 +-
18851 drivers/video/console/fbcon.c | 2 +-
18852 drivers/video/fbdev/aty/aty128fb.c | 2 +-
18853 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
18854 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
18855 drivers/video/fbdev/core/fb_defio.c | 6 +-
18856 drivers/video/fbdev/core/fbmem.c | 2 +-
18857 drivers/video/fbdev/hyperv_fb.c | 4 +-
18858 drivers/video/fbdev/i810/i810_accel.c | 1 +
18859 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
18860 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
18861 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
18862 drivers/video/fbdev/omap2/dss/display.c | 8 +-
18863 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
18864 drivers/video/fbdev/smscufx.c | 4 +-
18865 drivers/video/fbdev/udlfb.c | 36 +-
18866 drivers/video/fbdev/uvesafb.c | 52 +-
18867 drivers/video/fbdev/vesafb.c | 58 +-
18868 drivers/video/fbdev/via/via_clock.h | 2 +-
18869 drivers/xen/events/events_base.c | 6 +-
18870 drivers/xen/evtchn.c | 4 +-
18871 fs/Kconfig.binfmt | 2 +-
18872 fs/afs/inode.c | 4 +-
18873 fs/aio.c | 2 +-
18874 fs/autofs4/waitq.c | 2 +-
18875 fs/befs/endian.h | 6 +-
18876 fs/binfmt_aout.c | 23 +-
18877 fs/binfmt_elf.c | 670 +-
18878 fs/binfmt_elf_fdpic.c | 4 +-
18879 fs/block_dev.c | 2 +-
18880 fs/btrfs/ctree.c | 9 +-
18881 fs/btrfs/delayed-inode.c | 9 +-
18882 fs/btrfs/delayed-inode.h | 6 +-
18883 fs/btrfs/file.c | 10 +-
18884 fs/btrfs/inode.c | 14 +-
18885 fs/btrfs/super.c | 2 +-
18886 fs/btrfs/sysfs.c | 2 +-
18887 fs/btrfs/tests/free-space-tests.c | 8 +-
18888 fs/btrfs/tree-log.h | 2 +-
18889 fs/buffer.c | 2 +-
18890 fs/cachefiles/bind.c | 6 +-
18891 fs/cachefiles/daemon.c | 8 +-
18892 fs/cachefiles/internal.h | 12 +-
18893 fs/cachefiles/namei.c | 2 +-
18894 fs/cachefiles/proc.c | 12 +-
18895 fs/ceph/dir.c | 12 +-
18896 fs/ceph/super.c | 4 +-
18897 fs/cifs/cifs_debug.c | 12 +-
18898 fs/cifs/cifsfs.c | 8 +-
18899 fs/cifs/cifsglob.h | 54 +-
18900 fs/cifs/file.c | 10 +-
18901 fs/cifs/misc.c | 4 +-
18902 fs/cifs/smb1ops.c | 80 +-
18903 fs/cifs/smb2ops.c | 84 +-
18904 fs/cifs/smb2pdu.c | 3 +-
18905 fs/coda/cache.c | 10 +-
18906 fs/compat.c | 4 +-
18907 fs/compat_binfmt_elf.c | 2 +
18908 fs/compat_ioctl.c | 12 +-
18909 fs/configfs/dir.c | 10 +-
18910 fs/coredump.c | 16 +-
18911 fs/dcache.c | 51 +-
18912 fs/ecryptfs/inode.c | 2 +-
18913 fs/ecryptfs/miscdev.c | 2 +-
18914 fs/exec.c | 362 +-
18915 fs/ext2/xattr.c | 5 +-
18916 fs/ext4/ext4.h | 20 +-
18917 fs/ext4/mballoc.c | 44 +-
18918 fs/ext4/resize.c | 16 +-
18919 fs/ext4/super.c | 4 +-
18920 fs/ext4/xattr.c | 5 +-
18921 fs/fhandle.c | 3 +-
18922 fs/file.c | 4 +-
18923 fs/fs_struct.c | 8 +-
18924 fs/fscache/cookie.c | 40 +-
18925 fs/fscache/internal.h | 202 +-
18926 fs/fscache/object.c | 26 +-
18927 fs/fscache/operation.c | 38 +-
18928 fs/fscache/page.c | 110 +-
18929 fs/fscache/stats.c | 348 +-
18930 fs/fuse/cuse.c | 10 +-
18931 fs/fuse/dev.c | 4 +-
18932 fs/gfs2/glock.c | 22 +-
18933 fs/gfs2/glops.c | 4 +-
18934 fs/gfs2/quota.c | 6 +-
18935 fs/hugetlbfs/inode.c | 13 +-
18936 fs/inode.c | 4 +-
18937 fs/jffs2/erase.c | 3 +-
18938 fs/jffs2/wbuf.c | 3 +-
18939 fs/jfs/super.c | 2 +-
18940 fs/kernfs/dir.c | 2 +-
18941 fs/kernfs/file.c | 20 +-
18942 fs/libfs.c | 10 +-
18943 fs/lockd/clntproc.c | 4 +-
18944 fs/namei.c | 16 +-
18945 fs/namespace.c | 16 +-
18946 fs/nfs/callback_xdr.c | 2 +-
18947 fs/nfs/inode.c | 6 +-
18948 fs/nfsd/nfs4proc.c | 2 +-
18949 fs/nfsd/nfs4xdr.c | 2 +-
18950 fs/nfsd/nfscache.c | 11 +-
18951 fs/nfsd/vfs.c | 6 +-
18952 fs/nls/nls_base.c | 26 +-
18953 fs/nls/nls_euc-jp.c | 6 +-
