]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blob - test/changelog-test.txt
Auto commit, 1 new patch{es}.
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
1 commit 86572f86f379b0e6e22bf5dacb327ed0f4b43fbf
2 Author: Brad Spengler <spender@grsecurity.net>
3 Date: Tue Jun 28 21:29:02 2016 -0400
4
5 Fix section conflict caught by recent constify plugin improvements
6
7 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8 1 file changed, 1 insertion(+), 1 deletion(-)
9
10 commit f6702b62ac3f7b94968ccebbfef7b33d16752926
11 Author: Brad Spengler <spender@grsecurity.net>
12 Date: Tue Jun 28 20:55:33 2016 -0400
13
14 Mark some ARM _ops __read_only for consistency
15
16 drivers/clk/socfpga/clk-gate-a10.c | 2 +-
17 drivers/clk/socfpga/clk-pll-a10.c | 2 +-
18 2 files changed, 2 insertions(+), 2 deletions(-)
19
20 commit 4766cd23999675173175ff7563bdf2c785ecb9de
21 Merge: a256990 791e52d
22 Author: Brad Spengler <spender@grsecurity.net>
23 Date: Tue Jun 28 20:52:20 2016 -0400
24
25 Merge branch 'pax-test' into grsec-test
26
27 commit 791e52d5d1ef361e6f2fdf2dc3cf51ca712788b2
28 Author: Brad Spengler <spender@grsecurity.net>
29 Date: Tue Jun 28 20:51:37 2016 -0400
30
31 Update to pax-linux-4.5.7-test18.patch:
32 - fixed a compile error of the constify plugin under older gcc versions
33 - Emese added a few nocapture attributes to powerpc as well
34 - fixed a few compile errors due to writes to constified fptrs on arm, reported by blake and spender
35 - fixed compile error with certain gcc versions when plugins were passed twice, reported by spender
36 - fixed regression causing random execve failures under UDEREF/amd64 and with ASLR disabled, reported by jotik
37 - taught the constify plugin to detect section mismatches of constified objects
38 - fixed a few section mismatches of constified objects that triggered LTO compilation errors
39 - changed the recent hyperv fix to be LTO compatible
40
41 arch/powerpc/include/asm/string.h | 18 ++--
42 arch/x86/Kconfig | 6 +-
43 arch/x86/boot/string.h | 4 +-
44 drivers/clk/socfpga/clk-gate-a10.c | 7 +-
45 drivers/clk/socfpga/clk-pll-a10.c | 7 +-
46 drivers/hv/hv.c | 3 +-
47 drivers/hwmon/applesmc.c | 2 +-
48 drivers/hwmon/dell-smm-hwmon.c | 2 +-
49 drivers/iommu/io-pgtable-arm.c | 2 +-
50 drivers/leds/leds-clevo-mail.c | 2 +-
51 drivers/leds/leds-ss4200.c | 2 +-
52 drivers/platform/chrome/chromeos_laptop.c | 2 +-
53 drivers/platform/chrome/cros_ec_lpc.c | 2 +-
54 include/linux/memory.h | 2 +-
55 init/Makefile | 3 -
56 scripts/Makefile.gcc-plugins | 2 +
57 scripts/gcc-plugins/constify_plugin.c | 131 +++++++++++++++++++++---------
58 scripts/gcc-plugins/gcc-common.h | 13 +++
59 18 files changed, 141 insertions(+), 69 deletions(-)
60
61 commit a256990dcb829c5a2f7ef5935dccb5f5faf5b5aa
62 Author: Brad Spengler <spender@grsecurity.net>
63 Date: Tue Jun 28 19:16:51 2016 -0400
64
65 !GRKERNSEC compile fixes
66
67 fs/proc/base.c | 2 ++
68 fs/proc/task_mmu.c | 4 ++++
69 fs/proc/task_nommu.c | 2 +-
70 3 files changed, 7 insertions(+), 1 deletion(-)
71
72 commit ed27bdf50d7ab1ed254e12e71639b5da9bc7981c
73 Author: Brad Spengler <spender@grsecurity.net>
74 Date: Tue Jun 28 18:51:23 2016 -0400
75
76 Allow active ptracers access to /proc/pid/maps and /proc/pid/mem for tasks
77 they are ptracing. Also clean up the maps code to avoid duplicate PaX flag
78 checks. Thanks to ekleog for reporting and testing, and Robert O'Callahan
79 for collaborating on changes/cleanups to rr to fix support for grsecurity.
80
81 fs/proc/base.c | 24 +++++++++++++++++++-----
82 fs/proc/internal.h | 7 +++++--
83 fs/proc/task_mmu.c | 45 +++++++++++++++++++++------------------------
84 fs/proc/task_nommu.c | 2 +-
85 include/linux/sched.h | 21 +++++++++++++++++++++
86 5 files changed, 67 insertions(+), 32 deletions(-)
87
88 commit 489fa0be1ea2ce2665611bc315f229486c64dbc5
89 Author: Brad Spengler <spender@grsecurity.net>
90 Date: Mon Jun 27 23:19:52 2016 -0400
91
92 Historically we did not trigger a BUG() on REFCOUNT violations due to the risk
93 of false positives, some of which took months or longer to exhibit themselves.
94 Initially, in fact, there was no task killing at all involved due to the risk of
95 a legitimate increment following a full set of intentional "leaky" increments
96 causing the wrong process to be killed and the wrong user to be banned (or a
97 panic ensuing). These risks were also weighed against the risk documented in
98 the REFCOUNT blog and elsewhere of a race on x86 where the refcount could
99 surpass INT_MAX. Regardless of whether the race is practical or not (and ways
100 of addressing that race are already mentioned in the REFCOUNT blog) given the
101 recent development of a GCC plugin to proactively tease out false positives
102 mentioned above, it's safe enough now to simply BUG() on refcount overflow
103 attempts. This handles both the race case as well as the case of atomic_t being
104 used when atomic64_t is really necessary to be able to express the full amount
105 of object references (when grsecurity's kernel bruteforce defense is enabled as
106 it is by default).
107
108 Suggested by Jann Horn at: http://www.openwall.com/lists/kernel-hardening/2016/06/25/2
109
110 fs/exec.c | 5 +----
111 1 file changed, 1 insertion(+), 4 deletions(-)
112
113 commit 0fb349e90e9de1d35ab4e7cd33b0f230b30c340f
114 Author: Brad Spengler <spender@grsecurity.net>
115 Date: Mon Jun 27 17:14:06 2016 -0400
116
117 Fix a UAF only triggerable by privileged root processes on the
118 short-lived delayed_cred pointer by grabbing a reference where
119 applicable at fork time -- not a security issue
120 Thanks to Jann Horn for the report
121
122 kernel/fork.c | 5 +++++
123 1 file changed, 5 insertions(+)
124
125 commit 6eb392861c72839f7af44d0e57927f362a2a0df5
126 Author: Brad Spengler <spender@grsecurity.net>
127 Date: Sun Jun 26 18:07:05 2016 -0400
128
129 compile fix
130
131 fs/posix_acl.c | 2 +-
132 1 file changed, 1 insertion(+), 1 deletion(-)
133
134 commit 1eed3a4206abdd68b35537dcff1b1832b28d4617
135 Author: Ben Hutchings <ben@decadent.org.uk>
136 Date: Wed Jun 22 19:43:35 2016 +0100
137
138 nfsd: check permissions when setting ACLs
139
140 Use set_posix_acl, which includes proper permission checks, instead of
141 calling ->set_acl directly. Without this anyone may be able to grant
142 themselves permissions to a file by setting the ACL.
143
144 Lock the inode to make the new checks atomic with respect to set_acl.
145 (Also, nfsd was the only caller of set_acl not locking the inode, so I
146 suspect this may fix other races.)
147
148 This also simplifies the code, and ensures our ACLs are checked by
149 posix_acl_valid.
150
151 The permission checks and the inode locking were lost with commit
152 4ac7249e, which changed nfsd to use the set_acl inode operation directly
153 instead of going through xattr handlers.
154
155 Reported-by: David Sinquin <david@sinquin.eu>
156 [agreunba@redhat.com: use set_posix_acl]
157 Fixes: 4ac7249e
158 Cc: Christoph Hellwig <hch@infradead.org>
159 Cc: Al Viro <viro@zeniv.linux.org.uk>
160 Cc: stable@vger.kernel.org
161 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
162
163 fs/nfsd/nfs2acl.c | 20 ++++++++++----------
164 fs/nfsd/nfs3acl.c | 16 +++++++---------
165 fs/nfsd/nfs4acl.c | 16 ++++++++--------
166 3 files changed, 25 insertions(+), 27 deletions(-)
167
168 commit d5be7c0c7a8e0408e9faf62dcaaf2471fe19d3a0
169 Author: Andreas Gruenbacher <agruenba@redhat.com>
170 Date: Wed Jun 22 23:57:25 2016 +0200
171
172 posix_acl: Add set_posix_acl
173
174 Factor out part of posix_acl_xattr_set into a common function that takes
175 a posix_acl, which nfsd can also call.
176
177 The prototype already exists in include/linux/posix_acl.h.
178
179 Signed-off-by: Andreas Gruenbacher <agruenba@redhat.com>
180 Cc: stable@vger.kernel.org
181 Cc: Christoph Hellwig <hch@infradead.org>
182 Cc: Al Viro <viro@zeniv.linux.org.uk>
183 Signed-off-by: J. Bruce Fields <bfields@redhat.com>
184
185 fs/posix_acl.c | 46 +++++++++++++++++++++++++++-------------------
186 1 file changed, 27 insertions(+), 19 deletions(-)
187
188 commit 5d722e6ce47a1c1987e862c84c4b56ddbc4423de
189 Author: Brad Spengler <spender@grsecurity.net>
190 Date: Sun Jun 26 17:33:38 2016 -0400
191
192 Fix ICE caused by duplicate plugin loads from the recent plugin
193 infrastructure changes
194
195 init/Makefile | 3 ---
196 1 file changed, 3 deletions(-)
197
198 commit 278d24df4f61ab171288187e6952ace4a82d42dc
199 Merge: 0c59418 83e55cb
200 Author: Brad Spengler <spender@grsecurity.net>
201 Date: Sun Jun 26 12:40:25 2016 -0400
202
203 Merge branch 'pax-test' into grsec-test
204
205 commit 83e55cbeedfb0b8712de995457c395b1ba8fe936
206 Author: Brad Spengler <spender@grsecurity.net>
207 Date: Sun Jun 26 12:11:40 2016 -0400
208
209 Update to pax-linux-4.5.7-test16.patch:
210 - imported a few more gcc plugin infrastructure changes from Emese's upstreaming work
211
212 .gitignore | 1 +
213 Makefile | 1 +
214 drivers/hv/hv.c | 2 +-
215 fs/namespace.c | 3 +-
216 include/linux/init.h | 4 +-
217 scripts/Makefile | 3 +-
218 scripts/Makefile.clean | 3 +-
219 scripts/Makefile.gcc-plugins | 5 ++-
220 scripts/Makefile.host | 7 ++-
221 scripts/gcc-plugins/Makefile | 54 +++++++----------------
222 scripts/gcc-plugins/rap_plugin/Makefile | 2 +
223 scripts/gcc-plugins/size_overflow_plugin/Makefile | 2 +
224 12 files changed, 39 insertions(+), 48 deletions(-)
225
226 commit 0c59418c05aa82cc46806b2b9b324d44ad5f043b
227 Author: Scott Bauer <sbauer@plzdonthack.me>
228 Date: Thu Jun 23 08:59:47 2016 -0600
229
230 HID: hiddev: validate num_values for HIDIOCGUSAGES, HIDIOCSUSAGES commands
231
232 This patch validates the num_values parameter from userland during the
233 HIDIOCGUSAGES and HIDIOCSUSAGES commands. Previously, if the report id was set
234 to HID_REPORT_ID_UNKNOWN, we would fail to validate the num_values parameter
235 leading to a heap overflow.
236
237 Cc: stable@vger.kernel.org
238 Signed-off-by: Scott Bauer <sbauer@plzdonthack.me>
239 Signed-off-by: Jiri Kosina <jkosina@suse.cz>
240
241 drivers/hid/usbhid/hiddev.c | 10 +++++-----
242 1 file changed, 5 insertions(+), 5 deletions(-)
243
244 commit 6c4919ead98c7342acecbd28f781dd2c3a37be4e
245 Author: Brad Spengler <spender@grsecurity.net>
246 Date: Sat Jun 25 07:22:44 2016 -0400
247
248 fix typo
249
250 scripts/Makefile.gcc-plugins | 2 +-
251 1 file changed, 1 insertion(+), 1 deletion(-)
252
253 commit 44fc4dd89969440d883528361bf65e6e82e35b49
254 Author: Brad Spengler <spender@grsecurity.net>
255 Date: Fri Jun 24 19:37:20 2016 -0400
256
257 RANDSTRUCT compile fix
258
259 drivers/gpu/drm/amd/powerplay/hwmgr/fiji_thermal.c | 20 ++++++++++----------
260 drivers/gpu/drm/amd/powerplay/hwmgr/tonga_thermal.c | 20 ++++++++++----------
261 2 files changed, 20 insertions(+), 20 deletions(-)
262
263 commit 08022b387ddd8856d39ace5d6f92636c7d1b422a
264 Author: Brad Spengler <spender@grsecurity.net>
265 Date: Fri Jun 24 19:22:39 2016 -0400
266
267 RANDSTRUCT compile fix
268
269 .../drm/amd/powerplay/hwmgr/cz_clockpowergating.c | 12 +++--
270 drivers/gpu/drm/amd/powerplay/hwmgr/cz_hwmgr.c | 58 +++++++++++-----------
271 2 files changed, 38 insertions(+), 32 deletions(-)
272
273 commit f48aea278530eb71ce2f9a24dc9e245f29d530ba
274 Author: Brad Spengler <spender@grsecurity.net>
275 Date: Fri Jun 24 18:52:19 2016 -0400
276
277 compile fix
278
279 drivers/hv/hv.c | 2 +-
280 1 file changed, 1 insertion(+), 1 deletion(-)
281
282 commit 1ce67be0c2ccf325fc5110ee052a8d0b08f09959
283 Author: Brad Spengler <spender@grsecurity.net>
284 Date: Fri Jun 24 17:45:26 2016 -0400
285
286 Add missing entries for RANDSTRUCT to scripts/Makefile.gcc-plugins
287 Bug introduced during 4.5 port during merging with upstream bikeshedding
288 scripts/gcc-plugins/Makefile was updated properly, but scripts/Makefile.gcc-plugins was not
289 This unfortunately means RANDSTRUCT was silently not enabled for all of the 4.5 patches to date
290
291 scripts/Makefile.gcc-plugins | 5 +++++
292 1 file changed, 5 insertions(+)
293
294 commit 6bf5265035d4617a1ef7845e7915389e1c65647b
295 Merge: c881b58 542e9e9
296 Author: Brad Spengler <spender@grsecurity.net>
297 Date: Fri Jun 24 17:01:33 2016 -0400
298
299 Merge branch 'pax-test' into grsec-test
300
301 commit 542e9e9a75e654b7e352025ecc67c6a2f98d8ea2
302 Author: Brad Spengler <spender@grsecurity.net>
303 Date: Fri Jun 24 17:00:25 2016 -0400
304
305 Update to pax-linux-4.5.7-test14.patch:
306 - synchronized with Emese's gcc plugin related changes headed upstream
307 - fixed a REFCOUNT false positive in nf_conntrack_init_net, reported by minipli
308 - fixed a regression in the recent Hyper-V support under !KERNEXEC
309
310 Makefile | 9 ---------
311 arch/x86/entry/vdso/vma.c | 2 +-
312 drivers/hv/hv.c | 2 +-
313 include/linux/compiler-gcc.h | 2 ++
314 include/linux/init.h | 8 +-------
315 include/linux/random.h | 8 ++++----
316 mm/page_alloc.c | 8 +++++---
317 net/netfilter/nf_conntrack_core.c | 4 ++--
318 scripts/Kbuild.include | 10 +++++++---
319 scripts/Makefile.gcc-plugins | 31 ++++++++++++++++++++++++-------
320 scripts/gcc-plugin.sh | 14 ++++++++++++++
321 security/Kconfig | 3 ++-
322 12 files changed, 63 insertions(+), 38 deletions(-)
323
324 commit c881b58ba51680e30758c1ea12058cd76c578672
325 Author: Brad Spengler <spender@grsecurity.net>
326 Date: Wed Jun 22 19:27:11 2016 -0400
327
328 compile fix
329
330 arch/x86/mm/init.c | 2 +-
331 1 file changed, 1 insertion(+), 1 deletion(-)
332
333 commit 6f889875e9f23d3d5a4751d09cc47f6e39eb9e1b
334 Author: Brad Spengler <spender@grsecurity.net>
335 Date: Wed Jun 22 17:37:53 2016 -0400
336
337 Don't bother further restricting /dev/mem when GRKERNSEC_KMEM is disabled,
338 fixes tboot use
339 Reported by Mark van Dijk
340 Previous MSR problem was also reported by Mark van Dijk
341
342 arch/x86/mm/init.c | 16 +++++-----------
343 1 file changed, 5 insertions(+), 11 deletions(-)
344
345 commit 1b99e76b8f41a8495ff085ffccab0e1bc8abed59
346 Author: Brad Spengler <spender@grsecurity.net>
347 Date: Wed Jun 22 17:22:14 2016 -0400
348
349 Whitelist writes to MSR_IA32_ENERGY_PERF_BIAS
350
351 arch/x86/kernel/msr.c | 6 ++++--
352 1 file changed, 4 insertions(+), 2 deletions(-)
353
354 commit 8c013d99d311850cade58ed5f9da05fb7f2c2873
355 Merge: 33e588f 9b2decf
356 Author: Brad Spengler <spender@grsecurity.net>
357 Date: Wed Jun 22 07:46:27 2016 -0400
358
359 Merge branch 'pax-test' into grsec-test
360
361 commit 9b2decf0bccddae6e630a2548d53d2a9718891a3
362 Author: Brad Spengler <spender@grsecurity.net>
363 Date: Wed Jun 22 07:46:03 2016 -0400
364
365 Update to pax-linux-4.5.7-test13.patch:
366 - fixed a bad function pointer cast in dma_buf_show caught by RAP, by Mathias Krause <minipli@googlemail.com>
367 - fixed a bad function type in the intel cstate sysfs code caught by RAP, reported by sth0R (https://forums.grsecurity.net/viewtopic.php?f=3&t=4497)
368 - worked around an intentional integer overflow in the PCI resource sizing code caught by the size overflow plugin, reported by kysse/Ville Vuorinen
369 - fixed an integer underflow in the ELF coredump code caught by the size overflow plugin, reported by Dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4495)
370 - fixed Hyper-V's hypercall page allocation to work under !KERNEXEC as well, reported by btnet (https://forums.grsecurity.net/viewtopic.php?f=3&t=3911), based on an idea by Pablo Sole (https://bugs.alpinelinux.org/issues/1021#note-27)
371 - fixed a REFCOUNT false positive in wpan_phy_new
372
373 arch/x86/include/asm/pgtable_64.h | 2 +-
374 arch/x86/kernel/cpu/perf_event_intel_cstate.c | 6 +++---
375 arch/x86/kernel/head_64.S | 10 ++++++++--
376 arch/x86/xen/mmu.c | 10 ++++++++--
377 drivers/dma-buf/dma-buf.c | 5 ++---
378 drivers/hv/hv.c | 23 +++++++----------------
379 drivers/pci/setup-bus.c | 8 ++++++--
380 fs/exec.c | 4 ++--
381 include/linux/types.h | 2 ++
382 net/ieee802154/core.c | 6 +++---
383 10 files changed, 42 insertions(+), 34 deletions(-)
384
385 commit 33e588f130c19cac089c2b0d70c939bee84ba812
386 Author: Brad Spengler <spender@grsecurity.net>
387 Date: Fri Jun 17 20:15:46 2016 -0400
388
389 Update KSTACKOVERFLOW dependency, update documentation
390
391 grsecurity/Kconfig | 8 ++++----
392 1 file changed, 4 insertions(+), 4 deletions(-)
393
394 commit d877624a8034129afc61dcc0f6127d69ee7a08d5
395 Author: Brad Spengler <spender@grsecurity.net>
396 Date: Wed Jun 15 06:28:18 2016 -0400
397
398 Backport fix for http://seclists.org/oss-sec/2016/q2/553
399
400 security/keys/key.c | 2 +-
401 1 file changed, 1 insertion(+), 1 deletion(-)
402
403 commit 39c61be367e5f1e1e0a08592ab3b23e71779ac9f
404 Merge: c63d655 66f9687
405 Author: Brad Spengler <spender@grsecurity.net>
406 Date: Tue Jun 14 18:19:37 2016 -0400
407
408 Merge branch 'pax-test' into grsec-test
409
410 commit 66f968756cfcc3ab040ad99deb570fb445108fb9
411 Author: Brad Spengler <spender@grsecurity.net>
412 Date: Tue Jun 14 18:19:04 2016 -0400
413
414 Update to pax-linux-4.5.5-test12.patch:
415 - fixed a KERNEXEC regression when writing to /proc/sys/kernel/watchdog_cpumask, reported by shadowdaemon
416 - Emese worked around a gcc induced intentional integer overflow in jfs that triggered a size overflow report, reported by g66 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4486)
417 - Emese relicensed the size overflow plugin to GPLv2 only
418 - Emese added size overflow coverage for vmnet in the hash tables, reported by Shawn <citypw@gmail.com>
419 - Emese enhanced the latent entropy in various ways (https://github.com/ephox-gcc-plugins/latent_entropy/commits/master)
420 - fixed pax_sanitize_slab=off for kmalloc and boot caches, by Mathias Krause <minipli@ld-linux.so>
421 - eliminated the memory overhead of SLUB sanitization, by Mathias Krause <minipli@ld-linux.so>
422
423 kernel/smpboot.c | 3 +
424 mm/slab.c | 2 +
425 mm/slab.h | 15 +
426 mm/slab_common.c | 7 -
427 mm/slob.c | 2 +
428 mm/slub.c | 8 +-
429 scripts/gcc-plugins/latent_entropy_plugin.c | 361 +++++++++++++++------
430 .../disable_size_overflow_hash.data | 1 +
431 .../insert_size_overflow_asm.c | 2 +-
432 .../size_overflow_plugin/intentional_overflow.c | 2 +-
433 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
434 .../size_overflow_plugin/size_overflow_debug.c | 2 +-
435 .../size_overflow_plugin/size_overflow_hash.data | 1 -
436 .../size_overflow_hash_aux.data | 5 +
437 .../size_overflow_plugin/size_overflow_ipa.c | 2 +-
438 .../size_overflow_plugin/size_overflow_misc.c | 2 +-
439 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
440 .../size_overflow_plugin_hash.c | 2 +-
441 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
442 .../size_overflow_transform_core.c | 2 +-
443 20 files changed, 310 insertions(+), 115 deletions(-)
444
445 commit c63d655907910533ed9d50671e98774b4b797578
446 Author: Tejun Heo <tj@kernel.org>
447 Date: Wed May 25 11:48:25 2016 -0400
448
449 percpu: fix synchronization between synchronous map extension and chunk destruction
450
451 For non-atomic allocations, pcpu_alloc() can try to extend the area
452 map synchronously after dropping pcpu_lock; however, the extension
453 wasn't synchronized against chunk destruction and the chunk might get
454 freed while extension is in progress.
455
456 This patch fixes the bug by putting most of non-atomic allocations
457 under pcpu_alloc_mutex to synchronize against pcpu_balance_work which
458 is responsible for async chunk management including destruction.
459
460 Signed-off-by: Tejun Heo <tj@kernel.org>
461 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
462 Reported-by: Vlastimil Babka <vbabka@suse.cz>
463 Reported-by: Sasha Levin <sasha.levin@oracle.com>
464 Cc: stable@vger.kernel.org # v3.18+
465 Fixes: 1a4d76076cda ("percpu: implement asynchronous chunk population")
466
467 mm/percpu.c | 16 ++++++++--------
468 1 file changed, 8 insertions(+), 8 deletions(-)
469
470 commit 63442a31da7b33c5d6ab80254a2af78616b91aa8
471 Author: Tejun Heo <tj@kernel.org>
472 Date: Wed May 25 11:48:25 2016 -0400
473
474 percpu: fix synchronization between chunk->map_extend_work and chunk destruction
475
476 Atomic allocations can trigger async map extensions which is serviced
477 by chunk->map_extend_work. pcpu_balance_work which is responsible for
478 destroying idle chunks wasn't synchronizing properly against
479 chunk->map_extend_work and may end up freeing the chunk while the work
480 item is still in flight.
481
482 This patch fixes the bug by rolling async map extension operations
483 into pcpu_balance_work.
484
485 Signed-off-by: Tejun Heo <tj@kernel.org>
486 Reported-and-tested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
487 Reported-by: Vlastimil Babka <vbabka@suse.cz>
488 Reported-by: Sasha Levin <sasha.levin@oracle.com>
489 Cc: stable@vger.kernel.org # v3.18+
490 Fixes: 9c824b6a172c ("percpu: make sure chunk->map array has available space")
491
492 mm/percpu.c | 57 ++++++++++++++++++++++++++++++++++++---------------------
493 1 file changed, 36 insertions(+), 21 deletions(-)
494
495 commit 7187611ba0d834ec7db27904c0cdf07bc9bc7d8f
496 Author: Brad Spengler <spender@grsecurity.net>
497 Date: Sat Jun 11 19:54:40 2016 -0400
498
499 Only bother establishing the PTEs for the vmap'd stack on creation
500
501 fs/exec.c | 1 -
502 include/linux/sched.h | 9 ++++-----
503 kernel/fork.c | 3 ++-
504 kernel/sched/core.c | 2 --
505 4 files changed, 6 insertions(+), 9 deletions(-)
506
507 commit a6e150dfb383fcb4c8d5294c59f2d21425ff9f72
508 Author: Brad Spengler <spender@grsecurity.net>
509 Date: Sat Jun 11 13:18:33 2016 -0400
510
511 Work around upstream's use of probe_kernel_address in alignment handling
512 which uses KERNEL_DS but wants to access userland memory directly --
513 not allowed by PaX. Reported by jotik
514
515 arch/arm/mm/alignment.c | 24 ++++++++++++++++++++----
516 1 file changed, 20 insertions(+), 4 deletions(-)
517
518 commit 1646af929d2465bc7a21a3c180de677e0b0b7950
519 Author: Dave Chinner <dchinner@redhat.com>
520 Date: Wed May 18 14:09:12 2016 +1000
521
522 xfs: mark reclaimed inodes invalid earlier
523
524 The last thing we do before using call_rcu() on an xfs_inode to be
525 freed is mark it as invalid. This means there is a window between
526 when we know for certain that the inode is going to be freed and
527 when we do actually mark it as "freed".
528
529 This is important in the context of RCU lookups - we can look up the
530 inode, find that it is valid, and then use it as such not realising
531 that it is in the final stages of being freed.
532
533 As such, mark the inode as being invalid the moment we know it is
534 going to be reclaimed. This can be done while we still hold the
535 XFS_ILOCK_EXCL and the flush lock in xfs_inode_reclaim, meaning that
536 it occurs well before we remove it from the radix tree, and that
537 the i_flags_lock, the XFS_ILOCK and the inode flush lock all act as
538 synchronisation points for detecting that an inode is about to go
539 away.
540
541 For defensive purposes, this allows us to add a further check to
542 xfs_iflush_cluster to ensure we skip inodes that are being freed
543 after we grab the XFS_ILOCK_SHARED and the flush lock - we know that
544 if the inode number if valid while we have these locks held we know
545 that it has not progressed through reclaim to the point where it is
546 clean and is about to be freed.
547
548 [bfoster: fixed __xfs_inode_clear_reclaim() using ip->i_ino after it
549 had already been zeroed.]
550
551 Signed-off-by: Dave Chinner <dchinner@redhat.com>
552 Reviewed-by: Brian Foster <bfoster@redhat.com>
553 Signed-off-by: Dave Chinner <david@fromorbit.com>
554
555 fs/xfs/xfs_icache.c | 46 ++++++++++++++++++++++++++++++++++------------
556 fs/xfs/xfs_inode.c | 13 +++++++++++++
557 2 files changed, 47 insertions(+), 12 deletions(-)
558
559 commit 096f3d24e77f4cd8fe50008623b26c89cb00ccda
560 Author: Dave Chinner <dchinner@redhat.com>
561 Date: Wed May 18 14:01:53 2016 +1000
562
563 xfs: xfs_inode_free() isn't RCU safe
564
565 The xfs_inode freed in xfs_inode_free() has multiple allocated
566 structures attached to it. We free these in xfs_inode_free() before
567 we mark the inode as invalid, and before we run call_rcu() to queue
568 the structure for freeing.
569
570 Unfortunately, this freeing can race with other accesses that are in
571 the RCU current grace period that have found the inode in the radix
572 tree with a valid state. This includes xfs_iflush_cluster(), which
573 calls xfs_inode_clean(), and that accesses the inode log item on the
574 xfs_inode.
575
576 The log item structure is freed in xfs_inode_free(), so there is the
577 possibility we can be accessing freed memory in xfs_iflush_cluster()
578 after validating the xfs_inode structure as being valid for this RCU
579 context. Hence we can get spuriously incorrect clean state returned
580 from such checks. This can lead to use thinking the inode is dirty
581 when it is, in fact, clean, and so incorrectly attaching it to the
582 buffer for IO and completion processing.
583
584 This then leads to use-after-free situations on the xfs_inode itself
585 if the IO completes after the current RCU grace period expires. The
586 buffer callbacks will access the xfs_inode and try to do all sorts
587 of things it shouldn't with freed memory.
588
589 IOWs, xfs_iflush_cluster() only works correctly when racing with
590 inode reclaim if the inode log item is present and correctly stating
591 the inode is clean. If the inode is being freed, then reclaim has
592 already made sure the inode is clean, and hence xfs_iflush_cluster
593 can skip it. However, we are accessing the inode inode under RCU
594 read lock protection and so also must ensure that all dynamically
595 allocated memory we reference in this context is not freed until the
596 RCU grace period expires.
597
598 To fix this, move all the potential memory freeing into
599 xfs_inode_free_callback() so that we are guarantee RCU protected
600 lookup code will always have the memory structures it needs
601 available during the RCU grace period that lookup races can occur
602 in.
603
604 Discovered-by: Brain Foster <bfoster@redhat.com>
605 Signed-off-by: Dave Chinner <dchinner@redhat.com>
606 Reviewed-by: Christoph Hellwig <hch@lst.de>
607 Signed-off-by: Dave Chinner <david@fromorbit.com>
608
609 fs/xfs/xfs_icache.c | 14 +++++++-------
610 1 file changed, 7 insertions(+), 7 deletions(-)
611
612 commit eaec09dbc18fe0ae7905b33b4c819a467a0e801d
613 Author: Jann Horn <jannh@google.com>
614 Date: Wed Jun 1 11:55:07 2016 +0200
615
616 sched: panic on corrupted stack end
617
618 Until now, hitting this BUG_ON caused a recursive oops (because oops
619 handling involves do_exit(), which calls into the scheduler, which in
620 turn raises an oops), which caused stuff below the stack to be
621 overwritten until a panic happened (e.g. via an oops in interrupt
622 context, caused by the overwritten CPU index in the thread_info).
623
624 Just panic directly.
625
626 Signed-off-by: Jann Horn <jannh@google.com>
627 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
628
629 kernel/sched/core.c | 3 ++-
630 1 file changed, 2 insertions(+), 1 deletion(-)
631
632 commit 96894afd3cbd735ed9230f058a32865dec270da2
633 Author: Jann Horn <jannh@google.com>
634 Date: Wed Jun 1 11:55:06 2016 +0200
635
636 ecryptfs: forbid opening files without mmap handler
637
638 This prevents users from triggering a stack overflow through a recursive
639 invocation of pagefault handling that involves mapping procfs files into
640 virtual memory.
641
642 Signed-off-by: Jann Horn <jannh@google.com>
643 Acked-by: Tyler Hicks <tyhicks@canonical.com>
644 Cc: stable@vger.kernel.org
645 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
646
647 fs/ecryptfs/kthread.c | 13 +++++++++++--
648 1 file changed, 11 insertions(+), 2 deletions(-)
649
650 commit 06608cb36ab8329c7cf03fdabc86fb7f64a2656d
651 Author: Jann Horn <jannh@google.com>
652 Date: Wed Jun 1 11:55:05 2016 +0200
653
654 proc: prevent stacking filesystems on top
655
656 This prevents stacking filesystems (ecryptfs and overlayfs) from using
657 procfs as lower filesystem. There is too much magic going on inside
658 procfs, and there is no good reason to stack stuff on top of procfs.
659
660 (For example, procfs does access checks in VFS open handlers, and
661 ecryptfs by design calls open handlers from a kernel thread that doesn't
662 drop privileges or so.)
663
664 Signed-off-by: Jann Horn <jannh@google.com>
665 Cc: stable@vger.kernel.org
666 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
667
668 fs/proc/root.c | 7 +++++++
669 1 file changed, 7 insertions(+)
670
671 commit 7cff8ffababda8d77e7e3a3f2621b26269279b9a
672 Author: Al Viro <viro@zeniv.linux.org.uk>
673 Date: Wed May 4 14:04:13 2016 -0400
674
675 ecryptfs: fix handling of directory opening
676
677 First of all, trying to open them r/w is idiocy; it's guaranteed to fail.
678 Moreover, assigning ->f_pos and assuming that everything will work is
679 blatantly broken - try that with e.g. tmpfs as underlying layer and watch
680 the fireworks. There may be a non-trivial amount of state associated with
681 current IO position, well beyond the numeric offset. Using the single
682 struct file associated with underlying inode is really not a good idea;
683 we ought to open one for each ecryptfs directory struct file.
684
685 Additionally, file_operations both for directories and non-directories are
686 full of pointless methods; non-directories should *not* have ->iterate(),
687 directories should not have ->flush(), ->fasync() and ->splice_read().
