]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blob - test/changelog-test.txt
Auto commit, 1 new patch{es}.
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
1 commit 33e588f130c19cac089c2b0d70c939bee84ba812
2 Author: Brad Spengler <spender@grsecurity.net>
3 Date: Fri Jun 17 20:15:46 2016 -0400
4
5 Update KSTACKOVERFLOW dependency, update documentation
6
7 grsecurity/Kconfig | 8 ++++----
8 1 file changed, 4 insertions(+), 4 deletions(-)
9
10 commit d877624a8034129afc61dcc0f6127d69ee7a08d5
11 Author: Brad Spengler <spender@grsecurity.net>
12 Date: Wed Jun 15 06:28:18 2016 -0400
13
14 Backport fix for http://seclists.org/oss-sec/2016/q2/553
15
16 security/keys/key.c | 2 +-
17 1 file changed, 1 insertion(+), 1 deletion(-)
18
19 commit 39c61be367e5f1e1e0a08592ab3b23e71779ac9f
20 Merge: c63d655 66f9687
21 Author: Brad Spengler <spender@grsecurity.net>
22 Date: Tue Jun 14 18:19:37 2016 -0400
23
24 Merge branch 'pax-test' into grsec-test
25
26 commit 66f968756cfcc3ab040ad99deb570fb445108fb9
27 Author: Brad Spengler <spender@grsecurity.net>
28 Date: Tue Jun 14 18:19:04 2016 -0400
29
30 Update to pax-linux-4.5.5-test12.patch:
31 - fixed a KERNEXEC regression when writing to /proc/sys/kernel/watchdog_cpumask, reported by shadowdaemon
32 - Emese worked around a gcc induced intentional integer overflow in jfs that triggered a size overflow report, reported by g66 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4486)
33 - Emese relicensed the size overflow plugin to GPLv2 only
34 - Emese added size overflow coverage for vmnet in the hash tables, reported by Shawn <citypw@gmail.com>
35 - Emese enhanced the latent entropy in various ways (https://github.com/ephox-gcc-plugins/latent_entropy/commits/master)
36 - fixed pax_sanitize_slab=off for kmalloc and boot caches, by Mathias Krause <minipli@ld-linux.so>
37 - eliminated the memory overhead of SLUB sanitization, by Mathias Krause <minipli@ld-linux.so>
38
39 kernel/smpboot.c | 3 +
40 mm/slab.c | 2 +
41 mm/slab.h | 15 +
42 mm/slab_common.c | 7 -
43 mm/slob.c | 2 +
44 mm/slub.c | 8 +-
45 scripts/gcc-plugins/latent_entropy_plugin.c | 361 +++++++++++++++------
46 .../disable_size_overflow_hash.data | 1 +
47 .../insert_size_overflow_asm.c | 2 +-
48 .../size_overflow_plugin/intentional_overflow.c | 2 +-
49 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
50 .../size_overflow_plugin/size_overflow_debug.c | 2 +-
51 .../size_overflow_plugin/size_overflow_hash.data | 1 -
52 .../size_overflow_hash_aux.data | 5 +
53 .../size_overflow_plugin/size_overflow_ipa.c | 2 +-
54 .../size_overflow_plugin/size_overflow_misc.c | 2 +-
55 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
56 .../size_overflow_plugin_hash.c | 2 +-
57 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
58 .../size_overflow_transform_core.c | 2 +-
59 20 files changed, 310 insertions(+), 115 deletions(-)
60
61 commit c63d655907910533ed9d50671e98774b4b797578
62 Author: Tejun Heo <tj@kernel.org>
63 Date: Wed May 25 11:48:25 2016 -0400
64
65 percpu: fix synchronization between synchronous map extension and chunk destruction
66
67 For non-atomic allocations, pcpu_alloc() can try to extend the area
68 map synchronously after dropping pcpu_lock; however, the extension
69 wasn't synchronized against chunk destruction and the chunk might get
70 freed while extension is in progress.
71
72 This patch fixes the bug by putting most of non-atomic allocations
73 under pcpu_alloc_mutex to synchronize against pcpu_balance_work which
74 is responsible for async chunk management including destruction.
75
76 Signed-off-by: Tejun Heo <tj@kernel.org>
77 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
78 Reported-by: Vlastimil Babka <vbabka@suse.cz>
79 Reported-by: Sasha Levin <sasha.levin@oracle.com>
80 Cc: stable@vger.kernel.org # v3.18+
81 Fixes: 1a4d76076cda ("percpu: implement asynchronous chunk population")
82
83 mm/percpu.c | 16 ++++++++--------
84 1 file changed, 8 insertions(+), 8 deletions(-)
85
86 commit 63442a31da7b33c5d6ab80254a2af78616b91aa8
87 Author: Tejun Heo <tj@kernel.org>
88 Date: Wed May 25 11:48:25 2016 -0400
89
90 percpu: fix synchronization between chunk->map_extend_work and chunk destruction
91
92 Atomic allocations can trigger async map extensions which is serviced
93 by chunk->map_extend_work. pcpu_balance_work which is responsible for
94 destroying idle chunks wasn't synchronizing properly against
95 chunk->map_extend_work and may end up freeing the chunk while the work
96 item is still in flight.
97
98 This patch fixes the bug by rolling async map extension operations
99 into pcpu_balance_work.
100
101 Signed-off-by: Tejun Heo <tj@kernel.org>
102 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
103 Reported-by: Vlastimil Babka <vbabka@suse.cz>
104 Reported-by: Sasha Levin <sasha.levin@oracle.com>
105 Cc: stable@vger.kernel.org # v3.18+
106 Fixes: 9c824b6a172c ("percpu: make sure chunk->map array has available space")
107
108 mm/percpu.c | 57 ++++++++++++++++++++++++++++++++++++---------------------
109 1 file changed, 36 insertions(+), 21 deletions(-)
110
111 commit 7187611ba0d834ec7db27904c0cdf07bc9bc7d8f
112 Author: Brad Spengler <spender@grsecurity.net>
113 Date: Sat Jun 11 19:54:40 2016 -0400
114
115 Only bother establishing the PTEs for the vmap'd stack on creation
116
117 fs/exec.c | 1 -
118 include/linux/sched.h | 9 ++++-----
119 kernel/fork.c | 3 ++-
120 kernel/sched/core.c | 2 --
121 4 files changed, 6 insertions(+), 9 deletions(-)
122
123 commit a6e150dfb383fcb4c8d5294c59f2d21425ff9f72
124 Author: Brad Spengler <spender@grsecurity.net>
125 Date: Sat Jun 11 13:18:33 2016 -0400
126
127 Work around upstream's use of probe_kernel_address in alignment handling
128 which uses KERNEL_DS but wants to access userland memory directly --
129 not allowed by PaX. Reported by jotik
130
131 arch/arm/mm/alignment.c | 24 ++++++++++++++++++++----
132 1 file changed, 20 insertions(+), 4 deletions(-)
133
134 commit 1646af929d2465bc7a21a3c180de677e0b0b7950
135 Author: Dave Chinner <dchinner@redhat.com>
136 Date: Wed May 18 14:09:12 2016 +1000
137
138 xfs: mark reclaimed inodes invalid earlier
139
140 The last thing we do before using call_rcu() on an xfs_inode to be
141 freed is mark it as invalid. This means there is a window between
142 when we know for certain that the inode is going to be freed and
143 when we do actually mark it as "freed".
144
145 This is important in the context of RCU lookups - we can look up the
146 inode, find that it is valid, and then use it as such not realising
147 that it is in the final stages of being freed.
148
149 As such, mark the inode as being invalid the moment we know it is
150 going to be reclaimed. This can be done while we still hold the
151 XFS_ILOCK_EXCL and the flush lock in xfs_inode_reclaim, meaning that
152 it occurs well before we remove it from the radix tree, and that
153 the i_flags_lock, the XFS_ILOCK and the inode flush lock all act as
154 synchronisation points for detecting that an inode is about to go
155 away.
156
157 For defensive purposes, this allows us to add a further check to
158 xfs_iflush_cluster to ensure we skip inodes that are being freed
159 after we grab the XFS_ILOCK_SHARED and the flush lock - we know that
160 if the inode number if valid while we have these locks held we know
161 that it has not progressed through reclaim to the point where it is
162 clean and is about to be freed.
163
164 [bfoster: fixed __xfs_inode_clear_reclaim() using ip->i_ino after it
165 had already been zeroed.]
166
167 Signed-off-by: Dave Chinner <dchinner@redhat.com>
168 Reviewed-by: Brian Foster <bfoster@redhat.com>
169 Signed-off-by: Dave Chinner <david@fromorbit.com>
170
171 fs/xfs/xfs_icache.c | 46 ++++++++++++++++++++++++++++++++++------------
172 fs/xfs/xfs_inode.c | 13 +++++++++++++
173 2 files changed, 47 insertions(+), 12 deletions(-)
174
175 commit 096f3d24e77f4cd8fe50008623b26c89cb00ccda
176 Author: Dave Chinner <dchinner@redhat.com>
177 Date: Wed May 18 14:01:53 2016 +1000
178
179 xfs: xfs_inode_free() isn't RCU safe
180
181 The xfs_inode freed in xfs_inode_free() has multiple allocated
182 structures attached to it. We free these in xfs_inode_free() before
183 we mark the inode as invalid, and before we run call_rcu() to queue
184 the structure for freeing.
185
186 Unfortunately, this freeing can race with other accesses that are in
187 the RCU current grace period that have found the inode in the radix
188 tree with a valid state. This includes xfs_iflush_cluster(), which
189 calls xfs_inode_clean(), and that accesses the inode log item on the
190 xfs_inode.
191
192 The log item structure is freed in xfs_inode_free(), so there is the
193 possibility we can be accessing freed memory in xfs_iflush_cluster()
194 after validating the xfs_inode structure as being valid for this RCU
195 context. Hence we can get spuriously incorrect clean state returned
196 from such checks. This can lead to use thinking the inode is dirty
197 when it is, in fact, clean, and so incorrectly attaching it to the
198 buffer for IO and completion processing.
199
200 This then leads to use-after-free situations on the xfs_inode itself
201 if the IO completes after the current RCU grace period expires. The
202 buffer callbacks will access the xfs_inode and try to do all sorts
203 of things it shouldn't with freed memory.
204
205 IOWs, xfs_iflush_cluster() only works correctly when racing with
206 inode reclaim if the inode log item is present and correctly stating
207 the inode is clean. If the inode is being freed, then reclaim has
208 already made sure the inode is clean, and hence xfs_iflush_cluster
209 can skip it. However, we are accessing the inode inode under RCU
210 read lock protection and so also must ensure that all dynamically
211 allocated memory we reference in this context is not freed until the
212 RCU grace period expires.
213
214 To fix this, move all the potential memory freeing into
215 xfs_inode_free_callback() so that we are guarantee RCU protected
216 lookup code will always have the memory structures it needs
217 available during the RCU grace period that lookup races can occur
218 in.
219
220 Discovered-by: Brain Foster <bfoster@redhat.com>
221 Signed-off-by: Dave Chinner <dchinner@redhat.com>
222 Reviewed-by: Christoph Hellwig <hch@lst.de>
223 Signed-off-by: Dave Chinner <david@fromorbit.com>
224
225 fs/xfs/xfs_icache.c | 14 +++++++-------
226 1 file changed, 7 insertions(+), 7 deletions(-)
227
228 commit eaec09dbc18fe0ae7905b33b4c819a467a0e801d
229 Author: Jann Horn <jannh@google.com>
230 Date: Wed Jun 1 11:55:07 2016 +0200
231
232 sched: panic on corrupted stack end
233
234 Until now, hitting this BUG_ON caused a recursive oops (because oops
235 handling involves do_exit(), which calls into the scheduler, which in
236 turn raises an oops), which caused stuff below the stack to be
237 overwritten until a panic happened (e.g. via an oops in interrupt
238 context, caused by the overwritten CPU index in the thread_info).
239
240 Just panic directly.
241
242 Signed-off-by: Jann Horn <jannh@google.com>
243 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
244
245 kernel/sched/core.c | 3 ++-
246 1 file changed, 2 insertions(+), 1 deletion(-)
247
248 commit 96894afd3cbd735ed9230f058a32865dec270da2
249 Author: Jann Horn <jannh@google.com>
250 Date: Wed Jun 1 11:55:06 2016 +0200
251
252 ecryptfs: forbid opening files without mmap handler
253
254 This prevents users from triggering a stack overflow through a recursive
255 invocation of pagefault handling that involves mapping procfs files into
256 virtual memory.
257
258 Signed-off-by: Jann Horn <jannh@google.com>
259 Acked-by: Tyler Hicks <tyhicks@canonical.com>
260 Cc: stable@vger.kernel.org
261 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
262
263 fs/ecryptfs/kthread.c | 13 +++++++++++--
264 1 file changed, 11 insertions(+), 2 deletions(-)
265
266 commit 06608cb36ab8329c7cf03fdabc86fb7f64a2656d
267 Author: Jann Horn <jannh@google.com>
268 Date: Wed Jun 1 11:55:05 2016 +0200
269
270 proc: prevent stacking filesystems on top
271
272 This prevents stacking filesystems (ecryptfs and overlayfs) from using
273 procfs as lower filesystem. There is too much magic going on inside
274 procfs, and there is no good reason to stack stuff on top of procfs.
275
276 (For example, procfs does access checks in VFS open handlers, and
277 ecryptfs by design calls open handlers from a kernel thread that doesn't
278 drop privileges or so.)
279
280 Signed-off-by: Jann Horn <jannh@google.com>
281 Cc: stable@vger.kernel.org
282 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
283
284 fs/proc/root.c | 7 +++++++
285 1 file changed, 7 insertions(+)
286
287 commit 7cff8ffababda8d77e7e3a3f2621b26269279b9a
288 Author: Al Viro <viro@zeniv.linux.org.uk>
289 Date: Wed May 4 14:04:13 2016 -0400
290
291 ecryptfs: fix handling of directory opening
292
293 First of all, trying to open them r/w is idiocy; it's guaranteed to fail.
294 Moreover, assigning ->f_pos and assuming that everything will work is
295 blatantly broken - try that with e.g. tmpfs as underlying layer and watch
296 the fireworks. There may be a non-trivial amount of state associated with
297 current IO position, well beyond the numeric offset. Using the single
298 struct file associated with underlying inode is really not a good idea;
299 we ought to open one for each ecryptfs directory struct file.
300
301 Additionally, file_operations both for directories and non-directories are
302 full of pointless methods; non-directories should *not* have ->iterate(),
303 directories should not have ->flush(), ->fasync() and ->splice_read().
304
305 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
306
307 fs/ecryptfs/file.c | 71 ++++++++++++++++++++++++++++++++++++++++++------------
308 1 file changed, 55 insertions(+), 16 deletions(-)
309
310 commit b690dcd62ad1433e69d391a267ce01534c19d20a
311 Author: Brad Spengler <spender@grsecurity.net>
312 Date: Wed Jun 8 20:59:28 2016 -0400
313
314 fix compiler warnings
315
316 fs/exec.c | 4 ++--
317 1 file changed, 2 insertions(+), 2 deletions(-)
318
319 commit 5d43ec1fb9c94f0c2644e0d09a8257442134a0ce
320 Author: Brad Spengler <spender@grsecurity.net>
321 Date: Wed Jun 8 20:52:00 2016 -0400
322
323 Avoid some UB
324
325 fs/exec.c | 8 ++++----
326 1 file changed, 4 insertions(+), 4 deletions(-)
327
328 commit d34347de1cae1f7bd8ea4223d5baca5da8ea4529
329 Author: Brad Spengler <spender@grsecurity.net>
330 Date: Wed Jun 8 20:23:27 2016 -0400
331
332 compile fix
333
334 kernel/smpboot.c | 1 +
335 1 file changed, 1 insertion(+)
336
337 commit 4dfdd6b803d58fec94306a4ff437d500a9c80908
338 Author: Brad Spengler <spender@grsecurity.net>
339 Date: Wed Jun 8 20:13:34 2016 -0400
340
341 Add open/close around cpumask modification, reported by shadowdaemon
342 Triggered by writing to /proc/sys/kernel/watchdog_cpumask
343
344 kernel/smpboot.c | 2 ++
345 1 file changed, 2 insertions(+)
346
347 commit 1ee24693e22a535dbede927beba7b90cd8559eb4
348 Merge: 11150b9 dec4686
349 Author: Brad Spengler <spender@grsecurity.net>
350 Date: Wed Jun 8 07:39:26 2016 -0400
351
352 Merge branch 'pax-test' into grsec-test
353
354 commit dec468678ead461fc786adfbb2505b6ef66a371a
355 Merge: 85a5882 8c596d1
356 Author: Brad Spengler <spender@grsecurity.net>
357 Date: Wed Jun 8 07:39:18 2016 -0400
358
359 Merge branch 'linux-4.5.y' into pax-test
360
361 commit 11150b92c4cd78ec6a22ad0ff682faf2354b4445
362 Author: Brad Spengler <spender@grsecurity.net>
363 Date: Sun Jun 5 14:18:34 2016 -0400
364
365 compile fix
366
367 grsecurity/grsec_tpe.c | 4 ++--
368 include/linux/uidgid.h | 1 +
369 2 files changed, 3 insertions(+), 2 deletions(-)
370
371 commit 6e548aad3425733ed443e4a3232205935f0d4939
372 Author: Brad Spengler <spender@grsecurity.net>
373 Date: Sun Jun 5 08:19:09 2016 -0400
374
375 Workaround some Debian bike-shedding so that group-writable /bin dirs
376 (with group ownership of root) don't trigger TPE violations
377 Reported by jvoisin
378
379 grsecurity/grsec_tpe.c | 4 ++--
380 1 file changed, 2 insertions(+), 2 deletions(-)
381
382 commit 735ea2028ce017246358d22ec81dc6db73499770
383 Author: Brad Spengler <spender@grsecurity.net>
384 Date: Sun Jun 5 04:23:15 2016 -0400
385
386 move another instance of is_privileged_binary outside of atomic
387
388 grsecurity/gracl_segv.c | 4 +++-
389 1 file changed, 3 insertions(+), 1 deletion(-)
390
391 commit e08a7bcc7b7a1e423b5346bcef85d9a92185f65f
392 Merge: d094457 85a5882
393 Author: Brad Spengler <spender@grsecurity.net>
394 Date: Sun Jun 5 04:09:29 2016 -0400
395
396 Merge branch 'pax-test' into grsec-test
397
398 commit 85a588299f41d6a116b8d07d902de986968a84b0
399 Merge: 89f00c3 ec2a755
400 Author: Brad Spengler <spender@grsecurity.net>
401 Date: Sun Jun 5 04:08:42 2016 -0400
402
403 Merge branch 'linux-4.5.y' into pax-test
404
405 commit d094457eb90a693f7007b7f4b26c2132137c7ed2
406 Author: Brad Spengler <spender@grsecurity.net>
407 Date: Mon May 30 10:15:11 2016 -0400
408
409 move privilege/xattr check outside of locks to prevent warning, reported by shadowdaemon
410
411 grsecurity/grsec_sig.c | 7 +++++--
412 1 file changed, 5 insertions(+), 2 deletions(-)
413
414 commit 2fad2bb3392409d98498b3af53cf39f2475e4b70
415 Author: Brad Spengler <spender@grsecurity.net>
416 Date: Sun May 29 10:11:27 2016 -0400
417
418 Fix another harmless warning
419
420 fs/proc/proc_sysctl.c | 2 +-
421 1 file changed, 1 insertion(+), 1 deletion(-)
422
423 commit d62f996e40c87e46b20f45e16819f92d49f3e926
424 Author: Brad Spengler <spender@grsecurity.net>
425 Date: Sun May 29 09:56:32 2016 -0400
426
427 Fix more harmless compiler warnings
428
429 grsecurity/gracl_policy.c | 8 ++++----
430 1 file changed, 4 insertions(+), 4 deletions(-)
431
432 commit 558b784a2b87e337d12bae07d60f435c2f06d849
433 Author: Brad Spengler <spender@grsecurity.net>
434 Date: Sun May 29 09:47:50 2016 -0400
435
436 Fix more harmless warnings
437
438 grsecurity/gracl.c | 6 +++---
439 1 file changed, 3 insertions(+), 3 deletions(-)
440
441 commit 32ec63339ab130758e6941d7f1d8993e41956980
442 Author: Brad Spengler <spender@grsecurity.net>
443 Date: Sun May 29 09:41:23 2016 -0400
444
445 Fix another warning
446
447 include/linux/sched.h | 1 +
448 1 file changed, 1 insertion(+)
449
450 commit 789369de0dbde1fedd2d5cb0ee3474e160af187c
451 Author: Brad Spengler <spender@grsecurity.net>
452 Date: Sun May 29 09:22:05 2016 -0400
453
454 Fix some harmless compiler warnings
455
456 grsecurity/grsum.c | 4 ++--
457 1 file changed, 2 insertions(+), 2 deletions(-)
458
459 commit ed18543a205c206d0aa8ee6b04c606579823b7b3
460 Merge: b0b4143 89f00c3
461 Author: Brad Spengler <spender@grsecurity.net>
462 Date: Sun May 29 08:34:18 2016 -0400
463
464 Merge branch 'pax-test' into grsec-test
465
466 commit 89f00c3b596a62ae5bcfe4920e9d05b9a94be7fa
467 Author: Brad Spengler <spender@grsecurity.net>
468 Date: Sun May 29 08:26:37 2016 -0400
469
470 Update to pax-linux-4.5.5-test11.patch:
471 - fixed arm kuser helper emulation for thumb mode userland, reported by Wizzup(https://forums.grsecurity.net/viewtopic.php?f=3&t=4479)
472 - fixed incorrect function pointer casts in bcache caught by RAP, reported by torsten (https://forums.grsecurity.net/viewtopic.php?f=3&t=4482)
473 - worked around a few intentional integer underflows in the xhci driver caught by the size overflow plugin, reported by Dennis Wassenberg <dennis.wassenberg@secunet.com>
474 - moved gcc plugins from tools/gcc to scripts/gcc-plugins and simplified the plugin build system, by Emese
475 - changed the constify and latent entropy plugins to use a consistent command line switch for compile-time disabling
476 - cleaned up a few unusued macros, whitespace, inline asm constraints, etc
477 - hid the lvalue casts needed for constify behind the const_cast macro, by Mathias Krause <minipli@ld-linux.so>
478
479 Makefile | 50 +-
480 arch/Kconfig | 14 +
481 arch/arm/Kconfig | 1 +
482 arch/arm/boot/compressed/Makefile | 2 +
483 arch/arm/mach-exynos/suspend.c | 4 +-
484 arch/arm/mach-omap2/powerdomains43xx_data.c | 2 +-
485 arch/arm/mach-shmobile/platsmp-apmu.c | 2 +-
486 arch/arm/mm/fault.c | 14 +
487 arch/arm64/Kconfig | 1 +
488 arch/mips/Kconfig | 1 +
489 arch/powerpc/Kconfig | 1 +
490 arch/powerpc/include/asm/atomic.h | 7 +-
491 arch/powerpc/kernel/Makefile | 8 +-
492 arch/sparc/Kconfig | 1 +
493 arch/um/Makefile | 4 +-
494 arch/x86/Kconfig | 1 +
495 arch/x86/boot/Makefile | 3 -
496 arch/x86/boot/compressed/Makefile | 3 -
497 arch/x86/entry/common.c | 2 +-
498 arch/x86/include/asm/thread_info.h | 27 -
499 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 2 +-
500 arch/x86/kernel/cpu/perf_event_intel_pt.c | 10 +-
501 arch/x86/kernel/i8259.c | 4 +-
502 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
503 arch/x86/oprofile/nmi_int.c | 2 +-
504 arch/x86/oprofile/op_model_amd.c | 6 +-
505 arch/x86/oprofile/op_model_ppro.c | 4 +-
506 arch/x86/pci/vmd.c | 2 +-
507 arch/x86/realmode/rm/Makefile | 3 -
508 drivers/acpi/bgrt.c | 4 +-
509 drivers/ata/libata-core.c | 2 +-
510 drivers/ata/pata_arasan_cf.c | 2 +-
511 drivers/base/platform-msi.c | 14 +-
512 drivers/base/power/domain.c | 4 +-
513 drivers/bus/arm-cci.c | 6 +-
514 drivers/cdrom/cdrom.c | 2 +-
515 drivers/clk/socfpga/clk-gate.c | 4 +-
516 drivers/clk/socfpga/clk-pll.c | 4 +-
517 drivers/clk/ti/clk.c | 4 +-
518 drivers/cpufreq/acpi-cpufreq.c | 8 +-
519 drivers/cpufreq/cpufreq-dt.c | 2 +-
520 drivers/cpufreq/cpufreq.c | 8 +-
521 drivers/cpufreq/cpufreq_ondemand.c | 4 +-
522 drivers/cpufreq/p4-clockmod.c | 6 +-
523 drivers/cpufreq/speedstep-centrino.c | 2 +-
524 drivers/firmware/dmi_scan.c | 8 +-
525 drivers/firmware/efi/efi.c | 10 +-
526 drivers/firmware/google/memconsole.c | 2 +-
527 drivers/gpio/gpiolib.c | 8 +-
528 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +-
529 drivers/gpu/drm/i810/i810_drv.c | 2 +-
530 drivers/gpu/drm/i915/i915_irq.c | 86 +-
531 drivers/gpu/drm/i915/intel_display.c | 6 +-
532 drivers/gpu/drm/mga/mga_drv.c | 2 +-
533 drivers/gpu/drm/omapdrm/dss/display.c | 6 +-
534 drivers/gpu/drm/qxl/qxl_drv.c | 2 +-
535 drivers/gpu/drm/qxl/qxl_ttm.c | 4 +-
536 drivers/gpu/drm/r128/r128_drv.c | 2 +-
537 drivers/gpu/drm/radeon/radeon_drv.c | 2 +-
538 drivers/gpu/drm/savage/savage_drv.c | 2 +-
539 drivers/gpu/drm/sis/sis_drv.c | 2 +-
540 drivers/gpu/drm/tegra/dc.c | 2 +-
541 drivers/gpu/drm/tegra/sor.c | 2 +-
542 drivers/gpu/drm/via/via_drv.c | 2 +-
543 drivers/idle/intel_idle.c | 4 +-
544 drivers/infiniband/hw/qib/qib.h | 1 -
545 drivers/iommu/arm-smmu.c | 4 +-
546 drivers/isdn/hardware/eicon/mntfunc.c | 2 +-
547 drivers/md/bcache/btree.c | 11 +-
548 drivers/md/bcache/closure.c | 4 +-
549 drivers/md/bcache/closure.h | 8 +-
550 drivers/md/bcache/journal.c | 16 +-
551 drivers/md/bcache/movinggc.c | 12 +-
552 drivers/md/bcache/request.c | 54 +-
553 drivers/md/bcache/request.h | 2 +-
554 drivers/md/bcache/super.c | 30 +-
555 drivers/md/bcache/writeback.c | 12 +-
556 drivers/media/platform/am437x/am437x-vpfe.c | 2 +-
557 drivers/mfd/twl4030-irq.c | 4 +-
558 drivers/misc/c2port/core.c | 2 +-
559 drivers/misc/mic/scif/scif_api.c | 8 +-
560 drivers/mmc/host/mmci.c | 2 +-
561 drivers/mmc/host/omap_hsmmc.c | 2 +-
562 drivers/mmc/host/sdhci-esdhc-imx.c | 2 +-
563 drivers/mmc/host/sdhci-s3c.c | 6 +-
564 drivers/net/ethernet/cavium/liquidio/lio_main.c | 2 +-
565 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 4 +-
566 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 2 +-
567 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 6 +-
568 drivers/net/macvlan.c | 14 +-
569 drivers/net/wireless/ath/ath9k/main.c | 20 +-
570 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 2 +-
571 drivers/net/wireless/mac80211_hwsim.c | 22 +-
572 drivers/net/wireless/ti/wl1251/sdio.c | 8 +-
573 drivers/net/wireless/ti/wl12xx/main.c | 4 +-
574 drivers/net/wireless/ti/wl18xx/main.c | 4 +-
575 drivers/of/fdt.c | 2 +-
576 drivers/pci/hotplug/acpiphp_ibm.c | 2 +-
577 drivers/pci/hotplug/cpcihp_zt5550.c | 6 +-
578 drivers/pci/hotplug/pci_hotplug_core.c | 4 +-
579 drivers/pci/msi.c | 12 +-
580 drivers/pinctrl/pinctrl-at91.c | 2 +-
581 drivers/platform/x86/msi-laptop.c | 12 +-
582 drivers/power/reset/at91-reset.c | 2 +-
583 drivers/powercap/powercap_sys.c | 6 +-
584 drivers/regulator/max8660.c | 4 +-
585 drivers/regulator/max8973-regulator.c | 12 +-
586 drivers/regulator/mc13892-regulator.c | 4 +-
587 drivers/rtc/rtc-armada38x.c | 4 +-
588 drivers/rtc/rtc-cmos.c | 2 +-
589 drivers/rtc/rtc-m48t59.c | 2 +-
590 drivers/rtc/rtc-rx8010.c | 6 +-
591 drivers/rtc/rtc-test.c | 4 +-
592 drivers/scsi/aacraid/aachba.c | 4 +-
593 drivers/scsi/lpfc/lpfc_init.c | 4 +-
594 drivers/scsi/qla2xxx/qla_os.c | 4 +-
595 drivers/staging/sm750fb/sm750.c | 8 +-
596 drivers/thermal/cpu_cooling.c | 6 +-
597 drivers/thermal/int340x_thermal/int3400_thermal.c | 4 +-
598 drivers/thermal/of-thermal.c | 12 +-
599 drivers/tty/pty.c | 2 +-
600 drivers/tty/serial/8250/8250_core.c | 6 +-
601 drivers/tty/serial/kgdb_nmi.c | 2 +-
602 drivers/usb/host/xhci-ring.c | 52 +-
603 drivers/video/fbdev/aty/atyfb_base.c | 4 +-
604 drivers/video/fbdev/aty/mach64_cursor.c | 2 +-
605 drivers/video/fbdev/core/fb_defio.c | 6 +-
606 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 12 +-
607 drivers/video/fbdev/nvidia/nvidia.c | 18 +-
608 drivers/video/fbdev/omap2/omapfb/dss/display.c | 6 +-
609 drivers/video/fbdev/s1d13xxxfb.c | 4 +-
610 drivers/video/fbdev/smscufx.c | 2 +-
611 drivers/video/fbdev/udlfb.c | 2 +-
612 drivers/video/fbdev/uvesafb.c | 4 +-
613 drivers/video/fbdev/vesafb.c | 2 +-
614 fs/fuse/cuse.c | 6 +-
615 fs/jffs2/file.c | 2 +-
616 fs/nls/nls_base.c | 4 +-
617 fs/nls/nls_euc-jp.c | 4 +-
618 fs/nls/nls_koi8-ru.c | 4 +-
619 fs/proc/proc_sysctl.c | 4 +-
620 fs/tracefs/inode.c | 4 +-
621 include/linux/compiler-gcc.h | 1 +
622 include/linux/compiler.h | 4 +
623 include/linux/seq_buf.h | 2 +-
624 include/linux/sysfs.h | 2 +-
625 kernel/cgroup.c | 14 +-
626 kernel/irq/msi.c | 12 +-
627 kernel/notifier.c | 4 +-
628 kernel/pid.c | 2 +-
629 kernel/trace/trace_output.c | 8 +-
630 net/core/rtnetlink.c | 2 +-
631 net/xfrm/xfrm_state.c | 2 +-
632 scripts/Makefile | 1 +
633 scripts/Makefile.gcc-plugins | 138 +-
634 scripts/Makefile.host | 6 +-
635 scripts/gcc-plugin.sh | 4 +-
636 scripts/gcc-plugins/Makefile | 45 +
637 scripts/gcc-plugins/checker_plugin.c | 496 +
638 scripts/gcc-plugins/colorize_plugin.c | 162 +
639 scripts/gcc-plugins/constify_plugin.c | 521 +
640 scripts/gcc-plugins/gcc-common.h | 879 +
641 scripts/gcc-plugins/gcc-generate-gimple-pass.h | 175 +
642 scripts/gcc-plugins/gcc-generate-ipa-pass.h | 289 +
643 scripts/gcc-plugins/gcc-generate-rtl-pass.h | 175 +
644 scripts/gcc-plugins/gcc-generate-simple_ipa-pass.h | 175 +
645 scripts/gcc-plugins/initify_plugin.c | 536 +
646 scripts/gcc-plugins/kallocstat_plugin.c | 135 +
647 scripts/gcc-plugins/kernexec_plugin.c | 407 +
648 scripts/gcc-plugins/latent_entropy_plugin.c | 438 +
649 scripts/gcc-plugins/rap_plugin/Makefile | 4 +
650 scripts/gcc-plugins/rap_plugin/rap.h | 36 +
651 scripts/gcc-plugins/rap_plugin/rap_fptr_pass.c | 220 +
652 scripts/gcc-plugins/rap_plugin/rap_hash.c | 382 +
653 scripts/gcc-plugins/rap_plugin/rap_plugin.c | 511 +
654 scripts/gcc-plugins/rap_plugin/sip.c | 96 +
655 .../gcc-plugins/size_overflow_plugin/.gitignore | 3 +
656 scripts/gcc-plugins/size_overflow_plugin/Makefile | 28 +
657 .../disable_size_overflow_hash.data | 12444 +++++++++++
658 .../generate_size_overflow_hash.sh | 103 +
659 .../insert_size_overflow_asm.c | 369 +
660 .../size_overflow_plugin/intentional_overflow.c | 1166 +
661 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
662 .../size_overflow_plugin/size_overflow.h | 331 +
663 .../size_overflow_plugin/size_overflow_debug.c | 194 +
664 .../size_overflow_plugin/size_overflow_hash.data | 21504 +++++++++++++++++++
665 .../size_overflow_hash_aux.data | 92 +
666 .../size_overflow_plugin/size_overflow_ipa.c | 1163 +
667 .../size_overflow_plugin/size_overflow_misc.c | 505 +
668 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
669 .../size_overflow_plugin_hash.c | 352 +
670 .../size_overflow_plugin/size_overflow_transform.c | 743 +
671 .../size_overflow_transform_core.c | 1025 +
672 scripts/gcc-plugins/stackleak_plugin.c | 350 +
673 scripts/gcc-plugins/structleak_plugin.c | 239 +
674 scripts/package/builddeb | 2 +-
675 security/Kconfig | 8 +-
676 sound/soc/codecs/sti-sas.c | 8 +-
677 sound/soc/soc-ac97.c | 4 +-
678 tools/gcc/Makefile | 46 -
679 tools/gcc/checker_plugin.c | 496 -
680 tools/gcc/colorize_plugin.c | 162 -
681 tools/gcc/constify_plugin.c | 521 -
682 tools/gcc/gcc-common.h | 879 -
683 tools/gcc/gcc-generate-gimple-pass.h | 175 -
684 tools/gcc/gcc-generate-ipa-pass.h | 289 -
685 tools/gcc/gcc-generate-rtl-pass.h | 175 -
686 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 -
687 tools/gcc/initify_plugin.c | 536 -
688 tools/gcc/kallocstat_plugin.c | 135 -
689 tools/gcc/kernexec_plugin.c | 407 -
690 tools/gcc/latent_entropy_plugin.c | 422 -
691 tools/gcc/rap_plugin/Makefile | 4 -
692 tools/gcc/rap_plugin/rap.h | 36 -
693 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 -
694 tools/gcc/rap_plugin/rap_hash.c | 382 -
695 tools/gcc/rap_plugin/rap_plugin.c | 511 -
696 tools/gcc/rap_plugin/sip.c | 96 -
697 tools/gcc/size_overflow_plugin/.gitignore | 3 -
698 tools/gcc/size_overflow_plugin/Makefile | 28 -
699 .../disable_size_overflow_hash.data | 12444 -----------
700 .../generate_size_overflow_hash.sh | 103 -
701 .../insert_size_overflow_asm.c | 369 -
702 .../size_overflow_plugin/intentional_overflow.c | 1166 -
703 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 -
704 tools/gcc/size_overflow_plugin/size_overflow.h | 331 -
705 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 -
706 .../size_overflow_plugin/size_overflow_hash.data | 21504 -------------------
707 .../size_overflow_hash_aux.data | 92 -
708 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 -
709 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 -
710 .../size_overflow_plugin/size_overflow_plugin.c | 290 -
711 .../size_overflow_plugin_hash.c | 352 -
712 .../size_overflow_plugin/size_overflow_transform.c | 743 -
713 .../size_overflow_transform_core.c | 1025 -
714 tools/gcc/stackleak_plugin.c | 350 -
715 tools/gcc/structleak_plugin.c | 239 -
716 237 files changed, 47340 insertions(+), 47276 deletions(-)
717
718 commit b0b41430a8c9e6e5067c896c07d361e527e298e8
719 Author: Brad Spengler <spender@grsecurity.net>
720 Date: Sat May 21 13:59:19 2016 -0400
721
722 Fix gcc assert properly, from Emese Revfy
723
724 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
725 tools/gcc/size_overflow_plugin/size_overflow_plugin.c | 2 +-
726 2 files changed, 2 insertions(+), 2 deletions(-)
727
728 commit 5e7a47f06420603b0f26f1b45fe2ab02838795c9
729 Merge: f844209 5929595
730 Author: Brad Spengler <spender@grsecurity.net>
731 Date: Fri May 20 20:19:27 2016 -0400
732
733 Merge branch 'pax-test' into grsec-test
734
735 commit 5929595ec558e9282901842bdf9e4a981751fb08
736 Author: Brad Spengler <spender@grsecurity.net>
737 Date: Fri May 20 20:18:58 2016 -0400
738
739 Update to pax-linux-4.5.5-test9.patch:
740 - fixed a few more incorrect fptr casts for RAP
741
742 arch/x86/math-emu/fpu_etc.c | 9 +++++++--
743 arch/x86/math-emu/fpu_trig.c | 13 +++++++++----
744 arch/x86/math-emu/reg_constant.c | 7 ++++++-
745 drivers/isdn/hisax/hfc_2bds0.c | 4 ++--
746 drivers/isdn/hisax/hfcscard.c | 6 ++++--
747 drivers/isdn/hisax/saphir.c | 5 +++--
748 drivers/isdn/hisax/teleint.c | 5 +++--
749 drivers/media/pci/sta2x11/sta2x11_vip.c | 5 +++--
750 drivers/net/hamradio/baycom_epp.c | 2 +-
751 9 files changed, 38 insertions(+), 18 deletions(-)
752
753 commit f84420916698cdf33a81f046206d050e2c3e6966
754 Merge: fa18ce2 445754e
755 Author: Brad Spengler <spender@grsecurity.net>
756 Date: Fri May 20 18:52:20 2016 -0400
757
758 Merge branch 'pax-test' into grsec-test
759
760 commit 445754e5717176c2b3431a0cde1e90df51cc43e2
761 Author: Brad Spengler <spender@grsecurity.net>
762 Date: Fri May 20 18:51:52 2016 -0400
763
764 Update to pax-linux-4.5.4-test8.patch:
765 - fixed a USERCOPY report in the mwifiex driver, by Dennis Wassenberg <dennis.wassenberg@secunet.com> and Mathias Krause <minipli@ld-linux.so>
766
767 drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 2 +-
768 drivers/net/wireless/marvell/mwifiex/pcie.c | 4 ++--
769 drivers/net/wireless/marvell/mwifiex/sdio.c | 10 ++++------
770 3 files changed, 7 insertions(+), 9 deletions(-)
771
772 commit fa18ce2d37a92442162fb72b8f85ee86120ffacb
773 Author: Brad Spengler <spender@grsecurity.net>
774 Date: Thu May 19 18:30:08 2016 -0400
775
776 Update size_overflow hash, from Dr. Toth
777
778 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
779 1 file changed, 1 insertion(+)
780
781 commit 61c487965dbc34618fe292663759d6fa0515bcad
782 Merge: fbc84d2 a734dbd
783 Author: Brad Spengler <spender@grsecurity.net>
784 Date: Thu May 19 06:26:52 2016 -0400
785
786 Merge branch 'pax-test' into grsec-test
787
788 commit a734dbda8b785c38baa1858df2bffc89b45d070a
789 Merge: 238dfca 3b41b7e
790 Author: Brad Spengler <spender@grsecurity.net>
791 Date: Thu May 19 06:24:25 2016 -0400
792
793 Merge branch 'linux-4.5.y' into pax-test
794
795 commit fbc84d202d311b4dc09bcc922678df60b6e76614
796 Merge: 84fa82c 238dfca
797 Author: Brad Spengler <spender@grsecurity.net>
798 Date: Fri May 13 18:00:06 2016 -0400
799
800 Merge branch 'pax-test' into grsec-test
801
802 commit 238dfca3ffe87f4410e67c8ceb554b9ce4f3132b
803 Author: Brad Spengler <spender@grsecurity.net>
804 Date: Fri May 13 17:59:42 2016 -0400
805
806 Compile fix for older gcc
807
808 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
809 1 file changed, 1 insertion(+), 1 deletion(-)
810
811 commit 84fa82c59fa5051e1485a3dcc857b87b70dbc18d
812 Merge: 2cece8e 4654023
813 Author: Brad Spengler <spender@grsecurity.net>
814 Date: Fri May 13 17:31:49 2016 -0400
815
816 Merge branch 'pax-test' into grsec-test
817
818 commit 4654023e72b0834142594eee879e657664498443
819 Author: Brad Spengler <spender@grsecurity.net>
820 Date: Fri May 13 17:29:38 2016 -0400
821
822 Update to pax-linux-4.5.4-test7.patch:
823 - changed the RAP hash emission code to accomodate x86 disassemblers, suggested by Mathias Krause <minipli@ld-linux.so>
824 - fixed a few size overflow false positives in JFS due to the lack of endian conversion macros for signed types, reported by ryonaloli via hunger
825 - fixed a compiler assert triggered by the size overflow plugin
826
827 tools/gcc/rap_plugin/rap_plugin.c | 39 ++++++++++++++++++----
828 .../disable_size_overflow_hash.data | 3 ++
829 .../size_overflow_plugin/intentional_overflow.c | 2 +-
830 .../size_overflow_plugin/size_overflow_hash.data | 3 --
831 4 files changed, 36 insertions(+), 11 deletions(-)
832
833 commit 2cece8e8e0e2fce9943345c0ebebd7436929868e
834 Merge: 6df0471 ea68d2e
835 Author: Brad Spengler <spender@grsecurity.net>
836 Date: Thu May 12 18:41:15 2016 -0400
837
838 Merge branch 'pax-test' into grsec-test
839
840 commit ea68d2e7123a83aba24db99d5ef487b1397fd6d0
841 Author: Brad Spengler <spender@grsecurity.net>
842 Date: Thu May 12 18:40:50 2016 -0400
843
844 Update to pax-linux-4.5.3-test6.patch:
845 - really fixed https://forums.grsecurity.net/viewtopic.php?f=3&t=4473
846 - the nfsd_proc_read fix for RAP had a typo causing an oops, reported by Carlos Carvalho (https://forums.grsecurity.net/viewtopic.php?f=3&t=4471)
847 - fixed a few format string warnings in the RAP hash emission code, reported by Dwokfur
848
849 drivers/net/ppp/pptp.c | 1 -
850 fs/nfsd/nfsproc.c | 2 +-
851 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
852 tools/gcc/rap_plugin/rap_plugin.c | 14 ++++++++++----
853 4 files changed, 12 insertions(+), 7 deletions(-)
854
855 commit 6df04719a7cf4d3f60c9e6190f8eb4b986ce2b1b
856 Author: David Howells <dhowells@redhat.com>
857 Date: Tue Feb 23 11:03:12 2016 +0000
858
859 KEYS: Fix ASN.1 indefinite length object parsing
860
861 This fixes CVE-2016-0758.
862
863 In the ASN.1 decoder, when the length field of an ASN.1 value is extracted,
864 it isn't validated against the remaining amount of data before being added
865 to the cursor. With a sufficiently large size indicated, the check:
866
867 datalen - dp < 2
868
869 may then fail due to integer overflow.
870
871 Fix this by checking the length indicated against the amount of remaining
872 data in both places a definite length is determined.
873
874 Whilst we're at it, make the following changes:
875
876 (1) Check the maximum size of extended length does not exceed the capacity
877 of the variable it's being stored in (len) rather than the type that
878 variable is assumed to be (size_t).
879
880 (2) Compare the EOC tag to the symbolic constant ASN1_EOC rather than the
881 integer 0.
882
883 (3) To reduce confusion, move the initialisation of len outside of:
884
885 for (len = 0; n > 0; n--) {
886
887 since it doesn't have anything to do with the loop counter n.
888
889 Signed-off-by: David Howells <dhowells@redhat.com>
890 Reviewed-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
891 Acked-by: David Woodhouse <David.Woodhouse@intel.com>
892 Acked-by: Peter Jones <pjones@redhat.com>
893
894 lib/asn1_decoder.c | 16 +++++++++-------
895 1 file changed, 9 insertions(+), 7 deletions(-)
896
897 commit acb6cef8047476b8afc3ff3f07286b9e36de1b77
898 Merge: 735f14a a7c9bec
899 Author: Brad Spengler <spender@grsecurity.net>
900 Date: Wed May 11 17:05:21 2016 -0400
901
902 Merge branch 'pax-test' into grsec-test
903
904 commit a7c9bec57dea73ceee1246a64df55038ea840be9
905 Merge: f5bd134 a29ab35
906 Author: Brad Spengler <spender@grsecurity.net>
907 Date: Wed May 11 17:04:48 2016 -0400
908
909 Merge branch 'linux-4.5.y' into pax-test
910
911 commit 735f14a2b5562cd1329b263a81781d59dacffd3e
912 Author: Brad Spengler <spender@grsecurity.net>
913 Date: Wed May 11 06:57:40 2016 -0400
914
915 Fix typo in nfsd RAP changes causing oops reported by Carlos Carvalho
916 at: https://forums.grsecurity.net/viewtopic.php?f=3&t=4471
917
918 fs/nfsd/nfsproc.c | 2 +-
919 1 file changed, 1 insertion(+), 1 deletion(-)
920
921 commit 35e1e615072d0bb885b38ee1b2ada7a0a6a91f9d
922 Merge: 9e3e5ae3e f5bd134
923 Author: Brad Spengler <spender@grsecurity.net>
924 Date: Tue May 10 20:56:54 2016 -0400
925
926 Merge branch 'pax-test' into grsec-test
927
928 commit f5bd1342fa631bb3b69a2e8919785c827c4edf74
929 Author: Brad Spengler <spender@grsecurity.net>
930 Date: Tue May 10 20:55:57 2016 -0400
931
932 Update to pax-linux-4.5.3-test5.patch:
933 - marked all indirectly callable x86 asm crypto functions, reported by Dwokfur and minipli (https://forums.grsecurity.net/viewtopic.php?f=3&t=4468)
934 - worked around an intentional integer overflow introduced by gcc-6 that triggered a size overflow false positive, reported by hooruD, chron and Fen (https://forums.grsecurity.net/viewtopic.php?f=3&t=4469)
935 - made some preparations for enabling RAP on i386 as well, will have to wait due to KERNEXEC
936
937 arch/x86/crypto/aesni-intel_asm.S | 6 +++---
938 arch/x86/crypto/sha-mb/sha1_mb_mgr_flush_avx2.S | 4 ++--
939 arch/x86/crypto/sha-mb/sha1_mb_mgr_submit_avx2.S | 2 +-
940 arch/x86/crypto/sha256_ni_asm.S | 2 +-
941 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
942 arch/x86/entry/common.c | 1 -
943 include/linux/linkage.h | 22 +++++++++++++++-------
944 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
945 tools/gcc/rap_plugin/rap_hash.c | 1 +
946 tools/gcc/rap_plugin/rap_plugin.c | 18 +++++++++---------
947 .../disable_size_overflow_hash.data | 1 +
948 .../size_overflow_plugin/size_overflow_hash.data | 1 -
949 12 files changed, 35 insertions(+), 27 deletions(-)
950
951 commit 9e3e5ae3e9ed69452d4133490dd1831376b9a1e8
952 Merge: e5983fd cfcaa03
953 Author: Brad Spengler <spender@grsecurity.net>
954 Date: Sun May 8 08:04:18 2016 -0400
955
956 Merge branch 'pax-test' into grsec-test
957
958 commit cfcaa036dd3756fc32e083a7c486c1143d93fd22
959 Author: Brad Spengler <spender@grsecurity.net>
960 Date: Sun May 8 08:03:53 2016 -0400
961
962 Update to pax-linux-4.5.3-test4.patch:
963 - fixed a few incorrect function types (mostly start_xmit callbacks) found by RAP, reported by cinder (https://forums.grsecurity.net/viewtopic.php?f=3&t=4466)
964
965 drivers/char/tpm/tpm-chip.c | 7 ++++++-
966 drivers/net/can/bfin_can.c | 2 +-
967 drivers/net/can/flexcan.c | 2 +-
968 drivers/net/ethernet/adi/bfin_mac.c | 2 +-
969 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
970 drivers/net/ethernet/amd/7990.c | 2 +-
971 drivers/net/ethernet/amd/7990.h | 2 +-
972 drivers/net/ethernet/amd/atarilance.c | 4 ++--
973 drivers/net/ethernet/amd/declance.c | 2 +-
974 drivers/net/ethernet/amd/sun3lance.c | 4 ++--
975 drivers/net/ethernet/amd/sunlance.c | 2 +-
976 drivers/net/ethernet/broadcom/bcm63xx_enet.c | 2 +-
977 drivers/net/ethernet/davicom/dm9000.c | 2 +-
978 drivers/net/ethernet/faraday/ftgmac100.c | 2 +-
979 drivers/net/ethernet/faraday/ftmac100.c | 2 +-
980 drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
981 drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
982 drivers/net/ethernet/freescale/gianfar.c | 4 ++--
983 drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
984 drivers/net/ethernet/i825xx/lib82596.c | 4 ++--
985 drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +-
986 drivers/net/ethernet/ibm/emac/core.c | 4 ++--
987 drivers/net/ethernet/micrel/ks8695net.c | 2 +-
988 drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
989 drivers/net/ethernet/netx-eth.c | 2 +-
990 drivers/net/ethernet/nuvoton/w90p910_ether.c | 2 +-
991 drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
992 drivers/net/ethernet/seeq/sgiseeq.c | 2 +-
993 drivers/net/ethernet/sgi/ioc3-eth.c | 4 ++--
994 drivers/net/ethernet/smsc/smc911x.c | 2 +-
995 drivers/net/ethernet/smsc/smc91x.c | 2 +-
996 drivers/net/ethernet/sun/sunbmac.c | 2 +-
997 drivers/net/ethernet/sun/sunqe.c | 2 +-
998 drivers/net/ethernet/sun/sunvnet.c | 10 +++++-----
999 drivers/net/ethernet/ti/cpmac.c | 2 +-
1000 drivers/net/ethernet/ti/netcp_core.c | 2 +-
1001 drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
1002 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 2 +-
1003 drivers/net/xen-netback/interface.c | 2 +-
1004 drivers/net/xen-netfront.c | 2 +-
1005 40 files changed, 55 insertions(+), 50 deletions(-)
1006
1007 commit e5983fd19799feb3bf947cd0dc2b5435deee3332
1008 Merge: 5ecb84f a235ecd
1009 Author: Brad Spengler <spender@grsecurity.net>
1010 Date: Sat May 7 00:00:42 2016 -0400
1011
1012 Merge branch 'pax-test' into grsec-test
1013
1014 commit a235ecd8bdece417e83f9cf89c76607bf15955dc
1015 Author: Brad Spengler <spender@grsecurity.net>
1016 Date: Fri May 6 23:59:34 2016 -0400
1017
1018 Update to pax-linux-4.5.3-test3.patch:
1019 - fixed some more of PARAVIRT for RAP, reported by hunger
1020 - Emese increased the coverage of initify by marking up str* and mem* functions
1021 - added error reporting for refusing to load modules incompatible with KERNEXEC's 'or' method, reported by Martin Väth (https://bugs.gentoo.org/show_bug.cgi?id=581726)
1022
1023 arch/arm/include/asm/string.h | 10 ++---
1024 arch/arm64/include/asm/string.h | 22 +++++------
1025 arch/x86/boot/string.h | 4 +-
1026 arch/x86/include/asm/string_32.h | 20 +++++-----
1027 arch/x86/include/asm/string_64.h | 16 ++++----
1028 arch/x86/kernel/paravirt-spinlocks.c | 22 +++++++++--
1029 arch/x86/xen/mmu.c | 6 ++-
1030 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 ++---
1031 include/linux/string.h | 70 +++++++++++++++++-----------------
1032 include/linux/syscalls.h | 2 +-
1033 kernel/module.c | 4 +-
1034 mm/fadvise.c | 2 +-
1035 tools/gcc/randomize_layout_seed.h | 1 -
1036 tools/gcc/rap_plugin/rap_plugin.c | 7 +++-
1037 14 files changed, 109 insertions(+), 87 deletions(-)
1038
1039 commit 5ecb84f55a9bdf8b39054c23d90646ba0591ce1c
1040 Author: Brad Spengler <spender@grsecurity.net>
1041 Date: Fri May 6 08:51:58 2016 -0400
1042
1043 Remove !PARAVIRT dependency on RAP
1044
1045 security/Kconfig | 2 +-
1046 1 file changed, 1 insertion(+), 1 deletion(-)
1047
1048 commit eecd10d7c579d2601c384c1e9e0f062a8dda40e7
1049 Author: Brad Spengler <spender@grsecurity.net>
1050 Date: Fri May 6 06:34:48 2016 -0400
1051
1052 Update copyright year
1053
1054 tools/gcc/randomize_layout_plugin.c | 2 +-
1055 1 file changed, 1 insertion(+), 1 deletion(-)
1056
1057 commit 7d7e01439c2601abcae2ecfc66a883be258a2691
1058 Merge: 3315e83 c2aa83b
1059 Author: Brad Spengler <spender@grsecurity.net>
1060 Date: Fri May 6 06:34:25 2016 -0400
1061
1062 Merge branch 'pax-test' into grsec-test
1063
1064 commit c2aa83bf2d65989c262ff33312874ee7fe38606a
1065 Author: Brad Spengler <spender@grsecurity.net>
1066 Date: Fri May 6 06:34:04 2016 -0400
1067
1068 Update to pax-linux-4.5.2-test2.patch:
1069 - minipli fixed a few missing hunks left out from the 4.5 port
1070 - fixed a regression in handling user.pax.flags on tmpfs, reported by blueness and Stebalien (https://forums.grsecurity.net/viewtopic.php?f=3&t=4462)
1071 - fixed a few compile regressions on arm, reported by Wizzup
1072 - fixed PARAVIRT for RAP, reported by spender
1073 - fixed the very old PAGEEXEC/i386 TLB reload code for SMAP (not that it could work there), reported by spender
1074 - Emese fixed a false positive size overflow report caused by gcc-5 and newer, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4455)
1075
1076 arch/arm/Kconfig | 2 +-
1077 arch/arm/include/asm/domain.h | 2 +-
1078 arch/arm/kernel/process.c | 6 +
1079 arch/mips/mm/mmap.c | 27 ++++
1080 arch/powerpc/kernel/process.c | 39 +++++
1081 arch/s390/kernel/process.c | 13 ++
1082 arch/x86/entry/entry_32.S | 2 +-
1083 arch/x86/include/asm/fixmap.h | 2 +-
1084 arch/x86/kernel/paravirt.c | 90 +++++++++--
1085 arch/x86/mm/fault.c | 2 +
1086 arch/x86/mm/pgtable.c | 2 +-
1087 drivers/cpufreq/intel_pstate.c | 2 +-
1088 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 +-
1089 drivers/net/ethernet/8390/ax88796.c | 4 +-
1090 drivers/oprofile/oprofilefs.c | 4 +-
1091 drivers/platform/x86/thinkpad_acpi.c | 1 -
1092 fs/xattr.c | 2 +-
1093 include/asm-generic/atomic-long.h | 4 +
1094 include/uapi/linux/xattr.h | 3 +-
1095 kernel/module.c | 2 +-
1096 mm/shmem.c | 2 -
1097 security/Kconfig | 2 +
1098 .../insert_size_overflow_asm.c | 2 +-
1099 .../size_overflow_plugin/intentional_overflow.c | 80 ++++++++--
1100 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
1101 tools/gcc/size_overflow_plugin/size_overflow.h | 8 +-
1102 .../gcc/size_overflow_plugin/size_overflow_debug.c | 2 +-
1103 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 2 +-
1104 .../gcc/size_overflow_plugin/size_overflow_misc.c | 2 +-
1105 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
1106 .../size_overflow_plugin_hash.c | 2 +-
1107 .../size_overflow_plugin/size_overflow_transform.c | 34 ++---
1108 .../size_overflow_transform_core.c | 170 +++++++++++----------
1109 33 files changed, 370 insertions(+), 156 deletions(-)
1110
1111 commit 3315e83c1e9738784da3c1c5836dd13b7593a8f1
1112 Author: Brad Spengler <spender@grsecurity.net>
1113 Date: Wed May 4 21:03:36 2016 -0400
1114
1115 Add PAGEEXEC support for i386 !PAE on SMAP-capable processors
1116 (won't be used by anyone, just for correctness sake)
1117
1118 arch/x86/mm/fault.c | 2 ++
1119 1 file changed, 2 insertions(+)
1120
1121 commit b9e96108d2092c12e42e1810a62aec85f6ddc501
1122 Merge: 6d98323 a3273aa
1123 Author: Brad Spengler <spender@grsecurity.net>
1124 Date: Wed May 4 19:06:44 2016 -0400
1125
1126 Merge branch 'pax-test' into grsec-test
1127
1128 commit a3273aa2488f9e201620ee53af1acfd99c58650a
1129 Merge: e0e4c2c fbc310e
1130 Author: Brad Spengler <spender@grsecurity.net>
1131 Date: Wed May 4 19:06:36 2016 -0400
1132
1133 Merge branch 'linux-4.5.y' into pax-test
1134
1135 commit 6d98323e0b511bdb77b9ef11d84207219331ac69
1136 Author: Brad Spengler <spender@grsecurity.net>
1137 Date: Tue May 3 21:58:09 2016 -0400
1138
1139 Backport fix from http://www.spinics.net/lists/linux-usb/msg140243.html
1140
1141 drivers/usb/core/devio.c | 9 +++++----
1142 1 file changed, 5 insertions(+), 4 deletions(-)
1143
1144 commit b003c68f96dd6a483b515290756816b6c909f34f
1145 Author: Brad Spengler <spender@grsecurity.net>
1146 Date: Sun May 1 12:06:48 2016 -0400
1147
1148 Add note about RANDSTRUCT and the gcc runtime library exception
1149
1150 tools/gcc/randomize_layout_plugin.c | 5 +++++
1151 1 file changed, 5 insertions(+)
1152
1153 commit fe375f07d31c5d561fcca4016f7c33e885fa3586
1154 Author: Brad Spengler <spender@grsecurity.net>
1155 Date: Fri Apr 29 06:22:29 2016 -0400
1156
1157 Revert change to regmap_access_show()
1158
1159 drivers/base/regmap/regmap-debugfs.c | 3 +--
1160 1 file changed, 1 insertion(+), 2 deletions(-)
1161
1162 commit 3f5df6e7cf9716b4854fb282b6eb22cb1e52e92a
1163 Author: Brad Spengler <spender@grsecurity.net>
1164 Date: Fri Apr 29 06:20:12 2016 -0400
1165
1166 Merge a number of fixes from Mathias Krause
1167
1168 arch/x86/entry/entry_32.S | 2 +-
1169 drivers/base/regmap/regmap-debugfs.c | 3 ++-
1170 drivers/cpufreq/intel_pstate.c | 2 +-
1171 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 ++++++-
1172 drivers/oprofile/oprofilefs.c | 4 ++--
1173 drivers/platform/x86/thinkpad_acpi.c | 1 -
1174 init/Kconfig | 1 -
1175 kernel/module.c | 4 +---
1176 8 files changed, 13 insertions(+), 11 deletions(-)
1177
1178 commit 127927d7e57793eca299226cb31ecd9d235bbd62
1179 Author: Brad Spengler <spender@grsecurity.net>
1180 Date: Thu Apr 28 20:58:04 2016 -0400
1181
1182 Add temporary dependency on !PARAVIRT for RAP until some fallout can be fixed
1183
1184 security/Kconfig | 2 +-
1185 1 file changed, 1 insertion(+), 1 deletion(-)
1186
1187 commit d37fff4904eee095ce50ea522efbfaf2a4bcb47e
1188 Author: Brad Spengler <spender@grsecurity.net>
1189 Date: Thu Apr 28 18:44:18 2016 -0400
1190
1191 Update to pax-linux-4.5.2-test1y.patch
1192
1193 tools/gcc/rap_plugin/rap_plugin.c | 6 ++++--
1194 1 file changed, 4 insertions(+), 2 deletions(-)
1195
1196 commit 5e309719b190a24dccd73c8b6ae388bd7f34660b
1197 Merge: ac01f5e e0e4c2c
1198 Author: Brad Spengler <spender@grsecurity.net>
1199 Date: Thu Apr 28 17:37:37 2016 -0400
1200
1201 Merge branch 'pax-test' into grsec-test
1202
1203 commit e0e4c2ce05e0cd594b716a1e12d91928a0d083fd
1204 Author: Brad Spengler <spender@grsecurity.net>
1205 Date: Thu Apr 28 17:36:23 2016 -0400
1206
1207 Update to pax-linux-4.5.2-test1x.patch
1208
1209 arch/x86/include/asm/alternative-asm.h | 8 --------
1210 drivers/lguest/core.c | 2 +-
1211 kernel/sched/deadline.c | 4 ++--
1212 mm/swap.c | 7 ++++++-
1213 tools/gcc/colorize_plugin.c | 2 +-
1214 tools/gcc/gcc-common.h | 21 +++++++++++++++++++++
1215 6 files changed, 31 insertions(+), 13 deletions(-)
1216
1217 commit ac01f5eb279d93b10d63f87c9d851e039ab1bc3e
1218 Author: Brad Spengler <spender@grsecurity.net>
1219 Date: Thu Apr 28 17:35:14 2016 -0400
1220
1221 Initial import of grsecurity 3.1 for 4.5.2 with limited RAP support
1222
1223 Documentation/dontdiff | 2 +
1224 Documentation/kernel-parameters.txt | 11 +
1225 Documentation/sysctl/kernel.txt | 15 +
1226 Makefile | 5 +-
1227 arch/alpha/include/asm/cache.h | 4 +-
1228 arch/alpha/kernel/osf_sys.c | 12 +-
1229 arch/arc/Kconfig | 1 +
1230 arch/arm/Kconfig | 1 +
1231 arch/arm/Kconfig.debug | 1 +
1232 arch/arm/include/asm/thread_info.h | 7 +-
1233 arch/arm/kernel/entry-common.S | 8 +-
1234 arch/arm/kernel/process.c | 4 +-
1235 arch/arm/kernel/ptrace.c | 9 +
1236 arch/arm/kernel/traps.c | 7 +-
1237 arch/arm/mm/Kconfig | 4 +-
1238 arch/arm/mm/fault.c | 40 +-
1239 arch/arm/mm/mmap.c | 8 +-
1240 arch/arm/net/bpf_jit_32.c | 51 +-
1241 arch/arm64/Kconfig.debug | 1 +
1242 arch/avr32/include/asm/cache.h | 4 +-
1243 arch/blackfin/Kconfig.debug | 1 +
1244 arch/blackfin/include/asm/cache.h | 3 +-
1245 arch/cris/include/arch-v10/arch/cache.h | 3 +-
1246 arch/cris/include/arch-v32/arch/cache.h | 3 +-
1247 arch/frv/include/asm/cache.h | 3 +-
1248 arch/frv/mm/elf-fdpic.c | 4 +-
1249 arch/hexagon/include/asm/cache.h | 6 +-
1250 arch/ia64/Kconfig | 1 +
1251 arch/ia64/include/asm/cache.h | 3 +-
1252 arch/ia64/kernel/sys_ia64.c | 2 +
1253 arch/ia64/mm/hugetlbpage.c | 2 +
1254 arch/m32r/include/asm/cache.h | 4 +-
1255 arch/m68k/include/asm/cache.h | 4 +-
1256 arch/metag/mm/hugetlbpage.c | 1 +
1257 arch/microblaze/include/asm/cache.h | 3 +-
1258 arch/mips/Kconfig | 1 +
1259 arch/mips/include/asm/thread_info.h | 11 +-
1260 arch/mips/kernel/irq.c | 3 +
1261 arch/mips/kernel/ptrace.c | 9 +
1262 arch/mips/mm/mmap.c | 4 +-
1263 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
1264 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
1265 arch/nios2/lib/memset.c | 2 +-
1266 arch/openrisc/include/asm/cache.h | 4 +-
1267 arch/parisc/include/asm/cache.h | 3 +
1268 arch/parisc/kernel/sys_parisc.c | 4 +
1269 arch/powerpc/Kconfig | 1 +
1270 arch/powerpc/include/asm/cache.h | 4 +-
1271 arch/powerpc/include/asm/thread_info.h | 5 +-
1272 arch/powerpc/kernel/Makefile | 2 +
1273 arch/powerpc/kernel/irq.c | 3 +
1274 arch/powerpc/kernel/process.c | 10 +-
1275 arch/powerpc/kernel/ptrace.c | 14 +
1276 arch/powerpc/kernel/traps.c | 5 +
1277 arch/powerpc/mm/slice.c | 2 +-
1278 arch/s390/Kconfig.debug | 1 +
1279 arch/s390/include/asm/cache.h | 4 +-
1280 arch/score/include/asm/cache.h | 4 +-
1281 arch/sh/include/asm/cache.h | 3 +-
1282 arch/sh/mm/mmap.c | 6 +-
1283 arch/sparc/include/asm/cache.h | 4 +-
1284 arch/sparc/include/asm/pgalloc_64.h | 1 +
1285 arch/sparc/include/asm/thread_info_64.h | 8 +-
1286 arch/sparc/kernel/process_32.c | 6 +-
1287 arch/sparc/kernel/process_64.c | 8 +-
1288 arch/sparc/kernel/ptrace_64.c | 14 +
1289 arch/sparc/kernel/sys_sparc_64.c | 8 +-
1290 arch/sparc/kernel/syscalls.S | 8 +-
1291 arch/sparc/kernel/traps_32.c | 8 +-
1292 arch/sparc/kernel/traps_64.c | 28 +-
1293 arch/sparc/kernel/unaligned_64.c | 2 +-
1294 arch/sparc/mm/fault_64.c | 2 +-
1295 arch/sparc/mm/hugetlbpage.c | 15 +-
1296 arch/tile/Kconfig | 1 +
1297 arch/tile/include/asm/cache.h | 3 +-
1298 arch/tile/mm/hugetlbpage.c | 2 +
1299 arch/um/include/asm/cache.h | 3 +-
1300 arch/unicore32/include/asm/cache.h | 6 +-
1301 arch/x86/Kconfig | 21 +
1302 arch/x86/Kconfig.debug | 2 +
1303 arch/x86/crypto/sha-mb/sha1_mb.c | 4 +-
1304 arch/x86/entry/common.c | 14 +
1305 arch/x86/entry/entry_32.S | 2 +-
1306 arch/x86/entry/entry_64.S | 2 +-
1307 arch/x86/ia32/ia32_aout.c | 2 +
1308 arch/x86/include/asm/floppy.h | 20 +-
1309 arch/x86/include/asm/fpu/types.h | 69 +-
1310 arch/x86/include/asm/io.h | 2 +-
1311 arch/x86/include/asm/page.h | 12 +-
1312 arch/x86/include/asm/paravirt_types.h | 21 +-
1313 arch/x86/include/asm/processor.h | 12 +-
1314 arch/x86/include/asm/thread_info.h | 6 +-
1315 arch/x86/kernel/dumpstack.c | 10 +-
1316 arch/x86/kernel/dumpstack_32.c | 2 +-
1317 arch/x86/kernel/dumpstack_64.c | 2 +-
1318 arch/x86/kernel/ioport.c | 13 +
1319 arch/x86/kernel/irq_32.c | 3 +
1320 arch/x86/kernel/irq_64.c | 4 +
1321 arch/x86/kernel/ldt.c | 18 +
1322 arch/x86/kernel/msr.c | 10 +
1323 arch/x86/kernel/ptrace.c | 14 +
1324 arch/x86/kernel/signal.c | 9 +-
1325 arch/x86/kernel/sys_i386_32.c | 9 +-
1326 arch/x86/kernel/sys_x86_64.c | 8 +-
1327 arch/x86/kernel/traps.c | 5 +
1328 arch/x86/kernel/verify_cpu.S | 1 +
1329 arch/x86/kernel/vm86_32.c | 15 +
1330 arch/x86/mm/fault.c | 12 +-
1331 arch/x86/mm/hugetlbpage.c | 15 +-
1332 arch/x86/mm/init.c | 66 +-
1333 arch/x86/mm/init_32.c | 6 +-
1334 arch/x86/net/bpf_jit_comp.c | 4 +
1335 arch/x86/platform/efi/efi_64.c | 2 +-
1336 arch/x86/xen/Kconfig | 1 +
1337 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
1338 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
1339 crypto/scatterwalk.c | 10 +-
1340 drivers/acpi/acpica/hwxfsleep.c | 11 +-
1341 drivers/acpi/custom_method.c | 4 +
1342 drivers/block/cciss.h | 30 +-
1343 drivers/block/smart1,2.h | 40 +-
1344 drivers/cdrom/cdrom.c | 2 +-
1345 drivers/char/Kconfig | 4 +-
1346 drivers/char/genrtc.c | 1 +
1347 drivers/char/mem.c | 17 +
1348 drivers/char/random.c | 5 +-
1349 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
1350 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +
1351 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +
1352 drivers/crypto/marvell/cesa.h | 3 +-
1353 drivers/crypto/marvell/hash.c | 106 +-
1354 drivers/firewire/ohci.c | 4 +
1355 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 78 +-
1356 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
1357 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
1358 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
1359 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
1360 drivers/hid/hid-wiimote-debug.c | 2 +-
1361 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
1362 drivers/input/touchscreen/sur40.c | 21 +-
1363 drivers/iommu/Kconfig | 1 +
1364 drivers/iommu/amd_iommu.c | 14 +-
1365 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
1366 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
1367 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
1368 drivers/isdn/i4l/isdn_concap.c | 6 +-
1369 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
1370 drivers/lguest/core.c | 2 +-
1371 drivers/md/bcache/Kconfig | 1 +
1372 drivers/md/raid5.c | 8 +
1373 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
1374 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
1375 drivers/media/radio/radio-cadet.c | 5 +-
1376 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
1377 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
1378 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
1379 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
1380 drivers/message/fusion/mptbase.c | 9 +
1381 drivers/misc/sgi-xp/xp_main.c | 12 +-
1382 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
1383 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
1384 drivers/net/hyperv/hyperv_net.h | 7 +-
1385 drivers/net/hyperv/netvsc_drv.c | 5 +-
1386 drivers/net/hyperv/rndis_filter.c | 4 +-
1387 drivers/net/wan/lmc/lmc_media.c | 97 +-
1388 drivers/net/wan/z85230.c | 24 +-
1389 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
1390 drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 2 +-
1391 drivers/pci/proc.c | 9 +
1392 drivers/platform/x86/asus-wmi.c | 12 +
1393 drivers/rtc/rtc-dev.c | 3 +
1394 drivers/scsi/bfa/bfa_fcs.c | 19 +-
1395 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
1396 drivers/scsi/bfa/bfa_modules.h | 12 +-
1397 drivers/scsi/cxgbi/libcxgbi.c | 1 +
1398 drivers/scsi/hpsa.h | 40 +-
1399 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
1400 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
1401 drivers/staging/wilc1000/host_interface.h | 1 +
1402 drivers/staging/wilc1000/wilc_spi.c | 1 +
1403 drivers/tty/serial/uartlite.c | 4 +-
1404 drivers/tty/sysrq.c | 2 +-
1405 drivers/tty/tty_io.c | 4 +
1406 drivers/tty/vt/keyboard.c | 22 +-
1407 drivers/uio/uio.c | 6 +-
1408 drivers/usb/core/hub.c | 5 +
1409 drivers/usb/gadget/function/f_uac1.c | 1 +
1410 drivers/usb/gadget/function/u_uac1.c | 1 +
1411 drivers/usb/host/hwa-hc.c | 9 +-
1412 drivers/usb/usbip/usbip_common.c | 11 +
1413 drivers/usb/usbip/vhci_sysfs.c | 2 +-
1414 drivers/video/fbdev/arcfb.c | 2 +-
1415 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
1416 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
1417 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
1418 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
1419 drivers/xen/xenfs/xenstored.c | 5 +
1420 firmware/Makefile | 2 +
1421 firmware/WHENCE | 20 +-
1422 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
1423 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
1424 fs/attr.c | 4 +
1425 fs/autofs4/waitq.c | 9 +
1426 fs/binfmt_aout.c | 7 +
1427 fs/binfmt_elf.c | 40 +-
1428 fs/compat.c | 20 +-
1429 fs/coredump.c | 17 +-
1430 fs/dcache.c | 3 +
1431 fs/debugfs/inode.c | 19 +-
1432 fs/ecryptfs/keystore.c | 6 +-
1433 fs/exec.c | 235 +-
1434 fs/ext2/balloc.c | 4 +-
1435 fs/ext2/super.c | 8 +-
1436 fs/ext4/balloc.c | 4 +-
1437 fs/ext4/extents.c | 2 +-
1438 fs/fcntl.c | 4 +
1439 fs/fhandle.c | 3 +-
1440 fs/file.c | 4 +
1441 fs/filesystems.c | 4 +
1442 fs/fs_struct.c | 20 +-
1443 fs/hugetlbfs/inode.c | 5 +-
1444 fs/inode.c | 8 +-
1445 fs/kernfs/dir.c | 6 +
1446 fs/mount.h | 4 +-
1447 fs/namei.c | 295 +-
1448 fs/namespace.c | 24 +
1449 fs/nfsd/nfscache.c | 2 +-
1450 fs/open.c | 38 +
1451 fs/overlayfs/inode.c | 3 +
1452 fs/overlayfs/super.c | 6 +-
1453 fs/pipe.c | 2 +-
1454 fs/posix_acl.c | 15 +-
1455 fs/proc/Kconfig | 10 +-
1456 fs/proc/array.c | 67 +-
1457 fs/proc/base.c | 175 +-
1458 fs/proc/cmdline.c | 4 +
1459 fs/proc/devices.c | 4 +
1460 fs/proc/fd.c | 13 +-
1461 fs/proc/generic.c | 64 +
1462 fs/proc/inode.c | 17 +
1463 fs/proc/internal.h | 11 +-
1464 fs/proc/interrupts.c | 4 +
1465 fs/proc/kcore.c | 3 +
1466 fs/proc/proc_net.c | 31 +
1467 fs/proc/proc_sysctl.c | 52 +-
1468 fs/proc/root.c | 8 +
1469 fs/proc/stat.c | 69 +-
1470 fs/proc/task_mmu.c | 66 +-
1471 fs/readdir.c | 19 +
1472 fs/reiserfs/item_ops.c | 24 +-
1473 fs/reiserfs/super.c | 4 +
1474 fs/select.c | 2 +
1475 fs/seq_file.c | 30 +-
1476 fs/stat.c | 20 +-
1477 fs/sysfs/dir.c | 30 +-
1478 fs/utimes.c | 7 +
1479 fs/xattr.c | 26 +-
1480 grsecurity/Kconfig | 1205 ++++
1481 grsecurity/Makefile | 54 +
1482 grsecurity/gracl.c | 2757 +++++++++
1483 grsecurity/gracl_alloc.c | 105 +
1484 grsecurity/gracl_cap.c | 127 +
1485 grsecurity/gracl_compat.c | 269 +
1486 grsecurity/gracl_fs.c | 448 ++
1487 grsecurity/gracl_ip.c | 386 ++
1488 grsecurity/gracl_learn.c | 207 +
1489 grsecurity/gracl_policy.c | 1784 ++++++
1490 grsecurity/gracl_res.c | 68 +
1491 grsecurity/gracl_segv.c | 304 +
1492 grsecurity/gracl_shm.c | 40 +
1493 grsecurity/grsec_chdir.c | 19 +
1494 grsecurity/grsec_chroot.c | 506 ++
1495 grsecurity/grsec_disabled.c | 445 ++
1496 grsecurity/grsec_exec.c | 189 +
1497 grsecurity/grsec_fifo.c | 26 +
1498 grsecurity/grsec_fork.c | 23 +
1499 grsecurity/grsec_init.c | 294 +
1500 grsecurity/grsec_ipc.c | 48 +
1501 grsecurity/grsec_link.c | 65 +
1502 grsecurity/grsec_log.c | 340 +
1503 grsecurity/grsec_mem.c | 48 +
1504 grsecurity/grsec_mount.c | 65 +
1505 grsecurity/grsec_pax.c | 47 +
1506 grsecurity/grsec_proc.c | 20 +
1507 grsecurity/grsec_ptrace.c | 30 +
1508 grsecurity/grsec_sig.c | 245 +
1509 grsecurity/grsec_sock.c | 244 +
1510 grsecurity/grsec_sysctl.c | 497 ++
1511 grsecurity/grsec_time.c | 16 +
1512 grsecurity/grsec_tpe.c | 78 +
1513 grsecurity/grsec_tty.c | 18 +
1514 grsecurity/grsec_usb.c | 15 +
1515 grsecurity/grsum.c | 54 +
1516 include/linux/binfmts.h | 5 +-
1517 include/linux/capability.h | 13 +
1518 include/linux/compiler-gcc.h | 5 +
1519 include/linux/compiler.h | 8 +
1520 include/linux/cred.h | 8 +-
1521 include/linux/dcache.h | 5 +-
1522 include/linux/fs.h | 24 +-
1523 include/linux/fs_struct.h | 2 +-
1524 include/linux/fsnotify.h | 6 +
1525 include/linux/gracl.h | 342 ++
1526 include/linux/gracl_compat.h | 156 +
1527 include/linux/gralloc.h | 9 +
1528 include/linux/grdefs.h | 140 +
1529 include/linux/grinternal.h | 231 +
1530 include/linux/grmsg.h | 120 +
1531 include/linux/grsecurity.h | 259 +
1532 include/linux/grsock.h | 19 +
1533 include/linux/ipc.h | 2 +-
1534 include/linux/ipc_namespace.h | 2 +-
1535 include/linux/kallsyms.h | 18 +-
1536 include/linux/key-type.h | 4 +-
1537 include/linux/kmod.h | 5 +
1538 include/linux/kobject.h | 2 +-
1539 include/linux/lsm_hooks.h | 4 +-
1540 include/linux/mm.h | 12 +
1541 include/linux/mm_types.h | 4 +-
1542 include/linux/module.h | 5 +-
1543 include/linux/mount.h | 2 +-
1544 include/linux/msg.h | 2 +-
1545 include/linux/netfilter/xt_gradm.h | 9 +
1546 include/linux/path.h | 4 +-
1547 include/linux/perf_event.h | 13 +-
1548 include/linux/pid_namespace.h | 2 +-
1549 include/linux/printk.h | 2 +-
1550 include/linux/proc_fs.h | 22 +-
1551 include/linux/proc_ns.h | 2 +-
1552 include/linux/random.h | 2 +-
1553 include/linux/rbtree_augmented.h | 4 +-
1554 include/linux/scatterlist.h | 12 +-
1555 include/linux/sched.h | 114 +-
1556 include/linux/security.h | 1 +
1557 include/linux/sem.h | 2 +-
1558 include/linux/seq_file.h | 5 +
1559 include/linux/shm.h | 6 +-
1560 include/linux/skbuff.h | 3 +
1561 include/linux/slab.h | 9 -
1562 include/linux/sysctl.h | 8 +-
1563 include/linux/thread_info.h | 6 +-
1564 include/linux/tty.h | 2 +-
1565 include/linux/tty_driver.h | 4 +-
1566 include/linux/uidgid.h | 5 +
1567 include/linux/user_namespace.h | 2 +-
1568 include/linux/utsname.h | 2 +-
1569 include/linux/vermagic.h | 16 +-
1570 include/linux/vmalloc.h | 8 +
1571 include/net/af_unix.h | 2 +-
1572 include/net/ip.h | 2 +-
1573 include/net/neighbour.h | 2 +-
1574 include/net/net_namespace.h | 2 +-
1575 include/net/sctp/structs.h | 2 +-
1576 include/net/sock.h | 2 +-
1577 include/trace/events/fs.h | 53 +
1578 include/uapi/linux/personality.h | 1 +
1579 init/Kconfig | 4 +
1580 init/main.c | 46 +-
1581 ipc/mqueue.c | 1 +
1582 ipc/msg.c | 3 +-
1583 ipc/msgutil.c | 4 +-
1584 ipc/sem.c | 3 +-
1585 ipc/shm.c | 26 +-
1586 ipc/util.c | 6 +
1587 kernel/auditsc.c | 2 +-
1588 kernel/bpf/syscall.c | 10 +-
1589 kernel/bpf/verifier.c | 1 -
1590 kernel/capability.c | 41 +-
1591 kernel/cgroup.c | 5 +-
1592 kernel/compat.c | 1 +
1593 kernel/configs.c | 11 +
1594 kernel/cred.c | 112 +-
1595 kernel/events/core.c | 14 +-
1596 kernel/exit.c | 10 +-
1597 kernel/fork.c | 86 +-
1598 kernel/futex.c | 4 +-
1599 kernel/kallsyms.c | 9 +
1600 kernel/kcmp.c | 4 +
1601 kernel/kexec_core.c | 2 +-
1602 kernel/kmod.c | 96 +-
1603 kernel/kprobes.c | 9 +-
1604 kernel/ksysfs.c | 2 +
1605 kernel/locking/lockdep_proc.c | 10 +-
1606 kernel/module.c | 110 +-
1607 kernel/panic.c | 4 +-
1608 kernel/pid.c | 18 +-
1609 kernel/power/Kconfig | 2 +
1610 kernel/printk/printk.c | 7 +-
1611 kernel/ptrace.c | 50 +-
1612 kernel/resource.c | 10 +
1613 kernel/sched/core.c | 11 +-
1614 kernel/sched/debug.c | 4 +
1615 kernel/signal.c | 37 +-
1616 kernel/sys.c | 64 +-
1617 kernel/sysctl.c | 172 +-
1618 kernel/taskstats.c | 6 +
1619 kernel/time/posix-timers.c | 8 +
1620 kernel/time/time.c | 5 +
1621 kernel/time/timekeeping.c | 3 +
1622 kernel/time/timer_list.c | 13 +-
1623 kernel/time/timer_stats.c | 10 +-
1624 kernel/trace/Kconfig | 2 +
1625 kernel/trace/trace_syscalls.c | 8 +
1626 kernel/user_namespace.c | 15 +
1627 kernel/workqueue.c | 29 +
1628 lib/Kconfig.debug | 12 +-
1629 lib/Kconfig.kasan | 2 +-
1630 lib/is_single_threaded.c | 3 +
1631 lib/list_debug.c | 65 +-
1632 lib/nlattr.c | 2 +
1633 lib/rbtree.c | 4 +-
1634 lib/vsprintf.c | 39 +-
1635 localversion-grsec | 1 +
1636 mm/Kconfig | 8 +-
1637 mm/Kconfig.debug | 1 +
1638 mm/filemap.c | 8 +-
1639 mm/kmemleak.c | 4 +-
1640 mm/memory.c | 2 +-
1641 mm/mempolicy.c | 12 +-
1642 mm/migrate.c | 3 +-
1643 mm/mlock.c | 11 +-
1644 mm/mmap.c | 127 +-
1645 mm/mprotect.c | 8 +
1646 mm/oom_kill.c | 4 +
1647 mm/page_alloc.c | 2 +-
1648 mm/process_vm_access.c | 6 +
1649 mm/shmem.c | 2 +-
1650 mm/slab.c | 14 +-
1651 mm/slab_common.c | 2 +-
1652 mm/slob.c | 12 +
1653 mm/slub.c | 33 +-
1654 mm/swap.c | 6 +-
1655 mm/util.c | 3 +
1656 mm/vmalloc.c | 82 +-
1657 mm/vmstat.c | 29 +-
1658 net/appletalk/atalk_proc.c | 2 +-
1659 net/atm/lec.c | 6 +-
1660 net/atm/mpoa_caches.c | 43 +-
1661 net/bridge/netfilter/ebtables.c | 4 +
1662 net/can/bcm.c | 2 +-
1663 net/can/proc.c | 2 +-
1664 net/core/dev_ioctl.c | 7 +-
1665 net/core/filter.c | 8 +-
1666 net/core/net-procfs.c | 17 +-
1667 net/core/pktgen.c | 2 +-
1668 net/core/sock.c | 23 +-
1669 net/core/sysctl_net_core.c | 2 +-
1670 net/decnet/dn_dev.c | 2 +-
1671 net/ipv4/devinet.c | 6 +-
1672 net/ipv4/inet_hashtables.c | 4 +
1673 net/ipv4/ip_input.c | 7 +
1674 net/ipv4/ip_sockglue.c | 3 +-
1675 net/ipv4/netfilter/arp_tables.c | 43 +-
1676 net/ipv4/netfilter/ip_tables.c | 48 +-
1677 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
1678 net/ipv4/route.c | 6 +-
1679 net/ipv4/tcp_input.c | 6 +-
1680 net/ipv4/tcp_ipv4.c | 24 +-
1681 net/ipv4/tcp_minisocks.c | 9 +-
1682 net/ipv4/tcp_timer.c | 11 +
1683 net/ipv4/udp.c | 24 +
1684 net/ipv6/addrconf.c | 13 +-
1685 net/ipv6/netfilter/ip6_tables.c | 48 +-
1686 net/ipv6/proc.c | 2 +-
1687 net/ipv6/tcp_ipv6.c | 23 +-
1688 net/ipv6/udp.c | 7 +
1689 net/ipx/ipx_proc.c | 2 +-
1690 net/irda/irproc.c | 2 +-
1691 net/llc/llc_proc.c | 2 +-
1692 net/netfilter/Kconfig | 10 +
1693 net/netfilter/Makefile | 1 +
1694 net/netfilter/nf_conntrack_core.c | 8 +
1695 net/netfilter/xt_gradm.c | 51 +
1696 net/netfilter/xt_hashlimit.c | 4 +-
1697 net/netfilter/xt_recent.c | 2 +-
1698 net/packet/af_packet.c | 1 +
1699 net/sctp/bind_addr.c | 14 +-
1700 net/sctp/protocol.c | 1 +
1701 net/sctp/sm_make_chunk.c | 3 +-
1702 net/sctp/socket.c | 4 +-
1703 net/socket.c | 75 +-
1704 net/sunrpc/Kconfig | 1 +
1705 net/sunrpc/cache.c | 2 +-
1706 net/sunrpc/stats.c | 2 +-
1707 net/sysctl_net.c | 2 +-
1708 net/unix/af_unix.c | 52 +-
1709 net/vmw_vsock/vmci_transport_notify.c | 30 +-
1710 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
1711 net/x25/sysctl_net_x25.c | 2 +-
1712 net/x25/x25_proc.c | 2 +-
1713 scripts/package/Makefile | 2 +-
1714 scripts/package/mkspec | 41 +-
1715 security/Kconfig | 364 +-
1716 security/apparmor/file.c | 4 +-
1717 security/apparmor/lsm.c | 8 +-
1718 security/commoncap.c | 29 +
1719 security/keys/internal.h | 2 +-
1720 security/min_addr.c | 2 +
1721 security/tomoyo/file.c | 12 +-
1722 security/tomoyo/mount.c | 4 +
1723 security/tomoyo/tomoyo.c | 20 +-
1724 security/yama/Kconfig | 2 +-
1725 sound/synth/emux/emux_seq.c | 14 +-
1726 sound/usb/line6/driver.c | 40 +-
1727 sound/usb/line6/toneport.c | 12 +-
1728 tools/gcc/.gitignore | 1 +
1729 tools/gcc/Makefile | 12 +
1730 tools/gcc/gen-random-seed.sh | 8 +
1731 tools/gcc/randomize_layout_plugin.c | 935 +++
1732 tools/gcc/randomize_layout_seed.h | 1 -
1733 .../size_overflow_plugin/size_overflow_hash.data | 202 +-
1734 511 files changed, 32630 insertions(+), 3134 deletions(-)
1735
1736 commit a89837d0fc99aab94b5c8b975215de260271c1f7
1737 Author: Brad Spengler <spender@grsecurity.net>
1738 Date: Wed Apr 27 20:43:37 2016 -0400
1739
1740 Initial port of PaX to 4.5.2 with a limited form of RAP
1741 (< 1/5th the total size of the full developed RAP plugin)
1742 No retaddr protection via XOR canary
1743 No C++ support
1744 No LTO support
1745 Removal of a few optimization passes
1746 No compile time reporting of bad fptr casts
1747
1748 The RAP plugin should therefore be used only to compile an
1749 appropriate vanilla kernel with this patch.
