1 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
2 Author: Brad Spengler <spender@grsecurity.net>
3 Date: Mon Apr 25 20:40:53 2016 -0400
5 Fix DoS in n_tty_receive_buf_common reported by marcan at:
6 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
7 and via lengthy diatribe on Twitter:
8 https://twitter.com/marcan42/status/724740708104474626
9 https://twitter.com/marcan42/status/724740985146609664
10 https://twitter.com/marcan42/status/724741270325760000
11 https://twitter.com/marcan42/status/724742465199050752
12 https://twitter.com/marcan42/status/724745886794833920
13 https://twitter.com/marcan42/status/724749571495075840
14 https://twitter.com/marcan42/status/724746427285409796
15 https://twitter.com/marcan42/status/724743150263095296
16 https://twitter.com/marcan42/status/724757473433808896
18 Fix it correctly instead of using the incorrect fix suggested
19 by marcan (aka "try reading the code next time")
20 The original code was meant to fix an integer truncation issue
21 that would also have caused a SIZE_OVERFLOW "DoS".
23 drivers/tty/n_tty.c | 9 +++++----
24 1 file changed, 5 insertions(+), 4 deletions(-)
26 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
27 Author: Brad Spengler <spender@grsecurity.net>
28 Date: Mon Apr 25 19:52:33 2016 -0400
30 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
32 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
33 patch from Mathias Krause
36 1 file changed, 1 insertion(+), 1 deletion(-)
38 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
39 Author: Jiri Benc <jbenc@redhat.com>
40 Date: Fri Apr 22 13:09:13 2016 +0200
42 cxgbi: fix uninitialized flowi6
44 ip6_route_output looks into different fields in the passed flowi6 structure,
45 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
48 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
49 Signed-off-by: Jiri Benc <jbenc@redhat.com>
50 Signed-off-by: David S. Miller <davem@davemloft.net>
52 drivers/scsi/cxgbi/libcxgbi.c | 1 +
53 1 file changed, 1 insertion(+)
55 commit ec65caa32652841a5be21d6e73146921af16d7a8
56 Author: Brad Spengler <spender@grsecurity.net>
57 Date: Wed Apr 20 20:59:43 2016 -0400
59 Make /proc/sched_debug only readable by root, mentioned in
60 recent NCC Group paper on Linux containers
62 kernel/sched/debug.c | 4 ++++
63 1 file changed, 4 insertions(+)
65 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
66 Merge: 463149f ff26083
67 Author: Brad Spengler <spender@grsecurity.net>
68 Date: Wed Apr 20 17:55:53 2016 -0400
70 Merge branch 'pax-test' into grsec-test
72 commit ff260839e610d2bc1b0c579edd7deb0028198f01
73 Author: Brad Spengler <spender@grsecurity.net>
74 Date: Wed Apr 20 17:55:24 2016 -0400
76 Update to pax-linux-4.4.8-test14.patch:
77 - Emese fixed some CodingStyle issues in the latent entropy plugin
78 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
80 arch/mips/include/asm/cache.h | 3 ++-
81 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
82 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
83 arch/mips/lib/libgcc.h | 12 +++++++++---
84 drivers/idle/intel_idle.c | 6 ++++--
85 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
86 6 files changed, 57 insertions(+), 33 deletions(-)
88 commit 463149f47a64db4b26a13009f83ed73d393a209c
89 Author: Xiaodong Liu <xiaodong.liu@intel.com>
90 Date: Tue Apr 12 09:45:51 2016 +0000
92 crypto: sha1-mb - use corrcet pointer while completing jobs
94 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
95 when check and complete other jobs. If the memory of first completed req
96 is freed, while still completing other jobs in the func, kernel will
97 crash since NULL pointer is assigned to RIP.
99 Cc: <stable@vger.kernel.org>
100 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
101 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
102 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
104 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
105 1 file changed, 2 insertions(+), 2 deletions(-)
107 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
108 Author: Tom Lendacky <thomas.lendacky@amd.com>
109 Date: Wed Apr 13 10:52:25 2016 -0500
111 crypto: ccp - Prevent information leakage on export
113 Prevent information from leaking to userspace by doing a memset to 0 of
114 the export state structure before setting the structure values and copying
115 it. This prevents un-initialized padding areas from being copied into the
118 Cc: <stable@vger.kernel.org> # 3.14.x-
119 Reported-by: Ben Hutchings <ben@decadent.org.uk>
120 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
121 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
123 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
124 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
125 2 files changed, 6 insertions(+)
127 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
128 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
129 Date: Mon Apr 18 14:33:54 2016 +0300
131 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
133 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
134 order-0 memory allocations in RX path"), so here is no reason for depleting
135 reserves. Generic __netdev_alloc_frag() implements the same logic.
137 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
138 Acked-by: Eric Dumazet <edumazet@google.com>
139 Signed-off-by: David S. Miller <davem@davemloft.net>
141 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
142 1 file changed, 1 insertion(+), 1 deletion(-)
144 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
145 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
146 Date: Thu Mar 17 18:00:29 2016 +0000
148 USB: usbip: fix potential out-of-bounds write
150 Fix potential out-of-bounds write to urb->transfer_buffer
151 usbip handles network communication directly in the kernel. When receiving a
152 packet from its peer, usbip code parses headers according to protocol. As
153 part of this parsing urb->actual_length is filled. Since the input for
154 urb->actual_length comes from the network, it should be treated as untrusted.
155 Any entity controlling the network may put any value in the input and the
156 preallocated urb->transfer_buffer may not be large enough to hold the data.
157 Thus, the malicious entity is able to write arbitrary data to kernel memory.
159 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
160 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
162 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
163 1 file changed, 11 insertions(+)
165 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
166 Merge: d60a24d f5fe5fd
167 Author: Brad Spengler <spender@grsecurity.net>
168 Date: Wed Apr 20 17:35:58 2016 -0400
170 Merge branch 'pax-test' into grsec-test
172 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
173 Merge: a107ba2 8c9aef0
174 Author: Brad Spengler <spender@grsecurity.net>
175 Date: Wed Apr 20 17:35:29 2016 -0400
177 Merge branch 'linux-4.4.y' into pax-test
179 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
180 Author: Brad Spengler <spender@grsecurity.net>
181 Date: Mon Apr 18 17:48:10 2016 -0400
183 fix cast for constify change, reported by pipacs
185 drivers/idle/intel_idle.c | 4 ++--
186 1 file changed, 2 insertions(+), 2 deletions(-)
188 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
189 Author: Brad Spengler <spender@grsecurity.net>
190 Date: Fri Apr 15 21:31:07 2016 -0400
192 Use proper type for function pointer
194 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
195 1 file changed, 3 insertions(+), 3 deletions(-)
197 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
198 Author: Brad Spengler <spender@grsecurity.net>
199 Date: Fri Apr 15 21:24:04 2016 -0400
201 Fix skylake cstates compat with constify
203 drivers/idle/intel_idle.c | 6 ++++--
204 1 file changed, 4 insertions(+), 2 deletions(-)
206 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
207 Author: Brad Spengler <spender@grsecurity.net>
208 Date: Fri Apr 15 21:10:44 2016 -0400
210 Update size_overflow hash table
212 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
213 1 file changed, 2 insertions(+), 1 deletion(-)
215 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
216 Author: Brad Spengler <spender@grsecurity.net>
217 Date: Fri Apr 15 20:52:37 2016 -0400
221 fs/coredump.c | 3 ---
222 1 file changed, 3 deletions(-)
224 commit 967224da52bd98d078b1237aea5ec9e622238fba
225 Merge: 92771d6 a107ba2
226 Author: Brad Spengler <spender@grsecurity.net>
227 Date: Fri Apr 15 20:30:23 2016 -0400
229 Merge branch 'pax-test' into grsec-test
231 commit a107ba25214d9694eb836fb04c782ad694977b91
232 Merge: 4d8fc00 b40108b
233 Author: Brad Spengler <spender@grsecurity.net>
234 Date: Fri Apr 15 20:18:26 2016 -0400
236 Merge branch 'linux-4.4.y' into pax-test
238 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
239 Author: Brad Spengler <spender@grsecurity.net>
240 Date: Sun Apr 10 07:18:03 2016 -0400
242 From: Mathias Krause <minipli@googlemail.com>
243 To: "David S. Miller" <davem@davemloft.net>
244 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
245 Emelyanov <xemul@parallels.com>
246 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
249 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
250 pdiag_put_mclist() leaks uninitialized heap bytes via the
251 PACKET_DIAG_MCLIST netlink attribute.
253 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
255 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
256 Signed-off-by: Mathias Krause <minipli@googlemail.com>
257 Cc: Eric W. Biederman <ebiederm@xmission.com>
258 Cc: Pavel Emelyanov <xemul@parallels.com>
260 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
261 to userland before the introduction of the packet_diag interface.
262 Therefore the "Fixes:" line on that commit.
264 net/packet/af_packet.c | 1 +
265 1 file changed, 1 insertion(+)
267 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
268 Author: Jakub Sitnicki <jkbs@redhat.com>
269 Date: Tue Apr 5 18:41:08 2016 +0200
271 ipv6: Count in extension headers in skb->network_header
273 When sending a UDPv6 message longer than MTU, account for the length
274 of fragmentable IPv6 extension headers in skb->network_header offset.
275 Same as we do in alloc_new_skb path in __ip6_append_data().
277 This ensures that later on __ip6_make_skb() will make space in
278 headroom for fragmentable extension headers:
280 /* move skb->data to ip header from ext header */
281 if (skb->data < skb_network_header(skb))
282 __skb_pull(skb, skb_network_offset(skb));
284 Prevents a splat due to skb_under_panic:
286 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
287 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
288 ------------[ cut here ]------------
289 kernel BUG at net/core/skbuff.c:104!
290 invalid opcode: 0000 [#1] KASAN
291 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
294 [<ffffffff813eb7b9>] skb_push+0x79/0x80
295 [<ffffffff8143397b>] eth_header+0x2b/0x100
296 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
297 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
298 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
299 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
300 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
301 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
302 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
305 Reported-by: Ji Jianwen <jiji@redhat.com>
306 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
307 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
308 Signed-off-by: David S. Miller <davem@davemloft.net>
310 net/ipv6/ip6_output.c | 8 ++++----
311 1 file changed, 4 insertions(+), 4 deletions(-)
313 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
314 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
315 Date: Fri Apr 1 17:17:50 2016 -0300
317 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
319 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
320 before ip6_tnl_create2 is called. When register_netdevice is called, there
321 is no linkinfo attribute in the NEWLINK message because of that.
323 Setting rtnl_link_ops before calling register_netdevice fixes that.
325 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
326 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
327 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
328 Signed-off-by: David S. Miller <davem@davemloft.net>
330 net/ipv6/ip6_tunnel.c | 2 +-
331 1 file changed, 1 insertion(+), 1 deletion(-)
333 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
334 Author: Brad Spengler <spender@grsecurity.net>
335 Date: Tue Apr 5 21:12:44 2016 -0400
337 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
339 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
340 1 file changed, 12 insertions(+), 6 deletions(-)
342 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
343 Author: Brad Spengler <spender@grsecurity.net>
344 Date: Sun Apr 3 20:10:10 2016 -0400
346 Fix RANDSTRUCT support on ARM
348 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
349 1 file changed, 52 insertions(+), 2 deletions(-)
351 commit bd893a75ab49f6ea5a216eb334471507337118ba
352 Merge: 87b7f1d 4d8fc00
353 Author: Brad Spengler <spender@grsecurity.net>
354 Date: Sat Apr 2 11:54:20 2016 -0400
356 Merge branch 'pax-test' into grsec-test
358 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
359 Author: Brad Spengler <spender@grsecurity.net>
360 Date: Sat Apr 2 11:53:53 2016 -0400
362 Update to pax-linux-4.4.6-test13.patch:
363 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
364 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
366 arch/mips/include/asm/atomic.h | 4 ----
367 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
368 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
369 3 files changed, 1 insertion(+), 5 deletions(-)
371 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
372 Merge: 3335266 3abdad0
373 Author: Brad Spengler <spender@grsecurity.net>
374 Date: Sat Apr 2 11:19:17 2016 -0400
376 Merge branch 'pax-test' into grsec-test
378 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
379 Author: Brad Spengler <spender@grsecurity.net>
380 Date: Sat Apr 2 11:12:56 2016 -0400
382 Update to pax-linux-4.4.6-test12.patch:
383 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
384 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
385 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
386 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
387 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
388 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
389 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
390 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
391 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
392 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
393 - fixed a gratuitous userland dereference in the amd64 stack walker
394 - added latent entropy gathering to a few more functions
395 - constified a few smp_hotplug_thread instances
397 arch/x86/entry/vdso/Makefile | 1 +
398 arch/x86/include/asm/cpufeature.h | 1 -
399 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
400 arch/x86/kernel/head_32.S | 6 +++---
401 arch/x86/mm/fault.c | 2 +-
402 drivers/iommu/arm-smmu.c | 2 +-
403 drivers/net/ppp/pptp.c | 1 +
404 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
405 fs/nfs/internal.h | 5 +++--
406 fs/proc/kcore.c | 2 +-
407 kernel/module.c | 6 +++---
408 kernel/rcu/tree.c | 2 +-
409 kernel/softirq.c | 2 +-
410 kernel/stop_machine.c | 2 +-
411 net/ipv6/xfrm6_mode_transport.c | 2 +-
412 net/sched/sch_tbf.c | 9 ++++++---
413 scripts/Makefile.gcc-plugins | 13 +++----------
414 scripts/Makefile.host | 3 +--
415 .../disable_size_overflow_hash.data | 4 +++-
416 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
417 20 files changed, 40 insertions(+), 48 deletions(-)
419 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
420 Author: Mika Penttilä <mika.penttila@nextfour.com>
421 Date: Mon Feb 22 17:56:52 2016 +0100
423 ARM: 8544/1: set_memory_xx fixes
425 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
427 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
428 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
430 arch/arm/mm/pageattr.c | 3 +++
431 1 file changed, 3 insertions(+)
433 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
434 Author: Josh Boyer <jwboyer@fedoraproject.org>
435 Date: Mon Mar 14 10:42:38 2016 -0400
437 USB: iowarrior: fix oops with malicious USB descriptors
439 The iowarrior driver expects at least one valid endpoint. If given
440 malicious descriptors that specify 0 for the number of endpoints,
441 it will crash in the probe function. Ensure there is at least
442 one endpoint on the interface before using it.
444 The full report of this issue can be found here:
445 http://seclists.org/bugtraq/2016/Mar/87
447 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
448 Cc: stable <stable@vger.kernel.org>
449 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
450 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
452 drivers/usb/misc/iowarrior.c | 6 ++++++
453 1 file changed, 6 insertions(+)
455 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
456 Author: Oliver Neukum <oneukum@suse.com>
457 Date: Tue Mar 15 10:14:04 2016 +0100
459 USB: cdc-acm: more sanity checking
461 An attack has become available which pretends to be a quirky
462 device circumventing normal sanity checks and crashes the kernel
463 by an insufficient number of interfaces. This patch adds a check
464 to the code path for quirky devices.
466 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
467 CC: stable@vger.kernel.org
468 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
470 drivers/usb/class/cdc-acm.c | 3 +++
471 1 file changed, 3 insertions(+)
473 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
474 Author: Oliver Neukum <oneukum@suse.com>
475 Date: Wed Mar 16 13:26:17 2016 +0100
477 USB: usb_driver_claim_interface: add sanity checking
479 Attacks that trick drivers into passing a NULL pointer
480 to usb_driver_claim_interface() using forged descriptors are
481 known. This thwarts them by sanity checking.
483 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
484 CC: stable@vger.kernel.org
485 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
487 drivers/usb/core/driver.c | 6 +++++-
488 1 file changed, 5 insertions(+), 1 deletion(-)
490 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
491 Author: Paolo Bonzini <pbonzini@redhat.com>
492 Date: Mon Mar 21 10:15:25 2016 +0100
494 KVM: fix spin_lock_init order on x86
496 Moving the initialization earlier is needed in 4.6 because
497 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
500 [ 284.440294] INFO: trying to register non-static key.
501 [ 284.445259] the code is fine but needs lockdep annotation.
502 [ 284.450736] turning off the locking correctness validator.
504 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
505 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
506 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
507 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
508 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
509 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
510 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
511 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
513 However, it also helps fixing a preexisting problem, which is why this
514 patch is also good for stable kernels: kvm_create_vm was incrementing
515 current->mm->mm_count but not decrementing it at the out_err label (in
516 case kvm_init_mmu_notifier failed). The new initialization order makes
517 it possible to add the required mmdrop without adding a new error label.
519 Cc: stable@vger.kernel.org
520 Reported-by: Borislav Petkov <bp@alien8.de>
521 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
523 virt/kvm/kvm_main.c | 21 +++++++++++----------
524 1 file changed, 11 insertions(+), 10 deletions(-)
526 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
527 Author: Paolo Bonzini <pbonzini@redhat.com>
528 Date: Fri Mar 18 16:53:42 2016 +0100
530 KVM: VMX: avoid guest hang on invalid invvpid instruction
532 A guest executing an invalid invvpid instruction would hang
533 because the instruction pointer was not updated.
535 Reported-by: jmontleo@redhat.com
536 Tested-by: jmontleo@redhat.com
537 Cc: stable@vger.kernel.org
538 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
539 Reviewed-by: David Matlack <dmatlack@google.com>
540 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
542 arch/x86/kvm/vmx.c | 1 +
543 1 file changed, 1 insertion(+)
545 commit 602caaece277e5e21ae43771398bbf7778061beb
546 Author: Paolo Bonzini <pbonzini@redhat.com>
547 Date: Fri Mar 18 16:53:29 2016 +0100
549 KVM: VMX: avoid guest hang on invalid invept instruction
551 A guest executing an invalid invept instruction would hang
552 because the instruction pointer was not updated.
554 Cc: stable@vger.kernel.org
555 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
556 Reviewed-by: David Matlack <dmatlack@google.com>
557 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
559 arch/x86/kvm/vmx.c | 1 +
560 1 file changed, 1 insertion(+)
562 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
563 Author: Jann Horn <jann@thejh.net>
564 Date: Tue Mar 22 14:25:36 2016 -0700
566 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
568 This commit fixes the following security hole affecting systems where
569 all of the following conditions are fulfilled:
571 - The fs.suid_dumpable sysctl is set to 2.
572 - The kernel.core_pattern sysctl's value starts with "/". (Systems
573 where kernel.core_pattern starts with "|/" are not affected.)
574 - Unprivileged user namespace creation is permitted. (This is
575 true on Linux >=3.8, but some distributions disallow it by
576 default using a distro patch.)
578 Under these conditions, if a program executes under secure exec rules,
579 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
580 namespace, changes its root directory and crashes, the coredump will be
581 written using fsuid=0 and a path derived from kernel.core_pattern - but
582 this path is interpreted relative to the root directory of the process,
583 allowing the attacker to control where a coredump will be written with
586 To fix the security issue, always interpret core_pattern for dumps that
587 are written under SUID_DUMP_ROOT relative to the root directory of init.
589 Signed-off-by: Jann Horn <jann@thejh.net>
590 Acked-by: Kees Cook <keescook@chromium.org>
591 Cc: Al Viro <viro@zeniv.linux.org.uk>
592 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
593 Cc: Andy Lutomirski <luto@kernel.org>
594 Cc: Oleg Nesterov <oleg@redhat.com>
595 Cc: <stable@vger.kernel.org>
596 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
597 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
599 arch/um/drivers/mconsole_kern.c | 2 +-
600 fs/coredump.c | 31 +++++++++++++++++++++++++++----
603 include/linux/fs.h | 2 +-
604 kernel/sysctl_binary.c | 2 +-
605 6 files changed, 33 insertions(+), 12 deletions(-)
607 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
608 Author: Takashi Iwai <tiwai@suse.de>
609 Date: Fri Apr 1 12:28:16 2016 +0200
611 ALSA: timer: Use mod_timer() for rearming the system timer
613 ALSA system timer backend stops the timer via del_timer() without sync
614 and leaves del_timer_sync() at the close instead. This is because of
615 the restriction by the design of ALSA timer: namely, the stop callback
616 may be called from the timer handler, and calling the sync shall lead
617 to a hangup. However, this also triggers a kernel BUG() when the
618 timer is rearmed immediately after stopping without sync:
619 kernel BUG at kernel/time/timer.c:966!
622 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
623 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
624 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
625 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
626 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
627 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
628 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
631 It's the place where add_timer() checks the pending timer. It's clear
632 that this may happen after the immediate restart without sync in our
635 So, the workaround here is just to use mod_timer() instead of
636 add_timer(). This looks like a band-aid fix, but it's a right move,
637 as snd_timer_interrupt() takes care of the continuous rearm of timer.
639 Reported-by: Jiri Slaby <jslaby@suse.cz>
640 Cc: <stable@vger.kernel.org>
641 Signed-off-by: Takashi Iwai <tiwai@suse.de>
643 sound/core/timer.c | 4 ++--
644 1 file changed, 2 insertions(+), 2 deletions(-)
646 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
647 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
648 Date: Wed Mar 30 11:40:43 2016 +0200
650 drm/udl: Use unlocked gem unreferencing
652 For drm_gem_object_unreference callers are required to hold
653 dev->struct_mutex, which these paths don't. Enforcing this requirement
654 has become a bit more strict with
656 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
657 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
658 Date: Thu Oct 15 09:36:25 2015 +0200
660 drm/gem: Check locking in drm_gem_object_unreference
662 Cc: stable@vger.kernel.org
663 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
664 Signed-off-by: Dave Airlie <airlied@redhat.com>
666 drivers/gpu/drm/udl/udl_fb.c | 2 +-
667 drivers/gpu/drm/udl/udl_gem.c | 2 +-
668 2 files changed, 2 insertions(+), 2 deletions(-)
670 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
671 Author: Jan Kara <jack@suse.com>
672 Date: Mon Dec 7 14:34:49 2015 -0500
674 ext4: fix races of writeback with punch hole and zero range
676 When doing delayed allocation, update of on-disk inode size is postponed
677 until IO submission time. However hole punch or zero range fallocate
678 calls can end up discarding the tail page cache page and thus on-disk
679 inode size would never be properly updated.
681 Make sure the on-disk inode size is updated before truncating page
684 Signed-off-by: Jan Kara <jack@suse.com>
685 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
687 fs/ext4/ext4.h | 3 +++
688 fs/ext4/extents.c | 5 +++++
689 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
690 3 files changed, 42 insertions(+), 1 deletion(-)
692 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
693 Author: Jan Kara <jack@suse.com>
694 Date: Mon Dec 7 14:31:11 2015 -0500
696 ext4: fix races between buffered IO and collapse / insert range
698 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
699 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
700 faults. If buffered write or write via mmap manages to squeeze between
701 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
702 implementations, the written data is simply discarded by
703 truncate_pagecache() although it should have been shifted.
705 Fix the problem by moving filemap_write_and_wait_range() call inside
706 i_mutex and i_mmap_sem. That way we are protected against races with
707 both buffered writes and page faults.
709 Signed-off-by: Jan Kara <jack@suse.com>
710 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
712 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
713 1 file changed, 31 insertions(+), 28 deletions(-)
715 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
716 Author: Jan Kara <jack@suse.com>
717 Date: Mon Dec 7 14:29:17 2015 -0500
719 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
721 Currently ext4_alloc_file_blocks() was handling protection against
722 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
723 and sometimes not and DIO protection ranks above it (although strictly
724 speaking this cannot currently create any deadlocks). Also
725 ext4_zero_range() was actually getting & releasing unlocked DIO
726 protection twice in some cases. Luckily it didn't introduce any real bug
727 but it was a land mine waiting to be stepped on. So move DIO protection
728 out from ext4_alloc_file_blocks() into the two callsites.
730 Signed-off-by: Jan Kara <jack@suse.com>
731 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
733 fs/ext4/extents.c | 21 ++++++++++-----------
734 1 file changed, 10 insertions(+), 11 deletions(-)
736 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
737 Author: Jan Kara <jack@suse.com>
738 Date: Mon Dec 7 14:28:03 2015 -0500
740 ext4: fix races between page faults and hole punching
742 Currently, page faults and hole punching are completely unsynchronized.
743 This can result in page fault faulting in a page into a range that we
744 are punching after truncate_pagecache_range() has been called and thus
745 we can end up with a page mapped to disk blocks that will be shortly
746 freed. Filesystem corruption will shortly follow. Note that the same
747 race is avoided for truncate by checking page fault offset against
748 i_size but there isn't similar mechanism available for punching holes.
750 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
751 grab it for writing over truncate, hole punching, and other functions
752 removing blocks from extent tree and for read over page faults. We
753 cannot easily use i_data_sem for this since that ranks below transaction
754 start and we need something ranking above it so that it can be held over
755 the whole truncate / hole punching operation. Also remove various
756 workarounds we had in the code to reduce race window when page fault
757 could have created pages with stale mapping information.
759 Signed-off-by: Jan Kara <jack@suse.com>
760 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
762 fs/ext4/ext4.h | 10 +++++++++
763 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
764 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
765 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
766 fs/ext4/super.c | 1 +
767 fs/ext4/truncate.h | 2 ++
768 6 files changed, 127 insertions(+), 42 deletions(-)
770 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
771 Author: Guenter Roeck <linux@roeck-us.net>
772 Date: Sat Mar 26 12:28:05 2016 -0700
774 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
776 arm:pxa_defconfig can result in the following crash if the max1111 driver
779 Unhandled fault: page domain fault (0x01b) at 0x00000000
781 [00000000] *pgd=00000000
782 Internal error: : 1b [#1] PREEMPT ARM
784 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
785 Hardware name: SHARP Akita
786 Workqueue: events sharpsl_charge_toggle
787 task: c390a000 ti: c391e000 task.ti: c391e000
788 PC is at max1111_read_channel+0x20/0x30
789 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
790 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
792 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
793 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
794 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
795 (spitzpm_read_devdata+0x5c/0xc4)
796 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
797 (sharpsl_check_battery_temp+0x78/0x110)
798 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
799 (sharpsl_charge_toggle+0x48/0x110)
800 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
801 (process_one_work+0x14c/0x48c)
802 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
803 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
804 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
806 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
807 module and thus not necessarily loaded. While building SPI_PXA2XX into the
808 kernel would make the problem disappear, it appears prudent to ensure that
809 the driver is instantiated before accessing its data structures.
811 Cc: Arnd Bergmann <arnd@arndb.de>
812 Cc: stable@vger.kernel.org
813 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
815 drivers/hwmon/max1111.c | 6 ++++++
816 1 file changed, 6 insertions(+)
818 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
819 Author: Nicolai Stange <nicstange@gmail.com>
820 Date: Sun Mar 20 23:23:46 2016 +0100
822 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
824 Despite what the DocBook comment to pkcs7_validate_trust() says, the
825 *_trusted argument is never set to false.
827 pkcs7_validate_trust() only positively sets *_trusted upon encountering
828 a trusted PKCS#7 SignedInfo block.
830 This is quite unfortunate since its callers, system_verify_data() for
831 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
833 Indeed, UBSAN splats when attempting to load the uninitialized local
834 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
836 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
837 load of value 82 is not a valid value for type '_Bool'
840 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
841 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
842 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
843 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
844 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
845 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
846 [<ffffffff814b83f0>] ? kfree+0x220/0x370
847 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
848 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
849 [<ffffffff813c391a>] system_verify_data+0xca/0x170
850 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
851 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
852 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
855 The implication is that pkcs7_validate_trust() effectively grants trust
856 when it really shouldn't have.
858 Fix this by explicitly setting *_trusted to false at the very beginning
859 of pkcs7_validate_trust().
861 Cc: <stable@vger.kernel.org>
862 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
863 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
865 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
866 1 file changed, 2 insertions(+)
868 commit 1052826f7352ccc98167129b0b83222f45d50046
869 Author: Florian Westphal <fw@strlen.de>
870 Date: Tue Mar 22 18:02:49 2016 +0100
872 netfilter: x_tables: validate e->target_offset early
874 We should check that e->target_offset is sane before
875 mark_source_chains gets called since it will fetch the target entry
878 Signed-off-by: Florian Westphal <fw@strlen.de>
879 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
881 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
882 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
883 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
884 3 files changed, 24 insertions(+), 27 deletions(-)
886 commit b35d19509e8dab157214e46dd24314663ccf554f
887 Author: Florian Westphal <fw@strlen.de>
888 Date: Tue Mar 22 18:02:50 2016 +0100
890 netfilter: x_tables: make sure e->next_offset covers remaining blob size
892 Otherwise this function may read data beyond the ruleset blob.
894 Signed-off-by: Florian Westphal <fw@strlen.de>
895 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
897 net/ipv4/netfilter/arp_tables.c | 6 ++++--
898 net/ipv4/netfilter/ip_tables.c | 6 ++++--
899 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
900 3 files changed, 12 insertions(+), 6 deletions(-)
902 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
903 Author: Florian Westphal <fw@strlen.de>
904 Date: Tue Mar 22 18:02:52 2016 +0100
906 netfilter: x_tables: fix unconditional helper
910 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
911 is possible for a user-supplied ipt_entry structure to have a large
912 next_offset field. This field is not bounds checked prior to writing a
913 counter value at the supplied offset.
915 Problem is that mark_source_chains should not have been called --
916 the rule doesn't have a next entry, so its supposed to return
917 an absolute verdict of either ACCEPT or DROP.
919 However, the function conditional() doesn't work as the name implies.
920 It only checks that the rule is using wildcard address matching.
922 However, an unconditional rule must also not be using any matches
925 The underflow validator only checked the addresses, therefore
926 passing the 'unconditional absolute verdict' test, while
927 mark_source_chains also tested for presence of matches, and thus
928 proceeeded to the next (not-existent) rule.
930 Unify this so that all the callers have same idea of 'unconditional rule'.
932 Reported-by: Ben Hawkes <hawkes@google.com>
933 Signed-off-by: Florian Westphal <fw@strlen.de>
934 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
936 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
937 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
938 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
939 3 files changed, 31 insertions(+), 33 deletions(-)
941 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
942 Author: Pablo Neira Ayuso <pablo@netfilter.org>
943 Date: Thu Mar 24 21:29:53 2016 +0100
945 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
947 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
948 in ebtables and all the x_tables variants and their respective compat
949 code. Uncovered by KASAN.
951 Reported-by: Baozeng Ding <sploving1@gmail.com>
952 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
954 net/bridge/netfilter/ebtables.c | 4 ++++
955 net/ipv4/netfilter/arp_tables.c | 2 ++
956 net/ipv4/netfilter/ip_tables.c | 2 ++
957 net/ipv6/netfilter/ip6_tables.c | 2 ++
958 4 files changed, 10 insertions(+)
960 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
961 Author: Nicolai Stange <nicstange@gmail.com>
962 Date: Fri Mar 25 14:22:14 2016 -0700
964 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
967 - generic_file_read_iter() gets called with a zero read length,
968 - the read offset is at a page boundary,
969 - IOCB_DIRECT is not set
970 - and the page in question hasn't made it into the page cache yet,
971 then do_generic_file_read() will trigger a readahead with a req_size hint
974 Since roundup_pow_of_two(0) is undefined, UBSAN reports
976 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
977 shift exponent 64 is too large for 64-bit type 'long unsigned int'
978 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
982 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
983 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
984 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
985 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
986 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
987 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
989 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
992 when get_init_ra_size() gets called from ondemand_readahead().
994 The net effect is that the initial readahead size is arch dependent for
995 requested read lengths of zero: for example, since
997 1UL << (sizeof(unsigned long) * 8)
999 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
1000 size becomes 4 on the former and 0 on the latter.
1002 What's more, whether or not the file access timestamp is updated for zero
1003 length reads is decided differently for the two cases of IOCB_DIRECT
1004 being set or cleared: in the first case, generic_file_read_iter()
1005 explicitly skips updating that timestamp while in the latter case, it is
1006 always updated through the call to do_generic_file_read().
1008 According to POSIX, zero length reads "do not modify the last data access
1009 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
1011 Let generic_file_read_iter() unconditionally check the requested read
1012 length at its entry and return immediately with success if it is zero.
1014 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
1015 Cc: Al Viro <viro@zeniv.linux.org.uk>
1016 Reviewed-by: Jan Kara <jack@suse.cz>
1017 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
1018 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
1020 mm/filemap.c | 7 ++++---
1021 1 file changed, 4 insertions(+), 3 deletions(-)
1023 commit 604785419da498d7e876a0191b2e11626db706bb
1024 Author: Oliver Neukum <oneukum@suse.com>
1025 Date: Thu Mar 17 14:00:17 2016 -0700
1027 Input: ims-pcu - sanity check against missing interfaces
1029 A malicious device missing interface can make the driver oops.
1030 Add sanity checking.
1032 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
1033 CC: stable@vger.kernel.org
1034 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
1036 drivers/input/misc/ims-pcu.c | 4 ++++
1037 1 file changed, 4 insertions(+)
1039 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
1040 Author: Vladis Dronov <vdronov@redhat.com>
1041 Date: Wed Mar 23 11:53:46 2016 -0700
1043 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
1045 The ati_remote2 driver expects at least two interfaces with one
1046 endpoint each. If given malicious descriptor that specify one
1047 interface or no endpoints, it will crash in the probe function.
1048 Ensure there is at least two interfaces and one endpoint for each
1049 interface before using it.
1051 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
1053 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
1054 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
1055 Cc: stable@vger.kernel.org
1056 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
1058 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
1059 1 file changed, 30 insertions(+), 6 deletions(-)
1061 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
1062 Author: Oliver Neukum <oneukum@suse.com>
1063 Date: Wed Mar 23 14:36:56 2016 -0700
1065 Input: sur40 - fix DMA on stack
1067 During the initialisation the driver uses a buffer on the stack for DMA.
1068 That violates the cache coherency rules. The fix is to allocate the buffer
1071 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
1072 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
1074 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
1075 1 file changed, 14 insertions(+), 7 deletions(-)
1077 commit 015dd03669b2ab646723f6b123377e4ef5694a10
1078 Author: Haiyang Zhang <haiyangz@microsoft.com>
1079 Date: Wed Mar 23 09:43:10 2016 -0700
1081 hv_netvsc: Fix the array sizes to be max supported channels
1083 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
1084 hosts. We use it for the related array sizes instead of using NR_CPUS,
1085 which may be set to several thousands.
1086 This patch reduces possible memory allocation failures.
1088 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
1089 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
1090 Signed-off-by: David S. Miller <davem@davemloft.net>
1092 drivers/net/hyperv/hyperv_net.h | 7 ++++---
1093 drivers/net/hyperv/rndis_filter.c | 4 ++--
1094 2 files changed, 6 insertions(+), 5 deletions(-)
1096 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
1097 Author: Haiyang Zhang <haiyangz@microsoft.com>
1098 Date: Wed Mar 23 09:43:09 2016 -0700
1100 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
1102 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
1103 the nvdev->num_chn into a temp variable for later usage.
1105 (Please also include this patch into stable branch.)
1107 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
1108 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
1109 Signed-off-by: David S. Miller <davem@davemloft.net>
1111 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
1112 1 file changed, 4 insertions(+), 1 deletion(-)
1114 commit 7409626e43fe871cede30ac926425938f3ccddaf
1115 Author: Guillaume Nault <g.nault@alphalink.fr>
1116 Date: Wed Mar 23 16:38:55 2016 +0100
1118 ppp: take reference on channels netns
1120 Let channels hold a reference on their network namespace.
1121 Some channel types, like ppp_async and ppp_synctty, can have their
1122 userspace controller running in a different namespace. Therefore they
1123 can't rely on them to preclude their netns from being removed from
1126 ==================================================================
1127 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
1128 addr ffff880064e217e0
1129 Read of size 8 by task syz-executor/11581
1130 =============================================================================
1131 BUG net_namespace (Not tainted): kasan: bad access detected
1132 -----------------------------------------------------------------------------
1134 Disabling lock debugging due to kernel taint
1135 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
1136 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
1137 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
1138 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
1139 [< inline >] slab_alloc kernel/mm/slub.c:2574
1140 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
1141 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
1142 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
1143 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
1144 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
1145 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
1146 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
1147 [< inline >] copy_process kernel/kernel/fork.c:1274
1148 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
1149 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
1150 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
1151 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
1153 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
1154 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
1155 [< inline >] slab_free kernel/mm/slub.c:2805
1156 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
1157 [< inline >] net_free kernel/net/core/net_namespace.c:341
1158 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
1159 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
1160 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
1161 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
1162 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
1163 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
1164 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
1165 flags=0x5fffc0000004080
1166 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
1168 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
1169 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
1170 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
1171 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
1172 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
1173 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
1175 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
1176 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
1177 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
1178 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
1179 [< inline >] print_address_description kernel/mm/kasan/report.c:138
1180 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
1181 [< inline >] kasan_report kernel/mm/kasan/report.c:259
1182 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
1183 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
1184 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
1185 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
1186 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
1187 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
1188 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
1189 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
1190 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
1191 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
1192 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
1193 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
1194 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
1195 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
1196 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
1197 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
1198 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
1199 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
1200 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
1201 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
1202 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
1203 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
1204 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
1205 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
1206 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
1207 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
1208 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
1209 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
1210 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
1211 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
1212 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
1213 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
1214 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
1215 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
1216 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
1217 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
1218 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
1219 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
1220 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
1221 Memory state around the buggy address:
1222 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
1223 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
1224 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
1226 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
1227 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
1228 ==================================================================
1230 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
1231 Reported-by: Baozeng Ding <sploving1@gmail.com>
1232 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
1233 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
1234 Signed-off-by: David S. Miller <davem@davemloft.net>
1236 drivers/net/ppp/ppp_generic.c | 4 +++-
1237 1 file changed, 3 insertions(+), 1 deletion(-)
1239 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
1240 Author: Herbert Xu <herbert@gondor.apana.org.au>
1241 Date: Wed Mar 16 17:06:01 2016 +0800
1243 eCryptfs: Use skcipher and shash
1245 eCryptfs: Fix null pointer dereference on kzalloc error path
1247 The conversion to skcipher and shash added a couple of null pointer
1248 dereference bugs on the kzalloc failure path. This patch fixes them.
1250 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
1251 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
1252 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
1254 fs/ecryptfs/keystore.c | 6 ++----
1255 1 file changed, 2 insertions(+), 4 deletions(-)
1257 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
1258 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
1259 Date: Thu Mar 17 10:21:34 2016 +0100
1261 crypto: marvell/cesa - fix memory leak
1263 Crypto requests are not guaranteed to be finalized (->final() call),
1264 and can be freed at any moment, without getting any notification from
1265 the core. This can lead to memory leaks of the ->cache buffer.
1267 Make this buffer part of the request object, and allocate an extra buffer
1268 from the DMA cache pool when doing DMA operations.
1270 As a side effect, this patch also fixes another bug related to cache
1271 allocation and DMA operations. When the core allocates a new request and
1272 import an existing state, a cache buffer can be allocated (depending
1273 on the state). The problem is, at that very moment, we don't know yet
1274 whether the request will use DMA or not, and since everything is
1275 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
1276 should allocate a buffer for standard operation. But when
1277 mv_cesa_ahash_free_cache() is called, req->type has been set to
1278 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
1279 call (the buffer passed in argument has not been allocated from the pool).
1281 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
1282 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
1283 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
1285 drivers/crypto/marvell/cesa.h | 3 +-
1286 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
1287 2 files changed, 20 insertions(+), 69 deletions(-)
1289 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
1290 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
1291 Date: Thu Mar 17 10:21:35 2016 +0100
1293 crypto: marvell/cesa - initialize hash states
1295 ->export() might be called before we have done an update operation,
1296 and in this case the ->state field is left uninitialized.
1297 Put the correct default value when initializing the request.
1299 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
1300 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
1302 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
1303 1 file changed, 20 insertions(+)
1305 commit 23879f055d23e82c2f78cceca22c33e631973977
1306 Author: David S. Miller <davem@davemloft.net>
1307 Date: Sun Mar 13 23:28:00 2016 -0400
1309 ipv4: Don't do expensive useless work during inetdev destroy.
1311 When an inetdev is destroyed, every address assigned to the interface
1312 is removed. And in this scenerio we do two pointless things which can
1313 be very expensive if the number of assigned interfaces is large:
1315 1) Address promotion. We are deleting all addresses, so there is no
1316 point in doing this.
1318 2) A full nf conntrack table purge for every address. We only need to
1319 do this once, as is already caught by the existing
1320 masq_dev_notifier so masq_inet_event() can skip this.
1322 Reported-by: Solar Designer <solar@openwall.com>
1323 Signed-off-by: David S. Miller <davem@davemloft.net>
1324 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
1326 net/ipv4/devinet.c | 4 ++++
1327 net/ipv4/fib_frontend.c | 4 ++++
1328 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
1329 3 files changed, 18 insertions(+), 2 deletions(-)
1331 commit 60394231e840e884024592a76a6c5612433d3756
1332 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
1333 Date: Tue Mar 8 10:34:28 2016 -0300
1335 sctp: fix copying more bytes than expected in sctp_add_bind_addr
1337 Dmitry reported that sctp_add_bind_addr may read more bytes than
1338 expected in case the parameter is a IPv4 addr supplied by the user
1339 through calls such as sctp_bindx_add(), because it always copies
1340 sizeof(union sctp_addr) while the buffer may be just a struct
1341 sockaddr_in, which is smaller.
1343 This patch then fixes it by limiting the memcpy to the min between the
1344 union size and a (new parameter) provided addr size. Where possible this
1345 parameter still is the size of that union, except for reading from
1346 user-provided buffers, which then it accounts for protocol type.
1348 Reported-by: Dmitry Vyukov <dvyukov@google.com>
1349 Tested-by: Dmitry Vyukov <dvyukov@google.com>
1350 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
1351 Signed-off-by: David S. Miller <davem@davemloft.net>
1353 include/net/sctp/structs.h | 2 +-
1354 net/sctp/bind_addr.c | 14 ++++++++------
1355 net/sctp/protocol.c | 1 +
1356 net/sctp/sm_make_chunk.c | 3 ++-
1357 net/sctp/socket.c | 4 +++-
1358 5 files changed, 15 insertions(+), 9 deletions(-)
1360 commit 9831caa50e1453818c5ec618890291f028b7992f
1361 Author: Brad Spengler <spender@grsecurity.net>
1362 Date: Mon Mar 28 19:20:28 2016 -0400
1364 Also allow /bin/false as needed by systemd
1366 kernel/kmod.c | 2 +-
1367 1 file changed, 1 insertion(+), 1 deletion(-)
1369 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
1370 Author: Brad Spengler <spender@grsecurity.net>
1371 Date: Tue Mar 22 16:59:43 2016 -0400
1373 Fix size_overflow FP reported by marcan at:
1374 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
1376 net/ipv6/xfrm6_mode_transport.c | 2 +-
1377 1 file changed, 1 insertion(+), 1 deletion(-)
1379 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
1380 Merge: 0d0ec9e c0b77a7
1381 Author: Brad Spengler <spender@grsecurity.net>
1382 Date: Wed Mar 16 20:20:40 2016 -0400
1384 Merge branch 'pax-test' into grsec-test
1386 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
1387 Merge: 10d57c1 0d19123
1388 Author: Brad Spengler <spender@grsecurity.net>
1389 Date: Wed Mar 16 20:20:27 2016 -0400
1391 Merge branch 'linux-4.4.y' into pax-test
1393 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
1394 Author: Brad Spengler <spender@grsecurity.net>
1395 Date: Mon Mar 14 20:15:47 2016 -0400
1397 Invert logic to clean up code
1399 fs/namei.c | 32 +++++++-------------------------
1400 grsecurity/grsec_chroot.c | 10 +++++-----
1401 2 files changed, 12 insertions(+), 30 deletions(-)
1403 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
1404 Author: Brad Spengler <spender@grsecurity.net>
1405 Date: Mon Mar 14 19:59:36 2016 -0400
1409 fs/namei.c | 5 ++---
1410 1 file changed, 2 insertions(+), 3 deletions(-)
1412 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
1413 Author: Brad Spengler <spender@grsecurity.net>
1414 Date: Mon Mar 14 19:57:53 2016 -0400
1418 fs/namei.c | 9 +++++++++
1419 1 file changed, 9 insertions(+)
1421 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
1422 Author: Brad Spengler <spender@grsecurity.net>
1423 Date: Mon Mar 14 19:45:56 2016 -0400
1425 Add additional check to cover lookup family of functions
1427 fs/namei.c | 9 +++++++++
1428 1 file changed, 9 insertions(+)
1430 commit c3df846baa7873fb99401136f220676b87452918
1431 Author: Brad Spengler <spender@grsecurity.net>
1432 Date: Mon Mar 14 18:42:37 2016 -0400
1437 1 file changed, 1 insertion(+), 1 deletion(-)
1439 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
1440 Author: Brad Spengler <spender@grsecurity.net>
1441 Date: Mon Mar 14 18:34:40 2016 -0400
1443 Fix recent chroot check on the create side, as reported by
1446 fs/namei.c | 26 ++++++++++++++++----------
1447 1 file changed, 16 insertions(+), 10 deletions(-)
1449 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
1450 Author: Paolo Bonzini <pbonzini@redhat.com>
1451 Date: Tue Mar 8 12:13:39 2016 +0100
1453 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
1455 Yes, all of these are needed. :) This is admittedly a bit odd, but
1456 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
1457 and of course ept=0.
1459 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
1460 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
1461 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
1462 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
1463 restarts execution. This will still cause a user write to fault, while
1464 supervisor writes will succeed. User reads will fault spuriously now,
1465 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
1466 will be enabled and supervisor writes disabled, going back to the
1467 originary situation where supervisor writes fault spuriously.
1469 When SMEP is in effect, however, U=0 will enable kernel execution of
1470 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
1471 with U=0. If the guest has not enabled NX, the result is a continuous
1472 stream of page faults due to the NX bit being reserved.
1474 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
1475 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
1476 control, so they do not use user-return notifiers for EFER---if they did,
1477 EFER.NX would be forced to the same value as the host).
1479 There is another bug in the reserved bit check, which I've split to a
1480 separate patch for easier application to stable kernels.
1482 Cc: stable@vger.kernel.org
1483 Cc: Andy Lutomirski <luto@amacapital.net>
1484 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
1485 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
1486 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
1488 Documentation/virtual/kvm/mmu.txt | 3 ++-
1489 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
1490 2 files changed, 25 insertions(+), 14 deletions(-)
1492 commit 802a88e57b141e9643e93afb7805813ad8da22f3
1493 Author: Paolo Bonzini <pbonzini@redhat.com>
1494 Date: Wed Mar 9 14:28:02 2016 +0100
1496 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
1498 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
1499 CR0.WP=1. These pages' SPTEs flip continuously between two states:
1500 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
1501 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
1503 When SMEP is in effect, however, U=0 will enable kernel execution of
1504 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
1505 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
1506 When guest EFER has the NX bit cleared, the reserved bit check thinks
1507 that the latter state is invalid; teach it that the smep_andnot_wp case
1508 will also use the NX bit of SPTEs.
1510 Cc: stable@vger.kernel.org
1511 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
1512 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
1513 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
1515 arch/x86/kvm/mmu.c | 4 +++-
1516 1 file changed, 3 insertions(+), 1 deletion(-)
1518 commit 3925851224428c1d2bca32cf33821befb947c4f3
1519 Author: Ming Lei <ming.lei@canonical.com>
1520 Date: Sat Mar 12 22:56:19 2016 +0800
1522 block: don't optimize for non-cloned bio in bio_get_last_bvec()
1524 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
1525 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
1526 because the start postion may have been moved in the middle of
1527 the bvec, such as splitting in the middle of bvec.
1529 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
1530 Cc: stable@vger.kernel.org
1531 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
1532 Signed-off-by: Ming Lei <ming.lei@canonical.com>
1533 Signed-off-by: Jens Axboe <axboe@fb.com>
1535 include/linux/bio.h | 5 -----
1536 1 file changed, 5 deletions(-)
1538 commit db541463b4a0926bebdbac743c8736fb9e903d58
1539 Author: Borislav Petkov <bp@alien8.de>
1540 Date: Fri Mar 11 12:32:06 2016 +0100
1542 x86/fpu: Fix eager-FPU handling on legacy FPU machines
1544 i486 derived cores like Intel Quark support only the very old,
1545 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
1546 our FPU code wasn't handling the saving and restoring there
1547 properly in the 'eagerfpu' case.
1549 So after we made eagerfpu the default for all CPU types:
1551 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
1553 these old FPU designs broke. First, Andy Shevchenko reported a splat:
1555 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
1557 which was us trying to execute FXRSTOR on those machines even though
1558 they don't support it.
1560 After taking care of that, Bryan O'Donoghue reported that a simple FPU
1561 test still failed because we weren't initializing the FPU state properly
1564 Take care of all that.
1566 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
1567 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
1568 Signed-off-by: Borislav Petkov <bp@suse.de>
1569 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
1570 Cc: Andrew Morton <akpm@linux-foundation.org>
1571 Cc: Andy Lutomirski <luto@amacapital.net>
1572 Cc: Borislav Petkov <bp@alien8.de>
1573 Cc: Brian Gerst <brgerst@gmail.com>
1574 Cc: Dave Hansen <dave.hansen@linux.intel.com>
1575 Cc: Denys Vlasenko <dvlasenk@redhat.com>
1576 Cc: Fenghua Yu <fenghua.yu@intel.com>
1577 Cc: H. Peter Anvin <hpa@zytor.com>
1578 Cc: Oleg Nesterov <oleg@redhat.com>
1579 Cc: Peter Zijlstra <peterz@infradead.org>
1580 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
1581 Cc: Thomas Gleixner <tglx@linutronix.de>
1582 Cc: Yu-cheng <yu-cheng.yu@intel.com>
1583 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
1584 Signed-off-by: Ingo Molnar <mingo@kernel.org>
1586 arch/x86/kernel/fpu/core.c | 4 +++-
1587 arch/x86/kernel/fpu/init.c | 2 +-
1588 2 files changed, 4 insertions(+), 2 deletions(-)
1590 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
1591 Author: Brad Spengler <spender@grsecurity.net>
1592 Date: Sun Mar 13 11:35:56 2016 -0400
1597 grsecurity/grsec_chroot.c | 2 +-
1598 include/linux/grsecurity.h | 2 +-
1599 3 files changed, 3 insertions(+), 3 deletions(-)
1601 commit aab25a3496c4683c5858056960010119fb7d9a5a
1602 Author: Brad Spengler <spender@grsecurity.net>
1603 Date: Sun Mar 13 10:53:59 2016 -0400
1605 Use fput instead of put_filp()
1608 1 file changed, 2 insertions(+), 2 deletions(-)
1610 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
1611 Author: Brad Spengler <spender@grsecurity.net>
1612 Date: Sun Mar 13 10:30:54 2016 -0400
1614 Update MPROTECT_COMPAT config description, disable by default
1616 security/Kconfig | 18 ++++++------------
1617 1 file changed, 6 insertions(+), 12 deletions(-)
1619 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
1620 Author: Brad Spengler <spender@grsecurity.net>
1621 Date: Sun Mar 13 10:35:55 2016 -0400
1623 As reported by Jann Horn, chroot scenarios where the chrooting application
1624 brings in a directory fd can be used to access any file outside of the chroot
1625 via *at syscalls. To maintain compatibility with Chromium and other apps,
1626 we specifically only disallow relative accesses off a directory fd when the
1627 final path is not located under that directory described by the fd and exists
1628 outside of the chroot. This additional restriction will exist under the
1629 current GRKERNSEC_CHROOT_FCHDIR option.