688
689 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
690
691 fs/ecryptfs/file.c | 71 ++++++++++++++++++++++++++++++++++++++++++------------
692 1 file changed, 55 insertions(+), 16 deletions(-)
693
694 commit b690dcd62ad1433e69d391a267ce01534c19d20a
695 Author: Brad Spengler <spender@grsecurity.net>
696 Date: Wed Jun 8 20:59:28 2016 -0400
697
698 fix compiler warnings
699
700 fs/exec.c | 4 ++--
701 1 file changed, 2 insertions(+), 2 deletions(-)
702
703 commit 5d43ec1fb9c94f0c2644e0d09a8257442134a0ce
704 Author: Brad Spengler <spender@grsecurity.net>
705 Date: Wed Jun 8 20:52:00 2016 -0400
706
707 Avoid some UB
708
709 fs/exec.c | 8 ++++----
710 1 file changed, 4 insertions(+), 4 deletions(-)
711
712 commit d34347de1cae1f7bd8ea4223d5baca5da8ea4529
713 Author: Brad Spengler <spender@grsecurity.net>
714 Date: Wed Jun 8 20:23:27 2016 -0400
715
716 compile fix
717
718 kernel/smpboot.c | 1 +
719 1 file changed, 1 insertion(+)
720
721 commit 4dfdd6b803d58fec94306a4ff437d500a9c80908
722 Author: Brad Spengler <spender@grsecurity.net>
723 Date: Wed Jun 8 20:13:34 2016 -0400
724
725 Add open/close around cpumask modification, reported by shadowdaemon
726 Triggered by writing to /proc/sys/kernel/watchdog_cpumask
727
728 kernel/smpboot.c | 2 ++
729 1 file changed, 2 insertions(+)
730
731 commit 1ee24693e22a535dbede927beba7b90cd8559eb4
732 Merge: 11150b9 dec4686
733 Author: Brad Spengler <spender@grsecurity.net>
734 Date: Wed Jun 8 07:39:26 2016 -0400
735
736 Merge branch 'pax-test' into grsec-test
737
738 commit dec468678ead461fc786adfbb2505b6ef66a371a
739 Merge: 85a5882 8c596d1
740 Author: Brad Spengler <spender@grsecurity.net>
741 Date: Wed Jun 8 07:39:18 2016 -0400
742
743 Merge branch 'linux-4.5.y' into pax-test
744
745 commit 11150b92c4cd78ec6a22ad0ff682faf2354b4445
746 Author: Brad Spengler <spender@grsecurity.net>
747 Date: Sun Jun 5 14:18:34 2016 -0400
748
749 compile fix
750
751 grsecurity/grsec_tpe.c | 4 ++--
752 include/linux/uidgid.h | 1 +
753 2 files changed, 3 insertions(+), 2 deletions(-)
754
755 commit 6e548aad3425733ed443e4a3232205935f0d4939
756 Author: Brad Spengler <spender@grsecurity.net>
757 Date: Sun Jun 5 08:19:09 2016 -0400
758
759 Workaround some Debian bike-shedding so that group-writable /bin dirs
760 (with group ownership of root) don't trigger TPE violations
761 Reported by jvoisin
762
763 grsecurity/grsec_tpe.c | 4 ++--
764 1 file changed, 2 insertions(+), 2 deletions(-)
765
766 commit 735ea2028ce017246358d22ec81dc6db73499770
767 Author: Brad Spengler <spender@grsecurity.net>
768 Date: Sun Jun 5 04:23:15 2016 -0400
769
770 move another instance of is_privileged_binary outside of atomic
771
772 grsecurity/gracl_segv.c | 4 +++-
773 1 file changed, 3 insertions(+), 1 deletion(-)
774
775 commit e08a7bcc7b7a1e423b5346bcef85d9a92185f65f
776 Merge: d094457 85a5882
777 Author: Brad Spengler <spender@grsecurity.net>
778 Date: Sun Jun 5 04:09:29 2016 -0400
779
780 Merge branch 'pax-test' into grsec-test
781
782 commit 85a588299f41d6a116b8d07d902de986968a84b0
783 Merge: 89f00c3 ec2a755
784 Author: Brad Spengler <spender@grsecurity.net>
785 Date: Sun Jun 5 04:08:42 2016 -0400
786
787 Merge branch 'linux-4.5.y' into pax-test
788
789 commit d094457eb90a693f7007b7f4b26c2132137c7ed2
790 Author: Brad Spengler <spender@grsecurity.net>
791 Date: Mon May 30 10:15:11 2016 -0400
792
793 move privilege/xattr check outside of locks to prevent warning, reported by shadowdaemon
794
795 grsecurity/grsec_sig.c | 7 +++++--
796 1 file changed, 5 insertions(+), 2 deletions(-)
797
798 commit 2fad2bb3392409d98498b3af53cf39f2475e4b70
799 Author: Brad Spengler <spender@grsecurity.net>
800 Date: Sun May 29 10:11:27 2016 -0400
801
802 Fix another harmless warning
803
804 fs/proc/proc_sysctl.c | 2 +-
805 1 file changed, 1 insertion(+), 1 deletion(-)
806
807 commit d62f996e40c87e46b20f45e16819f92d49f3e926
808 Author: Brad Spengler <spender@grsecurity.net>
809 Date: Sun May 29 09:56:32 2016 -0400
810
811 Fix more harmless compiler warnings
812
813 grsecurity/gracl_policy.c | 8 ++++----
814 1 file changed, 4 insertions(+), 4 deletions(-)
815
816 commit 558b784a2b87e337d12bae07d60f435c2f06d849
817 Author: Brad Spengler <spender@grsecurity.net>
818 Date: Sun May 29 09:47:50 2016 -0400
819
820 Fix more harmless warnings
821
822 grsecurity/gracl.c | 6 +++---
823 1 file changed, 3 insertions(+), 3 deletions(-)
824
825 commit 32ec63339ab130758e6941d7f1d8993e41956980
826 Author: Brad Spengler <spender@grsecurity.net>
827 Date: Sun May 29 09:41:23 2016 -0400
828
829 Fix another warning
830
831 include/linux/sched.h | 1 +
832 1 file changed, 1 insertion(+)
833
834 commit 789369de0dbde1fedd2d5cb0ee3474e160af187c
835 Author: Brad Spengler <spender@grsecurity.net>
836 Date: Sun May 29 09:22:05 2016 -0400
837
838 Fix some harmless compiler warnings
839
840 grsecurity/grsum.c | 4 ++--
841 1 file changed, 2 insertions(+), 2 deletions(-)
842
843 commit ed18543a205c206d0aa8ee6b04c606579823b7b3
844 Merge: b0b4143 89f00c3
845 Author: Brad Spengler <spender@grsecurity.net>
846 Date: Sun May 29 08:34:18 2016 -0400
847
848 Merge branch 'pax-test' into grsec-test
849
850 commit 89f00c3b596a62ae5bcfe4920e9d05b9a94be7fa
851 Author: Brad Spengler <spender@grsecurity.net>
852 Date: Sun May 29 08:26:37 2016 -0400
853
854 Update to pax-linux-4.5.5-test11.patch:
855 - fixed arm kuser helper emulation for thumb mode userland, reported by Wizzup(https://forums.grsecurity.net/viewtopic.php?f=3&t=4479)
856 - fixed incorrect function pointer casts in bcache caught by RAP, reported by torsten (https://forums.grsecurity.net/viewtopic.php?f=3&t=4482)
857 - worked around a few intentional integer underflows in the xhci driver caught by the size overflow plugin, reported by Dennis Wassenberg <dennis.wassenberg@secunet.com>
858 - moved gcc plugins from tools/gcc to scripts/gcc-plugins and simplified the plugin build system, by Emese
859 - changed the constify and latent entropy plugins to use a consistent command line switch for compile-time disabling
860 - cleaned up a few unusued macros, whitespace, inline asm constraints, etc
861 - hid the lvalue casts needed for constify behind the const_cast macro, by Mathias Krause <minipli@ld-linux.so>
862
863 Makefile | 50 +-
864 arch/Kconfig | 14 +
865 arch/arm/Kconfig | 1 +
866 arch/arm/boot/compressed/Makefile | 2 +
867 arch/arm/mach-exynos/suspend.c | 4 +-
868 arch/arm/mach-omap2/powerdomains43xx_data.c | 2 +-
869 arch/arm/mach-shmobile/platsmp-apmu.c | 2 +-
870 arch/arm/mm/fault.c | 14 +
871 arch/arm64/Kconfig | 1 +
872 arch/mips/Kconfig | 1 +
873 arch/powerpc/Kconfig | 1 +
874 arch/powerpc/include/asm/atomic.h | 7 +-
875 arch/powerpc/kernel/Makefile | 8 +-
876 arch/sparc/Kconfig | 1 +
877 arch/um/Makefile | 4 +-
878 arch/x86/Kconfig | 1 +
879 arch/x86/boot/Makefile | 3 -
880 arch/x86/boot/compressed/Makefile | 3 -
881 arch/x86/entry/common.c | 2 +-
882 arch/x86/include/asm/thread_info.h | 27 -
883 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 2 +-
884 arch/x86/kernel/cpu/perf_event_intel_pt.c | 10 +-
885 arch/x86/kernel/i8259.c | 4 +-
886 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
887 arch/x86/oprofile/nmi_int.c | 2 +-
888 arch/x86/oprofile/op_model_amd.c | 6 +-
889 arch/x86/oprofile/op_model_ppro.c | 4 +-
890 arch/x86/pci/vmd.c | 2 +-
891 arch/x86/realmode/rm/Makefile | 3 -
892 drivers/acpi/bgrt.c | 4 +-
893 drivers/ata/libata-core.c | 2 +-
894 drivers/ata/pata_arasan_cf.c | 2 +-
895 drivers/base/platform-msi.c | 14 +-
896 drivers/base/power/domain.c | 4 +-
897 drivers/bus/arm-cci.c | 6 +-
898 drivers/cdrom/cdrom.c | 2 +-
899 drivers/clk/socfpga/clk-gate.c | 4 +-
900 drivers/clk/socfpga/clk-pll.c | 4 +-
901 drivers/clk/ti/clk.c | 4 +-
902 drivers/cpufreq/acpi-cpufreq.c | 8 +-
903 drivers/cpufreq/cpufreq-dt.c | 2 +-
904 drivers/cpufreq/cpufreq.c | 8 +-
905 drivers/cpufreq/cpufreq_ondemand.c | 4 +-
906 drivers/cpufreq/p4-clockmod.c | 6 +-
907 drivers/cpufreq/speedstep-centrino.c | 2 +-
908 drivers/firmware/dmi_scan.c | 8 +-
909 drivers/firmware/efi/efi.c | 10 +-
910 drivers/firmware/google/memconsole.c | 2 +-
911 drivers/gpio/gpiolib.c | 8 +-
912 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +-
913 drivers/gpu/drm/i810/i810_drv.c | 2 +-
914 drivers/gpu/drm/i915/i915_irq.c | 86 +-
915 drivers/gpu/drm/i915/intel_display.c | 6 +-
916 drivers/gpu/drm/mga/mga_drv.c | 2 +-
917 drivers/gpu/drm/omapdrm/dss/display.c | 6 +-
918 drivers/gpu/drm/qxl/qxl_drv.c | 2 +-
919 drivers/gpu/drm/qxl/qxl_ttm.c | 4 +-
920 drivers/gpu/drm/r128/r128_drv.c | 2 +-
921 drivers/gpu/drm/radeon/radeon_drv.c | 2 +-
922 drivers/gpu/drm/savage/savage_drv.c | 2 +-
923 drivers/gpu/drm/sis/sis_drv.c | 2 +-
924 drivers/gpu/drm/tegra/dc.c | 2 +-
925 drivers/gpu/drm/tegra/sor.c | 2 +-
926 drivers/gpu/drm/via/via_drv.c | 2 +-
927 drivers/idle/intel_idle.c | 4 +-
928 drivers/infiniband/hw/qib/qib.h | 1 -
929 drivers/iommu/arm-smmu.c | 4 +-
930 drivers/isdn/hardware/eicon/mntfunc.c | 2 +-
931 drivers/md/bcache/btree.c | 11 +-
932 drivers/md/bcache/closure.c | 4 +-
933 drivers/md/bcache/closure.h | 8 +-
934 drivers/md/bcache/journal.c | 16 +-
935 drivers/md/bcache/movinggc.c | 12 +-
936 drivers/md/bcache/request.c | 54 +-
937 drivers/md/bcache/request.h | 2 +-
938 drivers/md/bcache/super.c | 30 +-
939 drivers/md/bcache/writeback.c | 12 +-
940 drivers/media/platform/am437x/am437x-vpfe.c | 2 +-
941 drivers/mfd/twl4030-irq.c | 4 +-
942 drivers/misc/c2port/core.c | 2 +-
943 drivers/misc/mic/scif/scif_api.c | 8 +-
944 drivers/mmc/host/mmci.c | 2 +-
945 drivers/mmc/host/omap_hsmmc.c | 2 +-
946 drivers/mmc/host/sdhci-esdhc-imx.c | 2 +-
947 drivers/mmc/host/sdhci-s3c.c | 6 +-
948 drivers/net/ethernet/cavium/liquidio/lio_main.c | 2 +-
949 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 4 +-
950 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 2 +-
951 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 6 +-
952 drivers/net/macvlan.c | 14 +-
953 drivers/net/wireless/ath/ath9k/main.c | 20 +-
954 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 2 +-
955 drivers/net/wireless/mac80211_hwsim.c | 22 +-
956 drivers/net/wireless/ti/wl1251/sdio.c | 8 +-
957 drivers/net/wireless/ti/wl12xx/main.c | 4 +-
958 drivers/net/wireless/ti/wl18xx/main.c | 4 +-
959 drivers/of/fdt.c | 2 +-
960 drivers/pci/hotplug/acpiphp_ibm.c | 2 +-
961 drivers/pci/hotplug/cpcihp_zt5550.c | 6 +-
962 drivers/pci/hotplug/pci_hotplug_core.c | 4 +-
963 drivers/pci/msi.c | 12 +-
964 drivers/pinctrl/pinctrl-at91.c | 2 +-
965 drivers/platform/x86/msi-laptop.c | 12 +-
966 drivers/power/reset/at91-reset.c | 2 +-
967 drivers/powercap/powercap_sys.c | 6 +-
968 drivers/regulator/max8660.c | 4 +-
969 drivers/regulator/max8973-regulator.c | 12 +-
970 drivers/regulator/mc13892-regulator.c | 4 +-
971 drivers/rtc/rtc-armada38x.c | 4 +-
972 drivers/rtc/rtc-cmos.c | 2 +-
973 drivers/rtc/rtc-m48t59.c | 2 +-
974 drivers/rtc/rtc-rx8010.c | 6 +-
975 drivers/rtc/rtc-test.c | 4 +-
976 drivers/scsi/aacraid/aachba.c | 4 +-
977 drivers/scsi/lpfc/lpfc_init.c | 4 +-
978 drivers/scsi/qla2xxx/qla_os.c | 4 +-
979 drivers/staging/sm750fb/sm750.c | 8 +-
980 drivers/thermal/cpu_cooling.c | 6 +-
981 drivers/thermal/int340x_thermal/int3400_thermal.c | 4 +-
982 drivers/thermal/of-thermal.c | 12 +-
983 drivers/tty/pty.c | 2 +-
984 drivers/tty/serial/8250/8250_core.c | 6 +-
985 drivers/tty/serial/kgdb_nmi.c | 2 +-
986 drivers/usb/host/xhci-ring.c | 52 +-
987 drivers/video/fbdev/aty/atyfb_base.c | 4 +-
988 drivers/video/fbdev/aty/mach64_cursor.c | 2 +-
989 drivers/video/fbdev/core/fb_defio.c | 6 +-
990 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 12 +-
991 drivers/video/fbdev/nvidia/nvidia.c | 18 +-
992 drivers/video/fbdev/omap2/omapfb/dss/display.c | 6 +-
993 drivers/video/fbdev/s1d13xxxfb.c | 4 +-
994 drivers/video/fbdev/smscufx.c | 2 +-
995 drivers/video/fbdev/udlfb.c | 2 +-
996 drivers/video/fbdev/uvesafb.c | 4 +-
997 drivers/video/fbdev/vesafb.c | 2 +-
998 fs/fuse/cuse.c | 6 +-
999 fs/jffs2/file.c | 2 +-
1000 fs/nls/nls_base.c | 4 +-
1001 fs/nls/nls_euc-jp.c | 4 +-
1002 fs/nls/nls_koi8-ru.c | 4 +-
1003 fs/proc/proc_sysctl.c | 4 +-
1004 fs/tracefs/inode.c | 4 +-
1005 include/linux/compiler-gcc.h | 1 +
1006 include/linux/compiler.h | 4 +
1007 include/linux/seq_buf.h | 2 +-
1008 include/linux/sysfs.h | 2 +-
1009 kernel/cgroup.c | 14 +-
1010 kernel/irq/msi.c | 12 +-
1011 kernel/notifier.c | 4 +-
1012 kernel/pid.c | 2 +-
1013 kernel/trace/trace_output.c | 8 +-
1014 net/core/rtnetlink.c | 2 +-
1015 net/xfrm/xfrm_state.c | 2 +-
1016 scripts/Makefile | 1 +
1017 scripts/Makefile.gcc-plugins | 138 +-
1018 scripts/Makefile.host | 6 +-
1019 scripts/gcc-plugin.sh | 4 +-
1020 scripts/gcc-plugins/Makefile | 45 +
1021 scripts/gcc-plugins/checker_plugin.c | 496 +
1022 scripts/gcc-plugins/colorize_plugin.c | 162 +
1023 scripts/gcc-plugins/constify_plugin.c | 521 +
1024 scripts/gcc-plugins/gcc-common.h | 879 +
1025 scripts/gcc-plugins/gcc-generate-gimple-pass.h | 175 +
1026 scripts/gcc-plugins/gcc-generate-ipa-pass.h | 289 +
1027 scripts/gcc-plugins/gcc-generate-rtl-pass.h | 175 +
1028 scripts/gcc-plugins/gcc-generate-simple_ipa-pass.h | 175 +
1029 scripts/gcc-plugins/initify_plugin.c | 536 +
1030 scripts/gcc-plugins/kallocstat_plugin.c | 135 +
1031 scripts/gcc-plugins/kernexec_plugin.c | 407 +
1032 scripts/gcc-plugins/latent_entropy_plugin.c | 438 +
1033 scripts/gcc-plugins/rap_plugin/Makefile | 4 +
1034 scripts/gcc-plugins/rap_plugin/rap.h | 36 +
1035 scripts/gcc-plugins/rap_plugin/rap_fptr_pass.c | 220 +
1036 scripts/gcc-plugins/rap_plugin/rap_hash.c | 382 +
1037 scripts/gcc-plugins/rap_plugin/rap_plugin.c | 511 +
1038 scripts/gcc-plugins/rap_plugin/sip.c | 96 +
1039 .../gcc-plugins/size_overflow_plugin/.gitignore | 3 +
1040 scripts/gcc-plugins/size_overflow_plugin/Makefile | 28 +
1041 .../disable_size_overflow_hash.data | 12444 +++++++++++
1042 .../generate_size_overflow_hash.sh | 103 +
1043 .../insert_size_overflow_asm.c | 369 +
1044 .../size_overflow_plugin/intentional_overflow.c | 1166 +
1045 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
1046 .../size_overflow_plugin/size_overflow.h | 331 +
1047 .../size_overflow_plugin/size_overflow_debug.c | 194 +
1048 .../size_overflow_plugin/size_overflow_hash.data | 21504 +++++++++++++++++++
1049 .../size_overflow_hash_aux.data | 92 +
1050 .../size_overflow_plugin/size_overflow_ipa.c | 1163 +
1051 .../size_overflow_plugin/size_overflow_misc.c | 505 +
1052 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
1053 .../size_overflow_plugin_hash.c | 352 +
1054 .../size_overflow_plugin/size_overflow_transform.c | 743 +
1055 .../size_overflow_transform_core.c | 1025 +
1056 scripts/gcc-plugins/stackleak_plugin.c | 350 +
1057 scripts/gcc-plugins/structleak_plugin.c | 239 +
1058 scripts/package/builddeb | 2 +-
1059 security/Kconfig | 8 +-
1060 sound/soc/codecs/sti-sas.c | 8 +-
1061 sound/soc/soc-ac97.c | 4 +-
1062 tools/gcc/Makefile | 46 -
1063 tools/gcc/checker_plugin.c | 496 -
1064 tools/gcc/colorize_plugin.c | 162 -
1065 tools/gcc/constify_plugin.c | 521 -
1066 tools/gcc/gcc-common.h | 879 -
1067 tools/gcc/gcc-generate-gimple-pass.h | 175 -
1068 tools/gcc/gcc-generate-ipa-pass.h | 289 -
1069 tools/gcc/gcc-generate-rtl-pass.h | 175 -
1070 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 -
1071 tools/gcc/initify_plugin.c | 536 -
1072 tools/gcc/kallocstat_plugin.c | 135 -
1073 tools/gcc/kernexec_plugin.c | 407 -
1074 tools/gcc/latent_entropy_plugin.c | 422 -
1075 tools/gcc/rap_plugin/Makefile | 4 -
1076 tools/gcc/rap_plugin/rap.h | 36 -
1077 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 -
1078 tools/gcc/rap_plugin/rap_hash.c | 382 -
1079 tools/gcc/rap_plugin/rap_plugin.c | 511 -
1080 tools/gcc/rap_plugin/sip.c | 96 -
1081 tools/gcc/size_overflow_plugin/.gitignore | 3 -
1082 tools/gcc/size_overflow_plugin/Makefile | 28 -
1083 .../disable_size_overflow_hash.data | 12444 -----------
1084 .../generate_size_overflow_hash.sh | 103 -
1085 .../insert_size_overflow_asm.c | 369 -
1086 .../size_overflow_plugin/intentional_overflow.c | 1166 -
1087 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 -
1088 tools/gcc/size_overflow_plugin/size_overflow.h | 331 -
1089 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 -
1090 .../size_overflow_plugin/size_overflow_hash.data | 21504 -------------------
1091 .../size_overflow_hash_aux.data | 92 -
1092 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 -
1093 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 -
1094 .../size_overflow_plugin/size_overflow_plugin.c | 290 -
1095 .../size_overflow_plugin_hash.c | 352 -
1096 .../size_overflow_plugin/size_overflow_transform.c | 743 -
1097 .../size_overflow_transform_core.c | 1025 -
1098 tools/gcc/stackleak_plugin.c | 350 -
1099 tools/gcc/structleak_plugin.c | 239 -
1100 237 files changed, 47340 insertions(+), 47276 deletions(-)
1101
1102 commit b0b41430a8c9e6e5067c896c07d361e527e298e8
1103 Author: Brad Spengler <spender@grsecurity.net>
1104 Date: Sat May 21 13:59:19 2016 -0400
1105
1106 Fix gcc assert properly, from Emese Revfy
1107
1108 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1109 tools/gcc/size_overflow_plugin/size_overflow_plugin.c | 2 +-
1110 2 files changed, 2 insertions(+), 2 deletions(-)
1111
1112 commit 5e7a47f06420603b0f26f1b45fe2ab02838795c9
1113 Merge: f844209 5929595
1114 Author: Brad Spengler <spender@grsecurity.net>
1115 Date: Fri May 20 20:19:27 2016 -0400
1116
1117 Merge branch 'pax-test' into grsec-test
1118
1119 commit 5929595ec558e9282901842bdf9e4a981751fb08
1120 Author: Brad Spengler <spender@grsecurity.net>
1121 Date: Fri May 20 20:18:58 2016 -0400
1122
1123 Update to pax-linux-4.5.5-test9.patch:
1124 - fixed a few more incorrect fptr casts for RAP
1125
1126 arch/x86/math-emu/fpu_etc.c | 9 +++++++--
1127 arch/x86/math-emu/fpu_trig.c | 13 +++++++++----
1128 arch/x86/math-emu/reg_constant.c | 7 ++++++-
1129 drivers/isdn/hisax/hfc_2bds0.c | 4 ++--
1130 drivers/isdn/hisax/hfcscard.c | 6 ++++--
1131 drivers/isdn/hisax/saphir.c | 5 +++--
1132 drivers/isdn/hisax/teleint.c | 5 +++--
1133 drivers/media/pci/sta2x11/sta2x11_vip.c | 5 +++--
1134 drivers/net/hamradio/baycom_epp.c | 2 +-
1135 9 files changed, 38 insertions(+), 18 deletions(-)
1136
1137 commit f84420916698cdf33a81f046206d050e2c3e6966
1138 Merge: fa18ce2 445754e
1139 Author: Brad Spengler <spender@grsecurity.net>
1140 Date: Fri May 20 18:52:20 2016 -0400
1141
1142 Merge branch 'pax-test' into grsec-test
1143
1144 commit 445754e5717176c2b3431a0cde1e90df51cc43e2
1145 Author: Brad Spengler <spender@grsecurity.net>
1146 Date: Fri May 20 18:51:52 2016 -0400
1147
1148 Update to pax-linux-4.5.4-test8.patch:
1149 - fixed a USERCOPY report in the mwifiex driver, by Dennis Wassenberg <dennis.wassenberg@secunet.com> and Mathias Krause <minipli@ld-linux.so>
1150
1151 drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 2 +-
1152 drivers/net/wireless/marvell/mwifiex/pcie.c | 4 ++--
1153 drivers/net/wireless/marvell/mwifiex/sdio.c | 10 ++++------
1154 3 files changed, 7 insertions(+), 9 deletions(-)
1155
1156 commit fa18ce2d37a92442162fb72b8f85ee86120ffacb
1157 Author: Brad Spengler <spender@grsecurity.net>
1158 Date: Thu May 19 18:30:08 2016 -0400
1159
1160 Update size_overflow hash, from Dr. Toth
1161
1162 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
1163 1 file changed, 1 insertion(+)
1164
1165 commit 61c487965dbc34618fe292663759d6fa0515bcad
1166 Merge: fbc84d2 a734dbd
1167 Author: Brad Spengler <spender@grsecurity.net>
1168 Date: Thu May 19 06:26:52 2016 -0400
1169
1170 Merge branch 'pax-test' into grsec-test
1171
1172 commit a734dbda8b785c38baa1858df2bffc89b45d070a
1173 Merge: 238dfca 3b41b7e
1174 Author: Brad Spengler <spender@grsecurity.net>
1175 Date: Thu May 19 06:24:25 2016 -0400
1176
1177 Merge branch 'linux-4.5.y' into pax-test
1178
1179 commit fbc84d202d311b4dc09bcc922678df60b6e76614
1180 Merge: 84fa82c 238dfca
1181 Author: Brad Spengler <spender@grsecurity.net>
1182 Date: Fri May 13 18:00:06 2016 -0400
1183
1184 Merge branch 'pax-test' into grsec-test
1185
1186 commit 238dfca3ffe87f4410e67c8ceb554b9ce4f3132b
1187 Author: Brad Spengler <spender@grsecurity.net>
1188 Date: Fri May 13 17:59:42 2016 -0400
1189
1190 Compile fix for older gcc
1191
1192 tools/gcc/size_overflow_plugin/intentional_overflow.c | 2 +-
1193 1 file changed, 1 insertion(+), 1 deletion(-)
1194
1195 commit 84fa82c59fa5051e1485a3dcc857b87b70dbc18d
1196 Merge: 2cece8e 4654023
1197 Author: Brad Spengler <spender@grsecurity.net>
1198 Date: Fri May 13 17:31:49 2016 -0400
1199
1200 Merge branch 'pax-test' into grsec-test
1201
1202 commit 4654023e72b0834142594eee879e657664498443
1203 Author: Brad Spengler <spender@grsecurity.net>
1204 Date: Fri May 13 17:29:38 2016 -0400
1205
1206 Update to pax-linux-4.5.4-test7.patch:
1207 - changed the RAP hash emission code to accomodate x86 disassemblers, suggested by Mathias Krause <minipli@ld-linux.so>
1208 - fixed a few size overflow false positives in JFS due to the lack of endian conversion macros for signed types, reported by ryonaloli via hunger
1209 - fixed a compiler assert triggered by the size overflow plugin
1210
1211 tools/gcc/rap_plugin/rap_plugin.c | 39 ++++++++++++++++++----
1212 .../disable_size_overflow_hash.data | 3 ++
1213 .../size_overflow_plugin/intentional_overflow.c | 2 +-
1214 .../size_overflow_plugin/size_overflow_hash.data | 3 --
1215 4 files changed, 36 insertions(+), 11 deletions(-)
1216
1217 commit 2cece8e8e0e2fce9943345c0ebebd7436929868e
1218 Merge: 6df0471 ea68d2e
1219 Author: Brad Spengler <spender@grsecurity.net>
1220 Date: Thu May 12 18:41:15 2016 -0400
1221
1222 Merge branch 'pax-test' into grsec-test
1223
1224 commit ea68d2e7123a83aba24db99d5ef487b1397fd6d0
1225 Author: Brad Spengler <spender@grsecurity.net>
1226 Date: Thu May 12 18:40:50 2016 -0400
1227
1228 Update to pax-linux-4.5.3-test6.patch:
1229 - really fixed https://forums.grsecurity.net/viewtopic.php?f=3&t=4473
1230 - the nfsd_proc_read fix for RAP had a typo causing an oops, reported by Carlos Carvalho (https://forums.grsecurity.net/viewtopic.php?f=3&t=4471)
1231 - fixed a few format string warnings in the RAP hash emission code, reported by Dwokfur
1232
1233 drivers/net/ppp/pptp.c | 1 -
1234 fs/nfsd/nfsproc.c | 2 +-
1235 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1236 tools/gcc/rap_plugin/rap_plugin.c | 14 ++++++++++----
1237 4 files changed, 12 insertions(+), 7 deletions(-)
1238
1239 commit 6df04719a7cf4d3f60c9e6190f8eb4b986ce2b1b
1240 Author: David Howells <dhowells@redhat.com>
1241 Date: Tue Feb 23 11:03:12 2016 +0000
1242
1243 KEYS: Fix ASN.1 indefinite length object parsing
1244
1245 This fixes CVE-2016-0758.
1246
1247 In the ASN.1 decoder, when the length field of an ASN.1 value is extracted,
1248 it isn't validated against the remaining amount of data before being added
1249 to the cursor. With a sufficiently large size indicated, the check:
1250
1251 datalen - dp < 2
1252
1253 may then fail due to integer overflow.
1254
1255 Fix this by checking the length indicated against the amount of remaining
1256 data in both places a definite length is determined.
1257
1258 Whilst we're at it, make the following changes:
1259
1260 (1) Check the maximum size of extended length does not exceed the capacity
1261 of the variable it's being stored in (len) rather than the type that
1262 variable is assumed to be (size_t).
1263
1264 (2) Compare the EOC tag to the symbolic constant ASN1_EOC rather than the
1265 integer 0.
1266
1267 (3) To reduce confusion, move the initialisation of len outside of:
1268
1269 for (len = 0; n > 0; n--) {
1270
1271 since it doesn't have anything to do with the loop counter n.
1272
1273 Signed-off-by: David Howells <dhowells@redhat.com>
1274 Reviewed-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
1275 Acked-by: David Woodhouse <David.Woodhouse@intel.com>
1276 Acked-by: Peter Jones <pjones@redhat.com>
1277
1278 lib/asn1_decoder.c | 16 +++++++++-------
1279 1 file changed, 9 insertions(+), 7 deletions(-)
1280
1281 commit acb6cef8047476b8afc3ff3f07286b9e36de1b77
1282 Merge: 735f14a a7c9bec
1283 Author: Brad Spengler <spender@grsecurity.net>
1284 Date: Wed May 11 17:05:21 2016 -0400
1285
1286 Merge branch 'pax-test' into grsec-test
1287
1288 commit a7c9bec57dea73ceee1246a64df55038ea840be9
1289 Merge: f5bd134 a29ab35
1290 Author: Brad Spengler <spender@grsecurity.net>
1291 Date: Wed May 11 17:04:48 2016 -0400
1292
1293 Merge branch 'linux-4.5.y' into pax-test
1294
1295 commit 735f14a2b5562cd1329b263a81781d59dacffd3e
1296 Author: Brad Spengler <spender@grsecurity.net>
1297 Date: Wed May 11 06:57:40 2016 -0400
1298
1299 Fix typo in nfsd RAP changes causing oops reported by Carlos Carvalho
1300 at: https://forums.grsecurity.net/viewtopic.php?f=3&t=4471
1301
1302 fs/nfsd/nfsproc.c | 2 +-
1303 1 file changed, 1 insertion(+), 1 deletion(-)
1304
1305 commit 35e1e615072d0bb885b38ee1b2ada7a0a6a91f9d
1306 Merge: 9e3e5ae3e f5bd134
1307 Author: Brad Spengler <spender@grsecurity.net>
1308 Date: Tue May 10 20:56:54 2016 -0400
1309
1310 Merge branch 'pax-test' into grsec-test
1311
1312 commit f5bd1342fa631bb3b69a2e8919785c827c4edf74
1313 Author: Brad Spengler <spender@grsecurity.net>
1314 Date: Tue May 10 20:55:57 2016 -0400
1315
1316 Update to pax-linux-4.5.3-test5.patch:
1317 - marked all indirectly callable x86 asm crypto functions, reported by Dwokfur and minipli (https://forums.grsecurity.net/viewtopic.php?f=3&t=4468)
1318 - worked around an intentional integer overflow introduced by gcc-6 that triggered a size overflow false positive, reported by hooruD, chron and Fen (https://forums.grsecurity.net/viewtopic.php?f=3&t=4469)
1319 - made some preparations for enabling RAP on i386 as well, will have to wait due to KERNEXEC
1320
1321 arch/x86/crypto/aesni-intel_asm.S | 6 +++---
1322 arch/x86/crypto/sha-mb/sha1_mb_mgr_flush_avx2.S | 4 ++--
1323 arch/x86/crypto/sha-mb/sha1_mb_mgr_submit_avx2.S | 2 +-
1324 arch/x86/crypto/sha256_ni_asm.S | 2 +-
1325 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
1326 arch/x86/entry/common.c | 1 -
1327 include/linux/linkage.h | 22 +++++++++++++++-------
1328 tools/gcc/rap_plugin/rap_fptr_pass.c | 2 +-
1329 tools/gcc/rap_plugin/rap_hash.c | 1 +
1330 tools/gcc/rap_plugin/rap_plugin.c | 18 +++++++++---------
1331 .../disable_size_overflow_hash.data | 1 +
1332 .../size_overflow_plugin/size_overflow_hash.data | 1 -
1333 12 files changed, 35 insertions(+), 27 deletions(-)
1334
1335 commit 9e3e5ae3e9ed69452d4133490dd1831376b9a1e8
1336 Merge: e5983fd cfcaa03
1337 Author: Brad Spengler <spender@grsecurity.net>
1338 Date: Sun May 8 08:04:18 2016 -0400
1339
1340 Merge branch 'pax-test' into grsec-test
1341
1342 commit cfcaa036dd3756fc32e083a7c486c1143d93fd22
1343 Author: Brad Spengler <spender@grsecurity.net>
1344 Date: Sun May 8 08:03:53 2016 -0400
1345
1346 Update to pax-linux-4.5.3-test4.patch:
1347 - fixed a few incorrect function types (mostly start_xmit callbacks) found by RAP, reported by cinder (https://forums.grsecurity.net/viewtopic.php?f=3&t=4466)
1348
1349 drivers/char/tpm/tpm-chip.c | 7 ++++++-
1350 drivers/net/can/bfin_can.c | 2 +-
1351 drivers/net/can/flexcan.c | 2 +-
1352 drivers/net/ethernet/adi/bfin_mac.c | 2 +-
1353 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
1354 drivers/net/ethernet/amd/7990.c | 2 +-
1355 drivers/net/ethernet/amd/7990.h | 2 +-
1356 drivers/net/ethernet/amd/atarilance.c | 4 ++--
1357 drivers/net/ethernet/amd/declance.c | 2 +-
1358 drivers/net/ethernet/amd/sun3lance.c | 4 ++--
1359 drivers/net/ethernet/amd/sunlance.c | 2 +-
1360 drivers/net/ethernet/broadcom/bcm63xx_enet.c | 2 +-
1361 drivers/net/ethernet/davicom/dm9000.c | 2 +-
1362 drivers/net/ethernet/faraday/ftgmac100.c | 2 +-
1363 drivers/net/ethernet/faraday/ftmac100.c | 2 +-
1364 drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
1365 drivers/net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
1366 drivers/net/ethernet/freescale/gianfar.c | 4 ++--
1367 drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
1368 drivers/net/ethernet/i825xx/lib82596.c | 4 ++--
1369 drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +-
1370 drivers/net/ethernet/ibm/emac/core.c | 4 ++--
1371 drivers/net/ethernet/micrel/ks8695net.c | 2 +-
1372 drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
1373 drivers/net/ethernet/netx-eth.c | 2 +-
1374 drivers/net/ethernet/nuvoton/w90p910_ether.c | 2 +-
1375 drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
1376 drivers/net/ethernet/seeq/sgiseeq.c | 2 +-
1377 drivers/net/ethernet/sgi/ioc3-eth.c | 4 ++--
1378 drivers/net/ethernet/smsc/smc911x.c | 2 +-
1379 drivers/net/ethernet/smsc/smc91x.c | 2 +-
1380 drivers/net/ethernet/sun/sunbmac.c | 2 +-
1381 drivers/net/ethernet/sun/sunqe.c | 2 +-
1382 drivers/net/ethernet/sun/sunvnet.c | 10 +++++-----
1383 drivers/net/ethernet/ti/cpmac.c | 2 +-
1384 drivers/net/ethernet/ti/netcp_core.c | 2 +-
1385 drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
1386 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 2 +-
1387 drivers/net/xen-netback/interface.c | 2 +-
1388 drivers/net/xen-netfront.c | 2 +-
1389 40 files changed, 55 insertions(+), 50 deletions(-)
1390
1391 commit e5983fd19799feb3bf947cd0dc2b5435deee3332
1392 Merge: 5ecb84f a235ecd
1393 Author: Brad Spengler <spender@grsecurity.net>
1394 Date: Sat May 7 00:00:42 2016 -0400
1395
1396 Merge branch 'pax-test' into grsec-test
1397
1398 commit a235ecd8bdece417e83f9cf89c76607bf15955dc
1399 Author: Brad Spengler <spender@grsecurity.net>
1400 Date: Fri May 6 23:59:34 2016 -0400
1401
1402 Update to pax-linux-4.5.3-test3.patch:
1403 - fixed some more of PARAVIRT for RAP, reported by hunger
1404 - Emese increased the coverage of initify by marking up str* and mem* functions
1405 - added error reporting for refusing to load modules incompatible with KERNEXEC's 'or' method, reported by Martin Väth (https://bugs.gentoo.org/show_bug.cgi?id=581726)
1406
1407 arch/arm/include/asm/string.h | 10 ++---
1408 arch/arm64/include/asm/string.h | 22 +++++------
1409 arch/x86/boot/string.h | 4 +-
1410 arch/x86/include/asm/string_32.h | 20 +++++-----
1411 arch/x86/include/asm/string_64.h | 16 ++++----
1412 arch/x86/kernel/paravirt-spinlocks.c | 22 +++++++++--
1413 arch/x86/xen/mmu.c | 6 ++-
1414 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 ++---
1415 include/linux/string.h | 70 +++++++++++++++++-----------------
1416 include/linux/syscalls.h | 2 +-
1417 kernel/module.c | 4 +-
1418 mm/fadvise.c | 2 +-
1419 tools/gcc/randomize_layout_seed.h | 1 -
1420 tools/gcc/rap_plugin/rap_plugin.c | 7 +++-
1421 14 files changed, 109 insertions(+), 87 deletions(-)
1422
1423 commit 5ecb84f55a9bdf8b39054c23d90646ba0591ce1c
1424 Author: Brad Spengler <spender@grsecurity.net>
1425 Date: Fri May 6 08:51:58 2016 -0400
1426
1427 Remove !PARAVIRT dependency on RAP
1428
1429 security/Kconfig | 2 +-
1430 1 file changed, 1 insertion(+), 1 deletion(-)
1431
1432 commit eecd10d7c579d2601c384c1e9e0f062a8dda40e7
1433 Author: Brad Spengler <spender@grsecurity.net>
1434 Date: Fri May 6 06:34:48 2016 -0400
1435
1436 Update copyright year
1437
1438 tools/gcc/randomize_layout_plugin.c | 2 +-
1439 1 file changed, 1 insertion(+), 1 deletion(-)
1440
1441 commit 7d7e01439c2601abcae2ecfc66a883be258a2691
1442 Merge: 3315e83 c2aa83b
1443 Author: Brad Spengler <spender@grsecurity.net>
1444 Date: Fri May 6 06:34:25 2016 -0400
1445
1446 Merge branch 'pax-test' into grsec-test
1447
1448 commit c2aa83bf2d65989c262ff33312874ee7fe38606a
1449 Author: Brad Spengler <spender@grsecurity.net>
1450 Date: Fri May 6 06:34:04 2016 -0400
1451
1452 Update to pax-linux-4.5.2-test2.patch:
1453 - minipli fixed a few missing hunks left out from the 4.5 port
1454 - fixed a regression in handling user.pax.flags on tmpfs, reported by blueness and Stebalien (https://forums.grsecurity.net/viewtopic.php?f=3&t=4462)
1455 - fixed a few compile regressions on arm, reported by Wizzup
1456 - fixed PARAVIRT for RAP, reported by spender
1457 - fixed the very old PAGEEXEC/i386 TLB reload code for SMAP (not that it could work there), reported by spender
1458 - Emese fixed a false positive size overflow report caused by gcc-5 and newer, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4455)
1459
1460 arch/arm/Kconfig | 2 +-
1461 arch/arm/include/asm/domain.h | 2 +-
1462 arch/arm/kernel/process.c | 6 +
1463 arch/mips/mm/mmap.c | 27 ++++
1464 arch/powerpc/kernel/process.c | 39 +++++
1465 arch/s390/kernel/process.c | 13 ++
1466 arch/x86/entry/entry_32.S | 2 +-
1467 arch/x86/include/asm/fixmap.h | 2 +-
1468 arch/x86/kernel/paravirt.c | 90 +++++++++--
1469 arch/x86/mm/fault.c | 2 +
1470 arch/x86/mm/pgtable.c | 2 +-
1471 drivers/cpufreq/intel_pstate.c | 2 +-
1472 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 +-
1473 drivers/net/ethernet/8390/ax88796.c | 4 +-
1474 drivers/oprofile/oprofilefs.c | 4 +-
1475 drivers/platform/x86/thinkpad_acpi.c | 1 -
1476 fs/xattr.c | 2 +-
1477 include/asm-generic/atomic-long.h | 4 +
1478 include/uapi/linux/xattr.h | 3 +-
1479 kernel/module.c | 2 +-
1480 mm/shmem.c | 2 -
1481 security/Kconfig | 2 +
1482 .../insert_size_overflow_asm.c | 2 +-
1483 .../size_overflow_plugin/intentional_overflow.c | 80 ++++++++--
1484 .../size_overflow_plugin/remove_unnecessary_dup.c | 2 +-
1485 tools/gcc/size_overflow_plugin/size_overflow.h | 8 +-
1486 .../gcc/size_overflow_plugin/size_overflow_debug.c | 2 +-
1487 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 2 +-
1488 .../gcc/size_overflow_plugin/size_overflow_misc.c | 2 +-
1489 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
1490 .../size_overflow_plugin_hash.c | 2 +-