1750
1751 Documentation/dontdiff | 46 +-
1752 Documentation/kbuild/makefiles.txt | 39 +-
1753 Documentation/kernel-parameters.txt | 28 +
1754 Makefile | 52 +-
1755 arch/alpha/include/asm/atomic.h | 10 +
1756 arch/alpha/include/asm/elf.h | 7 +
1757 arch/alpha/include/asm/pgalloc.h | 6 +
1758 arch/alpha/include/asm/pgtable.h | 11 +
1759 arch/alpha/kernel/module.c | 2 +-
1760 arch/alpha/kernel/osf_sys.c | 8 +-
1761 arch/alpha/mm/fault.c | 141 +-
1762 arch/arm/Kconfig | 3 +-
1763 arch/arm/include/asm/atomic.h | 323 +-
1764 arch/arm/include/asm/cache.h | 5 +-
1765 arch/arm/include/asm/cacheflush.h | 2 +-
1766 arch/arm/include/asm/checksum.h | 14 +-
1767 arch/arm/include/asm/cmpxchg.h | 4 +
1768 arch/arm/include/asm/cpuidle.h | 2 +-
1769 arch/arm/include/asm/domain.h | 42 +-
1770 arch/arm/include/asm/elf.h | 9 +-
1771 arch/arm/include/asm/fncpy.h | 2 +
1772 arch/arm/include/asm/futex.h | 1 +
1773 arch/arm/include/asm/kmap_types.h | 2 +-
1774 arch/arm/include/asm/mach/dma.h | 2 +-
1775 arch/arm/include/asm/mach/map.h | 16 +-
1776 arch/arm/include/asm/outercache.h | 2 +-
1777 arch/arm/include/asm/page.h | 3 +-
1778 arch/arm/include/asm/pgalloc.h | 20 +
1779 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
1780 arch/arm/include/asm/pgtable-2level.h | 3 +
1781 arch/arm/include/asm/pgtable-3level.h | 3 +
1782 arch/arm/include/asm/pgtable.h | 54 +-
1783 arch/arm/include/asm/smp.h | 2 +-
1784 arch/arm/include/asm/thread_info.h | 3 +
1785 arch/arm/include/asm/tls.h | 3 +
1786 arch/arm/include/asm/uaccess.h | 113 +-
1787 arch/arm/include/uapi/asm/ptrace.h | 2 +-
1788 arch/arm/kernel/armksyms.c | 2 +-
1789 arch/arm/kernel/cpuidle.c | 2 +-
1790 arch/arm/kernel/entry-armv.S | 109 +-
1791 arch/arm/kernel/entry-common.S | 40 +-
1792 arch/arm/kernel/entry-header.S | 55 +
1793 arch/arm/kernel/fiq.c | 3 +
1794 arch/arm/kernel/module-plts.c | 7 +-
1795 arch/arm/kernel/module.c | 38 +-
1796 arch/arm/kernel/patch.c | 2 +
1797 arch/arm/kernel/process.c | 92 +-
1798 arch/arm/kernel/reboot.c | 1 +
1799 arch/arm/kernel/setup.c | 20 +-
1800 arch/arm/kernel/signal.c | 35 +-
1801 arch/arm/kernel/smp.c | 2 +-
1802 arch/arm/kernel/tcm.c | 4 +-
1803 arch/arm/kernel/vmlinux.lds.S | 6 +-
1804 arch/arm/kvm/arm.c | 8 +-
1805 arch/arm/lib/copy_page.S | 1 +
1806 arch/arm/lib/csumpartialcopyuser.S | 4 +-
1807 arch/arm/lib/delay.c | 2 +-
1808 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
1809 arch/arm/mach-exynos/suspend.c | 6 +-
1810 arch/arm/mach-mvebu/coherency.c | 4 +-
1811 arch/arm/mach-omap2/board-n8x0.c | 2 +-
1812 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
1813 arch/arm/mach-omap2/omap-smp.c | 1 +
1814 arch/arm/mach-omap2/omap_device.c | 4 +-
1815 arch/arm/mach-omap2/omap_device.h | 4 +-
1816 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
1817 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
1818 arch/arm/mach-omap2/wd_timer.c | 6 +-
1819 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
1820 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
1821 arch/arm/mach-tegra/irq.c | 1 +
1822 arch/arm/mach-ux500/pm.c | 1 +
1823 arch/arm/mach-zynq/platsmp.c | 1 +
1824 arch/arm/mm/Kconfig | 6 +-
1825 arch/arm/mm/cache-l2x0.c | 2 +-
1826 arch/arm/mm/context.c | 10 +-
1827 arch/arm/mm/fault.c | 146 +
1828 arch/arm/mm/fault.h | 12 +
1829 arch/arm/mm/init.c | 39 +
1830 arch/arm/mm/ioremap.c | 4 +-
1831 arch/arm/mm/mmap.c | 36 +-
1832 arch/arm/mm/mmu.c | 162 +-
1833 arch/arm/net/bpf_jit_32.c | 3 +
1834 arch/arm/plat-iop/setup.c | 2 +-
1835 arch/arm/plat-omap/sram.c | 2 +
1836 arch/arm64/include/asm/atomic.h | 10 +
1837 arch/arm64/include/asm/percpu.h | 8 +-
1838 arch/arm64/include/asm/pgalloc.h | 5 +
1839 arch/arm64/include/asm/uaccess.h | 1 +
1840 arch/arm64/mm/dma-mapping.c | 2 +-
1841 arch/avr32/include/asm/elf.h | 8 +-
1842 arch/avr32/include/asm/kmap_types.h | 4 +-
1843 arch/avr32/mm/fault.c | 27 +
1844 arch/frv/include/asm/atomic.h | 10 +
1845 arch/frv/include/asm/kmap_types.h | 2 +-
1846 arch/frv/mm/elf-fdpic.c | 3 +-
1847 arch/ia64/Makefile | 1 +
1848 arch/ia64/include/asm/atomic.h | 10 +
1849 arch/ia64/include/asm/elf.h | 7 +
1850 arch/ia64/include/asm/pgalloc.h | 12 +
1851 arch/ia64/include/asm/pgtable.h | 13 +-
1852 arch/ia64/include/asm/spinlock.h | 2 +-
1853 arch/ia64/include/asm/uaccess.h | 27 +-
1854 arch/ia64/kernel/module.c | 20 +-
1855 arch/ia64/kernel/palinfo.c | 2 +-
1856 arch/ia64/kernel/sys_ia64.c | 7 +
1857 arch/ia64/kernel/vmlinux.lds.S | 2 +-
1858 arch/ia64/mm/fault.c | 32 +-
1859 arch/ia64/mm/init.c | 15 +-
1860 arch/m32r/lib/usercopy.c | 6 +
1861 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
1862 arch/mips/include/asm/atomic.h | 372 +-
1863 arch/mips/include/asm/cache.h | 3 +-
1864 arch/mips/include/asm/elf.h | 7 +
1865 arch/mips/include/asm/exec.h | 2 +-
1866 arch/mips/include/asm/hw_irq.h | 2 +-
1867 arch/mips/include/asm/local.h | 57 +
1868 arch/mips/include/asm/page.h | 2 +-
1869 arch/mips/include/asm/pgalloc.h | 5 +
1870 arch/mips/include/asm/pgtable.h | 3 +
1871 arch/mips/include/asm/uaccess.h | 1 +
1872 arch/mips/kernel/binfmt_elfn32.c | 7 +
1873 arch/mips/kernel/binfmt_elfo32.c | 7 +
1874 arch/mips/kernel/irq-gt641xx.c | 2 +-
1875 arch/mips/kernel/irq.c | 6 +-
1876 arch/mips/kernel/pm-cps.c | 2 +-
1877 arch/mips/kernel/process.c | 12 -
1878 arch/mips/kernel/sync-r4k.c | 24 +-
1879 arch/mips/kernel/traps.c | 13 +-
1880 arch/mips/lib/ashldi3.c | 21 +-
1881 arch/mips/lib/ashrdi3.c | 19 +-
1882 arch/mips/lib/libgcc.h | 12 +-
1883 arch/mips/mm/fault.c | 25 +
1884 arch/mips/mm/init.c | 4 +-
1885 arch/mips/mm/mmap.c | 51 +-
1886 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
1887 arch/mips/sni/rm200.c | 2 +-
1888 arch/mips/vr41xx/common/icu.c | 2 +-
1889 arch/mips/vr41xx/common/irq.c | 4 +-
1890 arch/parisc/include/asm/atomic.h | 10 +
1891 arch/parisc/include/asm/elf.h | 7 +
1892 arch/parisc/include/asm/pgalloc.h | 6 +
1893 arch/parisc/include/asm/pgtable.h | 11 +
1894 arch/parisc/include/asm/uaccess.h | 4 +-
1895 arch/parisc/kernel/module.c | 26 +-
1896 arch/parisc/kernel/sys_parisc.c | 15 +
1897 arch/parisc/kernel/traps.c | 4 +-
1898 arch/parisc/mm/fault.c | 140 +-
1899 arch/powerpc/include/asm/atomic.h | 329 +-
1900 arch/powerpc/include/asm/book3s/32/hash.h | 1 +
1901 arch/powerpc/include/asm/elf.h | 12 +
1902 arch/powerpc/include/asm/exec.h | 2 +-
1903 arch/powerpc/include/asm/kmap_types.h | 2 +-
1904 arch/powerpc/include/asm/local.h | 46 +
1905 arch/powerpc/include/asm/mman.h | 2 +-
1906 arch/powerpc/include/asm/page.h | 8 +-
1907 arch/powerpc/include/asm/page_64.h | 7 +-
1908 arch/powerpc/include/asm/pgalloc-64.h | 7 +
1909 arch/powerpc/include/asm/pgtable.h | 1 +
1910 arch/powerpc/include/asm/reg.h | 1 +
1911 arch/powerpc/include/asm/smp.h | 2 +-
1912 arch/powerpc/include/asm/spinlock.h | 42 +-
1913 arch/powerpc/include/asm/uaccess.h | 141 +-
1914 arch/powerpc/kernel/Makefile | 5 +
1915 arch/powerpc/kernel/exceptions-64e.S | 4 +-
1916 arch/powerpc/kernel/exceptions-64s.S | 2 +-
1917 arch/powerpc/kernel/module_32.c | 15 +-
1918 arch/powerpc/kernel/process.c | 46 -
1919 arch/powerpc/kernel/signal_32.c | 2 +-
1920 arch/powerpc/kernel/signal_64.c | 2 +-
1921 arch/powerpc/kernel/traps.c | 21 +
1922 arch/powerpc/kernel/vdso.c | 5 +-
1923 arch/powerpc/lib/usercopy_64.c | 18 -
1924 arch/powerpc/mm/fault.c | 56 +-
1925 arch/powerpc/mm/mmap.c | 16 +
1926 arch/powerpc/mm/slice.c | 21 +-
1927 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
1928 arch/s390/include/asm/atomic.h | 10 +
1929 arch/s390/include/asm/elf.h | 7 +
1930 arch/s390/include/asm/exec.h | 2 +-
1931 arch/s390/include/asm/uaccess.h | 13 +-
1932 arch/s390/kernel/module.c | 22 +-
1933 arch/s390/kernel/process.c | 20 -
1934 arch/s390/mm/mmap.c | 22 +-
1935 arch/score/include/asm/exec.h | 2 +-
1936 arch/score/kernel/process.c | 5 -
1937 arch/sh/mm/mmap.c | 28 +-
1938 arch/sparc/include/asm/atomic_64.h | 110 +-
1939 arch/sparc/include/asm/cache.h | 2 +-
1940 arch/sparc/include/asm/elf_32.h | 7 +
1941 arch/sparc/include/asm/elf_64.h | 7 +
1942 arch/sparc/include/asm/pgalloc_32.h | 1 +
1943 arch/sparc/include/asm/pgalloc_64.h | 1 +
1944 arch/sparc/include/asm/pgtable.h | 4 +
1945 arch/sparc/include/asm/pgtable_32.h | 15 +-
1946 arch/sparc/include/asm/pgtsrmmu.h | 5 +
1947 arch/sparc/include/asm/setup.h | 4 +-
1948 arch/sparc/include/asm/spinlock_64.h | 35 +-
1949 arch/sparc/include/asm/thread_info_32.h | 1 +
1950 arch/sparc/include/asm/thread_info_64.h | 2 +
1951 arch/sparc/include/asm/uaccess.h | 1 +
1952 arch/sparc/include/asm/uaccess_32.h | 28 +-
1953 arch/sparc/include/asm/uaccess_64.h | 24 +-
1954 arch/sparc/kernel/Makefile | 2 +-
1955 arch/sparc/kernel/prom_common.c | 2 +-
1956 arch/sparc/kernel/smp_64.c | 8 +-
1957 arch/sparc/kernel/sys_sparc_32.c | 2 +-
1958 arch/sparc/kernel/sys_sparc_64.c | 58 +-
1959 arch/sparc/kernel/traps_64.c | 27 +-
1960 arch/sparc/lib/Makefile | 2 +-
1961 arch/sparc/lib/atomic_64.S | 57 +-
1962 arch/sparc/lib/ksyms.c | 6 +-
1963 arch/sparc/mm/Makefile | 2 +-
1964 arch/sparc/mm/fault_32.c | 292 +
1965 arch/sparc/mm/fault_64.c | 486 +
1966 arch/sparc/mm/hugetlbpage.c | 30 +-
1967 arch/sparc/mm/init_64.c | 10 +-
1968 arch/tile/include/asm/atomic_64.h | 10 +
1969 arch/tile/include/asm/uaccess.h | 4 +-
1970 arch/um/Makefile | 4 +
1971 arch/um/include/asm/kmap_types.h | 2 +-
1972 arch/um/include/asm/page.h | 3 +
1973 arch/um/include/asm/pgtable-3level.h | 1 +
1974 arch/um/kernel/process.c | 16 -
1975 arch/x86/Kconfig | 26 +-
1976 arch/x86/Kconfig.cpu | 6 +-
1977 arch/x86/Kconfig.debug | 4 +-
1978 arch/x86/Makefile | 13 +-
1979 arch/x86/boot/Makefile | 3 +
1980 arch/x86/boot/bitops.h | 4 +-
1981 arch/x86/boot/boot.h | 2 +-
1982 arch/x86/boot/compressed/Makefile | 20 +
1983 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
1984 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
1985 arch/x86/boot/compressed/head_32.S | 4 +-
1986 arch/x86/boot/compressed/head_64.S | 12 +-
1987 arch/x86/boot/compressed/misc.c | 11 +-
1988 arch/x86/boot/cpucheck.c | 16 +-
1989 arch/x86/boot/header.S | 6 +-
1990 arch/x86/boot/memory.c | 2 +-
1991 arch/x86/boot/video-vesa.c | 1 +
1992 arch/x86/boot/video.c | 2 +-
1993 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
1994 arch/x86/crypto/aesni-intel_asm.S | 110 +-
1995 arch/x86/crypto/aesni-intel_glue.c | 4 +-
1996 arch/x86/crypto/blowfish-x86_64-asm_64.S | 11 +-
1997 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 22 +-
1998 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 22 +-
1999 arch/x86/crypto/camellia-x86_64-asm_64.S | 11 +-
2000 arch/x86/crypto/camellia_aesni_avx2_glue.c | 18 +-
2001 arch/x86/crypto/camellia_aesni_avx_glue.c | 18 +-
2002 arch/x86/crypto/camellia_glue.c | 8 +-
2003 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 55 +-
2004 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 37 +-
2005 arch/x86/crypto/cast6_avx_glue.c | 16 +-
2006 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
2007 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
2008 arch/x86/crypto/glue_helper.c | 2 +-
2009 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
2010 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 21 +-
2011 arch/x86/crypto/serpent-avx2-asm_64.S | 21 +-
2012 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
2013 arch/x86/crypto/serpent_avx2_glue.c | 14 +-
2014 arch/x86/crypto/serpent_avx_glue.c | 18 +-
2015 arch/x86/crypto/serpent_sse2_glue.c | 4 +-
2016 arch/x86/crypto/sha1_ssse3_asm.S | 13 +-
2017 arch/x86/crypto/sha1_ssse3_glue.c | 56 +-
2018 arch/x86/crypto/sha256-avx-asm.S | 5 +-
2019 arch/x86/crypto/sha256-avx2-asm.S | 5 +-
2020 arch/x86/crypto/sha256-ssse3-asm.S | 6 +-
2021 arch/x86/crypto/sha256_ssse3_glue.c | 26 +-
2022 arch/x86/crypto/sha512-avx-asm.S | 5 +-
2023 arch/x86/crypto/sha512-avx2-asm.S | 5 +-
2024 arch/x86/crypto/sha512-ssse3-asm.S | 5 +-
2025 arch/x86/crypto/sha512_ssse3_glue.c | 22 +-
2026 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 37 +-
2027 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
2028 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 6 +-
2029 arch/x86/crypto/twofish-x86_64-asm_64.S | 7 +-
2030 arch/x86/crypto/twofish_avx_glue.c | 21 +-
2031 arch/x86/crypto/twofish_glue.c | 4 +-
2032 arch/x86/crypto/twofish_glue_3way.c | 12 +-
2033 arch/x86/entry/Makefile | 2 +
2034 arch/x86/entry/calling.h | 86 +-
2035 arch/x86/entry/common.c | 70 +-
2036 arch/x86/entry/entry_32.S | 311 +-
2037 arch/x86/entry/entry_64.S | 629 +-
2038 arch/x86/entry/entry_64_compat.S | 115 +-
2039 arch/x86/entry/thunk_64.S | 2 +
2040 arch/x86/entry/vdso/Makefile | 5 +-
2041 arch/x86/entry/vdso/vclock_gettime.c | 2 +-
2042 arch/x86/entry/vdso/vdso2c.h | 8 +-
2043 arch/x86/entry/vdso/vma.c | 37 +-
2044 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
2045 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
2046 arch/x86/ia32/ia32_signal.c | 23 +-
2047 arch/x86/ia32/sys_ia32.c | 42 +-
2048 arch/x86/include/asm/alternative-asm.h | 51 +-
2049 arch/x86/include/asm/alternative.h | 4 +-
2050 arch/x86/include/asm/apic.h | 2 +-
2051 arch/x86/include/asm/apm.h | 4 +-
2052 arch/x86/include/asm/atomic.h | 230 +-
2053 arch/x86/include/asm/atomic64_32.h | 100 +
2054 arch/x86/include/asm/atomic64_64.h | 164 +-
2055 arch/x86/include/asm/bitops.h | 18 +-
2056 arch/x86/include/asm/boot.h | 2 +-
2057 arch/x86/include/asm/cache.h | 5 +-
2058 arch/x86/include/asm/checksum_32.h | 12 +-
2059 arch/x86/include/asm/cmpxchg.h | 39 +
2060 arch/x86/include/asm/compat.h | 4 +
2061 arch/x86/include/asm/cpufeature.h | 16 +-
2062 arch/x86/include/asm/crypto/camellia.h | 30 +-
2063 arch/x86/include/asm/crypto/glue_helper.h | 10 +-
2064 arch/x86/include/asm/crypto/serpent-avx.h | 18 +-
2065 arch/x86/include/asm/crypto/serpent-sse2.h | 8 +-
2066 arch/x86/include/asm/crypto/twofish.h | 10 +-
2067 arch/x86/include/asm/desc.h | 78 +-
2068 arch/x86/include/asm/desc_defs.h | 6 +
2069 arch/x86/include/asm/div64.h | 2 +-
2070 arch/x86/include/asm/dma.h | 2 +
2071 arch/x86/include/asm/elf.h | 33 +-
2072 arch/x86/include/asm/emergency-restart.h | 2 +-
2073 arch/x86/include/asm/fpu/internal.h | 38 +-
2074 arch/x86/include/asm/fpu/types.h | 5 +-
2075 arch/x86/include/asm/futex.h | 14 +-
2076 arch/x86/include/asm/hw_irq.h | 4 +-
2077 arch/x86/include/asm/hypervisor.h | 2 +-
2078 arch/x86/include/asm/i8259.h | 2 +-
2079 arch/x86/include/asm/io.h | 22 +-
2080 arch/x86/include/asm/irqflags.h | 5 +
2081 arch/x86/include/asm/kprobes.h | 9 +-
2082 arch/x86/include/asm/kvm_emulate.h | 7 +-
2083 arch/x86/include/asm/local.h | 106 +-
2084 arch/x86/include/asm/mman.h | 15 +
2085 arch/x86/include/asm/mmu.h | 14 +-
2086 arch/x86/include/asm/mmu_context.h | 133 +-
2087 arch/x86/include/asm/module.h | 23 +-
2088 arch/x86/include/asm/nmi.h | 19 +-
2089 arch/x86/include/asm/page.h | 1 +
2090 arch/x86/include/asm/page_32.h | 12 +-
2091 arch/x86/include/asm/page_64.h | 14 +-
2092 arch/x86/include/asm/paravirt.h | 46 +-
2093 arch/x86/include/asm/paravirt_types.h | 13 +-
2094 arch/x86/include/asm/pgalloc.h | 23 +
2095 arch/x86/include/asm/pgtable-2level.h | 2 +
2096 arch/x86/include/asm/pgtable-3level.h | 7 +
2097 arch/x86/include/asm/pgtable.h | 126 +-
2098 arch/x86/include/asm/pgtable_32.h | 14 +-
2099 arch/x86/include/asm/pgtable_32_types.h | 24 +-
2100 arch/x86/include/asm/pgtable_64.h | 23 +-
2101 arch/x86/include/asm/pgtable_64_types.h | 5 +
2102 arch/x86/include/asm/pgtable_types.h | 27 +-
2103 arch/x86/include/asm/pmem.h | 2 +-
2104 arch/x86/include/asm/preempt.h | 2 +-
2105 arch/x86/include/asm/processor.h | 57 +-
2106 arch/x86/include/asm/ptrace.h | 15 +-
2107 arch/x86/include/asm/realmode.h | 4 +-
2108 arch/x86/include/asm/reboot.h | 10 +-
2109 arch/x86/include/asm/rmwcc.h | 84 +-
2110 arch/x86/include/asm/rwsem.h | 60 +-
2111 arch/x86/include/asm/segment.h | 27 +-
2112 arch/x86/include/asm/smap.h | 43 +
2113 arch/x86/include/asm/smp.h | 14 +-
2114 arch/x86/include/asm/stackprotector.h | 4 +-
2115 arch/x86/include/asm/stacktrace.h | 34 +-
2116 arch/x86/include/asm/switch_to.h | 4 +-
2117 arch/x86/include/asm/sys_ia32.h | 6 +-
2118 arch/x86/include/asm/thread_info.h | 27 +-
2119 arch/x86/include/asm/tlbflush.h | 77 +-
2120 arch/x86/include/asm/traps.h | 4 +-
2121 arch/x86/include/asm/uaccess.h | 210 +-
2122 arch/x86/include/asm/uaccess_32.h | 28 +-
2123 arch/x86/include/asm/uaccess_64.h | 169 +-
2124 arch/x86/include/asm/word-at-a-time.h | 2 +-
2125 arch/x86/include/asm/x86_init.h | 10 +-
2126 arch/x86/include/asm/xen/page.h | 2 +-
2127 arch/x86/include/uapi/asm/e820.h | 2 +-
2128 arch/x86/kernel/Makefile | 2 +-
2129 arch/x86/kernel/acpi/boot.c | 4 +-
2130 arch/x86/kernel/acpi/sleep.c | 4 +
2131 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
2132 arch/x86/kernel/alternative.c | 124 +-
2133 arch/x86/kernel/apic/apic.c | 4 +-
2134 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
2135 arch/x86/kernel/apic/apic_noop.c | 2 +-
2136 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
2137 arch/x86/kernel/apic/io_apic.c | 10 +-
2138 arch/x86/kernel/apic/msi.c | 2 +-
2139 arch/x86/kernel/apic/probe_32.c | 4 +-
2140 arch/x86/kernel/apic/vector.c | 2 +
2141 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
2142 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
2143 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
2144 arch/x86/kernel/apm_32.c | 21 +-
2145 arch/x86/kernel/asm-offsets.c | 20 +
2146 arch/x86/kernel/asm-offsets_64.c | 1 +
2147 arch/x86/kernel/cpu/Makefile | 4 -
2148 arch/x86/kernel/cpu/amd.c | 2 +-
2149 arch/x86/kernel/cpu/bugs_64.c | 2 +
2150 arch/x86/kernel/cpu/common.c | 202 +-
2151 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
2152 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
2153 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
2154 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
2155 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
2156 arch/x86/kernel/cpu/mshyperv.c | 2 +-
2157 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2158 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
2159 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
2160 arch/x86/kernel/cpu/perf_event.c | 10 +-
2161 arch/x86/kernel/cpu/perf_event.h | 2 +-
2162 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 8 +-
2163 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
2164 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
2165 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
2166 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
2167 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
2168 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
2169 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 8 +-
2170 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 6 +-
2171 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 14 +-
2172 arch/x86/kernel/cpu/vmware.c | 2 +-
2173 arch/x86/kernel/crash_dump_64.c | 2 +-
2174 arch/x86/kernel/doublefault.c | 8 +-
2175 arch/x86/kernel/dumpstack.c | 24 +-
2176 arch/x86/kernel/dumpstack_32.c | 25 +-
2177 arch/x86/kernel/dumpstack_64.c | 72 +-
2178 arch/x86/kernel/e820.c | 4 +-
2179 arch/x86/kernel/early_printk.c | 1 +
2180 arch/x86/kernel/espfix_64.c | 44 +-
2181 arch/x86/kernel/fpu/core.c | 24 +-
2182 arch/x86/kernel/fpu/init.c | 49 +-
2183 arch/x86/kernel/fpu/regset.c | 22 +-
2184 arch/x86/kernel/fpu/signal.c | 20 +-
2185 arch/x86/kernel/fpu/xstate.c | 6 +-
2186 arch/x86/kernel/ftrace.c | 18 +-
2187 arch/x86/kernel/head64.c | 14 +-
2188 arch/x86/kernel/head_32.S | 237 +-
2189 arch/x86/kernel/head_64.S | 173 +-
2190 arch/x86/kernel/i386_ksyms_32.c | 12 +
2191 arch/x86/kernel/i8259.c | 10 +-
2192 arch/x86/kernel/io_delay.c | 2 +-
2193 arch/x86/kernel/ioport.c | 2 +-
2194 arch/x86/kernel/irq.c | 8 +-
2195 arch/x86/kernel/irq_32.c | 45 +-
2196 arch/x86/kernel/jump_label.c | 10 +-
2197 arch/x86/kernel/kgdb.c | 21 +-
2198 arch/x86/kernel/kprobes/core.c | 28 +-
2199 arch/x86/kernel/kprobes/opt.c | 16 +-
2200 arch/x86/kernel/ksysfs.c | 2 +-
2201 arch/x86/kernel/kvm.c | 2 +-
2202 arch/x86/kernel/kvmclock.c | 20 +-
2203 arch/x86/kernel/ldt.c | 25 +
2204 arch/x86/kernel/livepatch.c | 9 +-
2205 arch/x86/kernel/machine_kexec_32.c | 6 +-
2206 arch/x86/kernel/mcount_64.S | 21 +-
2207 arch/x86/kernel/module.c | 78 +-
2208 arch/x86/kernel/msr.c | 2 +-
2209 arch/x86/kernel/nmi.c | 34 +-
2210 arch/x86/kernel/nmi_selftest.c | 4 +-
2211 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
2212 arch/x86/kernel/paravirt.c | 43 +-
2213 arch/x86/kernel/paravirt_patch_64.c | 8 +
2214 arch/x86/kernel/pci-calgary_64.c | 2 +-
2215 arch/x86/kernel/pci-iommu_table.c | 2 +-
2216 arch/x86/kernel/pci-swiotlb.c | 2 +-
2217 arch/x86/kernel/process.c | 80 +-
2218 arch/x86/kernel/process_32.c | 29 +-
2219 arch/x86/kernel/process_64.c | 14 +-
2220 arch/x86/kernel/ptrace.c | 20 +-
2221 arch/x86/kernel/pvclock.c | 8 +-
2222 arch/x86/kernel/reboot.c | 44 +-
2223 arch/x86/kernel/reboot_fixups_32.c | 2 +-
2224 arch/x86/kernel/relocate_kernel_64.S | 3 +-
2225 arch/x86/kernel/setup.c | 29 +-
2226 arch/x86/kernel/setup_percpu.c | 29 +-
2227 arch/x86/kernel/signal.c | 17 +-
2228 arch/x86/kernel/smp.c | 2 +-
2229 arch/x86/kernel/smpboot.c | 29 +-
2230 arch/x86/kernel/step.c | 6 +-
2231 arch/x86/kernel/sys_i386_32.c | 184 +
2232 arch/x86/kernel/sys_x86_64.c | 28 +-
2233 arch/x86/kernel/tboot.c | 22 +-
2234 arch/x86/kernel/time.c | 8 +-
2235 arch/x86/kernel/tls.c | 7 +-
2236 arch/x86/kernel/tracepoint.c | 4 +-
2237 arch/x86/kernel/traps.c | 64 +-
2238 arch/x86/kernel/tsc.c | 2 +-
2239 arch/x86/kernel/uprobes.c | 4 +-
2240 arch/x86/kernel/vm86_32.c | 6 +-
2241 arch/x86/kernel/vmlinux.lds.S | 153 +-
2242 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
2243 arch/x86/kernel/x86_init.c | 6 +-
2244 arch/x86/kvm/cpuid.c | 21 +-
2245 arch/x86/kvm/emulate.c | 20 +-
2246 arch/x86/kvm/i8259.c | 10 +-
2247 arch/x86/kvm/ioapic.c | 2 +
2248 arch/x86/kvm/lapic.c | 2 +-
2249 arch/x86/kvm/paging_tmpl.h | 2 +-
2250 arch/x86/kvm/svm.c | 10 +-
2251 arch/x86/kvm/vmx.c | 60 +-
2252 arch/x86/kvm/x86.c | 44 +-
2253 arch/x86/lguest/boot.c | 3 +-
2254 arch/x86/lib/atomic64_386_32.S | 164 +
2255 arch/x86/lib/atomic64_cx8_32.S | 98 +-
2256 arch/x86/lib/checksum_32.S | 99 +-
2257 arch/x86/lib/clear_page_64.S | 3 +
2258 arch/x86/lib/cmpxchg16b_emu.S | 3 +
2259 arch/x86/lib/copy_page_64.S | 14 +-
2260 arch/x86/lib/copy_user_64.S | 66 +-
2261 arch/x86/lib/csum-copy_64.S | 14 +-
2262 arch/x86/lib/csum-wrappers_64.c | 8 +-
2263 arch/x86/lib/getuser.S | 74 +-
2264 arch/x86/lib/insn.c | 8 +-
2265 arch/x86/lib/iomap_copy_64.S | 2 +
2266 arch/x86/lib/memcpy_64.S | 6 +
2267 arch/x86/lib/memmove_64.S | 3 +-
2268 arch/x86/lib/memset_64.S | 3 +
2269 arch/x86/lib/mmx_32.c | 243 +-
2270 arch/x86/lib/msr-reg.S | 2 +
2271 arch/x86/lib/putuser.S | 87 +-
2272 arch/x86/lib/rwsem.S | 6 +-
2273 arch/x86/lib/usercopy_32.c | 359 +-
2274 arch/x86/lib/usercopy_64.c | 22 +-
2275 arch/x86/math-emu/fpu_aux.c | 2 +-
2276 arch/x86/math-emu/fpu_entry.c | 4 +-
2277 arch/x86/math-emu/fpu_system.h | 2 +-
2278 arch/x86/mm/Makefile | 4 +
2279 arch/x86/mm/extable.c | 26 +-
2280 arch/x86/mm/fault.c | 570 +-
2281 arch/x86/mm/gup.c | 6 +-
2282 arch/x86/mm/highmem_32.c | 6 +
2283 arch/x86/mm/hugetlbpage.c | 24 +-
2284 arch/x86/mm/init.c | 111 +-
2285 arch/x86/mm/init_32.c | 111 +-
2286 arch/x86/mm/init_64.c | 46 +-
2287 arch/x86/mm/iomap_32.c | 4 +
2288 arch/x86/mm/ioremap.c | 52 +-
2289 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
2290 arch/x86/mm/mmap.c | 40 +-
2291 arch/x86/mm/mmio-mod.c | 10 +-
2292 arch/x86/mm/mpx.c | 6 +-
2293 arch/x86/mm/numa.c | 2 +-
2294 arch/x86/mm/pageattr.c | 42 +-
2295 arch/x86/mm/pat.c | 12 +-
2296 arch/x86/mm/pat_rbtree.c | 2 +-
2297 arch/x86/mm/pf_in.c | 10 +-
2298 arch/x86/mm/pgtable.c | 209 +-
2299 arch/x86/mm/pgtable_32.c | 3 +
2300 arch/x86/mm/setup_nx.c | 7 +
2301 arch/x86/mm/tlb.c | 4 +
2302 arch/x86/mm/uderef_64.c | 37 +
2303 arch/x86/net/bpf_jit.S | 11 +
2304 arch/x86/net/bpf_jit_comp.c | 13 +-
2305 arch/x86/oprofile/backtrace.c | 6 +-
2306 arch/x86/oprofile/nmi_int.c | 10 +-
2307 arch/x86/oprofile/op_model_amd.c | 8 +-
2308 arch/x86/oprofile/op_model_ppro.c | 7 +-
2309 arch/x86/oprofile/op_x86_model.h | 2 +-
2310 arch/x86/pci/intel_mid_pci.c | 2 +-
2311 arch/x86/pci/irq.c | 8 +-
2312 arch/x86/pci/pcbios.c | 112 +-
2313 arch/x86/pci/vmd.c | 4 +-
2314 arch/x86/platform/efi/efi_32.c | 24 +
2315 arch/x86/platform/efi/efi_64.c | 26 +-
2316 arch/x86/platform/efi/efi_stub_32.S | 64 +-
2317 arch/x86/platform/efi/efi_stub_64.S | 2 +
2318 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
2319 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
2320 arch/x86/platform/intel-mid/mfld.c | 4 +-
2321 arch/x86/platform/intel-mid/mrfl.c | 2 +-
2322 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
2323 arch/x86/platform/olpc/olpc_dt.c | 2 +-
2324 arch/x86/power/cpu.c | 11 +-
2325 arch/x86/realmode/init.c | 10 +-
2326 arch/x86/realmode/rm/Makefile | 3 +
2327 arch/x86/realmode/rm/header.S | 4 +-
2328 arch/x86/realmode/rm/reboot.S | 4 +
2329 arch/x86/realmode/rm/trampoline_32.S | 12 +-
2330 arch/x86/realmode/rm/trampoline_64.S | 3 +-
2331 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
2332 arch/x86/tools/Makefile | 2 +-
2333 arch/x86/tools/relocs.c | 97 +-
2334 arch/x86/um/mem_32.c | 2 +-
2335 arch/x86/um/tls_32.c | 2 +-
2336 arch/x86/xen/enlighten.c | 52 +-
2337 arch/x86/xen/mmu.c | 19 +-
2338 arch/x86/xen/smp.c | 16 +-
2339 arch/x86/xen/xen-asm_32.S | 2 +-
2340 arch/x86/xen/xen-head.S | 11 +
2341 arch/x86/xen/xen-ops.h | 2 -
2342 block/bio.c | 4 +-
2343 block/blk-cgroup.c | 18 +-
2344 block/blk-map.c | 2 +-
2345 block/blk-softirq.c | 2 +-
2346 block/bsg.c | 12 +-
2347 block/cfq-iosched.c | 4 +-
2348 block/compat_ioctl.c | 4 +-
2349 block/genhd.c | 9 +-
2350 block/partitions/efi.c | 8 +-
2351 block/scsi_ioctl.c | 29 +-
2352 crypto/cast6_generic.c | 6 +-
2353 crypto/cryptd.c | 4 +-
2354 crypto/crypto_user.c | 2 +-
2355 crypto/pcrypt.c | 2 +-
2356 crypto/salsa20_generic.c | 16 +-
2357 crypto/serpent_generic.c | 6 +-
2358 crypto/zlib.c | 12 +-
2359 drivers/acpi/ac.c | 2 +-
2360 drivers/acpi/acpi_video.c | 2 +-
2361 drivers/acpi/apei/apei-internal.h | 2 +-
2362 drivers/acpi/apei/ghes.c | 10 +-
2363 drivers/acpi/battery.c | 2 +-
2364 drivers/acpi/bgrt.c | 6 +-
2365 drivers/acpi/blacklist.c | 4 +-
2366 drivers/acpi/bus.c | 4 +-
2367 drivers/acpi/device_pm.c | 4 +-
2368 drivers/acpi/ec.c | 6 +-
2369 drivers/acpi/pci_slot.c | 2 +-
2370 drivers/acpi/processor_idle.c | 2 +-
2371 drivers/acpi/processor_pdc.c | 2 +-
2372 drivers/acpi/sleep.c | 2 +-
2373 drivers/acpi/sysfs.c | 14 +-
2374 drivers/acpi/thermal.c | 2 +-
2375 drivers/acpi/video_detect.c | 7 +-
2376 drivers/android/binder.c | 2 +-
2377 drivers/ata/libata-core.c | 12 +-
2378 drivers/ata/libata-scsi.c | 2 +-
2379 drivers/ata/libata.h | 2 +-
2380 drivers/ata/pata_arasan_cf.c | 4 +-
2381 drivers/atm/adummy.c | 2 +-
2382 drivers/atm/ambassador.c | 8 +-
2383 drivers/atm/atmtcp.c | 14 +-
2384 drivers/atm/eni.c | 10 +-
2385 drivers/atm/firestream.c | 8 +-
2386 drivers/atm/fore200e.c | 14 +-
2387 drivers/atm/he.c | 18 +-
2388 drivers/atm/horizon.c | 4 +-
2389 drivers/atm/idt77252.c | 36 +-
2390 drivers/atm/iphase.c | 34 +-
2391 drivers/atm/lanai.c | 12 +-
2392 drivers/atm/nicstar.c | 46 +-
2393 drivers/atm/solos-pci.c | 4 +-
2394 drivers/atm/suni.c | 4 +-
2395 drivers/atm/uPD98402.c | 16 +-
2396 drivers/atm/zatm.c | 6 +-
2397 drivers/base/bus.c | 4 +-
2398 drivers/base/devres.c | 4 +-
2399 drivers/base/devtmpfs.c | 8 +-
2400 drivers/base/node.c | 2 +-
2401 drivers/base/platform-msi.c | 20 +-
2402 drivers/base/power/domain.c | 6 +-
2403 drivers/base/power/runtime.c | 61 +-
2404 drivers/base/power/sysfs.c | 2 +-
2405 drivers/base/power/wakeup.c | 8 +-
2406 drivers/base/regmap/regmap-debugfs.c | 4 +-
2407 drivers/base/regmap/regmap.c | 4 +-
2408 drivers/base/syscore.c | 4 +-
2409 drivers/block/cciss.c | 28 +-
2410 drivers/block/cciss.h | 2 +-
2411 drivers/block/cpqarray.c | 28 +-
2412 drivers/block/cpqarray.h | 2 +-
2413 drivers/block/drbd/drbd_bitmap.c | 2 +-
2414 drivers/block/drbd/drbd_int.h | 8 +-
2415 drivers/block/drbd/drbd_main.c | 12 +-
2416 drivers/block/drbd/drbd_nl.c | 16 +-
2417 drivers/block/drbd/drbd_receiver.c | 38 +-
2418 drivers/block/drbd/drbd_state.c | 12 +-
2419 drivers/block/drbd/drbd_state.h | 2 +-
2420 drivers/block/drbd/drbd_state_change.h | 8 +-
2421 drivers/block/drbd/drbd_worker.c | 14 +-
2422 drivers/block/floppy.c | 8 +-
2423 drivers/block/pktcdvd.c | 4 +-
2424 drivers/block/rbd.c | 2 +-
2425 drivers/bluetooth/btwilink.c | 2 +-
2426 drivers/bus/arm-cci.c | 12 +-
2427 drivers/cdrom/cdrom.c | 11 +-
2428 drivers/cdrom/gdrom.c | 1 -
2429 drivers/char/agp/compat_ioctl.c | 2 +-
2430 drivers/char/agp/frontend.c | 4 +-
2431 drivers/char/agp/intel-gtt.c | 4 +-
2432 drivers/char/hpet.c | 2 +-
2433 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
2434 drivers/char/ipmi/ipmi_poweroff.c | 2 +-
2435 drivers/char/ipmi/ipmi_si_intf.c | 12 +-
2436 drivers/char/ipmi/ipmi_ssif.c | 12 +-
2437 drivers/char/mem.c | 47 +-
2438 drivers/char/nvram.c | 2 +-
2439 drivers/char/pcmcia/synclink_cs.c | 16 +-
2440 drivers/char/random.c | 12 +-
2441 drivers/char/sonypi.c | 11 +-
2442 drivers/char/tpm/tpm_acpi.c | 3 +-
2443 drivers/char/tpm/tpm_eventlog.c | 5 +-
2444 drivers/char/virtio_console.c | 6 +-
2445 drivers/clk/clk-composite.c | 2 +-
2446 drivers/clk/samsung/clk.h | 2 +-
2447 drivers/clk/socfpga/clk-gate.c | 9 +-
2448 drivers/clk/socfpga/clk-pll.c | 9 +-
2449 drivers/clk/ti/clk.c | 8 +-
2450 drivers/cpufreq/acpi-cpufreq.c | 17 +-
2451 drivers/cpufreq/cpufreq-dt.c | 4 +-
2452 drivers/cpufreq/cpufreq.c | 27 +-
2453 drivers/cpufreq/cpufreq_governor.c | 2 +-
2454 drivers/cpufreq/cpufreq_governor.h | 10 +-
2455 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
2456 drivers/cpufreq/intel_pstate.c | 54 +-
2457 drivers/cpufreq/p4-clockmod.c | 12 +-
2458 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
2459 drivers/cpufreq/speedstep-centrino.c | 7 +-
2460 drivers/cpuidle/driver.c | 2 +-
2461 drivers/cpuidle/dt_idle_states.c | 2 +-
2462 drivers/cpuidle/governor.c | 2 +-
2463 drivers/cpuidle/governors/ladder.c | 13 +-
2464 drivers/cpuidle/sysfs.c | 2 +-
2465 drivers/crypto/hifn_795x.c | 4 +-
2466 drivers/crypto/qat/qat_common/adf_aer.c | 2 +-
2467 drivers/crypto/qat/qat_common/adf_sriov.c | 4 +-
2468 drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +-
2469 drivers/devfreq/devfreq.c | 4 +-
2470 drivers/dma/sh/shdma-base.c | 4 +-
2471 drivers/dma/sh/shdmac.c | 2 +-
2472 drivers/edac/edac_device.c | 4 +-
2473 drivers/edac/edac_device_sysfs.c | 2 +-
2474 drivers/edac/edac_mc_sysfs.c | 4 +-
2475 drivers/edac/edac_module.c | 2 +-
2476 drivers/edac/edac_pci.c | 4 +-
2477 drivers/edac/edac_pci_sysfs.c | 22 +-
2478 drivers/edac/mce_amd.h | 2 +-
2479 drivers/firewire/core-card.c | 6 +-
2480 drivers/firewire/core-cdev.c | 4 +-
2481 drivers/firewire/core-device.c | 2 +-
2482 drivers/firewire/core-iso.c | 2 +-
2483 drivers/firewire/core-transaction.c | 1 +
2484 drivers/firewire/core.h | 1 +
2485 drivers/firmware/dmi-id.c | 9 +-
2486 drivers/firmware/dmi_scan.c | 12 +-
2487 drivers/firmware/efi/cper.c | 8 +-
2488 drivers/firmware/efi/efi.c | 12 +-
2489 drivers/firmware/efi/efivars.c | 2 +-
2490 drivers/firmware/efi/runtime-map.c | 2 +-
2491 drivers/firmware/google/gsmi.c | 2 +-
2492 drivers/firmware/google/memconsole.c | 7 +-
2493 drivers/firmware/memmap.c | 2 +-
2494 drivers/firmware/psci.c | 2 +-
2495 drivers/gpio/gpio-davinci.c | 6 +-
2496 drivers/gpio/gpio-em.c | 2 +-
2497 drivers/gpio/gpio-ich.c | 2 +-
2498 drivers/gpio/gpio-omap.c | 4 +-
2499 drivers/gpio/gpio-rcar.c | 2 +-
2500 drivers/gpio/gpio-vr41xx.c | 2 +-
2501 drivers/gpio/gpiolib.c | 12 +-
2502 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +-
2503 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 2 +-
2504 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 8 +-
2505 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
2506 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
2507 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
2508 drivers/gpu/drm/amd/amdgpu/fiji_smc.c | 4 +-
2509 drivers/gpu/drm/amd/amdgpu/iceland_smc.c | 4 +-
2510 drivers/gpu/drm/amd/amdgpu/tonga_smc.c | 4 +-
2511 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
2512 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
2513 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
2514 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
2515 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
2516 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
2517 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
2518 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
2519 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
2520 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
2521 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
2522 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
2523 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
2524 drivers/gpu/drm/armada/armada_drv.c | 3 +-
2525 drivers/gpu/drm/ast/ast_mode.c | 2 +-
2526 drivers/gpu/drm/bochs/bochs_kms.c | 2 +-
2527 drivers/gpu/drm/drm_atomic.c | 7 +-
2528 drivers/gpu/drm/drm_crtc.c | 10 +-
2529 drivers/gpu/drm/drm_drv.c | 2 +-
2530 drivers/gpu/drm/drm_fops.c | 12 +-
2531 drivers/gpu/drm/drm_global.c | 14 +-
2532 drivers/gpu/drm/drm_info.c | 13 +-
2533 drivers/gpu/drm/drm_ioc32.c | 13 +-
2534 drivers/gpu/drm/drm_ioctl.c | 2 +-
2535 drivers/gpu/drm/drm_irq.c | 7 +-
2536 drivers/gpu/drm/drm_pci.c | 9 +-
2537 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
2538 drivers/gpu/drm/exynos/exynos_drm_g2d.c | 7 +-
2539 drivers/gpu/drm/gma500/cdv_intel_crt.c | 2 +-
2540 drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +-
2541 drivers/gpu/drm/gma500/cdv_intel_hdmi.c | 2 +-
2542 drivers/gpu/drm/gma500/cdv_intel_lvds.c | 2 +-
2543 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 8 +-
2544 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
2545 drivers/gpu/drm/gma500/psb_drv.c | 1 -
2546 drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
2547 drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
2548 drivers/gpu/drm/gma500/psb_intel_sdvo.c | 2 +-
2549 drivers/gpu/drm/i2c/tda998x_drv.c | 2 +-
2550 drivers/gpu/drm/i810/i810_dma.c | 2 +-
2551 drivers/gpu/drm/i810/i810_drv.c | 6 +-
2552 drivers/gpu/drm/i810/i810_drv.h | 6 +-
2553 drivers/gpu/drm/i915/dvo.h | 2 +-
2554 drivers/gpu/drm/i915/i915_dma.c | 4 +-
2555 drivers/gpu/drm/i915/i915_drv.c | 7 +-
2556 drivers/gpu/drm/i915/i915_drv.h | 2 +-
2557 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
2558 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
2559 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
2560 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
2561 drivers/gpu/drm/i915/i915_irq.c | 88 +-
2562 drivers/gpu/drm/i915/intel_display.c | 26 +-
2563 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
2564 drivers/gpu/drm/mga/mga_drv.c | 5 +-
2565 drivers/gpu/drm/mga/mga_drv.h | 6 +-
2566 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
2567 drivers/gpu/drm/mga/mga_irq.c | 8 +-
2568 drivers/gpu/drm/mga/mga_state.c | 2 +-
2569 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 +-
2570 drivers/gpu/drm/nouveau/nouveau_acpi.c | 2 +-
2571 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
2572 drivers/gpu/drm/nouveau/nouveau_connector.c | 2 +-
2573 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
2574 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
2575 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
2576 drivers/gpu/drm/nouveau/nouveau_usif.c | 7 +-
2577 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
2578 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 7 +-
2579 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 7 +-
2580 drivers/gpu/drm/omapdrm/Makefile | 2 +-
2581 drivers/gpu/drm/omapdrm/dss/display.c | 8 +-
2582 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
2583 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
2584 drivers/gpu/drm/qxl/qxl_display.c | 2 +-
2585 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
2586 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
2587 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
2588 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
2589 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
2590 drivers/gpu/drm/r128/r128_cce.c | 2 +-
2591 drivers/gpu/drm/r128/r128_drv.c | 4 +-
2592 drivers/gpu/drm/r128/r128_drv.h | 6 +-
2593 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
2594 drivers/gpu/drm/r128/r128_irq.c | 4 +-
2595 drivers/gpu/drm/r128/r128_state.c | 6 +-
2596 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
2597 drivers/gpu/drm/radeon/radeon_atpx_handler.c | 2 +-
2598 drivers/gpu/drm/radeon/radeon_connectors.c | 10 +-
2599 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
2600 drivers/gpu/drm/radeon/radeon_drv.c | 11 +-
2601 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
2602 drivers/gpu/drm/radeon/radeon_kms.c | 8 +-
2603 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
2604 drivers/gpu/drm/savage/savage_bci.c | 2 +-
2605 drivers/gpu/drm/savage/savage_drv.c | 5 +-
2606 drivers/gpu/drm/savage/savage_drv.h | 2 +-
2607 drivers/gpu/drm/sis/sis_drv.c | 5 +-
2608 drivers/gpu/drm/sis/sis_drv.h | 2 +-
2609 drivers/gpu/drm/sis/sis_mm.c | 2 +-
2610 drivers/gpu/drm/tegra/dc.c | 2 +-
2611 drivers/gpu/drm/tegra/dsi.c | 2 +-
2612 drivers/gpu/drm/tegra/hdmi.c | 2 +-
2613 drivers/gpu/drm/tegra/sor.c | 7 +-
2614 drivers/gpu/drm/tilcdc/Makefile | 6 +-
2615 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
2616 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
2617 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
2618 drivers/gpu/drm/udl/udl_connector.c | 2 +-
2619 drivers/gpu/drm/udl/udl_fb.c | 1 -
2620 drivers/gpu/drm/vc4/vc4_drv.c | 8 +-
2621 drivers/gpu/drm/via/via_dma.c | 2 +-
2622 drivers/gpu/drm/via/via_drv.c | 5 +-
2623 drivers/gpu/drm/via/via_drv.h | 6 +-
2624 drivers/gpu/drm/via/via_irq.c | 18 +-
2625 drivers/gpu/drm/virtio/virtgpu_display.c | 2 +-
2626 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
2627 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 7 +-
2628 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
2629 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
2630 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
2631 drivers/gpu/vga/vga_switcheroo.c | 4 +-
2632 drivers/hid/hid-core.c | 4 +-
2633 drivers/hid/hid-magicmouse.c | 2 +-
2634 drivers/hid/hid-sensor-custom.c | 2 +-
2635 drivers/hv/channel.c | 6 +-
2636 drivers/hv/hv.c | 4 +-
2637 drivers/hv/hv_balloon.c | 18 +-
2638 drivers/hv/hyperv_vmbus.h | 2 +-
2639 drivers/hwmon/acpi_power_meter.c | 6 +-
2640 drivers/hwmon/applesmc.c | 2 +-
2641 drivers/hwmon/asus_atk0110.c | 10 +-
2642 drivers/hwmon/coretemp.c | 2 +-
2643 drivers/hwmon/dell-smm-hwmon.c | 2 +-
2644 drivers/hwmon/ibmaem.c | 2 +-
2645 drivers/hwmon/iio_hwmon.c | 2 +-
2646 drivers/hwmon/nct6683.c | 6 +-
2647 drivers/hwmon/nct6775.c | 6 +-
2648 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
2649 drivers/hwmon/sht15.c | 12 +-
2650 drivers/hwmon/via-cputemp.c | 2 +-
2651 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
2652 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
2653 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
2654 drivers/i2c/i2c-dev.c | 2 +-
2655 drivers/ide/ide-cd.c | 2 +-
2656 drivers/ide/ide-disk.c | 2 +-
2657 drivers/ide/ide.c | 4 +-
2658 drivers/idle/intel_idle.c | 6 +-
2659 drivers/iio/industrialio-core.c | 2 +-
2660 drivers/iio/magnetometer/ak8975.c | 2 +-
2661 drivers/infiniband/core/cm.c | 46 +-
2662 drivers/infiniband/core/fmr_pool.c | 20 +-
2663 drivers/infiniband/core/netlink.c | 5 +-
2664 drivers/infiniband/core/ucm.c | 4 +-
2665 drivers/infiniband/core/uverbs_cmd.c | 3 +
2666 drivers/infiniband/hw/cxgb4/device.c | 6 +-
2667 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
2668 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
2669 drivers/infiniband/hw/mlx4/mad.c | 2 +-
2670 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
2671 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
2672 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
2673 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
2674 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
2675 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
2676 drivers/infiniband/hw/nes/nes.c | 4 +-
2677 drivers/infiniband/hw/nes/nes.h | 40 +-
2678 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
2679 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
2680 drivers/infiniband/hw/nes/nes_nic.c | 42 +-
2681 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
2682 drivers/infiniband/hw/qib/qib.h | 1 +
2683 drivers/infiniband/hw/qib/qib_iba7322.c | 4 +-
2684 drivers/infiniband/hw/qib/qib_pcie.c | 2 +-
2685 drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
2686 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
2687 drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
2688 drivers/input/evdev.c | 2 +-
2689 drivers/input/gameport/gameport.c | 4 +-
2690 drivers/input/input.c | 4 +-
2691 drivers/input/joystick/sidewinder.c | 1 +
2692 drivers/input/misc/ims-pcu.c | 4 +-
2693 drivers/input/mouse/psmouse.h | 2 +-
2694 drivers/input/mousedev.c | 2 +-
2695 drivers/input/serio/serio.c | 4 +-
2696 drivers/input/serio/serio_raw.c | 4 +-
2697 drivers/input/touchscreen/htcpen.c | 2 +-
2698 drivers/iommu/arm-smmu-v3.c | 2 +-
2699 drivers/iommu/arm-smmu.c | 42 +-
2700 drivers/iommu/io-pgtable-arm.c | 98 +-
2701 drivers/iommu/io-pgtable.c | 11 +-
2702 drivers/iommu/io-pgtable.h | 21 +-
2703 drivers/iommu/iommu.c | 2 +-
2704 drivers/iommu/ipmmu-vmsa.c | 13 +-
2705 drivers/iommu/irq_remapping.c | 2 +-
2706 drivers/irqchip/irq-gic.c | 2 +-
2707 drivers/irqchip/irq-i8259.c | 2 +-
2708 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
2709 drivers/irqchip/irq-ts4800.c | 2 +-
2710 drivers/isdn/capi/capi.c | 10 +-
2711 drivers/isdn/gigaset/interface.c | 8 +-
2712 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
2713 drivers/isdn/hardware/avm/b1.c | 4 +-
2714 drivers/isdn/hardware/eicon/capifunc.c | 6 +-
2715 drivers/isdn/hardware/eicon/dadapter.c | 18 +-
2716 drivers/isdn/hardware/eicon/diddfunc.c | 7 +-
2717 drivers/isdn/hardware/eicon/divasfunc.c | 9 +-
2718 drivers/isdn/hardware/eicon/divasync.h | 2 +-
2719 drivers/isdn/hardware/eicon/idifunc.c | 9 +-
2720 drivers/isdn/hardware/eicon/mntfunc.c | 13 +-
2721 drivers/isdn/hardware/mISDN/avmfritz.c | 2 +-
2722 drivers/isdn/hardware/mISDN/hfcmulti.c | 7 +-
2723 drivers/isdn/hardware/mISDN/hfcpci.c | 16 +-
2724 drivers/isdn/hardware/mISDN/mISDNinfineon.c | 7 +-
2725 drivers/isdn/hardware/mISDN/mISDNipac.c | 5 +-
2726 drivers/isdn/hardware/mISDN/netjet.c | 2 +-
2727 drivers/isdn/hardware/mISDN/speedfax.c | 7 +-
2728 drivers/isdn/hardware/mISDN/w6692.c | 7 +-
2729 drivers/isdn/hisax/amd7930_fn.c | 5 +-
2730 drivers/isdn/hisax/arcofi.c | 5 +-
2731 drivers/isdn/hisax/diva.c | 7 +-
2732 drivers/isdn/hisax/elsa.c | 9 +-
2733 drivers/isdn/hisax/fsm.c | 5 +-
2734 drivers/isdn/hisax/hfc4s8s_l1.c | 14 +-
2735 drivers/isdn/hisax/hfc_pci.c | 10 +-
2736 drivers/isdn/hisax/hfc_sx.c | 10 +-
2737 drivers/isdn/hisax/hfc_usb.c | 12 +-
2738 drivers/isdn/hisax/icc.c | 5 +-
2739 drivers/isdn/hisax/ipacx.c | 7 +-
2740 drivers/isdn/hisax/isac.c | 5 +-
2741 drivers/isdn/hisax/isar.c | 5 +-
2742 drivers/isdn/hisax/isdnl3.c | 5 +-
2743 drivers/isdn/hisax/w6692.c | 5 +-
2744 drivers/isdn/i4l/isdn_common.c | 2 +
2745 drivers/isdn/i4l/isdn_tty.c | 22 +-
2746 drivers/isdn/icn/icn.c | 2 +-
2747 drivers/isdn/mISDN/dsp.h | 4 +-
2748 drivers/isdn/mISDN/dsp_cmx.c | 4 +-
2749 drivers/isdn/mISDN/dsp_core.c | 4 +-
2750 drivers/isdn/mISDN/dsp_tones.c | 4 +-
2751 drivers/isdn/mISDN/fsm.c | 5 +-
2752 drivers/isdn/mISDN/l1oip_core.c | 8 +-
2753 drivers/lguest/core.c | 9 +-
2754 drivers/lguest/page_tables.c | 2 +-
2755 drivers/lguest/x86/core.c | 12 +-
2756 drivers/lguest/x86/switcher_32.S | 27 +-
2757 drivers/lightnvm/rrpc.c | 4 +-
2758 drivers/lightnvm/rrpc.h | 2 +-
2759 drivers/md/bcache/alloc.c | 2 +-
2760 drivers/md/bcache/bcache.h | 10 +-
2761 drivers/md/bcache/btree.c | 2 +-
2762 drivers/md/bcache/closure.h | 2 +-
2763 drivers/md/bcache/io.c | 10 +-
2764 drivers/md/bcache/journal.c | 2 +-
2765 drivers/md/bcache/stats.c | 26 +-
2766 drivers/md/bcache/stats.h | 16 +-
2767 drivers/md/bcache/super.c | 2 +-
2768 drivers/md/bcache/sysfs.c | 20 +-
2769 drivers/md/bitmap.c | 2 +-
2770 drivers/md/dm-cache-target.c | 116 +-
2771 drivers/md/dm-ioctl.c | 2 +-
2772 drivers/md/dm-raid.c | 2 +-
2773 drivers/md/dm-raid1.c | 18 +-
2774 drivers/md/dm-stats.c | 6 +-
2775 drivers/md/dm-stripe.c | 10 +-
2776 drivers/md/dm-table.c | 2 +-
2777 drivers/md/dm-thin-metadata.c | 4 +-
2778 drivers/md/dm.c | 28 +-
2779 drivers/md/md.c | 41 +-
2780 drivers/md/md.h | 8 +-
2781 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
2782 drivers/md/persistent-data/dm-space-map.h | 1 +
2783 drivers/md/raid1.c | 8 +-
2784 drivers/md/raid10.c | 20 +-
2785 drivers/md/raid5.c | 26 +-
2786 drivers/media/dvb-core/dvb_net.c | 2 +-
2787 drivers/media/dvb-core/dvbdev.c | 2 +-
2788 drivers/media/dvb-frontends/af9033.h | 2 +-
2789 drivers/media/dvb-frontends/cx24116.c | 2 +-
2790 drivers/media/dvb-frontends/cx24117.c | 2 +-
2791 drivers/media/dvb-frontends/cx24120.c | 2 +-
2792 drivers/media/dvb-frontends/cx24123.c | 2 +-
2793 drivers/media/dvb-frontends/cxd2820r_core.c | 2 +-
2794 drivers/media/dvb-frontends/dib3000.h | 2 +-
2795 drivers/media/dvb-frontends/dib7000p.h | 2 +-
2796 drivers/media/dvb-frontends/dib8000.h | 2 +-
2797 drivers/media/dvb-frontends/hd29l2.c | 2 +-
2798 drivers/media/dvb-frontends/lgdt3306a.c | 2 +-
2799 drivers/media/dvb-frontends/mt312.c | 6 +-
2800 drivers/media/dvb-frontends/s921.c | 2 +-
2801 drivers/media/pci/bt8xx/dst.c | 2 +-
2802 drivers/media/pci/cx88/cx88-video.c | 6 +-
2803 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
2804 drivers/media/pci/pt1/va1j5jf8007s.c | 2 +-
2805 drivers/media/pci/pt1/va1j5jf8007t.c | 2 +-
2806 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
2807 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
2808 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
2809 drivers/media/pci/tw68/tw68-core.c | 2 +-
2810 drivers/media/pci/zoran/zoran.h | 1 -
2811 drivers/media/pci/zoran/zoran_card.c | 4 +-
2812 drivers/media/pci/zoran/zoran_driver.c | 3 -
2813 drivers/media/platform/omap/omap_vout.c | 11 +-
2814 drivers/media/platform/s5p-tv/mixer.h | 2 +-
2815 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
2816 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
2817 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
2818 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
2819 drivers/media/platform/soc_camera/soc_camera.c | 2 +-
2820 drivers/media/radio/radio-cadet.c | 2 +
2821 drivers/media/radio/radio-maxiradio.c | 2 +-
2822 drivers/media/radio/radio-shark.c | 2 +-
2823 drivers/media/radio/radio-shark2.c | 2 +-
2824 drivers/media/radio/radio-si476x.c | 2 +-
2825 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
2826 drivers/media/usb/pvrusb2/pvrusb2-context.c | 8 +-
2827 drivers/media/usb/pvrusb2/pvrusb2-dvb.c | 7 +-
2828 drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 +-
2829 drivers/media/usb/pvrusb2/pvrusb2-std.c | 2 +-
2830 drivers/media/usb/pvrusb2/pvrusb2-v4l2.c | 6 +-
2831 drivers/media/usb/uvc/uvc_driver.c | 4 +-
2832 drivers/media/v4l2-core/v4l2-common.c | 2 +-
2833 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
2834 drivers/media/v4l2-core/v4l2-device.c | 4 +-
2835 drivers/media/v4l2-core/v4l2-ioctl.c | 293 +-
2836 drivers/memory/omap-gpmc.c | 21 +-
2837 drivers/message/fusion/mptbase.c | 4 +-
2838 drivers/message/fusion/mptlan.c | 2 +-
2839 drivers/message/fusion/mptsas.c | 34 +-
2840 drivers/mfd/ab8500-debugfs.c | 2 +-
2841 drivers/mfd/kempld-core.c | 2 +-
2842 drivers/mfd/max8925-i2c.c | 2 +-
2843 drivers/mfd/tps65910.c | 2 +-
2844 drivers/mfd/twl4030-irq.c | 9 +-
2845 drivers/misc/c2port/core.c | 4 +-
2846 drivers/misc/kgdbts.c | 6 +-
2847 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
2848 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
2849 drivers/misc/mic/scif/scif_api.c | 10 +-
2850 drivers/misc/mic/scif/scif_rb.c | 8 +-
2851 drivers/misc/sgi-gru/gruhandles.c | 4 +-
2852 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
2853 drivers/misc/sgi-gru/grutables.h | 158 +-
2854 drivers/misc/sgi-xp/xp.h | 2 +-
2855 drivers/misc/sgi-xp/xp_main.c | 57 +-
2856 drivers/misc/sgi-xp/xpc.h | 3 +-
2857 drivers/misc/sgi-xp/xpc_main.c | 2 +-
2858 drivers/misc/sgi-xp/xpnet.c | 2 +-
2859 drivers/misc/ti-st/st_kim.c | 32 +-
2860 drivers/mmc/card/mmc_test.c | 4 +-
2861 drivers/mmc/host/dw_mmc.h | 2 +-
2862 drivers/mmc/host/mmci.c | 4 +-
2863 drivers/mmc/host/omap_hsmmc.c | 4 +-
2864 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
2865 drivers/mmc/host/sdhci-s3c.c | 8 +-
2866 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
2867 drivers/mtd/devices/block2mtd.c | 2 +-
2868 drivers/mtd/devices/phram.c | 2 +-
2869 drivers/mtd/maps/gpio-addr-flash.c | 2 +-
2870 drivers/mtd/maps/latch-addr-flash.c | 2 +-
2871 drivers/mtd/maps/pci.c | 4 +-
2872 drivers/mtd/maps/pcmciamtd.c | 8 +-
2873 drivers/mtd/maps/sbc_gxx.c | 2 +-
2874 drivers/mtd/nand/cafe_nand.c | 18 +-
2875 drivers/mtd/nand/denali.c | 1 +
2876 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
2877 drivers/mtd/nftlmount.c | 1 +
2878 drivers/mtd/sm_ftl.c | 2 +-
2879 drivers/mtd/ubi/build.c | 2 +-
2880 drivers/net/bonding/bond_netlink.c | 2 +-
2881 drivers/net/caif/caif_hsi.c | 4 +-
2882 drivers/net/caif/caif_serial.c | 2 +-
2883 drivers/net/caif/caif_spi.c | 2 +-
2884 drivers/net/caif/caif_virtio.c | 2 +-
2885 drivers/net/can/Kconfig | 2 +-
2886 drivers/net/can/dev.c | 2 +-
2887 drivers/net/can/janz-ican3.c | 2 +-
2888 drivers/net/can/led.c | 2 +-
2889 drivers/net/can/sun4i_can.c | 2 +-
2890 drivers/net/can/vcan.c | 2 +-
2891 drivers/net/can/xilinx_can.c | 2 +-
2892 drivers/net/dummy.c | 2 +-
2893 drivers/net/ethernet/8390/ax88796.c | 4 +-
2894 drivers/net/ethernet/8390/axnet_cs.c | 4 +-
2895 drivers/net/ethernet/8390/ne2k-pci.c | 6 +-
2896 drivers/net/ethernet/8390/pcnet_cs.c | 4 +-
2897 drivers/net/ethernet/altera/altera_tse_main.c | 6 +-
2898 drivers/net/ethernet/amd/amd8111e.c | 5 +-
2899 drivers/net/ethernet/amd/pcnet32.c | 7 +-
2900 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
2901 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
2902 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
2903 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
2904 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 66 +-
2905 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
2906 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
2907 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
2908 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
2909 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
2910 drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
2911 drivers/net/ethernet/arc/emac_main.c | 2 +-
2912 drivers/net/ethernet/atheros/alx/main.c | 2 +-
2913 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
2914 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
2915 drivers/net/ethernet/aurora/nb8800.c | 2 +-
2916 drivers/net/ethernet/broadcom/bnx2.c | 2 +-
2917 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
2918 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 216 +-
2919 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 4 +-
2920 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
2921 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
2922 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
2923 drivers/net/ethernet/broadcom/tg3.c | 2 +-
2924 drivers/net/ethernet/broadcom/tg3.h | 1 +
2925 drivers/net/ethernet/brocade/bna/bfa_cs.h | 42 +-
2926 drivers/net/ethernet/brocade/bna/bfa_ioc.c | 10 +-
2927 drivers/net/ethernet/brocade/bna/bfa_ioc.h | 4 +-
2928 drivers/net/ethernet/brocade/bna/bfa_msgq.h | 8 +-
2929 drivers/net/ethernet/brocade/bna/bna_enet.c | 6 +-
2930 drivers/net/ethernet/brocade/bna/bna_tx_rx.c | 6 +-
2931 drivers/net/ethernet/brocade/bna/bna_types.h | 24 +-
2932 drivers/net/ethernet/brocade/bna/bnad.c | 11 +-
2933 drivers/net/ethernet/cadence/macb.c | 4 +-
2934 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
2935 drivers/net/ethernet/cavium/liquidio/lio_main.c | 15 +-
2936 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
2937 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
2938 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
2939 drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 2 +-
2940 drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 2 +-
2941 drivers/net/ethernet/dec/tulip/de4x5.c | 13 +-
2942 drivers/net/ethernet/emulex/benet/be_main.c | 4 +-
2943 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
2944 drivers/net/ethernet/faraday/ftmac100.c | 2 +
2945 drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
2946 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +-
2947 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 6 +-
2948 drivers/net/ethernet/intel/e100.c | 2 +-
2949 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
2950 drivers/net/ethernet/intel/e1000e/netdev.c | 2 +-
2951 drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 2 +-
2952 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
2953 drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
2954 drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
2955 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
2956 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
2957 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +-
2958 drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
2959 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
2960 drivers/net/ethernet/mellanox/mlx4/main.c | 2 +-
2961 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +-
2962 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
2963 drivers/net/ethernet/micrel/ks8851_mll.c | 2 +-
2964 drivers/net/ethernet/neterion/s2io.c | 2 +-
2965 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
2966 drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
2967 .../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
2968 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
2969 .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
2970 .../net/ethernet/qlogic/netxen/netxen_nic_main.c | 2 +-
2971 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
2972 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
2973 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 +-
2974 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
2975 drivers/net/ethernet/realtek/r8169.c | 8 +-
2976 drivers/net/ethernet/renesas/sh_eth.c | 2 +-
2977 drivers/net/ethernet/rocker/rocker.c | 4 +-
2978 drivers/net/ethernet/sfc/ptp.c | 2 +-
2979 drivers/net/ethernet/sfc/selftest.c | 20 +-
2980 drivers/net/ethernet/smsc/smsc911x.c | 2 +-
2981 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
2982 drivers/net/ethernet/synopsys/dwc_eth_qos.c | 2 +-
2983 drivers/net/ethernet/via/via-rhine.c | 2 +-
2984 drivers/net/ethernet/wiznet/w5100.c | 2 +-
2985 drivers/net/ethernet/wiznet/w5300.c | 2 +-
2986 drivers/net/geneve.c | 2 +-
2987 drivers/net/hyperv/hyperv_net.h | 2 +-
2988 drivers/net/hyperv/netvsc_drv.c | 2 +-
2989 drivers/net/hyperv/rndis_filter.c | 7 +-
2990 drivers/net/ifb.c | 2 +-
2991 drivers/net/ipvlan/ipvlan_core.c | 2 +-
2992 drivers/net/ipvlan/ipvlan_main.c | 6 +-
2993 drivers/net/irda/sh_irda.c | 2 +-
2994 drivers/net/irda/vlsi_ir.c | 18 +-
2995 drivers/net/irda/vlsi_ir.h | 14 +-
2996 drivers/net/macvlan.c | 20 +-
2997 drivers/net/macvtap.c | 10 +-
2998 drivers/net/nlmon.c | 2 +-
2999 drivers/net/phy/phy_device.c | 6 +-
3000 drivers/net/plip/plip.c | 2 +-
3001 drivers/net/ppp/ppp_generic.c | 4 +-
3002 drivers/net/ppp/pptp.c | 1 +
3003 drivers/net/rionet.c | 2 +-
3004 drivers/net/slip/slhc.c | 2 +-
3005 drivers/net/team/team.c | 4 +-
3006 drivers/net/tun.c | 7 +-
3007 drivers/net/usb/hso.c | 28 +-
3008 drivers/net/usb/ipheth.c | 2 +-
3009 drivers/net/usb/r8152.c | 2 +-
3010 drivers/net/usb/sierra_net.c | 4 +-
3011 drivers/net/virtio_net.c | 2 +-
3012 drivers/net/vrf.c | 4 +-
3013 drivers/net/vxlan.c | 4 +-
3014 drivers/net/wimax/i2400m/rx.c | 2 +-
3015 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3016 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3017 drivers/net/wireless/ath/ath6kl/core.h | 2 +-
3018 drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
3019 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3020 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3021 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3022 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3023 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3024 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3025 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3026 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3027 drivers/net/wireless/ath/wil6210/pcie_bus.c | 2 +-
3028 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3029 drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
3030 drivers/net/wireless/atmel/atmel.c | 183 +-
3031 drivers/net/wireless/broadcom/b43/phy_lp.c | 2 +-
3032 drivers/net/wireless/broadcom/b43legacy/main.c | 5 +-
3033 .../broadcom/brcm80211/brcmsmac/phy/phy_cmn.c | 3 +-
3034 .../broadcom/brcm80211/brcmsmac/phy_shim.c | 5 +-
3035 .../broadcom/brcm80211/brcmsmac/phy_shim.h | 2 +-
3036 drivers/net/wireless/cisco/airo.c | 201 +-
3037 drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
3038 drivers/net/wireless/intel/ipw2x00/ipw2200.c | 6 +-
3039 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 11 +-
3040 drivers/net/wireless/intel/iwlegacy/4965-mac.c | 7 +-
3041 drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 34 +-
3042 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 4 +-
3043 drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 2 +-
3044 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +-
3045 .../net/wireless/intersil/hostap/hostap_ioctl.c | 134 +-
3046 drivers/net/wireless/intersil/orinoco/wext.c | 131 +-
3047 drivers/net/wireless/intersil/prism54/isl_ioctl.c | 292 +-
3048 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3049 drivers/net/wireless/marvell/mwifiex/main.c | 2 +-
3050 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 4 +-
3051 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 4 +-
3052 drivers/net/wireless/ralink/rt2x00/rt2500usb.c | 4 +-
3053 drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 6 +-
3054 drivers/net/wireless/ralink/rt2x00/rt2x00.h | 2 +-
3055 drivers/net/wireless/ralink/rt2x00/rt2x00queue.c | 4 +-
3056 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 4 +-
3057 drivers/net/wireless/ralink/rt2x00/rt73usb.c | 4 +-
3058 drivers/net/wireless/realtek/rtlwifi/base.c | 14 +-
3059 drivers/net/wireless/realtek/rtlwifi/base.h | 4 +-
3060 drivers/net/wireless/realtek/rtlwifi/pci.c | 15 +-
3061 drivers/net/wireless/realtek/rtlwifi/ps.c | 6 +-
3062 drivers/net/wireless/realtek/rtlwifi/ps.h | 6 +-
3063 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3064 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3065 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3066 drivers/net/wireless/zydas/zd1201.c | 192 +-
3067 drivers/nvme/host/pci.c | 2 +-
3068 drivers/of/fdt.c | 4 +-
3069 drivers/oprofile/buffer_sync.c | 8 +-
3070 drivers/oprofile/event_buffer.c | 2 +-
3071 drivers/oprofile/oprof.c | 2 +-
3072 drivers/oprofile/oprofile_stats.c | 10 +-
3073 drivers/oprofile/oprofile_stats.h | 10 +-
3074 drivers/oprofile/oprofilefs.c | 2 +-
3075 drivers/oprofile/timer_int.c | 2 +-
3076 drivers/parport/procfs.c | 4 +-
3077 drivers/pci/host/pci-host-generic.c | 2 +-
3078 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3079 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3080 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3081 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3082 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3083 drivers/pci/hotplug/pciehp_core.c | 2 +-
3084 drivers/pci/msi.c | 22 +-
3085 drivers/pci/pci-sysfs.c | 6 +-
3086 drivers/pci/pci.h | 4 +-
3087 drivers/pci/pcie/aspm.c | 10 +-
3088 drivers/pci/pcie/portdrv_pci.c | 2 +-
3089 drivers/pci/probe.c | 2 +-
3090 drivers/pci/setup-bus.c | 2 +-
3091 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3092 drivers/pinctrl/pinctrl-at91.c | 5 +-
3093 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3094 drivers/platform/x86/alienware-wmi.c | 4 +-
3095 drivers/platform/x86/apple-gmux.c | 2 +-
3096 drivers/platform/x86/compal-laptop.c | 2 +-
3097 drivers/platform/x86/hdaps.c | 2 +-
3098 drivers/platform/x86/ibm_rtl.c | 2 +-
3099 drivers/platform/x86/intel_oaktrail.c | 2 +-
3100 drivers/platform/x86/msi-laptop.c | 16 +-
3101 drivers/platform/x86/msi-wmi.c | 2 +-
3102 drivers/platform/x86/samsung-laptop.c | 2 +-
3103 drivers/platform/x86/samsung-q10.c | 2 +-
3104 drivers/platform/x86/sony-laptop.c | 14 +-
3105 drivers/platform/x86/thinkpad_acpi.c | 11 +-
3106 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3107 drivers/pnp/pnpbios/core.c | 2 +-
3108 drivers/power/pda_power.c | 7 +-
3109 drivers/power/power_supply.h | 4 +-
3110 drivers/power/power_supply_core.c | 7 +-
3111 drivers/power/power_supply_sysfs.c | 6 +-
3112 drivers/power/reset/at91-reset.c | 5 +-
3113 drivers/powercap/powercap_sys.c | 136 +-
3114 drivers/ptp/ptp_private.h | 2 +-
3115 drivers/ptp/ptp_sysfs.c | 2 +-
3116 drivers/regulator/core.c | 4 +-
3117 drivers/regulator/max8660.c | 6 +-
3118 drivers/regulator/max8973-regulator.c | 16 +-
3119 drivers/regulator/mc13892-regulator.c | 8 +-
3120 drivers/remoteproc/remoteproc_core.c | 26 +-
3121 drivers/rtc/rtc-armada38x.c | 7 +-
3122 drivers/rtc/rtc-cmos.c | 4 +-
3123 drivers/rtc/rtc-ds1307.c | 2 +-
3124 drivers/rtc/rtc-m48t59.c | 4 +-
3125 drivers/rtc/rtc-rv8803.c | 15 +-
3126 drivers/rtc/rtc-rx8010.c | 8 +-
3127 drivers/rtc/rtc-test.c | 6 +-
3128 drivers/scsi/aacraid/aachba.c | 11 +-
3129 drivers/scsi/aic7xxx/aic79xx.h | 2 +-
3130 drivers/scsi/aic7xxx/aic79xx_core.c | 11 +-
3131 drivers/scsi/be2iscsi/be_main.c | 2 +-
3132 drivers/scsi/bfa/bfa.h | 4 +-
3133 drivers/scsi/bfa/bfa_core.c | 4 +-
3134 drivers/scsi/bfa/bfa_cs.h | 124 +-
3135 drivers/scsi/bfa/bfa_fcpim.h | 14 +-
3136 drivers/scsi/bfa/bfa_fcs.h | 34 +-
3137 drivers/scsi/bfa/bfa_fcs_fcpim.c | 6 +-
3138 drivers/scsi/bfa/bfa_fcs_lport.c | 4 +-
3139 drivers/scsi/bfa/bfa_fcs_rport.c | 4 +-
3140 drivers/scsi/bfa/bfa_ioc.c | 8 +-
3141 drivers/scsi/bfa/bfa_ioc.h | 16 +-
3142 drivers/scsi/bfa/bfa_svc.c | 12 +-
3143 drivers/scsi/bfa/bfa_svc.h | 20 +-
3144 drivers/scsi/bfa/bfad.c | 12 +-
3145 drivers/scsi/bfa/bfad_bsg.c | 8 +-
3146 drivers/scsi/bfa/bfad_drv.h | 5 +-
3147 drivers/scsi/csiostor/csio_defs.h | 19 +-
3148 drivers/scsi/csiostor/csio_hw.c | 67 +-
3149 drivers/scsi/csiostor/csio_init.c | 2 +-
3150 drivers/scsi/csiostor/csio_lnode.c | 32 +-
3151 drivers/scsi/csiostor/csio_rnode.c | 28 +-
3152 drivers/scsi/csiostor/csio_scsi.c | 37 +-
3153 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3154 drivers/scsi/fcoe/fcoe_transport.c | 16 +-
3155 drivers/scsi/hosts.c | 4 +-
3156 drivers/scsi/hpsa.c | 38 +-
3157 drivers/scsi/hpsa.h | 2 +-
3158 drivers/scsi/hptiop.c | 2 -
3159 drivers/scsi/hptiop.h | 1 -
3160 drivers/scsi/ipr.c | 32 +-
3161 drivers/scsi/ipr.h | 2 +-
3162 drivers/scsi/libfc/fc_exch.c | 50 +-
3163 drivers/scsi/libsas/sas_ata.c | 2 +-
3164 drivers/scsi/lpfc/lpfc.h | 8 +-
3165 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3166 drivers/scsi/lpfc/lpfc_init.c | 8 +-
3167 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3168 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3169 drivers/scsi/mpt3sas/mpt3sas_base.c | 2 +-
3170 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
3171 drivers/scsi/pmcraid.c | 46 +-
3172 drivers/scsi/pmcraid.h | 8 +-
3173 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3174 drivers/scsi/qla2xxx/qla_gbl.h | 8 +-
3175 drivers/scsi/qla2xxx/qla_os.c | 15 +-
3176 drivers/scsi/qla2xxx/qla_target.c | 16 +-
3177 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3178 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3179 drivers/scsi/qla4xxx/ql4_os.c | 15 +-
3180 drivers/scsi/scsi.c | 2 +-
3181 drivers/scsi/scsi_lib.c | 8 +-
3182 drivers/scsi/scsi_sysfs.c | 2 +-
3183 drivers/scsi/scsi_transport_fc.c | 8 +-
3184 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3185 drivers/scsi/scsi_transport_spi.c | 2 +-
3186 drivers/scsi/scsi_transport_srp.c | 8 +-
3187 drivers/scsi/sd.c | 6 +-
3188 drivers/scsi/sg.c | 2 +-
3189 drivers/scsi/sr.c | 21 +-
3190 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3191 drivers/spi/spi.c | 2 +-
3192 drivers/staging/android/timed_output.c | 6 +-
3193 drivers/staging/comedi/comedi_fops.c | 8 +-
3194 drivers/staging/fbtft/fbtft-core.c | 2 +-
3195 drivers/staging/fbtft/fbtft.h | 2 +-
3196 drivers/staging/gdm724x/gdm_lte.c | 2 +-
3197 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3198 drivers/staging/gdm72xx/gdm_wimax.c | 2 +-
3199 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3200 drivers/staging/iio/adc/ad7280a.c | 4 +-
3201 .../staging/lustre/lnet/klnds/socklnd/socklnd.h | 6 +-
3202 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3203 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3204 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3205 .../lustre/lustre/include/lustre/lustre_idl.h | 92 +-
3206 drivers/staging/lustre/lustre/include/lustre_dlm.h | 8 +-
3207 drivers/staging/lustre/lustre/include/lustre_net.h | 2 +-
3208 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3209 drivers/staging/lustre/lustre/ldlm/ldlm_request.c | 5 +-
3210 drivers/staging/lustre/lustre/llite/dir.c | 2 +-
3211 drivers/staging/lustre/lustre/lov/lov_io.c | 62 +-
3212 drivers/staging/lustre/lustre/obdclass/llog_swab.c | 24 +-
3213 drivers/staging/lustre/lustre/osc/osc_request.c | 24 +-
3214 drivers/staging/lustre/lustre/ptlrpc/layout.c | 7 +-
3215 .../staging/lustre/lustre/ptlrpc/pack_generic.c | 151 +-
3216 drivers/staging/octeon/ethernet-rx.c | 24 +-
3217 drivers/staging/octeon/ethernet.c | 8 +-
3218 drivers/staging/panel/panel.c | 4 +-
3219 drivers/staging/rdma/hfi1/pcie.c | 2 +-
3220 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 18 +-
3221 drivers/staging/rtl8188eu/hal/rtl8188eu_recv.c | 2 +-
3222 drivers/staging/rtl8188eu/hal/rtl8188eu_xmit.c | 2 +-
3223 drivers/staging/rtl8188eu/include/Hal8188EPhyCfg.h | 8 -
3224 drivers/staging/rtl8188eu/include/hal_intf.h | 5 +-
3225 drivers/staging/rtl8188eu/include/odm_precomp.h | 2 +-
3226 drivers/staging/rtl8188eu/include/recv_osdep.h | 1 -
3227 drivers/staging/rtl8188eu/include/rtl8188e_recv.h | 2 +-
3228 drivers/staging/rtl8188eu/include/rtl8188e_xmit.h | 2 +-
3229 drivers/staging/rtl8188eu/include/rtw_cmd.h | 1 -
3230 drivers/staging/rtl8188eu/include/rtw_eeprom.h | 6 -
3231 drivers/staging/rtl8188eu/include/rtw_ioctl.h | 9 -
3232 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 12 +-
3233 drivers/staging/rtl8188eu/include/xmit_osdep.h | 2 +-
3234 drivers/staging/rtl8188eu/os_dep/usb_ops_linux.c | 4 +-
3235 drivers/staging/rtl8188eu/os_dep/xmit_linux.c | 2 +-
3236 drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 49 +-
3237 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 4 +-
3238 drivers/staging/rtl8192e/rtl8192e/rtl_dm.c | 10 +-
3239 drivers/staging/rtl8192e/rtl8192e/rtl_dm.h | 4 +-
3240 drivers/staging/rtl8192e/rtl8192e/rtl_ps.c | 6 +-
3241 drivers/staging/rtl8192e/rtl8192e/rtl_ps.h | 3 +-
3242 drivers/staging/rtl8192e/rtl8192e/rtl_wx.c | 48 +-
3243 drivers/staging/rtl8192e/rtllib.h | 4 +-
3244 drivers/staging/rtl8192e/rtllib_softmac.c | 32 +-
3245 drivers/staging/rtl8192e/rtllib_softmac_wx.c | 2 +-
3246 drivers/staging/rtl8192e/rtllib_tx.c | 2 +-
3247 drivers/staging/rtl8192u/ieee80211/ieee80211.h | 2 +-
3248 .../staging/rtl8192u/ieee80211/ieee80211_softmac.c | 6 +-
3249 drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c | 2 +-
3250 drivers/staging/rtl8192u/r8192U_core.c | 7 +-
3251 drivers/staging/rtl8712/rtl8712_recv.c | 6 +-
3252 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3253 drivers/staging/rtl8712/rtl871x_ioctl.h | 14 -
3254 drivers/staging/rtl8712/rtl871x_xmit.c | 2 +-
3255 drivers/staging/rtl8712/rtl871x_xmit.h | 2 +-
3256 drivers/staging/rtl8712/usb_ops_linux.c | 2 +-
3257 drivers/staging/rtl8712/xmit_linux.c | 2 +-
3258 drivers/staging/rtl8712/xmit_osdep.h | 2 +-
3259 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 +-
3260 drivers/staging/rtl8723au/core/rtw_xmit.c | 2 +-
3261 drivers/staging/rtl8723au/hal/rtl8723au_recv.c | 2 +-
3262 drivers/staging/rtl8723au/hal/usb_ops_linux.c | 4 +-
3263 drivers/staging/rtl8723au/include/Hal8723APhyCfg.h | 8 -
3264 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
3265 drivers/staging/rtl8723au/include/hal_intf.h | 2 -
3266 drivers/staging/rtl8723au/include/recv_osdep.h | 1 -
3267 drivers/staging/rtl8723au/include/rtw_ap.h | 2 -
3268 drivers/staging/rtl8723au/include/rtw_cmd.h | 1 -
3269 drivers/staging/rtl8723au/include/rtw_eeprom.h | 7 -
3270 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 14 +-
3271 drivers/staging/rtl8723au/include/usb_ops.h | 8 +-
3272 drivers/staging/rtl8723au/include/xmit_osdep.h | 2 +-
3273 drivers/staging/rtl8723au/os_dep/ioctl_cfg80211.c | 2 +-
3274 drivers/staging/rtl8723au/os_dep/xmit_linux.c | 2 +-
3275 drivers/staging/sm750fb/sm750.c | 14 +-
3276 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
3277 drivers/staging/unisys/visornic/visornic_main.c | 2 +-
3278 drivers/staging/wilc1000/linux_wlan.c | 2 +-
3279 drivers/staging/wilc1000/wilc_spi.c | 2 -
3280 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
3281 drivers/staging/wlan-ng/p80211netdev.c | 2 +-
3282 drivers/target/sbp/sbp_target.c | 4 +-
3283 drivers/thermal/cpu_cooling.c | 9 +-
3284 drivers/thermal/devfreq_cooling.c | 19 +-
3285 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
3286 drivers/thermal/of-thermal.c | 17 +-
3287 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
3288 drivers/tty/cyclades.c | 6 +-
3289 drivers/tty/hvc/hvc_console.c | 14 +-
3290 drivers/tty/hvc/hvcs.c | 21 +-
3291 drivers/tty/hvc/hvsi.c | 22 +-
3292 drivers/tty/hvc/hvsi_lib.c | 4 +-
3293 drivers/tty/ipwireless/tty.c | 27 +-
3294 drivers/tty/moxa.c | 2 +-
3295 drivers/tty/n_gsm.c | 6 +-
3296 drivers/tty/n_tty.c | 28 +-
3297 drivers/tty/pty.c | 4 +-
3298 drivers/tty/rocket.c | 6 +-
3299 drivers/tty/serial/8250/8250_core.c | 10 +-
3300 drivers/tty/serial/8250/8250_pci.c | 2 +-
3301 drivers/tty/serial/ifx6x60.c | 2 +-
3302 drivers/tty/serial/ioc4_serial.c | 6 +-
3303 drivers/tty/serial/jsm/jsm_driver.c | 2 +-
3304 drivers/tty/serial/kgdb_nmi.c | 4 +-
3305 drivers/tty/serial/kgdboc.c | 34 +-
3306 drivers/tty/serial/msm_serial.c | 4 +-
3307 drivers/tty/serial/samsung.c | 9 +-
3308 drivers/tty/serial/serial_core.c | 8 +-
3309 drivers/tty/synclink.c | 34 +-
3310 drivers/tty/synclink_gt.c | 28 +-
3311 drivers/tty/synclinkmp.c | 34 +-
3312 drivers/tty/tty_io.c | 2 +-
3313 drivers/tty/tty_ldisc.c | 8 +-
3314 drivers/tty/tty_port.c | 22 +-
3315 drivers/uio/uio.c | 13 +-
3316 drivers/usb/atm/cxacru.c | 2 +-
3317 drivers/usb/atm/usbatm.c | 24 +-
3318 drivers/usb/class/cdc-acm.h | 2 +-
3319 drivers/usb/core/devices.c | 6 +-
3320 drivers/usb/core/devio.c | 12 +-
3321 drivers/usb/core/hcd.c | 4 +-
3322 drivers/usb/core/sysfs.c | 2 +-
3323 drivers/usb/core/usb.c | 2 +-
3324 drivers/usb/early/ehci-dbgp.c | 16 +-
3325 drivers/usb/gadget/function/f_phonet.c | 2 +-
3326 drivers/usb/gadget/function/u_serial.c | 22 +-
3327 drivers/usb/gadget/legacy/inode.c | 4 +-
3328 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3329 drivers/usb/host/ehci-hcd.c | 2 +-
3330 drivers/usb/host/ehci-hub.c | 4 +-
3331 drivers/usb/host/ehci-q.c | 4 +-
3332 drivers/usb/host/fotg210-hcd.c | 2 +-
3333 drivers/usb/host/hwa-hc.c | 2 +-
3334 drivers/usb/host/ohci-hcd.c | 2 +-
3335 drivers/usb/host/r8a66597.h | 2 +-
3336 drivers/usb/host/uhci-hcd.c | 2 +-
3337 drivers/usb/host/xhci-pci.c | 2 +-
3338 drivers/usb/host/xhci.c | 2 +-
3339 drivers/usb/misc/appledisplay.c | 4 +-
3340 drivers/usb/misc/sisusbvga/sisusb_con.c | 98 +-
3341 drivers/usb/serial/console.c | 8 +-
3342 drivers/usb/storage/transport.c | 2 +-
3343 drivers/usb/storage/usb.c | 2 +-
3344 drivers/usb/storage/usb.h | 2 +-
3345 drivers/usb/usbip/vhci.h | 2 +-
3346 drivers/usb/usbip/vhci_hcd.c | 6 +-
3347 drivers/usb/usbip/vhci_rx.c | 2 +-
3348 drivers/usb/wusbcore/wa-hc.h | 4 +-
3349 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3350 drivers/vfio/pci/vfio_pci.c | 2 +-
3351 drivers/vhost/vringh.c | 20 +-
3352 drivers/video/backlight/kb3886_bl.c | 2 +-
3353 drivers/video/console/dummycon.c | 96 +-
3354 drivers/video/console/fbcon.c | 2 +-
3355 drivers/video/console/vgacon.c | 23 +-
3356 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3357 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3358 drivers/video/fbdev/aty/mach64_ct.c | 5 +-
3359 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3360 drivers/video/fbdev/aty/mach64_gx.c | 17 +-
3361 drivers/video/fbdev/core/fb_defio.c | 6 +-
3362 drivers/video/fbdev/core/fbmem.c | 12 +-
3363 drivers/video/fbdev/hyperv_fb.c | 4 +-
3364 drivers/video/fbdev/i810/i810_accel.c | 1 +
3365 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
3366 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3367 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3368 drivers/video/fbdev/omap2/omapfb/dss/display.c | 8 +-
3369 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
3370 drivers/video/fbdev/sis/sis_main.h | 2 +-
3371 drivers/video/fbdev/smscufx.c | 4 +-
3372 drivers/video/fbdev/udlfb.c | 36 +-
3373 drivers/video/fbdev/uvesafb.c | 52 +-
3374 drivers/video/fbdev/vesafb.c | 58 +-
3375 drivers/video/fbdev/via/via_clock.h | 2 +-
3376 drivers/xen/events/events_base.c | 6 +-
3377 drivers/xen/xen-pciback/pci_stub.c | 2 +-
3378 fs/9p/vfs_addr.c | 2 +-
3379 fs/9p/vfs_inode_dotl.c | 4 +-
3380 fs/Kconfig.binfmt | 2 +-
3381 fs/afs/file.c | 8 +-
3382 fs/afs/inode.c | 4 +-
3383 fs/afs/internal.h | 4 +-
3384 fs/aio.c | 2 +-
3385 fs/autofs4/waitq.c | 2 +-
3386 fs/befs/endian.h | 6 +-
3387 fs/binfmt_aout.c | 23 +-
3388 fs/binfmt_elf.c | 670 +-
3389 fs/binfmt_elf_fdpic.c | 4 +-
3390 fs/block_dev.c | 2 +-
3391 fs/btrfs/ctree.c | 11 +-
3392 fs/btrfs/ctree.h | 4 +-
3393 fs/btrfs/delayed-inode.c | 6 +-
3394 fs/btrfs/delayed-inode.h | 4 +-
3395 fs/btrfs/delayed-ref.c | 4 +-
3396 fs/btrfs/disk-io.c | 4 +-
3397 fs/btrfs/extent_map.c | 8 +-
3398 fs/btrfs/file.c | 4 +-
3399 fs/btrfs/free-space-cache.h | 1 +
3400 fs/btrfs/raid56.c | 30 +-
3401 fs/btrfs/super.c | 2 +-
3402 fs/btrfs/sysfs.c | 2 +-
3403 fs/btrfs/tests/btrfs-tests.c | 2 +-
3404 fs/btrfs/tests/free-space-tests.c | 2 +-
3405 fs/btrfs/transaction.c | 2 +-
3406 fs/btrfs/tree-log.c | 8 +-
3407 fs/btrfs/tree-log.h | 2 +-
3408 fs/btrfs/volumes.c | 14 +-
3409 fs/btrfs/volumes.h | 22 +-
3410 fs/buffer.c | 2 +-
3411 fs/cachefiles/bind.c | 6 +-
3412 fs/cachefiles/daemon.c | 8 +-
3413 fs/cachefiles/internal.h | 12 +-
3414 fs/cachefiles/namei.c | 2 +-
3415 fs/cachefiles/proc.c | 12 +-
3416 fs/ceph/dir.c | 12 +-
3417 fs/ceph/super.c | 4 +-
3418 fs/cifs/cifs_debug.c | 12 +-
3419 fs/cifs/cifsfs.c | 8 +-
3420 fs/cifs/cifsglob.h | 54 +-
3421 fs/cifs/file.c | 14 +-
3422 fs/cifs/misc.c | 4 +-
3423 fs/cifs/smb1ops.c | 80 +-
3424 fs/cifs/smb2ops.c | 84 +-
3425 fs/cifs/smb2pdu.c | 3 +-
3426 fs/coda/cache.c | 10 +-
3427 fs/coda/dir.c | 5 +-
3428 fs/compat.c | 9 +-
3429 fs/compat_binfmt_elf.c | 2 +
3430 fs/compat_ioctl.c | 12 +-
3431 fs/configfs/dir.c | 10 +-
3432 fs/coredump.c | 18 +-
3433 fs/dcache.c | 64 +-
3434 fs/ecryptfs/inode.c | 2 +-
3435 fs/ecryptfs/miscdev.c | 2 +-
3436 fs/exec.c | 365 +-
3437 fs/exofs/inode.c | 7 +-
3438 fs/ext2/xattr.c | 5 +-
3439 fs/ext4/ext4.h | 20 +-
3440 fs/ext4/mballoc.c | 44 +-
3441 fs/ext4/resize.c | 16 +-
3442 fs/ext4/super.c | 2 +-
3443 fs/ext4/sysfs.c | 2 +-
3444 fs/ext4/xattr.c | 5 +-
3445 fs/fhandle.c | 5 +-
3446 fs/file.c | 18 +-
3447 fs/freevxfs/vxfs_inode.c | 8 +-
3448 fs/freevxfs/vxfs_inode.h | 4 +-
3449 fs/fs-writeback.c | 11 +-
3450 fs/fs_struct.c | 8 +-
3451 fs/fscache/cookie.c | 40 +-
3452 fs/fscache/internal.h | 202 +-
3453 fs/fscache/object.c | 26 +-
3454 fs/fscache/operation.c | 38 +-
3455 fs/fscache/page.c | 110 +-
3456 fs/fscache/stats.c | 348 +-
3457 fs/fuse/cuse.c | 10 +-
3458 fs/fuse/dev.c | 4 +-
3459 fs/fuse/file.c | 4 +-
3460 fs/fuse/inode.c | 4 +-
3461 fs/gfs2/aops.c | 2 +-
3462 fs/gfs2/file.c | 2 +-
3463 fs/gfs2/glock.c | 22 +-
3464 fs/gfs2/glops.c | 4 +-
3465 fs/gfs2/quota.c | 6 +-
3466 fs/hugetlbfs/inode.c | 13 +-
3467 fs/inode.c | 4 +-
3468 fs/jbd2/commit.c | 2 +-
3469 fs/jbd2/transaction.c | 4 +-
3470 fs/jffs2/erase.c | 3 +-
3471 fs/jffs2/file.c | 3 +-
3472 fs/jffs2/fs.c | 2 +-
3473 fs/jffs2/os-linux.h | 2 +-
3474 fs/jffs2/wbuf.c | 3 +-
3475 fs/jfs/super.c | 2 +-
3476 fs/kernfs/dir.c | 2 +-
3477 fs/kernfs/file.c | 20 +-
3478 fs/libfs.c | 10 +-
3479 fs/lockd/clnt4xdr.c | 46 +-
3480 fs/lockd/clntproc.c | 4 +-
3481 fs/lockd/clntxdr.c | 44 +-
3482 fs/lockd/mon.c | 24 +-
3483 fs/lockd/svc.c | 2 +-
3484 fs/lockd/svc4proc.c | 69 +-
3485 fs/lockd/svcproc.c | 75 +-
3486 fs/lockd/xdr.c | 44 +-
3487 fs/lockd/xdr4.c | 41 +-
3488 fs/logfs/dev_bdev.c | 13 +-
3489 fs/logfs/dev_mtd.c | 13 +-
3490 fs/logfs/dir.c | 4 +-
3491 fs/logfs/logfs.h | 5 +-
3492 fs/logfs/readwrite.c | 2 +-
3493 fs/logfs/segment.c | 2 +-
3494 fs/logfs/super.c | 39 -
3495 fs/namei.c | 16 +-
3496 fs/namespace.c | 16 +-
3497 fs/nfs/callback.h | 18 +-
3498 fs/nfs/callback_proc.c | 26 +-
3499 fs/nfs/callback_xdr.c | 73 +-
3500 fs/nfs/dir.c | 5 +-
3501 fs/nfs/inode.c | 6 +-
3502 fs/nfs/internal.h | 5 +-
3503 fs/nfs/mount_clnt.c | 26 +-
3504 fs/nfs/nfs2xdr.c | 101 +-
3505 fs/nfs/nfs3xdr.c | 201 +-
3506 fs/nfs/nfs42xdr.c | 60 +-
3507 fs/nfs/nfs4xdr.c | 507 +-
3508 fs/nfs/read.c | 2 +-
3509 fs/nfs/symlink.c | 6 +-
3510 fs/nfsd/current_stateid.h | 24 +-
3511 fs/nfsd/nfs2acl.c | 85 +-
3512 fs/nfsd/nfs3acl.c | 44 +-
3513 fs/nfsd/nfs3proc.c | 271 +-
3514 fs/nfsd/nfs3xdr.c | 171 +-
3515 fs/nfsd/nfs4callback.c | 31 +-
3516 fs/nfsd/nfs4proc.c | 320 +-
3517 fs/nfsd/nfs4state.c | 111 +-
3518 fs/nfsd/nfs4xdr.c | 564 +-
3519 fs/nfsd/nfscache.c | 11 +-
3520 fs/nfsd/nfsproc.c | 193 +-
3521 fs/nfsd/nfsxdr.c | 96 +-
3522 fs/nfsd/vfs.c | 6 +-
3523 fs/nfsd/xdr.h | 50 +-
3524 fs/nfsd/xdr3.h | 100 +-
3525 fs/nfsd/xdr4.h | 50 +-
3526 fs/nls/nls_base.c | 26 +-
3527 fs/nls/nls_cp932.c | 2 +-
3528 fs/nls/nls_cp936.c | 2 +-
3529 fs/nls/nls_cp949.c | 2 +-
3530 fs/nls/nls_cp950.c | 2 +-
3531 fs/nls/nls_euc-jp.c | 8 +-
3532 fs/nls/nls_koi8-ru.c | 8 +-
3533 fs/notify/fanotify/fanotify_user.c | 4 +-
3534 fs/notify/notification.c | 4 +-
3535 fs/ntfs/dir.c | 4 +-
3536 fs/ntfs/inode.c | 19 +-
3537 fs/ntfs/inode.h | 4 +-
3538 fs/ntfs/mft.c | 4 +-
3539 fs/ntfs/super.c | 8 +-
3540 fs/ocfs2/dlm/dlmcommon.h | 4 +-
3541 fs/ocfs2/dlm/dlmdebug.c | 10 +-
3542 fs/ocfs2/dlm/dlmdomain.c | 4 +-
3543 fs/ocfs2/dlm/dlmmaster.c | 4 +-
3544 fs/ocfs2/dlmfs/dlmfs.c | 4 +-
3545 fs/ocfs2/localalloc.c | 2 +-
3546 fs/ocfs2/ocfs2.h | 10 +-
3547 fs/ocfs2/suballoc.c | 12 +-
3548 fs/ocfs2/super.c | 20 +-
3549 fs/overlayfs/copy_up.c | 2 +-
3550 fs/pipe.c | 72 +-
3551 fs/posix_acl.c | 4 +-
3552 fs/proc/array.c | 20 +
3553 fs/proc/base.c | 7 +-
3554 fs/proc/kcore.c | 36 +-
3555 fs/proc/meminfo.c | 2 +-
3556 fs/proc/nommu.c | 2 +-
3557 fs/proc/proc_sysctl.c | 26 +-
3558 fs/proc/task_mmu.c | 39 +-
3559 fs/proc/task_nommu.c | 6 +-
3560 fs/proc/vmcore.c | 16 +-
3561 fs/qnx6/qnx6.h | 4 +-
3562 fs/quota/netlink.c | 4 +-
3563 fs/read_write.c | 34 +-
3564 fs/readdir.c | 3 +-
3565 fs/reiserfs/do_balan.c | 2 +-
3566 fs/reiserfs/procfs.c | 2 +-
3567 fs/reiserfs/reiserfs.h | 4 +-
3568 fs/select.c | 2 +-
3569 fs/seq_file.c | 4 +-
3570 fs/splice.c | 43 +-
3571 fs/squashfs/xattr.c | 10 +-
3572 fs/super.c | 3 +-
3573 fs/sysv/sysv.h | 2 +-
3574 fs/tracefs/inode.c | 8 +-
3575 fs/ubifs/find.c | 34 +-
3576 fs/ubifs/lprops.c | 5 +-
3577 fs/udf/misc.c | 2 +-
3578 fs/ufs/swab.h | 4 +-
3579 fs/userfaultfd.c | 2 +-
3580 fs/xattr.c | 21 +
3581 fs/xfs/libxfs/xfs_bmap.c | 2 +-
3582 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
3583 fs/xfs/xfs_dir2_readdir.c | 7 +-
3584 fs/xfs/xfs_ioctl.c | 2 +-
3585 fs/xfs/xfs_linux.h | 4 +-
3586 include/acpi/ghes.h | 2 +-
3587 include/asm-generic/4level-fixup.h | 2 +
3588 include/asm-generic/atomic-long.h | 176 +-
3589 include/asm-generic/atomic64.h | 12 +
3590 include/asm-generic/bitops/__fls.h | 2 +-
3591 include/asm-generic/bitops/fls.h | 2 +-
3592 include/asm-generic/bitops/fls64.h | 4 +-
3593 include/asm-generic/bug.h | 6 +-
3594 include/asm-generic/cache.h | 4 +-
3595 include/asm-generic/emergency-restart.h | 2 +-
3596 include/asm-generic/kmap_types.h | 4 +-
3597 include/asm-generic/local.h | 13 +
3598 include/asm-generic/pgtable-nopmd.h | 18 +-
3599 include/asm-generic/pgtable-nopud.h | 15 +-
3600 include/asm-generic/pgtable.h | 16 +
3601 include/asm-generic/sections.h | 1 +
3602 include/asm-generic/uaccess.h | 16 +
3603 include/asm-generic/vmlinux.lds.h | 15 +-
3604 include/crypto/algapi.h | 2 +-
3605 include/crypto/cast6.h | 4 +-
3606 include/crypto/serpent.h | 4 +-
3607 include/crypto/xts.h | 2 +-
3608 include/drm/drmP.h | 19 +-
3609 include/drm/drm_mm.h | 2 +-
3610 include/drm/drm_modeset_helper_vtables.h | 2 +-
3611 include/drm/i915_pciids.h | 2 +-
3612 include/drm/intel-gtt.h | 4 +-
3613 include/drm/ttm/ttm_memory.h | 2 +-
3614 include/drm/ttm/ttm_page_alloc.h | 1 +
3615 include/keys/asymmetric-subtype.h | 2 +-
3616 include/keys/encrypted-type.h | 2 +-
3617 include/keys/rxrpc-type.h | 2 +-
3618 include/keys/user-type.h | 2 +-
3619 include/linux/atmdev.h | 4 +-
3620 include/linux/atomic.h | 12 +-
3621 include/linux/audit.h | 2 +-
3622 include/linux/average.h | 2 +-
3623 include/linux/binfmts.h | 3 +-
3624 include/linux/bitmap.h | 2 +-
3625 include/linux/bitops.h | 8 +-
3626 include/linux/blk-cgroup.h | 24 +-
3627 include/linux/blkdev.h | 2 +-
3628 include/linux/blktrace_api.h | 2 +-
3629 include/linux/cache.h | 8 +
3630 include/linux/cdrom.h | 1 -
3631 include/linux/cgroup-defs.h | 2 +-
3632 include/linux/cleancache.h | 2 +-
3633 include/linux/clk-provider.h | 1 +
3634 include/linux/compat.h | 15 +-
3635 include/linux/compiler-gcc.h | 30 +-
3636 include/linux/compiler.h | 193 +-
3637 include/linux/configfs.h | 2 +-
3638 include/linux/cpufreq.h | 7 +-
3639 include/linux/cpuidle.h | 5 +-
3640 include/linux/cpumask.h | 14 +-
3641 include/linux/crypto.h | 4 +-
3642 include/linux/ctype.h | 2 +-
3643 include/linux/dcache.h | 4 +-
3644 include/linux/decompress/mm.h | 2 +-
3645 include/linux/devfreq.h | 2 +-
3646 include/linux/device.h | 7 +-
3647 include/linux/dma-mapping.h | 2 +-
3648 include/linux/efi.h | 1 +
3649 include/linux/elf.h | 2 +
3650 include/linux/err.h | 4 +-
3651 include/linux/extcon.h | 2 +-
3652 include/linux/fb.h | 3 +-
3653 include/linux/fdtable.h | 2 +-
3654 include/linux/firewire.h | 2 +-
3655 include/linux/fs.h | 5 +-
3656 include/linux/fs_struct.h | 2 +-
3657 include/linux/fscache-cache.h | 2 +-
3658 include/linux/fscache.h | 2 +-
3659 include/linux/fsnotify.h | 2 +-
3660 include/linux/genhd.h | 4 +-
3661 include/linux/genl_magic_func.h | 2 +-
3662 include/linux/genl_magic_struct.h | 4 +-
3663 include/linux/gfp.h | 14 +-
3664 include/linux/highmem.h | 12 +
3665 include/linux/hugetlb.h | 2 +-
3666 include/linux/hugetlb_cgroup.h | 11 +
3667 include/linux/hwmon-sysfs.h | 6 +-
3668 include/linux/i2c.h | 1 +
3669 include/linux/if_pppox.h | 2 +-
3670 include/linux/init.h | 12 +-
3671 include/linux/init_task.h | 7 +
3672 include/linux/interrupt.h | 6 +-
3673 include/linux/iommu.h | 2 +-
3674 include/linux/ioport.h | 2 +-
3675 include/linux/ipc.h | 2 +-
3676 include/linux/irq.h | 5 +-
3677 include/linux/irqdesc.h | 2 +-
3678 include/linux/irqdomain.h | 3 +
3679 include/linux/jbd2.h | 2 +-
3680 include/linux/jiffies.h | 16 +-
3681 include/linux/kallsyms.h | 18 +-
3682 include/linux/key-type.h | 2 +-
3683 include/linux/kgdb.h | 6 +-
3684 include/linux/kmemleak.h | 4 +-
3685 include/linux/kobject.h | 3 +-
3686 include/linux/kobject_ns.h | 2 +-
3687 include/linux/kref.h | 2 +-
3688 include/linux/libata.h | 2 +-
3689 include/linux/linkage.h | 12 +
3690 include/linux/list.h | 15 +
3691 include/linux/lockd/xdr.h | 34 +-
3692 include/linux/lockd/xdr4.h | 34 +-
3693 include/linux/lockref.h | 26 +-
3694 include/linux/math64.h | 10 +-
3695 include/linux/memcontrol.h | 2 +-
3696 include/linux/mempolicy.h | 7 +
3697 include/linux/mm.h | 97 +-
3698 include/linux/mm_types.h | 20 +
3699 include/linux/mmiotrace.h | 4 +-
3700 include/linux/mmzone.h | 2 +-
3701 include/linux/mod_devicetable.h | 4 +-
3702 include/linux/module.h | 58 +-
3703 include/linux/moduleloader.h | 16 +
3704 include/linux/moduleparam.h | 12 +-
3705 include/linux/net.h | 2 +-
3706 include/linux/netdevice.h | 7 +-
3707 include/linux/netfilter.h | 2 +-
3708 include/linux/netfilter/ipset/ip_set_comment.h | 3 +-
3709 include/linux/netfilter/nfnetlink.h | 2 +-
3710 include/linux/netlink.h | 12 +-
3711 include/linux/nls.h | 4 +-
3712 include/linux/notifier.h | 3 +-
3713 include/linux/oprofile.h | 4 +-
3714 include/linux/padata.h | 2 +-
3715 include/linux/pagemap.h | 4 +-
3716 include/linux/pci_hotplug.h | 3 +-
3717 include/linux/percpu.h | 2 +-
3718 include/linux/perf_event.h | 12 +-
3719 include/linux/pid.h | 4 +-
3720 include/linux/pipe_fs_i.h | 8 +-
3721 include/linux/pm.h | 1 +
3722 include/linux/pm_domain.h | 2 +-
3723 include/linux/pm_runtime.h | 2 +-
3724 include/linux/pnp.h | 2 +-
3725 include/linux/poison.h | 4 +-
3726 include/linux/power/smartreflex.h | 2 +-
3727 include/linux/ppp-comp.h | 2 +-
3728 include/linux/preempt.h | 21 +
3729 include/linux/printk.h | 2 +-
3730 include/linux/proc_ns.h | 2 +-
3731 include/linux/psci.h | 2 +-
3732 include/linux/quota.h | 2 +-
3733 include/linux/random.h | 19 +-
3734 include/linux/rculist.h | 16 +
3735 include/linux/rcupdate.h | 8 +
3736 include/linux/reboot.h | 14 +-
3737 include/linux/regset.h | 3 +-
3738 include/linux/relay.h | 2 +-
3739 include/linux/rio.h | 2 +-
3740 include/linux/rmap.h | 4 +-
3741 include/linux/sched.h | 76 +-
3742 include/linux/sched/sysctl.h | 1 +
3743 include/linux/scif.h | 2 +-
3744 include/linux/semaphore.h | 2 +-
3745 include/linux/seq_file.h | 1 +
3746 include/linux/seqlock.h | 10 +
3747 include/linux/signal.h | 2 +-
3748 include/linux/skbuff.h | 12 +-
3749 include/linux/slab.h | 47 +-
3750 include/linux/slab_def.h | 14 +-
3751 include/linux/slub_def.h | 2 +-
3752 include/linux/smp.h | 2 +
3753 include/linux/sock_diag.h | 2 +-
3754 include/linux/sonet.h | 2 +-
3755 include/linux/spinlock.h | 17 +-
3756 include/linux/srcu.h | 5 +-
3757 include/linux/sunrpc/addr.h | 8 +-
3758 include/linux/sunrpc/clnt.h | 2 +-
3759 include/linux/sunrpc/svc.h | 2 +-
3760 include/linux/sunrpc/svc_rdma.h | 18 +-
3761 include/linux/sunrpc/svcauth.h | 2 +-
3762 include/linux/swapops.h | 10 +-
3763 include/linux/swiotlb.h | 3 +-
3764 include/linux/syscalls.h | 34 +-
3765 include/linux/syscore_ops.h | 2 +-
3766 include/linux/sysctl.h | 3 +-
3767 include/linux/sysfs.h | 9 +-
3768 include/linux/sysrq.h | 3 +-
3769 include/linux/tcp.h | 14 +-
3770 include/linux/thread_info.h | 7 +
3771 include/linux/tty.h | 4 +-
3772 include/linux/tty_driver.h | 2 +-
3773 include/linux/tty_ldisc.h | 2 +-
3774 include/linux/types.h | 16 +
3775 include/linux/uaccess.h | 2 +-
3776 include/linux/uio_driver.h | 2 +-
3777 include/linux/unaligned/access_ok.h | 24 +-
3778 include/linux/usb.h | 12 +-
3779 include/linux/usb/hcd.h | 1 +
3780 include/linux/usb/renesas_usbhs.h | 2 +-
3781 include/linux/vermagic.h | 21 +-
3782 include/linux/vga_switcheroo.h | 8 +-
3783 include/linux/vmalloc.h | 7 +-
3784 include/linux/vmstat.h | 24 +-
3785 include/linux/writeback.h | 3 +-
3786 include/linux/xattr.h | 5 +-
3787 include/linux/zlib.h | 3 +-
3788 include/media/v4l2-dev.h | 2 +-
3789 include/media/v4l2-device.h | 2 +-
3790 include/net/9p/transport.h | 2 +-
3791 include/net/bluetooth/l2cap.h | 2 +-
3792 include/net/bonding.h | 2 +-
3793 include/net/caif/cfctrl.h | 6 +-
3794 include/net/cfg80211-wext.h | 20 +-
3795 include/net/cfg802154.h | 2 +-
3796 include/net/fib_rules.h | 3 +-
3797 include/net/flow.h | 2 +-
3798 include/net/genetlink.h | 2 +-
3799 include/net/gro_cells.h | 2 +-
3800 include/net/inet_connection_sock.h | 2 +-
3801 include/net/inet_sock.h | 2 +-
3802 include/net/inetpeer.h | 2 +-
3803 include/net/ip_fib.h | 2 +-
3804 include/net/ip_vs.h | 8 +-
3805 include/net/ipv6.h | 2 +-
3806 include/net/irda/ircomm_tty.h | 1 +
3807 include/net/irda/irias_object.h | 2 +-
3808 include/net/irda/irlmp.h | 1 +
3809 include/net/irda/irlmp_event.h | 6 +-
3810 include/net/irda/timer.h | 6 +-
3811 include/net/iucv/af_iucv.h | 2 +-
3812 include/net/llc_c_ac.h | 2 +-
3813 include/net/llc_c_ev.h | 4 +-
3814 include/net/llc_c_st.h | 2 +-
3815 include/net/llc_s_ac.h | 2 +-
3816 include/net/llc_s_st.h | 2 +-
3817 include/net/mac80211.h | 6 +-
3818 include/net/neighbour.h | 4 +-
3819 include/net/net_namespace.h | 18 +-
3820 include/net/netfilter/nf_conntrack.h | 2 +-
3821 include/net/netlink.h | 2 +-
3822 include/net/netns/conntrack.h | 6 +-
3823 include/net/netns/ipv4.h | 4 +-
3824 include/net/netns/ipv6.h | 4 +-
3825 include/net/netns/xfrm.h | 2 +-
3826 include/net/ping.h | 2 +-
3827 include/net/protocol.h | 4 +-
3828 include/net/rtnetlink.h | 2 +-
3829 include/net/sctp/checksum.h | 4 +-
3830 include/net/sctp/sm.h | 4 +-
3831 include/net/sctp/structs.h | 2 +-
3832 include/net/snmp.h | 10 +-
3833 include/net/sock.h | 12 +-
3834 include/net/tcp.h | 8 +-
3835 include/net/xfrm.h | 15 +-
3836 include/rdma/ib_cm.h | 8 +-
3837 include/rdma/iw_cm.h | 2 +-
3838 include/scsi/libfc.h | 3 +-
3839 include/scsi/scsi_device.h | 6 +-
3840 include/scsi/scsi_driver.h | 2 +-
3841 include/scsi/scsi_transport_fc.h | 3 +-
3842 include/scsi/sg.h | 2 +-
3843 include/sound/compress_driver.h | 2 +-
3844 include/sound/control.h | 4 +-
3845 include/sound/pcm.h | 2 +-
3846 include/sound/rawmidi.h | 3 +-
3847 include/sound/seq_kernel.h | 2 +-
3848 include/sound/soc.h | 4 +-
3849 include/trace/events/irq.h | 4 +-
3850 include/uapi/linux/a.out.h | 8 +
3851 include/uapi/linux/bcache.h | 5 +-
3852 include/uapi/linux/byteorder/little_endian.h | 28 +-
3853 include/uapi/linux/connector.h | 2 +-
3854 include/uapi/linux/elf.h | 28 +
3855 include/uapi/linux/screen_info.h | 2 +-
3856 include/uapi/linux/swab.h | 6 +-
3857 include/uapi/linux/xattr.h | 4 +
3858 include/video/udlfb.h | 8 +-
3859 include/video/uvesafb.h | 1 +
3860 init/Kconfig | 2 +-
3861 init/Makefile | 3 +
3862 init/do_mounts.c | 16 +-
3863 init/do_mounts.h | 8 +-
3864 init/do_mounts_initrd.c | 30 +-
3865 init/do_mounts_md.c | 6 +-
3866 init/init_task.c | 4 +
3867 init/initramfs.c | 38 +-
3868 init/main.c | 30 +-
3869 ipc/compat.c | 4 +-
3870 ipc/ipc_sysctl.c | 14 +-
3871 ipc/mq_sysctl.c | 4 +-
3872 ipc/sem.c | 4 +-
3873 ipc/shm.c | 8 +-
3874 kernel/audit.c | 8 +-
3875 kernel/auditsc.c | 4 +-
3876 kernel/bpf/core.c | 28 +-
3877 kernel/capability.c | 3 +
3878 kernel/cgroup.c | 29 +-
3879 kernel/compat.c | 38 +-
3880 kernel/debug/debug_core.c | 16 +-
3881 kernel/debug/kdb/kdb_main.c | 4 +-
3882 kernel/events/core.c | 38 +-
3883 kernel/events/internal.h | 10 +-
3884 kernel/events/uprobes.c | 2 +-
3885 kernel/exit.c | 27 +-
3886 kernel/fork.c | 175 +-
3887 kernel/futex.c | 11 +-
3888 kernel/futex_compat.c | 2 +-
3889 kernel/irq/manage.c | 2 +-
3890 kernel/irq/msi.c | 19 +-
3891 kernel/irq/spurious.c | 2 +-
3892 kernel/jump_label.c | 5 +
3893 kernel/kallsyms.c | 40 +-
3894 kernel/kexec.c | 3 +-
3895 kernel/kmod.c | 8 +-
3896 kernel/kprobes.c | 4 +-
3897 kernel/ksysfs.c | 2 +-
3898 kernel/locking/lockdep.c | 7 +-
3899 kernel/locking/mutex-debug.c | 12 +-
3900 kernel/locking/mutex-debug.h | 4 +-
3901 kernel/locking/mutex.c | 6 +-
3902 kernel/module.c | 403 +-
3903 kernel/notifier.c | 17 +-
3904 kernel/padata.c | 4 +-
3905 kernel/panic.c | 11 +-
3906 kernel/pid.c | 6 +-
3907 kernel/pid_namespace.c | 2 +-
3908 kernel/power/process.c | 12 +-
3909 kernel/profile.c | 14 +-
3910 kernel/ptrace.c | 8 +-
3911 kernel/rcu/rcutorture.c | 60 +-
3912 kernel/rcu/tiny.c | 4 +-
3913 kernel/rcu/tree.c | 42 +-
3914 kernel/rcu/tree.h | 16 +-
3915 kernel/rcu/tree_plugin.h | 18 +-
3916 kernel/rcu/tree_trace.c | 14 +-
3917 kernel/resource.c | 4 +-
3918 kernel/sched/auto_group.c | 4 +-
3919 kernel/sched/core.c | 49 +-
3920 kernel/sched/fair.c | 2 +-
3921 kernel/sched/rt.c | 4 +-
3922 kernel/sched/sched.h | 13 +-
3923 kernel/signal.c | 28 +-
3924 kernel/smp.c | 2 +-
3925 kernel/smpboot.c | 4 +-
3926 kernel/softirq.c | 12 +-
3927 kernel/stop_machine.c | 2 +-
3928 kernel/sys.c | 10 +-
3929 kernel/sys_ni.c | 4 +-
3930 kernel/sysctl.c | 34 +-
3931 kernel/time/alarmtimer.c | 4 +-
3932 kernel/time/posix-clock.c | 8 +-
3933 kernel/time/posix-cpu-timers.c | 4 +-
3934 kernel/time/posix-timers.c | 36 +-
3935 kernel/time/timer.c | 2 +-
3936 kernel/time/timer_stats.c | 10 +-
3937 kernel/trace/blktrace.c | 6 +-
3938 kernel/trace/ftrace.c | 33 +-
3939 kernel/trace/ring_buffer.c | 96 +-
3940 kernel/trace/trace.c | 2 +-
3941 kernel/trace/trace.h | 2 +-
3942 kernel/trace/trace_clock.c | 4 +-
3943 kernel/trace/trace_events.c | 1 -
3944 kernel/trace/trace_functions_graph.c | 4 +-
3945 kernel/trace/trace_mmiotrace.c | 8 +-
3946 kernel/trace/trace_output.c | 10 +-
3947 kernel/trace/trace_seq.c | 2 +-
3948 kernel/trace/trace_stack.c | 2 +-
3949 kernel/user.c | 2 +-
3950 kernel/user_namespace.c | 2 +-
3951 kernel/utsname_sysctl.c | 2 +-
3952 kernel/watchdog.c | 2 +-
3953 kernel/workqueue.c | 8 +-
3954 lib/Kconfig.debug | 8 +-
3955 lib/Makefile | 2 +-
3956 lib/bitmap.c | 8 +-
3957 lib/bug.c | 2 +
3958 lib/debugobjects.c | 2 +-
3959 lib/decompress_bunzip2.c | 3 +-
3960 lib/decompress_unlzma.c | 4 +-
3961 lib/div64.c | 4 +-
3962 lib/dma-debug.c | 4 +-
3963 lib/inflate.c | 2 +-
3964 lib/ioremap.c | 4 +-
3965 lib/irq_poll.c | 2 +-
3966 lib/kobject.c | 4 +-
3967 lib/list_debug.c | 126 +-
3968 lib/lockref.c | 44 +-
3969 lib/percpu-refcount.c | 2 +-
3970 lib/radix-tree.c | 2 +-
3971 lib/random32.c | 2 +-
3972 lib/rhashtable.c | 4 +-
3973 lib/show_mem.c | 2 +-
3974 lib/strncpy_from_user.c | 2 +-
3975 lib/strnlen_user.c | 2 +-
3976 lib/swiotlb.c | 2 +-
3977 lib/usercopy.c | 6 +
3978 lib/vsprintf.c | 12 +-
3979 mm/Kconfig | 6 +-
3980 mm/backing-dev.c | 4 +-
3981 mm/debug.c | 3 +
3982 mm/filemap.c | 10 +-
3983 mm/gup.c | 13 +-
3984 mm/highmem.c | 6 +-
3985 mm/hugetlb.c | 125 +-
3986 mm/hugetlb_cgroup.c | 60 +-
3987 mm/internal.h | 3 +-
3988 mm/maccess.c | 12 +-
3989 mm/madvise.c | 37 +
3990 mm/memcontrol.c | 6 +-
3991 mm/memory-failure.c | 6 +-
3992 mm/memory.c | 424 +-
3993 mm/mempolicy.c | 25 +
3994 mm/mlock.c | 18 +-
3995 mm/mm_init.c | 2 +-
3996 mm/mmap.c | 573 +-
3997 mm/mprotect.c | 137 +-
3998 mm/mremap.c | 39 +-
3999 mm/nommu.c | 21 +-
4000 mm/page-writeback.c | 2 +-
4001 mm/page_alloc.c | 53 +-
4002 mm/percpu.c | 2 +-
4003 mm/process_vm_access.c | 14 +-
4004 mm/readahead.c | 2 +-
4005 mm/rmap.c | 43 +-
4006 mm/shmem.c | 37 +-
4007 mm/slab.c | 111 +-
4008 mm/slab.h | 22 +-
4009 mm/slab_common.c | 86 +-
4010 mm/slob.c | 218 +-
4011 mm/slub.c | 111 +-
4012 mm/sparse-vmemmap.c | 4 +-
4013 mm/sparse.c | 2 +-
4014 mm/swap.c | 2 +
4015 mm/swapfile.c | 12 +-
4016 mm/util.c | 6 +
4017 mm/vmalloc.c | 116 +-
4018 mm/vmstat.c | 12 +-
4019 net/8021q/vlan.c | 5 +-
4020 net/8021q/vlan_netlink.c | 2 +-
4021 net/9p/mod.c | 4 +-
4022 net/9p/trans_fd.c | 2 +-
4023 net/atm/atm_misc.c | 8 +-
4024 net/atm/lec.h | 2 +-
4025 net/atm/proc.c | 6 +-
4026 net/atm/resources.c | 4 +-
4027 net/ax25/sysctl_net_ax25.c | 2 +-
4028 net/batman-adv/bat_iv_ogm.c | 8 +-
4029 net/batman-adv/fragmentation.c | 2 +-
4030 net/batman-adv/routing.c | 4 +-
4031 net/batman-adv/soft-interface.c | 12 +-
4032 net/batman-adv/sysfs.c | 40 +-
4033 net/batman-adv/sysfs.h | 4 +-
4034 net/batman-adv/translation-table.c | 14 +-
4035 net/batman-adv/types.h | 8 +-
4036 net/bluetooth/hci_sock.c | 2 +-
4037 net/bluetooth/l2cap_core.c | 6 +-
4038 net/bluetooth/l2cap_sock.c | 12 +-
4039 net/bluetooth/rfcomm/sock.c | 4 +-
4040 net/bluetooth/rfcomm/tty.c | 4 +-
4041 net/bridge/br_netlink.c | 2 +-
4042 net/bridge/netfilter/ebtables.c | 6 +-
4043 net/caif/cfctrl.c | 11 +-
4044 net/caif/chnl_net.c | 4 +-
4045 net/can/af_can.c | 2 +-
4046 net/can/gw.c | 6 +-
4047 net/ceph/ceph_common.c | 2 +-
4048 net/ceph/messenger.c | 4 +-
4049 net/compat.c | 26 +-
4050 net/core/datagram.c | 2 +-
4051 net/core/dev.c | 16 +-
4052 net/core/filter.c | 2 +-
4053 net/core/flow.c | 6 +-
4054 net/core/neighbour.c | 18 +-
4055 net/core/net-sysfs.c | 2 +-
4056 net/core/net_namespace.c | 8 +-
4057 net/core/netpoll.c | 4 +-
4058 net/core/rtnetlink.c | 17 +-
4059 net/core/scm.c | 12 +-
4060 net/core/skbuff.c | 11 +-
4061 net/core/sock.c | 28 +-
4062 net/core/sock_diag.c | 15 +-
4063 net/core/sysctl_net_core.c | 22 +-
4064 net/decnet/af_decnet.c | 1 +
4065 net/decnet/sysctl_net_decnet.c | 4 +-
4066 net/dsa/dsa.c | 2 +-
4067 net/hsr/hsr_device.c | 2 +-
4068 net/hsr/hsr_netlink.c | 2 +-
4069 net/ieee802154/6lowpan/core.c | 2 +-
4070 net/ieee802154/6lowpan/reassembly.c | 14 +-
4071 net/ipv4/af_inet.c | 2 +-
4072 net/ipv4/arp.c | 2 +-
4073 net/ipv4/devinet.c | 18 +-
4074 net/ipv4/fib_frontend.c | 6 +-
4075 net/ipv4/fib_semantics.c | 2 +-
4076 net/ipv4/inet_connection_sock.c | 4 +-
4077 net/ipv4/inet_diag.c | 4 +-
4078 net/ipv4/inet_timewait_sock.c | 2 +-
4079 net/ipv4/inetpeer.c | 2 +-
4080 net/ipv4/ip_fragment.c | 15 +-
4081 net/ipv4/ip_gre.c | 6 +-
4082 net/ipv4/ip_sockglue.c | 2 +-
4083 net/ipv4/ip_vti.c | 4 +-
4084 net/ipv4/ipconfig.c | 6 +-
4085 net/ipv4/ipip.c | 4 +-
4086 net/ipv4/netfilter/arp_tables.c | 12 +-
4087 net/ipv4/netfilter/ip_tables.c | 12 +-
4088 net/ipv4/ping.c | 14 +-
4089 net/ipv4/proc.c | 8 +-
4090 net/ipv4/raw.c | 14 +-
4091 net/ipv4/route.c | 32 +-
4092 net/ipv4/sysctl_net_ipv4.c | 22 +-
4093 net/ipv4/tcp_input.c | 6 +-
4094 net/ipv4/tcp_probe.c | 2 +-
4095 net/ipv4/udp.c | 10 +-
4096 net/ipv4/xfrm4_mode_transport.c | 2 +-
4097 net/ipv4/xfrm4_policy.c | 17 +-
4098 net/ipv4/xfrm4_state.c | 4 +-
4099 net/ipv6/addrconf.c | 24 +-
4100 net/ipv6/af_inet6.c | 2 +-
4101 net/ipv6/datagram.c | 2 +-
4102 net/ipv6/icmp.c | 2 +-
4103 net/ipv6/inet6_hashtables.c | 2 +-
4104 net/ipv6/ip6_fib.c | 4 +-
4105 net/ipv6/ip6_gre.c | 10 +-
4106 net/ipv6/ip6_tunnel.c | 4 +-
4107 net/ipv6/ip6_vti.c | 4 +-
4108 net/ipv6/ipv6_sockglue.c | 2 +-
4109 net/ipv6/ndisc.c | 2 +-
4110 net/ipv6/netfilter/ip6_tables.c | 12 +-
4111 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4112 net/ipv6/ping.c | 33 +-
4113 net/ipv6/proc.c | 10 +-
4114 net/ipv6/raw.c | 17 +-
4115 net/ipv6/reassembly.c | 13 +-
4116 net/ipv6/route.c | 2 +-
4117 net/ipv6/sit.c | 4 +-
4118 net/ipv6/sysctl_net_ipv6.c | 2 +-
4119 net/ipv6/udp.c | 6 +-
4120 net/ipv6/xfrm6_mode_transport.c | 2 +-
4121 net/ipv6/xfrm6_policy.c | 17 +-
4122 net/irda/discovery.c | 2 +-
4123 net/irda/ircomm/ircomm_core.c | 13 +-
4124 net/irda/ircomm/ircomm_tty.c | 24 +-
4125 net/irda/ircomm/ircomm_tty_attach.c | 4 +-
4126 net/irda/irda_device.c | 14 +-
4127 net/irda/iriap.c | 14 +-
4128 net/irda/irias_object.c | 10 +-
4129 net/irda/irlan/irlan_client.c | 2 +-
4130 net/irda/irlap.c | 15 +-
4131 net/irda/irlap_event.c | 2 +-
4132 net/irda/irlmp.c | 21 +-
4133 net/irda/irlmp_event.c | 6 +-
4134 net/irda/irnet/irnet.h | 2 +-
4135 net/irda/irnet/irnet_irda.c | 6 +-
4136 net/irda/irttp.c | 8 +-
4137 net/irda/timer.c | 24 +-
4138 net/iucv/af_iucv.c | 4 +-
4139 net/iucv/iucv.c | 2 +-
4140 net/key/af_key.c | 4 +-
4141 net/l2tp/l2tp_eth.c | 40 +-
4142 net/l2tp/l2tp_ip.c | 2 +-
4143 net/l2tp/l2tp_ip6.c | 2 +-
4144 net/mac80211/cfg.c | 10 +-
4145 net/mac80211/debugfs.c | 2 +-
4146 net/mac80211/debugfs_key.c | 4 +-
4147 net/mac80211/ieee80211_i.h | 3 +-
4148 net/mac80211/iface.c | 20 +-
4149 net/mac80211/key.c | 4 +-
4150 net/mac80211/main.c | 2 +-
4151 net/mac80211/pm.c | 4 +-
4152 net/mac80211/rate.c | 2 +-
4153 net/mac80211/sta_info.c | 2 +-
4154 net/mac80211/tx.c | 2 +-
4155 net/mac80211/util.c | 8 +-
4156 net/mac80211/wpa.c | 10 +-
4157 net/mac802154/iface.c | 6 +-
4158 net/mpls/af_mpls.c | 10 +-
4159 net/netfilter/ipset/ip_set_core.c | 7 +-
4160 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4161 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4162 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4163 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4164 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4165 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4166 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4167 net/netfilter/nf_conntrack_acct.c | 2 +-
4168 net/netfilter/nf_conntrack_core.c | 2 +-
4169 net/netfilter/nf_conntrack_ecache.c | 2 +-
4170 net/netfilter/nf_conntrack_helper.c | 2 +-
4171 net/netfilter/nf_conntrack_netlink.c | 22 +-
4172 net/netfilter/nf_conntrack_proto.c | 2 +-
4173 net/netfilter/nf_conntrack_standalone.c | 2 +-
4174 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4175 net/netfilter/nf_log.c | 10 +-
4176 net/netfilter/nf_nat_ftp.c | 2 +-
4177 net/netfilter/nf_nat_irc.c | 2 +-
4178 net/netfilter/nf_sockopt.c | 4 +-
4179 net/netfilter/nf_tables_api.c | 13 +-
4180 net/netfilter/nfnetlink_acct.c | 7 +-
4181 net/netfilter/nfnetlink_cthelper.c | 2 +-
4182 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4183 net/netfilter/nfnetlink_log.c | 4 +-
4184 net/netfilter/nft_compat.c | 9 +-
4185 net/netfilter/xt_IDLETIMER.c | 12 +-
4186 net/netfilter/xt_statistic.c | 8 +-
4187 net/netlink/af_netlink.c | 14 +-
4188 net/netlink/diag.c | 2 +-
4189 net/netlink/genetlink.c | 14 +-
4190 net/openvswitch/vport-geneve.c | 7 +-
4191 net/openvswitch/vport-gre.c | 7 +-
4192 net/openvswitch/vport-internal_dev.c | 4 +-
4193 net/openvswitch/vport-netdev.c | 7 +-
4194 net/openvswitch/vport-vxlan.c | 7 +-
4195 net/packet/af_packet.c | 26 +-
4196 net/packet/diag.c | 2 +-
4197 net/packet/internal.h | 6 +-
4198 net/phonet/pep.c | 6 +-
4199 net/phonet/socket.c | 2 +-
4200 net/phonet/sysctl.c | 2 +-
4201 net/rds/cong.c | 6 +-
4202 net/rds/ib.h | 2 +-
4203 net/rds/ib_cm.c | 2 +-
4204 net/rds/ib_recv.c | 4 +-
4205 net/rds/iw.h | 2 +-
4206 net/rds/iw_cm.c | 2 +-
4207 net/rds/iw_recv.c | 4 +-
4208 net/rds/rds.h | 2 +-
4209 net/rds/tcp.c | 2 +-
4210 net/rds/tcp.h | 6 +-
4211 net/rds/tcp_send.c | 2 +-
4212 net/rxrpc/af_rxrpc.c | 2 +-
4213 net/rxrpc/ar-ack.c | 14 +-
4214 net/rxrpc/ar-call.c | 2 +-
4215 net/rxrpc/ar-connection.c | 2 +-
4216 net/rxrpc/ar-connevent.c | 2 +-
4217 net/rxrpc/ar-input.c | 4 +-
4218 net/rxrpc/ar-internal.h | 8 +-
4219 net/rxrpc/ar-local.c | 2 +-
4220 net/rxrpc/ar-output.c | 4 +-
4221 net/rxrpc/ar-peer.c | 2 +-
4222 net/rxrpc/ar-proc.c | 4 +-
4223 net/rxrpc/ar-transport.c | 2 +-
4224 net/rxrpc/rxkad.c | 4 +-
4225 net/sched/sch_generic.c | 4 +-
4226 net/sched/sch_tbf.c | 9 +-
4227 net/sctp/ipv6.c | 6 +-
4228 net/sctp/protocol.c | 10 +-
4229 net/sctp/sm_sideeffect.c | 4 +-
4230 net/sctp/socket.c | 21 +-
4231 net/sctp/sysctl.c | 10 +-
4232 net/socket.c | 18 +-
4233 net/sunrpc/auth_gss/gss_rpc_upcall.c | 4 +-
4234 net/sunrpc/auth_gss/gss_rpc_xdr.c | 11 +-
4235 net/sunrpc/auth_gss/gss_rpc_xdr.h | 8 +-
4236 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4237 net/sunrpc/clnt.c | 4 +-
4238 net/sunrpc/rpcb_clnt.c | 66 +-
4239 net/sunrpc/sched.c | 4 +-
4240 net/sunrpc/svc.c | 8 +-
4241 net/sunrpc/svcauth_unix.c | 2 +-
4242 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4243 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4244 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4245 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4246 net/tipc/netlink_compat.c | 12 +-
4247 net/tipc/subscr.c | 2 +-
4248 net/unix/diag.c | 2 +-
4249 net/unix/sysctl_net_unix.c | 2 +-
4250 net/wireless/scan.c | 3 +-
4251 net/wireless/wext-compat.c | 140 +-
4252 net/wireless/wext-compat.h | 8 +-
4253 net/wireless/wext-core.c | 19 +-
4254 net/wireless/wext-sme.c | 5 +-
4255 net/xfrm/xfrm_policy.c | 16 +-
4256 net/xfrm/xfrm_state.c | 37 +-
4257 net/xfrm/xfrm_sysctl.c | 2 +-
4258 net/xfrm/xfrm_user.c | 2 +-
4259 scripts/Kbuild.include | 2 +-
4260 scripts/Makefile.build | 2 +-
4261 scripts/Makefile.clean | 3 +-
4262 scripts/Makefile.extrawarn | 4 +
4263 scripts/Makefile.gcc-plugins | 69 +
4264 scripts/Makefile.host | 68 +-
4265 scripts/basic/fixdep.c | 12 +-
4266 scripts/dtc/checks.c | 14 +-
4267 scripts/dtc/data.c | 6 +-
4268 scripts/dtc/flattree.c | 8 +-
4269 scripts/dtc/livetree.c | 4 +-
4270 scripts/gcc-plugin.sh | 51 +
4271 scripts/headers_install.sh | 1 +
4272 scripts/kallsyms.c | 4 +-
4273 scripts/kconfig/lkc.h | 5 +-
4274 scripts/kconfig/menu.c | 2 +-
4275 scripts/kconfig/symbol.c | 6 +-
4276 scripts/link-vmlinux.sh | 2 +-
4277 scripts/mod/file2alias.c | 14 +-
4278 scripts/mod/modpost.c | 40 +-
4279 scripts/mod/modpost.h | 6 +-
4280 scripts/mod/sumversion.c | 2 +-
4281 scripts/module-common.lds | 4 +
4282 scripts/package/builddeb | 1 +
4283 scripts/pnmtologo.c | 6 +-
4284 scripts/sortextable.h | 6 +-
4285 scripts/tags.sh | 2 +-
4286 security/Kconfig | 703 +-
4287 security/apparmor/include/policy.h | 2 +-
4288 security/apparmor/lsm.c | 16 +-
4289 security/apparmor/policy.c | 4 +-
4290 security/integrity/ima/ima.h | 4 +-
4291 security/integrity/ima/ima_api.c | 2 +-
4292 security/integrity/ima/ima_fs.c | 4 +-
4293 security/integrity/ima/ima_queue.c | 2 +-
4294 security/keys/internal.h | 8 +-
4295 security/keys/key.c | 18 +-
4296 security/keys/keyring.c | 4 -
4297 security/selinux/avc.c | 6 +-
4298 security/selinux/include/xfrm.h | 2 +-
4299 security/yama/yama_lsm.c | 2 +-
4300 sound/aoa/codecs/onyx.c | 7 +-
4301 sound/aoa/codecs/onyx.h | 1 +
4302 sound/core/oss/pcm_oss.c | 18 +-
4303 sound/core/pcm_compat.c | 2 +-
4304 sound/core/pcm_lib.c | 3 +-
4305 sound/core/pcm_native.c | 4 +-
4306 sound/core/rawmidi.c | 5 +-
4307 sound/core/seq/oss/seq_oss_synth.c | 4 +-
4308 sound/core/seq/seq_clientmgr.c | 10 +-
4309 sound/core/seq/seq_compat.c | 2 +-
4310 sound/core/seq/seq_fifo.c | 6 +-
4311 sound/core/seq/seq_fifo.h | 2 +-
4312 sound/core/seq/seq_memory.c | 18 +-
4313 sound/core/seq/seq_midi.c | 5 +-
4314 sound/core/seq/seq_virmidi.c | 2 +-
4315 sound/core/sound.c | 2 +-
4316 sound/drivers/mts64.c | 14 +-
4317 sound/drivers/opl4/opl4_lib.c | 2 +-
4318 sound/drivers/portman2x4.c | 3 +-
4319 sound/firewire/amdtp-am824.c | 2 +-
4320 sound/firewire/amdtp-stream.c | 4 +-
4321 sound/firewire/amdtp-stream.h | 2 +-
4322 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4323 sound/firewire/isight.c | 10 +-
4324 sound/firewire/oxfw/oxfw-scs1x.c | 8 +-
4325 sound/oss/sb_audio.c | 2 +-
4326 sound/oss/swarm_cs4297a.c | 6 +-
4327 sound/pci/als300.c | 2 +-
4328 sound/pci/aw2/aw2-alsa.c | 2 -
4329 sound/pci/aw2/aw2-saa7146.c | 4 +-
4330 sound/pci/ctxfi/ctamixer.c | 14 +-
4331 sound/pci/ctxfi/ctamixer.h | 8 +-
4332 sound/pci/ctxfi/ctatc.c | 20 +-
4333 sound/pci/ctxfi/ctdaio.c | 6 +-
4334 sound/pci/ctxfi/ctdaio.h | 4 +-
4335 sound/pci/ctxfi/ctsrc.c | 13 +-
4336 sound/pci/ctxfi/ctsrc.h | 8 +-
4337 sound/pci/hda/hda_codec.c | 2 +-
4338 sound/pci/ymfpci/ymfpci.h | 2 +-
4339 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4340 sound/soc/codecs/cx20442.c | 8 +-
4341 sound/soc/codecs/sti-sas.c | 10 +-
4342 sound/soc/codecs/tlv320dac33.c | 7 +-
4343 sound/soc/codecs/uda1380.c | 7 +-
4344 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4345 sound/soc/soc-ac97.c | 6 +-
4346 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4347 tools/gcc/Makefile | 46 +
4348 tools/gcc/checker_plugin.c | 496 +
4349 tools/gcc/colorize_plugin.c | 162 +
4350 tools/gcc/constify_plugin.c | 521 +
4351 tools/gcc/gcc-common.h | 858 +
4352 tools/gcc/gcc-generate-gimple-pass.h | 175 +
4353 tools/gcc/gcc-generate-ipa-pass.h | 289 +
4354 tools/gcc/gcc-generate-rtl-pass.h | 175 +
4355 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 +
4356 tools/gcc/initify_plugin.c | 536 +
4357 tools/gcc/kallocstat_plugin.c | 135 +
4358 tools/gcc/kernexec_plugin.c | 407 +
4359 tools/gcc/latent_entropy_plugin.c | 422 +
4360 tools/gcc/randomize_layout_seed.h | 1 +
4361 tools/gcc/rap_plugin/Makefile | 4 +
4362 tools/gcc/rap_plugin/rap.h | 36 +
4363 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 +
4364 tools/gcc/rap_plugin/rap_hash.c | 381 +
4365 tools/gcc/rap_plugin/rap_plugin.c | 477 +
4366 tools/gcc/rap_plugin/sip.c | 96 +
4367 tools/gcc/size_overflow_plugin/.gitignore | 3 +
4368 tools/gcc/size_overflow_plugin/Makefile | 28 +
4369 .../disable_size_overflow_hash.data | 12440 +++++++++++
4370 .../generate_size_overflow_hash.sh | 103 +
4371 .../insert_size_overflow_asm.c | 369 +
4372 .../size_overflow_plugin/intentional_overflow.c | 1118 +
4373 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4374 tools/gcc/size_overflow_plugin/size_overflow.h | 329 +
4375 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4376 .../size_overflow_plugin/size_overflow_hash.data | 21508 +++++++++++++++++++
4377 .../size_overflow_hash_aux.data | 92 +
4378 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 +
4379 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4380 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
4381 .../size_overflow_plugin_hash.c | 352 +
4382 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4383 .../size_overflow_transform_core.c | 1015 +
4384 tools/gcc/stackleak_plugin.c | 350 +
4385 tools/gcc/structleak_plugin.c | 239 +
4386 tools/include/linux/compiler.h | 8 +
4387 tools/perf/util/include/asm/alternative-asm.h | 3 +
4388 tools/virtio/linux/uaccess.h | 2 +-
4389 virt/kvm/kvm_main.c | 42 +-
4390 2639 files changed, 76327 insertions(+), 13888 deletions(-)
4391 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
4392 Author: Brad Spengler <spender@grsecurity.net>
4393 Date: Mon Apr 25 20:40:53 2016 -0400
4394
4395 Fix DoS in n_tty_receive_buf_common reported by marcan at:
4396 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
4397 and via lengthy diatribe on Twitter:
4398 https://twitter.com/marcan42/status/724740708104474626
4399 https://twitter.com/marcan42/status/724740985146609664
4400 https://twitter.com/marcan42/status/724741270325760000
4401 https://twitter.com/marcan42/status/724742465199050752
4402 https://twitter.com/marcan42/status/724745886794833920
4403 https://twitter.com/marcan42/status/724749571495075840
4404 https://twitter.com/marcan42/status/724746427285409796
4405 https://twitter.com/marcan42/status/724743150263095296
4406 https://twitter.com/marcan42/status/724757473433808896
4407
4408 Fix it correctly instead of using the incorrect fix suggested
4409 by marcan (aka "try reading the code next time")
4410 The original code was meant to fix an integer truncation issue
4411 that would also have caused a SIZE_OVERFLOW "DoS".