1631 fs/namei.c | 9 +++++++++
1632 grsecurity/Kconfig | 10 ++++++----
1633 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
1634 include/linux/grmsg.h | 1 +
1635 include/linux/grsecurity.h | 1 +
1636 5 files changed, 56 insertions(+), 4 deletions(-)
1638 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
1639 Author: Brad Spengler <spender@grsecurity.net>
1640 Date: Thu Mar 10 22:17:16 2016 -0500
1642 Update size_overflow hash table
1644 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1645 1 file changed, 1 insertion(+)
1647 commit 29f25ddda6a5625340df26beb394279fefea2b49
1648 Author: Brad Spengler <spender@grsecurity.net>
1649 Date: Thu Mar 10 22:16:04 2016 -0500
1653 kernel/module.c | 3 ++-
1654 1 file changed, 2 insertions(+), 1 deletion(-)
1656 commit b057a45636b626e7eaf03077ed0916b95fea054c
1657 Merge: ba5ee94 10d57c1
1658 Author: Brad Spengler <spender@grsecurity.net>
1659 Date: Thu Mar 10 21:36:10 2016 -0500
1661 Merge branch 'pax-test' into grsec-test
1663 commit 10d57c107e7fabffbe616b14efab73df585576c2
1664 Merge: 1cbae46 62e2195
1665 Author: Brad Spengler <spender@grsecurity.net>
1666 Date: Thu Mar 10 21:34:58 2016 -0500
1668 Update to pax-linux-4.4.5-test9.patch:
1669 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
1670 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
1671 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
1672 - compile the x86 vdso without plugins, reported by Emese
1673 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
1674 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
1676 Merge branch 'linux-4.4.y' into pax-test
1678 commit ba5ee94199b11c1429559a08c2158677dd8f1761
1679 Author: Brad Spengler <spender@grsecurity.net>
1680 Date: Thu Mar 3 20:20:19 2016 -0500
1682 Update size_overflow hash table
1684 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1685 1 file changed, 1 insertion(+)
1687 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
1688 Merge: 335c04c 1cbae46
1689 Author: Brad Spengler <spender@grsecurity.net>
1690 Date: Thu Mar 3 20:04:00 2016 -0500
1692 Merge branch 'pax-test' into grsec-test
1694 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
1695 Merge: a51cdb8 c252409
1696 Author: Brad Spengler <spender@grsecurity.net>
1697 Date: Thu Mar 3 19:57:43 2016 -0500
1699 Merge branch 'linux-4.4.y' into pax-test
1701 commit 335c04c8146a696a6101a9c69dbd47f11383549e
1702 Merge: 897877e a51cdb8
1703 Author: Brad Spengler <spender@grsecurity.net>
1704 Date: Tue Mar 1 17:57:24 2016 -0500
1706 Merge branch 'pax-test' into grsec-test
1708 commit a51cdb83569b450858737a30d2be043d87d7ddc1
1709 Author: Brad Spengler <spender@grsecurity.net>
1710 Date: Tue Mar 1 17:56:43 2016 -0500
1712 Update to pax-linux-4.4.3-test6.patch:
1713 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
1714 - fixed a few section mismatches on notifier_block variables
1715 - fixed a few REFCOUNT false positives found by Emese's plugin
1716 - constified hypervisor_x86
1718 arch/x86/include/asm/hypervisor.h | 2 +-
1719 arch/x86/kernel/cpu/mshyperv.c | 2 +-
1720 arch/x86/kernel/cpu/vmware.c | 2 +-
1721 arch/x86/kernel/kvm.c | 2 +-
1722 drivers/lightnvm/rrpc.c | 4 ++--
1723 drivers/lightnvm/rrpc.h | 2 +-
1724 drivers/net/can/led.c | 2 +-
1725 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
1726 drivers/net/ethernet/rocker/rocker.c | 4 ++--
1727 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
1728 drivers/net/vrf.c | 2 +-
1729 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
1730 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
1731 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
1732 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
1733 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
1734 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
1735 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
1736 fs/proc/kcore.c | 2 +-
1737 mm/hugetlb_cgroup.c | 8 ++++----
1740 net/mac802154/iface.c | 2 +-
1741 23 files changed, 41 insertions(+), 41 deletions(-)
1743 commit 897877e79629a0b854e98cb666a9d898256d45a7
1744 Merge: 1ffa5d5 4f4b213
1745 Author: Brad Spengler <spender@grsecurity.net>
1746 Date: Sun Feb 28 20:54:59 2016 -0500
1748 Merge branch 'pax-test' into grsec-test
1750 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
1751 Author: Brad Spengler <spender@grsecurity.net>
1752 Date: Sun Feb 28 20:54:06 2016 -0500
1754 Update to pax-linux-4.4.3-test5.patch:
1755 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
1756 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
1757 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
1758 - added a generator for SIMPLE_IPA passes as well
1760 include/linux/cgroup-defs.h | 2 +-
1761 include/linux/hugetlb.h | 2 +-
1762 include/linux/hugetlb_cgroup.h | 11 ++
1763 include/net/xfrm.h | 2 +-
1764 kernel/cgroup.c | 29 ++--
1765 mm/hugetlb.c | 55 ++++++-
1766 mm/hugetlb_cgroup.c | 60 ++-----
1767 mm/mmap.c | 38 ++---
1768 net/xfrm/xfrm_state.c | 4 +-
1769 tools/gcc/constify_plugin.c | 5 +-
1770 tools/gcc/gcc-common.h | 42 +++--
1771 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
1772 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
1773 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
1774 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
1775 tools/gcc/size_overflow_plugin/.gitignore | 1 +
1776 .../disable_size_overflow_hash.data | 7 +-
1777 .../size_overflow_plugin/size_overflow_hash.data | 3 -
1778 18 files changed, 385 insertions(+), 146 deletions(-)
1780 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
1781 Author: Brad Spengler <spender@grsecurity.net>
1782 Date: Sun Feb 28 20:43:02 2016 -0500
1784 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
1787 grsecurity/grsec_sig.c | 3 +--
1788 1 file changed, 1 insertion(+), 2 deletions(-)
1790 commit cfdb373a77c88d01c1539e605e28143af5981571
1791 Author: Brad Spengler <spender@grsecurity.net>
1792 Date: Sun Feb 28 19:12:39 2016 -0500
1796 grsecurity/gracl_segv.c | 2 +-
1797 grsecurity/grsec_sig.c | 2 +-
1798 2 files changed, 2 insertions(+), 2 deletions(-)
1800 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
1801 Author: Brad Spengler <spender@grsecurity.net>
1802 Date: Sun Feb 28 18:24:50 2016 -0500
1804 Update the daemon check in handling of anti-bruteforcing of suid binaries
1805 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
1806 could create unprivileged copies of the suid binary via ptrace, inject
1807 code into them, and fork+exec a privileged copy. A crash then in the
1808 privileged copy would trigger the daemon detection which could be avoided
1809 by simply terminating the original process. Defeat this by using our
1810 is_privileged_binary() function against the task's mm->binfmt->file to detect
1811 an fscaps-enabled or suid/sgid binary being involved.
1813 Also update the RBAC RES_CRASH code to use is_privileged_binary().
1815 grsecurity/gracl_segv.c | 15 +--------------
1816 grsecurity/grsec_sig.c | 3 ++-
1817 2 files changed, 3 insertions(+), 15 deletions(-)
1819 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
1820 Author: Brad Spengler <spender@grsecurity.net>
1821 Date: Sun Feb 28 15:06:32 2016 -0500
1823 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
1824 could dump out an unreadable suid binary by creating a script that used
1825 that binary as an interpreter.
1827 fs/exec.c | 14 +++++++++-----
1828 1 file changed, 9 insertions(+), 5 deletions(-)
1830 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
1831 Merge: 2d35d52 8327ee6
1832 Author: Brad Spengler <spender@grsecurity.net>
1833 Date: Thu Feb 25 18:44:11 2016 -0500
1835 Merge branch 'pax-test' into grsec-test
1840 mm/process_vm_access.c
1842 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
1843 Merge: 09d53c7 2134d97
1844 Author: Brad Spengler <spender@grsecurity.net>
1845 Date: Thu Feb 25 18:36:46 2016 -0500
1847 Merge branch 'linux-4.4.y' into pax-test
1852 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
1853 Author: Brad Spengler <spender@grsecurity.net>
1854 Date: Wed Feb 24 07:59:12 2016 -0500
1856 Remove /proc/pid/map_files which we had previously prevented via
1857 an inverted dependency on checkpoint/restart, but clearly should have
1858 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
1859 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
1860 processes of the same UID. Thanks to Mathias Krause for the report!
1862 fs/proc/base.c | 2 ++
1863 1 file changed, 2 insertions(+)
1865 commit e4f1e517092222aa28179b20e14c0ddfb2796049
1866 Author: Brad Spengler <spender@grsecurity.net>
1867 Date: Thu Feb 18 19:32:39 2016 -0500
1869 Update size_overflow hash table
1871 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
1872 1 file changed, 131 insertions(+), 27 deletions(-)
1874 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
1875 Author: Brad Spengler <spender@grsecurity.net>
1876 Date: Thu Feb 18 18:52:37 2016 -0500
1878 Update size_overflow hash table
1880 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
1881 1 file changed, 237 insertions(+), 56 deletions(-)
1883 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
1884 Author: Brad Spengler <spender@grsecurity.net>
1885 Date: Thu Feb 18 18:23:03 2016 -0500
1889 tools/gcc/randomize_layout_plugin.c | 2 +-
1890 1 file changed, 1 insertion(+), 1 deletion(-)
1892 commit 024d2af98b755712daff6ed7c49af921da4e8883
1893 Author: Brad Spengler <spender@grsecurity.net>
1894 Date: Thu Feb 18 18:19:47 2016 -0500
1898 tools/gcc/randomize_layout_plugin.c | 2 +-
1899 1 file changed, 1 insertion(+), 1 deletion(-)
1901 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
1902 Author: Brad Spengler <spender@grsecurity.net>
1903 Date: Thu Feb 18 18:16:32 2016 -0500
1907 tools/gcc/randomize_layout_plugin.c | 9 +++++----
1908 1 file changed, 5 insertions(+), 4 deletions(-)
1910 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
1911 Author: Brad Spengler <spender@grsecurity.net>
1912 Date: Thu Feb 18 17:54:51 2016 -0500
1916 tools/gcc/randomize_layout_plugin.c | 2 +-
1917 1 file changed, 1 insertion(+), 1 deletion(-)
1919 commit 13823395101c4228ecded4b624583389ee13bfb3
1920 Author: Brad Spengler <spender@grsecurity.net>
1921 Date: Thu Feb 18 17:35:21 2016 -0500
1926 1 file changed, 1 insertion(+), 4 deletions(-)
1928 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
1929 Merge: 45cbb7e 09d53c7
1930 Author: Brad Spengler <spender@grsecurity.net>
1931 Date: Thu Feb 18 16:40:51 2016 -0500
1933 Merge branch 'pax-test' into grsec-test
1937 include/linux/genl_magic_struct.h
1938 scripts/mod/modpost.c
1939 tools/gcc/size_overflow_plugin/size_overflow_hash.data
1941 commit 09d53c74140e87e886a28980cedbb7e771f2a356
1942 Author: Brad Spengler <spender@grsecurity.net>
1943 Date: Thu Feb 18 16:24:02 2016 -0500
1945 Update to pax-linux-4.4.2-test4.patch:
1946 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
1947 - moved gcc plugin related makefile bits into a separate file, by Emese
1948 - changed modpost to report writable function pointers separately
1949 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
1950 - reduced the size of the compat syscall entry points on amd64
1951 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
1952 - Emese regenerated the size overflow hash table for 4.4
1953 - all plugins now use the new pass generator headers
1956 arch/x86/entry/entry_64.S | 2 +-
1957 arch/x86/entry/entry_64_compat.S | 48 +-
1959 include/linux/genl_magic_struct.h | 4 +-
1960 include/linux/memcontrol.h | 2 +-
1962 mm/memcontrol.c | 6 +-
1963 scripts/Makefile.extrawarn | 4 +
1964 scripts/Makefile.gcc-plugins | 69 +
1965 scripts/mod/modpost.c | 15 +-
1966 tools/gcc/checker_plugin.c | 71 +-
1967 tools/gcc/colorize_plugin.c | 65 +-
1968 tools/gcc/constify_plugin.c | 65 +-
1969 tools/gcc/gcc-generate-gimple-pass.h | 172 +
1970 tools/gcc/gcc-generate-ipa-pass.h | 286 +
1971 tools/gcc/gcc-generate-rtl-pass.h | 172 +
1972 tools/gcc/initify_plugin.c | 74 +-
1973 tools/gcc/kallocstat_plugin.c | 65 +-
1974 tools/gcc/kernexec_plugin.c | 184 +-
1975 tools/gcc/latent_entropy_plugin.c | 71 +-
1976 tools/gcc/randomize_layout_seed.h | 1 -
1977 .../disable_size_overflow_hash.h | 152601 ------------------
1978 .../insert_size_overflow_asm.c | 71 +-
1979 .../size_overflow_plugin/intentional_overflow.c | 6 +-
1980 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
1981 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
1982 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
1983 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
1984 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
1985 .../size_overflow_transform_core.c | 2 +-
1986 tools/gcc/stackleak_plugin.c | 132 +-
1987 tools/gcc/structleak_plugin.c | 67 +-
1988 33 files changed, 2238 insertions(+), 155123 deletions(-)
1990 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
1991 Merge: 3b5448b 0c85110
1992 Author: Brad Spengler <spender@grsecurity.net>
1993 Date: Wed Feb 17 19:11:25 2016 -0500
1995 Merge branch 'pax-test' into grsec-test
1997 commit 0c851109f683896aaff8a310bbfa943272b47516
1998 Merge: 6cb4f49 1cb8570
1999 Author: Brad Spengler <spender@grsecurity.net>
2000 Date: Wed Feb 17 19:11:21 2016 -0500
2002 Merge branch 'linux-4.4.y' into pax-test
2004 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
2005 Author: Brad Spengler <spender@grsecurity.net>
2006 Date: Mon Feb 15 18:02:40 2016 -0500
2008 Fix a drbd bug reported by iamb on the forums:
2009 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
2010 which caused a size_overflow report
2012 include/linux/genl_magic_struct.h | 4 ++--
2013 1 file changed, 2 insertions(+), 2 deletions(-)
2015 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
2016 Author: Brad Spengler <spender@grsecurity.net>
2017 Date: Mon Feb 15 13:20:38 2016 -0500
2021 drivers/staging/wilc1000/host_interface.h | 1 +
2022 1 file changed, 1 insertion(+)
2024 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
2025 Author: Brad Spengler <spender@grsecurity.net>
2026 Date: Mon Feb 15 12:54:52 2016 -0500
2028 Update size_overflow hash table
2030 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
2031 1 file changed, 17 insertions(+), 4 deletions(-)
2033 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
2034 Author: Brad Spengler <spender@grsecurity.net>
2035 Date: Mon Feb 15 12:53:54 2016 -0500
2039 drivers/staging/wilc1000/wilc_spi.c | 1 -
2040 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
2041 2 files changed, 1 insertion(+), 2 deletions(-)
2043 commit a9dd4481db099082967585be8e153899e5fd24c7
2044 Author: Brad Spengler <spender@grsecurity.net>
2045 Date: Mon Feb 15 12:52:32 2016 -0500
2050 1 file changed, 2 deletions(-)
2052 commit 5acb4fa0063460807096429f073181d1c5a3e566
2053 Author: Brad Spengler <spender@grsecurity.net>
2054 Date: Mon Feb 15 12:32:13 2016 -0500
2056 Update size_overflow hash table
2058 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
2059 1 file changed, 182 insertions(+), 42 deletions(-)
2061 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
2062 Author: Brad Spengler <spender@grsecurity.net>
2063 Date: Mon Feb 15 12:31:16 2016 -0500
2067 drivers/staging/wilc1000/wilc_spi.c | 1 +
2068 1 file changed, 1 insertion(+)
2070 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
2071 Author: Brad Spengler <spender@grsecurity.net>
2072 Date: Mon Feb 15 12:28:36 2016 -0500
2074 RANDSTRUCT compile fix
2076 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
2077 1 file changed, 16 insertions(+), 16 deletions(-)
2079 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
2080 Author: Brad Spengler <spender@grsecurity.net>
2081 Date: Mon Feb 15 12:24:49 2016 -0500
2083 RANDSTRUCT compile fix
2085 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
2086 1 file changed, 17 insertions(+), 17 deletions(-)
2088 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
2089 Author: Hariprasad S <hariprasad@chelsio.com>
2090 Date: Fri Dec 11 13:59:17 2015 +0530
2092 iw_cxgb3: Fix incorrectly returning error on success
2094 The cxgb3_*_send() functions return NET_XMIT_ values, which are
2095 positive integers values. So don't treat positive return values
2098 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
2099 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
2100 Signed-off-by: Doug Ledford <dledford@redhat.com>
2102 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
2103 1 file changed, 2 insertions(+), 2 deletions(-)
2105 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
2106 Author: Daniel Borkmann <daniel@iogearbox.net>
2107 Date: Wed Feb 10 16:47:11 2016 +0100
2109 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
2111 When ctx access is used, the kernel often needs to expand/rewrite
2112 instructions, so after that patching, branch offsets have to be
2113 adjusted for both forward and backward jumps in the new eBPF program,
2114 but for backward jumps it fails to account the delta. Meaning, for
2115 example, if the expansion happens exactly on the insn that sits at
2116 the jump target, it doesn't fix up the back jump offset.
2118 Analysis on what the check in adjust_branches() is currently doing:
2120 /* adjust offset of jmps if necessary */
2121 if (i < pos && i + insn->off + 1 > pos)
2123 else if (i > pos && i + insn->off + 1 < pos)
2126 First condition (forward jumps):
2131 insns[1] <--- i/insn insns[1] <--- i/insn
2132 insns[2] <--- pos insns[P] <--- pos
2133 insns[3] insns[P] `------| delta
2134 insns[4] <--- target_X insns[P] `-----|
2136 insns[4] <--- target_X
2139 First case is if we cross pos-boundary and the jump instruction was
2140 before pos. This is handeled correctly. I.e. if i == pos, then this
2141 would mean our jump that we currently check was the patchlet itself
2142 that we just injected. Since such patchlets are self-contained and
2143 have no awareness of any insns before or after the patched one, the
2144 delta is correctly not adjusted. Also, for the second condition in
2145 case of i + insn->off + 1 == pos, means we jump to that newly patched
2146 instruction, so no offset adjustment are needed. That part is correct.
2148 Second condition (backward jumps):
2153 insns[1] <--- target_X insns[1] <--- target_X
2154 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
2155 insns[3] insns[P] `------| delta
2156 insns[4] <--- i/insn insns[P] `-----|
2158 insns[4] <--- i/insn
2161 Second interesting case is where we cross pos-boundary and the jump
2162 instruction was after pos. Backward jump with i == pos would be
2163 impossible and pose a bug somewhere in the patchlet, so the first
2164 condition checking i > pos is okay only by itself. However, i +
2165 insn->off + 1 < pos does not always work as intended to trigger the
2166 adjustment. It works when jump targets would be far off where the
2167 delta wouldn't matter. But, for example, where the fixed insn->off
2168 before pointed to pos (target_Y), it now points to pos + delta, so
2169 that additional room needs to be taken into account for the check.
2170 This means that i) both tests here need to be adjusted into pos + delta,
2171 and ii) for the second condition, the test needs to be <= as pos
2172 itself can be a target in the backjump, too.
2174 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
2175 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2176 Signed-off-by: David S. Miller <davem@davemloft.net>
2178 kernel/bpf/verifier.c | 2 +-
2179 1 file changed, 1 insertion(+), 1 deletion(-)
2181 commit 61b513b644116e77313addf65970db58f4981608
2182 Author: Ryan Ware <ware@linux.intel.com>
2183 Date: Thu Feb 11 15:58:44 2016 -0800
2185 EVM: Use crypto_memneq() for digest comparisons
2187 This patch fixes vulnerability CVE-2016-2085. The problem exists
2188 because the vm_verify_hmac() function includes a use of memcmp().
2189 Unfortunately, this allows timing side channel attacks; specifically
2190 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
2191 the memcmp() to the cryptographically safe crypto_memneq().
2193 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
2194 Signed-off-by: Ryan Ware <ware@linux.intel.com>
2195 Cc: stable@vger.kernel.org
2196 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
2197 Signed-off-by: James Morris <james.l.morris@oracle.com>
2199 security/integrity/evm/evm_main.c | 3 ++-
2200 1 file changed, 2 insertions(+), 1 deletion(-)
2202 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
2203 Author: Michael McConville <mmcco@mykolab.com>
2204 Date: Fri Feb 5 20:46:25 2016 -0500
2206 dscc4: Undefined signed int shift
2208 My analysis in the below mail applies, although the second part is
2209 unnecessary because i isn't used in arithmetic operations here:
2211 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
2213 Thanks for your time.
2215 Signed-off-by: Michael McConville <mmcco@mykolab.com>
2216 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
2217 Signed-off-by: David S. Miller <davem@davemloft.net>
2219 drivers/net/wan/dscc4.c | 2 +-
2220 1 file changed, 1 insertion(+), 1 deletion(-)
2222 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
2223 Author: Andrey Konovalov <andreyknvl@gmail.com>
2224 Date: Sat Feb 13 11:08:06 2016 +0300
2226 ALSA: usb-audio: avoid freeing umidi object twice
2228 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
2229 when tearing down the rawmidi interface. So we shouldn't try to free it
2230 in snd_usbmidi_create() after having registered the rawmidi interface.
2234 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
2235 Acked-by: Clemens Ladisch <clemens@ladisch.de>
2236 Cc: <stable@vger.kernel.org>
2237 Signed-off-by: Takashi Iwai <tiwai@suse.de>
2239 sound/usb/midi.c | 1 -
2240 1 file changed, 1 deletion(-)
2242 commit ed3a8ab1976674d56e258da93639e61f1446e703
2243 Author: zengtao <prime.zeng@huawei.com>
2244 Date: Tue Feb 2 11:38:34 2016 +0800
2246 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
2248 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
2249 overflows in the timeval/timespec to cputime conversion.
2251 Currently the following functions are affected:
2253 2. timer_create/timer_settime()
2254 3. sys_clock_nanosleep
2256 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
2257 enabled, which is required for CONFIG_NO_HZ_FULL.
2259 Enforce u64 conversion to prevent the overflow.
2261 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
2262 Signed-off-by: zengtao <prime.zeng@huawei.com>
2263 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
2264 Cc: <fweisbec@gmail.com>
2265 Cc: stable@vger.kernel.org
2266 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
2267 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
2269 include/asm-generic/cputime_nsecs.h | 5 +++--
2270 1 file changed, 3 insertions(+), 2 deletions(-)
2272 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
2273 Author: Brad Spengler <spender@grsecurity.net>
2274 Date: Mon Feb 15 11:55:18 2016 -0500
2276 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
2277 count as actual mismatches
2279 scripts/mod/modpost.c | 3 ++-
2280 1 file changed, 2 insertions(+), 1 deletion(-)
2282 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
2283 Author: Brad Spengler <spender@grsecurity.net>
2284 Date: Mon Feb 15 11:44:36 2016 -0500
2288 tools/gcc/randomize_layout_seed.h | 1 -
2289 1 file changed, 1 deletion(-)
2291 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
2292 Author: Brad Spengler <spender@grsecurity.net>
2293 Date: Mon Feb 15 11:27:32 2016 -0500
2297 init/Kconfig | 3 ++-
2298 1 file changed, 2 insertions(+), 1 deletion(-)
2300 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
2301 Author: Brad Spengler <spender@grsecurity.net>
2302 Date: Mon Feb 15 11:23:56 2016 -0500
2307 1 file changed, 1 insertion(+), 1 deletion(-)
2309 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
2310 Author: Brad Spengler <spender@grsecurity.net>
2311 Date: Mon Feb 15 11:19:26 2016 -0500
2313 Initial import of grsecurity for Linux 4.4.1
2315 Documentation/dontdiff | 2 +
2316 Documentation/kernel-parameters.txt | 11 +
2317 Documentation/sysctl/fs.txt | 23 +
2318 Documentation/sysctl/kernel.txt | 15 +
2320 arch/alpha/include/asm/cache.h | 4 +-
2321 arch/alpha/kernel/osf_sys.c | 12 +-
2322 arch/arc/Kconfig | 1 +
2323 arch/arm/Kconfig | 1 +
2324 arch/arm/Kconfig.debug | 1 +
2325 arch/arm/include/asm/thread_info.h | 7 +-
2326 arch/arm/kernel/entry-common.S | 8 +-
2327 arch/arm/kernel/process.c | 4 +-
2328 arch/arm/kernel/ptrace.c | 9 +
2329 arch/arm/kernel/traps.c | 7 +-
2330 arch/arm/mm/Kconfig | 4 +-
2331 arch/arm/mm/fault.c | 40 +-
2332 arch/arm/mm/mmap.c | 8 +-
2333 arch/arm/net/bpf_jit_32.c | 51 +-
2334 arch/arm64/Kconfig.debug | 1 +
2335 arch/avr32/include/asm/cache.h | 4 +-
2336 arch/blackfin/Kconfig.debug | 1 +
2337 arch/blackfin/include/asm/cache.h | 3 +-
2338 arch/cris/include/arch-v10/arch/cache.h | 3 +-
2339 arch/cris/include/arch-v32/arch/cache.h | 3 +-
2340 arch/frv/include/asm/cache.h | 3 +-
2341 arch/frv/mm/elf-fdpic.c | 4 +-
2342 arch/hexagon/include/asm/cache.h | 6 +-
2343 arch/ia64/Kconfig | 1 +
2344 arch/ia64/include/asm/cache.h | 3 +-
2345 arch/ia64/kernel/sys_ia64.c | 2 +
2346 arch/ia64/mm/hugetlbpage.c | 2 +
2347 arch/m32r/include/asm/cache.h | 4 +-
2348 arch/m68k/include/asm/cache.h | 4 +-
2349 arch/metag/mm/hugetlbpage.c | 1 +
2350 arch/microblaze/include/asm/cache.h | 3 +-
2351 arch/mips/Kconfig | 1 +
2352 arch/mips/include/asm/cache.h | 3 +-
2353 arch/mips/include/asm/thread_info.h | 11 +-
2354 arch/mips/kernel/irq.c | 3 +
2355 arch/mips/kernel/ptrace.c | 9 +
2356 arch/mips/mm/mmap.c | 4 +-
2357 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
2358 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
2359 arch/openrisc/include/asm/cache.h | 4 +-
2360 arch/parisc/include/asm/cache.h | 3 +
2361 arch/parisc/kernel/sys_parisc.c | 4 +
2362 arch/powerpc/Kconfig | 1 +
2363 arch/powerpc/include/asm/cache.h | 4 +-
2364 arch/powerpc/include/asm/thread_info.h | 5 +-
2365 arch/powerpc/kernel/Makefile | 2 +
2366 arch/powerpc/kernel/irq.c | 3 +
2367 arch/powerpc/kernel/process.c | 10 +-
2368 arch/powerpc/kernel/ptrace.c | 14 +
2369 arch/powerpc/kernel/traps.c | 5 +
2370 arch/powerpc/mm/slice.c | 2 +-
2371 arch/s390/Kconfig.debug | 1 +
2372 arch/s390/include/asm/cache.h | 4 +-
2373 arch/score/include/asm/cache.h | 4 +-
2374 arch/sh/include/asm/cache.h | 3 +-
2375 arch/sh/mm/mmap.c | 6 +-
2376 arch/sparc/include/asm/cache.h | 4 +-
2377 arch/sparc/include/asm/pgalloc_64.h | 1 +
2378 arch/sparc/include/asm/thread_info_64.h | 8 +-
2379 arch/sparc/kernel/process_32.c | 6 +-
2380 arch/sparc/kernel/process_64.c | 8 +-
2381 arch/sparc/kernel/ptrace_64.c | 14 +
2382 arch/sparc/kernel/sys_sparc_64.c | 8 +-
2383 arch/sparc/kernel/syscalls.S | 8 +-
2384 arch/sparc/kernel/traps_32.c | 8 +-
2385 arch/sparc/kernel/traps_64.c | 28 +-
2386 arch/sparc/kernel/unaligned_64.c | 2 +-
2387 arch/sparc/mm/fault_64.c | 2 +-
2388 arch/sparc/mm/hugetlbpage.c | 15 +-
2389 arch/tile/Kconfig | 1 +
2390 arch/tile/include/asm/cache.h | 3 +-
2391 arch/tile/mm/hugetlbpage.c | 2 +
2392 arch/um/include/asm/cache.h | 3 +-
2393 arch/unicore32/include/asm/cache.h | 6 +-
2394 arch/x86/Kconfig | 21 +
2395 arch/x86/Kconfig.debug | 2 +
2396 arch/x86/entry/common.c | 14 +
2397 arch/x86/entry/entry_32.S | 2 +-
2398 arch/x86/entry/entry_64.S | 2 +-
2399 arch/x86/ia32/ia32_aout.c | 2 +
2400 arch/x86/include/asm/floppy.h | 20 +-
2401 arch/x86/include/asm/fpu/types.h | 69 +-
2402 arch/x86/include/asm/io.h | 2 +-
2403 arch/x86/include/asm/page.h | 12 +-
2404 arch/x86/include/asm/paravirt_types.h | 23 +-
2405 arch/x86/include/asm/pgtable_types.h | 6 +-
2406 arch/x86/include/asm/processor.h | 12 +-
2407 arch/x86/include/asm/thread_info.h | 6 +-
2408 arch/x86/include/asm/uaccess.h | 2 +-
2409 arch/x86/kernel/dumpstack.c | 10 +-
2410 arch/x86/kernel/dumpstack_32.c | 2 +-
2411 arch/x86/kernel/dumpstack_64.c | 2 +-
2412 arch/x86/kernel/ioport.c | 13 +
2413 arch/x86/kernel/irq_32.c | 3 +
2414 arch/x86/kernel/irq_64.c | 4 +
2415 arch/x86/kernel/ldt.c | 18 +
2416 arch/x86/kernel/msr.c | 10 +
2417 arch/x86/kernel/ptrace.c | 14 +
2418 arch/x86/kernel/signal.c | 9 +-
2419 arch/x86/kernel/sys_i386_32.c | 9 +-
2420 arch/x86/kernel/sys_x86_64.c | 8 +-
2421 arch/x86/kernel/traps.c | 5 +
2422 arch/x86/kernel/verify_cpu.S | 1 +
2423 arch/x86/kernel/vm86_32.c | 15 +
2424 arch/x86/mm/fault.c | 12 +-
2425 arch/x86/mm/hugetlbpage.c | 15 +-
2426 arch/x86/mm/init.c | 66 +-
2427 arch/x86/mm/init_32.c | 6 +-
2428 arch/x86/mm/pageattr.c | 4 +-
2429 arch/x86/net/bpf_jit_comp.c | 4 +
2430 arch/x86/platform/efi/efi_64.c | 2 +-
2431 arch/x86/xen/Kconfig | 1 +
2432 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
2433 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
2434 crypto/scatterwalk.c | 10 +-
2435 drivers/acpi/acpica/hwxfsleep.c | 11 +-
2436 drivers/acpi/custom_method.c | 4 +
2437 drivers/block/cciss.h | 30 +-
2438 drivers/block/smart1,2.h | 40 +-
2439 drivers/cdrom/cdrom.c | 2 +-
2440 drivers/char/Kconfig | 4 +-
2441 drivers/char/genrtc.c | 1 +
2442 drivers/char/mem.c | 17 +
2443 drivers/char/random.c | 5 +-
2444 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
2445 drivers/firewire/ohci.c | 4 +
2446 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
2447 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
2448 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
2449 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
2450 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
2451 drivers/hid/hid-wiimote-debug.c | 2 +-
2452 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
2453 drivers/iommu/Kconfig | 1 +
2454 drivers/iommu/amd_iommu.c | 14 +-
2455 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
2456 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
2457 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
2458 drivers/isdn/i4l/isdn_concap.c | 6 +-
2459 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
2460 drivers/md/bcache/Kconfig | 1 +
2461 drivers/md/raid5.c | 8 +
2462 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
2463 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
2464 drivers/media/radio/radio-cadet.c | 5 +-
2465 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
2466 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
2467 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
2468 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
2469 drivers/message/fusion/mptbase.c | 9 +
2470 drivers/misc/sgi-xp/xp_main.c | 12 +-
2471 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
2472 drivers/net/ppp/pptp.c | 34 +-
2473 drivers/net/wan/lmc/lmc_media.c | 97 +-
2474 drivers/net/wan/z85230.c | 24 +-
2475 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
2476 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
2477 drivers/pci/proc.c | 9 +
2478 drivers/platform/x86/asus-wmi.c | 12 +
2479 drivers/rtc/rtc-dev.c | 3 +
2480 drivers/scsi/bfa/bfa_fcs.c | 19 +-
2481 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
2482 drivers/scsi/bfa/bfa_modules.h | 12 +-
2483 drivers/scsi/hpsa.h | 40 +-
2484 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
2485 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
2486 drivers/tty/serial/uartlite.c | 4 +-
2487 drivers/tty/sysrq.c | 2 +-
2488 drivers/tty/tty_io.c | 4 +
2489 drivers/tty/vt/keyboard.c | 22 +-
2490 drivers/uio/uio.c | 6 +-
2491 drivers/usb/core/hub.c | 5 +
2492 drivers/usb/gadget/function/f_uac1.c | 1 +
2493 drivers/usb/gadget/function/u_uac1.c | 1 +
2494 drivers/usb/host/hwa-hc.c | 9 +-
2495 drivers/usb/usbip/vhci_sysfs.c | 2 +-
2496 drivers/video/fbdev/arcfb.c | 2 +-
2497 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
2498 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
2499 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
2500 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
2501 drivers/xen/xenfs/xenstored.c | 5 +
2502 firmware/Makefile | 2 +
2503 firmware/WHENCE | 20 +-
2504 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
2505 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
2507 fs/autofs4/waitq.c | 9 +
2508 fs/binfmt_aout.c | 7 +
2509 fs/binfmt_elf.c | 40 +-
2511 fs/compat_ioctl.c | 253 +-
2512 fs/coredump.c | 17 +-
2514 fs/debugfs/inode.c | 11 +-
2516 fs/ext2/balloc.c | 4 +-
2517 fs/ext2/super.c | 8 +-
2518 fs/ext4/balloc.c | 4 +-
2519 fs/ext4/extents.c | 2 +-
2523 fs/filesystems.c | 4 +
2524 fs/fs_struct.c | 20 +-
2525 fs/hugetlbfs/inode.c | 24 +-
2529 fs/kernfs/dir.c | 6 +
2532 fs/namespace.c | 24 +
2533 fs/nfsd/nfscache.c | 2 +-
2535 fs/overlayfs/inode.c | 3 +
2536 fs/overlayfs/super.c | 6 +-
2538 fs/posix_acl.c | 15 +-
2539 fs/proc/Kconfig | 10 +-
2540 fs/proc/array.c | 69 +-
2541 fs/proc/base.c | 186 +-
2542 fs/proc/cmdline.c | 4 +
2543 fs/proc/devices.c | 4 +
2544 fs/proc/fd.c | 12 +-
2545 fs/proc/generic.c | 64 +
2546 fs/proc/inode.c | 17 +
2547 fs/proc/internal.h | 11 +-
2548 fs/proc/interrupts.c | 4 +
2549 fs/proc/kcore.c | 3 +
2550 fs/proc/namespaces.c | 4 +-
2551 fs/proc/proc_net.c | 31 +
2552 fs/proc/proc_sysctl.c | 52 +-
2553 fs/proc/root.c | 8 +
2554 fs/proc/stat.c | 69 +-
2555 fs/proc/task_mmu.c | 66 +-
2557 fs/reiserfs/item_ops.c | 24 +-
2558 fs/reiserfs/super.c | 4 +
2560 fs/seq_file.c | 30 +-
2562 fs/sysfs/dir.c | 30 +-
2565 grsecurity/Kconfig | 1203 ++++
2566 grsecurity/Makefile | 54 +
2567 grsecurity/gracl.c | 2757 +++++++++
2568 grsecurity/gracl_alloc.c | 105 +
2569 grsecurity/gracl_cap.c | 127 +
2570 grsecurity/gracl_compat.c | 269 +
2571 grsecurity/gracl_fs.c | 448 ++
2572 grsecurity/gracl_ip.c | 386 ++
2573 grsecurity/gracl_learn.c | 207 +
2574 grsecurity/gracl_policy.c | 1786 ++++++
2575 grsecurity/gracl_res.c | 68 +
2576 grsecurity/gracl_segv.c | 304 +
2577 grsecurity/gracl_shm.c | 40 +
2578 grsecurity/grsec_chdir.c | 19 +
2579 grsecurity/grsec_chroot.c | 467 ++
2580 grsecurity/grsec_disabled.c | 445 ++
2581 grsecurity/grsec_exec.c | 189 +
2582 grsecurity/grsec_fifo.c | 26 +
2583 grsecurity/grsec_fork.c | 23 +
2584 grsecurity/grsec_init.c | 294 +
2585 grsecurity/grsec_ipc.c | 48 +
2586 grsecurity/grsec_link.c | 65 +
2587 grsecurity/grsec_log.c | 340 +
2588 grsecurity/grsec_mem.c | 48 +
2589 grsecurity/grsec_mount.c | 65 +
2590 grsecurity/grsec_pax.c | 47 +
2591 grsecurity/grsec_proc.c | 20 +
2592 grsecurity/grsec_ptrace.c | 30 +
2593 grsecurity/grsec_sig.c | 245 +
2594 grsecurity/grsec_sock.c | 244 +
2595 grsecurity/grsec_sysctl.c | 497 ++
2596 grsecurity/grsec_time.c | 16 +
2597 grsecurity/grsec_tpe.c | 78 +
2598 grsecurity/grsec_tty.c | 18 +
2599 grsecurity/grsec_usb.c | 15 +
2600 grsecurity/grsum.c | 54 +
2601 include/linux/binfmts.h | 5 +-
2602 include/linux/capability.h | 13 +
2603 include/linux/compiler-gcc.h | 5 +
2604 include/linux/compiler.h | 8 +
2605 include/linux/cred.h | 8 +-
2606 include/linux/dcache.h | 5 +-
2607 include/linux/fs.h | 26 +-
2608 include/linux/fs_struct.h | 2 +-
2609 include/linux/fsnotify.h | 6 +
2610 include/linux/gracl.h | 342 ++
2611 include/linux/gracl_compat.h | 156 +
2612 include/linux/gralloc.h | 9 +
2613 include/linux/grdefs.h | 140 +
2614 include/linux/grinternal.h | 231 +
2615 include/linux/grmsg.h | 119 +
2616 include/linux/grsecurity.h | 258 +
2617 include/linux/grsock.h | 19 +
2618 include/linux/ipc.h | 2 +-
2619 include/linux/ipc_namespace.h | 2 +-
2620 include/linux/kallsyms.h | 18 +-
2621 include/linux/key-type.h | 4 +-
2622 include/linux/kmod.h | 5 +
2623 include/linux/kobject.h | 2 +-
2624 include/linux/lsm_hooks.h | 4 +-
2625 include/linux/mm.h | 12 +
2626 include/linux/mm_types.h | 4 +-
2627 include/linux/module.h | 5 +-
2628 include/linux/mount.h | 2 +-
2629 include/linux/msg.h | 2 +-
2630 include/linux/netfilter/xt_gradm.h | 9 +
2631 include/linux/path.h | 4 +-
2632 include/linux/perf_event.h | 13 +-
2633 include/linux/pid_namespace.h | 2 +-
2634 include/linux/pipe_fs_i.h | 4 +
2635 include/linux/poison.h | 2 +-
2636 include/linux/printk.h | 2 +-
2637 include/linux/proc_fs.h | 22 +-
2638 include/linux/proc_ns.h | 2 +-
2639 include/linux/ptrace.h | 24 +-
2640 include/linux/radix-tree.h | 22 +-
2641 include/linux/random.h | 2 +-
2642 include/linux/rbtree_augmented.h | 4 +-
2643 include/linux/scatterlist.h | 12 +-
2644 include/linux/sched.h | 115 +-
2645 include/linux/security.h | 1 +
2646 include/linux/sem.h | 2 +-
2647 include/linux/seq_file.h | 5 +
2648 include/linux/shm.h | 6 +-
2649 include/linux/shmem_fs.h | 5 +-
2650 include/linux/skbuff.h | 3 +
2651 include/linux/slab.h | 9 -
2652 include/linux/sysctl.h | 8 +-
2653 include/linux/thread_info.h | 6 +-
2654 include/linux/tty.h | 2 +-
2655 include/linux/tty_driver.h | 4 +-
2656 include/linux/uidgid.h | 5 +
2657 include/linux/user_namespace.h | 2 +-
2658 include/linux/utsname.h | 2 +-
2659 include/linux/vermagic.h | 16 +-
2660 include/linux/vmalloc.h | 8 +
2661 include/net/af_unix.h | 6 +-
2662 include/net/ip.h | 2 +-
2663 include/net/neighbour.h | 2 +-
2664 include/net/net_namespace.h | 2 +-
2665 include/net/netfilter/nf_conntrack_core.h | 8 +-
2666 include/net/scm.h | 1 +
2667 include/net/sock.h | 2 +-
2668 include/trace/events/fs.h | 53 +
2669 include/uapi/linux/personality.h | 1 +
2674 ipc/msgutil.c | 4 +-
2678 kernel/auditsc.c | 2 +-
2679 kernel/bpf/syscall.c | 10 +-
2680 kernel/capability.c | 41 +-
2681 kernel/cgroup.c | 5 +-
2682 kernel/compat.c | 1 +
2683 kernel/configs.c | 11 +
2684 kernel/cred.c | 112 +-
2685 kernel/events/core.c | 16 +-
2686 kernel/exit.c | 10 +-
2687 kernel/fork.c | 86 +-
2688 kernel/futex.c | 6 +-
2689 kernel/futex_compat.c | 2 +-
2690 kernel/kallsyms.c | 9 +
2691 kernel/kcmp.c | 8 +-
2692 kernel/kexec_core.c | 2 +-
2693 kernel/kmod.c | 96 +-
2694 kernel/kprobes.c | 9 +-
2695 kernel/ksysfs.c | 2 +
2696 kernel/locking/lockdep_proc.c | 10 +-
2697 kernel/module.c | 108 +-
2698 kernel/panic.c | 4 +-
2699 kernel/pid.c | 18 +-
2700 kernel/power/Kconfig | 2 +
2701 kernel/printk/printk.c | 7 +-
2702 kernel/ptrace.c | 89 +-
2703 kernel/resource.c | 10 +
2704 kernel/sched/core.c | 11 +-
2705 kernel/seccomp.c | 22 +-
2706 kernel/signal.c | 37 +-
2707 kernel/sys.c | 64 +-
2708 kernel/sysctl.c | 186 +-
2709 kernel/taskstats.c | 6 +
2710 kernel/time/posix-timers.c | 8 +
2711 kernel/time/time.c | 5 +
2712 kernel/time/timekeeping.c | 3 +
2713 kernel/time/timer_list.c | 13 +-
2714 kernel/time/timer_stats.c | 10 +-
2715 kernel/trace/Kconfig | 2 +
2716 kernel/trace/trace_syscalls.c | 8 +
2717 kernel/user_namespace.c | 15 +
2718 lib/Kconfig.debug | 13 +-
2719 lib/Kconfig.kasan | 2 +-
2720 lib/is_single_threaded.c | 3 +
2721 lib/list_debug.c | 65 +-
2723 lib/radix-tree.c | 12 +-
2725 lib/vsprintf.c | 39 +-
2726 localversion-grsec | 1 +
2728 mm/Kconfig.debug | 1 +
2730 mm/kmemleak.c | 4 +-
2732 mm/mempolicy.c | 12 +-
2738 mm/page_alloc.c | 2 +-
2739 mm/process_vm_access.c | 8 +-
2742 mm/slab_common.c | 2 +-
2746 mm/vmalloc.c | 82 +-
2748 net/appletalk/atalk_proc.c | 2 +-
2749 net/atm/lec.c | 6 +-
2750 net/atm/mpoa_caches.c | 42 +-
2751 net/can/bcm.c | 2 +-
2752 net/can/proc.c | 2 +-
2753 net/core/dev_ioctl.c | 7 +-
2754 net/core/filter.c | 8 +-
2755 net/core/net-procfs.c | 17 +-
2756 net/core/pktgen.c | 2 +-
2757 net/core/scm.c | 7 +
2758 net/core/sock.c | 3 +-
2759 net/core/sysctl_net_core.c | 2 +-
2760 net/decnet/dn_dev.c | 2 +-
2761 net/ipv4/Kconfig | 1 +
2762 net/ipv4/devinet.c | 6 +-
2763 net/ipv4/inet_hashtables.c | 4 +
2764 net/ipv4/ip_input.c | 7 +
2765 net/ipv4/ip_sockglue.c | 3 +-
2766 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
2767 net/ipv4/route.c | 6 +-
2768 net/ipv4/tcp_input.c | 6 +-
2769 net/ipv4/tcp_ipv4.c | 24 +-
2770 net/ipv4/tcp_minisocks.c | 9 +-
2771 net/ipv4/tcp_timer.c | 11 +
2772 net/ipv4/udp.c | 24 +
2773 net/ipv6/Kconfig | 1 +
2774 net/ipv6/addrconf.c | 13 +-
2775 net/ipv6/proc.c | 2 +-
2776 net/ipv6/tcp_ipv6.c | 23 +-
2777 net/ipv6/udp.c | 7 +
2778 net/ipx/ipx_proc.c | 2 +-
2779 net/irda/irproc.c | 2 +-
2780 net/iucv/af_iucv.c | 3 +
2781 net/llc/llc_proc.c | 2 +-
2782 net/netfilter/Kconfig | 10 +
2783 net/netfilter/Makefile | 1 +
2784 net/netfilter/nf_conntrack_core.c | 46 +-
2785 net/netfilter/nf_conntrack_helper.c | 2 +-
2786 net/netfilter/nf_conntrack_netlink.c | 2 +-
2787 net/netfilter/xt_gradm.c | 51 +
2788 net/netfilter/xt_hashlimit.c | 4 +-
2789 net/netfilter/xt_recent.c | 2 +-
2790 net/openvswitch/actions.c | 19 +-
2791 net/sctp/sm_sideeffect.c | 11 +-
2792 net/sctp/sm_statefuns.c | 17 +-
2793 net/socket.c | 75 +-
2794 net/sunrpc/Kconfig | 1 +
2795 net/sunrpc/cache.c | 2 +-
2796 net/sunrpc/stats.c | 2 +-
2797 net/sysctl_net.c | 2 +-
2798 net/unix/af_unix.c | 57 +-
2799 net/unix/garbage.c | 8 +-
2800 net/vmw_vsock/vmci_transport_notify.c | 30 +-
2801 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
2802 net/x25/sysctl_net_x25.c | 2 +-
2803 net/x25/x25_proc.c | 2 +-
2804 scripts/package/Makefile | 2 +-
2805 scripts/package/mkspec | 41 +-
2806 security/Kconfig | 369 +-
2807 security/apparmor/file.c | 4 +-
2808 security/apparmor/lsm.c | 8 +-
2809 security/commoncap.c | 36 +-
2810 security/keys/internal.h | 2 +-
2811 security/min_addr.c | 2 +
2812 security/smack/smack_lsm.c | 8 +-
2813 security/tomoyo/file.c | 12 +-
2814 security/tomoyo/mount.c | 4 +
2815 security/tomoyo/tomoyo.c | 20 +-
2816 security/yama/Kconfig | 2 +-
2817 security/yama/yama_lsm.c | 4 +-
2818 sound/core/timer.c | 4 +-
2819 sound/synth/emux/emux_seq.c | 14 +-
2820 sound/usb/line6/driver.c | 40 +-
2821 sound/usb/line6/toneport.c | 12 +-
2822 tools/gcc/.gitignore | 1 +
2823 tools/gcc/Makefile | 12 +
2824 tools/gcc/gen-random-seed.sh | 8 +
2825 tools/gcc/randomize_layout_plugin.c | 930 +++
2826 tools/gcc/size_overflow_plugin/.gitignore | 1 +
2827 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
2828 513 files changed, 33007 insertions(+), 3251 deletions(-)
2830 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
2831 Author: Brad Spengler <spender@grsecurity.net>
2832 Date: Mon Feb 15 10:51:41 2016 -0500
2834 Initial import of pax-linux-4.4.1-test3.patch
2836 Documentation/dontdiff | 46 +-
2837 Documentation/kbuild/makefiles.txt | 39 +-
2838 Documentation/kernel-parameters.txt | 28 +
2840 arch/alpha/include/asm/atomic.h | 10 +
2841 arch/alpha/include/asm/elf.h | 7 +
2842 arch/alpha/include/asm/pgalloc.h | 6 +
2843 arch/alpha/include/asm/pgtable.h | 11 +
2844 arch/alpha/kernel/module.c | 2 +-
2845 arch/alpha/kernel/osf_sys.c | 8 +-
2846 arch/alpha/mm/fault.c | 141 +-
2847 arch/arm/Kconfig | 3 +-
2848 arch/arm/include/asm/atomic.h | 323 +-
2849 arch/arm/include/asm/cache.h | 5 +-
2850 arch/arm/include/asm/cacheflush.h | 2 +-
2851 arch/arm/include/asm/checksum.h | 14 +-
2852 arch/arm/include/asm/cmpxchg.h | 4 +
2853 arch/arm/include/asm/cpuidle.h | 2 +-
2854 arch/arm/include/asm/domain.h | 42 +-
2855 arch/arm/include/asm/elf.h | 9 +-
2856 arch/arm/include/asm/fncpy.h | 2 +
2857 arch/arm/include/asm/futex.h | 1 +