1491 .../size_overflow_plugin/size_overflow_transform.c | 34 ++---
1492 .../size_overflow_transform_core.c | 170 +++++++++++----------
1493 33 files changed, 370 insertions(+), 156 deletions(-)
1494
1495 commit 3315e83c1e9738784da3c1c5836dd13b7593a8f1
1496 Author: Brad Spengler <spender@grsecurity.net>
1497 Date: Wed May 4 21:03:36 2016 -0400
1498
1499 Add PAGEEXEC support for i386 !PAE on SMAP-capable processors
1500 (won't be used by anyone, just for correctness sake)
1501
1502 arch/x86/mm/fault.c | 2 ++
1503 1 file changed, 2 insertions(+)
1504
1505 commit b9e96108d2092c12e42e1810a62aec85f6ddc501
1506 Merge: 6d98323 a3273aa
1507 Author: Brad Spengler <spender@grsecurity.net>
1508 Date: Wed May 4 19:06:44 2016 -0400
1509
1510 Merge branch 'pax-test' into grsec-test
1511
1512 commit a3273aa2488f9e201620ee53af1acfd99c58650a
1513 Merge: e0e4c2c fbc310e
1514 Author: Brad Spengler <spender@grsecurity.net>
1515 Date: Wed May 4 19:06:36 2016 -0400
1516
1517 Merge branch 'linux-4.5.y' into pax-test
1518
1519 commit 6d98323e0b511bdb77b9ef11d84207219331ac69
1520 Author: Brad Spengler <spender@grsecurity.net>
1521 Date: Tue May 3 21:58:09 2016 -0400
1522
1523 Backport fix from http://www.spinics.net/lists/linux-usb/msg140243.html
1524
1525 drivers/usb/core/devio.c | 9 +++++----
1526 1 file changed, 5 insertions(+), 4 deletions(-)
1527
1528 commit b003c68f96dd6a483b515290756816b6c909f34f
1529 Author: Brad Spengler <spender@grsecurity.net>
1530 Date: Sun May 1 12:06:48 2016 -0400
1531
1532 Add note about RANDSTRUCT and the gcc runtime library exception
1533
1534 tools/gcc/randomize_layout_plugin.c | 5 +++++
1535 1 file changed, 5 insertions(+)
1536
1537 commit fe375f07d31c5d561fcca4016f7c33e885fa3586
1538 Author: Brad Spengler <spender@grsecurity.net>
1539 Date: Fri Apr 29 06:22:29 2016 -0400
1540
1541 Revert change to regmap_access_show()
1542
1543 drivers/base/regmap/regmap-debugfs.c | 3 +--
1544 1 file changed, 1 insertion(+), 2 deletions(-)
1545
1546 commit 3f5df6e7cf9716b4854fb282b6eb22cb1e52e92a
1547 Author: Brad Spengler <spender@grsecurity.net>
1548 Date: Fri Apr 29 06:20:12 2016 -0400
1549
1550 Merge a number of fixes from Mathias Krause
1551
1552 arch/x86/entry/entry_32.S | 2 +-
1553 drivers/base/regmap/regmap-debugfs.c | 3 ++-
1554 drivers/cpufreq/intel_pstate.c | 2 +-
1555 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 ++++++-
1556 drivers/oprofile/oprofilefs.c | 4 ++--
1557 drivers/platform/x86/thinkpad_acpi.c | 1 -
1558 init/Kconfig | 1 -
1559 kernel/module.c | 4 +---
1560 8 files changed, 13 insertions(+), 11 deletions(-)
1561
1562 commit 127927d7e57793eca299226cb31ecd9d235bbd62
1563 Author: Brad Spengler <spender@grsecurity.net>
1564 Date: Thu Apr 28 20:58:04 2016 -0400
1565
1566 Add temporary dependency on !PARAVIRT for RAP until some fallout can be fixed
1567
1568 security/Kconfig | 2 +-
1569 1 file changed, 1 insertion(+), 1 deletion(-)
1570
1571 commit d37fff4904eee095ce50ea522efbfaf2a4bcb47e
1572 Author: Brad Spengler <spender@grsecurity.net>
1573 Date: Thu Apr 28 18:44:18 2016 -0400
1574
1575 Update to pax-linux-4.5.2-test1y.patch
1576
1577 tools/gcc/rap_plugin/rap_plugin.c | 6 ++++--
1578 1 file changed, 4 insertions(+), 2 deletions(-)
1579
1580 commit 5e309719b190a24dccd73c8b6ae388bd7f34660b
1581 Merge: ac01f5e e0e4c2c
1582 Author: Brad Spengler <spender@grsecurity.net>
1583 Date: Thu Apr 28 17:37:37 2016 -0400
1584
1585 Merge branch 'pax-test' into grsec-test
1586
1587 commit e0e4c2ce05e0cd594b716a1e12d91928a0d083fd
1588 Author: Brad Spengler <spender@grsecurity.net>
1589 Date: Thu Apr 28 17:36:23 2016 -0400
1590
1591 Update to pax-linux-4.5.2-test1x.patch
1592
1593 arch/x86/include/asm/alternative-asm.h | 8 --------
1594 drivers/lguest/core.c | 2 +-
1595 kernel/sched/deadline.c | 4 ++--
1596 mm/swap.c | 7 ++++++-
1597 tools/gcc/colorize_plugin.c | 2 +-
1598 tools/gcc/gcc-common.h | 21 +++++++++++++++++++++
1599 6 files changed, 31 insertions(+), 13 deletions(-)
1600
1601 commit ac01f5eb279d93b10d63f87c9d851e039ab1bc3e
1602 Author: Brad Spengler <spender@grsecurity.net>
1603 Date: Thu Apr 28 17:35:14 2016 -0400
1604
1605 Initial import of grsecurity 3.1 for 4.5.2 with limited RAP support
1606
1607 Documentation/dontdiff | 2 +
1608 Documentation/kernel-parameters.txt | 11 +
1609 Documentation/sysctl/kernel.txt | 15 +
1610 Makefile | 5 +-
1611 arch/alpha/include/asm/cache.h | 4 +-
1612 arch/alpha/kernel/osf_sys.c | 12 +-
1613 arch/arc/Kconfig | 1 +
1614 arch/arm/Kconfig | 1 +
1615 arch/arm/Kconfig.debug | 1 +
1616 arch/arm/include/asm/thread_info.h | 7 +-
1617 arch/arm/kernel/entry-common.S | 8 +-
1618 arch/arm/kernel/process.c | 4 +-
1619 arch/arm/kernel/ptrace.c | 9 +
1620 arch/arm/kernel/traps.c | 7 +-
1621 arch/arm/mm/Kconfig | 4 +-
1622 arch/arm/mm/fault.c | 40 +-
1623 arch/arm/mm/mmap.c | 8 +-
1624 arch/arm/net/bpf_jit_32.c | 51 +-
1625 arch/arm64/Kconfig.debug | 1 +
1626 arch/avr32/include/asm/cache.h | 4 +-
1627 arch/blackfin/Kconfig.debug | 1 +
1628 arch/blackfin/include/asm/cache.h | 3 +-
1629 arch/cris/include/arch-v10/arch/cache.h | 3 +-
1630 arch/cris/include/arch-v32/arch/cache.h | 3 +-
1631 arch/frv/include/asm/cache.h | 3 +-
1632 arch/frv/mm/elf-fdpic.c | 4 +-
1633 arch/hexagon/include/asm/cache.h | 6 +-
1634 arch/ia64/Kconfig | 1 +
1635 arch/ia64/include/asm/cache.h | 3 +-
1636 arch/ia64/kernel/sys_ia64.c | 2 +
1637 arch/ia64/mm/hugetlbpage.c | 2 +
1638 arch/m32r/include/asm/cache.h | 4 +-
1639 arch/m68k/include/asm/cache.h | 4 +-
1640 arch/metag/mm/hugetlbpage.c | 1 +
1641 arch/microblaze/include/asm/cache.h | 3 +-
1642 arch/mips/Kconfig | 1 +
1643 arch/mips/include/asm/thread_info.h | 11 +-
1644 arch/mips/kernel/irq.c | 3 +
1645 arch/mips/kernel/ptrace.c | 9 +
1646 arch/mips/mm/mmap.c | 4 +-
1647 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
1648 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
1649 arch/nios2/lib/memset.c | 2 +-
1650 arch/openrisc/include/asm/cache.h | 4 +-
1651 arch/parisc/include/asm/cache.h | 3 +
1652 arch/parisc/kernel/sys_parisc.c | 4 +
1653 arch/powerpc/Kconfig | 1 +
1654 arch/powerpc/include/asm/cache.h | 4 +-
1655 arch/powerpc/include/asm/thread_info.h | 5 +-
1656 arch/powerpc/kernel/Makefile | 2 +
1657 arch/powerpc/kernel/irq.c | 3 +
1658 arch/powerpc/kernel/process.c | 10 +-
1659 arch/powerpc/kernel/ptrace.c | 14 +
1660 arch/powerpc/kernel/traps.c | 5 +
1661 arch/powerpc/mm/slice.c | 2 +-
1662 arch/s390/Kconfig.debug | 1 +
1663 arch/s390/include/asm/cache.h | 4 +-
1664 arch/score/include/asm/cache.h | 4 +-
1665 arch/sh/include/asm/cache.h | 3 +-
1666 arch/sh/mm/mmap.c | 6 +-
1667 arch/sparc/include/asm/cache.h | 4 +-
1668 arch/sparc/include/asm/pgalloc_64.h | 1 +
1669 arch/sparc/include/asm/thread_info_64.h | 8 +-
1670 arch/sparc/kernel/process_32.c | 6 +-
1671 arch/sparc/kernel/process_64.c | 8 +-
1672 arch/sparc/kernel/ptrace_64.c | 14 +
1673 arch/sparc/kernel/sys_sparc_64.c | 8 +-
1674 arch/sparc/kernel/syscalls.S | 8 +-
1675 arch/sparc/kernel/traps_32.c | 8 +-
1676 arch/sparc/kernel/traps_64.c | 28 +-
1677 arch/sparc/kernel/unaligned_64.c | 2 +-
1678 arch/sparc/mm/fault_64.c | 2 +-
1679 arch/sparc/mm/hugetlbpage.c | 15 +-
1680 arch/tile/Kconfig | 1 +
1681 arch/tile/include/asm/cache.h | 3 +-
1682 arch/tile/mm/hugetlbpage.c | 2 +
1683 arch/um/include/asm/cache.h | 3 +-
1684 arch/unicore32/include/asm/cache.h | 6 +-
1685 arch/x86/Kconfig | 21 +
1686 arch/x86/Kconfig.debug | 2 +
1687 arch/x86/crypto/sha-mb/sha1_mb.c | 4 +-
1688 arch/x86/entry/common.c | 14 +
1689 arch/x86/entry/entry_32.S | 2 +-
1690 arch/x86/entry/entry_64.S | 2 +-
1691 arch/x86/ia32/ia32_aout.c | 2 +
1692 arch/x86/include/asm/floppy.h | 20 +-
1693 arch/x86/include/asm/fpu/types.h | 69 +-
1694 arch/x86/include/asm/io.h | 2 +-
1695 arch/x86/include/asm/page.h | 12 +-
1696 arch/x86/include/asm/paravirt_types.h | 21 +-
1697 arch/x86/include/asm/processor.h | 12 +-
1698 arch/x86/include/asm/thread_info.h | 6 +-
1699 arch/x86/kernel/dumpstack.c | 10 +-
1700 arch/x86/kernel/dumpstack_32.c | 2 +-
1701 arch/x86/kernel/dumpstack_64.c | 2 +-
1702 arch/x86/kernel/ioport.c | 13 +
1703 arch/x86/kernel/irq_32.c | 3 +
1704 arch/x86/kernel/irq_64.c | 4 +
1705 arch/x86/kernel/ldt.c | 18 +
1706 arch/x86/kernel/msr.c | 10 +
1707 arch/x86/kernel/ptrace.c | 14 +
1708 arch/x86/kernel/signal.c | 9 +-
1709 arch/x86/kernel/sys_i386_32.c | 9 +-
1710 arch/x86/kernel/sys_x86_64.c | 8 +-
1711 arch/x86/kernel/traps.c | 5 +
1712 arch/x86/kernel/verify_cpu.S | 1 +
1713 arch/x86/kernel/vm86_32.c | 15 +
1714 arch/x86/mm/fault.c | 12 +-
1715 arch/x86/mm/hugetlbpage.c | 15 +-
1716 arch/x86/mm/init.c | 66 +-
1717 arch/x86/mm/init_32.c | 6 +-
1718 arch/x86/net/bpf_jit_comp.c | 4 +
1719 arch/x86/platform/efi/efi_64.c | 2 +-
1720 arch/x86/xen/Kconfig | 1 +
1721 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
1722 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
1723 crypto/scatterwalk.c | 10 +-
1724 drivers/acpi/acpica/hwxfsleep.c | 11 +-
1725 drivers/acpi/custom_method.c | 4 +
1726 drivers/block/cciss.h | 30 +-
1727 drivers/block/smart1,2.h | 40 +-
1728 drivers/cdrom/cdrom.c | 2 +-
1729 drivers/char/Kconfig | 4 +-
1730 drivers/char/genrtc.c | 1 +
1731 drivers/char/mem.c | 17 +
1732 drivers/char/random.c | 5 +-
1733 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
1734 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +
1735 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +
1736 drivers/crypto/marvell/cesa.h | 3 +-
1737 drivers/crypto/marvell/hash.c | 106 +-
1738 drivers/firewire/ohci.c | 4 +
1739 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 78 +-
1740 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
1741 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
1742 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
1743 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
1744 drivers/hid/hid-wiimote-debug.c | 2 +-
1745 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
1746 drivers/input/touchscreen/sur40.c | 21 +-
1747 drivers/iommu/Kconfig | 1 +
1748 drivers/iommu/amd_iommu.c | 14 +-
1749 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
1750 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
1751 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
1752 drivers/isdn/i4l/isdn_concap.c | 6 +-
1753 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
1754 drivers/lguest/core.c | 2 +-
1755 drivers/md/bcache/Kconfig | 1 +
1756 drivers/md/raid5.c | 8 +
1757 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
1758 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
1759 drivers/media/radio/radio-cadet.c | 5 +-
1760 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
1761 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
1762 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
1763 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
1764 drivers/message/fusion/mptbase.c | 9 +
1765 drivers/misc/sgi-xp/xp_main.c | 12 +-
1766 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
1767 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
1768 drivers/net/hyperv/hyperv_net.h | 7 +-
1769 drivers/net/hyperv/netvsc_drv.c | 5 +-
1770 drivers/net/hyperv/rndis_filter.c | 4 +-
1771 drivers/net/wan/lmc/lmc_media.c | 97 +-
1772 drivers/net/wan/z85230.c | 24 +-
1773 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
1774 drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 2 +-
1775 drivers/pci/proc.c | 9 +
1776 drivers/platform/x86/asus-wmi.c | 12 +
1777 drivers/rtc/rtc-dev.c | 3 +
1778 drivers/scsi/bfa/bfa_fcs.c | 19 +-
1779 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
1780 drivers/scsi/bfa/bfa_modules.h | 12 +-
1781 drivers/scsi/cxgbi/libcxgbi.c | 1 +
1782 drivers/scsi/hpsa.h | 40 +-
1783 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
1784 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
1785 drivers/staging/wilc1000/host_interface.h | 1 +
1786 drivers/staging/wilc1000/wilc_spi.c | 1 +
1787 drivers/tty/serial/uartlite.c | 4 +-
1788 drivers/tty/sysrq.c | 2 +-
1789 drivers/tty/tty_io.c | 4 +
1790 drivers/tty/vt/keyboard.c | 22 +-
1791 drivers/uio/uio.c | 6 +-
1792 drivers/usb/core/hub.c | 5 +
1793 drivers/usb/gadget/function/f_uac1.c | 1 +
1794 drivers/usb/gadget/function/u_uac1.c | 1 +
1795 drivers/usb/host/hwa-hc.c | 9 +-
1796 drivers/usb/usbip/usbip_common.c | 11 +
1797 drivers/usb/usbip/vhci_sysfs.c | 2 +-
1798 drivers/video/fbdev/arcfb.c | 2 +-
1799 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
1800 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
1801 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
1802 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
1803 drivers/xen/xenfs/xenstored.c | 5 +
1804 firmware/Makefile | 2 +
1805 firmware/WHENCE | 20 +-
1806 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
1807 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
1808 fs/attr.c | 4 +
1809 fs/autofs4/waitq.c | 9 +
1810 fs/binfmt_aout.c | 7 +
1811 fs/binfmt_elf.c | 40 +-
1812 fs/compat.c | 20 +-
1813 fs/coredump.c | 17 +-
1814 fs/dcache.c | 3 +
1815 fs/debugfs/inode.c | 19 +-
1816 fs/ecryptfs/keystore.c | 6 +-
1817 fs/exec.c | 235 +-
1818 fs/ext2/balloc.c | 4 +-
1819 fs/ext2/super.c | 8 +-
1820 fs/ext4/balloc.c | 4 +-
1821 fs/ext4/extents.c | 2 +-
1822 fs/fcntl.c | 4 +
1823 fs/fhandle.c | 3 +-
1824 fs/file.c | 4 +
1825 fs/filesystems.c | 4 +
1826 fs/fs_struct.c | 20 +-
1827 fs/hugetlbfs/inode.c | 5 +-
1828 fs/inode.c | 8 +-
1829 fs/kernfs/dir.c | 6 +
1830 fs/mount.h | 4 +-
1831 fs/namei.c | 295 +-
1832 fs/namespace.c | 24 +
1833 fs/nfsd/nfscache.c | 2 +-
1834 fs/open.c | 38 +
1835 fs/overlayfs/inode.c | 3 +
1836 fs/overlayfs/super.c | 6 +-
1837 fs/pipe.c | 2 +-
1838 fs/posix_acl.c | 15 +-
1839 fs/proc/Kconfig | 10 +-
1840 fs/proc/array.c | 67 +-
1841 fs/proc/base.c | 175 +-
1842 fs/proc/cmdline.c | 4 +
1843 fs/proc/devices.c | 4 +
1844 fs/proc/fd.c | 13 +-
1845 fs/proc/generic.c | 64 +
1846 fs/proc/inode.c | 17 +
1847 fs/proc/internal.h | 11 +-
1848 fs/proc/interrupts.c | 4 +
1849 fs/proc/kcore.c | 3 +
1850 fs/proc/proc_net.c | 31 +
1851 fs/proc/proc_sysctl.c | 52 +-
1852 fs/proc/root.c | 8 +
1853 fs/proc/stat.c | 69 +-
1854 fs/proc/task_mmu.c | 66 +-
1855 fs/readdir.c | 19 +
1856 fs/reiserfs/item_ops.c | 24 +-
1857 fs/reiserfs/super.c | 4 +
1858 fs/select.c | 2 +
1859 fs/seq_file.c | 30 +-
1860 fs/stat.c | 20 +-
1861 fs/sysfs/dir.c | 30 +-
1862 fs/utimes.c | 7 +
1863 fs/xattr.c | 26 +-
1864 grsecurity/Kconfig | 1205 ++++
1865 grsecurity/Makefile | 54 +
1866 grsecurity/gracl.c | 2757 +++++++++
1867 grsecurity/gracl_alloc.c | 105 +
1868 grsecurity/gracl_cap.c | 127 +
1869 grsecurity/gracl_compat.c | 269 +
1870 grsecurity/gracl_fs.c | 448 ++
1871 grsecurity/gracl_ip.c | 386 ++
1872 grsecurity/gracl_learn.c | 207 +
1873 grsecurity/gracl_policy.c | 1784 ++++++
1874 grsecurity/gracl_res.c | 68 +
1875 grsecurity/gracl_segv.c | 304 +
1876 grsecurity/gracl_shm.c | 40 +
1877 grsecurity/grsec_chdir.c | 19 +
1878 grsecurity/grsec_chroot.c | 506 ++
1879 grsecurity/grsec_disabled.c | 445 ++
1880 grsecurity/grsec_exec.c | 189 +
1881 grsecurity/grsec_fifo.c | 26 +
1882 grsecurity/grsec_fork.c | 23 +
1883 grsecurity/grsec_init.c | 294 +
1884 grsecurity/grsec_ipc.c | 48 +
1885 grsecurity/grsec_link.c | 65 +
1886 grsecurity/grsec_log.c | 340 +
1887 grsecurity/grsec_mem.c | 48 +
1888 grsecurity/grsec_mount.c | 65 +
1889 grsecurity/grsec_pax.c | 47 +
1890 grsecurity/grsec_proc.c | 20 +
1891 grsecurity/grsec_ptrace.c | 30 +
1892 grsecurity/grsec_sig.c | 245 +
1893 grsecurity/grsec_sock.c | 244 +
1894 grsecurity/grsec_sysctl.c | 497 ++
1895 grsecurity/grsec_time.c | 16 +
1896 grsecurity/grsec_tpe.c | 78 +
1897 grsecurity/grsec_tty.c | 18 +
1898 grsecurity/grsec_usb.c | 15 +
1899 grsecurity/grsum.c | 54 +
1900 include/linux/binfmts.h | 5 +-
1901 include/linux/capability.h | 13 +
1902 include/linux/compiler-gcc.h | 5 +
1903 include/linux/compiler.h | 8 +
1904 include/linux/cred.h | 8 +-
1905 include/linux/dcache.h | 5 +-
1906 include/linux/fs.h | 24 +-
1907 include/linux/fs_struct.h | 2 +-
1908 include/linux/fsnotify.h | 6 +
1909 include/linux/gracl.h | 342 ++
1910 include/linux/gracl_compat.h | 156 +
1911 include/linux/gralloc.h | 9 +
1912 include/linux/grdefs.h | 140 +
1913 include/linux/grinternal.h | 231 +
1914 include/linux/grmsg.h | 120 +
1915 include/linux/grsecurity.h | 259 +
1916 include/linux/grsock.h | 19 +
1917 include/linux/ipc.h | 2 +-
1918 include/linux/ipc_namespace.h | 2 +-
1919 include/linux/kallsyms.h | 18 +-
1920 include/linux/key-type.h | 4 +-
1921 include/linux/kmod.h | 5 +
1922 include/linux/kobject.h | 2 +-
1923 include/linux/lsm_hooks.h | 4 +-
1924 include/linux/mm.h | 12 +
1925 include/linux/mm_types.h | 4 +-
1926 include/linux/module.h | 5 +-
1927 include/linux/mount.h | 2 +-
1928 include/linux/msg.h | 2 +-
1929 include/linux/netfilter/xt_gradm.h | 9 +
1930 include/linux/path.h | 4 +-
1931 include/linux/perf_event.h | 13 +-
1932 include/linux/pid_namespace.h | 2 +-
1933 include/linux/printk.h | 2 +-
1934 include/linux/proc_fs.h | 22 +-
1935 include/linux/proc_ns.h | 2 +-
1936 include/linux/random.h | 2 +-
1937 include/linux/rbtree_augmented.h | 4 +-
1938 include/linux/scatterlist.h | 12 +-
1939 include/linux/sched.h | 114 +-
1940 include/linux/security.h | 1 +
1941 include/linux/sem.h | 2 +-
1942 include/linux/seq_file.h | 5 +
1943 include/linux/shm.h | 6 +-
1944 include/linux/skbuff.h | 3 +
1945 include/linux/slab.h | 9 -
1946 include/linux/sysctl.h | 8 +-
1947 include/linux/thread_info.h | 6 +-
1948 include/linux/tty.h | 2 +-
1949 include/linux/tty_driver.h | 4 +-
1950 include/linux/uidgid.h | 5 +
1951 include/linux/user_namespace.h | 2 +-
1952 include/linux/utsname.h | 2 +-
1953 include/linux/vermagic.h | 16 +-
1954 include/linux/vmalloc.h | 8 +
1955 include/net/af_unix.h | 2 +-
1956 include/net/ip.h | 2 +-
1957 include/net/neighbour.h | 2 +-
1958 include/net/net_namespace.h | 2 +-
1959 include/net/sctp/structs.h | 2 +-
1960 include/net/sock.h | 2 +-
1961 include/trace/events/fs.h | 53 +
1962 include/uapi/linux/personality.h | 1 +
1963 init/Kconfig | 4 +
1964 init/main.c | 46 +-
1965 ipc/mqueue.c | 1 +
1966 ipc/msg.c | 3 +-
1967 ipc/msgutil.c | 4 +-
1968 ipc/sem.c | 3 +-
1969 ipc/shm.c | 26 +-
1970 ipc/util.c | 6 +
1971 kernel/auditsc.c | 2 +-
1972 kernel/bpf/syscall.c | 10 +-
1973 kernel/bpf/verifier.c | 1 -
1974 kernel/capability.c | 41 +-
1975 kernel/cgroup.c | 5 +-
1976 kernel/compat.c | 1 +
1977 kernel/configs.c | 11 +
1978 kernel/cred.c | 112 +-
1979 kernel/events/core.c | 14 +-
1980 kernel/exit.c | 10 +-
1981 kernel/fork.c | 86 +-
1982 kernel/futex.c | 4 +-
1983 kernel/kallsyms.c | 9 +
1984 kernel/kcmp.c | 4 +
1985 kernel/kexec_core.c | 2 +-
1986 kernel/kmod.c | 96 +-
1987 kernel/kprobes.c | 9 +-
1988 kernel/ksysfs.c | 2 +
1989 kernel/locking/lockdep_proc.c | 10 +-
1990 kernel/module.c | 110 +-
1991 kernel/panic.c | 4 +-
1992 kernel/pid.c | 18 +-
1993 kernel/power/Kconfig | 2 +
1994 kernel/printk/printk.c | 7 +-
1995 kernel/ptrace.c | 50 +-
1996 kernel/resource.c | 10 +
1997 kernel/sched/core.c | 11 +-
1998 kernel/sched/debug.c | 4 +
1999 kernel/signal.c | 37 +-
2000 kernel/sys.c | 64 +-
2001 kernel/sysctl.c | 172 +-
2002 kernel/taskstats.c | 6 +
2003 kernel/time/posix-timers.c | 8 +
2004 kernel/time/time.c | 5 +
2005 kernel/time/timekeeping.c | 3 +
2006 kernel/time/timer_list.c | 13 +-
2007 kernel/time/timer_stats.c | 10 +-
2008 kernel/trace/Kconfig | 2 +
2009 kernel/trace/trace_syscalls.c | 8 +
2010 kernel/user_namespace.c | 15 +
2011 kernel/workqueue.c | 29 +
2012 lib/Kconfig.debug | 12 +-
2013 lib/Kconfig.kasan | 2 +-
2014 lib/is_single_threaded.c | 3 +
2015 lib/list_debug.c | 65 +-
2016 lib/nlattr.c | 2 +
2017 lib/rbtree.c | 4 +-
2018 lib/vsprintf.c | 39 +-
2019 localversion-grsec | 1 +
2020 mm/Kconfig | 8 +-
2021 mm/Kconfig.debug | 1 +
2022 mm/filemap.c | 8 +-
2023 mm/kmemleak.c | 4 +-
2024 mm/memory.c | 2 +-
2025 mm/mempolicy.c | 12 +-
2026 mm/migrate.c | 3 +-
2027 mm/mlock.c | 11 +-
2028 mm/mmap.c | 127 +-
2029 mm/mprotect.c | 8 +
2030 mm/oom_kill.c | 4 +
2031 mm/page_alloc.c | 2 +-
2032 mm/process_vm_access.c | 6 +
2033 mm/shmem.c | 2 +-
2034 mm/slab.c | 14 +-
2035 mm/slab_common.c | 2 +-
2036 mm/slob.c | 12 +
2037 mm/slub.c | 33 +-
2038 mm/swap.c | 6 +-
2039 mm/util.c | 3 +
2040 mm/vmalloc.c | 82 +-
2041 mm/vmstat.c | 29 +-
2042 net/appletalk/atalk_proc.c | 2 +-
2043 net/atm/lec.c | 6 +-
2044 net/atm/mpoa_caches.c | 43 +-
2045 net/bridge/netfilter/ebtables.c | 4 +
2046 net/can/bcm.c | 2 +-
2047 net/can/proc.c | 2 +-
2048 net/core/dev_ioctl.c | 7 +-
2049 net/core/filter.c | 8 +-
2050 net/core/net-procfs.c | 17 +-
2051 net/core/pktgen.c | 2 +-
2052 net/core/sock.c | 23 +-
2053 net/core/sysctl_net_core.c | 2 +-
2054 net/decnet/dn_dev.c | 2 +-
2055 net/ipv4/devinet.c | 6 +-
2056 net/ipv4/inet_hashtables.c | 4 +
2057 net/ipv4/ip_input.c | 7 +
2058 net/ipv4/ip_sockglue.c | 3 +-
2059 net/ipv4/netfilter/arp_tables.c | 43 +-
2060 net/ipv4/netfilter/ip_tables.c | 48 +-
2061 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
2062 net/ipv4/route.c | 6 +-
2063 net/ipv4/tcp_input.c | 6 +-
2064 net/ipv4/tcp_ipv4.c | 24 +-
2065 net/ipv4/tcp_minisocks.c | 9 +-
2066 net/ipv4/tcp_timer.c | 11 +
2067 net/ipv4/udp.c | 24 +
2068 net/ipv6/addrconf.c | 13 +-
2069 net/ipv6/netfilter/ip6_tables.c | 48 +-
2070 net/ipv6/proc.c | 2 +-
2071 net/ipv6/tcp_ipv6.c | 23 +-
2072 net/ipv6/udp.c | 7 +
2073 net/ipx/ipx_proc.c | 2 +-
2074 net/irda/irproc.c | 2 +-
2075 net/llc/llc_proc.c | 2 +-
2076 net/netfilter/Kconfig | 10 +
2077 net/netfilter/Makefile | 1 +
2078 net/netfilter/nf_conntrack_core.c | 8 +
2079 net/netfilter/xt_gradm.c | 51 +
2080 net/netfilter/xt_hashlimit.c | 4 +-
2081 net/netfilter/xt_recent.c | 2 +-
2082 net/packet/af_packet.c | 1 +
2083 net/sctp/bind_addr.c | 14 +-
2084 net/sctp/protocol.c | 1 +
2085 net/sctp/sm_make_chunk.c | 3 +-
2086 net/sctp/socket.c | 4 +-
2087 net/socket.c | 75 +-
2088 net/sunrpc/Kconfig | 1 +
2089 net/sunrpc/cache.c | 2 +-
2090 net/sunrpc/stats.c | 2 +-
2091 net/sysctl_net.c | 2 +-
2092 net/unix/af_unix.c | 52 +-
2093 net/vmw_vsock/vmci_transport_notify.c | 30 +-
2094 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
2095 net/x25/sysctl_net_x25.c | 2 +-
2096 net/x25/x25_proc.c | 2 +-
2097 scripts/package/Makefile | 2 +-
2098 scripts/package/mkspec | 41 +-
2099 security/Kconfig | 364 +-
2100 security/apparmor/file.c | 4 +-
2101 security/apparmor/lsm.c | 8 +-
2102 security/commoncap.c | 29 +
2103 security/keys/internal.h | 2 +-
2104 security/min_addr.c | 2 +
2105 security/tomoyo/file.c | 12 +-
2106 security/tomoyo/mount.c | 4 +
2107 security/tomoyo/tomoyo.c | 20 +-
2108 security/yama/Kconfig | 2 +-
2109 sound/synth/emux/emux_seq.c | 14 +-
2110 sound/usb/line6/driver.c | 40 +-
2111 sound/usb/line6/toneport.c | 12 +-
2112 tools/gcc/.gitignore | 1 +
2113 tools/gcc/Makefile | 12 +
2114 tools/gcc/gen-random-seed.sh | 8 +
2115 tools/gcc/randomize_layout_plugin.c | 935 +++
2116 tools/gcc/randomize_layout_seed.h | 1 -
2117 .../size_overflow_plugin/size_overflow_hash.data | 202 +-
2118 511 files changed, 32630 insertions(+), 3134 deletions(-)
2119
2120 commit a89837d0fc99aab94b5c8b975215de260271c1f7
2121 Author: Brad Spengler <spender@grsecurity.net>
2122 Date: Wed Apr 27 20:43:37 2016 -0400
2123
2124 Initial port of PaX to 4.5.2 with a limited form of RAP
2125 (< 1/5th the total size of the full developed RAP plugin)
2126 No retaddr protection via XOR canary
2127 No C++ support
2128 No LTO support
2129 Removal of a few optimization passes
2130 No compile time reporting of bad fptr casts
2131
2132 The RAP plugin should therefore be used only to compile an
2133 appropriate vanilla kernel with this patch.
2134
2135 Documentation/dontdiff | 46 +-
2136 Documentation/kbuild/makefiles.txt | 39 +-
2137 Documentation/kernel-parameters.txt | 28 +
2138 Makefile | 52 +-
2139 arch/alpha/include/asm/atomic.h | 10 +
2140 arch/alpha/include/asm/elf.h | 7 +
2141 arch/alpha/include/asm/pgalloc.h | 6 +
2142 arch/alpha/include/asm/pgtable.h | 11 +
2143 arch/alpha/kernel/module.c | 2 +-
2144 arch/alpha/kernel/osf_sys.c | 8 +-
2145 arch/alpha/mm/fault.c | 141 +-
2146 arch/arm/Kconfig | 3 +-
2147 arch/arm/include/asm/atomic.h | 323 +-
2148 arch/arm/include/asm/cache.h | 5 +-
2149 arch/arm/include/asm/cacheflush.h | 2 +-
2150 arch/arm/include/asm/checksum.h | 14 +-
2151 arch/arm/include/asm/cmpxchg.h | 4 +
2152 arch/arm/include/asm/cpuidle.h | 2 +-
2153 arch/arm/include/asm/domain.h | 42 +-
2154 arch/arm/include/asm/elf.h | 9 +-
2155 arch/arm/include/asm/fncpy.h | 2 +
2156 arch/arm/include/asm/futex.h | 1 +
2157 arch/arm/include/asm/kmap_types.h | 2 +-
2158 arch/arm/include/asm/mach/dma.h | 2 +-
2159 arch/arm/include/asm/mach/map.h | 16 +-
2160 arch/arm/include/asm/outercache.h | 2 +-
2161 arch/arm/include/asm/page.h | 3 +-
2162 arch/arm/include/asm/pgalloc.h | 20 +
2163 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
2164 arch/arm/include/asm/pgtable-2level.h | 3 +
2165 arch/arm/include/asm/pgtable-3level.h | 3 +
2166 arch/arm/include/asm/pgtable.h | 54 +-
2167 arch/arm/include/asm/smp.h | 2 +-
2168 arch/arm/include/asm/thread_info.h | 3 +
2169 arch/arm/include/asm/tls.h | 3 +
2170 arch/arm/include/asm/uaccess.h | 113 +-
2171 arch/arm/include/uapi/asm/ptrace.h | 2 +-
2172 arch/arm/kernel/armksyms.c | 2 +-
2173 arch/arm/kernel/cpuidle.c | 2 +-
2174 arch/arm/kernel/entry-armv.S | 109 +-
2175 arch/arm/kernel/entry-common.S | 40 +-
2176 arch/arm/kernel/entry-header.S | 55 +
2177 arch/arm/kernel/fiq.c | 3 +
2178 arch/arm/kernel/module-plts.c | 7 +-
2179 arch/arm/kernel/module.c | 38 +-
2180 arch/arm/kernel/patch.c | 2 +
2181 arch/arm/kernel/process.c | 92 +-
2182 arch/arm/kernel/reboot.c | 1 +
2183 arch/arm/kernel/setup.c | 20 +-
2184 arch/arm/kernel/signal.c | 35 +-
2185 arch/arm/kernel/smp.c | 2 +-
2186 arch/arm/kernel/tcm.c | 4 +-
2187 arch/arm/kernel/vmlinux.lds.S | 6 +-
2188 arch/arm/kvm/arm.c | 8 +-
2189 arch/arm/lib/copy_page.S | 1 +
2190 arch/arm/lib/csumpartialcopyuser.S | 4 +-
2191 arch/arm/lib/delay.c | 2 +-
2192 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
2193 arch/arm/mach-exynos/suspend.c | 6 +-
2194 arch/arm/mach-mvebu/coherency.c | 4 +-
2195 arch/arm/mach-omap2/board-n8x0.c | 2 +-
2196 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
2197 arch/arm/mach-omap2/omap-smp.c | 1 +
2198 arch/arm/mach-omap2/omap_device.c | 4 +-
2199 arch/arm/mach-omap2/omap_device.h | 4 +-
2200 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
2201 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
2202 arch/arm/mach-omap2/wd_timer.c | 6 +-
2203 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
2204 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
2205 arch/arm/mach-tegra/irq.c | 1 +
2206 arch/arm/mach-ux500/pm.c | 1 +
2207 arch/arm/mach-zynq/platsmp.c | 1 +
2208 arch/arm/mm/Kconfig | 6 +-
2209 arch/arm/mm/cache-l2x0.c | 2 +-
2210 arch/arm/mm/context.c | 10 +-
2211 arch/arm/mm/fault.c | 146 +
2212 arch/arm/mm/fault.h | 12 +
2213 arch/arm/mm/init.c | 39 +
2214 arch/arm/mm/ioremap.c | 4 +-
2215 arch/arm/mm/mmap.c | 36 +-
2216 arch/arm/mm/mmu.c | 162 +-
2217 arch/arm/net/bpf_jit_32.c | 3 +
2218 arch/arm/plat-iop/setup.c | 2 +-
2219 arch/arm/plat-omap/sram.c | 2 +
2220 arch/arm64/include/asm/atomic.h | 10 +
2221 arch/arm64/include/asm/percpu.h | 8 +-
2222 arch/arm64/include/asm/pgalloc.h | 5 +
2223 arch/arm64/include/asm/uaccess.h | 1 +
2224 arch/arm64/mm/dma-mapping.c | 2 +-
2225 arch/avr32/include/asm/elf.h | 8 +-
2226 arch/avr32/include/asm/kmap_types.h | 4 +-
2227 arch/avr32/mm/fault.c | 27 +
2228 arch/frv/include/asm/atomic.h | 10 +
2229 arch/frv/include/asm/kmap_types.h | 2 +-
2230 arch/frv/mm/elf-fdpic.c | 3 +-
2231 arch/ia64/Makefile | 1 +
2232 arch/ia64/include/asm/atomic.h | 10 +
2233 arch/ia64/include/asm/elf.h | 7 +
2234 arch/ia64/include/asm/pgalloc.h | 12 +
2235 arch/ia64/include/asm/pgtable.h | 13 +-
2236 arch/ia64/include/asm/spinlock.h | 2 +-
2237 arch/ia64/include/asm/uaccess.h | 27 +-
2238 arch/ia64/kernel/module.c | 20 +-
2239 arch/ia64/kernel/palinfo.c | 2 +-
2240 arch/ia64/kernel/sys_ia64.c | 7 +
2241 arch/ia64/kernel/vmlinux.lds.S | 2 +-
2242 arch/ia64/mm/fault.c | 32 +-
2243 arch/ia64/mm/init.c | 15 +-
2244 arch/m32r/lib/usercopy.c | 6 +
2245 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
2246 arch/mips/include/asm/atomic.h | 372 +-
2247 arch/mips/include/asm/cache.h | 3 +-
2248 arch/mips/include/asm/elf.h | 7 +
2249 arch/mips/include/asm/exec.h | 2 +-
2250 arch/mips/include/asm/hw_irq.h | 2 +-
2251 arch/mips/include/asm/local.h | 57 +
2252 arch/mips/include/asm/page.h | 2 +-
2253 arch/mips/include/asm/pgalloc.h | 5 +
2254 arch/mips/include/asm/pgtable.h | 3 +
2255 arch/mips/include/asm/uaccess.h | 1 +
2256 arch/mips/kernel/binfmt_elfn32.c | 7 +
2257 arch/mips/kernel/binfmt_elfo32.c | 7 +
2258 arch/mips/kernel/irq-gt641xx.c | 2 +-
2259 arch/mips/kernel/irq.c | 6 +-
2260 arch/mips/kernel/pm-cps.c | 2 +-
2261 arch/mips/kernel/process.c | 12 -
2262 arch/mips/kernel/sync-r4k.c | 24 +-
2263 arch/mips/kernel/traps.c | 13 +-
2264 arch/mips/lib/ashldi3.c | 21 +-
2265 arch/mips/lib/ashrdi3.c | 19 +-
2266 arch/mips/lib/libgcc.h | 12 +-
2267 arch/mips/mm/fault.c | 25 +
2268 arch/mips/mm/init.c | 4 +-
2269 arch/mips/mm/mmap.c | 51 +-
2270 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
2271 arch/mips/sni/rm200.c | 2 +-
2272 arch/mips/vr41xx/common/icu.c | 2 +-
2273 arch/mips/vr41xx/common/irq.c | 4 +-
2274 arch/parisc/include/asm/atomic.h | 10 +
2275 arch/parisc/include/asm/elf.h | 7 +
2276 arch/parisc/include/asm/pgalloc.h | 6 +
2277 arch/parisc/include/asm/pgtable.h | 11 +
2278 arch/parisc/include/asm/uaccess.h | 4 +-
2279 arch/parisc/kernel/module.c | 26 +-
2280 arch/parisc/kernel/sys_parisc.c | 15 +
2281 arch/parisc/kernel/traps.c | 4 +-
2282 arch/parisc/mm/fault.c | 140 +-
2283 arch/powerpc/include/asm/atomic.h | 329 +-
2284 arch/powerpc/include/asm/book3s/32/hash.h | 1 +
2285 arch/powerpc/include/asm/elf.h | 12 +
2286 arch/powerpc/include/asm/exec.h | 2 +-
2287 arch/powerpc/include/asm/kmap_types.h | 2 +-
2288 arch/powerpc/include/asm/local.h | 46 +
2289 arch/powerpc/include/asm/mman.h | 2 +-
2290 arch/powerpc/include/asm/page.h | 8 +-
2291 arch/powerpc/include/asm/page_64.h | 7 +-
2292 arch/powerpc/include/asm/pgalloc-64.h | 7 +
2293 arch/powerpc/include/asm/pgtable.h | 1 +
2294 arch/powerpc/include/asm/reg.h | 1 +
2295 arch/powerpc/include/asm/smp.h | 2 +-
2296 arch/powerpc/include/asm/spinlock.h | 42 +-
2297 arch/powerpc/include/asm/uaccess.h | 141 +-
2298 arch/powerpc/kernel/Makefile | 5 +
2299 arch/powerpc/kernel/exceptions-64e.S | 4 +-
2300 arch/powerpc/kernel/exceptions-64s.S | 2 +-
2301 arch/powerpc/kernel/module_32.c | 15 +-
2302 arch/powerpc/kernel/process.c | 46 -
2303 arch/powerpc/kernel/signal_32.c | 2 +-
2304 arch/powerpc/kernel/signal_64.c | 2 +-
2305 arch/powerpc/kernel/traps.c | 21 +
2306 arch/powerpc/kernel/vdso.c | 5 +-
2307 arch/powerpc/lib/usercopy_64.c | 18 -
2308 arch/powerpc/mm/fault.c | 56 +-
2309 arch/powerpc/mm/mmap.c | 16 +
2310 arch/powerpc/mm/slice.c | 21 +-
2311 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
2312 arch/s390/include/asm/atomic.h | 10 +
2313 arch/s390/include/asm/elf.h | 7 +
2314 arch/s390/include/asm/exec.h | 2 +-
2315 arch/s390/include/asm/uaccess.h | 13 +-
2316 arch/s390/kernel/module.c | 22 +-
2317 arch/s390/kernel/process.c | 20 -
2318 arch/s390/mm/mmap.c | 22 +-
2319 arch/score/include/asm/exec.h | 2 +-
2320 arch/score/kernel/process.c | 5 -
2321 arch/sh/mm/mmap.c | 28 +-
2322 arch/sparc/include/asm/atomic_64.h | 110 +-
2323 arch/sparc/include/asm/cache.h | 2 +-
2324 arch/sparc/include/asm/elf_32.h | 7 +
2325 arch/sparc/include/asm/elf_64.h | 7 +
2326 arch/sparc/include/asm/pgalloc_32.h | 1 +
2327 arch/sparc/include/asm/pgalloc_64.h | 1 +
2328 arch/sparc/include/asm/pgtable.h | 4 +
2329 arch/sparc/include/asm/pgtable_32.h | 15 +-
2330 arch/sparc/include/asm/pgtsrmmu.h | 5 +
2331 arch/sparc/include/asm/setup.h | 4 +-
2332 arch/sparc/include/asm/spinlock_64.h | 35 +-
2333 arch/sparc/include/asm/thread_info_32.h | 1 +
2334 arch/sparc/include/asm/thread_info_64.h | 2 +
2335 arch/sparc/include/asm/uaccess.h | 1 +
2336 arch/sparc/include/asm/uaccess_32.h | 28 +-
2337 arch/sparc/include/asm/uaccess_64.h | 24 +-
2338 arch/sparc/kernel/Makefile | 2 +-
2339 arch/sparc/kernel/prom_common.c | 2 +-
2340 arch/sparc/kernel/smp_64.c | 8 +-
2341 arch/sparc/kernel/sys_sparc_32.c | 2 +-
2342 arch/sparc/kernel/sys_sparc_64.c | 58 +-
2343 arch/sparc/kernel/traps_64.c | 27 +-
2344 arch/sparc/lib/Makefile | 2 +-
2345 arch/sparc/lib/atomic_64.S | 57 +-
2346 arch/sparc/lib/ksyms.c | 6 +-
2347 arch/sparc/mm/Makefile | 2 +-
2348 arch/sparc/mm/fault_32.c | 292 +
2349 arch/sparc/mm/fault_64.c | 486 +
2350 arch/sparc/mm/hugetlbpage.c | 30 +-
2351 arch/sparc/mm/init_64.c | 10 +-
2352 arch/tile/include/asm/atomic_64.h | 10 +
2353 arch/tile/include/asm/uaccess.h | 4 +-
2354 arch/um/Makefile | 4 +
2355 arch/um/include/asm/kmap_types.h | 2 +-
2356 arch/um/include/asm/page.h | 3 +
2357 arch/um/include/asm/pgtable-3level.h | 1 +
2358 arch/um/kernel/process.c | 16 -
2359 arch/x86/Kconfig | 26 +-
2360 arch/x86/Kconfig.cpu | 6 +-
2361 arch/x86/Kconfig.debug | 4 +-
2362 arch/x86/Makefile | 13 +-
2363 arch/x86/boot/Makefile | 3 +
2364 arch/x86/boot/bitops.h | 4 +-
2365 arch/x86/boot/boot.h | 2 +-
2366 arch/x86/boot/compressed/Makefile | 20 +
2367 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
2368 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
2369 arch/x86/boot/compressed/head_32.S | 4 +-
2370 arch/x86/boot/compressed/head_64.S | 12 +-