18954 fs/nls/nls_koi8-ru.c | 6 +-
18955 fs/notify/fanotify/fanotify_user.c | 4 +-
18956 fs/notify/notification.c | 4 +-
18957 fs/ntfs/dir.c | 2 +-
18958 fs/ntfs/super.c | 6 +-
18959 fs/ocfs2/localalloc.c | 2 +-
18960 fs/ocfs2/ocfs2.h | 10 +-
18961 fs/ocfs2/suballoc.c | 12 +-
18962 fs/ocfs2/super.c | 20 +-
18963 fs/pipe.c | 72 +-
18964 fs/posix_acl.c | 4 +-
18965 fs/proc/array.c | 20 +
18966 fs/proc/base.c | 4 +-
18967 fs/proc/kcore.c | 34 +-
18968 fs/proc/meminfo.c | 2 +-
18969 fs/proc/nommu.c | 2 +-
18970 fs/proc/proc_sysctl.c | 26 +-
18971 fs/proc/task_mmu.c | 39 +-
18972 fs/proc/task_nommu.c | 4 +-
18973 fs/proc/vmcore.c | 16 +-
18974 fs/qnx6/qnx6.h | 4 +-
18975 fs/quota/netlink.c | 4 +-
18976 fs/read_write.c | 2 +-
18977 fs/reiserfs/do_balan.c | 2 +-
18978 fs/reiserfs/procfs.c | 2 +-
18979 fs/reiserfs/reiserfs.h | 4 +-
18980 fs/seq_file.c | 4 +-
18981 fs/splice.c | 43 +-
18982 fs/squashfs/xattr.c | 12 +-
18983 fs/sysv/sysv.h | 2 +-
18984 fs/tracefs/inode.c | 8 +-
18985 fs/udf/misc.c | 2 +-
18986 fs/ufs/swab.h | 4 +-
18987 fs/userfaultfd.c | 2 +-
18988 fs/xattr.c | 21 +
18989 fs/xfs/libxfs/xfs_bmap.c | 2 +-
18990 fs/xfs/xfs_dir2_readdir.c | 7 +-
18991 fs/xfs/xfs_ioctl.c | 2 +-
18992 fs/xfs/xfs_linux.h | 4 +-
18993 include/asm-generic/4level-fixup.h | 2 +
18994 include/asm-generic/atomic-long.h | 156 +-
18995 include/asm-generic/atomic64.h | 12 +
18996 include/asm-generic/bitops/__fls.h | 2 +-
18997 include/asm-generic/bitops/fls.h | 2 +-
18998 include/asm-generic/bitops/fls64.h | 4 +-
18999 include/asm-generic/bug.h | 6 +-
19000 include/asm-generic/cache.h | 4 +-
19001 include/asm-generic/emergency-restart.h | 2 +-
19002 include/asm-generic/kmap_types.h | 4 +-
19003 include/asm-generic/local.h | 13 +
19004 include/asm-generic/pgtable-nopmd.h | 18 +-
19005 include/asm-generic/pgtable-nopud.h | 15 +-
19006 include/asm-generic/pgtable.h | 16 +
19007 include/asm-generic/sections.h | 1 +
19008 include/asm-generic/uaccess.h | 16 +
19009 include/asm-generic/vmlinux.lds.h | 15 +-
19010 include/crypto/algapi.h | 2 +-
19011 include/drm/drmP.h | 16 +-
19012 include/drm/drm_crtc_helper.h | 2 +-
19013 include/drm/drm_mm.h | 2 +-
19014 include/drm/i915_pciids.h | 2 +-
19015 include/drm/intel-gtt.h | 4 +-
19016 include/drm/ttm/ttm_memory.h | 2 +-
19017 include/drm/ttm/ttm_page_alloc.h | 1 +
19018 include/keys/asymmetric-subtype.h | 2 +-
19019 include/linux/atmdev.h | 4 +-
19020 include/linux/atomic.h | 17 +-
19021 include/linux/audit.h | 2 +-
19022 include/linux/average.h | 2 +-
19023 include/linux/binfmts.h | 3 +-
19024 include/linux/bitmap.h | 2 +-
19025 include/linux/bitops.h | 8 +-
19026 include/linux/blkdev.h | 2 +-
19027 include/linux/blktrace_api.h | 2 +-
19028 include/linux/cache.h | 8 +
19029 include/linux/cdrom.h | 1 -
19030 include/linux/cleancache.h | 2 +-
19031 include/linux/clk-provider.h | 1 +
19032 include/linux/compat.h | 6 +-
19033 include/linux/compiler-gcc.h | 28 +-
19034 include/linux/compiler.h | 157 +-
19035 include/linux/configfs.h | 2 +-
19036 include/linux/cpufreq.h | 3 +-
19037 include/linux/cpuidle.h | 5 +-
19038 include/linux/cpumask.h | 14 +-
19039 include/linux/crypto.h | 4 +-
19040 include/linux/ctype.h | 2 +-
19041 include/linux/dcache.h | 4 +-
19042 include/linux/decompress/mm.h | 2 +-
19043 include/linux/devfreq.h | 2 +-
19044 include/linux/device.h | 7 +-
19045 include/linux/dma-mapping.h | 2 +-
19046 include/linux/efi.h | 1 +
19047 include/linux/elf.h | 2 +
19048 include/linux/err.h | 4 +-
19049 include/linux/extcon.h | 2 +-
19050 include/linux/fb.h | 3 +-
