]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blob - test/changelog-test.txt
Auto commit, 1 new patch{es}.
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
1 commit 6eb392861c72839f7af44d0e57927f362a2a0df5
2 Author: Brad Spengler <spender@grsecurity.net>
3 Date: Sun Jun 26 18:07:05 2016 -0400
4
5 compile fix
6
7 fs/posix_acl.c | 2 +-
8 1 file changed, 1 insertion(+), 1 deletion(-)
9
10 commit 1eed3a4206abdd68b35537dcff1b1832b28d4617
11 Author: Ben Hutchings <ben@decadent.org.uk>
12 Date: Wed Jun 22 19:43:35 2016 +0100
13
14 nfsd: check permissions when setting ACLs
15
16 Use set_posix_acl, which includes proper permission checks, instead of
17 calling ->set_acl directly. Without this anyone may be able to grant
18 themselves permissions to a file by setting the ACL.
19
20 Lock the inode to make the new checks atomic with respect to set_acl.
21 (Also, nfsd was the only caller of set_acl not locking the inode, so I
22 suspect this may fix other races.)
23
24 This also simplifies the code, and ensures our ACLs are checked by
25 posix_acl_valid.
26
27 The permission checks and the inode locking were lost with commit
28 4ac7249e, which changed nfsd to use the set_acl inode operation directly
29 instead of going through xattr handlers.
30
31 Reported-by: David Sinquin <david@sinquin.eu>
32 [agreunba@redhat.com: use set_posix_acl]
33 Fixes: 4ac7249e
34 Cc: Christoph Hellwig <hch@infradead.org>
35 Cc: Al Viro <viro@zeniv.linux.org.uk>
36 Cc: stable@vger.kernel.org
37 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
38
39 fs/nfsd/nfs2acl.c | 20 ++++++++++----------
40 fs/nfsd/nfs3acl.c | 16 +++++++---------
41 fs/nfsd/nfs4acl.c | 16 ++++++++--------
42 3 files changed, 25 insertions(+), 27 deletions(-)
43
44 commit d5be7c0c7a8e0408e9faf62dcaaf2471fe19d3a0
45 Author: Andreas Gruenbacher <agruenba@redhat.com>
46 Date: Wed Jun 22 23:57:25 2016 +0200
47
48 posix_acl: Add set_posix_acl
49
50 Factor out part of posix_acl_xattr_set into a common function that takes
51 a posix_acl, which nfsd can also call.
52
53 The prototype already exists in include/linux/posix_acl.h.
54
55 Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
56 Cc: stable@vger.kernel.org
57 Cc: Christoph Hellwig <hch@infradead.org>
58 Cc: Al Viro <viro@zeniv.linux.org.uk>
59 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
60
61 fs/posix_acl.c | 46 +++++++++++++++++++++++++++-------------------
62 1 file changed, 27 insertions(+), 19 deletions(-)
63
64 commit 5d722e6ce47a1c1987e862c84c4b56ddbc4423de
65 Author: Brad Spengler <spender@grsecurity.net>
66 Date: Sun Jun 26 17:33:38 2016 -0400
67
68 Fix ICE caused by duplicate plugin loads from the recent plugin
69 infrastructure changes
70
71 init/Makefile | 3 ---
72 1 file changed, 3 deletions(-)
73
74 commit 278d24df4f61ab171288187e6952ace4a82d42dc
75 Merge: 0c59418 83e55cb
76 Author: Brad Spengler <spender@grsecurity.net>
77 Date: Sun Jun 26 12:40:25 2016 -0400
78
79 Merge branch 'pax-test' into grsec-test
80
81 commit 83e55cbeedfb0b8712de995457c395b1ba8fe936
82 Author: Brad Spengler <spender@grsecurity.net>
83 Date: Sun Jun 26 12:11:40 2016 -0400
84
85 Update to pax-linux-4.5.7-test16.patch:
86 - imported a few more gcc plugin infrastructure changes from Emese's upstreaming work
87
88 .gitignore | 1 +
89 Makefile | 1 +
90 drivers/hv/hv.c | 2 +-
91 fs/namespace.c | 3 +-
92 include/linux/init.h | 4 +-
93 scripts/Makefile | 3 +-
94 scripts/Makefile.clean | 3 +-
95 scripts/Makefile.gcc-plugins | 5 ++-
96 scripts/Makefile.host | 7 ++-
97 scripts/gcc-plugins/Makefile | 54 +++++++----------------
98 scripts/gcc-plugins/rap_plugin/Makefile | 2 +
99 scripts/gcc-plugins/size_overflow_plugin/Makefile | 2 +
100 12 files changed, 39 insertions(+), 48 deletions(-)
101
102 commit 0c59418c05aa82cc46806b2b9b324d44ad5f043b
103 Author: Scott Bauer <sbauer@plzdonthack.me>
104 Date: Thu Jun 23 08:59:47 2016 -0600
105
106 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
107
108 This patch validates the num_values parameter from userland during the
109 HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
110 to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
111 leading to a heap overflow.
112
113 Cc: stable@vger.kernel.org
114 Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
115 Signed-off-by: Jiri Kosina <jkosina@suse.cz>
116
117 drivers/hid/usbhid/hiddev.c | 10 +++++-----
118 1 file changed, 5 insertions(+), 5 deletions(-)
119
120 commit 6c4919ead98c7342acecbd28f781dd2c3a37be4e
121 Author: Brad Spengler <spender@grsecurity.net>
122 Date: Sat Jun 25 07:22:44 2016 -0400
123
124 fix typo
125
126 scripts/Makefile.gcc-plugins | 2 +-
127 1 file changed, 1 insertion(+), 1 deletion(-)
128
129 commit 44fc4dd89969440d883528361bf65e6e82e35b49
130 Author: Brad Spengler <spender@grsecurity.net>
131 Date: Fri Jun 24 19:37:20 2016 -0400
132
133 RANDSTRUCT compile fix
134
135 drivers/gpu/drm/amd/powerplay/hwmgr/fiji_thermal.c | 20 ++++++++++----------
136 drivers/gpu/drm/amd/powerplay/hwmgr/tonga_thermal.c | 20 ++++++++++----------
137 2 files changed, 20 insertions(+), 20 deletions(-)
138
139 commit 08022b387ddd8856d39ace5d6f92636c7d1b422a
140 Author: Brad Spengler <spender@grsecurity.net>
141 Date: Fri Jun 24 19:22:39 2016 -0400
142
143 RANDSTRUCT compile fix
144
145 .../drm/amd/powerplay/hwmgr/cz_clockpowergating.c | 12 +++--
146 drivers/gpu/drm/amd/powerplay/hwmgr/cz_hwmgr.c | 58 +++++++++++-----------
147 2 files changed, 38 insertions(+), 32 deletions(-)
148
149 commit f48aea278530eb71ce2f9a24dc9e245f29d530ba
150 Author: Brad Spengler <spender@grsecurity.net>
151 Date: Fri Jun 24 18:52:19 2016 -0400
152
153 compile fix
154
155 drivers/hv/hv.c | 2 +-
156 1 file changed, 1 insertion(+), 1 deletion(-)
157
158 commit 1ce67be0c2ccf325fc5110ee052a8d0b08f09959
159 Author: Brad Spengler <spender@grsecurity.net>
160 Date: Fri Jun 24 17:45:26 2016 -0400
161
162 Add missing entries for RANDSTRUCT to scripts/Makefile.gcc-plugins
163 Bug introduced during 4.5 port during merging with upstream bikeshedding
164 scripts/gcc-plugins/Makefile was updated properly, but scripts/Makefile.gcc-plugins was not
165 This unfortunately means RANDSTRUCT was silently not enabled for all of the 4.5 patches to date
166
167 scripts/Makefile.gcc-plugins | 5 +++++
168 1 file changed, 5 insertions(+)
169
170 commit 6bf5265035d4617a1ef7845e7915389e1c65647b
171 Merge: c881b58 542e9e9
172 Author: Brad Spengler <spender@grsecurity.net>
173 Date: Fri Jun 24 17:01:33 2016 -0400
174
175 Merge branch 'pax-test' into grsec-test
176
177 commit 542e9e9a75e654b7e352025ecc67c6a2f98d8ea2
178 Author: Brad Spengler <spender@grsecurity.net>
179 Date: Fri Jun 24 17:00:25 2016 -0400
180
181 Update to pax-linux-4.5.7-test14.patch:
182 - synchronized with Emese's gcc plugin related changes headed upstream
183 - fixed a REFCOUNT false positive in nf_conntrack_init_net, reported by minipli
184 - fixed a regression in the recent Hyper-V support under !KERNEXEC
185
186 Makefile | 9 ---------
187 arch/x86/entry/vdso/vma.c | 2 +-
188 drivers/hv/hv.c | 2 +-
189 include/linux/compiler-gcc.h | 2 ++
190 include/linux/init.h | 8 +-------
191 include/linux/random.h | 8 ++++----
192 mm/page_alloc.c | 8 +++++---
193 net/netfilter/nf_conntrack_core.c | 4 ++--
194 scripts/Kbuild.include | 10 +++++++---
195 scripts/Makefile.gcc-plugins | 31 ++++++++++++++++++++++++-------
196 scripts/gcc-plugin.sh | 14 ++++++++++++++
197 security/Kconfig | 3 ++-
198 12 files changed, 63 insertions(+), 38 deletions(-)
199
200 commit c881b58ba51680e30758c1ea12058cd76c578672
201 Author: Brad Spengler <spender@grsecurity.net>
202 Date: Wed Jun 22 19:27:11 2016 -0400
203
204 compile fix
205
206 arch/x86/mm/init.c | 2 +-
207 1 file changed, 1 insertion(+), 1 deletion(-)
208
209 commit 6f889875e9f23d3d5a4751d09cc47f6e39eb9e1b
210 Author: Brad Spengler <spender@grsecurity.net>
211 Date: Wed Jun 22 17:37:53 2016 -0400
212
213 Don't bother further restricting /dev/mem when GRKERNSEC_KMEM is disabled,
214 fixes tboot use
215 Reported by Mark van Dijk
216 Previous MSR problem was also reported by Mark van Dijk
217
218 arch/x86/mm/init.c | 16 +++++-----------
219 1 file changed, 5 insertions(+), 11 deletions(-)
220
221 commit 1b99e76b8f41a8495ff085ffccab0e1bc8abed59
222 Author: Brad Spengler <spender@grsecurity.net>
223 Date: Wed Jun 22 17:22:14 2016 -0400
224
225 Whitelist writes to MSR_IA32_ENERGY_PERF_BIAS
226
227 arch/x86/kernel/msr.c | 6 ++++--
228 1 file changed, 4 insertions(+), 2 deletions(-)
229
230 commit 8c013d99d311850cade58ed5f9da05fb7f2c2873
231 Merge: 33e588f 9b2decf
232 Author: Brad Spengler <spender@grsecurity.net>
233 Date: Wed Jun 22 07:46:27 2016 -0400
234
235 Merge branch 'pax-test' into grsec-test
236
237 commit 9b2decf0bccddae6e630a2548d53d2a9718891a3
238 Author: Brad Spengler <spender@grsecurity.net>
239 Date: Wed Jun 22 07:46:03 2016 -0400
240
241 Update to pax-linux-4.5.7-test13.patch:
242 - fixed a bad function pointer cast in dma_buf_show caught by RAP, by Mathias Krause <minipli@googlemail.com>
243 - fixed a bad function type in the intel cstate sysfs code caught by RAP, reported by sth0R (https://forums.grsecurity.net/viewtopic.php?f=3&t=4497)
244 - worked around an intentional integer overflow in the PCI resource sizing code caught by the size overflow plugin, reported by kysse/Ville Vuorinen
245 - fixed an integer underflow in the ELF coredump code caught by the size overflow plugin, reported by Dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4495)
246 - fixed Hyper-V's hypercall page allocation to work under !KERNEXEC as well, reported by btnet (https://forums.grsecurity.net/viewtopic.php?f=3&t=3911), based on an idea by Pablo Sole (https://bugs.alpinelinux.org/issues/1021#note-27)
247 - fixed a REFCOUNT false positive in wpan_phy_new
248
249 arch/x86/include/asm/pgtable_64.h | 2 +-
250 arch/x86/kernel/cpu/perf_event_intel_cstate.c | 6 +++---
251 arch/x86/kernel/head_64.S | 10 ++++++++--
252 arch/x86/xen/mmu.c | 10 ++++++++--
253 drivers/dma-buf/dma-buf.c | 5 ++---
254 drivers/hv/hv.c | 23 +++++++----------------
255 drivers/pci/setup-bus.c | 8 ++++++--
256 fs/exec.c | 4 ++--
257 include/linux/types.h | 2 ++
258 net/ieee802154/core.c | 6 +++---
259 10 files changed, 42 insertions(+), 34 deletions(-)
260
261 commit 33e588f130c19cac089c2b0d70c939bee84ba812
262 Author: Brad Spengler <spender@grsecurity.net>
263 Date: Fri Jun 17 20:15:46 2016 -0400
264
265 Update KSTACKOVERFLOW dependency, update documentation
266
267 grsecurity/Kconfig | 8 ++++----
268 1 file changed, 4 insertions(+), 4 deletions(-)
269
270 commit d877624a8034129afc61dcc0f6127d69ee7a08d5
271 Author: Brad Spengler <spender@grsecurity.net>
272 Date: Wed Jun 15 06:28:18 2016 -0400
273
274 Backport fix for http://seclists.org/oss-sec/2016/q2/553
275
276 security/keys/key.c | 2 +-
277 1 file changed, 1 insertion(+), 1 deletion(-)
278
279 commit 39c61be367e5f1e1e0a08592ab3b23e71779ac9f
280 Merge: c63d655 66f9687
281 Author: Brad Spengler <spender@grsecurity.net>
282 Date: Tue Jun 14 18:19:37 2016 -0400
283
284 Merge branch 'pax-test' into grsec-test
285
286 commit 66f968756cfcc3ab040ad99deb570fb445108fb9
287 Author: Brad Spengler <spender@grsecurity.net>
288 Date: Tue Jun 14 18:19:04 2016 -0400
289
290 Update to pax-linux-4.5.5-test12.patch:
291 - fixed a KERNEXEC regression when writing to /proc/sys/kernel/watchdog_cpumask, reported by shadowdaemon
292 - Emese worked around a gcc induced intentional integer overflow in jfs that triggered a size overflow report, reported by g66 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4486)
293 - Emese relicensed the size overflow plugin to GPLv2 only
294 - Emese added size overflow coverage for vmnet in the hash tables, reported by Shawn <citypw@gmail.com>
295 - Emese enhanced the latent entropy in various ways (https://github.com/ephox-gcc-plugins/latent_entropy/commits/master)
296 - fixed pax_sanitize_slab=off for kmalloc and boot caches, by Mathias Krause <minipli@ld-linux.so>
297 - eliminated the memory overhead of SLUB sanitization, by Mathias Krause <minipli@ld-linux.so>
298
299 kernel/smpboot.c | 3 +
300 mm/slab.c | 2 +
301 mm/slab.h | 15 +
302 mm/slab_common.c | 7 -
303 mm/slob.c | 2 +
304 mm/slub.c | 8 +-
305 scripts/gcc-plugins/latent_entropy_plugin.c | 361 +++++++++++++++------
306 .../disable_size_overflow_hash.data | 1 +
307 .../insert_size_overflow_asm.c | 2 +-
308 .../size_overflow_plugin/intentional_overflow.c | 2 +-
309 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
310 .../size_overflow_plugin/size_overflow_debug.c | 2 +-
311 .../size_overflow_plugin/size_overflow_hash.data | 1 -
312 .../size_overflow_hash_aux.data | 5 +
313 .../size_overflow_plugin/size_overflow_ipa.c | 2 +-
314 .../size_overflow_plugin/size_overflow_misc.c | 2 +-
315 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
316 .../size_overflow_plugin_hash.c | 2 +-
317 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
318 .../size_overflow_transform_core.c | 2 +-
319 20 files changed, 310 insertions(+), 115 deletions(-)
320
321 commit c63d655907910533ed9d50671e98774b4b797578
322 Author: Tejun Heo <tj@kernel.org>
323 Date: Wed May 25 11:48:25 2016 -0400
324
325 percpu: fix synchronization between synchronous map extension and chunk destruction
326
327 For non-atomic allocations, pcpu_alloc() can try to extend the area
328 map synchronously after dropping pcpu_lock; however, the extension
329 wasn't synchronized against chunk destruction and the chunk might get
330 freed while extension is in progress.
331
332 This patch fixes the bug by putting most of non-atomic allocations
333 under pcpu_alloc_mutex to synchronize against pcpu_balance_work which
334 is responsible for async chunk management including destruction.
335
336 Signed-off-by: Tejun Heo <tj@kernel.org>
337 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
338 Reported-by: Vlastimil Babka <vbabka@suse.cz>
339 Reported-by: Sasha Levin <sasha.levin@oracle.com>
340 Cc: stable@vger.kernel.org # v3.18+
341 Fixes: 1a4d76076cda ("percpu: implement asynchronous chunk population")
342
343 mm/percpu.c | 16 ++++++++--------
344 1 file changed, 8 insertions(+), 8 deletions(-)
345
346 commit 63442a31da7b33c5d6ab80254a2af78616b91aa8
347 Author: Tejun Heo <tj@kernel.org>
348 Date: Wed May 25 11:48:25 2016 -0400
349
350 percpu: fix synchronization between chunk->map_extend_work and chunk destruction
351
352 Atomic allocations can trigger async map extensions which is serviced
353 by chunk->map_extend_work. pcpu_balance_work which is responsible for
354 destroying idle chunks wasn't synchronizing properly against
355 chunk->map_extend_work and may end up freeing the chunk while the work
356 item is still in flight.
357
358 This patch fixes the bug by rolling async map extension operations
359 into pcpu_balance_work.
360
361 Signed-off-by: Tejun Heo <tj@kernel.org>
362 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
363 Reported-by: Vlastimil Babka <vbabka@suse.cz>
364 Reported-by: Sasha Levin <sasha.levin@oracle.com>
365 Cc: stable@vger.kernel.org # v3.18+
366 Fixes: 9c824b6a172c ("percpu: make sure chunk->map array has available space")
367
368 mm/percpu.c | 57 ++++++++++++++++++++++++++++++++++++---------------------
369 1 file changed, 36 insertions(+), 21 deletions(-)
370
371 commit 7187611ba0d834ec7db27904c0cdf07bc9bc7d8f
372 Author: Brad Spengler <spender@grsecurity.net>
373 Date: Sat Jun 11 19:54:40 2016 -0400
374
375 Only bother establishing the PTEs for the vmap'd stack on creation
376
377 fs/exec.c | 1 -
378 include/linux/sched.h | 9 ++++-----
379 kernel/fork.c | 3 ++-
380 kernel/sched/core.c | 2 --
381 4 files changed, 6 insertions(+), 9 deletions(-)
382
383 commit a6e150dfb383fcb4c8d5294c59f2d21425ff9f72
384 Author: Brad Spengler <spender@grsecurity.net>
385 Date: Sat Jun 11 13:18:33 2016 -0400
386
387 Work around upstream's use of probe_kernel_address in alignment handling
388 which uses KERNEL_DS but wants to access userland memory directly --
389 not allowed by PaX. Reported by jotik
390
391 arch/arm/mm/alignment.c | 24 ++++++++++++++++++++----
392 1 file changed, 20 insertions(+), 4 deletions(-)
393
394 commit 1646af929d2465bc7a21a3c180de677e0b0b7950
395 Author: Dave Chinner <dchinner@redhat.com>
396 Date: Wed May 18 14:09:12 2016 +1000
397
398 xfs: mark reclaimed inodes invalid earlier
399
400 The last thing we do before using call_rcu() on an xfs_inode to be
401 freed is mark it as invalid. This means there is a window between
402 when we know for certain that the inode is going to be freed and
403 when we do actually mark it as "freed".
404
405 This is important in the context of RCU lookups - we can look up the
406 inode, find that it is valid, and then use it as such not realising
407 that it is in the final stages of being freed.
408
409 As such, mark the inode as being invalid the moment we know it is
410 going to be reclaimed. This can be done while we still hold the
411 XFS_ILOCK_EXCL and the flush lock in xfs_inode_reclaim, meaning that
412 it occurs well before we remove it from the radix tree, and that
413 the i_flags_lock, the XFS_ILOCK and the inode flush lock all act as
414 synchronisation points for detecting that an inode is about to go
415 away.
416
417 For defensive purposes, this allows us to add a further check to
418 xfs_iflush_cluster to ensure we skip inodes that are being freed
419 after we grab the XFS_ILOCK_SHARED and the flush lock - we know that
420 if the inode number if valid while we have these locks held we know
421 that it has not progressed through reclaim to the point where it is
422 clean and is about to be freed.
423
424 [bfoster: fixed __xfs_inode_clear_reclaim() using ip->i_ino after it
425 had already been zeroed.]
426
427 Signed-off-by: Dave Chinner <dchinner@redhat.com>
428 Reviewed-by: Brian Foster <bfoster@redhat.com>
429 Signed-off-by: Dave Chinner <david@fromorbit.com>
430
431 fs/xfs/xfs_icache.c | 46 ++++++++++++++++++++++++++++++++++------------
432 fs/xfs/xfs_inode.c | 13 +++++++++++++
433 2 files changed, 47 insertions(+), 12 deletions(-)
434
435 commit 096f3d24e77f4cd8fe50008623b26c89cb00ccda
436 Author: Dave Chinner <dchinner@redhat.com>
437 Date: Wed May 18 14:01:53 2016 +1000
438
439 xfs: xfs_inode_free() isn't RCU safe
440
441 The xfs_inode freed in xfs_inode_free() has multiple allocated
442 structures attached to it. We free these in xfs_inode_free() before
443 we mark the inode as invalid, and before we run call_rcu() to queue
444 the structure for freeing.
445
446 Unfortunately, this freeing can race with other accesses that are in
447 the RCU current grace period that have found the inode in the radix
448 tree with a valid state. This includes xfs_iflush_cluster(), which
449 calls xfs_inode_clean(), and that accesses the inode log item on the
450 xfs_inode.
451
452 The log item structure is freed in xfs_inode_free(), so there is the
453 possibility we can be accessing freed memory in xfs_iflush_cluster()
454 after validating the xfs_inode structure as being valid for this RCU
455 context. Hence we can get spuriously incorrect clean state returned
456 from such checks. This can lead to use thinking the inode is dirty
457 when it is, in fact, clean, and so incorrectly attaching it to the
458 buffer for IO and completion processing.
459
460 This then leads to use-after-free situations on the xfs_inode itself
461 if the IO completes after the current RCU grace period expires. The
462 buffer callbacks will access the xfs_inode and try to do all sorts
463 of things it shouldn't with freed memory.
464
465 IOWs, xfs_iflush_cluster() only works correctly when racing with
466 inode reclaim if the inode log item is present and correctly stating
467 the inode is clean. If the inode is being freed, then reclaim has
468 already made sure the inode is clean, and hence xfs_iflush_cluster
469 can skip it. However, we are accessing the inode inode under RCU
470 read lock protection and so also must ensure that all dynamically
471 allocated memory we reference in this context is not freed until the
472 RCU grace period expires.
473
474 To fix this, move all the potential memory freeing into
475 xfs_inode_free_callback() so that we are guarantee RCU protected
476 lookup code will always have the memory structures it needs
477 available during the RCU grace period that lookup races can occur
478 in.
479
480 Discovered-by: Brain Foster <bfoster@redhat.com>
481 Signed-off-by: Dave Chinner <dchinner@redhat.com>
482 Reviewed-by: Christoph Hellwig <hch@lst.de>
483 Signed-off-by: Dave Chinner <david@fromorbit.com>
484
485 fs/xfs/xfs_icache.c | 14 +++++++-------
486 1 file changed, 7 insertions(+), 7 deletions(-)
487
488 commit eaec09dbc18fe0ae7905b33b4c819a467a0e801d
489 Author: Jann Horn <jannh@google.com>
490 Date: Wed Jun 1 11:55:07 2016 +0200
491
492 sched: panic on corrupted stack end
493
494 Until now, hitting this BUG_ON caused a recursive oops (because oops
495 handling involves do_exit(), which calls into the scheduler, which in
496 turn raises an oops), which caused stuff below the stack to be
497 overwritten until a panic happened (e.g. via an oops in interrupt
498 context, caused by the overwritten CPU index in the thread_info).
499
500 Just panic directly.
501
502 Signed-off-by: Jann Horn <jannh@google.com>
503 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
504
505 kernel/sched/core.c | 3 ++-
506 1 file changed, 2 insertions(+), 1 deletion(-)
507
508 commit 96894afd3cbd735ed9230f058a32865dec270da2
509 Author: Jann Horn <jannh@google.com>
510 Date: Wed Jun 1 11:55:06 2016 +0200
511
512 ecryptfs: forbid opening files without mmap handler
513
514 This prevents users from triggering a stack overflow through a recursive
515 invocation of pagefault handling that involves mapping procfs files into
516 virtual memory.
517
518 Signed-off-by: Jann Horn <jannh@google.com>
519 Acked-by: Tyler Hicks <tyhicks@canonical.com>
520 Cc: stable@vger.kernel.org
521 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
522
523 fs/ecryptfs/kthread.c | 13 +++++++++++--
524 1 file changed, 11 insertions(+), 2 deletions(-)
525
526 commit 06608cb36ab8329c7cf03fdabc86fb7f64a2656d
527 Author: Jann Horn <jannh@google.com>
528 Date: Wed Jun 1 11:55:05 2016 +0200
529
530 proc: prevent stacking filesystems on top
531
532 This prevents stacking filesystems (ecryptfs and overlayfs) from using
533 procfs as lower filesystem. There is too much magic going on inside
534 procfs, and there is no good reason to stack stuff on top of procfs.
535
536 (For example, procfs does access checks in VFS open handlers, and
537 ecryptfs by design calls open handlers from a kernel thread that doesn't
538 drop privileges or so.)
539
540 Signed-off-by: Jann Horn <jannh@google.com>
541 Cc: stable@vger.kernel.org
542 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
543
544 fs/proc/root.c | 7 +++++++
545 1 file changed, 7 insertions(+)
546
547 commit 7cff8ffababda8d77e7e3a3f2621b26269279b9a
548 Author: Al Viro <viro@zeniv.linux.org.uk>
549 Date: Wed May 4 14:04:13 2016 -0400
550
551 ecryptfs: fix handling of directory opening
552
553 First of all, trying to open them r/w is idiocy; it's guaranteed to fail.
554 Moreover, assigning ->f_pos and assuming that everything will work is
555 blatantly broken - try that with e.g. tmpfs as underlying layer and watch
556 the fireworks. There may be a non-trivial amount of state associated with
557 current IO position, well beyond the numeric offset. Using the single
558 struct file associated with underlying inode is really not a good idea;
559 we ought to open one for each ecryptfs directory struct file.
560
561 Additionally, file_operations both for directories and non-directories are
562 full of pointless methods; non-directories should *not* have ->iterate(),
563 directories should not have ->flush(), ->fasync() and ->splice_read().
564
565 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
566
567 fs/ecryptfs/file.c | 71 ++++++++++++++++++++++++++++++++++++++++++------------
568 1 file changed, 55 insertions(+), 16 deletions(-)
569
570 commit b690dcd62ad1433e69d391a267ce01534c19d20a
571 Author: Brad Spengler <spender@grsecurity.net>
572 Date: Wed Jun 8 20:59:28 2016 -0400
573
574 fix compiler warnings
575
576 fs/exec.c | 4 ++--
577 1 file changed, 2 insertions(+), 2 deletions(-)
578
579 commit 5d43ec1fb9c94f0c2644e0d09a8257442134a0ce
580 Author: Brad Spengler <spender@grsecurity.net>
581 Date: Wed Jun 8 20:52:00 2016 -0400
582
583 Avoid some UB
584
585 fs/exec.c | 8 ++++----
586 1 file changed, 4 insertions(+), 4 deletions(-)
587
588 commit d34347de1cae1f7bd8ea4223d5baca5da8ea4529
589 Author: Brad Spengler <spender@grsecurity.net>
590 Date: Wed Jun 8 20:23:27 2016 -0400
591
592 compile fix
593
594 kernel/smpboot.c | 1 +
595 1 file changed, 1 insertion(+)
596
597 commit 4dfdd6b803d58fec94306a4ff437d500a9c80908
598 Author: Brad Spengler <spender@grsecurity.net>
599 Date: Wed Jun 8 20:13:34 2016 -0400
600
601 Add open/close around cpumask modification, reported by shadowdaemon
602 Triggered by writing to /proc/sys/kernel/watchdog_cpumask
603
604 kernel/smpboot.c | 2 ++
605 1 file changed, 2 insertions(+)
606
607 commit 1ee24693e22a535dbede927beba7b90cd8559eb4
608 Merge: 11150b9 dec4686
609 Author: Brad Spengler <spender@grsecurity.net>
610 Date: Wed Jun 8 07:39:26 2016 -0400
611
612 Merge branch 'pax-test' into grsec-test
613
614 commit dec468678ead461fc786adfbb2505b6ef66a371a
615 Merge: 85a5882 8c596d1
616 Author: Brad Spengler <spender@grsecurity.net>
617 Date: Wed Jun 8 07:39:18 2016 -0400
618
619 Merge branch 'linux-4.5.y' into pax-test
620
621 commit 11150b92c4cd78ec6a22ad0ff682faf2354b4445
622 Author: Brad Spengler <spender@grsecurity.net>
623 Date: Sun Jun 5 14:18:34 2016 -0400
624
625 compile fix
626
627 grsecurity/grsec_tpe.c | 4 ++--
628 include/linux/uidgid.h | 1 +
629 2 files changed, 3 insertions(+), 2 deletions(-)
630
631 commit 6e548aad3425733ed443e4a3232205935f0d4939
632 Author: Brad Spengler <spender@grsecurity.net>
633 Date: Sun Jun 5 08:19:09 2016 -0400
634
635 Workaround some Debian bike-shedding so that group-writable /bin dirs
636 (with group ownership of root) don't trigger TPE violations
637 Reported by jvoisin
638
639 grsecurity/grsec_tpe.c | 4 ++--
640 1 file changed, 2 insertions(+), 2 deletions(-)
641
642 commit 735ea2028ce017246358d22ec81dc6db73499770
643 Author: Brad Spengler <spender@grsecurity.net>
644 Date: Sun Jun 5 04:23:15 2016 -0400
645
646 move another instance of is_privileged_binary outside of atomic
647
648 grsecurity/gracl_segv.c | 4 +++-
649 1 file changed, 3 insertions(+), 1 deletion(-)
650
651 commit e08a7bcc7b7a1e423b5346bcef85d9a92185f65f
652 Merge: d094457 85a5882
653 Author: Brad Spengler <spender@grsecurity.net>
654 Date: Sun Jun 5 04:09:29 2016 -0400
655
656 Merge branch 'pax-test' into grsec-test
657
658 commit 85a588299f41d6a116b8d07d902de986968a84b0
659 Merge: 89f00c3 ec2a755
660 Author: Brad Spengler <spender@grsecurity.net>
661 Date: Sun Jun 5 04:08:42 2016 -0400
662
663 Merge branch 'linux-4.5.y' into pax-test
664
665 commit d094457eb90a693f7007b7f4b26c2132137c7ed2
666 Author: Brad Spengler <spender@grsecurity.net>
667 Date: Mon May 30 10:15:11 2016 -0400
668
669 move privilege/xattr check outside of locks to prevent warning, reported by shadowdaemon
670
671 grsecurity/grsec_sig.c | 7 +++++--
672 1 file changed, 5 insertions(+), 2 deletions(-)
673
674 commit 2fad2bb3392409d98498b3af53cf39f2475e4b70
675 Author: Brad Spengler <spender@grsecurity.net>
676 Date: Sun May 29 10:11:27 2016 -0400
677
678 Fix another harmless warning
679
680 fs/proc/proc_sysctl.c | 2 +-
681 1 file changed, 1 insertion(+), 1 deletion(-)
682
683 commit d62f996e40c87e46b20f45e16819f92d49f3e926
684 Author: Brad Spengler <spender@grsecurity.net>
685 Date: Sun May 29 09:56:32 2016 -0400
686
687 Fix more harmless compiler warnings
688
689 grsecurity/gracl_policy.c | 8 ++++----
690 1 file changed, 4 insertions(+), 4 deletions(-)
691
692 commit 558b784a2b87e337d12bae07d60f435c2f06d849
693 Author: Brad Spengler <spender@grsecurity.net>
694 Date: Sun May 29 09:47:50 2016 -0400
695
696 Fix more harmless warnings
697
698 grsecurity/gracl.c | 6 +++---
699 1 file changed, 3 insertions(+), 3 deletions(-)
700
701 commit 32ec63339ab130758e6941d7f1d8993e41956980
702 Author: Brad Spengler <spender@grsecurity.net>
703 Date: Sun May 29 09:41:23 2016 -0400
704
705 Fix another warning
706
707 include/linux/sched.h | 1 +
708 1 file changed, 1 insertion(+)
709
710 commit 789369de0dbde1fedd2d5cb0ee3474e160af187c
711 Author: Brad Spengler <spender@grsecurity.net>
712 Date: Sun May 29 09:22:05 2016 -0400
713
714 Fix some harmless compiler warnings
715
716 grsecurity/grsum.c | 4 ++--
717 1 file changed, 2 insertions(+), 2 deletions(-)
718
719 commit ed18543a205c206d0aa8ee6b04c606579823b7b3
720 Merge: b0b4143 89f00c3
721 Author: Brad Spengler <spender@grsecurity.net>
722 Date: Sun May 29 08:34:18 2016 -0400
723
724 Merge branch 'pax-test' into grsec-test
725
726 commit 89f00c3b596a62ae5bcfe4920e9d05b9a94be7fa
727 Author: Brad Spengler <spender@grsecurity.net>
728 Date: Sun May 29 08:26:37 2016 -0400
729
730 Update to pax-linux-4.5.5-test11.patch:
731 - fixed arm kuser helper emulation for thumb mode userland, reported by Wizzup(https://forums.grsecurity.net/viewtopic.php?f=3&t=4479)
732 - fixed incorrect function pointer casts in bcache caught by RAP, reported by torsten (https://forums.grsecurity.net/viewtopic.php?f=3&t=4482)
733 - worked around a few intentional integer underflows in the xhci driver caught by the size overflow plugin, reported by Dennis Wassenberg <dennis.wassenberg@secunet.com>
734 - moved gcc plugins from tools/gcc to scripts/gcc-plugins and simplified the plugin build system, by Emese
735 - changed the constify and latent entropy plugins to use a consistent command line switch for compile-time disabling
736 - cleaned up a few unusued macros, whitespace, inline asm constraints, etc
737 - hid the lvalue casts needed for constify behind the const_cast macro, by Mathias Krause <minipli@ld-linux.so>
738
739 Makefile | 50 +-
740 arch/Kconfig | 14 +
741 arch/arm/Kconfig | 1 +
742 arch/arm/boot/compressed/Makefile | 2 +
743 arch/arm/mach-exynos/suspend.c | 4 +-
744 arch/arm/mach-omap2/powerdomains43xx_data.c | 2 +-
745 arch/arm/mach-shmobile/platsmp-apmu.c | 2 +-
746 arch/arm/mm/fault.c | 14 +
747 arch/arm64/Kconfig | 1 +
748 arch/mips/Kconfig | 1 +
749 arch/powerpc/Kconfig | 1 +
750 arch/powerpc/include/asm/atomic.h | 7 +-
751 arch/powerpc/kernel/Makefile | 8 +-
752 arch/sparc/Kconfig | 1 +
753 arch/um/Makefile | 4 +-
754 arch/x86/Kconfig | 1 +
755 arch/x86/boot/Makefile | 3 -
756 arch/x86/boot/compressed/Makefile | 3 -
757 arch/x86/entry/common.c | 2 +-
758 arch/x86/include/asm/thread_info.h | 27 -
759 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 2 +-
760 arch/x86/kernel/cpu/perf_event_intel_pt.c | 10 +-
761 arch/x86/kernel/i8259.c | 4 +-
762 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
763 arch/x86/oprofile/nmi_int.c | 2 +-
764 arch/x86/oprofile/op_model_amd.c | 6 +-
765 arch/x86/oprofile/op_model_ppro.c | 4 +-
766 arch/x86/pci/vmd.c | 2 +-
767 arch/x86/realmode/rm/Makefile | 3 -
768 drivers/acpi/bgrt.c | 4 +-
769 drivers/ata/libata-core.c | 2 +-
770 drivers/ata/pata_arasan_cf.c | 2 +-
771 drivers/base/platform-msi.c | 14 +-
772 drivers/base/power/domain.c | 4 +-
773 drivers/bus/arm-cci.c | 6 +-
774 drivers/cdrom/cdrom.c | 2 +-
775 drivers/clk/socfpga/clk-gate.c | 4 +-
776 drivers/clk/socfpga/clk-pll.c | 4 +-
777 drivers/clk/ti/clk.c | 4 +-
778 drivers/cpufreq/acpi-cpufreq.c | 8 +-
779 drivers/cpufreq/cpufreq-dt.c | 2 +-
780 drivers/cpufreq/cpufreq.c | 8 +-
781 drivers/cpufreq/cpufreq_ondemand.c | 4 +-
782 drivers/cpufreq/p4-clockmod.c | 6 +-
783 drivers/cpufreq/speedstep-centrino.c | 2 +-
784 drivers/firmware/dmi_scan.c | 8 +-
785 drivers/firmware/efi/efi.c | 10 +-
786 drivers/firmware/google/memconsole.c | 2 +-
787 drivers/gpio/gpiolib.c | 8 +-
788 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +-
789 drivers/gpu/drm/i810/i810_drv.c | 2 +-
790 drivers/gpu/drm/i915/i915_irq.c | 86 +-
791 drivers/gpu/drm/i915/intel_display.c | 6 +-
792 drivers/gpu/drm/mga/mga_drv.c | 2 +-
793 drivers/gpu/drm/omapdrm/dss/display.c | 6 +-
794 drivers/gpu/drm/qxl/qxl_drv.c | 2 +-
795 drivers/gpu/drm/qxl/qxl_ttm.c | 4 +-
796 drivers/gpu/drm/r128/r128_drv.c | 2 +-
797 drivers/gpu/drm/radeon/radeon_drv.c | 2 +-
798 drivers/gpu/drm/savage/savage_drv.c | 2 +-
799 drivers/gpu/drm/sis/sis_drv.c | 2 +-
800 drivers/gpu/drm/tegra/dc.c | 2 +-
801 drivers/gpu/drm/tegra/sor.c | 2 +-
802 drivers/gpu/drm/via/via_drv.c | 2 +-
803 drivers/idle/intel_idle.c | 4 +-
804 drivers/infiniband/hw/qib/qib.h | 1 -
805 drivers/iommu/arm-smmu.c | 4 +-
806 drivers/isdn/hardware/eicon/mntfunc.c | 2 +-
807 drivers/md/bcache/btree.c | 11 +-
808 drivers/md/bcache/closure.c | 4 +-
809 drivers/md/bcache/closure.h | 8 +-
810 drivers/md/bcache/journal.c | 16 +-
811 drivers/md/bcache/movinggc.c | 12 +-
812 drivers/md/bcache/request.c | 54 +-
813 drivers/md/bcache/request.h | 2 +-
814 drivers/md/bcache/super.c | 30 +-
815 drivers/md/bcache/writeback.c | 12 +-
816 drivers/media/platform/am437x/am437x-vpfe.c | 2 +-
817 drivers/mfd/twl4030-irq.c | 4 +-
818 drivers/misc/c2port/core.c | 2 +-
819 drivers/misc/mic/scif/scif_api.c | 8 +-
820 drivers/mmc/host/mmci.c | 2 +-
821 drivers/mmc/host/omap_hsmmc.c | 2 +-
822 drivers/mmc/host/sdhci-esdhc-imx.c | 2 +-
823 drivers/mmc/host/sdhci-s3c.c | 6 +-
824 drivers/net/ethernet/cavium/liquidio/lio_main.c | 2 +-
825 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 4 +-
826 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 2 +-
827 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 6 +-
828 drivers/net/macvlan.c | 14 +-
829 drivers/net/wireless/ath/ath9k/main.c | 20 +-
830 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 2 +-
831 drivers/net/wireless/mac80211_hwsim.c | 22 +-
832 drivers/net/wireless/ti/wl1251/sdio.c | 8 +-
833 drivers/net/wireless/ti/wl12xx/main.c | 4 +-
834 drivers/net/wireless/ti/wl18xx/main.c | 4 +-
835 drivers/of/fdt.c | 2 +-
836 drivers/pci/hotplug/acpiphp_ibm.c | 2 +-
837 drivers/pci/hotplug/cpcihp_zt5550.c | 6 +-
838 drivers/pci/hotplug/pci_hotplug_core.c | 4 +-
839 drivers/pci/msi.c | 12 +-
840 drivers/pinctrl/pinctrl-at91.c | 2 +-
841 drivers/platform/x86/msi-laptop.c | 12 +-
842 drivers/power/reset/at91-reset.c | 2 +-
843 drivers/powercap/powercap_sys.c | 6 +-
844 drivers/regulator/max8660.c | 4 +-
845 drivers/regulator/max8973-regulator.c | 12 +-
846 drivers/regulator/mc13892-regulator.c | 4 +-
847 drivers/rtc/rtc-armada38x.c | 4 +-
848 drivers/rtc/rtc-cmos.c | 2 +-
849 drivers/rtc/rtc-m48t59.c | 2 +-
850 drivers/rtc/rtc-rx8010.c | 6 +-
851 drivers/rtc/rtc-test.c | 4 +-
852 drivers/scsi/aacraid/aachba.c | 4 +-
853 drivers/scsi/lpfc/lpfc_init.c | 4 +-
854 drivers/scsi/qla2xxx/qla_os.c | 4 +-
855 drivers/staging/sm750fb/sm750.c | 8 +-
856 drivers/thermal/cpu_cooling.c | 6 +-
857 drivers/thermal/int340x_thermal/int3400_thermal.c | 4 +-
858 drivers/thermal/of-thermal.c | 12 +-
859 drivers/tty/pty.c | 2 +-
860 drivers/tty/serial/8250/8250_core.c | 6 +-
861 drivers/tty/serial/kgdb_nmi.c | 2 +-
862 drivers/usb/host/xhci-ring.c | 52 +-
863 drivers/video/fbdev/aty/atyfb_base.c | 4 +-
864 drivers/video/fbdev/aty/mach64_cursor.c | 2 +-
865 drivers/video/fbdev/core/fb_defio.c | 6 +-
866 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 12 +-
867 drivers/video/fbdev/nvidia/nvidia.c | 18 +-
868 drivers/video/fbdev/omap2/omapfb/dss/display.c | 6 +-
869 drivers/video/fbdev/s1d13xxxfb.c | 4 +-
870 drivers/video/fbdev/smscufx.c | 2 +-
871 drivers/video/fbdev/udlfb.c | 2 +-
872 drivers/video/fbdev/uvesafb.c | 4 +-
873 drivers/video/fbdev/vesafb.c | 2 +-
874 fs/fuse/cuse.c | 6 +-
875 fs/jffs2/file.c | 2 +-
876 fs/nls/nls_base.c | 4 +-
877 fs/nls/nls_euc-jp.c | 4 +-
878 fs/nls/nls_koi8-ru.c | 4 +-
879 fs/proc/proc_sysctl.c | 4 +-
880 fs/tracefs/inode.c | 4 +-
881 include/linux/compiler-gcc.h | 1 +
882 include/linux/compiler.h | 4 +
883 include/linux/seq_buf.h | 2 +-
884 include/linux/sysfs.h | 2 +-
885 kernel/cgroup.c | 14 +-
886 kernel/irq/msi.c | 12 +-
887 kernel/notifier.c | 4 +-
888 kernel/pid.c | 2 +-
889 kernel/trace/trace_output.c | 8 +-
890 net/core/rtnetlink.c | 2 +-
891 net/xfrm/xfrm_state.c | 2 +-
892 scripts/Makefile | 1 +
893 scripts/Makefile.gcc-plugins | 138 +-
894 scripts/Makefile.host | 6 +-
895 scripts/gcc-plugin.sh | 4 +-
896 scripts/gcc-plugins/Makefile | 45 +
897 scripts/gcc-plugins/checker_plugin.c | 496 +
898 scripts/gcc-plugins/colorize_plugin.c | 162 +
899 scripts/gcc-plugins/constify_plugin.c | 521 +
900 scripts/gcc-plugins/gcc-common.h | 879 +
901 scripts/gcc-plugins/gcc-generate-gimple-pass.h | 175 +
902 scripts/gcc-plugins/gcc-generate-ipa-pass.h | 289 +
903 scripts/gcc-plugins/gcc-generate-rtl-pass.h | 175 +
904 scripts/gcc-plugins/gcc-generate-simple_ipa-pass.h | 175 +
905 scripts/gcc-plugins/initify_plugin.c | 536 +
906 scripts/gcc-plugins/kallocstat_plugin.c | 135 +
907 scripts/gcc-plugins/kernexec_plugin.c | 407 +
908 scripts/gcc-plugins/latent_entropy_plugin.c | 438 +
909 scripts/gcc-plugins/rap_plugin/Makefile | 4 +
910 scripts/gcc-plugins/rap_plugin/rap.h | 36 +
911 scripts/gcc-plugins/rap_plugin/rap_fptr_pass.c | 220 +
912 scripts/gcc-plugins/rap_plugin/rap_hash.c | 382 +
913 scripts/gcc-plugins/rap_plugin/rap_plugin.c | 511 +
914 scripts/gcc-plugins/rap_plugin/sip.c | 96 +
915 .../gcc-plugins/size_overflow_plugin/.gitignore | 3 +
916 scripts/gcc-plugins/size_overflow_plugin/Makefile | 28 +
917 .../disable_size_overflow_hash.data | 12444 +++++++++++
918 .../generate_size_overflow_hash.sh | 103 +
919 .../insert_size_overflow_asm.c | 369 +
920 .../size_overflow_plugin/intentional_overflow.c | 1166 +
921 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
922 .../size_overflow_plugin/size_overflow.h | 331 +
923 .../size_overflow_plugin/size_overflow_debug.c | 194 +
924 .../size_overflow_plugin/size_overflow_hash.data | 21504 +++++++++++++++++++
925 .../size_overflow_hash_aux.data | 92 +
926 .../size_overflow_plugin/size_overflow_ipa.c | 1163 +
927 .../size_overflow_plugin/size_overflow_misc.c | 505 +
928 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
929 .../size_overflow_plugin_hash.c | 352 +
930 .../size_overflow_plugin/size_overflow_transform.c | 743 +
931 .../size_overflow_transform_core.c | 1025 +
932 scripts/gcc-plugins/stackleak_plugin.c | 350 +
933 scripts/gcc-plugins/structleak_plugin.c | 239 +
934 scripts/package/builddeb | 2 +-
935 security/Kconfig | 8 +-
936 sound/soc/codecs/sti-sas.c | 8 +-
937 sound/soc/soc-ac97.c | 4 +-
938 tools/gcc/Makefile | 46 -
939 tools/gcc/checker_plugin.c | 496 -
940 tools/gcc/colorize_plugin.c | 162 -
941 tools/gcc/constify_plugin.c | 521 -
942 tools/gcc/gcc-common.h | 879 -
943 tools/gcc/gcc-generate-gimple-pass.h | 175 -
944 tools/gcc/gcc-generate-ipa-pass.h | 289 -
945 tools/gcc/gcc-generate-rtl-pass.h | 175 -
946 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 -
947 tools/gcc/initify_plugin.c | 536 -
948 tools/gcc/kallocstat_plugin.c | 135 -
949 tools/gcc/kernexec_plugin.c | 407 -
950 tools/gcc/latent_entropy_plugin.c | 422 -
951 tools/gcc/rap_plugin/Makefile | 4 -
952 tools/gcc/rap_plugin/rap.h | 36 -
953 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 -
954 tools/gcc/rap_plugin/rap_hash.c | 382 -
955 tools/gcc/rap_plugin/rap_plugin.c | 511 -
956 tools/gcc/rap_plugin/sip.c | 96 -
957 tools/gcc/size_overflow_plugin/.gitignore | 3 -
958 tools/gcc/size_overflow_plugin/Makefile | 28 -
959 .../disable_size_overflow_hash.data | 12444 -----------
960 .../generate_size_overflow_hash.sh | 103 -
961 .../insert_size_overflow_asm.c | 369 -
962 .../size_overflow_plugin/intentional_overflow.c | 1166 -
963 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 -
964 tools/gcc/size_overflow_plugin/size_overflow.h | 331 -
965 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 -
966 .../size_overflow_plugin/size_overflow_hash.data | 21504 -------------------
967 .../size_overflow_hash_aux.data | 92 -
968 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 -
969 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 -
970 .../size_overflow_plugin/size_overflow_plugin.c | 290 -
971 .../size_overflow_plugin_hash.c | 352 -
972 .../size_overflow_plugin/size_overflow_transform.c | 743 -
973 .../size_overflow_transform_core.c | 1025 -
974 tools/gcc/stackleak_plugin.c | 350 -
975 tools/gcc/structleak_plugin.c | 239 -
976 237 files changed, 47340 insertions(+), 47276 deletions(-)
977
978 commit b0b41430a8c9e6e5067c896c07d361e527e298e8
979 Author: Brad Spengler <spender@grsecurity.net>
980 Date: Sat May 21 13:59:19 2016 -0400
981
982 Fix gcc assert properly, from Emese Revfy
983
984 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
985 tools/gcc/size_overflow_plugin/size_overflow_plugin.c | 2 +-
986 2 files changed, 2 insertions(+), 2 deletions(-)
987
988 commit 5e7a47f06420603b0f26f1b45fe2ab02838795c9
989 Merge: f844209 5929595
990 Author: Brad Spengler <spender@grsecurity.net>
991 Date: Fri May 20 20:19:27 2016 -0400
992
993 Merge branch 'pax-test' into grsec-test
994
995 commit 5929595ec558e9282901842bdf9e4a981751fb08
996 Author: Brad Spengler <spender@grsecurity.net>
997 Date: Fri May 20 20:18:58 2016 -0400
998
999 Update to pax-linux-4.5.5-test9.patch:
1000 - fixed a few more incorrect fptr casts for RAP
1001
1002 arch/x86/math-emu/fpu_etc.c | 9 +++++++--
1003 arch/x86/math-emu/fpu_trig.c | 13 +++++++++----
1004 arch/x86/math-emu/reg_constant.c | 7 ++++++-
1005 drivers/isdn/hisax/hfc_2bds0.c | 4 ++--
1006 drivers/isdn/hisax/hfcscard.c | 6 ++++--
1007 drivers/isdn/hisax/saphir.c | 5 +++--
1008 drivers/isdn/hisax/teleint.c | 5 +++--
1009 drivers/media/pci/sta2x11/sta2x11_vip.c | 5 +++--
1010 drivers/net/hamradio/baycom_epp.c | 2 +-
1011 9 files changed, 38 insertions(+), 18 deletions(-)
1012
1013 commit f84420916698cdf33a81f046206d050e2c3e6966
1014 Merge: fa18ce2 445754e
1015 Author: Brad Spengler <spender@grsecurity.net>
1016 Date: Fri May 20 18:52:20 2016 -0400
1017
1018 Merge branch 'pax-test' into grsec-test
1019
1020 commit 445754e5717176c2b3431a0cde1e90df51cc43e2
1021 Author: Brad Spengler <spender@grsecurity.net>
1022 Date: Fri May 20 18:51:52 2016 -0400
1023
1024 Update to pax-linux-4.5.4-test8.patch:
1025 - fixed a USERCOPY report in the mwifiex driver, by Dennis Wassenberg <dennis.wassenberg@secunet.com> and Mathias Krause <minipli@ld-linux.so>
1026
1027 drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 2 +-
1028 drivers/net/wireless/marvell/mwifiex/pcie.c | 4 ++--
1029 drivers/net/wireless/marvell/mwifiex/sdio.c | 10 ++++------
1030 3 files changed, 7 insertions(+), 9 deletions(-)
1031
1032 commit fa18ce2d37a92442162fb72b8f85ee86120ffacb
1033 Author: Brad Spengler <spender@grsecurity.net>
1034 Date: Thu May 19 18:30:08 2016 -0400
1035
1036 Update size_overflow hash, from Dr. Toth
1037
1038 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1039 1 file changed, 1 insertion(+)
1040
1041 commit 61c487965dbc34618fe292663759d6fa0515bcad
1042 Merge: fbc84d2 a734dbd
1043 Author: Brad Spengler <spender@grsecurity.net>
1044 Date: Thu May 19 06:26:52 2016 -0400
1045
1046 Merge branch 'pax-test' into grsec-test
1047
1048 commit a734dbda8b785c38baa1858df2bffc89b45d070a
1049 Merge: 238dfca 3b41b7e
1050 Author: Brad Spengler <spender@grsecurity.net>
1051 Date: Thu May 19 06:24:25 2016 -0400
1052
1053 Merge branch 'linux-4.5.y' into pax-test
1054
1055 commit fbc84d202d311b4dc09bcc922678df60b6e76614
1056 Merge: 84fa82c 238dfca
1057 Author: Brad Spengler <spender@grsecurity.net>
1058 Date: Fri May 13 18:00:06 2016 -0400
1059
1060 Merge branch 'pax-test' into grsec-test
1061
1062 commit 238dfca3ffe87f4410e67c8ceb554b9ce4f3132b
1063 Author: Brad Spengler <spender@grsecurity.net>
1064 Date: Fri May 13 17:59:42 2016 -0400
1065
1066 Compile fix for older gcc
1067
1068 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1069 1 file changed, 1 insertion(+), 1 deletion(-)
1070
1071 commit 84fa82c59fa5051e1485a3dcc857b87b70dbc18d
1072 Merge: 2cece8e 4654023
1073 Author: Brad Spengler <spender@grsecurity.net>
1074 Date: Fri May 13 17:31:49 2016 -0400
1075
1076 Merge branch 'pax-test' into grsec-test
1077
1078 commit 4654023e72b0834142594eee879e657664498443
1079 Author: Brad Spengler <spender@grsecurity.net>
1080 Date: Fri May 13 17:29:38 2016 -0400
1081
1082 Update to pax-linux-4.5.4-test7.patch:
1083 - changed the RAP hash emission code to accomodate x86 disassemblers, suggested by Mathias Krause <minipli@ld-linux.so>
1084 - fixed a few size overflow false positives in JFS due to the lack of endian conversion macros for signed types, reported by ryonaloli via hunger
1085 - fixed a compiler assert triggered by the size overflow plugin
1086
1087 tools/gcc/rap_plugin/rap_plugin.c | 39 ++++++++++++++++++----
1088 .../disable_size_overflow_hash.data | 3 ++
1089 .../size_overflow_plugin/intentional_overflow.c | 2 +-
1090 .../size_overflow_plugin/size_overflow_hash.data | 3 --
1091 4 files changed, 36 insertions(+), 11 deletions(-)
1092
1093 commit 2cece8e8e0e2fce9943345c0ebebd7436929868e
1094 Merge: 6df0471 ea68d2e
1095 Author: Brad Spengler <spender@grsecurity.net>
1096 Date: Thu May 12 18:41:15 2016 -0400
1097
1098 Merge branch 'pax-test' into grsec-test
1099
1100 commit ea68d2e7123a83aba24db99d5ef487b1397fd6d0
1101 Author: Brad Spengler <spender@grsecurity.net>
1102 Date: Thu May 12 18:40:50 2016 -0400
1103
1104 Update to pax-linux-4.5.3-test6.patch:
1105 - really fixed https://forums.grsecurity.net/viewtopic.php?f=3&t=4473
1106 - the nfsd_proc_read fix for RAP had a typo causing an oops, reported by Carlos Carvalho (https://forums.grsecurity.net/viewtopic.php?f=3&t=4471)
1107 - fixed a few format string warnings in the RAP hash emission code, reported by Dwokfur
1108
1109 drivers/net/ppp/pptp.c | 1 -
1110 fs/nfsd/nfsproc.c | 2 +-
1111 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1112 tools/gcc/rap_plugin/rap_plugin.c | 14 ++++++++++----
1113 4 files changed, 12 insertions(+), 7 deletions(-)
1114
1115 commit 6df04719a7cf4d3f60c9e6190f8eb4b986ce2b1b
1116 Author: David Howells <dhowells@redhat.com>
1117 Date: Tue Feb 23 11:03:12 2016 +0000
1118
1119 KEYS: Fix ASN.1 indefinite length object parsing
1120
1121 This fixes CVE-2016-0758.
1122
1123 In the ASN.1 decoder, when the length field of an ASN.1 value is extracted,
1124 it isn't validated against the remaining amount of data before being added
1125 to the cursor. With a sufficiently large size indicated, the check:
1126
1127 datalen - dp < 2
1128
1129 may then fail due to integer overflow.
1130
1131 Fix this by checking the length indicated against the amount of remaining
1132 data in both places a definite length is determined.
1133
1134 Whilst we're at it, make the following changes:
1135
1136 (1) Check the maximum size of extended length does not exceed the capacity
1137 of the variable it's being stored in (len) rather than the type that
1138 variable is assumed to be (size_t).
1139
1140 (2) Compare the EOC tag to the symbolic constant ASN1_EOC rather than the
1141 integer 0.
1142
1143 (3) To reduce confusion, move the initialisation of len outside of:
1144
1145 for (len = 0; n > 0; n--) {
1146
1147 since it doesn't have anything to do with the loop counter n.
1148
1149 Signed-off-by: David Howells <dhowells@redhat.com>
1150 Reviewed-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
1151 Acked-by: David Woodhouse <David.Woodhouse@intel.com>
1152 Acked-by: Peter Jones <pjones@redhat.com>
1153
1154 lib/asn1_decoder.c | 16 +++++++++-------
1155 1 file changed, 9 insertions(+), 7 deletions(-)
1156
1157 commit acb6cef8047476b8afc3ff3f07286b9e36de1b77
1158 Merge: 735f14a a7c9bec
1159 Author: Brad Spengler <spender@grsecurity.net>
1160 Date: Wed May 11 17:05:21 2016 -0400
1161
1162 Merge branch 'pax-test' into grsec-test
1163
1164 commit a7c9bec57dea73ceee1246a64df55038ea840be9
1165 Merge: f5bd134 a29ab35
1166 Author: Brad Spengler <spender@grsecurity.net>
1167 Date: Wed May 11 17:04:48 2016 -0400
1168
1169 Merge branch 'linux-4.5.y' into pax-test
1170
1171 commit 735f14a2b5562cd1329b263a81781d59dacffd3e
1172 Author: Brad Spengler <spender@grsecurity.net>
1173 Date: Wed May 11 06:57:40 2016 -0400
1174
1175 Fix typo in nfsd RAP changes causing oops reported by Carlos Carvalho
1176 at: https://forums.grsecurity.net/viewtopic.php?f=3&t=4471
1177
1178 fs/nfsd/nfsproc.c | 2 +-
1179 1 file changed, 1 insertion(+), 1 deletion(-)
1180
1181 commit 35e1e615072d0bb885b38ee1b2ada7a0a6a91f9d
1182 Merge: 9e3e5ae3e f5bd134
1183 Author: Brad Spengler <spender@grsecurity.net>
1184 Date: Tue May 10 20:56:54 2016 -0400
1185
1186 Merge branch 'pax-test' into grsec-test
1187
1188 commit f5bd1342fa631bb3b69a2e8919785c827c4edf74
1189 Author: Brad Spengler <spender@grsecurity.net>
1190 Date: Tue May 10 20:55:57 2016 -0400
1191
1192 Update to pax-linux-4.5.3-test5.patch:
1193 - marked all indirectly callable x86 asm crypto functions, reported by Dwokfur and minipli (https://forums.grsecurity.net/viewtopic.php?f=3&t=4468)
1194 - worked around an intentional integer overflow introduced by gcc-6 that triggered a size overflow false positive, reported by hooruD, chron and Fen (https://forums.grsecurity.net/viewtopic.php?f=3&t=4469)
1195 - made some preparations for enabling RAP on i386 as well, will have to wait due to KERNEXEC
1196
1197 arch/x86/crypto/aesni-intel_asm.S | 6 +++---
1198 arch/x86/crypto/sha-mb/sha1_mb_mgr_flush_avx2.S | 4 ++--
1199 arch/x86/crypto/sha-mb/sha1_mb_mgr_submit_avx2.S | 2 +-
1200 arch/x86/crypto/sha256_ni_asm.S | 2 +-
1201 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
1202 arch/x86/entry/common.c | 1 -
1203 include/linux/linkage.h | 22 +++++++++++++++-------
1204 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1205 tools/gcc/rap_plugin/rap_hash.c | 1 +
1206 tools/gcc/rap_plugin/rap_plugin.c | 18 +++++++++---------
1207 .../disable_size_overflow_hash.data | 1 +
1208 .../size_overflow_plugin/size_overflow_hash.data | 1 -
1209 12 files changed, 35 insertions(+), 27 deletions(-)
1210
1211 commit 9e3e5ae3e9ed69452d4133490dd1831376b9a1e8
1212 Merge: e5983fd cfcaa03
1213 Author: Brad Spengler <spender@grsecurity.net>
1214 Date: Sun May 8 08:04:18 2016 -0400
1215
1216 Merge branch 'pax-test' into grsec-test
1217
1218 commit cfcaa036dd3756fc32e083a7c486c1143d93fd22
1219 Author: Brad Spengler <spender@grsecurity.net>
1220 Date: Sun May 8 08:03:53 2016 -0400
1221
1222 Update to pax-linux-4.5.3-test4.patch:
1223 - fixed a few incorrect function types (mostly start_xmit callbacks) found by RAP, reported by cinder (https://forums.grsecurity.net/viewtopic.php?f=3&t=4466)
1224
1225 drivers/char/tpm/tpm-chip.c | 7 ++++++-
1226 drivers/net/can/bfin_can.c | 2 +-
1227 drivers/net/can/flexcan.c | 2 +-
1228 drivers/net/ethernet/adi/bfin_mac.c | 2 +-
1229 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
1230 drivers/net/ethernet/amd/7990.c | 2 +-
1231 drivers/net/ethernet/amd/7990.h | 2 +-
1232 drivers/net/ethernet/amd/atarilance.c | 4 ++--
1233 drivers/net/ethernet/amd/declance.c | 2 +-
1234 drivers/net/ethernet/amd/sun3lance.c | 4 ++--
1235 drivers/net/ethernet/amd/sunlance.c | 2 +-
1236 drivers/net/ethernet/broadcom/bcm63xx_enet.c | 2 +-
1237 drivers/net/ethernet/davicom/dm9000.c | 2 +-
1238 drivers/net/ethernet/faraday/ftgmac100.c | 2 +-
1239 drivers/net/ethernet/faraday/ftmac100.c | 2 +-
1240 drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
1241 drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
1242 drivers/net/ethernet/freescale/gianfar.c | 4 ++--
1243 drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
1244 drivers/net/ethernet/i825xx/lib82596.c | 4 ++--
1245 drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +-
1246 drivers/net/ethernet/ibm/emac/core.c | 4 ++--
1247 drivers/net/ethernet/micrel/ks8695net.c | 2 +-
1248 drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
1249 drivers/net/ethernet/netx-eth.c | 2 +-
1250 drivers/net/ethernet/nuvoton/w90p910_ether.c | 2 +-
1251 drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
1252 drivers/net/ethernet/seeq/sgiseeq.c | 2 +-
1253 drivers/net/ethernet/sgi/ioc3-eth.c | 4 ++--
1254 drivers/net/ethernet/smsc/smc911x.c | 2 +-
1255 drivers/net/ethernet/smsc/smc91x.c | 2 +-
1256 drivers/net/ethernet/sun/sunbmac.c | 2 +-
1257 drivers/net/ethernet/sun/sunqe.c | 2 +-
1258 drivers/net/ethernet/sun/sunvnet.c | 10 +++++-----
1259 drivers/net/ethernet/ti/cpmac.c | 2 +-
1260 drivers/net/ethernet/ti/netcp_core.c | 2 +-
1261 drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
1262 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 2 +-
1263 drivers/net/xen-netback/interface.c | 2 +-
1264 drivers/net/xen-netfront.c | 2 +-
1265 40 files changed, 55 insertions(+), 50 deletions(-)
1266
1267 commit e5983fd19799feb3bf947cd0dc2b5435deee3332
1268 Merge: 5ecb84f a235ecd
1269 Author: Brad Spengler <spender@grsecurity.net>
1270 Date: Sat May 7 00:00:42 2016 -0400
1271
1272 Merge branch 'pax-test' into grsec-test
1273
1274 commit a235ecd8bdece417e83f9cf89c76607bf15955dc
1275 Author: Brad Spengler <spender@grsecurity.net>
1276 Date: Fri May 6 23:59:34 2016 -0400
1277
1278 Update to pax-linux-4.5.3-test3.patch:
1279 - fixed some more of PARAVIRT for RAP, reported by hunger
1280 - Emese increased the coverage of initify by marking up str* and mem* functions
1281 - added error reporting for refusing to load modules incompatible with KERNEXEC's 'or' method, reported by Martin Väth (https://bugs.gentoo.org/show_bug.cgi?id=581726)
1282
1283 arch/arm/include/asm/string.h | 10 ++---
1284 arch/arm64/include/asm/string.h | 22 +++++------
1285 arch/x86/boot/string.h | 4 +-
1286 arch/x86/include/asm/string_32.h | 20 +++++-----
1287 arch/x86/include/asm/string_64.h | 16 ++++----
1288 arch/x86/kernel/paravirt-spinlocks.c | 22 +++++++++--
1289 arch/x86/xen/mmu.c | 6 ++-
1290 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 ++---
1291 include/linux/string.h | 70 +++++++++++++++++-----------------
1292 include/linux/syscalls.h | 2 +-
1293 kernel/module.c | 4 +-
1294 mm/fadvise.c | 2 +-
1295 tools/gcc/randomize_layout_seed.h | 1 -
1296 tools/gcc/rap_plugin/rap_plugin.c | 7 +++-
1297 14 files changed, 109 insertions(+), 87 deletions(-)
1298
1299 commit 5ecb84f55a9bdf8b39054c23d90646ba0591ce1c
1300 Author: Brad Spengler <spender@grsecurity.net>
1301 Date: Fri May 6 08:51:58 2016 -0400
1302
1303 Remove !PARAVIRT dependency on RAP
1304
1305 security/Kconfig | 2 +-
1306 1 file changed, 1 insertion(+), 1 deletion(-)
1307
1308 commit eecd10d7c579d2601c384c1e9e0f062a8dda40e7
1309 Author: Brad Spengler <spender@grsecurity.net>
1310 Date: Fri May 6 06:34:48 2016 -0400
1311
1312 Update copyright year
1313
1314 tools/gcc/randomize_layout_plugin.c | 2 +-
1315 1 file changed, 1 insertion(+), 1 deletion(-)
1316
1317 commit 7d7e01439c2601abcae2ecfc66a883be258a2691
1318 Merge: 3315e83 c2aa83b
1319 Author: Brad Spengler <spender@grsecurity.net>
1320 Date: Fri May 6 06:34:25 2016 -0400
1321
1322 Merge branch 'pax-test' into grsec-test
1323
1324 commit c2aa83bf2d65989c262ff33312874ee7fe38606a
1325 Author: Brad Spengler <spender@grsecurity.net>
1326 Date: Fri May 6 06:34:04 2016 -0400
1327
1328 Update to pax-linux-4.5.2-test2.patch:
1329 - minipli fixed a few missing hunks left out from the 4.5 port
1330 - fixed a regression in handling user.pax.flags on tmpfs, reported by blueness and Stebalien (https://forums.grsecurity.net/viewtopic.php?f=3&t=4462)
1331 - fixed a few compile regressions on arm, reported by Wizzup
1332 - fixed PARAVIRT for RAP, reported by spender
1333 - fixed the very old PAGEEXEC/i386 TLB reload code for SMAP (not that it could work there), reported by spender
1334 - Emese fixed a false positive size overflow report caused by gcc-5 and newer, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4455)
1335
1336 arch/arm/Kconfig | 2 +-
1337 arch/arm/include/asm/domain.h | 2 +-
1338 arch/arm/kernel/process.c | 6 +
1339 arch/mips/mm/mmap.c | 27 ++++
1340 arch/powerpc/kernel/process.c | 39 +++++
1341 arch/s390/kernel/process.c | 13 ++
1342 arch/x86/entry/entry_32.S | 2 +-
1343 arch/x86/include/asm/fixmap.h | 2 +-
1344 arch/x86/kernel/paravirt.c | 90 +++++++++--
1345 arch/x86/mm/fault.c | 2 +
1346 arch/x86/mm/pgtable.c | 2 +-
1347 drivers/cpufreq/intel_pstate.c | 2 +-
1348 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 +-
1349 drivers/net/ethernet/8390/ax88796.c | 4 +-
1350 drivers/oprofile/oprofilefs.c | 4 +-
1351 drivers/platform/x86/thinkpad_acpi.c | 1 -
1352 fs/xattr.c | 2 +-
1353 include/asm-generic/atomic-long.h | 4 +
1354 include/uapi/linux/xattr.h | 3 +-
1355 kernel/module.c | 2 +-
1356 mm/shmem.c | 2 -
1357 security/Kconfig | 2 +
1358 .../insert_size_overflow_asm.c | 2 +-
1359 .../size_overflow_plugin/intentional_overflow.c | 80 ++++++++--
1360 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
1361 tools/gcc/size_overflow_plugin/size_overflow.h | 8 +-
1362 .../gcc/size_overflow_plugin/size_overflow_debug.c | 2 +-
1363 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 2 +-
1364 .../gcc/size_overflow_plugin/size_overflow_misc.c | 2 +-
1365 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
1366 .../size_overflow_plugin_hash.c | 2 +-
1367 .../size_overflow_plugin/size_overflow_transform.c | 34 ++---
1368 .../size_overflow_transform_core.c | 170 +++++++++++----------
1369 33 files changed, 370 insertions(+), 156 deletions(-)
1370
1371 commit 3315e83c1e9738784da3c1c5836dd13b7593a8f1
1372 Author: Brad Spengler <spender@grsecurity.net>
1373 Date: Wed May 4 21:03:36 2016 -0400
1374
1375 Add PAGEEXEC support for i386 !PAE on SMAP-capable processors
1376 (won't be used by anyone, just for correctness sake)
1377
1378 arch/x86/mm/fault.c | 2 ++
1379 1 file changed, 2 insertions(+)
1380
1381 commit b9e96108d2092c12e42e1810a62aec85f6ddc501
1382 Merge: 6d98323 a3273aa
1383 Author: Brad Spengler <spender@grsecurity.net>
1384 Date: Wed May 4 19:06:44 2016 -0400
1385
1386 Merge branch 'pax-test' into grsec-test
1387
1388 commit a3273aa2488f9e201620ee53af1acfd99c58650a
1389 Merge: e0e4c2c fbc310e
1390 Author: Brad Spengler <spender@grsecurity.net>
1391 Date: Wed May 4 19:06:36 2016 -0400
1392
1393 Merge branch 'linux-4.5.y' into pax-test
1394
1395 commit 6d98323e0b511bdb77b9ef11d84207219331ac69
1396 Author: Brad Spengler <spender@grsecurity.net>
1397 Date: Tue May 3 21:58:09 2016 -0400
1398
1399 Backport fix from http://www.spinics.net/lists/linux-usb/msg140243.html
1400
1401 drivers/usb/core/devio.c | 9 +++++----
1402 1 file changed, 5 insertions(+), 4 deletions(-)
1403
1404 commit b003c68f96dd6a483b515290756816b6c909f34f
1405 Author: Brad Spengler <spender@grsecurity.net>
1406 Date: Sun May 1 12:06:48 2016 -0400
1407
1408 Add note about RANDSTRUCT and the gcc runtime library exception
1409
1410 tools/gcc/randomize_layout_plugin.c | 5 +++++
1411 1 file changed, 5 insertions(+)
1412
1413 commit fe375f07d31c5d561fcca4016f7c33e885fa3586
1414 Author: Brad Spengler <spender@grsecurity.net>
1415 Date: Fri Apr 29 06:22:29 2016 -0400
1416
1417 Revert change to regmap_access_show()
1418
1419 drivers/base/regmap/regmap-debugfs.c | 3 +--
1420 1 file changed, 1 insertion(+), 2 deletions(-)
1421
1422 commit 3f5df6e7cf9716b4854fb282b6eb22cb1e52e92a
1423 Author: Brad Spengler <spender@grsecurity.net>
1424 Date: Fri Apr 29 06:20:12 2016 -0400
1425
1426 Merge a number of fixes from Mathias Krause
1427
1428 arch/x86/entry/entry_32.S | 2 +-
1429 drivers/base/regmap/regmap-debugfs.c | 3 ++-
1430 drivers/cpufreq/intel_pstate.c | 2 +-
1431 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 ++++++-
1432 drivers/oprofile/oprofilefs.c | 4 ++--
1433 drivers/platform/x86/thinkpad_acpi.c | 1 -
1434 init/Kconfig | 1 -
1435 kernel/module.c | 4 +---
1436 8 files changed, 13 insertions(+), 11 deletions(-)
1437
1438 commit 127927d7e57793eca299226cb31ecd9d235bbd62
1439 Author: Brad Spengler <spender@grsecurity.net>
1440 Date: Thu Apr 28 20:58:04 2016 -0400
1441
1442 Add temporary dependency on !PARAVIRT for RAP until some fallout can be fixed
1443
1444 security/Kconfig | 2 +-
1445 1 file changed, 1 insertion(+), 1 deletion(-)
1446
1447 commit d37fff4904eee095ce50ea522efbfaf2a4bcb47e
1448 Author: Brad Spengler <spender@grsecurity.net>
1449 Date: Thu Apr 28 18:44:18 2016 -0400
1450
1451 Update to pax-linux-4.5.2-test1y.patch
1452
1453 tools/gcc/rap_plugin/rap_plugin.c | 6 ++++--
1454 1 file changed, 4 insertions(+), 2 deletions(-)
1455
1456 commit 5e309719b190a24dccd73c8b6ae388bd7f34660b
1457 Merge: ac01f5e e0e4c2c
1458 Author: Brad Spengler <spender@grsecurity.net>
1459 Date: Thu Apr 28 17:37:37 2016 -0400
1460
1461 Merge branch 'pax-test' into grsec-test
1462
1463 commit e0e4c2ce05e0cd594b716a1e12d91928a0d083fd
1464 Author: Brad Spengler <spender@grsecurity.net>
1465 Date: Thu Apr 28 17:36:23 2016 -0400
1466
1467 Update to pax-linux-4.5.2-test1x.patch
1468
1469 arch/x86/include/asm/alternative-asm.h | 8 --------
1470 drivers/lguest/core.c | 2 +-
1471 kernel/sched/deadline.c | 4 ++--
1472 mm/swap.c | 7 ++++++-
1473 tools/gcc/colorize_plugin.c | 2 +-
1474 tools/gcc/gcc-common.h | 21 +++++++++++++++++++++
1475 6 files changed, 31 insertions(+), 13 deletions(-)
1476
1477 commit ac01f5eb279d93b10d63f87c9d851e039ab1bc3e
1478 Author: Brad Spengler <spender@grsecurity.net>
1479 Date: Thu Apr 28 17:35:14 2016 -0400
1480
1481 Initial import of grsecurity 3.1 for 4.5.2 with limited RAP support
1482
1483 Documentation/dontdiff | 2 +
1484 Documentation/kernel-parameters.txt | 11 +
1485 Documentation/sysctl/kernel.txt | 15 +
1486 Makefile | 5 +-
1487 arch/alpha/include/asm/cache.h | 4 +-
1488 arch/alpha/kernel/osf_sys.c | 12 +-
1489 arch/arc/Kconfig | 1 +
1490 arch/arm/Kconfig | 1 +
1491 arch/arm/Kconfig.debug | 1 +
1492 arch/arm/include/asm/thread_info.h | 7 +-
1493 arch/arm/kernel/entry-common.S | 8 +-
1494 arch/arm/kernel/process.c | 4 +-
1495 arch/arm/kernel/ptrace.c | 9 +
1496 arch/arm/kernel/traps.c | 7 +-
1497 arch/arm/mm/Kconfig | 4 +-
1498 arch/arm/mm/fault.c | 40 +-
1499 arch/arm/mm/mmap.c | 8 +-
1500 arch/arm/net/bpf_jit_32.c | 51 +-
1501 arch/arm64/Kconfig.debug | 1 +
1502 arch/avr32/include/asm/cache.h | 4 +-
1503 arch/blackfin/Kconfig.debug | 1 +
1504 arch/blackfin/include/asm/cache.h | 3 +-
1505 arch/cris/include/arch-v10/arch/cache.h | 3 +-
1506 arch/cris/include/arch-v32/arch/cache.h | 3 +-
1507 arch/frv/include/asm/cache.h | 3 +-
1508 arch/frv/mm/elf-fdpic.c | 4 +-
1509 arch/hexagon/include/asm/cache.h | 6 +-
1510 arch/ia64/Kconfig | 1 +
1511 arch/ia64/include/asm/cache.h | 3 +-
1512 arch/ia64/kernel/sys_ia64.c | 2 +
1513 arch/ia64/mm/hugetlbpage.c | 2 +
1514 arch/m32r/include/asm/cache.h | 4 +-
1515 arch/m68k/include/asm/cache.h | 4 +-
1516 arch/metag/mm/hugetlbpage.c | 1 +
1517 arch/microblaze/include/asm/cache.h | 3 +-
1518 arch/mips/Kconfig | 1 +
1519 arch/mips/include/asm/thread_info.h | 11 +-
1520 arch/mips/kernel/irq.c | 3 +
1521 arch/mips/kernel/ptrace.c | 9 +
1522 arch/mips/mm/mmap.c | 4 +-
1523 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
1524 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
1525 arch/nios2/lib/memset.c | 2 +-
1526 arch/openrisc/include/asm/cache.h | 4 +-
1527 arch/parisc/include/asm/cache.h | 3 +
1528 arch/parisc/kernel/sys_parisc.c | 4 +
1529 arch/powerpc/Kconfig | 1 +
1530 arch/powerpc/include/asm/cache.h | 4 +-
1531 arch/powerpc/include/asm/thread_info.h | 5 +-
1532 arch/powerpc/kernel/Makefile | 2 +
1533 arch/powerpc/kernel/irq.c | 3 +
1534 arch/powerpc/kernel/process.c | 10 +-
1535 arch/powerpc/kernel/ptrace.c | 14 +
1536 arch/powerpc/kernel/traps.c | 5 +
1537 arch/powerpc/mm/slice.c | 2 +-
1538 arch/s390/Kconfig.debug | 1 +
1539 arch/s390/include/asm/cache.h | 4 +-
1540 arch/score/include/asm/cache.h | 4 +-
1541 arch/sh/include/asm/cache.h | 3 +-
1542 arch/sh/mm/mmap.c | 6 +-
1543 arch/sparc/include/asm/cache.h | 4 +-
1544 arch/sparc/include/asm/pgalloc_64.h | 1 +
1545 arch/sparc/include/asm/thread_info_64.h | 8 +-
1546 arch/sparc/kernel/process_32.c | 6 +-
1547 arch/sparc/kernel/process_64.c | 8 +-
1548 arch/sparc/kernel/ptrace_64.c | 14 +
1549 arch/sparc/kernel/sys_sparc_64.c | 8 +-
1550 arch/sparc/kernel/syscalls.S | 8 +-
1551 arch/sparc/kernel/traps_32.c | 8 +-
1552 arch/sparc/kernel/traps_64.c | 28 +-
1553 arch/sparc/kernel/unaligned_64.c | 2 +-
1554 arch/sparc/mm/fault_64.c | 2 +-
1555 arch/sparc/mm/hugetlbpage.c | 15 +-
1556 arch/tile/Kconfig | 1 +
1557 arch/tile/include/asm/cache.h | 3 +-
1558 arch/tile/mm/hugetlbpage.c | 2 +
1559 arch/um/include/asm/cache.h | 3 +-
1560 arch/unicore32/include/asm/cache.h | 6 +-
1561 arch/x86/Kconfig | 21 +
1562 arch/x86/Kconfig.debug | 2 +
1563 arch/x86/crypto/sha-mb/sha1_mb.c | 4 +-
1564 arch/x86/entry/common.c | 14 +
1565 arch/x86/entry/entry_32.S | 2 +-
1566 arch/x86/entry/entry_64.S | 2 +-
1567 arch/x86/ia32/ia32_aout.c | 2 +
1568 arch/x86/include/asm/floppy.h | 20 +-
1569 arch/x86/include/asm/fpu/types.h | 69 +-
1570 arch/x86/include/asm/io.h | 2 +-
1571 arch/x86/include/asm/page.h | 12 +-
1572 arch/x86/include/asm/paravirt_types.h | 21 +-
1573 arch/x86/include/asm/processor.h | 12 +-
1574 arch/x86/include/asm/thread_info.h | 6 +-
1575 arch/x86/kernel/dumpstack.c | 10 +-
1576 arch/x86/kernel/dumpstack_32.c | 2 +-
1577 arch/x86/kernel/dumpstack_64.c | 2 +-
1578 arch/x86/kernel/ioport.c | 13 +
1579 arch/x86/kernel/irq_32.c | 3 +
1580 arch/x86/kernel/irq_64.c | 4 +
1581 arch/x86/kernel/ldt.c | 18 +
1582 arch/x86/kernel/msr.c | 10 +
1583 arch/x86/kernel/ptrace.c | 14 +
1584 arch/x86/kernel/signal.c | 9 +-
1585 arch/x86/kernel/sys_i386_32.c | 9 +-
1586 arch/x86/kernel/sys_x86_64.c | 8 +-
1587 arch/x86/kernel/traps.c | 5 +
1588 arch/x86/kernel/verify_cpu.S | 1 +
1589 arch/x86/kernel/vm86_32.c | 15 +
1590 arch/x86/mm/fault.c | 12 +-
1591 arch/x86/mm/hugetlbpage.c | 15 +-
1592 arch/x86/mm/init.c | 66 +-
1593 arch/x86/mm/init_32.c | 6 +-
1594 arch/x86/net/bpf_jit_comp.c | 4 +
1595 arch/x86/platform/efi/efi_64.c | 2 +-
1596 arch/x86/xen/Kconfig | 1 +
1597 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
1598 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
1599 crypto/scatterwalk.c | 10 +-
1600 drivers/acpi/acpica/hwxfsleep.c | 11 +-
1601 drivers/acpi/custom_method.c | 4 +
1602 drivers/block/cciss.h | 30 +-
1603 drivers/block/smart1,2.h | 40 +-
1604 drivers/cdrom/cdrom.c | 2 +-
1605 drivers/char/Kconfig | 4 +-
1606 drivers/char/genrtc.c | 1 +
1607 drivers/char/mem.c | 17 +
1608 drivers/char/random.c | 5 +-
1609 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
1610 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +
1611 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +
1612 drivers/crypto/marvell/cesa.h | 3 +-
1613 drivers/crypto/marvell/hash.c | 106 +-
1614 drivers/firewire/ohci.c | 4 +
1615 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 78 +-
1616 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
1617 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
1618 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
1619 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
1620 drivers/hid/hid-wiimote-debug.c | 2 +-
1621 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
1622 drivers/input/touchscreen/sur40.c | 21 +-
1623 drivers/iommu/Kconfig | 1 +
1624 drivers/iommu/amd_iommu.c | 14 +-
1625 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
1626 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
1627 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
1628 drivers/isdn/i4l/isdn_concap.c | 6 +-
1629 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
1630 drivers/lguest/core.c | 2 +-
1631 drivers/md/bcache/Kconfig | 1 +
1632 drivers/md/raid5.c | 8 +
1633 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
1634 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
1635 drivers/media/radio/radio-cadet.c | 5 +-
1636 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
1637 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
1638 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
1639 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
1640 drivers/message/fusion/mptbase.c | 9 +
1641 drivers/misc/sgi-xp/xp_main.c | 12 +-
1642 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
1643 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
1644 drivers/net/hyperv/hyperv_net.h | 7 +-
1645 drivers/net/hyperv/netvsc_drv.c | 5 +-
1646 drivers/net/hyperv/rndis_filter.c | 4 +-
1647 drivers/net/wan/lmc/lmc_media.c | 97 +-
1648 drivers/net/wan/z85230.c | 24 +-
1649 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
1650 drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 2 +-
1651 drivers/pci/proc.c | 9 +
1652 drivers/platform/x86/asus-wmi.c | 12 +
1653 drivers/rtc/rtc-dev.c | 3 +
1654 drivers/scsi/bfa/bfa_fcs.c | 19 +-
1655 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
1656 drivers/scsi/bfa/bfa_modules.h | 12 +-
1657 drivers/scsi/cxgbi/libcxgbi.c | 1 +
1658 drivers/scsi/hpsa.h | 40 +-
1659 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
1660 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
1661 drivers/staging/wilc1000/host_interface.h | 1 +
1662 drivers/staging/wilc1000/wilc_spi.c | 1 +
1663 drivers/tty/serial/uartlite.c | 4 +-
1664 drivers/tty/sysrq.c | 2 +-
1665 drivers/tty/tty_io.c | 4 +
1666 drivers/tty/vt/keyboard.c | 22 +-
1667 drivers/uio/uio.c | 6 +-
1668 drivers/usb/core/hub.c | 5 +
1669 drivers/usb/gadget/function/f_uac1.c | 1 +
1670 drivers/usb/gadget/function/u_uac1.c | 1 +
1671 drivers/usb/host/hwa-hc.c | 9 +-
1672 drivers/usb/usbip/usbip_common.c | 11 +
1673 drivers/usb/usbip/vhci_sysfs.c | 2 +-
1674 drivers/video/fbdev/arcfb.c | 2 +-
1675 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
1676 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
1677 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
1678 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
1679 drivers/xen/xenfs/xenstored.c | 5 +
1680 firmware/Makefile | 2 +
1681 firmware/WHENCE | 20 +-
1682 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
1683 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
1684 fs/attr.c | 4 +
1685 fs/autofs4/waitq.c | 9 +
1686 fs/binfmt_aout.c | 7 +
1687 fs/binfmt_elf.c | 40 +-
1688 fs/compat.c | 20 +-
1689 fs/coredump.c | 17 +-
1690 fs/dcache.c | 3 +
1691 fs/debugfs/inode.c | 19 +-
1692 fs/ecryptfs/keystore.c | 6 +-
1693 fs/exec.c | 235 +-
1694 fs/ext2/balloc.c | 4 +-
1695 fs/ext2/super.c | 8 +-
1696 fs/ext4/balloc.c | 4 +-
1697 fs/ext4/extents.c | 2 +-
1698 fs/fcntl.c | 4 +
1699 fs/fhandle.c | 3 +-
1700 fs/file.c | 4 +
1701 fs/filesystems.c | 4 +
1702 fs/fs_struct.c | 20 +-
1703 fs/hugetlbfs/inode.c | 5 +-
1704 fs/inode.c | 8 +-
1705 fs/kernfs/dir.c | 6 +
1706 fs/mount.h | 4 +-
1707 fs/namei.c | 295 +-
1708 fs/namespace.c | 24 +
1709 fs/nfsd/nfscache.c | 2 +-
1710 fs/open.c | 38 +
1711 fs/overlayfs/inode.c | 3 +
1712 fs/overlayfs/super.c | 6 +-
1713 fs/pipe.c | 2 +-
1714 fs/posix_acl.c | 15 +-
1715 fs/proc/Kconfig | 10 +-
1716 fs/proc/array.c | 67 +-
1717 fs/proc/base.c | 175 +-
1718 fs/proc/cmdline.c | 4 +
1719 fs/proc/devices.c | 4 +
1720 fs/proc/fd.c | 13 +-
1721 fs/proc/generic.c | 64 +
1722 fs/proc/inode.c | 17 +
1723 fs/proc/internal.h | 11 +-
1724 fs/proc/interrupts.c | 4 +
1725 fs/proc/kcore.c | 3 +
1726 fs/proc/proc_net.c | 31 +
1727 fs/proc/proc_sysctl.c | 52 +-
1728 fs/proc/root.c | 8 +
1729 fs/proc/stat.c | 69 +-
1730 fs/proc/task_mmu.c | 66 +-
1731 fs/readdir.c | 19 +
1732 fs/reiserfs/item_ops.c | 24 +-
1733 fs/reiserfs/super.c | 4 +
1734 fs/select.c | 2 +
1735 fs/seq_file.c | 30 +-
1736 fs/stat.c | 20 +-
1737 fs/sysfs/dir.c | 30 +-
1738 fs/utimes.c | 7 +
1739 fs/xattr.c | 26 +-
1740 grsecurity/Kconfig | 1205 ++++
1741 grsecurity/Makefile | 54 +
1742 grsecurity/gracl.c | 2757 +++++++++
1743 grsecurity/gracl_alloc.c | 105 +
1744 grsecurity/gracl_cap.c | 127 +
1745 grsecurity/gracl_compat.c | 269 +
1746 grsecurity/gracl_fs.c | 448 ++
1747 grsecurity/gracl_ip.c | 386 ++
1748 grsecurity/gracl_learn.c | 207 +
1749 grsecurity/gracl_policy.c | 1784 ++++++
1750 grsecurity/gracl_res.c | 68 +
1751 grsecurity/gracl_segv.c | 304 +
1752 grsecurity/gracl_shm.c | 40 +
1753 grsecurity/grsec_chdir.c | 19 +
1754 grsecurity/grsec_chroot.c | 506 ++
1755 grsecurity/grsec_disabled.c | 445 ++
1756 grsecurity/grsec_exec.c | 189 +
1757 grsecurity/grsec_fifo.c | 26 +
1758 grsecurity/grsec_fork.c | 23 +
1759 grsecurity/grsec_init.c | 294 +
1760 grsecurity/grsec_ipc.c | 48 +
1761 grsecurity/grsec_link.c | 65 +
1762 grsecurity/grsec_log.c | 340 +
1763 grsecurity/grsec_mem.c | 48 +
1764 grsecurity/grsec_mount.c | 65 +
1765 grsecurity/grsec_pax.c | 47 +
1766 grsecurity/grsec_proc.c | 20 +
1767 grsecurity/grsec_ptrace.c | 30 +
1768 grsecurity/grsec_sig.c | 245 +
1769 grsecurity/grsec_sock.c | 244 +
1770 grsecurity/grsec_sysctl.c | 497 ++
1771 grsecurity/grsec_time.c | 16 +
1772 grsecurity/grsec_tpe.c | 78 +
1773 grsecurity/grsec_tty.c | 18 +
1774 grsecurity/grsec_usb.c | 15 +
1775 grsecurity/grsum.c | 54 +
1776 include/linux/binfmts.h | 5 +-
1777 include/linux/capability.h | 13 +
1778 include/linux/compiler-gcc.h | 5 +
1779 include/linux/compiler.h | 8 +
1780 include/linux/cred.h | 8 +-
1781 include/linux/dcache.h | 5 +-
1782 include/linux/fs.h | 24 +-
1783 include/linux/fs_struct.h | 2 +-
1784 include/linux/fsnotify.h | 6 +
1785 include/linux/gracl.h | 342 ++
1786 include/linux/gracl_compat.h | 156 +
1787 include/linux/gralloc.h | 9 +
1788 include/linux/grdefs.h | 140 +
1789 include/linux/grinternal.h | 231 +
1790 include/linux/grmsg.h | 120 +
1791 include/linux/grsecurity.h | 259 +
1792 include/linux/grsock.h | 19 +
1793 include/linux/ipc.h | 2 +-
1794 include/linux/ipc_namespace.h | 2 +-
1795 include/linux/kallsyms.h | 18 +-
1796 include/linux/key-type.h | 4 +-
1797 include/linux/kmod.h | 5 +
1798 include/linux/kobject.h | 2 +-
1799 include/linux/lsm_hooks.h | 4 +-
1800 include/linux/mm.h | 12 +
1801 include/linux/mm_types.h | 4 +-
1802 include/linux/module.h | 5 +-
1803 include/linux/mount.h | 2 +-
1804 include/linux/msg.h | 2 +-
1805 include/linux/netfilter/xt_gradm.h | 9 +
1806 include/linux/path.h | 4 +-
1807 include/linux/perf_event.h | 13 +-
1808 include/linux/pid_namespace.h | 2 +-
1809 include/linux/printk.h | 2 +-
1810 include/linux/proc_fs.h | 22 +-
1811 include/linux/proc_ns.h | 2 +-
1812 include/linux/random.h | 2 +-
1813 include/linux/rbtree_augmented.h | 4 +-
1814 include/linux/scatterlist.h | 12 +-
1815 include/linux/sched.h | 114 +-
1816 include/linux/security.h | 1 +
1817 include/linux/sem.h | 2 +-
1818 include/linux/seq_file.h | 5 +
1819 include/linux/shm.h | 6 +-
1820 include/linux/skbuff.h | 3 +
1821 include/linux/slab.h | 9 -
1822 include/linux/sysctl.h | 8 +-
1823 include/linux/thread_info.h | 6 +-
1824 include/linux/tty.h | 2 +-
1825 include/linux/tty_driver.h | 4 +-
1826 include/linux/uidgid.h | 5 +
1827 include/linux/user_namespace.h | 2 +-
1828 include/linux/utsname.h | 2 +-
1829 include/linux/vermagic.h | 16 +-
1830 include/linux/vmalloc.h | 8 +
1831 include/net/af_unix.h | 2 +-
1832 include/net/ip.h | 2 +-
1833 include/net/neighbour.h | 2 +-
1834 include/net/net_namespace.h | 2 +-
1835 include/net/sctp/structs.h | 2 +-
1836 include/net/sock.h | 2 +-
1837 include/trace/events/fs.h | 53 +
1838 include/uapi/linux/personality.h | 1 +
1839 init/Kconfig | 4 +
1840 init/main.c | 46 +-
1841 ipc/mqueue.c | 1 +
1842 ipc/msg.c | 3 +-
1843 ipc/msgutil.c | 4 +-
1844 ipc/sem.c | 3 +-
1845 ipc/shm.c | 26 +-
1846 ipc/util.c | 6 +
1847 kernel/auditsc.c | 2 +-
1848 kernel/bpf/syscall.c | 10 +-
1849 kernel/bpf/verifier.c | 1 -
1850 kernel/capability.c | 41 +-
1851 kernel/cgroup.c | 5 +-
1852 kernel/compat.c | 1 +
1853 kernel/configs.c | 11 +
1854 kernel/cred.c | 112 +-
1855 kernel/events/core.c | 14 +-
1856 kernel/exit.c | 10 +-
1857 kernel/fork.c | 86 +-
1858 kernel/futex.c | 4 +-
1859 kernel/kallsyms.c | 9 +
1860 kernel/kcmp.c | 4 +
1861 kernel/kexec_core.c | 2 +-
1862 kernel/kmod.c | 96 +-
1863 kernel/kprobes.c | 9 +-
1864 kernel/ksysfs.c | 2 +
1865 kernel/locking/lockdep_proc.c | 10 +-
1866 kernel/module.c | 110 +-
1867 kernel/panic.c | 4 +-
1868 kernel/pid.c | 18 +-
1869 kernel/power/Kconfig | 2 +
1870 kernel/printk/printk.c | 7 +-
1871 kernel/ptrace.c | 50 +-
1872 kernel/resource.c | 10 +
1873 kernel/sched/core.c | 11 +-
1874 kernel/sched/debug.c | 4 +
1875 kernel/signal.c | 37 +-
1876 kernel/sys.c | 64 +-
1877 kernel/sysctl.c | 172 +-
1878 kernel/taskstats.c | 6 +
1879 kernel/time/posix-timers.c | 8 +
1880 kernel/time/time.c | 5 +
1881 kernel/time/timekeeping.c | 3 +
1882 kernel/time/timer_list.c | 13 +-
1883 kernel/time/timer_stats.c | 10 +-
1884 kernel/trace/Kconfig | 2 +
1885 kernel/trace/trace_syscalls.c | 8 +
1886 kernel/user_namespace.c | 15 +
1887 kernel/workqueue.c | 29 +
1888 lib/Kconfig.debug | 12 +-
1889 lib/Kconfig.kasan | 2 +-
1890 lib/is_single_threaded.c | 3 +
1891 lib/list_debug.c | 65 +-
1892 lib/nlattr.c | 2 +
1893 lib/rbtree.c | 4 +-
1894 lib/vsprintf.c | 39 +-
1895 localversion-grsec | 1 +
1896 mm/Kconfig | 8 +-
1897 mm/Kconfig.debug | 1 +
1898 mm/filemap.c | 8 +-
1899 mm/kmemleak.c | 4 +-
1900 mm/memory.c | 2 +-
1901 mm/mempolicy.c | 12 +-
1902 mm/migrate.c | 3 +-
1903 mm/mlock.c | 11 +-
1904 mm/mmap.c | 127 +-
1905 mm/mprotect.c | 8 +
1906 mm/oom_kill.c | 4 +
1907 mm/page_alloc.c | 2 +-
1908 mm/process_vm_access.c | 6 +
1909 mm/shmem.c | 2 +-
1910 mm/slab.c | 14 +-
1911 mm/slab_common.c | 2 +-
1912 mm/slob.c | 12 +
1913 mm/slub.c | 33 +-
1914 mm/swap.c | 6 +-
1915 mm/util.c | 3 +
1916 mm/vmalloc.c | 82 +-
1917 mm/vmstat.c | 29 +-
1918 net/appletalk/atalk_proc.c | 2 +-
1919 net/atm/lec.c | 6 +-
1920 net/atm/mpoa_caches.c | 43 +-
1921 net/bridge/netfilter/ebtables.c | 4 +
1922 net/can/bcm.c | 2 +-
1923 net/can/proc.c | 2 +-
1924 net/core/dev_ioctl.c | 7 +-
1925 net/core/filter.c | 8 +-
1926 net/core/net-procfs.c | 17 +-
1927 net/core/pktgen.c | 2 +-
1928 net/core/sock.c | 23 +-
1929 net/core/sysctl_net_core.c | 2 +-
1930 net/decnet/dn_dev.c | 2 +-
1931 net/ipv4/devinet.c | 6 +-
1932 net/ipv4/inet_hashtables.c | 4 +
1933 net/ipv4/ip_input.c | 7 +
1934 net/ipv4/ip_sockglue.c | 3 +-
1935 net/ipv4/netfilter/arp_tables.c | 43 +-
1936 net/ipv4/netfilter/ip_tables.c | 48 +-
1937 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
1938 net/ipv4/route.c | 6 +-
1939 net/ipv4/tcp_input.c | 6 +-
1940 net/ipv4/tcp_ipv4.c | 24 +-
1941 net/ipv4/tcp_minisocks.c | 9 +-
1942 net/ipv4/tcp_timer.c | 11 +
1943 net/ipv4/udp.c | 24 +
1944 net/ipv6/addrconf.c | 13 +-
1945 net/ipv6/netfilter/ip6_tables.c | 48 +-
1946 net/ipv6/proc.c | 2 +-
1947 net/ipv6/tcp_ipv6.c | 23 +-
1948 net/ipv6/udp.c | 7 +
1949 net/ipx/ipx_proc.c | 2 +-
1950 net/irda/irproc.c | 2 +-
1951 net/llc/llc_proc.c | 2 +-
1952 net/netfilter/Kconfig | 10 +
1953 net/netfilter/Makefile | 1 +
1954 net/netfilter/nf_conntrack_core.c | 8 +
1955 net/netfilter/xt_gradm.c | 51 +
1956 net/netfilter/xt_hashlimit.c | 4 +-
1957 net/netfilter/xt_recent.c | 2 +-
1958 net/packet/af_packet.c | 1 +
1959 net/sctp/bind_addr.c | 14 +-
1960 net/sctp/protocol.c | 1 +
1961 net/sctp/sm_make_chunk.c | 3 +-
1962 net/sctp/socket.c | 4 +-
1963 net/socket.c | 75 +-
1964 net/sunrpc/Kconfig | 1 +
1965 net/sunrpc/cache.c | 2 +-
1966 net/sunrpc/stats.c | 2 +-
1967 net/sysctl_net.c | 2 +-
1968 net/unix/af_unix.c | 52 +-
1969 net/vmw_vsock/vmci_transport_notify.c | 30 +-
1970 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
1971 net/x25/sysctl_net_x25.c | 2 +-
1972 net/x25/x25_proc.c | 2 +-
1973 scripts/package/Makefile | 2 +-
1974 scripts/package/mkspec | 41 +-
1975 security/Kconfig | 364 +-
1976 security/apparmor/file.c | 4 +-
1977 security/apparmor/lsm.c | 8 +-
1978 security/commoncap.c | 29 +
1979 security/keys/internal.h | 2 +-
1980 security/min_addr.c | 2 +
1981 security/tomoyo/file.c | 12 +-
1982 security/tomoyo/mount.c | 4 +
1983 security/tomoyo/tomoyo.c | 20 +-
1984 security/yama/Kconfig | 2 +-
1985 sound/synth/emux/emux_seq.c | 14 +-
1986 sound/usb/line6/driver.c | 40 +-
1987 sound/usb/line6/toneport.c | 12 +-
1988 tools/gcc/.gitignore | 1 +
1989 tools/gcc/Makefile | 12 +
1990 tools/gcc/gen-random-seed.sh | 8 +
1991 tools/gcc/randomize_layout_plugin.c | 935 +++
1992 tools/gcc/randomize_layout_seed.h | 1 -
1993 .../size_overflow_plugin/size_overflow_hash.data | 202 +-
1994 511 files changed, 32630 insertions(+), 3134 deletions(-)
1995
1996 commit a89837d0fc99aab94b5c8b975215de260271c1f7
1997 Author: Brad Spengler <spender@grsecurity.net>
1998 Date: Wed Apr 27 20:43:37 2016 -0400
1999
2000 Initial port of PaX to 4.5.2 with a limited form of RAP
2001 (< 1/5th the total size of the full developed RAP plugin)
2002 No retaddr protection via XOR canary
2003 No C++ support
2004 No LTO support
2005 Removal of a few optimization passes
2006 No compile time reporting of bad fptr casts
2007
2008 The RAP plugin should therefore be used only to compile an
2009 appropriate vanilla kernel with this patch.