4412
4413 drivers/tty/n_tty.c | 9 +++++----
4414 1 file changed, 5 insertions(+), 4 deletions(-)
4415
4416 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
4417 Author: Brad Spengler <spender@grsecurity.net>
4418 Date: Mon Apr 25 19:52:33 2016 -0400
4419
4420 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
4421 reported by jotik at:
4422 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
4423 patch from Mathias Krause
4424
4425 fs/proc/base.c | 2 +-
4426 1 file changed, 1 insertion(+), 1 deletion(-)
4427
4428 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
4429 Author: Jiri Benc <jbenc@redhat.com>
4430 Date: Fri Apr 22 13:09:13 2016 +0200
4431
4432 cxgbi: fix uninitialized flowi6
4433
4434 ip6_route_output looks into different fields in the passed flowi6 structure,
4435 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
4436 first.
4437
4438 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
4439 Signed-off-by: Jiri Benc <jbenc@redhat.com>
4440 Signed-off-by: David S. Miller <davem@davemloft.net>
4441
4442 drivers/scsi/cxgbi/libcxgbi.c | 1 +
4443 1 file changed, 1 insertion(+)
4444
4445 commit ec65caa32652841a5be21d6e73146921af16d7a8
4446 Author: Brad Spengler <spender@grsecurity.net>
4447 Date: Wed Apr 20 20:59:43 2016 -0400
4448
4449 Make /proc/sched_debug only readable by root, mentioned in
4450 recent NCC Group paper on Linux containers
4451
4452 kernel/sched/debug.c | 4 ++++
4453 1 file changed, 4 insertions(+)
4454
4455 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
4456 Merge: 463149f ff26083
4457 Author: Brad Spengler <spender@grsecurity.net>
4458 Date: Wed Apr 20 17:55:53 2016 -0400
4459
4460 Merge branch 'pax-test' into grsec-test
4461
4462 commit ff260839e610d2bc1b0c579edd7deb0028198f01
4463 Author: Brad Spengler <spender@grsecurity.net>
4464 Date: Wed Apr 20 17:55:24 2016 -0400
4465
4466 Update to pax-linux-4.4.8-test14.patch:
4467 - Emese fixed some CodingStyle issues in the latent entropy plugin
4468 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4469
4470 arch/mips/include/asm/cache.h | 3 ++-
4471 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
4472 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
4473 arch/mips/lib/libgcc.h | 12 +++++++++---
4474 drivers/idle/intel_idle.c | 6 ++++--
4475 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
4476 6 files changed, 57 insertions(+), 33 deletions(-)
4477
4478 commit 463149f47a64db4b26a13009f83ed73d393a209c
4479 Author: Xiaodong Liu <xiaodong.liu@intel.com>
4480 Date: Tue Apr 12 09:45:51 2016 +0000
4481
4482 crypto: sha1-mb - use corrcet pointer while completing jobs
4483
4484 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
4485 when check and complete other jobs. If the memory of first completed req
4486 is freed, while still completing other jobs in the func, kernel will
4487 crash since NULL pointer is assigned to RIP.
4488
4489 Cc: <stable@vger.kernel.org>
4490 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
4491 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
4492 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4493
4494 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
4495 1 file changed, 2 insertions(+), 2 deletions(-)
4496
4497 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
4498 Author: Tom Lendacky <thomas.lendacky@amd.com>
4499 Date: Wed Apr 13 10:52:25 2016 -0500
4500
4501 crypto: ccp - Prevent information leakage on export
4502
4503 Prevent information from leaking to userspace by doing a memset to 0 of
4504 the export state structure before setting the structure values and copying
4505 it. This prevents un-initialized padding areas from being copied into the
4506 export area.
4507
4508 Cc: <stable@vger.kernel.org> # 3.14.x-
4509 Reported-by: Ben Hutchings <ben@decadent.org.uk>
4510 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
4511 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4512
4513 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
4514 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
4515 2 files changed, 6 insertions(+)
4516
4517 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
4518 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4519 Date: Mon Apr 18 14:33:54 2016 +0300
4520
4521 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
4522
4523 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
4524 order-0 memory allocations in RX path"), so here is no reason for depleting
4525 reserves. Generic __netdev_alloc_frag() implements the same logic.
4526
4527 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4528 Acked-by: Eric Dumazet <edumazet@google.com>
4529 Signed-off-by: David S. Miller <davem@davemloft.net>
4530
4531 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
4532 1 file changed, 1 insertion(+), 1 deletion(-)
4533
4534 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
4535 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
4536 Date: Thu Mar 17 18:00:29 2016 +0000
4537
4538 USB: usbip: fix potential out-of-bounds write
4539
4540 Fix potential out-of-bounds write to urb->transfer_buffer
4541 usbip handles network communication directly in the kernel. When receiving a
4542 packet from its peer, usbip code parses headers according to protocol. As
4543 part of this parsing urb->actual_length is filled. Since the input for
4544 urb->actual_length comes from the network, it should be treated as untrusted.
4545 Any entity controlling the network may put any value in the input and the
4546 preallocated urb->transfer_buffer may not be large enough to hold the data.
4547 Thus, the malicious entity is able to write arbitrary data to kernel memory.
4548
4549 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
4550 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4551
4552 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
4553 1 file changed, 11 insertions(+)
4554
4555 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
4556 Merge: d60a24d f5fe5fd
4557 Author: Brad Spengler <spender@grsecurity.net>
4558 Date: Wed Apr 20 17:35:58 2016 -0400
4559
4560 Merge branch 'pax-test' into grsec-test
4561
4562 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
4563 Merge: a107ba2 8c9aef0
4564 Author: Brad Spengler <spender@grsecurity.net>
4565 Date: Wed Apr 20 17:35:29 2016 -0400
4566
4567 Merge branch 'linux-4.4.y' into pax-test
4568
4569 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
4570 Author: Brad Spengler <spender@grsecurity.net>
4571 Date: Mon Apr 18 17:48:10 2016 -0400
4572
4573 fix cast for constify change, reported by pipacs
4574
4575 drivers/idle/intel_idle.c | 4 ++--
4576 1 file changed, 2 insertions(+), 2 deletions(-)
4577
4578 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
4579 Author: Brad Spengler <spender@grsecurity.net>
4580 Date: Fri Apr 15 21:31:07 2016 -0400
4581
4582 Use proper type for function pointer
4583
4584 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
4585 1 file changed, 3 insertions(+), 3 deletions(-)
4586
4587 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
4588 Author: Brad Spengler <spender@grsecurity.net>
4589 Date: Fri Apr 15 21:24:04 2016 -0400
4590
4591 Fix skylake cstates compat with constify
4592
4593 drivers/idle/intel_idle.c | 6 ++++--
4594 1 file changed, 4 insertions(+), 2 deletions(-)
4595
4596 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
4597 Author: Brad Spengler <spender@grsecurity.net>
4598 Date: Fri Apr 15 21:10:44 2016 -0400
4599
4600 Update size_overflow hash table
4601
4602 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
4603 1 file changed, 2 insertions(+), 1 deletion(-)
4604
4605 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
4606 Author: Brad Spengler <spender@grsecurity.net>
4607 Date: Fri Apr 15 20:52:37 2016 -0400
4608
4609 compile fix
4610
4611 fs/coredump.c | 3 ---
4612 1 file changed, 3 deletions(-)
4613
4614 commit 967224da52bd98d078b1237aea5ec9e622238fba
4615 Merge: 92771d6 a107ba2
4616 Author: Brad Spengler <spender@grsecurity.net>
4617 Date: Fri Apr 15 20:30:23 2016 -0400
4618
4619 Merge branch 'pax-test' into grsec-test
4620
4621 commit a107ba25214d9694eb836fb04c782ad694977b91
4622 Merge: 4d8fc00 b40108b
4623 Author: Brad Spengler <spender@grsecurity.net>
4624 Date: Fri Apr 15 20:18:26 2016 -0400
4625
4626 Merge branch 'linux-4.4.y' into pax-test
4627
4628 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
4629 Author: Brad Spengler <spender@grsecurity.net>
4630 Date: Sun Apr 10 07:18:03 2016 -0400
4631
4632 From: Mathias Krause <minipli@googlemail.com>
4633 To: "David S. Miller" <davem@davemloft.net>
4634 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
4635 Emelyanov <xemul@parallels.com>
4636 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
4637 interface
4638
4639 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
4640 pdiag_put_mclist() leaks uninitialized heap bytes via the
4641 PACKET_DIAG_MCLIST netlink attribute.
4642
4643 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
4644
4645 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
4646 Signed-off-by: Mathias Krause <minipli@googlemail.com>
4647 Cc: Eric W. Biederman <ebiederm@xmission.com>
4648 Cc: Pavel Emelyanov <xemul@parallels.com>
4649 ---
4650 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
4651 to userland before the introduction of the packet_diag interface.
4652 Therefore the "Fixes:" line on that commit.
4653
4654 net/packet/af_packet.c | 1 +
4655 1 file changed, 1 insertion(+)
4656
4657 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
4658 Author: Jakub Sitnicki <jkbs@redhat.com>
4659 Date: Tue Apr 5 18:41:08 2016 +0200
4660
4661 ipv6: Count in extension headers in skb->network_header
4662
4663 When sending a UDPv6 message longer than MTU, account for the length
4664 of fragmentable IPv6 extension headers in skb->network_header offset.
4665 Same as we do in alloc_new_skb path in __ip6_append_data().
4666
4667 This ensures that later on __ip6_make_skb() will make space in
4668 headroom for fragmentable extension headers:
4669
4670 /* move skb->data to ip header from ext header */
4671 if (skb->data < skb_network_header(skb))
4672 __skb_pull(skb, skb_network_offset(skb));
4673
4674 Prevents a splat due to skb_under_panic:
4675
4676 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
4677 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
4678 ------------[ cut here ]------------
4679 kernel BUG at net/core/skbuff.c:104!
4680 invalid opcode: 0000 [#1] KASAN
4681 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
4682 [...]
4683 Call Trace:
4684 [<ffffffff813eb7b9>] skb_push+0x79/0x80
4685 [<ffffffff8143397b>] eth_header+0x2b/0x100
4686 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
4687 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
4688 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
4689 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
4690 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
4691 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
4692 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
4693 [...]
4694
4695 Reported-by: Ji Jianwen <jiji@redhat.com>
4696 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
4697 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
4698 Signed-off-by: David S. Miller <davem@davemloft.net>
4699
4700 net/ipv6/ip6_output.c | 8 ++++----
4701 1 file changed, 4 insertions(+), 4 deletions(-)
4702
4703 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
4704 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
4705 Date: Fri Apr 1 17:17:50 2016 -0300
4706
4707 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
4708
4709 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
4710 before ip6_tnl_create2 is called. When register_netdevice is called, there
4711 is no linkinfo attribute in the NEWLINK message because of that.
4712
4713 Setting rtnl_link_ops before calling register_netdevice fixes that.
4714
4715 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
4716 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
4717 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
4718 Signed-off-by: David S. Miller <davem@davemloft.net>
4719
4720 net/ipv6/ip6_tunnel.c | 2 +-
4721 1 file changed, 1 insertion(+), 1 deletion(-)
4722
4723 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
4724 Author: Brad Spengler <spender@grsecurity.net>
4725 Date: Tue Apr 5 21:12:44 2016 -0400
4726
4727 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
4728
4729 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
4730 1 file changed, 12 insertions(+), 6 deletions(-)
4731
4732 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
4733 Author: Brad Spengler <spender@grsecurity.net>
4734 Date: Sun Apr 3 20:10:10 2016 -0400
4735
4736 Fix RANDSTRUCT support on ARM
4737
4738 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
4739 1 file changed, 52 insertions(+), 2 deletions(-)
4740
4741 commit bd893a75ab49f6ea5a216eb334471507337118ba
4742 Merge: 87b7f1d 4d8fc00
4743 Author: Brad Spengler <spender@grsecurity.net>
4744 Date: Sat Apr 2 11:54:20 2016 -0400
4745
4746 Merge branch 'pax-test' into grsec-test
4747
4748 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
4749 Author: Brad Spengler <spender@grsecurity.net>
4750 Date: Sat Apr 2 11:53:53 2016 -0400
4751
4752 Update to pax-linux-4.4.6-test13.patch:
4753 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4754 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
4755
4756 arch/mips/include/asm/atomic.h | 4 ----
4757 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
4758 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
4759 3 files changed, 1 insertion(+), 5 deletions(-)
4760
4761 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
4762 Merge: 3335266 3abdad0
4763 Author: Brad Spengler <spender@grsecurity.net>
4764 Date: Sat Apr 2 11:19:17 2016 -0400
4765
4766 Merge branch 'pax-test' into grsec-test
4767
4768 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
4769 Author: Brad Spengler <spender@grsecurity.net>
4770 Date: Sat Apr 2 11:12:56 2016 -0400
4771
4772 Update to pax-linux-4.4.6-test12.patch:
4773 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
4774 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
4775 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
4776 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
4777 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
4778 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
4779 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
4780 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
4781 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
4782 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
4783 - fixed a gratuitous userland dereference in the amd64 stack walker
4784 - added latent entropy gathering to a few more functions
4785 - constified a few smp_hotplug_thread instances
4786
4787 arch/x86/entry/vdso/Makefile | 1 +
4788 arch/x86/include/asm/cpufeature.h | 1 -
4789 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
4790 arch/x86/kernel/head_32.S | 6 +++---
4791 arch/x86/mm/fault.c | 2 +-
4792 drivers/iommu/arm-smmu.c | 2 +-
4793 drivers/net/ppp/pptp.c | 1 +
4794 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
4795 fs/nfs/internal.h | 5 +++--
4796 fs/proc/kcore.c | 2 +-
4797 kernel/module.c | 6 +++---
4798 kernel/rcu/tree.c | 2 +-
4799 kernel/softirq.c | 2 +-
4800 kernel/stop_machine.c | 2 +-
4801 net/ipv6/xfrm6_mode_transport.c | 2 +-
4802 net/sched/sch_tbf.c | 9 ++++++---
4803 scripts/Makefile.gcc-plugins | 13 +++----------
4804 scripts/Makefile.host | 3 +--
4805 .../disable_size_overflow_hash.data | 4 +++-
4806 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
4807 20 files changed, 40 insertions(+), 48 deletions(-)
4808
4809 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
4810 Author: Mika Penttilä <mika.penttila@nextfour.com>
4811 Date: Mon Feb 22 17:56:52 2016 +0100
4812
4813 ARM: 8544/1: set_memory_xx fixes
4814
4815 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
4816
4817 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
4818 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
4819
4820 arch/arm/mm/pageattr.c | 3 +++
4821 1 file changed, 3 insertions(+)
4822
4823 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
4824 Author: Josh Boyer <jwboyer@fedoraproject.org>
4825 Date: Mon Mar 14 10:42:38 2016 -0400
4826
4827 USB: iowarrior: fix oops with malicious USB descriptors
4828
4829 The iowarrior driver expects at least one valid endpoint. If given
4830 malicious descriptors that specify 0 for the number of endpoints,
4831 it will crash in the probe function. Ensure there is at least
4832 one endpoint on the interface before using it.
4833
4834 The full report of this issue can be found here:
4835 http://seclists.org/bugtraq/2016/Mar/87
4836
4837 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
4838 Cc: stable <stable@vger.kernel.org>
4839 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
4840 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4841
4842 drivers/usb/misc/iowarrior.c | 6 ++++++
4843 1 file changed, 6 insertions(+)
4844
4845 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
4846 Author: Oliver Neukum <oneukum@suse.com>
4847 Date: Tue Mar 15 10:14:04 2016 +0100
4848
4849 USB: cdc-acm: more sanity checking
4850
4851 An attack has become available which pretends to be a quirky
4852 device circumventing normal sanity checks and crashes the kernel
4853 by an insufficient number of interfaces. This patch adds a check
4854 to the code path for quirky devices.
4855
4856 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
4857 CC: stable@vger.kernel.org
4858 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4859
4860 drivers/usb/class/cdc-acm.c | 3 +++
4861 1 file changed, 3 insertions(+)
4862
4863 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
4864 Author: Oliver Neukum <oneukum@suse.com>
4865 Date: Wed Mar 16 13:26:17 2016 +0100
4866
4867 USB: usb_driver_claim_interface: add sanity checking
4868
4869 Attacks that trick drivers into passing a NULL pointer
4870 to usb_driver_claim_interface() using forged descriptors are
4871 known. This thwarts them by sanity checking.
4872
4873 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
4874 CC: stable@vger.kernel.org
4875 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4876
4877 drivers/usb/core/driver.c | 6 +++++-
4878 1 file changed, 5 insertions(+), 1 deletion(-)
4879
4880 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
4881 Author: Paolo Bonzini <pbonzini@redhat.com>
4882 Date: Mon Mar 21 10:15:25 2016 +0100
4883
4884 KVM: fix spin_lock_init order on x86
4885
4886 Moving the initialization earlier is needed in 4.6 because
4887 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
4888 complain:
4889
4890 [ 284.440294] INFO: trying to register non-static key.
4891 [ 284.445259] the code is fine but needs lockdep annotation.
4892 [ 284.450736] turning off the locking correctness validator.
4893 ...
4894 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
4895 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
4896 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
4897 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
4898 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
4899 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
4900 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
4901 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
4902
4903 However, it also helps fixing a preexisting problem, which is why this
4904 patch is also good for stable kernels: kvm_create_vm was incrementing
4905 current->mm->mm_count but not decrementing it at the out_err label (in
4906 case kvm_init_mmu_notifier failed). The new initialization order makes
4907 it possible to add the required mmdrop without adding a new error label.
4908
4909 Cc: stable@vger.kernel.org
4910 Reported-by: Borislav Petkov <bp@alien8.de>
4911 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
4912
4913 virt/kvm/kvm_main.c | 21 +++++++++++----------
4914 1 file changed, 11 insertions(+), 10 deletions(-)
4915
4916 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
4917 Author: Paolo Bonzini <pbonzini@redhat.com>
4918 Date: Fri Mar 18 16:53:42 2016 +0100
4919
4920 KVM: VMX: avoid guest hang on invalid invvpid instruction
4921
4922 A guest executing an invalid invvpid instruction would hang
4923 because the instruction pointer was not updated.
4924
4925 Reported-by: jmontleo@redhat.com
4926 Tested-by: jmontleo@redhat.com
4927 Cc: stable@vger.kernel.org
4928 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
4929 Reviewed-by: David Matlack <dmatlack@google.com>
4930 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
4931
4932 arch/x86/kvm/vmx.c | 1 +
4933 1 file changed, 1 insertion(+)
4934
4935 commit 602caaece277e5e21ae43771398bbf7778061beb
4936 Author: Paolo Bonzini <pbonzini@redhat.com>
4937 Date: Fri Mar 18 16:53:29 2016 +0100
4938
4939 KVM: VMX: avoid guest hang on invalid invept instruction
4940
4941 A guest executing an invalid invept instruction would hang
4942 because the instruction pointer was not updated.
4943
4944 Cc: stable@vger.kernel.org
4945 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
4946 Reviewed-by: David Matlack <dmatlack@google.com>
4947 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
4948
4949 arch/x86/kvm/vmx.c | 1 +
4950 1 file changed, 1 insertion(+)
4951
4952 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
4953 Author: Jann Horn <jann@thejh.net>
4954 Date: Tue Mar 22 14:25:36 2016 -0700
4955
4956 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
4957
4958 This commit fixes the following security hole affecting systems where
4959 all of the following conditions are fulfilled:
4960
4961 - The fs.suid_dumpable sysctl is set to 2.
4962 - The kernel.core_pattern sysctl's value starts with "/". (Systems
4963 where kernel.core_pattern starts with "|/" are not affected.)
4964 - Unprivileged user namespace creation is permitted. (This is
4965 true on Linux >=3.8, but some distributions disallow it by
4966 default using a distro patch.)
4967
4968 Under these conditions, if a program executes under secure exec rules,
4969 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
4970 namespace, changes its root directory and crashes, the coredump will be
4971 written using fsuid=0 and a path derived from kernel.core_pattern - but
4972 this path is interpreted relative to the root directory of the process,
4973 allowing the attacker to control where a coredump will be written with
4974 root privileges.
4975
4976 To fix the security issue, always interpret core_pattern for dumps that
4977 are written under SUID_DUMP_ROOT relative to the root directory of init.
4978
4979 Signed-off-by: Jann Horn <jann@thejh.net>
4980 Acked-by: Kees Cook <keescook@chromium.org>
4981 Cc: Al Viro <viro@zeniv.linux.org.uk>
4982 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
4983 Cc: Andy Lutomirski <luto@kernel.org>
4984 Cc: Oleg Nesterov <oleg@redhat.com>
4985 Cc: <stable@vger.kernel.org>
4986 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
4987 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
4988
4989 arch/um/drivers/mconsole_kern.c | 2 +-
4990 fs/coredump.c | 31 +++++++++++++++++++++++++++----
4991 fs/fhandle.c | 2 +-
4992 fs/open.c | 6 ++----
4993 include/linux/fs.h | 2 +-
4994 kernel/sysctl_binary.c | 2 +-
4995 6 files changed, 33 insertions(+), 12 deletions(-)
4996
4997 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
4998 Author: Takashi Iwai <tiwai@suse.de>
4999 Date: Fri Apr 1 12:28:16 2016 +0200
5000
5001 ALSA: timer: Use mod_timer() for rearming the system timer
5002
5003 ALSA system timer backend stops the timer via del_timer() without sync
5004 and leaves del_timer_sync() at the close instead. This is because of
5005 the restriction by the design of ALSA timer: namely, the stop callback
5006 may be called from the timer handler, and calling the sync shall lead
5007 to a hangup. However, this also triggers a kernel BUG() when the
5008 timer is rearmed immediately after stopping without sync:
5009 kernel BUG at kernel/time/timer.c:966!
5010 Call Trace:
5011 <IRQ>
5012 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
5013 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
5014 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
5015 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
5016 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
5017 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
5018 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
5019 ....
5020
5021 It's the place where add_timer() checks the pending timer. It's clear
5022 that this may happen after the immediate restart without sync in our
5023 cases.
5024
5025 So, the workaround here is just to use mod_timer() instead of
5026 add_timer(). This looks like a band-aid fix, but it's a right move,
5027 as snd_timer_interrupt() takes care of the continuous rearm of timer.
5028
5029 Reported-by: Jiri Slaby <jslaby@suse.cz>
5030 Cc: <stable@vger.kernel.org>
5031 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5032
5033 sound/core/timer.c | 4 ++--
5034 1 file changed, 2 insertions(+), 2 deletions(-)
5035
5036 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
5037 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5038 Date: Wed Mar 30 11:40:43 2016 +0200
5039
5040 drm/udl: Use unlocked gem unreferencing
5041
5042 For drm_gem_object_unreference callers are required to hold
5043 dev->struct_mutex, which these paths don't. Enforcing this requirement
5044 has become a bit more strict with
5045
5046 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
5047 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5048 Date: Thu Oct 15 09:36:25 2015 +0200
5049
5050 drm/gem: Check locking in drm_gem_object_unreference
5051
5052 Cc: stable@vger.kernel.org
5053 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
5054 Signed-off-by: Dave Airlie <airlied@redhat.com>
5055
5056 drivers/gpu/drm/udl/udl_fb.c | 2 +-
5057 drivers/gpu/drm/udl/udl_gem.c | 2 +-
5058 2 files changed, 2 insertions(+), 2 deletions(-)
5059
5060 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
5061 Author: Jan Kara <jack@suse.com>
5062 Date: Mon Dec 7 14:34:49 2015 -0500
5063
5064 ext4: fix races of writeback with punch hole and zero range
5065
5066 When doing delayed allocation, update of on-disk inode size is postponed
5067 until IO submission time. However hole punch or zero range fallocate
5068 calls can end up discarding the tail page cache page and thus on-disk
5069 inode size would never be properly updated.
5070
5071 Make sure the on-disk inode size is updated before truncating page
5072 cache.
5073
5074 Signed-off-by: Jan Kara <jack@suse.com>
5075 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5076
5077 fs/ext4/ext4.h | 3 +++
5078 fs/ext4/extents.c | 5 +++++
5079 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
5080 3 files changed, 42 insertions(+), 1 deletion(-)
5081
5082 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
5083 Author: Jan Kara <jack@suse.com>
5084 Date: Mon Dec 7 14:31:11 2015 -0500
5085
5086 ext4: fix races between buffered IO and collapse / insert range
5087
5088 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
5089 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
5090 faults. If buffered write or write via mmap manages to squeeze between
5091 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
5092 implementations, the written data is simply discarded by
5093 truncate_pagecache() although it should have been shifted.
5094
5095 Fix the problem by moving filemap_write_and_wait_range() call inside
5096 i_mutex and i_mmap_sem. That way we are protected against races with
5097 both buffered writes and page faults.
5098
5099 Signed-off-by: Jan Kara <jack@suse.com>
5100 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5101
5102 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
5103 1 file changed, 31 insertions(+), 28 deletions(-)
5104
5105 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
5106 Author: Jan Kara <jack@suse.com>
5107 Date: Mon Dec 7 14:29:17 2015 -0500
5108
5109 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
5110
5111 Currently ext4_alloc_file_blocks() was handling protection against
5112 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
5113 and sometimes not and DIO protection ranks above it (although strictly
5114 speaking this cannot currently create any deadlocks). Also
5115 ext4_zero_range() was actually getting & releasing unlocked DIO
5116 protection twice in some cases. Luckily it didn't introduce any real bug
5117 but it was a land mine waiting to be stepped on. So move DIO protection
5118 out from ext4_alloc_file_blocks() into the two callsites.
5119
5120 Signed-off-by: Jan Kara <jack@suse.com>
5121 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5122
5123 fs/ext4/extents.c | 21 ++++++++++-----------
5124 1 file changed, 10 insertions(+), 11 deletions(-)
5125
5126 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
5127 Author: Jan Kara <jack@suse.com>
5128 Date: Mon Dec 7 14:28:03 2015 -0500
5129
5130 ext4: fix races between page faults and hole punching
5131
5132 Currently, page faults and hole punching are completely unsynchronized.
5133 This can result in page fault faulting in a page into a range that we
5134 are punching after truncate_pagecache_range() has been called and thus
5135 we can end up with a page mapped to disk blocks that will be shortly
5136 freed. Filesystem corruption will shortly follow. Note that the same
5137 race is avoided for truncate by checking page fault offset against
5138 i_size but there isn't similar mechanism available for punching holes.
5139
5140 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
5141 grab it for writing over truncate, hole punching, and other functions
5142 removing blocks from extent tree and for read over page faults. We
5143 cannot easily use i_data_sem for this since that ranks below transaction
5144 start and we need something ranking above it so that it can be held over
5145 the whole truncate / hole punching operation. Also remove various
5146 workarounds we had in the code to reduce race window when page fault
5147 could have created pages with stale mapping information.
5148
5149 Signed-off-by: Jan Kara <jack@suse.com>
5150 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5151
5152 fs/ext4/ext4.h | 10 +++++++++
5153 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
5154 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
5155 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
5156 fs/ext4/super.c | 1 +
5157 fs/ext4/truncate.h | 2 ++
5158 6 files changed, 127 insertions(+), 42 deletions(-)
5159
5160 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
5161 Author: Guenter Roeck <linux@roeck-us.net>
5162 Date: Sat Mar 26 12:28:05 2016 -0700
5163
5164 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
5165
5166 arm:pxa_defconfig can result in the following crash if the max1111 driver
5167 is not instantiated.
5168
5169 Unhandled fault: page domain fault (0x01b) at 0x00000000
5170 pgd = c0004000
5171 [00000000] *pgd=00000000
5172 Internal error: : 1b [#1] PREEMPT ARM
5173 Modules linked in:
5174 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
5175 Hardware name: SHARP Akita
5176 Workqueue: events sharpsl_charge_toggle
5177 task: c390a000 ti: c391e000 task.ti: c391e000
5178 PC is at max1111_read_channel+0x20/0x30
5179 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
5180 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
5181 ...
5182 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
5183 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
5184 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
5185 (spitzpm_read_devdata+0x5c/0xc4)
5186 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
5187 (sharpsl_check_battery_temp+0x78/0x110)
5188 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
5189 (sharpsl_charge_toggle+0x48/0x110)
5190 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
5191 (process_one_work+0x14c/0x48c)
5192 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
5193 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
5194 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
5195
5196 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
5197 module and thus not necessarily loaded. While building SPI_PXA2XX into the
5198 kernel would make the problem disappear, it appears prudent to ensure that
5199 the driver is instantiated before accessing its data structures.
5200
5201 Cc: Arnd Bergmann <arnd@arndb.de>
5202 Cc: stable@vger.kernel.org
5203 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
5204
5205 drivers/hwmon/max1111.c | 6 ++++++
5206 1 file changed, 6 insertions(+)
5207
5208 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
5209 Author: Nicolai Stange <nicstange@gmail.com>
5210 Date: Sun Mar 20 23:23:46 2016 +0100
5211
5212 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
5213
5214 Despite what the DocBook comment to pkcs7_validate_trust() says, the
5215 *_trusted argument is never set to false.
5216
5217 pkcs7_validate_trust() only positively sets *_trusted upon encountering
5218 a trusted PKCS#7 SignedInfo block.
5219
5220 This is quite unfortunate since its callers, system_verify_data() for
5221 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
5222
5223 Indeed, UBSAN splats when attempting to load the uninitialized local
5224 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
5225
5226 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
5227 load of value 82 is not a valid value for type '_Bool'
5228 [...]
5229 Call Trace:
5230 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
5231 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
5232 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
5233 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
5234 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
5235 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
5236 [<ffffffff814b83f0>] ? kfree+0x220/0x370
5237 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
5238 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
5239 [<ffffffff813c391a>] system_verify_data+0xca/0x170
5240 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
5241 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
5242 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
5243 [...]
5244
5245 The implication is that pkcs7_validate_trust() effectively grants trust
5246 when it really shouldn't have.
5247
5248 Fix this by explicitly setting *_trusted to false at the very beginning
5249 of pkcs7_validate_trust().
5250
5251 Cc: <stable@vger.kernel.org>
5252 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5253 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5254
5255 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
5256 1 file changed, 2 insertions(+)
5257
5258 commit 1052826f7352ccc98167129b0b83222f45d50046
5259 Author: Florian Westphal <fw@strlen.de>
5260 Date: Tue Mar 22 18:02:49 2016 +0100
5261
5262 netfilter: x_tables: validate e->target_offset early
5263
5264 We should check that e->target_offset is sane before
5265 mark_source_chains gets called since it will fetch the target entry
5266 for loop detection.
5267
5268 Signed-off-by: Florian Westphal <fw@strlen.de>
5269 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5270
5271 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
5272 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
5273 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
5274 3 files changed, 24 insertions(+), 27 deletions(-)
5275
5276 commit b35d19509e8dab157214e46dd24314663ccf554f
5277 Author: Florian Westphal <fw@strlen.de>
5278 Date: Tue Mar 22 18:02:50 2016 +0100
5279
5280 netfilter: x_tables: make sure e->next_offset covers remaining blob size
5281
5282 Otherwise this function may read data beyond the ruleset blob.
5283
5284 Signed-off-by: Florian Westphal <fw@strlen.de>
5285 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5286
5287 net/ipv4/netfilter/arp_tables.c | 6 ++++--
5288 net/ipv4/netfilter/ip_tables.c | 6 ++++--
5289 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
5290 3 files changed, 12 insertions(+), 6 deletions(-)
5291
5292 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
5293 Author: Florian Westphal <fw@strlen.de>
5294 Date: Tue Mar 22 18:02:52 2016 +0100
5295
5296 netfilter: x_tables: fix unconditional helper
5297
5298 Ben Hawkes says:
5299
5300 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
5301 is possible for a user-supplied ipt_entry structure to have a large
5302 next_offset field. This field is not bounds checked prior to writing a
5303 counter value at the supplied offset.
5304
5305 Problem is that mark_source_chains should not have been called --
5306 the rule doesn't have a next entry, so its supposed to return
5307 an absolute verdict of either ACCEPT or DROP.
5308
5309 However, the function conditional() doesn't work as the name implies.
5310 It only checks that the rule is using wildcard address matching.
5311
5312 However, an unconditional rule must also not be using any matches
5313 (no -m args).
5314
5315 The underflow validator only checked the addresses, therefore
5316 passing the 'unconditional absolute verdict' test, while
5317 mark_source_chains also tested for presence of matches, and thus
5318 proceeeded to the next (not-existent) rule.
5319
5320 Unify this so that all the callers have same idea of 'unconditional rule'.
5321
5322 Reported-by: Ben Hawkes <hawkes@google.com>
5323 Signed-off-by: Florian Westphal <fw@strlen.de>
5324 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5325
5326 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
5327 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
5328 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
5329 3 files changed, 31 insertions(+), 33 deletions(-)
5330
5331 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
5332 Author: Pablo Neira Ayuso <pablo@netfilter.org>
5333 Date: Thu Mar 24 21:29:53 2016 +0100
5334
5335 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
5336
5337 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
5338 in ebtables and all the x_tables variants and their respective compat
5339 code. Uncovered by KASAN.
5340
5341 Reported-by: Baozeng Ding <sploving1@gmail.com>
5342 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5343
5344 net/bridge/netfilter/ebtables.c | 4 ++++
5345 net/ipv4/netfilter/arp_tables.c | 2 ++
5346 net/ipv4/netfilter/ip_tables.c | 2 ++
5347 net/ipv6/netfilter/ip6_tables.c | 2 ++
5348 4 files changed, 10 insertions(+)
5349
5350 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
5351 Author: Nicolai Stange <nicstange@gmail.com>
5352 Date: Fri Mar 25 14:22:14 2016 -0700
5353
5354 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
5355
5356 If
5357 - generic_file_read_iter() gets called with a zero read length,
5358 - the read offset is at a page boundary,
5359 - IOCB_DIRECT is not set
5360 - and the page in question hasn't made it into the page cache yet,
5361 then do_generic_file_read() will trigger a readahead with a req_size hint
5362 of zero.
5363
5364 Since roundup_pow_of_two(0) is undefined, UBSAN reports
5365
5366 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
5367 shift exponent 64 is too large for 64-bit type 'long unsigned int'
5368 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
5369 [...]
5370 Call Trace:
5371 [...]
5372 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
5373 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
5374 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
5375 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
5376 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
5377 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
5378 [...]
5379 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
5380 [...]
5381
5382 when get_init_ra_size() gets called from ondemand_readahead().
5383
5384 The net effect is that the initial readahead size is arch dependent for
5385 requested read lengths of zero: for example, since
5386
5387 1UL << (sizeof(unsigned long) * 8)
5388
5389 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
5390 size becomes 4 on the former and 0 on the latter.
5391
5392 What's more, whether or not the file access timestamp is updated for zero
5393 length reads is decided differently for the two cases of IOCB_DIRECT
5394 being set or cleared: in the first case, generic_file_read_iter()
5395 explicitly skips updating that timestamp while in the latter case, it is
5396 always updated through the call to do_generic_file_read().
5397
5398 According to POSIX, zero length reads "do not modify the last data access
5399 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
5400
5401 Let generic_file_read_iter() unconditionally check the requested read
5402 length at its entry and return immediately with success if it is zero.
5403
5404 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5405 Cc: Al Viro <viro@zeniv.linux.org.uk>
5406 Reviewed-by: Jan Kara <jack@suse.cz>
5407 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5408 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5409
5410 mm/filemap.c | 7 ++++---
5411 1 file changed, 4 insertions(+), 3 deletions(-)
5412
5413 commit 604785419da498d7e876a0191b2e11626db706bb
5414 Author: Oliver Neukum <oneukum@suse.com>
5415 Date: Thu Mar 17 14:00:17 2016 -0700
5416
5417 Input: ims-pcu - sanity check against missing interfaces
5418
5419 A malicious device missing interface can make the driver oops.
5420 Add sanity checking.
5421
5422 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5423 CC: stable@vger.kernel.org
5424 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5425
5426 drivers/input/misc/ims-pcu.c | 4 ++++
5427 1 file changed, 4 insertions(+)
5428
5429 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
5430 Author: Vladis Dronov <vdronov@redhat.com>
5431 Date: Wed Mar 23 11:53:46 2016 -0700
5432
5433 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
5434
5435 The ati_remote2 driver expects at least two interfaces with one
5436 endpoint each. If given malicious descriptor that specify one
5437 interface or no endpoints, it will crash in the probe function.
5438 Ensure there is at least two interfaces and one endpoint for each
5439 interface before using it.
5440
5441 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
5442
5443 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5444 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
5445 Cc: stable@vger.kernel.org
5446 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5447
5448 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
5449 1 file changed, 30 insertions(+), 6 deletions(-)
5450
5451 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
5452 Author: Oliver Neukum <oneukum@suse.com>
5453 Date: Wed Mar 23 14:36:56 2016 -0700
5454
5455 Input: sur40 - fix DMA on stack
5456
5457 During the initialisation the driver uses a buffer on the stack for DMA.
5458 That violates the cache coherency rules. The fix is to allocate the buffer
5459 with kmalloc().
5460
5461 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5462 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5463
5464 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
5465 1 file changed, 14 insertions(+), 7 deletions(-)
5466
5467 commit 015dd03669b2ab646723f6b123377e4ef5694a10
5468 Author: Haiyang Zhang <haiyangz@microsoft.com>
5469 Date: Wed Mar 23 09:43:10 2016 -0700
5470
5471 hv_netvsc: Fix the array sizes to be max supported channels
5472
5473 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
5474 hosts. We use it for the related array sizes instead of using NR_CPUS,
5475 which may be set to several thousands.
5476 This patch reduces possible memory allocation failures.
5477
5478 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5479 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5480 Signed-off-by: David S. Miller <davem@davemloft.net>
5481
5482 drivers/net/hyperv/hyperv_net.h | 7 ++++---
5483 drivers/net/hyperv/rndis_filter.c | 4 ++--
5484 2 files changed, 6 insertions(+), 5 deletions(-)
5485
5486 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
5487 Author: Haiyang Zhang <haiyangz@microsoft.com>
5488 Date: Wed Mar 23 09:43:09 2016 -0700
5489
5490 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
5491
5492 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
5493 the nvdev->num_chn into a temp variable for later usage.
5494
5495 (Please also include this patch into stable branch.)
5496
5497 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5498 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5499 Signed-off-by: David S. Miller <davem@davemloft.net>
5500
5501 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
5502 1 file changed, 4 insertions(+), 1 deletion(-)
5503
5504 commit 7409626e43fe871cede30ac926425938f3ccddaf
5505 Author: Guillaume Nault <g.nault@alphalink.fr>
5506 Date: Wed Mar 23 16:38:55 2016 +0100
5507
5508 ppp: take reference on channels netns
5509
5510 Let channels hold a reference on their network namespace.
5511 Some channel types, like ppp_async and ppp_synctty, can have their
5512 userspace controller running in a different namespace. Therefore they
5513 can't rely on them to preclude their netns from being removed from
5514 under them.
5515
5516 ==================================================================
5517 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
5518 addr ffff880064e217e0
5519 Read of size 8 by task syz-executor/11581
5520 =============================================================================
5521 BUG net_namespace (Not tainted): kasan: bad access detected
5522 -----------------------------------------------------------------------------
5523
5524 Disabling lock debugging due to kernel taint
5525 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
5526 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
5527 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
5528 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
5529 [< inline >] slab_alloc kernel/mm/slub.c:2574
5530 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
5531 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
5532 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
5533 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
5534 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
5535 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
5536 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
5537 [< inline >] copy_process kernel/kernel/fork.c:1274
5538 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
5539 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
5540 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
5541 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
5542
5543 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
5544 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
5545 [< inline >] slab_free kernel/mm/slub.c:2805
5546 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
5547 [< inline >] net_free kernel/net/core/net_namespace.c:341
5548 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
5549 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
5550 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
5551 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
5552 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
5553 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
5554 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
5555 flags=0x5fffc0000004080
5556 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
5557
5558 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
5559 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
5560 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
5561 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
5562 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
5563 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
5564 Call Trace:
5565 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
5566 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
5567 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
5568 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
5569 [< inline >] print_address_description kernel/mm/kasan/report.c:138
5570 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
5571 [< inline >] kasan_report kernel/mm/kasan/report.c:259
5572 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
5573 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
5574 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5575 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
5576 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5577 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
5578 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5579 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
5580 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
5581 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
5582 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
5583 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
5584 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
5585 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
5586 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
5587 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
5588 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
5589 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
5590 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
5591 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
5592 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
5593 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
5594 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
5595 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
5596 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
5597 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
5598 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
5599 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
5600 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
5601 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
5602 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
5603 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
5604 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
5605 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
5606 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
5607 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
5608 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
5609 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
5610 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
5611 Memory state around the buggy address:
5612 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5613 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5614 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5615 ^
5616 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5617 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5618 ==================================================================
5619
5620 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
5621 Reported-by: Baozeng Ding <sploving1@gmail.com>
5622 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
5623 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
5624 Signed-off-by: David S. Miller <davem@davemloft.net>
5625
5626 drivers/net/ppp/ppp_generic.c | 4 +++-
5627 1 file changed, 3 insertions(+), 1 deletion(-)
5628
5629 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
5630 Author: Herbert Xu <herbert@gondor.apana.org.au>
5631 Date: Wed Mar 16 17:06:01 2016 +0800
5632
5633 eCryptfs: Use skcipher and shash
5634
5635 eCryptfs: Fix null pointer dereference on kzalloc error path
5636
5637 The conversion to skcipher and shash added a couple of null pointer
5638 dereference bugs on the kzalloc failure path. This patch fixes them.
5639
5640 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
5641 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
5642 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5643
5644 fs/ecryptfs/keystore.c | 6 ++----
5645 1 file changed, 2 insertions(+), 4 deletions(-)
5646
5647 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
5648 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
5649 Date: Thu Mar 17 10:21:34 2016 +0100
5650
5651 crypto: marvell/cesa - fix memory leak
5652
5653 Crypto requests are not guaranteed to be finalized (->final() call),
5654 and can be freed at any moment, without getting any notification from
5655 the core. This can lead to memory leaks of the ->cache buffer.
5656
5657 Make this buffer part of the request object, and allocate an extra buffer
5658 from the DMA cache pool when doing DMA operations.
5659
5660 As a side effect, this patch also fixes another bug related to cache
5661 allocation and DMA operations. When the core allocates a new request and
5662 import an existing state, a cache buffer can be allocated (depending
5663 on the state). The problem is, at that very moment, we don't know yet
5664 whether the request will use DMA or not, and since everything is
5665 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
5666 should allocate a buffer for standard operation. But when
5667 mv_cesa_ahash_free_cache() is called, req->type has been set to
5668 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
5669 call (the buffer passed in argument has not been allocated from the pool).
5670
5671 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
5672 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
5673 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5674
5675 drivers/crypto/marvell/cesa.h | 3 +-
5676 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
5677 2 files changed, 20 insertions(+), 69 deletions(-)
5678
5679 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
5680 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
5681 Date: Thu Mar 17 10:21:35 2016 +0100
5682
5683 crypto: marvell/cesa - initialize hash states
5684
5685 ->export() might be called before we have done an update operation,
5686 and in this case the ->state field is left uninitialized.
5687 Put the correct default value when initializing the request.
5688
5689 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
5690 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5691
5692 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
5693 1 file changed, 20 insertions(+)
5694
5695 commit 23879f055d23e82c2f78cceca22c33e631973977
5696 Author: David S. Miller <davem@davemloft.net>
5697 Date: Sun Mar 13 23:28:00 2016 -0400
5698
5699 ipv4: Don't do expensive useless work during inetdev destroy.
5700
5701 When an inetdev is destroyed, every address assigned to the interface
5702 is removed. And in this scenerio we do two pointless things which can
5703 be very expensive if the number of assigned interfaces is large:
5704
5705 1) Address promotion. We are deleting all addresses, so there is no
5706 point in doing this.
5707
5708 2) A full nf conntrack table purge for every address. We only need to
5709 do this once, as is already caught by the existing
5710 masq_dev_notifier so masq_inet_event() can skip this.
5711
5712 Reported-by: Solar Designer <solar@openwall.com>
5713 Signed-off-by: David S. Miller <davem@davemloft.net>
5714 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
5715
5716 net/ipv4/devinet.c | 4 ++++
5717 net/ipv4/fib_frontend.c | 4 ++++
5718 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
5719 3 files changed, 18 insertions(+), 2 deletions(-)
5720
5721 commit 60394231e840e884024592a76a6c5612433d3756
5722 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
5723 Date: Tue Mar 8 10:34:28 2016 -0300
5724
5725 sctp: fix copying more bytes than expected in sctp_add_bind_addr
5726
5727 Dmitry reported that sctp_add_bind_addr may read more bytes than
5728 expected in case the parameter is a IPv4 addr supplied by the user
5729 through calls such as sctp_bindx_add(), because it always copies
5730 sizeof(union sctp_addr) while the buffer may be just a struct
5731 sockaddr_in, which is smaller.
5732
5733 This patch then fixes it by limiting the memcpy to the min between the
5734 union size and a (new parameter) provided addr size. Where possible this
5735 parameter still is the size of that union, except for reading from
5736 user-provided buffers, which then it accounts for protocol type.
5737
5738 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5739 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5740 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
5741 Signed-off-by: David S. Miller <davem@davemloft.net>
5742
5743 include/net/sctp/structs.h | 2 +-
5744 net/sctp/bind_addr.c | 14 ++++++++------
5745 net/sctp/protocol.c | 1 +
5746 net/sctp/sm_make_chunk.c | 3 ++-
5747 net/sctp/socket.c | 4 +++-
5748 5 files changed, 15 insertions(+), 9 deletions(-)
5749
5750 commit 9831caa50e1453818c5ec618890291f028b7992f
5751 Author: Brad Spengler <spender@grsecurity.net>
5752 Date: Mon Mar 28 19:20:28 2016 -0400
5753
5754 Also allow /bin/false as needed by systemd
5755
5756 kernel/kmod.c | 2 +-
5757 1 file changed, 1 insertion(+), 1 deletion(-)
5758
5759 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
5760 Author: Brad Spengler <spender@grsecurity.net>
5761 Date: Tue Mar 22 16:59:43 2016 -0400
5762
5763 Fix size_overflow FP reported by marcan at:
5764 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
5765
5766 net/ipv6/xfrm6_mode_transport.c | 2 +-
5767 1 file changed, 1 insertion(+), 1 deletion(-)
5768
5769 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
5770 Merge: 0d0ec9e c0b77a7
5771 Author: Brad Spengler <spender@grsecurity.net>
5772 Date: Wed Mar 16 20:20:40 2016 -0400
5773
5774 Merge branch 'pax-test' into grsec-test
5775
5776 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
5777 Merge: 10d57c1 0d19123
5778 Author: Brad Spengler <spender@grsecurity.net>
5779 Date: Wed Mar 16 20:20:27 2016 -0400
5780
5781 Merge branch 'linux-4.4.y' into pax-test
5782
5783 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
5784 Author: Brad Spengler <spender@grsecurity.net>
5785 Date: Mon Mar 14 20:15:47 2016 -0400
5786
5787 Invert logic to clean up code
5788
5789 fs/namei.c | 32 +++++++-------------------------
5790 grsecurity/grsec_chroot.c | 10 +++++-----
5791 2 files changed, 12 insertions(+), 30 deletions(-)
5792
5793 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
5794 Author: Brad Spengler <spender@grsecurity.net>
5795 Date: Mon Mar 14 19:59:36 2016 -0400
5796
5797 compile fix
5798
5799 fs/namei.c | 5 ++---
5800 1 file changed, 2 insertions(+), 3 deletions(-)
5801
5802 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
5803 Author: Brad Spengler <spender@grsecurity.net>
5804 Date: Mon Mar 14 19:57:53 2016 -0400
5805
5806 Also handle renames
5807
5808 fs/namei.c | 9 +++++++++
5809 1 file changed, 9 insertions(+)
5810
5811 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
5812 Author: Brad Spengler <spender@grsecurity.net>
5813 Date: Mon Mar 14 19:45:56 2016 -0400
5814
5815 Add additional check to cover lookup family of functions
5816
5817 fs/namei.c | 9 +++++++++
5818 1 file changed, 9 insertions(+)
5819
5820 commit c3df846baa7873fb99401136f220676b87452918
5821 Author: Brad Spengler <spender@grsecurity.net>
5822 Date: Mon Mar 14 18:42:37 2016 -0400
5823
5824 compile fix
5825
5826 fs/namei.c | 2 +-
5827 1 file changed, 1 insertion(+), 1 deletion(-)
5828
5829 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
5830 Author: Brad Spengler <spender@grsecurity.net>
5831 Date: Mon Mar 14 18:34:40 2016 -0400
5832
5833 Fix recent chroot check on the create side, as reported by
5834 Toralf Foerster
5835
5836 fs/namei.c | 26 ++++++++++++++++----------
5837 1 file changed, 16 insertions(+), 10 deletions(-)
5838
5839 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
5840 Author: Paolo Bonzini <pbonzini@redhat.com>
5841 Date: Tue Mar 8 12:13:39 2016 +0100
5842
5843 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
5844
5845 Yes, all of these are needed. :) This is admittedly a bit odd, but
5846 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
5847 and of course ept=0.
5848
5849 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
5850 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
5851 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
5852 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
5853 restarts execution. This will still cause a user write to fault, while
5854 supervisor writes will succeed. User reads will fault spuriously now,
5855 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
5856 will be enabled and supervisor writes disabled, going back to the
5857 originary situation where supervisor writes fault spuriously.
5858
5859 When SMEP is in effect, however, U=0 will enable kernel execution of
5860 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
5861 with U=0. If the guest has not enabled NX, the result is a continuous
5862 stream of page faults due to the NX bit being reserved.
5863
5864 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
5865 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
5866 control, so they do not use user-return notifiers for EFER---if they did,
5867 EFER.NX would be forced to the same value as the host).
5868
5869 There is another bug in the reserved bit check, which I've split to a
5870 separate patch for easier application to stable kernels.
5871
5872 Cc: stable@vger.kernel.org
5873 Cc: Andy Lutomirski <luto@amacapital.net>
5874 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
5875 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
5876 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5877
5878 Documentation/virtual/kvm/mmu.txt | 3 ++-
5879 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
5880 2 files changed, 25 insertions(+), 14 deletions(-)
5881
5882 commit 802a88e57b141e9643e93afb7805813ad8da22f3
5883 Author: Paolo Bonzini <pbonzini@redhat.com>
5884 Date: Wed Mar 9 14:28:02 2016 +0100
5885
5886 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
5887
5888 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
5889 CR0.WP=1. These pages' SPTEs flip continuously between two states:
5890 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
5891 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
5892
5893 When SMEP is in effect, however, U=0 will enable kernel execution of
5894 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
5895 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
5896 When guest EFER has the NX bit cleared, the reserved bit check thinks
5897 that the latter state is invalid; teach it that the smep_andnot_wp case
5898 will also use the NX bit of SPTEs.
5899
5900 Cc: stable@vger.kernel.org
5901 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
5902 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
5903 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5904
5905 arch/x86/kvm/mmu.c | 4 +++-
5906 1 file changed, 3 insertions(+), 1 deletion(-)
5907
5908 commit 3925851224428c1d2bca32cf33821befb947c4f3
5909 Author: Ming Lei <ming.lei@canonical.com>
5910 Date: Sat Mar 12 22:56:19 2016 +0800
5911
5912 block: don't optimize for non-cloned bio in bio_get_last_bvec()
5913
5914 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
5915 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
5916 because the start postion may have been moved in the middle of
5917 the bvec, such as splitting in the middle of bvec.
5918
5919 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
5920 Cc: stable@vger.kernel.org
5921 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
5922 Signed-off-by: Ming Lei <ming.lei@canonical.com>
5923 Signed-off-by: Jens Axboe <axboe@fb.com>
5924
5925 include/linux/bio.h | 5 -----
5926 1 file changed, 5 deletions(-)
5927
5928 commit db541463b4a0926bebdbac743c8736fb9e903d58
5929 Author: Borislav Petkov <bp@alien8.de>
5930 Date: Fri Mar 11 12:32:06 2016 +0100
5931
5932 x86/fpu: Fix eager-FPU handling on legacy FPU machines
5933
5934 i486 derived cores like Intel Quark support only the very old,
5935 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
5936 our FPU code wasn't handling the saving and restoring there
5937 properly in the 'eagerfpu' case.
5938
5939 So after we made eagerfpu the default for all CPU types:
5940
5941 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
5942
5943 these old FPU designs broke. First, Andy Shevchenko reported a splat:
5944
5945 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
5946
5947 which was us trying to execute FXRSTOR on those machines even though
5948 they don't support it.
5949
5950 After taking care of that, Bryan O'Donoghue reported that a simple FPU
5951 test still failed because we weren't initializing the FPU state properly
5952 on those machines.
5953
5954 Take care of all that.
5955
5956 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
5957 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
5958 Signed-off-by: Borislav Petkov <bp@suse.de>
5959 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
5960 Cc: Andrew Morton <akpm@linux-foundation.org>
5961 Cc: Andy Lutomirski <luto@amacapital.net>
5962 Cc: Borislav Petkov <bp@alien8.de>
5963 Cc: Brian Gerst <brgerst@gmail.com>
5964 Cc: Dave Hansen <dave.hansen@linux.intel.com>
5965 Cc: Denys Vlasenko <dvlasenk@redhat.com>
5966 Cc: Fenghua Yu <fenghua.yu@intel.com>
5967 Cc: H. Peter Anvin <hpa@zytor.com>
5968 Cc: Oleg Nesterov <oleg@redhat.com>
5969 Cc: Peter Zijlstra <peterz@infradead.org>
5970 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
5971 Cc: Thomas Gleixner <tglx@linutronix.de>
5972 Cc: Yu-cheng <yu-cheng.yu@intel.com>
5973 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
5974 Signed-off-by: Ingo Molnar <mingo@kernel.org>
5975
5976 arch/x86/kernel/fpu/core.c | 4 +++-
5977 arch/x86/kernel/fpu/init.c | 2 +-
5978 2 files changed, 4 insertions(+), 2 deletions(-)
5979
5980 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
5981 Author: Brad Spengler <spender@grsecurity.net>
5982 Date: Sun Mar 13 11:35:56 2016 -0400
5983
5984 Compile fixes
5985
5986 fs/namei.c | 2 +-
5987 grsecurity/grsec_chroot.c | 2 +-
5988 include/linux/grsecurity.h | 2 +-
5989 3 files changed, 3 insertions(+), 3 deletions(-)
5990
5991 commit aab25a3496c4683c5858056960010119fb7d9a5a
5992 Author: Brad Spengler <spender@grsecurity.net>
5993 Date: Sun Mar 13 10:53:59 2016 -0400
5994
5995 Use fput instead of put_filp()
5996
5997 fs/namei.c | 4 ++--
5998 1 file changed, 2 insertions(+), 2 deletions(-)
5999
6000 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
6001 Author: Brad Spengler <spender@grsecurity.net>
6002 Date: Sun Mar 13 10:30:54 2016 -0400
6003
6004 Update MPROTECT_COMPAT config description, disable by default
6005
6006 security/Kconfig | 18 ++++++------------
6007 1 file changed, 6 insertions(+), 12 deletions(-)
6008
6009 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
6010 Author: Brad Spengler <spender@grsecurity.net>
6011 Date: Sun Mar 13 10:35:55 2016 -0400
6012
6013 As reported by Jann Horn, chroot scenarios where the chrooting application
6014 brings in a directory fd can be used to access any file outside of the chroot
6015 via *at syscalls. To maintain compatibility with Chromium and other apps,
6016 we specifically only disallow relative accesses off a directory fd when the
6017 final path is not located under that directory described by the fd and exists
6018 outside of the chroot. This additional restriction will exist under the
6019 current GRKERNSEC_CHROOT_FCHDIR option.
6020
6021 fs/namei.c | 9 +++++++++
6022 grsecurity/Kconfig | 10 ++++++----
6023 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
6024 include/linux/grmsg.h | 1 +
6025 include/linux/grsecurity.h | 1 +
6026 5 files changed, 56 insertions(+), 4 deletions(-)
6027
6028 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
6029 Author: Brad Spengler <spender@grsecurity.net>
6030 Date: Thu Mar 10 22:17:16 2016 -0500
6031
6032 Update size_overflow hash table
6033
6034 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6035 1 file changed, 1 insertion(+)
6036
6037 commit 29f25ddda6a5625340df26beb394279fefea2b49
6038 Author: Brad Spengler <spender@grsecurity.net>
6039 Date: Thu Mar 10 22:16:04 2016 -0500
6040
6041 Fix module support
6042
6043 kernel/module.c | 3 ++-
6044 1 file changed, 2 insertions(+), 1 deletion(-)
6045
6046 commit b057a45636b626e7eaf03077ed0916b95fea054c
6047 Merge: ba5ee94 10d57c1
6048 Author: Brad Spengler <spender@grsecurity.net>
6049 Date: Thu Mar 10 21:36:10 2016 -0500
6050
6051 Merge branch 'pax-test' into grsec-test
6052
6053 commit 10d57c107e7fabffbe616b14efab73df585576c2
6054 Merge: 1cbae46 62e2195
6055 Author: Brad Spengler <spender@grsecurity.net>
6056 Date: Thu Mar 10 21:34:58 2016 -0500
6057
6058 Update to pax-linux-4.4.5-test9.patch:
6059 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
6060 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
6061 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
6062 - compile the x86 vdso without plugins, reported by Emese
6063 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
6064 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
6065
6066 Merge branch 'linux-4.4.y' into pax-test
6067
6068 commit ba5ee94199b11c1429559a08c2158677dd8f1761
6069 Author: Brad Spengler <spender@grsecurity.net>
6070 Date: Thu Mar 3 20:20:19 2016 -0500
6071
6072 Update size_overflow hash table
6073
6074 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6075 1 file changed, 1 insertion(+)
6076
6077 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
6078 Merge: 335c04c 1cbae46
6079 Author: Brad Spengler <spender@grsecurity.net>
6080 Date: Thu Mar 3 20:04:00 2016 -0500
6081
6082 Merge branch 'pax-test' into grsec-test
6083
6084 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
6085 Merge: a51cdb8 c252409
6086 Author: Brad Spengler <spender@grsecurity.net>
6087 Date: Thu Mar 3 19:57:43 2016 -0500
6088
6089 Merge branch 'linux-4.4.y' into pax-test
6090
6091 commit 335c04c8146a696a6101a9c69dbd47f11383549e
6092 Merge: 897877e a51cdb8
6093 Author: Brad Spengler <spender@grsecurity.net>
6094 Date: Tue Mar 1 17:57:24 2016 -0500
6095
6096 Merge branch 'pax-test' into grsec-test
6097
6098 commit a51cdb83569b450858737a30d2be043d87d7ddc1
6099 Author: Brad Spengler <spender@grsecurity.net>
6100 Date: Tue Mar 1 17:56:43 2016 -0500
6101
6102 Update to pax-linux-4.4.3-test6.patch:
6103 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
6104 - fixed a few section mismatches on notifier_block variables
6105 - fixed a few REFCOUNT false positives found by Emese's plugin
6106 - constified hypervisor_x86
6107
6108 arch/x86/include/asm/hypervisor.h | 2 +-
6109 arch/x86/kernel/cpu/mshyperv.c | 2 +-
6110 arch/x86/kernel/cpu/vmware.c | 2 +-
6111 arch/x86/kernel/kvm.c | 2 +-
6112 drivers/lightnvm/rrpc.c | 4 ++--
6113 drivers/lightnvm/rrpc.h | 2 +-
6114 drivers/net/can/led.c | 2 +-
6115 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
6116 drivers/net/ethernet/rocker/rocker.c | 4 ++--
6117 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
6118 drivers/net/vrf.c | 2 +-
6119 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
6120 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
6121 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
6122 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
6123 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
6124 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
6125 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
6126 fs/proc/kcore.c | 2 +-
6127 mm/hugetlb_cgroup.c | 8 ++++----
6128 mm/mm_init.c | 2 +-
6129 mm/slub.c | 2 +-
6130 net/mac802154/iface.c | 2 +-
6131 23 files changed, 41 insertions(+), 41 deletions(-)
6132
6133 commit 897877e79629a0b854e98cb666a9d898256d45a7
6134 Merge: 1ffa5d5 4f4b213
6135 Author: Brad Spengler <spender@grsecurity.net>
6136 Date: Sun Feb 28 20:54:59 2016 -0500
6137
6138 Merge branch 'pax-test' into grsec-test
6139
6140 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
6141 Author: Brad Spengler <spender@grsecurity.net>
6142 Date: Sun Feb 28 20:54:06 2016 -0500
6143
6144 Update to pax-linux-4.4.3-test5.patch:
6145 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
6146 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
6147 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
6148 - added a generator for SIMPLE_IPA passes as well
6149
6150 include/linux/cgroup-defs.h | 2 +-
6151 include/linux/hugetlb.h | 2 +-
6152 include/linux/hugetlb_cgroup.h | 11 ++
6153 include/net/xfrm.h | 2 +-
6154 kernel/cgroup.c | 29 ++--
6155 mm/hugetlb.c | 55 ++++++-
6156 mm/hugetlb_cgroup.c | 60 ++-----
6157 mm/mmap.c | 38 ++---
6158 net/xfrm/xfrm_state.c | 4 +-
6159 tools/gcc/constify_plugin.c | 5 +-
6160 tools/gcc/gcc-common.h | 42 +++--
6161 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
6162 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
6163 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
6164 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
6165 tools/gcc/size_overflow_plugin/.gitignore | 1 +
6166 .../disable_size_overflow_hash.data | 7 +-
6167 .../size_overflow_plugin/size_overflow_hash.data | 3 -
6168 18 files changed, 385 insertions(+), 146 deletions(-)
6169
6170 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
6171 Author: Brad Spengler <spender@grsecurity.net>
6172 Date: Sun Feb 28 20:43:02 2016 -0500
6173
6174 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
6175 enabled
6176
6177 grsecurity/grsec_sig.c | 3 +--
6178 1 file changed, 1 insertion(+), 2 deletions(-)
6179
6180 commit cfdb373a77c88d01c1539e605e28143af5981571
6181 Author: Brad Spengler <spender@grsecurity.net>
6182 Date: Sun Feb 28 19:12:39 2016 -0500
6183
6184 compile fix
6185
6186 grsecurity/gracl_segv.c | 2 +-
6187 grsecurity/grsec_sig.c | 2 +-
6188 2 files changed, 2 insertions(+), 2 deletions(-)
6189
6190 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
6191 Author: Brad Spengler <spender@grsecurity.net>
6192 Date: Sun Feb 28 18:24:50 2016 -0500
6193
6194 Update the daemon check in handling of anti-bruteforcing of suid binaries
6195 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
6196 could create unprivileged copies of the suid binary via ptrace, inject
6197 code into them, and fork+exec a privileged copy. A crash then in the
6198 privileged copy would trigger the daemon detection which could be avoided
6199 by simply terminating the original process. Defeat this by using our
6200 is_privileged_binary() function against the task's mm->binfmt->file to detect
6201 an fscaps-enabled or suid/sgid binary being involved.
6202
6203 Also update the RBAC RES_CRASH code to use is_privileged_binary().
6204
6205 grsecurity/gracl_segv.c | 15 +--------------
6206 grsecurity/grsec_sig.c | 3 ++-
6207 2 files changed, 3 insertions(+), 15 deletions(-)
6208
6209 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
6210 Author: Brad Spengler <spender@grsecurity.net>
6211 Date: Sun Feb 28 15:06:32 2016 -0500
6212
6213 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
6214 could dump out an unreadable suid binary by creating a script that used
6215 that binary as an interpreter.
6216
6217 fs/exec.c | 14 +++++++++-----
6218 1 file changed, 9 insertions(+), 5 deletions(-)
6219
6220 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
6221 Merge: 2d35d52 8327ee6
6222 Author: Brad Spengler <spender@grsecurity.net>
6223 Date: Thu Feb 25 18:44:11 2016 -0500
6224
6225 Merge branch 'pax-test' into grsec-test
6226
6227 Conflicts:
6228 fs/proc/base.c
6229 kernel/ptrace.c
6230 mm/process_vm_access.c
6231
6232 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
6233 Merge: 09d53c7 2134d97
6234 Author: Brad Spengler <spender@grsecurity.net>
6235 Date: Thu Feb 25 18:36:46 2016 -0500
6236
6237 Merge branch 'linux-4.4.y' into pax-test
6238
6239 Conflicts:
6240 mm/mmap.c
6241
6242 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
6243 Author: Brad Spengler <spender@grsecurity.net>
6244 Date: Wed Feb 24 07:59:12 2016 -0500
6245
6246 Remove /proc/pid/map_files which we had previously prevented via
6247 an inverted dependency on checkpoint/restart, but clearly should have
6248 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
6249 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
6250 processes of the same UID. Thanks to Mathias Krause for the report!
6251
6252 fs/proc/base.c | 2 ++
6253 1 file changed, 2 insertions(+)
6254
6255 commit e4f1e517092222aa28179b20e14c0ddfb2796049
6256 Author: Brad Spengler <spender@grsecurity.net>
6257 Date: Thu Feb 18 19:32:39 2016 -0500
6258
6259 Update size_overflow hash table
6260
6261 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
6262 1 file changed, 131 insertions(+), 27 deletions(-)
6263
6264 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
6265 Author: Brad Spengler <spender@grsecurity.net>
6266 Date: Thu Feb 18 18:52:37 2016 -0500
6267
6268 Update size_overflow hash table
6269
6270 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
6271 1 file changed, 237 insertions(+), 56 deletions(-)
6272
6273 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
6274 Author: Brad Spengler <spender@grsecurity.net>
6275 Date: Thu Feb 18 18:23:03 2016 -0500
6276
6277 compile fix
6278
6279 tools/gcc/randomize_layout_plugin.c | 2 +-
6280 1 file changed, 1 insertion(+), 1 deletion(-)
6281
6282 commit 024d2af98b755712daff6ed7c49af921da4e8883
6283 Author: Brad Spengler <spender@grsecurity.net>
6284 Date: Thu Feb 18 18:19:47 2016 -0500
6285
6286 compile fix
6287
6288 tools/gcc/randomize_layout_plugin.c | 2 +-
6289 1 file changed, 1 insertion(+), 1 deletion(-)
6290
6291 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
6292 Author: Brad Spengler <spender@grsecurity.net>
6293 Date: Thu Feb 18 18:16:32 2016 -0500
6294
6295 compile fix
6296
6297 tools/gcc/randomize_layout_plugin.c | 9 +++++----
6298 1 file changed, 5 insertions(+), 4 deletions(-)
6299
6300 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
6301 Author: Brad Spengler <spender@grsecurity.net>
6302 Date: Thu Feb 18 17:54:51 2016 -0500
6303
6304 Compile fix
6305
6306 tools/gcc/randomize_layout_plugin.c | 2 +-
6307 1 file changed, 1 insertion(+), 1 deletion(-)
6308
6309 commit 13823395101c4228ecded4b624583389ee13bfb3
6310 Author: Brad Spengler <spender@grsecurity.net>
6311 Date: Thu Feb 18 17:35:21 2016 -0500
6312
6313 compile fix
6314
6315 Makefile | 5 +----
6316 1 file changed, 1 insertion(+), 4 deletions(-)
6317
6318 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
6319 Merge: 45cbb7e 09d53c7
6320 Author: Brad Spengler <spender@grsecurity.net>
6321 Date: Thu Feb 18 16:40:51 2016 -0500
6322
6323 Merge branch 'pax-test' into grsec-test
6324
6325 Conflicts:
6326 Makefile
6327 include/linux/genl_magic_struct.h
6328 scripts/mod/modpost.c
6329 tools/gcc/size_overflow_plugin/size_overflow_hash.data
6330
6331 commit 09d53c74140e87e886a28980cedbb7e771f2a356
6332 Author: Brad Spengler <spender@grsecurity.net>
6333 Date: Thu Feb 18 16:24:02 2016 -0500
6334
6335 Update to pax-linux-4.4.2-test4.patch:
6336 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
6337 - moved gcc plugin related makefile bits into a separate file, by Emese
6338 - changed modpost to report writable function pointers separately
6339 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
6340 - reduced the size of the compat syscall entry points on amd64
6341 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
6342 - Emese regenerated the size overflow hash table for 4.4
6343 - all plugins now use the new pass generator headers
6344
6345 Makefile | 73 +-
6346 arch/x86/entry/entry_64.S | 2 +-
6347 arch/x86/entry/entry_64_compat.S | 48 +-
6348 fs/exec.c | 3 +
6349 include/linux/genl_magic_struct.h | 4 +-
6350 include/linux/memcontrol.h | 2 +-
6351 ipc/shm.c | 2 +-
6352 mm/memcontrol.c | 6 +-
6353 scripts/Makefile.extrawarn | 4 +
6354 scripts/Makefile.gcc-plugins | 69 +
6355 scripts/mod/modpost.c | 15 +-
6356 tools/gcc/checker_plugin.c | 71 +-
6357 tools/gcc/colorize_plugin.c | 65 +-
6358 tools/gcc/constify_plugin.c | 65 +-
6359 tools/gcc/gcc-generate-gimple-pass.h | 172 +
6360 tools/gcc/gcc-generate-ipa-pass.h | 286 +
6361 tools/gcc/gcc-generate-rtl-pass.h | 172 +
6362 tools/gcc/initify_plugin.c | 74 +-
6363 tools/gcc/kallocstat_plugin.c | 65 +-
6364 tools/gcc/kernexec_plugin.c | 184 +-
6365 tools/gcc/latent_entropy_plugin.c | 71 +-
6366 tools/gcc/randomize_layout_seed.h | 1 -
6367 .../disable_size_overflow_hash.h | 152601 ------------------
6368 .../insert_size_overflow_asm.c | 71 +-
6369 .../size_overflow_plugin/intentional_overflow.c | 6 +-
6370 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
6371 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
6372 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
6373 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
6374 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
6375 .../size_overflow_transform_core.c | 2 +-
6376 tools/gcc/stackleak_plugin.c | 132 +-
6377 tools/gcc/structleak_plugin.c | 67 +-
6378 33 files changed, 2238 insertions(+), 155123 deletions(-)
6379
6380 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
6381 Merge: 3b5448b 0c85110
6382 Author: Brad Spengler <spender@grsecurity.net>
6383 Date: Wed Feb 17 19:11:25 2016 -0500
6384
6385 Merge branch 'pax-test' into grsec-test
6386
6387 commit 0c851109f683896aaff8a310bbfa943272b47516
6388 Merge: 6cb4f49 1cb8570
6389 Author: Brad Spengler <spender@grsecurity.net>
6390 Date: Wed Feb 17 19:11:21 2016 -0500
6391
6392 Merge branch 'linux-4.4.y' into pax-test
6393
6394 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
6395 Author: Brad Spengler <spender@grsecurity.net>
6396 Date: Mon Feb 15 18:02:40 2016 -0500
6397
6398 Fix a drbd bug reported by iamb on the forums:
6399 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
6400 which caused a size_overflow report
6401
6402 include/linux/genl_magic_struct.h | 4 ++--
6403 1 file changed, 2 insertions(+), 2 deletions(-)
6404
6405 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
6406 Author: Brad Spengler <spender@grsecurity.net>
6407 Date: Mon Feb 15 13:20:38 2016 -0500
6408
6409 compile fix
6410
6411 drivers/staging/wilc1000/host_interface.h | 1 +
6412 1 file changed, 1 insertion(+)
6413
6414 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
6415 Author: Brad Spengler <spender@grsecurity.net>
6416 Date: Mon Feb 15 12:54:52 2016 -0500
6417
6418 Update size_overflow hash table
6419
6420 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
6421 1 file changed, 17 insertions(+), 4 deletions(-)
6422
6423 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
6424 Author: Brad Spengler <spender@grsecurity.net>
6425 Date: Mon Feb 15 12:53:54 2016 -0500
6426
6427 compile fix
6428
6429 drivers/staging/wilc1000/wilc_spi.c | 1 -
6430 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
6431 2 files changed, 1 insertion(+), 2 deletions(-)
6432
6433 commit a9dd4481db099082967585be8e153899e5fd24c7
6434 Author: Brad Spengler <spender@grsecurity.net>
6435 Date: Mon Feb 15 12:52:32 2016 -0500
6436
6437 compile fix
6438
6439 fs/proc/fd.c | 2 --
6440 1 file changed, 2 deletions(-)
6441
6442 commit 5acb4fa0063460807096429f073181d1c5a3e566
6443 Author: Brad Spengler <spender@grsecurity.net>
6444 Date: Mon Feb 15 12:32:13 2016 -0500
6445
6446 Update size_overflow hash table
6447
6448 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
6449 1 file changed, 182 insertions(+), 42 deletions(-)
6450
6451 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
6452 Author: Brad Spengler <spender@grsecurity.net>
6453 Date: Mon Feb 15 12:31:16 2016 -0500
6454
6455 compile fix
6456
6457 drivers/staging/wilc1000/wilc_spi.c | 1 +
6458 1 file changed, 1 insertion(+)
6459
6460 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
6461 Author: Brad Spengler <spender@grsecurity.net>
6462 Date: Mon Feb 15 12:28:36 2016 -0500
6463
6464 RANDSTRUCT compile fix
6465
6466 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
6467 1 file changed, 16 insertions(+), 16 deletions(-)
6468
6469 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
6470 Author: Brad Spengler <spender@grsecurity.net>
6471 Date: Mon Feb 15 12:24:49 2016 -0500
6472
6473 RANDSTRUCT compile fix
6474
6475 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
6476 1 file changed, 17 insertions(+), 17 deletions(-)
6477
6478 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
6479 Author: Hariprasad S <hariprasad@chelsio.com>
6480 Date: Fri Dec 11 13:59:17 2015 +0530
6481
6482 iw_cxgb3: Fix incorrectly returning error on success
6483
6484 The cxgb3_*_send() functions return NET_XMIT_ values, which are
6485 positive integers values. So don't treat positive return values
6486 as an error.
6487
6488 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
6489 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
6490 Signed-off-by: Doug Ledford <dledford@redhat.com>
6491
6492 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
6493 1 file changed, 2 insertions(+), 2 deletions(-)
6494
6495 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
6496 Author: Daniel Borkmann <daniel@iogearbox.net>
6497 Date: Wed Feb 10 16:47:11 2016 +0100
6498
6499 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
6500
6501 When ctx access is used, the kernel often needs to expand/rewrite
6502 instructions, so after that patching, branch offsets have to be
6503 adjusted for both forward and backward jumps in the new eBPF program,
6504 but for backward jumps it fails to account the delta. Meaning, for
6505 example, if the expansion happens exactly on the insn that sits at
6506 the jump target, it doesn't fix up the back jump offset.
6507
6508 Analysis on what the check in adjust_branches() is currently doing:
6509
6510 /* adjust offset of jmps if necessary */
6511 if (i < pos && i + insn->off + 1 > pos)
6512 insn->off += delta;
6513 else if (i > pos && i + insn->off + 1 < pos)
6514 insn->off -= delta;
6515
6516 First condition (forward jumps):
6517
6518 Before: After:
6519
6520 insns[0] insns[0]
6521 insns[1] <--- i/insn insns[1] <--- i/insn
6522 insns[2] <--- pos insns[P] <--- pos
6523 insns[3] insns[P] `------| delta
6524 insns[4] <--- target_X insns[P] `-----|
6525 insns[5] insns[3]
6526 insns[4] <--- target_X
6527 insns[5]
6528
6529 First case is if we cross pos-boundary and the jump instruction was
6530 before pos. This is handeled correctly. I.e. if i == pos, then this
6531 would mean our jump that we currently check was the patchlet itself
6532 that we just injected. Since such patchlets are self-contained and
6533 have no awareness of any insns before or after the patched one, the
6534 delta is correctly not adjusted. Also, for the second condition in
6535 case of i + insn->off + 1 == pos, means we jump to that newly patched
6536 instruction, so no offset adjustment are needed. That part is correct.
6537
6538 Second condition (backward jumps):
6539
6540 Before: After:
6541
6542 insns[0] insns[0]
6543 insns[1] <--- target_X insns[1] <--- target_X
6544 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
6545 insns[3] insns[P] `------| delta
6546 insns[4] <--- i/insn insns[P] `-----|
6547 insns[5] insns[3]
6548 insns[4] <--- i/insn
6549 insns[5]
6550
6551 Second interesting case is where we cross pos-boundary and the jump
6552 instruction was after pos. Backward jump with i == pos would be
6553 impossible and pose a bug somewhere in the patchlet, so the first
6554 condition checking i > pos is okay only by itself. However, i +
6555 insn->off + 1 < pos does not always work as intended to trigger the
6556 adjustment. It works when jump targets would be far off where the
6557 delta wouldn't matter. But, for example, where the fixed insn->off
6558 before pointed to pos (target_Y), it now points to pos + delta, so
6559 that additional room needs to be taken into account for the check.
6560 This means that i) both tests here need to be adjusted into pos + delta,
6561 and ii) for the second condition, the test needs to be <= as pos
6562 itself can be a target in the backjump, too.
6563
6564 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
6565 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
6566 Signed-off-by: David S. Miller <davem@davemloft.net>
6567
6568 kernel/bpf/verifier.c | 2 +-
6569 1 file changed, 1 insertion(+), 1 deletion(-)
6570
6571 commit 61b513b644116e77313addf65970db58f4981608
6572 Author: Ryan Ware <ware@linux.intel.com>
6573 Date: Thu Feb 11 15:58:44 2016 -0800
6574
6575 EVM: Use crypto_memneq() for digest comparisons
6576
6577 This patch fixes vulnerability CVE-2016-2085. The problem exists
6578 because the vm_verify_hmac() function includes a use of memcmp().
6579 Unfortunately, this allows timing side channel attacks; specifically
6580 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
6581 the memcmp() to the cryptographically safe crypto_memneq().
6582
6583 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
6584 Signed-off-by: Ryan Ware <ware@linux.intel.com>
6585 Cc: stable@vger.kernel.org
6586 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
6587 Signed-off-by: James Morris <james.l.morris@oracle.com>
6588
6589 security/integrity/evm/evm_main.c | 3 ++-
6590 1 file changed, 2 insertions(+), 1 deletion(-)
6591
6592 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
6593 Author: Michael McConville <mmcco@mykolab.com>
6594 Date: Fri Feb 5 20:46:25 2016 -0500
6595
6596 dscc4: Undefined signed int shift
6597
6598 My analysis in the below mail applies, although the second part is
6599 unnecessary because i isn't used in arithmetic operations here:
6600
6601 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
6602
6603 Thanks for your time.
6604
6605 Signed-off-by: Michael McConville <mmcco@mykolab.com>
6606 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
6607 Signed-off-by: David S. Miller <davem@davemloft.net>
6608
6609 drivers/net/wan/dscc4.c | 2 +-
6610 1 file changed, 1 insertion(+), 1 deletion(-)
6611
6612 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
6613 Author: Andrey Konovalov <andreyknvl@gmail.com>
6614 Date: Sat Feb 13 11:08:06 2016 +0300
6615
6616 ALSA: usb-audio: avoid freeing umidi object twice
6617
6618 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
6619 when tearing down the rawmidi interface. So we shouldn't try to free it
6620 in snd_usbmidi_create() after having registered the rawmidi interface.
6621
6622 Found by KASAN.
6623
6624 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
6625 Acked-by: Clemens Ladisch <clemens@ladisch.de>
6626 Cc: <stable@vger.kernel.org>
6627 Signed-off-by: Takashi Iwai <tiwai@suse.de>
6628
6629 sound/usb/midi.c | 1 -
6630 1 file changed, 1 deletion(-)
6631
6632 commit ed3a8ab1976674d56e258da93639e61f1446e703
6633 Author: zengtao <prime.zeng@huawei.com>
6634 Date: Tue Feb 2 11:38:34 2016 +0800
6635
6636 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
6637
6638 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
6639 overflows in the timeval/timespec to cputime conversion.
6640
6641 Currently the following functions are affected:
6642 1. setitimer()
6643 2. timer_create/timer_settime()
6644 3. sys_clock_nanosleep
6645
6646 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
6647 enabled, which is required for CONFIG_NO_HZ_FULL.