19051 include/linux/fdtable.h | 2 +-
19052 include/linux/fs.h | 5 +-
19053 include/linux/fs_struct.h | 2 +-
19054 include/linux/fscache-cache.h | 2 +-
19055 include/linux/fscache.h | 2 +-
19056 include/linux/fsnotify.h | 2 +-
19057 include/linux/genhd.h | 4 +-
19058 include/linux/genl_magic_func.h | 2 +-
19059 include/linux/gfp.h | 12 +-
19060 include/linux/highmem.h | 12 +
19061 include/linux/hwmon-sysfs.h | 6 +-
19062 include/linux/i2c.h | 1 +
19063 include/linux/if_pppox.h | 2 +-
19064 include/linux/init.h | 12 +-
19065 include/linux/init_task.h | 7 +
19066 include/linux/interrupt.h | 6 +-
19067 include/linux/iommu.h | 2 +-
19068 include/linux/ioport.h | 2 +-
19069 include/linux/ipc.h | 2 +-
19070 include/linux/irq.h | 5 +-
19071 include/linux/irqdesc.h | 2 +-
19072 include/linux/irqdomain.h | 3 +
19073 include/linux/jiffies.h | 16 +-
19074 include/linux/key-type.h | 2 +-
19075 include/linux/kgdb.h | 6 +-
19076 include/linux/kmemleak.h | 4 +-
19077 include/linux/kobject.h | 3 +-
19078 include/linux/kobject_ns.h | 2 +-
19079 include/linux/kref.h | 2 +-
19080 include/linux/libata.h | 2 +-
19081 include/linux/linkage.h | 1 +
19082 include/linux/list.h | 15 +
19083 include/linux/lockref.h | 26 +-
19084 include/linux/math64.h | 10 +-
19085 include/linux/mempolicy.h | 7 +
19086 include/linux/mm.h | 102 +-
19087 include/linux/mm_types.h | 20 +
19088 include/linux/mmiotrace.h | 4 +-
19089 include/linux/mmzone.h | 2 +-
19090 include/linux/mod_devicetable.h | 4 +-
19091 include/linux/module.h | 69 +-
19092 include/linux/moduleloader.h | 16 +
19093 include/linux/moduleparam.h | 4 +-
19094 include/linux/net.h | 2 +-
19095 include/linux/netdevice.h | 7 +-
19096 include/linux/netfilter.h | 2 +-
19097 include/linux/netfilter/nfnetlink.h | 2 +-
19098 include/linux/nls.h | 4 +-
19099 include/linux/notifier.h | 3 +-
19100 include/linux/oprofile.h | 4 +-
19101 include/linux/padata.h | 2 +-
19102 include/linux/pci_hotplug.h | 3 +-
19103 include/linux/percpu.h | 2 +-
19104 include/linux/perf_event.h | 12 +-
19105 include/linux/pipe_fs_i.h | 8 +-
19106 include/linux/pm.h | 1 +
19107 include/linux/pm_domain.h | 4 +-
19108 include/linux/pm_runtime.h | 2 +-
19109 include/linux/pnp.h | 2 +-
19110 include/linux/poison.h | 4 +-
19111 include/linux/power/smartreflex.h | 2 +-
19112 include/linux/ppp-comp.h | 2 +-
19113 include/linux/preempt.h | 21 +
19114 include/linux/proc_ns.h | 2 +-
19115 include/linux/psci.h | 2 +-
19116 include/linux/quota.h | 2 +-
19117 include/linux/random.h | 19 +-
19118 include/linux/rculist.h | 16 +
19119 include/linux/reboot.h | 14 +-
19120 include/linux/regset.h | 3 +-
19121 include/linux/relay.h | 2 +-
19122 include/linux/rio.h | 2 +-
19123 include/linux/rmap.h | 4 +-
19124 include/linux/sched.h | 72 +-
19125 include/linux/sched/sysctl.h | 1 +
19126 include/linux/semaphore.h | 2 +-
19127 include/linux/seq_file.h | 1 +
19128 include/linux/signal.h | 2 +-
19129 include/linux/skbuff.h | 12 +-
19130 include/linux/slab.h | 47 +-
19131 include/linux/slab_def.h | 14 +-
19132 include/linux/slub_def.h | 2 +-
19133 include/linux/smp.h | 2 +
19134 include/linux/sock_diag.h | 2 +-
19135 include/linux/sonet.h | 2 +-
19136 include/linux/sunrpc/addr.h | 8 +-
19137 include/linux/sunrpc/clnt.h | 2 +-
19138 include/linux/sunrpc/svc.h | 2 +-
19139 include/linux/sunrpc/svc_rdma.h | 18 +-
19140 include/linux/sunrpc/svcauth.h | 2 +-
19141 include/linux/swapops.h | 10 +-
19142 include/linux/swiotlb.h | 3 +-
19143 include/linux/syscalls.h | 21 +-
19144 include/linux/syscore_ops.h | 2 +-
19145 include/linux/sysctl.h | 3 +-