2010
2011 Documentation/dontdiff | 46 +-
2012 Documentation/kbuild/makefiles.txt | 39 +-
2013 Documentation/kernel-parameters.txt | 28 +
2014 Makefile | 52 +-
2015 arch/alpha/include/asm/atomic.h | 10 +
2016 arch/alpha/include/asm/elf.h | 7 +
2017 arch/alpha/include/asm/pgalloc.h | 6 +
2018 arch/alpha/include/asm/pgtable.h | 11 +
2019 arch/alpha/kernel/module.c | 2 +-
2020 arch/alpha/kernel/osf_sys.c | 8 +-
2021 arch/alpha/mm/fault.c | 141 +-
2022 arch/arm/Kconfig | 3 +-
2023 arch/arm/include/asm/atomic.h | 323 +-
2024 arch/arm/include/asm/cache.h | 5 +-
2025 arch/arm/include/asm/cacheflush.h | 2 +-
2026 arch/arm/include/asm/checksum.h | 14 +-
2027 arch/arm/include/asm/cmpxchg.h | 4 +
2028 arch/arm/include/asm/cpuidle.h | 2 +-
2029 arch/arm/include/asm/domain.h | 42 +-
2030 arch/arm/include/asm/elf.h | 9 +-
2031 arch/arm/include/asm/fncpy.h | 2 +
2032 arch/arm/include/asm/futex.h | 1 +
2033 arch/arm/include/asm/kmap_types.h | 2 +-
2034 arch/arm/include/asm/mach/dma.h | 2 +-
2035 arch/arm/include/asm/mach/map.h | 16 +-
2036 arch/arm/include/asm/outercache.h | 2 +-
2037 arch/arm/include/asm/page.h | 3 +-
2038 arch/arm/include/asm/pgalloc.h | 20 +
2039 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
2040 arch/arm/include/asm/pgtable-2level.h | 3 +
2041 arch/arm/include/asm/pgtable-3level.h | 3 +
2042 arch/arm/include/asm/pgtable.h | 54 +-
2043 arch/arm/include/asm/smp.h | 2 +-
2044 arch/arm/include/asm/thread_info.h | 3 +
2045 arch/arm/include/asm/tls.h | 3 +
2046 arch/arm/include/asm/uaccess.h | 113 +-
2047 arch/arm/include/uapi/asm/ptrace.h | 2 +-
2048 arch/arm/kernel/armksyms.c | 2 +-
2049 arch/arm/kernel/cpuidle.c | 2 +-
2050 arch/arm/kernel/entry-armv.S | 109 +-
2051 arch/arm/kernel/entry-common.S | 40 +-
2052 arch/arm/kernel/entry-header.S | 55 +
2053 arch/arm/kernel/fiq.c | 3 +
2054 arch/arm/kernel/module-plts.c | 7 +-
2055 arch/arm/kernel/module.c | 38 +-
2056 arch/arm/kernel/patch.c | 2 +
2057 arch/arm/kernel/process.c | 92 +-
2058 arch/arm/kernel/reboot.c | 1 +
2059 arch/arm/kernel/setup.c | 20 +-
2060 arch/arm/kernel/signal.c | 35 +-
2061 arch/arm/kernel/smp.c | 2 +-
2062 arch/arm/kernel/tcm.c | 4 +-
2063 arch/arm/kernel/vmlinux.lds.S | 6 +-
2064 arch/arm/kvm/arm.c | 8 +-
2065 arch/arm/lib/copy_page.S | 1 +
2066 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2067 arch/arm/lib/delay.c | 2 +-
2068 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
2069 arch/arm/mach-exynos/suspend.c | 6 +-
2070 arch/arm/mach-mvebu/coherency.c | 4 +-
2071 arch/arm/mach-omap2/board-n8x0.c | 2 +-
2072 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
2073 arch/arm/mach-omap2/omap-smp.c | 1 +
2074 arch/arm/mach-omap2/omap_device.c | 4 +-
2075 arch/arm/mach-omap2/omap_device.h | 4 +-
2076 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2077 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2078 arch/arm/mach-omap2/wd_timer.c | 6 +-
2079 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
2080 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
2081 arch/arm/mach-tegra/irq.c | 1 +
2082 arch/arm/mach-ux500/pm.c | 1 +
2083 arch/arm/mach-zynq/platsmp.c | 1 +
2084 arch/arm/mm/Kconfig | 6 +-
2085 arch/arm/mm/cache-l2x0.c | 2 +-
2086 arch/arm/mm/context.c | 10 +-
2087 arch/arm/mm/fault.c | 146 +
2088 arch/arm/mm/fault.h | 12 +
2089 arch/arm/mm/init.c | 39 +
2090 arch/arm/mm/ioremap.c | 4 +-
2091 arch/arm/mm/mmap.c | 36 +-
2092 arch/arm/mm/mmu.c | 162 +-
2093 arch/arm/net/bpf_jit_32.c | 3 +
2094 arch/arm/plat-iop/setup.c | 2 +-
2095 arch/arm/plat-omap/sram.c | 2 +
2096 arch/arm64/include/asm/atomic.h | 10 +
2097 arch/arm64/include/asm/percpu.h | 8 +-
2098 arch/arm64/include/asm/pgalloc.h | 5 +
2099 arch/arm64/include/asm/uaccess.h | 1 +
2100 arch/arm64/mm/dma-mapping.c | 2 +-
2101 arch/avr32/include/asm/elf.h | 8 +-
2102 arch/avr32/include/asm/kmap_types.h | 4 +-
2103 arch/avr32/mm/fault.c | 27 +
2104 arch/frv/include/asm/atomic.h | 10 +
2105 arch/frv/include/asm/kmap_types.h | 2 +-
2106 arch/frv/mm/elf-fdpic.c | 3 +-
2107 arch/ia64/Makefile | 1 +
2108 arch/ia64/include/asm/atomic.h | 10 +
2109 arch/ia64/include/asm/elf.h | 7 +
2110 arch/ia64/include/asm/pgalloc.h | 12 +
2111 arch/ia64/include/asm/pgtable.h | 13 +-
2112 arch/ia64/include/asm/spinlock.h | 2 +-
2113 arch/ia64/include/asm/uaccess.h | 27 +-
2114 arch/ia64/kernel/module.c | 20 +-
2115 arch/ia64/kernel/palinfo.c | 2 +-
2116 arch/ia64/kernel/sys_ia64.c | 7 +
2117 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2118 arch/ia64/mm/fault.c | 32 +-
2119 arch/ia64/mm/init.c | 15 +-
2120 arch/m32r/lib/usercopy.c | 6 +
2121 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
2122 arch/mips/include/asm/atomic.h | 372 +-
2123 arch/mips/include/asm/cache.h | 3 +-
2124 arch/mips/include/asm/elf.h | 7 +
2125 arch/mips/include/asm/exec.h | 2 +-
2126 arch/mips/include/asm/hw_irq.h | 2 +-
2127 arch/mips/include/asm/local.h | 57 +
2128 arch/mips/include/asm/page.h | 2 +-
2129 arch/mips/include/asm/pgalloc.h | 5 +
2130 arch/mips/include/asm/pgtable.h | 3 +
2131 arch/mips/include/asm/uaccess.h | 1 +
2132 arch/mips/kernel/binfmt_elfn32.c | 7 +
2133 arch/mips/kernel/binfmt_elfo32.c | 7 +
2134 arch/mips/kernel/irq-gt641xx.c | 2 +-
2135 arch/mips/kernel/irq.c | 6 +-
2136 arch/mips/kernel/pm-cps.c | 2 +-
2137 arch/mips/kernel/process.c | 12 -
2138 arch/mips/kernel/sync-r4k.c | 24 +-
2139 arch/mips/kernel/traps.c | 13 +-
2140 arch/mips/lib/ashldi3.c | 21 +-
2141 arch/mips/lib/ashrdi3.c | 19 +-
2142 arch/mips/lib/libgcc.h | 12 +-
2143 arch/mips/mm/fault.c | 25 +
2144 arch/mips/mm/init.c | 4 +-
2145 arch/mips/mm/mmap.c | 51 +-
2146 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2147 arch/mips/sni/rm200.c | 2 +-
2148 arch/mips/vr41xx/common/icu.c | 2 +-
2149 arch/mips/vr41xx/common/irq.c | 4 +-
2150 arch/parisc/include/asm/atomic.h | 10 +
2151 arch/parisc/include/asm/elf.h | 7 +
2152 arch/parisc/include/asm/pgalloc.h | 6 +
2153 arch/parisc/include/asm/pgtable.h | 11 +
2154 arch/parisc/include/asm/uaccess.h | 4 +-
2155 arch/parisc/kernel/module.c | 26 +-
2156 arch/parisc/kernel/sys_parisc.c | 15 +
2157 arch/parisc/kernel/traps.c | 4 +-
2158 arch/parisc/mm/fault.c | 140 +-
2159 arch/powerpc/include/asm/atomic.h | 329 +-
2160 arch/powerpc/include/asm/book3s/32/hash.h | 1 +
2161 arch/powerpc/include/asm/elf.h | 12 +
2162 arch/powerpc/include/asm/exec.h | 2 +-
2163 arch/powerpc/include/asm/kmap_types.h | 2 +-
2164 arch/powerpc/include/asm/local.h | 46 +
2165 arch/powerpc/include/asm/mman.h | 2 +-
2166 arch/powerpc/include/asm/page.h | 8 +-
2167 arch/powerpc/include/asm/page_64.h | 7 +-
2168 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2169 arch/powerpc/include/asm/pgtable.h | 1 +
2170 arch/powerpc/include/asm/reg.h | 1 +
2171 arch/powerpc/include/asm/smp.h | 2 +-
2172 arch/powerpc/include/asm/spinlock.h | 42 +-
2173 arch/powerpc/include/asm/uaccess.h | 141 +-
2174 arch/powerpc/kernel/Makefile | 5 +
2175 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2176 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2177 arch/powerpc/kernel/module_32.c | 15 +-
2178 arch/powerpc/kernel/process.c | 46 -
2179 arch/powerpc/kernel/signal_32.c | 2 +-
2180 arch/powerpc/kernel/signal_64.c | 2 +-
2181 arch/powerpc/kernel/traps.c | 21 +
2182 arch/powerpc/kernel/vdso.c | 5 +-
2183 arch/powerpc/lib/usercopy_64.c | 18 -
2184 arch/powerpc/mm/fault.c | 56 +-
2185 arch/powerpc/mm/mmap.c | 16 +
2186 arch/powerpc/mm/slice.c | 21 +-
2187 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
2188 arch/s390/include/asm/atomic.h | 10 +
2189 arch/s390/include/asm/elf.h | 7 +
2190 arch/s390/include/asm/exec.h | 2 +-
2191 arch/s390/include/asm/uaccess.h | 13 +-
2192 arch/s390/kernel/module.c | 22 +-
2193 arch/s390/kernel/process.c | 20 -
2194 arch/s390/mm/mmap.c | 22 +-
2195 arch/score/include/asm/exec.h | 2 +-
2196 arch/score/kernel/process.c | 5 -
2197 arch/sh/mm/mmap.c | 28 +-
2198 arch/sparc/include/asm/atomic_64.h | 110 +-
2199 arch/sparc/include/asm/cache.h | 2 +-
2200 arch/sparc/include/asm/elf_32.h | 7 +
2201 arch/sparc/include/asm/elf_64.h | 7 +
2202 arch/sparc/include/asm/pgalloc_32.h | 1 +
2203 arch/sparc/include/asm/pgalloc_64.h | 1 +
2204 arch/sparc/include/asm/pgtable.h | 4 +
2205 arch/sparc/include/asm/pgtable_32.h | 15 +-
2206 arch/sparc/include/asm/pgtsrmmu.h | 5 +
2207 arch/sparc/include/asm/setup.h | 4 +-
2208 arch/sparc/include/asm/spinlock_64.h | 35 +-
2209 arch/sparc/include/asm/thread_info_32.h | 1 +
2210 arch/sparc/include/asm/thread_info_64.h | 2 +
2211 arch/sparc/include/asm/uaccess.h | 1 +
2212 arch/sparc/include/asm/uaccess_32.h | 28 +-
2213 arch/sparc/include/asm/uaccess_64.h | 24 +-
2214 arch/sparc/kernel/Makefile | 2 +-
2215 arch/sparc/kernel/prom_common.c | 2 +-
2216 arch/sparc/kernel/smp_64.c | 8 +-
2217 arch/sparc/kernel/sys_sparc_32.c | 2 +-
2218 arch/sparc/kernel/sys_sparc_64.c | 58 +-
2219 arch/sparc/kernel/traps_64.c | 27 +-
2220 arch/sparc/lib/Makefile | 2 +-
2221 arch/sparc/lib/atomic_64.S | 57 +-
2222 arch/sparc/lib/ksyms.c | 6 +-
2223 arch/sparc/mm/Makefile | 2 +-
2224 arch/sparc/mm/fault_32.c | 292 +
2225 arch/sparc/mm/fault_64.c | 486 +
2226 arch/sparc/mm/hugetlbpage.c | 30 +-
2227 arch/sparc/mm/init_64.c | 10 +-
2228 arch/tile/include/asm/atomic_64.h | 10 +
2229 arch/tile/include/asm/uaccess.h | 4 +-
2230 arch/um/Makefile | 4 +
2231 arch/um/include/asm/kmap_types.h | 2 +-
2232 arch/um/include/asm/page.h | 3 +
2233 arch/um/include/asm/pgtable-3level.h | 1 +
2234 arch/um/kernel/process.c | 16 -
2235 arch/x86/Kconfig | 26 +-
2236 arch/x86/Kconfig.cpu | 6 +-
2237 arch/x86/Kconfig.debug | 4 +-
2238 arch/x86/Makefile | 13 +-
2239 arch/x86/boot/Makefile | 3 +
2240 arch/x86/boot/bitops.h | 4 +-
2241 arch/x86/boot/boot.h | 2 +-
2242 arch/x86/boot/compressed/Makefile | 20 +
2243 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
2244 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
2245 arch/x86/boot/compressed/head_32.S | 4 +-
2246 arch/x86/boot/compressed/head_64.S | 12 +-
2247 arch/x86/boot/compressed/misc.c | 11 +-
2248 arch/x86/boot/cpucheck.c | 16 +-
2249 arch/x86/boot/header.S | 6 +-
2250 arch/x86/boot/memory.c | 2 +-
2251 arch/x86/boot/video-vesa.c | 1 +
2252 arch/x86/boot/video.c | 2 +-
2253 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
2254 arch/x86/crypto/aesni-intel_asm.S | 110 +-
2255 arch/x86/crypto/aesni-intel_glue.c | 4 +-
2256 arch/x86/crypto/blowfish-x86_64-asm_64.S | 11 +-
2257 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 22 +-
2258 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 22 +-
2259 arch/x86/crypto/camellia-x86_64-asm_64.S | 11 +-
2260 arch/x86/crypto/camellia_aesni_avx2_glue.c | 18 +-
2261 arch/x86/crypto/camellia_aesni_avx_glue.c | 18 +-
2262 arch/x86/crypto/camellia_glue.c | 8 +-
2263 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 55 +-
2264 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 37 +-
2265 arch/x86/crypto/cast6_avx_glue.c | 16 +-
2266 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
2267 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
2268 arch/x86/crypto/glue_helper.c | 2 +-
2269 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
2270 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 21 +-
2271 arch/x86/crypto/serpent-avx2-asm_64.S | 21 +-
2272 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
2273 arch/x86/crypto/serpent_avx2_glue.c | 14 +-
2274 arch/x86/crypto/serpent_avx_glue.c | 18 +-
2275 arch/x86/crypto/serpent_sse2_glue.c | 4 +-
2276 arch/x86/crypto/sha1_ssse3_asm.S | 13 +-
2277 arch/x86/crypto/sha1_ssse3_glue.c | 56 +-
2278 arch/x86/crypto/sha256-avx-asm.S | 5 +-
2279 arch/x86/crypto/sha256-avx2-asm.S | 5 +-
2280 arch/x86/crypto/sha256-ssse3-asm.S | 6 +-
2281 arch/x86/crypto/sha256_ssse3_glue.c | 26 +-
2282 arch/x86/crypto/sha512-avx-asm.S | 5 +-
2283 arch/x86/crypto/sha512-avx2-asm.S | 5 +-
2284 arch/x86/crypto/sha512-ssse3-asm.S | 5 +-
2285 arch/x86/crypto/sha512_ssse3_glue.c | 22 +-
2286 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 37 +-
2287 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
2288 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 6 +-
2289 arch/x86/crypto/twofish-x86_64-asm_64.S | 7 +-
2290 arch/x86/crypto/twofish_avx_glue.c | 21 +-
2291 arch/x86/crypto/twofish_glue.c | 4 +-
2292 arch/x86/crypto/twofish_glue_3way.c | 12 +-
2293 arch/x86/entry/Makefile | 2 +
2294 arch/x86/entry/calling.h | 86 +-
2295 arch/x86/entry/common.c | 70 +-
2296 arch/x86/entry/entry_32.S | 311 +-
2297 arch/x86/entry/entry_64.S | 629 +-
2298 arch/x86/entry/entry_64_compat.S | 115 +-
2299 arch/x86/entry/thunk_64.S | 2 +
2300 arch/x86/entry/vdso/Makefile | 5 +-
2301 arch/x86/entry/vdso/vclock_gettime.c | 2 +-
2302 arch/x86/entry/vdso/vdso2c.h | 8 +-
2303 arch/x86/entry/vdso/vma.c | 37 +-
2304 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
2305 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
2306 arch/x86/ia32/ia32_signal.c | 23 +-
2307 arch/x86/ia32/sys_ia32.c | 42 +-
2308 arch/x86/include/asm/alternative-asm.h | 51 +-
2309 arch/x86/include/asm/alternative.h | 4 +-
2310 arch/x86/include/asm/apic.h | 2 +-
2311 arch/x86/include/asm/apm.h | 4 +-
2312 arch/x86/include/asm/atomic.h | 230 +-
2313 arch/x86/include/asm/atomic64_32.h | 100 +
2314 arch/x86/include/asm/atomic64_64.h | 164 +-
2315 arch/x86/include/asm/bitops.h | 18 +-
2316 arch/x86/include/asm/boot.h | 2 +-
2317 arch/x86/include/asm/cache.h | 5 +-
2318 arch/x86/include/asm/checksum_32.h | 12 +-
2319 arch/x86/include/asm/cmpxchg.h | 39 +
2320 arch/x86/include/asm/compat.h | 4 +
2321 arch/x86/include/asm/cpufeature.h | 16 +-
2322 arch/x86/include/asm/crypto/camellia.h | 30 +-
2323 arch/x86/include/asm/crypto/glue_helper.h | 10 +-
2324 arch/x86/include/asm/crypto/serpent-avx.h | 18 +-
2325 arch/x86/include/asm/crypto/serpent-sse2.h | 8 +-
2326 arch/x86/include/asm/crypto/twofish.h | 10 +-
2327 arch/x86/include/asm/desc.h | 78 +-
2328 arch/x86/include/asm/desc_defs.h | 6 +
2329 arch/x86/include/asm/div64.h | 2 +-
2330 arch/x86/include/asm/dma.h | 2 +
2331 arch/x86/include/asm/elf.h | 33 +-
2332 arch/x86/include/asm/emergency-restart.h | 2 +-
2333 arch/x86/include/asm/fpu/internal.h | 38 +-
2334 arch/x86/include/asm/fpu/types.h | 5 +-
2335 arch/x86/include/asm/futex.h | 14 +-
2336 arch/x86/include/asm/hw_irq.h | 4 +-
2337 arch/x86/include/asm/hypervisor.h | 2 +-
2338 arch/x86/include/asm/i8259.h | 2 +-
2339 arch/x86/include/asm/io.h | 22 +-
2340 arch/x86/include/asm/irqflags.h | 5 +
2341 arch/x86/include/asm/kprobes.h | 9 +-
2342 arch/x86/include/asm/kvm_emulate.h | 7 +-
2343 arch/x86/include/asm/local.h | 106 +-
2344 arch/x86/include/asm/mman.h | 15 +
2345 arch/x86/include/asm/mmu.h | 14 +-
2346 arch/x86/include/asm/mmu_context.h | 133 +-
2347 arch/x86/include/asm/module.h | 23 +-
2348 arch/x86/include/asm/nmi.h | 19 +-
2349 arch/x86/include/asm/page.h | 1 +
2350 arch/x86/include/asm/page_32.h | 12 +-
2351 arch/x86/include/asm/page_64.h | 14 +-
2352 arch/x86/include/asm/paravirt.h | 46 +-
2353 arch/x86/include/asm/paravirt_types.h | 13 +-
2354 arch/x86/include/asm/pgalloc.h | 23 +
2355 arch/x86/include/asm/pgtable-2level.h | 2 +
2356 arch/x86/include/asm/pgtable-3level.h | 7 +
2357 arch/x86/include/asm/pgtable.h | 126 +-
2358 arch/x86/include/asm/pgtable_32.h | 14 +-
2359 arch/x86/include/asm/pgtable_32_types.h | 24 +-
2360 arch/x86/include/asm/pgtable_64.h | 23 +-
2361 arch/x86/include/asm/pgtable_64_types.h | 5 +
2362 arch/x86/include/asm/pgtable_types.h | 27 +-
2363 arch/x86/include/asm/pmem.h | 2 +-
2364 arch/x86/include/asm/preempt.h | 2 +-
2365 arch/x86/include/asm/processor.h | 57 +-
2366 arch/x86/include/asm/ptrace.h | 15 +-
2367 arch/x86/include/asm/realmode.h | 4 +-
2368 arch/x86/include/asm/reboot.h | 10 +-
2369 arch/x86/include/asm/rmwcc.h | 84 +-
2370 arch/x86/include/asm/rwsem.h | 60 +-
2371 arch/x86/include/asm/segment.h | 27 +-
2372 arch/x86/include/asm/smap.h | 43 +
2373 arch/x86/include/asm/smp.h | 14 +-
2374 arch/x86/include/asm/stackprotector.h | 4 +-
2375 arch/x86/include/asm/stacktrace.h | 34 +-
2376 arch/x86/include/asm/switch_to.h | 4 +-
2377 arch/x86/include/asm/sys_ia32.h | 6 +-
2378 arch/x86/include/asm/thread_info.h | 27 +-
2379 arch/x86/include/asm/tlbflush.h | 77 +-
2380 arch/x86/include/asm/traps.h | 4 +-
2381 arch/x86/include/asm/uaccess.h | 210 +-
2382 arch/x86/include/asm/uaccess_32.h | 28 +-
2383 arch/x86/include/asm/uaccess_64.h | 169 +-
2384 arch/x86/include/asm/word-at-a-time.h | 2 +-
2385 arch/x86/include/asm/x86_init.h | 10 +-
2386 arch/x86/include/asm/xen/page.h | 2 +-
2387 arch/x86/include/uapi/asm/e820.h | 2 +-
2388 arch/x86/kernel/Makefile | 2 +-
2389 arch/x86/kernel/acpi/boot.c | 4 +-
2390 arch/x86/kernel/acpi/sleep.c | 4 +
2391 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
2392 arch/x86/kernel/alternative.c | 124 +-
2393 arch/x86/kernel/apic/apic.c | 4 +-
2394 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
2395 arch/x86/kernel/apic/apic_noop.c | 2 +-
2396 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
2397 arch/x86/kernel/apic/io_apic.c | 10 +-
2398 arch/x86/kernel/apic/msi.c | 2 +-
2399 arch/x86/kernel/apic/probe_32.c | 4 +-
2400 arch/x86/kernel/apic/vector.c | 2 +
2401 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
2402 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
2403 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
2404 arch/x86/kernel/apm_32.c | 21 +-
2405 arch/x86/kernel/asm-offsets.c | 20 +
2406 arch/x86/kernel/asm-offsets_64.c | 1 +
2407 arch/x86/kernel/cpu/Makefile | 4 -
2408 arch/x86/kernel/cpu/amd.c | 2 +-
2409 arch/x86/kernel/cpu/bugs_64.c | 2 +
2410 arch/x86/kernel/cpu/common.c | 202 +-
2411 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
2412 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
2413 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
2414 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
2415 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
2416 arch/x86/kernel/cpu/mshyperv.c | 2 +-
2417 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2418 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
2419 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
2420 arch/x86/kernel/cpu/perf_event.c | 10 +-
2421 arch/x86/kernel/cpu/perf_event.h | 2 +-
2422 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 8 +-
2423 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
2424 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
2425 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
2426 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
2427 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
2428 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
2429 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 8 +-
2430 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 6 +-
2431 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 14 +-
2432 arch/x86/kernel/cpu/vmware.c | 2 +-
2433 arch/x86/kernel/crash_dump_64.c | 2 +-
2434 arch/x86/kernel/doublefault.c | 8 +-
2435 arch/x86/kernel/dumpstack.c | 24 +-
2436 arch/x86/kernel/dumpstack_32.c | 25 +-
2437 arch/x86/kernel/dumpstack_64.c | 72 +-
2438 arch/x86/kernel/e820.c | 4 +-
2439 arch/x86/kernel/early_printk.c | 1 +
2440 arch/x86/kernel/espfix_64.c | 44 +-
2441 arch/x86/kernel/fpu/core.c | 24 +-
2442 arch/x86/kernel/fpu/init.c | 49 +-
2443 arch/x86/kernel/fpu/regset.c | 22 +-
2444 arch/x86/kernel/fpu/signal.c | 20 +-
2445 arch/x86/kernel/fpu/xstate.c | 6 +-
2446 arch/x86/kernel/ftrace.c | 18 +-
2447 arch/x86/kernel/head64.c | 14 +-
2448 arch/x86/kernel/head_32.S | 237 +-
2449 arch/x86/kernel/head_64.S | 173 +-
2450 arch/x86/kernel/i386_ksyms_32.c | 12 +
2451 arch/x86/kernel/i8259.c | 10 +-
2452 arch/x86/kernel/io_delay.c | 2 +-
2453 arch/x86/kernel/ioport.c | 2 +-
2454 arch/x86/kernel/irq.c | 8 +-
2455 arch/x86/kernel/irq_32.c | 45 +-
2456 arch/x86/kernel/jump_label.c | 10 +-
2457 arch/x86/kernel/kgdb.c | 21 +-
2458 arch/x86/kernel/kprobes/core.c | 28 +-
2459 arch/x86/kernel/kprobes/opt.c | 16 +-
2460 arch/x86/kernel/ksysfs.c | 2 +-
2461 arch/x86/kernel/kvm.c | 2 +-
2462 arch/x86/kernel/kvmclock.c | 20 +-
2463 arch/x86/kernel/ldt.c | 25 +
2464 arch/x86/kernel/livepatch.c | 9 +-
2465 arch/x86/kernel/machine_kexec_32.c | 6 +-
2466 arch/x86/kernel/mcount_64.S | 21 +-
2467 arch/x86/kernel/module.c | 78 +-
2468 arch/x86/kernel/msr.c | 2 +-
2469 arch/x86/kernel/nmi.c | 34 +-
2470 arch/x86/kernel/nmi_selftest.c | 4 +-
2471 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
2472 arch/x86/kernel/paravirt.c | 43 +-
2473 arch/x86/kernel/paravirt_patch_64.c | 8 +
2474 arch/x86/kernel/pci-calgary_64.c | 2 +-
2475 arch/x86/kernel/pci-iommu_table.c | 2 +-
2476 arch/x86/kernel/pci-swiotlb.c | 2 +-
2477 arch/x86/kernel/process.c | 80 +-
2478 arch/x86/kernel/process_32.c | 29 +-
2479 arch/x86/kernel/process_64.c | 14 +-
2480 arch/x86/kernel/ptrace.c | 20 +-
2481 arch/x86/kernel/pvclock.c | 8 +-
2482 arch/x86/kernel/reboot.c | 44 +-
2483 arch/x86/kernel/reboot_fixups_32.c | 2 +-
2484 arch/x86/kernel/relocate_kernel_64.S | 3 +-
2485 arch/x86/kernel/setup.c | 29 +-
2486 arch/x86/kernel/setup_percpu.c | 29 +-
2487 arch/x86/kernel/signal.c | 17 +-
2488 arch/x86/kernel/smp.c | 2 +-
2489 arch/x86/kernel/smpboot.c | 29 +-
2490 arch/x86/kernel/step.c | 6 +-
2491 arch/x86/kernel/sys_i386_32.c | 184 +
2492 arch/x86/kernel/sys_x86_64.c | 28 +-
2493 arch/x86/kernel/tboot.c | 22 +-
2494 arch/x86/kernel/time.c | 8 +-
2495 arch/x86/kernel/tls.c | 7 +-
2496 arch/x86/kernel/tracepoint.c | 4 +-
2497 arch/x86/kernel/traps.c | 64 +-
2498 arch/x86/kernel/tsc.c | 2 +-
2499 arch/x86/kernel/uprobes.c | 4 +-
2500 arch/x86/kernel/vm86_32.c | 6 +-
2501 arch/x86/kernel/vmlinux.lds.S | 153 +-
2502 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
2503 arch/x86/kernel/x86_init.c | 6 +-
2504 arch/x86/kvm/cpuid.c | 21 +-
2505 arch/x86/kvm/emulate.c | 20 +-
2506 arch/x86/kvm/i8259.c | 10 +-
2507 arch/x86/kvm/ioapic.c | 2 +
2508 arch/x86/kvm/lapic.c | 2 +-
2509 arch/x86/kvm/paging_tmpl.h | 2 +-
2510 arch/x86/kvm/svm.c | 10 +-
2511 arch/x86/kvm/vmx.c | 60 +-
2512 arch/x86/kvm/x86.c | 44 +-
2513 arch/x86/lguest/boot.c | 3 +-
2514 arch/x86/lib/atomic64_386_32.S | 164 +
2515 arch/x86/lib/atomic64_cx8_32.S | 98 +-
2516 arch/x86/lib/checksum_32.S | 99 +-
2517 arch/x86/lib/clear_page_64.S | 3 +
2518 arch/x86/lib/cmpxchg16b_emu.S | 3 +
2519 arch/x86/lib/copy_page_64.S | 14 +-
2520 arch/x86/lib/copy_user_64.S | 66 +-
2521 arch/x86/lib/csum-copy_64.S | 14 +-
2522 arch/x86/lib/csum-wrappers_64.c | 8 +-
2523 arch/x86/lib/getuser.S | 74 +-
2524 arch/x86/lib/insn.c | 8 +-
2525 arch/x86/lib/iomap_copy_64.S | 2 +
2526 arch/x86/lib/memcpy_64.S | 6 +
2527 arch/x86/lib/memmove_64.S | 3 +-
2528 arch/x86/lib/memset_64.S | 3 +
2529 arch/x86/lib/mmx_32.c | 243 +-
2530 arch/x86/lib/msr-reg.S | 2 +
2531 arch/x86/lib/putuser.S | 87 +-
2532 arch/x86/lib/rwsem.S | 6 +-
2533 arch/x86/lib/usercopy_32.c | 359 +-
2534 arch/x86/lib/usercopy_64.c | 22 +-
2535 arch/x86/math-emu/fpu_aux.c | 2 +-
2536 arch/x86/math-emu/fpu_entry.c | 4 +-
2537 arch/x86/math-emu/fpu_system.h | 2 +-
2538 arch/x86/mm/Makefile | 4 +
2539 arch/x86/mm/extable.c | 26 +-
2540 arch/x86/mm/fault.c | 570 +-
2541 arch/x86/mm/gup.c | 6 +-
2542 arch/x86/mm/highmem_32.c | 6 +
2543 arch/x86/mm/hugetlbpage.c | 24 +-
2544 arch/x86/mm/init.c | 111 +-
2545 arch/x86/mm/init_32.c | 111 +-
2546 arch/x86/mm/init_64.c | 46 +-
2547 arch/x86/mm/iomap_32.c | 4 +
2548 arch/x86/mm/ioremap.c | 52 +-
2549 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
2550 arch/x86/mm/mmap.c | 40 +-
2551 arch/x86/mm/mmio-mod.c | 10 +-
2552 arch/x86/mm/mpx.c | 6 +-
2553 arch/x86/mm/numa.c | 2 +-
2554 arch/x86/mm/pageattr.c | 42 +-
2555 arch/x86/mm/pat.c | 12 +-
2556 arch/x86/mm/pat_rbtree.c | 2 +-
2557 arch/x86/mm/pf_in.c | 10 +-
2558 arch/x86/mm/pgtable.c | 209 +-
2559 arch/x86/mm/pgtable_32.c | 3 +
2560 arch/x86/mm/setup_nx.c | 7 +
2561 arch/x86/mm/tlb.c | 4 +
2562 arch/x86/mm/uderef_64.c | 37 +
2563 arch/x86/net/bpf_jit.S | 11 +
2564 arch/x86/net/bpf_jit_comp.c | 13 +-
2565 arch/x86/oprofile/backtrace.c | 6 +-
2566 arch/x86/oprofile/nmi_int.c | 10 +-
2567 arch/x86/oprofile/op_model_amd.c | 8 +-
2568 arch/x86/oprofile/op_model_ppro.c | 7 +-
2569 arch/x86/oprofile/op_x86_model.h | 2 +-
2570 arch/x86/pci/intel_mid_pci.c | 2 +-
2571 arch/x86/pci/irq.c | 8 +-
2572 arch/x86/pci/pcbios.c | 112 +-
2573 arch/x86/pci/vmd.c | 4 +-
2574 arch/x86/platform/efi/efi_32.c | 24 +
2575 arch/x86/platform/efi/efi_64.c | 26 +-
2576 arch/x86/platform/efi/efi_stub_32.S | 64 +-
2577 arch/x86/platform/efi/efi_stub_64.S | 2 +
2578 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
2579 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
2580 arch/x86/platform/intel-mid/mfld.c | 4 +-
2581 arch/x86/platform/intel-mid/mrfl.c | 2 +-
2582 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
2583 arch/x86/platform/olpc/olpc_dt.c | 2 +-
2584 arch/x86/power/cpu.c | 11 +-
2585 arch/x86/realmode/init.c | 10 +-
2586 arch/x86/realmode/rm/Makefile | 3 +
2587 arch/x86/realmode/rm/header.S | 4 +-
2588 arch/x86/realmode/rm/reboot.S | 4 +
2589 arch/x86/realmode/rm/trampoline_32.S | 12 +-
2590 arch/x86/realmode/rm/trampoline_64.S | 3 +-
2591 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
2592 arch/x86/tools/Makefile | 2 +-
2593 arch/x86/tools/relocs.c | 97 +-
2594 arch/x86/um/mem_32.c | 2 +-
2595 arch/x86/um/tls_32.c | 2 +-
2596 arch/x86/xen/enlighten.c | 52 +-
2597 arch/x86/xen/mmu.c | 19 +-
2598 arch/x86/xen/smp.c | 16 +-
2599 arch/x86/xen/xen-asm_32.S | 2 +-
2600 arch/x86/xen/xen-head.S | 11 +
2601 arch/x86/xen/xen-ops.h | 2 -
2602 block/bio.c | 4 +-
2603 block/blk-cgroup.c | 18 +-
2604 block/blk-map.c | 2 +-
2605 block/blk-softirq.c | 2 +-
2606 block/bsg.c | 12 +-
2607 block/cfq-iosched.c | 4 +-
2608 block/compat_ioctl.c | 4 +-
2609 block/genhd.c | 9 +-
2610 block/partitions/efi.c | 8 +-
2611 block/scsi_ioctl.c | 29 +-
2612 crypto/cast6_generic.c | 6 +-
2613 crypto/cryptd.c | 4 +-
2614 crypto/crypto_user.c | 2 +-
2615 crypto/pcrypt.c | 2 +-
2616 crypto/salsa20_generic.c | 16 +-
2617 crypto/serpent_generic.c | 6 +-
2618 crypto/zlib.c | 12 +-
2619 drivers/acpi/ac.c | 2 +-
2620 drivers/acpi/acpi_video.c | 2 +-
2621 drivers/acpi/apei/apei-internal.h | 2 +-
2622 drivers/acpi/apei/ghes.c | 10 +-
2623 drivers/acpi/battery.c | 2 +-
2624 drivers/acpi/bgrt.c | 6 +-
2625 drivers/acpi/blacklist.c | 4 +-
2626 drivers/acpi/bus.c | 4 +-
2627 drivers/acpi/device_pm.c | 4 +-
2628 drivers/acpi/ec.c | 6 +-
2629 drivers/acpi/pci_slot.c | 2 +-
2630 drivers/acpi/processor_idle.c | 2 +-
2631 drivers/acpi/processor_pdc.c | 2 +-
2632 drivers/acpi/sleep.c | 2 +-
2633 drivers/acpi/sysfs.c | 14 +-
2634 drivers/acpi/thermal.c | 2 +-
2635 drivers/acpi/video_detect.c | 7 +-
2636 drivers/android/binder.c | 2 +-
2637 drivers/ata/libata-core.c | 12 +-
2638 drivers/ata/libata-scsi.c | 2 +-
2639 drivers/ata/libata.h | 2 +-
2640 drivers/ata/pata_arasan_cf.c | 4 +-
2641 drivers/atm/adummy.c | 2 +-
2642 drivers/atm/ambassador.c | 8 +-
2643 drivers/atm/atmtcp.c | 14 +-
2644 drivers/atm/eni.c | 10 +-
2645 drivers/atm/firestream.c | 8 +-
2646 drivers/atm/fore200e.c | 14 +-
2647 drivers/atm/he.c | 18 +-
2648 drivers/atm/horizon.c | 4 +-
2649 drivers/atm/idt77252.c | 36 +-
2650 drivers/atm/iphase.c | 34 +-
2651 drivers/atm/lanai.c | 12 +-
2652 drivers/atm/nicstar.c | 46 +-
2653 drivers/atm/solos-pci.c | 4 +-
2654 drivers/atm/suni.c | 4 +-
2655 drivers/atm/uPD98402.c | 16 +-
2656 drivers/atm/zatm.c | 6 +-
2657 drivers/base/bus.c | 4 +-
2658 drivers/base/devres.c | 4 +-
2659 drivers/base/devtmpfs.c | 8 +-
2660 drivers/base/node.c | 2 +-
2661 drivers/base/platform-msi.c | 20 +-
2662 drivers/base/power/domain.c | 6 +-
2663 drivers/base/power/runtime.c | 61 +-
2664 drivers/base/power/sysfs.c | 2 +-
2665 drivers/base/power/wakeup.c | 8 +-
2666 drivers/base/regmap/regmap-debugfs.c | 4 +-
2667 drivers/base/regmap/regmap.c | 4 +-
2668 drivers/base/syscore.c | 4 +-
2669 drivers/block/cciss.c | 28 +-
2670 drivers/block/cciss.h | 2 +-
2671 drivers/block/cpqarray.c | 28 +-
2672 drivers/block/cpqarray.h | 2 +-
2673 drivers/block/drbd/drbd_bitmap.c | 2 +-
2674 drivers/block/drbd/drbd_int.h | 8 +-
2675 drivers/block/drbd/drbd_main.c | 12 +-
2676 drivers/block/drbd/drbd_nl.c | 16 +-
2677 drivers/block/drbd/drbd_receiver.c | 38 +-
2678 drivers/block/drbd/drbd_state.c | 12 +-
2679 drivers/block/drbd/drbd_state.h | 2 +-
2680 drivers/block/drbd/drbd_state_change.h | 8 +-
2681 drivers/block/drbd/drbd_worker.c | 14 +-
2682 drivers/block/floppy.c | 8 +-
2683 drivers/block/pktcdvd.c | 4 +-
2684 drivers/block/rbd.c | 2 +-
2685 drivers/bluetooth/btwilink.c | 2 +-
2686 drivers/bus/arm-cci.c | 12 +-
2687 drivers/cdrom/cdrom.c | 11 +-
2688 drivers/cdrom/gdrom.c | 1 -
2689 drivers/char/agp/compat_ioctl.c | 2 +-
2690 drivers/char/agp/frontend.c | 4 +-
2691 drivers/char/agp/intel-gtt.c | 4 +-
2692 drivers/char/hpet.c | 2 +-
2693 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
2694 drivers/char/ipmi/ipmi_poweroff.c | 2 +-
2695 drivers/char/ipmi/ipmi_si_intf.c | 12 +-
2696 drivers/char/ipmi/ipmi_ssif.c | 12 +-
2697 drivers/char/mem.c | 47 +-
2698 drivers/char/nvram.c | 2 +-
2699 drivers/char/pcmcia/synclink_cs.c | 16 +-
2700 drivers/char/random.c | 12 +-
2701 drivers/char/sonypi.c | 11 +-
2702 drivers/char/tpm/tpm_acpi.c | 3 +-
2703 drivers/char/tpm/tpm_eventlog.c | 5 +-
2704 drivers/char/virtio_console.c | 6 +-
2705 drivers/clk/clk-composite.c | 2 +-
2706 drivers/clk/samsung/clk.h | 2 +-
2707 drivers/clk/socfpga/clk-gate.c | 9 +-
2708 drivers/clk/socfpga/clk-pll.c | 9 +-
2709 drivers/clk/ti/clk.c | 8 +-
2710 drivers/cpufreq/acpi-cpufreq.c | 17 +-
2711 drivers/cpufreq/cpufreq-dt.c | 4 +-
2712 drivers/cpufreq/cpufreq.c | 27 +-
2713 drivers/cpufreq/cpufreq_governor.c | 2 +-
2714 drivers/cpufreq/cpufreq_governor.h | 10 +-
2715 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
2716 drivers/cpufreq/intel_pstate.c | 54 +-
2717 drivers/cpufreq/p4-clockmod.c | 12 +-
2718 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
2719 drivers/cpufreq/speedstep-centrino.c | 7 +-
2720 drivers/cpuidle/driver.c | 2 +-
2721 drivers/cpuidle/dt_idle_states.c | 2 +-
2722 drivers/cpuidle/governor.c | 2 +-
2723 drivers/cpuidle/governors/ladder.c | 13 +-
2724 drivers/cpuidle/sysfs.c | 2 +-
2725 drivers/crypto/hifn_795x.c | 4 +-
2726 drivers/crypto/qat/qat_common/adf_aer.c | 2 +-
2727 drivers/crypto/qat/qat_common/adf_sriov.c | 4 +-
2728 drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +-
2729 drivers/devfreq/devfreq.c | 4 +-
2730 drivers/dma/sh/shdma-base.c | 4 +-
2731 drivers/dma/sh/shdmac.c | 2 +-
2732 drivers/edac/edac_device.c | 4 +-
2733 drivers/edac/edac_device_sysfs.c | 2 +-
2734 drivers/edac/edac_mc_sysfs.c | 4 +-
2735 drivers/edac/edac_module.c | 2 +-
2736 drivers/edac/edac_pci.c | 4 +-
2737 drivers/edac/edac_pci_sysfs.c | 22 +-
2738 drivers/edac/mce_amd.h | 2 +-
2739 drivers/firewire/core-card.c | 6 +-
2740 drivers/firewire/core-cdev.c | 4 +-
2741 drivers/firewire/core-device.c | 2 +-
2742 drivers/firewire/core-iso.c | 2 +-
2743 drivers/firewire/core-transaction.c | 1 +
2744 drivers/firewire/core.h | 1 +
2745 drivers/firmware/dmi-id.c | 9 +-
2746 drivers/firmware/dmi_scan.c | 12 +-
2747 drivers/firmware/efi/cper.c | 8 +-
2748 drivers/firmware/efi/efi.c | 12 +-
2749 drivers/firmware/efi/efivars.c | 2 +-
2750 drivers/firmware/efi/runtime-map.c | 2 +-
2751 drivers/firmware/google/gsmi.c | 2 +-
2752 drivers/firmware/google/memconsole.c | 7 +-
2753 drivers/firmware/memmap.c | 2 +-
2754 drivers/firmware/psci.c | 2 +-
2755 drivers/gpio/gpio-davinci.c | 6 +-
2756 drivers/gpio/gpio-em.c | 2 +-
2757 drivers/gpio/gpio-ich.c | 2 +-
2758 drivers/gpio/gpio-omap.c | 4 +-
2759 drivers/gpio/gpio-rcar.c | 2 +-
2760 drivers/gpio/gpio-vr41xx.c | 2 +-
2761 drivers/gpio/gpiolib.c | 12 +-
2762 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +-
2763 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 2 +-
2764 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 8 +-
2765 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
2766 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
2767 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
2768 drivers/gpu/drm/amd/amdgpu/fiji_smc.c | 4 +-
2769 drivers/gpu/drm/amd/amdgpu/iceland_smc.c | 4 +-
2770 drivers/gpu/drm/amd/amdgpu/tonga_smc.c | 4 +-
2771 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
2772 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
2773 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
2774 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
2775 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
2776 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
2777 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
2778 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
2779 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
2780 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
2781 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
2782 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
2783 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
2784 drivers/gpu/drm/armada/armada_drv.c | 3 +-
2785 drivers/gpu/drm/ast/ast_mode.c | 2 +-
2786 drivers/gpu/drm/bochs/bochs_kms.c | 2 +-
2787 drivers/gpu/drm/drm_atomic.c | 7 +-
2788 drivers/gpu/drm/drm_crtc.c | 10 +-
2789 drivers/gpu/drm/drm_drv.c | 2 +-
2790 drivers/gpu/drm/drm_fops.c | 12 +-
2791 drivers/gpu/drm/drm_global.c | 14 +-
2792 drivers/gpu/drm/drm_info.c | 13 +-
2793 drivers/gpu/drm/drm_ioc32.c | 13 +-
2794 drivers/gpu/drm/drm_ioctl.c | 2 +-
2795 drivers/gpu/drm/drm_irq.c | 7 +-
2796 drivers/gpu/drm/drm_pci.c | 9 +-
2797 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
2798 drivers/gpu/drm/exynos/exynos_drm_g2d.c | 7 +-
2799 drivers/gpu/drm/gma500/cdv_intel_crt.c | 2 +-
2800 drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +-
2801 drivers/gpu/drm/gma500/cdv_intel_hdmi.c | 2 +-
2802 drivers/gpu/drm/gma500/cdv_intel_lvds.c | 2 +-
2803 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 8 +-
2804 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
2805 drivers/gpu/drm/gma500/psb_drv.c | 1 -
2806 drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
2807 drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
2808 drivers/gpu/drm/gma500/psb_intel_sdvo.c | 2 +-
2809 drivers/gpu/drm/i2c/tda998x_drv.c | 2 +-
2810 drivers/gpu/drm/i810/i810_dma.c | 2 +-
2811 drivers/gpu/drm/i810/i810_drv.c | 6 +-
2812 drivers/gpu/drm/i810/i810_drv.h | 6 +-
2813 drivers/gpu/drm/i915/dvo.h | 2 +-
2814 drivers/gpu/drm/i915/i915_dma.c | 4 +-
2815 drivers/gpu/drm/i915/i915_drv.c | 7 +-
2816 drivers/gpu/drm/i915/i915_drv.h | 2 +-
2817 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
2818 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
2819 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
2820 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
2821 drivers/gpu/drm/i915/i915_irq.c | 88 +-
2822 drivers/gpu/drm/i915/intel_display.c | 26 +-
2823 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
2824 drivers/gpu/drm/mga/mga_drv.c | 5 +-
2825 drivers/gpu/drm/mga/mga_drv.h | 6 +-
2826 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
2827 drivers/gpu/drm/mga/mga_irq.c | 8 +-
2828 drivers/gpu/drm/mga/mga_state.c | 2 +-
2829 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 +-
2830 drivers/gpu/drm/nouveau/nouveau_acpi.c | 2 +-
2831 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
2832 drivers/gpu/drm/nouveau/nouveau_connector.c | 2 +-
2833 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
2834 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
2835 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
2836 drivers/gpu/drm/nouveau/nouveau_usif.c | 7 +-
2837 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
2838 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 7 +-
2839 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 7 +-
2840 drivers/gpu/drm/omapdrm/Makefile | 2 +-
2841 drivers/gpu/drm/omapdrm/dss/display.c | 8 +-
2842 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
2843 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
2844 drivers/gpu/drm/qxl/qxl_display.c | 2 +-
2845 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
2846 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
2847 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
2848 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
2849 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
2850 drivers/gpu/drm/r128/r128_cce.c | 2 +-
2851 drivers/gpu/drm/r128/r128_drv.c | 4 +-
2852 drivers/gpu/drm/r128/r128_drv.h | 6 +-
2853 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
2854 drivers/gpu/drm/r128/r128_irq.c | 4 +-
2855 drivers/gpu/drm/r128/r128_state.c | 6 +-
2856 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
2857 drivers/gpu/drm/radeon/radeon_atpx_handler.c | 2 +-
2858 drivers/gpu/drm/radeon/radeon_connectors.c | 10 +-
2859 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
2860 drivers/gpu/drm/radeon/radeon_drv.c | 11 +-
2861 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
2862 drivers/gpu/drm/radeon/radeon_kms.c | 8 +-
2863 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
2864 drivers/gpu/drm/savage/savage_bci.c | 2 +-
2865 drivers/gpu/drm/savage/savage_drv.c | 5 +-
2866 drivers/gpu/drm/savage/savage_drv.h | 2 +-
2867 drivers/gpu/drm/sis/sis_drv.c | 5 +-
2868 drivers/gpu/drm/sis/sis_drv.h | 2 +-
2869 drivers/gpu/drm/sis/sis_mm.c | 2 +-
2870 drivers/gpu/drm/tegra/dc.c | 2 +-
2871 drivers/gpu/drm/tegra/dsi.c | 2 +-
2872 drivers/gpu/drm/tegra/hdmi.c | 2 +-
2873 drivers/gpu/drm/tegra/sor.c | 7 +-
2874 drivers/gpu/drm/tilcdc/Makefile | 6 +-
2875 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
2876 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
2877 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
2878 drivers/gpu/drm/udl/udl_connector.c | 2 +-
2879 drivers/gpu/drm/udl/udl_fb.c | 1 -
2880 drivers/gpu/drm/vc4/vc4_drv.c | 8 +-
2881 drivers/gpu/drm/via/via_dma.c | 2 +-
2882 drivers/gpu/drm/via/via_drv.c | 5 +-
2883 drivers/gpu/drm/via/via_drv.h | 6 +-
2884 drivers/gpu/drm/via/via_irq.c | 18 +-
2885 drivers/gpu/drm/virtio/virtgpu_display.c | 2 +-
2886 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
2887 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 7 +-
2888 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
2889 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
2890 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
2891 drivers/gpu/vga/vga_switcheroo.c | 4 +-
2892 drivers/hid/hid-core.c | 4 +-
2893 drivers/hid/hid-magicmouse.c | 2 +-
2894 drivers/hid/hid-sensor-custom.c | 2 +-
2895 drivers/hv/channel.c | 6 +-
2896 drivers/hv/hv.c | 4 +-
2897 drivers/hv/hv_balloon.c | 18 +-
2898 drivers/hv/hyperv_vmbus.h | 2 +-
2899 drivers/hwmon/acpi_power_meter.c | 6 +-
2900 drivers/hwmon/applesmc.c | 2 +-
2901 drivers/hwmon/asus_atk0110.c | 10 +-
2902 drivers/hwmon/coretemp.c | 2 +-
2903 drivers/hwmon/dell-smm-hwmon.c | 2 +-
2904 drivers/hwmon/ibmaem.c | 2 +-
2905 drivers/hwmon/iio_hwmon.c | 2 +-
2906 drivers/hwmon/nct6683.c | 6 +-
2907 drivers/hwmon/nct6775.c | 6 +-
2908 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
2909 drivers/hwmon/sht15.c | 12 +-
2910 drivers/hwmon/via-cputemp.c | 2 +-
2911 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
2912 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
2913 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
2914 drivers/i2c/i2c-dev.c | 2 +-
2915 drivers/ide/ide-cd.c | 2 +-
2916 drivers/ide/ide-disk.c | 2 +-
2917 drivers/ide/ide.c | 4 +-
2918 drivers/idle/intel_idle.c | 6 +-
2919 drivers/iio/industrialio-core.c | 2 +-
2920 drivers/iio/magnetometer/ak8975.c | 2 +-
2921 drivers/infiniband/core/cm.c | 46 +-
2922 drivers/infiniband/core/fmr_pool.c | 20 +-
2923 drivers/infiniband/core/netlink.c | 5 +-
2924 drivers/infiniband/core/ucm.c | 4 +-
2925 drivers/infiniband/core/uverbs_cmd.c | 3 +
2926 drivers/infiniband/hw/cxgb4/device.c | 6 +-
2927 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
2928 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
2929 drivers/infiniband/hw/mlx4/mad.c | 2 +-
2930 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
2931 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
2932 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
2933 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
2934 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
2935 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
2936 drivers/infiniband/hw/nes/nes.c | 4 +-
2937 drivers/infiniband/hw/nes/nes.h | 40 +-
2938 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
2939 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
2940 drivers/infiniband/hw/nes/nes_nic.c | 42 +-
2941 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
2942 drivers/infiniband/hw/qib/qib.h | 1 +
2943 drivers/infiniband/hw/qib/qib_iba7322.c | 4 +-
2944 drivers/infiniband/hw/qib/qib_pcie.c | 2 +-
2945 drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
2946 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
2947 drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
2948 drivers/input/evdev.c | 2 +-
2949 drivers/input/gameport/gameport.c | 4 +-
2950 drivers/input/input.c | 4 +-
2951 drivers/input/joystick/sidewinder.c | 1 +
2952 drivers/input/misc/ims-pcu.c | 4 +-
2953 drivers/input/mouse/psmouse.h | 2 +-
2954 drivers/input/mousedev.c | 2 +-
2955 drivers/input/serio/serio.c | 4 +-
2956 drivers/input/serio/serio_raw.c | 4 +-
2957 drivers/input/touchscreen/htcpen.c | 2 +-
2958 drivers/iommu/arm-smmu-v3.c | 2 +-
2959 drivers/iommu/arm-smmu.c | 42 +-
2960 drivers/iommu/io-pgtable-arm.c | 98 +-
2961 drivers/iommu/io-pgtable.c | 11 +-
2962 drivers/iommu/io-pgtable.h | 21 +-
2963 drivers/iommu/iommu.c | 2 +-
2964 drivers/iommu/ipmmu-vmsa.c | 13 +-
2965 drivers/iommu/irq_remapping.c | 2 +-
2966 drivers/irqchip/irq-gic.c | 2 +-
2967 drivers/irqchip/irq-i8259.c | 2 +-
2968 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
2969 drivers/irqchip/irq-ts4800.c | 2 +-
2970 drivers/isdn/capi/capi.c | 10 +-
2971 drivers/isdn/gigaset/interface.c | 8 +-
2972 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
2973 drivers/isdn/hardware/avm/b1.c | 4 +-
2974 drivers/isdn/hardware/eicon/capifunc.c | 6 +-
2975 drivers/isdn/hardware/eicon/dadapter.c | 18 +-
2976 drivers/isdn/hardware/eicon/diddfunc.c | 7 +-
2977 drivers/isdn/hardware/eicon/divasfunc.c | 9 +-
2978 drivers/isdn/hardware/eicon/divasync.h | 2 +-
2979 drivers/isdn/hardware/eicon/idifunc.c | 9 +-
2980 drivers/isdn/hardware/eicon/mntfunc.c | 13 +-
2981 drivers/isdn/hardware/mISDN/avmfritz.c | 2 +-
2982 drivers/isdn/hardware/mISDN/hfcmulti.c | 7 +-
2983 drivers/isdn/hardware/mISDN/hfcpci.c | 16 +-
2984 drivers/isdn/hardware/mISDN/mISDNinfineon.c | 7 +-
2985 drivers/isdn/hardware/mISDN/mISDNipac.c | 5 +-
2986 drivers/isdn/hardware/mISDN/netjet.c | 2 +-
2987 drivers/isdn/hardware/mISDN/speedfax.c | 7 +-
2988 drivers/isdn/hardware/mISDN/w6692.c | 7 +-
2989 drivers/isdn/hisax/amd7930_fn.c | 5 +-
2990 drivers/isdn/hisax/arcofi.c | 5 +-
2991 drivers/isdn/hisax/diva.c | 7 +-
2992 drivers/isdn/hisax/elsa.c | 9 +-
2993 drivers/isdn/hisax/fsm.c | 5 +-
2994 drivers/isdn/hisax/hfc4s8s_l1.c | 14 +-
2995 drivers/isdn/hisax/hfc_pci.c | 10 +-
2996 drivers/isdn/hisax/hfc_sx.c | 10 +-
2997 drivers/isdn/hisax/hfc_usb.c | 12 +-
2998 drivers/isdn/hisax/icc.c | 5 +-
2999 drivers/isdn/hisax/ipacx.c | 7 +-
3000 drivers/isdn/hisax/isac.c | 5 +-
3001 drivers/isdn/hisax/isar.c | 5 +-
3002 drivers/isdn/hisax/isdnl3.c | 5 +-
3003 drivers/isdn/hisax/w6692.c | 5 +-
3004 drivers/isdn/i4l/isdn_common.c | 2 +
3005 drivers/isdn/i4l/isdn_tty.c | 22 +-
3006 drivers/isdn/icn/icn.c | 2 +-
3007 drivers/isdn/mISDN/dsp.h | 4 +-
3008 drivers/isdn/mISDN/dsp_cmx.c | 4 +-
3009 drivers/isdn/mISDN/dsp_core.c | 4 +-
3010 drivers/isdn/mISDN/dsp_tones.c | 4 +-
3011 drivers/isdn/mISDN/fsm.c | 5 +-
3012 drivers/isdn/mISDN/l1oip_core.c | 8 +-
3013 drivers/lguest/core.c | 9 +-
3014 drivers/lguest/page_tables.c | 2 +-
3015 drivers/lguest/x86/core.c | 12 +-
3016 drivers/lguest/x86/switcher_32.S | 27 +-
3017 drivers/lightnvm/rrpc.c | 4 +-
3018 drivers/lightnvm/rrpc.h | 2 +-
3019 drivers/md/bcache/alloc.c | 2 +-
3020 drivers/md/bcache/bcache.h | 10 +-
3021 drivers/md/bcache/btree.c | 2 +-
3022 drivers/md/bcache/closure.h | 2 +-
3023 drivers/md/bcache/io.c | 10 +-
3024 drivers/md/bcache/journal.c | 2 +-
3025 drivers/md/bcache/stats.c | 26 +-
3026 drivers/md/bcache/stats.h | 16 +-
3027 drivers/md/bcache/super.c | 2 +-
3028 drivers/md/bcache/sysfs.c | 20 +-
3029 drivers/md/bitmap.c | 2 +-
3030 drivers/md/dm-cache-target.c | 116 +-
3031 drivers/md/dm-ioctl.c | 2 +-
3032 drivers/md/dm-raid.c | 2 +-
3033 drivers/md/dm-raid1.c | 18 +-
3034 drivers/md/dm-stats.c | 6 +-
3035 drivers/md/dm-stripe.c | 10 +-
3036 drivers/md/dm-table.c | 2 +-
3037 drivers/md/dm-thin-metadata.c | 4 +-
3038 drivers/md/dm.c | 28 +-
3039 drivers/md/md.c | 41 +-
3040 drivers/md/md.h | 8 +-
3041 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3042 drivers/md/persistent-data/dm-space-map.h | 1 +
3043 drivers/md/raid1.c | 8 +-
3044 drivers/md/raid10.c | 20 +-
3045 drivers/md/raid5.c | 26 +-
3046 drivers/media/dvb-core/dvb_net.c | 2 +-
3047 drivers/media/dvb-core/dvbdev.c | 2 +-
3048 drivers/media/dvb-frontends/af9033.h | 2 +-
3049 drivers/media/dvb-frontends/cx24116.c | 2 +-
3050 drivers/media/dvb-frontends/cx24117.c | 2 +-
3051 drivers/media/dvb-frontends/cx24120.c | 2 +-
3052 drivers/media/dvb-frontends/cx24123.c | 2 +-
3053 drivers/media/dvb-frontends/cxd2820r_core.c | 2 +-
3054 drivers/media/dvb-frontends/dib3000.h | 2 +-
3055 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3056 drivers/media/dvb-frontends/dib8000.h | 2 +-
3057 drivers/media/dvb-frontends/hd29l2.c | 2 +-
3058 drivers/media/dvb-frontends/lgdt3306a.c | 2 +-
3059 drivers/media/dvb-frontends/mt312.c | 6 +-
3060 drivers/media/dvb-frontends/s921.c | 2 +-
3061 drivers/media/pci/bt8xx/dst.c | 2 +-
3062 drivers/media/pci/cx88/cx88-video.c | 6 +-
3063 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
3064 drivers/media/pci/pt1/va1j5jf8007s.c | 2 +-
3065 drivers/media/pci/pt1/va1j5jf8007t.c | 2 +-
3066 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3067 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3068 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
3069 drivers/media/pci/tw68/tw68-core.c | 2 +-
3070 drivers/media/pci/zoran/zoran.h | 1 -
3071 drivers/media/pci/zoran/zoran_card.c | 4 +-
3072 drivers/media/pci/zoran/zoran_driver.c | 3 -
3073 drivers/media/platform/omap/omap_vout.c | 11 +-
3074 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3075 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3076 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3077 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3078 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
3079 drivers/media/platform/soc_camera/soc_camera.c | 2 +-
3080 drivers/media/radio/radio-cadet.c | 2 +
3081 drivers/media/radio/radio-maxiradio.c | 2 +-
3082 drivers/media/radio/radio-shark.c | 2 +-
3083 drivers/media/radio/radio-shark2.c | 2 +-
3084 drivers/media/radio/radio-si476x.c | 2 +-
3085 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
3086 drivers/media/usb/pvrusb2/pvrusb2-context.c | 8 +-
3087 drivers/media/usb/pvrusb2/pvrusb2-dvb.c | 7 +-
3088 drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 +-
3089 drivers/media/usb/pvrusb2/pvrusb2-std.c | 2 +-
3090 drivers/media/usb/pvrusb2/pvrusb2-v4l2.c | 6 +-
3091 drivers/media/usb/uvc/uvc_driver.c | 4 +-
3092 drivers/media/v4l2-core/v4l2-common.c | 2 +-
3093 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
3094 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3095 drivers/media/v4l2-core/v4l2-ioctl.c | 293 +-
3096 drivers/memory/omap-gpmc.c | 21 +-
3097 drivers/message/fusion/mptbase.c | 4 +-
3098 drivers/message/fusion/mptlan.c | 2 +-
3099 drivers/message/fusion/mptsas.c | 34 +-
3100 drivers/mfd/ab8500-debugfs.c | 2 +-
3101 drivers/mfd/kempld-core.c | 2 +-
3102 drivers/mfd/max8925-i2c.c | 2 +-
3103 drivers/mfd/tps65910.c | 2 +-
3104 drivers/mfd/twl4030-irq.c | 9 +-
3105 drivers/misc/c2port/core.c | 4 +-
3106 drivers/misc/kgdbts.c | 6 +-
3107 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3108 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
3109 drivers/misc/mic/scif/scif_api.c | 10 +-
3110 drivers/misc/mic/scif/scif_rb.c | 8 +-
3111 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3112 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3113 drivers/misc/sgi-gru/grutables.h | 158 +-
3114 drivers/misc/sgi-xp/xp.h | 2 +-
3115 drivers/misc/sgi-xp/xp_main.c | 57 +-
3116 drivers/misc/sgi-xp/xpc.h | 3 +-
3117 drivers/misc/sgi-xp/xpc_main.c | 2 +-
3118 drivers/misc/sgi-xp/xpnet.c | 2 +-
3119 drivers/misc/ti-st/st_kim.c | 32 +-
3120 drivers/mmc/card/mmc_test.c | 4 +-
3121 drivers/mmc/host/dw_mmc.h | 2 +-
3122 drivers/mmc/host/mmci.c | 4 +-
3123 drivers/mmc/host/omap_hsmmc.c | 4 +-
3124 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3125 drivers/mmc/host/sdhci-s3c.c | 8 +-
3126 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3127 drivers/mtd/devices/block2mtd.c | 2 +-
3128 drivers/mtd/devices/phram.c | 2 +-
3129 drivers/mtd/maps/gpio-addr-flash.c | 2 +-
3130 drivers/mtd/maps/latch-addr-flash.c | 2 +-
3131 drivers/mtd/maps/pci.c | 4 +-
3132 drivers/mtd/maps/pcmciamtd.c | 8 +-
3133 drivers/mtd/maps/sbc_gxx.c | 2 +-
3134 drivers/mtd/nand/cafe_nand.c | 18 +-
3135 drivers/mtd/nand/denali.c | 1 +
3136 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
3137 drivers/mtd/nftlmount.c | 1 +
3138 drivers/mtd/sm_ftl.c | 2 +-
3139 drivers/mtd/ubi/build.c | 2 +-
3140 drivers/net/bonding/bond_netlink.c | 2 +-
3141 drivers/net/caif/caif_hsi.c | 4 +-
3142 drivers/net/caif/caif_serial.c | 2 +-
3143 drivers/net/caif/caif_spi.c | 2 +-
3144 drivers/net/caif/caif_virtio.c | 2 +-
3145 drivers/net/can/Kconfig | 2 +-
3146 drivers/net/can/dev.c | 2 +-
3147 drivers/net/can/janz-ican3.c | 2 +-
3148 drivers/net/can/led.c | 2 +-
3149 drivers/net/can/sun4i_can.c | 2 +-
3150 drivers/net/can/vcan.c | 2 +-
3151 drivers/net/can/xilinx_can.c | 2 +-
3152 drivers/net/dummy.c | 2 +-
3153 drivers/net/ethernet/8390/ax88796.c | 4 +-
3154 drivers/net/ethernet/8390/axnet_cs.c | 4 +-
3155 drivers/net/ethernet/8390/ne2k-pci.c | 6 +-
3156 drivers/net/ethernet/8390/pcnet_cs.c | 4 +-
3157 drivers/net/ethernet/altera/altera_tse_main.c | 6 +-
3158 drivers/net/ethernet/amd/amd8111e.c | 5 +-
3159 drivers/net/ethernet/amd/pcnet32.c | 7 +-
3160 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
3161 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
3162 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
3163 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3164 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 66 +-
3165 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3166 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3167 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
3168 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
3169 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
3170 drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
3171 drivers/net/ethernet/arc/emac_main.c | 2 +-
3172 drivers/net/ethernet/atheros/alx/main.c | 2 +-
3173 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
3174 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
3175 drivers/net/ethernet/aurora/nb8800.c | 2 +-
3176 drivers/net/ethernet/broadcom/bnx2.c | 2 +-
3177 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3178 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 216 +-
3179 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 4 +-
3180 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
3181 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3182 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3183 drivers/net/ethernet/broadcom/tg3.c | 2 +-
3184 drivers/net/ethernet/broadcom/tg3.h | 1 +
3185 drivers/net/ethernet/brocade/bna/bfa_cs.h | 42 +-
3186 drivers/net/ethernet/brocade/bna/bfa_ioc.c | 10 +-
3187 drivers/net/ethernet/brocade/bna/bfa_ioc.h | 4 +-
3188 drivers/net/ethernet/brocade/bna/bfa_msgq.h | 8 +-
3189 drivers/net/ethernet/brocade/bna/bna_enet.c | 6 +-
3190 drivers/net/ethernet/brocade/bna/bna_tx_rx.c | 6 +-
3191 drivers/net/ethernet/brocade/bna/bna_types.h | 24 +-
3192 drivers/net/ethernet/brocade/bna/bnad.c | 11 +-
3193 drivers/net/ethernet/cadence/macb.c | 4 +-
3194 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3195 drivers/net/ethernet/cavium/liquidio/lio_main.c | 15 +-
3196 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
3197 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
3198 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
3199 drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 2 +-
3200 drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 2 +-
3201 drivers/net/ethernet/dec/tulip/de4x5.c | 13 +-
3202 drivers/net/ethernet/emulex/benet/be_main.c | 4 +-
3203 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3204 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3205 drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
3206 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +-
3207 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 6 +-
3208 drivers/net/ethernet/intel/e100.c | 2 +-
3209 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
3210 drivers/net/ethernet/intel/e1000e/netdev.c | 2 +-
3211 drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 2 +-
3212 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3213 drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
3214 drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
3215 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
3216 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
3217 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +-
3218 drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
3219 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
3220 drivers/net/ethernet/mellanox/mlx4/main.c | 2 +-
3221 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +-
3222 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
3223 drivers/net/ethernet/micrel/ks8851_mll.c | 2 +-
3224 drivers/net/ethernet/neterion/s2io.c | 2 +-
3225 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3226 drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
3227 .../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
3228 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
3229 .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
3230 .../net/ethernet/qlogic/netxen/netxen_nic_main.c | 2 +-
3231 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3232 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3233 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 +-
3234 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3235 drivers/net/ethernet/realtek/r8169.c | 8 +-
3236 drivers/net/ethernet/renesas/sh_eth.c | 2 +-
3237 drivers/net/ethernet/rocker/rocker.c | 4 +-
3238 drivers/net/ethernet/sfc/ptp.c | 2 +-
3239 drivers/net/ethernet/sfc/selftest.c | 20 +-
3240 drivers/net/ethernet/smsc/smsc911x.c | 2 +-
3241 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
3242 drivers/net/ethernet/synopsys/dwc_eth_qos.c | 2 +-
3243 drivers/net/ethernet/via/via-rhine.c | 2 +-
3244 drivers/net/ethernet/wiznet/w5100.c | 2 +-
3245 drivers/net/ethernet/wiznet/w5300.c | 2 +-
3246 drivers/net/geneve.c | 2 +-
3247 drivers/net/hyperv/hyperv_net.h | 2 +-
3248 drivers/net/hyperv/netvsc_drv.c | 2 +-
3249 drivers/net/hyperv/rndis_filter.c | 7 +-
3250 drivers/net/ifb.c | 2 +-
3251 drivers/net/ipvlan/ipvlan_core.c | 2 +-
3252 drivers/net/ipvlan/ipvlan_main.c | 6 +-
3253 drivers/net/irda/sh_irda.c | 2 +-
3254 drivers/net/irda/vlsi_ir.c | 18 +-
3255 drivers/net/irda/vlsi_ir.h | 14 +-
3256 drivers/net/macvlan.c | 20 +-
3257 drivers/net/macvtap.c | 10 +-
3258 drivers/net/nlmon.c | 2 +-
3259 drivers/net/phy/phy_device.c | 6 +-
3260 drivers/net/plip/plip.c | 2 +-
3261 drivers/net/ppp/ppp_generic.c | 4 +-
3262 drivers/net/ppp/pptp.c | 1 +
3263 drivers/net/rionet.c | 2 +-
3264 drivers/net/slip/slhc.c | 2 +-
3265 drivers/net/team/team.c | 4 +-
3266 drivers/net/tun.c | 7 +-
3267 drivers/net/usb/hso.c | 28 +-
3268 drivers/net/usb/ipheth.c | 2 +-
3269 drivers/net/usb/r8152.c | 2 +-
3270 drivers/net/usb/sierra_net.c | 4 +-
3271 drivers/net/virtio_net.c | 2 +-
3272 drivers/net/vrf.c | 4 +-
3273 drivers/net/vxlan.c | 4 +-
3274 drivers/net/wimax/i2400m/rx.c | 2 +-
3275 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3276 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3277 drivers/net/wireless/ath/ath6kl/core.h | 2 +-
3278 drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
3279 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3280 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3281 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3282 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3283 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3284 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3285 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3286 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3287 drivers/net/wireless/ath/wil6210/pcie_bus.c | 2 +-
3288 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3289 drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
3290 drivers/net/wireless/atmel/atmel.c | 183 +-
3291 drivers/net/wireless/broadcom/b43/phy_lp.c | 2 +-
3292 drivers/net/wireless/broadcom/b43legacy/main.c | 5 +-
3293 .../broadcom/brcm80211/brcmsmac/phy/phy_cmn.c | 3 +-
3294 .../broadcom/brcm80211/brcmsmac/phy_shim.c | 5 +-
3295 .../broadcom/brcm80211/brcmsmac/phy_shim.h | 2 +-
3296 drivers/net/wireless/cisco/airo.c | 201 +-
3297 drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
3298 drivers/net/wireless/intel/ipw2x00/ipw2200.c | 6 +-
3299 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 11 +-
3300 drivers/net/wireless/intel/iwlegacy/4965-mac.c | 7 +-
3301 drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 34 +-
3302 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 4 +-
3303 drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 2 +-
3304 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +-
3305 .../net/wireless/intersil/hostap/hostap_ioctl.c | 134 +-
3306 drivers/net/wireless/intersil/orinoco/wext.c | 131 +-
3307 drivers/net/wireless/intersil/prism54/isl_ioctl.c | 292 +-
3308 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3309 drivers/net/wireless/marvell/mwifiex/main.c | 2 +-
3310 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 4 +-
3311 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 4 +-
3312 drivers/net/wireless/ralink/rt2x00/rt2500usb.c | 4 +-
3313 drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 6 +-
3314 drivers/net/wireless/ralink/rt2x00/rt2x00.h | 2 +-
3315 drivers/net/wireless/ralink/rt2x00/rt2x00queue.c | 4 +-
3316 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 4 +-
3317 drivers/net/wireless/ralink/rt2x00/rt73usb.c | 4 +-
3318 drivers/net/wireless/realtek/rtlwifi/base.c | 14 +-
3319 drivers/net/wireless/realtek/rtlwifi/base.h | 4 +-
3320 drivers/net/wireless/realtek/rtlwifi/pci.c | 15 +-
3321 drivers/net/wireless/realtek/rtlwifi/ps.c | 6 +-
3322 drivers/net/wireless/realtek/rtlwifi/ps.h | 6 +-
3323 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3324 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3325 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3326 drivers/net/wireless/zydas/zd1201.c | 192 +-
3327 drivers/nvme/host/pci.c | 2 +-
3328 drivers/of/fdt.c | 4 +-
3329 drivers/oprofile/buffer_sync.c | 8 +-
3330 drivers/oprofile/event_buffer.c | 2 +-
3331 drivers/oprofile/oprof.c | 2 +-
3332 drivers/oprofile/oprofile_stats.c | 10 +-
3333 drivers/oprofile/oprofile_stats.h | 10 +-
3334 drivers/oprofile/oprofilefs.c | 2 +-
3335 drivers/oprofile/timer_int.c | 2 +-
3336 drivers/parport/procfs.c | 4 +-
3337 drivers/pci/host/pci-host-generic.c | 2 +-
3338 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3339 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3340 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3341 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3342 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3343 drivers/pci/hotplug/pciehp_core.c | 2 +-
3344 drivers/pci/msi.c | 22 +-
3345 drivers/pci/pci-sysfs.c | 6 +-
3346 drivers/pci/pci.h | 4 +-
3347 drivers/pci/pcie/aspm.c | 10 +-
3348 drivers/pci/pcie/portdrv_pci.c | 2 +-
3349 drivers/pci/probe.c | 2 +-
3350 drivers/pci/setup-bus.c | 2 +-
3351 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3352 drivers/pinctrl/pinctrl-at91.c | 5 +-
3353 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3354 drivers/platform/x86/alienware-wmi.c | 4 +-
3355 drivers/platform/x86/apple-gmux.c | 2 +-
3356 drivers/platform/x86/compal-laptop.c | 2 +-
3357 drivers/platform/x86/hdaps.c | 2 +-
3358 drivers/platform/x86/ibm_rtl.c | 2 +-
3359 drivers/platform/x86/intel_oaktrail.c | 2 +-
3360 drivers/platform/x86/msi-laptop.c | 16 +-
3361 drivers/platform/x86/msi-wmi.c | 2 +-
3362 drivers/platform/x86/samsung-laptop.c | 2 +-
3363 drivers/platform/x86/samsung-q10.c | 2 +-
3364 drivers/platform/x86/sony-laptop.c | 14 +-
3365 drivers/platform/x86/thinkpad_acpi.c | 11 +-
3366 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3367 drivers/pnp/pnpbios/core.c | 2 +-
3368 drivers/power/pda_power.c | 7 +-
3369 drivers/power/power_supply.h | 4 +-
3370 drivers/power/power_supply_core.c | 7 +-
3371 drivers/power/power_supply_sysfs.c | 6 +-
3372 drivers/power/reset/at91-reset.c | 5 +-
3373 drivers/powercap/powercap_sys.c | 136 +-
3374 drivers/ptp/ptp_private.h | 2 +-
3375 drivers/ptp/ptp_sysfs.c | 2 +-
3376 drivers/regulator/core.c | 4 +-
3377 drivers/regulator/max8660.c | 6 +-
3378 drivers/regulator/max8973-regulator.c | 16 +-
3379 drivers/regulator/mc13892-regulator.c | 8 +-
3380 drivers/remoteproc/remoteproc_core.c | 26 +-
3381 drivers/rtc/rtc-armada38x.c | 7 +-
3382 drivers/rtc/rtc-cmos.c | 4 +-
3383 drivers/rtc/rtc-ds1307.c | 2 +-
3384 drivers/rtc/rtc-m48t59.c | 4 +-
3385 drivers/rtc/rtc-rv8803.c | 15 +-
3386 drivers/rtc/rtc-rx8010.c | 8 +-
3387 drivers/rtc/rtc-test.c | 6 +-
3388 drivers/scsi/aacraid/aachba.c | 11 +-
3389 drivers/scsi/aic7xxx/aic79xx.h | 2 +-
3390 drivers/scsi/aic7xxx/aic79xx_core.c | 11 +-
3391 drivers/scsi/be2iscsi/be_main.c | 2 +-
3392 drivers/scsi/bfa/bfa.h | 4 +-
3393 drivers/scsi/bfa/bfa_core.c | 4 +-
3394 drivers/scsi/bfa/bfa_cs.h | 124 +-
3395 drivers/scsi/bfa/bfa_fcpim.h | 14 +-
3396 drivers/scsi/bfa/bfa_fcs.h | 34 +-
3397 drivers/scsi/bfa/bfa_fcs_fcpim.c | 6 +-
3398 drivers/scsi/bfa/bfa_fcs_lport.c | 4 +-
3399 drivers/scsi/bfa/bfa_fcs_rport.c | 4 +-
3400 drivers/scsi/bfa/bfa_ioc.c | 8 +-
3401 drivers/scsi/bfa/bfa_ioc.h | 16 +-
3402 drivers/scsi/bfa/bfa_svc.c | 12 +-
3403 drivers/scsi/bfa/bfa_svc.h | 20 +-
3404 drivers/scsi/bfa/bfad.c | 12 +-
3405 drivers/scsi/bfa/bfad_bsg.c | 8 +-
3406 drivers/scsi/bfa/bfad_drv.h | 5 +-
3407 drivers/scsi/csiostor/csio_defs.h | 19 +-
3408 drivers/scsi/csiostor/csio_hw.c | 67 +-
3409 drivers/scsi/csiostor/csio_init.c | 2 +-
3410 drivers/scsi/csiostor/csio_lnode.c | 32 +-
3411 drivers/scsi/csiostor/csio_rnode.c | 28 +-
3412 drivers/scsi/csiostor/csio_scsi.c | 37 +-
3413 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3414 drivers/scsi/fcoe/fcoe_transport.c | 16 +-
3415 drivers/scsi/hosts.c | 4 +-
3416 drivers/scsi/hpsa.c | 38 +-
3417 drivers/scsi/hpsa.h | 2 +-
3418 drivers/scsi/hptiop.c | 2 -
3419 drivers/scsi/hptiop.h | 1 -
3420 drivers/scsi/ipr.c | 32 +-
3421 drivers/scsi/ipr.h | 2 +-
3422 drivers/scsi/libfc/fc_exch.c | 50 +-
3423 drivers/scsi/libsas/sas_ata.c | 2 +-
3424 drivers/scsi/lpfc/lpfc.h | 8 +-
3425 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3426 drivers/scsi/lpfc/lpfc_init.c | 8 +-
3427 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3428 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3429 drivers/scsi/mpt3sas/mpt3sas_base.c | 2 +-
3430 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
3431 drivers/scsi/pmcraid.c | 46 +-
3432 drivers/scsi/pmcraid.h | 8 +-
3433 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3434 drivers/scsi/qla2xxx/qla_gbl.h | 8 +-
3435 drivers/scsi/qla2xxx/qla_os.c | 15 +-
3436 drivers/scsi/qla2xxx/qla_target.c | 16 +-
3437 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3438 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3439 drivers/scsi/qla4xxx/ql4_os.c | 15 +-
3440 drivers/scsi/scsi.c | 2 +-
3441 drivers/scsi/scsi_lib.c | 8 +-
3442 drivers/scsi/scsi_sysfs.c | 2 +-
3443 drivers/scsi/scsi_transport_fc.c | 8 +-
3444 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3445 drivers/scsi/scsi_transport_spi.c | 2 +-
3446 drivers/scsi/scsi_transport_srp.c | 8 +-
3447 drivers/scsi/sd.c | 6 +-
3448 drivers/scsi/sg.c | 2 +-
3449 drivers/scsi/sr.c | 21 +-
3450 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3451 drivers/spi/spi.c | 2 +-
3452 drivers/staging/android/timed_output.c | 6 +-
3453 drivers/staging/comedi/comedi_fops.c | 8 +-
3454 drivers/staging/fbtft/fbtft-core.c | 2 +-
3455 drivers/staging/fbtft/fbtft.h | 2 +-
3456 drivers/staging/gdm724x/gdm_lte.c | 2 +-
3457 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3458 drivers/staging/gdm72xx/gdm_wimax.c | 2 +-
3459 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3460 drivers/staging/iio/adc/ad7280a.c | 4 +-
3461 .../staging/lustre/lnet/klnds/socklnd/socklnd.h | 6 +-
3462 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3463 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3464 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3465 .../lustre/lustre/include/lustre/lustre_idl.h | 92 +-
3466 drivers/staging/lustre/lustre/include/lustre_dlm.h | 8 +-
3467 drivers/staging/lustre/lustre/include/lustre_net.h | 2 +-
3468 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3469 drivers/staging/lustre/lustre/ldlm/ldlm_request.c | 5 +-
3470 drivers/staging/lustre/lustre/llite/dir.c | 2 +-
3471 drivers/staging/lustre/lustre/lov/lov_io.c | 62 +-
3472 drivers/staging/lustre/lustre/obdclass/llog_swab.c | 24 +-
3473 drivers/staging/lustre/lustre/osc/osc_request.c | 24 +-
3474 drivers/staging/lustre/lustre/ptlrpc/layout.c | 7 +-
3475 .../staging/lustre/lustre/ptlrpc/pack_generic.c | 151 +-
3476 drivers/staging/octeon/ethernet-rx.c | 24 +-
3477 drivers/staging/octeon/ethernet.c | 8 +-
3478 drivers/staging/panel/panel.c | 4 +-
3479 drivers/staging/rdma/hfi1/pcie.c | 2 +-
3480 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 18 +-
3481 drivers/staging/rtl8188eu/hal/rtl8188eu_recv.c | 2 +-
3482 drivers/staging/rtl8188eu/hal/rtl8188eu_xmit.c | 2 +-
3483 drivers/staging/rtl8188eu/include/Hal8188EPhyCfg.h | 8 -
3484 drivers/staging/rtl8188eu/include/hal_intf.h | 5 +-
3485 drivers/staging/rtl8188eu/include/odm_precomp.h | 2 +-
3486 drivers/staging/rtl8188eu/include/recv_osdep.h | 1 -
3487 drivers/staging/rtl8188eu/include/rtl8188e_recv.h | 2 +-
3488 drivers/staging/rtl8188eu/include/rtl8188e_xmit.h | 2 +-
3489 drivers/staging/rtl8188eu/include/rtw_cmd.h | 1 -
3490 drivers/staging/rtl8188eu/include/rtw_eeprom.h | 6 -
3491 drivers/staging/rtl8188eu/include/rtw_ioctl.h | 9 -
3492 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 12 +-
3493 drivers/staging/rtl8188eu/include/xmit_osdep.h | 2 +-
3494 drivers/staging/rtl8188eu/os_dep/usb_ops_linux.c | 4 +-
3495 drivers/staging/rtl8188eu/os_dep/xmit_linux.c | 2 +-
3496 drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 49 +-
3497 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 4 +-
3498 drivers/staging/rtl8192e/rtl8192e/rtl_dm.c | 10 +-
3499 drivers/staging/rtl8192e/rtl8192e/rtl_dm.h | 4 +-
3500 drivers/staging/rtl8192e/rtl8192e/rtl_ps.c | 6 +-
3501 drivers/staging/rtl8192e/rtl8192e/rtl_ps.h | 3 +-
3502 drivers/staging/rtl8192e/rtl8192e/rtl_wx.c | 48 +-
3503 drivers/staging/rtl8192e/rtllib.h | 4 +-
3504 drivers/staging/rtl8192e/rtllib_softmac.c | 32 +-
3505 drivers/staging/rtl8192e/rtllib_softmac_wx.c | 2 +-
3506 drivers/staging/rtl8192e/rtllib_tx.c | 2 +-
3507 drivers/staging/rtl8192u/ieee80211/ieee80211.h | 2 +-
3508 .../staging/rtl8192u/ieee80211/ieee80211_softmac.c | 6 +-
3509 drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c | 2 +-
3510 drivers/staging/rtl8192u/r8192U_core.c | 7 +-
3511 drivers/staging/rtl8712/rtl8712_recv.c | 6 +-
3512 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3513 drivers/staging/rtl8712/rtl871x_ioctl.h | 14 -
3514 drivers/staging/rtl8712/rtl871x_xmit.c | 2 +-
3515 drivers/staging/rtl8712/rtl871x_xmit.h | 2 +-
3516 drivers/staging/rtl8712/usb_ops_linux.c | 2 +-
3517 drivers/staging/rtl8712/xmit_linux.c | 2 +-
3518 drivers/staging/rtl8712/xmit_osdep.h | 2 +-
3519 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 +-
3520 drivers/staging/rtl8723au/core/rtw_xmit.c | 2 +-
3521 drivers/staging/rtl8723au/hal/rtl8723au_recv.c | 2 +-
3522 drivers/staging/rtl8723au/hal/usb_ops_linux.c | 4 +-
3523 drivers/staging/rtl8723au/include/Hal8723APhyCfg.h | 8 -
3524 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
3525 drivers/staging/rtl8723au/include/hal_intf.h | 2 -
3526 drivers/staging/rtl8723au/include/recv_osdep.h | 1 -
3527 drivers/staging/rtl8723au/include/rtw_ap.h | 2 -
3528 drivers/staging/rtl8723au/include/rtw_cmd.h | 1 -
3529 drivers/staging/rtl8723au/include/rtw_eeprom.h | 7 -
3530 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 14 +-
3531 drivers/staging/rtl8723au/include/usb_ops.h | 8 +-
3532 drivers/staging/rtl8723au/include/xmit_osdep.h | 2 +-
3533 drivers/staging/rtl8723au/os_dep/ioctl_cfg80211.c | 2 +-
3534 drivers/staging/rtl8723au/os_dep/xmit_linux.c | 2 +-
3535 drivers/staging/sm750fb/sm750.c | 14 +-
3536 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
3537 drivers/staging/unisys/visornic/visornic_main.c | 2 +-
3538 drivers/staging/wilc1000/linux_wlan.c | 2 +-
3539 drivers/staging/wilc1000/wilc_spi.c | 2 -
3540 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
3541 drivers/staging/wlan-ng/p80211netdev.c | 2 +-
3542 drivers/target/sbp/sbp_target.c | 4 +-
3543 drivers/thermal/cpu_cooling.c | 9 +-
3544 drivers/thermal/devfreq_cooling.c | 19 +-
3545 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
3546 drivers/thermal/of-thermal.c | 17 +-
3547 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
3548 drivers/tty/cyclades.c | 6 +-
3549 drivers/tty/hvc/hvc_console.c | 14 +-
3550 drivers/tty/hvc/hvcs.c | 21 +-
3551 drivers/tty/hvc/hvsi.c | 22 +-
3552 drivers/tty/hvc/hvsi_lib.c | 4 +-
3553 drivers/tty/ipwireless/tty.c | 27 +-
3554 drivers/tty/moxa.c | 2 +-
3555 drivers/tty/n_gsm.c | 6 +-
3556 drivers/tty/n_tty.c | 28 +-
3557 drivers/tty/pty.c | 4 +-
3558 drivers/tty/rocket.c | 6 +-
3559 drivers/tty/serial/8250/8250_core.c | 10 +-
3560 drivers/tty/serial/8250/8250_pci.c | 2 +-
3561 drivers/tty/serial/ifx6x60.c | 2 +-
3562 drivers/tty/serial/ioc4_serial.c | 6 +-
3563 drivers/tty/serial/jsm/jsm_driver.c | 2 +-
3564 drivers/tty/serial/kgdb_nmi.c | 4 +-
3565 drivers/tty/serial/kgdboc.c | 34 +-
3566 drivers/tty/serial/msm_serial.c | 4 +-
3567 drivers/tty/serial/samsung.c | 9 +-
3568 drivers/tty/serial/serial_core.c | 8 +-
3569 drivers/tty/synclink.c | 34 +-
3570 drivers/tty/synclink_gt.c | 28 +-
3571 drivers/tty/synclinkmp.c | 34 +-
3572 drivers/tty/tty_io.c | 2 +-
3573 drivers/tty/tty_ldisc.c | 8 +-
3574 drivers/tty/tty_port.c | 22 +-
3575 drivers/uio/uio.c | 13 +-
3576 drivers/usb/atm/cxacru.c | 2 +-
3577 drivers/usb/atm/usbatm.c | 24 +-
3578 drivers/usb/class/cdc-acm.h | 2 +-
3579 drivers/usb/core/devices.c | 6 +-
3580 drivers/usb/core/devio.c | 12 +-
3581 drivers/usb/core/hcd.c | 4 +-
3582 drivers/usb/core/sysfs.c | 2 +-
3583 drivers/usb/core/usb.c | 2 +-
3584 drivers/usb/early/ehci-dbgp.c | 16 +-
3585 drivers/usb/gadget/function/f_phonet.c | 2 +-
3586 drivers/usb/gadget/function/u_serial.c | 22 +-
3587 drivers/usb/gadget/legacy/inode.c | 4 +-
3588 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3589 drivers/usb/host/ehci-hcd.c | 2 +-
3590 drivers/usb/host/ehci-hub.c | 4 +-
3591 drivers/usb/host/ehci-q.c | 4 +-
3592 drivers/usb/host/fotg210-hcd.c | 2 +-
3593 drivers/usb/host/hwa-hc.c | 2 +-
3594 drivers/usb/host/ohci-hcd.c | 2 +-
3595 drivers/usb/host/r8a66597.h | 2 +-
3596 drivers/usb/host/uhci-hcd.c | 2 +-
3597 drivers/usb/host/xhci-pci.c | 2 +-
3598 drivers/usb/host/xhci.c | 2 +-
3599 drivers/usb/misc/appledisplay.c | 4 +-
3600 drivers/usb/misc/sisusbvga/sisusb_con.c | 98 +-
3601 drivers/usb/serial/console.c | 8 +-
3602 drivers/usb/storage/transport.c | 2 +-
3603 drivers/usb/storage/usb.c | 2 +-
3604 drivers/usb/storage/usb.h | 2 +-
3605 drivers/usb/usbip/vhci.h | 2 +-
3606 drivers/usb/usbip/vhci_hcd.c | 6 +-
3607 drivers/usb/usbip/vhci_rx.c | 2 +-
3608 drivers/usb/wusbcore/wa-hc.h | 4 +-
3609 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3610 drivers/vfio/pci/vfio_pci.c | 2 +-
3611 drivers/vhost/vringh.c | 20 +-
3612 drivers/video/backlight/kb3886_bl.c | 2 +-
3613 drivers/video/console/dummycon.c | 96 +-
3614 drivers/video/console/fbcon.c | 2 +-
3615 drivers/video/console/vgacon.c | 23 +-
3616 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3617 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3618 drivers/video/fbdev/aty/mach64_ct.c | 5 +-
3619 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3620 drivers/video/fbdev/aty/mach64_gx.c | 17 +-
3621 drivers/video/fbdev/core/fb_defio.c | 6 +-
3622 drivers/video/fbdev/core/fbmem.c | 12 +-
3623 drivers/video/fbdev/hyperv_fb.c | 4 +-
3624 drivers/video/fbdev/i810/i810_accel.c | 1 +
3625 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
3626 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3627 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3628 drivers/video/fbdev/omap2/omapfb/dss/display.c | 8 +-
3629 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
3630 drivers/video/fbdev/sis/sis_main.h | 2 +-
3631 drivers/video/fbdev/smscufx.c | 4 +-
3632 drivers/video/fbdev/udlfb.c | 36 +-
3633 drivers/video/fbdev/uvesafb.c | 52 +-
3634 drivers/video/fbdev/vesafb.c | 58 +-
3635 drivers/video/fbdev/via/via_clock.h | 2 +-
3636 drivers/xen/events/events_base.c | 6 +-
3637 drivers/xen/xen-pciback/pci_stub.c | 2 +-
3638 fs/9p/vfs_addr.c | 2 +-
3639 fs/9p/vfs_inode_dotl.c | 4 +-
3640 fs/Kconfig.binfmt | 2 +-
3641 fs/afs/file.c | 8 +-
3642 fs/afs/inode.c | 4 +-
3643 fs/afs/internal.h | 4 +-
3644 fs/aio.c | 2 +-
3645 fs/autofs4/waitq.c | 2 +-
3646 fs/befs/endian.h | 6 +-
3647 fs/binfmt_aout.c | 23 +-
3648 fs/binfmt_elf.c | 670 +-
3649 fs/binfmt_elf_fdpic.c | 4 +-
3650 fs/block_dev.c | 2 +-
3651 fs/btrfs/ctree.c | 11 +-
3652 fs/btrfs/ctree.h | 4 +-
3653 fs/btrfs/delayed-inode.c | 6 +-
3654 fs/btrfs/delayed-inode.h | 4 +-
3655 fs/btrfs/delayed-ref.c | 4 +-
3656 fs/btrfs/disk-io.c | 4 +-
3657 fs/btrfs/extent_map.c | 8 +-
3658 fs/btrfs/file.c | 4 +-
3659 fs/btrfs/free-space-cache.h | 1 +
3660 fs/btrfs/raid56.c | 30 +-
3661 fs/btrfs/super.c | 2 +-
3662 fs/btrfs/sysfs.c | 2 +-
3663 fs/btrfs/tests/btrfs-tests.c | 2 +-
3664 fs/btrfs/tests/free-space-tests.c | 2 +-
3665 fs/btrfs/transaction.c | 2 +-
3666 fs/btrfs/tree-log.c | 8 +-
3667 fs/btrfs/tree-log.h | 2 +-
3668 fs/btrfs/volumes.c | 14 +-
3669 fs/btrfs/volumes.h | 22 +-
3670 fs/buffer.c | 2 +-
3671 fs/cachefiles/bind.c | 6 +-
3672 fs/cachefiles/daemon.c | 8 +-
3673 fs/cachefiles/internal.h | 12 +-
3674 fs/cachefiles/namei.c | 2 +-
3675 fs/cachefiles/proc.c | 12 +-
3676 fs/ceph/dir.c | 12 +-
3677 fs/ceph/super.c | 4 +-
3678 fs/cifs/cifs_debug.c | 12 +-
3679 fs/cifs/cifsfs.c | 8 +-
3680 fs/cifs/cifsglob.h | 54 +-
3681 fs/cifs/file.c | 14 +-
3682 fs/cifs/misc.c | 4 +-
3683 fs/cifs/smb1ops.c | 80 +-
3684 fs/cifs/smb2ops.c | 84 +-
3685 fs/cifs/smb2pdu.c | 3 +-
3686 fs/coda/cache.c | 10 +-
3687 fs/coda/dir.c | 5 +-
3688 fs/compat.c | 9 +-
3689 fs/compat_binfmt_elf.c | 2 +
3690 fs/compat_ioctl.c | 12 +-
3691 fs/configfs/dir.c | 10 +-
3692 fs/coredump.c | 18 +-
3693 fs/dcache.c | 64 +-
3694 fs/ecryptfs/inode.c | 2 +-
3695 fs/ecryptfs/miscdev.c | 2 +-
3696 fs/exec.c | 365 +-
3697 fs/exofs/inode.c | 7 +-
3698 fs/ext2/xattr.c | 5 +-
3699 fs/ext4/ext4.h | 20 +-
3700 fs/ext4/mballoc.c | 44 +-
3701 fs/ext4/resize.c | 16 +-
3702 fs/ext4/super.c | 2 +-
3703 fs/ext4/sysfs.c | 2 +-
3704 fs/ext4/xattr.c | 5 +-
3705 fs/fhandle.c | 5 +-
3706 fs/file.c | 18 +-
3707 fs/freevxfs/vxfs_inode.c | 8 +-
3708 fs/freevxfs/vxfs_inode.h | 4 +-
3709 fs/fs-writeback.c | 11 +-
3710 fs/fs_struct.c | 8 +-
3711 fs/fscache/cookie.c | 40 +-
3712 fs/fscache/internal.h | 202 +-
3713 fs/fscache/object.c | 26 +-
3714 fs/fscache/operation.c | 38 +-
3715 fs/fscache/page.c | 110 +-
3716 fs/fscache/stats.c | 348 +-
3717 fs/fuse/cuse.c | 10 +-
3718 fs/fuse/dev.c | 4 +-
3719 fs/fuse/file.c | 4 +-
3720 fs/fuse/inode.c | 4 +-
3721 fs/gfs2/aops.c | 2 +-
3722 fs/gfs2/file.c | 2 +-
3723 fs/gfs2/glock.c | 22 +-
3724 fs/gfs2/glops.c | 4 +-
3725 fs/gfs2/quota.c | 6 +-
3726 fs/hugetlbfs/inode.c | 13 +-
3727 fs/inode.c | 4 +-
3728 fs/jbd2/commit.c | 2 +-
3729 fs/jbd2/transaction.c | 4 +-
3730 fs/jffs2/erase.c | 3 +-
3731 fs/jffs2/file.c | 3 +-
3732 fs/jffs2/fs.c | 2 +-
3733 fs/jffs2/os-linux.h | 2 +-
3734 fs/jffs2/wbuf.c | 3 +-
3735 fs/jfs/super.c | 2 +-
3736 fs/kernfs/dir.c | 2 +-
3737 fs/kernfs/file.c | 20 +-
3738 fs/libfs.c | 10 +-
3739 fs/lockd/clnt4xdr.c | 46 +-
3740 fs/lockd/clntproc.c | 4 +-
3741 fs/lockd/clntxdr.c | 44 +-
3742 fs/lockd/mon.c | 24 +-
3743 fs/lockd/svc.c | 2 +-
3744 fs/lockd/svc4proc.c | 69 +-
3745 fs/lockd/svcproc.c | 75 +-
3746 fs/lockd/xdr.c | 44 +-
3747 fs/lockd/xdr4.c | 41 +-
3748 fs/logfs/dev_bdev.c | 13 +-
3749 fs/logfs/dev_mtd.c | 13 +-
3750 fs/logfs/dir.c | 4 +-
3751 fs/logfs/logfs.h | 5 +-
3752 fs/logfs/readwrite.c | 2 +-
3753 fs/logfs/segment.c | 2 +-
3754 fs/logfs/super.c | 39 -
3755 fs/namei.c | 16 +-
3756 fs/namespace.c | 16 +-
3757 fs/nfs/callback.h | 18 +-
3758 fs/nfs/callback_proc.c | 26 +-
3759 fs/nfs/callback_xdr.c | 73 +-
3760 fs/nfs/dir.c | 5 +-
3761 fs/nfs/inode.c | 6 +-
3762 fs/nfs/internal.h | 5 +-
3763 fs/nfs/mount_clnt.c | 26 +-
3764 fs/nfs/nfs2xdr.c | 101 +-
3765 fs/nfs/nfs3xdr.c | 201 +-
3766 fs/nfs/nfs42xdr.c | 60 +-
3767 fs/nfs/nfs4xdr.c | 507 +-
3768 fs/nfs/read.c | 2 +-
3769 fs/nfs/symlink.c | 6 +-
3770 fs/nfsd/current_stateid.h | 24 +-
3771 fs/nfsd/nfs2acl.c | 85 +-
3772 fs/nfsd/nfs3acl.c | 44 +-
3773 fs/nfsd/nfs3proc.c | 271 +-
3774 fs/nfsd/nfs3xdr.c | 171 +-
3775 fs/nfsd/nfs4callback.c | 31 +-
3776 fs/nfsd/nfs4proc.c | 320 +-
3777 fs/nfsd/nfs4state.c | 111 +-
3778 fs/nfsd/nfs4xdr.c | 564 +-
3779 fs/nfsd/nfscache.c | 11 +-
3780 fs/nfsd/nfsproc.c | 193 +-
3781 fs/nfsd/nfsxdr.c | 96 +-
3782 fs/nfsd/vfs.c | 6 +-
3783 fs/nfsd/xdr.h | 50 +-
3784 fs/nfsd/xdr3.h | 100 +-
3785 fs/nfsd/xdr4.h | 50 +-
3786 fs/nls/nls_base.c | 26 +-
3787 fs/nls/nls_cp932.c | 2 +-
3788 fs/nls/nls_cp936.c | 2 +-
3789 fs/nls/nls_cp949.c | 2 +-
3790 fs/nls/nls_cp950.c | 2 +-
3791 fs/nls/nls_euc-jp.c | 8 +-
3792 fs/nls/nls_koi8-ru.c | 8 +-
3793 fs/notify/fanotify/fanotify_user.c | 4 +-
3794 fs/notify/notification.c | 4 +-
3795 fs/ntfs/dir.c | 4 +-
3796 fs/ntfs/inode.c | 19 +-
3797 fs/ntfs/inode.h | 4 +-
3798 fs/ntfs/mft.c | 4 +-
3799 fs/ntfs/super.c | 8 +-
3800 fs/ocfs2/dlm/dlmcommon.h | 4 +-
3801 fs/ocfs2/dlm/dlmdebug.c | 10 +-
3802 fs/ocfs2/dlm/dlmdomain.c | 4 +-
3803 fs/ocfs2/dlm/dlmmaster.c | 4 +-
3804 fs/ocfs2/dlmfs/dlmfs.c | 4 +-
3805 fs/ocfs2/localalloc.c | 2 +-
3806 fs/ocfs2/ocfs2.h | 10 +-
3807 fs/ocfs2/suballoc.c | 12 +-
3808 fs/ocfs2/super.c | 20 +-
3809 fs/overlayfs/copy_up.c | 2 +-
3810 fs/pipe.c | 72 +-
3811 fs/posix_acl.c | 4 +-
3812 fs/proc/array.c | 20 +
3813 fs/proc/base.c | 7 +-
3814 fs/proc/kcore.c | 36 +-
3815 fs/proc/meminfo.c | 2 +-
3816 fs/proc/nommu.c | 2 +-
3817 fs/proc/proc_sysctl.c | 26 +-
3818 fs/proc/task_mmu.c | 39 +-
3819 fs/proc/task_nommu.c | 6 +-
3820 fs/proc/vmcore.c | 16 +-
3821 fs/qnx6/qnx6.h | 4 +-
3822 fs/quota/netlink.c | 4 +-
3823 fs/read_write.c | 34 +-
3824 fs/readdir.c | 3 +-
3825 fs/reiserfs/do_balan.c | 2 +-
3826 fs/reiserfs/procfs.c | 2 +-
3827 fs/reiserfs/reiserfs.h | 4 +-
3828 fs/select.c | 2 +-
3829 fs/seq_file.c | 4 +-
3830 fs/splice.c | 43 +-
3831 fs/squashfs/xattr.c | 10 +-
3832 fs/super.c | 3 +-
3833 fs/sysv/sysv.h | 2 +-
3834 fs/tracefs/inode.c | 8 +-
3835 fs/ubifs/find.c | 34 +-
3836 fs/ubifs/lprops.c | 5 +-
3837 fs/udf/misc.c | 2 +-
3838 fs/ufs/swab.h | 4 +-
3839 fs/userfaultfd.c | 2 +-
3840 fs/xattr.c | 21 +
3841 fs/xfs/libxfs/xfs_bmap.c | 2 +-
3842 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
3843 fs/xfs/xfs_dir2_readdir.c | 7 +-
3844 fs/xfs/xfs_ioctl.c | 2 +-
3845 fs/xfs/xfs_linux.h | 4 +-
3846 include/acpi/ghes.h | 2 +-
3847 include/asm-generic/4level-fixup.h | 2 +
3848 include/asm-generic/atomic-long.h | 176 +-
3849 include/asm-generic/atomic64.h | 12 +
3850 include/asm-generic/bitops/__fls.h | 2 +-
3851 include/asm-generic/bitops/fls.h | 2 +-
3852 include/asm-generic/bitops/fls64.h | 4 +-
3853 include/asm-generic/bug.h | 6 +-
3854 include/asm-generic/cache.h | 4 +-
3855 include/asm-generic/emergency-restart.h | 2 +-
3856 include/asm-generic/kmap_types.h | 4 +-
3857 include/asm-generic/local.h | 13 +
3858 include/asm-generic/pgtable-nopmd.h | 18 +-
3859 include/asm-generic/pgtable-nopud.h | 15 +-
3860 include/asm-generic/pgtable.h | 16 +
3861 include/asm-generic/sections.h | 1 +
3862 include/asm-generic/uaccess.h | 16 +
3863 include/asm-generic/vmlinux.lds.h | 15 +-
3864 include/crypto/algapi.h | 2 +-
3865 include/crypto/cast6.h | 4 +-
3866 include/crypto/serpent.h | 4 +-
3867 include/crypto/xts.h | 2 +-
3868 include/drm/drmP.h | 19 +-
3869 include/drm/drm_mm.h | 2 +-
3870 include/drm/drm_modeset_helper_vtables.h | 2 +-
3871 include/drm/i915_pciids.h | 2 +-
3872 include/drm/intel-gtt.h | 4 +-
3873 include/drm/ttm/ttm_memory.h | 2 +-
3874 include/drm/ttm/ttm_page_alloc.h | 1 +
3875 include/keys/asymmetric-subtype.h | 2 +-
3876 include/keys/encrypted-type.h | 2 +-
3877 include/keys/rxrpc-type.h | 2 +-
3878 include/keys/user-type.h | 2 +-
3879 include/linux/atmdev.h | 4 +-
3880 include/linux/atomic.h | 12 +-
3881 include/linux/audit.h | 2 +-
3882 include/linux/average.h | 2 +-
3883 include/linux/binfmts.h | 3 +-
3884 include/linux/bitmap.h | 2 +-
3885 include/linux/bitops.h | 8 +-
3886 include/linux/blk-cgroup.h | 24 +-
3887 include/linux/blkdev.h | 2 +-
3888 include/linux/blktrace_api.h | 2 +-
3889 include/linux/cache.h | 8 +
3890 include/linux/cdrom.h | 1 -
3891 include/linux/cgroup-defs.h | 2 +-
3892 include/linux/cleancache.h | 2 +-
3893 include/linux/clk-provider.h | 1 +
3894 include/linux/compat.h | 15 +-
3895 include/linux/compiler-gcc.h | 30 +-
3896 include/linux/compiler.h | 193 +-
3897 include/linux/configfs.h | 2 +-
3898 include/linux/cpufreq.h | 7 +-
3899 include/linux/cpuidle.h | 5 +-
3900 include/linux/cpumask.h | 14 +-
3901 include/linux/crypto.h | 4 +-
3902 include/linux/ctype.h | 2 +-
3903 include/linux/dcache.h | 4 +-
3904 include/linux/decompress/mm.h | 2 +-
3905 include/linux/devfreq.h | 2 +-
3906 include/linux/device.h | 7 +-
3907 include/linux/dma-mapping.h | 2 +-
3908 include/linux/efi.h | 1 +
3909 include/linux/elf.h | 2 +
3910 include/linux/err.h | 4 +-
3911 include/linux/extcon.h | 2 +-
3912 include/linux/fb.h | 3 +-
3913 include/linux/fdtable.h | 2 +-
3914 include/linux/firewire.h | 2 +-
3915 include/linux/fs.h | 5 +-
3916 include/linux/fs_struct.h | 2 +-
3917 include/linux/fscache-cache.h | 2 +-
3918 include/linux/fscache.h | 2 +-
3919 include/linux/fsnotify.h | 2 +-
3920 include/linux/genhd.h | 4 +-
3921 include/linux/genl_magic_func.h | 2 +-
3922 include/linux/genl_magic_struct.h | 4 +-
3923 include/linux/gfp.h | 14 +-
3924 include/linux/highmem.h | 12 +
3925 include/linux/hugetlb.h | 2 +-
3926 include/linux/hugetlb_cgroup.h | 11 +
3927 include/linux/hwmon-sysfs.h | 6 +-
3928 include/linux/i2c.h | 1 +
3929 include/linux/if_pppox.h | 2 +-
3930 include/linux/init.h | 12 +-
3931 include/linux/init_task.h | 7 +
3932 include/linux/interrupt.h | 6 +-
3933 include/linux/iommu.h | 2 +-
3934 include/linux/ioport.h | 2 +-
3935 include/linux/ipc.h | 2 +-
3936 include/linux/irq.h | 5 +-
3937 include/linux/irqdesc.h | 2 +-
3938 include/linux/irqdomain.h | 3 +
3939 include/linux/jbd2.h | 2 +-
3940 include/linux/jiffies.h | 16 +-
3941 include/linux/kallsyms.h | 18 +-
3942 include/linux/key-type.h | 2 +-
3943 include/linux/kgdb.h | 6 +-
3944 include/linux/kmemleak.h | 4 +-
3945 include/linux/kobject.h | 3 +-
3946 include/linux/kobject_ns.h | 2 +-
3947 include/linux/kref.h | 2 +-
3948 include/linux/libata.h | 2 +-
3949 include/linux/linkage.h | 12 +
3950 include/linux/list.h | 15 +
3951 include/linux/lockd/xdr.h | 34 +-
3952 include/linux/lockd/xdr4.h | 34 +-
3953 include/linux/lockref.h | 26 +-
3954 include/linux/math64.h | 10 +-
3955 include/linux/memcontrol.h | 2 +-
3956 include/linux/mempolicy.h | 7 +
3957 include/linux/mm.h | 97 +-
3958 include/linux/mm_types.h | 20 +
3959 include/linux/mmiotrace.h | 4 +-
3960 include/linux/mmzone.h | 2 +-
3961 include/linux/mod_devicetable.h | 4 +-
3962 include/linux/module.h | 58 +-
3963 include/linux/moduleloader.h | 16 +
3964 include/linux/moduleparam.h | 12 +-
3965 include/linux/net.h | 2 +-
3966 include/linux/netdevice.h | 7 +-
3967 include/linux/netfilter.h | 2 +-
3968 include/linux/netfilter/ipset/ip_set_comment.h | 3 +-
3969 include/linux/netfilter/nfnetlink.h | 2 +-
3970 include/linux/netlink.h | 12 +-
3971 include/linux/nls.h | 4 +-
3972 include/linux/notifier.h | 3 +-
3973 include/linux/oprofile.h | 4 +-
3974 include/linux/padata.h | 2 +-
3975 include/linux/pagemap.h | 4 +-
3976 include/linux/pci_hotplug.h | 3 +-
3977 include/linux/percpu.h | 2 +-
3978 include/linux/perf_event.h | 12 +-
3979 include/linux/pid.h | 4 +-
3980 include/linux/pipe_fs_i.h | 8 +-
3981 include/linux/pm.h | 1 +
3982 include/linux/pm_domain.h | 2 +-
3983 include/linux/pm_runtime.h | 2 +-
3984 include/linux/pnp.h | 2 +-
3985 include/linux/poison.h | 4 +-
3986 include/linux/power/smartreflex.h | 2 +-
3987 include/linux/ppp-comp.h | 2 +-
3988 include/linux/preempt.h | 21 +
3989 include/linux/printk.h | 2 +-
3990 include/linux/proc_ns.h | 2 +-
3991 include/linux/psci.h | 2 +-
3992 include/linux/quota.h | 2 +-
3993 include/linux/random.h | 19 +-
3994 include/linux/rculist.h | 16 +
3995 include/linux/rcupdate.h | 8 +
3996 include/linux/reboot.h | 14 +-
3997 include/linux/regset.h | 3 +-
3998 include/linux/relay.h | 2 +-
3999 include/linux/rio.h | 2 +-
4000 include/linux/rmap.h | 4 +-
4001 include/linux/sched.h | 76 +-
4002 include/linux/sched/sysctl.h | 1 +
4003 include/linux/scif.h | 2 +-
4004 include/linux/semaphore.h | 2 +-
4005 include/linux/seq_file.h | 1 +
4006 include/linux/seqlock.h | 10 +
4007 include/linux/signal.h | 2 +-
4008 include/linux/skbuff.h | 12 +-
4009 include/linux/slab.h | 47 +-
4010 include/linux/slab_def.h | 14 +-
4011 include/linux/slub_def.h | 2 +-
4012 include/linux/smp.h | 2 +
4013 include/linux/sock_diag.h | 2 +-
4014 include/linux/sonet.h | 2 +-
4015 include/linux/spinlock.h | 17 +-
4016 include/linux/srcu.h | 5 +-
4017 include/linux/sunrpc/addr.h | 8 +-
4018 include/linux/sunrpc/clnt.h | 2 +-
4019 include/linux/sunrpc/svc.h | 2 +-
4020 include/linux/sunrpc/svc_rdma.h | 18 +-
4021 include/linux/sunrpc/svcauth.h | 2 +-
4022 include/linux/swapops.h | 10 +-
4023 include/linux/swiotlb.h | 3 +-
4024 include/linux/syscalls.h | 34 +-
4025 include/linux/syscore_ops.h | 2 +-
4026 include/linux/sysctl.h | 3 +-
4027 include/linux/sysfs.h | 9 +-
4028 include/linux/sysrq.h | 3 +-
4029 include/linux/tcp.h | 14 +-
4030 include/linux/thread_info.h | 7 +
4031 include/linux/tty.h | 4 +-
4032 include/linux/tty_driver.h | 2 +-
4033 include/linux/tty_ldisc.h | 2 +-
4034 include/linux/types.h | 16 +
4035 include/linux/uaccess.h | 2 +-
4036 include/linux/uio_driver.h | 2 +-
4037 include/linux/unaligned/access_ok.h | 24 +-
4038 include/linux/usb.h | 12 +-
4039 include/linux/usb/hcd.h | 1 +
4040 include/linux/usb/renesas_usbhs.h | 2 +-
4041 include/linux/vermagic.h | 21 +-
4042 include/linux/vga_switcheroo.h | 8 +-
4043 include/linux/vmalloc.h | 7 +-
4044 include/linux/vmstat.h | 24 +-
4045 include/linux/writeback.h | 3 +-
4046 include/linux/xattr.h | 5 +-
4047 include/linux/zlib.h | 3 +-
4048 include/media/v4l2-dev.h | 2 +-
4049 include/media/v4l2-device.h | 2 +-
4050 include/net/9p/transport.h | 2 +-
4051 include/net/bluetooth/l2cap.h | 2 +-
4052 include/net/bonding.h | 2 +-
4053 include/net/caif/cfctrl.h | 6 +-
4054 include/net/cfg80211-wext.h | 20 +-
4055 include/net/cfg802154.h | 2 +-
4056 include/net/fib_rules.h | 3 +-
4057 include/net/flow.h | 2 +-
4058 include/net/genetlink.h | 2 +-
4059 include/net/gro_cells.h | 2 +-
4060 include/net/inet_connection_sock.h | 2 +-
4061 include/net/inet_sock.h | 2 +-
4062 include/net/inetpeer.h | 2 +-
4063 include/net/ip_fib.h | 2 +-
4064 include/net/ip_vs.h | 8 +-
4065 include/net/ipv6.h | 2 +-
4066 include/net/irda/ircomm_tty.h | 1 +
4067 include/net/irda/irias_object.h | 2 +-
4068 include/net/irda/irlmp.h | 1 +
4069 include/net/irda/irlmp_event.h | 6 +-
4070 include/net/irda/timer.h | 6 +-
4071 include/net/iucv/af_iucv.h | 2 +-
4072 include/net/llc_c_ac.h | 2 +-
4073 include/net/llc_c_ev.h | 4 +-
4074 include/net/llc_c_st.h | 2 +-
4075 include/net/llc_s_ac.h | 2 +-
4076 include/net/llc_s_st.h | 2 +-
4077 include/net/mac80211.h | 6 +-
4078 include/net/neighbour.h | 4 +-
4079 include/net/net_namespace.h | 18 +-
4080 include/net/netfilter/nf_conntrack.h | 2 +-
4081 include/net/netlink.h | 2 +-
4082 include/net/netns/conntrack.h | 6 +-
4083 include/net/netns/ipv4.h | 4 +-
4084 include/net/netns/ipv6.h | 4 +-
4085 include/net/netns/xfrm.h | 2 +-
4086 include/net/ping.h | 2 +-
4087 include/net/protocol.h | 4 +-
4088 include/net/rtnetlink.h | 2 +-
4089 include/net/sctp/checksum.h | 4 +-
4090 include/net/sctp/sm.h | 4 +-
4091 include/net/sctp/structs.h | 2 +-
4092 include/net/snmp.h | 10 +-
4093 include/net/sock.h | 12 +-
4094 include/net/tcp.h | 8 +-
4095 include/net/xfrm.h | 15 +-
4096 include/rdma/ib_cm.h | 8 +-
4097 include/rdma/iw_cm.h | 2 +-
4098 include/scsi/libfc.h | 3 +-
4099 include/scsi/scsi_device.h | 6 +-
4100 include/scsi/scsi_driver.h | 2 +-
4101 include/scsi/scsi_transport_fc.h | 3 +-
4102 include/scsi/sg.h | 2 +-
4103 include/sound/compress_driver.h | 2 +-
4104 include/sound/control.h | 4 +-
4105 include/sound/pcm.h | 2 +-
4106 include/sound/rawmidi.h | 3 +-
4107 include/sound/seq_kernel.h | 2 +-
4108 include/sound/soc.h | 4 +-
4109 include/trace/events/irq.h | 4 +-
4110 include/uapi/linux/a.out.h | 8 +
4111 include/uapi/linux/bcache.h | 5 +-
4112 include/uapi/linux/byteorder/little_endian.h | 28 +-
4113 include/uapi/linux/connector.h | 2 +-
4114 include/uapi/linux/elf.h | 28 +
4115 include/uapi/linux/screen_info.h | 2 +-
4116 include/uapi/linux/swab.h | 6 +-
4117 include/uapi/linux/xattr.h | 4 +
4118 include/video/udlfb.h | 8 +-
4119 include/video/uvesafb.h | 1 +
4120 init/Kconfig | 2 +-
4121 init/Makefile | 3 +
4122 init/do_mounts.c | 16 +-
4123 init/do_mounts.h | 8 +-
4124 init/do_mounts_initrd.c | 30 +-
4125 init/do_mounts_md.c | 6 +-
4126 init/init_task.c | 4 +
4127 init/initramfs.c | 38 +-
4128 init/main.c | 30 +-
4129 ipc/compat.c | 4 +-
4130 ipc/ipc_sysctl.c | 14 +-
4131 ipc/mq_sysctl.c | 4 +-
4132 ipc/sem.c | 4 +-
4133 ipc/shm.c | 8 +-
4134 kernel/audit.c | 8 +-
4135 kernel/auditsc.c | 4 +-
4136 kernel/bpf/core.c | 28 +-
4137 kernel/capability.c | 3 +
4138 kernel/cgroup.c | 29 +-
4139 kernel/compat.c | 38 +-
4140 kernel/debug/debug_core.c | 16 +-
4141 kernel/debug/kdb/kdb_main.c | 4 +-
4142 kernel/events/core.c | 38 +-
4143 kernel/events/internal.h | 10 +-
4144 kernel/events/uprobes.c | 2 +-
4145 kernel/exit.c | 27 +-
4146 kernel/fork.c | 175 +-
4147 kernel/futex.c | 11 +-
4148 kernel/futex_compat.c | 2 +-
4149 kernel/irq/manage.c | 2 +-
4150 kernel/irq/msi.c | 19 +-
4151 kernel/irq/spurious.c | 2 +-
4152 kernel/jump_label.c | 5 +
4153 kernel/kallsyms.c | 40 +-
4154 kernel/kexec.c | 3 +-
4155 kernel/kmod.c | 8 +-
4156 kernel/kprobes.c | 4 +-
4157 kernel/ksysfs.c | 2 +-
4158 kernel/locking/lockdep.c | 7 +-
4159 kernel/locking/mutex-debug.c | 12 +-
4160 kernel/locking/mutex-debug.h | 4 +-
4161 kernel/locking/mutex.c | 6 +-
4162 kernel/module.c | 403 +-
4163 kernel/notifier.c | 17 +-
4164 kernel/padata.c | 4 +-
4165 kernel/panic.c | 11 +-
4166 kernel/pid.c | 6 +-
4167 kernel/pid_namespace.c | 2 +-
4168 kernel/power/process.c | 12 +-
4169 kernel/profile.c | 14 +-
4170 kernel/ptrace.c | 8 +-
4171 kernel/rcu/rcutorture.c | 60 +-
4172 kernel/rcu/tiny.c | 4 +-
4173 kernel/rcu/tree.c | 42 +-
4174 kernel/rcu/tree.h | 16 +-
4175 kernel/rcu/tree_plugin.h | 18 +-
4176 kernel/rcu/tree_trace.c | 14 +-
4177 kernel/resource.c | 4 +-
4178 kernel/sched/auto_group.c | 4 +-
4179 kernel/sched/core.c | 49 +-
4180 kernel/sched/fair.c | 2 +-
4181 kernel/sched/rt.c | 4 +-
4182 kernel/sched/sched.h | 13 +-
4183 kernel/signal.c | 28 +-
4184 kernel/smp.c | 2 +-
4185 kernel/smpboot.c | 4 +-
4186 kernel/softirq.c | 12 +-
4187 kernel/stop_machine.c | 2 +-
4188 kernel/sys.c | 10 +-
4189 kernel/sys_ni.c | 4 +-
4190 kernel/sysctl.c | 34 +-
4191 kernel/time/alarmtimer.c | 4 +-
4192 kernel/time/posix-clock.c | 8 +-
4193 kernel/time/posix-cpu-timers.c | 4 +-
4194 kernel/time/posix-timers.c | 36 +-
4195 kernel/time/timer.c | 2 +-
4196 kernel/time/timer_stats.c | 10 +-
4197 kernel/trace/blktrace.c | 6 +-
4198 kernel/trace/ftrace.c | 33 +-
4199 kernel/trace/ring_buffer.c | 96 +-
4200 kernel/trace/trace.c | 2 +-
4201 kernel/trace/trace.h | 2 +-
4202 kernel/trace/trace_clock.c | 4 +-
4203 kernel/trace/trace_events.c | 1 -
4204 kernel/trace/trace_functions_graph.c | 4 +-
4205 kernel/trace/trace_mmiotrace.c | 8 +-
4206 kernel/trace/trace_output.c | 10 +-
4207 kernel/trace/trace_seq.c | 2 +-
4208 kernel/trace/trace_stack.c | 2 +-
4209 kernel/user.c | 2 +-
4210 kernel/user_namespace.c | 2 +-
4211 kernel/utsname_sysctl.c | 2 +-
4212 kernel/watchdog.c | 2 +-
4213 kernel/workqueue.c | 8 +-
4214 lib/Kconfig.debug | 8 +-
4215 lib/Makefile | 2 +-
4216 lib/bitmap.c | 8 +-
4217 lib/bug.c | 2 +
4218 lib/debugobjects.c | 2 +-
4219 lib/decompress_bunzip2.c | 3 +-
4220 lib/decompress_unlzma.c | 4 +-
4221 lib/div64.c | 4 +-
4222 lib/dma-debug.c | 4 +-
4223 lib/inflate.c | 2 +-
4224 lib/ioremap.c | 4 +-
4225 lib/irq_poll.c | 2 +-
4226 lib/kobject.c | 4 +-
4227 lib/list_debug.c | 126 +-
4228 lib/lockref.c | 44 +-
4229 lib/percpu-refcount.c | 2 +-
4230 lib/radix-tree.c | 2 +-
4231 lib/random32.c | 2 +-
4232 lib/rhashtable.c | 4 +-
4233 lib/show_mem.c | 2 +-
4234 lib/strncpy_from_user.c | 2 +-
4235 lib/strnlen_user.c | 2 +-
4236 lib/swiotlb.c | 2 +-
4237 lib/usercopy.c | 6 +
4238 lib/vsprintf.c | 12 +-
4239 mm/Kconfig | 6 +-
4240 mm/backing-dev.c | 4 +-
4241 mm/debug.c | 3 +
4242 mm/filemap.c | 10 +-
4243 mm/gup.c | 13 +-
4244 mm/highmem.c | 6 +-
4245 mm/hugetlb.c | 125 +-
4246 mm/hugetlb_cgroup.c | 60 +-
4247 mm/internal.h | 3 +-
4248 mm/maccess.c | 12 +-
4249 mm/madvise.c | 37 +
4250 mm/memcontrol.c | 6 +-
4251 mm/memory-failure.c | 6 +-
4252 mm/memory.c | 424 +-
4253 mm/mempolicy.c | 25 +
4254 mm/mlock.c | 18 +-
4255 mm/mm_init.c | 2 +-
4256 mm/mmap.c | 573 +-
4257 mm/mprotect.c | 137 +-
4258 mm/mremap.c | 39 +-
4259 mm/nommu.c | 21 +-
4260 mm/page-writeback.c | 2 +-
4261 mm/page_alloc.c | 53 +-
4262 mm/percpu.c | 2 +-
4263 mm/process_vm_access.c | 14 +-
4264 mm/readahead.c | 2 +-
4265 mm/rmap.c | 43 +-
4266 mm/shmem.c | 37 +-
4267 mm/slab.c | 111 +-
4268 mm/slab.h | 22 +-
4269 mm/slab_common.c | 86 +-
4270 mm/slob.c | 218 +-
4271 mm/slub.c | 111 +-
4272 mm/sparse-vmemmap.c | 4 +-
4273 mm/sparse.c | 2 +-
4274 mm/swap.c | 2 +
4275 mm/swapfile.c | 12 +-
4276 mm/util.c | 6 +
4277 mm/vmalloc.c | 116 +-
4278 mm/vmstat.c | 12 +-
4279 net/8021q/vlan.c | 5 +-
4280 net/8021q/vlan_netlink.c | 2 +-
4281 net/9p/mod.c | 4 +-
4282 net/9p/trans_fd.c | 2 +-
4283 net/atm/atm_misc.c | 8 +-
4284 net/atm/lec.h | 2 +-
4285 net/atm/proc.c | 6 +-
4286 net/atm/resources.c | 4 +-
4287 net/ax25/sysctl_net_ax25.c | 2 +-
4288 net/batman-adv/bat_iv_ogm.c | 8 +-
4289 net/batman-adv/fragmentation.c | 2 +-
4290 net/batman-adv/routing.c | 4 +-
4291 net/batman-adv/soft-interface.c | 12 +-
4292 net/batman-adv/sysfs.c | 40 +-
4293 net/batman-adv/sysfs.h | 4 +-
4294 net/batman-adv/translation-table.c | 14 +-
4295 net/batman-adv/types.h | 8 +-
4296 net/bluetooth/hci_sock.c | 2 +-
4297 net/bluetooth/l2cap_core.c | 6 +-
4298 net/bluetooth/l2cap_sock.c | 12 +-
4299 net/bluetooth/rfcomm/sock.c | 4 +-
4300 net/bluetooth/rfcomm/tty.c | 4 +-
4301 net/bridge/br_netlink.c | 2 +-
4302 net/bridge/netfilter/ebtables.c | 6 +-
4303 net/caif/cfctrl.c | 11 +-
4304 net/caif/chnl_net.c | 4 +-
4305 net/can/af_can.c | 2 +-
4306 net/can/gw.c | 6 +-
4307 net/ceph/ceph_common.c | 2 +-
4308 net/ceph/messenger.c | 4 +-
4309 net/compat.c | 26 +-
4310 net/core/datagram.c | 2 +-
4311 net/core/dev.c | 16 +-
4312 net/core/filter.c | 2 +-
4313 net/core/flow.c | 6 +-
4314 net/core/neighbour.c | 18 +-
4315 net/core/net-sysfs.c | 2 +-
4316 net/core/net_namespace.c | 8 +-
4317 net/core/netpoll.c | 4 +-
4318 net/core/rtnetlink.c | 17 +-
4319 net/core/scm.c | 12 +-
4320 net/core/skbuff.c | 11 +-
4321 net/core/sock.c | 28 +-
4322 net/core/sock_diag.c | 15 +-
4323 net/core/sysctl_net_core.c | 22 +-
4324 net/decnet/af_decnet.c | 1 +
4325 net/decnet/sysctl_net_decnet.c | 4 +-
4326 net/dsa/dsa.c | 2 +-
4327 net/hsr/hsr_device.c | 2 +-
4328 net/hsr/hsr_netlink.c | 2 +-
4329 net/ieee802154/6lowpan/core.c | 2 +-
4330 net/ieee802154/6lowpan/reassembly.c | 14 +-
4331 net/ipv4/af_inet.c | 2 +-
4332 net/ipv4/arp.c | 2 +-
4333 net/ipv4/devinet.c | 18 +-
4334 net/ipv4/fib_frontend.c | 6 +-
4335 net/ipv4/fib_semantics.c | 2 +-
4336 net/ipv4/inet_connection_sock.c | 4 +-
4337 net/ipv4/inet_diag.c | 4 +-
4338 net/ipv4/inet_timewait_sock.c | 2 +-
4339 net/ipv4/inetpeer.c | 2 +-
4340 net/ipv4/ip_fragment.c | 15 +-
4341 net/ipv4/ip_gre.c | 6 +-
4342 net/ipv4/ip_sockglue.c | 2 +-
4343 net/ipv4/ip_vti.c | 4 +-
4344 net/ipv4/ipconfig.c | 6 +-
4345 net/ipv4/ipip.c | 4 +-
4346 net/ipv4/netfilter/arp_tables.c | 12 +-
4347 net/ipv4/netfilter/ip_tables.c | 12 +-
4348 net/ipv4/ping.c | 14 +-
4349 net/ipv4/proc.c | 8 +-
4350 net/ipv4/raw.c | 14 +-
4351 net/ipv4/route.c | 32 +-
4352 net/ipv4/sysctl_net_ipv4.c | 22 +-
4353 net/ipv4/tcp_input.c | 6 +-
4354 net/ipv4/tcp_probe.c | 2 +-
4355 net/ipv4/udp.c | 10 +-
4356 net/ipv4/xfrm4_mode_transport.c | 2 +-
4357 net/ipv4/xfrm4_policy.c | 17 +-
4358 net/ipv4/xfrm4_state.c | 4 +-
4359 net/ipv6/addrconf.c | 24 +-
4360 net/ipv6/af_inet6.c | 2 +-
4361 net/ipv6/datagram.c | 2 +-
4362 net/ipv6/icmp.c | 2 +-
4363 net/ipv6/inet6_hashtables.c | 2 +-
4364 net/ipv6/ip6_fib.c | 4 +-
4365 net/ipv6/ip6_gre.c | 10 +-
4366 net/ipv6/ip6_tunnel.c | 4 +-
4367 net/ipv6/ip6_vti.c | 4 +-
4368 net/ipv6/ipv6_sockglue.c | 2 +-
4369 net/ipv6/ndisc.c | 2 +-
4370 net/ipv6/netfilter/ip6_tables.c | 12 +-
4371 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4372 net/ipv6/ping.c | 33 +-
4373 net/ipv6/proc.c | 10 +-
4374 net/ipv6/raw.c | 17 +-
4375 net/ipv6/reassembly.c | 13 +-
4376 net/ipv6/route.c | 2 +-
4377 net/ipv6/sit.c | 4 +-
4378 net/ipv6/sysctl_net_ipv6.c | 2 +-
4379 net/ipv6/udp.c | 6 +-
4380 net/ipv6/xfrm6_mode_transport.c | 2 +-
4381 net/ipv6/xfrm6_policy.c | 17 +-
4382 net/irda/discovery.c | 2 +-
4383 net/irda/ircomm/ircomm_core.c | 13 +-
4384 net/irda/ircomm/ircomm_tty.c | 24 +-
4385 net/irda/ircomm/ircomm_tty_attach.c | 4 +-
4386 net/irda/irda_device.c | 14 +-
4387 net/irda/iriap.c | 14 +-
4388 net/irda/irias_object.c | 10 +-
4389 net/irda/irlan/irlan_client.c | 2 +-
4390 net/irda/irlap.c | 15 +-
4391 net/irda/irlap_event.c | 2 +-
4392 net/irda/irlmp.c | 21 +-
4393 net/irda/irlmp_event.c | 6 +-
4394 net/irda/irnet/irnet.h | 2 +-
4395 net/irda/irnet/irnet_irda.c | 6 +-
4396 net/irda/irttp.c | 8 +-
4397 net/irda/timer.c | 24 +-
4398 net/iucv/af_iucv.c | 4 +-
4399 net/iucv/iucv.c | 2 +-
4400 net/key/af_key.c | 4 +-
4401 net/l2tp/l2tp_eth.c | 40 +-
4402 net/l2tp/l2tp_ip.c | 2 +-
4403 net/l2tp/l2tp_ip6.c | 2 +-
4404 net/mac80211/cfg.c | 10 +-
4405 net/mac80211/debugfs.c | 2 +-
4406 net/mac80211/debugfs_key.c | 4 +-
4407 net/mac80211/ieee80211_i.h | 3 +-
4408 net/mac80211/iface.c | 20 +-
4409 net/mac80211/key.c | 4 +-
4410 net/mac80211/main.c | 2 +-
4411 net/mac80211/pm.c | 4 +-
4412 net/mac80211/rate.c | 2 +-
4413 net/mac80211/sta_info.c | 2 +-
4414 net/mac80211/tx.c | 2 +-
4415 net/mac80211/util.c | 8 +-
4416 net/mac80211/wpa.c | 10 +-
4417 net/mac802154/iface.c | 6 +-
4418 net/mpls/af_mpls.c | 10 +-
4419 net/netfilter/ipset/ip_set_core.c | 7 +-
4420 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4421 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4422 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4423 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4424 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4425 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4426 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4427 net/netfilter/nf_conntrack_acct.c | 2 +-
4428 net/netfilter/nf_conntrack_core.c | 2 +-
4429 net/netfilter/nf_conntrack_ecache.c | 2 +-
4430 net/netfilter/nf_conntrack_helper.c | 2 +-
4431 net/netfilter/nf_conntrack_netlink.c | 22 +-
4432 net/netfilter/nf_conntrack_proto.c | 2 +-
4433 net/netfilter/nf_conntrack_standalone.c | 2 +-
4434 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4435 net/netfilter/nf_log.c | 10 +-
4436 net/netfilter/nf_nat_ftp.c | 2 +-
4437 net/netfilter/nf_nat_irc.c | 2 +-
4438 net/netfilter/nf_sockopt.c | 4 +-
4439 net/netfilter/nf_tables_api.c | 13 +-
4440 net/netfilter/nfnetlink_acct.c | 7 +-
4441 net/netfilter/nfnetlink_cthelper.c | 2 +-
4442 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4443 net/netfilter/nfnetlink_log.c | 4 +-
4444 net/netfilter/nft_compat.c | 9 +-
4445 net/netfilter/xt_IDLETIMER.c | 12 +-
4446 net/netfilter/xt_statistic.c | 8 +-
4447 net/netlink/af_netlink.c | 14 +-
4448 net/netlink/diag.c | 2 +-
4449 net/netlink/genetlink.c | 14 +-
4450 net/openvswitch/vport-geneve.c | 7 +-
4451 net/openvswitch/vport-gre.c | 7 +-
4452 net/openvswitch/vport-internal_dev.c | 4 +-
4453 net/openvswitch/vport-netdev.c | 7 +-
4454 net/openvswitch/vport-vxlan.c | 7 +-
4455 net/packet/af_packet.c | 26 +-
4456 net/packet/diag.c | 2 +-
4457 net/packet/internal.h | 6 +-
4458 net/phonet/pep.c | 6 +-
4459 net/phonet/socket.c | 2 +-
4460 net/phonet/sysctl.c | 2 +-
4461 net/rds/cong.c | 6 +-
4462 net/rds/ib.h | 2 +-
4463 net/rds/ib_cm.c | 2 +-
4464 net/rds/ib_recv.c | 4 +-
4465 net/rds/iw.h | 2 +-
4466 net/rds/iw_cm.c | 2 +-
4467 net/rds/iw_recv.c | 4 +-
4468 net/rds/rds.h | 2 +-
4469 net/rds/tcp.c | 2 +-
4470 net/rds/tcp.h | 6 +-
4471 net/rds/tcp_send.c | 2 +-
4472 net/rxrpc/af_rxrpc.c | 2 +-
4473 net/rxrpc/ar-ack.c | 14 +-
4474 net/rxrpc/ar-call.c | 2 +-
4475 net/rxrpc/ar-connection.c | 2 +-
4476 net/rxrpc/ar-connevent.c | 2 +-
4477 net/rxrpc/ar-input.c | 4 +-
4478 net/rxrpc/ar-internal.h | 8 +-
4479 net/rxrpc/ar-local.c | 2 +-
4480 net/rxrpc/ar-output.c | 4 +-
4481 net/rxrpc/ar-peer.c | 2 +-
4482 net/rxrpc/ar-proc.c | 4 +-
4483 net/rxrpc/ar-transport.c | 2 +-
4484 net/rxrpc/rxkad.c | 4 +-
4485 net/sched/sch_generic.c | 4 +-
4486 net/sched/sch_tbf.c | 9 +-
4487 net/sctp/ipv6.c | 6 +-
4488 net/sctp/protocol.c | 10 +-
4489 net/sctp/sm_sideeffect.c | 4 +-
4490 net/sctp/socket.c | 21 +-
4491 net/sctp/sysctl.c | 10 +-
4492 net/socket.c | 18 +-
4493 net/sunrpc/auth_gss/gss_rpc_upcall.c | 4 +-
4494 net/sunrpc/auth_gss/gss_rpc_xdr.c | 11 +-
4495 net/sunrpc/auth_gss/gss_rpc_xdr.h | 8 +-
4496 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4497 net/sunrpc/clnt.c | 4 +-
4498 net/sunrpc/rpcb_clnt.c | 66 +-
4499 net/sunrpc/sched.c | 4 +-
4500 net/sunrpc/svc.c | 8 +-
4501 net/sunrpc/svcauth_unix.c | 2 +-
4502 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4503 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4504 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4505 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4506 net/tipc/netlink_compat.c | 12 +-
4507 net/tipc/subscr.c | 2 +-
4508 net/unix/diag.c | 2 +-
4509 net/unix/sysctl_net_unix.c | 2 +-
4510 net/wireless/scan.c | 3 +-
4511 net/wireless/wext-compat.c | 140 +-
4512 net/wireless/wext-compat.h | 8 +-
4513 net/wireless/wext-core.c | 19 +-
4514 net/wireless/wext-sme.c | 5 +-
4515 net/xfrm/xfrm_policy.c | 16 +-
4516 net/xfrm/xfrm_state.c | 37 +-
4517 net/xfrm/xfrm_sysctl.c | 2 +-
4518 net/xfrm/xfrm_user.c | 2 +-
4519 scripts/Kbuild.include | 2 +-
4520 scripts/Makefile.build | 2 +-
4521 scripts/Makefile.clean | 3 +-
4522 scripts/Makefile.extrawarn | 4 +
4523 scripts/Makefile.gcc-plugins | 69 +
4524 scripts/Makefile.host | 68 +-
4525 scripts/basic/fixdep.c | 12 +-
4526 scripts/dtc/checks.c | 14 +-
4527 scripts/dtc/data.c | 6 +-
4528 scripts/dtc/flattree.c | 8 +-
4529 scripts/dtc/livetree.c | 4 +-
4530 scripts/gcc-plugin.sh | 51 +
4531 scripts/headers_install.sh | 1 +
4532 scripts/kallsyms.c | 4 +-
4533 scripts/kconfig/lkc.h | 5 +-
4534 scripts/kconfig/menu.c | 2 +-
4535 scripts/kconfig/symbol.c | 6 +-
4536 scripts/link-vmlinux.sh | 2 +-
4537 scripts/mod/file2alias.c | 14 +-
4538 scripts/mod/modpost.c | 40 +-
4539 scripts/mod/modpost.h | 6 +-
4540 scripts/mod/sumversion.c | 2 +-
4541 scripts/module-common.lds | 4 +
4542 scripts/package/builddeb | 1 +
4543 scripts/pnmtologo.c | 6 +-
4544 scripts/sortextable.h | 6 +-
4545 scripts/tags.sh | 2 +-
4546 security/Kconfig | 703 +-
4547 security/apparmor/include/policy.h | 2 +-
4548 security/apparmor/lsm.c | 16 +-
4549 security/apparmor/policy.c | 4 +-
4550 security/integrity/ima/ima.h | 4 +-
4551 security/integrity/ima/ima_api.c | 2 +-
4552 security/integrity/ima/ima_fs.c | 4 +-
4553 security/integrity/ima/ima_queue.c | 2 +-
4554 security/keys/internal.h | 8 +-
4555 security/keys/key.c | 18 +-
4556 security/keys/keyring.c | 4 -
4557 security/selinux/avc.c | 6 +-
4558 security/selinux/include/xfrm.h | 2 +-
4559 security/yama/yama_lsm.c | 2 +-
4560 sound/aoa/codecs/onyx.c | 7 +-
4561 sound/aoa/codecs/onyx.h | 1 +
4562 sound/core/oss/pcm_oss.c | 18 +-
4563 sound/core/pcm_compat.c | 2 +-
4564 sound/core/pcm_lib.c | 3 +-
4565 sound/core/pcm_native.c | 4 +-
4566 sound/core/rawmidi.c | 5 +-
4567 sound/core/seq/oss/seq_oss_synth.c | 4 +-
4568 sound/core/seq/seq_clientmgr.c | 10 +-
4569 sound/core/seq/seq_compat.c | 2 +-
4570 sound/core/seq/seq_fifo.c | 6 +-
4571 sound/core/seq/seq_fifo.h | 2 +-
4572 sound/core/seq/seq_memory.c | 18 +-
4573 sound/core/seq/seq_midi.c | 5 +-
4574 sound/core/seq/seq_virmidi.c | 2 +-
4575 sound/core/sound.c | 2 +-
4576 sound/drivers/mts64.c | 14 +-
4577 sound/drivers/opl4/opl4_lib.c | 2 +-
4578 sound/drivers/portman2x4.c | 3 +-
4579 sound/firewire/amdtp-am824.c | 2 +-
4580 sound/firewire/amdtp-stream.c | 4 +-
4581 sound/firewire/amdtp-stream.h | 2 +-
4582 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4583 sound/firewire/isight.c | 10 +-
4584 sound/firewire/oxfw/oxfw-scs1x.c | 8 +-
4585 sound/oss/sb_audio.c | 2 +-
4586 sound/oss/swarm_cs4297a.c | 6 +-
4587 sound/pci/als300.c | 2 +-
4588 sound/pci/aw2/aw2-alsa.c | 2 -
4589 sound/pci/aw2/aw2-saa7146.c | 4 +-
4590 sound/pci/ctxfi/ctamixer.c | 14 +-
4591 sound/pci/ctxfi/ctamixer.h | 8 +-
4592 sound/pci/ctxfi/ctatc.c | 20 +-
4593 sound/pci/ctxfi/ctdaio.c | 6 +-
4594 sound/pci/ctxfi/ctdaio.h | 4 +-
4595 sound/pci/ctxfi/ctsrc.c | 13 +-
4596 sound/pci/ctxfi/ctsrc.h | 8 +-
4597 sound/pci/hda/hda_codec.c | 2 +-
4598 sound/pci/ymfpci/ymfpci.h | 2 +-
4599 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4600 sound/soc/codecs/cx20442.c | 8 +-
4601 sound/soc/codecs/sti-sas.c | 10 +-
4602 sound/soc/codecs/tlv320dac33.c | 7 +-
4603 sound/soc/codecs/uda1380.c | 7 +-
4604 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4605 sound/soc/soc-ac97.c | 6 +-
4606 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4607 tools/gcc/Makefile | 46 +
4608 tools/gcc/checker_plugin.c | 496 +
4609 tools/gcc/colorize_plugin.c | 162 +
4610 tools/gcc/constify_plugin.c | 521 +
4611 tools/gcc/gcc-common.h | 858 +
4612 tools/gcc/gcc-generate-gimple-pass.h | 175 +
4613 tools/gcc/gcc-generate-ipa-pass.h | 289 +
4614 tools/gcc/gcc-generate-rtl-pass.h | 175 +
4615 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 +
4616 tools/gcc/initify_plugin.c | 536 +
4617 tools/gcc/kallocstat_plugin.c | 135 +
4618 tools/gcc/kernexec_plugin.c | 407 +
4619 tools/gcc/latent_entropy_plugin.c | 422 +
4620 tools/gcc/randomize_layout_seed.h | 1 +
4621 tools/gcc/rap_plugin/Makefile | 4 +
4622 tools/gcc/rap_plugin/rap.h | 36 +
4623 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 +
4624 tools/gcc/rap_plugin/rap_hash.c | 381 +
4625 tools/gcc/rap_plugin/rap_plugin.c | 477 +
4626 tools/gcc/rap_plugin/sip.c | 96 +
4627 tools/gcc/size_overflow_plugin/.gitignore | 3 +
4628 tools/gcc/size_overflow_plugin/Makefile | 28 +
4629 .../disable_size_overflow_hash.data | 12440 +++++++++++
4630 .../generate_size_overflow_hash.sh | 103 +
4631 .../insert_size_overflow_asm.c | 369 +
4632 .../size_overflow_plugin/intentional_overflow.c | 1118 +
4633 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4634 tools/gcc/size_overflow_plugin/size_overflow.h | 329 +
4635 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4636 .../size_overflow_plugin/size_overflow_hash.data | 21508 +++++++++++++++++++
4637 .../size_overflow_hash_aux.data | 92 +
4638 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 +
4639 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4640 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
4641 .../size_overflow_plugin_hash.c | 352 +
4642 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4643 .../size_overflow_transform_core.c | 1015 +
4644 tools/gcc/stackleak_plugin.c | 350 +
4645 tools/gcc/structleak_plugin.c | 239 +
4646 tools/include/linux/compiler.h | 8 +
4647 tools/perf/util/include/asm/alternative-asm.h | 3 +
4648 tools/virtio/linux/uaccess.h | 2 +-
4649 virt/kvm/kvm_main.c | 42 +-
4650 2639 files changed, 76327 insertions(+), 13888 deletions(-)
4651 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
4652 Author: Brad Spengler <spender@grsecurity.net>
4653 Date: Mon Apr 25 20:40:53 2016 -0400
4654
4655 Fix DoS in n_tty_receive_buf_common reported by marcan at:
4656 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
4657 and via lengthy diatribe on Twitter:
4658 https://twitter.com/marcan42/status/724740708104474626
4659 https://twitter.com/marcan42/status/724740985146609664
4660 https://twitter.com/marcan42/status/724741270325760000
4661 https://twitter.com/marcan42/status/724742465199050752
4662 https://twitter.com/marcan42/status/724745886794833920
4663 https://twitter.com/marcan42/status/724749571495075840
4664 https://twitter.com/marcan42/status/724746427285409796
4665 https://twitter.com/marcan42/status/724743150263095296
4666 https://twitter.com/marcan42/status/724757473433808896
4667
4668 Fix it correctly instead of using the incorrect fix suggested
4669 by marcan (aka "try reading the code next time")
4670 The original code was meant to fix an integer truncation issue
4671 that would also have caused a SIZE_OVERFLOW "DoS".