6648
6649 Enforce u64 conversion to prevent the overflow.
6650
6651 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
6652 Signed-off-by: zengtao <prime.zeng@huawei.com>
6653 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
6654 Cc: <fweisbec@gmail.com>
6655 Cc: stable@vger.kernel.org
6656 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
6657 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
6658
6659 include/asm-generic/cputime_nsecs.h | 5 +++--
6660 1 file changed, 3 insertions(+), 2 deletions(-)
6661
6662 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
6663 Author: Brad Spengler <spender@grsecurity.net>
6664 Date: Mon Feb 15 11:55:18 2016 -0500
6665
6666 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
6667 count as actual mismatches
6668
6669 scripts/mod/modpost.c | 3 ++-
6670 1 file changed, 2 insertions(+), 1 deletion(-)
6671
6672 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
6673 Author: Brad Spengler <spender@grsecurity.net>
6674 Date: Mon Feb 15 11:44:36 2016 -0500
6675
6676 Compile fix
6677
6678 tools/gcc/randomize_layout_seed.h | 1 -
6679 1 file changed, 1 deletion(-)
6680
6681 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
6682 Author: Brad Spengler <spender@grsecurity.net>
6683 Date: Mon Feb 15 11:27:32 2016 -0500
6684
6685 disable USELIB
6686
6687 init/Kconfig | 3 ++-
6688 1 file changed, 2 insertions(+), 1 deletion(-)
6689
6690 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
6691 Author: Brad Spengler <spender@grsecurity.net>
6692 Date: Mon Feb 15 11:23:56 2016 -0500
6693
6694 compile fix
6695
6696 fs/proc/fd.c | 2 +-
6697 1 file changed, 1 insertion(+), 1 deletion(-)
6698
6699 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
6700 Author: Brad Spengler <spender@grsecurity.net>
6701 Date: Mon Feb 15 11:19:26 2016 -0500
6702
6703 Initial import of grsecurity for Linux 4.4.1
6704
6705 Documentation/dontdiff | 2 +
6706 Documentation/kernel-parameters.txt | 11 +
6707 Documentation/sysctl/fs.txt | 23 +
6708 Documentation/sysctl/kernel.txt | 15 +
6709 Makefile | 18 +-
6710 arch/alpha/include/asm/cache.h | 4 +-
6711 arch/alpha/kernel/osf_sys.c | 12 +-
6712 arch/arc/Kconfig | 1 +
6713 arch/arm/Kconfig | 1 +
6714 arch/arm/Kconfig.debug | 1 +
6715 arch/arm/include/asm/thread_info.h | 7 +-
6716 arch/arm/kernel/entry-common.S | 8 +-
6717 arch/arm/kernel/process.c | 4 +-
6718 arch/arm/kernel/ptrace.c | 9 +
6719 arch/arm/kernel/traps.c | 7 +-
6720 arch/arm/mm/Kconfig | 4 +-
6721 arch/arm/mm/fault.c | 40 +-
6722 arch/arm/mm/mmap.c | 8 +-
6723 arch/arm/net/bpf_jit_32.c | 51 +-
6724 arch/arm64/Kconfig.debug | 1 +
6725 arch/avr32/include/asm/cache.h | 4 +-
6726 arch/blackfin/Kconfig.debug | 1 +
6727 arch/blackfin/include/asm/cache.h | 3 +-
6728 arch/cris/include/arch-v10/arch/cache.h | 3 +-
6729 arch/cris/include/arch-v32/arch/cache.h | 3 +-
6730 arch/frv/include/asm/cache.h | 3 +-
6731 arch/frv/mm/elf-fdpic.c | 4 +-
6732 arch/hexagon/include/asm/cache.h | 6 +-
6733 arch/ia64/Kconfig | 1 +
6734 arch/ia64/include/asm/cache.h | 3 +-
6735 arch/ia64/kernel/sys_ia64.c | 2 +
6736 arch/ia64/mm/hugetlbpage.c | 2 +
6737 arch/m32r/include/asm/cache.h | 4 +-
6738 arch/m68k/include/asm/cache.h | 4 +-
6739 arch/metag/mm/hugetlbpage.c | 1 +
6740 arch/microblaze/include/asm/cache.h | 3 +-
6741 arch/mips/Kconfig | 1 +
6742 arch/mips/include/asm/cache.h | 3 +-
6743 arch/mips/include/asm/thread_info.h | 11 +-
6744 arch/mips/kernel/irq.c | 3 +
6745 arch/mips/kernel/ptrace.c | 9 +
6746 arch/mips/mm/mmap.c | 4 +-
6747 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
6748 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
6749 arch/openrisc/include/asm/cache.h | 4 +-
6750 arch/parisc/include/asm/cache.h | 3 +
6751 arch/parisc/kernel/sys_parisc.c | 4 +
6752 arch/powerpc/Kconfig | 1 +
6753 arch/powerpc/include/asm/cache.h | 4 +-
6754 arch/powerpc/include/asm/thread_info.h | 5 +-
6755 arch/powerpc/kernel/Makefile | 2 +
6756 arch/powerpc/kernel/irq.c | 3 +
6757 arch/powerpc/kernel/process.c | 10 +-
6758 arch/powerpc/kernel/ptrace.c | 14 +
6759 arch/powerpc/kernel/traps.c | 5 +
6760 arch/powerpc/mm/slice.c | 2 +-
6761 arch/s390/Kconfig.debug | 1 +
6762 arch/s390/include/asm/cache.h | 4 +-
6763 arch/score/include/asm/cache.h | 4 +-
6764 arch/sh/include/asm/cache.h | 3 +-
6765 arch/sh/mm/mmap.c | 6 +-
6766 arch/sparc/include/asm/cache.h | 4 +-
6767 arch/sparc/include/asm/pgalloc_64.h | 1 +
6768 arch/sparc/include/asm/thread_info_64.h | 8 +-
6769 arch/sparc/kernel/process_32.c | 6 +-
6770 arch/sparc/kernel/process_64.c | 8 +-
6771 arch/sparc/kernel/ptrace_64.c | 14 +
6772 arch/sparc/kernel/sys_sparc_64.c | 8 +-
6773 arch/sparc/kernel/syscalls.S | 8 +-
6774 arch/sparc/kernel/traps_32.c | 8 +-
6775 arch/sparc/kernel/traps_64.c | 28 +-
6776 arch/sparc/kernel/unaligned_64.c | 2 +-
6777 arch/sparc/mm/fault_64.c | 2 +-
6778 arch/sparc/mm/hugetlbpage.c | 15 +-
6779 arch/tile/Kconfig | 1 +
6780 arch/tile/include/asm/cache.h | 3 +-
6781 arch/tile/mm/hugetlbpage.c | 2 +
6782 arch/um/include/asm/cache.h | 3 +-
6783 arch/unicore32/include/asm/cache.h | 6 +-
6784 arch/x86/Kconfig | 21 +
6785 arch/x86/Kconfig.debug | 2 +
6786 arch/x86/entry/common.c | 14 +
6787 arch/x86/entry/entry_32.S | 2 +-
6788 arch/x86/entry/entry_64.S | 2 +-
6789 arch/x86/ia32/ia32_aout.c | 2 +
6790 arch/x86/include/asm/floppy.h | 20 +-
6791 arch/x86/include/asm/fpu/types.h | 69 +-
6792 arch/x86/include/asm/io.h | 2 +-
6793 arch/x86/include/asm/page.h | 12 +-
6794 arch/x86/include/asm/paravirt_types.h | 23 +-
6795 arch/x86/include/asm/pgtable_types.h | 6 +-
6796 arch/x86/include/asm/processor.h | 12 +-
6797 arch/x86/include/asm/thread_info.h | 6 +-
6798 arch/x86/include/asm/uaccess.h | 2 +-
6799 arch/x86/kernel/dumpstack.c | 10 +-
6800 arch/x86/kernel/dumpstack_32.c | 2 +-
6801 arch/x86/kernel/dumpstack_64.c | 2 +-
6802 arch/x86/kernel/ioport.c | 13 +
6803 arch/x86/kernel/irq_32.c | 3 +
6804 arch/x86/kernel/irq_64.c | 4 +
6805 arch/x86/kernel/ldt.c | 18 +
6806 arch/x86/kernel/msr.c | 10 +
6807 arch/x86/kernel/ptrace.c | 14 +
6808 arch/x86/kernel/signal.c | 9 +-
6809 arch/x86/kernel/sys_i386_32.c | 9 +-
6810 arch/x86/kernel/sys_x86_64.c | 8 +-
6811 arch/x86/kernel/traps.c | 5 +
6812 arch/x86/kernel/verify_cpu.S | 1 +
6813 arch/x86/kernel/vm86_32.c | 15 +
6814 arch/x86/mm/fault.c | 12 +-
6815 arch/x86/mm/hugetlbpage.c | 15 +-
6816 arch/x86/mm/init.c | 66 +-
6817 arch/x86/mm/init_32.c | 6 +-
6818 arch/x86/mm/pageattr.c | 4 +-
6819 arch/x86/net/bpf_jit_comp.c | 4 +
6820 arch/x86/platform/efi/efi_64.c | 2 +-
6821 arch/x86/xen/Kconfig | 1 +
6822 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
6823 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
6824 crypto/scatterwalk.c | 10 +-
6825 drivers/acpi/acpica/hwxfsleep.c | 11 +-
6826 drivers/acpi/custom_method.c | 4 +
6827 drivers/block/cciss.h | 30 +-
6828 drivers/block/smart1,2.h | 40 +-
6829 drivers/cdrom/cdrom.c | 2 +-
6830 drivers/char/Kconfig | 4 +-
6831 drivers/char/genrtc.c | 1 +
6832 drivers/char/mem.c | 17 +
6833 drivers/char/random.c | 5 +-
6834 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
6835 drivers/firewire/ohci.c | 4 +
6836 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
6837 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
6838 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
6839 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
6840 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
6841 drivers/hid/hid-wiimote-debug.c | 2 +-
6842 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
6843 drivers/iommu/Kconfig | 1 +
6844 drivers/iommu/amd_iommu.c | 14 +-
6845 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
6846 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
6847 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
6848 drivers/isdn/i4l/isdn_concap.c | 6 +-
6849 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
6850 drivers/md/bcache/Kconfig | 1 +
6851 drivers/md/raid5.c | 8 +
6852 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
6853 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
6854 drivers/media/radio/radio-cadet.c | 5 +-
6855 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
6856 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
6857 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
6858 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
6859 drivers/message/fusion/mptbase.c | 9 +
6860 drivers/misc/sgi-xp/xp_main.c | 12 +-
6861 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
6862 drivers/net/ppp/pptp.c | 34 +-
6863 drivers/net/wan/lmc/lmc_media.c | 97 +-
6864 drivers/net/wan/z85230.c | 24 +-
6865 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
6866 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
6867 drivers/pci/proc.c | 9 +
6868 drivers/platform/x86/asus-wmi.c | 12 +
6869 drivers/rtc/rtc-dev.c | 3 +
6870 drivers/scsi/bfa/bfa_fcs.c | 19 +-
6871 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
6872 drivers/scsi/bfa/bfa_modules.h | 12 +-
6873 drivers/scsi/hpsa.h | 40 +-
6874 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
6875 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
6876 drivers/tty/serial/uartlite.c | 4 +-
6877 drivers/tty/sysrq.c | 2 +-
6878 drivers/tty/tty_io.c | 4 +
6879 drivers/tty/vt/keyboard.c | 22 +-
6880 drivers/uio/uio.c | 6 +-
6881 drivers/usb/core/hub.c | 5 +
6882 drivers/usb/gadget/function/f_uac1.c | 1 +
6883 drivers/usb/gadget/function/u_uac1.c | 1 +
6884 drivers/usb/host/hwa-hc.c | 9 +-
6885 drivers/usb/usbip/vhci_sysfs.c | 2 +-
6886 drivers/video/fbdev/arcfb.c | 2 +-
6887 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
6888 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
6889 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
6890 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
6891 drivers/xen/xenfs/xenstored.c | 5 +
6892 firmware/Makefile | 2 +
6893 firmware/WHENCE | 20 +-
6894 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
6895 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
6896 fs/attr.c | 4 +
6897 fs/autofs4/waitq.c | 9 +
6898 fs/binfmt_aout.c | 7 +
6899 fs/binfmt_elf.c | 40 +-
6900 fs/compat.c | 20 +-
6901 fs/compat_ioctl.c | 253 +-
6902 fs/coredump.c | 17 +-
6903 fs/dcache.c | 3 +
6904 fs/debugfs/inode.c | 11 +-
6905 fs/exec.c | 231 +-
6906 fs/ext2/balloc.c | 4 +-
6907 fs/ext2/super.c | 8 +-
6908 fs/ext4/balloc.c | 4 +-
6909 fs/ext4/extents.c | 2 +-
6910 fs/fcntl.c | 4 +
6911 fs/fhandle.c | 3 +-
6912 fs/file.c | 4 +
6913 fs/filesystems.c | 4 +
6914 fs/fs_struct.c | 20 +-
6915 fs/hugetlbfs/inode.c | 24 +-
6916 fs/inode.c | 8 +-
6917 fs/internal.h | 7 +
6918 fs/ioctl.c | 4 +-
6919 fs/kernfs/dir.c | 6 +
6920 fs/mount.h | 4 +-
6921 fs/namei.c | 283 +-
6922 fs/namespace.c | 24 +
6923 fs/nfsd/nfscache.c | 2 +-
6924 fs/open.c | 38 +
6925 fs/overlayfs/inode.c | 3 +
6926 fs/overlayfs/super.c | 6 +-
6927 fs/pipe.c | 49 +-
6928 fs/posix_acl.c | 15 +-
6929 fs/proc/Kconfig | 10 +-
6930 fs/proc/array.c | 69 +-
6931 fs/proc/base.c | 186 +-
6932 fs/proc/cmdline.c | 4 +
6933 fs/proc/devices.c | 4 +
6934 fs/proc/fd.c | 12 +-
6935 fs/proc/generic.c | 64 +
6936 fs/proc/inode.c | 17 +
6937 fs/proc/internal.h | 11 +-
6938 fs/proc/interrupts.c | 4 +
6939 fs/proc/kcore.c | 3 +
6940 fs/proc/namespaces.c | 4 +-
6941 fs/proc/proc_net.c | 31 +
6942 fs/proc/proc_sysctl.c | 52 +-
6943 fs/proc/root.c | 8 +
6944 fs/proc/stat.c | 69 +-
6945 fs/proc/task_mmu.c | 66 +-
6946 fs/readdir.c | 19 +
6947 fs/reiserfs/item_ops.c | 24 +-
6948 fs/reiserfs/super.c | 4 +
6949 fs/select.c | 2 +
6950 fs/seq_file.c | 30 +-
6951 fs/stat.c | 20 +-
6952 fs/sysfs/dir.c | 30 +-
6953 fs/utimes.c | 7 +
6954 fs/xattr.c | 26 +-
6955 grsecurity/Kconfig | 1203 ++++
6956 grsecurity/Makefile | 54 +
6957 grsecurity/gracl.c | 2757 +++++++++
6958 grsecurity/gracl_alloc.c | 105 +
6959 grsecurity/gracl_cap.c | 127 +
6960 grsecurity/gracl_compat.c | 269 +
6961 grsecurity/gracl_fs.c | 448 ++
6962 grsecurity/gracl_ip.c | 386 ++
6963 grsecurity/gracl_learn.c | 207 +
6964 grsecurity/gracl_policy.c | 1786 ++++++
6965 grsecurity/gracl_res.c | 68 +
6966 grsecurity/gracl_segv.c | 304 +
6967 grsecurity/gracl_shm.c | 40 +
6968 grsecurity/grsec_chdir.c | 19 +
6969 grsecurity/grsec_chroot.c | 467 ++
6970 grsecurity/grsec_disabled.c | 445 ++
6971 grsecurity/grsec_exec.c | 189 +
6972 grsecurity/grsec_fifo.c | 26 +
6973 grsecurity/grsec_fork.c | 23 +
6974 grsecurity/grsec_init.c | 294 +
6975 grsecurity/grsec_ipc.c | 48 +
6976 grsecurity/grsec_link.c | 65 +
6977 grsecurity/grsec_log.c | 340 +
6978 grsecurity/grsec_mem.c | 48 +
6979 grsecurity/grsec_mount.c | 65 +
6980 grsecurity/grsec_pax.c | 47 +
6981 grsecurity/grsec_proc.c | 20 +
6982 grsecurity/grsec_ptrace.c | 30 +
6983 grsecurity/grsec_sig.c | 245 +
6984 grsecurity/grsec_sock.c | 244 +
6985 grsecurity/grsec_sysctl.c | 497 ++
6986 grsecurity/grsec_time.c | 16 +
6987 grsecurity/grsec_tpe.c | 78 +
6988 grsecurity/grsec_tty.c | 18 +
6989 grsecurity/grsec_usb.c | 15 +
6990 grsecurity/grsum.c | 54 +
6991 include/linux/binfmts.h | 5 +-
6992 include/linux/capability.h | 13 +
6993 include/linux/compiler-gcc.h | 5 +
6994 include/linux/compiler.h | 8 +
6995 include/linux/cred.h | 8 +-
6996 include/linux/dcache.h | 5 +-
6997 include/linux/fs.h | 26 +-
6998 include/linux/fs_struct.h | 2 +-
6999 include/linux/fsnotify.h | 6 +
7000 include/linux/gracl.h | 342 ++
7001 include/linux/gracl_compat.h | 156 +
7002 include/linux/gralloc.h | 9 +
7003 include/linux/grdefs.h | 140 +
7004 include/linux/grinternal.h | 231 +
7005 include/linux/grmsg.h | 119 +
7006 include/linux/grsecurity.h | 258 +
7007 include/linux/grsock.h | 19 +
7008 include/linux/ipc.h | 2 +-
7009 include/linux/ipc_namespace.h | 2 +-
7010 include/linux/kallsyms.h | 18 +-
7011 include/linux/key-type.h | 4 +-
7012 include/linux/kmod.h | 5 +
7013 include/linux/kobject.h | 2 +-
7014 include/linux/lsm_hooks.h | 4 +-
7015 include/linux/mm.h | 12 +
7016 include/linux/mm_types.h | 4 +-
7017 include/linux/module.h | 5 +-
7018 include/linux/mount.h | 2 +-
7019 include/linux/msg.h | 2 +-
7020 include/linux/netfilter/xt_gradm.h | 9 +
7021 include/linux/path.h | 4 +-
7022 include/linux/perf_event.h | 13 +-
7023 include/linux/pid_namespace.h | 2 +-
7024 include/linux/pipe_fs_i.h | 4 +
7025 include/linux/poison.h | 2 +-
7026 include/linux/printk.h | 2 +-
7027 include/linux/proc_fs.h | 22 +-
7028 include/linux/proc_ns.h | 2 +-
7029 include/linux/ptrace.h | 24 +-
7030 include/linux/radix-tree.h | 22 +-
7031 include/linux/random.h | 2 +-
7032 include/linux/rbtree_augmented.h | 4 +-
7033 include/linux/scatterlist.h | 12 +-
7034 include/linux/sched.h | 115 +-
7035 include/linux/security.h | 1 +
7036 include/linux/sem.h | 2 +-
7037 include/linux/seq_file.h | 5 +
7038 include/linux/shm.h | 6 +-
7039 include/linux/shmem_fs.h | 5 +-
7040 include/linux/skbuff.h | 3 +
7041 include/linux/slab.h | 9 -
7042 include/linux/sysctl.h | 8 +-
7043 include/linux/thread_info.h | 6 +-
7044 include/linux/tty.h | 2 +-
7045 include/linux/tty_driver.h | 4 +-
7046 include/linux/uidgid.h | 5 +
7047 include/linux/user_namespace.h | 2 +-
7048 include/linux/utsname.h | 2 +-
7049 include/linux/vermagic.h | 16 +-
7050 include/linux/vmalloc.h | 8 +
7051 include/net/af_unix.h | 6 +-
7052 include/net/ip.h | 2 +-
7053 include/net/neighbour.h | 2 +-
7054 include/net/net_namespace.h | 2 +-
7055 include/net/netfilter/nf_conntrack_core.h | 8 +-
7056 include/net/scm.h | 1 +
7057 include/net/sock.h | 2 +-
7058 include/trace/events/fs.h | 53 +
7059 include/uapi/linux/personality.h | 1 +
7060 init/Kconfig | 2 +
7061 init/main.c | 46 +-
7062 ipc/mqueue.c | 1 +
7063 ipc/msg.c | 3 +-
7064 ipc/msgutil.c | 4 +-
7065 ipc/sem.c | 3 +-
7066 ipc/shm.c | 26 +-
7067 ipc/util.c | 6 +
7068 kernel/auditsc.c | 2 +-
7069 kernel/bpf/syscall.c | 10 +-
7070 kernel/capability.c | 41 +-
7071 kernel/cgroup.c | 5 +-
7072 kernel/compat.c | 1 +
7073 kernel/configs.c | 11 +
7074 kernel/cred.c | 112 +-
7075 kernel/events/core.c | 16 +-
7076 kernel/exit.c | 10 +-
7077 kernel/fork.c | 86 +-
7078 kernel/futex.c | 6 +-
7079 kernel/futex_compat.c | 2 +-
7080 kernel/kallsyms.c | 9 +
7081 kernel/kcmp.c | 8 +-
7082 kernel/kexec_core.c | 2 +-
7083 kernel/kmod.c | 96 +-
7084 kernel/kprobes.c | 9 +-
7085 kernel/ksysfs.c | 2 +
7086 kernel/locking/lockdep_proc.c | 10 +-
7087 kernel/module.c | 108 +-
7088 kernel/panic.c | 4 +-
7089 kernel/pid.c | 18 +-
7090 kernel/power/Kconfig | 2 +
7091 kernel/printk/printk.c | 7 +-
7092 kernel/ptrace.c | 89 +-
7093 kernel/resource.c | 10 +
7094 kernel/sched/core.c | 11 +-
7095 kernel/seccomp.c | 22 +-
7096 kernel/signal.c | 37 +-
7097 kernel/sys.c | 64 +-
7098 kernel/sysctl.c | 186 +-
7099 kernel/taskstats.c | 6 +
7100 kernel/time/posix-timers.c | 8 +
7101 kernel/time/time.c | 5 +
7102 kernel/time/timekeeping.c | 3 +
7103 kernel/time/timer_list.c | 13 +-
7104 kernel/time/timer_stats.c | 10 +-
7105 kernel/trace/Kconfig | 2 +
7106 kernel/trace/trace_syscalls.c | 8 +
7107 kernel/user_namespace.c | 15 +
7108 lib/Kconfig.debug | 13 +-
7109 lib/Kconfig.kasan | 2 +-
7110 lib/is_single_threaded.c | 3 +
7111 lib/list_debug.c | 65 +-
7112 lib/nlattr.c | 2 +
7113 lib/radix-tree.c | 12 +-
7114 lib/rbtree.c | 4 +-
7115 lib/vsprintf.c | 39 +-
7116 localversion-grsec | 1 +
7117 mm/Kconfig | 8 +-
7118 mm/Kconfig.debug | 1 +
7119 mm/filemap.c | 1 +
7120 mm/kmemleak.c | 4 +-
7121 mm/memory.c | 2 +-
7122 mm/mempolicy.c | 12 +-
7123 mm/migrate.c | 3 +-
7124 mm/mlock.c | 11 +-
7125 mm/mmap.c | 103 +-
7126 mm/mprotect.c | 8 +
7127 mm/oom_kill.c | 4 +
7128 mm/page_alloc.c | 2 +-
7129 mm/process_vm_access.c | 8 +-
7130 mm/shmem.c | 11 +-
7131 mm/slab.c | 14 +-
7132 mm/slab_common.c | 2 +-
7133 mm/slob.c | 12 +
7134 mm/slub.c | 33 +-
7135 mm/util.c | 3 +
7136 mm/vmalloc.c | 82 +-
7137 mm/vmstat.c | 29 +-
7138 net/appletalk/atalk_proc.c | 2 +-
7139 net/atm/lec.c | 6 +-
7140 net/atm/mpoa_caches.c | 42 +-
7141 net/can/bcm.c | 2 +-
7142 net/can/proc.c | 2 +-
7143 net/core/dev_ioctl.c | 7 +-
7144 net/core/filter.c | 8 +-
7145 net/core/net-procfs.c | 17 +-
7146 net/core/pktgen.c | 2 +-
7147 net/core/scm.c | 7 +
7148 net/core/sock.c | 3 +-
7149 net/core/sysctl_net_core.c | 2 +-
7150 net/decnet/dn_dev.c | 2 +-
7151 net/ipv4/Kconfig | 1 +
7152 net/ipv4/devinet.c | 6 +-
7153 net/ipv4/inet_hashtables.c | 4 +
7154 net/ipv4/ip_input.c | 7 +
7155 net/ipv4/ip_sockglue.c | 3 +-
7156 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7157 net/ipv4/route.c | 6 +-
7158 net/ipv4/tcp_input.c | 6 +-
7159 net/ipv4/tcp_ipv4.c | 24 +-
7160 net/ipv4/tcp_minisocks.c | 9 +-
7161 net/ipv4/tcp_timer.c | 11 +
7162 net/ipv4/udp.c | 24 +
7163 net/ipv6/Kconfig | 1 +
7164 net/ipv6/addrconf.c | 13 +-
7165 net/ipv6/proc.c | 2 +-
7166 net/ipv6/tcp_ipv6.c | 23 +-
7167 net/ipv6/udp.c | 7 +
7168 net/ipx/ipx_proc.c | 2 +-
7169 net/irda/irproc.c | 2 +-
7170 net/iucv/af_iucv.c | 3 +
7171 net/llc/llc_proc.c | 2 +-
7172 net/netfilter/Kconfig | 10 +
7173 net/netfilter/Makefile | 1 +
7174 net/netfilter/nf_conntrack_core.c | 46 +-
7175 net/netfilter/nf_conntrack_helper.c | 2 +-
7176 net/netfilter/nf_conntrack_netlink.c | 2 +-
7177 net/netfilter/xt_gradm.c | 51 +
7178 net/netfilter/xt_hashlimit.c | 4 +-
7179 net/netfilter/xt_recent.c | 2 +-
7180 net/openvswitch/actions.c | 19 +-
7181 net/sctp/sm_sideeffect.c | 11 +-
7182 net/sctp/sm_statefuns.c | 17 +-
7183 net/socket.c | 75 +-
7184 net/sunrpc/Kconfig | 1 +
7185 net/sunrpc/cache.c | 2 +-
7186 net/sunrpc/stats.c | 2 +-
7187 net/sysctl_net.c | 2 +-
7188 net/unix/af_unix.c | 57 +-
7189 net/unix/garbage.c | 8 +-
7190 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7191 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7192 net/x25/sysctl_net_x25.c | 2 +-
7193 net/x25/x25_proc.c | 2 +-
7194 scripts/package/Makefile | 2 +-
7195 scripts/package/mkspec | 41 +-
7196 security/Kconfig | 369 +-
7197 security/apparmor/file.c | 4 +-
7198 security/apparmor/lsm.c | 8 +-
7199 security/commoncap.c | 36 +-
7200 security/keys/internal.h | 2 +-
7201 security/min_addr.c | 2 +
7202 security/smack/smack_lsm.c | 8 +-
7203 security/tomoyo/file.c | 12 +-
7204 security/tomoyo/mount.c | 4 +
7205 security/tomoyo/tomoyo.c | 20 +-
7206 security/yama/Kconfig | 2 +-
7207 security/yama/yama_lsm.c | 4 +-
7208 sound/core/timer.c | 4 +-
7209 sound/synth/emux/emux_seq.c | 14 +-
7210 sound/usb/line6/driver.c | 40 +-
7211 sound/usb/line6/toneport.c | 12 +-
7212 tools/gcc/.gitignore | 1 +
7213 tools/gcc/Makefile | 12 +
7214 tools/gcc/gen-random-seed.sh | 8 +
7215 tools/gcc/randomize_layout_plugin.c | 930 +++
7216 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7217 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
7218 513 files changed, 33007 insertions(+), 3251 deletions(-)
7219
7220 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
7221 Author: Brad Spengler <spender@grsecurity.net>
7222 Date: Mon Feb 15 10:51:41 2016 -0500
7223
7224 Initial import of pax-linux-4.4.1-test3.patch
7225
7226 Documentation/dontdiff | 46 +-
7227 Documentation/kbuild/makefiles.txt | 39 +-
7228 Documentation/kernel-parameters.txt | 28 +
7229 Makefile | 119 +-
7230 arch/alpha/include/asm/atomic.h | 10 +
7231 arch/alpha/include/asm/elf.h | 7 +
7232 arch/alpha/include/asm/pgalloc.h | 6 +
7233 arch/alpha/include/asm/pgtable.h | 11 +
7234 arch/alpha/kernel/module.c | 2 +-
7235 arch/alpha/kernel/osf_sys.c | 8 +-
7236 arch/alpha/mm/fault.c | 141 +-
7237 arch/arm/Kconfig | 3 +-
7238 arch/arm/include/asm/atomic.h | 323 +-
7239 arch/arm/include/asm/cache.h | 5 +-
7240 arch/arm/include/asm/cacheflush.h | 2 +-
7241 arch/arm/include/asm/checksum.h | 14 +-
7242 arch/arm/include/asm/cmpxchg.h | 4 +
7243 arch/arm/include/asm/cpuidle.h | 2 +-
7244 arch/arm/include/asm/domain.h | 42 +-
7245 arch/arm/include/asm/elf.h | 9 +-
7246 arch/arm/include/asm/fncpy.h | 2 +
7247 arch/arm/include/asm/futex.h | 1 +
7248 arch/arm/include/asm/kmap_types.h | 2 +-
7249 arch/arm/include/asm/mach/dma.h | 2 +-
7250 arch/arm/include/asm/mach/map.h | 16 +-
7251 arch/arm/include/asm/outercache.h | 2 +-
7252 arch/arm/include/asm/page.h | 3 +-
7253 arch/arm/include/asm/pgalloc.h | 20 +
7254 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7255 arch/arm/include/asm/pgtable-2level.h | 3 +
7256 arch/arm/include/asm/pgtable-3level.h | 3 +
7257 arch/arm/include/asm/pgtable.h | 54 +-
7258 arch/arm/include/asm/smp.h | 2 +-
7259 arch/arm/include/asm/thread_info.h | 3 +
7260 arch/arm/include/asm/tls.h | 3 +
7261 arch/arm/include/asm/uaccess.h | 113 +-
7262 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7263 arch/arm/kernel/armksyms.c | 2 +-
7264 arch/arm/kernel/cpuidle.c | 2 +-
7265 arch/arm/kernel/entry-armv.S | 109 +-
7266 arch/arm/kernel/entry-common.S | 40 +-
7267 arch/arm/kernel/entry-header.S | 55 +
7268 arch/arm/kernel/fiq.c | 3 +
7269 arch/arm/kernel/module-plts.c | 7 +-
7270 arch/arm/kernel/module.c | 38 +-
7271 arch/arm/kernel/patch.c | 2 +
7272 arch/arm/kernel/process.c | 92 +-
7273 arch/arm/kernel/reboot.c | 1 +
7274 arch/arm/kernel/setup.c | 20 +-
7275 arch/arm/kernel/signal.c | 35 +-
7276 arch/arm/kernel/smp.c | 2 +-
7277 arch/arm/kernel/tcm.c | 4 +-
7278 arch/arm/kernel/vmlinux.lds.S | 6 +-
7279 arch/arm/kvm/arm.c | 8 +-
7280 arch/arm/lib/copy_page.S | 1 +
7281 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7282 arch/arm/lib/delay.c | 2 +-
7283 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7284 arch/arm/mach-exynos/suspend.c | 6 +-
7285 arch/arm/mach-mvebu/coherency.c | 4 +-
7286 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7287 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7288 arch/arm/mach-omap2/omap-smp.c | 1 +
7289 arch/arm/mach-omap2/omap_device.c | 4 +-
7290 arch/arm/mach-omap2/omap_device.h | 4 +-
7291 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7292 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7293 arch/arm/mach-omap2/wd_timer.c | 6 +-
7294 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7295 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7296 arch/arm/mach-tegra/irq.c | 1 +
7297 arch/arm/mach-ux500/pm.c | 1 +
7298 arch/arm/mach-zynq/platsmp.c | 1 +
7299 arch/arm/mm/Kconfig | 6 +-
7300 arch/arm/mm/cache-l2x0.c | 2 +-
7301 arch/arm/mm/context.c | 10 +-
7302 arch/arm/mm/fault.c | 146 +
7303 arch/arm/mm/fault.h | 12 +
7304 arch/arm/mm/init.c | 39 +
7305 arch/arm/mm/ioremap.c | 4 +-
7306 arch/arm/mm/mmap.c | 30 +-
7307 arch/arm/mm/mmu.c | 162 +-
7308 arch/arm/net/bpf_jit_32.c | 3 +
7309 arch/arm/plat-iop/setup.c | 2 +-
7310 arch/arm/plat-omap/sram.c | 2 +
7311 arch/arm64/include/asm/atomic.h | 10 +
7312 arch/arm64/include/asm/percpu.h | 8 +-
7313 arch/arm64/include/asm/pgalloc.h | 5 +
7314 arch/arm64/include/asm/uaccess.h | 1 +
7315 arch/arm64/mm/dma-mapping.c | 2 +-
7316 arch/avr32/include/asm/elf.h | 8 +-
7317 arch/avr32/include/asm/kmap_types.h | 4 +-
7318 arch/avr32/mm/fault.c | 27 +
7319 arch/frv/include/asm/atomic.h | 10 +
7320 arch/frv/include/asm/kmap_types.h | 2 +-
7321 arch/frv/mm/elf-fdpic.c | 3 +-
7322 arch/ia64/Makefile | 1 +
7323 arch/ia64/include/asm/atomic.h | 10 +
7324 arch/ia64/include/asm/elf.h | 7 +
7325 arch/ia64/include/asm/pgalloc.h | 12 +
7326 arch/ia64/include/asm/pgtable.h | 13 +-
7327 arch/ia64/include/asm/spinlock.h | 2 +-
7328 arch/ia64/include/asm/uaccess.h | 27 +-
7329 arch/ia64/kernel/module.c | 45 +-
7330 arch/ia64/kernel/palinfo.c | 2 +-
7331 arch/ia64/kernel/sys_ia64.c | 7 +
7332 arch/ia64/kernel/vmlinux.lds.S | 2 +-
7333 arch/ia64/mm/fault.c | 32 +-
7334 arch/ia64/mm/init.c | 15 +-
7335 arch/m32r/lib/usercopy.c | 6 +
7336 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
7337 arch/mips/include/asm/atomic.h | 368 +-
7338 arch/mips/include/asm/elf.h | 7 +
7339 arch/mips/include/asm/exec.h | 2 +-
7340 arch/mips/include/asm/hw_irq.h | 2 +-
7341 arch/mips/include/asm/local.h | 57 +
7342 arch/mips/include/asm/page.h | 2 +-
7343 arch/mips/include/asm/pgalloc.h | 5 +
7344 arch/mips/include/asm/pgtable.h | 3 +
7345 arch/mips/include/asm/uaccess.h | 1 +
7346 arch/mips/kernel/binfmt_elfn32.c | 7 +
7347 arch/mips/kernel/binfmt_elfo32.c | 7 +
7348 arch/mips/kernel/irq-gt641xx.c | 2 +-
7349 arch/mips/kernel/irq.c | 6 +-
7350 arch/mips/kernel/pm-cps.c | 2 +-
7351 arch/mips/kernel/process.c | 12 -
7352 arch/mips/kernel/sync-r4k.c | 24 +-
7353 arch/mips/kernel/traps.c | 13 +-
7354 arch/mips/mm/fault.c | 25 +
7355 arch/mips/mm/mmap.c | 51 +-
7356 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
7357 arch/mips/sni/rm200.c | 2 +-
7358 arch/mips/vr41xx/common/icu.c | 2 +-
7359 arch/mips/vr41xx/common/irq.c | 4 +-
7360 arch/parisc/include/asm/atomic.h | 10 +
7361 arch/parisc/include/asm/elf.h | 7 +
7362 arch/parisc/include/asm/pgalloc.h | 6 +
7363 arch/parisc/include/asm/pgtable.h | 11 +
7364 arch/parisc/include/asm/uaccess.h | 4 +-
7365 arch/parisc/kernel/module.c | 50 +-
7366 arch/parisc/kernel/sys_parisc.c | 15 +
7367 arch/parisc/kernel/traps.c | 4 +-
7368 arch/parisc/mm/fault.c | 140 +-
7369 arch/powerpc/include/asm/atomic.h | 329 +-
7370 arch/powerpc/include/asm/elf.h | 12 +
7371 arch/powerpc/include/asm/exec.h | 2 +-
7372 arch/powerpc/include/asm/kmap_types.h | 2 +-
7373 arch/powerpc/include/asm/local.h | 46 +
7374 arch/powerpc/include/asm/mman.h | 2 +-
7375 arch/powerpc/include/asm/page.h | 8 +-
7376 arch/powerpc/include/asm/page_64.h | 7 +-
7377 arch/powerpc/include/asm/pgalloc-64.h | 7 +
7378 arch/powerpc/include/asm/pgtable.h | 1 +
7379 arch/powerpc/include/asm/pte-hash32.h | 1 +
7380 arch/powerpc/include/asm/reg.h | 1 +
7381 arch/powerpc/include/asm/smp.h | 2 +-
7382 arch/powerpc/include/asm/spinlock.h | 42 +-
7383 arch/powerpc/include/asm/uaccess.h | 141 +-
7384 arch/powerpc/kernel/Makefile | 5 +
7385 arch/powerpc/kernel/exceptions-64e.S | 4 +-
7386 arch/powerpc/kernel/exceptions-64s.S | 2 +-
7387 arch/powerpc/kernel/module_32.c | 15 +-
7388 arch/powerpc/kernel/process.c | 46 -
7389 arch/powerpc/kernel/signal_32.c | 2 +-
7390 arch/powerpc/kernel/signal_64.c | 2 +-
7391 arch/powerpc/kernel/traps.c | 21 +
7392 arch/powerpc/kernel/vdso.c | 5 +-
7393 arch/powerpc/lib/usercopy_64.c | 18 -
7394 arch/powerpc/mm/fault.c | 56 +-
7395 arch/powerpc/mm/mmap.c | 16 +
7396 arch/powerpc/mm/slice.c | 13 +-
7397 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
7398 arch/s390/include/asm/atomic.h | 10 +
7399 arch/s390/include/asm/elf.h | 7 +
7400 arch/s390/include/asm/exec.h | 2 +-
7401 arch/s390/include/asm/uaccess.h | 13 +-
7402 arch/s390/kernel/module.c | 22 +-
7403 arch/s390/kernel/process.c | 20 -
7404 arch/s390/mm/mmap.c | 16 +
7405 arch/score/include/asm/exec.h | 2 +-
7406 arch/score/kernel/process.c | 5 -
7407 arch/sh/mm/mmap.c | 22 +-
7408 arch/sparc/include/asm/atomic_64.h | 110 +-
7409 arch/sparc/include/asm/cache.h | 2 +-
7410 arch/sparc/include/asm/elf_32.h | 7 +
7411 arch/sparc/include/asm/elf_64.h | 7 +
7412 arch/sparc/include/asm/pgalloc_32.h | 1 +
7413 arch/sparc/include/asm/pgalloc_64.h | 1 +
7414 arch/sparc/include/asm/pgtable.h | 4 +
7415 arch/sparc/include/asm/pgtable_32.h | 15 +-
7416 arch/sparc/include/asm/pgtsrmmu.h | 5 +
7417 arch/sparc/include/asm/setup.h | 4 +-
7418 arch/sparc/include/asm/spinlock_64.h | 35 +-
7419 arch/sparc/include/asm/thread_info_32.h | 1 +
7420 arch/sparc/include/asm/thread_info_64.h | 2 +
7421 arch/sparc/include/asm/uaccess.h | 1 +
7422 arch/sparc/include/asm/uaccess_32.h | 28 +-
7423 arch/sparc/include/asm/uaccess_64.h | 24 +-
7424 arch/sparc/kernel/Makefile | 2 +-
7425 arch/sparc/kernel/prom_common.c | 2 +-
7426 arch/sparc/kernel/smp_64.c | 8 +-
7427 arch/sparc/kernel/sys_sparc_32.c | 2 +-
7428 arch/sparc/kernel/sys_sparc_64.c | 52 +-
7429 arch/sparc/kernel/traps_64.c | 27 +-
7430 arch/sparc/lib/Makefile | 2 +-
7431 arch/sparc/lib/atomic_64.S | 57 +-
7432 arch/sparc/lib/ksyms.c | 6 +-
7433 arch/sparc/mm/Makefile | 2 +-
7434 arch/sparc/mm/fault_32.c | 292 +
7435 arch/sparc/mm/fault_64.c | 486 +
7436 arch/sparc/mm/hugetlbpage.c | 22 +-
7437 arch/sparc/mm/init_64.c | 10 +-
7438 arch/tile/include/asm/atomic_64.h | 10 +
7439 arch/tile/include/asm/uaccess.h | 4 +-
7440 arch/um/Makefile | 4 +
7441 arch/um/include/asm/kmap_types.h | 2 +-
7442 arch/um/include/asm/page.h | 3 +
7443 arch/um/include/asm/pgtable-3level.h | 1 +
7444 arch/um/kernel/process.c | 16 -
7445 arch/x86/Kconfig | 26 +-
7446 arch/x86/Kconfig.cpu | 6 +-
7447 arch/x86/Kconfig.debug | 4 +-
7448 arch/x86/Makefile | 13 +-
7449 arch/x86/boot/Makefile | 3 +
7450 arch/x86/boot/bitops.h | 4 +-
7451 arch/x86/boot/boot.h | 2 +-
7452 arch/x86/boot/compressed/Makefile | 3 +
7453 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
7454 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
7455 arch/x86/boot/compressed/head_32.S | 4 +-
7456 arch/x86/boot/compressed/head_64.S | 12 +-
7457 arch/x86/boot/compressed/misc.c | 11 +-
7458 arch/x86/boot/cpucheck.c | 16 +-
7459 arch/x86/boot/header.S | 6 +-
7460 arch/x86/boot/memory.c | 2 +-
7461 arch/x86/boot/video-vesa.c | 1 +
7462 arch/x86/boot/video.c | 2 +-
7463 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
7464 arch/x86/crypto/aesni-intel_asm.S | 106 +-
7465 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
7466 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
7467 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
7468 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
7469 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
7470 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
7471 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
7472 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
7473 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
7474 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
7475 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
7476 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
7477 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
7478 arch/x86/crypto/sha256-avx-asm.S | 2 +
7479 arch/x86/crypto/sha256-avx2-asm.S | 2 +
7480 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
7481 arch/x86/crypto/sha512-avx-asm.S | 2 +
7482 arch/x86/crypto/sha512-avx2-asm.S | 2 +
7483 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
7484 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
7485 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
7486 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
7487 arch/x86/entry/calling.h | 86 +-
7488 arch/x86/entry/common.c | 28 +-
7489 arch/x86/entry/entry_32.S | 311 +-
7490 arch/x86/entry/entry_64.S | 625 +-
7491 arch/x86/entry/entry_64_compat.S | 67 +-
7492 arch/x86/entry/thunk_64.S | 2 +
7493 arch/x86/entry/vdso/Makefile | 2 +-
7494 arch/x86/entry/vdso/vdso2c.h | 8 +-
7495 arch/x86/entry/vdso/vma.c | 37 +-
7496 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
7497 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
7498 arch/x86/ia32/ia32_signal.c | 23 +-
7499 arch/x86/ia32/sys_ia32.c | 42 +-
7500 arch/x86/include/asm/alternative-asm.h | 43 +-
7501 arch/x86/include/asm/alternative.h | 4 +-
7502 arch/x86/include/asm/apic.h | 2 +-
7503 arch/x86/include/asm/apm.h | 4 +-
7504 arch/x86/include/asm/atomic.h | 230 +-
7505 arch/x86/include/asm/atomic64_32.h | 100 +
7506 arch/x86/include/asm/atomic64_64.h | 164 +-
7507 arch/x86/include/asm/bitops.h | 18 +-
7508 arch/x86/include/asm/boot.h | 2 +-
7509 arch/x86/include/asm/cache.h | 5 +-
7510 arch/x86/include/asm/checksum_32.h | 12 +-
7511 arch/x86/include/asm/cmpxchg.h | 39 +
7512 arch/x86/include/asm/compat.h | 4 +
7513 arch/x86/include/asm/cpufeature.h | 17 +-
7514 arch/x86/include/asm/desc.h | 78 +-
7515 arch/x86/include/asm/desc_defs.h | 6 +
7516 arch/x86/include/asm/div64.h | 2 +-
7517 arch/x86/include/asm/dma.h | 2 +
7518 arch/x86/include/asm/elf.h | 33 +-
7519 arch/x86/include/asm/emergency-restart.h | 2 +-
7520 arch/x86/include/asm/fpu/internal.h | 42 +-
7521 arch/x86/include/asm/fpu/types.h | 5 +-
7522 arch/x86/include/asm/futex.h | 14 +-
7523 arch/x86/include/asm/hw_irq.h | 4 +-
7524 arch/x86/include/asm/i8259.h | 2 +-
7525 arch/x86/include/asm/io.h | 22 +-
7526 arch/x86/include/asm/irqflags.h | 5 +
7527 arch/x86/include/asm/kprobes.h | 9 +-
7528 arch/x86/include/asm/local.h | 106 +-
7529 arch/x86/include/asm/mman.h | 15 +
7530 arch/x86/include/asm/mmu.h | 14 +-
7531 arch/x86/include/asm/mmu_context.h | 133 +-
7532 arch/x86/include/asm/module.h | 17 +-
7533 arch/x86/include/asm/nmi.h | 19 +-
7534 arch/x86/include/asm/page.h | 1 +
7535 arch/x86/include/asm/page_32.h | 12 +-
7536 arch/x86/include/asm/page_64.h | 14 +-
7537 arch/x86/include/asm/paravirt.h | 46 +-
7538 arch/x86/include/asm/paravirt_types.h | 15 +-
7539 arch/x86/include/asm/pgalloc.h | 23 +
7540 arch/x86/include/asm/pgtable-2level.h | 2 +
7541 arch/x86/include/asm/pgtable-3level.h | 7 +
7542 arch/x86/include/asm/pgtable.h | 126 +-
7543 arch/x86/include/asm/pgtable_32.h | 14 +-
7544 arch/x86/include/asm/pgtable_32_types.h | 24 +-
7545 arch/x86/include/asm/pgtable_64.h | 23 +-
7546 arch/x86/include/asm/pgtable_64_types.h | 5 +
7547 arch/x86/include/asm/pgtable_types.h | 26 +-
7548 arch/x86/include/asm/pmem.h | 2 +-
7549 arch/x86/include/asm/preempt.h | 2 +-
7550 arch/x86/include/asm/processor.h | 57 +-
7551 arch/x86/include/asm/ptrace.h | 15 +-
7552 arch/x86/include/asm/realmode.h | 4 +-
7553 arch/x86/include/asm/reboot.h | 10 +-
7554 arch/x86/include/asm/rmwcc.h | 84 +-
7555 arch/x86/include/asm/rwsem.h | 60 +-
7556 arch/x86/include/asm/segment.h | 27 +-
7557 arch/x86/include/asm/smap.h | 43 +
7558 arch/x86/include/asm/smp.h | 14 +-
7559 arch/x86/include/asm/stackprotector.h | 4 +-
7560 arch/x86/include/asm/stacktrace.h | 34 +-
7561 arch/x86/include/asm/switch_to.h | 4 +-
7562 arch/x86/include/asm/sys_ia32.h | 6 +-
7563 arch/x86/include/asm/thread_info.h | 27 +-
7564 arch/x86/include/asm/tlbflush.h | 77 +-
7565 arch/x86/include/asm/uaccess.h | 210 +-
7566 arch/x86/include/asm/uaccess_32.h | 28 +-
7567 arch/x86/include/asm/uaccess_64.h | 169 +-
7568 arch/x86/include/asm/word-at-a-time.h | 2 +-
7569 arch/x86/include/asm/x86_init.h | 10 +-
7570 arch/x86/include/asm/xen/page.h | 2 +-
7571 arch/x86/include/uapi/asm/e820.h | 2 +-
7572 arch/x86/kernel/Makefile | 2 +-
7573 arch/x86/kernel/acpi/boot.c | 4 +-
7574 arch/x86/kernel/acpi/sleep.c | 4 +
7575 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
7576 arch/x86/kernel/alternative.c | 124 +-
7577 arch/x86/kernel/apic/apic.c | 4 +-
7578 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
7579 arch/x86/kernel/apic/apic_noop.c | 2 +-
7580 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
7581 arch/x86/kernel/apic/io_apic.c | 8 +-
7582 arch/x86/kernel/apic/msi.c | 2 +-
7583 arch/x86/kernel/apic/probe_32.c | 4 +-
7584 arch/x86/kernel/apic/vector.c | 2 +
7585 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
7586 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
7587 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
7588 arch/x86/kernel/apm_32.c | 21 +-
7589 arch/x86/kernel/asm-offsets.c | 20 +
7590 arch/x86/kernel/asm-offsets_64.c | 1 +
7591 arch/x86/kernel/cpu/Makefile | 4 -
7592 arch/x86/kernel/cpu/amd.c | 2 +-
7593 arch/x86/kernel/cpu/bugs_64.c | 2 +
7594 arch/x86/kernel/cpu/common.c | 202 +-
7595 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
7596 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
7597 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
7598 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
7599 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
7600 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
7601 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
7602 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
7603 arch/x86/kernel/cpu/perf_event.c | 10 +-
7604 arch/x86/kernel/cpu/perf_event.h | 2 +-
7605 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
7606 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
7607 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
7608 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
7609 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
7610 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
7611 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
7612 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
7613 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
7614 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
7615 arch/x86/kernel/crash_dump_64.c | 2 +-
7616 arch/x86/kernel/doublefault.c | 8 +-
7617 arch/x86/kernel/dumpstack.c | 24 +-
7618 arch/x86/kernel/dumpstack_32.c | 25 +-
7619 arch/x86/kernel/dumpstack_64.c | 62 +-
7620 arch/x86/kernel/e820.c | 4 +-
7621 arch/x86/kernel/early_printk.c | 1 +
7622 arch/x86/kernel/espfix_64.c | 44 +-
7623 arch/x86/kernel/fpu/core.c | 24 +-
7624 arch/x86/kernel/fpu/init.c | 40 +-
7625 arch/x86/kernel/fpu/regset.c | 22 +-
7626 arch/x86/kernel/fpu/signal.c | 20 +-
7627 arch/x86/kernel/fpu/xstate.c | 6 +-
7628 arch/x86/kernel/ftrace.c | 18 +-
7629 arch/x86/kernel/head64.c | 14 +-
7630 arch/x86/kernel/head_32.S | 235 +-
7631 arch/x86/kernel/head_64.S | 173 +-
7632 arch/x86/kernel/i386_ksyms_32.c | 12 +
7633 arch/x86/kernel/i8259.c | 10 +-
7634 arch/x86/kernel/io_delay.c | 2 +-
7635 arch/x86/kernel/ioport.c | 2 +-
7636 arch/x86/kernel/irq.c | 8 +-
7637 arch/x86/kernel/irq_32.c | 45 +-
7638 arch/x86/kernel/jump_label.c | 10 +-
7639 arch/x86/kernel/kgdb.c | 21 +-
7640 arch/x86/kernel/kprobes/core.c | 28 +-
7641 arch/x86/kernel/kprobes/opt.c | 16 +-
7642 arch/x86/kernel/ksysfs.c | 2 +-
7643 arch/x86/kernel/kvmclock.c | 20 +-
7644 arch/x86/kernel/ldt.c | 25 +
7645 arch/x86/kernel/livepatch.c | 11 +-
7646 arch/x86/kernel/machine_kexec_32.c | 6 +-
7647 arch/x86/kernel/mcount_64.S | 19 +-
7648 arch/x86/kernel/module.c | 78 +-
7649 arch/x86/kernel/msr.c | 2 +-
7650 arch/x86/kernel/nmi.c | 34 +-
7651 arch/x86/kernel/nmi_selftest.c | 4 +-
7652 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
7653 arch/x86/kernel/paravirt.c | 45 +-
7654 arch/x86/kernel/paravirt_patch_64.c | 8 +
7655 arch/x86/kernel/pci-calgary_64.c | 2 +-
7656 arch/x86/kernel/pci-iommu_table.c | 2 +-
7657 arch/x86/kernel/pci-swiotlb.c | 2 +-
7658 arch/x86/kernel/process.c | 80 +-
7659 arch/x86/kernel/process_32.c | 29 +-
7660 arch/x86/kernel/process_64.c | 14 +-
7661 arch/x86/kernel/ptrace.c | 20 +-
7662 arch/x86/kernel/pvclock.c | 8 +-
7663 arch/x86/kernel/reboot.c | 44 +-
7664 arch/x86/kernel/reboot_fixups_32.c | 2 +-
7665 arch/x86/kernel/relocate_kernel_64.S | 3 +-
7666 arch/x86/kernel/setup.c | 29 +-
7667 arch/x86/kernel/setup_percpu.c | 29 +-
7668 arch/x86/kernel/signal.c | 17 +-
7669 arch/x86/kernel/smp.c | 2 +-
7670 arch/x86/kernel/smpboot.c | 29 +-
7671 arch/x86/kernel/step.c | 6 +-
7672 arch/x86/kernel/sys_i386_32.c | 184 +
7673 arch/x86/kernel/sys_x86_64.c | 22 +-
7674 arch/x86/kernel/tboot.c | 22 +-
7675 arch/x86/kernel/time.c | 8 +-
7676 arch/x86/kernel/tls.c | 7 +-
7677 arch/x86/kernel/tracepoint.c | 4 +-
7678 arch/x86/kernel/traps.c | 53 +-
7679 arch/x86/kernel/tsc.c | 2 +-
7680 arch/x86/kernel/uprobes.c | 4 +-
7681 arch/x86/kernel/vm86_32.c | 6 +-
7682 arch/x86/kernel/vmlinux.lds.S | 153 +-
7683 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
7684 arch/x86/kernel/x86_init.c | 6 +-
7685 arch/x86/kvm/cpuid.c | 21 +-
7686 arch/x86/kvm/emulate.c | 6 +-
7687 arch/x86/kvm/i8259.c | 10 +-
7688 arch/x86/kvm/ioapic.c | 2 +
7689 arch/x86/kvm/lapic.c | 2 +-
7690 arch/x86/kvm/paging_tmpl.h | 2 +-
7691 arch/x86/kvm/svm.c | 10 +-
7692 arch/x86/kvm/vmx.c | 62 +-
7693 arch/x86/kvm/x86.c | 44 +-
7694 arch/x86/lguest/boot.c | 3 +-
7695 arch/x86/lib/atomic64_386_32.S | 164 +
7696 arch/x86/lib/atomic64_cx8_32.S | 98 +-
7697 arch/x86/lib/checksum_32.S | 99 +-
7698 arch/x86/lib/clear_page_64.S | 3 +
7699 arch/x86/lib/cmpxchg16b_emu.S | 3 +
7700 arch/x86/lib/copy_page_64.S | 14 +-
7701 arch/x86/lib/copy_user_64.S | 66 +-
7702 arch/x86/lib/csum-copy_64.S | 14 +-
7703 arch/x86/lib/csum-wrappers_64.c | 8 +-
7704 arch/x86/lib/getuser.S | 74 +-
7705 arch/x86/lib/insn.c | 8 +-
7706 arch/x86/lib/iomap_copy_64.S | 2 +
7707 arch/x86/lib/memcpy_64.S | 6 +
7708 arch/x86/lib/memmove_64.S | 3 +-
7709 arch/x86/lib/memset_64.S | 3 +
7710 arch/x86/lib/mmx_32.c | 243 +-
7711 arch/x86/lib/msr-reg.S | 2 +
7712 arch/x86/lib/putuser.S | 87 +-
7713 arch/x86/lib/rwsem.S | 6 +-
7714 arch/x86/lib/usercopy_32.c | 359 +-
7715 arch/x86/lib/usercopy_64.c | 22 +-
7716 arch/x86/math-emu/fpu_aux.c | 2 +-
7717 arch/x86/math-emu/fpu_entry.c | 4 +-
7718 arch/x86/math-emu/fpu_system.h | 2 +-
7719 arch/x86/mm/Makefile | 4 +
7720 arch/x86/mm/extable.c | 26 +-
7721 arch/x86/mm/fault.c | 570 +-
7722 arch/x86/mm/gup.c | 6 +-
7723 arch/x86/mm/highmem_32.c | 6 +
7724 arch/x86/mm/hugetlbpage.c | 24 +-
7725 arch/x86/mm/init.c | 111 +-
7726 arch/x86/mm/init_32.c | 111 +-
7727 arch/x86/mm/init_64.c | 46 +-
7728 arch/x86/mm/iomap_32.c | 4 +
7729 arch/x86/mm/ioremap.c | 52 +-
7730 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
7731 arch/x86/mm/mmap.c | 40 +-
7732 arch/x86/mm/mmio-mod.c | 10 +-
7733 arch/x86/mm/mpx.c | 6 +-
7734 arch/x86/mm/numa.c | 4 +-
7735 arch/x86/mm/pageattr.c | 42 +-
7736 arch/x86/mm/pat.c | 12 +-
7737 arch/x86/mm/pat_rbtree.c | 2 +-
7738 arch/x86/mm/pf_in.c | 10 +-
7739 arch/x86/mm/pgtable.c | 214 +-
7740 arch/x86/mm/pgtable_32.c | 3 +
7741 arch/x86/mm/setup_nx.c | 7 +
7742 arch/x86/mm/tlb.c | 4 +
7743 arch/x86/mm/uderef_64.c | 37 +
7744 arch/x86/net/bpf_jit.S | 11 +
7745 arch/x86/net/bpf_jit_comp.c | 13 +-
7746 arch/x86/oprofile/backtrace.c | 6 +-
7747 arch/x86/oprofile/nmi_int.c | 8 +-
7748 arch/x86/oprofile/op_model_amd.c | 8 +-
7749 arch/x86/oprofile/op_model_ppro.c | 7 +-
7750 arch/x86/oprofile/op_x86_model.h | 2 +-
7751 arch/x86/pci/intel_mid_pci.c | 2 +-
7752 arch/x86/pci/irq.c | 8 +-
7753 arch/x86/pci/pcbios.c | 144 +-
7754 arch/x86/platform/efi/efi_32.c | 24 +
7755 arch/x86/platform/efi/efi_64.c | 26 +-
7756 arch/x86/platform/efi/efi_stub_32.S | 64 +-
7757 arch/x86/platform/efi/efi_stub_64.S | 2 +
7758 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
7759 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
7760 arch/x86/platform/intel-mid/mfld.c | 4 +-
7761 arch/x86/platform/intel-mid/mrfl.c | 2 +-
7762 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
7763 arch/x86/platform/olpc/olpc_dt.c | 2 +-
7764 arch/x86/power/cpu.c | 11 +-
7765 arch/x86/realmode/init.c | 10 +-
7766 arch/x86/realmode/rm/Makefile | 3 +
7767 arch/x86/realmode/rm/header.S | 4 +-
7768 arch/x86/realmode/rm/reboot.S | 4 +
7769 arch/x86/realmode/rm/trampoline_32.S | 12 +-
7770 arch/x86/realmode/rm/trampoline_64.S | 3 +-
7771 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
7772 arch/x86/tools/Makefile | 2 +-
7773 arch/x86/tools/relocs.c | 96 +-
7774 arch/x86/um/mem_32.c | 2 +-
7775 arch/x86/um/tls_32.c | 2 +-
7776 arch/x86/xen/enlighten.c | 50 +-
7777 arch/x86/xen/mmu.c | 19 +-
7778 arch/x86/xen/smp.c | 16 +-
7779 arch/x86/xen/xen-asm_32.S | 2 +-
7780 arch/x86/xen/xen-head.S | 11 +
7781 arch/x86/xen/xen-ops.h | 2 -
7782 block/bio.c | 4 +-
7783 block/blk-cgroup.c | 18 +-
7784 block/blk-iopoll.c | 2 +-
7785 block/blk-map.c | 2 +-
7786 block/blk-softirq.c | 2 +-
7787 block/bsg.c | 12 +-
7788 block/cfq-iosched.c | 4 +-
7789 block/compat_ioctl.c | 4 +-
7790 block/genhd.c | 9 +-
7791 block/partitions/efi.c | 8 +-
7792 block/scsi_ioctl.c | 29 +-
7793 crypto/cryptd.c | 4 +-
7794 crypto/crypto_user.c | 8 +-
7795 crypto/pcrypt.c | 2 +-
7796 crypto/zlib.c | 12 +-
7797 drivers/acpi/acpi_video.c | 2 +-
7798 drivers/acpi/apei/apei-internal.h | 2 +-
7799 drivers/acpi/apei/ghes.c | 10 +-
7800 drivers/acpi/bgrt.c | 6 +-
7801 drivers/acpi/blacklist.c | 4 +-
7802 drivers/acpi/bus.c | 4 +-
7803 drivers/acpi/device_pm.c | 4 +-
7804 drivers/acpi/ec.c | 2 +-
7805 drivers/acpi/pci_slot.c | 2 +-
7806 drivers/acpi/processor_idle.c | 2 +-
7807 drivers/acpi/processor_pdc.c | 2 +-
7808 drivers/acpi/sleep.c | 2 +-
7809 drivers/acpi/sysfs.c | 4 +-
7810 drivers/acpi/thermal.c | 2 +-
7811 drivers/acpi/video_detect.c | 7 +-
7812 drivers/ata/libata-core.c | 12 +-
7813 drivers/ata/libata-scsi.c | 2 +-
7814 drivers/ata/libata.h | 2 +-
7815 drivers/ata/pata_arasan_cf.c | 4 +-
7816 drivers/atm/adummy.c | 2 +-
7817 drivers/atm/ambassador.c | 8 +-
7818 drivers/atm/atmtcp.c | 14 +-
7819 drivers/atm/eni.c | 10 +-
7820 drivers/atm/firestream.c | 8 +-
7821 drivers/atm/fore200e.c | 14 +-
7822 drivers/atm/he.c | 18 +-
7823 drivers/atm/horizon.c | 4 +-
7824 drivers/atm/idt77252.c | 36 +-
7825 drivers/atm/iphase.c | 34 +-
7826 drivers/atm/lanai.c | 12 +-
7827 drivers/atm/nicstar.c | 46 +-
7828 drivers/atm/solos-pci.c | 4 +-
7829 drivers/atm/suni.c | 4 +-
7830 drivers/atm/uPD98402.c | 16 +-
7831 drivers/atm/zatm.c | 6 +-
7832 drivers/base/bus.c | 4 +-
7833 drivers/base/devres.c | 4 +-
7834 drivers/base/devtmpfs.c | 8 +-
7835 drivers/base/node.c | 2 +-
7836 drivers/base/platform-msi.c | 20 +-
7837 drivers/base/power/domain.c | 7 +-
7838 drivers/base/power/runtime.c | 6 +-
7839 drivers/base/power/sysfs.c | 2 +-
7840 drivers/base/power/wakeup.c | 8 +-
7841 drivers/base/regmap/regmap-debugfs.c | 4 +-
7842 drivers/base/regmap/regmap.c | 4 +-
7843 drivers/base/syscore.c | 4 +-
7844 drivers/block/cciss.c | 28 +-
7845 drivers/block/cciss.h | 2 +-
7846 drivers/block/cpqarray.c | 28 +-
7847 drivers/block/cpqarray.h | 2 +-
7848 drivers/block/drbd/drbd_bitmap.c | 2 +-
7849 drivers/block/drbd/drbd_int.h | 8 +-
7850 drivers/block/drbd/drbd_main.c | 12 +-
7851 drivers/block/drbd/drbd_nl.c | 4 +-
7852 drivers/block/drbd/drbd_receiver.c | 38 +-
7853 drivers/block/drbd/drbd_worker.c | 14 +-
7854 drivers/block/pktcdvd.c | 4 +-
7855 drivers/block/rbd.c | 2 +-
7856 drivers/bluetooth/btwilink.c | 2 +-
7857 drivers/bus/arm-cci.c | 12 +-
7858 drivers/cdrom/cdrom.c | 11 +-
7859 drivers/cdrom/gdrom.c | 1 -
7860 drivers/char/agp/compat_ioctl.c | 2 +-
7861 drivers/char/agp/frontend.c | 4 +-
7862 drivers/char/agp/intel-gtt.c | 4 +-
7863 drivers/char/hpet.c | 2 +-
7864 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
7865 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
7866 drivers/char/ipmi/ipmi_ssif.c | 12 +-
7867 drivers/char/mem.c | 47 +-
7868 drivers/char/nvram.c | 2 +-
7869 drivers/char/pcmcia/synclink_cs.c | 16 +-
7870 drivers/char/random.c | 12 +-
7871 drivers/char/sonypi.c | 11 +-
7872 drivers/char/tpm/tpm_acpi.c | 3 +-
7873 drivers/char/tpm/tpm_eventlog.c | 5 +-
7874 drivers/char/virtio_console.c | 6 +-
7875 drivers/clk/clk-composite.c | 2 +-
7876 drivers/clk/samsung/clk.h | 2 +-
7877 drivers/clk/socfpga/clk-gate.c | 9 +-
7878 drivers/clk/socfpga/clk-pll.c | 9 +-
7879 drivers/clk/ti/clk.c | 8 +-
7880 drivers/cpufreq/acpi-cpufreq.c | 17 +-
7881 drivers/cpufreq/cpufreq-dt.c | 4 +-
7882 drivers/cpufreq/cpufreq.c | 30 +-
7883 drivers/cpufreq/cpufreq_governor.c | 2 +-
7884 drivers/cpufreq/cpufreq_governor.h | 4 +-
7885 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
7886 drivers/cpufreq/intel_pstate.c | 38 +-
7887 drivers/cpufreq/p4-clockmod.c | 12 +-
7888 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
7889 drivers/cpufreq/speedstep-centrino.c | 7 +-
7890 drivers/cpuidle/driver.c | 2 +-
7891 drivers/cpuidle/dt_idle_states.c | 2 +-
7892 drivers/cpuidle/governor.c | 2 +-
7893 drivers/cpuidle/sysfs.c | 2 +-
7894 drivers/crypto/hifn_795x.c | 4 +-
7895 drivers/devfreq/devfreq.c | 4 +-
7896 drivers/dma/sh/shdma-base.c | 4 +-
7897 drivers/dma/sh/shdmac.c | 2 +-
7898 drivers/edac/edac_device.c | 4 +-
7899 drivers/edac/edac_mc_sysfs.c | 2 +-
7900 drivers/edac/edac_pci.c | 4 +-
7901 drivers/edac/edac_pci_sysfs.c | 22 +-
7902 drivers/edac/mce_amd.h | 2 +-
7903 drivers/firewire/core-card.c | 6 +-
7904 drivers/firewire/core-device.c | 2 +-
7905 drivers/firewire/core-transaction.c | 1 +
7906 drivers/firewire/core.h | 1 +
7907 drivers/firmware/dmi-id.c | 2 +-
7908 drivers/firmware/dmi_scan.c | 12 +-
7909 drivers/firmware/efi/cper.c | 8 +-
7910 drivers/firmware/efi/efi.c | 12 +-
7911 drivers/firmware/efi/efivars.c | 2 +-
7912 drivers/firmware/efi/runtime-map.c | 2 +-
7913 drivers/firmware/google/gsmi.c | 2 +-
7914 drivers/firmware/google/memconsole.c | 7 +-
7915 drivers/firmware/memmap.c | 2 +-
7916 drivers/firmware/psci.c | 2 +-
7917 drivers/gpio/gpio-davinci.c | 6 +-
7918 drivers/gpio/gpio-em.c | 2 +-
7919 drivers/gpio/gpio-ich.c | 2 +-
7920 drivers/gpio/gpio-omap.c | 4 +-
7921 drivers/gpio/gpio-rcar.c | 2 +-
7922 drivers/gpio/gpio-vr41xx.c | 2 +-
7923 drivers/gpio/gpiolib.c | 12 +-
7924 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
7925 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
7926 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
7927 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
7928 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
7929 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
7930 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
7931 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
7932 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
7933 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
7934 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
7935 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
7936 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
7937 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
7938 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
7939 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
7940 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
7941 drivers/gpu/drm/armada/armada_drv.c | 3 +-
7942 drivers/gpu/drm/drm_crtc.c | 2 +-
7943 drivers/gpu/drm/drm_drv.c | 2 +-
7944 drivers/gpu/drm/drm_fops.c | 12 +-
7945 drivers/gpu/drm/drm_global.c | 14 +-
7946 drivers/gpu/drm/drm_info.c | 13 +-
7947 drivers/gpu/drm/drm_ioc32.c | 13 +-
7948 drivers/gpu/drm/drm_ioctl.c | 2 +-
7949 drivers/gpu/drm/drm_pci.c | 9 +-
7950 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
7951 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
7952 drivers/gpu/drm/gma500/psb_drv.c | 1 -
7953 drivers/gpu/drm/i810/i810_dma.c | 2 +-
7954 drivers/gpu/drm/i810/i810_drv.c | 6 +-
7955 drivers/gpu/drm/i810/i810_drv.h | 6 +-
7956 drivers/gpu/drm/i915/i915_dma.c | 4 +-
7957 drivers/gpu/drm/i915/i915_drv.c | 7 +-
7958 drivers/gpu/drm/i915/i915_drv.h | 2 +-
7959 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
7960 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
7961 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
7962 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
7963 drivers/gpu/drm/i915/i915_irq.c | 88 +-
7964 drivers/gpu/drm/i915/intel_display.c | 26 +-
7965 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
7966 drivers/gpu/drm/mga/mga_drv.c | 5 +-
7967 drivers/gpu/drm/mga/mga_drv.h | 6 +-
7968 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
7969 drivers/gpu/drm/mga/mga_irq.c | 8 +-
7970 drivers/gpu/drm/mga/mga_state.c | 2 +-
7971 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
7972 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
7973 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
7974 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
7975 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
7976 drivers/gpu/drm/omapdrm/Makefile | 2 +-
7977 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
7978 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
7979 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
7980 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
7981 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
7982 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
7983 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
7984 drivers/gpu/drm/r128/r128_cce.c | 2 +-
7985 drivers/gpu/drm/r128/r128_drv.c | 4 +-
7986 drivers/gpu/drm/r128/r128_drv.h | 6 +-
7987 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
7988 drivers/gpu/drm/r128/r128_irq.c | 4 +-
7989 drivers/gpu/drm/r128/r128_state.c | 6 +-
7990 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
7991 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
7992 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
7993 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
7994 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
7995 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
7996 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
7997 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
7998 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
7999 drivers/gpu/drm/savage/savage_bci.c | 2 +-
8000 drivers/gpu/drm/savage/savage_drv.c | 5 +-
8001 drivers/gpu/drm/savage/savage_drv.h | 2 +-
8002 drivers/gpu/drm/sis/sis_drv.c | 5 +-
8003 drivers/gpu/drm/sis/sis_drv.h | 2 +-
8004 drivers/gpu/drm/sis/sis_mm.c | 2 +-
8005 drivers/gpu/drm/tegra/dc.c | 2 +-
8006 drivers/gpu/drm/tegra/dsi.c | 2 +-
8007 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8008 drivers/gpu/drm/tegra/sor.c | 7 +-
8009 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8010 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8011 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8012 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8013 drivers/gpu/drm/udl/udl_fb.c | 1 -
8014 drivers/gpu/drm/via/via_dma.c | 2 +-
8015 drivers/gpu/drm/via/via_drv.c | 5 +-
8016 drivers/gpu/drm/via/via_drv.h | 6 +-
8017 drivers/gpu/drm/via/via_irq.c | 18 +-
8018 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8019 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8020 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8021 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8022 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8023 drivers/hid/hid-core.c | 4 +-
8024 drivers/hid/hid-sensor-custom.c | 2 +-
8025 drivers/hv/channel.c | 6 +-
8026 drivers/hv/hv.c | 4 +-
8027 drivers/hv/hv_balloon.c | 18 +-
8028 drivers/hv/hyperv_vmbus.h | 2 +-
8029 drivers/hwmon/acpi_power_meter.c | 6 +-
8030 drivers/hwmon/applesmc.c | 2 +-
8031 drivers/hwmon/asus_atk0110.c | 10 +-
8032 drivers/hwmon/coretemp.c | 2 +-
8033 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8034 drivers/hwmon/ibmaem.c | 2 +-
8035 drivers/hwmon/iio_hwmon.c | 2 +-
8036 drivers/hwmon/nct6683.c | 6 +-
8037 drivers/hwmon/nct6775.c | 6 +-
8038 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8039 drivers/hwmon/sht15.c | 12 +-
8040 drivers/hwmon/via-cputemp.c | 2 +-
8041 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8042 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
8043 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8044 drivers/i2c/i2c-dev.c | 2 +-
8045 drivers/ide/ide-cd.c | 2 +-
8046 drivers/ide/ide-disk.c | 2 +-
8047 drivers/iio/industrialio-core.c | 2 +-
8048 drivers/iio/magnetometer/ak8975.c | 2 +-
8049 drivers/infiniband/core/cm.c | 32 +-
8050 drivers/infiniband/core/fmr_pool.c | 20 +-
8051 drivers/infiniband/core/netlink.c | 5 +-
8052 drivers/infiniband/core/uverbs_cmd.c | 3 +
8053 drivers/infiniband/hw/cxgb4/device.c | 6 +-
8054 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
8055 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8056 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8057 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8058 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8059 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8060 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8061 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8062 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8063 drivers/infiniband/hw/nes/nes.c | 4 +-
8064 drivers/infiniband/hw/nes/nes.h | 40 +-
8065 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8066 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8067 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8068 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8069 drivers/infiniband/hw/qib/qib.h | 1 +
8070 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8071 drivers/input/evdev.c | 2 +-
8072 drivers/input/gameport/gameport.c | 4 +-
8073 drivers/input/input.c | 4 +-
8074 drivers/input/joystick/sidewinder.c | 1 +
8075 drivers/input/misc/ims-pcu.c | 4 +-
8076 drivers/input/mouse/psmouse.h | 2 +-
8077 drivers/input/mousedev.c | 2 +-
8078 drivers/input/serio/serio.c | 4 +-
8079 drivers/input/serio/serio_raw.c | 4 +-
8080 drivers/input/touchscreen/htcpen.c | 2 +-
8081 drivers/iommu/arm-smmu-v3.c | 2 +-
8082 drivers/iommu/arm-smmu.c | 43 +-
8083 drivers/iommu/io-pgtable-arm.c | 101 +-
8084 drivers/iommu/io-pgtable.c | 11 +-
8085 drivers/iommu/io-pgtable.h | 19 +-
8086 drivers/iommu/iommu.c | 2 +-
8087 drivers/iommu/ipmmu-vmsa.c | 13 +-
8088 drivers/iommu/irq_remapping.c | 2 +-
8089 drivers/irqchip/irq-gic.c | 2 +-
8090 drivers/irqchip/irq-i8259.c | 2 +-
8091 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8092 drivers/isdn/capi/capi.c | 10 +-
8093 drivers/isdn/gigaset/interface.c | 8 +-
8094 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8095 drivers/isdn/hardware/avm/b1.c | 4 +-
8096 drivers/isdn/i4l/isdn_common.c | 2 +
8097 drivers/isdn/i4l/isdn_tty.c | 22 +-
8098 drivers/isdn/icn/icn.c | 2 +-
8099 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8100 drivers/lguest/core.c | 10 +-
8101 drivers/lguest/page_tables.c | 2 +-
8102 drivers/lguest/x86/core.c | 12 +-
8103 drivers/lguest/x86/switcher_32.S | 27 +-
8104 drivers/md/bcache/alloc.c | 2 +-
8105 drivers/md/bcache/bcache.h | 10 +-
8106 drivers/md/bcache/btree.c | 2 +-
8107 drivers/md/bcache/closure.h | 2 +-
8108 drivers/md/bcache/io.c | 10 +-
8109 drivers/md/bcache/journal.c | 2 +-
8110 drivers/md/bcache/stats.c | 26 +-
8111 drivers/md/bcache/stats.h | 16 +-
8112 drivers/md/bcache/super.c | 2 +-
8113 drivers/md/bcache/sysfs.c | 20 +-
8114 drivers/md/bitmap.c | 2 +-
8115 drivers/md/dm-cache-target.c | 98 +-
8116 drivers/md/dm-ioctl.c | 2 +-
8117 drivers/md/dm-raid.c | 2 +-
8118 drivers/md/dm-raid1.c | 18 +-
8119 drivers/md/dm-stats.c | 6 +-
8120 drivers/md/dm-stripe.c | 10 +-
8121 drivers/md/dm-table.c | 2 +-
8122 drivers/md/dm-thin-metadata.c | 4 +-
8123 drivers/md/dm.c | 28 +-
8124 drivers/md/md.c | 37 +-
8125 drivers/md/md.h | 8 +-
8126 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8127 drivers/md/persistent-data/dm-space-map.h | 1 +
8128 drivers/md/raid1.c | 8 +-
8129 drivers/md/raid10.c | 20 +-
8130 drivers/md/raid5.c | 26 +-
8131 drivers/media/dvb-core/dvbdev.c | 2 +-
8132 drivers/media/dvb-frontends/af9033.h | 2 +-
8133 drivers/media/dvb-frontends/dib3000.h | 2 +-
8134 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8135 drivers/media/dvb-frontends/dib8000.h | 2 +-
8136 drivers/media/pci/cx88/cx88-video.c | 6 +-
8137 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8138 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8139 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8140 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8141 drivers/media/pci/tw68/tw68-core.c | 2 +-
8142 drivers/media/pci/zoran/zoran.h | 1 -
8143 drivers/media/pci/zoran/zoran_driver.c | 3 -
8144 drivers/media/platform/omap/omap_vout.c | 11 +-
8145 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8146 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8147 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8148 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8149 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8150 drivers/media/radio/radio-cadet.c | 2 +
8151 drivers/media/radio/radio-maxiradio.c | 2 +-
8152 drivers/media/radio/radio-shark.c | 2 +-
8153 drivers/media/radio/radio-shark2.c | 2 +-
8154 drivers/media/radio/radio-si476x.c | 2 +-
8155 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8156 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8157 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8158 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8159 drivers/memory/omap-gpmc.c | 21 +-
8160 drivers/message/fusion/mptsas.c | 34 +-
8161 drivers/mfd/ab8500-debugfs.c | 2 +-
8162 drivers/mfd/kempld-core.c | 2 +-
8163 drivers/mfd/max8925-i2c.c | 2 +-
8164 drivers/mfd/tps65910.c | 2 +-
8165 drivers/mfd/twl4030-irq.c | 9 +-
8166 drivers/misc/c2port/core.c | 4 +-
8167 drivers/misc/kgdbts.c | 4 +-
8168 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8169 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8170 drivers/misc/mic/scif/scif_api.c | 10 +-
8171 drivers/misc/mic/scif/scif_rb.c | 8 +-
8172 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8173 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8174 drivers/misc/sgi-gru/grutables.h | 158 +-
8175 drivers/misc/sgi-xp/xp.h | 2 +-
8176 drivers/misc/sgi-xp/xpc.h | 3 +-
8177 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8178 drivers/mmc/host/dw_mmc.h | 2 +-
8179 drivers/mmc/host/mmci.c | 4 +-
8180 drivers/mmc/host/omap_hsmmc.c | 4 +-
8181 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8182 drivers/mmc/host/sdhci-s3c.c | 8 +-
8183 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8184 drivers/mtd/nand/denali.c | 1 +
8185 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8186 drivers/mtd/nftlmount.c | 1 +
8187 drivers/mtd/sm_ftl.c | 2 +-
8188 drivers/net/bonding/bond_netlink.c | 2 +-
8189 drivers/net/caif/caif_hsi.c | 2 +-
8190 drivers/net/can/Kconfig | 2 +-
8191 drivers/net/can/dev.c | 2 +-
8192 drivers/net/can/vcan.c | 2 +-
8193 drivers/net/dummy.c | 2 +-
8194 drivers/net/ethernet/8390/ax88796.c | 4 +-
8195 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8196 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8197 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8198 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8199 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8200 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8201 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8202 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8203 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8204 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8205 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8206 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8207 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8208 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8209 drivers/net/ethernet/broadcom/tg3.h | 1 +
8210 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8211 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8212 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8213 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8214 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8215 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8216 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8217 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8218 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8219 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8220 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8221 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8222 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
8223 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8224 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8225 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8226 drivers/net/ethernet/realtek/r8169.c | 8 +-
8227 drivers/net/ethernet/sfc/ptp.c | 2 +-
8228 drivers/net/ethernet/sfc/selftest.c | 20 +-
8229 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8230 drivers/net/ethernet/via/via-rhine.c | 2 +-
8231 drivers/net/geneve.c | 2 +-
8232 drivers/net/hyperv/hyperv_net.h | 2 +-
8233 drivers/net/hyperv/rndis_filter.c | 7 +-
8234 drivers/net/ifb.c | 2 +-
8235 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8236 drivers/net/irda/vlsi_ir.c | 18 +-
8237 drivers/net/irda/vlsi_ir.h | 14 +-
8238 drivers/net/macvlan.c | 20 +-
8239 drivers/net/macvtap.c | 10 +-
8240 drivers/net/nlmon.c | 2 +-
8241 drivers/net/phy/phy_device.c | 6 +-
8242 drivers/net/ppp/ppp_generic.c | 4 +-
8243 drivers/net/slip/slhc.c | 2 +-
8244 drivers/net/team/team.c | 4 +-
8245 drivers/net/tun.c | 7 +-
8246 drivers/net/usb/hso.c | 23 +-
8247 drivers/net/usb/r8152.c | 2 +-
8248 drivers/net/usb/sierra_net.c | 4 +-
8249 drivers/net/virtio_net.c | 2 +-
8250 drivers/net/vrf.c | 2 +-
8251 drivers/net/vxlan.c | 4 +-
8252 drivers/net/wimax/i2400m/rx.c | 2 +-
8253 drivers/net/wireless/airo.c | 2 +-
8254 drivers/net/wireless/at76c50x-usb.c | 2 +-
8255 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8256 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8257 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8258 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8259 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8260 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8261 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
8262 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
8263 drivers/net/wireless/ath/carl9170/main.c | 10 +-
8264 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
8265 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8266 drivers/net/wireless/b43/phy_lp.c | 2 +-
8267 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8268 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8269 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
8270 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
8271 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8272 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8273 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8274 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8275 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8276 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8277 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8278 drivers/of/fdt.c | 4 +-
8279 drivers/oprofile/buffer_sync.c | 8 +-
8280 drivers/oprofile/event_buffer.c | 2 +-
8281 drivers/oprofile/oprof.c | 2 +-
8282 drivers/oprofile/oprofile_stats.c | 10 +-
8283 drivers/oprofile/oprofile_stats.h | 10 +-
8284 drivers/oprofile/oprofilefs.c | 6 +-
8285 drivers/oprofile/timer_int.c | 2 +-
8286 drivers/parport/procfs.c | 4 +-
8287 drivers/pci/host/pci-host-generic.c | 2 +-
8288 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8289 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8290 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8291 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8292 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8293 drivers/pci/hotplug/pciehp_core.c | 2 +-
8294 drivers/pci/msi.c | 22 +-
8295 drivers/pci/pci-sysfs.c | 6 +-
8296 drivers/pci/pci.h | 2 +-
8297 drivers/pci/pcie/aspm.c | 6 +-
8298 drivers/pci/pcie/portdrv_pci.c | 2 +-
8299 drivers/pci/probe.c | 2 +-
8300 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8301 drivers/pinctrl/pinctrl-at91.c | 5 +-
8302 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8303 drivers/platform/x86/alienware-wmi.c | 4 +-
8304 drivers/platform/x86/compal-laptop.c | 2 +-
8305 drivers/platform/x86/hdaps.c | 2 +-
8306 drivers/platform/x86/ibm_rtl.c | 2 +-
8307 drivers/platform/x86/intel_oaktrail.c | 2 +-
8308 drivers/platform/x86/msi-laptop.c | 16 +-
8309 drivers/platform/x86/msi-wmi.c | 2 +-
8310 drivers/platform/x86/samsung-laptop.c | 2 +-
8311 drivers/platform/x86/samsung-q10.c | 2 +-
8312 drivers/platform/x86/sony-laptop.c | 14 +-
8313 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8314 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8315 drivers/pnp/pnpbios/core.c | 2 +-
8316 drivers/power/pda_power.c | 7 +-
8317 drivers/power/power_supply.h | 4 +-
8318 drivers/power/power_supply_core.c | 7 +-
8319 drivers/power/power_supply_sysfs.c | 6 +-
8320 drivers/power/reset/at91-reset.c | 5 +-
8321 drivers/powercap/powercap_sys.c | 136 +-
8322 drivers/ptp/ptp_private.h | 2 +-
8323 drivers/ptp/ptp_sysfs.c | 2 +-
8324 drivers/regulator/core.c | 4 +-
8325 drivers/regulator/max8660.c | 6 +-
8326 drivers/regulator/max8973-regulator.c | 16 +-
8327 drivers/regulator/mc13892-regulator.c | 8 +-
8328 drivers/rtc/rtc-armada38x.c | 7 +-
8329 drivers/rtc/rtc-cmos.c | 4 +-
8330 drivers/rtc/rtc-ds1307.c | 2 +-
8331 drivers/rtc/rtc-m48t59.c | 4 +-
8332 drivers/rtc/rtc-rv8803.c | 15 +-
8333 drivers/rtc/rtc-test.c | 6 +-
8334 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8335 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8336 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8337 drivers/scsi/hosts.c | 4 +-
8338 drivers/scsi/hpsa.c | 38 +-
8339 drivers/scsi/hpsa.h | 2 +-
8340 drivers/scsi/hptiop.c | 2 -
8341 drivers/scsi/hptiop.h | 1 -
8342 drivers/scsi/ipr.c | 6 +-
8343 drivers/scsi/ipr.h | 2 +-
8344 drivers/scsi/libfc/fc_exch.c | 50 +-
8345 drivers/scsi/libsas/sas_ata.c | 2 +-
8346 drivers/scsi/lpfc/lpfc.h | 8 +-
8347 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8348 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8349 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8350 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8351 drivers/scsi/pmcraid.c | 20 +-
8352 drivers/scsi/pmcraid.h | 8 +-
8353 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8354 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8355 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8356 drivers/scsi/qla2xxx/qla_target.c | 10 +-
8357 drivers/scsi/qla2xxx/qla_target.h | 2 +-
8358 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8359 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8360 drivers/scsi/scsi.c | 2 +-
8361 drivers/scsi/scsi_lib.c | 8 +-
8362 drivers/scsi/scsi_sysfs.c | 2 +-
8363 drivers/scsi/scsi_transport_fc.c | 8 +-
8364 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8365 drivers/scsi/scsi_transport_srp.c | 6 +-
8366 drivers/scsi/sd.c | 6 +-
8367 drivers/scsi/sg.c | 2 +-
8368 drivers/scsi/sr.c | 21 +-
8369 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8370 drivers/spi/spi.c | 2 +-
8371 drivers/staging/android/timed_output.c | 6 +-
8372 drivers/staging/comedi/comedi_fops.c | 8 +-
8373 drivers/staging/fbtft/fbtft-core.c | 2 +-
8374 drivers/staging/fbtft/fbtft.h | 2 +-
8375 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8376 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8377 drivers/staging/iio/adc/ad7280a.c | 4 +-
8378 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8379 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8380 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8381 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8382 drivers/staging/lustre/lustre/include/obd.h | 2 +-
8383 drivers/staging/octeon/ethernet-rx.c | 20 +-
8384 drivers/staging/octeon/ethernet.c | 8 +-
8385 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
8386 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
8387 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
8388 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
8389 drivers/staging/sm750fb/sm750.c | 14 +-
8390 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
8391 drivers/target/sbp/sbp_target.c | 4 +-
8392 drivers/thermal/cpu_cooling.c | 9 +-
8393 drivers/thermal/devfreq_cooling.c | 19 +-
8394 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8395 drivers/thermal/of-thermal.c | 17 +-
8396 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
8397 drivers/tty/cyclades.c | 6 +-
8398 drivers/tty/hvc/hvc_console.c | 14 +-
8399 drivers/tty/hvc/hvcs.c | 21 +-
8400 drivers/tty/hvc/hvsi.c | 22 +-
8401 drivers/tty/hvc/hvsi_lib.c | 4 +-
8402 drivers/tty/ipwireless/tty.c | 27 +-
8403 drivers/tty/moxa.c | 2 +-
8404 drivers/tty/n_gsm.c | 4 +-
8405 drivers/tty/n_tty.c | 19 +-
8406 drivers/tty/pty.c | 4 +-
8407 drivers/tty/rocket.c | 6 +-
8408 drivers/tty/serial/8250/8250_core.c | 10 +-
8409 drivers/tty/serial/ifx6x60.c | 2 +-
8410 drivers/tty/serial/ioc4_serial.c | 6 +-
8411 drivers/tty/serial/kgdb_nmi.c | 4 +-
8412 drivers/tty/serial/kgdboc.c | 32 +-
8413 drivers/tty/serial/msm_serial.c | 4 +-
8414 drivers/tty/serial/samsung.c | 9 +-
8415 drivers/tty/serial/serial_core.c | 8 +-
8416 drivers/tty/synclink.c | 34 +-
8417 drivers/tty/synclink_gt.c | 28 +-
8418 drivers/tty/synclinkmp.c | 34 +-
8419 drivers/tty/tty_io.c | 2 +-
8420 drivers/tty/tty_ldisc.c | 8 +-
8421 drivers/tty/tty_port.c | 22 +-
8422 drivers/uio/uio.c | 13 +-
8423 drivers/usb/atm/cxacru.c | 2 +-
8424 drivers/usb/atm/usbatm.c | 24 +-
8425 drivers/usb/class/cdc-acm.h | 2 +-
8426 drivers/usb/core/devices.c | 6 +-
8427 drivers/usb/core/devio.c | 12 +-
8428 drivers/usb/core/hcd.c | 4 +-
8429 drivers/usb/core/sysfs.c | 2 +-
8430 drivers/usb/core/usb.c | 2 +-
8431 drivers/usb/early/ehci-dbgp.c | 16 +-
8432 drivers/usb/gadget/function/u_serial.c | 22 +-
8433 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
8434 drivers/usb/host/ehci-hcd.c | 2 +-
8435 drivers/usb/host/ehci-hub.c | 4 +-
8436 drivers/usb/host/ehci-q.c | 4 +-
8437 drivers/usb/host/fotg210-hcd.c | 2 +-
8438 drivers/usb/host/hwa-hc.c | 2 +-
8439 drivers/usb/host/ohci-hcd.c | 2 +-
8440 drivers/usb/host/r8a66597.h | 2 +-
8441 drivers/usb/host/uhci-hcd.c | 2 +-
8442 drivers/usb/host/xhci-pci.c | 2 +-
8443 drivers/usb/host/xhci.c | 2 +-
8444 drivers/usb/misc/appledisplay.c | 4 +-
8445 drivers/usb/serial/console.c | 8 +-
8446 drivers/usb/storage/transport.c | 2 +-
8447 drivers/usb/storage/usb.c | 2 +-
8448 drivers/usb/storage/usb.h | 2 +-
8449 drivers/usb/usbip/vhci.h | 2 +-
8450 drivers/usb/usbip/vhci_hcd.c | 6 +-
8451 drivers/usb/usbip/vhci_rx.c | 2 +-
8452 drivers/usb/wusbcore/wa-hc.h | 4 +-
8453 drivers/usb/wusbcore/wa-xfer.c | 2 +-
8454 drivers/vhost/vringh.c | 20 +-
8455 drivers/video/backlight/kb3886_bl.c | 2 +-
8456 drivers/video/console/fbcon.c | 2 +-
8457 drivers/video/fbdev/aty/aty128fb.c | 2 +-
8458 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
8459 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
8460 drivers/video/fbdev/core/fb_defio.c | 6 +-
8461 drivers/video/fbdev/core/fbmem.c | 12 +-
8462 drivers/video/fbdev/hyperv_fb.c | 4 +-
8463 drivers/video/fbdev/i810/i810_accel.c | 1 +
8464 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
8465 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
8466 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
8467 drivers/video/fbdev/omap2/dss/display.c | 8 +-
8468 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
8469 drivers/video/fbdev/smscufx.c | 4 +-
8470 drivers/video/fbdev/udlfb.c | 36 +-
8471 drivers/video/fbdev/uvesafb.c | 52 +-
8472 drivers/video/fbdev/vesafb.c | 58 +-
8473 drivers/video/fbdev/via/via_clock.h | 2 +-
8474 drivers/xen/events/events_base.c | 6 +-
8475 fs/Kconfig.binfmt | 2 +-
8476 fs/afs/inode.c | 4 +-
8477 fs/aio.c | 2 +-
8478 fs/autofs4/waitq.c | 2 +-
8479 fs/befs/endian.h | 6 +-
8480 fs/binfmt_aout.c | 23 +-
8481 fs/binfmt_elf.c | 670 +-
8482 fs/binfmt_elf_fdpic.c | 4 +-
8483 fs/block_dev.c | 2 +-
8484 fs/btrfs/ctree.c | 11 +-
8485 fs/btrfs/ctree.h | 4 +-
8486 fs/btrfs/delayed-inode.c | 9 +-
8487 fs/btrfs/delayed-inode.h | 6 +-
8488 fs/btrfs/delayed-ref.c | 4 +-
8489 fs/btrfs/disk-io.c | 4 +-
8490 fs/btrfs/extent_map.c | 8 +-
8491 fs/btrfs/file.c | 4 +-
8492 fs/btrfs/inode.c | 14 +-
8493 fs/btrfs/raid56.c | 32 +-
8494 fs/btrfs/super.c | 2 +-
8495 fs/btrfs/sysfs.c | 2 +-
8496 fs/btrfs/tests/btrfs-tests.c | 2 +-
8497 fs/btrfs/tests/free-space-tests.c | 8 +-
8498 fs/btrfs/transaction.c | 2 +-
8499 fs/btrfs/tree-log.c | 8 +-
8500 fs/btrfs/tree-log.h | 2 +-
8501 fs/btrfs/volumes.c | 14 +-
8502 fs/btrfs/volumes.h | 22 +-
8503 fs/buffer.c | 2 +-
8504 fs/cachefiles/bind.c | 6 +-
8505 fs/cachefiles/daemon.c | 8 +-
8506 fs/cachefiles/internal.h | 12 +-
8507 fs/cachefiles/namei.c | 2 +-
8508 fs/cachefiles/proc.c | 12 +-
8509 fs/ceph/dir.c | 12 +-
8510 fs/ceph/super.c | 4 +-
8511 fs/cifs/cifs_debug.c | 12 +-
8512 fs/cifs/cifsfs.c | 8 +-
8513 fs/cifs/cifsglob.h | 54 +-
8514 fs/cifs/file.c | 12 +-
8515 fs/cifs/misc.c | 4 +-
8516 fs/cifs/smb1ops.c | 80 +-
8517 fs/cifs/smb2ops.c | 84 +-
8518 fs/cifs/smb2pdu.c | 3 +-
8519 fs/coda/cache.c | 10 +-
8520 fs/compat.c | 7 +-
8521 fs/compat_binfmt_elf.c | 2 +
8522 fs/compat_ioctl.c | 12 +-
8523 fs/configfs/dir.c | 10 +-
8524 fs/coredump.c | 18 +-
8525 fs/dcache.c | 64 +-
8526 fs/ecryptfs/inode.c | 2 +-
8527 fs/ecryptfs/miscdev.c | 2 +-
8528 fs/exec.c | 362 +-
8529 fs/ext2/xattr.c | 5 +-
8530 fs/ext4/ext4.h | 20 +-
8531 fs/ext4/mballoc.c | 44 +-
8532 fs/ext4/resize.c | 16 +-
8533 fs/ext4/super.c | 2 +-
8534 fs/ext4/sysfs.c | 2 +-
8535 fs/ext4/xattr.c | 5 +-
8536 fs/fhandle.c | 5 +-
8537 fs/file.c | 18 +-
8538 fs/fs-writeback.c | 11 +-
8539 fs/fs_struct.c | 8 +-
8540 fs/fscache/cookie.c | 40 +-
8541 fs/fscache/internal.h | 202 +-
8542 fs/fscache/object.c | 26 +-
8543 fs/fscache/operation.c | 38 +-
8544 fs/fscache/page.c | 110 +-
8545 fs/fscache/stats.c | 348 +-
8546 fs/fuse/cuse.c | 10 +-
8547 fs/fuse/dev.c | 4 +-
8548 fs/gfs2/file.c | 2 +-
8549 fs/gfs2/glock.c | 22 +-
8550 fs/gfs2/glops.c | 4 +-
8551 fs/gfs2/quota.c | 6 +-
8552 fs/hugetlbfs/inode.c | 13 +-
8553 fs/inode.c | 4 +-
8554 fs/jbd2/commit.c | 2 +-
8555 fs/jbd2/transaction.c | 4 +-
8556 fs/jffs2/erase.c | 3 +-
8557 fs/jffs2/wbuf.c | 3 +-
8558 fs/jfs/super.c | 2 +-
8559 fs/kernfs/dir.c | 2 +-
8560 fs/kernfs/file.c | 20 +-
8561 fs/libfs.c | 10 +-
8562 fs/lockd/clntproc.c | 4 +-
8563 fs/namei.c | 16 +-
8564 fs/namespace.c | 16 +-
8565 fs/nfs/callback_xdr.c | 2 +-
8566 fs/nfs/inode.c | 6 +-
8567 fs/nfsd/nfs4proc.c | 2 +-
8568 fs/nfsd/nfs4xdr.c | 2 +-
8569 fs/nfsd/nfscache.c | 11 +-
8570 fs/nfsd/vfs.c | 6 +-
8571 fs/nls/nls_base.c | 26 +-
8572 fs/nls/nls_euc-jp.c | 6 +-
8573 fs/nls/nls_koi8-ru.c | 6 +-
8574 fs/notify/fanotify/fanotify_user.c | 4 +-
8575 fs/notify/notification.c | 4 +-
8576 fs/ntfs/dir.c | 2 +-
8577 fs/ntfs/super.c | 6 +-
8578 fs/ocfs2/dlm/dlmcommon.h | 4 +-
8579 fs/ocfs2/dlm/dlmdebug.c | 10 +-
8580 fs/ocfs2/dlm/dlmdomain.c | 4 +-
8581 fs/ocfs2/dlm/dlmmaster.c | 4 +-
8582 fs/ocfs2/localalloc.c | 2 +-
8583 fs/ocfs2/ocfs2.h | 10 +-
8584 fs/ocfs2/suballoc.c | 12 +-
8585 fs/ocfs2/super.c | 20 +-
8586 fs/overlayfs/copy_up.c | 2 +-
8587 fs/pipe.c | 72 +-
8588 fs/posix_acl.c | 4 +-
8589 fs/proc/array.c | 20 +
8590 fs/proc/base.c | 4 +-
8591 fs/proc/kcore.c | 34 +-
8592 fs/proc/meminfo.c | 2 +-
8593 fs/proc/nommu.c | 2 +-
8594 fs/proc/proc_sysctl.c | 26 +-
8595 fs/proc/task_mmu.c | 42 +-
8596 fs/proc/task_nommu.c | 4 +-
8597 fs/proc/vmcore.c | 16 +-
8598 fs/qnx6/qnx6.h | 4 +-
8599 fs/quota/netlink.c | 4 +-
8600 fs/read_write.c | 2 +-
8601 fs/readdir.c | 3 +-
8602 fs/reiserfs/do_balan.c | 2 +-
8603 fs/reiserfs/procfs.c | 2 +-
8604 fs/reiserfs/reiserfs.h | 4 +-
8605 fs/seq_file.c | 4 +-
8606 fs/splice.c | 43 +-
8607 fs/squashfs/xattr.c | 12 +-
8608 fs/super.c | 3 +-
8609 fs/sysv/sysv.h | 2 +-
8610 fs/tracefs/inode.c | 8 +-
8611 fs/udf/misc.c | 2 +-
8612 fs/ufs/swab.h | 4 +-
8613 fs/userfaultfd.c | 2 +-
8614 fs/xattr.c | 21 +
8615 fs/xfs/libxfs/xfs_bmap.c | 2 +-
8616 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
8617 fs/xfs/xfs_dir2_readdir.c | 7 +-
8618 fs/xfs/xfs_ioctl.c | 2 +-
8619 fs/xfs/xfs_linux.h | 4 +-
8620 include/acpi/ghes.h | 2 +-
8621 include/asm-generic/4level-fixup.h | 2 +
8622 include/asm-generic/atomic-long.h | 176 +-
8623 include/asm-generic/atomic64.h | 12 +
8624 include/asm-generic/bitops/__fls.h | 2 +-
8625 include/asm-generic/bitops/fls.h | 2 +-
8626 include/asm-generic/bitops/fls64.h | 4 +-
8627 include/asm-generic/bug.h | 6 +-
8628 include/asm-generic/cache.h | 4 +-
8629 include/asm-generic/emergency-restart.h | 2 +-
8630 include/asm-generic/kmap_types.h | 4 +-
8631 include/asm-generic/local.h | 13 +
8632 include/asm-generic/pgtable-nopmd.h | 18 +-
8633 include/asm-generic/pgtable-nopud.h | 15 +-
8634 include/asm-generic/pgtable.h | 16 +
8635 include/asm-generic/sections.h | 1 +
8636 include/asm-generic/uaccess.h | 16 +
8637 include/asm-generic/vmlinux.lds.h | 15 +-
8638 include/crypto/algapi.h | 2 +-
8639 include/drm/drmP.h | 19 +-
8640 include/drm/drm_crtc_helper.h | 2 +-
8641 include/drm/drm_mm.h | 2 +-
8642 include/drm/i915_pciids.h | 2 +-
8643 include/drm/intel-gtt.h | 4 +-
8644 include/drm/ttm/ttm_memory.h | 2 +-
8645 include/drm/ttm/ttm_page_alloc.h | 1 +
8646 include/keys/asymmetric-subtype.h | 2 +-
8647 include/linux/atmdev.h | 4 +-
8648 include/linux/atomic.h | 2 +-
8649 include/linux/audit.h | 2 +-
8650 include/linux/average.h | 2 +-
8651 include/linux/binfmts.h | 3 +-
8652 include/linux/bitmap.h | 2 +-
8653 include/linux/bitops.h | 8 +-
8654 include/linux/blk-cgroup.h | 24 +-
8655 include/linux/blkdev.h | 2 +-
8656 include/linux/blktrace_api.h | 2 +-
8657 include/linux/cache.h | 8 +
8658 include/linux/cdrom.h | 1 -
8659 include/linux/cleancache.h | 2 +-
8660 include/linux/clk-provider.h | 1 +
8661 include/linux/compat.h | 6 +-
8662 include/linux/compiler-gcc.h | 28 +-
8663 include/linux/compiler.h | 193 +-
8664 include/linux/configfs.h | 2 +-
8665 include/linux/cpufreq.h | 3 +-
8666 include/linux/cpuidle.h | 5 +-
8667 include/linux/cpumask.h | 14 +-
8668 include/linux/crypto.h | 4 +-
8669 include/linux/ctype.h | 2 +-
8670 include/linux/dcache.h | 4 +-
8671 include/linux/decompress/mm.h | 2 +-
8672 include/linux/devfreq.h | 2 +-
8673 include/linux/device.h | 7 +-
8674 include/linux/dma-mapping.h | 2 +-
8675 include/linux/efi.h | 1 +
8676 include/linux/elf.h | 2 +
8677 include/linux/err.h | 4 +-
8678 include/linux/extcon.h | 2 +-
8679 include/linux/fb.h | 3 +-
8680 include/linux/fdtable.h | 2 +-
8681 include/linux/fs.h | 5 +-
8682 include/linux/fs_struct.h | 2 +-
8683 include/linux/fscache-cache.h | 2 +-
8684 include/linux/fscache.h | 2 +-
8685 include/linux/fsnotify.h | 2 +-
8686 include/linux/genhd.h | 4 +-
8687 include/linux/genl_magic_func.h | 2 +-
8688 include/linux/gfp.h | 12 +-
8689 include/linux/highmem.h | 12 +
8690 include/linux/hwmon-sysfs.h | 6 +-
8691 include/linux/i2c.h | 1 +
8692 include/linux/if_pppox.h | 2 +-
8693 include/linux/init.h | 12 +-
8694 include/linux/init_task.h | 7 +
8695 include/linux/interrupt.h | 6 +-
8696 include/linux/iommu.h | 2 +-
8697 include/linux/ioport.h | 2 +-
8698 include/linux/ipc.h | 2 +-
8699 include/linux/irq.h | 5 +-
8700 include/linux/irqdesc.h | 2 +-
8701 include/linux/irqdomain.h | 3 +
8702 include/linux/jbd2.h | 2 +-
8703 include/linux/jiffies.h | 16 +-
8704 include/linux/key-type.h | 2 +-
8705 include/linux/kgdb.h | 6 +-
8706 include/linux/kmemleak.h | 4 +-
8707 include/linux/kobject.h | 3 +-
8708 include/linux/kobject_ns.h | 2 +-
8709 include/linux/kref.h | 2 +-
8710 include/linux/libata.h | 2 +-
8711 include/linux/linkage.h | 1 +
8712 include/linux/list.h | 15 +
8713 include/linux/lockref.h | 26 +-
8714 include/linux/math64.h | 10 +-
8715 include/linux/mempolicy.h | 7 +
8716 include/linux/mm.h | 102 +-
8717 include/linux/mm_types.h | 20 +
8718 include/linux/mmiotrace.h | 4 +-
8719 include/linux/mmzone.h | 2 +-
8720 include/linux/mod_devicetable.h | 4 +-
8721 include/linux/module.h | 69 +-
8722 include/linux/moduleloader.h | 16 +
8723 include/linux/moduleparam.h | 4 +-
8724 include/linux/net.h | 2 +-
8725 include/linux/netdevice.h | 7 +-
8726 include/linux/netfilter.h | 2 +-
8727 include/linux/netfilter/nfnetlink.h | 2 +-
8728 include/linux/netlink.h | 12 +-
8729 include/linux/nls.h | 4 +-
8730 include/linux/notifier.h | 3 +-
8731 include/linux/oprofile.h | 4 +-
8732 include/linux/padata.h | 2 +-
8733 include/linux/pci_hotplug.h | 3 +-
8734 include/linux/percpu.h | 2 +-
8735 include/linux/perf_event.h | 12 +-
8736 include/linux/pipe_fs_i.h | 8 +-
8737 include/linux/pm.h | 1 +
8738 include/linux/pm_domain.h | 2 +-
8739 include/linux/pm_runtime.h | 2 +-
8740 include/linux/pnp.h | 2 +-
8741 include/linux/poison.h | 4 +-
8742 include/linux/power/smartreflex.h | 2 +-
8743 include/linux/ppp-comp.h | 2 +-
8744 include/linux/preempt.h | 21 +
8745 include/linux/proc_ns.h | 2 +-
8746 include/linux/psci.h | 2 +-
8747 include/linux/quota.h | 2 +-
8748 include/linux/random.h | 19 +-
8749 include/linux/rculist.h | 16 +
8750 include/linux/rcupdate.h | 8 +
8751 include/linux/reboot.h | 14 +-
8752 include/linux/regset.h | 3 +-
8753 include/linux/relay.h | 2 +-
8754 include/linux/rio.h | 2 +-
8755 include/linux/rmap.h | 4 +-
8756 include/linux/sched.h | 76 +-
8757 include/linux/sched/sysctl.h | 1 +
8758 include/linux/scif.h | 2 +-
8759 include/linux/semaphore.h | 2 +-
8760 include/linux/seq_file.h | 1 +
8761 include/linux/seqlock.h | 10 +
8762 include/linux/signal.h | 2 +-
8763 include/linux/skbuff.h | 12 +-
8764 include/linux/slab.h | 47 +-
8765 include/linux/slab_def.h | 14 +-
8766 include/linux/slub_def.h | 2 +-
8767 include/linux/smp.h | 2 +
8768 include/linux/sock_diag.h | 2 +-
8769 include/linux/sonet.h | 2 +-
8770 include/linux/spinlock.h | 17 +-
8771 include/linux/srcu.h | 5 +-
8772 include/linux/sunrpc/addr.h | 8 +-
8773 include/linux/sunrpc/clnt.h | 2 +-
8774 include/linux/sunrpc/svc.h | 2 +-
8775 include/linux/sunrpc/svc_rdma.h | 18 +-
8776 include/linux/sunrpc/svcauth.h | 2 +-
8777 include/linux/swapops.h | 10 +-
8778 include/linux/swiotlb.h | 3 +-
8779 include/linux/syscalls.h | 23 +-
8780 include/linux/syscore_ops.h | 2 +-
8781 include/linux/sysctl.h | 3 +-
8782 include/linux/sysfs.h | 9 +-
8783 include/linux/sysrq.h | 3 +-
8784 include/linux/tcp.h | 14 +-
8785 include/linux/thread_info.h | 7 +
8786 include/linux/tty.h | 4 +-
8787 include/linux/tty_driver.h | 2 +-
8788 include/linux/tty_ldisc.h | 2 +-
8789 include/linux/types.h | 16 +
8790 include/linux/uaccess.h | 2 +-
8791 include/linux/uio_driver.h | 2 +-
8792 include/linux/unaligned/access_ok.h | 24 +-
8793 include/linux/usb.h | 12 +-
8794 include/linux/usb/hcd.h | 1 +
8795 include/linux/usb/renesas_usbhs.h | 2 +-
8796 include/linux/vermagic.h | 21 +-
8797 include/linux/vga_switcheroo.h | 8 +-
8798 include/linux/vmalloc.h | 7 +-
8799 include/linux/vmstat.h | 24 +-
8800 include/linux/writeback.h | 3 +-
8801 include/linux/xattr.h | 5 +-
8802 include/linux/zlib.h | 3 +-
8803 include/media/v4l2-dev.h | 2 +-
8804 include/media/v4l2-device.h | 2 +-
8805 include/net/9p/transport.h | 2 +-
8806 include/net/bluetooth/l2cap.h | 2 +-
8807 include/net/bonding.h | 2 +-
8808 include/net/caif/cfctrl.h | 6 +-
8809 include/net/cfg802154.h | 2 +-
8810 include/net/flow.h | 2 +-
8811 include/net/genetlink.h | 2 +-
8812 include/net/gro_cells.h | 2 +-
8813 include/net/inet_connection_sock.h | 2 +-
8814 include/net/inet_sock.h | 2 +-
8815 include/net/inetpeer.h | 2 +-
8816 include/net/ip_fib.h | 2 +-
8817 include/net/ip_vs.h | 8 +-
8818 include/net/ipv6.h | 2 +-
8819 include/net/irda/ircomm_tty.h | 1 +
8820 include/net/iucv/af_iucv.h | 2 +-
8821 include/net/llc_c_ac.h | 2 +-
8822 include/net/llc_c_ev.h | 4 +-
8823 include/net/llc_c_st.h | 2 +-
8824 include/net/llc_s_ac.h | 2 +-
8825 include/net/llc_s_st.h | 2 +-
8826 include/net/mac80211.h | 6 +-
8827 include/net/neighbour.h | 4 +-
8828 include/net/net_namespace.h | 18 +-
8829 include/net/netlink.h | 2 +-
8830 include/net/netns/conntrack.h | 6 +-
8831 include/net/netns/ipv4.h | 4 +-
8832 include/net/netns/ipv6.h | 4 +-
8833 include/net/netns/xfrm.h | 2 +-
8834 include/net/ping.h | 2 +-
8835 include/net/protocol.h | 4 +-
8836 include/net/rtnetlink.h | 2 +-
8837 include/net/sctp/checksum.h | 4 +-
8838 include/net/sctp/sm.h | 4 +-
8839 include/net/sctp/structs.h | 2 +-
8840 include/net/snmp.h | 10 +-
8841 include/net/sock.h | 12 +-
8842 include/net/tcp.h | 8 +-
8843 include/net/xfrm.h | 13 +-
8844 include/rdma/iw_cm.h | 2 +-
8845 include/scsi/libfc.h | 3 +-
8846 include/scsi/scsi_device.h | 6 +-
8847 include/scsi/scsi_driver.h | 2 +-
8848 include/scsi/scsi_transport_fc.h | 3 +-
8849 include/scsi/sg.h | 2 +-
8850 include/sound/compress_driver.h | 2 +-
8851 include/sound/soc.h | 4 +-
8852 include/trace/events/irq.h | 4 +-
8853 include/uapi/linux/a.out.h | 8 +
8854 include/uapi/linux/bcache.h | 5 +-
8855 include/uapi/linux/byteorder/little_endian.h | 28 +-
8856 include/uapi/linux/connector.h | 2 +-
8857 include/uapi/linux/elf.h | 28 +
8858 include/uapi/linux/screen_info.h | 2 +-
8859 include/uapi/linux/swab.h | 6 +-
8860 include/uapi/linux/xattr.h | 4 +
8861 include/video/udlfb.h | 8 +-
8862 include/video/uvesafb.h | 1 +
8863 init/Kconfig | 2 +-
8864 init/Makefile | 3 +
8865 init/do_mounts.c | 14 +-
8866 init/do_mounts.h | 8 +-
8867 init/do_mounts_initrd.c | 30 +-
8868 init/do_mounts_md.c | 6 +-
8869 init/init_task.c | 4 +
8870 init/initramfs.c | 38 +-
8871 init/main.c | 30 +-
8872 ipc/compat.c | 4 +-
8873 ipc/ipc_sysctl.c | 14 +-
8874 ipc/mq_sysctl.c | 4 +-
8875 ipc/sem.c | 4 +-
8876 ipc/shm.c | 6 +
8877 kernel/audit.c | 8 +-
8878 kernel/auditsc.c | 4 +-
8879 kernel/bpf/core.c | 7 +-
8880 kernel/capability.c | 3 +
8881 kernel/compat.c | 38 +-
8882 kernel/debug/debug_core.c | 16 +-
8883 kernel/debug/kdb/kdb_main.c | 4 +-
8884 kernel/events/core.c | 30 +-
8885 kernel/events/internal.h | 10 +-
8886 kernel/events/uprobes.c | 2 +-
8887 kernel/exit.c | 27 +-
8888 kernel/fork.c | 175 +-
8889 kernel/futex.c | 11 +-
8890 kernel/futex_compat.c | 2 +-
8891 kernel/gcov/base.c | 7 +-
8892 kernel/irq/manage.c | 2 +-
8893 kernel/irq/msi.c | 19 +-
8894 kernel/irq/spurious.c | 2 +-
8895 kernel/jump_label.c | 5 +
8896 kernel/kallsyms.c | 37 +-
8897 kernel/kexec.c | 3 +-
8898 kernel/kmod.c | 8 +-
8899 kernel/kprobes.c | 4 +-
8900 kernel/ksysfs.c | 2 +-
8901 kernel/locking/lockdep.c | 7 +-
8902 kernel/locking/mutex-debug.c | 12 +-
8903 kernel/locking/mutex-debug.h | 4 +-
8904 kernel/locking/mutex.c | 6 +-
8905 kernel/module.c | 422 +-
8906 kernel/notifier.c | 17 +-
8907 kernel/padata.c | 4 +-
8908 kernel/panic.c | 5 +-
8909 kernel/pid.c | 2 +-
8910 kernel/pid_namespace.c | 2 +-
8911 kernel/power/process.c | 12 +-
8912 kernel/profile.c | 14 +-
8913 kernel/ptrace.c | 8 +-
8914 kernel/rcu/rcutorture.c | 60 +-
8915 kernel/rcu/tiny.c | 4 +-
8916 kernel/rcu/tree.c | 42 +-
8917 kernel/rcu/tree.h | 16 +-
8918 kernel/rcu/tree_plugin.h | 18 +-
8919 kernel/rcu/tree_trace.c | 14 +-
8920 kernel/resource.c | 4 +-
8921 kernel/sched/auto_group.c | 4 +-
8922 kernel/sched/core.c | 45 +-
8923 kernel/sched/fair.c | 2 +-
8924 kernel/sched/sched.h | 2 +-
8925 kernel/signal.c | 24 +-
8926 kernel/smpboot.c | 4 +-
8927 kernel/softirq.c | 12 +-
8928 kernel/sys.c | 10 +-
8929 kernel/sysctl.c | 34 +-
8930 kernel/time/alarmtimer.c | 2 +-
8931 kernel/time/posix-cpu-timers.c | 4 +-
8932 kernel/time/posix-timers.c | 24 +-
8933 kernel/time/timer.c | 2 +-
8934 kernel/time/timer_stats.c | 10 +-
8935 kernel/trace/blktrace.c | 6 +-
8936 kernel/trace/ftrace.c | 15 +-
8937 kernel/trace/ring_buffer.c | 96 +-
8938 kernel/trace/trace.c | 2 +-
8939 kernel/trace/trace.h | 2 +-
8940 kernel/trace/trace_clock.c | 4 +-
8941 kernel/trace/trace_events.c | 1 -
8942 kernel/trace/trace_functions_graph.c | 4 +-
8943 kernel/trace/trace_mmiotrace.c | 8 +-
8944 kernel/trace/trace_output.c | 10 +-
8945 kernel/trace/trace_seq.c | 2 +-
8946 kernel/trace/trace_stack.c | 2 +-
8947 kernel/user.c | 2 +-
8948 kernel/user_namespace.c | 2 +-
8949 kernel/utsname_sysctl.c | 2 +-
8950 kernel/watchdog.c | 2 +-
8951 kernel/workqueue.c | 8 +-
8952 lib/Kconfig.debug | 8 +-
8953 lib/Makefile | 2 +-
8954 lib/bitmap.c | 8 +-
8955 lib/bug.c | 2 +
8956 lib/debugobjects.c | 2 +-
8957 lib/decompress_bunzip2.c | 3 +-
8958 lib/decompress_unlzma.c | 4 +-
8959 lib/div64.c | 4 +-
8960 lib/dma-debug.c | 4 +-
8961 lib/inflate.c | 2 +-
8962 lib/ioremap.c | 4 +-
8963 lib/kobject.c | 4 +-
8964 lib/list_debug.c | 126 +-
8965 lib/lockref.c | 44 +-
8966 lib/percpu-refcount.c | 2 +-
8967 lib/radix-tree.c | 2 +-
8968 lib/random32.c | 2 +-
8969 lib/rhashtable.c | 4 +-
8970 lib/show_mem.c | 2 +-
8971 lib/strncpy_from_user.c | 2 +-
8972 lib/strnlen_user.c | 2 +-
8973 lib/swiotlb.c | 2 +-
8974 lib/usercopy.c | 6 +
8975 lib/vsprintf.c | 12 +-
8976 mm/Kconfig | 6 +-
8977 mm/backing-dev.c | 4 +-
8978 mm/debug.c | 3 +
8979 mm/filemap.c | 2 +-
8980 mm/gup.c | 13 +-
8981 mm/highmem.c | 6 +-
8982 mm/hugetlb.c | 70 +-
8983 mm/internal.h | 1 +
8984 mm/maccess.c | 12 +-
8985 mm/madvise.c | 37 +
8986 mm/memory-failure.c | 6 +-
8987 mm/memory.c | 424 +-
8988 mm/mempolicy.c | 25 +
8989 mm/mlock.c | 18 +-
8990 mm/mm_init.c | 2 +-
8991 mm/mmap.c | 582 +-
8992 mm/mprotect.c | 137 +-
8993 mm/mremap.c | 39 +-
8994 mm/nommu.c | 21 +-
8995 mm/page-writeback.c | 2 +-
8996 mm/page_alloc.c | 50 +-
8997 mm/percpu.c | 2 +-
8998 mm/process_vm_access.c | 14 +-
8999 mm/rmap.c | 45 +-
9000 mm/shmem.c | 19 +-
9001 mm/slab.c | 111 +-
9002 mm/slab.h | 22 +-
9003 mm/slab_common.c | 86 +-
9004 mm/slob.c | 218 +-
9005 mm/slub.c | 109 +-
9006 mm/sparse-vmemmap.c | 4 +-
9007 mm/sparse.c | 2 +-
9008 mm/swap.c | 2 +
9009 mm/swapfile.c | 12 +-
9010 mm/util.c | 6 +
9011 mm/vmalloc.c | 114 +-
9012 mm/vmstat.c | 12 +-
9013 net/8021q/vlan.c | 5 +-
9014 net/8021q/vlan_netlink.c | 2 +-
9015 net/9p/mod.c | 4 +-
9016 net/9p/trans_fd.c | 2 +-
9017 net/atm/atm_misc.c | 8 +-
9018 net/atm/lec.h | 2 +-
9019 net/atm/proc.c | 6 +-
9020 net/atm/resources.c | 4 +-
9021 net/ax25/sysctl_net_ax25.c | 2 +-
9022 net/batman-adv/bat_iv_ogm.c | 8 +-
9023 net/batman-adv/fragmentation.c | 2 +-
9024 net/batman-adv/routing.c | 4 +-
9025 net/batman-adv/soft-interface.c | 10 +-
9026 net/batman-adv/translation-table.c | 14 +-
9027 net/batman-adv/types.h | 8 +-
9028 net/bluetooth/hci_sock.c | 2 +-
9029 net/bluetooth/l2cap_core.c | 6 +-
9030 net/bluetooth/l2cap_sock.c | 12 +-
9031 net/bluetooth/rfcomm/sock.c | 4 +-
9032 net/bluetooth/rfcomm/tty.c | 4 +-
9033 net/bridge/br_netlink.c | 2 +-
9034 net/bridge/netfilter/ebtables.c | 6 +-
9035 net/caif/cfctrl.c | 11 +-
9036 net/caif/chnl_net.c | 2 +-
9037 net/can/af_can.c | 2 +-
9038 net/can/gw.c | 6 +-
9039 net/ceph/messenger.c | 4 +-
9040 net/compat.c | 26 +-
9041 net/core/datagram.c | 2 +-
9042 net/core/dev.c | 16 +-
9043 net/core/filter.c | 2 +-
9044 net/core/flow.c | 6 +-
9045 net/core/neighbour.c | 18 +-
9046 net/core/net-sysfs.c | 2 +-
9047 net/core/net_namespace.c | 8 +-
9048 net/core/netpoll.c | 4 +-
9049 net/core/rtnetlink.c | 17 +-
9050 net/core/scm.c | 12 +-
9051 net/core/skbuff.c | 11 +-
9052 net/core/sock.c | 28 +-
9053 net/core/sock_diag.c | 15 +-
9054 net/core/sysctl_net_core.c | 22 +-
9055 net/decnet/af_decnet.c | 1 +
9056 net/decnet/sysctl_net_decnet.c | 4 +-
9057 net/dsa/dsa.c | 2 +-
9058 net/hsr/hsr_netlink.c | 2 +-
9059 net/ieee802154/6lowpan/core.c | 2 +-
9060 net/ieee802154/6lowpan/reassembly.c | 14 +-
9061 net/ipv4/af_inet.c | 2 +-
9062 net/ipv4/arp.c | 2 +-
9063 net/ipv4/devinet.c | 18 +-
9064 net/ipv4/fib_frontend.c | 6 +-
9065 net/ipv4/fib_semantics.c | 2 +-
9066 net/ipv4/inet_connection_sock.c | 4 +-
9067 net/ipv4/inet_diag.c | 4 +-
9068 net/ipv4/inet_timewait_sock.c | 2 +-
9069 net/ipv4/inetpeer.c | 2 +-
9070 net/ipv4/ip_fragment.c | 15 +-
9071 net/ipv4/ip_gre.c | 6 +-
9072 net/ipv4/ip_sockglue.c | 2 +-
9073 net/ipv4/ip_vti.c | 4 +-
9074 net/ipv4/ipconfig.c | 6 +-
9075 net/ipv4/ipip.c | 4 +-
9076 net/ipv4/netfilter/arp_tables.c | 12 +-
9077 net/ipv4/netfilter/ip_tables.c | 12 +-
9078 net/ipv4/ping.c | 14 +-
9079 net/ipv4/proc.c | 8 +-
9080 net/ipv4/raw.c | 14 +-
9081 net/ipv4/route.c | 32 +-
9082 net/ipv4/sysctl_net_ipv4.c | 22 +-
9083 net/ipv4/tcp_input.c | 6 +-
9084 net/ipv4/tcp_probe.c | 2 +-
9085 net/ipv4/udp.c | 10 +-
9086 net/ipv4/xfrm4_mode_transport.c | 2 +-
9087 net/ipv4/xfrm4_policy.c | 17 +-
9088 net/ipv4/xfrm4_state.c | 4 +-
9089 net/ipv6/addrconf.c | 22 +-
9090 net/ipv6/af_inet6.c | 2 +-
9091 net/ipv6/datagram.c | 2 +-
9092 net/ipv6/icmp.c | 2 +-
9093 net/ipv6/ip6_fib.c | 4 +-
9094 net/ipv6/ip6_gre.c | 10 +-
9095 net/ipv6/ip6_tunnel.c | 4 +-
9096 net/ipv6/ip6_vti.c | 4 +-
9097 net/ipv6/ipv6_sockglue.c | 2 +-
9098 net/ipv6/ndisc.c | 2 +-
9099 net/ipv6/netfilter/ip6_tables.c | 12 +-
9100 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9101 net/ipv6/ping.c | 33 +-
9102 net/ipv6/proc.c | 10 +-
9103 net/ipv6/raw.c | 17 +-
9104 net/ipv6/reassembly.c | 13 +-
9105 net/ipv6/route.c | 2 +-
9106 net/ipv6/sit.c | 4 +-
9107 net/ipv6/sysctl_net_ipv6.c | 2 +-
9108 net/ipv6/udp.c | 6 +-
9109 net/ipv6/xfrm6_policy.c | 17 +-
9110 net/irda/ircomm/ircomm_tty.c | 18 +-
9111 net/iucv/af_iucv.c | 4 +-
9112 net/iucv/iucv.c | 2 +-
9113 net/key/af_key.c | 4 +-
9114 net/l2tp/l2tp_eth.c | 38 +-
9115 net/l2tp/l2tp_ip.c | 2 +-
9116 net/l2tp/l2tp_ip6.c | 2 +-
9117 net/mac80211/cfg.c | 10 +-
9118 net/mac80211/debugfs_key.c | 4 +-
9119 net/mac80211/ieee80211_i.h | 3 +-
9120 net/mac80211/iface.c | 20 +-
9121 net/mac80211/key.c | 4 +-
9122 net/mac80211/main.c | 2 +-
9123 net/mac80211/pm.c | 4 +-
9124 net/mac80211/rate.c | 2 +-
9125 net/mac80211/sta_info.c | 2 +-
9126 net/mac80211/tx.c | 2 +-
9127 net/mac80211/util.c | 8 +-
9128 net/mac80211/wpa.c | 10 +-
9129 net/mac802154/iface.c | 4 +-
9130 net/mpls/af_mpls.c | 6 +-
9131 net/netfilter/ipset/ip_set_core.c | 4 +-
9132 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9133 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9134 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9135 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9136 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9137 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9138 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9139 net/netfilter/nf_conntrack_acct.c | 2 +-
9140 net/netfilter/nf_conntrack_ecache.c | 2 +-
9141 net/netfilter/nf_conntrack_helper.c | 2 +-
9142 net/netfilter/nf_conntrack_netlink.c | 22 +-
9143 net/netfilter/nf_conntrack_proto.c | 2 +-
9144 net/netfilter/nf_conntrack_standalone.c | 2 +-
9145 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9146 net/netfilter/nf_log.c | 10 +-
9147 net/netfilter/nf_sockopt.c | 4 +-
9148 net/netfilter/nf_tables_api.c | 13 +-
9149 net/netfilter/nfnetlink_acct.c | 7 +-
9150 net/netfilter/nfnetlink_cthelper.c | 2 +-
9151 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9152 net/netfilter/nfnetlink_log.c | 4 +-
9153 net/netfilter/nft_compat.c | 9 +-
9154 net/netfilter/xt_statistic.c | 8 +-
9155 net/netlink/af_netlink.c | 14 +-
9156 net/netlink/diag.c | 2 +-
9157 net/netlink/genetlink.c | 14 +-
9158 net/openvswitch/vport-internal_dev.c | 2 +-
9159 net/packet/af_packet.c | 26 +-
9160 net/packet/diag.c | 2 +-
9161 net/packet/internal.h | 6 +-
9162 net/phonet/pep.c | 6 +-
9163 net/phonet/socket.c | 2 +-
9164 net/phonet/sysctl.c | 2 +-
9165 net/rds/cong.c | 6 +-
9166 net/rds/ib.h | 2 +-
9167 net/rds/ib_cm.c | 2 +-
9168 net/rds/ib_recv.c | 4 +-
9169 net/rds/iw.h | 2 +-
9170 net/rds/iw_cm.c | 2 +-
9171 net/rds/iw_recv.c | 4 +-
9172 net/rds/rds.h | 2 +-
9173 net/rds/tcp.c | 2 +-
9174 net/rds/tcp_send.c | 2 +-
9175 net/rxrpc/af_rxrpc.c | 2 +-
9176 net/rxrpc/ar-ack.c | 14 +-
9177 net/rxrpc/ar-call.c | 2 +-
9178 net/rxrpc/ar-connection.c | 2 +-
9179 net/rxrpc/ar-connevent.c | 2 +-
9180 net/rxrpc/ar-input.c | 4 +-
9181 net/rxrpc/ar-internal.h | 8 +-
9182 net/rxrpc/ar-local.c | 2 +-
9183 net/rxrpc/ar-output.c | 4 +-
9184 net/rxrpc/ar-peer.c | 2 +-
9185 net/rxrpc/ar-proc.c | 4 +-
9186 net/rxrpc/ar-transport.c | 2 +-
9187 net/rxrpc/rxkad.c | 4 +-
9188 net/sched/sch_generic.c | 4 +-
9189 net/sctp/ipv6.c | 6 +-
9190 net/sctp/protocol.c | 10 +-
9191 net/sctp/sm_sideeffect.c | 2 +-
9192 net/sctp/socket.c | 21 +-
9193 net/sctp/sysctl.c | 10 +-
9194 net/socket.c | 18 +-
9195 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9196 net/sunrpc/clnt.c | 4 +-
9197 net/sunrpc/sched.c | 4 +-
9198 net/sunrpc/svc.c | 4 +-
9199 net/sunrpc/svcauth_unix.c | 2 +-
9200 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
9201 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9202 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9203 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9204 net/tipc/netlink_compat.c | 12 +-
9205 net/tipc/subscr.c | 2 +-
9206 net/unix/diag.c | 2 +-
9207 net/unix/sysctl_net_unix.c | 2 +-
9208 net/wireless/wext-core.c | 19 +-
9209 net/xfrm/xfrm_policy.c | 16 +-
9210 net/xfrm/xfrm_state.c | 33 +-
9211 net/xfrm/xfrm_sysctl.c | 2 +-
9212 net/xfrm/xfrm_user.c | 2 +-
9213 scripts/Kbuild.include | 2 +-
9214 scripts/Makefile.build | 2 +-
9215 scripts/Makefile.clean | 3 +-
9216 scripts/Makefile.host | 69 +-
9217 scripts/basic/fixdep.c | 12 +-
9218 scripts/dtc/checks.c | 14 +-
9219 scripts/dtc/data.c | 6 +-
9220 scripts/dtc/flattree.c | 8 +-
9221 scripts/dtc/livetree.c | 4 +-
9222 scripts/gcc-plugin.sh | 51 +
9223 scripts/headers_install.sh | 1 +
9224 scripts/kallsyms.c | 4 +-
9225 scripts/kconfig/lkc.h | 5 +-
9226 scripts/kconfig/menu.c | 2 +-
9227 scripts/kconfig/symbol.c | 6 +-
9228 scripts/link-vmlinux.sh | 2 +-
9229 scripts/mod/file2alias.c | 14 +-
9230 scripts/mod/modpost.c | 25 +-
9231 scripts/mod/modpost.h | 6 +-
9232 scripts/mod/sumversion.c | 2 +-
9233 scripts/module-common.lds | 4 +
9234 scripts/package/builddeb | 1 +
9235 scripts/pnmtologo.c | 6 +-
9236 scripts/sortextable.h | 6 +-
9237 scripts/tags.sh | 2 +-
9238 security/Kconfig | 691 +-
9239 security/apparmor/include/policy.h | 2 +-
9240 security/apparmor/policy.c | 4 +-
9241 security/integrity/ima/ima.h | 4 +-
9242 security/integrity/ima/ima_api.c | 2 +-
9243 security/integrity/ima/ima_fs.c | 4 +-
9244 security/integrity/ima/ima_queue.c | 2 +-
9245 security/keys/internal.h | 8 +-
9246 security/keys/key.c | 18 +-
9247 security/keys/keyring.c | 4 -
9248 security/selinux/avc.c | 6 +-
9249 security/selinux/include/xfrm.h | 2 +-
9250 security/yama/yama_lsm.c | 2 +-
9251 sound/aoa/codecs/onyx.c | 7 +-
9252 sound/aoa/codecs/onyx.h | 1 +
9253 sound/core/oss/pcm_oss.c | 18 +-
9254 sound/core/pcm_compat.c | 2 +-
9255 sound/core/pcm_native.c | 4 +-
9256 sound/core/seq/seq_clientmgr.c | 10 +-
9257 sound/core/seq/seq_compat.c | 2 +-
9258 sound/core/seq/seq_fifo.c | 6 +-
9259 sound/core/seq/seq_fifo.h | 2 +-
9260 sound/core/seq/seq_memory.c | 6 +-
9261 sound/core/sound.c | 2 +-
9262 sound/drivers/mts64.c | 14 +-
9263 sound/drivers/opl4/opl4_lib.c | 2 +-
9264 sound/drivers/portman2x4.c | 3 +-
9265 sound/firewire/amdtp-am824.c | 2 +-
9266 sound/firewire/amdtp-stream.c | 4 +-
9267 sound/firewire/amdtp-stream.h | 2 +-
9268 sound/firewire/digi00x/amdtp-dot.c | 2 +-
9269 sound/firewire/isight.c | 10 +-
9270 sound/firewire/scs1x.c | 8 +-
9271 sound/oss/sb_audio.c | 2 +-
9272 sound/oss/swarm_cs4297a.c | 6 +-
9273 sound/pci/hda/hda_codec.c | 2 +-
9274 sound/pci/ymfpci/ymfpci.h | 2 +-
9275 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9276 sound/soc/codecs/sti-sas.c | 10 +-
9277 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
9278 sound/soc/soc-ac97.c | 6 +-
9279 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9280 tools/gcc/Makefile | 42 +
9281 tools/gcc/checker_plugin.c | 549 +
9282 tools/gcc/colorize_plugin.c | 215 +
9283 tools/gcc/constify_plugin.c | 571 +
9284 tools/gcc/gcc-common.h | 819 +
9285 tools/gcc/initify_plugin.c | 591 +
9286 tools/gcc/kallocstat_plugin.c | 188 +
9287 tools/gcc/kernexec_plugin.c | 549 +
9288 tools/gcc/latent_entropy_plugin.c | 474 +
9289 tools/gcc/randomize_layout_seed.h | 1 +
9290 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9291 tools/gcc/size_overflow_plugin/Makefile | 28 +
9292 .../disable_size_overflow_hash.data | 12434 ++
9293 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
9294 .../generate_size_overflow_hash.sh | 103 +
9295 .../insert_size_overflow_asm.c | 416 +
9296 .../size_overflow_plugin/intentional_overflow.c | 1116 +
9297 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9298 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
9299 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9300 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
9301 .../size_overflow_hash_aux.data | 92 +
9302 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
9303 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9304 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9305 .../size_overflow_plugin_hash.c | 352 +
9306 .../size_overflow_plugin/size_overflow_transform.c | 745 +
9307 .../size_overflow_transform_core.c | 1015 +
9308 tools/gcc/stackleak_plugin.c | 444 +
9309 tools/gcc/structleak_plugin.c | 290 +
9310 tools/include/linux/compiler.h | 8 +
9311 tools/perf/util/include/asm/alternative-asm.h | 3 +
9312 tools/virtio/linux/uaccess.h | 2 +-
9313 virt/kvm/kvm_main.c | 42 +-
9314 2088 files changed, 221599 insertions(+), 9618 deletions(-)
9315 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
9316 Author: Matthew Wilcox <willy@linux.intel.com>
9317 Date: Tue Feb 2 16:57:52 2016 -0800
9318
9319 radix-tree: fix race in gang lookup
9320
9321 If the indirect_ptr bit is set on a slot, that indicates we need to redo
9322 the lookup. Introduce a new function radix_tree_iter_retry() which
9323 forces the loop to retry the lookup by setting 'slot' to NULL and
9324 turning the iterator back to point at the problematic entry.