19146 include/linux/sysfs.h | 9 +-
19147 include/linux/sysrq.h | 3 +-
19148 include/linux/tcp.h | 14 +-
19149 include/linux/thread_info.h | 7 +
19150 include/linux/tty.h | 4 +-
19151 include/linux/tty_driver.h | 2 +-
19152 include/linux/tty_ldisc.h | 2 +-
19153 include/linux/types.h | 16 +
19154 include/linux/uaccess.h | 6 +-
19155 include/linux/uio_driver.h | 2 +-
19156 include/linux/unaligned/access_ok.h | 24 +-
19157 include/linux/usb.h | 12 +-
19158 include/linux/usb/hcd.h | 1 +
19159 include/linux/usb/renesas_usbhs.h | 2 +-
19160 include/linux/vermagic.h | 21 +-
19161 include/linux/vga_switcheroo.h | 8 +-
19162 include/linux/vmalloc.h | 7 +-
19163 include/linux/vmstat.h | 24 +-
19164 include/linux/xattr.h | 5 +-
19165 include/linux/zlib.h | 3 +-
19166 include/media/v4l2-dev.h | 2 +-
19167 include/media/v4l2-device.h | 2 +-
19168 include/net/9p/transport.h | 2 +-
19169 include/net/bluetooth/l2cap.h | 2 +-
19170 include/net/bonding.h | 2 +-
19171 include/net/caif/cfctrl.h | 6 +-
19172 include/net/flow.h | 2 +-
19173 include/net/genetlink.h | 2 +-
19174 include/net/gro_cells.h | 2 +-
19175 include/net/inet_connection_sock.h | 2 +-
19176 include/net/inet_sock.h | 2 +-
19177 include/net/inetpeer.h | 2 +-
19178 include/net/ip_fib.h | 2 +-
19179 include/net/ip_vs.h | 8 +-
19180 include/net/ipv6.h | 2 +-
19181 include/net/irda/ircomm_tty.h | 1 +
19182 include/net/iucv/af_iucv.h | 2 +-
19183 include/net/llc_c_ac.h | 2 +-
19184 include/net/llc_c_ev.h | 4 +-
19185 include/net/llc_c_st.h | 2 +-
19186 include/net/llc_s_ac.h | 2 +-
19187 include/net/llc_s_st.h | 2 +-
19188 include/net/mac80211.h | 4 +-
19189 include/net/neighbour.h | 2 +-
19190 include/net/net_namespace.h | 18 +-
19191 include/net/netlink.h | 2 +-
19192 include/net/netns/conntrack.h | 6 +-
19193 include/net/netns/ipv4.h | 4 +-
19194 include/net/netns/ipv6.h | 4 +-
19195 include/net/netns/xfrm.h | 2 +-
19196 include/net/ping.h | 2 +-
19197 include/net/protocol.h | 4 +-
19198 include/net/rtnetlink.h | 2 +-
19199 include/net/sctp/checksum.h | 4 +-
19200 include/net/sctp/sm.h | 4 +-
19201 include/net/sctp/structs.h | 2 +-
19202 include/net/sock.h | 12 +-
19203 include/net/tcp.h | 8 +-
19204 include/net/xfrm.h | 13 +-
19205 include/rdma/iw_cm.h | 2 +-
19206 include/scsi/libfc.h | 3 +-
19207 include/scsi/scsi_device.h | 6 +-
19208 include/scsi/scsi_driver.h | 2 +-
19209 include/scsi/scsi_transport_fc.h | 3 +-
19210 include/scsi/sg.h | 2 +-
19211 include/sound/compress_driver.h | 2 +-
19212 include/sound/soc.h | 4 +-
19213 include/trace/events/irq.h | 4 +-
19214 include/uapi/linux/a.out.h | 8 +
19215 include/uapi/linux/bcache.h | 5 +-
19216 include/uapi/linux/byteorder/little_endian.h | 28 +-
19217 include/uapi/linux/connector.h | 2 +-
19218 include/uapi/linux/elf.h | 28 +
19219 include/uapi/linux/screen_info.h | 3 +-
19220 include/uapi/linux/swab.h | 6 +-
19221 include/uapi/linux/xattr.h | 4 +
19222 include/video/udlfb.h | 8 +-
19223 include/video/uvesafb.h | 1 +
19224 init/Kconfig | 2 +-
19225 init/Makefile | 3 +
19226 init/do_mounts.c | 14 +-
19227 init/do_mounts.h | 8 +-
19228 init/do_mounts_initrd.c | 30 +-
19229 init/do_mounts_md.c | 6 +-
19230 init/init_task.c | 4 +
19231 init/initramfs.c | 38 +-
19232 init/main.c | 30 +-
19233 ipc/compat.c | 4 +-
19234 ipc/ipc_sysctl.c | 8 +-
19235 ipc/mq_sysctl.c | 4 +-
19236 ipc/sem.c | 4 +-
19237 ipc/shm.c | 6 +
19238 kernel/audit.c | 8 +-
19239 kernel/auditsc.c | 4 +-
19240 kernel/bpf/core.c | 7 +-
19241 kernel/capability.c | 3 +
19242 kernel/compat.c | 38 +-
19243 kernel/debug/debug_core.c | 16 +-