2371 arch/x86/boot/compressed/misc.c | 11 +-
2372 arch/x86/boot/cpucheck.c | 16 +-
2373 arch/x86/boot/header.S | 6 +-
2374 arch/x86/boot/memory.c | 2 +-
2375 arch/x86/boot/video-vesa.c | 1 +
2376 arch/x86/boot/video.c | 2 +-
2377 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
2378 arch/x86/crypto/aesni-intel_asm.S | 110 +-
2379 arch/x86/crypto/aesni-intel_glue.c | 4 +-
2380 arch/x86/crypto/blowfish-x86_64-asm_64.S | 11 +-
2381 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 22 +-
2382 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 22 +-
2383 arch/x86/crypto/camellia-x86_64-asm_64.S | 11 +-
2384 arch/x86/crypto/camellia_aesni_avx2_glue.c | 18 +-
2385 arch/x86/crypto/camellia_aesni_avx_glue.c | 18 +-
2386 arch/x86/crypto/camellia_glue.c | 8 +-
2387 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 55 +-
2388 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 37 +-
2389 arch/x86/crypto/cast6_avx_glue.c | 16 +-
2390 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
2391 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
2392 arch/x86/crypto/glue_helper.c | 2 +-
2393 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
2394 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 21 +-
2395 arch/x86/crypto/serpent-avx2-asm_64.S | 21 +-
2396 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
2397 arch/x86/crypto/serpent_avx2_glue.c | 14 +-
2398 arch/x86/crypto/serpent_avx_glue.c | 18 +-
2399 arch/x86/crypto/serpent_sse2_glue.c | 4 +-
2400 arch/x86/crypto/sha1_ssse3_asm.S | 13 +-
2401 arch/x86/crypto/sha1_ssse3_glue.c | 56 +-
2402 arch/x86/crypto/sha256-avx-asm.S | 5 +-
2403 arch/x86/crypto/sha256-avx2-asm.S | 5 +-
2404 arch/x86/crypto/sha256-ssse3-asm.S | 6 +-
2405 arch/x86/crypto/sha256_ssse3_glue.c | 26 +-
2406 arch/x86/crypto/sha512-avx-asm.S | 5 +-
2407 arch/x86/crypto/sha512-avx2-asm.S | 5 +-
2408 arch/x86/crypto/sha512-ssse3-asm.S | 5 +-
2409 arch/x86/crypto/sha512_ssse3_glue.c | 22 +-
2410 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 37 +-
2411 arch/x86/crypto/twofish-i586-asm_32.S | 2 +-
2412 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 6 +-
2413 arch/x86/crypto/twofish-x86_64-asm_64.S | 7 +-
2414 arch/x86/crypto/twofish_avx_glue.c | 21 +-
2415 arch/x86/crypto/twofish_glue.c | 4 +-
2416 arch/x86/crypto/twofish_glue_3way.c | 12 +-
2417 arch/x86/entry/Makefile | 2 +
2418 arch/x86/entry/calling.h | 86 +-
2419 arch/x86/entry/common.c | 70 +-
2420 arch/x86/entry/entry_32.S | 311 +-
2421 arch/x86/entry/entry_64.S | 629 +-
2422 arch/x86/entry/entry_64_compat.S | 115 +-
2423 arch/x86/entry/thunk_64.S | 2 +
2424 arch/x86/entry/vdso/Makefile | 5 +-
2425 arch/x86/entry/vdso/vclock_gettime.c | 2 +-
2426 arch/x86/entry/vdso/vdso2c.h | 8 +-
2427 arch/x86/entry/vdso/vma.c | 37 +-
2428 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
2429 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
2430 arch/x86/ia32/ia32_signal.c | 23 +-
2431 arch/x86/ia32/sys_ia32.c | 42 +-
2432 arch/x86/include/asm/alternative-asm.h | 51 +-
2433 arch/x86/include/asm/alternative.h | 4 +-
2434 arch/x86/include/asm/apic.h | 2 +-
2435 arch/x86/include/asm/apm.h | 4 +-
2436 arch/x86/include/asm/atomic.h | 230 +-
2437 arch/x86/include/asm/atomic64_32.h | 100 +
2438 arch/x86/include/asm/atomic64_64.h | 164 +-
2439 arch/x86/include/asm/bitops.h | 18 +-
2440 arch/x86/include/asm/boot.h | 2 +-
2441 arch/x86/include/asm/cache.h | 5 +-
2442 arch/x86/include/asm/checksum_32.h | 12 +-
2443 arch/x86/include/asm/cmpxchg.h | 39 +
2444 arch/x86/include/asm/compat.h | 4 +
2445 arch/x86/include/asm/cpufeature.h | 16 +-
2446 arch/x86/include/asm/crypto/camellia.h | 30 +-
2447 arch/x86/include/asm/crypto/glue_helper.h | 10 +-
2448 arch/x86/include/asm/crypto/serpent-avx.h | 18 +-
2449 arch/x86/include/asm/crypto/serpent-sse2.h | 8 +-
2450 arch/x86/include/asm/crypto/twofish.h | 10 +-
2451 arch/x86/include/asm/desc.h | 78 +-
2452 arch/x86/include/asm/desc_defs.h | 6 +
2453 arch/x86/include/asm/div64.h | 2 +-
2454 arch/x86/include/asm/dma.h | 2 +
2455 arch/x86/include/asm/elf.h | 33 +-
2456 arch/x86/include/asm/emergency-restart.h | 2 +-
2457 arch/x86/include/asm/fpu/internal.h | 38 +-
2458 arch/x86/include/asm/fpu/types.h | 5 +-
2459 arch/x86/include/asm/futex.h | 14 +-
2460 arch/x86/include/asm/hw_irq.h | 4 +-
2461 arch/x86/include/asm/hypervisor.h | 2 +-
2462 arch/x86/include/asm/i8259.h | 2 +-
2463 arch/x86/include/asm/io.h | 22 +-
2464 arch/x86/include/asm/irqflags.h | 5 +
2465 arch/x86/include/asm/kprobes.h | 9 +-
2466 arch/x86/include/asm/kvm_emulate.h | 7 +-
2467 arch/x86/include/asm/local.h | 106 +-
2468 arch/x86/include/asm/mman.h | 15 +
2469 arch/x86/include/asm/mmu.h | 14 +-
2470 arch/x86/include/asm/mmu_context.h | 133 +-
2471 arch/x86/include/asm/module.h | 23 +-
2472 arch/x86/include/asm/nmi.h | 19 +-
2473 arch/x86/include/asm/page.h | 1 +
2474 arch/x86/include/asm/page_32.h | 12 +-
2475 arch/x86/include/asm/page_64.h | 14 +-
2476 arch/x86/include/asm/paravirt.h | 46 +-
2477 arch/x86/include/asm/paravirt_types.h | 13 +-
2478 arch/x86/include/asm/pgalloc.h | 23 +
2479 arch/x86/include/asm/pgtable-2level.h | 2 +
2480 arch/x86/include/asm/pgtable-3level.h | 7 +
2481 arch/x86/include/asm/pgtable.h | 126 +-
2482 arch/x86/include/asm/pgtable_32.h | 14 +-
2483 arch/x86/include/asm/pgtable_32_types.h | 24 +-
2484 arch/x86/include/asm/pgtable_64.h | 23 +-
2485 arch/x86/include/asm/pgtable_64_types.h | 5 +
2486 arch/x86/include/asm/pgtable_types.h | 27 +-
2487 arch/x86/include/asm/pmem.h | 2 +-
2488 arch/x86/include/asm/preempt.h | 2 +-
2489 arch/x86/include/asm/processor.h | 57 +-
2490 arch/x86/include/asm/ptrace.h | 15 +-
2491 arch/x86/include/asm/realmode.h | 4 +-
2492 arch/x86/include/asm/reboot.h | 10 +-
2493 arch/x86/include/asm/rmwcc.h | 84 +-
2494 arch/x86/include/asm/rwsem.h | 60 +-
2495 arch/x86/include/asm/segment.h | 27 +-
2496 arch/x86/include/asm/smap.h | 43 +
2497 arch/x86/include/asm/smp.h | 14 +-
2498 arch/x86/include/asm/stackprotector.h | 4 +-
2499 arch/x86/include/asm/stacktrace.h | 34 +-
2500 arch/x86/include/asm/switch_to.h | 4 +-
2501 arch/x86/include/asm/sys_ia32.h | 6 +-
2502 arch/x86/include/asm/thread_info.h | 27 +-
2503 arch/x86/include/asm/tlbflush.h | 77 +-
2504 arch/x86/include/asm/traps.h | 4 +-
2505 arch/x86/include/asm/uaccess.h | 210 +-
2506 arch/x86/include/asm/uaccess_32.h | 28 +-
2507 arch/x86/include/asm/uaccess_64.h | 169 +-
2508 arch/x86/include/asm/word-at-a-time.h | 2 +-
2509 arch/x86/include/asm/x86_init.h | 10 +-
2510 arch/x86/include/asm/xen/page.h | 2 +-
2511 arch/x86/include/uapi/asm/e820.h | 2 +-
2512 arch/x86/kernel/Makefile | 2 +-
2513 arch/x86/kernel/acpi/boot.c | 4 +-
2514 arch/x86/kernel/acpi/sleep.c | 4 +
2515 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
2516 arch/x86/kernel/alternative.c | 124 +-
2517 arch/x86/kernel/apic/apic.c | 4 +-
2518 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
2519 arch/x86/kernel/apic/apic_noop.c | 2 +-
2520 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
2521 arch/x86/kernel/apic/io_apic.c | 10 +-
2522 arch/x86/kernel/apic/msi.c | 2 +-
2523 arch/x86/kernel/apic/probe_32.c | 4 +-
2524 arch/x86/kernel/apic/vector.c | 2 +
2525 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
2526 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
2527 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
2528 arch/x86/kernel/apm_32.c | 21 +-
2529 arch/x86/kernel/asm-offsets.c | 20 +
2530 arch/x86/kernel/asm-offsets_64.c | 1 +
2531 arch/x86/kernel/cpu/Makefile | 4 -
2532 arch/x86/kernel/cpu/amd.c | 2 +-
2533 arch/x86/kernel/cpu/bugs_64.c | 2 +
2534 arch/x86/kernel/cpu/common.c | 202 +-
2535 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
2536 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
2537 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
2538 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
2539 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
2540 arch/x86/kernel/cpu/mshyperv.c | 2 +-
2541 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
2542 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
2543 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
2544 arch/x86/kernel/cpu/perf_event.c | 10 +-
2545 arch/x86/kernel/cpu/perf_event.h | 2 +-
2546 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 8 +-
2547 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
2548 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
2549 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
2550 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
2551 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
2552 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
2553 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 8 +-
2554 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 6 +-
2555 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 14 +-
2556 arch/x86/kernel/cpu/vmware.c | 2 +-
2557 arch/x86/kernel/crash_dump_64.c | 2 +-
2558 arch/x86/kernel/doublefault.c | 8 +-
2559 arch/x86/kernel/dumpstack.c | 24 +-
2560 arch/x86/kernel/dumpstack_32.c | 25 +-
2561 arch/x86/kernel/dumpstack_64.c | 72 +-
2562 arch/x86/kernel/e820.c | 4 +-
2563 arch/x86/kernel/early_printk.c | 1 +
2564 arch/x86/kernel/espfix_64.c | 44 +-
2565 arch/x86/kernel/fpu/core.c | 24 +-
2566 arch/x86/kernel/fpu/init.c | 49 +-
2567 arch/x86/kernel/fpu/regset.c | 22 +-
2568 arch/x86/kernel/fpu/signal.c | 20 +-
2569 arch/x86/kernel/fpu/xstate.c | 6 +-
2570 arch/x86/kernel/ftrace.c | 18 +-
2571 arch/x86/kernel/head64.c | 14 +-
2572 arch/x86/kernel/head_32.S | 237 +-
2573 arch/x86/kernel/head_64.S | 173 +-
2574 arch/x86/kernel/i386_ksyms_32.c | 12 +
2575 arch/x86/kernel/i8259.c | 10 +-
2576 arch/x86/kernel/io_delay.c | 2 +-
2577 arch/x86/kernel/ioport.c | 2 +-
2578 arch/x86/kernel/irq.c | 8 +-
2579 arch/x86/kernel/irq_32.c | 45 +-
2580 arch/x86/kernel/jump_label.c | 10 +-
2581 arch/x86/kernel/kgdb.c | 21 +-
2582 arch/x86/kernel/kprobes/core.c | 28 +-
2583 arch/x86/kernel/kprobes/opt.c | 16 +-
2584 arch/x86/kernel/ksysfs.c | 2 +-
2585 arch/x86/kernel/kvm.c | 2 +-
2586 arch/x86/kernel/kvmclock.c | 20 +-
2587 arch/x86/kernel/ldt.c | 25 +
2588 arch/x86/kernel/livepatch.c | 9 +-
2589 arch/x86/kernel/machine_kexec_32.c | 6 +-
2590 arch/x86/kernel/mcount_64.S | 21 +-
2591 arch/x86/kernel/module.c | 78 +-
2592 arch/x86/kernel/msr.c | 2 +-
2593 arch/x86/kernel/nmi.c | 34 +-
2594 arch/x86/kernel/nmi_selftest.c | 4 +-
2595 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
2596 arch/x86/kernel/paravirt.c | 43 +-
2597 arch/x86/kernel/paravirt_patch_64.c | 8 +
2598 arch/x86/kernel/pci-calgary_64.c | 2 +-
2599 arch/x86/kernel/pci-iommu_table.c | 2 +-
2600 arch/x86/kernel/pci-swiotlb.c | 2 +-
2601 arch/x86/kernel/process.c | 80 +-
2602 arch/x86/kernel/process_32.c | 29 +-
2603 arch/x86/kernel/process_64.c | 14 +-
2604 arch/x86/kernel/ptrace.c | 20 +-
2605 arch/x86/kernel/pvclock.c | 8 +-
2606 arch/x86/kernel/reboot.c | 44 +-
2607 arch/x86/kernel/reboot_fixups_32.c | 2 +-
2608 arch/x86/kernel/relocate_kernel_64.S | 3 +-
2609 arch/x86/kernel/setup.c | 29 +-
2610 arch/x86/kernel/setup_percpu.c | 29 +-
2611 arch/x86/kernel/signal.c | 17 +-
2612 arch/x86/kernel/smp.c | 2 +-
2613 arch/x86/kernel/smpboot.c | 29 +-
2614 arch/x86/kernel/step.c | 6 +-
2615 arch/x86/kernel/sys_i386_32.c | 184 +
2616 arch/x86/kernel/sys_x86_64.c | 28 +-
2617 arch/x86/kernel/tboot.c | 22 +-
2618 arch/x86/kernel/time.c | 8 +-
2619 arch/x86/kernel/tls.c | 7 +-
2620 arch/x86/kernel/tracepoint.c | 4 +-
2621 arch/x86/kernel/traps.c | 64 +-
2622 arch/x86/kernel/tsc.c | 2 +-
2623 arch/x86/kernel/uprobes.c | 4 +-
2624 arch/x86/kernel/vm86_32.c | 6 +-
2625 arch/x86/kernel/vmlinux.lds.S | 153 +-
2626 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
2627 arch/x86/kernel/x86_init.c | 6 +-
2628 arch/x86/kvm/cpuid.c | 21 +-
2629 arch/x86/kvm/emulate.c | 20 +-
2630 arch/x86/kvm/i8259.c | 10 +-
2631 arch/x86/kvm/ioapic.c | 2 +
2632 arch/x86/kvm/lapic.c | 2 +-
2633 arch/x86/kvm/paging_tmpl.h | 2 +-
2634 arch/x86/kvm/svm.c | 10 +-
2635 arch/x86/kvm/vmx.c | 60 +-
2636 arch/x86/kvm/x86.c | 44 +-
2637 arch/x86/lguest/boot.c | 3 +-
2638 arch/x86/lib/atomic64_386_32.S | 164 +
2639 arch/x86/lib/atomic64_cx8_32.S | 98 +-
2640 arch/x86/lib/checksum_32.S | 99 +-
2641 arch/x86/lib/clear_page_64.S | 3 +
2642 arch/x86/lib/cmpxchg16b_emu.S | 3 +
2643 arch/x86/lib/copy_page_64.S | 14 +-
2644 arch/x86/lib/copy_user_64.S | 66 +-
2645 arch/x86/lib/csum-copy_64.S | 14 +-
2646 arch/x86/lib/csum-wrappers_64.c | 8 +-
2647 arch/x86/lib/getuser.S | 74 +-
2648 arch/x86/lib/insn.c | 8 +-
2649 arch/x86/lib/iomap_copy_64.S | 2 +
2650 arch/x86/lib/memcpy_64.S | 6 +
2651 arch/x86/lib/memmove_64.S | 3 +-
2652 arch/x86/lib/memset_64.S | 3 +
2653 arch/x86/lib/mmx_32.c | 243 +-
2654 arch/x86/lib/msr-reg.S | 2 +
2655 arch/x86/lib/putuser.S | 87 +-
2656 arch/x86/lib/rwsem.S | 6 +-
2657 arch/x86/lib/usercopy_32.c | 359 +-
2658 arch/x86/lib/usercopy_64.c | 22 +-
2659 arch/x86/math-emu/fpu_aux.c | 2 +-
2660 arch/x86/math-emu/fpu_entry.c | 4 +-
2661 arch/x86/math-emu/fpu_system.h | 2 +-
2662 arch/x86/mm/Makefile | 4 +
2663 arch/x86/mm/extable.c | 26 +-
2664 arch/x86/mm/fault.c | 570 +-
2665 arch/x86/mm/gup.c | 6 +-
2666 arch/x86/mm/highmem_32.c | 6 +
2667 arch/x86/mm/hugetlbpage.c | 24 +-
2668 arch/x86/mm/init.c | 111 +-
2669 arch/x86/mm/init_32.c | 111 +-
2670 arch/x86/mm/init_64.c | 46 +-
2671 arch/x86/mm/iomap_32.c | 4 +
2672 arch/x86/mm/ioremap.c | 52 +-
2673 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
2674 arch/x86/mm/mmap.c | 40 +-
2675 arch/x86/mm/mmio-mod.c | 10 +-
2676 arch/x86/mm/mpx.c | 6 +-
2677 arch/x86/mm/numa.c | 2 +-
2678 arch/x86/mm/pageattr.c | 42 +-
2679 arch/x86/mm/pat.c | 12 +-
2680 arch/x86/mm/pat_rbtree.c | 2 +-
2681 arch/x86/mm/pf_in.c | 10 +-
2682 arch/x86/mm/pgtable.c | 209 +-
2683 arch/x86/mm/pgtable_32.c | 3 +
2684 arch/x86/mm/setup_nx.c | 7 +
2685 arch/x86/mm/tlb.c | 4 +
2686 arch/x86/mm/uderef_64.c | 37 +
2687 arch/x86/net/bpf_jit.S | 11 +
2688 arch/x86/net/bpf_jit_comp.c | 13 +-
2689 arch/x86/oprofile/backtrace.c | 6 +-
2690 arch/x86/oprofile/nmi_int.c | 10 +-
2691 arch/x86/oprofile/op_model_amd.c | 8 +-
2692 arch/x86/oprofile/op_model_ppro.c | 7 +-
2693 arch/x86/oprofile/op_x86_model.h | 2 +-
2694 arch/x86/pci/intel_mid_pci.c | 2 +-
2695 arch/x86/pci/irq.c | 8 +-
2696 arch/x86/pci/pcbios.c | 112 +-
2697 arch/x86/pci/vmd.c | 4 +-
2698 arch/x86/platform/efi/efi_32.c | 24 +
2699 arch/x86/platform/efi/efi_64.c | 26 +-
2700 arch/x86/platform/efi/efi_stub_32.S | 64 +-
2701 arch/x86/platform/efi/efi_stub_64.S | 2 +
2702 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
2703 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
2704 arch/x86/platform/intel-mid/mfld.c | 4 +-
2705 arch/x86/platform/intel-mid/mrfl.c | 2 +-
2706 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
2707 arch/x86/platform/olpc/olpc_dt.c | 2 +-
2708 arch/x86/power/cpu.c | 11 +-
2709 arch/x86/realmode/init.c | 10 +-
2710 arch/x86/realmode/rm/Makefile | 3 +
2711 arch/x86/realmode/rm/header.S | 4 +-
2712 arch/x86/realmode/rm/reboot.S | 4 +
2713 arch/x86/realmode/rm/trampoline_32.S | 12 +-
2714 arch/x86/realmode/rm/trampoline_64.S | 3 +-
2715 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
2716 arch/x86/tools/Makefile | 2 +-
2717 arch/x86/tools/relocs.c | 97 +-
2718 arch/x86/um/mem_32.c | 2 +-
2719 arch/x86/um/tls_32.c | 2 +-
2720 arch/x86/xen/enlighten.c | 52 +-
2721 arch/x86/xen/mmu.c | 19 +-
2722 arch/x86/xen/smp.c | 16 +-
2723 arch/x86/xen/xen-asm_32.S | 2 +-
2724 arch/x86/xen/xen-head.S | 11 +
2725 arch/x86/xen/xen-ops.h | 2 -
2726 block/bio.c | 4 +-
2727 block/blk-cgroup.c | 18 +-
2728 block/blk-map.c | 2 +-
2729 block/blk-softirq.c | 2 +-
2730 block/bsg.c | 12 +-
2731 block/cfq-iosched.c | 4 +-
2732 block/compat_ioctl.c | 4 +-
2733 block/genhd.c | 9 +-
2734 block/partitions/efi.c | 8 +-
2735 block/scsi_ioctl.c | 29 +-
2736 crypto/cast6_generic.c | 6 +-
2737 crypto/cryptd.c | 4 +-
2738 crypto/crypto_user.c | 2 +-
2739 crypto/pcrypt.c | 2 +-
2740 crypto/salsa20_generic.c | 16 +-
2741 crypto/serpent_generic.c | 6 +-
2742 crypto/zlib.c | 12 +-
2743 drivers/acpi/ac.c | 2 +-
2744 drivers/acpi/acpi_video.c | 2 +-
2745 drivers/acpi/apei/apei-internal.h | 2 +-
2746 drivers/acpi/apei/ghes.c | 10 +-
2747 drivers/acpi/battery.c | 2 +-
2748 drivers/acpi/bgrt.c | 6 +-
2749 drivers/acpi/blacklist.c | 4 +-
2750 drivers/acpi/bus.c | 4 +-
2751 drivers/acpi/device_pm.c | 4 +-
2752 drivers/acpi/ec.c | 6 +-
2753 drivers/acpi/pci_slot.c | 2 +-
2754 drivers/acpi/processor_idle.c | 2 +-
2755 drivers/acpi/processor_pdc.c | 2 +-
2756 drivers/acpi/sleep.c | 2 +-
2757 drivers/acpi/sysfs.c | 14 +-
2758 drivers/acpi/thermal.c | 2 +-
2759 drivers/acpi/video_detect.c | 7 +-
2760 drivers/android/binder.c | 2 +-
2761 drivers/ata/libata-core.c | 12 +-
2762 drivers/ata/libata-scsi.c | 2 +-
2763 drivers/ata/libata.h | 2 +-
2764 drivers/ata/pata_arasan_cf.c | 4 +-
2765 drivers/atm/adummy.c | 2 +-
2766 drivers/atm/ambassador.c | 8 +-
2767 drivers/atm/atmtcp.c | 14 +-
2768 drivers/atm/eni.c | 10 +-
2769 drivers/atm/firestream.c | 8 +-
2770 drivers/atm/fore200e.c | 14 +-
2771 drivers/atm/he.c | 18 +-
2772 drivers/atm/horizon.c | 4 +-
2773 drivers/atm/idt77252.c | 36 +-
2774 drivers/atm/iphase.c | 34 +-
2775 drivers/atm/lanai.c | 12 +-
2776 drivers/atm/nicstar.c | 46 +-
2777 drivers/atm/solos-pci.c | 4 +-
2778 drivers/atm/suni.c | 4 +-
2779 drivers/atm/uPD98402.c | 16 +-
2780 drivers/atm/zatm.c | 6 +-
2781 drivers/base/bus.c | 4 +-
2782 drivers/base/devres.c | 4 +-
2783 drivers/base/devtmpfs.c | 8 +-
2784 drivers/base/node.c | 2 +-
2785 drivers/base/platform-msi.c | 20 +-
2786 drivers/base/power/domain.c | 6 +-
2787 drivers/base/power/runtime.c | 61 +-
2788 drivers/base/power/sysfs.c | 2 +-
2789 drivers/base/power/wakeup.c | 8 +-
2790 drivers/base/regmap/regmap-debugfs.c | 4 +-
2791 drivers/base/regmap/regmap.c | 4 +-
2792 drivers/base/syscore.c | 4 +-
2793 drivers/block/cciss.c | 28 +-
2794 drivers/block/cciss.h | 2 +-
2795 drivers/block/cpqarray.c | 28 +-
2796 drivers/block/cpqarray.h | 2 +-
2797 drivers/block/drbd/drbd_bitmap.c | 2 +-
2798 drivers/block/drbd/drbd_int.h | 8 +-
2799 drivers/block/drbd/drbd_main.c | 12 +-
2800 drivers/block/drbd/drbd_nl.c | 16 +-
2801 drivers/block/drbd/drbd_receiver.c | 38 +-
2802 drivers/block/drbd/drbd_state.c | 12 +-
2803 drivers/block/drbd/drbd_state.h | 2 +-
2804 drivers/block/drbd/drbd_state_change.h | 8 +-
2805 drivers/block/drbd/drbd_worker.c | 14 +-
2806 drivers/block/floppy.c | 8 +-
2807 drivers/block/pktcdvd.c | 4 +-
2808 drivers/block/rbd.c | 2 +-
2809 drivers/bluetooth/btwilink.c | 2 +-
2810 drivers/bus/arm-cci.c | 12 +-
2811 drivers/cdrom/cdrom.c | 11 +-
2812 drivers/cdrom/gdrom.c | 1 -
2813 drivers/char/agp/compat_ioctl.c | 2 +-
2814 drivers/char/agp/frontend.c | 4 +-
2815 drivers/char/agp/intel-gtt.c | 4 +-
2816 drivers/char/hpet.c | 2 +-
2817 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
2818 drivers/char/ipmi/ipmi_poweroff.c | 2 +-
2819 drivers/char/ipmi/ipmi_si_intf.c | 12 +-
2820 drivers/char/ipmi/ipmi_ssif.c | 12 +-
2821 drivers/char/mem.c | 47 +-
2822 drivers/char/nvram.c | 2 +-
2823 drivers/char/pcmcia/synclink_cs.c | 16 +-
2824 drivers/char/random.c | 12 +-
2825 drivers/char/sonypi.c | 11 +-
2826 drivers/char/tpm/tpm_acpi.c | 3 +-
2827 drivers/char/tpm/tpm_eventlog.c | 5 +-
2828 drivers/char/virtio_console.c | 6 +-
2829 drivers/clk/clk-composite.c | 2 +-
2830 drivers/clk/samsung/clk.h | 2 +-
2831 drivers/clk/socfpga/clk-gate.c | 9 +-
2832 drivers/clk/socfpga/clk-pll.c | 9 +-
2833 drivers/clk/ti/clk.c | 8 +-
2834 drivers/cpufreq/acpi-cpufreq.c | 17 +-
2835 drivers/cpufreq/cpufreq-dt.c | 4 +-
2836 drivers/cpufreq/cpufreq.c | 27 +-
2837 drivers/cpufreq/cpufreq_governor.c | 2 +-
2838 drivers/cpufreq/cpufreq_governor.h | 10 +-
2839 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
2840 drivers/cpufreq/intel_pstate.c | 54 +-
2841 drivers/cpufreq/p4-clockmod.c | 12 +-
2842 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
2843 drivers/cpufreq/speedstep-centrino.c | 7 +-
2844 drivers/cpuidle/driver.c | 2 +-
2845 drivers/cpuidle/dt_idle_states.c | 2 +-
2846 drivers/cpuidle/governor.c | 2 +-
2847 drivers/cpuidle/governors/ladder.c | 13 +-
2848 drivers/cpuidle/sysfs.c | 2 +-
2849 drivers/crypto/hifn_795x.c | 4 +-
2850 drivers/crypto/qat/qat_common/adf_aer.c | 2 +-
2851 drivers/crypto/qat/qat_common/adf_sriov.c | 4 +-
2852 drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +-
2853 drivers/devfreq/devfreq.c | 4 +-
2854 drivers/dma/sh/shdma-base.c | 4 +-
2855 drivers/dma/sh/shdmac.c | 2 +-
2856 drivers/edac/edac_device.c | 4 +-
2857 drivers/edac/edac_device_sysfs.c | 2 +-
2858 drivers/edac/edac_mc_sysfs.c | 4 +-
2859 drivers/edac/edac_module.c | 2 +-
2860 drivers/edac/edac_pci.c | 4 +-
2861 drivers/edac/edac_pci_sysfs.c | 22 +-
2862 drivers/edac/mce_amd.h | 2 +-
2863 drivers/firewire/core-card.c | 6 +-
2864 drivers/firewire/core-cdev.c | 4 +-
2865 drivers/firewire/core-device.c | 2 +-
2866 drivers/firewire/core-iso.c | 2 +-
2867 drivers/firewire/core-transaction.c | 1 +
2868 drivers/firewire/core.h | 1 +
2869 drivers/firmware/dmi-id.c | 9 +-
2870 drivers/firmware/dmi_scan.c | 12 +-
2871 drivers/firmware/efi/cper.c | 8 +-
2872 drivers/firmware/efi/efi.c | 12 +-
2873 drivers/firmware/efi/efivars.c | 2 +-
2874 drivers/firmware/efi/runtime-map.c | 2 +-
2875 drivers/firmware/google/gsmi.c | 2 +-
2876 drivers/firmware/google/memconsole.c | 7 +-
2877 drivers/firmware/memmap.c | 2 +-
2878 drivers/firmware/psci.c | 2 +-
2879 drivers/gpio/gpio-davinci.c | 6 +-
2880 drivers/gpio/gpio-em.c | 2 +-
2881 drivers/gpio/gpio-ich.c | 2 +-
2882 drivers/gpio/gpio-omap.c | 4 +-
2883 drivers/gpio/gpio-rcar.c | 2 +-
2884 drivers/gpio/gpio-vr41xx.c | 2 +-
2885 drivers/gpio/gpiolib.c | 12 +-
2886 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +-
2887 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 2 +-
2888 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 8 +-
2889 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
2890 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
2891 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
2892 drivers/gpu/drm/amd/amdgpu/fiji_smc.c | 4 +-
2893 drivers/gpu/drm/amd/amdgpu/iceland_smc.c | 4 +-
2894 drivers/gpu/drm/amd/amdgpu/tonga_smc.c | 4 +-
2895 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
2896 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
2897 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
2898 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
2899 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
2900 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
2901 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
2902 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
2903 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
2904 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
2905 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
2906 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
2907 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
2908 drivers/gpu/drm/armada/armada_drv.c | 3 +-
2909 drivers/gpu/drm/ast/ast_mode.c | 2 +-
2910 drivers/gpu/drm/bochs/bochs_kms.c | 2 +-
2911 drivers/gpu/drm/drm_atomic.c | 7 +-
2912 drivers/gpu/drm/drm_crtc.c | 10 +-
2913 drivers/gpu/drm/drm_drv.c | 2 +-
2914 drivers/gpu/drm/drm_fops.c | 12 +-
2915 drivers/gpu/drm/drm_global.c | 14 +-
2916 drivers/gpu/drm/drm_info.c | 13 +-
2917 drivers/gpu/drm/drm_ioc32.c | 13 +-
2918 drivers/gpu/drm/drm_ioctl.c | 2 +-
2919 drivers/gpu/drm/drm_irq.c | 7 +-
2920 drivers/gpu/drm/drm_pci.c | 9 +-
2921 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
2922 drivers/gpu/drm/exynos/exynos_drm_g2d.c | 7 +-
2923 drivers/gpu/drm/gma500/cdv_intel_crt.c | 2 +-
2924 drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +-
2925 drivers/gpu/drm/gma500/cdv_intel_hdmi.c | 2 +-
2926 drivers/gpu/drm/gma500/cdv_intel_lvds.c | 2 +-
2927 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 8 +-
2928 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
2929 drivers/gpu/drm/gma500/psb_drv.c | 1 -
2930 drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
2931 drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
2932 drivers/gpu/drm/gma500/psb_intel_sdvo.c | 2 +-
2933 drivers/gpu/drm/i2c/tda998x_drv.c | 2 +-
2934 drivers/gpu/drm/i810/i810_dma.c | 2 +-
2935 drivers/gpu/drm/i810/i810_drv.c | 6 +-
2936 drivers/gpu/drm/i810/i810_drv.h | 6 +-
2937 drivers/gpu/drm/i915/dvo.h | 2 +-
2938 drivers/gpu/drm/i915/i915_dma.c | 4 +-
2939 drivers/gpu/drm/i915/i915_drv.c | 7 +-
2940 drivers/gpu/drm/i915/i915_drv.h | 2 +-
2941 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
2942 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
2943 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
2944 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
2945 drivers/gpu/drm/i915/i915_irq.c | 88 +-
2946 drivers/gpu/drm/i915/intel_display.c | 26 +-
2947 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
2948 drivers/gpu/drm/mga/mga_drv.c | 5 +-
2949 drivers/gpu/drm/mga/mga_drv.h | 6 +-
2950 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
2951 drivers/gpu/drm/mga/mga_irq.c | 8 +-
2952 drivers/gpu/drm/mga/mga_state.c | 2 +-
2953 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 +-
2954 drivers/gpu/drm/nouveau/nouveau_acpi.c | 2 +-
2955 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
2956 drivers/gpu/drm/nouveau/nouveau_connector.c | 2 +-
2957 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
2958 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
2959 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
2960 drivers/gpu/drm/nouveau/nouveau_usif.c | 7 +-
2961 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
2962 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 7 +-
2963 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 7 +-
2964 drivers/gpu/drm/omapdrm/Makefile | 2 +-
2965 drivers/gpu/drm/omapdrm/dss/display.c | 8 +-
2966 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
2967 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
2968 drivers/gpu/drm/qxl/qxl_display.c | 2 +-
2969 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
2970 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
2971 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
2972 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
2973 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
2974 drivers/gpu/drm/r128/r128_cce.c | 2 +-
2975 drivers/gpu/drm/r128/r128_drv.c | 4 +-
2976 drivers/gpu/drm/r128/r128_drv.h | 6 +-
2977 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
2978 drivers/gpu/drm/r128/r128_irq.c | 4 +-
2979 drivers/gpu/drm/r128/r128_state.c | 6 +-
2980 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
2981 drivers/gpu/drm/radeon/radeon_atpx_handler.c | 2 +-
2982 drivers/gpu/drm/radeon/radeon_connectors.c | 10 +-
2983 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
2984 drivers/gpu/drm/radeon/radeon_drv.c | 11 +-
2985 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
2986 drivers/gpu/drm/radeon/radeon_kms.c | 8 +-
2987 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
2988 drivers/gpu/drm/savage/savage_bci.c | 2 +-
2989 drivers/gpu/drm/savage/savage_drv.c | 5 +-
2990 drivers/gpu/drm/savage/savage_drv.h | 2 +-
2991 drivers/gpu/drm/sis/sis_drv.c | 5 +-
2992 drivers/gpu/drm/sis/sis_drv.h | 2 +-
2993 drivers/gpu/drm/sis/sis_mm.c | 2 +-
2994 drivers/gpu/drm/tegra/dc.c | 2 +-
2995 drivers/gpu/drm/tegra/dsi.c | 2 +-
2996 drivers/gpu/drm/tegra/hdmi.c | 2 +-
2997 drivers/gpu/drm/tegra/sor.c | 7 +-
2998 drivers/gpu/drm/tilcdc/Makefile | 6 +-
2999 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
3000 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
3001 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
3002 drivers/gpu/drm/udl/udl_connector.c | 2 +-
3003 drivers/gpu/drm/udl/udl_fb.c | 1 -
3004 drivers/gpu/drm/vc4/vc4_drv.c | 8 +-
3005 drivers/gpu/drm/via/via_dma.c | 2 +-
3006 drivers/gpu/drm/via/via_drv.c | 5 +-
3007 drivers/gpu/drm/via/via_drv.h | 6 +-
3008 drivers/gpu/drm/via/via_irq.c | 18 +-
3009 drivers/gpu/drm/virtio/virtgpu_display.c | 2 +-
3010 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
3011 drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 7 +-
3012 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
3013 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
3014 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
3015 drivers/gpu/vga/vga_switcheroo.c | 4 +-
3016 drivers/hid/hid-core.c | 4 +-
3017 drivers/hid/hid-magicmouse.c | 2 +-
3018 drivers/hid/hid-sensor-custom.c | 2 +-
3019 drivers/hv/channel.c | 6 +-
3020 drivers/hv/hv.c | 4 +-
3021 drivers/hv/hv_balloon.c | 18 +-
3022 drivers/hv/hyperv_vmbus.h | 2 +-
3023 drivers/hwmon/acpi_power_meter.c | 6 +-
3024 drivers/hwmon/applesmc.c | 2 +-
3025 drivers/hwmon/asus_atk0110.c | 10 +-
3026 drivers/hwmon/coretemp.c | 2 +-
3027 drivers/hwmon/dell-smm-hwmon.c | 2 +-
3028 drivers/hwmon/ibmaem.c | 2 +-
3029 drivers/hwmon/iio_hwmon.c | 2 +-
3030 drivers/hwmon/nct6683.c | 6 +-
3031 drivers/hwmon/nct6775.c | 6 +-
3032 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
3033 drivers/hwmon/sht15.c | 12 +-
3034 drivers/hwmon/via-cputemp.c | 2 +-
3035 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
3036 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
3037 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
3038 drivers/i2c/i2c-dev.c | 2 +-
3039 drivers/ide/ide-cd.c | 2 +-
3040 drivers/ide/ide-disk.c | 2 +-
3041 drivers/ide/ide.c | 4 +-
3042 drivers/idle/intel_idle.c | 6 +-
3043 drivers/iio/industrialio-core.c | 2 +-
3044 drivers/iio/magnetometer/ak8975.c | 2 +-
3045 drivers/infiniband/core/cm.c | 46 +-
3046 drivers/infiniband/core/fmr_pool.c | 20 +-
3047 drivers/infiniband/core/netlink.c | 5 +-
3048 drivers/infiniband/core/ucm.c | 4 +-
3049 drivers/infiniband/core/uverbs_cmd.c | 3 +
3050 drivers/infiniband/hw/cxgb4/device.c | 6 +-
3051 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
3052 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
3053 drivers/infiniband/hw/mlx4/mad.c | 2 +-
3054 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
3055 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
3056 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
3057 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
3058 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
3059 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
3060 drivers/infiniband/hw/nes/nes.c | 4 +-
3061 drivers/infiniband/hw/nes/nes.h | 40 +-
3062 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
3063 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
3064 drivers/infiniband/hw/nes/nes_nic.c | 42 +-
3065 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
3066 drivers/infiniband/hw/qib/qib.h | 1 +
3067 drivers/infiniband/hw/qib/qib_iba7322.c | 4 +-
3068 drivers/infiniband/hw/qib/qib_pcie.c | 2 +-
3069 drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
3070 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
3071 drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
3072 drivers/input/evdev.c | 2 +-
3073 drivers/input/gameport/gameport.c | 4 +-
3074 drivers/input/input.c | 4 +-
3075 drivers/input/joystick/sidewinder.c | 1 +
3076 drivers/input/misc/ims-pcu.c | 4 +-
3077 drivers/input/mouse/psmouse.h | 2 +-
3078 drivers/input/mousedev.c | 2 +-
3079 drivers/input/serio/serio.c | 4 +-
3080 drivers/input/serio/serio_raw.c | 4 +-
3081 drivers/input/touchscreen/htcpen.c | 2 +-
3082 drivers/iommu/arm-smmu-v3.c | 2 +-
3083 drivers/iommu/arm-smmu.c | 42 +-
3084 drivers/iommu/io-pgtable-arm.c | 98 +-
3085 drivers/iommu/io-pgtable.c | 11 +-
3086 drivers/iommu/io-pgtable.h | 21 +-
3087 drivers/iommu/iommu.c | 2 +-
3088 drivers/iommu/ipmmu-vmsa.c | 13 +-
3089 drivers/iommu/irq_remapping.c | 2 +-
3090 drivers/irqchip/irq-gic.c | 2 +-
3091 drivers/irqchip/irq-i8259.c | 2 +-
3092 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
3093 drivers/irqchip/irq-ts4800.c | 2 +-
3094 drivers/isdn/capi/capi.c | 10 +-
3095 drivers/isdn/gigaset/interface.c | 8 +-
3096 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
3097 drivers/isdn/hardware/avm/b1.c | 4 +-
3098 drivers/isdn/hardware/eicon/capifunc.c | 6 +-
3099 drivers/isdn/hardware/eicon/dadapter.c | 18 +-
3100 drivers/isdn/hardware/eicon/diddfunc.c | 7 +-
3101 drivers/isdn/hardware/eicon/divasfunc.c | 9 +-
3102 drivers/isdn/hardware/eicon/divasync.h | 2 +-
3103 drivers/isdn/hardware/eicon/idifunc.c | 9 +-
3104 drivers/isdn/hardware/eicon/mntfunc.c | 13 +-
3105 drivers/isdn/hardware/mISDN/avmfritz.c | 2 +-
3106 drivers/isdn/hardware/mISDN/hfcmulti.c | 7 +-
3107 drivers/isdn/hardware/mISDN/hfcpci.c | 16 +-
3108 drivers/isdn/hardware/mISDN/mISDNinfineon.c | 7 +-
3109 drivers/isdn/hardware/mISDN/mISDNipac.c | 5 +-
3110 drivers/isdn/hardware/mISDN/netjet.c | 2 +-
3111 drivers/isdn/hardware/mISDN/speedfax.c | 7 +-
3112 drivers/isdn/hardware/mISDN/w6692.c | 7 +-
3113 drivers/isdn/hisax/amd7930_fn.c | 5 +-
3114 drivers/isdn/hisax/arcofi.c | 5 +-
3115 drivers/isdn/hisax/diva.c | 7 +-
3116 drivers/isdn/hisax/elsa.c | 9 +-
3117 drivers/isdn/hisax/fsm.c | 5 +-
3118 drivers/isdn/hisax/hfc4s8s_l1.c | 14 +-
3119 drivers/isdn/hisax/hfc_pci.c | 10 +-
3120 drivers/isdn/hisax/hfc_sx.c | 10 +-
3121 drivers/isdn/hisax/hfc_usb.c | 12 +-
3122 drivers/isdn/hisax/icc.c | 5 +-
3123 drivers/isdn/hisax/ipacx.c | 7 +-
3124 drivers/isdn/hisax/isac.c | 5 +-
3125 drivers/isdn/hisax/isar.c | 5 +-
3126 drivers/isdn/hisax/isdnl3.c | 5 +-
3127 drivers/isdn/hisax/w6692.c | 5 +-