2858 arch/arm/include/asm/kmap_types.h | 2 +-
2859 arch/arm/include/asm/mach/dma.h | 2 +-
2860 arch/arm/include/asm/mach/map.h | 16 +-
2861 arch/arm/include/asm/outercache.h | 2 +-
2862 arch/arm/include/asm/page.h | 3 +-
2863 arch/arm/include/asm/pgalloc.h | 20 +
2864 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
2865 arch/arm/include/asm/pgtable-2level.h | 3 +
2866 arch/arm/include/asm/pgtable-3level.h | 3 +
2867 arch/arm/include/asm/pgtable.h | 54 +-
2868 arch/arm/include/asm/smp.h | 2 +-
2869 arch/arm/include/asm/thread_info.h | 3 +
2870 arch/arm/include/asm/tls.h | 3 +
2871 arch/arm/include/asm/uaccess.h | 113 +-
2872 arch/arm/include/uapi/asm/ptrace.h | 2 +-
2873 arch/arm/kernel/armksyms.c | 2 +-
2874 arch/arm/kernel/cpuidle.c | 2 +-
2875 arch/arm/kernel/entry-armv.S | 109 +-
2876 arch/arm/kernel/entry-common.S | 40 +-
2877 arch/arm/kernel/entry-header.S | 55 +
2878 arch/arm/kernel/fiq.c | 3 +
2879 arch/arm/kernel/module-plts.c | 7 +-
2880 arch/arm/kernel/module.c | 38 +-
2881 arch/arm/kernel/patch.c | 2 +
2882 arch/arm/kernel/process.c | 92 +-
2883 arch/arm/kernel/reboot.c | 1 +
2884 arch/arm/kernel/setup.c | 20 +-
2885 arch/arm/kernel/signal.c | 35 +-
2886 arch/arm/kernel/smp.c | 2 +-
2887 arch/arm/kernel/tcm.c | 4 +-
2888 arch/arm/kernel/vmlinux.lds.S | 6 +-
2889 arch/arm/kvm/arm.c | 8 +-
2890 arch/arm/lib/copy_page.S | 1 +
2891 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2892 arch/arm/lib/delay.c | 2 +-
2893 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
2894 arch/arm/mach-exynos/suspend.c | 6 +-
2895 arch/arm/mach-mvebu/coherency.c | 4 +-
2896 arch/arm/mach-omap2/board-n8x0.c | 2 +-
2897 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
2898 arch/arm/mach-omap2/omap-smp.c | 1 +
2899 arch/arm/mach-omap2/omap_device.c | 4 +-
2900 arch/arm/mach-omap2/omap_device.h | 4 +-
2901 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2902 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2903 arch/arm/mach-omap2/wd_timer.c | 6 +-
2904 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
2905 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
2906 arch/arm/mach-tegra/irq.c | 1 +
2907 arch/arm/mach-ux500/pm.c | 1 +
2908 arch/arm/mach-zynq/platsmp.c | 1 +
2909 arch/arm/mm/Kconfig | 6 +-
2910 arch/arm/mm/cache-l2x0.c | 2 +-
2911 arch/arm/mm/context.c | 10 +-
2912 arch/arm/mm/fault.c | 146 +
2913 arch/arm/mm/fault.h | 12 +
2914 arch/arm/mm/init.c | 39 +
2915 arch/arm/mm/ioremap.c | 4 +-
2916 arch/arm/mm/mmap.c | 30 +-
2917 arch/arm/mm/mmu.c | 162 +-
2918 arch/arm/net/bpf_jit_32.c | 3 +
2919 arch/arm/plat-iop/setup.c | 2 +-
2920 arch/arm/plat-omap/sram.c | 2 +
2921 arch/arm64/include/asm/atomic.h | 10 +
2922 arch/arm64/include/asm/percpu.h | 8 +-
2923 arch/arm64/include/asm/pgalloc.h | 5 +
2924 arch/arm64/include/asm/uaccess.h | 1 +
2925 arch/arm64/mm/dma-mapping.c | 2 +-
2926 arch/avr32/include/asm/elf.h | 8 +-
2927 arch/avr32/include/asm/kmap_types.h | 4 +-
2928 arch/avr32/mm/fault.c | 27 +
2929 arch/frv/include/asm/atomic.h | 10 +
2930 arch/frv/include/asm/kmap_types.h | 2 +-
2931 arch/frv/mm/elf-fdpic.c | 3 +-
2932 arch/ia64/Makefile | 1 +
2933 arch/ia64/include/asm/atomic.h | 10 +
2934 arch/ia64/include/asm/elf.h | 7 +
2935 arch/ia64/include/asm/pgalloc.h | 12 +
2936 arch/ia64/include/asm/pgtable.h | 13 +-
2937 arch/ia64/include/asm/spinlock.h | 2 +-
2938 arch/ia64/include/asm/uaccess.h | 27 +-
2939 arch/ia64/kernel/module.c | 45 +-
2940 arch/ia64/kernel/palinfo.c | 2 +-
2941 arch/ia64/kernel/sys_ia64.c | 7 +
2942 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2943 arch/ia64/mm/fault.c | 32 +-
2944 arch/ia64/mm/init.c | 15 +-
2945 arch/m32r/lib/usercopy.c | 6 +
2946 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
2947 arch/mips/include/asm/atomic.h | 368 +-
2948 arch/mips/include/asm/elf.h | 7 +
2949 arch/mips/include/asm/exec.h | 2 +-
2950 arch/mips/include/asm/hw_irq.h | 2 +-
2951 arch/mips/include/asm/local.h | 57 +
2952 arch/mips/include/asm/page.h | 2 +-
2953 arch/mips/include/asm/pgalloc.h | 5 +
2954 arch/mips/include/asm/pgtable.h | 3 +
2955 arch/mips/include/asm/uaccess.h | 1 +
2956 arch/mips/kernel/binfmt_elfn32.c | 7 +
2957 arch/mips/kernel/binfmt_elfo32.c | 7 +
2958 arch/mips/kernel/irq-gt641xx.c | 2 +-
2959 arch/mips/kernel/irq.c | 6 +-
2960 arch/mips/kernel/pm-cps.c | 2 +-
2961 arch/mips/kernel/process.c | 12 -
2962 arch/mips/kernel/sync-r4k.c | 24 +-
2963 arch/mips/kernel/traps.c | 13 +-
2964 arch/mips/mm/fault.c | 25 +
2965 arch/mips/mm/mmap.c | 51 +-
2966 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2967 arch/mips/sni/rm200.c | 2 +-
2968 arch/mips/vr41xx/common/icu.c | 2 +-
2969 arch/mips/vr41xx/common/irq.c | 4 +-
2970 arch/parisc/include/asm/atomic.h | 10 +
2971 arch/parisc/include/asm/elf.h | 7 +
2972 arch/parisc/include/asm/pgalloc.h | 6 +
2973 arch/parisc/include/asm/pgtable.h | 11 +
2974 arch/parisc/include/asm/uaccess.h | 4 +-
2975 arch/parisc/kernel/module.c | 50 +-
2976 arch/parisc/kernel/sys_parisc.c | 15 +
2977 arch/parisc/kernel/traps.c | 4 +-
2978 arch/parisc/mm/fault.c | 140 +-
2979 arch/powerpc/include/asm/atomic.h | 329 +-
2980 arch/powerpc/include/asm/elf.h | 12 +
2981 arch/powerpc/include/asm/exec.h | 2 +-
2982 arch/powerpc/include/asm/kmap_types.h | 2 +-
2983 arch/powerpc/include/asm/local.h | 46 +
2984 arch/powerpc/include/asm/mman.h | 2 +-
2985 arch/powerpc/include/asm/page.h | 8 +-
2986 arch/powerpc/include/asm/page_64.h | 7 +-
2987 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2988 arch/powerpc/include/asm/pgtable.h | 1 +
2989 arch/powerpc/include/asm/pte-hash32.h | 1 +
2990 arch/powerpc/include/asm/reg.h | 1 +
2991 arch/powerpc/include/asm/smp.h | 2 +-
2992 arch/powerpc/include/asm/spinlock.h | 42 +-
2993 arch/powerpc/include/asm/uaccess.h | 141 +-
2994 arch/powerpc/kernel/Makefile | 5 +
2995 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2996 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2997 arch/powerpc/kernel/module_32.c | 15 +-
2998 arch/powerpc/kernel/process.c | 46 -
2999 arch/powerpc/kernel/signal_32.c | 2 +-
3000 arch/powerpc/kernel/signal_64.c | 2 +-
3001 arch/powerpc/kernel/traps.c | 21 +
3002 arch/powerpc/kernel/vdso.c | 5 +-
3003 arch/powerpc/lib/usercopy_64.c | 18 -
3004 arch/powerpc/mm/fault.c | 56 +-
3005 arch/powerpc/mm/mmap.c | 16 +
3006 arch/powerpc/mm/slice.c | 13 +-
3007 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
3008 arch/s390/include/asm/atomic.h | 10 +
3009 arch/s390/include/asm/elf.h | 7 +
3010 arch/s390/include/asm/exec.h | 2 +-
3011 arch/s390/include/asm/uaccess.h | 13 +-
3012 arch/s390/kernel/module.c | 22 +-
3013 arch/s390/kernel/process.c | 20 -
3014 arch/s390/mm/mmap.c | 16 +
3015 arch/score/include/asm/exec.h | 2 +-
3016 arch/score/kernel/process.c | 5 -
3017 arch/sh/mm/mmap.c | 22 +-
3018 arch/sparc/include/asm/atomic_64.h | 110 +-
3019 arch/sparc/include/asm/cache.h | 2 +-
3020 arch/sparc/include/asm/elf_32.h | 7 +
3021 arch/sparc/include/asm/elf_64.h | 7 +
3022 arch/sparc/include/asm/pgalloc_32.h | 1 +
3023 arch/sparc/include/asm/pgalloc_64.h | 1 +
3024 arch/sparc/include/asm/pgtable.h | 4 +
3025 arch/sparc/include/asm/pgtable_32.h | 15 +-
3026 arch/sparc/include/asm/pgtsrmmu.h | 5 +
3027 arch/sparc/include/asm/setup.h | 4 +-
3028 arch/sparc/include/asm/spinlock_64.h | 35 +-
3029 arch/sparc/include/asm/thread_info_32.h | 1 +
3030 arch/sparc/include/asm/thread_info_64.h | 2 +
3031 arch/sparc/include/asm/uaccess.h | 1 +
3032 arch/sparc/include/asm/uaccess_32.h | 28 +-
3033 arch/sparc/include/asm/uaccess_64.h | 24 +-
3034 arch/sparc/kernel/Makefile | 2 +-
3035 arch/sparc/kernel/prom_common.c | 2 +-
3036 arch/sparc/kernel/smp_64.c | 8 +-
3037 arch/sparc/kernel/sys_sparc_32.c | 2 +-
3038 arch/sparc/kernel/sys_sparc_64.c | 52 +-
3039 arch/sparc/kernel/traps_64.c | 27 +-
3040 arch/sparc/lib/Makefile | 2 +-
3041 arch/sparc/lib/atomic_64.S | 57 +-
3042 arch/sparc/lib/ksyms.c | 6 +-
3043 arch/sparc/mm/Makefile | 2 +-
3044 arch/sparc/mm/fault_32.c | 292 +
3045 arch/sparc/mm/fault_64.c | 486 +
3046 arch/sparc/mm/hugetlbpage.c | 22 +-
3047 arch/sparc/mm/init_64.c | 10 +-
3048 arch/tile/include/asm/atomic_64.h | 10 +
3049 arch/tile/include/asm/uaccess.h | 4 +-
3050 arch/um/Makefile | 4 +
3051 arch/um/include/asm/kmap_types.h | 2 +-
3052 arch/um/include/asm/page.h | 3 +
3053 arch/um/include/asm/pgtable-3level.h | 1 +
3054 arch/um/kernel/process.c | 16 -
3055 arch/x86/Kconfig | 26 +-
3056 arch/x86/Kconfig.cpu | 6 +-
3057 arch/x86/Kconfig.debug | 4 +-
3058 arch/x86/Makefile | 13 +-
3059 arch/x86/boot/Makefile | 3 +
3060 arch/x86/boot/bitops.h | 4 +-
3061 arch/x86/boot/boot.h | 2 +-
3062 arch/x86/boot/compressed/Makefile | 3 +
3063 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
3064 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
3065 arch/x86/boot/compressed/head_32.S | 4 +-
3066 arch/x86/boot/compressed/head_64.S | 12 +-
3067 arch/x86/boot/compressed/misc.c | 11 +-
3068 arch/x86/boot/cpucheck.c | 16 +-
3069 arch/x86/boot/header.S | 6 +-
3070 arch/x86/boot/memory.c | 2 +-
3071 arch/x86/boot/video-vesa.c | 1 +
3072 arch/x86/boot/video.c | 2 +-
3073 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
3074 arch/x86/crypto/aesni-intel_asm.S | 106 +-
3075 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
3076 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
3077 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
3078 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
3079 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
3080 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
3081 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
3082 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
3083 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
3084 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
3085 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
3086 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
3087 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
3088 arch/x86/crypto/sha256-avx-asm.S | 2 +
3089 arch/x86/crypto/sha256-avx2-asm.S | 2 +
3090 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
3091 arch/x86/crypto/sha512-avx-asm.S | 2 +
3092 arch/x86/crypto/sha512-avx2-asm.S | 2 +
3093 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
3094 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
3095 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
3096 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
3097 arch/x86/entry/calling.h | 86 +-
3098 arch/x86/entry/common.c | 28 +-
3099 arch/x86/entry/entry_32.S | 311 +-
3100 arch/x86/entry/entry_64.S | 625 +-
3101 arch/x86/entry/entry_64_compat.S | 67 +-
3102 arch/x86/entry/thunk_64.S | 2 +
3103 arch/x86/entry/vdso/Makefile | 2 +-
3104 arch/x86/entry/vdso/vdso2c.h | 8 +-
3105 arch/x86/entry/vdso/vma.c | 37 +-
3106 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
3107 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
3108 arch/x86/ia32/ia32_signal.c | 23 +-
3109 arch/x86/ia32/sys_ia32.c | 42 +-
3110 arch/x86/include/asm/alternative-asm.h | 43 +-
3111 arch/x86/include/asm/alternative.h | 4 +-
3112 arch/x86/include/asm/apic.h | 2 +-
3113 arch/x86/include/asm/apm.h | 4 +-
3114 arch/x86/include/asm/atomic.h | 230 +-
3115 arch/x86/include/asm/atomic64_32.h | 100 +
3116 arch/x86/include/asm/atomic64_64.h | 164 +-
3117 arch/x86/include/asm/bitops.h | 18 +-
3118 arch/x86/include/asm/boot.h | 2 +-
3119 arch/x86/include/asm/cache.h | 5 +-
3120 arch/x86/include/asm/checksum_32.h | 12 +-
3121 arch/x86/include/asm/cmpxchg.h | 39 +
3122 arch/x86/include/asm/compat.h | 4 +
3123 arch/x86/include/asm/cpufeature.h | 17 +-
3124 arch/x86/include/asm/desc.h | 78 +-
3125 arch/x86/include/asm/desc_defs.h | 6 +
3126 arch/x86/include/asm/div64.h | 2 +-
3127 arch/x86/include/asm/dma.h | 2 +
3128 arch/x86/include/asm/elf.h | 33 +-
3129 arch/x86/include/asm/emergency-restart.h | 2 +-
3130 arch/x86/include/asm/fpu/internal.h | 42 +-
3131 arch/x86/include/asm/fpu/types.h | 5 +-
3132 arch/x86/include/asm/futex.h | 14 +-
3133 arch/x86/include/asm/hw_irq.h | 4 +-
3134 arch/x86/include/asm/i8259.h | 2 +-
3135 arch/x86/include/asm/io.h | 22 +-
3136 arch/x86/include/asm/irqflags.h | 5 +
3137 arch/x86/include/asm/kprobes.h | 9 +-
3138 arch/x86/include/asm/local.h | 106 +-
3139 arch/x86/include/asm/mman.h | 15 +
3140 arch/x86/include/asm/mmu.h | 14 +-
3141 arch/x86/include/asm/mmu_context.h | 133 +-
3142 arch/x86/include/asm/module.h | 17 +-
3143 arch/x86/include/asm/nmi.h | 19 +-
3144 arch/x86/include/asm/page.h | 1 +
3145 arch/x86/include/asm/page_32.h | 12 +-
3146 arch/x86/include/asm/page_64.h | 14 +-
3147 arch/x86/include/asm/paravirt.h | 46 +-
3148 arch/x86/include/asm/paravirt_types.h | 15 +-
3149 arch/x86/include/asm/pgalloc.h | 23 +
3150 arch/x86/include/asm/pgtable-2level.h | 2 +
3151 arch/x86/include/asm/pgtable-3level.h | 7 +
3152 arch/x86/include/asm/pgtable.h | 126 +-
3153 arch/x86/include/asm/pgtable_32.h | 14 +-
3154 arch/x86/include/asm/pgtable_32_types.h | 24 +-
3155 arch/x86/include/asm/pgtable_64.h | 23 +-
3156 arch/x86/include/asm/pgtable_64_types.h | 5 +
3157 arch/x86/include/asm/pgtable_types.h | 26 +-
3158 arch/x86/include/asm/pmem.h | 2 +-
3159 arch/x86/include/asm/preempt.h | 2 +-
3160 arch/x86/include/asm/processor.h | 57 +-
3161 arch/x86/include/asm/ptrace.h | 15 +-
3162 arch/x86/include/asm/realmode.h | 4 +-
3163 arch/x86/include/asm/reboot.h | 10 +-
3164 arch/x86/include/asm/rmwcc.h | 84 +-
3165 arch/x86/include/asm/rwsem.h | 60 +-
3166 arch/x86/include/asm/segment.h | 27 +-
3167 arch/x86/include/asm/smap.h | 43 +
3168 arch/x86/include/asm/smp.h | 14 +-
3169 arch/x86/include/asm/stackprotector.h | 4 +-
3170 arch/x86/include/asm/stacktrace.h | 34 +-
3171 arch/x86/include/asm/switch_to.h | 4 +-
3172 arch/x86/include/asm/sys_ia32.h | 6 +-
3173 arch/x86/include/asm/thread_info.h | 27 +-
3174 arch/x86/include/asm/tlbflush.h | 77 +-
3175 arch/x86/include/asm/uaccess.h | 210 +-
3176 arch/x86/include/asm/uaccess_32.h | 28 +-
3177 arch/x86/include/asm/uaccess_64.h | 169 +-
3178 arch/x86/include/asm/word-at-a-time.h | 2 +-
3179 arch/x86/include/asm/x86_init.h | 10 +-
3180 arch/x86/include/asm/xen/page.h | 2 +-
3181 arch/x86/include/uapi/asm/e820.h | 2 +-
3182 arch/x86/kernel/Makefile | 2 +-
3183 arch/x86/kernel/acpi/boot.c | 4 +-
3184 arch/x86/kernel/acpi/sleep.c | 4 +
3185 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
3186 arch/x86/kernel/alternative.c | 124 +-
3187 arch/x86/kernel/apic/apic.c | 4 +-
3188 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
3189 arch/x86/kernel/apic/apic_noop.c | 2 +-
3190 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
3191 arch/x86/kernel/apic/io_apic.c | 8 +-
3192 arch/x86/kernel/apic/msi.c | 2 +-
3193 arch/x86/kernel/apic/probe_32.c | 4 +-
3194 arch/x86/kernel/apic/vector.c | 2 +
3195 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
3196 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
3197 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
3198 arch/x86/kernel/apm_32.c | 21 +-
3199 arch/x86/kernel/asm-offsets.c | 20 +
3200 arch/x86/kernel/asm-offsets_64.c | 1 +
3201 arch/x86/kernel/cpu/Makefile | 4 -
3202 arch/x86/kernel/cpu/amd.c | 2 +-
3203 arch/x86/kernel/cpu/bugs_64.c | 2 +
3204 arch/x86/kernel/cpu/common.c | 202 +-
3205 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
3206 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
3207 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
3208 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
3209 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
3210 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
3211 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
3212 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
3213 arch/x86/kernel/cpu/perf_event.c | 10 +-
3214 arch/x86/kernel/cpu/perf_event.h | 2 +-
3215 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
3216 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
3217 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
3218 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
3219 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
3220 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
3221 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
3222 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
3223 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
3224 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
3225 arch/x86/kernel/crash_dump_64.c | 2 +-
3226 arch/x86/kernel/doublefault.c | 8 +-
3227 arch/x86/kernel/dumpstack.c | 24 +-
3228 arch/x86/kernel/dumpstack_32.c | 25 +-
3229 arch/x86/kernel/dumpstack_64.c | 62 +-
3230 arch/x86/kernel/e820.c | 4 +-
3231 arch/x86/kernel/early_printk.c | 1 +
3232 arch/x86/kernel/espfix_64.c | 44 +-
3233 arch/x86/kernel/fpu/core.c | 24 +-
3234 arch/x86/kernel/fpu/init.c | 40 +-
3235 arch/x86/kernel/fpu/regset.c | 22 +-
3236 arch/x86/kernel/fpu/signal.c | 20 +-
3237 arch/x86/kernel/fpu/xstate.c | 6 +-
3238 arch/x86/kernel/ftrace.c | 18 +-
3239 arch/x86/kernel/head64.c | 14 +-
3240 arch/x86/kernel/head_32.S | 235 +-
3241 arch/x86/kernel/head_64.S | 173 +-
3242 arch/x86/kernel/i386_ksyms_32.c | 12 +
3243 arch/x86/kernel/i8259.c | 10 +-
3244 arch/x86/kernel/io_delay.c | 2 +-
3245 arch/x86/kernel/ioport.c | 2 +-
3246 arch/x86/kernel/irq.c | 8 +-
3247 arch/x86/kernel/irq_32.c | 45 +-
3248 arch/x86/kernel/jump_label.c | 10 +-
3249 arch/x86/kernel/kgdb.c | 21 +-
3250 arch/x86/kernel/kprobes/core.c | 28 +-
3251 arch/x86/kernel/kprobes/opt.c | 16 +-
3252 arch/x86/kernel/ksysfs.c | 2 +-
3253 arch/x86/kernel/kvmclock.c | 20 +-
3254 arch/x86/kernel/ldt.c | 25 +
3255 arch/x86/kernel/livepatch.c | 11 +-
3256 arch/x86/kernel/machine_kexec_32.c | 6 +-
3257 arch/x86/kernel/mcount_64.S | 19 +-
3258 arch/x86/kernel/module.c | 78 +-
3259 arch/x86/kernel/msr.c | 2 +-
3260 arch/x86/kernel/nmi.c | 34 +-
3261 arch/x86/kernel/nmi_selftest.c | 4 +-
3262 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
3263 arch/x86/kernel/paravirt.c | 45 +-
3264 arch/x86/kernel/paravirt_patch_64.c | 8 +
3265 arch/x86/kernel/pci-calgary_64.c | 2 +-
3266 arch/x86/kernel/pci-iommu_table.c | 2 +-
3267 arch/x86/kernel/pci-swiotlb.c | 2 +-
3268 arch/x86/kernel/process.c | 80 +-
3269 arch/x86/kernel/process_32.c | 29 +-
3270 arch/x86/kernel/process_64.c | 14 +-
3271 arch/x86/kernel/ptrace.c | 20 +-
3272 arch/x86/kernel/pvclock.c | 8 +-
3273 arch/x86/kernel/reboot.c | 44 +-
3274 arch/x86/kernel/reboot_fixups_32.c | 2 +-
3275 arch/x86/kernel/relocate_kernel_64.S | 3 +-
3276 arch/x86/kernel/setup.c | 29 +-
3277 arch/x86/kernel/setup_percpu.c | 29 +-
3278 arch/x86/kernel/signal.c | 17 +-
3279 arch/x86/kernel/smp.c | 2 +-
3280 arch/x86/kernel/smpboot.c | 29 +-
3281 arch/x86/kernel/step.c | 6 +-
3282 arch/x86/kernel/sys_i386_32.c | 184 +
3283 arch/x86/kernel/sys_x86_64.c | 22 +-
3284 arch/x86/kernel/tboot.c | 22 +-
3285 arch/x86/kernel/time.c | 8 +-
3286 arch/x86/kernel/tls.c | 7 +-
3287 arch/x86/kernel/tracepoint.c | 4 +-
3288 arch/x86/kernel/traps.c | 53 +-
3289 arch/x86/kernel/tsc.c | 2 +-
3290 arch/x86/kernel/uprobes.c | 4 +-
3291 arch/x86/kernel/vm86_32.c | 6 +-
3292 arch/x86/kernel/vmlinux.lds.S | 153 +-
3293 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
3294 arch/x86/kernel/x86_init.c | 6 +-
3295 arch/x86/kvm/cpuid.c | 21 +-
3296 arch/x86/kvm/emulate.c | 6 +-
3297 arch/x86/kvm/i8259.c | 10 +-
3298 arch/x86/kvm/ioapic.c | 2 +
3299 arch/x86/kvm/lapic.c | 2 +-
3300 arch/x86/kvm/paging_tmpl.h | 2 +-
3301 arch/x86/kvm/svm.c | 10 +-
3302 arch/x86/kvm/vmx.c | 62 +-
3303 arch/x86/kvm/x86.c | 44 +-
3304 arch/x86/lguest/boot.c | 3 +-
3305 arch/x86/lib/atomic64_386_32.S | 164 +
3306 arch/x86/lib/atomic64_cx8_32.S | 98 +-
3307 arch/x86/lib/checksum_32.S | 99 +-
3308 arch/x86/lib/clear_page_64.S | 3 +
3309 arch/x86/lib/cmpxchg16b_emu.S | 3 +
3310 arch/x86/lib/copy_page_64.S | 14 +-
3311 arch/x86/lib/copy_user_64.S | 66 +-
3312 arch/x86/lib/csum-copy_64.S | 14 +-
3313 arch/x86/lib/csum-wrappers_64.c | 8 +-
3314 arch/x86/lib/getuser.S | 74 +-
3315 arch/x86/lib/insn.c | 8 +-
3316 arch/x86/lib/iomap_copy_64.S | 2 +
3317 arch/x86/lib/memcpy_64.S | 6 +
3318 arch/x86/lib/memmove_64.S | 3 +-
3319 arch/x86/lib/memset_64.S | 3 +
3320 arch/x86/lib/mmx_32.c | 243 +-
3321 arch/x86/lib/msr-reg.S | 2 +
3322 arch/x86/lib/putuser.S | 87 +-
3323 arch/x86/lib/rwsem.S | 6 +-
3324 arch/x86/lib/usercopy_32.c | 359 +-
3325 arch/x86/lib/usercopy_64.c | 22 +-
3326 arch/x86/math-emu/fpu_aux.c | 2 +-
3327 arch/x86/math-emu/fpu_entry.c | 4 +-
3328 arch/x86/math-emu/fpu_system.h | 2 +-
3329 arch/x86/mm/Makefile | 4 +
3330 arch/x86/mm/extable.c | 26 +-
3331 arch/x86/mm/fault.c | 570 +-
3332 arch/x86/mm/gup.c | 6 +-
3333 arch/x86/mm/highmem_32.c | 6 +
3334 arch/x86/mm/hugetlbpage.c | 24 +-
3335 arch/x86/mm/init.c | 111 +-
3336 arch/x86/mm/init_32.c | 111 +-
3337 arch/x86/mm/init_64.c | 46 +-
3338 arch/x86/mm/iomap_32.c | 4 +
3339 arch/x86/mm/ioremap.c | 52 +-
3340 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
3341 arch/x86/mm/mmap.c | 40 +-
3342 arch/x86/mm/mmio-mod.c | 10 +-
3343 arch/x86/mm/mpx.c | 6 +-
3344 arch/x86/mm/numa.c | 4 +-
3345 arch/x86/mm/pageattr.c | 42 +-
3346 arch/x86/mm/pat.c | 12 +-
3347 arch/x86/mm/pat_rbtree.c | 2 +-
3348 arch/x86/mm/pf_in.c | 10 +-
3349 arch/x86/mm/pgtable.c | 214 +-
3350 arch/x86/mm/pgtable_32.c | 3 +
3351 arch/x86/mm/setup_nx.c | 7 +
3352 arch/x86/mm/tlb.c | 4 +
3353 arch/x86/mm/uderef_64.c | 37 +
3354 arch/x86/net/bpf_jit.S | 11 +
3355 arch/x86/net/bpf_jit_comp.c | 13 +-
3356 arch/x86/oprofile/backtrace.c | 6 +-
3357 arch/x86/oprofile/nmi_int.c | 8 +-
3358 arch/x86/oprofile/op_model_amd.c | 8 +-
3359 arch/x86/oprofile/op_model_ppro.c | 7 +-
3360 arch/x86/oprofile/op_x86_model.h | 2 +-
3361 arch/x86/pci/intel_mid_pci.c | 2 +-
3362 arch/x86/pci/irq.c | 8 +-
3363 arch/x86/pci/pcbios.c | 144 +-
3364 arch/x86/platform/efi/efi_32.c | 24 +
3365 arch/x86/platform/efi/efi_64.c | 26 +-
3366 arch/x86/platform/efi/efi_stub_32.S | 64 +-
3367 arch/x86/platform/efi/efi_stub_64.S | 2 +
3368 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
3369 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
3370 arch/x86/platform/intel-mid/mfld.c | 4 +-
3371 arch/x86/platform/intel-mid/mrfl.c | 2 +-
3372 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
3373 arch/x86/platform/olpc/olpc_dt.c | 2 +-
3374 arch/x86/power/cpu.c | 11 +-
3375 arch/x86/realmode/init.c | 10 +-
3376 arch/x86/realmode/rm/Makefile | 3 +
3377 arch/x86/realmode/rm/header.S | 4 +-
3378 arch/x86/realmode/rm/reboot.S | 4 +
3379 arch/x86/realmode/rm/trampoline_32.S | 12 +-
3380 arch/x86/realmode/rm/trampoline_64.S | 3 +-
3381 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
3382 arch/x86/tools/Makefile | 2 +-
3383 arch/x86/tools/relocs.c | 96 +-
3384 arch/x86/um/mem_32.c | 2 +-
3385 arch/x86/um/tls_32.c | 2 +-
3386 arch/x86/xen/enlighten.c | 50 +-
3387 arch/x86/xen/mmu.c | 19 +-
3388 arch/x86/xen/smp.c | 16 +-
3389 arch/x86/xen/xen-asm_32.S | 2 +-
3390 arch/x86/xen/xen-head.S | 11 +
3391 arch/x86/xen/xen-ops.h | 2 -
3393 block/blk-cgroup.c | 18 +-
3394 block/blk-iopoll.c | 2 +-
3395 block/blk-map.c | 2 +-
3396 block/blk-softirq.c | 2 +-
3398 block/cfq-iosched.c | 4 +-
3399 block/compat_ioctl.c | 4 +-
3400 block/genhd.c | 9 +-
3401 block/partitions/efi.c | 8 +-
3402 block/scsi_ioctl.c | 29 +-
3403 crypto/cryptd.c | 4 +-
3404 crypto/crypto_user.c | 8 +-
3405 crypto/pcrypt.c | 2 +-
3406 crypto/zlib.c | 12 +-
3407 drivers/acpi/acpi_video.c | 2 +-
3408 drivers/acpi/apei/apei-internal.h | 2 +-
3409 drivers/acpi/apei/ghes.c | 10 +-
3410 drivers/acpi/bgrt.c | 6 +-
3411 drivers/acpi/blacklist.c | 4 +-
3412 drivers/acpi/bus.c | 4 +-
3413 drivers/acpi/device_pm.c | 4 +-
3414 drivers/acpi/ec.c | 2 +-
3415 drivers/acpi/pci_slot.c | 2 +-
3416 drivers/acpi/processor_idle.c | 2 +-
3417 drivers/acpi/processor_pdc.c | 2 +-
3418 drivers/acpi/sleep.c | 2 +-
3419 drivers/acpi/sysfs.c | 4 +-
3420 drivers/acpi/thermal.c | 2 +-
3421 drivers/acpi/video_detect.c | 7 +-
3422 drivers/ata/libata-core.c | 12 +-
3423 drivers/ata/libata-scsi.c | 2 +-
3424 drivers/ata/libata.h | 2 +-
3425 drivers/ata/pata_arasan_cf.c | 4 +-
3426 drivers/atm/adummy.c | 2 +-
3427 drivers/atm/ambassador.c | 8 +-
3428 drivers/atm/atmtcp.c | 14 +-
3429 drivers/atm/eni.c | 10 +-
3430 drivers/atm/firestream.c | 8 +-
3431 drivers/atm/fore200e.c | 14 +-
3432 drivers/atm/he.c | 18 +-
3433 drivers/atm/horizon.c | 4 +-
3434 drivers/atm/idt77252.c | 36 +-
3435 drivers/atm/iphase.c | 34 +-
3436 drivers/atm/lanai.c | 12 +-
3437 drivers/atm/nicstar.c | 46 +-
3438 drivers/atm/solos-pci.c | 4 +-
3439 drivers/atm/suni.c | 4 +-
3440 drivers/atm/uPD98402.c | 16 +-
3441 drivers/atm/zatm.c | 6 +-
3442 drivers/base/bus.c | 4 +-
3443 drivers/base/devres.c | 4 +-
3444 drivers/base/devtmpfs.c | 8 +-
3445 drivers/base/node.c | 2 +-
3446 drivers/base/platform-msi.c | 20 +-
3447 drivers/base/power/domain.c | 7 +-
3448 drivers/base/power/runtime.c | 6 +-
3449 drivers/base/power/sysfs.c | 2 +-
3450 drivers/base/power/wakeup.c | 8 +-
3451 drivers/base/regmap/regmap-debugfs.c | 4 +-
3452 drivers/base/regmap/regmap.c | 4 +-
3453 drivers/base/syscore.c | 4 +-
3454 drivers/block/cciss.c | 28 +-
3455 drivers/block/cciss.h | 2 +-
3456 drivers/block/cpqarray.c | 28 +-
3457 drivers/block/cpqarray.h | 2 +-
3458 drivers/block/drbd/drbd_bitmap.c | 2 +-
3459 drivers/block/drbd/drbd_int.h | 8 +-
3460 drivers/block/drbd/drbd_main.c | 12 +-
3461 drivers/block/drbd/drbd_nl.c | 4 +-
3462 drivers/block/drbd/drbd_receiver.c | 38 +-
3463 drivers/block/drbd/drbd_worker.c | 14 +-
3464 drivers/block/pktcdvd.c | 4 +-
3465 drivers/block/rbd.c | 2 +-
3466 drivers/bluetooth/btwilink.c | 2 +-
3467 drivers/bus/arm-cci.c | 12 +-
3468 drivers/cdrom/cdrom.c | 11 +-
3469 drivers/cdrom/gdrom.c | 1 -
3470 drivers/char/agp/compat_ioctl.c | 2 +-
3471 drivers/char/agp/frontend.c | 4 +-
3472 drivers/char/agp/intel-gtt.c | 4 +-
3473 drivers/char/hpet.c | 2 +-
3474 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
3475 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
3476 drivers/char/ipmi/ipmi_ssif.c | 12 +-
3477 drivers/char/mem.c | 47 +-
3478 drivers/char/nvram.c | 2 +-
3479 drivers/char/pcmcia/synclink_cs.c | 16 +-
3480 drivers/char/random.c | 12 +-
3481 drivers/char/sonypi.c | 11 +-
3482 drivers/char/tpm/tpm_acpi.c | 3 +-
3483 drivers/char/tpm/tpm_eventlog.c | 5 +-
3484 drivers/char/virtio_console.c | 6 +-
3485 drivers/clk/clk-composite.c | 2 +-
3486 drivers/clk/samsung/clk.h | 2 +-
3487 drivers/clk/socfpga/clk-gate.c | 9 +-
3488 drivers/clk/socfpga/clk-pll.c | 9 +-
3489 drivers/clk/ti/clk.c | 8 +-
3490 drivers/cpufreq/acpi-cpufreq.c | 17 +-
3491 drivers/cpufreq/cpufreq-dt.c | 4 +-
3492 drivers/cpufreq/cpufreq.c | 30 +-
3493 drivers/cpufreq/cpufreq_governor.c | 2 +-
3494 drivers/cpufreq/cpufreq_governor.h | 4 +-
3495 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
3496 drivers/cpufreq/intel_pstate.c | 38 +-
3497 drivers/cpufreq/p4-clockmod.c | 12 +-
3498 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
3499 drivers/cpufreq/speedstep-centrino.c | 7 +-
3500 drivers/cpuidle/driver.c | 2 +-
3501 drivers/cpuidle/dt_idle_states.c | 2 +-
3502 drivers/cpuidle/governor.c | 2 +-
3503 drivers/cpuidle/sysfs.c | 2 +-
3504 drivers/crypto/hifn_795x.c | 4 +-
3505 drivers/devfreq/devfreq.c | 4 +-
3506 drivers/dma/sh/shdma-base.c | 4 +-
3507 drivers/dma/sh/shdmac.c | 2 +-
3508 drivers/edac/edac_device.c | 4 +-
3509 drivers/edac/edac_mc_sysfs.c | 2 +-
3510 drivers/edac/edac_pci.c | 4 +-
3511 drivers/edac/edac_pci_sysfs.c | 22 +-
3512 drivers/edac/mce_amd.h | 2 +-
3513 drivers/firewire/core-card.c | 6 +-
3514 drivers/firewire/core-device.c | 2 +-
3515 drivers/firewire/core-transaction.c | 1 +
3516 drivers/firewire/core.h | 1 +
3517 drivers/firmware/dmi-id.c | 2 +-
3518 drivers/firmware/dmi_scan.c | 12 +-
3519 drivers/firmware/efi/cper.c | 8 +-
3520 drivers/firmware/efi/efi.c | 12 +-
3521 drivers/firmware/efi/efivars.c | 2 +-
3522 drivers/firmware/efi/runtime-map.c | 2 +-
3523 drivers/firmware/google/gsmi.c | 2 +-
3524 drivers/firmware/google/memconsole.c | 7 +-
3525 drivers/firmware/memmap.c | 2 +-
3526 drivers/firmware/psci.c | 2 +-
3527 drivers/gpio/gpio-davinci.c | 6 +-
3528 drivers/gpio/gpio-em.c | 2 +-
3529 drivers/gpio/gpio-ich.c | 2 +-
3530 drivers/gpio/gpio-omap.c | 4 +-
3531 drivers/gpio/gpio-rcar.c | 2 +-
3532 drivers/gpio/gpio-vr41xx.c | 2 +-
3533 drivers/gpio/gpiolib.c | 12 +-
3534 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
3535 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
3536 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
3537 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
3538 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
3539 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
3540 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
3541 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
3542 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
3543 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
3544 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
3545 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
3546 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
3547 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
3548 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
3549 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
3550 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
3551 drivers/gpu/drm/armada/armada_drv.c | 3 +-
3552 drivers/gpu/drm/drm_crtc.c | 2 +-
3553 drivers/gpu/drm/drm_drv.c | 2 +-
3554 drivers/gpu/drm/drm_fops.c | 12 +-
3555 drivers/gpu/drm/drm_global.c | 14 +-
3556 drivers/gpu/drm/drm_info.c | 13 +-
3557 drivers/gpu/drm/drm_ioc32.c | 13 +-
3558 drivers/gpu/drm/drm_ioctl.c | 2 +-
3559 drivers/gpu/drm/drm_pci.c | 9 +-
3560 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
3561 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
3562 drivers/gpu/drm/gma500/psb_drv.c | 1 -
3563 drivers/gpu/drm/i810/i810_dma.c | 2 +-
3564 drivers/gpu/drm/i810/i810_drv.c | 6 +-
3565 drivers/gpu/drm/i810/i810_drv.h | 6 +-
3566 drivers/gpu/drm/i915/i915_dma.c | 4 +-
3567 drivers/gpu/drm/i915/i915_drv.c | 7 +-
3568 drivers/gpu/drm/i915/i915_drv.h | 2 +-
3569 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
3570 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
3571 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
3572 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
3573 drivers/gpu/drm/i915/i915_irq.c | 88 +-
3574 drivers/gpu/drm/i915/intel_display.c | 26 +-
3575 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
3576 drivers/gpu/drm/mga/mga_drv.c | 5 +-
3577 drivers/gpu/drm/mga/mga_drv.h | 6 +-
3578 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
3579 drivers/gpu/drm/mga/mga_irq.c | 8 +-
3580 drivers/gpu/drm/mga/mga_state.c | 2 +-
3581 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
3582 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
3583 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
3584 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
3585 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
3586 drivers/gpu/drm/omapdrm/Makefile | 2 +-
3587 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
3588 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
3589 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
3590 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
3591 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
3592 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
3593 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
3594 drivers/gpu/drm/r128/r128_cce.c | 2 +-
3595 drivers/gpu/drm/r128/r128_drv.c | 4 +-
3596 drivers/gpu/drm/r128/r128_drv.h | 6 +-
3597 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
3598 drivers/gpu/drm/r128/r128_irq.c | 4 +-
3599 drivers/gpu/drm/r128/r128_state.c | 6 +-
3600 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
3601 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
3602 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
3603 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
3604 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
3605 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
3606 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
3607 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
3608 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
3609 drivers/gpu/drm/savage/savage_bci.c | 2 +-
3610 drivers/gpu/drm/savage/savage_drv.c | 5 +-
3611 drivers/gpu/drm/savage/savage_drv.h | 2 +-
3612 drivers/gpu/drm/sis/sis_drv.c | 5 +-
3613 drivers/gpu/drm/sis/sis_drv.h | 2 +-
3614 drivers/gpu/drm/sis/sis_mm.c | 2 +-
3615 drivers/gpu/drm/tegra/dc.c | 2 +-
3616 drivers/gpu/drm/tegra/dsi.c | 2 +-
3617 drivers/gpu/drm/tegra/hdmi.c | 2 +-
3618 drivers/gpu/drm/tegra/sor.c | 7 +-
3619 drivers/gpu/drm/tilcdc/Makefile | 6 +-
3620 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
3621 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
3622 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
3623 drivers/gpu/drm/udl/udl_fb.c | 1 -
3624 drivers/gpu/drm/via/via_dma.c | 2 +-
3625 drivers/gpu/drm/via/via_drv.c | 5 +-
3626 drivers/gpu/drm/via/via_drv.h | 6 +-
3627 drivers/gpu/drm/via/via_irq.c | 18 +-
3628 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
3629 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
3630 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
3631 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
3632 drivers/gpu/vga/vga_switcheroo.c | 4 +-
3633 drivers/hid/hid-core.c | 4 +-
3634 drivers/hid/hid-sensor-custom.c | 2 +-
3635 drivers/hv/channel.c | 6 +-
3636 drivers/hv/hv.c | 4 +-
3637 drivers/hv/hv_balloon.c | 18 +-
3638 drivers/hv/hyperv_vmbus.h | 2 +-
3639 drivers/hwmon/acpi_power_meter.c | 6 +-
3640 drivers/hwmon/applesmc.c | 2 +-
3641 drivers/hwmon/asus_atk0110.c | 10 +-
3642 drivers/hwmon/coretemp.c | 2 +-
3643 drivers/hwmon/dell-smm-hwmon.c | 2 +-
3644 drivers/hwmon/ibmaem.c | 2 +-
3645 drivers/hwmon/iio_hwmon.c | 2 +-
3646 drivers/hwmon/nct6683.c | 6 +-
3647 drivers/hwmon/nct6775.c | 6 +-
3648 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
3649 drivers/hwmon/sht15.c | 12 +-
3650 drivers/hwmon/via-cputemp.c | 2 +-
3651 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
3652 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
3653 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
3654 drivers/i2c/i2c-dev.c | 2 +-
3655 drivers/ide/ide-cd.c | 2 +-
3656 drivers/ide/ide-disk.c | 2 +-
3657 drivers/iio/industrialio-core.c | 2 +-
3658 drivers/iio/magnetometer/ak8975.c | 2 +-
3659 drivers/infiniband/core/cm.c | 32 +-
3660 drivers/infiniband/core/fmr_pool.c | 20 +-
3661 drivers/infiniband/core/netlink.c | 5 +-
3662 drivers/infiniband/core/uverbs_cmd.c | 3 +
3663 drivers/infiniband/hw/cxgb4/device.c | 6 +-
3664 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
3665 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
3666 drivers/infiniband/hw/mlx4/mad.c | 2 +-
3667 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
3668 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
3669 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
3670 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
3671 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
3672 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
3673 drivers/infiniband/hw/nes/nes.c | 4 +-
3674 drivers/infiniband/hw/nes/nes.h | 40 +-
3675 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
3676 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
3677 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
3678 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
3679 drivers/infiniband/hw/qib/qib.h | 1 +
3680 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
3681 drivers/input/evdev.c | 2 +-
3682 drivers/input/gameport/gameport.c | 4 +-
3683 drivers/input/input.c | 4 +-
3684 drivers/input/joystick/sidewinder.c | 1 +
3685 drivers/input/misc/ims-pcu.c | 4 +-
3686 drivers/input/mouse/psmouse.h | 2 +-
3687 drivers/input/mousedev.c | 2 +-
3688 drivers/input/serio/serio.c | 4 +-
3689 drivers/input/serio/serio_raw.c | 4 +-
3690 drivers/input/touchscreen/htcpen.c | 2 +-
3691 drivers/iommu/arm-smmu-v3.c | 2 +-
3692 drivers/iommu/arm-smmu.c | 43 +-
3693 drivers/iommu/io-pgtable-arm.c | 101 +-
3694 drivers/iommu/io-pgtable.c | 11 +-
3695 drivers/iommu/io-pgtable.h | 19 +-
3696 drivers/iommu/iommu.c | 2 +-
3697 drivers/iommu/ipmmu-vmsa.c | 13 +-
3698 drivers/iommu/irq_remapping.c | 2 +-
3699 drivers/irqchip/irq-gic.c | 2 +-
3700 drivers/irqchip/irq-i8259.c | 2 +-
3701 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
3702 drivers/isdn/capi/capi.c | 10 +-
3703 drivers/isdn/gigaset/interface.c | 8 +-
3704 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
3705 drivers/isdn/hardware/avm/b1.c | 4 +-
3706 drivers/isdn/i4l/isdn_common.c | 2 +
3707 drivers/isdn/i4l/isdn_tty.c | 22 +-
3708 drivers/isdn/icn/icn.c | 2 +-
3709 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
3710 drivers/lguest/core.c | 10 +-
3711 drivers/lguest/page_tables.c | 2 +-
3712 drivers/lguest/x86/core.c | 12 +-
3713 drivers/lguest/x86/switcher_32.S | 27 +-
3714 drivers/md/bcache/alloc.c | 2 +-
3715 drivers/md/bcache/bcache.h | 10 +-
3716 drivers/md/bcache/btree.c | 2 +-
3717 drivers/md/bcache/closure.h | 2 +-
3718 drivers/md/bcache/io.c | 10 +-
3719 drivers/md/bcache/journal.c | 2 +-
3720 drivers/md/bcache/stats.c | 26 +-
3721 drivers/md/bcache/stats.h | 16 +-
3722 drivers/md/bcache/super.c | 2 +-
3723 drivers/md/bcache/sysfs.c | 20 +-
3724 drivers/md/bitmap.c | 2 +-
3725 drivers/md/dm-cache-target.c | 98 +-
3726 drivers/md/dm-ioctl.c | 2 +-
3727 drivers/md/dm-raid.c | 2 +-
3728 drivers/md/dm-raid1.c | 18 +-
3729 drivers/md/dm-stats.c | 6 +-
3730 drivers/md/dm-stripe.c | 10 +-
3731 drivers/md/dm-table.c | 2 +-
3732 drivers/md/dm-thin-metadata.c | 4 +-
3733 drivers/md/dm.c | 28 +-
3734 drivers/md/md.c | 37 +-
3735 drivers/md/md.h | 8 +-
3736 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3737 drivers/md/persistent-data/dm-space-map.h | 1 +
3738 drivers/md/raid1.c | 8 +-
3739 drivers/md/raid10.c | 20 +-
3740 drivers/md/raid5.c | 26 +-
3741 drivers/media/dvb-core/dvbdev.c | 2 +-
3742 drivers/media/dvb-frontends/af9033.h | 2 +-
3743 drivers/media/dvb-frontends/dib3000.h | 2 +-
3744 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3745 drivers/media/dvb-frontends/dib8000.h | 2 +-
3746 drivers/media/pci/cx88/cx88-video.c | 6 +-
3747 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
3748 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3749 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3750 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
3751 drivers/media/pci/tw68/tw68-core.c | 2 +-
3752 drivers/media/pci/zoran/zoran.h | 1 -
3753 drivers/media/pci/zoran/zoran_driver.c | 3 -
3754 drivers/media/platform/omap/omap_vout.c | 11 +-
3755 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3756 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3757 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3758 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3759 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
3760 drivers/media/radio/radio-cadet.c | 2 +
3761 drivers/media/radio/radio-maxiradio.c | 2 +-
3762 drivers/media/radio/radio-shark.c | 2 +-
3763 drivers/media/radio/radio-shark2.c | 2 +-
3764 drivers/media/radio/radio-si476x.c | 2 +-
3765 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
3766 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
3767 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3768 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
3769 drivers/memory/omap-gpmc.c | 21 +-
3770 drivers/message/fusion/mptsas.c | 34 +-
3771 drivers/mfd/ab8500-debugfs.c | 2 +-
3772 drivers/mfd/kempld-core.c | 2 +-
3773 drivers/mfd/max8925-i2c.c | 2 +-
3774 drivers/mfd/tps65910.c | 2 +-
3775 drivers/mfd/twl4030-irq.c | 9 +-
3776 drivers/misc/c2port/core.c | 4 +-
3777 drivers/misc/kgdbts.c | 4 +-
3778 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3779 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
3780 drivers/misc/mic/scif/scif_api.c | 10 +-
3781 drivers/misc/mic/scif/scif_rb.c | 8 +-
3782 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3783 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3784 drivers/misc/sgi-gru/grutables.h | 158 +-
3785 drivers/misc/sgi-xp/xp.h | 2 +-
3786 drivers/misc/sgi-xp/xpc.h | 3 +-
3787 drivers/misc/sgi-xp/xpc_main.c | 2 +-
3788 drivers/mmc/host/dw_mmc.h | 2 +-
3789 drivers/mmc/host/mmci.c | 4 +-
3790 drivers/mmc/host/omap_hsmmc.c | 4 +-
3791 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3792 drivers/mmc/host/sdhci-s3c.c | 8 +-
3793 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3794 drivers/mtd/nand/denali.c | 1 +
3795 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
3796 drivers/mtd/nftlmount.c | 1 +
3797 drivers/mtd/sm_ftl.c | 2 +-
3798 drivers/net/bonding/bond_netlink.c | 2 +-
3799 drivers/net/caif/caif_hsi.c | 2 +-
3800 drivers/net/can/Kconfig | 2 +-
3801 drivers/net/can/dev.c | 2 +-
3802 drivers/net/can/vcan.c | 2 +-
3803 drivers/net/dummy.c | 2 +-
3804 drivers/net/ethernet/8390/ax88796.c | 4 +-
3805 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
3806 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
3807 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
3808 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
3809 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3810 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
3811 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3812 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3813 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
3814 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
3815 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
3816 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3817 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3818 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3819 drivers/net/ethernet/broadcom/tg3.h | 1 +
3820 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3821 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
3822 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
3823 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
3824 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
3825 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3826 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3827 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3828 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
3829 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
3830 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
3831 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3832 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