4672
4673 drivers/tty/n_tty.c | 9 +++++----
4674 1 file changed, 5 insertions(+), 4 deletions(-)
4675
4676 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
4677 Author: Brad Spengler <spender@grsecurity.net>
4678 Date: Mon Apr 25 19:52:33 2016 -0400
4679
4680 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
4681 reported by jotik at:
4682 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
4683 patch from Mathias Krause
4684
4685 fs/proc/base.c | 2 +-
4686 1 file changed, 1 insertion(+), 1 deletion(-)
4687
4688 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
4689 Author: Jiri Benc <jbenc@redhat.com>
4690 Date: Fri Apr 22 13:09:13 2016 +0200
4691
4692 cxgbi: fix uninitialized flowi6
4693
4694 ip6_route_output looks into different fields in the passed flowi6 structure,
4695 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
4696 first.
4697
4698 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
4699 Signed-off-by: Jiri Benc <jbenc@redhat.com>
4700 Signed-off-by: David S. Miller <davem@davemloft.net>
4701
4702 drivers/scsi/cxgbi/libcxgbi.c | 1 +
4703 1 file changed, 1 insertion(+)
4704
4705 commit ec65caa32652841a5be21d6e73146921af16d7a8
4706 Author: Brad Spengler <spender@grsecurity.net>
4707 Date: Wed Apr 20 20:59:43 2016 -0400
4708
4709 Make /proc/sched_debug only readable by root, mentioned in
4710 recent NCC Group paper on Linux containers
4711
4712 kernel/sched/debug.c | 4 ++++
4713 1 file changed, 4 insertions(+)
4714
4715 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
4716 Merge: 463149f ff26083
4717 Author: Brad Spengler <spender@grsecurity.net>
4718 Date: Wed Apr 20 17:55:53 2016 -0400
4719
4720 Merge branch 'pax-test' into grsec-test
4721
4722 commit ff260839e610d2bc1b0c579edd7deb0028198f01
4723 Author: Brad Spengler <spender@grsecurity.net>
4724 Date: Wed Apr 20 17:55:24 2016 -0400
4725
4726 Update to pax-linux-4.4.8-test14.patch:
4727 - Emese fixed some CodingStyle issues in the latent entropy plugin
4728 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4729
4730 arch/mips/include/asm/cache.h | 3 ++-
4731 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
4732 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
4733 arch/mips/lib/libgcc.h | 12 +++++++++---
4734 drivers/idle/intel_idle.c | 6 ++++--
4735 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
4736 6 files changed, 57 insertions(+), 33 deletions(-)
4737
4738 commit 463149f47a64db4b26a13009f83ed73d393a209c
4739 Author: Xiaodong Liu <xiaodong.liu@intel.com>
4740 Date: Tue Apr 12 09:45:51 2016 +0000
4741
4742 crypto: sha1-mb - use corrcet pointer while completing jobs
4743
4744 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
4745 when check and complete other jobs. If the memory of first completed req
4746 is freed, while still completing other jobs in the func, kernel will
4747 crash since NULL pointer is assigned to RIP.
4748
4749 Cc: <stable@vger.kernel.org>
4750 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
4751 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
4752 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4753
4754 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
4755 1 file changed, 2 insertions(+), 2 deletions(-)
4756
4757 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
4758 Author: Tom Lendacky <thomas.lendacky@amd.com>
4759 Date: Wed Apr 13 10:52:25 2016 -0500
4760
4761 crypto: ccp - Prevent information leakage on export
4762
4763 Prevent information from leaking to userspace by doing a memset to 0 of
4764 the export state structure before setting the structure values and copying
4765 it. This prevents un-initialized padding areas from being copied into the
4766 export area.
4767
4768 Cc: <stable@vger.kernel.org> # 3.14.x-
4769 Reported-by: Ben Hutchings <ben@decadent.org.uk>
4770 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
4771 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4772
4773 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
4774 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
4775 2 files changed, 6 insertions(+)
4776
4777 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
4778 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4779 Date: Mon Apr 18 14:33:54 2016 +0300
4780
4781 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
4782
4783 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
4784 order-0 memory allocations in RX path"), so here is no reason for depleting
4785 reserves. Generic __netdev_alloc_frag() implements the same logic.
4786
4787 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4788 Acked-by: Eric Dumazet <edumazet@google.com>
4789 Signed-off-by: David S. Miller <davem@davemloft.net>
4790
4791 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
4792 1 file changed, 1 insertion(+), 1 deletion(-)
4793
4794 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
4795 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
4796 Date: Thu Mar 17 18:00:29 2016 +0000
4797
4798 USB: usbip: fix potential out-of-bounds write
4799
4800 Fix potential out-of-bounds write to urb->transfer_buffer
4801 usbip handles network communication directly in the kernel. When receiving a
4802 packet from its peer, usbip code parses headers according to protocol. As
4803 part of this parsing urb->actual_length is filled. Since the input for
4804 urb->actual_length comes from the network, it should be treated as untrusted.
4805 Any entity controlling the network may put any value in the input and the
4806 preallocated urb->transfer_buffer may not be large enough to hold the data.
4807 Thus, the malicious entity is able to write arbitrary data to kernel memory.
4808
4809 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
4810 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4811
4812 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
4813 1 file changed, 11 insertions(+)
4814
4815 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
4816 Merge: d60a24d f5fe5fd
4817 Author: Brad Spengler <spender@grsecurity.net>
4818 Date: Wed Apr 20 17:35:58 2016 -0400
4819
4820 Merge branch 'pax-test' into grsec-test
4821
4822 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
4823 Merge: a107ba2 8c9aef0
4824 Author: Brad Spengler <spender@grsecurity.net>
4825 Date: Wed Apr 20 17:35:29 2016 -0400
4826
4827 Merge branch 'linux-4.4.y' into pax-test
4828
4829 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
4830 Author: Brad Spengler <spender@grsecurity.net>
4831 Date: Mon Apr 18 17:48:10 2016 -0400
4832
4833 fix cast for constify change, reported by pipacs
4834
4835 drivers/idle/intel_idle.c | 4 ++--
4836 1 file changed, 2 insertions(+), 2 deletions(-)
4837
4838 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
4839 Author: Brad Spengler <spender@grsecurity.net>
4840 Date: Fri Apr 15 21:31:07 2016 -0400
4841
4842 Use proper type for function pointer
4843
4844 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
4845 1 file changed, 3 insertions(+), 3 deletions(-)
4846
4847 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
4848 Author: Brad Spengler <spender@grsecurity.net>
4849 Date: Fri Apr 15 21:24:04 2016 -0400
4850
4851 Fix skylake cstates compat with constify
4852
4853 drivers/idle/intel_idle.c | 6 ++++--
4854 1 file changed, 4 insertions(+), 2 deletions(-)
4855
4856 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
4857 Author: Brad Spengler <spender@grsecurity.net>
4858 Date: Fri Apr 15 21:10:44 2016 -0400
4859
4860 Update size_overflow hash table
4861
4862 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
4863 1 file changed, 2 insertions(+), 1 deletion(-)
4864
4865 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
4866 Author: Brad Spengler <spender@grsecurity.net>
4867 Date: Fri Apr 15 20:52:37 2016 -0400
4868
4869 compile fix
4870
4871 fs/coredump.c | 3 ---
4872 1 file changed, 3 deletions(-)
4873
4874 commit 967224da52bd98d078b1237aea5ec9e622238fba
4875 Merge: 92771d6 a107ba2
4876 Author: Brad Spengler <spender@grsecurity.net>
4877 Date: Fri Apr 15 20:30:23 2016 -0400
4878
4879 Merge branch 'pax-test' into grsec-test
4880
4881 commit a107ba25214d9694eb836fb04c782ad694977b91
4882 Merge: 4d8fc00 b40108b
4883 Author: Brad Spengler <spender@grsecurity.net>
4884 Date: Fri Apr 15 20:18:26 2016 -0400
4885
4886 Merge branch 'linux-4.4.y' into pax-test
4887
4888 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
4889 Author: Brad Spengler <spender@grsecurity.net>
4890 Date: Sun Apr 10 07:18:03 2016 -0400
4891
4892 From: Mathias Krause <minipli@googlemail.com>
4893 To: "David S. Miller" <davem@davemloft.net>
4894 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
4895 Emelyanov <xemul@parallels.com>
4896 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
4897 interface
4898
4899 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
4900 pdiag_put_mclist() leaks uninitialized heap bytes via the
4901 PACKET_DIAG_MCLIST netlink attribute.
4902
4903 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
4904
4905 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
4906 Signed-off-by: Mathias Krause <minipli@googlemail.com>
4907 Cc: Eric W. Biederman <ebiederm@xmission.com>
4908 Cc: Pavel Emelyanov <xemul@parallels.com>
4909 ---
4910 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
4911 to userland before the introduction of the packet_diag interface.
4912 Therefore the "Fixes:" line on that commit.
4913
4914 net/packet/af_packet.c | 1 +
4915 1 file changed, 1 insertion(+)
4916
4917 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
4918 Author: Jakub Sitnicki <jkbs@redhat.com>
4919 Date: Tue Apr 5 18:41:08 2016 +0200
4920
4921 ipv6: Count in extension headers in skb->network_header
4922
4923 When sending a UDPv6 message longer than MTU, account for the length
4924 of fragmentable IPv6 extension headers in skb->network_header offset.
4925 Same as we do in alloc_new_skb path in __ip6_append_data().
4926
4927 This ensures that later on __ip6_make_skb() will make space in
4928 headroom for fragmentable extension headers:
4929
4930 /* move skb->data to ip header from ext header */
4931 if (skb->data < skb_network_header(skb))
4932 __skb_pull(skb, skb_network_offset(skb));
4933
4934 Prevents a splat due to skb_under_panic:
4935
4936 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
4937 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
4938 ------------[ cut here ]------------
4939 kernel BUG at net/core/skbuff.c:104!
4940 invalid opcode: 0000 [#1] KASAN
4941 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
4942 [...]
4943 Call Trace:
4944 [<ffffffff813eb7b9>] skb_push+0x79/0x80
4945 [<ffffffff8143397b>] eth_header+0x2b/0x100
4946 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
4947 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
4948 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
4949 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
4950 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
4951 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
4952 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
4953 [...]
4954
4955 Reported-by: Ji Jianwen <jiji@redhat.com>
4956 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
4957 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
4958 Signed-off-by: David S. Miller <davem@davemloft.net>
4959
4960 net/ipv6/ip6_output.c | 8 ++++----
4961 1 file changed, 4 insertions(+), 4 deletions(-)
4962
4963 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
4964 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
4965 Date: Fri Apr 1 17:17:50 2016 -0300
4966
4967 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
4968
4969 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
4970 before ip6_tnl_create2 is called. When register_netdevice is called, there
4971 is no linkinfo attribute in the NEWLINK message because of that.
4972
4973 Setting rtnl_link_ops before calling register_netdevice fixes that.
4974
4975 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
4976 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
4977 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
4978 Signed-off-by: David S. Miller <davem@davemloft.net>
4979
4980 net/ipv6/ip6_tunnel.c | 2 +-
4981 1 file changed, 1 insertion(+), 1 deletion(-)
4982
4983 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
4984 Author: Brad Spengler <spender@grsecurity.net>
4985 Date: Tue Apr 5 21:12:44 2016 -0400
4986
4987 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
4988
4989 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
4990 1 file changed, 12 insertions(+), 6 deletions(-)
4991
4992 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
4993 Author: Brad Spengler <spender@grsecurity.net>
4994 Date: Sun Apr 3 20:10:10 2016 -0400
4995
4996 Fix RANDSTRUCT support on ARM
4997
4998 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
4999 1 file changed, 52 insertions(+), 2 deletions(-)
5000
5001 commit bd893a75ab49f6ea5a216eb334471507337118ba
5002 Merge: 87b7f1d 4d8fc00
5003 Author: Brad Spengler <spender@grsecurity.net>
5004 Date: Sat Apr 2 11:54:20 2016 -0400
5005
5006 Merge branch 'pax-test' into grsec-test
5007
5008 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
5009 Author: Brad Spengler <spender@grsecurity.net>
5010 Date: Sat Apr 2 11:53:53 2016 -0400
5011
5012 Update to pax-linux-4.4.6-test13.patch:
5013 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
5014 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
5015
5016 arch/mips/include/asm/atomic.h | 4 ----
5017 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
5018 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
5019 3 files changed, 1 insertion(+), 5 deletions(-)
5020
5021 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
5022 Merge: 3335266 3abdad0
5023 Author: Brad Spengler <spender@grsecurity.net>
5024 Date: Sat Apr 2 11:19:17 2016 -0400
5025
5026 Merge branch 'pax-test' into grsec-test
5027
5028 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
5029 Author: Brad Spengler <spender@grsecurity.net>
5030 Date: Sat Apr 2 11:12:56 2016 -0400
5031
5032 Update to pax-linux-4.4.6-test12.patch:
5033 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
5034 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
5035 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
5036 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
5037 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
5038 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
5039 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
5040 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
5041 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
5042 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
5043 - fixed a gratuitous userland dereference in the amd64 stack walker
5044 - added latent entropy gathering to a few more functions
5045 - constified a few smp_hotplug_thread instances
5046
5047 arch/x86/entry/vdso/Makefile | 1 +
5048 arch/x86/include/asm/cpufeature.h | 1 -
5049 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
5050 arch/x86/kernel/head_32.S | 6 +++---
5051 arch/x86/mm/fault.c | 2 +-
5052 drivers/iommu/arm-smmu.c | 2 +-
5053 drivers/net/ppp/pptp.c | 1 +
5054 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
5055 fs/nfs/internal.h | 5 +++--
5056 fs/proc/kcore.c | 2 +-
5057 kernel/module.c | 6 +++---
5058 kernel/rcu/tree.c | 2 +-
5059 kernel/softirq.c | 2 +-
5060 kernel/stop_machine.c | 2 +-
5061 net/ipv6/xfrm6_mode_transport.c | 2 +-
5062 net/sched/sch_tbf.c | 9 ++++++---
5063 scripts/Makefile.gcc-plugins | 13 +++----------
5064 scripts/Makefile.host | 3 +--
5065 .../disable_size_overflow_hash.data | 4 +++-
5066 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
5067 20 files changed, 40 insertions(+), 48 deletions(-)
5068
5069 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
5070 Author: Mika Penttilä <mika.penttila@nextfour.com>
5071 Date: Mon Feb 22 17:56:52 2016 +0100
5072
5073 ARM: 8544/1: set_memory_xx fixes
5074
5075 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
5076
5077 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
5078 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
5079
5080 arch/arm/mm/pageattr.c | 3 +++
5081 1 file changed, 3 insertions(+)
5082
5083 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
5084 Author: Josh Boyer <jwboyer@fedoraproject.org>
5085 Date: Mon Mar 14 10:42:38 2016 -0400
5086
5087 USB: iowarrior: fix oops with malicious USB descriptors
5088
5089 The iowarrior driver expects at least one valid endpoint. If given
5090 malicious descriptors that specify 0 for the number of endpoints,
5091 it will crash in the probe function. Ensure there is at least
5092 one endpoint on the interface before using it.
5093
5094 The full report of this issue can be found here:
5095 http://seclists.org/bugtraq/2016/Mar/87
5096
5097 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5098 Cc: stable <stable@vger.kernel.org>
5099 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
5100 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5101
5102 drivers/usb/misc/iowarrior.c | 6 ++++++
5103 1 file changed, 6 insertions(+)
5104
5105 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
5106 Author: Oliver Neukum <oneukum@suse.com>
5107 Date: Tue Mar 15 10:14:04 2016 +0100
5108
5109 USB: cdc-acm: more sanity checking
5110
5111 An attack has become available which pretends to be a quirky
5112 device circumventing normal sanity checks and crashes the kernel
5113 by an insufficient number of interfaces. This patch adds a check
5114 to the code path for quirky devices.
5115
5116 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5117 CC: stable@vger.kernel.org
5118 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5119
5120 drivers/usb/class/cdc-acm.c | 3 +++
5121 1 file changed, 3 insertions(+)
5122
5123 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
5124 Author: Oliver Neukum <oneukum@suse.com>
5125 Date: Wed Mar 16 13:26:17 2016 +0100
5126
5127 USB: usb_driver_claim_interface: add sanity checking
5128
5129 Attacks that trick drivers into passing a NULL pointer
5130 to usb_driver_claim_interface() using forged descriptors are
5131 known. This thwarts them by sanity checking.
5132
5133 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5134 CC: stable@vger.kernel.org
5135 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5136
5137 drivers/usb/core/driver.c | 6 +++++-
5138 1 file changed, 5 insertions(+), 1 deletion(-)
5139
5140 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
5141 Author: Paolo Bonzini <pbonzini@redhat.com>
5142 Date: Mon Mar 21 10:15:25 2016 +0100
5143
5144 KVM: fix spin_lock_init order on x86
5145
5146 Moving the initialization earlier is needed in 4.6 because
5147 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
5148 complain:
5149
5150 [ 284.440294] INFO: trying to register non-static key.
5151 [ 284.445259] the code is fine but needs lockdep annotation.
5152 [ 284.450736] turning off the locking correctness validator.
5153 ...
5154 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
5155 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5156 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
5157 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5158 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
5159 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
5160 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
5161 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
5162
5163 However, it also helps fixing a preexisting problem, which is why this
5164 patch is also good for stable kernels: kvm_create_vm was incrementing
5165 current->mm->mm_count but not decrementing it at the out_err label (in
5166 case kvm_init_mmu_notifier failed). The new initialization order makes
5167 it possible to add the required mmdrop without adding a new error label.
5168
5169 Cc: stable@vger.kernel.org
5170 Reported-by: Borislav Petkov <bp@alien8.de>
5171 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5172
5173 virt/kvm/kvm_main.c | 21 +++++++++++----------
5174 1 file changed, 11 insertions(+), 10 deletions(-)
5175
5176 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
5177 Author: Paolo Bonzini <pbonzini@redhat.com>
5178 Date: Fri Mar 18 16:53:42 2016 +0100
5179
5180 KVM: VMX: avoid guest hang on invalid invvpid instruction
5181
5182 A guest executing an invalid invvpid instruction would hang
5183 because the instruction pointer was not updated.
5184
5185 Reported-by: jmontleo@redhat.com
5186 Tested-by: jmontleo@redhat.com
5187 Cc: stable@vger.kernel.org
5188 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
5189 Reviewed-by: David Matlack <dmatlack@google.com>
5190 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5191
5192 arch/x86/kvm/vmx.c | 1 +
5193 1 file changed, 1 insertion(+)
5194
5195 commit 602caaece277e5e21ae43771398bbf7778061beb
5196 Author: Paolo Bonzini <pbonzini@redhat.com>
5197 Date: Fri Mar 18 16:53:29 2016 +0100
5198
5199 KVM: VMX: avoid guest hang on invalid invept instruction
5200
5201 A guest executing an invalid invept instruction would hang
5202 because the instruction pointer was not updated.
5203
5204 Cc: stable@vger.kernel.org
5205 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
5206 Reviewed-by: David Matlack <dmatlack@google.com>
5207 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5208
5209 arch/x86/kvm/vmx.c | 1 +
5210 1 file changed, 1 insertion(+)
5211
5212 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
5213 Author: Jann Horn <jann@thejh.net>
5214 Date: Tue Mar 22 14:25:36 2016 -0700
5215
5216 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
5217
5218 This commit fixes the following security hole affecting systems where
5219 all of the following conditions are fulfilled:
5220
5221 - The fs.suid_dumpable sysctl is set to 2.
5222 - The kernel.core_pattern sysctl's value starts with "/". (Systems
5223 where kernel.core_pattern starts with "|/" are not affected.)
5224 - Unprivileged user namespace creation is permitted. (This is
5225 true on Linux >=3.8, but some distributions disallow it by
5226 default using a distro patch.)
5227
5228 Under these conditions, if a program executes under secure exec rules,
5229 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
5230 namespace, changes its root directory and crashes, the coredump will be
5231 written using fsuid=0 and a path derived from kernel.core_pattern - but
5232 this path is interpreted relative to the root directory of the process,
5233 allowing the attacker to control where a coredump will be written with
5234 root privileges.
5235
5236 To fix the security issue, always interpret core_pattern for dumps that
5237 are written under SUID_DUMP_ROOT relative to the root directory of init.
5238
5239 Signed-off-by: Jann Horn <jann@thejh.net>
5240 Acked-by: Kees Cook <keescook@chromium.org>
5241 Cc: Al Viro <viro@zeniv.linux.org.uk>
5242 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
5243 Cc: Andy Lutomirski <luto@kernel.org>
5244 Cc: Oleg Nesterov <oleg@redhat.com>
5245 Cc: <stable@vger.kernel.org>
5246 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5247 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5248
5249 arch/um/drivers/mconsole_kern.c | 2 +-
5250 fs/coredump.c | 31 +++++++++++++++++++++++++++----
5251 fs/fhandle.c | 2 +-
5252 fs/open.c | 6 ++----
5253 include/linux/fs.h | 2 +-
5254 kernel/sysctl_binary.c | 2 +-
5255 6 files changed, 33 insertions(+), 12 deletions(-)
5256
5257 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
5258 Author: Takashi Iwai <tiwai@suse.de>
5259 Date: Fri Apr 1 12:28:16 2016 +0200
5260
5261 ALSA: timer: Use mod_timer() for rearming the system timer
5262
5263 ALSA system timer backend stops the timer via del_timer() without sync
5264 and leaves del_timer_sync() at the close instead. This is because of
5265 the restriction by the design of ALSA timer: namely, the stop callback
5266 may be called from the timer handler, and calling the sync shall lead
5267 to a hangup. However, this also triggers a kernel BUG() when the
5268 timer is rearmed immediately after stopping without sync:
5269 kernel BUG at kernel/time/timer.c:966!
5270 Call Trace:
5271 <IRQ>
5272 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
5273 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
5274 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
5275 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
5276 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
5277 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
5278 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
5279 ....
5280
5281 It's the place where add_timer() checks the pending timer. It's clear
5282 that this may happen after the immediate restart without sync in our
5283 cases.
5284
5285 So, the workaround here is just to use mod_timer() instead of
5286 add_timer(). This looks like a band-aid fix, but it's a right move,
5287 as snd_timer_interrupt() takes care of the continuous rearm of timer.
5288
5289 Reported-by: Jiri Slaby <jslaby@suse.cz>
5290 Cc: <stable@vger.kernel.org>
5291 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5292
5293 sound/core/timer.c | 4 ++--
5294 1 file changed, 2 insertions(+), 2 deletions(-)
5295
5296 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
5297 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5298 Date: Wed Mar 30 11:40:43 2016 +0200
5299
5300 drm/udl: Use unlocked gem unreferencing
5301
5302 For drm_gem_object_unreference callers are required to hold
5303 dev->struct_mutex, which these paths don't. Enforcing this requirement
5304 has become a bit more strict with
5305
5306 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
5307 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5308 Date: Thu Oct 15 09:36:25 2015 +0200
5309
5310 drm/gem: Check locking in drm_gem_object_unreference
5311
5312 Cc: stable@vger.kernel.org
5313 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
5314 Signed-off-by: Dave Airlie <airlied@redhat.com>
5315
5316 drivers/gpu/drm/udl/udl_fb.c | 2 +-
5317 drivers/gpu/drm/udl/udl_gem.c | 2 +-
5318 2 files changed, 2 insertions(+), 2 deletions(-)
5319
5320 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
5321 Author: Jan Kara <jack@suse.com>
5322 Date: Mon Dec 7 14:34:49 2015 -0500
5323
5324 ext4: fix races of writeback with punch hole and zero range
5325
5326 When doing delayed allocation, update of on-disk inode size is postponed
5327 until IO submission time. However hole punch or zero range fallocate
5328 calls can end up discarding the tail page cache page and thus on-disk
5329 inode size would never be properly updated.
5330
5331 Make sure the on-disk inode size is updated before truncating page
5332 cache.
5333
5334 Signed-off-by: Jan Kara <jack@suse.com>
5335 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5336
5337 fs/ext4/ext4.h | 3 +++
5338 fs/ext4/extents.c | 5 +++++
5339 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
5340 3 files changed, 42 insertions(+), 1 deletion(-)
5341
5342 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
5343 Author: Jan Kara <jack@suse.com>
5344 Date: Mon Dec 7 14:31:11 2015 -0500
5345
5346 ext4: fix races between buffered IO and collapse / insert range
5347
5348 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
5349 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
5350 faults. If buffered write or write via mmap manages to squeeze between
5351 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
5352 implementations, the written data is simply discarded by
5353 truncate_pagecache() although it should have been shifted.
5354
5355 Fix the problem by moving filemap_write_and_wait_range() call inside
5356 i_mutex and i_mmap_sem. That way we are protected against races with
5357 both buffered writes and page faults.
5358
5359 Signed-off-by: Jan Kara <jack@suse.com>
5360 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5361
5362 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
5363 1 file changed, 31 insertions(+), 28 deletions(-)
5364
5365 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
5366 Author: Jan Kara <jack@suse.com>
5367 Date: Mon Dec 7 14:29:17 2015 -0500
5368
5369 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
5370
5371 Currently ext4_alloc_file_blocks() was handling protection against
5372 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
5373 and sometimes not and DIO protection ranks above it (although strictly
5374 speaking this cannot currently create any deadlocks). Also
5375 ext4_zero_range() was actually getting & releasing unlocked DIO
5376 protection twice in some cases. Luckily it didn't introduce any real bug
5377 but it was a land mine waiting to be stepped on. So move DIO protection
5378 out from ext4_alloc_file_blocks() into the two callsites.
5379
5380 Signed-off-by: Jan Kara <jack@suse.com>
5381 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5382
5383 fs/ext4/extents.c | 21 ++++++++++-----------
5384 1 file changed, 10 insertions(+), 11 deletions(-)
5385
5386 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
5387 Author: Jan Kara <jack@suse.com>
5388 Date: Mon Dec 7 14:28:03 2015 -0500
5389
5390 ext4: fix races between page faults and hole punching
5391
5392 Currently, page faults and hole punching are completely unsynchronized.
5393 This can result in page fault faulting in a page into a range that we
5394 are punching after truncate_pagecache_range() has been called and thus
5395 we can end up with a page mapped to disk blocks that will be shortly
5396 freed. Filesystem corruption will shortly follow. Note that the same
5397 race is avoided for truncate by checking page fault offset against
5398 i_size but there isn't similar mechanism available for punching holes.
5399
5400 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
5401 grab it for writing over truncate, hole punching, and other functions
5402 removing blocks from extent tree and for read over page faults. We
5403 cannot easily use i_data_sem for this since that ranks below transaction
5404 start and we need something ranking above it so that it can be held over
5405 the whole truncate / hole punching operation. Also remove various
5406 workarounds we had in the code to reduce race window when page fault
5407 could have created pages with stale mapping information.
5408
5409 Signed-off-by: Jan Kara <jack@suse.com>
5410 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5411
5412 fs/ext4/ext4.h | 10 +++++++++
5413 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
5414 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
5415 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
5416 fs/ext4/super.c | 1 +
5417 fs/ext4/truncate.h | 2 ++
5418 6 files changed, 127 insertions(+), 42 deletions(-)
5419
5420 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
5421 Author: Guenter Roeck <linux@roeck-us.net>
5422 Date: Sat Mar 26 12:28:05 2016 -0700
5423
5424 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
5425
5426 arm:pxa_defconfig can result in the following crash if the max1111 driver
5427 is not instantiated.
5428
5429 Unhandled fault: page domain fault (0x01b) at 0x00000000
5430 pgd = c0004000
5431 [00000000] *pgd=00000000
5432 Internal error: : 1b [#1] PREEMPT ARM
5433 Modules linked in:
5434 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
5435 Hardware name: SHARP Akita
5436 Workqueue: events sharpsl_charge_toggle
5437 task: c390a000 ti: c391e000 task.ti: c391e000
5438 PC is at max1111_read_channel+0x20/0x30
5439 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
5440 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
5441 ...
5442 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
5443 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
5444 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
5445 (spitzpm_read_devdata+0x5c/0xc4)
5446 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
5447 (sharpsl_check_battery_temp+0x78/0x110)
5448 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
5449 (sharpsl_charge_toggle+0x48/0x110)
5450 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
5451 (process_one_work+0x14c/0x48c)
5452 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
5453 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
5454 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
5455
5456 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
5457 module and thus not necessarily loaded. While building SPI_PXA2XX into the
5458 kernel would make the problem disappear, it appears prudent to ensure that
5459 the driver is instantiated before accessing its data structures.
5460
5461 Cc: Arnd Bergmann <arnd@arndb.de>
5462 Cc: stable@vger.kernel.org
5463 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
5464
5465 drivers/hwmon/max1111.c | 6 ++++++
5466 1 file changed, 6 insertions(+)
5467
5468 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
5469 Author: Nicolai Stange <nicstange@gmail.com>
5470 Date: Sun Mar 20 23:23:46 2016 +0100
5471
5472 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
5473
5474 Despite what the DocBook comment to pkcs7_validate_trust() says, the
5475 *_trusted argument is never set to false.
5476
5477 pkcs7_validate_trust() only positively sets *_trusted upon encountering
5478 a trusted PKCS#7 SignedInfo block.
5479
5480 This is quite unfortunate since its callers, system_verify_data() for
5481 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
5482
5483 Indeed, UBSAN splats when attempting to load the uninitialized local
5484 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
5485
5486 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
5487 load of value 82 is not a valid value for type '_Bool'
5488 [...]
5489 Call Trace:
5490 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
5491 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
5492 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
5493 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
5494 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
5495 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
5496 [<ffffffff814b83f0>] ? kfree+0x220/0x370
5497 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
5498 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
5499 [<ffffffff813c391a>] system_verify_data+0xca/0x170
5500 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
5501 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
5502 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
5503 [...]
5504
5505 The implication is that pkcs7_validate_trust() effectively grants trust
5506 when it really shouldn't have.
5507
5508 Fix this by explicitly setting *_trusted to false at the very beginning
5509 of pkcs7_validate_trust().
5510
5511 Cc: <stable@vger.kernel.org>
5512 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5513 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5514
5515 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
5516 1 file changed, 2 insertions(+)
5517
5518 commit 1052826f7352ccc98167129b0b83222f45d50046
5519 Author: Florian Westphal <fw@strlen.de>
5520 Date: Tue Mar 22 18:02:49 2016 +0100
5521
5522 netfilter: x_tables: validate e->target_offset early
5523
5524 We should check that e->target_offset is sane before
5525 mark_source_chains gets called since it will fetch the target entry
5526 for loop detection.
5527
5528 Signed-off-by: Florian Westphal <fw@strlen.de>
5529 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5530
5531 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
5532 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
5533 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
5534 3 files changed, 24 insertions(+), 27 deletions(-)
5535
5536 commit b35d19509e8dab157214e46dd24314663ccf554f
5537 Author: Florian Westphal <fw@strlen.de>
5538 Date: Tue Mar 22 18:02:50 2016 +0100
5539
5540 netfilter: x_tables: make sure e->next_offset covers remaining blob size
5541
5542 Otherwise this function may read data beyond the ruleset blob.
5543
5544 Signed-off-by: Florian Westphal <fw@strlen.de>
5545 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5546
5547 net/ipv4/netfilter/arp_tables.c | 6 ++++--
5548 net/ipv4/netfilter/ip_tables.c | 6 ++++--
5549 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
5550 3 files changed, 12 insertions(+), 6 deletions(-)
5551
5552 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
5553 Author: Florian Westphal <fw@strlen.de>
5554 Date: Tue Mar 22 18:02:52 2016 +0100
5555
5556 netfilter: x_tables: fix unconditional helper
5557
5558 Ben Hawkes says:
5559
5560 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
5561 is possible for a user-supplied ipt_entry structure to have a large
5562 next_offset field. This field is not bounds checked prior to writing a
5563 counter value at the supplied offset.
5564
5565 Problem is that mark_source_chains should not have been called --
5566 the rule doesn't have a next entry, so its supposed to return
5567 an absolute verdict of either ACCEPT or DROP.
5568
5569 However, the function conditional() doesn't work as the name implies.
5570 It only checks that the rule is using wildcard address matching.
5571
5572 However, an unconditional rule must also not be using any matches
5573 (no -m args).
5574
5575 The underflow validator only checked the addresses, therefore
5576 passing the 'unconditional absolute verdict' test, while
5577 mark_source_chains also tested for presence of matches, and thus
5578 proceeeded to the next (not-existent) rule.
5579
5580 Unify this so that all the callers have same idea of 'unconditional rule'.
5581
5582 Reported-by: Ben Hawkes <hawkes@google.com>
5583 Signed-off-by: Florian Westphal <fw@strlen.de>
5584 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5585
5586 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
5587 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
5588 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
5589 3 files changed, 31 insertions(+), 33 deletions(-)
5590
5591 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
5592 Author: Pablo Neira Ayuso <pablo@netfilter.org>
5593 Date: Thu Mar 24 21:29:53 2016 +0100
5594
5595 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
5596
5597 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
5598 in ebtables and all the x_tables variants and their respective compat
5599 code. Uncovered by KASAN.
5600
5601 Reported-by: Baozeng Ding <sploving1@gmail.com>
5602 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5603
5604 net/bridge/netfilter/ebtables.c | 4 ++++
5605 net/ipv4/netfilter/arp_tables.c | 2 ++
5606 net/ipv4/netfilter/ip_tables.c | 2 ++
5607 net/ipv6/netfilter/ip6_tables.c | 2 ++
5608 4 files changed, 10 insertions(+)
5609
5610 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
5611 Author: Nicolai Stange <nicstange@gmail.com>
5612 Date: Fri Mar 25 14:22:14 2016 -0700
5613
5614 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
5615
5616 If
5617 - generic_file_read_iter() gets called with a zero read length,
5618 - the read offset is at a page boundary,
5619 - IOCB_DIRECT is not set
5620 - and the page in question hasn't made it into the page cache yet,
5621 then do_generic_file_read() will trigger a readahead with a req_size hint
5622 of zero.
5623
5624 Since roundup_pow_of_two(0) is undefined, UBSAN reports
5625
5626 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
5627 shift exponent 64 is too large for 64-bit type 'long unsigned int'
5628 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
5629 [...]
5630 Call Trace:
5631 [...]
5632 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
5633 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
5634 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
5635 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
5636 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
5637 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
5638 [...]
5639 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
5640 [...]
5641
5642 when get_init_ra_size() gets called from ondemand_readahead().
5643
5644 The net effect is that the initial readahead size is arch dependent for
5645 requested read lengths of zero: for example, since
5646
5647 1UL << (sizeof(unsigned long) * 8)
5648
5649 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
5650 size becomes 4 on the former and 0 on the latter.
5651
5652 What's more, whether or not the file access timestamp is updated for zero
5653 length reads is decided differently for the two cases of IOCB_DIRECT
5654 being set or cleared: in the first case, generic_file_read_iter()
5655 explicitly skips updating that timestamp while in the latter case, it is
5656 always updated through the call to do_generic_file_read().
5657
5658 According to POSIX, zero length reads "do not modify the last data access
5659 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
5660
5661 Let generic_file_read_iter() unconditionally check the requested read
5662 length at its entry and return immediately with success if it is zero.
5663
5664 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5665 Cc: Al Viro <viro@zeniv.linux.org.uk>
5666 Reviewed-by: Jan Kara <jack@suse.cz>
5667 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5668 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5669
5670 mm/filemap.c | 7 ++++---
5671 1 file changed, 4 insertions(+), 3 deletions(-)
5672
5673 commit 604785419da498d7e876a0191b2e11626db706bb
5674 Author: Oliver Neukum <oneukum@suse.com>
5675 Date: Thu Mar 17 14:00:17 2016 -0700
5676
5677 Input: ims-pcu - sanity check against missing interfaces
5678
5679 A malicious device missing interface can make the driver oops.
5680 Add sanity checking.
5681
5682 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5683 CC: stable@vger.kernel.org
5684 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5685
5686 drivers/input/misc/ims-pcu.c | 4 ++++
5687 1 file changed, 4 insertions(+)
5688
5689 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
5690 Author: Vladis Dronov <vdronov@redhat.com>
5691 Date: Wed Mar 23 11:53:46 2016 -0700
5692
5693 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
5694
5695 The ati_remote2 driver expects at least two interfaces with one
5696 endpoint each. If given malicious descriptor that specify one
5697 interface or no endpoints, it will crash in the probe function.
5698 Ensure there is at least two interfaces and one endpoint for each
5699 interface before using it.
5700
5701 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
5702
5703 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5704 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
5705 Cc: stable@vger.kernel.org
5706 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5707
5708 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
5709 1 file changed, 30 insertions(+), 6 deletions(-)
5710
5711 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
5712 Author: Oliver Neukum <oneukum@suse.com>
5713 Date: Wed Mar 23 14:36:56 2016 -0700
5714
5715 Input: sur40 - fix DMA on stack
5716
5717 During the initialisation the driver uses a buffer on the stack for DMA.
5718 That violates the cache coherency rules. The fix is to allocate the buffer
5719 with kmalloc().
5720
5721 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5722 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5723
5724 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
5725 1 file changed, 14 insertions(+), 7 deletions(-)
5726
5727 commit 015dd03669b2ab646723f6b123377e4ef5694a10
5728 Author: Haiyang Zhang <haiyangz@microsoft.com>
5729 Date: Wed Mar 23 09:43:10 2016 -0700
5730
5731 hv_netvsc: Fix the array sizes to be max supported channels
5732
5733 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
5734 hosts. We use it for the related array sizes instead of using NR_CPUS,
5735 which may be set to several thousands.
5736 This patch reduces possible memory allocation failures.
5737
5738 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5739 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5740 Signed-off-by: David S. Miller <davem@davemloft.net>
5741
5742 drivers/net/hyperv/hyperv_net.h | 7 ++++---
5743 drivers/net/hyperv/rndis_filter.c | 4 ++--
5744 2 files changed, 6 insertions(+), 5 deletions(-)
5745
5746 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
5747 Author: Haiyang Zhang <haiyangz@microsoft.com>
5748 Date: Wed Mar 23 09:43:09 2016 -0700
5749
5750 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
5751
5752 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
5753 the nvdev->num_chn into a temp variable for later usage.
5754
5755 (Please also include this patch into stable branch.)
5756
5757 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5758 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5759 Signed-off-by: David S. Miller <davem@davemloft.net>
5760
5761 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
5762 1 file changed, 4 insertions(+), 1 deletion(-)
5763
5764 commit 7409626e43fe871cede30ac926425938f3ccddaf
5765 Author: Guillaume Nault <g.nault@alphalink.fr>
5766 Date: Wed Mar 23 16:38:55 2016 +0100
5767
5768 ppp: take reference on channels netns
5769
5770 Let channels hold a reference on their network namespace.
5771 Some channel types, like ppp_async and ppp_synctty, can have their
5772 userspace controller running in a different namespace. Therefore they
5773 can't rely on them to preclude their netns from being removed from
5774 under them.
5775
5776 ==================================================================
5777 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
5778 addr ffff880064e217e0
5779 Read of size 8 by task syz-executor/11581
5780 =============================================================================
5781 BUG net_namespace (Not tainted): kasan: bad access detected
5782 -----------------------------------------------------------------------------
5783
5784 Disabling lock debugging due to kernel taint
5785 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
5786 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
5787 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
5788 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
5789 [< inline >] slab_alloc kernel/mm/slub.c:2574
5790 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
5791 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
5792 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
5793 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
5794 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
5795 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
5796 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
5797 [< inline >] copy_process kernel/kernel/fork.c:1274
5798 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
5799 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
5800 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
5801 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
5802
5803 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
5804 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
5805 [< inline >] slab_free kernel/mm/slub.c:2805
5806 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
5807 [< inline >] net_free kernel/net/core/net_namespace.c:341
5808 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
5809 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
5810 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
5811 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
5812 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
5813 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
5814 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
5815 flags=0x5fffc0000004080
5816 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
5817
5818 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
5819 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
5820 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
5821 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
5822 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
5823 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
5824 Call Trace:
5825 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
5826 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
5827 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
5828 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
5829 [< inline >] print_address_description kernel/mm/kasan/report.c:138
5830 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
5831 [< inline >] kasan_report kernel/mm/kasan/report.c:259
5832 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
5833 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
5834 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5835 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
5836 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5837 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
5838 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5839 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
5840 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
5841 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
5842 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
5843 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
5844 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
5845 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
5846 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
5847 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
5848 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
5849 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
5850 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
5851 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
5852 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
5853 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
5854 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
5855 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
5856 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
5857 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
5858 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
5859 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
5860 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
5861 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
5862 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
5863 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
5864 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
5865 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
5866 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
5867 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
5868 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
5869 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
5870 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
5871 Memory state around the buggy address:
5872 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5873 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5874 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5875 ^
5876 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5877 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5878 ==================================================================
5879
5880 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
5881 Reported-by: Baozeng Ding <sploving1@gmail.com>
5882 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
5883 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
5884 Signed-off-by: David S. Miller <davem@davemloft.net>
5885
5886 drivers/net/ppp/ppp_generic.c | 4 +++-
5887 1 file changed, 3 insertions(+), 1 deletion(-)
5888
5889 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
5890 Author: Herbert Xu <herbert@gondor.apana.org.au>
5891 Date: Wed Mar 16 17:06:01 2016 +0800
5892
5893 eCryptfs: Use skcipher and shash
5894
5895 eCryptfs: Fix null pointer dereference on kzalloc error path
5896
5897 The conversion to skcipher and shash added a couple of null pointer
5898 dereference bugs on the kzalloc failure path. This patch fixes them.
5899
5900 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
5901 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
5902 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5903
5904 fs/ecryptfs/keystore.c | 6 ++----
5905 1 file changed, 2 insertions(+), 4 deletions(-)
5906
5907 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
5908 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
5909 Date: Thu Mar 17 10:21:34 2016 +0100
5910
5911 crypto: marvell/cesa - fix memory leak
5912
5913 Crypto requests are not guaranteed to be finalized (->final() call),
5914 and can be freed at any moment, without getting any notification from
5915 the core. This can lead to memory leaks of the ->cache buffer.
5916
5917 Make this buffer part of the request object, and allocate an extra buffer
5918 from the DMA cache pool when doing DMA operations.
5919
5920 As a side effect, this patch also fixes another bug related to cache
5921 allocation and DMA operations. When the core allocates a new request and
5922 import an existing state, a cache buffer can be allocated (depending
5923 on the state). The problem is, at that very moment, we don't know yet
5924 whether the request will use DMA or not, and since everything is
5925 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
5926 should allocate a buffer for standard operation. But when
5927 mv_cesa_ahash_free_cache() is called, req->type has been set to
5928 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
5929 call (the buffer passed in argument has not been allocated from the pool).
5930
5931 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
5932 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
5933 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5934
5935 drivers/crypto/marvell/cesa.h | 3 +-
5936 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
5937 2 files changed, 20 insertions(+), 69 deletions(-)
5938
5939 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
5940 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
5941 Date: Thu Mar 17 10:21:35 2016 +0100
5942
5943 crypto: marvell/cesa - initialize hash states
5944
5945 ->export() might be called before we have done an update operation,
5946 and in this case the ->state field is left uninitialized.
5947 Put the correct default value when initializing the request.
5948
5949 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
5950 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5951
5952 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
5953 1 file changed, 20 insertions(+)
5954
5955 commit 23879f055d23e82c2f78cceca22c33e631973977
5956 Author: David S. Miller <davem@davemloft.net>
5957 Date: Sun Mar 13 23:28:00 2016 -0400
5958
5959 ipv4: Don't do expensive useless work during inetdev destroy.
5960
5961 When an inetdev is destroyed, every address assigned to the interface
5962 is removed. And in this scenerio we do two pointless things which can
5963 be very expensive if the number of assigned interfaces is large:
5964
5965 1) Address promotion. We are deleting all addresses, so there is no
5966 point in doing this.
5967
5968 2) A full nf conntrack table purge for every address. We only need to
5969 do this once, as is already caught by the existing
5970 masq_dev_notifier so masq_inet_event() can skip this.
5971
5972 Reported-by: Solar Designer <solar@openwall.com>
5973 Signed-off-by: David S. Miller <davem@davemloft.net>
5974 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
5975
5976 net/ipv4/devinet.c | 4 ++++
5977 net/ipv4/fib_frontend.c | 4 ++++
5978 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
5979 3 files changed, 18 insertions(+), 2 deletions(-)
5980
5981 commit 60394231e840e884024592a76a6c5612433d3756
5982 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
5983 Date: Tue Mar 8 10:34:28 2016 -0300
5984
5985 sctp: fix copying more bytes than expected in sctp_add_bind_addr
5986
5987 Dmitry reported that sctp_add_bind_addr may read more bytes than
5988 expected in case the parameter is a IPv4 addr supplied by the user
5989 through calls such as sctp_bindx_add(), because it always copies
5990 sizeof(union sctp_addr) while the buffer may be just a struct
5991 sockaddr_in, which is smaller.
5992
5993 This patch then fixes it by limiting the memcpy to the min between the
5994 union size and a (new parameter) provided addr size. Where possible this
5995 parameter still is the size of that union, except for reading from
5996 user-provided buffers, which then it accounts for protocol type.
5997
5998 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5999 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6000 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6001 Signed-off-by: David S. Miller <davem@davemloft.net>
6002
6003 include/net/sctp/structs.h | 2 +-
6004 net/sctp/bind_addr.c | 14 ++++++++------
6005 net/sctp/protocol.c | 1 +
6006 net/sctp/sm_make_chunk.c | 3 ++-
6007 net/sctp/socket.c | 4 +++-
6008 5 files changed, 15 insertions(+), 9 deletions(-)
6009
6010 commit 9831caa50e1453818c5ec618890291f028b7992f
6011 Author: Brad Spengler <spender@grsecurity.net>
6012 Date: Mon Mar 28 19:20:28 2016 -0400
6013
6014 Also allow /bin/false as needed by systemd
6015
6016 kernel/kmod.c | 2 +-
6017 1 file changed, 1 insertion(+), 1 deletion(-)
6018
6019 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
6020 Author: Brad Spengler <spender@grsecurity.net>
6021 Date: Tue Mar 22 16:59:43 2016 -0400
6022
6023 Fix size_overflow FP reported by marcan at:
6024 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
6025
6026 net/ipv6/xfrm6_mode_transport.c | 2 +-
6027 1 file changed, 1 insertion(+), 1 deletion(-)
6028
6029 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
6030 Merge: 0d0ec9e c0b77a7
6031 Author: Brad Spengler <spender@grsecurity.net>
6032 Date: Wed Mar 16 20:20:40 2016 -0400
6033
6034 Merge branch 'pax-test' into grsec-test
6035
6036 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
6037 Merge: 10d57c1 0d19123
6038 Author: Brad Spengler <spender@grsecurity.net>
6039 Date: Wed Mar 16 20:20:27 2016 -0400
6040
6041 Merge branch 'linux-4.4.y' into pax-test
6042
6043 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
6044 Author: Brad Spengler <spender@grsecurity.net>
6045 Date: Mon Mar 14 20:15:47 2016 -0400
6046
6047 Invert logic to clean up code
6048
6049 fs/namei.c | 32 +++++++-------------------------
6050 grsecurity/grsec_chroot.c | 10 +++++-----
6051 2 files changed, 12 insertions(+), 30 deletions(-)
6052
6053 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
6054 Author: Brad Spengler <spender@grsecurity.net>
6055 Date: Mon Mar 14 19:59:36 2016 -0400
6056
6057 compile fix
6058
6059 fs/namei.c | 5 ++---
6060 1 file changed, 2 insertions(+), 3 deletions(-)
6061
6062 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
6063 Author: Brad Spengler <spender@grsecurity.net>
6064 Date: Mon Mar 14 19:57:53 2016 -0400
6065
6066 Also handle renames
6067
6068 fs/namei.c | 9 +++++++++
6069 1 file changed, 9 insertions(+)
6070
6071 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
6072 Author: Brad Spengler <spender@grsecurity.net>
6073 Date: Mon Mar 14 19:45:56 2016 -0400
6074
6075 Add additional check to cover lookup family of functions
6076
6077 fs/namei.c | 9 +++++++++
6078 1 file changed, 9 insertions(+)
6079
6080 commit c3df846baa7873fb99401136f220676b87452918
6081 Author: Brad Spengler <spender@grsecurity.net>
6082 Date: Mon Mar 14 18:42:37 2016 -0400
6083
6084 compile fix
6085
6086 fs/namei.c | 2 +-
6087 1 file changed, 1 insertion(+), 1 deletion(-)
6088
6089 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
6090 Author: Brad Spengler <spender@grsecurity.net>
6091 Date: Mon Mar 14 18:34:40 2016 -0400
6092
6093 Fix recent chroot check on the create side, as reported by
6094 Toralf Foerster
6095
6096 fs/namei.c | 26 ++++++++++++++++----------
6097 1 file changed, 16 insertions(+), 10 deletions(-)
6098
6099 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
6100 Author: Paolo Bonzini <pbonzini@redhat.com>
6101 Date: Tue Mar 8 12:13:39 2016 +0100
6102
6103 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
6104
6105 Yes, all of these are needed. :) This is admittedly a bit odd, but
6106 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
6107 and of course ept=0.
6108
6109 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
6110 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
6111 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
6112 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
6113 restarts execution. This will still cause a user write to fault, while
6114 supervisor writes will succeed. User reads will fault spuriously now,
6115 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
6116 will be enabled and supervisor writes disabled, going back to the
6117 originary situation where supervisor writes fault spuriously.
6118
6119 When SMEP is in effect, however, U=0 will enable kernel execution of
6120 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6121 with U=0. If the guest has not enabled NX, the result is a continuous
6122 stream of page faults due to the NX bit being reserved.
6123
6124 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
6125 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
6126 control, so they do not use user-return notifiers for EFER---if they did,
6127 EFER.NX would be forced to the same value as the host).
6128
6129 There is another bug in the reserved bit check, which I've split to a
6130 separate patch for easier application to stable kernels.
6131
6132 Cc: stable@vger.kernel.org
6133 Cc: Andy Lutomirski <luto@amacapital.net>
6134 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
6135 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
6136 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6137
6138 Documentation/virtual/kvm/mmu.txt | 3 ++-
6139 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
6140 2 files changed, 25 insertions(+), 14 deletions(-)
6141
6142 commit 802a88e57b141e9643e93afb7805813ad8da22f3
6143 Author: Paolo Bonzini <pbonzini@redhat.com>
6144 Date: Wed Mar 9 14:28:02 2016 +0100
6145
6146 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
6147
6148 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
6149 CR0.WP=1. These pages' SPTEs flip continuously between two states:
6150 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
6151 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
6152
6153 When SMEP is in effect, however, U=0 will enable kernel execution of
6154 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6155 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
6156 When guest EFER has the NX bit cleared, the reserved bit check thinks
6157 that the latter state is invalid; teach it that the smep_andnot_wp case
6158 will also use the NX bit of SPTEs.
6159
6160 Cc: stable@vger.kernel.org
6161 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
6162 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
6163 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6164
6165 arch/x86/kvm/mmu.c | 4 +++-
6166 1 file changed, 3 insertions(+), 1 deletion(-)
6167
6168 commit 3925851224428c1d2bca32cf33821befb947c4f3
6169 Author: Ming Lei <ming.lei@canonical.com>
6170 Date: Sat Mar 12 22:56:19 2016 +0800
6171
6172 block: don't optimize for non-cloned bio in bio_get_last_bvec()
6173
6174 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
6175 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
6176 because the start postion may have been moved in the middle of
6177 the bvec, such as splitting in the middle of bvec.
6178
6179 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
6180 Cc: stable@vger.kernel.org
6181 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
6182 Signed-off-by: Ming Lei <ming.lei@canonical.com>
6183 Signed-off-by: Jens Axboe <axboe@fb.com>
6184
6185 include/linux/bio.h | 5 -----
6186 1 file changed, 5 deletions(-)
6187
6188 commit db541463b4a0926bebdbac743c8736fb9e903d58
6189 Author: Borislav Petkov <bp@alien8.de>
6190 Date: Fri Mar 11 12:32:06 2016 +0100
6191
6192 x86/fpu: Fix eager-FPU handling on legacy FPU machines
6193
6194 i486 derived cores like Intel Quark support only the very old,
6195 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
6196 our FPU code wasn't handling the saving and restoring there
6197 properly in the 'eagerfpu' case.
6198
6199 So after we made eagerfpu the default for all CPU types:
6200
6201 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
6202
6203 these old FPU designs broke. First, Andy Shevchenko reported a splat:
6204
6205 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
6206
6207 which was us trying to execute FXRSTOR on those machines even though
6208 they don't support it.
6209
6210 After taking care of that, Bryan O'Donoghue reported that a simple FPU
6211 test still failed because we weren't initializing the FPU state properly
6212 on those machines.
6213
6214 Take care of all that.
6215
6216 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
6217 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
6218 Signed-off-by: Borislav Petkov <bp@suse.de>
6219 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
6220 Cc: Andrew Morton <akpm@linux-foundation.org>
6221 Cc: Andy Lutomirski <luto@amacapital.net>
6222 Cc: Borislav Petkov <bp@alien8.de>
6223 Cc: Brian Gerst <brgerst@gmail.com>
6224 Cc: Dave Hansen <dave.hansen@linux.intel.com>
6225 Cc: Denys Vlasenko <dvlasenk@redhat.com>
6226 Cc: Fenghua Yu <fenghua.yu@intel.com>
6227 Cc: H. Peter Anvin <hpa@zytor.com>
6228 Cc: Oleg Nesterov <oleg@redhat.com>
6229 Cc: Peter Zijlstra <peterz@infradead.org>
6230 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6231 Cc: Thomas Gleixner <tglx@linutronix.de>
6232 Cc: Yu-cheng <yu-cheng.yu@intel.com>
6233 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
6234 Signed-off-by: Ingo Molnar <mingo@kernel.org>
6235
6236 arch/x86/kernel/fpu/core.c | 4 +++-
6237 arch/x86/kernel/fpu/init.c | 2 +-
6238 2 files changed, 4 insertions(+), 2 deletions(-)
6239
6240 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
6241 Author: Brad Spengler <spender@grsecurity.net>
6242 Date: Sun Mar 13 11:35:56 2016 -0400
6243
6244 Compile fixes
6245
6246 fs/namei.c | 2 +-
6247 grsecurity/grsec_chroot.c | 2 +-
6248 include/linux/grsecurity.h | 2 +-
6249 3 files changed, 3 insertions(+), 3 deletions(-)
6250
6251 commit aab25a3496c4683c5858056960010119fb7d9a5a
6252 Author: Brad Spengler <spender@grsecurity.net>
6253 Date: Sun Mar 13 10:53:59 2016 -0400
6254
6255 Use fput instead of put_filp()
6256
6257 fs/namei.c | 4 ++--
6258 1 file changed, 2 insertions(+), 2 deletions(-)
6259
6260 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
6261 Author: Brad Spengler <spender@grsecurity.net>
6262 Date: Sun Mar 13 10:30:54 2016 -0400
6263
6264 Update MPROTECT_COMPAT config description, disable by default
6265
6266 security/Kconfig | 18 ++++++------------
6267 1 file changed, 6 insertions(+), 12 deletions(-)
6268
6269 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
6270 Author: Brad Spengler <spender@grsecurity.net>
6271 Date: Sun Mar 13 10:35:55 2016 -0400
6272
6273 As reported by Jann Horn, chroot scenarios where the chrooting application
6274 brings in a directory fd can be used to access any file outside of the chroot
6275 via *at syscalls. To maintain compatibility with Chromium and other apps,
6276 we specifically only disallow relative accesses off a directory fd when the
6277 final path is not located under that directory described by the fd and exists
6278 outside of the chroot. This additional restriction will exist under the
6279 current GRKERNSEC_CHROOT_FCHDIR option.
6280
6281 fs/namei.c | 9 +++++++++
6282 grsecurity/Kconfig | 10 ++++++----
6283 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
6284 include/linux/grmsg.h | 1 +
6285 include/linux/grsecurity.h | 1 +
6286 5 files changed, 56 insertions(+), 4 deletions(-)
6287
6288 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
6289 Author: Brad Spengler <spender@grsecurity.net>
6290 Date: Thu Mar 10 22:17:16 2016 -0500
6291
6292 Update size_overflow hash table
6293
6294 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6295 1 file changed, 1 insertion(+)
6296
6297 commit 29f25ddda6a5625340df26beb394279fefea2b49
6298 Author: Brad Spengler <spender@grsecurity.net>
6299 Date: Thu Mar 10 22:16:04 2016 -0500
6300
6301 Fix module support
6302
6303 kernel/module.c | 3 ++-
6304 1 file changed, 2 insertions(+), 1 deletion(-)
6305
6306 commit b057a45636b626e7eaf03077ed0916b95fea054c
6307 Merge: ba5ee94 10d57c1
6308 Author: Brad Spengler <spender@grsecurity.net>
6309 Date: Thu Mar 10 21:36:10 2016 -0500
6310
6311 Merge branch 'pax-test' into grsec-test
6312
6313 commit 10d57c107e7fabffbe616b14efab73df585576c2
6314 Merge: 1cbae46 62e2195
6315 Author: Brad Spengler <spender@grsecurity.net>
6316 Date: Thu Mar 10 21:34:58 2016 -0500
6317
6318 Update to pax-linux-4.4.5-test9.patch:
6319 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
6320 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
6321 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
6322 - compile the x86 vdso without plugins, reported by Emese
6323 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
6324 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
6325
6326 Merge branch 'linux-4.4.y' into pax-test
6327
6328 commit ba5ee94199b11c1429559a08c2158677dd8f1761
6329 Author: Brad Spengler <spender@grsecurity.net>
6330 Date: Thu Mar 3 20:20:19 2016 -0500
6331
6332 Update size_overflow hash table
6333
6334 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6335 1 file changed, 1 insertion(+)
6336
6337 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
6338 Merge: 335c04c 1cbae46
6339 Author: Brad Spengler <spender@grsecurity.net>
6340 Date: Thu Mar 3 20:04:00 2016 -0500
6341
6342 Merge branch 'pax-test' into grsec-test
6343
6344 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
6345 Merge: a51cdb8 c252409
6346 Author: Brad Spengler <spender@grsecurity.net>
6347 Date: Thu Mar 3 19:57:43 2016 -0500
6348
6349 Merge branch 'linux-4.4.y' into pax-test
6350
6351 commit 335c04c8146a696a6101a9c69dbd47f11383549e
6352 Merge: 897877e a51cdb8
6353 Author: Brad Spengler <spender@grsecurity.net>
6354 Date: Tue Mar 1 17:57:24 2016 -0500
6355
6356 Merge branch 'pax-test' into grsec-test
6357
6358 commit a51cdb83569b450858737a30d2be043d87d7ddc1
6359 Author: Brad Spengler <spender@grsecurity.net>
6360 Date: Tue Mar 1 17:56:43 2016 -0500
6361
6362 Update to pax-linux-4.4.3-test6.patch:
6363 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
6364 - fixed a few section mismatches on notifier_block variables
6365 - fixed a few REFCOUNT false positives found by Emese's plugin
6366 - constified hypervisor_x86
6367
6368 arch/x86/include/asm/hypervisor.h | 2 +-
6369 arch/x86/kernel/cpu/mshyperv.c | 2 +-
6370 arch/x86/kernel/cpu/vmware.c | 2 +-
6371 arch/x86/kernel/kvm.c | 2 +-
6372 drivers/lightnvm/rrpc.c | 4 ++--
6373 drivers/lightnvm/rrpc.h | 2 +-
6374 drivers/net/can/led.c | 2 +-
6375 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
6376 drivers/net/ethernet/rocker/rocker.c | 4 ++--
6377 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
6378 drivers/net/vrf.c | 2 +-
6379 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
6380 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
6381 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
6382 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
6383 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
6384 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
6385 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
6386 fs/proc/kcore.c | 2 +-
6387 mm/hugetlb_cgroup.c | 8 ++++----
6388 mm/mm_init.c | 2 +-
6389 mm/slub.c | 2 +-
6390 net/mac802154/iface.c | 2 +-
6391 23 files changed, 41 insertions(+), 41 deletions(-)
6392
6393 commit 897877e79629a0b854e98cb666a9d898256d45a7
6394 Merge: 1ffa5d5 4f4b213
6395 Author: Brad Spengler <spender@grsecurity.net>
6396 Date: Sun Feb 28 20:54:59 2016 -0500
6397
6398 Merge branch 'pax-test' into grsec-test
6399
6400 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
6401 Author: Brad Spengler <spender@grsecurity.net>
6402 Date: Sun Feb 28 20:54:06 2016 -0500
6403
6404 Update to pax-linux-4.4.3-test5.patch:
6405 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
6406 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
6407 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
6408 - added a generator for SIMPLE_IPA passes as well
6409
6410 include/linux/cgroup-defs.h | 2 +-
6411 include/linux/hugetlb.h | 2 +-
6412 include/linux/hugetlb_cgroup.h | 11 ++
6413 include/net/xfrm.h | 2 +-
6414 kernel/cgroup.c | 29 ++--
6415 mm/hugetlb.c | 55 ++++++-
6416 mm/hugetlb_cgroup.c | 60 ++-----
6417 mm/mmap.c | 38 ++---
6418 net/xfrm/xfrm_state.c | 4 +-
6419 tools/gcc/constify_plugin.c | 5 +-
6420 tools/gcc/gcc-common.h | 42 +++--
6421 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
6422 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
6423 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
6424 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
6425 tools/gcc/size_overflow_plugin/.gitignore | 1 +
6426 .../disable_size_overflow_hash.data | 7 +-
6427 .../size_overflow_plugin/size_overflow_hash.data | 3 -
6428 18 files changed, 385 insertions(+), 146 deletions(-)
6429
6430 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
6431 Author: Brad Spengler <spender@grsecurity.net>
6432 Date: Sun Feb 28 20:43:02 2016 -0500
6433
6434 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
6435 enabled
6436
6437 grsecurity/grsec_sig.c | 3 +--
6438 1 file changed, 1 insertion(+), 2 deletions(-)
6439
6440 commit cfdb373a77c88d01c1539e605e28143af5981571
6441 Author: Brad Spengler <spender@grsecurity.net>
6442 Date: Sun Feb 28 19:12:39 2016 -0500
6443
6444 compile fix
6445
6446 grsecurity/gracl_segv.c | 2 +-
6447 grsecurity/grsec_sig.c | 2 +-
6448 2 files changed, 2 insertions(+), 2 deletions(-)
6449
6450 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
6451 Author: Brad Spengler <spender@grsecurity.net>
6452 Date: Sun Feb 28 18:24:50 2016 -0500
6453
6454 Update the daemon check in handling of anti-bruteforcing of suid binaries
6455 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
6456 could create unprivileged copies of the suid binary via ptrace, inject
6457 code into them, and fork+exec a privileged copy. A crash then in the
6458 privileged copy would trigger the daemon detection which could be avoided
6459 by simply terminating the original process. Defeat this by using our
6460 is_privileged_binary() function against the task's mm->binfmt->file to detect
6461 an fscaps-enabled or suid/sgid binary being involved.
6462
6463 Also update the RBAC RES_CRASH code to use is_privileged_binary().
6464
6465 grsecurity/gracl_segv.c | 15 +--------------
6466 grsecurity/grsec_sig.c | 3 ++-
6467 2 files changed, 3 insertions(+), 15 deletions(-)
6468
6469 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
6470 Author: Brad Spengler <spender@grsecurity.net>
6471 Date: Sun Feb 28 15:06:32 2016 -0500
6472
6473 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
6474 could dump out an unreadable suid binary by creating a script that used
6475 that binary as an interpreter.
6476
6477 fs/exec.c | 14 +++++++++-----
6478 1 file changed, 9 insertions(+), 5 deletions(-)
6479
6480 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
6481 Merge: 2d35d52 8327ee6
6482 Author: Brad Spengler <spender@grsecurity.net>
6483 Date: Thu Feb 25 18:44:11 2016 -0500
6484
6485 Merge branch 'pax-test' into grsec-test
6486
6487 Conflicts:
6488 fs/proc/base.c
6489 kernel/ptrace.c
6490 mm/process_vm_access.c
6491
6492 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
6493 Merge: 09d53c7 2134d97
6494 Author: Brad Spengler <spender@grsecurity.net>
6495 Date: Thu Feb 25 18:36:46 2016 -0500
6496
6497 Merge branch 'linux-4.4.y' into pax-test
6498
6499 Conflicts:
6500 mm/mmap.c
6501
6502 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
6503 Author: Brad Spengler <spender@grsecurity.net>
6504 Date: Wed Feb 24 07:59:12 2016 -0500
6505
6506 Remove /proc/pid/map_files which we had previously prevented via
6507 an inverted dependency on checkpoint/restart, but clearly should have
6508 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
6509 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
6510 processes of the same UID. Thanks to Mathias Krause for the report!
6511
6512 fs/proc/base.c | 2 ++
6513 1 file changed, 2 insertions(+)
6514
6515 commit e4f1e517092222aa28179b20e14c0ddfb2796049
6516 Author: Brad Spengler <spender@grsecurity.net>
6517 Date: Thu Feb 18 19:32:39 2016 -0500
6518
6519 Update size_overflow hash table
6520
6521 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
6522 1 file changed, 131 insertions(+), 27 deletions(-)
6523
6524 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
6525 Author: Brad Spengler <spender@grsecurity.net>
6526 Date: Thu Feb 18 18:52:37 2016 -0500
6527
6528 Update size_overflow hash table
6529
6530 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
6531 1 file changed, 237 insertions(+), 56 deletions(-)
6532
6533 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
6534 Author: Brad Spengler <spender@grsecurity.net>
6535 Date: Thu Feb 18 18:23:03 2016 -0500
6536
6537 compile fix
6538
6539 tools/gcc/randomize_layout_plugin.c | 2 +-
6540 1 file changed, 1 insertion(+), 1 deletion(-)
6541
6542 commit 024d2af98b755712daff6ed7c49af921da4e8883
6543 Author: Brad Spengler <spender@grsecurity.net>
6544 Date: Thu Feb 18 18:19:47 2016 -0500
6545
6546 compile fix
6547
6548 tools/gcc/randomize_layout_plugin.c | 2 +-
6549 1 file changed, 1 insertion(+), 1 deletion(-)
6550
6551 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
6552 Author: Brad Spengler <spender@grsecurity.net>
6553 Date: Thu Feb 18 18:16:32 2016 -0500
6554
6555 compile fix
6556
6557 tools/gcc/randomize_layout_plugin.c | 9 +++++----
6558 1 file changed, 5 insertions(+), 4 deletions(-)
6559
6560 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
6561 Author: Brad Spengler <spender@grsecurity.net>
6562 Date: Thu Feb 18 17:54:51 2016 -0500
6563
6564 Compile fix
6565
6566 tools/gcc/randomize_layout_plugin.c | 2 +-
6567 1 file changed, 1 insertion(+), 1 deletion(-)
6568
6569 commit 13823395101c4228ecded4b624583389ee13bfb3
6570 Author: Brad Spengler <spender@grsecurity.net>
6571 Date: Thu Feb 18 17:35:21 2016 -0500
6572
6573 compile fix
6574
6575 Makefile | 5 +----
6576 1 file changed, 1 insertion(+), 4 deletions(-)
6577
6578 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
6579 Merge: 45cbb7e 09d53c7
6580 Author: Brad Spengler <spender@grsecurity.net>
6581 Date: Thu Feb 18 16:40:51 2016 -0500
6582
6583 Merge branch 'pax-test' into grsec-test
6584
6585 Conflicts:
6586 Makefile
6587 include/linux/genl_magic_struct.h
6588 scripts/mod/modpost.c
6589 tools/gcc/size_overflow_plugin/size_overflow_hash.data
6590
6591 commit 09d53c74140e87e886a28980cedbb7e771f2a356
6592 Author: Brad Spengler <spender@grsecurity.net>
6593 Date: Thu Feb 18 16:24:02 2016 -0500
6594
6595 Update to pax-linux-4.4.2-test4.patch:
6596 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
6597 - moved gcc plugin related makefile bits into a separate file, by Emese
6598 - changed modpost to report writable function pointers separately
6599 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
6600 - reduced the size of the compat syscall entry points on amd64
6601 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
6602 - Emese regenerated the size overflow hash table for 4.4
6603 - all plugins now use the new pass generator headers
6604
6605 Makefile | 73 +-
6606 arch/x86/entry/entry_64.S | 2 +-
6607 arch/x86/entry/entry_64_compat.S | 48 +-
6608 fs/exec.c | 3 +
6609 include/linux/genl_magic_struct.h | 4 +-
6610 include/linux/memcontrol.h | 2 +-
6611 ipc/shm.c | 2 +-
6612 mm/memcontrol.c | 6 +-
6613 scripts/Makefile.extrawarn | 4 +
6614 scripts/Makefile.gcc-plugins | 69 +
6615 scripts/mod/modpost.c | 15 +-
6616 tools/gcc/checker_plugin.c | 71 +-
6617 tools/gcc/colorize_plugin.c | 65 +-
6618 tools/gcc/constify_plugin.c | 65 +-
6619 tools/gcc/gcc-generate-gimple-pass.h | 172 +
6620 tools/gcc/gcc-generate-ipa-pass.h | 286 +
6621 tools/gcc/gcc-generate-rtl-pass.h | 172 +
6622 tools/gcc/initify_plugin.c | 74 +-
6623 tools/gcc/kallocstat_plugin.c | 65 +-
6624 tools/gcc/kernexec_plugin.c | 184 +-
6625 tools/gcc/latent_entropy_plugin.c | 71 +-
6626 tools/gcc/randomize_layout_seed.h | 1 -
6627 .../disable_size_overflow_hash.h | 152601 ------------------
6628 .../insert_size_overflow_asm.c | 71 +-
6629 .../size_overflow_plugin/intentional_overflow.c | 6 +-
6630 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
6631 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
6632 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
6633 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
6634 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
6635 .../size_overflow_transform_core.c | 2 +-
6636 tools/gcc/stackleak_plugin.c | 132 +-
6637 tools/gcc/structleak_plugin.c | 67 +-
6638 33 files changed, 2238 insertions(+), 155123 deletions(-)
6639
6640 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
6641 Merge: 3b5448b 0c85110
6642 Author: Brad Spengler <spender@grsecurity.net>
6643 Date: Wed Feb 17 19:11:25 2016 -0500
6644
6645 Merge branch 'pax-test' into grsec-test
6646
6647 commit 0c851109f683896aaff8a310bbfa943272b47516
6648 Merge: 6cb4f49 1cb8570
6649 Author: Brad Spengler <spender@grsecurity.net>
6650 Date: Wed Feb 17 19:11:21 2016 -0500
6651
6652 Merge branch 'linux-4.4.y' into pax-test
6653
6654 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
6655 Author: Brad Spengler <spender@grsecurity.net>
6656 Date: Mon Feb 15 18:02:40 2016 -0500
6657
6658 Fix a drbd bug reported by iamb on the forums:
6659 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
6660 which caused a size_overflow report
6661
6662 include/linux/genl_magic_struct.h | 4 ++--
6663 1 file changed, 2 insertions(+), 2 deletions(-)
6664
6665 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
6666 Author: Brad Spengler <spender@grsecurity.net>
6667 Date: Mon Feb 15 13:20:38 2016 -0500
6668
6669 compile fix
6670
6671 drivers/staging/wilc1000/host_interface.h | 1 +
6672 1 file changed, 1 insertion(+)
6673
6674 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
6675 Author: Brad Spengler <spender@grsecurity.net>
6676 Date: Mon Feb 15 12:54:52 2016 -0500
6677
6678 Update size_overflow hash table
6679
6680 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
6681 1 file changed, 17 insertions(+), 4 deletions(-)
6682
6683 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
6684 Author: Brad Spengler <spender@grsecurity.net>
6685 Date: Mon Feb 15 12:53:54 2016 -0500
6686
6687 compile fix
6688
6689 drivers/staging/wilc1000/wilc_spi.c | 1 -
6690 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
6691 2 files changed, 1 insertion(+), 2 deletions(-)
6692
6693 commit a9dd4481db099082967585be8e153899e5fd24c7
6694 Author: Brad Spengler <spender@grsecurity.net>
6695 Date: Mon Feb 15 12:52:32 2016 -0500
6696
6697 compile fix
6698
6699 fs/proc/fd.c | 2 --
6700 1 file changed, 2 deletions(-)
6701
6702 commit 5acb4fa0063460807096429f073181d1c5a3e566
6703 Author: Brad Spengler <spender@grsecurity.net>
6704 Date: Mon Feb 15 12:32:13 2016 -0500
6705
6706 Update size_overflow hash table
6707
6708 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
6709 1 file changed, 182 insertions(+), 42 deletions(-)
6710
6711 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
6712 Author: Brad Spengler <spender@grsecurity.net>
6713 Date: Mon Feb 15 12:31:16 2016 -0500
6714
6715 compile fix
6716
6717 drivers/staging/wilc1000/wilc_spi.c | 1 +
6718 1 file changed, 1 insertion(+)
6719
6720 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
6721 Author: Brad Spengler <spender@grsecurity.net>
6722 Date: Mon Feb 15 12:28:36 2016 -0500
6723
6724 RANDSTRUCT compile fix
6725
6726 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
6727 1 file changed, 16 insertions(+), 16 deletions(-)
6728
6729 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
6730 Author: Brad Spengler <spender@grsecurity.net>
6731 Date: Mon Feb 15 12:24:49 2016 -0500
6732
6733 RANDSTRUCT compile fix
6734
6735 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
6736 1 file changed, 17 insertions(+), 17 deletions(-)
6737
6738 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
6739 Author: Hariprasad S <hariprasad@chelsio.com>
6740 Date: Fri Dec 11 13:59:17 2015 +0530
6741
6742 iw_cxgb3: Fix incorrectly returning error on success
6743
6744 The cxgb3_*_send() functions return NET_XMIT_ values, which are
6745 positive integers values. So don't treat positive return values
6746 as an error.
6747
6748 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
6749 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
6750 Signed-off-by: Doug Ledford <dledford@redhat.com>
6751
6752 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
6753 1 file changed, 2 insertions(+), 2 deletions(-)
6754
6755 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
6756 Author: Daniel Borkmann <daniel@iogearbox.net>
6757 Date: Wed Feb 10 16:47:11 2016 +0100
6758
6759 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
6760
6761 When ctx access is used, the kernel often needs to expand/rewrite
6762 instructions, so after that patching, branch offsets have to be
6763 adjusted for both forward and backward jumps in the new eBPF program,
6764 but for backward jumps it fails to account the delta. Meaning, for
6765 example, if the expansion happens exactly on the insn that sits at
6766 the jump target, it doesn't fix up the back jump offset.
6767
6768 Analysis on what the check in adjust_branches() is currently doing:
6769
6770 /* adjust offset of jmps if necessary */
6771 if (i < pos && i + insn->off + 1 > pos)
6772 insn->off += delta;
6773 else if (i > pos && i + insn->off + 1 < pos)
6774 insn->off -= delta;
6775
6776 First condition (forward jumps):
6777
6778 Before: After:
6779
6780 insns[0] insns[0]
6781 insns[1] <--- i/insn insns[1] <--- i/insn
6782 insns[2] <--- pos insns[P] <--- pos
6783 insns[3] insns[P] `------| delta
6784 insns[4] <--- target_X insns[P] `-----|
6785 insns[5] insns[3]
6786 insns[4] <--- target_X
6787 insns[5]
6788
6789 First case is if we cross pos-boundary and the jump instruction was
6790 before pos. This is handeled correctly. I.e. if i == pos, then this
6791 would mean our jump that we currently check was the patchlet itself
6792 that we just injected. Since such patchlets are self-contained and
6793 have no awareness of any insns before or after the patched one, the
6794 delta is correctly not adjusted. Also, for the second condition in
6795 case of i + insn->off + 1 == pos, means we jump to that newly patched
6796 instruction, so no offset adjustment are needed. That part is correct.
6797
6798 Second condition (backward jumps):
6799
6800 Before: After:
6801
6802 insns[0] insns[0]
6803 insns[1] <--- target_X insns[1] <--- target_X
6804 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
6805 insns[3] insns[P] `------| delta
6806 insns[4] <--- i/insn insns[P] `-----|
6807 insns[5] insns[3]
6808 insns[4] <--- i/insn
6809 insns[5]
6810
6811 Second interesting case is where we cross pos-boundary and the jump
6812 instruction was after pos. Backward jump with i == pos would be
6813 impossible and pose a bug somewhere in the patchlet, so the first
6814 condition checking i > pos is okay only by itself. However, i +
6815 insn->off + 1 < pos does not always work as intended to trigger the
6816 adjustment. It works when jump targets would be far off where the
6817 delta wouldn't matter. But, for example, where the fixed insn->off
6818 before pointed to pos (target_Y), it now points to pos + delta, so
6819 that additional room needs to be taken into account for the check.
6820 This means that i) both tests here need to be adjusted into pos + delta,
6821 and ii) for the second condition, the test needs to be <= as pos
6822 itself can be a target in the backjump, too.
6823
6824 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
6825 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
6826 Signed-off-by: David S. Miller <davem@davemloft.net>
6827
6828 kernel/bpf/verifier.c | 2 +-
6829 1 file changed, 1 insertion(+), 1 deletion(-)
6830
6831 commit 61b513b644116e77313addf65970db58f4981608
6832 Author: Ryan Ware <ware@linux.intel.com>
6833 Date: Thu Feb 11 15:58:44 2016 -0800
6834
6835 EVM: Use crypto_memneq() for digest comparisons
6836
6837 This patch fixes vulnerability CVE-2016-2085. The problem exists
6838 because the vm_verify_hmac() function includes a use of memcmp().
6839 Unfortunately, this allows timing side channel attacks; specifically
6840 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
6841 the memcmp() to the cryptographically safe crypto_memneq().
6842
6843 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
6844 Signed-off-by: Ryan Ware <ware@linux.intel.com>
6845 Cc: stable@vger.kernel.org
6846 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
6847 Signed-off-by: James Morris <james.l.morris@oracle.com>
6848
6849 security/integrity/evm/evm_main.c | 3 ++-
6850 1 file changed, 2 insertions(+), 1 deletion(-)
6851
6852 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
6853 Author: Michael McConville <mmcco@mykolab.com>
6854 Date: Fri Feb 5 20:46:25 2016 -0500
6855
6856 dscc4: Undefined signed int shift
6857
6858 My analysis in the below mail applies, although the second part is
6859 unnecessary because i isn't used in arithmetic operations here:
6860
6861 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
6862
6863 Thanks for your time.
6864
6865 Signed-off-by: Michael McConville <mmcco@mykolab.com>
6866 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
6867 Signed-off-by: David S. Miller <davem@davemloft.net>
6868
6869 drivers/net/wan/dscc4.c | 2 +-
6870 1 file changed, 1 insertion(+), 1 deletion(-)
6871
6872 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
6873 Author: Andrey Konovalov <andreyknvl@gmail.com>
6874 Date: Sat Feb 13 11:08:06 2016 +0300
6875
6876 ALSA: usb-audio: avoid freeing umidi object twice
6877
6878 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
6879 when tearing down the rawmidi interface. So we shouldn't try to free it
6880 in snd_usbmidi_create() after having registered the rawmidi interface.
6881
6882 Found by KASAN.
6883
6884 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
6885 Acked-by: Clemens Ladisch <clemens@ladisch.de>
6886 Cc: <stable@vger.kernel.org>
6887 Signed-off-by: Takashi Iwai <tiwai@suse.de>
6888
6889 sound/usb/midi.c | 1 -
6890 1 file changed, 1 deletion(-)
6891
6892 commit ed3a8ab1976674d56e258da93639e61f1446e703
6893 Author: zengtao <prime.zeng@huawei.com>
6894 Date: Tue Feb 2 11:38:34 2016 +0800
6895
6896 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
6897
6898 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
6899 overflows in the timeval/timespec to cputime conversion.
6900
6901 Currently the following functions are affected:
6902 1. setitimer()
6903 2. timer_create/timer_settime()
6904 3. sys_clock_nanosleep
6905
6906 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
6907 enabled, which is required for CONFIG_NO_HZ_FULL.