3128 drivers/isdn/i4l/isdn_common.c | 2 +
3129 drivers/isdn/i4l/isdn_tty.c | 22 +-
3130 drivers/isdn/icn/icn.c | 2 +-
3131 drivers/isdn/mISDN/dsp.h | 4 +-
3132 drivers/isdn/mISDN/dsp_cmx.c | 4 +-
3133 drivers/isdn/mISDN/dsp_core.c | 4 +-
3134 drivers/isdn/mISDN/dsp_tones.c | 4 +-
3135 drivers/isdn/mISDN/fsm.c | 5 +-
3136 drivers/isdn/mISDN/l1oip_core.c | 8 +-
3137 drivers/lguest/core.c | 9 +-
3138 drivers/lguest/page_tables.c | 2 +-
3139 drivers/lguest/x86/core.c | 12 +-
3140 drivers/lguest/x86/switcher_32.S | 27 +-
3141 drivers/lightnvm/rrpc.c | 4 +-
3142 drivers/lightnvm/rrpc.h | 2 +-
3143 drivers/md/bcache/alloc.c | 2 +-
3144 drivers/md/bcache/bcache.h | 10 +-
3145 drivers/md/bcache/btree.c | 2 +-
3146 drivers/md/bcache/closure.h | 2 +-
3147 drivers/md/bcache/io.c | 10 +-
3148 drivers/md/bcache/journal.c | 2 +-
3149 drivers/md/bcache/stats.c | 26 +-
3150 drivers/md/bcache/stats.h | 16 +-
3151 drivers/md/bcache/super.c | 2 +-
3152 drivers/md/bcache/sysfs.c | 20 +-
3153 drivers/md/bitmap.c | 2 +-
3154 drivers/md/dm-cache-target.c | 116 +-
3155 drivers/md/dm-ioctl.c | 2 +-
3156 drivers/md/dm-raid.c | 2 +-
3157 drivers/md/dm-raid1.c | 18 +-
3158 drivers/md/dm-stats.c | 6 +-
3159 drivers/md/dm-stripe.c | 10 +-
3160 drivers/md/dm-table.c | 2 +-
3161 drivers/md/dm-thin-metadata.c | 4 +-
3162 drivers/md/dm.c | 28 +-
3163 drivers/md/md.c | 41 +-
3164 drivers/md/md.h | 8 +-
3165 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
3166 drivers/md/persistent-data/dm-space-map.h | 1 +
3167 drivers/md/raid1.c | 8 +-
3168 drivers/md/raid10.c | 20 +-
3169 drivers/md/raid5.c | 26 +-
3170 drivers/media/dvb-core/dvb_net.c | 2 +-
3171 drivers/media/dvb-core/dvbdev.c | 2 +-
3172 drivers/media/dvb-frontends/af9033.h | 2 +-
3173 drivers/media/dvb-frontends/cx24116.c | 2 +-
3174 drivers/media/dvb-frontends/cx24117.c | 2 +-
3175 drivers/media/dvb-frontends/cx24120.c | 2 +-
3176 drivers/media/dvb-frontends/cx24123.c | 2 +-
3177 drivers/media/dvb-frontends/cxd2820r_core.c | 2 +-
3178 drivers/media/dvb-frontends/dib3000.h | 2 +-
3179 drivers/media/dvb-frontends/dib7000p.h | 2 +-
3180 drivers/media/dvb-frontends/dib8000.h | 2 +-
3181 drivers/media/dvb-frontends/hd29l2.c | 2 +-
3182 drivers/media/dvb-frontends/lgdt3306a.c | 2 +-
3183 drivers/media/dvb-frontends/mt312.c | 6 +-
3184 drivers/media/dvb-frontends/s921.c | 2 +-
3185 drivers/media/pci/bt8xx/dst.c | 2 +-
3186 drivers/media/pci/cx88/cx88-video.c | 6 +-
3187 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
3188 drivers/media/pci/pt1/va1j5jf8007s.c | 2 +-
3189 drivers/media/pci/pt1/va1j5jf8007t.c | 2 +-
3190 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
3191 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
3192 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
3193 drivers/media/pci/tw68/tw68-core.c | 2 +-
3194 drivers/media/pci/zoran/zoran.h | 1 -
3195 drivers/media/pci/zoran/zoran_card.c | 4 +-
3196 drivers/media/pci/zoran/zoran_driver.c | 3 -
3197 drivers/media/platform/omap/omap_vout.c | 11 +-
3198 drivers/media/platform/s5p-tv/mixer.h | 2 +-
3199 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
3200 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
3201 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
3202 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
3203 drivers/media/platform/soc_camera/soc_camera.c | 2 +-
3204 drivers/media/radio/radio-cadet.c | 2 +
3205 drivers/media/radio/radio-maxiradio.c | 2 +-
3206 drivers/media/radio/radio-shark.c | 2 +-
3207 drivers/media/radio/radio-shark2.c | 2 +-
3208 drivers/media/radio/radio-si476x.c | 2 +-
3209 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
3210 drivers/media/usb/pvrusb2/pvrusb2-context.c | 8 +-
3211 drivers/media/usb/pvrusb2/pvrusb2-dvb.c | 7 +-
3212 drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 +-
3213 drivers/media/usb/pvrusb2/pvrusb2-std.c | 2 +-
3214 drivers/media/usb/pvrusb2/pvrusb2-v4l2.c | 6 +-
3215 drivers/media/usb/uvc/uvc_driver.c | 4 +-
3216 drivers/media/v4l2-core/v4l2-common.c | 2 +-
3217 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
3218 drivers/media/v4l2-core/v4l2-device.c | 4 +-
3219 drivers/media/v4l2-core/v4l2-ioctl.c | 293 +-
3220 drivers/memory/omap-gpmc.c | 21 +-
3221 drivers/message/fusion/mptbase.c | 4 +-
3222 drivers/message/fusion/mptlan.c | 2 +-
3223 drivers/message/fusion/mptsas.c | 34 +-
3224 drivers/mfd/ab8500-debugfs.c | 2 +-
3225 drivers/mfd/kempld-core.c | 2 +-
3226 drivers/mfd/max8925-i2c.c | 2 +-
3227 drivers/mfd/tps65910.c | 2 +-
3228 drivers/mfd/twl4030-irq.c | 9 +-
3229 drivers/misc/c2port/core.c | 4 +-
3230 drivers/misc/kgdbts.c | 6 +-
3231 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
3232 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
3233 drivers/misc/mic/scif/scif_api.c | 10 +-
3234 drivers/misc/mic/scif/scif_rb.c | 8 +-
3235 drivers/misc/sgi-gru/gruhandles.c | 4 +-
3236 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
3237 drivers/misc/sgi-gru/grutables.h | 158 +-
3238 drivers/misc/sgi-xp/xp.h | 2 +-
3239 drivers/misc/sgi-xp/xp_main.c | 57 +-
3240 drivers/misc/sgi-xp/xpc.h | 3 +-
3241 drivers/misc/sgi-xp/xpc_main.c | 2 +-
3242 drivers/misc/sgi-xp/xpnet.c | 2 +-
3243 drivers/misc/ti-st/st_kim.c | 32 +-
3244 drivers/mmc/card/mmc_test.c | 4 +-
3245 drivers/mmc/host/dw_mmc.h | 2 +-
3246 drivers/mmc/host/mmci.c | 4 +-
3247 drivers/mmc/host/omap_hsmmc.c | 4 +-
3248 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
3249 drivers/mmc/host/sdhci-s3c.c | 8 +-
3250 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
3251 drivers/mtd/devices/block2mtd.c | 2 +-
3252 drivers/mtd/devices/phram.c | 2 +-
3253 drivers/mtd/maps/gpio-addr-flash.c | 2 +-
3254 drivers/mtd/maps/latch-addr-flash.c | 2 +-
3255 drivers/mtd/maps/pci.c | 4 +-
3256 drivers/mtd/maps/pcmciamtd.c | 8 +-
3257 drivers/mtd/maps/sbc_gxx.c | 2 +-
3258 drivers/mtd/nand/cafe_nand.c | 18 +-
3259 drivers/mtd/nand/denali.c | 1 +
3260 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
3261 drivers/mtd/nftlmount.c | 1 +
3262 drivers/mtd/sm_ftl.c | 2 +-
3263 drivers/mtd/ubi/build.c | 2 +-
3264 drivers/net/bonding/bond_netlink.c | 2 +-
3265 drivers/net/caif/caif_hsi.c | 4 +-
3266 drivers/net/caif/caif_serial.c | 2 +-
3267 drivers/net/caif/caif_spi.c | 2 +-
3268 drivers/net/caif/caif_virtio.c | 2 +-
3269 drivers/net/can/Kconfig | 2 +-
3270 drivers/net/can/dev.c | 2 +-
3271 drivers/net/can/janz-ican3.c | 2 +-
3272 drivers/net/can/led.c | 2 +-
3273 drivers/net/can/sun4i_can.c | 2 +-
3274 drivers/net/can/vcan.c | 2 +-
3275 drivers/net/can/xilinx_can.c | 2 +-
3276 drivers/net/dummy.c | 2 +-
3277 drivers/net/ethernet/8390/ax88796.c | 4 +-
3278 drivers/net/ethernet/8390/axnet_cs.c | 4 +-
3279 drivers/net/ethernet/8390/ne2k-pci.c | 6 +-
3280 drivers/net/ethernet/8390/pcnet_cs.c | 4 +-
3281 drivers/net/ethernet/altera/altera_tse_main.c | 6 +-
3282 drivers/net/ethernet/amd/amd8111e.c | 5 +-
3283 drivers/net/ethernet/amd/pcnet32.c | 7 +-
3284 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
3285 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
3286 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
3287 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
3288 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 66 +-
3289 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
3290 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
3291 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
3292 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
3293 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
3294 drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
3295 drivers/net/ethernet/arc/emac_main.c | 2 +-
3296 drivers/net/ethernet/atheros/alx/main.c | 2 +-
3297 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
3298 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
3299 drivers/net/ethernet/aurora/nb8800.c | 2 +-
3300 drivers/net/ethernet/broadcom/bnx2.c | 2 +-
3301 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
3302 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 216 +-
3303 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 4 +-
3304 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
3305 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
3306 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
3307 drivers/net/ethernet/broadcom/tg3.c | 2 +-
3308 drivers/net/ethernet/broadcom/tg3.h | 1 +
3309 drivers/net/ethernet/brocade/bna/bfa_cs.h | 42 +-
3310 drivers/net/ethernet/brocade/bna/bfa_ioc.c | 10 +-
3311 drivers/net/ethernet/brocade/bna/bfa_ioc.h | 4 +-
3312 drivers/net/ethernet/brocade/bna/bfa_msgq.h | 8 +-
3313 drivers/net/ethernet/brocade/bna/bna_enet.c | 6 +-
3314 drivers/net/ethernet/brocade/bna/bna_tx_rx.c | 6 +-
3315 drivers/net/ethernet/brocade/bna/bna_types.h | 24 +-
3316 drivers/net/ethernet/brocade/bna/bnad.c | 11 +-
3317 drivers/net/ethernet/cadence/macb.c | 4 +-
3318 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
3319 drivers/net/ethernet/cavium/liquidio/lio_main.c | 15 +-
3320 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
3321 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
3322 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
3323 drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 2 +-
3324 drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 2 +-
3325 drivers/net/ethernet/dec/tulip/de4x5.c | 13 +-
3326 drivers/net/ethernet/emulex/benet/be_main.c | 4 +-
3327 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
3328 drivers/net/ethernet/faraday/ftmac100.c | 2 +
3329 drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
3330 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +-
3331 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 6 +-
3332 drivers/net/ethernet/intel/e100.c | 2 +-
3333 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
3334 drivers/net/ethernet/intel/e1000e/netdev.c | 2 +-
3335 drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 2 +-
3336 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
3337 drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
3338 drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
3339 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
3340 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
3341 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +-
3342 drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
3343 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
3344 drivers/net/ethernet/mellanox/mlx4/main.c | 2 +-
3345 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +-
3346 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
3347 drivers/net/ethernet/micrel/ks8851_mll.c | 2 +-
3348 drivers/net/ethernet/neterion/s2io.c | 2 +-
3349 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
3350 drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
3351 .../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
3352 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
3353 .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
3354 .../net/ethernet/qlogic/netxen/netxen_nic_main.c | 2 +-
3355 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
3356 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
3357 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 +-
3358 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
3359 drivers/net/ethernet/realtek/r8169.c | 8 +-
3360 drivers/net/ethernet/renesas/sh_eth.c | 2 +-
3361 drivers/net/ethernet/rocker/rocker.c | 4 +-
3362 drivers/net/ethernet/sfc/ptp.c | 2 +-
3363 drivers/net/ethernet/sfc/selftest.c | 20 +-
3364 drivers/net/ethernet/smsc/smsc911x.c | 2 +-
3365 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
3366 drivers/net/ethernet/synopsys/dwc_eth_qos.c | 2 +-
3367 drivers/net/ethernet/via/via-rhine.c | 2 +-
3368 drivers/net/ethernet/wiznet/w5100.c | 2 +-
3369 drivers/net/ethernet/wiznet/w5300.c | 2 +-
3370 drivers/net/geneve.c | 2 +-
3371 drivers/net/hyperv/hyperv_net.h | 2 +-
3372 drivers/net/hyperv/netvsc_drv.c | 2 +-
3373 drivers/net/hyperv/rndis_filter.c | 7 +-
3374 drivers/net/ifb.c | 2 +-
3375 drivers/net/ipvlan/ipvlan_core.c | 2 +-
3376 drivers/net/ipvlan/ipvlan_main.c | 6 +-
3377 drivers/net/irda/sh_irda.c | 2 +-
3378 drivers/net/irda/vlsi_ir.c | 18 +-
3379 drivers/net/irda/vlsi_ir.h | 14 +-
3380 drivers/net/macvlan.c | 20 +-
3381 drivers/net/macvtap.c | 10 +-
3382 drivers/net/nlmon.c | 2 +-
3383 drivers/net/phy/phy_device.c | 6 +-
3384 drivers/net/plip/plip.c | 2 +-
3385 drivers/net/ppp/ppp_generic.c | 4 +-
3386 drivers/net/ppp/pptp.c | 1 +
3387 drivers/net/rionet.c | 2 +-
3388 drivers/net/slip/slhc.c | 2 +-
3389 drivers/net/team/team.c | 4 +-
3390 drivers/net/tun.c | 7 +-
3391 drivers/net/usb/hso.c | 28 +-
3392 drivers/net/usb/ipheth.c | 2 +-
3393 drivers/net/usb/r8152.c | 2 +-
3394 drivers/net/usb/sierra_net.c | 4 +-
3395 drivers/net/virtio_net.c | 2 +-
3396 drivers/net/vrf.c | 4 +-
3397 drivers/net/vxlan.c | 4 +-
3398 drivers/net/wimax/i2400m/rx.c | 2 +-
3399 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
3400 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
3401 drivers/net/wireless/ath/ath6kl/core.h | 2 +-
3402 drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
3403 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
3404 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
3405 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
3406 drivers/net/wireless/ath/ath9k/main.c | 22 +-
3407 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
3408 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
3409 drivers/net/wireless/ath/carl9170/main.c | 10 +-
3410 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
3411 drivers/net/wireless/ath/wil6210/pcie_bus.c | 2 +-
3412 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
3413 drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
3414 drivers/net/wireless/atmel/atmel.c | 183 +-
3415 drivers/net/wireless/broadcom/b43/phy_lp.c | 2 +-
3416 drivers/net/wireless/broadcom/b43legacy/main.c | 5 +-
3417 .../broadcom/brcm80211/brcmsmac/phy/phy_cmn.c | 3 +-
3418 .../broadcom/brcm80211/brcmsmac/phy_shim.c | 5 +-
3419 .../broadcom/brcm80211/brcmsmac/phy_shim.h | 2 +-
3420 drivers/net/wireless/cisco/airo.c | 201 +-
3421 drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
3422 drivers/net/wireless/intel/ipw2x00/ipw2200.c | 6 +-
3423 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 11 +-
3424 drivers/net/wireless/intel/iwlegacy/4965-mac.c | 7 +-
3425 drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 34 +-
3426 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 4 +-
3427 drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 2 +-
3428 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +-
3429 .../net/wireless/intersil/hostap/hostap_ioctl.c | 134 +-
3430 drivers/net/wireless/intersil/orinoco/wext.c | 131 +-
3431 drivers/net/wireless/intersil/prism54/isl_ioctl.c | 292 +-
3432 drivers/net/wireless/mac80211_hwsim.c | 28 +-
3433 drivers/net/wireless/marvell/mwifiex/main.c | 2 +-
3434 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 4 +-
3435 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 4 +-
3436 drivers/net/wireless/ralink/rt2x00/rt2500usb.c | 4 +-
3437 drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 6 +-
3438 drivers/net/wireless/ralink/rt2x00/rt2x00.h | 2 +-
3439 drivers/net/wireless/ralink/rt2x00/rt2x00queue.c | 4 +-
3440 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 4 +-
3441 drivers/net/wireless/ralink/rt2x00/rt73usb.c | 4 +-
3442 drivers/net/wireless/realtek/rtlwifi/base.c | 14 +-
3443 drivers/net/wireless/realtek/rtlwifi/base.h | 4 +-
3444 drivers/net/wireless/realtek/rtlwifi/pci.c | 15 +-
3445 drivers/net/wireless/realtek/rtlwifi/ps.c | 6 +-
3446 drivers/net/wireless/realtek/rtlwifi/ps.h | 6 +-
3447 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
3448 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
3449 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
3450 drivers/net/wireless/zydas/zd1201.c | 192 +-
3451 drivers/nvme/host/pci.c | 2 +-
3452 drivers/of/fdt.c | 4 +-
3453 drivers/oprofile/buffer_sync.c | 8 +-
3454 drivers/oprofile/event_buffer.c | 2 +-
3455 drivers/oprofile/oprof.c | 2 +-
3456 drivers/oprofile/oprofile_stats.c | 10 +-
3457 drivers/oprofile/oprofile_stats.h | 10 +-
3458 drivers/oprofile/oprofilefs.c | 2 +-
3459 drivers/oprofile/timer_int.c | 2 +-
3460 drivers/parport/procfs.c | 4 +-
3461 drivers/pci/host/pci-host-generic.c | 2 +-
3462 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
3463 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
3464 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
3465 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
3466 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
3467 drivers/pci/hotplug/pciehp_core.c | 2 +-
3468 drivers/pci/msi.c | 22 +-
3469 drivers/pci/pci-sysfs.c | 6 +-
3470 drivers/pci/pci.h | 4 +-
3471 drivers/pci/pcie/aspm.c | 10 +-
3472 drivers/pci/pcie/portdrv_pci.c | 2 +-
3473 drivers/pci/probe.c | 2 +-
3474 drivers/pci/setup-bus.c | 2 +-
3475 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
3476 drivers/pinctrl/pinctrl-at91.c | 5 +-
3477 drivers/platform/chrome/chromeos_pstore.c | 2 +-
3478 drivers/platform/x86/alienware-wmi.c | 4 +-
3479 drivers/platform/x86/apple-gmux.c | 2 +-
3480 drivers/platform/x86/compal-laptop.c | 2 +-
3481 drivers/platform/x86/hdaps.c | 2 +-
3482 drivers/platform/x86/ibm_rtl.c | 2 +-
3483 drivers/platform/x86/intel_oaktrail.c | 2 +-
3484 drivers/platform/x86/msi-laptop.c | 16 +-
3485 drivers/platform/x86/msi-wmi.c | 2 +-
3486 drivers/platform/x86/samsung-laptop.c | 2 +-
3487 drivers/platform/x86/samsung-q10.c | 2 +-
3488 drivers/platform/x86/sony-laptop.c | 14 +-
3489 drivers/platform/x86/thinkpad_acpi.c | 11 +-
3490 drivers/pnp/pnpbios/bioscalls.c | 14 +-
3491 drivers/pnp/pnpbios/core.c | 2 +-
3492 drivers/power/pda_power.c | 7 +-
3493 drivers/power/power_supply.h | 4 +-
3494 drivers/power/power_supply_core.c | 7 +-
3495 drivers/power/power_supply_sysfs.c | 6 +-
3496 drivers/power/reset/at91-reset.c | 5 +-
3497 drivers/powercap/powercap_sys.c | 136 +-
3498 drivers/ptp/ptp_private.h | 2 +-
3499 drivers/ptp/ptp_sysfs.c | 2 +-
3500 drivers/regulator/core.c | 4 +-
3501 drivers/regulator/max8660.c | 6 +-
3502 drivers/regulator/max8973-regulator.c | 16 +-
3503 drivers/regulator/mc13892-regulator.c | 8 +-
3504 drivers/remoteproc/remoteproc_core.c | 26 +-
3505 drivers/rtc/rtc-armada38x.c | 7 +-
3506 drivers/rtc/rtc-cmos.c | 4 +-
3507 drivers/rtc/rtc-ds1307.c | 2 +-
3508 drivers/rtc/rtc-m48t59.c | 4 +-
3509 drivers/rtc/rtc-rv8803.c | 15 +-
3510 drivers/rtc/rtc-rx8010.c | 8 +-
3511 drivers/rtc/rtc-test.c | 6 +-
3512 drivers/scsi/aacraid/aachba.c | 11 +-
3513 drivers/scsi/aic7xxx/aic79xx.h | 2 +-
3514 drivers/scsi/aic7xxx/aic79xx_core.c | 11 +-
3515 drivers/scsi/be2iscsi/be_main.c | 2 +-
3516 drivers/scsi/bfa/bfa.h | 4 +-
3517 drivers/scsi/bfa/bfa_core.c | 4 +-
3518 drivers/scsi/bfa/bfa_cs.h | 124 +-
3519 drivers/scsi/bfa/bfa_fcpim.h | 14 +-
3520 drivers/scsi/bfa/bfa_fcs.h | 34 +-
3521 drivers/scsi/bfa/bfa_fcs_fcpim.c | 6 +-
3522 drivers/scsi/bfa/bfa_fcs_lport.c | 4 +-
3523 drivers/scsi/bfa/bfa_fcs_rport.c | 4 +-
3524 drivers/scsi/bfa/bfa_ioc.c | 8 +-
3525 drivers/scsi/bfa/bfa_ioc.h | 16 +-
3526 drivers/scsi/bfa/bfa_svc.c | 12 +-
3527 drivers/scsi/bfa/bfa_svc.h | 20 +-
3528 drivers/scsi/bfa/bfad.c | 12 +-
3529 drivers/scsi/bfa/bfad_bsg.c | 8 +-
3530 drivers/scsi/bfa/bfad_drv.h | 5 +-
3531 drivers/scsi/csiostor/csio_defs.h | 19 +-
3532 drivers/scsi/csiostor/csio_hw.c | 67 +-
3533 drivers/scsi/csiostor/csio_init.c | 2 +-
3534 drivers/scsi/csiostor/csio_lnode.c | 32 +-
3535 drivers/scsi/csiostor/csio_rnode.c | 28 +-
3536 drivers/scsi/csiostor/csio_scsi.c | 37 +-
3537 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
3538 drivers/scsi/fcoe/fcoe_transport.c | 16 +-
3539 drivers/scsi/hosts.c | 4 +-
3540 drivers/scsi/hpsa.c | 38 +-
3541 drivers/scsi/hpsa.h | 2 +-
3542 drivers/scsi/hptiop.c | 2 -
3543 drivers/scsi/hptiop.h | 1 -
3544 drivers/scsi/ipr.c | 32 +-
3545 drivers/scsi/ipr.h | 2 +-
3546 drivers/scsi/libfc/fc_exch.c | 50 +-
3547 drivers/scsi/libsas/sas_ata.c | 2 +-
3548 drivers/scsi/lpfc/lpfc.h | 8 +-
3549 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
3550 drivers/scsi/lpfc/lpfc_init.c | 8 +-
3551 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
3552 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
3553 drivers/scsi/mpt3sas/mpt3sas_base.c | 2 +-
3554 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
3555 drivers/scsi/pmcraid.c | 46 +-
3556 drivers/scsi/pmcraid.h | 8 +-
3557 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
3558 drivers/scsi/qla2xxx/qla_gbl.h | 8 +-
3559 drivers/scsi/qla2xxx/qla_os.c | 15 +-
3560 drivers/scsi/qla2xxx/qla_target.c | 16 +-
3561 drivers/scsi/qla2xxx/qla_target.h | 2 +-
3562 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
3563 drivers/scsi/qla4xxx/ql4_os.c | 15 +-
3564 drivers/scsi/scsi.c | 2 +-
3565 drivers/scsi/scsi_lib.c | 8 +-
3566 drivers/scsi/scsi_sysfs.c | 2 +-
3567 drivers/scsi/scsi_transport_fc.c | 8 +-
3568 drivers/scsi/scsi_transport_iscsi.c | 6 +-
3569 drivers/scsi/scsi_transport_spi.c | 2 +-
3570 drivers/scsi/scsi_transport_srp.c | 8 +-
3571 drivers/scsi/sd.c | 6 +-
3572 drivers/scsi/sg.c | 2 +-
3573 drivers/scsi/sr.c | 21 +-
3574 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
3575 drivers/spi/spi.c | 2 +-
3576 drivers/staging/android/timed_output.c | 6 +-
3577 drivers/staging/comedi/comedi_fops.c | 8 +-
3578 drivers/staging/fbtft/fbtft-core.c | 2 +-
3579 drivers/staging/fbtft/fbtft.h | 2 +-
3580 drivers/staging/gdm724x/gdm_lte.c | 2 +-
3581 drivers/staging/gdm724x/gdm_tty.c | 2 +-
3582 drivers/staging/gdm72xx/gdm_wimax.c | 2 +-
3583 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
3584 drivers/staging/iio/adc/ad7280a.c | 4 +-
3585 .../staging/lustre/lnet/klnds/socklnd/socklnd.h | 6 +-
3586 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
3587 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
3588 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
3589 .../lustre/lustre/include/lustre/lustre_idl.h | 92 +-
3590 drivers/staging/lustre/lustre/include/lustre_dlm.h | 8 +-
3591 drivers/staging/lustre/lustre/include/lustre_net.h | 2 +-
3592 drivers/staging/lustre/lustre/include/obd.h | 2 +-
3593 drivers/staging/lustre/lustre/ldlm/ldlm_request.c | 5 +-
3594 drivers/staging/lustre/lustre/llite/dir.c | 2 +-
3595 drivers/staging/lustre/lustre/lov/lov_io.c | 62 +-
3596 drivers/staging/lustre/lustre/obdclass/llog_swab.c | 24 +-
3597 drivers/staging/lustre/lustre/osc/osc_request.c | 24 +-
3598 drivers/staging/lustre/lustre/ptlrpc/layout.c | 7 +-
3599 .../staging/lustre/lustre/ptlrpc/pack_generic.c | 151 +-
3600 drivers/staging/octeon/ethernet-rx.c | 24 +-
3601 drivers/staging/octeon/ethernet.c | 8 +-
3602 drivers/staging/panel/panel.c | 4 +-
3603 drivers/staging/rdma/hfi1/pcie.c | 2 +-
3604 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 18 +-
3605 drivers/staging/rtl8188eu/hal/rtl8188eu_recv.c | 2 +-
3606 drivers/staging/rtl8188eu/hal/rtl8188eu_xmit.c | 2 +-
3607 drivers/staging/rtl8188eu/include/Hal8188EPhyCfg.h | 8 -
3608 drivers/staging/rtl8188eu/include/hal_intf.h | 5 +-
3609 drivers/staging/rtl8188eu/include/odm_precomp.h | 2 +-
3610 drivers/staging/rtl8188eu/include/recv_osdep.h | 1 -
3611 drivers/staging/rtl8188eu/include/rtl8188e_recv.h | 2 +-
3612 drivers/staging/rtl8188eu/include/rtl8188e_xmit.h | 2 +-
3613 drivers/staging/rtl8188eu/include/rtw_cmd.h | 1 -
3614 drivers/staging/rtl8188eu/include/rtw_eeprom.h | 6 -
3615 drivers/staging/rtl8188eu/include/rtw_ioctl.h | 9 -
3616 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 12 +-
3617 drivers/staging/rtl8188eu/include/xmit_osdep.h | 2 +-
3618 drivers/staging/rtl8188eu/os_dep/usb_ops_linux.c | 4 +-
3619 drivers/staging/rtl8188eu/os_dep/xmit_linux.c | 2 +-
3620 drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 49 +-
3621 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 4 +-
3622 drivers/staging/rtl8192e/rtl8192e/rtl_dm.c | 10 +-
3623 drivers/staging/rtl8192e/rtl8192e/rtl_dm.h | 4 +-
3624 drivers/staging/rtl8192e/rtl8192e/rtl_ps.c | 6 +-
3625 drivers/staging/rtl8192e/rtl8192e/rtl_ps.h | 3 +-
3626 drivers/staging/rtl8192e/rtl8192e/rtl_wx.c | 48 +-
3627 drivers/staging/rtl8192e/rtllib.h | 4 +-
3628 drivers/staging/rtl8192e/rtllib_softmac.c | 32 +-
3629 drivers/staging/rtl8192e/rtllib_softmac_wx.c | 2 +-
3630 drivers/staging/rtl8192e/rtllib_tx.c | 2 +-
3631 drivers/staging/rtl8192u/ieee80211/ieee80211.h | 2 +-
3632 .../staging/rtl8192u/ieee80211/ieee80211_softmac.c | 6 +-
3633 drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c | 2 +-
3634 drivers/staging/rtl8192u/r8192U_core.c | 7 +-
3635 drivers/staging/rtl8712/rtl8712_recv.c | 6 +-
3636 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
3637 drivers/staging/rtl8712/rtl871x_ioctl.h | 14 -
3638 drivers/staging/rtl8712/rtl871x_xmit.c | 2 +-
3639 drivers/staging/rtl8712/rtl871x_xmit.h | 2 +-
3640 drivers/staging/rtl8712/usb_ops_linux.c | 2 +-
3641 drivers/staging/rtl8712/xmit_linux.c | 2 +-
3642 drivers/staging/rtl8712/xmit_osdep.h | 2 +-
3643 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 +-
3644 drivers/staging/rtl8723au/core/rtw_xmit.c | 2 +-
3645 drivers/staging/rtl8723au/hal/rtl8723au_recv.c | 2 +-
3646 drivers/staging/rtl8723au/hal/usb_ops_linux.c | 4 +-
3647 drivers/staging/rtl8723au/include/Hal8723APhyCfg.h | 8 -
3648 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
3649 drivers/staging/rtl8723au/include/hal_intf.h | 2 -
3650 drivers/staging/rtl8723au/include/recv_osdep.h | 1 -
3651 drivers/staging/rtl8723au/include/rtw_ap.h | 2 -
3652 drivers/staging/rtl8723au/include/rtw_cmd.h | 1 -
3653 drivers/staging/rtl8723au/include/rtw_eeprom.h | 7 -
3654 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 14 +-
3655 drivers/staging/rtl8723au/include/usb_ops.h | 8 +-
3656 drivers/staging/rtl8723au/include/xmit_osdep.h | 2 +-
3657 drivers/staging/rtl8723au/os_dep/ioctl_cfg80211.c | 2 +-
3658 drivers/staging/rtl8723au/os_dep/xmit_linux.c | 2 +-
3659 drivers/staging/sm750fb/sm750.c | 14 +-
3660 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
3661 drivers/staging/unisys/visornic/visornic_main.c | 2 +-
3662 drivers/staging/wilc1000/linux_wlan.c | 2 +-
3663 drivers/staging/wilc1000/wilc_spi.c | 2 -
3664 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
3665 drivers/staging/wlan-ng/p80211netdev.c | 2 +-
3666 drivers/target/sbp/sbp_target.c | 4 +-
3667 drivers/thermal/cpu_cooling.c | 9 +-
3668 drivers/thermal/devfreq_cooling.c | 19 +-
3669 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
3670 drivers/thermal/of-thermal.c | 17 +-
3671 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
3672 drivers/tty/cyclades.c | 6 +-
3673 drivers/tty/hvc/hvc_console.c | 14 +-
3674 drivers/tty/hvc/hvcs.c | 21 +-
3675 drivers/tty/hvc/hvsi.c | 22 +-
3676 drivers/tty/hvc/hvsi_lib.c | 4 +-
3677 drivers/tty/ipwireless/tty.c | 27 +-
3678 drivers/tty/moxa.c | 2 +-
3679 drivers/tty/n_gsm.c | 6 +-
3680 drivers/tty/n_tty.c | 28 +-
3681 drivers/tty/pty.c | 4 +-
3682 drivers/tty/rocket.c | 6 +-
3683 drivers/tty/serial/8250/8250_core.c | 10 +-
3684 drivers/tty/serial/8250/8250_pci.c | 2 +-
3685 drivers/tty/serial/ifx6x60.c | 2 +-
3686 drivers/tty/serial/ioc4_serial.c | 6 +-
3687 drivers/tty/serial/jsm/jsm_driver.c | 2 +-
3688 drivers/tty/serial/kgdb_nmi.c | 4 +-
3689 drivers/tty/serial/kgdboc.c | 34 +-
3690 drivers/tty/serial/msm_serial.c | 4 +-
3691 drivers/tty/serial/samsung.c | 9 +-
3692 drivers/tty/serial/serial_core.c | 8 +-
3693 drivers/tty/synclink.c | 34 +-
3694 drivers/tty/synclink_gt.c | 28 +-
3695 drivers/tty/synclinkmp.c | 34 +-
3696 drivers/tty/tty_io.c | 2 +-
3697 drivers/tty/tty_ldisc.c | 8 +-
3698 drivers/tty/tty_port.c | 22 +-
3699 drivers/uio/uio.c | 13 +-
3700 drivers/usb/atm/cxacru.c | 2 +-
3701 drivers/usb/atm/usbatm.c | 24 +-
3702 drivers/usb/class/cdc-acm.h | 2 +-
3703 drivers/usb/core/devices.c | 6 +-
3704 drivers/usb/core/devio.c | 12 +-
3705 drivers/usb/core/hcd.c | 4 +-
3706 drivers/usb/core/sysfs.c | 2 +-
3707 drivers/usb/core/usb.c | 2 +-
3708 drivers/usb/early/ehci-dbgp.c | 16 +-
3709 drivers/usb/gadget/function/f_phonet.c | 2 +-
3710 drivers/usb/gadget/function/u_serial.c | 22 +-
3711 drivers/usb/gadget/legacy/inode.c | 4 +-
3712 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
3713 drivers/usb/host/ehci-hcd.c | 2 +-
3714 drivers/usb/host/ehci-hub.c | 4 +-
3715 drivers/usb/host/ehci-q.c | 4 +-
3716 drivers/usb/host/fotg210-hcd.c | 2 +-
3717 drivers/usb/host/hwa-hc.c | 2 +-
3718 drivers/usb/host/ohci-hcd.c | 2 +-
3719 drivers/usb/host/r8a66597.h | 2 +-
3720 drivers/usb/host/uhci-hcd.c | 2 +-
3721 drivers/usb/host/xhci-pci.c | 2 +-
3722 drivers/usb/host/xhci.c | 2 +-
3723 drivers/usb/misc/appledisplay.c | 4 +-
3724 drivers/usb/misc/sisusbvga/sisusb_con.c | 98 +-
3725 drivers/usb/serial/console.c | 8 +-
3726 drivers/usb/storage/transport.c | 2 +-
3727 drivers/usb/storage/usb.c | 2 +-
3728 drivers/usb/storage/usb.h | 2 +-
3729 drivers/usb/usbip/vhci.h | 2 +-
3730 drivers/usb/usbip/vhci_hcd.c | 6 +-
3731 drivers/usb/usbip/vhci_rx.c | 2 +-
3732 drivers/usb/wusbcore/wa-hc.h | 4 +-
3733 drivers/usb/wusbcore/wa-xfer.c | 2 +-
3734 drivers/vfio/pci/vfio_pci.c | 2 +-
3735 drivers/vhost/vringh.c | 20 +-
3736 drivers/video/backlight/kb3886_bl.c | 2 +-
3737 drivers/video/console/dummycon.c | 96 +-
3738 drivers/video/console/fbcon.c | 2 +-
3739 drivers/video/console/vgacon.c | 23 +-
3740 drivers/video/fbdev/aty/aty128fb.c | 2 +-
3741 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
3742 drivers/video/fbdev/aty/mach64_ct.c | 5 +-
3743 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
3744 drivers/video/fbdev/aty/mach64_gx.c | 17 +-
3745 drivers/video/fbdev/core/fb_defio.c | 6 +-
3746 drivers/video/fbdev/core/fbmem.c | 12 +-
3747 drivers/video/fbdev/hyperv_fb.c | 4 +-
3748 drivers/video/fbdev/i810/i810_accel.c | 1 +
3749 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
3750 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
3751 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
3752 drivers/video/fbdev/omap2/omapfb/dss/display.c | 8 +-
3753 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
3754 drivers/video/fbdev/sis/sis_main.h | 2 +-
3755 drivers/video/fbdev/smscufx.c | 4 +-
3756 drivers/video/fbdev/udlfb.c | 36 +-
3757 drivers/video/fbdev/uvesafb.c | 52 +-
3758 drivers/video/fbdev/vesafb.c | 58 +-
3759 drivers/video/fbdev/via/via_clock.h | 2 +-
3760 drivers/xen/events/events_base.c | 6 +-
3761 drivers/xen/xen-pciback/pci_stub.c | 2 +-
3762 fs/9p/vfs_addr.c | 2 +-
3763 fs/9p/vfs_inode_dotl.c | 4 +-
3764 fs/Kconfig.binfmt | 2 +-
3765 fs/afs/file.c | 8 +-
3766 fs/afs/inode.c | 4 +-
3767 fs/afs/internal.h | 4 +-
3768 fs/aio.c | 2 +-
3769 fs/autofs4/waitq.c | 2 +-
3770 fs/befs/endian.h | 6 +-
3771 fs/binfmt_aout.c | 23 +-
3772 fs/binfmt_elf.c | 670 +-
3773 fs/binfmt_elf_fdpic.c | 4 +-
3774 fs/block_dev.c | 2 +-
3775 fs/btrfs/ctree.c | 11 +-
3776 fs/btrfs/ctree.h | 4 +-
3777 fs/btrfs/delayed-inode.c | 6 +-
3778 fs/btrfs/delayed-inode.h | 4 +-
3779 fs/btrfs/delayed-ref.c | 4 +-
3780 fs/btrfs/disk-io.c | 4 +-
3781 fs/btrfs/extent_map.c | 8 +-
3782 fs/btrfs/file.c | 4 +-
3783 fs/btrfs/free-space-cache.h | 1 +
3784 fs/btrfs/raid56.c | 30 +-
3785 fs/btrfs/super.c | 2 +-
3786 fs/btrfs/sysfs.c | 2 +-
3787 fs/btrfs/tests/btrfs-tests.c | 2 +-
3788 fs/btrfs/tests/free-space-tests.c | 2 +-
3789 fs/btrfs/transaction.c | 2 +-
3790 fs/btrfs/tree-log.c | 8 +-
3791 fs/btrfs/tree-log.h | 2 +-
3792 fs/btrfs/volumes.c | 14 +-
3793 fs/btrfs/volumes.h | 22 +-
3794 fs/buffer.c | 2 +-
3795 fs/cachefiles/bind.c | 6 +-
3796 fs/cachefiles/daemon.c | 8 +-
3797 fs/cachefiles/internal.h | 12 +-
3798 fs/cachefiles/namei.c | 2 +-
3799 fs/cachefiles/proc.c | 12 +-
3800 fs/ceph/dir.c | 12 +-
3801 fs/ceph/super.c | 4 +-
3802 fs/cifs/cifs_debug.c | 12 +-
3803 fs/cifs/cifsfs.c | 8 +-
3804 fs/cifs/cifsglob.h | 54 +-
3805 fs/cifs/file.c | 14 +-
3806 fs/cifs/misc.c | 4 +-
3807 fs/cifs/smb1ops.c | 80 +-
3808 fs/cifs/smb2ops.c | 84 +-
3809 fs/cifs/smb2pdu.c | 3 +-
3810 fs/coda/cache.c | 10 +-
3811 fs/coda/dir.c | 5 +-
3812 fs/compat.c | 9 +-
3813 fs/compat_binfmt_elf.c | 2 +
3814 fs/compat_ioctl.c | 12 +-
3815 fs/configfs/dir.c | 10 +-
3816 fs/coredump.c | 18 +-
3817 fs/dcache.c | 64 +-
3818 fs/ecryptfs/inode.c | 2 +-
3819 fs/ecryptfs/miscdev.c | 2 +-
3820 fs/exec.c | 365 +-
3821 fs/exofs/inode.c | 7 +-
3822 fs/ext2/xattr.c | 5 +-
3823 fs/ext4/ext4.h | 20 +-
3824 fs/ext4/mballoc.c | 44 +-
3825 fs/ext4/resize.c | 16 +-
3826 fs/ext4/super.c | 2 +-
3827 fs/ext4/sysfs.c | 2 +-
3828 fs/ext4/xattr.c | 5 +-
3829 fs/fhandle.c | 5 +-
3830 fs/file.c | 18 +-
3831 fs/freevxfs/vxfs_inode.c | 8 +-
3832 fs/freevxfs/vxfs_inode.h | 4 +-
3833 fs/fs-writeback.c | 11 +-
3834 fs/fs_struct.c | 8 +-
3835 fs/fscache/cookie.c | 40 +-
3836 fs/fscache/internal.h | 202 +-
3837 fs/fscache/object.c | 26 +-
3838 fs/fscache/operation.c | 38 +-
3839 fs/fscache/page.c | 110 +-
3840 fs/fscache/stats.c | 348 +-
3841 fs/fuse/cuse.c | 10 +-
3842 fs/fuse/dev.c | 4 +-
3843 fs/fuse/file.c | 4 +-
3844 fs/fuse/inode.c | 4 +-
3845 fs/gfs2/aops.c | 2 +-
3846 fs/gfs2/file.c | 2 +-
3847 fs/gfs2/glock.c | 22 +-
3848 fs/gfs2/glops.c | 4 +-
3849 fs/gfs2/quota.c | 6 +-
3850 fs/hugetlbfs/inode.c | 13 +-
3851 fs/inode.c | 4 +-
3852 fs/jbd2/commit.c | 2 +-
3853 fs/jbd2/transaction.c | 4 +-
3854 fs/jffs2/erase.c | 3 +-
3855 fs/jffs2/file.c | 3 +-
3856 fs/jffs2/fs.c | 2 +-
3857 fs/jffs2/os-linux.h | 2 +-
3858 fs/jffs2/wbuf.c | 3 +-
3859 fs/jfs/super.c | 2 +-
3860 fs/kernfs/dir.c | 2 +-