3833 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3834 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3835 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3836 drivers/net/ethernet/realtek/r8169.c | 8 +-
3837 drivers/net/ethernet/sfc/ptp.c | 2 +-
3838 drivers/net/ethernet/sfc/selftest.c | 20 +-
3839 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
3840 drivers/net/ethernet/via/via-rhine.c | 2 +-
3841 drivers/net/geneve.c | 2 +-
3842 drivers/net/hyperv/hyperv_net.h | 2 +-
3843 drivers/net/hyperv/rndis_filter.c | 7 +-
3844 drivers/net/ifb.c | 2 +-
3845 drivers/net/ipvlan/ipvlan_core.c | 2 +-
3846 drivers/net/irda/vlsi_ir.c | 18 +-
3847 drivers/net/irda/vlsi_ir.h | 14 +-
3848 drivers/net/macvlan.c | 20 +-
3849 drivers/net/macvtap.c | 10 +-
3850 drivers/net/nlmon.c | 2 +-
3851 drivers/net/phy/phy_device.c | 6 +-
3852 drivers/net/ppp/ppp_generic.c | 4 +-
3853 drivers/net/slip/slhc.c | 2 +-
3854 drivers/net/team/team.c | 4 +-
3855 drivers/net/tun.c | 7 +-
3856 drivers/net/usb/hso.c | 23 +-
3857 drivers/net/usb/r8152.c | 2 +-
3858 drivers/net/usb/sierra_net.c | 4 +-
3859 drivers/net/virtio_net.c | 2 +-
3860 drivers/net/vrf.c | 2 +-
3861 drivers/net/vxlan.c | 4 +-
3862 drivers/net/wimax/i2400m/rx.c | 2 +-
3863 drivers/net/wireless/airo.c | 2 +-
3864 drivers/net/wireless/at76c50x-usb.c | 2 +-
3865 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3866 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3867 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3868 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3869 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3870 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3871 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3872 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3873 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3874 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3875 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3876 drivers/net/wireless/b43/phy_lp.c | 2 +-
3877 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
3878 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
3879 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
3880 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
3881 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
3882 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3883 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
3884 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
3885 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3886 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3887 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3888 drivers/of/fdt.c | 4 +-
3889 drivers/oprofile/buffer_sync.c | 8 +-
3890 drivers/oprofile/event_buffer.c | 2 +-
3891 drivers/oprofile/oprof.c | 2 +-
3892 drivers/oprofile/oprofile_stats.c | 10 +-
3893 drivers/oprofile/oprofile_stats.h | 10 +-
3894 drivers/oprofile/oprofilefs.c | 6 +-
3895 drivers/oprofile/timer_int.c | 2 +-
3896 drivers/parport/procfs.c | 4 +-
3897 drivers/pci/host/pci-host-generic.c | 2 +-
3898 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3899 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3900 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3901 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3902 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3903 drivers/pci/hotplug/pciehp_core.c | 2 +-
3904 drivers/pci/msi.c | 22 +-
3905 drivers/pci/pci-sysfs.c | 6 +-
3906 drivers/pci/pci.h | 2 +-
3907 drivers/pci/pcie/aspm.c | 6 +-
3908 drivers/pci/pcie/portdrv_pci.c | 2 +-
3909 drivers/pci/probe.c | 2 +-
3910 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3911 drivers/pinctrl/pinctrl-at91.c | 5 +-
3912 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3913 drivers/platform/x86/alienware-wmi.c | 4 +-
3914 drivers/platform/x86/compal-laptop.c | 2 +-
3915 drivers/platform/x86/hdaps.c | 2 +-
3916 drivers/platform/x86/ibm_rtl.c | 2 +-
3917 drivers/platform/x86/intel_oaktrail.c | 2 +-
3918 drivers/platform/x86/msi-laptop.c | 16 +-
3919 drivers/platform/x86/msi-wmi.c | 2 +-
3920 drivers/platform/x86/samsung-laptop.c | 2 +-
3921 drivers/platform/x86/samsung-q10.c | 2 +-
3922 drivers/platform/x86/sony-laptop.c | 14 +-
3923 drivers/platform/x86/thinkpad_acpi.c | 2 +-
3924 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3925 drivers/pnp/pnpbios/core.c | 2 +-
3926 drivers/power/pda_power.c | 7 +-
3927 drivers/power/power_supply.h | 4 +-
3928 drivers/power/power_supply_core.c | 7 +-
3929 drivers/power/power_supply_sysfs.c | 6 +-
3930 drivers/power/reset/at91-reset.c | 5 +-
3931 drivers/powercap/powercap_sys.c | 136 +-
3932 drivers/ptp/ptp_private.h | 2 +-
3933 drivers/ptp/ptp_sysfs.c | 2 +-
3934 drivers/regulator/core.c | 4 +-
3935 drivers/regulator/max8660.c | 6 +-
3936 drivers/regulator/max8973-regulator.c | 16 +-
3937 drivers/regulator/mc13892-regulator.c | 8 +-
3938 drivers/rtc/rtc-armada38x.c | 7 +-
3939 drivers/rtc/rtc-cmos.c | 4 +-
3940 drivers/rtc/rtc-ds1307.c | 2 +-
3941 drivers/rtc/rtc-m48t59.c | 4 +-
3942 drivers/rtc/rtc-rv8803.c | 15 +-
3943 drivers/rtc/rtc-test.c | 6 +-
3944 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
3945 drivers/scsi/bfa/bfa_ioc.h | 4 +-
3946 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3947 drivers/scsi/hosts.c | 4 +-
3948 drivers/scsi/hpsa.c | 38 +-
3949 drivers/scsi/hpsa.h | 2 +-
3950 drivers/scsi/hptiop.c | 2 -
3951 drivers/scsi/hptiop.h | 1 -
3952 drivers/scsi/ipr.c | 6 +-
3953 drivers/scsi/ipr.h | 2 +-
3954 drivers/scsi/libfc/fc_exch.c | 50 +-
3955 drivers/scsi/libsas/sas_ata.c | 2 +-
3956 drivers/scsi/lpfc/lpfc.h | 8 +-
3957 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3958 drivers/scsi/lpfc/lpfc_init.c | 6 +-
3959 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3960 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3961 drivers/scsi/pmcraid.c | 20 +-
3962 drivers/scsi/pmcraid.h | 8 +-
3963 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3964 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
3965 drivers/scsi/qla2xxx/qla_os.c | 6 +-
3966 drivers/scsi/qla2xxx/qla_target.c | 10 +-
3967 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3968 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3969 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
3970 drivers/scsi/scsi.c | 2 +-
3971 drivers/scsi/scsi_lib.c | 8 +-
3972 drivers/scsi/scsi_sysfs.c | 2 +-
3973 drivers/scsi/scsi_transport_fc.c | 8 +-
3974 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3975 drivers/scsi/scsi_transport_srp.c | 6 +-
3976 drivers/scsi/sd.c | 6 +-
3977 drivers/scsi/sg.c | 2 +-
3978 drivers/scsi/sr.c | 21 +-
3979 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3980 drivers/spi/spi.c | 2 +-
3981 drivers/staging/android/timed_output.c | 6 +-
3982 drivers/staging/comedi/comedi_fops.c | 8 +-
3983 drivers/staging/fbtft/fbtft-core.c | 2 +-
3984 drivers/staging/fbtft/fbtft.h | 2 +-
3985 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3986 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3987 drivers/staging/iio/adc/ad7280a.c | 4 +-
3988 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3989 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3990 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3991 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
3992 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3993 drivers/staging/octeon/ethernet-rx.c | 20 +-
3994 drivers/staging/octeon/ethernet.c | 8 +-
3995 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
3996 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
3997 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
3998 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3999 drivers/staging/sm750fb/sm750.c | 14 +-
4000 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
4001 drivers/target/sbp/sbp_target.c | 4 +-
4002 drivers/thermal/cpu_cooling.c | 9 +-
4003 drivers/thermal/devfreq_cooling.c | 19 +-
4004 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
4005 drivers/thermal/of-thermal.c | 17 +-
4006 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
4007 drivers/tty/cyclades.c | 6 +-
4008 drivers/tty/hvc/hvc_console.c | 14 +-
4009 drivers/tty/hvc/hvcs.c | 21 +-
4010 drivers/tty/hvc/hvsi.c | 22 +-
4011 drivers/tty/hvc/hvsi_lib.c | 4 +-
4012 drivers/tty/ipwireless/tty.c | 27 +-
4013 drivers/tty/moxa.c | 2 +-
4014 drivers/tty/n_gsm.c | 4 +-
4015 drivers/tty/n_tty.c | 19 +-
4016 drivers/tty/pty.c | 4 +-
4017 drivers/tty/rocket.c | 6 +-
4018 drivers/tty/serial/8250/8250_core.c | 10 +-
4019 drivers/tty/serial/ifx6x60.c | 2 +-
4020 drivers/tty/serial/ioc4_serial.c | 6 +-
4021 drivers/tty/serial/kgdb_nmi.c | 4 +-
4022 drivers/tty/serial/kgdboc.c | 32 +-
4023 drivers/tty/serial/msm_serial.c | 4 +-
4024 drivers/tty/serial/samsung.c | 9 +-
4025 drivers/tty/serial/serial_core.c | 8 +-
4026 drivers/tty/synclink.c | 34 +-
4027 drivers/tty/synclink_gt.c | 28 +-
4028 drivers/tty/synclinkmp.c | 34 +-
4029 drivers/tty/tty_io.c | 2 +-
4030 drivers/tty/tty_ldisc.c | 8 +-
4031 drivers/tty/tty_port.c | 22 +-
4032 drivers/uio/uio.c | 13 +-
4033 drivers/usb/atm/cxacru.c | 2 +-
4034 drivers/usb/atm/usbatm.c | 24 +-
4035 drivers/usb/class/cdc-acm.h | 2 +-
4036 drivers/usb/core/devices.c | 6 +-
4037 drivers/usb/core/devio.c | 12 +-
4038 drivers/usb/core/hcd.c | 4 +-
4039 drivers/usb/core/sysfs.c | 2 +-
4040 drivers/usb/core/usb.c | 2 +-
4041 drivers/usb/early/ehci-dbgp.c | 16 +-
4042 drivers/usb/gadget/function/u_serial.c | 22 +-
4043 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
4044 drivers/usb/host/ehci-hcd.c | 2 +-
4045 drivers/usb/host/ehci-hub.c | 4 +-
4046 drivers/usb/host/ehci-q.c | 4 +-
4047 drivers/usb/host/fotg210-hcd.c | 2 +-
4048 drivers/usb/host/hwa-hc.c | 2 +-
4049 drivers/usb/host/ohci-hcd.c | 2 +-
4050 drivers/usb/host/r8a66597.h | 2 +-
4051 drivers/usb/host/uhci-hcd.c | 2 +-
4052 drivers/usb/host/xhci-pci.c | 2 +-
4053 drivers/usb/host/xhci.c | 2 +-
4054 drivers/usb/misc/appledisplay.c | 4 +-
4055 drivers/usb/serial/console.c | 8 +-
4056 drivers/usb/storage/transport.c | 2 +-
4057 drivers/usb/storage/usb.c | 2 +-
4058 drivers/usb/storage/usb.h | 2 +-
4059 drivers/usb/usbip/vhci.h | 2 +-
4060 drivers/usb/usbip/vhci_hcd.c | 6 +-
4061 drivers/usb/usbip/vhci_rx.c | 2 +-
4062 drivers/usb/wusbcore/wa-hc.h | 4 +-
4063 drivers/usb/wusbcore/wa-xfer.c | 2 +-
4064 drivers/vhost/vringh.c | 20 +-
4065 drivers/video/backlight/kb3886_bl.c | 2 +-
4066 drivers/video/console/fbcon.c | 2 +-
4067 drivers/video/fbdev/aty/aty128fb.c | 2 +-
4068 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
4069 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
4070 drivers/video/fbdev/core/fb_defio.c | 6 +-
4071 drivers/video/fbdev/core/fbmem.c | 12 +-
4072 drivers/video/fbdev/hyperv_fb.c | 4 +-
4073 drivers/video/fbdev/i810/i810_accel.c | 1 +
4074 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
4075 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
4076 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
4077 drivers/video/fbdev/omap2/dss/display.c | 8 +-
4078 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
4079 drivers/video/fbdev/smscufx.c | 4 +-
4080 drivers/video/fbdev/udlfb.c | 36 +-
4081 drivers/video/fbdev/uvesafb.c | 52 +-
4082 drivers/video/fbdev/vesafb.c | 58 +-
4083 drivers/video/fbdev/via/via_clock.h | 2 +-
4084 drivers/xen/events/events_base.c | 6 +-
4085 fs/Kconfig.binfmt | 2 +-
4086 fs/afs/inode.c | 4 +-
4088 fs/autofs4/waitq.c | 2 +-
4089 fs/befs/endian.h | 6 +-
4090 fs/binfmt_aout.c | 23 +-
4091 fs/binfmt_elf.c | 670 +-
4092 fs/binfmt_elf_fdpic.c | 4 +-
4093 fs/block_dev.c | 2 +-
4094 fs/btrfs/ctree.c | 11 +-
4095 fs/btrfs/ctree.h | 4 +-
4096 fs/btrfs/delayed-inode.c | 9 +-
4097 fs/btrfs/delayed-inode.h | 6 +-
4098 fs/btrfs/delayed-ref.c | 4 +-
4099 fs/btrfs/disk-io.c | 4 +-
4100 fs/btrfs/extent_map.c | 8 +-
4101 fs/btrfs/file.c | 4 +-
4102 fs/btrfs/inode.c | 14 +-
4103 fs/btrfs/raid56.c | 32 +-
4104 fs/btrfs/super.c | 2 +-
4105 fs/btrfs/sysfs.c | 2 +-
4106 fs/btrfs/tests/btrfs-tests.c | 2 +-
4107 fs/btrfs/tests/free-space-tests.c | 8 +-
4108 fs/btrfs/transaction.c | 2 +-
4109 fs/btrfs/tree-log.c | 8 +-
4110 fs/btrfs/tree-log.h | 2 +-
4111 fs/btrfs/volumes.c | 14 +-
4112 fs/btrfs/volumes.h | 22 +-
4114 fs/cachefiles/bind.c | 6 +-
4115 fs/cachefiles/daemon.c | 8 +-
4116 fs/cachefiles/internal.h | 12 +-
4117 fs/cachefiles/namei.c | 2 +-
4118 fs/cachefiles/proc.c | 12 +-
4119 fs/ceph/dir.c | 12 +-
4120 fs/ceph/super.c | 4 +-
4121 fs/cifs/cifs_debug.c | 12 +-
4122 fs/cifs/cifsfs.c | 8 +-
4123 fs/cifs/cifsglob.h | 54 +-
4124 fs/cifs/file.c | 12 +-
4125 fs/cifs/misc.c | 4 +-
4126 fs/cifs/smb1ops.c | 80 +-
4127 fs/cifs/smb2ops.c | 84 +-
4128 fs/cifs/smb2pdu.c | 3 +-
4129 fs/coda/cache.c | 10 +-
4131 fs/compat_binfmt_elf.c | 2 +
4132 fs/compat_ioctl.c | 12 +-
4133 fs/configfs/dir.c | 10 +-
4134 fs/coredump.c | 18 +-
4136 fs/ecryptfs/inode.c | 2 +-
4137 fs/ecryptfs/miscdev.c | 2 +-
4139 fs/ext2/xattr.c | 5 +-
4140 fs/ext4/ext4.h | 20 +-
4141 fs/ext4/mballoc.c | 44 +-
4142 fs/ext4/resize.c | 16 +-
4143 fs/ext4/super.c | 2 +-
4144 fs/ext4/sysfs.c | 2 +-
4145 fs/ext4/xattr.c | 5 +-
4148 fs/fs-writeback.c | 11 +-
4149 fs/fs_struct.c | 8 +-
4150 fs/fscache/cookie.c | 40 +-
4151 fs/fscache/internal.h | 202 +-
4152 fs/fscache/object.c | 26 +-
4153 fs/fscache/operation.c | 38 +-
4154 fs/fscache/page.c | 110 +-
4155 fs/fscache/stats.c | 348 +-
4156 fs/fuse/cuse.c | 10 +-
4157 fs/fuse/dev.c | 4 +-
4158 fs/gfs2/file.c | 2 +-
4159 fs/gfs2/glock.c | 22 +-
4160 fs/gfs2/glops.c | 4 +-
4161 fs/gfs2/quota.c | 6 +-
4162 fs/hugetlbfs/inode.c | 13 +-
4164 fs/jbd2/commit.c | 2 +-
4165 fs/jbd2/transaction.c | 4 +-
4166 fs/jffs2/erase.c | 3 +-
4167 fs/jffs2/wbuf.c | 3 +-
4168 fs/jfs/super.c | 2 +-
4169 fs/kernfs/dir.c | 2 +-
4170 fs/kernfs/file.c | 20 +-
4172 fs/lockd/clntproc.c | 4 +-
4174 fs/namespace.c | 16 +-
4175 fs/nfs/callback_xdr.c | 2 +-
4176 fs/nfs/inode.c | 6 +-
4177 fs/nfsd/nfs4proc.c | 2 +-
4178 fs/nfsd/nfs4xdr.c | 2 +-
4179 fs/nfsd/nfscache.c | 11 +-
4180 fs/nfsd/vfs.c | 6 +-
4181 fs/nls/nls_base.c | 26 +-
4182 fs/nls/nls_euc-jp.c | 6 +-
4183 fs/nls/nls_koi8-ru.c | 6 +-
4184 fs/notify/fanotify/fanotify_user.c | 4 +-
4185 fs/notify/notification.c | 4 +-
4186 fs/ntfs/dir.c | 2 +-
4187 fs/ntfs/super.c | 6 +-
4188 fs/ocfs2/dlm/dlmcommon.h | 4 +-
4189 fs/ocfs2/dlm/dlmdebug.c | 10 +-
4190 fs/ocfs2/dlm/dlmdomain.c | 4 +-
4191 fs/ocfs2/dlm/dlmmaster.c | 4 +-
4192 fs/ocfs2/localalloc.c | 2 +-
4193 fs/ocfs2/ocfs2.h | 10 +-
4194 fs/ocfs2/suballoc.c | 12 +-
4195 fs/ocfs2/super.c | 20 +-
4196 fs/overlayfs/copy_up.c | 2 +-
4198 fs/posix_acl.c | 4 +-
4199 fs/proc/array.c | 20 +
4200 fs/proc/base.c | 4 +-
4201 fs/proc/kcore.c | 34 +-
4202 fs/proc/meminfo.c | 2 +-
4203 fs/proc/nommu.c | 2 +-
4204 fs/proc/proc_sysctl.c | 26 +-
4205 fs/proc/task_mmu.c | 42 +-
4206 fs/proc/task_nommu.c | 4 +-
4207 fs/proc/vmcore.c | 16 +-
4208 fs/qnx6/qnx6.h | 4 +-
4209 fs/quota/netlink.c | 4 +-
4210 fs/read_write.c | 2 +-
4212 fs/reiserfs/do_balan.c | 2 +-
4213 fs/reiserfs/procfs.c | 2 +-
4214 fs/reiserfs/reiserfs.h | 4 +-
4215 fs/seq_file.c | 4 +-
4217 fs/squashfs/xattr.c | 12 +-
4219 fs/sysv/sysv.h | 2 +-
4220 fs/tracefs/inode.c | 8 +-
4221 fs/udf/misc.c | 2 +-
4222 fs/ufs/swab.h | 4 +-
4223 fs/userfaultfd.c | 2 +-
4225 fs/xfs/libxfs/xfs_bmap.c | 2 +-
4226 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
4227 fs/xfs/xfs_dir2_readdir.c | 7 +-
4228 fs/xfs/xfs_ioctl.c | 2 +-
4229 fs/xfs/xfs_linux.h | 4 +-
4230 include/acpi/ghes.h | 2 +-
4231 include/asm-generic/4level-fixup.h | 2 +
4232 include/asm-generic/atomic-long.h | 176 +-
4233 include/asm-generic/atomic64.h | 12 +
4234 include/asm-generic/bitops/__fls.h | 2 +-
4235 include/asm-generic/bitops/fls.h | 2 +-
4236 include/asm-generic/bitops/fls64.h | 4 +-
4237 include/asm-generic/bug.h | 6 +-
4238 include/asm-generic/cache.h | 4 +-
4239 include/asm-generic/emergency-restart.h | 2 +-
4240 include/asm-generic/kmap_types.h | 4 +-
4241 include/asm-generic/local.h | 13 +
4242 include/asm-generic/pgtable-nopmd.h | 18 +-
4243 include/asm-generic/pgtable-nopud.h | 15 +-
4244 include/asm-generic/pgtable.h | 16 +
4245 include/asm-generic/sections.h | 1 +
4246 include/asm-generic/uaccess.h | 16 +
4247 include/asm-generic/vmlinux.lds.h | 15 +-
4248 include/crypto/algapi.h | 2 +-
4249 include/drm/drmP.h | 19 +-
4250 include/drm/drm_crtc_helper.h | 2 +-
4251 include/drm/drm_mm.h | 2 +-
4252 include/drm/i915_pciids.h | 2 +-
4253 include/drm/intel-gtt.h | 4 +-
4254 include/drm/ttm/ttm_memory.h | 2 +-
4255 include/drm/ttm/ttm_page_alloc.h | 1 +
4256 include/keys/asymmetric-subtype.h | 2 +-
4257 include/linux/atmdev.h | 4 +-
4258 include/linux/atomic.h | 2 +-
4259 include/linux/audit.h | 2 +-
4260 include/linux/average.h | 2 +-
4261 include/linux/binfmts.h | 3 +-
4262 include/linux/bitmap.h | 2 +-
4263 include/linux/bitops.h | 8 +-
4264 include/linux/blk-cgroup.h | 24 +-
4265 include/linux/blkdev.h | 2 +-
4266 include/linux/blktrace_api.h | 2 +-
4267 include/linux/cache.h | 8 +
4268 include/linux/cdrom.h | 1 -
4269 include/linux/cleancache.h | 2 +-
4270 include/linux/clk-provider.h | 1 +
4271 include/linux/compat.h | 6 +-
4272 include/linux/compiler-gcc.h | 28 +-
4273 include/linux/compiler.h | 193 +-
4274 include/linux/configfs.h | 2 +-
4275 include/linux/cpufreq.h | 3 +-
4276 include/linux/cpuidle.h | 5 +-
4277 include/linux/cpumask.h | 14 +-
4278 include/linux/crypto.h | 4 +-
4279 include/linux/ctype.h | 2 +-
4280 include/linux/dcache.h | 4 +-
4281 include/linux/decompress/mm.h | 2 +-
4282 include/linux/devfreq.h | 2 +-
4283 include/linux/device.h | 7 +-
4284 include/linux/dma-mapping.h | 2 +-
4285 include/linux/efi.h | 1 +
4286 include/linux/elf.h | 2 +
4287 include/linux/err.h | 4 +-
4288 include/linux/extcon.h | 2 +-
4289 include/linux/fb.h | 3 +-
4290 include/linux/fdtable.h | 2 +-
4291 include/linux/fs.h | 5 +-
4292 include/linux/fs_struct.h | 2 +-
4293 include/linux/fscache-cache.h | 2 +-
4294 include/linux/fscache.h | 2 +-
4295 include/linux/fsnotify.h | 2 +-
4296 include/linux/genhd.h | 4 +-
4297 include/linux/genl_magic_func.h | 2 +-
4298 include/linux/gfp.h | 12 +-
4299 include/linux/highmem.h | 12 +
4300 include/linux/hwmon-sysfs.h | 6 +-
4301 include/linux/i2c.h | 1 +
4302 include/linux/if_pppox.h | 2 +-
4303 include/linux/init.h | 12 +-
4304 include/linux/init_task.h | 7 +
4305 include/linux/interrupt.h | 6 +-
4306 include/linux/iommu.h | 2 +-
4307 include/linux/ioport.h | 2 +-
4308 include/linux/ipc.h | 2 +-
4309 include/linux/irq.h | 5 +-
4310 include/linux/irqdesc.h | 2 +-
4311 include/linux/irqdomain.h | 3 +
4312 include/linux/jbd2.h | 2 +-
4313 include/linux/jiffies.h | 16 +-
4314 include/linux/key-type.h | 2 +-
4315 include/linux/kgdb.h | 6 +-
4316 include/linux/kmemleak.h | 4 +-
4317 include/linux/kobject.h | 3 +-
4318 include/linux/kobject_ns.h | 2 +-
4319 include/linux/kref.h | 2 +-
4320 include/linux/libata.h | 2 +-
4321 include/linux/linkage.h | 1 +
4322 include/linux/list.h | 15 +
4323 include/linux/lockref.h | 26 +-
4324 include/linux/math64.h | 10 +-
4325 include/linux/mempolicy.h | 7 +
4326 include/linux/mm.h | 102 +-
4327 include/linux/mm_types.h | 20 +
4328 include/linux/mmiotrace.h | 4 +-
4329 include/linux/mmzone.h | 2 +-
4330 include/linux/mod_devicetable.h | 4 +-
4331 include/linux/module.h | 69 +-
4332 include/linux/moduleloader.h | 16 +
4333 include/linux/moduleparam.h | 4 +-
4334 include/linux/net.h | 2 +-
4335 include/linux/netdevice.h | 7 +-
4336 include/linux/netfilter.h | 2 +-
4337 include/linux/netfilter/nfnetlink.h | 2 +-
4338 include/linux/netlink.h | 12 +-
4339 include/linux/nls.h | 4 +-
4340 include/linux/notifier.h | 3 +-
4341 include/linux/oprofile.h | 4 +-
4342 include/linux/padata.h | 2 +-
4343 include/linux/pci_hotplug.h | 3 +-
4344 include/linux/percpu.h | 2 +-
4345 include/linux/perf_event.h | 12 +-
4346 include/linux/pipe_fs_i.h | 8 +-
4347 include/linux/pm.h | 1 +
4348 include/linux/pm_domain.h | 2 +-
4349 include/linux/pm_runtime.h | 2 +-
4350 include/linux/pnp.h | 2 +-
4351 include/linux/poison.h | 4 +-
4352 include/linux/power/smartreflex.h | 2 +-
4353 include/linux/ppp-comp.h | 2 +-
4354 include/linux/preempt.h | 21 +
4355 include/linux/proc_ns.h | 2 +-
4356 include/linux/psci.h | 2 +-
4357 include/linux/quota.h | 2 +-
4358 include/linux/random.h | 19 +-
4359 include/linux/rculist.h | 16 +
4360 include/linux/rcupdate.h | 8 +
4361 include/linux/reboot.h | 14 +-
4362 include/linux/regset.h | 3 +-
4363 include/linux/relay.h | 2 +-
4364 include/linux/rio.h | 2 +-
4365 include/linux/rmap.h | 4 +-
4366 include/linux/sched.h | 76 +-
4367 include/linux/sched/sysctl.h | 1 +
4368 include/linux/scif.h | 2 +-
4369 include/linux/semaphore.h | 2 +-
4370 include/linux/seq_file.h | 1 +
4371 include/linux/seqlock.h | 10 +
4372 include/linux/signal.h | 2 +-
4373 include/linux/skbuff.h | 12 +-
4374 include/linux/slab.h | 47 +-
4375 include/linux/slab_def.h | 14 +-
4376 include/linux/slub_def.h | 2 +-
4377 include/linux/smp.h | 2 +
4378 include/linux/sock_diag.h | 2 +-
4379 include/linux/sonet.h | 2 +-
4380 include/linux/spinlock.h | 17 +-
4381 include/linux/srcu.h | 5 +-
4382 include/linux/sunrpc/addr.h | 8 +-
4383 include/linux/sunrpc/clnt.h | 2 +-
4384 include/linux/sunrpc/svc.h | 2 +-
4385 include/linux/sunrpc/svc_rdma.h | 18 +-
4386 include/linux/sunrpc/svcauth.h | 2 +-
4387 include/linux/swapops.h | 10 +-
4388 include/linux/swiotlb.h | 3 +-
4389 include/linux/syscalls.h | 23 +-
4390 include/linux/syscore_ops.h | 2 +-
4391 include/linux/sysctl.h | 3 +-
4392 include/linux/sysfs.h | 9 +-
4393 include/linux/sysrq.h | 3 +-
4394 include/linux/tcp.h | 14 +-
4395 include/linux/thread_info.h | 7 +
4396 include/linux/tty.h | 4 +-
4397 include/linux/tty_driver.h | 2 +-
4398 include/linux/tty_ldisc.h | 2 +-
4399 include/linux/types.h | 16 +
4400 include/linux/uaccess.h | 2 +-
4401 include/linux/uio_driver.h | 2 +-
4402 include/linux/unaligned/access_ok.h | 24 +-
4403 include/linux/usb.h | 12 +-
4404 include/linux/usb/hcd.h | 1 +
4405 include/linux/usb/renesas_usbhs.h | 2 +-
4406 include/linux/vermagic.h | 21 +-
4407 include/linux/vga_switcheroo.h | 8 +-
4408 include/linux/vmalloc.h | 7 +-
4409 include/linux/vmstat.h | 24 +-
4410 include/linux/writeback.h | 3 +-
4411 include/linux/xattr.h | 5 +-
4412 include/linux/zlib.h | 3 +-
4413 include/media/v4l2-dev.h | 2 +-
4414 include/media/v4l2-device.h | 2 +-
4415 include/net/9p/transport.h | 2 +-
4416 include/net/bluetooth/l2cap.h | 2 +-
4417 include/net/bonding.h | 2 +-
4418 include/net/caif/cfctrl.h | 6 +-
4419 include/net/cfg802154.h | 2 +-
4420 include/net/flow.h | 2 +-
4421 include/net/genetlink.h | 2 +-
4422 include/net/gro_cells.h | 2 +-
4423 include/net/inet_connection_sock.h | 2 +-
4424 include/net/inet_sock.h | 2 +-
4425 include/net/inetpeer.h | 2 +-
4426 include/net/ip_fib.h | 2 +-
4427 include/net/ip_vs.h | 8 +-
4428 include/net/ipv6.h | 2 +-
4429 include/net/irda/ircomm_tty.h | 1 +
4430 include/net/iucv/af_iucv.h | 2 +-
4431 include/net/llc_c_ac.h | 2 +-
4432 include/net/llc_c_ev.h | 4 +-
4433 include/net/llc_c_st.h | 2 +-
4434 include/net/llc_s_ac.h | 2 +-
4435 include/net/llc_s_st.h | 2 +-
4436 include/net/mac80211.h | 6 +-
4437 include/net/neighbour.h | 4 +-
4438 include/net/net_namespace.h | 18 +-
4439 include/net/netlink.h | 2 +-
4440 include/net/netns/conntrack.h | 6 +-
4441 include/net/netns/ipv4.h | 4 +-
4442 include/net/netns/ipv6.h | 4 +-
4443 include/net/netns/xfrm.h | 2 +-
4444 include/net/ping.h | 2 +-
4445 include/net/protocol.h | 4 +-
4446 include/net/rtnetlink.h | 2 +-
4447 include/net/sctp/checksum.h | 4 +-
4448 include/net/sctp/sm.h | 4 +-
4449 include/net/sctp/structs.h | 2 +-
4450 include/net/snmp.h | 10 +-
4451 include/net/sock.h | 12 +-
4452 include/net/tcp.h | 8 +-
4453 include/net/xfrm.h | 13 +-
4454 include/rdma/iw_cm.h | 2 +-
4455 include/scsi/libfc.h | 3 +-
4456 include/scsi/scsi_device.h | 6 +-
4457 include/scsi/scsi_driver.h | 2 +-
4458 include/scsi/scsi_transport_fc.h | 3 +-
4459 include/scsi/sg.h | 2 +-
4460 include/sound/compress_driver.h | 2 +-
4461 include/sound/soc.h | 4 +-
4462 include/trace/events/irq.h | 4 +-
4463 include/uapi/linux/a.out.h | 8 +
4464 include/uapi/linux/bcache.h | 5 +-
4465 include/uapi/linux/byteorder/little_endian.h | 28 +-
4466 include/uapi/linux/connector.h | 2 +-
4467 include/uapi/linux/elf.h | 28 +
4468 include/uapi/linux/screen_info.h | 2 +-
4469 include/uapi/linux/swab.h | 6 +-
4470 include/uapi/linux/xattr.h | 4 +
4471 include/video/udlfb.h | 8 +-
4472 include/video/uvesafb.h | 1 +
4475 init/do_mounts.c | 14 +-
4476 init/do_mounts.h | 8 +-
4477 init/do_mounts_initrd.c | 30 +-
4478 init/do_mounts_md.c | 6 +-
4479 init/init_task.c | 4 +
4480 init/initramfs.c | 38 +-
4483 ipc/ipc_sysctl.c | 14 +-
4484 ipc/mq_sysctl.c | 4 +-
4487 kernel/audit.c | 8 +-
4488 kernel/auditsc.c | 4 +-
4489 kernel/bpf/core.c | 7 +-
4490 kernel/capability.c | 3 +
4491 kernel/compat.c | 38 +-
4492 kernel/debug/debug_core.c | 16 +-
4493 kernel/debug/kdb/kdb_main.c | 4 +-
4494 kernel/events/core.c | 30 +-
4495 kernel/events/internal.h | 10 +-
4496 kernel/events/uprobes.c | 2 +-
4497 kernel/exit.c | 27 +-
4498 kernel/fork.c | 175 +-
4499 kernel/futex.c | 11 +-
4500 kernel/futex_compat.c | 2 +-
4501 kernel/gcov/base.c | 7 +-
4502 kernel/irq/manage.c | 2 +-
4503 kernel/irq/msi.c | 19 +-
4504 kernel/irq/spurious.c | 2 +-
4505 kernel/jump_label.c | 5 +
4506 kernel/kallsyms.c | 37 +-
4507 kernel/kexec.c | 3 +-
4508 kernel/kmod.c | 8 +-
4509 kernel/kprobes.c | 4 +-
4510 kernel/ksysfs.c | 2 +-
4511 kernel/locking/lockdep.c | 7 +-
4512 kernel/locking/mutex-debug.c | 12 +-
4513 kernel/locking/mutex-debug.h | 4 +-
4514 kernel/locking/mutex.c | 6 +-
4515 kernel/module.c | 422 +-
4516 kernel/notifier.c | 17 +-
4517 kernel/padata.c | 4 +-
4518 kernel/panic.c | 5 +-
4520 kernel/pid_namespace.c | 2 +-
4521 kernel/power/process.c | 12 +-
4522 kernel/profile.c | 14 +-
4523 kernel/ptrace.c | 8 +-
4524 kernel/rcu/rcutorture.c | 60 +-
4525 kernel/rcu/tiny.c | 4 +-
4526 kernel/rcu/tree.c | 42 +-
4527 kernel/rcu/tree.h | 16 +-
4528 kernel/rcu/tree_plugin.h | 18 +-
4529 kernel/rcu/tree_trace.c | 14 +-
4530 kernel/resource.c | 4 +-
4531 kernel/sched/auto_group.c | 4 +-
4532 kernel/sched/core.c | 45 +-
4533 kernel/sched/fair.c | 2 +-
4534 kernel/sched/sched.h | 2 +-
4535 kernel/signal.c | 24 +-
4536 kernel/smpboot.c | 4 +-
4537 kernel/softirq.c | 12 +-
4538 kernel/sys.c | 10 +-
4539 kernel/sysctl.c | 34 +-
4540 kernel/time/alarmtimer.c | 2 +-
4541 kernel/time/posix-cpu-timers.c | 4 +-
4542 kernel/time/posix-timers.c | 24 +-
4543 kernel/time/timer.c | 2 +-
4544 kernel/time/timer_stats.c | 10 +-
4545 kernel/trace/blktrace.c | 6 +-
4546 kernel/trace/ftrace.c | 15 +-
4547 kernel/trace/ring_buffer.c | 96 +-
4548 kernel/trace/trace.c | 2 +-
4549 kernel/trace/trace.h | 2 +-
4550 kernel/trace/trace_clock.c | 4 +-
4551 kernel/trace/trace_events.c | 1 -
4552 kernel/trace/trace_functions_graph.c | 4 +-
4553 kernel/trace/trace_mmiotrace.c | 8 +-
4554 kernel/trace/trace_output.c | 10 +-
4555 kernel/trace/trace_seq.c | 2 +-
4556 kernel/trace/trace_stack.c | 2 +-
4557 kernel/user.c | 2 +-
4558 kernel/user_namespace.c | 2 +-
4559 kernel/utsname_sysctl.c | 2 +-
4560 kernel/watchdog.c | 2 +-
4561 kernel/workqueue.c | 8 +-
4562 lib/Kconfig.debug | 8 +-
4566 lib/debugobjects.c | 2 +-
4567 lib/decompress_bunzip2.c | 3 +-
4568 lib/decompress_unlzma.c | 4 +-
4570 lib/dma-debug.c | 4 +-
4571 lib/inflate.c | 2 +-
4572 lib/ioremap.c | 4 +-
4573 lib/kobject.c | 4 +-
4574 lib/list_debug.c | 126 +-
4575 lib/lockref.c | 44 +-
4576 lib/percpu-refcount.c | 2 +-
4577 lib/radix-tree.c | 2 +-
4578 lib/random32.c | 2 +-
4579 lib/rhashtable.c | 4 +-
4580 lib/show_mem.c | 2 +-
4581 lib/strncpy_from_user.c | 2 +-
4582 lib/strnlen_user.c | 2 +-
4583 lib/swiotlb.c | 2 +-
4584 lib/usercopy.c | 6 +
4585 lib/vsprintf.c | 12 +-
4587 mm/backing-dev.c | 4 +-
4592 mm/hugetlb.c | 70 +-
4594 mm/maccess.c | 12 +-
4596 mm/memory-failure.c | 6 +-
4597 mm/memory.c | 424 +-
4598 mm/mempolicy.c | 25 +
4602 mm/mprotect.c | 137 +-
4605 mm/page-writeback.c | 2 +-
4606 mm/page_alloc.c | 50 +-
4608 mm/process_vm_access.c | 14 +-
4613 mm/slab_common.c | 86 +-
4616 mm/sparse-vmemmap.c | 4 +-
4619 mm/swapfile.c | 12 +-
4621 mm/vmalloc.c | 114 +-
4623 net/8021q/vlan.c | 5 +-
4624 net/8021q/vlan_netlink.c | 2 +-
4626 net/9p/trans_fd.c | 2 +-
4627 net/atm/atm_misc.c | 8 +-
4628 net/atm/lec.h | 2 +-
4629 net/atm/proc.c | 6 +-
4630 net/atm/resources.c | 4 +-
4631 net/ax25/sysctl_net_ax25.c | 2 +-
4632 net/batman-adv/bat_iv_ogm.c | 8 +-
4633 net/batman-adv/fragmentation.c | 2 +-
4634 net/batman-adv/routing.c | 4 +-
4635 net/batman-adv/soft-interface.c | 10 +-
4636 net/batman-adv/translation-table.c | 14 +-
4637 net/batman-adv/types.h | 8 +-
4638 net/bluetooth/hci_sock.c | 2 +-
4639 net/bluetooth/l2cap_core.c | 6 +-
4640 net/bluetooth/l2cap_sock.c | 12 +-
4641 net/bluetooth/rfcomm/sock.c | 4 +-
4642 net/bluetooth/rfcomm/tty.c | 4 +-
4643 net/bridge/br_netlink.c | 2 +-
4644 net/bridge/netfilter/ebtables.c | 6 +-
4645 net/caif/cfctrl.c | 11 +-
4646 net/caif/chnl_net.c | 2 +-
4647 net/can/af_can.c | 2 +-
4649 net/ceph/messenger.c | 4 +-
4650 net/compat.c | 26 +-
4651 net/core/datagram.c | 2 +-
4652 net/core/dev.c | 16 +-
4653 net/core/filter.c | 2 +-
4654 net/core/flow.c | 6 +-
4655 net/core/neighbour.c | 18 +-
4656 net/core/net-sysfs.c | 2 +-
4657 net/core/net_namespace.c | 8 +-
4658 net/core/netpoll.c | 4 +-
4659 net/core/rtnetlink.c | 17 +-
4660 net/core/scm.c | 12 +-
4661 net/core/skbuff.c | 11 +-
4662 net/core/sock.c | 28 +-
4663 net/core/sock_diag.c | 15 +-
4664 net/core/sysctl_net_core.c | 22 +-
4665 net/decnet/af_decnet.c | 1 +
4666 net/decnet/sysctl_net_decnet.c | 4 +-
4667 net/dsa/dsa.c | 2 +-
4668 net/hsr/hsr_netlink.c | 2 +-
4669 net/ieee802154/6lowpan/core.c | 2 +-
4670 net/ieee802154/6lowpan/reassembly.c | 14 +-
4671 net/ipv4/af_inet.c | 2 +-
4672 net/ipv4/arp.c | 2 +-
4673 net/ipv4/devinet.c | 18 +-
4674 net/ipv4/fib_frontend.c | 6 +-
4675 net/ipv4/fib_semantics.c | 2 +-
4676 net/ipv4/inet_connection_sock.c | 4 +-
4677 net/ipv4/inet_diag.c | 4 +-
4678 net/ipv4/inet_timewait_sock.c | 2 +-
4679 net/ipv4/inetpeer.c | 2 +-
4680 net/ipv4/ip_fragment.c | 15 +-
4681 net/ipv4/ip_gre.c | 6 +-
4682 net/ipv4/ip_sockglue.c | 2 +-
4683 net/ipv4/ip_vti.c | 4 +-
4684 net/ipv4/ipconfig.c | 6 +-
4685 net/ipv4/ipip.c | 4 +-
4686 net/ipv4/netfilter/arp_tables.c | 12 +-
4687 net/ipv4/netfilter/ip_tables.c | 12 +-
4688 net/ipv4/ping.c | 14 +-
4689 net/ipv4/proc.c | 8 +-
4690 net/ipv4/raw.c | 14 +-
4691 net/ipv4/route.c | 32 +-
4692 net/ipv4/sysctl_net_ipv4.c | 22 +-
4693 net/ipv4/tcp_input.c | 6 +-
4694 net/ipv4/tcp_probe.c | 2 +-
4695 net/ipv4/udp.c | 10 +-
4696 net/ipv4/xfrm4_mode_transport.c | 2 +-
4697 net/ipv4/xfrm4_policy.c | 17 +-
4698 net/ipv4/xfrm4_state.c | 4 +-
4699 net/ipv6/addrconf.c | 22 +-
4700 net/ipv6/af_inet6.c | 2 +-
4701 net/ipv6/datagram.c | 2 +-
4702 net/ipv6/icmp.c | 2 +-
4703 net/ipv6/ip6_fib.c | 4 +-
4704 net/ipv6/ip6_gre.c | 10 +-
4705 net/ipv6/ip6_tunnel.c | 4 +-
4706 net/ipv6/ip6_vti.c | 4 +-
4707 net/ipv6/ipv6_sockglue.c | 2 +-
4708 net/ipv6/ndisc.c | 2 +-
4709 net/ipv6/netfilter/ip6_tables.c | 12 +-
4710 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4711 net/ipv6/ping.c | 33 +-
4712 net/ipv6/proc.c | 10 +-
4713 net/ipv6/raw.c | 17 +-
4714 net/ipv6/reassembly.c | 13 +-
4715 net/ipv6/route.c | 2 +-
4716 net/ipv6/sit.c | 4 +-
4717 net/ipv6/sysctl_net_ipv6.c | 2 +-
4718 net/ipv6/udp.c | 6 +-
4719 net/ipv6/xfrm6_policy.c | 17 +-
4720 net/irda/ircomm/ircomm_tty.c | 18 +-
4721 net/iucv/af_iucv.c | 4 +-
4722 net/iucv/iucv.c | 2 +-
4723 net/key/af_key.c | 4 +-
4724 net/l2tp/l2tp_eth.c | 38 +-
4725 net/l2tp/l2tp_ip.c | 2 +-
4726 net/l2tp/l2tp_ip6.c | 2 +-
4727 net/mac80211/cfg.c | 10 +-
4728 net/mac80211/debugfs_key.c | 4 +-
4729 net/mac80211/ieee80211_i.h | 3 +-
4730 net/mac80211/iface.c | 20 +-
4731 net/mac80211/key.c | 4 +-
4732 net/mac80211/main.c | 2 +-
4733 net/mac80211/pm.c | 4 +-
4734 net/mac80211/rate.c | 2 +-
4735 net/mac80211/sta_info.c | 2 +-
4736 net/mac80211/tx.c | 2 +-
4737 net/mac80211/util.c | 8 +-
4738 net/mac80211/wpa.c | 10 +-
4739 net/mac802154/iface.c | 4 +-
4740 net/mpls/af_mpls.c | 6 +-
4741 net/netfilter/ipset/ip_set_core.c | 4 +-
4742 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4743 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4744 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4745 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4746 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4747 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4748 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4749 net/netfilter/nf_conntrack_acct.c | 2 +-
4750 net/netfilter/nf_conntrack_ecache.c | 2 +-
4751 net/netfilter/nf_conntrack_helper.c | 2 +-
4752 net/netfilter/nf_conntrack_netlink.c | 22 +-
4753 net/netfilter/nf_conntrack_proto.c | 2 +-
4754 net/netfilter/nf_conntrack_standalone.c | 2 +-
4755 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4756 net/netfilter/nf_log.c | 10 +-
4757 net/netfilter/nf_sockopt.c | 4 +-
4758 net/netfilter/nf_tables_api.c | 13 +-
4759 net/netfilter/nfnetlink_acct.c | 7 +-
4760 net/netfilter/nfnetlink_cthelper.c | 2 +-
4761 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4762 net/netfilter/nfnetlink_log.c | 4 +-
4763 net/netfilter/nft_compat.c | 9 +-
4764 net/netfilter/xt_statistic.c | 8 +-
4765 net/netlink/af_netlink.c | 14 +-
4766 net/netlink/diag.c | 2 +-
4767 net/netlink/genetlink.c | 14 +-
4768 net/openvswitch/vport-internal_dev.c | 2 +-
4769 net/packet/af_packet.c | 26 +-
4770 net/packet/diag.c | 2 +-
4771 net/packet/internal.h | 6 +-
4772 net/phonet/pep.c | 6 +-
4773 net/phonet/socket.c | 2 +-
4774 net/phonet/sysctl.c | 2 +-
4775 net/rds/cong.c | 6 +-
4777 net/rds/ib_cm.c | 2 +-
4778 net/rds/ib_recv.c | 4 +-
4780 net/rds/iw_cm.c | 2 +-
4781 net/rds/iw_recv.c | 4 +-
4782 net/rds/rds.h | 2 +-
4783 net/rds/tcp.c | 2 +-
4784 net/rds/tcp_send.c | 2 +-
4785 net/rxrpc/af_rxrpc.c | 2 +-
4786 net/rxrpc/ar-ack.c | 14 +-
4787 net/rxrpc/ar-call.c | 2 +-
4788 net/rxrpc/ar-connection.c | 2 +-
4789 net/rxrpc/ar-connevent.c | 2 +-
4790 net/rxrpc/ar-input.c | 4 +-
4791 net/rxrpc/ar-internal.h | 8 +-
4792 net/rxrpc/ar-local.c | 2 +-
4793 net/rxrpc/ar-output.c | 4 +-
4794 net/rxrpc/ar-peer.c | 2 +-
4795 net/rxrpc/ar-proc.c | 4 +-
4796 net/rxrpc/ar-transport.c | 2 +-
4797 net/rxrpc/rxkad.c | 4 +-
4798 net/sched/sch_generic.c | 4 +-
4799 net/sctp/ipv6.c | 6 +-
4800 net/sctp/protocol.c | 10 +-
4801 net/sctp/sm_sideeffect.c | 2 +-
4802 net/sctp/socket.c | 21 +-
4803 net/sctp/sysctl.c | 10 +-
4804 net/socket.c | 18 +-
4805 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4806 net/sunrpc/clnt.c | 4 +-
4807 net/sunrpc/sched.c | 4 +-
4808 net/sunrpc/svc.c | 4 +-
4809 net/sunrpc/svcauth_unix.c | 2 +-
4810 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4811 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4812 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4813 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4814 net/tipc/netlink_compat.c | 12 +-
4815 net/tipc/subscr.c | 2 +-
4816 net/unix/diag.c | 2 +-
4817 net/unix/sysctl_net_unix.c | 2 +-
4818 net/wireless/wext-core.c | 19 +-
4819 net/xfrm/xfrm_policy.c | 16 +-
4820 net/xfrm/xfrm_state.c | 33 +-
4821 net/xfrm/xfrm_sysctl.c | 2 +-
4822 net/xfrm/xfrm_user.c | 2 +-
4823 scripts/Kbuild.include | 2 +-
4824 scripts/Makefile.build | 2 +-
4825 scripts/Makefile.clean | 3 +-
4826 scripts/Makefile.host | 69 +-
4827 scripts/basic/fixdep.c | 12 +-
4828 scripts/dtc/checks.c | 14 +-
4829 scripts/dtc/data.c | 6 +-
4830 scripts/dtc/flattree.c | 8 +-
4831 scripts/dtc/livetree.c | 4 +-
4832 scripts/gcc-plugin.sh | 51 +
4833 scripts/headers_install.sh | 1 +
4834 scripts/kallsyms.c | 4 +-
4835 scripts/kconfig/lkc.h | 5 +-
4836 scripts/kconfig/menu.c | 2 +-
4837 scripts/kconfig/symbol.c | 6 +-
4838 scripts/link-vmlinux.sh | 2 +-
4839 scripts/mod/file2alias.c | 14 +-
4840 scripts/mod/modpost.c | 25 +-
4841 scripts/mod/modpost.h | 6 +-
4842 scripts/mod/sumversion.c | 2 +-
4843 scripts/module-common.lds | 4 +
4844 scripts/package/builddeb | 1 +
4845 scripts/pnmtologo.c | 6 +-
4846 scripts/sortextable.h | 6 +-
4847 scripts/tags.sh | 2 +-
4848 security/Kconfig | 691 +-
4849 security/apparmor/include/policy.h | 2 +-
4850 security/apparmor/policy.c | 4 +-
4851 security/integrity/ima/ima.h | 4 +-
4852 security/integrity/ima/ima_api.c | 2 +-
4853 security/integrity/ima/ima_fs.c | 4 +-
4854 security/integrity/ima/ima_queue.c | 2 +-
4855 security/keys/internal.h | 8 +-
4856 security/keys/key.c | 18 +-
4857 security/keys/keyring.c | 4 -
4858 security/selinux/avc.c | 6 +-
4859 security/selinux/include/xfrm.h | 2 +-
4860 security/yama/yama_lsm.c | 2 +-
4861 sound/aoa/codecs/onyx.c | 7 +-
4862 sound/aoa/codecs/onyx.h | 1 +
4863 sound/core/oss/pcm_oss.c | 18 +-
4864 sound/core/pcm_compat.c | 2 +-
4865 sound/core/pcm_native.c | 4 +-
4866 sound/core/seq/seq_clientmgr.c | 10 +-
4867 sound/core/seq/seq_compat.c | 2 +-
4868 sound/core/seq/seq_fifo.c | 6 +-
4869 sound/core/seq/seq_fifo.h | 2 +-
4870 sound/core/seq/seq_memory.c | 6 +-
4871 sound/core/sound.c | 2 +-
4872 sound/drivers/mts64.c | 14 +-
4873 sound/drivers/opl4/opl4_lib.c | 2 +-
4874 sound/drivers/portman2x4.c | 3 +-
4875 sound/firewire/amdtp-am824.c | 2 +-
4876 sound/firewire/amdtp-stream.c | 4 +-
4877 sound/firewire/amdtp-stream.h | 2 +-
4878 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4879 sound/firewire/isight.c | 10 +-
4880 sound/firewire/scs1x.c | 8 +-
4881 sound/oss/sb_audio.c | 2 +-
4882 sound/oss/swarm_cs4297a.c | 6 +-
4883 sound/pci/hda/hda_codec.c | 2 +-
4884 sound/pci/ymfpci/ymfpci.h | 2 +-
4885 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4886 sound/soc/codecs/sti-sas.c | 10 +-
4887 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4888 sound/soc/soc-ac97.c | 6 +-
4889 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4890 tools/gcc/Makefile | 42 +
4891 tools/gcc/checker_plugin.c | 549 +
4892 tools/gcc/colorize_plugin.c | 215 +
4893 tools/gcc/constify_plugin.c | 571 +
4894 tools/gcc/gcc-common.h | 819 +
4895 tools/gcc/initify_plugin.c | 591 +
4896 tools/gcc/kallocstat_plugin.c | 188 +
4897 tools/gcc/kernexec_plugin.c | 549 +
4898 tools/gcc/latent_entropy_plugin.c | 474 +
4899 tools/gcc/randomize_layout_seed.h | 1 +
4900 tools/gcc/size_overflow_plugin/.gitignore | 2 +
4901 tools/gcc/size_overflow_plugin/Makefile | 28 +
4902 .../disable_size_overflow_hash.data | 12434 ++
4903 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
4904 .../generate_size_overflow_hash.sh | 103 +
4905 .../insert_size_overflow_asm.c | 416 +
4906 .../size_overflow_plugin/intentional_overflow.c | 1116 +
4907 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4908 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
4909 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4910 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
4911 .../size_overflow_hash_aux.data | 92 +
4912 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
4913 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4914 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
4915 .../size_overflow_plugin_hash.c | 352 +
4916 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4917 .../size_overflow_transform_core.c | 1015 +
4918 tools/gcc/stackleak_plugin.c | 444 +
4919 tools/gcc/structleak_plugin.c | 290 +
4920 tools/include/linux/compiler.h | 8 +
4921 tools/perf/util/include/asm/alternative-asm.h | 3 +
4922 tools/virtio/linux/uaccess.h | 2 +-
4923 virt/kvm/kvm_main.c | 42 +-
4924 2088 files changed, 221599 insertions(+), 9618 deletions(-)
4925 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
4926 Author: Matthew Wilcox <willy@linux.intel.com>
4927 Date: Tue Feb 2 16:57:52 2016 -0800
4929 radix-tree: fix race in gang lookup
4931 If the indirect_ptr bit is set on a slot, that indicates we need to redo
4932 the lookup. Introduce a new function radix_tree_iter_retry() which
4933 forces the loop to retry the lookup by setting 'slot' to NULL and
4934 turning the iterator back to point at the problematic entry.
4936 This is a pretty rare problem to hit at the moment; the lookup has to
4937 race with a grow of the radix tree from a height of 0. The consequences
4938 of hitting this race are that gang lookup could return a pointer to a
4939 radix_tree_node instead of a pointer to whatever the user had inserted
4942 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
4943 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
4944 Cc: Hugh Dickins <hughd@google.com>
4945 Cc: Ohad Ben-Cohen <ohad@wizery.com>
4946 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
4947 Cc: <stable@vger.kernel.org>
4948 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
4949 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
4951 include/linux/radix-tree.h | 16 ++++++++++++++++
4952 lib/radix-tree.c | 12 ++++++++++--
4953 2 files changed, 26 insertions(+), 2 deletions(-)
4955 commit bf628043b4589c910919a0f221ae7f42aa8cea93
4956 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
4957 Date: Wed Feb 3 02:11:03 2016 +0100
4959 unix: correctly track in-flight fds in sending process user_struct
4961 The commit referenced in the Fixes tag incorrectly accounted the number
4962 of in-flight fds over a unix domain socket to the original opener
4963 of the file-descriptor. This allows another process to arbitrary
4964 deplete the original file-openers resource limit for the maximum of
4965 open files. Instead the sending processes and its struct cred should
4968 To do so, we add a reference counted struct user_struct pointer to the
4969 scm_fp_list and use it to account for the number of inflight unix fds.
4971 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
4972 Reported-by: David Herrmann <dh.herrmann@gmail.com>
4973 Cc: David Herrmann <dh.herrmann@gmail.com>
4974 Cc: Willy Tarreau <w@1wt.eu>
4975 Cc: Linus Torvalds <torvalds@linux-foundation.org>
4976 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
4977 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
4978 Signed-off-by: David S. Miller <davem@davemloft.net>
4980 include/net/af_unix.h | 4 ++--
4981 include/net/scm.h | 1 +
4982 net/core/scm.c | 7 +++++++
4983 net/unix/af_unix.c | 4 ++--
4984 net/unix/garbage.c | 8 ++++----
4985 5 files changed, 16 insertions(+), 8 deletions(-)
4987 commit e830db443ff78d70b7b63536e688d73907face0c
4988 Author: Mike Kravetz <mike.kravetz@oracle.com>
4989 Date: Fri Jan 15 16:57:37 2016 -0800
4991 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
4993 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
4994 argument end is of type pgoff_t. It was being converted to a vaddr
4995 offset and passed to unmap_hugepage_range. However, end was also being
4996 used as an argument to the vma_interval_tree_foreach controlling loop.