19244 kernel/debug/kdb/kdb_main.c | 4 +-
19245 kernel/events/core.c | 26 +-
19246 kernel/events/internal.h | 10 +-
19247 kernel/events/uprobes.c | 2 +-
19248 kernel/exit.c | 2 +-
19249 kernel/fork.c | 167 +-
19250 kernel/futex.c | 11 +-
19251 kernel/futex_compat.c | 2 +-
19252 kernel/gcov/base.c | 7 +-
19253 kernel/irq/manage.c | 2 +-
19254 kernel/irq/msi.c | 19 +-
19255 kernel/irq/spurious.c | 2 +-
19256 kernel/jump_label.c | 5 +
19257 kernel/kallsyms.c | 37 +-
19258 kernel/kexec.c | 3 +-
19259 kernel/kmod.c | 8 +-
19260 kernel/kprobes.c | 4 +-
19261 kernel/ksysfs.c | 2 +-
19262 kernel/locking/lockdep.c | 7 +-
19263 kernel/locking/mutex-debug.c | 12 +-
19264 kernel/locking/mutex-debug.h | 4 +-
19265 kernel/locking/mutex.c | 6 +-
19266 kernel/module.c | 422 +-
19267 kernel/notifier.c | 17 +-
19268 kernel/padata.c | 4 +-
19269 kernel/panic.c | 5 +-
19270 kernel/pid.c | 2 +-
19271 kernel/pid_namespace.c | 2 +-
19272 kernel/power/process.c | 12 +-
19273 kernel/profile.c | 14 +-
19274 kernel/ptrace.c | 8 +-
19275 kernel/rcu/rcutorture.c | 60 +-
19276 kernel/rcu/tiny.c | 4 +-
19277 kernel/rcu/tree.c | 44 +-
19278 kernel/rcu/tree.h | 14 +-
19279 kernel/rcu/tree_plugin.h | 14 +-
19280 kernel/rcu/tree_trace.c | 12 +-
19281 kernel/sched/auto_group.c | 4 +-
19282 kernel/sched/core.c | 45 +-
19283 kernel/sched/fair.c | 2 +-
19284 kernel/sched/sched.h | 2 +-
19285 kernel/signal.c | 12 +-
19286 kernel/smpboot.c | 4 +-
19287 kernel/softirq.c | 12 +-
19288 kernel/sys.c | 10 +-
19289 kernel/sysctl.c | 34 +-
19290 kernel/time/alarmtimer.c | 2 +-
19291 kernel/time/posix-cpu-timers.c | 4 +-
19292 kernel/time/posix-timers.c | 24 +-
19293 kernel/time/timer.c | 2 +-
19294 kernel/time/timer_stats.c | 10 +-
19295 kernel/trace/blktrace.c | 6 +-
19296 kernel/trace/ftrace.c | 15 +-
19297 kernel/trace/ring_buffer.c | 96 +-
19298 kernel/trace/trace.c | 2 +-
19299 kernel/trace/trace.h | 2 +-
19300 kernel/trace/trace_clock.c | 4 +-
19301 kernel/trace/trace_events.c | 1 -
19302 kernel/trace/trace_functions_graph.c | 4 +-
19303 kernel/trace/trace_mmiotrace.c | 8 +-
19304 kernel/trace/trace_output.c | 10 +-
19305 kernel/trace/trace_seq.c | 2 +-
19306 kernel/trace/trace_stack.c | 2 +-
19307 kernel/user_namespace.c | 2 +-
19308 kernel/utsname_sysctl.c | 2 +-
19309 kernel/watchdog.c | 2 +-
19310 kernel/workqueue.c | 2 +-
19311 lib/Kconfig.debug | 8 +-
19312 lib/Makefile | 2 +-
19313 lib/bitmap.c | 8 +-
19314 lib/bug.c | 2 +
19315 lib/debugobjects.c | 2 +-
19316 lib/decompress_bunzip2.c | 3 +-
19317 lib/decompress_unlzma.c | 4 +-
19318 lib/div64.c | 4 +-
19319 lib/dma-debug.c | 4 +-
19320 lib/inflate.c | 2 +-
19321 lib/ioremap.c | 4 +-
19322 lib/kobject.c | 4 +-
19323 lib/list_debug.c | 126 +-
19324 lib/lockref.c | 44 +-
19325 lib/percpu-refcount.c | 2 +-
19326 lib/radix-tree.c | 2 +-
19327 lib/random32.c | 2 +-
19328 lib/show_mem.c | 2 +-
19329 lib/strncpy_from_user.c | 2 +-
19330 lib/strnlen_user.c | 2 +-
19331 lib/swiotlb.c | 2 +-
19332 lib/usercopy.c | 6 +
19333 lib/vsprintf.c | 12 +-
19334 mm/Kconfig | 6 +-
19335 mm/backing-dev.c | 4 +-
19336 mm/debug.c | 3 +
19337 mm/filemap.c | 2 +-
19338 mm/gup.c | 13 +-
19339 mm/highmem.c | 6 +-
19340 mm/hugetlb.c | 70 +-
19341 mm/internal.h | 1 +
19342 mm/maccess.c | 4 +-
19343 mm/madvise.c | 37 +
19344 mm/memory-failure.c | 6 +-
19345 mm/memory.c | 424 +-
19346 mm/mempolicy.c | 25 +
19347 mm/mlock.c | 15 +-
19348 mm/mm_init.c | 2 +-
19349 mm/mmap.c | 582 +-
19350 mm/mprotect.c | 137 +-
19351 mm/mremap.c | 39 +-
19352 mm/nommu.c | 21 +-
19353 mm/page-writeback.c | 2 +-
19354 mm/page_alloc.c | 49 +-
