1 commit bd893a75ab49f6ea5a216eb334471507337118ba
3 Author: Brad Spengler <spender@grsecurity.net>
4 Date: Sat Apr 2 11:54:20 2016 -0400
6 Merge branch 'pax-test' into grsec-test
8 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
9 Author: Brad Spengler <spender@grsecurity.net>
10 Date: Sat Apr 2 11:53:53 2016 -0400
12 Update to pax-linux-4.4.6-test13.patch:
13 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
14 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
16 arch/mips/include/asm/atomic.h | 4 ----
17 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
18 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
19 3 files changed, 1 insertion(+), 5 deletions(-)
21 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
22 Merge: 3335266 3abdad0
23 Author: Brad Spengler <spender@grsecurity.net>
24 Date: Sat Apr 2 11:19:17 2016 -0400
26 Merge branch 'pax-test' into grsec-test
28 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
29 Author: Brad Spengler <spender@grsecurity.net>
30 Date: Sat Apr 2 11:12:56 2016 -0400
32 Update to pax-linux-4.4.6-test12.patch:
33 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
34 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
35 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
36 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
37 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
38 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
39 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
40 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
41 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
42 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
43 - fixed a gratuitous userland dereference in the amd64 stack walker
44 - added latent entropy gathering to a few more functions
45 - constified a few smp_hotplug_thread instances
47 arch/x86/entry/vdso/Makefile | 1 +
48 arch/x86/include/asm/cpufeature.h | 1 -
49 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
50 arch/x86/kernel/head_32.S | 6 +++---
51 arch/x86/mm/fault.c | 2 +-
52 drivers/iommu/arm-smmu.c | 2 +-
53 drivers/net/ppp/pptp.c | 1 +
54 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
55 fs/nfs/internal.h | 5 +++--
56 fs/proc/kcore.c | 2 +-
57 kernel/module.c | 6 +++---
58 kernel/rcu/tree.c | 2 +-
59 kernel/softirq.c | 2 +-
60 kernel/stop_machine.c | 2 +-
61 net/ipv6/xfrm6_mode_transport.c | 2 +-
62 net/sched/sch_tbf.c | 9 ++++++---
63 scripts/Makefile.gcc-plugins | 13 +++----------
64 scripts/Makefile.host | 3 +--
65 .../disable_size_overflow_hash.data | 4 +++-
66 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
67 20 files changed, 40 insertions(+), 48 deletions(-)
69 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
70 Author: Mika Penttilä <mika.penttila@nextfour.com>
71 Date: Mon Feb 22 17:56:52 2016 +0100
73 ARM: 8544/1: set_memory_xx fixes
75 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
77 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
78 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
80 arch/arm/mm/pageattr.c | 3 +++
81 1 file changed, 3 insertions(+)
83 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
84 Author: Josh Boyer <jwboyer@fedoraproject.org>
85 Date: Mon Mar 14 10:42:38 2016 -0400
87 USB: iowarrior: fix oops with malicious USB descriptors
89 The iowarrior driver expects at least one valid endpoint. If given
90 malicious descriptors that specify 0 for the number of endpoints,
91 it will crash in the probe function. Ensure there is at least
92 one endpoint on the interface before using it.
94 The full report of this issue can be found here:
95 http://seclists.org/bugtraq/2016/Mar/87
97 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
98 Cc: stable <stable@vger.kernel.org>
99 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
100 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
102 drivers/usb/misc/iowarrior.c | 6 ++++++
103 1 file changed, 6 insertions(+)
105 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
106 Author: Oliver Neukum <oneukum@suse.com>
107 Date: Tue Mar 15 10:14:04 2016 +0100
109 USB: cdc-acm: more sanity checking
111 An attack has become available which pretends to be a quirky
112 device circumventing normal sanity checks and crashes the kernel
113 by an insufficient number of interfaces. This patch adds a check
114 to the code path for quirky devices.
116 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
117 CC: stable@vger.kernel.org
118 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
120 drivers/usb/class/cdc-acm.c | 3 +++
121 1 file changed, 3 insertions(+)
123 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
124 Author: Oliver Neukum <oneukum@suse.com>
125 Date: Wed Mar 16 13:26:17 2016 +0100
127 USB: usb_driver_claim_interface: add sanity checking
129 Attacks that trick drivers into passing a NULL pointer
130 to usb_driver_claim_interface() using forged descriptors are
131 known. This thwarts them by sanity checking.
133 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
134 CC: stable@vger.kernel.org
135 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
137 drivers/usb/core/driver.c | 6 +++++-
138 1 file changed, 5 insertions(+), 1 deletion(-)
140 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
141 Author: Paolo Bonzini <pbonzini@redhat.com>
142 Date: Mon Mar 21 10:15:25 2016 +0100
144 KVM: fix spin_lock_init order on x86
146 Moving the initialization earlier is needed in 4.6 because
147 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
150 [ 284.440294] INFO: trying to register non-static key.
151 [ 284.445259] the code is fine but needs lockdep annotation.
152 [ 284.450736] turning off the locking correctness validator.
154 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
155 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
156 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
157 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
158 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
159 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
160 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
161 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
163 However, it also helps fixing a preexisting problem, which is why this
164 patch is also good for stable kernels: kvm_create_vm was incrementing
165 current->mm->mm_count but not decrementing it at the out_err label (in
166 case kvm_init_mmu_notifier failed). The new initialization order makes
167 it possible to add the required mmdrop without adding a new error label.
169 Cc: stable@vger.kernel.org
170 Reported-by: Borislav Petkov <bp@alien8.de>
171 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
173 virt/kvm/kvm_main.c | 21 +++++++++++----------
174 1 file changed, 11 insertions(+), 10 deletions(-)
176 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
177 Author: Paolo Bonzini <pbonzini@redhat.com>
178 Date: Fri Mar 18 16:53:42 2016 +0100
180 KVM: VMX: avoid guest hang on invalid invvpid instruction
182 A guest executing an invalid invvpid instruction would hang
183 because the instruction pointer was not updated.
185 Reported-by: jmontleo@redhat.com
186 Tested-by: jmontleo@redhat.com
187 Cc: stable@vger.kernel.org
188 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
189 Reviewed-by: David Matlack <dmatlack@google.com>
190 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
192 arch/x86/kvm/vmx.c | 1 +
193 1 file changed, 1 insertion(+)
195 commit 602caaece277e5e21ae43771398bbf7778061beb
196 Author: Paolo Bonzini <pbonzini@redhat.com>
197 Date: Fri Mar 18 16:53:29 2016 +0100
199 KVM: VMX: avoid guest hang on invalid invept instruction
201 A guest executing an invalid invept instruction would hang
202 because the instruction pointer was not updated.
204 Cc: stable@vger.kernel.org
205 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
206 Reviewed-by: David Matlack <dmatlack@google.com>
207 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
209 arch/x86/kvm/vmx.c | 1 +
210 1 file changed, 1 insertion(+)
212 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
213 Author: Jann Horn <jann@thejh.net>
214 Date: Tue Mar 22 14:25:36 2016 -0700
216 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
218 This commit fixes the following security hole affecting systems where
219 all of the following conditions are fulfilled:
221 - The fs.suid_dumpable sysctl is set to 2.
222 - The kernel.core_pattern sysctl's value starts with "/". (Systems
223 where kernel.core_pattern starts with "|/" are not affected.)
224 - Unprivileged user namespace creation is permitted. (This is
225 true on Linux >=3.8, but some distributions disallow it by
226 default using a distro patch.)
228 Under these conditions, if a program executes under secure exec rules,
229 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
230 namespace, changes its root directory and crashes, the coredump will be
231 written using fsuid=0 and a path derived from kernel.core_pattern - but
232 this path is interpreted relative to the root directory of the process,
233 allowing the attacker to control where a coredump will be written with
236 To fix the security issue, always interpret core_pattern for dumps that
237 are written under SUID_DUMP_ROOT relative to the root directory of init.
239 Signed-off-by: Jann Horn <jann@thejh.net>
240 Acked-by: Kees Cook <keescook@chromium.org>
241 Cc: Al Viro <viro@zeniv.linux.org.uk>
242 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
243 Cc: Andy Lutomirski <luto@kernel.org>
244 Cc: Oleg Nesterov <oleg@redhat.com>
245 Cc: <stable@vger.kernel.org>
246 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
247 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
249 arch/um/drivers/mconsole_kern.c | 2 +-
250 fs/coredump.c | 31 +++++++++++++++++++++++++++----
253 include/linux/fs.h | 2 +-
254 kernel/sysctl_binary.c | 2 +-
255 6 files changed, 33 insertions(+), 12 deletions(-)
257 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
258 Author: Takashi Iwai <tiwai@suse.de>
259 Date: Fri Apr 1 12:28:16 2016 +0200
261 ALSA: timer: Use mod_timer() for rearming the system timer
263 ALSA system timer backend stops the timer via del_timer() without sync
264 and leaves del_timer_sync() at the close instead. This is because of
265 the restriction by the design of ALSA timer: namely, the stop callback
266 may be called from the timer handler, and calling the sync shall lead
267 to a hangup. However, this also triggers a kernel BUG() when the
268 timer is rearmed immediately after stopping without sync:
269 kernel BUG at kernel/time/timer.c:966!
272 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
273 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
274 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
275 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
276 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
277 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
278 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
281 It's the place where add_timer() checks the pending timer. It's clear
282 that this may happen after the immediate restart without sync in our
285 So, the workaround here is just to use mod_timer() instead of
286 add_timer(). This looks like a band-aid fix, but it's a right move,
287 as snd_timer_interrupt() takes care of the continuous rearm of timer.
289 Reported-by: Jiri Slaby <jslaby@suse.cz>
290 Cc: <stable@vger.kernel.org>
291 Signed-off-by: Takashi Iwai <tiwai@suse.de>
293 sound/core/timer.c | 4 ++--
294 1 file changed, 2 insertions(+), 2 deletions(-)
296 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
297 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
298 Date: Wed Mar 30 11:40:43 2016 +0200
300 drm/udl: Use unlocked gem unreferencing
302 For drm_gem_object_unreference callers are required to hold
303 dev->struct_mutex, which these paths don't. Enforcing this requirement
304 has become a bit more strict with
306 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
307 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
308 Date: Thu Oct 15 09:36:25 2015 +0200
310 drm/gem: Check locking in drm_gem_object_unreference
312 Cc: stable@vger.kernel.org
313 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
314 Signed-off-by: Dave Airlie <airlied@redhat.com>
316 drivers/gpu/drm/udl/udl_fb.c | 2 +-
317 drivers/gpu/drm/udl/udl_gem.c | 2 +-
318 2 files changed, 2 insertions(+), 2 deletions(-)
320 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
321 Author: Jan Kara <jack@suse.com>
322 Date: Mon Dec 7 14:34:49 2015 -0500
324 ext4: fix races of writeback with punch hole and zero range
326 When doing delayed allocation, update of on-disk inode size is postponed
327 until IO submission time. However hole punch or zero range fallocate
328 calls can end up discarding the tail page cache page and thus on-disk
329 inode size would never be properly updated.
331 Make sure the on-disk inode size is updated before truncating page
334 Signed-off-by: Jan Kara <jack@suse.com>
335 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
337 fs/ext4/ext4.h | 3 +++
338 fs/ext4/extents.c | 5 +++++
339 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
340 3 files changed, 42 insertions(+), 1 deletion(-)
342 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
343 Author: Jan Kara <jack@suse.com>
344 Date: Mon Dec 7 14:31:11 2015 -0500
346 ext4: fix races between buffered IO and collapse / insert range
348 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
349 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
350 faults. If buffered write or write via mmap manages to squeeze between
351 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
352 implementations, the written data is simply discarded by
353 truncate_pagecache() although it should have been shifted.
355 Fix the problem by moving filemap_write_and_wait_range() call inside
356 i_mutex and i_mmap_sem. That way we are protected against races with
357 both buffered writes and page faults.
359 Signed-off-by: Jan Kara <jack@suse.com>
360 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
362 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
363 1 file changed, 31 insertions(+), 28 deletions(-)
365 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
366 Author: Jan Kara <jack@suse.com>
367 Date: Mon Dec 7 14:29:17 2015 -0500
369 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
371 Currently ext4_alloc_file_blocks() was handling protection against
372 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
373 and sometimes not and DIO protection ranks above it (although strictly
374 speaking this cannot currently create any deadlocks). Also
375 ext4_zero_range() was actually getting & releasing unlocked DIO
376 protection twice in some cases. Luckily it didn't introduce any real bug
377 but it was a land mine waiting to be stepped on. So move DIO protection
378 out from ext4_alloc_file_blocks() into the two callsites.
380 Signed-off-by: Jan Kara <jack@suse.com>
381 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
383 fs/ext4/extents.c | 21 ++++++++++-----------
384 1 file changed, 10 insertions(+), 11 deletions(-)
386 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
387 Author: Jan Kara <jack@suse.com>
388 Date: Mon Dec 7 14:28:03 2015 -0500
390 ext4: fix races between page faults and hole punching
392 Currently, page faults and hole punching are completely unsynchronized.
393 This can result in page fault faulting in a page into a range that we
394 are punching after truncate_pagecache_range() has been called and thus
395 we can end up with a page mapped to disk blocks that will be shortly
396 freed. Filesystem corruption will shortly follow. Note that the same
397 race is avoided for truncate by checking page fault offset against
398 i_size but there isn't similar mechanism available for punching holes.
400 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
401 grab it for writing over truncate, hole punching, and other functions
402 removing blocks from extent tree and for read over page faults. We
403 cannot easily use i_data_sem for this since that ranks below transaction
404 start and we need something ranking above it so that it can be held over
405 the whole truncate / hole punching operation. Also remove various
406 workarounds we had in the code to reduce race window when page fault
407 could have created pages with stale mapping information.
409 Signed-off-by: Jan Kara <jack@suse.com>
410 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
412 fs/ext4/ext4.h | 10 +++++++++
413 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
414 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
415 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
416 fs/ext4/super.c | 1 +
417 fs/ext4/truncate.h | 2 ++
418 6 files changed, 127 insertions(+), 42 deletions(-)
420 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
421 Author: Guenter Roeck <linux@roeck-us.net>
422 Date: Sat Mar 26 12:28:05 2016 -0700
424 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
426 arm:pxa_defconfig can result in the following crash if the max1111 driver
429 Unhandled fault: page domain fault (0x01b) at 0x00000000
431 [00000000] *pgd=00000000
432 Internal error: : 1b [#1] PREEMPT ARM
434 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
435 Hardware name: SHARP Akita
436 Workqueue: events sharpsl_charge_toggle
437 task: c390a000 ti: c391e000 task.ti: c391e000
438 PC is at max1111_read_channel+0x20/0x30
439 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
440 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
442 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
443 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
444 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
445 (spitzpm_read_devdata+0x5c/0xc4)
446 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
447 (sharpsl_check_battery_temp+0x78/0x110)
448 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
449 (sharpsl_charge_toggle+0x48/0x110)
450 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
451 (process_one_work+0x14c/0x48c)
452 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
453 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
454 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
456 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
457 module and thus not necessarily loaded. While building SPI_PXA2XX into the
458 kernel would make the problem disappear, it appears prudent to ensure that
459 the driver is instantiated before accessing its data structures.
461 Cc: Arnd Bergmann <arnd@arndb.de>
462 Cc: stable@vger.kernel.org
463 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
465 drivers/hwmon/max1111.c | 6 ++++++
466 1 file changed, 6 insertions(+)
468 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
469 Author: Nicolai Stange <nicstange@gmail.com>
470 Date: Sun Mar 20 23:23:46 2016 +0100
472 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
474 Despite what the DocBook comment to pkcs7_validate_trust() says, the
475 *_trusted argument is never set to false.
477 pkcs7_validate_trust() only positively sets *_trusted upon encountering
478 a trusted PKCS#7 SignedInfo block.
480 This is quite unfortunate since its callers, system_verify_data() for
481 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
483 Indeed, UBSAN splats when attempting to load the uninitialized local
484 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
486 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
487 load of value 82 is not a valid value for type '_Bool'
490 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
491 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
492 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
493 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
494 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
495 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
496 [<ffffffff814b83f0>] ? kfree+0x220/0x370
497 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
498 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
499 [<ffffffff813c391a>] system_verify_data+0xca/0x170
500 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
501 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
502 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
505 The implication is that pkcs7_validate_trust() effectively grants trust
506 when it really shouldn't have.
508 Fix this by explicitly setting *_trusted to false at the very beginning
509 of pkcs7_validate_trust().
511 Cc: <stable@vger.kernel.org>
512 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
513 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
515 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
516 1 file changed, 2 insertions(+)
518 commit 1052826f7352ccc98167129b0b83222f45d50046
519 Author: Florian Westphal <fw@strlen.de>
520 Date: Tue Mar 22 18:02:49 2016 +0100
522 netfilter: x_tables: validate e->target_offset early
524 We should check that e->target_offset is sane before
525 mark_source_chains gets called since it will fetch the target entry
528 Signed-off-by: Florian Westphal <fw@strlen.de>
529 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
531 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
532 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
533 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
534 3 files changed, 24 insertions(+), 27 deletions(-)
536 commit b35d19509e8dab157214e46dd24314663ccf554f
537 Author: Florian Westphal <fw@strlen.de>
538 Date: Tue Mar 22 18:02:50 2016 +0100
540 netfilter: x_tables: make sure e->next_offset covers remaining blob size
542 Otherwise this function may read data beyond the ruleset blob.
544 Signed-off-by: Florian Westphal <fw@strlen.de>
545 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
547 net/ipv4/netfilter/arp_tables.c | 6 ++++--
548 net/ipv4/netfilter/ip_tables.c | 6 ++++--
549 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
550 3 files changed, 12 insertions(+), 6 deletions(-)
552 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
553 Author: Florian Westphal <fw@strlen.de>
554 Date: Tue Mar 22 18:02:52 2016 +0100
556 netfilter: x_tables: fix unconditional helper
560 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
561 is possible for a user-supplied ipt_entry structure to have a large
562 next_offset field. This field is not bounds checked prior to writing a
563 counter value at the supplied offset.
565 Problem is that mark_source_chains should not have been called --
566 the rule doesn't have a next entry, so its supposed to return
567 an absolute verdict of either ACCEPT or DROP.
569 However, the function conditional() doesn't work as the name implies.
570 It only checks that the rule is using wildcard address matching.
572 However, an unconditional rule must also not be using any matches
575 The underflow validator only checked the addresses, therefore
576 passing the 'unconditional absolute verdict' test, while
577 mark_source_chains also tested for presence of matches, and thus
578 proceeeded to the next (not-existent) rule.
580 Unify this so that all the callers have same idea of 'unconditional rule'.
582 Reported-by: Ben Hawkes <hawkes@google.com>
583 Signed-off-by: Florian Westphal <fw@strlen.de>
584 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
586 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
587 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
588 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
589 3 files changed, 31 insertions(+), 33 deletions(-)
591 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
592 Author: Pablo Neira Ayuso <pablo@netfilter.org>
593 Date: Thu Mar 24 21:29:53 2016 +0100
595 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
597 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
598 in ebtables and all the x_tables variants and their respective compat
599 code. Uncovered by KASAN.
601 Reported-by: Baozeng Ding <sploving1@gmail.com>
602 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
604 net/bridge/netfilter/ebtables.c | 4 ++++
605 net/ipv4/netfilter/arp_tables.c | 2 ++
606 net/ipv4/netfilter/ip_tables.c | 2 ++
607 net/ipv6/netfilter/ip6_tables.c | 2 ++
608 4 files changed, 10 insertions(+)
610 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
611 Author: Nicolai Stange <nicstange@gmail.com>
612 Date: Fri Mar 25 14:22:14 2016 -0700
614 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
617 - generic_file_read_iter() gets called with a zero read length,
618 - the read offset is at a page boundary,
619 - IOCB_DIRECT is not set
620 - and the page in question hasn't made it into the page cache yet,
621 then do_generic_file_read() will trigger a readahead with a req_size hint
624 Since roundup_pow_of_two(0) is undefined, UBSAN reports
626 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
627 shift exponent 64 is too large for 64-bit type 'long unsigned int'
628 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
632 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
633 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
634 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
635 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
636 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
637 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
639 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
642 when get_init_ra_size() gets called from ondemand_readahead().
644 The net effect is that the initial readahead size is arch dependent for
645 requested read lengths of zero: for example, since
647 1UL << (sizeof(unsigned long) * 8)
649 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
650 size becomes 4 on the former and 0 on the latter.
652 What's more, whether or not the file access timestamp is updated for zero
653 length reads is decided differently for the two cases of IOCB_DIRECT
654 being set or cleared: in the first case, generic_file_read_iter()
655 explicitly skips updating that timestamp while in the latter case, it is
656 always updated through the call to do_generic_file_read().
658 According to POSIX, zero length reads "do not modify the last data access
659 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
661 Let generic_file_read_iter() unconditionally check the requested read
662 length at its entry and return immediately with success if it is zero.
664 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
665 Cc: Al Viro <viro@zeniv.linux.org.uk>
666 Reviewed-by: Jan Kara <jack@suse.cz>
667 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
668 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
670 mm/filemap.c | 7 ++++---
671 1 file changed, 4 insertions(+), 3 deletions(-)
673 commit 604785419da498d7e876a0191b2e11626db706bb
674 Author: Oliver Neukum <oneukum@suse.com>
675 Date: Thu Mar 17 14:00:17 2016 -0700
677 Input: ims-pcu - sanity check against missing interfaces
679 A malicious device missing interface can make the driver oops.
682 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
683 CC: stable@vger.kernel.org
684 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
686 drivers/input/misc/ims-pcu.c | 4 ++++
687 1 file changed, 4 insertions(+)
689 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
690 Author: Vladis Dronov <vdronov@redhat.com>
691 Date: Wed Mar 23 11:53:46 2016 -0700
693 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
695 The ati_remote2 driver expects at least two interfaces with one
696 endpoint each. If given malicious descriptor that specify one
697 interface or no endpoints, it will crash in the probe function.
698 Ensure there is at least two interfaces and one endpoint for each
699 interface before using it.
701 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
703 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
704 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
705 Cc: stable@vger.kernel.org
706 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
708 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
709 1 file changed, 30 insertions(+), 6 deletions(-)
711 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
712 Author: Oliver Neukum <oneukum@suse.com>
713 Date: Wed Mar 23 14:36:56 2016 -0700
715 Input: sur40 - fix DMA on stack
717 During the initialisation the driver uses a buffer on the stack for DMA.
718 That violates the cache coherency rules. The fix is to allocate the buffer
721 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
722 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
724 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
725 1 file changed, 14 insertions(+), 7 deletions(-)
727 commit 015dd03669b2ab646723f6b123377e4ef5694a10
728 Author: Haiyang Zhang <haiyangz@microsoft.com>
729 Date: Wed Mar 23 09:43:10 2016 -0700
731 hv_netvsc: Fix the array sizes to be max supported channels
733 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
734 hosts. We use it for the related array sizes instead of using NR_CPUS,
735 which may be set to several thousands.
736 This patch reduces possible memory allocation failures.
738 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
739 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
740 Signed-off-by: David S. Miller <davem@davemloft.net>
742 drivers/net/hyperv/hyperv_net.h | 7 ++++---
743 drivers/net/hyperv/rndis_filter.c | 4 ++--
744 2 files changed, 6 insertions(+), 5 deletions(-)
746 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
747 Author: Haiyang Zhang <haiyangz@microsoft.com>
748 Date: Wed Mar 23 09:43:09 2016 -0700
750 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
752 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
753 the nvdev->num_chn into a temp variable for later usage.
755 (Please also include this patch into stable branch.)
757 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
758 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
759 Signed-off-by: David S. Miller <davem@davemloft.net>
761 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
762 1 file changed, 4 insertions(+), 1 deletion(-)
764 commit 7409626e43fe871cede30ac926425938f3ccddaf
765 Author: Guillaume Nault <g.nault@alphalink.fr>
766 Date: Wed Mar 23 16:38:55 2016 +0100
768 ppp: take reference on channels netns
770 Let channels hold a reference on their network namespace.
771 Some channel types, like ppp_async and ppp_synctty, can have their
772 userspace controller running in a different namespace. Therefore they
773 can't rely on them to preclude their netns from being removed from
776 ==================================================================
777 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
778 addr ffff880064e217e0
779 Read of size 8 by task syz-executor/11581
780 =============================================================================
781 BUG net_namespace (Not tainted): kasan: bad access detected
782 -----------------------------------------------------------------------------
784 Disabling lock debugging due to kernel taint
785 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
786 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
787 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
788 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
789 [< inline >] slab_alloc kernel/mm/slub.c:2574
790 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
791 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
792 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
793 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
794 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
795 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
796 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
797 [< inline >] copy_process kernel/kernel/fork.c:1274
798 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
799 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
800 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
801 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
803 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
804 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
805 [< inline >] slab_free kernel/mm/slub.c:2805
806 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
807 [< inline >] net_free kernel/net/core/net_namespace.c:341
808 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
809 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
810 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
811 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
812 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
813 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
814 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
815 flags=0x5fffc0000004080
816 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
818 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
819 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
820 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
821 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
822 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
823 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
825 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
826 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
827 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
828 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
829 [< inline >] print_address_description kernel/mm/kasan/report.c:138
830 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
831 [< inline >] kasan_report kernel/mm/kasan/report.c:259
832 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
833 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
834 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
835 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
836 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
837 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
838 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
839 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
840 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
841 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
842 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
843 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
844 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
845 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
846 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
847 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
848 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
849 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
850 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
851 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
852 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
853 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
854 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
855 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
856 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
857 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
858 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
859 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
860 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
861 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
862 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
863 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
864 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
865 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
866 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
867 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
868 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
869 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
870 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
871 Memory state around the buggy address:
872 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
873 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
874 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
876 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
877 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
878 ==================================================================
880 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
881 Reported-by: Baozeng Ding <sploving1@gmail.com>
882 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
883 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
884 Signed-off-by: David S. Miller <davem@davemloft.net>
886 drivers/net/ppp/ppp_generic.c | 4 +++-
887 1 file changed, 3 insertions(+), 1 deletion(-)
889 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
890 Author: Herbert Xu <herbert@gondor.apana.org.au>
891 Date: Wed Mar 16 17:06:01 2016 +0800
893 eCryptfs: Use skcipher and shash
895 eCryptfs: Fix null pointer dereference on kzalloc error path
897 The conversion to skcipher and shash added a couple of null pointer
898 dereference bugs on the kzalloc failure path. This patch fixes them.
900 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
901 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
902 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
904 fs/ecryptfs/keystore.c | 6 ++----
905 1 file changed, 2 insertions(+), 4 deletions(-)
907 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
908 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
909 Date: Thu Mar 17 10:21:34 2016 +0100
911 crypto: marvell/cesa - fix memory leak
913 Crypto requests are not guaranteed to be finalized (->final() call),
914 and can be freed at any moment, without getting any notification from
915 the core. This can lead to memory leaks of the ->cache buffer.
917 Make this buffer part of the request object, and allocate an extra buffer
918 from the DMA cache pool when doing DMA operations.
920 As a side effect, this patch also fixes another bug related to cache
921 allocation and DMA operations. When the core allocates a new request and
922 import an existing state, a cache buffer can be allocated (depending
923 on the state). The problem is, at that very moment, we don't know yet
924 whether the request will use DMA or not, and since everything is
925 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
926 should allocate a buffer for standard operation. But when
927 mv_cesa_ahash_free_cache() is called, req->type has been set to
928 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
929 call (the buffer passed in argument has not been allocated from the pool).
931 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
932 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
933 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
935 drivers/crypto/marvell/cesa.h | 3 +-
936 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
937 2 files changed, 20 insertions(+), 69 deletions(-)
939 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
940 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
941 Date: Thu Mar 17 10:21:35 2016 +0100
943 crypto: marvell/cesa - initialize hash states
945 ->export() might be called before we have done an update operation,
946 and in this case the ->state field is left uninitialized.
947 Put the correct default value when initializing the request.
949 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
950 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
952 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
953 1 file changed, 20 insertions(+)
955 commit 23879f055d23e82c2f78cceca22c33e631973977
956 Author: David S. Miller <davem@davemloft.net>
957 Date: Sun Mar 13 23:28:00 2016 -0400
959 ipv4: Don't do expensive useless work during inetdev destroy.
961 When an inetdev is destroyed, every address assigned to the interface
962 is removed. And in this scenerio we do two pointless things which can
963 be very expensive if the number of assigned interfaces is large:
965 1) Address promotion. We are deleting all addresses, so there is no
968 2) A full nf conntrack table purge for every address. We only need to
969 do this once, as is already caught by the existing
970 masq_dev_notifier so masq_inet_event() can skip this.
972 Reported-by: Solar Designer <solar@openwall.com>
973 Signed-off-by: David S. Miller <davem@davemloft.net>
974 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
976 net/ipv4/devinet.c | 4 ++++
977 net/ipv4/fib_frontend.c | 4 ++++
978 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
979 3 files changed, 18 insertions(+), 2 deletions(-)
981 commit 60394231e840e884024592a76a6c5612433d3756
982 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
983 Date: Tue Mar 8 10:34:28 2016 -0300
985 sctp: fix copying more bytes than expected in sctp_add_bind_addr
987 Dmitry reported that sctp_add_bind_addr may read more bytes than
988 expected in case the parameter is a IPv4 addr supplied by the user
989 through calls such as sctp_bindx_add(), because it always copies
990 sizeof(union sctp_addr) while the buffer may be just a struct
991 sockaddr_in, which is smaller.
993 This patch then fixes it by limiting the memcpy to the min between the
994 union size and a (new parameter) provided addr size. Where possible this
995 parameter still is the size of that union, except for reading from
996 user-provided buffers, which then it accounts for protocol type.
998 Reported-by: Dmitry Vyukov <dvyukov@google.com>
999 Tested-by: Dmitry Vyukov <dvyukov@google.com>
1000 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
1001 Signed-off-by: David S. Miller <davem@davemloft.net>
1003 include/net/sctp/structs.h | 2 +-
1004 net/sctp/bind_addr.c | 14 ++++++++------
1005 net/sctp/protocol.c | 1 +
1006 net/sctp/sm_make_chunk.c | 3 ++-
1007 net/sctp/socket.c | 4 +++-
1008 5 files changed, 15 insertions(+), 9 deletions(-)
1010 commit 9831caa50e1453818c5ec618890291f028b7992f
1011 Author: Brad Spengler <spender@grsecurity.net>
1012 Date: Mon Mar 28 19:20:28 2016 -0400
1014 Also allow /bin/false as needed by systemd
1016 kernel/kmod.c | 2 +-
1017 1 file changed, 1 insertion(+), 1 deletion(-)
1019 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
1020 Author: Brad Spengler <spender@grsecurity.net>
1021 Date: Tue Mar 22 16:59:43 2016 -0400
1023 Fix size_overflow FP reported by marcan at:
1024 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
1026 net/ipv6/xfrm6_mode_transport.c | 2 +-
1027 1 file changed, 1 insertion(+), 1 deletion(-)
1029 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
1030 Merge: 0d0ec9e c0b77a7
1031 Author: Brad Spengler <spender@grsecurity.net>
1032 Date: Wed Mar 16 20:20:40 2016 -0400
1034 Merge branch 'pax-test' into grsec-test
1036 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
1037 Merge: 10d57c1 0d19123
1038 Author: Brad Spengler <spender@grsecurity.net>
1039 Date: Wed Mar 16 20:20:27 2016 -0400
1041 Merge branch 'linux-4.4.y' into pax-test
1043 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
1044 Author: Brad Spengler <spender@grsecurity.net>
1045 Date: Mon Mar 14 20:15:47 2016 -0400
1047 Invert logic to clean up code
1049 fs/namei.c | 32 +++++++-------------------------
1050 grsecurity/grsec_chroot.c | 10 +++++-----
1051 2 files changed, 12 insertions(+), 30 deletions(-)
1053 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
1054 Author: Brad Spengler <spender@grsecurity.net>
1055 Date: Mon Mar 14 19:59:36 2016 -0400
1059 fs/namei.c | 5 ++---
1060 1 file changed, 2 insertions(+), 3 deletions(-)
1062 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
1063 Author: Brad Spengler <spender@grsecurity.net>
1064 Date: Mon Mar 14 19:57:53 2016 -0400
1068 fs/namei.c | 9 +++++++++
1069 1 file changed, 9 insertions(+)
1071 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
1072 Author: Brad Spengler <spender@grsecurity.net>
1073 Date: Mon Mar 14 19:45:56 2016 -0400
1075 Add additional check to cover lookup family of functions
1077 fs/namei.c | 9 +++++++++
1078 1 file changed, 9 insertions(+)
1080 commit c3df846baa7873fb99401136f220676b87452918
1081 Author: Brad Spengler <spender@grsecurity.net>
1082 Date: Mon Mar 14 18:42:37 2016 -0400
1087 1 file changed, 1 insertion(+), 1 deletion(-)
1089 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
1090 Author: Brad Spengler <spender@grsecurity.net>
1091 Date: Mon Mar 14 18:34:40 2016 -0400
1093 Fix recent chroot check on the create side, as reported by
1096 fs/namei.c | 26 ++++++++++++++++----------
1097 1 file changed, 16 insertions(+), 10 deletions(-)
1099 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
1100 Author: Paolo Bonzini <pbonzini@redhat.com>
1101 Date: Tue Mar 8 12:13:39 2016 +0100
1103 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
1105 Yes, all of these are needed. :) This is admittedly a bit odd, but
1106 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
1107 and of course ept=0.
1109 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
1110 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
1111 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
1112 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
1113 restarts execution. This will still cause a user write to fault, while
1114 supervisor writes will succeed. User reads will fault spuriously now,
1115 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
1116 will be enabled and supervisor writes disabled, going back to the
1117 originary situation where supervisor writes fault spuriously.
1119 When SMEP is in effect, however, U=0 will enable kernel execution of
1120 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
1121 with U=0. If the guest has not enabled NX, the result is a continuous
1122 stream of page faults due to the NX bit being reserved.
1124 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
1125 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
1126 control, so they do not use user-return notifiers for EFER---if they did,
1127 EFER.NX would be forced to the same value as the host).
1129 There is another bug in the reserved bit check, which I've split to a
1130 separate patch for easier application to stable kernels.
1132 Cc: stable@vger.kernel.org
1133 Cc: Andy Lutomirski <luto@amacapital.net>
1134 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
1135 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
1136 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
1138 Documentation/virtual/kvm/mmu.txt | 3 ++-
1139 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
1140 2 files changed, 25 insertions(+), 14 deletions(-)
1142 commit 802a88e57b141e9643e93afb7805813ad8da22f3
1143 Author: Paolo Bonzini <pbonzini@redhat.com>
1144 Date: Wed Mar 9 14:28:02 2016 +0100
1146 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
1148 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
1149 CR0.WP=1. These pages' SPTEs flip continuously between two states:
1150 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
1151 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
1153 When SMEP is in effect, however, U=0 will enable kernel execution of
1154 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
1155 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
1156 When guest EFER has the NX bit cleared, the reserved bit check thinks
1157 that the latter state is invalid; teach it that the smep_andnot_wp case
1158 will also use the NX bit of SPTEs.
1160 Cc: stable@vger.kernel.org
1161 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
1162 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
1163 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
1165 arch/x86/kvm/mmu.c | 4 +++-
1166 1 file changed, 3 insertions(+), 1 deletion(-)
1168 commit 3925851224428c1d2bca32cf33821befb947c4f3
1169 Author: Ming Lei <ming.lei@canonical.com>
1170 Date: Sat Mar 12 22:56:19 2016 +0800
1172 block: don't optimize for non-cloned bio in bio_get_last_bvec()
1174 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
1175 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
1176 because the start postion may have been moved in the middle of
1177 the bvec, such as splitting in the middle of bvec.
1179 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
1180 Cc: stable@vger.kernel.org
1181 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
1182 Signed-off-by: Ming Lei <ming.lei@canonical.com>
1183 Signed-off-by: Jens Axboe <axboe@fb.com>
1185 include/linux/bio.h | 5 -----
1186 1 file changed, 5 deletions(-)
1188 commit db541463b4a0926bebdbac743c8736fb9e903d58
1189 Author: Borislav Petkov <bp@alien8.de>
1190 Date: Fri Mar 11 12:32:06 2016 +0100
1192 x86/fpu: Fix eager-FPU handling on legacy FPU machines
1194 i486 derived cores like Intel Quark support only the very old,
1195 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
1196 our FPU code wasn't handling the saving and restoring there
1197 properly in the 'eagerfpu' case.
1199 So after we made eagerfpu the default for all CPU types:
1201 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
1203 these old FPU designs broke. First, Andy Shevchenko reported a splat:
1205 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
1207 which was us trying to execute FXRSTOR on those machines even though
1208 they don't support it.
1210 After taking care of that, Bryan O'Donoghue reported that a simple FPU
1211 test still failed because we weren't initializing the FPU state properly
1214 Take care of all that.
1216 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
1217 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
1218 Signed-off-by: Borislav Petkov <bp@suse.de>
1219 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
1220 Cc: Andrew Morton <akpm@linux-foundation.org>
1221 Cc: Andy Lutomirski <luto@amacapital.net>
1222 Cc: Borislav Petkov <bp@alien8.de>
1223 Cc: Brian Gerst <brgerst@gmail.com>
1224 Cc: Dave Hansen <dave.hansen@linux.intel.com>
1225 Cc: Denys Vlasenko <dvlasenk@redhat.com>
1226 Cc: Fenghua Yu <fenghua.yu@intel.com>
1227 Cc: H. Peter Anvin <hpa@zytor.com>
1228 Cc: Oleg Nesterov <oleg@redhat.com>
1229 Cc: Peter Zijlstra <peterz@infradead.org>
1230 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
1231 Cc: Thomas Gleixner <tglx@linutronix.de>
1232 Cc: Yu-cheng <yu-cheng.yu@intel.com>
1233 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
1234 Signed-off-by: Ingo Molnar <mingo@kernel.org>
1236 arch/x86/kernel/fpu/core.c | 4 +++-
1237 arch/x86/kernel/fpu/init.c | 2 +-
1238 2 files changed, 4 insertions(+), 2 deletions(-)
1240 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
1241 Author: Brad Spengler <spender@grsecurity.net>
1242 Date: Sun Mar 13 11:35:56 2016 -0400
1247 grsecurity/grsec_chroot.c | 2 +-
1248 include/linux/grsecurity.h | 2 +-
1249 3 files changed, 3 insertions(+), 3 deletions(-)
1251 commit aab25a3496c4683c5858056960010119fb7d9a5a
1252 Author: Brad Spengler <spender@grsecurity.net>
1253 Date: Sun Mar 13 10:53:59 2016 -0400
1255 Use fput instead of put_filp()
1258 1 file changed, 2 insertions(+), 2 deletions(-)
1260 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
1261 Author: Brad Spengler <spender@grsecurity.net>
1262 Date: Sun Mar 13 10:30:54 2016 -0400
1264 Update MPROTECT_COMPAT config description, disable by default
1266 security/Kconfig | 18 ++++++------------
1267 1 file changed, 6 insertions(+), 12 deletions(-)
1269 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
1270 Author: Brad Spengler <spender@grsecurity.net>
1271 Date: Sun Mar 13 10:35:55 2016 -0400
1273 As reported by Jann Horn, chroot scenarios where the chrooting application
1274 brings in a directory fd can be used to access any file outside of the chroot
1275 via *at syscalls. To maintain compatibility with Chromium and other apps,
1276 we specifically only disallow relative accesses off a directory fd when the
1277 final path is not located under that directory described by the fd and exists
1278 outside of the chroot. This additional restriction will exist under the
1279 current GRKERNSEC_CHROOT_FCHDIR option.
1281 fs/namei.c | 9 +++++++++
1282 grsecurity/Kconfig | 10 ++++++----
1283 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
1284 include/linux/grmsg.h | 1 +
1285 include/linux/grsecurity.h | 1 +
1286 5 files changed, 56 insertions(+), 4 deletions(-)
1288 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
1289 Author: Brad Spengler <spender@grsecurity.net>
1290 Date: Thu Mar 10 22:17:16 2016 -0500
1292 Update size_overflow hash table
1294 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1295 1 file changed, 1 insertion(+)
1297 commit 29f25ddda6a5625340df26beb394279fefea2b49
1298 Author: Brad Spengler <spender@grsecurity.net>
1299 Date: Thu Mar 10 22:16:04 2016 -0500
1303 kernel/module.c | 3 ++-
1304 1 file changed, 2 insertions(+), 1 deletion(-)
1306 commit b057a45636b626e7eaf03077ed0916b95fea054c
1307 Merge: ba5ee94 10d57c1
1308 Author: Brad Spengler <spender@grsecurity.net>
1309 Date: Thu Mar 10 21:36:10 2016 -0500
1311 Merge branch 'pax-test' into grsec-test
1313 commit 10d57c107e7fabffbe616b14efab73df585576c2
1314 Merge: 1cbae46 62e2195
1315 Author: Brad Spengler <spender@grsecurity.net>
1316 Date: Thu Mar 10 21:34:58 2016 -0500
1318 Update to pax-linux-4.4.5-test9.patch:
1319 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
1320 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
1321 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
1322 - compile the x86 vdso without plugins, reported by Emese
1323 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
1324 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
1326 Merge branch 'linux-4.4.y' into pax-test
1328 commit ba5ee94199b11c1429559a08c2158677dd8f1761
1329 Author: Brad Spengler <spender@grsecurity.net>
1330 Date: Thu Mar 3 20:20:19 2016 -0500
1332 Update size_overflow hash table
1334 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1335 1 file changed, 1 insertion(+)
1337 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
1338 Merge: 335c04c 1cbae46
1339 Author: Brad Spengler <spender@grsecurity.net>
1340 Date: Thu Mar 3 20:04:00 2016 -0500
1342 Merge branch 'pax-test' into grsec-test
1344 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
1345 Merge: a51cdb8 c252409
1346 Author: Brad Spengler <spender@grsecurity.net>
1347 Date: Thu Mar 3 19:57:43 2016 -0500
1349 Merge branch 'linux-4.4.y' into pax-test
1351 commit 335c04c8146a696a6101a9c69dbd47f11383549e
1352 Merge: 897877e a51cdb8
1353 Author: Brad Spengler <spender@grsecurity.net>
1354 Date: Tue Mar 1 17:57:24 2016 -0500
1356 Merge branch 'pax-test' into grsec-test
1358 commit a51cdb83569b450858737a30d2be043d87d7ddc1
1359 Author: Brad Spengler <spender@grsecurity.net>
1360 Date: Tue Mar 1 17:56:43 2016 -0500
1362 Update to pax-linux-4.4.3-test6.patch:
1363 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
1364 - fixed a few section mismatches on notifier_block variables
1365 - fixed a few REFCOUNT false positives found by Emese's plugin
1366 - constified hypervisor_x86
1368 arch/x86/include/asm/hypervisor.h | 2 +-
1369 arch/x86/kernel/cpu/mshyperv.c | 2 +-
1370 arch/x86/kernel/cpu/vmware.c | 2 +-
1371 arch/x86/kernel/kvm.c | 2 +-
1372 drivers/lightnvm/rrpc.c | 4 ++--
1373 drivers/lightnvm/rrpc.h | 2 +-
1374 drivers/net/can/led.c | 2 +-
1375 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
1376 drivers/net/ethernet/rocker/rocker.c | 4 ++--
1377 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
1378 drivers/net/vrf.c | 2 +-
1379 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
1380 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
1381 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
1382 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
1383 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
1384 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
1385 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
1386 fs/proc/kcore.c | 2 +-
1387 mm/hugetlb_cgroup.c | 8 ++++----
1390 net/mac802154/iface.c | 2 +-
1391 23 files changed, 41 insertions(+), 41 deletions(-)
1393 commit 897877e79629a0b854e98cb666a9d898256d45a7
1394 Merge: 1ffa5d5 4f4b213
1395 Author: Brad Spengler <spender@grsecurity.net>
1396 Date: Sun Feb 28 20:54:59 2016 -0500
1398 Merge branch 'pax-test' into grsec-test
1400 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
1401 Author: Brad Spengler <spender@grsecurity.net>
1402 Date: Sun Feb 28 20:54:06 2016 -0500
1404 Update to pax-linux-4.4.3-test5.patch:
1405 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
1406 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
1407 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
1408 - added a generator for SIMPLE_IPA passes as well
1410 include/linux/cgroup-defs.h | 2 +-
1411 include/linux/hugetlb.h | 2 +-
1412 include/linux/hugetlb_cgroup.h | 11 ++
1413 include/net/xfrm.h | 2 +-
1414 kernel/cgroup.c | 29 ++--
1415 mm/hugetlb.c | 55 ++++++-
1416 mm/hugetlb_cgroup.c | 60 ++-----
1417 mm/mmap.c | 38 ++---
1418 net/xfrm/xfrm_state.c | 4 +-
1419 tools/gcc/constify_plugin.c | 5 +-
1420 tools/gcc/gcc-common.h | 42 +++--
1421 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
1422 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
1423 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
1424 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
1425 tools/gcc/size_overflow_plugin/.gitignore | 1 +
1426 .../disable_size_overflow_hash.data | 7 +-
1427 .../size_overflow_plugin/size_overflow_hash.data | 3 -
1428 18 files changed, 385 insertions(+), 146 deletions(-)
1430 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
1431 Author: Brad Spengler <spender@grsecurity.net>
1432 Date: Sun Feb 28 20:43:02 2016 -0500
1434 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
1437 grsecurity/grsec_sig.c | 3 +--
1438 1 file changed, 1 insertion(+), 2 deletions(-)
1440 commit cfdb373a77c88d01c1539e605e28143af5981571
1441 Author: Brad Spengler <spender@grsecurity.net>
1442 Date: Sun Feb 28 19:12:39 2016 -0500
1446 grsecurity/gracl_segv.c | 2 +-
1447 grsecurity/grsec_sig.c | 2 +-
1448 2 files changed, 2 insertions(+), 2 deletions(-)
1450 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
1451 Author: Brad Spengler <spender@grsecurity.net>
1452 Date: Sun Feb 28 18:24:50 2016 -0500
1454 Update the daemon check in handling of anti-bruteforcing of suid binaries
1455 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
1456 could create unprivileged copies of the suid binary via ptrace, inject
1457 code into them, and fork+exec a privileged copy. A crash then in the
1458 privileged copy would trigger the daemon detection which could be avoided
1459 by simply terminating the original process. Defeat this by using our
1460 is_privileged_binary() function against the task's mm->binfmt->file to detect
1461 an fscaps-enabled or suid/sgid binary being involved.
1463 Also update the RBAC RES_CRASH code to use is_privileged_binary().
1465 grsecurity/gracl_segv.c | 15 +--------------
1466 grsecurity/grsec_sig.c | 3 ++-
1467 2 files changed, 3 insertions(+), 15 deletions(-)
1469 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
1470 Author: Brad Spengler <spender@grsecurity.net>
1471 Date: Sun Feb 28 15:06:32 2016 -0500
1473 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
1474 could dump out an unreadable suid binary by creating a script that used
1475 that binary as an interpreter.
1477 fs/exec.c | 14 +++++++++-----
1478 1 file changed, 9 insertions(+), 5 deletions(-)
1480 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
1481 Merge: 2d35d52 8327ee6
1482 Author: Brad Spengler <spender@grsecurity.net>
1483 Date: Thu Feb 25 18:44:11 2016 -0500
1485 Merge branch 'pax-test' into grsec-test
1490 mm/process_vm_access.c
1492 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
1493 Merge: 09d53c7 2134d97
1494 Author: Brad Spengler <spender@grsecurity.net>
1495 Date: Thu Feb 25 18:36:46 2016 -0500
1497 Merge branch 'linux-4.4.y' into pax-test
1502 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
1503 Author: Brad Spengler <spender@grsecurity.net>
1504 Date: Wed Feb 24 07:59:12 2016 -0500
1506 Remove /proc/pid/map_files which we had previously prevented via
1507 an inverted dependency on checkpoint/restart, but clearly should have
1508 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
1509 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
1510 processes of the same UID. Thanks to Mathias Krause for the report!