9325
9326 This is a pretty rare problem to hit at the moment; the lookup has to
9327 race with a grow of the radix tree from a height of 0. The consequences
9328 of hitting this race are that gang lookup could return a pointer to a
9329 radix_tree_node instead of a pointer to whatever the user had inserted
9330 in the tree.
9331
9332 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
9333 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
9334 Cc: Hugh Dickins <hughd@google.com>
9335 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9336 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
9337 Cc: <stable@vger.kernel.org>
9338 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9339 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9340
9341 include/linux/radix-tree.h | 16 ++++++++++++++++
9342 lib/radix-tree.c | 12 ++++++++++--
9343 2 files changed, 26 insertions(+), 2 deletions(-)
9344
9345 commit bf628043b4589c910919a0f221ae7f42aa8cea93
9346 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9347 Date: Wed Feb 3 02:11:03 2016 +0100
9348
9349 unix: correctly track in-flight fds in sending process user_struct
9350
9351 The commit referenced in the Fixes tag incorrectly accounted the number
9352 of in-flight fds over a unix domain socket to the original opener
9353 of the file-descriptor. This allows another process to arbitrary
9354 deplete the original file-openers resource limit for the maximum of
9355 open files. Instead the sending processes and its struct cred should
9356 be credited.
9357
9358 To do so, we add a reference counted struct user_struct pointer to the
9359 scm_fp_list and use it to account for the number of inflight unix fds.
9360
9361 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
9362 Reported-by: David Herrmann <dh.herrmann@gmail.com>
9363 Cc: David Herrmann <dh.herrmann@gmail.com>
9364 Cc: Willy Tarreau <w@1wt.eu>
9365 Cc: Linus Torvalds <torvalds@linux-foundation.org>
9366 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
9367 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9368 Signed-off-by: David S. Miller <davem@davemloft.net>
9369
9370 include/net/af_unix.h | 4 ++--
9371 include/net/scm.h | 1 +
9372 net/core/scm.c | 7 +++++++
9373 net/unix/af_unix.c | 4 ++--
9374 net/unix/garbage.c | 8 ++++----
9375 5 files changed, 16 insertions(+), 8 deletions(-)
9376
9377 commit e830db443ff78d70b7b63536e688d73907face0c
9378 Author: Mike Kravetz <mike.kravetz@oracle.com>
9379 Date: Fri Jan 15 16:57:37 2016 -0800
9380
9381 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
9382
9383 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
9384 argument end is of type pgoff_t. It was being converted to a vaddr
9385 offset and passed to unmap_hugepage_range. However, end was also being
9386 used as an argument to the vma_interval_tree_foreach controlling loop.
9387 In addition, the conversion of end to vaddr offset was incorrect.
9388
9389 hugetlb_vmtruncate_list is called as part of a file truncate or
9390 fallocate hole punch operation.
9391
9392 When truncating a hugetlbfs file, this bug could prevent some pages from
9393 being unmapped. This is possible if there are multiple vmas mapping the
9394 file, and there is a sufficiently sized hole between the mappings. The
9395 size of the hole between two vmas (A,B) must be such that the starting
9396 virtual address of B is greater than (ending virtual address of A <<
9397 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
9398 pages are not properly unmapped during truncate, the following BUG is
9399 hit:
9400
9401 kernel BUG at fs/hugetlbfs/inode.c:428!
9402
9403 In the fallocate hole punch case, this bug could prevent pages from
9404 being unmapped as in the truncate case. However, for hole punch the
9405 result is that unmapped pages will not be removed during the operation.
9406 For hole punch, it is also possible that more pages than desired will be
9407 unmapped. This unnecessary unmapping will cause page faults to
9408 reestablish the mappings on subsequent page access.
9409
9410 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
9411 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
9412 Cc: Hugh Dickins <hughd@google.com>
9413 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
9414 Cc: Davidlohr Bueso <dave@stgolabs.net>
9415 Cc: Dave Hansen <dave.hansen@linux.intel.com>
9416 Cc: <stable@vger.kernel.org> [4.3]
9417 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9418 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9419
9420 fs/hugetlbfs/inode.c | 19 +++++++++++--------
9421 1 files changed, 11 insertions(+), 8 deletions(-)
9422
9423 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
9424 Author: Takashi Iwai <tiwai@suse.de>
9425 Date: Thu Feb 4 17:06:13 2016 +0100
9426
9427 ALSA: timer: Fix leftover link at closing
9428
9429 In ALSA timer core, the active timer instance is managed in
9430 active_list linked list. Each element is added / removed dynamically
9431 at timer start, stop and in timer interrupt. The problem is that
9432 snd_timer_interrupt() has a thinko and leaves the element in
9433 active_list when it's the last opened element. This eventually leads
9434 to list corruption or use-after-free error.
9435
9436 This hasn't been revealed because we used to delete the list forcibly
9437 in snd_timer_stop() in the past. However, the recent fix avoids the
9438 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
9439 corruption due to double start or stop]), and this leak hits reality.
9440
9441 This patch fixes the link management in snd_timer_interrupt(). Now it
9442 simply unlinks no matter which stream is.
9443
9444 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
9445 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9446 Cc: <stable@vger.kernel.org>
9447 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9448
9449 sound/core/timer.c | 4 ++--
9450 1 files changed, 2 insertions(+), 2 deletions(-)
9451
9452 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
9453 Author: Konstantin Khlebnikov <koct9i@gmail.com>
9454 Date: Fri Feb 5 15:37:01 2016 -0800
9455
9456 radix-tree: fix oops after radix_tree_iter_retry
9457
9458 Helper radix_tree_iter_retry() resets next_index to the current index.
9459 In following radix_tree_next_slot current chunk size becomes zero. This
9460 isn't checked and it tries to dereference null pointer in slot.
9461
9462 Tagged iterator is fine because retry happens only at slot 0 where tag
9463 bitmask in iter->tags is filled with single bit.
9464
9465 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
9466 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
9467 Cc: Matthew Wilcox <willy@linux.intel.com>
9468 Cc: Hugh Dickins <hughd@google.com>
9469 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9470 Cc: Jeremiah Mahler <jmmahler@gmail.com>
9471 Cc: <stable@vger.kernel.org>
9472 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9473 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9474
9475 include/linux/radix-tree.h | 6 +++---
9476 1 files changed, 3 insertions(+), 3 deletions(-)
9477
9478 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
9479 Merge: 438be0b 256aeaf
9480 Author: Brad Spengler <spender@grsecurity.net>
9481 Date: Sun Feb 7 08:29:33 2016 -0500
9482
9483 Merge branch 'pax-test' into grsec-test
9484
9485 commit 256aeaf87c22de8edf1f03682a572c590ae07771
9486 Author: Brad Spengler <spender@grsecurity.net>
9487 Date: Sun Feb 7 08:29:09 2016 -0500
9488
9489 Update to pax-linux-4.3.5-test28.patch:
9490 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
9491 - spender fixed UDEREF on arm
9492
9493 arch/arm/Kconfig | 1 +
9494 arch/arm/include/asm/domain.h | 21 ++++++++-
9495 arch/arm/include/asm/futex.h | 9 ----
9496 arch/arm/include/asm/thread_info.h | 3 +
9497 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9498 arch/arm/kernel/entry-armv.S | 2 +-
9499 arch/arm/kernel/process.c | 2 +-
9500 arch/arm/mm/alignment.c | 8 ----
9501 arch/x86/mm/numa.c | 2 +-
9502 security/Kconfig | 1 -
9503 10 files changed, 60 insertions(+), 70 deletions(-)
9504
9505 commit 438be0bd112bd17942b2628c53054dc1007558a1
9506 Author: Brad Spengler <spender@grsecurity.net>
9507 Date: Sat Feb 6 19:50:31 2016 -0500
9508
9509 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
9510 ARM systems reported on the forums
9511
9512 arch/arm/Kconfig | 1 +
9513 arch/arm/include/asm/domain.h | 21 ++++++++-
9514 arch/arm/include/asm/futex.h | 9 ----
9515 arch/arm/include/asm/thread_info.h | 3 +
9516 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9517 arch/arm/kernel/entry-armv.S | 2 +-
9518 arch/arm/kernel/process.c | 2 +-
9519 arch/arm/mm/alignment.c | 8 ----
9520 security/Kconfig | 1 -
9521 9 files changed, 59 insertions(+), 69 deletions(-)
9522
9523 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
9524 Author: Brad Spengler <spender@grsecurity.net>
9525 Date: Sat Feb 6 11:21:53 2016 -0500
9526
9527 Fix another compiler warning
9528
9529 net/ipv4/tcp_input.c | 2 ++
9530 1 files changed, 2 insertions(+), 0 deletions(-)
9531
9532 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
9533 Author: Brad Spengler <spender@grsecurity.net>
9534 Date: Sat Feb 6 11:16:12 2016 -0500
9535
9536 Fix two compiler warnings
9537
9538 kernel/pid.c | 5 ++---
9539 kernel/ptrace.c | 3 ++-
9540 2 files changed, 4 insertions(+), 4 deletions(-)
9541
9542 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
9543 Author: Brad Spengler <spender@grsecurity.net>
9544 Date: Wed Feb 3 21:22:40 2016 -0500
9545
9546 Apply fix for integer truncation in NUMA init code, reported by
9547 x14sg1 on the forums:
9548 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
9549
9550 arch/x86/mm/numa.c | 2 +-
9551 1 files changed, 1 insertions(+), 1 deletions(-)
9552
9553 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
9554 Merge: a781740 016d0d8
9555 Author: Brad Spengler <spender@grsecurity.net>
9556 Date: Wed Feb 3 21:20:58 2016 -0500
9557
9558 Merge branch 'pax-test' into grsec-test
9559
9560 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
9561 Author: Brad Spengler <spender@grsecurity.net>
9562 Date: Wed Feb 3 21:20:10 2016 -0500
9563
9564 Update to pax-linux-4.3.5-test27.patch:
9565 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
9566 - restored padding in fpregs_state for storing AVX-512 state in the future
9567 - constified netlink_dump_control
9568 - added const version of debug_gimple_stmt for gcc plugins, by Emese
9569 - Emese fixed a bug in initify that could have initified too much
9570 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
9571
9572 arch/x86/include/asm/fpu/types.h | 1 +
9573 arch/x86/include/asm/mmu_context.h | 2 +-
9574 block/blk-cgroup.c | 18 ++--
9575 block/cfq-iosched.c | 4 +-
9576 crypto/crypto_user.c | 8 ++-
9577 drivers/acpi/apei/ghes.c | 6 +-
9578 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
9579 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
9580 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
9581 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
9582 drivers/infiniband/core/netlink.c | 5 +-
9583 drivers/infiniband/hw/cxgb4/device.c | 6 +-
9584 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
9585 drivers/md/bcache/alloc.c | 2 +-
9586 drivers/md/bcache/bcache.h | 10 +-
9587 drivers/md/bcache/btree.c | 2 +-
9588 drivers/md/bcache/io.c | 10 +-
9589 drivers/md/bcache/journal.c | 2 +-
9590 drivers/md/bcache/stats.c | 26 +++---
9591 drivers/md/bcache/stats.h | 16 ++--
9592 drivers/md/bcache/super.c | 2 +-
9593 drivers/md/bcache/sysfs.c | 20 +++---
9594 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
9595 drivers/md/dm-raid.c | 2 +-
9596 drivers/md/md.c | 6 +-
9597 drivers/md/md.h | 2 +-
9598 drivers/md/raid1.c | 2 +-
9599 drivers/md/raid10.c | 2 +-
9600 drivers/md/raid5.c | 4 +-
9601 drivers/media/pci/zoran/zoran.h | 1 -
9602 drivers/media/pci/zoran/zoran_driver.c | 3 -
9603 drivers/net/ethernet/sfc/selftest.c | 20 +++---
9604 drivers/net/irda/vlsi_ir.c | 18 ++--
9605 drivers/net/irda/vlsi_ir.h | 14 ++--
9606 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
9607 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
9608 drivers/net/wireless/ath/carl9170/main.c | 10 +-
9609 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
9610 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
9611 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
9612 drivers/scsi/hptiop.c | 2 -
9613 drivers/scsi/hptiop.h | 1 -
9614 drivers/scsi/ipr.c | 6 +-
9615 drivers/scsi/ipr.h | 2 +-
9616 drivers/scsi/qla2xxx/qla_target.c | 10 +-
9617 drivers/scsi/qla2xxx/qla_target.h | 2 +-
9618 fs/btrfs/ctree.c | 2 +-
9619 fs/btrfs/ctree.h | 4 +-
9620 fs/btrfs/delayed-ref.c | 4 +-
9621 fs/btrfs/disk-io.c | 4 +-
9622 fs/btrfs/file.c | 4 +-
9623 fs/btrfs/raid56.c | 32 ++++----
9624 fs/btrfs/tests/btrfs-tests.c | 2 +-
9625 fs/btrfs/transaction.c | 2 +-
9626 fs/btrfs/tree-log.c | 8 +-
9627 fs/btrfs/volumes.c | 14 ++--
9628 fs/btrfs/volumes.h | 22 +++---
9629 fs/jbd2/commit.c | 2 +-
9630 fs/jbd2/transaction.c | 4 +-
9631 fs/ocfs2/dlm/dlmcommon.h | 4 +-
9632 fs/ocfs2/dlm/dlmdebug.c | 10 +-
9633 fs/ocfs2/dlm/dlmdomain.c | 4 +-
9634 fs/ocfs2/dlm/dlmmaster.c | 4 +-
9635 include/acpi/ghes.h | 2 +-
9636 include/linux/blk-cgroup.h | 24 +++---
9637 include/linux/jbd2.h | 2 +-
9638 include/linux/netlink.h | 12 ++--
9639 include/net/cfg802154.h | 2 +-
9640 include/net/mac80211.h | 2 +-
9641 include/net/neighbour.h | 2 +-
9642 kernel/rcu/tree_plugin.h | 4 +-
9643 net/batman-adv/routing.c | 4 +-
9644 net/batman-adv/soft-interface.c | 2 +-
9645 net/batman-adv/translation-table.c | 14 ++--
9646 net/batman-adv/types.h | 2 +-
9647 net/core/neighbour.c | 14 ++--
9648 net/core/rtnetlink.c | 2 +-
9649 net/ipv4/arp.c | 2 +-
9650 net/ipv4/inet_diag.c | 4 +-
9651 net/ipv4/xfrm4_state.c | 4 +-
9652 net/ipv6/ndisc.c | 2 +-
9653 net/mac80211/cfg.c | 2 +-
9654 net/mac80211/debugfs_key.c | 2 +-
9655 net/mac80211/key.c | 4 +-
9656 net/mac80211/tx.c | 2 +-
9657 net/mac80211/wpa.c | 10 +-
9658 net/mac802154/iface.c | 4 +-
9659 net/netfilter/ipset/ip_set_core.c | 2 +-
9660 net/netfilter/nf_conntrack_netlink.c | 22 +++---
9661 net/netfilter/nf_tables_api.c | 13 ++--
9662 net/netfilter/nfnetlink_acct.c | 7 +-
9663 net/netfilter/nfnetlink_cthelper.c | 2 +-
9664 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9665 net/netlink/af_netlink.c | 10 ++-
9666 net/netlink/diag.c | 2 +-
9667 net/netlink/genetlink.c | 14 ++--
9668 net/packet/af_packet.c | 18 ++--
9669 net/packet/diag.c | 2 +-
9670 net/packet/internal.h | 6 +-
9671 net/unix/diag.c | 2 +-
9672 net/xfrm/xfrm_user.c | 2 +-
9673 security/apparmor/include/policy.h | 2 +-
9674 security/apparmor/policy.c | 4 +-
9675 sound/core/seq/seq_clientmgr.c | 2 +-
9676 sound/core/seq/seq_fifo.c | 6 +-
9677 sound/core/seq/seq_fifo.h | 2 +-
9678 tools/gcc/gcc-common.h | 24 ++++--
9679 tools/gcc/initify_plugin.c | 7 +-
9680 tools/lib/api/Makefile | 2 +-
9681 109 files changed, 399 insertions(+), 391 deletions(-)
9682
9683 commit a7817402ac837b1aee07fac42537a02097055098
9684 Author: Matt Fleming <matt@codeblueprint.co.uk>
9685 Date: Fri Jan 29 11:36:10 2016 +0000
9686
9687 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
9688
9689 There are a couple of nasty truncation bugs lurking in the pageattr
9690 code that can be triggered when mapping EFI regions, e.g. when we pass
9691 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
9692 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
9693
9694 Viorel-Cătălin managed to trigger this bug on his Dell machine that
9695 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
9696 When calling populate_pud() the end of the region gets calculated
9697 incorrectly in the following buggy expression,
9698
9699 end = start + (cpa->numpages << PAGE_SHIFT);
9700
9701 And only 188416 pages are mapped. Next, populate_pud() gets invoked
9702 for a second time because of the loop in __change_page_attr_set_clr(),
9703 only this time no pages get mapped because shifting the remaining
9704 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
9705 loop in __change_page_attr_set_clr() spins forever because we fail to
9706 map progress.
9707
9708 Hitting this bug depends very much on the virtual address we pick to
9709 map the large region at and how many pages we map on the initial run
9710 through the loop. This explains why this issue was only recently hit
9711 with the introduction of commit
9712
9713 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
9714 entries bottom-up at runtime, instead of top-down")
9715
9716 It's interesting to note that safe uses of cpa->numpages do exist in
9717 the pageattr code. If instead of shifting ->numpages we multiply by
9718 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
9719 so the result is unsigned long.
9720
9721 To avoid surprises when users try to convert very large cpa->numpages
9722 values to addresses, change the data type from 'int' to 'unsigned
9723 long', thereby making it suitable for shifting by PAGE_SHIFT without
9724 any type casting.
9725
9726 The alternative would be to make liberal use of casting, but that is
9727 far more likely to cause problems in the future when someone adds more
9728 code and fails to cast properly; this bug was difficult enough to
9729 track down in the first place.
9730
9731 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
9732 Acked-by: Borislav Petkov <bp@alien8.de>
9733 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
9734 Cc: <stable@vger.kernel.org>
9735 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
9736 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
9737 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
9738 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
9739
9740 arch/x86/mm/pageattr.c | 4 ++--
9741 1 files changed, 2 insertions(+), 2 deletions(-)
9742
9743 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
9744 Author: Jan Beulich <JBeulich@suse.com>
9745 Date: Tue Jan 26 04:15:18 2016 -0700
9746
9747 x86/mm: Fix types used in pgprot cacheability flags translations
9748
9749 For PAE kernels "unsigned long" is not suitable to hold page protection
9750 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
9751 few W+X pages getting reported as insecure during boot (observed namely
9752 for the entire initrd range).
9753
9754 Fixes: 281d4078be ("x86: Make page cache mode a real type")
9755 Signed-off-by: Jan Beulich <jbeulich@suse.com>
9756 Reviewed-by: Juergen Gross <JGross@suse.com>
9757 Cc: stable@vger.kernel.org
9758 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
9759 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
9760
9761 arch/x86/include/asm/pgtable_types.h | 6 ++----
9762 1 files changed, 2 insertions(+), 4 deletions(-)
9763
9764 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
9765 Merge: 682d661 f74425b
9766 Author: Brad Spengler <spender@grsecurity.net>
9767 Date: Sun Jan 31 15:06:25 2016 -0500
9768
9769 Merge branch 'pax-test' into grsec-test
9770
9771 Conflicts:
9772 drivers/net/slip/slhc.c
9773 include/linux/sched.h
9774 net/unix/af_unix.c
9775 sound/core/timer.c
9776
9777 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
9778 Merge: d14af1f 849a2d3
9779 Author: Brad Spengler <spender@grsecurity.net>
9780 Date: Sun Jan 31 15:02:55 2016 -0500
9781
9782 Merge branch 'linux-4.3.y' into pax-test
9783
9784 Conflicts:
9785 arch/x86/include/asm/mmu_context.h
9786
9787 commit 682d6611d75542e351c973c8dd74a99d3966c073
9788 Author: Brad Spengler <spender@grsecurity.net>
9789 Date: Sat Jan 30 13:05:03 2016 -0500
9790
9791 Based on a report from Mathias Krause, fix up a number of additional instances
9792 of ulong overflow when passing in values to gr_learn_resource by saturating
9793 to ULONG_MAX
9794
9795 mm/mlock.c | 11 ++++++++---
9796 mm/mmap.c | 16 +++++++++++++---
9797 2 files changed, 21 insertions(+), 6 deletions(-)
9798
9799 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
9800 Author: Jann Horn <jann@thejh.net>
9801 Date: Sat Dec 26 06:00:48 2015 +0100
9802
9803 seccomp: always propagate NO_NEW_PRIVS on tsync
9804
9805 Before this patch, a process with some permissive seccomp filter
9806 that was applied by root without NO_NEW_PRIVS was able to add
9807 more filters to itself without setting NO_NEW_PRIVS by setting
9808 the new filter from a throwaway thread with NO_NEW_PRIVS.
9809
9810 Signed-off-by: Jann Horn <jann@thejh.net>
9811 Cc: stable@vger.kernel.org
9812 Signed-off-by: Kees Cook <keescook@chromium.org>
9813
9814 kernel/seccomp.c | 22 +++++++++++-----------
9815 1 files changed, 11 insertions(+), 11 deletions(-)
9816
9817 commit b85450498a3bbf269441c8963d7574bb3079c838
9818 Merge: 59c216f d14af1f
9819 Author: Brad Spengler <spender@grsecurity.net>
9820 Date: Fri Jan 29 20:54:13 2016 -0500
9821
9822 Merge branch 'pax-test' into grsec-test
9823
9824 commit d14af1f1dd66511f3f0674deee2b572972012b39
9825 Author: Brad Spengler <spender@grsecurity.net>
9826 Date: Fri Jan 29 20:53:51 2016 -0500
9827
9828 Update to pax-linux-4.3.4-test26.patch:
9829 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
9830
9831 fs/cifs/file.c | 2 +-
9832 fs/gfs2/file.c | 2 +-
9833 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
9834 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
9835 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
9836 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
9837 .../size_overflow_transform_core.c | 5 +
9838 7 files changed, 102 insertions(+), 15 deletions(-)
9839
9840 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
9841 Author: Brad Spengler <spender@grsecurity.net>
9842 Date: Wed Jan 27 17:57:21 2016 -0500
9843
9844 Fix a size_overflow report reported by Mathias Krause in our
9845 truncation of an loff_t to an unsigned long when being passed
9846 to gr_learn_resource() (as all resource checks are against unsigned long
9847 values)
9848
9849 fs/attr.c | 5 ++++-
9850 1 files changed, 4 insertions(+), 1 deletions(-)
9851
9852 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
9853 Author: Yuchung Cheng <ycheng@google.com>
9854 Date: Wed Jan 6 12:42:38 2016 -0800
9855
9856 tcp: fix zero cwnd in tcp_cwnd_reduction
9857
9858 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
9859 conditionally") introduced a bug that cwnd may become 0 when both
9860 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
9861 to a div-by-zero if the connection starts another cwnd reduction
9862 phase by setting tp->prior_cwnd to the current cwnd (0) in
9863 tcp_init_cwnd_reduction().
9864
9865 To prevent this we skip PRR operation when nothing is acked or
9866 sacked. Then cwnd must be positive in all cases as long as ssthresh
9867 is positive:
9868
9869 1) The proportional reduction mode
9870 inflight > ssthresh > 0
9871
9872 2) The reduction bound mode
9873 a) inflight == ssthresh > 0
9874
9875 b) inflight < ssthresh
9876 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
9877
9878 Therefore in all cases inflight and sndcnt can not both be 0.
9879 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
9880
9881 In reality this bug is triggered only with a sequence of less common
9882 events. For example, the connection is terminating an ECN-triggered
9883 cwnd reduction with an inflight 0, then it receives reordered/old
9884 ACKs or DSACKs from prior transmission (which acks nothing). Or the
9885 connection is in fast recovery stage that marks everything lost,
9886 but fails to retransmit due to local issues, then receives data
9887 packets from other end which acks nothing.
9888
9889 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
9890 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
9891 Signed-off-by: Yuchung Cheng <ycheng@google.com>
9892 Signed-off-by: Neal Cardwell <ncardwell@google.com>
9893 Signed-off-by: Eric Dumazet <edumazet@google.com>
9894 Signed-off-by: David S. Miller <davem@davemloft.net>
9895
9896 net/ipv4/tcp_input.c | 3 +++
9897 1 files changed, 3 insertions(+), 0 deletions(-)
9898
9899 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
9900 Author: Eric Dumazet <edumazet@google.com>
9901 Date: Sun Jan 24 13:53:50 2016 -0800
9902
9903 af_unix: fix struct pid memory leak
9904
9905 Dmitry reported a struct pid leak detected by a syzkaller program.
9906
9907 Bug happens in unix_stream_recvmsg() when we break the loop when a
9908 signal is pending, without properly releasing scm.
9909
9910 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
9911 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9912 Signed-off-by: Eric Dumazet <edumazet@google.com>
9913 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
9914 Signed-off-by: David S. Miller <davem@davemloft.net>
9915
9916 net/unix/af_unix.c | 1 +
9917 1 files changed, 1 insertions(+), 0 deletions(-)
9918
9919 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
9920 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9921 Date: Fri Jan 22 01:39:43 2016 +0100
9922
9923 pptp: fix illegal memory access caused by multiple bind()s
9924
9925 Several times already this has been reported as kasan reports caused by
9926 syzkaller and trinity and people always looked at RCU races, but it is
9927 much more simple. :)
9928
9929 In case we bind a pptp socket multiple times, we simply add it to
9930 the callid_sock list but don't remove the old binding. Thus the old
9931 socket stays in the bucket with unused call_id indexes and doesn't get
9932 cleaned up. This causes various forms of kasan reports which were hard
9933 to pinpoint.
9934
9935 Simply don't allow multiple binds and correct error handling in
9936 pptp_bind. Also keep sk_state bits in place in pptp_connect.
9937
9938 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
9939 Cc: Dmitry Kozlov <xeb@mail.ru>
9940 Cc: Sasha Levin <sasha.levin@oracle.com>
9941 Cc: Dmitry Vyukov <dvyukov@google.com>
9942 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9943 Cc: Dave Jones <davej@codemonkey.org.uk>
9944 Reported-by: Dave Jones <davej@codemonkey.org.uk>
9945 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9946 Signed-off-by: David S. Miller <davem@davemloft.net>
9947
9948 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
9949 1 files changed, 24 insertions(+), 10 deletions(-)
9950
9951 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
9952 Author: Brad Spengler <spender@grsecurity.net>
9953 Date: Tue Jan 26 18:17:10 2016 -0500
9954
9955 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
9956 wiki but was removed from the config help at some point
9957
9958 grsecurity/Kconfig | 3 +++
9959 1 files changed, 3 insertions(+), 0 deletions(-)
9960
9961 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
9962 Author: Thomas Egerer <hakke_007@gmx.de>
9963 Date: Mon Jan 25 12:58:44 2016 +0100
9964
9965 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
9966
9967 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
9968 to select CRYPTO_ECHAINIV in order to work properly. This solves the
9969 issues caused by a misconfiguration as described in [1].
9970 The original approach, patching crypto/Kconfig was turned down by
9971 Herbert Xu [2].
9972
9973 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
9974 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
9975
9976 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
9977 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
9978 Signed-off-by: David S. Miller <davem@davemloft.net>
9979
9980 net/ipv4/Kconfig | 1 +
9981 net/ipv6/Kconfig | 1 +
9982 2 files changed, 2 insertions(+), 0 deletions(-)
9983
9984 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
9985 Merge: 904114c 6339c1f
9986 Author: Brad Spengler <spender@grsecurity.net>
9987 Date: Tue Jan 26 18:08:40 2016 -0500
9988
9989 Merge branch 'pax-test' into grsec-test
9990
9991 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
9992 Author: Brad Spengler <spender@grsecurity.net>
9993 Date: Tue Jan 26 18:07:51 2016 -0500
9994
9995 Update to pax-linux-4.3.4-test25.patch:
9996 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
9997 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
9998 - fixed a few REFCOUNT false positives in SNMP related statistics
9999
10000 arch/x86/Kconfig | 2 +-
10001 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
10002 include/net/snmp.h | 10 +++++-----
10003 kernel/fork.c | 11 +++++++++--
10004 net/ipv4/proc.c | 8 ++++----
10005 net/ipv6/addrconf.c | 4 ++--
10006 net/ipv6/proc.c | 10 +++++-----
10007 7 files changed, 43 insertions(+), 19 deletions(-)
10008
10009 commit 904114c2fce3fdff5d57e763da56a78960db4e19
10010 Author: Al Viro <viro@zeniv.linux.org.uk>
10011 Date: Fri Jan 22 18:08:52 2016 -0500
10012
10013 make sure that freeing shmem fast symlinks is RCU-delayed
10014
10015 Cc: stable@vger.kernel.org # v4.2+
10016 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10017
10018 include/linux/shmem_fs.h | 5 +----
10019 mm/shmem.c | 9 ++++-----
10020 2 files changed, 5 insertions(+), 9 deletions(-)
10021
10022 commit ab86adee64312a2f827dd516cb199521327943ed
10023 Author: Sasha Levin <sasha.levin@oracle.com>
10024 Date: Mon Jan 18 19:23:51 2016 -0500
10025
10026 netfilter: nf_conntrack: use safer way to lock all buckets
10027
10028 When we need to lock all buckets in the connection hashtable we'd attempt to
10029 lock 1024 spinlocks, which is way more preemption levels than supported by
10030 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
10031 enabled, and if it was - use only 8 buckets(!).
10032
10033 Fix this by using a global lock and synchronize all buckets on it when we
10034 need to lock them all. This is pretty heavyweight, but is only done when we
10035 need to resize the hashtable, and that doesn't happen often enough (or at all).
10036
10037 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10038 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
10039 Reviewed-by: Florian Westphal <fw@strlen.de>
10040 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10041
10042 Conflicts:
10043
10044 net/netfilter/nfnetlink_cttimeout.c
10045
10046 include/net/netfilter/nf_conntrack_core.h | 8 ++----
10047 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
10048 net/netfilter/nf_conntrack_helper.c | 2 +-
10049 net/netfilter/nf_conntrack_netlink.c | 2 +-
10050 4 files changed, 33 insertions(+), 17 deletions(-)
10051
10052 commit 37014723527225481c720484bb788a1a6358072f
10053 Author: Willy Tarreau <w@1wt.eu>
10054 Date: Mon Jan 18 16:36:09 2016 +0100
10055
10056 pipe: limit the per-user amount of pages allocated in pipes
10057
10058 On no-so-small systems, it is possible for a single process to cause an
10059 OOM condition by filling large pipes with data that are never read. A
10060 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
10061 memory. On small systems it may be tricky to set the pipe max size to
10062 prevent this from happening.
10063
10064 This patch makes it possible to enforce a per-user soft limit above
10065 which new pipes will be limited to a single page, effectively limiting
10066 them to 4 kB each, as well as a hard limit above which no new pipes may
10067 be created for this user. This has the effect of protecting the system
10068 against memory abuse without hurting other users, and still allowing
10069 pipes to work correctly though with less data at once.
10070
10071 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
10072 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
10073 default soft limit allows the default number of FDs per process (1024)
10074 to create pipes of the default size (64kB), thus reaching a limit of 64MB
10075 before starting to create only smaller pipes. With 256 processes limited
10076 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
10077 1084 MB of memory allocated for a user. The hard limit is disabled by
10078 default to avoid breaking existing applications that make intensive use
10079 of pipes (eg: for splicing).
10080
10081 Reported-by: socketpair@gmail.com
10082 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10083 Mitigates: CVE-2013-4312 (Linux 2.0+)
10084 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10085 Signed-off-by: Willy Tarreau <w@1wt.eu>
10086 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10087
10088 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
10089 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
10090 include/linux/pipe_fs_i.h | 4 +++
10091 include/linux/sched.h | 1 +
10092 kernel/sysctl.c | 14 ++++++++++++
10093 5 files changed, 87 insertions(+), 2 deletions(-)
10094
10095 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
10096 Merge: 540f2af 7791ecb
10097 Author: Brad Spengler <spender@grsecurity.net>
10098 Date: Sat Jan 23 10:57:11 2016 -0500
10099
10100 Merge branch 'pax-test' into grsec-test
10101
10102 commit 7791ecb84f840343a5646236fd0d34e1fb450793
10103 Merge: 470069c 399588c
10104 Author: Brad Spengler <spender@grsecurity.net>
10105 Date: Sat Jan 23 10:56:47 2016 -0500
10106
10107 Merge branch 'linux-4.3.y' into pax-test
10108
10109 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
10110 Author: Brad Spengler <spender@grsecurity.net>
10111 Date: Tue Jan 19 21:18:47 2016 -0500
10112
10113 Update size_overflow hash table
10114
10115 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
10116 1 files changed, 3 insertions(+), 1 deletions(-)
10117
10118 commit 7e649765626a28437f573f0fbe7a51a04615f041
10119 Author: Brad Spengler <spender@grsecurity.net>
10120 Date: Tue Jan 19 20:29:46 2016 -0500
10121
10122 Backport fix from: https://lkml.org/lkml/2015/12/13/187
10123
10124 fs/ext4/extents.c | 2 +-
10125 1 files changed, 1 insertions(+), 1 deletions(-)
10126
10127 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
10128 Author: Jann Horn <jann@thejh.net>
10129 Date: Tue Jan 5 18:27:30 2016 +0100
10130
10131 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
10132
10133 This replaces all code in fs/compat_ioctl.c that translated
10134 ioctl arguments into a in-kernel structure, then performed
10135 do_ioctl under set_fs(KERNEL_DS), with code that allocates
10136 data on the user stack and can call the VFS ioctl handler
10137 under USER_DS.
10138
10139 This is done as a hardening measure because the caller
10140 does not know what kind of ioctl handler will be invoked,
10141 only that no corresponding compat_ioctl handler exists and
10142 what the ioctl command number is. The accidental
10143 invocation of an unlocked_ioctl handler that unexpectedly
10144 calls copy_to_user could be a severe security issue.
10145
10146 Signed-off-by: Jann Horn <jann@thejh.net>
10147 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10148
10149 Conflicts:
10150
10151 fs/compat_ioctl.c
10152
10153 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
10154 1 files changed, 68 insertions(+), 62 deletions(-)
10155
10156 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
10157 Author: Al Viro <viro@zeniv.linux.org.uk>
10158 Date: Thu Jan 7 09:53:30 2016 -0500
10159
10160 compat_ioctl: don't pass fd around when not needed
10161
10162 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10163
10164 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
10165 fs/internal.h | 7 ++++
10166 fs/ioctl.c | 4 +-
10167 include/linux/fs.h | 2 -
10168 4 files changed, 61 insertions(+), 55 deletions(-)
10169
10170 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
10171 Author: Jann Horn <jann@thejh.net>
10172 Date: Tue Jan 5 18:27:29 2016 +0100
10173
10174 compat_ioctl: don't look up the fd twice
10175
10176 In code in fs/compat_ioctl.c that translates ioctl arguments
10177 into a in-kernel structure, then performs sys_ioctl, possibly
10178 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
10179 calls to do_ioctl calls. do_ioctl is a new function that does
10180 the same thing as sys_ioctl, but doesn't look up the fd again.
10181
10182 This change is made to avoid (potential) security issues
10183 because of ioctl handlers that accept one of the ioctl
10184 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
10185 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
10186 This can happen for multiple reasons:
10187
10188 - The ioctl command number could be reused.
10189 - The ioctl handler might not check the full ioctl
10190 command. This is e.g. true for drm_ioctl.
10191 - The ioctl handler is very special, e.g. cuse_file_ioctl
10192
10193 The real issue is that set_fs(KERNEL_DS) is used here,
10194 but that's fixed in a separate commit
10195 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
10196
10197 This change mitigates potential security issues by
10198 preventing a race that permits invocation of
10199 unlocked_ioctl handlers under KERNEL_DS through compat
10200 code even if a corresponding compat_ioctl handler exists.
10201
10202 So far, no way has been identified to use this to damage
10203 kernel memory without having CAP_SYS_ADMIN in the init ns
10204 (with the capability, doing reads/writes at arbitrary
10205 kernel addresses should be easy through CUSE's ioctl
10206 handler with FUSE_IOCTL_UNRESTRICTED set).
10207
10208 [AV: two missed sys_ioctl() taken care of]
10209
10210 Signed-off-by: Jann Horn <jann@thejh.net>
10211 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10212
10213 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
10214 1 files changed, 68 insertions(+), 54 deletions(-)
10215
10216 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
10217 Author: Vasily Kulikov <segoon@openwall.com>
10218 Date: Fri Jan 15 16:57:55 2016 -0800
10219
10220 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
10221
10222 TIMER_ENTRY_STATIC is defined as a poison pointers which
10223 should point to nowhere. Redefine them using POISON_POINTER_DELTA
10224 arithmetics to make sure they really point to non-mappable area declared
10225 by the target architecture.
10226
10227 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
10228 Acked-by: Thomas Gleixner <tglx@linutronix.de>
10229 Cc: Solar Designer <solar@openwall.com>
10230 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
10231 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
10232 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
10233
10234 Conflicts:
10235
10236 include/linux/poison.h
10237
10238 include/linux/poison.h | 2 +-
10239 1 files changed, 1 insertions(+), 1 deletions(-)
10240
10241 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
10242 Author: Brad Spengler <spender@grsecurity.net>
10243 Date: Tue Jan 19 19:41:44 2016 -0500
10244
10245 Fix ARM compilation, reported by Austin Sepp
10246
10247 grsecurity/grsec_sig.c | 1 +
10248 1 files changed, 1 insertions(+), 0 deletions(-)
10249
10250 commit e15383743443dc43460a2fd73e0db0b608610dca
10251 Author: Takashi Iwai <tiwai@suse.de>
10252 Date: Mon Jan 18 13:52:47 2016 +0100
10253
10254 ALSA: hrtimer: Fix stall by hrtimer_cancel()
10255
10256 hrtimer_cancel() waits for the completion from the callback, thus it
10257 must not be called inside the callback itself. This was already a
10258 problem in the past with ALSA hrtimer driver, and the early commit
10259 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
10260
10261 However, the previous fix is still insufficient: it may still cause a
10262 lockup when the ALSA timer instance reprograms itself in its callback.
10263 Then it invokes the start function even in snd_timer_interrupt() that
10264 is called in hrtimer callback itself, results in a CPU stall. This is
10265 no hypothetical problem but actually triggered by syzkaller fuzzer.
10266
10267 This patch tries to fix the issue again. Now we call
10268 hrtimer_try_to_cancel() at both start and stop functions so that it
10269 won't fall into a deadlock, yet giving some chance to cancel the queue
10270 if the functions have been called outside the callback. The proper
10271 hrtimer_cancel() is called in anyway at closing, so this should be
10272 enough.
10273
10274 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
10275 Cc: <stable@vger.kernel.org>
10276 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10277
10278 sound/core/hrtimer.c | 3 ++-
10279 1 files changed, 2 insertions(+), 1 deletions(-)
10280
10281 commit 12d874daf706e6e7c1ae709141859c809599297e
10282 Author: Takashi Iwai <tiwai@suse.de>
10283 Date: Tue Jan 12 12:38:02 2016 +0100
10284
10285 ALSA: seq: Fix missing NULL check at remove_events ioctl
10286
10287 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
10288 unconditionally even if there is no FIFO assigned, and this leads to
10289 an Oops due to NULL dereference. The fix is just to add a proper NULL
10290 check.
10291
10292 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10293 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10294 Cc: <stable@vger.kernel.org>
10295 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10296
10297 sound/core/seq/seq_clientmgr.c | 2 +-
10298 1 files changed, 1 insertions(+), 1 deletions(-)
10299
10300 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
10301 Author: Takashi Iwai <tiwai@suse.de>
10302 Date: Tue Jan 12 15:36:27 2016 +0100
10303
10304 ALSA: seq: Fix race at timer setup and close
10305
10306 ALSA sequencer code has an open race between the timer setup ioctl and
10307 the close of the client. This was triggered by syzkaller fuzzer, and
10308 a use-after-free was caught there as a result.
10309
10310 This patch papers over it by adding a proper queue->timer_mutex lock
10311 around the timer-related calls in the relevant code path.
10312
10313 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10314 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10315 Cc: <stable@vger.kernel.org>
10316 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10317
10318 sound/core/seq/seq_queue.c | 2 ++
10319 1 files changed, 2 insertions(+), 0 deletions(-)
10320
10321 commit b9e55ab955e59b4a636d78a748be90334a48b485
10322 Author: Takashi Iwai <tiwai@suse.de>
10323 Date: Thu Jan 14 16:30:58 2016 +0100
10324
10325 ALSA: timer: Harden slave timer list handling
10326
10327 A slave timer instance might be still accessible in a racy way while
10328 operating the master instance as it lacks of locking. Since the
10329 master operation is mostly protected with timer->lock, we should cope
10330 with it while changing the slave instance, too. Also, some linked
10331 lists (active_list and ack_list) of slave instances aren't unlinked
10332 immediately at stopping or closing, and this may lead to unexpected
10333 accesses.
10334
10335 This patch tries to address these issues. It adds spin lock of
10336 timer->lock (either from master or slave, which is equivalent) in a
10337 few places. For avoiding a deadlock, we ensure that the global
10338 slave_active_lock is always locked at first before each timer lock.
10339
10340 Also, ack and active_list of slave instances are properly unlinked at
10341 snd_timer_stop() and snd_timer_close().
10342
10343 Last but not least, remove the superfluous call of _snd_timer_stop()
10344 at removing slave links. This is a noop, and calling it may confuse
10345 readers wrt locking. Further cleanup will follow in a later patch.
10346
10347 Actually we've got reports of use-after-free by syzkaller fuzzer, and
10348 this hopefully fixes these issues.
10349
10350 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10351 Cc: <stable@vger.kernel.org>
10352 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10353
10354 sound/core/timer.c | 18 ++++++++++++++----
10355 1 files changed, 14 insertions(+), 4 deletions(-)
10356
10357 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
10358 Author: Takashi Iwai <tiwai@suse.de>
10359 Date: Wed Jan 13 17:48:01 2016 +0100
10360
10361 ALSA: timer: Fix race among timer ioctls
10362
10363 ALSA timer ioctls have an open race and this may lead to a
10364 use-after-free of timer instance object. A simplistic fix is to make
10365 each ioctl exclusive. We have already tread_sem for controlling the
10366 tread, and extend this as a global mutex to be applied to each ioctl.
10367
10368 The downside is, of course, the worse concurrency. But these ioctls
10369 aren't to be parallel accessible, in anyway, so it should be fine to
10370 serialize there.
10371
10372 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10373 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10374 Cc: <stable@vger.kernel.org>
10375 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10376
10377 sound/core/timer.c | 32 +++++++++++++++++++-------------
10378 1 files changed, 19 insertions(+), 13 deletions(-)
10379
10380 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
10381 Author: Takashi Iwai <tiwai@suse.de>
10382 Date: Wed Jan 13 21:35:06 2016 +0100
10383
10384 ALSA: timer: Fix double unlink of active_list
10385
10386 ALSA timer instance object has a couple of linked lists and they are
10387 unlinked unconditionally at snd_timer_stop(). Meanwhile
10388 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
10389 the element list itself unchanged. This ends up with unlinking twice,
10390 and it was caught by syzkaller fuzzer.
10391
10392 The fix is to use list_del_init() variant properly there, too.
10393
10394 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10395 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10396 Cc: <stable@vger.kernel.org>
10397 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10398
10399 sound/core/timer.c | 2 +-
10400 1 files changed, 1 insertions(+), 1 deletions(-)
10401
10402 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
10403 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10404 Date: Mon Jan 18 18:03:48 2016 +0100
10405
10406 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
10407
10408 It was seen that defective configurations of openvswitch could overwrite
10409 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
10410 many recursions within ovs.
10411
10412 This problem arises due to the high stack usage of openvswitch. The rest
10413 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
10414
10415 We use the already existing recursion counter in ovs_execute_actions to
10416 implement an upper bound of 5 recursions.
10417
10418 Cc: Pravin Shelar <pshelar@ovn.org>
10419 Cc: Simon Horman <simon.horman@netronome.com>
10420 Cc: Eric Dumazet <eric.dumazet@gmail.com>
10421 Cc: Simon Horman <simon.horman@netronome.com>
10422 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10423 Signed-off-by: David S. Miller <davem@davemloft.net>
10424
10425 net/openvswitch/actions.c | 19 ++++++++++++++-----
10426 1 files changed, 14 insertions(+), 5 deletions(-)
10427
10428 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
10429 Author: Ursula Braun <ursula.braun@de.ibm.com>
10430 Date: Tue Jan 19 10:41:33 2016 +0100
10431
10432 af_iucv: Validate socket address length in iucv_sock_bind()
10433
10434 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
10435 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10436 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
10437 Signed-off-by: David S. Miller <davem@davemloft.net>
10438
10439 net/iucv/af_iucv.c | 3 +++
10440 1 files changed, 3 insertions(+), 0 deletions(-)
10441
10442 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
10443 Author: Brad Spengler <spender@grsecurity.net>
10444 Date: Tue Jan 19 19:32:54 2016 -0500
10445
10446 Apply the same fix as everyone else for the recent keys vulnerability that is
10447 unexploitable under PAX_REFCOUNT
10448
10449 Make a couple more changes that no one else can/will
10450
10451 include/linux/key-type.h | 4 ++--
10452 ipc/msgutil.c | 4 ++--
10453 security/keys/internal.h | 2 +-
10454 security/keys/process_keys.c | 1 +
10455 4 files changed, 6 insertions(+), 5 deletions(-)
10456
10457 commit b56c3a63f431c193400aee17543021950bd14bc4
10458 Merge: 38b1a3d 470069c
10459 Author: Brad Spengler <spender@grsecurity.net>
10460 Date: Sun Jan 17 18:30:19 2016 -0500
10461
10462 Merge branch 'pax-test' into grsec-test
10463
10464 commit 470069cfedef2180313233d275be5901bd6d1135
10465 Author: Brad Spengler <spender@grsecurity.net>
10466 Date: Sun Jan 17 18:29:59 2016 -0500
10467
10468 Update to pax-linux-4.3.3-test22.patch:
10469 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
10470 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
10471
10472 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
10473 drivers/gpu/drm/drm_pci.c | 3 +++
10474 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
10475 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
10476 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
10477 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
10478 drivers/net/usb/asix_common.c | 3 ++-
10479 include/drm/drmP.h | 1 +
10480 8 files changed, 22 insertions(+), 29 deletions(-)
10481
10482 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
10483 Author: Brad Spengler <spender@grsecurity.net>
10484 Date: Sun Jan 17 12:33:53 2016 -0500
10485
10486 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
10487 mentioned banning execution of suid/sgid binaries, though the kernel
10488 source clearly only mentions banning execution of suid binaries. Since
10489 there's no reason for us to not ban execution of sgid binaries as well,
10490 make the implementation match the Kconfig description.
10491
10492 fs/exec.c | 4 ++--
10493 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
10494 include/linux/sched.h | 4 ++--
10495 3 files changed, 18 insertions(+), 17 deletions(-)
10496
10497 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
10498 Merge: d141a86 ea4a835
10499 Author: Brad Spengler <spender@grsecurity.net>
10500 Date: Sat Jan 16 14:12:22 2016 -0500
10501
10502 Merge branch 'pax-test' into grsec-test
10503
10504 Conflicts:
10505 drivers/gpu/drm/i810/i810_drv.c
10506
10507 commit ea4a835328ada6513ac013986764d6caea8cd348
10508 Author: Brad Spengler <spender@grsecurity.net>
10509 Date: Sat Jan 16 14:11:30 2016 -0500
10510
10511 Update to pax-linux-4.3.3-test21.patch:
10512 - fixed some fallout from the drm_drivers constification, reported by spender
10513
10514 drivers/gpu/drm/armada/armada_drv.c | 3 +--
10515 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
10516 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10517 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
10518 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10519 5 files changed, 8 insertions(+), 6 deletions(-)
10520
10521 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
10522 Author: Brad Spengler <spender@grsecurity.net>
10523 Date: Sat Jan 16 13:16:36 2016 -0500
10524
10525 compile fix
10526
10527 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10528 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
10529 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10530 3 files changed, 5 insertions(+), 3 deletions(-)
10531
10532 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
10533 Merge: 5fa135d bbda879
10534 Author: Brad Spengler <spender@grsecurity.net>
10535 Date: Sat Jan 16 12:59:22 2016 -0500
10536
10537 Merge branch 'pax-test' into grsec-test
10538
10539 commit bbda87914edf63e27fb46670bf3a373f2b963c73
10540 Author: Brad Spengler <spender@grsecurity.net>
10541 Date: Sat Jan 16 12:58:04 2016 -0500
10542
10543 Update to pax-linux-4.3.3-test20.patch:
10544 - constified drm_driver
10545 - Emese fixed a special case in handling __func__ in the initify plugin
10546 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
10547 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
10548
10549 arch/x86/kernel/cpu/perf_event.h | 2 +-
10550 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
10551 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
10552 arch/x86/kernel/uprobes.c | 2 +-
10553 arch/x86/mm/mpx.c | 2 +-
10554 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
10555 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
10556 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
10557 drivers/gpu/drm/drm_pci.c | 6 +-
10558 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
10559 drivers/gpu/drm/i915/i915_dma.c | 2 +-
10560 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
10561 drivers/gpu/drm/i915/i915_drv.h | 2 +-
10562 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
10563 drivers/gpu/drm/mga/mga_drv.c | 5 +-
10564 drivers/gpu/drm/mga/mga_drv.h | 2 +-
10565 drivers/gpu/drm/mga/mga_state.c | 2 +-
10566 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
10567 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
10568 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
10569 drivers/gpu/drm/r128/r128_drv.c | 4 +-
10570 drivers/gpu/drm/r128/r128_drv.h | 2 +-
10571 drivers/gpu/drm/r128/r128_state.c | 2 +-
10572 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
10573 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
10574 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
10575 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
10576 drivers/gpu/drm/savage/savage_bci.c | 2 +-
10577 drivers/gpu/drm/savage/savage_drv.c | 5 +-
10578 drivers/gpu/drm/savage/savage_drv.h | 2 +-
10579 drivers/gpu/drm/sis/sis_drv.c | 5 +-
10580 drivers/gpu/drm/sis/sis_drv.h | 2 +-
10581 drivers/gpu/drm/sis/sis_mm.c | 2 +-
10582 drivers/gpu/drm/via/via_dma.c | 2 +-
10583 drivers/gpu/drm/via/via_drv.c | 5 +-
10584 drivers/gpu/drm/via/via_drv.h | 2 +-
10585 include/drm/drmP.h | 2 +-
10586 mm/slab.c | 2 +-
10587 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
10588 tools/gcc/initify_plugin.c | 15 +++-
10589 .../disable_size_overflow_hash.data | 1 +
10590 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
10591 42 files changed, 156 insertions(+), 110 deletions(-)
10592
10593 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
10594 Author: Brad Spengler <spender@grsecurity.net>
10595 Date: Sat Jan 16 12:19:23 2016 -0500
10596
10597 compile fix
10598
10599 grsecurity/grsec_sig.c | 3 +--
10600 1 files changed, 1 insertions(+), 2 deletions(-)
10601
10602 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
10603 Author: Brad Spengler <spender@grsecurity.net>
10604 Date: Sat Jan 16 12:10:37 2016 -0500
10605
10606 As pointed out by Jann Horn, some distros are starting to circumvent
10607 previous assumptions about the attainability of a user to control
10608 multiple UIDs by handing out suid binaries that allow a user to run
10609 processes (including exploits) under a number of other pre-defined
10610 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
10611 (though it would have to involve some code path that doesn't involve
10612 locks) fix that here by ensuring no more than 8 users on a system can
10613 be banned before a reboot is required. If more are banned, a panic
10614 is triggered.
10615
10616 grsecurity/grsec_sig.c | 8 ++++++++
10617 1 files changed, 8 insertions(+), 0 deletions(-)
10618
10619 commit a8d37776e9521c567ebff6730d49312f72435f08
10620 Author: Eric Dumazet <edumazet@google.com>
10621 Date: Thu Dec 3 11:12:07 2015 -0800
10622
10623 proc: add a reschedule point in proc_readfd_common()
10624
10625 User can pass an arbitrary large buffer to getdents().
10626
10627 It is typically a 32KB buffer used by libc scandir() implementation.
10628
10629 When scanning /proc/{pid}/fd, we can hold cpu way too long,
10630 so add a cond_resched() to be kind with other tasks.
10631
10632 We've seen latencies of more than 50ms on real workloads.
10633
10634 Signed-off-by: Eric Dumazet <edumazet@google.com>
10635 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
10636 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10637
10638 fs/proc/fd.c | 1 +
10639 1 files changed, 1 insertions(+), 0 deletions(-)
10640
10641 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
10642 Author: Rabin Vincent <rabin@rab.in>
10643 Date: Tue Jan 12 20:17:08 2016 +0100
10644
10645 net: bpf: reject invalid shifts
10646
10647 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
10648 constant shift that can't be encoded in the immediate field of the
10649 UBFM/SBFM instructions is passed to the JIT. Since these shifts
10650 amounts, which are negative or >= regsize, are invalid, reject them in
10651 the eBPF verifier and the classic BPF filter checker, for all
10652 architectures.
10653
10654 Signed-off-by: Rabin Vincent <rabin@rab.in>
10655 Acked-by: Alexei Starovoitov <ast@kernel.org>
10656 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
10657 Signed-off-by: David S. Miller <davem@davemloft.net>
10658
10659 kernel/bpf/verifier.c | 10 ++++++++++
10660 net/core/filter.c | 5 +++++
10661 2 files changed, 15 insertions(+), 0 deletions(-)
10662
10663 commit c248e115a73496625a1c64660d0eeefd67e55cbf
10664 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10665 Date: Fri Jan 8 11:00:54 2016 -0200
10666
10667 sctp: fix use-after-free in pr_debug statement
10668
10669 Dmitry Vyukov reported a use-after-free in the code expanded by the
10670 macro debug_post_sfx, which is caused by the use of the asoc pointer
10671 after it was freed within sctp_side_effect() scope.
10672
10673 This patch fixes it by allowing sctp_side_effect to clear that asoc
10674 pointer when the TCB is freed.
10675
10676 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
10677 because it will trigger DELETE_TCB too on that same loop.
10678
10679 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
10680 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
10681 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
10682
10683 The macro is already prepared to handle such NULL pointer.
10684
10685 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10686 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10687 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
10688 Signed-off-by: David S. Miller <davem@davemloft.net>
10689
10690 net/sctp/sm_sideeffect.c | 11 ++++++-----
10691 net/sctp/sm_statefuns.c | 17 ++++-------------
10692 2 files changed, 10 insertions(+), 18 deletions(-)
10693
10694 commit 395ea8a9e73e184fc14153a033000bccf4213213
10695 Author: willy tarreau <w@1wt.eu>
10696 Date: Sun Jan 10 07:54:56 2016 +0100
10697
10698 unix: properly account for FDs passed over unix sockets
10699
10700 It is possible for a process to allocate and accumulate far more FDs than
10701 the process' limit by sending them over a unix socket then closing them
10702 to keep the process' fd count low.
10703
10704 This change addresses this problem by keeping track of the number of FDs
10705 in flight per user and preventing non-privileged processes from having
10706 more FDs in flight than their configured FD limit.
10707
10708 Reported-by: socketpair@gmail.com
10709 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10710 Mitigates: CVE-2013-4312 (Linux 2.0+)
10711 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10712 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10713 Signed-off-by: Willy Tarreau <w@1wt.eu>
10714 Signed-off-by: David S. Miller <davem@davemloft.net>
10715
10716 include/linux/sched.h | 1 +
10717 net/unix/af_unix.c | 24 ++++++++++++++++++++----
10718 net/unix/garbage.c | 13 ++++++++-----
10719 3 files changed, 29 insertions(+), 9 deletions(-)
10720
10721 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
10722 Author: Sasha Levin <sasha.levin@oracle.com>
10723 Date: Thu Jan 7 14:52:43 2016 -0500
10724
10725 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
10726
10727 proc_dostring() needs an initialized destination string, while the one
10728 provided in proc_sctp_do_hmac_alg() contains stack garbage.
10729
10730 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
10731 accessing invalid memory.
10732
10733 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
10734 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10735 Signed-off-by: David S. Miller <davem@davemloft.net>
10736
10737 net/sctp/sysctl.c | 2 +-
10738 1 files changed, 1 insertions(+), 1 deletions(-)
10739
10740 commit 4014e09faf0fe9054119624ccfff1236e886b554
10741 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
10742 Date: Tue Nov 24 17:13:21 2015 -0500
10743
10744 RDS: fix race condition when sending a message on unbound socket
10745
10746 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
10747
10748 Sasha's found a NULL pointer dereference in the RDS connection code when
10749 sending a message to an apparently unbound socket. The problem is caused
10750 by the code checking if the socket is bound in rds_sendmsg(), which checks
10751 the rs_bound_addr field without taking a lock on the socket. This opens a
10752 race where rs_bound_addr is temporarily set but where the transport is not
10753 in rds_bind(), leading to a NULL pointer dereference when trying to
10754 dereference 'trans' in __rds_conn_create().
10755
10756 Vegard wrote a reproducer for this issue, so kindly ask him to share if
10757 you're interested.
10758
10759 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
10760 with this patch, whereas I could without.
10761
10762 Complete earlier incomplete fix to CVE-2015-6937:
10763
10764 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
10765
10766 Cc: David S. Miller <davem@davemloft.net>
10767
10768 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
10769 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
10770 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
10771 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
10772 Signed-off-by: David S. Miller <davem@davemloft.net>
10773 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
10774
10775 Conflicts:
10776
10777 net/rds/send.c
10778
10779 net/rds/connection.c | 6 ------
10780 1 files changed, 0 insertions(+), 6 deletions(-)
10781
10782 commit 206df8d01104344d7588d801016a281a4cd25556
10783 Author: Sasha Levin <sasha.levin@oracle.com>
10784 Date: Tue Sep 8 10:53:40 2015 -0400
10785
10786 RDS: verify the underlying transport exists before creating a connection
10787
10788 There was no verification that an underlying transport exists when creating
10789 a connection, this would cause dereferencing a NULL ptr.
10790
10791 It might happen on sockets that weren't properly bound before attempting to
10792 send a message, which will cause a NULL ptr deref:
10793
10794 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
10795 [135546.051270] Modules linked in:
10796 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
10797 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
10798 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
10799 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
10800 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
10801 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
10802 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
10803 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
10804 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
10805 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
10806 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
10807 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
10808 [135546.064723] Stack:
10809 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
10810 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
10811 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
10812 [135546.068629] Call Trace:
10813 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
10814 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
10815 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
10816 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
10817 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
10818 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
10819 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
10820 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
10821 [135546.076349] ? __might_fault (mm/memory.c:3795)
10822 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
10823 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
10824 [135546.078856] SYSC_sendto (net/socket.c:1657)
10825 [135546.079596] ? SYSC_connect (net/socket.c:1628)
10826 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
10827 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
10828 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
10829 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
10830 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
10831 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
10832 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
10833
10834 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
10835 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10836 Signed-off-by: David S. Miller <davem@davemloft.net>
10837
10838 net/rds/connection.c | 6 ++++++
10839 1 files changed, 6 insertions(+), 0 deletions(-)
10840
10841 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
10842 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
10843 Date: Tue Jan 5 20:32:47 2016 -0500
10844
10845 ftrace/module: Call clean up function when module init fails early
10846
10847 If the module init code fails after calling ftrace_module_init() and before
10848 calling do_init_module(), we can suffer from a memory leak. This is because
10849 ftrace_module_init() allocates pages to store the locations that ftrace
10850 hooks are placed in the module text. If do_init_module() fails, it still
10851 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
10852 the pages it allocated for the module. But if load_module() fails before
10853 then, the pages allocated by ftrace_module_init() will never be freed.
10854
10855 Call ftrace_release_mod() on the module if load_module() fails before
10856 getting to do_init_module().
10857
10858 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
10859
10860 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
10861 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
10862 Cc: stable@vger.kernel.org # v2.6.38+
10863 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
10864 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
10865
10866 include/linux/ftrace.h | 1 +
10867 kernel/module.c | 6 ++++++
10868 2 files changed, 7 insertions(+), 0 deletions(-)
10869
10870 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
10871 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
10872 Date: Wed Jan 6 00:18:48 2016 -0800
10873
10874 net: possible use after free in dst_release
10875
10876 dst_release should not access dst->flags after decrementing
10877 __refcnt to 0. The dst_entry may be in dst_busy_list and
10878 dst_gc_task may dst_destroy it before dst_release gets a chance
10879 to access dst->flags.
10880
10881 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
10882 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
10883 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
10884 Acked-by: Eric Dumazet <edumazet@google.com>
10885 Signed-off-by: David S. Miller <davem@davemloft.net>
10886
10887 net/core/dst.c | 3 ++-
10888 1 files changed, 2 insertions(+), 1 deletions(-)
10889
10890 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
10891 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
10892 Date: Wed Jan 6 14:55:02 2016 +0000
10893
10894 mkiss: fix scribble on freed memory
10895
10896 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
10897 scribble on free memory but added a new one which allows the user to
10898 scribble even more and user controlled data into freed space.
10899
10900 As with 6pack we need to halt the queue before we free the buffers, because
10901 the transmit logic is not protected by the semaphore.
10902
10903 Signed-off-by: Alan Cox <alan@linux.intel.com>
10904 Signed-off-by: David S. Miller <davem@davemloft.net>
10905
10906 drivers/net/hamradio/mkiss.c | 5 +++++
10907 1 files changed, 5 insertions(+), 0 deletions(-)
10908
10909 commit 5cbbcbd32dc1949470f61d342503808fa9555276
10910 Author: David Miller <davem@davemloft.net>
10911 Date: Thu Dec 17 16:05:49 2015 -0500
10912
10913 mkiss: Fix use after free in mkiss_close().
10914
10915 Need to do the unregister_device() after all references to the driver
10916 private have been done.
10917
10918 Signed-off-by: David S. Miller <davem@davemloft.net>
10919
10920 drivers/net/hamradio/mkiss.c | 4 ++--
10921 1 files changed, 2 insertions(+), 2 deletions(-)
10922
10923 commit b00171576794a98068e069a660f0991a6a5190ff
10924 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
10925 Date: Tue Jan 5 11:51:25 2016 +0000
10926
10927 6pack: fix free memory scribbles
10928
10929 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
10930 memory scribble but in doing so replaced it with a different one that allows
10931 the user to control the data and scribble even more.
10932
10933 sixpack_close is called by the tty layer in tty context. The tty context is
10934 protected by sp_get() and sp_put(). However network layer activity via
10935 sp_xmit() is not protected this way. We must therefore stop the queue
10936 otherwise the user gets to dump a buffer mostly of their choice into freed
10937 kernel pages.
10938
10939 Signed-off-by: Alan Cox <alan@linux.intel.com>
10940 Signed-off-by: David S. Miller <davem@davemloft.net>
10941
10942 drivers/net/hamradio/6pack.c | 6 ++++++
10943 1 files changed, 6 insertions(+), 0 deletions(-)
10944
10945 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
10946 Author: David Miller <davem@davemloft.net>
10947 Date: Thu Dec 17 16:05:32 2015 -0500
10948
10949 6pack: Fix use after free in sixpack_close().
10950
10951 Need to do the unregister_device() after all references to the driver
10952 private have been done.
10953
10954 Also we need to use del_timer_sync() for the timers so that we don't
10955 have any asynchronous references after the unregister.
10956
10957 Signed-off-by: David S. Miller <davem@davemloft.net>
10958
10959 drivers/net/hamradio/6pack.c | 8 ++++----
10960 1 files changed, 4 insertions(+), 4 deletions(-)
10961
10962 commit 4f9d532742656b3613d579220fd10c78f24ba37b
10963 Author: Rabin Vincent <rabin@rab.in>
10964 Date: Tue Jan 5 16:23:07 2016 +0100
10965
10966 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
10967
10968 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
10969 instructions since it XORs A with X while all the others replace A with
10970 some loaded value. All the BPF JITs fail to clear A if this is used as
10971 the first instruction in a filter. This was found using american fuzzy
10972 lop.
10973
10974 Add a helper to determine if A needs to be cleared given the first
10975 instruction in a filter, and use this in the JITs. Except for ARM, the
10976 rest have only been compile-tested.
10977
10978 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
10979 Signed-off-by: Rabin Vincent <rabin@rab.in>
10980 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
10981 Acked-by: Alexei Starovoitov <ast@kernel.org>
10982 Signed-off-by: David S. Miller <davem@davemloft.net>
10983
10984 arch/arm/net/bpf_jit_32.c | 16 +---------------
10985 arch/mips/net/bpf_jit.c | 16 +---------------
10986 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
10987 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
10988 include/linux/filter.h | 19 +++++++++++++++++++
10989 5 files changed, 25 insertions(+), 56 deletions(-)
10990
10991 commit 570d88f8acfffda92b89ae2e1c47320d47256034
10992 Author: John Fastabend <john.fastabend@gmail.com>
10993 Date: Tue Jan 5 09:11:36 2016 -0800
10994
10995 net: sched: fix missing free per cpu on qstats
10996
10997 When a qdisc is using per cpu stats (currently just the ingress
10998 qdisc) only the bstats are being freed. This also free's the qstats.
10999
11000 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
11001 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
11002 Acked-by: Eric Dumazet <edumazet@google.com>
11003 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11004 Signed-off-by: David S. Miller <davem@davemloft.net>
11005
11006 net/sched/sch_generic.c | 4 +++-
11007 1 files changed, 3 insertions(+), 1 deletions(-)
11008
11009 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
11010 Author: Rabin Vincent <rabin@rab.in>
11011 Date: Tue Jan 5 18:34:04 2016 +0100
11012
11013 ARM: net: bpf: fix zero right shift
11014
11015 The LSR instruction cannot be used to perform a zero right shift since a
11016 0 as the immediate value (imm5) in the LSR instruction encoding means
11017 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
11018
11019 Make the JIT skip generation of the LSR if a zero-shift is requested.
11020
11021 This was found using american fuzzy lop.
11022
11023 Signed-off-by: Rabin Vincent <rabin@rab.in>
11024 Acked-by: Alexei Starovoitov <ast@kernel.org>
11025 Signed-off-by: David S. Miller <davem@davemloft.net>
11026
11027 arch/arm/net/bpf_jit_32.c | 3 ++-
11028 1 files changed, 2 insertions(+), 1 deletions(-)
11029
11030 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
11031 Author: Brad Spengler <spender@grsecurity.net>
11032 Date: Wed Jan 6 20:35:57 2016 -0500
11033
11034 Don't perform hidden lookups in RBAC against the directory of
11035 a file being opened with O_CREAT, reported by Karl Witt
11036
11037 Conflicts:
11038
11039 fs/namei.c
11040
11041 fs/namei.c | 3 ---
11042 1 files changed, 0 insertions(+), 3 deletions(-)
11043
11044 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
11045 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11046 Date: Tue Jan 5 10:46:00 2016 +0100
11047
11048 bridge: Only call /sbin/bridge-stp for the initial network namespace
11049
11050 [I stole this patch from Eric Biederman. He wrote:]
11051
11052 > There is no defined mechanism to pass network namespace information
11053 > into /sbin/bridge-stp therefore don't even try to invoke it except
11054 > for bridge devices in the initial network namespace.
11055 >
11056 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
11057 > invoked for any network device name which if /sbin/bridge-stp does not
11058 > guard against unreasonable arguments or being invoked twice on the
11059 > same network device could cause problems.
11060
11061 [Hannes: changed patch using netns_eq]
11062
11063 Cc: Eric W. Biederman <ebiederm@xmission.com>
11064 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
11065 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11066 Signed-off-by: David S. Miller <davem@davemloft.net>
11067
11068 net/bridge/br_stp_if.c | 5 ++++-
11069 1 files changed, 4 insertions(+), 1 deletions(-)
11070
11071 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
11072 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11073 Date: Wed Dec 23 16:28:40 2015 -0200
11074
11075 sctp: use GFP_USER for user-controlled kmalloc
11076
11077 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11078 missed two other spots.
11079
11080 For connectx, as it's more likely to be used by kernel users of the API,
11081 it detects if GFP_USER should be used or not.
11082
11083 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11084 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11085 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11086 Signed-off-by: David S. Miller <davem@davemloft.net>
11087
11088 net/sctp/socket.c | 9 ++++++---
11089 1 files changed, 6 insertions(+), 3 deletions(-)
11090
11091 commit 5718a1f63c41fc156f729783423b002763779d04
11092 Author: Florian Westphal <fw@strlen.de>
11093 Date: Thu Dec 31 14:26:33 2015 +0100
11094
11095 connector: bump skb->users before callback invocation
11096
11097 Dmitry reports memleak with syskaller program.
11098 Problem is that connector bumps skb usecount but might not invoke callback.
11099
11100 So move skb_get to where we invoke the callback.
11101
11102 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11103 Signed-off-by: Florian Westphal <fw@strlen.de>
11104 Signed-off-by: David S. Miller <davem@davemloft.net>
11105
11106 drivers/connector/connector.c | 11 +++--------
11107 1 files changed, 3 insertions(+), 8 deletions(-)
11108
11109 commit 2e6372e6a97f8d642416899861f91777f44f13b7
11110 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11111 Date: Sun Jan 3 18:56:38 2016 +0000
11112
11113 af_unix: Fix splice-bind deadlock
11114
11115 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
11116 system call and AF_UNIX sockets,
11117
11118 http://lists.openwall.net/netdev/2015/11/06/24
11119
11120 The situation was analyzed as
11121
11122 (a while ago) A: socketpair()
11123 B: splice() from a pipe to /mnt/regular_file
11124 does sb_start_write() on /mnt
11125 C: try to freeze /mnt
11126 wait for B to finish with /mnt
11127 A: bind() try to bind our socket to /mnt/new_socket_name
11128 lock our socket, see it not bound yet
11129 decide that it needs to create something in /mnt
11130 try to do sb_start_write() on /mnt, block (it's
11131 waiting for C).
11132 D: splice() from the same pipe to our socket
11133 lock the pipe, see that socket is connected
11134 try to lock the socket, block waiting for A
11135 B: get around to actually feeding a chunk from
11136 pipe to file, try to lock the pipe. Deadlock.
11137
11138 on 2015/11/10 by Al Viro,
11139
11140 http://lists.openwall.net/netdev/2015/11/10/4
11141
11142 The patch fixes this by removing the kern_path_create related code from
11143 unix_mknod and executing it as part of unix_bind prior acquiring the
11144 readlock of the socket in question. This means that A (as used above)
11145 will sb_start_write on /mnt before it acquires the readlock, hence, it
11146 won't indirectly block B which first did a sb_start_write and then
11147 waited for a thread trying to acquire the readlock. Consequently, A
11148 being blocked by C waiting for B won't cause a deadlock anymore
11149 (effectively, both A and B acquire two locks in opposite order in the
11150 situation described above).
11151
11152 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
11153
11154 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11155 Signed-off-by: David S. Miller <davem@davemloft.net>
11156
11157 Conflicts:
11158
11159 net/unix/af_unix.c
11160
11161 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
11162 1 files changed, 42 insertions(+), 28 deletions(-)
11163
11164 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
11165 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
11166 Date: Thu Dec 31 13:11:28 2015 +0800
11167
11168 tracing: Fix setting of start_index in find_next()
11169
11170 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
11171 panic at t_show.
11172
11173 general protection fault: 0000 [#1] PREEMPT SMP
11174 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
11175 RIP: 0010:[<ffffffff811375b2>]
11176 [<ffffffff811375b2>] t_show+0x22/0xe0
11177 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
11178 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
11179 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
11180 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
11181 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
11182 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
11183 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
11184 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
11185 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
11186 Call Trace:
11187 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
11188 [<ffffffff811b749b>] vfs_read+0x9b/0x160
11189 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
11190 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
11191 ---[ end trace 5bd9eb630614861e ]---
11192 Kernel panic - not syncing: Fatal exception
11193
11194 When the first time find_next calls find_next_mod_format, it should
11195 iterate the trace_bprintk_fmt_list to find the first print format of
11196 the module. However in current code, start_index is smaller than *pos
11197 at first, and code will not iterate the list. Latter container_of will
11198 get the wrong address with former v, which will cause mod_fmt be a
11199 meaningless object and so is the returned mod_fmt->fmt.
11200
11201 This patch will fix it by correcting the start_index. After fixed,
11202 when the first time calls find_next_mod_format, start_index will be
11203 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
11204 get the right module printk format, so is the returned mod_fmt->fmt.
11205
11206 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
11207
11208 Cc: stable@vger.kernel.org # 3.12+
11209 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
11210 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
11211 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11212
11213 kernel/trace/trace_printk.c | 1 +
11214 1 files changed, 1 insertions(+), 0 deletions(-)
11215
11216 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
11217 Author: Al Viro <viro@zeniv.linux.org.uk>
11218 Date: Mon Dec 28 20:47:08 2015 -0500
11219
11220 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
11221
11222 Cc: stable@vger.kernel.org # 3.15+
11223 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
11224 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11225
11226 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
11227 1 files changed, 37 insertions(+), 36 deletions(-)
11228
11229 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
11230 Merge: de243c2 3adc55a
11231 Author: Brad Spengler <spender@grsecurity.net>
11232 Date: Tue Jan 5 18:10:10 2016 -0500
11233
11234 Merge branch 'pax-test' into grsec-test
11235
11236 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
11237 Author: Brad Spengler <spender@grsecurity.net>
11238 Date: Tue Jan 5 18:08:53 2016 -0500
11239
11240 Update to pax-linux-4.3.3-test16.patch:
11241 - small cleanup in entry_64.S on x86
11242 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
11243 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
11244 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
11245 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
11246 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
11247
11248 arch/x86/entry/entry_64.S | 60 +++++-----
11249 arch/x86/kernel/alternative.c | 2 +-
11250 arch/x86/kvm/emulate.c | 4 +-
11251 tools/gcc/initify_plugin.c | 123 +++++++++----------
11252 .../disable_size_overflow_hash.data | 4 +-
11253 .../size_overflow_plugin/size_overflow_hash.data | 2 -
11254 6 files changed, 93 insertions(+), 102 deletions(-)
11255
11256 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
11257 Author: Brad Spengler <spender@grsecurity.net>
11258 Date: Tue Dec 29 18:01:24 2015 -0500
11259
11260 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
11261 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
11262 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
11263
11264 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
11265 against suid/sgid attacks and the flaw above would only eliminate the extra
11266 entropy provided for the brk-managed heap, still leaving it with the minimum
11267 of 16-bit entropy for mmap on x86 and 28 on x64.
11268
11269 mm/mmap.c | 2 +-
11270 1 files changed, 1 insertions(+), 1 deletions(-)
11271
11272 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
11273 Merge: 436201b 2584340
11274 Author: Brad Spengler <spender@grsecurity.net>
11275 Date: Mon Dec 28 20:30:01 2015 -0500
11276
11277 Merge branch 'pax-test' into grsec-test
11278
11279 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
11280 Author: Brad Spengler <spender@grsecurity.net>
11281 Date: Mon Dec 28 20:29:28 2015 -0500
11282
11283 Update to pax-linux-4.3.3-test14.patch:
11284 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
11285 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
11286 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
11287 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
11288 - fixed an assert in the initify plugin that triggered in vic_register on arm
11289
11290 arch/arm/include/asm/atomic.h | 7 +++++--
11291 arch/arm/include/asm/domain.h | 5 ++---
11292 arch/x86/kernel/tboot.c | 14 +++++++++-----
11293 drivers/hv/channel.c | 4 +---
11294 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
11295 drivers/net/hyperv/rndis_filter.c | 3 +--
11296 fs/exec.c | 4 ++--
11297 include/linux/atomic.h | 15 ---------------
11298 net/core/skbuff.c | 3 ++-
11299 tools/gcc/initify_plugin.c | 4 +++-
11300 10 files changed, 26 insertions(+), 35 deletions(-)
11301
11302 commit 436201b6626b488d173c8076447000077c27b84a
11303 Author: David Howells <dhowells@redhat.com>
11304 Date: Fri Dec 18 01:34:26 2015 +0000
11305
11306 KEYS: Fix race between read and revoke
11307
11308 This fixes CVE-2015-7550.
11309
11310 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
11311 happens between keyctl_read() checking the validity of a key and the key's
11312 semaphore being taken, then the key type read method will see a revoked key.
11313
11314 This causes a problem for the user-defined key type because it assumes in
11315 its read method that there will always be a payload in a non-revoked key
11316 and doesn't check for a NULL pointer.
11317
11318 Fix this by making keyctl_read() check the validity of a key after taking
11319 semaphore instead of before.
11320
11321 I think the bug was introduced with the original keyrings code.
11322
11323 This was discovered by a multithreaded test program generated by syzkaller
11324 (http://github.com/google/syzkaller). Here's a cleaned up version:
11325
11326 #include <sys/types.h>
11327 #include <keyutils.h>
11328 #include <pthread.h>
11329 void *thr0(void *arg)
11330 {
11331 key_serial_t key = (unsigned long)arg;
11332 keyctl_revoke(key);
11333 return 0;
11334 }
11335 void *thr1(void *arg)
11336 {
11337 key_serial_t key = (unsigned long)arg;
11338 char buffer[16];
11339 keyctl_read(key, buffer, 16);
11340 return 0;
11341 }
11342 int main()
11343 {
11344 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
11345 pthread_t th[5];
11346 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
11347 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
11348 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
11349 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
11350 pthread_join(th[0], 0);
11351 pthread_join(th[1], 0);
11352 pthread_join(th[2], 0);
11353 pthread_join(th[3], 0);
11354 return 0;
11355 }
11356
11357 Build as:
11358
11359 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
11360
11361 Run as:
11362
11363 while keyctl-race; do :; done
11364
11365 as it may need several iterations to crash the kernel. The crash can be
11366 summarised as:
11367
11368 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
11369 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
11370 ...
11371 Call Trace:
11372 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
11373 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
11374 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
11375
11376 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11377 Signed-off-by: David Howells <dhowells@redhat.com>
11378 Tested-by: Dmitry Vyukov <dvyukov@google.com>
11379 Cc: stable@vger.kernel.org
11380 Signed-off-by: James Morris <james.l.morris@oracle.com>
11381
11382 security/keys/keyctl.c | 18 +++++++++---------
11383 1 files changed, 9 insertions(+), 9 deletions(-)
11384
11385 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
11386 Author: Brad Spengler <spender@grsecurity.net>
11387 Date: Tue Dec 22 20:44:01 2015 -0500
11388
11389 Add new kernel command-line param: pax_size_overflow_report_only
11390 If a user triggers a size_overflow violation that makes it difficult
11391 to obtain the call trace without serial console/net console, they can
11392 use this option to provide that information to us
11393
11394 Documentation/kernel-parameters.txt | 5 +++++
11395 fs/exec.c | 12 +++++++++---
11396 init/main.c | 11 +++++++++++
11397 3 files changed, 25 insertions(+), 3 deletions(-)
11398
11399 commit 4254a8da5851df8c08cdca5c392916e8c105408d
11400 Author: WANG Cong <xiyou.wangcong@gmail.com>
11401 Date: Mon Dec 21 10:55:45 2015 -0800
11402
11403 addrconf: always initialize sysctl table data
11404
11405 When sysctl performs restrict writes, it allows to write from
11406 a middle position of a sysctl file, which requires us to initialize
11407 the table data before calling proc_dostring() for the write case.
11408
11409 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
11410 Reported-by: Sasha Levin <sasha.levin@oracle.com>
11411 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11412 Tested-by: Sasha Levin <sasha.levin@oracle.com>
11413 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11414 Signed-off-by: David S. Miller <davem@davemloft.net>
11415
11416 net/ipv6/addrconf.c | 11 ++++-------
11417 1 files changed, 4 insertions(+), 7 deletions(-)
11418
11419 commit f8002863fb06c363180637046947a78a6ccb3d33
11420 Author: WANG Cong <xiyou.wangcong@gmail.com>
11421 Date: Wed Dec 16 23:39:04 2015 -0800
11422
11423 net: check both type and procotol for tcp sockets
11424
11425 Dmitry reported the following out-of-bound access:
11426
11427 Call Trace:
11428 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
11429 mm/kasan/report.c:294
11430 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
11431 [< inline >] SYSC_setsockopt net/socket.c:1746
11432 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
11433 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
11434 arch/x86/entry/entry_64.S:185
11435
11436 This is because we mistake a raw socket as a tcp socket.
11437 We should check both sk->sk_type and sk->sk_protocol to ensure
11438 it is a tcp socket.
11439
11440 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
11441
11442 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11443 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
11444 Cc: Eric Dumazet <eric.dumazet@gmail.com>
11445 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11446 Acked-by: Willem de Bruijn <willemb@google.com>
11447 Signed-off-by: David S. Miller <davem@davemloft.net>
11448
11449 net/core/skbuff.c | 3 ++-
11450 net/core/sock.c | 3 ++-
11451 2 files changed, 4 insertions(+), 2 deletions(-)
11452
11453 commit bd6b3399804470a4ad8f34229469ca149dceba3d
11454 Author: Colin Ian King <colin.king@canonical.com>
11455 Date: Fri Dec 18 14:22:01 2015 -0800
11456
11457 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
11458
11459 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
11460 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
11461 the setting of ret after the get_proc_task call and incorrectly left it as
11462 -ESRCH. Instead, return 0 when successful.
11463
11464 Example breakage:
11465
11466 echo 0 > /proc/self/coredump_filter
11467 bash: echo: write error: No such process
11468
11469 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
11470 Signed-off-by: Colin Ian King <colin.king@canonical.com>
11471 Acked-by: Kees Cook <keescook@chromium.org>
11472 Cc: <stable@vger.kernel.org> [4.3+]
11473 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
11474 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
11475
11476 fs/proc/base.c | 1 +
11477 1 files changed, 1 insertions(+), 0 deletions(-)
11478
11479 commit b28aca2b99ed08546778355fb9402c503ff9b29e
11480 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
11481 Date: Tue Dec 22 10:23:44 2015 -0700
11482
11483 block: ensure to split after potentially bouncing a bio
11484
11485 blk_queue_bio() does split then bounce, which makes the segment
11486 counting based on pages before bouncing and could go wrong. Move
11487 the split to after bouncing, like we do for blk-mq, and the we
11488 fix the issue of having the bio count for segments be wrong.
11489
11490 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
11491 Cc: stable@vger.kernel.org
11492 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
11493 Signed-off-by: Jens Axboe <axboe@fb.com>
11494
11495 block/blk-core.c | 4 ++--
11496 1 files changed, 2 insertions(+), 2 deletions(-)
11497
11498 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
11499 Merge: f6f63ae ec72fa5
11500 Author: Brad Spengler <spender@grsecurity.net>
11501 Date: Tue Dec 22 19:46:26 2015 -0500
11502
11503 Merge branch 'pax-test' into grsec-test
11504
11505 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
11506 Author: Brad Spengler <spender@grsecurity.net>
11507 Date: Tue Dec 22 19:45:51 2015 -0500
11508
11509 Update to pax-linux-4.3.3-test13.patch:
11510 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
11511 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
11512
11513 arch/arm/mm/fault.c | 2 +-
11514 arch/x86/mm/fault.c | 2 +-
11515 fs/btrfs/extent_map.c | 8 ++++++--
11516 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
11517 4 files changed, 11 insertions(+), 5 deletions(-)
11518
11519 commit f6f63ae154cd45028add1dc41957878060d77fbf
11520 Author: Brad Spengler <spender@grsecurity.net>
11521 Date: Thu Dec 17 18:43:44 2015 -0500
11522
11523 ptrace_has_cap() checks whether the current process should be
11524 treated as having a certain capability for ptrace checks
11525 against another process. Until now, this was equivalent to
11526 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
11527
11528 However, if a root-owned process wants to enter a user
11529 namespace for some reason without knowing who owns it and
11530 therefore can't change to the namespace owner's uid and gid
11531 before entering, as soon as it has entered the namespace,
11532 the namespace owner can attach to it via ptrace and thereby
11533 gain access to its uid and gid.
11534
11535 While it is possible for the entering process to switch to
11536 the uid of a claimed namespace owner before entering,
11537 causing the attempt to enter to fail if the claimed uid is
11538 wrong, this doesn't solve the problem of determining an
11539 appropriate gid.
11540
11541 With this change, the entering process can first enter the
11542 namespace and then safely inspect the namespace's
11543 properties, e.g. through /proc/self/{uid_map,gid_map},
11544 assuming that the namespace owner doesn't have access to
11545 uid 0.
11546 Signed-off-by: Jann Horn <jann@thejh.net>
11547
11548 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
11549 1 files changed, 25 insertions(+), 5 deletions(-)
11550
11551 commit e314f0fb63020f61543b401ff594e953c2c304e5
11552 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
11553 Date: Tue Dec 15 10:46:17 2015 -0800
11554
11555 net: fix uninitialized variable issue
11556
11557 msg_iocb needs to be initialized on the recv/recvfrom path.
11558 Otherwise afalg will wrongly interpret it as an async call.
11559
11560 Cc: stable@vger.kernel.org
11561 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
11562 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
11563 Signed-off-by: David S. Miller <davem@davemloft.net>
11564
11565 net/socket.c | 1 +
11566 1 files changed, 1 insertions(+), 0 deletions(-)
11567
11568 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
11569 Merge: dfa764c 142edcf
11570 Author: Brad Spengler <spender@grsecurity.net>
11571 Date: Wed Dec 16 21:01:17 2015 -0500
11572
11573 Merge branch 'pax-test' into grsec-test
11574
11575 commit 142edcf1005a57fb8887823565cf0bafad2f313c
11576 Author: Brad Spengler <spender@grsecurity.net>
11577 Date: Wed Dec 16 21:00:57 2015 -0500
11578
11579 Update to pax-linux-4.3.3-test12.patch:
11580 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
11581 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
11582
11583 drivers/tty/n_tty.c | 16 ++++++++--------
11584 .../disable_size_overflow_hash.data | 2 ++
11585 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
11586 3 files changed, 12 insertions(+), 12 deletions(-)
11587
11588 commit dfa764cc549892a5bfc1083cac78b99032cae577
11589 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11590 Date: Tue Dec 15 22:59:12 2015 +0100
11591
11592 ipv6: automatically enable stable privacy mode if stable_secret set
11593
11594 Bjørn reported that while we switch all interfaces to privacy stable mode
11595 when setting the secret, we don't set this mode for new interfaces. This
11596 does not make sense, so change this behaviour.