19355 mm/percpu.c | 2 +-
19356 mm/process_vm_access.c | 14 +-
19357 mm/rmap.c | 45 +-
19358 mm/shmem.c | 19 +-
19359 mm/slab.c | 109 +-
19360 mm/slab.h | 22 +-
19361 mm/slab_common.c | 86 +-
19362 mm/slob.c | 218 +-
19363 mm/slub.c | 102 +-
19364 mm/sparse-vmemmap.c | 4 +-
19365 mm/sparse.c | 2 +-
19366 mm/swap.c | 2 +
19367 mm/swapfile.c | 12 +-
19368 mm/util.c | 6 +
19369 mm/vmalloc.c | 114 +-
19370 mm/vmstat.c | 12 +-
19371 net/8021q/vlan.c | 5 +-
19372 net/8021q/vlan_netlink.c | 2 +-
19373 net/9p/mod.c | 4 +-
19374 net/9p/trans_fd.c | 2 +-
19375 net/atm/atm_misc.c | 8 +-
19376 net/atm/lec.h | 2 +-
19377 net/atm/proc.c | 6 +-
19378 net/atm/resources.c | 4 +-
19379 net/ax25/sysctl_net_ax25.c | 2 +-
19380 net/batman-adv/bat_iv_ogm.c | 8 +-
19381 net/batman-adv/fragmentation.c | 2 +-
19382 net/batman-adv/soft-interface.c | 8 +-
19383 net/batman-adv/types.h | 6 +-
19384 net/bluetooth/hci_sock.c | 2 +-
19385 net/bluetooth/l2cap_core.c | 6 +-
19386 net/bluetooth/l2cap_sock.c | 12 +-
19387 net/bluetooth/rfcomm/sock.c | 4 +-
19388 net/bluetooth/rfcomm/tty.c | 4 +-
19389 net/bridge/br_netlink.c | 2 +-
19390 net/bridge/netfilter/ebtables.c | 6 +-
19391 net/caif/cfctrl.c | 11 +-
19392 net/caif/chnl_net.c | 2 +-
19393 net/can/af_can.c | 2 +-
19394 net/can/gw.c | 6 +-
19395 net/ceph/messenger.c | 4 +-
19396 net/compat.c | 24 +-
19397 net/core/datagram.c | 2 +-
19398 net/core/dev.c | 16 +-
19399 net/core/filter.c | 2 +-
19400 net/core/flow.c | 6 +-
19401 net/core/neighbour.c | 4 +-
19402 net/core/net-sysfs.c | 2 +-
19403 net/core/net_namespace.c | 8 +-
19404 net/core/netpoll.c | 4 +-
19405 net/core/rtnetlink.c | 15 +-
19406 net/core/scm.c | 14 +-
19407 net/core/skbuff.c | 8 +-
19408 net/core/sock.c | 28 +-
19409 net/core/sock_diag.c | 15 +-
19410 net/core/sysctl_net_core.c | 22 +-
19411 net/decnet/af_decnet.c | 1 +
19412 net/decnet/sysctl_net_decnet.c | 4 +-
19413 net/dsa/dsa.c | 2 +-
19414 net/hsr/hsr_netlink.c | 2 +-
19415 net/ieee802154/6lowpan/core.c | 2 +-
19416 net/ieee802154/6lowpan/reassembly.c | 14 +-
19417 net/ipv4/af_inet.c | 2 +-
19418 net/ipv4/devinet.c | 18 +-
19419 net/ipv4/fib_frontend.c | 6 +-
19420 net/ipv4/fib_semantics.c | 2 +-
19421 net/ipv4/inet_connection_sock.c | 4 +-
19422 net/ipv4/inet_timewait_sock.c | 2 +-
19423 net/ipv4/inetpeer.c | 2 +-
19424 net/ipv4/ip_fragment.c | 15 +-
19425 net/ipv4/ip_gre.c | 6 +-
19426 net/ipv4/ip_sockglue.c | 2 +-
19427 net/ipv4/ip_vti.c | 4 +-
19428 net/ipv4/ipconfig.c | 6 +-
19429 net/ipv4/ipip.c | 4 +-
19430 net/ipv4/netfilter/arp_tables.c | 12 +-
19431 net/ipv4/netfilter/ip_tables.c | 12 +-
19432 net/ipv4/ping.c | 14 +-
19433 net/ipv4/raw.c | 14 +-
19434 net/ipv4/route.c | 32 +-
19435 net/ipv4/sysctl_net_ipv4.c | 22 +-
19436 net/ipv4/tcp_input.c | 6 +-
19437 net/ipv4/tcp_probe.c | 2 +-
19438 net/ipv4/udp.c | 10 +-
19439 net/ipv4/xfrm4_policy.c | 18 +-
19440 net/ipv6/addrconf.c | 18 +-
19441 net/ipv6/af_inet6.c | 2 +-
19442 net/ipv6/datagram.c | 2 +-
19443 net/ipv6/icmp.c | 2 +-
19444 net/ipv6/ip6_fib.c | 4 +-
19445 net/ipv6/ip6_gre.c | 10 +-
19446 net/ipv6/ip6_tunnel.c | 4 +-
19447 net/ipv6/ip6_vti.c | 4 +-
19448 net/ipv6/ipv6_sockglue.c | 2 +-
19449 net/ipv6/netfilter/ip6_tables.c | 12 +-
19450 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
19451 net/ipv6/ping.c | 33 +-
19452 net/ipv6/raw.c | 17 +-
19453 net/ipv6/reassembly.c | 13 +-
19454 net/ipv6/route.c | 2 +-
19455 net/ipv6/sit.c | 4 +-
19456 net/ipv6/sysctl_net_ipv6.c | 2 +-
19457 net/ipv6/udp.c | 6 +-
19458 net/ipv6/xfrm6_policy.c | 17 +-
19459 net/irda/ircomm/ircomm_tty.c | 18 +-