1512 fs/proc/base.c | 2 ++
1513 1 file changed, 2 insertions(+)
1515 commit e4f1e517092222aa28179b20e14c0ddfb2796049
1516 Author: Brad Spengler <spender@grsecurity.net>
1517 Date: Thu Feb 18 19:32:39 2016 -0500
1519 Update size_overflow hash table
1521 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
1522 1 file changed, 131 insertions(+), 27 deletions(-)
1524 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
1525 Author: Brad Spengler <spender@grsecurity.net>
1526 Date: Thu Feb 18 18:52:37 2016 -0500
1528 Update size_overflow hash table
1530 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
1531 1 file changed, 237 insertions(+), 56 deletions(-)
1533 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
1534 Author: Brad Spengler <spender@grsecurity.net>
1535 Date: Thu Feb 18 18:23:03 2016 -0500
1539 tools/gcc/randomize_layout_plugin.c | 2 +-
1540 1 file changed, 1 insertion(+), 1 deletion(-)
1542 commit 024d2af98b755712daff6ed7c49af921da4e8883
1543 Author: Brad Spengler <spender@grsecurity.net>
1544 Date: Thu Feb 18 18:19:47 2016 -0500
1548 tools/gcc/randomize_layout_plugin.c | 2 +-
1549 1 file changed, 1 insertion(+), 1 deletion(-)
1551 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
1552 Author: Brad Spengler <spender@grsecurity.net>
1553 Date: Thu Feb 18 18:16:32 2016 -0500
1557 tools/gcc/randomize_layout_plugin.c | 9 +++++----
1558 1 file changed, 5 insertions(+), 4 deletions(-)
1560 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
1561 Author: Brad Spengler <spender@grsecurity.net>
1562 Date: Thu Feb 18 17:54:51 2016 -0500
1566 tools/gcc/randomize_layout_plugin.c | 2 +-
1567 1 file changed, 1 insertion(+), 1 deletion(-)
1569 commit 13823395101c4228ecded4b624583389ee13bfb3
1570 Author: Brad Spengler <spender@grsecurity.net>
1571 Date: Thu Feb 18 17:35:21 2016 -0500
1576 1 file changed, 1 insertion(+), 4 deletions(-)
1578 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
1579 Merge: 45cbb7e 09d53c7
1580 Author: Brad Spengler <spender@grsecurity.net>
1581 Date: Thu Feb 18 16:40:51 2016 -0500
1583 Merge branch 'pax-test' into grsec-test
1587 include/linux/genl_magic_struct.h
1588 scripts/mod/modpost.c
1589 tools/gcc/size_overflow_plugin/size_overflow_hash.data
1591 commit 09d53c74140e87e886a28980cedbb7e771f2a356
1592 Author: Brad Spengler <spender@grsecurity.net>
1593 Date: Thu Feb 18 16:24:02 2016 -0500
1595 Update to pax-linux-4.4.2-test4.patch:
1596 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
1597 - moved gcc plugin related makefile bits into a separate file, by Emese
1598 - changed modpost to report writable function pointers separately
1599 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
1600 - reduced the size of the compat syscall entry points on amd64
1601 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
1602 - Emese regenerated the size overflow hash table for 4.4
1603 - all plugins now use the new pass generator headers
1606 arch/x86/entry/entry_64.S | 2 +-
1607 arch/x86/entry/entry_64_compat.S | 48 +-
1609 include/linux/genl_magic_struct.h | 4 +-
1610 include/linux/memcontrol.h | 2 +-
1612 mm/memcontrol.c | 6 +-
1613 scripts/Makefile.extrawarn | 4 +
1614 scripts/Makefile.gcc-plugins | 69 +
1615 scripts/mod/modpost.c | 15 +-
1616 tools/gcc/checker_plugin.c | 71 +-
1617 tools/gcc/colorize_plugin.c | 65 +-
1618 tools/gcc/constify_plugin.c | 65 +-
1619 tools/gcc/gcc-generate-gimple-pass.h | 172 +
1620 tools/gcc/gcc-generate-ipa-pass.h | 286 +
1621 tools/gcc/gcc-generate-rtl-pass.h | 172 +
1622 tools/gcc/initify_plugin.c | 74 +-
1623 tools/gcc/kallocstat_plugin.c | 65 +-
1624 tools/gcc/kernexec_plugin.c | 184 +-
1625 tools/gcc/latent_entropy_plugin.c | 71 +-
1626 tools/gcc/randomize_layout_seed.h | 1 -
1627 .../disable_size_overflow_hash.h | 152601 ------------------
1628 .../insert_size_overflow_asm.c | 71 +-
1629 .../size_overflow_plugin/intentional_overflow.c | 6 +-
1630 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
1631 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
1632 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
1633 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
1634 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
1635 .../size_overflow_transform_core.c | 2 +-
1636 tools/gcc/stackleak_plugin.c | 132 +-
1637 tools/gcc/structleak_plugin.c | 67 +-
1638 33 files changed, 2238 insertions(+), 155123 deletions(-)
1640 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
1641 Merge: 3b5448b 0c85110
1642 Author: Brad Spengler <spender@grsecurity.net>
1643 Date: Wed Feb 17 19:11:25 2016 -0500
1645 Merge branch 'pax-test' into grsec-test
1647 commit 0c851109f683896aaff8a310bbfa943272b47516
1648 Merge: 6cb4f49 1cb8570
1649 Author: Brad Spengler <spender@grsecurity.net>
1650 Date: Wed Feb 17 19:11:21 2016 -0500
1652 Merge branch 'linux-4.4.y' into pax-test
1654 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
1655 Author: Brad Spengler <spender@grsecurity.net>
1656 Date: Mon Feb 15 18:02:40 2016 -0500
1658 Fix a drbd bug reported by iamb on the forums:
1659 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
1660 which caused a size_overflow report
1662 include/linux/genl_magic_struct.h | 4 ++--
1663 1 file changed, 2 insertions(+), 2 deletions(-)
1665 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
1666 Author: Brad Spengler <spender@grsecurity.net>
1667 Date: Mon Feb 15 13:20:38 2016 -0500
1671 drivers/staging/wilc1000/host_interface.h | 1 +
1672 1 file changed, 1 insertion(+)
1674 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
1675 Author: Brad Spengler <spender@grsecurity.net>
1676 Date: Mon Feb 15 12:54:52 2016 -0500
1678 Update size_overflow hash table
1680 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
1681 1 file changed, 17 insertions(+), 4 deletions(-)
1683 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
1684 Author: Brad Spengler <spender@grsecurity.net>
1685 Date: Mon Feb 15 12:53:54 2016 -0500
1689 drivers/staging/wilc1000/wilc_spi.c | 1 -
1690 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
1691 2 files changed, 1 insertion(+), 2 deletions(-)
1693 commit a9dd4481db099082967585be8e153899e5fd24c7
1694 Author: Brad Spengler <spender@grsecurity.net>
1695 Date: Mon Feb 15 12:52:32 2016 -0500
1700 1 file changed, 2 deletions(-)
1702 commit 5acb4fa0063460807096429f073181d1c5a3e566
1703 Author: Brad Spengler <spender@grsecurity.net>
1704 Date: Mon Feb 15 12:32:13 2016 -0500
1706 Update size_overflow hash table
1708 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
1709 1 file changed, 182 insertions(+), 42 deletions(-)
1711 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
1712 Author: Brad Spengler <spender@grsecurity.net>
1713 Date: Mon Feb 15 12:31:16 2016 -0500
1717 drivers/staging/wilc1000/wilc_spi.c | 1 +
1718 1 file changed, 1 insertion(+)
1720 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
1721 Author: Brad Spengler <spender@grsecurity.net>
1722 Date: Mon Feb 15 12:28:36 2016 -0500
1724 RANDSTRUCT compile fix
1726 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
1727 1 file changed, 16 insertions(+), 16 deletions(-)
1729 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
1730 Author: Brad Spengler <spender@grsecurity.net>
1731 Date: Mon Feb 15 12:24:49 2016 -0500
1733 RANDSTRUCT compile fix
1735 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
1736 1 file changed, 17 insertions(+), 17 deletions(-)
1738 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
1739 Author: Hariprasad S <hariprasad@chelsio.com>
1740 Date: Fri Dec 11 13:59:17 2015 +0530
1742 iw_cxgb3: Fix incorrectly returning error on success
1744 The cxgb3_*_send() functions return NET_XMIT_ values, which are
1745 positive integers values. So don't treat positive return values
1748 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
1749 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
1750 Signed-off-by: Doug Ledford <dledford@redhat.com>
1752 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
1753 1 file changed, 2 insertions(+), 2 deletions(-)
1755 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
1756 Author: Daniel Borkmann <daniel@iogearbox.net>
1757 Date: Wed Feb 10 16:47:11 2016 +0100
1759 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
1761 When ctx access is used, the kernel often needs to expand/rewrite
1762 instructions, so after that patching, branch offsets have to be
1763 adjusted for both forward and backward jumps in the new eBPF program,
1764 but for backward jumps it fails to account the delta. Meaning, for
1765 example, if the expansion happens exactly on the insn that sits at
1766 the jump target, it doesn't fix up the back jump offset.
1768 Analysis on what the check in adjust_branches() is currently doing:
1770 /* adjust offset of jmps if necessary */
1771 if (i < pos && i + insn->off + 1 > pos)
1773 else if (i > pos && i + insn->off + 1 < pos)
1776 First condition (forward jumps):
1781 insns[1] <--- i/insn insns[1] <--- i/insn
1782 insns[2] <--- pos insns[P] <--- pos
1783 insns[3] insns[P] `------| delta
1784 insns[4] <--- target_X insns[P] `-----|
1786 insns[4] <--- target_X
1789 First case is if we cross pos-boundary and the jump instruction was
1790 before pos. This is handeled correctly. I.e. if i == pos, then this
1791 would mean our jump that we currently check was the patchlet itself
1792 that we just injected. Since such patchlets are self-contained and
1793 have no awareness of any insns before or after the patched one, the
1794 delta is correctly not adjusted. Also, for the second condition in
1795 case of i + insn->off + 1 == pos, means we jump to that newly patched
1796 instruction, so no offset adjustment are needed. That part is correct.
1798 Second condition (backward jumps):
1803 insns[1] <--- target_X insns[1] <--- target_X
1804 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
1805 insns[3] insns[P] `------| delta
1806 insns[4] <--- i/insn insns[P] `-----|
1808 insns[4] <--- i/insn
1811 Second interesting case is where we cross pos-boundary and the jump
1812 instruction was after pos. Backward jump with i == pos would be
1813 impossible and pose a bug somewhere in the patchlet, so the first
1814 condition checking i > pos is okay only by itself. However, i +
1815 insn->off + 1 < pos does not always work as intended to trigger the
1816 adjustment. It works when jump targets would be far off where the
1817 delta wouldn't matter. But, for example, where the fixed insn->off
1818 before pointed to pos (target_Y), it now points to pos + delta, so
1819 that additional room needs to be taken into account for the check.
1820 This means that i) both tests here need to be adjusted into pos + delta,
1821 and ii) for the second condition, the test needs to be <= as pos
1822 itself can be a target in the backjump, too.
1824 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
1825 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
1826 Signed-off-by: David S. Miller <davem@davemloft.net>
1828 kernel/bpf/verifier.c | 2 +-
1829 1 file changed, 1 insertion(+), 1 deletion(-)
1831 commit 61b513b644116e77313addf65970db58f4981608
1832 Author: Ryan Ware <ware@linux.intel.com>
1833 Date: Thu Feb 11 15:58:44 2016 -0800
1835 EVM: Use crypto_memneq() for digest comparisons
1837 This patch fixes vulnerability CVE-2016-2085. The problem exists
1838 because the vm_verify_hmac() function includes a use of memcmp().
1839 Unfortunately, this allows timing side channel attacks; specifically
1840 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
1841 the memcmp() to the cryptographically safe crypto_memneq().
1843 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
1844 Signed-off-by: Ryan Ware <ware@linux.intel.com>
1845 Cc: stable@vger.kernel.org
1846 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
1847 Signed-off-by: James Morris <james.l.morris@oracle.com>
1849 security/integrity/evm/evm_main.c | 3 ++-
1850 1 file changed, 2 insertions(+), 1 deletion(-)
1852 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
1853 Author: Michael McConville <mmcco@mykolab.com>
1854 Date: Fri Feb 5 20:46:25 2016 -0500
1856 dscc4: Undefined signed int shift
1858 My analysis in the below mail applies, although the second part is
1859 unnecessary because i isn't used in arithmetic operations here:
1861 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
1863 Thanks for your time.
1865 Signed-off-by: Michael McConville <mmcco@mykolab.com>
1866 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
1867 Signed-off-by: David S. Miller <davem@davemloft.net>
1869 drivers/net/wan/dscc4.c | 2 +-
1870 1 file changed, 1 insertion(+), 1 deletion(-)
1872 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
1873 Author: Andrey Konovalov <andreyknvl@gmail.com>
1874 Date: Sat Feb 13 11:08:06 2016 +0300
1876 ALSA: usb-audio: avoid freeing umidi object twice
1878 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
1879 when tearing down the rawmidi interface. So we shouldn't try to free it
1880 in snd_usbmidi_create() after having registered the rawmidi interface.
1884 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
1885 Acked-by: Clemens Ladisch <clemens@ladisch.de>
1886 Cc: <stable@vger.kernel.org>
1887 Signed-off-by: Takashi Iwai <tiwai@suse.de>
1889 sound/usb/midi.c | 1 -
1890 1 file changed, 1 deletion(-)
1892 commit ed3a8ab1976674d56e258da93639e61f1446e703
1893 Author: zengtao <prime.zeng@huawei.com>
1894 Date: Tue Feb 2 11:38:34 2016 +0800
1896 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
1898 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
1899 overflows in the timeval/timespec to cputime conversion.
1901 Currently the following functions are affected:
1903 2. timer_create/timer_settime()
1904 3. sys_clock_nanosleep
1906 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
1907 enabled, which is required for CONFIG_NO_HZ_FULL.
1909 Enforce u64 conversion to prevent the overflow.
1911 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
1912 Signed-off-by: zengtao <prime.zeng@huawei.com>
1913 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
1914 Cc: <fweisbec@gmail.com>
1915 Cc: stable@vger.kernel.org
1916 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
1917 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
1919 include/asm-generic/cputime_nsecs.h | 5 +++--
1920 1 file changed, 3 insertions(+), 2 deletions(-)
1922 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
1923 Author: Brad Spengler <spender@grsecurity.net>
1924 Date: Mon Feb 15 11:55:18 2016 -0500
1926 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
1927 count as actual mismatches
1929 scripts/mod/modpost.c | 3 ++-
1930 1 file changed, 2 insertions(+), 1 deletion(-)
1932 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
1933 Author: Brad Spengler <spender@grsecurity.net>
1934 Date: Mon Feb 15 11:44:36 2016 -0500
1938 tools/gcc/randomize_layout_seed.h | 1 -
1939 1 file changed, 1 deletion(-)
1941 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
1942 Author: Brad Spengler <spender@grsecurity.net>
1943 Date: Mon Feb 15 11:27:32 2016 -0500
1947 init/Kconfig | 3 ++-
1948 1 file changed, 2 insertions(+), 1 deletion(-)
1950 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
1951 Author: Brad Spengler <spender@grsecurity.net>
1952 Date: Mon Feb 15 11:23:56 2016 -0500
1957 1 file changed, 1 insertion(+), 1 deletion(-)
1959 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
1960 Author: Brad Spengler <spender@grsecurity.net>
1961 Date: Mon Feb 15 11:19:26 2016 -0500
1963 Initial import of grsecurity for Linux 4.4.1
1965 Documentation/dontdiff | 2 +
1966 Documentation/kernel-parameters.txt | 11 +
1967 Documentation/sysctl/fs.txt | 23 +
1968 Documentation/sysctl/kernel.txt | 15 +
1970 arch/alpha/include/asm/cache.h | 4 +-
1971 arch/alpha/kernel/osf_sys.c | 12 +-
1972 arch/arc/Kconfig | 1 +
1973 arch/arm/Kconfig | 1 +
1974 arch/arm/Kconfig.debug | 1 +
1975 arch/arm/include/asm/thread_info.h | 7 +-
1976 arch/arm/kernel/entry-common.S | 8 +-
1977 arch/arm/kernel/process.c | 4 +-
1978 arch/arm/kernel/ptrace.c | 9 +
1979 arch/arm/kernel/traps.c | 7 +-
1980 arch/arm/mm/Kconfig | 4 +-
1981 arch/arm/mm/fault.c | 40 +-
1982 arch/arm/mm/mmap.c | 8 +-
1983 arch/arm/net/bpf_jit_32.c | 51 +-
1984 arch/arm64/Kconfig.debug | 1 +
1985 arch/avr32/include/asm/cache.h | 4 +-
1986 arch/blackfin/Kconfig.debug | 1 +
1987 arch/blackfin/include/asm/cache.h | 3 +-
1988 arch/cris/include/arch-v10/arch/cache.h | 3 +-
1989 arch/cris/include/arch-v32/arch/cache.h | 3 +-
1990 arch/frv/include/asm/cache.h | 3 +-
1991 arch/frv/mm/elf-fdpic.c | 4 +-
1992 arch/hexagon/include/asm/cache.h | 6 +-
1993 arch/ia64/Kconfig | 1 +
1994 arch/ia64/include/asm/cache.h | 3 +-
1995 arch/ia64/kernel/sys_ia64.c | 2 +
1996 arch/ia64/mm/hugetlbpage.c | 2 +
1997 arch/m32r/include/asm/cache.h | 4 +-
1998 arch/m68k/include/asm/cache.h | 4 +-
1999 arch/metag/mm/hugetlbpage.c | 1 +
2000 arch/microblaze/include/asm/cache.h | 3 +-
2001 arch/mips/Kconfig | 1 +
2002 arch/mips/include/asm/cache.h | 3 +-
2003 arch/mips/include/asm/thread_info.h | 11 +-
2004 arch/mips/kernel/irq.c | 3 +
2005 arch/mips/kernel/ptrace.c | 9 +
2006 arch/mips/mm/mmap.c | 4 +-
2007 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
2008 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
2009 arch/openrisc/include/asm/cache.h | 4 +-
2010 arch/parisc/include/asm/cache.h | 3 +
2011 arch/parisc/kernel/sys_parisc.c | 4 +
2012 arch/powerpc/Kconfig | 1 +
2013 arch/powerpc/include/asm/cache.h | 4 +-
2014 arch/powerpc/include/asm/thread_info.h | 5 +-
2015 arch/powerpc/kernel/Makefile | 2 +
2016 arch/powerpc/kernel/irq.c | 3 +
2017 arch/powerpc/kernel/process.c | 10 +-
2018 arch/powerpc/kernel/ptrace.c | 14 +
2019 arch/powerpc/kernel/traps.c | 5 +
2020 arch/powerpc/mm/slice.c | 2 +-
2021 arch/s390/Kconfig.debug | 1 +
2022 arch/s390/include/asm/cache.h | 4 +-
2023 arch/score/include/asm/cache.h | 4 +-
2024 arch/sh/include/asm/cache.h | 3 +-
2025 arch/sh/mm/mmap.c | 6 +-
2026 arch/sparc/include/asm/cache.h | 4 +-
2027 arch/sparc/include/asm/pgalloc_64.h | 1 +
2028 arch/sparc/include/asm/thread_info_64.h | 8 +-
2029 arch/sparc/kernel/process_32.c | 6 +-
2030 arch/sparc/kernel/process_64.c | 8 +-
2031 arch/sparc/kernel/ptrace_64.c | 14 +
2032 arch/sparc/kernel/sys_sparc_64.c | 8 +-
2033 arch/sparc/kernel/syscalls.S | 8 +-
2034 arch/sparc/kernel/traps_32.c | 8 +-
2035 arch/sparc/kernel/traps_64.c | 28 +-
2036 arch/sparc/kernel/unaligned_64.c | 2 +-
2037 arch/sparc/mm/fault_64.c | 2 +-
2038 arch/sparc/mm/hugetlbpage.c | 15 +-
2039 arch/tile/Kconfig | 1 +
2040 arch/tile/include/asm/cache.h | 3 +-
2041 arch/tile/mm/hugetlbpage.c | 2 +
2042 arch/um/include/asm/cache.h | 3 +-
2043 arch/unicore32/include/asm/cache.h | 6 +-
2044 arch/x86/Kconfig | 21 +
2045 arch/x86/Kconfig.debug | 2 +
2046 arch/x86/entry/common.c | 14 +
2047 arch/x86/entry/entry_32.S | 2 +-
2048 arch/x86/entry/entry_64.S | 2 +-
2049 arch/x86/ia32/ia32_aout.c | 2 +
2050 arch/x86/include/asm/floppy.h | 20 +-
2051 arch/x86/include/asm/fpu/types.h | 69 +-
2052 arch/x86/include/asm/io.h | 2 +-
2053 arch/x86/include/asm/page.h | 12 +-
2054 arch/x86/include/asm/paravirt_types.h | 23 +-
2055 arch/x86/include/asm/pgtable_types.h | 6 +-
2056 arch/x86/include/asm/processor.h | 12 +-
2057 arch/x86/include/asm/thread_info.h | 6 +-
2058 arch/x86/include/asm/uaccess.h | 2 +-
2059 arch/x86/kernel/dumpstack.c | 10 +-
2060 arch/x86/kernel/dumpstack_32.c | 2 +-
2061 arch/x86/kernel/dumpstack_64.c | 2 +-
2062 arch/x86/kernel/ioport.c | 13 +
2063 arch/x86/kernel/irq_32.c | 3 +
2064 arch/x86/kernel/irq_64.c | 4 +
2065 arch/x86/kernel/ldt.c | 18 +
2066 arch/x86/kernel/msr.c | 10 +
2067 arch/x86/kernel/ptrace.c | 14 +
2068 arch/x86/kernel/signal.c | 9 +-
2069 arch/x86/kernel/sys_i386_32.c | 9 +-
2070 arch/x86/kernel/sys_x86_64.c | 8 +-
2071 arch/x86/kernel/traps.c | 5 +
2072 arch/x86/kernel/verify_cpu.S | 1 +
2073 arch/x86/kernel/vm86_32.c | 15 +
2074 arch/x86/mm/fault.c | 12 +-
2075 arch/x86/mm/hugetlbpage.c | 15 +-
2076 arch/x86/mm/init.c | 66 +-
2077 arch/x86/mm/init_32.c | 6 +-
2078 arch/x86/mm/pageattr.c | 4 +-
2079 arch/x86/net/bpf_jit_comp.c | 4 +
2080 arch/x86/platform/efi/efi_64.c | 2 +-
2081 arch/x86/xen/Kconfig | 1 +
2082 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
2083 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
2084 crypto/scatterwalk.c | 10 +-
2085 drivers/acpi/acpica/hwxfsleep.c | 11 +-
2086 drivers/acpi/custom_method.c | 4 +
2087 drivers/block/cciss.h | 30 +-
2088 drivers/block/smart1,2.h | 40 +-
2089 drivers/cdrom/cdrom.c | 2 +-
2090 drivers/char/Kconfig | 4 +-
2091 drivers/char/genrtc.c | 1 +
2092 drivers/char/mem.c | 17 +
2093 drivers/char/random.c | 5 +-
2094 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
2095 drivers/firewire/ohci.c | 4 +
2096 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
2097 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
2098 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
2099 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
2100 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
2101 drivers/hid/hid-wiimote-debug.c | 2 +-
2102 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
2103 drivers/iommu/Kconfig | 1 +
2104 drivers/iommu/amd_iommu.c | 14 +-
2105 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
2106 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
2107 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
2108 drivers/isdn/i4l/isdn_concap.c | 6 +-
2109 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
2110 drivers/md/bcache/Kconfig | 1 +
2111 drivers/md/raid5.c | 8 +
2112 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
2113 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
2114 drivers/media/radio/radio-cadet.c | 5 +-
2115 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
2116 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
2117 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
2118 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
2119 drivers/message/fusion/mptbase.c | 9 +
2120 drivers/misc/sgi-xp/xp_main.c | 12 +-
2121 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
2122 drivers/net/ppp/pptp.c | 34 +-
2123 drivers/net/wan/lmc/lmc_media.c | 97 +-
2124 drivers/net/wan/z85230.c | 24 +-
2125 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
2126 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
2127 drivers/pci/proc.c | 9 +
2128 drivers/platform/x86/asus-wmi.c | 12 +
2129 drivers/rtc/rtc-dev.c | 3 +
2130 drivers/scsi/bfa/bfa_fcs.c | 19 +-
2131 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
2132 drivers/scsi/bfa/bfa_modules.h | 12 +-
2133 drivers/scsi/hpsa.h | 40 +-
2134 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
2135 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
2136 drivers/tty/serial/uartlite.c | 4 +-
2137 drivers/tty/sysrq.c | 2 +-
2138 drivers/tty/tty_io.c | 4 +
2139 drivers/tty/vt/keyboard.c | 22 +-
2140 drivers/uio/uio.c | 6 +-
2141 drivers/usb/core/hub.c | 5 +
2142 drivers/usb/gadget/function/f_uac1.c | 1 +
2143 drivers/usb/gadget/function/u_uac1.c | 1 +
2144 drivers/usb/host/hwa-hc.c | 9 +-
2145 drivers/usb/usbip/vhci_sysfs.c | 2 +-
2146 drivers/video/fbdev/arcfb.c | 2 +-
2147 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
2148 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
2149 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
2150 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
2151 drivers/xen/xenfs/xenstored.c | 5 +
2152 firmware/Makefile | 2 +
2153 firmware/WHENCE | 20 +-
2154 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
2155 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
2157 fs/autofs4/waitq.c | 9 +
2158 fs/binfmt_aout.c | 7 +
2159 fs/binfmt_elf.c | 40 +-
2161 fs/compat_ioctl.c | 253 +-
2162 fs/coredump.c | 17 +-
2164 fs/debugfs/inode.c | 11 +-
2166 fs/ext2/balloc.c | 4 +-
2167 fs/ext2/super.c | 8 +-
2168 fs/ext4/balloc.c | 4 +-
2169 fs/ext4/extents.c | 2 +-
2173 fs/filesystems.c | 4 +
2174 fs/fs_struct.c | 20 +-
2175 fs/hugetlbfs/inode.c | 24 +-
2179 fs/kernfs/dir.c | 6 +
2182 fs/namespace.c | 24 +
2183 fs/nfsd/nfscache.c | 2 +-
2185 fs/overlayfs/inode.c | 3 +
2186 fs/overlayfs/super.c | 6 +-
2188 fs/posix_acl.c | 15 +-
2189 fs/proc/Kconfig | 10 +-
2190 fs/proc/array.c | 69 +-
2191 fs/proc/base.c | 186 +-
2192 fs/proc/cmdline.c | 4 +
2193 fs/proc/devices.c | 4 +
2194 fs/proc/fd.c | 12 +-
2195 fs/proc/generic.c | 64 +
2196 fs/proc/inode.c | 17 +
2197 fs/proc/internal.h | 11 +-
2198 fs/proc/interrupts.c | 4 +
2199 fs/proc/kcore.c | 3 +
2200 fs/proc/namespaces.c | 4 +-
2201 fs/proc/proc_net.c | 31 +
2202 fs/proc/proc_sysctl.c | 52 +-
2203 fs/proc/root.c | 8 +
2204 fs/proc/stat.c | 69 +-
2205 fs/proc/task_mmu.c | 66 +-
2207 fs/reiserfs/item_ops.c | 24 +-
2208 fs/reiserfs/super.c | 4 +
2210 fs/seq_file.c | 30 +-
2212 fs/sysfs/dir.c | 30 +-
2215 grsecurity/Kconfig | 1203 ++++
2216 grsecurity/Makefile | 54 +
2217 grsecurity/gracl.c | 2757 +++++++++
2218 grsecurity/gracl_alloc.c | 105 +
2219 grsecurity/gracl_cap.c | 127 +
2220 grsecurity/gracl_compat.c | 269 +
2221 grsecurity/gracl_fs.c | 448 ++
2222 grsecurity/gracl_ip.c | 386 ++
2223 grsecurity/gracl_learn.c | 207 +
2224 grsecurity/gracl_policy.c | 1786 ++++++
2225 grsecurity/gracl_res.c | 68 +
2226 grsecurity/gracl_segv.c | 304 +
2227 grsecurity/gracl_shm.c | 40 +
2228 grsecurity/grsec_chdir.c | 19 +
2229 grsecurity/grsec_chroot.c | 467 ++
2230 grsecurity/grsec_disabled.c | 445 ++
2231 grsecurity/grsec_exec.c | 189 +
2232 grsecurity/grsec_fifo.c | 26 +
2233 grsecurity/grsec_fork.c | 23 +
2234 grsecurity/grsec_init.c | 294 +
2235 grsecurity/grsec_ipc.c | 48 +
2236 grsecurity/grsec_link.c | 65 +
2237 grsecurity/grsec_log.c | 340 +
2238 grsecurity/grsec_mem.c | 48 +
2239 grsecurity/grsec_mount.c | 65 +
2240 grsecurity/grsec_pax.c | 47 +
2241 grsecurity/grsec_proc.c | 20 +
2242 grsecurity/grsec_ptrace.c | 30 +
2243 grsecurity/grsec_sig.c | 245 +
2244 grsecurity/grsec_sock.c | 244 +
2245 grsecurity/grsec_sysctl.c | 497 ++
2246 grsecurity/grsec_time.c | 16 +
2247 grsecurity/grsec_tpe.c | 78 +
2248 grsecurity/grsec_tty.c | 18 +
2249 grsecurity/grsec_usb.c | 15 +
2250 grsecurity/grsum.c | 54 +
2251 include/linux/binfmts.h | 5 +-
2252 include/linux/capability.h | 13 +
2253 include/linux/compiler-gcc.h | 5 +
2254 include/linux/compiler.h | 8 +
2255 include/linux/cred.h | 8 +-
2256 include/linux/dcache.h | 5 +-
2257 include/linux/fs.h | 26 +-
2258 include/linux/fs_struct.h | 2 +-
2259 include/linux/fsnotify.h | 6 +
2260 include/linux/gracl.h | 342 ++
2261 include/linux/gracl_compat.h | 156 +
2262 include/linux/gralloc.h | 9 +
2263 include/linux/grdefs.h | 140 +
2264 include/linux/grinternal.h | 231 +
2265 include/linux/grmsg.h | 119 +
2266 include/linux/grsecurity.h | 258 +
2267 include/linux/grsock.h | 19 +
2268 include/linux/ipc.h | 2 +-
2269 include/linux/ipc_namespace.h | 2 +-
2270 include/linux/kallsyms.h | 18 +-
2271 include/linux/key-type.h | 4 +-
2272 include/linux/kmod.h | 5 +
2273 include/linux/kobject.h | 2 +-
2274 include/linux/lsm_hooks.h | 4 +-
2275 include/linux/mm.h | 12 +
2276 include/linux/mm_types.h | 4 +-
2277 include/linux/module.h | 5 +-
2278 include/linux/mount.h | 2 +-
2279 include/linux/msg.h | 2 +-
2280 include/linux/netfilter/xt_gradm.h | 9 +
2281 include/linux/path.h | 4 +-
2282 include/linux/perf_event.h | 13 +-
2283 include/linux/pid_namespace.h | 2 +-
2284 include/linux/pipe_fs_i.h | 4 +
2285 include/linux/poison.h | 2 +-
2286 include/linux/printk.h | 2 +-
2287 include/linux/proc_fs.h | 22 +-
2288 include/linux/proc_ns.h | 2 +-
2289 include/linux/ptrace.h | 24 +-
2290 include/linux/radix-tree.h | 22 +-
2291 include/linux/random.h | 2 +-
2292 include/linux/rbtree_augmented.h | 4 +-
2293 include/linux/scatterlist.h | 12 +-
2294 include/linux/sched.h | 115 +-
2295 include/linux/security.h | 1 +
2296 include/linux/sem.h | 2 +-
2297 include/linux/seq_file.h | 5 +
2298 include/linux/shm.h | 6 +-
2299 include/linux/shmem_fs.h | 5 +-
2300 include/linux/skbuff.h | 3 +
2301 include/linux/slab.h | 9 -
2302 include/linux/sysctl.h | 8 +-
2303 include/linux/thread_info.h | 6 +-
2304 include/linux/tty.h | 2 +-
2305 include/linux/tty_driver.h | 4 +-
2306 include/linux/uidgid.h | 5 +
2307 include/linux/user_namespace.h | 2 +-
2308 include/linux/utsname.h | 2 +-
2309 include/linux/vermagic.h | 16 +-
2310 include/linux/vmalloc.h | 8 +
2311 include/net/af_unix.h | 6 +-
2312 include/net/ip.h | 2 +-
2313 include/net/neighbour.h | 2 +-
2314 include/net/net_namespace.h | 2 +-
2315 include/net/netfilter/nf_conntrack_core.h | 8 +-
2316 include/net/scm.h | 1 +
2317 include/net/sock.h | 2 +-
2318 include/trace/events/fs.h | 53 +
2319 include/uapi/linux/personality.h | 1 +
2324 ipc/msgutil.c | 4 +-
2328 kernel/auditsc.c | 2 +-
2329 kernel/bpf/syscall.c | 10 +-
2330 kernel/capability.c | 41 +-
2331 kernel/cgroup.c | 5 +-
2332 kernel/compat.c | 1 +
2333 kernel/configs.c | 11 +
2334 kernel/cred.c | 112 +-
2335 kernel/events/core.c | 16 +-
2336 kernel/exit.c | 10 +-
2337 kernel/fork.c | 86 +-
2338 kernel/futex.c | 6 +-
2339 kernel/futex_compat.c | 2 +-
2340 kernel/kallsyms.c | 9 +
2341 kernel/kcmp.c | 8 +-
2342 kernel/kexec_core.c | 2 +-
2343 kernel/kmod.c | 96 +-
2344 kernel/kprobes.c | 9 +-
2345 kernel/ksysfs.c | 2 +
2346 kernel/locking/lockdep_proc.c | 10 +-
2347 kernel/module.c | 108 +-
2348 kernel/panic.c | 4 +-
2349 kernel/pid.c | 18 +-
2350 kernel/power/Kconfig | 2 +
2351 kernel/printk/printk.c | 7 +-
2352 kernel/ptrace.c | 89 +-
2353 kernel/resource.c | 10 +
2354 kernel/sched/core.c | 11 +-
2355 kernel/seccomp.c | 22 +-
2356 kernel/signal.c | 37 +-
2357 kernel/sys.c | 64 +-
2358 kernel/sysctl.c | 186 +-
2359 kernel/taskstats.c | 6 +
2360 kernel/time/posix-timers.c | 8 +
2361 kernel/time/time.c | 5 +
2362 kernel/time/timekeeping.c | 3 +
2363 kernel/time/timer_list.c | 13 +-
2364 kernel/time/timer_stats.c | 10 +-
2365 kernel/trace/Kconfig | 2 +
2366 kernel/trace/trace_syscalls.c | 8 +
2367 kernel/user_namespace.c | 15 +
2368 lib/Kconfig.debug | 13 +-
2369 lib/Kconfig.kasan | 2 +-
2370 lib/is_single_threaded.c | 3 +
2371 lib/list_debug.c | 65 +-
2373 lib/radix-tree.c | 12 +-
2375 lib/vsprintf.c | 39 +-
2376 localversion-grsec | 1 +
2378 mm/Kconfig.debug | 1 +
2380 mm/kmemleak.c | 4 +-
2382 mm/mempolicy.c | 12 +-
2388 mm/page_alloc.c | 2 +-
2389 mm/process_vm_access.c | 8 +-
2392 mm/slab_common.c | 2 +-
2396 mm/vmalloc.c | 82 +-
2398 net/appletalk/atalk_proc.c | 2 +-
2399 net/atm/lec.c | 6 +-
2400 net/atm/mpoa_caches.c | 42 +-
2401 net/can/bcm.c | 2 +-
2402 net/can/proc.c | 2 +-
2403 net/core/dev_ioctl.c | 7 +-
2404 net/core/filter.c | 8 +-
2405 net/core/net-procfs.c | 17 +-
2406 net/core/pktgen.c | 2 +-
2407 net/core/scm.c | 7 +
2408 net/core/sock.c | 3 +-
2409 net/core/sysctl_net_core.c | 2 +-
2410 net/decnet/dn_dev.c | 2 +-
2411 net/ipv4/Kconfig | 1 +
2412 net/ipv4/devinet.c | 6 +-
2413 net/ipv4/inet_hashtables.c | 4 +
2414 net/ipv4/ip_input.c | 7 +
2415 net/ipv4/ip_sockglue.c | 3 +-
2416 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
2417 net/ipv4/route.c | 6 +-
2418 net/ipv4/tcp_input.c | 6 +-
2419 net/ipv4/tcp_ipv4.c | 24 +-
2420 net/ipv4/tcp_minisocks.c | 9 +-
2421 net/ipv4/tcp_timer.c | 11 +
2422 net/ipv4/udp.c | 24 +
2423 net/ipv6/Kconfig | 1 +
2424 net/ipv6/addrconf.c | 13 +-
2425 net/ipv6/proc.c | 2 +-
2426 net/ipv6/tcp_ipv6.c | 23 +-
2427 net/ipv6/udp.c | 7 +
2428 net/ipx/ipx_proc.c | 2 +-
2429 net/irda/irproc.c | 2 +-
2430 net/iucv/af_iucv.c | 3 +
2431 net/llc/llc_proc.c | 2 +-
2432 net/netfilter/Kconfig | 10 +
2433 net/netfilter/Makefile | 1 +
2434 net/netfilter/nf_conntrack_core.c | 46 +-
2435 net/netfilter/nf_conntrack_helper.c | 2 +-
2436 net/netfilter/nf_conntrack_netlink.c | 2 +-
2437 net/netfilter/xt_gradm.c | 51 +
2438 net/netfilter/xt_hashlimit.c | 4 +-
2439 net/netfilter/xt_recent.c | 2 +-
2440 net/openvswitch/actions.c | 19 +-
2441 net/sctp/sm_sideeffect.c | 11 +-
2442 net/sctp/sm_statefuns.c | 17 +-
2443 net/socket.c | 75 +-
2444 net/sunrpc/Kconfig | 1 +
2445 net/sunrpc/cache.c | 2 +-
2446 net/sunrpc/stats.c | 2 +-
2447 net/sysctl_net.c | 2 +-
2448 net/unix/af_unix.c | 57 +-
2449 net/unix/garbage.c | 8 +-
2450 net/vmw_vsock/vmci_transport_notify.c | 30 +-
2451 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
2452 net/x25/sysctl_net_x25.c | 2 +-
2453 net/x25/x25_proc.c | 2 +-
2454 scripts/package/Makefile | 2 +-
2455 scripts/package/mkspec | 41 +-
2456 security/Kconfig | 369 +-
2457 security/apparmor/file.c | 4 +-
2458 security/apparmor/lsm.c | 8 +-
2459 security/commoncap.c | 36 +-
2460 security/keys/internal.h | 2 +-
2461 security/min_addr.c | 2 +
2462 security/smack/smack_lsm.c | 8 +-
2463 security/tomoyo/file.c | 12 +-
2464 security/tomoyo/mount.c | 4 +
2465 security/tomoyo/tomoyo.c | 20 +-
2466 security/yama/Kconfig | 2 +-
2467 security/yama/yama_lsm.c | 4 +-
2468 sound/core/timer.c | 4 +-
2469 sound/synth/emux/emux_seq.c | 14 +-
2470 sound/usb/line6/driver.c | 40 +-
2471 sound/usb/line6/toneport.c | 12 +-
2472 tools/gcc/.gitignore | 1 +
2473 tools/gcc/Makefile | 12 +
2474 tools/gcc/gen-random-seed.sh | 8 +
2475 tools/gcc/randomize_layout_plugin.c | 930 +++
2476 tools/gcc/size_overflow_plugin/.gitignore | 1 +
2477 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
2478 513 files changed, 33007 insertions(+), 3251 deletions(-)
2480 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
2481 Author: Brad Spengler <spender@grsecurity.net>
2482 Date: Mon Feb 15 10:51:41 2016 -0500
2484 Initial import of pax-linux-4.4.1-test3.patch
2486 Documentation/dontdiff | 46 +-
2487 Documentation/kbuild/makefiles.txt | 39 +-
2488 Documentation/kernel-parameters.txt | 28 +
2490 arch/alpha/include/asm/atomic.h | 10 +
2491 arch/alpha/include/asm/elf.h | 7 +
2492 arch/alpha/include/asm/pgalloc.h | 6 +
2493 arch/alpha/include/asm/pgtable.h | 11 +
2494 arch/alpha/kernel/module.c | 2 +-
2495 arch/alpha/kernel/osf_sys.c | 8 +-
2496 arch/alpha/mm/fault.c | 141 +-
2497 arch/arm/Kconfig | 3 +-
2498 arch/arm/include/asm/atomic.h | 323 +-
2499 arch/arm/include/asm/cache.h | 5 +-
2500 arch/arm/include/asm/cacheflush.h | 2 +-
2501 arch/arm/include/asm/checksum.h | 14 +-
2502 arch/arm/include/asm/cmpxchg.h | 4 +
2503 arch/arm/include/asm/cpuidle.h | 2 +-
2504 arch/arm/include/asm/domain.h | 42 +-
2505 arch/arm/include/asm/elf.h | 9 +-
2506 arch/arm/include/asm/fncpy.h | 2 +
2507 arch/arm/include/asm/futex.h | 1 +
2508 arch/arm/include/asm/kmap_types.h | 2 +-
2509 arch/arm/include/asm/mach/dma.h | 2 +-
2510 arch/arm/include/asm/mach/map.h | 16 +-
2511 arch/arm/include/asm/outercache.h | 2 +-
2512 arch/arm/include/asm/page.h | 3 +-
2513 arch/arm/include/asm/pgalloc.h | 20 +
2514 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
2515 arch/arm/include/asm/pgtable-2level.h | 3 +
2516 arch/arm/include/asm/pgtable-3level.h | 3 +
2517 arch/arm/include/asm/pgtable.h | 54 +-
2518 arch/arm/include/asm/smp.h | 2 +-
2519 arch/arm/include/asm/thread_info.h | 3 +
2520 arch/arm/include/asm/tls.h | 3 +
2521 arch/arm/include/asm/uaccess.h | 113 +-
2522 arch/arm/include/uapi/asm/ptrace.h | 2 +-
2523 arch/arm/kernel/armksyms.c | 2 +-
2524 arch/arm/kernel/cpuidle.c | 2 +-
2525 arch/arm/kernel/entry-armv.S | 109 +-
2526 arch/arm/kernel/entry-common.S | 40 +-
2527 arch/arm/kernel/entry-header.S | 55 +
2528 arch/arm/kernel/fiq.c | 3 +
2529 arch/arm/kernel/module-plts.c | 7 +-
2530 arch/arm/kernel/module.c | 38 +-
2531 arch/arm/kernel/patch.c | 2 +
2532 arch/arm/kernel/process.c | 92 +-
2533 arch/arm/kernel/reboot.c | 1 +
2534 arch/arm/kernel/setup.c | 20 +-
2535 arch/arm/kernel/signal.c | 35 +-
2536 arch/arm/kernel/smp.c | 2 +-
2537 arch/arm/kernel/tcm.c | 4 +-
2538 arch/arm/kernel/vmlinux.lds.S | 6 +-
2539 arch/arm/kvm/arm.c | 8 +-
2540 arch/arm/lib/copy_page.S | 1 +
2541 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2542 arch/arm/lib/delay.c | 2 +-
2543 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
2544 arch/arm/mach-exynos/suspend.c | 6 +-
2545 arch/arm/mach-mvebu/coherency.c | 4 +-
2546 arch/arm/mach-omap2/board-n8x0.c | 2 +-
2547 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
2548 arch/arm/mach-omap2/omap-smp.c | 1 +
2549 arch/arm/mach-omap2/omap_device.c | 4 +-
2550 arch/arm/mach-omap2/omap_device.h | 4 +-
2551 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2552 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2553 arch/arm/mach-omap2/wd_timer.c | 6 +-
2554 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
2555 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
2556 arch/arm/mach-tegra/irq.c | 1 +
2557 arch/arm/mach-ux500/pm.c | 1 +
2558 arch/arm/mach-zynq/platsmp.c | 1 +
2559 arch/arm/mm/Kconfig | 6 +-
2560 arch/arm/mm/cache-l2x0.c | 2 +-
2561 arch/arm/mm/context.c | 10 +-
2562 arch/arm/mm/fault.c | 146 +
2563 arch/arm/mm/fault.h | 12 +
2564 arch/arm/mm/init.c | 39 +
2565 arch/arm/mm/ioremap.c | 4 +-
2566 arch/arm/mm/mmap.c | 30 +-
2567 arch/arm/mm/mmu.c | 162 +-
2568 arch/arm/net/bpf_jit_32.c | 3 +
2569 arch/arm/plat-iop/setup.c | 2 +-
2570 arch/arm/plat-omap/sram.c | 2 +
2571 arch/arm64/include/asm/atomic.h | 10 +
2572 arch/arm64/include/asm/percpu.h | 8 +-
2573 arch/arm64/include/asm/pgalloc.h | 5 +
2574 arch/arm64/include/asm/uaccess.h | 1 +
2575 arch/arm64/mm/dma-mapping.c | 2 +-
2576 arch/avr32/include/asm/elf.h | 8 +-
2577 arch/avr32/include/asm/kmap_types.h | 4 +-
2578 arch/avr32/mm/fault.c | 27 +
2579 arch/frv/include/asm/atomic.h | 10 +
2580 arch/frv/include/asm/kmap_types.h | 2 +-
2581 arch/frv/mm/elf-fdpic.c | 3 +-
2582 arch/ia64/Makefile | 1 +
2583 arch/ia64/include/asm/atomic.h | 10 +
2584 arch/ia64/include/asm/elf.h | 7 +
2585 arch/ia64/include/asm/pgalloc.h | 12 +
2586 arch/ia64/include/asm/pgtable.h | 13 +-
2587 arch/ia64/include/asm/spinlock.h | 2 +-
2588 arch/ia64/include/asm/uaccess.h | 27 +-
2589 arch/ia64/kernel/module.c | 45 +-
2590 arch/ia64/kernel/palinfo.c | 2 +-
2591 arch/ia64/kernel/sys_ia64.c | 7 +
2592 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2593 arch/ia64/mm/fault.c | 32 +-
2594 arch/ia64/mm/init.c | 15 +-
2595 arch/m32r/lib/usercopy.c | 6 +
2596 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
2597 arch/mips/include/asm/atomic.h | 368 +-
2598 arch/mips/include/asm/elf.h | 7 +
2599 arch/mips/include/asm/exec.h | 2 +-
2600 arch/mips/include/asm/hw_irq.h | 2 +-
2601 arch/mips/include/asm/local.h | 57 +
2602 arch/mips/include/asm/page.h | 2 +-
2603 arch/mips/include/asm/pgalloc.h | 5 +
2604 arch/mips/include/asm/pgtable.h | 3 +
2605 arch/mips/include/asm/uaccess.h | 1 +
2606 arch/mips/kernel/binfmt_elfn32.c | 7 +
2607 arch/mips/kernel/binfmt_elfo32.c | 7 +
2608 arch/mips/kernel/irq-gt641xx.c | 2 +-
2609 arch/mips/kernel/irq.c | 6 +-
2610 arch/mips/kernel/pm-cps.c | 2 +-
2611 arch/mips/kernel/process.c | 12 -
2612 arch/mips/kernel/sync-r4k.c | 24 +-
2613 arch/mips/kernel/traps.c | 13 +-
2614 arch/mips/mm/fault.c | 25 +
2615 arch/mips/mm/mmap.c | 51 +-
2616 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2617 arch/mips/sni/rm200.c | 2 +-
2618 arch/mips/vr41xx/common/icu.c | 2 +-
2619 arch/mips/vr41xx/common/irq.c | 4 +-
2620 arch/parisc/include/asm/atomic.h | 10 +
2621 arch/parisc/include/asm/elf.h | 7 +
2622 arch/parisc/include/asm/pgalloc.h | 6 +
2623 arch/parisc/include/asm/pgtable.h | 11 +
2624 arch/parisc/include/asm/uaccess.h | 4 +-
2625 arch/parisc/kernel/module.c | 50 +-
2626 arch/parisc/kernel/sys_parisc.c | 15 +
2627 arch/parisc/kernel/traps.c | 4 +-
2628 arch/parisc/mm/fault.c | 140 +-
2629 arch/powerpc/include/asm/atomic.h | 329 +-
2630 arch/powerpc/include/asm/elf.h | 12 +
2631 arch/powerpc/include/asm/exec.h | 2 +-
2632 arch/powerpc/include/asm/kmap_types.h | 2 +-
2633 arch/powerpc/include/asm/local.h | 46 +
2634 arch/powerpc/include/asm/mman.h | 2 +-
2635 arch/powerpc/include/asm/page.h | 8 +-
2636 arch/powerpc/include/asm/page_64.h | 7 +-
2637 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2638 arch/powerpc/include/asm/pgtable.h | 1 +
2639 arch/powerpc/include/asm/pte-hash32.h | 1 +
2640 arch/powerpc/include/asm/reg.h | 1 +
2641 arch/powerpc/include/asm/smp.h | 2 +-
2642 arch/powerpc/include/asm/spinlock.h | 42 +-
2643 arch/powerpc/include/asm/uaccess.h | 141 +-
2644 arch/powerpc/kernel/Makefile | 5 +
2645 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2646 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2647 arch/powerpc/kernel/module_32.c | 15 +-
2648 arch/powerpc/kernel/process.c | 46 -
2649 arch/powerpc/kernel/signal_32.c | 2 +-
2650 arch/powerpc/kernel/signal_64.c | 2 +-
2651 arch/powerpc/kernel/traps.c | 21 +
2652 arch/powerpc/kernel/vdso.c | 5 +-
2653 arch/powerpc/lib/usercopy_64.c | 18 -
2654 arch/powerpc/mm/fault.c | 56 +-
2655 arch/powerpc/mm/mmap.c | 16 +
2656 arch/powerpc/mm/slice.c | 13 +-
2657 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
2658 arch/s390/include/asm/atomic.h | 10 +
2659 arch/s390/include/asm/elf.h | 7 +
2660 arch/s390/include/asm/exec.h | 2 +-
2661 arch/s390/include/asm/uaccess.h | 13 +-
2662 arch/s390/kernel/module.c | 22 +-
2663 arch/s390/kernel/process.c | 20 -
2664 arch/s390/mm/mmap.c | 16 +
2665 arch/score/include/asm/exec.h | 2 +-
2666 arch/score/kernel/process.c | 5 -
2667 arch/sh/mm/mmap.c | 22 +-
2668 arch/sparc/include/asm/atomic_64.h | 110 +-