4997 In addition, the conversion of end to vaddr offset was incorrect.
4999 hugetlb_vmtruncate_list is called as part of a file truncate or
5000 fallocate hole punch operation.
5002 When truncating a hugetlbfs file, this bug could prevent some pages from
5003 being unmapped. This is possible if there are multiple vmas mapping the
5004 file, and there is a sufficiently sized hole between the mappings. The
5005 size of the hole between two vmas (A,B) must be such that the starting
5006 virtual address of B is greater than (ending virtual address of A <<
5007 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
5008 pages are not properly unmapped during truncate, the following BUG is
5011 kernel BUG at fs/hugetlbfs/inode.c:428!
5013 In the fallocate hole punch case, this bug could prevent pages from
5014 being unmapped as in the truncate case. However, for hole punch the
5015 result is that unmapped pages will not be removed during the operation.
5016 For hole punch, it is also possible that more pages than desired will be
5017 unmapped. This unnecessary unmapping will cause page faults to
5018 reestablish the mappings on subsequent page access.
5020 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
5021 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
5022 Cc: Hugh Dickins <hughd@google.com>
5023 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
5024 Cc: Davidlohr Bueso <dave@stgolabs.net>
5025 Cc: Dave Hansen <dave.hansen@linux.intel.com>
5026 Cc: <stable@vger.kernel.org> [4.3]
5027 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5028 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5030 fs/hugetlbfs/inode.c | 19 +++++++++++--------
5031 1 files changed, 11 insertions(+), 8 deletions(-)
5033 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
5034 Author: Takashi Iwai <tiwai@suse.de>
5035 Date: Thu Feb 4 17:06:13 2016 +0100
5037 ALSA: timer: Fix leftover link at closing
5039 In ALSA timer core, the active timer instance is managed in
5040 active_list linked list. Each element is added / removed dynamically
5041 at timer start, stop and in timer interrupt. The problem is that
5042 snd_timer_interrupt() has a thinko and leaves the element in
5043 active_list when it's the last opened element. This eventually leads
5044 to list corruption or use-after-free error.
5046 This hasn't been revealed because we used to delete the list forcibly
5047 in snd_timer_stop() in the past. However, the recent fix avoids the
5048 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
5049 corruption due to double start or stop]), and this leak hits reality.
5051 This patch fixes the link management in snd_timer_interrupt(). Now it
5052 simply unlinks no matter which stream is.
5054 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
5055 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5056 Cc: <stable@vger.kernel.org>
5057 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5059 sound/core/timer.c | 4 ++--
5060 1 files changed, 2 insertions(+), 2 deletions(-)
5062 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
5063 Author: Konstantin Khlebnikov <koct9i@gmail.com>
5064 Date: Fri Feb 5 15:37:01 2016 -0800
5066 radix-tree: fix oops after radix_tree_iter_retry
5068 Helper radix_tree_iter_retry() resets next_index to the current index.
5069 In following radix_tree_next_slot current chunk size becomes zero. This
5070 isn't checked and it tries to dereference null pointer in slot.
5072 Tagged iterator is fine because retry happens only at slot 0 where tag
5073 bitmask in iter->tags is filled with single bit.
5075 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
5076 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
5077 Cc: Matthew Wilcox <willy@linux.intel.com>
5078 Cc: Hugh Dickins <hughd@google.com>
5079 Cc: Ohad Ben-Cohen <ohad@wizery.com>
5080 Cc: Jeremiah Mahler <jmmahler@gmail.com>
5081 Cc: <stable@vger.kernel.org>
5082 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5083 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5085 include/linux/radix-tree.h | 6 +++---
5086 1 files changed, 3 insertions(+), 3 deletions(-)
5088 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
5089 Merge: 438be0b 256aeaf
5090 Author: Brad Spengler <spender@grsecurity.net>
5091 Date: Sun Feb 7 08:29:33 2016 -0500
5093 Merge branch 'pax-test' into grsec-test
5095 commit 256aeaf87c22de8edf1f03682a572c590ae07771
5096 Author: Brad Spengler <spender@grsecurity.net>
5097 Date: Sun Feb 7 08:29:09 2016 -0500
5099 Update to pax-linux-4.3.5-test28.patch:
5100 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
5101 - spender fixed UDEREF on arm
5103 arch/arm/Kconfig | 1 +
5104 arch/arm/include/asm/domain.h | 21 ++++++++-
5105 arch/arm/include/asm/futex.h | 9 ----
5106 arch/arm/include/asm/thread_info.h | 3 +
5107 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
5108 arch/arm/kernel/entry-armv.S | 2 +-
5109 arch/arm/kernel/process.c | 2 +-
5110 arch/arm/mm/alignment.c | 8 ----
5111 arch/x86/mm/numa.c | 2 +-
5112 security/Kconfig | 1 -
5113 10 files changed, 60 insertions(+), 70 deletions(-)
5115 commit 438be0bd112bd17942b2628c53054dc1007558a1
5116 Author: Brad Spengler <spender@grsecurity.net>
5117 Date: Sat Feb 6 19:50:31 2016 -0500
5119 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
5120 ARM systems reported on the forums
5122 arch/arm/Kconfig | 1 +
5123 arch/arm/include/asm/domain.h | 21 ++++++++-
5124 arch/arm/include/asm/futex.h | 9 ----
5125 arch/arm/include/asm/thread_info.h | 3 +
5126 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
5127 arch/arm/kernel/entry-armv.S | 2 +-
5128 arch/arm/kernel/process.c | 2 +-
5129 arch/arm/mm/alignment.c | 8 ----
5130 security/Kconfig | 1 -
5131 9 files changed, 59 insertions(+), 69 deletions(-)
5133 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
5134 Author: Brad Spengler <spender@grsecurity.net>
5135 Date: Sat Feb 6 11:21:53 2016 -0500
5137 Fix another compiler warning
5139 net/ipv4/tcp_input.c | 2 ++
5140 1 files changed, 2 insertions(+), 0 deletions(-)
5142 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
5143 Author: Brad Spengler <spender@grsecurity.net>
5144 Date: Sat Feb 6 11:16:12 2016 -0500
5146 Fix two compiler warnings
5148 kernel/pid.c | 5 ++---
5149 kernel/ptrace.c | 3 ++-
5150 2 files changed, 4 insertions(+), 4 deletions(-)
5152 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
5153 Author: Brad Spengler <spender@grsecurity.net>
5154 Date: Wed Feb 3 21:22:40 2016 -0500
5156 Apply fix for integer truncation in NUMA init code, reported by
5157 x14sg1 on the forums:
5158 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
5160 arch/x86/mm/numa.c | 2 +-
5161 1 files changed, 1 insertions(+), 1 deletions(-)
5163 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
5164 Merge: a781740 016d0d8
5165 Author: Brad Spengler <spender@grsecurity.net>
5166 Date: Wed Feb 3 21:20:58 2016 -0500
5168 Merge branch 'pax-test' into grsec-test
5170 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
5171 Author: Brad Spengler <spender@grsecurity.net>
5172 Date: Wed Feb 3 21:20:10 2016 -0500
5174 Update to pax-linux-4.3.5-test27.patch:
5175 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
5176 - restored padding in fpregs_state for storing AVX-512 state in the future
5177 - constified netlink_dump_control
5178 - added const version of debug_gimple_stmt for gcc plugins, by Emese
5179 - Emese fixed a bug in initify that could have initified too much
5180 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
5182 arch/x86/include/asm/fpu/types.h | 1 +
5183 arch/x86/include/asm/mmu_context.h | 2 +-
5184 block/blk-cgroup.c | 18 ++--
5185 block/cfq-iosched.c | 4 +-
5186 crypto/crypto_user.c | 8 ++-
5187 drivers/acpi/apei/ghes.c | 6 +-
5188 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
5189 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
5190 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
5191 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
5192 drivers/infiniband/core/netlink.c | 5 +-
5193 drivers/infiniband/hw/cxgb4/device.c | 6 +-
5194 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
5195 drivers/md/bcache/alloc.c | 2 +-
5196 drivers/md/bcache/bcache.h | 10 +-
5197 drivers/md/bcache/btree.c | 2 +-
5198 drivers/md/bcache/io.c | 10 +-
5199 drivers/md/bcache/journal.c | 2 +-
5200 drivers/md/bcache/stats.c | 26 +++---
5201 drivers/md/bcache/stats.h | 16 ++--
5202 drivers/md/bcache/super.c | 2 +-
5203 drivers/md/bcache/sysfs.c | 20 +++---
5204 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
5205 drivers/md/dm-raid.c | 2 +-
5206 drivers/md/md.c | 6 +-
5207 drivers/md/md.h | 2 +-
5208 drivers/md/raid1.c | 2 +-
5209 drivers/md/raid10.c | 2 +-
5210 drivers/md/raid5.c | 4 +-
5211 drivers/media/pci/zoran/zoran.h | 1 -
5212 drivers/media/pci/zoran/zoran_driver.c | 3 -
5213 drivers/net/ethernet/sfc/selftest.c | 20 +++---
5214 drivers/net/irda/vlsi_ir.c | 18 ++--
5215 drivers/net/irda/vlsi_ir.h | 14 ++--
5216 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
5217 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
5218 drivers/net/wireless/ath/carl9170/main.c | 10 +-
5219 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
5220 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
5221 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
5222 drivers/scsi/hptiop.c | 2 -
5223 drivers/scsi/hptiop.h | 1 -
5224 drivers/scsi/ipr.c | 6 +-
5225 drivers/scsi/ipr.h | 2 +-
5226 drivers/scsi/qla2xxx/qla_target.c | 10 +-
5227 drivers/scsi/qla2xxx/qla_target.h | 2 +-
5228 fs/btrfs/ctree.c | 2 +-
5229 fs/btrfs/ctree.h | 4 +-
5230 fs/btrfs/delayed-ref.c | 4 +-
5231 fs/btrfs/disk-io.c | 4 +-
5232 fs/btrfs/file.c | 4 +-
5233 fs/btrfs/raid56.c | 32 ++++----
5234 fs/btrfs/tests/btrfs-tests.c | 2 +-
5235 fs/btrfs/transaction.c | 2 +-
5236 fs/btrfs/tree-log.c | 8 +-
5237 fs/btrfs/volumes.c | 14 ++--
5238 fs/btrfs/volumes.h | 22 +++---
5239 fs/jbd2/commit.c | 2 +-
5240 fs/jbd2/transaction.c | 4 +-
5241 fs/ocfs2/dlm/dlmcommon.h | 4 +-
5242 fs/ocfs2/dlm/dlmdebug.c | 10 +-
5243 fs/ocfs2/dlm/dlmdomain.c | 4 +-
5244 fs/ocfs2/dlm/dlmmaster.c | 4 +-
5245 include/acpi/ghes.h | 2 +-
5246 include/linux/blk-cgroup.h | 24 +++---
5247 include/linux/jbd2.h | 2 +-
5248 include/linux/netlink.h | 12 ++--
5249 include/net/cfg802154.h | 2 +-
5250 include/net/mac80211.h | 2 +-
5251 include/net/neighbour.h | 2 +-
5252 kernel/rcu/tree_plugin.h | 4 +-
5253 net/batman-adv/routing.c | 4 +-
5254 net/batman-adv/soft-interface.c | 2 +-
5255 net/batman-adv/translation-table.c | 14 ++--
5256 net/batman-adv/types.h | 2 +-
5257 net/core/neighbour.c | 14 ++--
5258 net/core/rtnetlink.c | 2 +-
5259 net/ipv4/arp.c | 2 +-
5260 net/ipv4/inet_diag.c | 4 +-
5261 net/ipv4/xfrm4_state.c | 4 +-
5262 net/ipv6/ndisc.c | 2 +-
5263 net/mac80211/cfg.c | 2 +-
5264 net/mac80211/debugfs_key.c | 2 +-
5265 net/mac80211/key.c | 4 +-
5266 net/mac80211/tx.c | 2 +-
5267 net/mac80211/wpa.c | 10 +-
5268 net/mac802154/iface.c | 4 +-
5269 net/netfilter/ipset/ip_set_core.c | 2 +-
5270 net/netfilter/nf_conntrack_netlink.c | 22 +++---
5271 net/netfilter/nf_tables_api.c | 13 ++--
5272 net/netfilter/nfnetlink_acct.c | 7 +-
5273 net/netfilter/nfnetlink_cthelper.c | 2 +-
5274 net/netfilter/nfnetlink_cttimeout.c | 2 +-
5275 net/netlink/af_netlink.c | 10 ++-
5276 net/netlink/diag.c | 2 +-
5277 net/netlink/genetlink.c | 14 ++--
5278 net/packet/af_packet.c | 18 ++--
5279 net/packet/diag.c | 2 +-
5280 net/packet/internal.h | 6 +-
5281 net/unix/diag.c | 2 +-
5282 net/xfrm/xfrm_user.c | 2 +-
5283 security/apparmor/include/policy.h | 2 +-
5284 security/apparmor/policy.c | 4 +-
5285 sound/core/seq/seq_clientmgr.c | 2 +-
5286 sound/core/seq/seq_fifo.c | 6 +-
5287 sound/core/seq/seq_fifo.h | 2 +-
5288 tools/gcc/gcc-common.h | 24 ++++--
5289 tools/gcc/initify_plugin.c | 7 +-
5290 tools/lib/api/Makefile | 2 +-
5291 109 files changed, 399 insertions(+), 391 deletions(-)
5293 commit a7817402ac837b1aee07fac42537a02097055098
5294 Author: Matt Fleming <matt@codeblueprint.co.uk>
5295 Date: Fri Jan 29 11:36:10 2016 +0000
5297 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
5299 There are a couple of nasty truncation bugs lurking in the pageattr
5300 code that can be triggered when mapping EFI regions, e.g. when we pass
5301 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
5302 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
5304 Viorel-Cătălin managed to trigger this bug on his Dell machine that
5305 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
5306 When calling populate_pud() the end of the region gets calculated
5307 incorrectly in the following buggy expression,
5309 end = start + (cpa->numpages << PAGE_SHIFT);
5311 And only 188416 pages are mapped. Next, populate_pud() gets invoked
5312 for a second time because of the loop in __change_page_attr_set_clr(),
5313 only this time no pages get mapped because shifting the remaining
5314 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
5315 loop in __change_page_attr_set_clr() spins forever because we fail to
5318 Hitting this bug depends very much on the virtual address we pick to
5319 map the large region at and how many pages we map on the initial run
5320 through the loop. This explains why this issue was only recently hit
5321 with the introduction of commit
5323 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
5324 entries bottom-up at runtime, instead of top-down")
5326 It's interesting to note that safe uses of cpa->numpages do exist in
5327 the pageattr code. If instead of shifting ->numpages we multiply by
5328 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
5329 so the result is unsigned long.
5331 To avoid surprises when users try to convert very large cpa->numpages
5332 values to addresses, change the data type from 'int' to 'unsigned
5333 long', thereby making it suitable for shifting by PAGE_SHIFT without
5336 The alternative would be to make liberal use of casting, but that is
5337 far more likely to cause problems in the future when someone adds more
5338 code and fails to cast properly; this bug was difficult enough to
5339 track down in the first place.
5341 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
5342 Acked-by: Borislav Petkov <bp@alien8.de>
5343 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
5344 Cc: <stable@vger.kernel.org>
5345 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
5346 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
5347 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
5348 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
5350 arch/x86/mm/pageattr.c | 4 ++--
5351 1 files changed, 2 insertions(+), 2 deletions(-)
5353 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
5354 Author: Jan Beulich <JBeulich@suse.com>
5355 Date: Tue Jan 26 04:15:18 2016 -0700
5357 x86/mm: Fix types used in pgprot cacheability flags translations
5359 For PAE kernels "unsigned long" is not suitable to hold page protection
5360 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
5361 few W+X pages getting reported as insecure during boot (observed namely
5362 for the entire initrd range).
5364 Fixes: 281d4078be ("x86: Make page cache mode a real type")
5365 Signed-off-by: Jan Beulich <jbeulich@suse.com>
5366 Reviewed-by: Juergen Gross <JGross@suse.com>
5367 Cc: stable@vger.kernel.org
5368 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
5369 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
5371 arch/x86/include/asm/pgtable_types.h | 6 ++----
5372 1 files changed, 2 insertions(+), 4 deletions(-)
5374 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
5375 Merge: 682d661 f74425b
5376 Author: Brad Spengler <spender@grsecurity.net>
5377 Date: Sun Jan 31 15:06:25 2016 -0500
5379 Merge branch 'pax-test' into grsec-test
5382 drivers/net/slip/slhc.c
5383 include/linux/sched.h
5387 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
5388 Merge: d14af1f 849a2d3
5389 Author: Brad Spengler <spender@grsecurity.net>
5390 Date: Sun Jan 31 15:02:55 2016 -0500
5392 Merge branch 'linux-4.3.y' into pax-test
5395 arch/x86/include/asm/mmu_context.h
5397 commit 682d6611d75542e351c973c8dd74a99d3966c073
5398 Author: Brad Spengler <spender@grsecurity.net>
5399 Date: Sat Jan 30 13:05:03 2016 -0500
5401 Based on a report from Mathias Krause, fix up a number of additional instances
5402 of ulong overflow when passing in values to gr_learn_resource by saturating
5405 mm/mlock.c | 11 ++++++++---
5406 mm/mmap.c | 16 +++++++++++++---
5407 2 files changed, 21 insertions(+), 6 deletions(-)
5409 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
5410 Author: Jann Horn <jann@thejh.net>
5411 Date: Sat Dec 26 06:00:48 2015 +0100
5413 seccomp: always propagate NO_NEW_PRIVS on tsync
5415 Before this patch, a process with some permissive seccomp filter
5416 that was applied by root without NO_NEW_PRIVS was able to add
5417 more filters to itself without setting NO_NEW_PRIVS by setting
5418 the new filter from a throwaway thread with NO_NEW_PRIVS.
5420 Signed-off-by: Jann Horn <jann@thejh.net>
5421 Cc: stable@vger.kernel.org
5422 Signed-off-by: Kees Cook <keescook@chromium.org>
5424 kernel/seccomp.c | 22 +++++++++++-----------
5425 1 files changed, 11 insertions(+), 11 deletions(-)
5427 commit b85450498a3bbf269441c8963d7574bb3079c838
5428 Merge: 59c216f d14af1f
5429 Author: Brad Spengler <spender@grsecurity.net>
5430 Date: Fri Jan 29 20:54:13 2016 -0500
5432 Merge branch 'pax-test' into grsec-test
5434 commit d14af1f1dd66511f3f0674deee2b572972012b39
5435 Author: Brad Spengler <spender@grsecurity.net>
5436 Date: Fri Jan 29 20:53:51 2016 -0500
5438 Update to pax-linux-4.3.4-test26.patch:
5439 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
5441 fs/cifs/file.c | 2 +-
5442 fs/gfs2/file.c | 2 +-
5443 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
5444 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
5445 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
5446 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
5447 .../size_overflow_transform_core.c | 5 +
5448 7 files changed, 102 insertions(+), 15 deletions(-)
5450 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
5451 Author: Brad Spengler <spender@grsecurity.net>
5452 Date: Wed Jan 27 17:57:21 2016 -0500
5454 Fix a size_overflow report reported by Mathias Krause in our
5455 truncation of an loff_t to an unsigned long when being passed
5456 to gr_learn_resource() (as all resource checks are against unsigned long
5460 1 files changed, 4 insertions(+), 1 deletions(-)
5462 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
5463 Author: Yuchung Cheng <ycheng@google.com>
5464 Date: Wed Jan 6 12:42:38 2016 -0800
5466 tcp: fix zero cwnd in tcp_cwnd_reduction
5468 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
5469 conditionally") introduced a bug that cwnd may become 0 when both
5470 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
5471 to a div-by-zero if the connection starts another cwnd reduction
5472 phase by setting tp->prior_cwnd to the current cwnd (0) in
5473 tcp_init_cwnd_reduction().
5475 To prevent this we skip PRR operation when nothing is acked or
5476 sacked. Then cwnd must be positive in all cases as long as ssthresh
5479 1) The proportional reduction mode
5480 inflight > ssthresh > 0
5482 2) The reduction bound mode
5483 a) inflight == ssthresh > 0
5485 b) inflight < ssthresh
5486 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
5488 Therefore in all cases inflight and sndcnt can not both be 0.
5489 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
5491 In reality this bug is triggered only with a sequence of less common
5492 events. For example, the connection is terminating an ECN-triggered
5493 cwnd reduction with an inflight 0, then it receives reordered/old
5494 ACKs or DSACKs from prior transmission (which acks nothing). Or the
5495 connection is in fast recovery stage that marks everything lost,
5496 but fails to retransmit due to local issues, then receives data
5497 packets from other end which acks nothing.
5499 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
5500 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
5501 Signed-off-by: Yuchung Cheng <ycheng@google.com>
5502 Signed-off-by: Neal Cardwell <ncardwell@google.com>
5503 Signed-off-by: Eric Dumazet <edumazet@google.com>
5504 Signed-off-by: David S. Miller <davem@davemloft.net>
5506 net/ipv4/tcp_input.c | 3 +++
5507 1 files changed, 3 insertions(+), 0 deletions(-)
5509 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
5510 Author: Eric Dumazet <edumazet@google.com>
5511 Date: Sun Jan 24 13:53:50 2016 -0800
5513 af_unix: fix struct pid memory leak
5515 Dmitry reported a struct pid leak detected by a syzkaller program.
5517 Bug happens in unix_stream_recvmsg() when we break the loop when a
5518 signal is pending, without properly releasing scm.
5520 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
5521 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5522 Signed-off-by: Eric Dumazet <edumazet@google.com>
5523 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
5524 Signed-off-by: David S. Miller <davem@davemloft.net>
5526 net/unix/af_unix.c | 1 +
5527 1 files changed, 1 insertions(+), 0 deletions(-)
5529 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
5530 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
5531 Date: Fri Jan 22 01:39:43 2016 +0100
5533 pptp: fix illegal memory access caused by multiple bind()s
5535 Several times already this has been reported as kasan reports caused by
5536 syzkaller and trinity and people always looked at RCU races, but it is
5537 much more simple. :)
5539 In case we bind a pptp socket multiple times, we simply add it to
5540 the callid_sock list but don't remove the old binding. Thus the old
5541 socket stays in the bucket with unused call_id indexes and doesn't get
5542 cleaned up. This causes various forms of kasan reports which were hard
5545 Simply don't allow multiple binds and correct error handling in
5546 pptp_bind. Also keep sk_state bits in place in pptp_connect.
5548 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
5549 Cc: Dmitry Kozlov <xeb@mail.ru>
5550 Cc: Sasha Levin <sasha.levin@oracle.com>
5551 Cc: Dmitry Vyukov <dvyukov@google.com>
5552 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5553 Cc: Dave Jones <davej@codemonkey.org.uk>
5554 Reported-by: Dave Jones <davej@codemonkey.org.uk>
5555 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
5556 Signed-off-by: David S. Miller <davem@davemloft.net>
5558 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
5559 1 files changed, 24 insertions(+), 10 deletions(-)
5561 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
5562 Author: Brad Spengler <spender@grsecurity.net>
5563 Date: Tue Jan 26 18:17:10 2016 -0500
5565 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
5566 wiki but was removed from the config help at some point
5568 grsecurity/Kconfig | 3 +++
5569 1 files changed, 3 insertions(+), 0 deletions(-)
5571 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
5572 Author: Thomas Egerer <hakke_007@gmx.de>
5573 Date: Mon Jan 25 12:58:44 2016 +0100
5575 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
5577 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
5578 to select CRYPTO_ECHAINIV in order to work properly. This solves the
5579 issues caused by a misconfiguration as described in [1].
5580 The original approach, patching crypto/Kconfig was turned down by
5583 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
5584 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
5586 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
5587 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
5588 Signed-off-by: David S. Miller <davem@davemloft.net>
5590 net/ipv4/Kconfig | 1 +
5591 net/ipv6/Kconfig | 1 +
5592 2 files changed, 2 insertions(+), 0 deletions(-)
5594 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
5595 Merge: 904114c 6339c1f
5596 Author: Brad Spengler <spender@grsecurity.net>
5597 Date: Tue Jan 26 18:08:40 2016 -0500
5599 Merge branch 'pax-test' into grsec-test
5601 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
5602 Author: Brad Spengler <spender@grsecurity.net>
5603 Date: Tue Jan 26 18:07:51 2016 -0500
5605 Update to pax-linux-4.3.4-test25.patch:
5606 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
5607 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
5608 - fixed a few REFCOUNT false positives in SNMP related statistics
5610 arch/x86/Kconfig | 2 +-
5611 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
5612 include/net/snmp.h | 10 +++++-----
5613 kernel/fork.c | 11 +++++++++--
5614 net/ipv4/proc.c | 8 ++++----
5615 net/ipv6/addrconf.c | 4 ++--
5616 net/ipv6/proc.c | 10 +++++-----
5617 7 files changed, 43 insertions(+), 19 deletions(-)
5619 commit 904114c2fce3fdff5d57e763da56a78960db4e19
5620 Author: Al Viro <viro@zeniv.linux.org.uk>
5621 Date: Fri Jan 22 18:08:52 2016 -0500
5623 make sure that freeing shmem fast symlinks is RCU-delayed
5625 Cc: stable@vger.kernel.org # v4.2+
5626 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5628 include/linux/shmem_fs.h | 5 +----
5629 mm/shmem.c | 9 ++++-----
5630 2 files changed, 5 insertions(+), 9 deletions(-)
5632 commit ab86adee64312a2f827dd516cb199521327943ed
5633 Author: Sasha Levin <sasha.levin@oracle.com>
5634 Date: Mon Jan 18 19:23:51 2016 -0500
5636 netfilter: nf_conntrack: use safer way to lock all buckets
5638 When we need to lock all buckets in the connection hashtable we'd attempt to
5639 lock 1024 spinlocks, which is way more preemption levels than supported by
5640 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
5641 enabled, and if it was - use only 8 buckets(!).
5643 Fix this by using a global lock and synchronize all buckets on it when we
5644 need to lock them all. This is pretty heavyweight, but is only done when we
5645 need to resize the hashtable, and that doesn't happen often enough (or at all).
5647 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
5648 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
5649 Reviewed-by: Florian Westphal <fw@strlen.de>
5650 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5654 net/netfilter/nfnetlink_cttimeout.c
5656 include/net/netfilter/nf_conntrack_core.h | 8 ++----
5657 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
5658 net/netfilter/nf_conntrack_helper.c | 2 +-
5659 net/netfilter/nf_conntrack_netlink.c | 2 +-
5660 4 files changed, 33 insertions(+), 17 deletions(-)
5662 commit 37014723527225481c720484bb788a1a6358072f
5663 Author: Willy Tarreau <w@1wt.eu>
5664 Date: Mon Jan 18 16:36:09 2016 +0100
5666 pipe: limit the per-user amount of pages allocated in pipes
5668 On no-so-small systems, it is possible for a single process to cause an
5669 OOM condition by filling large pipes with data that are never read. A
5670 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
5671 memory. On small systems it may be tricky to set the pipe max size to
5672 prevent this from happening.
5674 This patch makes it possible to enforce a per-user soft limit above
5675 which new pipes will be limited to a single page, effectively limiting
5676 them to 4 kB each, as well as a hard limit above which no new pipes may
5677 be created for this user. This has the effect of protecting the system
5678 against memory abuse without hurting other users, and still allowing
5679 pipes to work correctly though with less data at once.
5681 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
5682 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
5683 default soft limit allows the default number of FDs per process (1024)
5684 to create pipes of the default size (64kB), thus reaching a limit of 64MB
5685 before starting to create only smaller pipes. With 256 processes limited
5686 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
5687 1084 MB of memory allocated for a user. The hard limit is disabled by
5688 default to avoid breaking existing applications that make intensive use
5689 of pipes (eg: for splicing).
5691 Reported-by: socketpair@gmail.com
5692 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
5693 Mitigates: CVE-2013-4312 (Linux 2.0+)
5694 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
5695 Signed-off-by: Willy Tarreau <w@1wt.eu>
5696 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5698 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
5699 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
5700 include/linux/pipe_fs_i.h | 4 +++
5701 include/linux/sched.h | 1 +
5702 kernel/sysctl.c | 14 ++++++++++++
5703 5 files changed, 87 insertions(+), 2 deletions(-)
5705 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
5706 Merge: 540f2af 7791ecb
5707 Author: Brad Spengler <spender@grsecurity.net>
5708 Date: Sat Jan 23 10:57:11 2016 -0500
5710 Merge branch 'pax-test' into grsec-test
5712 commit 7791ecb84f840343a5646236fd0d34e1fb450793
5713 Merge: 470069c 399588c
5714 Author: Brad Spengler <spender@grsecurity.net>
5715 Date: Sat Jan 23 10:56:47 2016 -0500
5717 Merge branch 'linux-4.3.y' into pax-test
5719 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
5720 Author: Brad Spengler <spender@grsecurity.net>
5721 Date: Tue Jan 19 21:18:47 2016 -0500
5723 Update size_overflow hash table
5725 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
5726 1 files changed, 3 insertions(+), 1 deletions(-)
5728 commit 7e649765626a28437f573f0fbe7a51a04615f041
5729 Author: Brad Spengler <spender@grsecurity.net>
5730 Date: Tue Jan 19 20:29:46 2016 -0500
5732 Backport fix from: https://lkml.org/lkml/2015/12/13/187
5734 fs/ext4/extents.c | 2 +-
5735 1 files changed, 1 insertions(+), 1 deletions(-)
5737 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
5738 Author: Jann Horn <jann@thejh.net>
5739 Date: Tue Jan 5 18:27:30 2016 +0100
5741 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
5743 This replaces all code in fs/compat_ioctl.c that translated
5744 ioctl arguments into a in-kernel structure, then performed
5745 do_ioctl under set_fs(KERNEL_DS), with code that allocates
5746 data on the user stack and can call the VFS ioctl handler
5749 This is done as a hardening measure because the caller
5750 does not know what kind of ioctl handler will be invoked,
5751 only that no corresponding compat_ioctl handler exists and
5752 what the ioctl command number is. The accidental
5753 invocation of an unlocked_ioctl handler that unexpectedly
5754 calls copy_to_user could be a severe security issue.
5756 Signed-off-by: Jann Horn <jann@thejh.net>
5757 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5763 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
5764 1 files changed, 68 insertions(+), 62 deletions(-)
5766 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
5767 Author: Al Viro <viro@zeniv.linux.org.uk>
5768 Date: Thu Jan 7 09:53:30 2016 -0500
5770 compat_ioctl: don't pass fd around when not needed
5772 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5774 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
5775 fs/internal.h | 7 ++++
5777 include/linux/fs.h | 2 -
5778 4 files changed, 61 insertions(+), 55 deletions(-)
5780 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
5781 Author: Jann Horn <jann@thejh.net>
5782 Date: Tue Jan 5 18:27:29 2016 +0100
5784 compat_ioctl: don't look up the fd twice
5786 In code in fs/compat_ioctl.c that translates ioctl arguments
5787 into a in-kernel structure, then performs sys_ioctl, possibly
5788 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
5789 calls to do_ioctl calls. do_ioctl is a new function that does
5790 the same thing as sys_ioctl, but doesn't look up the fd again.
5792 This change is made to avoid (potential) security issues
5793 because of ioctl handlers that accept one of the ioctl
5794 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
5795 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
5796 This can happen for multiple reasons:
5798 - The ioctl command number could be reused.
5799 - The ioctl handler might not check the full ioctl
5800 command. This is e.g. true for drm_ioctl.
5801 - The ioctl handler is very special, e.g. cuse_file_ioctl
5803 The real issue is that set_fs(KERNEL_DS) is used here,
5804 but that's fixed in a separate commit
5805 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
5807 This change mitigates potential security issues by
5808 preventing a race that permits invocation of
5809 unlocked_ioctl handlers under KERNEL_DS through compat
5810 code even if a corresponding compat_ioctl handler exists.
5812 So far, no way has been identified to use this to damage
5813 kernel memory without having CAP_SYS_ADMIN in the init ns
5814 (with the capability, doing reads/writes at arbitrary
5815 kernel addresses should be easy through CUSE's ioctl
5816 handler with FUSE_IOCTL_UNRESTRICTED set).
5818 [AV: two missed sys_ioctl() taken care of]
5820 Signed-off-by: Jann Horn <jann@thejh.net>
5821 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
5823 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
5824 1 files changed, 68 insertions(+), 54 deletions(-)
5826 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
5827 Author: Vasily Kulikov <segoon@openwall.com>
5828 Date: Fri Jan 15 16:57:55 2016 -0800
5830 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
5832 TIMER_ENTRY_STATIC is defined as a poison pointers which
5833 should point to nowhere. Redefine them using POISON_POINTER_DELTA
5834 arithmetics to make sure they really point to non-mappable area declared
5835 by the target architecture.
5837 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
5838 Acked-by: Thomas Gleixner <tglx@linutronix.de>
5839 Cc: Solar Designer <solar@openwall.com>
5840 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
5841 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5842 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5846 include/linux/poison.h
5848 include/linux/poison.h | 2 +-
5849 1 files changed, 1 insertions(+), 1 deletions(-)
5851 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
5852 Author: Brad Spengler <spender@grsecurity.net>
5853 Date: Tue Jan 19 19:41:44 2016 -0500
5855 Fix ARM compilation, reported by Austin Sepp
5857 grsecurity/grsec_sig.c | 1 +
5858 1 files changed, 1 insertions(+), 0 deletions(-)
5860 commit e15383743443dc43460a2fd73e0db0b608610dca
5861 Author: Takashi Iwai <tiwai@suse.de>
5862 Date: Mon Jan 18 13:52:47 2016 +0100
5864 ALSA: hrtimer: Fix stall by hrtimer_cancel()
5866 hrtimer_cancel() waits for the completion from the callback, thus it
5867 must not be called inside the callback itself. This was already a
5868 problem in the past with ALSA hrtimer driver, and the early commit
5869 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
5871 However, the previous fix is still insufficient: it may still cause a
5872 lockup when the ALSA timer instance reprograms itself in its callback.
5873 Then it invokes the start function even in snd_timer_interrupt() that
5874 is called in hrtimer callback itself, results in a CPU stall. This is
5875 no hypothetical problem but actually triggered by syzkaller fuzzer.
5877 This patch tries to fix the issue again. Now we call
5878 hrtimer_try_to_cancel() at both start and stop functions so that it
5879 won't fall into a deadlock, yet giving some chance to cancel the queue
5880 if the functions have been called outside the callback. The proper
5881 hrtimer_cancel() is called in anyway at closing, so this should be
5884 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
5885 Cc: <stable@vger.kernel.org>
5886 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5888 sound/core/hrtimer.c | 3 ++-
5889 1 files changed, 2 insertions(+), 1 deletions(-)
5891 commit 12d874daf706e6e7c1ae709141859c809599297e
5892 Author: Takashi Iwai <tiwai@suse.de>
5893 Date: Tue Jan 12 12:38:02 2016 +0100
5895 ALSA: seq: Fix missing NULL check at remove_events ioctl
5897 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
5898 unconditionally even if there is no FIFO assigned, and this leads to
5899 an Oops due to NULL dereference. The fix is just to add a proper NULL
5902 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5903 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5904 Cc: <stable@vger.kernel.org>
5905 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5907 sound/core/seq/seq_clientmgr.c | 2 +-
5908 1 files changed, 1 insertions(+), 1 deletions(-)
5910 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
5911 Author: Takashi Iwai <tiwai@suse.de>
5912 Date: Tue Jan 12 15:36:27 2016 +0100
5914 ALSA: seq: Fix race at timer setup and close
5916 ALSA sequencer code has an open race between the timer setup ioctl and
5917 the close of the client. This was triggered by syzkaller fuzzer, and
5918 a use-after-free was caught there as a result.
5920 This patch papers over it by adding a proper queue->timer_mutex lock
5921 around the timer-related calls in the relevant code path.
5923 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5924 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5925 Cc: <stable@vger.kernel.org>
5926 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5928 sound/core/seq/seq_queue.c | 2 ++
5929 1 files changed, 2 insertions(+), 0 deletions(-)
5931 commit b9e55ab955e59b4a636d78a748be90334a48b485
5932 Author: Takashi Iwai <tiwai@suse.de>
5933 Date: Thu Jan 14 16:30:58 2016 +0100
5935 ALSA: timer: Harden slave timer list handling
5937 A slave timer instance might be still accessible in a racy way while
5938 operating the master instance as it lacks of locking. Since the
5939 master operation is mostly protected with timer->lock, we should cope
5940 with it while changing the slave instance, too. Also, some linked
5941 lists (active_list and ack_list) of slave instances aren't unlinked
5942 immediately at stopping or closing, and this may lead to unexpected
5945 This patch tries to address these issues. It adds spin lock of
5946 timer->lock (either from master or slave, which is equivalent) in a
5947 few places. For avoiding a deadlock, we ensure that the global
5948 slave_active_lock is always locked at first before each timer lock.
5950 Also, ack and active_list of slave instances are properly unlinked at
5951 snd_timer_stop() and snd_timer_close().
5953 Last but not least, remove the superfluous call of _snd_timer_stop()
5954 at removing slave links. This is a noop, and calling it may confuse
5955 readers wrt locking. Further cleanup will follow in a later patch.
5957 Actually we've got reports of use-after-free by syzkaller fuzzer, and
5958 this hopefully fixes these issues.
5960 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5961 Cc: <stable@vger.kernel.org>
5962 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5964 sound/core/timer.c | 18 ++++++++++++++----
5965 1 files changed, 14 insertions(+), 4 deletions(-)
5967 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
5968 Author: Takashi Iwai <tiwai@suse.de>
5969 Date: Wed Jan 13 17:48:01 2016 +0100
5971 ALSA: timer: Fix race among timer ioctls
5973 ALSA timer ioctls have an open race and this may lead to a
5974 use-after-free of timer instance object. A simplistic fix is to make
5975 each ioctl exclusive. We have already tread_sem for controlling the
5976 tread, and extend this as a global mutex to be applied to each ioctl.
5978 The downside is, of course, the worse concurrency. But these ioctls
5979 aren't to be parallel accessible, in anyway, so it should be fine to
5982 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5983 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5984 Cc: <stable@vger.kernel.org>
5985 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5987 sound/core/timer.c | 32 +++++++++++++++++++-------------
5988 1 files changed, 19 insertions(+), 13 deletions(-)
5990 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
5991 Author: Takashi Iwai <tiwai@suse.de>
5992 Date: Wed Jan 13 21:35:06 2016 +0100
5994 ALSA: timer: Fix double unlink of active_list
5996 ALSA timer instance object has a couple of linked lists and they are
5997 unlinked unconditionally at snd_timer_stop(). Meanwhile
5998 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
5999 the element list itself unchanged. This ends up with unlinking twice,
6000 and it was caught by syzkaller fuzzer.
6002 The fix is to use list_del_init() variant properly there, too.
6004 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6005 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6006 Cc: <stable@vger.kernel.org>
6007 Signed-off-by: Takashi Iwai <tiwai@suse.de>
6009 sound/core/timer.c | 2 +-
6010 1 files changed, 1 insertions(+), 1 deletions(-)
6012 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
6013 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
6014 Date: Mon Jan 18 18:03:48 2016 +0100
6016 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
6018 It was seen that defective configurations of openvswitch could overwrite
6019 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
6020 many recursions within ovs.
6022 This problem arises due to the high stack usage of openvswitch. The rest
6023 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
6025 We use the already existing recursion counter in ovs_execute_actions to
6026 implement an upper bound of 5 recursions.
6028 Cc: Pravin Shelar <pshelar@ovn.org>
6029 Cc: Simon Horman <simon.horman@netronome.com>
6030 Cc: Eric Dumazet <eric.dumazet@gmail.com>
6031 Cc: Simon Horman <simon.horman@netronome.com>
6032 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
6033 Signed-off-by: David S. Miller <davem@davemloft.net>
6035 net/openvswitch/actions.c | 19 ++++++++++++++-----
6036 1 files changed, 14 insertions(+), 5 deletions(-)
6038 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
6039 Author: Ursula Braun <ursula.braun@de.ibm.com>
6040 Date: Tue Jan 19 10:41:33 2016 +0100
6042 af_iucv: Validate socket address length in iucv_sock_bind()
6044 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
6045 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6046 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
6047 Signed-off-by: David S. Miller <davem@davemloft.net>
6049 net/iucv/af_iucv.c | 3 +++
6050 1 files changed, 3 insertions(+), 0 deletions(-)
6052 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
6053 Author: Brad Spengler <spender@grsecurity.net>
6054 Date: Tue Jan 19 19:32:54 2016 -0500
6056 Apply the same fix as everyone else for the recent keys vulnerability that is
6057 unexploitable under PAX_REFCOUNT
6059 Make a couple more changes that no one else can/will
6061 include/linux/key-type.h | 4 ++--
6062 ipc/msgutil.c | 4 ++--
6063 security/keys/internal.h | 2 +-
6064 security/keys/process_keys.c | 1 +
6065 4 files changed, 6 insertions(+), 5 deletions(-)
6067 commit b56c3a63f431c193400aee17543021950bd14bc4
6068 Merge: 38b1a3d 470069c
6069 Author: Brad Spengler <spender@grsecurity.net>
6070 Date: Sun Jan 17 18:30:19 2016 -0500
6072 Merge branch 'pax-test' into grsec-test
6074 commit 470069cfedef2180313233d275be5901bd6d1135
6075 Author: Brad Spengler <spender@grsecurity.net>
6076 Date: Sun Jan 17 18:29:59 2016 -0500
6078 Update to pax-linux-4.3.3-test22.patch:
6079 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
6080 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
6082 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
6083 drivers/gpu/drm/drm_pci.c | 3 +++
6084 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
6085 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
6086 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
6087 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
6088 drivers/net/usb/asix_common.c | 3 ++-
6089 include/drm/drmP.h | 1 +
6090 8 files changed, 22 insertions(+), 29 deletions(-)
6092 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
6093 Author: Brad Spengler <spender@grsecurity.net>
6094 Date: Sun Jan 17 12:33:53 2016 -0500
6096 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
6097 mentioned banning execution of suid/sgid binaries, though the kernel
6098 source clearly only mentions banning execution of suid binaries. Since
6099 there's no reason for us to not ban execution of sgid binaries as well,
6100 make the implementation match the Kconfig description.
6103 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
6104 include/linux/sched.h | 4 ++--
6105 3 files changed, 18 insertions(+), 17 deletions(-)
6107 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
6108 Merge: d141a86 ea4a835
6109 Author: Brad Spengler <spender@grsecurity.net>
6110 Date: Sat Jan 16 14:12:22 2016 -0500
6112 Merge branch 'pax-test' into grsec-test
6115 drivers/gpu/drm/i810/i810_drv.c
6117 commit ea4a835328ada6513ac013986764d6caea8cd348
6118 Author: Brad Spengler <spender@grsecurity.net>
6119 Date: Sat Jan 16 14:11:30 2016 -0500
6121 Update to pax-linux-4.3.3-test21.patch:
6122 - fixed some fallout from the drm_drivers constification, reported by spender
6124 drivers/gpu/drm/armada/armada_drv.c | 3 +--
6125 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
6126 drivers/gpu/drm/i810/i810_dma.c | 2 +-
6127 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
6128 drivers/gpu/drm/i810/i810_drv.h | 2 +-
6129 5 files changed, 8 insertions(+), 6 deletions(-)
6131 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
6132 Author: Brad Spengler <spender@grsecurity.net>
6133 Date: Sat Jan 16 13:16:36 2016 -0500
6137 drivers/gpu/drm/i810/i810_dma.c | 2 +-
6138 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
6139 drivers/gpu/drm/i810/i810_drv.h | 2 +-
6140 3 files changed, 5 insertions(+), 3 deletions(-)
6142 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
6143 Merge: 5fa135d bbda879
6144 Author: Brad Spengler <spender@grsecurity.net>
6145 Date: Sat Jan 16 12:59:22 2016 -0500
6147 Merge branch 'pax-test' into grsec-test
6149 commit bbda87914edf63e27fb46670bf3a373f2b963c73
6150 Author: Brad Spengler <spender@grsecurity.net>
6151 Date: Sat Jan 16 12:58:04 2016 -0500
6153 Update to pax-linux-4.3.3-test20.patch:
6154 - constified drm_driver
6155 - Emese fixed a special case in handling __func__ in the initify plugin
6156 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
6157 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
6159 arch/x86/kernel/cpu/perf_event.h | 2 +-
6160 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
6161 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
6162 arch/x86/kernel/uprobes.c | 2 +-
6163 arch/x86/mm/mpx.c | 2 +-
6164 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
6165 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
6166 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
6167 drivers/gpu/drm/drm_pci.c | 6 +-
6168 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
6169 drivers/gpu/drm/i915/i915_dma.c | 2 +-
6170 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
6171 drivers/gpu/drm/i915/i915_drv.h | 2 +-
6172 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
6173 drivers/gpu/drm/mga/mga_drv.c | 5 +-
6174 drivers/gpu/drm/mga/mga_drv.h | 2 +-
6175 drivers/gpu/drm/mga/mga_state.c | 2 +-
6176 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
6177 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
6178 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
6179 drivers/gpu/drm/r128/r128_drv.c | 4 +-
6180 drivers/gpu/drm/r128/r128_drv.h | 2 +-
6181 drivers/gpu/drm/r128/r128_state.c | 2 +-
6182 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
6183 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
6184 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
6185 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
6186 drivers/gpu/drm/savage/savage_bci.c | 2 +-
6187 drivers/gpu/drm/savage/savage_drv.c | 5 +-
6188 drivers/gpu/drm/savage/savage_drv.h | 2 +-
6189 drivers/gpu/drm/sis/sis_drv.c | 5 +-
6190 drivers/gpu/drm/sis/sis_drv.h | 2 +-
6191 drivers/gpu/drm/sis/sis_mm.c | 2 +-
6192 drivers/gpu/drm/via/via_dma.c | 2 +-
6193 drivers/gpu/drm/via/via_drv.c | 5 +-
6194 drivers/gpu/drm/via/via_drv.h | 2 +-
6195 include/drm/drmP.h | 2 +-
6197 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
6198 tools/gcc/initify_plugin.c | 15 +++-
6199 .../disable_size_overflow_hash.data | 1 +
6200 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
6201 42 files changed, 156 insertions(+), 110 deletions(-)
6203 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
6204 Author: Brad Spengler <spender@grsecurity.net>
6205 Date: Sat Jan 16 12:19:23 2016 -0500
6209 grsecurity/grsec_sig.c | 3 +--
6210 1 files changed, 1 insertions(+), 2 deletions(-)
6212 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
6213 Author: Brad Spengler <spender@grsecurity.net>
6214 Date: Sat Jan 16 12:10:37 2016 -0500
6216 As pointed out by Jann Horn, some distros are starting to circumvent
6217 previous assumptions about the attainability of a user to control
6218 multiple UIDs by handing out suid binaries that allow a user to run
6219 processes (including exploits) under a number of other pre-defined
6220 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
6221 (though it would have to involve some code path that doesn't involve
6222 locks) fix that here by ensuring no more than 8 users on a system can
6223 be banned before a reboot is required. If more are banned, a panic
6226 grsecurity/grsec_sig.c | 8 ++++++++
6227 1 files changed, 8 insertions(+), 0 deletions(-)
6229 commit a8d37776e9521c567ebff6730d49312f72435f08
6230 Author: Eric Dumazet <edumazet@google.com>
6231 Date: Thu Dec 3 11:12:07 2015 -0800
6233 proc: add a reschedule point in proc_readfd_common()
6235 User can pass an arbitrary large buffer to getdents().
6237 It is typically a 32KB buffer used by libc scandir() implementation.
6239 When scanning /proc/{pid}/fd, we can hold cpu way too long,
6240 so add a cond_resched() to be kind with other tasks.
6242 We've seen latencies of more than 50ms on real workloads.
6244 Signed-off-by: Eric Dumazet <edumazet@google.com>
6245 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
6246 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
6249 1 files changed, 1 insertions(+), 0 deletions(-)
6251 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
6252 Author: Rabin Vincent <rabin@rab.in>
6253 Date: Tue Jan 12 20:17:08 2016 +0100
6255 net: bpf: reject invalid shifts
6257 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
6258 constant shift that can't be encoded in the immediate field of the
6259 UBFM/SBFM instructions is passed to the JIT. Since these shifts
6260 amounts, which are negative or >= regsize, are invalid, reject them in
6261 the eBPF verifier and the classic BPF filter checker, for all
6264 Signed-off-by: Rabin Vincent <rabin@rab.in>
6265 Acked-by: Alexei Starovoitov <ast@kernel.org>
6266 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
6267 Signed-off-by: David S. Miller <davem@davemloft.net>
6269 kernel/bpf/verifier.c | 10 ++++++++++
6270 net/core/filter.c | 5 +++++
6271 2 files changed, 15 insertions(+), 0 deletions(-)
6273 commit c248e115a73496625a1c64660d0eeefd67e55cbf
6274 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6275 Date: Fri Jan 8 11:00:54 2016 -0200
6277 sctp: fix use-after-free in pr_debug statement
6279 Dmitry Vyukov reported a use-after-free in the code expanded by the
6280 macro debug_post_sfx, which is caused by the use of the asoc pointer
6281 after it was freed within sctp_side_effect() scope.
6283 This patch fixes it by allowing sctp_side_effect to clear that asoc
6284 pointer when the TCB is freed.
6286 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
6287 because it will trigger DELETE_TCB too on that same loop.
6289 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
6290 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
6291 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
6293 The macro is already prepared to handle such NULL pointer.
6295 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6296 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6297 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
6298 Signed-off-by: David S. Miller <davem@davemloft.net>
6300 net/sctp/sm_sideeffect.c | 11 ++++++-----
6301 net/sctp/sm_statefuns.c | 17 ++++-------------
6302 2 files changed, 10 insertions(+), 18 deletions(-)
6304 commit 395ea8a9e73e184fc14153a033000bccf4213213
6305 Author: willy tarreau <w@1wt.eu>
6306 Date: Sun Jan 10 07:54:56 2016 +0100
6308 unix: properly account for FDs passed over unix sockets
6310 It is possible for a process to allocate and accumulate far more FDs than
6311 the process' limit by sending them over a unix socket then closing them
6312 to keep the process' fd count low.
6314 This change addresses this problem by keeping track of the number of FDs
6315 in flight per user and preventing non-privileged processes from having
6316 more FDs in flight than their configured FD limit.
6318 Reported-by: socketpair@gmail.com
6319 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
6320 Mitigates: CVE-2013-4312 (Linux 2.0+)
6321 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
6322 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
6323 Signed-off-by: Willy Tarreau <w@1wt.eu>
6324 Signed-off-by: David S. Miller <davem@davemloft.net>
6326 include/linux/sched.h | 1 +
6327 net/unix/af_unix.c | 24 ++++++++++++++++++++----
6328 net/unix/garbage.c | 13 ++++++++-----
6329 3 files changed, 29 insertions(+), 9 deletions(-)
6331 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
6332 Author: Sasha Levin <sasha.levin@oracle.com>
6333 Date: Thu Jan 7 14:52:43 2016 -0500
6335 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
6337 proc_dostring() needs an initialized destination string, while the one
6338 provided in proc_sctp_do_hmac_alg() contains stack garbage.
6340 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
6341 accessing invalid memory.
6343 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
6344 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
6345 Signed-off-by: David S. Miller <davem@davemloft.net>
6347 net/sctp/sysctl.c | 2 +-
6348 1 files changed, 1 insertions(+), 1 deletions(-)
6350 commit 4014e09faf0fe9054119624ccfff1236e886b554
6351 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6352 Date: Tue Nov 24 17:13:21 2015 -0500
6354 RDS: fix race condition when sending a message on unbound socket
6356 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
6358 Sasha's found a NULL pointer dereference in the RDS connection code when
6359 sending a message to an apparently unbound socket. The problem is caused
6360 by the code checking if the socket is bound in rds_sendmsg(), which checks
6361 the rs_bound_addr field without taking a lock on the socket. This opens a
6362 race where rs_bound_addr is temporarily set but where the transport is not
6363 in rds_bind(), leading to a NULL pointer dereference when trying to
6364 dereference 'trans' in __rds_conn_create().
6366 Vegard wrote a reproducer for this issue, so kindly ask him to share if
6369 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
6370 with this patch, whereas I could without.