3861 fs/kernfs/file.c | 20 +-
3862 fs/libfs.c | 10 +-
3863 fs/lockd/clnt4xdr.c | 46 +-
3864 fs/lockd/clntproc.c | 4 +-
3865 fs/lockd/clntxdr.c | 44 +-
3866 fs/lockd/mon.c | 24 +-
3867 fs/lockd/svc.c | 2 +-
3868 fs/lockd/svc4proc.c | 69 +-
3869 fs/lockd/svcproc.c | 75 +-
3870 fs/lockd/xdr.c | 44 +-
3871 fs/lockd/xdr4.c | 41 +-
3872 fs/logfs/dev_bdev.c | 13 +-
3873 fs/logfs/dev_mtd.c | 13 +-
3874 fs/logfs/dir.c | 4 +-
3875 fs/logfs/logfs.h | 5 +-
3876 fs/logfs/readwrite.c | 2 +-
3877 fs/logfs/segment.c | 2 +-
3878 fs/logfs/super.c | 39 -
3879 fs/namei.c | 16 +-
3880 fs/namespace.c | 16 +-
3881 fs/nfs/callback.h | 18 +-
3882 fs/nfs/callback_proc.c | 26 +-
3883 fs/nfs/callback_xdr.c | 73 +-
3884 fs/nfs/dir.c | 5 +-
3885 fs/nfs/inode.c | 6 +-
3886 fs/nfs/internal.h | 5 +-
3887 fs/nfs/mount_clnt.c | 26 +-
3888 fs/nfs/nfs2xdr.c | 101 +-
3889 fs/nfs/nfs3xdr.c | 201 +-
3890 fs/nfs/nfs42xdr.c | 60 +-
3891 fs/nfs/nfs4xdr.c | 507 +-
3892 fs/nfs/read.c | 2 +-
3893 fs/nfs/symlink.c | 6 +-
3894 fs/nfsd/current_stateid.h | 24 +-
3895 fs/nfsd/nfs2acl.c | 85 +-
3896 fs/nfsd/nfs3acl.c | 44 +-
3897 fs/nfsd/nfs3proc.c | 271 +-
3898 fs/nfsd/nfs3xdr.c | 171 +-
3899 fs/nfsd/nfs4callback.c | 31 +-
3900 fs/nfsd/nfs4proc.c | 320 +-
3901 fs/nfsd/nfs4state.c | 111 +-
3902 fs/nfsd/nfs4xdr.c | 564 +-
3903 fs/nfsd/nfscache.c | 11 +-
3904 fs/nfsd/nfsproc.c | 193 +-
3905 fs/nfsd/nfsxdr.c | 96 +-
3906 fs/nfsd/vfs.c | 6 +-
3907 fs/nfsd/xdr.h | 50 +-
3908 fs/nfsd/xdr3.h | 100 +-
3909 fs/nfsd/xdr4.h | 50 +-
3910 fs/nls/nls_base.c | 26 +-
3911 fs/nls/nls_cp932.c | 2 +-
3912 fs/nls/nls_cp936.c | 2 +-
3913 fs/nls/nls_cp949.c | 2 +-
3914 fs/nls/nls_cp950.c | 2 +-
3915 fs/nls/nls_euc-jp.c | 8 +-
3916 fs/nls/nls_koi8-ru.c | 8 +-
3917 fs/notify/fanotify/fanotify_user.c | 4 +-
3918 fs/notify/notification.c | 4 +-
3919 fs/ntfs/dir.c | 4 +-
3920 fs/ntfs/inode.c | 19 +-
3921 fs/ntfs/inode.h | 4 +-
3922 fs/ntfs/mft.c | 4 +-
3923 fs/ntfs/super.c | 8 +-
3924 fs/ocfs2/dlm/dlmcommon.h | 4 +-
3925 fs/ocfs2/dlm/dlmdebug.c | 10 +-
3926 fs/ocfs2/dlm/dlmdomain.c | 4 +-
3927 fs/ocfs2/dlm/dlmmaster.c | 4 +-
3928 fs/ocfs2/dlmfs/dlmfs.c | 4 +-
3929 fs/ocfs2/localalloc.c | 2 +-
3930 fs/ocfs2/ocfs2.h | 10 +-
3931 fs/ocfs2/suballoc.c | 12 +-
3932 fs/ocfs2/super.c | 20 +-
3933 fs/overlayfs/copy_up.c | 2 +-
3934 fs/pipe.c | 72 +-
3935 fs/posix_acl.c | 4 +-
3936 fs/proc/array.c | 20 +
3937 fs/proc/base.c | 7 +-
3938 fs/proc/kcore.c | 36 +-
3939 fs/proc/meminfo.c | 2 +-
3940 fs/proc/nommu.c | 2 +-
3941 fs/proc/proc_sysctl.c | 26 +-
3942 fs/proc/task_mmu.c | 39 +-
3943 fs/proc/task_nommu.c | 6 +-
3944 fs/proc/vmcore.c | 16 +-
3945 fs/qnx6/qnx6.h | 4 +-
3946 fs/quota/netlink.c | 4 +-
3947 fs/read_write.c | 34 +-
3948 fs/readdir.c | 3 +-
3949 fs/reiserfs/do_balan.c | 2 +-
3950 fs/reiserfs/procfs.c | 2 +-
3951 fs/reiserfs/reiserfs.h | 4 +-
3952 fs/select.c | 2 +-
3953 fs/seq_file.c | 4 +-
3954 fs/splice.c | 43 +-
3955 fs/squashfs/xattr.c | 10 +-
3956 fs/super.c | 3 +-
3957 fs/sysv/sysv.h | 2 +-
3958 fs/tracefs/inode.c | 8 +-
3959 fs/ubifs/find.c | 34 +-
3960 fs/ubifs/lprops.c | 5 +-
3961 fs/udf/misc.c | 2 +-
3962 fs/ufs/swab.h | 4 +-
3963 fs/userfaultfd.c | 2 +-
3964 fs/xattr.c | 21 +
3965 fs/xfs/libxfs/xfs_bmap.c | 2 +-
3966 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
3967 fs/xfs/xfs_dir2_readdir.c | 7 +-
3968 fs/xfs/xfs_ioctl.c | 2 +-
3969 fs/xfs/xfs_linux.h | 4 +-
3970 include/acpi/ghes.h | 2 +-
3971 include/asm-generic/4level-fixup.h | 2 +
3972 include/asm-generic/atomic-long.h | 176 +-
3973 include/asm-generic/atomic64.h | 12 +
3974 include/asm-generic/bitops/__fls.h | 2 +-
3975 include/asm-generic/bitops/fls.h | 2 +-
3976 include/asm-generic/bitops/fls64.h | 4 +-
3977 include/asm-generic/bug.h | 6 +-
3978 include/asm-generic/cache.h | 4 +-
3979 include/asm-generic/emergency-restart.h | 2 +-
3980 include/asm-generic/kmap_types.h | 4 +-
3981 include/asm-generic/local.h | 13 +
3982 include/asm-generic/pgtable-nopmd.h | 18 +-
3983 include/asm-generic/pgtable-nopud.h | 15 +-
3984 include/asm-generic/pgtable.h | 16 +
3985 include/asm-generic/sections.h | 1 +
3986 include/asm-generic/uaccess.h | 16 +
3987 include/asm-generic/vmlinux.lds.h | 15 +-
3988 include/crypto/algapi.h | 2 +-
3989 include/crypto/cast6.h | 4 +-
3990 include/crypto/serpent.h | 4 +-
3991 include/crypto/xts.h | 2 +-
3992 include/drm/drmP.h | 19 +-
3993 include/drm/drm_mm.h | 2 +-
3994 include/drm/drm_modeset_helper_vtables.h | 2 +-
3995 include/drm/i915_pciids.h | 2 +-
3996 include/drm/intel-gtt.h | 4 +-
3997 include/drm/ttm/ttm_memory.h | 2 +-
3998 include/drm/ttm/ttm_page_alloc.h | 1 +
3999 include/keys/asymmetric-subtype.h | 2 +-
4000 include/keys/encrypted-type.h | 2 +-
4001 include/keys/rxrpc-type.h | 2 +-
4002 include/keys/user-type.h | 2 +-
4003 include/linux/atmdev.h | 4 +-
4004 include/linux/atomic.h | 12 +-
4005 include/linux/audit.h | 2 +-
4006 include/linux/average.h | 2 +-
4007 include/linux/binfmts.h | 3 +-
4008 include/linux/bitmap.h | 2 +-
4009 include/linux/bitops.h | 8 +-
4010 include/linux/blk-cgroup.h | 24 +-
4011 include/linux/blkdev.h | 2 +-
4012 include/linux/blktrace_api.h | 2 +-
4013 include/linux/cache.h | 8 +
4014 include/linux/cdrom.h | 1 -
4015 include/linux/cgroup-defs.h | 2 +-
4016 include/linux/cleancache.h | 2 +-
4017 include/linux/clk-provider.h | 1 +
4018 include/linux/compat.h | 15 +-
4019 include/linux/compiler-gcc.h | 30 +-
4020 include/linux/compiler.h | 193 +-
4021 include/linux/configfs.h | 2 +-
4022 include/linux/cpufreq.h | 7 +-
4023 include/linux/cpuidle.h | 5 +-
4024 include/linux/cpumask.h | 14 +-
4025 include/linux/crypto.h | 4 +-
4026 include/linux/ctype.h | 2 +-
4027 include/linux/dcache.h | 4 +-
4028 include/linux/decompress/mm.h | 2 +-
4029 include/linux/devfreq.h | 2 +-
4030 include/linux/device.h | 7 +-
4031 include/linux/dma-mapping.h | 2 +-
4032 include/linux/efi.h | 1 +
4033 include/linux/elf.h | 2 +
4034 include/linux/err.h | 4 +-
4035 include/linux/extcon.h | 2 +-
4036 include/linux/fb.h | 3 +-
4037 include/linux/fdtable.h | 2 +-
4038 include/linux/firewire.h | 2 +-
4039 include/linux/fs.h | 5 +-
4040 include/linux/fs_struct.h | 2 +-
4041 include/linux/fscache-cache.h | 2 +-
4042 include/linux/fscache.h | 2 +-
4043 include/linux/fsnotify.h | 2 +-
4044 include/linux/genhd.h | 4 +-
4045 include/linux/genl_magic_func.h | 2 +-
4046 include/linux/genl_magic_struct.h | 4 +-
4047 include/linux/gfp.h | 14 +-
4048 include/linux/highmem.h | 12 +
4049 include/linux/hugetlb.h | 2 +-
4050 include/linux/hugetlb_cgroup.h | 11 +
4051 include/linux/hwmon-sysfs.h | 6 +-
4052 include/linux/i2c.h | 1 +
4053 include/linux/if_pppox.h | 2 +-
4054 include/linux/init.h | 12 +-
4055 include/linux/init_task.h | 7 +
4056 include/linux/interrupt.h | 6 +-
4057 include/linux/iommu.h | 2 +-
4058 include/linux/ioport.h | 2 +-
4059 include/linux/ipc.h | 2 +-
4060 include/linux/irq.h | 5 +-
4061 include/linux/irqdesc.h | 2 +-
4062 include/linux/irqdomain.h | 3 +
4063 include/linux/jbd2.h | 2 +-
4064 include/linux/jiffies.h | 16 +-
4065 include/linux/kallsyms.h | 18 +-
4066 include/linux/key-type.h | 2 +-
4067 include/linux/kgdb.h | 6 +-
4068 include/linux/kmemleak.h | 4 +-
4069 include/linux/kobject.h | 3 +-
4070 include/linux/kobject_ns.h | 2 +-
4071 include/linux/kref.h | 2 +-
4072 include/linux/libata.h | 2 +-
4073 include/linux/linkage.h | 12 +
4074 include/linux/list.h | 15 +
4075 include/linux/lockd/xdr.h | 34 +-
4076 include/linux/lockd/xdr4.h | 34 +-
4077 include/linux/lockref.h | 26 +-
4078 include/linux/math64.h | 10 +-
4079 include/linux/memcontrol.h | 2 +-
4080 include/linux/mempolicy.h | 7 +
4081 include/linux/mm.h | 97 +-
4082 include/linux/mm_types.h | 20 +
4083 include/linux/mmiotrace.h | 4 +-
4084 include/linux/mmzone.h | 2 +-
4085 include/linux/mod_devicetable.h | 4 +-
4086 include/linux/module.h | 58 +-
4087 include/linux/moduleloader.h | 16 +
4088 include/linux/moduleparam.h | 12 +-
4089 include/linux/net.h | 2 +-
4090 include/linux/netdevice.h | 7 +-
4091 include/linux/netfilter.h | 2 +-
4092 include/linux/netfilter/ipset/ip_set_comment.h | 3 +-
4093 include/linux/netfilter/nfnetlink.h | 2 +-
4094 include/linux/netlink.h | 12 +-
4095 include/linux/nls.h | 4 +-
4096 include/linux/notifier.h | 3 +-
4097 include/linux/oprofile.h | 4 +-
4098 include/linux/padata.h | 2 +-
4099 include/linux/pagemap.h | 4 +-
4100 include/linux/pci_hotplug.h | 3 +-
4101 include/linux/percpu.h | 2 +-
4102 include/linux/perf_event.h | 12 +-
4103 include/linux/pid.h | 4 +-
4104 include/linux/pipe_fs_i.h | 8 +-
4105 include/linux/pm.h | 1 +
4106 include/linux/pm_domain.h | 2 +-
4107 include/linux/pm_runtime.h | 2 +-
4108 include/linux/pnp.h | 2 +-
4109 include/linux/poison.h | 4 +-
4110 include/linux/power/smartreflex.h | 2 +-
4111 include/linux/ppp-comp.h | 2 +-
4112 include/linux/preempt.h | 21 +
4113 include/linux/printk.h | 2 +-
4114 include/linux/proc_ns.h | 2 +-
4115 include/linux/psci.h | 2 +-
4116 include/linux/quota.h | 2 +-
4117 include/linux/random.h | 19 +-
4118 include/linux/rculist.h | 16 +
4119 include/linux/rcupdate.h | 8 +
4120 include/linux/reboot.h | 14 +-
4121 include/linux/regset.h | 3 +-
4122 include/linux/relay.h | 2 +-
4123 include/linux/rio.h | 2 +-
4124 include/linux/rmap.h | 4 +-
4125 include/linux/sched.h | 76 +-
4126 include/linux/sched/sysctl.h | 1 +
4127 include/linux/scif.h | 2 +-
4128 include/linux/semaphore.h | 2 +-
4129 include/linux/seq_file.h | 1 +
4130 include/linux/seqlock.h | 10 +
4131 include/linux/signal.h | 2 +-
4132 include/linux/skbuff.h | 12 +-
4133 include/linux/slab.h | 47 +-
4134 include/linux/slab_def.h | 14 +-
4135 include/linux/slub_def.h | 2 +-
4136 include/linux/smp.h | 2 +
4137 include/linux/sock_diag.h | 2 +-
4138 include/linux/sonet.h | 2 +-
4139 include/linux/spinlock.h | 17 +-
4140 include/linux/srcu.h | 5 +-
4141 include/linux/sunrpc/addr.h | 8 +-
4142 include/linux/sunrpc/clnt.h | 2 +-
4143 include/linux/sunrpc/svc.h | 2 +-
4144 include/linux/sunrpc/svc_rdma.h | 18 +-
4145 include/linux/sunrpc/svcauth.h | 2 +-
4146 include/linux/swapops.h | 10 +-
4147 include/linux/swiotlb.h | 3 +-
4148 include/linux/syscalls.h | 34 +-
4149 include/linux/syscore_ops.h | 2 +-
4150 include/linux/sysctl.h | 3 +-
4151 include/linux/sysfs.h | 9 +-
4152 include/linux/sysrq.h | 3 +-
4153 include/linux/tcp.h | 14 +-
4154 include/linux/thread_info.h | 7 +
4155 include/linux/tty.h | 4 +-
4156 include/linux/tty_driver.h | 2 +-
4157 include/linux/tty_ldisc.h | 2 +-
4158 include/linux/types.h | 16 +
4159 include/linux/uaccess.h | 2 +-
4160 include/linux/uio_driver.h | 2 +-
4161 include/linux/unaligned/access_ok.h | 24 +-
4162 include/linux/usb.h | 12 +-
4163 include/linux/usb/hcd.h | 1 +
4164 include/linux/usb/renesas_usbhs.h | 2 +-
4165 include/linux/vermagic.h | 21 +-
4166 include/linux/vga_switcheroo.h | 8 +-
4167 include/linux/vmalloc.h | 7 +-
4168 include/linux/vmstat.h | 24 +-
4169 include/linux/writeback.h | 3 +-
4170 include/linux/xattr.h | 5 +-
4171 include/linux/zlib.h | 3 +-
4172 include/media/v4l2-dev.h | 2 +-
4173 include/media/v4l2-device.h | 2 +-
4174 include/net/9p/transport.h | 2 +-
4175 include/net/bluetooth/l2cap.h | 2 +-
4176 include/net/bonding.h | 2 +-
4177 include/net/caif/cfctrl.h | 6 +-
4178 include/net/cfg80211-wext.h | 20 +-
4179 include/net/cfg802154.h | 2 +-
4180 include/net/fib_rules.h | 3 +-
4181 include/net/flow.h | 2 +-
4182 include/net/genetlink.h | 2 +-
4183 include/net/gro_cells.h | 2 +-
4184 include/net/inet_connection_sock.h | 2 +-
4185 include/net/inet_sock.h | 2 +-
4186 include/net/inetpeer.h | 2 +-
4187 include/net/ip_fib.h | 2 +-
4188 include/net/ip_vs.h | 8 +-
4189 include/net/ipv6.h | 2 +-
4190 include/net/irda/ircomm_tty.h | 1 +
4191 include/net/irda/irias_object.h | 2 +-
4192 include/net/irda/irlmp.h | 1 +
4193 include/net/irda/irlmp_event.h | 6 +-
4194 include/net/irda/timer.h | 6 +-
4195 include/net/iucv/af_iucv.h | 2 +-
4196 include/net/llc_c_ac.h | 2 +-
4197 include/net/llc_c_ev.h | 4 +-
4198 include/net/llc_c_st.h | 2 +-
4199 include/net/llc_s_ac.h | 2 +-
4200 include/net/llc_s_st.h | 2 +-
4201 include/net/mac80211.h | 6 +-
4202 include/net/neighbour.h | 4 +-
4203 include/net/net_namespace.h | 18 +-
4204 include/net/netfilter/nf_conntrack.h | 2 +-
4205 include/net/netlink.h | 2 +-
4206 include/net/netns/conntrack.h | 6 +-
4207 include/net/netns/ipv4.h | 4 +-
4208 include/net/netns/ipv6.h | 4 +-
4209 include/net/netns/xfrm.h | 2 +-
4210 include/net/ping.h | 2 +-
4211 include/net/protocol.h | 4 +-
4212 include/net/rtnetlink.h | 2 +-
4213 include/net/sctp/checksum.h | 4 +-
4214 include/net/sctp/sm.h | 4 +-
4215 include/net/sctp/structs.h | 2 +-
4216 include/net/snmp.h | 10 +-
4217 include/net/sock.h | 12 +-
4218 include/net/tcp.h | 8 +-
4219 include/net/xfrm.h | 15 +-
4220 include/rdma/ib_cm.h | 8 +-
4221 include/rdma/iw_cm.h | 2 +-
4222 include/scsi/libfc.h | 3 +-
4223 include/scsi/scsi_device.h | 6 +-
4224 include/scsi/scsi_driver.h | 2 +-
4225 include/scsi/scsi_transport_fc.h | 3 +-
4226 include/scsi/sg.h | 2 +-
4227 include/sound/compress_driver.h | 2 +-
4228 include/sound/control.h | 4 +-
4229 include/sound/pcm.h | 2 +-
4230 include/sound/rawmidi.h | 3 +-
4231 include/sound/seq_kernel.h | 2 +-
4232 include/sound/soc.h | 4 +-
4233 include/trace/events/irq.h | 4 +-
4234 include/uapi/linux/a.out.h | 8 +
4235 include/uapi/linux/bcache.h | 5 +-
4236 include/uapi/linux/byteorder/little_endian.h | 28 +-
4237 include/uapi/linux/connector.h | 2 +-
4238 include/uapi/linux/elf.h | 28 +
4239 include/uapi/linux/screen_info.h | 2 +-
4240 include/uapi/linux/swab.h | 6 +-
4241 include/uapi/linux/xattr.h | 4 +
4242 include/video/udlfb.h | 8 +-
4243 include/video/uvesafb.h | 1 +
4244 init/Kconfig | 2 +-
4245 init/Makefile | 3 +
4246 init/do_mounts.c | 16 +-
4247 init/do_mounts.h | 8 +-
4248 init/do_mounts_initrd.c | 30 +-
4249 init/do_mounts_md.c | 6 +-
4250 init/init_task.c | 4 +
4251 init/initramfs.c | 38 +-
4252 init/main.c | 30 +-
4253 ipc/compat.c | 4 +-
4254 ipc/ipc_sysctl.c | 14 +-
4255 ipc/mq_sysctl.c | 4 +-
4256 ipc/sem.c | 4 +-
4257 ipc/shm.c | 8 +-
4258 kernel/audit.c | 8 +-
4259 kernel/auditsc.c | 4 +-
4260 kernel/bpf/core.c | 28 +-
4261 kernel/capability.c | 3 +
4262 kernel/cgroup.c | 29 +-
4263 kernel/compat.c | 38 +-
4264 kernel/debug/debug_core.c | 16 +-
4265 kernel/debug/kdb/kdb_main.c | 4 +-
4266 kernel/events/core.c | 38 +-
4267 kernel/events/internal.h | 10 +-
4268 kernel/events/uprobes.c | 2 +-
4269 kernel/exit.c | 27 +-
4270 kernel/fork.c | 175 +-
4271 kernel/futex.c | 11 +-
4272 kernel/futex_compat.c | 2 +-
4273 kernel/irq/manage.c | 2 +-
4274 kernel/irq/msi.c | 19 +-
4275 kernel/irq/spurious.c | 2 +-
4276 kernel/jump_label.c | 5 +
4277 kernel/kallsyms.c | 40 +-
4278 kernel/kexec.c | 3 +-
4279 kernel/kmod.c | 8 +-
4280 kernel/kprobes.c | 4 +-
4281 kernel/ksysfs.c | 2 +-
4282 kernel/locking/lockdep.c | 7 +-
4283 kernel/locking/mutex-debug.c | 12 +-
4284 kernel/locking/mutex-debug.h | 4 +-
4285 kernel/locking/mutex.c | 6 +-
4286 kernel/module.c | 403 +-
4287 kernel/notifier.c | 17 +-
4288 kernel/padata.c | 4 +-
4289 kernel/panic.c | 11 +-
4290 kernel/pid.c | 6 +-
4291 kernel/pid_namespace.c | 2 +-
4292 kernel/power/process.c | 12 +-
4293 kernel/profile.c | 14 +-
4294 kernel/ptrace.c | 8 +-
4295 kernel/rcu/rcutorture.c | 60 +-
4296 kernel/rcu/tiny.c | 4 +-
4297 kernel/rcu/tree.c | 42 +-
4298 kernel/rcu/tree.h | 16 +-
4299 kernel/rcu/tree_plugin.h | 18 +-
4300 kernel/rcu/tree_trace.c | 14 +-
4301 kernel/resource.c | 4 +-
4302 kernel/sched/auto_group.c | 4 +-
4303 kernel/sched/core.c | 49 +-
4304 kernel/sched/fair.c | 2 +-
4305 kernel/sched/rt.c | 4 +-
4306 kernel/sched/sched.h | 13 +-
4307 kernel/signal.c | 28 +-
4308 kernel/smp.c | 2 +-
4309 kernel/smpboot.c | 4 +-
4310 kernel/softirq.c | 12 +-
4311 kernel/stop_machine.c | 2 +-
4312 kernel/sys.c | 10 +-
4313 kernel/sys_ni.c | 4 +-
4314 kernel/sysctl.c | 34 +-
4315 kernel/time/alarmtimer.c | 4 +-
4316 kernel/time/posix-clock.c | 8 +-
4317 kernel/time/posix-cpu-timers.c | 4 +-
4318 kernel/time/posix-timers.c | 36 +-
4319 kernel/time/timer.c | 2 +-
4320 kernel/time/timer_stats.c | 10 +-
4321 kernel/trace/blktrace.c | 6 +-
4322 kernel/trace/ftrace.c | 33 +-
4323 kernel/trace/ring_buffer.c | 96 +-
4324 kernel/trace/trace.c | 2 +-
4325 kernel/trace/trace.h | 2 +-
4326 kernel/trace/trace_clock.c | 4 +-
4327 kernel/trace/trace_events.c | 1 -
4328 kernel/trace/trace_functions_graph.c | 4 +-
4329 kernel/trace/trace_mmiotrace.c | 8 +-
4330 kernel/trace/trace_output.c | 10 +-
4331 kernel/trace/trace_seq.c | 2 +-
4332 kernel/trace/trace_stack.c | 2 +-
4333 kernel/user.c | 2 +-
4334 kernel/user_namespace.c | 2 +-
4335 kernel/utsname_sysctl.c | 2 +-
4336 kernel/watchdog.c | 2 +-
4337 kernel/workqueue.c | 8 +-
4338 lib/Kconfig.debug | 8 +-
4339 lib/Makefile | 2 +-
4340 lib/bitmap.c | 8 +-
4341 lib/bug.c | 2 +
4342 lib/debugobjects.c | 2 +-
4343 lib/decompress_bunzip2.c | 3 +-
4344 lib/decompress_unlzma.c | 4 +-
4345 lib/div64.c | 4 +-
4346 lib/dma-debug.c | 4 +-
4347 lib/inflate.c | 2 +-
4348 lib/ioremap.c | 4 +-
4349 lib/irq_poll.c | 2 +-
4350 lib/kobject.c | 4 +-
4351 lib/list_debug.c | 126 +-
4352 lib/lockref.c | 44 +-
4353 lib/percpu-refcount.c | 2 +-
4354 lib/radix-tree.c | 2 +-
4355 lib/random32.c | 2 +-
4356 lib/rhashtable.c | 4 +-
4357 lib/show_mem.c | 2 +-
4358 lib/strncpy_from_user.c | 2 +-
4359 lib/strnlen_user.c | 2 +-
4360 lib/swiotlb.c | 2 +-
4361 lib/usercopy.c | 6 +
4362 lib/vsprintf.c | 12 +-
4363 mm/Kconfig | 6 +-
4364 mm/backing-dev.c | 4 +-
4365 mm/debug.c | 3 +
4366 mm/filemap.c | 10 +-
4367 mm/gup.c | 13 +-
4368 mm/highmem.c | 6 +-
4369 mm/hugetlb.c | 125 +-
4370 mm/hugetlb_cgroup.c | 60 +-
4371 mm/internal.h | 3 +-
4372 mm/maccess.c | 12 +-
4373 mm/madvise.c | 37 +
4374 mm/memcontrol.c | 6 +-
4375 mm/memory-failure.c | 6 +-
4376 mm/memory.c | 424 +-
4377 mm/mempolicy.c | 25 +
4378 mm/mlock.c | 18 +-
4379 mm/mm_init.c | 2 +-
4380 mm/mmap.c | 573 +-
4381 mm/mprotect.c | 137 +-
4382 mm/mremap.c | 39 +-
4383 mm/nommu.c | 21 +-
4384 mm/page-writeback.c | 2 +-
4385 mm/page_alloc.c | 53 +-
4386 mm/percpu.c | 2 +-
4387 mm/process_vm_access.c | 14 +-
4388 mm/readahead.c | 2 +-
4389 mm/rmap.c | 43 +-
4390 mm/shmem.c | 37 +-
4391 mm/slab.c | 111 +-
4392 mm/slab.h | 22 +-
4393 mm/slab_common.c | 86 +-
4394 mm/slob.c | 218 +-
4395 mm/slub.c | 111 +-
4396 mm/sparse-vmemmap.c | 4 +-
4397 mm/sparse.c | 2 +-
4398 mm/swap.c | 2 +
4399 mm/swapfile.c | 12 +-
4400 mm/util.c | 6 +
4401 mm/vmalloc.c | 116 +-
4402 mm/vmstat.c | 12 +-
4403 net/8021q/vlan.c | 5 +-
4404 net/8021q/vlan_netlink.c | 2 +-
4405 net/9p/mod.c | 4 +-
4406 net/9p/trans_fd.c | 2 +-
4407 net/atm/atm_misc.c | 8 +-
4408 net/atm/lec.h | 2 +-
4409 net/atm/proc.c | 6 +-
4410 net/atm/resources.c | 4 +-
4411 net/ax25/sysctl_net_ax25.c | 2 +-
4412 net/batman-adv/bat_iv_ogm.c | 8 +-
4413 net/batman-adv/fragmentation.c | 2 +-
4414 net/batman-adv/routing.c | 4 +-
4415 net/batman-adv/soft-interface.c | 12 +-
4416 net/batman-adv/sysfs.c | 40 +-
4417 net/batman-adv/sysfs.h | 4 +-
4418 net/batman-adv/translation-table.c | 14 +-
4419 net/batman-adv/types.h | 8 +-
4420 net/bluetooth/hci_sock.c | 2 +-
4421 net/bluetooth/l2cap_core.c | 6 +-
4422 net/bluetooth/l2cap_sock.c | 12 +-
4423 net/bluetooth/rfcomm/sock.c | 4 +-
4424 net/bluetooth/rfcomm/tty.c | 4 +-
4425 net/bridge/br_netlink.c | 2 +-
4426 net/bridge/netfilter/ebtables.c | 6 +-
4427 net/caif/cfctrl.c | 11 +-
4428 net/caif/chnl_net.c | 4 +-
4429 net/can/af_can.c | 2 +-
4430 net/can/gw.c | 6 +-
4431 net/ceph/ceph_common.c | 2 +-
4432 net/ceph/messenger.c | 4 +-
4433 net/compat.c | 26 +-
4434 net/core/datagram.c | 2 +-
4435 net/core/dev.c | 16 +-
4436 net/core/filter.c | 2 +-
4437 net/core/flow.c | 6 +-
4438 net/core/neighbour.c | 18 +-
4439 net/core/net-sysfs.c | 2 +-
4440 net/core/net_namespace.c | 8 +-
4441 net/core/netpoll.c | 4 +-
4442 net/core/rtnetlink.c | 17 +-
4443 net/core/scm.c | 12 +-
4444 net/core/skbuff.c | 11 +-
4445 net/core/sock.c | 28 +-
4446 net/core/sock_diag.c | 15 +-
4447 net/core/sysctl_net_core.c | 22 +-
4448 net/decnet/af_decnet.c | 1 +
4449 net/decnet/sysctl_net_decnet.c | 4 +-
4450 net/dsa/dsa.c | 2 +-
4451 net/hsr/hsr_device.c | 2 +-
4452 net/hsr/hsr_netlink.c | 2 +-
4453 net/ieee802154/6lowpan/core.c | 2 +-
4454 net/ieee802154/6lowpan/reassembly.c | 14 +-
4455 net/ipv4/af_inet.c | 2 +-
4456 net/ipv4/arp.c | 2 +-
4457 net/ipv4/devinet.c | 18 +-
4458 net/ipv4/fib_frontend.c | 6 +-
4459 net/ipv4/fib_semantics.c | 2 +-
4460 net/ipv4/inet_connection_sock.c | 4 +-
4461 net/ipv4/inet_diag.c | 4 +-
4462 net/ipv4/inet_timewait_sock.c | 2 +-
4463 net/ipv4/inetpeer.c | 2 +-
4464 net/ipv4/ip_fragment.c | 15 +-
4465 net/ipv4/ip_gre.c | 6 +-
4466 net/ipv4/ip_sockglue.c | 2 +-
4467 net/ipv4/ip_vti.c | 4 +-
4468 net/ipv4/ipconfig.c | 6 +-
4469 net/ipv4/ipip.c | 4 +-
4470 net/ipv4/netfilter/arp_tables.c | 12 +-
4471 net/ipv4/netfilter/ip_tables.c | 12 +-
4472 net/ipv4/ping.c | 14 +-
4473 net/ipv4/proc.c | 8 +-
4474 net/ipv4/raw.c | 14 +-
4475 net/ipv4/route.c | 32 +-
4476 net/ipv4/sysctl_net_ipv4.c | 22 +-
4477 net/ipv4/tcp_input.c | 6 +-
4478 net/ipv4/tcp_probe.c | 2 +-
4479 net/ipv4/udp.c | 10 +-
4480 net/ipv4/xfrm4_mode_transport.c | 2 +-
4481 net/ipv4/xfrm4_policy.c | 17 +-
4482 net/ipv4/xfrm4_state.c | 4 +-
4483 net/ipv6/addrconf.c | 24 +-
4484 net/ipv6/af_inet6.c | 2 +-
4485 net/ipv6/datagram.c | 2 +-
4486 net/ipv6/icmp.c | 2 +-
4487 net/ipv6/inet6_hashtables.c | 2 +-
4488 net/ipv6/ip6_fib.c | 4 +-
4489 net/ipv6/ip6_gre.c | 10 +-
4490 net/ipv6/ip6_tunnel.c | 4 +-
4491 net/ipv6/ip6_vti.c | 4 +-
4492 net/ipv6/ipv6_sockglue.c | 2 +-
4493 net/ipv6/ndisc.c | 2 +-
4494 net/ipv6/netfilter/ip6_tables.c | 12 +-
4495 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
4496 net/ipv6/ping.c | 33 +-
4497 net/ipv6/proc.c | 10 +-
4498 net/ipv6/raw.c | 17 +-
4499 net/ipv6/reassembly.c | 13 +-
4500 net/ipv6/route.c | 2 +-
4501 net/ipv6/sit.c | 4 +-
4502 net/ipv6/sysctl_net_ipv6.c | 2 +-
4503 net/ipv6/udp.c | 6 +-
4504 net/ipv6/xfrm6_mode_transport.c | 2 +-
4505 net/ipv6/xfrm6_policy.c | 17 +-
4506 net/irda/discovery.c | 2 +-
4507 net/irda/ircomm/ircomm_core.c | 13 +-
4508 net/irda/ircomm/ircomm_tty.c | 24 +-
4509 net/irda/ircomm/ircomm_tty_attach.c | 4 +-
4510 net/irda/irda_device.c | 14 +-
4511 net/irda/iriap.c | 14 +-
4512 net/irda/irias_object.c | 10 +-
4513 net/irda/irlan/irlan_client.c | 2 +-
4514 net/irda/irlap.c | 15 +-
4515 net/irda/irlap_event.c | 2 +-
4516 net/irda/irlmp.c | 21 +-
4517 net/irda/irlmp_event.c | 6 +-
4518 net/irda/irnet/irnet.h | 2 +-
4519 net/irda/irnet/irnet_irda.c | 6 +-
4520 net/irda/irttp.c | 8 +-
4521 net/irda/timer.c | 24 +-
4522 net/iucv/af_iucv.c | 4 +-
4523 net/iucv/iucv.c | 2 +-
4524 net/key/af_key.c | 4 +-
4525 net/l2tp/l2tp_eth.c | 40 +-
4526 net/l2tp/l2tp_ip.c | 2 +-
4527 net/l2tp/l2tp_ip6.c | 2 +-
4528 net/mac80211/cfg.c | 10 +-
4529 net/mac80211/debugfs.c | 2 +-
4530 net/mac80211/debugfs_key.c | 4 +-
4531 net/mac80211/ieee80211_i.h | 3 +-
4532 net/mac80211/iface.c | 20 +-
4533 net/mac80211/key.c | 4 +-
4534 net/mac80211/main.c | 2 +-
4535 net/mac80211/pm.c | 4 +-
4536 net/mac80211/rate.c | 2 +-
4537 net/mac80211/sta_info.c | 2 +-
4538 net/mac80211/tx.c | 2 +-
4539 net/mac80211/util.c | 8 +-
4540 net/mac80211/wpa.c | 10 +-
4541 net/mac802154/iface.c | 6 +-
4542 net/mpls/af_mpls.c | 10 +-
4543 net/netfilter/ipset/ip_set_core.c | 7 +-
4544 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
4545 net/netfilter/ipvs/ip_vs_core.c | 4 +-
4546 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
4547 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
4548 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
4549 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
4550 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
4551 net/netfilter/nf_conntrack_acct.c | 2 +-
4552 net/netfilter/nf_conntrack_core.c | 2 +-
4553 net/netfilter/nf_conntrack_ecache.c | 2 +-
4554 net/netfilter/nf_conntrack_helper.c | 2 +-
4555 net/netfilter/nf_conntrack_netlink.c | 22 +-
4556 net/netfilter/nf_conntrack_proto.c | 2 +-
4557 net/netfilter/nf_conntrack_standalone.c | 2 +-
4558 net/netfilter/nf_conntrack_timestamp.c | 2 +-
4559 net/netfilter/nf_log.c | 10 +-
4560 net/netfilter/nf_nat_ftp.c | 2 +-
4561 net/netfilter/nf_nat_irc.c | 2 +-
4562 net/netfilter/nf_sockopt.c | 4 +-
4563 net/netfilter/nf_tables_api.c | 13 +-
4564 net/netfilter/nfnetlink_acct.c | 7 +-
4565 net/netfilter/nfnetlink_cthelper.c | 2 +-
4566 net/netfilter/nfnetlink_cttimeout.c | 2 +-
4567 net/netfilter/nfnetlink_log.c | 4 +-
4568 net/netfilter/nft_compat.c | 9 +-
4569 net/netfilter/xt_IDLETIMER.c | 12 +-
4570 net/netfilter/xt_statistic.c | 8 +-
4571 net/netlink/af_netlink.c | 14 +-
4572 net/netlink/diag.c | 2 +-
4573 net/netlink/genetlink.c | 14 +-
4574 net/openvswitch/vport-geneve.c | 7 +-
4575 net/openvswitch/vport-gre.c | 7 +-
4576 net/openvswitch/vport-internal_dev.c | 4 +-
4577 net/openvswitch/vport-netdev.c | 7 +-
4578 net/openvswitch/vport-vxlan.c | 7 +-
4579 net/packet/af_packet.c | 26 +-
4580 net/packet/diag.c | 2 +-
4581 net/packet/internal.h | 6 +-
4582 net/phonet/pep.c | 6 +-
4583 net/phonet/socket.c | 2 +-
4584 net/phonet/sysctl.c | 2 +-
4585 net/rds/cong.c | 6 +-
4586 net/rds/ib.h | 2 +-
4587 net/rds/ib_cm.c | 2 +-
4588 net/rds/ib_recv.c | 4 +-
4589 net/rds/iw.h | 2 +-
4590 net/rds/iw_cm.c | 2 +-
4591 net/rds/iw_recv.c | 4 +-
4592 net/rds/rds.h | 2 +-
4593 net/rds/tcp.c | 2 +-
4594 net/rds/tcp.h | 6 +-
4595 net/rds/tcp_send.c | 2 +-
4596 net/rxrpc/af_rxrpc.c | 2 +-
4597 net/rxrpc/ar-ack.c | 14 +-
4598 net/rxrpc/ar-call.c | 2 +-
4599 net/rxrpc/ar-connection.c | 2 +-
4600 net/rxrpc/ar-connevent.c | 2 +-
4601 net/rxrpc/ar-input.c | 4 +-
4602 net/rxrpc/ar-internal.h | 8 +-
4603 net/rxrpc/ar-local.c | 2 +-
4604 net/rxrpc/ar-output.c | 4 +-
4605 net/rxrpc/ar-peer.c | 2 +-
4606 net/rxrpc/ar-proc.c | 4 +-
4607 net/rxrpc/ar-transport.c | 2 +-
4608 net/rxrpc/rxkad.c | 4 +-
4609 net/sched/sch_generic.c | 4 +-
4610 net/sched/sch_tbf.c | 9 +-
4611 net/sctp/ipv6.c | 6 +-
4612 net/sctp/protocol.c | 10 +-
4613 net/sctp/sm_sideeffect.c | 4 +-
4614 net/sctp/socket.c | 21 +-
4615 net/sctp/sysctl.c | 10 +-
4616 net/socket.c | 18 +-
4617 net/sunrpc/auth_gss/gss_rpc_upcall.c | 4 +-
4618 net/sunrpc/auth_gss/gss_rpc_xdr.c | 11 +-
4619 net/sunrpc/auth_gss/gss_rpc_xdr.h | 8 +-
4620 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
4621 net/sunrpc/clnt.c | 4 +-
4622 net/sunrpc/rpcb_clnt.c | 66 +-
4623 net/sunrpc/sched.c | 4 +-
4624 net/sunrpc/svc.c | 8 +-
4625 net/sunrpc/svcauth_unix.c | 2 +-
4626 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
4627 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
4628 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
4629 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
4630 net/tipc/netlink_compat.c | 12 +-
4631 net/tipc/subscr.c | 2 +-
4632 net/unix/diag.c | 2 +-
4633 net/unix/sysctl_net_unix.c | 2 +-
4634 net/wireless/scan.c | 3 +-
4635 net/wireless/wext-compat.c | 140 +-
4636 net/wireless/wext-compat.h | 8 +-
4637 net/wireless/wext-core.c | 19 +-
4638 net/wireless/wext-sme.c | 5 +-
4639 net/xfrm/xfrm_policy.c | 16 +-
4640 net/xfrm/xfrm_state.c | 37 +-
4641 net/xfrm/xfrm_sysctl.c | 2 +-
4642 net/xfrm/xfrm_user.c | 2 +-
4643 scripts/Kbuild.include | 2 +-
4644 scripts/Makefile.build | 2 +-
4645 scripts/Makefile.clean | 3 +-
4646 scripts/Makefile.extrawarn | 4 +
4647 scripts/Makefile.gcc-plugins | 69 +
4648 scripts/Makefile.host | 68 +-
4649 scripts/basic/fixdep.c | 12 +-
4650 scripts/dtc/checks.c | 14 +-
4651 scripts/dtc/data.c | 6 +-
4652 scripts/dtc/flattree.c | 8 +-
4653 scripts/dtc/livetree.c | 4 +-
4654 scripts/gcc-plugin.sh | 51 +
4655 scripts/headers_install.sh | 1 +
4656 scripts/kallsyms.c | 4 +-
4657 scripts/kconfig/lkc.h | 5 +-
4658 scripts/kconfig/menu.c | 2 +-
4659 scripts/kconfig/symbol.c | 6 +-
4660 scripts/link-vmlinux.sh | 2 +-
4661 scripts/mod/file2alias.c | 14 +-
4662 scripts/mod/modpost.c | 40 +-
4663 scripts/mod/modpost.h | 6 +-
4664 scripts/mod/sumversion.c | 2 +-
4665 scripts/module-common.lds | 4 +
4666 scripts/package/builddeb | 1 +
4667 scripts/pnmtologo.c | 6 +-
4668 scripts/sortextable.h | 6 +-
4669 scripts/tags.sh | 2 +-
4670 security/Kconfig | 703 +-
4671 security/apparmor/include/policy.h | 2 +-
4672 security/apparmor/lsm.c | 16 +-
4673 security/apparmor/policy.c | 4 +-
4674 security/integrity/ima/ima.h | 4 +-
4675 security/integrity/ima/ima_api.c | 2 +-
4676 security/integrity/ima/ima_fs.c | 4 +-
4677 security/integrity/ima/ima_queue.c | 2 +-
4678 security/keys/internal.h | 8 +-
4679 security/keys/key.c | 18 +-
4680 security/keys/keyring.c | 4 -
4681 security/selinux/avc.c | 6 +-
4682 security/selinux/include/xfrm.h | 2 +-
4683 security/yama/yama_lsm.c | 2 +-
4684 sound/aoa/codecs/onyx.c | 7 +-
4685 sound/aoa/codecs/onyx.h | 1 +
4686 sound/core/oss/pcm_oss.c | 18 +-
4687 sound/core/pcm_compat.c | 2 +-
4688 sound/core/pcm_lib.c | 3 +-
4689 sound/core/pcm_native.c | 4 +-
4690 sound/core/rawmidi.c | 5 +-
4691 sound/core/seq/oss/seq_oss_synth.c | 4 +-
4692 sound/core/seq/seq_clientmgr.c | 10 +-
4693 sound/core/seq/seq_compat.c | 2 +-
4694 sound/core/seq/seq_fifo.c | 6 +-
4695 sound/core/seq/seq_fifo.h | 2 +-
4696 sound/core/seq/seq_memory.c | 18 +-
4697 sound/core/seq/seq_midi.c | 5 +-
4698 sound/core/seq/seq_virmidi.c | 2 +-
4699 sound/core/sound.c | 2 +-
4700 sound/drivers/mts64.c | 14 +-
4701 sound/drivers/opl4/opl4_lib.c | 2 +-
4702 sound/drivers/portman2x4.c | 3 +-
4703 sound/firewire/amdtp-am824.c | 2 +-
4704 sound/firewire/amdtp-stream.c | 4 +-
4705 sound/firewire/amdtp-stream.h | 2 +-
4706 sound/firewire/digi00x/amdtp-dot.c | 2 +-
4707 sound/firewire/isight.c | 10 +-
4708 sound/firewire/oxfw/oxfw-scs1x.c | 8 +-
4709 sound/oss/sb_audio.c | 2 +-
4710 sound/oss/swarm_cs4297a.c | 6 +-
4711 sound/pci/als300.c | 2 +-
4712 sound/pci/aw2/aw2-alsa.c | 2 -
4713 sound/pci/aw2/aw2-saa7146.c | 4 +-
4714 sound/pci/ctxfi/ctamixer.c | 14 +-
4715 sound/pci/ctxfi/ctamixer.h | 8 +-
4716 sound/pci/ctxfi/ctatc.c | 20 +-
4717 sound/pci/ctxfi/ctdaio.c | 6 +-
4718 sound/pci/ctxfi/ctdaio.h | 4 +-
4719 sound/pci/ctxfi/ctsrc.c | 13 +-
4720 sound/pci/ctxfi/ctsrc.h | 8 +-
4721 sound/pci/hda/hda_codec.c | 2 +-
4722 sound/pci/ymfpci/ymfpci.h | 2 +-
4723 sound/pci/ymfpci/ymfpci_main.c | 12 +-
4724 sound/soc/codecs/cx20442.c | 8 +-
4725 sound/soc/codecs/sti-sas.c | 10 +-
4726 sound/soc/codecs/tlv320dac33.c | 7 +-
4727 sound/soc/codecs/uda1380.c | 7 +-
4728 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
4729 sound/soc/soc-ac97.c | 6 +-
4730 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
4731 tools/gcc/Makefile | 46 +
4732 tools/gcc/checker_plugin.c | 496 +
4733 tools/gcc/colorize_plugin.c | 162 +
4734 tools/gcc/constify_plugin.c | 521 +
4735 tools/gcc/gcc-common.h | 858 +
4736 tools/gcc/gcc-generate-gimple-pass.h | 175 +
4737 tools/gcc/gcc-generate-ipa-pass.h | 289 +
4738 tools/gcc/gcc-generate-rtl-pass.h | 175 +
4739 tools/gcc/gcc-generate-simple_ipa-pass.h | 175 +
4740 tools/gcc/initify_plugin.c | 536 +
4741 tools/gcc/kallocstat_plugin.c | 135 +
4742 tools/gcc/kernexec_plugin.c | 407 +
4743 tools/gcc/latent_entropy_plugin.c | 422 +
4744 tools/gcc/randomize_layout_seed.h | 1 +
4745 tools/gcc/rap_plugin/Makefile | 4 +
4746 tools/gcc/rap_plugin/rap.h | 36 +
4747 tools/gcc/rap_plugin/rap_fptr_pass.c | 220 +
4748 tools/gcc/rap_plugin/rap_hash.c | 381 +
4749 tools/gcc/rap_plugin/rap_plugin.c | 477 +
4750 tools/gcc/rap_plugin/sip.c | 96 +
4751 tools/gcc/size_overflow_plugin/.gitignore | 3 +
4752 tools/gcc/size_overflow_plugin/Makefile | 28 +
4753 .../disable_size_overflow_hash.data | 12440 +++++++++++
4754 .../generate_size_overflow_hash.sh | 103 +
4755 .../insert_size_overflow_asm.c | 369 +
4756 .../size_overflow_plugin/intentional_overflow.c | 1118 +
4757 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
4758 tools/gcc/size_overflow_plugin/size_overflow.h | 329 +
4759 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
4760 .../size_overflow_plugin/size_overflow_hash.data | 21508 +++++++++++++++++++
4761 .../size_overflow_hash_aux.data | 92 +
4762 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1163 +
4763 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
4764 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
4765 .../size_overflow_plugin_hash.c | 352 +
4766 .../size_overflow_plugin/size_overflow_transform.c | 745 +
4767 .../size_overflow_transform_core.c | 1015 +
4768 tools/gcc/stackleak_plugin.c | 350 +
4769 tools/gcc/structleak_plugin.c | 239 +
4770 tools/include/linux/compiler.h | 8 +
4771 tools/perf/util/include/asm/alternative-asm.h | 3 +
4772 tools/virtio/linux/uaccess.h | 2 +-
4773 virt/kvm/kvm_main.c | 42 +-
4774 2639 files changed, 76327 insertions(+), 13888 deletions(-)
4775 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
4776 Author: Brad Spengler <spender@grsecurity.net>
4777 Date: Mon Apr 25 20:40:53 2016 -0400
4778
4779 Fix DoS in n_tty_receive_buf_common reported by marcan at:
4780 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
4781 and via lengthy diatribe on Twitter:
4782 https://twitter.com/marcan42/status/724740708104474626
4783 https://twitter.com/marcan42/status/724740985146609664
4784 https://twitter.com/marcan42/status/724741270325760000
4785 https://twitter.com/marcan42/status/724742465199050752
4786 https://twitter.com/marcan42/status/724745886794833920
4787 https://twitter.com/marcan42/status/724749571495075840
4788 https://twitter.com/marcan42/status/724746427285409796
4789 https://twitter.com/marcan42/status/724743150263095296
4790 https://twitter.com/marcan42/status/724757473433808896
4791