2669 arch/sparc/include/asm/cache.h | 2 +-
2670 arch/sparc/include/asm/elf_32.h | 7 +
2671 arch/sparc/include/asm/elf_64.h | 7 +
2672 arch/sparc/include/asm/pgalloc_32.h | 1 +
2673 arch/sparc/include/asm/pgalloc_64.h | 1 +
2674 arch/sparc/include/asm/pgtable.h | 4 +
2675 arch/sparc/include/asm/pgtable_32.h | 15 +-
2676 arch/sparc/include/asm/pgtsrmmu.h | 5 +
2677 arch/sparc/include/asm/setup.h | 4 +-
2678 arch/sparc/include/asm/spinlock_64.h | 35 +-
2679 arch/sparc/include/asm/thread_info_32.h | 1 +
2680 arch/sparc/include/asm/thread_info_64.h | 2 +
2681 arch/sparc/include/asm/uaccess.h | 1 +
2682 arch/sparc/include/asm/uaccess_32.h | 28 +-
2683 arch/sparc/include/asm/uaccess_64.h | 24 +-
2684 arch/sparc/kernel/Makefile | 2 +-
2685 arch/sparc/kernel/prom_common.c | 2 +-
2686 arch/sparc/kernel/smp_64.c | 8 +-
2687 arch/sparc/kernel/sys_sparc_32.c | 2 +-
2688 arch/sparc/kernel/sys_sparc_64.c | 52 +-
2689 arch/sparc/kernel/traps_64.c | 27 +-
2690 arch/sparc/lib/Makefile | 2 +-
2691 arch/sparc/lib/atomic_64.S | 57 +-
2692 arch/sparc/lib/ksyms.c | 6 +-
2693 arch/sparc/mm/Makefile | 2 +-
2694 arch/sparc/mm/fault_32.c | 292 +
2695 arch/sparc/mm/fault_64.c | 486 +
2696 arch/sparc/mm/hugetlbpage.c | 22 +-
2697 arch/sparc/mm/init_64.c | 10 +-
2698 arch/tile/include/asm/atomic_64.h | 10 +
2699 arch/tile/include/asm/uaccess.h | 4 +-
2700 arch/um/Makefile | 4 +
2701 arch/um/include/asm/kmap_types.h | 2 +-
2702 arch/um/include/asm/page.h | 3 +
2703 arch/um/include/asm/pgtable-3level.h | 1 +
2704 arch/um/kernel/process.c | 16 -
2705 arch/x86/Kconfig | 26 +-
2706 arch/x86/Kconfig.cpu | 6 +-
2707 arch/x86/Kconfig.debug | 4 +-
2708 arch/x86/Makefile | 13 +-
2709 arch/x86/boot/Makefile | 3 +
2710 arch/x86/boot/bitops.h | 4 +-
2711 arch/x86/boot/boot.h | 2 +-
2712 arch/x86/boot/compressed/Makefile | 3 +
2713 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
2714 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
2715 arch/x86/boot/compressed/head_32.S | 4 +-
2716 arch/x86/boot/compressed/head_64.S | 12 +-
2717 arch/x86/boot/compressed/misc.c | 11 +-
2718 arch/x86/boot/cpucheck.c | 16 +-
2719 arch/x86/boot/header.S | 6 +-
2720 arch/x86/boot/memory.c | 2 +-
2721 arch/x86/boot/video-vesa.c | 1 +
2722 arch/x86/boot/video.c | 2 +-
2723 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
2724 arch/x86/crypto/aesni-intel_asm.S | 106 +-
2725 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
2726 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
2727 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
2728 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
2729 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
2730 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
2731 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
2732 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
2733 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
2734 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
2735 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
2736 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
2737 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
2738 arch/x86/crypto/sha256-avx-asm.S | 2 +
2739 arch/x86/crypto/sha256-avx2-asm.S | 2 +
2740 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
2741 arch/x86/crypto/sha512-avx-asm.S | 2 +
2742 arch/x86/crypto/sha512-avx2-asm.S | 2 +
2743 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
2744 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
2745 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
2746 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
2747 arch/x86/entry/calling.h | 86 +-
2748 arch/x86/entry/common.c | 28 +-
2749 arch/x86/entry/entry_32.S | 311 +-
2750 arch/x86/entry/entry_64.S | 625 +-
2751 arch/x86/entry/entry_64_compat.S | 67 +-
2752 arch/x86/entry/thunk_64.S | 2 +
2753 arch/x86/entry/vdso/Makefile | 2 +-
2754 arch/x86/entry/vdso/vdso2c.h | 8 +-
2755 arch/x86/entry/vdso/vma.c | 37 +-
2756 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
2757 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
2758 arch/x86/ia32/ia32_signal.c | 23 +-
2759 arch/x86/ia32/sys_ia32.c | 42 +-
2760 arch/x86/include/asm/alternative-asm.h | 43 +-
2761 arch/x86/include/asm/alternative.h | 4 +-
2762 arch/x86/include/asm/apic.h | 2 +-
2763 arch/x86/include/asm/apm.h | 4 +-
2764 arch/x86/include/asm/atomic.h | 230 +-
2765 arch/x86/include/asm/atomic64_32.h | 100 +
2766 arch/x86/include/asm/atomic64_64.h | 164 +-
2767 arch/x86/include/asm/bitops.h | 18 +-
2768 arch/x86/include/asm/boot.h | 2 +-
2769 arch/x86/include/asm/cache.h | 5 +-
2770 arch/x86/include/asm/checksum_32.h | 12 +-
2771 arch/x86/include/asm/cmpxchg.h | 39 +
2772 arch/x86/include/asm/compat.h | 4 +
2773 arch/x86/include/asm/cpufeature.h | 17 +-
2774 arch/x86/include/asm/desc.h | 78 +-
2775 arch/x86/include/asm/desc_defs.h | 6 +
2776 arch/x86/include/asm/div64.h | 2 +-
2777 arch/x86/include/asm/dma.h | 2 +
2778 arch/x86/include/asm/elf.h | 33 +-
2779 arch/x86/include/asm/emergency-restart.h | 2 +-
2780 arch/x86/include/asm/fpu/internal.h | 42 +-
2781 arch/x86/include/asm/fpu/types.h | 5 +-
2782 arch/x86/include/asm/futex.h | 14 +-
2783 arch/x86/include/asm/hw_irq.h | 4 +-
2784 arch/x86/include/asm/i8259.h | 2 +-
2785 arch/x86/include/asm/io.h | 22 +-
2786 arch/x86/include/asm/irqflags.h | 5 +
2787 arch/x86/include/asm/kprobes.h | 9 +-
2788 arch/x86/include/asm/local.h | 106 +-
2789 arch/x86/include/asm/mman.h | 15 +
2790 arch/x86/include/asm/mmu.h | 14 +-
2791 arch/x86/include/asm/mmu_context.h | 133 +-
2792 arch/x86/include/asm/module.h | 17 +-
2793 arch/x86/include/asm/nmi.h | 19 +-
2794 arch/x86/include/asm/page.h | 1 +
2795 arch/x86/include/asm/page_32.h | 12 +-
2796 arch/x86/include/asm/page_64.h | 14 +-
2797 arch/x86/include/asm/paravirt.h | 46 +-
2798 arch/x86/include/asm/paravirt_types.h | 15 +-
2799 arch/x86/include/asm/pgalloc.h | 23 +
2800 arch/x86/include/asm/pgtable-2level.h | 2 +
2801 arch/x86/include/asm/pgtable-3level.h | 7 +
2802 arch/x86/include/asm/pgtable.h | 126 +-
2803 arch/x86/include/asm/pgtable_32.h | 14 +-
2804 arch/x86/include/asm/pgtable_32_types.h | 24 +-
2805 arch/x86/include/asm/pgtable_64.h | 23 +-
2806 arch/x86/include/asm/pgtable_64_types.h | 5 +
2807 arch/x86/include/asm/pgtable_types.h | 26 +-
2808 arch/x86/include/asm/pmem.h | 2 +-
2809 arch/x86/include/asm/preempt.h | 2 +-
2810 arch/x86/include/asm/processor.h | 57 +-
2811 arch/x86/include/asm/ptrace.h | 15 +-
2812 arch/x86/include/asm/realmode.h | 4 +-
2813 arch/x86/include/asm/reboot.h | 10 +-
2814 arch/x86/include/asm/rmwcc.h | 84 +-
2815 arch/x86/include/asm/rwsem.h | 60 +-
2816 arch/x86/include/asm/segment.h | 27 +-
2817 arch/x86/include/asm/smap.h | 43 +
2818 arch/x86/include/asm/smp.h | 14 +-
2819 arch/x86/include/asm/stackprotector.h | 4 +-
2820 arch/x86/include/asm/stacktrace.h | 34 +-
2821 arch/x86/include/asm/switch_to.h | 4 +-
2822 arch/x86/include/asm/sys_ia32.h | 6 +-
2823 arch/x86/include/asm/thread_info.h | 27 +-
2824 arch/x86/include/asm/tlbflush.h | 77 +-
2825 arch/x86/include/asm/uaccess.h | 210 +-
2826 arch/x86/include/asm/uaccess_32.h | 28 +-
2827 arch/x86/include/asm/uaccess_64.h | 169 +-
2828 arch/x86/include/asm/word-at-a-time.h | 2 +-
2829 arch/x86/include/asm/x86_init.h | 10 +-
2830 arch/x86/include/asm/xen/page.h | 2 +-
2831 arch/x86/include/uapi/asm/e820.h | 2 +-
2832 arch/x86/kernel/Makefile | 2 +-
2833 arch/x86/kernel/acpi/boot.c | 4 +-
2834 arch/x86/kernel/acpi/sleep.c | 4 +
2835 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
2836 arch/x86/kernel/alternative.c | 124 +-
2837 arch/x86/kernel/apic/apic.c | 4 +-
2838 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
2839 arch/x86/kernel/apic/apic_noop.c | 2 +-
2840 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
2841 arch/x86/kernel/apic/io_apic.c | 8 +-
2842 arch/x86/kernel/apic/msi.c | 2 +-
2843 arch/x86/kernel/apic/probe_32.c | 4 +-
2844 arch/x86/kernel/apic/vector.c | 2 +
2845 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
2846 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
2847 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
2848 arch/x86/kernel/apm_32.c | 21 +-
2849 arch/x86/kernel/asm-offsets.c | 20 +
2850 arch/x86/kernel/asm-offsets_64.c | 1 +
2851 arch/x86/kernel/cpu/Makefile | 4 -
2852 arch/x86/kernel/cpu/amd.c | 2 +-
2853 arch/x86/kernel/cpu/bugs_64.c | 2 +
2854 arch/x86/kernel/cpu/common.c | 202 +-
2855 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
2856 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
2857 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
2858 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
2859 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
2860 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2861 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
2862 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
2863 arch/x86/kernel/cpu/perf_event.c | 10 +-
2864 arch/x86/kernel/cpu/perf_event.h | 2 +-
2865 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
2866 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
2867 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
2868 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
2869 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
2870 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
2871 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
2872 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
2873 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
2874 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
2875 arch/x86/kernel/crash_dump_64.c | 2 +-
2876 arch/x86/kernel/doublefault.c | 8 +-
2877 arch/x86/kernel/dumpstack.c | 24 +-
2878 arch/x86/kernel/dumpstack_32.c | 25 +-
2879 arch/x86/kernel/dumpstack_64.c | 62 +-
2880 arch/x86/kernel/e820.c | 4 +-
2881 arch/x86/kernel/early_printk.c | 1 +
2882 arch/x86/kernel/espfix_64.c | 44 +-
2883 arch/x86/kernel/fpu/core.c | 24 +-
2884 arch/x86/kernel/fpu/init.c | 40 +-
2885 arch/x86/kernel/fpu/regset.c | 22 +-
2886 arch/x86/kernel/fpu/signal.c | 20 +-
2887 arch/x86/kernel/fpu/xstate.c | 6 +-
2888 arch/x86/kernel/ftrace.c | 18 +-
2889 arch/x86/kernel/head64.c | 14 +-
2890 arch/x86/kernel/head_32.S | 235 +-
2891 arch/x86/kernel/head_64.S | 173 +-
2892 arch/x86/kernel/i386_ksyms_32.c | 12 +
2893 arch/x86/kernel/i8259.c | 10 +-
2894 arch/x86/kernel/io_delay.c | 2 +-
2895 arch/x86/kernel/ioport.c | 2 +-
2896 arch/x86/kernel/irq.c | 8 +-
2897 arch/x86/kernel/irq_32.c | 45 +-
2898 arch/x86/kernel/jump_label.c | 10 +-
2899 arch/x86/kernel/kgdb.c | 21 +-
2900 arch/x86/kernel/kprobes/core.c | 28 +-
2901 arch/x86/kernel/kprobes/opt.c | 16 +-
2902 arch/x86/kernel/ksysfs.c | 2 +-
2903 arch/x86/kernel/kvmclock.c | 20 +-
2904 arch/x86/kernel/ldt.c | 25 +
2905 arch/x86/kernel/livepatch.c | 11 +-
2906 arch/x86/kernel/machine_kexec_32.c | 6 +-
2907 arch/x86/kernel/mcount_64.S | 19 +-
2908 arch/x86/kernel/module.c | 78 +-
2909 arch/x86/kernel/msr.c | 2 +-
2910 arch/x86/kernel/nmi.c | 34 +-
2911 arch/x86/kernel/nmi_selftest.c | 4 +-
2912 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
2913 arch/x86/kernel/paravirt.c | 45 +-
2914 arch/x86/kernel/paravirt_patch_64.c | 8 +
2915 arch/x86/kernel/pci-calgary_64.c | 2 +-
2916 arch/x86/kernel/pci-iommu_table.c | 2 +-
2917 arch/x86/kernel/pci-swiotlb.c | 2 +-
2918 arch/x86/kernel/process.c | 80 +-
2919 arch/x86/kernel/process_32.c | 29 +-
2920 arch/x86/kernel/process_64.c | 14 +-
2921 arch/x86/kernel/ptrace.c | 20 +-
2922 arch/x86/kernel/pvclock.c | 8 +-
2923 arch/x86/kernel/reboot.c | 44 +-
2924 arch/x86/kernel/reboot_fixups_32.c | 2 +-
2925 arch/x86/kernel/relocate_kernel_64.S | 3 +-
2926 arch/x86/kernel/setup.c | 29 +-
2927 arch/x86/kernel/setup_percpu.c | 29 +-
2928 arch/x86/kernel/signal.c | 17 +-
2929 arch/x86/kernel/smp.c | 2 +-
2930 arch/x86/kernel/smpboot.c | 29 +-
2931 arch/x86/kernel/step.c | 6 +-
2932 arch/x86/kernel/sys_i386_32.c | 184 +
2933 arch/x86/kernel/sys_x86_64.c | 22 +-
2934 arch/x86/kernel/tboot.c | 22 +-
2935 arch/x86/kernel/time.c | 8 +-
2936 arch/x86/kernel/tls.c | 7 +-
2937 arch/x86/kernel/tracepoint.c | 4 +-
2938 arch/x86/kernel/traps.c | 53 +-
2939 arch/x86/kernel/tsc.c | 2 +-
2940 arch/x86/kernel/uprobes.c | 4 +-
2941 arch/x86/kernel/vm86_32.c | 6 +-
2942 arch/x86/kernel/vmlinux.lds.S | 153 +-
2943 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
2944 arch/x86/kernel/x86_init.c | 6 +-
2945 arch/x86/kvm/cpuid.c | 21 +-
2946 arch/x86/kvm/emulate.c | 6 +-
2947 arch/x86/kvm/i8259.c | 10 +-
2948 arch/x86/kvm/ioapic.c | 2 +
2949 arch/x86/kvm/lapic.c | 2 +-
2950 arch/x86/kvm/paging_tmpl.h | 2 +-
2951 arch/x86/kvm/svm.c | 10 +-
2952 arch/x86/kvm/vmx.c | 62 +-
2953 arch/x86/kvm/x86.c | 44 +-
2954 arch/x86/lguest/boot.c | 3 +-
2955 arch/x86/lib/atomic64_386_32.S | 164 +
2956 arch/x86/lib/atomic64_cx8_32.S | 98 +-
2957 arch/x86/lib/checksum_32.S | 99 +-
2958 arch/x86/lib/clear_page_64.S | 3 +
2959 arch/x86/lib/cmpxchg16b_emu.S | 3 +
2960 arch/x86/lib/copy_page_64.S | 14 +-
2961 arch/x86/lib/copy_user_64.S | 66 +-
2962 arch/x86/lib/csum-copy_64.S | 14 +-
2963 arch/x86/lib/csum-wrappers_64.c | 8 +-
2964 arch/x86/lib/getuser.S | 74 +-
2965 arch/x86/lib/insn.c | 8 +-
2966 arch/x86/lib/iomap_copy_64.S | 2 +
2967 arch/x86/lib/memcpy_64.S | 6 +
2968 arch/x86/lib/memmove_64.S | 3 +-
2969 arch/x86/lib/memset_64.S | 3 +
2970 arch/x86/lib/mmx_32.c | 243 +-
2971 arch/x86/lib/msr-reg.S | 2 +
2972 arch/x86/lib/putuser.S | 87 +-
2973 arch/x86/lib/rwsem.S | 6 +-
2974 arch/x86/lib/usercopy_32.c | 359 +-
2975 arch/x86/lib/usercopy_64.c | 22 +-
2976 arch/x86/math-emu/fpu_aux.c | 2 +-
2977 arch/x86/math-emu/fpu_entry.c | 4 +-
2978 arch/x86/math-emu/fpu_system.h | 2 +-
2979 arch/x86/mm/Makefile | 4 +
2980 arch/x86/mm/extable.c | 26 +-
2981 arch/x86/mm/fault.c | 570 +-
2982 arch/x86/mm/gup.c | 6 +-
2983 arch/x86/mm/highmem_32.c | 6 +
2984 arch/x86/mm/hugetlbpage.c | 24 +-
2985 arch/x86/mm/init.c | 111 +-
2986 arch/x86/mm/init_32.c | 111 +-
2987 arch/x86/mm/init_64.c | 46 +-
2988 arch/x86/mm/iomap_32.c | 4 +
2989 arch/x86/mm/ioremap.c | 52 +-
2990 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
2991 arch/x86/mm/mmap.c | 40 +-
2992 arch/x86/mm/mmio-mod.c | 10 +-
2993 arch/x86/mm/mpx.c | 6 +-
2994 arch/x86/mm/numa.c | 4 +-
2995 arch/x86/mm/pageattr.c | 42 +-
2996 arch/x86/mm/pat.c | 12 +-
2997 arch/x86/mm/pat_rbtree.c | 2 +-
2998 arch/x86/mm/pf_in.c | 10 +-
2999 arch/x86/mm/pgtable.c | 214 +-
3000 arch/x86/mm/pgtable_32.c | 3 +
3001 arch/x86/mm/setup_nx.c | 7 +
3002 arch/x86/mm/tlb.c | 4 +
3003 arch/x86/mm/uderef_64.c | 37 +
3004 arch/x86/net/bpf_jit.S | 11 +
3005 arch/x86/net/bpf_jit_comp.c | 13 +-
3006 arch/x86/oprofile/backtrace.c | 6 +-
3007 arch/x86/oprofile/nmi_int.c | 8 +-
3008 arch/x86/oprofile/op_model_amd.c | 8 +-
3009 arch/x86/oprofile/op_model_ppro.c | 7 +-
3010 arch/x86/oprofile/op_x86_model.h | 2 +-
3011 arch/x86/pci/intel_mid_pci.c | 2 +-
3012 arch/x86/pci/irq.c | 8 +-
3013 arch/x86/pci/pcbios.c | 144 +-
3014 arch/x86/platform/efi/efi_32.c | 24 +
3015 arch/x86/platform/efi/efi_64.c | 26 +-
3016 arch/x86/platform/efi/efi_stub_32.S | 64 +-
3017 arch/x86/platform/efi/efi_stub_64.S | 2 +
3018 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
3019 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
3020 arch/x86/platform/intel-mid/mfld.c | 4 +-
3021 arch/x86/platform/intel-mid/mrfl.c | 2 +-
3022 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
3023 arch/x86/platform/olpc/olpc_dt.c | 2 +-
3024 arch/x86/power/cpu.c | 11 +-
3025 arch/x86/realmode/init.c | 10 +-
3026 arch/x86/realmode/rm/Makefile | 3 +
3027 arch/x86/realmode/rm/header.S | 4 +-
3028 arch/x86/realmode/rm/reboot.S | 4 +
3029 arch/x86/realmode/rm/trampoline_32.S | 12 +-
3030 arch/x86/realmode/rm/trampoline_64.S | 3 +-
3031 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
3032 arch/x86/tools/Makefile | 2 +-
3033 arch/x86/tools/relocs.c | 96 +-
3034 arch/x86/um/mem_32.c | 2 +-
3035 arch/x86/um/tls_32.c | 2 +-
3036 arch/x86/xen/enlighten.c | 50 +-
3037 arch/x86/xen/mmu.c | 19 +-
3038 arch/x86/xen/smp.c | 16 +-
3039 arch/x86/xen/xen-asm_32.S | 2 +-
3040 arch/x86/xen/xen-head.S | 11 +
3041 arch/x86/xen/xen-ops.h | 2 -
3043 block/blk-cgroup.c | 18 +-
3044 block/blk-iopoll.c | 2 +-
3045 block/blk-map.c | 2 +-
3046 block/blk-softirq.c | 2 +-
3048 block/cfq-iosched.c | 4 +-
3049 block/compat_ioctl.c | 4 +-
3050 block/genhd.c | 9 +-
3051 block/partitions/efi.c | 8 +-
3052 block/scsi_ioctl.c | 29 +-
3053 crypto/cryptd.c | 4 +-
3054 crypto/crypto_user.c | 8 +-
3055 crypto/pcrypt.c | 2 +-
3056 crypto/zlib.c | 12 +-
3057 drivers/acpi/acpi_video.c | 2 +-
3058 drivers/acpi/apei/apei-internal.h | 2 +-
3059 drivers/acpi/apei/ghes.c | 10 +-
3060 drivers/acpi/bgrt.c | 6 +-
3061 drivers/acpi/blacklist.c | 4 +-
3062 drivers/acpi/bus.c | 4 +-
3063 drivers/acpi/device_pm.c | 4 +-
3064 drivers/acpi/ec.c | 2 +-
3065 drivers/acpi/pci_slot.c | 2 +-
3066 drivers/acpi/processor_idle.c | 2 +-
3067 drivers/acpi/processor_pdc.c | 2 +-
3068 drivers/acpi/sleep.c | 2 +-
3069 drivers/acpi/sysfs.c | 4 +-
3070 drivers/acpi/thermal.c | 2 +-
3071 drivers/acpi/video_detect.c | 7 +-
3072 drivers/ata/libata-core.c | 12 +-
3073 drivers/ata/libata-scsi.c | 2 +-
3074 drivers/ata/libata.h | 2 +-
3075 drivers/ata/pata_arasan_cf.c | 4 +-
3076 drivers/atm/adummy.c | 2 +-
3077 drivers/atm/ambassador.c | 8 +-
3078 drivers/atm/atmtcp.c | 14 +-
3079 drivers/atm/eni.c | 10 +-
3080 drivers/atm/firestream.c | 8 +-
3081 drivers/atm/fore200e.c | 14 +-
3082 drivers/atm/he.c | 18 +-
3083 drivers/atm/horizon.c | 4 +-
3084 drivers/atm/idt77252.c | 36 +-
3085 drivers/atm/iphase.c | 34 +-
3086 drivers/atm/lanai.c | 12 +-
3087 drivers/atm/nicstar.c | 46 +-
3088 drivers/atm/solos-pci.c | 4 +-
3089 drivers/atm/suni.c | 4 +-
3090 drivers/atm/uPD98402.c | 16 +-
3091 drivers/atm/zatm.c | 6 +-
3092 drivers/base/bus.c | 4 +-
3093 drivers/base/devres.c | 4 +-
3094 drivers/base/devtmpfs.c | 8 +-
3095 drivers/base/node.c | 2 +-
3096 drivers/base/platform-msi.c | 20 +-
3097 drivers/base/power/domain.c | 7 +-
3098 drivers/base/power/runtime.c | 6 +-
3099 drivers/base/power/sysfs.c | 2 +-
3100 drivers/base/power/wakeup.c | 8 +-
3101 drivers/base/regmap/regmap-debugfs.c | 4 +-
3102 drivers/base/regmap/regmap.c | 4 +-
3103 drivers/base/syscore.c | 4 +-
3104 drivers/block/cciss.c | 28 +-
3105 drivers/block/cciss.h | 2 +-
3106 drivers/block/cpqarray.c | 28 +-
3107 drivers/block/cpqarray.h | 2 +-
3108 drivers/block/drbd/drbd_bitmap.c | 2 +-
3109 drivers/block/drbd/drbd_int.h | 8 +-
3110 drivers/block/drbd/drbd_main.c | 12 +-
3111 drivers/block/drbd/drbd_nl.c | 4 +-
3112 drivers/block/drbd/drbd_receiver.c | 38 +-
3113 drivers/block/drbd/drbd_worker.c | 14 +-
3114 drivers/block/pktcdvd.c | 4 +-
3115 drivers/block/rbd.c | 2 +-
3116 drivers/bluetooth/btwilink.c | 2 +-
3117 drivers/bus/arm-cci.c | 12 +-
3118 drivers/cdrom/cdrom.c | 11 +-
3119 drivers/cdrom/gdrom.c | 1 -
3120 drivers/char/agp/compat_ioctl.c | 2 +-
3121 drivers/char/agp/frontend.c | 4 +-
3122 drivers/char/agp/intel-gtt.c | 4 +-
3123 drivers/char/hpet.c | 2 +-
3124 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
3125 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
3126 drivers/char/ipmi/ipmi_ssif.c | 12 +-
3127 drivers/char/mem.c | 47 +-
3128 drivers/char/nvram.c | 2 +-
3129 drivers/char/pcmcia/synclink_cs.c | 16 +-
3130 drivers/char/random.c | 12 +-
3131 drivers/char/sonypi.c | 11 +-
3132 drivers/char/tpm/tpm_acpi.c | 3 +-
3133 drivers/char/tpm/tpm_eventlog.c | 5 +-
3134 drivers/char/virtio_console.c | 6 +-
3135 drivers/clk/clk-composite.c | 2 +-
3136 drivers/clk/samsung/clk.h | 2 +-
3137 drivers/clk/socfpga/clk-gate.c | 9 +-
3138 drivers/clk/socfpga/clk-pll.c | 9 +-
3139 drivers/clk/ti/clk.c | 8 +-
3140 drivers/cpufreq/acpi-cpufreq.c | 17 +-
3141 drivers/cpufreq/cpufreq-dt.c | 4 +-
3142 drivers/cpufreq/cpufreq.c | 30 +-
3143 drivers/cpufreq/cpufreq_governor.c | 2 +-
3144 drivers/cpufreq/cpufreq_governor.h | 4 +-
3145 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
3146 drivers/cpufreq/intel_pstate.c | 38 +-
3147 drivers/cpufreq/p4-clockmod.c | 12 +-
3148 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
3149 drivers/cpufreq/speedstep-centrino.c | 7 +-
3150 drivers/cpuidle/driver.c | 2 +-
3151 drivers/cpuidle/dt_idle_states.c | 2 +-
3152 drivers/cpuidle/governor.c | 2 +-
3153 drivers/cpuidle/sysfs.c | 2 +-
3154 drivers/crypto/hifn_795x.c | 4 +-
3155 drivers/devfreq/devfreq.c | 4 +-
3156 drivers/dma/sh/shdma-base.c | 4 +-
3157 drivers/dma/sh/shdmac.c | 2 +-
3158 drivers/edac/edac_device.c | 4 +-
3159 drivers/edac/edac_mc_sysfs.c | 2 +-
3160 drivers/edac/edac_pci.c | 4 +-
3161 drivers/edac/edac_pci_sysfs.c | 22 +-
3162 drivers/edac/mce_amd.h | 2 +-
3163 drivers/firewire/core-card.c | 6 +-
3164 drivers/firewire/core-device.c | 2 +-
3165 drivers/firewire/core-transaction.c | 1 +
3166 drivers/firewire/core.h | 1 +
3167 drivers/firmware/dmi-id.c | 2 +-
3168 drivers/firmware/dmi_scan.c | 12 +-
3169 drivers/firmware/efi/cper.c | 8 +-
3170 drivers/firmware/efi/efi.c | 12 +-
3171 drivers/firmware/efi/efivars.c | 2 +-
3172 drivers/firmware/efi/runtime-map.c | 2 +-
3173 drivers/firmware/google/gsmi.c | 2 +-
3174 drivers/firmware/google/memconsole.c | 7 +-
3175 drivers/firmware/memmap.c | 2 +-
3176 drivers/firmware/psci.c | 2 +-
3177 drivers/gpio/gpio-davinci.c | 6 +-
3178 drivers/gpio/gpio-em.c | 2 +-
3179 drivers/gpio/gpio-ich.c | 2 +-
3180 drivers/gpio/gpio-omap.c | 4 +-
3181 drivers/gpio/gpio-rcar.c | 2 +-
3182 drivers/gpio/gpio-vr41xx.c | 2 +-
3183 drivers/gpio/gpiolib.c | 12 +-
3184 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
3185 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
3186 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
3187 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
3188 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
3189 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
3190 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
3191 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
3192 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
3193 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
3194 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
3195 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
3196 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
3197 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
3198 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
3199 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
3200 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
3201 drivers/gpu/drm/armada/armada_drv.c | 3 +-
3202 drivers/gpu/drm/drm_crtc.c | 2 +-
3203 drivers/gpu/drm/drm_drv.c | 2 +-
3204 drivers/gpu/drm/drm_fops.c | 12 +-
3205 drivers/gpu/drm/drm_global.c | 14 +-
3206 drivers/gpu/drm/drm_info.c | 13 +-
3207 drivers/gpu/drm/drm_ioc32.c | 13 +-
3208 drivers/gpu/drm/drm_ioctl.c | 2 +-
3209 drivers/gpu/drm/drm_pci.c | 9 +-
3210 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
3211 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
3212 drivers/gpu/drm/gma500/psb_drv.c | 1 -
3213 drivers/gpu/drm/i810/i810_dma.c | 2 +-
3214 drivers/gpu/drm/i810/i810_drv.c | 6 +-
3215 drivers/gpu/drm/i810/i810_drv.h | 6 +-
3216 drivers/gpu/drm/i915/i915_dma.c | 4 +-
3217 drivers/gpu/drm/i915/i915_drv.c | 7 +-
3218 drivers/gpu/drm/i915/i915_drv.h | 2 +-
3219 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
3220 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
3221 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
3222 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
3223 drivers/gpu/drm/i915/i915_irq.c | 88 +-
3224 drivers/gpu/drm/i915/intel_display.c | 26 +-
3225 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
3226 drivers/gpu/drm/mga/mga_drv.c | 5 +-
3227 drivers/gpu/drm/mga/mga_drv.h | 6 +-
3228 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
3229 drivers/gpu/drm/mga/mga_irq.c | 8 +-
3230 drivers/gpu/drm/mga/mga_state.c | 2 +-
3231 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
3232 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
3233 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
3234 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
3235 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
3236 drivers/gpu/drm/omapdrm/Makefile | 2 +-
3237 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
3238 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
3239 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
3240 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
3241 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
3242 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
3243 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
3244 drivers/gpu/drm/r128/r128_cce.c | 2 +-
3245 drivers/gpu/drm/r128/r128_drv.c | 4 +-
3246 drivers/gpu/drm/r128/r128_drv.h | 6 +-
3247 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
3248 drivers/gpu/drm/r128/r128_irq.c | 4 +-
3249 drivers/gpu/drm/r128/r128_state.c | 6 +-
3250 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
3251 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
3252 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
3253 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
3254 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
3255 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
3256 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
3257 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
3258 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
3259 drivers/gpu/drm/savage/savage_bci.c | 2 +-
3260 drivers/gpu/drm/savage/savage_drv.c | 5 +-
3261 drivers/gpu/drm/savage/savage_drv.h | 2 +-
3262 drivers/gpu/drm/sis/sis_drv.c | 5 +-
3263 drivers/gpu/drm/sis/sis_drv.h | 2 +-
3264 drivers/gpu/drm/sis/sis_mm.c | 2 +-
3265 drivers/gpu/drm/tegra/dc.c | 2 +-
3266 drivers/gpu/drm/tegra/dsi.c | 2 +-
3267 drivers/gpu/drm/tegra/hdmi.c | 2 +-
3268 drivers/gpu/drm/tegra/sor.c | 7 +-
3269 drivers/gpu/drm/tilcdc/Makefile | 6 +-
3270 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
3271 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
3272 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
3273 drivers/gpu/drm/udl/udl_fb.c | 1 -
3274 drivers/gpu/drm/via/via_dma.c | 2 +-
3275 drivers/gpu/drm/via/via_drv.c | 5 +-
3276 drivers/gpu/drm/via/via_drv.h | 6 +-
3277 drivers/gpu/drm/via/via_irq.c | 18 +-
3278 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
3279 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
3280 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
3281 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
3282 drivers/gpu/vga/vga_switcheroo.c | 4 +-
3283 drivers/hid/hid-core.c | 4 +-
3284 drivers/hid/hid-sensor-custom.c | 2 +-
3285 drivers/hv/channel.c | 6 +-
3286 drivers/hv/hv.c | 4 +-
3287 drivers/hv/hv_balloon.c | 18 +-
3288 drivers/hv/hyperv_vmbus.h | 2 +-
3289 drivers/hwmon/acpi_power_meter.c | 6 +-
3290 drivers/hwmon/applesmc.c | 2 +-
3291 drivers/hwmon/asus_atk0110.c | 10 +-
3292 drivers/hwmon/coretemp.c | 2 +-
3293 drivers/hwmon/dell-smm-hwmon.c | 2 +-
3294 drivers/hwmon/ibmaem.c | 2 +-
3295 drivers/hwmon/iio_hwmon.c | 2 +-
3296 drivers/hwmon/nct6683.c | 6 +-
3297 drivers/hwmon/nct6775.c | 6 +-
3298 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
3299 drivers/hwmon/sht15.c | 12 +-
3300 drivers/hwmon/via-cputemp.c | 2 +-
3301 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
3302 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
3303 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
3304 drivers/i2c/i2c-dev.c | 2 +-
3305 drivers/ide/ide-cd.c | 2 +-
3306 drivers/ide/ide-disk.c | 2 +-
3307 drivers/iio/industrialio-core.c | 2 +-
3308 drivers/iio/magnetometer/ak8975.c | 2 +-
3309 drivers/infiniband/core/cm.c | 32 +-
3310 drivers/infiniband/core/fmr_pool.c | 20 +-
3311 drivers/infiniband/core/netlink.c | 5 +-
3312 drivers/infiniband/core/uverbs_cmd.c | 3 +
3313 drivers/infiniband/hw/cxgb4/device.c | 6 +-
3314 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
3315 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
3316 drivers/infiniband/hw/mlx4/mad.c | 2 +-
3317 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
3318 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
3319 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
3320 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
3321 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
3322 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
3323 drivers/infiniband/hw/nes/nes.c | 4 +-
3324 drivers/infiniband/hw/nes/nes.h | 40 +-
3325 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
3326 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
3327 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
3328 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
3329 drivers/infiniband/hw/qib/qib.h | 1 +
3330 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
3331 drivers/input/evdev.c | 2 +-
3332 drivers/input/gameport/gameport.c | 4 +-
3333 drivers/input/input.c | 4 +-
3334 drivers/input/joystick/sidewinder.c | 1 +
3335 drivers/input/misc/ims-pcu.c | 4 +-
3336 drivers/input/mouse/psmouse.h | 2 +-
3337 drivers/input/mousedev.c | 2 +-
3338 drivers/input/serio/serio.c | 4 +-
3339 drivers/input/serio/serio_raw.c | 4 +-
3340 drivers/input/touchscreen/htcpen.c | 2 +-
3341 drivers/iommu/arm-smmu-v3.c | 2 +-
3342 drivers/iommu/arm-smmu.c | 43 +-
3343 drivers/iommu/io-pgtable-arm.c | 101 +-
3344 drivers/iommu/io-pgtable.c | 11 +-
3345 drivers/iommu/io-pgtable.h | 19 +-
3346 drivers/iommu/iommu.c | 2 +-
3347 drivers/iommu/ipmmu-vmsa.c | 13 +-
3348 drivers/iommu/irq_remapping.c | 2 +-
3349 drivers/irqchip/irq-gic.c | 2 +-
3350 drivers/irqchip/irq-i8259.c | 2 +-
3351 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
3352 drivers/isdn/capi/capi.c | 10 +-
3353 drivers/isdn/gigaset/interface.c | 8 +-
3354 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
3355 drivers/isdn/hardware/avm/b1.c | 4 +-
3356 drivers/isdn/i4l/isdn_common.c | 2 +
3357 drivers/isdn/i4l/isdn_tty.c | 22 +-
3358 drivers/isdn/icn/icn.c | 2 +-
3359 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
3360 drivers/lguest/core.c | 10 +-
3361 drivers/lguest/page_tables.c | 2 +-
3362 drivers/lguest/x86/core.c | 12 +-
3363 drivers/lguest/x86/switcher_32.S | 27 +-
3364 drivers/md/bcache/alloc.c | 2 +-
3365 drivers/md/bcache/bcache.h | 10 +-
3366 drivers/md/bcache/btree.c | 2 +-
3367 drivers/md/bcache/closure.h | 2 +-
3368 drivers/md/bcache/io.c | 10 +-
3369 drivers/md/bcache/journal.c | 2 +-
3370 drivers/md/bcache/stats.c | 26 +-
3371 drivers/md/bcache/stats.h | 16 +-
3372 drivers/md/bcache/super.c | 2 +-
3373 drivers/md/bcache/sysfs.c | 20 +-
3374 drivers/md/bitmap.c | 2 +-
3375 drivers/md/dm-cache-target.c | 98 +-
3376 drivers/md/dm-ioctl.c | 2 +-
3377 drivers/md/dm-raid.c | 2 +-
3378 drivers/md/dm-raid1.c | 18 +-
3379 drivers/md/dm-stats.c | 6 +-
3380 drivers/md/dm-stripe.c | 10 +-
3381 drivers/md/dm-table.c | 2 +-
3382 drivers/md/dm-thin-metadata.c | 4 +-
3383 drivers/md/dm.c | 28 +-
3384 drivers/md/md.c | 37 +-
3385 drivers/md/md.h | 8 +-
3386 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3387 drivers/md/persistent-data/dm-space-map.h | 1 +
3388 drivers/md/raid1.c | 8 +-
3389 drivers/md/raid10.c | 20 +-
3390 drivers/md/raid5.c | 26 +-
3391 drivers/media/dvb-core/dvbdev.c | 2 +-
3392 drivers/media/dvb-frontends/af9033.h | 2 +-
3393 drivers/media/dvb-frontends/dib3000.h | 2 +-
3394 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3395 drivers/media/dvb-frontends/dib8000.h | 2 +-
3396 drivers/media/pci/cx88/cx88-video.c | 6 +-
3397 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
3398 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3399 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3400 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
3401 drivers/media/pci/tw68/tw68-core.c | 2 +-
3402 drivers/media/pci/zoran/zoran.h | 1 -
3403 drivers/media/pci/zoran/zoran_driver.c | 3 -
3404 drivers/media/platform/omap/omap_vout.c | 11 +-
3405 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3406 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3407 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3408 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3409 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
3410 drivers/media/radio/radio-cadet.c | 2 +
3411 drivers/media/radio/radio-maxiradio.c | 2 +-
3412 drivers/media/radio/radio-shark.c | 2 +-
3413 drivers/media/radio/radio-shark2.c | 2 +-
3414 drivers/media/radio/radio-si476x.c | 2 +-
3415 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
3416 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
3417 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3418 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
3419 drivers/memory/omap-gpmc.c | 21 +-
3420 drivers/message/fusion/mptsas.c | 34 +-
3421 drivers/mfd/ab8500-debugfs.c | 2 +-
3422 drivers/mfd/kempld-core.c | 2 +-
3423 drivers/mfd/max8925-i2c.c | 2 +-
3424 drivers/mfd/tps65910.c | 2 +-
3425 drivers/mfd/twl4030-irq.c | 9 +-
3426 drivers/misc/c2port/core.c | 4 +-
3427 drivers/misc/kgdbts.c | 4 +-
3428 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3429 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
3430 drivers/misc/mic/scif/scif_api.c | 10 +-
3431 drivers/misc/mic/scif/scif_rb.c | 8 +-
3432 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3433 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3434 drivers/misc/sgi-gru/grutables.h | 158 +-
3435 drivers/misc/sgi-xp/xp.h | 2 +-
3436 drivers/misc/sgi-xp/xpc.h | 3 +-
3437 drivers/misc/sgi-xp/xpc_main.c | 2 +-
3438 drivers/mmc/host/dw_mmc.h | 2 +-
3439 drivers/mmc/host/mmci.c | 4 +-
3440 drivers/mmc/host/omap_hsmmc.c | 4 +-
3441 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3442 drivers/mmc/host/sdhci-s3c.c | 8 +-
3443 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3444 drivers/mtd/nand/denali.c | 1 +
3445 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
3446 drivers/mtd/nftlmount.c | 1 +
3447 drivers/mtd/sm_ftl.c | 2 +-
3448 drivers/net/bonding/bond_netlink.c | 2 +-
3449 drivers/net/caif/caif_hsi.c | 2 +-
3450 drivers/net/can/Kconfig | 2 +-
3451 drivers/net/can/dev.c | 2 +-
3452 drivers/net/can/vcan.c | 2 +-
3453 drivers/net/dummy.c | 2 +-
3454 drivers/net/ethernet/8390/ax88796.c | 4 +-
3455 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
3456 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
3457 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
3458 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
3459 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3460 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
3461 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3462 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3463 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
3464 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
3465 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
3466 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3467 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3468 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3469 drivers/net/ethernet/broadcom/tg3.h | 1 +
3470 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3471 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
3472 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
3473 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
3474 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
3475 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3476 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3477 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3478 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
3479 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
3480 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
3481 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3482 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
3483 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3484 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3485 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3486 drivers/net/ethernet/realtek/r8169.c | 8 +-
3487 drivers/net/ethernet/sfc/ptp.c | 2 +-
3488 drivers/net/ethernet/sfc/selftest.c | 20 +-
3489 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
3490 drivers/net/ethernet/via/via-rhine.c | 2 +-
3491 drivers/net/geneve.c | 2 +-
3492 drivers/net/hyperv/hyperv_net.h | 2 +-
3493 drivers/net/hyperv/rndis_filter.c | 7 +-
3494 drivers/net/ifb.c | 2 +-
3495 drivers/net/ipvlan/ipvlan_core.c | 2 +-
3496 drivers/net/irda/vlsi_ir.c | 18 +-
3497 drivers/net/irda/vlsi_ir.h | 14 +-
3498 drivers/net/macvlan.c | 20 +-
3499 drivers/net/macvtap.c | 10 +-
3500 drivers/net/nlmon.c | 2 +-
3501 drivers/net/phy/phy_device.c | 6 +-
3502 drivers/net/ppp/ppp_generic.c | 4 +-
3503 drivers/net/slip/slhc.c | 2 +-
3504 drivers/net/team/team.c | 4 +-
3505 drivers/net/tun.c | 7 +-
3506 drivers/net/usb/hso.c | 23 +-
3507 drivers/net/usb/r8152.c | 2 +-
3508 drivers/net/usb/sierra_net.c | 4 +-
3509 drivers/net/virtio_net.c | 2 +-
3510 drivers/net/vrf.c | 2 +-
3511 drivers/net/vxlan.c | 4 +-
3512 drivers/net/wimax/i2400m/rx.c | 2 +-
3513 drivers/net/wireless/airo.c | 2 +-
3514 drivers/net/wireless/at76c50x-usb.c | 2 +-
3515 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3516 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3517 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3518 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3519 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3520 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3521 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3522 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3523 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3524 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3525 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3526 drivers/net/wireless/b43/phy_lp.c | 2 +-
3527 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
3528 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
3529 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
3530 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
3531 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
3532 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3533 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
3534 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
3535 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3536 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3537 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3538 drivers/of/fdt.c | 4 +-
3539 drivers/oprofile/buffer_sync.c | 8 +-
3540 drivers/oprofile/event_buffer.c | 2 +-
3541 drivers/oprofile/oprof.c | 2 +-
3542 drivers/oprofile/oprofile_stats.c | 10 +-
3543 drivers/oprofile/oprofile_stats.h | 10 +-
3544 drivers/oprofile/oprofilefs.c | 6 +-
3545 drivers/oprofile/timer_int.c | 2 +-
3546 drivers/parport/procfs.c | 4 +-
3547 drivers/pci/host/pci-host-generic.c | 2 +-
3548 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3549 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3550 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3551 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3552 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3553 drivers/pci/hotplug/pciehp_core.c | 2 +-
3554 drivers/pci/msi.c | 22 +-
3555 drivers/pci/pci-sysfs.c | 6 +-
3556 drivers/pci/pci.h | 2 +-
3557 drivers/pci/pcie/aspm.c | 6 +-
3558 drivers/pci/pcie/portdrv_pci.c | 2 +-
3559 drivers/pci/probe.c | 2 +-
3560 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3561 drivers/pinctrl/pinctrl-at91.c | 5 +-
3562 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3563 drivers/platform/x86/alienware-wmi.c | 4 +-
3564 drivers/platform/x86/compal-laptop.c | 2 +-
3565 drivers/platform/x86/hdaps.c | 2 +-
3566 drivers/platform/x86/ibm_rtl.c | 2 +-
3567 drivers/platform/x86/intel_oaktrail.c | 2 +-
3568 drivers/platform/x86/msi-laptop.c | 16 +-
3569 drivers/platform/x86/msi-wmi.c | 2 +-
3570 drivers/platform/x86/samsung-laptop.c | 2 +-
3571 drivers/platform/x86/samsung-q10.c | 2 +-
3572 drivers/platform/x86/sony-laptop.c | 14 +-
3573 drivers/platform/x86/thinkpad_acpi.c | 2 +-
3574 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3575 drivers/pnp/pnpbios/core.c | 2 +-
3576 drivers/power/pda_power.c | 7 +-
3577 drivers/power/power_supply.h | 4 +-
3578 drivers/power/power_supply_core.c | 7 +-
3579 drivers/power/power_supply_sysfs.c | 6 +-
3580 drivers/power/reset/at91-reset.c | 5 +-
3581 drivers/powercap/powercap_sys.c | 136 +-
3582 drivers/ptp/ptp_private.h | 2 +-
3583 drivers/ptp/ptp_sysfs.c | 2 +-
3584 drivers/regulator/core.c | 4 +-
3585 drivers/regulator/max8660.c | 6 +-
3586 drivers/regulator/max8973-regulator.c | 16 +-
3587 drivers/regulator/mc13892-regulator.c | 8 +-
3588 drivers/rtc/rtc-armada38x.c | 7 +-
3589 drivers/rtc/rtc-cmos.c | 4 +-
3590 drivers/rtc/rtc-ds1307.c | 2 +-
3591 drivers/rtc/rtc-m48t59.c | 4 +-
3592 drivers/rtc/rtc-rv8803.c | 15 +-
3593 drivers/rtc/rtc-test.c | 6 +-
3594 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
3595 drivers/scsi/bfa/bfa_ioc.h | 4 +-