6372 Complete earlier incomplete fix to CVE-2015-6937:
6374 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
6376 Cc: David S. Miller <davem@davemloft.net>
6378 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
6379 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
6380 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
6381 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6382 Signed-off-by: David S. Miller <davem@davemloft.net>
6383 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
6389 net/rds/connection.c | 6 ------
6390 1 files changed, 0 insertions(+), 6 deletions(-)
6392 commit 206df8d01104344d7588d801016a281a4cd25556
6393 Author: Sasha Levin <sasha.levin@oracle.com>
6394 Date: Tue Sep 8 10:53:40 2015 -0400
6396 RDS: verify the underlying transport exists before creating a connection
6398 There was no verification that an underlying transport exists when creating
6399 a connection, this would cause dereferencing a NULL ptr.
6401 It might happen on sockets that weren't properly bound before attempting to
6402 send a message, which will cause a NULL ptr deref:
6404 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
6405 [135546.051270] Modules linked in:
6406 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
6407 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
6408 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
6409 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
6410 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
6411 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
6412 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
6413 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
6414 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
6415 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
6416 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
6417 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
6418 [135546.064723] Stack:
6419 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
6420 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
6421 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
6422 [135546.068629] Call Trace:
6423 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
6424 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
6425 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
6426 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
6427 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
6428 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
6429 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
6430 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
6431 [135546.076349] ? __might_fault (mm/memory.c:3795)
6432 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
6433 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
6434 [135546.078856] SYSC_sendto (net/socket.c:1657)
6435 [135546.079596] ? SYSC_connect (net/socket.c:1628)
6436 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
6437 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
6438 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
6439 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
6440 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
6441 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
6442 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
6444 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
6445 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
6446 Signed-off-by: David S. Miller <davem@davemloft.net>
6448 net/rds/connection.c | 6 ++++++
6449 1 files changed, 6 insertions(+), 0 deletions(-)
6451 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
6452 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
6453 Date: Tue Jan 5 20:32:47 2016 -0500
6455 ftrace/module: Call clean up function when module init fails early
6457 If the module init code fails after calling ftrace_module_init() and before
6458 calling do_init_module(), we can suffer from a memory leak. This is because
6459 ftrace_module_init() allocates pages to store the locations that ftrace
6460 hooks are placed in the module text. If do_init_module() fails, it still
6461 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
6462 the pages it allocated for the module. But if load_module() fails before
6463 then, the pages allocated by ftrace_module_init() will never be freed.
6465 Call ftrace_release_mod() on the module if load_module() fails before
6466 getting to do_init_module().
6468 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
6470 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
6471 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
6472 Cc: stable@vger.kernel.org # v2.6.38+
6473 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
6474 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
6476 include/linux/ftrace.h | 1 +
6477 kernel/module.c | 6 ++++++
6478 2 files changed, 7 insertions(+), 0 deletions(-)
6480 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
6481 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
6482 Date: Wed Jan 6 00:18:48 2016 -0800
6484 net: possible use after free in dst_release
6486 dst_release should not access dst->flags after decrementing
6487 __refcnt to 0. The dst_entry may be in dst_busy_list and
6488 dst_gc_task may dst_destroy it before dst_release gets a chance
6489 to access dst->flags.
6491 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
6492 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
6493 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
6494 Acked-by: Eric Dumazet <edumazet@google.com>
6495 Signed-off-by: David S. Miller <davem@davemloft.net>
6497 net/core/dst.c | 3 ++-
6498 1 files changed, 2 insertions(+), 1 deletions(-)
6500 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
6501 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
6502 Date: Wed Jan 6 14:55:02 2016 +0000
6504 mkiss: fix scribble on freed memory
6506 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
6507 scribble on free memory but added a new one which allows the user to
6508 scribble even more and user controlled data into freed space.
6510 As with 6pack we need to halt the queue before we free the buffers, because
6511 the transmit logic is not protected by the semaphore.
6513 Signed-off-by: Alan Cox <alan@linux.intel.com>
6514 Signed-off-by: David S. Miller <davem@davemloft.net>
6516 drivers/net/hamradio/mkiss.c | 5 +++++
6517 1 files changed, 5 insertions(+), 0 deletions(-)
6519 commit 5cbbcbd32dc1949470f61d342503808fa9555276
6520 Author: David Miller <davem@davemloft.net>
6521 Date: Thu Dec 17 16:05:49 2015 -0500
6523 mkiss: Fix use after free in mkiss_close().
6525 Need to do the unregister_device() after all references to the driver
6526 private have been done.
6528 Signed-off-by: David S. Miller <davem@davemloft.net>
6530 drivers/net/hamradio/mkiss.c | 4 ++--
6531 1 files changed, 2 insertions(+), 2 deletions(-)
6533 commit b00171576794a98068e069a660f0991a6a5190ff
6534 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
6535 Date: Tue Jan 5 11:51:25 2016 +0000
6537 6pack: fix free memory scribbles
6539 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
6540 memory scribble but in doing so replaced it with a different one that allows
6541 the user to control the data and scribble even more.
6543 sixpack_close is called by the tty layer in tty context. The tty context is
6544 protected by sp_get() and sp_put(). However network layer activity via
6545 sp_xmit() is not protected this way. We must therefore stop the queue
6546 otherwise the user gets to dump a buffer mostly of their choice into freed
6549 Signed-off-by: Alan Cox <alan@linux.intel.com>
6550 Signed-off-by: David S. Miller <davem@davemloft.net>
6552 drivers/net/hamradio/6pack.c | 6 ++++++
6553 1 files changed, 6 insertions(+), 0 deletions(-)
6555 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
6556 Author: David Miller <davem@davemloft.net>
6557 Date: Thu Dec 17 16:05:32 2015 -0500
6559 6pack: Fix use after free in sixpack_close().
6561 Need to do the unregister_device() after all references to the driver
6562 private have been done.
6564 Also we need to use del_timer_sync() for the timers so that we don't
6565 have any asynchronous references after the unregister.
6567 Signed-off-by: David S. Miller <davem@davemloft.net>
6569 drivers/net/hamradio/6pack.c | 8 ++++----
6570 1 files changed, 4 insertions(+), 4 deletions(-)
6572 commit 4f9d532742656b3613d579220fd10c78f24ba37b
6573 Author: Rabin Vincent <rabin@rab.in>
6574 Date: Tue Jan 5 16:23:07 2016 +0100
6576 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
6578 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
6579 instructions since it XORs A with X while all the others replace A with
6580 some loaded value. All the BPF JITs fail to clear A if this is used as
6581 the first instruction in a filter. This was found using american fuzzy
6584 Add a helper to determine if A needs to be cleared given the first
6585 instruction in a filter, and use this in the JITs. Except for ARM, the
6586 rest have only been compile-tested.
6588 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
6589 Signed-off-by: Rabin Vincent <rabin@rab.in>
6590 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
6591 Acked-by: Alexei Starovoitov <ast@kernel.org>
6592 Signed-off-by: David S. Miller <davem@davemloft.net>
6594 arch/arm/net/bpf_jit_32.c | 16 +---------------
6595 arch/mips/net/bpf_jit.c | 16 +---------------
6596 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
6597 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
6598 include/linux/filter.h | 19 +++++++++++++++++++
6599 5 files changed, 25 insertions(+), 56 deletions(-)
6601 commit 570d88f8acfffda92b89ae2e1c47320d47256034
6602 Author: John Fastabend <john.fastabend@gmail.com>
6603 Date: Tue Jan 5 09:11:36 2016 -0800
6605 net: sched: fix missing free per cpu on qstats
6607 When a qdisc is using per cpu stats (currently just the ingress
6608 qdisc) only the bstats are being freed. This also free's the qstats.
6610 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
6611 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
6612 Acked-by: Eric Dumazet <edumazet@google.com>
6613 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
6614 Signed-off-by: David S. Miller <davem@davemloft.net>
6616 net/sched/sch_generic.c | 4 +++-
6617 1 files changed, 3 insertions(+), 1 deletions(-)
6619 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
6620 Author: Rabin Vincent <rabin@rab.in>
6621 Date: Tue Jan 5 18:34:04 2016 +0100
6623 ARM: net: bpf: fix zero right shift
6625 The LSR instruction cannot be used to perform a zero right shift since a
6626 0 as the immediate value (imm5) in the LSR instruction encoding means
6627 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
6629 Make the JIT skip generation of the LSR if a zero-shift is requested.
6631 This was found using american fuzzy lop.
6633 Signed-off-by: Rabin Vincent <rabin@rab.in>
6634 Acked-by: Alexei Starovoitov <ast@kernel.org>
6635 Signed-off-by: David S. Miller <davem@davemloft.net>
6637 arch/arm/net/bpf_jit_32.c | 3 ++-
6638 1 files changed, 2 insertions(+), 1 deletions(-)
6640 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
6641 Author: Brad Spengler <spender@grsecurity.net>
6642 Date: Wed Jan 6 20:35:57 2016 -0500
6644 Don't perform hidden lookups in RBAC against the directory of
6645 a file being opened with O_CREAT, reported by Karl Witt
6652 1 files changed, 0 insertions(+), 3 deletions(-)
6654 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
6655 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
6656 Date: Tue Jan 5 10:46:00 2016 +0100
6658 bridge: Only call /sbin/bridge-stp for the initial network namespace
6660 [I stole this patch from Eric Biederman. He wrote:]
6662 > There is no defined mechanism to pass network namespace information
6663 > into /sbin/bridge-stp therefore don't even try to invoke it except
6664 > for bridge devices in the initial network namespace.
6666 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
6667 > invoked for any network device name which if /sbin/bridge-stp does not
6668 > guard against unreasonable arguments or being invoked twice on the
6669 > same network device could cause problems.
6671 [Hannes: changed patch using netns_eq]
6673 Cc: Eric W. Biederman <ebiederm@xmission.com>
6674 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
6675 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
6676 Signed-off-by: David S. Miller <davem@davemloft.net>
6678 net/bridge/br_stp_if.c | 5 ++++-
6679 1 files changed, 4 insertions(+), 1 deletions(-)
6681 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
6682 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6683 Date: Wed Dec 23 16:28:40 2015 -0200
6685 sctp: use GFP_USER for user-controlled kmalloc
6687 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
6688 missed two other spots.
6690 For connectx, as it's more likely to be used by kernel users of the API,
6691 it detects if GFP_USER should be used or not.
6693 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
6694 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6695 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6696 Signed-off-by: David S. Miller <davem@davemloft.net>
6698 net/sctp/socket.c | 9 ++++++---
6699 1 files changed, 6 insertions(+), 3 deletions(-)
6701 commit 5718a1f63c41fc156f729783423b002763779d04
6702 Author: Florian Westphal <fw@strlen.de>
6703 Date: Thu Dec 31 14:26:33 2015 +0100
6705 connector: bump skb->users before callback invocation
6707 Dmitry reports memleak with syskaller program.
6708 Problem is that connector bumps skb usecount but might not invoke callback.
6710 So move skb_get to where we invoke the callback.
6712 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6713 Signed-off-by: Florian Westphal <fw@strlen.de>
6714 Signed-off-by: David S. Miller <davem@davemloft.net>
6716 drivers/connector/connector.c | 11 +++--------
6717 1 files changed, 3 insertions(+), 8 deletions(-)
6719 commit 2e6372e6a97f8d642416899861f91777f44f13b7
6720 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
6721 Date: Sun Jan 3 18:56:38 2016 +0000
6723 af_unix: Fix splice-bind deadlock
6725 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
6726 system call and AF_UNIX sockets,
6728 http://lists.openwall.net/netdev/2015/11/06/24
6730 The situation was analyzed as
6732 (a while ago) A: socketpair()
6733 B: splice() from a pipe to /mnt/regular_file
6734 does sb_start_write() on /mnt
6735 C: try to freeze /mnt
6736 wait for B to finish with /mnt
6737 A: bind() try to bind our socket to /mnt/new_socket_name
6738 lock our socket, see it not bound yet
6739 decide that it needs to create something in /mnt
6740 try to do sb_start_write() on /mnt, block (it's
6742 D: splice() from the same pipe to our socket
6743 lock the pipe, see that socket is connected
6744 try to lock the socket, block waiting for A
6745 B: get around to actually feeding a chunk from
6746 pipe to file, try to lock the pipe. Deadlock.
6748 on 2015/11/10 by Al Viro,
6750 http://lists.openwall.net/netdev/2015/11/10/4
6752 The patch fixes this by removing the kern_path_create related code from
6753 unix_mknod and executing it as part of unix_bind prior acquiring the
6754 readlock of the socket in question. This means that A (as used above)
6755 will sb_start_write on /mnt before it acquires the readlock, hence, it
6756 won't indirectly block B which first did a sb_start_write and then
6757 waited for a thread trying to acquire the readlock. Consequently, A
6758 being blocked by C waiting for B won't cause a deadlock anymore
6759 (effectively, both A and B acquire two locks in opposite order in the
6760 situation described above).
6762 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
6764 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
6765 Signed-off-by: David S. Miller <davem@davemloft.net>
6771 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
6772 1 files changed, 42 insertions(+), 28 deletions(-)
6774 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
6775 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
6776 Date: Thu Dec 31 13:11:28 2015 +0800
6778 tracing: Fix setting of start_index in find_next()
6780 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
6783 general protection fault: 0000 [#1] PREEMPT SMP
6784 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
6785 RIP: 0010:[<ffffffff811375b2>]
6786 [<ffffffff811375b2>] t_show+0x22/0xe0
6787 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
6788 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
6789 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
6790 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
6791 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
6792 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
6793 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
6794 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
6795 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
6797 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
6798 [<ffffffff811b749b>] vfs_read+0x9b/0x160
6799 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
6800 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
6801 ---[ end trace 5bd9eb630614861e ]---
6802 Kernel panic - not syncing: Fatal exception
6804 When the first time find_next calls find_next_mod_format, it should
6805 iterate the trace_bprintk_fmt_list to find the first print format of
6806 the module. However in current code, start_index is smaller than *pos
6807 at first, and code will not iterate the list. Latter container_of will
6808 get the wrong address with former v, which will cause mod_fmt be a
6809 meaningless object and so is the returned mod_fmt->fmt.
6811 This patch will fix it by correcting the start_index. After fixed,
6812 when the first time calls find_next_mod_format, start_index will be
6813 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
6814 get the right module printk format, so is the returned mod_fmt->fmt.
6816 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
6818 Cc: stable@vger.kernel.org # 3.12+
6819 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
6820 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
6821 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
6823 kernel/trace/trace_printk.c | 1 +
6824 1 files changed, 1 insertions(+), 0 deletions(-)
6826 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
6827 Author: Al Viro <viro@zeniv.linux.org.uk>
6828 Date: Mon Dec 28 20:47:08 2015 -0500
6830 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
6832 Cc: stable@vger.kernel.org # 3.15+
6833 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
6834 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
6836 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
6837 1 files changed, 37 insertions(+), 36 deletions(-)
6839 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
6840 Merge: de243c2 3adc55a
6841 Author: Brad Spengler <spender@grsecurity.net>
6842 Date: Tue Jan 5 18:10:10 2016 -0500
6844 Merge branch 'pax-test' into grsec-test
6846 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
6847 Author: Brad Spengler <spender@grsecurity.net>
6848 Date: Tue Jan 5 18:08:53 2016 -0500
6850 Update to pax-linux-4.3.3-test16.patch:
6851 - small cleanup in entry_64.S on x86
6852 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
6853 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
6854 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
6855 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
6856 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
6858 arch/x86/entry/entry_64.S | 60 +++++-----
6859 arch/x86/kernel/alternative.c | 2 +-
6860 arch/x86/kvm/emulate.c | 4 +-
6861 tools/gcc/initify_plugin.c | 123 +++++++++----------
6862 .../disable_size_overflow_hash.data | 4 +-
6863 .../size_overflow_plugin/size_overflow_hash.data | 2 -
6864 6 files changed, 93 insertions(+), 102 deletions(-)
6866 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
6867 Author: Brad Spengler <spender@grsecurity.net>
6868 Date: Tue Dec 29 18:01:24 2015 -0500
6870 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
6871 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
6872 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
6874 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
6875 against suid/sgid attacks and the flaw above would only eliminate the extra
6876 entropy provided for the brk-managed heap, still leaving it with the minimum
6877 of 16-bit entropy for mmap on x86 and 28 on x64.
6880 1 files changed, 1 insertions(+), 1 deletions(-)
6882 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
6883 Merge: 436201b 2584340
6884 Author: Brad Spengler <spender@grsecurity.net>
6885 Date: Mon Dec 28 20:30:01 2015 -0500
6887 Merge branch 'pax-test' into grsec-test
6889 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
6890 Author: Brad Spengler <spender@grsecurity.net>
6891 Date: Mon Dec 28 20:29:28 2015 -0500
6893 Update to pax-linux-4.3.3-test14.patch:
6894 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
6895 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
6896 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
6897 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
6898 - fixed an assert in the initify plugin that triggered in vic_register on arm
6900 arch/arm/include/asm/atomic.h | 7 +++++--
6901 arch/arm/include/asm/domain.h | 5 ++---
6902 arch/x86/kernel/tboot.c | 14 +++++++++-----
6903 drivers/hv/channel.c | 4 +---
6904 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
6905 drivers/net/hyperv/rndis_filter.c | 3 +--
6907 include/linux/atomic.h | 15 ---------------
6908 net/core/skbuff.c | 3 ++-
6909 tools/gcc/initify_plugin.c | 4 +++-
6910 10 files changed, 26 insertions(+), 35 deletions(-)
6912 commit 436201b6626b488d173c8076447000077c27b84a
6913 Author: David Howells <dhowells@redhat.com>
6914 Date: Fri Dec 18 01:34:26 2015 +0000
6916 KEYS: Fix race between read and revoke
6918 This fixes CVE-2015-7550.
6920 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
6921 happens between keyctl_read() checking the validity of a key and the key's
6922 semaphore being taken, then the key type read method will see a revoked key.
6924 This causes a problem for the user-defined key type because it assumes in
6925 its read method that there will always be a payload in a non-revoked key
6926 and doesn't check for a NULL pointer.
6928 Fix this by making keyctl_read() check the validity of a key after taking
6929 semaphore instead of before.
6931 I think the bug was introduced with the original keyrings code.
6933 This was discovered by a multithreaded test program generated by syzkaller
6934 (http://github.com/google/syzkaller). Here's a cleaned up version:
6936 #include <sys/types.h>
6937 #include <keyutils.h>
6938 #include <pthread.h>
6939 void *thr0(void *arg)
6941 key_serial_t key = (unsigned long)arg;
6945 void *thr1(void *arg)
6947 key_serial_t key = (unsigned long)arg;
6949 keyctl_read(key, buffer, 16);
6954 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
6956 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
6957 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
6958 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
6959 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
6960 pthread_join(th[0], 0);
6961 pthread_join(th[1], 0);
6962 pthread_join(th[2], 0);
6963 pthread_join(th[3], 0);
6969 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
6973 while keyctl-race; do :; done
6975 as it may need several iterations to crash the kernel. The crash can be
6978 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
6979 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
6982 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
6983 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
6984 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
6986 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6987 Signed-off-by: David Howells <dhowells@redhat.com>
6988 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6989 Cc: stable@vger.kernel.org
6990 Signed-off-by: James Morris <james.l.morris@oracle.com>
6992 security/keys/keyctl.c | 18 +++++++++---------
6993 1 files changed, 9 insertions(+), 9 deletions(-)
6995 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
6996 Author: Brad Spengler <spender@grsecurity.net>
6997 Date: Tue Dec 22 20:44:01 2015 -0500
6999 Add new kernel command-line param: pax_size_overflow_report_only
7000 If a user triggers a size_overflow violation that makes it difficult
7001 to obtain the call trace without serial console/net console, they can
7002 use this option to provide that information to us
7004 Documentation/kernel-parameters.txt | 5 +++++
7005 fs/exec.c | 12 +++++++++---
7006 init/main.c | 11 +++++++++++
7007 3 files changed, 25 insertions(+), 3 deletions(-)
7009 commit 4254a8da5851df8c08cdca5c392916e8c105408d
7010 Author: WANG Cong <xiyou.wangcong@gmail.com>
7011 Date: Mon Dec 21 10:55:45 2015 -0800
7013 addrconf: always initialize sysctl table data
7015 When sysctl performs restrict writes, it allows to write from
7016 a middle position of a sysctl file, which requires us to initialize
7017 the table data before calling proc_dostring() for the write case.
7019 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
7020 Reported-by: Sasha Levin <sasha.levin@oracle.com>
7021 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
7022 Tested-by: Sasha Levin <sasha.levin@oracle.com>
7023 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
7024 Signed-off-by: David S. Miller <davem@davemloft.net>
7026 net/ipv6/addrconf.c | 11 ++++-------
7027 1 files changed, 4 insertions(+), 7 deletions(-)
7029 commit f8002863fb06c363180637046947a78a6ccb3d33
7030 Author: WANG Cong <xiyou.wangcong@gmail.com>
7031 Date: Wed Dec 16 23:39:04 2015 -0800
7033 net: check both type and procotol for tcp sockets
7035 Dmitry reported the following out-of-bound access:
7038 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
7039 mm/kasan/report.c:294
7040 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
7041 [< inline >] SYSC_setsockopt net/socket.c:1746
7042 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
7043 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
7044 arch/x86/entry/entry_64.S:185
7046 This is because we mistake a raw socket as a tcp socket.
7047 We should check both sk->sk_type and sk->sk_protocol to ensure
7050 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
7052 Reported-by: Dmitry Vyukov <dvyukov@google.com>
7053 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
7054 Cc: Eric Dumazet <eric.dumazet@gmail.com>
7055 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
7056 Acked-by: Willem de Bruijn <willemb@google.com>
7057 Signed-off-by: David S. Miller <davem@davemloft.net>
7059 net/core/skbuff.c | 3 ++-
7060 net/core/sock.c | 3 ++-
7061 2 files changed, 4 insertions(+), 2 deletions(-)
7063 commit bd6b3399804470a4ad8f34229469ca149dceba3d
7064 Author: Colin Ian King <colin.king@canonical.com>
7065 Date: Fri Dec 18 14:22:01 2015 -0800
7067 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
7069 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
7070 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
7071 the setting of ret after the get_proc_task call and incorrectly left it as
7072 -ESRCH. Instead, return 0 when successful.
7076 echo 0 > /proc/self/coredump_filter
7077 bash: echo: write error: No such process
7079 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
7080 Signed-off-by: Colin Ian King <colin.king@canonical.com>
7081 Acked-by: Kees Cook <keescook@chromium.org>
7082 Cc: <stable@vger.kernel.org> [4.3+]
7083 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
7084 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
7086 fs/proc/base.c | 1 +
7087 1 files changed, 1 insertions(+), 0 deletions(-)
7089 commit b28aca2b99ed08546778355fb9402c503ff9b29e
7090 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
7091 Date: Tue Dec 22 10:23:44 2015 -0700
7093 block: ensure to split after potentially bouncing a bio
7095 blk_queue_bio() does split then bounce, which makes the segment
7096 counting based on pages before bouncing and could go wrong. Move
7097 the split to after bouncing, like we do for blk-mq, and the we
7098 fix the issue of having the bio count for segments be wrong.
7100 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
7101 Cc: stable@vger.kernel.org
7102 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
7103 Signed-off-by: Jens Axboe <axboe@fb.com>
7105 block/blk-core.c | 4 ++--
7106 1 files changed, 2 insertions(+), 2 deletions(-)
7108 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
7109 Merge: f6f63ae ec72fa5
7110 Author: Brad Spengler <spender@grsecurity.net>
7111 Date: Tue Dec 22 19:46:26 2015 -0500
7113 Merge branch 'pax-test' into grsec-test
7115 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
7116 Author: Brad Spengler <spender@grsecurity.net>
7117 Date: Tue Dec 22 19:45:51 2015 -0500
7119 Update to pax-linux-4.3.3-test13.patch:
7120 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
7121 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
7123 arch/arm/mm/fault.c | 2 +-
7124 arch/x86/mm/fault.c | 2 +-
7125 fs/btrfs/extent_map.c | 8 ++++++--
7126 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
7127 4 files changed, 11 insertions(+), 5 deletions(-)
7129 commit f6f63ae154cd45028add1dc41957878060d77fbf
7130 Author: Brad Spengler <spender@grsecurity.net>
7131 Date: Thu Dec 17 18:43:44 2015 -0500
7133 ptrace_has_cap() checks whether the current process should be
7134 treated as having a certain capability for ptrace checks
7135 against another process. Until now, this was equivalent to
7136 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
7138 However, if a root-owned process wants to enter a user
7139 namespace for some reason without knowing who owns it and
7140 therefore can't change to the namespace owner's uid and gid
7141 before entering, as soon as it has entered the namespace,
7142 the namespace owner can attach to it via ptrace and thereby
7143 gain access to its uid and gid.
7145 While it is possible for the entering process to switch to
7146 the uid of a claimed namespace owner before entering,
7147 causing the attempt to enter to fail if the claimed uid is
7148 wrong, this doesn't solve the problem of determining an
7151 With this change, the entering process can first enter the
7152 namespace and then safely inspect the namespace's
7153 properties, e.g. through /proc/self/{uid_map,gid_map},
7154 assuming that the namespace owner doesn't have access to
7156 Signed-off-by: Jann Horn <jann@thejh.net>
7158 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
7159 1 files changed, 25 insertions(+), 5 deletions(-)
7161 commit e314f0fb63020f61543b401ff594e953c2c304e5
7162 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
7163 Date: Tue Dec 15 10:46:17 2015 -0800
7165 net: fix uninitialized variable issue
7167 msg_iocb needs to be initialized on the recv/recvfrom path.
7168 Otherwise afalg will wrongly interpret it as an async call.
7170 Cc: stable@vger.kernel.org
7171 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
7172 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
7173 Signed-off-by: David S. Miller <davem@davemloft.net>
7176 1 files changed, 1 insertions(+), 0 deletions(-)
7178 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
7179 Merge: dfa764c 142edcf
7180 Author: Brad Spengler <spender@grsecurity.net>
7181 Date: Wed Dec 16 21:01:17 2015 -0500
7183 Merge branch 'pax-test' into grsec-test
7185 commit 142edcf1005a57fb8887823565cf0bafad2f313c
7186 Author: Brad Spengler <spender@grsecurity.net>
7187 Date: Wed Dec 16 21:00:57 2015 -0500
7189 Update to pax-linux-4.3.3-test12.patch:
7190 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
7191 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
7193 drivers/tty/n_tty.c | 16 ++++++++--------
7194 .../disable_size_overflow_hash.data | 2 ++
7195 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
7196 3 files changed, 12 insertions(+), 12 deletions(-)
7198 commit dfa764cc549892a5bfc1083cac78b99032cae577
7199 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
7200 Date: Tue Dec 15 22:59:12 2015 +0100
7202 ipv6: automatically enable stable privacy mode if stable_secret set
7204 Bjørn reported that while we switch all interfaces to privacy stable mode
7205 when setting the secret, we don't set this mode for new interfaces. This
7206 does not make sense, so change this behaviour.
7208 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
7209 Reported-by: Bjørn Mork <bjorn@mork.no>
7210 Cc: Bjørn Mork <bjorn@mork.no>
7211 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
7212 Signed-off-by: David S. Miller <davem@davemloft.net>
7214 net/ipv6/addrconf.c | 6 ++++++
7215 1 files changed, 6 insertions(+), 0 deletions(-)
7217 commit c2815a1fee03f222273e77c14e43f960da06f35a
7218 Author: Brad Spengler <spender@grsecurity.net>
7219 Date: Wed Dec 16 13:03:38 2015 -0500
7221 Work around upstream limitation on the number of thread info flags causing a compilation error
7222 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
7224 arch/arm/kernel/entry-common.S | 8 ++++++--
7225 1 files changed, 6 insertions(+), 2 deletions(-)
7227 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
7228 Author: Brad Spengler <spender@grsecurity.net>
7229 Date: Tue Dec 15 19:03:41 2015 -0500
7231 Initial import of grsecurity 3.1 for Linux 4.3.3
7233 Documentation/dontdiff | 2 +
7234 Documentation/kernel-parameters.txt | 7 +
7235 Documentation/sysctl/kernel.txt | 15 +
7237 arch/alpha/include/asm/cache.h | 4 +-
7238 arch/alpha/kernel/osf_sys.c | 12 +-
7239 arch/arc/Kconfig | 1 +
7240 arch/arm/Kconfig | 1 +
7241 arch/arm/Kconfig.debug | 1 +
7242 arch/arm/include/asm/thread_info.h | 7 +-
7243 arch/arm/kernel/process.c | 4 +-
7244 arch/arm/kernel/ptrace.c | 9 +
7245 arch/arm/kernel/traps.c | 7 +-
7246 arch/arm/mm/Kconfig | 2 +-
7247 arch/arm/mm/fault.c | 40 +-
7248 arch/arm/mm/mmap.c | 8 +-
7249 arch/arm/net/bpf_jit_32.c | 51 +-
7250 arch/arm64/Kconfig.debug | 1 +
7251 arch/avr32/include/asm/cache.h | 4 +-
7252 arch/blackfin/Kconfig.debug | 1 +
7253 arch/blackfin/include/asm/cache.h | 3 +-
7254 arch/cris/include/arch-v10/arch/cache.h | 3 +-
7255 arch/cris/include/arch-v32/arch/cache.h | 3 +-
7256 arch/frv/include/asm/cache.h | 3 +-
7257 arch/frv/mm/elf-fdpic.c | 4 +-
7258 arch/hexagon/include/asm/cache.h | 6 +-
7259 arch/ia64/Kconfig | 1 +
7260 arch/ia64/include/asm/cache.h | 3 +-
7261 arch/ia64/kernel/sys_ia64.c | 2 +
7262 arch/ia64/mm/hugetlbpage.c | 2 +
7263 arch/m32r/include/asm/cache.h | 4 +-
7264 arch/m68k/include/asm/cache.h | 4 +-
7265 arch/metag/mm/hugetlbpage.c | 1 +
7266 arch/microblaze/include/asm/cache.h | 3 +-
7267 arch/mips/Kconfig | 1 +
7268 arch/mips/include/asm/cache.h | 3 +-
7269 arch/mips/include/asm/thread_info.h | 11 +-
7270 arch/mips/kernel/irq.c | 3 +
7271 arch/mips/kernel/ptrace.c | 9 +
7272 arch/mips/mm/mmap.c | 4 +-
7273 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
7274 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
7275 arch/openrisc/include/asm/cache.h | 4 +-
7276 arch/parisc/include/asm/cache.h | 5 +-
7277 arch/parisc/kernel/sys_parisc.c | 4 +
7278 arch/powerpc/Kconfig | 1 +
7279 arch/powerpc/include/asm/cache.h | 4 +-
7280 arch/powerpc/include/asm/thread_info.h | 5 +-
7281 arch/powerpc/kernel/Makefile | 2 +
7282 arch/powerpc/kernel/irq.c | 3 +
7283 arch/powerpc/kernel/process.c | 10 +-
7284 arch/powerpc/kernel/ptrace.c | 14 +
7285 arch/powerpc/kernel/traps.c | 5 +
7286 arch/powerpc/mm/slice.c | 2 +-
7287 arch/s390/Kconfig.debug | 1 +
7288 arch/s390/include/asm/cache.h | 4 +-
7289 arch/score/include/asm/cache.h | 4 +-
7290 arch/sh/include/asm/cache.h | 3 +-
7291 arch/sh/mm/mmap.c | 6 +-
7292 arch/sparc/include/asm/cache.h | 4 +-
7293 arch/sparc/include/asm/pgalloc_64.h | 1 +
7294 arch/sparc/include/asm/thread_info_64.h | 8 +-
7295 arch/sparc/kernel/process_32.c | 6 +-
7296 arch/sparc/kernel/process_64.c | 8 +-
7297 arch/sparc/kernel/ptrace_64.c | 14 +
7298 arch/sparc/kernel/sys_sparc_64.c | 8 +-
7299 arch/sparc/kernel/syscalls.S | 8 +-
7300 arch/sparc/kernel/traps_32.c | 8 +-
7301 arch/sparc/kernel/traps_64.c | 28 +-
7302 arch/sparc/kernel/unaligned_64.c | 2 +-
7303 arch/sparc/mm/fault_64.c | 2 +-
7304 arch/sparc/mm/hugetlbpage.c | 15 +-
7305 arch/tile/Kconfig | 1 +
7306 arch/tile/include/asm/cache.h | 3 +-
7307 arch/tile/mm/hugetlbpage.c | 2 +
7308 arch/um/include/asm/cache.h | 3 +-
7309 arch/unicore32/include/asm/cache.h | 6 +-
7310 arch/x86/Kconfig | 21 +
7311 arch/x86/Kconfig.debug | 2 +
7312 arch/x86/entry/common.c | 14 +
7313 arch/x86/entry/entry_32.S | 2 +-
7314 arch/x86/entry/entry_64.S | 2 +-
7315 arch/x86/ia32/ia32_aout.c | 2 +
7316 arch/x86/include/asm/floppy.h | 20 +-
7317 arch/x86/include/asm/fpu/types.h | 69 +-
7318 arch/x86/include/asm/io.h | 2 +-
7319 arch/x86/include/asm/page.h | 12 +-
7320 arch/x86/include/asm/paravirt_types.h | 23 +-
7321 arch/x86/include/asm/processor.h | 12 +-
7322 arch/x86/include/asm/thread_info.h | 6 +-
7323 arch/x86/include/asm/uaccess.h | 2 +-
7324 arch/x86/kernel/dumpstack.c | 10 +-
7325 arch/x86/kernel/dumpstack_32.c | 2 +-
7326 arch/x86/kernel/dumpstack_64.c | 2 +-
7327 arch/x86/kernel/ioport.c | 13 +
7328 arch/x86/kernel/irq_32.c | 3 +
7329 arch/x86/kernel/irq_64.c | 4 +
7330 arch/x86/kernel/ldt.c | 18 +
7331 arch/x86/kernel/msr.c | 10 +
7332 arch/x86/kernel/ptrace.c | 14 +
7333 arch/x86/kernel/signal.c | 9 +-
7334 arch/x86/kernel/sys_i386_32.c | 9 +-
7335 arch/x86/kernel/sys_x86_64.c | 8 +-
7336 arch/x86/kernel/traps.c | 5 +
7337 arch/x86/kernel/verify_cpu.S | 1 +
7338 arch/x86/kernel/vm86_32.c | 15 +
7339 arch/x86/kvm/svm.c | 14 +-
7340 arch/x86/mm/fault.c | 12 +-
7341 arch/x86/mm/hugetlbpage.c | 15 +-
7342 arch/x86/mm/init.c | 66 +-
7343 arch/x86/mm/init_32.c | 6 +-
7344 arch/x86/net/bpf_jit_comp.c | 4 +
7345 arch/x86/platform/efi/efi_64.c | 2 +-
7346 arch/x86/xen/Kconfig | 1 +
7347 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
7348 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
7349 crypto/ablkcipher.c | 2 +-
7350 crypto/blkcipher.c | 2 +-
7351 crypto/scatterwalk.c | 10 +-
7352 drivers/acpi/acpica/hwxfsleep.c | 11 +-
7353 drivers/acpi/custom_method.c | 4 +
7354 drivers/block/cciss.h | 30 +-
7355 drivers/block/smart1,2.h | 40 +-
7356 drivers/cdrom/cdrom.c | 2 +-
7357 drivers/char/Kconfig | 4 +-
7358 drivers/char/genrtc.c | 1 +
7359 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
7360 drivers/char/mem.c | 17 +
7361 drivers/char/random.c | 5 +-
7362 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
7363 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
7364 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
7365 drivers/crypto/talitos.c | 2 +-
7366 drivers/firewire/ohci.c | 4 +
7367 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
7368 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
7369 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
7370 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
7371 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
7372 drivers/hid/hid-wiimote-debug.c | 2 +-
7373 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
7374 drivers/iommu/Kconfig | 1 +
7375 drivers/iommu/amd_iommu.c | 14 +-
7376 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
7377 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
7378 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
7379 drivers/isdn/hisax/config.c | 2 +-
7380 drivers/isdn/hisax/hfc_pci.c | 2 +-
7381 drivers/isdn/hisax/hfc_sx.c | 2 +-
7382 drivers/isdn/hisax/q931.c | 6 +-
7383 drivers/isdn/i4l/isdn_concap.c | 6 +-
7384 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
7385 drivers/md/bcache/Kconfig | 1 +
7386 drivers/md/raid5.c | 8 +
7387 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
7388 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
7389 drivers/media/platform/vivid/vivid-osd.c | 1 +
7390 drivers/media/radio/radio-cadet.c | 5 +-
7391 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
7392 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
7393 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
7394 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
7395 drivers/message/fusion/mptbase.c | 9 +
7396 drivers/misc/sgi-xp/xp_main.c | 12 +-
7397 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
7398 drivers/net/ppp/pppoe.c | 14 +-
7399 drivers/net/ppp/pptp.c | 6 +
7400 drivers/net/slip/slhc.c | 3 +
7401 drivers/net/wan/lmc/lmc_media.c | 97 +-
7402 drivers/net/wan/x25_asy.c | 6 +-
7403 drivers/net/wan/z85230.c | 24 +-
7404 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
7405 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
7406 drivers/pci/pci-sysfs.c | 2 +-
7407 drivers/pci/proc.c | 9 +
7408 drivers/platform/x86/asus-wmi.c | 12 +
7409 drivers/rtc/rtc-dev.c | 3 +
7410 drivers/scsi/bfa/bfa_fcs.c | 19 +-
7411 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
7412 drivers/scsi/bfa/bfa_modules.h | 12 +-
7413 drivers/scsi/hpsa.h | 40 +-
7414 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
7415 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
7416 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
7417 drivers/target/target_core_sbc.c | 17 +-
7418 drivers/target/target_core_transport.c | 14 +-
7419 drivers/tty/serial/uartlite.c | 4 +-
7420 drivers/tty/sysrq.c | 2 +-
7421 drivers/tty/vt/keyboard.c | 22 +-
7422 drivers/uio/uio.c | 6 +-
7423 drivers/usb/core/hub.c | 5 +
7424 drivers/usb/gadget/function/f_uac1.c | 1 +
7425 drivers/usb/gadget/function/u_uac1.c | 1 +
7426 drivers/usb/host/hwa-hc.c | 9 +-
7427 drivers/usb/usbip/vhci_sysfs.c | 2 +-
7428 drivers/video/fbdev/arcfb.c | 2 +-
7429 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
7430 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
7431 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
7432 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
7433 drivers/xen/xenfs/xenstored.c | 5 +
7434 firmware/Makefile | 2 +
7435 firmware/WHENCE | 20 +-
7436 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
7437 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
7438 fs/9p/vfs_inode.c | 4 +-
7440 fs/autofs4/waitq.c | 9 +
7441 fs/binfmt_aout.c | 7 +
7442 fs/binfmt_elf.c | 50 +-
7444 fs/coredump.c | 17 +-
7446 fs/debugfs/inode.c | 11 +-
7448 fs/ext2/balloc.c | 4 +-
7449 fs/ext2/super.c | 8 +-
7450 fs/ext4/balloc.c | 4 +-
7454 fs/filesystems.c | 4 +
7455 fs/fs_struct.c | 20 +-
7456 fs/hugetlbfs/inode.c | 5 +-
7458 fs/kernfs/dir.c | 6 +
7461 fs/namespace.c | 24 +
7462 fs/nfsd/nfscache.c | 2 +-
7464 fs/overlayfs/inode.c | 11 +-
7465 fs/overlayfs/super.c | 6 +-
7467 fs/posix_acl.c | 15 +-
7468 fs/proc/Kconfig | 10 +-
7469 fs/proc/array.c | 69 +-
7470 fs/proc/base.c | 186 +-
7471 fs/proc/cmdline.c | 4 +
7472 fs/proc/devices.c | 4 +
7473 fs/proc/fd.c | 17 +-
7474 fs/proc/generic.c | 64 +
7475 fs/proc/inode.c | 17 +
7476 fs/proc/internal.h | 11 +-
7477 fs/proc/interrupts.c | 4 +
7478 fs/proc/kcore.c | 3 +
7479 fs/proc/meminfo.c | 7 +-
7480 fs/proc/namespaces.c | 4 +-
7481 fs/proc/proc_net.c | 31 +
7482 fs/proc/proc_sysctl.c | 52 +-
7483 fs/proc/root.c | 8 +
7484 fs/proc/stat.c | 69 +-
7485 fs/proc/task_mmu.c | 66 +-
7487 fs/reiserfs/item_ops.c | 24 +-
7488 fs/reiserfs/super.c | 4 +
7490 fs/seq_file.c | 30 +-
7493 fs/sysfs/dir.c | 30 +-
7494 fs/sysv/inode.c | 11 +-
7497 grsecurity/Kconfig | 1182 ++++
7498 grsecurity/Makefile | 54 +
7499 grsecurity/gracl.c | 2757 +++++++++
7500 grsecurity/gracl_alloc.c | 105 +
7501 grsecurity/gracl_cap.c | 127 +
7502 grsecurity/gracl_compat.c | 269 +
7503 grsecurity/gracl_fs.c | 448 ++
7504 grsecurity/gracl_ip.c | 386 ++
7505 grsecurity/gracl_learn.c | 207 +
7506 grsecurity/gracl_policy.c | 1786 ++++++
7507 grsecurity/gracl_res.c | 68 +
7508 grsecurity/gracl_segv.c | 304 +
7509 grsecurity/gracl_shm.c | 40 +
7510 grsecurity/grsec_chdir.c | 19 +
7511 grsecurity/grsec_chroot.c | 467 ++
7512 grsecurity/grsec_disabled.c | 445 ++
7513 grsecurity/grsec_exec.c | 189 +
7514 grsecurity/grsec_fifo.c | 26 +
7515 grsecurity/grsec_fork.c | 23 +
7516 grsecurity/grsec_init.c | 290 +
7517 grsecurity/grsec_ipc.c | 48 +
7518 grsecurity/grsec_link.c | 65 +
7519 grsecurity/grsec_log.c | 340 +
7520 grsecurity/grsec_mem.c | 48 +
7521 grsecurity/grsec_mount.c | 65 +
7522 grsecurity/grsec_pax.c | 47 +
7523 grsecurity/grsec_proc.c | 20 +
7524 grsecurity/grsec_ptrace.c | 30 +
7525 grsecurity/grsec_sig.c | 236 +
7526 grsecurity/grsec_sock.c | 244 +
7527 grsecurity/grsec_sysctl.c | 488 ++
7528 grsecurity/grsec_time.c | 16 +
7529 grsecurity/grsec_tpe.c | 78 +
7530 grsecurity/grsec_usb.c | 15 +
7531 grsecurity/grsum.c | 64 +
7532 include/linux/binfmts.h | 5 +-
7533 include/linux/bitops.h | 2 +-
7534 include/linux/capability.h | 13 +