6908
6909 Enforce u64 conversion to prevent the overflow.
6910
6911 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
6912 Signed-off-by: zengtao <prime.zeng@huawei.com>
6913 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
6914 Cc: <fweisbec@gmail.com>
6915 Cc: stable@vger.kernel.org
6916 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
6917 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
6918
6919 include/asm-generic/cputime_nsecs.h | 5 +++--
6920 1 file changed, 3 insertions(+), 2 deletions(-)
6921
6922 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
6923 Author: Brad Spengler <spender@grsecurity.net>
6924 Date: Mon Feb 15 11:55:18 2016 -0500
6925
6926 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
6927 count as actual mismatches
6928
6929 scripts/mod/modpost.c | 3 ++-
6930 1 file changed, 2 insertions(+), 1 deletion(-)
6931
6932 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
6933 Author: Brad Spengler <spender@grsecurity.net>
6934 Date: Mon Feb 15 11:44:36 2016 -0500
6935
6936 Compile fix
6937
6938 tools/gcc/randomize_layout_seed.h | 1 -
6939 1 file changed, 1 deletion(-)
6940
6941 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
6942 Author: Brad Spengler <spender@grsecurity.net>
6943 Date: Mon Feb 15 11:27:32 2016 -0500
6944
6945 disable USELIB
6946
6947 init/Kconfig | 3 ++-
6948 1 file changed, 2 insertions(+), 1 deletion(-)
6949
6950 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
6951 Author: Brad Spengler <spender@grsecurity.net>
6952 Date: Mon Feb 15 11:23:56 2016 -0500
6953
6954 compile fix
6955
6956 fs/proc/fd.c | 2 +-
6957 1 file changed, 1 insertion(+), 1 deletion(-)
6958
6959 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
6960 Author: Brad Spengler <spender@grsecurity.net>
6961 Date: Mon Feb 15 11:19:26 2016 -0500
6962
6963 Initial import of grsecurity for Linux 4.4.1
6964
6965 Documentation/dontdiff | 2 +
6966 Documentation/kernel-parameters.txt | 11 +
6967 Documentation/sysctl/fs.txt | 23 +
6968 Documentation/sysctl/kernel.txt | 15 +
6969 Makefile | 18 +-
6970 arch/alpha/include/asm/cache.h | 4 +-
6971 arch/alpha/kernel/osf_sys.c | 12 +-
6972 arch/arc/Kconfig | 1 +
6973 arch/arm/Kconfig | 1 +
6974 arch/arm/Kconfig.debug | 1 +
6975 arch/arm/include/asm/thread_info.h | 7 +-
6976 arch/arm/kernel/entry-common.S | 8 +-
6977 arch/arm/kernel/process.c | 4 +-
6978 arch/arm/kernel/ptrace.c | 9 +
6979 arch/arm/kernel/traps.c | 7 +-
6980 arch/arm/mm/Kconfig | 4 +-
6981 arch/arm/mm/fault.c | 40 +-
6982 arch/arm/mm/mmap.c | 8 +-
6983 arch/arm/net/bpf_jit_32.c | 51 +-
6984 arch/arm64/Kconfig.debug | 1 +
6985 arch/avr32/include/asm/cache.h | 4 +-
6986 arch/blackfin/Kconfig.debug | 1 +
6987 arch/blackfin/include/asm/cache.h | 3 +-
6988 arch/cris/include/arch-v10/arch/cache.h | 3 +-
6989 arch/cris/include/arch-v32/arch/cache.h | 3 +-
6990 arch/frv/include/asm/cache.h | 3 +-
6991 arch/frv/mm/elf-fdpic.c | 4 +-
6992 arch/hexagon/include/asm/cache.h | 6 +-
6993 arch/ia64/Kconfig | 1 +
6994 arch/ia64/include/asm/cache.h | 3 +-
6995 arch/ia64/kernel/sys_ia64.c | 2 +
6996 arch/ia64/mm/hugetlbpage.c | 2 +
6997 arch/m32r/include/asm/cache.h | 4 +-
6998 arch/m68k/include/asm/cache.h | 4 +-
6999 arch/metag/mm/hugetlbpage.c | 1 +
7000 arch/microblaze/include/asm/cache.h | 3 +-
7001 arch/mips/Kconfig | 1 +
7002 arch/mips/include/asm/cache.h | 3 +-
7003 arch/mips/include/asm/thread_info.h | 11 +-
7004 arch/mips/kernel/irq.c | 3 +
7005 arch/mips/kernel/ptrace.c | 9 +
7006 arch/mips/mm/mmap.c | 4 +-
7007 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
7008 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
7009 arch/openrisc/include/asm/cache.h | 4 +-
7010 arch/parisc/include/asm/cache.h | 3 +
7011 arch/parisc/kernel/sys_parisc.c | 4 +
7012 arch/powerpc/Kconfig | 1 +
7013 arch/powerpc/include/asm/cache.h | 4 +-
7014 arch/powerpc/include/asm/thread_info.h | 5 +-
7015 arch/powerpc/kernel/Makefile | 2 +
7016 arch/powerpc/kernel/irq.c | 3 +
7017 arch/powerpc/kernel/process.c | 10 +-
7018 arch/powerpc/kernel/ptrace.c | 14 +
7019 arch/powerpc/kernel/traps.c | 5 +
7020 arch/powerpc/mm/slice.c | 2 +-
7021 arch/s390/Kconfig.debug | 1 +
7022 arch/s390/include/asm/cache.h | 4 +-
7023 arch/score/include/asm/cache.h | 4 +-
7024 arch/sh/include/asm/cache.h | 3 +-
7025 arch/sh/mm/mmap.c | 6 +-
7026 arch/sparc/include/asm/cache.h | 4 +-
7027 arch/sparc/include/asm/pgalloc_64.h | 1 +
7028 arch/sparc/include/asm/thread_info_64.h | 8 +-
7029 arch/sparc/kernel/process_32.c | 6 +-
7030 arch/sparc/kernel/process_64.c | 8 +-
7031 arch/sparc/kernel/ptrace_64.c | 14 +
7032 arch/sparc/kernel/sys_sparc_64.c | 8 +-
7033 arch/sparc/kernel/syscalls.S | 8 +-
7034 arch/sparc/kernel/traps_32.c | 8 +-
7035 arch/sparc/kernel/traps_64.c | 28 +-
7036 arch/sparc/kernel/unaligned_64.c | 2 +-
7037 arch/sparc/mm/fault_64.c | 2 +-
7038 arch/sparc/mm/hugetlbpage.c | 15 +-
7039 arch/tile/Kconfig | 1 +
7040 arch/tile/include/asm/cache.h | 3 +-
7041 arch/tile/mm/hugetlbpage.c | 2 +
7042 arch/um/include/asm/cache.h | 3 +-
7043 arch/unicore32/include/asm/cache.h | 6 +-
7044 arch/x86/Kconfig | 21 +
7045 arch/x86/Kconfig.debug | 2 +
7046 arch/x86/entry/common.c | 14 +
7047 arch/x86/entry/entry_32.S | 2 +-
7048 arch/x86/entry/entry_64.S | 2 +-
7049 arch/x86/ia32/ia32_aout.c | 2 +
7050 arch/x86/include/asm/floppy.h | 20 +-
7051 arch/x86/include/asm/fpu/types.h | 69 +-
7052 arch/x86/include/asm/io.h | 2 +-
7053 arch/x86/include/asm/page.h | 12 +-
7054 arch/x86/include/asm/paravirt_types.h | 23 +-
7055 arch/x86/include/asm/pgtable_types.h | 6 +-
7056 arch/x86/include/asm/processor.h | 12 +-
7057 arch/x86/include/asm/thread_info.h | 6 +-
7058 arch/x86/include/asm/uaccess.h | 2 +-
7059 arch/x86/kernel/dumpstack.c | 10 +-
7060 arch/x86/kernel/dumpstack_32.c | 2 +-
7061 arch/x86/kernel/dumpstack_64.c | 2 +-
7062 arch/x86/kernel/ioport.c | 13 +
7063 arch/x86/kernel/irq_32.c | 3 +
7064 arch/x86/kernel/irq_64.c | 4 +
7065 arch/x86/kernel/ldt.c | 18 +
7066 arch/x86/kernel/msr.c | 10 +
7067 arch/x86/kernel/ptrace.c | 14 +
7068 arch/x86/kernel/signal.c | 9 +-
7069 arch/x86/kernel/sys_i386_32.c | 9 +-
7070 arch/x86/kernel/sys_x86_64.c | 8 +-
7071 arch/x86/kernel/traps.c | 5 +
7072 arch/x86/kernel/verify_cpu.S | 1 +
7073 arch/x86/kernel/vm86_32.c | 15 +
7074 arch/x86/mm/fault.c | 12 +-
7075 arch/x86/mm/hugetlbpage.c | 15 +-
7076 arch/x86/mm/init.c | 66 +-
7077 arch/x86/mm/init_32.c | 6 +-
7078 arch/x86/mm/pageattr.c | 4 +-
7079 arch/x86/net/bpf_jit_comp.c | 4 +
7080 arch/x86/platform/efi/efi_64.c | 2 +-
7081 arch/x86/xen/Kconfig | 1 +
7082 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
7083 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
7084 crypto/scatterwalk.c | 10 +-
7085 drivers/acpi/acpica/hwxfsleep.c | 11 +-
7086 drivers/acpi/custom_method.c | 4 +
7087 drivers/block/cciss.h | 30 +-
7088 drivers/block/smart1,2.h | 40 +-
7089 drivers/cdrom/cdrom.c | 2 +-
7090 drivers/char/Kconfig | 4 +-
7091 drivers/char/genrtc.c | 1 +
7092 drivers/char/mem.c | 17 +
7093 drivers/char/random.c | 5 +-
7094 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
7095 drivers/firewire/ohci.c | 4 +
7096 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
7097 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
7098 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
7099 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
7100 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
7101 drivers/hid/hid-wiimote-debug.c | 2 +-
7102 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
7103 drivers/iommu/Kconfig | 1 +
7104 drivers/iommu/amd_iommu.c | 14 +-
7105 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
7106 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
7107 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
7108 drivers/isdn/i4l/isdn_concap.c | 6 +-
7109 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
7110 drivers/md/bcache/Kconfig | 1 +
7111 drivers/md/raid5.c | 8 +
7112 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
7113 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
7114 drivers/media/radio/radio-cadet.c | 5 +-
7115 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
7116 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
7117 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
7118 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
7119 drivers/message/fusion/mptbase.c | 9 +
7120 drivers/misc/sgi-xp/xp_main.c | 12 +-
7121 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
7122 drivers/net/ppp/pptp.c | 34 +-
7123 drivers/net/wan/lmc/lmc_media.c | 97 +-
7124 drivers/net/wan/z85230.c | 24 +-
7125 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
7126 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
7127 drivers/pci/proc.c | 9 +
7128 drivers/platform/x86/asus-wmi.c | 12 +
7129 drivers/rtc/rtc-dev.c | 3 +
7130 drivers/scsi/bfa/bfa_fcs.c | 19 +-
7131 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
7132 drivers/scsi/bfa/bfa_modules.h | 12 +-
7133 drivers/scsi/hpsa.h | 40 +-
7134 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
7135 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
7136 drivers/tty/serial/uartlite.c | 4 +-
7137 drivers/tty/sysrq.c | 2 +-
7138 drivers/tty/tty_io.c | 4 +
7139 drivers/tty/vt/keyboard.c | 22 +-
7140 drivers/uio/uio.c | 6 +-
7141 drivers/usb/core/hub.c | 5 +
7142 drivers/usb/gadget/function/f_uac1.c | 1 +
7143 drivers/usb/gadget/function/u_uac1.c | 1 +
7144 drivers/usb/host/hwa-hc.c | 9 +-
7145 drivers/usb/usbip/vhci_sysfs.c | 2 +-
7146 drivers/video/fbdev/arcfb.c | 2 +-
7147 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
7148 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
7149 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
7150 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
7151 drivers/xen/xenfs/xenstored.c | 5 +
7152 firmware/Makefile | 2 +
7153 firmware/WHENCE | 20 +-
7154 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
7155 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
7156 fs/attr.c | 4 +
7157 fs/autofs4/waitq.c | 9 +
7158 fs/binfmt_aout.c | 7 +
7159 fs/binfmt_elf.c | 40 +-
7160 fs/compat.c | 20 +-
7161 fs/compat_ioctl.c | 253 +-
7162 fs/coredump.c | 17 +-
7163 fs/dcache.c | 3 +
7164 fs/debugfs/inode.c | 11 +-
7165 fs/exec.c | 231 +-
7166 fs/ext2/balloc.c | 4 +-
7167 fs/ext2/super.c | 8 +-
7168 fs/ext4/balloc.c | 4 +-
7169 fs/ext4/extents.c | 2 +-
7170 fs/fcntl.c | 4 +
7171 fs/fhandle.c | 3 +-
7172 fs/file.c | 4 +
7173 fs/filesystems.c | 4 +
7174 fs/fs_struct.c | 20 +-
7175 fs/hugetlbfs/inode.c | 24 +-
7176 fs/inode.c | 8 +-
7177 fs/internal.h | 7 +
7178 fs/ioctl.c | 4 +-
7179 fs/kernfs/dir.c | 6 +
7180 fs/mount.h | 4 +-
7181 fs/namei.c | 283 +-
7182 fs/namespace.c | 24 +
7183 fs/nfsd/nfscache.c | 2 +-
7184 fs/open.c | 38 +
7185 fs/overlayfs/inode.c | 3 +
7186 fs/overlayfs/super.c | 6 +-
7187 fs/pipe.c | 49 +-
7188 fs/posix_acl.c | 15 +-
7189 fs/proc/Kconfig | 10 +-
7190 fs/proc/array.c | 69 +-
7191 fs/proc/base.c | 186 +-
7192 fs/proc/cmdline.c | 4 +
7193 fs/proc/devices.c | 4 +
7194 fs/proc/fd.c | 12 +-
7195 fs/proc/generic.c | 64 +
7196 fs/proc/inode.c | 17 +
7197 fs/proc/internal.h | 11 +-
7198 fs/proc/interrupts.c | 4 +
7199 fs/proc/kcore.c | 3 +
7200 fs/proc/namespaces.c | 4 +-
7201 fs/proc/proc_net.c | 31 +
7202 fs/proc/proc_sysctl.c | 52 +-
7203 fs/proc/root.c | 8 +
7204 fs/proc/stat.c | 69 +-
7205 fs/proc/task_mmu.c | 66 +-
7206 fs/readdir.c | 19 +
7207 fs/reiserfs/item_ops.c | 24 +-
7208 fs/reiserfs/super.c | 4 +
7209 fs/select.c | 2 +
7210 fs/seq_file.c | 30 +-
7211 fs/stat.c | 20 +-
7212 fs/sysfs/dir.c | 30 +-
7213 fs/utimes.c | 7 +
7214 fs/xattr.c | 26 +-
7215 grsecurity/Kconfig | 1203 ++++
7216 grsecurity/Makefile | 54 +
7217 grsecurity/gracl.c | 2757 +++++++++
7218 grsecurity/gracl_alloc.c | 105 +
7219 grsecurity/gracl_cap.c | 127 +
7220 grsecurity/gracl_compat.c | 269 +
7221 grsecurity/gracl_fs.c | 448 ++
7222 grsecurity/gracl_ip.c | 386 ++
7223 grsecurity/gracl_learn.c | 207 +
7224 grsecurity/gracl_policy.c | 1786 ++++++
7225 grsecurity/gracl_res.c | 68 +
7226 grsecurity/gracl_segv.c | 304 +
7227 grsecurity/gracl_shm.c | 40 +
7228 grsecurity/grsec_chdir.c | 19 +
7229 grsecurity/grsec_chroot.c | 467 ++
7230 grsecurity/grsec_disabled.c | 445 ++
7231 grsecurity/grsec_exec.c | 189 +
7232 grsecurity/grsec_fifo.c | 26 +
7233 grsecurity/grsec_fork.c | 23 +
7234 grsecurity/grsec_init.c | 294 +
7235 grsecurity/grsec_ipc.c | 48 +
7236 grsecurity/grsec_link.c | 65 +
7237 grsecurity/grsec_log.c | 340 +
7238 grsecurity/grsec_mem.c | 48 +
7239 grsecurity/grsec_mount.c | 65 +
7240 grsecurity/grsec_pax.c | 47 +
7241 grsecurity/grsec_proc.c | 20 +
7242 grsecurity/grsec_ptrace.c | 30 +
7243 grsecurity/grsec_sig.c | 245 +
7244 grsecurity/grsec_sock.c | 244 +
7245 grsecurity/grsec_sysctl.c | 497 ++
7246 grsecurity/grsec_time.c | 16 +
7247 grsecurity/grsec_tpe.c | 78 +
7248 grsecurity/grsec_tty.c | 18 +
7249 grsecurity/grsec_usb.c | 15 +
7250 grsecurity/grsum.c | 54 +
7251 include/linux/binfmts.h | 5 +-
7252 include/linux/capability.h | 13 +
7253 include/linux/compiler-gcc.h | 5 +
7254 include/linux/compiler.h | 8 +
7255 include/linux/cred.h | 8 +-
7256 include/linux/dcache.h | 5 +-
7257 include/linux/fs.h | 26 +-
7258 include/linux/fs_struct.h | 2 +-
7259 include/linux/fsnotify.h | 6 +
7260 include/linux/gracl.h | 342 ++
7261 include/linux/gracl_compat.h | 156 +
7262 include/linux/gralloc.h | 9 +
7263 include/linux/grdefs.h | 140 +
7264 include/linux/grinternal.h | 231 +
7265 include/linux/grmsg.h | 119 +
7266 include/linux/grsecurity.h | 258 +
7267 include/linux/grsock.h | 19 +
7268 include/linux/ipc.h | 2 +-
7269 include/linux/ipc_namespace.h | 2 +-
7270 include/linux/kallsyms.h | 18 +-
7271 include/linux/key-type.h | 4 +-
7272 include/linux/kmod.h | 5 +
7273 include/linux/kobject.h | 2 +-
7274 include/linux/lsm_hooks.h | 4 +-
7275 include/linux/mm.h | 12 +
7276 include/linux/mm_types.h | 4 +-
7277 include/linux/module.h | 5 +-
7278 include/linux/mount.h | 2 +-
7279 include/linux/msg.h | 2 +-
7280 include/linux/netfilter/xt_gradm.h | 9 +
7281 include/linux/path.h | 4 +-
7282 include/linux/perf_event.h | 13 +-
7283 include/linux/pid_namespace.h | 2 +-
7284 include/linux/pipe_fs_i.h | 4 +
7285 include/linux/poison.h | 2 +-
7286 include/linux/printk.h | 2 +-
7287 include/linux/proc_fs.h | 22 +-
7288 include/linux/proc_ns.h | 2 +-
7289 include/linux/ptrace.h | 24 +-
7290 include/linux/radix-tree.h | 22 +-
7291 include/linux/random.h | 2 +-
7292 include/linux/rbtree_augmented.h | 4 +-
7293 include/linux/scatterlist.h | 12 +-
7294 include/linux/sched.h | 115 +-
7295 include/linux/security.h | 1 +
7296 include/linux/sem.h | 2 +-
7297 include/linux/seq_file.h | 5 +
7298 include/linux/shm.h | 6 +-
7299 include/linux/shmem_fs.h | 5 +-
7300 include/linux/skbuff.h | 3 +
7301 include/linux/slab.h | 9 -
7302 include/linux/sysctl.h | 8 +-
7303 include/linux/thread_info.h | 6 +-
7304 include/linux/tty.h | 2 +-
7305 include/linux/tty_driver.h | 4 +-
7306 include/linux/uidgid.h | 5 +
7307 include/linux/user_namespace.h | 2 +-
7308 include/linux/utsname.h | 2 +-
7309 include/linux/vermagic.h | 16 +-
7310 include/linux/vmalloc.h | 8 +
7311 include/net/af_unix.h | 6 +-
7312 include/net/ip.h | 2 +-
7313 include/net/neighbour.h | 2 +-
7314 include/net/net_namespace.h | 2 +-
7315 include/net/netfilter/nf_conntrack_core.h | 8 +-
7316 include/net/scm.h | 1 +
7317 include/net/sock.h | 2 +-
7318 include/trace/events/fs.h | 53 +
7319 include/uapi/linux/personality.h | 1 +
7320 init/Kconfig | 2 +
7321 init/main.c | 46 +-
7322 ipc/mqueue.c | 1 +
7323 ipc/msg.c | 3 +-
7324 ipc/msgutil.c | 4 +-
7325 ipc/sem.c | 3 +-
7326 ipc/shm.c | 26 +-
7327 ipc/util.c | 6 +
7328 kernel/auditsc.c | 2 +-
7329 kernel/bpf/syscall.c | 10 +-
7330 kernel/capability.c | 41 +-
7331 kernel/cgroup.c | 5 +-
7332 kernel/compat.c | 1 +
7333 kernel/configs.c | 11 +
7334 kernel/cred.c | 112 +-
7335 kernel/events/core.c | 16 +-
7336 kernel/exit.c | 10 +-
7337 kernel/fork.c | 86 +-
7338 kernel/futex.c | 6 +-
7339 kernel/futex_compat.c | 2 +-
7340 kernel/kallsyms.c | 9 +
7341 kernel/kcmp.c | 8 +-
7342 kernel/kexec_core.c | 2 +-
7343 kernel/kmod.c | 96 +-
7344 kernel/kprobes.c | 9 +-
7345 kernel/ksysfs.c | 2 +
7346 kernel/locking/lockdep_proc.c | 10 +-
7347 kernel/module.c | 108 +-
7348 kernel/panic.c | 4 +-
7349 kernel/pid.c | 18 +-
7350 kernel/power/Kconfig | 2 +
7351 kernel/printk/printk.c | 7 +-
7352 kernel/ptrace.c | 89 +-
7353 kernel/resource.c | 10 +
7354 kernel/sched/core.c | 11 +-
7355 kernel/seccomp.c | 22 +-
7356 kernel/signal.c | 37 +-
7357 kernel/sys.c | 64 +-
7358 kernel/sysctl.c | 186 +-
7359 kernel/taskstats.c | 6 +
7360 kernel/time/posix-timers.c | 8 +
7361 kernel/time/time.c | 5 +
7362 kernel/time/timekeeping.c | 3 +
7363 kernel/time/timer_list.c | 13 +-
7364 kernel/time/timer_stats.c | 10 +-
7365 kernel/trace/Kconfig | 2 +
7366 kernel/trace/trace_syscalls.c | 8 +
7367 kernel/user_namespace.c | 15 +
7368 lib/Kconfig.debug | 13 +-
7369 lib/Kconfig.kasan | 2 +-
7370 lib/is_single_threaded.c | 3 +
7371 lib/list_debug.c | 65 +-
7372 lib/nlattr.c | 2 +
7373 lib/radix-tree.c | 12 +-
7374 lib/rbtree.c | 4 +-
7375 lib/vsprintf.c | 39 +-
7376 localversion-grsec | 1 +
7377 mm/Kconfig | 8 +-
7378 mm/Kconfig.debug | 1 +
7379 mm/filemap.c | 1 +
7380 mm/kmemleak.c | 4 +-
7381 mm/memory.c | 2 +-
7382 mm/mempolicy.c | 12 +-
7383 mm/migrate.c | 3 +-
7384 mm/mlock.c | 11 +-
7385 mm/mmap.c | 103 +-
7386 mm/mprotect.c | 8 +
7387 mm/oom_kill.c | 4 +
7388 mm/page_alloc.c | 2 +-
7389 mm/process_vm_access.c | 8 +-
7390 mm/shmem.c | 11 +-
7391 mm/slab.c | 14 +-
7392 mm/slab_common.c | 2 +-
7393 mm/slob.c | 12 +
7394 mm/slub.c | 33 +-
7395 mm/util.c | 3 +
7396 mm/vmalloc.c | 82 +-
7397 mm/vmstat.c | 29 +-
7398 net/appletalk/atalk_proc.c | 2 +-
7399 net/atm/lec.c | 6 +-
7400 net/atm/mpoa_caches.c | 42 +-
7401 net/can/bcm.c | 2 +-
7402 net/can/proc.c | 2 +-
7403 net/core/dev_ioctl.c | 7 +-
7404 net/core/filter.c | 8 +-
7405 net/core/net-procfs.c | 17 +-
7406 net/core/pktgen.c | 2 +-
7407 net/core/scm.c | 7 +
7408 net/core/sock.c | 3 +-
7409 net/core/sysctl_net_core.c | 2 +-
7410 net/decnet/dn_dev.c | 2 +-
7411 net/ipv4/Kconfig | 1 +
7412 net/ipv4/devinet.c | 6 +-
7413 net/ipv4/inet_hashtables.c | 4 +
7414 net/ipv4/ip_input.c | 7 +
7415 net/ipv4/ip_sockglue.c | 3 +-
7416 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7417 net/ipv4/route.c | 6 +-
7418 net/ipv4/tcp_input.c | 6 +-
7419 net/ipv4/tcp_ipv4.c | 24 +-
7420 net/ipv4/tcp_minisocks.c | 9 +-
7421 net/ipv4/tcp_timer.c | 11 +
7422 net/ipv4/udp.c | 24 +
7423 net/ipv6/Kconfig | 1 +
7424 net/ipv6/addrconf.c | 13 +-
7425 net/ipv6/proc.c | 2 +-
7426 net/ipv6/tcp_ipv6.c | 23 +-
7427 net/ipv6/udp.c | 7 +
7428 net/ipx/ipx_proc.c | 2 +-
7429 net/irda/irproc.c | 2 +-
7430 net/iucv/af_iucv.c | 3 +
7431 net/llc/llc_proc.c | 2 +-
7432 net/netfilter/Kconfig | 10 +
7433 net/netfilter/Makefile | 1 +
7434 net/netfilter/nf_conntrack_core.c | 46 +-
7435 net/netfilter/nf_conntrack_helper.c | 2 +-
7436 net/netfilter/nf_conntrack_netlink.c | 2 +-
7437 net/netfilter/xt_gradm.c | 51 +
7438 net/netfilter/xt_hashlimit.c | 4 +-
7439 net/netfilter/xt_recent.c | 2 +-
7440 net/openvswitch/actions.c | 19 +-
7441 net/sctp/sm_sideeffect.c | 11 +-
7442 net/sctp/sm_statefuns.c | 17 +-
7443 net/socket.c | 75 +-
7444 net/sunrpc/Kconfig | 1 +
7445 net/sunrpc/cache.c | 2 +-
7446 net/sunrpc/stats.c | 2 +-
7447 net/sysctl_net.c | 2 +-
7448 net/unix/af_unix.c | 57 +-
7449 net/unix/garbage.c | 8 +-
7450 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7451 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7452 net/x25/sysctl_net_x25.c | 2 +-
7453 net/x25/x25_proc.c | 2 +-
7454 scripts/package/Makefile | 2 +-
7455 scripts/package/mkspec | 41 +-
7456 security/Kconfig | 369 +-
7457 security/apparmor/file.c | 4 +-
7458 security/apparmor/lsm.c | 8 +-
7459 security/commoncap.c | 36 +-
7460 security/keys/internal.h | 2 +-
7461 security/min_addr.c | 2 +
7462 security/smack/smack_lsm.c | 8 +-
7463 security/tomoyo/file.c | 12 +-
7464 security/tomoyo/mount.c | 4 +
7465 security/tomoyo/tomoyo.c | 20 +-
7466 security/yama/Kconfig | 2 +-
7467 security/yama/yama_lsm.c | 4 +-
7468 sound/core/timer.c | 4 +-
7469 sound/synth/emux/emux_seq.c | 14 +-
7470 sound/usb/line6/driver.c | 40 +-
7471 sound/usb/line6/toneport.c | 12 +-
7472 tools/gcc/.gitignore | 1 +
7473 tools/gcc/Makefile | 12 +
7474 tools/gcc/gen-random-seed.sh | 8 +
7475 tools/gcc/randomize_layout_plugin.c | 930 +++
7476 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7477 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
7478 513 files changed, 33007 insertions(+), 3251 deletions(-)
7479
7480 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
7481 Author: Brad Spengler <spender@grsecurity.net>
7482 Date: Mon Feb 15 10:51:41 2016 -0500
7483
7484 Initial import of pax-linux-4.4.1-test3.patch
7485
7486 Documentation/dontdiff | 46 +-
7487 Documentation/kbuild/makefiles.txt | 39 +-
7488 Documentation/kernel-parameters.txt | 28 +
7489 Makefile | 119 +-
7490 arch/alpha/include/asm/atomic.h | 10 +
7491 arch/alpha/include/asm/elf.h | 7 +
7492 arch/alpha/include/asm/pgalloc.h | 6 +
7493 arch/alpha/include/asm/pgtable.h | 11 +
7494 arch/alpha/kernel/module.c | 2 +-
7495 arch/alpha/kernel/osf_sys.c | 8 +-
7496 arch/alpha/mm/fault.c | 141 +-
7497 arch/arm/Kconfig | 3 +-
7498 arch/arm/include/asm/atomic.h | 323 +-
7499 arch/arm/include/asm/cache.h | 5 +-
7500 arch/arm/include/asm/cacheflush.h | 2 +-
7501 arch/arm/include/asm/checksum.h | 14 +-
7502 arch/arm/include/asm/cmpxchg.h | 4 +
7503 arch/arm/include/asm/cpuidle.h | 2 +-
7504 arch/arm/include/asm/domain.h | 42 +-
7505 arch/arm/include/asm/elf.h | 9 +-
7506 arch/arm/include/asm/fncpy.h | 2 +
7507 arch/arm/include/asm/futex.h | 1 +
7508 arch/arm/include/asm/kmap_types.h | 2 +-
7509 arch/arm/include/asm/mach/dma.h | 2 +-
7510 arch/arm/include/asm/mach/map.h | 16 +-
7511 arch/arm/include/asm/outercache.h | 2 +-
7512 arch/arm/include/asm/page.h | 3 +-
7513 arch/arm/include/asm/pgalloc.h | 20 +
7514 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7515 arch/arm/include/asm/pgtable-2level.h | 3 +
7516 arch/arm/include/asm/pgtable-3level.h | 3 +
7517 arch/arm/include/asm/pgtable.h | 54 +-
7518 arch/arm/include/asm/smp.h | 2 +-
7519 arch/arm/include/asm/thread_info.h | 3 +
7520 arch/arm/include/asm/tls.h | 3 +
7521 arch/arm/include/asm/uaccess.h | 113 +-
7522 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7523 arch/arm/kernel/armksyms.c | 2 +-
7524 arch/arm/kernel/cpuidle.c | 2 +-
7525 arch/arm/kernel/entry-armv.S | 109 +-
7526 arch/arm/kernel/entry-common.S | 40 +-
7527 arch/arm/kernel/entry-header.S | 55 +
7528 arch/arm/kernel/fiq.c | 3 +
7529 arch/arm/kernel/module-plts.c | 7 +-
7530 arch/arm/kernel/module.c | 38 +-
7531 arch/arm/kernel/patch.c | 2 +
7532 arch/arm/kernel/process.c | 92 +-
7533 arch/arm/kernel/reboot.c | 1 +
7534 arch/arm/kernel/setup.c | 20 +-
7535 arch/arm/kernel/signal.c | 35 +-
7536 arch/arm/kernel/smp.c | 2 +-
7537 arch/arm/kernel/tcm.c | 4 +-
7538 arch/arm/kernel/vmlinux.lds.S | 6 +-
7539 arch/arm/kvm/arm.c | 8 +-
7540 arch/arm/lib/copy_page.S | 1 +
7541 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7542 arch/arm/lib/delay.c | 2 +-
7543 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7544 arch/arm/mach-exynos/suspend.c | 6 +-
7545 arch/arm/mach-mvebu/coherency.c | 4 +-
7546 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7547 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7548 arch/arm/mach-omap2/omap-smp.c | 1 +
7549 arch/arm/mach-omap2/omap_device.c | 4 +-
7550 arch/arm/mach-omap2/omap_device.h | 4 +-
7551 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7552 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7553 arch/arm/mach-omap2/wd_timer.c | 6 +-
7554 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7555 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7556 arch/arm/mach-tegra/irq.c | 1 +
7557 arch/arm/mach-ux500/pm.c | 1 +
7558 arch/arm/mach-zynq/platsmp.c | 1 +
7559 arch/arm/mm/Kconfig | 6 +-
7560 arch/arm/mm/cache-l2x0.c | 2 +-
7561 arch/arm/mm/context.c | 10 +-
7562 arch/arm/mm/fault.c | 146 +
7563 arch/arm/mm/fault.h | 12 +
7564 arch/arm/mm/init.c | 39 +
7565 arch/arm/mm/ioremap.c | 4 +-
7566 arch/arm/mm/mmap.c | 30 +-
7567 arch/arm/mm/mmu.c | 162 +-
7568 arch/arm/net/bpf_jit_32.c | 3 +
7569 arch/arm/plat-iop/setup.c | 2 +-
7570 arch/arm/plat-omap/sram.c | 2 +
7571 arch/arm64/include/asm/atomic.h | 10 +
7572 arch/arm64/include/asm/percpu.h | 8 +-
7573 arch/arm64/include/asm/pgalloc.h | 5 +
7574 arch/arm64/include/asm/uaccess.h | 1 +
7575 arch/arm64/mm/dma-mapping.c | 2 +-
7576 arch/avr32/include/asm/elf.h | 8 +-
7577 arch/avr32/include/asm/kmap_types.h | 4 +-
7578 arch/avr32/mm/fault.c | 27 +
7579 arch/frv/include/asm/atomic.h | 10 +
7580 arch/frv/include/asm/kmap_types.h | 2 +-
7581 arch/frv/mm/elf-fdpic.c | 3 +-
7582 arch/ia64/Makefile | 1 +
7583 arch/ia64/include/asm/atomic.h | 10 +
7584 arch/ia64/include/asm/elf.h | 7 +
7585 arch/ia64/include/asm/pgalloc.h | 12 +
7586 arch/ia64/include/asm/pgtable.h | 13 +-
7587 arch/ia64/include/asm/spinlock.h | 2 +-
7588 arch/ia64/include/asm/uaccess.h | 27 +-
7589 arch/ia64/kernel/module.c | 45 +-
7590 arch/ia64/kernel/palinfo.c | 2 +-
7591 arch/ia64/kernel/sys_ia64.c | 7 +
7592 arch/ia64/kernel/vmlinux.lds.S | 2 +-
7593 arch/ia64/mm/fault.c | 32 +-
7594 arch/ia64/mm/init.c | 15 +-
7595 arch/m32r/lib/usercopy.c | 6 +
7596 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
7597 arch/mips/include/asm/atomic.h | 368 +-
7598 arch/mips/include/asm/elf.h | 7 +
7599 arch/mips/include/asm/exec.h | 2 +-
7600 arch/mips/include/asm/hw_irq.h | 2 +-
7601 arch/mips/include/asm/local.h | 57 +
7602 arch/mips/include/asm/page.h | 2 +-
7603 arch/mips/include/asm/pgalloc.h | 5 +
7604 arch/mips/include/asm/pgtable.h | 3 +
7605 arch/mips/include/asm/uaccess.h | 1 +
7606 arch/mips/kernel/binfmt_elfn32.c | 7 +
7607 arch/mips/kernel/binfmt_elfo32.c | 7 +
7608 arch/mips/kernel/irq-gt641xx.c | 2 +-
7609 arch/mips/kernel/irq.c | 6 +-
7610 arch/mips/kernel/pm-cps.c | 2 +-
7611 arch/mips/kernel/process.c | 12 -
7612 arch/mips/kernel/sync-r4k.c | 24 +-
7613 arch/mips/kernel/traps.c | 13 +-
7614 arch/mips/mm/fault.c | 25 +
7615 arch/mips/mm/mmap.c | 51 +-
7616 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
7617 arch/mips/sni/rm200.c | 2 +-
7618 arch/mips/vr41xx/common/icu.c | 2 +-
7619 arch/mips/vr41xx/common/irq.c | 4 +-
7620 arch/parisc/include/asm/atomic.h | 10 +
7621 arch/parisc/include/asm/elf.h | 7 +
7622 arch/parisc/include/asm/pgalloc.h | 6 +
7623 arch/parisc/include/asm/pgtable.h | 11 +
7624 arch/parisc/include/asm/uaccess.h | 4 +-
7625 arch/parisc/kernel/module.c | 50 +-
7626 arch/parisc/kernel/sys_parisc.c | 15 +
7627 arch/parisc/kernel/traps.c | 4 +-
7628 arch/parisc/mm/fault.c | 140 +-
7629 arch/powerpc/include/asm/atomic.h | 329 +-
7630 arch/powerpc/include/asm/elf.h | 12 +
7631 arch/powerpc/include/asm/exec.h | 2 +-
7632 arch/powerpc/include/asm/kmap_types.h | 2 +-
7633 arch/powerpc/include/asm/local.h | 46 +
7634 arch/powerpc/include/asm/mman.h | 2 +-
7635 arch/powerpc/include/asm/page.h | 8 +-
7636 arch/powerpc/include/asm/page_64.h | 7 +-
7637 arch/powerpc/include/asm/pgalloc-64.h | 7 +
7638 arch/powerpc/include/asm/pgtable.h | 1 +
7639 arch/powerpc/include/asm/pte-hash32.h | 1 +
7640 arch/powerpc/include/asm/reg.h | 1 +
7641 arch/powerpc/include/asm/smp.h | 2 +-
7642 arch/powerpc/include/asm/spinlock.h | 42 +-
7643 arch/powerpc/include/asm/uaccess.h | 141 +-
7644 arch/powerpc/kernel/Makefile | 5 +
7645 arch/powerpc/kernel/exceptions-64e.S | 4 +-
7646 arch/powerpc/kernel/exceptions-64s.S | 2 +-
7647 arch/powerpc/kernel/module_32.c | 15 +-
7648 arch/powerpc/kernel/process.c | 46 -
7649 arch/powerpc/kernel/signal_32.c | 2 +-
7650 arch/powerpc/kernel/signal_64.c | 2 +-
7651 arch/powerpc/kernel/traps.c | 21 +
7652 arch/powerpc/kernel/vdso.c | 5 +-
7653 arch/powerpc/lib/usercopy_64.c | 18 -
7654 arch/powerpc/mm/fault.c | 56 +-
7655 arch/powerpc/mm/mmap.c | 16 +
7656 arch/powerpc/mm/slice.c | 13 +-
7657 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
7658 arch/s390/include/asm/atomic.h | 10 +
7659 arch/s390/include/asm/elf.h | 7 +
7660 arch/s390/include/asm/exec.h | 2 +-
7661 arch/s390/include/asm/uaccess.h | 13 +-
7662 arch/s390/kernel/module.c | 22 +-
7663 arch/s390/kernel/process.c | 20 -
7664 arch/s390/mm/mmap.c | 16 +
7665 arch/score/include/asm/exec.h | 2 +-
7666 arch/score/kernel/process.c | 5 -
7667 arch/sh/mm/mmap.c | 22 +-
7668 arch/sparc/include/asm/atomic_64.h | 110 +-
7669 arch/sparc/include/asm/cache.h | 2 +-
7670 arch/sparc/include/asm/elf_32.h | 7 +
7671 arch/sparc/include/asm/elf_64.h | 7 +
7672 arch/sparc/include/asm/pgalloc_32.h | 1 +
7673 arch/sparc/include/asm/pgalloc_64.h | 1 +
7674 arch/sparc/include/asm/pgtable.h | 4 +
7675 arch/sparc/include/asm/pgtable_32.h | 15 +-
7676 arch/sparc/include/asm/pgtsrmmu.h | 5 +
7677 arch/sparc/include/asm/setup.h | 4 +-
7678 arch/sparc/include/asm/spinlock_64.h | 35 +-
7679 arch/sparc/include/asm/thread_info_32.h | 1 +
7680 arch/sparc/include/asm/thread_info_64.h | 2 +
7681 arch/sparc/include/asm/uaccess.h | 1 +
7682 arch/sparc/include/asm/uaccess_32.h | 28 +-
7683 arch/sparc/include/asm/uaccess_64.h | 24 +-
7684 arch/sparc/kernel/Makefile | 2 +-
7685 arch/sparc/kernel/prom_common.c | 2 +-
7686 arch/sparc/kernel/smp_64.c | 8 +-
7687 arch/sparc/kernel/sys_sparc_32.c | 2 +-
7688 arch/sparc/kernel/sys_sparc_64.c | 52 +-
7689 arch/sparc/kernel/traps_64.c | 27 +-
7690 arch/sparc/lib/Makefile | 2 +-
7691 arch/sparc/lib/atomic_64.S | 57 +-
7692 arch/sparc/lib/ksyms.c | 6 +-
7693 arch/sparc/mm/Makefile | 2 +-
7694 arch/sparc/mm/fault_32.c | 292 +
7695 arch/sparc/mm/fault_64.c | 486 +
7696 arch/sparc/mm/hugetlbpage.c | 22 +-
7697 arch/sparc/mm/init_64.c | 10 +-
7698 arch/tile/include/asm/atomic_64.h | 10 +
7699 arch/tile/include/asm/uaccess.h | 4 +-
7700 arch/um/Makefile | 4 +
7701 arch/um/include/asm/kmap_types.h | 2 +-
7702 arch/um/include/asm/page.h | 3 +
7703 arch/um/include/asm/pgtable-3level.h | 1 +
7704 arch/um/kernel/process.c | 16 -
7705 arch/x86/Kconfig | 26 +-
7706 arch/x86/Kconfig.cpu | 6 +-
7707 arch/x86/Kconfig.debug | 4 +-
7708 arch/x86/Makefile | 13 +-
7709 arch/x86/boot/Makefile | 3 +
7710 arch/x86/boot/bitops.h | 4 +-
7711 arch/x86/boot/boot.h | 2 +-
7712 arch/x86/boot/compressed/Makefile | 3 +
7713 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
7714 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
7715 arch/x86/boot/compressed/head_32.S | 4 +-
7716 arch/x86/boot/compressed/head_64.S | 12 +-
7717 arch/x86/boot/compressed/misc.c | 11 +-
7718 arch/x86/boot/cpucheck.c | 16 +-
7719 arch/x86/boot/header.S | 6 +-
7720 arch/x86/boot/memory.c | 2 +-
7721 arch/x86/boot/video-vesa.c | 1 +
7722 arch/x86/boot/video.c | 2 +-
7723 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
7724 arch/x86/crypto/aesni-intel_asm.S | 106 +-
7725 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
7726 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
7727 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
7728 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
7729 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
7730 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
7731 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
7732 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
7733 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
7734 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
7735 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
7736 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
7737 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
7738 arch/x86/crypto/sha256-avx-asm.S | 2 +
7739 arch/x86/crypto/sha256-avx2-asm.S | 2 +
7740 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
7741 arch/x86/crypto/sha512-avx-asm.S | 2 +
7742 arch/x86/crypto/sha512-avx2-asm.S | 2 +
7743 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
7744 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
7745 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
7746 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
7747 arch/x86/entry/calling.h | 86 +-
7748 arch/x86/entry/common.c | 28 +-
7749 arch/x86/entry/entry_32.S | 311 +-
7750 arch/x86/entry/entry_64.S | 625 +-
7751 arch/x86/entry/entry_64_compat.S | 67 +-
7752 arch/x86/entry/thunk_64.S | 2 +
7753 arch/x86/entry/vdso/Makefile | 2 +-
7754 arch/x86/entry/vdso/vdso2c.h | 8 +-
7755 arch/x86/entry/vdso/vma.c | 37 +-
7756 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
7757 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
7758 arch/x86/ia32/ia32_signal.c | 23 +-
7759 arch/x86/ia32/sys_ia32.c | 42 +-
7760 arch/x86/include/asm/alternative-asm.h | 43 +-
7761 arch/x86/include/asm/alternative.h | 4 +-
7762 arch/x86/include/asm/apic.h | 2 +-
7763 arch/x86/include/asm/apm.h | 4 +-
7764 arch/x86/include/asm/atomic.h | 230 +-
7765 arch/x86/include/asm/atomic64_32.h | 100 +
7766 arch/x86/include/asm/atomic64_64.h | 164 +-
7767 arch/x86/include/asm/bitops.h | 18 +-
7768 arch/x86/include/asm/boot.h | 2 +-
7769 arch/x86/include/asm/cache.h | 5 +-
7770 arch/x86/include/asm/checksum_32.h | 12 +-
7771 arch/x86/include/asm/cmpxchg.h | 39 +
7772 arch/x86/include/asm/compat.h | 4 +
7773 arch/x86/include/asm/cpufeature.h | 17 +-
7774 arch/x86/include/asm/desc.h | 78 +-
7775 arch/x86/include/asm/desc_defs.h | 6 +
7776 arch/x86/include/asm/div64.h | 2 +-
7777 arch/x86/include/asm/dma.h | 2 +
7778 arch/x86/include/asm/elf.h | 33 +-
7779 arch/x86/include/asm/emergency-restart.h | 2 +-
7780 arch/x86/include/asm/fpu/internal.h | 42 +-
7781 arch/x86/include/asm/fpu/types.h | 5 +-
7782 arch/x86/include/asm/futex.h | 14 +-
7783 arch/x86/include/asm/hw_irq.h | 4 +-
7784 arch/x86/include/asm/i8259.h | 2 +-
7785 arch/x86/include/asm/io.h | 22 +-
7786 arch/x86/include/asm/irqflags.h | 5 +
7787 arch/x86/include/asm/kprobes.h | 9 +-
7788 arch/x86/include/asm/local.h | 106 +-
7789 arch/x86/include/asm/mman.h | 15 +
7790 arch/x86/include/asm/mmu.h | 14 +-
7791 arch/x86/include/asm/mmu_context.h | 133 +-
7792 arch/x86/include/asm/module.h | 17 +-
7793 arch/x86/include/asm/nmi.h | 19 +-
7794 arch/x86/include/asm/page.h | 1 +
7795 arch/x86/include/asm/page_32.h | 12 +-
7796 arch/x86/include/asm/page_64.h | 14 +-
7797 arch/x86/include/asm/paravirt.h | 46 +-
7798 arch/x86/include/asm/paravirt_types.h | 15 +-
7799 arch/x86/include/asm/pgalloc.h | 23 +
7800 arch/x86/include/asm/pgtable-2level.h | 2 +
7801 arch/x86/include/asm/pgtable-3level.h | 7 +
7802 arch/x86/include/asm/pgtable.h | 126 +-
7803 arch/x86/include/asm/pgtable_32.h | 14 +-
7804 arch/x86/include/asm/pgtable_32_types.h | 24 +-
7805 arch/x86/include/asm/pgtable_64.h | 23 +-
7806 arch/x86/include/asm/pgtable_64_types.h | 5 +
7807 arch/x86/include/asm/pgtable_types.h | 26 +-
7808 arch/x86/include/asm/pmem.h | 2 +-
7809 arch/x86/include/asm/preempt.h | 2 +-
7810 arch/x86/include/asm/processor.h | 57 +-
7811 arch/x86/include/asm/ptrace.h | 15 +-
7812 arch/x86/include/asm/realmode.h | 4 +-
7813 arch/x86/include/asm/reboot.h | 10 +-
7814 arch/x86/include/asm/rmwcc.h | 84 +-
7815 arch/x86/include/asm/rwsem.h | 60 +-
7816 arch/x86/include/asm/segment.h | 27 +-
7817 arch/x86/include/asm/smap.h | 43 +
7818 arch/x86/include/asm/smp.h | 14 +-
7819 arch/x86/include/asm/stackprotector.h | 4 +-
7820 arch/x86/include/asm/stacktrace.h | 34 +-
7821 arch/x86/include/asm/switch_to.h | 4 +-
7822 arch/x86/include/asm/sys_ia32.h | 6 +-
7823 arch/x86/include/asm/thread_info.h | 27 +-
7824 arch/x86/include/asm/tlbflush.h | 77 +-
7825 arch/x86/include/asm/uaccess.h | 210 +-
7826 arch/x86/include/asm/uaccess_32.h | 28 +-
7827 arch/x86/include/asm/uaccess_64.h | 169 +-
7828 arch/x86/include/asm/word-at-a-time.h | 2 +-
7829 arch/x86/include/asm/x86_init.h | 10 +-
7830 arch/x86/include/asm/xen/page.h | 2 +-
7831 arch/x86/include/uapi/asm/e820.h | 2 +-
7832 arch/x86/kernel/Makefile | 2 +-
7833 arch/x86/kernel/acpi/boot.c | 4 +-
7834 arch/x86/kernel/acpi/sleep.c | 4 +
7835 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
7836 arch/x86/kernel/alternative.c | 124 +-
7837 arch/x86/kernel/apic/apic.c | 4 +-
7838 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
7839 arch/x86/kernel/apic/apic_noop.c | 2 +-
7840 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
7841 arch/x86/kernel/apic/io_apic.c | 8 +-
7842 arch/x86/kernel/apic/msi.c | 2 +-
7843 arch/x86/kernel/apic/probe_32.c | 4 +-
7844 arch/x86/kernel/apic/vector.c | 2 +
7845 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
7846 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
7847 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
7848 arch/x86/kernel/apm_32.c | 21 +-
7849 arch/x86/kernel/asm-offsets.c | 20 +
7850 arch/x86/kernel/asm-offsets_64.c | 1 +
7851 arch/x86/kernel/cpu/Makefile | 4 -
7852 arch/x86/kernel/cpu/amd.c | 2 +-
7853 arch/x86/kernel/cpu/bugs_64.c | 2 +
7854 arch/x86/kernel/cpu/common.c | 202 +-
7855 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
7856 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
7857 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
7858 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
7859 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
7860 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
7861 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
7862 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
7863 arch/x86/kernel/cpu/perf_event.c | 10 +-
7864 arch/x86/kernel/cpu/perf_event.h | 2 +-
7865 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
7866 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
7867 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
7868 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
7869 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
7870 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
7871 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
7872 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
7873 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
7874 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
7875 arch/x86/kernel/crash_dump_64.c | 2 +-
7876 arch/x86/kernel/doublefault.c | 8 +-
7877 arch/x86/kernel/dumpstack.c | 24 +-
7878 arch/x86/kernel/dumpstack_32.c | 25 +-
7879 arch/x86/kernel/dumpstack_64.c | 62 +-
7880 arch/x86/kernel/e820.c | 4 +-
7881 arch/x86/kernel/early_printk.c | 1 +
7882 arch/x86/kernel/espfix_64.c | 44 +-
7883 arch/x86/kernel/fpu/core.c | 24 +-
7884 arch/x86/kernel/fpu/init.c | 40 +-
7885 arch/x86/kernel/fpu/regset.c | 22 +-
7886 arch/x86/kernel/fpu/signal.c | 20 +-
7887 arch/x86/kernel/fpu/xstate.c | 6 +-
7888 arch/x86/kernel/ftrace.c | 18 +-
7889 arch/x86/kernel/head64.c | 14 +-
7890 arch/x86/kernel/head_32.S | 235 +-
7891 arch/x86/kernel/head_64.S | 173 +-
7892 arch/x86/kernel/i386_ksyms_32.c | 12 +
7893 arch/x86/kernel/i8259.c | 10 +-
7894 arch/x86/kernel/io_delay.c | 2 +-
7895 arch/x86/kernel/ioport.c | 2 +-
7896 arch/x86/kernel/irq.c | 8 +-
7897 arch/x86/kernel/irq_32.c | 45 +-
7898 arch/x86/kernel/jump_label.c | 10 +-
7899 arch/x86/kernel/kgdb.c | 21 +-
7900 arch/x86/kernel/kprobes/core.c | 28 +-
7901 arch/x86/kernel/kprobes/opt.c | 16 +-
7902 arch/x86/kernel/ksysfs.c | 2 +-
7903 arch/x86/kernel/kvmclock.c | 20 +-
7904 arch/x86/kernel/ldt.c | 25 +
7905 arch/x86/kernel/livepatch.c | 11 +-
7906 arch/x86/kernel/machine_kexec_32.c | 6 +-
7907 arch/x86/kernel/mcount_64.S | 19 +-
7908 arch/x86/kernel/module.c | 78 +-
7909 arch/x86/kernel/msr.c | 2 +-
7910 arch/x86/kernel/nmi.c | 34 +-
7911 arch/x86/kernel/nmi_selftest.c | 4 +-
7912 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
7913 arch/x86/kernel/paravirt.c | 45 +-
7914 arch/x86/kernel/paravirt_patch_64.c | 8 +
7915 arch/x86/kernel/pci-calgary_64.c | 2 +-
7916 arch/x86/kernel/pci-iommu_table.c | 2 +-
7917 arch/x86/kernel/pci-swiotlb.c | 2 +-
7918 arch/x86/kernel/process.c | 80 +-
7919 arch/x86/kernel/process_32.c | 29 +-
7920 arch/x86/kernel/process_64.c | 14 +-
7921 arch/x86/kernel/ptrace.c | 20 +-
7922 arch/x86/kernel/pvclock.c | 8 +-
7923 arch/x86/kernel/reboot.c | 44 +-
7924 arch/x86/kernel/reboot_fixups_32.c | 2 +-
7925 arch/x86/kernel/relocate_kernel_64.S | 3 +-
7926 arch/x86/kernel/setup.c | 29 +-
7927 arch/x86/kernel/setup_percpu.c | 29 +-
7928 arch/x86/kernel/signal.c | 17 +-
7929 arch/x86/kernel/smp.c | 2 +-
7930 arch/x86/kernel/smpboot.c | 29 +-
7931 arch/x86/kernel/step.c | 6 +-
7932 arch/x86/kernel/sys_i386_32.c | 184 +
7933 arch/x86/kernel/sys_x86_64.c | 22 +-
7934 arch/x86/kernel/tboot.c | 22 +-
7935 arch/x86/kernel/time.c | 8 +-
7936 arch/x86/kernel/tls.c | 7 +-
7937 arch/x86/kernel/tracepoint.c | 4 +-
7938 arch/x86/kernel/traps.c | 53 +-
7939 arch/x86/kernel/tsc.c | 2 +-
7940 arch/x86/kernel/uprobes.c | 4 +-
7941 arch/x86/kernel/vm86_32.c | 6 +-
7942 arch/x86/kernel/vmlinux.lds.S | 153 +-
7943 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
7944 arch/x86/kernel/x86_init.c | 6 +-
7945 arch/x86/kvm/cpuid.c | 21 +-
7946 arch/x86/kvm/emulate.c | 6 +-
7947 arch/x86/kvm/i8259.c | 10 +-
7948 arch/x86/kvm/ioapic.c | 2 +
7949 arch/x86/kvm/lapic.c | 2 +-
7950 arch/x86/kvm/paging_tmpl.h | 2 +-
7951 arch/x86/kvm/svm.c | 10 +-
7952 arch/x86/kvm/vmx.c | 62 +-
7953 arch/x86/kvm/x86.c | 44 +-
7954 arch/x86/lguest/boot.c | 3 +-
7955 arch/x86/lib/atomic64_386_32.S | 164 +
7956 arch/x86/lib/atomic64_cx8_32.S | 98 +-
7957 arch/x86/lib/checksum_32.S | 99 +-
7958 arch/x86/lib/clear_page_64.S | 3 +
7959 arch/x86/lib/cmpxchg16b_emu.S | 3 +
7960 arch/x86/lib/copy_page_64.S | 14 +-
7961 arch/x86/lib/copy_user_64.S | 66 +-
7962 arch/x86/lib/csum-copy_64.S | 14 +-
7963 arch/x86/lib/csum-wrappers_64.c | 8 +-
7964 arch/x86/lib/getuser.S | 74 +-
7965 arch/x86/lib/insn.c | 8 +-
7966 arch/x86/lib/iomap_copy_64.S | 2 +
7967 arch/x86/lib/memcpy_64.S | 6 +
7968 arch/x86/lib/memmove_64.S | 3 +-
7969 arch/x86/lib/memset_64.S | 3 +
7970 arch/x86/lib/mmx_32.c | 243 +-
7971 arch/x86/lib/msr-reg.S | 2 +
7972 arch/x86/lib/putuser.S | 87 +-
7973 arch/x86/lib/rwsem.S | 6 +-
7974 arch/x86/lib/usercopy_32.c | 359 +-
7975 arch/x86/lib/usercopy_64.c | 22 +-
7976 arch/x86/math-emu/fpu_aux.c | 2 +-
7977 arch/x86/math-emu/fpu_entry.c | 4 +-
7978 arch/x86/math-emu/fpu_system.h | 2 +-
7979 arch/x86/mm/Makefile | 4 +
7980 arch/x86/mm/extable.c | 26 +-
7981 arch/x86/mm/fault.c | 570 +-
7982 arch/x86/mm/gup.c | 6 +-
7983 arch/x86/mm/highmem_32.c | 6 +
7984 arch/x86/mm/hugetlbpage.c | 24 +-
7985 arch/x86/mm/init.c | 111 +-
7986 arch/x86/mm/init_32.c | 111 +-
7987 arch/x86/mm/init_64.c | 46 +-
7988 arch/x86/mm/iomap_32.c | 4 +
7989 arch/x86/mm/ioremap.c | 52 +-
7990 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
7991 arch/x86/mm/mmap.c | 40 +-
7992 arch/x86/mm/mmio-mod.c | 10 +-
7993 arch/x86/mm/mpx.c | 6 +-
7994 arch/x86/mm/numa.c | 4 +-
7995 arch/x86/mm/pageattr.c | 42 +-
7996 arch/x86/mm/pat.c | 12 +-
7997 arch/x86/mm/pat_rbtree.c | 2 +-
7998 arch/x86/mm/pf_in.c | 10 +-
7999 arch/x86/mm/pgtable.c | 214 +-
8000 arch/x86/mm/pgtable_32.c | 3 +
8001 arch/x86/mm/setup_nx.c | 7 +
8002 arch/x86/mm/tlb.c | 4 +
8003 arch/x86/mm/uderef_64.c | 37 +
8004 arch/x86/net/bpf_jit.S | 11 +
8005 arch/x86/net/bpf_jit_comp.c | 13 +-
8006 arch/x86/oprofile/backtrace.c | 6 +-
8007 arch/x86/oprofile/nmi_int.c | 8 +-
8008 arch/x86/oprofile/op_model_amd.c | 8 +-
8009 arch/x86/oprofile/op_model_ppro.c | 7 +-
8010 arch/x86/oprofile/op_x86_model.h | 2 +-
8011 arch/x86/pci/intel_mid_pci.c | 2 +-
8012 arch/x86/pci/irq.c | 8 +-
8013 arch/x86/pci/pcbios.c | 144 +-
8014 arch/x86/platform/efi/efi_32.c | 24 +
8015 arch/x86/platform/efi/efi_64.c | 26 +-
8016 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8017 arch/x86/platform/efi/efi_stub_64.S | 2 +
8018 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
8019 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
8020 arch/x86/platform/intel-mid/mfld.c | 4 +-
8021 arch/x86/platform/intel-mid/mrfl.c | 2 +-
8022 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
8023 arch/x86/platform/olpc/olpc_dt.c | 2 +-
8024 arch/x86/power/cpu.c | 11 +-
8025 arch/x86/realmode/init.c | 10 +-
8026 arch/x86/realmode/rm/Makefile | 3 +
8027 arch/x86/realmode/rm/header.S | 4 +-
8028 arch/x86/realmode/rm/reboot.S | 4 +
8029 arch/x86/realmode/rm/trampoline_32.S | 12 +-
8030 arch/x86/realmode/rm/trampoline_64.S | 3 +-
8031 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
8032 arch/x86/tools/Makefile | 2 +-
8033 arch/x86/tools/relocs.c | 96 +-
8034 arch/x86/um/mem_32.c | 2 +-
8035 arch/x86/um/tls_32.c | 2 +-
8036 arch/x86/xen/enlighten.c | 50 +-
8037 arch/x86/xen/mmu.c | 19 +-
8038 arch/x86/xen/smp.c | 16 +-
8039 arch/x86/xen/xen-asm_32.S | 2 +-
8040 arch/x86/xen/xen-head.S | 11 +
8041 arch/x86/xen/xen-ops.h | 2 -
8042 block/bio.c | 4 +-
8043 block/blk-cgroup.c | 18 +-
8044 block/blk-iopoll.c | 2 +-
8045 block/blk-map.c | 2 +-
8046 block/blk-softirq.c | 2 +-
8047 block/bsg.c | 12 +-
8048 block/cfq-iosched.c | 4 +-
8049 block/compat_ioctl.c | 4 +-
8050 block/genhd.c | 9 +-
8051 block/partitions/efi.c | 8 +-
8052 block/scsi_ioctl.c | 29 +-
8053 crypto/cryptd.c | 4 +-
8054 crypto/crypto_user.c | 8 +-
8055 crypto/pcrypt.c | 2 +-
8056 crypto/zlib.c | 12 +-
8057 drivers/acpi/acpi_video.c | 2 +-
8058 drivers/acpi/apei/apei-internal.h | 2 +-
8059 drivers/acpi/apei/ghes.c | 10 +-
8060 drivers/acpi/bgrt.c | 6 +-
8061 drivers/acpi/blacklist.c | 4 +-
8062 drivers/acpi/bus.c | 4 +-
8063 drivers/acpi/device_pm.c | 4 +-
8064 drivers/acpi/ec.c | 2 +-
8065 drivers/acpi/pci_slot.c | 2 +-
8066 drivers/acpi/processor_idle.c | 2 +-
8067 drivers/acpi/processor_pdc.c | 2 +-
8068 drivers/acpi/sleep.c | 2 +-
8069 drivers/acpi/sysfs.c | 4 +-
8070 drivers/acpi/thermal.c | 2 +-
8071 drivers/acpi/video_detect.c | 7 +-
8072 drivers/ata/libata-core.c | 12 +-
8073 drivers/ata/libata-scsi.c | 2 +-
8074 drivers/ata/libata.h | 2 +-
8075 drivers/ata/pata_arasan_cf.c | 4 +-
8076 drivers/atm/adummy.c | 2 +-
8077 drivers/atm/ambassador.c | 8 +-
8078 drivers/atm/atmtcp.c | 14 +-
8079 drivers/atm/eni.c | 10 +-
8080 drivers/atm/firestream.c | 8 +-
8081 drivers/atm/fore200e.c | 14 +-
8082 drivers/atm/he.c | 18 +-
8083 drivers/atm/horizon.c | 4 +-
8084 drivers/atm/idt77252.c | 36 +-
8085 drivers/atm/iphase.c | 34 +-
8086 drivers/atm/lanai.c | 12 +-
8087 drivers/atm/nicstar.c | 46 +-
8088 drivers/atm/solos-pci.c | 4 +-
8089 drivers/atm/suni.c | 4 +-
8090 drivers/atm/uPD98402.c | 16 +-
8091 drivers/atm/zatm.c | 6 +-
8092 drivers/base/bus.c | 4 +-
8093 drivers/base/devres.c | 4 +-
8094 drivers/base/devtmpfs.c | 8 +-
8095 drivers/base/node.c | 2 +-
8096 drivers/base/platform-msi.c | 20 +-
8097 drivers/base/power/domain.c | 7 +-
8098 drivers/base/power/runtime.c | 6 +-
8099 drivers/base/power/sysfs.c | 2 +-
8100 drivers/base/power/wakeup.c | 8 +-
8101 drivers/base/regmap/regmap-debugfs.c | 4 +-
8102 drivers/base/regmap/regmap.c | 4 +-
8103 drivers/base/syscore.c | 4 +-
8104 drivers/block/cciss.c | 28 +-
8105 drivers/block/cciss.h | 2 +-
8106 drivers/block/cpqarray.c | 28 +-
8107 drivers/block/cpqarray.h | 2 +-
8108 drivers/block/drbd/drbd_bitmap.c | 2 +-
8109 drivers/block/drbd/drbd_int.h | 8 +-
8110 drivers/block/drbd/drbd_main.c | 12 +-
8111 drivers/block/drbd/drbd_nl.c | 4 +-
8112 drivers/block/drbd/drbd_receiver.c | 38 +-
8113 drivers/block/drbd/drbd_worker.c | 14 +-
8114 drivers/block/pktcdvd.c | 4 +-
8115 drivers/block/rbd.c | 2 +-
8116 drivers/bluetooth/btwilink.c | 2 +-
8117 drivers/bus/arm-cci.c | 12 +-
8118 drivers/cdrom/cdrom.c | 11 +-
8119 drivers/cdrom/gdrom.c | 1 -
8120 drivers/char/agp/compat_ioctl.c | 2 +-
8121 drivers/char/agp/frontend.c | 4 +-
8122 drivers/char/agp/intel-gtt.c | 4 +-
8123 drivers/char/hpet.c | 2 +-
8124 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
8125 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8126 drivers/char/ipmi/ipmi_ssif.c | 12 +-
8127 drivers/char/mem.c | 47 +-
8128 drivers/char/nvram.c | 2 +-
8129 drivers/char/pcmcia/synclink_cs.c | 16 +-
8130 drivers/char/random.c | 12 +-
8131 drivers/char/sonypi.c | 11 +-
8132 drivers/char/tpm/tpm_acpi.c | 3 +-
8133 drivers/char/tpm/tpm_eventlog.c | 5 +-
8134 drivers/char/virtio_console.c | 6 +-
8135 drivers/clk/clk-composite.c | 2 +-
8136 drivers/clk/samsung/clk.h | 2 +-
8137 drivers/clk/socfpga/clk-gate.c | 9 +-
8138 drivers/clk/socfpga/clk-pll.c | 9 +-
8139 drivers/clk/ti/clk.c | 8 +-
8140 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8141 drivers/cpufreq/cpufreq-dt.c | 4 +-
8142 drivers/cpufreq/cpufreq.c | 30 +-
8143 drivers/cpufreq/cpufreq_governor.c | 2 +-
8144 drivers/cpufreq/cpufreq_governor.h | 4 +-
8145 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
8146 drivers/cpufreq/intel_pstate.c | 38 +-
8147 drivers/cpufreq/p4-clockmod.c | 12 +-
8148 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
8149 drivers/cpufreq/speedstep-centrino.c | 7 +-
8150 drivers/cpuidle/driver.c | 2 +-
8151 drivers/cpuidle/dt_idle_states.c | 2 +-
8152 drivers/cpuidle/governor.c | 2 +-
8153 drivers/cpuidle/sysfs.c | 2 +-
8154 drivers/crypto/hifn_795x.c | 4 +-
8155 drivers/devfreq/devfreq.c | 4 +-
8156 drivers/dma/sh/shdma-base.c | 4 +-
8157 drivers/dma/sh/shdmac.c | 2 +-
8158 drivers/edac/edac_device.c | 4 +-
8159 drivers/edac/edac_mc_sysfs.c | 2 +-
8160 drivers/edac/edac_pci.c | 4 +-
8161 drivers/edac/edac_pci_sysfs.c | 22 +-
8162 drivers/edac/mce_amd.h | 2 +-
8163 drivers/firewire/core-card.c | 6 +-
8164 drivers/firewire/core-device.c | 2 +-
8165 drivers/firewire/core-transaction.c | 1 +
8166 drivers/firewire/core.h | 1 +
8167 drivers/firmware/dmi-id.c | 2 +-
8168 drivers/firmware/dmi_scan.c | 12 +-
8169 drivers/firmware/efi/cper.c | 8 +-
8170 drivers/firmware/efi/efi.c | 12 +-
8171 drivers/firmware/efi/efivars.c | 2 +-
8172 drivers/firmware/efi/runtime-map.c | 2 +-
8173 drivers/firmware/google/gsmi.c | 2 +-
8174 drivers/firmware/google/memconsole.c | 7 +-
8175 drivers/firmware/memmap.c | 2 +-
8176 drivers/firmware/psci.c | 2 +-
8177 drivers/gpio/gpio-davinci.c | 6 +-
8178 drivers/gpio/gpio-em.c | 2 +-
8179 drivers/gpio/gpio-ich.c | 2 +-
8180 drivers/gpio/gpio-omap.c | 4 +-
8181 drivers/gpio/gpio-rcar.c | 2 +-
8182 drivers/gpio/gpio-vr41xx.c | 2 +-
8183 drivers/gpio/gpiolib.c | 12 +-
8184 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
8185 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
8186 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
8187 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
8188 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
8189 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
8190 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
8191 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
8192 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
8193 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
8194 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
8195 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
8196 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
8197 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
8198 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
8199 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
8200 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
8201 drivers/gpu/drm/armada/armada_drv.c | 3 +-
8202 drivers/gpu/drm/drm_crtc.c | 2 +-
8203 drivers/gpu/drm/drm_drv.c | 2 +-
8204 drivers/gpu/drm/drm_fops.c | 12 +-
8205 drivers/gpu/drm/drm_global.c | 14 +-
8206 drivers/gpu/drm/drm_info.c | 13 +-
8207 drivers/gpu/drm/drm_ioc32.c | 13 +-
8208 drivers/gpu/drm/drm_ioctl.c | 2 +-
8209 drivers/gpu/drm/drm_pci.c | 9 +-
8210 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
8211 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
8212 drivers/gpu/drm/gma500/psb_drv.c | 1 -
8213 drivers/gpu/drm/i810/i810_dma.c | 2 +-
8214 drivers/gpu/drm/i810/i810_drv.c | 6 +-
8215 drivers/gpu/drm/i810/i810_drv.h | 6 +-
8216 drivers/gpu/drm/i915/i915_dma.c | 4 +-
8217 drivers/gpu/drm/i915/i915_drv.c | 7 +-
8218 drivers/gpu/drm/i915/i915_drv.h | 2 +-
8219 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
8220 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
8221 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
8222 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
8223 drivers/gpu/drm/i915/i915_irq.c | 88 +-
8224 drivers/gpu/drm/i915/intel_display.c | 26 +-
8225 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
8226 drivers/gpu/drm/mga/mga_drv.c | 5 +-
8227 drivers/gpu/drm/mga/mga_drv.h | 6 +-
8228 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
8229 drivers/gpu/drm/mga/mga_irq.c | 8 +-
8230 drivers/gpu/drm/mga/mga_state.c | 2 +-
8231 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
8232 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
8233 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
8234 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
8235 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
8236 drivers/gpu/drm/omapdrm/Makefile | 2 +-
8237 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
8238 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
8239 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
8240 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
8241 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
8242 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
8243 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
8244 drivers/gpu/drm/r128/r128_cce.c | 2 +-
8245 drivers/gpu/drm/r128/r128_drv.c | 4 +-
8246 drivers/gpu/drm/r128/r128_drv.h | 6 +-
8247 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
8248 drivers/gpu/drm/r128/r128_irq.c | 4 +-
8249 drivers/gpu/drm/r128/r128_state.c | 6 +-
8250 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
8251 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
8252 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
8253 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
8254 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
8255 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
8256 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
8257 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
8258 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
8259 drivers/gpu/drm/savage/savage_bci.c | 2 +-
8260 drivers/gpu/drm/savage/savage_drv.c | 5 +-
8261 drivers/gpu/drm/savage/savage_drv.h | 2 +-
8262 drivers/gpu/drm/sis/sis_drv.c | 5 +-
8263 drivers/gpu/drm/sis/sis_drv.h | 2 +-
8264 drivers/gpu/drm/sis/sis_mm.c | 2 +-
8265 drivers/gpu/drm/tegra/dc.c | 2 +-
8266 drivers/gpu/drm/tegra/dsi.c | 2 +-
8267 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8268 drivers/gpu/drm/tegra/sor.c | 7 +-
8269 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8270 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8271 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8272 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8273 drivers/gpu/drm/udl/udl_fb.c | 1 -
8274 drivers/gpu/drm/via/via_dma.c | 2 +-
8275 drivers/gpu/drm/via/via_drv.c | 5 +-
8276 drivers/gpu/drm/via/via_drv.h | 6 +-
8277 drivers/gpu/drm/via/via_irq.c | 18 +-
8278 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8279 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8280 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8281 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8282 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8283 drivers/hid/hid-core.c | 4 +-
8284 drivers/hid/hid-sensor-custom.c | 2 +-
8285 drivers/hv/channel.c | 6 +-
8286 drivers/hv/hv.c | 4 +-
8287 drivers/hv/hv_balloon.c | 18 +-
8288 drivers/hv/hyperv_vmbus.h | 2 +-
8289 drivers/hwmon/acpi_power_meter.c | 6 +-
8290 drivers/hwmon/applesmc.c | 2 +-
8291 drivers/hwmon/asus_atk0110.c | 10 +-
8292 drivers/hwmon/coretemp.c | 2 +-
8293 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8294 drivers/hwmon/ibmaem.c | 2 +-
8295 drivers/hwmon/iio_hwmon.c | 2 +-
8296 drivers/hwmon/nct6683.c | 6 +-
8297 drivers/hwmon/nct6775.c | 6 +-
8298 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8299 drivers/hwmon/sht15.c | 12 +-
8300 drivers/hwmon/via-cputemp.c | 2 +-
8301 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8302 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
8303 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8304 drivers/i2c/i2c-dev.c | 2 +-
8305 drivers/ide/ide-cd.c | 2 +-
8306 drivers/ide/ide-disk.c | 2 +-
8307 drivers/iio/industrialio-core.c | 2 +-
8308 drivers/iio/magnetometer/ak8975.c | 2 +-
8309 drivers/infiniband/core/cm.c | 32 +-
8310 drivers/infiniband/core/fmr_pool.c | 20 +-
8311 drivers/infiniband/core/netlink.c | 5 +-
8312 drivers/infiniband/core/uverbs_cmd.c | 3 +
8313 drivers/infiniband/hw/cxgb4/device.c | 6 +-
8314 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
8315 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8316 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8317 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8318 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8319 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8320 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8321 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8322 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8323 drivers/infiniband/hw/nes/nes.c | 4 +-
8324 drivers/infiniband/hw/nes/nes.h | 40 +-
8325 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8326 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8327 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8328 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8329 drivers/infiniband/hw/qib/qib.h | 1 +
8330 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8331 drivers/input/evdev.c | 2 +-
8332 drivers/input/gameport/gameport.c | 4 +-
8333 drivers/input/input.c | 4 +-
8334 drivers/input/joystick/sidewinder.c | 1 +
8335 drivers/input/misc/ims-pcu.c | 4 +-
8336 drivers/input/mouse/psmouse.h | 2 +-
8337 drivers/input/mousedev.c | 2 +-
8338 drivers/input/serio/serio.c | 4 +-
8339 drivers/input/serio/serio_raw.c | 4 +-
8340 drivers/input/touchscreen/htcpen.c | 2 +-
8341 drivers/iommu/arm-smmu-v3.c | 2 +-
8342 drivers/iommu/arm-smmu.c | 43 +-
8343 drivers/iommu/io-pgtable-arm.c | 101 +-
8344 drivers/iommu/io-pgtable.c | 11 +-
8345 drivers/iommu/io-pgtable.h | 19 +-
8346 drivers/iommu/iommu.c | 2 +-
8347 drivers/iommu/ipmmu-vmsa.c | 13 +-
8348 drivers/iommu/irq_remapping.c | 2 +-
8349 drivers/irqchip/irq-gic.c | 2 +-
8350 drivers/irqchip/irq-i8259.c | 2 +-
8351 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8352 drivers/isdn/capi/capi.c | 10 +-
8353 drivers/isdn/gigaset/interface.c | 8 +-
8354 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8355 drivers/isdn/hardware/avm/b1.c | 4 +-
8356 drivers/isdn/i4l/isdn_common.c | 2 +
8357 drivers/isdn/i4l/isdn_tty.c | 22 +-
8358 drivers/isdn/icn/icn.c | 2 +-
8359 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8360 drivers/lguest/core.c | 10 +-
8361 drivers/lguest/page_tables.c | 2 +-
8362 drivers/lguest/x86/core.c | 12 +-
8363 drivers/lguest/x86/switcher_32.S | 27 +-
8364 drivers/md/bcache/alloc.c | 2 +-
8365 drivers/md/bcache/bcache.h | 10 +-
8366 drivers/md/bcache/btree.c | 2 +-
8367 drivers/md/bcache/closure.h | 2 +-
8368 drivers/md/bcache/io.c | 10 +-
8369 drivers/md/bcache/journal.c | 2 +-
8370 drivers/md/bcache/stats.c | 26 +-
8371 drivers/md/bcache/stats.h | 16 +-
8372 drivers/md/bcache/super.c | 2 +-
8373 drivers/md/bcache/sysfs.c | 20 +-
8374 drivers/md/bitmap.c | 2 +-
8375 drivers/md/dm-cache-target.c | 98 +-
8376 drivers/md/dm-ioctl.c | 2 +-
8377 drivers/md/dm-raid.c | 2 +-
8378 drivers/md/dm-raid1.c | 18 +-
8379 drivers/md/dm-stats.c | 6 +-
8380 drivers/md/dm-stripe.c | 10 +-
8381 drivers/md/dm-table.c | 2 +-
8382 drivers/md/dm-thin-metadata.c | 4 +-
8383 drivers/md/dm.c | 28 +-
8384 drivers/md/md.c | 37 +-
8385 drivers/md/md.h | 8 +-
8386 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8387 drivers/md/persistent-data/dm-space-map.h | 1 +
8388 drivers/md/raid1.c | 8 +-
8389 drivers/md/raid10.c | 20 +-
8390 drivers/md/raid5.c | 26 +-
8391 drivers/media/dvb-core/dvbdev.c | 2 +-
8392 drivers/media/dvb-frontends/af9033.h | 2 +-
8393 drivers/media/dvb-frontends/dib3000.h | 2 +-
8394 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8395 drivers/media/dvb-frontends/dib8000.h | 2 +-
8396 drivers/media/pci/cx88/cx88-video.c | 6 +-
8397 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8398 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8399 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8400 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8401 drivers/media/pci/tw68/tw68-core.c | 2 +-
8402 drivers/media/pci/zoran/zoran.h | 1 -
8403 drivers/media/pci/zoran/zoran_driver.c | 3 -
8404 drivers/media/platform/omap/omap_vout.c | 11 +-
8405 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8406 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8407 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8408 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8409 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8410 drivers/media/radio/radio-cadet.c | 2 +
8411 drivers/media/radio/radio-maxiradio.c | 2 +-
8412 drivers/media/radio/radio-shark.c | 2 +-
8413 drivers/media/radio/radio-shark2.c | 2 +-
8414 drivers/media/radio/radio-si476x.c | 2 +-
8415 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8416 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8417 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8418 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8419 drivers/memory/omap-gpmc.c | 21 +-
8420 drivers/message/fusion/mptsas.c | 34 +-
8421 drivers/mfd/ab8500-debugfs.c | 2 +-
8422 drivers/mfd/kempld-core.c | 2 +-
8423 drivers/mfd/max8925-i2c.c | 2 +-
8424 drivers/mfd/tps65910.c | 2 +-
8425 drivers/mfd/twl4030-irq.c | 9 +-
8426 drivers/misc/c2port/core.c | 4 +-
8427 drivers/misc/kgdbts.c | 4 +-
8428 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8429 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8430 drivers/misc/mic/scif/scif_api.c | 10 +-
8431 drivers/misc/mic/scif/scif_rb.c | 8 +-
8432 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8433 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8434 drivers/misc/sgi-gru/grutables.h | 158 +-
8435 drivers/misc/sgi-xp/xp.h | 2 +-
8436 drivers/misc/sgi-xp/xpc.h | 3 +-
8437 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8438 drivers/mmc/host/dw_mmc.h | 2 +-
8439 drivers/mmc/host/mmci.c | 4 +-
8440 drivers/mmc/host/omap_hsmmc.c | 4 +-
8441 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8442 drivers/mmc/host/sdhci-s3c.c | 8 +-
8443 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8444 drivers/mtd/nand/denali.c | 1 +
8445 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8446 drivers/mtd/nftlmount.c | 1 +
8447 drivers/mtd/sm_ftl.c | 2 +-
8448 drivers/net/bonding/bond_netlink.c | 2 +-
8449 drivers/net/caif/caif_hsi.c | 2 +-
8450 drivers/net/can/Kconfig | 2 +-
8451 drivers/net/can/dev.c | 2 +-
8452 drivers/net/can/vcan.c | 2 +-
8453 drivers/net/dummy.c | 2 +-
8454 drivers/net/ethernet/8390/ax88796.c | 4 +-
8455 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8456 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8457 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8458 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8459 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8460 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8461 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8462 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8463 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8464 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8465 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8466 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8467 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8468 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8469 drivers/net/ethernet/broadcom/tg3.h | 1 +
8470 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8471 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8472 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8473 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8474 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8475 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8476 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8477 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8478 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8479 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8480 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8481 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8482 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
8483 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8484 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8485 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8486 drivers/net/ethernet/realtek/r8169.c | 8 +-
8487 drivers/net/ethernet/sfc/ptp.c | 2 +-
8488 drivers/net/ethernet/sfc/selftest.c | 20 +-
8489 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8490 drivers/net/ethernet/via/via-rhine.c | 2 +-
8491 drivers/net/geneve.c | 2 +-
8492 drivers/net/hyperv/hyperv_net.h | 2 +-
8493 drivers/net/hyperv/rndis_filter.c | 7 +-
8494 drivers/net/ifb.c | 2 +-
8495 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8496 drivers/net/irda/vlsi_ir.c | 18 +-
8497 drivers/net/irda/vlsi_ir.h | 14 +-
8498 drivers/net/macvlan.c | 20 +-
8499 drivers/net/macvtap.c | 10 +-
8500 drivers/net/nlmon.c | 2 +-
8501 drivers/net/phy/phy_device.c | 6 +-
8502 drivers/net/ppp/ppp_generic.c | 4 +-
8503 drivers/net/slip/slhc.c | 2 +-
8504 drivers/net/team/team.c | 4 +-
8505 drivers/net/tun.c | 7 +-
8506 drivers/net/usb/hso.c | 23 +-
8507 drivers/net/usb/r8152.c | 2 +-
8508 drivers/net/usb/sierra_net.c | 4 +-
8509 drivers/net/virtio_net.c | 2 +-
8510 drivers/net/vrf.c | 2 +-
8511 drivers/net/vxlan.c | 4 +-
8512 drivers/net/wimax/i2400m/rx.c | 2 +-
8513 drivers/net/wireless/airo.c | 2 +-
8514 drivers/net/wireless/at76c50x-usb.c | 2 +-
8515 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8516 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8517 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8518 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8519 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8520 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8521 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
8522 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
8523 drivers/net/wireless/ath/carl9170/main.c | 10 +-
8524 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
8525 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8526 drivers/net/wireless/b43/phy_lp.c | 2 +-
8527 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8528 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8529 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
8530 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
8531 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8532 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8533 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8534 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8535 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8536 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8537 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8538 drivers/of/fdt.c | 4 +-
8539 drivers/oprofile/buffer_sync.c | 8 +-
8540 drivers/oprofile/event_buffer.c | 2 +-
8541 drivers/oprofile/oprof.c | 2 +-
8542 drivers/oprofile/oprofile_stats.c | 10 +-
8543 drivers/oprofile/oprofile_stats.h | 10 +-
8544 drivers/oprofile/oprofilefs.c | 6 +-
8545 drivers/oprofile/timer_int.c | 2 +-
8546 drivers/parport/procfs.c | 4 +-
8547 drivers/pci/host/pci-host-generic.c | 2 +-
8548 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8549 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8550 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8551 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8552 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8553 drivers/pci/hotplug/pciehp_core.c | 2 +-
8554 drivers/pci/msi.c | 22 +-
8555 drivers/pci/pci-sysfs.c | 6 +-
8556 drivers/pci/pci.h | 2 +-
8557 drivers/pci/pcie/aspm.c | 6 +-
8558 drivers/pci/pcie/portdrv_pci.c | 2 +-
8559 drivers/pci/probe.c | 2 +-
8560 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8561 drivers/pinctrl/pinctrl-at91.c | 5 +-
8562 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8563 drivers/platform/x86/alienware-wmi.c | 4 +-
8564 drivers/platform/x86/compal-laptop.c | 2 +-
8565 drivers/platform/x86/hdaps.c | 2 +-
8566 drivers/platform/x86/ibm_rtl.c | 2 +-
8567 drivers/platform/x86/intel_oaktrail.c | 2 +-
8568 drivers/platform/x86/msi-laptop.c | 16 +-
8569 drivers/platform/x86/msi-wmi.c | 2 +-
8570 drivers/platform/x86/samsung-laptop.c | 2 +-
8571 drivers/platform/x86/samsung-q10.c | 2 +-
8572 drivers/platform/x86/sony-laptop.c | 14 +-
8573 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8574 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8575 drivers/pnp/pnpbios/core.c | 2 +-
8576 drivers/power/pda_power.c | 7 +-
8577 drivers/power/power_supply.h | 4 +-
8578 drivers/power/power_supply_core.c | 7 +-
8579 drivers/power/power_supply_sysfs.c | 6 +-
8580 drivers/power/reset/at91-reset.c | 5 +-
8581 drivers/powercap/powercap_sys.c | 136 +-
8582 drivers/ptp/ptp_private.h | 2 +-
8583 drivers/ptp/ptp_sysfs.c | 2 +-
8584 drivers/regulator/core.c | 4 +-
8585 drivers/regulator/max8660.c | 6 +-
8586 drivers/regulator/max8973-regulator.c | 16 +-
8587 drivers/regulator/mc13892-regulator.c | 8 +-
8588 drivers/rtc/rtc-armada38x.c | 7 +-
8589 drivers/rtc/rtc-cmos.c | 4 +-
8590 drivers/rtc/rtc-ds1307.c | 2 +-
8591 drivers/rtc/rtc-m48t59.c | 4 +-
8592 drivers/rtc/rtc-rv8803.c | 15 +-
8593 drivers/rtc/rtc-test.c | 6 +-
8594 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8595 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8596 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8597 drivers/scsi/hosts.c | 4 +-
8598 drivers/scsi/hpsa.c | 38 +-
8599 drivers/scsi/hpsa.h | 2 +-
8600 drivers/scsi/hptiop.c | 2 -
8601 drivers/scsi/hptiop.h | 1 -
8602 drivers/scsi/ipr.c | 6 +-
8603 drivers/scsi/ipr.h | 2 +-
8604 drivers/scsi/libfc/fc_exch.c | 50 +-
8605 drivers/scsi/libsas/sas_ata.c | 2 +-
8606 drivers/scsi/lpfc/lpfc.h | 8 +-
8607 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8608 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8609 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8610 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8611 drivers/scsi/pmcraid.c | 20 +-
8612 drivers/scsi/pmcraid.h | 8 +-
8613 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8614 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8615 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8616 drivers/scsi/qla2xxx/qla_target.c | 10 +-
8617 drivers/scsi/qla2xxx/qla_target.h | 2 +-
8618 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8619 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8620 drivers/scsi/scsi.c | 2 +-
8621 drivers/scsi/scsi_lib.c | 8 +-
8622 drivers/scsi/scsi_sysfs.c | 2 +-
8623 drivers/scsi/scsi_transport_fc.c | 8 +-
8624 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8625 drivers/scsi/scsi_transport_srp.c | 6 +-
8626 drivers/scsi/sd.c | 6 +-
8627 drivers/scsi/sg.c | 2 +-
8628 drivers/scsi/sr.c | 21 +-
8629 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8630 drivers/spi/spi.c | 2 +-
8631 drivers/staging/android/timed_output.c | 6 +-
8632 drivers/staging/comedi/comedi_fops.c | 8 +-
8633 drivers/staging/fbtft/fbtft-core.c | 2 +-
8634 drivers/staging/fbtft/fbtft.h | 2 +-
8635 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8636 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8637 drivers/staging/iio/adc/ad7280a.c | 4 +-
8638 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8639 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8640 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8641 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8642 drivers/staging/lustre/lustre/include/obd.h | 2 +-
8643 drivers/staging/octeon/ethernet-rx.c | 20 +-
8644 drivers/staging/octeon/ethernet.c | 8 +-
8645 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
8646 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
8647 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
8648 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
8649 drivers/staging/sm750fb/sm750.c | 14 +-
8650 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
8651 drivers/target/sbp/sbp_target.c | 4 +-
8652 drivers/thermal/cpu_cooling.c | 9 +-
8653 drivers/thermal/devfreq_cooling.c | 19 +-
8654 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8655 drivers/thermal/of-thermal.c | 17 +-
8656 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
8657 drivers/tty/cyclades.c | 6 +-
8658 drivers/tty/hvc/hvc_console.c | 14 +-
8659 drivers/tty/hvc/hvcs.c | 21 +-
8660 drivers/tty/hvc/hvsi.c | 22 +-
8661 drivers/tty/hvc/hvsi_lib.c | 4 +-
8662 drivers/tty/ipwireless/tty.c | 27 +-
8663 drivers/tty/moxa.c | 2 +-
8664 drivers/tty/n_gsm.c | 4 +-
8665 drivers/tty/n_tty.c | 19 +-
8666 drivers/tty/pty.c | 4 +-
8667 drivers/tty/rocket.c | 6 +-
8668 drivers/tty/serial/8250/8250_core.c | 10 +-
8669 drivers/tty/serial/ifx6x60.c | 2 +-
8670 drivers/tty/serial/ioc4_serial.c | 6 +-
8671 drivers/tty/serial/kgdb_nmi.c | 4 +-
8672 drivers/tty/serial/kgdboc.c | 32 +-
8673 drivers/tty/serial/msm_serial.c | 4 +-
8674 drivers/tty/serial/samsung.c | 9 +-
8675 drivers/tty/serial/serial_core.c | 8 +-
8676 drivers/tty/synclink.c | 34 +-
8677 drivers/tty/synclink_gt.c | 28 +-
8678 drivers/tty/synclinkmp.c | 34 +-
8679 drivers/tty/tty_io.c | 2 +-
8680 drivers/tty/tty_ldisc.c | 8 +-
8681 drivers/tty/tty_port.c | 22 +-
8682 drivers/uio/uio.c | 13 +-
8683 drivers/usb/atm/cxacru.c | 2 +-
8684 drivers/usb/atm/usbatm.c | 24 +-
8685 drivers/usb/class/cdc-acm.h | 2 +-
8686 drivers/usb/core/devices.c | 6 +-
8687 drivers/usb/core/devio.c | 12 +-
8688 drivers/usb/core/hcd.c | 4 +-
8689 drivers/usb/core/sysfs.c | 2 +-
8690 drivers/usb/core/usb.c | 2 +-
8691 drivers/usb/early/ehci-dbgp.c | 16 +-
8692 drivers/usb/gadget/function/u_serial.c | 22 +-
8693 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
8694 drivers/usb/host/ehci-hcd.c | 2 +-
8695 drivers/usb/host/ehci-hub.c | 4 +-
8696 drivers/usb/host/ehci-q.c | 4 +-
8697 drivers/usb/host/fotg210-hcd.c | 2 +-
8698 drivers/usb/host/hwa-hc.c | 2 +-
8699 drivers/usb/host/ohci-hcd.c | 2 +-
8700 drivers/usb/host/r8a66597.h | 2 +-
8701 drivers/usb/host/uhci-hcd.c | 2 +-
8702 drivers/usb/host/xhci-pci.c | 2 +-
8703 drivers/usb/host/xhci.c | 2 +-
8704 drivers/usb/misc/appledisplay.c | 4 +-
8705 drivers/usb/serial/console.c | 8 +-
8706 drivers/usb/storage/transport.c | 2 +-
8707 drivers/usb/storage/usb.c | 2 +-
8708 drivers/usb/storage/usb.h | 2 +-
8709 drivers/usb/usbip/vhci.h | 2 +-
8710 drivers/usb/usbip/vhci_hcd.c | 6 +-
8711 drivers/usb/usbip/vhci_rx.c | 2 +-
8712 drivers/usb/wusbcore/wa-hc.h | 4 +-
8713 drivers/usb/wusbcore/wa-xfer.c | 2 +-
8714 drivers/vhost/vringh.c | 20 +-
8715 drivers/video/backlight/kb3886_bl.c | 2 +-
8716 drivers/video/console/fbcon.c | 2 +-
8717 drivers/video/fbdev/aty/aty128fb.c | 2 +-
8718 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
8719 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
8720 drivers/video/fbdev/core/fb_defio.c | 6 +-
8721 drivers/video/fbdev/core/fbmem.c | 12 +-
8722 drivers/video/fbdev/hyperv_fb.c | 4 +-
8723 drivers/video/fbdev/i810/i810_accel.c | 1 +
8724 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
8725 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
8726 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
8727 drivers/video/fbdev/omap2/dss/display.c | 8 +-
8728 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
8729 drivers/video/fbdev/smscufx.c | 4 +-
8730 drivers/video/fbdev/udlfb.c | 36 +-
8731 drivers/video/fbdev/uvesafb.c | 52 +-
8732 drivers/video/fbdev/vesafb.c | 58 +-
8733 drivers/video/fbdev/via/via_clock.h | 2 +-
8734 drivers/xen/events/events_base.c | 6 +-
8735 fs/Kconfig.binfmt | 2 +-
8736 fs/afs/inode.c | 4 +-
8737 fs/aio.c | 2 +-
8738 fs/autofs4/waitq.c | 2 +-
8739 fs/befs/endian.h | 6 +-
8740 fs/binfmt_aout.c | 23 +-
8741 fs/binfmt_elf.c | 670 +-
8742 fs/binfmt_elf_fdpic.c | 4 +-
8743 fs/block_dev.c | 2 +-
8744 fs/btrfs/ctree.c | 11 +-
8745 fs/btrfs/ctree.h | 4 +-
8746 fs/btrfs/delayed-inode.c | 9 +-
8747 fs/btrfs/delayed-inode.h | 6 +-
8748 fs/btrfs/delayed-ref.c | 4 +-
8749 fs/btrfs/disk-io.c | 4 +-
8750 fs/btrfs/extent_map.c | 8 +-
8751 fs/btrfs/file.c | 4 +-
8752 fs/btrfs/inode.c | 14 +-
8753 fs/btrfs/raid56.c | 32 +-
8754 fs/btrfs/super.c | 2 +-
8755 fs/btrfs/sysfs.c | 2 +-
8756 fs/btrfs/tests/btrfs-tests.c | 2 +-
8757 fs/btrfs/tests/free-space-tests.c | 8 +-
8758 fs/btrfs/transaction.c | 2 +-
8759 fs/btrfs/tree-log.c | 8 +-
8760 fs/btrfs/tree-log.h | 2 +-
8761 fs/btrfs/volumes.c | 14 +-
8762 fs/btrfs/volumes.h | 22 +-
8763 fs/buffer.c | 2 +-
8764 fs/cachefiles/bind.c | 6 +-
8765 fs/cachefiles/daemon.c | 8 +-
8766 fs/cachefiles/internal.h | 12 +-
8767 fs/cachefiles/namei.c | 2 +-
8768 fs/cachefiles/proc.c | 12 +-
8769 fs/ceph/dir.c | 12 +-
8770 fs/ceph/super.c | 4 +-
8771 fs/cifs/cifs_debug.c | 12 +-
8772 fs/cifs/cifsfs.c | 8 +-
8773 fs/cifs/cifsglob.h | 54 +-
8774 fs/cifs/file.c | 12 +-
8775 fs/cifs/misc.c | 4 +-
8776 fs/cifs/smb1ops.c | 80 +-
8777 fs/cifs/smb2ops.c | 84 +-
8778 fs/cifs/smb2pdu.c | 3 +-
8779 fs/coda/cache.c | 10 +-
8780 fs/compat.c | 7 +-
8781 fs/compat_binfmt_elf.c | 2 +
8782 fs/compat_ioctl.c | 12 +-
8783 fs/configfs/dir.c | 10 +-
8784 fs/coredump.c | 18 +-
8785 fs/dcache.c | 64 +-
8786 fs/ecryptfs/inode.c | 2 +-
8787 fs/ecryptfs/miscdev.c | 2 +-
8788 fs/exec.c | 362 +-
8789 fs/ext2/xattr.c | 5 +-
8790 fs/ext4/ext4.h | 20 +-
8791 fs/ext4/mballoc.c | 44 +-
8792 fs/ext4/resize.c | 16 +-
8793 fs/ext4/super.c | 2 +-
8794 fs/ext4/sysfs.c | 2 +-
8795 fs/ext4/xattr.c | 5 +-
8796 fs/fhandle.c | 5 +-
8797 fs/file.c | 18 +-
8798 fs/fs-writeback.c | 11 +-
8799 fs/fs_struct.c | 8 +-
8800 fs/fscache/cookie.c | 40 +-
8801 fs/fscache/internal.h | 202 +-
8802 fs/fscache/object.c | 26 +-
8803 fs/fscache/operation.c | 38 +-
8804 fs/fscache/page.c | 110 +-
8805 fs/fscache/stats.c | 348 +-
8806 fs/fuse/cuse.c | 10 +-
8807 fs/fuse/dev.c | 4 +-
8808 fs/gfs2/file.c | 2 +-
8809 fs/gfs2/glock.c | 22 +-
8810 fs/gfs2/glops.c | 4 +-
8811 fs/gfs2/quota.c | 6 +-
8812 fs/hugetlbfs/inode.c | 13 +-
8813 fs/inode.c | 4 +-
8814 fs/jbd2/commit.c | 2 +-
8815 fs/jbd2/transaction.c | 4 +-
8816 fs/jffs2/erase.c | 3 +-
8817 fs/jffs2/wbuf.c | 3 +-
8818 fs/jfs/super.c | 2 +-
8819 fs/kernfs/dir.c | 2 +-
8820 fs/kernfs/file.c | 20 +-
8821 fs/libfs.c | 10 +-
8822 fs/lockd/clntproc.c | 4 +-
8823 fs/namei.c | 16 +-
8824 fs/namespace.c | 16 +-
8825 fs/nfs/callback_xdr.c | 2 +-
8826 fs/nfs/inode.c | 6 +-
8827 fs/nfsd/nfs4proc.c | 2 +-
8828 fs/nfsd/nfs4xdr.c | 2 +-
8829 fs/nfsd/nfscache.c | 11 +-
8830 fs/nfsd/vfs.c | 6 +-
8831 fs/nls/nls_base.c | 26 +-
8832 fs/nls/nls_euc-jp.c | 6 +-
8833 fs/nls/nls_koi8-ru.c | 6 +-
8834 fs/notify/fanotify/fanotify_user.c | 4 +-
8835 fs/notify/notification.c | 4 +-
8836 fs/ntfs/dir.c | 2 +-
8837 fs/ntfs/super.c | 6 +-
8838 fs/ocfs2/dlm/dlmcommon.h | 4 +-
8839 fs/ocfs2/dlm/dlmdebug.c | 10 +-
8840 fs/ocfs2/dlm/dlmdomain.c | 4 +-
8841 fs/ocfs2/dlm/dlmmaster.c | 4 +-
8842 fs/ocfs2/localalloc.c | 2 +-
8843 fs/ocfs2/ocfs2.h | 10 +-
8844 fs/ocfs2/suballoc.c | 12 +-
8845 fs/ocfs2/super.c | 20 +-
8846 fs/overlayfs/copy_up.c | 2 +-
8847 fs/pipe.c | 72 +-
8848 fs/posix_acl.c | 4 +-
8849 fs/proc/array.c | 20 +
8850 fs/proc/base.c | 4 +-
8851 fs/proc/kcore.c | 34 +-
8852 fs/proc/meminfo.c | 2 +-
8853 fs/proc/nommu.c | 2 +-
8854 fs/proc/proc_sysctl.c | 26 +-
8855 fs/proc/task_mmu.c | 42 +-
8856 fs/proc/task_nommu.c | 4 +-
8857 fs/proc/vmcore.c | 16 +-
8858 fs/qnx6/qnx6.h | 4 +-
8859 fs/quota/netlink.c | 4 +-
8860 fs/read_write.c | 2 +-
8861 fs/readdir.c | 3 +-
8862 fs/reiserfs/do_balan.c | 2 +-
8863 fs/reiserfs/procfs.c | 2 +-
8864 fs/reiserfs/reiserfs.h | 4 +-
8865 fs/seq_file.c | 4 +-
8866 fs/splice.c | 43 +-
8867 fs/squashfs/xattr.c | 12 +-
8868 fs/super.c | 3 +-
8869 fs/sysv/sysv.h | 2 +-
8870 fs/tracefs/inode.c | 8 +-
8871 fs/udf/misc.c | 2 +-
8872 fs/ufs/swab.h | 4 +-
8873 fs/userfaultfd.c | 2 +-
8874 fs/xattr.c | 21 +
8875 fs/xfs/libxfs/xfs_bmap.c | 2 +-
8876 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
8877 fs/xfs/xfs_dir2_readdir.c | 7 +-
8878 fs/xfs/xfs_ioctl.c | 2 +-
8879 fs/xfs/xfs_linux.h | 4 +-
8880 include/acpi/ghes.h | 2 +-
8881 include/asm-generic/4level-fixup.h | 2 +
8882 include/asm-generic/atomic-long.h | 176 +-
8883 include/asm-generic/atomic64.h | 12 +
8884 include/asm-generic/bitops/__fls.h | 2 +-
8885 include/asm-generic/bitops/fls.h | 2 +-
8886 include/asm-generic/bitops/fls64.h | 4 +-
8887 include/asm-generic/bug.h | 6 +-
8888 include/asm-generic/cache.h | 4 +-
8889 include/asm-generic/emergency-restart.h | 2 +-
8890 include/asm-generic/kmap_types.h | 4 +-
8891 include/asm-generic/local.h | 13 +
8892 include/asm-generic/pgtable-nopmd.h | 18 +-
8893 include/asm-generic/pgtable-nopud.h | 15 +-
8894 include/asm-generic/pgtable.h | 16 +
8895 include/asm-generic/sections.h | 1 +
8896 include/asm-generic/uaccess.h | 16 +
8897 include/asm-generic/vmlinux.lds.h | 15 +-
8898 include/crypto/algapi.h | 2 +-
8899 include/drm/drmP.h | 19 +-
8900 include/drm/drm_crtc_helper.h | 2 +-
8901 include/drm/drm_mm.h | 2 +-
8902 include/drm/i915_pciids.h | 2 +-
8903 include/drm/intel-gtt.h | 4 +-
8904 include/drm/ttm/ttm_memory.h | 2 +-
8905 include/drm/ttm/ttm_page_alloc.h | 1 +
8906 include/keys/asymmetric-subtype.h | 2 +-
8907 include/linux/atmdev.h | 4 +-
8908 include/linux/atomic.h | 2 +-
8909 include/linux/audit.h | 2 +-
8910 include/linux/average.h | 2 +-
8911 include/linux/binfmts.h | 3 +-
8912 include/linux/bitmap.h | 2 +-
8913 include/linux/bitops.h | 8 +-
8914 include/linux/blk-cgroup.h | 24 +-
8915 include/linux/blkdev.h | 2 +-
8916 include/linux/blktrace_api.h | 2 +-
8917 include/linux/cache.h | 8 +
8918 include/linux/cdrom.h | 1 -
8919 include/linux/cleancache.h | 2 +-
8920 include/linux/clk-provider.h | 1 +
8921 include/linux/compat.h | 6 +-
8922 include/linux/compiler-gcc.h | 28 +-
8923 include/linux/compiler.h | 193 +-
8924 include/linux/configfs.h | 2 +-
8925 include/linux/cpufreq.h | 3 +-
8926 include/linux/cpuidle.h | 5 +-
8927 include/linux/cpumask.h | 14 +-
8928 include/linux/crypto.h | 4 +-
8929 include/linux/ctype.h | 2 +-
8930 include/linux/dcache.h | 4 +-
8931 include/linux/decompress/mm.h | 2 +-
8932 include/linux/devfreq.h | 2 +-
8933 include/linux/device.h | 7 +-
8934 include/linux/dma-mapping.h | 2 +-
8935 include/linux/efi.h | 1 +
8936 include/linux/elf.h | 2 +
8937 include/linux/err.h | 4 +-
8938 include/linux/extcon.h | 2 +-
8939 include/linux/fb.h | 3 +-
8940 include/linux/fdtable.h | 2 +-
8941 include/linux/fs.h | 5 +-
8942 include/linux/fs_struct.h | 2 +-
8943 include/linux/fscache-cache.h | 2 +-
8944 include/linux/fscache.h | 2 +-
8945 include/linux/fsnotify.h | 2 +-
8946 include/linux/genhd.h | 4 +-
8947 include/linux/genl_magic_func.h | 2 +-
8948 include/linux/gfp.h | 12 +-
8949 include/linux/highmem.h | 12 +
8950 include/linux/hwmon-sysfs.h | 6 +-
8951 include/linux/i2c.h | 1 +
8952 include/linux/if_pppox.h | 2 +-
8953 include/linux/init.h | 12 +-
8954 include/linux/init_task.h | 7 +
8955 include/linux/interrupt.h | 6 +-
8956 include/linux/iommu.h | 2 +-
8957 include/linux/ioport.h | 2 +-
8958 include/linux/ipc.h | 2 +-
8959 include/linux/irq.h | 5 +-
8960 include/linux/irqdesc.h | 2 +-
8961 include/linux/irqdomain.h | 3 +
8962 include/linux/jbd2.h | 2 +-
8963 include/linux/jiffies.h | 16 +-
8964 include/linux/key-type.h | 2 +-
8965 include/linux/kgdb.h | 6 +-
8966 include/linux/kmemleak.h | 4 +-
8967 include/linux/kobject.h | 3 +-
8968 include/linux/kobject_ns.h | 2 +-
8969 include/linux/kref.h | 2 +-
8970 include/linux/libata.h | 2 +-
8971 include/linux/linkage.h | 1 +
8972 include/linux/list.h | 15 +
8973 include/linux/lockref.h | 26 +-
8974 include/linux/math64.h | 10 +-
8975 include/linux/mempolicy.h | 7 +
8976 include/linux/mm.h | 102 +-
8977 include/linux/mm_types.h | 20 +
8978 include/linux/mmiotrace.h | 4 +-
8979 include/linux/mmzone.h | 2 +-
8980 include/linux/mod_devicetable.h | 4 +-
8981 include/linux/module.h | 69 +-
8982 include/linux/moduleloader.h | 16 +
8983 include/linux/moduleparam.h | 4 +-
8984 include/linux/net.h | 2 +-
8985 include/linux/netdevice.h | 7 +-
8986 include/linux/netfilter.h | 2 +-
8987 include/linux/netfilter/nfnetlink.h | 2 +-
8988 include/linux/netlink.h | 12 +-
8989 include/linux/nls.h | 4 +-
8990 include/linux/notifier.h | 3 +-
8991 include/linux/oprofile.h | 4 +-
8992 include/linux/padata.h | 2 +-
8993 include/linux/pci_hotplug.h | 3 +-
8994 include/linux/percpu.h | 2 +-
8995 include/linux/perf_event.h | 12 +-
8996 include/linux/pipe_fs_i.h | 8 +-
8997 include/linux/pm.h | 1 +
8998 include/linux/pm_domain.h | 2 +-
8999 include/linux/pm_runtime.h | 2 +-
9000 include/linux/pnp.h | 2 +-
9001 include/linux/poison.h | 4 +-
9002 include/linux/power/smartreflex.h | 2 +-
9003 include/linux/ppp-comp.h | 2 +-
9004 include/linux/preempt.h | 21 +
9005 include/linux/proc_ns.h | 2 +-
9006 include/linux/psci.h | 2 +-
9007 include/linux/quota.h | 2 +-
9008 include/linux/random.h | 19 +-
9009 include/linux/rculist.h | 16 +
9010 include/linux/rcupdate.h | 8 +
9011 include/linux/reboot.h | 14 +-
9012 include/linux/regset.h | 3 +-
9013 include/linux/relay.h | 2 +-
9014 include/linux/rio.h | 2 +-
9015 include/linux/rmap.h | 4 +-
9016 include/linux/sched.h | 76 +-
9017 include/linux/sched/sysctl.h | 1 +
9018 include/linux/scif.h | 2 +-
9019 include/linux/semaphore.h | 2 +-
9020 include/linux/seq_file.h | 1 +
9021 include/linux/seqlock.h | 10 +
9022 include/linux/signal.h | 2 +-
9023 include/linux/skbuff.h | 12 +-
9024 include/linux/slab.h | 47 +-
9025 include/linux/slab_def.h | 14 +-
9026 include/linux/slub_def.h | 2 +-
9027 include/linux/smp.h | 2 +
9028 include/linux/sock_diag.h | 2 +-
9029 include/linux/sonet.h | 2 +-
9030 include/linux/spinlock.h | 17 +-
9031 include/linux/srcu.h | 5 +-
9032 include/linux/sunrpc/addr.h | 8 +-
9033 include/linux/sunrpc/clnt.h | 2 +-
9034 include/linux/sunrpc/svc.h | 2 +-
9035 include/linux/sunrpc/svc_rdma.h | 18 +-
9036 include/linux/sunrpc/svcauth.h | 2 +-
9037 include/linux/swapops.h | 10 +-
9038 include/linux/swiotlb.h | 3 +-
9039 include/linux/syscalls.h | 23 +-
9040 include/linux/syscore_ops.h | 2 +-
9041 include/linux/sysctl.h | 3 +-
9042 include/linux/sysfs.h | 9 +-
9043 include/linux/sysrq.h | 3 +-
9044 include/linux/tcp.h | 14 +-
9045 include/linux/thread_info.h | 7 +
9046 include/linux/tty.h | 4 +-
9047 include/linux/tty_driver.h | 2 +-
9048 include/linux/tty_ldisc.h | 2 +-
9049 include/linux/types.h | 16 +
9050 include/linux/uaccess.h | 2 +-
9051 include/linux/uio_driver.h | 2 +-
9052 include/linux/unaligned/access_ok.h | 24 +-
9053 include/linux/usb.h | 12 +-
9054 include/linux/usb/hcd.h | 1 +
9055 include/linux/usb/renesas_usbhs.h | 2 +-
9056 include/linux/vermagic.h | 21 +-
9057 include/linux/vga_switcheroo.h | 8 +-
9058 include/linux/vmalloc.h | 7 +-
9059 include/linux/vmstat.h | 24 +-
9060 include/linux/writeback.h | 3 +-
9061 include/linux/xattr.h | 5 +-
9062 include/linux/zlib.h | 3 +-
9063 include/media/v4l2-dev.h | 2 +-
9064 include/media/v4l2-device.h | 2 +-
9065 include/net/9p/transport.h | 2 +-
9066 include/net/bluetooth/l2cap.h | 2 +-
9067 include/net/bonding.h | 2 +-
9068 include/net/caif/cfctrl.h | 6 +-
9069 include/net/cfg802154.h | 2 +-
9070 include/net/flow.h | 2 +-
9071 include/net/genetlink.h | 2 +-
9072 include/net/gro_cells.h | 2 +-
9073 include/net/inet_connection_sock.h | 2 +-
9074 include/net/inet_sock.h | 2 +-
9075 include/net/inetpeer.h | 2 +-
9076 include/net/ip_fib.h | 2 +-
9077 include/net/ip_vs.h | 8 +-
9078 include/net/ipv6.h | 2 +-
9079 include/net/irda/ircomm_tty.h | 1 +
9080 include/net/iucv/af_iucv.h | 2 +-
9081 include/net/llc_c_ac.h | 2 +-
9082 include/net/llc_c_ev.h | 4 +-
9083 include/net/llc_c_st.h | 2 +-
9084 include/net/llc_s_ac.h | 2 +-
9085 include/net/llc_s_st.h | 2 +-
9086 include/net/mac80211.h | 6 +-
9087 include/net/neighbour.h | 4 +-
9088 include/net/net_namespace.h | 18 +-
9089 include/net/netlink.h | 2 +-
9090 include/net/netns/conntrack.h | 6 +-
9091 include/net/netns/ipv4.h | 4 +-
9092 include/net/netns/ipv6.h | 4 +-
9093 include/net/netns/xfrm.h | 2 +-
9094 include/net/ping.h | 2 +-
9095 include/net/protocol.h | 4 +-
9096 include/net/rtnetlink.h | 2 +-
9097 include/net/sctp/checksum.h | 4 +-
9098 include/net/sctp/sm.h | 4 +-
9099 include/net/sctp/structs.h | 2 +-
9100 include/net/snmp.h | 10 +-
9101 include/net/sock.h | 12 +-
9102 include/net/tcp.h | 8 +-
9103 include/net/xfrm.h | 13 +-
9104 include/rdma/iw_cm.h | 2 +-
9105 include/scsi/libfc.h | 3 +-
9106 include/scsi/scsi_device.h | 6 +-
9107 include/scsi/scsi_driver.h | 2 +-
9108 include/scsi/scsi_transport_fc.h | 3 +-
9109 include/scsi/sg.h | 2 +-
9110 include/sound/compress_driver.h | 2 +-
9111 include/sound/soc.h | 4 +-
9112 include/trace/events/irq.h | 4 +-
9113 include/uapi/linux/a.out.h | 8 +
9114 include/uapi/linux/bcache.h | 5 +-
9115 include/uapi/linux/byteorder/little_endian.h | 28 +-
9116 include/uapi/linux/connector.h | 2 +-
9117 include/uapi/linux/elf.h | 28 +
9118 include/uapi/linux/screen_info.h | 2 +-
9119 include/uapi/linux/swab.h | 6 +-
9120 include/uapi/linux/xattr.h | 4 +
9121 include/video/udlfb.h | 8 +-
9122 include/video/uvesafb.h | 1 +
9123 init/Kconfig | 2 +-
9124 init/Makefile | 3 +
9125 init/do_mounts.c | 14 +-
9126 init/do_mounts.h | 8 +-
9127 init/do_mounts_initrd.c | 30 +-
9128 init/do_mounts_md.c | 6 +-
9129 init/init_task.c | 4 +
9130 init/initramfs.c | 38 +-
9131 init/main.c | 30 +-
9132 ipc/compat.c | 4 +-
9133 ipc/ipc_sysctl.c | 14 +-
9134 ipc/mq_sysctl.c | 4 +-
9135 ipc/sem.c | 4 +-
9136 ipc/shm.c | 6 +
9137 kernel/audit.c | 8 +-
9138 kernel/auditsc.c | 4 +-
9139 kernel/bpf/core.c | 7 +-
9140 kernel/capability.c | 3 +
9141 kernel/compat.c | 38 +-
9142 kernel/debug/debug_core.c | 16 +-
9143 kernel/debug/kdb/kdb_main.c | 4 +-
9144 kernel/events/core.c | 30 +-
9145 kernel/events/internal.h | 10 +-
9146 kernel/events/uprobes.c | 2 +-
9147 kernel/exit.c | 27 +-
9148 kernel/fork.c | 175 +-
9149 kernel/futex.c | 11 +-
9150 kernel/futex_compat.c | 2 +-
9151 kernel/gcov/base.c | 7 +-
9152 kernel/irq/manage.c | 2 +-
9153 kernel/irq/msi.c | 19 +-
9154 kernel/irq/spurious.c | 2 +-
9155 kernel/jump_label.c | 5 +
9156 kernel/kallsyms.c | 37 +-
9157 kernel/kexec.c | 3 +-
9158 kernel/kmod.c | 8 +-
9159 kernel/kprobes.c | 4 +-
9160 kernel/ksysfs.c | 2 +-
9161 kernel/locking/lockdep.c | 7 +-
9162 kernel/locking/mutex-debug.c | 12 +-
9163 kernel/locking/mutex-debug.h | 4 +-
9164 kernel/locking/mutex.c | 6 +-
9165 kernel/module.c | 422 +-
9166 kernel/notifier.c | 17 +-
9167 kernel/padata.c | 4 +-
9168 kernel/panic.c | 5 +-
9169 kernel/pid.c | 2 +-
9170 kernel/pid_namespace.c | 2 +-
9171 kernel/power/process.c | 12 +-
9172 kernel/profile.c | 14 +-
9173 kernel/ptrace.c | 8 +-
9174 kernel/rcu/rcutorture.c | 60 +-
9175 kernel/rcu/tiny.c | 4 +-
9176 kernel/rcu/tree.c | 42 +-
9177 kernel/rcu/tree.h | 16 +-
9178 kernel/rcu/tree_plugin.h | 18 +-
9179 kernel/rcu/tree_trace.c | 14 +-
9180 kernel/resource.c | 4 +-
9181 kernel/sched/auto_group.c | 4 +-
9182 kernel/sched/core.c | 45 +-
9183 kernel/sched/fair.c | 2 +-
9184 kernel/sched/sched.h | 2 +-
9185 kernel/signal.c | 24 +-
9186 kernel/smpboot.c | 4 +-
9187 kernel/softirq.c | 12 +-
9188 kernel/sys.c | 10 +-
9189 kernel/sysctl.c | 34 +-
9190 kernel/time/alarmtimer.c | 2 +-
9191 kernel/time/posix-cpu-timers.c | 4 +-
9192 kernel/time/posix-timers.c | 24 +-
9193 kernel/time/timer.c | 2 +-
9194 kernel/time/timer_stats.c | 10 +-
9195 kernel/trace/blktrace.c | 6 +-
9196 kernel/trace/ftrace.c | 15 +-
9197 kernel/trace/ring_buffer.c | 96 +-
9198 kernel/trace/trace.c | 2 +-
9199 kernel/trace/trace.h | 2 +-
9200 kernel/trace/trace_clock.c | 4 +-
9201 kernel/trace/trace_events.c | 1 -
9202 kernel/trace/trace_functions_graph.c | 4 +-
9203 kernel/trace/trace_mmiotrace.c | 8 +-
9204 kernel/trace/trace_output.c | 10 +-
9205 kernel/trace/trace_seq.c | 2 +-
9206 kernel/trace/trace_stack.c | 2 +-
9207 kernel/user.c | 2 +-
9208 kernel/user_namespace.c | 2 +-
9209 kernel/utsname_sysctl.c | 2 +-
9210 kernel/watchdog.c | 2 +-
9211 kernel/workqueue.c | 8 +-
9212 lib/Kconfig.debug | 8 +-
9213 lib/Makefile | 2 +-
9214 lib/bitmap.c | 8 +-
9215 lib/bug.c | 2 +
9216 lib/debugobjects.c | 2 +-
9217 lib/decompress_bunzip2.c | 3 +-
9218 lib/decompress_unlzma.c | 4 +-
9219 lib/div64.c | 4 +-
9220 lib/dma-debug.c | 4 +-
9221 lib/inflate.c | 2 +-
9222 lib/ioremap.c | 4 +-
9223 lib/kobject.c | 4 +-
9224 lib/list_debug.c | 126 +-
9225 lib/lockref.c | 44 +-
9226 lib/percpu-refcount.c | 2 +-
9227 lib/radix-tree.c | 2 +-
9228 lib/random32.c | 2 +-
9229 lib/rhashtable.c | 4 +-
9230 lib/show_mem.c | 2 +-
9231 lib/strncpy_from_user.c | 2 +-
9232 lib/strnlen_user.c | 2 +-
9233 lib/swiotlb.c | 2 +-
9234 lib/usercopy.c | 6 +
9235 lib/vsprintf.c | 12 +-
9236 mm/Kconfig | 6 +-
9237 mm/backing-dev.c | 4 +-
9238 mm/debug.c | 3 +
9239 mm/filemap.c | 2 +-
9240 mm/gup.c | 13 +-
9241 mm/highmem.c | 6 +-
9242 mm/hugetlb.c | 70 +-
9243 mm/internal.h | 1 +
9244 mm/maccess.c | 12 +-
9245 mm/madvise.c | 37 +
9246 mm/memory-failure.c | 6 +-
9247 mm/memory.c | 424 +-
9248 mm/mempolicy.c | 25 +
9249 mm/mlock.c | 18 +-
9250 mm/mm_init.c | 2 +-
9251 mm/mmap.c | 582 +-
9252 mm/mprotect.c | 137 +-
9253 mm/mremap.c | 39 +-
9254 mm/nommu.c | 21 +-
9255 mm/page-writeback.c | 2 +-
9256 mm/page_alloc.c | 50 +-
9257 mm/percpu.c | 2 +-
9258 mm/process_vm_access.c | 14 +-
9259 mm/rmap.c | 45 +-
9260 mm/shmem.c | 19 +-
9261 mm/slab.c | 111 +-
9262 mm/slab.h | 22 +-
9263 mm/slab_common.c | 86 +-
9264 mm/slob.c | 218 +-
9265 mm/slub.c | 109 +-
9266 mm/sparse-vmemmap.c | 4 +-
9267 mm/sparse.c | 2 +-
9268 mm/swap.c | 2 +
9269 mm/swapfile.c | 12 +-
9270 mm/util.c | 6 +
9271 mm/vmalloc.c | 114 +-
9272 mm/vmstat.c | 12 +-
9273 net/8021q/vlan.c | 5 +-
9274 net/8021q/vlan_netlink.c | 2 +-
9275 net/9p/mod.c | 4 +-
9276 net/9p/trans_fd.c | 2 +-
9277 net/atm/atm_misc.c | 8 +-
9278 net/atm/lec.h | 2 +-
9279 net/atm/proc.c | 6 +-
9280 net/atm/resources.c | 4 +-
9281 net/ax25/sysctl_net_ax25.c | 2 +-
9282 net/batman-adv/bat_iv_ogm.c | 8 +-
9283 net/batman-adv/fragmentation.c | 2 +-
9284 net/batman-adv/routing.c | 4 +-
9285 net/batman-adv/soft-interface.c | 10 +-
9286 net/batman-adv/translation-table.c | 14 +-
9287 net/batman-adv/types.h | 8 +-
9288 net/bluetooth/hci_sock.c | 2 +-
9289 net/bluetooth/l2cap_core.c | 6 +-
9290 net/bluetooth/l2cap_sock.c | 12 +-
9291 net/bluetooth/rfcomm/sock.c | 4 +-
9292 net/bluetooth/rfcomm/tty.c | 4 +-
9293 net/bridge/br_netlink.c | 2 +-
9294 net/bridge/netfilter/ebtables.c | 6 +-
9295 net/caif/cfctrl.c | 11 +-
9296 net/caif/chnl_net.c | 2 +-
9297 net/can/af_can.c | 2 +-
9298 net/can/gw.c | 6 +-
9299 net/ceph/messenger.c | 4 +-
9300 net/compat.c | 26 +-
9301 net/core/datagram.c | 2 +-
9302 net/core/dev.c | 16 +-
9303 net/core/filter.c | 2 +-
9304 net/core/flow.c | 6 +-
9305 net/core/neighbour.c | 18 +-
9306 net/core/net-sysfs.c | 2 +-
9307 net/core/net_namespace.c | 8 +-
9308 net/core/netpoll.c | 4 +-
9309 net/core/rtnetlink.c | 17 +-
9310 net/core/scm.c | 12 +-
9311 net/core/skbuff.c | 11 +-
9312 net/core/sock.c | 28 +-
9313 net/core/sock_diag.c | 15 +-
9314 net/core/sysctl_net_core.c | 22 +-
9315 net/decnet/af_decnet.c | 1 +
9316 net/decnet/sysctl_net_decnet.c | 4 +-
9317 net/dsa/dsa.c | 2 +-
9318 net/hsr/hsr_netlink.c | 2 +-
9319 net/ieee802154/6lowpan/core.c | 2 +-
9320 net/ieee802154/6lowpan/reassembly.c | 14 +-
9321 net/ipv4/af_inet.c | 2 +-
9322 net/ipv4/arp.c | 2 +-
9323 net/ipv4/devinet.c | 18 +-
9324 net/ipv4/fib_frontend.c | 6 +-
9325 net/ipv4/fib_semantics.c | 2 +-
9326 net/ipv4/inet_connection_sock.c | 4 +-
9327 net/ipv4/inet_diag.c | 4 +-
9328 net/ipv4/inet_timewait_sock.c | 2 +-
9329 net/ipv4/inetpeer.c | 2 +-
9330 net/ipv4/ip_fragment.c | 15 +-
9331 net/ipv4/ip_gre.c | 6 +-
9332 net/ipv4/ip_sockglue.c | 2 +-
9333 net/ipv4/ip_vti.c | 4 +-
9334 net/ipv4/ipconfig.c | 6 +-
9335 net/ipv4/ipip.c | 4 +-
9336 net/ipv4/netfilter/arp_tables.c | 12 +-
9337 net/ipv4/netfilter/ip_tables.c | 12 +-
9338 net/ipv4/ping.c | 14 +-
9339 net/ipv4/proc.c | 8 +-
9340 net/ipv4/raw.c | 14 +-
9341 net/ipv4/route.c | 32 +-
9342 net/ipv4/sysctl_net_ipv4.c | 22 +-
9343 net/ipv4/tcp_input.c | 6 +-
9344 net/ipv4/tcp_probe.c | 2 +-
9345 net/ipv4/udp.c | 10 +-
9346 net/ipv4/xfrm4_mode_transport.c | 2 +-
9347 net/ipv4/xfrm4_policy.c | 17 +-
9348 net/ipv4/xfrm4_state.c | 4 +-
9349 net/ipv6/addrconf.c | 22 +-
9350 net/ipv6/af_inet6.c | 2 +-
9351 net/ipv6/datagram.c | 2 +-
9352 net/ipv6/icmp.c | 2 +-
9353 net/ipv6/ip6_fib.c | 4 +-
9354 net/ipv6/ip6_gre.c | 10 +-
9355 net/ipv6/ip6_tunnel.c | 4 +-
9356 net/ipv6/ip6_vti.c | 4 +-
9357 net/ipv6/ipv6_sockglue.c | 2 +-
9358 net/ipv6/ndisc.c | 2 +-
9359 net/ipv6/netfilter/ip6_tables.c | 12 +-
9360 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9361 net/ipv6/ping.c | 33 +-
9362 net/ipv6/proc.c | 10 +-
9363 net/ipv6/raw.c | 17 +-
9364 net/ipv6/reassembly.c | 13 +-
9365 net/ipv6/route.c | 2 +-
9366 net/ipv6/sit.c | 4 +-
9367 net/ipv6/sysctl_net_ipv6.c | 2 +-
9368 net/ipv6/udp.c | 6 +-
9369 net/ipv6/xfrm6_policy.c | 17 +-
9370 net/irda/ircomm/ircomm_tty.c | 18 +-
9371 net/iucv/af_iucv.c | 4 +-
9372 net/iucv/iucv.c | 2 +-
9373 net/key/af_key.c | 4 +-
9374 net/l2tp/l2tp_eth.c | 38 +-
9375 net/l2tp/l2tp_ip.c | 2 +-
9376 net/l2tp/l2tp_ip6.c | 2 +-
9377 net/mac80211/cfg.c | 10 +-
9378 net/mac80211/debugfs_key.c | 4 +-
9379 net/mac80211/ieee80211_i.h | 3 +-
9380 net/mac80211/iface.c | 20 +-
9381 net/mac80211/key.c | 4 +-
9382 net/mac80211/main.c | 2 +-
9383 net/mac80211/pm.c | 4 +-
9384 net/mac80211/rate.c | 2 +-
9385 net/mac80211/sta_info.c | 2 +-
9386 net/mac80211/tx.c | 2 +-
9387 net/mac80211/util.c | 8 +-
9388 net/mac80211/wpa.c | 10 +-
9389 net/mac802154/iface.c | 4 +-
9390 net/mpls/af_mpls.c | 6 +-
9391 net/netfilter/ipset/ip_set_core.c | 4 +-
9392 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9393 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9394 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9395 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9396 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9397 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9398 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9399 net/netfilter/nf_conntrack_acct.c | 2 +-
9400 net/netfilter/nf_conntrack_ecache.c | 2 +-
9401 net/netfilter/nf_conntrack_helper.c | 2 +-
9402 net/netfilter/nf_conntrack_netlink.c | 22 +-
9403 net/netfilter/nf_conntrack_proto.c | 2 +-
9404 net/netfilter/nf_conntrack_standalone.c | 2 +-
9405 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9406 net/netfilter/nf_log.c | 10 +-
9407 net/netfilter/nf_sockopt.c | 4 +-
9408 net/netfilter/nf_tables_api.c | 13 +-
9409 net/netfilter/nfnetlink_acct.c | 7 +-
9410 net/netfilter/nfnetlink_cthelper.c | 2 +-
9411 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9412 net/netfilter/nfnetlink_log.c | 4 +-
9413 net/netfilter/nft_compat.c | 9 +-
9414 net/netfilter/xt_statistic.c | 8 +-
9415 net/netlink/af_netlink.c | 14 +-
9416 net/netlink/diag.c | 2 +-
9417 net/netlink/genetlink.c | 14 +-
9418 net/openvswitch/vport-internal_dev.c | 2 +-
9419 net/packet/af_packet.c | 26 +-
9420 net/packet/diag.c | 2 +-
9421 net/packet/internal.h | 6 +-
9422 net/phonet/pep.c | 6 +-
9423 net/phonet/socket.c | 2 +-
9424 net/phonet/sysctl.c | 2 +-
9425 net/rds/cong.c | 6 +-
9426 net/rds/ib.h | 2 +-
9427 net/rds/ib_cm.c | 2 +-
9428 net/rds/ib_recv.c | 4 +-
9429 net/rds/iw.h | 2 +-
9430 net/rds/iw_cm.c | 2 +-
9431 net/rds/iw_recv.c | 4 +-
9432 net/rds/rds.h | 2 +-
9433 net/rds/tcp.c | 2 +-
9434 net/rds/tcp_send.c | 2 +-
9435 net/rxrpc/af_rxrpc.c | 2 +-
9436 net/rxrpc/ar-ack.c | 14 +-
9437 net/rxrpc/ar-call.c | 2 +-
9438 net/rxrpc/ar-connection.c | 2 +-
9439 net/rxrpc/ar-connevent.c | 2 +-
9440 net/rxrpc/ar-input.c | 4 +-
9441 net/rxrpc/ar-internal.h | 8 +-
9442 net/rxrpc/ar-local.c | 2 +-
9443 net/rxrpc/ar-output.c | 4 +-
9444 net/rxrpc/ar-peer.c | 2 +-
9445 net/rxrpc/ar-proc.c | 4 +-
9446 net/rxrpc/ar-transport.c | 2 +-
9447 net/rxrpc/rxkad.c | 4 +-
9448 net/sched/sch_generic.c | 4 +-
9449 net/sctp/ipv6.c | 6 +-
9450 net/sctp/protocol.c | 10 +-
9451 net/sctp/sm_sideeffect.c | 2 +-
9452 net/sctp/socket.c | 21 +-
9453 net/sctp/sysctl.c | 10 +-
9454 net/socket.c | 18 +-
9455 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9456 net/sunrpc/clnt.c | 4 +-
9457 net/sunrpc/sched.c | 4 +-
9458 net/sunrpc/svc.c | 4 +-
9459 net/sunrpc/svcauth_unix.c | 2 +-
9460 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
9461 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9462 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9463 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9464 net/tipc/netlink_compat.c | 12 +-
9465 net/tipc/subscr.c | 2 +-
9466 net/unix/diag.c | 2 +-
9467 net/unix/sysctl_net_unix.c | 2 +-
9468 net/wireless/wext-core.c | 19 +-
9469 net/xfrm/xfrm_policy.c | 16 +-
9470 net/xfrm/xfrm_state.c | 33 +-
9471 net/xfrm/xfrm_sysctl.c | 2 +-
9472 net/xfrm/xfrm_user.c | 2 +-
9473 scripts/Kbuild.include | 2 +-
9474 scripts/Makefile.build | 2 +-
9475 scripts/Makefile.clean | 3 +-
9476 scripts/Makefile.host | 69 +-
9477 scripts/basic/fixdep.c | 12 +-
9478 scripts/dtc/checks.c | 14 +-
9479 scripts/dtc/data.c | 6 +-
9480 scripts/dtc/flattree.c | 8 +-
9481 scripts/dtc/livetree.c | 4 +-
9482 scripts/gcc-plugin.sh | 51 +
9483 scripts/headers_install.sh | 1 +
9484 scripts/kallsyms.c | 4 +-
9485 scripts/kconfig/lkc.h | 5 +-
9486 scripts/kconfig/menu.c | 2 +-
9487 scripts/kconfig/symbol.c | 6 +-
9488 scripts/link-vmlinux.sh | 2 +-
9489 scripts/mod/file2alias.c | 14 +-
9490 scripts/mod/modpost.c | 25 +-
9491 scripts/mod/modpost.h | 6 +-
9492 scripts/mod/sumversion.c | 2 +-
9493 scripts/module-common.lds | 4 +
9494 scripts/package/builddeb | 1 +
9495 scripts/pnmtologo.c | 6 +-
9496 scripts/sortextable.h | 6 +-
9497 scripts/tags.sh | 2 +-
9498 security/Kconfig | 691 +-
9499 security/apparmor/include/policy.h | 2 +-
9500 security/apparmor/policy.c | 4 +-
9501 security/integrity/ima/ima.h | 4 +-
9502 security/integrity/ima/ima_api.c | 2 +-
9503 security/integrity/ima/ima_fs.c | 4 +-
9504 security/integrity/ima/ima_queue.c | 2 +-
9505 security/keys/internal.h | 8 +-
9506 security/keys/key.c | 18 +-
9507 security/keys/keyring.c | 4 -
9508 security/selinux/avc.c | 6 +-
9509 security/selinux/include/xfrm.h | 2 +-
9510 security/yama/yama_lsm.c | 2 +-
9511 sound/aoa/codecs/onyx.c | 7 +-
9512 sound/aoa/codecs/onyx.h | 1 +
9513 sound/core/oss/pcm_oss.c | 18 +-
9514 sound/core/pcm_compat.c | 2 +-
9515 sound/core/pcm_native.c | 4 +-
9516 sound/core/seq/seq_clientmgr.c | 10 +-
9517 sound/core/seq/seq_compat.c | 2 +-
9518 sound/core/seq/seq_fifo.c | 6 +-
9519 sound/core/seq/seq_fifo.h | 2 +-
9520 sound/core/seq/seq_memory.c | 6 +-
9521 sound/core/sound.c | 2 +-
9522 sound/drivers/mts64.c | 14 +-
9523 sound/drivers/opl4/opl4_lib.c | 2 +-
9524 sound/drivers/portman2x4.c | 3 +-
9525 sound/firewire/amdtp-am824.c | 2 +-
9526 sound/firewire/amdtp-stream.c | 4 +-
9527 sound/firewire/amdtp-stream.h | 2 +-
9528 sound/firewire/digi00x/amdtp-dot.c | 2 +-
9529 sound/firewire/isight.c | 10 +-
9530 sound/firewire/scs1x.c | 8 +-
9531 sound/oss/sb_audio.c | 2 +-
9532 sound/oss/swarm_cs4297a.c | 6 +-
9533 sound/pci/hda/hda_codec.c | 2 +-
9534 sound/pci/ymfpci/ymfpci.h | 2 +-
9535 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9536 sound/soc/codecs/sti-sas.c | 10 +-
9537 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
9538 sound/soc/soc-ac97.c | 6 +-
9539 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9540 tools/gcc/Makefile | 42 +
9541 tools/gcc/checker_plugin.c | 549 +
9542 tools/gcc/colorize_plugin.c | 215 +
9543 tools/gcc/constify_plugin.c | 571 +
9544 tools/gcc/gcc-common.h | 819 +
9545 tools/gcc/initify_plugin.c | 591 +
9546 tools/gcc/kallocstat_plugin.c | 188 +
9547 tools/gcc/kernexec_plugin.c | 549 +
9548 tools/gcc/latent_entropy_plugin.c | 474 +
9549 tools/gcc/randomize_layout_seed.h | 1 +
9550 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9551 tools/gcc/size_overflow_plugin/Makefile | 28 +
9552 .../disable_size_overflow_hash.data | 12434 ++
9553 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
9554 .../generate_size_overflow_hash.sh | 103 +
9555 .../insert_size_overflow_asm.c | 416 +
9556 .../size_overflow_plugin/intentional_overflow.c | 1116 +
9557 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9558 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
9559 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9560 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
9561 .../size_overflow_hash_aux.data | 92 +
9562 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
9563 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9564 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9565 .../size_overflow_plugin_hash.c | 352 +
9566 .../size_overflow_plugin/size_overflow_transform.c | 745 +
9567 .../size_overflow_transform_core.c | 1015 +
9568 tools/gcc/stackleak_plugin.c | 444 +
9569 tools/gcc/structleak_plugin.c | 290 +
9570 tools/include/linux/compiler.h | 8 +
9571 tools/perf/util/include/asm/alternative-asm.h | 3 +
9572 tools/virtio/linux/uaccess.h | 2 +-
9573 virt/kvm/kvm_main.c | 42 +-
9574 2088 files changed, 221599 insertions(+), 9618 deletions(-)
9575 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
9576 Author: Matthew Wilcox <willy@linux.intel.com>
9577 Date: Tue Feb 2 16:57:52 2016 -0800
9578
9579 radix-tree: fix race in gang lookup
9580
9581 If the indirect_ptr bit is set on a slot, that indicates we need to redo
9582 the lookup. Introduce a new function radix_tree_iter_retry() which
9583 forces the loop to retry the lookup by setting 'slot' to NULL and
9584 turning the iterator back to point at the problematic entry.