3596 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3597 drivers/scsi/hosts.c | 4 +-
3598 drivers/scsi/hpsa.c | 38 +-
3599 drivers/scsi/hpsa.h | 2 +-
3600 drivers/scsi/hptiop.c | 2 -
3601 drivers/scsi/hptiop.h | 1 -
3602 drivers/scsi/ipr.c | 6 +-
3603 drivers/scsi/ipr.h | 2 +-
3604 drivers/scsi/libfc/fc_exch.c | 50 +-
3605 drivers/scsi/libsas/sas_ata.c | 2 +-
3606 drivers/scsi/lpfc/lpfc.h | 8 +-
3607 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3608 drivers/scsi/lpfc/lpfc_init.c | 6 +-
3609 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3610 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3611 drivers/scsi/pmcraid.c | 20 +-
3612 drivers/scsi/pmcraid.h | 8 +-
3613 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3614 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
3615 drivers/scsi/qla2xxx/qla_os.c | 6 +-
3616 drivers/scsi/qla2xxx/qla_target.c | 10 +-
3617 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3618 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3619 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
3620 drivers/scsi/scsi.c | 2 +-
3621 drivers/scsi/scsi_lib.c | 8 +-
3622 drivers/scsi/scsi_sysfs.c | 2 +-
3623 drivers/scsi/scsi_transport_fc.c | 8 +-
3624 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3625 drivers/scsi/scsi_transport_srp.c | 6 +-
3626 drivers/scsi/sd.c | 6 +-
3627 drivers/scsi/sg.c | 2 +-
3628 drivers/scsi/sr.c | 21 +-
3629 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3630 drivers/spi/spi.c | 2 +-
3631 drivers/staging/android/timed_output.c | 6 +-
3632 drivers/staging/comedi/comedi_fops.c | 8 +-
3633 drivers/staging/fbtft/fbtft-core.c | 2 +-
3634 drivers/staging/fbtft/fbtft.h | 2 +-
3635 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3636 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3637 drivers/staging/iio/adc/ad7280a.c | 4 +-
3638 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3639 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3640 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3641 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
3642 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3643 drivers/staging/octeon/ethernet-rx.c | 20 +-
3644 drivers/staging/octeon/ethernet.c | 8 +-
3645 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
3646 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
3647 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
3648 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3649 drivers/staging/sm750fb/sm750.c | 14 +-
3650 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
3651 drivers/target/sbp/sbp_target.c | 4 +-
3652 drivers/thermal/cpu_cooling.c | 9 +-
3653 drivers/thermal/devfreq_cooling.c | 19 +-
3654 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
3655 drivers/thermal/of-thermal.c | 17 +-
3656 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
3657 drivers/tty/cyclades.c | 6 +-
3658 drivers/tty/hvc/hvc_console.c | 14 +-
3659 drivers/tty/hvc/hvcs.c | 21 +-
3660 drivers/tty/hvc/hvsi.c | 22 +-
3661 drivers/tty/hvc/hvsi_lib.c | 4 +-
3662 drivers/tty/ipwireless/tty.c | 27 +-
3663 drivers/tty/moxa.c | 2 +-
3664 drivers/tty/n_gsm.c | 4 +-
3665 drivers/tty/n_tty.c | 19 +-
3666 drivers/tty/pty.c | 4 +-
3667 drivers/tty/rocket.c | 6 +-
3668 drivers/tty/serial/8250/8250_core.c | 10 +-
3669 drivers/tty/serial/ifx6x60.c | 2 +-
3670 drivers/tty/serial/ioc4_serial.c | 6 +-
3671 drivers/tty/serial/kgdb_nmi.c | 4 +-
3672 drivers/tty/serial/kgdboc.c | 32 +-
3673 drivers/tty/serial/msm_serial.c | 4 +-
3674 drivers/tty/serial/samsung.c | 9 +-
3675 drivers/tty/serial/serial_core.c | 8 +-
3676 drivers/tty/synclink.c | 34 +-
3677 drivers/tty/synclink_gt.c | 28 +-
3678 drivers/tty/synclinkmp.c | 34 +-
3679 drivers/tty/tty_io.c | 2 +-
3680 drivers/tty/tty_ldisc.c | 8 +-
3681 drivers/tty/tty_port.c | 22 +-
3682 drivers/uio/uio.c | 13 +-
3683 drivers/usb/atm/cxacru.c | 2 +-
3684 drivers/usb/atm/usbatm.c | 24 +-
3685 drivers/usb/class/cdc-acm.h | 2 +-
3686 drivers/usb/core/devices.c | 6 +-
3687 drivers/usb/core/devio.c | 12 +-
3688 drivers/usb/core/hcd.c | 4 +-
3689 drivers/usb/core/sysfs.c | 2 +-
3690 drivers/usb/core/usb.c | 2 +-
3691 drivers/usb/early/ehci-dbgp.c | 16 +-
3692 drivers/usb/gadget/function/u_serial.c | 22 +-
3693 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3694 drivers/usb/host/ehci-hcd.c | 2 +-
3695 drivers/usb/host/ehci-hub.c | 4 +-
3696 drivers/usb/host/ehci-q.c | 4 +-
3697 drivers/usb/host/fotg210-hcd.c | 2 +-
3698 drivers/usb/host/hwa-hc.c | 2 +-
3699 drivers/usb/host/ohci-hcd.c | 2 +-
3700 drivers/usb/host/r8a66597.h | 2 +-
3701 drivers/usb/host/uhci-hcd.c | 2 +-
3702 drivers/usb/host/xhci-pci.c | 2 +-
3703 drivers/usb/host/xhci.c | 2 +-
3704 drivers/usb/misc/appledisplay.c | 4 +-
3705 drivers/usb/serial/console.c | 8 +-
3706 drivers/usb/storage/transport.c | 2 +-
3707 drivers/usb/storage/usb.c | 2 +-
3708 drivers/usb/storage/usb.h | 2 +-
3709 drivers/usb/usbip/vhci.h | 2 +-
3710 drivers/usb/usbip/vhci_hcd.c | 6 +-
3711 drivers/usb/usbip/vhci_rx.c | 2 +-
3712 drivers/usb/wusbcore/wa-hc.h | 4 +-
3713 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3714 drivers/vhost/vringh.c | 20 +-
3715 drivers/video/backlight/kb3886_bl.c | 2 +-
3716 drivers/video/console/fbcon.c | 2 +-
3717 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3718 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3719 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3720 drivers/video/fbdev/core/fb_defio.c | 6 +-
3721 drivers/video/fbdev/core/fbmem.c | 12 +-
3722 drivers/video/fbdev/hyperv_fb.c | 4 +-
3723 drivers/video/fbdev/i810/i810_accel.c | 1 +
3724 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
3725 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3726 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3727 drivers/video/fbdev/omap2/dss/display.c | 8 +-
3728 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
3729 drivers/video/fbdev/smscufx.c | 4 +-
3730 drivers/video/fbdev/udlfb.c | 36 +-
3731 drivers/video/fbdev/uvesafb.c | 52 +-
3732 drivers/video/fbdev/vesafb.c | 58 +-
3733 drivers/video/fbdev/via/via_clock.h | 2 +-
3734 drivers/xen/events/events_base.c | 6 +-
3735 fs/Kconfig.binfmt | 2 +-
3736 fs/afs/inode.c | 4 +-
3738 fs/autofs4/waitq.c | 2 +-
3739 fs/befs/endian.h | 6 +-
3740 fs/binfmt_aout.c | 23 +-
3741 fs/binfmt_elf.c | 670 +-
3742 fs/binfmt_elf_fdpic.c | 4 +-
3743 fs/block_dev.c | 2 +-
3744 fs/btrfs/ctree.c | 11 +-
3745 fs/btrfs/ctree.h | 4 +-
3746 fs/btrfs/delayed-inode.c | 9 +-
3747 fs/btrfs/delayed-inode.h | 6 +-
3748 fs/btrfs/delayed-ref.c | 4 +-
3749 fs/btrfs/disk-io.c | 4 +-
3750 fs/btrfs/extent_map.c | 8 +-
3751 fs/btrfs/file.c | 4 +-
3752 fs/btrfs/inode.c | 14 +-
3753 fs/btrfs/raid56.c | 32 +-
3754 fs/btrfs/super.c | 2 +-
3755 fs/btrfs/sysfs.c | 2 +-
3756 fs/btrfs/tests/btrfs-tests.c | 2 +-
3757 fs/btrfs/tests/free-space-tests.c | 8 +-
3758 fs/btrfs/transaction.c | 2 +-
3759 fs/btrfs/tree-log.c | 8 +-
3760 fs/btrfs/tree-log.h | 2 +-
3761 fs/btrfs/volumes.c | 14 +-
3762 fs/btrfs/volumes.h | 22 +-
3764 fs/cachefiles/bind.c | 6 +-
3765 fs/cachefiles/daemon.c | 8 +-
3766 fs/cachefiles/internal.h | 12 +-
3767 fs/cachefiles/namei.c | 2 +-
3768 fs/cachefiles/proc.c | 12 +-
3769 fs/ceph/dir.c | 12 +-
3770 fs/ceph/super.c | 4 +-
3771 fs/cifs/cifs_debug.c | 12 +-
3772 fs/cifs/cifsfs.c | 8 +-
3773 fs/cifs/cifsglob.h | 54 +-
3774 fs/cifs/file.c | 12 +-
3775 fs/cifs/misc.c | 4 +-
3776 fs/cifs/smb1ops.c | 80 +-
3777 fs/cifs/smb2ops.c | 84 +-
3778 fs/cifs/smb2pdu.c | 3 +-
3779 fs/coda/cache.c | 10 +-
3781 fs/compat_binfmt_elf.c | 2 +
3782 fs/compat_ioctl.c | 12 +-
3783 fs/configfs/dir.c | 10 +-
3784 fs/coredump.c | 18 +-
3786 fs/ecryptfs/inode.c | 2 +-
3787 fs/ecryptfs/miscdev.c | 2 +-
3789 fs/ext2/xattr.c | 5 +-
3790 fs/ext4/ext4.h | 20 +-
3791 fs/ext4/mballoc.c | 44 +-
3792 fs/ext4/resize.c | 16 +-
3793 fs/ext4/super.c | 2 +-
3794 fs/ext4/sysfs.c | 2 +-
3795 fs/ext4/xattr.c | 5 +-
3798 fs/fs-writeback.c | 11 +-
3799 fs/fs_struct.c | 8 +-
3800 fs/fscache/cookie.c | 40 +-
3801 fs/fscache/internal.h | 202 +-
3802 fs/fscache/object.c | 26 +-
3803 fs/fscache/operation.c | 38 +-
3804 fs/fscache/page.c | 110 +-
3805 fs/fscache/stats.c | 348 +-
3806 fs/fuse/cuse.c | 10 +-
3807 fs/fuse/dev.c | 4 +-
3808 fs/gfs2/file.c | 2 +-
3809 fs/gfs2/glock.c | 22 +-
3810 fs/gfs2/glops.c | 4 +-
3811 fs/gfs2/quota.c | 6 +-
3812 fs/hugetlbfs/inode.c | 13 +-
3814 fs/jbd2/commit.c | 2 +-
3815 fs/jbd2/transaction.c | 4 +-
3816 fs/jffs2/erase.c | 3 +-
3817 fs/jffs2/wbuf.c | 3 +-
3818 fs/jfs/super.c | 2 +-
3819 fs/kernfs/dir.c | 2 +-
3820 fs/kernfs/file.c | 20 +-
3822 fs/lockd/clntproc.c | 4 +-
3824 fs/namespace.c | 16 +-
3825 fs/nfs/callback_xdr.c | 2 +-
3826 fs/nfs/inode.c | 6 +-
3827 fs/nfsd/nfs4proc.c | 2 +-
3828 fs/nfsd/nfs4xdr.c | 2 +-
3829 fs/nfsd/nfscache.c | 11 +-
3830 fs/nfsd/vfs.c | 6 +-
3831 fs/nls/nls_base.c | 26 +-
3832 fs/nls/nls_euc-jp.c | 6 +-
3833 fs/nls/nls_koi8-ru.c | 6 +-
3834 fs/notify/fanotify/fanotify_user.c | 4 +-
3835 fs/notify/notification.c | 4 +-
3836 fs/ntfs/dir.c | 2 +-
3837 fs/ntfs/super.c | 6 +-
3838 fs/ocfs2/dlm/dlmcommon.h | 4 +-
3839 fs/ocfs2/dlm/dlmdebug.c | 10 +-
3840 fs/ocfs2/dlm/dlmdomain.c | 4 +-
3841 fs/ocfs2/dlm/dlmmaster.c | 4 +-
3842 fs/ocfs2/localalloc.c | 2 +-
3843 fs/ocfs2/ocfs2.h | 10 +-
3844 fs/ocfs2/suballoc.c | 12 +-
3845 fs/ocfs2/super.c | 20 +-
3846 fs/overlayfs/copy_up.c | 2 +-
3848 fs/posix_acl.c | 4 +-
3849 fs/proc/array.c | 20 +
3850 fs/proc/base.c | 4 +-
3851 fs/proc/kcore.c | 34 +-
3852 fs/proc/meminfo.c | 2 +-
3853 fs/proc/nommu.c | 2 +-
3854 fs/proc/proc_sysctl.c | 26 +-
3855 fs/proc/task_mmu.c | 42 +-
3856 fs/proc/task_nommu.c | 4 +-
3857 fs/proc/vmcore.c | 16 +-
3858 fs/qnx6/qnx6.h | 4 +-
3859 fs/quota/netlink.c | 4 +-
3860 fs/read_write.c | 2 +-
3862 fs/reiserfs/do_balan.c | 2 +-
3863 fs/reiserfs/procfs.c | 2 +-
3864 fs/reiserfs/reiserfs.h | 4 +-
3865 fs/seq_file.c | 4 +-
3867 fs/squashfs/xattr.c | 12 +-
3869 fs/sysv/sysv.h | 2 +-
3870 fs/tracefs/inode.c | 8 +-
3871 fs/udf/misc.c | 2 +-
3872 fs/ufs/swab.h | 4 +-
3873 fs/userfaultfd.c | 2 +-
3875 fs/xfs/libxfs/xfs_bmap.c | 2 +-
3876 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
3877 fs/xfs/xfs_dir2_readdir.c | 7 +-
3878 fs/xfs/xfs_ioctl.c | 2 +-
3879 fs/xfs/xfs_linux.h | 4 +-
3880 include/acpi/ghes.h | 2 +-
3881 include/asm-generic/4level-fixup.h | 2 +
3882 include/asm-generic/atomic-long.h | 176 +-
3883 include/asm-generic/atomic64.h | 12 +
3884 include/asm-generic/bitops/__fls.h | 2 +-
3885 include/asm-generic/bitops/fls.h | 2 +-
3886 include/asm-generic/bitops/fls64.h | 4 +-
3887 include/asm-generic/bug.h | 6 +-
3888 include/asm-generic/cache.h | 4 +-
3889 include/asm-generic/emergency-restart.h | 2 +-
3890 include/asm-generic/kmap_types.h | 4 +-
3891 include/asm-generic/local.h | 13 +
3892 include/asm-generic/pgtable-nopmd.h | 18 +-
3893 include/asm-generic/pgtable-nopud.h | 15 +-
3894 include/asm-generic/pgtable.h | 16 +
3895 include/asm-generic/sections.h | 1 +
3896 include/asm-generic/uaccess.h | 16 +
3897 include/asm-generic/vmlinux.lds.h | 15 +-
3898 include/crypto/algapi.h | 2 +-
3899 include/drm/drmP.h | 19 +-
3900 include/drm/drm_crtc_helper.h | 2 +-
3901 include/drm/drm_mm.h | 2 +-
3902 include/drm/i915_pciids.h | 2 +-
3903 include/drm/intel-gtt.h | 4 +-
3904 include/drm/ttm/ttm_memory.h | 2 +-
3905 include/drm/ttm/ttm_page_alloc.h | 1 +
3906 include/keys/asymmetric-subtype.h | 2 +-
3907 include/linux/atmdev.h | 4 +-
3908 include/linux/atomic.h | 2 +-
3909 include/linux/audit.h | 2 +-
3910 include/linux/average.h | 2 +-
3911 include/linux/binfmts.h | 3 +-
3912 include/linux/bitmap.h | 2 +-
3913 include/linux/bitops.h | 8 +-
3914 include/linux/blk-cgroup.h | 24 +-
3915 include/linux/blkdev.h | 2 +-
3916 include/linux/blktrace_api.h | 2 +-
3917 include/linux/cache.h | 8 +
3918 include/linux/cdrom.h | 1 -
3919 include/linux/cleancache.h | 2 +-
3920 include/linux/clk-provider.h | 1 +
3921 include/linux/compat.h | 6 +-
3922 include/linux/compiler-gcc.h | 28 +-
3923 include/linux/compiler.h | 193 +-
3924 include/linux/configfs.h | 2 +-
3925 include/linux/cpufreq.h | 3 +-
3926 include/linux/cpuidle.h | 5 +-
3927 include/linux/cpumask.h | 14 +-
3928 include/linux/crypto.h | 4 +-
3929 include/linux/ctype.h | 2 +-
3930 include/linux/dcache.h | 4 +-
3931 include/linux/decompress/mm.h | 2 +-
3932 include/linux/devfreq.h | 2 +-
3933 include/linux/device.h | 7 +-
3934 include/linux/dma-mapping.h | 2 +-
3935 include/linux/efi.h | 1 +
3936 include/linux/elf.h | 2 +
3937 include/linux/err.h | 4 +-
3938 include/linux/extcon.h | 2 +-
3939 include/linux/fb.h | 3 +-
3940 include/linux/fdtable.h | 2 +-
3941 include/linux/fs.h | 5 +-
3942 include/linux/fs_struct.h | 2 +-
3943 include/linux/fscache-cache.h | 2 +-
3944 include/linux/fscache.h | 2 +-
3945 include/linux/fsnotify.h | 2 +-
3946 include/linux/genhd.h | 4 +-
3947 include/linux/genl_magic_func.h | 2 +-
3948 include/linux/gfp.h | 12 +-
3949 include/linux/highmem.h | 12 +
3950 include/linux/hwmon-sysfs.h | 6 +-
3951 include/linux/i2c.h | 1 +
3952 include/linux/if_pppox.h | 2 +-
3953 include/linux/init.h | 12 +-
3954 include/linux/init_task.h | 7 +
3955 include/linux/interrupt.h | 6 +-
3956 include/linux/iommu.h | 2 +-
3957 include/linux/ioport.h | 2 +-
3958 include/linux/ipc.h | 2 +-
3959 include/linux/irq.h | 5 +-
3960 include/linux/irqdesc.h | 2 +-
3961 include/linux/irqdomain.h | 3 +
3962 include/linux/jbd2.h | 2 +-
3963 include/linux/jiffies.h | 16 +-
3964 include/linux/key-type.h | 2 +-
3965 include/linux/kgdb.h | 6 +-
3966 include/linux/kmemleak.h | 4 +-
3967 include/linux/kobject.h | 3 +-
3968 include/linux/kobject_ns.h | 2 +-
3969 include/linux/kref.h | 2 +-
3970 include/linux/libata.h | 2 +-
3971 include/linux/linkage.h | 1 +
3972 include/linux/list.h | 15 +
3973 include/linux/lockref.h | 26 +-
3974 include/linux/math64.h | 10 +-
3975 include/linux/mempolicy.h | 7 +
3976 include/linux/mm.h | 102 +-
3977 include/linux/mm_types.h | 20 +
3978 include/linux/mmiotrace.h | 4 +-
3979 include/linux/mmzone.h | 2 +-
3980 include/linux/mod_devicetable.h | 4 +-
3981 include/linux/module.h | 69 +-
3982 include/linux/moduleloader.h | 16 +
3983 include/linux/moduleparam.h | 4 +-
3984 include/linux/net.h | 2 +-
3985 include/linux/netdevice.h | 7 +-
3986 include/linux/netfilter.h | 2 +-
3987 include/linux/netfilter/nfnetlink.h | 2 +-
3988 include/linux/netlink.h | 12 +-
3989 include/linux/nls.h | 4 +-
3990 include/linux/notifier.h | 3 +-
3991 include/linux/oprofile.h | 4 +-
3992 include/linux/padata.h | 2 +-
3993 include/linux/pci_hotplug.h | 3 +-
3994 include/linux/percpu.h | 2 +-
3995 include/linux/perf_event.h | 12 +-
3996 include/linux/pipe_fs_i.h | 8 +-
3997 include/linux/pm.h | 1 +
3998 include/linux/pm_domain.h | 2 +-
3999 include/linux/pm_runtime.h | 2 +-
4000 include/linux/pnp.h | 2 +-
4001 include/linux/poison.h | 4 +-
4002 include/linux/power/smartreflex.h | 2 +-
4003 include/linux/ppp-comp.h | 2 +-
4004 include/linux/preempt.h | 21 +
4005 include/linux/proc_ns.h | 2 +-
4006 include/linux/psci.h | 2 +-
4007 include/linux/quota.h | 2 +-
4008 include/linux/random.h | 19 +-
4009 include/linux/rculist.h | 16 +
4010 include/linux/rcupdate.h | 8 +
4011 include/linux/reboot.h | 14 +-
4012 include/linux/regset.h | 3 +-
4013 include/linux/relay.h | 2 +-
4014 include/linux/rio.h | 2 +-
4015 include/linux/rmap.h | 4 +-
4016 include/linux/sched.h | 76 +-
4017 include/linux/sched/sysctl.h | 1 +
4018 include/linux/scif.h | 2 +-
4019 include/linux/semaphore.h | 2 +-
4020 include/linux/seq_file.h | 1 +
4021 include/linux/seqlock.h | 10 +
4022 include/linux/signal.h | 2 +-
4023 include/linux/skbuff.h | 12 +-
4024 include/linux/slab.h | 47 +-
4025 include/linux/slab_def.h | 14 +-
4026 include/linux/slub_def.h | 2 +-
4027 include/linux/smp.h | 2 +
4028 include/linux/sock_diag.h | 2 +-
4029 include/linux/sonet.h | 2 +-
4030 include/linux/spinlock.h | 17 +-
4031 include/linux/srcu.h | 5 +-
4032 include/linux/sunrpc/addr.h | 8 +-
4033 include/linux/sunrpc/clnt.h | 2 +-
4034 include/linux/sunrpc/svc.h | 2 +-
4035 include/linux/sunrpc/svc_rdma.h | 18 +-
4036 include/linux/sunrpc/svcauth.h | 2 +-
4037 include/linux/swapops.h | 10 +-
4038 include/linux/swiotlb.h | 3 +-
4039 include/linux/syscalls.h | 23 +-
4040 include/linux/syscore_ops.h | 2 +-
4041 include/linux/sysctl.h | 3 +-
4042 include/linux/sysfs.h | 9 +-
4043 include/linux/sysrq.h | 3 +-
4044 include/linux/tcp.h | 14 +-
4045 include/linux/thread_info.h | 7 +
4046 include/linux/tty.h | 4 +-
4047 include/linux/tty_driver.h | 2 +-
4048 include/linux/tty_ldisc.h | 2 +-
4049 include/linux/types.h | 16 +
4050 include/linux/uaccess.h | 2 +-
4051 include/linux/uio_driver.h | 2 +-
4052 include/linux/unaligned/access_ok.h | 24 +-
4053 include/linux/usb.h | 12 +-
4054 include/linux/usb/hcd.h | 1 +
4055 include/linux/usb/renesas_usbhs.h | 2 +-
4056 include/linux/vermagic.h | 21 +-
4057 include/linux/vga_switcheroo.h | 8 +-
4058 include/linux/vmalloc.h | 7 +-
4059 include/linux/vmstat.h | 24 +-
4060 include/linux/writeback.h | 3 +-
4061 include/linux/xattr.h | 5 +-
4062 include/linux/zlib.h | 3 +-
4063 include/media/v4l2-dev.h | 2 +-
4064 include/media/v4l2-device.h | 2 +-
4065 include/net/9p/transport.h | 2 +-
4066 include/net/bluetooth/l2cap.h | 2 +-
4067 include/net/bonding.h | 2 +-
4068 include/net/caif/cfctrl.h | 6 +-
4069 include/net/cfg802154.h | 2 +-
4070 include/net/flow.h | 2 +-
4071 include/net/genetlink.h | 2 +-
4072 include/net/gro_cells.h | 2 +-
4073 include/net/inet_connection_sock.h | 2 +-
4074 include/net/inet_sock.h | 2 +-
4075 include/net/inetpeer.h | 2 +-
4076 include/net/ip_fib.h | 2 +-
4077 include/net/ip_vs.h | 8 +-
4078 include/net/ipv6.h | 2 +-
4079 include/net/irda/ircomm_tty.h | 1 +
4080 include/net/iucv/af_iucv.h | 2 +-
4081 include/net/llc_c_ac.h | 2 +-
4082 include/net/llc_c_ev.h | 4 +-
4083 include/net/llc_c_st.h | 2 +-
4084 include/net/llc_s_ac.h | 2 +-
4085 include/net/llc_s_st.h | 2 +-
4086 include/net/mac80211.h | 6 +-
4087 include/net/neighbour.h | 4 +-
4088 include/net/net_namespace.h | 18 +-
4089 include/net/netlink.h | 2 +-
4090 include/net/netns/conntrack.h | 6 +-
4091 include/net/netns/ipv4.h | 4 +-
4092 include/net/netns/ipv6.h | 4 +-
4093 include/net/netns/xfrm.h | 2 +-
4094 include/net/ping.h | 2 +-
4095 include/net/protocol.h | 4 +-
4096 include/net/rtnetlink.h | 2 +-
4097 include/net/sctp/checksum.h | 4 +-
4098 include/net/sctp/sm.h | 4 +-
4099 include/net/sctp/structs.h | 2 +-
4100 include/net/snmp.h | 10 +-
4101 include/net/sock.h | 12 +-
4102 include/net/tcp.h | 8 +-
4103 include/net/xfrm.h | 13 +-
4104 include/rdma/iw_cm.h | 2 +-
4105 include/scsi/libfc.h | 3 +-
4106 include/scsi/scsi_device.h | 6 +-
4107 include/scsi/scsi_driver.h | 2 +-
4108 include/scsi/scsi_transport_fc.h | 3 +-
4109 include/scsi/sg.h | 2 +-
4110 include/sound/compress_driver.h | 2 +-
4111 include/sound/soc.h | 4 +-
4112 include/trace/events/irq.h | 4 +-
4113 include/uapi/linux/a.out.h | 8 +
4114 include/uapi/linux/bcache.h | 5 +-
4115 include/uapi/linux/byteorder/little_endian.h | 28 +-
4116 include/uapi/linux/connector.h | 2 +-
4117 include/uapi/linux/elf.h | 28 +
4118 include/uapi/linux/screen_info.h | 2 +-
4119 include/uapi/linux/swab.h | 6 +-
4120 include/uapi/linux/xattr.h | 4 +
4121 include/video/udlfb.h | 8 +-
4122 include/video/uvesafb.h | 1 +
4125 init/do_mounts.c | 14 +-
4126 init/do_mounts.h | 8 +-
4127 init/do_mounts_initrd.c | 30 +-
4128 init/do_mounts_md.c | 6 +-
4129 init/init_task.c | 4 +
4130 init/initramfs.c | 38 +-
4133 ipc/ipc_sysctl.c | 14 +-
4134 ipc/mq_sysctl.c | 4 +-
4137 kernel/audit.c | 8 +-
4138 kernel/auditsc.c | 4 +-
4139 kernel/bpf/core.c | 7 +-
4140 kernel/capability.c | 3 +
4141 kernel/compat.c | 38 +-
4142 kernel/debug/debug_core.c | 16 +-
4143 kernel/debug/kdb/kdb_main.c | 4 +-
4144 kernel/events/core.c | 30 +-
4145 kernel/events/internal.h | 10 +-
4146 kernel/events/uprobes.c | 2 +-
4147 kernel/exit.c | 27 +-
4148 kernel/fork.c | 175 +-
4149 kernel/futex.c | 11 +-
4150 kernel/futex_compat.c | 2 +-
4151 kernel/gcov/base.c | 7 +-
4152 kernel/irq/manage.c | 2 +-
4153 kernel/irq/msi.c | 19 +-
4154 kernel/irq/spurious.c | 2 +-
4155 kernel/jump_label.c | 5 +
4156 kernel/kallsyms.c | 37 +-
4157 kernel/kexec.c | 3 +-
4158 kernel/kmod.c | 8 +-
4159 kernel/kprobes.c | 4 +-
4160 kernel/ksysfs.c | 2 +-
4161 kernel/locking/lockdep.c | 7 +-
4162 kernel/locking/mutex-debug.c | 12 +-
4163 kernel/locking/mutex-debug.h | 4 +-
4164 kernel/locking/mutex.c | 6 +-
4165 kernel/module.c | 422 +-
4166 kernel/notifier.c | 17 +-
4167 kernel/padata.c | 4 +-
4168 kernel/panic.c | 5 +-
4170 kernel/pid_namespace.c | 2 +-
4171 kernel/power/process.c | 12 +-
4172 kernel/profile.c | 14 +-
4173 kernel/ptrace.c | 8 +-
4174 kernel/rcu/rcutorture.c | 60 +-
4175 kernel/rcu/tiny.c | 4 +-
4176 kernel/rcu/tree.c | 42 +-
4177 kernel/rcu/tree.h | 16 +-
4178 kernel/rcu/tree_plugin.h | 18 +-
4179 kernel/rcu/tree_trace.c | 14 +-
4180 kernel/resource.c | 4 +-
4181 kernel/sched/auto_group.c | 4 +-
4182 kernel/sched/core.c | 45 +-
4183 kernel/sched/fair.c | 2 +-
4184 kernel/sched/sched.h | 2 +-
4185 kernel/signal.c | 24 +-
4186 kernel/smpboot.c | 4 +-
4187 kernel/softirq.c | 12 +-
4188 kernel/sys.c | 10 +-
4189 kernel/sysctl.c | 34 +-
4190 kernel/time/alarmtimer.c | 2 +-
4191 kernel/time/posix-cpu-timers.c | 4 +-
4192 kernel/time/posix-timers.c | 24 +-
4193 kernel/time/timer.c | 2 +-
4194 kernel/time/timer_stats.c | 10 +-
4195 kernel/trace/blktrace.c | 6 +-
4196 kernel/trace/ftrace.c | 15 +-
4197 kernel/trace/ring_buffer.c | 96 +-
4198 kernel/trace/trace.c | 2 +-
4199 kernel/trace/trace.h | 2 +-
4200 kernel/trace/trace_clock.c | 4 +-
4201 kernel/trace/trace_events.c | 1 -
4202 kernel/trace/trace_functions_graph.c | 4 +-
4203 kernel/trace/trace_mmiotrace.c | 8 +-
4204 kernel/trace/trace_output.c | 10 +-
4205 kernel/trace/trace_seq.c | 2 +-
4206 kernel/trace/trace_stack.c | 2 +-
4207 kernel/user.c | 2 +-
4208 kernel/user_namespace.c | 2 +-
4209 kernel/utsname_sysctl.c | 2 +-
4210 kernel/watchdog.c | 2 +-
4211 kernel/workqueue.c | 8 +-
4212 lib/Kconfig.debug | 8 +-
4216 lib/debugobjects.c | 2 +-
4217 lib/decompress_bunzip2.c | 3 +-
4218 lib/decompress_unlzma.c | 4 +-
4220 lib/dma-debug.c | 4 +-
4221 lib/inflate.c | 2 +-
4222 lib/ioremap.c | 4 +-
4223 lib/kobject.c | 4 +-
4224 lib/list_debug.c | 126 +-
4225 lib/lockref.c | 44 +-
4226 lib/percpu-refcount.c | 2 +-
4227 lib/radix-tree.c | 2 +-
4228 lib/random32.c | 2 +-
4229 lib/rhashtable.c | 4 +-
4230 lib/show_mem.c | 2 +-
4231 lib/strncpy_from_user.c | 2 +-
4232 lib/strnlen_user.c | 2 +-
4233 lib/swiotlb.c | 2 +-
4234 lib/usercopy.c | 6 +
4235 lib/vsprintf.c | 12 +-
4237 mm/backing-dev.c | 4 +-
4242 mm/hugetlb.c | 70 +-
4244 mm/maccess.c | 12 +-
4246 mm/memory-failure.c | 6 +-
4247 mm/memory.c | 424 +-
4248 mm/mempolicy.c | 25 +
4252 mm/mprotect.c | 137 +-
4255 mm/page-writeback.c | 2 +-
4256 mm/page_alloc.c | 50 +-
4258 mm/process_vm_access.c | 14 +-
4263 mm/slab_common.c | 86 +-
4266 mm/sparse-vmemmap.c | 4 +-
4269 mm/swapfile.c | 12 +-
4271 mm/vmalloc.c | 114 +-
4273 net/8021q/vlan.c | 5 +-
4274 net/8021q/vlan_netlink.c | 2 +-
4276 net/9p/trans_fd.c | 2 +-
4277 net/atm/atm_misc.c | 8 +-
4278 net/atm/lec.h | 2 +-
4279 net/atm/proc.c | 6 +-
4280 net/atm/resources.c | 4 +-
4281 net/ax25/sysctl_net_ax25.c | 2 +-
4282 net/batman-adv/bat_iv_ogm.c | 8 +-
4283 net/batman-adv/fragmentation.c | 2 +-
4284 net/batman-adv/routing.c | 4 +-
4285 net/batman-adv/soft-interface.c | 10 +-
4286 net/batman-adv/translation-table.c | 14 +-
4287 net/batman-adv/types.h | 8 +-
4288 net/bluetooth/hci_sock.c | 2 +-
4289 net/bluetooth/l2cap_core.c | 6 +-
4290 net/bluetooth/l2cap_sock.c | 12 +-
4291 net/bluetooth/rfcomm/sock.c | 4 +-
4292 net/bluetooth/rfcomm/tty.c | 4 +-
4293 net/bridge/br_netlink.c | 2 +-
4294 net/bridge/netfilter/ebtables.c | 6 +-
4295 net/caif/cfctrl.c | 11 +-
4296 net/caif/chnl_net.c | 2 +-
4297 net/can/af_can.c | 2 +-
4299 net/ceph/messenger.c | 4 +-
4300 net/compat.c | 26 +-
4301 net/core/datagram.c | 2 +-
4302 net/core/dev.c | 16 +-
4303 net/core/filter.c | 2 +-
4304 net/core/flow.c | 6 +-
4305 net/core/neighbour.c | 18 +-
4306 net/core/net-sysfs.c | 2 +-
4307 net/core/net_namespace.c | 8 +-
4308 net/core/netpoll.c | 4 +-
4309 net/core/rtnetlink.c | 17 +-
4310 net/core/scm.c | 12 +-
4311 net/core/skbuff.c | 11 +-
4312 net/core/sock.c | 28 +-
4313 net/core/sock_diag.c | 15 +-
4314 net/core/sysctl_net_core.c | 22 +-
4315 net/decnet/af_decnet.c | 1 +
4316 net/decnet/sysctl_net_decnet.c | 4 +-
4317 net/dsa/dsa.c | 2 +-
4318 net/hsr/hsr_netlink.c | 2 +-
4319 net/ieee802154/6lowpan/core.c | 2 +-
4320 net/ieee802154/6lowpan/reassembly.c | 14 +-
4321 net/ipv4/af_inet.c | 2 +-
4322 net/ipv4/arp.c | 2 +-
4323 net/ipv4/devinet.c | 18 +-
4324 net/ipv4/fib_frontend.c | 6 +-
4325 net/ipv4/fib_semantics.c | 2 +-
4326 net/ipv4/inet_connection_sock.c | 4 +-
4327 net/ipv4/inet_diag.c | 4 +-
4328 net/ipv4/inet_timewait_sock.c | 2 +-
4329 net/ipv4/inetpeer.c | 2 +-
4330 net/ipv4/ip_fragment.c | 15 +-
4331 net/ipv4/ip_gre.c | 6 +-
4332 net/ipv4/ip_sockglue.c | 2 +-
4333 net/ipv4/ip_vti.c | 4 +-
4334 net/ipv4/ipconfig.c | 6 +-
4335 net/ipv4/ipip.c | 4 +-
4336 net/ipv4/netfilter/arp_tables.c | 12 +-
4337 net/ipv4/netfilter/ip_tables.c | 12 +-
4338 net/ipv4/ping.c | 14 +-
4339 net/ipv4/proc.c | 8 +-
4340 net/ipv4/raw.c | 14 +-
4341 net/ipv4/route.c | 32 +-
4342 net/ipv4/sysctl_net_ipv4.c | 22 +-
4343 net/ipv4/tcp_input.c | 6 +-
4344 net/ipv4/tcp_probe.c | 2 +-
4345 net/ipv4/udp.c | 10 +-
4346 net/ipv4/xfrm4_mode_transport.c | 2 +-
4347 net/ipv4/xfrm4_policy.c | 17 +-
4348 net/ipv4/xfrm4_state.c | 4 +-
4349 net/ipv6/addrconf.c | 22 +-
4350 net/ipv6/af_inet6.c | 2 +-
4351 net/ipv6/datagram.c | 2 +-
4352 net/ipv6/icmp.c | 2 +-
4353 net/ipv6/ip6_fib.c | 4 +-
4354 net/ipv6/ip6_gre.c | 10 +-
4355 net/ipv6/ip6_tunnel.c | 4 +-
4356 net/ipv6/ip6_vti.c | 4 +-
4357 net/ipv6/ipv6_sockglue.c | 2 +-
4358 net/ipv6/ndisc.c | 2 +-
4359 net/ipv6/netfilter/ip6_tables.c | 12 +-
4360 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4361 net/ipv6/ping.c | 33 +-
4362 net/ipv6/proc.c | 10 +-
4363 net/ipv6/raw.c | 17 +-
4364 net/ipv6/reassembly.c | 13 +-
4365 net/ipv6/route.c | 2 +-
4366 net/ipv6/sit.c | 4 +-
4367 net/ipv6/sysctl_net_ipv6.c | 2 +-
4368 net/ipv6/udp.c | 6 +-
4369 net/ipv6/xfrm6_policy.c | 17 +-
4370 net/irda/ircomm/ircomm_tty.c | 18 +-
4371 net/iucv/af_iucv.c | 4 +-
4372 net/iucv/iucv.c | 2 +-
4373 net/key/af_key.c | 4 +-
4374 net/l2tp/l2tp_eth.c | 38 +-
4375 net/l2tp/l2tp_ip.c | 2 +-
4376 net/l2tp/l2tp_ip6.c | 2 +-
4377 net/mac80211/cfg.c | 10 +-
4378 net/mac80211/debugfs_key.c | 4 +-
4379 net/mac80211/ieee80211_i.h | 3 +-
4380 net/mac80211/iface.c | 20 +-
4381 net/mac80211/key.c | 4 +-
4382 net/mac80211/main.c | 2 +-
4383 net/mac80211/pm.c | 4 +-
4384 net/mac80211/rate.c | 2 +-
4385 net/mac80211/sta_info.c | 2 +-
4386 net/mac80211/tx.c | 2 +-
4387 net/mac80211/util.c | 8 +-
4388 net/mac80211/wpa.c | 10 +-
4389 net/mac802154/iface.c | 4 +-
4390 net/mpls/af_mpls.c | 6 +-
4391 net/netfilter/ipset/ip_set_core.c | 4 +-
4392 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4393 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4394 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4395 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4396 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4397 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4398 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4399 net/netfilter/nf_conntrack_acct.c | 2 +-
4400 net/netfilter/nf_conntrack_ecache.c | 2 +-
4401 net/netfilter/nf_conntrack_helper.c | 2 +-
4402 net/netfilter/nf_conntrack_netlink.c | 22 +-
4403 net/netfilter/nf_conntrack_proto.c | 2 +-
4404 net/netfilter/nf_conntrack_standalone.c | 2 +-
4405 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4406 net/netfilter/nf_log.c | 10 +-
4407 net/netfilter/nf_sockopt.c | 4 +-
4408 net/netfilter/nf_tables_api.c | 13 +-
4409 net/netfilter/nfnetlink_acct.c | 7 +-
4410 net/netfilter/nfnetlink_cthelper.c | 2 +-
4411 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4412 net/netfilter/nfnetlink_log.c | 4 +-
4413 net/netfilter/nft_compat.c | 9 +-
4414 net/netfilter/xt_statistic.c | 8 +-
4415 net/netlink/af_netlink.c | 14 +-
4416 net/netlink/diag.c | 2 +-
4417 net/netlink/genetlink.c | 14 +-
4418 net/openvswitch/vport-internal_dev.c | 2 +-
4419 net/packet/af_packet.c | 26 +-
4420 net/packet/diag.c | 2 +-
4421 net/packet/internal.h | 6 +-
4422 net/phonet/pep.c | 6 +-
4423 net/phonet/socket.c | 2 +-
4424 net/phonet/sysctl.c | 2 +-
4425 net/rds/cong.c | 6 +-
4427 net/rds/ib_cm.c | 2 +-
4428 net/rds/ib_recv.c | 4 +-
4430 net/rds/iw_cm.c | 2 +-
4431 net/rds/iw_recv.c | 4 +-
4432 net/rds/rds.h | 2 +-
4433 net/rds/tcp.c | 2 +-
4434 net/rds/tcp_send.c | 2 +-
4435 net/rxrpc/af_rxrpc.c | 2 +-
4436 net/rxrpc/ar-ack.c | 14 +-
4437 net/rxrpc/ar-call.c | 2 +-
4438 net/rxrpc/ar-connection.c | 2 +-
4439 net/rxrpc/ar-connevent.c | 2 +-
4440 net/rxrpc/ar-input.c | 4 +-
4441 net/rxrpc/ar-internal.h | 8 +-
4442 net/rxrpc/ar-local.c | 2 +-
4443 net/rxrpc/ar-output.c | 4 +-
4444 net/rxrpc/ar-peer.c | 2 +-
4445 net/rxrpc/ar-proc.c | 4 +-
4446 net/rxrpc/ar-transport.c | 2 +-
4447 net/rxrpc/rxkad.c | 4 +-
4448 net/sched/sch_generic.c | 4 +-
4449 net/sctp/ipv6.c | 6 +-
4450 net/sctp/protocol.c | 10 +-
4451 net/sctp/sm_sideeffect.c | 2 +-
4452 net/sctp/socket.c | 21 +-
4453 net/sctp/sysctl.c | 10 +-
4454 net/socket.c | 18 +-
4455 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4456 net/sunrpc/clnt.c | 4 +-
4457 net/sunrpc/sched.c | 4 +-
4458 net/sunrpc/svc.c | 4 +-
4459 net/sunrpc/svcauth_unix.c | 2 +-
4460 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4461 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4462 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4463 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4464 net/tipc/netlink_compat.c | 12 +-
4465 net/tipc/subscr.c | 2 +-
4466 net/unix/diag.c | 2 +-
4467 net/unix/sysctl_net_unix.c | 2 +-
4468 net/wireless/wext-core.c | 19 +-
4469 net/xfrm/xfrm_policy.c | 16 +-
4470 net/xfrm/xfrm_state.c | 33 +-
4471 net/xfrm/xfrm_sysctl.c | 2 +-
4472 net/xfrm/xfrm_user.c | 2 +-
4473 scripts/Kbuild.include | 2 +-
4474 scripts/Makefile.build | 2 +-
4475 scripts/Makefile.clean | 3 +-
4476 scripts/Makefile.host | 69 +-
4477 scripts/basic/fixdep.c | 12 +-
4478 scripts/dtc/checks.c | 14 +-
4479 scripts/dtc/data.c | 6 +-
4480 scripts/dtc/flattree.c | 8 +-
4481 scripts/dtc/livetree.c | 4 +-
4482 scripts/gcc-plugin.sh | 51 +
4483 scripts/headers_install.sh | 1 +
4484 scripts/kallsyms.c | 4 +-
4485 scripts/kconfig/lkc.h | 5 +-
4486 scripts/kconfig/menu.c | 2 +-
4487 scripts/kconfig/symbol.c | 6 +-
4488 scripts/link-vmlinux.sh | 2 +-
4489 scripts/mod/file2alias.c | 14 +-
4490 scripts/mod/modpost.c | 25 +-
4491 scripts/mod/modpost.h | 6 +-
4492 scripts/mod/sumversion.c | 2 +-
4493 scripts/module-common.lds | 4 +
4494 scripts/package/builddeb | 1 +
4495 scripts/pnmtologo.c | 6 +-
4496 scripts/sortextable.h | 6 +-
4497 scripts/tags.sh | 2 +-
4498 security/Kconfig | 691 +-
4499 security/apparmor/include/policy.h | 2 +-
4500 security/apparmor/policy.c | 4 +-
4501 security/integrity/ima/ima.h | 4 +-
4502 security/integrity/ima/ima_api.c | 2 +-
4503 security/integrity/ima/ima_fs.c | 4 +-
4504 security/integrity/ima/ima_queue.c | 2 +-
4505 security/keys/internal.h | 8 +-
4506 security/keys/key.c | 18 +-
4507 security/keys/keyring.c | 4 -
4508 security/selinux/avc.c | 6 +-
4509 security/selinux/include/xfrm.h | 2 +-
4510 security/yama/yama_lsm.c | 2 +-
4511 sound/aoa/codecs/onyx.c | 7 +-
4512 sound/aoa/codecs/onyx.h | 1 +
4513 sound/core/oss/pcm_oss.c | 18 +-
4514 sound/core/pcm_compat.c | 2 +-
4515 sound/core/pcm_native.c | 4 +-
4516 sound/core/seq/seq_clientmgr.c | 10 +-
4517 sound/core/seq/seq_compat.c | 2 +-
4518 sound/core/seq/seq_fifo.c | 6 +-
4519 sound/core/seq/seq_fifo.h | 2 +-
4520 sound/core/seq/seq_memory.c | 6 +-
4521 sound/core/sound.c | 2 +-
4522 sound/drivers/mts64.c | 14 +-
4523 sound/drivers/opl4/opl4_lib.c | 2 +-
4524 sound/drivers/portman2x4.c | 3 +-
4525 sound/firewire/amdtp-am824.c | 2 +-
4526 sound/firewire/amdtp-stream.c | 4 +-
4527 sound/firewire/amdtp-stream.h | 2 +-
4528 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4529 sound/firewire/isight.c | 10 +-
4530 sound/firewire/scs1x.c | 8 +-
4531 sound/oss/sb_audio.c | 2 +-
4532 sound/oss/swarm_cs4297a.c | 6 +-
4533 sound/pci/hda/hda_codec.c | 2 +-
4534 sound/pci/ymfpci/ymfpci.h | 2 +-
4535 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4536 sound/soc/codecs/sti-sas.c | 10 +-
4537 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4538 sound/soc/soc-ac97.c | 6 +-
4539 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4540 tools/gcc/Makefile | 42 +
4541 tools/gcc/checker_plugin.c | 549 +
4542 tools/gcc/colorize_plugin.c | 215 +
4543 tools/gcc/constify_plugin.c | 571 +
4544 tools/gcc/gcc-common.h | 819 +
4545 tools/gcc/initify_plugin.c | 591 +
4546 tools/gcc/kallocstat_plugin.c | 188 +
4547 tools/gcc/kernexec_plugin.c | 549 +
4548 tools/gcc/latent_entropy_plugin.c | 474 +
4549 tools/gcc/randomize_layout_seed.h | 1 +
4550 tools/gcc/size_overflow_plugin/.gitignore | 2 +
4551 tools/gcc/size_overflow_plugin/Makefile | 28 +
4552 .../disable_size_overflow_hash.data | 12434 ++
4553 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
4554 .../generate_size_overflow_hash.sh | 103 +
4555 .../insert_size_overflow_asm.c | 416 +
4556 .../size_overflow_plugin/intentional_overflow.c | 1116 +
4557 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4558 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
4559 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4560 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
4561 .../size_overflow_hash_aux.data | 92 +
4562 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
4563 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4564 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
4565 .../size_overflow_plugin_hash.c | 352 +
4566 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4567 .../size_overflow_transform_core.c | 1015 +
4568 tools/gcc/stackleak_plugin.c | 444 +
4569 tools/gcc/structleak_plugin.c | 290 +
4570 tools/include/linux/compiler.h | 8 +
4571 tools/perf/util/include/asm/alternative-asm.h | 3 +
4572 tools/virtio/linux/uaccess.h | 2 +-
4573 virt/kvm/kvm_main.c | 42 +-
4574 2088 files changed, 221599 insertions(+), 9618 deletions(-)
4575 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
4576 Author: Matthew Wilcox <willy@linux.intel.com>
4577 Date: Tue Feb 2 16:57:52 2016 -0800
4579 radix-tree: fix race in gang lookup
4581 If the indirect_ptr bit is set on a slot, that indicates we need to redo
4582 the lookup. Introduce a new function radix_tree_iter_retry() which
4583 forces the loop to retry the lookup by setting 'slot' to NULL and
4584 turning the iterator back to point at the problematic entry.
4586 This is a pretty rare problem to hit at the moment; the lookup has to
4587 race with a grow of the radix tree from a height of 0. The consequences
4588 of hitting this race are that gang lookup could return a pointer to a
4589 radix_tree_node instead of a pointer to whatever the user had inserted
4592 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
4593 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
4594 Cc: Hugh Dickins <hughd@google.com>
4595 Cc: Ohad Ben-Cohen <ohad@wizery.com>
4596 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
4597 Cc: <stable@vger.kernel.org>
4598 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
4599 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
4601 include/linux/radix-tree.h | 16 ++++++++++++++++
4602 lib/radix-tree.c | 12 ++++++++++--
4603 2 files changed, 26 insertions(+), 2 deletions(-)
4605 commit bf628043b4589c910919a0f221ae7f42aa8cea93
4606 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
4607 Date: Wed Feb 3 02:11:03 2016 +0100
4609 unix: correctly track in-flight fds in sending process user_struct
4611 The commit referenced in the Fixes tag incorrectly accounted the number
4612 of in-flight fds over a unix domain socket to the original opener
4613 of the file-descriptor. This allows another process to arbitrary
4614 deplete the original file-openers resource limit for the maximum of
4615 open files. Instead the sending processes and its struct cred should
4618 To do so, we add a reference counted struct user_struct pointer to the
4619 scm_fp_list and use it to account for the number of inflight unix fds.
4621 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
4622 Reported-by: David Herrmann <dh.herrmann@gmail.com>
4623 Cc: David Herrmann <dh.herrmann@gmail.com>
4624 Cc: Willy Tarreau <w@1wt.eu>
4625 Cc: Linus Torvalds <torvalds@linux-foundation.org>
4626 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
4627 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
4628 Signed-off-by: David S. Miller <davem@davemloft.net>
4630 include/net/af_unix.h | 4 ++--
4631 include/net/scm.h | 1 +
4632 net/core/scm.c | 7 +++++++
4633 net/unix/af_unix.c | 4 ++--
4634 net/unix/garbage.c | 8 ++++----
4635 5 files changed, 16 insertions(+), 8 deletions(-)
4637 commit e830db443ff78d70b7b63536e688d73907face0c
4638 Author: Mike Kravetz <mike.kravetz@oracle.com>
4639 Date: Fri Jan 15 16:57:37 2016 -0800
4641 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
4643 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
4644 argument end is of type pgoff_t. It was being converted to a vaddr
4645 offset and passed to unmap_hugepage_range. However, end was also being
4646 used as an argument to the vma_interval_tree_foreach controlling loop.
4647 In addition, the conversion of end to vaddr offset was incorrect.
4649 hugetlb_vmtruncate_list is called as part of a file truncate or
4650 fallocate hole punch operation.
4652 When truncating a hugetlbfs file, this bug could prevent some pages from
4653 being unmapped. This is possible if there are multiple vmas mapping the
4654 file, and there is a sufficiently sized hole between the mappings. The
4655 size of the hole between two vmas (A,B) must be such that the starting
4656 virtual address of B is greater than (ending virtual address of A <<
4657 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
4658 pages are not properly unmapped during truncate, the following BUG is
4661 kernel BUG at fs/hugetlbfs/inode.c:428!
4663 In the fallocate hole punch case, this bug could prevent pages from
4664 being unmapped as in the truncate case. However, for hole punch the
4665 result is that unmapped pages will not be removed during the operation.
4666 For hole punch, it is also possible that more pages than desired will be
4667 unmapped. This unnecessary unmapping will cause page faults to
4668 reestablish the mappings on subsequent page access.
4670 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
4671 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
4672 Cc: Hugh Dickins <hughd@google.com>
4673 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
4674 Cc: Davidlohr Bueso <dave@stgolabs.net>
4675 Cc: Dave Hansen <dave.hansen@linux.intel.com>
4676 Cc: <stable@vger.kernel.org> [4.3]
4677 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
4678 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
4680 fs/hugetlbfs/inode.c | 19 +++++++++++--------
4681 1 files changed, 11 insertions(+), 8 deletions(-)
4683 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
4684 Author: Takashi Iwai <tiwai@suse.de>
4685 Date: Thu Feb 4 17:06:13 2016 +0100
4687 ALSA: timer: Fix leftover link at closing
4689 In ALSA timer core, the active timer instance is managed in
4690 active_list linked list. Each element is added / removed dynamically
4691 at timer start, stop and in timer interrupt. The problem is that
4692 snd_timer_interrupt() has a thinko and leaves the element in
4693 active_list when it's the last opened element. This eventually leads
4694 to list corruption or use-after-free error.
4696 This hasn't been revealed because we used to delete the list forcibly
4697 in snd_timer_stop() in the past. However, the recent fix avoids the
4698 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
4699 corruption due to double start or stop]), and this leak hits reality.
4701 This patch fixes the link management in snd_timer_interrupt(). Now it
4702 simply unlinks no matter which stream is.
4704 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
4705 Reported-by: Dmitry Vyukov <dvyukov@google.com>
4706 Cc: <stable@vger.kernel.org>
4707 Signed-off-by: Takashi Iwai <tiwai@suse.de>
4709 sound/core/timer.c | 4 ++--
4710 1 files changed, 2 insertions(+), 2 deletions(-)
4712 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
4713 Author: Konstantin Khlebnikov <koct9i@gmail.com>
4714 Date: Fri Feb 5 15:37:01 2016 -0800
4716 radix-tree: fix oops after radix_tree_iter_retry
4718 Helper radix_tree_iter_retry() resets next_index to the current index.
4719 In following radix_tree_next_slot current chunk size becomes zero. This
4720 isn't checked and it tries to dereference null pointer in slot.
4722 Tagged iterator is fine because retry happens only at slot 0 where tag
4723 bitmask in iter->tags is filled with single bit.