7535 include/linux/compiler-gcc.h | 5 +
7536 include/linux/compiler.h | 8 +
7537 include/linux/cred.h | 8 +-
7538 include/linux/dcache.h | 5 +-
7539 include/linux/fs.h | 24 +-
7540 include/linux/fs_struct.h | 2 +-
7541 include/linux/fsnotify.h | 6 +
7542 include/linux/gracl.h | 342 +
7543 include/linux/gracl_compat.h | 156 +
7544 include/linux/gralloc.h | 9 +
7545 include/linux/grdefs.h | 140 +
7546 include/linux/grinternal.h | 230 +
7547 include/linux/grmsg.h | 118 +
7548 include/linux/grsecurity.h | 255 +
7549 include/linux/grsock.h | 19 +
7550 include/linux/ipc.h | 2 +-
7551 include/linux/ipc_namespace.h | 2 +-
7552 include/linux/kallsyms.h | 18 +-
7553 include/linux/kmod.h | 5 +
7554 include/linux/kobject.h | 2 +-
7555 include/linux/lsm_hooks.h | 4 +-
7556 include/linux/mm.h | 12 +
7557 include/linux/mm_types.h | 4 +-
7558 include/linux/module.h | 5 +-
7559 include/linux/mount.h | 2 +-
7560 include/linux/msg.h | 2 +-
7561 include/linux/netfilter/xt_gradm.h | 9 +
7562 include/linux/path.h | 4 +-
7563 include/linux/perf_event.h | 13 +-
7564 include/linux/pid_namespace.h | 2 +-
7565 include/linux/printk.h | 2 +-
7566 include/linux/proc_fs.h | 22 +-
7567 include/linux/proc_ns.h | 2 +-
7568 include/linux/ptrace.h | 24 +-
7569 include/linux/random.h | 2 +-
7570 include/linux/rbtree_augmented.h | 4 +-
7571 include/linux/scatterlist.h | 12 +-
7572 include/linux/sched.h | 114 +-
7573 include/linux/security.h | 1 +
7574 include/linux/sem.h | 2 +-
7575 include/linux/seq_file.h | 5 +
7576 include/linux/shm.h | 6 +-
7577 include/linux/skbuff.h | 3 +
7578 include/linux/slab.h | 9 -
7579 include/linux/sysctl.h | 8 +-
7580 include/linux/thread_info.h | 6 +-
7581 include/linux/tty.h | 2 +-
7582 include/linux/tty_driver.h | 4 +-
7583 include/linux/uidgid.h | 5 +
7584 include/linux/user_namespace.h | 2 +-
7585 include/linux/utsname.h | 2 +-
7586 include/linux/vermagic.h | 16 +-
7587 include/linux/vmalloc.h | 20 +-
7588 include/net/af_unix.h | 2 +-
7589 include/net/dst.h | 33 +
7590 include/net/ip.h | 2 +-
7591 include/net/neighbour.h | 2 +-
7592 include/net/net_namespace.h | 2 +-
7593 include/net/sock.h | 4 +-
7594 include/target/target_core_base.h | 2 +-
7595 include/trace/events/fs.h | 53 +
7596 include/uapi/linux/personality.h | 1 +
7604 kernel/auditsc.c | 2 +-
7605 kernel/bpf/syscall.c | 8 +-
7606 kernel/capability.c | 41 +-
7607 kernel/cgroup.c | 5 +-
7608 kernel/compat.c | 1 +
7609 kernel/configs.c | 11 +
7610 kernel/cred.c | 112 +-
7611 kernel/events/core.c | 16 +-
7612 kernel/exit.c | 10 +-
7613 kernel/fork.c | 86 +-
7614 kernel/futex.c | 6 +-
7615 kernel/futex_compat.c | 2 +-
7616 kernel/kallsyms.c | 9 +
7617 kernel/kcmp.c | 8 +-
7618 kernel/kexec_core.c | 2 +-
7619 kernel/kmod.c | 95 +-
7620 kernel/kprobes.c | 7 +-
7621 kernel/ksysfs.c | 2 +
7622 kernel/locking/lockdep_proc.c | 10 +-
7623 kernel/module.c | 108 +-
7624 kernel/panic.c | 4 +-
7625 kernel/pid.c | 23 +-
7626 kernel/power/Kconfig | 2 +
7627 kernel/printk/printk.c | 20 +-
7628 kernel/ptrace.c | 56 +-
7629 kernel/resource.c | 10 +
7630 kernel/sched/core.c | 11 +-
7631 kernel/signal.c | 37 +-
7632 kernel/sys.c | 64 +-
7633 kernel/sysctl.c | 172 +-
7634 kernel/taskstats.c | 6 +
7635 kernel/time/posix-timers.c | 8 +
7636 kernel/time/time.c | 5 +
7637 kernel/time/timekeeping.c | 3 +
7638 kernel/time/timer_list.c | 13 +-
7639 kernel/time/timer_stats.c | 10 +-
7640 kernel/trace/Kconfig | 2 +
7641 kernel/trace/trace_syscalls.c | 8 +
7642 kernel/user_namespace.c | 15 +
7643 lib/Kconfig.debug | 13 +-
7644 lib/Kconfig.kasan | 2 +-
7645 lib/is_single_threaded.c | 3 +
7646 lib/list_debug.c | 65 +-
7649 lib/vsprintf.c | 39 +-
7650 localversion-grsec | 1 +
7652 mm/Kconfig.debug | 1 +
7654 mm/kmemleak.c | 4 +-
7656 mm/mempolicy.c | 12 +-
7661 mm/oom_kill.c | 28 +-
7662 mm/page_alloc.c | 2 +-
7663 mm/process_vm_access.c | 8 +-
7666 mm/slab_common.c | 2 +-
7670 mm/vmalloc.c | 129 +-
7672 net/appletalk/atalk_proc.c | 2 +-
7673 net/atm/lec.c | 6 +-
7674 net/atm/mpoa_caches.c | 42 +-
7675 net/bluetooth/sco.c | 3 +
7676 net/can/bcm.c | 2 +-
7677 net/can/proc.c | 2 +-
7678 net/core/dev_ioctl.c | 7 +-
7679 net/core/filter.c | 8 +-
7680 net/core/net-procfs.c | 17 +-
7681 net/core/pktgen.c | 2 +-
7682 net/core/sock.c | 3 +-
7683 net/core/sysctl_net_core.c | 2 +-
7684 net/decnet/dn_dev.c | 2 +-
7685 net/ipv4/devinet.c | 6 +-
7686 net/ipv4/inet_hashtables.c | 4 +
7687 net/ipv4/ip_input.c | 7 +
7688 net/ipv4/ip_sockglue.c | 3 +-
7689 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7690 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
7691 net/ipv4/route.c | 6 +-
7692 net/ipv4/tcp_input.c | 4 +-
7693 net/ipv4/tcp_ipv4.c | 29 +-
7694 net/ipv4/tcp_minisocks.c | 9 +-
7695 net/ipv4/tcp_timer.c | 11 +
7696 net/ipv4/udp.c | 24 +
7697 net/ipv6/addrconf.c | 13 +-
7698 net/ipv6/proc.c | 2 +-
7699 net/ipv6/tcp_ipv6.c | 26 +-
7700 net/ipv6/udp.c | 7 +
7701 net/ipx/ipx_proc.c | 2 +-
7702 net/irda/irproc.c | 2 +-
7703 net/llc/llc_proc.c | 2 +-
7704 net/netfilter/Kconfig | 10 +
7705 net/netfilter/Makefile | 1 +
7706 net/netfilter/nf_conntrack_core.c | 8 +
7707 net/netfilter/xt_gradm.c | 51 +
7708 net/netfilter/xt_hashlimit.c | 4 +-
7709 net/netfilter/xt_recent.c | 2 +-
7710 net/sched/sch_api.c | 2 +-
7711 net/sctp/socket.c | 4 +-
7712 net/socket.c | 75 +-
7713 net/sunrpc/Kconfig | 1 +
7714 net/sunrpc/cache.c | 2 +-
7715 net/sunrpc/stats.c | 2 +-
7716 net/sysctl_net.c | 2 +-
7717 net/unix/af_unix.c | 52 +-
7718 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7719 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7720 net/x25/sysctl_net_x25.c | 2 +-
7721 net/x25/x25_proc.c | 2 +-
7722 scripts/package/Makefile | 2 +-
7723 scripts/package/mkspec | 41 +-
7724 security/Kconfig | 369 +-
7725 security/apparmor/file.c | 4 +-
7726 security/apparmor/lsm.c | 8 +-
7727 security/commoncap.c | 36 +-
7728 security/min_addr.c | 2 +
7729 security/smack/smack_lsm.c | 8 +-
7730 security/tomoyo/file.c | 12 +-
7731 security/tomoyo/mount.c | 4 +
7732 security/tomoyo/tomoyo.c | 20 +-
7733 security/yama/Kconfig | 2 +-
7734 security/yama/yama_lsm.c | 4 +-
7735 sound/synth/emux/emux_seq.c | 14 +-
7736 sound/usb/line6/driver.c | 40 +-
7737 sound/usb/line6/toneport.c | 12 +-
7738 tools/gcc/.gitignore | 1 +
7739 tools/gcc/Makefile | 12 +
7740 tools/gcc/gen-random-seed.sh | 8 +
7741 tools/gcc/randomize_layout_plugin.c | 930 +++
7742 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7743 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
7744 511 files changed, 32631 insertions(+), 3196 deletions(-)
7746 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
7747 Author: Brad Spengler <spender@grsecurity.net>
7748 Date: Tue Dec 15 14:31:49 2015 -0500
7750 Update to pax-linux-4.3.3-test11.patch:
7751 - fixed a few compile regressions with the recent plugin changes, reported by spender
7752 - updated the size overflow hash table
7754 tools/gcc/latent_entropy_plugin.c | 2 +-
7755 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
7756 tools/gcc/stackleak_plugin.c | 2 +-
7757 tools/gcc/structleak_plugin.c | 6 +--
7758 4 files changed, 60 insertions(+), 16 deletions(-)
7760 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
7761 Author: Brad Spengler <spender@grsecurity.net>
7762 Date: Tue Dec 15 11:50:24 2015 -0500
7764 Apply structleak ICE fix for gcc < 4.9
7766 tools/gcc/structleak_plugin.c | 4 ++++
7767 1 files changed, 4 insertions(+), 0 deletions(-)
7769 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
7770 Author: Brad Spengler <spender@grsecurity.net>
7771 Date: Tue Dec 15 07:57:06 2015 -0500
7773 Update to pax-linux-4.3.1-test10.patch:
7774 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
7775 - Emese regenerated the size overflow hash tables for 4.3
7776 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
7777 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
7779 arch/x86/entry/entry_64.S | 2 +-
7780 arch/x86/entry/entry_64_compat.S | 15 +-
7781 scripts/package/builddeb | 2 +-
7782 tools/gcc/initify_plugin.c | 11 +-
7783 tools/gcc/latent_entropy_plugin.c | 20 +-
7784 .../disable_size_overflow_hash.data | 4 +
7785 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
7786 tools/gcc/stackleak_plugin.c | 26 +-
7787 tools/gcc/structleak_plugin.c | 21 +-
7788 9 files changed, 3079 insertions(+), 2367 deletions(-)
7790 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
7791 Merge: b5847e6 3548341
7792 Author: Brad Spengler <spender@grsecurity.net>
7793 Date: Tue Dec 15 07:47:56 2015 -0500
7795 Merge branch 'linux-4.3.y' into pax-4_3
7800 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
7801 Author: Brad Spengler <spender@grsecurity.net>
7802 Date: Wed Dec 9 23:11:36 2015 -0500
7804 Update to pax-linux-4.3.1-test9.patch:
7805 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
7806 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
7807 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
7808 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
7809 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
7810 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
7811 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
7814 arch/x86/include/asm/compat.h | 4 +
7815 arch/x86/include/asm/dma.h | 2 +
7816 arch/x86/include/asm/pmem.h | 2 +-
7817 arch/x86/include/asm/uaccess.h | 20 +-
7818 arch/x86/kernel/apic/vector.c | 6 +-
7819 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
7820 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
7821 arch/x86/kernel/head_64.S | 1 -
7822 arch/x86/kvm/i8259.c | 10 +-
7823 arch/x86/kvm/ioapic.c | 2 +
7824 arch/x86/kvm/x86.c | 2 +
7825 arch/x86/lib/usercopy_64.c | 2 +-
7826 arch/x86/mm/mpx.c | 4 +-
7827 arch/x86/mm/pageattr.c | 7 +
7828 drivers/base/devres.c | 4 +-
7829 drivers/base/power/runtime.c | 6 +-
7830 drivers/base/regmap/regmap.c | 4 +-
7831 drivers/block/drbd/drbd_receiver.c | 4 +-
7832 drivers/block/drbd/drbd_worker.c | 6 +-
7833 drivers/char/virtio_console.c | 6 +-
7834 drivers/md/dm.c | 12 +-
7835 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
7836 drivers/net/macvtap.c | 4 +-
7837 drivers/video/fbdev/core/fbmem.c | 10 +-
7839 fs/coredump.c | 2 +-
7843 fs/fs-writeback.c | 11 +-
7844 fs/overlayfs/copy_up.c | 2 +-
7847 include/linux/compiler.h | 36 ++-
7848 include/linux/rcupdate.h | 8 +
7849 include/linux/sched.h | 4 +-
7850 include/linux/seqlock.h | 10 +
7851 include/linux/spinlock.h | 17 +-
7852 include/linux/srcu.h | 5 +-
7853 include/linux/syscalls.h | 2 +-
7854 include/linux/writeback.h | 3 +-
7855 include/uapi/linux/swab.h | 6 +-
7856 ipc/ipc_sysctl.c | 6 +
7857 kernel/exit.c | 25 +-
7858 kernel/resource.c | 4 +-
7859 kernel/signal.c | 12 +-
7860 kernel/user.c | 2 +-
7861 kernel/workqueue.c | 6 +-
7862 lib/rhashtable.c | 4 +-
7864 net/ipv4/xfrm4_mode_transport.c | 2 +-
7865 security/keys/internal.h | 8 +-
7866 security/keys/keyring.c | 4 -
7867 sound/core/seq/seq_clientmgr.c | 8 +-
7868 sound/core/seq/seq_compat.c | 2 +-
7869 sound/core/seq/seq_memory.c | 6 +-
7870 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
7871 tools/gcc/gcc-common.h | 1 +
7872 tools/gcc/initify_plugin.c | 33 ++-
7873 .../disable_size_overflow_hash.data | 1 +
7874 .../size_overflow_plugin/size_overflow_hash.data | 1 -
7875 62 files changed, 708 insertions(+), 140 deletions(-)
7877 commit f2634c2f6995f4231616f24ed016f890c701f939
7878 Merge: 1241bff 5f8b236
7879 Author: Brad Spengler <spender@grsecurity.net>
7880 Date: Wed Dec 9 21:50:47 2015 -0500
7882 Merge branch 'linux-4.3.y' into pax-4_3
7885 arch/x86/kernel/fpu/xstate.c
7886 arch/x86/kernel/head_64.S
7888 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
7889 Author: Brad Spengler <spender@grsecurity.net>
7890 Date: Sun Dec 6 08:44:56 2015 -0500
7892 Update to pax-linux-4.3-test8.patch:
7893 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
7894 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
7895 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
7896 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
7899 drivers/md/md.c | 5 ++-
7900 drivers/md/raid1.c | 2 +-
7901 fs/proc/task_mmu.c | 3 ++
7902 .../disable_size_overflow_hash.data | 4 ++-
7903 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
7904 .../size_overflow_plugin/size_overflow_hash.data | 2 -
7905 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
7906 8 files changed, 43 insertions(+), 12 deletions(-)
7908 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
7909 Author: Brad Spengler <spender@grsecurity.net>
7910 Date: Fri Dec 4 14:24:12 2015 -0500
7912 Initial import of pax-linux-4.3-test7.patch
7914 Documentation/dontdiff | 47 +-
7915 Documentation/kbuild/makefiles.txt | 39 +-
7916 Documentation/kernel-parameters.txt | 28 +
7918 arch/alpha/include/asm/atomic.h | 10 +
7919 arch/alpha/include/asm/elf.h | 7 +
7920 arch/alpha/include/asm/pgalloc.h | 6 +
7921 arch/alpha/include/asm/pgtable.h | 11 +
7922 arch/alpha/kernel/module.c | 2 +-
7923 arch/alpha/kernel/osf_sys.c | 8 +-
7924 arch/alpha/mm/fault.c | 141 +-
7925 arch/arm/Kconfig | 2 +-
7926 arch/arm/include/asm/atomic.h | 320 +-
7927 arch/arm/include/asm/cache.h | 5 +-
7928 arch/arm/include/asm/cacheflush.h | 2 +-
7929 arch/arm/include/asm/checksum.h | 14 +-
7930 arch/arm/include/asm/cmpxchg.h | 4 +
7931 arch/arm/include/asm/cpuidle.h | 2 +-
7932 arch/arm/include/asm/domain.h | 22 +-
7933 arch/arm/include/asm/elf.h | 9 +-
7934 arch/arm/include/asm/fncpy.h | 2 +
7935 arch/arm/include/asm/futex.h | 10 +
7936 arch/arm/include/asm/kmap_types.h | 2 +-
7937 arch/arm/include/asm/mach/dma.h | 2 +-
7938 arch/arm/include/asm/mach/map.h | 16 +-
7939 arch/arm/include/asm/outercache.h | 2 +-
7940 arch/arm/include/asm/page.h | 3 +-
7941 arch/arm/include/asm/pgalloc.h | 20 +
7942 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7943 arch/arm/include/asm/pgtable-2level.h | 3 +
7944 arch/arm/include/asm/pgtable-3level.h | 3 +
7945 arch/arm/include/asm/pgtable.h | 54 +-
7946 arch/arm/include/asm/smp.h | 2 +-
7947 arch/arm/include/asm/tls.h | 3 +
7948 arch/arm/include/asm/uaccess.h | 79 +-
7949 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7950 arch/arm/kernel/armksyms.c | 2 +-
7951 arch/arm/kernel/cpuidle.c | 2 +-
7952 arch/arm/kernel/entry-armv.S | 109 +-
7953 arch/arm/kernel/entry-common.S | 40 +-
7954 arch/arm/kernel/entry-header.S | 55 +
7955 arch/arm/kernel/fiq.c | 3 +
7956 arch/arm/kernel/module-plts.c | 7 +-
7957 arch/arm/kernel/module.c | 38 +-
7958 arch/arm/kernel/patch.c | 2 +
7959 arch/arm/kernel/process.c | 90 +-
7960 arch/arm/kernel/reboot.c | 1 +
7961 arch/arm/kernel/setup.c | 20 +-
7962 arch/arm/kernel/signal.c | 35 +-
7963 arch/arm/kernel/smp.c | 2 +-
7964 arch/arm/kernel/tcm.c | 4 +-
7965 arch/arm/kernel/vmlinux.lds.S | 6 +-
7966 arch/arm/kvm/arm.c | 8 +-
7967 arch/arm/lib/copy_page.S | 1 +
7968 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7969 arch/arm/lib/delay.c | 2 +-
7970 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7971 arch/arm/mach-exynos/suspend.c | 6 +-
7972 arch/arm/mach-mvebu/coherency.c | 4 +-
7973 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7974 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7975 arch/arm/mach-omap2/omap-smp.c | 1 +
7976 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
7977 arch/arm/mach-omap2/omap_device.c | 4 +-
7978 arch/arm/mach-omap2/omap_device.h | 4 +-
7979 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7980 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7981 arch/arm/mach-omap2/wd_timer.c | 6 +-
7982 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7983 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7984 arch/arm/mach-tegra/irq.c | 1 +
7985 arch/arm/mach-ux500/pm.c | 1 +
7986 arch/arm/mach-zynq/platsmp.c | 1 +
7987 arch/arm/mm/Kconfig | 6 +-
7988 arch/arm/mm/alignment.c | 8 +
7989 arch/arm/mm/cache-l2x0.c | 2 +-
7990 arch/arm/mm/context.c | 10 +-
7991 arch/arm/mm/fault.c | 146 +
7992 arch/arm/mm/fault.h | 12 +
7993 arch/arm/mm/init.c | 39 +
7994 arch/arm/mm/ioremap.c | 4 +-
7995 arch/arm/mm/mmap.c | 30 +-
7996 arch/arm/mm/mmu.c | 162 +-
7997 arch/arm/net/bpf_jit_32.c | 3 +
7998 arch/arm/plat-iop/setup.c | 2 +-
7999 arch/arm/plat-omap/sram.c | 2 +
8000 arch/arm64/include/asm/atomic.h | 10 +
8001 arch/arm64/include/asm/percpu.h | 8 +-
8002 arch/arm64/include/asm/pgalloc.h | 5 +
8003 arch/arm64/include/asm/uaccess.h | 1 +
8004 arch/arm64/mm/dma-mapping.c | 2 +-
8005 arch/avr32/include/asm/elf.h | 8 +-
8006 arch/avr32/include/asm/kmap_types.h | 4 +-
8007 arch/avr32/mm/fault.c | 27 +
8008 arch/frv/include/asm/atomic.h | 10 +
8009 arch/frv/include/asm/kmap_types.h | 2 +-
8010 arch/frv/mm/elf-fdpic.c | 3 +-
8011 arch/ia64/Makefile | 1 +
8012 arch/ia64/include/asm/atomic.h | 10 +
8013 arch/ia64/include/asm/elf.h | 7 +
8014 arch/ia64/include/asm/pgalloc.h | 12 +
8015 arch/ia64/include/asm/pgtable.h | 13 +-
8016 arch/ia64/include/asm/spinlock.h | 2 +-
8017 arch/ia64/include/asm/uaccess.h | 27 +-
8018 arch/ia64/kernel/module.c | 45 +-
8019 arch/ia64/kernel/palinfo.c | 2 +-
8020 arch/ia64/kernel/sys_ia64.c | 7 +
8021 arch/ia64/kernel/vmlinux.lds.S | 2 +-
8022 arch/ia64/mm/fault.c | 32 +-
8023 arch/ia64/mm/init.c | 15 +-
8024 arch/m32r/lib/usercopy.c | 6 +
8025 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
8026 arch/mips/include/asm/atomic.h | 368 +-
8027 arch/mips/include/asm/elf.h | 7 +
8028 arch/mips/include/asm/exec.h | 2 +-
8029 arch/mips/include/asm/hw_irq.h | 2 +-
8030 arch/mips/include/asm/local.h | 57 +
8031 arch/mips/include/asm/page.h | 2 +-
8032 arch/mips/include/asm/pgalloc.h | 5 +
8033 arch/mips/include/asm/pgtable.h | 3 +
8034 arch/mips/include/asm/uaccess.h | 1 +
8035 arch/mips/kernel/binfmt_elfn32.c | 7 +
8036 arch/mips/kernel/binfmt_elfo32.c | 7 +
8037 arch/mips/kernel/irq-gt641xx.c | 2 +-
8038 arch/mips/kernel/irq.c | 6 +-
8039 arch/mips/kernel/pm-cps.c | 2 +-
8040 arch/mips/kernel/process.c | 12 -
8041 arch/mips/kernel/sync-r4k.c | 24 +-
8042 arch/mips/kernel/traps.c | 13 +-
8043 arch/mips/mm/fault.c | 25 +
8044 arch/mips/mm/mmap.c | 51 +-
8045 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
8046 arch/mips/sni/rm200.c | 2 +-
8047 arch/mips/vr41xx/common/icu.c | 2 +-
8048 arch/mips/vr41xx/common/irq.c | 4 +-
8049 arch/parisc/include/asm/atomic.h | 10 +
8050 arch/parisc/include/asm/elf.h | 7 +
8051 arch/parisc/include/asm/pgalloc.h | 6 +
8052 arch/parisc/include/asm/pgtable.h | 11 +
8053 arch/parisc/include/asm/uaccess.h | 4 +-
8054 arch/parisc/kernel/module.c | 50 +-
8055 arch/parisc/kernel/sys_parisc.c | 15 +
8056 arch/parisc/kernel/traps.c | 4 +-
8057 arch/parisc/mm/fault.c | 140 +-
8058 arch/powerpc/include/asm/atomic.h | 329 +-
8059 arch/powerpc/include/asm/elf.h | 12 +
8060 arch/powerpc/include/asm/exec.h | 2 +-
8061 arch/powerpc/include/asm/kmap_types.h | 2 +-
8062 arch/powerpc/include/asm/local.h | 46 +
8063 arch/powerpc/include/asm/mman.h | 2 +-
8064 arch/powerpc/include/asm/page.h | 8 +-
8065 arch/powerpc/include/asm/page_64.h | 7 +-
8066 arch/powerpc/include/asm/pgalloc-64.h | 7 +
8067 arch/powerpc/include/asm/pgtable.h | 1 +
8068 arch/powerpc/include/asm/pte-hash32.h | 1 +
8069 arch/powerpc/include/asm/reg.h | 1 +
8070 arch/powerpc/include/asm/smp.h | 2 +-
8071 arch/powerpc/include/asm/spinlock.h | 42 +-
8072 arch/powerpc/include/asm/uaccess.h | 141 +-
8073 arch/powerpc/kernel/Makefile | 5 +
8074 arch/powerpc/kernel/exceptions-64e.S | 4 +-
8075 arch/powerpc/kernel/exceptions-64s.S | 2 +-
8076 arch/powerpc/kernel/module_32.c | 15 +-
8077 arch/powerpc/kernel/process.c | 46 -
8078 arch/powerpc/kernel/signal_32.c | 2 +-
8079 arch/powerpc/kernel/signal_64.c | 2 +-
8080 arch/powerpc/kernel/traps.c | 21 +
8081 arch/powerpc/kernel/vdso.c | 5 +-
8082 arch/powerpc/lib/usercopy_64.c | 18 -
8083 arch/powerpc/mm/fault.c | 56 +-
8084 arch/powerpc/mm/mmap.c | 16 +
8085 arch/powerpc/mm/slice.c | 13 +-
8086 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
8087 arch/s390/include/asm/atomic.h | 10 +
8088 arch/s390/include/asm/elf.h | 7 +
8089 arch/s390/include/asm/exec.h | 2 +-
8090 arch/s390/include/asm/uaccess.h | 13 +-
8091 arch/s390/kernel/module.c | 22 +-
8092 arch/s390/kernel/process.c | 24 -
8093 arch/s390/mm/mmap.c | 16 +
8094 arch/score/include/asm/exec.h | 2 +-
8095 arch/score/kernel/process.c | 5 -
8096 arch/sh/mm/mmap.c | 22 +-
8097 arch/sparc/include/asm/atomic_64.h | 110 +-
8098 arch/sparc/include/asm/cache.h | 2 +-
8099 arch/sparc/include/asm/elf_32.h | 7 +
8100 arch/sparc/include/asm/elf_64.h | 7 +
8101 arch/sparc/include/asm/pgalloc_32.h | 1 +
8102 arch/sparc/include/asm/pgalloc_64.h | 1 +
8103 arch/sparc/include/asm/pgtable.h | 4 +
8104 arch/sparc/include/asm/pgtable_32.h | 15 +-
8105 arch/sparc/include/asm/pgtsrmmu.h | 5 +
8106 arch/sparc/include/asm/setup.h | 4 +-
8107 arch/sparc/include/asm/spinlock_64.h | 35 +-
8108 arch/sparc/include/asm/thread_info_32.h | 1 +
8109 arch/sparc/include/asm/thread_info_64.h | 2 +
8110 arch/sparc/include/asm/uaccess.h | 1 +
8111 arch/sparc/include/asm/uaccess_32.h | 28 +-
8112 arch/sparc/include/asm/uaccess_64.h | 24 +-
8113 arch/sparc/kernel/Makefile | 2 +-
8114 arch/sparc/kernel/prom_common.c | 2 +-
8115 arch/sparc/kernel/smp_64.c | 8 +-
8116 arch/sparc/kernel/sys_sparc_32.c | 2 +-
8117 arch/sparc/kernel/sys_sparc_64.c | 52 +-
8118 arch/sparc/kernel/traps_64.c | 27 +-
8119 arch/sparc/lib/Makefile | 2 +-
8120 arch/sparc/lib/atomic_64.S | 57 +-
8121 arch/sparc/lib/ksyms.c | 6 +-
8122 arch/sparc/mm/Makefile | 2 +-
8123 arch/sparc/mm/fault_32.c | 292 +
8124 arch/sparc/mm/fault_64.c | 486 +
8125 arch/sparc/mm/hugetlbpage.c | 22 +-
8126 arch/sparc/mm/init_64.c | 10 +-
8127 arch/tile/include/asm/atomic_64.h | 10 +
8128 arch/tile/include/asm/uaccess.h | 4 +-
8129 arch/um/Makefile | 4 +
8130 arch/um/include/asm/kmap_types.h | 2 +-
8131 arch/um/include/asm/page.h | 3 +
8132 arch/um/include/asm/pgtable-3level.h | 1 +
8133 arch/um/kernel/process.c | 16 -
8134 arch/x86/Kconfig | 15 +-
8135 arch/x86/Kconfig.cpu | 6 +-
8136 arch/x86/Kconfig.debug | 4 +-
8137 arch/x86/Makefile | 13 +-
8138 arch/x86/boot/Makefile | 3 +
8139 arch/x86/boot/bitops.h | 4 +-
8140 arch/x86/boot/boot.h | 2 +-
8141 arch/x86/boot/compressed/Makefile | 3 +
8142 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
8143 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
8144 arch/x86/boot/compressed/head_32.S | 4 +-
8145 arch/x86/boot/compressed/head_64.S | 12 +-
8146 arch/x86/boot/compressed/misc.c | 11 +-
8147 arch/x86/boot/cpucheck.c | 16 +-
8148 arch/x86/boot/header.S | 6 +-
8149 arch/x86/boot/memory.c | 2 +-
8150 arch/x86/boot/video-vesa.c | 1 +
8151 arch/x86/boot/video.c | 2 +-
8152 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
8153 arch/x86/crypto/aesni-intel_asm.S | 106 +-
8154 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
8155 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
8156 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
8157 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
8158 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
8159 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
8160 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
8161 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
8162 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
8163 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
8164 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
8165 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
8166 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
8167 arch/x86/crypto/sha256-avx-asm.S | 2 +
8168 arch/x86/crypto/sha256-avx2-asm.S | 2 +
8169 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
8170 arch/x86/crypto/sha512-avx-asm.S | 2 +
8171 arch/x86/crypto/sha512-avx2-asm.S | 2 +
8172 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
8173 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
8174 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
8175 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
8176 arch/x86/entry/calling.h | 86 +-
8177 arch/x86/entry/common.c | 13 +-
8178 arch/x86/entry/entry_32.S | 351 +-
8179 arch/x86/entry/entry_64.S | 619 +-
8180 arch/x86/entry/entry_64_compat.S | 159 +-
8181 arch/x86/entry/thunk_64.S | 2 +
8182 arch/x86/entry/vdso/Makefile | 2 +-
8183 arch/x86/entry/vdso/vdso2c.h | 8 +-
8184 arch/x86/entry/vdso/vma.c | 41 +-
8185 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
8186 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
8187 arch/x86/ia32/ia32_signal.c | 23 +-
8188 arch/x86/ia32/sys_ia32.c | 42 +-
8189 arch/x86/include/asm/alternative-asm.h | 43 +-
8190 arch/x86/include/asm/alternative.h | 4 +-
8191 arch/x86/include/asm/apic.h | 2 +-
8192 arch/x86/include/asm/apm.h | 4 +-
8193 arch/x86/include/asm/atomic.h | 230 +-
8194 arch/x86/include/asm/atomic64_32.h | 100 +
8195 arch/x86/include/asm/atomic64_64.h | 164 +-
8196 arch/x86/include/asm/bitops.h | 18 +-
8197 arch/x86/include/asm/boot.h | 2 +-
8198 arch/x86/include/asm/cache.h | 5 +-
8199 arch/x86/include/asm/checksum_32.h | 12 +-
8200 arch/x86/include/asm/cmpxchg.h | 39 +
8201 arch/x86/include/asm/compat.h | 2 +-
8202 arch/x86/include/asm/cpufeature.h | 17 +-
8203 arch/x86/include/asm/desc.h | 78 +-
8204 arch/x86/include/asm/desc_defs.h | 6 +
8205 arch/x86/include/asm/div64.h | 2 +-
8206 arch/x86/include/asm/elf.h | 33 +-
8207 arch/x86/include/asm/emergency-restart.h | 2 +-
8208 arch/x86/include/asm/fpu/internal.h | 42 +-
8209 arch/x86/include/asm/fpu/types.h | 6 +-
8210 arch/x86/include/asm/futex.h | 14 +-
8211 arch/x86/include/asm/hw_irq.h | 4 +-
8212 arch/x86/include/asm/i8259.h | 2 +-
8213 arch/x86/include/asm/io.h | 22 +-
8214 arch/x86/include/asm/irqflags.h | 5 +
8215 arch/x86/include/asm/kprobes.h | 9 +-
8216 arch/x86/include/asm/local.h | 106 +-
8217 arch/x86/include/asm/mman.h | 15 +
8218 arch/x86/include/asm/mmu.h | 14 +-
8219 arch/x86/include/asm/mmu_context.h | 114 +-
8220 arch/x86/include/asm/module.h | 17 +-
8221 arch/x86/include/asm/nmi.h | 19 +-
8222 arch/x86/include/asm/page.h | 1 +
8223 arch/x86/include/asm/page_32.h | 12 +-
8224 arch/x86/include/asm/page_64.h | 14 +-
8225 arch/x86/include/asm/paravirt.h | 46 +-
8226 arch/x86/include/asm/paravirt_types.h | 15 +-
8227 arch/x86/include/asm/pgalloc.h | 23 +
8228 arch/x86/include/asm/pgtable-2level.h | 2 +
8229 arch/x86/include/asm/pgtable-3level.h | 7 +
8230 arch/x86/include/asm/pgtable.h | 128 +-
8231 arch/x86/include/asm/pgtable_32.h | 14 +-
8232 arch/x86/include/asm/pgtable_32_types.h | 24 +-
8233 arch/x86/include/asm/pgtable_64.h | 23 +-
8234 arch/x86/include/asm/pgtable_64_types.h | 5 +
8235 arch/x86/include/asm/pgtable_types.h | 26 +-
8236 arch/x86/include/asm/preempt.h | 2 +-
8237 arch/x86/include/asm/processor.h | 57 +-
8238 arch/x86/include/asm/ptrace.h | 13 +-
8239 arch/x86/include/asm/realmode.h | 4 +-
8240 arch/x86/include/asm/reboot.h | 10 +-
8241 arch/x86/include/asm/rmwcc.h | 84 +-
8242 arch/x86/include/asm/rwsem.h | 60 +-
8243 arch/x86/include/asm/segment.h | 27 +-
8244 arch/x86/include/asm/smap.h | 43 +
8245 arch/x86/include/asm/smp.h | 14 +-
8246 arch/x86/include/asm/stackprotector.h | 4 +-
8247 arch/x86/include/asm/stacktrace.h | 32 +-
8248 arch/x86/include/asm/switch_to.h | 4 +-
8249 arch/x86/include/asm/sys_ia32.h | 6 +-
8250 arch/x86/include/asm/thread_info.h | 27 +-
8251 arch/x86/include/asm/tlbflush.h | 77 +-
8252 arch/x86/include/asm/uaccess.h | 192 +-
8253 arch/x86/include/asm/uaccess_32.h | 28 +-
8254 arch/x86/include/asm/uaccess_64.h | 169 +-
8255 arch/x86/include/asm/word-at-a-time.h | 2 +-
8256 arch/x86/include/asm/x86_init.h | 10 +-
8257 arch/x86/include/asm/xen/page.h | 2 +-
8258 arch/x86/include/uapi/asm/e820.h | 2 +-
8259 arch/x86/kernel/Makefile | 2 +-
8260 arch/x86/kernel/acpi/boot.c | 4 +-
8261 arch/x86/kernel/acpi/sleep.c | 4 +
8262 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
8263 arch/x86/kernel/alternative.c | 124 +-
8264 arch/x86/kernel/apic/apic.c | 4 +-
8265 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
8266 arch/x86/kernel/apic/apic_noop.c | 2 +-
8267 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
8268 arch/x86/kernel/apic/io_apic.c | 8 +-
8269 arch/x86/kernel/apic/msi.c | 2 +-
8270 arch/x86/kernel/apic/probe_32.c | 4 +-
8271 arch/x86/kernel/apic/vector.c | 4 +-
8272 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
8273 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
8274 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
8275 arch/x86/kernel/apm_32.c | 21 +-
8276 arch/x86/kernel/asm-offsets.c | 20 +
8277 arch/x86/kernel/asm-offsets_64.c | 1 +
8278 arch/x86/kernel/cpu/Makefile | 4 -
8279 arch/x86/kernel/cpu/amd.c | 2 +-
8280 arch/x86/kernel/cpu/bugs_64.c | 2 +
8281 arch/x86/kernel/cpu/common.c | 202 +-
8282 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
8283 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
8284 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
8285 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
8286 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
8287 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
8288 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
8289 arch/x86/kernel/cpu/perf_event.c | 10 +-
8290 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
8291 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
8292 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
8293 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
8294 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
8295 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
8296 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
8297 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
8298 arch/x86/kernel/crash_dump_64.c | 2 +-
8299 arch/x86/kernel/doublefault.c | 8 +-
8300 arch/x86/kernel/dumpstack.c | 24 +-
8301 arch/x86/kernel/dumpstack_32.c | 25 +-
8302 arch/x86/kernel/dumpstack_64.c | 62 +-
8303 arch/x86/kernel/e820.c | 4 +-
8304 arch/x86/kernel/early_printk.c | 1 +
8305 arch/x86/kernel/espfix_64.c | 44 +-
8306 arch/x86/kernel/fpu/core.c | 24 +-
8307 arch/x86/kernel/fpu/init.c | 40 +-
8308 arch/x86/kernel/fpu/regset.c | 22 +-
8309 arch/x86/kernel/fpu/signal.c | 20 +-
8310 arch/x86/kernel/fpu/xstate.c | 8 +-
8311 arch/x86/kernel/ftrace.c | 18 +-
8312 arch/x86/kernel/head64.c | 14 +-
8313 arch/x86/kernel/head_32.S | 235 +-
8314 arch/x86/kernel/head_64.S | 173 +-
8315 arch/x86/kernel/i386_ksyms_32.c | 12 +
8316 arch/x86/kernel/i8259.c | 10 +-
8317 arch/x86/kernel/io_delay.c | 2 +-
8318 arch/x86/kernel/ioport.c | 2 +-
8319 arch/x86/kernel/irq.c | 8 +-
8320 arch/x86/kernel/irq_32.c | 45 +-
8321 arch/x86/kernel/jump_label.c | 10 +-
8322 arch/x86/kernel/kgdb.c | 21 +-
8323 arch/x86/kernel/kprobes/core.c | 28 +-
8324 arch/x86/kernel/kprobes/opt.c | 16 +-
8325 arch/x86/kernel/ksysfs.c | 2 +-
8326 arch/x86/kernel/kvmclock.c | 20 +-
8327 arch/x86/kernel/ldt.c | 25 +
8328 arch/x86/kernel/livepatch.c | 12 +-
8329 arch/x86/kernel/machine_kexec_32.c | 6 +-
8330 arch/x86/kernel/mcount_64.S | 19 +-
8331 arch/x86/kernel/module.c | 78 +-
8332 arch/x86/kernel/msr.c | 2 +-
8333 arch/x86/kernel/nmi.c | 34 +-
8334 arch/x86/kernel/nmi_selftest.c | 4 +-
8335 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
8336 arch/x86/kernel/paravirt.c | 45 +-
8337 arch/x86/kernel/paravirt_patch_64.c | 8 +
8338 arch/x86/kernel/pci-calgary_64.c | 2 +-
8339 arch/x86/kernel/pci-iommu_table.c | 2 +-
8340 arch/x86/kernel/pci-swiotlb.c | 2 +-
8341 arch/x86/kernel/process.c | 80 +-
8342 arch/x86/kernel/process_32.c | 29 +-
8343 arch/x86/kernel/process_64.c | 14 +-
8344 arch/x86/kernel/ptrace.c | 20 +-
8345 arch/x86/kernel/pvclock.c | 8 +-
8346 arch/x86/kernel/reboot.c | 44 +-
8347 arch/x86/kernel/reboot_fixups_32.c | 2 +-
8348 arch/x86/kernel/relocate_kernel_64.S | 3 +-
8349 arch/x86/kernel/setup.c | 29 +-
8350 arch/x86/kernel/setup_percpu.c | 29 +-
8351 arch/x86/kernel/signal.c | 17 +-
8352 arch/x86/kernel/smp.c | 2 +-
8353 arch/x86/kernel/smpboot.c | 29 +-
8354 arch/x86/kernel/step.c | 6 +-
8355 arch/x86/kernel/sys_i386_32.c | 184 +
8356 arch/x86/kernel/sys_x86_64.c | 22 +-
8357 arch/x86/kernel/tboot.c | 14 +-
8358 arch/x86/kernel/time.c | 8 +-
8359 arch/x86/kernel/tls.c | 7 +-
8360 arch/x86/kernel/tracepoint.c | 4 +-
8361 arch/x86/kernel/traps.c | 53 +-
8362 arch/x86/kernel/tsc.c | 2 +-
8363 arch/x86/kernel/uprobes.c | 2 +-
8364 arch/x86/kernel/vm86_32.c | 6 +-
8365 arch/x86/kernel/vmlinux.lds.S | 153 +-
8366 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
8367 arch/x86/kernel/x86_init.c | 6 +-
8368 arch/x86/kvm/cpuid.c | 21 +-
8369 arch/x86/kvm/emulate.c | 2 +-
8370 arch/x86/kvm/lapic.c | 2 +-
8371 arch/x86/kvm/paging_tmpl.h | 2 +-
8372 arch/x86/kvm/svm.c | 10 +-
8373 arch/x86/kvm/vmx.c | 62 +-
8374 arch/x86/kvm/x86.c | 42 +-
8375 arch/x86/lguest/boot.c | 3 +-
8376 arch/x86/lib/atomic64_386_32.S | 164 +
8377 arch/x86/lib/atomic64_cx8_32.S | 98 +-
8378 arch/x86/lib/checksum_32.S | 99 +-
8379 arch/x86/lib/clear_page_64.S | 3 +
8380 arch/x86/lib/cmpxchg16b_emu.S | 3 +
8381 arch/x86/lib/copy_page_64.S | 14 +-
8382 arch/x86/lib/copy_user_64.S | 66 +-
8383 arch/x86/lib/csum-copy_64.S | 14 +-
8384 arch/x86/lib/csum-wrappers_64.c | 8 +-
8385 arch/x86/lib/getuser.S | 74 +-
8386 arch/x86/lib/insn.c | 8 +-
8387 arch/x86/lib/iomap_copy_64.S | 2 +
8388 arch/x86/lib/memcpy_64.S | 6 +
8389 arch/x86/lib/memmove_64.S | 3 +-
8390 arch/x86/lib/memset_64.S | 3 +
8391 arch/x86/lib/mmx_32.c | 243 +-
8392 arch/x86/lib/msr-reg.S | 2 +
8393 arch/x86/lib/putuser.S | 87 +-
8394 arch/x86/lib/rwsem.S | 6 +-
8395 arch/x86/lib/usercopy_32.c | 359 +-
8396 arch/x86/lib/usercopy_64.c | 20 +-
8397 arch/x86/math-emu/fpu_aux.c | 2 +-
8398 arch/x86/math-emu/fpu_entry.c | 4 +-
8399 arch/x86/math-emu/fpu_system.h | 2 +-
8400 arch/x86/mm/Makefile | 4 +
8401 arch/x86/mm/extable.c | 26 +-
8402 arch/x86/mm/fault.c | 570 +-
8403 arch/x86/mm/gup.c | 6 +-
8404 arch/x86/mm/highmem_32.c | 6 +
8405 arch/x86/mm/hugetlbpage.c | 24 +-
8406 arch/x86/mm/init.c | 111 +-
8407 arch/x86/mm/init_32.c | 111 +-
8408 arch/x86/mm/init_64.c | 46 +-
8409 arch/x86/mm/iomap_32.c | 4 +
8410 arch/x86/mm/ioremap.c | 52 +-
8411 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
8412 arch/x86/mm/mmap.c | 40 +-
8413 arch/x86/mm/mmio-mod.c | 10 +-
8414 arch/x86/mm/numa.c | 2 +-
8415 arch/x86/mm/pageattr.c | 38 +-
8416 arch/x86/mm/pat.c | 12 +-
8417 arch/x86/mm/pat_rbtree.c | 2 +-
8418 arch/x86/mm/pf_in.c | 10 +-
8419 arch/x86/mm/pgtable.c | 214 +-
8420 arch/x86/mm/pgtable_32.c | 3 +
8421 arch/x86/mm/setup_nx.c | 7 +
8422 arch/x86/mm/tlb.c | 4 +
8423 arch/x86/mm/uderef_64.c | 37 +
8424 arch/x86/net/bpf_jit.S | 11 +
8425 arch/x86/net/bpf_jit_comp.c | 13 +-
8426 arch/x86/oprofile/backtrace.c | 6 +-
8427 arch/x86/oprofile/nmi_int.c | 8 +-
8428 arch/x86/oprofile/op_model_amd.c | 8 +-
8429 arch/x86/oprofile/op_model_ppro.c | 7 +-
8430 arch/x86/oprofile/op_x86_model.h | 2 +-
8431 arch/x86/pci/intel_mid_pci.c | 2 +-
8432 arch/x86/pci/irq.c | 8 +-
8433 arch/x86/pci/pcbios.c | 144 +-
8434 arch/x86/platform/efi/efi_32.c | 24 +
8435 arch/x86/platform/efi/efi_64.c | 26 +-
8436 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8437 arch/x86/platform/efi/efi_stub_64.S | 2 +
8438 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
8439 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
8440 arch/x86/platform/intel-mid/mfld.c | 4 +-
8441 arch/x86/platform/intel-mid/mrfl.c | 2 +-
8442 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
8443 arch/x86/platform/olpc/olpc_dt.c | 2 +-
8444 arch/x86/power/cpu.c | 11 +-
8445 arch/x86/realmode/init.c | 10 +-
8446 arch/x86/realmode/rm/Makefile | 3 +
8447 arch/x86/realmode/rm/header.S | 4 +-
8448 arch/x86/realmode/rm/reboot.S | 4 +
8449 arch/x86/realmode/rm/trampoline_32.S | 12 +-
8450 arch/x86/realmode/rm/trampoline_64.S | 3 +-
8451 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
8452 arch/x86/tools/Makefile | 2 +-
8453 arch/x86/tools/relocs.c | 96 +-
8454 arch/x86/um/mem_32.c | 2 +-
8455 arch/x86/um/tls_32.c | 2 +-
8456 arch/x86/xen/enlighten.c | 50 +-
8457 arch/x86/xen/mmu.c | 19 +-
8458 arch/x86/xen/smp.c | 16 +-
8459 arch/x86/xen/xen-asm_32.S | 2 +-
8460 arch/x86/xen/xen-head.S | 11 +
8461 arch/x86/xen/xen-ops.h | 2 -
8463 block/blk-iopoll.c | 2 +-
8464 block/blk-map.c | 2 +-
8465 block/blk-softirq.c | 2 +-
8467 block/compat_ioctl.c | 4 +-
8468 block/genhd.c | 9 +-
8469 block/partitions/efi.c | 8 +-
8470 block/scsi_ioctl.c | 29 +-
8471 crypto/cryptd.c | 4 +-
8472 crypto/pcrypt.c | 2 +-
8473 crypto/zlib.c | 12 +-
8474 drivers/acpi/acpi_video.c | 2 +-
8475 drivers/acpi/apei/apei-internal.h | 2 +-
8476 drivers/acpi/apei/ghes.c | 4 +-
8477 drivers/acpi/bgrt.c | 6 +-
8478 drivers/acpi/blacklist.c | 4 +-
8479 drivers/acpi/bus.c | 4 +-
8480 drivers/acpi/device_pm.c | 4 +-
8481 drivers/acpi/ec.c | 2 +-
8482 drivers/acpi/pci_slot.c | 2 +-
8483 drivers/acpi/processor_idle.c | 2 +-
8484 drivers/acpi/processor_pdc.c | 2 +-
8485 drivers/acpi/sleep.c | 2 +-
8486 drivers/acpi/sysfs.c | 4 +-
8487 drivers/acpi/thermal.c | 2 +-
8488 drivers/acpi/video_detect.c | 7 +-
8489 drivers/ata/libata-core.c | 12 +-
8490 drivers/ata/libata-scsi.c | 2 +-
8491 drivers/ata/libata.h | 2 +-
8492 drivers/ata/pata_arasan_cf.c | 4 +-
8493 drivers/atm/adummy.c | 2 +-
8494 drivers/atm/ambassador.c | 8 +-
8495 drivers/atm/atmtcp.c | 14 +-
8496 drivers/atm/eni.c | 10 +-
8497 drivers/atm/firestream.c | 8 +-
8498 drivers/atm/fore200e.c | 14 +-
8499 drivers/atm/he.c | 18 +-
8500 drivers/atm/horizon.c | 4 +-
8501 drivers/atm/idt77252.c | 36 +-
8502 drivers/atm/iphase.c | 34 +-
8503 drivers/atm/lanai.c | 12 +-
8504 drivers/atm/nicstar.c | 46 +-
8505 drivers/atm/solos-pci.c | 4 +-
8506 drivers/atm/suni.c | 4 +-
8507 drivers/atm/uPD98402.c | 16 +-
8508 drivers/atm/zatm.c | 6 +-
8509 drivers/base/bus.c | 4 +-
8510 drivers/base/devtmpfs.c | 8 +-
8511 drivers/base/node.c | 2 +-
8512 drivers/base/platform-msi.c | 20 +-
8513 drivers/base/power/domain.c | 11 +-
8514 drivers/base/power/sysfs.c | 2 +-
8515 drivers/base/power/wakeup.c | 8 +-
8516 drivers/base/regmap/regmap-debugfs.c | 11 +-
8517 drivers/base/syscore.c | 4 +-
8518 drivers/block/cciss.c | 28 +-
8519 drivers/block/cciss.h | 2 +-
8520 drivers/block/cpqarray.c | 28 +-
8521 drivers/block/cpqarray.h | 2 +-
8522 drivers/block/drbd/drbd_bitmap.c | 2 +-
8523 drivers/block/drbd/drbd_int.h | 8 +-
8524 drivers/block/drbd/drbd_main.c | 12 +-
8525 drivers/block/drbd/drbd_nl.c | 4 +-
8526 drivers/block/drbd/drbd_receiver.c | 34 +-
8527 drivers/block/drbd/drbd_worker.c | 8 +-
8528 drivers/block/pktcdvd.c | 4 +-
8529 drivers/block/rbd.c | 2 +-
8530 drivers/bluetooth/btwilink.c | 2 +-
8531 drivers/bus/arm-cci.c | 12 +-
8532 drivers/cdrom/cdrom.c | 11 +-
8533 drivers/cdrom/gdrom.c | 1 -
8534 drivers/char/agp/compat_ioctl.c | 2 +-
8535 drivers/char/agp/frontend.c | 4 +-
8536 drivers/char/agp/intel-gtt.c | 4 +-
8537 drivers/char/hpet.c | 2 +-
8538 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
8539 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8540 drivers/char/mem.c | 47 +-
8541 drivers/char/nvram.c | 2 +-
8542 drivers/char/pcmcia/synclink_cs.c | 16 +-
8543 drivers/char/random.c | 12 +-
8544 drivers/char/sonypi.c | 11 +-
8545 drivers/char/tpm/tpm_acpi.c | 3 +-
8546 drivers/char/tpm/tpm_eventlog.c | 4 +-
8547 drivers/char/virtio_console.c | 4 +-
8548 drivers/clk/clk-composite.c | 2 +-
8549 drivers/clk/samsung/clk.h | 2 +-
8550 drivers/clk/socfpga/clk-gate.c | 9 +-
8551 drivers/clk/socfpga/clk-pll.c | 9 +-
8552 drivers/clk/ti/clk.c | 8 +-
8553 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8554 drivers/cpufreq/cpufreq-dt.c | 4 +-
8555 drivers/cpufreq/cpufreq.c | 30 +-
8556 drivers/cpufreq/cpufreq_governor.c | 2 +-
8557 drivers/cpufreq/cpufreq_governor.h | 4 +-
8558 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
8559 drivers/cpufreq/intel_pstate.c | 33 +-
8560 drivers/cpufreq/p4-clockmod.c | 12 +-
8561 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
8562 drivers/cpufreq/speedstep-centrino.c | 7 +-
8563 drivers/cpuidle/driver.c | 2 +-
8564 drivers/cpuidle/dt_idle_states.c | 2 +-
8565 drivers/cpuidle/governor.c | 2 +-
8566 drivers/cpuidle/sysfs.c | 2 +-
8567 drivers/crypto/hifn_795x.c | 4 +-
8568 drivers/devfreq/devfreq.c | 4 +-
8569 drivers/dma/sh/shdma-base.c | 4 +-
8570 drivers/dma/sh/shdmac.c | 2 +-
8571 drivers/edac/edac_device.c | 4 +-
8572 drivers/edac/edac_mc_sysfs.c | 2 +-
8573 drivers/edac/edac_pci.c | 4 +-
8574 drivers/edac/edac_pci_sysfs.c | 22 +-
8575 drivers/edac/mce_amd.h | 2 +-
8576 drivers/firewire/core-card.c | 6 +-
8577 drivers/firewire/core-device.c | 2 +-
8578 drivers/firewire/core-transaction.c | 1 +
8579 drivers/firewire/core.h | 1 +
8580 drivers/firmware/dmi-id.c | 2 +-
8581 drivers/firmware/dmi_scan.c | 12 +-
8582 drivers/firmware/efi/cper.c | 8 +-
8583 drivers/firmware/efi/efi.c | 12 +-
8584 drivers/firmware/efi/efivars.c | 2 +-
8585 drivers/firmware/efi/runtime-map.c | 2 +-
8586 drivers/firmware/google/gsmi.c | 2 +-
8587 drivers/firmware/google/memconsole.c | 7 +-
8588 drivers/firmware/memmap.c | 2 +-
8589 drivers/firmware/psci.c | 2 +-
8590 drivers/gpio/gpio-davinci.c | 6 +-
8591 drivers/gpio/gpio-em.c | 2 +-
8592 drivers/gpio/gpio-ich.c | 2 +-
8593 drivers/gpio/gpio-omap.c | 4 +-
8594 drivers/gpio/gpio-rcar.c | 2 +-
8595 drivers/gpio/gpio-vr41xx.c | 2 +-
8596 drivers/gpio/gpiolib.c | 12 +-
8597 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
8598 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
8599 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
8600 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
8601 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
8602 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
8603 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
8604 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
8605 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
8606 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
8607 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
8608 drivers/gpu/drm/drm_crtc.c | 2 +-
8609 drivers/gpu/drm/drm_drv.c | 2 +-
8610 drivers/gpu/drm/drm_fops.c | 12 +-
8611 drivers/gpu/drm/drm_global.c | 14 +-
8612 drivers/gpu/drm/drm_info.c | 13 +-
8613 drivers/gpu/drm/drm_ioc32.c | 13 +-
8614 drivers/gpu/drm/drm_ioctl.c | 2 +-
8615 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
8616 drivers/gpu/drm/i810/i810_drv.h | 4 +-
8617 drivers/gpu/drm/i915/i915_dma.c | 2 +-
8618 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
8619 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
8620 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
8621 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
8622 drivers/gpu/drm/i915/intel_display.c | 26 +-
8623 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
8624 drivers/gpu/drm/mga/mga_drv.h | 4 +-
8625 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
8626 drivers/gpu/drm/mga/mga_irq.c | 8 +-
8627 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
8628 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
8629 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
8630 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
8631 drivers/gpu/drm/omapdrm/Makefile | 2 +-
8632 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
8633 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
8634 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
8635 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
8636 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
8637 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
8638 drivers/gpu/drm/r128/r128_cce.c | 2 +-
8639 drivers/gpu/drm/r128/r128_drv.h | 4 +-
8640 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
8641 drivers/gpu/drm/r128/r128_irq.c | 4 +-
8642 drivers/gpu/drm/r128/r128_state.c | 4 +-
8643 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
8644 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
8645 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
8646 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
8647 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
8648 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
8649 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
8650 drivers/gpu/drm/tegra/dc.c | 2 +-
8651 drivers/gpu/drm/tegra/dsi.c | 2 +-
8652 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8653 drivers/gpu/drm/tegra/sor.c | 7 +-
8654 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8655 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8656 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8657 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8658 drivers/gpu/drm/udl/udl_fb.c | 1 -
8659 drivers/gpu/drm/via/via_drv.h | 4 +-
8660 drivers/gpu/drm/via/via_irq.c | 18 +-
8661 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8662 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8663 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8664 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8665 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8666 drivers/hid/hid-core.c | 4 +-
8667 drivers/hid/hid-sensor-custom.c | 2 +-
8668 drivers/hv/channel.c | 2 +-
8669 drivers/hv/hv.c | 4 +-
8670 drivers/hv/hv_balloon.c | 18 +-