19460 net/iucv/af_iucv.c | 4 +-
19461 net/iucv/iucv.c | 2 +-
19462 net/key/af_key.c | 4 +-
19463 net/l2tp/l2tp_eth.c | 38 +-
19464 net/l2tp/l2tp_ip.c | 2 +-
19465 net/l2tp/l2tp_ip6.c | 2 +-
19466 net/mac80211/cfg.c | 8 +-
19467 net/mac80211/ieee80211_i.h | 3 +-
19468 net/mac80211/iface.c | 20 +-
19469 net/mac80211/main.c | 2 +-
19470 net/mac80211/pm.c | 4 +-
19471 net/mac80211/rate.c | 2 +-
19472 net/mac80211/sta_info.c | 2 +-
19473 net/mac80211/util.c | 8 +-
19474 net/mpls/af_mpls.c | 6 +-
19475 net/netfilter/ipset/ip_set_core.c | 2 +-
19476 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
19477 net/netfilter/ipvs/ip_vs_core.c | 4 +-
19478 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
19479 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
19480 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
19481 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
19482 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
19483 net/netfilter/nf_conntrack_acct.c | 2 +-
19484 net/netfilter/nf_conntrack_ecache.c | 2 +-
19485 net/netfilter/nf_conntrack_helper.c | 2 +-
19486 net/netfilter/nf_conntrack_proto.c | 2 +-
19487 net/netfilter/nf_conntrack_standalone.c | 2 +-
19488 net/netfilter/nf_conntrack_timestamp.c | 2 +-
19489 net/netfilter/nf_log.c | 10 +-
19490 net/netfilter/nf_sockopt.c | 4 +-
19491 net/netfilter/nfnetlink_log.c | 4 +-
19492 net/netfilter/nft_compat.c | 9 +-
19493 net/netfilter/xt_statistic.c | 8 +-
19494 net/netlink/af_netlink.c | 4 +-
19495 net/openvswitch/vport-internal_dev.c | 2 +-
19496 net/packet/af_packet.c | 8 +-
19497 net/phonet/pep.c | 6 +-
19498 net/phonet/socket.c | 2 +-
19499 net/phonet/sysctl.c | 2 +-
19500 net/rds/cong.c | 6 +-
19501 net/rds/ib.h | 2 +-
19502 net/rds/ib_cm.c | 2 +-
19503 net/rds/ib_recv.c | 4 +-
19504 net/rds/iw.h | 2 +-
19505 net/rds/iw_cm.c | 2 +-
19506 net/rds/iw_recv.c | 4 +-
19507 net/rds/rds.h | 2 +-
19508 net/rds/tcp.c | 2 +-
19509 net/rds/tcp_send.c | 2 +-
19510 net/rxrpc/af_rxrpc.c | 2 +-
19511 net/rxrpc/ar-ack.c | 14 +-
19512 net/rxrpc/ar-call.c | 2 +-
19513 net/rxrpc/ar-connection.c | 2 +-
19514 net/rxrpc/ar-connevent.c | 2 +-
19515 net/rxrpc/ar-input.c | 4 +-
19516 net/rxrpc/ar-internal.h | 8 +-
19517 net/rxrpc/ar-local.c | 2 +-
19518 net/rxrpc/ar-output.c | 4 +-
19519 net/rxrpc/ar-peer.c | 2 +-
19520 net/rxrpc/ar-proc.c | 4 +-
19521 net/rxrpc/ar-transport.c | 2 +-
19522 net/rxrpc/rxkad.c | 4 +-
19523 net/sched/sch_generic.c | 4 +-
19524 net/sctp/ipv6.c | 6 +-
19525 net/sctp/protocol.c | 10 +-
19526 net/sctp/sm_sideeffect.c | 2 +-
19527 net/sctp/socket.c | 21 +-
19528 net/sctp/sysctl.c | 10 +-
19529 net/socket.c | 18 +-
19530 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
19531 net/sunrpc/clnt.c | 4 +-
19532 net/sunrpc/sched.c | 4 +-
19533 net/sunrpc/svc.c | 4 +-
19534 net/sunrpc/svcauth_unix.c | 2 +-
19535 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
19536 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
19537 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
19538 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
19539 net/tipc/netlink_compat.c | 12 +-
19540 net/tipc/subscr.c | 2 +-
19541 net/unix/af_unix.c | 7 +-
19542 net/unix/sysctl_net_unix.c | 2 +-
19543 net/wireless/wext-core.c | 19 +-
19544 net/xfrm/xfrm_policy.c | 16 +-
19545 net/xfrm/xfrm_state.c | 33 +-
19546 net/xfrm/xfrm_sysctl.c | 2 +-
19547 scripts/Kbuild.include | 2 +-
19548 scripts/Makefile.build | 2 +-
19549 scripts/Makefile.clean | 3 +-
19550 scripts/Makefile.host | 69 +-
19551 scripts/basic/fixdep.c | 12 +-