4725 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
4726 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
4727 Cc: Matthew Wilcox <willy@linux.intel.com>
4728 Cc: Hugh Dickins <hughd@google.com>
4729 Cc: Ohad Ben-Cohen <ohad@wizery.com>
4730 Cc: Jeremiah Mahler <jmmahler@gmail.com>
4731 Cc: <stable@vger.kernel.org>
4732 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
4733 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
4735 include/linux/radix-tree.h | 6 +++---
4736 1 files changed, 3 insertions(+), 3 deletions(-)
4738 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
4739 Merge: 438be0b 256aeaf
4740 Author: Brad Spengler <spender@grsecurity.net>
4741 Date: Sun Feb 7 08:29:33 2016 -0500
4743 Merge branch 'pax-test' into grsec-test
4745 commit 256aeaf87c22de8edf1f03682a572c590ae07771
4746 Author: Brad Spengler <spender@grsecurity.net>
4747 Date: Sun Feb 7 08:29:09 2016 -0500
4749 Update to pax-linux-4.3.5-test28.patch:
4750 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
4751 - spender fixed UDEREF on arm
4753 arch/arm/Kconfig | 1 +
4754 arch/arm/include/asm/domain.h | 21 ++++++++-
4755 arch/arm/include/asm/futex.h | 9 ----
4756 arch/arm/include/asm/thread_info.h | 3 +
4757 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
4758 arch/arm/kernel/entry-armv.S | 2 +-
4759 arch/arm/kernel/process.c | 2 +-
4760 arch/arm/mm/alignment.c | 8 ----
4761 arch/x86/mm/numa.c | 2 +-
4762 security/Kconfig | 1 -
4763 10 files changed, 60 insertions(+), 70 deletions(-)
4765 commit 438be0bd112bd17942b2628c53054dc1007558a1
4766 Author: Brad Spengler <spender@grsecurity.net>
4767 Date: Sat Feb 6 19:50:31 2016 -0500
4769 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
4770 ARM systems reported on the forums
4772 arch/arm/Kconfig | 1 +
4773 arch/arm/include/asm/domain.h | 21 ++++++++-
4774 arch/arm/include/asm/futex.h | 9 ----
4775 arch/arm/include/asm/thread_info.h | 3 +
4776 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
4777 arch/arm/kernel/entry-armv.S | 2 +-
4778 arch/arm/kernel/process.c | 2 +-
4779 arch/arm/mm/alignment.c | 8 ----
4780 security/Kconfig | 1 -
4781 9 files changed, 59 insertions(+), 69 deletions(-)
4783 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
4784 Author: Brad Spengler <spender@grsecurity.net>
4785 Date: Sat Feb 6 11:21:53 2016 -0500
4787 Fix another compiler warning
4789 net/ipv4/tcp_input.c | 2 ++
4790 1 files changed, 2 insertions(+), 0 deletions(-)
4792 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
4793 Author: Brad Spengler <spender@grsecurity.net>
4794 Date: Sat Feb 6 11:16:12 2016 -0500
4796 Fix two compiler warnings
4798 kernel/pid.c | 5 ++---
4799 kernel/ptrace.c | 3 ++-
4800 2 files changed, 4 insertions(+), 4 deletions(-)
4802 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
4803 Author: Brad Spengler <spender@grsecurity.net>
4804 Date: Wed Feb 3 21:22:40 2016 -0500
4806 Apply fix for integer truncation in NUMA init code, reported by
4807 x14sg1 on the forums:
4808 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
4810 arch/x86/mm/numa.c | 2 +-
4811 1 files changed, 1 insertions(+), 1 deletions(-)
4813 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
4814 Merge: a781740 016d0d8
4815 Author: Brad Spengler <spender@grsecurity.net>
4816 Date: Wed Feb 3 21:20:58 2016 -0500
4818 Merge branch 'pax-test' into grsec-test
4820 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
4821 Author: Brad Spengler <spender@grsecurity.net>
4822 Date: Wed Feb 3 21:20:10 2016 -0500
4824 Update to pax-linux-4.3.5-test27.patch:
4825 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
4826 - restored padding in fpregs_state for storing AVX-512 state in the future
4827 - constified netlink_dump_control
4828 - added const version of debug_gimple_stmt for gcc plugins, by Emese
4829 - Emese fixed a bug in initify that could have initified too much
4830 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
4832 arch/x86/include/asm/fpu/types.h | 1 +
4833 arch/x86/include/asm/mmu_context.h | 2 +-
4834 block/blk-cgroup.c | 18 ++--
4835 block/cfq-iosched.c | 4 +-
4836 crypto/crypto_user.c | 8 ++-
4837 drivers/acpi/apei/ghes.c | 6 +-
4838 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
4839 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
4840 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
4841 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
4842 drivers/infiniband/core/netlink.c | 5 +-
4843 drivers/infiniband/hw/cxgb4/device.c | 6 +-
4844 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
4845 drivers/md/bcache/alloc.c | 2 +-
4846 drivers/md/bcache/bcache.h | 10 +-
4847 drivers/md/bcache/btree.c | 2 +-
4848 drivers/md/bcache/io.c | 10 +-
4849 drivers/md/bcache/journal.c | 2 +-
4850 drivers/md/bcache/stats.c | 26 +++---
4851 drivers/md/bcache/stats.h | 16 ++--
4852 drivers/md/bcache/super.c | 2 +-
4853 drivers/md/bcache/sysfs.c | 20 +++---
4854 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
4855 drivers/md/dm-raid.c | 2 +-
4856 drivers/md/md.c | 6 +-
4857 drivers/md/md.h | 2 +-
4858 drivers/md/raid1.c | 2 +-
4859 drivers/md/raid10.c | 2 +-
4860 drivers/md/raid5.c | 4 +-
4861 drivers/media/pci/zoran/zoran.h | 1 -
4862 drivers/media/pci/zoran/zoran_driver.c | 3 -
4863 drivers/net/ethernet/sfc/selftest.c | 20 +++---
4864 drivers/net/irda/vlsi_ir.c | 18 ++--
4865 drivers/net/irda/vlsi_ir.h | 14 ++--
4866 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
4867 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
4868 drivers/net/wireless/ath/carl9170/main.c | 10 +-
4869 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
4870 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
4871 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
4872 drivers/scsi/hptiop.c | 2 -
4873 drivers/scsi/hptiop.h | 1 -
4874 drivers/scsi/ipr.c | 6 +-
4875 drivers/scsi/ipr.h | 2 +-
4876 drivers/scsi/qla2xxx/qla_target.c | 10 +-
4877 drivers/scsi/qla2xxx/qla_target.h | 2 +-
4878 fs/btrfs/ctree.c | 2 +-
4879 fs/btrfs/ctree.h | 4 +-
4880 fs/btrfs/delayed-ref.c | 4 +-
4881 fs/btrfs/disk-io.c | 4 +-
4882 fs/btrfs/file.c | 4 +-
4883 fs/btrfs/raid56.c | 32 ++++----
4884 fs/btrfs/tests/btrfs-tests.c | 2 +-
4885 fs/btrfs/transaction.c | 2 +-
4886 fs/btrfs/tree-log.c | 8 +-
4887 fs/btrfs/volumes.c | 14 ++--
4888 fs/btrfs/volumes.h | 22 +++---
4889 fs/jbd2/commit.c | 2 +-
4890 fs/jbd2/transaction.c | 4 +-
4891 fs/ocfs2/dlm/dlmcommon.h | 4 +-
4892 fs/ocfs2/dlm/dlmdebug.c | 10 +-
4893 fs/ocfs2/dlm/dlmdomain.c | 4 +-
4894 fs/ocfs2/dlm/dlmmaster.c | 4 +-
4895 include/acpi/ghes.h | 2 +-
4896 include/linux/blk-cgroup.h | 24 +++---
4897 include/linux/jbd2.h | 2 +-
4898 include/linux/netlink.h | 12 ++--
4899 include/net/cfg802154.h | 2 +-
4900 include/net/mac80211.h | 2 +-
4901 include/net/neighbour.h | 2 +-
4902 kernel/rcu/tree_plugin.h | 4 +-
4903 net/batman-adv/routing.c | 4 +-
4904 net/batman-adv/soft-interface.c | 2 +-
4905 net/batman-adv/translation-table.c | 14 ++--
4906 net/batman-adv/types.h | 2 +-
4907 net/core/neighbour.c | 14 ++--
4908 net/core/rtnetlink.c | 2 +-
4909 net/ipv4/arp.c | 2 +-
4910 net/ipv4/inet_diag.c | 4 +-
4911 net/ipv4/xfrm4_state.c | 4 +-
4912 net/ipv6/ndisc.c | 2 +-
4913 net/mac80211/cfg.c | 2 +-
4914 net/mac80211/debugfs_key.c | 2 +-
4915 net/mac80211/key.c | 4 +-
4916 net/mac80211/tx.c | 2 +-
4917 net/mac80211/wpa.c | 10 +-
4918 net/mac802154/iface.c | 4 +-
4919 net/netfilter/ipset/ip_set_core.c | 2 +-
4920 net/netfilter/nf_conntrack_netlink.c | 22 +++---
4921 net/netfilter/nf_tables_api.c | 13 ++--
4922 net/netfilter/nfnetlink_acct.c | 7 +-
4923 net/netfilter/nfnetlink_cthelper.c | 2 +-
4924 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4925 net/netlink/af_netlink.c | 10 ++-
4926 net/netlink/diag.c | 2 +-
4927 net/netlink/genetlink.c | 14 ++--
4928 net/packet/af_packet.c | 18 ++--
4929 net/packet/diag.c | 2 +-
4930 net/packet/internal.h | 6 +-
4931 net/unix/diag.c | 2 +-
4932 net/xfrm/xfrm_user.c | 2 +-
4933 security/apparmor/include/policy.h | 2 +-
4934 security/apparmor/policy.c | 4 +-
4935 sound/core/seq/seq_clientmgr.c | 2 +-
4936 sound/core/seq/seq_fifo.c | 6 +-
4937 sound/core/seq/seq_fifo.h | 2 +-
4938 tools/gcc/gcc-common.h | 24 ++++--
4939 tools/gcc/initify_plugin.c | 7 +-
4940 tools/lib/api/Makefile | 2 +-
4941 109 files changed, 399 insertions(+), 391 deletions(-)
4943 commit a7817402ac837b1aee07fac42537a02097055098
4944 Author: Matt Fleming <matt@codeblueprint.co.uk>
4945 Date: Fri Jan 29 11:36:10 2016 +0000
4947 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
4949 There are a couple of nasty truncation bugs lurking in the pageattr
4950 code that can be triggered when mapping EFI regions, e.g. when we pass
4951 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
4952 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
4954 Viorel-Cătălin managed to trigger this bug on his Dell machine that
4955 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
4956 When calling populate_pud() the end of the region gets calculated
4957 incorrectly in the following buggy expression,
4959 end = start + (cpa->numpages << PAGE_SHIFT);
4961 And only 188416 pages are mapped. Next, populate_pud() gets invoked
4962 for a second time because of the loop in __change_page_attr_set_clr(),
4963 only this time no pages get mapped because shifting the remaining
4964 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
4965 loop in __change_page_attr_set_clr() spins forever because we fail to
4968 Hitting this bug depends very much on the virtual address we pick to
4969 map the large region at and how many pages we map on the initial run
4970 through the loop. This explains why this issue was only recently hit
4971 with the introduction of commit
4973 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
4974 entries bottom-up at runtime, instead of top-down")
4976 It's interesting to note that safe uses of cpa->numpages do exist in
4977 the pageattr code. If instead of shifting ->numpages we multiply by
4978 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
4979 so the result is unsigned long.
4981 To avoid surprises when users try to convert very large cpa->numpages
4982 values to addresses, change the data type from 'int' to 'unsigned
4983 long', thereby making it suitable for shifting by PAGE_SHIFT without
4986 The alternative would be to make liberal use of casting, but that is
4987 far more likely to cause problems in the future when someone adds more
4988 code and fails to cast properly; this bug was difficult enough to
4989 track down in the first place.
4991 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
4992 Acked-by: Borislav Petkov <bp@alien8.de>
4993 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
4994 Cc: <stable@vger.kernel.org>
4995 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
4996 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
4997 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
4998 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
5000 arch/x86/mm/pageattr.c | 4 ++--
5001 1 files changed, 2 insertions(+), 2 deletions(-)
5003 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
5004 Author: Jan Beulich <JBeulich@suse.com>
5005 Date: Tue Jan 26 04:15:18 2016 -0700
5007 x86/mm: Fix types used in pgprot cacheability flags translations
5009 For PAE kernels "unsigned long" is not suitable to hold page protection
5010 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
5011 few W+X pages getting reported as insecure during boot (observed namely
5012 for the entire initrd range).
5014 Fixes: 281d4078be ("x86: Make page cache mode a real type")
5015 Signed-off-by: Jan Beulich <jbeulich@suse.com>
5016 Reviewed-by: Juergen Gross <JGross@suse.com>
5017 Cc: stable@vger.kernel.org
5018 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
5019 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
5021 arch/x86/include/asm/pgtable_types.h | 6 ++----
5022 1 files changed, 2 insertions(+), 4 deletions(-)
5024 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
5025 Merge: 682d661 f74425b
5026 Author: Brad Spengler <spender@grsecurity.net>
5027 Date: Sun Jan 31 15:06:25 2016 -0500
5029 Merge branch 'pax-test' into grsec-test
5032 drivers/net/slip/slhc.c
5033 include/linux/sched.h
5037 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
5038 Merge: d14af1f 849a2d3
5039 Author: Brad Spengler <spender@grsecurity.net>
5040 Date: Sun Jan 31 15:02:55 2016 -0500
5042 Merge branch 'linux-4.3.y' into pax-test
5045 arch/x86/include/asm/mmu_context.h
5047 commit 682d6611d75542e351c973c8dd74a99d3966c073
5048 Author: Brad Spengler <spender@grsecurity.net>
5049 Date: Sat Jan 30 13:05:03 2016 -0500
5051 Based on a report from Mathias Krause, fix up a number of additional instances
5052 of ulong overflow when passing in values to gr_learn_resource by saturating
5055 mm/mlock.c | 11 ++++++++---
5056 mm/mmap.c | 16 +++++++++++++---
5057 2 files changed, 21 insertions(+), 6 deletions(-)
5059 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
5060 Author: Jann Horn <jann@thejh.net>
5061 Date: Sat Dec 26 06:00:48 2015 +0100
5063 seccomp: always propagate NO_NEW_PRIVS on tsync
5065 Before this patch, a process with some permissive seccomp filter
5066 that was applied by root without NO_NEW_PRIVS was able to add
5067 more filters to itself without setting NO_NEW_PRIVS by setting
5068 the new filter from a throwaway thread with NO_NEW_PRIVS.
5070 Signed-off-by: Jann Horn <jann@thejh.net>
5071 Cc: stable@vger.kernel.org
5072 Signed-off-by: Kees Cook <keescook@chromium.org>
5074 kernel/seccomp.c | 22 +++++++++++-----------
5075 1 files changed, 11 insertions(+), 11 deletions(-)
5077 commit b85450498a3bbf269441c8963d7574bb3079c838
5078 Merge: 59c216f d14af1f
5079 Author: Brad Spengler <spender@grsecurity.net>
5080 Date: Fri Jan 29 20:54:13 2016 -0500
5082 Merge branch 'pax-test' into grsec-test
5084 commit d14af1f1dd66511f3f0674deee2b572972012b39
5085 Author: Brad Spengler <spender@grsecurity.net>
5086 Date: Fri Jan 29 20:53:51 2016 -0500
5088 Update to pax-linux-4.3.4-test26.patch:
5089 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
5091 fs/cifs/file.c | 2 +-
5092 fs/gfs2/file.c | 2 +-
5093 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
5094 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
5095 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
5096 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
5097 .../size_overflow_transform_core.c | 5 +
5098 7 files changed, 102 insertions(+), 15 deletions(-)
5100 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
5101 Author: Brad Spengler <spender@grsecurity.net>
5102 Date: Wed Jan 27 17:57:21 2016 -0500
5104 Fix a size_overflow report reported by Mathias Krause in our
5105 truncation of an loff_t to an unsigned long when being passed
5106 to gr_learn_resource() (as all resource checks are against unsigned long
5110 1 files changed, 4 insertions(+), 1 deletions(-)
5112 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
5113 Author: Yuchung Cheng <ycheng@google.com>
5114 Date: Wed Jan 6 12:42:38 2016 -0800
5116 tcp: fix zero cwnd in tcp_cwnd_reduction
5118 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
5119 conditionally") introduced a bug that cwnd may become 0 when both
5120 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
5121 to a div-by-zero if the connection starts another cwnd reduction
5122 phase by setting tp->prior_cwnd to the current cwnd (0) in
5123 tcp_init_cwnd_reduction().
5125 To prevent this we skip PRR operation when nothing is acked or
5126 sacked. Then cwnd must be positive in all cases as long as ssthresh
5129 1) The proportional reduction mode
5130 inflight > ssthresh > 0
5132 2) The reduction bound mode
5133 a) inflight == ssthresh > 0
5135 b) inflight < ssthresh
5136 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
5138 Therefore in all cases inflight and sndcnt can not both be 0.
5139 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
5141 In reality this bug is triggered only with a sequence of less common
5142 events. For example, the connection is terminating an ECN-triggered
5143 cwnd reduction with an inflight 0, then it receives reordered/old
5144 ACKs or DSACKs from prior transmission (which acks nothing). Or the
5145 connection is in fast recovery stage that marks everything lost,
5146 but fails to retransmit due to local issues, then receives data
5147 packets from other end which acks nothing.
5149 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
5150 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
5151 Signed-off-by: Yuchung Cheng <ycheng@google.com>
5152 Signed-off-by: Neal Cardwell <ncardwell@google.com>
5153 Signed-off-by: Eric Dumazet <edumazet@google.com>
5154 Signed-off-by: David S. Miller <davem@davemloft.net>
5156 net/ipv4/tcp_input.c | 3 +++
5157 1 files changed, 3 insertions(+), 0 deletions(-)
5159 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
5160 Author: Eric Dumazet <edumazet@google.com>
5161 Date: Sun Jan 24 13:53:50 2016 -0800
5163 af_unix: fix struct pid memory leak
5165 Dmitry reported a struct pid leak detected by a syzkaller program.
5167 Bug happens in unix_stream_recvmsg() when we break the loop when a
5168 signal is pending, without properly releasing scm.
5170 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
5171 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5172 Signed-off-by: Eric Dumazet <edumazet@google.com>
5173 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
5174 Signed-off-by: David S. Miller <davem@davemloft.net>
5176 net/unix/af_unix.c | 1 +
5177 1 files changed, 1 insertions(+), 0 deletions(-)
5179 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
5180 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
5181 Date: Fri Jan 22 01:39:43 2016 +0100
5183 pptp: fix illegal memory access caused by multiple bind()s
5185 Several times already this has been reported as kasan reports caused by
5186 syzkaller and trinity and people always looked at RCU races, but it is
5187 much more simple. :)
5189 In case we bind a pptp socket multiple times, we simply add it to
5190 the callid_sock list but don't remove the old binding. Thus the old
5191 socket stays in the bucket with unused call_id indexes and doesn't get
5192 cleaned up. This causes various forms of kasan reports which were hard
5195 Simply don't allow multiple binds and correct error handling in
5196 pptp_bind. Also keep sk_state bits in place in pptp_connect.
5198 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
5199 Cc: Dmitry Kozlov <xeb@mail.ru>
5200 Cc: Sasha Levin <sasha.levin@oracle.com>
5201 Cc: Dmitry Vyukov <dvyukov@google.com>
5202 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5203 Cc: Dave Jones <davej@codemonkey.org.uk>
5204 Reported-by: Dave Jones <davej@codemonkey.org.uk>
5205 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
5206 Signed-off-by: David S. Miller <davem@davemloft.net>
5208 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
5209 1 files changed, 24 insertions(+), 10 deletions(-)
5211 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
5212 Author: Brad Spengler <spender@grsecurity.net>
5213 Date: Tue Jan 26 18:17:10 2016 -0500
5215 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
5216 wiki but was removed from the config help at some point
5218 grsecurity/Kconfig | 3 +++
5219 1 files changed, 3 insertions(+), 0 deletions(-)
5221 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
5222 Author: Thomas Egerer <hakke_007@gmx.de>
5223 Date: Mon Jan 25 12:58:44 2016 +0100
5225 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
5227 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
5228 to select CRYPTO_ECHAINIV in order to work properly. This solves the
5229 issues caused by a misconfiguration as described in [1].
5230 The original approach, patching crypto/Kconfig was turned down by
5233 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
5234 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
5236 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
5237 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
5238 Signed-off-by: David S. Miller <davem@davemloft.net>
5240 net/ipv4/Kconfig | 1 +
5241 net/ipv6/Kconfig | 1 +
5242 2 files changed, 2 insertions(+), 0 deletions(-)
5244 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
5245 Merge: 904114c 6339c1f
5246 Author: Brad Spengler <spender@grsecurity.net>
5247 Date: Tue Jan 26 18:08:40 2016 -0500
5249 Merge branch 'pax-test' into grsec-test
5251 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
5252 Author: Brad Spengler <spender@grsecurity.net>
5253 Date: Tue Jan 26 18:07:51 2016 -0500
5255 Update to pax-linux-4.3.4-test25.patch:
5256 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
5257 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
5258 - fixed a few REFCOUNT false positives in SNMP related statistics
5260 arch/x86/Kconfig | 2 +-
5261 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
5262 include/net/snmp.h | 10 +++++-----
5263 kernel/fork.c | 11 +++++++++--
5264 net/ipv4/proc.c | 8 ++++----
5265 net/ipv6/addrconf.c | 4 ++--
5266 net/ipv6/proc.c | 10 +++++-----
5267 7 files changed, 43 insertions(+), 19 deletions(-)
5269 commit 904114c2fce3fdff5d57e763da56a78960db4e19
5270 Author: Al Viro <viro@zeniv.linux.org.uk>
5271 Date: Fri Jan 22 18:08:52 2016 -0500
5273 make sure that freeing shmem fast symlinks is RCU-delayed
5275 Cc: stable@vger.kernel.org # v4.2+
5276 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5278 include/linux/shmem_fs.h | 5 +----
5279 mm/shmem.c | 9 ++++-----
5280 2 files changed, 5 insertions(+), 9 deletions(-)
5282 commit ab86adee64312a2f827dd516cb199521327943ed
5283 Author: Sasha Levin <sasha.levin@oracle.com>
5284 Date: Mon Jan 18 19:23:51 2016 -0500
5286 netfilter: nf_conntrack: use safer way to lock all buckets
5288 When we need to lock all buckets in the connection hashtable we'd attempt to
5289 lock 1024 spinlocks, which is way more preemption levels than supported by
5290 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
5291 enabled, and if it was - use only 8 buckets(!).
5293 Fix this by using a global lock and synchronize all buckets on it when we
5294 need to lock them all. This is pretty heavyweight, but is only done when we
5295 need to resize the hashtable, and that doesn't happen often enough (or at all).
5297 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
5298 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
5299 Reviewed-by: Florian Westphal <fw@strlen.de>
5300 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5304 net/netfilter/nfnetlink_cttimeout.c
5306 include/net/netfilter/nf_conntrack_core.h | 8 ++----
5307 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
5308 net/netfilter/nf_conntrack_helper.c | 2 +-
5309 net/netfilter/nf_conntrack_netlink.c | 2 +-
5310 4 files changed, 33 insertions(+), 17 deletions(-)
5312 commit 37014723527225481c720484bb788a1a6358072f
5313 Author: Willy Tarreau <w@1wt.eu>
5314 Date: Mon Jan 18 16:36:09 2016 +0100
5316 pipe: limit the per-user amount of pages allocated in pipes
5318 On no-so-small systems, it is possible for a single process to cause an
5319 OOM condition by filling large pipes with data that are never read. A
5320 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
5321 memory. On small systems it may be tricky to set the pipe max size to
5322 prevent this from happening.
5324 This patch makes it possible to enforce a per-user soft limit above
5325 which new pipes will be limited to a single page, effectively limiting
5326 them to 4 kB each, as well as a hard limit above which no new pipes may
5327 be created for this user. This has the effect of protecting the system
5328 against memory abuse without hurting other users, and still allowing
5329 pipes to work correctly though with less data at once.
5331 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
5332 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
5333 default soft limit allows the default number of FDs per process (1024)
5334 to create pipes of the default size (64kB), thus reaching a limit of 64MB
5335 before starting to create only smaller pipes. With 256 processes limited
5336 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
5337 1084 MB of memory allocated for a user. The hard limit is disabled by
5338 default to avoid breaking existing applications that make intensive use
5339 of pipes (eg: for splicing).
5341 Reported-by: socketpair@gmail.com
5342 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
5343 Mitigates: CVE-2013-4312 (Linux 2.0+)
5344 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
5345 Signed-off-by: Willy Tarreau <w@1wt.eu>
5346 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5348 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
5349 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
5350 include/linux/pipe_fs_i.h | 4 +++
5351 include/linux/sched.h | 1 +
5352 kernel/sysctl.c | 14 ++++++++++++
5353 5 files changed, 87 insertions(+), 2 deletions(-)
5355 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
5356 Merge: 540f2af 7791ecb
5357 Author: Brad Spengler <spender@grsecurity.net>
5358 Date: Sat Jan 23 10:57:11 2016 -0500
5360 Merge branch 'pax-test' into grsec-test
5362 commit 7791ecb84f840343a5646236fd0d34e1fb450793
5363 Merge: 470069c 399588c
5364 Author: Brad Spengler <spender@grsecurity.net>
5365 Date: Sat Jan 23 10:56:47 2016 -0500
5367 Merge branch 'linux-4.3.y' into pax-test
5369 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
5370 Author: Brad Spengler <spender@grsecurity.net>
5371 Date: Tue Jan 19 21:18:47 2016 -0500
5373 Update size_overflow hash table
5375 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
5376 1 files changed, 3 insertions(+), 1 deletions(-)
5378 commit 7e649765626a28437f573f0fbe7a51a04615f041
5379 Author: Brad Spengler <spender@grsecurity.net>
5380 Date: Tue Jan 19 20:29:46 2016 -0500
5382 Backport fix from: https://lkml.org/lkml/2015/12/13/187
5384 fs/ext4/extents.c | 2 +-
5385 1 files changed, 1 insertions(+), 1 deletions(-)
5387 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
5388 Author: Jann Horn <jann@thejh.net>
5389 Date: Tue Jan 5 18:27:30 2016 +0100
5391 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
5393 This replaces all code in fs/compat_ioctl.c that translated
5394 ioctl arguments into a in-kernel structure, then performed
5395 do_ioctl under set_fs(KERNEL_DS), with code that allocates
5396 data on the user stack and can call the VFS ioctl handler
5399 This is done as a hardening measure because the caller
5400 does not know what kind of ioctl handler will be invoked,
5401 only that no corresponding compat_ioctl handler exists and
5402 what the ioctl command number is. The accidental
5403 invocation of an unlocked_ioctl handler that unexpectedly
5404 calls copy_to_user could be a severe security issue.
5406 Signed-off-by: Jann Horn <jann@thejh.net>
5407 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5413 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
5414 1 files changed, 68 insertions(+), 62 deletions(-)
5416 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
5417 Author: Al Viro <viro@zeniv.linux.org.uk>
5418 Date: Thu Jan 7 09:53:30 2016 -0500
5420 compat_ioctl: don't pass fd around when not needed
5422 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5424 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
5425 fs/internal.h | 7 ++++
5427 include/linux/fs.h | 2 -
5428 4 files changed, 61 insertions(+), 55 deletions(-)
5430 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
5431 Author: Jann Horn <jann@thejh.net>
5432 Date: Tue Jan 5 18:27:29 2016 +0100
5434 compat_ioctl: don't look up the fd twice
5436 In code in fs/compat_ioctl.c that translates ioctl arguments
5437 into a in-kernel structure, then performs sys_ioctl, possibly
5438 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
5439 calls to do_ioctl calls. do_ioctl is a new function that does
5440 the same thing as sys_ioctl, but doesn't look up the fd again.
5442 This change is made to avoid (potential) security issues
5443 because of ioctl handlers that accept one of the ioctl
5444 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
5445 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
5446 This can happen for multiple reasons:
5448 - The ioctl command number could be reused.
5449 - The ioctl handler might not check the full ioctl
5450 command. This is e.g. true for drm_ioctl.
5451 - The ioctl handler is very special, e.g. cuse_file_ioctl
5453 The real issue is that set_fs(KERNEL_DS) is used here,
5454 but that's fixed in a separate commit
5455 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
5457 This change mitigates potential security issues by
5458 preventing a race that permits invocation of
5459 unlocked_ioctl handlers under KERNEL_DS through compat
5460 code even if a corresponding compat_ioctl handler exists.
5462 So far, no way has been identified to use this to damage
5463 kernel memory without having CAP_SYS_ADMIN in the init ns
5464 (with the capability, doing reads/writes at arbitrary
5465 kernel addresses should be easy through CUSE's ioctl
5466 handler with FUSE_IOCTL_UNRESTRICTED set).
5468 [AV: two missed sys_ioctl() taken care of]
5470 Signed-off-by: Jann Horn <jann@thejh.net>
5471 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5473 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
5474 1 files changed, 68 insertions(+), 54 deletions(-)
5476 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
5477 Author: Vasily Kulikov <segoon@openwall.com>
5478 Date: Fri Jan 15 16:57:55 2016 -0800
5480 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
5482 TIMER_ENTRY_STATIC is defined as a poison pointers which
5483 should point to nowhere. Redefine them using POISON_POINTER_DELTA
5484 arithmetics to make sure they really point to non-mappable area declared
5485 by the target architecture.
5487 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
5488 Acked-by: Thomas Gleixner <tglx@linutronix.de>
5489 Cc: Solar Designer <solar@openwall.com>
5490 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
5491 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5492 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5496 include/linux/poison.h
5498 include/linux/poison.h | 2 +-
5499 1 files changed, 1 insertions(+), 1 deletions(-)
5501 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
5502 Author: Brad Spengler <spender@grsecurity.net>
5503 Date: Tue Jan 19 19:41:44 2016 -0500
5505 Fix ARM compilation, reported by Austin Sepp
5507 grsecurity/grsec_sig.c | 1 +
5508 1 files changed, 1 insertions(+), 0 deletions(-)
5510 commit e15383743443dc43460a2fd73e0db0b608610dca
5511 Author: Takashi Iwai <tiwai@suse.de>
5512 Date: Mon Jan 18 13:52:47 2016 +0100
5514 ALSA: hrtimer: Fix stall by hrtimer_cancel()
5516 hrtimer_cancel() waits for the completion from the callback, thus it
5517 must not be called inside the callback itself. This was already a
5518 problem in the past with ALSA hrtimer driver, and the early commit
5519 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
5521 However, the previous fix is still insufficient: it may still cause a
5522 lockup when the ALSA timer instance reprograms itself in its callback.
5523 Then it invokes the start function even in snd_timer_interrupt() that
5524 is called in hrtimer callback itself, results in a CPU stall. This is
5525 no hypothetical problem but actually triggered by syzkaller fuzzer.
5527 This patch tries to fix the issue again. Now we call
5528 hrtimer_try_to_cancel() at both start and stop functions so that it
5529 won't fall into a deadlock, yet giving some chance to cancel the queue
5530 if the functions have been called outside the callback. The proper
5531 hrtimer_cancel() is called in anyway at closing, so this should be
5534 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
5535 Cc: <stable@vger.kernel.org>
5536 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5538 sound/core/hrtimer.c | 3 ++-
5539 1 files changed, 2 insertions(+), 1 deletions(-)
5541 commit 12d874daf706e6e7c1ae709141859c809599297e
5542 Author: Takashi Iwai <tiwai@suse.de>
5543 Date: Tue Jan 12 12:38:02 2016 +0100
5545 ALSA: seq: Fix missing NULL check at remove_events ioctl
5547 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
5548 unconditionally even if there is no FIFO assigned, and this leads to
5549 an Oops due to NULL dereference. The fix is just to add a proper NULL
5552 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5553 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5554 Cc: <stable@vger.kernel.org>
5555 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5557 sound/core/seq/seq_clientmgr.c | 2 +-
5558 1 files changed, 1 insertions(+), 1 deletions(-)
5560 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
5561 Author: Takashi Iwai <tiwai@suse.de>
5562 Date: Tue Jan 12 15:36:27 2016 +0100
5564 ALSA: seq: Fix race at timer setup and close
5566 ALSA sequencer code has an open race between the timer setup ioctl and
5567 the close of the client. This was triggered by syzkaller fuzzer, and
5568 a use-after-free was caught there as a result.
5570 This patch papers over it by adding a proper queue->timer_mutex lock
5571 around the timer-related calls in the relevant code path.
5573 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5574 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5575 Cc: <stable@vger.kernel.org>
5576 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5578 sound/core/seq/seq_queue.c | 2 ++
5579 1 files changed, 2 insertions(+), 0 deletions(-)
5581 commit b9e55ab955e59b4a636d78a748be90334a48b485
5582 Author: Takashi Iwai <tiwai@suse.de>
5583 Date: Thu Jan 14 16:30:58 2016 +0100
5585 ALSA: timer: Harden slave timer list handling
5587 A slave timer instance might be still accessible in a racy way while
5588 operating the master instance as it lacks of locking. Since the
5589 master operation is mostly protected with timer->lock, we should cope
5590 with it while changing the slave instance, too. Also, some linked
5591 lists (active_list and ack_list) of slave instances aren't unlinked
5592 immediately at stopping or closing, and this may lead to unexpected
5595 This patch tries to address these issues. It adds spin lock of
5596 timer->lock (either from master or slave, which is equivalent) in a
5597 few places. For avoiding a deadlock, we ensure that the global
5598 slave_active_lock is always locked at first before each timer lock.
5600 Also, ack and active_list of slave instances are properly unlinked at
5601 snd_timer_stop() and snd_timer_close().
5603 Last but not least, remove the superfluous call of _snd_timer_stop()
5604 at removing slave links. This is a noop, and calling it may confuse
5605 readers wrt locking. Further cleanup will follow in a later patch.
5607 Actually we've got reports of use-after-free by syzkaller fuzzer, and
5608 this hopefully fixes these issues.
5610 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5611 Cc: <stable@vger.kernel.org>
5612 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5614 sound/core/timer.c | 18 ++++++++++++++----
5615 1 files changed, 14 insertions(+), 4 deletions(-)
5617 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
5618 Author: Takashi Iwai <tiwai@suse.de>
5619 Date: Wed Jan 13 17:48:01 2016 +0100
5621 ALSA: timer: Fix race among timer ioctls
5623 ALSA timer ioctls have an open race and this may lead to a
5624 use-after-free of timer instance object. A simplistic fix is to make
5625 each ioctl exclusive. We have already tread_sem for controlling the
5626 tread, and extend this as a global mutex to be applied to each ioctl.
5628 The downside is, of course, the worse concurrency. But these ioctls
5629 aren't to be parallel accessible, in anyway, so it should be fine to
5632 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5633 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5634 Cc: <stable@vger.kernel.org>
5635 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5637 sound/core/timer.c | 32 +++++++++++++++++++-------------
5638 1 files changed, 19 insertions(+), 13 deletions(-)
5640 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
5641 Author: Takashi Iwai <tiwai@suse.de>
5642 Date: Wed Jan 13 21:35:06 2016 +0100
5644 ALSA: timer: Fix double unlink of active_list
5646 ALSA timer instance object has a couple of linked lists and they are
5647 unlinked unconditionally at snd_timer_stop(). Meanwhile
5648 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
5649 the element list itself unchanged. This ends up with unlinking twice,
5650 and it was caught by syzkaller fuzzer.
5652 The fix is to use list_del_init() variant properly there, too.
5654 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5655 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5656 Cc: <stable@vger.kernel.org>
5657 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5659 sound/core/timer.c | 2 +-
5660 1 files changed, 1 insertions(+), 1 deletions(-)
5662 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
5663 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
5664 Date: Mon Jan 18 18:03:48 2016 +0100
5666 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
5668 It was seen that defective configurations of openvswitch could overwrite
5669 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
5670 many recursions within ovs.
5672 This problem arises due to the high stack usage of openvswitch. The rest
5673 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
5675 We use the already existing recursion counter in ovs_execute_actions to
5676 implement an upper bound of 5 recursions.
5678 Cc: Pravin Shelar <pshelar@ovn.org>
5679 Cc: Simon Horman <simon.horman@netronome.com>
5680 Cc: Eric Dumazet <eric.dumazet@gmail.com>
5681 Cc: Simon Horman <simon.horman@netronome.com>
5682 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
5683 Signed-off-by: David S. Miller <davem@davemloft.net>
5685 net/openvswitch/actions.c | 19 ++++++++++++++-----
5686 1 files changed, 14 insertions(+), 5 deletions(-)
5688 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
5689 Author: Ursula Braun <ursula.braun@de.ibm.com>
5690 Date: Tue Jan 19 10:41:33 2016 +0100
5692 af_iucv: Validate socket address length in iucv_sock_bind()
5694 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
5695 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5696 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
5697 Signed-off-by: David S. Miller <davem@davemloft.net>
5699 net/iucv/af_iucv.c | 3 +++
5700 1 files changed, 3 insertions(+), 0 deletions(-)
5702 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
5703 Author: Brad Spengler <spender@grsecurity.net>
5704 Date: Tue Jan 19 19:32:54 2016 -0500
5706 Apply the same fix as everyone else for the recent keys vulnerability that is
5707 unexploitable under PAX_REFCOUNT
5709 Make a couple more changes that no one else can/will
5711 include/linux/key-type.h | 4 ++--
5712 ipc/msgutil.c | 4 ++--
5713 security/keys/internal.h | 2 +-
5714 security/keys/process_keys.c | 1 +
5715 4 files changed, 6 insertions(+), 5 deletions(-)
5717 commit b56c3a63f431c193400aee17543021950bd14bc4
5718 Merge: 38b1a3d 470069c
5719 Author: Brad Spengler <spender@grsecurity.net>
5720 Date: Sun Jan 17 18:30:19 2016 -0500
5722 Merge branch 'pax-test' into grsec-test
5724 commit 470069cfedef2180313233d275be5901bd6d1135
5725 Author: Brad Spengler <spender@grsecurity.net>
5726 Date: Sun Jan 17 18:29:59 2016 -0500
5728 Update to pax-linux-4.3.3-test22.patch:
5729 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
5730 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
5732 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
5733 drivers/gpu/drm/drm_pci.c | 3 +++
5734 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
5735 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
5736 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
5737 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
5738 drivers/net/usb/asix_common.c | 3 ++-
5739 include/drm/drmP.h | 1 +
5740 8 files changed, 22 insertions(+), 29 deletions(-)
5742 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
5743 Author: Brad Spengler <spender@grsecurity.net>
5744 Date: Sun Jan 17 12:33:53 2016 -0500
5746 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
5747 mentioned banning execution of suid/sgid binaries, though the kernel
5748 source clearly only mentions banning execution of suid binaries. Since
5749 there's no reason for us to not ban execution of sgid binaries as well,
5750 make the implementation match the Kconfig description.
5753 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
5754 include/linux/sched.h | 4 ++--
5755 3 files changed, 18 insertions(+), 17 deletions(-)
5757 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
5758 Merge: d141a86 ea4a835
5759 Author: Brad Spengler <spender@grsecurity.net>
5760 Date: Sat Jan 16 14:12:22 2016 -0500
5762 Merge branch 'pax-test' into grsec-test
5765 drivers/gpu/drm/i810/i810_drv.c
5767 commit ea4a835328ada6513ac013986764d6caea8cd348
5768 Author: Brad Spengler <spender@grsecurity.net>
5769 Date: Sat Jan 16 14:11:30 2016 -0500
5771 Update to pax-linux-4.3.3-test21.patch:
5772 - fixed some fallout from the drm_drivers constification, reported by spender
5774 drivers/gpu/drm/armada/armada_drv.c | 3 +--
5775 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
5776 drivers/gpu/drm/i810/i810_dma.c | 2 +-
5777 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
5778 drivers/gpu/drm/i810/i810_drv.h | 2 +-
5779 5 files changed, 8 insertions(+), 6 deletions(-)
5781 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
5782 Author: Brad Spengler <spender@grsecurity.net>
5783 Date: Sat Jan 16 13:16:36 2016 -0500
5787 drivers/gpu/drm/i810/i810_dma.c | 2 +-
5788 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
5789 drivers/gpu/drm/i810/i810_drv.h | 2 +-
5790 3 files changed, 5 insertions(+), 3 deletions(-)
5792 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
5793 Merge: 5fa135d bbda879
5794 Author: Brad Spengler <spender@grsecurity.net>
5795 Date: Sat Jan 16 12:59:22 2016 -0500
5797 Merge branch 'pax-test' into grsec-test
5799 commit bbda87914edf63e27fb46670bf3a373f2b963c73
5800 Author: Brad Spengler <spender@grsecurity.net>
5801 Date: Sat Jan 16 12:58:04 2016 -0500
5803 Update to pax-linux-4.3.3-test20.patch:
5804 - constified drm_driver
5805 - Emese fixed a special case in handling __func__ in the initify plugin
5806 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
5807 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
5809 arch/x86/kernel/cpu/perf_event.h | 2 +-
5810 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
5811 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
5812 arch/x86/kernel/uprobes.c | 2 +-
5813 arch/x86/mm/mpx.c | 2 +-
5814 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
5815 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
5816 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
5817 drivers/gpu/drm/drm_pci.c | 6 +-
5818 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
5819 drivers/gpu/drm/i915/i915_dma.c | 2 +-
5820 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
5821 drivers/gpu/drm/i915/i915_drv.h | 2 +-
5822 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
5823 drivers/gpu/drm/mga/mga_drv.c | 5 +-
5824 drivers/gpu/drm/mga/mga_drv.h | 2 +-
5825 drivers/gpu/drm/mga/mga_state.c | 2 +-
5826 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
5827 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
5828 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
5829 drivers/gpu/drm/r128/r128_drv.c | 4 +-
5830 drivers/gpu/drm/r128/r128_drv.h | 2 +-
5831 drivers/gpu/drm/r128/r128_state.c | 2 +-
5832 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
5833 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
5834 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
5835 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
5836 drivers/gpu/drm/savage/savage_bci.c | 2 +-
5837 drivers/gpu/drm/savage/savage_drv.c | 5 +-
5838 drivers/gpu/drm/savage/savage_drv.h | 2 +-
5839 drivers/gpu/drm/sis/sis_drv.c | 5 +-
5840 drivers/gpu/drm/sis/sis_drv.h | 2 +-
5841 drivers/gpu/drm/sis/sis_mm.c | 2 +-
5842 drivers/gpu/drm/via/via_dma.c | 2 +-
5843 drivers/gpu/drm/via/via_drv.c | 5 +-
5844 drivers/gpu/drm/via/via_drv.h | 2 +-
5845 include/drm/drmP.h | 2 +-
5847 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
5848 tools/gcc/initify_plugin.c | 15 +++-
5849 .../disable_size_overflow_hash.data | 1 +
5850 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
5851 42 files changed, 156 insertions(+), 110 deletions(-)
5853 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
5854 Author: Brad Spengler <spender@grsecurity.net>
5855 Date: Sat Jan 16 12:19:23 2016 -0500
5859 grsecurity/grsec_sig.c | 3 +--
5860 1 files changed, 1 insertions(+), 2 deletions(-)
5862 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
5863 Author: Brad Spengler <spender@grsecurity.net>
5864 Date: Sat Jan 16 12:10:37 2016 -0500
5866 As pointed out by Jann Horn, some distros are starting to circumvent
5867 previous assumptions about the attainability of a user to control
5868 multiple UIDs by handing out suid binaries that allow a user to run
5869 processes (including exploits) under a number of other pre-defined
5870 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
5871 (though it would have to involve some code path that doesn't involve
5872 locks) fix that here by ensuring no more than 8 users on a system can
5873 be banned before a reboot is required. If more are banned, a panic
5876 grsecurity/grsec_sig.c | 8 ++++++++
5877 1 files changed, 8 insertions(+), 0 deletions(-)
5879 commit a8d37776e9521c567ebff6730d49312f72435f08
5880 Author: Eric Dumazet <edumazet@google.com>
5881 Date: Thu Dec 3 11:12:07 2015 -0800
5883 proc: add a reschedule point in proc_readfd_common()
5885 User can pass an arbitrary large buffer to getdents().
5887 It is typically a 32KB buffer used by libc scandir() implementation.
5889 When scanning /proc/{pid}/fd, we can hold cpu way too long,
5890 so add a cond_resched() to be kind with other tasks.
5892 We've seen latencies of more than 50ms on real workloads.
5894 Signed-off-by: Eric Dumazet <edumazet@google.com>
5895 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
5896 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5899 1 files changed, 1 insertions(+), 0 deletions(-)
5901 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
5902 Author: Rabin Vincent <rabin@rab.in>
5903 Date: Tue Jan 12 20:17:08 2016 +0100
5905 net: bpf: reject invalid shifts
5907 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
5908 constant shift that can't be encoded in the immediate field of the
5909 UBFM/SBFM instructions is passed to the JIT. Since these shifts
5910 amounts, which are negative or >= regsize, are invalid, reject them in
5911 the eBPF verifier and the classic BPF filter checker, for all
5914 Signed-off-by: Rabin Vincent <rabin@rab.in>
5915 Acked-by: Alexei Starovoitov <ast@kernel.org>
5916 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
5917 Signed-off-by: David S. Miller <davem@davemloft.net>
5919 kernel/bpf/verifier.c | 10 ++++++++++
5920 net/core/filter.c | 5 +++++
5921 2 files changed, 15 insertions(+), 0 deletions(-)
5923 commit c248e115a73496625a1c64660d0eeefd67e55cbf
5924 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
5925 Date: Fri Jan 8 11:00:54 2016 -0200
5927 sctp: fix use-after-free in pr_debug statement
5929 Dmitry Vyukov reported a use-after-free in the code expanded by the
5930 macro debug_post_sfx, which is caused by the use of the asoc pointer
5931 after it was freed within sctp_side_effect() scope.
5933 This patch fixes it by allowing sctp_side_effect to clear that asoc
5934 pointer when the TCB is freed.
5936 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
5937 because it will trigger DELETE_TCB too on that same loop.
5939 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
5940 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
5941 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
5943 The macro is already prepared to handle such NULL pointer.
5945 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5946 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
5947 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
5948 Signed-off-by: David S. Miller <davem@davemloft.net>
5950 net/sctp/sm_sideeffect.c | 11 ++++++-----
5951 net/sctp/sm_statefuns.c | 17 ++++-------------
5952 2 files changed, 10 insertions(+), 18 deletions(-)
5954 commit 395ea8a9e73e184fc14153a033000bccf4213213
5955 Author: willy tarreau <w@1wt.eu>
5956 Date: Sun Jan 10 07:54:56 2016 +0100
5958 unix: properly account for FDs passed over unix sockets
5960 It is possible for a process to allocate and accumulate far more FDs than
5961 the process' limit by sending them over a unix socket then closing them
5962 to keep the process' fd count low.
5964 This change addresses this problem by keeping track of the number of FDs
5965 in flight per user and preventing non-privileged processes from having
5966 more FDs in flight than their configured FD limit.
5968 Reported-by: socketpair@gmail.com
5969 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
5970 Mitigates: CVE-2013-4312 (Linux 2.0+)
5971 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
5972 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
5973 Signed-off-by: Willy Tarreau <w@1wt.eu>
5974 Signed-off-by: David S. Miller <davem@davemloft.net>
5976 include/linux/sched.h | 1 +
5977 net/unix/af_unix.c | 24 ++++++++++++++++++++----
5978 net/unix/garbage.c | 13 ++++++++-----
5979 3 files changed, 29 insertions(+), 9 deletions(-)
5981 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
5982 Author: Sasha Levin <sasha.levin@oracle.com>
5983 Date: Thu Jan 7 14:52:43 2016 -0500
5985 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
5987 proc_dostring() needs an initialized destination string, while the one
5988 provided in proc_sctp_do_hmac_alg() contains stack garbage.
5990 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
5991 accessing invalid memory.
5993 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
5994 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
5995 Signed-off-by: David S. Miller <davem@davemloft.net>
5997 net/sctp/sysctl.c | 2 +-
5998 1 files changed, 1 insertions(+), 1 deletions(-)
6000 commit 4014e09faf0fe9054119624ccfff1236e886b554
6001 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6002 Date: Tue Nov 24 17:13:21 2015 -0500
6004 RDS: fix race condition when sending a message on unbound socket
6006 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
6008 Sasha's found a NULL pointer dereference in the RDS connection code when
6009 sending a message to an apparently unbound socket. The problem is caused
6010 by the code checking if the socket is bound in rds_sendmsg(), which checks
6011 the rs_bound_addr field without taking a lock on the socket. This opens a
6012 race where rs_bound_addr is temporarily set but where the transport is not
6013 in rds_bind(), leading to a NULL pointer dereference when trying to
6014 dereference 'trans' in __rds_conn_create().
6016 Vegard wrote a reproducer for this issue, so kindly ask him to share if
6019 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
6020 with this patch, whereas I could without.
6022 Complete earlier incomplete fix to CVE-2015-6937:
6024 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
6026 Cc: David S. Miller <davem@davemloft.net>
6028 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
6029 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
6030 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
6031 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6032 Signed-off-by: David S. Miller <davem@davemloft.net>
6033 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
6039 net/rds/connection.c | 6 ------
6040 1 files changed, 0 insertions(+), 6 deletions(-)
6042 commit 206df8d01104344d7588d801016a281a4cd25556
6043 Author: Sasha Levin <sasha.levin@oracle.com>
6044 Date: Tue Sep 8 10:53:40 2015 -0400
6046 RDS: verify the underlying transport exists before creating a connection
6048 There was no verification that an underlying transport exists when creating
6049 a connection, this would cause dereferencing a NULL ptr.
6051 It might happen on sockets that weren't properly bound before attempting to
6052 send a message, which will cause a NULL ptr deref:
6054 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
6055 [135546.051270] Modules linked in:
6056 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
6057 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
6058 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
6059 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
6060 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
6061 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
6062 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
6063 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
6064 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
6065 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
6066 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
6067 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
6068 [135546.064723] Stack:
6069 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
6070 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
6071 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
6072 [135546.068629] Call Trace:
6073 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
6074 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
6075 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
6076 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
6077 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
6078 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
6079 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
6080 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
6081 [135546.076349] ? __might_fault (mm/memory.c:3795)
6082 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
6083 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
6084 [135546.078856] SYSC_sendto (net/socket.c:1657)
6085 [135546.079596] ? SYSC_connect (net/socket.c:1628)
6086 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
6087 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
6088 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
6089 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
6090 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
6091 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
6092 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
6094 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
6095 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
6096 Signed-off-by: David S. Miller <davem@davemloft.net>
6098 net/rds/connection.c | 6 ++++++
6099 1 files changed, 6 insertions(+), 0 deletions(-)
6101 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
6102 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
6103 Date: Tue Jan 5 20:32:47 2016 -0500
6105 ftrace/module: Call clean up function when module init fails early
6107 If the module init code fails after calling ftrace_module_init() and before
6108 calling do_init_module(), we can suffer from a memory leak. This is because
6109 ftrace_module_init() allocates pages to store the locations that ftrace
6110 hooks are placed in the module text. If do_init_module() fails, it still
6111 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
6112 the pages it allocated for the module. But if load_module() fails before
6113 then, the pages allocated by ftrace_module_init() will never be freed.
6115 Call ftrace_release_mod() on the module if load_module() fails before
6116 getting to do_init_module().
6118 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
6120 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
6121 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
6122 Cc: stable@vger.kernel.org # v2.6.38+
6123 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
6124 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
6126 include/linux/ftrace.h | 1 +
6127 kernel/module.c | 6 ++++++
6128 2 files changed, 7 insertions(+), 0 deletions(-)
6130 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
6131 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
6132 Date: Wed Jan 6 00:18:48 2016 -0800
6134 net: possible use after free in dst_release
6136 dst_release should not access dst->flags after decrementing
6137 __refcnt to 0. The dst_entry may be in dst_busy_list and
6138 dst_gc_task may dst_destroy it before dst_release gets a chance
6139 to access dst->flags.
6141 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
6142 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
6143 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
6144 Acked-by: Eric Dumazet <edumazet@google.com>
6145 Signed-off-by: David S. Miller <davem@davemloft.net>
6147 net/core/dst.c | 3 ++-
6148 1 files changed, 2 insertions(+), 1 deletions(-)
6150 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
6151 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
6152 Date: Wed Jan 6 14:55:02 2016 +0000
6154 mkiss: fix scribble on freed memory
6156 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
6157 scribble on free memory but added a new one which allows the user to
6158 scribble even more and user controlled data into freed space.
6160 As with 6pack we need to halt the queue before we free the buffers, because
6161 the transmit logic is not protected by the semaphore.
6163 Signed-off-by: Alan Cox <alan@linux.intel.com>
6164 Signed-off-by: David S. Miller <davem@davemloft.net>
6166 drivers/net/hamradio/mkiss.c | 5 +++++
6167 1 files changed, 5 insertions(+), 0 deletions(-)
6169 commit 5cbbcbd32dc1949470f61d342503808fa9555276
6170 Author: David Miller <davem@davemloft.net>
6171 Date: Thu Dec 17 16:05:49 2015 -0500
6173 mkiss: Fix use after free in mkiss_close().
6175 Need to do the unregister_device() after all references to the driver
6176 private have been done.