11597
11598 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
11599 Reported-by: Bjørn Mork <bjorn@mork.no>
11600 Cc: Bjørn Mork <bjorn@mork.no>
11601 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11602 Signed-off-by: David S. Miller <davem@davemloft.net>
11603
11604 net/ipv6/addrconf.c | 6 ++++++
11605 1 files changed, 6 insertions(+), 0 deletions(-)
11606
11607 commit c2815a1fee03f222273e77c14e43f960da06f35a
11608 Author: Brad Spengler <spender@grsecurity.net>
11609 Date: Wed Dec 16 13:03:38 2015 -0500
11610
11611 Work around upstream limitation on the number of thread info flags causing a compilation error
11612 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
11613
11614 arch/arm/kernel/entry-common.S | 8 ++++++--
11615 1 files changed, 6 insertions(+), 2 deletions(-)
11616
11617 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
11618 Author: Brad Spengler <spender@grsecurity.net>
11619 Date: Tue Dec 15 19:03:41 2015 -0500
11620
11621 Initial import of grsecurity 3.1 for Linux 4.3.3
11622
11623 Documentation/dontdiff | 2 +
11624 Documentation/kernel-parameters.txt | 7 +
11625 Documentation/sysctl/kernel.txt | 15 +
11626 Makefile | 18 +-
11627 arch/alpha/include/asm/cache.h | 4 +-
11628 arch/alpha/kernel/osf_sys.c | 12 +-
11629 arch/arc/Kconfig | 1 +
11630 arch/arm/Kconfig | 1 +
11631 arch/arm/Kconfig.debug | 1 +
11632 arch/arm/include/asm/thread_info.h | 7 +-
11633 arch/arm/kernel/process.c | 4 +-
11634 arch/arm/kernel/ptrace.c | 9 +
11635 arch/arm/kernel/traps.c | 7 +-
11636 arch/arm/mm/Kconfig | 2 +-
11637 arch/arm/mm/fault.c | 40 +-
11638 arch/arm/mm/mmap.c | 8 +-
11639 arch/arm/net/bpf_jit_32.c | 51 +-
11640 arch/arm64/Kconfig.debug | 1 +
11641 arch/avr32/include/asm/cache.h | 4 +-
11642 arch/blackfin/Kconfig.debug | 1 +
11643 arch/blackfin/include/asm/cache.h | 3 +-
11644 arch/cris/include/arch-v10/arch/cache.h | 3 +-
11645 arch/cris/include/arch-v32/arch/cache.h | 3 +-
11646 arch/frv/include/asm/cache.h | 3 +-
11647 arch/frv/mm/elf-fdpic.c | 4 +-
11648 arch/hexagon/include/asm/cache.h | 6 +-
11649 arch/ia64/Kconfig | 1 +
11650 arch/ia64/include/asm/cache.h | 3 +-
11651 arch/ia64/kernel/sys_ia64.c | 2 +
11652 arch/ia64/mm/hugetlbpage.c | 2 +
11653 arch/m32r/include/asm/cache.h | 4 +-
11654 arch/m68k/include/asm/cache.h | 4 +-
11655 arch/metag/mm/hugetlbpage.c | 1 +
11656 arch/microblaze/include/asm/cache.h | 3 +-
11657 arch/mips/Kconfig | 1 +
11658 arch/mips/include/asm/cache.h | 3 +-
11659 arch/mips/include/asm/thread_info.h | 11 +-
11660 arch/mips/kernel/irq.c | 3 +
11661 arch/mips/kernel/ptrace.c | 9 +
11662 arch/mips/mm/mmap.c | 4 +-
11663 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
11664 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
11665 arch/openrisc/include/asm/cache.h | 4 +-
11666 arch/parisc/include/asm/cache.h | 5 +-
11667 arch/parisc/kernel/sys_parisc.c | 4 +
11668 arch/powerpc/Kconfig | 1 +
11669 arch/powerpc/include/asm/cache.h | 4 +-
11670 arch/powerpc/include/asm/thread_info.h | 5 +-
11671 arch/powerpc/kernel/Makefile | 2 +
11672 arch/powerpc/kernel/irq.c | 3 +
11673 arch/powerpc/kernel/process.c | 10 +-
11674 arch/powerpc/kernel/ptrace.c | 14 +
11675 arch/powerpc/kernel/traps.c | 5 +
11676 arch/powerpc/mm/slice.c | 2 +-
11677 arch/s390/Kconfig.debug | 1 +
11678 arch/s390/include/asm/cache.h | 4 +-
11679 arch/score/include/asm/cache.h | 4 +-
11680 arch/sh/include/asm/cache.h | 3 +-
11681 arch/sh/mm/mmap.c | 6 +-
11682 arch/sparc/include/asm/cache.h | 4 +-
11683 arch/sparc/include/asm/pgalloc_64.h | 1 +
11684 arch/sparc/include/asm/thread_info_64.h | 8 +-
11685 arch/sparc/kernel/process_32.c | 6 +-
11686 arch/sparc/kernel/process_64.c | 8 +-
11687 arch/sparc/kernel/ptrace_64.c | 14 +
11688 arch/sparc/kernel/sys_sparc_64.c | 8 +-
11689 arch/sparc/kernel/syscalls.S | 8 +-
11690 arch/sparc/kernel/traps_32.c | 8 +-
11691 arch/sparc/kernel/traps_64.c | 28 +-
11692 arch/sparc/kernel/unaligned_64.c | 2 +-
11693 arch/sparc/mm/fault_64.c | 2 +-
11694 arch/sparc/mm/hugetlbpage.c | 15 +-
11695 arch/tile/Kconfig | 1 +
11696 arch/tile/include/asm/cache.h | 3 +-
11697 arch/tile/mm/hugetlbpage.c | 2 +
11698 arch/um/include/asm/cache.h | 3 +-
11699 arch/unicore32/include/asm/cache.h | 6 +-
11700 arch/x86/Kconfig | 21 +
11701 arch/x86/Kconfig.debug | 2 +
11702 arch/x86/entry/common.c | 14 +
11703 arch/x86/entry/entry_32.S | 2 +-
11704 arch/x86/entry/entry_64.S | 2 +-
11705 arch/x86/ia32/ia32_aout.c | 2 +
11706 arch/x86/include/asm/floppy.h | 20 +-
11707 arch/x86/include/asm/fpu/types.h | 69 +-
11708 arch/x86/include/asm/io.h | 2 +-
11709 arch/x86/include/asm/page.h | 12 +-
11710 arch/x86/include/asm/paravirt_types.h | 23 +-
11711 arch/x86/include/asm/processor.h | 12 +-
11712 arch/x86/include/asm/thread_info.h | 6 +-
11713 arch/x86/include/asm/uaccess.h | 2 +-
11714 arch/x86/kernel/dumpstack.c | 10 +-
11715 arch/x86/kernel/dumpstack_32.c | 2 +-
11716 arch/x86/kernel/dumpstack_64.c | 2 +-
11717 arch/x86/kernel/ioport.c | 13 +
11718 arch/x86/kernel/irq_32.c | 3 +
11719 arch/x86/kernel/irq_64.c | 4 +
11720 arch/x86/kernel/ldt.c | 18 +
11721 arch/x86/kernel/msr.c | 10 +
11722 arch/x86/kernel/ptrace.c | 14 +
11723 arch/x86/kernel/signal.c | 9 +-
11724 arch/x86/kernel/sys_i386_32.c | 9 +-
11725 arch/x86/kernel/sys_x86_64.c | 8 +-
11726 arch/x86/kernel/traps.c | 5 +
11727 arch/x86/kernel/verify_cpu.S | 1 +
11728 arch/x86/kernel/vm86_32.c | 15 +
11729 arch/x86/kvm/svm.c | 14 +-
11730 arch/x86/mm/fault.c | 12 +-
11731 arch/x86/mm/hugetlbpage.c | 15 +-
11732 arch/x86/mm/init.c | 66 +-
11733 arch/x86/mm/init_32.c | 6 +-
11734 arch/x86/net/bpf_jit_comp.c | 4 +
11735 arch/x86/platform/efi/efi_64.c | 2 +-
11736 arch/x86/xen/Kconfig | 1 +
11737 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
11738 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
11739 crypto/ablkcipher.c | 2 +-
11740 crypto/blkcipher.c | 2 +-
11741 crypto/scatterwalk.c | 10 +-
11742 drivers/acpi/acpica/hwxfsleep.c | 11 +-
11743 drivers/acpi/custom_method.c | 4 +
11744 drivers/block/cciss.h | 30 +-
11745 drivers/block/smart1,2.h | 40 +-
11746 drivers/cdrom/cdrom.c | 2 +-
11747 drivers/char/Kconfig | 4 +-
11748 drivers/char/genrtc.c | 1 +
11749 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
11750 drivers/char/mem.c | 17 +
11751 drivers/char/random.c | 5 +-
11752 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
11753 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
11754 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
11755 drivers/crypto/talitos.c | 2 +-
11756 drivers/firewire/ohci.c | 4 +
11757 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
11758 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
11759 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
11760 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
11761 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
11762 drivers/hid/hid-wiimote-debug.c | 2 +-
11763 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
11764 drivers/iommu/Kconfig | 1 +
11765 drivers/iommu/amd_iommu.c | 14 +-
11766 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
11767 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
11768 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
11769 drivers/isdn/hisax/config.c | 2 +-
11770 drivers/isdn/hisax/hfc_pci.c | 2 +-
11771 drivers/isdn/hisax/hfc_sx.c | 2 +-
11772 drivers/isdn/hisax/q931.c | 6 +-
11773 drivers/isdn/i4l/isdn_concap.c | 6 +-
11774 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
11775 drivers/md/bcache/Kconfig | 1 +
11776 drivers/md/raid5.c | 8 +
11777 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
11778 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
11779 drivers/media/platform/vivid/vivid-osd.c | 1 +
11780 drivers/media/radio/radio-cadet.c | 5 +-
11781 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
11782 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
11783 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
11784 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
11785 drivers/message/fusion/mptbase.c | 9 +
11786 drivers/misc/sgi-xp/xp_main.c | 12 +-
11787 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
11788 drivers/net/ppp/pppoe.c | 14 +-
11789 drivers/net/ppp/pptp.c | 6 +
11790 drivers/net/slip/slhc.c | 3 +
11791 drivers/net/wan/lmc/lmc_media.c | 97 +-
11792 drivers/net/wan/x25_asy.c | 6 +-
11793 drivers/net/wan/z85230.c | 24 +-
11794 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
11795 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
11796 drivers/pci/pci-sysfs.c | 2 +-
11797 drivers/pci/proc.c | 9 +
11798 drivers/platform/x86/asus-wmi.c | 12 +
11799 drivers/rtc/rtc-dev.c | 3 +
11800 drivers/scsi/bfa/bfa_fcs.c | 19 +-
11801 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
11802 drivers/scsi/bfa/bfa_modules.h | 12 +-
11803 drivers/scsi/hpsa.h | 40 +-
11804 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
11805 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
11806 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
11807 drivers/target/target_core_sbc.c | 17 +-
11808 drivers/target/target_core_transport.c | 14 +-
11809 drivers/tty/serial/uartlite.c | 4 +-
11810 drivers/tty/sysrq.c | 2 +-
11811 drivers/tty/vt/keyboard.c | 22 +-
11812 drivers/uio/uio.c | 6 +-
11813 drivers/usb/core/hub.c | 5 +
11814 drivers/usb/gadget/function/f_uac1.c | 1 +
11815 drivers/usb/gadget/function/u_uac1.c | 1 +
11816 drivers/usb/host/hwa-hc.c | 9 +-
11817 drivers/usb/usbip/vhci_sysfs.c | 2 +-
11818 drivers/video/fbdev/arcfb.c | 2 +-
11819 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
11820 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
11821 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
11822 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
11823 drivers/xen/xenfs/xenstored.c | 5 +
11824 firmware/Makefile | 2 +
11825 firmware/WHENCE | 20 +-
11826 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
11827 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
11828 fs/9p/vfs_inode.c | 4 +-
11829 fs/attr.c | 1 +
11830 fs/autofs4/waitq.c | 9 +
11831 fs/binfmt_aout.c | 7 +
11832 fs/binfmt_elf.c | 50 +-
11833 fs/compat.c | 20 +-
11834 fs/coredump.c | 17 +-
11835 fs/dcache.c | 3 +
11836 fs/debugfs/inode.c | 11 +-
11837 fs/exec.c | 219 +-
11838 fs/ext2/balloc.c | 4 +-
11839 fs/ext2/super.c | 8 +-
11840 fs/ext4/balloc.c | 4 +-
11841 fs/fcntl.c | 4 +
11842 fs/fhandle.c | 3 +-
11843 fs/file.c | 4 +
11844 fs/filesystems.c | 4 +
11845 fs/fs_struct.c | 20 +-
11846 fs/hugetlbfs/inode.c | 5 +-
11847 fs/inode.c | 8 +-
11848 fs/kernfs/dir.c | 6 +
11849 fs/mount.h | 4 +-
11850 fs/namei.c | 286 +-
11851 fs/namespace.c | 24 +
11852 fs/nfsd/nfscache.c | 2 +-
11853 fs/open.c | 38 +
11854 fs/overlayfs/inode.c | 11 +-
11855 fs/overlayfs/super.c | 6 +-
11856 fs/pipe.c | 2 +-
11857 fs/posix_acl.c | 15 +-
11858 fs/proc/Kconfig | 10 +-
11859 fs/proc/array.c | 69 +-
11860 fs/proc/base.c | 186 +-
11861 fs/proc/cmdline.c | 4 +
11862 fs/proc/devices.c | 4 +
11863 fs/proc/fd.c | 17 +-
11864 fs/proc/generic.c | 64 +
11865 fs/proc/inode.c | 17 +
11866 fs/proc/internal.h | 11 +-
11867 fs/proc/interrupts.c | 4 +
11868 fs/proc/kcore.c | 3 +
11869 fs/proc/meminfo.c | 7 +-
11870 fs/proc/namespaces.c | 4 +-
11871 fs/proc/proc_net.c | 31 +
11872 fs/proc/proc_sysctl.c | 52 +-
11873 fs/proc/root.c | 8 +
11874 fs/proc/stat.c | 69 +-
11875 fs/proc/task_mmu.c | 66 +-
11876 fs/readdir.c | 19 +
11877 fs/reiserfs/item_ops.c | 24 +-
11878 fs/reiserfs/super.c | 4 +
11879 fs/select.c | 2 +
11880 fs/seq_file.c | 30 +-
11881 fs/splice.c | 8 +
11882 fs/stat.c | 20 +-
11883 fs/sysfs/dir.c | 30 +-
11884 fs/sysv/inode.c | 11 +-
11885 fs/utimes.c | 7 +
11886 fs/xattr.c | 26 +-
11887 grsecurity/Kconfig | 1182 ++++
11888 grsecurity/Makefile | 54 +
11889 grsecurity/gracl.c | 2757 +++++++++
11890 grsecurity/gracl_alloc.c | 105 +
11891 grsecurity/gracl_cap.c | 127 +
11892 grsecurity/gracl_compat.c | 269 +
11893 grsecurity/gracl_fs.c | 448 ++
11894 grsecurity/gracl_ip.c | 386 ++
11895 grsecurity/gracl_learn.c | 207 +
11896 grsecurity/gracl_policy.c | 1786 ++++++
11897 grsecurity/gracl_res.c | 68 +
11898 grsecurity/gracl_segv.c | 304 +
11899 grsecurity/gracl_shm.c | 40 +
11900 grsecurity/grsec_chdir.c | 19 +
11901 grsecurity/grsec_chroot.c | 467 ++
11902 grsecurity/grsec_disabled.c | 445 ++
11903 grsecurity/grsec_exec.c | 189 +
11904 grsecurity/grsec_fifo.c | 26 +
11905 grsecurity/grsec_fork.c | 23 +
11906 grsecurity/grsec_init.c | 290 +
11907 grsecurity/grsec_ipc.c | 48 +
11908 grsecurity/grsec_link.c | 65 +
11909 grsecurity/grsec_log.c | 340 +
11910 grsecurity/grsec_mem.c | 48 +
11911 grsecurity/grsec_mount.c | 65 +
11912 grsecurity/grsec_pax.c | 47 +
11913 grsecurity/grsec_proc.c | 20 +
11914 grsecurity/grsec_ptrace.c | 30 +
11915 grsecurity/grsec_sig.c | 236 +
11916 grsecurity/grsec_sock.c | 244 +
11917 grsecurity/grsec_sysctl.c | 488 ++
11918 grsecurity/grsec_time.c | 16 +
11919 grsecurity/grsec_tpe.c | 78 +
11920 grsecurity/grsec_usb.c | 15 +
11921 grsecurity/grsum.c | 64 +
11922 include/linux/binfmts.h | 5 +-
11923 include/linux/bitops.h | 2 +-
11924 include/linux/capability.h | 13 +
11925 include/linux/compiler-gcc.h | 5 +
11926 include/linux/compiler.h | 8 +
11927 include/linux/cred.h | 8 +-
11928 include/linux/dcache.h | 5 +-
11929 include/linux/fs.h | 24 +-
11930 include/linux/fs_struct.h | 2 +-
11931 include/linux/fsnotify.h | 6 +
11932 include/linux/gracl.h | 342 +
11933 include/linux/gracl_compat.h | 156 +
11934 include/linux/gralloc.h | 9 +
11935 include/linux/grdefs.h | 140 +
11936 include/linux/grinternal.h | 230 +
11937 include/linux/grmsg.h | 118 +
11938 include/linux/grsecurity.h | 255 +
11939 include/linux/grsock.h | 19 +
11940 include/linux/ipc.h | 2 +-
11941 include/linux/ipc_namespace.h | 2 +-
11942 include/linux/kallsyms.h | 18 +-
11943 include/linux/kmod.h | 5 +
11944 include/linux/kobject.h | 2 +-
11945 include/linux/lsm_hooks.h | 4 +-
11946 include/linux/mm.h | 12 +
11947 include/linux/mm_types.h | 4 +-
11948 include/linux/module.h | 5 +-
11949 include/linux/mount.h | 2 +-
11950 include/linux/msg.h | 2 +-
11951 include/linux/netfilter/xt_gradm.h | 9 +
11952 include/linux/path.h | 4 +-
11953 include/linux/perf_event.h | 13 +-
11954 include/linux/pid_namespace.h | 2 +-
11955 include/linux/printk.h | 2 +-
11956 include/linux/proc_fs.h | 22 +-
11957 include/linux/proc_ns.h | 2 +-
11958 include/linux/ptrace.h | 24 +-
11959 include/linux/random.h | 2 +-
11960 include/linux/rbtree_augmented.h | 4 +-
11961 include/linux/scatterlist.h | 12 +-
11962 include/linux/sched.h | 114 +-
11963 include/linux/security.h | 1 +
11964 include/linux/sem.h | 2 +-
11965 include/linux/seq_file.h | 5 +
11966 include/linux/shm.h | 6 +-
11967 include/linux/skbuff.h | 3 +
11968 include/linux/slab.h | 9 -
11969 include/linux/sysctl.h | 8 +-
11970 include/linux/thread_info.h | 6 +-
11971 include/linux/tty.h | 2 +-
11972 include/linux/tty_driver.h | 4 +-
11973 include/linux/uidgid.h | 5 +
11974 include/linux/user_namespace.h | 2 +-
11975 include/linux/utsname.h | 2 +-
11976 include/linux/vermagic.h | 16 +-
11977 include/linux/vmalloc.h | 20 +-
11978 include/net/af_unix.h | 2 +-
11979 include/net/dst.h | 33 +
11980 include/net/ip.h | 2 +-
11981 include/net/neighbour.h | 2 +-
11982 include/net/net_namespace.h | 2 +-
11983 include/net/sock.h | 4 +-
11984 include/target/target_core_base.h | 2 +-
11985 include/trace/events/fs.h | 53 +
11986 include/uapi/linux/personality.h | 1 +
11987 init/Kconfig | 4 +-
11988 init/main.c | 35 +-
11989 ipc/mqueue.c | 1 +
11990 ipc/msg.c | 3 +-
11991 ipc/sem.c | 3 +-
11992 ipc/shm.c | 26 +-
11993 ipc/util.c | 6 +
11994 kernel/auditsc.c | 2 +-
11995 kernel/bpf/syscall.c | 8 +-
11996 kernel/capability.c | 41 +-
11997 kernel/cgroup.c | 5 +-
11998 kernel/compat.c | 1 +
11999 kernel/configs.c | 11 +
12000 kernel/cred.c | 112 +-
12001 kernel/events/core.c | 16 +-
12002 kernel/exit.c | 10 +-
12003 kernel/fork.c | 86 +-
12004 kernel/futex.c | 6 +-
12005 kernel/futex_compat.c | 2 +-
12006 kernel/kallsyms.c | 9 +
12007 kernel/kcmp.c | 8 +-
12008 kernel/kexec_core.c | 2 +-
12009 kernel/kmod.c | 95 +-
12010 kernel/kprobes.c | 7 +-
12011 kernel/ksysfs.c | 2 +
12012 kernel/locking/lockdep_proc.c | 10 +-
12013 kernel/module.c | 108 +-
12014 kernel/panic.c | 4 +-
12015 kernel/pid.c | 23 +-
12016 kernel/power/Kconfig | 2 +
12017 kernel/printk/printk.c | 20 +-
12018 kernel/ptrace.c | 56 +-
12019 kernel/resource.c | 10 +
12020 kernel/sched/core.c | 11 +-
12021 kernel/signal.c | 37 +-
12022 kernel/sys.c | 64 +-
12023 kernel/sysctl.c | 172 +-
12024 kernel/taskstats.c | 6 +
12025 kernel/time/posix-timers.c | 8 +
12026 kernel/time/time.c | 5 +
12027 kernel/time/timekeeping.c | 3 +
12028 kernel/time/timer_list.c | 13 +-
12029 kernel/time/timer_stats.c | 10 +-
12030 kernel/trace/Kconfig | 2 +
12031 kernel/trace/trace_syscalls.c | 8 +
12032 kernel/user_namespace.c | 15 +
12033 lib/Kconfig.debug | 13 +-
12034 lib/Kconfig.kasan | 2 +-
12035 lib/is_single_threaded.c | 3 +
12036 lib/list_debug.c | 65 +-
12037 lib/nlattr.c | 2 +
12038 lib/rbtree.c | 4 +-
12039 lib/vsprintf.c | 39 +-
12040 localversion-grsec | 1 +
12041 mm/Kconfig | 8 +-
12042 mm/Kconfig.debug | 1 +
12043 mm/filemap.c | 1 +
12044 mm/kmemleak.c | 4 +-
12045 mm/memory.c | 2 +-
12046 mm/mempolicy.c | 12 +-
12047 mm/migrate.c | 3 +-
12048 mm/mlock.c | 6 +-
12049 mm/mmap.c | 93 +-
12050 mm/mprotect.c | 8 +
12051 mm/oom_kill.c | 28 +-
12052 mm/page_alloc.c | 2 +-
12053 mm/process_vm_access.c | 8 +-
12054 mm/shmem.c | 36 +-
12055 mm/slab.c | 14 +-
12056 mm/slab_common.c | 2 +-
12057 mm/slob.c | 12 +
12058 mm/slub.c | 33 +-
12059 mm/util.c | 3 +
12060 mm/vmalloc.c | 129 +-
12061 mm/vmstat.c | 29 +-
12062 net/appletalk/atalk_proc.c | 2 +-
12063 net/atm/lec.c | 6 +-
12064 net/atm/mpoa_caches.c | 42 +-
12065 net/bluetooth/sco.c | 3 +
12066 net/can/bcm.c | 2 +-
12067 net/can/proc.c | 2 +-
12068 net/core/dev_ioctl.c | 7 +-
12069 net/core/filter.c | 8 +-
12070 net/core/net-procfs.c | 17 +-
12071 net/core/pktgen.c | 2 +-
12072 net/core/sock.c | 3 +-
12073 net/core/sysctl_net_core.c | 2 +-
12074 net/decnet/dn_dev.c | 2 +-
12075 net/ipv4/devinet.c | 6 +-
12076 net/ipv4/inet_hashtables.c | 4 +
12077 net/ipv4/ip_input.c | 7 +
12078 net/ipv4/ip_sockglue.c | 3 +-
12079 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
12080 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
12081 net/ipv4/route.c | 6 +-
12082 net/ipv4/tcp_input.c | 4 +-
12083 net/ipv4/tcp_ipv4.c | 29 +-
12084 net/ipv4/tcp_minisocks.c | 9 +-
12085 net/ipv4/tcp_timer.c | 11 +
12086 net/ipv4/udp.c | 24 +
12087 net/ipv6/addrconf.c | 13 +-
12088 net/ipv6/proc.c | 2 +-
12089 net/ipv6/tcp_ipv6.c | 26 +-
12090 net/ipv6/udp.c | 7 +
12091 net/ipx/ipx_proc.c | 2 +-
12092 net/irda/irproc.c | 2 +-
12093 net/llc/llc_proc.c | 2 +-
12094 net/netfilter/Kconfig | 10 +
12095 net/netfilter/Makefile | 1 +
12096 net/netfilter/nf_conntrack_core.c | 8 +
12097 net/netfilter/xt_gradm.c | 51 +
12098 net/netfilter/xt_hashlimit.c | 4 +-
12099 net/netfilter/xt_recent.c | 2 +-
12100 net/sched/sch_api.c | 2 +-
12101 net/sctp/socket.c | 4 +-
12102 net/socket.c | 75 +-
12103 net/sunrpc/Kconfig | 1 +
12104 net/sunrpc/cache.c | 2 +-
12105 net/sunrpc/stats.c | 2 +-
12106 net/sysctl_net.c | 2 +-
12107 net/unix/af_unix.c | 52 +-
12108 net/vmw_vsock/vmci_transport_notify.c | 30 +-
12109 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
12110 net/x25/sysctl_net_x25.c | 2 +-
12111 net/x25/x25_proc.c | 2 +-
12112 scripts/package/Makefile | 2 +-
12113 scripts/package/mkspec | 41 +-
12114 security/Kconfig | 369 +-
12115 security/apparmor/file.c | 4 +-
12116 security/apparmor/lsm.c | 8 +-
12117 security/commoncap.c | 36 +-
12118 security/min_addr.c | 2 +
12119 security/smack/smack_lsm.c | 8 +-
12120 security/tomoyo/file.c | 12 +-
12121 security/tomoyo/mount.c | 4 +
12122 security/tomoyo/tomoyo.c | 20 +-
12123 security/yama/Kconfig | 2 +-
12124 security/yama/yama_lsm.c | 4 +-
12125 sound/synth/emux/emux_seq.c | 14 +-
12126 sound/usb/line6/driver.c | 40 +-
12127 sound/usb/line6/toneport.c | 12 +-
12128 tools/gcc/.gitignore | 1 +
12129 tools/gcc/Makefile | 12 +
12130 tools/gcc/gen-random-seed.sh | 8 +
12131 tools/gcc/randomize_layout_plugin.c | 930 +++
12132 tools/gcc/size_overflow_plugin/.gitignore | 1 +
12133 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
12134 511 files changed, 32631 insertions(+), 3196 deletions(-)
12135
12136 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
12137 Author: Brad Spengler <spender@grsecurity.net>
12138 Date: Tue Dec 15 14:31:49 2015 -0500
12139
12140 Update to pax-linux-4.3.3-test11.patch:
12141 - fixed a few compile regressions with the recent plugin changes, reported by spender
12142 - updated the size overflow hash table
12143
12144 tools/gcc/latent_entropy_plugin.c | 2 +-
12145 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
12146 tools/gcc/stackleak_plugin.c | 2 +-
12147 tools/gcc/structleak_plugin.c | 6 +--
12148 4 files changed, 60 insertions(+), 16 deletions(-)
12149
12150 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
12151 Author: Brad Spengler <spender@grsecurity.net>
12152 Date: Tue Dec 15 11:50:24 2015 -0500
12153
12154 Apply structleak ICE fix for gcc < 4.9
12155
12156 tools/gcc/structleak_plugin.c | 4 ++++
12157 1 files changed, 4 insertions(+), 0 deletions(-)
12158
12159 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
12160 Author: Brad Spengler <spender@grsecurity.net>
12161 Date: Tue Dec 15 07:57:06 2015 -0500
12162
12163 Update to pax-linux-4.3.1-test10.patch:
12164 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
12165 - Emese regenerated the size overflow hash tables for 4.3
12166 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
12167 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
12168
12169 arch/x86/entry/entry_64.S | 2 +-
12170 arch/x86/entry/entry_64_compat.S | 15 +-
12171 scripts/package/builddeb | 2 +-
12172 tools/gcc/initify_plugin.c | 11 +-
12173 tools/gcc/latent_entropy_plugin.c | 20 +-
12174 .../disable_size_overflow_hash.data | 4 +
12175 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
12176 tools/gcc/stackleak_plugin.c | 26 +-
12177 tools/gcc/structleak_plugin.c | 21 +-
12178 9 files changed, 3079 insertions(+), 2367 deletions(-)
12179
12180 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
12181 Merge: b5847e6 3548341
12182 Author: Brad Spengler <spender@grsecurity.net>
12183 Date: Tue Dec 15 07:47:56 2015 -0500
12184
12185 Merge branch 'linux-4.3.y' into pax-4_3
12186
12187 Conflicts:
12188 net/unix/af_unix.c
12189
12190 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
12191 Author: Brad Spengler <spender@grsecurity.net>
12192 Date: Wed Dec 9 23:11:36 2015 -0500
12193
12194 Update to pax-linux-4.3.1-test9.patch:
12195 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
12196 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
12197 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
12198 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
12199 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
12200 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
12201 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
12202
12203 Makefile | 6 +
12204 arch/x86/include/asm/compat.h | 4 +
12205 arch/x86/include/asm/dma.h | 2 +
12206 arch/x86/include/asm/pmem.h | 2 +-
12207 arch/x86/include/asm/uaccess.h | 20 +-
12208 arch/x86/kernel/apic/vector.c | 6 +-
12209 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
12210 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
12211 arch/x86/kernel/head_64.S | 1 -
12212 arch/x86/kvm/i8259.c | 10 +-
12213 arch/x86/kvm/ioapic.c | 2 +
12214 arch/x86/kvm/x86.c | 2 +
12215 arch/x86/lib/usercopy_64.c | 2 +-
12216 arch/x86/mm/mpx.c | 4 +-
12217 arch/x86/mm/pageattr.c | 7 +
12218 drivers/base/devres.c | 4 +-
12219 drivers/base/power/runtime.c | 6 +-
12220 drivers/base/regmap/regmap.c | 4 +-
12221 drivers/block/drbd/drbd_receiver.c | 4 +-
12222 drivers/block/drbd/drbd_worker.c | 6 +-
12223 drivers/char/virtio_console.c | 6 +-
12224 drivers/md/dm.c | 12 +-
12225 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
12226 drivers/net/macvtap.c | 4 +-
12227 drivers/video/fbdev/core/fbmem.c | 10 +-
12228 fs/compat.c | 3 +-
12229 fs/coredump.c | 2 +-
12230 fs/dcache.c | 13 +-
12231 fs/fhandle.c | 2 +-
12232 fs/file.c | 14 +-
12233 fs/fs-writeback.c | 11 +-
12234 fs/overlayfs/copy_up.c | 2 +-
12235 fs/readdir.c | 3 +-
12236 fs/super.c | 3 +-
12237 include/linux/compiler.h | 36 ++-
12238 include/linux/rcupdate.h | 8 +
12239 include/linux/sched.h | 4 +-
12240 include/linux/seqlock.h | 10 +
12241 include/linux/spinlock.h | 17 +-
12242 include/linux/srcu.h | 5 +-
12243 include/linux/syscalls.h | 2 +-
12244 include/linux/writeback.h | 3 +-
12245 include/uapi/linux/swab.h | 6 +-
12246 ipc/ipc_sysctl.c | 6 +
12247 kernel/exit.c | 25 +-
12248 kernel/resource.c | 4 +-
12249 kernel/signal.c | 12 +-
12250 kernel/user.c | 2 +-
12251 kernel/workqueue.c | 6 +-
12252 lib/rhashtable.c | 4 +-
12253 net/compat.c | 2 +-
12254 net/ipv4/xfrm4_mode_transport.c | 2 +-
12255 security/keys/internal.h | 8 +-
12256 security/keys/keyring.c | 4 -
12257 sound/core/seq/seq_clientmgr.c | 8 +-
12258 sound/core/seq/seq_compat.c | 2 +-
12259 sound/core/seq/seq_memory.c | 6 +-
12260 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
12261 tools/gcc/gcc-common.h | 1 +
12262 tools/gcc/initify_plugin.c | 33 ++-
12263 .../disable_size_overflow_hash.data | 1 +
12264 .../size_overflow_plugin/size_overflow_hash.data | 1 -
12265 62 files changed, 708 insertions(+), 140 deletions(-)
12266
12267 commit f2634c2f6995f4231616f24ed016f890c701f939
12268 Merge: 1241bff 5f8b236
12269 Author: Brad Spengler <spender@grsecurity.net>
12270 Date: Wed Dec 9 21:50:47 2015 -0500
12271
12272 Merge branch 'linux-4.3.y' into pax-4_3
12273
12274 Conflicts:
12275 arch/x86/kernel/fpu/xstate.c
12276 arch/x86/kernel/head_64.S
12277
12278 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
12279 Author: Brad Spengler <spender@grsecurity.net>
12280 Date: Sun Dec 6 08:44:56 2015 -0500
12281
12282 Update to pax-linux-4.3-test8.patch:
12283 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
12284 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
12285 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
12286 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
12287
12288 Makefile | 5 +++
12289 drivers/md/md.c | 5 ++-
12290 drivers/md/raid1.c | 2 +-
12291 fs/proc/task_mmu.c | 3 ++
12292 .../disable_size_overflow_hash.data | 4 ++-
12293 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
12294 .../size_overflow_plugin/size_overflow_hash.data | 2 -
12295 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
12296 8 files changed, 43 insertions(+), 12 deletions(-)
12297
12298 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
12299 Author: Brad Spengler <spender@grsecurity.net>
12300 Date: Fri Dec 4 14:24:12 2015 -0500
12301
12302 Initial import of pax-linux-4.3-test7.patch
12303
12304 Documentation/dontdiff | 47 +-
12305 Documentation/kbuild/makefiles.txt | 39 +-
12306 Documentation/kernel-parameters.txt | 28 +
12307 Makefile | 108 +-
12308 arch/alpha/include/asm/atomic.h | 10 +
12309 arch/alpha/include/asm/elf.h | 7 +
12310 arch/alpha/include/asm/pgalloc.h | 6 +
12311 arch/alpha/include/asm/pgtable.h | 11 +
12312 arch/alpha/kernel/module.c | 2 +-
12313 arch/alpha/kernel/osf_sys.c | 8 +-
12314 arch/alpha/mm/fault.c | 141 +-
12315 arch/arm/Kconfig | 2 +-
12316 arch/arm/include/asm/atomic.h | 320 +-
12317 arch/arm/include/asm/cache.h | 5 +-
12318 arch/arm/include/asm/cacheflush.h | 2 +-
12319 arch/arm/include/asm/checksum.h | 14 +-
12320 arch/arm/include/asm/cmpxchg.h | 4 +
12321 arch/arm/include/asm/cpuidle.h | 2 +-
12322 arch/arm/include/asm/domain.h | 22 +-
12323 arch/arm/include/asm/elf.h | 9 +-
12324 arch/arm/include/asm/fncpy.h | 2 +
12325 arch/arm/include/asm/futex.h | 10 +
12326 arch/arm/include/asm/kmap_types.h | 2 +-
12327 arch/arm/include/asm/mach/dma.h | 2 +-
12328 arch/arm/include/asm/mach/map.h | 16 +-
12329 arch/arm/include/asm/outercache.h | 2 +-
12330 arch/arm/include/asm/page.h | 3 +-
12331 arch/arm/include/asm/pgalloc.h | 20 +
12332 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
12333 arch/arm/include/asm/pgtable-2level.h | 3 +
12334 arch/arm/include/asm/pgtable-3level.h | 3 +
12335 arch/arm/include/asm/pgtable.h | 54 +-
12336 arch/arm/include/asm/smp.h | 2 +-
12337 arch/arm/include/asm/tls.h | 3 +
12338 arch/arm/include/asm/uaccess.h | 79 +-
12339 arch/arm/include/uapi/asm/ptrace.h | 2 +-
12340 arch/arm/kernel/armksyms.c | 2 +-
12341 arch/arm/kernel/cpuidle.c | 2 +-
12342 arch/arm/kernel/entry-armv.S | 109 +-
12343 arch/arm/kernel/entry-common.S | 40 +-
12344 arch/arm/kernel/entry-header.S | 55 +
12345 arch/arm/kernel/fiq.c | 3 +
12346 arch/arm/kernel/module-plts.c | 7 +-
12347 arch/arm/kernel/module.c | 38 +-
12348 arch/arm/kernel/patch.c | 2 +
12349 arch/arm/kernel/process.c | 90 +-
12350 arch/arm/kernel/reboot.c | 1 +
12351 arch/arm/kernel/setup.c | 20 +-
12352 arch/arm/kernel/signal.c | 35 +-
12353 arch/arm/kernel/smp.c | 2 +-
12354 arch/arm/kernel/tcm.c | 4 +-
12355 arch/arm/kernel/vmlinux.lds.S | 6 +-
12356 arch/arm/kvm/arm.c | 8 +-
12357 arch/arm/lib/copy_page.S | 1 +
12358 arch/arm/lib/csumpartialcopyuser.S | 4 +-
12359 arch/arm/lib/delay.c | 2 +-
12360 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
12361 arch/arm/mach-exynos/suspend.c | 6 +-
12362 arch/arm/mach-mvebu/coherency.c | 4 +-
12363 arch/arm/mach-omap2/board-n8x0.c | 2 +-
12364 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
12365 arch/arm/mach-omap2/omap-smp.c | 1 +
12366 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
12367 arch/arm/mach-omap2/omap_device.c | 4 +-
12368 arch/arm/mach-omap2/omap_device.h | 4 +-
12369 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
12370 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
12371 arch/arm/mach-omap2/wd_timer.c | 6 +-
12372 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
12373 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
12374 arch/arm/mach-tegra/irq.c | 1 +
12375 arch/arm/mach-ux500/pm.c | 1 +
12376 arch/arm/mach-zynq/platsmp.c | 1 +
12377 arch/arm/mm/Kconfig | 6 +-
12378 arch/arm/mm/alignment.c | 8 +
12379 arch/arm/mm/cache-l2x0.c | 2 +-
12380 arch/arm/mm/context.c | 10 +-
12381 arch/arm/mm/fault.c | 146 +
12382 arch/arm/mm/fault.h | 12 +
12383 arch/arm/mm/init.c | 39 +
12384 arch/arm/mm/ioremap.c | 4 +-
12385 arch/arm/mm/mmap.c | 30 +-
12386 arch/arm/mm/mmu.c | 162 +-
12387 arch/arm/net/bpf_jit_32.c | 3 +
12388 arch/arm/plat-iop/setup.c | 2 +-
12389 arch/arm/plat-omap/sram.c | 2 +
12390 arch/arm64/include/asm/atomic.h | 10 +
12391 arch/arm64/include/asm/percpu.h | 8 +-
12392 arch/arm64/include/asm/pgalloc.h | 5 +
12393 arch/arm64/include/asm/uaccess.h | 1 +
12394 arch/arm64/mm/dma-mapping.c | 2 +-
12395 arch/avr32/include/asm/elf.h | 8 +-
12396 arch/avr32/include/asm/kmap_types.h | 4 +-
12397 arch/avr32/mm/fault.c | 27 +
12398 arch/frv/include/asm/atomic.h | 10 +
12399 arch/frv/include/asm/kmap_types.h | 2 +-
12400 arch/frv/mm/elf-fdpic.c | 3 +-
12401 arch/ia64/Makefile | 1 +
12402 arch/ia64/include/asm/atomic.h | 10 +
12403 arch/ia64/include/asm/elf.h | 7 +
12404 arch/ia64/include/asm/pgalloc.h | 12 +
12405 arch/ia64/include/asm/pgtable.h | 13 +-
12406 arch/ia64/include/asm/spinlock.h | 2 +-
12407 arch/ia64/include/asm/uaccess.h | 27 +-
12408 arch/ia64/kernel/module.c | 45 +-
12409 arch/ia64/kernel/palinfo.c | 2 +-
12410 arch/ia64/kernel/sys_ia64.c | 7 +
12411 arch/ia64/kernel/vmlinux.lds.S | 2 +-
12412 arch/ia64/mm/fault.c | 32 +-
12413 arch/ia64/mm/init.c | 15 +-
12414 arch/m32r/lib/usercopy.c | 6 +
12415 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
12416 arch/mips/include/asm/atomic.h | 368 +-
12417 arch/mips/include/asm/elf.h | 7 +
12418 arch/mips/include/asm/exec.h | 2 +-
12419 arch/mips/include/asm/hw_irq.h | 2 +-
12420 arch/mips/include/asm/local.h | 57 +
12421 arch/mips/include/asm/page.h | 2 +-
12422 arch/mips/include/asm/pgalloc.h | 5 +
12423 arch/mips/include/asm/pgtable.h | 3 +
12424 arch/mips/include/asm/uaccess.h | 1 +
12425 arch/mips/kernel/binfmt_elfn32.c | 7 +
12426 arch/mips/kernel/binfmt_elfo32.c | 7 +
12427 arch/mips/kernel/irq-gt641xx.c | 2 +-
12428 arch/mips/kernel/irq.c | 6 +-
12429 arch/mips/kernel/pm-cps.c | 2 +-
12430 arch/mips/kernel/process.c | 12 -
12431 arch/mips/kernel/sync-r4k.c | 24 +-
12432 arch/mips/kernel/traps.c | 13 +-
12433 arch/mips/mm/fault.c | 25 +
12434 arch/mips/mm/mmap.c | 51 +-
12435 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
12436 arch/mips/sni/rm200.c | 2 +-
12437 arch/mips/vr41xx/common/icu.c | 2 +-
12438 arch/mips/vr41xx/common/irq.c | 4 +-
12439 arch/parisc/include/asm/atomic.h | 10 +
12440 arch/parisc/include/asm/elf.h | 7 +
12441 arch/parisc/include/asm/pgalloc.h | 6 +
12442 arch/parisc/include/asm/pgtable.h | 11 +
12443 arch/parisc/include/asm/uaccess.h | 4 +-
12444 arch/parisc/kernel/module.c | 50 +-
12445 arch/parisc/kernel/sys_parisc.c | 15 +
12446 arch/parisc/kernel/traps.c | 4 +-
12447 arch/parisc/mm/fault.c | 140 +-
12448 arch/powerpc/include/asm/atomic.h | 329 +-
12449 arch/powerpc/include/asm/elf.h | 12 +
12450 arch/powerpc/include/asm/exec.h | 2 +-
12451 arch/powerpc/include/asm/kmap_types.h | 2 +-
12452 arch/powerpc/include/asm/local.h | 46 +
12453 arch/powerpc/include/asm/mman.h | 2 +-
12454 arch/powerpc/include/asm/page.h | 8 +-
12455 arch/powerpc/include/asm/page_64.h | 7 +-
12456 arch/powerpc/include/asm/pgalloc-64.h | 7 +
12457 arch/powerpc/include/asm/pgtable.h | 1 +
12458 arch/powerpc/include/asm/pte-hash32.h | 1 +
12459 arch/powerpc/include/asm/reg.h | 1 +
12460 arch/powerpc/include/asm/smp.h | 2 +-
12461 arch/powerpc/include/asm/spinlock.h | 42 +-
12462 arch/powerpc/include/asm/uaccess.h | 141 +-
12463 arch/powerpc/kernel/Makefile | 5 +
12464 arch/powerpc/kernel/exceptions-64e.S | 4 +-
12465 arch/powerpc/kernel/exceptions-64s.S | 2 +-
12466 arch/powerpc/kernel/module_32.c | 15 +-
12467 arch/powerpc/kernel/process.c | 46 -
12468 arch/powerpc/kernel/signal_32.c | 2 +-
12469 arch/powerpc/kernel/signal_64.c | 2 +-
12470 arch/powerpc/kernel/traps.c | 21 +
12471 arch/powerpc/kernel/vdso.c | 5 +-
12472 arch/powerpc/lib/usercopy_64.c | 18 -
12473 arch/powerpc/mm/fault.c | 56 +-
12474 arch/powerpc/mm/mmap.c | 16 +
12475 arch/powerpc/mm/slice.c | 13 +-
12476 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
12477 arch/s390/include/asm/atomic.h | 10 +
12478 arch/s390/include/asm/elf.h | 7 +
12479 arch/s390/include/asm/exec.h | 2 +-
12480 arch/s390/include/asm/uaccess.h | 13 +-
12481 arch/s390/kernel/module.c | 22 +-
12482 arch/s390/kernel/process.c | 24 -
12483 arch/s390/mm/mmap.c | 16 +
12484 arch/score/include/asm/exec.h | 2 +-
12485 arch/score/kernel/process.c | 5 -
12486 arch/sh/mm/mmap.c | 22 +-
12487 arch/sparc/include/asm/atomic_64.h | 110 +-
12488 arch/sparc/include/asm/cache.h | 2 +-
12489 arch/sparc/include/asm/elf_32.h | 7 +
12490 arch/sparc/include/asm/elf_64.h | 7 +
12491 arch/sparc/include/asm/pgalloc_32.h | 1 +
12492 arch/sparc/include/asm/pgalloc_64.h | 1 +
12493 arch/sparc/include/asm/pgtable.h | 4 +
12494 arch/sparc/include/asm/pgtable_32.h | 15 +-
12495 arch/sparc/include/asm/pgtsrmmu.h | 5 +
12496 arch/sparc/include/asm/setup.h | 4 +-
12497 arch/sparc/include/asm/spinlock_64.h | 35 +-
12498 arch/sparc/include/asm/thread_info_32.h | 1 +
12499 arch/sparc/include/asm/thread_info_64.h | 2 +
12500 arch/sparc/include/asm/uaccess.h | 1 +
12501 arch/sparc/include/asm/uaccess_32.h | 28 +-
12502 arch/sparc/include/asm/uaccess_64.h | 24 +-
12503 arch/sparc/kernel/Makefile | 2 +-
12504 arch/sparc/kernel/prom_common.c | 2 +-
12505 arch/sparc/kernel/smp_64.c | 8 +-
12506 arch/sparc/kernel/sys_sparc_32.c | 2 +-
12507 arch/sparc/kernel/sys_sparc_64.c | 52 +-
12508 arch/sparc/kernel/traps_64.c | 27 +-
12509 arch/sparc/lib/Makefile | 2 +-
12510 arch/sparc/lib/atomic_64.S | 57 +-
12511 arch/sparc/lib/ksyms.c | 6 +-
12512 arch/sparc/mm/Makefile | 2 +-
12513 arch/sparc/mm/fault_32.c | 292 +
12514 arch/sparc/mm/fault_64.c | 486 +
12515 arch/sparc/mm/hugetlbpage.c | 22 +-
12516 arch/sparc/mm/init_64.c | 10 +-
12517 arch/tile/include/asm/atomic_64.h | 10 +
12518 arch/tile/include/asm/uaccess.h | 4 +-
12519 arch/um/Makefile | 4 +
12520 arch/um/include/asm/kmap_types.h | 2 +-
12521 arch/um/include/asm/page.h | 3 +
12522 arch/um/include/asm/pgtable-3level.h | 1 +
12523 arch/um/kernel/process.c | 16 -
12524 arch/x86/Kconfig | 15 +-
12525 arch/x86/Kconfig.cpu | 6 +-
12526 arch/x86/Kconfig.debug | 4 +-
12527 arch/x86/Makefile | 13 +-
12528 arch/x86/boot/Makefile | 3 +
12529 arch/x86/boot/bitops.h | 4 +-
12530 arch/x86/boot/boot.h | 2 +-
12531 arch/x86/boot/compressed/Makefile | 3 +
12532 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
12533 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
12534 arch/x86/boot/compressed/head_32.S | 4 +-
12535 arch/x86/boot/compressed/head_64.S | 12 +-
12536 arch/x86/boot/compressed/misc.c | 11 +-
12537 arch/x86/boot/cpucheck.c | 16 +-
12538 arch/x86/boot/header.S | 6 +-
12539 arch/x86/boot/memory.c | 2 +-
12540 arch/x86/boot/video-vesa.c | 1 +
12541 arch/x86/boot/video.c | 2 +-
12542 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
12543 arch/x86/crypto/aesni-intel_asm.S | 106 +-
12544 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
12545 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
12546 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
12547 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
12548 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
12549 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
12550 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
12551 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
12552 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
12553 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
12554 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
12555 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
12556 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
12557 arch/x86/crypto/sha256-avx-asm.S | 2 +
12558 arch/x86/crypto/sha256-avx2-asm.S | 2 +
12559 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
12560 arch/x86/crypto/sha512-avx-asm.S | 2 +
12561 arch/x86/crypto/sha512-avx2-asm.S | 2 +
12562 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
12563 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
12564 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
12565 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
12566 arch/x86/entry/calling.h | 86 +-
12567 arch/x86/entry/common.c | 13 +-
12568 arch/x86/entry/entry_32.S | 351 +-
12569 arch/x86/entry/entry_64.S | 619 +-
12570 arch/x86/entry/entry_64_compat.S | 159 +-
12571 arch/x86/entry/thunk_64.S | 2 +
12572 arch/x86/entry/vdso/Makefile | 2 +-
12573 arch/x86/entry/vdso/vdso2c.h | 8 +-
12574 arch/x86/entry/vdso/vma.c | 41 +-
12575 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
12576 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
12577 arch/x86/ia32/ia32_signal.c | 23 +-
12578 arch/x86/ia32/sys_ia32.c | 42 +-
12579 arch/x86/include/asm/alternative-asm.h | 43 +-
12580 arch/x86/include/asm/alternative.h | 4 +-
12581 arch/x86/include/asm/apic.h | 2 +-
12582 arch/x86/include/asm/apm.h | 4 +-
12583 arch/x86/include/asm/atomic.h | 230 +-
12584 arch/x86/include/asm/atomic64_32.h | 100 +
12585 arch/x86/include/asm/atomic64_64.h | 164 +-
12586 arch/x86/include/asm/bitops.h | 18 +-
12587 arch/x86/include/asm/boot.h | 2 +-
12588 arch/x86/include/asm/cache.h | 5 +-
12589 arch/x86/include/asm/checksum_32.h | 12 +-
12590 arch/x86/include/asm/cmpxchg.h | 39 +
12591 arch/x86/include/asm/compat.h | 2 +-
12592 arch/x86/include/asm/cpufeature.h | 17 +-
12593 arch/x86/include/asm/desc.h | 78 +-
12594 arch/x86/include/asm/desc_defs.h | 6 +
12595 arch/x86/include/asm/div64.h | 2 +-
12596 arch/x86/include/asm/elf.h | 33 +-
12597 arch/x86/include/asm/emergency-restart.h | 2 +-
12598 arch/x86/include/asm/fpu/internal.h | 42 +-
12599 arch/x86/include/asm/fpu/types.h | 6 +-
12600 arch/x86/include/asm/futex.h | 14 +-
12601 arch/x86/include/asm/hw_irq.h | 4 +-
12602 arch/x86/include/asm/i8259.h | 2 +-
12603 arch/x86/include/asm/io.h | 22 +-
12604 arch/x86/include/asm/irqflags.h | 5 +
12605 arch/x86/include/asm/kprobes.h | 9 +-
12606 arch/x86/include/asm/local.h | 106 +-
12607 arch/x86/include/asm/mman.h | 15 +
12608 arch/x86/include/asm/mmu.h | 14 +-
12609 arch/x86/include/asm/mmu_context.h | 114 +-
12610 arch/x86/include/asm/module.h | 17 +-
12611 arch/x86/include/asm/nmi.h | 19 +-
12612 arch/x86/include/asm/page.h | 1 +
12613 arch/x86/include/asm/page_32.h | 12 +-
12614 arch/x86/include/asm/page_64.h | 14 +-
12615 arch/x86/include/asm/paravirt.h | 46 +-
12616 arch/x86/include/asm/paravirt_types.h | 15 +-
12617 arch/x86/include/asm/pgalloc.h | 23 +
12618 arch/x86/include/asm/pgtable-2level.h | 2 +
12619 arch/x86/include/asm/pgtable-3level.h | 7 +
12620 arch/x86/include/asm/pgtable.h | 128 +-
12621 arch/x86/include/asm/pgtable_32.h | 14 +-
12622 arch/x86/include/asm/pgtable_32_types.h | 24 +-
12623 arch/x86/include/asm/pgtable_64.h | 23 +-
12624 arch/x86/include/asm/pgtable_64_types.h | 5 +
12625 arch/x86/include/asm/pgtable_types.h | 26 +-
12626 arch/x86/include/asm/preempt.h | 2 +-
12627 arch/x86/include/asm/processor.h | 57 +-
12628 arch/x86/include/asm/ptrace.h | 13 +-
12629 arch/x86/include/asm/realmode.h | 4 +-
12630 arch/x86/include/asm/reboot.h | 10 +-
12631 arch/x86/include/asm/rmwcc.h | 84 +-
12632 arch/x86/include/asm/rwsem.h | 60 +-
12633 arch/x86/include/asm/segment.h | 27 +-
12634 arch/x86/include/asm/smap.h | 43 +
12635 arch/x86/include/asm/smp.h | 14 +-
12636 arch/x86/include/asm/stackprotector.h | 4 +-
12637 arch/x86/include/asm/stacktrace.h | 32 +-
12638 arch/x86/include/asm/switch_to.h | 4 +-
12639 arch/x86/include/asm/sys_ia32.h | 6 +-
12640 arch/x86/include/asm/thread_info.h | 27 +-
12641 arch/x86/include/asm/tlbflush.h | 77 +-
12642 arch/x86/include/asm/uaccess.h | 192 +-
12643 arch/x86/include/asm/uaccess_32.h | 28 +-
12644 arch/x86/include/asm/uaccess_64.h | 169 +-
12645 arch/x86/include/asm/word-at-a-time.h | 2 +-
12646 arch/x86/include/asm/x86_init.h | 10 +-
12647 arch/x86/include/asm/xen/page.h | 2 +-
12648 arch/x86/include/uapi/asm/e820.h | 2 +-
12649 arch/x86/kernel/Makefile | 2 +-
12650 arch/x86/kernel/acpi/boot.c | 4 +-
12651 arch/x86/kernel/acpi/sleep.c | 4 +
12652 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
12653 arch/x86/kernel/alternative.c | 124 +-
12654 arch/x86/kernel/apic/apic.c | 4 +-
12655 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
12656 arch/x86/kernel/apic/apic_noop.c | 2 +-
12657 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
12658 arch/x86/kernel/apic/io_apic.c | 8 +-
12659 arch/x86/kernel/apic/msi.c | 2 +-
12660 arch/x86/kernel/apic/probe_32.c | 4 +-
12661 arch/x86/kernel/apic/vector.c | 4 +-
12662 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
12663 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
12664 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
12665 arch/x86/kernel/apm_32.c | 21 +-
12666 arch/x86/kernel/asm-offsets.c | 20 +
12667 arch/x86/kernel/asm-offsets_64.c | 1 +
12668 arch/x86/kernel/cpu/Makefile | 4 -
12669 arch/x86/kernel/cpu/amd.c | 2 +-
12670 arch/x86/kernel/cpu/bugs_64.c | 2 +
12671 arch/x86/kernel/cpu/common.c | 202 +-
12672 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
12673 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
12674 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
12675 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
12676 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
12677 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
12678 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
12679 arch/x86/kernel/cpu/perf_event.c | 10 +-
12680 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
12681 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
12682 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
12683 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
12684 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
12685 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
12686 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
12687 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
12688 arch/x86/kernel/crash_dump_64.c | 2 +-
12689 arch/x86/kernel/doublefault.c | 8 +-
12690 arch/x86/kernel/dumpstack.c | 24 +-
12691 arch/x86/kernel/dumpstack_32.c | 25 +-
12692 arch/x86/kernel/dumpstack_64.c | 62 +-
12693 arch/x86/kernel/e820.c | 4 +-
12694 arch/x86/kernel/early_printk.c | 1 +
12695 arch/x86/kernel/espfix_64.c | 44 +-
12696 arch/x86/kernel/fpu/core.c | 24 +-
12697 arch/x86/kernel/fpu/init.c | 40 +-
12698 arch/x86/kernel/fpu/regset.c | 22 +-
12699 arch/x86/kernel/fpu/signal.c | 20 +-
12700 arch/x86/kernel/fpu/xstate.c | 8 +-
12701 arch/x86/kernel/ftrace.c | 18 +-
12702 arch/x86/kernel/head64.c | 14 +-
12703 arch/x86/kernel/head_32.S | 235 +-
12704 arch/x86/kernel/head_64.S | 173 +-
12705 arch/x86/kernel/i386_ksyms_32.c | 12 +
12706 arch/x86/kernel/i8259.c | 10 +-
12707 arch/x86/kernel/io_delay.c | 2 +-
12708 arch/x86/kernel/ioport.c | 2 +-
12709 arch/x86/kernel/irq.c | 8 +-
12710 arch/x86/kernel/irq_32.c | 45 +-
12711 arch/x86/kernel/jump_label.c | 10 +-
12712 arch/x86/kernel/kgdb.c | 21 +-
12713 arch/x86/kernel/kprobes/core.c | 28 +-
12714 arch/x86/kernel/kprobes/opt.c | 16 +-
12715 arch/x86/kernel/ksysfs.c | 2 +-
12716 arch/x86/kernel/kvmclock.c | 20 +-
12717 arch/x86/kernel/ldt.c | 25 +
12718 arch/x86/kernel/livepatch.c | 12 +-
12719 arch/x86/kernel/machine_kexec_32.c | 6 +-
12720 arch/x86/kernel/mcount_64.S | 19 +-
12721 arch/x86/kernel/module.c | 78 +-
12722 arch/x86/kernel/msr.c | 2 +-
12723 arch/x86/kernel/nmi.c | 34 +-
12724 arch/x86/kernel/nmi_selftest.c | 4 +-
12725 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
12726 arch/x86/kernel/paravirt.c | 45 +-
12727 arch/x86/kernel/paravirt_patch_64.c | 8 +
12728 arch/x86/kernel/pci-calgary_64.c | 2 +-
12729 arch/x86/kernel/pci-iommu_table.c | 2 +-
12730 arch/x86/kernel/pci-swiotlb.c | 2 +-
12731 arch/x86/kernel/process.c | 80 +-
12732 arch/x86/kernel/process_32.c | 29 +-
12733 arch/x86/kernel/process_64.c | 14 +-
12734 arch/x86/kernel/ptrace.c | 20 +-
12735 arch/x86/kernel/pvclock.c | 8 +-
12736 arch/x86/kernel/reboot.c | 44 +-
12737 arch/x86/kernel/reboot_fixups_32.c | 2 +-
12738 arch/x86/kernel/relocate_kernel_64.S | 3 +-
12739 arch/x86/kernel/setup.c | 29 +-
12740 arch/x86/kernel/setup_percpu.c | 29 +-
12741 arch/x86/kernel/signal.c | 17 +-
12742 arch/x86/kernel/smp.c | 2 +-
12743 arch/x86/kernel/smpboot.c | 29 +-
12744 arch/x86/kernel/step.c | 6 +-
12745 arch/x86/kernel/sys_i386_32.c | 184 +
12746 arch/x86/kernel/sys_x86_64.c | 22 +-
12747 arch/x86/kernel/tboot.c | 14 +-
12748 arch/x86/kernel/time.c | 8 +-
12749 arch/x86/kernel/tls.c | 7 +-
12750 arch/x86/kernel/tracepoint.c | 4 +-
12751 arch/x86/kernel/traps.c | 53 +-
12752 arch/x86/kernel/tsc.c | 2 +-
12753 arch/x86/kernel/uprobes.c | 2 +-
12754 arch/x86/kernel/vm86_32.c | 6 +-
12755 arch/x86/kernel/vmlinux.lds.S | 153 +-
12756 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
12757 arch/x86/kernel/x86_init.c | 6 +-
12758 arch/x86/kvm/cpuid.c | 21 +-
12759 arch/x86/kvm/emulate.c | 2 +-
12760 arch/x86/kvm/lapic.c | 2 +-
12761 arch/x86/kvm/paging_tmpl.h | 2 +-
12762 arch/x86/kvm/svm.c | 10 +-
12763 arch/x86/kvm/vmx.c | 62 +-
12764 arch/x86/kvm/x86.c | 42 +-
12765 arch/x86/lguest/boot.c | 3 +-
12766 arch/x86/lib/atomic64_386_32.S | 164 +
12767 arch/x86/lib/atomic64_cx8_32.S | 98 +-
12768 arch/x86/lib/checksum_32.S | 99 +-
12769 arch/x86/lib/clear_page_64.S | 3 +
12770 arch/x86/lib/cmpxchg16b_emu.S | 3 +
12771 arch/x86/lib/copy_page_64.S | 14 +-
12772 arch/x86/lib/copy_user_64.S | 66 +-
12773 arch/x86/lib/csum-copy_64.S | 14 +-
12774 arch/x86/lib/csum-wrappers_64.c | 8 +-
12775 arch/x86/lib/getuser.S | 74 +-
12776 arch/x86/lib/insn.c | 8 +-
12777 arch/x86/lib/iomap_copy_64.S | 2 +
12778 arch/x86/lib/memcpy_64.S | 6 +
12779 arch/x86/lib/memmove_64.S | 3 +-
12780 arch/x86/lib/memset_64.S | 3 +
12781 arch/x86/lib/mmx_32.c | 243 +-
12782 arch/x86/lib/msr-reg.S | 2 +
12783 arch/x86/lib/putuser.S | 87 +-
12784 arch/x86/lib/rwsem.S | 6 +-
12785 arch/x86/lib/usercopy_32.c | 359 +-
12786 arch/x86/lib/usercopy_64.c | 20 +-
12787 arch/x86/math-emu/fpu_aux.c | 2 +-
12788 arch/x86/math-emu/fpu_entry.c | 4 +-
12789 arch/x86/math-emu/fpu_system.h | 2 +-
12790 arch/x86/mm/Makefile | 4 +
12791 arch/x86/mm/extable.c | 26 +-
12792 arch/x86/mm/fault.c | 570 +-
12793 arch/x86/mm/gup.c | 6 +-
12794 arch/x86/mm/highmem_32.c | 6 +
12795 arch/x86/mm/hugetlbpage.c | 24 +-
12796 arch/x86/mm/init.c | 111 +-
12797 arch/x86/mm/init_32.c | 111 +-
12798 arch/x86/mm/init_64.c | 46 +-
12799 arch/x86/mm/iomap_32.c | 4 +
12800 arch/x86/mm/ioremap.c | 52 +-
12801 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
12802 arch/x86/mm/mmap.c | 40 +-
12803 arch/x86/mm/mmio-mod.c | 10 +-
12804 arch/x86/mm/numa.c | 2 +-
12805 arch/x86/mm/pageattr.c | 38 +-
12806 arch/x86/mm/pat.c | 12 +-
12807 arch/x86/mm/pat_rbtree.c | 2 +-
12808 arch/x86/mm/pf_in.c | 10 +-
12809 arch/x86/mm/pgtable.c | 214 +-
12810 arch/x86/mm/pgtable_32.c | 3 +
12811 arch/x86/mm/setup_nx.c | 7 +
12812 arch/x86/mm/tlb.c | 4 +
12813 arch/x86/mm/uderef_64.c | 37 +
12814 arch/x86/net/bpf_jit.S | 11 +
12815 arch/x86/net/bpf_jit_comp.c | 13 +-
12816 arch/x86/oprofile/backtrace.c | 6 +-
12817 arch/x86/oprofile/nmi_int.c | 8 +-
12818 arch/x86/oprofile/op_model_amd.c | 8 +-
12819 arch/x86/oprofile/op_model_ppro.c | 7 +-
12820 arch/x86/oprofile/op_x86_model.h | 2 +-
12821 arch/x86/pci/intel_mid_pci.c | 2 +-
12822 arch/x86/pci/irq.c | 8 +-
12823 arch/x86/pci/pcbios.c | 144 +-
12824 arch/x86/platform/efi/efi_32.c | 24 +
12825 arch/x86/platform/efi/efi_64.c | 26 +-
12826 arch/x86/platform/efi/efi_stub_32.S | 64 +-
12827 arch/x86/platform/efi/efi_stub_64.S | 2 +
12828 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
12829 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
12830 arch/x86/platform/intel-mid/mfld.c | 4 +-
12831 arch/x86/platform/intel-mid/mrfl.c | 2 +-
12832 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
12833 arch/x86/platform/olpc/olpc_dt.c | 2 +-
12834 arch/x86/power/cpu.c | 11 +-
12835 arch/x86/realmode/init.c | 10 +-
12836 arch/x86/realmode/rm/Makefile | 3 +
12837 arch/x86/realmode/rm/header.S | 4 +-
12838 arch/x86/realmode/rm/reboot.S | 4 +
12839 arch/x86/realmode/rm/trampoline_32.S | 12 +-
12840 arch/x86/realmode/rm/trampoline_64.S | 3 +-
12841 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
12842 arch/x86/tools/Makefile | 2 +-
12843 arch/x86/tools/relocs.c | 96 +-
12844 arch/x86/um/mem_32.c | 2 +-
12845 arch/x86/um/tls_32.c | 2 +-
12846 arch/x86/xen/enlighten.c | 50 +-
12847 arch/x86/xen/mmu.c | 19 +-
12848 arch/x86/xen/smp.c | 16 +-
12849 arch/x86/xen/xen-asm_32.S | 2 +-
12850 arch/x86/xen/xen-head.S | 11 +
12851 arch/x86/xen/xen-ops.h | 2 -
12852 block/bio.c | 4 +-
12853 block/blk-iopoll.c | 2 +-
12854 block/blk-map.c | 2 +-
12855 block/blk-softirq.c | 2 +-
12856 block/bsg.c | 12 +-
12857 block/compat_ioctl.c | 4 +-
12858 block/genhd.c | 9 +-
12859 block/partitions/efi.c | 8 +-
12860 block/scsi_ioctl.c | 29 +-
12861 crypto/cryptd.c | 4 +-
12862 crypto/pcrypt.c | 2 +-
12863 crypto/zlib.c | 12 +-
12864 drivers/acpi/acpi_video.c | 2 +-
12865 drivers/acpi/apei/apei-internal.h | 2 +-
12866 drivers/acpi/apei/ghes.c | 4 +-
12867 drivers/acpi/bgrt.c | 6 +-
12868 drivers/acpi/blacklist.c | 4 +-
12869 drivers/acpi/bus.c | 4 +-
12870 drivers/acpi/device_pm.c | 4 +-
12871 drivers/acpi/ec.c | 2 +-
12872 drivers/acpi/pci_slot.c | 2 +-
12873 drivers/acpi/processor_idle.c | 2 +-
12874 drivers/acpi/processor_pdc.c | 2 +-
12875 drivers/acpi/sleep.c | 2 +-
12876 drivers/acpi/sysfs.c | 4 +-
12877 drivers/acpi/thermal.c | 2 +-
12878 drivers/acpi/video_detect.c | 7 +-
12879 drivers/ata/libata-core.c | 12 +-
12880 drivers/ata/libata-scsi.c | 2 +-
12881 drivers/ata/libata.h | 2 +-
12882 drivers/ata/pata_arasan_cf.c | 4 +-
12883 drivers/atm/adummy.c | 2 +-
12884 drivers/atm/ambassador.c | 8 +-
12885 drivers/atm/atmtcp.c | 14 +-
12886 drivers/atm/eni.c | 10 +-
12887 drivers/atm/firestream.c | 8 +-
12888 drivers/atm/fore200e.c | 14 +-
12889 drivers/atm/he.c | 18 +-
12890 drivers/atm/horizon.c | 4 +-
12891 drivers/atm/idt77252.c | 36 +-
12892 drivers/atm/iphase.c | 34 +-
12893 drivers/atm/lanai.c | 12 +-
12894 drivers/atm/nicstar.c | 46 +-
12895 drivers/atm/solos-pci.c | 4 +-
12896 drivers/atm/suni.c | 4 +-
12897 drivers/atm/uPD98402.c | 16 +-
12898 drivers/atm/zatm.c | 6 +-
12899 drivers/base/bus.c | 4 +-
12900 drivers/base/devtmpfs.c | 8 +-
12901 drivers/base/node.c | 2 +-
12902 drivers/base/platform-msi.c | 20 +-
12903 drivers/base/power/domain.c | 11 +-
12904 drivers/base/power/sysfs.c | 2 +-
12905 drivers/base/power/wakeup.c | 8 +-
12906 drivers/base/regmap/regmap-debugfs.c | 11 +-
12907 drivers/base/syscore.c | 4 +-
12908 drivers/block/cciss.c | 28 +-
12909 drivers/block/cciss.h | 2 +-
12910 drivers/block/cpqarray.c | 28 +-
12911 drivers/block/cpqarray.h | 2 +-
12912 drivers/block/drbd/drbd_bitmap.c | 2 +-
12913 drivers/block/drbd/drbd_int.h | 8 +-
12914 drivers/block/drbd/drbd_main.c | 12 +-
12915 drivers/block/drbd/drbd_nl.c | 4 +-
12916 drivers/block/drbd/drbd_receiver.c | 34 +-
12917 drivers/block/drbd/drbd_worker.c | 8 +-
12918 drivers/block/pktcdvd.c | 4 +-
12919 drivers/block/rbd.c | 2 +-
12920 drivers/bluetooth/btwilink.c | 2 +-
12921 drivers/bus/arm-cci.c | 12 +-
12922 drivers/cdrom/cdrom.c | 11 +-
12923 drivers/cdrom/gdrom.c | 1 -
12924 drivers/char/agp/compat_ioctl.c | 2 +-
12925 drivers/char/agp/frontend.c | 4 +-
12926 drivers/char/agp/intel-gtt.c | 4 +-
12927 drivers/char/hpet.c | 2 +-
12928 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
12929 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
12930 drivers/char/mem.c | 47 +-
12931 drivers/char/nvram.c | 2 +-
12932 drivers/char/pcmcia/synclink_cs.c | 16 +-
12933 drivers/char/random.c | 12 +-
12934 drivers/char/sonypi.c | 11 +-
12935 drivers/char/tpm/tpm_acpi.c | 3 +-
12936 drivers/char/tpm/tpm_eventlog.c | 4 +-
12937 drivers/char/virtio_console.c | 4 +-
12938 drivers/clk/clk-composite.c | 2 +-
12939 drivers/clk/samsung/clk.h | 2 +-
12940 drivers/clk/socfpga/clk-gate.c | 9 +-
12941 drivers/clk/socfpga/clk-pll.c | 9 +-
12942 drivers/clk/ti/clk.c | 8 +-
12943 drivers/cpufreq/acpi-cpufreq.c | 17 +-
12944 drivers/cpufreq/cpufreq-dt.c | 4 +-
12945 drivers/cpufreq/cpufreq.c | 30 +-
12946 drivers/cpufreq/cpufreq_governor.c | 2 +-
12947 drivers/cpufreq/cpufreq_governor.h | 4 +-
12948 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
12949 drivers/cpufreq/intel_pstate.c | 33 +-
12950 drivers/cpufreq/p4-clockmod.c | 12 +-
12951 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
12952 drivers/cpufreq/speedstep-centrino.c | 7 +-
12953 drivers/cpuidle/driver.c | 2 +-
12954 drivers/cpuidle/dt_idle_states.c | 2 +-
12955 drivers/cpuidle/governor.c | 2 +-
12956 drivers/cpuidle/sysfs.c | 2 +-
12957 drivers/crypto/hifn_795x.c | 4 +-
12958 drivers/devfreq/devfreq.c | 4 +-
12959 drivers/dma/sh/shdma-base.c | 4 +-
12960 drivers/dma/sh/shdmac.c | 2 +-
12961 drivers/edac/edac_device.c | 4 +-
12962 drivers/edac/edac_mc_sysfs.c | 2 +-
12963 drivers/edac/edac_pci.c | 4 +-
12964 drivers/edac/edac_pci_sysfs.c | 22 +-
12965 drivers/edac/mce_amd.h | 2 +-
12966 drivers/firewire/core-card.c | 6 +-
12967 drivers/firewire/core-device.c | 2 +-
12968 drivers/firewire/core-transaction.c | 1 +
12969 drivers/firewire/core.h | 1 +
12970 drivers/firmware/dmi-id.c | 2 +-
12971 drivers/firmware/dmi_scan.c | 12 +-
12972 drivers/firmware/efi/cper.c | 8 +-
12973 drivers/firmware/efi/efi.c | 12 +-
12974 drivers/firmware/efi/efivars.c | 2 +-
12975 drivers/firmware/efi/runtime-map.c | 2 +-
12976 drivers/firmware/google/gsmi.c | 2 +-
12977 drivers/firmware/google/memconsole.c | 7 +-
12978 drivers/firmware/memmap.c | 2 +-
12979 drivers/firmware/psci.c | 2 +-
12980 drivers/gpio/gpio-davinci.c | 6 +-
12981 drivers/gpio/gpio-em.c | 2 +-
12982 drivers/gpio/gpio-ich.c | 2 +-
12983 drivers/gpio/gpio-omap.c | 4 +-
12984 drivers/gpio/gpio-rcar.c | 2 +-
12985 drivers/gpio/gpio-vr41xx.c | 2 +-
12986 drivers/gpio/gpiolib.c | 12 +-
12987 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
12988 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
12989 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
12990 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
12991 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
12992 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
12993 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
12994 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
12995 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
12996 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
12997 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
12998 drivers/gpu/drm/drm_crtc.c | 2 +-
12999 drivers/gpu/drm/drm_drv.c | 2 +-
13000 drivers/gpu/drm/drm_fops.c | 12 +-
13001 drivers/gpu/drm/drm_global.c | 14 +-
13002 drivers/gpu/drm/drm_info.c | 13 +-
13003 drivers/gpu/drm/drm_ioc32.c | 13 +-
13004 drivers/gpu/drm/drm_ioctl.c | 2 +-
13005 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
13006 drivers/gpu/drm/i810/i810_drv.h | 4 +-
13007 drivers/gpu/drm/i915/i915_dma.c | 2 +-
13008 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
13009 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
13010 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
13011 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
13012 drivers/gpu/drm/i915/intel_display.c | 26 +-
13013 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
13014 drivers/gpu/drm/mga/mga_drv.h | 4 +-
13015 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
13016 drivers/gpu/drm/mga/mga_irq.c | 8 +-
13017 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
13018 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
13019 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
13020 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
13021 drivers/gpu/drm/omapdrm/Makefile | 2 +-
13022 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
13023 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
13024 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
13025 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
13026 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
13027 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
13028 drivers/gpu/drm/r128/r128_cce.c | 2 +-
13029 drivers/gpu/drm/r128/r128_drv.h | 4 +-
13030 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
13031 drivers/gpu/drm/r128/r128_irq.c | 4 +-
13032 drivers/gpu/drm/r128/r128_state.c | 4 +-
13033 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
13034 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
13035 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
13036 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
13037 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
13038 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
13039 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
13040 drivers/gpu/drm/tegra/dc.c | 2 +-
13041 drivers/gpu/drm/tegra/dsi.c | 2 +-
13042 drivers/gpu/drm/tegra/hdmi.c | 2 +-
13043 drivers/gpu/drm/tegra/sor.c | 7 +-
13044 drivers/gpu/drm/tilcdc/Makefile | 6 +-
13045 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
13046 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
13047 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
13048 drivers/gpu/drm/udl/udl_fb.c | 1 -
13049 drivers/gpu/drm/via/via_drv.h | 4 +-
13050 drivers/gpu/drm/via/via_irq.c | 18 +-
13051 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
13052 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
13053 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
13054 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
13055 drivers/gpu/vga/vga_switcheroo.c | 4 +-
13056 drivers/hid/hid-core.c | 4 +-
13057 drivers/hid/hid-sensor-custom.c | 2 +-
13058 drivers/hv/channel.c | 2 +-
13059 drivers/hv/hv.c | 4 +-
13060 drivers/hv/hv_balloon.c | 18 +-
13061 drivers/hv/hyperv_vmbus.h | 2 +-
13062 drivers/hwmon/acpi_power_meter.c | 6 +-
13063 drivers/hwmon/applesmc.c | 2 +-
13064 drivers/hwmon/asus_atk0110.c | 10 +-
13065 drivers/hwmon/coretemp.c | 2 +-
13066 drivers/hwmon/dell-smm-hwmon.c | 2 +-
13067 drivers/hwmon/ibmaem.c | 2 +-
13068 drivers/hwmon/iio_hwmon.c | 2 +-
13069 drivers/hwmon/nct6683.c | 6 +-
13070 drivers/hwmon/nct6775.c | 6 +-
13071 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
13072 drivers/hwmon/sht15.c | 12 +-
13073 drivers/hwmon/via-cputemp.c | 2 +-
13074 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
13075 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
13076 drivers/i2c/i2c-dev.c | 2 +-
13077 drivers/ide/ide-cd.c | 2 +-
13078 drivers/ide/ide-disk.c | 2 +-
13079 drivers/iio/industrialio-core.c | 2 +-
13080 drivers/iio/magnetometer/ak8975.c | 2 +-
13081 drivers/infiniband/core/cm.c | 32 +-
13082 drivers/infiniband/core/fmr_pool.c | 20 +-
13083 drivers/infiniband/core/uverbs_cmd.c | 3 +
13084 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
13085 drivers/infiniband/hw/mlx4/mad.c | 2 +-
13086 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
13087 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
13088 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
13089 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
13090 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
13091 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
13092 drivers/infiniband/hw/nes/nes.c | 4 +-
13093 drivers/infiniband/hw/nes/nes.h | 40 +-
13094 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
13095 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
13096 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
13097 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
13098 drivers/infiniband/hw/qib/qib.h | 1 +
13099 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
13100 drivers/input/gameport/gameport.c | 4 +-
13101 drivers/input/input.c | 4 +-
13102 drivers/input/joystick/sidewinder.c | 1 +
13103 drivers/input/joystick/xpad.c | 4 +-
13104 drivers/input/misc/ims-pcu.c | 4 +-
13105 drivers/input/mouse/psmouse.h | 2 +-
13106 drivers/input/mousedev.c | 2 +-
13107 drivers/input/serio/serio.c | 4 +-
13108 drivers/input/serio/serio_raw.c | 4 +-
13109 drivers/input/touchscreen/htcpen.c | 2 +-
13110 drivers/iommu/arm-smmu-v3.c | 2 +-
13111 drivers/iommu/arm-smmu.c | 43 +-
13112 drivers/iommu/io-pgtable-arm.c | 101 +-
13113 drivers/iommu/io-pgtable.c | 11 +-
13114 drivers/iommu/io-pgtable.h | 19 +-
13115 drivers/iommu/iommu.c | 2 +-
13116 drivers/iommu/ipmmu-vmsa.c | 13 +-
13117 drivers/iommu/irq_remapping.c | 2 +-
13118 drivers/irqchip/irq-gic.c | 2 +-
13119 drivers/irqchip/irq-i8259.c | 2 +-
13120 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
13121 drivers/irqchip/irq-renesas-irqc.c | 2 +-
13122 drivers/isdn/capi/capi.c | 10 +-
13123 drivers/isdn/gigaset/interface.c | 8 +-
13124 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
13125 drivers/isdn/hardware/avm/b1.c | 4 +-
13126 drivers/isdn/i4l/isdn_common.c | 2 +
13127 drivers/isdn/i4l/isdn_tty.c | 22 +-
13128 drivers/isdn/icn/icn.c | 2 +-
13129 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
13130 drivers/lguest/core.c | 10 +-
13131 drivers/lguest/page_tables.c | 2 +-
13132 drivers/lguest/x86/core.c | 12 +-
13133 drivers/lguest/x86/switcher_32.S | 27 +-
13134 drivers/md/bcache/closure.h | 2 +-
13135 drivers/md/bitmap.c | 2 +-
13136 drivers/md/dm-ioctl.c | 2 +-
13137 drivers/md/dm-raid1.c | 18 +-
13138 drivers/md/dm-stats.c | 6 +-
13139 drivers/md/dm-stripe.c | 10 +-
13140 drivers/md/dm-table.c | 2 +-
13141 drivers/md/dm-thin-metadata.c | 4 +-
13142 drivers/md/dm.c | 16 +-
13143 drivers/md/md.c | 26 +-
13144 drivers/md/md.h | 6 +-
13145 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
13146 drivers/md/persistent-data/dm-space-map.h | 1 +
13147 drivers/md/raid1.c | 4 +-
13148 drivers/md/raid10.c | 18 +-
13149 drivers/md/raid5.c | 22 +-
13150 drivers/media/dvb-core/dvbdev.c | 2 +-
13151 drivers/media/dvb-frontends/af9033.h | 2 +-
13152 drivers/media/dvb-frontends/dib3000.h | 2 +-
13153 drivers/media/dvb-frontends/dib7000p.h | 2 +-
13154 drivers/media/dvb-frontends/dib8000.h | 2 +-
13155 drivers/media/pci/cx88/cx88-video.c | 6 +-
13156 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
13157 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
13158 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
13159 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
13160 drivers/media/pci/tw68/tw68-core.c | 2 +-
13161 drivers/media/platform/omap/omap_vout.c | 11 +-
13162 drivers/media/platform/s5p-tv/mixer.h | 2 +-
13163 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
13164 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
13165 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
13166 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
13167 drivers/media/radio/radio-cadet.c | 2 +
13168 drivers/media/radio/radio-maxiradio.c | 2 +-
13169 drivers/media/radio/radio-shark.c | 2 +-
13170 drivers/media/radio/radio-shark2.c | 2 +-
13171 drivers/media/radio/radio-si476x.c | 2 +-
13172 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
13173 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
13174 drivers/media/v4l2-core/v4l2-device.c | 4 +-
13175 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
13176 drivers/memory/omap-gpmc.c | 21 +-
13177 drivers/message/fusion/mptsas.c | 34 +-
13178 drivers/mfd/ab8500-debugfs.c | 2 +-
13179 drivers/mfd/kempld-core.c | 2 +-
13180 drivers/mfd/max8925-i2c.c | 2 +-
13181 drivers/mfd/tps65910.c | 2 +-
13182 drivers/mfd/twl4030-irq.c | 9 +-
13183 drivers/mfd/wm5110-tables.c | 2 +-
13184 drivers/mfd/wm8998-tables.c | 2 +-
13185 drivers/misc/c2port/core.c | 4 +-
13186 drivers/misc/kgdbts.c | 4 +-
13187 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
13188 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
13189 drivers/misc/mic/scif/scif_rb.c | 8 +-
13190 drivers/misc/sgi-gru/gruhandles.c | 4 +-
13191 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
13192 drivers/misc/sgi-gru/grutables.h | 154 +-
13193 drivers/misc/sgi-xp/xp.h | 2 +-
13194 drivers/misc/sgi-xp/xpc.h | 3 +-
13195 drivers/misc/sgi-xp/xpc_main.c | 2 +-
13196 drivers/mmc/card/block.c | 2 +-
13197 drivers/mmc/host/dw_mmc.h | 2 +-
13198 drivers/mmc/host/mmci.c | 4 +-
13199 drivers/mmc/host/omap_hsmmc.c | 4 +-
13200 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
13201 drivers/mmc/host/sdhci-s3c.c | 8 +-
13202 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
13203 drivers/mtd/nand/denali.c | 1 +
13204 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
13205 drivers/mtd/nftlmount.c | 1 +
13206 drivers/mtd/sm_ftl.c | 2 +-
13207 drivers/net/bonding/bond_netlink.c | 2 +-
13208 drivers/net/caif/caif_hsi.c | 2 +-
13209 drivers/net/can/Kconfig | 2 +-
13210 drivers/net/can/dev.c | 2 +-
13211 drivers/net/can/vcan.c | 2 +-
13212 drivers/net/dummy.c | 2 +-
13213 drivers/net/ethernet/8390/ax88796.c | 4 +-
13214 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
13215 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
13216 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
13217 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
13218 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
13219 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
13220 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
13221 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
13222 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
13223 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
13224 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
13225 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
13226 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
13227 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
13228 drivers/net/ethernet/broadcom/tg3.h | 1 +
13229 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
13230 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
13231 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
13232 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
13233 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
13234 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
13235 drivers/net/ethernet/faraday/ftmac100.c | 2 +
13236 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
13237 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
13238 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
13239 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
13240 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
13241 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
13242 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
13243 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
13244 drivers/net/ethernet/realtek/r8169.c | 8 +-
13245 drivers/net/ethernet/sfc/ptp.c | 2 +-
13246 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
13247 drivers/net/ethernet/via/via-rhine.c | 2 +-
13248 drivers/net/geneve.c | 2 +-
13249 drivers/net/hyperv/hyperv_net.h | 2 +-
13250 drivers/net/hyperv/rndis_filter.c | 4 +-
13251 drivers/net/ifb.c | 2 +-
13252 drivers/net/ipvlan/ipvlan_core.c | 2 +-
13253 drivers/net/macvlan.c | 20 +-
13254 drivers/net/macvtap.c | 6 +-
13255 drivers/net/nlmon.c | 2 +-
13256 drivers/net/phy/phy_device.c | 6 +-
13257 drivers/net/ppp/ppp_generic.c | 4 +-
13258 drivers/net/slip/slhc.c | 2 +-
13259 drivers/net/team/team.c | 4 +-
13260 drivers/net/tun.c | 7 +-
13261 drivers/net/usb/hso.c | 23 +-
13262 drivers/net/usb/r8152.c | 2 +-
13263 drivers/net/usb/sierra_net.c | 4 +-
13264 drivers/net/virtio_net.c | 2 +-
13265 drivers/net/vrf.c | 2 +-
13266 drivers/net/vxlan.c | 4 +-
13267 drivers/net/wimax/i2400m/rx.c | 2 +-
13268 drivers/net/wireless/airo.c | 2 +-
13269 drivers/net/wireless/at76c50x-usb.c | 2 +-
13270 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
13271 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
13272 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
13273 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
13274 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
13275 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
13276 drivers/net/wireless/ath/ath9k/main.c | 22 +-
13277 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
13278 drivers/net/wireless/b43/phy_lp.c | 2 +-
13279 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
13280 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
13281 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
13282 drivers/net/wireless/mac80211_hwsim.c | 28 +-
13283 drivers/net/wireless/rndis_wlan.c | 2 +-
13284 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
13285 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
13286 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
13287 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
13288 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
13289 drivers/nfc/nfcwilink.c | 2 +-
13290 drivers/of/fdt.c | 4 +-
13291 drivers/oprofile/buffer_sync.c | 8 +-
13292 drivers/oprofile/event_buffer.c | 2 +-
13293 drivers/oprofile/oprof.c | 2 +-
13294 drivers/oprofile/oprofile_stats.c | 10 +-
13295 drivers/oprofile/oprofile_stats.h | 10 +-
13296 drivers/oprofile/oprofilefs.c | 6 +-
13297 drivers/oprofile/timer_int.c | 2 +-
13298 drivers/parport/procfs.c | 4 +-
13299 drivers/pci/host/pci-host-generic.c | 24 +-
13300 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
13301 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
13302 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
13303 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
13304 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
13305 drivers/pci/hotplug/pciehp_core.c | 2 +-
13306 drivers/pci/msi.c | 22 +-
13307 drivers/pci/pci-sysfs.c | 6 +-
13308 drivers/pci/pci.h | 2 +-
13309 drivers/pci/pcie/aspm.c | 6 +-
13310 drivers/pci/pcie/portdrv_pci.c | 2 +-
13311 drivers/pci/probe.c | 2 +-
13312 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
13313 drivers/pinctrl/pinctrl-at91.c | 5 +-
13314 drivers/platform/chrome/chromeos_pstore.c | 2 +-
13315 drivers/platform/x86/alienware-wmi.c | 4 +-
13316 drivers/platform/x86/compal-laptop.c | 2 +-
13317 drivers/platform/x86/hdaps.c | 2 +-
13318 drivers/platform/x86/ibm_rtl.c | 2 +-
13319 drivers/platform/x86/intel_oaktrail.c | 2 +-
13320 drivers/platform/x86/msi-laptop.c | 16 +-
13321 drivers/platform/x86/msi-wmi.c | 2 +-
13322 drivers/platform/x86/samsung-laptop.c | 2 +-
13323 drivers/platform/x86/samsung-q10.c | 2 +-
13324 drivers/platform/x86/sony-laptop.c | 14 +-
13325 drivers/platform/x86/thinkpad_acpi.c | 2 +-
13326 drivers/pnp/pnpbios/bioscalls.c | 14 +-
13327 drivers/pnp/pnpbios/core.c | 2 +-
13328 drivers/power/pda_power.c | 7 +-
13329 drivers/power/power_supply.h | 4 +-
13330 drivers/power/power_supply_core.c | 7 +-
13331 drivers/power/power_supply_sysfs.c | 6 +-
13332 drivers/power/reset/at91-reset.c | 9 +-
13333 drivers/powercap/powercap_sys.c | 136 +-
13334 drivers/ptp/ptp_private.h | 2 +-
13335 drivers/ptp/ptp_sysfs.c | 2 +-
13336 drivers/regulator/core.c | 4 +-
13337 drivers/regulator/max8660.c | 6 +-
13338 drivers/regulator/max8973-regulator.c | 16 +-
13339 drivers/regulator/mc13892-regulator.c | 8 +-
13340 drivers/rtc/rtc-armada38x.c | 7 +-
13341 drivers/rtc/rtc-cmos.c | 4 +-
13342 drivers/rtc/rtc-ds1307.c | 2 +-
13343 drivers/rtc/rtc-m48t59.c | 4 +-
13344 drivers/rtc/rtc-test.c | 6 +-
13345 drivers/scsi/be2iscsi/be_main.c | 2 +-
13346 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
13347 drivers/scsi/bfa/bfa_ioc.h | 4 +-
13348 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
13349 drivers/scsi/hosts.c | 4 +-
13350 drivers/scsi/hpsa.c | 38 +-
13351 drivers/scsi/hpsa.h | 2 +-
13352 drivers/scsi/libfc/fc_exch.c | 50 +-
13353 drivers/scsi/libsas/sas_ata.c | 2 +-
13354 drivers/scsi/lpfc/lpfc.h | 8 +-
13355 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
13356 drivers/scsi/lpfc/lpfc_init.c | 6 +-
13357 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
13358 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
13359 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
13360 drivers/scsi/pmcraid.c | 20 +-
13361 drivers/scsi/pmcraid.h | 8 +-
13362 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
13363 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
13364 drivers/scsi/qla2xxx/qla_os.c | 6 +-
13365 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
13366 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
13367 drivers/scsi/scsi.c | 2 +-
13368 drivers/scsi/scsi_lib.c | 8 +-
13369 drivers/scsi/scsi_sysfs.c | 2 +-
13370 drivers/scsi/scsi_transport_fc.c | 8 +-
13371 drivers/scsi/scsi_transport_iscsi.c | 6 +-
13372 drivers/scsi/scsi_transport_srp.c | 6 +-
13373 drivers/scsi/sd.c | 6 +-
13374 drivers/scsi/sg.c | 2 +-
13375 drivers/scsi/sr.c | 21 +-
13376 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
13377 drivers/spi/spi.c | 2 +-
13378 drivers/staging/android/timed_output.c | 6 +-
13379 drivers/staging/comedi/comedi_fops.c | 8 +-
13380 drivers/staging/fbtft/fbtft-core.c | 2 +-
13381 drivers/staging/fbtft/fbtft.h | 2 +-
13382 drivers/staging/gdm724x/gdm_tty.c | 2 +-
13383 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
13384 drivers/staging/iio/adc/ad7280a.c | 4 +-
13385 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
13386 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
13387 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
13388 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
13389 drivers/staging/lustre/lustre/include/obd.h | 2 +-
13390 drivers/staging/octeon/ethernet-rx.c | 20 +-
13391 drivers/staging/octeon/ethernet.c | 8 +-
13392 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
13393 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
13394 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
13395 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
13396 drivers/staging/sm750fb/sm750.c | 14 +-
13397 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
13398 drivers/target/sbp/sbp_target.c | 4 +-
13399 drivers/thermal/cpu_cooling.c | 9 +-
13400 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
13401 drivers/thermal/of-thermal.c | 17 +-
13402 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
13403 drivers/tty/cyclades.c | 6 +-
13404 drivers/tty/hvc/hvc_console.c | 14 +-
13405 drivers/tty/hvc/hvcs.c | 21 +-
13406 drivers/tty/hvc/hvsi.c | 22 +-
13407 drivers/tty/hvc/hvsi_lib.c | 4 +-
13408 drivers/tty/ipwireless/tty.c | 27 +-
13409 drivers/tty/moxa.c | 2 +-
13410 drivers/tty/n_gsm.c | 4 +-
13411 drivers/tty/n_tty.c | 3 +-
13412 drivers/tty/pty.c | 4 +-
13413 drivers/tty/rocket.c | 6 +-
13414 drivers/tty/serial/8250/8250_core.c | 10 +-
13415 drivers/tty/serial/ifx6x60.c | 2 +-
13416 drivers/tty/serial/ioc4_serial.c | 6 +-
13417 drivers/tty/serial/kgdb_nmi.c | 4 +-
13418 drivers/tty/serial/kgdboc.c | 32 +-
13419 drivers/tty/serial/msm_serial.c | 4 +-
13420 drivers/tty/serial/samsung.c | 9 +-
13421 drivers/tty/serial/serial_core.c | 8 +-
13422 drivers/tty/synclink.c | 34 +-
13423 drivers/tty/synclink_gt.c | 28 +-
13424 drivers/tty/synclinkmp.c | 34 +-
13425 drivers/tty/tty_io.c | 2 +-
13426 drivers/tty/tty_ldisc.c | 8 +-
13427 drivers/tty/tty_port.c | 22 +-
13428 drivers/uio/uio.c | 13 +-
13429 drivers/usb/atm/cxacru.c | 2 +-
13430 drivers/usb/atm/usbatm.c | 24 +-
13431 drivers/usb/class/cdc-acm.h | 2 +-
13432 drivers/usb/core/devices.c | 6 +-
13433 drivers/usb/core/devio.c | 12 +-
13434 drivers/usb/core/hcd.c | 4 +-
13435 drivers/usb/core/sysfs.c | 2 +-
13436 drivers/usb/core/usb.c | 2 +-
13437 drivers/usb/early/ehci-dbgp.c | 16 +-
13438 drivers/usb/gadget/function/u_serial.c | 22 +-
13439 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
13440 drivers/usb/host/ehci-hcd.c | 2 +-
13441 drivers/usb/host/ehci-hub.c | 4 +-
13442 drivers/usb/host/ehci-q.c | 4 +-
13443 drivers/usb/host/fotg210-hcd.c | 2 +-
13444 drivers/usb/host/fusbh200-hcd.c | 2 +-
13445 drivers/usb/host/hwa-hc.c | 2 +-
13446 drivers/usb/host/ohci-hcd.c | 2 +-
13447 drivers/usb/host/r8a66597.h | 2 +-
13448 drivers/usb/host/uhci-hcd.c | 2 +-
13449 drivers/usb/host/xhci-pci.c | 2 +-
13450 drivers/usb/host/xhci.c | 2 +-
13451 drivers/usb/misc/appledisplay.c | 4 +-
13452 drivers/usb/serial/console.c | 8 +-
13453 drivers/usb/storage/transport.c | 2 +-
13454 drivers/usb/storage/usb.c | 2 +-
13455 drivers/usb/storage/usb.h | 2 +-
13456 drivers/usb/usbip/vhci.h | 2 +-
13457 drivers/usb/usbip/vhci_hcd.c | 6 +-
13458 drivers/usb/usbip/vhci_rx.c | 2 +-
13459 drivers/usb/wusbcore/wa-hc.h | 4 +-
13460 drivers/usb/wusbcore/wa-xfer.c | 2 +-
13461 drivers/vfio/vfio.c | 2 +-
13462 drivers/vhost/vringh.c | 20 +-
13463 drivers/video/backlight/kb3886_bl.c | 2 +-
13464 drivers/video/console/fbcon.c | 2 +-
13465 drivers/video/fbdev/aty/aty128fb.c | 2 +-
13466 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
13467 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
13468 drivers/video/fbdev/core/fb_defio.c | 6 +-
13469 drivers/video/fbdev/core/fbmem.c | 2 +-
13470 drivers/video/fbdev/hyperv_fb.c | 4 +-
13471 drivers/video/fbdev/i810/i810_accel.c | 1 +
13472 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
13473 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
13474 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
13475 drivers/video/fbdev/omap2/dss/display.c | 8 +-
13476 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
13477 drivers/video/fbdev/smscufx.c | 4 +-
13478 drivers/video/fbdev/udlfb.c | 36 +-
13479 drivers/video/fbdev/uvesafb.c | 52 +-
13480 drivers/video/fbdev/vesafb.c | 58 +-
13481 drivers/video/fbdev/via/via_clock.h | 2 +-
13482 drivers/xen/events/events_base.c | 6 +-
13483 drivers/xen/evtchn.c | 4 +-
13484 fs/Kconfig.binfmt | 2 +-
13485 fs/afs/inode.c | 4 +-
13486 fs/aio.c | 2 +-
13487 fs/autofs4/waitq.c | 2 +-
13488 fs/befs/endian.h | 6 +-
13489 fs/binfmt_aout.c | 23 +-
13490 fs/binfmt_elf.c | 670 +-
13491 fs/binfmt_elf_fdpic.c | 4 +-
13492 fs/block_dev.c | 2 +-
13493 fs/btrfs/ctree.c | 9 +-
13494 fs/btrfs/delayed-inode.c | 9 +-
13495 fs/btrfs/delayed-inode.h | 6 +-
13496 fs/btrfs/file.c | 10 +-
13497 fs/btrfs/inode.c | 14 +-
13498 fs/btrfs/super.c | 2 +-
13499 fs/btrfs/sysfs.c | 2 +-
13500 fs/btrfs/tests/free-space-tests.c | 8 +-
13501 fs/btrfs/tree-log.h | 2 +-
13502 fs/buffer.c | 2 +-
13503 fs/cachefiles/bind.c | 6 +-
13504 fs/cachefiles/daemon.c | 8 +-
13505 fs/cachefiles/internal.h | 12 +-
13506 fs/cachefiles/namei.c | 2 +-
13507 fs/cachefiles/proc.c | 12 +-
13508 fs/ceph/dir.c | 12 +-
13509 fs/ceph/super.c | 4 +-
13510 fs/cifs/cifs_debug.c | 12 +-
13511 fs/cifs/cifsfs.c | 8 +-
13512 fs/cifs/cifsglob.h | 54 +-
13513 fs/cifs/file.c | 10 +-
13514 fs/cifs/misc.c | 4 +-
13515 fs/cifs/smb1ops.c | 80 +-
13516 fs/cifs/smb2ops.c | 84 +-
13517 fs/cifs/smb2pdu.c | 3 +-
13518 fs/coda/cache.c | 10 +-
13519 fs/compat.c | 4 +-
13520 fs/compat_binfmt_elf.c | 2 +
13521 fs/compat_ioctl.c | 12 +-
13522 fs/configfs/dir.c | 10 +-
13523 fs/coredump.c | 16 +-
13524 fs/dcache.c | 51 +-
13525 fs/ecryptfs/inode.c | 2 +-
13526 fs/ecryptfs/miscdev.c | 2 +-
13527 fs/exec.c | 362 +-
13528 fs/ext2/xattr.c | 5 +-
13529 fs/ext4/ext4.h | 20 +-
13530 fs/ext4/mballoc.c | 44 +-
13531 fs/ext4/resize.c | 16 +-
13532 fs/ext4/super.c | 4 +-
13533 fs/ext4/xattr.c | 5 +-
13534 fs/fhandle.c | 3 +-
13535 fs/file.c | 4 +-
13536 fs/fs_struct.c | 8 +-
13537 fs/fscache/cookie.c | 40 +-
13538 fs/fscache/internal.h | 202 +-
13539 fs/fscache/object.c | 26 +-
13540 fs/fscache/operation.c | 38 +-
13541 fs/fscache/page.c | 110 +-
13542 fs/fscache/stats.c | 348 +-
13543 fs/fuse/cuse.c | 10 +-
13544 fs/fuse/dev.c | 4 +-
13545 fs/gfs2/glock.c | 22 +-
13546 fs/gfs2/glops.c | 4 +-
13547 fs/gfs2/quota.c | 6 +-
13548 fs/hugetlbfs/inode.c | 13 +-
13549 fs/inode.c | 4 +-
13550 fs/jffs2/erase.c | 3 +-
13551 fs/jffs2/wbuf.c | 3 +-
13552 fs/jfs/super.c | 2 +-
13553 fs/kernfs/dir.c | 2 +-
13554 fs/kernfs/file.c | 20 +-
13555 fs/libfs.c | 10 +-
13556 fs/lockd/clntproc.c | 4 +-
13557 fs/namei.c | 16 +-
13558 fs/namespace.c | 16 +-
13559 fs/nfs/callback_xdr.c | 2 +-
13560 fs/nfs/inode.c | 6 +-
13561 fs/nfsd/nfs4proc.c | 2 +-
13562 fs/nfsd/nfs4xdr.c | 2 +-
13563 fs/nfsd/nfscache.c | 11 +-
13564 fs/nfsd/vfs.c | 6 +-
13565 fs/nls/nls_base.c | 26 +-
13566 fs/nls/nls_euc-jp.c | 6 +-
13567 fs/nls/nls_koi8-ru.c | 6 +-
13568 fs/notify/fanotify/fanotify_user.c | 4 +-
13569 fs/notify/notification.c | 4 +-
13570 fs/ntfs/dir.c | 2 +-
13571 fs/ntfs/super.c | 6 +-
13572 fs/ocfs2/localalloc.c | 2 +-
13573 fs/ocfs2/ocfs2.h | 10 +-
13574 fs/ocfs2/suballoc.c | 12 +-
13575 fs/ocfs2/super.c | 20 +-
13576 fs/pipe.c | 72 +-
13577 fs/posix_acl.c | 4 +-
13578 fs/proc/array.c | 20 +
13579 fs/proc/base.c | 4 +-
13580 fs/proc/kcore.c | 34 +-
13581 fs/proc/meminfo.c | 2 +-
13582 fs/proc/nommu.c | 2 +-
13583 fs/proc/proc_sysctl.c | 26 +-
13584 fs/proc/task_mmu.c | 39 +-
13585 fs/proc/task_nommu.c | 4 +-
13586 fs/proc/vmcore.c | 16 +-
13587 fs/qnx6/qnx6.h | 4 +-
13588 fs/quota/netlink.c | 4 +-
13589 fs/read_write.c | 2 +-
13590 fs/reiserfs/do_balan.c | 2 +-
13591 fs/reiserfs/procfs.c | 2 +-
13592 fs/reiserfs/reiserfs.h | 4 +-
13593 fs/seq_file.c | 4 +-
13594 fs/splice.c | 43 +-
13595 fs/squashfs/xattr.c | 12 +-
13596 fs/sysv/sysv.h | 2 +-
13597 fs/tracefs/inode.c | 8 +-
13598 fs/udf/misc.c | 2 +-
13599 fs/ufs/swab.h | 4 +-
13600 fs/userfaultfd.c | 2 +-
13601 fs/xattr.c | 21 +
13602 fs/xfs/libxfs/xfs_bmap.c | 2 +-
13603 fs/xfs/xfs_dir2_readdir.c | 7 +-
13604 fs/xfs/xfs_ioctl.c | 2 +-
13605 fs/xfs/xfs_linux.h | 4 +-
13606 include/asm-generic/4level-fixup.h | 2 +
13607 include/asm-generic/atomic-long.h | 156 +-
13608 include/asm-generic/atomic64.h | 12 +
13609 include/asm-generic/bitops/__fls.h | 2 +-
13610 include/asm-generic/bitops/fls.h | 2 +-
13611 include/asm-generic/bitops/fls64.h | 4 +-
13612 include/asm-generic/bug.h | 6 +-
13613 include/asm-generic/cache.h | 4 +-
13614 include/asm-generic/emergency-restart.h | 2 +-
13615 include/asm-generic/kmap_types.h | 4 +-
13616 include/asm-generic/local.h | 13 +
13617 include/asm-generic/pgtable-nopmd.h | 18 +-
13618 include/asm-generic/pgtable-nopud.h | 15 +-
13619 include/asm-generic/pgtable.h | 16 +
13620 include/asm-generic/sections.h | 1 +
13621 include/asm-generic/uaccess.h | 16 +
13622 include/asm-generic/vmlinux.lds.h | 15 +-
13623 include/crypto/algapi.h | 2 +-
13624 include/drm/drmP.h | 16 +-
13625 include/drm/drm_crtc_helper.h | 2 +-
13626 include/drm/drm_mm.h | 2 +-
13627 include/drm/i915_pciids.h | 2 +-
13628 include/drm/intel-gtt.h | 4 +-
13629 include/drm/ttm/ttm_memory.h | 2 +-
13630 include/drm/ttm/ttm_page_alloc.h | 1 +
13631 include/keys/asymmetric-subtype.h | 2 +-
13632 include/linux/atmdev.h | 4 +-
13633 include/linux/atomic.h | 17 +-
13634 include/linux/audit.h | 2 +-
13635 include/linux/average.h | 2 +-
13636 include/linux/binfmts.h | 3 +-
13637 include/linux/bitmap.h | 2 +-
13638 include/linux/bitops.h | 8 +-
13639 include/linux/blkdev.h | 2 +-
13640 include/linux/blktrace_api.h | 2 +-
13641 include/linux/cache.h | 8 +
13642 include/linux/cdrom.h | 1 -
13643 include/linux/cleancache.h | 2 +-
13644 include/linux/clk-provider.h | 1 +
13645 include/linux/compat.h | 6 +-
13646 include/linux/compiler-gcc.h | 28 +-
13647 include/linux/compiler.h | 157 +-
13648 include/linux/configfs.h | 2 +-
13649 include/linux/cpufreq.h | 3 +-
13650 include/linux/cpuidle.h | 5 +-
13651 include/linux/cpumask.h | 14 +-
13652 include/linux/crypto.h | 4 +-
13653 include/linux/ctype.h | 2 +-
13654 include/linux/dcache.h | 4 +-
13655 include/linux/decompress/mm.h | 2 +-
13656 include/linux/devfreq.h | 2 +-
13657 include/linux/device.h | 7 +-
13658 include/linux/dma-mapping.h | 2 +-
13659 include/linux/efi.h | 1 +
13660 include/linux/elf.h | 2 +
13661 include/linux/err.h | 4 +-
13662 include/linux/extcon.h | 2 +-
13663 include/linux/fb.h | 3 +-
13664 include/linux/fdtable.h | 2 +-
13665 include/linux/fs.h | 5 +-
13666 include/linux/fs_struct.h | 2 +-
13667 include/linux/fscache-cache.h | 2 +-
13668 include/linux/fscache.h | 2 +-
13669 include/linux/fsnotify.h | 2 +-
13670 include/linux/genhd.h | 4 +-
13671 include/linux/genl_magic_func.h | 2 +-
13672 include/linux/gfp.h | 12 +-
13673 include/linux/highmem.h | 12 +
13674 include/linux/hwmon-sysfs.h | 6 +-
13675 include/linux/i2c.h | 1 +
13676 include/linux/if_pppox.h | 2 +-
13677 include/linux/init.h | 12 +-
13678 include/linux/init_task.h | 7 +
13679 include/linux/interrupt.h | 6 +-
13680 include/linux/iommu.h | 2 +-
13681 include/linux/ioport.h | 2 +-
13682 include/linux/ipc.h | 2 +-
13683 include/linux/irq.h | 5 +-
13684 include/linux/irqdesc.h | 2 +-
13685 include/linux/irqdomain.h | 3 +
13686 include/linux/jiffies.h | 16 +-
13687 include/linux/key-type.h | 2 +-
13688 include/linux/kgdb.h | 6 +-
13689 include/linux/kmemleak.h | 4 +-
13690 include/linux/kobject.h | 3 +-
13691 include/linux/kobject_ns.h | 2 +-
13692 include/linux/kref.h | 2 +-
13693 include/linux/libata.h | 2 +-
13694 include/linux/linkage.h | 1 +
13695 include/linux/list.h | 15 +
13696 include/linux/lockref.h | 26 +-
13697 include/linux/math64.h | 10 +-
13698 include/linux/mempolicy.h | 7 +
13699 include/linux/mm.h | 102 +-
13700 include/linux/mm_types.h | 20 +
13701 include/linux/mmiotrace.h | 4 +-
13702 include/linux/mmzone.h | 2 +-
13703 include/linux/mod_devicetable.h | 4 +-
13704 include/linux/module.h | 69 +-
13705 include/linux/moduleloader.h | 16 +
13706 include/linux/moduleparam.h | 4 +-
13707 include/linux/net.h | 2 +-
13708 include/linux/netdevice.h | 7 +-
13709 include/linux/netfilter.h | 2 +-
13710 include/linux/netfilter/nfnetlink.h | 2 +-
13711 include/linux/nls.h | 4 +-
13712 include/linux/notifier.h | 3 +-
13713 include/linux/oprofile.h | 4 +-
13714 include/linux/padata.h | 2 +-
13715 include/linux/pci_hotplug.h | 3 +-
13716 include/linux/percpu.h | 2 +-
13717 include/linux/perf_event.h | 12 +-
13718 include/linux/pipe_fs_i.h | 8 +-
13719 include/linux/pm.h | 1 +
13720 include/linux/pm_domain.h | 4 +-
13721 include/linux/pm_runtime.h | 2 +-
13722 include/linux/pnp.h | 2 +-
13723 include/linux/poison.h | 4 +-
13724 include/linux/power/smartreflex.h | 2 +-
13725 include/linux/ppp-comp.h | 2 +-
13726 include/linux/preempt.h | 21 +
13727 include/linux/proc_ns.h | 2 +-
13728 include/linux/psci.h | 2 +-
13729 include/linux/quota.h | 2 +-
13730 include/linux/random.h | 19 +-
13731 include/linux/rculist.h | 16 +
13732 include/linux/reboot.h | 14 +-
13733 include/linux/regset.h | 3 +-
13734 include/linux/relay.h | 2 +-
13735 include/linux/rio.h | 2 +-
13736 include/linux/rmap.h | 4 +-
13737 include/linux/sched.h | 72 +-
13738 include/linux/sched/sysctl.h | 1 +
13739 include/linux/semaphore.h | 2 +-
13740 include/linux/seq_file.h | 1 +
13741 include/linux/signal.h | 2 +-
13742 include/linux/skbuff.h | 12 +-
13743 include/linux/slab.h | 47 +-
13744 include/linux/slab_def.h | 14 +-
13745 include/linux/slub_def.h | 2 +-
13746 include/linux/smp.h | 2 +
13747 include/linux/sock_diag.h | 2 +-
13748 include/linux/sonet.h | 2 +-
13749 include/linux/sunrpc/addr.h | 8 +-
13750 include/linux/sunrpc/clnt.h | 2 +-
13751 include/linux/sunrpc/svc.h | 2 +-
13752 include/linux/sunrpc/svc_rdma.h | 18 +-
13753 include/linux/sunrpc/svcauth.h | 2 +-
13754 include/linux/swapops.h | 10 +-
13755 include/linux/swiotlb.h | 3 +-
13756 include/linux/syscalls.h | 21 +-
13757 include/linux/syscore_ops.h | 2 +-
13758 include/linux/sysctl.h | 3 +-
13759 include/linux/sysfs.h | 9 +-
13760 include/linux/sysrq.h | 3 +-
13761 include/linux/tcp.h | 14 +-
13762 include/linux/thread_info.h | 7 +
13763 include/linux/tty.h | 4 +-
13764 include/linux/tty_driver.h | 2 +-
13765 include/linux/tty_ldisc.h | 2 +-
13766 include/linux/types.h | 16 +
13767 include/linux/uaccess.h | 6 +-
13768 include/linux/uio_driver.h | 2 +-
13769 include/linux/unaligned/access_ok.h | 24 +-
13770 include/linux/usb.h | 12 +-
13771 include/linux/usb/hcd.h | 1 +
13772 include/linux/usb/renesas_usbhs.h | 2 +-
13773 include/linux/vermagic.h | 21 +-
13774 include/linux/vga_switcheroo.h | 8 +-
13775 include/linux/vmalloc.h | 7 +-
13776 include/linux/vmstat.h | 24 +-
13777 include/linux/xattr.h | 5 +-
13778 include/linux/zlib.h | 3 +-
13779 include/media/v4l2-dev.h | 2 +-
13780 include/media/v4l2-device.h | 2 +-
13781 include/net/9p/transport.h | 2 +-
13782 include/net/bluetooth/l2cap.h | 2 +-
13783 include/net/bonding.h | 2 +-
13784 include/net/caif/cfctrl.h | 6 +-
13785 include/net/flow.h | 2 +-
13786 include/net/genetlink.h | 2 +-
13787 include/net/gro_cells.h | 2 +-
13788 include/net/inet_connection_sock.h | 2 +-
13789 include/net/inet_sock.h | 2 +-
13790 include/net/inetpeer.h | 2 +-
13791 include/net/ip_fib.h | 2 +-
13792 include/net/ip_vs.h | 8 +-
13793 include/net/ipv6.h | 2 +-
13794 include/net/irda/ircomm_tty.h | 1 +
13795 include/net/iucv/af_iucv.h | 2 +-
13796 include/net/llc_c_ac.h | 2 +-
13797 include/net/llc_c_ev.h | 4 +-
13798 include/net/llc_c_st.h | 2 +-
13799 include/net/llc_s_ac.h | 2 +-
13800 include/net/llc_s_st.h | 2 +-
13801 include/net/mac80211.h | 4 +-
13802 include/net/neighbour.h | 2 +-
13803 include/net/net_namespace.h | 18 +-
13804 include/net/netlink.h | 2 +-
13805 include/net/netns/conntrack.h | 6 +-
13806 include/net/netns/ipv4.h | 4 +-
13807 include/net/netns/ipv6.h | 4 +-
13808 include/net/netns/xfrm.h | 2 +-
13809 include/net/ping.h | 2 +-
13810 include/net/protocol.h | 4 +-
13811 include/net/rtnetlink.h | 2 +-
13812 include/net/sctp/checksum.h | 4 +-
13813 include/net/sctp/sm.h | 4 +-
13814 include/net/sctp/structs.h | 2 +-
13815 include/net/sock.h | 12 +-
13816 include/net/tcp.h | 8 +-
13817 include/net/xfrm.h | 13 +-
13818 include/rdma/iw_cm.h | 2 +-
13819 include/scsi/libfc.h | 3 +-
13820 include/scsi/scsi_device.h | 6 +-
13821 include/scsi/scsi_driver.h | 2 +-
13822 include/scsi/scsi_transport_fc.h | 3 +-
13823 include/scsi/sg.h | 2 +-
13824 include/sound/compress_driver.h | 2 +-
13825 include/sound/soc.h | 4 +-
13826 include/trace/events/irq.h | 4 +-
13827 include/uapi/linux/a.out.h | 8 +
13828 include/uapi/linux/bcache.h | 5 +-
13829 include/uapi/linux/byteorder/little_endian.h | 28 +-
13830 include/uapi/linux/connector.h | 2 +-
13831 include/uapi/linux/elf.h | 28 +
13832 include/uapi/linux/screen_info.h | 3 +-
13833 include/uapi/linux/swab.h | 6 +-
13834 include/uapi/linux/xattr.h | 4 +
13835 include/video/udlfb.h | 8 +-
13836 include/video/uvesafb.h | 1 +
13837 init/Kconfig | 2 +-
13838 init/Makefile | 3 +
13839 init/do_mounts.c | 14 +-
13840 init/do_mounts.h | 8 +-
13841 init/do_mounts_initrd.c | 30 +-
13842 init/do_mounts_md.c | 6 +-
13843 init/init_task.c | 4 +
13844 init/initramfs.c | 38 +-
13845 init/main.c | 30 +-
13846 ipc/compat.c | 4 +-
13847 ipc/ipc_sysctl.c | 8 +-
13848 ipc/mq_sysctl.c | 4 +-
13849 ipc/sem.c | 4 +-
13850 ipc/shm.c | 6 +
13851 kernel/audit.c | 8 +-
13852 kernel/auditsc.c | 4 +-
13853 kernel/bpf/core.c | 7 +-
13854 kernel/capability.c | 3 +
13855 kernel/compat.c | 38 +-
13856 kernel/debug/debug_core.c | 16 +-
13857 kernel/debug/kdb/kdb_main.c | 4 +-
13858 kernel/events/core.c | 26 +-
13859 kernel/events/internal.h | 10 +-
13860 kernel/events/uprobes.c | 2 +-
13861 kernel/exit.c | 2 +-
13862 kernel/fork.c | 167 +-
13863 kernel/futex.c | 11 +-
13864 kernel/futex_compat.c | 2 +-
13865 kernel/gcov/base.c | 7 +-
13866 kernel/irq/manage.c | 2 +-
13867 kernel/irq/msi.c | 19 +-
13868 kernel/irq/spurious.c | 2 +-
13869 kernel/jump_label.c | 5 +
13870 kernel/kallsyms.c | 37 +-
13871 kernel/kexec.c | 3 +-
13872 kernel/kmod.c | 8 +-
13873 kernel/kprobes.c | 4 +-
13874 kernel/ksysfs.c | 2 +-
13875 kernel/locking/lockdep.c | 7 +-
13876 kernel/locking/mutex-debug.c | 12 +-
13877 kernel/locking/mutex-debug.h | 4 +-
13878 kernel/locking/mutex.c | 6 +-
13879 kernel/module.c | 422 +-
13880 kernel/notifier.c | 17 +-
13881 kernel/padata.c | 4 +-
13882 kernel/panic.c | 5 +-
13883 kernel/pid.c | 2 +-
13884 kernel/pid_namespace.c | 2 +-
13885 kernel/power/process.c | 12 +-
13886 kernel/profile.c | 14 +-
13887 kernel/ptrace.c | 8 +-
13888 kernel/rcu/rcutorture.c | 60 +-
13889 kernel/rcu/tiny.c | 4 +-
13890 kernel/rcu/tree.c | 44 +-
13891 kernel/rcu/tree.h | 14 +-
13892 kernel/rcu/tree_plugin.h | 14 +-
13893 kernel/rcu/tree_trace.c | 12 +-
13894 kernel/sched/auto_group.c | 4 +-
13895 kernel/sched/core.c | 45 +-
13896 kernel/sched/fair.c | 2 +-
13897 kernel/sched/sched.h | 2 +-
13898 kernel/signal.c | 12 +-
13899 kernel/smpboot.c | 4 +-
13900 kernel/softirq.c | 12 +-
13901 kernel/sys.c | 10 +-
13902 kernel/sysctl.c | 34 +-
13903 kernel/time/alarmtimer.c | 2 +-
13904 kernel/time/posix-cpu-timers.c | 4 +-
13905 kernel/time/posix-timers.c | 24 +-
13906 kernel/time/timer.c | 2 +-
13907 kernel/time/timer_stats.c | 10 +-
13908 kernel/trace/blktrace.c | 6 +-
13909 kernel/trace/ftrace.c | 15 +-
13910 kernel/trace/ring_buffer.c | 96 +-
13911 kernel/trace/trace.c | 2 +-
13912 kernel/trace/trace.h | 2 +-
13913 kernel/trace/trace_clock.c | 4 +-
13914 kernel/trace/trace_events.c | 1 -
13915 kernel/trace/trace_functions_graph.c | 4 +-
13916 kernel/trace/trace_mmiotrace.c | 8 +-
13917 kernel/trace/trace_output.c | 10 +-
13918 kernel/trace/trace_seq.c | 2 +-
13919 kernel/trace/trace_stack.c | 2 +-
13920 kernel/user_namespace.c | 2 +-
13921 kernel/utsname_sysctl.c | 2 +-
13922 kernel/watchdog.c | 2 +-
13923 kernel/workqueue.c | 2 +-
13924 lib/Kconfig.debug | 8 +-
13925 lib/Makefile | 2 +-
13926 lib/bitmap.c | 8 +-
13927 lib/bug.c | 2 +
13928 lib/debugobjects.c | 2 +-
13929 lib/decompress_bunzip2.c | 3 +-
13930 lib/decompress_unlzma.c | 4 +-
13931 lib/div64.c | 4 +-
13932 lib/dma-debug.c | 4 +-
13933 lib/inflate.c | 2 +-
13934 lib/ioremap.c | 4 +-
13935 lib/kobject.c | 4 +-
13936 lib/list_debug.c | 126 +-
13937 lib/lockref.c | 44 +-
13938 lib/percpu-refcount.c | 2 +-
13939 lib/radix-tree.c | 2 +-
13940 lib/random32.c | 2 +-
13941 lib/show_mem.c | 2 +-
13942 lib/strncpy_from_user.c | 2 +-
13943 lib/strnlen_user.c | 2 +-
13944 lib/swiotlb.c | 2 +-
13945 lib/usercopy.c | 6 +
13946 lib/vsprintf.c | 12 +-
13947 mm/Kconfig | 6 +-
13948 mm/backing-dev.c | 4 +-
13949 mm/debug.c | 3 +
13950 mm/filemap.c | 2 +-
13951 mm/gup.c | 13 +-
13952 mm/highmem.c | 6 +-
13953 mm/hugetlb.c | 70 +-
13954 mm/internal.h | 1 +
13955 mm/maccess.c | 4 +-
13956 mm/madvise.c | 37 +
13957 mm/memory-failure.c | 6 +-
13958 mm/memory.c | 424 +-
13959 mm/mempolicy.c | 25 +
13960 mm/mlock.c | 15 +-
13961 mm/mm_init.c | 2 +-
13962 mm/mmap.c | 582 +-
13963 mm/mprotect.c | 137 +-
13964 mm/mremap.c | 39 +-
13965 mm/nommu.c | 21 +-
13966 mm/page-writeback.c | 2 +-
13967 mm/page_alloc.c | 49 +-
13968 mm/percpu.c | 2 +-
13969 mm/process_vm_access.c | 14 +-
13970 mm/rmap.c | 45 +-
13971 mm/shmem.c | 19 +-
13972 mm/slab.c | 109 +-
13973 mm/slab.h | 22 +-
13974 mm/slab_common.c | 86 +-
13975 mm/slob.c | 218 +-
13976 mm/slub.c | 102 +-
13977 mm/sparse-vmemmap.c | 4 +-
13978 mm/sparse.c | 2 +-
13979 mm/swap.c | 2 +
13980 mm/swapfile.c | 12 +-
13981 mm/util.c | 6 +
13982 mm/vmalloc.c | 114 +-
13983 mm/vmstat.c | 12 +-
13984 net/8021q/vlan.c | 5 +-
13985 net/8021q/vlan_netlink.c | 2 +-
13986 net/9p/mod.c | 4 +-
13987 net/9p/trans_fd.c | 2 +-
13988 net/atm/atm_misc.c | 8 +-
13989 net/atm/lec.h | 2 +-
13990 net/atm/proc.c | 6 +-
13991 net/atm/resources.c | 4 +-
13992 net/ax25/sysctl_net_ax25.c | 2 +-
13993 net/batman-adv/bat_iv_ogm.c | 8 +-
13994 net/batman-adv/fragmentation.c | 2 +-
13995 net/batman-adv/soft-interface.c | 8 +-
13996 net/batman-adv/types.h | 6 +-
13997 net/bluetooth/hci_sock.c | 2 +-
13998 net/bluetooth/l2cap_core.c | 6 +-
13999 net/bluetooth/l2cap_sock.c | 12 +-
14000 net/bluetooth/rfcomm/sock.c | 4 +-
14001 net/bluetooth/rfcomm/tty.c | 4 +-
14002 net/bridge/br_netlink.c | 2 +-
14003 net/bridge/netfilter/ebtables.c | 6 +-
14004 net/caif/cfctrl.c | 11 +-
14005 net/caif/chnl_net.c | 2 +-
14006 net/can/af_can.c | 2 +-
14007 net/can/gw.c | 6 +-
14008 net/ceph/messenger.c | 4 +-
14009 net/compat.c | 24 +-
14010 net/core/datagram.c | 2 +-
14011 net/core/dev.c | 16 +-
14012 net/core/filter.c | 2 +-
14013 net/core/flow.c | 6 +-
14014 net/core/neighbour.c | 4 +-
14015 net/core/net-sysfs.c | 2 +-
14016 net/core/net_namespace.c | 8 +-
14017 net/core/netpoll.c | 4 +-
14018 net/core/rtnetlink.c | 15 +-
14019 net/core/scm.c | 14 +-
14020 net/core/skbuff.c | 8 +-
14021 net/core/sock.c | 28 +-
14022 net/core/sock_diag.c | 15 +-
14023 net/core/sysctl_net_core.c | 22 +-
14024 net/decnet/af_decnet.c | 1 +
14025 net/decnet/sysctl_net_decnet.c | 4 +-
14026 net/dsa/dsa.c | 2 +-
14027 net/hsr/hsr_netlink.c | 2 +-
14028 net/ieee802154/6lowpan/core.c | 2 +-
14029 net/ieee802154/6lowpan/reassembly.c | 14 +-
14030 net/ipv4/af_inet.c | 2 +-
14031 net/ipv4/devinet.c | 18 +-
14032 net/ipv4/fib_frontend.c | 6 +-
14033 net/ipv4/fib_semantics.c | 2 +-
14034 net/ipv4/inet_connection_sock.c | 4 +-
14035 net/ipv4/inet_timewait_sock.c | 2 +-
14036 net/ipv4/inetpeer.c | 2 +-
14037 net/ipv4/ip_fragment.c | 15 +-
14038 net/ipv4/ip_gre.c | 6 +-
14039 net/ipv4/ip_sockglue.c | 2 +-
14040 net/ipv4/ip_vti.c | 4 +-
14041 net/ipv4/ipconfig.c | 6 +-
14042 net/ipv4/ipip.c | 4 +-
14043 net/ipv4/netfilter/arp_tables.c | 12 +-
14044 net/ipv4/netfilter/ip_tables.c | 12 +-
14045 net/ipv4/ping.c | 14 +-
14046 net/ipv4/raw.c | 14 +-
14047 net/ipv4/route.c | 32 +-
14048 net/ipv4/sysctl_net_ipv4.c | 22 +-
14049 net/ipv4/tcp_input.c | 6 +-
14050 net/ipv4/tcp_probe.c | 2 +-
14051 net/ipv4/udp.c | 10 +-
14052 net/ipv4/xfrm4_policy.c | 18 +-
14053 net/ipv6/addrconf.c | 18 +-
14054 net/ipv6/af_inet6.c | 2 +-
14055 net/ipv6/datagram.c | 2 +-
14056 net/ipv6/icmp.c | 2 +-
14057 net/ipv6/ip6_fib.c | 4 +-
14058 net/ipv6/ip6_gre.c | 10 +-
14059 net/ipv6/ip6_tunnel.c | 4 +-
14060 net/ipv6/ip6_vti.c | 4 +-
14061 net/ipv6/ipv6_sockglue.c | 2 +-
14062 net/ipv6/netfilter/ip6_tables.c | 12 +-
14063 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
14064 net/ipv6/ping.c | 33 +-
14065 net/ipv6/raw.c | 17 +-
14066 net/ipv6/reassembly.c | 13 +-
14067 net/ipv6/route.c | 2 +-
14068 net/ipv6/sit.c | 4 +-
14069 net/ipv6/sysctl_net_ipv6.c | 2 +-
14070 net/ipv6/udp.c | 6 +-
14071 net/ipv6/xfrm6_policy.c | 17 +-
14072 net/irda/ircomm/ircomm_tty.c | 18 +-
14073 net/iucv/af_iucv.c | 4 +-
14074 net/iucv/iucv.c | 2 +-
14075 net/key/af_key.c | 4 +-
14076 net/l2tp/l2tp_eth.c | 38 +-
14077 net/l2tp/l2tp_ip.c | 2 +-
14078 net/l2tp/l2tp_ip6.c | 2 +-
14079 net/mac80211/cfg.c | 8 +-
14080 net/mac80211/ieee80211_i.h | 3 +-
14081 net/mac80211/iface.c | 20 +-
14082 net/mac80211/main.c | 2 +-
14083 net/mac80211/pm.c | 4 +-
14084 net/mac80211/rate.c | 2 +-
14085 net/mac80211/sta_info.c | 2 +-
14086 net/mac80211/util.c | 8 +-
14087 net/mpls/af_mpls.c | 6 +-
14088 net/netfilter/ipset/ip_set_core.c | 2 +-
14089 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
14090 net/netfilter/ipvs/ip_vs_core.c | 4 +-
14091 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
14092 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
14093 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
14094 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
14095 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
14096 net/netfilter/nf_conntrack_acct.c | 2 +-
14097 net/netfilter/nf_conntrack_ecache.c | 2 +-
14098 net/netfilter/nf_conntrack_helper.c | 2 +-
14099 net/netfilter/nf_conntrack_proto.c | 2 +-
14100 net/netfilter/nf_conntrack_standalone.c | 2 +-
14101 net/netfilter/nf_conntrack_timestamp.c | 2 +-
14102 net/netfilter/nf_log.c | 10 +-
14103 net/netfilter/nf_sockopt.c | 4 +-
14104 net/netfilter/nfnetlink_log.c | 4 +-
14105 net/netfilter/nft_compat.c | 9 +-
14106 net/netfilter/xt_statistic.c | 8 +-
14107 net/netlink/af_netlink.c | 4 +-
14108 net/openvswitch/vport-internal_dev.c | 2 +-
14109 net/packet/af_packet.c | 8 +-
14110 net/phonet/pep.c | 6 +-
14111 net/phonet/socket.c | 2 +-
14112 net/phonet/sysctl.c | 2 +-
14113 net/rds/cong.c | 6 +-
14114 net/rds/ib.h | 2 +-
14115 net/rds/ib_cm.c | 2 +-
14116 net/rds/ib_recv.c | 4 +-
14117 net/rds/iw.h | 2 +-
14118 net/rds/iw_cm.c | 2 +-
14119 net/rds/iw_recv.c | 4 +-
14120 net/rds/rds.h | 2 +-
14121 net/rds/tcp.c | 2 +-
14122 net/rds/tcp_send.c | 2 +-
14123 net/rxrpc/af_rxrpc.c | 2 +-
14124 net/rxrpc/ar-ack.c | 14 +-
14125 net/rxrpc/ar-call.c | 2 +-
14126 net/rxrpc/ar-connection.c | 2 +-
14127 net/rxrpc/ar-connevent.c | 2 +-
14128 net/rxrpc/ar-input.c | 4 +-
14129 net/rxrpc/ar-internal.h | 8 +-
14130 net/rxrpc/ar-local.c | 2 +-
14131 net/rxrpc/ar-output.c | 4 +-
14132 net/rxrpc/ar-peer.c | 2 +-
14133 net/rxrpc/ar-proc.c | 4 +-
14134 net/rxrpc/ar-transport.c | 2 +-
14135 net/rxrpc/rxkad.c | 4 +-
14136 net/sched/sch_generic.c | 4 +-
14137 net/sctp/ipv6.c | 6 +-
14138 net/sctp/protocol.c | 10 +-
14139 net/sctp/sm_sideeffect.c | 2 +-
14140 net/sctp/socket.c | 21 +-
14141 net/sctp/sysctl.c | 10 +-
14142 net/socket.c | 18 +-
14143 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
14144 net/sunrpc/clnt.c | 4 +-
14145 net/sunrpc/sched.c | 4 +-
14146 net/sunrpc/svc.c | 4 +-
14147 net/sunrpc/svcauth_unix.c | 2 +-
14148 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
14149 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
14150 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
14151 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
14152 net/tipc/netlink_compat.c | 12 +-
14153 net/tipc/subscr.c | 2 +-
14154 net/unix/af_unix.c | 7 +-
14155 net/unix/sysctl_net_unix.c | 2 +-
14156 net/wireless/wext-core.c | 19 +-
14157 net/xfrm/xfrm_policy.c | 16 +-
14158 net/xfrm/xfrm_state.c | 33 +-
14159 net/xfrm/xfrm_sysctl.c | 2 +-
14160 scripts/Kbuild.include | 2 +-
14161 scripts/Makefile.build | 2 +-
14162 scripts/Makefile.clean | 3 +-
14163 scripts/Makefile.host | 69 +-
14164 scripts/basic/fixdep.c | 12 +-
14165 scripts/dtc/checks.c | 14 +-
14166 scripts/dtc/data.c | 6 +-
14167 scripts/dtc/flattree.c | 8 +-
14168 scripts/dtc/livetree.c | 4 +-
14169 scripts/gcc-plugin.sh | 51 +
14170 scripts/headers_install.sh | 1 +
14171 scripts/kallsyms.c | 4 +-
14172 scripts/kconfig/lkc.h | 5 +-
14173 scripts/kconfig/menu.c | 2 +-
14174 scripts/kconfig/symbol.c | 6 +-
14175 scripts/link-vmlinux.sh | 2 +-
14176 scripts/mod/file2alias.c | 14 +-
14177 scripts/mod/modpost.c | 25 +-
14178 scripts/mod/modpost.h | 6 +-
14179 scripts/mod/sumversion.c | 2 +-
14180 scripts/module-common.lds | 4 +
14181 scripts/package/builddeb | 1 +
14182 scripts/pnmtologo.c | 6 +-
14183 scripts/sortextable.h | 6 +-
14184 scripts/tags.sh | 2 +-
14185 security/Kconfig | 692 +-
14186 security/integrity/ima/ima.h | 4 +-
14187 security/integrity/ima/ima_api.c | 2 +-
14188 security/integrity/ima/ima_fs.c | 4 +-
14189 security/integrity/ima/ima_queue.c | 2 +-
14190 security/keys/key.c | 18 +-
14191 security/selinux/avc.c | 6 +-
14192 security/selinux/include/xfrm.h | 2 +-
14193 security/yama/yama_lsm.c | 2 +-
14194 sound/aoa/codecs/onyx.c | 7 +-
14195 sound/aoa/codecs/onyx.h | 1 +
14196 sound/core/oss/pcm_oss.c | 18 +-
14197 sound/core/pcm_compat.c | 2 +-
14198 sound/core/pcm_native.c | 4 +-
14199 sound/core/sound.c | 2 +-
14200 sound/drivers/mts64.c | 14 +-
14201 sound/drivers/opl4/opl4_lib.c | 2 +-
14202 sound/drivers/portman2x4.c | 3 +-
14203 sound/firewire/amdtp.c | 4 +-
14204 sound/firewire/amdtp.h | 4 +-
14205 sound/firewire/isight.c | 10 +-
14206 sound/firewire/scs1x.c | 8 +-
14207 sound/oss/sb_audio.c | 2 +-
14208 sound/oss/swarm_cs4297a.c | 6 +-
14209 sound/pci/hda/hda_codec.c | 2 +-
14210 sound/pci/ymfpci/ymfpci.h | 2 +-
14211 sound/pci/ymfpci/ymfpci_main.c | 12 +-
14212 sound/soc/codecs/sti-sas.c | 10 +-
14213 sound/soc/soc-ac97.c | 6 +-
14214 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
14215 tools/gcc/Makefile | 42 +
14216 tools/gcc/checker_plugin.c | 150 +
14217 tools/gcc/colorize_plugin.c | 215 +
14218 tools/gcc/constify_plugin.c | 571 +
14219 tools/gcc/gcc-common.h | 812 +
14220 tools/gcc/initify_plugin.c | 552 +
14221 tools/gcc/kallocstat_plugin.c | 188 +
14222 tools/gcc/kernexec_plugin.c | 549 +
14223 tools/gcc/latent_entropy_plugin.c | 470 +
14224 tools/gcc/size_overflow_plugin/.gitignore | 2 +
14225 tools/gcc/size_overflow_plugin/Makefile | 28 +
14226 .../disable_size_overflow_hash.data |12422 ++++++++++++
14227 .../generate_size_overflow_hash.sh | 103 +
14228 .../insert_size_overflow_asm.c | 416 +
14229 .../size_overflow_plugin/intentional_overflow.c | 1010 +
14230 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
14231 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
14232 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
14233 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
14234 .../size_overflow_hash_aux.data | 92 +
14235 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
14236 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
14237 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
14238 .../size_overflow_plugin_hash.c | 352 +
14239 .../size_overflow_plugin/size_overflow_transform.c | 749 +
14240 .../size_overflow_transform_core.c | 1010 +
14241 tools/gcc/stackleak_plugin.c | 436 +
14242 tools/gcc/structleak_plugin.c | 287 +
14243 tools/include/linux/compiler.h | 8 +
14244 tools/lib/api/Makefile | 2 +-
14245 tools/perf/util/include/asm/alternative-asm.h | 3 +
14246 tools/virtio/linux/uaccess.h | 2 +-
14247 virt/kvm/kvm_main.c | 42 +-
14248 1944 files changed, 66925 insertions(+), 8949 deletions(-)
14249 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
14250 Author: Matthew Wilcox <willy@linux.intel.com>
14251 Date: Tue Feb 2 16:57:52 2016 -0800
14252
14253 radix-tree: fix race in gang lookup
14254
14255 If the indirect_ptr bit is set on a slot, that indicates we need to redo
14256 the lookup. Introduce a new function radix_tree_iter_retry() which
14257 forces the loop to retry the lookup by setting 'slot' to NULL and
14258 turning the iterator back to point at the problematic entry.