9585
9586 This is a pretty rare problem to hit at the moment; the lookup has to
9587 race with a grow of the radix tree from a height of 0. The consequences
9588 of hitting this race are that gang lookup could return a pointer to a
9589 radix_tree_node instead of a pointer to whatever the user had inserted
9590 in the tree.
9591
9592 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
9593 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
9594 Cc: Hugh Dickins <hughd@google.com>
9595 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9596 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
9597 Cc: <stable@vger.kernel.org>
9598 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9599 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9600
9601 include/linux/radix-tree.h | 16 ++++++++++++++++
9602 lib/radix-tree.c | 12 ++++++++++--
9603 2 files changed, 26 insertions(+), 2 deletions(-)
9604
9605 commit bf628043b4589c910919a0f221ae7f42aa8cea93
9606 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9607 Date: Wed Feb 3 02:11:03 2016 +0100
9608
9609 unix: correctly track in-flight fds in sending process user_struct
9610
9611 The commit referenced in the Fixes tag incorrectly accounted the number
9612 of in-flight fds over a unix domain socket to the original opener
9613 of the file-descriptor. This allows another process to arbitrary
9614 deplete the original file-openers resource limit for the maximum of
9615 open files. Instead the sending processes and its struct cred should
9616 be credited.
9617
9618 To do so, we add a reference counted struct user_struct pointer to the
9619 scm_fp_list and use it to account for the number of inflight unix fds.
9620
9621 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
9622 Reported-by: David Herrmann <dh.herrmann@gmail.com>
9623 Cc: David Herrmann <dh.herrmann@gmail.com>
9624 Cc: Willy Tarreau <w@1wt.eu>
9625 Cc: Linus Torvalds <torvalds@linux-foundation.org>
9626 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
9627 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9628 Signed-off-by: David S. Miller <davem@davemloft.net>
9629
9630 include/net/af_unix.h | 4 ++--
9631 include/net/scm.h | 1 +
9632 net/core/scm.c | 7 +++++++
9633 net/unix/af_unix.c | 4 ++--
9634 net/unix/garbage.c | 8 ++++----
9635 5 files changed, 16 insertions(+), 8 deletions(-)
9636
9637 commit e830db443ff78d70b7b63536e688d73907face0c
9638 Author: Mike Kravetz <mike.kravetz@oracle.com>
9639 Date: Fri Jan 15 16:57:37 2016 -0800
9640
9641 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
9642
9643 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
9644 argument end is of type pgoff_t. It was being converted to a vaddr
9645 offset and passed to unmap_hugepage_range. However, end was also being
9646 used as an argument to the vma_interval_tree_foreach controlling loop.
9647 In addition, the conversion of end to vaddr offset was incorrect.
9648
9649 hugetlb_vmtruncate_list is called as part of a file truncate or
9650 fallocate hole punch operation.
9651
9652 When truncating a hugetlbfs file, this bug could prevent some pages from
9653 being unmapped. This is possible if there are multiple vmas mapping the
9654 file, and there is a sufficiently sized hole between the mappings. The
9655 size of the hole between two vmas (A,B) must be such that the starting
9656 virtual address of B is greater than (ending virtual address of A <<
9657 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
9658 pages are not properly unmapped during truncate, the following BUG is
9659 hit:
9660
9661 kernel BUG at fs/hugetlbfs/inode.c:428!
9662
9663 In the fallocate hole punch case, this bug could prevent pages from
9664 being unmapped as in the truncate case. However, for hole punch the
9665 result is that unmapped pages will not be removed during the operation.
9666 For hole punch, it is also possible that more pages than desired will be
9667 unmapped. This unnecessary unmapping will cause page faults to
9668 reestablish the mappings on subsequent page access.
9669
9670 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
9671 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
9672 Cc: Hugh Dickins <hughd@google.com>
9673 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
9674 Cc: Davidlohr Bueso <dave@stgolabs.net>
9675 Cc: Dave Hansen <dave.hansen@linux.intel.com>
9676 Cc: <stable@vger.kernel.org> [4.3]
9677 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9678 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9679
9680 fs/hugetlbfs/inode.c | 19 +++++++++++--------
9681 1 files changed, 11 insertions(+), 8 deletions(-)
9682
9683 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
9684 Author: Takashi Iwai <tiwai@suse.de>
9685 Date: Thu Feb 4 17:06:13 2016 +0100
9686
9687 ALSA: timer: Fix leftover link at closing
9688
9689 In ALSA timer core, the active timer instance is managed in
9690 active_list linked list. Each element is added / removed dynamically
9691 at timer start, stop and in timer interrupt. The problem is that
9692 snd_timer_interrupt() has a thinko and leaves the element in
9693 active_list when it's the last opened element. This eventually leads
9694 to list corruption or use-after-free error.
9695
9696 This hasn't been revealed because we used to delete the list forcibly
9697 in snd_timer_stop() in the past. However, the recent fix avoids the
9698 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
9699 corruption due to double start or stop]), and this leak hits reality.
9700
9701 This patch fixes the link management in snd_timer_interrupt(). Now it
9702 simply unlinks no matter which stream is.
9703
9704 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
9705 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9706 Cc: <stable@vger.kernel.org>
9707 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9708
9709 sound/core/timer.c | 4 ++--
9710 1 files changed, 2 insertions(+), 2 deletions(-)
9711
9712 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
9713 Author: Konstantin Khlebnikov <koct9i@gmail.com>
9714 Date: Fri Feb 5 15:37:01 2016 -0800
9715
9716 radix-tree: fix oops after radix_tree_iter_retry
9717
9718 Helper radix_tree_iter_retry() resets next_index to the current index.
9719 In following radix_tree_next_slot current chunk size becomes zero. This
9720 isn't checked and it tries to dereference null pointer in slot.
9721
9722 Tagged iterator is fine because retry happens only at slot 0 where tag
9723 bitmask in iter->tags is filled with single bit.
9724
9725 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
9726 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
9727 Cc: Matthew Wilcox <willy@linux.intel.com>
9728 Cc: Hugh Dickins <hughd@google.com>
9729 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9730 Cc: Jeremiah Mahler <jmmahler@gmail.com>
9731 Cc: <stable@vger.kernel.org>
9732 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9733 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9734
9735 include/linux/radix-tree.h | 6 +++---
9736 1 files changed, 3 insertions(+), 3 deletions(-)
9737
9738 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
9739 Merge: 438be0b 256aeaf
9740 Author: Brad Spengler <spender@grsecurity.net>
9741 Date: Sun Feb 7 08:29:33 2016 -0500
9742
9743 Merge branch 'pax-test' into grsec-test
9744
9745 commit 256aeaf87c22de8edf1f03682a572c590ae07771
9746 Author: Brad Spengler <spender@grsecurity.net>
9747 Date: Sun Feb 7 08:29:09 2016 -0500
9748
9749 Update to pax-linux-4.3.5-test28.patch:
9750 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
9751 - spender fixed UDEREF on arm
9752
9753 arch/arm/Kconfig | 1 +
9754 arch/arm/include/asm/domain.h | 21 ++++++++-
9755 arch/arm/include/asm/futex.h | 9 ----
9756 arch/arm/include/asm/thread_info.h | 3 +
9757 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9758 arch/arm/kernel/entry-armv.S | 2 +-
9759 arch/arm/kernel/process.c | 2 +-
9760 arch/arm/mm/alignment.c | 8 ----
9761 arch/x86/mm/numa.c | 2 +-
9762 security/Kconfig | 1 -
9763 10 files changed, 60 insertions(+), 70 deletions(-)
9764
9765 commit 438be0bd112bd17942b2628c53054dc1007558a1
9766 Author: Brad Spengler <spender@grsecurity.net>
9767 Date: Sat Feb 6 19:50:31 2016 -0500
9768
9769 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
9770 ARM systems reported on the forums
9771
9772 arch/arm/Kconfig | 1 +
9773 arch/arm/include/asm/domain.h | 21 ++++++++-
9774 arch/arm/include/asm/futex.h | 9 ----
9775 arch/arm/include/asm/thread_info.h | 3 +
9776 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9777 arch/arm/kernel/entry-armv.S | 2 +-
9778 arch/arm/kernel/process.c | 2 +-
9779 arch/arm/mm/alignment.c | 8 ----
9780 security/Kconfig | 1 -
9781 9 files changed, 59 insertions(+), 69 deletions(-)
9782
9783 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
9784 Author: Brad Spengler <spender@grsecurity.net>
9785 Date: Sat Feb 6 11:21:53 2016 -0500
9786
9787 Fix another compiler warning
9788
9789 net/ipv4/tcp_input.c | 2 ++
9790 1 files changed, 2 insertions(+), 0 deletions(-)
9791
9792 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
9793 Author: Brad Spengler <spender@grsecurity.net>
9794 Date: Sat Feb 6 11:16:12 2016 -0500
9795
9796 Fix two compiler warnings
9797
9798 kernel/pid.c | 5 ++---
9799 kernel/ptrace.c | 3 ++-
9800 2 files changed, 4 insertions(+), 4 deletions(-)
9801
9802 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
9803 Author: Brad Spengler <spender@grsecurity.net>
9804 Date: Wed Feb 3 21:22:40 2016 -0500
9805
9806 Apply fix for integer truncation in NUMA init code, reported by
9807 x14sg1 on the forums:
9808 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
9809
9810 arch/x86/mm/numa.c | 2 +-
9811 1 files changed, 1 insertions(+), 1 deletions(-)
9812
9813 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
9814 Merge: a781740 016d0d8
9815 Author: Brad Spengler <spender@grsecurity.net>
9816 Date: Wed Feb 3 21:20:58 2016 -0500
9817
9818 Merge branch 'pax-test' into grsec-test
9819
9820 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
9821 Author: Brad Spengler <spender@grsecurity.net>
9822 Date: Wed Feb 3 21:20:10 2016 -0500
9823
9824 Update to pax-linux-4.3.5-test27.patch:
9825 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
9826 - restored padding in fpregs_state for storing AVX-512 state in the future
9827 - constified netlink_dump_control
9828 - added const version of debug_gimple_stmt for gcc plugins, by Emese
9829 - Emese fixed a bug in initify that could have initified too much
9830 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
9831
9832 arch/x86/include/asm/fpu/types.h | 1 +
9833 arch/x86/include/asm/mmu_context.h | 2 +-
9834 block/blk-cgroup.c | 18 ++--
9835 block/cfq-iosched.c | 4 +-
9836 crypto/crypto_user.c | 8 ++-
9837 drivers/acpi/apei/ghes.c | 6 +-
9838 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
9839 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
9840 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
9841 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
9842 drivers/infiniband/core/netlink.c | 5 +-
9843 drivers/infiniband/hw/cxgb4/device.c | 6 +-
9844 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
9845 drivers/md/bcache/alloc.c | 2 +-
9846 drivers/md/bcache/bcache.h | 10 +-
9847 drivers/md/bcache/btree.c | 2 +-
9848 drivers/md/bcache/io.c | 10 +-
9849 drivers/md/bcache/journal.c | 2 +-
9850 drivers/md/bcache/stats.c | 26 +++---
9851 drivers/md/bcache/stats.h | 16 ++--
9852 drivers/md/bcache/super.c | 2 +-
9853 drivers/md/bcache/sysfs.c | 20 +++---
9854 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
9855 drivers/md/dm-raid.c | 2 +-
9856 drivers/md/md.c | 6 +-
9857 drivers/md/md.h | 2 +-
9858 drivers/md/raid1.c | 2 +-
9859 drivers/md/raid10.c | 2 +-
9860 drivers/md/raid5.c | 4 +-
9861 drivers/media/pci/zoran/zoran.h | 1 -
9862 drivers/media/pci/zoran/zoran_driver.c | 3 -
9863 drivers/net/ethernet/sfc/selftest.c | 20 +++---
9864 drivers/net/irda/vlsi_ir.c | 18 ++--
9865 drivers/net/irda/vlsi_ir.h | 14 ++--
9866 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
9867 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
9868 drivers/net/wireless/ath/carl9170/main.c | 10 +-
9869 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
9870 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
9871 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
9872 drivers/scsi/hptiop.c | 2 -
9873 drivers/scsi/hptiop.h | 1 -
9874 drivers/scsi/ipr.c | 6 +-
9875 drivers/scsi/ipr.h | 2 +-
9876 drivers/scsi/qla2xxx/qla_target.c | 10 +-
9877 drivers/scsi/qla2xxx/qla_target.h | 2 +-
9878 fs/btrfs/ctree.c | 2 +-
9879 fs/btrfs/ctree.h | 4 +-
9880 fs/btrfs/delayed-ref.c | 4 +-
9881 fs/btrfs/disk-io.c | 4 +-
9882 fs/btrfs/file.c | 4 +-
9883 fs/btrfs/raid56.c | 32 ++++----
9884 fs/btrfs/tests/btrfs-tests.c | 2 +-
9885 fs/btrfs/transaction.c | 2 +-
9886 fs/btrfs/tree-log.c | 8 +-
9887 fs/btrfs/volumes.c | 14 ++--
9888 fs/btrfs/volumes.h | 22 +++---
9889 fs/jbd2/commit.c | 2 +-
9890 fs/jbd2/transaction.c | 4 +-
9891 fs/ocfs2/dlm/dlmcommon.h | 4 +-
9892 fs/ocfs2/dlm/dlmdebug.c | 10 +-
9893 fs/ocfs2/dlm/dlmdomain.c | 4 +-
9894 fs/ocfs2/dlm/dlmmaster.c | 4 +-
9895 include/acpi/ghes.h | 2 +-
9896 include/linux/blk-cgroup.h | 24 +++---
9897 include/linux/jbd2.h | 2 +-
9898 include/linux/netlink.h | 12 ++--
9899 include/net/cfg802154.h | 2 +-
9900 include/net/mac80211.h | 2 +-
9901 include/net/neighbour.h | 2 +-
9902 kernel/rcu/tree_plugin.h | 4 +-
9903 net/batman-adv/routing.c | 4 +-
9904 net/batman-adv/soft-interface.c | 2 +-
9905 net/batman-adv/translation-table.c | 14 ++--
9906 net/batman-adv/types.h | 2 +-
9907 net/core/neighbour.c | 14 ++--
9908 net/core/rtnetlink.c | 2 +-
9909 net/ipv4/arp.c | 2 +-
9910 net/ipv4/inet_diag.c | 4 +-
9911 net/ipv4/xfrm4_state.c | 4 +-
9912 net/ipv6/ndisc.c | 2 +-
9913 net/mac80211/cfg.c | 2 +-
9914 net/mac80211/debugfs_key.c | 2 +-
9915 net/mac80211/key.c | 4 +-
9916 net/mac80211/tx.c | 2 +-
9917 net/mac80211/wpa.c | 10 +-
9918 net/mac802154/iface.c | 4 +-
9919 net/netfilter/ipset/ip_set_core.c | 2 +-
9920 net/netfilter/nf_conntrack_netlink.c | 22 +++---
9921 net/netfilter/nf_tables_api.c | 13 ++--
9922 net/netfilter/nfnetlink_acct.c | 7 +-
9923 net/netfilter/nfnetlink_cthelper.c | 2 +-
9924 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9925 net/netlink/af_netlink.c | 10 ++-
9926 net/netlink/diag.c | 2 +-
9927 net/netlink/genetlink.c | 14 ++--
9928 net/packet/af_packet.c | 18 ++--
9929 net/packet/diag.c | 2 +-
9930 net/packet/internal.h | 6 +-
9931 net/unix/diag.c | 2 +-
9932 net/xfrm/xfrm_user.c | 2 +-
9933 security/apparmor/include/policy.h | 2 +-
9934 security/apparmor/policy.c | 4 +-
9935 sound/core/seq/seq_clientmgr.c | 2 +-
9936 sound/core/seq/seq_fifo.c | 6 +-
9937 sound/core/seq/seq_fifo.h | 2 +-
9938 tools/gcc/gcc-common.h | 24 ++++--
9939 tools/gcc/initify_plugin.c | 7 +-
9940 tools/lib/api/Makefile | 2 +-
9941 109 files changed, 399 insertions(+), 391 deletions(-)
9942
9943 commit a7817402ac837b1aee07fac42537a02097055098
9944 Author: Matt Fleming <matt@codeblueprint.co.uk>
9945 Date: Fri Jan 29 11:36:10 2016 +0000
9946
9947 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
9948
9949 There are a couple of nasty truncation bugs lurking in the pageattr
9950 code that can be triggered when mapping EFI regions, e.g. when we pass
9951 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
9952 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
9953
9954 Viorel-Cătălin managed to trigger this bug on his Dell machine that
9955 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
9956 When calling populate_pud() the end of the region gets calculated
9957 incorrectly in the following buggy expression,
9958
9959 end = start + (cpa->numpages << PAGE_SHIFT);
9960
9961 And only 188416 pages are mapped. Next, populate_pud() gets invoked
9962 for a second time because of the loop in __change_page_attr_set_clr(),
9963 only this time no pages get mapped because shifting the remaining
9964 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
9965 loop in __change_page_attr_set_clr() spins forever because we fail to
9966 map progress.
9967
9968 Hitting this bug depends very much on the virtual address we pick to
9969 map the large region at and how many pages we map on the initial run
9970 through the loop. This explains why this issue was only recently hit
9971 with the introduction of commit
9972
9973 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
9974 entries bottom-up at runtime, instead of top-down")
9975
9976 It's interesting to note that safe uses of cpa->numpages do exist in
9977 the pageattr code. If instead of shifting ->numpages we multiply by
9978 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
9979 so the result is unsigned long.
9980
9981 To avoid surprises when users try to convert very large cpa->numpages
9982 values to addresses, change the data type from 'int' to 'unsigned
9983 long', thereby making it suitable for shifting by PAGE_SHIFT without
9984 any type casting.
9985
9986 The alternative would be to make liberal use of casting, but that is
9987 far more likely to cause problems in the future when someone adds more
9988 code and fails to cast properly; this bug was difficult enough to
9989 track down in the first place.
9990
9991 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
9992 Acked-by: Borislav Petkov <bp@alien8.de>
9993 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
9994 Cc: <stable@vger.kernel.org>
9995 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
9996 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
9997 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
9998 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
9999
10000 arch/x86/mm/pageattr.c | 4 ++--
10001 1 files changed, 2 insertions(+), 2 deletions(-)
10002
10003 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
10004 Author: Jan Beulich <JBeulich@suse.com>
10005 Date: Tue Jan 26 04:15:18 2016 -0700
10006
10007 x86/mm: Fix types used in pgprot cacheability flags translations
10008
10009 For PAE kernels "unsigned long" is not suitable to hold page protection
10010 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
10011 few W+X pages getting reported as insecure during boot (observed namely
10012 for the entire initrd range).
10013
10014 Fixes: 281d4078be ("x86: Make page cache mode a real type")
10015 Signed-off-by: Jan Beulich <jbeulich@suse.com>
10016 Reviewed-by: Juergen Gross <JGross@suse.com>
10017 Cc: stable@vger.kernel.org
10018 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
10019 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10020
10021 arch/x86/include/asm/pgtable_types.h | 6 ++----
10022 1 files changed, 2 insertions(+), 4 deletions(-)
10023
10024 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
10025 Merge: 682d661 f74425b
10026 Author: Brad Spengler <spender@grsecurity.net>
10027 Date: Sun Jan 31 15:06:25 2016 -0500
10028
10029 Merge branch 'pax-test' into grsec-test
10030
10031 Conflicts:
10032 drivers/net/slip/slhc.c
10033 include/linux/sched.h
10034 net/unix/af_unix.c
10035 sound/core/timer.c
10036
10037 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
10038 Merge: d14af1f 849a2d3
10039 Author: Brad Spengler <spender@grsecurity.net>
10040 Date: Sun Jan 31 15:02:55 2016 -0500
10041
10042 Merge branch 'linux-4.3.y' into pax-test
10043
10044 Conflicts:
10045 arch/x86/include/asm/mmu_context.h
10046
10047 commit 682d6611d75542e351c973c8dd74a99d3966c073
10048 Author: Brad Spengler <spender@grsecurity.net>
10049 Date: Sat Jan 30 13:05:03 2016 -0500
10050
10051 Based on a report from Mathias Krause, fix up a number of additional instances
10052 of ulong overflow when passing in values to gr_learn_resource by saturating
10053 to ULONG_MAX
10054
10055 mm/mlock.c | 11 ++++++++---
10056 mm/mmap.c | 16 +++++++++++++---
10057 2 files changed, 21 insertions(+), 6 deletions(-)
10058
10059 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
10060 Author: Jann Horn <jann@thejh.net>
10061 Date: Sat Dec 26 06:00:48 2015 +0100
10062
10063 seccomp: always propagate NO_NEW_PRIVS on tsync
10064
10065 Before this patch, a process with some permissive seccomp filter
10066 that was applied by root without NO_NEW_PRIVS was able to add
10067 more filters to itself without setting NO_NEW_PRIVS by setting
10068 the new filter from a throwaway thread with NO_NEW_PRIVS.
10069
10070 Signed-off-by: Jann Horn <jann@thejh.net>
10071 Cc: stable@vger.kernel.org
10072 Signed-off-by: Kees Cook <keescook@chromium.org>
10073
10074 kernel/seccomp.c | 22 +++++++++++-----------
10075 1 files changed, 11 insertions(+), 11 deletions(-)
10076
10077 commit b85450498a3bbf269441c8963d7574bb3079c838
10078 Merge: 59c216f d14af1f
10079 Author: Brad Spengler <spender@grsecurity.net>
10080 Date: Fri Jan 29 20:54:13 2016 -0500
10081
10082 Merge branch 'pax-test' into grsec-test
10083
10084 commit d14af1f1dd66511f3f0674deee2b572972012b39
10085 Author: Brad Spengler <spender@grsecurity.net>
10086 Date: Fri Jan 29 20:53:51 2016 -0500
10087
10088 Update to pax-linux-4.3.4-test26.patch:
10089 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
10090
10091 fs/cifs/file.c | 2 +-
10092 fs/gfs2/file.c | 2 +-
10093 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
10094 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
10095 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
10096 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
10097 .../size_overflow_transform_core.c | 5 +
10098 7 files changed, 102 insertions(+), 15 deletions(-)
10099
10100 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
10101 Author: Brad Spengler <spender@grsecurity.net>
10102 Date: Wed Jan 27 17:57:21 2016 -0500
10103
10104 Fix a size_overflow report reported by Mathias Krause in our
10105 truncation of an loff_t to an unsigned long when being passed
10106 to gr_learn_resource() (as all resource checks are against unsigned long
10107 values)
10108
10109 fs/attr.c | 5 ++++-
10110 1 files changed, 4 insertions(+), 1 deletions(-)
10111
10112 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
10113 Author: Yuchung Cheng <ycheng@google.com>
10114 Date: Wed Jan 6 12:42:38 2016 -0800
10115
10116 tcp: fix zero cwnd in tcp_cwnd_reduction
10117
10118 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
10119 conditionally") introduced a bug that cwnd may become 0 when both
10120 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
10121 to a div-by-zero if the connection starts another cwnd reduction
10122 phase by setting tp->prior_cwnd to the current cwnd (0) in
10123 tcp_init_cwnd_reduction().
10124
10125 To prevent this we skip PRR operation when nothing is acked or
10126 sacked. Then cwnd must be positive in all cases as long as ssthresh
10127 is positive:
10128
10129 1) The proportional reduction mode
10130 inflight > ssthresh > 0
10131
10132 2) The reduction bound mode
10133 a) inflight == ssthresh > 0
10134
10135 b) inflight < ssthresh
10136 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
10137
10138 Therefore in all cases inflight and sndcnt can not both be 0.
10139 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
10140
10141 In reality this bug is triggered only with a sequence of less common
10142 events. For example, the connection is terminating an ECN-triggered
10143 cwnd reduction with an inflight 0, then it receives reordered/old
10144 ACKs or DSACKs from prior transmission (which acks nothing). Or the
10145 connection is in fast recovery stage that marks everything lost,
10146 but fails to retransmit due to local issues, then receives data
10147 packets from other end which acks nothing.
10148
10149 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
10150 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
10151 Signed-off-by: Yuchung Cheng <ycheng@google.com>
10152 Signed-off-by: Neal Cardwell <ncardwell@google.com>
10153 Signed-off-by: Eric Dumazet <edumazet@google.com>
10154 Signed-off-by: David S. Miller <davem@davemloft.net>
10155
10156 net/ipv4/tcp_input.c | 3 +++
10157 1 files changed, 3 insertions(+), 0 deletions(-)
10158
10159 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
10160 Author: Eric Dumazet <edumazet@google.com>
10161 Date: Sun Jan 24 13:53:50 2016 -0800
10162
10163 af_unix: fix struct pid memory leak
10164
10165 Dmitry reported a struct pid leak detected by a syzkaller program.
10166
10167 Bug happens in unix_stream_recvmsg() when we break the loop when a
10168 signal is pending, without properly releasing scm.
10169
10170 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
10171 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10172 Signed-off-by: Eric Dumazet <edumazet@google.com>
10173 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
10174 Signed-off-by: David S. Miller <davem@davemloft.net>
10175
10176 net/unix/af_unix.c | 1 +
10177 1 files changed, 1 insertions(+), 0 deletions(-)
10178
10179 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
10180 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10181 Date: Fri Jan 22 01:39:43 2016 +0100
10182
10183 pptp: fix illegal memory access caused by multiple bind()s
10184
10185 Several times already this has been reported as kasan reports caused by
10186 syzkaller and trinity and people always looked at RCU races, but it is
10187 much more simple. :)
10188
10189 In case we bind a pptp socket multiple times, we simply add it to
10190 the callid_sock list but don't remove the old binding. Thus the old
10191 socket stays in the bucket with unused call_id indexes and doesn't get
10192 cleaned up. This causes various forms of kasan reports which were hard
10193 to pinpoint.
10194
10195 Simply don't allow multiple binds and correct error handling in
10196 pptp_bind. Also keep sk_state bits in place in pptp_connect.
10197
10198 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
10199 Cc: Dmitry Kozlov <xeb@mail.ru>
10200 Cc: Sasha Levin <sasha.levin@oracle.com>
10201 Cc: Dmitry Vyukov <dvyukov@google.com>
10202 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10203 Cc: Dave Jones <davej@codemonkey.org.uk>
10204 Reported-by: Dave Jones <davej@codemonkey.org.uk>
10205 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10206 Signed-off-by: David S. Miller <davem@davemloft.net>
10207
10208 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
10209 1 files changed, 24 insertions(+), 10 deletions(-)
10210
10211 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
10212 Author: Brad Spengler <spender@grsecurity.net>
10213 Date: Tue Jan 26 18:17:10 2016 -0500
10214
10215 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
10216 wiki but was removed from the config help at some point
10217
10218 grsecurity/Kconfig | 3 +++
10219 1 files changed, 3 insertions(+), 0 deletions(-)
10220
10221 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
10222 Author: Thomas Egerer <hakke_007@gmx.de>
10223 Date: Mon Jan 25 12:58:44 2016 +0100
10224
10225 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
10226
10227 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
10228 to select CRYPTO_ECHAINIV in order to work properly. This solves the
10229 issues caused by a misconfiguration as described in [1].
10230 The original approach, patching crypto/Kconfig was turned down by
10231 Herbert Xu [2].
10232
10233 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
10234 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
10235
10236 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
10237 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
10238 Signed-off-by: David S. Miller <davem@davemloft.net>
10239
10240 net/ipv4/Kconfig | 1 +
10241 net/ipv6/Kconfig | 1 +
10242 2 files changed, 2 insertions(+), 0 deletions(-)
10243
10244 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
10245 Merge: 904114c 6339c1f
10246 Author: Brad Spengler <spender@grsecurity.net>
10247 Date: Tue Jan 26 18:08:40 2016 -0500
10248
10249 Merge branch 'pax-test' into grsec-test
10250
10251 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
10252 Author: Brad Spengler <spender@grsecurity.net>
10253 Date: Tue Jan 26 18:07:51 2016 -0500
10254
10255 Update to pax-linux-4.3.4-test25.patch:
10256 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
10257 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
10258 - fixed a few REFCOUNT false positives in SNMP related statistics
10259
10260 arch/x86/Kconfig | 2 +-
10261 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
10262 include/net/snmp.h | 10 +++++-----
10263 kernel/fork.c | 11 +++++++++--
10264 net/ipv4/proc.c | 8 ++++----
10265 net/ipv6/addrconf.c | 4 ++--
10266 net/ipv6/proc.c | 10 +++++-----
10267 7 files changed, 43 insertions(+), 19 deletions(-)
10268
10269 commit 904114c2fce3fdff5d57e763da56a78960db4e19
10270 Author: Al Viro <viro@zeniv.linux.org.uk>
10271 Date: Fri Jan 22 18:08:52 2016 -0500
10272
10273 make sure that freeing shmem fast symlinks is RCU-delayed
10274
10275 Cc: stable@vger.kernel.org # v4.2+
10276 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10277
10278 include/linux/shmem_fs.h | 5 +----
10279 mm/shmem.c | 9 ++++-----
10280 2 files changed, 5 insertions(+), 9 deletions(-)
10281
10282 commit ab86adee64312a2f827dd516cb199521327943ed
10283 Author: Sasha Levin <sasha.levin@oracle.com>
10284 Date: Mon Jan 18 19:23:51 2016 -0500
10285
10286 netfilter: nf_conntrack: use safer way to lock all buckets
10287
10288 When we need to lock all buckets in the connection hashtable we'd attempt to
10289 lock 1024 spinlocks, which is way more preemption levels than supported by
10290 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
10291 enabled, and if it was - use only 8 buckets(!).
10292
10293 Fix this by using a global lock and synchronize all buckets on it when we
10294 need to lock them all. This is pretty heavyweight, but is only done when we
10295 need to resize the hashtable, and that doesn't happen often enough (or at all).
10296
10297 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10298 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
10299 Reviewed-by: Florian Westphal <fw@strlen.de>
10300 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10301
10302 Conflicts:
10303
10304 net/netfilter/nfnetlink_cttimeout.c
10305
10306 include/net/netfilter/nf_conntrack_core.h | 8 ++----
10307 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
10308 net/netfilter/nf_conntrack_helper.c | 2 +-
10309 net/netfilter/nf_conntrack_netlink.c | 2 +-
10310 4 files changed, 33 insertions(+), 17 deletions(-)
10311
10312 commit 37014723527225481c720484bb788a1a6358072f
10313 Author: Willy Tarreau <w@1wt.eu>
10314 Date: Mon Jan 18 16:36:09 2016 +0100
10315
10316 pipe: limit the per-user amount of pages allocated in pipes
10317
10318 On no-so-small systems, it is possible for a single process to cause an
10319 OOM condition by filling large pipes with data that are never read. A
10320 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
10321 memory. On small systems it may be tricky to set the pipe max size to
10322 prevent this from happening.
10323
10324 This patch makes it possible to enforce a per-user soft limit above
10325 which new pipes will be limited to a single page, effectively limiting
10326 them to 4 kB each, as well as a hard limit above which no new pipes may
10327 be created for this user. This has the effect of protecting the system
10328 against memory abuse without hurting other users, and still allowing
10329 pipes to work correctly though with less data at once.
10330
10331 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
10332 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
10333 default soft limit allows the default number of FDs per process (1024)
10334 to create pipes of the default size (64kB), thus reaching a limit of 64MB
10335 before starting to create only smaller pipes. With 256 processes limited
10336 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
10337 1084 MB of memory allocated for a user. The hard limit is disabled by
10338 default to avoid breaking existing applications that make intensive use
10339 of pipes (eg: for splicing).
10340
10341 Reported-by: socketpair@gmail.com
10342 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10343 Mitigates: CVE-2013-4312 (Linux 2.0+)
10344 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10345 Signed-off-by: Willy Tarreau <w@1wt.eu>
10346 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10347
10348 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
10349 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
10350 include/linux/pipe_fs_i.h | 4 +++
10351 include/linux/sched.h | 1 +
10352 kernel/sysctl.c | 14 ++++++++++++
10353 5 files changed, 87 insertions(+), 2 deletions(-)
10354
10355 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
10356 Merge: 540f2af 7791ecb
10357 Author: Brad Spengler <spender@grsecurity.net>
10358 Date: Sat Jan 23 10:57:11 2016 -0500
10359
10360 Merge branch 'pax-test' into grsec-test
10361
10362 commit 7791ecb84f840343a5646236fd0d34e1fb450793
10363 Merge: 470069c 399588c
10364 Author: Brad Spengler <spender@grsecurity.net>
10365 Date: Sat Jan 23 10:56:47 2016 -0500
10366
10367 Merge branch 'linux-4.3.y' into pax-test
10368
10369 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
10370 Author: Brad Spengler <spender@grsecurity.net>
10371 Date: Tue Jan 19 21:18:47 2016 -0500
10372
10373 Update size_overflow hash table
10374
10375 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
10376 1 files changed, 3 insertions(+), 1 deletions(-)
10377
10378 commit 7e649765626a28437f573f0fbe7a51a04615f041
10379 Author: Brad Spengler <spender@grsecurity.net>
10380 Date: Tue Jan 19 20:29:46 2016 -0500
10381
10382 Backport fix from: https://lkml.org/lkml/2015/12/13/187
10383
10384 fs/ext4/extents.c | 2 +-
10385 1 files changed, 1 insertions(+), 1 deletions(-)
10386
10387 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
10388 Author: Jann Horn <jann@thejh.net>
10389 Date: Tue Jan 5 18:27:30 2016 +0100
10390
10391 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
10392
10393 This replaces all code in fs/compat_ioctl.c that translated
10394 ioctl arguments into a in-kernel structure, then performed
10395 do_ioctl under set_fs(KERNEL_DS), with code that allocates
10396 data on the user stack and can call the VFS ioctl handler
10397 under USER_DS.
10398
10399 This is done as a hardening measure because the caller
10400 does not know what kind of ioctl handler will be invoked,
10401 only that no corresponding compat_ioctl handler exists and
10402 what the ioctl command number is. The accidental
10403 invocation of an unlocked_ioctl handler that unexpectedly
10404 calls copy_to_user could be a severe security issue.
10405
10406 Signed-off-by: Jann Horn <jann@thejh.net>
10407 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10408
10409 Conflicts:
10410
10411 fs/compat_ioctl.c
10412
10413 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
10414 1 files changed, 68 insertions(+), 62 deletions(-)
10415
10416 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
10417 Author: Al Viro <viro@zeniv.linux.org.uk>
10418 Date: Thu Jan 7 09:53:30 2016 -0500
10419
10420 compat_ioctl: don't pass fd around when not needed
10421
10422 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10423
10424 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
10425 fs/internal.h | 7 ++++
10426 fs/ioctl.c | 4 +-
10427 include/linux/fs.h | 2 -
10428 4 files changed, 61 insertions(+), 55 deletions(-)
10429
10430 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
10431 Author: Jann Horn <jann@thejh.net>
10432 Date: Tue Jan 5 18:27:29 2016 +0100
10433
10434 compat_ioctl: don't look up the fd twice
10435
10436 In code in fs/compat_ioctl.c that translates ioctl arguments
10437 into a in-kernel structure, then performs sys_ioctl, possibly
10438 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
10439 calls to do_ioctl calls. do_ioctl is a new function that does
10440 the same thing as sys_ioctl, but doesn't look up the fd again.
10441
10442 This change is made to avoid (potential) security issues
10443 because of ioctl handlers that accept one of the ioctl
10444 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
10445 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
10446 This can happen for multiple reasons:
10447
10448 - The ioctl command number could be reused.
10449 - The ioctl handler might not check the full ioctl
10450 command. This is e.g. true for drm_ioctl.
10451 - The ioctl handler is very special, e.g. cuse_file_ioctl
10452
10453 The real issue is that set_fs(KERNEL_DS) is used here,
10454 but that's fixed in a separate commit
10455 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
10456
10457 This change mitigates potential security issues by
10458 preventing a race that permits invocation of
10459 unlocked_ioctl handlers under KERNEL_DS through compat
10460 code even if a corresponding compat_ioctl handler exists.
10461
10462 So far, no way has been identified to use this to damage
10463 kernel memory without having CAP_SYS_ADMIN in the init ns
10464 (with the capability, doing reads/writes at arbitrary
10465 kernel addresses should be easy through CUSE's ioctl
10466 handler with FUSE_IOCTL_UNRESTRICTED set).
10467
10468 [AV: two missed sys_ioctl() taken care of]
10469
10470 Signed-off-by: Jann Horn <jann@thejh.net>
10471 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10472
10473 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
10474 1 files changed, 68 insertions(+), 54 deletions(-)
10475
10476 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
10477 Author: Vasily Kulikov <segoon@openwall.com>
10478 Date: Fri Jan 15 16:57:55 2016 -0800
10479
10480 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
10481
10482 TIMER_ENTRY_STATIC is defined as a poison pointers which
10483 should point to nowhere. Redefine them using POISON_POINTER_DELTA
10484 arithmetics to make sure they really point to non-mappable area declared
10485 by the target architecture.
10486
10487 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
10488 Acked-by: Thomas Gleixner <tglx@linutronix.de>
10489 Cc: Solar Designer <solar@openwall.com>
10490 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
10491 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
10492 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
10493
10494 Conflicts:
10495
10496 include/linux/poison.h
10497
10498 include/linux/poison.h | 2 +-
10499 1 files changed, 1 insertions(+), 1 deletions(-)
10500
10501 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
10502 Author: Brad Spengler <spender@grsecurity.net>
10503 Date: Tue Jan 19 19:41:44 2016 -0500
10504
10505 Fix ARM compilation, reported by Austin Sepp
10506
10507 grsecurity/grsec_sig.c | 1 +
10508 1 files changed, 1 insertions(+), 0 deletions(-)
10509
10510 commit e15383743443dc43460a2fd73e0db0b608610dca
10511 Author: Takashi Iwai <tiwai@suse.de>
10512 Date: Mon Jan 18 13:52:47 2016 +0100
10513
10514 ALSA: hrtimer: Fix stall by hrtimer_cancel()
10515
10516 hrtimer_cancel() waits for the completion from the callback, thus it
10517 must not be called inside the callback itself. This was already a
10518 problem in the past with ALSA hrtimer driver, and the early commit
10519 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
10520
10521 However, the previous fix is still insufficient: it may still cause a
10522 lockup when the ALSA timer instance reprograms itself in its callback.
10523 Then it invokes the start function even in snd_timer_interrupt() that
10524 is called in hrtimer callback itself, results in a CPU stall. This is
10525 no hypothetical problem but actually triggered by syzkaller fuzzer.
10526
10527 This patch tries to fix the issue again. Now we call
10528 hrtimer_try_to_cancel() at both start and stop functions so that it
10529 won't fall into a deadlock, yet giving some chance to cancel the queue
10530 if the functions have been called outside the callback. The proper
10531 hrtimer_cancel() is called in anyway at closing, so this should be
10532 enough.
10533
10534 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
10535 Cc: <stable@vger.kernel.org>
10536 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10537
10538 sound/core/hrtimer.c | 3 ++-
10539 1 files changed, 2 insertions(+), 1 deletions(-)
10540
10541 commit 12d874daf706e6e7c1ae709141859c809599297e
10542 Author: Takashi Iwai <tiwai@suse.de>
10543 Date: Tue Jan 12 12:38:02 2016 +0100
10544
10545 ALSA: seq: Fix missing NULL check at remove_events ioctl
10546
10547 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
10548 unconditionally even if there is no FIFO assigned, and this leads to
10549 an Oops due to NULL dereference. The fix is just to add a proper NULL
10550 check.
10551
10552 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10553 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10554 Cc: <stable@vger.kernel.org>
10555 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10556
10557 sound/core/seq/seq_clientmgr.c | 2 +-
10558 1 files changed, 1 insertions(+), 1 deletions(-)
10559
10560 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
10561 Author: Takashi Iwai <tiwai@suse.de>
10562 Date: Tue Jan 12 15:36:27 2016 +0100
10563
10564 ALSA: seq: Fix race at timer setup and close
10565
10566 ALSA sequencer code has an open race between the timer setup ioctl and
10567 the close of the client. This was triggered by syzkaller fuzzer, and
10568 a use-after-free was caught there as a result.
10569
10570 This patch papers over it by adding a proper queue->timer_mutex lock
10571 around the timer-related calls in the relevant code path.
10572
10573 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10574 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10575 Cc: <stable@vger.kernel.org>
10576 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10577
10578 sound/core/seq/seq_queue.c | 2 ++
10579 1 files changed, 2 insertions(+), 0 deletions(-)
10580
10581 commit b9e55ab955e59b4a636d78a748be90334a48b485
10582 Author: Takashi Iwai <tiwai@suse.de>
10583 Date: Thu Jan 14 16:30:58 2016 +0100
10584
10585 ALSA: timer: Harden slave timer list handling
10586
10587 A slave timer instance might be still accessible in a racy way while
10588 operating the master instance as it lacks of locking. Since the
10589 master operation is mostly protected with timer->lock, we should cope
10590 with it while changing the slave instance, too. Also, some linked
10591 lists (active_list and ack_list) of slave instances aren't unlinked
10592 immediately at stopping or closing, and this may lead to unexpected
10593 accesses.
10594
10595 This patch tries to address these issues. It adds spin lock of
10596 timer->lock (either from master or slave, which is equivalent) in a
10597 few places. For avoiding a deadlock, we ensure that the global
10598 slave_active_lock is always locked at first before each timer lock.
10599
10600 Also, ack and active_list of slave instances are properly unlinked at
10601 snd_timer_stop() and snd_timer_close().
10602
10603 Last but not least, remove the superfluous call of _snd_timer_stop()
10604 at removing slave links. This is a noop, and calling it may confuse
10605 readers wrt locking. Further cleanup will follow in a later patch.
10606
10607 Actually we've got reports of use-after-free by syzkaller fuzzer, and
10608 this hopefully fixes these issues.
10609
10610 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10611 Cc: <stable@vger.kernel.org>
10612 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10613
10614 sound/core/timer.c | 18 ++++++++++++++----
10615 1 files changed, 14 insertions(+), 4 deletions(-)
10616
10617 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
10618 Author: Takashi Iwai <tiwai@suse.de>
10619 Date: Wed Jan 13 17:48:01 2016 +0100
10620
10621 ALSA: timer: Fix race among timer ioctls
10622
10623 ALSA timer ioctls have an open race and this may lead to a
10624 use-after-free of timer instance object. A simplistic fix is to make
10625 each ioctl exclusive. We have already tread_sem for controlling the
10626 tread, and extend this as a global mutex to be applied to each ioctl.
10627
10628 The downside is, of course, the worse concurrency. But these ioctls
10629 aren't to be parallel accessible, in anyway, so it should be fine to
10630 serialize there.
10631
10632 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10633 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10634 Cc: <stable@vger.kernel.org>
10635 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10636
10637 sound/core/timer.c | 32 +++++++++++++++++++-------------
10638 1 files changed, 19 insertions(+), 13 deletions(-)
10639
10640 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
10641 Author: Takashi Iwai <tiwai@suse.de>
10642 Date: Wed Jan 13 21:35:06 2016 +0100
10643
10644 ALSA: timer: Fix double unlink of active_list
10645
10646 ALSA timer instance object has a couple of linked lists and they are
10647 unlinked unconditionally at snd_timer_stop(). Meanwhile
10648 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
10649 the element list itself unchanged. This ends up with unlinking twice,
10650 and it was caught by syzkaller fuzzer.
10651
10652 The fix is to use list_del_init() variant properly there, too.
10653
10654 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10655 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10656 Cc: <stable@vger.kernel.org>
10657 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10658
10659 sound/core/timer.c | 2 +-
10660 1 files changed, 1 insertions(+), 1 deletions(-)
10661
10662 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
10663 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10664 Date: Mon Jan 18 18:03:48 2016 +0100
10665
10666 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
10667
10668 It was seen that defective configurations of openvswitch could overwrite
10669 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
10670 many recursions within ovs.
10671
10672 This problem arises due to the high stack usage of openvswitch. The rest
10673 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
10674
10675 We use the already existing recursion counter in ovs_execute_actions to
10676 implement an upper bound of 5 recursions.
10677
10678 Cc: Pravin Shelar <pshelar@ovn.org>
10679 Cc: Simon Horman <simon.horman@netronome.com>
10680 Cc: Eric Dumazet <eric.dumazet@gmail.com>
10681 Cc: Simon Horman <simon.horman@netronome.com>
10682 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10683 Signed-off-by: David S. Miller <davem@davemloft.net>
10684
10685 net/openvswitch/actions.c | 19 ++++++++++++++-----
10686 1 files changed, 14 insertions(+), 5 deletions(-)
10687
10688 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
10689 Author: Ursula Braun <ursula.braun@de.ibm.com>
10690 Date: Tue Jan 19 10:41:33 2016 +0100
10691
10692 af_iucv: Validate socket address length in iucv_sock_bind()
10693
10694 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
10695 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10696 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
10697 Signed-off-by: David S. Miller <davem@davemloft.net>
10698
10699 net/iucv/af_iucv.c | 3 +++
10700 1 files changed, 3 insertions(+), 0 deletions(-)
10701
10702 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
10703 Author: Brad Spengler <spender@grsecurity.net>
10704 Date: Tue Jan 19 19:32:54 2016 -0500
10705
10706 Apply the same fix as everyone else for the recent keys vulnerability that is
10707 unexploitable under PAX_REFCOUNT
10708
10709 Make a couple more changes that no one else can/will
10710
10711 include/linux/key-type.h | 4 ++--
10712 ipc/msgutil.c | 4 ++--
10713 security/keys/internal.h | 2 +-
10714 security/keys/process_keys.c | 1 +
10715 4 files changed, 6 insertions(+), 5 deletions(-)
10716
10717 commit b56c3a63f431c193400aee17543021950bd14bc4
10718 Merge: 38b1a3d 470069c
10719 Author: Brad Spengler <spender@grsecurity.net>
10720 Date: Sun Jan 17 18:30:19 2016 -0500
10721
10722 Merge branch 'pax-test' into grsec-test
10723
10724 commit 470069cfedef2180313233d275be5901bd6d1135
10725 Author: Brad Spengler <spender@grsecurity.net>
10726 Date: Sun Jan 17 18:29:59 2016 -0500
10727
10728 Update to pax-linux-4.3.3-test22.patch:
10729 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
10730 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
10731
10732 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
10733 drivers/gpu/drm/drm_pci.c | 3 +++
10734 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
10735 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
10736 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
10737 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
10738 drivers/net/usb/asix_common.c | 3 ++-
10739 include/drm/drmP.h | 1 +
10740 8 files changed, 22 insertions(+), 29 deletions(-)
10741
10742 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
10743 Author: Brad Spengler <spender@grsecurity.net>
10744 Date: Sun Jan 17 12:33:53 2016 -0500
10745
10746 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
10747 mentioned banning execution of suid/sgid binaries, though the kernel
10748 source clearly only mentions banning execution of suid binaries. Since
10749 there's no reason for us to not ban execution of sgid binaries as well,
10750 make the implementation match the Kconfig description.
10751
10752 fs/exec.c | 4 ++--
10753 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
10754 include/linux/sched.h | 4 ++--
10755 3 files changed, 18 insertions(+), 17 deletions(-)
10756
10757 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
10758 Merge: d141a86 ea4a835
10759 Author: Brad Spengler <spender@grsecurity.net>
10760 Date: Sat Jan 16 14:12:22 2016 -0500
10761
10762 Merge branch 'pax-test' into grsec-test
10763
10764 Conflicts:
10765 drivers/gpu/drm/i810/i810_drv.c
10766
10767 commit ea4a835328ada6513ac013986764d6caea8cd348
10768 Author: Brad Spengler <spender@grsecurity.net>
10769 Date: Sat Jan 16 14:11:30 2016 -0500
10770
10771 Update to pax-linux-4.3.3-test21.patch:
10772 - fixed some fallout from the drm_drivers constification, reported by spender
10773
10774 drivers/gpu/drm/armada/armada_drv.c | 3 +--
10775 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
10776 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10777 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
10778 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10779 5 files changed, 8 insertions(+), 6 deletions(-)
10780
10781 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
10782 Author: Brad Spengler <spender@grsecurity.net>
10783 Date: Sat Jan 16 13:16:36 2016 -0500
10784
10785 compile fix
10786
10787 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10788 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
10789 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10790 3 files changed, 5 insertions(+), 3 deletions(-)
10791
10792 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
10793 Merge: 5fa135d bbda879
10794 Author: Brad Spengler <spender@grsecurity.net>
10795 Date: Sat Jan 16 12:59:22 2016 -0500
10796
10797 Merge branch 'pax-test' into grsec-test
10798
10799 commit bbda87914edf63e27fb46670bf3a373f2b963c73
10800 Author: Brad Spengler <spender@grsecurity.net>
10801 Date: Sat Jan 16 12:58:04 2016 -0500
10802
10803 Update to pax-linux-4.3.3-test20.patch:
10804 - constified drm_driver
10805 - Emese fixed a special case in handling __func__ in the initify plugin
10806 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
10807 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
10808
10809 arch/x86/kernel/cpu/perf_event.h | 2 +-
10810 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
10811 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
10812 arch/x86/kernel/uprobes.c | 2 +-
10813 arch/x86/mm/mpx.c | 2 +-
10814 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
10815 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
10816 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
10817 drivers/gpu/drm/drm_pci.c | 6 +-
10818 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
10819 drivers/gpu/drm/i915/i915_dma.c | 2 +-
10820 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
10821 drivers/gpu/drm/i915/i915_drv.h | 2 +-
10822 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
10823 drivers/gpu/drm/mga/mga_drv.c | 5 +-
10824 drivers/gpu/drm/mga/mga_drv.h | 2 +-
10825 drivers/gpu/drm/mga/mga_state.c | 2 +-
10826 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
10827 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
10828 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
10829 drivers/gpu/drm/r128/r128_drv.c | 4 +-
10830 drivers/gpu/drm/r128/r128_drv.h | 2 +-
10831 drivers/gpu/drm/r128/r128_state.c | 2 +-
10832 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
10833 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
10834 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
10835 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
10836 drivers/gpu/drm/savage/savage_bci.c | 2 +-
10837 drivers/gpu/drm/savage/savage_drv.c | 5 +-
10838 drivers/gpu/drm/savage/savage_drv.h | 2 +-
10839 drivers/gpu/drm/sis/sis_drv.c | 5 +-
10840 drivers/gpu/drm/sis/sis_drv.h | 2 +-
10841 drivers/gpu/drm/sis/sis_mm.c | 2 +-
10842 drivers/gpu/drm/via/via_dma.c | 2 +-
10843 drivers/gpu/drm/via/via_drv.c | 5 +-
10844 drivers/gpu/drm/via/via_drv.h | 2 +-
10845 include/drm/drmP.h | 2 +-
10846 mm/slab.c | 2 +-
10847 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
10848 tools/gcc/initify_plugin.c | 15 +++-
10849 .../disable_size_overflow_hash.data | 1 +
10850 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
10851 42 files changed, 156 insertions(+), 110 deletions(-)
10852
10853 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
10854 Author: Brad Spengler <spender@grsecurity.net>
10855 Date: Sat Jan 16 12:19:23 2016 -0500
10856
10857 compile fix
10858
10859 grsecurity/grsec_sig.c | 3 +--
10860 1 files changed, 1 insertions(+), 2 deletions(-)
10861
10862 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
10863 Author: Brad Spengler <spender@grsecurity.net>
10864 Date: Sat Jan 16 12:10:37 2016 -0500
10865
10866 As pointed out by Jann Horn, some distros are starting to circumvent
10867 previous assumptions about the attainability of a user to control
10868 multiple UIDs by handing out suid binaries that allow a user to run
10869 processes (including exploits) under a number of other pre-defined
10870 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
10871 (though it would have to involve some code path that doesn't involve
10872 locks) fix that here by ensuring no more than 8 users on a system can
10873 be banned before a reboot is required. If more are banned, a panic
10874 is triggered.
10875
10876 grsecurity/grsec_sig.c | 8 ++++++++
10877 1 files changed, 8 insertions(+), 0 deletions(-)
10878
10879 commit a8d37776e9521c567ebff6730d49312f72435f08
10880 Author: Eric Dumazet <edumazet@google.com>
10881 Date: Thu Dec 3 11:12:07 2015 -0800
10882
10883 proc: add a reschedule point in proc_readfd_common()
10884
10885 User can pass an arbitrary large buffer to getdents().
10886
10887 It is typically a 32KB buffer used by libc scandir() implementation.
10888
10889 When scanning /proc/{pid}/fd, we can hold cpu way too long,
10890 so add a cond_resched() to be kind with other tasks.
10891
10892 We've seen latencies of more than 50ms on real workloads.
10893
10894 Signed-off-by: Eric Dumazet <edumazet@google.com>
10895 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
10896 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10897
10898 fs/proc/fd.c | 1 +
10899 1 files changed, 1 insertions(+), 0 deletions(-)
10900
10901 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
10902 Author: Rabin Vincent <rabin@rab.in>
10903 Date: Tue Jan 12 20:17:08 2016 +0100
10904
10905 net: bpf: reject invalid shifts
10906
10907 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
10908 constant shift that can't be encoded in the immediate field of the
10909 UBFM/SBFM instructions is passed to the JIT. Since these shifts
10910 amounts, which are negative or >= regsize, are invalid, reject them in
10911 the eBPF verifier and the classic BPF filter checker, for all
10912 architectures.
10913
10914 Signed-off-by: Rabin Vincent <rabin@rab.in>
10915 Acked-by: Alexei Starovoitov <ast@kernel.org>
10916 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
10917 Signed-off-by: David S. Miller <davem@davemloft.net>
10918
10919 kernel/bpf/verifier.c | 10 ++++++++++
10920 net/core/filter.c | 5 +++++
10921 2 files changed, 15 insertions(+), 0 deletions(-)
10922
10923 commit c248e115a73496625a1c64660d0eeefd67e55cbf
10924 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10925 Date: Fri Jan 8 11:00:54 2016 -0200
10926
10927 sctp: fix use-after-free in pr_debug statement
10928
10929 Dmitry Vyukov reported a use-after-free in the code expanded by the
10930 macro debug_post_sfx, which is caused by the use of the asoc pointer
10931 after it was freed within sctp_side_effect() scope.
10932
10933 This patch fixes it by allowing sctp_side_effect to clear that asoc
10934 pointer when the TCB is freed.
10935
10936 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
10937 because it will trigger DELETE_TCB too on that same loop.
10938
10939 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
10940 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
10941 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
10942
10943 The macro is already prepared to handle such NULL pointer.
10944
10945 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10946 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10947 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
10948 Signed-off-by: David S. Miller <davem@davemloft.net>
10949
10950 net/sctp/sm_sideeffect.c | 11 ++++++-----
10951 net/sctp/sm_statefuns.c | 17 ++++-------------
10952 2 files changed, 10 insertions(+), 18 deletions(-)
10953
10954 commit 395ea8a9e73e184fc14153a033000bccf4213213
10955 Author: willy tarreau <w@1wt.eu>
10956 Date: Sun Jan 10 07:54:56 2016 +0100
10957
10958 unix: properly account for FDs passed over unix sockets
10959
10960 It is possible for a process to allocate and accumulate far more FDs than
10961 the process' limit by sending them over a unix socket then closing them
10962 to keep the process' fd count low.
10963
10964 This change addresses this problem by keeping track of the number of FDs
10965 in flight per user and preventing non-privileged processes from having
10966 more FDs in flight than their configured FD limit.
10967
10968 Reported-by: socketpair@gmail.com
10969 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10970 Mitigates: CVE-2013-4312 (Linux 2.0+)
10971 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10972 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10973 Signed-off-by: Willy Tarreau <w@1wt.eu>
10974 Signed-off-by: David S. Miller <davem@davemloft.net>
10975
10976 include/linux/sched.h | 1 +
10977 net/unix/af_unix.c | 24 ++++++++++++++++++++----
10978 net/unix/garbage.c | 13 ++++++++-----
10979 3 files changed, 29 insertions(+), 9 deletions(-)
10980
10981 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
10982 Author: Sasha Levin <sasha.levin@oracle.com>
10983 Date: Thu Jan 7 14:52:43 2016 -0500
10984
10985 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
10986
10987 proc_dostring() needs an initialized destination string, while the one
10988 provided in proc_sctp_do_hmac_alg() contains stack garbage.
10989
10990 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
10991 accessing invalid memory.
10992
10993 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
10994 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10995 Signed-off-by: David S. Miller <davem@davemloft.net>
10996
10997 net/sctp/sysctl.c | 2 +-
10998 1 files changed, 1 insertions(+), 1 deletions(-)
10999
11000 commit 4014e09faf0fe9054119624ccfff1236e886b554
11001 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11002 Date: Tue Nov 24 17:13:21 2015 -0500
11003
11004 RDS: fix race condition when sending a message on unbound socket
11005
11006 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
11007
11008 Sasha's found a NULL pointer dereference in the RDS connection code when
11009 sending a message to an apparently unbound socket. The problem is caused
11010 by the code checking if the socket is bound in rds_sendmsg(), which checks
11011 the rs_bound_addr field without taking a lock on the socket. This opens a
11012 race where rs_bound_addr is temporarily set but where the transport is not
11013 in rds_bind(), leading to a NULL pointer dereference when trying to
11014 dereference 'trans' in __rds_conn_create().
11015
11016 Vegard wrote a reproducer for this issue, so kindly ask him to share if
11017 you're interested.
11018
11019 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
11020 with this patch, whereas I could without.
11021
11022 Complete earlier incomplete fix to CVE-2015-6937:
11023
11024 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
11025
11026 Cc: David S. Miller <davem@davemloft.net>
11027
11028 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
11029 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
11030 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11031 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11032 Signed-off-by: David S. Miller <davem@davemloft.net>
11033 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
11034
11035 Conflicts:
11036
11037 net/rds/send.c
11038
11039 net/rds/connection.c | 6 ------
11040 1 files changed, 0 insertions(+), 6 deletions(-)
11041
11042 commit 206df8d01104344d7588d801016a281a4cd25556
11043 Author: Sasha Levin <sasha.levin@oracle.com>
11044 Date: Tue Sep 8 10:53:40 2015 -0400
11045
11046 RDS: verify the underlying transport exists before creating a connection
11047
11048 There was no verification that an underlying transport exists when creating
11049 a connection, this would cause dereferencing a NULL ptr.
11050
11051 It might happen on sockets that weren't properly bound before attempting to
11052 send a message, which will cause a NULL ptr deref:
11053
11054 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
11055 [135546.051270] Modules linked in:
11056 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
11057 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
11058 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
11059 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
11060 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
11061 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
11062 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
11063 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
11064 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
11065 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
11066 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
11067 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
11068 [135546.064723] Stack:
11069 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
11070 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
11071 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
11072 [135546.068629] Call Trace:
11073 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
11074 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
11075 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
11076 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
11077 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
11078 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
11079 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
11080 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
11081 [135546.076349] ? __might_fault (mm/memory.c:3795)
11082 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
11083 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
11084 [135546.078856] SYSC_sendto (net/socket.c:1657)
11085 [135546.079596] ? SYSC_connect (net/socket.c:1628)
11086 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
11087 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
11088 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11089 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
11090 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
11091 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11092 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
11093
11094 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11095 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11096 Signed-off-by: David S. Miller <davem@davemloft.net>
11097
11098 net/rds/connection.c | 6 ++++++
11099 1 files changed, 6 insertions(+), 0 deletions(-)
11100
11101 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
11102 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
11103 Date: Tue Jan 5 20:32:47 2016 -0500
11104
11105 ftrace/module: Call clean up function when module init fails early
11106
11107 If the module init code fails after calling ftrace_module_init() and before
11108 calling do_init_module(), we can suffer from a memory leak. This is because
11109 ftrace_module_init() allocates pages to store the locations that ftrace
11110 hooks are placed in the module text. If do_init_module() fails, it still
11111 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
11112 the pages it allocated for the module. But if load_module() fails before
11113 then, the pages allocated by ftrace_module_init() will never be freed.
11114
11115 Call ftrace_release_mod() on the module if load_module() fails before
11116 getting to do_init_module().
11117
11118 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
11119
11120 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
11121 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
11122 Cc: stable@vger.kernel.org # v2.6.38+
11123 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
11124 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11125
11126 include/linux/ftrace.h | 1 +
11127 kernel/module.c | 6 ++++++
11128 2 files changed, 7 insertions(+), 0 deletions(-)
11129
11130 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
11131 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
11132 Date: Wed Jan 6 00:18:48 2016 -0800
11133
11134 net: possible use after free in dst_release
11135
11136 dst_release should not access dst->flags after decrementing
11137 __refcnt to 0. The dst_entry may be in dst_busy_list and
11138 dst_gc_task may dst_destroy it before dst_release gets a chance
11139 to access dst->flags.
11140
11141 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
11142 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
11143 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
11144 Acked-by: Eric Dumazet <edumazet@google.com>
11145 Signed-off-by: David S. Miller <davem@davemloft.net>
11146
11147 net/core/dst.c | 3 ++-
11148 1 files changed, 2 insertions(+), 1 deletions(-)
11149
11150 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
11151 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
11152 Date: Wed Jan 6 14:55:02 2016 +0000
11153
11154 mkiss: fix scribble on freed memory
11155
11156 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
11157 scribble on free memory but added a new one which allows the user to
11158 scribble even more and user controlled data into freed space.
11159
11160 As with 6pack we need to halt the queue before we free the buffers, because
11161 the transmit logic is not protected by the semaphore.
11162
11163 Signed-off-by: Alan Cox <alan@linux.intel.com>
11164 Signed-off-by: David S. Miller <davem@davemloft.net>
11165
11166 drivers/net/hamradio/mkiss.c | 5 +++++
11167 1 files changed, 5 insertions(+), 0 deletions(-)
11168
11169 commit 5cbbcbd32dc1949470f61d342503808fa9555276
11170 Author: David Miller <davem@davemloft.net>
11171 Date: Thu Dec 17 16:05:49 2015 -0500
11172
11173 mkiss: Fix use after free in mkiss_close().
11174
11175 Need to do the unregister_device() after all references to the driver
11176 private have been done.
11177
11178 Signed-off-by: David S. Miller <davem@davemloft.net>
11179
11180 drivers/net/hamradio/mkiss.c | 4 ++--
11181 1 files changed, 2 insertions(+), 2 deletions(-)
11182
11183 commit b00171576794a98068e069a660f0991a6a5190ff
11184 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
11185 Date: Tue Jan 5 11:51:25 2016 +0000
11186
11187 6pack: fix free memory scribbles
11188
11189 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
11190 memory scribble but in doing so replaced it with a different one that allows
11191 the user to control the data and scribble even more.
11192
11193 sixpack_close is called by the tty layer in tty context. The tty context is
11194 protected by sp_get() and sp_put(). However network layer activity via
11195 sp_xmit() is not protected this way. We must therefore stop the queue
11196 otherwise the user gets to dump a buffer mostly of their choice into freed
11197 kernel pages.
11198
11199 Signed-off-by: Alan Cox <alan@linux.intel.com>
11200 Signed-off-by: David S. Miller <davem@davemloft.net>
11201
11202 drivers/net/hamradio/6pack.c | 6 ++++++
11203 1 files changed, 6 insertions(+), 0 deletions(-)
11204
11205 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
11206 Author: David Miller <davem@davemloft.net>
11207 Date: Thu Dec 17 16:05:32 2015 -0500
11208
11209 6pack: Fix use after free in sixpack_close().
11210
11211 Need to do the unregister_device() after all references to the driver
11212 private have been done.
11213
11214 Also we need to use del_timer_sync() for the timers so that we don't
11215 have any asynchronous references after the unregister.
11216
11217 Signed-off-by: David S. Miller <davem@davemloft.net>
11218
11219 drivers/net/hamradio/6pack.c | 8 ++++----
11220 1 files changed, 4 insertions(+), 4 deletions(-)
11221
11222 commit 4f9d532742656b3613d579220fd10c78f24ba37b
11223 Author: Rabin Vincent <rabin@rab.in>
11224 Date: Tue Jan 5 16:23:07 2016 +0100
11225
11226 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
11227
11228 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
11229 instructions since it XORs A with X while all the others replace A with
11230 some loaded value. All the BPF JITs fail to clear A if this is used as
11231 the first instruction in a filter. This was found using american fuzzy
11232 lop.
11233
11234 Add a helper to determine if A needs to be cleared given the first
11235 instruction in a filter, and use this in the JITs. Except for ARM, the
11236 rest have only been compile-tested.
11237
11238 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
11239 Signed-off-by: Rabin Vincent <rabin@rab.in>
11240 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11241 Acked-by: Alexei Starovoitov <ast@kernel.org>
11242 Signed-off-by: David S. Miller <davem@davemloft.net>
11243
11244 arch/arm/net/bpf_jit_32.c | 16 +---------------
11245 arch/mips/net/bpf_jit.c | 16 +---------------
11246 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
11247 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
11248 include/linux/filter.h | 19 +++++++++++++++++++
11249 5 files changed, 25 insertions(+), 56 deletions(-)
11250
11251 commit 570d88f8acfffda92b89ae2e1c47320d47256034
11252 Author: John Fastabend <john.fastabend@gmail.com>
11253 Date: Tue Jan 5 09:11:36 2016 -0800
11254
11255 net: sched: fix missing free per cpu on qstats
11256
11257 When a qdisc is using per cpu stats (currently just the ingress
11258 qdisc) only the bstats are being freed. This also free's the qstats.
11259
11260 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
11261 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
11262 Acked-by: Eric Dumazet <edumazet@google.com>
11263 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11264 Signed-off-by: David S. Miller <davem@davemloft.net>
11265
11266 net/sched/sch_generic.c | 4 +++-
11267 1 files changed, 3 insertions(+), 1 deletions(-)
11268
11269 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
11270 Author: Rabin Vincent <rabin@rab.in>
11271 Date: Tue Jan 5 18:34:04 2016 +0100
11272
11273 ARM: net: bpf: fix zero right shift
11274
11275 The LSR instruction cannot be used to perform a zero right shift since a
11276 0 as the immediate value (imm5) in the LSR instruction encoding means
11277 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
11278
11279 Make the JIT skip generation of the LSR if a zero-shift is requested.
11280
11281 This was found using american fuzzy lop.
11282
11283 Signed-off-by: Rabin Vincent <rabin@rab.in>
11284 Acked-by: Alexei Starovoitov <ast@kernel.org>
11285 Signed-off-by: David S. Miller <davem@davemloft.net>
11286
11287 arch/arm/net/bpf_jit_32.c | 3 ++-
11288 1 files changed, 2 insertions(+), 1 deletions(-)
11289
11290 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
11291 Author: Brad Spengler <spender@grsecurity.net>
11292 Date: Wed Jan 6 20:35:57 2016 -0500
11293
11294 Don't perform hidden lookups in RBAC against the directory of
11295 a file being opened with O_CREAT, reported by Karl Witt
11296
11297 Conflicts:
11298
11299 fs/namei.c
11300
11301 fs/namei.c | 3 ---
11302 1 files changed, 0 insertions(+), 3 deletions(-)
11303
11304 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
11305 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11306 Date: Tue Jan 5 10:46:00 2016 +0100
11307
11308 bridge: Only call /sbin/bridge-stp for the initial network namespace
11309
11310 [I stole this patch from Eric Biederman. He wrote:]
11311
11312 > There is no defined mechanism to pass network namespace information
11313 > into /sbin/bridge-stp therefore don't even try to invoke it except
11314 > for bridge devices in the initial network namespace.
11315 >
11316 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
11317 > invoked for any network device name which if /sbin/bridge-stp does not
11318 > guard against unreasonable arguments or being invoked twice on the
11319 > same network device could cause problems.
11320
11321 [Hannes: changed patch using netns_eq]
11322
11323 Cc: Eric W. Biederman <ebiederm@xmission.com>
11324 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
11325 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11326 Signed-off-by: David S. Miller <davem@davemloft.net>
11327
11328 net/bridge/br_stp_if.c | 5 ++++-
11329 1 files changed, 4 insertions(+), 1 deletions(-)
11330
11331 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
11332 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11333 Date: Wed Dec 23 16:28:40 2015 -0200
11334
11335 sctp: use GFP_USER for user-controlled kmalloc
11336
11337 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11338 missed two other spots.
11339
11340 For connectx, as it's more likely to be used by kernel users of the API,
11341 it detects if GFP_USER should be used or not.
11342
11343 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11344 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11345 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11346 Signed-off-by: David S. Miller <davem@davemloft.net>
11347
11348 net/sctp/socket.c | 9 ++++++---
11349 1 files changed, 6 insertions(+), 3 deletions(-)
11350
11351 commit 5718a1f63c41fc156f729783423b002763779d04
11352 Author: Florian Westphal <fw@strlen.de>
11353 Date: Thu Dec 31 14:26:33 2015 +0100
11354
11355 connector: bump skb->users before callback invocation
11356
11357 Dmitry reports memleak with syskaller program.
11358 Problem is that connector bumps skb usecount but might not invoke callback.
11359
11360 So move skb_get to where we invoke the callback.
11361
11362 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11363 Signed-off-by: Florian Westphal <fw@strlen.de>
11364 Signed-off-by: David S. Miller <davem@davemloft.net>
11365
11366 drivers/connector/connector.c | 11 +++--------
11367 1 files changed, 3 insertions(+), 8 deletions(-)
11368
11369 commit 2e6372e6a97f8d642416899861f91777f44f13b7
11370 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11371 Date: Sun Jan 3 18:56:38 2016 +0000
11372
11373 af_unix: Fix splice-bind deadlock
11374
11375 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
11376 system call and AF_UNIX sockets,
11377
11378 http://lists.openwall.net/netdev/2015/11/06/24
11379
11380 The situation was analyzed as
11381
11382 (a while ago) A: socketpair()
11383 B: splice() from a pipe to /mnt/regular_file
11384 does sb_start_write() on /mnt
11385 C: try to freeze /mnt
11386 wait for B to finish with /mnt
11387 A: bind() try to bind our socket to /mnt/new_socket_name
11388 lock our socket, see it not bound yet
11389 decide that it needs to create something in /mnt
11390 try to do sb_start_write() on /mnt, block (it's
11391 waiting for C).
11392 D: splice() from the same pipe to our socket
11393 lock the pipe, see that socket is connected
11394 try to lock the socket, block waiting for A
11395 B: get around to actually feeding a chunk from
11396 pipe to file, try to lock the pipe. Deadlock.
11397
11398 on 2015/11/10 by Al Viro,
11399
11400 http://lists.openwall.net/netdev/2015/11/10/4
11401
11402 The patch fixes this by removing the kern_path_create related code from
11403 unix_mknod and executing it as part of unix_bind prior acquiring the
11404 readlock of the socket in question. This means that A (as used above)
11405 will sb_start_write on /mnt before it acquires the readlock, hence, it
11406 won't indirectly block B which first did a sb_start_write and then
11407 waited for a thread trying to acquire the readlock. Consequently, A
11408 being blocked by C waiting for B won't cause a deadlock anymore
11409 (effectively, both A and B acquire two locks in opposite order in the
11410 situation described above).
11411
11412 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
11413
11414 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11415 Signed-off-by: David S. Miller <davem@davemloft.net>
11416
11417 Conflicts:
11418
11419 net/unix/af_unix.c
11420
11421 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
11422 1 files changed, 42 insertions(+), 28 deletions(-)
11423
11424 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
11425 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
11426 Date: Thu Dec 31 13:11:28 2015 +0800
11427
11428 tracing: Fix setting of start_index in find_next()
11429
11430 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
11431 panic at t_show.
11432
11433 general protection fault: 0000 [#1] PREEMPT SMP
11434 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
11435 RIP: 0010:[<ffffffff811375b2>]
11436 [<ffffffff811375b2>] t_show+0x22/0xe0
11437 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
11438 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
11439 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
11440 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
11441 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
11442 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
11443 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
11444 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
11445 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
11446 Call Trace:
11447 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
11448 [<ffffffff811b749b>] vfs_read+0x9b/0x160
11449 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
11450 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
11451 ---[ end trace 5bd9eb630614861e ]---
11452 Kernel panic - not syncing: Fatal exception
11453
11454 When the first time find_next calls find_next_mod_format, it should
11455 iterate the trace_bprintk_fmt_list to find the first print format of
11456 the module. However in current code, start_index is smaller than *pos
11457 at first, and code will not iterate the list. Latter container_of will
11458 get the wrong address with former v, which will cause mod_fmt be a
11459 meaningless object and so is the returned mod_fmt->fmt.
11460
11461 This patch will fix it by correcting the start_index. After fixed,
11462 when the first time calls find_next_mod_format, start_index will be
11463 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
11464 get the right module printk format, so is the returned mod_fmt->fmt.
11465
11466 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
11467
11468 Cc: stable@vger.kernel.org # 3.12+
11469 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
11470 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
11471 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11472
11473 kernel/trace/trace_printk.c | 1 +
11474 1 files changed, 1 insertions(+), 0 deletions(-)
11475
11476 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
11477 Author: Al Viro <viro@zeniv.linux.org.uk>
11478 Date: Mon Dec 28 20:47:08 2015 -0500
11479
11480 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
11481
11482 Cc: stable@vger.kernel.org # 3.15+
11483 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
11484 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11485
11486 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
11487 1 files changed, 37 insertions(+), 36 deletions(-)
11488
11489 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
11490 Merge: de243c2 3adc55a
11491 Author: Brad Spengler <spender@grsecurity.net>
11492 Date: Tue Jan 5 18:10:10 2016 -0500
11493
11494 Merge branch 'pax-test' into grsec-test
11495
11496 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
11497 Author: Brad Spengler <spender@grsecurity.net>
11498 Date: Tue Jan 5 18:08:53 2016 -0500
11499
11500 Update to pax-linux-4.3.3-test16.patch:
11501 - small cleanup in entry_64.S on x86
11502 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
11503 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
11504 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
11505 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
11506 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
11507
11508 arch/x86/entry/entry_64.S | 60 +++++-----
11509 arch/x86/kernel/alternative.c | 2 +-
11510 arch/x86/kvm/emulate.c | 4 +-
11511 tools/gcc/initify_plugin.c | 123 +++++++++----------
11512 .../disable_size_overflow_hash.data | 4 +-
11513 .../size_overflow_plugin/size_overflow_hash.data | 2 -
11514 6 files changed, 93 insertions(+), 102 deletions(-)
11515
11516 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
11517 Author: Brad Spengler <spender@grsecurity.net>
11518 Date: Tue Dec 29 18:01:24 2015 -0500
11519
11520 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
11521 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
11522 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
11523
11524 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
11525 against suid/sgid attacks and the flaw above would only eliminate the extra
11526 entropy provided for the brk-managed heap, still leaving it with the minimum
11527 of 16-bit entropy for mmap on x86 and 28 on x64.
11528
11529 mm/mmap.c | 2 +-
11530 1 files changed, 1 insertions(+), 1 deletions(-)
11531
11532 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
11533 Merge: 436201b 2584340
11534 Author: Brad Spengler <spender@grsecurity.net>
11535 Date: Mon Dec 28 20:30:01 2015 -0500
11536
11537 Merge branch 'pax-test' into grsec-test
11538
11539 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
11540 Author: Brad Spengler <spender@grsecurity.net>
11541 Date: Mon Dec 28 20:29:28 2015 -0500
11542
11543 Update to pax-linux-4.3.3-test14.patch:
11544 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
11545 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
11546 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
11547 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
11548 - fixed an assert in the initify plugin that triggered in vic_register on arm
11549
11550 arch/arm/include/asm/atomic.h | 7 +++++--
11551 arch/arm/include/asm/domain.h | 5 ++---
11552 arch/x86/kernel/tboot.c | 14 +++++++++-----
11553 drivers/hv/channel.c | 4 +---
11554 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
11555 drivers/net/hyperv/rndis_filter.c | 3 +--
11556 fs/exec.c | 4 ++--
11557 include/linux/atomic.h | 15 ---------------
11558 net/core/skbuff.c | 3 ++-
11559 tools/gcc/initify_plugin.c | 4 +++-
11560 10 files changed, 26 insertions(+), 35 deletions(-)
11561
11562 commit 436201b6626b488d173c8076447000077c27b84a
11563 Author: David Howells <dhowells@redhat.com>
11564 Date: Fri Dec 18 01:34:26 2015 +0000
11565
11566 KEYS: Fix race between read and revoke
11567
11568 This fixes CVE-2015-7550.
11569
11570 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
11571 happens between keyctl_read() checking the validity of a key and the key's
11572 semaphore being taken, then the key type read method will see a revoked key.
11573
11574 This causes a problem for the user-defined key type because it assumes in
11575 its read method that there will always be a payload in a non-revoked key
11576 and doesn't check for a NULL pointer.
11577
11578 Fix this by making keyctl_read() check the validity of a key after taking
11579 semaphore instead of before.
11580
11581 I think the bug was introduced with the original keyrings code.
11582
11583 This was discovered by a multithreaded test program generated by syzkaller
11584 (http://github.com/google/syzkaller). Here's a cleaned up version:
11585
11586 #include <sys/types.h>
11587 #include <keyutils.h>
11588 #include <pthread.h>
11589 void *thr0(void *arg)
11590 {
11591 key_serial_t key = (unsigned long)arg;
11592 keyctl_revoke(key);
11593 return 0;
11594 }
11595 void *thr1(void *arg)
11596 {
11597 key_serial_t key = (unsigned long)arg;
11598 char buffer[16];
11599 keyctl_read(key, buffer, 16);
11600 return 0;
11601 }
11602 int main()
11603 {
11604 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
11605 pthread_t th[5];
11606 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
11607 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
11608 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
11609 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
11610 pthread_join(th[0], 0);
11611 pthread_join(th[1], 0);
11612 pthread_join(th[2], 0);
11613 pthread_join(th[3], 0);
11614 return 0;
11615 }
11616
11617 Build as:
11618
11619 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
11620
11621 Run as:
11622
11623 while keyctl-race; do :; done
11624
11625 as it may need several iterations to crash the kernel. The crash can be
11626 summarised as:
11627
11628 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
11629 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
11630 ...
11631 Call Trace:
11632 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
11633 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
11634 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
11635
11636 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11637 Signed-off-by: David Howells <dhowells@redhat.com>
11638 Tested-by: Dmitry Vyukov <dvyukov@google.com>
11639 Cc: stable@vger.kernel.org
11640 Signed-off-by: James Morris <james.l.morris@oracle.com>
11641
11642 security/keys/keyctl.c | 18 +++++++++---------
11643 1 files changed, 9 insertions(+), 9 deletions(-)
11644
11645 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
11646 Author: Brad Spengler <spender@grsecurity.net>
11647 Date: Tue Dec 22 20:44:01 2015 -0500
11648
11649 Add new kernel command-line param: pax_size_overflow_report_only
11650 If a user triggers a size_overflow violation that makes it difficult
11651 to obtain the call trace without serial console/net console, they can
11652 use this option to provide that information to us
11653
11654 Documentation/kernel-parameters.txt | 5 +++++
11655 fs/exec.c | 12 +++++++++---
11656 init/main.c | 11 +++++++++++
11657 3 files changed, 25 insertions(+), 3 deletions(-)
11658
11659 commit 4254a8da5851df8c08cdca5c392916e8c105408d
11660 Author: WANG Cong <xiyou.wangcong@gmail.com>
11661 Date: Mon Dec 21 10:55:45 2015 -0800
11662
11663 addrconf: always initialize sysctl table data
11664
11665 When sysctl performs restrict writes, it allows to write from
11666 a middle position of a sysctl file, which requires us to initialize
11667 the table data before calling proc_dostring() for the write case.
11668
11669 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
11670 Reported-by: Sasha Levin <sasha.levin@oracle.com>
11671 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11672 Tested-by: Sasha Levin <sasha.levin@oracle.com>
11673 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11674 Signed-off-by: David S. Miller <davem@davemloft.net>
11675
11676 net/ipv6/addrconf.c | 11 ++++-------
11677 1 files changed, 4 insertions(+), 7 deletions(-)
11678
11679 commit f8002863fb06c363180637046947a78a6ccb3d33
11680 Author: WANG Cong <xiyou.wangcong@gmail.com>
11681 Date: Wed Dec 16 23:39:04 2015 -0800
11682
11683 net: check both type and procotol for tcp sockets
11684
11685 Dmitry reported the following out-of-bound access:
11686
11687 Call Trace:
11688 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
11689 mm/kasan/report.c:294
11690 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
11691 [< inline >] SYSC_setsockopt net/socket.c:1746
11692 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
11693 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
11694 arch/x86/entry/entry_64.S:185
11695
11696 This is because we mistake a raw socket as a tcp socket.
11697 We should check both sk->sk_type and sk->sk_protocol to ensure
11698 it is a tcp socket.
11699
11700 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
11701
11702 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11703 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
11704 Cc: Eric Dumazet <eric.dumazet@gmail.com>
11705 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11706 Acked-by: Willem de Bruijn <willemb@google.com>
11707 Signed-off-by: David S. Miller <davem@davemloft.net>
11708
11709 net/core/skbuff.c | 3 ++-
11710 net/core/sock.c | 3 ++-
11711 2 files changed, 4 insertions(+), 2 deletions(-)
11712
11713 commit bd6b3399804470a4ad8f34229469ca149dceba3d
11714 Author: Colin Ian King <colin.king@canonical.com>
11715 Date: Fri Dec 18 14:22:01 2015 -0800
11716
11717 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
11718
11719 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
11720 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
11721 the setting of ret after the get_proc_task call and incorrectly left it as
11722 -ESRCH. Instead, return 0 when successful.
11723
11724 Example breakage:
11725
11726 echo 0 > /proc/self/coredump_filter
11727 bash: echo: write error: No such process
11728
11729 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
11730 Signed-off-by: Colin Ian King <colin.king@canonical.com>
11731 Acked-by: Kees Cook <keescook@chromium.org>
11732 Cc: <stable@vger.kernel.org> [4.3+]
11733 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
11734 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
11735
11736 fs/proc/base.c | 1 +
11737 1 files changed, 1 insertions(+), 0 deletions(-)
11738
11739 commit b28aca2b99ed08546778355fb9402c503ff9b29e
11740 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
11741 Date: Tue Dec 22 10:23:44 2015 -0700
11742
11743 block: ensure to split after potentially bouncing a bio
11744
11745 blk_queue_bio() does split then bounce, which makes the segment
11746 counting based on pages before bouncing and could go wrong. Move
11747 the split to after bouncing, like we do for blk-mq, and the we
11748 fix the issue of having the bio count for segments be wrong.
11749
11750 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
11751 Cc: stable@vger.kernel.org
11752 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
11753 Signed-off-by: Jens Axboe <axboe@fb.com>
11754
11755 block/blk-core.c | 4 ++--
11756 1 files changed, 2 insertions(+), 2 deletions(-)
11757
11758 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
11759 Merge: f6f63ae ec72fa5
11760 Author: Brad Spengler <spender@grsecurity.net>
11761 Date: Tue Dec 22 19:46:26 2015 -0500
11762
11763 Merge branch 'pax-test' into grsec-test
11764
11765 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
11766 Author: Brad Spengler <spender@grsecurity.net>
11767 Date: Tue Dec 22 19:45:51 2015 -0500
11768
11769 Update to pax-linux-4.3.3-test13.patch:
11770 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
11771 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
11772
11773 arch/arm/mm/fault.c | 2 +-
11774 arch/x86/mm/fault.c | 2 +-
11775 fs/btrfs/extent_map.c | 8 ++++++--
11776 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
11777 4 files changed, 11 insertions(+), 5 deletions(-)
11778
11779 commit f6f63ae154cd45028add1dc41957878060d77fbf
11780 Author: Brad Spengler <spender@grsecurity.net>
11781 Date: Thu Dec 17 18:43:44 2015 -0500
11782
11783 ptrace_has_cap() checks whether the current process should be
11784 treated as having a certain capability for ptrace checks
11785 against another process. Until now, this was equivalent to
11786 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
11787
11788 However, if a root-owned process wants to enter a user
11789 namespace for some reason without knowing who owns it and
11790 therefore can't change to the namespace owner's uid and gid
11791 before entering, as soon as it has entered the namespace,
11792 the namespace owner can attach to it via ptrace and thereby
11793 gain access to its uid and gid.
11794
11795 While it is possible for the entering process to switch to
11796 the uid of a claimed namespace owner before entering,
11797 causing the attempt to enter to fail if the claimed uid is
11798 wrong, this doesn't solve the problem of determining an
11799 appropriate gid.
11800
11801 With this change, the entering process can first enter the
11802 namespace and then safely inspect the namespace's
11803 properties, e.g. through /proc/self/{uid_map,gid_map},
11804 assuming that the namespace owner doesn't have access to
11805 uid 0.
11806 Signed-off-by: Jann Horn <jann@thejh.net>
11807
11808 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
11809 1 files changed, 25 insertions(+), 5 deletions(-)
11810
11811 commit e314f0fb63020f61543b401ff594e953c2c304e5
11812 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
11813 Date: Tue Dec 15 10:46:17 2015 -0800
11814
11815 net: fix uninitialized variable issue
11816
11817 msg_iocb needs to be initialized on the recv/recvfrom path.
11818 Otherwise afalg will wrongly interpret it as an async call.
11819
11820 Cc: stable@vger.kernel.org
11821 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
11822 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
11823 Signed-off-by: David S. Miller <davem@davemloft.net>
11824
11825 net/socket.c | 1 +
11826 1 files changed, 1 insertions(+), 0 deletions(-)
11827
11828 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
11829 Merge: dfa764c 142edcf
11830 Author: Brad Spengler <spender@grsecurity.net>
11831 Date: Wed Dec 16 21:01:17 2015 -0500
11832
11833 Merge branch 'pax-test' into grsec-test
11834
11835 commit 142edcf1005a57fb8887823565cf0bafad2f313c
11836 Author: Brad Spengler <spender@grsecurity.net>
11837 Date: Wed Dec 16 21:00:57 2015 -0500
11838
11839 Update to pax-linux-4.3.3-test12.patch:
11840 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
11841 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
11842
11843 drivers/tty/n_tty.c | 16 ++++++++--------
11844 .../disable_size_overflow_hash.data | 2 ++
11845 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
11846 3 files changed, 12 insertions(+), 12 deletions(-)
11847
11848 commit dfa764cc549892a5bfc1083cac78b99032cae577
11849 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11850 Date: Tue Dec 15 22:59:12 2015 +0100
11851
11852 ipv6: automatically enable stable privacy mode if stable_secret set
11853
11854 Bjørn reported that while we switch all interfaces to privacy stable mode
11855 when setting the secret, we don't set this mode for new interfaces. This
11856 does not make sense, so change this behaviour.