6178 Signed-off-by: David S. Miller <davem@davemloft.net>
6180 drivers/net/hamradio/mkiss.c | 4 ++--
6181 1 files changed, 2 insertions(+), 2 deletions(-)
6183 commit b00171576794a98068e069a660f0991a6a5190ff
6184 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
6185 Date: Tue Jan 5 11:51:25 2016 +0000
6187 6pack: fix free memory scribbles
6189 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
6190 memory scribble but in doing so replaced it with a different one that allows
6191 the user to control the data and scribble even more.
6193 sixpack_close is called by the tty layer in tty context. The tty context is
6194 protected by sp_get() and sp_put(). However network layer activity via
6195 sp_xmit() is not protected this way. We must therefore stop the queue
6196 otherwise the user gets to dump a buffer mostly of their choice into freed
6199 Signed-off-by: Alan Cox <alan@linux.intel.com>
6200 Signed-off-by: David S. Miller <davem@davemloft.net>
6202 drivers/net/hamradio/6pack.c | 6 ++++++
6203 1 files changed, 6 insertions(+), 0 deletions(-)
6205 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
6206 Author: David Miller <davem@davemloft.net>
6207 Date: Thu Dec 17 16:05:32 2015 -0500
6209 6pack: Fix use after free in sixpack_close().
6211 Need to do the unregister_device() after all references to the driver
6212 private have been done.
6214 Also we need to use del_timer_sync() for the timers so that we don't
6215 have any asynchronous references after the unregister.
6217 Signed-off-by: David S. Miller <davem@davemloft.net>
6219 drivers/net/hamradio/6pack.c | 8 ++++----
6220 1 files changed, 4 insertions(+), 4 deletions(-)
6222 commit 4f9d532742656b3613d579220fd10c78f24ba37b
6223 Author: Rabin Vincent <rabin@rab.in>
6224 Date: Tue Jan 5 16:23:07 2016 +0100
6226 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
6228 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
6229 instructions since it XORs A with X while all the others replace A with
6230 some loaded value. All the BPF JITs fail to clear A if this is used as
6231 the first instruction in a filter. This was found using american fuzzy
6234 Add a helper to determine if A needs to be cleared given the first
6235 instruction in a filter, and use this in the JITs. Except for ARM, the
6236 rest have only been compile-tested.
6238 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
6239 Signed-off-by: Rabin Vincent <rabin@rab.in>
6240 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
6241 Acked-by: Alexei Starovoitov <ast@kernel.org>
6242 Signed-off-by: David S. Miller <davem@davemloft.net>
6244 arch/arm/net/bpf_jit_32.c | 16 +---------------
6245 arch/mips/net/bpf_jit.c | 16 +---------------
6246 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
6247 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
6248 include/linux/filter.h | 19 +++++++++++++++++++
6249 5 files changed, 25 insertions(+), 56 deletions(-)
6251 commit 570d88f8acfffda92b89ae2e1c47320d47256034
6252 Author: John Fastabend <john.fastabend@gmail.com>
6253 Date: Tue Jan 5 09:11:36 2016 -0800
6255 net: sched: fix missing free per cpu on qstats
6257 When a qdisc is using per cpu stats (currently just the ingress
6258 qdisc) only the bstats are being freed. This also free's the qstats.
6260 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
6261 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
6262 Acked-by: Eric Dumazet <edumazet@google.com>
6263 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
6264 Signed-off-by: David S. Miller <davem@davemloft.net>
6266 net/sched/sch_generic.c | 4 +++-
6267 1 files changed, 3 insertions(+), 1 deletions(-)
6269 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
6270 Author: Rabin Vincent <rabin@rab.in>
6271 Date: Tue Jan 5 18:34:04 2016 +0100
6273 ARM: net: bpf: fix zero right shift
6275 The LSR instruction cannot be used to perform a zero right shift since a
6276 0 as the immediate value (imm5) in the LSR instruction encoding means
6277 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
6279 Make the JIT skip generation of the LSR if a zero-shift is requested.
6281 This was found using american fuzzy lop.
6283 Signed-off-by: Rabin Vincent <rabin@rab.in>
6284 Acked-by: Alexei Starovoitov <ast@kernel.org>
6285 Signed-off-by: David S. Miller <davem@davemloft.net>
6287 arch/arm/net/bpf_jit_32.c | 3 ++-
6288 1 files changed, 2 insertions(+), 1 deletions(-)
6290 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
6291 Author: Brad Spengler <spender@grsecurity.net>
6292 Date: Wed Jan 6 20:35:57 2016 -0500
6294 Don't perform hidden lookups in RBAC against the directory of
6295 a file being opened with O_CREAT, reported by Karl Witt
6302 1 files changed, 0 insertions(+), 3 deletions(-)
6304 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
6305 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
6306 Date: Tue Jan 5 10:46:00 2016 +0100
6308 bridge: Only call /sbin/bridge-stp for the initial network namespace
6310 [I stole this patch from Eric Biederman. He wrote:]
6312 > There is no defined mechanism to pass network namespace information
6313 > into /sbin/bridge-stp therefore don't even try to invoke it except
6314 > for bridge devices in the initial network namespace.
6316 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
6317 > invoked for any network device name which if /sbin/bridge-stp does not
6318 > guard against unreasonable arguments or being invoked twice on the
6319 > same network device could cause problems.
6321 [Hannes: changed patch using netns_eq]
6323 Cc: Eric W. Biederman <ebiederm@xmission.com>
6324 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
6325 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
6326 Signed-off-by: David S. Miller <davem@davemloft.net>
6328 net/bridge/br_stp_if.c | 5 ++++-
6329 1 files changed, 4 insertions(+), 1 deletions(-)
6331 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
6332 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6333 Date: Wed Dec 23 16:28:40 2015 -0200
6335 sctp: use GFP_USER for user-controlled kmalloc
6337 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
6338 missed two other spots.
6340 For connectx, as it's more likely to be used by kernel users of the API,
6341 it detects if GFP_USER should be used or not.
6343 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
6344 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6345 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6346 Signed-off-by: David S. Miller <davem@davemloft.net>
6348 net/sctp/socket.c | 9 ++++++---
6349 1 files changed, 6 insertions(+), 3 deletions(-)
6351 commit 5718a1f63c41fc156f729783423b002763779d04
6352 Author: Florian Westphal <fw@strlen.de>
6353 Date: Thu Dec 31 14:26:33 2015 +0100
6355 connector: bump skb->users before callback invocation
6357 Dmitry reports memleak with syskaller program.
6358 Problem is that connector bumps skb usecount but might not invoke callback.
6360 So move skb_get to where we invoke the callback.
6362 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6363 Signed-off-by: Florian Westphal <fw@strlen.de>
6364 Signed-off-by: David S. Miller <davem@davemloft.net>
6366 drivers/connector/connector.c | 11 +++--------
6367 1 files changed, 3 insertions(+), 8 deletions(-)
6369 commit 2e6372e6a97f8d642416899861f91777f44f13b7
6370 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
6371 Date: Sun Jan 3 18:56:38 2016 +0000
6373 af_unix: Fix splice-bind deadlock
6375 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
6376 system call and AF_UNIX sockets,
6378 http://lists.openwall.net/netdev/2015/11/06/24
6380 The situation was analyzed as
6382 (a while ago) A: socketpair()
6383 B: splice() from a pipe to /mnt/regular_file
6384 does sb_start_write() on /mnt
6385 C: try to freeze /mnt
6386 wait for B to finish with /mnt
6387 A: bind() try to bind our socket to /mnt/new_socket_name
6388 lock our socket, see it not bound yet
6389 decide that it needs to create something in /mnt
6390 try to do sb_start_write() on /mnt, block (it's
6392 D: splice() from the same pipe to our socket
6393 lock the pipe, see that socket is connected
6394 try to lock the socket, block waiting for A
6395 B: get around to actually feeding a chunk from
6396 pipe to file, try to lock the pipe. Deadlock.
6398 on 2015/11/10 by Al Viro,
6400 http://lists.openwall.net/netdev/2015/11/10/4
6402 The patch fixes this by removing the kern_path_create related code from
6403 unix_mknod and executing it as part of unix_bind prior acquiring the
6404 readlock of the socket in question. This means that A (as used above)
6405 will sb_start_write on /mnt before it acquires the readlock, hence, it
6406 won't indirectly block B which first did a sb_start_write and then
6407 waited for a thread trying to acquire the readlock. Consequently, A
6408 being blocked by C waiting for B won't cause a deadlock anymore
6409 (effectively, both A and B acquire two locks in opposite order in the
6410 situation described above).
6412 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
6414 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
6415 Signed-off-by: David S. Miller <davem@davemloft.net>
6421 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
6422 1 files changed, 42 insertions(+), 28 deletions(-)
6424 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
6425 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
6426 Date: Thu Dec 31 13:11:28 2015 +0800
6428 tracing: Fix setting of start_index in find_next()
6430 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
6433 general protection fault: 0000 [#1] PREEMPT SMP
6434 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
6435 RIP: 0010:[<ffffffff811375b2>]
6436 [<ffffffff811375b2>] t_show+0x22/0xe0
6437 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
6438 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
6439 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
6440 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
6441 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
6442 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
6443 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
6444 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
6445 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
6447 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
6448 [<ffffffff811b749b>] vfs_read+0x9b/0x160
6449 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
6450 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
6451 ---[ end trace 5bd9eb630614861e ]---
6452 Kernel panic - not syncing: Fatal exception
6454 When the first time find_next calls find_next_mod_format, it should
6455 iterate the trace_bprintk_fmt_list to find the first print format of
6456 the module. However in current code, start_index is smaller than *pos
6457 at first, and code will not iterate the list. Latter container_of will
6458 get the wrong address with former v, which will cause mod_fmt be a
6459 meaningless object and so is the returned mod_fmt->fmt.
6461 This patch will fix it by correcting the start_index. After fixed,
6462 when the first time calls find_next_mod_format, start_index will be
6463 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
6464 get the right module printk format, so is the returned mod_fmt->fmt.
6466 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
6468 Cc: stable@vger.kernel.org # 3.12+
6469 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
6470 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
6471 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
6473 kernel/trace/trace_printk.c | 1 +
6474 1 files changed, 1 insertions(+), 0 deletions(-)
6476 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
6477 Author: Al Viro <viro@zeniv.linux.org.uk>
6478 Date: Mon Dec 28 20:47:08 2015 -0500
6480 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
6482 Cc: stable@vger.kernel.org # 3.15+
6483 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
6484 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
6486 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
6487 1 files changed, 37 insertions(+), 36 deletions(-)
6489 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
6490 Merge: de243c2 3adc55a
6491 Author: Brad Spengler <spender@grsecurity.net>
6492 Date: Tue Jan 5 18:10:10 2016 -0500
6494 Merge branch 'pax-test' into grsec-test
6496 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
6497 Author: Brad Spengler <spender@grsecurity.net>
6498 Date: Tue Jan 5 18:08:53 2016 -0500
6500 Update to pax-linux-4.3.3-test16.patch:
6501 - small cleanup in entry_64.S on x86
6502 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
6503 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
6504 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
6505 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
6506 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
6508 arch/x86/entry/entry_64.S | 60 +++++-----
6509 arch/x86/kernel/alternative.c | 2 +-
6510 arch/x86/kvm/emulate.c | 4 +-
6511 tools/gcc/initify_plugin.c | 123 +++++++++----------
6512 .../disable_size_overflow_hash.data | 4 +-
6513 .../size_overflow_plugin/size_overflow_hash.data | 2 -
6514 6 files changed, 93 insertions(+), 102 deletions(-)
6516 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
6517 Author: Brad Spengler <spender@grsecurity.net>
6518 Date: Tue Dec 29 18:01:24 2015 -0500
6520 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
6521 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
6522 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
6524 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
6525 against suid/sgid attacks and the flaw above would only eliminate the extra
6526 entropy provided for the brk-managed heap, still leaving it with the minimum
6527 of 16-bit entropy for mmap on x86 and 28 on x64.
6530 1 files changed, 1 insertions(+), 1 deletions(-)
6532 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
6533 Merge: 436201b 2584340
6534 Author: Brad Spengler <spender@grsecurity.net>
6535 Date: Mon Dec 28 20:30:01 2015 -0500
6537 Merge branch 'pax-test' into grsec-test
6539 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
6540 Author: Brad Spengler <spender@grsecurity.net>
6541 Date: Mon Dec 28 20:29:28 2015 -0500
6543 Update to pax-linux-4.3.3-test14.patch:
6544 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
6545 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
6546 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
6547 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
6548 - fixed an assert in the initify plugin that triggered in vic_register on arm
6550 arch/arm/include/asm/atomic.h | 7 +++++--
6551 arch/arm/include/asm/domain.h | 5 ++---
6552 arch/x86/kernel/tboot.c | 14 +++++++++-----
6553 drivers/hv/channel.c | 4 +---
6554 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
6555 drivers/net/hyperv/rndis_filter.c | 3 +--
6557 include/linux/atomic.h | 15 ---------------
6558 net/core/skbuff.c | 3 ++-
6559 tools/gcc/initify_plugin.c | 4 +++-
6560 10 files changed, 26 insertions(+), 35 deletions(-)
6562 commit 436201b6626b488d173c8076447000077c27b84a
6563 Author: David Howells <dhowells@redhat.com>
6564 Date: Fri Dec 18 01:34:26 2015 +0000
6566 KEYS: Fix race between read and revoke
6568 This fixes CVE-2015-7550.
6570 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
6571 happens between keyctl_read() checking the validity of a key and the key's
6572 semaphore being taken, then the key type read method will see a revoked key.
6574 This causes a problem for the user-defined key type because it assumes in
6575 its read method that there will always be a payload in a non-revoked key
6576 and doesn't check for a NULL pointer.
6578 Fix this by making keyctl_read() check the validity of a key after taking
6579 semaphore instead of before.
6581 I think the bug was introduced with the original keyrings code.
6583 This was discovered by a multithreaded test program generated by syzkaller
6584 (http://github.com/google/syzkaller). Here's a cleaned up version:
6586 #include <sys/types.h>
6587 #include <keyutils.h>
6588 #include <pthread.h>
6589 void *thr0(void *arg)
6591 key_serial_t key = (unsigned long)arg;
6595 void *thr1(void *arg)
6597 key_serial_t key = (unsigned long)arg;
6599 keyctl_read(key, buffer, 16);
6604 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
6606 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
6607 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
6608 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
6609 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
6610 pthread_join(th[0], 0);
6611 pthread_join(th[1], 0);
6612 pthread_join(th[2], 0);
6613 pthread_join(th[3], 0);
6619 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
6623 while keyctl-race; do :; done
6625 as it may need several iterations to crash the kernel. The crash can be
6628 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
6629 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
6632 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
6633 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
6634 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
6636 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6637 Signed-off-by: David Howells <dhowells@redhat.com>
6638 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6639 Cc: stable@vger.kernel.org
6640 Signed-off-by: James Morris <james.l.morris@oracle.com>
6642 security/keys/keyctl.c | 18 +++++++++---------
6643 1 files changed, 9 insertions(+), 9 deletions(-)
6645 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
6646 Author: Brad Spengler <spender@grsecurity.net>
6647 Date: Tue Dec 22 20:44:01 2015 -0500
6649 Add new kernel command-line param: pax_size_overflow_report_only
6650 If a user triggers a size_overflow violation that makes it difficult
6651 to obtain the call trace without serial console/net console, they can
6652 use this option to provide that information to us
6654 Documentation/kernel-parameters.txt | 5 +++++
6655 fs/exec.c | 12 +++++++++---
6656 init/main.c | 11 +++++++++++
6657 3 files changed, 25 insertions(+), 3 deletions(-)
6659 commit 4254a8da5851df8c08cdca5c392916e8c105408d
6660 Author: WANG Cong <xiyou.wangcong@gmail.com>
6661 Date: Mon Dec 21 10:55:45 2015 -0800
6663 addrconf: always initialize sysctl table data
6665 When sysctl performs restrict writes, it allows to write from
6666 a middle position of a sysctl file, which requires us to initialize
6667 the table data before calling proc_dostring() for the write case.
6669 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
6670 Reported-by: Sasha Levin <sasha.levin@oracle.com>
6671 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
6672 Tested-by: Sasha Levin <sasha.levin@oracle.com>
6673 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
6674 Signed-off-by: David S. Miller <davem@davemloft.net>
6676 net/ipv6/addrconf.c | 11 ++++-------
6677 1 files changed, 4 insertions(+), 7 deletions(-)
6679 commit f8002863fb06c363180637046947a78a6ccb3d33
6680 Author: WANG Cong <xiyou.wangcong@gmail.com>
6681 Date: Wed Dec 16 23:39:04 2015 -0800
6683 net: check both type and procotol for tcp sockets
6685 Dmitry reported the following out-of-bound access:
6688 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
6689 mm/kasan/report.c:294
6690 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
6691 [< inline >] SYSC_setsockopt net/socket.c:1746
6692 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
6693 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
6694 arch/x86/entry/entry_64.S:185
6696 This is because we mistake a raw socket as a tcp socket.
6697 We should check both sk->sk_type and sk->sk_protocol to ensure
6700 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
6702 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6703 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
6704 Cc: Eric Dumazet <eric.dumazet@gmail.com>
6705 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
6706 Acked-by: Willem de Bruijn <willemb@google.com>
6707 Signed-off-by: David S. Miller <davem@davemloft.net>
6709 net/core/skbuff.c | 3 ++-
6710 net/core/sock.c | 3 ++-
6711 2 files changed, 4 insertions(+), 2 deletions(-)
6713 commit bd6b3399804470a4ad8f34229469ca149dceba3d
6714 Author: Colin Ian King <colin.king@canonical.com>
6715 Date: Fri Dec 18 14:22:01 2015 -0800
6717 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
6719 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
6720 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
6721 the setting of ret after the get_proc_task call and incorrectly left it as
6722 -ESRCH. Instead, return 0 when successful.
6726 echo 0 > /proc/self/coredump_filter
6727 bash: echo: write error: No such process
6729 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
6730 Signed-off-by: Colin Ian King <colin.king@canonical.com>
6731 Acked-by: Kees Cook <keescook@chromium.org>
6732 Cc: <stable@vger.kernel.org> [4.3+]
6733 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
6734 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
6736 fs/proc/base.c | 1 +
6737 1 files changed, 1 insertions(+), 0 deletions(-)
6739 commit b28aca2b99ed08546778355fb9402c503ff9b29e
6740 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
6741 Date: Tue Dec 22 10:23:44 2015 -0700
6743 block: ensure to split after potentially bouncing a bio
6745 blk_queue_bio() does split then bounce, which makes the segment
6746 counting based on pages before bouncing and could go wrong. Move
6747 the split to after bouncing, like we do for blk-mq, and the we
6748 fix the issue of having the bio count for segments be wrong.
6750 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
6751 Cc: stable@vger.kernel.org
6752 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
6753 Signed-off-by: Jens Axboe <axboe@fb.com>
6755 block/blk-core.c | 4 ++--
6756 1 files changed, 2 insertions(+), 2 deletions(-)
6758 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
6759 Merge: f6f63ae ec72fa5
6760 Author: Brad Spengler <spender@grsecurity.net>
6761 Date: Tue Dec 22 19:46:26 2015 -0500
6763 Merge branch 'pax-test' into grsec-test
6765 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
6766 Author: Brad Spengler <spender@grsecurity.net>
6767 Date: Tue Dec 22 19:45:51 2015 -0500
6769 Update to pax-linux-4.3.3-test13.patch:
6770 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
6771 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
6773 arch/arm/mm/fault.c | 2 +-
6774 arch/x86/mm/fault.c | 2 +-
6775 fs/btrfs/extent_map.c | 8 ++++++--
6776 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
6777 4 files changed, 11 insertions(+), 5 deletions(-)
6779 commit f6f63ae154cd45028add1dc41957878060d77fbf
6780 Author: Brad Spengler <spender@grsecurity.net>
6781 Date: Thu Dec 17 18:43:44 2015 -0500
6783 ptrace_has_cap() checks whether the current process should be
6784 treated as having a certain capability for ptrace checks
6785 against another process. Until now, this was equivalent to
6786 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
6788 However, if a root-owned process wants to enter a user
6789 namespace for some reason without knowing who owns it and
6790 therefore can't change to the namespace owner's uid and gid
6791 before entering, as soon as it has entered the namespace,
6792 the namespace owner can attach to it via ptrace and thereby
6793 gain access to its uid and gid.
6795 While it is possible for the entering process to switch to
6796 the uid of a claimed namespace owner before entering,
6797 causing the attempt to enter to fail if the claimed uid is
6798 wrong, this doesn't solve the problem of determining an
6801 With this change, the entering process can first enter the
6802 namespace and then safely inspect the namespace's
6803 properties, e.g. through /proc/self/{uid_map,gid_map},
6804 assuming that the namespace owner doesn't have access to
6806 Signed-off-by: Jann Horn <jann@thejh.net>
6808 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
6809 1 files changed, 25 insertions(+), 5 deletions(-)
6811 commit e314f0fb63020f61543b401ff594e953c2c304e5
6812 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
6813 Date: Tue Dec 15 10:46:17 2015 -0800
6815 net: fix uninitialized variable issue
6817 msg_iocb needs to be initialized on the recv/recvfrom path.
6818 Otherwise afalg will wrongly interpret it as an async call.
6820 Cc: stable@vger.kernel.org
6821 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
6822 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
6823 Signed-off-by: David S. Miller <davem@davemloft.net>
6826 1 files changed, 1 insertions(+), 0 deletions(-)
6828 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
6829 Merge: dfa764c 142edcf
6830 Author: Brad Spengler <spender@grsecurity.net>
6831 Date: Wed Dec 16 21:01:17 2015 -0500
6833 Merge branch 'pax-test' into grsec-test
6835 commit 142edcf1005a57fb8887823565cf0bafad2f313c
6836 Author: Brad Spengler <spender@grsecurity.net>
6837 Date: Wed Dec 16 21:00:57 2015 -0500
6839 Update to pax-linux-4.3.3-test12.patch:
6840 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
6841 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
6843 drivers/tty/n_tty.c | 16 ++++++++--------
6844 .../disable_size_overflow_hash.data | 2 ++
6845 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
6846 3 files changed, 12 insertions(+), 12 deletions(-)
6848 commit dfa764cc549892a5bfc1083cac78b99032cae577
6849 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
6850 Date: Tue Dec 15 22:59:12 2015 +0100
6852 ipv6: automatically enable stable privacy mode if stable_secret set
6854 Bjørn reported that while we switch all interfaces to privacy stable mode
6855 when setting the secret, we don't set this mode for new interfaces. This
6856 does not make sense, so change this behaviour.
6858 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
6859 Reported-by: Bjørn Mork <bjorn@mork.no>
6860 Cc: Bjørn Mork <bjorn@mork.no>
6861 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
6862 Signed-off-by: David S. Miller <davem@davemloft.net>
6864 net/ipv6/addrconf.c | 6 ++++++
6865 1 files changed, 6 insertions(+), 0 deletions(-)
6867 commit c2815a1fee03f222273e77c14e43f960da06f35a
6868 Author: Brad Spengler <spender@grsecurity.net>
6869 Date: Wed Dec 16 13:03:38 2015 -0500
6871 Work around upstream limitation on the number of thread info flags causing a compilation error
6872 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
6874 arch/arm/kernel/entry-common.S | 8 ++++++--
6875 1 files changed, 6 insertions(+), 2 deletions(-)
6877 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
6878 Author: Brad Spengler <spender@grsecurity.net>
6879 Date: Tue Dec 15 19:03:41 2015 -0500
6881 Initial import of grsecurity 3.1 for Linux 4.3.3
6883 Documentation/dontdiff | 2 +
6884 Documentation/kernel-parameters.txt | 7 +
6885 Documentation/sysctl/kernel.txt | 15 +
6887 arch/alpha/include/asm/cache.h | 4 +-
6888 arch/alpha/kernel/osf_sys.c | 12 +-
6889 arch/arc/Kconfig | 1 +
6890 arch/arm/Kconfig | 1 +
6891 arch/arm/Kconfig.debug | 1 +
6892 arch/arm/include/asm/thread_info.h | 7 +-
6893 arch/arm/kernel/process.c | 4 +-
6894 arch/arm/kernel/ptrace.c | 9 +
6895 arch/arm/kernel/traps.c | 7 +-
6896 arch/arm/mm/Kconfig | 2 +-
6897 arch/arm/mm/fault.c | 40 +-
6898 arch/arm/mm/mmap.c | 8 +-
6899 arch/arm/net/bpf_jit_32.c | 51 +-
6900 arch/arm64/Kconfig.debug | 1 +
6901 arch/avr32/include/asm/cache.h | 4 +-
6902 arch/blackfin/Kconfig.debug | 1 +
6903 arch/blackfin/include/asm/cache.h | 3 +-
6904 arch/cris/include/arch-v10/arch/cache.h | 3 +-
6905 arch/cris/include/arch-v32/arch/cache.h | 3 +-
6906 arch/frv/include/asm/cache.h | 3 +-
6907 arch/frv/mm/elf-fdpic.c | 4 +-
6908 arch/hexagon/include/asm/cache.h | 6 +-
6909 arch/ia64/Kconfig | 1 +
6910 arch/ia64/include/asm/cache.h | 3 +-
6911 arch/ia64/kernel/sys_ia64.c | 2 +
6912 arch/ia64/mm/hugetlbpage.c | 2 +
6913 arch/m32r/include/asm/cache.h | 4 +-
6914 arch/m68k/include/asm/cache.h | 4 +-
6915 arch/metag/mm/hugetlbpage.c | 1 +
6916 arch/microblaze/include/asm/cache.h | 3 +-
6917 arch/mips/Kconfig | 1 +
6918 arch/mips/include/asm/cache.h | 3 +-
6919 arch/mips/include/asm/thread_info.h | 11 +-
6920 arch/mips/kernel/irq.c | 3 +
6921 arch/mips/kernel/ptrace.c | 9 +
6922 arch/mips/mm/mmap.c | 4 +-
6923 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
6924 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
6925 arch/openrisc/include/asm/cache.h | 4 +-
6926 arch/parisc/include/asm/cache.h | 5 +-
6927 arch/parisc/kernel/sys_parisc.c | 4 +
6928 arch/powerpc/Kconfig | 1 +
6929 arch/powerpc/include/asm/cache.h | 4 +-
6930 arch/powerpc/include/asm/thread_info.h | 5 +-
6931 arch/powerpc/kernel/Makefile | 2 +
6932 arch/powerpc/kernel/irq.c | 3 +
6933 arch/powerpc/kernel/process.c | 10 +-
6934 arch/powerpc/kernel/ptrace.c | 14 +
6935 arch/powerpc/kernel/traps.c | 5 +
6936 arch/powerpc/mm/slice.c | 2 +-
6937 arch/s390/Kconfig.debug | 1 +
6938 arch/s390/include/asm/cache.h | 4 +-
6939 arch/score/include/asm/cache.h | 4 +-
6940 arch/sh/include/asm/cache.h | 3 +-
6941 arch/sh/mm/mmap.c | 6 +-
6942 arch/sparc/include/asm/cache.h | 4 +-
6943 arch/sparc/include/asm/pgalloc_64.h | 1 +
6944 arch/sparc/include/asm/thread_info_64.h | 8 +-
6945 arch/sparc/kernel/process_32.c | 6 +-
6946 arch/sparc/kernel/process_64.c | 8 +-
6947 arch/sparc/kernel/ptrace_64.c | 14 +
6948 arch/sparc/kernel/sys_sparc_64.c | 8 +-
6949 arch/sparc/kernel/syscalls.S | 8 +-
6950 arch/sparc/kernel/traps_32.c | 8 +-
6951 arch/sparc/kernel/traps_64.c | 28 +-
6952 arch/sparc/kernel/unaligned_64.c | 2 +-
6953 arch/sparc/mm/fault_64.c | 2 +-
6954 arch/sparc/mm/hugetlbpage.c | 15 +-
6955 arch/tile/Kconfig | 1 +
6956 arch/tile/include/asm/cache.h | 3 +-
6957 arch/tile/mm/hugetlbpage.c | 2 +
6958 arch/um/include/asm/cache.h | 3 +-
6959 arch/unicore32/include/asm/cache.h | 6 +-
6960 arch/x86/Kconfig | 21 +
6961 arch/x86/Kconfig.debug | 2 +
6962 arch/x86/entry/common.c | 14 +
6963 arch/x86/entry/entry_32.S | 2 +-
6964 arch/x86/entry/entry_64.S | 2 +-
6965 arch/x86/ia32/ia32_aout.c | 2 +
6966 arch/x86/include/asm/floppy.h | 20 +-
6967 arch/x86/include/asm/fpu/types.h | 69 +-
6968 arch/x86/include/asm/io.h | 2 +-
6969 arch/x86/include/asm/page.h | 12 +-
6970 arch/x86/include/asm/paravirt_types.h | 23 +-
6971 arch/x86/include/asm/processor.h | 12 +-
6972 arch/x86/include/asm/thread_info.h | 6 +-
6973 arch/x86/include/asm/uaccess.h | 2 +-
6974 arch/x86/kernel/dumpstack.c | 10 +-
6975 arch/x86/kernel/dumpstack_32.c | 2 +-
6976 arch/x86/kernel/dumpstack_64.c | 2 +-
6977 arch/x86/kernel/ioport.c | 13 +
6978 arch/x86/kernel/irq_32.c | 3 +
6979 arch/x86/kernel/irq_64.c | 4 +
6980 arch/x86/kernel/ldt.c | 18 +
6981 arch/x86/kernel/msr.c | 10 +
6982 arch/x86/kernel/ptrace.c | 14 +
6983 arch/x86/kernel/signal.c | 9 +-
6984 arch/x86/kernel/sys_i386_32.c | 9 +-
6985 arch/x86/kernel/sys_x86_64.c | 8 +-
6986 arch/x86/kernel/traps.c | 5 +
6987 arch/x86/kernel/verify_cpu.S | 1 +
6988 arch/x86/kernel/vm86_32.c | 15 +
6989 arch/x86/kvm/svm.c | 14 +-
6990 arch/x86/mm/fault.c | 12 +-
6991 arch/x86/mm/hugetlbpage.c | 15 +-
6992 arch/x86/mm/init.c | 66 +-
6993 arch/x86/mm/init_32.c | 6 +-
6994 arch/x86/net/bpf_jit_comp.c | 4 +
6995 arch/x86/platform/efi/efi_64.c | 2 +-
6996 arch/x86/xen/Kconfig | 1 +
6997 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
6998 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
6999 crypto/ablkcipher.c | 2 +-
7000 crypto/blkcipher.c | 2 +-
7001 crypto/scatterwalk.c | 10 +-
7002 drivers/acpi/acpica/hwxfsleep.c | 11 +-
7003 drivers/acpi/custom_method.c | 4 +
7004 drivers/block/cciss.h | 30 +-
7005 drivers/block/smart1,2.h | 40 +-
7006 drivers/cdrom/cdrom.c | 2 +-
7007 drivers/char/Kconfig | 4 +-
7008 drivers/char/genrtc.c | 1 +
7009 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
7010 drivers/char/mem.c | 17 +
7011 drivers/char/random.c | 5 +-
7012 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
7013 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
7014 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
7015 drivers/crypto/talitos.c | 2 +-
7016 drivers/firewire/ohci.c | 4 +
7017 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
7018 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
7019 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
7020 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
7021 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
7022 drivers/hid/hid-wiimote-debug.c | 2 +-
7023 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
7024 drivers/iommu/Kconfig | 1 +
7025 drivers/iommu/amd_iommu.c | 14 +-
7026 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
7027 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
7028 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
7029 drivers/isdn/hisax/config.c | 2 +-
7030 drivers/isdn/hisax/hfc_pci.c | 2 +-
7031 drivers/isdn/hisax/hfc_sx.c | 2 +-
7032 drivers/isdn/hisax/q931.c | 6 +-
7033 drivers/isdn/i4l/isdn_concap.c | 6 +-
7034 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
7035 drivers/md/bcache/Kconfig | 1 +
7036 drivers/md/raid5.c | 8 +
7037 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
7038 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
7039 drivers/media/platform/vivid/vivid-osd.c | 1 +
7040 drivers/media/radio/radio-cadet.c | 5 +-
7041 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
7042 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
7043 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
7044 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
7045 drivers/message/fusion/mptbase.c | 9 +
7046 drivers/misc/sgi-xp/xp_main.c | 12 +-
7047 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
7048 drivers/net/ppp/pppoe.c | 14 +-
7049 drivers/net/ppp/pptp.c | 6 +
7050 drivers/net/slip/slhc.c | 3 +
7051 drivers/net/wan/lmc/lmc_media.c | 97 +-
7052 drivers/net/wan/x25_asy.c | 6 +-
7053 drivers/net/wan/z85230.c | 24 +-
7054 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
7055 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
7056 drivers/pci/pci-sysfs.c | 2 +-
7057 drivers/pci/proc.c | 9 +
7058 drivers/platform/x86/asus-wmi.c | 12 +
7059 drivers/rtc/rtc-dev.c | 3 +
7060 drivers/scsi/bfa/bfa_fcs.c | 19 +-
7061 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
7062 drivers/scsi/bfa/bfa_modules.h | 12 +-
7063 drivers/scsi/hpsa.h | 40 +-
7064 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
7065 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
7066 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
7067 drivers/target/target_core_sbc.c | 17 +-
7068 drivers/target/target_core_transport.c | 14 +-
7069 drivers/tty/serial/uartlite.c | 4 +-
7070 drivers/tty/sysrq.c | 2 +-
7071 drivers/tty/vt/keyboard.c | 22 +-
7072 drivers/uio/uio.c | 6 +-
7073 drivers/usb/core/hub.c | 5 +
7074 drivers/usb/gadget/function/f_uac1.c | 1 +
7075 drivers/usb/gadget/function/u_uac1.c | 1 +
7076 drivers/usb/host/hwa-hc.c | 9 +-
7077 drivers/usb/usbip/vhci_sysfs.c | 2 +-
7078 drivers/video/fbdev/arcfb.c | 2 +-
7079 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
7080 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
7081 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
7082 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
7083 drivers/xen/xenfs/xenstored.c | 5 +
7084 firmware/Makefile | 2 +
7085 firmware/WHENCE | 20 +-
7086 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
7087 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
7088 fs/9p/vfs_inode.c | 4 +-
7090 fs/autofs4/waitq.c | 9 +
7091 fs/binfmt_aout.c | 7 +
7092 fs/binfmt_elf.c | 50 +-
7094 fs/coredump.c | 17 +-
7096 fs/debugfs/inode.c | 11 +-
7098 fs/ext2/balloc.c | 4 +-
7099 fs/ext2/super.c | 8 +-
7100 fs/ext4/balloc.c | 4 +-
7104 fs/filesystems.c | 4 +
7105 fs/fs_struct.c | 20 +-
7106 fs/hugetlbfs/inode.c | 5 +-
7108 fs/kernfs/dir.c | 6 +
7111 fs/namespace.c | 24 +
7112 fs/nfsd/nfscache.c | 2 +-
7114 fs/overlayfs/inode.c | 11 +-
7115 fs/overlayfs/super.c | 6 +-
7117 fs/posix_acl.c | 15 +-
7118 fs/proc/Kconfig | 10 +-
7119 fs/proc/array.c | 69 +-
7120 fs/proc/base.c | 186 +-
7121 fs/proc/cmdline.c | 4 +
7122 fs/proc/devices.c | 4 +
7123 fs/proc/fd.c | 17 +-
7124 fs/proc/generic.c | 64 +
7125 fs/proc/inode.c | 17 +
7126 fs/proc/internal.h | 11 +-
7127 fs/proc/interrupts.c | 4 +
7128 fs/proc/kcore.c | 3 +
7129 fs/proc/meminfo.c | 7 +-
7130 fs/proc/namespaces.c | 4 +-
7131 fs/proc/proc_net.c | 31 +
7132 fs/proc/proc_sysctl.c | 52 +-
7133 fs/proc/root.c | 8 +
7134 fs/proc/stat.c | 69 +-
7135 fs/proc/task_mmu.c | 66 +-
7137 fs/reiserfs/item_ops.c | 24 +-
7138 fs/reiserfs/super.c | 4 +
7140 fs/seq_file.c | 30 +-
7143 fs/sysfs/dir.c | 30 +-
7144 fs/sysv/inode.c | 11 +-
7147 grsecurity/Kconfig | 1182 ++++
7148 grsecurity/Makefile | 54 +
7149 grsecurity/gracl.c | 2757 +++++++++
7150 grsecurity/gracl_alloc.c | 105 +
7151 grsecurity/gracl_cap.c | 127 +
7152 grsecurity/gracl_compat.c | 269 +
7153 grsecurity/gracl_fs.c | 448 ++
7154 grsecurity/gracl_ip.c | 386 ++
7155 grsecurity/gracl_learn.c | 207 +
7156 grsecurity/gracl_policy.c | 1786 ++++++
7157 grsecurity/gracl_res.c | 68 +
7158 grsecurity/gracl_segv.c | 304 +
7159 grsecurity/gracl_shm.c | 40 +
7160 grsecurity/grsec_chdir.c | 19 +
7161 grsecurity/grsec_chroot.c | 467 ++
7162 grsecurity/grsec_disabled.c | 445 ++
7163 grsecurity/grsec_exec.c | 189 +
7164 grsecurity/grsec_fifo.c | 26 +
7165 grsecurity/grsec_fork.c | 23 +
7166 grsecurity/grsec_init.c | 290 +
7167 grsecurity/grsec_ipc.c | 48 +
7168 grsecurity/grsec_link.c | 65 +
7169 grsecurity/grsec_log.c | 340 +
7170 grsecurity/grsec_mem.c | 48 +
7171 grsecurity/grsec_mount.c | 65 +
7172 grsecurity/grsec_pax.c | 47 +
7173 grsecurity/grsec_proc.c | 20 +
7174 grsecurity/grsec_ptrace.c | 30 +
7175 grsecurity/grsec_sig.c | 236 +
7176 grsecurity/grsec_sock.c | 244 +
7177 grsecurity/grsec_sysctl.c | 488 ++
7178 grsecurity/grsec_time.c | 16 +
7179 grsecurity/grsec_tpe.c | 78 +
7180 grsecurity/grsec_usb.c | 15 +
7181 grsecurity/grsum.c | 64 +
7182 include/linux/binfmts.h | 5 +-
7183 include/linux/bitops.h | 2 +-
7184 include/linux/capability.h | 13 +
7185 include/linux/compiler-gcc.h | 5 +
7186 include/linux/compiler.h | 8 +
7187 include/linux/cred.h | 8 +-
7188 include/linux/dcache.h | 5 +-
7189 include/linux/fs.h | 24 +-
7190 include/linux/fs_struct.h | 2 +-
7191 include/linux/fsnotify.h | 6 +
7192 include/linux/gracl.h | 342 +
7193 include/linux/gracl_compat.h | 156 +
7194 include/linux/gralloc.h | 9 +
7195 include/linux/grdefs.h | 140 +
7196 include/linux/grinternal.h | 230 +
7197 include/linux/grmsg.h | 118 +
7198 include/linux/grsecurity.h | 255 +
7199 include/linux/grsock.h | 19 +
7200 include/linux/ipc.h | 2 +-
7201 include/linux/ipc_namespace.h | 2 +-
7202 include/linux/kallsyms.h | 18 +-
7203 include/linux/kmod.h | 5 +
7204 include/linux/kobject.h | 2 +-
7205 include/linux/lsm_hooks.h | 4 +-
7206 include/linux/mm.h | 12 +
7207 include/linux/mm_types.h | 4 +-
7208 include/linux/module.h | 5 +-
7209 include/linux/mount.h | 2 +-
7210 include/linux/msg.h | 2 +-
7211 include/linux/netfilter/xt_gradm.h | 9 +
7212 include/linux/path.h | 4 +-
7213 include/linux/perf_event.h | 13 +-
7214 include/linux/pid_namespace.h | 2 +-
7215 include/linux/printk.h | 2 +-
7216 include/linux/proc_fs.h | 22 +-
7217 include/linux/proc_ns.h | 2 +-
7218 include/linux/ptrace.h | 24 +-
7219 include/linux/random.h | 2 +-
7220 include/linux/rbtree_augmented.h | 4 +-
7221 include/linux/scatterlist.h | 12 +-
7222 include/linux/sched.h | 114 +-
7223 include/linux/security.h | 1 +
7224 include/linux/sem.h | 2 +-
7225 include/linux/seq_file.h | 5 +
7226 include/linux/shm.h | 6 +-
7227 include/linux/skbuff.h | 3 +
7228 include/linux/slab.h | 9 -
7229 include/linux/sysctl.h | 8 +-
7230 include/linux/thread_info.h | 6 +-
7231 include/linux/tty.h | 2 +-
7232 include/linux/tty_driver.h | 4 +-
7233 include/linux/uidgid.h | 5 +
7234 include/linux/user_namespace.h | 2 +-
7235 include/linux/utsname.h | 2 +-
7236 include/linux/vermagic.h | 16 +-
7237 include/linux/vmalloc.h | 20 +-
7238 include/net/af_unix.h | 2 +-
7239 include/net/dst.h | 33 +
7240 include/net/ip.h | 2 +-
7241 include/net/neighbour.h | 2 +-
7242 include/net/net_namespace.h | 2 +-
7243 include/net/sock.h | 4 +-
7244 include/target/target_core_base.h | 2 +-
7245 include/trace/events/fs.h | 53 +
7246 include/uapi/linux/personality.h | 1 +
7254 kernel/auditsc.c | 2 +-
7255 kernel/bpf/syscall.c | 8 +-
7256 kernel/capability.c | 41 +-
7257 kernel/cgroup.c | 5 +-
7258 kernel/compat.c | 1 +
7259 kernel/configs.c | 11 +
7260 kernel/cred.c | 112 +-
7261 kernel/events/core.c | 16 +-
7262 kernel/exit.c | 10 +-
7263 kernel/fork.c | 86 +-
7264 kernel/futex.c | 6 +-
7265 kernel/futex_compat.c | 2 +-
7266 kernel/kallsyms.c | 9 +
7267 kernel/kcmp.c | 8 +-
7268 kernel/kexec_core.c | 2 +-
7269 kernel/kmod.c | 95 +-
7270 kernel/kprobes.c | 7 +-
7271 kernel/ksysfs.c | 2 +
7272 kernel/locking/lockdep_proc.c | 10 +-
7273 kernel/module.c | 108 +-
7274 kernel/panic.c | 4 +-
7275 kernel/pid.c | 23 +-
7276 kernel/power/Kconfig | 2 +
7277 kernel/printk/printk.c | 20 +-
7278 kernel/ptrace.c | 56 +-
7279 kernel/resource.c | 10 +
7280 kernel/sched/core.c | 11 +-
7281 kernel/signal.c | 37 +-
7282 kernel/sys.c | 64 +-
7283 kernel/sysctl.c | 172 +-
7284 kernel/taskstats.c | 6 +
7285 kernel/time/posix-timers.c | 8 +
7286 kernel/time/time.c | 5 +
7287 kernel/time/timekeeping.c | 3 +
7288 kernel/time/timer_list.c | 13 +-
7289 kernel/time/timer_stats.c | 10 +-
7290 kernel/trace/Kconfig | 2 +
7291 kernel/trace/trace_syscalls.c | 8 +
7292 kernel/user_namespace.c | 15 +
7293 lib/Kconfig.debug | 13 +-
7294 lib/Kconfig.kasan | 2 +-
7295 lib/is_single_threaded.c | 3 +
7296 lib/list_debug.c | 65 +-
7299 lib/vsprintf.c | 39 +-
7300 localversion-grsec | 1 +
7302 mm/Kconfig.debug | 1 +
7304 mm/kmemleak.c | 4 +-
7306 mm/mempolicy.c | 12 +-
7311 mm/oom_kill.c | 28 +-
7312 mm/page_alloc.c | 2 +-
7313 mm/process_vm_access.c | 8 +-
7316 mm/slab_common.c | 2 +-
7320 mm/vmalloc.c | 129 +-
7322 net/appletalk/atalk_proc.c | 2 +-
7323 net/atm/lec.c | 6 +-
7324 net/atm/mpoa_caches.c | 42 +-
7325 net/bluetooth/sco.c | 3 +
7326 net/can/bcm.c | 2 +-
7327 net/can/proc.c | 2 +-
7328 net/core/dev_ioctl.c | 7 +-
7329 net/core/filter.c | 8 +-
7330 net/core/net-procfs.c | 17 +-
7331 net/core/pktgen.c | 2 +-
7332 net/core/sock.c | 3 +-
7333 net/core/sysctl_net_core.c | 2 +-
7334 net/decnet/dn_dev.c | 2 +-
7335 net/ipv4/devinet.c | 6 +-
7336 net/ipv4/inet_hashtables.c | 4 +
7337 net/ipv4/ip_input.c | 7 +
7338 net/ipv4/ip_sockglue.c | 3 +-