14259
14260 This is a pretty rare problem to hit at the moment; the lookup has to
14261 race with a grow of the radix tree from a height of 0. The consequences
14262 of hitting this race are that gang lookup could return a pointer to a
14263 radix_tree_node instead of a pointer to whatever the user had inserted
14264 in the tree.
14265
14266 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
14267 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
14268 Cc: Hugh Dickins <hughd@google.com>
14269 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14270 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
14271 Cc: <stable@vger.kernel.org>
14272 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14273 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14274
14275 include/linux/radix-tree.h | 16 ++++++++++++++++
14276 lib/radix-tree.c | 12 ++++++++++--
14277 2 files changed, 26 insertions(+), 2 deletions(-)
14278
14279 commit bf628043b4589c910919a0f221ae7f42aa8cea93
14280 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14281 Date: Wed Feb 3 02:11:03 2016 +0100
14282
14283 unix: correctly track in-flight fds in sending process user_struct
14284
14285 The commit referenced in the Fixes tag incorrectly accounted the number
14286 of in-flight fds over a unix domain socket to the original opener
14287 of the file-descriptor. This allows another process to arbitrary
14288 deplete the original file-openers resource limit for the maximum of
14289 open files. Instead the sending processes and its struct cred should
14290 be credited.
14291
14292 To do so, we add a reference counted struct user_struct pointer to the
14293 scm_fp_list and use it to account for the number of inflight unix fds.
14294
14295 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
14296 Reported-by: David Herrmann <dh.herrmann@gmail.com>
14297 Cc: David Herrmann <dh.herrmann@gmail.com>
14298 Cc: Willy Tarreau <w@1wt.eu>
14299 Cc: Linus Torvalds <torvalds@linux-foundation.org>
14300 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14301 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14302 Signed-off-by: David S. Miller <davem@davemloft.net>
14303
14304 include/net/af_unix.h | 4 ++--
14305 include/net/scm.h | 1 +
14306 net/core/scm.c | 7 +++++++
14307 net/unix/af_unix.c | 4 ++--
14308 net/unix/garbage.c | 8 ++++----
14309 5 files changed, 16 insertions(+), 8 deletions(-)
14310
14311 commit e830db443ff78d70b7b63536e688d73907face0c
14312 Author: Mike Kravetz <mike.kravetz@oracle.com>
14313 Date: Fri Jan 15 16:57:37 2016 -0800
14314
14315 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
14316
14317 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
14318 argument end is of type pgoff_t. It was being converted to a vaddr
14319 offset and passed to unmap_hugepage_range. However, end was also being
14320 used as an argument to the vma_interval_tree_foreach controlling loop.
14321 In addition, the conversion of end to vaddr offset was incorrect.
14322
14323 hugetlb_vmtruncate_list is called as part of a file truncate or
14324 fallocate hole punch operation.
14325
14326 When truncating a hugetlbfs file, this bug could prevent some pages from
14327 being unmapped. This is possible if there are multiple vmas mapping the
14328 file, and there is a sufficiently sized hole between the mappings. The
14329 size of the hole between two vmas (A,B) must be such that the starting
14330 virtual address of B is greater than (ending virtual address of A <<
14331 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
14332 pages are not properly unmapped during truncate, the following BUG is
14333 hit:
14334
14335 kernel BUG at fs/hugetlbfs/inode.c:428!
14336
14337 In the fallocate hole punch case, this bug could prevent pages from
14338 being unmapped as in the truncate case. However, for hole punch the
14339 result is that unmapped pages will not be removed during the operation.
14340 For hole punch, it is also possible that more pages than desired will be
14341 unmapped. This unnecessary unmapping will cause page faults to
14342 reestablish the mappings on subsequent page access.
14343
14344 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
14345 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
14346 Cc: Hugh Dickins <hughd@google.com>
14347 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
14348 Cc: Davidlohr Bueso <dave@stgolabs.net>
14349 Cc: Dave Hansen <dave.hansen@linux.intel.com>
14350 Cc: <stable@vger.kernel.org> [4.3]
14351 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14352 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14353
14354 fs/hugetlbfs/inode.c | 19 +++++++++++--------
14355 1 files changed, 11 insertions(+), 8 deletions(-)
14356
14357 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
14358 Author: Takashi Iwai <tiwai@suse.de>
14359 Date: Thu Feb 4 17:06:13 2016 +0100
14360
14361 ALSA: timer: Fix leftover link at closing
14362
14363 In ALSA timer core, the active timer instance is managed in
14364 active_list linked list. Each element is added / removed dynamically
14365 at timer start, stop and in timer interrupt. The problem is that
14366 snd_timer_interrupt() has a thinko and leaves the element in
14367 active_list when it's the last opened element. This eventually leads
14368 to list corruption or use-after-free error.
14369
14370 This hasn't been revealed because we used to delete the list forcibly
14371 in snd_timer_stop() in the past. However, the recent fix avoids the
14372 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
14373 corruption due to double start or stop]), and this leak hits reality.
14374
14375 This patch fixes the link management in snd_timer_interrupt(). Now it
14376 simply unlinks no matter which stream is.
14377
14378 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
14379 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14380 Cc: <stable@vger.kernel.org>
14381 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14382
14383 sound/core/timer.c | 4 ++--
14384 1 files changed, 2 insertions(+), 2 deletions(-)
14385
14386 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
14387 Author: Konstantin Khlebnikov <koct9i@gmail.com>
14388 Date: Fri Feb 5 15:37:01 2016 -0800
14389
14390 radix-tree: fix oops after radix_tree_iter_retry
14391
14392 Helper radix_tree_iter_retry() resets next_index to the current index.
14393 In following radix_tree_next_slot current chunk size becomes zero. This
14394 isn't checked and it tries to dereference null pointer in slot.
14395
14396 Tagged iterator is fine because retry happens only at slot 0 where tag
14397 bitmask in iter->tags is filled with single bit.
14398
14399 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
14400 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
14401 Cc: Matthew Wilcox <willy@linux.intel.com>
14402 Cc: Hugh Dickins <hughd@google.com>
14403 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14404 Cc: Jeremiah Mahler <jmmahler@gmail.com>
14405 Cc: <stable@vger.kernel.org>
14406 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14407 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14408
14409 include/linux/radix-tree.h | 6 +++---
14410 1 files changed, 3 insertions(+), 3 deletions(-)
14411
14412 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
14413 Merge: 438be0b 256aeaf
14414 Author: Brad Spengler <spender@grsecurity.net>
14415 Date: Sun Feb 7 08:29:33 2016 -0500
14416
14417 Merge branch 'pax-test' into grsec-test
14418
14419 commit 256aeaf87c22de8edf1f03682a572c590ae07771
14420 Author: Brad Spengler <spender@grsecurity.net>
14421 Date: Sun Feb 7 08:29:09 2016 -0500
14422
14423 Update to pax-linux-4.3.5-test28.patch:
14424 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
14425 - spender fixed UDEREF on arm
14426
14427 arch/arm/Kconfig | 1 +
14428 arch/arm/include/asm/domain.h | 21 ++++++++-
14429 arch/arm/include/asm/futex.h | 9 ----
14430 arch/arm/include/asm/thread_info.h | 3 +
14431 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14432 arch/arm/kernel/entry-armv.S | 2 +-
14433 arch/arm/kernel/process.c | 2 +-
14434 arch/arm/mm/alignment.c | 8 ----
14435 arch/x86/mm/numa.c | 2 +-
14436 security/Kconfig | 1 -
14437 10 files changed, 60 insertions(+), 70 deletions(-)
14438
14439 commit 438be0bd112bd17942b2628c53054dc1007558a1
14440 Author: Brad Spengler <spender@grsecurity.net>
14441 Date: Sat Feb 6 19:50:31 2016 -0500
14442
14443 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
14444 ARM systems reported on the forums
14445
14446 arch/arm/Kconfig | 1 +
14447 arch/arm/include/asm/domain.h | 21 ++++++++-
14448 arch/arm/include/asm/futex.h | 9 ----
14449 arch/arm/include/asm/thread_info.h | 3 +
14450 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14451 arch/arm/kernel/entry-armv.S | 2 +-
14452 arch/arm/kernel/process.c | 2 +-
14453 arch/arm/mm/alignment.c | 8 ----
14454 security/Kconfig | 1 -
14455 9 files changed, 59 insertions(+), 69 deletions(-)
14456
14457 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
14458 Author: Brad Spengler <spender@grsecurity.net>
14459 Date: Sat Feb 6 11:21:53 2016 -0500
14460
14461 Fix another compiler warning
14462
14463 net/ipv4/tcp_input.c | 2 ++
14464 1 files changed, 2 insertions(+), 0 deletions(-)
14465
14466 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
14467 Author: Brad Spengler <spender@grsecurity.net>
14468 Date: Sat Feb 6 11:16:12 2016 -0500
14469
14470 Fix two compiler warnings
14471
14472 kernel/pid.c | 5 ++---
14473 kernel/ptrace.c | 3 ++-
14474 2 files changed, 4 insertions(+), 4 deletions(-)
14475
14476 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
14477 Author: Brad Spengler <spender@grsecurity.net>
14478 Date: Wed Feb 3 21:22:40 2016 -0500
14479
14480 Apply fix for integer truncation in NUMA init code, reported by
14481 x14sg1 on the forums:
14482 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
14483
14484 arch/x86/mm/numa.c | 2 +-
14485 1 files changed, 1 insertions(+), 1 deletions(-)
14486
14487 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
14488 Merge: a781740 016d0d8
14489 Author: Brad Spengler <spender@grsecurity.net>
14490 Date: Wed Feb 3 21:20:58 2016 -0500
14491
14492 Merge branch 'pax-test' into grsec-test
14493
14494 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
14495 Author: Brad Spengler <spender@grsecurity.net>
14496 Date: Wed Feb 3 21:20:10 2016 -0500
14497
14498 Update to pax-linux-4.3.5-test27.patch:
14499 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
14500 - restored padding in fpregs_state for storing AVX-512 state in the future
14501 - constified netlink_dump_control
14502 - added const version of debug_gimple_stmt for gcc plugins, by Emese
14503 - Emese fixed a bug in initify that could have initified too much
14504 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
14505
14506 arch/x86/include/asm/fpu/types.h | 1 +
14507 arch/x86/include/asm/mmu_context.h | 2 +-
14508 block/blk-cgroup.c | 18 ++--
14509 block/cfq-iosched.c | 4 +-
14510 crypto/crypto_user.c | 8 ++-
14511 drivers/acpi/apei/ghes.c | 6 +-
14512 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
14513 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
14514 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
14515 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
14516 drivers/infiniband/core/netlink.c | 5 +-
14517 drivers/infiniband/hw/cxgb4/device.c | 6 +-
14518 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
14519 drivers/md/bcache/alloc.c | 2 +-
14520 drivers/md/bcache/bcache.h | 10 +-
14521 drivers/md/bcache/btree.c | 2 +-
14522 drivers/md/bcache/io.c | 10 +-
14523 drivers/md/bcache/journal.c | 2 +-
14524 drivers/md/bcache/stats.c | 26 +++---
14525 drivers/md/bcache/stats.h | 16 ++--
14526 drivers/md/bcache/super.c | 2 +-
14527 drivers/md/bcache/sysfs.c | 20 +++---
14528 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
14529 drivers/md/dm-raid.c | 2 +-
14530 drivers/md/md.c | 6 +-
14531 drivers/md/md.h | 2 +-
14532 drivers/md/raid1.c | 2 +-
14533 drivers/md/raid10.c | 2 +-
14534 drivers/md/raid5.c | 4 +-
14535 drivers/media/pci/zoran/zoran.h | 1 -
14536 drivers/media/pci/zoran/zoran_driver.c | 3 -
14537 drivers/net/ethernet/sfc/selftest.c | 20 +++---
14538 drivers/net/irda/vlsi_ir.c | 18 ++--
14539 drivers/net/irda/vlsi_ir.h | 14 ++--
14540 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
14541 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
14542 drivers/net/wireless/ath/carl9170/main.c | 10 +-
14543 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
14544 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
14545 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
14546 drivers/scsi/hptiop.c | 2 -
14547 drivers/scsi/hptiop.h | 1 -
14548 drivers/scsi/ipr.c | 6 +-
14549 drivers/scsi/ipr.h | 2 +-
14550 drivers/scsi/qla2xxx/qla_target.c | 10 +-
14551 drivers/scsi/qla2xxx/qla_target.h | 2 +-
14552 fs/btrfs/ctree.c | 2 +-
14553 fs/btrfs/ctree.h | 4 +-
14554 fs/btrfs/delayed-ref.c | 4 +-
14555 fs/btrfs/disk-io.c | 4 +-
14556 fs/btrfs/file.c | 4 +-
14557 fs/btrfs/raid56.c | 32 ++++----
14558 fs/btrfs/tests/btrfs-tests.c | 2 +-
14559 fs/btrfs/transaction.c | 2 +-
14560 fs/btrfs/tree-log.c | 8 +-
14561 fs/btrfs/volumes.c | 14 ++--
14562 fs/btrfs/volumes.h | 22 +++---
14563 fs/jbd2/commit.c | 2 +-
14564 fs/jbd2/transaction.c | 4 +-
14565 fs/ocfs2/dlm/dlmcommon.h | 4 +-
14566 fs/ocfs2/dlm/dlmdebug.c | 10 +-
14567 fs/ocfs2/dlm/dlmdomain.c | 4 +-
14568 fs/ocfs2/dlm/dlmmaster.c | 4 +-
14569 include/acpi/ghes.h | 2 +-
14570 include/linux/blk-cgroup.h | 24 +++---
14571 include/linux/jbd2.h | 2 +-
14572 include/linux/netlink.h | 12 ++--
14573 include/net/cfg802154.h | 2 +-
14574 include/net/mac80211.h | 2 +-
14575 include/net/neighbour.h | 2 +-
14576 kernel/rcu/tree_plugin.h | 4 +-
14577 net/batman-adv/routing.c | 4 +-
14578 net/batman-adv/soft-interface.c | 2 +-
14579 net/batman-adv/translation-table.c | 14 ++--
14580 net/batman-adv/types.h | 2 +-
14581 net/core/neighbour.c | 14 ++--
14582 net/core/rtnetlink.c | 2 +-
14583 net/ipv4/arp.c | 2 +-
14584 net/ipv4/inet_diag.c | 4 +-
14585 net/ipv4/xfrm4_state.c | 4 +-
14586 net/ipv6/ndisc.c | 2 +-
14587 net/mac80211/cfg.c | 2 +-
14588 net/mac80211/debugfs_key.c | 2 +-
14589 net/mac80211/key.c | 4 +-
14590 net/mac80211/tx.c | 2 +-
14591 net/mac80211/wpa.c | 10 +-
14592 net/mac802154/iface.c | 4 +-
14593 net/netfilter/ipset/ip_set_core.c | 2 +-
14594 net/netfilter/nf_conntrack_netlink.c | 22 +++---
14595 net/netfilter/nf_tables_api.c | 13 ++--
14596 net/netfilter/nfnetlink_acct.c | 7 +-
14597 net/netfilter/nfnetlink_cthelper.c | 2 +-
14598 net/netfilter/nfnetlink_cttimeout.c | 2 +-
14599 net/netlink/af_netlink.c | 10 ++-
14600 net/netlink/diag.c | 2 +-
14601 net/netlink/genetlink.c | 14 ++--
14602 net/packet/af_packet.c | 18 ++--
14603 net/packet/diag.c | 2 +-
14604 net/packet/internal.h | 6 +-
14605 net/unix/diag.c | 2 +-
14606 net/xfrm/xfrm_user.c | 2 +-
14607 security/apparmor/include/policy.h | 2 +-
14608 security/apparmor/policy.c | 4 +-
14609 sound/core/seq/seq_clientmgr.c | 2 +-
14610 sound/core/seq/seq_fifo.c | 6 +-
14611 sound/core/seq/seq_fifo.h | 2 +-
14612 tools/gcc/gcc-common.h | 24 ++++--
14613 tools/gcc/initify_plugin.c | 7 +-
14614 tools/lib/api/Makefile | 2 +-
14615 109 files changed, 399 insertions(+), 391 deletions(-)
14616
14617 commit a7817402ac837b1aee07fac42537a02097055098
14618 Author: Matt Fleming <matt@codeblueprint.co.uk>
14619 Date: Fri Jan 29 11:36:10 2016 +0000
14620
14621 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
14622
14623 There are a couple of nasty truncation bugs lurking in the pageattr
14624 code that can be triggered when mapping EFI regions, e.g. when we pass
14625 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
14626 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
14627
14628 Viorel-Cătălin managed to trigger this bug on his Dell machine that
14629 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
14630 When calling populate_pud() the end of the region gets calculated
14631 incorrectly in the following buggy expression,
14632
14633 end = start + (cpa->numpages << PAGE_SHIFT);
14634
14635 And only 188416 pages are mapped. Next, populate_pud() gets invoked
14636 for a second time because of the loop in __change_page_attr_set_clr(),
14637 only this time no pages get mapped because shifting the remaining
14638 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
14639 loop in __change_page_attr_set_clr() spins forever because we fail to
14640 map progress.
14641
14642 Hitting this bug depends very much on the virtual address we pick to
14643 map the large region at and how many pages we map on the initial run
14644 through the loop. This explains why this issue was only recently hit
14645 with the introduction of commit
14646
14647 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
14648 entries bottom-up at runtime, instead of top-down")
14649
14650 It's interesting to note that safe uses of cpa->numpages do exist in
14651 the pageattr code. If instead of shifting ->numpages we multiply by
14652 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
14653 so the result is unsigned long.
14654
14655 To avoid surprises when users try to convert very large cpa->numpages
14656 values to addresses, change the data type from 'int' to 'unsigned
14657 long', thereby making it suitable for shifting by PAGE_SHIFT without
14658 any type casting.
14659
14660 The alternative would be to make liberal use of casting, but that is
14661 far more likely to cause problems in the future when someone adds more
14662 code and fails to cast properly; this bug was difficult enough to
14663 track down in the first place.
14664
14665 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
14666 Acked-by: Borislav Petkov <bp@alien8.de>
14667 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
14668 Cc: <stable@vger.kernel.org>
14669 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
14670 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
14671 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
14672 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
14673
14674 arch/x86/mm/pageattr.c | 4 ++--
14675 1 files changed, 2 insertions(+), 2 deletions(-)
14676
14677 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
14678 Author: Jan Beulich <JBeulich@suse.com>
14679 Date: Tue Jan 26 04:15:18 2016 -0700
14680
14681 x86/mm: Fix types used in pgprot cacheability flags translations
14682
14683 For PAE kernels "unsigned long" is not suitable to hold page protection
14684 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
14685 few W+X pages getting reported as insecure during boot (observed namely
14686 for the entire initrd range).
14687
14688 Fixes: 281d4078be ("x86: Make page cache mode a real type")
14689 Signed-off-by: Jan Beulich <jbeulich@suse.com>
14690 Reviewed-by: Juergen Gross <JGross@suse.com>
14691 Cc: stable@vger.kernel.org
14692 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
14693 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
14694
14695 arch/x86/include/asm/pgtable_types.h | 6 ++----
14696 1 files changed, 2 insertions(+), 4 deletions(-)
14697
14698 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
14699 Merge: 682d661 f74425b
14700 Author: Brad Spengler <spender@grsecurity.net>
14701 Date: Sun Jan 31 15:06:25 2016 -0500
14702
14703 Merge branch 'pax-test' into grsec-test
14704
14705 Conflicts:
14706 drivers/net/slip/slhc.c
14707 include/linux/sched.h
14708 net/unix/af_unix.c
14709 sound/core/timer.c
14710
14711 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
14712 Merge: d14af1f 849a2d3
14713 Author: Brad Spengler <spender@grsecurity.net>
14714 Date: Sun Jan 31 15:02:55 2016 -0500
14715
14716 Merge branch 'linux-4.3.y' into pax-test
14717
14718 Conflicts:
14719 arch/x86/include/asm/mmu_context.h
14720
14721 commit 682d6611d75542e351c973c8dd74a99d3966c073
14722 Author: Brad Spengler <spender@grsecurity.net>
14723 Date: Sat Jan 30 13:05:03 2016 -0500
14724
14725 Based on a report from Mathias Krause, fix up a number of additional instances
14726 of ulong overflow when passing in values to gr_learn_resource by saturating
14727 to ULONG_MAX
14728
14729 mm/mlock.c | 11 ++++++++---
14730 mm/mmap.c | 16 +++++++++++++---
14731 2 files changed, 21 insertions(+), 6 deletions(-)
14732
14733 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
14734 Author: Jann Horn <jann@thejh.net>
14735 Date: Sat Dec 26 06:00:48 2015 +0100
14736
14737 seccomp: always propagate NO_NEW_PRIVS on tsync
14738
14739 Before this patch, a process with some permissive seccomp filter
14740 that was applied by root without NO_NEW_PRIVS was able to add
14741 more filters to itself without setting NO_NEW_PRIVS by setting
14742 the new filter from a throwaway thread with NO_NEW_PRIVS.
14743
14744 Signed-off-by: Jann Horn <jann@thejh.net>
14745 Cc: stable@vger.kernel.org
14746 Signed-off-by: Kees Cook <keescook@chromium.org>
14747
14748 kernel/seccomp.c | 22 +++++++++++-----------
14749 1 files changed, 11 insertions(+), 11 deletions(-)
14750
14751 commit b85450498a3bbf269441c8963d7574bb3079c838
14752 Merge: 59c216f d14af1f
14753 Author: Brad Spengler <spender@grsecurity.net>
14754 Date: Fri Jan 29 20:54:13 2016 -0500
14755
14756 Merge branch 'pax-test' into grsec-test
14757
14758 commit d14af1f1dd66511f3f0674deee2b572972012b39
14759 Author: Brad Spengler <spender@grsecurity.net>
14760 Date: Fri Jan 29 20:53:51 2016 -0500
14761
14762 Update to pax-linux-4.3.4-test26.patch:
14763 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
14764
14765 fs/cifs/file.c | 2 +-
14766 fs/gfs2/file.c | 2 +-
14767 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
14768 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
14769 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
14770 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
14771 .../size_overflow_transform_core.c | 5 +
14772 7 files changed, 102 insertions(+), 15 deletions(-)
14773
14774 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
14775 Author: Brad Spengler <spender@grsecurity.net>
14776 Date: Wed Jan 27 17:57:21 2016 -0500
14777
14778 Fix a size_overflow report reported by Mathias Krause in our
14779 truncation of an loff_t to an unsigned long when being passed
14780 to gr_learn_resource() (as all resource checks are against unsigned long
14781 values)
14782
14783 fs/attr.c | 5 ++++-
14784 1 files changed, 4 insertions(+), 1 deletions(-)
14785
14786 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
14787 Author: Yuchung Cheng <ycheng@google.com>
14788 Date: Wed Jan 6 12:42:38 2016 -0800
14789
14790 tcp: fix zero cwnd in tcp_cwnd_reduction
14791
14792 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
14793 conditionally") introduced a bug that cwnd may become 0 when both
14794 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
14795 to a div-by-zero if the connection starts another cwnd reduction
14796 phase by setting tp->prior_cwnd to the current cwnd (0) in
14797 tcp_init_cwnd_reduction().
14798
14799 To prevent this we skip PRR operation when nothing is acked or
14800 sacked. Then cwnd must be positive in all cases as long as ssthresh
14801 is positive:
14802
14803 1) The proportional reduction mode
14804 inflight > ssthresh > 0
14805
14806 2) The reduction bound mode
14807 a) inflight == ssthresh > 0
14808
14809 b) inflight < ssthresh
14810 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
14811
14812 Therefore in all cases inflight and sndcnt can not both be 0.
14813 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
14814
14815 In reality this bug is triggered only with a sequence of less common
14816 events. For example, the connection is terminating an ECN-triggered
14817 cwnd reduction with an inflight 0, then it receives reordered/old
14818 ACKs or DSACKs from prior transmission (which acks nothing). Or the
14819 connection is in fast recovery stage that marks everything lost,
14820 but fails to retransmit due to local issues, then receives data
14821 packets from other end which acks nothing.
14822
14823 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
14824 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
14825 Signed-off-by: Yuchung Cheng <ycheng@google.com>
14826 Signed-off-by: Neal Cardwell <ncardwell@google.com>
14827 Signed-off-by: Eric Dumazet <edumazet@google.com>
14828 Signed-off-by: David S. Miller <davem@davemloft.net>
14829
14830 net/ipv4/tcp_input.c | 3 +++
14831 1 files changed, 3 insertions(+), 0 deletions(-)
14832
14833 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
14834 Author: Eric Dumazet <edumazet@google.com>
14835 Date: Sun Jan 24 13:53:50 2016 -0800
14836
14837 af_unix: fix struct pid memory leak
14838
14839 Dmitry reported a struct pid leak detected by a syzkaller program.
14840
14841 Bug happens in unix_stream_recvmsg() when we break the loop when a
14842 signal is pending, without properly releasing scm.
14843
14844 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
14845 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14846 Signed-off-by: Eric Dumazet <edumazet@google.com>
14847 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
14848 Signed-off-by: David S. Miller <davem@davemloft.net>
14849
14850 net/unix/af_unix.c | 1 +
14851 1 files changed, 1 insertions(+), 0 deletions(-)
14852
14853 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
14854 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14855 Date: Fri Jan 22 01:39:43 2016 +0100
14856
14857 pptp: fix illegal memory access caused by multiple bind()s
14858
14859 Several times already this has been reported as kasan reports caused by
14860 syzkaller and trinity and people always looked at RCU races, but it is
14861 much more simple. :)
14862
14863 In case we bind a pptp socket multiple times, we simply add it to
14864 the callid_sock list but don't remove the old binding. Thus the old
14865 socket stays in the bucket with unused call_id indexes and doesn't get
14866 cleaned up. This causes various forms of kasan reports which were hard
14867 to pinpoint.
14868
14869 Simply don't allow multiple binds and correct error handling in
14870 pptp_bind. Also keep sk_state bits in place in pptp_connect.
14871
14872 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
14873 Cc: Dmitry Kozlov <xeb@mail.ru>
14874 Cc: Sasha Levin <sasha.levin@oracle.com>
14875 Cc: Dmitry Vyukov <dvyukov@google.com>
14876 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14877 Cc: Dave Jones <davej@codemonkey.org.uk>
14878 Reported-by: Dave Jones <davej@codemonkey.org.uk>
14879 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14880 Signed-off-by: David S. Miller <davem@davemloft.net>
14881
14882 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
14883 1 files changed, 24 insertions(+), 10 deletions(-)
14884
14885 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
14886 Author: Brad Spengler <spender@grsecurity.net>
14887 Date: Tue Jan 26 18:17:10 2016 -0500
14888
14889 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
14890 wiki but was removed from the config help at some point
14891
14892 grsecurity/Kconfig | 3 +++
14893 1 files changed, 3 insertions(+), 0 deletions(-)
14894
14895 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
14896 Author: Thomas Egerer <hakke_007@gmx.de>
14897 Date: Mon Jan 25 12:58:44 2016 +0100
14898
14899 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
14900
14901 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
14902 to select CRYPTO_ECHAINIV in order to work properly. This solves the
14903 issues caused by a misconfiguration as described in [1].
14904 The original approach, patching crypto/Kconfig was turned down by
14905 Herbert Xu [2].
14906
14907 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
14908 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
14909
14910 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
14911 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
14912 Signed-off-by: David S. Miller <davem@davemloft.net>
14913
14914 net/ipv4/Kconfig | 1 +
14915 net/ipv6/Kconfig | 1 +
14916 2 files changed, 2 insertions(+), 0 deletions(-)
14917
14918 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
14919 Merge: 904114c 6339c1f
14920 Author: Brad Spengler <spender@grsecurity.net>
14921 Date: Tue Jan 26 18:08:40 2016 -0500
14922
14923 Merge branch 'pax-test' into grsec-test
14924
14925 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
14926 Author: Brad Spengler <spender@grsecurity.net>
14927 Date: Tue Jan 26 18:07:51 2016 -0500
14928
14929 Update to pax-linux-4.3.4-test25.patch:
14930 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
14931 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
14932 - fixed a few REFCOUNT false positives in SNMP related statistics
14933
14934 arch/x86/Kconfig | 2 +-
14935 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
14936 include/net/snmp.h | 10 +++++-----
14937 kernel/fork.c | 11 +++++++++--
14938 net/ipv4/proc.c | 8 ++++----
14939 net/ipv6/addrconf.c | 4 ++--
14940 net/ipv6/proc.c | 10 +++++-----
14941 7 files changed, 43 insertions(+), 19 deletions(-)
14942
14943 commit 904114c2fce3fdff5d57e763da56a78960db4e19
14944 Author: Al Viro <viro@zeniv.linux.org.uk>
14945 Date: Fri Jan 22 18:08:52 2016 -0500
14946
14947 make sure that freeing shmem fast symlinks is RCU-delayed
14948
14949 Cc: stable@vger.kernel.org # v4.2+
14950 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
14951
14952 include/linux/shmem_fs.h | 5 +----
14953 mm/shmem.c | 9 ++++-----
14954 2 files changed, 5 insertions(+), 9 deletions(-)
14955
14956 commit ab86adee64312a2f827dd516cb199521327943ed
14957 Author: Sasha Levin <sasha.levin@oracle.com>
14958 Date: Mon Jan 18 19:23:51 2016 -0500
14959
14960 netfilter: nf_conntrack: use safer way to lock all buckets
14961
14962 When we need to lock all buckets in the connection hashtable we'd attempt to
14963 lock 1024 spinlocks, which is way more preemption levels than supported by
14964 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
14965 enabled, and if it was - use only 8 buckets(!).
14966
14967 Fix this by using a global lock and synchronize all buckets on it when we
14968 need to lock them all. This is pretty heavyweight, but is only done when we
14969 need to resize the hashtable, and that doesn't happen often enough (or at all).
14970
14971 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
14972 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
14973 Reviewed-by: Florian Westphal <fw@strlen.de>
14974 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
14975
14976 Conflicts:
14977
14978 net/netfilter/nfnetlink_cttimeout.c
14979
14980 include/net/netfilter/nf_conntrack_core.h | 8 ++----
14981 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
14982 net/netfilter/nf_conntrack_helper.c | 2 +-
14983 net/netfilter/nf_conntrack_netlink.c | 2 +-
14984 4 files changed, 33 insertions(+), 17 deletions(-)
14985
14986 commit 37014723527225481c720484bb788a1a6358072f
14987 Author: Willy Tarreau <w@1wt.eu>
14988 Date: Mon Jan 18 16:36:09 2016 +0100
14989
14990 pipe: limit the per-user amount of pages allocated in pipes
14991
14992 On no-so-small systems, it is possible for a single process to cause an
14993 OOM condition by filling large pipes with data that are never read. A
14994 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
14995 memory. On small systems it may be tricky to set the pipe max size to
14996 prevent this from happening.
14997
14998 This patch makes it possible to enforce a per-user soft limit above
14999 which new pipes will be limited to a single page, effectively limiting
15000 them to 4 kB each, as well as a hard limit above which no new pipes may
15001 be created for this user. This has the effect of protecting the system
15002 against memory abuse without hurting other users, and still allowing
15003 pipes to work correctly though with less data at once.
15004
15005 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
15006 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
15007 default soft limit allows the default number of FDs per process (1024)
15008 to create pipes of the default size (64kB), thus reaching a limit of 64MB
15009 before starting to create only smaller pipes. With 256 processes limited
15010 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
15011 1084 MB of memory allocated for a user. The hard limit is disabled by
15012 default to avoid breaking existing applications that make intensive use
15013 of pipes (eg: for splicing).
15014
15015 Reported-by: socketpair@gmail.com
15016 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15017 Mitigates: CVE-2013-4312 (Linux 2.0+)
15018 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15019 Signed-off-by: Willy Tarreau <w@1wt.eu>
15020 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15021
15022 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
15023 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
15024 include/linux/pipe_fs_i.h | 4 +++
15025 include/linux/sched.h | 1 +
15026 kernel/sysctl.c | 14 ++++++++++++
15027 5 files changed, 87 insertions(+), 2 deletions(-)
15028
15029 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
15030 Merge: 540f2af 7791ecb
15031 Author: Brad Spengler <spender@grsecurity.net>
15032 Date: Sat Jan 23 10:57:11 2016 -0500
15033
15034 Merge branch 'pax-test' into grsec-test
15035
15036 commit 7791ecb84f840343a5646236fd0d34e1fb450793
15037 Merge: 470069c 399588c
15038 Author: Brad Spengler <spender@grsecurity.net>
15039 Date: Sat Jan 23 10:56:47 2016 -0500
15040
15041 Merge branch 'linux-4.3.y' into pax-test
15042
15043 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
15044 Author: Brad Spengler <spender@grsecurity.net>
15045 Date: Tue Jan 19 21:18:47 2016 -0500
15046
15047 Update size_overflow hash table
15048
15049 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
15050 1 files changed, 3 insertions(+), 1 deletions(-)
15051
15052 commit 7e649765626a28437f573f0fbe7a51a04615f041
15053 Author: Brad Spengler <spender@grsecurity.net>
15054 Date: Tue Jan 19 20:29:46 2016 -0500
15055
15056 Backport fix from: https://lkml.org/lkml/2015/12/13/187
15057
15058 fs/ext4/extents.c | 2 +-
15059 1 files changed, 1 insertions(+), 1 deletions(-)
15060
15061 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
15062 Author: Jann Horn <jann@thejh.net>
15063 Date: Tue Jan 5 18:27:30 2016 +0100
15064
15065 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
15066
15067 This replaces all code in fs/compat_ioctl.c that translated
15068 ioctl arguments into a in-kernel structure, then performed
15069 do_ioctl under set_fs(KERNEL_DS), with code that allocates
15070 data on the user stack and can call the VFS ioctl handler
15071 under USER_DS.
15072
15073 This is done as a hardening measure because the caller
15074 does not know what kind of ioctl handler will be invoked,
15075 only that no corresponding compat_ioctl handler exists and
15076 what the ioctl command number is. The accidental
15077 invocation of an unlocked_ioctl handler that unexpectedly
15078 calls copy_to_user could be a severe security issue.
15079
15080 Signed-off-by: Jann Horn <jann@thejh.net>
15081 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15082
15083 Conflicts:
15084
15085 fs/compat_ioctl.c
15086
15087 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
15088 1 files changed, 68 insertions(+), 62 deletions(-)
15089
15090 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
15091 Author: Al Viro <viro@zeniv.linux.org.uk>
15092 Date: Thu Jan 7 09:53:30 2016 -0500
15093
15094 compat_ioctl: don't pass fd around when not needed
15095
15096 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15097
15098 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
15099 fs/internal.h | 7 ++++
15100 fs/ioctl.c | 4 +-
15101 include/linux/fs.h | 2 -
15102 4 files changed, 61 insertions(+), 55 deletions(-)
15103
15104 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
15105 Author: Jann Horn <jann@thejh.net>
15106 Date: Tue Jan 5 18:27:29 2016 +0100
15107
15108 compat_ioctl: don't look up the fd twice
15109
15110 In code in fs/compat_ioctl.c that translates ioctl arguments
15111 into a in-kernel structure, then performs sys_ioctl, possibly
15112 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
15113 calls to do_ioctl calls. do_ioctl is a new function that does
15114 the same thing as sys_ioctl, but doesn't look up the fd again.
15115
15116 This change is made to avoid (potential) security issues
15117 because of ioctl handlers that accept one of the ioctl
15118 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
15119 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
15120 This can happen for multiple reasons:
15121
15122 - The ioctl command number could be reused.
15123 - The ioctl handler might not check the full ioctl
15124 command. This is e.g. true for drm_ioctl.
15125 - The ioctl handler is very special, e.g. cuse_file_ioctl
15126
15127 The real issue is that set_fs(KERNEL_DS) is used here,
15128 but that's fixed in a separate commit
15129 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
15130
15131 This change mitigates potential security issues by
15132 preventing a race that permits invocation of
15133 unlocked_ioctl handlers under KERNEL_DS through compat
15134 code even if a corresponding compat_ioctl handler exists.
15135
15136 So far, no way has been identified to use this to damage
15137 kernel memory without having CAP_SYS_ADMIN in the init ns
15138 (with the capability, doing reads/writes at arbitrary
15139 kernel addresses should be easy through CUSE's ioctl
15140 handler with FUSE_IOCTL_UNRESTRICTED set).
15141
15142 [AV: two missed sys_ioctl() taken care of]
15143
15144 Signed-off-by: Jann Horn <jann@thejh.net>
15145 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15146
15147 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
15148 1 files changed, 68 insertions(+), 54 deletions(-)
15149
15150 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
15151 Author: Vasily Kulikov <segoon@openwall.com>
15152 Date: Fri Jan 15 16:57:55 2016 -0800
15153
15154 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
15155
15156 TIMER_ENTRY_STATIC is defined as a poison pointers which
15157 should point to nowhere. Redefine them using POISON_POINTER_DELTA
15158 arithmetics to make sure they really point to non-mappable area declared
15159 by the target architecture.
15160
15161 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
15162 Acked-by: Thomas Gleixner <tglx@linutronix.de>
15163 Cc: Solar Designer <solar@openwall.com>
15164 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
15165 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
15166 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
15167
15168 Conflicts:
15169
15170 include/linux/poison.h
15171
15172 include/linux/poison.h | 2 +-
15173 1 files changed, 1 insertions(+), 1 deletions(-)
15174
15175 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
15176 Author: Brad Spengler <spender@grsecurity.net>
15177 Date: Tue Jan 19 19:41:44 2016 -0500
15178
15179 Fix ARM compilation, reported by Austin Sepp
15180
15181 grsecurity/grsec_sig.c | 1 +
15182 1 files changed, 1 insertions(+), 0 deletions(-)
15183
15184 commit e15383743443dc43460a2fd73e0db0b608610dca
15185 Author: Takashi Iwai <tiwai@suse.de>
15186 Date: Mon Jan 18 13:52:47 2016 +0100
15187
15188 ALSA: hrtimer: Fix stall by hrtimer_cancel()
15189
15190 hrtimer_cancel() waits for the completion from the callback, thus it
15191 must not be called inside the callback itself. This was already a
15192 problem in the past with ALSA hrtimer driver, and the early commit
15193 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
15194
15195 However, the previous fix is still insufficient: it may still cause a
15196 lockup when the ALSA timer instance reprograms itself in its callback.
15197 Then it invokes the start function even in snd_timer_interrupt() that
15198 is called in hrtimer callback itself, results in a CPU stall. This is
15199 no hypothetical problem but actually triggered by syzkaller fuzzer.
15200
15201 This patch tries to fix the issue again. Now we call
15202 hrtimer_try_to_cancel() at both start and stop functions so that it
15203 won't fall into a deadlock, yet giving some chance to cancel the queue
15204 if the functions have been called outside the callback. The proper
15205 hrtimer_cancel() is called in anyway at closing, so this should be
15206 enough.
15207
15208 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
15209 Cc: <stable@vger.kernel.org>
15210 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15211
15212 sound/core/hrtimer.c | 3 ++-
15213 1 files changed, 2 insertions(+), 1 deletions(-)
15214
15215 commit 12d874daf706e6e7c1ae709141859c809599297e
15216 Author: Takashi Iwai <tiwai@suse.de>
15217 Date: Tue Jan 12 12:38:02 2016 +0100
15218
15219 ALSA: seq: Fix missing NULL check at remove_events ioctl
15220
15221 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
15222 unconditionally even if there is no FIFO assigned, and this leads to
15223 an Oops due to NULL dereference. The fix is just to add a proper NULL
15224 check.
15225
15226 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15227 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15228 Cc: <stable@vger.kernel.org>
15229 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15230
15231 sound/core/seq/seq_clientmgr.c | 2 +-
15232 1 files changed, 1 insertions(+), 1 deletions(-)
15233
15234 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
15235 Author: Takashi Iwai <tiwai@suse.de>
15236 Date: Tue Jan 12 15:36:27 2016 +0100
15237
15238 ALSA: seq: Fix race at timer setup and close
15239
15240 ALSA sequencer code has an open race between the timer setup ioctl and
15241 the close of the client. This was triggered by syzkaller fuzzer, and
15242 a use-after-free was caught there as a result.
15243
15244 This patch papers over it by adding a proper queue->timer_mutex lock
15245 around the timer-related calls in the relevant code path.
15246
15247 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15248 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15249 Cc: <stable@vger.kernel.org>
15250 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15251
15252 sound/core/seq/seq_queue.c | 2 ++
15253 1 files changed, 2 insertions(+), 0 deletions(-)
15254
15255 commit b9e55ab955e59b4a636d78a748be90334a48b485
15256 Author: Takashi Iwai <tiwai@suse.de>
15257 Date: Thu Jan 14 16:30:58 2016 +0100
15258
15259 ALSA: timer: Harden slave timer list handling
15260
15261 A slave timer instance might be still accessible in a racy way while
15262 operating the master instance as it lacks of locking. Since the
15263 master operation is mostly protected with timer->lock, we should cope
15264 with it while changing the slave instance, too. Also, some linked
15265 lists (active_list and ack_list) of slave instances aren't unlinked
15266 immediately at stopping or closing, and this may lead to unexpected
15267 accesses.
15268
15269 This patch tries to address these issues. It adds spin lock of
15270 timer->lock (either from master or slave, which is equivalent) in a
15271 few places. For avoiding a deadlock, we ensure that the global
15272 slave_active_lock is always locked at first before each timer lock.
15273
15274 Also, ack and active_list of slave instances are properly unlinked at
15275 snd_timer_stop() and snd_timer_close().
15276
15277 Last but not least, remove the superfluous call of _snd_timer_stop()
15278 at removing slave links. This is a noop, and calling it may confuse
15279 readers wrt locking. Further cleanup will follow in a later patch.
15280
15281 Actually we've got reports of use-after-free by syzkaller fuzzer, and
15282 this hopefully fixes these issues.
15283
15284 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15285 Cc: <stable@vger.kernel.org>
15286 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15287
15288 sound/core/timer.c | 18 ++++++++++++++----
15289 1 files changed, 14 insertions(+), 4 deletions(-)
15290
15291 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
15292 Author: Takashi Iwai <tiwai@suse.de>
15293 Date: Wed Jan 13 17:48:01 2016 +0100
15294
15295 ALSA: timer: Fix race among timer ioctls
15296
15297 ALSA timer ioctls have an open race and this may lead to a
15298 use-after-free of timer instance object. A simplistic fix is to make
15299 each ioctl exclusive. We have already tread_sem for controlling the
15300 tread, and extend this as a global mutex to be applied to each ioctl.
15301
15302 The downside is, of course, the worse concurrency. But these ioctls
15303 aren't to be parallel accessible, in anyway, so it should be fine to
15304 serialize there.
15305
15306 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15307 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15308 Cc: <stable@vger.kernel.org>
15309 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15310
15311 sound/core/timer.c | 32 +++++++++++++++++++-------------
15312 1 files changed, 19 insertions(+), 13 deletions(-)
15313
15314 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
15315 Author: Takashi Iwai <tiwai@suse.de>
15316 Date: Wed Jan 13 21:35:06 2016 +0100
15317
15318 ALSA: timer: Fix double unlink of active_list
15319
15320 ALSA timer instance object has a couple of linked lists and they are
15321 unlinked unconditionally at snd_timer_stop(). Meanwhile
15322 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
15323 the element list itself unchanged. This ends up with unlinking twice,
15324 and it was caught by syzkaller fuzzer.
15325
15326 The fix is to use list_del_init() variant properly there, too.
15327
15328 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15329 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15330 Cc: <stable@vger.kernel.org>
15331 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15332
15333 sound/core/timer.c | 2 +-
15334 1 files changed, 1 insertions(+), 1 deletions(-)
15335
15336 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
15337 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15338 Date: Mon Jan 18 18:03:48 2016 +0100
15339
15340 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
15341
15342 It was seen that defective configurations of openvswitch could overwrite
15343 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
15344 many recursions within ovs.
15345
15346 This problem arises due to the high stack usage of openvswitch. The rest
15347 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
15348
15349 We use the already existing recursion counter in ovs_execute_actions to
15350 implement an upper bound of 5 recursions.
15351
15352 Cc: Pravin Shelar <pshelar@ovn.org>
15353 Cc: Simon Horman <simon.horman@netronome.com>
15354 Cc: Eric Dumazet <eric.dumazet@gmail.com>
15355 Cc: Simon Horman <simon.horman@netronome.com>
15356 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15357 Signed-off-by: David S. Miller <davem@davemloft.net>
15358
15359 net/openvswitch/actions.c | 19 ++++++++++++++-----
15360 1 files changed, 14 insertions(+), 5 deletions(-)
15361
15362 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
15363 Author: Ursula Braun <ursula.braun@de.ibm.com>
15364 Date: Tue Jan 19 10:41:33 2016 +0100
15365
15366 af_iucv: Validate socket address length in iucv_sock_bind()
15367
15368 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
15369 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15370 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
15371 Signed-off-by: David S. Miller <davem@davemloft.net>
15372
15373 net/iucv/af_iucv.c | 3 +++
15374 1 files changed, 3 insertions(+), 0 deletions(-)
15375
15376 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
15377 Author: Brad Spengler <spender@grsecurity.net>
15378 Date: Tue Jan 19 19:32:54 2016 -0500
15379
15380 Apply the same fix as everyone else for the recent keys vulnerability that is
15381 unexploitable under PAX_REFCOUNT
15382
15383 Make a couple more changes that no one else can/will
15384
15385 include/linux/key-type.h | 4 ++--
15386 ipc/msgutil.c | 4 ++--
15387 security/keys/internal.h | 2 +-
15388 security/keys/process_keys.c | 1 +
15389 4 files changed, 6 insertions(+), 5 deletions(-)
15390
15391 commit b56c3a63f431c193400aee17543021950bd14bc4
15392 Merge: 38b1a3d 470069c
15393 Author: Brad Spengler <spender@grsecurity.net>
15394 Date: Sun Jan 17 18:30:19 2016 -0500
15395
15396 Merge branch 'pax-test' into grsec-test
15397
15398 commit 470069cfedef2180313233d275be5901bd6d1135
15399 Author: Brad Spengler <spender@grsecurity.net>
15400 Date: Sun Jan 17 18:29:59 2016 -0500
15401
15402 Update to pax-linux-4.3.3-test22.patch:
15403 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
15404 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
15405
15406 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
15407 drivers/gpu/drm/drm_pci.c | 3 +++
15408 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
15409 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
15410 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
15411 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
15412 drivers/net/usb/asix_common.c | 3 ++-
15413 include/drm/drmP.h | 1 +
15414 8 files changed, 22 insertions(+), 29 deletions(-)
15415
15416 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
15417 Author: Brad Spengler <spender@grsecurity.net>
15418 Date: Sun Jan 17 12:33:53 2016 -0500
15419
15420 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
15421 mentioned banning execution of suid/sgid binaries, though the kernel
15422 source clearly only mentions banning execution of suid binaries. Since
15423 there's no reason for us to not ban execution of sgid binaries as well,
15424 make the implementation match the Kconfig description.
15425
15426 fs/exec.c | 4 ++--
15427 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
15428 include/linux/sched.h | 4 ++--
15429 3 files changed, 18 insertions(+), 17 deletions(-)
15430
15431 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
15432 Merge: d141a86 ea4a835
15433 Author: Brad Spengler <spender@grsecurity.net>
15434 Date: Sat Jan 16 14:12:22 2016 -0500
15435
15436 Merge branch 'pax-test' into grsec-test
15437
15438 Conflicts:
15439 drivers/gpu/drm/i810/i810_drv.c
15440
15441 commit ea4a835328ada6513ac013986764d6caea8cd348
15442 Author: Brad Spengler <spender@grsecurity.net>
15443 Date: Sat Jan 16 14:11:30 2016 -0500
15444
15445 Update to pax-linux-4.3.3-test21.patch:
15446 - fixed some fallout from the drm_drivers constification, reported by spender
15447
15448 drivers/gpu/drm/armada/armada_drv.c | 3 +--
15449 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
15450 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15451 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
15452 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15453 5 files changed, 8 insertions(+), 6 deletions(-)
15454
15455 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
15456 Author: Brad Spengler <spender@grsecurity.net>
15457 Date: Sat Jan 16 13:16:36 2016 -0500
15458
15459 compile fix
15460
15461 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15462 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
15463 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15464 3 files changed, 5 insertions(+), 3 deletions(-)
15465
15466 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
15467 Merge: 5fa135d bbda879
15468 Author: Brad Spengler <spender@grsecurity.net>
15469 Date: Sat Jan 16 12:59:22 2016 -0500
15470
15471 Merge branch 'pax-test' into grsec-test
15472
15473 commit bbda87914edf63e27fb46670bf3a373f2b963c73
15474 Author: Brad Spengler <spender@grsecurity.net>
15475 Date: Sat Jan 16 12:58:04 2016 -0500
15476
15477 Update to pax-linux-4.3.3-test20.patch:
15478 - constified drm_driver
15479 - Emese fixed a special case in handling __func__ in the initify plugin
15480 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
15481 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
15482
15483 arch/x86/kernel/cpu/perf_event.h | 2 +-
15484 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
15485 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
15486 arch/x86/kernel/uprobes.c | 2 +-
15487 arch/x86/mm/mpx.c | 2 +-
15488 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
15489 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
15490 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
15491 drivers/gpu/drm/drm_pci.c | 6 +-
15492 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
15493 drivers/gpu/drm/i915/i915_dma.c | 2 +-
15494 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
15495 drivers/gpu/drm/i915/i915_drv.h | 2 +-
15496 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
15497 drivers/gpu/drm/mga/mga_drv.c | 5 +-
15498 drivers/gpu/drm/mga/mga_drv.h | 2 +-
15499 drivers/gpu/drm/mga/mga_state.c | 2 +-
15500 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
15501 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
15502 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
15503 drivers/gpu/drm/r128/r128_drv.c | 4 +-
15504 drivers/gpu/drm/r128/r128_drv.h | 2 +-
15505 drivers/gpu/drm/r128/r128_state.c | 2 +-
15506 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
15507 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
15508 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
15509 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
15510 drivers/gpu/drm/savage/savage_bci.c | 2 +-
15511 drivers/gpu/drm/savage/savage_drv.c | 5 +-
15512 drivers/gpu/drm/savage/savage_drv.h | 2 +-
15513 drivers/gpu/drm/sis/sis_drv.c | 5 +-
15514 drivers/gpu/drm/sis/sis_drv.h | 2 +-
15515 drivers/gpu/drm/sis/sis_mm.c | 2 +-
15516 drivers/gpu/drm/via/via_dma.c | 2 +-
15517 drivers/gpu/drm/via/via_drv.c | 5 +-
15518 drivers/gpu/drm/via/via_drv.h | 2 +-
15519 include/drm/drmP.h | 2 +-
15520 mm/slab.c | 2 +-
15521 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
15522 tools/gcc/initify_plugin.c | 15 +++-
15523 .../disable_size_overflow_hash.data | 1 +
15524 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
15525 42 files changed, 156 insertions(+), 110 deletions(-)
15526
15527 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
15528 Author: Brad Spengler <spender@grsecurity.net>
15529 Date: Sat Jan 16 12:19:23 2016 -0500
15530
15531 compile fix
15532
15533 grsecurity/grsec_sig.c | 3 +--
15534 1 files changed, 1 insertions(+), 2 deletions(-)
15535
15536 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
15537 Author: Brad Spengler <spender@grsecurity.net>
15538 Date: Sat Jan 16 12:10:37 2016 -0500
15539
15540 As pointed out by Jann Horn, some distros are starting to circumvent
15541 previous assumptions about the attainability of a user to control
15542 multiple UIDs by handing out suid binaries that allow a user to run
15543 processes (including exploits) under a number of other pre-defined
15544 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
15545 (though it would have to involve some code path that doesn't involve
15546 locks) fix that here by ensuring no more than 8 users on a system can
15547 be banned before a reboot is required. If more are banned, a panic
15548 is triggered.
15549
15550 grsecurity/grsec_sig.c | 8 ++++++++
15551 1 files changed, 8 insertions(+), 0 deletions(-)
15552
15553 commit a8d37776e9521c567ebff6730d49312f72435f08
15554 Author: Eric Dumazet <edumazet@google.com>
15555 Date: Thu Dec 3 11:12:07 2015 -0800
15556
15557 proc: add a reschedule point in proc_readfd_common()
15558
15559 User can pass an arbitrary large buffer to getdents().
15560
15561 It is typically a 32KB buffer used by libc scandir() implementation.
15562
15563 When scanning /proc/{pid}/fd, we can hold cpu way too long,
15564 so add a cond_resched() to be kind with other tasks.
15565
15566 We've seen latencies of more than 50ms on real workloads.
15567
15568 Signed-off-by: Eric Dumazet <edumazet@google.com>
15569 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
15570 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15571
15572 fs/proc/fd.c | 1 +
15573 1 files changed, 1 insertions(+), 0 deletions(-)
15574
15575 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
15576 Author: Rabin Vincent <rabin@rab.in>
15577 Date: Tue Jan 12 20:17:08 2016 +0100
15578
15579 net: bpf: reject invalid shifts
15580
15581 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
15582 constant shift that can't be encoded in the immediate field of the
15583 UBFM/SBFM instructions is passed to the JIT. Since these shifts
15584 amounts, which are negative or >= regsize, are invalid, reject them in
15585 the eBPF verifier and the classic BPF filter checker, for all
15586 architectures.
15587
15588 Signed-off-by: Rabin Vincent <rabin@rab.in>
15589 Acked-by: Alexei Starovoitov <ast@kernel.org>
15590 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15591 Signed-off-by: David S. Miller <davem@davemloft.net>
15592
15593 kernel/bpf/verifier.c | 10 ++++++++++
15594 net/core/filter.c | 5 +++++
15595 2 files changed, 15 insertions(+), 0 deletions(-)
15596
15597 commit c248e115a73496625a1c64660d0eeefd67e55cbf
15598 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15599 Date: Fri Jan 8 11:00:54 2016 -0200
15600
15601 sctp: fix use-after-free in pr_debug statement
15602
15603 Dmitry Vyukov reported a use-after-free in the code expanded by the
15604 macro debug_post_sfx, which is caused by the use of the asoc pointer
15605 after it was freed within sctp_side_effect() scope.
15606
15607 This patch fixes it by allowing sctp_side_effect to clear that asoc
15608 pointer when the TCB is freed.
15609
15610 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
15611 because it will trigger DELETE_TCB too on that same loop.
15612
15613 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
15614 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
15615 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
15616
15617 The macro is already prepared to handle such NULL pointer.
15618
15619 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15620 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15621 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
15622 Signed-off-by: David S. Miller <davem@davemloft.net>
15623
15624 net/sctp/sm_sideeffect.c | 11 ++++++-----
15625 net/sctp/sm_statefuns.c | 17 ++++-------------
15626 2 files changed, 10 insertions(+), 18 deletions(-)
15627
15628 commit 395ea8a9e73e184fc14153a033000bccf4213213
15629 Author: willy tarreau <w@1wt.eu>
15630 Date: Sun Jan 10 07:54:56 2016 +0100
15631
15632 unix: properly account for FDs passed over unix sockets
15633
15634 It is possible for a process to allocate and accumulate far more FDs than
15635 the process' limit by sending them over a unix socket then closing them
15636 to keep the process' fd count low.
15637
15638 This change addresses this problem by keeping track of the number of FDs
15639 in flight per user and preventing non-privileged processes from having
15640 more FDs in flight than their configured FD limit.
15641
15642 Reported-by: socketpair@gmail.com
15643 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15644 Mitigates: CVE-2013-4312 (Linux 2.0+)
15645 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15646 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15647 Signed-off-by: Willy Tarreau <w@1wt.eu>
15648 Signed-off-by: David S. Miller <davem@davemloft.net>
15649
15650 include/linux/sched.h | 1 +
15651 net/unix/af_unix.c | 24 ++++++++++++++++++++----
15652 net/unix/garbage.c | 13 ++++++++-----
15653 3 files changed, 29 insertions(+), 9 deletions(-)
15654
15655 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
15656 Author: Sasha Levin <sasha.levin@oracle.com>
15657 Date: Thu Jan 7 14:52:43 2016 -0500
15658
15659 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
15660
15661 proc_dostring() needs an initialized destination string, while the one
15662 provided in proc_sctp_do_hmac_alg() contains stack garbage.
15663
15664 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
15665 accessing invalid memory.
15666
15667 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
15668 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15669 Signed-off-by: David S. Miller <davem@davemloft.net>
15670
15671 net/sctp/sysctl.c | 2 +-
15672 1 files changed, 1 insertions(+), 1 deletions(-)
15673
15674 commit 4014e09faf0fe9054119624ccfff1236e886b554
15675 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
15676 Date: Tue Nov 24 17:13:21 2015 -0500
15677
15678 RDS: fix race condition when sending a message on unbound socket
15679
15680 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
15681
15682 Sasha's found a NULL pointer dereference in the RDS connection code when
15683 sending a message to an apparently unbound socket. The problem is caused
15684 by the code checking if the socket is bound in rds_sendmsg(), which checks
15685 the rs_bound_addr field without taking a lock on the socket. This opens a
15686 race where rs_bound_addr is temporarily set but where the transport is not
15687 in rds_bind(), leading to a NULL pointer dereference when trying to
15688 dereference 'trans' in __rds_conn_create().
15689
15690 Vegard wrote a reproducer for this issue, so kindly ask him to share if
15691 you're interested.
15692
15693 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
15694 with this patch, whereas I could without.
15695
15696 Complete earlier incomplete fix to CVE-2015-6937:
15697
15698 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
15699
15700 Cc: David S. Miller <davem@davemloft.net>
15701
15702 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
15703 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
15704 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
15705 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
15706 Signed-off-by: David S. Miller <davem@davemloft.net>
15707 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
15708
15709 Conflicts:
15710
15711 net/rds/send.c
15712
15713 net/rds/connection.c | 6 ------
15714 1 files changed, 0 insertions(+), 6 deletions(-)
15715
15716 commit 206df8d01104344d7588d801016a281a4cd25556
15717 Author: Sasha Levin <sasha.levin@oracle.com>
15718 Date: Tue Sep 8 10:53:40 2015 -0400
15719
15720 RDS: verify the underlying transport exists before creating a connection
15721
15722 There was no verification that an underlying transport exists when creating
15723 a connection, this would cause dereferencing a NULL ptr.
15724
15725 It might happen on sockets that weren't properly bound before attempting to
15726 send a message, which will cause a NULL ptr deref:
15727
15728 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
15729 [135546.051270] Modules linked in:
15730 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
15731 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
15732 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
15733 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
15734 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
15735 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
15736 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
15737 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
15738 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
15739 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
15740 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
15741 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
15742 [135546.064723] Stack:
15743 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
15744 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
15745 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
15746 [135546.068629] Call Trace:
15747 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
15748 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
15749 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
15750 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
15751 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
15752 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
15753 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
15754 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
15755 [135546.076349] ? __might_fault (mm/memory.c:3795)
15756 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
15757 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
15758 [135546.078856] SYSC_sendto (net/socket.c:1657)
15759 [135546.079596] ? SYSC_connect (net/socket.c:1628)
15760 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
15761 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
15762 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
15763 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
15764 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
15765 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
15766 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
15767
15768 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
15769 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15770 Signed-off-by: David S. Miller <davem@davemloft.net>
15771
15772 net/rds/connection.c | 6 ++++++
15773 1 files changed, 6 insertions(+), 0 deletions(-)
15774
15775 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
15776 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
15777 Date: Tue Jan 5 20:32:47 2016 -0500
15778
15779 ftrace/module: Call clean up function when module init fails early
15780
15781 If the module init code fails after calling ftrace_module_init() and before
15782 calling do_init_module(), we can suffer from a memory leak. This is because
15783 ftrace_module_init() allocates pages to store the locations that ftrace
15784 hooks are placed in the module text. If do_init_module() fails, it still
15785 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
15786 the pages it allocated for the module. But if load_module() fails before
15787 then, the pages allocated by ftrace_module_init() will never be freed.
15788
15789 Call ftrace_release_mod() on the module if load_module() fails before
15790 getting to do_init_module().
15791
15792 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
15793
15794 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
15795 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
15796 Cc: stable@vger.kernel.org # v2.6.38+
15797 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
15798 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
15799
15800 include/linux/ftrace.h | 1 +
15801 kernel/module.c | 6 ++++++
15802 2 files changed, 7 insertions(+), 0 deletions(-)
15803
15804 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
15805 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
15806 Date: Wed Jan 6 00:18:48 2016 -0800
15807
15808 net: possible use after free in dst_release
15809
15810 dst_release should not access dst->flags after decrementing
15811 __refcnt to 0. The dst_entry may be in dst_busy_list and
15812 dst_gc_task may dst_destroy it before dst_release gets a chance
15813 to access dst->flags.
15814
15815 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
15816 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
15817 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
15818 Acked-by: Eric Dumazet <edumazet@google.com>
15819 Signed-off-by: David S. Miller <davem@davemloft.net>
15820
15821 net/core/dst.c | 3 ++-
15822 1 files changed, 2 insertions(+), 1 deletions(-)
15823
15824 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
15825 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
15826 Date: Wed Jan 6 14:55:02 2016 +0000
15827
15828 mkiss: fix scribble on freed memory
15829
15830 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
15831 scribble on free memory but added a new one which allows the user to
15832 scribble even more and user controlled data into freed space.
15833
15834 As with 6pack we need to halt the queue before we free the buffers, because
15835 the transmit logic is not protected by the semaphore.
15836
15837 Signed-off-by: Alan Cox <alan@linux.intel.com>
15838 Signed-off-by: David S. Miller <davem@davemloft.net>
15839
15840 drivers/net/hamradio/mkiss.c | 5 +++++
15841 1 files changed, 5 insertions(+), 0 deletions(-)
15842
15843 commit 5cbbcbd32dc1949470f61d342503808fa9555276
15844 Author: David Miller <davem@davemloft.net>
15845 Date: Thu Dec 17 16:05:49 2015 -0500
15846
15847 mkiss: Fix use after free in mkiss_close().
15848
15849 Need to do the unregister_device() after all references to the driver
15850 private have been done.
15851
15852 Signed-off-by: David S. Miller <davem@davemloft.net>
15853
15854 drivers/net/hamradio/mkiss.c | 4 ++--
15855 1 files changed, 2 insertions(+), 2 deletions(-)
15856
15857 commit b00171576794a98068e069a660f0991a6a5190ff
15858 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
15859 Date: Tue Jan 5 11:51:25 2016 +0000
15860
15861 6pack: fix free memory scribbles
15862
15863 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
15864 memory scribble but in doing so replaced it with a different one that allows
15865 the user to control the data and scribble even more.
15866
15867 sixpack_close is called by the tty layer in tty context. The tty context is
15868 protected by sp_get() and sp_put(). However network layer activity via
15869 sp_xmit() is not protected this way. We must therefore stop the queue
15870 otherwise the user gets to dump a buffer mostly of their choice into freed
15871 kernel pages.
15872
15873 Signed-off-by: Alan Cox <alan@linux.intel.com>
15874 Signed-off-by: David S. Miller <davem@davemloft.net>
15875
15876 drivers/net/hamradio/6pack.c | 6 ++++++
15877 1 files changed, 6 insertions(+), 0 deletions(-)
15878
15879 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
15880 Author: David Miller <davem@davemloft.net>
15881 Date: Thu Dec 17 16:05:32 2015 -0500
15882
15883 6pack: Fix use after free in sixpack_close().
15884
15885 Need to do the unregister_device() after all references to the driver
15886 private have been done.
15887
15888 Also we need to use del_timer_sync() for the timers so that we don't
15889 have any asynchronous references after the unregister.
15890
15891 Signed-off-by: David S. Miller <davem@davemloft.net>
15892
15893 drivers/net/hamradio/6pack.c | 8 ++++----
15894 1 files changed, 4 insertions(+), 4 deletions(-)
15895
15896 commit 4f9d532742656b3613d579220fd10c78f24ba37b
15897 Author: Rabin Vincent <rabin@rab.in>
15898 Date: Tue Jan 5 16:23:07 2016 +0100
15899
15900 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
15901
15902 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
15903 instructions since it XORs A with X while all the others replace A with
15904 some loaded value. All the BPF JITs fail to clear A if this is used as
15905 the first instruction in a filter. This was found using american fuzzy
15906 lop.
15907
15908 Add a helper to determine if A needs to be cleared given the first
15909 instruction in a filter, and use this in the JITs. Except for ARM, the
15910 rest have only been compile-tested.
15911
15912 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
15913 Signed-off-by: Rabin Vincent <rabin@rab.in>
15914 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15915 Acked-by: Alexei Starovoitov <ast@kernel.org>
15916 Signed-off-by: David S. Miller <davem@davemloft.net>
15917
15918 arch/arm/net/bpf_jit_32.c | 16 +---------------
15919 arch/mips/net/bpf_jit.c | 16 +---------------
15920 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
15921 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
15922 include/linux/filter.h | 19 +++++++++++++++++++
15923 5 files changed, 25 insertions(+), 56 deletions(-)
15924
15925 commit 570d88f8acfffda92b89ae2e1c47320d47256034
15926 Author: John Fastabend <john.fastabend@gmail.com>
15927 Date: Tue Jan 5 09:11:36 2016 -0800
15928
15929 net: sched: fix missing free per cpu on qstats
15930
15931 When a qdisc is using per cpu stats (currently just the ingress
15932 qdisc) only the bstats are being freed. This also free's the qstats.
15933
15934 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
15935 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
15936 Acked-by: Eric Dumazet <edumazet@google.com>
15937 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15938 Signed-off-by: David S. Miller <davem@davemloft.net>
15939
15940 net/sched/sch_generic.c | 4 +++-
15941 1 files changed, 3 insertions(+), 1 deletions(-)
15942
15943 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
15944 Author: Rabin Vincent <rabin@rab.in>
15945 Date: Tue Jan 5 18:34:04 2016 +0100
15946
15947 ARM: net: bpf: fix zero right shift
15948
15949 The LSR instruction cannot be used to perform a zero right shift since a
15950 0 as the immediate value (imm5) in the LSR instruction encoding means
15951 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
15952
15953 Make the JIT skip generation of the LSR if a zero-shift is requested.
15954
15955 This was found using american fuzzy lop.
15956
15957 Signed-off-by: Rabin Vincent <rabin@rab.in>
15958 Acked-by: Alexei Starovoitov <ast@kernel.org>
15959 Signed-off-by: David S. Miller <davem@davemloft.net>
15960
15961 arch/arm/net/bpf_jit_32.c | 3 ++-
15962 1 files changed, 2 insertions(+), 1 deletions(-)
15963
15964 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
15965 Author: Brad Spengler <spender@grsecurity.net>
15966 Date: Wed Jan 6 20:35:57 2016 -0500
15967
15968 Don't perform hidden lookups in RBAC against the directory of
15969 a file being opened with O_CREAT, reported by Karl Witt
15970
15971 Conflicts:
15972
15973 fs/namei.c
15974
15975 fs/namei.c | 3 ---
15976 1 files changed, 0 insertions(+), 3 deletions(-)
15977
15978 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
15979 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15980 Date: Tue Jan 5 10:46:00 2016 +0100
15981
15982 bridge: Only call /sbin/bridge-stp for the initial network namespace
15983
15984 [I stole this patch from Eric Biederman. He wrote:]
15985
15986 > There is no defined mechanism to pass network namespace information
15987 > into /sbin/bridge-stp therefore don't even try to invoke it except
15988 > for bridge devices in the initial network namespace.
15989 >
15990 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
15991 > invoked for any network device name which if /sbin/bridge-stp does not
15992 > guard against unreasonable arguments or being invoked twice on the
15993 > same network device could cause problems.
15994
15995 [Hannes: changed patch using netns_eq]
15996
15997 Cc: Eric W. Biederman <ebiederm@xmission.com>
15998 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
15999 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16000 Signed-off-by: David S. Miller <davem@davemloft.net>
16001
16002 net/bridge/br_stp_if.c | 5 ++++-
16003 1 files changed, 4 insertions(+), 1 deletions(-)
16004
16005 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
16006 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16007 Date: Wed Dec 23 16:28:40 2015 -0200
16008
16009 sctp: use GFP_USER for user-controlled kmalloc
16010
16011 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16012 missed two other spots.
16013
16014 For connectx, as it's more likely to be used by kernel users of the API,
16015 it detects if GFP_USER should be used or not.
16016
16017 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16018 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16019 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16020 Signed-off-by: David S. Miller <davem@davemloft.net>
16021
16022 net/sctp/socket.c | 9 ++++++---
16023 1 files changed, 6 insertions(+), 3 deletions(-)
16024
16025 commit 5718a1f63c41fc156f729783423b002763779d04
16026 Author: Florian Westphal <fw@strlen.de>
16027 Date: Thu Dec 31 14:26:33 2015 +0100
16028
16029 connector: bump skb->users before callback invocation
16030
16031 Dmitry reports memleak with syskaller program.
16032 Problem is that connector bumps skb usecount but might not invoke callback.
16033
16034 So move skb_get to where we invoke the callback.
16035
16036 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16037 Signed-off-by: Florian Westphal <fw@strlen.de>
16038 Signed-off-by: David S. Miller <davem@davemloft.net>
16039
16040 drivers/connector/connector.c | 11 +++--------
16041 1 files changed, 3 insertions(+), 8 deletions(-)
16042
16043 commit 2e6372e6a97f8d642416899861f91777f44f13b7
16044 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16045 Date: Sun Jan 3 18:56:38 2016 +0000
16046
16047 af_unix: Fix splice-bind deadlock
16048
16049 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
16050 system call and AF_UNIX sockets,
16051
16052 http://lists.openwall.net/netdev/2015/11/06/24
16053
16054 The situation was analyzed as
16055
16056 (a while ago) A: socketpair()
16057 B: splice() from a pipe to /mnt/regular_file
16058 does sb_start_write() on /mnt
16059 C: try to freeze /mnt
16060 wait for B to finish with /mnt
16061 A: bind() try to bind our socket to /mnt/new_socket_name
16062 lock our socket, see it not bound yet
16063 decide that it needs to create something in /mnt
16064 try to do sb_start_write() on /mnt, block (it's
16065 waiting for C).
16066 D: splice() from the same pipe to our socket
16067 lock the pipe, see that socket is connected
16068 try to lock the socket, block waiting for A
16069 B: get around to actually feeding a chunk from
16070 pipe to file, try to lock the pipe. Deadlock.
16071
16072 on 2015/11/10 by Al Viro,
16073
16074 http://lists.openwall.net/netdev/2015/11/10/4
16075
16076 The patch fixes this by removing the kern_path_create related code from
16077 unix_mknod and executing it as part of unix_bind prior acquiring the
16078 readlock of the socket in question. This means that A (as used above)
16079 will sb_start_write on /mnt before it acquires the readlock, hence, it
16080 won't indirectly block B which first did a sb_start_write and then
16081 waited for a thread trying to acquire the readlock. Consequently, A
16082 being blocked by C waiting for B won't cause a deadlock anymore
16083 (effectively, both A and B acquire two locks in opposite order in the
16084 situation described above).
16085
16086 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
16087
16088 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16089 Signed-off-by: David S. Miller <davem@davemloft.net>
16090
16091 Conflicts:
16092
16093 net/unix/af_unix.c
16094
16095 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
16096 1 files changed, 42 insertions(+), 28 deletions(-)
16097
16098 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
16099 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
16100 Date: Thu Dec 31 13:11:28 2015 +0800
16101
16102 tracing: Fix setting of start_index in find_next()
16103
16104 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
16105 panic at t_show.
16106
16107 general protection fault: 0000 [#1] PREEMPT SMP
16108 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
16109 RIP: 0010:[<ffffffff811375b2>]
16110 [<ffffffff811375b2>] t_show+0x22/0xe0
16111 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
16112 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
16113 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
16114 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
16115 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
16116 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
16117 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
16118 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
16119 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
16120 Call Trace:
16121 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
16122 [<ffffffff811b749b>] vfs_read+0x9b/0x160
16123 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
16124 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
16125 ---[ end trace 5bd9eb630614861e ]---
16126 Kernel panic - not syncing: Fatal exception
16127
16128 When the first time find_next calls find_next_mod_format, it should
16129 iterate the trace_bprintk_fmt_list to find the first print format of
16130 the module. However in current code, start_index is smaller than *pos
16131 at first, and code will not iterate the list. Latter container_of will
16132 get the wrong address with former v, which will cause mod_fmt be a
16133 meaningless object and so is the returned mod_fmt->fmt.
16134
16135 This patch will fix it by correcting the start_index. After fixed,
16136 when the first time calls find_next_mod_format, start_index will be
16137 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
16138 get the right module printk format, so is the returned mod_fmt->fmt.
16139
16140 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
16141
16142 Cc: stable@vger.kernel.org # 3.12+
16143 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
16144 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
16145 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16146
16147 kernel/trace/trace_printk.c | 1 +
16148 1 files changed, 1 insertions(+), 0 deletions(-)
16149
16150 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
16151 Author: Al Viro <viro@zeniv.linux.org.uk>
16152 Date: Mon Dec 28 20:47:08 2015 -0500
16153
16154 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
16155
16156 Cc: stable@vger.kernel.org # 3.15+
16157 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
16158 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16159
16160 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
16161 1 files changed, 37 insertions(+), 36 deletions(-)
16162
16163 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
16164 Merge: de243c2 3adc55a
16165 Author: Brad Spengler <spender@grsecurity.net>
16166 Date: Tue Jan 5 18:10:10 2016 -0500
16167
16168 Merge branch 'pax-test' into grsec-test
16169
16170 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
16171 Author: Brad Spengler <spender@grsecurity.net>
16172 Date: Tue Jan 5 18:08:53 2016 -0500
16173
16174 Update to pax-linux-4.3.3-test16.patch:
16175 - small cleanup in entry_64.S on x86
16176 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
16177 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
16178 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
16179 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
16180 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
16181
16182 arch/x86/entry/entry_64.S | 60 +++++-----
16183 arch/x86/kernel/alternative.c | 2 +-
16184 arch/x86/kvm/emulate.c | 4 +-
16185 tools/gcc/initify_plugin.c | 123 +++++++++----------
16186 .../disable_size_overflow_hash.data | 4 +-
16187 .../size_overflow_plugin/size_overflow_hash.data | 2 -
16188 6 files changed, 93 insertions(+), 102 deletions(-)
16189
16190 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
16191 Author: Brad Spengler <spender@grsecurity.net>
16192 Date: Tue Dec 29 18:01:24 2015 -0500
16193
16194 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
16195 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
16196 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
16197
16198 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
16199 against suid/sgid attacks and the flaw above would only eliminate the extra
16200 entropy provided for the brk-managed heap, still leaving it with the minimum
16201 of 16-bit entropy for mmap on x86 and 28 on x64.
16202
16203 mm/mmap.c | 2 +-
16204 1 files changed, 1 insertions(+), 1 deletions(-)
16205
16206 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
16207 Merge: 436201b 2584340
16208 Author: Brad Spengler <spender@grsecurity.net>
16209 Date: Mon Dec 28 20:30:01 2015 -0500
16210
16211 Merge branch 'pax-test' into grsec-test
16212
16213 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
16214 Author: Brad Spengler <spender@grsecurity.net>
16215 Date: Mon Dec 28 20:29:28 2015 -0500
16216
16217 Update to pax-linux-4.3.3-test14.patch:
16218 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
16219 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
16220 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
16221 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
16222 - fixed an assert in the initify plugin that triggered in vic_register on arm
16223
16224 arch/arm/include/asm/atomic.h | 7 +++++--
16225 arch/arm/include/asm/domain.h | 5 ++---
16226 arch/x86/kernel/tboot.c | 14 +++++++++-----
16227 drivers/hv/channel.c | 4 +---
16228 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
16229 drivers/net/hyperv/rndis_filter.c | 3 +--
16230 fs/exec.c | 4 ++--
16231 include/linux/atomic.h | 15 ---------------
16232 net/core/skbuff.c | 3 ++-
16233 tools/gcc/initify_plugin.c | 4 +++-
16234 10 files changed, 26 insertions(+), 35 deletions(-)
16235
16236 commit 436201b6626b488d173c8076447000077c27b84a
16237 Author: David Howells <dhowells@redhat.com>
16238 Date: Fri Dec 18 01:34:26 2015 +0000
16239
16240 KEYS: Fix race between read and revoke
16241
16242 This fixes CVE-2015-7550.
16243
16244 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
16245 happens between keyctl_read() checking the validity of a key and the key's
16246 semaphore being taken, then the key type read method will see a revoked key.
16247
16248 This causes a problem for the user-defined key type because it assumes in
16249 its read method that there will always be a payload in a non-revoked key
16250 and doesn't check for a NULL pointer.
16251
16252 Fix this by making keyctl_read() check the validity of a key after taking
16253 semaphore instead of before.
16254
16255 I think the bug was introduced with the original keyrings code.
16256
16257 This was discovered by a multithreaded test program generated by syzkaller
16258 (http://github.com/google/syzkaller). Here's a cleaned up version:
16259
16260 #include <sys/types.h>
16261 #include <keyutils.h>
16262 #include <pthread.h>
16263 void *thr0(void *arg)
16264 {
16265 key_serial_t key = (unsigned long)arg;
16266 keyctl_revoke(key);
16267 return 0;
16268 }
16269 void *thr1(void *arg)
16270 {
16271 key_serial_t key = (unsigned long)arg;
16272 char buffer[16];
16273 keyctl_read(key, buffer, 16);
16274 return 0;
16275 }
16276 int main()
16277 {
16278 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
16279 pthread_t th[5];
16280 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
16281 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
16282 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
16283 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
16284 pthread_join(th[0], 0);
16285 pthread_join(th[1], 0);
16286 pthread_join(th[2], 0);
16287 pthread_join(th[3], 0);
16288 return 0;
16289 }
16290
16291 Build as:
16292
16293 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
16294
16295 Run as:
16296
16297 while keyctl-race; do :; done
16298
16299 as it may need several iterations to crash the kernel. The crash can be
16300 summarised as:
16301
16302 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
16303 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
16304 ...
16305 Call Trace:
16306 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
16307 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
16308 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
16309
16310 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16311 Signed-off-by: David Howells <dhowells@redhat.com>
16312 Tested-by: Dmitry Vyukov <dvyukov@google.com>
16313 Cc: stable@vger.kernel.org
16314 Signed-off-by: James Morris <james.l.morris@oracle.com>
16315
16316 security/keys/keyctl.c | 18 +++++++++---------
16317 1 files changed, 9 insertions(+), 9 deletions(-)
16318
16319 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
16320 Author: Brad Spengler <spender@grsecurity.net>
16321 Date: Tue Dec 22 20:44:01 2015 -0500
16322
16323 Add new kernel command-line param: pax_size_overflow_report_only
16324 If a user triggers a size_overflow violation that makes it difficult
16325 to obtain the call trace without serial console/net console, they can
16326 use this option to provide that information to us
16327
16328 Documentation/kernel-parameters.txt | 5 +++++
16329 fs/exec.c | 12 +++++++++---
16330 init/main.c | 11 +++++++++++
16331 3 files changed, 25 insertions(+), 3 deletions(-)
16332
16333 commit 4254a8da5851df8c08cdca5c392916e8c105408d
16334 Author: WANG Cong <xiyou.wangcong@gmail.com>
16335 Date: Mon Dec 21 10:55:45 2015 -0800
16336
16337 addrconf: always initialize sysctl table data
16338
16339 When sysctl performs restrict writes, it allows to write from
16340 a middle position of a sysctl file, which requires us to initialize
16341 the table data before calling proc_dostring() for the write case.
16342
16343 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
16344 Reported-by: Sasha Levin <sasha.levin@oracle.com>
16345 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16346 Tested-by: Sasha Levin <sasha.levin@oracle.com>
16347 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16348 Signed-off-by: David S. Miller <davem@davemloft.net>
16349
16350 net/ipv6/addrconf.c | 11 ++++-------
16351 1 files changed, 4 insertions(+), 7 deletions(-)
16352
16353 commit f8002863fb06c363180637046947a78a6ccb3d33
16354 Author: WANG Cong <xiyou.wangcong@gmail.com>
16355 Date: Wed Dec 16 23:39:04 2015 -0800
16356
16357 net: check both type and procotol for tcp sockets
16358
16359 Dmitry reported the following out-of-bound access:
16360
16361 Call Trace:
16362 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
16363 mm/kasan/report.c:294
16364 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
16365 [< inline >] SYSC_setsockopt net/socket.c:1746
16366 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
16367 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
16368 arch/x86/entry/entry_64.S:185
16369
16370 This is because we mistake a raw socket as a tcp socket.
16371 We should check both sk->sk_type and sk->sk_protocol to ensure
16372 it is a tcp socket.
16373
16374 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
16375
16376 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16377 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
16378 Cc: Eric Dumazet <eric.dumazet@gmail.com>
16379 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16380 Acked-by: Willem de Bruijn <willemb@google.com>
16381 Signed-off-by: David S. Miller <davem@davemloft.net>
16382
16383 net/core/skbuff.c | 3 ++-
16384 net/core/sock.c | 3 ++-
16385 2 files changed, 4 insertions(+), 2 deletions(-)
16386
16387 commit bd6b3399804470a4ad8f34229469ca149dceba3d
16388 Author: Colin Ian King <colin.king@canonical.com>
16389 Date: Fri Dec 18 14:22:01 2015 -0800
16390
16391 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
16392
16393 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
16394 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
16395 the setting of ret after the get_proc_task call and incorrectly left it as
16396 -ESRCH. Instead, return 0 when successful.
16397
16398 Example breakage:
16399
16400 echo 0 > /proc/self/coredump_filter
16401 bash: echo: write error: No such process
16402
16403 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
16404 Signed-off-by: Colin Ian King <colin.king@canonical.com>
16405 Acked-by: Kees Cook <keescook@chromium.org>
16406 Cc: <stable@vger.kernel.org> [4.3+]
16407 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
16408 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
16409
16410 fs/proc/base.c | 1 +
16411 1 files changed, 1 insertions(+), 0 deletions(-)
16412
16413 commit b28aca2b99ed08546778355fb9402c503ff9b29e
16414 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
16415 Date: Tue Dec 22 10:23:44 2015 -0700
16416
16417 block: ensure to split after potentially bouncing a bio
16418
16419 blk_queue_bio() does split then bounce, which makes the segment
16420 counting based on pages before bouncing and could go wrong. Move
16421 the split to after bouncing, like we do for blk-mq, and the we
16422 fix the issue of having the bio count for segments be wrong.
16423
16424 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
16425 Cc: stable@vger.kernel.org
16426 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
16427 Signed-off-by: Jens Axboe <axboe@fb.com>
16428
16429 block/blk-core.c | 4 ++--
16430 1 files changed, 2 insertions(+), 2 deletions(-)
16431
16432 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
16433 Merge: f6f63ae ec72fa5
16434 Author: Brad Spengler <spender@grsecurity.net>
16435 Date: Tue Dec 22 19:46:26 2015 -0500
16436
16437 Merge branch 'pax-test' into grsec-test
16438
16439 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
16440 Author: Brad Spengler <spender@grsecurity.net>
16441 Date: Tue Dec 22 19:45:51 2015 -0500
16442
16443 Update to pax-linux-4.3.3-test13.patch:
16444 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
16445 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
16446
16447 arch/arm/mm/fault.c | 2 +-
16448 arch/x86/mm/fault.c | 2 +-
16449 fs/btrfs/extent_map.c | 8 ++++++--
16450 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
16451 4 files changed, 11 insertions(+), 5 deletions(-)
16452
16453 commit f6f63ae154cd45028add1dc41957878060d77fbf
16454 Author: Brad Spengler <spender@grsecurity.net>
16455 Date: Thu Dec 17 18:43:44 2015 -0500
16456
16457 ptrace_has_cap() checks whether the current process should be
16458 treated as having a certain capability for ptrace checks
16459 against another process. Until now, this was equivalent to
16460 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
16461
16462 However, if a root-owned process wants to enter a user
16463 namespace for some reason without knowing who owns it and
16464 therefore can't change to the namespace owner's uid and gid
16465 before entering, as soon as it has entered the namespace,
16466 the namespace owner can attach to it via ptrace and thereby
16467 gain access to its uid and gid.
16468
16469 While it is possible for the entering process to switch to
16470 the uid of a claimed namespace owner before entering,
16471 causing the attempt to enter to fail if the claimed uid is
16472 wrong, this doesn't solve the problem of determining an
16473 appropriate gid.
16474
16475 With this change, the entering process can first enter the
16476 namespace and then safely inspect the namespace's
16477 properties, e.g. through /proc/self/{uid_map,gid_map},
16478 assuming that the namespace owner doesn't have access to
16479 uid 0.
16480 Signed-off-by: Jann Horn <jann@thejh.net>
16481
16482 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
16483 1 files changed, 25 insertions(+), 5 deletions(-)
16484
16485 commit e314f0fb63020f61543b401ff594e953c2c304e5
16486 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
16487 Date: Tue Dec 15 10:46:17 2015 -0800
16488
16489 net: fix uninitialized variable issue
16490
16491 msg_iocb needs to be initialized on the recv/recvfrom path.
16492 Otherwise afalg will wrongly interpret it as an async call.
16493
16494 Cc: stable@vger.kernel.org
16495 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
16496 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
16497 Signed-off-by: David S. Miller <davem@davemloft.net>
16498
16499 net/socket.c | 1 +
16500 1 files changed, 1 insertions(+), 0 deletions(-)
16501
16502 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
16503 Merge: dfa764c 142edcf
16504 Author: Brad Spengler <spender@grsecurity.net>
16505 Date: Wed Dec 16 21:01:17 2015 -0500
16506
16507 Merge branch 'pax-test' into grsec-test
16508
16509 commit 142edcf1005a57fb8887823565cf0bafad2f313c
16510 Author: Brad Spengler <spender@grsecurity.net>
16511 Date: Wed Dec 16 21:00:57 2015 -0500
16512
16513 Update to pax-linux-4.3.3-test12.patch:
16514 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
16515 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
16516
16517 drivers/tty/n_tty.c | 16 ++++++++--------
16518 .../disable_size_overflow_hash.data | 2 ++
16519 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
16520 3 files changed, 12 insertions(+), 12 deletions(-)
16521
16522 commit dfa764cc549892a5bfc1083cac78b99032cae577
16523 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16524 Date: Tue Dec 15 22:59:12 2015 +0100
16525
16526 ipv6: automatically enable stable privacy mode if stable_secret set
16527
16528 Bjørn reported that while we switch all interfaces to privacy stable mode
16529 when setting the secret, we don't set this mode for new interfaces. This
16530 does not make sense, so change this behaviour.