8671 drivers/hv/hyperv_vmbus.h | 2 +-
8672 drivers/hwmon/acpi_power_meter.c | 6 +-
8673 drivers/hwmon/applesmc.c | 2 +-
8674 drivers/hwmon/asus_atk0110.c | 10 +-
8675 drivers/hwmon/coretemp.c | 2 +-
8676 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8677 drivers/hwmon/ibmaem.c | 2 +-
8678 drivers/hwmon/iio_hwmon.c | 2 +-
8679 drivers/hwmon/nct6683.c | 6 +-
8680 drivers/hwmon/nct6775.c | 6 +-
8681 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8682 drivers/hwmon/sht15.c | 12 +-
8683 drivers/hwmon/via-cputemp.c | 2 +-
8684 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8685 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8686 drivers/i2c/i2c-dev.c | 2 +-
8687 drivers/ide/ide-cd.c | 2 +-
8688 drivers/ide/ide-disk.c | 2 +-
8689 drivers/iio/industrialio-core.c | 2 +-
8690 drivers/iio/magnetometer/ak8975.c | 2 +-
8691 drivers/infiniband/core/cm.c | 32 +-
8692 drivers/infiniband/core/fmr_pool.c | 20 +-
8693 drivers/infiniband/core/uverbs_cmd.c | 3 +
8694 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8695 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8696 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8697 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8698 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8699 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8700 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8701 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8702 drivers/infiniband/hw/nes/nes.c | 4 +-
8703 drivers/infiniband/hw/nes/nes.h | 40 +-
8704 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8705 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8706 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8707 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8708 drivers/infiniband/hw/qib/qib.h | 1 +
8709 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8710 drivers/input/gameport/gameport.c | 4 +-
8711 drivers/input/input.c | 4 +-
8712 drivers/input/joystick/sidewinder.c | 1 +
8713 drivers/input/joystick/xpad.c | 4 +-
8714 drivers/input/misc/ims-pcu.c | 4 +-
8715 drivers/input/mouse/psmouse.h | 2 +-
8716 drivers/input/mousedev.c | 2 +-
8717 drivers/input/serio/serio.c | 4 +-
8718 drivers/input/serio/serio_raw.c | 4 +-
8719 drivers/input/touchscreen/htcpen.c | 2 +-
8720 drivers/iommu/arm-smmu-v3.c | 2 +-
8721 drivers/iommu/arm-smmu.c | 43 +-
8722 drivers/iommu/io-pgtable-arm.c | 101 +-
8723 drivers/iommu/io-pgtable.c | 11 +-
8724 drivers/iommu/io-pgtable.h | 19 +-
8725 drivers/iommu/iommu.c | 2 +-
8726 drivers/iommu/ipmmu-vmsa.c | 13 +-
8727 drivers/iommu/irq_remapping.c | 2 +-
8728 drivers/irqchip/irq-gic.c | 2 +-
8729 drivers/irqchip/irq-i8259.c | 2 +-
8730 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8731 drivers/irqchip/irq-renesas-irqc.c | 2 +-
8732 drivers/isdn/capi/capi.c | 10 +-
8733 drivers/isdn/gigaset/interface.c | 8 +-
8734 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8735 drivers/isdn/hardware/avm/b1.c | 4 +-
8736 drivers/isdn/i4l/isdn_common.c | 2 +
8737 drivers/isdn/i4l/isdn_tty.c | 22 +-
8738 drivers/isdn/icn/icn.c | 2 +-
8739 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8740 drivers/lguest/core.c | 10 +-
8741 drivers/lguest/page_tables.c | 2 +-
8742 drivers/lguest/x86/core.c | 12 +-
8743 drivers/lguest/x86/switcher_32.S | 27 +-
8744 drivers/md/bcache/closure.h | 2 +-
8745 drivers/md/bitmap.c | 2 +-
8746 drivers/md/dm-ioctl.c | 2 +-
8747 drivers/md/dm-raid1.c | 18 +-
8748 drivers/md/dm-stats.c | 6 +-
8749 drivers/md/dm-stripe.c | 10 +-
8750 drivers/md/dm-table.c | 2 +-
8751 drivers/md/dm-thin-metadata.c | 4 +-
8752 drivers/md/dm.c | 16 +-
8753 drivers/md/md.c | 26 +-
8754 drivers/md/md.h | 6 +-
8755 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8756 drivers/md/persistent-data/dm-space-map.h | 1 +
8757 drivers/md/raid1.c | 4 +-
8758 drivers/md/raid10.c | 18 +-
8759 drivers/md/raid5.c | 22 +-
8760 drivers/media/dvb-core/dvbdev.c | 2 +-
8761 drivers/media/dvb-frontends/af9033.h | 2 +-
8762 drivers/media/dvb-frontends/dib3000.h | 2 +-
8763 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8764 drivers/media/dvb-frontends/dib8000.h | 2 +-
8765 drivers/media/pci/cx88/cx88-video.c | 6 +-
8766 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8767 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8768 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8769 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8770 drivers/media/pci/tw68/tw68-core.c | 2 +-
8771 drivers/media/platform/omap/omap_vout.c | 11 +-
8772 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8773 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8774 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8775 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8776 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8777 drivers/media/radio/radio-cadet.c | 2 +
8778 drivers/media/radio/radio-maxiradio.c | 2 +-
8779 drivers/media/radio/radio-shark.c | 2 +-
8780 drivers/media/radio/radio-shark2.c | 2 +-
8781 drivers/media/radio/radio-si476x.c | 2 +-
8782 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8783 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8784 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8785 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8786 drivers/memory/omap-gpmc.c | 21 +-
8787 drivers/message/fusion/mptsas.c | 34 +-
8788 drivers/mfd/ab8500-debugfs.c | 2 +-
8789 drivers/mfd/kempld-core.c | 2 +-
8790 drivers/mfd/max8925-i2c.c | 2 +-
8791 drivers/mfd/tps65910.c | 2 +-
8792 drivers/mfd/twl4030-irq.c | 9 +-
8793 drivers/mfd/wm5110-tables.c | 2 +-
8794 drivers/mfd/wm8998-tables.c | 2 +-
8795 drivers/misc/c2port/core.c | 4 +-
8796 drivers/misc/kgdbts.c | 4 +-
8797 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8798 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8799 drivers/misc/mic/scif/scif_rb.c | 8 +-
8800 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8801 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8802 drivers/misc/sgi-gru/grutables.h | 154 +-
8803 drivers/misc/sgi-xp/xp.h | 2 +-
8804 drivers/misc/sgi-xp/xpc.h | 3 +-
8805 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8806 drivers/mmc/card/block.c | 2 +-
8807 drivers/mmc/host/dw_mmc.h | 2 +-
8808 drivers/mmc/host/mmci.c | 4 +-
8809 drivers/mmc/host/omap_hsmmc.c | 4 +-
8810 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8811 drivers/mmc/host/sdhci-s3c.c | 8 +-
8812 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8813 drivers/mtd/nand/denali.c | 1 +
8814 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8815 drivers/mtd/nftlmount.c | 1 +
8816 drivers/mtd/sm_ftl.c | 2 +-
8817 drivers/net/bonding/bond_netlink.c | 2 +-
8818 drivers/net/caif/caif_hsi.c | 2 +-
8819 drivers/net/can/Kconfig | 2 +-
8820 drivers/net/can/dev.c | 2 +-
8821 drivers/net/can/vcan.c | 2 +-
8822 drivers/net/dummy.c | 2 +-
8823 drivers/net/ethernet/8390/ax88796.c | 4 +-
8824 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8825 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8826 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8827 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8828 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8829 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8830 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8831 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8832 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8833 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8834 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8835 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8836 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8837 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8838 drivers/net/ethernet/broadcom/tg3.h | 1 +
8839 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8840 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8841 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8842 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8843 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8844 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8845 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8846 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8847 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8848 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8849 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8850 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8851 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8852 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8853 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8854 drivers/net/ethernet/realtek/r8169.c | 8 +-
8855 drivers/net/ethernet/sfc/ptp.c | 2 +-
8856 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8857 drivers/net/ethernet/via/via-rhine.c | 2 +-
8858 drivers/net/geneve.c | 2 +-
8859 drivers/net/hyperv/hyperv_net.h | 2 +-
8860 drivers/net/hyperv/rndis_filter.c | 4 +-
8861 drivers/net/ifb.c | 2 +-
8862 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8863 drivers/net/macvlan.c | 20 +-
8864 drivers/net/macvtap.c | 6 +-
8865 drivers/net/nlmon.c | 2 +-
8866 drivers/net/phy/phy_device.c | 6 +-
8867 drivers/net/ppp/ppp_generic.c | 4 +-
8868 drivers/net/slip/slhc.c | 2 +-
8869 drivers/net/team/team.c | 4 +-
8870 drivers/net/tun.c | 7 +-
8871 drivers/net/usb/hso.c | 23 +-
8872 drivers/net/usb/r8152.c | 2 +-
8873 drivers/net/usb/sierra_net.c | 4 +-
8874 drivers/net/virtio_net.c | 2 +-
8875 drivers/net/vrf.c | 2 +-
8876 drivers/net/vxlan.c | 4 +-
8877 drivers/net/wimax/i2400m/rx.c | 2 +-
8878 drivers/net/wireless/airo.c | 2 +-
8879 drivers/net/wireless/at76c50x-usb.c | 2 +-
8880 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8881 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
8882 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8883 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8884 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8885 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8886 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8887 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8888 drivers/net/wireless/b43/phy_lp.c | 2 +-
8889 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8890 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8891 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8892 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8893 drivers/net/wireless/rndis_wlan.c | 2 +-
8894 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8895 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8896 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8897 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8898 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8899 drivers/nfc/nfcwilink.c | 2 +-
8900 drivers/of/fdt.c | 4 +-
8901 drivers/oprofile/buffer_sync.c | 8 +-
8902 drivers/oprofile/event_buffer.c | 2 +-
8903 drivers/oprofile/oprof.c | 2 +-
8904 drivers/oprofile/oprofile_stats.c | 10 +-
8905 drivers/oprofile/oprofile_stats.h | 10 +-
8906 drivers/oprofile/oprofilefs.c | 6 +-
8907 drivers/oprofile/timer_int.c | 2 +-
8908 drivers/parport/procfs.c | 4 +-
8909 drivers/pci/host/pci-host-generic.c | 24 +-
8910 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8911 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8912 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8913 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8914 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8915 drivers/pci/hotplug/pciehp_core.c | 2 +-
8916 drivers/pci/msi.c | 22 +-
8917 drivers/pci/pci-sysfs.c | 6 +-
8918 drivers/pci/pci.h | 2 +-
8919 drivers/pci/pcie/aspm.c | 6 +-
8920 drivers/pci/pcie/portdrv_pci.c | 2 +-
8921 drivers/pci/probe.c | 2 +-
8922 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8923 drivers/pinctrl/pinctrl-at91.c | 5 +-
8924 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8925 drivers/platform/x86/alienware-wmi.c | 4 +-
8926 drivers/platform/x86/compal-laptop.c | 2 +-
8927 drivers/platform/x86/hdaps.c | 2 +-
8928 drivers/platform/x86/ibm_rtl.c | 2 +-
8929 drivers/platform/x86/intel_oaktrail.c | 2 +-
8930 drivers/platform/x86/msi-laptop.c | 16 +-
8931 drivers/platform/x86/msi-wmi.c | 2 +-
8932 drivers/platform/x86/samsung-laptop.c | 2 +-
8933 drivers/platform/x86/samsung-q10.c | 2 +-
8934 drivers/platform/x86/sony-laptop.c | 14 +-
8935 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8936 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8937 drivers/pnp/pnpbios/core.c | 2 +-
8938 drivers/power/pda_power.c | 7 +-
8939 drivers/power/power_supply.h | 4 +-
8940 drivers/power/power_supply_core.c | 7 +-
8941 drivers/power/power_supply_sysfs.c | 6 +-
8942 drivers/power/reset/at91-reset.c | 9 +-
8943 drivers/powercap/powercap_sys.c | 136 +-
8944 drivers/ptp/ptp_private.h | 2 +-
8945 drivers/ptp/ptp_sysfs.c | 2 +-
8946 drivers/regulator/core.c | 4 +-
8947 drivers/regulator/max8660.c | 6 +-
8948 drivers/regulator/max8973-regulator.c | 16 +-
8949 drivers/regulator/mc13892-regulator.c | 8 +-
8950 drivers/rtc/rtc-armada38x.c | 7 +-
8951 drivers/rtc/rtc-cmos.c | 4 +-
8952 drivers/rtc/rtc-ds1307.c | 2 +-
8953 drivers/rtc/rtc-m48t59.c | 4 +-
8954 drivers/rtc/rtc-test.c | 6 +-
8955 drivers/scsi/be2iscsi/be_main.c | 2 +-
8956 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8957 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8958 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8959 drivers/scsi/hosts.c | 4 +-
8960 drivers/scsi/hpsa.c | 38 +-
8961 drivers/scsi/hpsa.h | 2 +-
8962 drivers/scsi/libfc/fc_exch.c | 50 +-
8963 drivers/scsi/libsas/sas_ata.c | 2 +-
8964 drivers/scsi/lpfc/lpfc.h | 8 +-
8965 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8966 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8967 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8968 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8969 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
8970 drivers/scsi/pmcraid.c | 20 +-
8971 drivers/scsi/pmcraid.h | 8 +-
8972 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8973 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8974 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8975 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8976 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8977 drivers/scsi/scsi.c | 2 +-
8978 drivers/scsi/scsi_lib.c | 8 +-
8979 drivers/scsi/scsi_sysfs.c | 2 +-
8980 drivers/scsi/scsi_transport_fc.c | 8 +-
8981 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8982 drivers/scsi/scsi_transport_srp.c | 6 +-
8983 drivers/scsi/sd.c | 6 +-
8984 drivers/scsi/sg.c | 2 +-
8985 drivers/scsi/sr.c | 21 +-
8986 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8987 drivers/spi/spi.c | 2 +-
8988 drivers/staging/android/timed_output.c | 6 +-
8989 drivers/staging/comedi/comedi_fops.c | 8 +-
8990 drivers/staging/fbtft/fbtft-core.c | 2 +-
8991 drivers/staging/fbtft/fbtft.h | 2 +-
8992 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8993 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8994 drivers/staging/iio/adc/ad7280a.c | 4 +-
8995 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8996 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8997 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8998 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8999 drivers/staging/lustre/lustre/include/obd.h | 2 +-
9000 drivers/staging/octeon/ethernet-rx.c | 20 +-
9001 drivers/staging/octeon/ethernet.c | 8 +-
9002 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
9003 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
9004 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
9005 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
9006 drivers/staging/sm750fb/sm750.c | 14 +-
9007 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
9008 drivers/target/sbp/sbp_target.c | 4 +-
9009 drivers/thermal/cpu_cooling.c | 9 +-
9010 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
9011 drivers/thermal/of-thermal.c | 17 +-
9012 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
9013 drivers/tty/cyclades.c | 6 +-
9014 drivers/tty/hvc/hvc_console.c | 14 +-
9015 drivers/tty/hvc/hvcs.c | 21 +-
9016 drivers/tty/hvc/hvsi.c | 22 +-
9017 drivers/tty/hvc/hvsi_lib.c | 4 +-
9018 drivers/tty/ipwireless/tty.c | 27 +-
9019 drivers/tty/moxa.c | 2 +-
9020 drivers/tty/n_gsm.c | 4 +-
9021 drivers/tty/n_tty.c | 3 +-
9022 drivers/tty/pty.c | 4 +-
9023 drivers/tty/rocket.c | 6 +-
9024 drivers/tty/serial/8250/8250_core.c | 10 +-
9025 drivers/tty/serial/ifx6x60.c | 2 +-
9026 drivers/tty/serial/ioc4_serial.c | 6 +-
9027 drivers/tty/serial/kgdb_nmi.c | 4 +-
9028 drivers/tty/serial/kgdboc.c | 32 +-
9029 drivers/tty/serial/msm_serial.c | 4 +-
9030 drivers/tty/serial/samsung.c | 9 +-
9031 drivers/tty/serial/serial_core.c | 8 +-
9032 drivers/tty/synclink.c | 34 +-
9033 drivers/tty/synclink_gt.c | 28 +-
9034 drivers/tty/synclinkmp.c | 34 +-
9035 drivers/tty/tty_io.c | 2 +-
9036 drivers/tty/tty_ldisc.c | 8 +-
9037 drivers/tty/tty_port.c | 22 +-
9038 drivers/uio/uio.c | 13 +-
9039 drivers/usb/atm/cxacru.c | 2 +-
9040 drivers/usb/atm/usbatm.c | 24 +-
9041 drivers/usb/class/cdc-acm.h | 2 +-
9042 drivers/usb/core/devices.c | 6 +-
9043 drivers/usb/core/devio.c | 12 +-
9044 drivers/usb/core/hcd.c | 4 +-
9045 drivers/usb/core/sysfs.c | 2 +-
9046 drivers/usb/core/usb.c | 2 +-
9047 drivers/usb/early/ehci-dbgp.c | 16 +-
9048 drivers/usb/gadget/function/u_serial.c | 22 +-
9049 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
9050 drivers/usb/host/ehci-hcd.c | 2 +-
9051 drivers/usb/host/ehci-hub.c | 4 +-
9052 drivers/usb/host/ehci-q.c | 4 +-
9053 drivers/usb/host/fotg210-hcd.c | 2 +-
9054 drivers/usb/host/fusbh200-hcd.c | 2 +-
9055 drivers/usb/host/hwa-hc.c | 2 +-
9056 drivers/usb/host/ohci-hcd.c | 2 +-
9057 drivers/usb/host/r8a66597.h | 2 +-
9058 drivers/usb/host/uhci-hcd.c | 2 +-
9059 drivers/usb/host/xhci-pci.c | 2 +-
9060 drivers/usb/host/xhci.c | 2 +-
9061 drivers/usb/misc/appledisplay.c | 4 +-
9062 drivers/usb/serial/console.c | 8 +-
9063 drivers/usb/storage/transport.c | 2 +-
9064 drivers/usb/storage/usb.c | 2 +-
9065 drivers/usb/storage/usb.h | 2 +-
9066 drivers/usb/usbip/vhci.h | 2 +-
9067 drivers/usb/usbip/vhci_hcd.c | 6 +-
9068 drivers/usb/usbip/vhci_rx.c | 2 +-
9069 drivers/usb/wusbcore/wa-hc.h | 4 +-
9070 drivers/usb/wusbcore/wa-xfer.c | 2 +-
9071 drivers/vfio/vfio.c | 2 +-
9072 drivers/vhost/vringh.c | 20 +-
9073 drivers/video/backlight/kb3886_bl.c | 2 +-
9074 drivers/video/console/fbcon.c | 2 +-
9075 drivers/video/fbdev/aty/aty128fb.c | 2 +-
9076 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
9077 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
9078 drivers/video/fbdev/core/fb_defio.c | 6 +-
9079 drivers/video/fbdev/core/fbmem.c | 2 +-
9080 drivers/video/fbdev/hyperv_fb.c | 4 +-
9081 drivers/video/fbdev/i810/i810_accel.c | 1 +
9082 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
9083 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
9084 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
9085 drivers/video/fbdev/omap2/dss/display.c | 8 +-
9086 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
9087 drivers/video/fbdev/smscufx.c | 4 +-
9088 drivers/video/fbdev/udlfb.c | 36 +-
9089 drivers/video/fbdev/uvesafb.c | 52 +-
9090 drivers/video/fbdev/vesafb.c | 58 +-
9091 drivers/video/fbdev/via/via_clock.h | 2 +-
9092 drivers/xen/events/events_base.c | 6 +-
9093 drivers/xen/evtchn.c | 4 +-
9094 fs/Kconfig.binfmt | 2 +-
9095 fs/afs/inode.c | 4 +-
9097 fs/autofs4/waitq.c | 2 +-
9098 fs/befs/endian.h | 6 +-
9099 fs/binfmt_aout.c | 23 +-
9100 fs/binfmt_elf.c | 670 +-
9101 fs/binfmt_elf_fdpic.c | 4 +-
9102 fs/block_dev.c | 2 +-
9103 fs/btrfs/ctree.c | 9 +-
9104 fs/btrfs/delayed-inode.c | 9 +-
9105 fs/btrfs/delayed-inode.h | 6 +-
9106 fs/btrfs/file.c | 10 +-
9107 fs/btrfs/inode.c | 14 +-
9108 fs/btrfs/super.c | 2 +-
9109 fs/btrfs/sysfs.c | 2 +-
9110 fs/btrfs/tests/free-space-tests.c | 8 +-
9111 fs/btrfs/tree-log.h | 2 +-
9113 fs/cachefiles/bind.c | 6 +-
9114 fs/cachefiles/daemon.c | 8 +-
9115 fs/cachefiles/internal.h | 12 +-
9116 fs/cachefiles/namei.c | 2 +-
9117 fs/cachefiles/proc.c | 12 +-
9118 fs/ceph/dir.c | 12 +-
9119 fs/ceph/super.c | 4 +-
9120 fs/cifs/cifs_debug.c | 12 +-
9121 fs/cifs/cifsfs.c | 8 +-
9122 fs/cifs/cifsglob.h | 54 +-
9123 fs/cifs/file.c | 10 +-
9124 fs/cifs/misc.c | 4 +-
9125 fs/cifs/smb1ops.c | 80 +-
9126 fs/cifs/smb2ops.c | 84 +-
9127 fs/cifs/smb2pdu.c | 3 +-
9128 fs/coda/cache.c | 10 +-
9130 fs/compat_binfmt_elf.c | 2 +
9131 fs/compat_ioctl.c | 12 +-
9132 fs/configfs/dir.c | 10 +-
9133 fs/coredump.c | 16 +-
9135 fs/ecryptfs/inode.c | 2 +-
9136 fs/ecryptfs/miscdev.c | 2 +-
9138 fs/ext2/xattr.c | 5 +-
9139 fs/ext4/ext4.h | 20 +-
9140 fs/ext4/mballoc.c | 44 +-
9141 fs/ext4/resize.c | 16 +-
9142 fs/ext4/super.c | 4 +-
9143 fs/ext4/xattr.c | 5 +-
9146 fs/fs_struct.c | 8 +-
9147 fs/fscache/cookie.c | 40 +-
9148 fs/fscache/internal.h | 202 +-
9149 fs/fscache/object.c | 26 +-
9150 fs/fscache/operation.c | 38 +-
9151 fs/fscache/page.c | 110 +-
9152 fs/fscache/stats.c | 348 +-
9153 fs/fuse/cuse.c | 10 +-
9154 fs/fuse/dev.c | 4 +-
9155 fs/gfs2/glock.c | 22 +-
9156 fs/gfs2/glops.c | 4 +-
9157 fs/gfs2/quota.c | 6 +-
9158 fs/hugetlbfs/inode.c | 13 +-
9160 fs/jffs2/erase.c | 3 +-
9161 fs/jffs2/wbuf.c | 3 +-
9162 fs/jfs/super.c | 2 +-
9163 fs/kernfs/dir.c | 2 +-
9164 fs/kernfs/file.c | 20 +-
9166 fs/lockd/clntproc.c | 4 +-
9168 fs/namespace.c | 16 +-
9169 fs/nfs/callback_xdr.c | 2 +-
9170 fs/nfs/inode.c | 6 +-
9171 fs/nfsd/nfs4proc.c | 2 +-
9172 fs/nfsd/nfs4xdr.c | 2 +-
9173 fs/nfsd/nfscache.c | 11 +-
9174 fs/nfsd/vfs.c | 6 +-
9175 fs/nls/nls_base.c | 26 +-
9176 fs/nls/nls_euc-jp.c | 6 +-
9177 fs/nls/nls_koi8-ru.c | 6 +-
9178 fs/notify/fanotify/fanotify_user.c | 4 +-
9179 fs/notify/notification.c | 4 +-
9180 fs/ntfs/dir.c | 2 +-
9181 fs/ntfs/super.c | 6 +-
9182 fs/ocfs2/localalloc.c | 2 +-
9183 fs/ocfs2/ocfs2.h | 10 +-
9184 fs/ocfs2/suballoc.c | 12 +-
9185 fs/ocfs2/super.c | 20 +-
9187 fs/posix_acl.c | 4 +-
9188 fs/proc/array.c | 20 +
9189 fs/proc/base.c | 4 +-
9190 fs/proc/kcore.c | 34 +-
9191 fs/proc/meminfo.c | 2 +-
9192 fs/proc/nommu.c | 2 +-
9193 fs/proc/proc_sysctl.c | 26 +-
9194 fs/proc/task_mmu.c | 39 +-
9195 fs/proc/task_nommu.c | 4 +-
9196 fs/proc/vmcore.c | 16 +-
9197 fs/qnx6/qnx6.h | 4 +-
9198 fs/quota/netlink.c | 4 +-
9199 fs/read_write.c | 2 +-
9200 fs/reiserfs/do_balan.c | 2 +-
9201 fs/reiserfs/procfs.c | 2 +-
9202 fs/reiserfs/reiserfs.h | 4 +-
9203 fs/seq_file.c | 4 +-
9205 fs/squashfs/xattr.c | 12 +-
9206 fs/sysv/sysv.h | 2 +-
9207 fs/tracefs/inode.c | 8 +-
9208 fs/udf/misc.c | 2 +-
9209 fs/ufs/swab.h | 4 +-
9210 fs/userfaultfd.c | 2 +-
9212 fs/xfs/libxfs/xfs_bmap.c | 2 +-
9213 fs/xfs/xfs_dir2_readdir.c | 7 +-
9214 fs/xfs/xfs_ioctl.c | 2 +-
9215 fs/xfs/xfs_linux.h | 4 +-
9216 include/asm-generic/4level-fixup.h | 2 +
9217 include/asm-generic/atomic-long.h | 156 +-
9218 include/asm-generic/atomic64.h | 12 +
9219 include/asm-generic/bitops/__fls.h | 2 +-
9220 include/asm-generic/bitops/fls.h | 2 +-
9221 include/asm-generic/bitops/fls64.h | 4 +-
9222 include/asm-generic/bug.h | 6 +-
9223 include/asm-generic/cache.h | 4 +-
9224 include/asm-generic/emergency-restart.h | 2 +-
9225 include/asm-generic/kmap_types.h | 4 +-
9226 include/asm-generic/local.h | 13 +
9227 include/asm-generic/pgtable-nopmd.h | 18 +-
9228 include/asm-generic/pgtable-nopud.h | 15 +-
9229 include/asm-generic/pgtable.h | 16 +
9230 include/asm-generic/sections.h | 1 +
9231 include/asm-generic/uaccess.h | 16 +
9232 include/asm-generic/vmlinux.lds.h | 15 +-
9233 include/crypto/algapi.h | 2 +-
9234 include/drm/drmP.h | 16 +-
9235 include/drm/drm_crtc_helper.h | 2 +-
9236 include/drm/drm_mm.h | 2 +-
9237 include/drm/i915_pciids.h | 2 +-
9238 include/drm/intel-gtt.h | 4 +-
9239 include/drm/ttm/ttm_memory.h | 2 +-
9240 include/drm/ttm/ttm_page_alloc.h | 1 +
9241 include/keys/asymmetric-subtype.h | 2 +-
9242 include/linux/atmdev.h | 4 +-
9243 include/linux/atomic.h | 17 +-
9244 include/linux/audit.h | 2 +-
9245 include/linux/average.h | 2 +-
9246 include/linux/binfmts.h | 3 +-
9247 include/linux/bitmap.h | 2 +-
9248 include/linux/bitops.h | 8 +-
9249 include/linux/blkdev.h | 2 +-
9250 include/linux/blktrace_api.h | 2 +-
9251 include/linux/cache.h | 8 +
9252 include/linux/cdrom.h | 1 -
9253 include/linux/cleancache.h | 2 +-
9254 include/linux/clk-provider.h | 1 +
9255 include/linux/compat.h | 6 +-
9256 include/linux/compiler-gcc.h | 28 +-
9257 include/linux/compiler.h | 157 +-
9258 include/linux/configfs.h | 2 +-
9259 include/linux/cpufreq.h | 3 +-
9260 include/linux/cpuidle.h | 5 +-
9261 include/linux/cpumask.h | 14 +-
9262 include/linux/crypto.h | 4 +-
9263 include/linux/ctype.h | 2 +-
9264 include/linux/dcache.h | 4 +-
9265 include/linux/decompress/mm.h | 2 +-
9266 include/linux/devfreq.h | 2 +-
9267 include/linux/device.h | 7 +-
9268 include/linux/dma-mapping.h | 2 +-
9269 include/linux/efi.h | 1 +
9270 include/linux/elf.h | 2 +
9271 include/linux/err.h | 4 +-
9272 include/linux/extcon.h | 2 +-
9273 include/linux/fb.h | 3 +-
9274 include/linux/fdtable.h | 2 +-
9275 include/linux/fs.h | 5 +-
9276 include/linux/fs_struct.h | 2 +-
9277 include/linux/fscache-cache.h | 2 +-
9278 include/linux/fscache.h | 2 +-
9279 include/linux/fsnotify.h | 2 +-
9280 include/linux/genhd.h | 4 +-
9281 include/linux/genl_magic_func.h | 2 +-
9282 include/linux/gfp.h | 12 +-
9283 include/linux/highmem.h | 12 +
9284 include/linux/hwmon-sysfs.h | 6 +-
9285 include/linux/i2c.h | 1 +
9286 include/linux/if_pppox.h | 2 +-
9287 include/linux/init.h | 12 +-
9288 include/linux/init_task.h | 7 +
9289 include/linux/interrupt.h | 6 +-
9290 include/linux/iommu.h | 2 +-
9291 include/linux/ioport.h | 2 +-
9292 include/linux/ipc.h | 2 +-
9293 include/linux/irq.h | 5 +-
9294 include/linux/irqdesc.h | 2 +-
9295 include/linux/irqdomain.h | 3 +
9296 include/linux/jiffies.h | 16 +-
9297 include/linux/key-type.h | 2 +-
9298 include/linux/kgdb.h | 6 +-
9299 include/linux/kmemleak.h | 4 +-
9300 include/linux/kobject.h | 3 +-
9301 include/linux/kobject_ns.h | 2 +-
9302 include/linux/kref.h | 2 +-
9303 include/linux/libata.h | 2 +-
9304 include/linux/linkage.h | 1 +
9305 include/linux/list.h | 15 +
9306 include/linux/lockref.h | 26 +-
9307 include/linux/math64.h | 10 +-
9308 include/linux/mempolicy.h | 7 +
9309 include/linux/mm.h | 102 +-
9310 include/linux/mm_types.h | 20 +
9311 include/linux/mmiotrace.h | 4 +-
9312 include/linux/mmzone.h | 2 +-
9313 include/linux/mod_devicetable.h | 4 +-
9314 include/linux/module.h | 69 +-
9315 include/linux/moduleloader.h | 16 +
9316 include/linux/moduleparam.h | 4 +-
9317 include/linux/net.h | 2 +-
9318 include/linux/netdevice.h | 7 +-
9319 include/linux/netfilter.h | 2 +-
9320 include/linux/netfilter/nfnetlink.h | 2 +-
9321 include/linux/nls.h | 4 +-
9322 include/linux/notifier.h | 3 +-
9323 include/linux/oprofile.h | 4 +-
9324 include/linux/padata.h | 2 +-
9325 include/linux/pci_hotplug.h | 3 +-
9326 include/linux/percpu.h | 2 +-
9327 include/linux/perf_event.h | 12 +-
9328 include/linux/pipe_fs_i.h | 8 +-
9329 include/linux/pm.h | 1 +
9330 include/linux/pm_domain.h | 4 +-
9331 include/linux/pm_runtime.h | 2 +-
9332 include/linux/pnp.h | 2 +-
9333 include/linux/poison.h | 4 +-
9334 include/linux/power/smartreflex.h | 2 +-
9335 include/linux/ppp-comp.h | 2 +-
9336 include/linux/preempt.h | 21 +
9337 include/linux/proc_ns.h | 2 +-
9338 include/linux/psci.h | 2 +-
9339 include/linux/quota.h | 2 +-
9340 include/linux/random.h | 19 +-
9341 include/linux/rculist.h | 16 +
9342 include/linux/reboot.h | 14 +-
9343 include/linux/regset.h | 3 +-
9344 include/linux/relay.h | 2 +-
9345 include/linux/rio.h | 2 +-
9346 include/linux/rmap.h | 4 +-
9347 include/linux/sched.h | 72 +-
9348 include/linux/sched/sysctl.h | 1 +
9349 include/linux/semaphore.h | 2 +-
9350 include/linux/seq_file.h | 1 +
9351 include/linux/signal.h | 2 +-
9352 include/linux/skbuff.h | 12 +-
9353 include/linux/slab.h | 47 +-
9354 include/linux/slab_def.h | 14 +-
9355 include/linux/slub_def.h | 2 +-
9356 include/linux/smp.h | 2 +
9357 include/linux/sock_diag.h | 2 +-
9358 include/linux/sonet.h | 2 +-
9359 include/linux/sunrpc/addr.h | 8 +-
9360 include/linux/sunrpc/clnt.h | 2 +-
9361 include/linux/sunrpc/svc.h | 2 +-
9362 include/linux/sunrpc/svc_rdma.h | 18 +-
9363 include/linux/sunrpc/svcauth.h | 2 +-
9364 include/linux/swapops.h | 10 +-
9365 include/linux/swiotlb.h | 3 +-
9366 include/linux/syscalls.h | 21 +-
9367 include/linux/syscore_ops.h | 2 +-
9368 include/linux/sysctl.h | 3 +-
9369 include/linux/sysfs.h | 9 +-
9370 include/linux/sysrq.h | 3 +-
9371 include/linux/tcp.h | 14 +-
9372 include/linux/thread_info.h | 7 +
9373 include/linux/tty.h | 4 +-
9374 include/linux/tty_driver.h | 2 +-
9375 include/linux/tty_ldisc.h | 2 +-
9376 include/linux/types.h | 16 +
9377 include/linux/uaccess.h | 6 +-
9378 include/linux/uio_driver.h | 2 +-
9379 include/linux/unaligned/access_ok.h | 24 +-
9380 include/linux/usb.h | 12 +-
9381 include/linux/usb/hcd.h | 1 +
9382 include/linux/usb/renesas_usbhs.h | 2 +-
9383 include/linux/vermagic.h | 21 +-
9384 include/linux/vga_switcheroo.h | 8 +-
9385 include/linux/vmalloc.h | 7 +-
9386 include/linux/vmstat.h | 24 +-
9387 include/linux/xattr.h | 5 +-
9388 include/linux/zlib.h | 3 +-
9389 include/media/v4l2-dev.h | 2 +-
9390 include/media/v4l2-device.h | 2 +-
9391 include/net/9p/transport.h | 2 +-
9392 include/net/bluetooth/l2cap.h | 2 +-
9393 include/net/bonding.h | 2 +-
9394 include/net/caif/cfctrl.h | 6 +-
9395 include/net/flow.h | 2 +-
9396 include/net/genetlink.h | 2 +-
9397 include/net/gro_cells.h | 2 +-
9398 include/net/inet_connection_sock.h | 2 +-
9399 include/net/inet_sock.h | 2 +-
9400 include/net/inetpeer.h | 2 +-
9401 include/net/ip_fib.h | 2 +-
9402 include/net/ip_vs.h | 8 +-
9403 include/net/ipv6.h | 2 +-
9404 include/net/irda/ircomm_tty.h | 1 +
9405 include/net/iucv/af_iucv.h | 2 +-
9406 include/net/llc_c_ac.h | 2 +-
9407 include/net/llc_c_ev.h | 4 +-
9408 include/net/llc_c_st.h | 2 +-
9409 include/net/llc_s_ac.h | 2 +-
9410 include/net/llc_s_st.h | 2 +-
9411 include/net/mac80211.h | 4 +-
9412 include/net/neighbour.h | 2 +-
9413 include/net/net_namespace.h | 18 +-
9414 include/net/netlink.h | 2 +-
9415 include/net/netns/conntrack.h | 6 +-
9416 include/net/netns/ipv4.h | 4 +-
9417 include/net/netns/ipv6.h | 4 +-
9418 include/net/netns/xfrm.h | 2 +-
9419 include/net/ping.h | 2 +-
9420 include/net/protocol.h | 4 +-
9421 include/net/rtnetlink.h | 2 +-
9422 include/net/sctp/checksum.h | 4 +-
9423 include/net/sctp/sm.h | 4 +-
9424 include/net/sctp/structs.h | 2 +-
9425 include/net/sock.h | 12 +-
9426 include/net/tcp.h | 8 +-
9427 include/net/xfrm.h | 13 +-
9428 include/rdma/iw_cm.h | 2 +-
9429 include/scsi/libfc.h | 3 +-
9430 include/scsi/scsi_device.h | 6 +-
9431 include/scsi/scsi_driver.h | 2 +-
9432 include/scsi/scsi_transport_fc.h | 3 +-
9433 include/scsi/sg.h | 2 +-
9434 include/sound/compress_driver.h | 2 +-
9435 include/sound/soc.h | 4 +-
9436 include/trace/events/irq.h | 4 +-
9437 include/uapi/linux/a.out.h | 8 +
9438 include/uapi/linux/bcache.h | 5 +-
9439 include/uapi/linux/byteorder/little_endian.h | 28 +-
9440 include/uapi/linux/connector.h | 2 +-
9441 include/uapi/linux/elf.h | 28 +
9442 include/uapi/linux/screen_info.h | 3 +-
9443 include/uapi/linux/swab.h | 6 +-
9444 include/uapi/linux/xattr.h | 4 +
9445 include/video/udlfb.h | 8 +-
9446 include/video/uvesafb.h | 1 +
9449 init/do_mounts.c | 14 +-
9450 init/do_mounts.h | 8 +-
9451 init/do_mounts_initrd.c | 30 +-
9452 init/do_mounts_md.c | 6 +-
9453 init/init_task.c | 4 +
9454 init/initramfs.c | 38 +-
9457 ipc/ipc_sysctl.c | 8 +-
9458 ipc/mq_sysctl.c | 4 +-
9461 kernel/audit.c | 8 +-
9462 kernel/auditsc.c | 4 +-
9463 kernel/bpf/core.c | 7 +-
9464 kernel/capability.c | 3 +
9465 kernel/compat.c | 38 +-
9466 kernel/debug/debug_core.c | 16 +-
9467 kernel/debug/kdb/kdb_main.c | 4 +-
9468 kernel/events/core.c | 26 +-
9469 kernel/events/internal.h | 10 +-
9470 kernel/events/uprobes.c | 2 +-
9471 kernel/exit.c | 2 +-
9472 kernel/fork.c | 167 +-
9473 kernel/futex.c | 11 +-
9474 kernel/futex_compat.c | 2 +-
9475 kernel/gcov/base.c | 7 +-
9476 kernel/irq/manage.c | 2 +-
9477 kernel/irq/msi.c | 19 +-
9478 kernel/irq/spurious.c | 2 +-
9479 kernel/jump_label.c | 5 +
9480 kernel/kallsyms.c | 37 +-
9481 kernel/kexec.c | 3 +-
9482 kernel/kmod.c | 8 +-
9483 kernel/kprobes.c | 4 +-
9484 kernel/ksysfs.c | 2 +-
9485 kernel/locking/lockdep.c | 7 +-
9486 kernel/locking/mutex-debug.c | 12 +-
9487 kernel/locking/mutex-debug.h | 4 +-
9488 kernel/locking/mutex.c | 6 +-
9489 kernel/module.c | 422 +-
9490 kernel/notifier.c | 17 +-
9491 kernel/padata.c | 4 +-
9492 kernel/panic.c | 5 +-
9494 kernel/pid_namespace.c | 2 +-
9495 kernel/power/process.c | 12 +-
9496 kernel/profile.c | 14 +-
9497 kernel/ptrace.c | 8 +-
9498 kernel/rcu/rcutorture.c | 60 +-
9499 kernel/rcu/tiny.c | 4 +-
9500 kernel/rcu/tree.c | 44 +-
9501 kernel/rcu/tree.h | 14 +-
9502 kernel/rcu/tree_plugin.h | 14 +-
9503 kernel/rcu/tree_trace.c | 12 +-
9504 kernel/sched/auto_group.c | 4 +-
9505 kernel/sched/core.c | 45 +-
9506 kernel/sched/fair.c | 2 +-
9507 kernel/sched/sched.h | 2 +-
9508 kernel/signal.c | 12 +-
9509 kernel/smpboot.c | 4 +-
9510 kernel/softirq.c | 12 +-
9511 kernel/sys.c | 10 +-
9512 kernel/sysctl.c | 34 +-
9513 kernel/time/alarmtimer.c | 2 +-
9514 kernel/time/posix-cpu-timers.c | 4 +-
9515 kernel/time/posix-timers.c | 24 +-
9516 kernel/time/timer.c | 2 +-
9517 kernel/time/timer_stats.c | 10 +-
9518 kernel/trace/blktrace.c | 6 +-
9519 kernel/trace/ftrace.c | 15 +-
9520 kernel/trace/ring_buffer.c | 96 +-
9521 kernel/trace/trace.c | 2 +-
9522 kernel/trace/trace.h | 2 +-
9523 kernel/trace/trace_clock.c | 4 +-
9524 kernel/trace/trace_events.c | 1 -
9525 kernel/trace/trace_functions_graph.c | 4 +-
9526 kernel/trace/trace_mmiotrace.c | 8 +-
9527 kernel/trace/trace_output.c | 10 +-
9528 kernel/trace/trace_seq.c | 2 +-
9529 kernel/trace/trace_stack.c | 2 +-
9530 kernel/user_namespace.c | 2 +-
9531 kernel/utsname_sysctl.c | 2 +-
9532 kernel/watchdog.c | 2 +-
9533 kernel/workqueue.c | 2 +-
9534 lib/Kconfig.debug | 8 +-
9538 lib/debugobjects.c | 2 +-
9539 lib/decompress_bunzip2.c | 3 +-
9540 lib/decompress_unlzma.c | 4 +-
9542 lib/dma-debug.c | 4 +-
9543 lib/inflate.c | 2 +-
9544 lib/ioremap.c | 4 +-
9545 lib/kobject.c | 4 +-
9546 lib/list_debug.c | 126 +-
9547 lib/lockref.c | 44 +-
9548 lib/percpu-refcount.c | 2 +-
9549 lib/radix-tree.c | 2 +-
9550 lib/random32.c | 2 +-
9551 lib/show_mem.c | 2 +-
9552 lib/strncpy_from_user.c | 2 +-
9553 lib/strnlen_user.c | 2 +-
9554 lib/swiotlb.c | 2 +-
9555 lib/usercopy.c | 6 +
9556 lib/vsprintf.c | 12 +-
9558 mm/backing-dev.c | 4 +-
9563 mm/hugetlb.c | 70 +-
9567 mm/memory-failure.c | 6 +-
9568 mm/memory.c | 424 +-
9569 mm/mempolicy.c | 25 +
9573 mm/mprotect.c | 137 +-
9576 mm/page-writeback.c | 2 +-
9577 mm/page_alloc.c | 49 +-
9579 mm/process_vm_access.c | 14 +-
9584 mm/slab_common.c | 86 +-
9587 mm/sparse-vmemmap.c | 4 +-
9590 mm/swapfile.c | 12 +-
9592 mm/vmalloc.c | 114 +-
9594 net/8021q/vlan.c | 5 +-
9595 net/8021q/vlan_netlink.c | 2 +-
9597 net/9p/trans_fd.c | 2 +-
9598 net/atm/atm_misc.c | 8 +-
9599 net/atm/lec.h | 2 +-
9600 net/atm/proc.c | 6 +-
9601 net/atm/resources.c | 4 +-
9602 net/ax25/sysctl_net_ax25.c | 2 +-
9603 net/batman-adv/bat_iv_ogm.c | 8 +-
9604 net/batman-adv/fragmentation.c | 2 +-
9605 net/batman-adv/soft-interface.c | 8 +-
9606 net/batman-adv/types.h | 6 +-
9607 net/bluetooth/hci_sock.c | 2 +-
9608 net/bluetooth/l2cap_core.c | 6 +-
9609 net/bluetooth/l2cap_sock.c | 12 +-
9610 net/bluetooth/rfcomm/sock.c | 4 +-
9611 net/bluetooth/rfcomm/tty.c | 4 +-
9612 net/bridge/br_netlink.c | 2 +-
9613 net/bridge/netfilter/ebtables.c | 6 +-
9614 net/caif/cfctrl.c | 11 +-
9615 net/caif/chnl_net.c | 2 +-
9616 net/can/af_can.c | 2 +-
9618 net/ceph/messenger.c | 4 +-
9619 net/compat.c | 24 +-
9620 net/core/datagram.c | 2 +-
9621 net/core/dev.c | 16 +-
9622 net/core/filter.c | 2 +-
9623 net/core/flow.c | 6 +-
9624 net/core/neighbour.c | 4 +-
9625 net/core/net-sysfs.c | 2 +-
9626 net/core/net_namespace.c | 8 +-
9627 net/core/netpoll.c | 4 +-
9628 net/core/rtnetlink.c | 15 +-
9629 net/core/scm.c | 14 +-
9630 net/core/skbuff.c | 8 +-
9631 net/core/sock.c | 28 +-
9632 net/core/sock_diag.c | 15 +-
9633 net/core/sysctl_net_core.c | 22 +-
9634 net/decnet/af_decnet.c | 1 +
9635 net/decnet/sysctl_net_decnet.c | 4 +-
9636 net/dsa/dsa.c | 2 +-
9637 net/hsr/hsr_netlink.c | 2 +-
9638 net/ieee802154/6lowpan/core.c | 2 +-
9639 net/ieee802154/6lowpan/reassembly.c | 14 +-
9640 net/ipv4/af_inet.c | 2 +-
9641 net/ipv4/devinet.c | 18 +-
9642 net/ipv4/fib_frontend.c | 6 +-
9643 net/ipv4/fib_semantics.c | 2 +-
9644 net/ipv4/inet_connection_sock.c | 4 +-
9645 net/ipv4/inet_timewait_sock.c | 2 +-
9646 net/ipv4/inetpeer.c | 2 +-
9647 net/ipv4/ip_fragment.c | 15 +-
9648 net/ipv4/ip_gre.c | 6 +-
9649 net/ipv4/ip_sockglue.c | 2 +-
9650 net/ipv4/ip_vti.c | 4 +-
9651 net/ipv4/ipconfig.c | 6 +-
9652 net/ipv4/ipip.c | 4 +-
9653 net/ipv4/netfilter/arp_tables.c | 12 +-
9654 net/ipv4/netfilter/ip_tables.c | 12 +-
9655 net/ipv4/ping.c | 14 +-
9656 net/ipv4/raw.c | 14 +-
9657 net/ipv4/route.c | 32 +-
9658 net/ipv4/sysctl_net_ipv4.c | 22 +-
9659 net/ipv4/tcp_input.c | 6 +-
9660 net/ipv4/tcp_probe.c | 2 +-
9661 net/ipv4/udp.c | 10 +-
9662 net/ipv4/xfrm4_policy.c | 18 +-
9663 net/ipv6/addrconf.c | 18 +-
9664 net/ipv6/af_inet6.c | 2 +-
9665 net/ipv6/datagram.c | 2 +-
9666 net/ipv6/icmp.c | 2 +-
9667 net/ipv6/ip6_fib.c | 4 +-
9668 net/ipv6/ip6_gre.c | 10 +-
9669 net/ipv6/ip6_tunnel.c | 4 +-
9670 net/ipv6/ip6_vti.c | 4 +-
9671 net/ipv6/ipv6_sockglue.c | 2 +-
9672 net/ipv6/netfilter/ip6_tables.c | 12 +-
9673 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9674 net/ipv6/ping.c | 33 +-
9675 net/ipv6/raw.c | 17 +-
9676 net/ipv6/reassembly.c | 13 +-
9677 net/ipv6/route.c | 2 +-
9678 net/ipv6/sit.c | 4 +-
9679 net/ipv6/sysctl_net_ipv6.c | 2 +-
9680 net/ipv6/udp.c | 6 +-
9681 net/ipv6/xfrm6_policy.c | 17 +-
9682 net/irda/ircomm/ircomm_tty.c | 18 +-
9683 net/iucv/af_iucv.c | 4 +-
9684 net/iucv/iucv.c | 2 +-
9685 net/key/af_key.c | 4 +-
9686 net/l2tp/l2tp_eth.c | 38 +-
9687 net/l2tp/l2tp_ip.c | 2 +-
9688 net/l2tp/l2tp_ip6.c | 2 +-
9689 net/mac80211/cfg.c | 8 +-
9690 net/mac80211/ieee80211_i.h | 3 +-
9691 net/mac80211/iface.c | 20 +-
9692 net/mac80211/main.c | 2 +-
9693 net/mac80211/pm.c | 4 +-
9694 net/mac80211/rate.c | 2 +-
9695 net/mac80211/sta_info.c | 2 +-
9696 net/mac80211/util.c | 8 +-
9697 net/mpls/af_mpls.c | 6 +-
9698 net/netfilter/ipset/ip_set_core.c | 2 +-
9699 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9700 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9701 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9702 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9703 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9704 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9705 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9706 net/netfilter/nf_conntrack_acct.c | 2 +-
9707 net/netfilter/nf_conntrack_ecache.c | 2 +-
9708 net/netfilter/nf_conntrack_helper.c | 2 +-
9709 net/netfilter/nf_conntrack_proto.c | 2 +-
9710 net/netfilter/nf_conntrack_standalone.c | 2 +-
9711 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9712 net/netfilter/nf_log.c | 10 +-
9713 net/netfilter/nf_sockopt.c | 4 +-
9714 net/netfilter/nfnetlink_log.c | 4 +-
9715 net/netfilter/nft_compat.c | 9 +-
9716 net/netfilter/xt_statistic.c | 8 +-
9717 net/netlink/af_netlink.c | 4 +-
9718 net/openvswitch/vport-internal_dev.c | 2 +-
9719 net/packet/af_packet.c | 8 +-
9720 net/phonet/pep.c | 6 +-
9721 net/phonet/socket.c | 2 +-
9722 net/phonet/sysctl.c | 2 +-
9723 net/rds/cong.c | 6 +-
9725 net/rds/ib_cm.c | 2 +-
9726 net/rds/ib_recv.c | 4 +-
9728 net/rds/iw_cm.c | 2 +-
9729 net/rds/iw_recv.c | 4 +-
9730 net/rds/rds.h | 2 +-
9731 net/rds/tcp.c | 2 +-
9732 net/rds/tcp_send.c | 2 +-
9733 net/rxrpc/af_rxrpc.c | 2 +-
9734 net/rxrpc/ar-ack.c | 14 +-
9735 net/rxrpc/ar-call.c | 2 +-
9736 net/rxrpc/ar-connection.c | 2 +-
9737 net/rxrpc/ar-connevent.c | 2 +-
9738 net/rxrpc/ar-input.c | 4 +-
9739 net/rxrpc/ar-internal.h | 8 +-
9740 net/rxrpc/ar-local.c | 2 +-
9741 net/rxrpc/ar-output.c | 4 +-
9742 net/rxrpc/ar-peer.c | 2 +-
9743 net/rxrpc/ar-proc.c | 4 +-
9744 net/rxrpc/ar-transport.c | 2 +-
9745 net/rxrpc/rxkad.c | 4 +-
9746 net/sched/sch_generic.c | 4 +-
9747 net/sctp/ipv6.c | 6 +-
9748 net/sctp/protocol.c | 10 +-
9749 net/sctp/sm_sideeffect.c | 2 +-
9750 net/sctp/socket.c | 21 +-
9751 net/sctp/sysctl.c | 10 +-
9752 net/socket.c | 18 +-
9753 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9754 net/sunrpc/clnt.c | 4 +-
9755 net/sunrpc/sched.c | 4 +-
9756 net/sunrpc/svc.c | 4 +-
9757 net/sunrpc/svcauth_unix.c | 2 +-
9758 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
9759 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9760 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9761 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9762 net/tipc/netlink_compat.c | 12 +-
9763 net/tipc/subscr.c | 2 +-
9764 net/unix/af_unix.c | 7 +-
9765 net/unix/sysctl_net_unix.c | 2 +-
9766 net/wireless/wext-core.c | 19 +-
9767 net/xfrm/xfrm_policy.c | 16 +-
9768 net/xfrm/xfrm_state.c | 33 +-
9769 net/xfrm/xfrm_sysctl.c | 2 +-
9770 scripts/Kbuild.include | 2 +-
9771 scripts/Makefile.build | 2 +-
9772 scripts/Makefile.clean | 3 +-
9773 scripts/Makefile.host | 69 +-
9774 scripts/basic/fixdep.c | 12 +-
9775 scripts/dtc/checks.c | 14 +-
9776 scripts/dtc/data.c | 6 +-
9777 scripts/dtc/flattree.c | 8 +-
9778 scripts/dtc/livetree.c | 4 +-
9779 scripts/gcc-plugin.sh | 51 +
9780 scripts/headers_install.sh | 1 +
9781 scripts/kallsyms.c | 4 +-
9782 scripts/kconfig/lkc.h | 5 +-
9783 scripts/kconfig/menu.c | 2 +-
9784 scripts/kconfig/symbol.c | 6 +-
9785 scripts/link-vmlinux.sh | 2 +-
9786 scripts/mod/file2alias.c | 14 +-
9787 scripts/mod/modpost.c | 25 +-
9788 scripts/mod/modpost.h | 6 +-
9789 scripts/mod/sumversion.c | 2 +-
9790 scripts/module-common.lds | 4 +
9791 scripts/package/builddeb | 1 +
9792 scripts/pnmtologo.c | 6 +-
9793 scripts/sortextable.h | 6 +-
9794 scripts/tags.sh | 2 +-
9795 security/Kconfig | 692 +-
9796 security/integrity/ima/ima.h | 4 +-
9797 security/integrity/ima/ima_api.c | 2 +-
9798 security/integrity/ima/ima_fs.c | 4 +-
9799 security/integrity/ima/ima_queue.c | 2 +-
9800 security/keys/key.c | 18 +-
9801 security/selinux/avc.c | 6 +-
9802 security/selinux/include/xfrm.h | 2 +-
9803 security/yama/yama_lsm.c | 2 +-
9804 sound/aoa/codecs/onyx.c | 7 +-
9805 sound/aoa/codecs/onyx.h | 1 +
9806 sound/core/oss/pcm_oss.c | 18 +-
9807 sound/core/pcm_compat.c | 2 +-
9808 sound/core/pcm_native.c | 4 +-
9809 sound/core/sound.c | 2 +-
9810 sound/drivers/mts64.c | 14 +-
9811 sound/drivers/opl4/opl4_lib.c | 2 +-
9812 sound/drivers/portman2x4.c | 3 +-
9813 sound/firewire/amdtp.c | 4 +-
9814 sound/firewire/amdtp.h | 4 +-
9815 sound/firewire/isight.c | 10 +-
9816 sound/firewire/scs1x.c | 8 +-
9817 sound/oss/sb_audio.c | 2 +-
9818 sound/oss/swarm_cs4297a.c | 6 +-
9819 sound/pci/hda/hda_codec.c | 2 +-
9820 sound/pci/ymfpci/ymfpci.h | 2 +-
9821 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9822 sound/soc/codecs/sti-sas.c | 10 +-
9823 sound/soc/soc-ac97.c | 6 +-
9824 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9825 tools/gcc/Makefile | 42 +
9826 tools/gcc/checker_plugin.c | 150 +
9827 tools/gcc/colorize_plugin.c | 215 +
9828 tools/gcc/constify_plugin.c | 571 +
9829 tools/gcc/gcc-common.h | 812 +
9830 tools/gcc/initify_plugin.c | 552 +
9831 tools/gcc/kallocstat_plugin.c | 188 +
9832 tools/gcc/kernexec_plugin.c | 549 +
9833 tools/gcc/latent_entropy_plugin.c | 470 +
9834 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9835 tools/gcc/size_overflow_plugin/Makefile | 28 +
9836 .../disable_size_overflow_hash.data |12422 ++++++++++++
9837 .../generate_size_overflow_hash.sh | 103 +
9838 .../insert_size_overflow_asm.c | 416 +
9839 .../size_overflow_plugin/intentional_overflow.c | 1010 +
9840 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9841 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
9842 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9843 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
9844 .../size_overflow_hash_aux.data | 92 +
9845 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
9846 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9847 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9848 .../size_overflow_plugin_hash.c | 352 +
9849 .../size_overflow_plugin/size_overflow_transform.c | 749 +
9850 .../size_overflow_transform_core.c | 1010 +
9851 tools/gcc/stackleak_plugin.c | 436 +
9852 tools/gcc/structleak_plugin.c | 287 +
9853 tools/include/linux/compiler.h | 8 +
9854 tools/lib/api/Makefile | 2 +-
9855 tools/perf/util/include/asm/alternative-asm.h | 3 +
9856 tools/virtio/linux/uaccess.h | 2 +-
9857 virt/kvm/kvm_main.c | 42 +-
9858 1944 files changed, 66925 insertions(+), 8949 deletions(-)
projects / thirdparty / grsecurity-scrape.git / blob