7339 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7340 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
7341 net/ipv4/route.c | 6 +-
7342 net/ipv4/tcp_input.c | 4 +-
7343 net/ipv4/tcp_ipv4.c | 29 +-
7344 net/ipv4/tcp_minisocks.c | 9 +-
7345 net/ipv4/tcp_timer.c | 11 +
7346 net/ipv4/udp.c | 24 +
7347 net/ipv6/addrconf.c | 13 +-
7348 net/ipv6/proc.c | 2 +-
7349 net/ipv6/tcp_ipv6.c | 26 +-
7350 net/ipv6/udp.c | 7 +
7351 net/ipx/ipx_proc.c | 2 +-
7352 net/irda/irproc.c | 2 +-
7353 net/llc/llc_proc.c | 2 +-
7354 net/netfilter/Kconfig | 10 +
7355 net/netfilter/Makefile | 1 +
7356 net/netfilter/nf_conntrack_core.c | 8 +
7357 net/netfilter/xt_gradm.c | 51 +
7358 net/netfilter/xt_hashlimit.c | 4 +-
7359 net/netfilter/xt_recent.c | 2 +-
7360 net/sched/sch_api.c | 2 +-
7361 net/sctp/socket.c | 4 +-
7362 net/socket.c | 75 +-
7363 net/sunrpc/Kconfig | 1 +
7364 net/sunrpc/cache.c | 2 +-
7365 net/sunrpc/stats.c | 2 +-
7366 net/sysctl_net.c | 2 +-
7367 net/unix/af_unix.c | 52 +-
7368 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7369 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7370 net/x25/sysctl_net_x25.c | 2 +-
7371 net/x25/x25_proc.c | 2 +-
7372 scripts/package/Makefile | 2 +-
7373 scripts/package/mkspec | 41 +-
7374 security/Kconfig | 369 +-
7375 security/apparmor/file.c | 4 +-
7376 security/apparmor/lsm.c | 8 +-
7377 security/commoncap.c | 36 +-
7378 security/min_addr.c | 2 +
7379 security/smack/smack_lsm.c | 8 +-
7380 security/tomoyo/file.c | 12 +-
7381 security/tomoyo/mount.c | 4 +
7382 security/tomoyo/tomoyo.c | 20 +-
7383 security/yama/Kconfig | 2 +-
7384 security/yama/yama_lsm.c | 4 +-
7385 sound/synth/emux/emux_seq.c | 14 +-
7386 sound/usb/line6/driver.c | 40 +-
7387 sound/usb/line6/toneport.c | 12 +-
7388 tools/gcc/.gitignore | 1 +
7389 tools/gcc/Makefile | 12 +
7390 tools/gcc/gen-random-seed.sh | 8 +
7391 tools/gcc/randomize_layout_plugin.c | 930 +++
7392 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7393 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
7394 511 files changed, 32631 insertions(+), 3196 deletions(-)
7396 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
7397 Author: Brad Spengler <spender@grsecurity.net>
7398 Date: Tue Dec 15 14:31:49 2015 -0500
7400 Update to pax-linux-4.3.3-test11.patch:
7401 - fixed a few compile regressions with the recent plugin changes, reported by spender
7402 - updated the size overflow hash table
7404 tools/gcc/latent_entropy_plugin.c | 2 +-
7405 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
7406 tools/gcc/stackleak_plugin.c | 2 +-
7407 tools/gcc/structleak_plugin.c | 6 +--
7408 4 files changed, 60 insertions(+), 16 deletions(-)
7410 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
7411 Author: Brad Spengler <spender@grsecurity.net>
7412 Date: Tue Dec 15 11:50:24 2015 -0500
7414 Apply structleak ICE fix for gcc < 4.9
7416 tools/gcc/structleak_plugin.c | 4 ++++
7417 1 files changed, 4 insertions(+), 0 deletions(-)
7419 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
7420 Author: Brad Spengler <spender@grsecurity.net>
7421 Date: Tue Dec 15 07:57:06 2015 -0500
7423 Update to pax-linux-4.3.1-test10.patch:
7424 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
7425 - Emese regenerated the size overflow hash tables for 4.3
7426 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
7427 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
7429 arch/x86/entry/entry_64.S | 2 +-
7430 arch/x86/entry/entry_64_compat.S | 15 +-
7431 scripts/package/builddeb | 2 +-
7432 tools/gcc/initify_plugin.c | 11 +-
7433 tools/gcc/latent_entropy_plugin.c | 20 +-
7434 .../disable_size_overflow_hash.data | 4 +
7435 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
7436 tools/gcc/stackleak_plugin.c | 26 +-
7437 tools/gcc/structleak_plugin.c | 21 +-
7438 9 files changed, 3079 insertions(+), 2367 deletions(-)
7440 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
7441 Merge: b5847e6 3548341
7442 Author: Brad Spengler <spender@grsecurity.net>
7443 Date: Tue Dec 15 07:47:56 2015 -0500
7445 Merge branch 'linux-4.3.y' into pax-4_3
7450 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
7451 Author: Brad Spengler <spender@grsecurity.net>
7452 Date: Wed Dec 9 23:11:36 2015 -0500
7454 Update to pax-linux-4.3.1-test9.patch:
7455 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
7456 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
7457 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
7458 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
7459 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
7460 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
7461 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
7464 arch/x86/include/asm/compat.h | 4 +
7465 arch/x86/include/asm/dma.h | 2 +
7466 arch/x86/include/asm/pmem.h | 2 +-
7467 arch/x86/include/asm/uaccess.h | 20 +-
7468 arch/x86/kernel/apic/vector.c | 6 +-
7469 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
7470 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
7471 arch/x86/kernel/head_64.S | 1 -
7472 arch/x86/kvm/i8259.c | 10 +-
7473 arch/x86/kvm/ioapic.c | 2 +
7474 arch/x86/kvm/x86.c | 2 +
7475 arch/x86/lib/usercopy_64.c | 2 +-
7476 arch/x86/mm/mpx.c | 4 +-
7477 arch/x86/mm/pageattr.c | 7 +
7478 drivers/base/devres.c | 4 +-
7479 drivers/base/power/runtime.c | 6 +-
7480 drivers/base/regmap/regmap.c | 4 +-
7481 drivers/block/drbd/drbd_receiver.c | 4 +-
7482 drivers/block/drbd/drbd_worker.c | 6 +-
7483 drivers/char/virtio_console.c | 6 +-
7484 drivers/md/dm.c | 12 +-
7485 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
7486 drivers/net/macvtap.c | 4 +-
7487 drivers/video/fbdev/core/fbmem.c | 10 +-
7489 fs/coredump.c | 2 +-
7493 fs/fs-writeback.c | 11 +-
7494 fs/overlayfs/copy_up.c | 2 +-
7497 include/linux/compiler.h | 36 ++-
7498 include/linux/rcupdate.h | 8 +
7499 include/linux/sched.h | 4 +-
7500 include/linux/seqlock.h | 10 +
7501 include/linux/spinlock.h | 17 +-
7502 include/linux/srcu.h | 5 +-
7503 include/linux/syscalls.h | 2 +-
7504 include/linux/writeback.h | 3 +-
7505 include/uapi/linux/swab.h | 6 +-
7506 ipc/ipc_sysctl.c | 6 +
7507 kernel/exit.c | 25 +-
7508 kernel/resource.c | 4 +-
7509 kernel/signal.c | 12 +-
7510 kernel/user.c | 2 +-
7511 kernel/workqueue.c | 6 +-
7512 lib/rhashtable.c | 4 +-
7514 net/ipv4/xfrm4_mode_transport.c | 2 +-
7515 security/keys/internal.h | 8 +-
7516 security/keys/keyring.c | 4 -
7517 sound/core/seq/seq_clientmgr.c | 8 +-
7518 sound/core/seq/seq_compat.c | 2 +-
7519 sound/core/seq/seq_memory.c | 6 +-
7520 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
7521 tools/gcc/gcc-common.h | 1 +
7522 tools/gcc/initify_plugin.c | 33 ++-
7523 .../disable_size_overflow_hash.data | 1 +
7524 .../size_overflow_plugin/size_overflow_hash.data | 1 -
7525 62 files changed, 708 insertions(+), 140 deletions(-)
7527 commit f2634c2f6995f4231616f24ed016f890c701f939
7528 Merge: 1241bff 5f8b236
7529 Author: Brad Spengler <spender@grsecurity.net>
7530 Date: Wed Dec 9 21:50:47 2015 -0500
7532 Merge branch 'linux-4.3.y' into pax-4_3
7535 arch/x86/kernel/fpu/xstate.c
7536 arch/x86/kernel/head_64.S
7538 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
7539 Author: Brad Spengler <spender@grsecurity.net>
7540 Date: Sun Dec 6 08:44:56 2015 -0500
7542 Update to pax-linux-4.3-test8.patch:
7543 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
7544 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
7545 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
7546 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
7549 drivers/md/md.c | 5 ++-
7550 drivers/md/raid1.c | 2 +-
7551 fs/proc/task_mmu.c | 3 ++
7552 .../disable_size_overflow_hash.data | 4 ++-
7553 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
7554 .../size_overflow_plugin/size_overflow_hash.data | 2 -
7555 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
7556 8 files changed, 43 insertions(+), 12 deletions(-)
7558 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
7559 Author: Brad Spengler <spender@grsecurity.net>
7560 Date: Fri Dec 4 14:24:12 2015 -0500
7562 Initial import of pax-linux-4.3-test7.patch
7564 Documentation/dontdiff | 47 +-
7565 Documentation/kbuild/makefiles.txt | 39 +-
7566 Documentation/kernel-parameters.txt | 28 +
7568 arch/alpha/include/asm/atomic.h | 10 +
7569 arch/alpha/include/asm/elf.h | 7 +
7570 arch/alpha/include/asm/pgalloc.h | 6 +
7571 arch/alpha/include/asm/pgtable.h | 11 +
7572 arch/alpha/kernel/module.c | 2 +-
7573 arch/alpha/kernel/osf_sys.c | 8 +-
7574 arch/alpha/mm/fault.c | 141 +-
7575 arch/arm/Kconfig | 2 +-
7576 arch/arm/include/asm/atomic.h | 320 +-
7577 arch/arm/include/asm/cache.h | 5 +-
7578 arch/arm/include/asm/cacheflush.h | 2 +-
7579 arch/arm/include/asm/checksum.h | 14 +-
7580 arch/arm/include/asm/cmpxchg.h | 4 +
7581 arch/arm/include/asm/cpuidle.h | 2 +-
7582 arch/arm/include/asm/domain.h | 22 +-
7583 arch/arm/include/asm/elf.h | 9 +-
7584 arch/arm/include/asm/fncpy.h | 2 +
7585 arch/arm/include/asm/futex.h | 10 +
7586 arch/arm/include/asm/kmap_types.h | 2 +-
7587 arch/arm/include/asm/mach/dma.h | 2 +-
7588 arch/arm/include/asm/mach/map.h | 16 +-
7589 arch/arm/include/asm/outercache.h | 2 +-
7590 arch/arm/include/asm/page.h | 3 +-
7591 arch/arm/include/asm/pgalloc.h | 20 +
7592 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7593 arch/arm/include/asm/pgtable-2level.h | 3 +
7594 arch/arm/include/asm/pgtable-3level.h | 3 +
7595 arch/arm/include/asm/pgtable.h | 54 +-
7596 arch/arm/include/asm/smp.h | 2 +-
7597 arch/arm/include/asm/tls.h | 3 +
7598 arch/arm/include/asm/uaccess.h | 79 +-
7599 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7600 arch/arm/kernel/armksyms.c | 2 +-
7601 arch/arm/kernel/cpuidle.c | 2 +-
7602 arch/arm/kernel/entry-armv.S | 109 +-
7603 arch/arm/kernel/entry-common.S | 40 +-
7604 arch/arm/kernel/entry-header.S | 55 +
7605 arch/arm/kernel/fiq.c | 3 +
7606 arch/arm/kernel/module-plts.c | 7 +-
7607 arch/arm/kernel/module.c | 38 +-
7608 arch/arm/kernel/patch.c | 2 +
7609 arch/arm/kernel/process.c | 90 +-
7610 arch/arm/kernel/reboot.c | 1 +
7611 arch/arm/kernel/setup.c | 20 +-
7612 arch/arm/kernel/signal.c | 35 +-
7613 arch/arm/kernel/smp.c | 2 +-
7614 arch/arm/kernel/tcm.c | 4 +-
7615 arch/arm/kernel/vmlinux.lds.S | 6 +-
7616 arch/arm/kvm/arm.c | 8 +-
7617 arch/arm/lib/copy_page.S | 1 +
7618 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7619 arch/arm/lib/delay.c | 2 +-
7620 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7621 arch/arm/mach-exynos/suspend.c | 6 +-
7622 arch/arm/mach-mvebu/coherency.c | 4 +-
7623 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7624 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7625 arch/arm/mach-omap2/omap-smp.c | 1 +
7626 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
7627 arch/arm/mach-omap2/omap_device.c | 4 +-
7628 arch/arm/mach-omap2/omap_device.h | 4 +-
7629 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7630 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7631 arch/arm/mach-omap2/wd_timer.c | 6 +-
7632 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7633 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7634 arch/arm/mach-tegra/irq.c | 1 +
7635 arch/arm/mach-ux500/pm.c | 1 +
7636 arch/arm/mach-zynq/platsmp.c | 1 +
7637 arch/arm/mm/Kconfig | 6 +-
7638 arch/arm/mm/alignment.c | 8 +
7639 arch/arm/mm/cache-l2x0.c | 2 +-
7640 arch/arm/mm/context.c | 10 +-
7641 arch/arm/mm/fault.c | 146 +
7642 arch/arm/mm/fault.h | 12 +
7643 arch/arm/mm/init.c | 39 +
7644 arch/arm/mm/ioremap.c | 4 +-
7645 arch/arm/mm/mmap.c | 30 +-
7646 arch/arm/mm/mmu.c | 162 +-
7647 arch/arm/net/bpf_jit_32.c | 3 +
7648 arch/arm/plat-iop/setup.c | 2 +-
7649 arch/arm/plat-omap/sram.c | 2 +
7650 arch/arm64/include/asm/atomic.h | 10 +
7651 arch/arm64/include/asm/percpu.h | 8 +-
7652 arch/arm64/include/asm/pgalloc.h | 5 +
7653 arch/arm64/include/asm/uaccess.h | 1 +
7654 arch/arm64/mm/dma-mapping.c | 2 +-
7655 arch/avr32/include/asm/elf.h | 8 +-
7656 arch/avr32/include/asm/kmap_types.h | 4 +-
7657 arch/avr32/mm/fault.c | 27 +
7658 arch/frv/include/asm/atomic.h | 10 +
7659 arch/frv/include/asm/kmap_types.h | 2 +-
7660 arch/frv/mm/elf-fdpic.c | 3 +-
7661 arch/ia64/Makefile | 1 +
7662 arch/ia64/include/asm/atomic.h | 10 +
7663 arch/ia64/include/asm/elf.h | 7 +
7664 arch/ia64/include/asm/pgalloc.h | 12 +
7665 arch/ia64/include/asm/pgtable.h | 13 +-
7666 arch/ia64/include/asm/spinlock.h | 2 +-
7667 arch/ia64/include/asm/uaccess.h | 27 +-
7668 arch/ia64/kernel/module.c | 45 +-
7669 arch/ia64/kernel/palinfo.c | 2 +-
7670 arch/ia64/kernel/sys_ia64.c | 7 +
7671 arch/ia64/kernel/vmlinux.lds.S | 2 +-
7672 arch/ia64/mm/fault.c | 32 +-
7673 arch/ia64/mm/init.c | 15 +-
7674 arch/m32r/lib/usercopy.c | 6 +
7675 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
7676 arch/mips/include/asm/atomic.h | 368 +-
7677 arch/mips/include/asm/elf.h | 7 +
7678 arch/mips/include/asm/exec.h | 2 +-
7679 arch/mips/include/asm/hw_irq.h | 2 +-
7680 arch/mips/include/asm/local.h | 57 +
7681 arch/mips/include/asm/page.h | 2 +-
7682 arch/mips/include/asm/pgalloc.h | 5 +
7683 arch/mips/include/asm/pgtable.h | 3 +
7684 arch/mips/include/asm/uaccess.h | 1 +
7685 arch/mips/kernel/binfmt_elfn32.c | 7 +
7686 arch/mips/kernel/binfmt_elfo32.c | 7 +
7687 arch/mips/kernel/irq-gt641xx.c | 2 +-
7688 arch/mips/kernel/irq.c | 6 +-
7689 arch/mips/kernel/pm-cps.c | 2 +-
7690 arch/mips/kernel/process.c | 12 -
7691 arch/mips/kernel/sync-r4k.c | 24 +-
7692 arch/mips/kernel/traps.c | 13 +-
7693 arch/mips/mm/fault.c | 25 +
7694 arch/mips/mm/mmap.c | 51 +-
7695 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
7696 arch/mips/sni/rm200.c | 2 +-
7697 arch/mips/vr41xx/common/icu.c | 2 +-
7698 arch/mips/vr41xx/common/irq.c | 4 +-
7699 arch/parisc/include/asm/atomic.h | 10 +
7700 arch/parisc/include/asm/elf.h | 7 +
7701 arch/parisc/include/asm/pgalloc.h | 6 +
7702 arch/parisc/include/asm/pgtable.h | 11 +
7703 arch/parisc/include/asm/uaccess.h | 4 +-
7704 arch/parisc/kernel/module.c | 50 +-
7705 arch/parisc/kernel/sys_parisc.c | 15 +
7706 arch/parisc/kernel/traps.c | 4 +-
7707 arch/parisc/mm/fault.c | 140 +-
7708 arch/powerpc/include/asm/atomic.h | 329 +-
7709 arch/powerpc/include/asm/elf.h | 12 +
7710 arch/powerpc/include/asm/exec.h | 2 +-
7711 arch/powerpc/include/asm/kmap_types.h | 2 +-
7712 arch/powerpc/include/asm/local.h | 46 +
7713 arch/powerpc/include/asm/mman.h | 2 +-
7714 arch/powerpc/include/asm/page.h | 8 +-
7715 arch/powerpc/include/asm/page_64.h | 7 +-
7716 arch/powerpc/include/asm/pgalloc-64.h | 7 +
7717 arch/powerpc/include/asm/pgtable.h | 1 +
7718 arch/powerpc/include/asm/pte-hash32.h | 1 +
7719 arch/powerpc/include/asm/reg.h | 1 +
7720 arch/powerpc/include/asm/smp.h | 2 +-
7721 arch/powerpc/include/asm/spinlock.h | 42 +-
7722 arch/powerpc/include/asm/uaccess.h | 141 +-
7723 arch/powerpc/kernel/Makefile | 5 +
7724 arch/powerpc/kernel/exceptions-64e.S | 4 +-
7725 arch/powerpc/kernel/exceptions-64s.S | 2 +-
7726 arch/powerpc/kernel/module_32.c | 15 +-
7727 arch/powerpc/kernel/process.c | 46 -
7728 arch/powerpc/kernel/signal_32.c | 2 +-
7729 arch/powerpc/kernel/signal_64.c | 2 +-
7730 arch/powerpc/kernel/traps.c | 21 +
7731 arch/powerpc/kernel/vdso.c | 5 +-
7732 arch/powerpc/lib/usercopy_64.c | 18 -
7733 arch/powerpc/mm/fault.c | 56 +-
7734 arch/powerpc/mm/mmap.c | 16 +
7735 arch/powerpc/mm/slice.c | 13 +-
7736 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
7737 arch/s390/include/asm/atomic.h | 10 +
7738 arch/s390/include/asm/elf.h | 7 +
7739 arch/s390/include/asm/exec.h | 2 +-
7740 arch/s390/include/asm/uaccess.h | 13 +-
7741 arch/s390/kernel/module.c | 22 +-
7742 arch/s390/kernel/process.c | 24 -
7743 arch/s390/mm/mmap.c | 16 +
7744 arch/score/include/asm/exec.h | 2 +-
7745 arch/score/kernel/process.c | 5 -
7746 arch/sh/mm/mmap.c | 22 +-
7747 arch/sparc/include/asm/atomic_64.h | 110 +-
7748 arch/sparc/include/asm/cache.h | 2 +-
7749 arch/sparc/include/asm/elf_32.h | 7 +
7750 arch/sparc/include/asm/elf_64.h | 7 +
7751 arch/sparc/include/asm/pgalloc_32.h | 1 +
7752 arch/sparc/include/asm/pgalloc_64.h | 1 +
7753 arch/sparc/include/asm/pgtable.h | 4 +
7754 arch/sparc/include/asm/pgtable_32.h | 15 +-
7755 arch/sparc/include/asm/pgtsrmmu.h | 5 +
7756 arch/sparc/include/asm/setup.h | 4 +-
7757 arch/sparc/include/asm/spinlock_64.h | 35 +-
7758 arch/sparc/include/asm/thread_info_32.h | 1 +
7759 arch/sparc/include/asm/thread_info_64.h | 2 +
7760 arch/sparc/include/asm/uaccess.h | 1 +
7761 arch/sparc/include/asm/uaccess_32.h | 28 +-
7762 arch/sparc/include/asm/uaccess_64.h | 24 +-
7763 arch/sparc/kernel/Makefile | 2 +-
7764 arch/sparc/kernel/prom_common.c | 2 +-
7765 arch/sparc/kernel/smp_64.c | 8 +-
7766 arch/sparc/kernel/sys_sparc_32.c | 2 +-
7767 arch/sparc/kernel/sys_sparc_64.c | 52 +-
7768 arch/sparc/kernel/traps_64.c | 27 +-
7769 arch/sparc/lib/Makefile | 2 +-
7770 arch/sparc/lib/atomic_64.S | 57 +-
7771 arch/sparc/lib/ksyms.c | 6 +-
7772 arch/sparc/mm/Makefile | 2 +-
7773 arch/sparc/mm/fault_32.c | 292 +
7774 arch/sparc/mm/fault_64.c | 486 +
7775 arch/sparc/mm/hugetlbpage.c | 22 +-
7776 arch/sparc/mm/init_64.c | 10 +-
7777 arch/tile/include/asm/atomic_64.h | 10 +
7778 arch/tile/include/asm/uaccess.h | 4 +-
7779 arch/um/Makefile | 4 +
7780 arch/um/include/asm/kmap_types.h | 2 +-
7781 arch/um/include/asm/page.h | 3 +
7782 arch/um/include/asm/pgtable-3level.h | 1 +
7783 arch/um/kernel/process.c | 16 -
7784 arch/x86/Kconfig | 15 +-
7785 arch/x86/Kconfig.cpu | 6 +-
7786 arch/x86/Kconfig.debug | 4 +-
7787 arch/x86/Makefile | 13 +-
7788 arch/x86/boot/Makefile | 3 +
7789 arch/x86/boot/bitops.h | 4 +-
7790 arch/x86/boot/boot.h | 2 +-
7791 arch/x86/boot/compressed/Makefile | 3 +
7792 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
7793 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
7794 arch/x86/boot/compressed/head_32.S | 4 +-
7795 arch/x86/boot/compressed/head_64.S | 12 +-
7796 arch/x86/boot/compressed/misc.c | 11 +-
7797 arch/x86/boot/cpucheck.c | 16 +-
7798 arch/x86/boot/header.S | 6 +-
7799 arch/x86/boot/memory.c | 2 +-
7800 arch/x86/boot/video-vesa.c | 1 +
7801 arch/x86/boot/video.c | 2 +-
7802 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
7803 arch/x86/crypto/aesni-intel_asm.S | 106 +-
7804 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
7805 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
7806 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
7807 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
7808 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
7809 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
7810 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
7811 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
7812 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
7813 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
7814 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
7815 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
7816 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
7817 arch/x86/crypto/sha256-avx-asm.S | 2 +
7818 arch/x86/crypto/sha256-avx2-asm.S | 2 +
7819 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
7820 arch/x86/crypto/sha512-avx-asm.S | 2 +
7821 arch/x86/crypto/sha512-avx2-asm.S | 2 +
7822 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
7823 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
7824 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
7825 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
7826 arch/x86/entry/calling.h | 86 +-
7827 arch/x86/entry/common.c | 13 +-
7828 arch/x86/entry/entry_32.S | 351 +-
7829 arch/x86/entry/entry_64.S | 619 +-
7830 arch/x86/entry/entry_64_compat.S | 159 +-
7831 arch/x86/entry/thunk_64.S | 2 +
7832 arch/x86/entry/vdso/Makefile | 2 +-
7833 arch/x86/entry/vdso/vdso2c.h | 8 +-
7834 arch/x86/entry/vdso/vma.c | 41 +-
7835 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
7836 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
7837 arch/x86/ia32/ia32_signal.c | 23 +-
7838 arch/x86/ia32/sys_ia32.c | 42 +-
7839 arch/x86/include/asm/alternative-asm.h | 43 +-
7840 arch/x86/include/asm/alternative.h | 4 +-
7841 arch/x86/include/asm/apic.h | 2 +-
7842 arch/x86/include/asm/apm.h | 4 +-
7843 arch/x86/include/asm/atomic.h | 230 +-
7844 arch/x86/include/asm/atomic64_32.h | 100 +
7845 arch/x86/include/asm/atomic64_64.h | 164 +-
7846 arch/x86/include/asm/bitops.h | 18 +-
7847 arch/x86/include/asm/boot.h | 2 +-
7848 arch/x86/include/asm/cache.h | 5 +-
7849 arch/x86/include/asm/checksum_32.h | 12 +-
7850 arch/x86/include/asm/cmpxchg.h | 39 +
7851 arch/x86/include/asm/compat.h | 2 +-
7852 arch/x86/include/asm/cpufeature.h | 17 +-
7853 arch/x86/include/asm/desc.h | 78 +-
7854 arch/x86/include/asm/desc_defs.h | 6 +
7855 arch/x86/include/asm/div64.h | 2 +-
7856 arch/x86/include/asm/elf.h | 33 +-
7857 arch/x86/include/asm/emergency-restart.h | 2 +-
7858 arch/x86/include/asm/fpu/internal.h | 42 +-
7859 arch/x86/include/asm/fpu/types.h | 6 +-
7860 arch/x86/include/asm/futex.h | 14 +-
7861 arch/x86/include/asm/hw_irq.h | 4 +-
7862 arch/x86/include/asm/i8259.h | 2 +-
7863 arch/x86/include/asm/io.h | 22 +-
7864 arch/x86/include/asm/irqflags.h | 5 +
7865 arch/x86/include/asm/kprobes.h | 9 +-
7866 arch/x86/include/asm/local.h | 106 +-
7867 arch/x86/include/asm/mman.h | 15 +
7868 arch/x86/include/asm/mmu.h | 14 +-
7869 arch/x86/include/asm/mmu_context.h | 114 +-
7870 arch/x86/include/asm/module.h | 17 +-
7871 arch/x86/include/asm/nmi.h | 19 +-
7872 arch/x86/include/asm/page.h | 1 +
7873 arch/x86/include/asm/page_32.h | 12 +-
7874 arch/x86/include/asm/page_64.h | 14 +-
7875 arch/x86/include/asm/paravirt.h | 46 +-
7876 arch/x86/include/asm/paravirt_types.h | 15 +-
7877 arch/x86/include/asm/pgalloc.h | 23 +
7878 arch/x86/include/asm/pgtable-2level.h | 2 +
7879 arch/x86/include/asm/pgtable-3level.h | 7 +
7880 arch/x86/include/asm/pgtable.h | 128 +-
7881 arch/x86/include/asm/pgtable_32.h | 14 +-
7882 arch/x86/include/asm/pgtable_32_types.h | 24 +-
7883 arch/x86/include/asm/pgtable_64.h | 23 +-
7884 arch/x86/include/asm/pgtable_64_types.h | 5 +
7885 arch/x86/include/asm/pgtable_types.h | 26 +-
7886 arch/x86/include/asm/preempt.h | 2 +-
7887 arch/x86/include/asm/processor.h | 57 +-
7888 arch/x86/include/asm/ptrace.h | 13 +-
7889 arch/x86/include/asm/realmode.h | 4 +-
7890 arch/x86/include/asm/reboot.h | 10 +-
7891 arch/x86/include/asm/rmwcc.h | 84 +-
7892 arch/x86/include/asm/rwsem.h | 60 +-
7893 arch/x86/include/asm/segment.h | 27 +-
7894 arch/x86/include/asm/smap.h | 43 +
7895 arch/x86/include/asm/smp.h | 14 +-
7896 arch/x86/include/asm/stackprotector.h | 4 +-
7897 arch/x86/include/asm/stacktrace.h | 32 +-
7898 arch/x86/include/asm/switch_to.h | 4 +-
7899 arch/x86/include/asm/sys_ia32.h | 6 +-
7900 arch/x86/include/asm/thread_info.h | 27 +-
7901 arch/x86/include/asm/tlbflush.h | 77 +-
7902 arch/x86/include/asm/uaccess.h | 192 +-
7903 arch/x86/include/asm/uaccess_32.h | 28 +-
7904 arch/x86/include/asm/uaccess_64.h | 169 +-
7905 arch/x86/include/asm/word-at-a-time.h | 2 +-
7906 arch/x86/include/asm/x86_init.h | 10 +-
7907 arch/x86/include/asm/xen/page.h | 2 +-
7908 arch/x86/include/uapi/asm/e820.h | 2 +-
7909 arch/x86/kernel/Makefile | 2 +-
7910 arch/x86/kernel/acpi/boot.c | 4 +-
7911 arch/x86/kernel/acpi/sleep.c | 4 +
7912 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
7913 arch/x86/kernel/alternative.c | 124 +-
7914 arch/x86/kernel/apic/apic.c | 4 +-
7915 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
7916 arch/x86/kernel/apic/apic_noop.c | 2 +-
7917 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
7918 arch/x86/kernel/apic/io_apic.c | 8 +-
7919 arch/x86/kernel/apic/msi.c | 2 +-
7920 arch/x86/kernel/apic/probe_32.c | 4 +-
7921 arch/x86/kernel/apic/vector.c | 4 +-
7922 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
7923 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
7924 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
7925 arch/x86/kernel/apm_32.c | 21 +-
7926 arch/x86/kernel/asm-offsets.c | 20 +
7927 arch/x86/kernel/asm-offsets_64.c | 1 +
7928 arch/x86/kernel/cpu/Makefile | 4 -
7929 arch/x86/kernel/cpu/amd.c | 2 +-
7930 arch/x86/kernel/cpu/bugs_64.c | 2 +
7931 arch/x86/kernel/cpu/common.c | 202 +-
7932 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
7933 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
7934 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
7935 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
7936 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
7937 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
7938 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
7939 arch/x86/kernel/cpu/perf_event.c | 10 +-
7940 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
7941 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
7942 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
7943 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
7944 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
7945 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
7946 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
7947 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
7948 arch/x86/kernel/crash_dump_64.c | 2 +-
7949 arch/x86/kernel/doublefault.c | 8 +-
7950 arch/x86/kernel/dumpstack.c | 24 +-
7951 arch/x86/kernel/dumpstack_32.c | 25 +-
7952 arch/x86/kernel/dumpstack_64.c | 62 +-
7953 arch/x86/kernel/e820.c | 4 +-
7954 arch/x86/kernel/early_printk.c | 1 +
7955 arch/x86/kernel/espfix_64.c | 44 +-
7956 arch/x86/kernel/fpu/core.c | 24 +-
7957 arch/x86/kernel/fpu/init.c | 40 +-
7958 arch/x86/kernel/fpu/regset.c | 22 +-
7959 arch/x86/kernel/fpu/signal.c | 20 +-
7960 arch/x86/kernel/fpu/xstate.c | 8 +-
7961 arch/x86/kernel/ftrace.c | 18 +-
7962 arch/x86/kernel/head64.c | 14 +-
7963 arch/x86/kernel/head_32.S | 235 +-
7964 arch/x86/kernel/head_64.S | 173 +-
7965 arch/x86/kernel/i386_ksyms_32.c | 12 +
7966 arch/x86/kernel/i8259.c | 10 +-
7967 arch/x86/kernel/io_delay.c | 2 +-
7968 arch/x86/kernel/ioport.c | 2 +-
7969 arch/x86/kernel/irq.c | 8 +-
7970 arch/x86/kernel/irq_32.c | 45 +-
7971 arch/x86/kernel/jump_label.c | 10 +-
7972 arch/x86/kernel/kgdb.c | 21 +-
7973 arch/x86/kernel/kprobes/core.c | 28 +-
7974 arch/x86/kernel/kprobes/opt.c | 16 +-
7975 arch/x86/kernel/ksysfs.c | 2 +-
7976 arch/x86/kernel/kvmclock.c | 20 +-
7977 arch/x86/kernel/ldt.c | 25 +
7978 arch/x86/kernel/livepatch.c | 12 +-
7979 arch/x86/kernel/machine_kexec_32.c | 6 +-
7980 arch/x86/kernel/mcount_64.S | 19 +-
7981 arch/x86/kernel/module.c | 78 +-
7982 arch/x86/kernel/msr.c | 2 +-
7983 arch/x86/kernel/nmi.c | 34 +-
7984 arch/x86/kernel/nmi_selftest.c | 4 +-
7985 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
7986 arch/x86/kernel/paravirt.c | 45 +-
7987 arch/x86/kernel/paravirt_patch_64.c | 8 +
7988 arch/x86/kernel/pci-calgary_64.c | 2 +-
7989 arch/x86/kernel/pci-iommu_table.c | 2 +-
7990 arch/x86/kernel/pci-swiotlb.c | 2 +-
7991 arch/x86/kernel/process.c | 80 +-
7992 arch/x86/kernel/process_32.c | 29 +-
7993 arch/x86/kernel/process_64.c | 14 +-
7994 arch/x86/kernel/ptrace.c | 20 +-
7995 arch/x86/kernel/pvclock.c | 8 +-
7996 arch/x86/kernel/reboot.c | 44 +-
7997 arch/x86/kernel/reboot_fixups_32.c | 2 +-
7998 arch/x86/kernel/relocate_kernel_64.S | 3 +-
7999 arch/x86/kernel/setup.c | 29 +-
8000 arch/x86/kernel/setup_percpu.c | 29 +-
8001 arch/x86/kernel/signal.c | 17 +-
8002 arch/x86/kernel/smp.c | 2 +-
8003 arch/x86/kernel/smpboot.c | 29 +-
8004 arch/x86/kernel/step.c | 6 +-
8005 arch/x86/kernel/sys_i386_32.c | 184 +
8006 arch/x86/kernel/sys_x86_64.c | 22 +-
8007 arch/x86/kernel/tboot.c | 14 +-
8008 arch/x86/kernel/time.c | 8 +-
8009 arch/x86/kernel/tls.c | 7 +-
8010 arch/x86/kernel/tracepoint.c | 4 +-
8011 arch/x86/kernel/traps.c | 53 +-
8012 arch/x86/kernel/tsc.c | 2 +-
8013 arch/x86/kernel/uprobes.c | 2 +-
8014 arch/x86/kernel/vm86_32.c | 6 +-
8015 arch/x86/kernel/vmlinux.lds.S | 153 +-
8016 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
8017 arch/x86/kernel/x86_init.c | 6 +-
8018 arch/x86/kvm/cpuid.c | 21 +-
8019 arch/x86/kvm/emulate.c | 2 +-
8020 arch/x86/kvm/lapic.c | 2 +-
8021 arch/x86/kvm/paging_tmpl.h | 2 +-
8022 arch/x86/kvm/svm.c | 10 +-
8023 arch/x86/kvm/vmx.c | 62 +-
8024 arch/x86/kvm/x86.c | 42 +-
8025 arch/x86/lguest/boot.c | 3 +-
8026 arch/x86/lib/atomic64_386_32.S | 164 +
8027 arch/x86/lib/atomic64_cx8_32.S | 98 +-
8028 arch/x86/lib/checksum_32.S | 99 +-
8029 arch/x86/lib/clear_page_64.S | 3 +
8030 arch/x86/lib/cmpxchg16b_emu.S | 3 +
8031 arch/x86/lib/copy_page_64.S | 14 +-
8032 arch/x86/lib/copy_user_64.S | 66 +-
8033 arch/x86/lib/csum-copy_64.S | 14 +-
8034 arch/x86/lib/csum-wrappers_64.c | 8 +-
8035 arch/x86/lib/getuser.S | 74 +-
8036 arch/x86/lib/insn.c | 8 +-
8037 arch/x86/lib/iomap_copy_64.S | 2 +
8038 arch/x86/lib/memcpy_64.S | 6 +
8039 arch/x86/lib/memmove_64.S | 3 +-
8040 arch/x86/lib/memset_64.S | 3 +
8041 arch/x86/lib/mmx_32.c | 243 +-
8042 arch/x86/lib/msr-reg.S | 2 +
8043 arch/x86/lib/putuser.S | 87 +-
8044 arch/x86/lib/rwsem.S | 6 +-
8045 arch/x86/lib/usercopy_32.c | 359 +-
8046 arch/x86/lib/usercopy_64.c | 20 +-
8047 arch/x86/math-emu/fpu_aux.c | 2 +-
8048 arch/x86/math-emu/fpu_entry.c | 4 +-
8049 arch/x86/math-emu/fpu_system.h | 2 +-
8050 arch/x86/mm/Makefile | 4 +
8051 arch/x86/mm/extable.c | 26 +-
8052 arch/x86/mm/fault.c | 570 +-
8053 arch/x86/mm/gup.c | 6 +-
8054 arch/x86/mm/highmem_32.c | 6 +
8055 arch/x86/mm/hugetlbpage.c | 24 +-
8056 arch/x86/mm/init.c | 111 +-
8057 arch/x86/mm/init_32.c | 111 +-
8058 arch/x86/mm/init_64.c | 46 +-
8059 arch/x86/mm/iomap_32.c | 4 +
8060 arch/x86/mm/ioremap.c | 52 +-
8061 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
8062 arch/x86/mm/mmap.c | 40 +-
8063 arch/x86/mm/mmio-mod.c | 10 +-
8064 arch/x86/mm/numa.c | 2 +-
8065 arch/x86/mm/pageattr.c | 38 +-
8066 arch/x86/mm/pat.c | 12 +-
8067 arch/x86/mm/pat_rbtree.c | 2 +-
8068 arch/x86/mm/pf_in.c | 10 +-
8069 arch/x86/mm/pgtable.c | 214 +-
8070 arch/x86/mm/pgtable_32.c | 3 +
8071 arch/x86/mm/setup_nx.c | 7 +
8072 arch/x86/mm/tlb.c | 4 +
8073 arch/x86/mm/uderef_64.c | 37 +
8074 arch/x86/net/bpf_jit.S | 11 +
8075 arch/x86/net/bpf_jit_comp.c | 13 +-
8076 arch/x86/oprofile/backtrace.c | 6 +-
8077 arch/x86/oprofile/nmi_int.c | 8 +-
8078 arch/x86/oprofile/op_model_amd.c | 8 +-
8079 arch/x86/oprofile/op_model_ppro.c | 7 +-
8080 arch/x86/oprofile/op_x86_model.h | 2 +-
8081 arch/x86/pci/intel_mid_pci.c | 2 +-
8082 arch/x86/pci/irq.c | 8 +-
8083 arch/x86/pci/pcbios.c | 144 +-
8084 arch/x86/platform/efi/efi_32.c | 24 +
8085 arch/x86/platform/efi/efi_64.c | 26 +-
8086 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8087 arch/x86/platform/efi/efi_stub_64.S | 2 +
8088 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
8089 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
8090 arch/x86/platform/intel-mid/mfld.c | 4 +-
8091 arch/x86/platform/intel-mid/mrfl.c | 2 +-
8092 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
8093 arch/x86/platform/olpc/olpc_dt.c | 2 +-
8094 arch/x86/power/cpu.c | 11 +-
8095 arch/x86/realmode/init.c | 10 +-
8096 arch/x86/realmode/rm/Makefile | 3 +
8097 arch/x86/realmode/rm/header.S | 4 +-
8098 arch/x86/realmode/rm/reboot.S | 4 +
8099 arch/x86/realmode/rm/trampoline_32.S | 12 +-
8100 arch/x86/realmode/rm/trampoline_64.S | 3 +-
8101 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
8102 arch/x86/tools/Makefile | 2 +-
8103 arch/x86/tools/relocs.c | 96 +-
8104 arch/x86/um/mem_32.c | 2 +-
8105 arch/x86/um/tls_32.c | 2 +-
8106 arch/x86/xen/enlighten.c | 50 +-
8107 arch/x86/xen/mmu.c | 19 +-
8108 arch/x86/xen/smp.c | 16 +-
8109 arch/x86/xen/xen-asm_32.S | 2 +-
8110 arch/x86/xen/xen-head.S | 11 +
8111 arch/x86/xen/xen-ops.h | 2 -
8113 block/blk-iopoll.c | 2 +-
8114 block/blk-map.c | 2 +-
8115 block/blk-softirq.c | 2 +-
8117 block/compat_ioctl.c | 4 +-
8118 block/genhd.c | 9 +-
8119 block/partitions/efi.c | 8 +-
8120 block/scsi_ioctl.c | 29 +-
8121 crypto/cryptd.c | 4 +-
8122 crypto/pcrypt.c | 2 +-
8123 crypto/zlib.c | 12 +-
8124 drivers/acpi/acpi_video.c | 2 +-
8125 drivers/acpi/apei/apei-internal.h | 2 +-
8126 drivers/acpi/apei/ghes.c | 4 +-
8127 drivers/acpi/bgrt.c | 6 +-
8128 drivers/acpi/blacklist.c | 4 +-
8129 drivers/acpi/bus.c | 4 +-
8130 drivers/acpi/device_pm.c | 4 +-
8131 drivers/acpi/ec.c | 2 +-
8132 drivers/acpi/pci_slot.c | 2 +-
8133 drivers/acpi/processor_idle.c | 2 +-
8134 drivers/acpi/processor_pdc.c | 2 +-
8135 drivers/acpi/sleep.c | 2 +-
8136 drivers/acpi/sysfs.c | 4 +-
8137 drivers/acpi/thermal.c | 2 +-
8138 drivers/acpi/video_detect.c | 7 +-
8139 drivers/ata/libata-core.c | 12 +-
8140 drivers/ata/libata-scsi.c | 2 +-
8141 drivers/ata/libata.h | 2 +-
8142 drivers/ata/pata_arasan_cf.c | 4 +-
8143 drivers/atm/adummy.c | 2 +-
8144 drivers/atm/ambassador.c | 8 +-
8145 drivers/atm/atmtcp.c | 14 +-
8146 drivers/atm/eni.c | 10 +-
8147 drivers/atm/firestream.c | 8 +-
8148 drivers/atm/fore200e.c | 14 +-
8149 drivers/atm/he.c | 18 +-
8150 drivers/atm/horizon.c | 4 +-
8151 drivers/atm/idt77252.c | 36 +-
8152 drivers/atm/iphase.c | 34 +-
8153 drivers/atm/lanai.c | 12 +-
8154 drivers/atm/nicstar.c | 46 +-
8155 drivers/atm/solos-pci.c | 4 +-
8156 drivers/atm/suni.c | 4 +-
8157 drivers/atm/uPD98402.c | 16 +-
8158 drivers/atm/zatm.c | 6 +-
8159 drivers/base/bus.c | 4 +-
8160 drivers/base/devtmpfs.c | 8 +-
8161 drivers/base/node.c | 2 +-
8162 drivers/base/platform-msi.c | 20 +-
8163 drivers/base/power/domain.c | 11 +-
8164 drivers/base/power/sysfs.c | 2 +-
8165 drivers/base/power/wakeup.c | 8 +-
8166 drivers/base/regmap/regmap-debugfs.c | 11 +-
8167 drivers/base/syscore.c | 4 +-
8168 drivers/block/cciss.c | 28 +-
8169 drivers/block/cciss.h | 2 +-
8170 drivers/block/cpqarray.c | 28 +-
8171 drivers/block/cpqarray.h | 2 +-
8172 drivers/block/drbd/drbd_bitmap.c | 2 +-
8173 drivers/block/drbd/drbd_int.h | 8 +-
8174 drivers/block/drbd/drbd_main.c | 12 +-
8175 drivers/block/drbd/drbd_nl.c | 4 +-
8176 drivers/block/drbd/drbd_receiver.c | 34 +-
8177 drivers/block/drbd/drbd_worker.c | 8 +-
8178 drivers/block/pktcdvd.c | 4 +-
8179 drivers/block/rbd.c | 2 +-
8180 drivers/bluetooth/btwilink.c | 2 +-
8181 drivers/bus/arm-cci.c | 12 +-
8182 drivers/cdrom/cdrom.c | 11 +-
8183 drivers/cdrom/gdrom.c | 1 -
8184 drivers/char/agp/compat_ioctl.c | 2 +-
8185 drivers/char/agp/frontend.c | 4 +-
8186 drivers/char/agp/intel-gtt.c | 4 +-
8187 drivers/char/hpet.c | 2 +-
8188 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
8189 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8190 drivers/char/mem.c | 47 +-
8191 drivers/char/nvram.c | 2 +-
8192 drivers/char/pcmcia/synclink_cs.c | 16 +-
8193 drivers/char/random.c | 12 +-
8194 drivers/char/sonypi.c | 11 +-
8195 drivers/char/tpm/tpm_acpi.c | 3 +-
8196 drivers/char/tpm/tpm_eventlog.c | 4 +-
8197 drivers/char/virtio_console.c | 4 +-
8198 drivers/clk/clk-composite.c | 2 +-
8199 drivers/clk/samsung/clk.h | 2 +-
8200 drivers/clk/socfpga/clk-gate.c | 9 +-
8201 drivers/clk/socfpga/clk-pll.c | 9 +-
8202 drivers/clk/ti/clk.c | 8 +-
8203 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8204 drivers/cpufreq/cpufreq-dt.c | 4 +-
8205 drivers/cpufreq/cpufreq.c | 30 +-
8206 drivers/cpufreq/cpufreq_governor.c | 2 +-
8207 drivers/cpufreq/cpufreq_governor.h | 4 +-
8208 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
8209 drivers/cpufreq/intel_pstate.c | 33 +-
8210 drivers/cpufreq/p4-clockmod.c | 12 +-
8211 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
8212 drivers/cpufreq/speedstep-centrino.c | 7 +-
8213 drivers/cpuidle/driver.c | 2 +-
8214 drivers/cpuidle/dt_idle_states.c | 2 +-
8215 drivers/cpuidle/governor.c | 2 +-
8216 drivers/cpuidle/sysfs.c | 2 +-
8217 drivers/crypto/hifn_795x.c | 4 +-
8218 drivers/devfreq/devfreq.c | 4 +-
8219 drivers/dma/sh/shdma-base.c | 4 +-
8220 drivers/dma/sh/shdmac.c | 2 +-
8221 drivers/edac/edac_device.c | 4 +-
8222 drivers/edac/edac_mc_sysfs.c | 2 +-
8223 drivers/edac/edac_pci.c | 4 +-
8224 drivers/edac/edac_pci_sysfs.c | 22 +-
8225 drivers/edac/mce_amd.h | 2 +-
8226 drivers/firewire/core-card.c | 6 +-
8227 drivers/firewire/core-device.c | 2 +-
8228 drivers/firewire/core-transaction.c | 1 +
8229 drivers/firewire/core.h | 1 +
8230 drivers/firmware/dmi-id.c | 2 +-
8231 drivers/firmware/dmi_scan.c | 12 +-
8232 drivers/firmware/efi/cper.c | 8 +-
8233 drivers/firmware/efi/efi.c | 12 +-
8234 drivers/firmware/efi/efivars.c | 2 +-
8235 drivers/firmware/efi/runtime-map.c | 2 +-
8236 drivers/firmware/google/gsmi.c | 2 +-
8237 drivers/firmware/google/memconsole.c | 7 +-
8238 drivers/firmware/memmap.c | 2 +-
8239 drivers/firmware/psci.c | 2 +-
8240 drivers/gpio/gpio-davinci.c | 6 +-
8241 drivers/gpio/gpio-em.c | 2 +-
8242 drivers/gpio/gpio-ich.c | 2 +-
8243 drivers/gpio/gpio-omap.c | 4 +-
8244 drivers/gpio/gpio-rcar.c | 2 +-
8245 drivers/gpio/gpio-vr41xx.c | 2 +-
8246 drivers/gpio/gpiolib.c | 12 +-
8247 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
8248 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
8249 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
8250 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
8251 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
8252 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
8253 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
8254 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
8255 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
8256 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
8257 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
8258 drivers/gpu/drm/drm_crtc.c | 2 +-
8259 drivers/gpu/drm/drm_drv.c | 2 +-
8260 drivers/gpu/drm/drm_fops.c | 12 +-
8261 drivers/gpu/drm/drm_global.c | 14 +-
8262 drivers/gpu/drm/drm_info.c | 13 +-
8263 drivers/gpu/drm/drm_ioc32.c | 13 +-
8264 drivers/gpu/drm/drm_ioctl.c | 2 +-
8265 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
8266 drivers/gpu/drm/i810/i810_drv.h | 4 +-
8267 drivers/gpu/drm/i915/i915_dma.c | 2 +-
8268 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
8269 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
8270 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
8271 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
8272 drivers/gpu/drm/i915/intel_display.c | 26 +-
8273 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
8274 drivers/gpu/drm/mga/mga_drv.h | 4 +-
8275 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
8276 drivers/gpu/drm/mga/mga_irq.c | 8 +-
8277 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
8278 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
8279 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
8280 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
8281 drivers/gpu/drm/omapdrm/Makefile | 2 +-
8282 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
8283 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
8284 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
8285 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
8286 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
8287 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
8288 drivers/gpu/drm/r128/r128_cce.c | 2 +-
8289 drivers/gpu/drm/r128/r128_drv.h | 4 +-
8290 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
8291 drivers/gpu/drm/r128/r128_irq.c | 4 +-
8292 drivers/gpu/drm/r128/r128_state.c | 4 +-
8293 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
8294 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
8295 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
8296 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
8297 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
8298 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
8299 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
8300 drivers/gpu/drm/tegra/dc.c | 2 +-
8301 drivers/gpu/drm/tegra/dsi.c | 2 +-
8302 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8303 drivers/gpu/drm/tegra/sor.c | 7 +-
8304 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8305 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8306 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8307 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8308 drivers/gpu/drm/udl/udl_fb.c | 1 -
8309 drivers/gpu/drm/via/via_drv.h | 4 +-
8310 drivers/gpu/drm/via/via_irq.c | 18 +-
8311 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8312 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8313 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8314 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8315 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8316 drivers/hid/hid-core.c | 4 +-
8317 drivers/hid/hid-sensor-custom.c | 2 +-
8318 drivers/hv/channel.c | 2 +-
8319 drivers/hv/hv.c | 4 +-
8320 drivers/hv/hv_balloon.c | 18 +-
8321 drivers/hv/hyperv_vmbus.h | 2 +-
8322 drivers/hwmon/acpi_power_meter.c | 6 +-
8323 drivers/hwmon/applesmc.c | 2 +-
8324 drivers/hwmon/asus_atk0110.c | 10 +-
8325 drivers/hwmon/coretemp.c | 2 +-
8326 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8327 drivers/hwmon/ibmaem.c | 2 +-
8328 drivers/hwmon/iio_hwmon.c | 2 +-
8329 drivers/hwmon/nct6683.c | 6 +-
8330 drivers/hwmon/nct6775.c | 6 +-
8331 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8332 drivers/hwmon/sht15.c | 12 +-
8333 drivers/hwmon/via-cputemp.c | 2 +-
8334 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8335 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8336 drivers/i2c/i2c-dev.c | 2 +-
8337 drivers/ide/ide-cd.c | 2 +-
8338 drivers/ide/ide-disk.c | 2 +-
8339 drivers/iio/industrialio-core.c | 2 +-
8340 drivers/iio/magnetometer/ak8975.c | 2 +-
8341 drivers/infiniband/core/cm.c | 32 +-
8342 drivers/infiniband/core/fmr_pool.c | 20 +-
8343 drivers/infiniband/core/uverbs_cmd.c | 3 +
8344 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8345 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8346 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8347 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8348 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8349 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8350 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8351 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8352 drivers/infiniband/hw/nes/nes.c | 4 +-
8353 drivers/infiniband/hw/nes/nes.h | 40 +-
8354 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8355 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8356 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8357 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8358 drivers/infiniband/hw/qib/qib.h | 1 +
8359 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8360 drivers/input/gameport/gameport.c | 4 +-
8361 drivers/input/input.c | 4 +-
8362 drivers/input/joystick/sidewinder.c | 1 +
8363 drivers/input/joystick/xpad.c | 4 +-
8364 drivers/input/misc/ims-pcu.c | 4 +-
8365 drivers/input/mouse/psmouse.h | 2 +-
8366 drivers/input/mousedev.c | 2 +-
8367 drivers/input/serio/serio.c | 4 +-
8368 drivers/input/serio/serio_raw.c | 4 +-