19552 scripts/dtc/checks.c | 14 +-
19553 scripts/dtc/data.c | 6 +-
19554 scripts/dtc/flattree.c | 8 +-
19555 scripts/dtc/livetree.c | 4 +-
19556 scripts/gcc-plugin.sh | 51 +
19557 scripts/headers_install.sh | 1 +
19558 scripts/kallsyms.c | 4 +-
19559 scripts/kconfig/lkc.h | 5 +-
19560 scripts/kconfig/menu.c | 2 +-
19561 scripts/kconfig/symbol.c | 6 +-
19562 scripts/link-vmlinux.sh | 2 +-
19563 scripts/mod/file2alias.c | 14 +-
19564 scripts/mod/modpost.c | 25 +-
19565 scripts/mod/modpost.h | 6 +-
19566 scripts/mod/sumversion.c | 2 +-
19567 scripts/module-common.lds | 4 +
19568 scripts/package/builddeb | 1 +
19569 scripts/pnmtologo.c | 6 +-
19570 scripts/sortextable.h | 6 +-
19571 scripts/tags.sh | 2 +-
19572 security/Kconfig | 692 +-
19573 security/integrity/ima/ima.h | 4 +-
19574 security/integrity/ima/ima_api.c | 2 +-
19575 security/integrity/ima/ima_fs.c | 4 +-
19576 security/integrity/ima/ima_queue.c | 2 +-
19577 security/keys/key.c | 18 +-
19578 security/selinux/avc.c | 6 +-
19579 security/selinux/include/xfrm.h | 2 +-
19580 security/yama/yama_lsm.c | 2 +-
19581 sound/aoa/codecs/onyx.c | 7 +-
19582 sound/aoa/codecs/onyx.h | 1 +
19583 sound/core/oss/pcm_oss.c | 18 +-
19584 sound/core/pcm_compat.c | 2 +-
19585 sound/core/pcm_native.c | 4 +-
19586 sound/core/sound.c | 2 +-
19587 sound/drivers/mts64.c | 14 +-
19588 sound/drivers/opl4/opl4_lib.c | 2 +-
19589 sound/drivers/portman2x4.c | 3 +-
19590 sound/firewire/amdtp.c | 4 +-
19591 sound/firewire/amdtp.h | 4 +-
19592 sound/firewire/isight.c | 10 +-
19593 sound/firewire/scs1x.c | 8 +-
19594 sound/oss/sb_audio.c | 2 +-
19595 sound/oss/swarm_cs4297a.c | 6 +-
19596 sound/pci/hda/hda_codec.c | 2 +-
19597 sound/pci/ymfpci/ymfpci.h | 2 +-
19598 sound/pci/ymfpci/ymfpci_main.c | 12 +-
19599 sound/soc/codecs/sti-sas.c | 10 +-
19600 sound/soc/soc-ac97.c | 6 +-
19601 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
19602 tools/gcc/Makefile | 42 +
19603 tools/gcc/checker_plugin.c | 150 +
19604 tools/gcc/colorize_plugin.c | 215 +
19605 tools/gcc/constify_plugin.c | 571 +
19606 tools/gcc/gcc-common.h | 812 +
19607 tools/gcc/initify_plugin.c | 552 +
19608 tools/gcc/kallocstat_plugin.c | 188 +
19609 tools/gcc/kernexec_plugin.c | 549 +
19610 tools/gcc/latent_entropy_plugin.c | 470 +
19611 tools/gcc/size_overflow_plugin/.gitignore | 2 +
19612 tools/gcc/size_overflow_plugin/Makefile | 28 +
19613 .../disable_size_overflow_hash.data |12422 ++++++++++++
19614 .../generate_size_overflow_hash.sh | 103 +
19615 .../insert_size_overflow_asm.c | 416 +
19616 .../size_overflow_plugin/intentional_overflow.c | 1010 +
19617 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
19618 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
19619 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
19620 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
19621 .../size_overflow_hash_aux.data | 92 +
19622 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
19623 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
19624 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
19625 .../size_overflow_plugin_hash.c | 352 +
19626 .../size_overflow_plugin/size_overflow_transform.c | 749 +
19627 .../size_overflow_transform_core.c | 1010 +
19628 tools/gcc/stackleak_plugin.c | 436 +
19629 tools/gcc/structleak_plugin.c | 287 +
19630 tools/include/linux/compiler.h | 8 +
19631 tools/lib/api/Makefile | 2 +-
19632 tools/perf/util/include/asm/alternative-asm.h | 3 +
19633 tools/virtio/linux/uaccess.h | 2 +-
19634 virt/kvm/kvm_main.c | 42 +-
19635 1944 files changed, 66925 insertions(+), 8949 deletions(-)