11857
11858 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
11859 Reported-by: Bjørn Mork <bjorn@mork.no>
11860 Cc: Bjørn Mork <bjorn@mork.no>
11861 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11862 Signed-off-by: David S. Miller <davem@davemloft.net>
11863
11864 net/ipv6/addrconf.c | 6 ++++++
11865 1 files changed, 6 insertions(+), 0 deletions(-)
11866
11867 commit c2815a1fee03f222273e77c14e43f960da06f35a
11868 Author: Brad Spengler <spender@grsecurity.net>
11869 Date: Wed Dec 16 13:03:38 2015 -0500
11870
11871 Work around upstream limitation on the number of thread info flags causing a compilation error
11872 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
11873
11874 arch/arm/kernel/entry-common.S | 8 ++++++--
11875 1 files changed, 6 insertions(+), 2 deletions(-)
11876
11877 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
11878 Author: Brad Spengler <spender@grsecurity.net>
11879 Date: Tue Dec 15 19:03:41 2015 -0500
11880
11881 Initial import of grsecurity 3.1 for Linux 4.3.3
11882
11883 Documentation/dontdiff | 2 +
11884 Documentation/kernel-parameters.txt | 7 +
11885 Documentation/sysctl/kernel.txt | 15 +
11886 Makefile | 18 +-
11887 arch/alpha/include/asm/cache.h | 4 +-
11888 arch/alpha/kernel/osf_sys.c | 12 +-
11889 arch/arc/Kconfig | 1 +
11890 arch/arm/Kconfig | 1 +
11891 arch/arm/Kconfig.debug | 1 +
11892 arch/arm/include/asm/thread_info.h | 7 +-
11893 arch/arm/kernel/process.c | 4 +-
11894 arch/arm/kernel/ptrace.c | 9 +
11895 arch/arm/kernel/traps.c | 7 +-
11896 arch/arm/mm/Kconfig | 2 +-
11897 arch/arm/mm/fault.c | 40 +-
11898 arch/arm/mm/mmap.c | 8 +-
11899 arch/arm/net/bpf_jit_32.c | 51 +-
11900 arch/arm64/Kconfig.debug | 1 +
11901 arch/avr32/include/asm/cache.h | 4 +-
11902 arch/blackfin/Kconfig.debug | 1 +
11903 arch/blackfin/include/asm/cache.h | 3 +-
11904 arch/cris/include/arch-v10/arch/cache.h | 3 +-
11905 arch/cris/include/arch-v32/arch/cache.h | 3 +-
11906 arch/frv/include/asm/cache.h | 3 +-
11907 arch/frv/mm/elf-fdpic.c | 4 +-
11908 arch/hexagon/include/asm/cache.h | 6 +-
11909 arch/ia64/Kconfig | 1 +
11910 arch/ia64/include/asm/cache.h | 3 +-
11911 arch/ia64/kernel/sys_ia64.c | 2 +
11912 arch/ia64/mm/hugetlbpage.c | 2 +
11913 arch/m32r/include/asm/cache.h | 4 +-
11914 arch/m68k/include/asm/cache.h | 4 +-
11915 arch/metag/mm/hugetlbpage.c | 1 +
11916 arch/microblaze/include/asm/cache.h | 3 +-
11917 arch/mips/Kconfig | 1 +
11918 arch/mips/include/asm/cache.h | 3 +-
11919 arch/mips/include/asm/thread_info.h | 11 +-
11920 arch/mips/kernel/irq.c | 3 +
11921 arch/mips/kernel/ptrace.c | 9 +
11922 arch/mips/mm/mmap.c | 4 +-
11923 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
11924 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
11925 arch/openrisc/include/asm/cache.h | 4 +-
11926 arch/parisc/include/asm/cache.h | 5 +-
11927 arch/parisc/kernel/sys_parisc.c | 4 +
11928 arch/powerpc/Kconfig | 1 +
11929 arch/powerpc/include/asm/cache.h | 4 +-
11930 arch/powerpc/include/asm/thread_info.h | 5 +-
11931 arch/powerpc/kernel/Makefile | 2 +
11932 arch/powerpc/kernel/irq.c | 3 +
11933 arch/powerpc/kernel/process.c | 10 +-
11934 arch/powerpc/kernel/ptrace.c | 14 +
11935 arch/powerpc/kernel/traps.c | 5 +
11936 arch/powerpc/mm/slice.c | 2 +-
11937 arch/s390/Kconfig.debug | 1 +
11938 arch/s390/include/asm/cache.h | 4 +-
11939 arch/score/include/asm/cache.h | 4 +-
11940 arch/sh/include/asm/cache.h | 3 +-
11941 arch/sh/mm/mmap.c | 6 +-
11942 arch/sparc/include/asm/cache.h | 4 +-
11943 arch/sparc/include/asm/pgalloc_64.h | 1 +
11944 arch/sparc/include/asm/thread_info_64.h | 8 +-
11945 arch/sparc/kernel/process_32.c | 6 +-
11946 arch/sparc/kernel/process_64.c | 8 +-
11947 arch/sparc/kernel/ptrace_64.c | 14 +
11948 arch/sparc/kernel/sys_sparc_64.c | 8 +-
11949 arch/sparc/kernel/syscalls.S | 8 +-
11950 arch/sparc/kernel/traps_32.c | 8 +-
11951 arch/sparc/kernel/traps_64.c | 28 +-
11952 arch/sparc/kernel/unaligned_64.c | 2 +-
11953 arch/sparc/mm/fault_64.c | 2 +-
11954 arch/sparc/mm/hugetlbpage.c | 15 +-
11955 arch/tile/Kconfig | 1 +
11956 arch/tile/include/asm/cache.h | 3 +-
11957 arch/tile/mm/hugetlbpage.c | 2 +
11958 arch/um/include/asm/cache.h | 3 +-
11959 arch/unicore32/include/asm/cache.h | 6 +-
11960 arch/x86/Kconfig | 21 +
11961 arch/x86/Kconfig.debug | 2 +
11962 arch/x86/entry/common.c | 14 +
11963 arch/x86/entry/entry_32.S | 2 +-
11964 arch/x86/entry/entry_64.S | 2 +-
11965 arch/x86/ia32/ia32_aout.c | 2 +
11966 arch/x86/include/asm/floppy.h | 20 +-
11967 arch/x86/include/asm/fpu/types.h | 69 +-
11968 arch/x86/include/asm/io.h | 2 +-
11969 arch/x86/include/asm/page.h | 12 +-
11970 arch/x86/include/asm/paravirt_types.h | 23 +-
11971 arch/x86/include/asm/processor.h | 12 +-
11972 arch/x86/include/asm/thread_info.h | 6 +-
11973 arch/x86/include/asm/uaccess.h | 2 +-
11974 arch/x86/kernel/dumpstack.c | 10 +-
11975 arch/x86/kernel/dumpstack_32.c | 2 +-
11976 arch/x86/kernel/dumpstack_64.c | 2 +-
11977 arch/x86/kernel/ioport.c | 13 +
11978 arch/x86/kernel/irq_32.c | 3 +
11979 arch/x86/kernel/irq_64.c | 4 +
11980 arch/x86/kernel/ldt.c | 18 +
11981 arch/x86/kernel/msr.c | 10 +
11982 arch/x86/kernel/ptrace.c | 14 +
11983 arch/x86/kernel/signal.c | 9 +-
11984 arch/x86/kernel/sys_i386_32.c | 9 +-
11985 arch/x86/kernel/sys_x86_64.c | 8 +-
11986 arch/x86/kernel/traps.c | 5 +
11987 arch/x86/kernel/verify_cpu.S | 1 +
11988 arch/x86/kernel/vm86_32.c | 15 +
11989 arch/x86/kvm/svm.c | 14 +-
11990 arch/x86/mm/fault.c | 12 +-
11991 arch/x86/mm/hugetlbpage.c | 15 +-
11992 arch/x86/mm/init.c | 66 +-
11993 arch/x86/mm/init_32.c | 6 +-
11994 arch/x86/net/bpf_jit_comp.c | 4 +
11995 arch/x86/platform/efi/efi_64.c | 2 +-
11996 arch/x86/xen/Kconfig | 1 +
11997 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
11998 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
11999 crypto/ablkcipher.c | 2 +-
12000 crypto/blkcipher.c | 2 +-
12001 crypto/scatterwalk.c | 10 +-
12002 drivers/acpi/acpica/hwxfsleep.c | 11 +-
12003 drivers/acpi/custom_method.c | 4 +
12004 drivers/block/cciss.h | 30 +-
12005 drivers/block/smart1,2.h | 40 +-
12006 drivers/cdrom/cdrom.c | 2 +-
12007 drivers/char/Kconfig | 4 +-
12008 drivers/char/genrtc.c | 1 +
12009 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
12010 drivers/char/mem.c | 17 +
12011 drivers/char/random.c | 5 +-
12012 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
12013 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
12014 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
12015 drivers/crypto/talitos.c | 2 +-
12016 drivers/firewire/ohci.c | 4 +
12017 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
12018 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
12019 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
12020 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
12021 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
12022 drivers/hid/hid-wiimote-debug.c | 2 +-
12023 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
12024 drivers/iommu/Kconfig | 1 +
12025 drivers/iommu/amd_iommu.c | 14 +-
12026 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
12027 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
12028 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
12029 drivers/isdn/hisax/config.c | 2 +-
12030 drivers/isdn/hisax/hfc_pci.c | 2 +-
12031 drivers/isdn/hisax/hfc_sx.c | 2 +-
12032 drivers/isdn/hisax/q931.c | 6 +-
12033 drivers/isdn/i4l/isdn_concap.c | 6 +-
12034 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
12035 drivers/md/bcache/Kconfig | 1 +
12036 drivers/md/raid5.c | 8 +
12037 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
12038 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
12039 drivers/media/platform/vivid/vivid-osd.c | 1 +
12040 drivers/media/radio/radio-cadet.c | 5 +-
12041 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
12042 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
12043 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
12044 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
12045 drivers/message/fusion/mptbase.c | 9 +
12046 drivers/misc/sgi-xp/xp_main.c | 12 +-
12047 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
12048 drivers/net/ppp/pppoe.c | 14 +-
12049 drivers/net/ppp/pptp.c | 6 +
12050 drivers/net/slip/slhc.c | 3 +
12051 drivers/net/wan/lmc/lmc_media.c | 97 +-
12052 drivers/net/wan/x25_asy.c | 6 +-
12053 drivers/net/wan/z85230.c | 24 +-
12054 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
12055 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
12056 drivers/pci/pci-sysfs.c | 2 +-
12057 drivers/pci/proc.c | 9 +
12058 drivers/platform/x86/asus-wmi.c | 12 +
12059 drivers/rtc/rtc-dev.c | 3 +
12060 drivers/scsi/bfa/bfa_fcs.c | 19 +-
12061 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
12062 drivers/scsi/bfa/bfa_modules.h | 12 +-
12063 drivers/scsi/hpsa.h | 40 +-
12064 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
12065 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
12066 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
12067 drivers/target/target_core_sbc.c | 17 +-
12068 drivers/target/target_core_transport.c | 14 +-
12069 drivers/tty/serial/uartlite.c | 4 +-
12070 drivers/tty/sysrq.c | 2 +-
12071 drivers/tty/vt/keyboard.c | 22 +-
12072 drivers/uio/uio.c | 6 +-
12073 drivers/usb/core/hub.c | 5 +
12074 drivers/usb/gadget/function/f_uac1.c | 1 +
12075 drivers/usb/gadget/function/u_uac1.c | 1 +
12076 drivers/usb/host/hwa-hc.c | 9 +-
12077 drivers/usb/usbip/vhci_sysfs.c | 2 +-
12078 drivers/video/fbdev/arcfb.c | 2 +-
12079 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
12080 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
12081 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
12082 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
12083 drivers/xen/xenfs/xenstored.c | 5 +
12084 firmware/Makefile | 2 +
12085 firmware/WHENCE | 20 +-
12086 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
12087 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
12088 fs/9p/vfs_inode.c | 4 +-
12089 fs/attr.c | 1 +
12090 fs/autofs4/waitq.c | 9 +
12091 fs/binfmt_aout.c | 7 +
12092 fs/binfmt_elf.c | 50 +-
12093 fs/compat.c | 20 +-
12094 fs/coredump.c | 17 +-
12095 fs/dcache.c | 3 +
12096 fs/debugfs/inode.c | 11 +-
12097 fs/exec.c | 219 +-
12098 fs/ext2/balloc.c | 4 +-
12099 fs/ext2/super.c | 8 +-
12100 fs/ext4/balloc.c | 4 +-
12101 fs/fcntl.c | 4 +
12102 fs/fhandle.c | 3 +-
12103 fs/file.c | 4 +
12104 fs/filesystems.c | 4 +
12105 fs/fs_struct.c | 20 +-
12106 fs/hugetlbfs/inode.c | 5 +-
12107 fs/inode.c | 8 +-
12108 fs/kernfs/dir.c | 6 +
12109 fs/mount.h | 4 +-
12110 fs/namei.c | 286 +-
12111 fs/namespace.c | 24 +
12112 fs/nfsd/nfscache.c | 2 +-
12113 fs/open.c | 38 +
12114 fs/overlayfs/inode.c | 11 +-
12115 fs/overlayfs/super.c | 6 +-
12116 fs/pipe.c | 2 +-
12117 fs/posix_acl.c | 15 +-
12118 fs/proc/Kconfig | 10 +-
12119 fs/proc/array.c | 69 +-
12120 fs/proc/base.c | 186 +-
12121 fs/proc/cmdline.c | 4 +
12122 fs/proc/devices.c | 4 +
12123 fs/proc/fd.c | 17 +-
12124 fs/proc/generic.c | 64 +
12125 fs/proc/inode.c | 17 +
12126 fs/proc/internal.h | 11 +-
12127 fs/proc/interrupts.c | 4 +
12128 fs/proc/kcore.c | 3 +
12129 fs/proc/meminfo.c | 7 +-
12130 fs/proc/namespaces.c | 4 +-
12131 fs/proc/proc_net.c | 31 +
12132 fs/proc/proc_sysctl.c | 52 +-
12133 fs/proc/root.c | 8 +
12134 fs/proc/stat.c | 69 +-
12135 fs/proc/task_mmu.c | 66 +-
12136 fs/readdir.c | 19 +
12137 fs/reiserfs/item_ops.c | 24 +-
12138 fs/reiserfs/super.c | 4 +
12139 fs/select.c | 2 +
12140 fs/seq_file.c | 30 +-
12141 fs/splice.c | 8 +
12142 fs/stat.c | 20 +-
12143 fs/sysfs/dir.c | 30 +-
12144 fs/sysv/inode.c | 11 +-
12145 fs/utimes.c | 7 +
12146 fs/xattr.c | 26 +-
12147 grsecurity/Kconfig | 1182 ++++
12148 grsecurity/Makefile | 54 +
12149 grsecurity/gracl.c | 2757 +++++++++
12150 grsecurity/gracl_alloc.c | 105 +
12151 grsecurity/gracl_cap.c | 127 +
12152 grsecurity/gracl_compat.c | 269 +
12153 grsecurity/gracl_fs.c | 448 ++
12154 grsecurity/gracl_ip.c | 386 ++
12155 grsecurity/gracl_learn.c | 207 +
12156 grsecurity/gracl_policy.c | 1786 ++++++
12157 grsecurity/gracl_res.c | 68 +
12158 grsecurity/gracl_segv.c | 304 +
12159 grsecurity/gracl_shm.c | 40 +
12160 grsecurity/grsec_chdir.c | 19 +
12161 grsecurity/grsec_chroot.c | 467 ++
12162 grsecurity/grsec_disabled.c | 445 ++
12163 grsecurity/grsec_exec.c | 189 +
12164 grsecurity/grsec_fifo.c | 26 +
12165 grsecurity/grsec_fork.c | 23 +
12166 grsecurity/grsec_init.c | 290 +
12167 grsecurity/grsec_ipc.c | 48 +
12168 grsecurity/grsec_link.c | 65 +
12169 grsecurity/grsec_log.c | 340 +
12170 grsecurity/grsec_mem.c | 48 +
12171 grsecurity/grsec_mount.c | 65 +
12172 grsecurity/grsec_pax.c | 47 +
12173 grsecurity/grsec_proc.c | 20 +
12174 grsecurity/grsec_ptrace.c | 30 +
12175 grsecurity/grsec_sig.c | 236 +
12176 grsecurity/grsec_sock.c | 244 +
12177 grsecurity/grsec_sysctl.c | 488 ++
12178 grsecurity/grsec_time.c | 16 +
12179 grsecurity/grsec_tpe.c | 78 +
12180 grsecurity/grsec_usb.c | 15 +
12181 grsecurity/grsum.c | 64 +
12182 include/linux/binfmts.h | 5 +-
12183 include/linux/bitops.h | 2 +-
12184 include/linux/capability.h | 13 +
12185 include/linux/compiler-gcc.h | 5 +
12186 include/linux/compiler.h | 8 +
12187 include/linux/cred.h | 8 +-
12188 include/linux/dcache.h | 5 +-
12189 include/linux/fs.h | 24 +-
12190 include/linux/fs_struct.h | 2 +-
12191 include/linux/fsnotify.h | 6 +
12192 include/linux/gracl.h | 342 +
12193 include/linux/gracl_compat.h | 156 +
12194 include/linux/gralloc.h | 9 +
12195 include/linux/grdefs.h | 140 +
12196 include/linux/grinternal.h | 230 +
12197 include/linux/grmsg.h | 118 +
12198 include/linux/grsecurity.h | 255 +
12199 include/linux/grsock.h | 19 +
12200 include/linux/ipc.h | 2 +-
12201 include/linux/ipc_namespace.h | 2 +-
12202 include/linux/kallsyms.h | 18 +-
12203 include/linux/kmod.h | 5 +
12204 include/linux/kobject.h | 2 +-
12205 include/linux/lsm_hooks.h | 4 +-
12206 include/linux/mm.h | 12 +
12207 include/linux/mm_types.h | 4 +-
12208 include/linux/module.h | 5 +-
12209 include/linux/mount.h | 2 +-
12210 include/linux/msg.h | 2 +-
12211 include/linux/netfilter/xt_gradm.h | 9 +
12212 include/linux/path.h | 4 +-
12213 include/linux/perf_event.h | 13 +-
12214 include/linux/pid_namespace.h | 2 +-
12215 include/linux/printk.h | 2 +-
12216 include/linux/proc_fs.h | 22 +-
12217 include/linux/proc_ns.h | 2 +-
12218 include/linux/ptrace.h | 24 +-
12219 include/linux/random.h | 2 +-
12220 include/linux/rbtree_augmented.h | 4 +-
12221 include/linux/scatterlist.h | 12 +-
12222 include/linux/sched.h | 114 +-
12223 include/linux/security.h | 1 +
12224 include/linux/sem.h | 2 +-
12225 include/linux/seq_file.h | 5 +
12226 include/linux/shm.h | 6 +-
12227 include/linux/skbuff.h | 3 +
12228 include/linux/slab.h | 9 -
12229 include/linux/sysctl.h | 8 +-
12230 include/linux/thread_info.h | 6 +-
12231 include/linux/tty.h | 2 +-
12232 include/linux/tty_driver.h | 4 +-
12233 include/linux/uidgid.h | 5 +
12234 include/linux/user_namespace.h | 2 +-
12235 include/linux/utsname.h | 2 +-
12236 include/linux/vermagic.h | 16 +-
12237 include/linux/vmalloc.h | 20 +-
12238 include/net/af_unix.h | 2 +-
12239 include/net/dst.h | 33 +
12240 include/net/ip.h | 2 +-
12241 include/net/neighbour.h | 2 +-
12242 include/net/net_namespace.h | 2 +-
12243 include/net/sock.h | 4 +-
12244 include/target/target_core_base.h | 2 +-
12245 include/trace/events/fs.h | 53 +
12246 include/uapi/linux/personality.h | 1 +
12247 init/Kconfig | 4 +-
12248 init/main.c | 35 +-
12249 ipc/mqueue.c | 1 +
12250 ipc/msg.c | 3 +-
12251 ipc/sem.c | 3 +-
12252 ipc/shm.c | 26 +-
12253 ipc/util.c | 6 +
12254 kernel/auditsc.c | 2 +-
12255 kernel/bpf/syscall.c | 8 +-
12256 kernel/capability.c | 41 +-
12257 kernel/cgroup.c | 5 +-
12258 kernel/compat.c | 1 +
12259 kernel/configs.c | 11 +
12260 kernel/cred.c | 112 +-
12261 kernel/events/core.c | 16 +-
12262 kernel/exit.c | 10 +-
12263 kernel/fork.c | 86 +-
12264 kernel/futex.c | 6 +-
12265 kernel/futex_compat.c | 2 +-
12266 kernel/kallsyms.c | 9 +
12267 kernel/kcmp.c | 8 +-
12268 kernel/kexec_core.c | 2 +-
12269 kernel/kmod.c | 95 +-
12270 kernel/kprobes.c | 7 +-
12271 kernel/ksysfs.c | 2 +
12272 kernel/locking/lockdep_proc.c | 10 +-
12273 kernel/module.c | 108 +-
12274 kernel/panic.c | 4 +-
12275 kernel/pid.c | 23 +-
12276 kernel/power/Kconfig | 2 +
12277 kernel/printk/printk.c | 20 +-
12278 kernel/ptrace.c | 56 +-
12279 kernel/resource.c | 10 +
12280 kernel/sched/core.c | 11 +-
12281 kernel/signal.c | 37 +-
12282 kernel/sys.c | 64 +-
12283 kernel/sysctl.c | 172 +-
12284 kernel/taskstats.c | 6 +
12285 kernel/time/posix-timers.c | 8 +
12286 kernel/time/time.c | 5 +
12287 kernel/time/timekeeping.c | 3 +
12288 kernel/time/timer_list.c | 13 +-
12289 kernel/time/timer_stats.c | 10 +-
12290 kernel/trace/Kconfig | 2 +
12291 kernel/trace/trace_syscalls.c | 8 +
12292 kernel/user_namespace.c | 15 +
12293 lib/Kconfig.debug | 13 +-
12294 lib/Kconfig.kasan | 2 +-
12295 lib/is_single_threaded.c | 3 +
12296 lib/list_debug.c | 65 +-
12297 lib/nlattr.c | 2 +
12298 lib/rbtree.c | 4 +-
12299 lib/vsprintf.c | 39 +-
12300 localversion-grsec | 1 +
12301 mm/Kconfig | 8 +-
12302 mm/Kconfig.debug | 1 +
12303 mm/filemap.c | 1 +
12304 mm/kmemleak.c | 4 +-
12305 mm/memory.c | 2 +-
12306 mm/mempolicy.c | 12 +-
12307 mm/migrate.c | 3 +-
12308 mm/mlock.c | 6 +-
12309 mm/mmap.c | 93 +-
12310 mm/mprotect.c | 8 +
12311 mm/oom_kill.c | 28 +-
12312 mm/page_alloc.c | 2 +-
12313 mm/process_vm_access.c | 8 +-
12314 mm/shmem.c | 36 +-
12315 mm/slab.c | 14 +-
12316 mm/slab_common.c | 2 +-
12317 mm/slob.c | 12 +
12318 mm/slub.c | 33 +-
12319 mm/util.c | 3 +
12320 mm/vmalloc.c | 129 +-
12321 mm/vmstat.c | 29 +-
12322 net/appletalk/atalk_proc.c | 2 +-
12323 net/atm/lec.c | 6 +-
12324 net/atm/mpoa_caches.c | 42 +-
12325 net/bluetooth/sco.c | 3 +
12326 net/can/bcm.c | 2 +-
12327 net/can/proc.c | 2 +-
12328 net/core/dev_ioctl.c | 7 +-
12329 net/core/filter.c | 8 +-
12330 net/core/net-procfs.c | 17 +-
12331 net/core/pktgen.c | 2 +-
12332 net/core/sock.c | 3 +-
12333 net/core/sysctl_net_core.c | 2 +-
12334 net/decnet/dn_dev.c | 2 +-
12335 net/ipv4/devinet.c | 6 +-
12336 net/ipv4/inet_hashtables.c | 4 +
12337 net/ipv4/ip_input.c | 7 +
12338 net/ipv4/ip_sockglue.c | 3 +-
12339 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
12340 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
12341 net/ipv4/route.c | 6 +-
12342 net/ipv4/tcp_input.c | 4 +-
12343 net/ipv4/tcp_ipv4.c | 29 +-
12344 net/ipv4/tcp_minisocks.c | 9 +-
12345 net/ipv4/tcp_timer.c | 11 +
12346 net/ipv4/udp.c | 24 +
12347 net/ipv6/addrconf.c | 13 +-
12348 net/ipv6/proc.c | 2 +-
12349 net/ipv6/tcp_ipv6.c | 26 +-
12350 net/ipv6/udp.c | 7 +
12351 net/ipx/ipx_proc.c | 2 +-
12352 net/irda/irproc.c | 2 +-
12353 net/llc/llc_proc.c | 2 +-
12354 net/netfilter/Kconfig | 10 +
12355 net/netfilter/Makefile | 1 +
12356 net/netfilter/nf_conntrack_core.c | 8 +
12357 net/netfilter/xt_gradm.c | 51 +
12358 net/netfilter/xt_hashlimit.c | 4 +-
12359 net/netfilter/xt_recent.c | 2 +-
12360 net/sched/sch_api.c | 2 +-
12361 net/sctp/socket.c | 4 +-
12362 net/socket.c | 75 +-
12363 net/sunrpc/Kconfig | 1 +
12364 net/sunrpc/cache.c | 2 +-
12365 net/sunrpc/stats.c | 2 +-
12366 net/sysctl_net.c | 2 +-
12367 net/unix/af_unix.c | 52 +-
12368 net/vmw_vsock/vmci_transport_notify.c | 30 +-
12369 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
12370 net/x25/sysctl_net_x25.c | 2 +-
12371 net/x25/x25_proc.c | 2 +-
12372 scripts/package/Makefile | 2 +-
12373 scripts/package/mkspec | 41 +-
12374 security/Kconfig | 369 +-
12375 security/apparmor/file.c | 4 +-
12376 security/apparmor/lsm.c | 8 +-
12377 security/commoncap.c | 36 +-
12378 security/min_addr.c | 2 +
12379 security/smack/smack_lsm.c | 8 +-
12380 security/tomoyo/file.c | 12 +-
12381 security/tomoyo/mount.c | 4 +
12382 security/tomoyo/tomoyo.c | 20 +-
12383 security/yama/Kconfig | 2 +-
12384 security/yama/yama_lsm.c | 4 +-
12385 sound/synth/emux/emux_seq.c | 14 +-
12386 sound/usb/line6/driver.c | 40 +-
12387 sound/usb/line6/toneport.c | 12 +-
12388 tools/gcc/.gitignore | 1 +
12389 tools/gcc/Makefile | 12 +
12390 tools/gcc/gen-random-seed.sh | 8 +
12391 tools/gcc/randomize_layout_plugin.c | 930 +++
12392 tools/gcc/size_overflow_plugin/.gitignore | 1 +
12393 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
12394 511 files changed, 32631 insertions(+), 3196 deletions(-)
12395
12396 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
12397 Author: Brad Spengler <spender@grsecurity.net>
12398 Date: Tue Dec 15 14:31:49 2015 -0500
12399
12400 Update to pax-linux-4.3.3-test11.patch:
12401 - fixed a few compile regressions with the recent plugin changes, reported by spender
12402 - updated the size overflow hash table
12403
12404 tools/gcc/latent_entropy_plugin.c | 2 +-
12405 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
12406 tools/gcc/stackleak_plugin.c | 2 +-
12407 tools/gcc/structleak_plugin.c | 6 +--
12408 4 files changed, 60 insertions(+), 16 deletions(-)
12409
12410 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
12411 Author: Brad Spengler <spender@grsecurity.net>
12412 Date: Tue Dec 15 11:50:24 2015 -0500
12413
12414 Apply structleak ICE fix for gcc < 4.9
12415
12416 tools/gcc/structleak_plugin.c | 4 ++++
12417 1 files changed, 4 insertions(+), 0 deletions(-)
12418
12419 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
12420 Author: Brad Spengler <spender@grsecurity.net>
12421 Date: Tue Dec 15 07:57:06 2015 -0500
12422
12423 Update to pax-linux-4.3.1-test10.patch:
12424 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
12425 - Emese regenerated the size overflow hash tables for 4.3
12426 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
12427 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
12428
12429 arch/x86/entry/entry_64.S | 2 +-
12430 arch/x86/entry/entry_64_compat.S | 15 +-
12431 scripts/package/builddeb | 2 +-
12432 tools/gcc/initify_plugin.c | 11 +-
12433 tools/gcc/latent_entropy_plugin.c | 20 +-
12434 .../disable_size_overflow_hash.data | 4 +
12435 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
12436 tools/gcc/stackleak_plugin.c | 26 +-
12437 tools/gcc/structleak_plugin.c | 21 +-
12438 9 files changed, 3079 insertions(+), 2367 deletions(-)
12439
12440 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
12441 Merge: b5847e6 3548341
12442 Author: Brad Spengler <spender@grsecurity.net>
12443 Date: Tue Dec 15 07:47:56 2015 -0500
12444
12445 Merge branch 'linux-4.3.y' into pax-4_3
12446
12447 Conflicts:
12448 net/unix/af_unix.c
12449
12450 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
12451 Author: Brad Spengler <spender@grsecurity.net>
12452 Date: Wed Dec 9 23:11:36 2015 -0500
12453
12454 Update to pax-linux-4.3.1-test9.patch:
12455 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
12456 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
12457 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
12458 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
12459 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
12460 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
12461 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
12462
12463 Makefile | 6 +
12464 arch/x86/include/asm/compat.h | 4 +
12465 arch/x86/include/asm/dma.h | 2 +
12466 arch/x86/include/asm/pmem.h | 2 +-
12467 arch/x86/include/asm/uaccess.h | 20 +-
12468 arch/x86/kernel/apic/vector.c | 6 +-
12469 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
12470 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
12471 arch/x86/kernel/head_64.S | 1 -
12472 arch/x86/kvm/i8259.c | 10 +-
12473 arch/x86/kvm/ioapic.c | 2 +
12474 arch/x86/kvm/x86.c | 2 +
12475 arch/x86/lib/usercopy_64.c | 2 +-
12476 arch/x86/mm/mpx.c | 4 +-
12477 arch/x86/mm/pageattr.c | 7 +
12478 drivers/base/devres.c | 4 +-
12479 drivers/base/power/runtime.c | 6 +-
12480 drivers/base/regmap/regmap.c | 4 +-
12481 drivers/block/drbd/drbd_receiver.c | 4 +-
12482 drivers/block/drbd/drbd_worker.c | 6 +-
12483 drivers/char/virtio_console.c | 6 +-
12484 drivers/md/dm.c | 12 +-
12485 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
12486 drivers/net/macvtap.c | 4 +-
12487 drivers/video/fbdev/core/fbmem.c | 10 +-
12488 fs/compat.c | 3 +-
12489 fs/coredump.c | 2 +-
12490 fs/dcache.c | 13 +-
12491 fs/fhandle.c | 2 +-
12492 fs/file.c | 14 +-
12493 fs/fs-writeback.c | 11 +-
12494 fs/overlayfs/copy_up.c | 2 +-
12495 fs/readdir.c | 3 +-
12496 fs/super.c | 3 +-
12497 include/linux/compiler.h | 36 ++-
12498 include/linux/rcupdate.h | 8 +
12499 include/linux/sched.h | 4 +-
12500 include/linux/seqlock.h | 10 +
12501 include/linux/spinlock.h | 17 +-
12502 include/linux/srcu.h | 5 +-
12503 include/linux/syscalls.h | 2 +-
12504 include/linux/writeback.h | 3 +-
12505 include/uapi/linux/swab.h | 6 +-
12506 ipc/ipc_sysctl.c | 6 +
12507 kernel/exit.c | 25 +-
12508 kernel/resource.c | 4 +-
12509 kernel/signal.c | 12 +-
12510 kernel/user.c | 2 +-
12511 kernel/workqueue.c | 6 +-
12512 lib/rhashtable.c | 4 +-
12513 net/compat.c | 2 +-
12514 net/ipv4/xfrm4_mode_transport.c | 2 +-
12515 security/keys/internal.h | 8 +-
12516 security/keys/keyring.c | 4 -
12517 sound/core/seq/seq_clientmgr.c | 8 +-
12518 sound/core/seq/seq_compat.c | 2 +-
12519 sound/core/seq/seq_memory.c | 6 +-
12520 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
12521 tools/gcc/gcc-common.h | 1 +
12522 tools/gcc/initify_plugin.c | 33 ++-
12523 .../disable_size_overflow_hash.data | 1 +
12524 .../size_overflow_plugin/size_overflow_hash.data | 1 -
12525 62 files changed, 708 insertions(+), 140 deletions(-)
12526
12527 commit f2634c2f6995f4231616f24ed016f890c701f939
12528 Merge: 1241bff 5f8b236
12529 Author: Brad Spengler <spender@grsecurity.net>
12530 Date: Wed Dec 9 21:50:47 2015 -0500
12531
12532 Merge branch 'linux-4.3.y' into pax-4_3
12533
12534 Conflicts:
12535 arch/x86/kernel/fpu/xstate.c
12536 arch/x86/kernel/head_64.S
12537
12538 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
12539 Author: Brad Spengler <spender@grsecurity.net>
12540 Date: Sun Dec 6 08:44:56 2015 -0500
12541
12542 Update to pax-linux-4.3-test8.patch:
12543 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
12544 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
12545 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
12546 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
12547
12548 Makefile | 5 +++
12549 drivers/md/md.c | 5 ++-
12550 drivers/md/raid1.c | 2 +-
12551 fs/proc/task_mmu.c | 3 ++
12552 .../disable_size_overflow_hash.data | 4 ++-
12553 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
12554 .../size_overflow_plugin/size_overflow_hash.data | 2 -
12555 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
12556 8 files changed, 43 insertions(+), 12 deletions(-)
12557
12558 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
12559 Author: Brad Spengler <spender@grsecurity.net>
12560 Date: Fri Dec 4 14:24:12 2015 -0500
12561
12562 Initial import of pax-linux-4.3-test7.patch
12563
12564 Documentation/dontdiff | 47 +-
12565 Documentation/kbuild/makefiles.txt | 39 +-
12566 Documentation/kernel-parameters.txt | 28 +
12567 Makefile | 108 +-
12568 arch/alpha/include/asm/atomic.h | 10 +
12569 arch/alpha/include/asm/elf.h | 7 +
12570 arch/alpha/include/asm/pgalloc.h | 6 +
12571 arch/alpha/include/asm/pgtable.h | 11 +
12572 arch/alpha/kernel/module.c | 2 +-
12573 arch/alpha/kernel/osf_sys.c | 8 +-
12574 arch/alpha/mm/fault.c | 141 +-
12575 arch/arm/Kconfig | 2 +-
12576 arch/arm/include/asm/atomic.h | 320 +-
12577 arch/arm/include/asm/cache.h | 5 +-
12578 arch/arm/include/asm/cacheflush.h | 2 +-
12579 arch/arm/include/asm/checksum.h | 14 +-
12580 arch/arm/include/asm/cmpxchg.h | 4 +
12581 arch/arm/include/asm/cpuidle.h | 2 +-
12582 arch/arm/include/asm/domain.h | 22 +-
12583 arch/arm/include/asm/elf.h | 9 +-
12584 arch/arm/include/asm/fncpy.h | 2 +
12585 arch/arm/include/asm/futex.h | 10 +
12586 arch/arm/include/asm/kmap_types.h | 2 +-
12587 arch/arm/include/asm/mach/dma.h | 2 +-
12588 arch/arm/include/asm/mach/map.h | 16 +-
12589 arch/arm/include/asm/outercache.h | 2 +-
12590 arch/arm/include/asm/page.h | 3 +-
12591 arch/arm/include/asm/pgalloc.h | 20 +
12592 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
12593 arch/arm/include/asm/pgtable-2level.h | 3 +
12594 arch/arm/include/asm/pgtable-3level.h | 3 +
12595 arch/arm/include/asm/pgtable.h | 54 +-
12596 arch/arm/include/asm/smp.h | 2 +-
12597 arch/arm/include/asm/tls.h | 3 +
12598 arch/arm/include/asm/uaccess.h | 79 +-
12599 arch/arm/include/uapi/asm/ptrace.h | 2 +-
12600 arch/arm/kernel/armksyms.c | 2 +-
12601 arch/arm/kernel/cpuidle.c | 2 +-
12602 arch/arm/kernel/entry-armv.S | 109 +-
12603 arch/arm/kernel/entry-common.S | 40 +-
12604 arch/arm/kernel/entry-header.S | 55 +
12605 arch/arm/kernel/fiq.c | 3 +
12606 arch/arm/kernel/module-plts.c | 7 +-
12607 arch/arm/kernel/module.c | 38 +-
12608 arch/arm/kernel/patch.c | 2 +
12609 arch/arm/kernel/process.c | 90 +-
12610 arch/arm/kernel/reboot.c | 1 +
12611 arch/arm/kernel/setup.c | 20 +-
12612 arch/arm/kernel/signal.c | 35 +-
12613 arch/arm/kernel/smp.c | 2 +-
12614 arch/arm/kernel/tcm.c | 4 +-
12615 arch/arm/kernel/vmlinux.lds.S | 6 +-
12616 arch/arm/kvm/arm.c | 8 +-
12617 arch/arm/lib/copy_page.S | 1 +
12618 arch/arm/lib/csumpartialcopyuser.S | 4 +-
12619 arch/arm/lib/delay.c | 2 +-
12620 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
12621 arch/arm/mach-exynos/suspend.c | 6 +-
12622 arch/arm/mach-mvebu/coherency.c | 4 +-
12623 arch/arm/mach-omap2/board-n8x0.c | 2 +-
12624 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
12625 arch/arm/mach-omap2/omap-smp.c | 1 +
12626 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
12627 arch/arm/mach-omap2/omap_device.c | 4 +-
12628 arch/arm/mach-omap2/omap_device.h | 4 +-
12629 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
12630 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
12631 arch/arm/mach-omap2/wd_timer.c | 6 +-
12632 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
12633 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
12634 arch/arm/mach-tegra/irq.c | 1 +
12635 arch/arm/mach-ux500/pm.c | 1 +
12636 arch/arm/mach-zynq/platsmp.c | 1 +
12637 arch/arm/mm/Kconfig | 6 +-
12638 arch/arm/mm/alignment.c | 8 +
12639 arch/arm/mm/cache-l2x0.c | 2 +-
12640 arch/arm/mm/context.c | 10 +-
12641 arch/arm/mm/fault.c | 146 +
12642 arch/arm/mm/fault.h | 12 +
12643 arch/arm/mm/init.c | 39 +
12644 arch/arm/mm/ioremap.c | 4 +-
12645 arch/arm/mm/mmap.c | 30 +-
12646 arch/arm/mm/mmu.c | 162 +-
12647 arch/arm/net/bpf_jit_32.c | 3 +
12648 arch/arm/plat-iop/setup.c | 2 +-
12649 arch/arm/plat-omap/sram.c | 2 +
12650 arch/arm64/include/asm/atomic.h | 10 +
12651 arch/arm64/include/asm/percpu.h | 8 +-
12652 arch/arm64/include/asm/pgalloc.h | 5 +
12653 arch/arm64/include/asm/uaccess.h | 1 +
12654 arch/arm64/mm/dma-mapping.c | 2 +-
12655 arch/avr32/include/asm/elf.h | 8 +-
12656 arch/avr32/include/asm/kmap_types.h | 4 +-
12657 arch/avr32/mm/fault.c | 27 +
12658 arch/frv/include/asm/atomic.h | 10 +
12659 arch/frv/include/asm/kmap_types.h | 2 +-
12660 arch/frv/mm/elf-fdpic.c | 3 +-
12661 arch/ia64/Makefile | 1 +
12662 arch/ia64/include/asm/atomic.h | 10 +
12663 arch/ia64/include/asm/elf.h | 7 +
12664 arch/ia64/include/asm/pgalloc.h | 12 +
12665 arch/ia64/include/asm/pgtable.h | 13 +-
12666 arch/ia64/include/asm/spinlock.h | 2 +-
12667 arch/ia64/include/asm/uaccess.h | 27 +-
12668 arch/ia64/kernel/module.c | 45 +-
12669 arch/ia64/kernel/palinfo.c | 2 +-
12670 arch/ia64/kernel/sys_ia64.c | 7 +
12671 arch/ia64/kernel/vmlinux.lds.S | 2 +-
12672 arch/ia64/mm/fault.c | 32 +-
12673 arch/ia64/mm/init.c | 15 +-
12674 arch/m32r/lib/usercopy.c | 6 +
12675 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
12676 arch/mips/include/asm/atomic.h | 368 +-
12677 arch/mips/include/asm/elf.h | 7 +
12678 arch/mips/include/asm/exec.h | 2 +-
12679 arch/mips/include/asm/hw_irq.h | 2 +-
12680 arch/mips/include/asm/local.h | 57 +
12681 arch/mips/include/asm/page.h | 2 +-
12682 arch/mips/include/asm/pgalloc.h | 5 +
12683 arch/mips/include/asm/pgtable.h | 3 +
12684 arch/mips/include/asm/uaccess.h | 1 +
12685 arch/mips/kernel/binfmt_elfn32.c | 7 +
12686 arch/mips/kernel/binfmt_elfo32.c | 7 +
12687 arch/mips/kernel/irq-gt641xx.c | 2 +-
12688 arch/mips/kernel/irq.c | 6 +-
12689 arch/mips/kernel/pm-cps.c | 2 +-
12690 arch/mips/kernel/process.c | 12 -
12691 arch/mips/kernel/sync-r4k.c | 24 +-
12692 arch/mips/kernel/traps.c | 13 +-
12693 arch/mips/mm/fault.c | 25 +
12694 arch/mips/mm/mmap.c | 51 +-
12695 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
12696 arch/mips/sni/rm200.c | 2 +-
12697 arch/mips/vr41xx/common/icu.c | 2 +-
12698 arch/mips/vr41xx/common/irq.c | 4 +-
12699 arch/parisc/include/asm/atomic.h | 10 +
12700 arch/parisc/include/asm/elf.h | 7 +
12701 arch/parisc/include/asm/pgalloc.h | 6 +
12702 arch/parisc/include/asm/pgtable.h | 11 +
12703 arch/parisc/include/asm/uaccess.h | 4 +-
12704 arch/parisc/kernel/module.c | 50 +-
12705 arch/parisc/kernel/sys_parisc.c | 15 +
12706 arch/parisc/kernel/traps.c | 4 +-
12707 arch/parisc/mm/fault.c | 140 +-
12708 arch/powerpc/include/asm/atomic.h | 329 +-
12709 arch/powerpc/include/asm/elf.h | 12 +
12710 arch/powerpc/include/asm/exec.h | 2 +-
12711 arch/powerpc/include/asm/kmap_types.h | 2 +-
12712 arch/powerpc/include/asm/local.h | 46 +
12713 arch/powerpc/include/asm/mman.h | 2 +-
12714 arch/powerpc/include/asm/page.h | 8 +-
12715 arch/powerpc/include/asm/page_64.h | 7 +-
12716 arch/powerpc/include/asm/pgalloc-64.h | 7 +
12717 arch/powerpc/include/asm/pgtable.h | 1 +
12718 arch/powerpc/include/asm/pte-hash32.h | 1 +
12719 arch/powerpc/include/asm/reg.h | 1 +
12720 arch/powerpc/include/asm/smp.h | 2 +-
12721 arch/powerpc/include/asm/spinlock.h | 42 +-
12722 arch/powerpc/include/asm/uaccess.h | 141 +-
12723 arch/powerpc/kernel/Makefile | 5 +
12724 arch/powerpc/kernel/exceptions-64e.S | 4 +-
12725 arch/powerpc/kernel/exceptions-64s.S | 2 +-
12726 arch/powerpc/kernel/module_32.c | 15 +-
12727 arch/powerpc/kernel/process.c | 46 -
12728 arch/powerpc/kernel/signal_32.c | 2 +-
12729 arch/powerpc/kernel/signal_64.c | 2 +-
12730 arch/powerpc/kernel/traps.c | 21 +
12731 arch/powerpc/kernel/vdso.c | 5 +-
12732 arch/powerpc/lib/usercopy_64.c | 18 -
12733 arch/powerpc/mm/fault.c | 56 +-
12734 arch/powerpc/mm/mmap.c | 16 +
12735 arch/powerpc/mm/slice.c | 13 +-
12736 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
12737 arch/s390/include/asm/atomic.h | 10 +
12738 arch/s390/include/asm/elf.h | 7 +
12739 arch/s390/include/asm/exec.h | 2 +-
12740 arch/s390/include/asm/uaccess.h | 13 +-
12741 arch/s390/kernel/module.c | 22 +-
12742 arch/s390/kernel/process.c | 24 -
12743 arch/s390/mm/mmap.c | 16 +
12744 arch/score/include/asm/exec.h | 2 +-
12745 arch/score/kernel/process.c | 5 -
12746 arch/sh/mm/mmap.c | 22 +-
12747 arch/sparc/include/asm/atomic_64.h | 110 +-
12748 arch/sparc/include/asm/cache.h | 2 +-
12749 arch/sparc/include/asm/elf_32.h | 7 +
12750 arch/sparc/include/asm/elf_64.h | 7 +
12751 arch/sparc/include/asm/pgalloc_32.h | 1 +
12752 arch/sparc/include/asm/pgalloc_64.h | 1 +
12753 arch/sparc/include/asm/pgtable.h | 4 +
12754 arch/sparc/include/asm/pgtable_32.h | 15 +-
12755 arch/sparc/include/asm/pgtsrmmu.h | 5 +
12756 arch/sparc/include/asm/setup.h | 4 +-
12757 arch/sparc/include/asm/spinlock_64.h | 35 +-
12758 arch/sparc/include/asm/thread_info_32.h | 1 +
12759 arch/sparc/include/asm/thread_info_64.h | 2 +
12760 arch/sparc/include/asm/uaccess.h | 1 +
12761 arch/sparc/include/asm/uaccess_32.h | 28 +-
12762 arch/sparc/include/asm/uaccess_64.h | 24 +-
12763 arch/sparc/kernel/Makefile | 2 +-
12764 arch/sparc/kernel/prom_common.c | 2 +-
12765 arch/sparc/kernel/smp_64.c | 8 +-
12766 arch/sparc/kernel/sys_sparc_32.c | 2 +-
12767 arch/sparc/kernel/sys_sparc_64.c | 52 +-
12768 arch/sparc/kernel/traps_64.c | 27 +-
12769 arch/sparc/lib/Makefile | 2 +-
12770 arch/sparc/lib/atomic_64.S | 57 +-
12771 arch/sparc/lib/ksyms.c | 6 +-
12772 arch/sparc/mm/Makefile | 2 +-
12773 arch/sparc/mm/fault_32.c | 292 +
12774 arch/sparc/mm/fault_64.c | 486 +
12775 arch/sparc/mm/hugetlbpage.c | 22 +-
12776 arch/sparc/mm/init_64.c | 10 +-
12777 arch/tile/include/asm/atomic_64.h | 10 +
12778 arch/tile/include/asm/uaccess.h | 4 +-
12779 arch/um/Makefile | 4 +
12780 arch/um/include/asm/kmap_types.h | 2 +-
12781 arch/um/include/asm/page.h | 3 +
12782 arch/um/include/asm/pgtable-3level.h | 1 +
12783 arch/um/kernel/process.c | 16 -
12784 arch/x86/Kconfig | 15 +-
12785 arch/x86/Kconfig.cpu | 6 +-
12786 arch/x86/Kconfig.debug | 4 +-
12787 arch/x86/Makefile | 13 +-
12788 arch/x86/boot/Makefile | 3 +
12789 arch/x86/boot/bitops.h | 4 +-
12790 arch/x86/boot/boot.h | 2 +-
12791 arch/x86/boot/compressed/Makefile | 3 +
12792 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
12793 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
12794 arch/x86/boot/compressed/head_32.S | 4 +-
12795 arch/x86/boot/compressed/head_64.S | 12 +-
12796 arch/x86/boot/compressed/misc.c | 11 +-
12797 arch/x86/boot/cpucheck.c | 16 +-
12798 arch/x86/boot/header.S | 6 +-
12799 arch/x86/boot/memory.c | 2 +-
12800 arch/x86/boot/video-vesa.c | 1 +
12801 arch/x86/boot/video.c | 2 +-
12802 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
12803 arch/x86/crypto/aesni-intel_asm.S | 106 +-
12804 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
12805 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
12806 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
12807 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
12808 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
12809 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
12810 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
12811 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
12812 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
12813 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
12814 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
12815 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
12816 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
12817 arch/x86/crypto/sha256-avx-asm.S | 2 +
12818 arch/x86/crypto/sha256-avx2-asm.S | 2 +
12819 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
12820 arch/x86/crypto/sha512-avx-asm.S | 2 +
12821 arch/x86/crypto/sha512-avx2-asm.S | 2 +
12822 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
12823 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
12824 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
12825 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
12826 arch/x86/entry/calling.h | 86 +-
12827 arch/x86/entry/common.c | 13 +-
12828 arch/x86/entry/entry_32.S | 351 +-
12829 arch/x86/entry/entry_64.S | 619 +-
12830 arch/x86/entry/entry_64_compat.S | 159 +-
12831 arch/x86/entry/thunk_64.S | 2 +
12832 arch/x86/entry/vdso/Makefile | 2 +-
12833 arch/x86/entry/vdso/vdso2c.h | 8 +-
12834 arch/x86/entry/vdso/vma.c | 41 +-
12835 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
12836 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
12837 arch/x86/ia32/ia32_signal.c | 23 +-
12838 arch/x86/ia32/sys_ia32.c | 42 +-
12839 arch/x86/include/asm/alternative-asm.h | 43 +-
12840 arch/x86/include/asm/alternative.h | 4 +-
12841 arch/x86/include/asm/apic.h | 2 +-
12842 arch/x86/include/asm/apm.h | 4 +-
12843 arch/x86/include/asm/atomic.h | 230 +-
12844 arch/x86/include/asm/atomic64_32.h | 100 +
12845 arch/x86/include/asm/atomic64_64.h | 164 +-
12846 arch/x86/include/asm/bitops.h | 18 +-
12847 arch/x86/include/asm/boot.h | 2 +-
12848 arch/x86/include/asm/cache.h | 5 +-
12849 arch/x86/include/asm/checksum_32.h | 12 +-
12850 arch/x86/include/asm/cmpxchg.h | 39 +
12851 arch/x86/include/asm/compat.h | 2 +-
12852 arch/x86/include/asm/cpufeature.h | 17 +-
12853 arch/x86/include/asm/desc.h | 78 +-
12854 arch/x86/include/asm/desc_defs.h | 6 +
12855 arch/x86/include/asm/div64.h | 2 +-
12856 arch/x86/include/asm/elf.h | 33 +-
12857 arch/x86/include/asm/emergency-restart.h | 2 +-
12858 arch/x86/include/asm/fpu/internal.h | 42 +-
12859 arch/x86/include/asm/fpu/types.h | 6 +-
12860 arch/x86/include/asm/futex.h | 14 +-
12861 arch/x86/include/asm/hw_irq.h | 4 +-
12862 arch/x86/include/asm/i8259.h | 2 +-
12863 arch/x86/include/asm/io.h | 22 +-
12864 arch/x86/include/asm/irqflags.h | 5 +
12865 arch/x86/include/asm/kprobes.h | 9 +-
12866 arch/x86/include/asm/local.h | 106 +-
12867 arch/x86/include/asm/mman.h | 15 +
12868 arch/x86/include/asm/mmu.h | 14 +-
12869 arch/x86/include/asm/mmu_context.h | 114 +-
12870 arch/x86/include/asm/module.h | 17 +-
12871 arch/x86/include/asm/nmi.h | 19 +-
12872 arch/x86/include/asm/page.h | 1 +
12873 arch/x86/include/asm/page_32.h | 12 +-
12874 arch/x86/include/asm/page_64.h | 14 +-
12875 arch/x86/include/asm/paravirt.h | 46 +-
12876 arch/x86/include/asm/paravirt_types.h | 15 +-
12877 arch/x86/include/asm/pgalloc.h | 23 +
12878 arch/x86/include/asm/pgtable-2level.h | 2 +
12879 arch/x86/include/asm/pgtable-3level.h | 7 +
12880 arch/x86/include/asm/pgtable.h | 128 +-
12881 arch/x86/include/asm/pgtable_32.h | 14 +-
12882 arch/x86/include/asm/pgtable_32_types.h | 24 +-
12883 arch/x86/include/asm/pgtable_64.h | 23 +-
12884 arch/x86/include/asm/pgtable_64_types.h | 5 +
12885 arch/x86/include/asm/pgtable_types.h | 26 +-
12886 arch/x86/include/asm/preempt.h | 2 +-
12887 arch/x86/include/asm/processor.h | 57 +-
12888 arch/x86/include/asm/ptrace.h | 13 +-
12889 arch/x86/include/asm/realmode.h | 4 +-
12890 arch/x86/include/asm/reboot.h | 10 +-
12891 arch/x86/include/asm/rmwcc.h | 84 +-
12892 arch/x86/include/asm/rwsem.h | 60 +-
12893 arch/x86/include/asm/segment.h | 27 +-
12894 arch/x86/include/asm/smap.h | 43 +
12895 arch/x86/include/asm/smp.h | 14 +-
12896 arch/x86/include/asm/stackprotector.h | 4 +-
12897 arch/x86/include/asm/stacktrace.h | 32 +-
12898 arch/x86/include/asm/switch_to.h | 4 +-
12899 arch/x86/include/asm/sys_ia32.h | 6 +-
12900 arch/x86/include/asm/thread_info.h | 27 +-
12901 arch/x86/include/asm/tlbflush.h | 77 +-
12902 arch/x86/include/asm/uaccess.h | 192 +-
12903 arch/x86/include/asm/uaccess_32.h | 28 +-
12904 arch/x86/include/asm/uaccess_64.h | 169 +-
12905 arch/x86/include/asm/word-at-a-time.h | 2 +-
12906 arch/x86/include/asm/x86_init.h | 10 +-
12907 arch/x86/include/asm/xen/page.h | 2 +-
12908 arch/x86/include/uapi/asm/e820.h | 2 +-
12909 arch/x86/kernel/Makefile | 2 +-
12910 arch/x86/kernel/acpi/boot.c | 4 +-
12911 arch/x86/kernel/acpi/sleep.c | 4 +
12912 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
12913 arch/x86/kernel/alternative.c | 124 +-
12914 arch/x86/kernel/apic/apic.c | 4 +-
12915 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
12916 arch/x86/kernel/apic/apic_noop.c | 2 +-
12917 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
12918 arch/x86/kernel/apic/io_apic.c | 8 +-
12919 arch/x86/kernel/apic/msi.c | 2 +-
12920 arch/x86/kernel/apic/probe_32.c | 4 +-
12921 arch/x86/kernel/apic/vector.c | 4 +-
12922 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
12923 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
12924 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
12925 arch/x86/kernel/apm_32.c | 21 +-
12926 arch/x86/kernel/asm-offsets.c | 20 +
12927 arch/x86/kernel/asm-offsets_64.c | 1 +
12928 arch/x86/kernel/cpu/Makefile | 4 -
12929 arch/x86/kernel/cpu/amd.c | 2 +-
12930 arch/x86/kernel/cpu/bugs_64.c | 2 +
12931 arch/x86/kernel/cpu/common.c | 202 +-
12932 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
12933 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
12934 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
12935 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
12936 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
12937 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
12938 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
12939 arch/x86/kernel/cpu/perf_event.c | 10 +-
12940 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
12941 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
12942 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
12943 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
12944 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
12945 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
12946 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
12947 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
12948 arch/x86/kernel/crash_dump_64.c | 2 +-
12949 arch/x86/kernel/doublefault.c | 8 +-
12950 arch/x86/kernel/dumpstack.c | 24 +-
12951 arch/x86/kernel/dumpstack_32.c | 25 +-
12952 arch/x86/kernel/dumpstack_64.c | 62 +-
12953 arch/x86/kernel/e820.c | 4 +-
12954 arch/x86/kernel/early_printk.c | 1 +
12955 arch/x86/kernel/espfix_64.c | 44 +-
12956 arch/x86/kernel/fpu/core.c | 24 +-
12957 arch/x86/kernel/fpu/init.c | 40 +-
12958 arch/x86/kernel/fpu/regset.c | 22 +-
12959 arch/x86/kernel/fpu/signal.c | 20 +-
12960 arch/x86/kernel/fpu/xstate.c | 8 +-
12961 arch/x86/kernel/ftrace.c | 18 +-
12962 arch/x86/kernel/head64.c | 14 +-
12963 arch/x86/kernel/head_32.S | 235 +-
12964 arch/x86/kernel/head_64.S | 173 +-
12965 arch/x86/kernel/i386_ksyms_32.c | 12 +
12966 arch/x86/kernel/i8259.c | 10 +-
12967 arch/x86/kernel/io_delay.c | 2 +-
12968 arch/x86/kernel/ioport.c | 2 +-
12969 arch/x86/kernel/irq.c | 8 +-
12970 arch/x86/kernel/irq_32.c | 45 +-
12971 arch/x86/kernel/jump_label.c | 10 +-
12972 arch/x86/kernel/kgdb.c | 21 +-
12973 arch/x86/kernel/kprobes/core.c | 28 +-
12974 arch/x86/kernel/kprobes/opt.c | 16 +-
12975 arch/x86/kernel/ksysfs.c | 2 +-
12976 arch/x86/kernel/kvmclock.c | 20 +-
12977 arch/x86/kernel/ldt.c | 25 +
12978 arch/x86/kernel/livepatch.c | 12 +-
12979 arch/x86/kernel/machine_kexec_32.c | 6 +-
12980 arch/x86/kernel/mcount_64.S | 19 +-
12981 arch/x86/kernel/module.c | 78 +-
12982 arch/x86/kernel/msr.c | 2 +-
12983 arch/x86/kernel/nmi.c | 34 +-
12984 arch/x86/kernel/nmi_selftest.c | 4 +-
12985 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
12986 arch/x86/kernel/paravirt.c | 45 +-
12987 arch/x86/kernel/paravirt_patch_64.c | 8 +
12988 arch/x86/kernel/pci-calgary_64.c | 2 +-
12989 arch/x86/kernel/pci-iommu_table.c | 2 +-
12990 arch/x86/kernel/pci-swiotlb.c | 2 +-
12991 arch/x86/kernel/process.c | 80 +-
12992 arch/x86/kernel/process_32.c | 29 +-
12993 arch/x86/kernel/process_64.c | 14 +-
12994 arch/x86/kernel/ptrace.c | 20 +-
12995 arch/x86/kernel/pvclock.c | 8 +-
12996 arch/x86/kernel/reboot.c | 44 +-
12997 arch/x86/kernel/reboot_fixups_32.c | 2 +-
12998 arch/x86/kernel/relocate_kernel_64.S | 3 +-
12999 arch/x86/kernel/setup.c | 29 +-
13000 arch/x86/kernel/setup_percpu.c | 29 +-
13001 arch/x86/kernel/signal.c | 17 +-
13002 arch/x86/kernel/smp.c | 2 +-
13003 arch/x86/kernel/smpboot.c | 29 +-
13004 arch/x86/kernel/step.c | 6 +-
13005 arch/x86/kernel/sys_i386_32.c | 184 +
13006 arch/x86/kernel/sys_x86_64.c | 22 +-
13007 arch/x86/kernel/tboot.c | 14 +-
13008 arch/x86/kernel/time.c | 8 +-
13009 arch/x86/kernel/tls.c | 7 +-
13010 arch/x86/kernel/tracepoint.c | 4 +-
13011 arch/x86/kernel/traps.c | 53 +-
13012 arch/x86/kernel/tsc.c | 2 +-
13013 arch/x86/kernel/uprobes.c | 2 +-
13014 arch/x86/kernel/vm86_32.c | 6 +-
13015 arch/x86/kernel/vmlinux.lds.S | 153 +-
13016 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
13017 arch/x86/kernel/x86_init.c | 6 +-
13018 arch/x86/kvm/cpuid.c | 21 +-
13019 arch/x86/kvm/emulate.c | 2 +-
13020 arch/x86/kvm/lapic.c | 2 +-
13021 arch/x86/kvm/paging_tmpl.h | 2 +-
13022 arch/x86/kvm/svm.c | 10 +-
13023 arch/x86/kvm/vmx.c | 62 +-
13024 arch/x86/kvm/x86.c | 42 +-
13025 arch/x86/lguest/boot.c | 3 +-
13026 arch/x86/lib/atomic64_386_32.S | 164 +
13027 arch/x86/lib/atomic64_cx8_32.S | 98 +-
13028 arch/x86/lib/checksum_32.S | 99 +-
13029 arch/x86/lib/clear_page_64.S | 3 +
13030 arch/x86/lib/cmpxchg16b_emu.S | 3 +
13031 arch/x86/lib/copy_page_64.S | 14 +-
13032 arch/x86/lib/copy_user_64.S | 66 +-
13033 arch/x86/lib/csum-copy_64.S | 14 +-
13034 arch/x86/lib/csum-wrappers_64.c | 8 +-
13035 arch/x86/lib/getuser.S | 74 +-
13036 arch/x86/lib/insn.c | 8 +-
13037 arch/x86/lib/iomap_copy_64.S | 2 +
13038 arch/x86/lib/memcpy_64.S | 6 +
13039 arch/x86/lib/memmove_64.S | 3 +-
13040 arch/x86/lib/memset_64.S | 3 +
13041 arch/x86/lib/mmx_32.c | 243 +-
13042 arch/x86/lib/msr-reg.S | 2 +
13043 arch/x86/lib/putuser.S | 87 +-
13044 arch/x86/lib/rwsem.S | 6 +-
13045 arch/x86/lib/usercopy_32.c | 359 +-
13046 arch/x86/lib/usercopy_64.c | 20 +-
13047 arch/x86/math-emu/fpu_aux.c | 2 +-
13048 arch/x86/math-emu/fpu_entry.c | 4 +-
13049 arch/x86/math-emu/fpu_system.h | 2 +-
13050 arch/x86/mm/Makefile | 4 +
13051 arch/x86/mm/extable.c | 26 +-
13052 arch/x86/mm/fault.c | 570 +-
13053 arch/x86/mm/gup.c | 6 +-
13054 arch/x86/mm/highmem_32.c | 6 +
13055 arch/x86/mm/hugetlbpage.c | 24 +-
13056 arch/x86/mm/init.c | 111 +-
13057 arch/x86/mm/init_32.c | 111 +-
13058 arch/x86/mm/init_64.c | 46 +-
13059 arch/x86/mm/iomap_32.c | 4 +
13060 arch/x86/mm/ioremap.c | 52 +-
13061 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
13062 arch/x86/mm/mmap.c | 40 +-
13063 arch/x86/mm/mmio-mod.c | 10 +-
13064 arch/x86/mm/numa.c | 2 +-
13065 arch/x86/mm/pageattr.c | 38 +-
13066 arch/x86/mm/pat.c | 12 +-
13067 arch/x86/mm/pat_rbtree.c | 2 +-
13068 arch/x86/mm/pf_in.c | 10 +-
13069 arch/x86/mm/pgtable.c | 214 +-
13070 arch/x86/mm/pgtable_32.c | 3 +
13071 arch/x86/mm/setup_nx.c | 7 +
13072 arch/x86/mm/tlb.c | 4 +
13073 arch/x86/mm/uderef_64.c | 37 +
13074 arch/x86/net/bpf_jit.S | 11 +
13075 arch/x86/net/bpf_jit_comp.c | 13 +-
13076 arch/x86/oprofile/backtrace.c | 6 +-
13077 arch/x86/oprofile/nmi_int.c | 8 +-
13078 arch/x86/oprofile/op_model_amd.c | 8 +-
13079 arch/x86/oprofile/op_model_ppro.c | 7 +-
13080 arch/x86/oprofile/op_x86_model.h | 2 +-
13081 arch/x86/pci/intel_mid_pci.c | 2 +-
13082 arch/x86/pci/irq.c | 8 +-
13083 arch/x86/pci/pcbios.c | 144 +-
13084 arch/x86/platform/efi/efi_32.c | 24 +
13085 arch/x86/platform/efi/efi_64.c | 26 +-
13086 arch/x86/platform/efi/efi_stub_32.S | 64 +-
13087 arch/x86/platform/efi/efi_stub_64.S | 2 +
13088 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
13089 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
13090 arch/x86/platform/intel-mid/mfld.c | 4 +-
13091 arch/x86/platform/intel-mid/mrfl.c | 2 +-
13092 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
13093 arch/x86/platform/olpc/olpc_dt.c | 2 +-
13094 arch/x86/power/cpu.c | 11 +-
13095 arch/x86/realmode/init.c | 10 +-
13096 arch/x86/realmode/rm/Makefile | 3 +
13097 arch/x86/realmode/rm/header.S | 4 +-
13098 arch/x86/realmode/rm/reboot.S | 4 +
13099 arch/x86/realmode/rm/trampoline_32.S | 12 +-
13100 arch/x86/realmode/rm/trampoline_64.S | 3 +-
13101 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
13102 arch/x86/tools/Makefile | 2 +-
13103 arch/x86/tools/relocs.c | 96 +-
13104 arch/x86/um/mem_32.c | 2 +-
13105 arch/x86/um/tls_32.c | 2 +-
13106 arch/x86/xen/enlighten.c | 50 +-
13107 arch/x86/xen/mmu.c | 19 +-
13108 arch/x86/xen/smp.c | 16 +-
13109 arch/x86/xen/xen-asm_32.S | 2 +-
13110 arch/x86/xen/xen-head.S | 11 +
13111 arch/x86/xen/xen-ops.h | 2 -
13112 block/bio.c | 4 +-
13113 block/blk-iopoll.c | 2 +-
13114 block/blk-map.c | 2 +-
13115 block/blk-softirq.c | 2 +-
13116 block/bsg.c | 12 +-
13117 block/compat_ioctl.c | 4 +-
13118 block/genhd.c | 9 +-
13119 block/partitions/efi.c | 8 +-
13120 block/scsi_ioctl.c | 29 +-
13121 crypto/cryptd.c | 4 +-
13122 crypto/pcrypt.c | 2 +-
13123 crypto/zlib.c | 12 +-
13124 drivers/acpi/acpi_video.c | 2 +-
13125 drivers/acpi/apei/apei-internal.h | 2 +-
13126 drivers/acpi/apei/ghes.c | 4 +-
13127 drivers/acpi/bgrt.c | 6 +-
13128 drivers/acpi/blacklist.c | 4 +-
13129 drivers/acpi/bus.c | 4 +-
13130 drivers/acpi/device_pm.c | 4 +-
13131 drivers/acpi/ec.c | 2 +-
13132 drivers/acpi/pci_slot.c | 2 +-
13133 drivers/acpi/processor_idle.c | 2 +-
13134 drivers/acpi/processor_pdc.c | 2 +-
13135 drivers/acpi/sleep.c | 2 +-
13136 drivers/acpi/sysfs.c | 4 +-
13137 drivers/acpi/thermal.c | 2 +-
13138 drivers/acpi/video_detect.c | 7 +-
13139 drivers/ata/libata-core.c | 12 +-
13140 drivers/ata/libata-scsi.c | 2 +-
13141 drivers/ata/libata.h | 2 +-
13142 drivers/ata/pata_arasan_cf.c | 4 +-
13143 drivers/atm/adummy.c | 2 +-
13144 drivers/atm/ambassador.c | 8 +-
13145 drivers/atm/atmtcp.c | 14 +-
13146 drivers/atm/eni.c | 10 +-
13147 drivers/atm/firestream.c | 8 +-
13148 drivers/atm/fore200e.c | 14 +-
13149 drivers/atm/he.c | 18 +-
13150 drivers/atm/horizon.c | 4 +-
13151 drivers/atm/idt77252.c | 36 +-
13152 drivers/atm/iphase.c | 34 +-
13153 drivers/atm/lanai.c | 12 +-
13154 drivers/atm/nicstar.c | 46 +-
13155 drivers/atm/solos-pci.c | 4 +-
13156 drivers/atm/suni.c | 4 +-
13157 drivers/atm/uPD98402.c | 16 +-
13158 drivers/atm/zatm.c | 6 +-
13159 drivers/base/bus.c | 4 +-
13160 drivers/base/devtmpfs.c | 8 +-
13161 drivers/base/node.c | 2 +-
13162 drivers/base/platform-msi.c | 20 +-
13163 drivers/base/power/domain.c | 11 +-
13164 drivers/base/power/sysfs.c | 2 +-
13165 drivers/base/power/wakeup.c | 8 +-
13166 drivers/base/regmap/regmap-debugfs.c | 11 +-
13167 drivers/base/syscore.c | 4 +-
13168 drivers/block/cciss.c | 28 +-
13169 drivers/block/cciss.h | 2 +-
13170 drivers/block/cpqarray.c | 28 +-
13171 drivers/block/cpqarray.h | 2 +-
13172 drivers/block/drbd/drbd_bitmap.c | 2 +-
13173 drivers/block/drbd/drbd_int.h | 8 +-
13174 drivers/block/drbd/drbd_main.c | 12 +-
13175 drivers/block/drbd/drbd_nl.c | 4 +-
13176 drivers/block/drbd/drbd_receiver.c | 34 +-
13177 drivers/block/drbd/drbd_worker.c | 8 +-
13178 drivers/block/pktcdvd.c | 4 +-
13179 drivers/block/rbd.c | 2 +-
13180 drivers/bluetooth/btwilink.c | 2 +-
13181 drivers/bus/arm-cci.c | 12 +-
13182 drivers/cdrom/cdrom.c | 11 +-
13183 drivers/cdrom/gdrom.c | 1 -
13184 drivers/char/agp/compat_ioctl.c | 2 +-
13185 drivers/char/agp/frontend.c | 4 +-
13186 drivers/char/agp/intel-gtt.c | 4 +-
13187 drivers/char/hpet.c | 2 +-
13188 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
13189 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
13190 drivers/char/mem.c | 47 +-
13191 drivers/char/nvram.c | 2 +-
13192 drivers/char/pcmcia/synclink_cs.c | 16 +-
13193 drivers/char/random.c | 12 +-
13194 drivers/char/sonypi.c | 11 +-
13195 drivers/char/tpm/tpm_acpi.c | 3 +-
13196 drivers/char/tpm/tpm_eventlog.c | 4 +-
13197 drivers/char/virtio_console.c | 4 +-
13198 drivers/clk/clk-composite.c | 2 +-
13199 drivers/clk/samsung/clk.h | 2 +-
13200 drivers/clk/socfpga/clk-gate.c | 9 +-
13201 drivers/clk/socfpga/clk-pll.c | 9 +-
13202 drivers/clk/ti/clk.c | 8 +-
13203 drivers/cpufreq/acpi-cpufreq.c | 17 +-
13204 drivers/cpufreq/cpufreq-dt.c | 4 +-
13205 drivers/cpufreq/cpufreq.c | 30 +-
13206 drivers/cpufreq/cpufreq_governor.c | 2 +-
13207 drivers/cpufreq/cpufreq_governor.h | 4 +-
13208 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
13209 drivers/cpufreq/intel_pstate.c | 33 +-
13210 drivers/cpufreq/p4-clockmod.c | 12 +-
13211 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
13212 drivers/cpufreq/speedstep-centrino.c | 7 +-
13213 drivers/cpuidle/driver.c | 2 +-
13214 drivers/cpuidle/dt_idle_states.c | 2 +-
13215 drivers/cpuidle/governor.c | 2 +-
13216 drivers/cpuidle/sysfs.c | 2 +-
13217 drivers/crypto/hifn_795x.c | 4 +-
13218 drivers/devfreq/devfreq.c | 4 +-
13219 drivers/dma/sh/shdma-base.c | 4 +-
13220 drivers/dma/sh/shdmac.c | 2 +-
13221 drivers/edac/edac_device.c | 4 +-
13222 drivers/edac/edac_mc_sysfs.c | 2 +-
13223 drivers/edac/edac_pci.c | 4 +-
13224 drivers/edac/edac_pci_sysfs.c | 22 +-
13225 drivers/edac/mce_amd.h | 2 +-
13226 drivers/firewire/core-card.c | 6 +-
13227 drivers/firewire/core-device.c | 2 +-
13228 drivers/firewire/core-transaction.c | 1 +
13229 drivers/firewire/core.h | 1 +
13230 drivers/firmware/dmi-id.c | 2 +-
13231 drivers/firmware/dmi_scan.c | 12 +-
13232 drivers/firmware/efi/cper.c | 8 +-
13233 drivers/firmware/efi/efi.c | 12 +-
13234 drivers/firmware/efi/efivars.c | 2 +-
13235 drivers/firmware/efi/runtime-map.c | 2 +-
13236 drivers/firmware/google/gsmi.c | 2 +-
13237 drivers/firmware/google/memconsole.c | 7 +-
13238 drivers/firmware/memmap.c | 2 +-
13239 drivers/firmware/psci.c | 2 +-
13240 drivers/gpio/gpio-davinci.c | 6 +-
13241 drivers/gpio/gpio-em.c | 2 +-
13242 drivers/gpio/gpio-ich.c | 2 +-
13243 drivers/gpio/gpio-omap.c | 4 +-
13244 drivers/gpio/gpio-rcar.c | 2 +-
13245 drivers/gpio/gpio-vr41xx.c | 2 +-
13246 drivers/gpio/gpiolib.c | 12 +-
13247 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
13248 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
13249 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
13250 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
13251 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
13252 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
13253 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
13254 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
13255 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
13256 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
13257 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
13258 drivers/gpu/drm/drm_crtc.c | 2 +-
13259 drivers/gpu/drm/drm_drv.c | 2 +-
13260 drivers/gpu/drm/drm_fops.c | 12 +-
13261 drivers/gpu/drm/drm_global.c | 14 +-
13262 drivers/gpu/drm/drm_info.c | 13 +-
13263 drivers/gpu/drm/drm_ioc32.c | 13 +-
13264 drivers/gpu/drm/drm_ioctl.c | 2 +-
13265 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
13266 drivers/gpu/drm/i810/i810_drv.h | 4 +-
13267 drivers/gpu/drm/i915/i915_dma.c | 2 +-
13268 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
13269 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
13270 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
13271 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
13272 drivers/gpu/drm/i915/intel_display.c | 26 +-
13273 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
13274 drivers/gpu/drm/mga/mga_drv.h | 4 +-
13275 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
13276 drivers/gpu/drm/mga/mga_irq.c | 8 +-
13277 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
13278 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
13279 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
13280 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
13281 drivers/gpu/drm/omapdrm/Makefile | 2 +-
13282 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
13283 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
13284 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
13285 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
13286 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
13287 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
13288 drivers/gpu/drm/r128/r128_cce.c | 2 +-
13289 drivers/gpu/drm/r128/r128_drv.h | 4 +-
13290 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
13291 drivers/gpu/drm/r128/r128_irq.c | 4 +-
13292 drivers/gpu/drm/r128/r128_state.c | 4 +-
13293 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
13294 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
13295 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
13296 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
13297 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
13298 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
13299 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
13300 drivers/gpu/drm/tegra/dc.c | 2 +-
13301 drivers/gpu/drm/tegra/dsi.c | 2 +-
13302 drivers/gpu/drm/tegra/hdmi.c | 2 +-
13303 drivers/gpu/drm/tegra/sor.c | 7 +-
13304 drivers/gpu/drm/tilcdc/Makefile | 6 +-
13305 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
13306 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
13307 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
13308 drivers/gpu/drm/udl/udl_fb.c | 1 -
13309 drivers/gpu/drm/via/via_drv.h | 4 +-
13310 drivers/gpu/drm/via/via_irq.c | 18 +-
13311 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
13312 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
13313 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
13314 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
13315 drivers/gpu/vga/vga_switcheroo.c | 4 +-
13316 drivers/hid/hid-core.c | 4 +-
13317 drivers/hid/hid-sensor-custom.c | 2 +-
13318 drivers/hv/channel.c | 2 +-
13319 drivers/hv/hv.c | 4 +-
13320 drivers/hv/hv_balloon.c | 18 +-
13321 drivers/hv/hyperv_vmbus.h | 2 +-
13322 drivers/hwmon/acpi_power_meter.c | 6 +-
13323 drivers/hwmon/applesmc.c | 2 +-
13324 drivers/hwmon/asus_atk0110.c | 10 +-
13325 drivers/hwmon/coretemp.c | 2 +-
13326 drivers/hwmon/dell-smm-hwmon.c | 2 +-
13327 drivers/hwmon/ibmaem.c | 2 +-
13328 drivers/hwmon/iio_hwmon.c | 2 +-
13329 drivers/hwmon/nct6683.c | 6 +-
13330 drivers/hwmon/nct6775.c | 6 +-
13331 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
13332 drivers/hwmon/sht15.c | 12 +-
13333 drivers/hwmon/via-cputemp.c | 2 +-
13334 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
13335 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
13336 drivers/i2c/i2c-dev.c | 2 +-
13337 drivers/ide/ide-cd.c | 2 +-
13338 drivers/ide/ide-disk.c | 2 +-
13339 drivers/iio/industrialio-core.c | 2 +-
13340 drivers/iio/magnetometer/ak8975.c | 2 +-
13341 drivers/infiniband/core/cm.c | 32 +-
13342 drivers/infiniband/core/fmr_pool.c | 20 +-
13343 drivers/infiniband/core/uverbs_cmd.c | 3 +
13344 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
13345 drivers/infiniband/hw/mlx4/mad.c | 2 +-
13346 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
13347 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
13348 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
13349 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
13350 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
13351 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
13352 drivers/infiniband/hw/nes/nes.c | 4 +-
13353 drivers/infiniband/hw/nes/nes.h | 40 +-
13354 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
13355 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
13356 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
13357 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
13358 drivers/infiniband/hw/qib/qib.h | 1 +
13359 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
13360 drivers/input/gameport/gameport.c | 4 +-
13361 drivers/input/input.c | 4 +-
13362 drivers/input/joystick/sidewinder.c | 1 +
13363 drivers/input/joystick/xpad.c | 4 +-
13364 drivers/input/misc/ims-pcu.c | 4 +-
13365 drivers/input/mouse/psmouse.h | 2 +-
13366 drivers/input/mousedev.c | 2 +-
13367 drivers/input/serio/serio.c | 4 +-
13368 drivers/input/serio/serio_raw.c | 4 +-
13369 drivers/input/touchscreen/htcpen.c | 2 +-
13370 drivers/iommu/arm-smmu-v3.c | 2 +-
13371 drivers/iommu/arm-smmu.c | 43 +-
13372 drivers/iommu/io-pgtable-arm.c | 101 +-
13373 drivers/iommu/io-pgtable.c | 11 +-
13374 drivers/iommu/io-pgtable.h | 19 +-
13375 drivers/iommu/iommu.c | 2 +-
13376 drivers/iommu/ipmmu-vmsa.c | 13 +-
13377 drivers/iommu/irq_remapping.c | 2 +-
13378 drivers/irqchip/irq-gic.c | 2 +-
13379 drivers/irqchip/irq-i8259.c | 2 +-
13380 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
13381 drivers/irqchip/irq-renesas-irqc.c | 2 +-
13382 drivers/isdn/capi/capi.c | 10 +-
13383 drivers/isdn/gigaset/interface.c | 8 +-
13384 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
13385 drivers/isdn/hardware/avm/b1.c | 4 +-
13386 drivers/isdn/i4l/isdn_common.c | 2 +
13387 drivers/isdn/i4l/isdn_tty.c | 22 +-
13388 drivers/isdn/icn/icn.c | 2 +-
13389 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
13390 drivers/lguest/core.c | 10 +-
13391 drivers/lguest/page_tables.c | 2 +-
13392 drivers/lguest/x86/core.c | 12 +-
13393 drivers/lguest/x86/switcher_32.S | 27 +-
13394 drivers/md/bcache/closure.h | 2 +-
13395 drivers/md/bitmap.c | 2 +-
13396 drivers/md/dm-ioctl.c | 2 +-
13397 drivers/md/dm-raid1.c | 18 +-
13398 drivers/md/dm-stats.c | 6 +-
13399 drivers/md/dm-stripe.c | 10 +-
13400 drivers/md/dm-table.c | 2 +-
13401 drivers/md/dm-thin-metadata.c | 4 +-
13402 drivers/md/dm.c | 16 +-
13403 drivers/md/md.c | 26 +-
13404 drivers/md/md.h | 6 +-
13405 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
13406 drivers/md/persistent-data/dm-space-map.h | 1 +
13407 drivers/md/raid1.c | 4 +-
13408 drivers/md/raid10.c | 18 +-
13409 drivers/md/raid5.c | 22 +-
13410 drivers/media/dvb-core/dvbdev.c | 2 +-
13411 drivers/media/dvb-frontends/af9033.h | 2 +-
13412 drivers/media/dvb-frontends/dib3000.h | 2 +-
13413 drivers/media/dvb-frontends/dib7000p.h | 2 +-
13414 drivers/media/dvb-frontends/dib8000.h | 2 +-
13415 drivers/media/pci/cx88/cx88-video.c | 6 +-
13416 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
13417 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
13418 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
13419 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
13420 drivers/media/pci/tw68/tw68-core.c | 2 +-
13421 drivers/media/platform/omap/omap_vout.c | 11 +-
13422 drivers/media/platform/s5p-tv/mixer.h | 2 +-
13423 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
13424 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
13425 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
13426 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
13427 drivers/media/radio/radio-cadet.c | 2 +
13428 drivers/media/radio/radio-maxiradio.c | 2 +-
13429 drivers/media/radio/radio-shark.c | 2 +-
13430 drivers/media/radio/radio-shark2.c | 2 +-
13431 drivers/media/radio/radio-si476x.c | 2 +-
13432 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
13433 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
13434 drivers/media/v4l2-core/v4l2-device.c | 4 +-
13435 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
13436 drivers/memory/omap-gpmc.c | 21 +-
13437 drivers/message/fusion/mptsas.c | 34 +-
13438 drivers/mfd/ab8500-debugfs.c | 2 +-
13439 drivers/mfd/kempld-core.c | 2 +-
13440 drivers/mfd/max8925-i2c.c | 2 +-
13441 drivers/mfd/tps65910.c | 2 +-
13442 drivers/mfd/twl4030-irq.c | 9 +-
13443 drivers/mfd/wm5110-tables.c | 2 +-
13444 drivers/mfd/wm8998-tables.c | 2 +-
13445 drivers/misc/c2port/core.c | 4 +-
13446 drivers/misc/kgdbts.c | 4 +-
13447 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
13448 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
13449 drivers/misc/mic/scif/scif_rb.c | 8 +-
13450 drivers/misc/sgi-gru/gruhandles.c | 4 +-
13451 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
13452 drivers/misc/sgi-gru/grutables.h | 154 +-
13453 drivers/misc/sgi-xp/xp.h | 2 +-
13454 drivers/misc/sgi-xp/xpc.h | 3 +-
13455 drivers/misc/sgi-xp/xpc_main.c | 2 +-
13456 drivers/mmc/card/block.c | 2 +-
13457 drivers/mmc/host/dw_mmc.h | 2 +-
13458 drivers/mmc/host/mmci.c | 4 +-
13459 drivers/mmc/host/omap_hsmmc.c | 4 +-
13460 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
13461 drivers/mmc/host/sdhci-s3c.c | 8 +-
13462 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
13463 drivers/mtd/nand/denali.c | 1 +
13464 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
13465 drivers/mtd/nftlmount.c | 1 +
13466 drivers/mtd/sm_ftl.c | 2 +-
13467 drivers/net/bonding/bond_netlink.c | 2 +-
13468 drivers/net/caif/caif_hsi.c | 2 +-
13469 drivers/net/can/Kconfig | 2 +-
13470 drivers/net/can/dev.c | 2 +-
13471 drivers/net/can/vcan.c | 2 +-
13472 drivers/net/dummy.c | 2 +-
13473 drivers/net/ethernet/8390/ax88796.c | 4 +-
13474 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
13475 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
13476 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
13477 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
13478 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
13479 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
13480 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
13481 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
13482 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
13483 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
13484 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
13485 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
13486 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
13487 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
13488 drivers/net/ethernet/broadcom/tg3.h | 1 +
13489 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
13490 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
13491 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
13492 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
13493 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
13494 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
13495 drivers/net/ethernet/faraday/ftmac100.c | 2 +
13496 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
13497 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
13498 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
13499 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
13500 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
13501 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
13502 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
13503 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
13504 drivers/net/ethernet/realtek/r8169.c | 8 +-
13505 drivers/net/ethernet/sfc/ptp.c | 2 +-
13506 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
13507 drivers/net/ethernet/via/via-rhine.c | 2 +-
13508 drivers/net/geneve.c | 2 +-
13509 drivers/net/hyperv/hyperv_net.h | 2 +-
13510 drivers/net/hyperv/rndis_filter.c | 4 +-
13511 drivers/net/ifb.c | 2 +-
13512 drivers/net/ipvlan/ipvlan_core.c | 2 +-
13513 drivers/net/macvlan.c | 20 +-
13514 drivers/net/macvtap.c | 6 +-
13515 drivers/net/nlmon.c | 2 +-
13516 drivers/net/phy/phy_device.c | 6 +-
13517 drivers/net/ppp/ppp_generic.c | 4 +-
13518 drivers/net/slip/slhc.c | 2 +-
13519 drivers/net/team/team.c | 4 +-
13520 drivers/net/tun.c | 7 +-
13521 drivers/net/usb/hso.c | 23 +-
13522 drivers/net/usb/r8152.c | 2 +-
13523 drivers/net/usb/sierra_net.c | 4 +-
13524 drivers/net/virtio_net.c | 2 +-
13525 drivers/net/vrf.c | 2 +-
13526 drivers/net/vxlan.c | 4 +-
13527 drivers/net/wimax/i2400m/rx.c | 2 +-
13528 drivers/net/wireless/airo.c | 2 +-
13529 drivers/net/wireless/at76c50x-usb.c | 2 +-
13530 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
13531 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
13532 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
13533 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
13534 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
13535 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
13536 drivers/net/wireless/ath/ath9k/main.c | 22 +-
13537 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
13538 drivers/net/wireless/b43/phy_lp.c | 2 +-
13539 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
13540 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
13541 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
13542 drivers/net/wireless/mac80211_hwsim.c | 28 +-
13543 drivers/net/wireless/rndis_wlan.c | 2 +-
13544 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
13545 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
13546 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
13547 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
13548 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
13549 drivers/nfc/nfcwilink.c | 2 +-
13550 drivers/of/fdt.c | 4 +-
13551 drivers/oprofile/buffer_sync.c | 8 +-
13552 drivers/oprofile/event_buffer.c | 2 +-
13553 drivers/oprofile/oprof.c | 2 +-
13554 drivers/oprofile/oprofile_stats.c | 10 +-
13555 drivers/oprofile/oprofile_stats.h | 10 +-
13556 drivers/oprofile/oprofilefs.c | 6 +-
13557 drivers/oprofile/timer_int.c | 2 +-
13558 drivers/parport/procfs.c | 4 +-
13559 drivers/pci/host/pci-host-generic.c | 24 +-
13560 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
13561 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
13562 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
13563 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
13564 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
13565 drivers/pci/hotplug/pciehp_core.c | 2 +-
13566 drivers/pci/msi.c | 22 +-
13567 drivers/pci/pci-sysfs.c | 6 +-
13568 drivers/pci/pci.h | 2 +-
13569 drivers/pci/pcie/aspm.c | 6 +-
13570 drivers/pci/pcie/portdrv_pci.c | 2 +-
13571 drivers/pci/probe.c | 2 +-
13572 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
13573 drivers/pinctrl/pinctrl-at91.c | 5 +-
13574 drivers/platform/chrome/chromeos_pstore.c | 2 +-
13575 drivers/platform/x86/alienware-wmi.c | 4 +-
13576 drivers/platform/x86/compal-laptop.c | 2 +-
13577 drivers/platform/x86/hdaps.c | 2 +-
13578 drivers/platform/x86/ibm_rtl.c | 2 +-
13579 drivers/platform/x86/intel_oaktrail.c | 2 +-
13580 drivers/platform/x86/msi-laptop.c | 16 +-
13581 drivers/platform/x86/msi-wmi.c | 2 +-
13582 drivers/platform/x86/samsung-laptop.c | 2 +-
13583 drivers/platform/x86/samsung-q10.c | 2 +-
13584 drivers/platform/x86/sony-laptop.c | 14 +-
13585 drivers/platform/x86/thinkpad_acpi.c | 2 +-
13586 drivers/pnp/pnpbios/bioscalls.c | 14 +-
13587 drivers/pnp/pnpbios/core.c | 2 +-
13588 drivers/power/pda_power.c | 7 +-
13589 drivers/power/power_supply.h | 4 +-
13590 drivers/power/power_supply_core.c | 7 +-
13591 drivers/power/power_supply_sysfs.c | 6 +-
13592 drivers/power/reset/at91-reset.c | 9 +-
13593 drivers/powercap/powercap_sys.c | 136 +-
13594 drivers/ptp/ptp_private.h | 2 +-
13595 drivers/ptp/ptp_sysfs.c | 2 +-
13596 drivers/regulator/core.c | 4 +-
13597 drivers/regulator/max8660.c | 6 +-
13598 drivers/regulator/max8973-regulator.c | 16 +-
13599 drivers/regulator/mc13892-regulator.c | 8 +-
13600 drivers/rtc/rtc-armada38x.c | 7 +-
13601 drivers/rtc/rtc-cmos.c | 4 +-
13602 drivers/rtc/rtc-ds1307.c | 2 +-
13603 drivers/rtc/rtc-m48t59.c | 4 +-
13604 drivers/rtc/rtc-test.c | 6 +-
13605 drivers/scsi/be2iscsi/be_main.c | 2 +-
13606 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
13607 drivers/scsi/bfa/bfa_ioc.h | 4 +-
13608 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
13609 drivers/scsi/hosts.c | 4 +-
13610 drivers/scsi/hpsa.c | 38 +-
13611 drivers/scsi/hpsa.h | 2 +-
13612 drivers/scsi/libfc/fc_exch.c | 50 +-
13613 drivers/scsi/libsas/sas_ata.c | 2 +-
13614 drivers/scsi/lpfc/lpfc.h | 8 +-
13615 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
13616 drivers/scsi/lpfc/lpfc_init.c | 6 +-
13617 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
13618 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
13619 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
13620 drivers/scsi/pmcraid.c | 20 +-
13621 drivers/scsi/pmcraid.h | 8 +-
13622 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
13623 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
13624 drivers/scsi/qla2xxx/qla_os.c | 6 +-
13625 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
13626 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
13627 drivers/scsi/scsi.c | 2 +-
13628 drivers/scsi/scsi_lib.c | 8 +-
13629 drivers/scsi/scsi_sysfs.c | 2 +-
13630 drivers/scsi/scsi_transport_fc.c | 8 +-
13631 drivers/scsi/scsi_transport_iscsi.c | 6 +-
13632 drivers/scsi/scsi_transport_srp.c | 6 +-
13633 drivers/scsi/sd.c | 6 +-
13634 drivers/scsi/sg.c | 2 +-
13635 drivers/scsi/sr.c | 21 +-
13636 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
13637 drivers/spi/spi.c | 2 +-
13638 drivers/staging/android/timed_output.c | 6 +-
13639 drivers/staging/comedi/comedi_fops.c | 8 +-
13640 drivers/staging/fbtft/fbtft-core.c | 2 +-
13641 drivers/staging/fbtft/fbtft.h | 2 +-
13642 drivers/staging/gdm724x/gdm_tty.c | 2 +-
13643 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
13644 drivers/staging/iio/adc/ad7280a.c | 4 +-
13645 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
13646 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
13647 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
13648 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
13649 drivers/staging/lustre/lustre/include/obd.h | 2 +-
13650 drivers/staging/octeon/ethernet-rx.c | 20 +-
13651 drivers/staging/octeon/ethernet.c | 8 +-
13652 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
13653 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
13654 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
13655 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
13656 drivers/staging/sm750fb/sm750.c | 14 +-
13657 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
13658 drivers/target/sbp/sbp_target.c | 4 +-
13659 drivers/thermal/cpu_cooling.c | 9 +-
13660 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
13661 drivers/thermal/of-thermal.c | 17 +-
13662 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
13663 drivers/tty/cyclades.c | 6 +-
13664 drivers/tty/hvc/hvc_console.c | 14 +-
13665 drivers/tty/hvc/hvcs.c | 21 +-
13666 drivers/tty/hvc/hvsi.c | 22 +-
13667 drivers/tty/hvc/hvsi_lib.c | 4 +-
13668 drivers/tty/ipwireless/tty.c | 27 +-
13669 drivers/tty/moxa.c | 2 +-
13670 drivers/tty/n_gsm.c | 4 +-
13671 drivers/tty/n_tty.c | 3 +-
13672 drivers/tty/pty.c | 4 +-
13673 drivers/tty/rocket.c | 6 +-
13674 drivers/tty/serial/8250/8250_core.c | 10 +-
13675 drivers/tty/serial/ifx6x60.c | 2 +-
13676 drivers/tty/serial/ioc4_serial.c | 6 +-
13677 drivers/tty/serial/kgdb_nmi.c | 4 +-
13678 drivers/tty/serial/kgdboc.c | 32 +-
13679 drivers/tty/serial/msm_serial.c | 4 +-
13680 drivers/tty/serial/samsung.c | 9 +-
13681 drivers/tty/serial/serial_core.c | 8 +-
13682 drivers/tty/synclink.c | 34 +-
13683 drivers/tty/synclink_gt.c | 28 +-
13684 drivers/tty/synclinkmp.c | 34 +-
13685 drivers/tty/tty_io.c | 2 +-
13686 drivers/tty/tty_ldisc.c | 8 +-
13687 drivers/tty/tty_port.c | 22 +-
13688 drivers/uio/uio.c | 13 +-
13689 drivers/usb/atm/cxacru.c | 2 +-
13690 drivers/usb/atm/usbatm.c | 24 +-
13691 drivers/usb/class/cdc-acm.h | 2 +-
13692 drivers/usb/core/devices.c | 6 +-
13693 drivers/usb/core/devio.c | 12 +-
13694 drivers/usb/core/hcd.c | 4 +-
13695 drivers/usb/core/sysfs.c | 2 +-
13696 drivers/usb/core/usb.c | 2 +-
13697 drivers/usb/early/ehci-dbgp.c | 16 +-
13698 drivers/usb/gadget/function/u_serial.c | 22 +-
13699 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
13700 drivers/usb/host/ehci-hcd.c | 2 +-
13701 drivers/usb/host/ehci-hub.c | 4 +-
13702 drivers/usb/host/ehci-q.c | 4 +-
13703 drivers/usb/host/fotg210-hcd.c | 2 +-
13704 drivers/usb/host/fusbh200-hcd.c | 2 +-
13705 drivers/usb/host/hwa-hc.c | 2 +-
13706 drivers/usb/host/ohci-hcd.c | 2 +-
13707 drivers/usb/host/r8a66597.h | 2 +-
13708 drivers/usb/host/uhci-hcd.c | 2 +-
13709 drivers/usb/host/xhci-pci.c | 2 +-
13710 drivers/usb/host/xhci.c | 2 +-
13711 drivers/usb/misc/appledisplay.c | 4 +-
13712 drivers/usb/serial/console.c | 8 +-
13713 drivers/usb/storage/transport.c | 2 +-
13714 drivers/usb/storage/usb.c | 2 +-
13715 drivers/usb/storage/usb.h | 2 +-
13716 drivers/usb/usbip/vhci.h | 2 +-
13717 drivers/usb/usbip/vhci_hcd.c | 6 +-
13718 drivers/usb/usbip/vhci_rx.c | 2 +-
13719 drivers/usb/wusbcore/wa-hc.h | 4 +-
13720 drivers/usb/wusbcore/wa-xfer.c | 2 +-
13721 drivers/vfio/vfio.c | 2 +-
13722 drivers/vhost/vringh.c | 20 +-
13723 drivers/video/backlight/kb3886_bl.c | 2 +-
13724 drivers/video/console/fbcon.c | 2 +-
13725 drivers/video/fbdev/aty/aty128fb.c | 2 +-
13726 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
13727 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
13728 drivers/video/fbdev/core/fb_defio.c | 6 +-
13729 drivers/video/fbdev/core/fbmem.c | 2 +-
13730 drivers/video/fbdev/hyperv_fb.c | 4 +-
13731 drivers/video/fbdev/i810/i810_accel.c | 1 +
13732 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
13733 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
13734 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
13735 drivers/video/fbdev/omap2/dss/display.c | 8 +-
13736 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
13737 drivers/video/fbdev/smscufx.c | 4 +-
13738 drivers/video/fbdev/udlfb.c | 36 +-
13739 drivers/video/fbdev/uvesafb.c | 52 +-
13740 drivers/video/fbdev/vesafb.c | 58 +-
13741 drivers/video/fbdev/via/via_clock.h | 2 +-
13742 drivers/xen/events/events_base.c | 6 +-
13743 drivers/xen/evtchn.c | 4 +-
13744 fs/Kconfig.binfmt | 2 +-
13745 fs/afs/inode.c | 4 +-
13746 fs/aio.c | 2 +-
13747 fs/autofs4/waitq.c | 2 +-
13748 fs/befs/endian.h | 6 +-
13749 fs/binfmt_aout.c | 23 +-
13750 fs/binfmt_elf.c | 670 +-
13751 fs/binfmt_elf_fdpic.c | 4 +-
13752 fs/block_dev.c | 2 +-
13753 fs/btrfs/ctree.c | 9 +-
13754 fs/btrfs/delayed-inode.c | 9 +-
13755 fs/btrfs/delayed-inode.h | 6 +-
13756 fs/btrfs/file.c | 10 +-
13757 fs/btrfs/inode.c | 14 +-
13758 fs/btrfs/super.c | 2 +-
13759 fs/btrfs/sysfs.c | 2 +-
13760 fs/btrfs/tests/free-space-tests.c | 8 +-
13761 fs/btrfs/tree-log.h | 2 +-
13762 fs/buffer.c | 2 +-
13763 fs/cachefiles/bind.c | 6 +-
13764 fs/cachefiles/daemon.c | 8 +-
13765 fs/cachefiles/internal.h | 12 +-
13766 fs/cachefiles/namei.c | 2 +-
13767 fs/cachefiles/proc.c | 12 +-
13768 fs/ceph/dir.c | 12 +-
13769 fs/ceph/super.c | 4 +-
13770 fs/cifs/cifs_debug.c | 12 +-
13771 fs/cifs/cifsfs.c | 8 +-
13772 fs/cifs/cifsglob.h | 54 +-
13773 fs/cifs/file.c | 10 +-
13774 fs/cifs/misc.c | 4 +-
13775 fs/cifs/smb1ops.c | 80 +-
13776 fs/cifs/smb2ops.c | 84 +-
13777 fs/cifs/smb2pdu.c | 3 +-
13778 fs/coda/cache.c | 10 +-
13779 fs/compat.c | 4 +-
13780 fs/compat_binfmt_elf.c | 2 +
13781 fs/compat_ioctl.c | 12 +-
13782 fs/configfs/dir.c | 10 +-
13783 fs/coredump.c | 16 +-
13784 fs/dcache.c | 51 +-
13785 fs/ecryptfs/inode.c | 2 +-
13786 fs/ecryptfs/miscdev.c | 2 +-
13787 fs/exec.c | 362 +-
13788 fs/ext2/xattr.c | 5 +-
13789 fs/ext4/ext4.h | 20 +-
13790 fs/ext4/mballoc.c | 44 +-
13791 fs/ext4/resize.c | 16 +-
13792 fs/ext4/super.c | 4 +-
13793 fs/ext4/xattr.c | 5 +-
13794 fs/fhandle.c | 3 +-
13795 fs/file.c | 4 +-
13796 fs/fs_struct.c | 8 +-
13797 fs/fscache/cookie.c | 40 +-
13798 fs/fscache/internal.h | 202 +-
13799 fs/fscache/object.c | 26 +-
13800 fs/fscache/operation.c | 38 +-
13801 fs/fscache/page.c | 110 +-
13802 fs/fscache/stats.c | 348 +-
13803 fs/fuse/cuse.c | 10 +-
13804 fs/fuse/dev.c | 4 +-
13805 fs/gfs2/glock.c | 22 +-
13806 fs/gfs2/glops.c | 4 +-
13807 fs/gfs2/quota.c | 6 +-
13808 fs/hugetlbfs/inode.c | 13 +-
13809 fs/inode.c | 4 +-
13810 fs/jffs2/erase.c | 3 +-
13811 fs/jffs2/wbuf.c | 3 +-
13812 fs/jfs/super.c | 2 +-
13813 fs/kernfs/dir.c | 2 +-
13814 fs/kernfs/file.c | 20 +-
13815 fs/libfs.c | 10 +-
13816 fs/lockd/clntproc.c | 4 +-
13817 fs/namei.c | 16 +-
13818 fs/namespace.c | 16 +-
13819 fs/nfs/callback_xdr.c | 2 +-
13820 fs/nfs/inode.c | 6 +-
13821 fs/nfsd/nfs4proc.c | 2 +-
13822 fs/nfsd/nfs4xdr.c | 2 +-
13823 fs/nfsd/nfscache.c | 11 +-
13824 fs/nfsd/vfs.c | 6 +-
13825 fs/nls/nls_base.c | 26 +-
13826 fs/nls/nls_euc-jp.c | 6 +-
13827 fs/nls/nls_koi8-ru.c | 6 +-
13828 fs/notify/fanotify/fanotify_user.c | 4 +-
13829 fs/notify/notification.c | 4 +-
13830 fs/ntfs/dir.c | 2 +-
13831 fs/ntfs/super.c | 6 +-
13832 fs/ocfs2/localalloc.c | 2 +-
13833 fs/ocfs2/ocfs2.h | 10 +-
13834 fs/ocfs2/suballoc.c | 12 +-
13835 fs/ocfs2/super.c | 20 +-
13836 fs/pipe.c | 72 +-
13837 fs/posix_acl.c | 4 +-
13838 fs/proc/array.c | 20 +
13839 fs/proc/base.c | 4 +-
13840 fs/proc/kcore.c | 34 +-
13841 fs/proc/meminfo.c | 2 +-
13842 fs/proc/nommu.c | 2 +-
13843 fs/proc/proc_sysctl.c | 26 +-
13844 fs/proc/task_mmu.c | 39 +-
13845 fs/proc/task_nommu.c | 4 +-
13846 fs/proc/vmcore.c | 16 +-
13847 fs/qnx6/qnx6.h | 4 +-
13848 fs/quota/netlink.c | 4 +-
13849 fs/read_write.c | 2 +-
13850 fs/reiserfs/do_balan.c | 2 +-
13851 fs/reiserfs/procfs.c | 2 +-
13852 fs/reiserfs/reiserfs.h | 4 +-
13853 fs/seq_file.c | 4 +-
13854 fs/splice.c | 43 +-
13855 fs/squashfs/xattr.c | 12 +-
13856 fs/sysv/sysv.h | 2 +-
13857 fs/tracefs/inode.c | 8 +-
13858 fs/udf/misc.c | 2 +-
13859 fs/ufs/swab.h | 4 +-
13860 fs/userfaultfd.c | 2 +-
13861 fs/xattr.c | 21 +
13862 fs/xfs/libxfs/xfs_bmap.c | 2 +-
13863 fs/xfs/xfs_dir2_readdir.c | 7 +-
13864 fs/xfs/xfs_ioctl.c | 2 +-
13865 fs/xfs/xfs_linux.h | 4 +-
13866 include/asm-generic/4level-fixup.h | 2 +
13867 include/asm-generic/atomic-long.h | 156 +-
13868 include/asm-generic/atomic64.h | 12 +
13869 include/asm-generic/bitops/__fls.h | 2 +-
13870 include/asm-generic/bitops/fls.h | 2 +-
13871 include/asm-generic/bitops/fls64.h | 4 +-
13872 include/asm-generic/bug.h | 6 +-
13873 include/asm-generic/cache.h | 4 +-
13874 include/asm-generic/emergency-restart.h | 2 +-
13875 include/asm-generic/kmap_types.h | 4 +-
13876 include/asm-generic/local.h | 13 +
13877 include/asm-generic/pgtable-nopmd.h | 18 +-
13878 include/asm-generic/pgtable-nopud.h | 15 +-
13879 include/asm-generic/pgtable.h | 16 +
13880 include/asm-generic/sections.h | 1 +
13881 include/asm-generic/uaccess.h | 16 +
13882 include/asm-generic/vmlinux.lds.h | 15 +-
13883 include/crypto/algapi.h | 2 +-
13884 include/drm/drmP.h | 16 +-
13885 include/drm/drm_crtc_helper.h | 2 +-
13886 include/drm/drm_mm.h | 2 +-
13887 include/drm/i915_pciids.h | 2 +-
13888 include/drm/intel-gtt.h | 4 +-
13889 include/drm/ttm/ttm_memory.h | 2 +-
13890 include/drm/ttm/ttm_page_alloc.h | 1 +
13891 include/keys/asymmetric-subtype.h | 2 +-
13892 include/linux/atmdev.h | 4 +-
13893 include/linux/atomic.h | 17 +-
13894 include/linux/audit.h | 2 +-
13895 include/linux/average.h | 2 +-
13896 include/linux/binfmts.h | 3 +-
13897 include/linux/bitmap.h | 2 +-
13898 include/linux/bitops.h | 8 +-
13899 include/linux/blkdev.h | 2 +-
13900 include/linux/blktrace_api.h | 2 +-
13901 include/linux/cache.h | 8 +
13902 include/linux/cdrom.h | 1 -
13903 include/linux/cleancache.h | 2 +-
13904 include/linux/clk-provider.h | 1 +
13905 include/linux/compat.h | 6 +-
13906 include/linux/compiler-gcc.h | 28 +-
13907 include/linux/compiler.h | 157 +-
13908 include/linux/configfs.h | 2 +-
13909 include/linux/cpufreq.h | 3 +-
13910 include/linux/cpuidle.h | 5 +-
13911 include/linux/cpumask.h | 14 +-
13912 include/linux/crypto.h | 4 +-
13913 include/linux/ctype.h | 2 +-
13914 include/linux/dcache.h | 4 +-
13915 include/linux/decompress/mm.h | 2 +-
13916 include/linux/devfreq.h | 2 +-
13917 include/linux/device.h | 7 +-
13918 include/linux/dma-mapping.h | 2 +-
13919 include/linux/efi.h | 1 +
13920 include/linux/elf.h | 2 +
13921 include/linux/err.h | 4 +-
13922 include/linux/extcon.h | 2 +-
13923 include/linux/fb.h | 3 +-
13924 include/linux/fdtable.h | 2 +-
13925 include/linux/fs.h | 5 +-
13926 include/linux/fs_struct.h | 2 +-
13927 include/linux/fscache-cache.h | 2 +-
13928 include/linux/fscache.h | 2 +-
13929 include/linux/fsnotify.h | 2 +-
13930 include/linux/genhd.h | 4 +-
13931 include/linux/genl_magic_func.h | 2 +-
13932 include/linux/gfp.h | 12 +-
13933 include/linux/highmem.h | 12 +
13934 include/linux/hwmon-sysfs.h | 6 +-
13935 include/linux/i2c.h | 1 +
13936 include/linux/if_pppox.h | 2 +-
13937 include/linux/init.h | 12 +-
13938 include/linux/init_task.h | 7 +
13939 include/linux/interrupt.h | 6 +-
13940 include/linux/iommu.h | 2 +-
13941 include/linux/ioport.h | 2 +-
13942 include/linux/ipc.h | 2 +-
13943 include/linux/irq.h | 5 +-
13944 include/linux/irqdesc.h | 2 +-
13945 include/linux/irqdomain.h | 3 +
13946 include/linux/jiffies.h | 16 +-
13947 include/linux/key-type.h | 2 +-
13948 include/linux/kgdb.h | 6 +-
13949 include/linux/kmemleak.h | 4 +-
13950 include/linux/kobject.h | 3 +-
13951 include/linux/kobject_ns.h | 2 +-
13952 include/linux/kref.h | 2 +-
13953 include/linux/libata.h | 2 +-
13954 include/linux/linkage.h | 1 +
13955 include/linux/list.h | 15 +
13956 include/linux/lockref.h | 26 +-
13957 include/linux/math64.h | 10 +-
13958 include/linux/mempolicy.h | 7 +
13959 include/linux/mm.h | 102 +-
13960 include/linux/mm_types.h | 20 +
13961 include/linux/mmiotrace.h | 4 +-
13962 include/linux/mmzone.h | 2 +-
13963 include/linux/mod_devicetable.h | 4 +-
13964 include/linux/module.h | 69 +-
13965 include/linux/moduleloader.h | 16 +
13966 include/linux/moduleparam.h | 4 +-
13967 include/linux/net.h | 2 +-
13968 include/linux/netdevice.h | 7 +-
13969 include/linux/netfilter.h | 2 +-
13970 include/linux/netfilter/nfnetlink.h | 2 +-
13971 include/linux/nls.h | 4 +-
13972 include/linux/notifier.h | 3 +-
13973 include/linux/oprofile.h | 4 +-
13974 include/linux/padata.h | 2 +-
13975 include/linux/pci_hotplug.h | 3 +-
13976 include/linux/percpu.h | 2 +-
13977 include/linux/perf_event.h | 12 +-
13978 include/linux/pipe_fs_i.h | 8 +-
13979 include/linux/pm.h | 1 +
13980 include/linux/pm_domain.h | 4 +-
13981 include/linux/pm_runtime.h | 2 +-
13982 include/linux/pnp.h | 2 +-
13983 include/linux/poison.h | 4 +-
13984 include/linux/power/smartreflex.h | 2 +-
13985 include/linux/ppp-comp.h | 2 +-
13986 include/linux/preempt.h | 21 +
13987 include/linux/proc_ns.h | 2 +-
13988 include/linux/psci.h | 2 +-
13989 include/linux/quota.h | 2 +-
13990 include/linux/random.h | 19 +-
13991 include/linux/rculist.h | 16 +
13992 include/linux/reboot.h | 14 +-
13993 include/linux/regset.h | 3 +-
13994 include/linux/relay.h | 2 +-
13995 include/linux/rio.h | 2 +-
13996 include/linux/rmap.h | 4 +-
13997 include/linux/sched.h | 72 +-
13998 include/linux/sched/sysctl.h | 1 +
13999 include/linux/semaphore.h | 2 +-
14000 include/linux/seq_file.h | 1 +
14001 include/linux/signal.h | 2 +-
14002 include/linux/skbuff.h | 12 +-
14003 include/linux/slab.h | 47 +-
14004 include/linux/slab_def.h | 14 +-
14005 include/linux/slub_def.h | 2 +-
14006 include/linux/smp.h | 2 +
14007 include/linux/sock_diag.h | 2 +-
14008 include/linux/sonet.h | 2 +-
14009 include/linux/sunrpc/addr.h | 8 +-
14010 include/linux/sunrpc/clnt.h | 2 +-
14011 include/linux/sunrpc/svc.h | 2 +-
14012 include/linux/sunrpc/svc_rdma.h | 18 +-
14013 include/linux/sunrpc/svcauth.h | 2 +-
14014 include/linux/swapops.h | 10 +-
14015 include/linux/swiotlb.h | 3 +-
14016 include/linux/syscalls.h | 21 +-
14017 include/linux/syscore_ops.h | 2 +-
14018 include/linux/sysctl.h | 3 +-
14019 include/linux/sysfs.h | 9 +-
14020 include/linux/sysrq.h | 3 +-
14021 include/linux/tcp.h | 14 +-
14022 include/linux/thread_info.h | 7 +
14023 include/linux/tty.h | 4 +-
14024 include/linux/tty_driver.h | 2 +-
14025 include/linux/tty_ldisc.h | 2 +-
14026 include/linux/types.h | 16 +
14027 include/linux/uaccess.h | 6 +-
14028 include/linux/uio_driver.h | 2 +-
14029 include/linux/unaligned/access_ok.h | 24 +-
14030 include/linux/usb.h | 12 +-
14031 include/linux/usb/hcd.h | 1 +
14032 include/linux/usb/renesas_usbhs.h | 2 +-
14033 include/linux/vermagic.h | 21 +-
14034 include/linux/vga_switcheroo.h | 8 +-
14035 include/linux/vmalloc.h | 7 +-
14036 include/linux/vmstat.h | 24 +-
14037 include/linux/xattr.h | 5 +-
14038 include/linux/zlib.h | 3 +-
14039 include/media/v4l2-dev.h | 2 +-
14040 include/media/v4l2-device.h | 2 +-
14041 include/net/9p/transport.h | 2 +-
14042 include/net/bluetooth/l2cap.h | 2 +-
14043 include/net/bonding.h | 2 +-
14044 include/net/caif/cfctrl.h | 6 +-
14045 include/net/flow.h | 2 +-
14046 include/net/genetlink.h | 2 +-
14047 include/net/gro_cells.h | 2 +-
14048 include/net/inet_connection_sock.h | 2 +-
14049 include/net/inet_sock.h | 2 +-
14050 include/net/inetpeer.h | 2 +-
14051 include/net/ip_fib.h | 2 +-
14052 include/net/ip_vs.h | 8 +-
14053 include/net/ipv6.h | 2 +-
14054 include/net/irda/ircomm_tty.h | 1 +
14055 include/net/iucv/af_iucv.h | 2 +-
14056 include/net/llc_c_ac.h | 2 +-
14057 include/net/llc_c_ev.h | 4 +-
14058 include/net/llc_c_st.h | 2 +-
14059 include/net/llc_s_ac.h | 2 +-
14060 include/net/llc_s_st.h | 2 +-
14061 include/net/mac80211.h | 4 +-
14062 include/net/neighbour.h | 2 +-
14063 include/net/net_namespace.h | 18 +-
14064 include/net/netlink.h | 2 +-
14065 include/net/netns/conntrack.h | 6 +-
14066 include/net/netns/ipv4.h | 4 +-
14067 include/net/netns/ipv6.h | 4 +-
14068 include/net/netns/xfrm.h | 2 +-
14069 include/net/ping.h | 2 +-
14070 include/net/protocol.h | 4 +-
14071 include/net/rtnetlink.h | 2 +-
14072 include/net/sctp/checksum.h | 4 +-
14073 include/net/sctp/sm.h | 4 +-
14074 include/net/sctp/structs.h | 2 +-
14075 include/net/sock.h | 12 +-
14076 include/net/tcp.h | 8 +-
14077 include/net/xfrm.h | 13 +-
14078 include/rdma/iw_cm.h | 2 +-
14079 include/scsi/libfc.h | 3 +-
14080 include/scsi/scsi_device.h | 6 +-
14081 include/scsi/scsi_driver.h | 2 +-
14082 include/scsi/scsi_transport_fc.h | 3 +-
14083 include/scsi/sg.h | 2 +-
14084 include/sound/compress_driver.h | 2 +-
14085 include/sound/soc.h | 4 +-
14086 include/trace/events/irq.h | 4 +-
14087 include/uapi/linux/a.out.h | 8 +
14088 include/uapi/linux/bcache.h | 5 +-
14089 include/uapi/linux/byteorder/little_endian.h | 28 +-
14090 include/uapi/linux/connector.h | 2 +-
14091 include/uapi/linux/elf.h | 28 +
14092 include/uapi/linux/screen_info.h | 3 +-
14093 include/uapi/linux/swab.h | 6 +-
14094 include/uapi/linux/xattr.h | 4 +
14095 include/video/udlfb.h | 8 +-
14096 include/video/uvesafb.h | 1 +
14097 init/Kconfig | 2 +-
14098 init/Makefile | 3 +
14099 init/do_mounts.c | 14 +-
14100 init/do_mounts.h | 8 +-
14101 init/do_mounts_initrd.c | 30 +-
14102 init/do_mounts_md.c | 6 +-
14103 init/init_task.c | 4 +
14104 init/initramfs.c | 38 +-
14105 init/main.c | 30 +-
14106 ipc/compat.c | 4 +-
14107 ipc/ipc_sysctl.c | 8 +-
14108 ipc/mq_sysctl.c | 4 +-
14109 ipc/sem.c | 4 +-
14110 ipc/shm.c | 6 +
14111 kernel/audit.c | 8 +-
14112 kernel/auditsc.c | 4 +-
14113 kernel/bpf/core.c | 7 +-
14114 kernel/capability.c | 3 +
14115 kernel/compat.c | 38 +-
14116 kernel/debug/debug_core.c | 16 +-
14117 kernel/debug/kdb/kdb_main.c | 4 +-
14118 kernel/events/core.c | 26 +-
14119 kernel/events/internal.h | 10 +-
14120 kernel/events/uprobes.c | 2 +-
14121 kernel/exit.c | 2 +-
14122 kernel/fork.c | 167 +-
14123 kernel/futex.c | 11 +-
14124 kernel/futex_compat.c | 2 +-
14125 kernel/gcov/base.c | 7 +-
14126 kernel/irq/manage.c | 2 +-
14127 kernel/irq/msi.c | 19 +-
14128 kernel/irq/spurious.c | 2 +-
14129 kernel/jump_label.c | 5 +
14130 kernel/kallsyms.c | 37 +-
14131 kernel/kexec.c | 3 +-
14132 kernel/kmod.c | 8 +-
14133 kernel/kprobes.c | 4 +-
14134 kernel/ksysfs.c | 2 +-
14135 kernel/locking/lockdep.c | 7 +-
14136 kernel/locking/mutex-debug.c | 12 +-
14137 kernel/locking/mutex-debug.h | 4 +-
14138 kernel/locking/mutex.c | 6 +-
14139 kernel/module.c | 422 +-
14140 kernel/notifier.c | 17 +-
14141 kernel/padata.c | 4 +-
14142 kernel/panic.c | 5 +-
14143 kernel/pid.c | 2 +-
14144 kernel/pid_namespace.c | 2 +-
14145 kernel/power/process.c | 12 +-
14146 kernel/profile.c | 14 +-
14147 kernel/ptrace.c | 8 +-
14148 kernel/rcu/rcutorture.c | 60 +-
14149 kernel/rcu/tiny.c | 4 +-
14150 kernel/rcu/tree.c | 44 +-
14151 kernel/rcu/tree.h | 14 +-
14152 kernel/rcu/tree_plugin.h | 14 +-
14153 kernel/rcu/tree_trace.c | 12 +-
14154 kernel/sched/auto_group.c | 4 +-
14155 kernel/sched/core.c | 45 +-
14156 kernel/sched/fair.c | 2 +-
14157 kernel/sched/sched.h | 2 +-
14158 kernel/signal.c | 12 +-
14159 kernel/smpboot.c | 4 +-
14160 kernel/softirq.c | 12 +-
14161 kernel/sys.c | 10 +-
14162 kernel/sysctl.c | 34 +-
14163 kernel/time/alarmtimer.c | 2 +-
14164 kernel/time/posix-cpu-timers.c | 4 +-
14165 kernel/time/posix-timers.c | 24 +-
14166 kernel/time/timer.c | 2 +-
14167 kernel/time/timer_stats.c | 10 +-
14168 kernel/trace/blktrace.c | 6 +-
14169 kernel/trace/ftrace.c | 15 +-
14170 kernel/trace/ring_buffer.c | 96 +-
14171 kernel/trace/trace.c | 2 +-
14172 kernel/trace/trace.h | 2 +-
14173 kernel/trace/trace_clock.c | 4 +-
14174 kernel/trace/trace_events.c | 1 -
14175 kernel/trace/trace_functions_graph.c | 4 +-
14176 kernel/trace/trace_mmiotrace.c | 8 +-
14177 kernel/trace/trace_output.c | 10 +-
14178 kernel/trace/trace_seq.c | 2 +-
14179 kernel/trace/trace_stack.c | 2 +-
14180 kernel/user_namespace.c | 2 +-
14181 kernel/utsname_sysctl.c | 2 +-
14182 kernel/watchdog.c | 2 +-
14183 kernel/workqueue.c | 2 +-
14184 lib/Kconfig.debug | 8 +-
14185 lib/Makefile | 2 +-
14186 lib/bitmap.c | 8 +-
14187 lib/bug.c | 2 +
14188 lib/debugobjects.c | 2 +-
14189 lib/decompress_bunzip2.c | 3 +-
14190 lib/decompress_unlzma.c | 4 +-
14191 lib/div64.c | 4 +-
14192 lib/dma-debug.c | 4 +-
14193 lib/inflate.c | 2 +-
14194 lib/ioremap.c | 4 +-
14195 lib/kobject.c | 4 +-
14196 lib/list_debug.c | 126 +-
14197 lib/lockref.c | 44 +-
14198 lib/percpu-refcount.c | 2 +-
14199 lib/radix-tree.c | 2 +-
14200 lib/random32.c | 2 +-
14201 lib/show_mem.c | 2 +-
14202 lib/strncpy_from_user.c | 2 +-
14203 lib/strnlen_user.c | 2 +-
14204 lib/swiotlb.c | 2 +-
14205 lib/usercopy.c | 6 +
14206 lib/vsprintf.c | 12 +-
14207 mm/Kconfig | 6 +-
14208 mm/backing-dev.c | 4 +-
14209 mm/debug.c | 3 +
14210 mm/filemap.c | 2 +-
14211 mm/gup.c | 13 +-
14212 mm/highmem.c | 6 +-
14213 mm/hugetlb.c | 70 +-
14214 mm/internal.h | 1 +
14215 mm/maccess.c | 4 +-
14216 mm/madvise.c | 37 +
14217 mm/memory-failure.c | 6 +-
14218 mm/memory.c | 424 +-
14219 mm/mempolicy.c | 25 +
14220 mm/mlock.c | 15 +-
14221 mm/mm_init.c | 2 +-
14222 mm/mmap.c | 582 +-
14223 mm/mprotect.c | 137 +-
14224 mm/mremap.c | 39 +-
14225 mm/nommu.c | 21 +-
14226 mm/page-writeback.c | 2 +-
14227 mm/page_alloc.c | 49 +-
14228 mm/percpu.c | 2 +-
14229 mm/process_vm_access.c | 14 +-
14230 mm/rmap.c | 45 +-
14231 mm/shmem.c | 19 +-
14232 mm/slab.c | 109 +-
14233 mm/slab.h | 22 +-
14234 mm/slab_common.c | 86 +-
14235 mm/slob.c | 218 +-
14236 mm/slub.c | 102 +-
14237 mm/sparse-vmemmap.c | 4 +-
14238 mm/sparse.c | 2 +-
14239 mm/swap.c | 2 +
14240 mm/swapfile.c | 12 +-
14241 mm/util.c | 6 +
14242 mm/vmalloc.c | 114 +-
14243 mm/vmstat.c | 12 +-
14244 net/8021q/vlan.c | 5 +-
14245 net/8021q/vlan_netlink.c | 2 +-
14246 net/9p/mod.c | 4 +-
14247 net/9p/trans_fd.c | 2 +-
14248 net/atm/atm_misc.c | 8 +-
14249 net/atm/lec.h | 2 +-
14250 net/atm/proc.c | 6 +-
14251 net/atm/resources.c | 4 +-
14252 net/ax25/sysctl_net_ax25.c | 2 +-
14253 net/batman-adv/bat_iv_ogm.c | 8 +-
14254 net/batman-adv/fragmentation.c | 2 +-
14255 net/batman-adv/soft-interface.c | 8 +-
14256 net/batman-adv/types.h | 6 +-
14257 net/bluetooth/hci_sock.c | 2 +-
14258 net/bluetooth/l2cap_core.c | 6 +-
14259 net/bluetooth/l2cap_sock.c | 12 +-
14260 net/bluetooth/rfcomm/sock.c | 4 +-
14261 net/bluetooth/rfcomm/tty.c | 4 +-
14262 net/bridge/br_netlink.c | 2 +-
14263 net/bridge/netfilter/ebtables.c | 6 +-
14264 net/caif/cfctrl.c | 11 +-
14265 net/caif/chnl_net.c | 2 +-
14266 net/can/af_can.c | 2 +-
14267 net/can/gw.c | 6 +-
14268 net/ceph/messenger.c | 4 +-
14269 net/compat.c | 24 +-
14270 net/core/datagram.c | 2 +-
14271 net/core/dev.c | 16 +-
14272 net/core/filter.c | 2 +-
14273 net/core/flow.c | 6 +-
14274 net/core/neighbour.c | 4 +-
14275 net/core/net-sysfs.c | 2 +-
14276 net/core/net_namespace.c | 8 +-
14277 net/core/netpoll.c | 4 +-
14278 net/core/rtnetlink.c | 15 +-
14279 net/core/scm.c | 14 +-
14280 net/core/skbuff.c | 8 +-
14281 net/core/sock.c | 28 +-
14282 net/core/sock_diag.c | 15 +-
14283 net/core/sysctl_net_core.c | 22 +-
14284 net/decnet/af_decnet.c | 1 +
14285 net/decnet/sysctl_net_decnet.c | 4 +-
14286 net/dsa/dsa.c | 2 +-
14287 net/hsr/hsr_netlink.c | 2 +-
14288 net/ieee802154/6lowpan/core.c | 2 +-
14289 net/ieee802154/6lowpan/reassembly.c | 14 +-
14290 net/ipv4/af_inet.c | 2 +-
14291 net/ipv4/devinet.c | 18 +-
14292 net/ipv4/fib_frontend.c | 6 +-
14293 net/ipv4/fib_semantics.c | 2 +-
14294 net/ipv4/inet_connection_sock.c | 4 +-
14295 net/ipv4/inet_timewait_sock.c | 2 +-
14296 net/ipv4/inetpeer.c | 2 +-
14297 net/ipv4/ip_fragment.c | 15 +-
14298 net/ipv4/ip_gre.c | 6 +-
14299 net/ipv4/ip_sockglue.c | 2 +-
14300 net/ipv4/ip_vti.c | 4 +-
14301 net/ipv4/ipconfig.c | 6 +-
14302 net/ipv4/ipip.c | 4 +-
14303 net/ipv4/netfilter/arp_tables.c | 12 +-
14304 net/ipv4/netfilter/ip_tables.c | 12 +-
14305 net/ipv4/ping.c | 14 +-
14306 net/ipv4/raw.c | 14 +-
14307 net/ipv4/route.c | 32 +-
14308 net/ipv4/sysctl_net_ipv4.c | 22 +-
14309 net/ipv4/tcp_input.c | 6 +-
14310 net/ipv4/tcp_probe.c | 2 +-
14311 net/ipv4/udp.c | 10 +-
14312 net/ipv4/xfrm4_policy.c | 18 +-
14313 net/ipv6/addrconf.c | 18 +-
14314 net/ipv6/af_inet6.c | 2 +-
14315 net/ipv6/datagram.c | 2 +-
14316 net/ipv6/icmp.c | 2 +-
14317 net/ipv6/ip6_fib.c | 4 +-
14318 net/ipv6/ip6_gre.c | 10 +-
14319 net/ipv6/ip6_tunnel.c | 4 +-
14320 net/ipv6/ip6_vti.c | 4 +-
14321 net/ipv6/ipv6_sockglue.c | 2 +-
14322 net/ipv6/netfilter/ip6_tables.c | 12 +-
14323 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
14324 net/ipv6/ping.c | 33 +-
14325 net/ipv6/raw.c | 17 +-
14326 net/ipv6/reassembly.c | 13 +-
14327 net/ipv6/route.c | 2 +-
14328 net/ipv6/sit.c | 4 +-
14329 net/ipv6/sysctl_net_ipv6.c | 2 +-
14330 net/ipv6/udp.c | 6 +-
14331 net/ipv6/xfrm6_policy.c | 17 +-
14332 net/irda/ircomm/ircomm_tty.c | 18 +-
14333 net/iucv/af_iucv.c | 4 +-
14334 net/iucv/iucv.c | 2 +-
14335 net/key/af_key.c | 4 +-
14336 net/l2tp/l2tp_eth.c | 38 +-
14337 net/l2tp/l2tp_ip.c | 2 +-
14338 net/l2tp/l2tp_ip6.c | 2 +-
14339 net/mac80211/cfg.c | 8 +-
14340 net/mac80211/ieee80211_i.h | 3 +-
14341 net/mac80211/iface.c | 20 +-
14342 net/mac80211/main.c | 2 +-
14343 net/mac80211/pm.c | 4 +-
14344 net/mac80211/rate.c | 2 +-
14345 net/mac80211/sta_info.c | 2 +-
14346 net/mac80211/util.c | 8 +-
14347 net/mpls/af_mpls.c | 6 +-
14348 net/netfilter/ipset/ip_set_core.c | 2 +-
14349 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
14350 net/netfilter/ipvs/ip_vs_core.c | 4 +-
14351 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
14352 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
14353 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
14354 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
14355 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
14356 net/netfilter/nf_conntrack_acct.c | 2 +-
14357 net/netfilter/nf_conntrack_ecache.c | 2 +-
14358 net/netfilter/nf_conntrack_helper.c | 2 +-
14359 net/netfilter/nf_conntrack_proto.c | 2 +-
14360 net/netfilter/nf_conntrack_standalone.c | 2 +-
14361 net/netfilter/nf_conntrack_timestamp.c | 2 +-
14362 net/netfilter/nf_log.c | 10 +-
14363 net/netfilter/nf_sockopt.c | 4 +-
14364 net/netfilter/nfnetlink_log.c | 4 +-
14365 net/netfilter/nft_compat.c | 9 +-
14366 net/netfilter/xt_statistic.c | 8 +-
14367 net/netlink/af_netlink.c | 4 +-
14368 net/openvswitch/vport-internal_dev.c | 2 +-
14369 net/packet/af_packet.c | 8 +-
14370 net/phonet/pep.c | 6 +-
14371 net/phonet/socket.c | 2 +-
14372 net/phonet/sysctl.c | 2 +-
14373 net/rds/cong.c | 6 +-
14374 net/rds/ib.h | 2 +-
14375 net/rds/ib_cm.c | 2 +-
14376 net/rds/ib_recv.c | 4 +-
14377 net/rds/iw.h | 2 +-
14378 net/rds/iw_cm.c | 2 +-
14379 net/rds/iw_recv.c | 4 +-
14380 net/rds/rds.h | 2 +-
14381 net/rds/tcp.c | 2 +-
14382 net/rds/tcp_send.c | 2 +-
14383 net/rxrpc/af_rxrpc.c | 2 +-
14384 net/rxrpc/ar-ack.c | 14 +-
14385 net/rxrpc/ar-call.c | 2 +-
14386 net/rxrpc/ar-connection.c | 2 +-
14387 net/rxrpc/ar-connevent.c | 2 +-
14388 net/rxrpc/ar-input.c | 4 +-
14389 net/rxrpc/ar-internal.h | 8 +-
14390 net/rxrpc/ar-local.c | 2 +-
14391 net/rxrpc/ar-output.c | 4 +-
14392 net/rxrpc/ar-peer.c | 2 +-
14393 net/rxrpc/ar-proc.c | 4 +-
14394 net/rxrpc/ar-transport.c | 2 +-
14395 net/rxrpc/rxkad.c | 4 +-
14396 net/sched/sch_generic.c | 4 +-
14397 net/sctp/ipv6.c | 6 +-
14398 net/sctp/protocol.c | 10 +-
14399 net/sctp/sm_sideeffect.c | 2 +-
14400 net/sctp/socket.c | 21 +-
14401 net/sctp/sysctl.c | 10 +-
14402 net/socket.c | 18 +-
14403 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
14404 net/sunrpc/clnt.c | 4 +-
14405 net/sunrpc/sched.c | 4 +-
14406 net/sunrpc/svc.c | 4 +-
14407 net/sunrpc/svcauth_unix.c | 2 +-
14408 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
14409 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
14410 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
14411 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
14412 net/tipc/netlink_compat.c | 12 +-
14413 net/tipc/subscr.c | 2 +-
14414 net/unix/af_unix.c | 7 +-
14415 net/unix/sysctl_net_unix.c | 2 +-
14416 net/wireless/wext-core.c | 19 +-
14417 net/xfrm/xfrm_policy.c | 16 +-
14418 net/xfrm/xfrm_state.c | 33 +-
14419 net/xfrm/xfrm_sysctl.c | 2 +-
14420 scripts/Kbuild.include | 2 +-
14421 scripts/Makefile.build | 2 +-
14422 scripts/Makefile.clean | 3 +-
14423 scripts/Makefile.host | 69 +-
14424 scripts/basic/fixdep.c | 12 +-
14425 scripts/dtc/checks.c | 14 +-
14426 scripts/dtc/data.c | 6 +-
14427 scripts/dtc/flattree.c | 8 +-
14428 scripts/dtc/livetree.c | 4 +-
14429 scripts/gcc-plugin.sh | 51 +
14430 scripts/headers_install.sh | 1 +
14431 scripts/kallsyms.c | 4 +-
14432 scripts/kconfig/lkc.h | 5 +-
14433 scripts/kconfig/menu.c | 2 +-
14434 scripts/kconfig/symbol.c | 6 +-
14435 scripts/link-vmlinux.sh | 2 +-
14436 scripts/mod/file2alias.c | 14 +-
14437 scripts/mod/modpost.c | 25 +-
14438 scripts/mod/modpost.h | 6 +-
14439 scripts/mod/sumversion.c | 2 +-
14440 scripts/module-common.lds | 4 +
14441 scripts/package/builddeb | 1 +
14442 scripts/pnmtologo.c | 6 +-
14443 scripts/sortextable.h | 6 +-
14444 scripts/tags.sh | 2 +-
14445 security/Kconfig | 692 +-
14446 security/integrity/ima/ima.h | 4 +-
14447 security/integrity/ima/ima_api.c | 2 +-
14448 security/integrity/ima/ima_fs.c | 4 +-
14449 security/integrity/ima/ima_queue.c | 2 +-
14450 security/keys/key.c | 18 +-
14451 security/selinux/avc.c | 6 +-
14452 security/selinux/include/xfrm.h | 2 +-
14453 security/yama/yama_lsm.c | 2 +-
14454 sound/aoa/codecs/onyx.c | 7 +-
14455 sound/aoa/codecs/onyx.h | 1 +
14456 sound/core/oss/pcm_oss.c | 18 +-
14457 sound/core/pcm_compat.c | 2 +-
14458 sound/core/pcm_native.c | 4 +-
14459 sound/core/sound.c | 2 +-
14460 sound/drivers/mts64.c | 14 +-
14461 sound/drivers/opl4/opl4_lib.c | 2 +-
14462 sound/drivers/portman2x4.c | 3 +-
14463 sound/firewire/amdtp.c | 4 +-
14464 sound/firewire/amdtp.h | 4 +-
14465 sound/firewire/isight.c | 10 +-
14466 sound/firewire/scs1x.c | 8 +-
14467 sound/oss/sb_audio.c | 2 +-
14468 sound/oss/swarm_cs4297a.c | 6 +-
14469 sound/pci/hda/hda_codec.c | 2 +-
14470 sound/pci/ymfpci/ymfpci.h | 2 +-
14471 sound/pci/ymfpci/ymfpci_main.c | 12 +-
14472 sound/soc/codecs/sti-sas.c | 10 +-
14473 sound/soc/soc-ac97.c | 6 +-
14474 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
14475 tools/gcc/Makefile | 42 +
14476 tools/gcc/checker_plugin.c | 150 +
14477 tools/gcc/colorize_plugin.c | 215 +
14478 tools/gcc/constify_plugin.c | 571 +
14479 tools/gcc/gcc-common.h | 812 +
14480 tools/gcc/initify_plugin.c | 552 +
14481 tools/gcc/kallocstat_plugin.c | 188 +
14482 tools/gcc/kernexec_plugin.c | 549 +
14483 tools/gcc/latent_entropy_plugin.c | 470 +
14484 tools/gcc/size_overflow_plugin/.gitignore | 2 +
14485 tools/gcc/size_overflow_plugin/Makefile | 28 +
14486 .../disable_size_overflow_hash.data |12422 ++++++++++++
14487 .../generate_size_overflow_hash.sh | 103 +
14488 .../insert_size_overflow_asm.c | 416 +
14489 .../size_overflow_plugin/intentional_overflow.c | 1010 +
14490 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
14491 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
14492 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
14493 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
14494 .../size_overflow_hash_aux.data | 92 +
14495 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
14496 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
14497 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
14498 .../size_overflow_plugin_hash.c | 352 +
14499 .../size_overflow_plugin/size_overflow_transform.c | 749 +
14500 .../size_overflow_transform_core.c | 1010 +
14501 tools/gcc/stackleak_plugin.c | 436 +
14502 tools/gcc/structleak_plugin.c | 287 +
14503 tools/include/linux/compiler.h | 8 +
14504 tools/lib/api/Makefile | 2 +-
14505 tools/perf/util/include/asm/alternative-asm.h | 3 +
14506 tools/virtio/linux/uaccess.h | 2 +-
14507 virt/kvm/kvm_main.c | 42 +-
14508 1944 files changed, 66925 insertions(+), 8949 deletions(-)
14509 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
14510 Author: Matthew Wilcox <willy@linux.intel.com>
14511 Date: Tue Feb 2 16:57:52 2016 -0800
14512
14513 radix-tree: fix race in gang lookup
14514
14515 If the indirect_ptr bit is set on a slot, that indicates we need to redo
14516 the lookup. Introduce a new function radix_tree_iter_retry() which
14517 forces the loop to retry the lookup by setting 'slot' to NULL and
14518 turning the iterator back to point at the problematic entry.