8369 drivers/input/touchscreen/htcpen.c | 2 +-
8370 drivers/iommu/arm-smmu-v3.c | 2 +-
8371 drivers/iommu/arm-smmu.c | 43 +-
8372 drivers/iommu/io-pgtable-arm.c | 101 +-
8373 drivers/iommu/io-pgtable.c | 11 +-
8374 drivers/iommu/io-pgtable.h | 19 +-
8375 drivers/iommu/iommu.c | 2 +-
8376 drivers/iommu/ipmmu-vmsa.c | 13 +-
8377 drivers/iommu/irq_remapping.c | 2 +-
8378 drivers/irqchip/irq-gic.c | 2 +-
8379 drivers/irqchip/irq-i8259.c | 2 +-
8380 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8381 drivers/irqchip/irq-renesas-irqc.c | 2 +-
8382 drivers/isdn/capi/capi.c | 10 +-
8383 drivers/isdn/gigaset/interface.c | 8 +-
8384 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8385 drivers/isdn/hardware/avm/b1.c | 4 +-
8386 drivers/isdn/i4l/isdn_common.c | 2 +
8387 drivers/isdn/i4l/isdn_tty.c | 22 +-
8388 drivers/isdn/icn/icn.c | 2 +-
8389 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8390 drivers/lguest/core.c | 10 +-
8391 drivers/lguest/page_tables.c | 2 +-
8392 drivers/lguest/x86/core.c | 12 +-
8393 drivers/lguest/x86/switcher_32.S | 27 +-
8394 drivers/md/bcache/closure.h | 2 +-
8395 drivers/md/bitmap.c | 2 +-
8396 drivers/md/dm-ioctl.c | 2 +-
8397 drivers/md/dm-raid1.c | 18 +-
8398 drivers/md/dm-stats.c | 6 +-
8399 drivers/md/dm-stripe.c | 10 +-
8400 drivers/md/dm-table.c | 2 +-
8401 drivers/md/dm-thin-metadata.c | 4 +-
8402 drivers/md/dm.c | 16 +-
8403 drivers/md/md.c | 26 +-
8404 drivers/md/md.h | 6 +-
8405 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8406 drivers/md/persistent-data/dm-space-map.h | 1 +
8407 drivers/md/raid1.c | 4 +-
8408 drivers/md/raid10.c | 18 +-
8409 drivers/md/raid5.c | 22 +-
8410 drivers/media/dvb-core/dvbdev.c | 2 +-
8411 drivers/media/dvb-frontends/af9033.h | 2 +-
8412 drivers/media/dvb-frontends/dib3000.h | 2 +-
8413 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8414 drivers/media/dvb-frontends/dib8000.h | 2 +-
8415 drivers/media/pci/cx88/cx88-video.c | 6 +-
8416 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8417 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8418 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8419 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8420 drivers/media/pci/tw68/tw68-core.c | 2 +-
8421 drivers/media/platform/omap/omap_vout.c | 11 +-
8422 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8423 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8424 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8425 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8426 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8427 drivers/media/radio/radio-cadet.c | 2 +
8428 drivers/media/radio/radio-maxiradio.c | 2 +-
8429 drivers/media/radio/radio-shark.c | 2 +-
8430 drivers/media/radio/radio-shark2.c | 2 +-
8431 drivers/media/radio/radio-si476x.c | 2 +-
8432 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8433 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8434 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8435 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8436 drivers/memory/omap-gpmc.c | 21 +-
8437 drivers/message/fusion/mptsas.c | 34 +-
8438 drivers/mfd/ab8500-debugfs.c | 2 +-
8439 drivers/mfd/kempld-core.c | 2 +-
8440 drivers/mfd/max8925-i2c.c | 2 +-
8441 drivers/mfd/tps65910.c | 2 +-
8442 drivers/mfd/twl4030-irq.c | 9 +-
8443 drivers/mfd/wm5110-tables.c | 2 +-
8444 drivers/mfd/wm8998-tables.c | 2 +-
8445 drivers/misc/c2port/core.c | 4 +-
8446 drivers/misc/kgdbts.c | 4 +-
8447 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8448 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8449 drivers/misc/mic/scif/scif_rb.c | 8 +-
8450 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8451 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8452 drivers/misc/sgi-gru/grutables.h | 154 +-
8453 drivers/misc/sgi-xp/xp.h | 2 +-
8454 drivers/misc/sgi-xp/xpc.h | 3 +-
8455 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8456 drivers/mmc/card/block.c | 2 +-
8457 drivers/mmc/host/dw_mmc.h | 2 +-
8458 drivers/mmc/host/mmci.c | 4 +-
8459 drivers/mmc/host/omap_hsmmc.c | 4 +-
8460 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8461 drivers/mmc/host/sdhci-s3c.c | 8 +-
8462 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8463 drivers/mtd/nand/denali.c | 1 +
8464 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8465 drivers/mtd/nftlmount.c | 1 +
8466 drivers/mtd/sm_ftl.c | 2 +-
8467 drivers/net/bonding/bond_netlink.c | 2 +-
8468 drivers/net/caif/caif_hsi.c | 2 +-
8469 drivers/net/can/Kconfig | 2 +-
8470 drivers/net/can/dev.c | 2 +-
8471 drivers/net/can/vcan.c | 2 +-
8472 drivers/net/dummy.c | 2 +-
8473 drivers/net/ethernet/8390/ax88796.c | 4 +-
8474 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8475 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8476 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8477 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8478 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8479 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8480 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8481 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8482 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8483 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8484 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8485 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8486 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8487 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8488 drivers/net/ethernet/broadcom/tg3.h | 1 +
8489 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8490 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8491 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8492 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8493 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8494 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8495 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8496 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8497 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8498 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8499 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8500 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8501 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8502 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8503 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8504 drivers/net/ethernet/realtek/r8169.c | 8 +-
8505 drivers/net/ethernet/sfc/ptp.c | 2 +-
8506 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8507 drivers/net/ethernet/via/via-rhine.c | 2 +-
8508 drivers/net/geneve.c | 2 +-
8509 drivers/net/hyperv/hyperv_net.h | 2 +-
8510 drivers/net/hyperv/rndis_filter.c | 4 +-
8511 drivers/net/ifb.c | 2 +-
8512 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8513 drivers/net/macvlan.c | 20 +-
8514 drivers/net/macvtap.c | 6 +-
8515 drivers/net/nlmon.c | 2 +-
8516 drivers/net/phy/phy_device.c | 6 +-
8517 drivers/net/ppp/ppp_generic.c | 4 +-
8518 drivers/net/slip/slhc.c | 2 +-
8519 drivers/net/team/team.c | 4 +-
8520 drivers/net/tun.c | 7 +-
8521 drivers/net/usb/hso.c | 23 +-
8522 drivers/net/usb/r8152.c | 2 +-
8523 drivers/net/usb/sierra_net.c | 4 +-
8524 drivers/net/virtio_net.c | 2 +-
8525 drivers/net/vrf.c | 2 +-
8526 drivers/net/vxlan.c | 4 +-
8527 drivers/net/wimax/i2400m/rx.c | 2 +-
8528 drivers/net/wireless/airo.c | 2 +-
8529 drivers/net/wireless/at76c50x-usb.c | 2 +-
8530 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8531 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
8532 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8533 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8534 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8535 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8536 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8537 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8538 drivers/net/wireless/b43/phy_lp.c | 2 +-
8539 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8540 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8541 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8542 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8543 drivers/net/wireless/rndis_wlan.c | 2 +-
8544 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8545 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8546 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8547 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8548 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8549 drivers/nfc/nfcwilink.c | 2 +-
8550 drivers/of/fdt.c | 4 +-
8551 drivers/oprofile/buffer_sync.c | 8 +-
8552 drivers/oprofile/event_buffer.c | 2 +-
8553 drivers/oprofile/oprof.c | 2 +-
8554 drivers/oprofile/oprofile_stats.c | 10 +-
8555 drivers/oprofile/oprofile_stats.h | 10 +-
8556 drivers/oprofile/oprofilefs.c | 6 +-
8557 drivers/oprofile/timer_int.c | 2 +-
8558 drivers/parport/procfs.c | 4 +-
8559 drivers/pci/host/pci-host-generic.c | 24 +-
8560 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8561 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8562 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8563 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8564 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8565 drivers/pci/hotplug/pciehp_core.c | 2 +-
8566 drivers/pci/msi.c | 22 +-
8567 drivers/pci/pci-sysfs.c | 6 +-
8568 drivers/pci/pci.h | 2 +-
8569 drivers/pci/pcie/aspm.c | 6 +-
8570 drivers/pci/pcie/portdrv_pci.c | 2 +-
8571 drivers/pci/probe.c | 2 +-
8572 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8573 drivers/pinctrl/pinctrl-at91.c | 5 +-
8574 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8575 drivers/platform/x86/alienware-wmi.c | 4 +-
8576 drivers/platform/x86/compal-laptop.c | 2 +-
8577 drivers/platform/x86/hdaps.c | 2 +-
8578 drivers/platform/x86/ibm_rtl.c | 2 +-
8579 drivers/platform/x86/intel_oaktrail.c | 2 +-
8580 drivers/platform/x86/msi-laptop.c | 16 +-
8581 drivers/platform/x86/msi-wmi.c | 2 +-
8582 drivers/platform/x86/samsung-laptop.c | 2 +-
8583 drivers/platform/x86/samsung-q10.c | 2 +-
8584 drivers/platform/x86/sony-laptop.c | 14 +-
8585 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8586 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8587 drivers/pnp/pnpbios/core.c | 2 +-
8588 drivers/power/pda_power.c | 7 +-
8589 drivers/power/power_supply.h | 4 +-
8590 drivers/power/power_supply_core.c | 7 +-
8591 drivers/power/power_supply_sysfs.c | 6 +-
8592 drivers/power/reset/at91-reset.c | 9 +-
8593 drivers/powercap/powercap_sys.c | 136 +-
8594 drivers/ptp/ptp_private.h | 2 +-
8595 drivers/ptp/ptp_sysfs.c | 2 +-
8596 drivers/regulator/core.c | 4 +-
8597 drivers/regulator/max8660.c | 6 +-
8598 drivers/regulator/max8973-regulator.c | 16 +-
8599 drivers/regulator/mc13892-regulator.c | 8 +-
8600 drivers/rtc/rtc-armada38x.c | 7 +-
8601 drivers/rtc/rtc-cmos.c | 4 +-
8602 drivers/rtc/rtc-ds1307.c | 2 +-
8603 drivers/rtc/rtc-m48t59.c | 4 +-
8604 drivers/rtc/rtc-test.c | 6 +-
8605 drivers/scsi/be2iscsi/be_main.c | 2 +-
8606 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8607 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8608 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8609 drivers/scsi/hosts.c | 4 +-
8610 drivers/scsi/hpsa.c | 38 +-
8611 drivers/scsi/hpsa.h | 2 +-
8612 drivers/scsi/libfc/fc_exch.c | 50 +-
8613 drivers/scsi/libsas/sas_ata.c | 2 +-
8614 drivers/scsi/lpfc/lpfc.h | 8 +-
8615 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8616 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8617 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8618 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8619 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
8620 drivers/scsi/pmcraid.c | 20 +-
8621 drivers/scsi/pmcraid.h | 8 +-
8622 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8623 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8624 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8625 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8626 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8627 drivers/scsi/scsi.c | 2 +-
8628 drivers/scsi/scsi_lib.c | 8 +-
8629 drivers/scsi/scsi_sysfs.c | 2 +-
8630 drivers/scsi/scsi_transport_fc.c | 8 +-
8631 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8632 drivers/scsi/scsi_transport_srp.c | 6 +-
8633 drivers/scsi/sd.c | 6 +-
8634 drivers/scsi/sg.c | 2 +-
8635 drivers/scsi/sr.c | 21 +-
8636 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8637 drivers/spi/spi.c | 2 +-
8638 drivers/staging/android/timed_output.c | 6 +-
8639 drivers/staging/comedi/comedi_fops.c | 8 +-
8640 drivers/staging/fbtft/fbtft-core.c | 2 +-
8641 drivers/staging/fbtft/fbtft.h | 2 +-
8642 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8643 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8644 drivers/staging/iio/adc/ad7280a.c | 4 +-
8645 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8646 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8647 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8648 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8649 drivers/staging/lustre/lustre/include/obd.h | 2 +-
8650 drivers/staging/octeon/ethernet-rx.c | 20 +-
8651 drivers/staging/octeon/ethernet.c | 8 +-
8652 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
8653 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
8654 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
8655 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
8656 drivers/staging/sm750fb/sm750.c | 14 +-
8657 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
8658 drivers/target/sbp/sbp_target.c | 4 +-
8659 drivers/thermal/cpu_cooling.c | 9 +-
8660 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8661 drivers/thermal/of-thermal.c | 17 +-
8662 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
8663 drivers/tty/cyclades.c | 6 +-
8664 drivers/tty/hvc/hvc_console.c | 14 +-
8665 drivers/tty/hvc/hvcs.c | 21 +-
8666 drivers/tty/hvc/hvsi.c | 22 +-
8667 drivers/tty/hvc/hvsi_lib.c | 4 +-
8668 drivers/tty/ipwireless/tty.c | 27 +-
8669 drivers/tty/moxa.c | 2 +-
8670 drivers/tty/n_gsm.c | 4 +-
8671 drivers/tty/n_tty.c | 3 +-
8672 drivers/tty/pty.c | 4 +-
8673 drivers/tty/rocket.c | 6 +-
8674 drivers/tty/serial/8250/8250_core.c | 10 +-
8675 drivers/tty/serial/ifx6x60.c | 2 +-
8676 drivers/tty/serial/ioc4_serial.c | 6 +-
8677 drivers/tty/serial/kgdb_nmi.c | 4 +-
8678 drivers/tty/serial/kgdboc.c | 32 +-
8679 drivers/tty/serial/msm_serial.c | 4 +-
8680 drivers/tty/serial/samsung.c | 9 +-
8681 drivers/tty/serial/serial_core.c | 8 +-
8682 drivers/tty/synclink.c | 34 +-
8683 drivers/tty/synclink_gt.c | 28 +-
8684 drivers/tty/synclinkmp.c | 34 +-
8685 drivers/tty/tty_io.c | 2 +-
8686 drivers/tty/tty_ldisc.c | 8 +-
8687 drivers/tty/tty_port.c | 22 +-
8688 drivers/uio/uio.c | 13 +-
8689 drivers/usb/atm/cxacru.c | 2 +-
8690 drivers/usb/atm/usbatm.c | 24 +-
8691 drivers/usb/class/cdc-acm.h | 2 +-
8692 drivers/usb/core/devices.c | 6 +-
8693 drivers/usb/core/devio.c | 12 +-
8694 drivers/usb/core/hcd.c | 4 +-
8695 drivers/usb/core/sysfs.c | 2 +-
8696 drivers/usb/core/usb.c | 2 +-
8697 drivers/usb/early/ehci-dbgp.c | 16 +-
8698 drivers/usb/gadget/function/u_serial.c | 22 +-
8699 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
8700 drivers/usb/host/ehci-hcd.c | 2 +-
8701 drivers/usb/host/ehci-hub.c | 4 +-
8702 drivers/usb/host/ehci-q.c | 4 +-
8703 drivers/usb/host/fotg210-hcd.c | 2 +-
8704 drivers/usb/host/fusbh200-hcd.c | 2 +-
8705 drivers/usb/host/hwa-hc.c | 2 +-
8706 drivers/usb/host/ohci-hcd.c | 2 +-
8707 drivers/usb/host/r8a66597.h | 2 +-
8708 drivers/usb/host/uhci-hcd.c | 2 +-
8709 drivers/usb/host/xhci-pci.c | 2 +-
8710 drivers/usb/host/xhci.c | 2 +-
8711 drivers/usb/misc/appledisplay.c | 4 +-
8712 drivers/usb/serial/console.c | 8 +-
8713 drivers/usb/storage/transport.c | 2 +-
8714 drivers/usb/storage/usb.c | 2 +-
8715 drivers/usb/storage/usb.h | 2 +-
8716 drivers/usb/usbip/vhci.h | 2 +-
8717 drivers/usb/usbip/vhci_hcd.c | 6 +-
8718 drivers/usb/usbip/vhci_rx.c | 2 +-
8719 drivers/usb/wusbcore/wa-hc.h | 4 +-
8720 drivers/usb/wusbcore/wa-xfer.c | 2 +-
8721 drivers/vfio/vfio.c | 2 +-
8722 drivers/vhost/vringh.c | 20 +-
8723 drivers/video/backlight/kb3886_bl.c | 2 +-
8724 drivers/video/console/fbcon.c | 2 +-
8725 drivers/video/fbdev/aty/aty128fb.c | 2 +-
8726 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
8727 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
8728 drivers/video/fbdev/core/fb_defio.c | 6 +-
8729 drivers/video/fbdev/core/fbmem.c | 2 +-
8730 drivers/video/fbdev/hyperv_fb.c | 4 +-
8731 drivers/video/fbdev/i810/i810_accel.c | 1 +
8732 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
8733 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
8734 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
8735 drivers/video/fbdev/omap2/dss/display.c | 8 +-
8736 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
8737 drivers/video/fbdev/smscufx.c | 4 +-
8738 drivers/video/fbdev/udlfb.c | 36 +-
8739 drivers/video/fbdev/uvesafb.c | 52 +-
8740 drivers/video/fbdev/vesafb.c | 58 +-
8741 drivers/video/fbdev/via/via_clock.h | 2 +-
8742 drivers/xen/events/events_base.c | 6 +-
8743 drivers/xen/evtchn.c | 4 +-
8744 fs/Kconfig.binfmt | 2 +-
8745 fs/afs/inode.c | 4 +-
8747 fs/autofs4/waitq.c | 2 +-
8748 fs/befs/endian.h | 6 +-
8749 fs/binfmt_aout.c | 23 +-
8750 fs/binfmt_elf.c | 670 +-
8751 fs/binfmt_elf_fdpic.c | 4 +-
8752 fs/block_dev.c | 2 +-
8753 fs/btrfs/ctree.c | 9 +-
8754 fs/btrfs/delayed-inode.c | 9 +-
8755 fs/btrfs/delayed-inode.h | 6 +-
8756 fs/btrfs/file.c | 10 +-
8757 fs/btrfs/inode.c | 14 +-
8758 fs/btrfs/super.c | 2 +-
8759 fs/btrfs/sysfs.c | 2 +-
8760 fs/btrfs/tests/free-space-tests.c | 8 +-
8761 fs/btrfs/tree-log.h | 2 +-
8763 fs/cachefiles/bind.c | 6 +-
8764 fs/cachefiles/daemon.c | 8 +-
8765 fs/cachefiles/internal.h | 12 +-
8766 fs/cachefiles/namei.c | 2 +-
8767 fs/cachefiles/proc.c | 12 +-
8768 fs/ceph/dir.c | 12 +-
8769 fs/ceph/super.c | 4 +-
8770 fs/cifs/cifs_debug.c | 12 +-
8771 fs/cifs/cifsfs.c | 8 +-
8772 fs/cifs/cifsglob.h | 54 +-
8773 fs/cifs/file.c | 10 +-
8774 fs/cifs/misc.c | 4 +-
8775 fs/cifs/smb1ops.c | 80 +-
8776 fs/cifs/smb2ops.c | 84 +-
8777 fs/cifs/smb2pdu.c | 3 +-
8778 fs/coda/cache.c | 10 +-
8780 fs/compat_binfmt_elf.c | 2 +
8781 fs/compat_ioctl.c | 12 +-
8782 fs/configfs/dir.c | 10 +-
8783 fs/coredump.c | 16 +-
8785 fs/ecryptfs/inode.c | 2 +-
8786 fs/ecryptfs/miscdev.c | 2 +-
8788 fs/ext2/xattr.c | 5 +-
8789 fs/ext4/ext4.h | 20 +-
8790 fs/ext4/mballoc.c | 44 +-
8791 fs/ext4/resize.c | 16 +-
8792 fs/ext4/super.c | 4 +-
8793 fs/ext4/xattr.c | 5 +-
8796 fs/fs_struct.c | 8 +-
8797 fs/fscache/cookie.c | 40 +-
8798 fs/fscache/internal.h | 202 +-
8799 fs/fscache/object.c | 26 +-
8800 fs/fscache/operation.c | 38 +-
8801 fs/fscache/page.c | 110 +-
8802 fs/fscache/stats.c | 348 +-
8803 fs/fuse/cuse.c | 10 +-
8804 fs/fuse/dev.c | 4 +-
8805 fs/gfs2/glock.c | 22 +-
8806 fs/gfs2/glops.c | 4 +-
8807 fs/gfs2/quota.c | 6 +-
8808 fs/hugetlbfs/inode.c | 13 +-
8810 fs/jffs2/erase.c | 3 +-
8811 fs/jffs2/wbuf.c | 3 +-
8812 fs/jfs/super.c | 2 +-
8813 fs/kernfs/dir.c | 2 +-
8814 fs/kernfs/file.c | 20 +-
8816 fs/lockd/clntproc.c | 4 +-
8818 fs/namespace.c | 16 +-
8819 fs/nfs/callback_xdr.c | 2 +-
8820 fs/nfs/inode.c | 6 +-
8821 fs/nfsd/nfs4proc.c | 2 +-
8822 fs/nfsd/nfs4xdr.c | 2 +-
8823 fs/nfsd/nfscache.c | 11 +-
8824 fs/nfsd/vfs.c | 6 +-
8825 fs/nls/nls_base.c | 26 +-
8826 fs/nls/nls_euc-jp.c | 6 +-
8827 fs/nls/nls_koi8-ru.c | 6 +-
8828 fs/notify/fanotify/fanotify_user.c | 4 +-
8829 fs/notify/notification.c | 4 +-
8830 fs/ntfs/dir.c | 2 +-
8831 fs/ntfs/super.c | 6 +-
8832 fs/ocfs2/localalloc.c | 2 +-
8833 fs/ocfs2/ocfs2.h | 10 +-
8834 fs/ocfs2/suballoc.c | 12 +-
8835 fs/ocfs2/super.c | 20 +-
8837 fs/posix_acl.c | 4 +-
8838 fs/proc/array.c | 20 +
8839 fs/proc/base.c | 4 +-
8840 fs/proc/kcore.c | 34 +-
8841 fs/proc/meminfo.c | 2 +-
8842 fs/proc/nommu.c | 2 +-
8843 fs/proc/proc_sysctl.c | 26 +-
8844 fs/proc/task_mmu.c | 39 +-
8845 fs/proc/task_nommu.c | 4 +-
8846 fs/proc/vmcore.c | 16 +-
8847 fs/qnx6/qnx6.h | 4 +-
8848 fs/quota/netlink.c | 4 +-
8849 fs/read_write.c | 2 +-
8850 fs/reiserfs/do_balan.c | 2 +-
8851 fs/reiserfs/procfs.c | 2 +-
8852 fs/reiserfs/reiserfs.h | 4 +-
8853 fs/seq_file.c | 4 +-
8855 fs/squashfs/xattr.c | 12 +-
8856 fs/sysv/sysv.h | 2 +-
8857 fs/tracefs/inode.c | 8 +-
8858 fs/udf/misc.c | 2 +-
8859 fs/ufs/swab.h | 4 +-
8860 fs/userfaultfd.c | 2 +-
8862 fs/xfs/libxfs/xfs_bmap.c | 2 +-
8863 fs/xfs/xfs_dir2_readdir.c | 7 +-
8864 fs/xfs/xfs_ioctl.c | 2 +-
8865 fs/xfs/xfs_linux.h | 4 +-
8866 include/asm-generic/4level-fixup.h | 2 +
8867 include/asm-generic/atomic-long.h | 156 +-
8868 include/asm-generic/atomic64.h | 12 +
8869 include/asm-generic/bitops/__fls.h | 2 +-
8870 include/asm-generic/bitops/fls.h | 2 +-
8871 include/asm-generic/bitops/fls64.h | 4 +-
8872 include/asm-generic/bug.h | 6 +-
8873 include/asm-generic/cache.h | 4 +-
8874 include/asm-generic/emergency-restart.h | 2 +-
8875 include/asm-generic/kmap_types.h | 4 +-
8876 include/asm-generic/local.h | 13 +
8877 include/asm-generic/pgtable-nopmd.h | 18 +-
8878 include/asm-generic/pgtable-nopud.h | 15 +-
8879 include/asm-generic/pgtable.h | 16 +
8880 include/asm-generic/sections.h | 1 +
8881 include/asm-generic/uaccess.h | 16 +
8882 include/asm-generic/vmlinux.lds.h | 15 +-
8883 include/crypto/algapi.h | 2 +-
8884 include/drm/drmP.h | 16 +-
8885 include/drm/drm_crtc_helper.h | 2 +-
8886 include/drm/drm_mm.h | 2 +-
8887 include/drm/i915_pciids.h | 2 +-
8888 include/drm/intel-gtt.h | 4 +-
8889 include/drm/ttm/ttm_memory.h | 2 +-
8890 include/drm/ttm/ttm_page_alloc.h | 1 +
8891 include/keys/asymmetric-subtype.h | 2 +-
8892 include/linux/atmdev.h | 4 +-
8893 include/linux/atomic.h | 17 +-
8894 include/linux/audit.h | 2 +-
8895 include/linux/average.h | 2 +-
8896 include/linux/binfmts.h | 3 +-
8897 include/linux/bitmap.h | 2 +-
8898 include/linux/bitops.h | 8 +-
8899 include/linux/blkdev.h | 2 +-
8900 include/linux/blktrace_api.h | 2 +-
8901 include/linux/cache.h | 8 +
8902 include/linux/cdrom.h | 1 -
8903 include/linux/cleancache.h | 2 +-
8904 include/linux/clk-provider.h | 1 +
8905 include/linux/compat.h | 6 +-
8906 include/linux/compiler-gcc.h | 28 +-
8907 include/linux/compiler.h | 157 +-
8908 include/linux/configfs.h | 2 +-
8909 include/linux/cpufreq.h | 3 +-
8910 include/linux/cpuidle.h | 5 +-
8911 include/linux/cpumask.h | 14 +-
8912 include/linux/crypto.h | 4 +-
8913 include/linux/ctype.h | 2 +-
8914 include/linux/dcache.h | 4 +-
8915 include/linux/decompress/mm.h | 2 +-
8916 include/linux/devfreq.h | 2 +-
8917 include/linux/device.h | 7 +-
8918 include/linux/dma-mapping.h | 2 +-
8919 include/linux/efi.h | 1 +
8920 include/linux/elf.h | 2 +
8921 include/linux/err.h | 4 +-
8922 include/linux/extcon.h | 2 +-
8923 include/linux/fb.h | 3 +-
8924 include/linux/fdtable.h | 2 +-
8925 include/linux/fs.h | 5 +-
8926 include/linux/fs_struct.h | 2 +-
8927 include/linux/fscache-cache.h | 2 +-
8928 include/linux/fscache.h | 2 +-
8929 include/linux/fsnotify.h | 2 +-
8930 include/linux/genhd.h | 4 +-
8931 include/linux/genl_magic_func.h | 2 +-
8932 include/linux/gfp.h | 12 +-
8933 include/linux/highmem.h | 12 +
8934 include/linux/hwmon-sysfs.h | 6 +-
8935 include/linux/i2c.h | 1 +
8936 include/linux/if_pppox.h | 2 +-
8937 include/linux/init.h | 12 +-
8938 include/linux/init_task.h | 7 +
8939 include/linux/interrupt.h | 6 +-
8940 include/linux/iommu.h | 2 +-
8941 include/linux/ioport.h | 2 +-
8942 include/linux/ipc.h | 2 +-
8943 include/linux/irq.h | 5 +-
8944 include/linux/irqdesc.h | 2 +-
8945 include/linux/irqdomain.h | 3 +
8946 include/linux/jiffies.h | 16 +-
8947 include/linux/key-type.h | 2 +-
8948 include/linux/kgdb.h | 6 +-
8949 include/linux/kmemleak.h | 4 +-
8950 include/linux/kobject.h | 3 +-
8951 include/linux/kobject_ns.h | 2 +-
8952 include/linux/kref.h | 2 +-
8953 include/linux/libata.h | 2 +-
8954 include/linux/linkage.h | 1 +
8955 include/linux/list.h | 15 +
8956 include/linux/lockref.h | 26 +-
8957 include/linux/math64.h | 10 +-
8958 include/linux/mempolicy.h | 7 +
8959 include/linux/mm.h | 102 +-
8960 include/linux/mm_types.h | 20 +
8961 include/linux/mmiotrace.h | 4 +-
8962 include/linux/mmzone.h | 2 +-
8963 include/linux/mod_devicetable.h | 4 +-
8964 include/linux/module.h | 69 +-
8965 include/linux/moduleloader.h | 16 +
8966 include/linux/moduleparam.h | 4 +-
8967 include/linux/net.h | 2 +-
8968 include/linux/netdevice.h | 7 +-
8969 include/linux/netfilter.h | 2 +-
8970 include/linux/netfilter/nfnetlink.h | 2 +-
8971 include/linux/nls.h | 4 +-
8972 include/linux/notifier.h | 3 +-
8973 include/linux/oprofile.h | 4 +-
8974 include/linux/padata.h | 2 +-
8975 include/linux/pci_hotplug.h | 3 +-
8976 include/linux/percpu.h | 2 +-
8977 include/linux/perf_event.h | 12 +-
8978 include/linux/pipe_fs_i.h | 8 +-
8979 include/linux/pm.h | 1 +
8980 include/linux/pm_domain.h | 4 +-
8981 include/linux/pm_runtime.h | 2 +-
8982 include/linux/pnp.h | 2 +-
8983 include/linux/poison.h | 4 +-
8984 include/linux/power/smartreflex.h | 2 +-
8985 include/linux/ppp-comp.h | 2 +-
8986 include/linux/preempt.h | 21 +
8987 include/linux/proc_ns.h | 2 +-
8988 include/linux/psci.h | 2 +-
8989 include/linux/quota.h | 2 +-
8990 include/linux/random.h | 19 +-
8991 include/linux/rculist.h | 16 +
8992 include/linux/reboot.h | 14 +-
8993 include/linux/regset.h | 3 +-
8994 include/linux/relay.h | 2 +-
8995 include/linux/rio.h | 2 +-
8996 include/linux/rmap.h | 4 +-
8997 include/linux/sched.h | 72 +-
8998 include/linux/sched/sysctl.h | 1 +
8999 include/linux/semaphore.h | 2 +-
9000 include/linux/seq_file.h | 1 +
9001 include/linux/signal.h | 2 +-
9002 include/linux/skbuff.h | 12 +-
9003 include/linux/slab.h | 47 +-
9004 include/linux/slab_def.h | 14 +-
9005 include/linux/slub_def.h | 2 +-
9006 include/linux/smp.h | 2 +
9007 include/linux/sock_diag.h | 2 +-
9008 include/linux/sonet.h | 2 +-
9009 include/linux/sunrpc/addr.h | 8 +-
9010 include/linux/sunrpc/clnt.h | 2 +-
9011 include/linux/sunrpc/svc.h | 2 +-
9012 include/linux/sunrpc/svc_rdma.h | 18 +-
9013 include/linux/sunrpc/svcauth.h | 2 +-
9014 include/linux/swapops.h | 10 +-
9015 include/linux/swiotlb.h | 3 +-
9016 include/linux/syscalls.h | 21 +-
9017 include/linux/syscore_ops.h | 2 +-
9018 include/linux/sysctl.h | 3 +-
9019 include/linux/sysfs.h | 9 +-
9020 include/linux/sysrq.h | 3 +-
9021 include/linux/tcp.h | 14 +-
9022 include/linux/thread_info.h | 7 +
9023 include/linux/tty.h | 4 +-
9024 include/linux/tty_driver.h | 2 +-
9025 include/linux/tty_ldisc.h | 2 +-
9026 include/linux/types.h | 16 +
9027 include/linux/uaccess.h | 6 +-
9028 include/linux/uio_driver.h | 2 +-
9029 include/linux/unaligned/access_ok.h | 24 +-
9030 include/linux/usb.h | 12 +-
9031 include/linux/usb/hcd.h | 1 +
9032 include/linux/usb/renesas_usbhs.h | 2 +-
9033 include/linux/vermagic.h | 21 +-
9034 include/linux/vga_switcheroo.h | 8 +-
9035 include/linux/vmalloc.h | 7 +-
9036 include/linux/vmstat.h | 24 +-
9037 include/linux/xattr.h | 5 +-
9038 include/linux/zlib.h | 3 +-
9039 include/media/v4l2-dev.h | 2 +-
9040 include/media/v4l2-device.h | 2 +-
9041 include/net/9p/transport.h | 2 +-
9042 include/net/bluetooth/l2cap.h | 2 +-
9043 include/net/bonding.h | 2 +-
9044 include/net/caif/cfctrl.h | 6 +-
9045 include/net/flow.h | 2 +-
9046 include/net/genetlink.h | 2 +-
9047 include/net/gro_cells.h | 2 +-
9048 include/net/inet_connection_sock.h | 2 +-
9049 include/net/inet_sock.h | 2 +-
9050 include/net/inetpeer.h | 2 +-
9051 include/net/ip_fib.h | 2 +-
9052 include/net/ip_vs.h | 8 +-
9053 include/net/ipv6.h | 2 +-
9054 include/net/irda/ircomm_tty.h | 1 +
9055 include/net/iucv/af_iucv.h | 2 +-
9056 include/net/llc_c_ac.h | 2 +-
9057 include/net/llc_c_ev.h | 4 +-
9058 include/net/llc_c_st.h | 2 +-
9059 include/net/llc_s_ac.h | 2 +-
9060 include/net/llc_s_st.h | 2 +-
9061 include/net/mac80211.h | 4 +-
9062 include/net/neighbour.h | 2 +-
9063 include/net/net_namespace.h | 18 +-
9064 include/net/netlink.h | 2 +-
9065 include/net/netns/conntrack.h | 6 +-
9066 include/net/netns/ipv4.h | 4 +-
9067 include/net/netns/ipv6.h | 4 +-
9068 include/net/netns/xfrm.h | 2 +-
9069 include/net/ping.h | 2 +-
9070 include/net/protocol.h | 4 +-
9071 include/net/rtnetlink.h | 2 +-
9072 include/net/sctp/checksum.h | 4 +-
9073 include/net/sctp/sm.h | 4 +-
9074 include/net/sctp/structs.h | 2 +-
9075 include/net/sock.h | 12 +-
9076 include/net/tcp.h | 8 +-
9077 include/net/xfrm.h | 13 +-
9078 include/rdma/iw_cm.h | 2 +-
9079 include/scsi/libfc.h | 3 +-
9080 include/scsi/scsi_device.h | 6 +-
9081 include/scsi/scsi_driver.h | 2 +-
9082 include/scsi/scsi_transport_fc.h | 3 +-
9083 include/scsi/sg.h | 2 +-
9084 include/sound/compress_driver.h | 2 +-
9085 include/sound/soc.h | 4 +-
9086 include/trace/events/irq.h | 4 +-
9087 include/uapi/linux/a.out.h | 8 +
9088 include/uapi/linux/bcache.h | 5 +-
9089 include/uapi/linux/byteorder/little_endian.h | 28 +-
9090 include/uapi/linux/connector.h | 2 +-
9091 include/uapi/linux/elf.h | 28 +
9092 include/uapi/linux/screen_info.h | 3 +-
9093 include/uapi/linux/swab.h | 6 +-
9094 include/uapi/linux/xattr.h | 4 +
9095 include/video/udlfb.h | 8 +-
9096 include/video/uvesafb.h | 1 +
9099 init/do_mounts.c | 14 +-
9100 init/do_mounts.h | 8 +-
9101 init/do_mounts_initrd.c | 30 +-
9102 init/do_mounts_md.c | 6 +-
9103 init/init_task.c | 4 +
9104 init/initramfs.c | 38 +-
9107 ipc/ipc_sysctl.c | 8 +-
9108 ipc/mq_sysctl.c | 4 +-
9111 kernel/audit.c | 8 +-
9112 kernel/auditsc.c | 4 +-
9113 kernel/bpf/core.c | 7 +-
9114 kernel/capability.c | 3 +
9115 kernel/compat.c | 38 +-
9116 kernel/debug/debug_core.c | 16 +-
9117 kernel/debug/kdb/kdb_main.c | 4 +-
9118 kernel/events/core.c | 26 +-
9119 kernel/events/internal.h | 10 +-
9120 kernel/events/uprobes.c | 2 +-
9121 kernel/exit.c | 2 +-
9122 kernel/fork.c | 167 +-
9123 kernel/futex.c | 11 +-
9124 kernel/futex_compat.c | 2 +-
9125 kernel/gcov/base.c | 7 +-
9126 kernel/irq/manage.c | 2 +-
9127 kernel/irq/msi.c | 19 +-
9128 kernel/irq/spurious.c | 2 +-
9129 kernel/jump_label.c | 5 +
9130 kernel/kallsyms.c | 37 +-
9131 kernel/kexec.c | 3 +-
9132 kernel/kmod.c | 8 +-
9133 kernel/kprobes.c | 4 +-
9134 kernel/ksysfs.c | 2 +-
9135 kernel/locking/lockdep.c | 7 +-
9136 kernel/locking/mutex-debug.c | 12 +-
9137 kernel/locking/mutex-debug.h | 4 +-
9138 kernel/locking/mutex.c | 6 +-
9139 kernel/module.c | 422 +-
9140 kernel/notifier.c | 17 +-
9141 kernel/padata.c | 4 +-
9142 kernel/panic.c | 5 +-
9144 kernel/pid_namespace.c | 2 +-
9145 kernel/power/process.c | 12 +-
9146 kernel/profile.c | 14 +-
9147 kernel/ptrace.c | 8 +-
9148 kernel/rcu/rcutorture.c | 60 +-
9149 kernel/rcu/tiny.c | 4 +-
9150 kernel/rcu/tree.c | 44 +-
9151 kernel/rcu/tree.h | 14 +-
9152 kernel/rcu/tree_plugin.h | 14 +-
9153 kernel/rcu/tree_trace.c | 12 +-
9154 kernel/sched/auto_group.c | 4 +-
9155 kernel/sched/core.c | 45 +-
9156 kernel/sched/fair.c | 2 +-
9157 kernel/sched/sched.h | 2 +-
9158 kernel/signal.c | 12 +-
9159 kernel/smpboot.c | 4 +-
9160 kernel/softirq.c | 12 +-
9161 kernel/sys.c | 10 +-
9162 kernel/sysctl.c | 34 +-
9163 kernel/time/alarmtimer.c | 2 +-
9164 kernel/time/posix-cpu-timers.c | 4 +-
9165 kernel/time/posix-timers.c | 24 +-
9166 kernel/time/timer.c | 2 +-
9167 kernel/time/timer_stats.c | 10 +-
9168 kernel/trace/blktrace.c | 6 +-
9169 kernel/trace/ftrace.c | 15 +-
9170 kernel/trace/ring_buffer.c | 96 +-
9171 kernel/trace/trace.c | 2 +-
9172 kernel/trace/trace.h | 2 +-
9173 kernel/trace/trace_clock.c | 4 +-
9174 kernel/trace/trace_events.c | 1 -
9175 kernel/trace/trace_functions_graph.c | 4 +-
9176 kernel/trace/trace_mmiotrace.c | 8 +-
9177 kernel/trace/trace_output.c | 10 +-
9178 kernel/trace/trace_seq.c | 2 +-
9179 kernel/trace/trace_stack.c | 2 +-
9180 kernel/user_namespace.c | 2 +-
9181 kernel/utsname_sysctl.c | 2 +-
9182 kernel/watchdog.c | 2 +-
9183 kernel/workqueue.c | 2 +-
9184 lib/Kconfig.debug | 8 +-
9188 lib/debugobjects.c | 2 +-
9189 lib/decompress_bunzip2.c | 3 +-
9190 lib/decompress_unlzma.c | 4 +-
9192 lib/dma-debug.c | 4 +-
9193 lib/inflate.c | 2 +-
9194 lib/ioremap.c | 4 +-
9195 lib/kobject.c | 4 +-
9196 lib/list_debug.c | 126 +-
9197 lib/lockref.c | 44 +-
9198 lib/percpu-refcount.c | 2 +-
9199 lib/radix-tree.c | 2 +-
9200 lib/random32.c | 2 +-
9201 lib/show_mem.c | 2 +-
9202 lib/strncpy_from_user.c | 2 +-
9203 lib/strnlen_user.c | 2 +-
9204 lib/swiotlb.c | 2 +-
9205 lib/usercopy.c | 6 +
9206 lib/vsprintf.c | 12 +-
9208 mm/backing-dev.c | 4 +-
9213 mm/hugetlb.c | 70 +-
9217 mm/memory-failure.c | 6 +-
9218 mm/memory.c | 424 +-
9219 mm/mempolicy.c | 25 +
9223 mm/mprotect.c | 137 +-
9226 mm/page-writeback.c | 2 +-
9227 mm/page_alloc.c | 49 +-
9229 mm/process_vm_access.c | 14 +-
9234 mm/slab_common.c | 86 +-
9237 mm/sparse-vmemmap.c | 4 +-
9240 mm/swapfile.c | 12 +-
9242 mm/vmalloc.c | 114 +-
9244 net/8021q/vlan.c | 5 +-
9245 net/8021q/vlan_netlink.c | 2 +-
9247 net/9p/trans_fd.c | 2 +-
9248 net/atm/atm_misc.c | 8 +-
9249 net/atm/lec.h | 2 +-
9250 net/atm/proc.c | 6 +-
9251 net/atm/resources.c | 4 +-
9252 net/ax25/sysctl_net_ax25.c | 2 +-
9253 net/batman-adv/bat_iv_ogm.c | 8 +-
9254 net/batman-adv/fragmentation.c | 2 +-
9255 net/batman-adv/soft-interface.c | 8 +-
9256 net/batman-adv/types.h | 6 +-
9257 net/bluetooth/hci_sock.c | 2 +-
9258 net/bluetooth/l2cap_core.c | 6 +-
9259 net/bluetooth/l2cap_sock.c | 12 +-
9260 net/bluetooth/rfcomm/sock.c | 4 +-
9261 net/bluetooth/rfcomm/tty.c | 4 +-
9262 net/bridge/br_netlink.c | 2 +-
9263 net/bridge/netfilter/ebtables.c | 6 +-
9264 net/caif/cfctrl.c | 11 +-
9265 net/caif/chnl_net.c | 2 +-
9266 net/can/af_can.c | 2 +-
9268 net/ceph/messenger.c | 4 +-
9269 net/compat.c | 24 +-
9270 net/core/datagram.c | 2 +-
9271 net/core/dev.c | 16 +-
9272 net/core/filter.c | 2 +-
9273 net/core/flow.c | 6 +-
9274 net/core/neighbour.c | 4 +-
9275 net/core/net-sysfs.c | 2 +-
9276 net/core/net_namespace.c | 8 +-
9277 net/core/netpoll.c | 4 +-
9278 net/core/rtnetlink.c | 15 +-
9279 net/core/scm.c | 14 +-
9280 net/core/skbuff.c | 8 +-
9281 net/core/sock.c | 28 +-
9282 net/core/sock_diag.c | 15 +-
9283 net/core/sysctl_net_core.c | 22 +-
9284 net/decnet/af_decnet.c | 1 +
9285 net/decnet/sysctl_net_decnet.c | 4 +-
9286 net/dsa/dsa.c | 2 +-
9287 net/hsr/hsr_netlink.c | 2 +-
9288 net/ieee802154/6lowpan/core.c | 2 +-
9289 net/ieee802154/6lowpan/reassembly.c | 14 +-
9290 net/ipv4/af_inet.c | 2 +-
9291 net/ipv4/devinet.c | 18 +-
9292 net/ipv4/fib_frontend.c | 6 +-
9293 net/ipv4/fib_semantics.c | 2 +-
9294 net/ipv4/inet_connection_sock.c | 4 +-
9295 net/ipv4/inet_timewait_sock.c | 2 +-
9296 net/ipv4/inetpeer.c | 2 +-
9297 net/ipv4/ip_fragment.c | 15 +-
9298 net/ipv4/ip_gre.c | 6 +-
9299 net/ipv4/ip_sockglue.c | 2 +-
9300 net/ipv4/ip_vti.c | 4 +-
9301 net/ipv4/ipconfig.c | 6 +-
9302 net/ipv4/ipip.c | 4 +-
9303 net/ipv4/netfilter/arp_tables.c | 12 +-
9304 net/ipv4/netfilter/ip_tables.c | 12 +-
9305 net/ipv4/ping.c | 14 +-
9306 net/ipv4/raw.c | 14 +-
9307 net/ipv4/route.c | 32 +-
9308 net/ipv4/sysctl_net_ipv4.c | 22 +-
9309 net/ipv4/tcp_input.c | 6 +-
9310 net/ipv4/tcp_probe.c | 2 +-
9311 net/ipv4/udp.c | 10 +-
9312 net/ipv4/xfrm4_policy.c | 18 +-
9313 net/ipv6/addrconf.c | 18 +-
9314 net/ipv6/af_inet6.c | 2 +-
9315 net/ipv6/datagram.c | 2 +-
9316 net/ipv6/icmp.c | 2 +-
9317 net/ipv6/ip6_fib.c | 4 +-
9318 net/ipv6/ip6_gre.c | 10 +-
9319 net/ipv6/ip6_tunnel.c | 4 +-
9320 net/ipv6/ip6_vti.c | 4 +-
9321 net/ipv6/ipv6_sockglue.c | 2 +-
9322 net/ipv6/netfilter/ip6_tables.c | 12 +-
9323 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9324 net/ipv6/ping.c | 33 +-
9325 net/ipv6/raw.c | 17 +-
9326 net/ipv6/reassembly.c | 13 +-
9327 net/ipv6/route.c | 2 +-
9328 net/ipv6/sit.c | 4 +-
9329 net/ipv6/sysctl_net_ipv6.c | 2 +-
9330 net/ipv6/udp.c | 6 +-
9331 net/ipv6/xfrm6_policy.c | 17 +-
9332 net/irda/ircomm/ircomm_tty.c | 18 +-
9333 net/iucv/af_iucv.c | 4 +-
9334 net/iucv/iucv.c | 2 +-
9335 net/key/af_key.c | 4 +-
9336 net/l2tp/l2tp_eth.c | 38 +-
9337 net/l2tp/l2tp_ip.c | 2 +-
9338 net/l2tp/l2tp_ip6.c | 2 +-
9339 net/mac80211/cfg.c | 8 +-
9340 net/mac80211/ieee80211_i.h | 3 +-
9341 net/mac80211/iface.c | 20 +-
9342 net/mac80211/main.c | 2 +-
9343 net/mac80211/pm.c | 4 +-
9344 net/mac80211/rate.c | 2 +-
9345 net/mac80211/sta_info.c | 2 +-
9346 net/mac80211/util.c | 8 +-
9347 net/mpls/af_mpls.c | 6 +-
9348 net/netfilter/ipset/ip_set_core.c | 2 +-
9349 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9350 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9351 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9352 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9353 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9354 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9355 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9356 net/netfilter/nf_conntrack_acct.c | 2 +-
9357 net/netfilter/nf_conntrack_ecache.c | 2 +-
9358 net/netfilter/nf_conntrack_helper.c | 2 +-
9359 net/netfilter/nf_conntrack_proto.c | 2 +-
9360 net/netfilter/nf_conntrack_standalone.c | 2 +-
9361 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9362 net/netfilter/nf_log.c | 10 +-
9363 net/netfilter/nf_sockopt.c | 4 +-
9364 net/netfilter/nfnetlink_log.c | 4 +-
9365 net/netfilter/nft_compat.c | 9 +-
9366 net/netfilter/xt_statistic.c | 8 +-
9367 net/netlink/af_netlink.c | 4 +-
9368 net/openvswitch/vport-internal_dev.c | 2 +-
9369 net/packet/af_packet.c | 8 +-
9370 net/phonet/pep.c | 6 +-
9371 net/phonet/socket.c | 2 +-
9372 net/phonet/sysctl.c | 2 +-
9373 net/rds/cong.c | 6 +-
9375 net/rds/ib_cm.c | 2 +-
9376 net/rds/ib_recv.c | 4 +-
9378 net/rds/iw_cm.c | 2 +-
9379 net/rds/iw_recv.c | 4 +-
9380 net/rds/rds.h | 2 +-
9381 net/rds/tcp.c | 2 +-
9382 net/rds/tcp_send.c | 2 +-
9383 net/rxrpc/af_rxrpc.c | 2 +-
9384 net/rxrpc/ar-ack.c | 14 +-
9385 net/rxrpc/ar-call.c | 2 +-
9386 net/rxrpc/ar-connection.c | 2 +-
9387 net/rxrpc/ar-connevent.c | 2 +-
9388 net/rxrpc/ar-input.c | 4 +-
9389 net/rxrpc/ar-internal.h | 8 +-
9390 net/rxrpc/ar-local.c | 2 +-
9391 net/rxrpc/ar-output.c | 4 +-
9392 net/rxrpc/ar-peer.c | 2 +-
9393 net/rxrpc/ar-proc.c | 4 +-
9394 net/rxrpc/ar-transport.c | 2 +-
9395 net/rxrpc/rxkad.c | 4 +-
9396 net/sched/sch_generic.c | 4 +-
9397 net/sctp/ipv6.c | 6 +-
9398 net/sctp/protocol.c | 10 +-
9399 net/sctp/sm_sideeffect.c | 2 +-
9400 net/sctp/socket.c | 21 +-
9401 net/sctp/sysctl.c | 10 +-
9402 net/socket.c | 18 +-
9403 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9404 net/sunrpc/clnt.c | 4 +-
9405 net/sunrpc/sched.c | 4 +-
9406 net/sunrpc/svc.c | 4 +-
9407 net/sunrpc/svcauth_unix.c | 2 +-
9408 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
9409 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9410 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9411 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9412 net/tipc/netlink_compat.c | 12 +-
9413 net/tipc/subscr.c | 2 +-
9414 net/unix/af_unix.c | 7 +-
9415 net/unix/sysctl_net_unix.c | 2 +-
9416 net/wireless/wext-core.c | 19 +-
9417 net/xfrm/xfrm_policy.c | 16 +-
9418 net/xfrm/xfrm_state.c | 33 +-
9419 net/xfrm/xfrm_sysctl.c | 2 +-
9420 scripts/Kbuild.include | 2 +-
9421 scripts/Makefile.build | 2 +-
9422 scripts/Makefile.clean | 3 +-
9423 scripts/Makefile.host | 69 +-
9424 scripts/basic/fixdep.c | 12 +-
9425 scripts/dtc/checks.c | 14 +-
9426 scripts/dtc/data.c | 6 +-
9427 scripts/dtc/flattree.c | 8 +-
9428 scripts/dtc/livetree.c | 4 +-
9429 scripts/gcc-plugin.sh | 51 +
9430 scripts/headers_install.sh | 1 +
9431 scripts/kallsyms.c | 4 +-
9432 scripts/kconfig/lkc.h | 5 +-
9433 scripts/kconfig/menu.c | 2 +-
9434 scripts/kconfig/symbol.c | 6 +-
9435 scripts/link-vmlinux.sh | 2 +-
9436 scripts/mod/file2alias.c | 14 +-
9437 scripts/mod/modpost.c | 25 +-
9438 scripts/mod/modpost.h | 6 +-
9439 scripts/mod/sumversion.c | 2 +-
9440 scripts/module-common.lds | 4 +
9441 scripts/package/builddeb | 1 +
9442 scripts/pnmtologo.c | 6 +-
9443 scripts/sortextable.h | 6 +-
9444 scripts/tags.sh | 2 +-
9445 security/Kconfig | 692 +-
9446 security/integrity/ima/ima.h | 4 +-
9447 security/integrity/ima/ima_api.c | 2 +-
9448 security/integrity/ima/ima_fs.c | 4 +-
9449 security/integrity/ima/ima_queue.c | 2 +-
9450 security/keys/key.c | 18 +-
9451 security/selinux/avc.c | 6 +-
9452 security/selinux/include/xfrm.h | 2 +-
9453 security/yama/yama_lsm.c | 2 +-
9454 sound/aoa/codecs/onyx.c | 7 +-
9455 sound/aoa/codecs/onyx.h | 1 +
9456 sound/core/oss/pcm_oss.c | 18 +-
9457 sound/core/pcm_compat.c | 2 +-
9458 sound/core/pcm_native.c | 4 +-
9459 sound/core/sound.c | 2 +-
9460 sound/drivers/mts64.c | 14 +-
9461 sound/drivers/opl4/opl4_lib.c | 2 +-
9462 sound/drivers/portman2x4.c | 3 +-
9463 sound/firewire/amdtp.c | 4 +-
9464 sound/firewire/amdtp.h | 4 +-
9465 sound/firewire/isight.c | 10 +-
9466 sound/firewire/scs1x.c | 8 +-
9467 sound/oss/sb_audio.c | 2 +-
9468 sound/oss/swarm_cs4297a.c | 6 +-
9469 sound/pci/hda/hda_codec.c | 2 +-
9470 sound/pci/ymfpci/ymfpci.h | 2 +-
9471 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9472 sound/soc/codecs/sti-sas.c | 10 +-
9473 sound/soc/soc-ac97.c | 6 +-
9474 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9475 tools/gcc/Makefile | 42 +
9476 tools/gcc/checker_plugin.c | 150 +
9477 tools/gcc/colorize_plugin.c | 215 +
9478 tools/gcc/constify_plugin.c | 571 +
9479 tools/gcc/gcc-common.h | 812 +
9480 tools/gcc/initify_plugin.c | 552 +
9481 tools/gcc/kallocstat_plugin.c | 188 +
9482 tools/gcc/kernexec_plugin.c | 549 +
9483 tools/gcc/latent_entropy_plugin.c | 470 +
9484 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9485 tools/gcc/size_overflow_plugin/Makefile | 28 +
9486 .../disable_size_overflow_hash.data |12422 ++++++++++++
9487 .../generate_size_overflow_hash.sh | 103 +
9488 .../insert_size_overflow_asm.c | 416 +
9489 .../size_overflow_plugin/intentional_overflow.c | 1010 +
9490 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9491 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
9492 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9493 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
9494 .../size_overflow_hash_aux.data | 92 +
9495 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
9496 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9497 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9498 .../size_overflow_plugin_hash.c | 352 +
9499 .../size_overflow_plugin/size_overflow_transform.c | 749 +
9500 .../size_overflow_transform_core.c | 1010 +
9501 tools/gcc/stackleak_plugin.c | 436 +
9502 tools/gcc/structleak_plugin.c | 287 +
9503 tools/include/linux/compiler.h | 8 +
9504 tools/lib/api/Makefile | 2 +-
9505 tools/perf/util/include/asm/alternative-asm.h | 3 +
9506 tools/virtio/linux/uaccess.h | 2 +-
9507 virt/kvm/kvm_main.c | 42 +-
9508 1944 files changed, 66925 insertions(+), 8949 deletions(-)
projects / thirdparty / grsecurity-scrape.git / blob