4792 Fix it correctly instead of using the incorrect fix suggested
4793 by marcan (aka "try reading the code next time")
4794 The original code was meant to fix an integer truncation issue
4795 that would also have caused a SIZE_OVERFLOW "DoS".
4796
4797 drivers/tty/n_tty.c | 9 +++++----
4798 1 file changed, 5 insertions(+), 4 deletions(-)
4799
4800 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
4801 Author: Brad Spengler <spender@grsecurity.net>
4802 Date: Mon Apr 25 19:52:33 2016 -0400
4803
4804 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
4805 reported by jotik at:
4806 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
4807 patch from Mathias Krause
4808
4809 fs/proc/base.c | 2 +-
4810 1 file changed, 1 insertion(+), 1 deletion(-)
4811
4812 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
4813 Author: Jiri Benc <jbenc@redhat.com>
4814 Date: Fri Apr 22 13:09:13 2016 +0200
4815
4816 cxgbi: fix uninitialized flowi6
4817
4818 ip6_route_output looks into different fields in the passed flowi6 structure,
4819 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
4820 first.
4821
4822 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
4823 Signed-off-by: Jiri Benc <jbenc@redhat.com>
4824 Signed-off-by: David S. Miller <davem@davemloft.net>
4825
4826 drivers/scsi/cxgbi/libcxgbi.c | 1 +
4827 1 file changed, 1 insertion(+)
4828
4829 commit ec65caa32652841a5be21d6e73146921af16d7a8
4830 Author: Brad Spengler <spender@grsecurity.net>
4831 Date: Wed Apr 20 20:59:43 2016 -0400
4832
4833 Make /proc/sched_debug only readable by root, mentioned in
4834 recent NCC Group paper on Linux containers
4835
4836 kernel/sched/debug.c | 4 ++++
4837 1 file changed, 4 insertions(+)
4838
4839 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
4840 Merge: 463149f ff26083
4841 Author: Brad Spengler <spender@grsecurity.net>
4842 Date: Wed Apr 20 17:55:53 2016 -0400
4843
4844 Merge branch 'pax-test' into grsec-test
4845
4846 commit ff260839e610d2bc1b0c579edd7deb0028198f01
4847 Author: Brad Spengler <spender@grsecurity.net>
4848 Date: Wed Apr 20 17:55:24 2016 -0400
4849
4850 Update to pax-linux-4.4.8-test14.patch:
4851 - Emese fixed some CodingStyle issues in the latent entropy plugin
4852 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4853
4854 arch/mips/include/asm/cache.h | 3 ++-
4855 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
4856 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
4857 arch/mips/lib/libgcc.h | 12 +++++++++---
4858 drivers/idle/intel_idle.c | 6 ++++--
4859 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
4860 6 files changed, 57 insertions(+), 33 deletions(-)
4861
4862 commit 463149f47a64db4b26a13009f83ed73d393a209c
4863 Author: Xiaodong Liu <xiaodong.liu@intel.com>
4864 Date: Tue Apr 12 09:45:51 2016 +0000
4865
4866 crypto: sha1-mb - use corrcet pointer while completing jobs
4867
4868 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
4869 when check and complete other jobs. If the memory of first completed req
4870 is freed, while still completing other jobs in the func, kernel will
4871 crash since NULL pointer is assigned to RIP.
4872
4873 Cc: <stable@vger.kernel.org>
4874 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
4875 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
4876 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4877
4878 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
4879 1 file changed, 2 insertions(+), 2 deletions(-)
4880
4881 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
4882 Author: Tom Lendacky <thomas.lendacky@amd.com>
4883 Date: Wed Apr 13 10:52:25 2016 -0500
4884
4885 crypto: ccp - Prevent information leakage on export
4886
4887 Prevent information from leaking to userspace by doing a memset to 0 of
4888 the export state structure before setting the structure values and copying
4889 it. This prevents un-initialized padding areas from being copied into the
4890 export area.
4891
4892 Cc: <stable@vger.kernel.org> # 3.14.x-
4893 Reported-by: Ben Hutchings <ben@decadent.org.uk>
4894 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
4895 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4896
4897 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
4898 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
4899 2 files changed, 6 insertions(+)
4900
4901 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
4902 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4903 Date: Mon Apr 18 14:33:54 2016 +0300
4904
4905 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
4906
4907 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
4908 order-0 memory allocations in RX path"), so here is no reason for depleting
4909 reserves. Generic __netdev_alloc_frag() implements the same logic.
4910
4911 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
4912 Acked-by: Eric Dumazet <edumazet@google.com>
4913 Signed-off-by: David S. Miller <davem@davemloft.net>
4914
4915 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
4916 1 file changed, 1 insertion(+), 1 deletion(-)
4917
4918 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
4919 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
4920 Date: Thu Mar 17 18:00:29 2016 +0000
4921
4922 USB: usbip: fix potential out-of-bounds write
4923
4924 Fix potential out-of-bounds write to urb->transfer_buffer
4925 usbip handles network communication directly in the kernel. When receiving a
4926 packet from its peer, usbip code parses headers according to protocol. As
4927 part of this parsing urb->actual_length is filled. Since the input for
4928 urb->actual_length comes from the network, it should be treated as untrusted.
4929 Any entity controlling the network may put any value in the input and the
4930 preallocated urb->transfer_buffer may not be large enough to hold the data.
4931 Thus, the malicious entity is able to write arbitrary data to kernel memory.
4932
4933 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
4934 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4935
4936 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
4937 1 file changed, 11 insertions(+)
4938
4939 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
4940 Merge: d60a24d f5fe5fd
4941 Author: Brad Spengler <spender@grsecurity.net>
4942 Date: Wed Apr 20 17:35:58 2016 -0400
4943
4944 Merge branch 'pax-test' into grsec-test
4945
4946 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
4947 Merge: a107ba2 8c9aef0
4948 Author: Brad Spengler <spender@grsecurity.net>
4949 Date: Wed Apr 20 17:35:29 2016 -0400
4950
4951 Merge branch 'linux-4.4.y' into pax-test
4952
4953 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
4954 Author: Brad Spengler <spender@grsecurity.net>
4955 Date: Mon Apr 18 17:48:10 2016 -0400
4956
4957 fix cast for constify change, reported by pipacs
4958
4959 drivers/idle/intel_idle.c | 4 ++--
4960 1 file changed, 2 insertions(+), 2 deletions(-)
4961
4962 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
4963 Author: Brad Spengler <spender@grsecurity.net>
4964 Date: Fri Apr 15 21:31:07 2016 -0400
4965
4966 Use proper type for function pointer
4967
4968 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
4969 1 file changed, 3 insertions(+), 3 deletions(-)
4970
4971 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
4972 Author: Brad Spengler <spender@grsecurity.net>
4973 Date: Fri Apr 15 21:24:04 2016 -0400
4974
4975 Fix skylake cstates compat with constify
4976
4977 drivers/idle/intel_idle.c | 6 ++++--
4978 1 file changed, 4 insertions(+), 2 deletions(-)
4979
4980 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
4981 Author: Brad Spengler <spender@grsecurity.net>
4982 Date: Fri Apr 15 21:10:44 2016 -0400
4983
4984 Update size_overflow hash table
4985
4986 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
4987 1 file changed, 2 insertions(+), 1 deletion(-)
4988
4989 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
4990 Author: Brad Spengler <spender@grsecurity.net>
4991 Date: Fri Apr 15 20:52:37 2016 -0400
4992
4993 compile fix
4994
4995 fs/coredump.c | 3 ---
4996 1 file changed, 3 deletions(-)
4997
4998 commit 967224da52bd98d078b1237aea5ec9e622238fba
4999 Merge: 92771d6 a107ba2
5000 Author: Brad Spengler <spender@grsecurity.net>
5001 Date: Fri Apr 15 20:30:23 2016 -0400
5002
5003 Merge branch 'pax-test' into grsec-test
5004
5005 commit a107ba25214d9694eb836fb04c782ad694977b91
5006 Merge: 4d8fc00 b40108b
5007 Author: Brad Spengler <spender@grsecurity.net>
5008 Date: Fri Apr 15 20:18:26 2016 -0400
5009
5010 Merge branch 'linux-4.4.y' into pax-test
5011
5012 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
5013 Author: Brad Spengler <spender@grsecurity.net>
5014 Date: Sun Apr 10 07:18:03 2016 -0400
5015
5016 From: Mathias Krause <minipli@googlemail.com>
5017 To: "David S. Miller" <davem@davemloft.net>
5018 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
5019 Emelyanov <xemul@parallels.com>
5020 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
5021 interface
5022
5023 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
5024 pdiag_put_mclist() leaks uninitialized heap bytes via the
5025 PACKET_DIAG_MCLIST netlink attribute.
5026
5027 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
5028
5029 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
5030 Signed-off-by: Mathias Krause <minipli@googlemail.com>
5031 Cc: Eric W. Biederman <ebiederm@xmission.com>
5032 Cc: Pavel Emelyanov <xemul@parallels.com>
5033 ---
5034 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
5035 to userland before the introduction of the packet_diag interface.
5036 Therefore the "Fixes:" line on that commit.
5037
5038 net/packet/af_packet.c | 1 +
5039 1 file changed, 1 insertion(+)
5040
5041 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
5042 Author: Jakub Sitnicki <jkbs@redhat.com>
5043 Date: Tue Apr 5 18:41:08 2016 +0200
5044
5045 ipv6: Count in extension headers in skb->network_header
5046
5047 When sending a UDPv6 message longer than MTU, account for the length
5048 of fragmentable IPv6 extension headers in skb->network_header offset.
5049 Same as we do in alloc_new_skb path in __ip6_append_data().
5050
5051 This ensures that later on __ip6_make_skb() will make space in
5052 headroom for fragmentable extension headers:
5053
5054 /* move skb->data to ip header from ext header */
5055 if (skb->data < skb_network_header(skb))
5056 __skb_pull(skb, skb_network_offset(skb));
5057
5058 Prevents a splat due to skb_under_panic:
5059
5060 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
5061 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
5062 ------------[ cut here ]------------
5063 kernel BUG at net/core/skbuff.c:104!
5064 invalid opcode: 0000 [#1] KASAN
5065 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
5066 [...]
5067 Call Trace:
5068 [<ffffffff813eb7b9>] skb_push+0x79/0x80
5069 [<ffffffff8143397b>] eth_header+0x2b/0x100
5070 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
5071 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
5072 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
5073 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
5074 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
5075 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
5076 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
5077 [...]
5078
5079 Reported-by: Ji Jianwen <jiji@redhat.com>
5080 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
5081 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
5082 Signed-off-by: David S. Miller <davem@davemloft.net>
5083
5084 net/ipv6/ip6_output.c | 8 ++++----
5085 1 file changed, 4 insertions(+), 4 deletions(-)
5086
5087 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
5088 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5089 Date: Fri Apr 1 17:17:50 2016 -0300
5090
5091 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
5092
5093 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
5094 before ip6_tnl_create2 is called. When register_netdevice is called, there
5095 is no linkinfo attribute in the NEWLINK message because of that.
5096
5097 Setting rtnl_link_ops before calling register_netdevice fixes that.
5098
5099 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
5100 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
5101 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
5102 Signed-off-by: David S. Miller <davem@davemloft.net>
5103
5104 net/ipv6/ip6_tunnel.c | 2 +-
5105 1 file changed, 1 insertion(+), 1 deletion(-)
5106
5107 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
5108 Author: Brad Spengler <spender@grsecurity.net>
5109 Date: Tue Apr 5 21:12:44 2016 -0400
5110
5111 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
5112
5113 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
5114 1 file changed, 12 insertions(+), 6 deletions(-)
5115
5116 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
5117 Author: Brad Spengler <spender@grsecurity.net>
5118 Date: Sun Apr 3 20:10:10 2016 -0400
5119
5120 Fix RANDSTRUCT support on ARM
5121
5122 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
5123 1 file changed, 52 insertions(+), 2 deletions(-)
5124
5125 commit bd893a75ab49f6ea5a216eb334471507337118ba
5126 Merge: 87b7f1d 4d8fc00
5127 Author: Brad Spengler <spender@grsecurity.net>
5128 Date: Sat Apr 2 11:54:20 2016 -0400
5129
5130 Merge branch 'pax-test' into grsec-test
5131
5132 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
5133 Author: Brad Spengler <spender@grsecurity.net>
5134 Date: Sat Apr 2 11:53:53 2016 -0400
5135
5136 Update to pax-linux-4.4.6-test13.patch:
5137 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
5138 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
5139
5140 arch/mips/include/asm/atomic.h | 4 ----
5141 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
5142 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
5143 3 files changed, 1 insertion(+), 5 deletions(-)
5144
5145 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
5146 Merge: 3335266 3abdad0
5147 Author: Brad Spengler <spender@grsecurity.net>
5148 Date: Sat Apr 2 11:19:17 2016 -0400
5149
5150 Merge branch 'pax-test' into grsec-test
5151
5152 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
5153 Author: Brad Spengler <spender@grsecurity.net>
5154 Date: Sat Apr 2 11:12:56 2016 -0400
5155
5156 Update to pax-linux-4.4.6-test12.patch:
5157 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
5158 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
5159 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
5160 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
5161 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
5162 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
5163 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
5164 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
5165 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
5166 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
5167 - fixed a gratuitous userland dereference in the amd64 stack walker
5168 - added latent entropy gathering to a few more functions
5169 - constified a few smp_hotplug_thread instances
5170
5171 arch/x86/entry/vdso/Makefile | 1 +
5172 arch/x86/include/asm/cpufeature.h | 1 -
5173 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
5174 arch/x86/kernel/head_32.S | 6 +++---
5175 arch/x86/mm/fault.c | 2 +-
5176 drivers/iommu/arm-smmu.c | 2 +-
5177 drivers/net/ppp/pptp.c | 1 +
5178 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
5179 fs/nfs/internal.h | 5 +++--
5180 fs/proc/kcore.c | 2 +-
5181 kernel/module.c | 6 +++---
5182 kernel/rcu/tree.c | 2 +-
5183 kernel/softirq.c | 2 +-
5184 kernel/stop_machine.c | 2 +-
5185 net/ipv6/xfrm6_mode_transport.c | 2 +-
5186 net/sched/sch_tbf.c | 9 ++++++---
5187 scripts/Makefile.gcc-plugins | 13 +++----------
5188 scripts/Makefile.host | 3 +--
5189 .../disable_size_overflow_hash.data | 4 +++-
5190 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
5191 20 files changed, 40 insertions(+), 48 deletions(-)
5192
5193 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
5194 Author: Mika Penttilä <mika.penttila@nextfour.com>
5195 Date: Mon Feb 22 17:56:52 2016 +0100
5196
5197 ARM: 8544/1: set_memory_xx fixes
5198
5199 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
5200
5201 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
5202 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
5203
5204 arch/arm/mm/pageattr.c | 3 +++
5205 1 file changed, 3 insertions(+)
5206
5207 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
5208 Author: Josh Boyer <jwboyer@fedoraproject.org>
5209 Date: Mon Mar 14 10:42:38 2016 -0400
5210
5211 USB: iowarrior: fix oops with malicious USB descriptors
5212
5213 The iowarrior driver expects at least one valid endpoint. If given
5214 malicious descriptors that specify 0 for the number of endpoints,
5215 it will crash in the probe function. Ensure there is at least
5216 one endpoint on the interface before using it.
5217
5218 The full report of this issue can be found here:
5219 http://seclists.org/bugtraq/2016/Mar/87
5220
5221 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5222 Cc: stable <stable@vger.kernel.org>
5223 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
5224 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5225
5226 drivers/usb/misc/iowarrior.c | 6 ++++++
5227 1 file changed, 6 insertions(+)
5228
5229 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
5230 Author: Oliver Neukum <oneukum@suse.com>
5231 Date: Tue Mar 15 10:14:04 2016 +0100
5232
5233 USB: cdc-acm: more sanity checking
5234
5235 An attack has become available which pretends to be a quirky
5236 device circumventing normal sanity checks and crashes the kernel
5237 by an insufficient number of interfaces. This patch adds a check
5238 to the code path for quirky devices.
5239
5240 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5241 CC: stable@vger.kernel.org
5242 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5243
5244 drivers/usb/class/cdc-acm.c | 3 +++
5245 1 file changed, 3 insertions(+)
5246
5247 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
5248 Author: Oliver Neukum <oneukum@suse.com>
5249 Date: Wed Mar 16 13:26:17 2016 +0100
5250
5251 USB: usb_driver_claim_interface: add sanity checking
5252
5253 Attacks that trick drivers into passing a NULL pointer
5254 to usb_driver_claim_interface() using forged descriptors are
5255 known. This thwarts them by sanity checking.
5256
5257 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5258 CC: stable@vger.kernel.org
5259 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
5260
5261 drivers/usb/core/driver.c | 6 +++++-
5262 1 file changed, 5 insertions(+), 1 deletion(-)
5263
5264 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
5265 Author: Paolo Bonzini <pbonzini@redhat.com>
5266 Date: Mon Mar 21 10:15:25 2016 +0100
5267
5268 KVM: fix spin_lock_init order on x86
5269
5270 Moving the initialization earlier is needed in 4.6 because
5271 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
5272 complain:
5273
5274 [ 284.440294] INFO: trying to register non-static key.
5275 [ 284.445259] the code is fine but needs lockdep annotation.
5276 [ 284.450736] turning off the locking correctness validator.
5277 ...
5278 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
5279 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5280 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
5281 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
5282 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
5283 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
5284 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
5285 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
5286
5287 However, it also helps fixing a preexisting problem, which is why this
5288 patch is also good for stable kernels: kvm_create_vm was incrementing
5289 current->mm->mm_count but not decrementing it at the out_err label (in
5290 case kvm_init_mmu_notifier failed). The new initialization order makes
5291 it possible to add the required mmdrop without adding a new error label.
5292
5293 Cc: stable@vger.kernel.org
5294 Reported-by: Borislav Petkov <bp@alien8.de>
5295 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5296
5297 virt/kvm/kvm_main.c | 21 +++++++++++----------
5298 1 file changed, 11 insertions(+), 10 deletions(-)
5299
5300 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
5301 Author: Paolo Bonzini <pbonzini@redhat.com>
5302 Date: Fri Mar 18 16:53:42 2016 +0100
5303
5304 KVM: VMX: avoid guest hang on invalid invvpid instruction
5305
5306 A guest executing an invalid invvpid instruction would hang
5307 because the instruction pointer was not updated.
5308
5309 Reported-by: jmontleo@redhat.com
5310 Tested-by: jmontleo@redhat.com
5311 Cc: stable@vger.kernel.org
5312 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
5313 Reviewed-by: David Matlack <dmatlack@google.com>
5314 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5315
5316 arch/x86/kvm/vmx.c | 1 +
5317 1 file changed, 1 insertion(+)
5318
5319 commit 602caaece277e5e21ae43771398bbf7778061beb
5320 Author: Paolo Bonzini <pbonzini@redhat.com>
5321 Date: Fri Mar 18 16:53:29 2016 +0100
5322
5323 KVM: VMX: avoid guest hang on invalid invept instruction
5324
5325 A guest executing an invalid invept instruction would hang
5326 because the instruction pointer was not updated.
5327
5328 Cc: stable@vger.kernel.org
5329 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
5330 Reviewed-by: David Matlack <dmatlack@google.com>
5331 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5332
5333 arch/x86/kvm/vmx.c | 1 +
5334 1 file changed, 1 insertion(+)
5335
5336 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
5337 Author: Jann Horn <jann@thejh.net>
5338 Date: Tue Mar 22 14:25:36 2016 -0700
5339
5340 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
5341
5342 This commit fixes the following security hole affecting systems where
5343 all of the following conditions are fulfilled:
5344
5345 - The fs.suid_dumpable sysctl is set to 2.
5346 - The kernel.core_pattern sysctl's value starts with "/". (Systems
5347 where kernel.core_pattern starts with "|/" are not affected.)
5348 - Unprivileged user namespace creation is permitted. (This is
5349 true on Linux >=3.8, but some distributions disallow it by
5350 default using a distro patch.)
5351
5352 Under these conditions, if a program executes under secure exec rules,
5353 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
5354 namespace, changes its root directory and crashes, the coredump will be
5355 written using fsuid=0 and a path derived from kernel.core_pattern - but
5356 this path is interpreted relative to the root directory of the process,
5357 allowing the attacker to control where a coredump will be written with
5358 root privileges.
5359
5360 To fix the security issue, always interpret core_pattern for dumps that
5361 are written under SUID_DUMP_ROOT relative to the root directory of init.
5362
5363 Signed-off-by: Jann Horn <jann@thejh.net>
5364 Acked-by: Kees Cook <keescook@chromium.org>
5365 Cc: Al Viro <viro@zeniv.linux.org.uk>
5366 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
5367 Cc: Andy Lutomirski <luto@kernel.org>
5368 Cc: Oleg Nesterov <oleg@redhat.com>
5369 Cc: <stable@vger.kernel.org>
5370 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5371 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5372
5373 arch/um/drivers/mconsole_kern.c | 2 +-
5374 fs/coredump.c | 31 +++++++++++++++++++++++++++----
5375 fs/fhandle.c | 2 +-
5376 fs/open.c | 6 ++----
5377 include/linux/fs.h | 2 +-
5378 kernel/sysctl_binary.c | 2 +-
5379 6 files changed, 33 insertions(+), 12 deletions(-)
5380
5381 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
5382 Author: Takashi Iwai <tiwai@suse.de>
5383 Date: Fri Apr 1 12:28:16 2016 +0200
5384
5385 ALSA: timer: Use mod_timer() for rearming the system timer
5386
5387 ALSA system timer backend stops the timer via del_timer() without sync
5388 and leaves del_timer_sync() at the close instead. This is because of
5389 the restriction by the design of ALSA timer: namely, the stop callback
5390 may be called from the timer handler, and calling the sync shall lead
5391 to a hangup. However, this also triggers a kernel BUG() when the
5392 timer is rearmed immediately after stopping without sync:
5393 kernel BUG at kernel/time/timer.c:966!
5394 Call Trace:
5395 <IRQ>
5396 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
5397 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
5398 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
5399 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
5400 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
5401 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
5402 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
5403 ....
5404
5405 It's the place where add_timer() checks the pending timer. It's clear
5406 that this may happen after the immediate restart without sync in our
5407 cases.
5408
5409 So, the workaround here is just to use mod_timer() instead of
5410 add_timer(). This looks like a band-aid fix, but it's a right move,
5411 as snd_timer_interrupt() takes care of the continuous rearm of timer.
5412
5413 Reported-by: Jiri Slaby <jslaby@suse.cz>
5414 Cc: <stable@vger.kernel.org>
5415 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5416
5417 sound/core/timer.c | 4 ++--
5418 1 file changed, 2 insertions(+), 2 deletions(-)
5419
5420 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
5421 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5422 Date: Wed Mar 30 11:40:43 2016 +0200
5423
5424 drm/udl: Use unlocked gem unreferencing
5425
5426 For drm_gem_object_unreference callers are required to hold
5427 dev->struct_mutex, which these paths don't. Enforcing this requirement
5428 has become a bit more strict with
5429
5430 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
5431 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
5432 Date: Thu Oct 15 09:36:25 2015 +0200
5433
5434 drm/gem: Check locking in drm_gem_object_unreference
5435
5436 Cc: stable@vger.kernel.org
5437 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
5438 Signed-off-by: Dave Airlie <airlied@redhat.com>
5439
5440 drivers/gpu/drm/udl/udl_fb.c | 2 +-
5441 drivers/gpu/drm/udl/udl_gem.c | 2 +-
5442 2 files changed, 2 insertions(+), 2 deletions(-)
5443
5444 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
5445 Author: Jan Kara <jack@suse.com>
5446 Date: Mon Dec 7 14:34:49 2015 -0500
5447
5448 ext4: fix races of writeback with punch hole and zero range
5449
5450 When doing delayed allocation, update of on-disk inode size is postponed
5451 until IO submission time. However hole punch or zero range fallocate
5452 calls can end up discarding the tail page cache page and thus on-disk
5453 inode size would never be properly updated.
5454
5455 Make sure the on-disk inode size is updated before truncating page
5456 cache.
5457
5458 Signed-off-by: Jan Kara <jack@suse.com>
5459 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5460
5461 fs/ext4/ext4.h | 3 +++
5462 fs/ext4/extents.c | 5 +++++
5463 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
5464 3 files changed, 42 insertions(+), 1 deletion(-)
5465
5466 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
5467 Author: Jan Kara <jack@suse.com>
5468 Date: Mon Dec 7 14:31:11 2015 -0500
5469
5470 ext4: fix races between buffered IO and collapse / insert range
5471
5472 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
5473 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
5474 faults. If buffered write or write via mmap manages to squeeze between
5475 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
5476 implementations, the written data is simply discarded by
5477 truncate_pagecache() although it should have been shifted.
5478
5479 Fix the problem by moving filemap_write_and_wait_range() call inside
5480 i_mutex and i_mmap_sem. That way we are protected against races with
5481 both buffered writes and page faults.
5482
5483 Signed-off-by: Jan Kara <jack@suse.com>
5484 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5485
5486 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
5487 1 file changed, 31 insertions(+), 28 deletions(-)
5488
5489 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
5490 Author: Jan Kara <jack@suse.com>
5491 Date: Mon Dec 7 14:29:17 2015 -0500
5492
5493 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
5494
5495 Currently ext4_alloc_file_blocks() was handling protection against
5496 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
5497 and sometimes not and DIO protection ranks above it (although strictly
5498 speaking this cannot currently create any deadlocks). Also
5499 ext4_zero_range() was actually getting & releasing unlocked DIO
5500 protection twice in some cases. Luckily it didn't introduce any real bug
5501 but it was a land mine waiting to be stepped on. So move DIO protection
5502 out from ext4_alloc_file_blocks() into the two callsites.
5503
5504 Signed-off-by: Jan Kara <jack@suse.com>
5505 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5506
5507 fs/ext4/extents.c | 21 ++++++++++-----------
5508 1 file changed, 10 insertions(+), 11 deletions(-)
5509
5510 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
5511 Author: Jan Kara <jack@suse.com>
5512 Date: Mon Dec 7 14:28:03 2015 -0500
5513
5514 ext4: fix races between page faults and hole punching
5515
5516 Currently, page faults and hole punching are completely unsynchronized.
5517 This can result in page fault faulting in a page into a range that we
5518 are punching after truncate_pagecache_range() has been called and thus
5519 we can end up with a page mapped to disk blocks that will be shortly
5520 freed. Filesystem corruption will shortly follow. Note that the same
5521 race is avoided for truncate by checking page fault offset against
5522 i_size but there isn't similar mechanism available for punching holes.
5523
5524 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
5525 grab it for writing over truncate, hole punching, and other functions
5526 removing blocks from extent tree and for read over page faults. We
5527 cannot easily use i_data_sem for this since that ranks below transaction
5528 start and we need something ranking above it so that it can be held over
5529 the whole truncate / hole punching operation. Also remove various
5530 workarounds we had in the code to reduce race window when page fault
5531 could have created pages with stale mapping information.
5532
5533 Signed-off-by: Jan Kara <jack@suse.com>
5534 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
5535
5536 fs/ext4/ext4.h | 10 +++++++++
5537 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
5538 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
5539 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
5540 fs/ext4/super.c | 1 +
5541 fs/ext4/truncate.h | 2 ++
5542 6 files changed, 127 insertions(+), 42 deletions(-)
5543
5544 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
5545 Author: Guenter Roeck <linux@roeck-us.net>
5546 Date: Sat Mar 26 12:28:05 2016 -0700
5547
5548 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
5549
5550 arm:pxa_defconfig can result in the following crash if the max1111 driver
5551 is not instantiated.
5552
5553 Unhandled fault: page domain fault (0x01b) at 0x00000000
5554 pgd = c0004000
5555 [00000000] *pgd=00000000
5556 Internal error: : 1b [#1] PREEMPT ARM
5557 Modules linked in:
5558 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
5559 Hardware name: SHARP Akita
5560 Workqueue: events sharpsl_charge_toggle
5561 task: c390a000 ti: c391e000 task.ti: c391e000
5562 PC is at max1111_read_channel+0x20/0x30
5563 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
5564 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
5565 ...
5566 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
5567 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
5568 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
5569 (spitzpm_read_devdata+0x5c/0xc4)
5570 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
5571 (sharpsl_check_battery_temp+0x78/0x110)
5572 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
5573 (sharpsl_charge_toggle+0x48/0x110)
5574 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
5575 (process_one_work+0x14c/0x48c)
5576 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
5577 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
5578 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
5579
5580 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
5581 module and thus not necessarily loaded. While building SPI_PXA2XX into the
5582 kernel would make the problem disappear, it appears prudent to ensure that
5583 the driver is instantiated before accessing its data structures.
5584
5585 Cc: Arnd Bergmann <arnd@arndb.de>
5586 Cc: stable@vger.kernel.org
5587 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
5588
5589 drivers/hwmon/max1111.c | 6 ++++++
5590 1 file changed, 6 insertions(+)
5591
5592 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
5593 Author: Nicolai Stange <nicstange@gmail.com>
5594 Date: Sun Mar 20 23:23:46 2016 +0100
5595
5596 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
5597
5598 Despite what the DocBook comment to pkcs7_validate_trust() says, the
5599 *_trusted argument is never set to false.