14519
14520 This is a pretty rare problem to hit at the moment; the lookup has to
14521 race with a grow of the radix tree from a height of 0. The consequences
14522 of hitting this race are that gang lookup could return a pointer to a
14523 radix_tree_node instead of a pointer to whatever the user had inserted
14524 in the tree.
14525
14526 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
14527 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
14528 Cc: Hugh Dickins <hughd@google.com>
14529 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14530 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
14531 Cc: <stable@vger.kernel.org>
14532 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14533 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14534
14535 include/linux/radix-tree.h | 16 ++++++++++++++++
14536 lib/radix-tree.c | 12 ++++++++++--
14537 2 files changed, 26 insertions(+), 2 deletions(-)
14538
14539 commit bf628043b4589c910919a0f221ae7f42aa8cea93
14540 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14541 Date: Wed Feb 3 02:11:03 2016 +0100
14542
14543 unix: correctly track in-flight fds in sending process user_struct
14544
14545 The commit referenced in the Fixes tag incorrectly accounted the number
14546 of in-flight fds over a unix domain socket to the original opener
14547 of the file-descriptor. This allows another process to arbitrary
14548 deplete the original file-openers resource limit for the maximum of
14549 open files. Instead the sending processes and its struct cred should
14550 be credited.
14551
14552 To do so, we add a reference counted struct user_struct pointer to the
14553 scm_fp_list and use it to account for the number of inflight unix fds.
14554
14555 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
14556 Reported-by: David Herrmann <dh.herrmann@gmail.com>
14557 Cc: David Herrmann <dh.herrmann@gmail.com>
14558 Cc: Willy Tarreau <w@1wt.eu>
14559 Cc: Linus Torvalds <torvalds@linux-foundation.org>
14560 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14561 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14562 Signed-off-by: David S. Miller <davem@davemloft.net>
14563
14564 include/net/af_unix.h | 4 ++--
14565 include/net/scm.h | 1 +
14566 net/core/scm.c | 7 +++++++
14567 net/unix/af_unix.c | 4 ++--
14568 net/unix/garbage.c | 8 ++++----
14569 5 files changed, 16 insertions(+), 8 deletions(-)
14570
14571 commit e830db443ff78d70b7b63536e688d73907face0c
14572 Author: Mike Kravetz <mike.kravetz@oracle.com>
14573 Date: Fri Jan 15 16:57:37 2016 -0800
14574
14575 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
14576
14577 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
14578 argument end is of type pgoff_t. It was being converted to a vaddr
14579 offset and passed to unmap_hugepage_range. However, end was also being
14580 used as an argument to the vma_interval_tree_foreach controlling loop.
14581 In addition, the conversion of end to vaddr offset was incorrect.
14582
14583 hugetlb_vmtruncate_list is called as part of a file truncate or
14584 fallocate hole punch operation.
14585
14586 When truncating a hugetlbfs file, this bug could prevent some pages from
14587 being unmapped. This is possible if there are multiple vmas mapping the
14588 file, and there is a sufficiently sized hole between the mappings. The
14589 size of the hole between two vmas (A,B) must be such that the starting
14590 virtual address of B is greater than (ending virtual address of A <<
14591 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
14592 pages are not properly unmapped during truncate, the following BUG is
14593 hit:
14594
14595 kernel BUG at fs/hugetlbfs/inode.c:428!
14596
14597 In the fallocate hole punch case, this bug could prevent pages from
14598 being unmapped as in the truncate case. However, for hole punch the
14599 result is that unmapped pages will not be removed during the operation.
14600 For hole punch, it is also possible that more pages than desired will be
14601 unmapped. This unnecessary unmapping will cause page faults to
14602 reestablish the mappings on subsequent page access.
14603
14604 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
14605 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
14606 Cc: Hugh Dickins <hughd@google.com>
14607 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
14608 Cc: Davidlohr Bueso <dave@stgolabs.net>
14609 Cc: Dave Hansen <dave.hansen@linux.intel.com>
14610 Cc: <stable@vger.kernel.org> [4.3]
14611 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14612 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14613
14614 fs/hugetlbfs/inode.c | 19 +++++++++++--------
14615 1 files changed, 11 insertions(+), 8 deletions(-)
14616
14617 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
14618 Author: Takashi Iwai <tiwai@suse.de>
14619 Date: Thu Feb 4 17:06:13 2016 +0100
14620
14621 ALSA: timer: Fix leftover link at closing
14622
14623 In ALSA timer core, the active timer instance is managed in
14624 active_list linked list. Each element is added / removed dynamically
14625 at timer start, stop and in timer interrupt. The problem is that
14626 snd_timer_interrupt() has a thinko and leaves the element in
14627 active_list when it's the last opened element. This eventually leads
14628 to list corruption or use-after-free error.
14629
14630 This hasn't been revealed because we used to delete the list forcibly
14631 in snd_timer_stop() in the past. However, the recent fix avoids the
14632 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
14633 corruption due to double start or stop]), and this leak hits reality.
14634
14635 This patch fixes the link management in snd_timer_interrupt(). Now it
14636 simply unlinks no matter which stream is.
14637
14638 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
14639 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14640 Cc: <stable@vger.kernel.org>
14641 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14642
14643 sound/core/timer.c | 4 ++--
14644 1 files changed, 2 insertions(+), 2 deletions(-)
14645
14646 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
14647 Author: Konstantin Khlebnikov <koct9i@gmail.com>
14648 Date: Fri Feb 5 15:37:01 2016 -0800
14649
14650 radix-tree: fix oops after radix_tree_iter_retry
14651
14652 Helper radix_tree_iter_retry() resets next_index to the current index.
14653 In following radix_tree_next_slot current chunk size becomes zero. This
14654 isn't checked and it tries to dereference null pointer in slot.
14655
14656 Tagged iterator is fine because retry happens only at slot 0 where tag
14657 bitmask in iter->tags is filled with single bit.
14658
14659 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
14660 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
14661 Cc: Matthew Wilcox <willy@linux.intel.com>
14662 Cc: Hugh Dickins <hughd@google.com>
14663 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14664 Cc: Jeremiah Mahler <jmmahler@gmail.com>
14665 Cc: <stable@vger.kernel.org>
14666 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14667 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14668
14669 include/linux/radix-tree.h | 6 +++---
14670 1 files changed, 3 insertions(+), 3 deletions(-)
14671
14672 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
14673 Merge: 438be0b 256aeaf
14674 Author: Brad Spengler <spender@grsecurity.net>
14675 Date: Sun Feb 7 08:29:33 2016 -0500
14676
14677 Merge branch 'pax-test' into grsec-test
14678
14679 commit 256aeaf87c22de8edf1f03682a572c590ae07771
14680 Author: Brad Spengler <spender@grsecurity.net>
14681 Date: Sun Feb 7 08:29:09 2016 -0500
14682
14683 Update to pax-linux-4.3.5-test28.patch:
14684 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
14685 - spender fixed UDEREF on arm
14686
14687 arch/arm/Kconfig | 1 +
14688 arch/arm/include/asm/domain.h | 21 ++++++++-
14689 arch/arm/include/asm/futex.h | 9 ----
14690 arch/arm/include/asm/thread_info.h | 3 +
14691 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14692 arch/arm/kernel/entry-armv.S | 2 +-
14693 arch/arm/kernel/process.c | 2 +-
14694 arch/arm/mm/alignment.c | 8 ----
14695 arch/x86/mm/numa.c | 2 +-
14696 security/Kconfig | 1 -
14697 10 files changed, 60 insertions(+), 70 deletions(-)
14698
14699 commit 438be0bd112bd17942b2628c53054dc1007558a1
14700 Author: Brad Spengler <spender@grsecurity.net>
14701 Date: Sat Feb 6 19:50:31 2016 -0500
14702
14703 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
14704 ARM systems reported on the forums
14705
14706 arch/arm/Kconfig | 1 +
14707 arch/arm/include/asm/domain.h | 21 ++++++++-
14708 arch/arm/include/asm/futex.h | 9 ----
14709 arch/arm/include/asm/thread_info.h | 3 +
14710 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14711 arch/arm/kernel/entry-armv.S | 2 +-
14712 arch/arm/kernel/process.c | 2 +-
14713 arch/arm/mm/alignment.c | 8 ----
14714 security/Kconfig | 1 -
14715 9 files changed, 59 insertions(+), 69 deletions(-)
14716
14717 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
14718 Author: Brad Spengler <spender@grsecurity.net>
14719 Date: Sat Feb 6 11:21:53 2016 -0500
14720
14721 Fix another compiler warning
14722
14723 net/ipv4/tcp_input.c | 2 ++
14724 1 files changed, 2 insertions(+), 0 deletions(-)
14725
14726 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
14727 Author: Brad Spengler <spender@grsecurity.net>
14728 Date: Sat Feb 6 11:16:12 2016 -0500
14729
14730 Fix two compiler warnings
14731
14732 kernel/pid.c | 5 ++---
14733 kernel/ptrace.c | 3 ++-
14734 2 files changed, 4 insertions(+), 4 deletions(-)
14735
14736 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
14737 Author: Brad Spengler <spender@grsecurity.net>
14738 Date: Wed Feb 3 21:22:40 2016 -0500
14739
14740 Apply fix for integer truncation in NUMA init code, reported by
14741 x14sg1 on the forums:
14742 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
14743
14744 arch/x86/mm/numa.c | 2 +-
14745 1 files changed, 1 insertions(+), 1 deletions(-)
14746
14747 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
14748 Merge: a781740 016d0d8
14749 Author: Brad Spengler <spender@grsecurity.net>
14750 Date: Wed Feb 3 21:20:58 2016 -0500
14751
14752 Merge branch 'pax-test' into grsec-test
14753
14754 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
14755 Author: Brad Spengler <spender@grsecurity.net>
14756 Date: Wed Feb 3 21:20:10 2016 -0500
14757
14758 Update to pax-linux-4.3.5-test27.patch:
14759 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
14760 - restored padding in fpregs_state for storing AVX-512 state in the future
14761 - constified netlink_dump_control
14762 - added const version of debug_gimple_stmt for gcc plugins, by Emese
14763 - Emese fixed a bug in initify that could have initified too much
14764 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
14765
14766 arch/x86/include/asm/fpu/types.h | 1 +
14767 arch/x86/include/asm/mmu_context.h | 2 +-
14768 block/blk-cgroup.c | 18 ++--
14769 block/cfq-iosched.c | 4 +-
14770 crypto/crypto_user.c | 8 ++-
14771 drivers/acpi/apei/ghes.c | 6 +-
14772 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
14773 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
14774 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
14775 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
14776 drivers/infiniband/core/netlink.c | 5 +-
14777 drivers/infiniband/hw/cxgb4/device.c | 6 +-
14778 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
14779 drivers/md/bcache/alloc.c | 2 +-
14780 drivers/md/bcache/bcache.h | 10 +-
14781 drivers/md/bcache/btree.c | 2 +-
14782 drivers/md/bcache/io.c | 10 +-
14783 drivers/md/bcache/journal.c | 2 +-
14784 drivers/md/bcache/stats.c | 26 +++---
14785 drivers/md/bcache/stats.h | 16 ++--
14786 drivers/md/bcache/super.c | 2 +-
14787 drivers/md/bcache/sysfs.c | 20 +++---
14788 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
14789 drivers/md/dm-raid.c | 2 +-
14790 drivers/md/md.c | 6 +-
14791 drivers/md/md.h | 2 +-
14792 drivers/md/raid1.c | 2 +-
14793 drivers/md/raid10.c | 2 +-
14794 drivers/md/raid5.c | 4 +-
14795 drivers/media/pci/zoran/zoran.h | 1 -
14796 drivers/media/pci/zoran/zoran_driver.c | 3 -
14797 drivers/net/ethernet/sfc/selftest.c | 20 +++---
14798 drivers/net/irda/vlsi_ir.c | 18 ++--
14799 drivers/net/irda/vlsi_ir.h | 14 ++--
14800 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
14801 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
14802 drivers/net/wireless/ath/carl9170/main.c | 10 +-
14803 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
14804 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
14805 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
14806 drivers/scsi/hptiop.c | 2 -
14807 drivers/scsi/hptiop.h | 1 -
14808 drivers/scsi/ipr.c | 6 +-
14809 drivers/scsi/ipr.h | 2 +-
14810 drivers/scsi/qla2xxx/qla_target.c | 10 +-
14811 drivers/scsi/qla2xxx/qla_target.h | 2 +-
14812 fs/btrfs/ctree.c | 2 +-
14813 fs/btrfs/ctree.h | 4 +-
14814 fs/btrfs/delayed-ref.c | 4 +-
14815 fs/btrfs/disk-io.c | 4 +-
14816 fs/btrfs/file.c | 4 +-
14817 fs/btrfs/raid56.c | 32 ++++----
14818 fs/btrfs/tests/btrfs-tests.c | 2 +-
14819 fs/btrfs/transaction.c | 2 +-
14820 fs/btrfs/tree-log.c | 8 +-
14821 fs/btrfs/volumes.c | 14 ++--
14822 fs/btrfs/volumes.h | 22 +++---
14823 fs/jbd2/commit.c | 2 +-
14824 fs/jbd2/transaction.c | 4 +-
14825 fs/ocfs2/dlm/dlmcommon.h | 4 +-
14826 fs/ocfs2/dlm/dlmdebug.c | 10 +-
14827 fs/ocfs2/dlm/dlmdomain.c | 4 +-
14828 fs/ocfs2/dlm/dlmmaster.c | 4 +-
14829 include/acpi/ghes.h | 2 +-
14830 include/linux/blk-cgroup.h | 24 +++---
14831 include/linux/jbd2.h | 2 +-
14832 include/linux/netlink.h | 12 ++--
14833 include/net/cfg802154.h | 2 +-
14834 include/net/mac80211.h | 2 +-
14835 include/net/neighbour.h | 2 +-
14836 kernel/rcu/tree_plugin.h | 4 +-
14837 net/batman-adv/routing.c | 4 +-
14838 net/batman-adv/soft-interface.c | 2 +-
14839 net/batman-adv/translation-table.c | 14 ++--
14840 net/batman-adv/types.h | 2 +-
14841 net/core/neighbour.c | 14 ++--
14842 net/core/rtnetlink.c | 2 +-
14843 net/ipv4/arp.c | 2 +-
14844 net/ipv4/inet_diag.c | 4 +-
14845 net/ipv4/xfrm4_state.c | 4 +-
14846 net/ipv6/ndisc.c | 2 +-
14847 net/mac80211/cfg.c | 2 +-
14848 net/mac80211/debugfs_key.c | 2 +-
14849 net/mac80211/key.c | 4 +-
14850 net/mac80211/tx.c | 2 +-
14851 net/mac80211/wpa.c | 10 +-
14852 net/mac802154/iface.c | 4 +-
14853 net/netfilter/ipset/ip_set_core.c | 2 +-
14854 net/netfilter/nf_conntrack_netlink.c | 22 +++---
14855 net/netfilter/nf_tables_api.c | 13 ++--
14856 net/netfilter/nfnetlink_acct.c | 7 +-
14857 net/netfilter/nfnetlink_cthelper.c | 2 +-
14858 net/netfilter/nfnetlink_cttimeout.c | 2 +-
14859 net/netlink/af_netlink.c | 10 ++-
14860 net/netlink/diag.c | 2 +-
14861 net/netlink/genetlink.c | 14 ++--
14862 net/packet/af_packet.c | 18 ++--
14863 net/packet/diag.c | 2 +-
14864 net/packet/internal.h | 6 +-
14865 net/unix/diag.c | 2 +-
14866 net/xfrm/xfrm_user.c | 2 +-
14867 security/apparmor/include/policy.h | 2 +-
14868 security/apparmor/policy.c | 4 +-
14869 sound/core/seq/seq_clientmgr.c | 2 +-
14870 sound/core/seq/seq_fifo.c | 6 +-
14871 sound/core/seq/seq_fifo.h | 2 +-
14872 tools/gcc/gcc-common.h | 24 ++++--
14873 tools/gcc/initify_plugin.c | 7 +-
14874 tools/lib/api/Makefile | 2 +-
14875 109 files changed, 399 insertions(+), 391 deletions(-)
14876
14877 commit a7817402ac837b1aee07fac42537a02097055098
14878 Author: Matt Fleming <matt@codeblueprint.co.uk>
14879 Date: Fri Jan 29 11:36:10 2016 +0000
14880
14881 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
14882
14883 There are a couple of nasty truncation bugs lurking in the pageattr
14884 code that can be triggered when mapping EFI regions, e.g. when we pass
14885 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
14886 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
14887
14888 Viorel-Cătălin managed to trigger this bug on his Dell machine that
14889 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
14890 When calling populate_pud() the end of the region gets calculated
14891 incorrectly in the following buggy expression,
14892
14893 end = start + (cpa->numpages << PAGE_SHIFT);
14894
14895 And only 188416 pages are mapped. Next, populate_pud() gets invoked
14896 for a second time because of the loop in __change_page_attr_set_clr(),
14897 only this time no pages get mapped because shifting the remaining
14898 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
14899 loop in __change_page_attr_set_clr() spins forever because we fail to
14900 map progress.
14901
14902 Hitting this bug depends very much on the virtual address we pick to
14903 map the large region at and how many pages we map on the initial run
14904 through the loop. This explains why this issue was only recently hit
14905 with the introduction of commit
14906
14907 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
14908 entries bottom-up at runtime, instead of top-down")
14909
14910 It's interesting to note that safe uses of cpa->numpages do exist in
14911 the pageattr code. If instead of shifting ->numpages we multiply by
14912 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
14913 so the result is unsigned long.
14914
14915 To avoid surprises when users try to convert very large cpa->numpages
14916 values to addresses, change the data type from 'int' to 'unsigned
14917 long', thereby making it suitable for shifting by PAGE_SHIFT without
14918 any type casting.
14919
14920 The alternative would be to make liberal use of casting, but that is
14921 far more likely to cause problems in the future when someone adds more
14922 code and fails to cast properly; this bug was difficult enough to
14923 track down in the first place.
14924
14925 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
14926 Acked-by: Borislav Petkov <bp@alien8.de>
14927 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
14928 Cc: <stable@vger.kernel.org>
14929 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
14930 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
14931 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
14932 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
14933
14934 arch/x86/mm/pageattr.c | 4 ++--
14935 1 files changed, 2 insertions(+), 2 deletions(-)
14936
14937 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
14938 Author: Jan Beulich <JBeulich@suse.com>
14939 Date: Tue Jan 26 04:15:18 2016 -0700
14940
14941 x86/mm: Fix types used in pgprot cacheability flags translations
14942
14943 For PAE kernels "unsigned long" is not suitable to hold page protection
14944 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
14945 few W+X pages getting reported as insecure during boot (observed namely
14946 for the entire initrd range).
14947
14948 Fixes: 281d4078be ("x86: Make page cache mode a real type")
14949 Signed-off-by: Jan Beulich <jbeulich@suse.com>
14950 Reviewed-by: Juergen Gross <JGross@suse.com>
14951 Cc: stable@vger.kernel.org
14952 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
14953 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
14954
14955 arch/x86/include/asm/pgtable_types.h | 6 ++----
14956 1 files changed, 2 insertions(+), 4 deletions(-)
14957
14958 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
14959 Merge: 682d661 f74425b
14960 Author: Brad Spengler <spender@grsecurity.net>
14961 Date: Sun Jan 31 15:06:25 2016 -0500
14962
14963 Merge branch 'pax-test' into grsec-test
14964
14965 Conflicts:
14966 drivers/net/slip/slhc.c
14967 include/linux/sched.h
14968 net/unix/af_unix.c
14969 sound/core/timer.c
14970
14971 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
14972 Merge: d14af1f 849a2d3
14973 Author: Brad Spengler <spender@grsecurity.net>
14974 Date: Sun Jan 31 15:02:55 2016 -0500
14975
14976 Merge branch 'linux-4.3.y' into pax-test
14977
14978 Conflicts:
14979 arch/x86/include/asm/mmu_context.h
14980
14981 commit 682d6611d75542e351c973c8dd74a99d3966c073
14982 Author: Brad Spengler <spender@grsecurity.net>
14983 Date: Sat Jan 30 13:05:03 2016 -0500
14984
14985 Based on a report from Mathias Krause, fix up a number of additional instances
14986 of ulong overflow when passing in values to gr_learn_resource by saturating
14987 to ULONG_MAX
14988
14989 mm/mlock.c | 11 ++++++++---
14990 mm/mmap.c | 16 +++++++++++++---
14991 2 files changed, 21 insertions(+), 6 deletions(-)
14992
14993 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
14994 Author: Jann Horn <jann@thejh.net>
14995 Date: Sat Dec 26 06:00:48 2015 +0100
14996
14997 seccomp: always propagate NO_NEW_PRIVS on tsync
14998
14999 Before this patch, a process with some permissive seccomp filter
15000 that was applied by root without NO_NEW_PRIVS was able to add
15001 more filters to itself without setting NO_NEW_PRIVS by setting
15002 the new filter from a throwaway thread with NO_NEW_PRIVS.
15003
15004 Signed-off-by: Jann Horn <jann@thejh.net>
15005 Cc: stable@vger.kernel.org
15006 Signed-off-by: Kees Cook <keescook@chromium.org>
15007
15008 kernel/seccomp.c | 22 +++++++++++-----------
15009 1 files changed, 11 insertions(+), 11 deletions(-)
15010
15011 commit b85450498a3bbf269441c8963d7574bb3079c838
15012 Merge: 59c216f d14af1f
15013 Author: Brad Spengler <spender@grsecurity.net>
15014 Date: Fri Jan 29 20:54:13 2016 -0500
15015
15016 Merge branch 'pax-test' into grsec-test
15017
15018 commit d14af1f1dd66511f3f0674deee2b572972012b39
15019 Author: Brad Spengler <spender@grsecurity.net>
15020 Date: Fri Jan 29 20:53:51 2016 -0500
15021
15022 Update to pax-linux-4.3.4-test26.patch:
15023 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
15024
15025 fs/cifs/file.c | 2 +-
15026 fs/gfs2/file.c | 2 +-
15027 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
15028 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
15029 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
15030 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
15031 .../size_overflow_transform_core.c | 5 +
15032 7 files changed, 102 insertions(+), 15 deletions(-)
15033
15034 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
15035 Author: Brad Spengler <spender@grsecurity.net>
15036 Date: Wed Jan 27 17:57:21 2016 -0500
15037
15038 Fix a size_overflow report reported by Mathias Krause in our
15039 truncation of an loff_t to an unsigned long when being passed
15040 to gr_learn_resource() (as all resource checks are against unsigned long
15041 values)
15042
15043 fs/attr.c | 5 ++++-
15044 1 files changed, 4 insertions(+), 1 deletions(-)
15045
15046 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
15047 Author: Yuchung Cheng <ycheng@google.com>
15048 Date: Wed Jan 6 12:42:38 2016 -0800
15049
15050 tcp: fix zero cwnd in tcp_cwnd_reduction
15051
15052 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
15053 conditionally") introduced a bug that cwnd may become 0 when both
15054 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
15055 to a div-by-zero if the connection starts another cwnd reduction
15056 phase by setting tp->prior_cwnd to the current cwnd (0) in
15057 tcp_init_cwnd_reduction().
15058
15059 To prevent this we skip PRR operation when nothing is acked or
15060 sacked. Then cwnd must be positive in all cases as long as ssthresh
15061 is positive:
15062
15063 1) The proportional reduction mode
15064 inflight > ssthresh > 0
15065
15066 2) The reduction bound mode
15067 a) inflight == ssthresh > 0
15068
15069 b) inflight < ssthresh
15070 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
15071
15072 Therefore in all cases inflight and sndcnt can not both be 0.
15073 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
15074
15075 In reality this bug is triggered only with a sequence of less common
15076 events. For example, the connection is terminating an ECN-triggered
15077 cwnd reduction with an inflight 0, then it receives reordered/old
15078 ACKs or DSACKs from prior transmission (which acks nothing). Or the
15079 connection is in fast recovery stage that marks everything lost,
15080 but fails to retransmit due to local issues, then receives data
15081 packets from other end which acks nothing.
15082
15083 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
15084 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
15085 Signed-off-by: Yuchung Cheng <ycheng@google.com>
15086 Signed-off-by: Neal Cardwell <ncardwell@google.com>
15087 Signed-off-by: Eric Dumazet <edumazet@google.com>
15088 Signed-off-by: David S. Miller <davem@davemloft.net>
15089
15090 net/ipv4/tcp_input.c | 3 +++
15091 1 files changed, 3 insertions(+), 0 deletions(-)
15092
15093 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
15094 Author: Eric Dumazet <edumazet@google.com>
15095 Date: Sun Jan 24 13:53:50 2016 -0800
15096
15097 af_unix: fix struct pid memory leak
15098
15099 Dmitry reported a struct pid leak detected by a syzkaller program.
15100
15101 Bug happens in unix_stream_recvmsg() when we break the loop when a
15102 signal is pending, without properly releasing scm.
15103
15104 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
15105 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15106 Signed-off-by: Eric Dumazet <edumazet@google.com>
15107 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
15108 Signed-off-by: David S. Miller <davem@davemloft.net>
15109
15110 net/unix/af_unix.c | 1 +
15111 1 files changed, 1 insertions(+), 0 deletions(-)
15112
15113 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
15114 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15115 Date: Fri Jan 22 01:39:43 2016 +0100
15116
15117 pptp: fix illegal memory access caused by multiple bind()s
15118
15119 Several times already this has been reported as kasan reports caused by
15120 syzkaller and trinity and people always looked at RCU races, but it is
15121 much more simple. :)
15122
15123 In case we bind a pptp socket multiple times, we simply add it to
15124 the callid_sock list but don't remove the old binding. Thus the old
15125 socket stays in the bucket with unused call_id indexes and doesn't get
15126 cleaned up. This causes various forms of kasan reports which were hard
15127 to pinpoint.
15128
15129 Simply don't allow multiple binds and correct error handling in
15130 pptp_bind. Also keep sk_state bits in place in pptp_connect.
15131
15132 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
15133 Cc: Dmitry Kozlov <xeb@mail.ru>
15134 Cc: Sasha Levin <sasha.levin@oracle.com>
15135 Cc: Dmitry Vyukov <dvyukov@google.com>
15136 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15137 Cc: Dave Jones <davej@codemonkey.org.uk>
15138 Reported-by: Dave Jones <davej@codemonkey.org.uk>
15139 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15140 Signed-off-by: David S. Miller <davem@davemloft.net>
15141
15142 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
15143 1 files changed, 24 insertions(+), 10 deletions(-)
15144
15145 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
15146 Author: Brad Spengler <spender@grsecurity.net>
15147 Date: Tue Jan 26 18:17:10 2016 -0500
15148
15149 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
15150 wiki but was removed from the config help at some point
15151
15152 grsecurity/Kconfig | 3 +++
15153 1 files changed, 3 insertions(+), 0 deletions(-)
15154
15155 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
15156 Author: Thomas Egerer <hakke_007@gmx.de>
15157 Date: Mon Jan 25 12:58:44 2016 +0100
15158
15159 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
15160
15161 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
15162 to select CRYPTO_ECHAINIV in order to work properly. This solves the
15163 issues caused by a misconfiguration as described in [1].
15164 The original approach, patching crypto/Kconfig was turned down by
15165 Herbert Xu [2].
15166
15167 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
15168 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
15169
15170 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
15171 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
15172 Signed-off-by: David S. Miller <davem@davemloft.net>
15173
15174 net/ipv4/Kconfig | 1 +
15175 net/ipv6/Kconfig | 1 +
15176 2 files changed, 2 insertions(+), 0 deletions(-)
15177
15178 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
15179 Merge: 904114c 6339c1f
15180 Author: Brad Spengler <spender@grsecurity.net>
15181 Date: Tue Jan 26 18:08:40 2016 -0500
15182
15183 Merge branch 'pax-test' into grsec-test
15184
15185 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
15186 Author: Brad Spengler <spender@grsecurity.net>
15187 Date: Tue Jan 26 18:07:51 2016 -0500
15188
15189 Update to pax-linux-4.3.4-test25.patch:
15190 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
15191 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
15192 - fixed a few REFCOUNT false positives in SNMP related statistics
15193
15194 arch/x86/Kconfig | 2 +-
15195 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
15196 include/net/snmp.h | 10 +++++-----
15197 kernel/fork.c | 11 +++++++++--
15198 net/ipv4/proc.c | 8 ++++----
15199 net/ipv6/addrconf.c | 4 ++--
15200 net/ipv6/proc.c | 10 +++++-----
15201 7 files changed, 43 insertions(+), 19 deletions(-)
15202
15203 commit 904114c2fce3fdff5d57e763da56a78960db4e19
15204 Author: Al Viro <viro@zeniv.linux.org.uk>
15205 Date: Fri Jan 22 18:08:52 2016 -0500
15206
15207 make sure that freeing shmem fast symlinks is RCU-delayed
15208
15209 Cc: stable@vger.kernel.org # v4.2+
15210 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15211
15212 include/linux/shmem_fs.h | 5 +----
15213 mm/shmem.c | 9 ++++-----
15214 2 files changed, 5 insertions(+), 9 deletions(-)
15215
15216 commit ab86adee64312a2f827dd516cb199521327943ed
15217 Author: Sasha Levin <sasha.levin@oracle.com>
15218 Date: Mon Jan 18 19:23:51 2016 -0500
15219
15220 netfilter: nf_conntrack: use safer way to lock all buckets
15221
15222 When we need to lock all buckets in the connection hashtable we'd attempt to
15223 lock 1024 spinlocks, which is way more preemption levels than supported by
15224 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
15225 enabled, and if it was - use only 8 buckets(!).
15226
15227 Fix this by using a global lock and synchronize all buckets on it when we
15228 need to lock them all. This is pretty heavyweight, but is only done when we
15229 need to resize the hashtable, and that doesn't happen often enough (or at all).
15230
15231 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15232 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
15233 Reviewed-by: Florian Westphal <fw@strlen.de>
15234 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
15235
15236 Conflicts:
15237
15238 net/netfilter/nfnetlink_cttimeout.c
15239
15240 include/net/netfilter/nf_conntrack_core.h | 8 ++----
15241 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
15242 net/netfilter/nf_conntrack_helper.c | 2 +-
15243 net/netfilter/nf_conntrack_netlink.c | 2 +-
15244 4 files changed, 33 insertions(+), 17 deletions(-)
15245
15246 commit 37014723527225481c720484bb788a1a6358072f
15247 Author: Willy Tarreau <w@1wt.eu>
15248 Date: Mon Jan 18 16:36:09 2016 +0100
15249
15250 pipe: limit the per-user amount of pages allocated in pipes
15251
15252 On no-so-small systems, it is possible for a single process to cause an
15253 OOM condition by filling large pipes with data that are never read. A
15254 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
15255 memory. On small systems it may be tricky to set the pipe max size to
15256 prevent this from happening.
15257
15258 This patch makes it possible to enforce a per-user soft limit above
15259 which new pipes will be limited to a single page, effectively limiting
15260 them to 4 kB each, as well as a hard limit above which no new pipes may
15261 be created for this user. This has the effect of protecting the system
15262 against memory abuse without hurting other users, and still allowing
15263 pipes to work correctly though with less data at once.
15264
15265 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
15266 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
15267 default soft limit allows the default number of FDs per process (1024)
15268 to create pipes of the default size (64kB), thus reaching a limit of 64MB
15269 before starting to create only smaller pipes. With 256 processes limited
15270 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
15271 1084 MB of memory allocated for a user. The hard limit is disabled by
15272 default to avoid breaking existing applications that make intensive use
15273 of pipes (eg: for splicing).
15274
15275 Reported-by: socketpair@gmail.com
15276 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15277 Mitigates: CVE-2013-4312 (Linux 2.0+)
15278 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15279 Signed-off-by: Willy Tarreau <w@1wt.eu>
15280 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15281
15282 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
15283 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
15284 include/linux/pipe_fs_i.h | 4 +++
15285 include/linux/sched.h | 1 +
15286 kernel/sysctl.c | 14 ++++++++++++
15287 5 files changed, 87 insertions(+), 2 deletions(-)
15288
15289 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
15290 Merge: 540f2af 7791ecb
15291 Author: Brad Spengler <spender@grsecurity.net>
15292 Date: Sat Jan 23 10:57:11 2016 -0500
15293
15294 Merge branch 'pax-test' into grsec-test
15295
15296 commit 7791ecb84f840343a5646236fd0d34e1fb450793
15297 Merge: 470069c 399588c
15298 Author: Brad Spengler <spender@grsecurity.net>
15299 Date: Sat Jan 23 10:56:47 2016 -0500
15300
15301 Merge branch 'linux-4.3.y' into pax-test
15302
15303 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
15304 Author: Brad Spengler <spender@grsecurity.net>
15305 Date: Tue Jan 19 21:18:47 2016 -0500
15306
15307 Update size_overflow hash table
15308
15309 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
15310 1 files changed, 3 insertions(+), 1 deletions(-)
15311
15312 commit 7e649765626a28437f573f0fbe7a51a04615f041
15313 Author: Brad Spengler <spender@grsecurity.net>
15314 Date: Tue Jan 19 20:29:46 2016 -0500
15315
15316 Backport fix from: https://lkml.org/lkml/2015/12/13/187
15317
15318 fs/ext4/extents.c | 2 +-
15319 1 files changed, 1 insertions(+), 1 deletions(-)
15320
15321 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
15322 Author: Jann Horn <jann@thejh.net>
15323 Date: Tue Jan 5 18:27:30 2016 +0100
15324
15325 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
15326
15327 This replaces all code in fs/compat_ioctl.c that translated
15328 ioctl arguments into a in-kernel structure, then performed
15329 do_ioctl under set_fs(KERNEL_DS), with code that allocates
15330 data on the user stack and can call the VFS ioctl handler
15331 under USER_DS.
15332
15333 This is done as a hardening measure because the caller
15334 does not know what kind of ioctl handler will be invoked,
15335 only that no corresponding compat_ioctl handler exists and
15336 what the ioctl command number is. The accidental
15337 invocation of an unlocked_ioctl handler that unexpectedly
15338 calls copy_to_user could be a severe security issue.
15339
15340 Signed-off-by: Jann Horn <jann@thejh.net>
15341 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15342
15343 Conflicts:
15344
15345 fs/compat_ioctl.c
15346
15347 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
15348 1 files changed, 68 insertions(+), 62 deletions(-)
15349
15350 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
15351 Author: Al Viro <viro@zeniv.linux.org.uk>
15352 Date: Thu Jan 7 09:53:30 2016 -0500
15353
15354 compat_ioctl: don't pass fd around when not needed
15355
15356 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15357
15358 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
15359 fs/internal.h | 7 ++++
15360 fs/ioctl.c | 4 +-
15361 include/linux/fs.h | 2 -
15362 4 files changed, 61 insertions(+), 55 deletions(-)
15363
15364 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
15365 Author: Jann Horn <jann@thejh.net>
15366 Date: Tue Jan 5 18:27:29 2016 +0100
15367
15368 compat_ioctl: don't look up the fd twice
15369
15370 In code in fs/compat_ioctl.c that translates ioctl arguments
15371 into a in-kernel structure, then performs sys_ioctl, possibly
15372 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
15373 calls to do_ioctl calls. do_ioctl is a new function that does
15374 the same thing as sys_ioctl, but doesn't look up the fd again.
15375
15376 This change is made to avoid (potential) security issues
15377 because of ioctl handlers that accept one of the ioctl
15378 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
15379 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
15380 This can happen for multiple reasons:
15381
15382 - The ioctl command number could be reused.
15383 - The ioctl handler might not check the full ioctl
15384 command. This is e.g. true for drm_ioctl.
15385 - The ioctl handler is very special, e.g. cuse_file_ioctl
15386
15387 The real issue is that set_fs(KERNEL_DS) is used here,
15388 but that's fixed in a separate commit
15389 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
15390
15391 This change mitigates potential security issues by
15392 preventing a race that permits invocation of
15393 unlocked_ioctl handlers under KERNEL_DS through compat
15394 code even if a corresponding compat_ioctl handler exists.
15395
15396 So far, no way has been identified to use this to damage
15397 kernel memory without having CAP_SYS_ADMIN in the init ns
15398 (with the capability, doing reads/writes at arbitrary
15399 kernel addresses should be easy through CUSE's ioctl
15400 handler with FUSE_IOCTL_UNRESTRICTED set).
15401
15402 [AV: two missed sys_ioctl() taken care of]
15403
15404 Signed-off-by: Jann Horn <jann@thejh.net>
15405 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15406
15407 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
15408 1 files changed, 68 insertions(+), 54 deletions(-)
15409
15410 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
15411 Author: Vasily Kulikov <segoon@openwall.com>
15412 Date: Fri Jan 15 16:57:55 2016 -0800
15413
15414 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
15415
15416 TIMER_ENTRY_STATIC is defined as a poison pointers which
15417 should point to nowhere. Redefine them using POISON_POINTER_DELTA
15418 arithmetics to make sure they really point to non-mappable area declared
15419 by the target architecture.
15420
15421 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
15422 Acked-by: Thomas Gleixner <tglx@linutronix.de>
15423 Cc: Solar Designer <solar@openwall.com>
15424 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
15425 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
15426 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
15427
15428 Conflicts:
15429
15430 include/linux/poison.h
15431
15432 include/linux/poison.h | 2 +-
15433 1 files changed, 1 insertions(+), 1 deletions(-)
15434
15435 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
15436 Author: Brad Spengler <spender@grsecurity.net>
15437 Date: Tue Jan 19 19:41:44 2016 -0500
15438
15439 Fix ARM compilation, reported by Austin Sepp
15440
15441 grsecurity/grsec_sig.c | 1 +
15442 1 files changed, 1 insertions(+), 0 deletions(-)
15443
15444 commit e15383743443dc43460a2fd73e0db0b608610dca
15445 Author: Takashi Iwai <tiwai@suse.de>
15446 Date: Mon Jan 18 13:52:47 2016 +0100
15447
15448 ALSA: hrtimer: Fix stall by hrtimer_cancel()
15449
15450 hrtimer_cancel() waits for the completion from the callback, thus it
15451 must not be called inside the callback itself. This was already a
15452 problem in the past with ALSA hrtimer driver, and the early commit
15453 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
15454
15455 However, the previous fix is still insufficient: it may still cause a
15456 lockup when the ALSA timer instance reprograms itself in its callback.
15457 Then it invokes the start function even in snd_timer_interrupt() that
15458 is called in hrtimer callback itself, results in a CPU stall. This is
15459 no hypothetical problem but actually triggered by syzkaller fuzzer.
15460
15461 This patch tries to fix the issue again. Now we call
15462 hrtimer_try_to_cancel() at both start and stop functions so that it
15463 won't fall into a deadlock, yet giving some chance to cancel the queue
15464 if the functions have been called outside the callback. The proper
15465 hrtimer_cancel() is called in anyway at closing, so this should be
15466 enough.
15467
15468 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
15469 Cc: <stable@vger.kernel.org>
15470 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15471
15472 sound/core/hrtimer.c | 3 ++-
15473 1 files changed, 2 insertions(+), 1 deletions(-)
15474
15475 commit 12d874daf706e6e7c1ae709141859c809599297e
15476 Author: Takashi Iwai <tiwai@suse.de>
15477 Date: Tue Jan 12 12:38:02 2016 +0100
15478
15479 ALSA: seq: Fix missing NULL check at remove_events ioctl
15480
15481 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
15482 unconditionally even if there is no FIFO assigned, and this leads to
15483 an Oops due to NULL dereference. The fix is just to add a proper NULL
15484 check.
15485
15486 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15487 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15488 Cc: <stable@vger.kernel.org>
15489 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15490
15491 sound/core/seq/seq_clientmgr.c | 2 +-
15492 1 files changed, 1 insertions(+), 1 deletions(-)
15493
15494 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
15495 Author: Takashi Iwai <tiwai@suse.de>
15496 Date: Tue Jan 12 15:36:27 2016 +0100
15497
15498 ALSA: seq: Fix race at timer setup and close
15499
15500 ALSA sequencer code has an open race between the timer setup ioctl and
15501 the close of the client. This was triggered by syzkaller fuzzer, and
15502 a use-after-free was caught there as a result.
15503
15504 This patch papers over it by adding a proper queue->timer_mutex lock
15505 around the timer-related calls in the relevant code path.
15506
15507 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15508 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15509 Cc: <stable@vger.kernel.org>
15510 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15511
15512 sound/core/seq/seq_queue.c | 2 ++
15513 1 files changed, 2 insertions(+), 0 deletions(-)
15514
15515 commit b9e55ab955e59b4a636d78a748be90334a48b485
15516 Author: Takashi Iwai <tiwai@suse.de>
15517 Date: Thu Jan 14 16:30:58 2016 +0100
15518
15519 ALSA: timer: Harden slave timer list handling
15520
15521 A slave timer instance might be still accessible in a racy way while
15522 operating the master instance as it lacks of locking. Since the
15523 master operation is mostly protected with timer->lock, we should cope
15524 with it while changing the slave instance, too. Also, some linked
15525 lists (active_list and ack_list) of slave instances aren't unlinked
15526 immediately at stopping or closing, and this may lead to unexpected
15527 accesses.
15528
15529 This patch tries to address these issues. It adds spin lock of
15530 timer->lock (either from master or slave, which is equivalent) in a
15531 few places. For avoiding a deadlock, we ensure that the global
15532 slave_active_lock is always locked at first before each timer lock.
15533
15534 Also, ack and active_list of slave instances are properly unlinked at
15535 snd_timer_stop() and snd_timer_close().
15536
15537 Last but not least, remove the superfluous call of _snd_timer_stop()
15538 at removing slave links. This is a noop, and calling it may confuse
15539 readers wrt locking. Further cleanup will follow in a later patch.
15540
15541 Actually we've got reports of use-after-free by syzkaller fuzzer, and
15542 this hopefully fixes these issues.
15543
15544 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15545 Cc: <stable@vger.kernel.org>
15546 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15547
15548 sound/core/timer.c | 18 ++++++++++++++----
15549 1 files changed, 14 insertions(+), 4 deletions(-)
15550
15551 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
15552 Author: Takashi Iwai <tiwai@suse.de>
15553 Date: Wed Jan 13 17:48:01 2016 +0100
15554
15555 ALSA: timer: Fix race among timer ioctls
15556
15557 ALSA timer ioctls have an open race and this may lead to a
15558 use-after-free of timer instance object. A simplistic fix is to make
15559 each ioctl exclusive. We have already tread_sem for controlling the
15560 tread, and extend this as a global mutex to be applied to each ioctl.
15561
15562 The downside is, of course, the worse concurrency. But these ioctls
15563 aren't to be parallel accessible, in anyway, so it should be fine to
15564 serialize there.
15565
15566 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15567 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15568 Cc: <stable@vger.kernel.org>
15569 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15570
15571 sound/core/timer.c | 32 +++++++++++++++++++-------------
15572 1 files changed, 19 insertions(+), 13 deletions(-)
15573
15574 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
15575 Author: Takashi Iwai <tiwai@suse.de>
15576 Date: Wed Jan 13 21:35:06 2016 +0100
15577
15578 ALSA: timer: Fix double unlink of active_list
15579
15580 ALSA timer instance object has a couple of linked lists and they are
15581 unlinked unconditionally at snd_timer_stop(). Meanwhile
15582 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
15583 the element list itself unchanged. This ends up with unlinking twice,
15584 and it was caught by syzkaller fuzzer.
15585
15586 The fix is to use list_del_init() variant properly there, too.
15587
15588 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15589 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15590 Cc: <stable@vger.kernel.org>
15591 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15592
15593 sound/core/timer.c | 2 +-
15594 1 files changed, 1 insertions(+), 1 deletions(-)
15595
15596 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
15597 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15598 Date: Mon Jan 18 18:03:48 2016 +0100
15599
15600 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
15601
15602 It was seen that defective configurations of openvswitch could overwrite
15603 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
15604 many recursions within ovs.
15605
15606 This problem arises due to the high stack usage of openvswitch. The rest
15607 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
15608
15609 We use the already existing recursion counter in ovs_execute_actions to
15610 implement an upper bound of 5 recursions.
15611
15612 Cc: Pravin Shelar <pshelar@ovn.org>
15613 Cc: Simon Horman <simon.horman@netronome.com>
15614 Cc: Eric Dumazet <eric.dumazet@gmail.com>
15615 Cc: Simon Horman <simon.horman@netronome.com>
15616 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15617 Signed-off-by: David S. Miller <davem@davemloft.net>
15618
15619 net/openvswitch/actions.c | 19 ++++++++++++++-----
15620 1 files changed, 14 insertions(+), 5 deletions(-)
15621
15622 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
15623 Author: Ursula Braun <ursula.braun@de.ibm.com>
15624 Date: Tue Jan 19 10:41:33 2016 +0100
15625
15626 af_iucv: Validate socket address length in iucv_sock_bind()
15627
15628 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
15629 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15630 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
15631 Signed-off-by: David S. Miller <davem@davemloft.net>
15632
15633 net/iucv/af_iucv.c | 3 +++
15634 1 files changed, 3 insertions(+), 0 deletions(-)
15635
15636 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
15637 Author: Brad Spengler <spender@grsecurity.net>
15638 Date: Tue Jan 19 19:32:54 2016 -0500
15639
15640 Apply the same fix as everyone else for the recent keys vulnerability that is
15641 unexploitable under PAX_REFCOUNT
15642
15643 Make a couple more changes that no one else can/will
15644
15645 include/linux/key-type.h | 4 ++--
15646 ipc/msgutil.c | 4 ++--
15647 security/keys/internal.h | 2 +-
15648 security/keys/process_keys.c | 1 +
15649 4 files changed, 6 insertions(+), 5 deletions(-)
15650
15651 commit b56c3a63f431c193400aee17543021950bd14bc4
15652 Merge: 38b1a3d 470069c
15653 Author: Brad Spengler <spender@grsecurity.net>
15654 Date: Sun Jan 17 18:30:19 2016 -0500
15655
15656 Merge branch 'pax-test' into grsec-test
15657
15658 commit 470069cfedef2180313233d275be5901bd6d1135
15659 Author: Brad Spengler <spender@grsecurity.net>
15660 Date: Sun Jan 17 18:29:59 2016 -0500
15661
15662 Update to pax-linux-4.3.3-test22.patch:
15663 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
15664 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
15665
15666 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
15667 drivers/gpu/drm/drm_pci.c | 3 +++
15668 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
15669 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
15670 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
15671 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
15672 drivers/net/usb/asix_common.c | 3 ++-
15673 include/drm/drmP.h | 1 +
15674 8 files changed, 22 insertions(+), 29 deletions(-)
15675
15676 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
15677 Author: Brad Spengler <spender@grsecurity.net>
15678 Date: Sun Jan 17 12:33:53 2016 -0500
15679
15680 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
15681 mentioned banning execution of suid/sgid binaries, though the kernel
15682 source clearly only mentions banning execution of suid binaries. Since
15683 there's no reason for us to not ban execution of sgid binaries as well,
15684 make the implementation match the Kconfig description.
15685
15686 fs/exec.c | 4 ++--
15687 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
15688 include/linux/sched.h | 4 ++--
15689 3 files changed, 18 insertions(+), 17 deletions(-)
15690
15691 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
15692 Merge: d141a86 ea4a835
15693 Author: Brad Spengler <spender@grsecurity.net>
15694 Date: Sat Jan 16 14:12:22 2016 -0500
15695
15696 Merge branch 'pax-test' into grsec-test
15697
15698 Conflicts:
15699 drivers/gpu/drm/i810/i810_drv.c
15700
15701 commit ea4a835328ada6513ac013986764d6caea8cd348
15702 Author: Brad Spengler <spender@grsecurity.net>
15703 Date: Sat Jan 16 14:11:30 2016 -0500
15704
15705 Update to pax-linux-4.3.3-test21.patch:
15706 - fixed some fallout from the drm_drivers constification, reported by spender
15707
15708 drivers/gpu/drm/armada/armada_drv.c | 3 +--
15709 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
15710 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15711 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
15712 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15713 5 files changed, 8 insertions(+), 6 deletions(-)
15714
15715 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
15716 Author: Brad Spengler <spender@grsecurity.net>
15717 Date: Sat Jan 16 13:16:36 2016 -0500
15718
15719 compile fix
15720
15721 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15722 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
15723 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15724 3 files changed, 5 insertions(+), 3 deletions(-)
15725
15726 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
15727 Merge: 5fa135d bbda879
15728 Author: Brad Spengler <spender@grsecurity.net>
15729 Date: Sat Jan 16 12:59:22 2016 -0500
15730
15731 Merge branch 'pax-test' into grsec-test
15732
15733 commit bbda87914edf63e27fb46670bf3a373f2b963c73
15734 Author: Brad Spengler <spender@grsecurity.net>
15735 Date: Sat Jan 16 12:58:04 2016 -0500
15736
15737 Update to pax-linux-4.3.3-test20.patch:
15738 - constified drm_driver
15739 - Emese fixed a special case in handling __func__ in the initify plugin
15740 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
15741 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
15742
15743 arch/x86/kernel/cpu/perf_event.h | 2 +-
15744 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
15745 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
15746 arch/x86/kernel/uprobes.c | 2 +-
15747 arch/x86/mm/mpx.c | 2 +-
15748 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
15749 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
15750 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
15751 drivers/gpu/drm/drm_pci.c | 6 +-
15752 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
15753 drivers/gpu/drm/i915/i915_dma.c | 2 +-
15754 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
15755 drivers/gpu/drm/i915/i915_drv.h | 2 +-
15756 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
15757 drivers/gpu/drm/mga/mga_drv.c | 5 +-
15758 drivers/gpu/drm/mga/mga_drv.h | 2 +-
15759 drivers/gpu/drm/mga/mga_state.c | 2 +-
15760 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
15761 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
15762 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
15763 drivers/gpu/drm/r128/r128_drv.c | 4 +-
15764 drivers/gpu/drm/r128/r128_drv.h | 2 +-
15765 drivers/gpu/drm/r128/r128_state.c | 2 +-
15766 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
15767 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
15768 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
15769 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
15770 drivers/gpu/drm/savage/savage_bci.c | 2 +-
15771 drivers/gpu/drm/savage/savage_drv.c | 5 +-
15772 drivers/gpu/drm/savage/savage_drv.h | 2 +-
15773 drivers/gpu/drm/sis/sis_drv.c | 5 +-
15774 drivers/gpu/drm/sis/sis_drv.h | 2 +-
15775 drivers/gpu/drm/sis/sis_mm.c | 2 +-
15776 drivers/gpu/drm/via/via_dma.c | 2 +-
15777 drivers/gpu/drm/via/via_drv.c | 5 +-
15778 drivers/gpu/drm/via/via_drv.h | 2 +-
15779 include/drm/drmP.h | 2 +-
15780 mm/slab.c | 2 +-
15781 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
15782 tools/gcc/initify_plugin.c | 15 +++-
15783 .../disable_size_overflow_hash.data | 1 +
15784 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
15785 42 files changed, 156 insertions(+), 110 deletions(-)
15786
15787 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
15788 Author: Brad Spengler <spender@grsecurity.net>
15789 Date: Sat Jan 16 12:19:23 2016 -0500
15790
15791 compile fix
15792
15793 grsecurity/grsec_sig.c | 3 +--
15794 1 files changed, 1 insertions(+), 2 deletions(-)
15795
15796 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
15797 Author: Brad Spengler <spender@grsecurity.net>
15798 Date: Sat Jan 16 12:10:37 2016 -0500
15799
15800 As pointed out by Jann Horn, some distros are starting to circumvent
15801 previous assumptions about the attainability of a user to control
15802 multiple UIDs by handing out suid binaries that allow a user to run
15803 processes (including exploits) under a number of other pre-defined
15804 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
15805 (though it would have to involve some code path that doesn't involve
15806 locks) fix that here by ensuring no more than 8 users on a system can
15807 be banned before a reboot is required. If more are banned, a panic
15808 is triggered.
15809
15810 grsecurity/grsec_sig.c | 8 ++++++++
15811 1 files changed, 8 insertions(+), 0 deletions(-)
15812
15813 commit a8d37776e9521c567ebff6730d49312f72435f08
15814 Author: Eric Dumazet <edumazet@google.com>
15815 Date: Thu Dec 3 11:12:07 2015 -0800
15816
15817 proc: add a reschedule point in proc_readfd_common()
15818
15819 User can pass an arbitrary large buffer to getdents().
15820
15821 It is typically a 32KB buffer used by libc scandir() implementation.
15822
15823 When scanning /proc/{pid}/fd, we can hold cpu way too long,
15824 so add a cond_resched() to be kind with other tasks.
15825
15826 We've seen latencies of more than 50ms on real workloads.
15827
15828 Signed-off-by: Eric Dumazet <edumazet@google.com>
15829 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
15830 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15831
15832 fs/proc/fd.c | 1 +
15833 1 files changed, 1 insertions(+), 0 deletions(-)
15834
15835 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
15836 Author: Rabin Vincent <rabin@rab.in>
15837 Date: Tue Jan 12 20:17:08 2016 +0100
15838
15839 net: bpf: reject invalid shifts
15840
15841 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
15842 constant shift that can't be encoded in the immediate field of the
15843 UBFM/SBFM instructions is passed to the JIT. Since these shifts
15844 amounts, which are negative or >= regsize, are invalid, reject them in
15845 the eBPF verifier and the classic BPF filter checker, for all
15846 architectures.
15847
15848 Signed-off-by: Rabin Vincent <rabin@rab.in>
15849 Acked-by: Alexei Starovoitov <ast@kernel.org>
15850 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15851 Signed-off-by: David S. Miller <davem@davemloft.net>
15852
15853 kernel/bpf/verifier.c | 10 ++++++++++
15854 net/core/filter.c | 5 +++++
15855 2 files changed, 15 insertions(+), 0 deletions(-)
15856
15857 commit c248e115a73496625a1c64660d0eeefd67e55cbf
15858 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15859 Date: Fri Jan 8 11:00:54 2016 -0200
15860
15861 sctp: fix use-after-free in pr_debug statement
15862
15863 Dmitry Vyukov reported a use-after-free in the code expanded by the
15864 macro debug_post_sfx, which is caused by the use of the asoc pointer
15865 after it was freed within sctp_side_effect() scope.
15866
15867 This patch fixes it by allowing sctp_side_effect to clear that asoc
15868 pointer when the TCB is freed.
15869
15870 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
15871 because it will trigger DELETE_TCB too on that same loop.
15872
15873 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
15874 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
15875 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
15876
15877 The macro is already prepared to handle such NULL pointer.
15878
15879 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15880 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15881 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
15882 Signed-off-by: David S. Miller <davem@davemloft.net>
15883
15884 net/sctp/sm_sideeffect.c | 11 ++++++-----
15885 net/sctp/sm_statefuns.c | 17 ++++-------------
15886 2 files changed, 10 insertions(+), 18 deletions(-)
15887
15888 commit 395ea8a9e73e184fc14153a033000bccf4213213
15889 Author: willy tarreau <w@1wt.eu>
15890 Date: Sun Jan 10 07:54:56 2016 +0100
15891
15892 unix: properly account for FDs passed over unix sockets
15893
15894 It is possible for a process to allocate and accumulate far more FDs than
15895 the process' limit by sending them over a unix socket then closing them
15896 to keep the process' fd count low.
15897
15898 This change addresses this problem by keeping track of the number of FDs
15899 in flight per user and preventing non-privileged processes from having
15900 more FDs in flight than their configured FD limit.
15901
15902 Reported-by: socketpair@gmail.com
15903 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15904 Mitigates: CVE-2013-4312 (Linux 2.0+)
15905 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15906 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15907 Signed-off-by: Willy Tarreau <w@1wt.eu>
15908 Signed-off-by: David S. Miller <davem@davemloft.net>
15909
15910 include/linux/sched.h | 1 +
15911 net/unix/af_unix.c | 24 ++++++++++++++++++++----
15912 net/unix/garbage.c | 13 ++++++++-----
15913 3 files changed, 29 insertions(+), 9 deletions(-)
15914
15915 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
15916 Author: Sasha Levin <sasha.levin@oracle.com>
15917 Date: Thu Jan 7 14:52:43 2016 -0500
15918
15919 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
15920
15921 proc_dostring() needs an initialized destination string, while the one
15922 provided in proc_sctp_do_hmac_alg() contains stack garbage.
15923
15924 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
15925 accessing invalid memory.
15926
15927 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
15928 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15929 Signed-off-by: David S. Miller <davem@davemloft.net>
15930
15931 net/sctp/sysctl.c | 2 +-
15932 1 files changed, 1 insertions(+), 1 deletions(-)
15933
15934 commit 4014e09faf0fe9054119624ccfff1236e886b554
15935 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
15936 Date: Tue Nov 24 17:13:21 2015 -0500
15937
15938 RDS: fix race condition when sending a message on unbound socket
15939
15940 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
15941
15942 Sasha's found a NULL pointer dereference in the RDS connection code when
15943 sending a message to an apparently unbound socket. The problem is caused
15944 by the code checking if the socket is bound in rds_sendmsg(), which checks
15945 the rs_bound_addr field without taking a lock on the socket. This opens a
15946 race where rs_bound_addr is temporarily set but where the transport is not
15947 in rds_bind(), leading to a NULL pointer dereference when trying to
15948 dereference 'trans' in __rds_conn_create().
15949
15950 Vegard wrote a reproducer for this issue, so kindly ask him to share if
15951 you're interested.
15952
15953 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
15954 with this patch, whereas I could without.
15955
15956 Complete earlier incomplete fix to CVE-2015-6937:
15957
15958 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
15959
15960 Cc: David S. Miller <davem@davemloft.net>
15961
15962 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
15963 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
15964 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
15965 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
15966 Signed-off-by: David S. Miller <davem@davemloft.net>
15967 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
15968
15969 Conflicts:
15970
15971 net/rds/send.c
15972
15973 net/rds/connection.c | 6 ------
15974 1 files changed, 0 insertions(+), 6 deletions(-)
15975
15976 commit 206df8d01104344d7588d801016a281a4cd25556
15977 Author: Sasha Levin <sasha.levin@oracle.com>
15978 Date: Tue Sep 8 10:53:40 2015 -0400
15979
15980 RDS: verify the underlying transport exists before creating a connection
15981
15982 There was no verification that an underlying transport exists when creating
15983 a connection, this would cause dereferencing a NULL ptr.
15984
15985 It might happen on sockets that weren't properly bound before attempting to
15986 send a message, which will cause a NULL ptr deref:
15987
15988 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
15989 [135546.051270] Modules linked in:
15990 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
15991 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
15992 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
15993 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
15994 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
15995 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
15996 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
15997 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
15998 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
15999 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
16000 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
16001 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
16002 [135546.064723] Stack:
16003 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
16004 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
16005 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
16006 [135546.068629] Call Trace:
16007 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
16008 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
16009 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
16010 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
16011 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
16012 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
16013 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
16014 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
16015 [135546.076349] ? __might_fault (mm/memory.c:3795)
16016 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
16017 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
16018 [135546.078856] SYSC_sendto (net/socket.c:1657)
16019 [135546.079596] ? SYSC_connect (net/socket.c:1628)
16020 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
16021 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
16022 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16023 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
16024 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
16025 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16026 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
16027
16028 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16029 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16030 Signed-off-by: David S. Miller <davem@davemloft.net>
16031
16032 net/rds/connection.c | 6 ++++++
16033 1 files changed, 6 insertions(+), 0 deletions(-)
16034
16035 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
16036 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
16037 Date: Tue Jan 5 20:32:47 2016 -0500
16038
16039 ftrace/module: Call clean up function when module init fails early
16040
16041 If the module init code fails after calling ftrace_module_init() and before
16042 calling do_init_module(), we can suffer from a memory leak. This is because
16043 ftrace_module_init() allocates pages to store the locations that ftrace
16044 hooks are placed in the module text. If do_init_module() fails, it still
16045 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
16046 the pages it allocated for the module. But if load_module() fails before
16047 then, the pages allocated by ftrace_module_init() will never be freed.
16048
16049 Call ftrace_release_mod() on the module if load_module() fails before
16050 getting to do_init_module().
16051
16052 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
16053
16054 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
16055 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
16056 Cc: stable@vger.kernel.org # v2.6.38+
16057 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
16058 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16059
16060 include/linux/ftrace.h | 1 +
16061 kernel/module.c | 6 ++++++
16062 2 files changed, 7 insertions(+), 0 deletions(-)
16063
16064 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
16065 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
16066 Date: Wed Jan 6 00:18:48 2016 -0800
16067
16068 net: possible use after free in dst_release
16069
16070 dst_release should not access dst->flags after decrementing
16071 __refcnt to 0. The dst_entry may be in dst_busy_list and
16072 dst_gc_task may dst_destroy it before dst_release gets a chance
16073 to access dst->flags.
16074
16075 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
16076 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
16077 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
16078 Acked-by: Eric Dumazet <edumazet@google.com>
16079 Signed-off-by: David S. Miller <davem@davemloft.net>
16080
16081 net/core/dst.c | 3 ++-
16082 1 files changed, 2 insertions(+), 1 deletions(-)
16083
16084 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
16085 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
16086 Date: Wed Jan 6 14:55:02 2016 +0000
16087
16088 mkiss: fix scribble on freed memory
16089
16090 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
16091 scribble on free memory but added a new one which allows the user to
16092 scribble even more and user controlled data into freed space.
16093
16094 As with 6pack we need to halt the queue before we free the buffers, because
16095 the transmit logic is not protected by the semaphore.
16096
16097 Signed-off-by: Alan Cox <alan@linux.intel.com>
16098 Signed-off-by: David S. Miller <davem@davemloft.net>
16099
16100 drivers/net/hamradio/mkiss.c | 5 +++++
16101 1 files changed, 5 insertions(+), 0 deletions(-)
16102
16103 commit 5cbbcbd32dc1949470f61d342503808fa9555276
16104 Author: David Miller <davem@davemloft.net>
16105 Date: Thu Dec 17 16:05:49 2015 -0500
16106
16107 mkiss: Fix use after free in mkiss_close().
16108
16109 Need to do the unregister_device() after all references to the driver
16110 private have been done.
16111
16112 Signed-off-by: David S. Miller <davem@davemloft.net>
16113
16114 drivers/net/hamradio/mkiss.c | 4 ++--
16115 1 files changed, 2 insertions(+), 2 deletions(-)
16116
16117 commit b00171576794a98068e069a660f0991a6a5190ff
16118 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
16119 Date: Tue Jan 5 11:51:25 2016 +0000
16120
16121 6pack: fix free memory scribbles
16122
16123 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
16124 memory scribble but in doing so replaced it with a different one that allows
16125 the user to control the data and scribble even more.
16126
16127 sixpack_close is called by the tty layer in tty context. The tty context is
16128 protected by sp_get() and sp_put(). However network layer activity via
16129 sp_xmit() is not protected this way. We must therefore stop the queue
16130 otherwise the user gets to dump a buffer mostly of their choice into freed
16131 kernel pages.
16132
16133 Signed-off-by: Alan Cox <alan@linux.intel.com>
16134 Signed-off-by: David S. Miller <davem@davemloft.net>
16135
16136 drivers/net/hamradio/6pack.c | 6 ++++++
16137 1 files changed, 6 insertions(+), 0 deletions(-)
16138
16139 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
16140 Author: David Miller <davem@davemloft.net>
16141 Date: Thu Dec 17 16:05:32 2015 -0500
16142
16143 6pack: Fix use after free in sixpack_close().
16144
16145 Need to do the unregister_device() after all references to the driver
16146 private have been done.
16147
16148 Also we need to use del_timer_sync() for the timers so that we don't
16149 have any asynchronous references after the unregister.
16150
16151 Signed-off-by: David S. Miller <davem@davemloft.net>
16152
16153 drivers/net/hamradio/6pack.c | 8 ++++----
16154 1 files changed, 4 insertions(+), 4 deletions(-)
16155
16156 commit 4f9d532742656b3613d579220fd10c78f24ba37b
16157 Author: Rabin Vincent <rabin@rab.in>
16158 Date: Tue Jan 5 16:23:07 2016 +0100
16159
16160 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
16161
16162 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
16163 instructions since it XORs A with X while all the others replace A with
16164 some loaded value. All the BPF JITs fail to clear A if this is used as
16165 the first instruction in a filter. This was found using american fuzzy
16166 lop.
16167
16168 Add a helper to determine if A needs to be cleared given the first
16169 instruction in a filter, and use this in the JITs. Except for ARM, the
16170 rest have only been compile-tested.
16171
16172 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
16173 Signed-off-by: Rabin Vincent <rabin@rab.in>
16174 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16175 Acked-by: Alexei Starovoitov <ast@kernel.org>
16176 Signed-off-by: David S. Miller <davem@davemloft.net>
16177
16178 arch/arm/net/bpf_jit_32.c | 16 +---------------
16179 arch/mips/net/bpf_jit.c | 16 +---------------
16180 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
16181 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
16182 include/linux/filter.h | 19 +++++++++++++++++++
16183 5 files changed, 25 insertions(+), 56 deletions(-)
16184
16185 commit 570d88f8acfffda92b89ae2e1c47320d47256034
16186 Author: John Fastabend <john.fastabend@gmail.com>
16187 Date: Tue Jan 5 09:11:36 2016 -0800
16188
16189 net: sched: fix missing free per cpu on qstats
16190
16191 When a qdisc is using per cpu stats (currently just the ingress
16192 qdisc) only the bstats are being freed. This also free's the qstats.
16193
16194 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
16195 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
16196 Acked-by: Eric Dumazet <edumazet@google.com>
16197 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16198 Signed-off-by: David S. Miller <davem@davemloft.net>
16199
16200 net/sched/sch_generic.c | 4 +++-
16201 1 files changed, 3 insertions(+), 1 deletions(-)
16202
16203 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
16204 Author: Rabin Vincent <rabin@rab.in>
16205 Date: Tue Jan 5 18:34:04 2016 +0100
16206
16207 ARM: net: bpf: fix zero right shift
16208
16209 The LSR instruction cannot be used to perform a zero right shift since a
16210 0 as the immediate value (imm5) in the LSR instruction encoding means
16211 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
16212
16213 Make the JIT skip generation of the LSR if a zero-shift is requested.
16214
16215 This was found using american fuzzy lop.
16216
16217 Signed-off-by: Rabin Vincent <rabin@rab.in>
16218 Acked-by: Alexei Starovoitov <ast@kernel.org>
16219 Signed-off-by: David S. Miller <davem@davemloft.net>
16220
16221 arch/arm/net/bpf_jit_32.c | 3 ++-
16222 1 files changed, 2 insertions(+), 1 deletions(-)
16223
16224 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
16225 Author: Brad Spengler <spender@grsecurity.net>
16226 Date: Wed Jan 6 20:35:57 2016 -0500
16227
16228 Don't perform hidden lookups in RBAC against the directory of
16229 a file being opened with O_CREAT, reported by Karl Witt
16230
16231 Conflicts:
16232
16233 fs/namei.c
16234
16235 fs/namei.c | 3 ---
16236 1 files changed, 0 insertions(+), 3 deletions(-)
16237
16238 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
16239 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16240 Date: Tue Jan 5 10:46:00 2016 +0100
16241
16242 bridge: Only call /sbin/bridge-stp for the initial network namespace
16243
16244 [I stole this patch from Eric Biederman. He wrote:]
16245
16246 > There is no defined mechanism to pass network namespace information
16247 > into /sbin/bridge-stp therefore don't even try to invoke it except
16248 > for bridge devices in the initial network namespace.
16249 >
16250 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
16251 > invoked for any network device name which if /sbin/bridge-stp does not
16252 > guard against unreasonable arguments or being invoked twice on the
16253 > same network device could cause problems.
16254
16255 [Hannes: changed patch using netns_eq]
16256
16257 Cc: Eric W. Biederman <ebiederm@xmission.com>
16258 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
16259 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16260 Signed-off-by: David S. Miller <davem@davemloft.net>
16261
16262 net/bridge/br_stp_if.c | 5 ++++-
16263 1 files changed, 4 insertions(+), 1 deletions(-)
16264
16265 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
16266 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16267 Date: Wed Dec 23 16:28:40 2015 -0200
16268
16269 sctp: use GFP_USER for user-controlled kmalloc
16270
16271 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16272 missed two other spots.
16273
16274 For connectx, as it's more likely to be used by kernel users of the API,
16275 it detects if GFP_USER should be used or not.
16276
16277 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16278 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16279 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16280 Signed-off-by: David S. Miller <davem@davemloft.net>
16281
16282 net/sctp/socket.c | 9 ++++++---
16283 1 files changed, 6 insertions(+), 3 deletions(-)
16284
16285 commit 5718a1f63c41fc156f729783423b002763779d04
16286 Author: Florian Westphal <fw@strlen.de>
16287 Date: Thu Dec 31 14:26:33 2015 +0100
16288
16289 connector: bump skb->users before callback invocation
16290
16291 Dmitry reports memleak with syskaller program.
16292 Problem is that connector bumps skb usecount but might not invoke callback.
16293
16294 So move skb_get to where we invoke the callback.
16295
16296 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16297 Signed-off-by: Florian Westphal <fw@strlen.de>
16298 Signed-off-by: David S. Miller <davem@davemloft.net>
16299
16300 drivers/connector/connector.c | 11 +++--------
16301 1 files changed, 3 insertions(+), 8 deletions(-)
16302
16303 commit 2e6372e6a97f8d642416899861f91777f44f13b7
16304 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16305 Date: Sun Jan 3 18:56:38 2016 +0000
16306
16307 af_unix: Fix splice-bind deadlock
16308
16309 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
16310 system call and AF_UNIX sockets,
16311
16312 http://lists.openwall.net/netdev/2015/11/06/24
16313
16314 The situation was analyzed as
16315
16316 (a while ago) A: socketpair()
16317 B: splice() from a pipe to /mnt/regular_file
16318 does sb_start_write() on /mnt
16319 C: try to freeze /mnt
16320 wait for B to finish with /mnt
16321 A: bind() try to bind our socket to /mnt/new_socket_name
16322 lock our socket, see it not bound yet
16323 decide that it needs to create something in /mnt
16324 try to do sb_start_write() on /mnt, block (it's
16325 waiting for C).
16326 D: splice() from the same pipe to our socket
16327 lock the pipe, see that socket is connected
16328 try to lock the socket, block waiting for A
16329 B: get around to actually feeding a chunk from
16330 pipe to file, try to lock the pipe. Deadlock.
16331
16332 on 2015/11/10 by Al Viro,
16333
16334 http://lists.openwall.net/netdev/2015/11/10/4
16335
16336 The patch fixes this by removing the kern_path_create related code from
16337 unix_mknod and executing it as part of unix_bind prior acquiring the
16338 readlock of the socket in question. This means that A (as used above)
16339 will sb_start_write on /mnt before it acquires the readlock, hence, it
16340 won't indirectly block B which first did a sb_start_write and then
16341 waited for a thread trying to acquire the readlock. Consequently, A
16342 being blocked by C waiting for B won't cause a deadlock anymore
16343 (effectively, both A and B acquire two locks in opposite order in the
16344 situation described above).
16345
16346 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
16347
16348 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16349 Signed-off-by: David S. Miller <davem@davemloft.net>
16350
16351 Conflicts:
16352
16353 net/unix/af_unix.c
16354
16355 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
16356 1 files changed, 42 insertions(+), 28 deletions(-)
16357
16358 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
16359 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
16360 Date: Thu Dec 31 13:11:28 2015 +0800
16361
16362 tracing: Fix setting of start_index in find_next()
16363
16364 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
16365 panic at t_show.
16366
16367 general protection fault: 0000 [#1] PREEMPT SMP
16368 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
16369 RIP: 0010:[<ffffffff811375b2>]
16370 [<ffffffff811375b2>] t_show+0x22/0xe0
16371 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
16372 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
16373 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
16374 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
16375 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
16376 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
16377 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
16378 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
16379 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
16380 Call Trace:
16381 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
16382 [<ffffffff811b749b>] vfs_read+0x9b/0x160
16383 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
16384 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
16385 ---[ end trace 5bd9eb630614861e ]---
16386 Kernel panic - not syncing: Fatal exception
16387
16388 When the first time find_next calls find_next_mod_format, it should
16389 iterate the trace_bprintk_fmt_list to find the first print format of
16390 the module. However in current code, start_index is smaller than *pos
16391 at first, and code will not iterate the list. Latter container_of will
16392 get the wrong address with former v, which will cause mod_fmt be a
16393 meaningless object and so is the returned mod_fmt->fmt.
16394
16395 This patch will fix it by correcting the start_index. After fixed,
16396 when the first time calls find_next_mod_format, start_index will be
16397 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
16398 get the right module printk format, so is the returned mod_fmt->fmt.
16399
16400 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
16401
16402 Cc: stable@vger.kernel.org # 3.12+
16403 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
16404 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
16405 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16406
16407 kernel/trace/trace_printk.c | 1 +
16408 1 files changed, 1 insertions(+), 0 deletions(-)
16409
16410 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
16411 Author: Al Viro <viro@zeniv.linux.org.uk>
16412 Date: Mon Dec 28 20:47:08 2015 -0500
16413
16414 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
16415
16416 Cc: stable@vger.kernel.org # 3.15+
16417 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
16418 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16419
16420 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
16421 1 files changed, 37 insertions(+), 36 deletions(-)
16422
16423 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
16424 Merge: de243c2 3adc55a
16425 Author: Brad Spengler <spender@grsecurity.net>
16426 Date: Tue Jan 5 18:10:10 2016 -0500
16427
16428 Merge branch 'pax-test' into grsec-test
16429
16430 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
16431 Author: Brad Spengler <spender@grsecurity.net>
16432 Date: Tue Jan 5 18:08:53 2016 -0500
16433
16434 Update to pax-linux-4.3.3-test16.patch:
16435 - small cleanup in entry_64.S on x86
16436 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
16437 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
16438 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
16439 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
16440 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
16441
16442 arch/x86/entry/entry_64.S | 60 +++++-----
16443 arch/x86/kernel/alternative.c | 2 +-
16444 arch/x86/kvm/emulate.c | 4 +-
16445 tools/gcc/initify_plugin.c | 123 +++++++++----------
16446 .../disable_size_overflow_hash.data | 4 +-
16447 .../size_overflow_plugin/size_overflow_hash.data | 2 -
16448 6 files changed, 93 insertions(+), 102 deletions(-)
16449
16450 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
16451 Author: Brad Spengler <spender@grsecurity.net>
16452 Date: Tue Dec 29 18:01:24 2015 -0500
16453
16454 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
16455 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
16456 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
16457
16458 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
16459 against suid/sgid attacks and the flaw above would only eliminate the extra
16460 entropy provided for the brk-managed heap, still leaving it with the minimum
16461 of 16-bit entropy for mmap on x86 and 28 on x64.
16462
16463 mm/mmap.c | 2 +-
16464 1 files changed, 1 insertions(+), 1 deletions(-)
16465
16466 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
16467 Merge: 436201b 2584340
16468 Author: Brad Spengler <spender@grsecurity.net>
16469 Date: Mon Dec 28 20:30:01 2015 -0500
16470
16471 Merge branch 'pax-test' into grsec-test
16472
16473 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
16474 Author: Brad Spengler <spender@grsecurity.net>
16475 Date: Mon Dec 28 20:29:28 2015 -0500
16476
16477 Update to pax-linux-4.3.3-test14.patch:
16478 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
16479 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
16480 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
16481 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
16482 - fixed an assert in the initify plugin that triggered in vic_register on arm
16483
16484 arch/arm/include/asm/atomic.h | 7 +++++--
16485 arch/arm/include/asm/domain.h | 5 ++---
16486 arch/x86/kernel/tboot.c | 14 +++++++++-----
16487 drivers/hv/channel.c | 4 +---
16488 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
16489 drivers/net/hyperv/rndis_filter.c | 3 +--
16490 fs/exec.c | 4 ++--
16491 include/linux/atomic.h | 15 ---------------
16492 net/core/skbuff.c | 3 ++-
16493 tools/gcc/initify_plugin.c | 4 +++-
16494 10 files changed, 26 insertions(+), 35 deletions(-)
16495
16496 commit 436201b6626b488d173c8076447000077c27b84a
16497 Author: David Howells <dhowells@redhat.com>
16498 Date: Fri Dec 18 01:34:26 2015 +0000
16499
16500 KEYS: Fix race between read and revoke
16501
16502 This fixes CVE-2015-7550.
16503
16504 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
16505 happens between keyctl_read() checking the validity of a key and the key's
16506 semaphore being taken, then the key type read method will see a revoked key.
16507
16508 This causes a problem for the user-defined key type because it assumes in
16509 its read method that there will always be a payload in a non-revoked key
16510 and doesn't check for a NULL pointer.
16511
16512 Fix this by making keyctl_read() check the validity of a key after taking
16513 semaphore instead of before.
16514
16515 I think the bug was introduced with the original keyrings code.
16516
16517 This was discovered by a multithreaded test program generated by syzkaller
16518 (http://github.com/google/syzkaller). Here's a cleaned up version:
16519
16520 #include <sys/types.h>
16521 #include <keyutils.h>
16522 #include <pthread.h>
16523 void *thr0(void *arg)
16524 {
16525 key_serial_t key = (unsigned long)arg;
16526 keyctl_revoke(key);
16527 return 0;
16528 }
16529 void *thr1(void *arg)
16530 {
16531 key_serial_t key = (unsigned long)arg;
16532 char buffer[16];
16533 keyctl_read(key, buffer, 16);
16534 return 0;
16535 }
16536 int main()
16537 {
16538 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
16539 pthread_t th[5];
16540 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
16541 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
16542 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
16543 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
16544 pthread_join(th[0], 0);
16545 pthread_join(th[1], 0);
16546 pthread_join(th[2], 0);
16547 pthread_join(th[3], 0);
16548 return 0;
16549 }
16550
16551 Build as:
16552
16553 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
16554
16555 Run as:
16556
16557 while keyctl-race; do :; done
16558
16559 as it may need several iterations to crash the kernel. The crash can be
16560 summarised as:
16561
16562 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
16563 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
16564 ...
16565 Call Trace:
16566 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
16567 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
16568 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
16569
16570 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16571 Signed-off-by: David Howells <dhowells@redhat.com>
16572 Tested-by: Dmitry Vyukov <dvyukov@google.com>
16573 Cc: stable@vger.kernel.org
16574 Signed-off-by: James Morris <james.l.morris@oracle.com>
16575
16576 security/keys/keyctl.c | 18 +++++++++---------
16577 1 files changed, 9 insertions(+), 9 deletions(-)
16578
16579 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
16580 Author: Brad Spengler <spender@grsecurity.net>
16581 Date: Tue Dec 22 20:44:01 2015 -0500
16582
16583 Add new kernel command-line param: pax_size_overflow_report_only
16584 If a user triggers a size_overflow violation that makes it difficult
16585 to obtain the call trace without serial console/net console, they can
16586 use this option to provide that information to us
16587
16588 Documentation/kernel-parameters.txt | 5 +++++
16589 fs/exec.c | 12 +++++++++---
16590 init/main.c | 11 +++++++++++
16591 3 files changed, 25 insertions(+), 3 deletions(-)
16592
16593 commit 4254a8da5851df8c08cdca5c392916e8c105408d
16594 Author: WANG Cong <xiyou.wangcong@gmail.com>
16595 Date: Mon Dec 21 10:55:45 2015 -0800
16596
16597 addrconf: always initialize sysctl table data
16598
16599 When sysctl performs restrict writes, it allows to write from
16600 a middle position of a sysctl file, which requires us to initialize
16601 the table data before calling proc_dostring() for the write case.
16602
16603 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
16604 Reported-by: Sasha Levin <sasha.levin@oracle.com>
16605 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16606 Tested-by: Sasha Levin <sasha.levin@oracle.com>
16607 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16608 Signed-off-by: David S. Miller <davem@davemloft.net>
16609
16610 net/ipv6/addrconf.c | 11 ++++-------
16611 1 files changed, 4 insertions(+), 7 deletions(-)
16612
16613 commit f8002863fb06c363180637046947a78a6ccb3d33
16614 Author: WANG Cong <xiyou.wangcong@gmail.com>
16615 Date: Wed Dec 16 23:39:04 2015 -0800
16616
16617 net: check both type and procotol for tcp sockets
16618
16619 Dmitry reported the following out-of-bound access:
16620
16621 Call Trace:
16622 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
16623 mm/kasan/report.c:294
16624 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
16625 [< inline >] SYSC_setsockopt net/socket.c:1746
16626 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
16627 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
16628 arch/x86/entry/entry_64.S:185
16629
16630 This is because we mistake a raw socket as a tcp socket.
16631 We should check both sk->sk_type and sk->sk_protocol to ensure
16632 it is a tcp socket.
16633
16634 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
16635
16636 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16637 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
16638 Cc: Eric Dumazet <eric.dumazet@gmail.com>
16639 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16640 Acked-by: Willem de Bruijn <willemb@google.com>
16641 Signed-off-by: David S. Miller <davem@davemloft.net>
16642
16643 net/core/skbuff.c | 3 ++-
16644 net/core/sock.c | 3 ++-
16645 2 files changed, 4 insertions(+), 2 deletions(-)
16646
16647 commit bd6b3399804470a4ad8f34229469ca149dceba3d
16648 Author: Colin Ian King <colin.king@canonical.com>
16649 Date: Fri Dec 18 14:22:01 2015 -0800
16650
16651 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
16652
16653 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
16654 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
16655 the setting of ret after the get_proc_task call and incorrectly left it as
16656 -ESRCH. Instead, return 0 when successful.
16657
16658 Example breakage:
16659
16660 echo 0 > /proc/self/coredump_filter
16661 bash: echo: write error: No such process
16662
16663 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
16664 Signed-off-by: Colin Ian King <colin.king@canonical.com>
16665 Acked-by: Kees Cook <keescook@chromium.org>
16666 Cc: <stable@vger.kernel.org> [4.3+]
16667 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
16668 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
16669
16670 fs/proc/base.c | 1 +
16671 1 files changed, 1 insertions(+), 0 deletions(-)
16672
16673 commit b28aca2b99ed08546778355fb9402c503ff9b29e
16674 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
16675 Date: Tue Dec 22 10:23:44 2015 -0700
16676
16677 block: ensure to split after potentially bouncing a bio
16678
16679 blk_queue_bio() does split then bounce, which makes the segment
16680 counting based on pages before bouncing and could go wrong. Move
16681 the split to after bouncing, like we do for blk-mq, and the we
16682 fix the issue of having the bio count for segments be wrong.
16683
16684 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
16685 Cc: stable@vger.kernel.org
16686 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
16687 Signed-off-by: Jens Axboe <axboe@fb.com>
16688
16689 block/blk-core.c | 4 ++--
16690 1 files changed, 2 insertions(+), 2 deletions(-)
16691
16692 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
16693 Merge: f6f63ae ec72fa5
16694 Author: Brad Spengler <spender@grsecurity.net>
16695 Date: Tue Dec 22 19:46:26 2015 -0500
16696
16697 Merge branch 'pax-test' into grsec-test
16698
16699 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
16700 Author: Brad Spengler <spender@grsecurity.net>
16701 Date: Tue Dec 22 19:45:51 2015 -0500
16702
16703 Update to pax-linux-4.3.3-test13.patch:
16704 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
16705 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
16706
16707 arch/arm/mm/fault.c | 2 +-
16708 arch/x86/mm/fault.c | 2 +-
16709 fs/btrfs/extent_map.c | 8 ++++++--
16710 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
16711 4 files changed, 11 insertions(+), 5 deletions(-)
16712
16713 commit f6f63ae154cd45028add1dc41957878060d77fbf
16714 Author: Brad Spengler <spender@grsecurity.net>
16715 Date: Thu Dec 17 18:43:44 2015 -0500
16716
16717 ptrace_has_cap() checks whether the current process should be
16718 treated as having a certain capability for ptrace checks
16719 against another process. Until now, this was equivalent to
16720 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
16721
16722 However, if a root-owned process wants to enter a user
16723 namespace for some reason without knowing who owns it and
16724 therefore can't change to the namespace owner's uid and gid
16725 before entering, as soon as it has entered the namespace,
16726 the namespace owner can attach to it via ptrace and thereby
16727 gain access to its uid and gid.
16728
16729 While it is possible for the entering process to switch to
16730 the uid of a claimed namespace owner before entering,
16731 causing the attempt to enter to fail if the claimed uid is
16732 wrong, this doesn't solve the problem of determining an
16733 appropriate gid.
16734
16735 With this change, the entering process can first enter the
16736 namespace and then safely inspect the namespace's
16737 properties, e.g. through /proc/self/{uid_map,gid_map},
16738 assuming that the namespace owner doesn't have access to
16739 uid 0.
16740 Signed-off-by: Jann Horn <jann@thejh.net>
16741
16742 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
16743 1 files changed, 25 insertions(+), 5 deletions(-)
16744
16745 commit e314f0fb63020f61543b401ff594e953c2c304e5
16746 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
16747 Date: Tue Dec 15 10:46:17 2015 -0800
16748
16749 net: fix uninitialized variable issue
16750
16751 msg_iocb needs to be initialized on the recv/recvfrom path.
16752 Otherwise afalg will wrongly interpret it as an async call.
16753
16754 Cc: stable@vger.kernel.org
16755 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
16756 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
16757 Signed-off-by: David S. Miller <davem@davemloft.net>
16758
16759 net/socket.c | 1 +
16760 1 files changed, 1 insertions(+), 0 deletions(-)
16761
16762 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
16763 Merge: dfa764c 142edcf
16764 Author: Brad Spengler <spender@grsecurity.net>
16765 Date: Wed Dec 16 21:01:17 2015 -0500
16766
16767 Merge branch 'pax-test' into grsec-test
16768
16769 commit 142edcf1005a57fb8887823565cf0bafad2f313c
16770 Author: Brad Spengler <spender@grsecurity.net>
16771 Date: Wed Dec 16 21:00:57 2015 -0500
16772
16773 Update to pax-linux-4.3.3-test12.patch:
16774 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
16775 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
16776
16777 drivers/tty/n_tty.c | 16 ++++++++--------
16778 .../disable_size_overflow_hash.data | 2 ++
16779 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
16780 3 files changed, 12 insertions(+), 12 deletions(-)
16781
16782 commit dfa764cc549892a5bfc1083cac78b99032cae577
16783 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16784 Date: Tue Dec 15 22:59:12 2015 +0100
16785
16786 ipv6: automatically enable stable privacy mode if stable_secret set
16787
16788 Bjørn reported that while we switch all interfaces to privacy stable mode
16789 when setting the secret, we don't set this mode for new interfaces. This
16790 does not make sense, so change this behaviour.