16531
16532 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
16533 Reported-by: Bjørn Mork <bjorn@mork.no>
16534 Cc: Bjørn Mork <bjorn@mork.no>
16535 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16536 Signed-off-by: David S. Miller <davem@davemloft.net>
16537
16538 net/ipv6/addrconf.c | 6 ++++++
16539 1 files changed, 6 insertions(+), 0 deletions(-)
16540
16541 commit c2815a1fee03f222273e77c14e43f960da06f35a
16542 Author: Brad Spengler <spender@grsecurity.net>
16543 Date: Wed Dec 16 13:03:38 2015 -0500
16544
16545 Work around upstream limitation on the number of thread info flags causing a compilation error
16546 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
16547
16548 arch/arm/kernel/entry-common.S | 8 ++++++--
16549 1 files changed, 6 insertions(+), 2 deletions(-)
16550
16551 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
16552 Author: Brad Spengler <spender@grsecurity.net>
16553 Date: Tue Dec 15 19:03:41 2015 -0500
16554
16555 Initial import of grsecurity 3.1 for Linux 4.3.3
16556
16557 Documentation/dontdiff | 2 +
16558 Documentation/kernel-parameters.txt | 7 +
16559 Documentation/sysctl/kernel.txt | 15 +
16560 Makefile | 18 +-
16561 arch/alpha/include/asm/cache.h | 4 +-
16562 arch/alpha/kernel/osf_sys.c | 12 +-
16563 arch/arc/Kconfig | 1 +
16564 arch/arm/Kconfig | 1 +
16565 arch/arm/Kconfig.debug | 1 +
16566 arch/arm/include/asm/thread_info.h | 7 +-
16567 arch/arm/kernel/process.c | 4 +-
16568 arch/arm/kernel/ptrace.c | 9 +
16569 arch/arm/kernel/traps.c | 7 +-
16570 arch/arm/mm/Kconfig | 2 +-
16571 arch/arm/mm/fault.c | 40 +-
16572 arch/arm/mm/mmap.c | 8 +-
16573 arch/arm/net/bpf_jit_32.c | 51 +-
16574 arch/arm64/Kconfig.debug | 1 +
16575 arch/avr32/include/asm/cache.h | 4 +-
16576 arch/blackfin/Kconfig.debug | 1 +
16577 arch/blackfin/include/asm/cache.h | 3 +-
16578 arch/cris/include/arch-v10/arch/cache.h | 3 +-
16579 arch/cris/include/arch-v32/arch/cache.h | 3 +-
16580 arch/frv/include/asm/cache.h | 3 +-
16581 arch/frv/mm/elf-fdpic.c | 4 +-
16582 arch/hexagon/include/asm/cache.h | 6 +-
16583 arch/ia64/Kconfig | 1 +
16584 arch/ia64/include/asm/cache.h | 3 +-
16585 arch/ia64/kernel/sys_ia64.c | 2 +
16586 arch/ia64/mm/hugetlbpage.c | 2 +
16587 arch/m32r/include/asm/cache.h | 4 +-
16588 arch/m68k/include/asm/cache.h | 4 +-
16589 arch/metag/mm/hugetlbpage.c | 1 +
16590 arch/microblaze/include/asm/cache.h | 3 +-
16591 arch/mips/Kconfig | 1 +
16592 arch/mips/include/asm/cache.h | 3 +-
16593 arch/mips/include/asm/thread_info.h | 11 +-
16594 arch/mips/kernel/irq.c | 3 +
16595 arch/mips/kernel/ptrace.c | 9 +
16596 arch/mips/mm/mmap.c | 4 +-
16597 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
16598 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
16599 arch/openrisc/include/asm/cache.h | 4 +-
16600 arch/parisc/include/asm/cache.h | 5 +-
16601 arch/parisc/kernel/sys_parisc.c | 4 +
16602 arch/powerpc/Kconfig | 1 +
16603 arch/powerpc/include/asm/cache.h | 4 +-
16604 arch/powerpc/include/asm/thread_info.h | 5 +-
16605 arch/powerpc/kernel/Makefile | 2 +
16606 arch/powerpc/kernel/irq.c | 3 +
16607 arch/powerpc/kernel/process.c | 10 +-
16608 arch/powerpc/kernel/ptrace.c | 14 +
16609 arch/powerpc/kernel/traps.c | 5 +
16610 arch/powerpc/mm/slice.c | 2 +-
16611 arch/s390/Kconfig.debug | 1 +
16612 arch/s390/include/asm/cache.h | 4 +-
16613 arch/score/include/asm/cache.h | 4 +-
16614 arch/sh/include/asm/cache.h | 3 +-
16615 arch/sh/mm/mmap.c | 6 +-
16616 arch/sparc/include/asm/cache.h | 4 +-
16617 arch/sparc/include/asm/pgalloc_64.h | 1 +
16618 arch/sparc/include/asm/thread_info_64.h | 8 +-
16619 arch/sparc/kernel/process_32.c | 6 +-
16620 arch/sparc/kernel/process_64.c | 8 +-
16621 arch/sparc/kernel/ptrace_64.c | 14 +
16622 arch/sparc/kernel/sys_sparc_64.c | 8 +-
16623 arch/sparc/kernel/syscalls.S | 8 +-
16624 arch/sparc/kernel/traps_32.c | 8 +-
16625 arch/sparc/kernel/traps_64.c | 28 +-
16626 arch/sparc/kernel/unaligned_64.c | 2 +-
16627 arch/sparc/mm/fault_64.c | 2 +-
16628 arch/sparc/mm/hugetlbpage.c | 15 +-
16629 arch/tile/Kconfig | 1 +
16630 arch/tile/include/asm/cache.h | 3 +-
16631 arch/tile/mm/hugetlbpage.c | 2 +
16632 arch/um/include/asm/cache.h | 3 +-
16633 arch/unicore32/include/asm/cache.h | 6 +-
16634 arch/x86/Kconfig | 21 +
16635 arch/x86/Kconfig.debug | 2 +
16636 arch/x86/entry/common.c | 14 +
16637 arch/x86/entry/entry_32.S | 2 +-
16638 arch/x86/entry/entry_64.S | 2 +-
16639 arch/x86/ia32/ia32_aout.c | 2 +
16640 arch/x86/include/asm/floppy.h | 20 +-
16641 arch/x86/include/asm/fpu/types.h | 69 +-
16642 arch/x86/include/asm/io.h | 2 +-
16643 arch/x86/include/asm/page.h | 12 +-
16644 arch/x86/include/asm/paravirt_types.h | 23 +-
16645 arch/x86/include/asm/processor.h | 12 +-
16646 arch/x86/include/asm/thread_info.h | 6 +-
16647 arch/x86/include/asm/uaccess.h | 2 +-
16648 arch/x86/kernel/dumpstack.c | 10 +-
16649 arch/x86/kernel/dumpstack_32.c | 2 +-
16650 arch/x86/kernel/dumpstack_64.c | 2 +-
16651 arch/x86/kernel/ioport.c | 13 +
16652 arch/x86/kernel/irq_32.c | 3 +
16653 arch/x86/kernel/irq_64.c | 4 +
16654 arch/x86/kernel/ldt.c | 18 +
16655 arch/x86/kernel/msr.c | 10 +
16656 arch/x86/kernel/ptrace.c | 14 +
16657 arch/x86/kernel/signal.c | 9 +-
16658 arch/x86/kernel/sys_i386_32.c | 9 +-
16659 arch/x86/kernel/sys_x86_64.c | 8 +-
16660 arch/x86/kernel/traps.c | 5 +
16661 arch/x86/kernel/verify_cpu.S | 1 +
16662 arch/x86/kernel/vm86_32.c | 15 +
16663 arch/x86/kvm/svm.c | 14 +-
16664 arch/x86/mm/fault.c | 12 +-
16665 arch/x86/mm/hugetlbpage.c | 15 +-
16666 arch/x86/mm/init.c | 66 +-
16667 arch/x86/mm/init_32.c | 6 +-
16668 arch/x86/net/bpf_jit_comp.c | 4 +
16669 arch/x86/platform/efi/efi_64.c | 2 +-
16670 arch/x86/xen/Kconfig | 1 +
16671 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
16672 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
16673 crypto/ablkcipher.c | 2 +-
16674 crypto/blkcipher.c | 2 +-
16675 crypto/scatterwalk.c | 10 +-
16676 drivers/acpi/acpica/hwxfsleep.c | 11 +-
16677 drivers/acpi/custom_method.c | 4 +
16678 drivers/block/cciss.h | 30 +-
16679 drivers/block/smart1,2.h | 40 +-
16680 drivers/cdrom/cdrom.c | 2 +-
16681 drivers/char/Kconfig | 4 +-
16682 drivers/char/genrtc.c | 1 +
16683 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
16684 drivers/char/mem.c | 17 +
16685 drivers/char/random.c | 5 +-
16686 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
16687 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
16688 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
16689 drivers/crypto/talitos.c | 2 +-
16690 drivers/firewire/ohci.c | 4 +
16691 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
16692 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
16693 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
16694 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
16695 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
16696 drivers/hid/hid-wiimote-debug.c | 2 +-
16697 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
16698 drivers/iommu/Kconfig | 1 +
16699 drivers/iommu/amd_iommu.c | 14 +-
16700 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
16701 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
16702 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
16703 drivers/isdn/hisax/config.c | 2 +-
16704 drivers/isdn/hisax/hfc_pci.c | 2 +-
16705 drivers/isdn/hisax/hfc_sx.c | 2 +-
16706 drivers/isdn/hisax/q931.c | 6 +-
16707 drivers/isdn/i4l/isdn_concap.c | 6 +-
16708 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
16709 drivers/md/bcache/Kconfig | 1 +
16710 drivers/md/raid5.c | 8 +
16711 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
16712 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
16713 drivers/media/platform/vivid/vivid-osd.c | 1 +
16714 drivers/media/radio/radio-cadet.c | 5 +-
16715 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
16716 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
16717 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
16718 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
16719 drivers/message/fusion/mptbase.c | 9 +
16720 drivers/misc/sgi-xp/xp_main.c | 12 +-
16721 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
16722 drivers/net/ppp/pppoe.c | 14 +-
16723 drivers/net/ppp/pptp.c | 6 +
16724 drivers/net/slip/slhc.c | 3 +
16725 drivers/net/wan/lmc/lmc_media.c | 97 +-
16726 drivers/net/wan/x25_asy.c | 6 +-
16727 drivers/net/wan/z85230.c | 24 +-
16728 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
16729 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
16730 drivers/pci/pci-sysfs.c | 2 +-
16731 drivers/pci/proc.c | 9 +
16732 drivers/platform/x86/asus-wmi.c | 12 +
16733 drivers/rtc/rtc-dev.c | 3 +
16734 drivers/scsi/bfa/bfa_fcs.c | 19 +-
16735 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
16736 drivers/scsi/bfa/bfa_modules.h | 12 +-
16737 drivers/scsi/hpsa.h | 40 +-
16738 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
16739 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
16740 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
16741 drivers/target/target_core_sbc.c | 17 +-
16742 drivers/target/target_core_transport.c | 14 +-
16743 drivers/tty/serial/uartlite.c | 4 +-
16744 drivers/tty/sysrq.c | 2 +-
16745 drivers/tty/vt/keyboard.c | 22 +-
16746 drivers/uio/uio.c | 6 +-
16747 drivers/usb/core/hub.c | 5 +
16748 drivers/usb/gadget/function/f_uac1.c | 1 +
16749 drivers/usb/gadget/function/u_uac1.c | 1 +
16750 drivers/usb/host/hwa-hc.c | 9 +-
16751 drivers/usb/usbip/vhci_sysfs.c | 2 +-
16752 drivers/video/fbdev/arcfb.c | 2 +-
16753 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
16754 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
16755 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
16756 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
16757 drivers/xen/xenfs/xenstored.c | 5 +
16758 firmware/Makefile | 2 +
16759 firmware/WHENCE | 20 +-
16760 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
16761 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
16762 fs/9p/vfs_inode.c | 4 +-
16763 fs/attr.c | 1 +
16764 fs/autofs4/waitq.c | 9 +
16765 fs/binfmt_aout.c | 7 +
16766 fs/binfmt_elf.c | 50 +-
16767 fs/compat.c | 20 +-
16768 fs/coredump.c | 17 +-
16769 fs/dcache.c | 3 +
16770 fs/debugfs/inode.c | 11 +-
16771 fs/exec.c | 219 +-
16772 fs/ext2/balloc.c | 4 +-
16773 fs/ext2/super.c | 8 +-
16774 fs/ext4/balloc.c | 4 +-
16775 fs/fcntl.c | 4 +
16776 fs/fhandle.c | 3 +-
16777 fs/file.c | 4 +
16778 fs/filesystems.c | 4 +
16779 fs/fs_struct.c | 20 +-
16780 fs/hugetlbfs/inode.c | 5 +-
16781 fs/inode.c | 8 +-
16782 fs/kernfs/dir.c | 6 +
16783 fs/mount.h | 4 +-
16784 fs/namei.c | 286 +-
16785 fs/namespace.c | 24 +
16786 fs/nfsd/nfscache.c | 2 +-
16787 fs/open.c | 38 +
16788 fs/overlayfs/inode.c | 11 +-
16789 fs/overlayfs/super.c | 6 +-
16790 fs/pipe.c | 2 +-
16791 fs/posix_acl.c | 15 +-
16792 fs/proc/Kconfig | 10 +-
16793 fs/proc/array.c | 69 +-
16794 fs/proc/base.c | 186 +-
16795 fs/proc/cmdline.c | 4 +
16796 fs/proc/devices.c | 4 +
16797 fs/proc/fd.c | 17 +-
16798 fs/proc/generic.c | 64 +
16799 fs/proc/inode.c | 17 +
16800 fs/proc/internal.h | 11 +-
16801 fs/proc/interrupts.c | 4 +
16802 fs/proc/kcore.c | 3 +
16803 fs/proc/meminfo.c | 7 +-
16804 fs/proc/namespaces.c | 4 +-
16805 fs/proc/proc_net.c | 31 +
16806 fs/proc/proc_sysctl.c | 52 +-
16807 fs/proc/root.c | 8 +
16808 fs/proc/stat.c | 69 +-
16809 fs/proc/task_mmu.c | 66 +-
16810 fs/readdir.c | 19 +
16811 fs/reiserfs/item_ops.c | 24 +-
16812 fs/reiserfs/super.c | 4 +
16813 fs/select.c | 2 +
16814 fs/seq_file.c | 30 +-
16815 fs/splice.c | 8 +
16816 fs/stat.c | 20 +-
16817 fs/sysfs/dir.c | 30 +-
16818 fs/sysv/inode.c | 11 +-
16819 fs/utimes.c | 7 +
16820 fs/xattr.c | 26 +-
16821 grsecurity/Kconfig | 1182 ++++
16822 grsecurity/Makefile | 54 +
16823 grsecurity/gracl.c | 2757 +++++++++
16824 grsecurity/gracl_alloc.c | 105 +
16825 grsecurity/gracl_cap.c | 127 +
16826 grsecurity/gracl_compat.c | 269 +
16827 grsecurity/gracl_fs.c | 448 ++
16828 grsecurity/gracl_ip.c | 386 ++
16829 grsecurity/gracl_learn.c | 207 +
16830 grsecurity/gracl_policy.c | 1786 ++++++
16831 grsecurity/gracl_res.c | 68 +
16832 grsecurity/gracl_segv.c | 304 +
16833 grsecurity/gracl_shm.c | 40 +
16834 grsecurity/grsec_chdir.c | 19 +
16835 grsecurity/grsec_chroot.c | 467 ++
16836 grsecurity/grsec_disabled.c | 445 ++
16837 grsecurity/grsec_exec.c | 189 +
16838 grsecurity/grsec_fifo.c | 26 +
16839 grsecurity/grsec_fork.c | 23 +
16840 grsecurity/grsec_init.c | 290 +
16841 grsecurity/grsec_ipc.c | 48 +
16842 grsecurity/grsec_link.c | 65 +
16843 grsecurity/grsec_log.c | 340 +
16844 grsecurity/grsec_mem.c | 48 +
16845 grsecurity/grsec_mount.c | 65 +
16846 grsecurity/grsec_pax.c | 47 +
16847 grsecurity/grsec_proc.c | 20 +
16848 grsecurity/grsec_ptrace.c | 30 +
16849 grsecurity/grsec_sig.c | 236 +
16850 grsecurity/grsec_sock.c | 244 +
16851 grsecurity/grsec_sysctl.c | 488 ++
16852 grsecurity/grsec_time.c | 16 +
16853 grsecurity/grsec_tpe.c | 78 +
16854 grsecurity/grsec_usb.c | 15 +
16855 grsecurity/grsum.c | 64 +
16856 include/linux/binfmts.h | 5 +-
16857 include/linux/bitops.h | 2 +-
16858 include/linux/capability.h | 13 +
16859 include/linux/compiler-gcc.h | 5 +
16860 include/linux/compiler.h | 8 +
16861 include/linux/cred.h | 8 +-
16862 include/linux/dcache.h | 5 +-
16863 include/linux/fs.h | 24 +-
16864 include/linux/fs_struct.h | 2 +-
16865 include/linux/fsnotify.h | 6 +
16866 include/linux/gracl.h | 342 +
16867 include/linux/gracl_compat.h | 156 +
16868 include/linux/gralloc.h | 9 +
16869 include/linux/grdefs.h | 140 +
16870 include/linux/grinternal.h | 230 +
16871 include/linux/grmsg.h | 118 +
16872 include/linux/grsecurity.h | 255 +
16873 include/linux/grsock.h | 19 +
16874 include/linux/ipc.h | 2 +-
16875 include/linux/ipc_namespace.h | 2 +-
16876 include/linux/kallsyms.h | 18 +-
16877 include/linux/kmod.h | 5 +
16878 include/linux/kobject.h | 2 +-
16879 include/linux/lsm_hooks.h | 4 +-
16880 include/linux/mm.h | 12 +
16881 include/linux/mm_types.h | 4 +-
16882 include/linux/module.h | 5 +-
16883 include/linux/mount.h | 2 +-
16884 include/linux/msg.h | 2 +-
16885 include/linux/netfilter/xt_gradm.h | 9 +
16886 include/linux/path.h | 4 +-
16887 include/linux/perf_event.h | 13 +-
16888 include/linux/pid_namespace.h | 2 +-
16889 include/linux/printk.h | 2 +-
16890 include/linux/proc_fs.h | 22 +-
16891 include/linux/proc_ns.h | 2 +-
16892 include/linux/ptrace.h | 24 +-
16893 include/linux/random.h | 2 +-
16894 include/linux/rbtree_augmented.h | 4 +-
16895 include/linux/scatterlist.h | 12 +-
16896 include/linux/sched.h | 114 +-
16897 include/linux/security.h | 1 +
16898 include/linux/sem.h | 2 +-
16899 include/linux/seq_file.h | 5 +
16900 include/linux/shm.h | 6 +-
16901 include/linux/skbuff.h | 3 +
16902 include/linux/slab.h | 9 -
16903 include/linux/sysctl.h | 8 +-
16904 include/linux/thread_info.h | 6 +-
16905 include/linux/tty.h | 2 +-
16906 include/linux/tty_driver.h | 4 +-
16907 include/linux/uidgid.h | 5 +
16908 include/linux/user_namespace.h | 2 +-
16909 include/linux/utsname.h | 2 +-
16910 include/linux/vermagic.h | 16 +-
16911 include/linux/vmalloc.h | 20 +-
16912 include/net/af_unix.h | 2 +-
16913 include/net/dst.h | 33 +
16914 include/net/ip.h | 2 +-
16915 include/net/neighbour.h | 2 +-
16916 include/net/net_namespace.h | 2 +-
16917 include/net/sock.h | 4 +-
16918 include/target/target_core_base.h | 2 +-
16919 include/trace/events/fs.h | 53 +
16920 include/uapi/linux/personality.h | 1 +
16921 init/Kconfig | 4 +-
16922 init/main.c | 35 +-
16923 ipc/mqueue.c | 1 +
16924 ipc/msg.c | 3 +-
16925 ipc/sem.c | 3 +-
16926 ipc/shm.c | 26 +-
16927 ipc/util.c | 6 +
16928 kernel/auditsc.c | 2 +-
16929 kernel/bpf/syscall.c | 8 +-
16930 kernel/capability.c | 41 +-
16931 kernel/cgroup.c | 5 +-
16932 kernel/compat.c | 1 +
16933 kernel/configs.c | 11 +
16934 kernel/cred.c | 112 +-
16935 kernel/events/core.c | 16 +-
16936 kernel/exit.c | 10 +-
16937 kernel/fork.c | 86 +-
16938 kernel/futex.c | 6 +-
16939 kernel/futex_compat.c | 2 +-
16940 kernel/kallsyms.c | 9 +
16941 kernel/kcmp.c | 8 +-
16942 kernel/kexec_core.c | 2 +-
16943 kernel/kmod.c | 95 +-
16944 kernel/kprobes.c | 7 +-
16945 kernel/ksysfs.c | 2 +
16946 kernel/locking/lockdep_proc.c | 10 +-
16947 kernel/module.c | 108 +-
16948 kernel/panic.c | 4 +-
16949 kernel/pid.c | 23 +-
16950 kernel/power/Kconfig | 2 +
16951 kernel/printk/printk.c | 20 +-
16952 kernel/ptrace.c | 56 +-
16953 kernel/resource.c | 10 +
16954 kernel/sched/core.c | 11 +-
16955 kernel/signal.c | 37 +-
16956 kernel/sys.c | 64 +-
16957 kernel/sysctl.c | 172 +-
16958 kernel/taskstats.c | 6 +
16959 kernel/time/posix-timers.c | 8 +
16960 kernel/time/time.c | 5 +
16961 kernel/time/timekeeping.c | 3 +
16962 kernel/time/timer_list.c | 13 +-
16963 kernel/time/timer_stats.c | 10 +-
16964 kernel/trace/Kconfig | 2 +
16965 kernel/trace/trace_syscalls.c | 8 +
16966 kernel/user_namespace.c | 15 +
16967 lib/Kconfig.debug | 13 +-
16968 lib/Kconfig.kasan | 2 +-
16969 lib/is_single_threaded.c | 3 +
16970 lib/list_debug.c | 65 +-
16971 lib/nlattr.c | 2 +
16972 lib/rbtree.c | 4 +-
16973 lib/vsprintf.c | 39 +-
16974 localversion-grsec | 1 +
16975 mm/Kconfig | 8 +-
16976 mm/Kconfig.debug | 1 +
16977 mm/filemap.c | 1 +
16978 mm/kmemleak.c | 4 +-
16979 mm/memory.c | 2 +-
16980 mm/mempolicy.c | 12 +-
16981 mm/migrate.c | 3 +-
16982 mm/mlock.c | 6 +-
16983 mm/mmap.c | 93 +-
16984 mm/mprotect.c | 8 +
16985 mm/oom_kill.c | 28 +-
16986 mm/page_alloc.c | 2 +-
16987 mm/process_vm_access.c | 8 +-
16988 mm/shmem.c | 36 +-
16989 mm/slab.c | 14 +-
16990 mm/slab_common.c | 2 +-
16991 mm/slob.c | 12 +
16992 mm/slub.c | 33 +-
16993 mm/util.c | 3 +
16994 mm/vmalloc.c | 129 +-
16995 mm/vmstat.c | 29 +-
16996 net/appletalk/atalk_proc.c | 2 +-
16997 net/atm/lec.c | 6 +-
16998 net/atm/mpoa_caches.c | 42 +-
16999 net/bluetooth/sco.c | 3 +
17000 net/can/bcm.c | 2 +-
17001 net/can/proc.c | 2 +-
17002 net/core/dev_ioctl.c | 7 +-
17003 net/core/filter.c | 8 +-
17004 net/core/net-procfs.c | 17 +-
17005 net/core/pktgen.c | 2 +-
17006 net/core/sock.c | 3 +-
17007 net/core/sysctl_net_core.c | 2 +-
17008 net/decnet/dn_dev.c | 2 +-
17009 net/ipv4/devinet.c | 6 +-
17010 net/ipv4/inet_hashtables.c | 4 +
17011 net/ipv4/ip_input.c | 7 +
17012 net/ipv4/ip_sockglue.c | 3 +-
17013 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
17014 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
17015 net/ipv4/route.c | 6 +-
17016 net/ipv4/tcp_input.c | 4 +-
17017 net/ipv4/tcp_ipv4.c | 29 +-
17018 net/ipv4/tcp_minisocks.c | 9 +-
17019 net/ipv4/tcp_timer.c | 11 +
17020 net/ipv4/udp.c | 24 +
17021 net/ipv6/addrconf.c | 13 +-
17022 net/ipv6/proc.c | 2 +-
17023 net/ipv6/tcp_ipv6.c | 26 +-
17024 net/ipv6/udp.c | 7 +
17025 net/ipx/ipx_proc.c | 2 +-
17026 net/irda/irproc.c | 2 +-
17027 net/llc/llc_proc.c | 2 +-
17028 net/netfilter/Kconfig | 10 +
17029 net/netfilter/Makefile | 1 +
17030 net/netfilter/nf_conntrack_core.c | 8 +
17031 net/netfilter/xt_gradm.c | 51 +
17032 net/netfilter/xt_hashlimit.c | 4 +-
17033 net/netfilter/xt_recent.c | 2 +-
17034 net/sched/sch_api.c | 2 +-
17035 net/sctp/socket.c | 4 +-
17036 net/socket.c | 75 +-
17037 net/sunrpc/Kconfig | 1 +
17038 net/sunrpc/cache.c | 2 +-
17039 net/sunrpc/stats.c | 2 +-
17040 net/sysctl_net.c | 2 +-
17041 net/unix/af_unix.c | 52 +-
17042 net/vmw_vsock/vmci_transport_notify.c | 30 +-
17043 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
17044 net/x25/sysctl_net_x25.c | 2 +-
17045 net/x25/x25_proc.c | 2 +-
17046 scripts/package/Makefile | 2 +-
17047 scripts/package/mkspec | 41 +-
17048 security/Kconfig | 369 +-
17049 security/apparmor/file.c | 4 +-
17050 security/apparmor/lsm.c | 8 +-
17051 security/commoncap.c | 36 +-
17052 security/min_addr.c | 2 +
17053 security/smack/smack_lsm.c | 8 +-
17054 security/tomoyo/file.c | 12 +-
17055 security/tomoyo/mount.c | 4 +
17056 security/tomoyo/tomoyo.c | 20 +-
17057 security/yama/Kconfig | 2 +-
17058 security/yama/yama_lsm.c | 4 +-
17059 sound/synth/emux/emux_seq.c | 14 +-
17060 sound/usb/line6/driver.c | 40 +-
17061 sound/usb/line6/toneport.c | 12 +-
17062 tools/gcc/.gitignore | 1 +
17063 tools/gcc/Makefile | 12 +
17064 tools/gcc/gen-random-seed.sh | 8 +
17065 tools/gcc/randomize_layout_plugin.c | 930 +++
17066 tools/gcc/size_overflow_plugin/.gitignore | 1 +
17067 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
17068 511 files changed, 32631 insertions(+), 3196 deletions(-)
17069
17070 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
17071 Author: Brad Spengler <spender@grsecurity.net>
17072 Date: Tue Dec 15 14:31:49 2015 -0500
17073
17074 Update to pax-linux-4.3.3-test11.patch:
17075 - fixed a few compile regressions with the recent plugin changes, reported by spender
17076 - updated the size overflow hash table
17077
17078 tools/gcc/latent_entropy_plugin.c | 2 +-
17079 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
17080 tools/gcc/stackleak_plugin.c | 2 +-
17081 tools/gcc/structleak_plugin.c | 6 +--
17082 4 files changed, 60 insertions(+), 16 deletions(-)
17083
17084 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
17085 Author: Brad Spengler <spender@grsecurity.net>
17086 Date: Tue Dec 15 11:50:24 2015 -0500
17087
17088 Apply structleak ICE fix for gcc < 4.9
17089
17090 tools/gcc/structleak_plugin.c | 4 ++++
17091 1 files changed, 4 insertions(+), 0 deletions(-)
17092
17093 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
17094 Author: Brad Spengler <spender@grsecurity.net>
17095 Date: Tue Dec 15 07:57:06 2015 -0500
17096
17097 Update to pax-linux-4.3.1-test10.patch:
17098 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
17099 - Emese regenerated the size overflow hash tables for 4.3
17100 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
17101 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
17102
17103 arch/x86/entry/entry_64.S | 2 +-
17104 arch/x86/entry/entry_64_compat.S | 15 +-
17105 scripts/package/builddeb | 2 +-
17106 tools/gcc/initify_plugin.c | 11 +-
17107 tools/gcc/latent_entropy_plugin.c | 20 +-
17108 .../disable_size_overflow_hash.data | 4 +
17109 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
17110 tools/gcc/stackleak_plugin.c | 26 +-
17111 tools/gcc/structleak_plugin.c | 21 +-
17112 9 files changed, 3079 insertions(+), 2367 deletions(-)
17113
17114 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
17115 Merge: b5847e6 3548341
17116 Author: Brad Spengler <spender@grsecurity.net>
17117 Date: Tue Dec 15 07:47:56 2015 -0500
17118
17119 Merge branch 'linux-4.3.y' into pax-4_3
17120
17121 Conflicts:
17122 net/unix/af_unix.c
17123
17124 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
17125 Author: Brad Spengler <spender@grsecurity.net>
17126 Date: Wed Dec 9 23:11:36 2015 -0500
17127
17128 Update to pax-linux-4.3.1-test9.patch:
17129 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
17130 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
17131 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
17132 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
17133 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
17134 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
17135 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
17136
17137 Makefile | 6 +
17138 arch/x86/include/asm/compat.h | 4 +
17139 arch/x86/include/asm/dma.h | 2 +
17140 arch/x86/include/asm/pmem.h | 2 +-
17141 arch/x86/include/asm/uaccess.h | 20 +-
17142 arch/x86/kernel/apic/vector.c | 6 +-
17143 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
17144 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
17145 arch/x86/kernel/head_64.S | 1 -
17146 arch/x86/kvm/i8259.c | 10 +-
17147 arch/x86/kvm/ioapic.c | 2 +
17148 arch/x86/kvm/x86.c | 2 +
17149 arch/x86/lib/usercopy_64.c | 2 +-
17150 arch/x86/mm/mpx.c | 4 +-
17151 arch/x86/mm/pageattr.c | 7 +
17152 drivers/base/devres.c | 4 +-
17153 drivers/base/power/runtime.c | 6 +-
17154 drivers/base/regmap/regmap.c | 4 +-
17155 drivers/block/drbd/drbd_receiver.c | 4 +-
17156 drivers/block/drbd/drbd_worker.c | 6 +-
17157 drivers/char/virtio_console.c | 6 +-
17158 drivers/md/dm.c | 12 +-
17159 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
17160 drivers/net/macvtap.c | 4 +-
17161 drivers/video/fbdev/core/fbmem.c | 10 +-
17162 fs/compat.c | 3 +-
17163 fs/coredump.c | 2 +-
17164 fs/dcache.c | 13 +-
17165 fs/fhandle.c | 2 +-
17166 fs/file.c | 14 +-
17167 fs/fs-writeback.c | 11 +-
17168 fs/overlayfs/copy_up.c | 2 +-
17169 fs/readdir.c | 3 +-
17170 fs/super.c | 3 +-
17171 include/linux/compiler.h | 36 ++-
17172 include/linux/rcupdate.h | 8 +
17173 include/linux/sched.h | 4 +-
17174 include/linux/seqlock.h | 10 +
17175 include/linux/spinlock.h | 17 +-
17176 include/linux/srcu.h | 5 +-
17177 include/linux/syscalls.h | 2 +-
17178 include/linux/writeback.h | 3 +-
17179 include/uapi/linux/swab.h | 6 +-
17180 ipc/ipc_sysctl.c | 6 +
17181 kernel/exit.c | 25 +-
17182 kernel/resource.c | 4 +-
17183 kernel/signal.c | 12 +-
17184 kernel/user.c | 2 +-
17185 kernel/workqueue.c | 6 +-
17186 lib/rhashtable.c | 4 +-
17187 net/compat.c | 2 +-
17188 net/ipv4/xfrm4_mode_transport.c | 2 +-
17189 security/keys/internal.h | 8 +-
17190 security/keys/keyring.c | 4 -
17191 sound/core/seq/seq_clientmgr.c | 8 +-
17192 sound/core/seq/seq_compat.c | 2 +-
17193 sound/core/seq/seq_memory.c | 6 +-
17194 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
17195 tools/gcc/gcc-common.h | 1 +
17196 tools/gcc/initify_plugin.c | 33 ++-
17197 .../disable_size_overflow_hash.data | 1 +
17198 .../size_overflow_plugin/size_overflow_hash.data | 1 -
17199 62 files changed, 708 insertions(+), 140 deletions(-)
17200
17201 commit f2634c2f6995f4231616f24ed016f890c701f939
17202 Merge: 1241bff 5f8b236
17203 Author: Brad Spengler <spender@grsecurity.net>
17204 Date: Wed Dec 9 21:50:47 2015 -0500
17205
17206 Merge branch 'linux-4.3.y' into pax-4_3
17207
17208 Conflicts:
17209 arch/x86/kernel/fpu/xstate.c
17210 arch/x86/kernel/head_64.S
17211
17212 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
17213 Author: Brad Spengler <spender@grsecurity.net>
17214 Date: Sun Dec 6 08:44:56 2015 -0500
17215
17216 Update to pax-linux-4.3-test8.patch:
17217 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
17218 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
17219 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
17220 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
17221
17222 Makefile | 5 +++
17223 drivers/md/md.c | 5 ++-
17224 drivers/md/raid1.c | 2 +-
17225 fs/proc/task_mmu.c | 3 ++
17226 .../disable_size_overflow_hash.data | 4 ++-
17227 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
17228 .../size_overflow_plugin/size_overflow_hash.data | 2 -
17229 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
17230 8 files changed, 43 insertions(+), 12 deletions(-)
17231
17232 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
17233 Author: Brad Spengler <spender@grsecurity.net>
17234 Date: Fri Dec 4 14:24:12 2015 -0500
17235
17236 Initial import of pax-linux-4.3-test7.patch
17237
17238 Documentation/dontdiff | 47 +-
17239 Documentation/kbuild/makefiles.txt | 39 +-
17240 Documentation/kernel-parameters.txt | 28 +
17241 Makefile | 108 +-
17242 arch/alpha/include/asm/atomic.h | 10 +
17243 arch/alpha/include/asm/elf.h | 7 +
17244 arch/alpha/include/asm/pgalloc.h | 6 +
17245 arch/alpha/include/asm/pgtable.h | 11 +
17246 arch/alpha/kernel/module.c | 2 +-
17247 arch/alpha/kernel/osf_sys.c | 8 +-
17248 arch/alpha/mm/fault.c | 141 +-
17249 arch/arm/Kconfig | 2 +-
17250 arch/arm/include/asm/atomic.h | 320 +-
17251 arch/arm/include/asm/cache.h | 5 +-
17252 arch/arm/include/asm/cacheflush.h | 2 +-
17253 arch/arm/include/asm/checksum.h | 14 +-
17254 arch/arm/include/asm/cmpxchg.h | 4 +
17255 arch/arm/include/asm/cpuidle.h | 2 +-
17256 arch/arm/include/asm/domain.h | 22 +-
17257 arch/arm/include/asm/elf.h | 9 +-
17258 arch/arm/include/asm/fncpy.h | 2 +
17259 arch/arm/include/asm/futex.h | 10 +
17260 arch/arm/include/asm/kmap_types.h | 2 +-
17261 arch/arm/include/asm/mach/dma.h | 2 +-
17262 arch/arm/include/asm/mach/map.h | 16 +-
17263 arch/arm/include/asm/outercache.h | 2 +-
17264 arch/arm/include/asm/page.h | 3 +-
17265 arch/arm/include/asm/pgalloc.h | 20 +
17266 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
17267 arch/arm/include/asm/pgtable-2level.h | 3 +
17268 arch/arm/include/asm/pgtable-3level.h | 3 +
17269 arch/arm/include/asm/pgtable.h | 54 +-
17270 arch/arm/include/asm/smp.h | 2 +-
17271 arch/arm/include/asm/tls.h | 3 +
17272 arch/arm/include/asm/uaccess.h | 79 +-
17273 arch/arm/include/uapi/asm/ptrace.h | 2 +-
17274 arch/arm/kernel/armksyms.c | 2 +-
17275 arch/arm/kernel/cpuidle.c | 2 +-
17276 arch/arm/kernel/entry-armv.S | 109 +-
17277 arch/arm/kernel/entry-common.S | 40 +-
17278 arch/arm/kernel/entry-header.S | 55 +
17279 arch/arm/kernel/fiq.c | 3 +
17280 arch/arm/kernel/module-plts.c | 7 +-
17281 arch/arm/kernel/module.c | 38 +-
17282 arch/arm/kernel/patch.c | 2 +
17283 arch/arm/kernel/process.c | 90 +-
17284 arch/arm/kernel/reboot.c | 1 +
17285 arch/arm/kernel/setup.c | 20 +-
17286 arch/arm/kernel/signal.c | 35 +-
17287 arch/arm/kernel/smp.c | 2 +-
17288 arch/arm/kernel/tcm.c | 4 +-
17289 arch/arm/kernel/vmlinux.lds.S | 6 +-
17290 arch/arm/kvm/arm.c | 8 +-
17291 arch/arm/lib/copy_page.S | 1 +
17292 arch/arm/lib/csumpartialcopyuser.S | 4 +-
17293 arch/arm/lib/delay.c | 2 +-
17294 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
17295 arch/arm/mach-exynos/suspend.c | 6 +-
17296 arch/arm/mach-mvebu/coherency.c | 4 +-
17297 arch/arm/mach-omap2/board-n8x0.c | 2 +-
17298 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
17299 arch/arm/mach-omap2/omap-smp.c | 1 +
17300 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
17301 arch/arm/mach-omap2/omap_device.c | 4 +-
17302 arch/arm/mach-omap2/omap_device.h | 4 +-
17303 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
17304 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
17305 arch/arm/mach-omap2/wd_timer.c | 6 +-
17306 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
17307 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
17308 arch/arm/mach-tegra/irq.c | 1 +
17309 arch/arm/mach-ux500/pm.c | 1 +
17310 arch/arm/mach-zynq/platsmp.c | 1 +
17311 arch/arm/mm/Kconfig | 6 +-
17312 arch/arm/mm/alignment.c | 8 +
17313 arch/arm/mm/cache-l2x0.c | 2 +-
17314 arch/arm/mm/context.c | 10 +-
17315 arch/arm/mm/fault.c | 146 +
17316 arch/arm/mm/fault.h | 12 +
17317 arch/arm/mm/init.c | 39 +
17318 arch/arm/mm/ioremap.c | 4 +-
17319 arch/arm/mm/mmap.c | 30 +-
17320 arch/arm/mm/mmu.c | 162 +-
17321 arch/arm/net/bpf_jit_32.c | 3 +
17322 arch/arm/plat-iop/setup.c | 2 +-
17323 arch/arm/plat-omap/sram.c | 2 +
17324 arch/arm64/include/asm/atomic.h | 10 +
17325 arch/arm64/include/asm/percpu.h | 8 +-
17326 arch/arm64/include/asm/pgalloc.h | 5 +
17327 arch/arm64/include/asm/uaccess.h | 1 +
17328 arch/arm64/mm/dma-mapping.c | 2 +-
17329 arch/avr32/include/asm/elf.h | 8 +-
17330 arch/avr32/include/asm/kmap_types.h | 4 +-
17331 arch/avr32/mm/fault.c | 27 +
17332 arch/frv/include/asm/atomic.h | 10 +
17333 arch/frv/include/asm/kmap_types.h | 2 +-
17334 arch/frv/mm/elf-fdpic.c | 3 +-
17335 arch/ia64/Makefile | 1 +
17336 arch/ia64/include/asm/atomic.h | 10 +
17337 arch/ia64/include/asm/elf.h | 7 +
17338 arch/ia64/include/asm/pgalloc.h | 12 +
17339 arch/ia64/include/asm/pgtable.h | 13 +-
17340 arch/ia64/include/asm/spinlock.h | 2 +-
17341 arch/ia64/include/asm/uaccess.h | 27 +-
17342 arch/ia64/kernel/module.c | 45 +-
17343 arch/ia64/kernel/palinfo.c | 2 +-
17344 arch/ia64/kernel/sys_ia64.c | 7 +
17345 arch/ia64/kernel/vmlinux.lds.S | 2 +-
17346 arch/ia64/mm/fault.c | 32 +-
17347 arch/ia64/mm/init.c | 15 +-
17348 arch/m32r/lib/usercopy.c | 6 +
17349 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
17350 arch/mips/include/asm/atomic.h | 368 +-
17351 arch/mips/include/asm/elf.h | 7 +
17352 arch/mips/include/asm/exec.h | 2 +-
17353 arch/mips/include/asm/hw_irq.h | 2 +-
17354 arch/mips/include/asm/local.h | 57 +
17355 arch/mips/include/asm/page.h | 2 +-
17356 arch/mips/include/asm/pgalloc.h | 5 +
17357 arch/mips/include/asm/pgtable.h | 3 +
17358 arch/mips/include/asm/uaccess.h | 1 +
17359 arch/mips/kernel/binfmt_elfn32.c | 7 +
17360 arch/mips/kernel/binfmt_elfo32.c | 7 +
17361 arch/mips/kernel/irq-gt641xx.c | 2 +-
17362 arch/mips/kernel/irq.c | 6 +-
17363 arch/mips/kernel/pm-cps.c | 2 +-
17364 arch/mips/kernel/process.c | 12 -
17365 arch/mips/kernel/sync-r4k.c | 24 +-
17366 arch/mips/kernel/traps.c | 13 +-
17367 arch/mips/mm/fault.c | 25 +
17368 arch/mips/mm/mmap.c | 51 +-
17369 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
17370 arch/mips/sni/rm200.c | 2 +-
17371 arch/mips/vr41xx/common/icu.c | 2 +-
17372 arch/mips/vr41xx/common/irq.c | 4 +-
17373 arch/parisc/include/asm/atomic.h | 10 +
17374 arch/parisc/include/asm/elf.h | 7 +
17375 arch/parisc/include/asm/pgalloc.h | 6 +
17376 arch/parisc/include/asm/pgtable.h | 11 +
17377 arch/parisc/include/asm/uaccess.h | 4 +-
17378 arch/parisc/kernel/module.c | 50 +-
17379 arch/parisc/kernel/sys_parisc.c | 15 +
17380 arch/parisc/kernel/traps.c | 4 +-
17381 arch/parisc/mm/fault.c | 140 +-
17382 arch/powerpc/include/asm/atomic.h | 329 +-
17383 arch/powerpc/include/asm/elf.h | 12 +
17384 arch/powerpc/include/asm/exec.h | 2 +-
17385 arch/powerpc/include/asm/kmap_types.h | 2 +-
17386 arch/powerpc/include/asm/local.h | 46 +
17387 arch/powerpc/include/asm/mman.h | 2 +-
17388 arch/powerpc/include/asm/page.h | 8 +-
17389 arch/powerpc/include/asm/page_64.h | 7 +-
17390 arch/powerpc/include/asm/pgalloc-64.h | 7 +
17391 arch/powerpc/include/asm/pgtable.h | 1 +
17392 arch/powerpc/include/asm/pte-hash32.h | 1 +
17393 arch/powerpc/include/asm/reg.h | 1 +
17394 arch/powerpc/include/asm/smp.h | 2 +-
17395 arch/powerpc/include/asm/spinlock.h | 42 +-
17396 arch/powerpc/include/asm/uaccess.h | 141 +-
17397 arch/powerpc/kernel/Makefile | 5 +
17398 arch/powerpc/kernel/exceptions-64e.S | 4 +-
17399 arch/powerpc/kernel/exceptions-64s.S | 2 +-
17400 arch/powerpc/kernel/module_32.c | 15 +-
17401 arch/powerpc/kernel/process.c | 46 -
17402 arch/powerpc/kernel/signal_32.c | 2 +-
17403 arch/powerpc/kernel/signal_64.c | 2 +-
17404 arch/powerpc/kernel/traps.c | 21 +
17405 arch/powerpc/kernel/vdso.c | 5 +-
17406 arch/powerpc/lib/usercopy_64.c | 18 -
17407 arch/powerpc/mm/fault.c | 56 +-
17408 arch/powerpc/mm/mmap.c | 16 +
17409 arch/powerpc/mm/slice.c | 13 +-
17410 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
17411 arch/s390/include/asm/atomic.h | 10 +
17412 arch/s390/include/asm/elf.h | 7 +
17413 arch/s390/include/asm/exec.h | 2 +-
17414 arch/s390/include/asm/uaccess.h | 13 +-
17415 arch/s390/kernel/module.c | 22 +-
17416 arch/s390/kernel/process.c | 24 -
17417 arch/s390/mm/mmap.c | 16 +
17418 arch/score/include/asm/exec.h | 2 +-
17419 arch/score/kernel/process.c | 5 -
17420 arch/sh/mm/mmap.c | 22 +-
17421 arch/sparc/include/asm/atomic_64.h | 110 +-
17422 arch/sparc/include/asm/cache.h | 2 +-
17423 arch/sparc/include/asm/elf_32.h | 7 +
17424 arch/sparc/include/asm/elf_64.h | 7 +
17425 arch/sparc/include/asm/pgalloc_32.h | 1 +
17426 arch/sparc/include/asm/pgalloc_64.h | 1 +
17427 arch/sparc/include/asm/pgtable.h | 4 +
17428 arch/sparc/include/asm/pgtable_32.h | 15 +-
17429 arch/sparc/include/asm/pgtsrmmu.h | 5 +
17430 arch/sparc/include/asm/setup.h | 4 +-
17431 arch/sparc/include/asm/spinlock_64.h | 35 +-
17432 arch/sparc/include/asm/thread_info_32.h | 1 +
17433 arch/sparc/include/asm/thread_info_64.h | 2 +
17434 arch/sparc/include/asm/uaccess.h | 1 +
17435 arch/sparc/include/asm/uaccess_32.h | 28 +-
17436 arch/sparc/include/asm/uaccess_64.h | 24 +-
17437 arch/sparc/kernel/Makefile | 2 +-
17438 arch/sparc/kernel/prom_common.c | 2 +-
17439 arch/sparc/kernel/smp_64.c | 8 +-
17440 arch/sparc/kernel/sys_sparc_32.c | 2 +-
17441 arch/sparc/kernel/sys_sparc_64.c | 52 +-
17442 arch/sparc/kernel/traps_64.c | 27 +-
17443 arch/sparc/lib/Makefile | 2 +-
17444 arch/sparc/lib/atomic_64.S | 57 +-
17445 arch/sparc/lib/ksyms.c | 6 +-
17446 arch/sparc/mm/Makefile | 2 +-
17447 arch/sparc/mm/fault_32.c | 292 +
17448 arch/sparc/mm/fault_64.c | 486 +
17449 arch/sparc/mm/hugetlbpage.c | 22 +-
17450 arch/sparc/mm/init_64.c | 10 +-
17451 arch/tile/include/asm/atomic_64.h | 10 +
17452 arch/tile/include/asm/uaccess.h | 4 +-
17453 arch/um/Makefile | 4 +
17454 arch/um/include/asm/kmap_types.h | 2 +-
17455 arch/um/include/asm/page.h | 3 +
17456 arch/um/include/asm/pgtable-3level.h | 1 +
17457 arch/um/kernel/process.c | 16 -
17458 arch/x86/Kconfig | 15 +-
17459 arch/x86/Kconfig.cpu | 6 +-
17460 arch/x86/Kconfig.debug | 4 +-
17461 arch/x86/Makefile | 13 +-
17462 arch/x86/boot/Makefile | 3 +
17463 arch/x86/boot/bitops.h | 4 +-
17464 arch/x86/boot/boot.h | 2 +-
17465 arch/x86/boot/compressed/Makefile | 3 +
17466 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
17467 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
17468 arch/x86/boot/compressed/head_32.S | 4 +-
17469 arch/x86/boot/compressed/head_64.S | 12 +-
17470 arch/x86/boot/compressed/misc.c | 11 +-
17471 arch/x86/boot/cpucheck.c | 16 +-
17472 arch/x86/boot/header.S | 6 +-
17473 arch/x86/boot/memory.c | 2 +-
17474 arch/x86/boot/video-vesa.c | 1 +
17475 arch/x86/boot/video.c | 2 +-
17476 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
17477 arch/x86/crypto/aesni-intel_asm.S | 106 +-
17478 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
17479 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
17480 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
17481 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
17482 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
17483 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
17484 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
17485 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
17486 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
17487 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
17488 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
17489 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
17490 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
17491 arch/x86/crypto/sha256-avx-asm.S | 2 +
17492 arch/x86/crypto/sha256-avx2-asm.S | 2 +
17493 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
17494 arch/x86/crypto/sha512-avx-asm.S | 2 +
17495 arch/x86/crypto/sha512-avx2-asm.S | 2 +
17496 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
17497 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
17498 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
17499 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
17500 arch/x86/entry/calling.h | 86 +-
17501 arch/x86/entry/common.c | 13 +-
17502 arch/x86/entry/entry_32.S | 351 +-
17503 arch/x86/entry/entry_64.S | 619 +-
17504 arch/x86/entry/entry_64_compat.S | 159 +-
17505 arch/x86/entry/thunk_64.S | 2 +
17506 arch/x86/entry/vdso/Makefile | 2 +-
17507 arch/x86/entry/vdso/vdso2c.h | 8 +-
17508 arch/x86/entry/vdso/vma.c | 41 +-
17509 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
17510 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
17511 arch/x86/ia32/ia32_signal.c | 23 +-
17512 arch/x86/ia32/sys_ia32.c | 42 +-
17513 arch/x86/include/asm/alternative-asm.h | 43 +-
17514 arch/x86/include/asm/alternative.h | 4 +-
17515 arch/x86/include/asm/apic.h | 2 +-
17516 arch/x86/include/asm/apm.h | 4 +-
17517 arch/x86/include/asm/atomic.h | 230 +-
17518 arch/x86/include/asm/atomic64_32.h | 100 +
17519 arch/x86/include/asm/atomic64_64.h | 164 +-
17520 arch/x86/include/asm/bitops.h | 18 +-
17521 arch/x86/include/asm/boot.h | 2 +-
17522 arch/x86/include/asm/cache.h | 5 +-
17523 arch/x86/include/asm/checksum_32.h | 12 +-
17524 arch/x86/include/asm/cmpxchg.h | 39 +
17525 arch/x86/include/asm/compat.h | 2 +-
17526 arch/x86/include/asm/cpufeature.h | 17 +-
17527 arch/x86/include/asm/desc.h | 78 +-
17528 arch/x86/include/asm/desc_defs.h | 6 +
17529 arch/x86/include/asm/div64.h | 2 +-
17530 arch/x86/include/asm/elf.h | 33 +-
17531 arch/x86/include/asm/emergency-restart.h | 2 +-
17532 arch/x86/include/asm/fpu/internal.h | 42 +-
17533 arch/x86/include/asm/fpu/types.h | 6 +-
17534 arch/x86/include/asm/futex.h | 14 +-
17535 arch/x86/include/asm/hw_irq.h | 4 +-
17536 arch/x86/include/asm/i8259.h | 2 +-
17537 arch/x86/include/asm/io.h | 22 +-
17538 arch/x86/include/asm/irqflags.h | 5 +
17539 arch/x86/include/asm/kprobes.h | 9 +-
17540 arch/x86/include/asm/local.h | 106 +-
17541 arch/x86/include/asm/mman.h | 15 +
17542 arch/x86/include/asm/mmu.h | 14 +-
17543 arch/x86/include/asm/mmu_context.h | 114 +-
17544 arch/x86/include/asm/module.h | 17 +-
17545 arch/x86/include/asm/nmi.h | 19 +-
17546 arch/x86/include/asm/page.h | 1 +
17547 arch/x86/include/asm/page_32.h | 12 +-
17548 arch/x86/include/asm/page_64.h | 14 +-
17549 arch/x86/include/asm/paravirt.h | 46 +-
17550 arch/x86/include/asm/paravirt_types.h | 15 +-
17551 arch/x86/include/asm/pgalloc.h | 23 +
17552 arch/x86/include/asm/pgtable-2level.h | 2 +
17553 arch/x86/include/asm/pgtable-3level.h | 7 +
17554 arch/x86/include/asm/pgtable.h | 128 +-
17555 arch/x86/include/asm/pgtable_32.h | 14 +-
17556 arch/x86/include/asm/pgtable_32_types.h | 24 +-
17557 arch/x86/include/asm/pgtable_64.h | 23 +-
17558 arch/x86/include/asm/pgtable_64_types.h | 5 +
17559 arch/x86/include/asm/pgtable_types.h | 26 +-
17560 arch/x86/include/asm/preempt.h | 2 +-
17561 arch/x86/include/asm/processor.h | 57 +-
17562 arch/x86/include/asm/ptrace.h | 13 +-
17563 arch/x86/include/asm/realmode.h | 4 +-
17564 arch/x86/include/asm/reboot.h | 10 +-
17565 arch/x86/include/asm/rmwcc.h | 84 +-
17566 arch/x86/include/asm/rwsem.h | 60 +-
17567 arch/x86/include/asm/segment.h | 27 +-
17568 arch/x86/include/asm/smap.h | 43 +
17569 arch/x86/include/asm/smp.h | 14 +-
17570 arch/x86/include/asm/stackprotector.h | 4 +-
17571 arch/x86/include/asm/stacktrace.h | 32 +-
17572 arch/x86/include/asm/switch_to.h | 4 +-
17573 arch/x86/include/asm/sys_ia32.h | 6 +-
17574 arch/x86/include/asm/thread_info.h | 27 +-
17575 arch/x86/include/asm/tlbflush.h | 77 +-
17576 arch/x86/include/asm/uaccess.h | 192 +-
17577 arch/x86/include/asm/uaccess_32.h | 28 +-
17578 arch/x86/include/asm/uaccess_64.h | 169 +-
17579 arch/x86/include/asm/word-at-a-time.h | 2 +-
17580 arch/x86/include/asm/x86_init.h | 10 +-
17581 arch/x86/include/asm/xen/page.h | 2 +-
17582 arch/x86/include/uapi/asm/e820.h | 2 +-
17583 arch/x86/kernel/Makefile | 2 +-
17584 arch/x86/kernel/acpi/boot.c | 4 +-
17585 arch/x86/kernel/acpi/sleep.c | 4 +
17586 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
17587 arch/x86/kernel/alternative.c | 124 +-
17588 arch/x86/kernel/apic/apic.c | 4 +-
17589 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
17590 arch/x86/kernel/apic/apic_noop.c | 2 +-
17591 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
17592 arch/x86/kernel/apic/io_apic.c | 8 +-
17593 arch/x86/kernel/apic/msi.c | 2 +-
17594 arch/x86/kernel/apic/probe_32.c | 4 +-
17595 arch/x86/kernel/apic/vector.c | 4 +-
17596 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
17597 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
17598 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
17599 arch/x86/kernel/apm_32.c | 21 +-
17600 arch/x86/kernel/asm-offsets.c | 20 +
17601 arch/x86/kernel/asm-offsets_64.c | 1 +
17602 arch/x86/kernel/cpu/Makefile | 4 -
17603 arch/x86/kernel/cpu/amd.c | 2 +-
17604 arch/x86/kernel/cpu/bugs_64.c | 2 +
17605 arch/x86/kernel/cpu/common.c | 202 +-
17606 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
17607 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
17608 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
17609 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
17610 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
17611 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
17612 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
17613 arch/x86/kernel/cpu/perf_event.c | 10 +-
17614 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
17615 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
17616 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
17617 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
17618 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
17619 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
17620 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
17621 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
17622 arch/x86/kernel/crash_dump_64.c | 2 +-
17623 arch/x86/kernel/doublefault.c | 8 +-
17624 arch/x86/kernel/dumpstack.c | 24 +-
17625 arch/x86/kernel/dumpstack_32.c | 25 +-
17626 arch/x86/kernel/dumpstack_64.c | 62 +-
17627 arch/x86/kernel/e820.c | 4 +-
17628 arch/x86/kernel/early_printk.c | 1 +
17629 arch/x86/kernel/espfix_64.c | 44 +-
17630 arch/x86/kernel/fpu/core.c | 24 +-
17631 arch/x86/kernel/fpu/init.c | 40 +-
17632 arch/x86/kernel/fpu/regset.c | 22 +-
17633 arch/x86/kernel/fpu/signal.c | 20 +-
17634 arch/x86/kernel/fpu/xstate.c | 8 +-
17635 arch/x86/kernel/ftrace.c | 18 +-
17636 arch/x86/kernel/head64.c | 14 +-
17637 arch/x86/kernel/head_32.S | 235 +-
17638 arch/x86/kernel/head_64.S | 173 +-
17639 arch/x86/kernel/i386_ksyms_32.c | 12 +
17640 arch/x86/kernel/i8259.c | 10 +-
17641 arch/x86/kernel/io_delay.c | 2 +-
17642 arch/x86/kernel/ioport.c | 2 +-
17643 arch/x86/kernel/irq.c | 8 +-
17644 arch/x86/kernel/irq_32.c | 45 +-
17645 arch/x86/kernel/jump_label.c | 10 +-
17646 arch/x86/kernel/kgdb.c | 21 +-
17647 arch/x86/kernel/kprobes/core.c | 28 +-
17648 arch/x86/kernel/kprobes/opt.c | 16 +-
17649 arch/x86/kernel/ksysfs.c | 2 +-
17650 arch/x86/kernel/kvmclock.c | 20 +-
17651 arch/x86/kernel/ldt.c | 25 +
17652 arch/x86/kernel/livepatch.c | 12 +-
17653 arch/x86/kernel/machine_kexec_32.c | 6 +-
17654 arch/x86/kernel/mcount_64.S | 19 +-
17655 arch/x86/kernel/module.c | 78 +-
17656 arch/x86/kernel/msr.c | 2 +-
17657 arch/x86/kernel/nmi.c | 34 +-
17658 arch/x86/kernel/nmi_selftest.c | 4 +-
17659 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
17660 arch/x86/kernel/paravirt.c | 45 +-
17661 arch/x86/kernel/paravirt_patch_64.c | 8 +
17662 arch/x86/kernel/pci-calgary_64.c | 2 +-
17663 arch/x86/kernel/pci-iommu_table.c | 2 +-
17664 arch/x86/kernel/pci-swiotlb.c | 2 +-
17665 arch/x86/kernel/process.c | 80 +-
17666 arch/x86/kernel/process_32.c | 29 +-
17667 arch/x86/kernel/process_64.c | 14 +-
17668 arch/x86/kernel/ptrace.c | 20 +-
17669 arch/x86/kernel/pvclock.c | 8 +-
17670 arch/x86/kernel/reboot.c | 44 +-
17671 arch/x86/kernel/reboot_fixups_32.c | 2 +-
17672 arch/x86/kernel/relocate_kernel_64.S | 3 +-
17673 arch/x86/kernel/setup.c | 29 +-
17674 arch/x86/kernel/setup_percpu.c | 29 +-
17675 arch/x86/kernel/signal.c | 17 +-
17676 arch/x86/kernel/smp.c | 2 +-
17677 arch/x86/kernel/smpboot.c | 29 +-
17678 arch/x86/kernel/step.c | 6 +-
17679 arch/x86/kernel/sys_i386_32.c | 184 +
17680 arch/x86/kernel/sys_x86_64.c | 22 +-
17681 arch/x86/kernel/tboot.c | 14 +-
17682 arch/x86/kernel/time.c | 8 +-
17683 arch/x86/kernel/tls.c | 7 +-
17684 arch/x86/kernel/tracepoint.c | 4 +-
17685 arch/x86/kernel/traps.c | 53 +-
17686 arch/x86/kernel/tsc.c | 2 +-
17687 arch/x86/kernel/uprobes.c | 2 +-
17688 arch/x86/kernel/vm86_32.c | 6 +-
17689 arch/x86/kernel/vmlinux.lds.S | 153 +-
17690 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
17691 arch/x86/kernel/x86_init.c | 6 +-
17692 arch/x86/kvm/cpuid.c | 21 +-
17693 arch/x86/kvm/emulate.c | 2 +-
17694 arch/x86/kvm/lapic.c | 2 +-
17695 arch/x86/kvm/paging_tmpl.h | 2 +-
17696 arch/x86/kvm/svm.c | 10 +-
17697 arch/x86/kvm/vmx.c | 62 +-
17698 arch/x86/kvm/x86.c | 42 +-
17699 arch/x86/lguest/boot.c | 3 +-
17700 arch/x86/lib/atomic64_386_32.S | 164 +
17701 arch/x86/lib/atomic64_cx8_32.S | 98 +-
17702 arch/x86/lib/checksum_32.S | 99 +-
17703 arch/x86/lib/clear_page_64.S | 3 +
17704 arch/x86/lib/cmpxchg16b_emu.S | 3 +
17705 arch/x86/lib/copy_page_64.S | 14 +-
17706 arch/x86/lib/copy_user_64.S | 66 +-
17707 arch/x86/lib/csum-copy_64.S | 14 +-
17708 arch/x86/lib/csum-wrappers_64.c | 8 +-
17709 arch/x86/lib/getuser.S | 74 +-
17710 arch/x86/lib/insn.c | 8 +-
17711 arch/x86/lib/iomap_copy_64.S | 2 +
17712 arch/x86/lib/memcpy_64.S | 6 +
17713 arch/x86/lib/memmove_64.S | 3 +-
17714 arch/x86/lib/memset_64.S | 3 +
17715 arch/x86/lib/mmx_32.c | 243 +-
17716 arch/x86/lib/msr-reg.S | 2 +
17717 arch/x86/lib/putuser.S | 87 +-
17718 arch/x86/lib/rwsem.S | 6 +-
17719 arch/x86/lib/usercopy_32.c | 359 +-
17720 arch/x86/lib/usercopy_64.c | 20 +-
17721 arch/x86/math-emu/fpu_aux.c | 2 +-
17722 arch/x86/math-emu/fpu_entry.c | 4 +-
17723 arch/x86/math-emu/fpu_system.h | 2 +-
17724 arch/x86/mm/Makefile | 4 +
17725 arch/x86/mm/extable.c | 26 +-
17726 arch/x86/mm/fault.c | 570 +-
17727 arch/x86/mm/gup.c | 6 +-
17728 arch/x86/mm/highmem_32.c | 6 +
17729 arch/x86/mm/hugetlbpage.c | 24 +-
17730 arch/x86/mm/init.c | 111 +-
17731 arch/x86/mm/init_32.c | 111 +-
17732 arch/x86/mm/init_64.c | 46 +-
17733 arch/x86/mm/iomap_32.c | 4 +
17734 arch/x86/mm/ioremap.c | 52 +-
17735 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
17736 arch/x86/mm/mmap.c | 40 +-
17737 arch/x86/mm/mmio-mod.c | 10 +-
17738 arch/x86/mm/numa.c | 2 +-
17739 arch/x86/mm/pageattr.c | 38 +-
17740 arch/x86/mm/pat.c | 12 +-
17741 arch/x86/mm/pat_rbtree.c | 2 +-
17742 arch/x86/mm/pf_in.c | 10 +-
17743 arch/x86/mm/pgtable.c | 214 +-
17744 arch/x86/mm/pgtable_32.c | 3 +
17745 arch/x86/mm/setup_nx.c | 7 +
17746 arch/x86/mm/tlb.c | 4 +
17747 arch/x86/mm/uderef_64.c | 37 +
17748 arch/x86/net/bpf_jit.S | 11 +
17749 arch/x86/net/bpf_jit_comp.c | 13 +-
17750 arch/x86/oprofile/backtrace.c | 6 +-
17751 arch/x86/oprofile/nmi_int.c | 8 +-
17752 arch/x86/oprofile/op_model_amd.c | 8 +-
17753 arch/x86/oprofile/op_model_ppro.c | 7 +-
17754 arch/x86/oprofile/op_x86_model.h | 2 +-
17755 arch/x86/pci/intel_mid_pci.c | 2 +-
17756 arch/x86/pci/irq.c | 8 +-
17757 arch/x86/pci/pcbios.c | 144 +-
17758 arch/x86/platform/efi/efi_32.c | 24 +
17759 arch/x86/platform/efi/efi_64.c | 26 +-
17760 arch/x86/platform/efi/efi_stub_32.S | 64 +-
17761 arch/x86/platform/efi/efi_stub_64.S | 2 +
17762 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
17763 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
17764 arch/x86/platform/intel-mid/mfld.c | 4 +-
17765 arch/x86/platform/intel-mid/mrfl.c | 2 +-
17766 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
17767 arch/x86/platform/olpc/olpc_dt.c | 2 +-
17768 arch/x86/power/cpu.c | 11 +-
17769 arch/x86/realmode/init.c | 10 +-
17770 arch/x86/realmode/rm/Makefile | 3 +
17771 arch/x86/realmode/rm/header.S | 4 +-
17772 arch/x86/realmode/rm/reboot.S | 4 +
17773 arch/x86/realmode/rm/trampoline_32.S | 12 +-
17774 arch/x86/realmode/rm/trampoline_64.S | 3 +-
17775 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
17776 arch/x86/tools/Makefile | 2 +-
17777 arch/x86/tools/relocs.c | 96 +-
17778 arch/x86/um/mem_32.c | 2 +-
17779 arch/x86/um/tls_32.c | 2 +-
17780 arch/x86/xen/enlighten.c | 50 +-
17781 arch/x86/xen/mmu.c | 19 +-
17782 arch/x86/xen/smp.c | 16 +-
17783 arch/x86/xen/xen-asm_32.S | 2 +-
17784 arch/x86/xen/xen-head.S | 11 +
17785 arch/x86/xen/xen-ops.h | 2 -
17786 block/bio.c | 4 +-
17787 block/blk-iopoll.c | 2 +-
17788 block/blk-map.c | 2 +-
17789 block/blk-softirq.c | 2 +-
17790 block/bsg.c | 12 +-
17791 block/compat_ioctl.c | 4 +-
17792 block/genhd.c | 9 +-
17793 block/partitions/efi.c | 8 +-
17794 block/scsi_ioctl.c | 29 +-
17795 crypto/cryptd.c | 4 +-
17796 crypto/pcrypt.c | 2 +-
17797 crypto/zlib.c | 12 +-
17798 drivers/acpi/acpi_video.c | 2 +-
17799 drivers/acpi/apei/apei-internal.h | 2 +-
17800 drivers/acpi/apei/ghes.c | 4 +-
17801 drivers/acpi/bgrt.c | 6 +-
17802 drivers/acpi/blacklist.c | 4 +-
17803 drivers/acpi/bus.c | 4 +-
17804 drivers/acpi/device_pm.c | 4 +-
17805 drivers/acpi/ec.c | 2 +-
17806 drivers/acpi/pci_slot.c | 2 +-
17807 drivers/acpi/processor_idle.c | 2 +-
17808 drivers/acpi/processor_pdc.c | 2 +-
17809 drivers/acpi/sleep.c | 2 +-
17810 drivers/acpi/sysfs.c | 4 +-
17811 drivers/acpi/thermal.c | 2 +-
17812 drivers/acpi/video_detect.c | 7 +-
17813 drivers/ata/libata-core.c | 12 +-
17814 drivers/ata/libata-scsi.c | 2 +-
17815 drivers/ata/libata.h | 2 +-
17816 drivers/ata/pata_arasan_cf.c | 4 +-
17817 drivers/atm/adummy.c | 2 +-
17818 drivers/atm/ambassador.c | 8 +-
17819 drivers/atm/atmtcp.c | 14 +-
17820 drivers/atm/eni.c | 10 +-
17821 drivers/atm/firestream.c | 8 +-
17822 drivers/atm/fore200e.c | 14 +-
17823 drivers/atm/he.c | 18 +-
17824 drivers/atm/horizon.c | 4 +-
17825 drivers/atm/idt77252.c | 36 +-
17826 drivers/atm/iphase.c | 34 +-
17827 drivers/atm/lanai.c | 12 +-
17828 drivers/atm/nicstar.c | 46 +-
17829 drivers/atm/solos-pci.c | 4 +-
17830 drivers/atm/suni.c | 4 +-
17831 drivers/atm/uPD98402.c | 16 +-
17832 drivers/atm/zatm.c | 6 +-
17833 drivers/base/bus.c | 4 +-
17834 drivers/base/devtmpfs.c | 8 +-
17835 drivers/base/node.c | 2 +-
17836 drivers/base/platform-msi.c | 20 +-
17837 drivers/base/power/domain.c | 11 +-
17838 drivers/base/power/sysfs.c | 2 +-
17839 drivers/base/power/wakeup.c | 8 +-
17840 drivers/base/regmap/regmap-debugfs.c | 11 +-
17841 drivers/base/syscore.c | 4 +-
17842 drivers/block/cciss.c | 28 +-
17843 drivers/block/cciss.h | 2 +-
17844 drivers/block/cpqarray.c | 28 +-
17845 drivers/block/cpqarray.h | 2 +-
17846 drivers/block/drbd/drbd_bitmap.c | 2 +-
17847 drivers/block/drbd/drbd_int.h | 8 +-
17848 drivers/block/drbd/drbd_main.c | 12 +-
17849 drivers/block/drbd/drbd_nl.c | 4 +-
17850 drivers/block/drbd/drbd_receiver.c | 34 +-
17851 drivers/block/drbd/drbd_worker.c | 8 +-
17852 drivers/block/pktcdvd.c | 4 +-
17853 drivers/block/rbd.c | 2 +-
17854 drivers/bluetooth/btwilink.c | 2 +-
17855 drivers/bus/arm-cci.c | 12 +-
17856 drivers/cdrom/cdrom.c | 11 +-
17857 drivers/cdrom/gdrom.c | 1 -
17858 drivers/char/agp/compat_ioctl.c | 2 +-
17859 drivers/char/agp/frontend.c | 4 +-
17860 drivers/char/agp/intel-gtt.c | 4 +-
17861 drivers/char/hpet.c | 2 +-
17862 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
17863 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
17864 drivers/char/mem.c | 47 +-
17865 drivers/char/nvram.c | 2 +-
17866 drivers/char/pcmcia/synclink_cs.c | 16 +-
17867 drivers/char/random.c | 12 +-
17868 drivers/char/sonypi.c | 11 +-
17869 drivers/char/tpm/tpm_acpi.c | 3 +-
17870 drivers/char/tpm/tpm_eventlog.c | 4 +-
17871 drivers/char/virtio_console.c | 4 +-
17872 drivers/clk/clk-composite.c | 2 +-
17873 drivers/clk/samsung/clk.h | 2 +-
17874 drivers/clk/socfpga/clk-gate.c | 9 +-
17875 drivers/clk/socfpga/clk-pll.c | 9 +-
17876 drivers/clk/ti/clk.c | 8 +-
17877 drivers/cpufreq/acpi-cpufreq.c | 17 +-
17878 drivers/cpufreq/cpufreq-dt.c | 4 +-
17879 drivers/cpufreq/cpufreq.c | 30 +-
17880 drivers/cpufreq/cpufreq_governor.c | 2 +-
17881 drivers/cpufreq/cpufreq_governor.h | 4 +-
17882 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
17883 drivers/cpufreq/intel_pstate.c | 33 +-
17884 drivers/cpufreq/p4-clockmod.c | 12 +-
17885 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
17886 drivers/cpufreq/speedstep-centrino.c | 7 +-
17887 drivers/cpuidle/driver.c | 2 +-
17888 drivers/cpuidle/dt_idle_states.c | 2 +-
17889 drivers/cpuidle/governor.c | 2 +-
17890 drivers/cpuidle/sysfs.c | 2 +-
17891 drivers/crypto/hifn_795x.c | 4 +-
17892 drivers/devfreq/devfreq.c | 4 +-
17893 drivers/dma/sh/shdma-base.c | 4 +-
17894 drivers/dma/sh/shdmac.c | 2 +-
17895 drivers/edac/edac_device.c | 4 +-
17896 drivers/edac/edac_mc_sysfs.c | 2 +-
17897 drivers/edac/edac_pci.c | 4 +-
17898 drivers/edac/edac_pci_sysfs.c | 22 +-
17899 drivers/edac/mce_amd.h | 2 +-
17900 drivers/firewire/core-card.c | 6 +-
17901 drivers/firewire/core-device.c | 2 +-
17902 drivers/firewire/core-transaction.c | 1 +
17903 drivers/firewire/core.h | 1 +
17904 drivers/firmware/dmi-id.c | 2 +-
17905 drivers/firmware/dmi_scan.c | 12 +-
17906 drivers/firmware/efi/cper.c | 8 +-
17907 drivers/firmware/efi/efi.c | 12 +-
17908 drivers/firmware/efi/efivars.c | 2 +-
17909 drivers/firmware/efi/runtime-map.c | 2 +-
17910 drivers/firmware/google/gsmi.c | 2 +-
17911 drivers/firmware/google/memconsole.c | 7 +-
17912 drivers/firmware/memmap.c | 2 +-
17913 drivers/firmware/psci.c | 2 +-
17914 drivers/gpio/gpio-davinci.c | 6 +-
17915 drivers/gpio/gpio-em.c | 2 +-
17916 drivers/gpio/gpio-ich.c | 2 +-
17917 drivers/gpio/gpio-omap.c | 4 +-
17918 drivers/gpio/gpio-rcar.c | 2 +-
17919 drivers/gpio/gpio-vr41xx.c | 2 +-
17920 drivers/gpio/gpiolib.c | 12 +-
17921 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
17922 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
17923 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
17924 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
17925 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
17926 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
17927 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
17928 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
17929 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
17930 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
17931 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
17932 drivers/gpu/drm/drm_crtc.c | 2 +-
17933 drivers/gpu/drm/drm_drv.c | 2 +-
17934 drivers/gpu/drm/drm_fops.c | 12 +-
17935 drivers/gpu/drm/drm_global.c | 14 +-
17936 drivers/gpu/drm/drm_info.c | 13 +-
17937 drivers/gpu/drm/drm_ioc32.c | 13 +-
17938 drivers/gpu/drm/drm_ioctl.c | 2 +-
17939 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
17940 drivers/gpu/drm/i810/i810_drv.h | 4 +-
17941 drivers/gpu/drm/i915/i915_dma.c | 2 +-
17942 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
17943 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
17944 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
17945 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
17946 drivers/gpu/drm/i915/intel_display.c | 26 +-
17947 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
17948 drivers/gpu/drm/mga/mga_drv.h | 4 +-
17949 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
17950 drivers/gpu/drm/mga/mga_irq.c | 8 +-
17951 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
17952 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
17953 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
17954 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
17955 drivers/gpu/drm/omapdrm/Makefile | 2 +-
17956 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
17957 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
17958 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
17959 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
17960 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
17961 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
17962 drivers/gpu/drm/r128/r128_cce.c | 2 +-
17963 drivers/gpu/drm/r128/r128_drv.h | 4 +-
17964 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
17965 drivers/gpu/drm/r128/r128_irq.c | 4 +-
17966 drivers/gpu/drm/r128/r128_state.c | 4 +-
17967 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
17968 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
17969 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
17970 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
17971 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
17972 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
17973 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
17974 drivers/gpu/drm/tegra/dc.c | 2 +-
17975 drivers/gpu/drm/tegra/dsi.c | 2 +-
17976 drivers/gpu/drm/tegra/hdmi.c | 2 +-
17977 drivers/gpu/drm/tegra/sor.c | 7 +-
17978 drivers/gpu/drm/tilcdc/Makefile | 6 +-
17979 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
17980 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
17981 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
17982 drivers/gpu/drm/udl/udl_fb.c | 1 -
17983 drivers/gpu/drm/via/via_drv.h | 4 +-
17984 drivers/gpu/drm/via/via_irq.c | 18 +-
17985 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
17986 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
17987 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
17988 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
17989 drivers/gpu/vga/vga_switcheroo.c | 4 +-
17990 drivers/hid/hid-core.c | 4 +-
17991 drivers/hid/hid-sensor-custom.c | 2 +-
17992 drivers/hv/channel.c | 2 +-
17993 drivers/hv/hv.c | 4 +-
17994 drivers/hv/hv_balloon.c | 18 +-
17995 drivers/hv/hyperv_vmbus.h | 2 +-
17996 drivers/hwmon/acpi_power_meter.c | 6 +-
17997 drivers/hwmon/applesmc.c | 2 +-
17998 drivers/hwmon/asus_atk0110.c | 10 +-
17999 drivers/hwmon/coretemp.c | 2 +-
18000 drivers/hwmon/dell-smm-hwmon.c | 2 +-
18001 drivers/hwmon/ibmaem.c | 2 +-
18002 drivers/hwmon/iio_hwmon.c | 2 +-
18003 drivers/hwmon/nct6683.c | 6 +-
18004 drivers/hwmon/nct6775.c | 6 +-
18005 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
18006 drivers/hwmon/sht15.c | 12 +-
18007 drivers/hwmon/via-cputemp.c | 2 +-
18008 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
18009 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
18010 drivers/i2c/i2c-dev.c | 2 +-
18011 drivers/ide/ide-cd.c | 2 +-
18012 drivers/ide/ide-disk.c | 2 +-
18013 drivers/iio/industrialio-core.c | 2 +-
18014 drivers/iio/magnetometer/ak8975.c | 2 +-
18015 drivers/infiniband/core/cm.c | 32 +-
18016 drivers/infiniband/core/fmr_pool.c | 20 +-
18017 drivers/infiniband/core/uverbs_cmd.c | 3 +
18018 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
18019 drivers/infiniband/hw/mlx4/mad.c | 2 +-
18020 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
18021 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
18022 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
18023 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
18024 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
18025 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
18026 drivers/infiniband/hw/nes/nes.c | 4 +-
18027 drivers/infiniband/hw/nes/nes.h | 40 +-
18028 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
18029 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
18030 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
18031 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
18032 drivers/infiniband/hw/qib/qib.h | 1 +
18033 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
18034 drivers/input/gameport/gameport.c | 4 +-
18035 drivers/input/input.c | 4 +-
18036 drivers/input/joystick/sidewinder.c | 1 +
18037 drivers/input/joystick/xpad.c | 4 +-
18038 drivers/input/misc/ims-pcu.c | 4 +-
18039 drivers/input/mouse/psmouse.h | 2 +-
18040 drivers/input/mousedev.c | 2 +-
18041 drivers/input/serio/serio.c | 4 +-
18042 drivers/input/serio/serio_raw.c | 4 +-
18043 drivers/input/touchscreen/htcpen.c | 2 +-
18044 drivers/iommu/arm-smmu-v3.c | 2 +-
18045 drivers/iommu/arm-smmu.c | 43 +-
18046 drivers/iommu/io-pgtable-arm.c | 101 +-
18047 drivers/iommu/io-pgtable.c | 11 +-
18048 drivers/iommu/io-pgtable.h | 19 +-
18049 drivers/iommu/iommu.c | 2 +-
18050 drivers/iommu/ipmmu-vmsa.c | 13 +-
18051 drivers/iommu/irq_remapping.c | 2 +-
18052 drivers/irqchip/irq-gic.c | 2 +-
18053 drivers/irqchip/irq-i8259.c | 2 +-
18054 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
18055 drivers/irqchip/irq-renesas-irqc.c | 2 +-
18056 drivers/isdn/capi/capi.c | 10 +-
18057 drivers/isdn/gigaset/interface.c | 8 +-
18058 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
18059 drivers/isdn/hardware/avm/b1.c | 4 +-
18060 drivers/isdn/i4l/isdn_common.c | 2 +
18061 drivers/isdn/i4l/isdn_tty.c | 22 +-
18062 drivers/isdn/icn/icn.c | 2 +-
18063 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
18064 drivers/lguest/core.c | 10 +-
18065 drivers/lguest/page_tables.c | 2 +-
18066 drivers/lguest/x86/core.c | 12 +-
18067 drivers/lguest/x86/switcher_32.S | 27 +-
18068 drivers/md/bcache/closure.h | 2 +-
18069 drivers/md/bitmap.c | 2 +-
18070 drivers/md/dm-ioctl.c | 2 +-
18071 drivers/md/dm-raid1.c | 18 +-
18072 drivers/md/dm-stats.c | 6 +-
18073 drivers/md/dm-stripe.c | 10 +-
18074 drivers/md/dm-table.c | 2 +-
18075 drivers/md/dm-thin-metadata.c | 4 +-
18076 drivers/md/dm.c | 16 +-
18077 drivers/md/md.c | 26 +-
18078 drivers/md/md.h | 6 +-
18079 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
18080 drivers/md/persistent-data/dm-space-map.h | 1 +
18081 drivers/md/raid1.c | 4 +-
18082 drivers/md/raid10.c | 18 +-
18083 drivers/md/raid5.c | 22 +-
18084 drivers/media/dvb-core/dvbdev.c | 2 +-
18085 drivers/media/dvb-frontends/af9033.h | 2 +-
18086 drivers/media/dvb-frontends/dib3000.h | 2 +-
18087 drivers/media/dvb-frontends/dib7000p.h | 2 +-
18088 drivers/media/dvb-frontends/dib8000.h | 2 +-
18089 drivers/media/pci/cx88/cx88-video.c | 6 +-
18090 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
18091 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
18092 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
18093 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
18094 drivers/media/pci/tw68/tw68-core.c | 2 +-
18095 drivers/media/platform/omap/omap_vout.c | 11 +-
18096 drivers/media/platform/s5p-tv/mixer.h | 2 +-
18097 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
18098 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
18099 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
18100 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
18101 drivers/media/radio/radio-cadet.c | 2 +
18102 drivers/media/radio/radio-maxiradio.c | 2 +-
18103 drivers/media/radio/radio-shark.c | 2 +-
18104 drivers/media/radio/radio-shark2.c | 2 +-
18105 drivers/media/radio/radio-si476x.c | 2 +-
18106 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
18107 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
18108 drivers/media/v4l2-core/v4l2-device.c | 4 +-
18109 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
18110 drivers/memory/omap-gpmc.c | 21 +-
18111 drivers/message/fusion/mptsas.c | 34 +-
18112 drivers/mfd/ab8500-debugfs.c | 2 +-
18113 drivers/mfd/kempld-core.c | 2 +-
18114 drivers/mfd/max8925-i2c.c | 2 +-
18115 drivers/mfd/tps65910.c | 2 +-
18116 drivers/mfd/twl4030-irq.c | 9 +-
18117 drivers/mfd/wm5110-tables.c | 2 +-
18118 drivers/mfd/wm8998-tables.c | 2 +-
18119 drivers/misc/c2port/core.c | 4 +-
18120 drivers/misc/kgdbts.c | 4 +-
18121 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
18122 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
18123 drivers/misc/mic/scif/scif_rb.c | 8 +-
18124 drivers/misc/sgi-gru/gruhandles.c | 4 +-
18125 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
18126 drivers/misc/sgi-gru/grutables.h | 154 +-
18127 drivers/misc/sgi-xp/xp.h | 2 +-
18128 drivers/misc/sgi-xp/xpc.h | 3 +-
18129 drivers/misc/sgi-xp/xpc_main.c | 2 +-
18130 drivers/mmc/card/block.c | 2 +-
18131 drivers/mmc/host/dw_mmc.h | 2 +-
18132 drivers/mmc/host/mmci.c | 4 +-
18133 drivers/mmc/host/omap_hsmmc.c | 4 +-
18134 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
18135 drivers/mmc/host/sdhci-s3c.c | 8 +-
18136 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
18137 drivers/mtd/nand/denali.c | 1 +
18138 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
18139 drivers/mtd/nftlmount.c | 1 +
18140 drivers/mtd/sm_ftl.c | 2 +-
18141 drivers/net/bonding/bond_netlink.c | 2 +-
18142 drivers/net/caif/caif_hsi.c | 2 +-
18143 drivers/net/can/Kconfig | 2 +-
18144 drivers/net/can/dev.c | 2 +-
18145 drivers/net/can/vcan.c | 2 +-
18146 drivers/net/dummy.c | 2 +-
18147 drivers/net/ethernet/8390/ax88796.c | 4 +-
18148 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
18149 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
18150 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
18151 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
18152 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
18153 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
18154 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
18155 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
18156 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
18157 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
18158 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
18159 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
18160 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
18161 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
18162 drivers/net/ethernet/broadcom/tg3.h | 1 +
18163 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
18164 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
18165 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
18166 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
18167 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
18168 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
18169 drivers/net/ethernet/faraday/ftmac100.c | 2 +
18170 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
18171 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
18172 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
18173 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
18174 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
18175 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
18176 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
18177 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
18178 drivers/net/ethernet/realtek/r8169.c | 8 +-
18179 drivers/net/ethernet/sfc/ptp.c | 2 +-
18180 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
18181 drivers/net/ethernet/via/via-rhine.c | 2 +-
18182 drivers/net/geneve.c | 2 +-
18183 drivers/net/hyperv/hyperv_net.h | 2 +-
18184 drivers/net/hyperv/rndis_filter.c | 4 +-
18185 drivers/net/ifb.c | 2 +-
18186 drivers/net/ipvlan/ipvlan_core.c | 2 +-
18187 drivers/net/macvlan.c | 20 +-
18188 drivers/net/macvtap.c | 6 +-
18189 drivers/net/nlmon.c | 2 +-
18190 drivers/net/phy/phy_device.c | 6 +-
18191 drivers/net/ppp/ppp_generic.c | 4 +-
18192 drivers/net/slip/slhc.c | 2 +-
18193 drivers/net/team/team.c | 4 +-
18194 drivers/net/tun.c | 7 +-
18195 drivers/net/usb/hso.c | 23 +-
18196 drivers/net/usb/r8152.c | 2 +-
18197 drivers/net/usb/sierra_net.c | 4 +-
18198 drivers/net/virtio_net.c | 2 +-
18199 drivers/net/vrf.c | 2 +-
18200 drivers/net/vxlan.c | 4 +-
18201 drivers/net/wimax/i2400m/rx.c | 2 +-
18202 drivers/net/wireless/airo.c | 2 +-
18203 drivers/net/wireless/at76c50x-usb.c | 2 +-
18204 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
18205 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
18206 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
18207 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
18208 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
18209 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
18210 drivers/net/wireless/ath/ath9k/main.c | 22 +-
18211 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
18212 drivers/net/wireless/b43/phy_lp.c | 2 +-
18213 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
18214 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
18215 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
18216 drivers/net/wireless/mac80211_hwsim.c | 28 +-
18217 drivers/net/wireless/rndis_wlan.c | 2 +-
18218 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
18219 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
18220 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
18221 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
18222 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
18223 drivers/nfc/nfcwilink.c | 2 +-
18224 drivers/of/fdt.c | 4 +-
18225 drivers/oprofile/buffer_sync.c | 8 +-
18226 drivers/oprofile/event_buffer.c | 2 +-
18227 drivers/oprofile/oprof.c | 2 +-
18228 drivers/oprofile/oprofile_stats.c | 10 +-
18229 drivers/oprofile/oprofile_stats.h | 10 +-
18230 drivers/oprofile/oprofilefs.c | 6 +-
18231 drivers/oprofile/timer_int.c | 2 +-
18232 drivers/parport/procfs.c | 4 +-
18233 drivers/pci/host/pci-host-generic.c | 24 +-
18234 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
18235 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
18236 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
18237 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
18238 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
18239 drivers/pci/hotplug/pciehp_core.c | 2 +-
18240 drivers/pci/msi.c | 22 +-
18241 drivers/pci/pci-sysfs.c | 6 +-
18242 drivers/pci/pci.h | 2 +-
18243 drivers/pci/pcie/aspm.c | 6 +-
18244 drivers/pci/pcie/portdrv_pci.c | 2 +-
18245 drivers/pci/probe.c | 2 +-
18246 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
18247 drivers/pinctrl/pinctrl-at91.c | 5 +-
18248 drivers/platform/chrome/chromeos_pstore.c | 2 +-
18249 drivers/platform/x86/alienware-wmi.c | 4 +-
18250 drivers/platform/x86/compal-laptop.c | 2 +-
18251 drivers/platform/x86/hdaps.c | 2 +-
18252 drivers/platform/x86/ibm_rtl.c | 2 +-
18253 drivers/platform/x86/intel_oaktrail.c | 2 +-
18254 drivers/platform/x86/msi-laptop.c | 16 +-
18255 drivers/platform/x86/msi-wmi.c | 2 +-
18256 drivers/platform/x86/samsung-laptop.c | 2 +-
18257 drivers/platform/x86/samsung-q10.c | 2 +-
18258 drivers/platform/x86/sony-laptop.c | 14 +-
18259 drivers/platform/x86/thinkpad_acpi.c | 2 +-
18260 drivers/pnp/pnpbios/bioscalls.c | 14 +-
18261 drivers/pnp/pnpbios/core.c | 2 +-
18262 drivers/power/pda_power.c | 7 +-
18263 drivers/power/power_supply.h | 4 +-
18264 drivers/power/power_supply_core.c | 7 +-
18265 drivers/power/power_supply_sysfs.c | 6 +-
18266 drivers/power/reset/at91-reset.c | 9 +-
18267 drivers/powercap/powercap_sys.c | 136 +-
18268 drivers/ptp/ptp_private.h | 2 +-
18269 drivers/ptp/ptp_sysfs.c | 2 +-
18270 drivers/regulator/core.c | 4 +-
18271 drivers/regulator/max8660.c | 6 +-
18272 drivers/regulator/max8973-regulator.c | 16 +-
18273 drivers/regulator/mc13892-regulator.c | 8 +-
18274 drivers/rtc/rtc-armada38x.c | 7 +-
18275 drivers/rtc/rtc-cmos.c | 4 +-
18276 drivers/rtc/rtc-ds1307.c | 2 +-
18277 drivers/rtc/rtc-m48t59.c | 4 +-
18278 drivers/rtc/rtc-test.c | 6 +-
18279 drivers/scsi/be2iscsi/be_main.c | 2 +-
18280 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
18281 drivers/scsi/bfa/bfa_ioc.h | 4 +-
18282 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
18283 drivers/scsi/hosts.c | 4 +-
18284 drivers/scsi/hpsa.c | 38 +-
18285 drivers/scsi/hpsa.h | 2 +-
18286 drivers/scsi/libfc/fc_exch.c | 50 +-
18287 drivers/scsi/libsas/sas_ata.c | 2 +-
18288 drivers/scsi/lpfc/lpfc.h | 8 +-
18289 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
18290 drivers/scsi/lpfc/lpfc_init.c | 6 +-
18291 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
18292 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
18293 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
18294 drivers/scsi/pmcraid.c | 20 +-
18295 drivers/scsi/pmcraid.h | 8 +-
18296 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
18297 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
18298 drivers/scsi/qla2xxx/qla_os.c | 6 +-
18299 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
18300 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
18301 drivers/scsi/scsi.c | 2 +-
18302 drivers/scsi/scsi_lib.c | 8 +-
18303 drivers/scsi/scsi_sysfs.c | 2 +-
18304 drivers/scsi/scsi_transport_fc.c | 8 +-
18305 drivers/scsi/scsi_transport_iscsi.c | 6 +-
18306 drivers/scsi/scsi_transport_srp.c | 6 +-
18307 drivers/scsi/sd.c | 6 +-
18308 drivers/scsi/sg.c | 2 +-
18309 drivers/scsi/sr.c | 21 +-
18310 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
18311 drivers/spi/spi.c | 2 +-
18312 drivers/staging/android/timed_output.c | 6 +-
18313 drivers/staging/comedi/comedi_fops.c | 8 +-
18314 drivers/staging/fbtft/fbtft-core.c | 2 +-
18315 drivers/staging/fbtft/fbtft.h | 2 +-
18316 drivers/staging/gdm724x/gdm_tty.c | 2 +-
18317 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
18318 drivers/staging/iio/adc/ad7280a.c | 4 +-
18319 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
18320 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
18321 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
18322 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
18323 drivers/staging/lustre/lustre/include/obd.h | 2 +-
18324 drivers/staging/octeon/ethernet-rx.c | 20 +-
18325 drivers/staging/octeon/ethernet.c | 8 +-
18326 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
18327 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
18328 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
18329 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
18330 drivers/staging/sm750fb/sm750.c | 14 +-
18331 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
18332 drivers/target/sbp/sbp_target.c | 4 +-
18333 drivers/thermal/cpu_cooling.c | 9 +-
18334 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
18335 drivers/thermal/of-thermal.c | 17 +-
18336 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
18337 drivers/tty/cyclades.c | 6 +-
18338 drivers/tty/hvc/hvc_console.c | 14 +-
18339 drivers/tty/hvc/hvcs.c | 21 +-
18340 drivers/tty/hvc/hvsi.c | 22 +-
18341 drivers/tty/hvc/hvsi_lib.c | 4 +-
18342 drivers/tty/ipwireless/tty.c | 27 +-
18343 drivers/tty/moxa.c | 2 +-
18344 drivers/tty/n_gsm.c | 4 +-
18345 drivers/tty/n_tty.c | 3 +-
18346 drivers/tty/pty.c | 4 +-
18347 drivers/tty/rocket.c | 6 +-
18348 drivers/tty/serial/8250/8250_core.c | 10 +-
18349 drivers/tty/serial/ifx6x60.c | 2 +-
18350 drivers/tty/serial/ioc4_serial.c | 6 +-
18351 drivers/tty/serial/kgdb_nmi.c | 4 +-
18352 drivers/tty/serial/kgdboc.c | 32 +-
18353 drivers/tty/serial/msm_serial.c | 4 +-
18354 drivers/tty/serial/samsung.c | 9 +-
18355 drivers/tty/serial/serial_core.c | 8 +-
18356 drivers/tty/synclink.c | 34 +-
18357 drivers/tty/synclink_gt.c | 28 +-
18358 drivers/tty/synclinkmp.c | 34 +-
18359 drivers/tty/tty_io.c | 2 +-
18360 drivers/tty/tty_ldisc.c | 8 +-
18361 drivers/tty/tty_port.c | 22 +-
18362 drivers/uio/uio.c | 13 +-
18363 drivers/usb/atm/cxacru.c | 2 +-
18364 drivers/usb/atm/usbatm.c | 24 +-
18365 drivers/usb/class/cdc-acm.h | 2 +-
18366 drivers/usb/core/devices.c | 6 +-
18367 drivers/usb/core/devio.c | 12 +-
18368 drivers/usb/core/hcd.c | 4 +-
18369 drivers/usb/core/sysfs.c | 2 +-
18370 drivers/usb/core/usb.c | 2 +-
18371 drivers/usb/early/ehci-dbgp.c | 16 +-
18372 drivers/usb/gadget/function/u_serial.c | 22 +-
18373 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
18374 drivers/usb/host/ehci-hcd.c | 2 +-
18375 drivers/usb/host/ehci-hub.c | 4 +-
18376 drivers/usb/host/ehci-q.c | 4 +-
18377 drivers/usb/host/fotg210-hcd.c | 2 +-
18378 drivers/usb/host/fusbh200-hcd.c | 2 +-
18379 drivers/usb/host/hwa-hc.c | 2 +-
18380 drivers/usb/host/ohci-hcd.c | 2 +-
18381 drivers/usb/host/r8a66597.h | 2 +-
18382 drivers/usb/host/uhci-hcd.c | 2 +-
18383 drivers/usb/host/xhci-pci.c | 2 +-
18384 drivers/usb/host/xhci.c | 2 +-
18385 drivers/usb/misc/appledisplay.c | 4 +-
18386 drivers/usb/serial/console.c | 8 +-
18387 drivers/usb/storage/transport.c | 2 +-
18388 drivers/usb/storage/usb.c | 2 +-
18389 drivers/usb/storage/usb.h | 2 +-
18390 drivers/usb/usbip/vhci.h | 2 +-
18391 drivers/usb/usbip/vhci_hcd.c | 6 +-
18392 drivers/usb/usbip/vhci_rx.c | 2 +-
18393 drivers/usb/wusbcore/wa-hc.h | 4 +-
18394 drivers/usb/wusbcore/wa-xfer.c | 2 +-
18395 drivers/vfio/vfio.c | 2 +-
18396 drivers/vhost/vringh.c | 20 +-
18397 drivers/video/backlight/kb3886_bl.c | 2 +-
18398 drivers/video/console/fbcon.c | 2 +-
18399 drivers/video/fbdev/aty/aty128fb.c | 2 +-
18400 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
18401 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
18402 drivers/video/fbdev/core/fb_defio.c | 6 +-
18403 drivers/video/fbdev/core/fbmem.c | 2 +-
18404 drivers/video/fbdev/hyperv_fb.c | 4 +-
18405 drivers/video/fbdev/i810/i810_accel.c | 1 +
18406 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
18407 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
18408 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
18409 drivers/video/fbdev/omap2/dss/display.c | 8 +-
18410 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
18411 drivers/video/fbdev/smscufx.c | 4 +-
18412 drivers/video/fbdev/udlfb.c | 36 +-
18413 drivers/video/fbdev/uvesafb.c | 52 +-
18414 drivers/video/fbdev/vesafb.c | 58 +-
18415 drivers/video/fbdev/via/via_clock.h | 2 +-
18416 drivers/xen/events/events_base.c | 6 +-
18417 drivers/xen/evtchn.c | 4 +-
18418 fs/Kconfig.binfmt | 2 +-
18419 fs/afs/inode.c | 4 +-
18420 fs/aio.c | 2 +-
18421 fs/autofs4/waitq.c | 2 +-
18422 fs/befs/endian.h | 6 +-
18423 fs/binfmt_aout.c | 23 +-
18424 fs/binfmt_elf.c | 670 +-
18425 fs/binfmt_elf_fdpic.c | 4 +-
18426 fs/block_dev.c | 2 +-
18427 fs/btrfs/ctree.c | 9 +-
18428 fs/btrfs/delayed-inode.c | 9 +-
18429 fs/btrfs/delayed-inode.h | 6 +-
18430 fs/btrfs/file.c | 10 +-
18431 fs/btrfs/inode.c | 14 +-
18432 fs/btrfs/super.c | 2 +-
18433 fs/btrfs/sysfs.c | 2 +-
18434 fs/btrfs/tests/free-space-tests.c | 8 +-
18435 fs/btrfs/tree-log.h | 2 +-
18436 fs/buffer.c | 2 +-
18437 fs/cachefiles/bind.c | 6 +-
18438 fs/cachefiles/daemon.c | 8 +-
18439 fs/cachefiles/internal.h | 12 +-
18440 fs/cachefiles/namei.c | 2 +-
18441 fs/cachefiles/proc.c | 12 +-
18442 fs/ceph/dir.c | 12 +-
18443 fs/ceph/super.c | 4 +-
18444 fs/cifs/cifs_debug.c | 12 +-
18445 fs/cifs/cifsfs.c | 8 +-
18446 fs/cifs/cifsglob.h | 54 +-
18447 fs/cifs/file.c | 10 +-
18448 fs/cifs/misc.c | 4 +-
18449 fs/cifs/smb1ops.c | 80 +-
18450 fs/cifs/smb2ops.c | 84 +-
18451 fs/cifs/smb2pdu.c | 3 +-
18452 fs/coda/cache.c | 10 +-
18453 fs/compat.c | 4 +-
18454 fs/compat_binfmt_elf.c | 2 +
18455 fs/compat_ioctl.c | 12 +-
18456 fs/configfs/dir.c | 10 +-
18457 fs/coredump.c | 16 +-
18458 fs/dcache.c | 51 +-
18459 fs/ecryptfs/inode.c | 2 +-
18460 fs/ecryptfs/miscdev.c | 2 +-
18461 fs/exec.c | 362 +-
18462 fs/ext2/xattr.c | 5 +-
18463 fs/ext4/ext4.h | 20 +-
18464 fs/ext4/mballoc.c | 44 +-
18465 fs/ext4/resize.c | 16 +-
18466 fs/ext4/super.c | 4 +-
18467 fs/ext4/xattr.c | 5 +-
18468 fs/fhandle.c | 3 +-
18469 fs/file.c | 4 +-
18470 fs/fs_struct.c | 8 +-
18471 fs/fscache/cookie.c | 40 +-
18472 fs/fscache/internal.h | 202 +-
18473 fs/fscache/object.c | 26 +-
18474 fs/fscache/operation.c | 38 +-
18475 fs/fscache/page.c | 110 +-
18476 fs/fscache/stats.c | 348 +-
18477 fs/fuse/cuse.c | 10 +-
18478 fs/fuse/dev.c | 4 +-
18479 fs/gfs2/glock.c | 22 +-
18480 fs/gfs2/glops.c | 4 +-
18481 fs/gfs2/quota.c | 6 +-
18482 fs/hugetlbfs/inode.c | 13 +-
18483 fs/inode.c | 4 +-
18484 fs/jffs2/erase.c | 3 +-
18485 fs/jffs2/wbuf.c | 3 +-
18486 fs/jfs/super.c | 2 +-
18487 fs/kernfs/dir.c | 2 +-
18488 fs/kernfs/file.c | 20 +-
18489 fs/libfs.c | 10 +-
18490 fs/lockd/clntproc.c | 4 +-
18491 fs/namei.c | 16 +-
18492 fs/namespace.c | 16 +-
18493 fs/nfs/callback_xdr.c | 2 +-
18494 fs/nfs/inode.c | 6 +-
18495 fs/nfsd/nfs4proc.c | 2 +-
18496 fs/nfsd/nfs4xdr.c | 2 +-
18497 fs/nfsd/nfscache.c | 11 +-
18498 fs/nfsd/vfs.c | 6 +-
18499 fs/nls/nls_base.c | 26 +-
18500 fs/nls/nls_euc-jp.c | 6 +-
18501 fs/nls/nls_koi8-ru.c | 6 +-
18502 fs/notify/fanotify/fanotify_user.c | 4 +-
18503 fs/notify/notification.c | 4 +-
18504 fs/ntfs/dir.c | 2 +-
18505 fs/ntfs/super.c | 6 +-
18506 fs/ocfs2/localalloc.c | 2 +-
18507 fs/ocfs2/ocfs2.h | 10 +-
18508 fs/ocfs2/suballoc.c | 12 +-
18509 fs/ocfs2/super.c | 20 +-
18510 fs/pipe.c | 72 +-
18511 fs/posix_acl.c | 4 +-
18512 fs/proc/array.c | 20 +
18513 fs/proc/base.c | 4 +-
18514 fs/proc/kcore.c | 34 +-
18515 fs/proc/meminfo.c | 2 +-
18516 fs/proc/nommu.c | 2 +-
18517 fs/proc/proc_sysctl.c | 26 +-
18518 fs/proc/task_mmu.c | 39 +-
18519 fs/proc/task_nommu.c | 4 +-
18520 fs/proc/vmcore.c | 16 +-
18521 fs/qnx6/qnx6.h | 4 +-
18522 fs/quota/netlink.c | 4 +-
18523 fs/read_write.c | 2 +-
18524 fs/reiserfs/do_balan.c | 2 +-
18525 fs/reiserfs/procfs.c | 2 +-
18526 fs/reiserfs/reiserfs.h | 4 +-
18527 fs/seq_file.c | 4 +-
18528 fs/splice.c | 43 +-
18529 fs/squashfs/xattr.c | 12 +-
18530 fs/sysv/sysv.h | 2 +-
18531 fs/tracefs/inode.c | 8 +-
18532 fs/udf/misc.c | 2 +-
18533 fs/ufs/swab.h | 4 +-
18534 fs/userfaultfd.c | 2 +-
18535 fs/xattr.c | 21 +
18536 fs/xfs/libxfs/xfs_bmap.c | 2 +-
18537 fs/xfs/xfs_dir2_readdir.c | 7 +-
18538 fs/xfs/xfs_ioctl.c | 2 +-
18539 fs/xfs/xfs_linux.h | 4 +-
18540 include/asm-generic/4level-fixup.h | 2 +
18541 include/asm-generic/atomic-long.h | 156 +-
18542 include/asm-generic/atomic64.h | 12 +
18543 include/asm-generic/bitops/__fls.h | 2 +-
18544 include/asm-generic/bitops/fls.h | 2 +-
18545 include/asm-generic/bitops/fls64.h | 4 +-
18546 include/asm-generic/bug.h | 6 +-
18547 include/asm-generic/cache.h | 4 +-
18548 include/asm-generic/emergency-restart.h | 2 +-
18549 include/asm-generic/kmap_types.h | 4 +-
18550 include/asm-generic/local.h | 13 +
18551 include/asm-generic/pgtable-nopmd.h | 18 +-
18552 include/asm-generic/pgtable-nopud.h | 15 +-
18553 include/asm-generic/pgtable.h | 16 +
18554 include/asm-generic/sections.h | 1 +
18555 include/asm-generic/uaccess.h | 16 +
18556 include/asm-generic/vmlinux.lds.h | 15 +-
18557 include/crypto/algapi.h | 2 +-
18558 include/drm/drmP.h | 16 +-
18559 include/drm/drm_crtc_helper.h | 2 +-
18560 include/drm/drm_mm.h | 2 +-
18561 include/drm/i915_pciids.h | 2 +-
18562 include/drm/intel-gtt.h | 4 +-
18563 include/drm/ttm/ttm_memory.h | 2 +-
18564 include/drm/ttm/ttm_page_alloc.h | 1 +
18565 include/keys/asymmetric-subtype.h | 2 +-
18566 include/linux/atmdev.h | 4 +-
18567 include/linux/atomic.h | 17 +-
18568 include/linux/audit.h | 2 +-
18569 include/linux/average.h | 2 +-
18570 include/linux/binfmts.h | 3 +-
18571 include/linux/bitmap.h | 2 +-
18572 include/linux/bitops.h | 8 +-
18573 include/linux/blkdev.h | 2 +-
18574 include/linux/blktrace_api.h | 2 +-
18575 include/linux/cache.h | 8 +
18576 include/linux/cdrom.h | 1 -
18577 include/linux/cleancache.h | 2 +-
18578 include/linux/clk-provider.h | 1 +
18579 include/linux/compat.h | 6 +-
18580 include/linux/compiler-gcc.h | 28 +-
18581 include/linux/compiler.h | 157 +-
18582 include/linux/configfs.h | 2 +-
18583 include/linux/cpufreq.h | 3 +-
18584 include/linux/cpuidle.h | 5 +-
18585 include/linux/cpumask.h | 14 +-
18586 include/linux/crypto.h | 4 +-
18587 include/linux/ctype.h | 2 +-
18588 include/linux/dcache.h | 4 +-
18589 include/linux/decompress/mm.h | 2 +-
18590 include/linux/devfreq.h | 2 +-
18591 include/linux/device.h | 7 +-
18592 include/linux/dma-mapping.h | 2 +-
18593 include/linux/efi.h | 1 +
18594 include/linux/elf.h | 2 +
18595 include/linux/err.h | 4 +-
18596 include/linux/extcon.h | 2 +-
18597 include/linux/fb.h | 3 +-
18598 include/linux/fdtable.h | 2 +-
18599 include/linux/fs.h | 5 +-
18600 include/linux/fs_struct.h | 2 +-
18601 include/linux/fscache-cache.h | 2 +-
18602 include/linux/fscache.h | 2 +-
18603 include/linux/fsnotify.h | 2 +-
18604 include/linux/genhd.h | 4 +-
18605 include/linux/genl_magic_func.h | 2 +-
18606 include/linux/gfp.h | 12 +-
18607 include/linux/highmem.h | 12 +
18608 include/linux/hwmon-sysfs.h | 6 +-
18609 include/linux/i2c.h | 1 +
18610 include/linux/if_pppox.h | 2 +-
18611 include/linux/init.h | 12 +-
18612 include/linux/init_task.h | 7 +
18613 include/linux/interrupt.h | 6 +-
18614 include/linux/iommu.h | 2 +-
18615 include/linux/ioport.h | 2 +-
18616 include/linux/ipc.h | 2 +-
18617 include/linux/irq.h | 5 +-
18618 include/linux/irqdesc.h | 2 +-
18619 include/linux/irqdomain.h | 3 +
18620 include/linux/jiffies.h | 16 +-
18621 include/linux/key-type.h | 2 +-
18622 include/linux/kgdb.h | 6 +-
18623 include/linux/kmemleak.h | 4 +-
18624 include/linux/kobject.h | 3 +-
18625 include/linux/kobject_ns.h | 2 +-
18626 include/linux/kref.h | 2 +-
18627 include/linux/libata.h | 2 +-
18628 include/linux/linkage.h | 1 +
18629 include/linux/list.h | 15 +
18630 include/linux/lockref.h | 26 +-
18631 include/linux/math64.h | 10 +-
18632 include/linux/mempolicy.h | 7 +
18633 include/linux/mm.h | 102 +-
18634 include/linux/mm_types.h | 20 +
18635 include/linux/mmiotrace.h | 4 +-
18636 include/linux/mmzone.h | 2 +-
18637 include/linux/mod_devicetable.h | 4 +-
18638 include/linux/module.h | 69 +-
18639 include/linux/moduleloader.h | 16 +
18640 include/linux/moduleparam.h | 4 +-
18641 include/linux/net.h | 2 +-
18642 include/linux/netdevice.h | 7 +-
18643 include/linux/netfilter.h | 2 +-
18644 include/linux/netfilter/nfnetlink.h | 2 +-
18645 include/linux/nls.h | 4 +-
18646 include/linux/notifier.h | 3 +-
18647 include/linux/oprofile.h | 4 +-
18648 include/linux/padata.h | 2 +-
18649 include/linux/pci_hotplug.h | 3 +-
18650 include/linux/percpu.h | 2 +-
18651 include/linux/perf_event.h | 12 +-
18652 include/linux/pipe_fs_i.h | 8 +-
18653 include/linux/pm.h | 1 +
18654 include/linux/pm_domain.h | 4 +-
18655 include/linux/pm_runtime.h | 2 +-
18656 include/linux/pnp.h | 2 +-
18657 include/linux/poison.h | 4 +-
18658 include/linux/power/smartreflex.h | 2 +-
18659 include/linux/ppp-comp.h | 2 +-
18660 include/linux/preempt.h | 21 +
18661 include/linux/proc_ns.h | 2 +-
18662 include/linux/psci.h | 2 +-
18663 include/linux/quota.h | 2 +-
18664 include/linux/random.h | 19 +-
18665 include/linux/rculist.h | 16 +
18666 include/linux/reboot.h | 14 +-
18667 include/linux/regset.h | 3 +-
18668 include/linux/relay.h | 2 +-
18669 include/linux/rio.h | 2 +-
18670 include/linux/rmap.h | 4 +-
18671 include/linux/sched.h | 72 +-
18672 include/linux/sched/sysctl.h | 1 +
18673 include/linux/semaphore.h | 2 +-
18674 include/linux/seq_file.h | 1 +
18675 include/linux/signal.h | 2 +-
18676 include/linux/skbuff.h | 12 +-
18677 include/linux/slab.h | 47 +-
18678 include/linux/slab_def.h | 14 +-
18679 include/linux/slub_def.h | 2 +-
18680 include/linux/smp.h | 2 +
18681 include/linux/sock_diag.h | 2 +-
18682 include/linux/sonet.h | 2 +-
18683 include/linux/sunrpc/addr.h | 8 +-
18684 include/linux/sunrpc/clnt.h | 2 +-
18685 include/linux/sunrpc/svc.h | 2 +-
18686 include/linux/sunrpc/svc_rdma.h | 18 +-
18687 include/linux/sunrpc/svcauth.h | 2 +-
18688 include/linux/swapops.h | 10 +-
18689 include/linux/swiotlb.h | 3 +-
18690 include/linux/syscalls.h | 21 +-
18691 include/linux/syscore_ops.h | 2 +-
18692 include/linux/sysctl.h | 3 +-
18693 include/linux/sysfs.h | 9 +-
18694 include/linux/sysrq.h | 3 +-
18695 include/linux/tcp.h | 14 +-
18696 include/linux/thread_info.h | 7 +
18697 include/linux/tty.h | 4 +-
18698 include/linux/tty_driver.h | 2 +-
18699 include/linux/tty_ldisc.h | 2 +-
18700 include/linux/types.h | 16 +
18701 include/linux/uaccess.h | 6 +-
18702 include/linux/uio_driver.h | 2 +-
18703 include/linux/unaligned/access_ok.h | 24 +-
18704 include/linux/usb.h | 12 +-
18705 include/linux/usb/hcd.h | 1 +
18706 include/linux/usb/renesas_usbhs.h | 2 +-
18707 include/linux/vermagic.h | 21 +-
18708 include/linux/vga_switcheroo.h | 8 +-
18709 include/linux/vmalloc.h | 7 +-
18710 include/linux/vmstat.h | 24 +-
18711 include/linux/xattr.h | 5 +-
18712 include/linux/zlib.h | 3 +-
18713 include/media/v4l2-dev.h | 2 +-
18714 include/media/v4l2-device.h | 2 +-
18715 include/net/9p/transport.h | 2 +-
18716 include/net/bluetooth/l2cap.h | 2 +-
18717 include/net/bonding.h | 2 +-
18718 include/net/caif/cfctrl.h | 6 +-
18719 include/net/flow.h | 2 +-
18720 include/net/genetlink.h | 2 +-
18721 include/net/gro_cells.h | 2 +-
18722 include/net/inet_connection_sock.h | 2 +-
18723 include/net/inet_sock.h | 2 +-
18724 include/net/inetpeer.h | 2 +-
18725 include/net/ip_fib.h | 2 +-
18726 include/net/ip_vs.h | 8 +-
18727 include/net/ipv6.h | 2 +-
18728 include/net/irda/ircomm_tty.h | 1 +
18729 include/net/iucv/af_iucv.h | 2 +-
18730 include/net/llc_c_ac.h | 2 +-
18731 include/net/llc_c_ev.h | 4 +-
18732 include/net/llc_c_st.h | 2 +-
18733 include/net/llc_s_ac.h | 2 +-
18734 include/net/llc_s_st.h | 2 +-
18735 include/net/mac80211.h | 4 +-
18736 include/net/neighbour.h | 2 +-
18737 include/net/net_namespace.h | 18 +-
18738 include/net/netlink.h | 2 +-
18739 include/net/netns/conntrack.h | 6 +-
18740 include/net/netns/ipv4.h | 4 +-
18741 include/net/netns/ipv6.h | 4 +-
18742 include/net/netns/xfrm.h | 2 +-
18743 include/net/ping.h | 2 +-
18744 include/net/protocol.h | 4 +-
18745 include/net/rtnetlink.h | 2 +-
18746 include/net/sctp/checksum.h | 4 +-
18747 include/net/sctp/sm.h | 4 +-
18748 include/net/sctp/structs.h | 2 +-
18749 include/net/sock.h | 12 +-
18750 include/net/tcp.h | 8 +-
18751 include/net/xfrm.h | 13 +-
18752 include/rdma/iw_cm.h | 2 +-
18753 include/scsi/libfc.h | 3 +-
18754 include/scsi/scsi_device.h | 6 +-
18755 include/scsi/scsi_driver.h | 2 +-
18756 include/scsi/scsi_transport_fc.h | 3 +-
18757 include/scsi/sg.h | 2 +-
18758 include/sound/compress_driver.h | 2 +-
18759 include/sound/soc.h | 4 +-
18760 include/trace/events/irq.h | 4 +-
18761 include/uapi/linux/a.out.h | 8 +
18762 include/uapi/linux/bcache.h | 5 +-
18763 include/uapi/linux/byteorder/little_endian.h | 28 +-
18764 include/uapi/linux/connector.h | 2 +-
18765 include/uapi/linux/elf.h | 28 +
18766 include/uapi/linux/screen_info.h | 3 +-
18767 include/uapi/linux/swab.h | 6 +-
18768 include/uapi/linux/xattr.h | 4 +
18769 include/video/udlfb.h | 8 +-
18770 include/video/uvesafb.h | 1 +
18771 init/Kconfig | 2 +-
18772 init/Makefile | 3 +
18773 init/do_mounts.c | 14 +-
18774 init/do_mounts.h | 8 +-
18775 init/do_mounts_initrd.c | 30 +-
18776 init/do_mounts_md.c | 6 +-
18777 init/init_task.c | 4 +
18778 init/initramfs.c | 38 +-
18779 init/main.c | 30 +-
18780 ipc/compat.c | 4 +-
18781 ipc/ipc_sysctl.c | 8 +-
18782 ipc/mq_sysctl.c | 4 +-
18783 ipc/sem.c | 4 +-
18784 ipc/shm.c | 6 +
18785 kernel/audit.c | 8 +-
18786 kernel/auditsc.c | 4 +-
18787 kernel/bpf/core.c | 7 +-
18788 kernel/capability.c | 3 +
18789 kernel/compat.c | 38 +-
18790 kernel/debug/debug_core.c | 16 +-
18791 kernel/debug/kdb/kdb_main.c | 4 +-
18792 kernel/events/core.c | 26 +-
18793 kernel/events/internal.h | 10 +-
18794 kernel/events/uprobes.c | 2 +-
18795 kernel/exit.c | 2 +-
18796 kernel/fork.c | 167 +-
18797 kernel/futex.c | 11 +-
18798 kernel/futex_compat.c | 2 +-
18799 kernel/gcov/base.c | 7 +-
18800 kernel/irq/manage.c | 2 +-
18801 kernel/irq/msi.c | 19 +-
18802 kernel/irq/spurious.c | 2 +-
18803 kernel/jump_label.c | 5 +
18804 kernel/kallsyms.c | 37 +-
18805 kernel/kexec.c | 3 +-
18806 kernel/kmod.c | 8 +-
18807 kernel/kprobes.c | 4 +-
18808 kernel/ksysfs.c | 2 +-
18809 kernel/locking/lockdep.c | 7 +-
18810 kernel/locking/mutex-debug.c | 12 +-
18811 kernel/locking/mutex-debug.h | 4 +-
18812 kernel/locking/mutex.c | 6 +-
18813 kernel/module.c | 422 +-
18814 kernel/notifier.c | 17 +-
18815 kernel/padata.c | 4 +-
18816 kernel/panic.c | 5 +-
18817 kernel/pid.c | 2 +-
18818 kernel/pid_namespace.c | 2 +-
18819 kernel/power/process.c | 12 +-
18820 kernel/profile.c | 14 +-
18821 kernel/ptrace.c | 8 +-
18822 kernel/rcu/rcutorture.c | 60 +-
18823 kernel/rcu/tiny.c | 4 +-
18824 kernel/rcu/tree.c | 44 +-
18825 kernel/rcu/tree.h | 14 +-
18826 kernel/rcu/tree_plugin.h | 14 +-
18827 kernel/rcu/tree_trace.c | 12 +-
18828 kernel/sched/auto_group.c | 4 +-
18829 kernel/sched/core.c | 45 +-
18830 kernel/sched/fair.c | 2 +-
18831 kernel/sched/sched.h | 2 +-
18832 kernel/signal.c | 12 +-
18833 kernel/smpboot.c | 4 +-
18834 kernel/softirq.c | 12 +-
18835 kernel/sys.c | 10 +-
18836 kernel/sysctl.c | 34 +-
18837 kernel/time/alarmtimer.c | 2 +-
18838 kernel/time/posix-cpu-timers.c | 4 +-
18839 kernel/time/posix-timers.c | 24 +-
18840 kernel/time/timer.c | 2 +-
18841 kernel/time/timer_stats.c | 10 +-
18842 kernel/trace/blktrace.c | 6 +-
18843 kernel/trace/ftrace.c | 15 +-
18844 kernel/trace/ring_buffer.c | 96 +-
18845 kernel/trace/trace.c | 2 +-
18846 kernel/trace/trace.h | 2 +-
18847 kernel/trace/trace_clock.c | 4 +-
18848 kernel/trace/trace_events.c | 1 -
18849 kernel/trace/trace_functions_graph.c | 4 +-
18850 kernel/trace/trace_mmiotrace.c | 8 +-
18851 kernel/trace/trace_output.c | 10 +-
18852 kernel/trace/trace_seq.c | 2 +-
18853 kernel/trace/trace_stack.c | 2 +-
18854 kernel/user_namespace.c | 2 +-
18855 kernel/utsname_sysctl.c | 2 +-
18856 kernel/watchdog.c | 2 +-
18857 kernel/workqueue.c | 2 +-
18858 lib/Kconfig.debug | 8 +-
18859 lib/Makefile | 2 +-
18860 lib/bitmap.c | 8 +-
18861 lib/bug.c | 2 +
18862 lib/debugobjects.c | 2 +-
18863 lib/decompress_bunzip2.c | 3 +-
18864 lib/decompress_unlzma.c | 4 +-
18865 lib/div64.c | 4 +-
18866 lib/dma-debug.c | 4 +-
18867 lib/inflate.c | 2 +-
18868 lib/ioremap.c | 4 +-
18869 lib/kobject.c | 4 +-
18870 lib/list_debug.c | 126 +-
18871 lib/lockref.c | 44 +-
18872 lib/percpu-refcount.c | 2 +-
18873 lib/radix-tree.c | 2 +-
18874 lib/random32.c | 2 +-
18875 lib/show_mem.c | 2 +-
18876 lib/strncpy_from_user.c | 2 +-
18877 lib/strnlen_user.c | 2 +-
18878 lib/swiotlb.c | 2 +-
18879 lib/usercopy.c | 6 +
18880 lib/vsprintf.c | 12 +-
18881 mm/Kconfig | 6 +-
18882 mm/backing-dev.c | 4 +-
18883 mm/debug.c | 3 +
18884 mm/filemap.c | 2 +-
18885 mm/gup.c | 13 +-
18886 mm/highmem.c | 6 +-
18887 mm/hugetlb.c | 70 +-
18888 mm/internal.h | 1 +
18889 mm/maccess.c | 4 +-
18890 mm/madvise.c | 37 +
18891 mm/memory-failure.c | 6 +-
18892 mm/memory.c | 424 +-
18893 mm/mempolicy.c | 25 +
18894 mm/mlock.c | 15 +-
18895 mm/mm_init.c | 2 +-
18896 mm/mmap.c | 582 +-
18897 mm/mprotect.c | 137 +-
18898 mm/mremap.c | 39 +-
18899 mm/nommu.c | 21 +-
18900 mm/page-writeback.c | 2 +-
18901 mm/page_alloc.c | 49 +-
18902 mm/percpu.c | 2 +-
18903 mm/process_vm_access.c | 14 +-
18904 mm/rmap.c | 45 +-
18905 mm/shmem.c | 19 +-
18906 mm/slab.c | 109 +-
18907 mm/slab.h | 22 +-
18908 mm/slab_common.c | 86 +-
18909 mm/slob.c | 218 +-
18910 mm/slub.c | 102 +-
18911 mm/sparse-vmemmap.c | 4 +-
18912 mm/sparse.c | 2 +-
18913 mm/swap.c | 2 +
18914 mm/swapfile.c | 12 +-
18915 mm/util.c | 6 +
18916 mm/vmalloc.c | 114 +-
18917 mm/vmstat.c | 12 +-
18918 net/8021q/vlan.c | 5 +-
18919 net/8021q/vlan_netlink.c | 2 +-
18920 net/9p/mod.c | 4 +-
18921 net/9p/trans_fd.c | 2 +-
18922 net/atm/atm_misc.c | 8 +-
18923 net/atm/lec.h | 2 +-
18924 net/atm/proc.c | 6 +-
18925 net/atm/resources.c | 4 +-
18926 net/ax25/sysctl_net_ax25.c | 2 +-
18927 net/batman-adv/bat_iv_ogm.c | 8 +-
18928 net/batman-adv/fragmentation.c | 2 +-
18929 net/batman-adv/soft-interface.c | 8 +-
18930 net/batman-adv/types.h | 6 +-
18931 net/bluetooth/hci_sock.c | 2 +-
18932 net/bluetooth/l2cap_core.c | 6 +-
18933 net/bluetooth/l2cap_sock.c | 12 +-
18934 net/bluetooth/rfcomm/sock.c | 4 +-
18935 net/bluetooth/rfcomm/tty.c | 4 +-
18936 net/bridge/br_netlink.c | 2 +-
18937 net/bridge/netfilter/ebtables.c | 6 +-
18938 net/caif/cfctrl.c | 11 +-
18939 net/caif/chnl_net.c | 2 +-
18940 net/can/af_can.c | 2 +-
18941 net/can/gw.c | 6 +-
18942 net/ceph/messenger.c | 4 +-
18943 net/compat.c | 24 +-
18944 net/core/datagram.c | 2 +-
18945 net/core/dev.c | 16 +-
18946 net/core/filter.c | 2 +-
18947 net/core/flow.c | 6 +-
18948 net/core/neighbour.c | 4 +-
18949 net/core/net-sysfs.c | 2 +-
18950 net/core/net_namespace.c | 8 +-
18951 net/core/netpoll.c | 4 +-
18952 net/core/rtnetlink.c | 15 +-
18953 net/core/scm.c | 14 +-
18954 net/core/skbuff.c | 8 +-
18955 net/core/sock.c | 28 +-
18956 net/core/sock_diag.c | 15 +-
18957 net/core/sysctl_net_core.c | 22 +-
18958 net/decnet/af_decnet.c | 1 +
18959 net/decnet/sysctl_net_decnet.c | 4 +-
18960 net/dsa/dsa.c | 2 +-
18961 net/hsr/hsr_netlink.c | 2 +-
18962 net/ieee802154/6lowpan/core.c | 2 +-
18963 net/ieee802154/6lowpan/reassembly.c | 14 +-
18964 net/ipv4/af_inet.c | 2 +-
18965 net/ipv4/devinet.c | 18 +-
18966 net/ipv4/fib_frontend.c | 6 +-
18967 net/ipv4/fib_semantics.c | 2 +-
18968 net/ipv4/inet_connection_sock.c | 4 +-
18969 net/ipv4/inet_timewait_sock.c | 2 +-
18970 net/ipv4/inetpeer.c | 2 +-
18971 net/ipv4/ip_fragment.c | 15 +-
18972 net/ipv4/ip_gre.c | 6 +-
18973 net/ipv4/ip_sockglue.c | 2 +-
18974 net/ipv4/ip_vti.c | 4 +-
18975 net/ipv4/ipconfig.c | 6 +-
18976 net/ipv4/ipip.c | 4 +-
18977 net/ipv4/netfilter/arp_tables.c | 12 +-
18978 net/ipv4/netfilter/ip_tables.c | 12 +-
18979 net/ipv4/ping.c | 14 +-
18980 net/ipv4/raw.c | 14 +-
18981 net/ipv4/route.c | 32 +-
18982 net/ipv4/sysctl_net_ipv4.c | 22 +-
18983 net/ipv4/tcp_input.c | 6 +-
18984 net/ipv4/tcp_probe.c | 2 +-
18985 net/ipv4/udp.c | 10 +-
18986 net/ipv4/xfrm4_policy.c | 18 +-
18987 net/ipv6/addrconf.c | 18 +-
18988 net/ipv6/af_inet6.c | 2 +-
18989 net/ipv6/datagram.c | 2 +-
18990 net/ipv6/icmp.c | 2 +-
18991 net/ipv6/ip6_fib.c | 4 +-
18992 net/ipv6/ip6_gre.c | 10 +-
18993 net/ipv6/ip6_tunnel.c | 4 +-
18994 net/ipv6/ip6_vti.c | 4 +-
18995 net/ipv6/ipv6_sockglue.c | 2 +-
18996 net/ipv6/netfilter/ip6_tables.c | 12 +-
18997 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
18998 net/ipv6/ping.c | 33 +-
18999 net/ipv6/raw.c | 17 +-
19000 net/ipv6/reassembly.c | 13 +-
19001 net/ipv6/route.c | 2 +-
19002 net/ipv6/sit.c | 4 +-
19003 net/ipv6/sysctl_net_ipv6.c | 2 +-
19004 net/ipv6/udp.c | 6 +-
19005 net/ipv6/xfrm6_policy.c | 17 +-
19006 net/irda/ircomm/ircomm_tty.c | 18 +-
19007 net/iucv/af_iucv.c | 4 +-
19008 net/iucv/iucv.c | 2 +-
19009 net/key/af_key.c | 4 +-
19010 net/l2tp/l2tp_eth.c | 38 +-
19011 net/l2tp/l2tp_ip.c | 2 +-
19012 net/l2tp/l2tp_ip6.c | 2 +-
19013 net/mac80211/cfg.c | 8 +-
19014 net/mac80211/ieee80211_i.h | 3 +-
19015 net/mac80211/iface.c | 20 +-
19016 net/mac80211/main.c | 2 +-
19017 net/mac80211/pm.c | 4 +-
19018 net/mac80211/rate.c | 2 +-
19019 net/mac80211/sta_info.c | 2 +-
19020 net/mac80211/util.c | 8 +-
19021 net/mpls/af_mpls.c | 6 +-
19022 net/netfilter/ipset/ip_set_core.c | 2 +-
19023 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
19024 net/netfilter/ipvs/ip_vs_core.c | 4 +-
19025 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
19026 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
19027 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
19028 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
19029 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
19030 net/netfilter/nf_conntrack_acct.c | 2 +-
19031 net/netfilter/nf_conntrack_ecache.c | 2 +-
19032 net/netfilter/nf_conntrack_helper.c | 2 +-
19033 net/netfilter/nf_conntrack_proto.c | 2 +-
19034 net/netfilter/nf_conntrack_standalone.c | 2 +-
19035 net/netfilter/nf_conntrack_timestamp.c | 2 +-
19036 net/netfilter/nf_log.c | 10 +-
19037 net/netfilter/nf_sockopt.c | 4 +-
19038 net/netfilter/nfnetlink_log.c | 4 +-
19039 net/netfilter/nft_compat.c | 9 +-
19040 net/netfilter/xt_statistic.c | 8 +-
19041 net/netlink/af_netlink.c | 4 +-
19042 net/openvswitch/vport-internal_dev.c | 2 +-
19043 net/packet/af_packet.c | 8 +-
19044 net/phonet/pep.c | 6 +-
19045 net/phonet/socket.c | 2 +-
19046 net/phonet/sysctl.c | 2 +-
19047 net/rds/cong.c | 6 +-
19048 net/rds/ib.h | 2 +-
19049 net/rds/ib_cm.c | 2 +-
19050 net/rds/ib_recv.c | 4 +-
19051 net/rds/iw.h | 2 +-
19052 net/rds/iw_cm.c | 2 +-
19053 net/rds/iw_recv.c | 4 +-
19054 net/rds/rds.h | 2 +-
19055 net/rds/tcp.c | 2 +-
19056 net/rds/tcp_send.c | 2 +-
19057 net/rxrpc/af_rxrpc.c | 2 +-
19058 net/rxrpc/ar-ack.c | 14 +-
19059 net/rxrpc/ar-call.c | 2 +-
19060 net/rxrpc/ar-connection.c | 2 +-
19061 net/rxrpc/ar-connevent.c | 2 +-
19062 net/rxrpc/ar-input.c | 4 +-
19063 net/rxrpc/ar-internal.h | 8 +-
19064 net/rxrpc/ar-local.c | 2 +-
19065 net/rxrpc/ar-output.c | 4 +-
19066 net/rxrpc/ar-peer.c | 2 +-
19067 net/rxrpc/ar-proc.c | 4 +-
19068 net/rxrpc/ar-transport.c | 2 +-
19069 net/rxrpc/rxkad.c | 4 +-
19070 net/sched/sch_generic.c | 4 +-
19071 net/sctp/ipv6.c | 6 +-
19072 net/sctp/protocol.c | 10 +-
19073 net/sctp/sm_sideeffect.c | 2 +-
19074 net/sctp/socket.c | 21 +-
19075 net/sctp/sysctl.c | 10 +-
19076 net/socket.c | 18 +-
19077 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
19078 net/sunrpc/clnt.c | 4 +-
19079 net/sunrpc/sched.c | 4 +-
19080 net/sunrpc/svc.c | 4 +-
19081 net/sunrpc/svcauth_unix.c | 2 +-
19082 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
19083 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
19084 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
19085 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
19086 net/tipc/netlink_compat.c | 12 +-
19087 net/tipc/subscr.c | 2 +-
19088 net/unix/af_unix.c | 7 +-
19089 net/unix/sysctl_net_unix.c | 2 +-
19090 net/wireless/wext-core.c | 19 +-
19091 net/xfrm/xfrm_policy.c | 16 +-
19092 net/xfrm/xfrm_state.c | 33 +-
19093 net/xfrm/xfrm_sysctl.c | 2 +-
19094 scripts/Kbuild.include | 2 +-
19095 scripts/Makefile.build | 2 +-
19096 scripts/Makefile.clean | 3 +-
19097 scripts/Makefile.host | 69 +-
19098 scripts/basic/fixdep.c | 12 +-
19099 scripts/dtc/checks.c | 14 +-
19100 scripts/dtc/data.c | 6 +-
19101 scripts/dtc/flattree.c | 8 +-
19102 scripts/dtc/livetree.c | 4 +-
19103 scripts/gcc-plugin.sh | 51 +
19104 scripts/headers_install.sh | 1 +
19105 scripts/kallsyms.c | 4 +-
19106 scripts/kconfig/lkc.h | 5 +-
19107 scripts/kconfig/menu.c | 2 +-
19108 scripts/kconfig/symbol.c | 6 +-
19109 scripts/link-vmlinux.sh | 2 +-
19110 scripts/mod/file2alias.c | 14 +-
19111 scripts/mod/modpost.c | 25 +-
19112 scripts/mod/modpost.h | 6 +-
19113 scripts/mod/sumversion.c | 2 +-
19114 scripts/module-common.lds | 4 +
19115 scripts/package/builddeb | 1 +
19116 scripts/pnmtologo.c | 6 +-
19117 scripts/sortextable.h | 6 +-
19118 scripts/tags.sh | 2 +-
19119 security/Kconfig | 692 +-
19120 security/integrity/ima/ima.h | 4 +-
19121 security/integrity/ima/ima_api.c | 2 +-
19122 security/integrity/ima/ima_fs.c | 4 +-
19123 security/integrity/ima/ima_queue.c | 2 +-
19124 security/keys/key.c | 18 +-
19125 security/selinux/avc.c | 6 +-
19126 security/selinux/include/xfrm.h | 2 +-
19127 security/yama/yama_lsm.c | 2 +-
19128 sound/aoa/codecs/onyx.c | 7 +-
19129 sound/aoa/codecs/onyx.h | 1 +
19130 sound/core/oss/pcm_oss.c | 18 +-
19131 sound/core/pcm_compat.c | 2 +-
19132 sound/core/pcm_native.c | 4 +-
19133 sound/core/sound.c | 2 +-
19134 sound/drivers/mts64.c | 14 +-
19135 sound/drivers/opl4/opl4_lib.c | 2 +-
19136 sound/drivers/portman2x4.c | 3 +-
19137 sound/firewire/amdtp.c | 4 +-
19138 sound/firewire/amdtp.h | 4 +-
19139 sound/firewire/isight.c | 10 +-
19140 sound/firewire/scs1x.c | 8 +-
19141 sound/oss/sb_audio.c | 2 +-
19142 sound/oss/swarm_cs4297a.c | 6 +-
19143 sound/pci/hda/hda_codec.c | 2 +-
19144 sound/pci/ymfpci/ymfpci.h | 2 +-
19145 sound/pci/ymfpci/ymfpci_main.c | 12 +-
19146 sound/soc/codecs/sti-sas.c | 10 +-
19147 sound/soc/soc-ac97.c | 6 +-
19148 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
19149 tools/gcc/Makefile | 42 +
19150 tools/gcc/checker_plugin.c | 150 +
19151 tools/gcc/colorize_plugin.c | 215 +
19152 tools/gcc/constify_plugin.c | 571 +
19153 tools/gcc/gcc-common.h | 812 +
19154 tools/gcc/initify_plugin.c | 552 +
19155 tools/gcc/kallocstat_plugin.c | 188 +
19156 tools/gcc/kernexec_plugin.c | 549 +
19157 tools/gcc/latent_entropy_plugin.c | 470 +
19158 tools/gcc/size_overflow_plugin/.gitignore | 2 +
19159 tools/gcc/size_overflow_plugin/Makefile | 28 +
19160 .../disable_size_overflow_hash.data |12422 ++++++++++++
19161 .../generate_size_overflow_hash.sh | 103 +
19162 .../insert_size_overflow_asm.c | 416 +
19163 .../size_overflow_plugin/intentional_overflow.c | 1010 +
19164 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
19165 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
19166 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
19167 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
19168 .../size_overflow_hash_aux.data | 92 +
19169 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
19170 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
19171 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
19172 .../size_overflow_plugin_hash.c | 352 +
19173 .../size_overflow_plugin/size_overflow_transform.c | 749 +
19174 .../size_overflow_transform_core.c | 1010 +
19175 tools/gcc/stackleak_plugin.c | 436 +
19176 tools/gcc/structleak_plugin.c | 287 +
19177 tools/include/linux/compiler.h | 8 +
19178 tools/lib/api/Makefile | 2 +-
19179 tools/perf/util/include/asm/alternative-asm.h | 3 +
19180 tools/virtio/linux/uaccess.h | 2 +-
19181 virt/kvm/kvm_main.c | 42 +-
19182 1944 files changed, 66925 insertions(+), 8949 deletions(-)