16791
16792 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
16793 Reported-by: Bjørn Mork <bjorn@mork.no>
16794 Cc: Bjørn Mork <bjorn@mork.no>
16795 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16796 Signed-off-by: David S. Miller <davem@davemloft.net>
16797
16798 net/ipv6/addrconf.c | 6 ++++++
16799 1 files changed, 6 insertions(+), 0 deletions(-)
16800
16801 commit c2815a1fee03f222273e77c14e43f960da06f35a
16802 Author: Brad Spengler <spender@grsecurity.net>
16803 Date: Wed Dec 16 13:03:38 2015 -0500
16804
16805 Work around upstream limitation on the number of thread info flags causing a compilation error
16806 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
16807
16808 arch/arm/kernel/entry-common.S | 8 ++++++--
16809 1 files changed, 6 insertions(+), 2 deletions(-)
16810
16811 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
16812 Author: Brad Spengler <spender@grsecurity.net>
16813 Date: Tue Dec 15 19:03:41 2015 -0500
16814
16815 Initial import of grsecurity 3.1 for Linux 4.3.3
16816
16817 Documentation/dontdiff | 2 +
16818 Documentation/kernel-parameters.txt | 7 +
16819 Documentation/sysctl/kernel.txt | 15 +
16820 Makefile | 18 +-
16821 arch/alpha/include/asm/cache.h | 4 +-
16822 arch/alpha/kernel/osf_sys.c | 12 +-
16823 arch/arc/Kconfig | 1 +
16824 arch/arm/Kconfig | 1 +
16825 arch/arm/Kconfig.debug | 1 +
16826 arch/arm/include/asm/thread_info.h | 7 +-
16827 arch/arm/kernel/process.c | 4 +-
16828 arch/arm/kernel/ptrace.c | 9 +
16829 arch/arm/kernel/traps.c | 7 +-
16830 arch/arm/mm/Kconfig | 2 +-
16831 arch/arm/mm/fault.c | 40 +-
16832 arch/arm/mm/mmap.c | 8 +-
16833 arch/arm/net/bpf_jit_32.c | 51 +-
16834 arch/arm64/Kconfig.debug | 1 +
16835 arch/avr32/include/asm/cache.h | 4 +-
16836 arch/blackfin/Kconfig.debug | 1 +
16837 arch/blackfin/include/asm/cache.h | 3 +-
16838 arch/cris/include/arch-v10/arch/cache.h | 3 +-
16839 arch/cris/include/arch-v32/arch/cache.h | 3 +-
16840 arch/frv/include/asm/cache.h | 3 +-
16841 arch/frv/mm/elf-fdpic.c | 4 +-
16842 arch/hexagon/include/asm/cache.h | 6 +-
16843 arch/ia64/Kconfig | 1 +
16844 arch/ia64/include/asm/cache.h | 3 +-
16845 arch/ia64/kernel/sys_ia64.c | 2 +
16846 arch/ia64/mm/hugetlbpage.c | 2 +
16847 arch/m32r/include/asm/cache.h | 4 +-
16848 arch/m68k/include/asm/cache.h | 4 +-
16849 arch/metag/mm/hugetlbpage.c | 1 +
16850 arch/microblaze/include/asm/cache.h | 3 +-
16851 arch/mips/Kconfig | 1 +
16852 arch/mips/include/asm/cache.h | 3 +-
16853 arch/mips/include/asm/thread_info.h | 11 +-
16854 arch/mips/kernel/irq.c | 3 +
16855 arch/mips/kernel/ptrace.c | 9 +
16856 arch/mips/mm/mmap.c | 4 +-
16857 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
16858 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
16859 arch/openrisc/include/asm/cache.h | 4 +-
16860 arch/parisc/include/asm/cache.h | 5 +-
16861 arch/parisc/kernel/sys_parisc.c | 4 +
16862 arch/powerpc/Kconfig | 1 +
16863 arch/powerpc/include/asm/cache.h | 4 +-
16864 arch/powerpc/include/asm/thread_info.h | 5 +-
16865 arch/powerpc/kernel/Makefile | 2 +
16866 arch/powerpc/kernel/irq.c | 3 +
16867 arch/powerpc/kernel/process.c | 10 +-
16868 arch/powerpc/kernel/ptrace.c | 14 +
16869 arch/powerpc/kernel/traps.c | 5 +
16870 arch/powerpc/mm/slice.c | 2 +-
16871 arch/s390/Kconfig.debug | 1 +
16872 arch/s390/include/asm/cache.h | 4 +-
16873 arch/score/include/asm/cache.h | 4 +-
16874 arch/sh/include/asm/cache.h | 3 +-
16875 arch/sh/mm/mmap.c | 6 +-
16876 arch/sparc/include/asm/cache.h | 4 +-
16877 arch/sparc/include/asm/pgalloc_64.h | 1 +
16878 arch/sparc/include/asm/thread_info_64.h | 8 +-
16879 arch/sparc/kernel/process_32.c | 6 +-
16880 arch/sparc/kernel/process_64.c | 8 +-
16881 arch/sparc/kernel/ptrace_64.c | 14 +
16882 arch/sparc/kernel/sys_sparc_64.c | 8 +-
16883 arch/sparc/kernel/syscalls.S | 8 +-
16884 arch/sparc/kernel/traps_32.c | 8 +-
16885 arch/sparc/kernel/traps_64.c | 28 +-
16886 arch/sparc/kernel/unaligned_64.c | 2 +-
16887 arch/sparc/mm/fault_64.c | 2 +-
16888 arch/sparc/mm/hugetlbpage.c | 15 +-
16889 arch/tile/Kconfig | 1 +
16890 arch/tile/include/asm/cache.h | 3 +-
16891 arch/tile/mm/hugetlbpage.c | 2 +
16892 arch/um/include/asm/cache.h | 3 +-
16893 arch/unicore32/include/asm/cache.h | 6 +-
16894 arch/x86/Kconfig | 21 +
16895 arch/x86/Kconfig.debug | 2 +
16896 arch/x86/entry/common.c | 14 +
16897 arch/x86/entry/entry_32.S | 2 +-
16898 arch/x86/entry/entry_64.S | 2 +-
16899 arch/x86/ia32/ia32_aout.c | 2 +
16900 arch/x86/include/asm/floppy.h | 20 +-
16901 arch/x86/include/asm/fpu/types.h | 69 +-
16902 arch/x86/include/asm/io.h | 2 +-
16903 arch/x86/include/asm/page.h | 12 +-
16904 arch/x86/include/asm/paravirt_types.h | 23 +-
16905 arch/x86/include/asm/processor.h | 12 +-
16906 arch/x86/include/asm/thread_info.h | 6 +-
16907 arch/x86/include/asm/uaccess.h | 2 +-
16908 arch/x86/kernel/dumpstack.c | 10 +-
16909 arch/x86/kernel/dumpstack_32.c | 2 +-
16910 arch/x86/kernel/dumpstack_64.c | 2 +-
16911 arch/x86/kernel/ioport.c | 13 +
16912 arch/x86/kernel/irq_32.c | 3 +
16913 arch/x86/kernel/irq_64.c | 4 +
16914 arch/x86/kernel/ldt.c | 18 +
16915 arch/x86/kernel/msr.c | 10 +
16916 arch/x86/kernel/ptrace.c | 14 +
16917 arch/x86/kernel/signal.c | 9 +-
16918 arch/x86/kernel/sys_i386_32.c | 9 +-
16919 arch/x86/kernel/sys_x86_64.c | 8 +-
16920 arch/x86/kernel/traps.c | 5 +
16921 arch/x86/kernel/verify_cpu.S | 1 +
16922 arch/x86/kernel/vm86_32.c | 15 +
16923 arch/x86/kvm/svm.c | 14 +-
16924 arch/x86/mm/fault.c | 12 +-
16925 arch/x86/mm/hugetlbpage.c | 15 +-
16926 arch/x86/mm/init.c | 66 +-
16927 arch/x86/mm/init_32.c | 6 +-
16928 arch/x86/net/bpf_jit_comp.c | 4 +
16929 arch/x86/platform/efi/efi_64.c | 2 +-
16930 arch/x86/xen/Kconfig | 1 +
16931 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
16932 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
16933 crypto/ablkcipher.c | 2 +-
16934 crypto/blkcipher.c | 2 +-
16935 crypto/scatterwalk.c | 10 +-
16936 drivers/acpi/acpica/hwxfsleep.c | 11 +-
16937 drivers/acpi/custom_method.c | 4 +
16938 drivers/block/cciss.h | 30 +-
16939 drivers/block/smart1,2.h | 40 +-
16940 drivers/cdrom/cdrom.c | 2 +-
16941 drivers/char/Kconfig | 4 +-
16942 drivers/char/genrtc.c | 1 +
16943 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
16944 drivers/char/mem.c | 17 +
16945 drivers/char/random.c | 5 +-
16946 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
16947 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
16948 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
16949 drivers/crypto/talitos.c | 2 +-
16950 drivers/firewire/ohci.c | 4 +
16951 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
16952 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
16953 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
16954 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
16955 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
16956 drivers/hid/hid-wiimote-debug.c | 2 +-
16957 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
16958 drivers/iommu/Kconfig | 1 +
16959 drivers/iommu/amd_iommu.c | 14 +-
16960 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
16961 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
16962 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
16963 drivers/isdn/hisax/config.c | 2 +-
16964 drivers/isdn/hisax/hfc_pci.c | 2 +-
16965 drivers/isdn/hisax/hfc_sx.c | 2 +-
16966 drivers/isdn/hisax/q931.c | 6 +-
16967 drivers/isdn/i4l/isdn_concap.c | 6 +-
16968 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
16969 drivers/md/bcache/Kconfig | 1 +
16970 drivers/md/raid5.c | 8 +
16971 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
16972 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
16973 drivers/media/platform/vivid/vivid-osd.c | 1 +
16974 drivers/media/radio/radio-cadet.c | 5 +-
16975 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
16976 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
16977 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
16978 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
16979 drivers/message/fusion/mptbase.c | 9 +
16980 drivers/misc/sgi-xp/xp_main.c | 12 +-
16981 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
16982 drivers/net/ppp/pppoe.c | 14 +-
16983 drivers/net/ppp/pptp.c | 6 +
16984 drivers/net/slip/slhc.c | 3 +
16985 drivers/net/wan/lmc/lmc_media.c | 97 +-
16986 drivers/net/wan/x25_asy.c | 6 +-
16987 drivers/net/wan/z85230.c | 24 +-
16988 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
16989 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
16990 drivers/pci/pci-sysfs.c | 2 +-
16991 drivers/pci/proc.c | 9 +
16992 drivers/platform/x86/asus-wmi.c | 12 +
16993 drivers/rtc/rtc-dev.c | 3 +
16994 drivers/scsi/bfa/bfa_fcs.c | 19 +-
16995 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
16996 drivers/scsi/bfa/bfa_modules.h | 12 +-
16997 drivers/scsi/hpsa.h | 40 +-
16998 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
16999 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
17000 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
17001 drivers/target/target_core_sbc.c | 17 +-
17002 drivers/target/target_core_transport.c | 14 +-
17003 drivers/tty/serial/uartlite.c | 4 +-
17004 drivers/tty/sysrq.c | 2 +-
17005 drivers/tty/vt/keyboard.c | 22 +-
17006 drivers/uio/uio.c | 6 +-
17007 drivers/usb/core/hub.c | 5 +
17008 drivers/usb/gadget/function/f_uac1.c | 1 +
17009 drivers/usb/gadget/function/u_uac1.c | 1 +
17010 drivers/usb/host/hwa-hc.c | 9 +-
17011 drivers/usb/usbip/vhci_sysfs.c | 2 +-
17012 drivers/video/fbdev/arcfb.c | 2 +-
17013 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
17014 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
17015 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
17016 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
17017 drivers/xen/xenfs/xenstored.c | 5 +
17018 firmware/Makefile | 2 +
17019 firmware/WHENCE | 20 +-
17020 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
17021 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
17022 fs/9p/vfs_inode.c | 4 +-
17023 fs/attr.c | 1 +
17024 fs/autofs4/waitq.c | 9 +
17025 fs/binfmt_aout.c | 7 +
17026 fs/binfmt_elf.c | 50 +-
17027 fs/compat.c | 20 +-
17028 fs/coredump.c | 17 +-
17029 fs/dcache.c | 3 +
17030 fs/debugfs/inode.c | 11 +-
17031 fs/exec.c | 219 +-
17032 fs/ext2/balloc.c | 4 +-
17033 fs/ext2/super.c | 8 +-
17034 fs/ext4/balloc.c | 4 +-
17035 fs/fcntl.c | 4 +
17036 fs/fhandle.c | 3 +-
17037 fs/file.c | 4 +
17038 fs/filesystems.c | 4 +
17039 fs/fs_struct.c | 20 +-
17040 fs/hugetlbfs/inode.c | 5 +-
17041 fs/inode.c | 8 +-
17042 fs/kernfs/dir.c | 6 +
17043 fs/mount.h | 4 +-
17044 fs/namei.c | 286 +-
17045 fs/namespace.c | 24 +
17046 fs/nfsd/nfscache.c | 2 +-
17047 fs/open.c | 38 +
17048 fs/overlayfs/inode.c | 11 +-
17049 fs/overlayfs/super.c | 6 +-
17050 fs/pipe.c | 2 +-
17051 fs/posix_acl.c | 15 +-
17052 fs/proc/Kconfig | 10 +-
17053 fs/proc/array.c | 69 +-
17054 fs/proc/base.c | 186 +-
17055 fs/proc/cmdline.c | 4 +
17056 fs/proc/devices.c | 4 +
17057 fs/proc/fd.c | 17 +-
17058 fs/proc/generic.c | 64 +
17059 fs/proc/inode.c | 17 +
17060 fs/proc/internal.h | 11 +-
17061 fs/proc/interrupts.c | 4 +
17062 fs/proc/kcore.c | 3 +
17063 fs/proc/meminfo.c | 7 +-
17064 fs/proc/namespaces.c | 4 +-
17065 fs/proc/proc_net.c | 31 +
17066 fs/proc/proc_sysctl.c | 52 +-
17067 fs/proc/root.c | 8 +
17068 fs/proc/stat.c | 69 +-
17069 fs/proc/task_mmu.c | 66 +-
17070 fs/readdir.c | 19 +
17071 fs/reiserfs/item_ops.c | 24 +-
17072 fs/reiserfs/super.c | 4 +
17073 fs/select.c | 2 +
17074 fs/seq_file.c | 30 +-
17075 fs/splice.c | 8 +
17076 fs/stat.c | 20 +-
17077 fs/sysfs/dir.c | 30 +-
17078 fs/sysv/inode.c | 11 +-
17079 fs/utimes.c | 7 +
17080 fs/xattr.c | 26 +-
17081 grsecurity/Kconfig | 1182 ++++
17082 grsecurity/Makefile | 54 +
17083 grsecurity/gracl.c | 2757 +++++++++
17084 grsecurity/gracl_alloc.c | 105 +
17085 grsecurity/gracl_cap.c | 127 +
17086 grsecurity/gracl_compat.c | 269 +
17087 grsecurity/gracl_fs.c | 448 ++
17088 grsecurity/gracl_ip.c | 386 ++
17089 grsecurity/gracl_learn.c | 207 +
17090 grsecurity/gracl_policy.c | 1786 ++++++
17091 grsecurity/gracl_res.c | 68 +
17092 grsecurity/gracl_segv.c | 304 +
17093 grsecurity/gracl_shm.c | 40 +
17094 grsecurity/grsec_chdir.c | 19 +
17095 grsecurity/grsec_chroot.c | 467 ++
17096 grsecurity/grsec_disabled.c | 445 ++
17097 grsecurity/grsec_exec.c | 189 +
17098 grsecurity/grsec_fifo.c | 26 +
17099 grsecurity/grsec_fork.c | 23 +
17100 grsecurity/grsec_init.c | 290 +
17101 grsecurity/grsec_ipc.c | 48 +
17102 grsecurity/grsec_link.c | 65 +
17103 grsecurity/grsec_log.c | 340 +
17104 grsecurity/grsec_mem.c | 48 +
17105 grsecurity/grsec_mount.c | 65 +
17106 grsecurity/grsec_pax.c | 47 +
17107 grsecurity/grsec_proc.c | 20 +
17108 grsecurity/grsec_ptrace.c | 30 +
17109 grsecurity/grsec_sig.c | 236 +
17110 grsecurity/grsec_sock.c | 244 +
17111 grsecurity/grsec_sysctl.c | 488 ++
17112 grsecurity/grsec_time.c | 16 +
17113 grsecurity/grsec_tpe.c | 78 +
17114 grsecurity/grsec_usb.c | 15 +
17115 grsecurity/grsum.c | 64 +
17116 include/linux/binfmts.h | 5 +-
17117 include/linux/bitops.h | 2 +-
17118 include/linux/capability.h | 13 +
17119 include/linux/compiler-gcc.h | 5 +
17120 include/linux/compiler.h | 8 +
17121 include/linux/cred.h | 8 +-
17122 include/linux/dcache.h | 5 +-
17123 include/linux/fs.h | 24 +-
17124 include/linux/fs_struct.h | 2 +-
17125 include/linux/fsnotify.h | 6 +
17126 include/linux/gracl.h | 342 +
17127 include/linux/gracl_compat.h | 156 +
17128 include/linux/gralloc.h | 9 +
17129 include/linux/grdefs.h | 140 +
17130 include/linux/grinternal.h | 230 +
17131 include/linux/grmsg.h | 118 +
17132 include/linux/grsecurity.h | 255 +
17133 include/linux/grsock.h | 19 +
17134 include/linux/ipc.h | 2 +-
17135 include/linux/ipc_namespace.h | 2 +-
17136 include/linux/kallsyms.h | 18 +-
17137 include/linux/kmod.h | 5 +
17138 include/linux/kobject.h | 2 +-
17139 include/linux/lsm_hooks.h | 4 +-
17140 include/linux/mm.h | 12 +
17141 include/linux/mm_types.h | 4 +-
17142 include/linux/module.h | 5 +-
17143 include/linux/mount.h | 2 +-
17144 include/linux/msg.h | 2 +-
17145 include/linux/netfilter/xt_gradm.h | 9 +
17146 include/linux/path.h | 4 +-
17147 include/linux/perf_event.h | 13 +-
17148 include/linux/pid_namespace.h | 2 +-
17149 include/linux/printk.h | 2 +-
17150 include/linux/proc_fs.h | 22 +-
17151 include/linux/proc_ns.h | 2 +-
17152 include/linux/ptrace.h | 24 +-
17153 include/linux/random.h | 2 +-
17154 include/linux/rbtree_augmented.h | 4 +-
17155 include/linux/scatterlist.h | 12 +-
17156 include/linux/sched.h | 114 +-
17157 include/linux/security.h | 1 +
17158 include/linux/sem.h | 2 +-
17159 include/linux/seq_file.h | 5 +
17160 include/linux/shm.h | 6 +-
17161 include/linux/skbuff.h | 3 +
17162 include/linux/slab.h | 9 -
17163 include/linux/sysctl.h | 8 +-
17164 include/linux/thread_info.h | 6 +-
17165 include/linux/tty.h | 2 +-
17166 include/linux/tty_driver.h | 4 +-
17167 include/linux/uidgid.h | 5 +
17168 include/linux/user_namespace.h | 2 +-
17169 include/linux/utsname.h | 2 +-
17170 include/linux/vermagic.h | 16 +-
17171 include/linux/vmalloc.h | 20 +-
17172 include/net/af_unix.h | 2 +-
17173 include/net/dst.h | 33 +
17174 include/net/ip.h | 2 +-
17175 include/net/neighbour.h | 2 +-
17176 include/net/net_namespace.h | 2 +-
17177 include/net/sock.h | 4 +-
17178 include/target/target_core_base.h | 2 +-
17179 include/trace/events/fs.h | 53 +
17180 include/uapi/linux/personality.h | 1 +
17181 init/Kconfig | 4 +-
17182 init/main.c | 35 +-
17183 ipc/mqueue.c | 1 +
17184 ipc/msg.c | 3 +-
17185 ipc/sem.c | 3 +-
17186 ipc/shm.c | 26 +-
17187 ipc/util.c | 6 +
17188 kernel/auditsc.c | 2 +-
17189 kernel/bpf/syscall.c | 8 +-
17190 kernel/capability.c | 41 +-
17191 kernel/cgroup.c | 5 +-
17192 kernel/compat.c | 1 +
17193 kernel/configs.c | 11 +
17194 kernel/cred.c | 112 +-
17195 kernel/events/core.c | 16 +-
17196 kernel/exit.c | 10 +-
17197 kernel/fork.c | 86 +-
17198 kernel/futex.c | 6 +-
17199 kernel/futex_compat.c | 2 +-
17200 kernel/kallsyms.c | 9 +
17201 kernel/kcmp.c | 8 +-
17202 kernel/kexec_core.c | 2 +-
17203 kernel/kmod.c | 95 +-
17204 kernel/kprobes.c | 7 +-
17205 kernel/ksysfs.c | 2 +
17206 kernel/locking/lockdep_proc.c | 10 +-
17207 kernel/module.c | 108 +-
17208 kernel/panic.c | 4 +-
17209 kernel/pid.c | 23 +-
17210 kernel/power/Kconfig | 2 +
17211 kernel/printk/printk.c | 20 +-
17212 kernel/ptrace.c | 56 +-
17213 kernel/resource.c | 10 +
17214 kernel/sched/core.c | 11 +-
17215 kernel/signal.c | 37 +-
17216 kernel/sys.c | 64 +-
17217 kernel/sysctl.c | 172 +-
17218 kernel/taskstats.c | 6 +
17219 kernel/time/posix-timers.c | 8 +
17220 kernel/time/time.c | 5 +
17221 kernel/time/timekeeping.c | 3 +
17222 kernel/time/timer_list.c | 13 +-
17223 kernel/time/timer_stats.c | 10 +-
17224 kernel/trace/Kconfig | 2 +
17225 kernel/trace/trace_syscalls.c | 8 +
17226 kernel/user_namespace.c | 15 +
17227 lib/Kconfig.debug | 13 +-
17228 lib/Kconfig.kasan | 2 +-
17229 lib/is_single_threaded.c | 3 +
17230 lib/list_debug.c | 65 +-
17231 lib/nlattr.c | 2 +
17232 lib/rbtree.c | 4 +-
17233 lib/vsprintf.c | 39 +-
17234 localversion-grsec | 1 +
17235 mm/Kconfig | 8 +-
17236 mm/Kconfig.debug | 1 +
17237 mm/filemap.c | 1 +
17238 mm/kmemleak.c | 4 +-
17239 mm/memory.c | 2 +-
17240 mm/mempolicy.c | 12 +-
17241 mm/migrate.c | 3 +-
17242 mm/mlock.c | 6 +-
17243 mm/mmap.c | 93 +-
17244 mm/mprotect.c | 8 +
17245 mm/oom_kill.c | 28 +-
17246 mm/page_alloc.c | 2 +-
17247 mm/process_vm_access.c | 8 +-
17248 mm/shmem.c | 36 +-
17249 mm/slab.c | 14 +-
17250 mm/slab_common.c | 2 +-
17251 mm/slob.c | 12 +
17252 mm/slub.c | 33 +-
17253 mm/util.c | 3 +
17254 mm/vmalloc.c | 129 +-
17255 mm/vmstat.c | 29 +-
17256 net/appletalk/atalk_proc.c | 2 +-
17257 net/atm/lec.c | 6 +-
17258 net/atm/mpoa_caches.c | 42 +-
17259 net/bluetooth/sco.c | 3 +
17260 net/can/bcm.c | 2 +-
17261 net/can/proc.c | 2 +-
17262 net/core/dev_ioctl.c | 7 +-
17263 net/core/filter.c | 8 +-
17264 net/core/net-procfs.c | 17 +-
17265 net/core/pktgen.c | 2 +-
17266 net/core/sock.c | 3 +-
17267 net/core/sysctl_net_core.c | 2 +-
17268 net/decnet/dn_dev.c | 2 +-
17269 net/ipv4/devinet.c | 6 +-
17270 net/ipv4/inet_hashtables.c | 4 +
17271 net/ipv4/ip_input.c | 7 +
17272 net/ipv4/ip_sockglue.c | 3 +-
17273 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
17274 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
17275 net/ipv4/route.c | 6 +-
17276 net/ipv4/tcp_input.c | 4 +-
17277 net/ipv4/tcp_ipv4.c | 29 +-
17278 net/ipv4/tcp_minisocks.c | 9 +-
17279 net/ipv4/tcp_timer.c | 11 +
17280 net/ipv4/udp.c | 24 +
17281 net/ipv6/addrconf.c | 13 +-
17282 net/ipv6/proc.c | 2 +-
17283 net/ipv6/tcp_ipv6.c | 26 +-
17284 net/ipv6/udp.c | 7 +
17285 net/ipx/ipx_proc.c | 2 +-
17286 net/irda/irproc.c | 2 +-
17287 net/llc/llc_proc.c | 2 +-
17288 net/netfilter/Kconfig | 10 +
17289 net/netfilter/Makefile | 1 +
17290 net/netfilter/nf_conntrack_core.c | 8 +
17291 net/netfilter/xt_gradm.c | 51 +
17292 net/netfilter/xt_hashlimit.c | 4 +-
17293 net/netfilter/xt_recent.c | 2 +-
17294 net/sched/sch_api.c | 2 +-
17295 net/sctp/socket.c | 4 +-
17296 net/socket.c | 75 +-
17297 net/sunrpc/Kconfig | 1 +
17298 net/sunrpc/cache.c | 2 +-
17299 net/sunrpc/stats.c | 2 +-
17300 net/sysctl_net.c | 2 +-
17301 net/unix/af_unix.c | 52 +-
17302 net/vmw_vsock/vmci_transport_notify.c | 30 +-
17303 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
17304 net/x25/sysctl_net_x25.c | 2 +-
17305 net/x25/x25_proc.c | 2 +-
17306 scripts/package/Makefile | 2 +-
17307 scripts/package/mkspec | 41 +-
17308 security/Kconfig | 369 +-
17309 security/apparmor/file.c | 4 +-
17310 security/apparmor/lsm.c | 8 +-
17311 security/commoncap.c | 36 +-
17312 security/min_addr.c | 2 +
17313 security/smack/smack_lsm.c | 8 +-
17314 security/tomoyo/file.c | 12 +-
17315 security/tomoyo/mount.c | 4 +
17316 security/tomoyo/tomoyo.c | 20 +-
17317 security/yama/Kconfig | 2 +-
17318 security/yama/yama_lsm.c | 4 +-
17319 sound/synth/emux/emux_seq.c | 14 +-
17320 sound/usb/line6/driver.c | 40 +-
17321 sound/usb/line6/toneport.c | 12 +-
17322 tools/gcc/.gitignore | 1 +
17323 tools/gcc/Makefile | 12 +
17324 tools/gcc/gen-random-seed.sh | 8 +
17325 tools/gcc/randomize_layout_plugin.c | 930 +++
17326 tools/gcc/size_overflow_plugin/.gitignore | 1 +
17327 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
17328 511 files changed, 32631 insertions(+), 3196 deletions(-)
17329
17330 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
17331 Author: Brad Spengler <spender@grsecurity.net>
17332 Date: Tue Dec 15 14:31:49 2015 -0500
17333
17334 Update to pax-linux-4.3.3-test11.patch:
17335 - fixed a few compile regressions with the recent plugin changes, reported by spender
17336 - updated the size overflow hash table
17337
17338 tools/gcc/latent_entropy_plugin.c | 2 +-
17339 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
17340 tools/gcc/stackleak_plugin.c | 2 +-
17341 tools/gcc/structleak_plugin.c | 6 +--
17342 4 files changed, 60 insertions(+), 16 deletions(-)
17343
17344 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
17345 Author: Brad Spengler <spender@grsecurity.net>
17346 Date: Tue Dec 15 11:50:24 2015 -0500
17347
17348 Apply structleak ICE fix for gcc < 4.9
17349
17350 tools/gcc/structleak_plugin.c | 4 ++++
17351 1 files changed, 4 insertions(+), 0 deletions(-)
17352
17353 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
17354 Author: Brad Spengler <spender@grsecurity.net>
17355 Date: Tue Dec 15 07:57:06 2015 -0500
17356
17357 Update to pax-linux-4.3.1-test10.patch:
17358 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
17359 - Emese regenerated the size overflow hash tables for 4.3
17360 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
17361 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
17362
17363 arch/x86/entry/entry_64.S | 2 +-
17364 arch/x86/entry/entry_64_compat.S | 15 +-
17365 scripts/package/builddeb | 2 +-
17366 tools/gcc/initify_plugin.c | 11 +-
17367 tools/gcc/latent_entropy_plugin.c | 20 +-
17368 .../disable_size_overflow_hash.data | 4 +
17369 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
17370 tools/gcc/stackleak_plugin.c | 26 +-
17371 tools/gcc/structleak_plugin.c | 21 +-
17372 9 files changed, 3079 insertions(+), 2367 deletions(-)
17373
17374 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
17375 Merge: b5847e6 3548341
17376 Author: Brad Spengler <spender@grsecurity.net>
17377 Date: Tue Dec 15 07:47:56 2015 -0500
17378
17379 Merge branch 'linux-4.3.y' into pax-4_3
17380
17381 Conflicts:
17382 net/unix/af_unix.c
17383
17384 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
17385 Author: Brad Spengler <spender@grsecurity.net>
17386 Date: Wed Dec 9 23:11:36 2015 -0500
17387
17388 Update to pax-linux-4.3.1-test9.patch:
17389 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
17390 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
17391 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
17392 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
17393 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
17394 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
17395 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
17396
17397 Makefile | 6 +
17398 arch/x86/include/asm/compat.h | 4 +
17399 arch/x86/include/asm/dma.h | 2 +
17400 arch/x86/include/asm/pmem.h | 2 +-
17401 arch/x86/include/asm/uaccess.h | 20 +-
17402 arch/x86/kernel/apic/vector.c | 6 +-
17403 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
17404 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
17405 arch/x86/kernel/head_64.S | 1 -
17406 arch/x86/kvm/i8259.c | 10 +-
17407 arch/x86/kvm/ioapic.c | 2 +
17408 arch/x86/kvm/x86.c | 2 +
17409 arch/x86/lib/usercopy_64.c | 2 +-
17410 arch/x86/mm/mpx.c | 4 +-
17411 arch/x86/mm/pageattr.c | 7 +
17412 drivers/base/devres.c | 4 +-
17413 drivers/base/power/runtime.c | 6 +-
17414 drivers/base/regmap/regmap.c | 4 +-
17415 drivers/block/drbd/drbd_receiver.c | 4 +-
17416 drivers/block/drbd/drbd_worker.c | 6 +-
17417 drivers/char/virtio_console.c | 6 +-
17418 drivers/md/dm.c | 12 +-
17419 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
17420 drivers/net/macvtap.c | 4 +-
17421 drivers/video/fbdev/core/fbmem.c | 10 +-
17422 fs/compat.c | 3 +-
17423 fs/coredump.c | 2 +-
17424 fs/dcache.c | 13 +-
17425 fs/fhandle.c | 2 +-
17426 fs/file.c | 14 +-
17427 fs/fs-writeback.c | 11 +-
17428 fs/overlayfs/copy_up.c | 2 +-
17429 fs/readdir.c | 3 +-
17430 fs/super.c | 3 +-
17431 include/linux/compiler.h | 36 ++-
17432 include/linux/rcupdate.h | 8 +
17433 include/linux/sched.h | 4 +-
17434 include/linux/seqlock.h | 10 +
17435 include/linux/spinlock.h | 17 +-
17436 include/linux/srcu.h | 5 +-
17437 include/linux/syscalls.h | 2 +-
17438 include/linux/writeback.h | 3 +-
17439 include/uapi/linux/swab.h | 6 +-
17440 ipc/ipc_sysctl.c | 6 +
17441 kernel/exit.c | 25 +-
17442 kernel/resource.c | 4 +-
17443 kernel/signal.c | 12 +-
17444 kernel/user.c | 2 +-
17445 kernel/workqueue.c | 6 +-
17446 lib/rhashtable.c | 4 +-
17447 net/compat.c | 2 +-
17448 net/ipv4/xfrm4_mode_transport.c | 2 +-
17449 security/keys/internal.h | 8 +-
17450 security/keys/keyring.c | 4 -
17451 sound/core/seq/seq_clientmgr.c | 8 +-
17452 sound/core/seq/seq_compat.c | 2 +-
17453 sound/core/seq/seq_memory.c | 6 +-
17454 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
17455 tools/gcc/gcc-common.h | 1 +
17456 tools/gcc/initify_plugin.c | 33 ++-
17457 .../disable_size_overflow_hash.data | 1 +
17458 .../size_overflow_plugin/size_overflow_hash.data | 1 -
17459 62 files changed, 708 insertions(+), 140 deletions(-)
17460
17461 commit f2634c2f6995f4231616f24ed016f890c701f939
17462 Merge: 1241bff 5f8b236
17463 Author: Brad Spengler <spender@grsecurity.net>
17464 Date: Wed Dec 9 21:50:47 2015 -0500
17465
17466 Merge branch 'linux-4.3.y' into pax-4_3
17467
17468 Conflicts:
17469 arch/x86/kernel/fpu/xstate.c
17470 arch/x86/kernel/head_64.S
17471
17472 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
17473 Author: Brad Spengler <spender@grsecurity.net>
17474 Date: Sun Dec 6 08:44:56 2015 -0500
17475
17476 Update to pax-linux-4.3-test8.patch:
17477 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
17478 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
17479 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
17480 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
17481
17482 Makefile | 5 +++
17483 drivers/md/md.c | 5 ++-
17484 drivers/md/raid1.c | 2 +-
17485 fs/proc/task_mmu.c | 3 ++
17486 .../disable_size_overflow_hash.data | 4 ++-
17487 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
17488 .../size_overflow_plugin/size_overflow_hash.data | 2 -
17489 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
17490 8 files changed, 43 insertions(+), 12 deletions(-)
17491
17492 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
17493 Author: Brad Spengler <spender@grsecurity.net>
17494 Date: Fri Dec 4 14:24:12 2015 -0500
17495
17496 Initial import of pax-linux-4.3-test7.patch
17497
17498 Documentation/dontdiff | 47 +-
17499 Documentation/kbuild/makefiles.txt | 39 +-
17500 Documentation/kernel-parameters.txt | 28 +
17501 Makefile | 108 +-
17502 arch/alpha/include/asm/atomic.h | 10 +
17503 arch/alpha/include/asm/elf.h | 7 +
17504 arch/alpha/include/asm/pgalloc.h | 6 +
17505 arch/alpha/include/asm/pgtable.h | 11 +
17506 arch/alpha/kernel/module.c | 2 +-
17507 arch/alpha/kernel/osf_sys.c | 8 +-
17508 arch/alpha/mm/fault.c | 141 +-
17509 arch/arm/Kconfig | 2 +-
17510 arch/arm/include/asm/atomic.h | 320 +-
17511 arch/arm/include/asm/cache.h | 5 +-
17512 arch/arm/include/asm/cacheflush.h | 2 +-
17513 arch/arm/include/asm/checksum.h | 14 +-
17514 arch/arm/include/asm/cmpxchg.h | 4 +
17515 arch/arm/include/asm/cpuidle.h | 2 +-
17516 arch/arm/include/asm/domain.h | 22 +-
17517 arch/arm/include/asm/elf.h | 9 +-
17518 arch/arm/include/asm/fncpy.h | 2 +
17519 arch/arm/include/asm/futex.h | 10 +
17520 arch/arm/include/asm/kmap_types.h | 2 +-
17521 arch/arm/include/asm/mach/dma.h | 2 +-
17522 arch/arm/include/asm/mach/map.h | 16 +-
17523 arch/arm/include/asm/outercache.h | 2 +-
17524 arch/arm/include/asm/page.h | 3 +-
17525 arch/arm/include/asm/pgalloc.h | 20 +
17526 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
17527 arch/arm/include/asm/pgtable-2level.h | 3 +
17528 arch/arm/include/asm/pgtable-3level.h | 3 +
17529 arch/arm/include/asm/pgtable.h | 54 +-
17530 arch/arm/include/asm/smp.h | 2 +-
17531 arch/arm/include/asm/tls.h | 3 +
17532 arch/arm/include/asm/uaccess.h | 79 +-
17533 arch/arm/include/uapi/asm/ptrace.h | 2 +-
17534 arch/arm/kernel/armksyms.c | 2 +-
17535 arch/arm/kernel/cpuidle.c | 2 +-
17536 arch/arm/kernel/entry-armv.S | 109 +-
17537 arch/arm/kernel/entry-common.S | 40 +-
17538 arch/arm/kernel/entry-header.S | 55 +
17539 arch/arm/kernel/fiq.c | 3 +
17540 arch/arm/kernel/module-plts.c | 7 +-
17541 arch/arm/kernel/module.c | 38 +-
17542 arch/arm/kernel/patch.c | 2 +
17543 arch/arm/kernel/process.c | 90 +-
17544 arch/arm/kernel/reboot.c | 1 +
17545 arch/arm/kernel/setup.c | 20 +-
17546 arch/arm/kernel/signal.c | 35 +-
17547 arch/arm/kernel/smp.c | 2 +-
17548 arch/arm/kernel/tcm.c | 4 +-
17549 arch/arm/kernel/vmlinux.lds.S | 6 +-
17550 arch/arm/kvm/arm.c | 8 +-
17551 arch/arm/lib/copy_page.S | 1 +
17552 arch/arm/lib/csumpartialcopyuser.S | 4 +-
17553 arch/arm/lib/delay.c | 2 +-
17554 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
17555 arch/arm/mach-exynos/suspend.c | 6 +-
17556 arch/arm/mach-mvebu/coherency.c | 4 +-
17557 arch/arm/mach-omap2/board-n8x0.c | 2 +-
17558 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
17559 arch/arm/mach-omap2/omap-smp.c | 1 +
17560 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
17561 arch/arm/mach-omap2/omap_device.c | 4 +-
17562 arch/arm/mach-omap2/omap_device.h | 4 +-
17563 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
17564 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
17565 arch/arm/mach-omap2/wd_timer.c | 6 +-
17566 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
17567 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
17568 arch/arm/mach-tegra/irq.c | 1 +
17569 arch/arm/mach-ux500/pm.c | 1 +
17570 arch/arm/mach-zynq/platsmp.c | 1 +
17571 arch/arm/mm/Kconfig | 6 +-
17572 arch/arm/mm/alignment.c | 8 +
17573 arch/arm/mm/cache-l2x0.c | 2 +-
17574 arch/arm/mm/context.c | 10 +-
17575 arch/arm/mm/fault.c | 146 +
17576 arch/arm/mm/fault.h | 12 +
17577 arch/arm/mm/init.c | 39 +
17578 arch/arm/mm/ioremap.c | 4 +-
17579 arch/arm/mm/mmap.c | 30 +-
17580 arch/arm/mm/mmu.c | 162 +-
17581 arch/arm/net/bpf_jit_32.c | 3 +
17582 arch/arm/plat-iop/setup.c | 2 +-
17583 arch/arm/plat-omap/sram.c | 2 +
17584 arch/arm64/include/asm/atomic.h | 10 +
17585 arch/arm64/include/asm/percpu.h | 8 +-
17586 arch/arm64/include/asm/pgalloc.h | 5 +
17587 arch/arm64/include/asm/uaccess.h | 1 +
17588 arch/arm64/mm/dma-mapping.c | 2 +-
17589 arch/avr32/include/asm/elf.h | 8 +-
17590 arch/avr32/include/asm/kmap_types.h | 4 +-
17591 arch/avr32/mm/fault.c | 27 +
17592 arch/frv/include/asm/atomic.h | 10 +
17593 arch/frv/include/asm/kmap_types.h | 2 +-
17594 arch/frv/mm/elf-fdpic.c | 3 +-
17595 arch/ia64/Makefile | 1 +
17596 arch/ia64/include/asm/atomic.h | 10 +
17597 arch/ia64/include/asm/elf.h | 7 +
17598 arch/ia64/include/asm/pgalloc.h | 12 +
17599 arch/ia64/include/asm/pgtable.h | 13 +-
17600 arch/ia64/include/asm/spinlock.h | 2 +-
17601 arch/ia64/include/asm/uaccess.h | 27 +-
17602 arch/ia64/kernel/module.c | 45 +-
17603 arch/ia64/kernel/palinfo.c | 2 +-
17604 arch/ia64/kernel/sys_ia64.c | 7 +
17605 arch/ia64/kernel/vmlinux.lds.S | 2 +-
17606 arch/ia64/mm/fault.c | 32 +-
17607 arch/ia64/mm/init.c | 15 +-
17608 arch/m32r/lib/usercopy.c | 6 +
17609 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
17610 arch/mips/include/asm/atomic.h | 368 +-
17611 arch/mips/include/asm/elf.h | 7 +
17612 arch/mips/include/asm/exec.h | 2 +-
17613 arch/mips/include/asm/hw_irq.h | 2 +-
17614 arch/mips/include/asm/local.h | 57 +
17615 arch/mips/include/asm/page.h | 2 +-
17616 arch/mips/include/asm/pgalloc.h | 5 +
17617 arch/mips/include/asm/pgtable.h | 3 +
17618 arch/mips/include/asm/uaccess.h | 1 +
17619 arch/mips/kernel/binfmt_elfn32.c | 7 +
17620 arch/mips/kernel/binfmt_elfo32.c | 7 +
17621 arch/mips/kernel/irq-gt641xx.c | 2 +-
17622 arch/mips/kernel/irq.c | 6 +-
17623 arch/mips/kernel/pm-cps.c | 2 +-
17624 arch/mips/kernel/process.c | 12 -
17625 arch/mips/kernel/sync-r4k.c | 24 +-
17626 arch/mips/kernel/traps.c | 13 +-
17627 arch/mips/mm/fault.c | 25 +
17628 arch/mips/mm/mmap.c | 51 +-
17629 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
17630 arch/mips/sni/rm200.c | 2 +-
17631 arch/mips/vr41xx/common/icu.c | 2 +-
17632 arch/mips/vr41xx/common/irq.c | 4 +-
17633 arch/parisc/include/asm/atomic.h | 10 +
17634 arch/parisc/include/asm/elf.h | 7 +
17635 arch/parisc/include/asm/pgalloc.h | 6 +
17636 arch/parisc/include/asm/pgtable.h | 11 +
17637 arch/parisc/include/asm/uaccess.h | 4 +-
17638 arch/parisc/kernel/module.c | 50 +-
17639 arch/parisc/kernel/sys_parisc.c | 15 +
17640 arch/parisc/kernel/traps.c | 4 +-
17641 arch/parisc/mm/fault.c | 140 +-
17642 arch/powerpc/include/asm/atomic.h | 329 +-
17643 arch/powerpc/include/asm/elf.h | 12 +
17644 arch/powerpc/include/asm/exec.h | 2 +-
17645 arch/powerpc/include/asm/kmap_types.h | 2 +-
17646 arch/powerpc/include/asm/local.h | 46 +
17647 arch/powerpc/include/asm/mman.h | 2 +-
17648 arch/powerpc/include/asm/page.h | 8 +-
17649 arch/powerpc/include/asm/page_64.h | 7 +-
17650 arch/powerpc/include/asm/pgalloc-64.h | 7 +
17651 arch/powerpc/include/asm/pgtable.h | 1 +
17652 arch/powerpc/include/asm/pte-hash32.h | 1 +
17653 arch/powerpc/include/asm/reg.h | 1 +
17654 arch/powerpc/include/asm/smp.h | 2 +-
17655 arch/powerpc/include/asm/spinlock.h | 42 +-
17656 arch/powerpc/include/asm/uaccess.h | 141 +-
17657 arch/powerpc/kernel/Makefile | 5 +
17658 arch/powerpc/kernel/exceptions-64e.S | 4 +-
17659 arch/powerpc/kernel/exceptions-64s.S | 2 +-
17660 arch/powerpc/kernel/module_32.c | 15 +-
17661 arch/powerpc/kernel/process.c | 46 -
17662 arch/powerpc/kernel/signal_32.c | 2 +-
17663 arch/powerpc/kernel/signal_64.c | 2 +-
17664 arch/powerpc/kernel/traps.c | 21 +
17665 arch/powerpc/kernel/vdso.c | 5 +-
17666 arch/powerpc/lib/usercopy_64.c | 18 -
17667 arch/powerpc/mm/fault.c | 56 +-
17668 arch/powerpc/mm/mmap.c | 16 +
17669 arch/powerpc/mm/slice.c | 13 +-
17670 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
17671 arch/s390/include/asm/atomic.h | 10 +
17672 arch/s390/include/asm/elf.h | 7 +
17673 arch/s390/include/asm/exec.h | 2 +-
17674 arch/s390/include/asm/uaccess.h | 13 +-
17675 arch/s390/kernel/module.c | 22 +-
17676 arch/s390/kernel/process.c | 24 -
17677 arch/s390/mm/mmap.c | 16 +
17678 arch/score/include/asm/exec.h | 2 +-
17679 arch/score/kernel/process.c | 5 -
17680 arch/sh/mm/mmap.c | 22 +-
17681 arch/sparc/include/asm/atomic_64.h | 110 +-
17682 arch/sparc/include/asm/cache.h | 2 +-
17683 arch/sparc/include/asm/elf_32.h | 7 +
17684 arch/sparc/include/asm/elf_64.h | 7 +
17685 arch/sparc/include/asm/pgalloc_32.h | 1 +
17686 arch/sparc/include/asm/pgalloc_64.h | 1 +
17687 arch/sparc/include/asm/pgtable.h | 4 +
17688 arch/sparc/include/asm/pgtable_32.h | 15 +-
17689 arch/sparc/include/asm/pgtsrmmu.h | 5 +
17690 arch/sparc/include/asm/setup.h | 4 +-
17691 arch/sparc/include/asm/spinlock_64.h | 35 +-
17692 arch/sparc/include/asm/thread_info_32.h | 1 +
17693 arch/sparc/include/asm/thread_info_64.h | 2 +
17694 arch/sparc/include/asm/uaccess.h | 1 +
17695 arch/sparc/include/asm/uaccess_32.h | 28 +-
17696 arch/sparc/include/asm/uaccess_64.h | 24 +-
17697 arch/sparc/kernel/Makefile | 2 +-
17698 arch/sparc/kernel/prom_common.c | 2 +-
17699 arch/sparc/kernel/smp_64.c | 8 +-
17700 arch/sparc/kernel/sys_sparc_32.c | 2 +-
17701 arch/sparc/kernel/sys_sparc_64.c | 52 +-
17702 arch/sparc/kernel/traps_64.c | 27 +-
17703 arch/sparc/lib/Makefile | 2 +-
17704 arch/sparc/lib/atomic_64.S | 57 +-
17705 arch/sparc/lib/ksyms.c | 6 +-
17706 arch/sparc/mm/Makefile | 2 +-
17707 arch/sparc/mm/fault_32.c | 292 +
17708 arch/sparc/mm/fault_64.c | 486 +
17709 arch/sparc/mm/hugetlbpage.c | 22 +-
17710 arch/sparc/mm/init_64.c | 10 +-
17711 arch/tile/include/asm/atomic_64.h | 10 +
17712 arch/tile/include/asm/uaccess.h | 4 +-
17713 arch/um/Makefile | 4 +
17714 arch/um/include/asm/kmap_types.h | 2 +-
17715 arch/um/include/asm/page.h | 3 +
17716 arch/um/include/asm/pgtable-3level.h | 1 +
17717 arch/um/kernel/process.c | 16 -
17718 arch/x86/Kconfig | 15 +-
17719 arch/x86/Kconfig.cpu | 6 +-
17720 arch/x86/Kconfig.debug | 4 +-
17721 arch/x86/Makefile | 13 +-
17722 arch/x86/boot/Makefile | 3 +
17723 arch/x86/boot/bitops.h | 4 +-
17724 arch/x86/boot/boot.h | 2 +-
17725 arch/x86/boot/compressed/Makefile | 3 +
17726 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
17727 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
17728 arch/x86/boot/compressed/head_32.S | 4 +-
17729 arch/x86/boot/compressed/head_64.S | 12 +-
17730 arch/x86/boot/compressed/misc.c | 11 +-
17731 arch/x86/boot/cpucheck.c | 16 +-
17732 arch/x86/boot/header.S | 6 +-
17733 arch/x86/boot/memory.c | 2 +-
17734 arch/x86/boot/video-vesa.c | 1 +
17735 arch/x86/boot/video.c | 2 +-
17736 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
17737 arch/x86/crypto/aesni-intel_asm.S | 106 +-
17738 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
17739 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
17740 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
17741 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
17742 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
17743 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
17744 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
17745 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
17746 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
17747 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
17748 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
17749 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
17750 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
17751 arch/x86/crypto/sha256-avx-asm.S | 2 +
17752 arch/x86/crypto/sha256-avx2-asm.S | 2 +
17753 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
17754 arch/x86/crypto/sha512-avx-asm.S | 2 +
17755 arch/x86/crypto/sha512-avx2-asm.S | 2 +
17756 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
17757 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
17758 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
17759 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
17760 arch/x86/entry/calling.h | 86 +-
17761 arch/x86/entry/common.c | 13 +-
17762 arch/x86/entry/entry_32.S | 351 +-
17763 arch/x86/entry/entry_64.S | 619 +-
17764 arch/x86/entry/entry_64_compat.S | 159 +-
17765 arch/x86/entry/thunk_64.S | 2 +
17766 arch/x86/entry/vdso/Makefile | 2 +-
17767 arch/x86/entry/vdso/vdso2c.h | 8 +-
17768 arch/x86/entry/vdso/vma.c | 41 +-
17769 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
17770 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
17771 arch/x86/ia32/ia32_signal.c | 23 +-
17772 arch/x86/ia32/sys_ia32.c | 42 +-
17773 arch/x86/include/asm/alternative-asm.h | 43 +-
17774 arch/x86/include/asm/alternative.h | 4 +-
17775 arch/x86/include/asm/apic.h | 2 +-
17776 arch/x86/include/asm/apm.h | 4 +-
17777 arch/x86/include/asm/atomic.h | 230 +-
17778 arch/x86/include/asm/atomic64_32.h | 100 +
17779 arch/x86/include/asm/atomic64_64.h | 164 +-
17780 arch/x86/include/asm/bitops.h | 18 +-
17781 arch/x86/include/asm/boot.h | 2 +-
17782 arch/x86/include/asm/cache.h | 5 +-
17783 arch/x86/include/asm/checksum_32.h | 12 +-
17784 arch/x86/include/asm/cmpxchg.h | 39 +
17785 arch/x86/include/asm/compat.h | 2 +-
17786 arch/x86/include/asm/cpufeature.h | 17 +-
17787 arch/x86/include/asm/desc.h | 78 +-
17788 arch/x86/include/asm/desc_defs.h | 6 +
17789 arch/x86/include/asm/div64.h | 2 +-
17790 arch/x86/include/asm/elf.h | 33 +-
17791 arch/x86/include/asm/emergency-restart.h | 2 +-
17792 arch/x86/include/asm/fpu/internal.h | 42 +-
17793 arch/x86/include/asm/fpu/types.h | 6 +-
17794 arch/x86/include/asm/futex.h | 14 +-
17795 arch/x86/include/asm/hw_irq.h | 4 +-
17796 arch/x86/include/asm/i8259.h | 2 +-
17797 arch/x86/include/asm/io.h | 22 +-
17798 arch/x86/include/asm/irqflags.h | 5 +
17799 arch/x86/include/asm/kprobes.h | 9 +-
17800 arch/x86/include/asm/local.h | 106 +-
17801 arch/x86/include/asm/mman.h | 15 +
17802 arch/x86/include/asm/mmu.h | 14 +-
17803 arch/x86/include/asm/mmu_context.h | 114 +-
17804 arch/x86/include/asm/module.h | 17 +-
17805 arch/x86/include/asm/nmi.h | 19 +-
17806 arch/x86/include/asm/page.h | 1 +
17807 arch/x86/include/asm/page_32.h | 12 +-
17808 arch/x86/include/asm/page_64.h | 14 +-
17809 arch/x86/include/asm/paravirt.h | 46 +-
17810 arch/x86/include/asm/paravirt_types.h | 15 +-
17811 arch/x86/include/asm/pgalloc.h | 23 +
17812 arch/x86/include/asm/pgtable-2level.h | 2 +
17813 arch/x86/include/asm/pgtable-3level.h | 7 +
17814 arch/x86/include/asm/pgtable.h | 128 +-
17815 arch/x86/include/asm/pgtable_32.h | 14 +-
17816 arch/x86/include/asm/pgtable_32_types.h | 24 +-
17817 arch/x86/include/asm/pgtable_64.h | 23 +-
17818 arch/x86/include/asm/pgtable_64_types.h | 5 +
17819 arch/x86/include/asm/pgtable_types.h | 26 +-
17820 arch/x86/include/asm/preempt.h | 2 +-
17821 arch/x86/include/asm/processor.h | 57 +-
17822 arch/x86/include/asm/ptrace.h | 13 +-
17823 arch/x86/include/asm/realmode.h | 4 +-
17824 arch/x86/include/asm/reboot.h | 10 +-
17825 arch/x86/include/asm/rmwcc.h | 84 +-
17826 arch/x86/include/asm/rwsem.h | 60 +-
17827 arch/x86/include/asm/segment.h | 27 +-
17828 arch/x86/include/asm/smap.h | 43 +
17829 arch/x86/include/asm/smp.h | 14 +-
17830 arch/x86/include/asm/stackprotector.h | 4 +-
17831 arch/x86/include/asm/stacktrace.h | 32 +-
17832 arch/x86/include/asm/switch_to.h | 4 +-
17833 arch/x86/include/asm/sys_ia32.h | 6 +-
17834 arch/x86/include/asm/thread_info.h | 27 +-
17835 arch/x86/include/asm/tlbflush.h | 77 +-
17836 arch/x86/include/asm/uaccess.h | 192 +-
17837 arch/x86/include/asm/uaccess_32.h | 28 +-
17838 arch/x86/include/asm/uaccess_64.h | 169 +-
17839 arch/x86/include/asm/word-at-a-time.h | 2 +-
17840 arch/x86/include/asm/x86_init.h | 10 +-
17841 arch/x86/include/asm/xen/page.h | 2 +-
17842 arch/x86/include/uapi/asm/e820.h | 2 +-
17843 arch/x86/kernel/Makefile | 2 +-
17844 arch/x86/kernel/acpi/boot.c | 4 +-
17845 arch/x86/kernel/acpi/sleep.c | 4 +
17846 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
17847 arch/x86/kernel/alternative.c | 124 +-
17848 arch/x86/kernel/apic/apic.c | 4 +-
17849 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
17850 arch/x86/kernel/apic/apic_noop.c | 2 +-
17851 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
17852 arch/x86/kernel/apic/io_apic.c | 8 +-
17853 arch/x86/kernel/apic/msi.c | 2 +-
17854 arch/x86/kernel/apic/probe_32.c | 4 +-
17855 arch/x86/kernel/apic/vector.c | 4 +-
17856 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
17857 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
17858 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
17859 arch/x86/kernel/apm_32.c | 21 +-
17860 arch/x86/kernel/asm-offsets.c | 20 +
17861 arch/x86/kernel/asm-offsets_64.c | 1 +
17862 arch/x86/kernel/cpu/Makefile | 4 -
17863 arch/x86/kernel/cpu/amd.c | 2 +-
17864 arch/x86/kernel/cpu/bugs_64.c | 2 +
17865 arch/x86/kernel/cpu/common.c | 202 +-
17866 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
17867 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
17868 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
17869 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
17870 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
17871 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
17872 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
17873 arch/x86/kernel/cpu/perf_event.c | 10 +-
17874 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
17875 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
17876 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
17877 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
17878 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
17879 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
17880 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
17881 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
17882 arch/x86/kernel/crash_dump_64.c | 2 +-
17883 arch/x86/kernel/doublefault.c | 8 +-
17884 arch/x86/kernel/dumpstack.c | 24 +-
17885 arch/x86/kernel/dumpstack_32.c | 25 +-
17886 arch/x86/kernel/dumpstack_64.c | 62 +-
17887 arch/x86/kernel/e820.c | 4 +-
17888 arch/x86/kernel/early_printk.c | 1 +
17889 arch/x86/kernel/espfix_64.c | 44 +-
17890 arch/x86/kernel/fpu/core.c | 24 +-
17891 arch/x86/kernel/fpu/init.c | 40 +-
17892 arch/x86/kernel/fpu/regset.c | 22 +-
17893 arch/x86/kernel/fpu/signal.c | 20 +-
17894 arch/x86/kernel/fpu/xstate.c | 8 +-
17895 arch/x86/kernel/ftrace.c | 18 +-
17896 arch/x86/kernel/head64.c | 14 +-
17897 arch/x86/kernel/head_32.S | 235 +-
17898 arch/x86/kernel/head_64.S | 173 +-
17899 arch/x86/kernel/i386_ksyms_32.c | 12 +
17900 arch/x86/kernel/i8259.c | 10 +-
17901 arch/x86/kernel/io_delay.c | 2 +-
17902 arch/x86/kernel/ioport.c | 2 +-
17903 arch/x86/kernel/irq.c | 8 +-
17904 arch/x86/kernel/irq_32.c | 45 +-
17905 arch/x86/kernel/jump_label.c | 10 +-
17906 arch/x86/kernel/kgdb.c | 21 +-
17907 arch/x86/kernel/kprobes/core.c | 28 +-
17908 arch/x86/kernel/kprobes/opt.c | 16 +-
17909 arch/x86/kernel/ksysfs.c | 2 +-
17910 arch/x86/kernel/kvmclock.c | 20 +-
17911 arch/x86/kernel/ldt.c | 25 +
17912 arch/x86/kernel/livepatch.c | 12 +-
17913 arch/x86/kernel/machine_kexec_32.c | 6 +-
17914 arch/x86/kernel/mcount_64.S | 19 +-
17915 arch/x86/kernel/module.c | 78 +-
17916 arch/x86/kernel/msr.c | 2 +-
17917 arch/x86/kernel/nmi.c | 34 +-
17918 arch/x86/kernel/nmi_selftest.c | 4 +-
17919 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
17920 arch/x86/kernel/paravirt.c | 45 +-
17921 arch/x86/kernel/paravirt_patch_64.c | 8 +
17922 arch/x86/kernel/pci-calgary_64.c | 2 +-
17923 arch/x86/kernel/pci-iommu_table.c | 2 +-
17924 arch/x86/kernel/pci-swiotlb.c | 2 +-
17925 arch/x86/kernel/process.c | 80 +-
17926 arch/x86/kernel/process_32.c | 29 +-
17927 arch/x86/kernel/process_64.c | 14 +-
17928 arch/x86/kernel/ptrace.c | 20 +-
17929 arch/x86/kernel/pvclock.c | 8 +-
17930 arch/x86/kernel/reboot.c | 44 +-
17931 arch/x86/kernel/reboot_fixups_32.c | 2 +-
17932 arch/x86/kernel/relocate_kernel_64.S | 3 +-
17933 arch/x86/kernel/setup.c | 29 +-
17934 arch/x86/kernel/setup_percpu.c | 29 +-
17935 arch/x86/kernel/signal.c | 17 +-
17936 arch/x86/kernel/smp.c | 2 +-
17937 arch/x86/kernel/smpboot.c | 29 +-
17938 arch/x86/kernel/step.c | 6 +-
17939 arch/x86/kernel/sys_i386_32.c | 184 +
17940 arch/x86/kernel/sys_x86_64.c | 22 +-
17941 arch/x86/kernel/tboot.c | 14 +-
17942 arch/x86/kernel/time.c | 8 +-
17943 arch/x86/kernel/tls.c | 7 +-
17944 arch/x86/kernel/tracepoint.c | 4 +-
17945 arch/x86/kernel/traps.c | 53 +-
17946 arch/x86/kernel/tsc.c | 2 +-
17947 arch/x86/kernel/uprobes.c | 2 +-
17948 arch/x86/kernel/vm86_32.c | 6 +-
17949 arch/x86/kernel/vmlinux.lds.S | 153 +-
17950 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
17951 arch/x86/kernel/x86_init.c | 6 +-
17952 arch/x86/kvm/cpuid.c | 21 +-
17953 arch/x86/kvm/emulate.c | 2 +-
17954 arch/x86/kvm/lapic.c | 2 +-
17955 arch/x86/kvm/paging_tmpl.h | 2 +-
17956 arch/x86/kvm/svm.c | 10 +-
17957 arch/x86/kvm/vmx.c | 62 +-
17958 arch/x86/kvm/x86.c | 42 +-
17959 arch/x86/lguest/boot.c | 3 +-
17960 arch/x86/lib/atomic64_386_32.S | 164 +
17961 arch/x86/lib/atomic64_cx8_32.S | 98 +-
17962 arch/x86/lib/checksum_32.S | 99 +-
17963 arch/x86/lib/clear_page_64.S | 3 +
17964 arch/x86/lib/cmpxchg16b_emu.S | 3 +
17965 arch/x86/lib/copy_page_64.S | 14 +-
17966 arch/x86/lib/copy_user_64.S | 66 +-
17967 arch/x86/lib/csum-copy_64.S | 14 +-
17968 arch/x86/lib/csum-wrappers_64.c | 8 +-
17969 arch/x86/lib/getuser.S | 74 +-
17970 arch/x86/lib/insn.c | 8 +-
17971 arch/x86/lib/iomap_copy_64.S | 2 +
17972 arch/x86/lib/memcpy_64.S | 6 +
17973 arch/x86/lib/memmove_64.S | 3 +-
17974 arch/x86/lib/memset_64.S | 3 +
17975 arch/x86/lib/mmx_32.c | 243 +-
17976 arch/x86/lib/msr-reg.S | 2 +
17977 arch/x86/lib/putuser.S | 87 +-
17978 arch/x86/lib/rwsem.S | 6 +-
17979 arch/x86/lib/usercopy_32.c | 359 +-
17980 arch/x86/lib/usercopy_64.c | 20 +-
17981 arch/x86/math-emu/fpu_aux.c | 2 +-
17982 arch/x86/math-emu/fpu_entry.c | 4 +-
17983 arch/x86/math-emu/fpu_system.h | 2 +-
17984 arch/x86/mm/Makefile | 4 +
17985 arch/x86/mm/extable.c | 26 +-
17986 arch/x86/mm/fault.c | 570 +-
17987 arch/x86/mm/gup.c | 6 +-
17988 arch/x86/mm/highmem_32.c | 6 +
17989 arch/x86/mm/hugetlbpage.c | 24 +-
17990 arch/x86/mm/init.c | 111 +-
17991 arch/x86/mm/init_32.c | 111 +-
17992 arch/x86/mm/init_64.c | 46 +-
17993 arch/x86/mm/iomap_32.c | 4 +
17994 arch/x86/mm/ioremap.c | 52 +-
17995 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
17996 arch/x86/mm/mmap.c | 40 +-
17997 arch/x86/mm/mmio-mod.c | 10 +-
17998 arch/x86/mm/numa.c | 2 +-
17999 arch/x86/mm/pageattr.c | 38 +-
18000 arch/x86/mm/pat.c | 12 +-
18001 arch/x86/mm/pat_rbtree.c | 2 +-
18002 arch/x86/mm/pf_in.c | 10 +-
18003 arch/x86/mm/pgtable.c | 214 +-
18004 arch/x86/mm/pgtable_32.c | 3 +
18005 arch/x86/mm/setup_nx.c | 7 +
18006 arch/x86/mm/tlb.c | 4 +
18007 arch/x86/mm/uderef_64.c | 37 +
18008 arch/x86/net/bpf_jit.S | 11 +
18009 arch/x86/net/bpf_jit_comp.c | 13 +-
18010 arch/x86/oprofile/backtrace.c | 6 +-
18011 arch/x86/oprofile/nmi_int.c | 8 +-
18012 arch/x86/oprofile/op_model_amd.c | 8 +-
18013 arch/x86/oprofile/op_model_ppro.c | 7 +-
18014 arch/x86/oprofile/op_x86_model.h | 2 +-
18015 arch/x86/pci/intel_mid_pci.c | 2 +-
18016 arch/x86/pci/irq.c | 8 +-
18017 arch/x86/pci/pcbios.c | 144 +-
18018 arch/x86/platform/efi/efi_32.c | 24 +
18019 arch/x86/platform/efi/efi_64.c | 26 +-
18020 arch/x86/platform/efi/efi_stub_32.S | 64 +-
18021 arch/x86/platform/efi/efi_stub_64.S | 2 +
18022 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
18023 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
18024 arch/x86/platform/intel-mid/mfld.c | 4 +-
18025 arch/x86/platform/intel-mid/mrfl.c | 2 +-
18026 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
18027 arch/x86/platform/olpc/olpc_dt.c | 2 +-
18028 arch/x86/power/cpu.c | 11 +-
18029 arch/x86/realmode/init.c | 10 +-
18030 arch/x86/realmode/rm/Makefile | 3 +
18031 arch/x86/realmode/rm/header.S | 4 +-
18032 arch/x86/realmode/rm/reboot.S | 4 +
18033 arch/x86/realmode/rm/trampoline_32.S | 12 +-
18034 arch/x86/realmode/rm/trampoline_64.S | 3 +-
18035 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
18036 arch/x86/tools/Makefile | 2 +-
18037 arch/x86/tools/relocs.c | 96 +-
18038 arch/x86/um/mem_32.c | 2 +-
18039 arch/x86/um/tls_32.c | 2 +-
18040 arch/x86/xen/enlighten.c | 50 +-
18041 arch/x86/xen/mmu.c | 19 +-
18042 arch/x86/xen/smp.c | 16 +-
18043 arch/x86/xen/xen-asm_32.S | 2 +-
18044 arch/x86/xen/xen-head.S | 11 +
18045 arch/x86/xen/xen-ops.h | 2 -
18046 block/bio.c | 4 +-
18047 block/blk-iopoll.c | 2 +-
18048 block/blk-map.c | 2 +-
18049 block/blk-softirq.c | 2 +-
18050 block/bsg.c | 12 +-
18051 block/compat_ioctl.c | 4 +-
18052 block/genhd.c | 9 +-
18053 block/partitions/efi.c | 8 +-
18054 block/scsi_ioctl.c | 29 +-
18055 crypto/cryptd.c | 4 +-
18056 crypto/pcrypt.c | 2 +-
18057 crypto/zlib.c | 12 +-
18058 drivers/acpi/acpi_video.c | 2 +-
18059 drivers/acpi/apei/apei-internal.h | 2 +-
18060 drivers/acpi/apei/ghes.c | 4 +-
18061 drivers/acpi/bgrt.c | 6 +-
18062 drivers/acpi/blacklist.c | 4 +-
18063 drivers/acpi/bus.c | 4 +-
18064 drivers/acpi/device_pm.c | 4 +-
18065 drivers/acpi/ec.c | 2 +-
18066 drivers/acpi/pci_slot.c | 2 +-
18067 drivers/acpi/processor_idle.c | 2 +-
18068 drivers/acpi/processor_pdc.c | 2 +-
18069 drivers/acpi/sleep.c | 2 +-
18070 drivers/acpi/sysfs.c | 4 +-
18071 drivers/acpi/thermal.c | 2 +-
18072 drivers/acpi/video_detect.c | 7 +-
18073 drivers/ata/libata-core.c | 12 +-
18074 drivers/ata/libata-scsi.c | 2 +-
18075 drivers/ata/libata.h | 2 +-
18076 drivers/ata/pata_arasan_cf.c | 4 +-
18077 drivers/atm/adummy.c | 2 +-
18078 drivers/atm/ambassador.c | 8 +-
18079 drivers/atm/atmtcp.c | 14 +-
18080 drivers/atm/eni.c | 10 +-
18081 drivers/atm/firestream.c | 8 +-
18082 drivers/atm/fore200e.c | 14 +-
18083 drivers/atm/he.c | 18 +-
18084 drivers/atm/horizon.c | 4 +-
18085 drivers/atm/idt77252.c | 36 +-
18086 drivers/atm/iphase.c | 34 +-
18087 drivers/atm/lanai.c | 12 +-
18088 drivers/atm/nicstar.c | 46 +-
18089 drivers/atm/solos-pci.c | 4 +-
18090 drivers/atm/suni.c | 4 +-
18091 drivers/atm/uPD98402.c | 16 +-
18092 drivers/atm/zatm.c | 6 +-
18093 drivers/base/bus.c | 4 +-
18094 drivers/base/devtmpfs.c | 8 +-
18095 drivers/base/node.c | 2 +-
18096 drivers/base/platform-msi.c | 20 +-
18097 drivers/base/power/domain.c | 11 +-
18098 drivers/base/power/sysfs.c | 2 +-
18099 drivers/base/power/wakeup.c | 8 +-
18100 drivers/base/regmap/regmap-debugfs.c | 11 +-
18101 drivers/base/syscore.c | 4 +-
18102 drivers/block/cciss.c | 28 +-
18103 drivers/block/cciss.h | 2 +-
18104 drivers/block/cpqarray.c | 28 +-
18105 drivers/block/cpqarray.h | 2 +-
18106 drivers/block/drbd/drbd_bitmap.c | 2 +-
18107 drivers/block/drbd/drbd_int.h | 8 +-
18108 drivers/block/drbd/drbd_main.c | 12 +-
18109 drivers/block/drbd/drbd_nl.c | 4 +-
18110 drivers/block/drbd/drbd_receiver.c | 34 +-
18111 drivers/block/drbd/drbd_worker.c | 8 +-
18112 drivers/block/pktcdvd.c | 4 +-
18113 drivers/block/rbd.c | 2 +-
18114 drivers/bluetooth/btwilink.c | 2 +-
18115 drivers/bus/arm-cci.c | 12 +-
18116 drivers/cdrom/cdrom.c | 11 +-
18117 drivers/cdrom/gdrom.c | 1 -
18118 drivers/char/agp/compat_ioctl.c | 2 +-
18119 drivers/char/agp/frontend.c | 4 +-
18120 drivers/char/agp/intel-gtt.c | 4 +-
18121 drivers/char/hpet.c | 2 +-
18122 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
18123 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
18124 drivers/char/mem.c | 47 +-
18125 drivers/char/nvram.c | 2 +-
18126 drivers/char/pcmcia/synclink_cs.c | 16 +-
18127 drivers/char/random.c | 12 +-
18128 drivers/char/sonypi.c | 11 +-
18129 drivers/char/tpm/tpm_acpi.c | 3 +-
18130 drivers/char/tpm/tpm_eventlog.c | 4 +-
18131 drivers/char/virtio_console.c | 4 +-
18132 drivers/clk/clk-composite.c | 2 +-
18133 drivers/clk/samsung/clk.h | 2 +-
18134 drivers/clk/socfpga/clk-gate.c | 9 +-
18135 drivers/clk/socfpga/clk-pll.c | 9 +-
18136 drivers/clk/ti/clk.c | 8 +-
18137 drivers/cpufreq/acpi-cpufreq.c | 17 +-
18138 drivers/cpufreq/cpufreq-dt.c | 4 +-
18139 drivers/cpufreq/cpufreq.c | 30 +-
18140 drivers/cpufreq/cpufreq_governor.c | 2 +-
18141 drivers/cpufreq/cpufreq_governor.h | 4 +-
18142 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
18143 drivers/cpufreq/intel_pstate.c | 33 +-
18144 drivers/cpufreq/p4-clockmod.c | 12 +-
18145 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
18146 drivers/cpufreq/speedstep-centrino.c | 7 +-
18147 drivers/cpuidle/driver.c | 2 +-
18148 drivers/cpuidle/dt_idle_states.c | 2 +-
18149 drivers/cpuidle/governor.c | 2 +-
18150 drivers/cpuidle/sysfs.c | 2 +-
18151 drivers/crypto/hifn_795x.c | 4 +-
18152 drivers/devfreq/devfreq.c | 4 +-
18153 drivers/dma/sh/shdma-base.c | 4 +-
18154 drivers/dma/sh/shdmac.c | 2 +-
18155 drivers/edac/edac_device.c | 4 +-
18156 drivers/edac/edac_mc_sysfs.c | 2 +-
18157 drivers/edac/edac_pci.c | 4 +-
18158 drivers/edac/edac_pci_sysfs.c | 22 +-
18159 drivers/edac/mce_amd.h | 2 +-
18160 drivers/firewire/core-card.c | 6 +-
18161 drivers/firewire/core-device.c | 2 +-
18162 drivers/firewire/core-transaction.c | 1 +
18163 drivers/firewire/core.h | 1 +
18164 drivers/firmware/dmi-id.c | 2 +-
18165 drivers/firmware/dmi_scan.c | 12 +-
18166 drivers/firmware/efi/cper.c | 8 +-
18167 drivers/firmware/efi/efi.c | 12 +-
18168 drivers/firmware/efi/efivars.c | 2 +-
18169 drivers/firmware/efi/runtime-map.c | 2 +-
18170 drivers/firmware/google/gsmi.c | 2 +-
18171 drivers/firmware/google/memconsole.c | 7 +-
18172 drivers/firmware/memmap.c | 2 +-
18173 drivers/firmware/psci.c | 2 +-
18174 drivers/gpio/gpio-davinci.c | 6 +-
18175 drivers/gpio/gpio-em.c | 2 +-
18176 drivers/gpio/gpio-ich.c | 2 +-
18177 drivers/gpio/gpio-omap.c | 4 +-
18178 drivers/gpio/gpio-rcar.c | 2 +-
18179 drivers/gpio/gpio-vr41xx.c | 2 +-
18180 drivers/gpio/gpiolib.c | 12 +-
18181 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
18182 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
18183 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
18184 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
18185 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
18186 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
18187 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
18188 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
18189 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
18190 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
18191 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
18192 drivers/gpu/drm/drm_crtc.c | 2 +-
18193 drivers/gpu/drm/drm_drv.c | 2 +-
18194 drivers/gpu/drm/drm_fops.c | 12 +-
18195 drivers/gpu/drm/drm_global.c | 14 +-
18196 drivers/gpu/drm/drm_info.c | 13 +-
18197 drivers/gpu/drm/drm_ioc32.c | 13 +-
18198 drivers/gpu/drm/drm_ioctl.c | 2 +-
18199 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
18200 drivers/gpu/drm/i810/i810_drv.h | 4 +-
18201 drivers/gpu/drm/i915/i915_dma.c | 2 +-
18202 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
18203 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
18204 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
18205 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
18206 drivers/gpu/drm/i915/intel_display.c | 26 +-
18207 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
18208 drivers/gpu/drm/mga/mga_drv.h | 4 +-
18209 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
18210 drivers/gpu/drm/mga/mga_irq.c | 8 +-
18211 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
18212 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
18213 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
18214 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
18215 drivers/gpu/drm/omapdrm/Makefile | 2 +-
18216 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
18217 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
18218 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
18219 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
18220 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
18221 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
18222 drivers/gpu/drm/r128/r128_cce.c | 2 +-
18223 drivers/gpu/drm/r128/r128_drv.h | 4 +-
18224 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
18225 drivers/gpu/drm/r128/r128_irq.c | 4 +-
18226 drivers/gpu/drm/r128/r128_state.c | 4 +-
18227 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
18228 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
18229 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
18230 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
18231 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
18232 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
18233 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
18234 drivers/gpu/drm/tegra/dc.c | 2 +-
18235 drivers/gpu/drm/tegra/dsi.c | 2 +-
18236 drivers/gpu/drm/tegra/hdmi.c | 2 +-
18237 drivers/gpu/drm/tegra/sor.c | 7 +-
18238 drivers/gpu/drm/tilcdc/Makefile | 6 +-
18239 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
18240 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
18241 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
18242 drivers/gpu/drm/udl/udl_fb.c | 1 -
18243 drivers/gpu/drm/via/via_drv.h | 4 +-
18244 drivers/gpu/drm/via/via_irq.c | 18 +-
18245 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
18246 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
18247 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
18248 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
18249 drivers/gpu/vga/vga_switcheroo.c | 4 +-
18250 drivers/hid/hid-core.c | 4 +-
18251 drivers/hid/hid-sensor-custom.c | 2 +-
18252 drivers/hv/channel.c | 2 +-
18253 drivers/hv/hv.c | 4 +-
18254 drivers/hv/hv_balloon.c | 18 +-
18255 drivers/hv/hyperv_vmbus.h | 2 +-
18256 drivers/hwmon/acpi_power_meter.c | 6 +-
18257 drivers/hwmon/applesmc.c | 2 +-
18258 drivers/hwmon/asus_atk0110.c | 10 +-
18259 drivers/hwmon/coretemp.c | 2 +-
18260 drivers/hwmon/dell-smm-hwmon.c | 2 +-
18261 drivers/hwmon/ibmaem.c | 2 +-
18262 drivers/hwmon/iio_hwmon.c | 2 +-
18263 drivers/hwmon/nct6683.c | 6 +-
18264 drivers/hwmon/nct6775.c | 6 +-
18265 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
18266 drivers/hwmon/sht15.c | 12 +-
18267 drivers/hwmon/via-cputemp.c | 2 +-
18268 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
18269 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
18270 drivers/i2c/i2c-dev.c | 2 +-
18271 drivers/ide/ide-cd.c | 2 +-
18272 drivers/ide/ide-disk.c | 2 +-
18273 drivers/iio/industrialio-core.c | 2 +-
18274 drivers/iio/magnetometer/ak8975.c | 2 +-
18275 drivers/infiniband/core/cm.c | 32 +-
18276 drivers/infiniband/core/fmr_pool.c | 20 +-
18277 drivers/infiniband/core/uverbs_cmd.c | 3 +
18278 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
18279 drivers/infiniband/hw/mlx4/mad.c | 2 +-
18280 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
18281 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
18282 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
18283 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
18284 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
18285 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
18286 drivers/infiniband/hw/nes/nes.c | 4 +-
18287 drivers/infiniband/hw/nes/nes.h | 40 +-
18288 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
18289 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
18290 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
18291 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
18292 drivers/infiniband/hw/qib/qib.h | 1 +
18293 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
18294 drivers/input/gameport/gameport.c | 4 +-
18295 drivers/input/input.c | 4 +-
18296 drivers/input/joystick/sidewinder.c | 1 +
18297 drivers/input/joystick/xpad.c | 4 +-
18298 drivers/input/misc/ims-pcu.c | 4 +-
18299 drivers/input/mouse/psmouse.h | 2 +-
18300 drivers/input/mousedev.c | 2 +-
18301 drivers/input/serio/serio.c | 4 +-
18302 drivers/input/serio/serio_raw.c | 4 +-
18303 drivers/input/touchscreen/htcpen.c | 2 +-
18304 drivers/iommu/arm-smmu-v3.c | 2 +-
18305 drivers/iommu/arm-smmu.c | 43 +-
18306 drivers/iommu/io-pgtable-arm.c | 101 +-
18307 drivers/iommu/io-pgtable.c | 11 +-
18308 drivers/iommu/io-pgtable.h | 19 +-
18309 drivers/iommu/iommu.c | 2 +-
18310 drivers/iommu/ipmmu-vmsa.c | 13 +-
18311 drivers/iommu/irq_remapping.c | 2 +-
18312 drivers/irqchip/irq-gic.c | 2 +-
18313 drivers/irqchip/irq-i8259.c | 2 +-
18314 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
18315 drivers/irqchip/irq-renesas-irqc.c | 2 +-
18316 drivers/isdn/capi/capi.c | 10 +-
18317 drivers/isdn/gigaset/interface.c | 8 +-
18318 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
18319 drivers/isdn/hardware/avm/b1.c | 4 +-
18320 drivers/isdn/i4l/isdn_common.c | 2 +
18321 drivers/isdn/i4l/isdn_tty.c | 22 +-
18322 drivers/isdn/icn/icn.c | 2 +-
18323 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
18324 drivers/lguest/core.c | 10 +-
18325 drivers/lguest/page_tables.c | 2 +-
18326 drivers/lguest/x86/core.c | 12 +-
18327 drivers/lguest/x86/switcher_32.S | 27 +-
18328 drivers/md/bcache/closure.h | 2 +-
18329 drivers/md/bitmap.c | 2 +-
18330 drivers/md/dm-ioctl.c | 2 +-
18331 drivers/md/dm-raid1.c | 18 +-
18332 drivers/md/dm-stats.c | 6 +-
18333 drivers/md/dm-stripe.c | 10 +-
18334 drivers/md/dm-table.c | 2 +-
18335 drivers/md/dm-thin-metadata.c | 4 +-
18336 drivers/md/dm.c | 16 +-
18337 drivers/md/md.c | 26 +-
18338 drivers/md/md.h | 6 +-
18339 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
18340 drivers/md/persistent-data/dm-space-map.h | 1 +
18341 drivers/md/raid1.c | 4 +-
18342 drivers/md/raid10.c | 18 +-
18343 drivers/md/raid5.c | 22 +-
18344 drivers/media/dvb-core/dvbdev.c | 2 +-
18345 drivers/media/dvb-frontends/af9033.h | 2 +-
18346 drivers/media/dvb-frontends/dib3000.h | 2 +-
18347 drivers/media/dvb-frontends/dib7000p.h | 2 +-
18348 drivers/media/dvb-frontends/dib8000.h | 2 +-
18349 drivers/media/pci/cx88/cx88-video.c | 6 +-
18350 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
18351 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
18352 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
18353 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
18354 drivers/media/pci/tw68/tw68-core.c | 2 +-
18355 drivers/media/platform/omap/omap_vout.c | 11 +-
18356 drivers/media/platform/s5p-tv/mixer.h | 2 +-
18357 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
18358 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
18359 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
18360 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
18361 drivers/media/radio/radio-cadet.c | 2 +
18362 drivers/media/radio/radio-maxiradio.c | 2 +-
18363 drivers/media/radio/radio-shark.c | 2 +-
18364 drivers/media/radio/radio-shark2.c | 2 +-
18365 drivers/media/radio/radio-si476x.c | 2 +-
18366 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
18367 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
18368 drivers/media/v4l2-core/v4l2-device.c | 4 +-
18369 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
18370 drivers/memory/omap-gpmc.c | 21 +-
18371 drivers/message/fusion/mptsas.c | 34 +-
18372 drivers/mfd/ab8500-debugfs.c | 2 +-
18373 drivers/mfd/kempld-core.c | 2 +-
18374 drivers/mfd/max8925-i2c.c | 2 +-
18375 drivers/mfd/tps65910.c | 2 +-
18376 drivers/mfd/twl4030-irq.c | 9 +-
18377 drivers/mfd/wm5110-tables.c | 2 +-
18378 drivers/mfd/wm8998-tables.c | 2 +-
18379 drivers/misc/c2port/core.c | 4 +-
18380 drivers/misc/kgdbts.c | 4 +-
18381 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
18382 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
18383 drivers/misc/mic/scif/scif_rb.c | 8 +-
18384 drivers/misc/sgi-gru/gruhandles.c | 4 +-
18385 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
18386 drivers/misc/sgi-gru/grutables.h | 154 +-
18387 drivers/misc/sgi-xp/xp.h | 2 +-
18388 drivers/misc/sgi-xp/xpc.h | 3 +-
18389 drivers/misc/sgi-xp/xpc_main.c | 2 +-
18390 drivers/mmc/card/block.c | 2 +-
18391 drivers/mmc/host/dw_mmc.h | 2 +-
18392 drivers/mmc/host/mmci.c | 4 +-
18393 drivers/mmc/host/omap_hsmmc.c | 4 +-
18394 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
18395 drivers/mmc/host/sdhci-s3c.c | 8 +-
18396 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
18397 drivers/mtd/nand/denali.c | 1 +
18398 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
18399 drivers/mtd/nftlmount.c | 1 +
18400 drivers/mtd/sm_ftl.c | 2 +-
18401 drivers/net/bonding/bond_netlink.c | 2 +-
18402 drivers/net/caif/caif_hsi.c | 2 +-
18403 drivers/net/can/Kconfig | 2 +-
18404 drivers/net/can/dev.c | 2 +-
18405 drivers/net/can/vcan.c | 2 +-
18406 drivers/net/dummy.c | 2 +-
18407 drivers/net/ethernet/8390/ax88796.c | 4 +-
18408 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
18409 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
18410 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
18411 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
18412 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
18413 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
18414 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
18415 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
18416 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
18417 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
18418 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
18419 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
18420 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
18421 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
18422 drivers/net/ethernet/broadcom/tg3.h | 1 +
18423 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
18424 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
18425 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
18426 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
18427 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
18428 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
18429 drivers/net/ethernet/faraday/ftmac100.c | 2 +
18430 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
18431 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
18432 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
18433 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
18434 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
18435 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
18436 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
18437 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
18438 drivers/net/ethernet/realtek/r8169.c | 8 +-
18439 drivers/net/ethernet/sfc/ptp.c | 2 +-
18440 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
18441 drivers/net/ethernet/via/via-rhine.c | 2 +-
18442 drivers/net/geneve.c | 2 +-
18443 drivers/net/hyperv/hyperv_net.h | 2 +-
18444 drivers/net/hyperv/rndis_filter.c | 4 +-
18445 drivers/net/ifb.c | 2 +-
18446 drivers/net/ipvlan/ipvlan_core.c | 2 +-
18447 drivers/net/macvlan.c | 20 +-
18448 drivers/net/macvtap.c | 6 +-
18449 drivers/net/nlmon.c | 2 +-
18450 drivers/net/phy/phy_device.c | 6 +-
18451 drivers/net/ppp/ppp_generic.c | 4 +-
18452 drivers/net/slip/slhc.c | 2 +-
18453 drivers/net/team/team.c | 4 +-
18454 drivers/net/tun.c | 7 +-
18455 drivers/net/usb/hso.c | 23 +-
18456 drivers/net/usb/r8152.c | 2 +-
18457 drivers/net/usb/sierra_net.c | 4 +-
18458 drivers/net/virtio_net.c | 2 +-
18459 drivers/net/vrf.c | 2 +-
18460 drivers/net/vxlan.c | 4 +-
18461 drivers/net/wimax/i2400m/rx.c | 2 +-
18462 drivers/net/wireless/airo.c | 2 +-
18463 drivers/net/wireless/at76c50x-usb.c | 2 +-
18464 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
18465 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
18466 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
18467 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
18468 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
18469 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
18470 drivers/net/wireless/ath/ath9k/main.c | 22 +-
18471 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
18472 drivers/net/wireless/b43/phy_lp.c | 2 +-
18473 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
18474 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
18475 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
18476 drivers/net/wireless/mac80211_hwsim.c | 28 +-
18477 drivers/net/wireless/rndis_wlan.c | 2 +-
18478 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
18479 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
18480 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
18481 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
18482 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
18483 drivers/nfc/nfcwilink.c | 2 +-
18484 drivers/of/fdt.c | 4 +-
18485 drivers/oprofile/buffer_sync.c | 8 +-
18486 drivers/oprofile/event_buffer.c | 2 +-
18487 drivers/oprofile/oprof.c | 2 +-
18488 drivers/oprofile/oprofile_stats.c | 10 +-
18489 drivers/oprofile/oprofile_stats.h | 10 +-
18490 drivers/oprofile/oprofilefs.c | 6 +-
18491 drivers/oprofile/timer_int.c | 2 +-
18492 drivers/parport/procfs.c | 4 +-
18493 drivers/pci/host/pci-host-generic.c | 24 +-
18494 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
18495 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
18496 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
18497 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
18498 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
18499 drivers/pci/hotplug/pciehp_core.c | 2 +-
18500 drivers/pci/msi.c | 22 +-
18501 drivers/pci/pci-sysfs.c | 6 +-
18502 drivers/pci/pci.h | 2 +-
18503 drivers/pci/pcie/aspm.c | 6 +-
18504 drivers/pci/pcie/portdrv_pci.c | 2 +-
18505 drivers/pci/probe.c | 2 +-
18506 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
18507 drivers/pinctrl/pinctrl-at91.c | 5 +-
18508 drivers/platform/chrome/chromeos_pstore.c | 2 +-
18509 drivers/platform/x86/alienware-wmi.c | 4 +-
18510 drivers/platform/x86/compal-laptop.c | 2 +-
18511 drivers/platform/x86/hdaps.c | 2 +-
18512 drivers/platform/x86/ibm_rtl.c | 2 +-
18513 drivers/platform/x86/intel_oaktrail.c | 2 +-
18514 drivers/platform/x86/msi-laptop.c | 16 +-
18515 drivers/platform/x86/msi-wmi.c | 2 +-
18516 drivers/platform/x86/samsung-laptop.c | 2 +-
18517 drivers/platform/x86/samsung-q10.c | 2 +-
18518 drivers/platform/x86/sony-laptop.c | 14 +-
18519 drivers/platform/x86/thinkpad_acpi.c | 2 +-
18520 drivers/pnp/pnpbios/bioscalls.c | 14 +-
18521 drivers/pnp/pnpbios/core.c | 2 +-
18522 drivers/power/pda_power.c | 7 +-
18523 drivers/power/power_supply.h | 4 +-
18524 drivers/power/power_supply_core.c | 7 +-
18525 drivers/power/power_supply_sysfs.c | 6 +-
18526 drivers/power/reset/at91-reset.c | 9 +-
18527 drivers/powercap/powercap_sys.c | 136 +-
18528 drivers/ptp/ptp_private.h | 2 +-
18529 drivers/ptp/ptp_sysfs.c | 2 +-
18530 drivers/regulator/core.c | 4 +-
18531 drivers/regulator/max8660.c | 6 +-
18532 drivers/regulator/max8973-regulator.c | 16 +-
18533 drivers/regulator/mc13892-regulator.c | 8 +-
18534 drivers/rtc/rtc-armada38x.c | 7 +-
18535 drivers/rtc/rtc-cmos.c | 4 +-
18536 drivers/rtc/rtc-ds1307.c | 2 +-
18537 drivers/rtc/rtc-m48t59.c | 4 +-
18538 drivers/rtc/rtc-test.c | 6 +-
18539 drivers/scsi/be2iscsi/be_main.c | 2 +-
18540 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
18541 drivers/scsi/bfa/bfa_ioc.h | 4 +-
18542 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
18543 drivers/scsi/hosts.c | 4 +-
18544 drivers/scsi/hpsa.c | 38 +-
18545 drivers/scsi/hpsa.h | 2 +-
18546 drivers/scsi/libfc/fc_exch.c | 50 +-
18547 drivers/scsi/libsas/sas_ata.c | 2 +-
18548 drivers/scsi/lpfc/lpfc.h | 8 +-
18549 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
18550 drivers/scsi/lpfc/lpfc_init.c | 6 +-
18551 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
18552 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
18553 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
18554 drivers/scsi/pmcraid.c | 20 +-
18555 drivers/scsi/pmcraid.h | 8 +-
18556 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
18557 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
18558 drivers/scsi/qla2xxx/qla_os.c | 6 +-
18559 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
18560 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
18561 drivers/scsi/scsi.c | 2 +-
18562 drivers/scsi/scsi_lib.c | 8 +-
18563 drivers/scsi/scsi_sysfs.c | 2 +-
18564 drivers/scsi/scsi_transport_fc.c | 8 +-
18565 drivers/scsi/scsi_transport_iscsi.c | 6 +-
18566 drivers/scsi/scsi_transport_srp.c | 6 +-
18567 drivers/scsi/sd.c | 6 +-
18568 drivers/scsi/sg.c | 2 +-
18569 drivers/scsi/sr.c | 21 +-
18570 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
18571 drivers/spi/spi.c | 2 +-
18572 drivers/staging/android/timed_output.c | 6 +-
18573 drivers/staging/comedi/comedi_fops.c | 8 +-
18574 drivers/staging/fbtft/fbtft-core.c | 2 +-
18575 drivers/staging/fbtft/fbtft.h | 2 +-
18576 drivers/staging/gdm724x/gdm_tty.c | 2 +-
18577 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
18578 drivers/staging/iio/adc/ad7280a.c | 4 +-
18579 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
18580 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
18581 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
18582 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
18583 drivers/staging/lustre/lustre/include/obd.h | 2 +-
18584 drivers/staging/octeon/ethernet-rx.c | 20 +-
18585 drivers/staging/octeon/ethernet.c | 8 +-
18586 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
18587 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
18588 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
18589 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
18590 drivers/staging/sm750fb/sm750.c | 14 +-
18591 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
18592 drivers/target/sbp/sbp_target.c | 4 +-
18593 drivers/thermal/cpu_cooling.c | 9 +-
18594 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
18595 drivers/thermal/of-thermal.c | 17 +-
18596 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
18597 drivers/tty/cyclades.c | 6 +-
18598 drivers/tty/hvc/hvc_console.c | 14 +-
18599 drivers/tty/hvc/hvcs.c | 21 +-
18600 drivers/tty/hvc/hvsi.c | 22 +-
18601 drivers/tty/hvc/hvsi_lib.c | 4 +-
18602 drivers/tty/ipwireless/tty.c | 27 +-
18603 drivers/tty/moxa.c | 2 +-
18604 drivers/tty/n_gsm.c | 4 +-
18605 drivers/tty/n_tty.c | 3 +-
18606 drivers/tty/pty.c | 4 +-
18607 drivers/tty/rocket.c | 6 +-
18608 drivers/tty/serial/8250/8250_core.c | 10 +-
18609 drivers/tty/serial/ifx6x60.c | 2 +-
18610 drivers/tty/serial/ioc4_serial.c | 6 +-
18611 drivers/tty/serial/kgdb_nmi.c | 4 +-
18612 drivers/tty/serial/kgdboc.c | 32 +-
18613 drivers/tty/serial/msm_serial.c | 4 +-
18614 drivers/tty/serial/samsung.c | 9 +-
18615 drivers/tty/serial/serial_core.c | 8 +-
18616 drivers/tty/synclink.c | 34 +-
18617 drivers/tty/synclink_gt.c | 28 +-
18618 drivers/tty/synclinkmp.c | 34 +-
18619 drivers/tty/tty_io.c | 2 +-
18620 drivers/tty/tty_ldisc.c | 8 +-
18621 drivers/tty/tty_port.c | 22 +-
18622 drivers/uio/uio.c | 13 +-
18623 drivers/usb/atm/cxacru.c | 2 +-
18624 drivers/usb/atm/usbatm.c | 24 +-
18625 drivers/usb/class/cdc-acm.h | 2 +-
18626 drivers/usb/core/devices.c | 6 +-
18627 drivers/usb/core/devio.c | 12 +-
18628 drivers/usb/core/hcd.c | 4 +-
18629 drivers/usb/core/sysfs.c | 2 +-
18630 drivers/usb/core/usb.c | 2 +-
18631 drivers/usb/early/ehci-dbgp.c | 16 +-
18632 drivers/usb/gadget/function/u_serial.c | 22 +-
18633 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
18634 drivers/usb/host/ehci-hcd.c | 2 +-
18635 drivers/usb/host/ehci-hub.c | 4 +-
18636 drivers/usb/host/ehci-q.c | 4 +-
18637 drivers/usb/host/fotg210-hcd.c | 2 +-
18638 drivers/usb/host/fusbh200-hcd.c | 2 +-
18639 drivers/usb/host/hwa-hc.c | 2 +-
18640 drivers/usb/host/ohci-hcd.c | 2 +-
18641 drivers/usb/host/r8a66597.h | 2 +-
18642 drivers/usb/host/uhci-hcd.c | 2 +-
18643 drivers/usb/host/xhci-pci.c | 2 +-
18644 drivers/usb/host/xhci.c | 2 +-
18645 drivers/usb/misc/appledisplay.c | 4 +-
18646 drivers/usb/serial/console.c | 8 +-
18647 drivers/usb/storage/transport.c | 2 +-
18648 drivers/usb/storage/usb.c | 2 +-
18649 drivers/usb/storage/usb.h | 2 +-
18650 drivers/usb/usbip/vhci.h | 2 +-
18651 drivers/usb/usbip/vhci_hcd.c | 6 +-
18652 drivers/usb/usbip/vhci_rx.c | 2 +-
18653 drivers/usb/wusbcore/wa-hc.h | 4 +-
18654 drivers/usb/wusbcore/wa-xfer.c | 2 +-
18655 drivers/vfio/vfio.c | 2 +-
18656 drivers/vhost/vringh.c | 20 +-
18657 drivers/video/backlight/kb3886_bl.c | 2 +-
18658 drivers/video/console/fbcon.c | 2 +-
18659 drivers/video/fbdev/aty/aty128fb.c | 2 +-
18660 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
18661 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
18662 drivers/video/fbdev/core/fb_defio.c | 6 +-
18663 drivers/video/fbdev/core/fbmem.c | 2 +-
18664 drivers/video/fbdev/hyperv_fb.c | 4 +-
18665 drivers/video/fbdev/i810/i810_accel.c | 1 +
18666 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
18667 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
18668 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
18669 drivers/video/fbdev/omap2/dss/display.c | 8 +-
18670 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
18671 drivers/video/fbdev/smscufx.c | 4 +-
18672 drivers/video/fbdev/udlfb.c | 36 +-
18673 drivers/video/fbdev/uvesafb.c | 52 +-
18674 drivers/video/fbdev/vesafb.c | 58 +-
18675 drivers/video/fbdev/via/via_clock.h | 2 +-
18676 drivers/xen/events/events_base.c | 6 +-
18677 drivers/xen/evtchn.c | 4 +-
18678 fs/Kconfig.binfmt | 2 +-
18679 fs/afs/inode.c | 4 +-
18680 fs/aio.c | 2 +-
18681 fs/autofs4/waitq.c | 2 +-
18682 fs/befs/endian.h | 6 +-
18683 fs/binfmt_aout.c | 23 +-
18684 fs/binfmt_elf.c | 670 +-
18685 fs/binfmt_elf_fdpic.c | 4 +-
18686 fs/block_dev.c | 2 +-
18687 fs/btrfs/ctree.c | 9 +-
18688 fs/btrfs/delayed-inode.c | 9 +-
18689 fs/btrfs/delayed-inode.h | 6 +-
18690 fs/btrfs/file.c | 10 +-
18691 fs/btrfs/inode.c | 14 +-
18692 fs/btrfs/super.c | 2 +-
18693 fs/btrfs/sysfs.c | 2 +-
18694 fs/btrfs/tests/free-space-tests.c | 8 +-
18695 fs/btrfs/tree-log.h | 2 +-
18696 fs/buffer.c | 2 +-
18697 fs/cachefiles/bind.c | 6 +-
18698 fs/cachefiles/daemon.c | 8 +-
18699 fs/cachefiles/internal.h | 12 +-
18700 fs/cachefiles/namei.c | 2 +-
18701 fs/cachefiles/proc.c | 12 +-
18702 fs/ceph/dir.c | 12 +-
18703 fs/ceph/super.c | 4 +-
18704 fs/cifs/cifs_debug.c | 12 +-
18705 fs/cifs/cifsfs.c | 8 +-
18706 fs/cifs/cifsglob.h | 54 +-
18707 fs/cifs/file.c | 10 +-
18708 fs/cifs/misc.c | 4 +-
18709 fs/cifs/smb1ops.c | 80 +-
18710 fs/cifs/smb2ops.c | 84 +-
18711 fs/cifs/smb2pdu.c | 3 +-
18712 fs/coda/cache.c | 10 +-
18713 fs/compat.c | 4 +-
18714 fs/compat_binfmt_elf.c | 2 +
18715 fs/compat_ioctl.c | 12 +-
18716 fs/configfs/dir.c | 10 +-
18717 fs/coredump.c | 16 +-
18718 fs/dcache.c | 51 +-
18719 fs/ecryptfs/inode.c | 2 +-
18720 fs/ecryptfs/miscdev.c | 2 +-
18721 fs/exec.c | 362 +-
18722 fs/ext2/xattr.c | 5 +-
18723 fs/ext4/ext4.h | 20 +-
18724 fs/ext4/mballoc.c | 44 +-
18725 fs/ext4/resize.c | 16 +-
18726 fs/ext4/super.c | 4 +-
18727 fs/ext4/xattr.c | 5 +-
18728 fs/fhandle.c | 3 +-
18729 fs/file.c | 4 +-
18730 fs/fs_struct.c | 8 +-
18731 fs/fscache/cookie.c | 40 +-
18732 fs/fscache/internal.h | 202 +-
18733 fs/fscache/object.c | 26 +-
18734 fs/fscache/operation.c | 38 +-
18735 fs/fscache/page.c | 110 +-
18736 fs/fscache/stats.c | 348 +-
18737 fs/fuse/cuse.c | 10 +-
18738 fs/fuse/dev.c | 4 +-
18739 fs/gfs2/glock.c | 22 +-
18740 fs/gfs2/glops.c | 4 +-
18741 fs/gfs2/quota.c | 6 +-
18742 fs/hugetlbfs/inode.c | 13 +-
18743 fs/inode.c | 4 +-
18744 fs/jffs2/erase.c | 3 +-
18745 fs/jffs2/wbuf.c | 3 +-
18746 fs/jfs/super.c | 2 +-
18747 fs/kernfs/dir.c | 2 +-
18748 fs/kernfs/file.c | 20 +-
18749 fs/libfs.c | 10 +-
18750 fs/lockd/clntproc.c | 4 +-
18751 fs/namei.c | 16 +-
18752 fs/namespace.c | 16 +-
18753 fs/nfs/callback_xdr.c | 2 +-
18754 fs/nfs/inode.c | 6 +-
18755 fs/nfsd/nfs4proc.c | 2 +-
18756 fs/nfsd/nfs4xdr.c | 2 +-
18757 fs/nfsd/nfscache.c | 11 +-
18758 fs/nfsd/vfs.c | 6 +-
18759 fs/nls/nls_base.c | 26 +-
18760 fs/nls/nls_euc-jp.c | 6 +-
18761 fs/nls/nls_koi8-ru.c | 6 +-
18762 fs/notify/fanotify/fanotify_user.c | 4 +-
18763 fs/notify/notification.c | 4 +-
18764 fs/ntfs/dir.c | 2 +-
18765 fs/ntfs/super.c | 6 +-
18766 fs/ocfs2/localalloc.c | 2 +-
18767 fs/ocfs2/ocfs2.h | 10 +-
18768 fs/ocfs2/suballoc.c | 12 +-
18769 fs/ocfs2/super.c | 20 +-
18770 fs/pipe.c | 72 +-
18771 fs/posix_acl.c | 4 +-
18772 fs/proc/array.c | 20 +
18773 fs/proc/base.c | 4 +-
18774 fs/proc/kcore.c | 34 +-
18775 fs/proc/meminfo.c | 2 +-
18776 fs/proc/nommu.c | 2 +-
18777 fs/proc/proc_sysctl.c | 26 +-
18778 fs/proc/task_mmu.c | 39 +-
18779 fs/proc/task_nommu.c | 4 +-
18780 fs/proc/vmcore.c | 16 +-
18781 fs/qnx6/qnx6.h | 4 +-
18782 fs/quota/netlink.c | 4 +-
18783 fs/read_write.c | 2 +-
18784 fs/reiserfs/do_balan.c | 2 +-
18785 fs/reiserfs/procfs.c | 2 +-
18786 fs/reiserfs/reiserfs.h | 4 +-
18787 fs/seq_file.c | 4 +-
18788 fs/splice.c | 43 +-
18789 fs/squashfs/xattr.c | 12 +-
18790 fs/sysv/sysv.h | 2 +-
18791 fs/tracefs/inode.c | 8 +-
18792 fs/udf/misc.c | 2 +-
18793 fs/ufs/swab.h | 4 +-
18794 fs/userfaultfd.c | 2 +-
18795 fs/xattr.c | 21 +
18796 fs/xfs/libxfs/xfs_bmap.c | 2 +-
18797 fs/xfs/xfs_dir2_readdir.c | 7 +-
18798 fs/xfs/xfs_ioctl.c | 2 +-
18799 fs/xfs/xfs_linux.h | 4 +-
18800 include/asm-generic/4level-fixup.h | 2 +
18801 include/asm-generic/atomic-long.h | 156 +-
18802 include/asm-generic/atomic64.h | 12 +
18803 include/asm-generic/bitops/__fls.h | 2 +-
18804 include/asm-generic/bitops/fls.h | 2 +-
18805 include/asm-generic/bitops/fls64.h | 4 +-
18806 include/asm-generic/bug.h | 6 +-
18807 include/asm-generic/cache.h | 4 +-
18808 include/asm-generic/emergency-restart.h | 2 +-
18809 include/asm-generic/kmap_types.h | 4 +-
18810 include/asm-generic/local.h | 13 +
18811 include/asm-generic/pgtable-nopmd.h | 18 +-
18812 include/asm-generic/pgtable-nopud.h | 15 +-
18813 include/asm-generic/pgtable.h | 16 +
18814 include/asm-generic/sections.h | 1 +
18815 include/asm-generic/uaccess.h | 16 +
18816 include/asm-generic/vmlinux.lds.h | 15 +-
18817 include/crypto/algapi.h | 2 +-
18818 include/drm/drmP.h | 16 +-
18819 include/drm/drm_crtc_helper.h | 2 +-
18820 include/drm/drm_mm.h | 2 +-
18821 include/drm/i915_pciids.h | 2 +-
18822 include/drm/intel-gtt.h | 4 +-
18823 include/drm/ttm/ttm_memory.h | 2 +-
18824 include/drm/ttm/ttm_page_alloc.h | 1 +
18825 include/keys/asymmetric-subtype.h | 2 +-
18826 include/linux/atmdev.h | 4 +-
18827 include/linux/atomic.h | 17 +-
18828 include/linux/audit.h | 2 +-
18829 include/linux/average.h | 2 +-
18830 include/linux/binfmts.h | 3 +-
18831 include/linux/bitmap.h | 2 +-
18832 include/linux/bitops.h | 8 +-
18833 include/linux/blkdev.h | 2 +-
18834 include/linux/blktrace_api.h | 2 +-
18835 include/linux/cache.h | 8 +
18836 include/linux/cdrom.h | 1 -
18837 include/linux/cleancache.h | 2 +-
18838 include/linux/clk-provider.h | 1 +
18839 include/linux/compat.h | 6 +-
18840 include/linux/compiler-gcc.h | 28 +-
18841 include/linux/compiler.h | 157 +-
18842 include/linux/configfs.h | 2 +-
18843 include/linux/cpufreq.h | 3 +-
18844 include/linux/cpuidle.h | 5 +-
18845 include/linux/cpumask.h | 14 +-
18846 include/linux/crypto.h | 4 +-
18847 include/linux/ctype.h | 2 +-
18848 include/linux/dcache.h | 4 +-
18849 include/linux/decompress/mm.h | 2 +-
18850 include/linux/devfreq.h | 2 +-
18851 include/linux/device.h | 7 +-
18852 include/linux/dma-mapping.h | 2 +-
18853 include/linux/efi.h | 1 +
18854 include/linux/elf.h | 2 +
18855 include/linux/err.h | 4 +-
18856 include/linux/extcon.h | 2 +-
18857 include/linux/fb.h | 3 +-
18858 include/linux/fdtable.h | 2 +-
18859 include/linux/fs.h | 5 +-
18860 include/linux/fs_struct.h | 2 +-
18861 include/linux/fscache-cache.h | 2 +-
18862 include/linux/fscache.h | 2 +-
18863 include/linux/fsnotify.h | 2 +-
18864 include/linux/genhd.h | 4 +-
18865 include/linux/genl_magic_func.h | 2 +-
18866 include/linux/gfp.h | 12 +-
18867 include/linux/highmem.h | 12 +
18868 include/linux/hwmon-sysfs.h | 6 +-
18869 include/linux/i2c.h | 1 +
18870 include/linux/if_pppox.h | 2 +-
18871 include/linux/init.h | 12 +-
18872 include/linux/init_task.h | 7 +
18873 include/linux/interrupt.h | 6 +-
18874 include/linux/iommu.h | 2 +-
18875 include/linux/ioport.h | 2 +-
18876 include/linux/ipc.h | 2 +-
18877 include/linux/irq.h | 5 +-
18878 include/linux/irqdesc.h | 2 +-
18879 include/linux/irqdomain.h | 3 +
18880 include/linux/jiffies.h | 16 +-
18881 include/linux/key-type.h | 2 +-
18882 include/linux/kgdb.h | 6 +-
18883 include/linux/kmemleak.h | 4 +-
18884 include/linux/kobject.h | 3 +-
18885 include/linux/kobject_ns.h | 2 +-
18886 include/linux/kref.h | 2 +-
18887 include/linux/libata.h | 2 +-
18888 include/linux/linkage.h | 1 +
18889 include/linux/list.h | 15 +
18890 include/linux/lockref.h | 26 +-
18891 include/linux/math64.h | 10 +-
18892 include/linux/mempolicy.h | 7 +
18893 include/linux/mm.h | 102 +-
18894 include/linux/mm_types.h | 20 +
18895 include/linux/mmiotrace.h | 4 +-
18896 include/linux/mmzone.h | 2 +-
18897 include/linux/mod_devicetable.h | 4 +-
18898 include/linux/module.h | 69 +-
18899 include/linux/moduleloader.h | 16 +
18900 include/linux/moduleparam.h | 4 +-
18901 include/linux/net.h | 2 +-
18902 include/linux/netdevice.h | 7 +-
18903 include/linux/netfilter.h | 2 +-
18904 include/linux/netfilter/nfnetlink.h | 2 +-
18905 include/linux/nls.h | 4 +-
18906 include/linux/notifier.h | 3 +-
18907 include/linux/oprofile.h | 4 +-
18908 include/linux/padata.h | 2 +-
18909 include/linux/pci_hotplug.h | 3 +-
18910 include/linux/percpu.h | 2 +-
18911 include/linux/perf_event.h | 12 +-
18912 include/linux/pipe_fs_i.h | 8 +-
18913 include/linux/pm.h | 1 +
18914 include/linux/pm_domain.h | 4 +-
18915 include/linux/pm_runtime.h | 2 +-
18916 include/linux/pnp.h | 2 +-
18917 include/linux/poison.h | 4 +-
18918 include/linux/power/smartreflex.h | 2 +-
18919 include/linux/ppp-comp.h | 2 +-
18920 include/linux/preempt.h | 21 +
18921 include/linux/proc_ns.h | 2 +-
18922 include/linux/psci.h | 2 +-
18923 include/linux/quota.h | 2 +-
18924 include/linux/random.h | 19 +-
18925 include/linux/rculist.h | 16 +
18926 include/linux/reboot.h | 14 +-
18927 include/linux/regset.h | 3 +-
18928 include/linux/relay.h | 2 +-
18929 include/linux/rio.h | 2 +-
18930 include/linux/rmap.h | 4 +-
18931 include/linux/sched.h | 72 +-
18932 include/linux/sched/sysctl.h | 1 +
18933 include/linux/semaphore.h | 2 +-
18934 include/linux/seq_file.h | 1 +
18935 include/linux/signal.h | 2 +-
18936 include/linux/skbuff.h | 12 +-
18937 include/linux/slab.h | 47 +-
18938 include/linux/slab_def.h | 14 +-
18939 include/linux/slub_def.h | 2 +-
18940 include/linux/smp.h | 2 +
18941 include/linux/sock_diag.h | 2 +-
18942 include/linux/sonet.h | 2 +-
18943 include/linux/sunrpc/addr.h | 8 +-
18944 include/linux/sunrpc/clnt.h | 2 +-
18945 include/linux/sunrpc/svc.h | 2 +-
18946 include/linux/sunrpc/svc_rdma.h | 18 +-
18947 include/linux/sunrpc/svcauth.h | 2 +-
18948 include/linux/swapops.h | 10 +-
18949 include/linux/swiotlb.h | 3 +-
18950 include/linux/syscalls.h | 21 +-
18951 include/linux/syscore_ops.h | 2 +-
18952 include/linux/sysctl.h | 3 +-
18953 include/linux/sysfs.h | 9 +-
18954 include/linux/sysrq.h | 3 +-
18955 include/linux/tcp.h | 14 +-
18956 include/linux/thread_info.h | 7 +
18957 include/linux/tty.h | 4 +-
18958 include/linux/tty_driver.h | 2 +-
18959 include/linux/tty_ldisc.h | 2 +-
18960 include/linux/types.h | 16 +
18961 include/linux/uaccess.h | 6 +-
18962 include/linux/uio_driver.h | 2 +-
18963 include/linux/unaligned/access_ok.h | 24 +-
18964 include/linux/usb.h | 12 +-
18965 include/linux/usb/hcd.h | 1 +
18966 include/linux/usb/renesas_usbhs.h | 2 +-
18967 include/linux/vermagic.h | 21 +-
18968 include/linux/vga_switcheroo.h | 8 +-
18969 include/linux/vmalloc.h | 7 +-
18970 include/linux/vmstat.h | 24 +-
18971 include/linux/xattr.h | 5 +-
18972 include/linux/zlib.h | 3 +-
18973 include/media/v4l2-dev.h | 2 +-
18974 include/media/v4l2-device.h | 2 +-
18975 include/net/9p/transport.h | 2 +-
18976 include/net/bluetooth/l2cap.h | 2 +-
18977 include/net/bonding.h | 2 +-
18978 include/net/caif/cfctrl.h | 6 +-
18979 include/net/flow.h | 2 +-
18980 include/net/genetlink.h | 2 +-
18981 include/net/gro_cells.h | 2 +-
18982 include/net/inet_connection_sock.h | 2 +-
18983 include/net/inet_sock.h | 2 +-
18984 include/net/inetpeer.h | 2 +-
18985 include/net/ip_fib.h | 2 +-
18986 include/net/ip_vs.h | 8 +-
18987 include/net/ipv6.h | 2 +-
18988 include/net/irda/ircomm_tty.h | 1 +
18989 include/net/iucv/af_iucv.h | 2 +-
18990 include/net/llc_c_ac.h | 2 +-
18991 include/net/llc_c_ev.h | 4 +-
18992 include/net/llc_c_st.h | 2 +-
18993 include/net/llc_s_ac.h | 2 +-
18994 include/net/llc_s_st.h | 2 +-
18995 include/net/mac80211.h | 4 +-
18996 include/net/neighbour.h | 2 +-
18997 include/net/net_namespace.h | 18 +-
18998 include/net/netlink.h | 2 +-
18999 include/net/netns/conntrack.h | 6 +-
19000 include/net/netns/ipv4.h | 4 +-
19001 include/net/netns/ipv6.h | 4 +-
19002 include/net/netns/xfrm.h | 2 +-
19003 include/net/ping.h | 2 +-
19004 include/net/protocol.h | 4 +-
19005 include/net/rtnetlink.h | 2 +-
19006 include/net/sctp/checksum.h | 4 +-
19007 include/net/sctp/sm.h | 4 +-
19008 include/net/sctp/structs.h | 2 +-
19009 include/net/sock.h | 12 +-
19010 include/net/tcp.h | 8 +-
19011 include/net/xfrm.h | 13 +-
19012 include/rdma/iw_cm.h | 2 +-
19013 include/scsi/libfc.h | 3 +-
19014 include/scsi/scsi_device.h | 6 +-
19015 include/scsi/scsi_driver.h | 2 +-
19016 include/scsi/scsi_transport_fc.h | 3 +-
19017 include/scsi/sg.h | 2 +-
19018 include/sound/compress_driver.h | 2 +-
19019 include/sound/soc.h | 4 +-
19020 include/trace/events/irq.h | 4 +-
19021 include/uapi/linux/a.out.h | 8 +
19022 include/uapi/linux/bcache.h | 5 +-
19023 include/uapi/linux/byteorder/little_endian.h | 28 +-
19024 include/uapi/linux/connector.h | 2 +-
19025 include/uapi/linux/elf.h | 28 +
19026 include/uapi/linux/screen_info.h | 3 +-
19027 include/uapi/linux/swab.h | 6 +-
19028 include/uapi/linux/xattr.h | 4 +
19029 include/video/udlfb.h | 8 +-
19030 include/video/uvesafb.h | 1 +
19031 init/Kconfig | 2 +-
19032 init/Makefile | 3 +
19033 init/do_mounts.c | 14 +-
19034 init/do_mounts.h | 8 +-
19035 init/do_mounts_initrd.c | 30 +-
19036 init/do_mounts_md.c | 6 +-
19037 init/init_task.c | 4 +
19038 init/initramfs.c | 38 +-
19039 init/main.c | 30 +-
19040 ipc/compat.c | 4 +-
19041 ipc/ipc_sysctl.c | 8 +-
19042 ipc/mq_sysctl.c | 4 +-
19043 ipc/sem.c | 4 +-
19044 ipc/shm.c | 6 +
19045 kernel/audit.c | 8 +-
19046 kernel/auditsc.c | 4 +-
19047 kernel/bpf/core.c | 7 +-
19048 kernel/capability.c | 3 +
19049 kernel/compat.c | 38 +-
19050 kernel/debug/debug_core.c | 16 +-
19051 kernel/debug/kdb/kdb_main.c | 4 +-
19052 kernel/events/core.c | 26 +-
19053 kernel/events/internal.h | 10 +-
19054 kernel/events/uprobes.c | 2 +-
19055 kernel/exit.c | 2 +-
19056 kernel/fork.c | 167 +-
19057 kernel/futex.c | 11 +-
19058 kernel/futex_compat.c | 2 +-
19059 kernel/gcov/base.c | 7 +-
19060 kernel/irq/manage.c | 2 +-
19061 kernel/irq/msi.c | 19 +-
19062 kernel/irq/spurious.c | 2 +-
19063 kernel/jump_label.c | 5 +
19064 kernel/kallsyms.c | 37 +-
19065 kernel/kexec.c | 3 +-
19066 kernel/kmod.c | 8 +-
19067 kernel/kprobes.c | 4 +-
19068 kernel/ksysfs.c | 2 +-
19069 kernel/locking/lockdep.c | 7 +-
19070 kernel/locking/mutex-debug.c | 12 +-
19071 kernel/locking/mutex-debug.h | 4 +-
19072 kernel/locking/mutex.c | 6 +-
19073 kernel/module.c | 422 +-
19074 kernel/notifier.c | 17 +-
19075 kernel/padata.c | 4 +-
19076 kernel/panic.c | 5 +-
19077 kernel/pid.c | 2 +-
19078 kernel/pid_namespace.c | 2 +-
19079 kernel/power/process.c | 12 +-
19080 kernel/profile.c | 14 +-
19081 kernel/ptrace.c | 8 +-
19082 kernel/rcu/rcutorture.c | 60 +-
19083 kernel/rcu/tiny.c | 4 +-
19084 kernel/rcu/tree.c | 44 +-
19085 kernel/rcu/tree.h | 14 +-
19086 kernel/rcu/tree_plugin.h | 14 +-
19087 kernel/rcu/tree_trace.c | 12 +-
19088 kernel/sched/auto_group.c | 4 +-
19089 kernel/sched/core.c | 45 +-
19090 kernel/sched/fair.c | 2 +-
19091 kernel/sched/sched.h | 2 +-
19092 kernel/signal.c | 12 +-
19093 kernel/smpboot.c | 4 +-
19094 kernel/softirq.c | 12 +-
19095 kernel/sys.c | 10 +-
19096 kernel/sysctl.c | 34 +-
19097 kernel/time/alarmtimer.c | 2 +-
19098 kernel/time/posix-cpu-timers.c | 4 +-
19099 kernel/time/posix-timers.c | 24 +-
19100 kernel/time/timer.c | 2 +-
19101 kernel/time/timer_stats.c | 10 +-
19102 kernel/trace/blktrace.c | 6 +-
19103 kernel/trace/ftrace.c | 15 +-
19104 kernel/trace/ring_buffer.c | 96 +-
19105 kernel/trace/trace.c | 2 +-
19106 kernel/trace/trace.h | 2 +-
19107 kernel/trace/trace_clock.c | 4 +-
19108 kernel/trace/trace_events.c | 1 -
19109 kernel/trace/trace_functions_graph.c | 4 +-
19110 kernel/trace/trace_mmiotrace.c | 8 +-
19111 kernel/trace/trace_output.c | 10 +-
19112 kernel/trace/trace_seq.c | 2 +-
19113 kernel/trace/trace_stack.c | 2 +-
19114 kernel/user_namespace.c | 2 +-
19115 kernel/utsname_sysctl.c | 2 +-
19116 kernel/watchdog.c | 2 +-
19117 kernel/workqueue.c | 2 +-
19118 lib/Kconfig.debug | 8 +-
19119 lib/Makefile | 2 +-
19120 lib/bitmap.c | 8 +-
19121 lib/bug.c | 2 +
19122 lib/debugobjects.c | 2 +-
19123 lib/decompress_bunzip2.c | 3 +-
19124 lib/decompress_unlzma.c | 4 +-
19125 lib/div64.c | 4 +-
19126 lib/dma-debug.c | 4 +-
19127 lib/inflate.c | 2 +-
19128 lib/ioremap.c | 4 +-
19129 lib/kobject.c | 4 +-
19130 lib/list_debug.c | 126 +-
19131 lib/lockref.c | 44 +-
19132 lib/percpu-refcount.c | 2 +-
19133 lib/radix-tree.c | 2 +-
19134 lib/random32.c | 2 +-
19135 lib/show_mem.c | 2 +-
19136 lib/strncpy_from_user.c | 2 +-
19137 lib/strnlen_user.c | 2 +-
19138 lib/swiotlb.c | 2 +-
19139 lib/usercopy.c | 6 +
19140 lib/vsprintf.c | 12 +-
19141 mm/Kconfig | 6 +-
19142 mm/backing-dev.c | 4 +-
19143 mm/debug.c | 3 +
19144 mm/filemap.c | 2 +-
19145 mm/gup.c | 13 +-
19146 mm/highmem.c | 6 +-
19147 mm/hugetlb.c | 70 +-
19148 mm/internal.h | 1 +
19149 mm/maccess.c | 4 +-
19150 mm/madvise.c | 37 +
19151 mm/memory-failure.c | 6 +-
19152 mm/memory.c | 424 +-
19153 mm/mempolicy.c | 25 +
19154 mm/mlock.c | 15 +-
19155 mm/mm_init.c | 2 +-
19156 mm/mmap.c | 582 +-
19157 mm/mprotect.c | 137 +-
19158 mm/mremap.c | 39 +-
19159 mm/nommu.c | 21 +-
19160 mm/page-writeback.c | 2 +-
19161 mm/page_alloc.c | 49 +-
19162 mm/percpu.c | 2 +-
19163 mm/process_vm_access.c | 14 +-
19164 mm/rmap.c | 45 +-
19165 mm/shmem.c | 19 +-
19166 mm/slab.c | 109 +-
19167 mm/slab.h | 22 +-
19168 mm/slab_common.c | 86 +-
19169 mm/slob.c | 218 +-
19170 mm/slub.c | 102 +-
19171 mm/sparse-vmemmap.c | 4 +-
19172 mm/sparse.c | 2 +-
19173 mm/swap.c | 2 +
19174 mm/swapfile.c | 12 +-
19175 mm/util.c | 6 +
19176 mm/vmalloc.c | 114 +-
19177 mm/vmstat.c | 12 +-
19178 net/8021q/vlan.c | 5 +-
19179 net/8021q/vlan_netlink.c | 2 +-
19180 net/9p/mod.c | 4 +-
19181 net/9p/trans_fd.c | 2 +-
19182 net/atm/atm_misc.c | 8 +-
19183 net/atm/lec.h | 2 +-
19184 net/atm/proc.c | 6 +-
19185 net/atm/resources.c | 4 +-
19186 net/ax25/sysctl_net_ax25.c | 2 +-
19187 net/batman-adv/bat_iv_ogm.c | 8 +-
19188 net/batman-adv/fragmentation.c | 2 +-
19189 net/batman-adv/soft-interface.c | 8 +-
19190 net/batman-adv/types.h | 6 +-
19191 net/bluetooth/hci_sock.c | 2 +-
19192 net/bluetooth/l2cap_core.c | 6 +-
19193 net/bluetooth/l2cap_sock.c | 12 +-
19194 net/bluetooth/rfcomm/sock.c | 4 +-
19195 net/bluetooth/rfcomm/tty.c | 4 +-
19196 net/bridge/br_netlink.c | 2 +-
19197 net/bridge/netfilter/ebtables.c | 6 +-
19198 net/caif/cfctrl.c | 11 +-
19199 net/caif/chnl_net.c | 2 +-
19200 net/can/af_can.c | 2 +-
19201 net/can/gw.c | 6 +-
19202 net/ceph/messenger.c | 4 +-
19203 net/compat.c | 24 +-
19204 net/core/datagram.c | 2 +-
19205 net/core/dev.c | 16 +-
19206 net/core/filter.c | 2 +-
19207 net/core/flow.c | 6 +-
19208 net/core/neighbour.c | 4 +-
19209 net/core/net-sysfs.c | 2 +-
19210 net/core/net_namespace.c | 8 +-
19211 net/core/netpoll.c | 4 +-
19212 net/core/rtnetlink.c | 15 +-
19213 net/core/scm.c | 14 +-
19214 net/core/skbuff.c | 8 +-
19215 net/core/sock.c | 28 +-
19216 net/core/sock_diag.c | 15 +-
19217 net/core/sysctl_net_core.c | 22 +-
19218 net/decnet/af_decnet.c | 1 +
19219 net/decnet/sysctl_net_decnet.c | 4 +-
19220 net/dsa/dsa.c | 2 +-
19221 net/hsr/hsr_netlink.c | 2 +-
19222 net/ieee802154/6lowpan/core.c | 2 +-
19223 net/ieee802154/6lowpan/reassembly.c | 14 +-
19224 net/ipv4/af_inet.c | 2 +-
19225 net/ipv4/devinet.c | 18 +-
19226 net/ipv4/fib_frontend.c | 6 +-
19227 net/ipv4/fib_semantics.c | 2 +-
19228 net/ipv4/inet_connection_sock.c | 4 +-
19229 net/ipv4/inet_timewait_sock.c | 2 +-
19230 net/ipv4/inetpeer.c | 2 +-
19231 net/ipv4/ip_fragment.c | 15 +-
19232 net/ipv4/ip_gre.c | 6 +-
19233 net/ipv4/ip_sockglue.c | 2 +-
19234 net/ipv4/ip_vti.c | 4 +-
19235 net/ipv4/ipconfig.c | 6 +-
19236 net/ipv4/ipip.c | 4 +-
19237 net/ipv4/netfilter/arp_tables.c | 12 +-
19238 net/ipv4/netfilter/ip_tables.c | 12 +-
19239 net/ipv4/ping.c | 14 +-
19240 net/ipv4/raw.c | 14 +-
19241 net/ipv4/route.c | 32 +-
19242 net/ipv4/sysctl_net_ipv4.c | 22 +-
19243 net/ipv4/tcp_input.c | 6 +-
19244 net/ipv4/tcp_probe.c | 2 +-
19245 net/ipv4/udp.c | 10 +-
19246 net/ipv4/xfrm4_policy.c | 18 +-
19247 net/ipv6/addrconf.c | 18 +-
19248 net/ipv6/af_inet6.c | 2 +-
19249 net/ipv6/datagram.c | 2 +-
19250 net/ipv6/icmp.c | 2 +-
19251 net/ipv6/ip6_fib.c | 4 +-
19252 net/ipv6/ip6_gre.c | 10 +-
19253 net/ipv6/ip6_tunnel.c | 4 +-
19254 net/ipv6/ip6_vti.c | 4 +-
19255 net/ipv6/ipv6_sockglue.c | 2 +-
19256 net/ipv6/netfilter/ip6_tables.c | 12 +-
19257 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
19258 net/ipv6/ping.c | 33 +-
19259 net/ipv6/raw.c | 17 +-
19260 net/ipv6/reassembly.c | 13 +-
19261 net/ipv6/route.c | 2 +-
19262 net/ipv6/sit.c | 4 +-
19263 net/ipv6/sysctl_net_ipv6.c | 2 +-
19264 net/ipv6/udp.c | 6 +-
19265 net/ipv6/xfrm6_policy.c | 17 +-
19266 net/irda/ircomm/ircomm_tty.c | 18 +-
19267 net/iucv/af_iucv.c | 4 +-
19268 net/iucv/iucv.c | 2 +-
19269 net/key/af_key.c | 4 +-
19270 net/l2tp/l2tp_eth.c | 38 +-
19271 net/l2tp/l2tp_ip.c | 2 +-
19272 net/l2tp/l2tp_ip6.c | 2 +-
19273 net/mac80211/cfg.c | 8 +-
19274 net/mac80211/ieee80211_i.h | 3 +-
19275 net/mac80211/iface.c | 20 +-
19276 net/mac80211/main.c | 2 +-
19277 net/mac80211/pm.c | 4 +-
19278 net/mac80211/rate.c | 2 +-
19279 net/mac80211/sta_info.c | 2 +-
19280 net/mac80211/util.c | 8 +-
19281 net/mpls/af_mpls.c | 6 +-
19282 net/netfilter/ipset/ip_set_core.c | 2 +-
19283 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
19284 net/netfilter/ipvs/ip_vs_core.c | 4 +-
19285 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
19286 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
19287 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
19288 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
19289 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
19290 net/netfilter/nf_conntrack_acct.c | 2 +-
19291 net/netfilter/nf_conntrack_ecache.c | 2 +-
19292 net/netfilter/nf_conntrack_helper.c | 2 +-
19293 net/netfilter/nf_conntrack_proto.c | 2 +-
19294 net/netfilter/nf_conntrack_standalone.c | 2 +-
19295 net/netfilter/nf_conntrack_timestamp.c | 2 +-
19296 net/netfilter/nf_log.c | 10 +-
19297 net/netfilter/nf_sockopt.c | 4 +-
19298 net/netfilter/nfnetlink_log.c | 4 +-
19299 net/netfilter/nft_compat.c | 9 +-
19300 net/netfilter/xt_statistic.c | 8 +-
19301 net/netlink/af_netlink.c | 4 +-
19302 net/openvswitch/vport-internal_dev.c | 2 +-
19303 net/packet/af_packet.c | 8 +-
19304 net/phonet/pep.c | 6 +-
19305 net/phonet/socket.c | 2 +-
19306 net/phonet/sysctl.c | 2 +-
19307 net/rds/cong.c | 6 +-
19308 net/rds/ib.h | 2 +-
19309 net/rds/ib_cm.c | 2 +-
19310 net/rds/ib_recv.c | 4 +-
19311 net/rds/iw.h | 2 +-
19312 net/rds/iw_cm.c | 2 +-
19313 net/rds/iw_recv.c | 4 +-
19314 net/rds/rds.h | 2 +-
19315 net/rds/tcp.c | 2 +-
19316 net/rds/tcp_send.c | 2 +-
19317 net/rxrpc/af_rxrpc.c | 2 +-
19318 net/rxrpc/ar-ack.c | 14 +-
19319 net/rxrpc/ar-call.c | 2 +-
19320 net/rxrpc/ar-connection.c | 2 +-
19321 net/rxrpc/ar-connevent.c | 2 +-
19322 net/rxrpc/ar-input.c | 4 +-
19323 net/rxrpc/ar-internal.h | 8 +-
19324 net/rxrpc/ar-local.c | 2 +-
19325 net/rxrpc/ar-output.c | 4 +-
19326 net/rxrpc/ar-peer.c | 2 +-
19327 net/rxrpc/ar-proc.c | 4 +-
19328 net/rxrpc/ar-transport.c | 2 +-
19329 net/rxrpc/rxkad.c | 4 +-
19330 net/sched/sch_generic.c | 4 +-
19331 net/sctp/ipv6.c | 6 +-
19332 net/sctp/protocol.c | 10 +-
19333 net/sctp/sm_sideeffect.c | 2 +-
19334 net/sctp/socket.c | 21 +-
19335 net/sctp/sysctl.c | 10 +-
19336 net/socket.c | 18 +-
19337 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
19338 net/sunrpc/clnt.c | 4 +-
19339 net/sunrpc/sched.c | 4 +-
19340 net/sunrpc/svc.c | 4 +-
19341 net/sunrpc/svcauth_unix.c | 2 +-
19342 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
19343 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
19344 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
19345 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
19346 net/tipc/netlink_compat.c | 12 +-
19347 net/tipc/subscr.c | 2 +-
19348 net/unix/af_unix.c | 7 +-
19349 net/unix/sysctl_net_unix.c | 2 +-
19350 net/wireless/wext-core.c | 19 +-
19351 net/xfrm/xfrm_policy.c | 16 +-
19352 net/xfrm/xfrm_state.c | 33 +-
19353 net/xfrm/xfrm_sysctl.c | 2 +-
19354 scripts/Kbuild.include | 2 +-
19355 scripts/Makefile.build | 2 +-
19356 scripts/Makefile.clean | 3 +-
19357 scripts/Makefile.host | 69 +-
19358 scripts/basic/fixdep.c | 12 +-
19359 scripts/dtc/checks.c | 14 +-
19360 scripts/dtc/data.c | 6 +-
19361 scripts/dtc/flattree.c | 8 +-
19362 scripts/dtc/livetree.c | 4 +-
19363 scripts/gcc-plugin.sh | 51 +
19364 scripts/headers_install.sh | 1 +
19365 scripts/kallsyms.c | 4 +-
19366 scripts/kconfig/lkc.h | 5 +-
19367 scripts/kconfig/menu.c | 2 +-
19368 scripts/kconfig/symbol.c | 6 +-
19369 scripts/link-vmlinux.sh | 2 +-
19370 scripts/mod/file2alias.c | 14 +-
19371 scripts/mod/modpost.c | 25 +-
19372 scripts/mod/modpost.h | 6 +-
19373 scripts/mod/sumversion.c | 2 +-
19374 scripts/module-common.lds | 4 +
19375 scripts/package/builddeb | 1 +
19376 scripts/pnmtologo.c | 6 +-
19377 scripts/sortextable.h | 6 +-
19378 scripts/tags.sh | 2 +-
19379 security/Kconfig | 692 +-
19380 security/integrity/ima/ima.h | 4 +-
19381 security/integrity/ima/ima_api.c | 2 +-
19382 security/integrity/ima/ima_fs.c | 4 +-
19383 security/integrity/ima/ima_queue.c | 2 +-
19384 security/keys/key.c | 18 +-
19385 security/selinux/avc.c | 6 +-
19386 security/selinux/include/xfrm.h | 2 +-
19387 security/yama/yama_lsm.c | 2 +-
19388 sound/aoa/codecs/onyx.c | 7 +-
19389 sound/aoa/codecs/onyx.h | 1 +
19390 sound/core/oss/pcm_oss.c | 18 +-
19391 sound/core/pcm_compat.c | 2 +-
19392 sound/core/pcm_native.c | 4 +-
19393 sound/core/sound.c | 2 +-
19394 sound/drivers/mts64.c | 14 +-
19395 sound/drivers/opl4/opl4_lib.c | 2 +-
19396 sound/drivers/portman2x4.c | 3 +-
19397 sound/firewire/amdtp.c | 4 +-
19398 sound/firewire/amdtp.h | 4 +-
19399 sound/firewire/isight.c | 10 +-
19400 sound/firewire/scs1x.c | 8 +-
19401 sound/oss/sb_audio.c | 2 +-
19402 sound/oss/swarm_cs4297a.c | 6 +-
19403 sound/pci/hda/hda_codec.c | 2 +-
19404 sound/pci/ymfpci/ymfpci.h | 2 +-
19405 sound/pci/ymfpci/ymfpci_main.c | 12 +-
19406 sound/soc/codecs/sti-sas.c | 10 +-
19407 sound/soc/soc-ac97.c | 6 +-
19408 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
19409 tools/gcc/Makefile | 42 +
19410 tools/gcc/checker_plugin.c | 150 +
19411 tools/gcc/colorize_plugin.c | 215 +
19412 tools/gcc/constify_plugin.c | 571 +
19413 tools/gcc/gcc-common.h | 812 +
19414 tools/gcc/initify_plugin.c | 552 +
19415 tools/gcc/kallocstat_plugin.c | 188 +
19416 tools/gcc/kernexec_plugin.c | 549 +
19417 tools/gcc/latent_entropy_plugin.c | 470 +
19418 tools/gcc/size_overflow_plugin/.gitignore | 2 +
19419 tools/gcc/size_overflow_plugin/Makefile | 28 +
19420 .../disable_size_overflow_hash.data |12422 ++++++++++++
19421 .../generate_size_overflow_hash.sh | 103 +
19422 .../insert_size_overflow_asm.c | 416 +
19423 .../size_overflow_plugin/intentional_overflow.c | 1010 +
19424 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
19425 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
19426 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
19427 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
19428 .../size_overflow_hash_aux.data | 92 +
19429 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
19430 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
19431 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
19432 .../size_overflow_plugin_hash.c | 352 +
19433 .../size_overflow_plugin/size_overflow_transform.c | 749 +
19434 .../size_overflow_transform_core.c | 1010 +
19435 tools/gcc/stackleak_plugin.c | 436 +
19436 tools/gcc/structleak_plugin.c | 287 +
19437 tools/include/linux/compiler.h | 8 +
19438 tools/lib/api/Makefile | 2 +-
19439 tools/perf/util/include/asm/alternative-asm.h | 3 +
19440 tools/virtio/linux/uaccess.h | 2 +-
19441 virt/kvm/kvm_main.c | 42 +-
19442 1944 files changed, 66925 insertions(+), 8949 deletions(-)