5600
5601 pkcs7_validate_trust() only positively sets *_trusted upon encountering
5602 a trusted PKCS#7 SignedInfo block.
5603
5604 This is quite unfortunate since its callers, system_verify_data() for
5605 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
5606
5607 Indeed, UBSAN splats when attempting to load the uninitialized local
5608 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
5609
5610 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
5611 load of value 82 is not a valid value for type '_Bool'
5612 [...]
5613 Call Trace:
5614 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
5615 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
5616 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
5617 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
5618 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
5619 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
5620 [<ffffffff814b83f0>] ? kfree+0x220/0x370
5621 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
5622 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
5623 [<ffffffff813c391a>] system_verify_data+0xca/0x170
5624 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
5625 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
5626 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
5627 [...]
5628
5629 The implication is that pkcs7_validate_trust() effectively grants trust
5630 when it really shouldn't have.
5631
5632 Fix this by explicitly setting *_trusted to false at the very beginning
5633 of pkcs7_validate_trust().
5634
5635 Cc: <stable@vger.kernel.org>
5636 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5637 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5638
5639 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
5640 1 file changed, 2 insertions(+)
5641
5642 commit 1052826f7352ccc98167129b0b83222f45d50046
5643 Author: Florian Westphal <fw@strlen.de>
5644 Date: Tue Mar 22 18:02:49 2016 +0100
5645
5646 netfilter: x_tables: validate e->target_offset early
5647
5648 We should check that e->target_offset is sane before
5649 mark_source_chains gets called since it will fetch the target entry
5650 for loop detection.
5651
5652 Signed-off-by: Florian Westphal <fw@strlen.de>
5653 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5654
5655 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
5656 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
5657 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
5658 3 files changed, 24 insertions(+), 27 deletions(-)
5659
5660 commit b35d19509e8dab157214e46dd24314663ccf554f
5661 Author: Florian Westphal <fw@strlen.de>
5662 Date: Tue Mar 22 18:02:50 2016 +0100
5663
5664 netfilter: x_tables: make sure e->next_offset covers remaining blob size
5665
5666 Otherwise this function may read data beyond the ruleset blob.
5667
5668 Signed-off-by: Florian Westphal <fw@strlen.de>
5669 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5670
5671 net/ipv4/netfilter/arp_tables.c | 6 ++++--
5672 net/ipv4/netfilter/ip_tables.c | 6 ++++--
5673 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
5674 3 files changed, 12 insertions(+), 6 deletions(-)
5675
5676 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
5677 Author: Florian Westphal <fw@strlen.de>
5678 Date: Tue Mar 22 18:02:52 2016 +0100
5679
5680 netfilter: x_tables: fix unconditional helper
5681
5682 Ben Hawkes says:
5683
5684 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
5685 is possible for a user-supplied ipt_entry structure to have a large
5686 next_offset field. This field is not bounds checked prior to writing a
5687 counter value at the supplied offset.
5688
5689 Problem is that mark_source_chains should not have been called --
5690 the rule doesn't have a next entry, so its supposed to return
5691 an absolute verdict of either ACCEPT or DROP.
5692
5693 However, the function conditional() doesn't work as the name implies.
5694 It only checks that the rule is using wildcard address matching.
5695
5696 However, an unconditional rule must also not be using any matches
5697 (no -m args).
5698
5699 The underflow validator only checked the addresses, therefore
5700 passing the 'unconditional absolute verdict' test, while
5701 mark_source_chains also tested for presence of matches, and thus
5702 proceeeded to the next (not-existent) rule.
5703
5704 Unify this so that all the callers have same idea of 'unconditional rule'.
5705
5706 Reported-by: Ben Hawkes <hawkes@google.com>
5707 Signed-off-by: Florian Westphal <fw@strlen.de>
5708 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5709
5710 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
5711 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
5712 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
5713 3 files changed, 31 insertions(+), 33 deletions(-)
5714
5715 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
5716 Author: Pablo Neira Ayuso <pablo@netfilter.org>
5717 Date: Thu Mar 24 21:29:53 2016 +0100
5718
5719 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
5720
5721 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
5722 in ebtables and all the x_tables variants and their respective compat
5723 code. Uncovered by KASAN.
5724
5725 Reported-by: Baozeng Ding <sploving1@gmail.com>
5726 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
5727
5728 net/bridge/netfilter/ebtables.c | 4 ++++
5729 net/ipv4/netfilter/arp_tables.c | 2 ++
5730 net/ipv4/netfilter/ip_tables.c | 2 ++
5731 net/ipv6/netfilter/ip6_tables.c | 2 ++
5732 4 files changed, 10 insertions(+)
5733
5734 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
5735 Author: Nicolai Stange <nicstange@gmail.com>
5736 Date: Fri Mar 25 14:22:14 2016 -0700
5737
5738 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
5739
5740 If
5741 - generic_file_read_iter() gets called with a zero read length,
5742 - the read offset is at a page boundary,
5743 - IOCB_DIRECT is not set
5744 - and the page in question hasn't made it into the page cache yet,
5745 then do_generic_file_read() will trigger a readahead with a req_size hint
5746 of zero.
5747
5748 Since roundup_pow_of_two(0) is undefined, UBSAN reports
5749
5750 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
5751 shift exponent 64 is too large for 64-bit type 'long unsigned int'
5752 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
5753 [...]
5754 Call Trace:
5755 [...]
5756 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
5757 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
5758 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
5759 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
5760 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
5761 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
5762 [...]
5763 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
5764 [...]
5765
5766 when get_init_ra_size() gets called from ondemand_readahead().
5767
5768 The net effect is that the initial readahead size is arch dependent for
5769 requested read lengths of zero: for example, since
5770
5771 1UL << (sizeof(unsigned long) * 8)
5772
5773 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
5774 size becomes 4 on the former and 0 on the latter.
5775
5776 What's more, whether or not the file access timestamp is updated for zero
5777 length reads is decided differently for the two cases of IOCB_DIRECT
5778 being set or cleared: in the first case, generic_file_read_iter()
5779 explicitly skips updating that timestamp while in the latter case, it is
5780 always updated through the call to do_generic_file_read().
5781
5782 According to POSIX, zero length reads "do not modify the last data access
5783 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
5784
5785 Let generic_file_read_iter() unconditionally check the requested read
5786 length at its entry and return immediately with success if it is zero.
5787
5788 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
5789 Cc: Al Viro <viro@zeniv.linux.org.uk>
5790 Reviewed-by: Jan Kara <jack@suse.cz>
5791 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
5792 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
5793
5794 mm/filemap.c | 7 ++++---
5795 1 file changed, 4 insertions(+), 3 deletions(-)
5796
5797 commit 604785419da498d7e876a0191b2e11626db706bb
5798 Author: Oliver Neukum <oneukum@suse.com>
5799 Date: Thu Mar 17 14:00:17 2016 -0700
5800
5801 Input: ims-pcu - sanity check against missing interfaces
5802
5803 A malicious device missing interface can make the driver oops.
5804 Add sanity checking.
5805
5806 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5807 CC: stable@vger.kernel.org
5808 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5809
5810 drivers/input/misc/ims-pcu.c | 4 ++++
5811 1 file changed, 4 insertions(+)
5812
5813 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
5814 Author: Vladis Dronov <vdronov@redhat.com>
5815 Date: Wed Mar 23 11:53:46 2016 -0700
5816
5817 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
5818
5819 The ati_remote2 driver expects at least two interfaces with one
5820 endpoint each. If given malicious descriptor that specify one
5821 interface or no endpoints, it will crash in the probe function.
5822 Ensure there is at least two interfaces and one endpoint for each
5823 interface before using it.
5824
5825 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
5826
5827 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
5828 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
5829 Cc: stable@vger.kernel.org
5830 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5831
5832 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
5833 1 file changed, 30 insertions(+), 6 deletions(-)
5834
5835 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
5836 Author: Oliver Neukum <oneukum@suse.com>
5837 Date: Wed Mar 23 14:36:56 2016 -0700
5838
5839 Input: sur40 - fix DMA on stack
5840
5841 During the initialisation the driver uses a buffer on the stack for DMA.
5842 That violates the cache coherency rules. The fix is to allocate the buffer
5843 with kmalloc().
5844
5845 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
5846 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
5847
5848 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
5849 1 file changed, 14 insertions(+), 7 deletions(-)
5850
5851 commit 015dd03669b2ab646723f6b123377e4ef5694a10
5852 Author: Haiyang Zhang <haiyangz@microsoft.com>
5853 Date: Wed Mar 23 09:43:10 2016 -0700
5854
5855 hv_netvsc: Fix the array sizes to be max supported channels
5856
5857 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
5858 hosts. We use it for the related array sizes instead of using NR_CPUS,
5859 which may be set to several thousands.
5860 This patch reduces possible memory allocation failures.
5861
5862 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5863 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5864 Signed-off-by: David S. Miller <davem@davemloft.net>
5865
5866 drivers/net/hyperv/hyperv_net.h | 7 ++++---
5867 drivers/net/hyperv/rndis_filter.c | 4 ++--
5868 2 files changed, 6 insertions(+), 5 deletions(-)
5869
5870 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
5871 Author: Haiyang Zhang <haiyangz@microsoft.com>
5872 Date: Wed Mar 23 09:43:09 2016 -0700
5873
5874 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
5875
5876 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
5877 the nvdev->num_chn into a temp variable for later usage.
5878
5879 (Please also include this patch into stable branch.)
5880
5881 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
5882 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
5883 Signed-off-by: David S. Miller <davem@davemloft.net>
5884
5885 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
5886 1 file changed, 4 insertions(+), 1 deletion(-)
5887
5888 commit 7409626e43fe871cede30ac926425938f3ccddaf
5889 Author: Guillaume Nault <g.nault@alphalink.fr>
5890 Date: Wed Mar 23 16:38:55 2016 +0100
5891
5892 ppp: take reference on channels netns
5893
5894 Let channels hold a reference on their network namespace.
5895 Some channel types, like ppp_async and ppp_synctty, can have their
5896 userspace controller running in a different namespace. Therefore they
5897 can't rely on them to preclude their netns from being removed from
5898 under them.
5899
5900 ==================================================================
5901 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
5902 addr ffff880064e217e0
5903 Read of size 8 by task syz-executor/11581
5904 =============================================================================
5905 BUG net_namespace (Not tainted): kasan: bad access detected
5906 -----------------------------------------------------------------------------
5907
5908 Disabling lock debugging due to kernel taint
5909 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
5910 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
5911 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
5912 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
5913 [< inline >] slab_alloc kernel/mm/slub.c:2574
5914 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
5915 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
5916 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
5917 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
5918 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
5919 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
5920 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
5921 [< inline >] copy_process kernel/kernel/fork.c:1274
5922 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
5923 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
5924 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
5925 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
5926
5927 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
5928 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
5929 [< inline >] slab_free kernel/mm/slub.c:2805
5930 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
5931 [< inline >] net_free kernel/net/core/net_namespace.c:341
5932 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
5933 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
5934 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
5935 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
5936 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
5937 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
5938 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
5939 flags=0x5fffc0000004080
5940 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
5941
5942 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
5943 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
5944 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
5945 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
5946 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
5947 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
5948 Call Trace:
5949 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
5950 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
5951 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
5952 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
5953 [< inline >] print_address_description kernel/mm/kasan/report.c:138
5954 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
5955 [< inline >] kasan_report kernel/mm/kasan/report.c:259
5956 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
5957 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
5958 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5959 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
5960 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5961 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
5962 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
5963 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
5964 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
5965 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
5966 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
5967 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
5968 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
5969 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
5970 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
5971 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
5972 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
5973 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
5974 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
5975 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
5976 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
5977 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
5978 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
5979 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
5980 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
5981 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
5982 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
5983 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
5984 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
5985 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
5986 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
5987 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
5988 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
5989 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
5990 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
5991 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
5992 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
5993 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
5994 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
5995 Memory state around the buggy address:
5996 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5997 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5998 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
5999 ^
6000 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6001 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
6002 ==================================================================
6003
6004 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
6005 Reported-by: Baozeng Ding <sploving1@gmail.com>
6006 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
6007 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
6008 Signed-off-by: David S. Miller <davem@davemloft.net>
6009
6010 drivers/net/ppp/ppp_generic.c | 4 +++-
6011 1 file changed, 3 insertions(+), 1 deletion(-)
6012
6013 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
6014 Author: Herbert Xu <herbert@gondor.apana.org.au>
6015 Date: Wed Mar 16 17:06:01 2016 +0800
6016
6017 eCryptfs: Use skcipher and shash
6018
6019 eCryptfs: Fix null pointer dereference on kzalloc error path
6020
6021 The conversion to skcipher and shash added a couple of null pointer
6022 dereference bugs on the kzalloc failure path. This patch fixes them.
6023
6024 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
6025 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
6026 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6027
6028 fs/ecryptfs/keystore.c | 6 ++----
6029 1 file changed, 2 insertions(+), 4 deletions(-)
6030
6031 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
6032 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
6033 Date: Thu Mar 17 10:21:34 2016 +0100
6034
6035 crypto: marvell/cesa - fix memory leak
6036
6037 Crypto requests are not guaranteed to be finalized (->final() call),
6038 and can be freed at any moment, without getting any notification from
6039 the core. This can lead to memory leaks of the ->cache buffer.
6040
6041 Make this buffer part of the request object, and allocate an extra buffer
6042 from the DMA cache pool when doing DMA operations.
6043
6044 As a side effect, this patch also fixes another bug related to cache
6045 allocation and DMA operations. When the core allocates a new request and
6046 import an existing state, a cache buffer can be allocated (depending
6047 on the state). The problem is, at that very moment, we don't know yet
6048 whether the request will use DMA or not, and since everything is
6049 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
6050 should allocate a buffer for standard operation. But when
6051 mv_cesa_ahash_free_cache() is called, req->type has been set to
6052 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
6053 call (the buffer passed in argument has not been allocated from the pool).
6054
6055 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
6056 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
6057 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6058
6059 drivers/crypto/marvell/cesa.h | 3 +-
6060 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
6061 2 files changed, 20 insertions(+), 69 deletions(-)
6062
6063 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
6064 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
6065 Date: Thu Mar 17 10:21:35 2016 +0100
6066
6067 crypto: marvell/cesa - initialize hash states
6068
6069 ->export() might be called before we have done an update operation,
6070 and in this case the ->state field is left uninitialized.
6071 Put the correct default value when initializing the request.
6072
6073 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
6074 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
6075
6076 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
6077 1 file changed, 20 insertions(+)
6078
6079 commit 23879f055d23e82c2f78cceca22c33e631973977
6080 Author: David S. Miller <davem@davemloft.net>
6081 Date: Sun Mar 13 23:28:00 2016 -0400
6082
6083 ipv4: Don't do expensive useless work during inetdev destroy.
6084
6085 When an inetdev is destroyed, every address assigned to the interface
6086 is removed. And in this scenerio we do two pointless things which can
6087 be very expensive if the number of assigned interfaces is large:
6088
6089 1) Address promotion. We are deleting all addresses, so there is no
6090 point in doing this.
6091
6092 2) A full nf conntrack table purge for every address. We only need to
6093 do this once, as is already caught by the existing
6094 masq_dev_notifier so masq_inet_event() can skip this.
6095
6096 Reported-by: Solar Designer <solar@openwall.com>
6097 Signed-off-by: David S. Miller <davem@davemloft.net>
6098 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
6099
6100 net/ipv4/devinet.c | 4 ++++
6101 net/ipv4/fib_frontend.c | 4 ++++
6102 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
6103 3 files changed, 18 insertions(+), 2 deletions(-)
6104
6105 commit 60394231e840e884024592a76a6c5612433d3756
6106 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6107 Date: Tue Mar 8 10:34:28 2016 -0300
6108
6109 sctp: fix copying more bytes than expected in sctp_add_bind_addr
6110
6111 Dmitry reported that sctp_add_bind_addr may read more bytes than
6112 expected in case the parameter is a IPv4 addr supplied by the user
6113 through calls such as sctp_bindx_add(), because it always copies
6114 sizeof(union sctp_addr) while the buffer may be just a struct
6115 sockaddr_in, which is smaller.
6116
6117 This patch then fixes it by limiting the memcpy to the min between the
6118 union size and a (new parameter) provided addr size. Where possible this
6119 parameter still is the size of that union, except for reading from
6120 user-provided buffers, which then it accounts for protocol type.
6121
6122 Reported-by: Dmitry Vyukov <dvyukov@google.com>
6123 Tested-by: Dmitry Vyukov <dvyukov@google.com>
6124 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
6125 Signed-off-by: David S. Miller <davem@davemloft.net>
6126
6127 include/net/sctp/structs.h | 2 +-
6128 net/sctp/bind_addr.c | 14 ++++++++------
6129 net/sctp/protocol.c | 1 +
6130 net/sctp/sm_make_chunk.c | 3 ++-
6131 net/sctp/socket.c | 4 +++-
6132 5 files changed, 15 insertions(+), 9 deletions(-)
6133
6134 commit 9831caa50e1453818c5ec618890291f028b7992f
6135 Author: Brad Spengler <spender@grsecurity.net>
6136 Date: Mon Mar 28 19:20:28 2016 -0400
6137
6138 Also allow /bin/false as needed by systemd
6139
6140 kernel/kmod.c | 2 +-
6141 1 file changed, 1 insertion(+), 1 deletion(-)
6142
6143 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
6144 Author: Brad Spengler <spender@grsecurity.net>
6145 Date: Tue Mar 22 16:59:43 2016 -0400
6146
6147 Fix size_overflow FP reported by marcan at:
6148 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
6149
6150 net/ipv6/xfrm6_mode_transport.c | 2 +-
6151 1 file changed, 1 insertion(+), 1 deletion(-)
6152
6153 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
6154 Merge: 0d0ec9e c0b77a7
6155 Author: Brad Spengler <spender@grsecurity.net>
6156 Date: Wed Mar 16 20:20:40 2016 -0400
6157
6158 Merge branch 'pax-test' into grsec-test
6159
6160 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
6161 Merge: 10d57c1 0d19123
6162 Author: Brad Spengler <spender@grsecurity.net>
6163 Date: Wed Mar 16 20:20:27 2016 -0400
6164
6165 Merge branch 'linux-4.4.y' into pax-test
6166
6167 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
6168 Author: Brad Spengler <spender@grsecurity.net>
6169 Date: Mon Mar 14 20:15:47 2016 -0400
6170
6171 Invert logic to clean up code
6172
6173 fs/namei.c | 32 +++++++-------------------------
6174 grsecurity/grsec_chroot.c | 10 +++++-----
6175 2 files changed, 12 insertions(+), 30 deletions(-)
6176
6177 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
6178 Author: Brad Spengler <spender@grsecurity.net>
6179 Date: Mon Mar 14 19:59:36 2016 -0400
6180
6181 compile fix
6182
6183 fs/namei.c | 5 ++---
6184 1 file changed, 2 insertions(+), 3 deletions(-)
6185
6186 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
6187 Author: Brad Spengler <spender@grsecurity.net>
6188 Date: Mon Mar 14 19:57:53 2016 -0400
6189
6190 Also handle renames
6191
6192 fs/namei.c | 9 +++++++++
6193 1 file changed, 9 insertions(+)
6194
6195 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
6196 Author: Brad Spengler <spender@grsecurity.net>
6197 Date: Mon Mar 14 19:45:56 2016 -0400
6198
6199 Add additional check to cover lookup family of functions
6200
6201 fs/namei.c | 9 +++++++++
6202 1 file changed, 9 insertions(+)
6203
6204 commit c3df846baa7873fb99401136f220676b87452918
6205 Author: Brad Spengler <spender@grsecurity.net>
6206 Date: Mon Mar 14 18:42:37 2016 -0400
6207
6208 compile fix
6209
6210 fs/namei.c | 2 +-
6211 1 file changed, 1 insertion(+), 1 deletion(-)
6212
6213 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
6214 Author: Brad Spengler <spender@grsecurity.net>
6215 Date: Mon Mar 14 18:34:40 2016 -0400
6216
6217 Fix recent chroot check on the create side, as reported by
6218 Toralf Foerster
6219
6220 fs/namei.c | 26 ++++++++++++++++----------
6221 1 file changed, 16 insertions(+), 10 deletions(-)
6222
6223 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
6224 Author: Paolo Bonzini <pbonzini@redhat.com>
6225 Date: Tue Mar 8 12:13:39 2016 +0100
6226
6227 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
6228
6229 Yes, all of these are needed. :) This is admittedly a bit odd, but
6230 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
6231 and of course ept=0.
6232
6233 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
6234 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
6235 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
6236 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
6237 restarts execution. This will still cause a user write to fault, while
6238 supervisor writes will succeed. User reads will fault spuriously now,
6239 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
6240 will be enabled and supervisor writes disabled, going back to the
6241 originary situation where supervisor writes fault spuriously.
6242
6243 When SMEP is in effect, however, U=0 will enable kernel execution of
6244 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6245 with U=0. If the guest has not enabled NX, the result is a continuous
6246 stream of page faults due to the NX bit being reserved.
6247
6248 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
6249 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
6250 control, so they do not use user-return notifiers for EFER---if they did,
6251 EFER.NX would be forced to the same value as the host).
6252
6253 There is another bug in the reserved bit check, which I've split to a
6254 separate patch for easier application to stable kernels.
6255
6256 Cc: stable@vger.kernel.org
6257 Cc: Andy Lutomirski <luto@amacapital.net>
6258 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
6259 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
6260 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6261
6262 Documentation/virtual/kvm/mmu.txt | 3 ++-
6263 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
6264 2 files changed, 25 insertions(+), 14 deletions(-)
6265
6266 commit 802a88e57b141e9643e93afb7805813ad8da22f3
6267 Author: Paolo Bonzini <pbonzini@redhat.com>
6268 Date: Wed Mar 9 14:28:02 2016 +0100
6269
6270 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
6271
6272 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
6273 CR0.WP=1. These pages' SPTEs flip continuously between two states:
6274 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
6275 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
6276
6277 When SMEP is in effect, however, U=0 will enable kernel execution of
6278 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
6279 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
6280 When guest EFER has the NX bit cleared, the reserved bit check thinks
6281 that the latter state is invalid; teach it that the smep_andnot_wp case
6282 will also use the NX bit of SPTEs.
6283
6284 Cc: stable@vger.kernel.org
6285 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
6286 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
6287 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
6288
6289 arch/x86/kvm/mmu.c | 4 +++-
6290 1 file changed, 3 insertions(+), 1 deletion(-)
6291
6292 commit 3925851224428c1d2bca32cf33821befb947c4f3
6293 Author: Ming Lei <ming.lei@canonical.com>
6294 Date: Sat Mar 12 22:56:19 2016 +0800
6295
6296 block: don't optimize for non-cloned bio in bio_get_last_bvec()
6297
6298 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
6299 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
6300 because the start postion may have been moved in the middle of
6301 the bvec, such as splitting in the middle of bvec.
6302
6303 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
6304 Cc: stable@vger.kernel.org
6305 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
6306 Signed-off-by: Ming Lei <ming.lei@canonical.com>
6307 Signed-off-by: Jens Axboe <axboe@fb.com>
6308
6309 include/linux/bio.h | 5 -----
6310 1 file changed, 5 deletions(-)
6311
6312 commit db541463b4a0926bebdbac743c8736fb9e903d58
6313 Author: Borislav Petkov <bp@alien8.de>
6314 Date: Fri Mar 11 12:32:06 2016 +0100
6315
6316 x86/fpu: Fix eager-FPU handling on legacy FPU machines
6317
6318 i486 derived cores like Intel Quark support only the very old,
6319 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
6320 our FPU code wasn't handling the saving and restoring there
6321 properly in the 'eagerfpu' case.
6322
6323 So after we made eagerfpu the default for all CPU types:
6324
6325 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
6326
6327 these old FPU designs broke. First, Andy Shevchenko reported a splat:
6328
6329 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
6330
6331 which was us trying to execute FXRSTOR on those machines even though
6332 they don't support it.
6333
6334 After taking care of that, Bryan O'Donoghue reported that a simple FPU
6335 test still failed because we weren't initializing the FPU state properly
6336 on those machines.
6337
6338 Take care of all that.
6339
6340 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
6341 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
6342 Signed-off-by: Borislav Petkov <bp@suse.de>
6343 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
6344 Cc: Andrew Morton <akpm@linux-foundation.org>
6345 Cc: Andy Lutomirski <luto@amacapital.net>
6346 Cc: Borislav Petkov <bp@alien8.de>
6347 Cc: Brian Gerst <brgerst@gmail.com>
6348 Cc: Dave Hansen <dave.hansen@linux.intel.com>
6349 Cc: Denys Vlasenko <dvlasenk@redhat.com>
6350 Cc: Fenghua Yu <fenghua.yu@intel.com>
6351 Cc: H. Peter Anvin <hpa@zytor.com>
6352 Cc: Oleg Nesterov <oleg@redhat.com>
6353 Cc: Peter Zijlstra <peterz@infradead.org>
6354 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
6355 Cc: Thomas Gleixner <tglx@linutronix.de>
6356 Cc: Yu-cheng <yu-cheng.yu@intel.com>
6357 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
6358 Signed-off-by: Ingo Molnar <mingo@kernel.org>
6359
6360 arch/x86/kernel/fpu/core.c | 4 +++-
6361 arch/x86/kernel/fpu/init.c | 2 +-
6362 2 files changed, 4 insertions(+), 2 deletions(-)
6363
6364 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
6365 Author: Brad Spengler <spender@grsecurity.net>
6366 Date: Sun Mar 13 11:35:56 2016 -0400
6367
6368 Compile fixes
6369
6370 fs/namei.c | 2 +-
6371 grsecurity/grsec_chroot.c | 2 +-
6372 include/linux/grsecurity.h | 2 +-
6373 3 files changed, 3 insertions(+), 3 deletions(-)
6374
6375 commit aab25a3496c4683c5858056960010119fb7d9a5a
6376 Author: Brad Spengler <spender@grsecurity.net>
6377 Date: Sun Mar 13 10:53:59 2016 -0400
6378
6379 Use fput instead of put_filp()
6380
6381 fs/namei.c | 4 ++--
6382 1 file changed, 2 insertions(+), 2 deletions(-)
6383
6384 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
6385 Author: Brad Spengler <spender@grsecurity.net>
6386 Date: Sun Mar 13 10:30:54 2016 -0400
6387
6388 Update MPROTECT_COMPAT config description, disable by default
6389
6390 security/Kconfig | 18 ++++++------------
6391 1 file changed, 6 insertions(+), 12 deletions(-)
6392
6393 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
6394 Author: Brad Spengler <spender@grsecurity.net>
6395 Date: Sun Mar 13 10:35:55 2016 -0400
6396
6397 As reported by Jann Horn, chroot scenarios where the chrooting application
6398 brings in a directory fd can be used to access any file outside of the chroot
6399 via *at syscalls. To maintain compatibility with Chromium and other apps,
6400 we specifically only disallow relative accesses off a directory fd when the
6401 final path is not located under that directory described by the fd and exists
6402 outside of the chroot. This additional restriction will exist under the
6403 current GRKERNSEC_CHROOT_FCHDIR option.
6404
6405 fs/namei.c | 9 +++++++++
6406 grsecurity/Kconfig | 10 ++++++----
6407 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
6408 include/linux/grmsg.h | 1 +
6409 include/linux/grsecurity.h | 1 +
6410 5 files changed, 56 insertions(+), 4 deletions(-)
6411
6412 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
6413 Author: Brad Spengler <spender@grsecurity.net>
6414 Date: Thu Mar 10 22:17:16 2016 -0500
6415
6416 Update size_overflow hash table
6417
6418 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6419 1 file changed, 1 insertion(+)
6420
6421 commit 29f25ddda6a5625340df26beb394279fefea2b49
6422 Author: Brad Spengler <spender@grsecurity.net>
6423 Date: Thu Mar 10 22:16:04 2016 -0500
6424
6425 Fix module support
6426
6427 kernel/module.c | 3 ++-
6428 1 file changed, 2 insertions(+), 1 deletion(-)
6429
6430 commit b057a45636b626e7eaf03077ed0916b95fea054c
6431 Merge: ba5ee94 10d57c1
6432 Author: Brad Spengler <spender@grsecurity.net>
6433 Date: Thu Mar 10 21:36:10 2016 -0500
6434
6435 Merge branch 'pax-test' into grsec-test
6436
6437 commit 10d57c107e7fabffbe616b14efab73df585576c2
6438 Merge: 1cbae46 62e2195
6439 Author: Brad Spengler <spender@grsecurity.net>
6440 Date: Thu Mar 10 21:34:58 2016 -0500
6441
6442 Update to pax-linux-4.4.5-test9.patch:
6443 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
6444 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
6445 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
6446 - compile the x86 vdso without plugins, reported by Emese
6447 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
6448 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
6449
6450 Merge branch 'linux-4.4.y' into pax-test
6451
6452 commit ba5ee94199b11c1429559a08c2158677dd8f1761
6453 Author: Brad Spengler <spender@grsecurity.net>
6454 Date: Thu Mar 3 20:20:19 2016 -0500
6455
6456 Update size_overflow hash table
6457
6458 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
6459 1 file changed, 1 insertion(+)
6460
6461 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
6462 Merge: 335c04c 1cbae46
6463 Author: Brad Spengler <spender@grsecurity.net>
6464 Date: Thu Mar 3 20:04:00 2016 -0500
6465
6466 Merge branch 'pax-test' into grsec-test
6467
6468 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
6469 Merge: a51cdb8 c252409
6470 Author: Brad Spengler <spender@grsecurity.net>
6471 Date: Thu Mar 3 19:57:43 2016 -0500
6472
6473 Merge branch 'linux-4.4.y' into pax-test
6474
6475 commit 335c04c8146a696a6101a9c69dbd47f11383549e
6476 Merge: 897877e a51cdb8
6477 Author: Brad Spengler <spender@grsecurity.net>
6478 Date: Tue Mar 1 17:57:24 2016 -0500
6479
6480 Merge branch 'pax-test' into grsec-test
6481
6482 commit a51cdb83569b450858737a30d2be043d87d7ddc1
6483 Author: Brad Spengler <spender@grsecurity.net>
6484 Date: Tue Mar 1 17:56:43 2016 -0500
6485
6486 Update to pax-linux-4.4.3-test6.patch:
6487 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
6488 - fixed a few section mismatches on notifier_block variables
6489 - fixed a few REFCOUNT false positives found by Emese's plugin
6490 - constified hypervisor_x86
6491
6492 arch/x86/include/asm/hypervisor.h | 2 +-
6493 arch/x86/kernel/cpu/mshyperv.c | 2 +-
6494 arch/x86/kernel/cpu/vmware.c | 2 +-
6495 arch/x86/kernel/kvm.c | 2 +-
6496 drivers/lightnvm/rrpc.c | 4 ++--
6497 drivers/lightnvm/rrpc.h | 2 +-
6498 drivers/net/can/led.c | 2 +-
6499 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
6500 drivers/net/ethernet/rocker/rocker.c | 4 ++--
6501 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
6502 drivers/net/vrf.c | 2 +-
6503 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
6504 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
6505 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
6506 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
6507 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
6508 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
6509 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
6510 fs/proc/kcore.c | 2 +-
6511 mm/hugetlb_cgroup.c | 8 ++++----
6512 mm/mm_init.c | 2 +-
6513 mm/slub.c | 2 +-
6514 net/mac802154/iface.c | 2 +-
6515 23 files changed, 41 insertions(+), 41 deletions(-)
6516
6517 commit 897877e79629a0b854e98cb666a9d898256d45a7
6518 Merge: 1ffa5d5 4f4b213
6519 Author: Brad Spengler <spender@grsecurity.net>
6520 Date: Sun Feb 28 20:54:59 2016 -0500
6521
6522 Merge branch 'pax-test' into grsec-test
6523
6524 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
6525 Author: Brad Spengler <spender@grsecurity.net>
6526 Date: Sun Feb 28 20:54:06 2016 -0500
6527
6528 Update to pax-linux-4.4.3-test5.patch:
6529 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
6530 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
6531 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
6532 - added a generator for SIMPLE_IPA passes as well
6533
6534 include/linux/cgroup-defs.h | 2 +-
6535 include/linux/hugetlb.h | 2 +-
6536 include/linux/hugetlb_cgroup.h | 11 ++
6537 include/net/xfrm.h | 2 +-
6538 kernel/cgroup.c | 29 ++--
6539 mm/hugetlb.c | 55 ++++++-
6540 mm/hugetlb_cgroup.c | 60 ++-----
6541 mm/mmap.c | 38 ++---
6542 net/xfrm/xfrm_state.c | 4 +-
6543 tools/gcc/constify_plugin.c | 5 +-
6544 tools/gcc/gcc-common.h | 42 +++--
6545 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
6546 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
6547 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
6548 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
6549 tools/gcc/size_overflow_plugin/.gitignore | 1 +
6550 .../disable_size_overflow_hash.data | 7 +-
6551 .../size_overflow_plugin/size_overflow_hash.data | 3 -
6552 18 files changed, 385 insertions(+), 146 deletions(-)
6553
6554 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
6555 Author: Brad Spengler <spender@grsecurity.net>
6556 Date: Sun Feb 28 20:43:02 2016 -0500
6557
6558 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
6559 enabled
6560
6561 grsecurity/grsec_sig.c | 3 +--
6562 1 file changed, 1 insertion(+), 2 deletions(-)
6563
6564 commit cfdb373a77c88d01c1539e605e28143af5981571
6565 Author: Brad Spengler <spender@grsecurity.net>
6566 Date: Sun Feb 28 19:12:39 2016 -0500
6567
6568 compile fix
6569
6570 grsecurity/gracl_segv.c | 2 +-
6571 grsecurity/grsec_sig.c | 2 +-
6572 2 files changed, 2 insertions(+), 2 deletions(-)
6573
6574 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
6575 Author: Brad Spengler <spender@grsecurity.net>
6576 Date: Sun Feb 28 18:24:50 2016 -0500
6577
6578 Update the daemon check in handling of anti-bruteforcing of suid binaries
6579 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
6580 could create unprivileged copies of the suid binary via ptrace, inject
6581 code into them, and fork+exec a privileged copy. A crash then in the
6582 privileged copy would trigger the daemon detection which could be avoided
6583 by simply terminating the original process. Defeat this by using our
6584 is_privileged_binary() function against the task's mm->binfmt->file to detect
6585 an fscaps-enabled or suid/sgid binary being involved.
6586
6587 Also update the RBAC RES_CRASH code to use is_privileged_binary().
6588
6589 grsecurity/gracl_segv.c | 15 +--------------
6590 grsecurity/grsec_sig.c | 3 ++-
6591 2 files changed, 3 insertions(+), 15 deletions(-)
6592
6593 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
6594 Author: Brad Spengler <spender@grsecurity.net>
6595 Date: Sun Feb 28 15:06:32 2016 -0500
6596
6597 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
6598 could dump out an unreadable suid binary by creating a script that used
6599 that binary as an interpreter.
6600
6601 fs/exec.c | 14 +++++++++-----
6602 1 file changed, 9 insertions(+), 5 deletions(-)
6603
6604 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
6605 Merge: 2d35d52 8327ee6
6606 Author: Brad Spengler <spender@grsecurity.net>
6607 Date: Thu Feb 25 18:44:11 2016 -0500
6608
6609 Merge branch 'pax-test' into grsec-test
6610
6611 Conflicts:
6612 fs/proc/base.c
6613 kernel/ptrace.c
6614 mm/process_vm_access.c
6615
6616 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
6617 Merge: 09d53c7 2134d97
6618 Author: Brad Spengler <spender@grsecurity.net>
6619 Date: Thu Feb 25 18:36:46 2016 -0500
6620
6621 Merge branch 'linux-4.4.y' into pax-test
6622
6623 Conflicts:
6624 mm/mmap.c
6625
6626 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
6627 Author: Brad Spengler <spender@grsecurity.net>
6628 Date: Wed Feb 24 07:59:12 2016 -0500
6629
6630 Remove /proc/pid/map_files which we had previously prevented via
6631 an inverted dependency on checkpoint/restart, but clearly should have
6632 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
6633 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
6634 processes of the same UID. Thanks to Mathias Krause for the report!
6635
6636 fs/proc/base.c | 2 ++
6637 1 file changed, 2 insertions(+)
6638
6639 commit e4f1e517092222aa28179b20e14c0ddfb2796049
6640 Author: Brad Spengler <spender@grsecurity.net>
6641 Date: Thu Feb 18 19:32:39 2016 -0500
6642
6643 Update size_overflow hash table
6644
6645 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
6646 1 file changed, 131 insertions(+), 27 deletions(-)
6647
6648 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
6649 Author: Brad Spengler <spender@grsecurity.net>
6650 Date: Thu Feb 18 18:52:37 2016 -0500
6651
6652 Update size_overflow hash table
6653
6654 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
6655 1 file changed, 237 insertions(+), 56 deletions(-)
6656
6657 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
6658 Author: Brad Spengler <spender@grsecurity.net>
6659 Date: Thu Feb 18 18:23:03 2016 -0500
6660
6661 compile fix
6662
6663 tools/gcc/randomize_layout_plugin.c | 2 +-
6664 1 file changed, 1 insertion(+), 1 deletion(-)
6665
6666 commit 024d2af98b755712daff6ed7c49af921da4e8883
6667 Author: Brad Spengler <spender@grsecurity.net>
6668 Date: Thu Feb 18 18:19:47 2016 -0500
6669
6670 compile fix
6671
6672 tools/gcc/randomize_layout_plugin.c | 2 +-
6673 1 file changed, 1 insertion(+), 1 deletion(-)
6674
6675 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
6676 Author: Brad Spengler <spender@grsecurity.net>
6677 Date: Thu Feb 18 18:16:32 2016 -0500
6678
6679 compile fix
6680
6681 tools/gcc/randomize_layout_plugin.c | 9 +++++----
6682 1 file changed, 5 insertions(+), 4 deletions(-)
6683
6684 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
6685 Author: Brad Spengler <spender@grsecurity.net>
6686 Date: Thu Feb 18 17:54:51 2016 -0500
6687
6688 Compile fix
6689
6690 tools/gcc/randomize_layout_plugin.c | 2 +-
6691 1 file changed, 1 insertion(+), 1 deletion(-)
6692
6693 commit 13823395101c4228ecded4b624583389ee13bfb3
6694 Author: Brad Spengler <spender@grsecurity.net>
6695 Date: Thu Feb 18 17:35:21 2016 -0500
6696
6697 compile fix
6698
6699 Makefile | 5 +----
6700 1 file changed, 1 insertion(+), 4 deletions(-)
6701
6702 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
6703 Merge: 45cbb7e 09d53c7
6704 Author: Brad Spengler <spender@grsecurity.net>
6705 Date: Thu Feb 18 16:40:51 2016 -0500
6706
6707 Merge branch 'pax-test' into grsec-test
6708
6709 Conflicts:
6710 Makefile
6711 include/linux/genl_magic_struct.h
6712 scripts/mod/modpost.c
6713 tools/gcc/size_overflow_plugin/size_overflow_hash.data
6714
6715 commit 09d53c74140e87e886a28980cedbb7e771f2a356
6716 Author: Brad Spengler <spender@grsecurity.net>
6717 Date: Thu Feb 18 16:24:02 2016 -0500
6718
6719 Update to pax-linux-4.4.2-test4.patch:
6720 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
6721 - moved gcc plugin related makefile bits into a separate file, by Emese
6722 - changed modpost to report writable function pointers separately
6723 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
6724 - reduced the size of the compat syscall entry points on amd64
6725 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
6726 - Emese regenerated the size overflow hash table for 4.4
6727 - all plugins now use the new pass generator headers
6728
6729 Makefile | 73 +-
6730 arch/x86/entry/entry_64.S | 2 +-
6731 arch/x86/entry/entry_64_compat.S | 48 +-
6732 fs/exec.c | 3 +
6733 include/linux/genl_magic_struct.h | 4 +-
6734 include/linux/memcontrol.h | 2 +-
6735 ipc/shm.c | 2 +-
6736 mm/memcontrol.c | 6 +-
6737 scripts/Makefile.extrawarn | 4 +
6738 scripts/Makefile.gcc-plugins | 69 +
6739 scripts/mod/modpost.c | 15 +-
6740 tools/gcc/checker_plugin.c | 71 +-
6741 tools/gcc/colorize_plugin.c | 65 +-
6742 tools/gcc/constify_plugin.c | 65 +-
6743 tools/gcc/gcc-generate-gimple-pass.h | 172 +
6744 tools/gcc/gcc-generate-ipa-pass.h | 286 +
6745 tools/gcc/gcc-generate-rtl-pass.h | 172 +
6746 tools/gcc/initify_plugin.c | 74 +-
6747 tools/gcc/kallocstat_plugin.c | 65 +-
6748 tools/gcc/kernexec_plugin.c | 184 +-
6749 tools/gcc/latent_entropy_plugin.c | 71 +-
6750 tools/gcc/randomize_layout_seed.h | 1 -
6751 .../disable_size_overflow_hash.h | 152601 ------------------
6752 .../insert_size_overflow_asm.c | 71 +-
6753 .../size_overflow_plugin/intentional_overflow.c | 6 +-
6754 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
6755 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
6756 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
6757 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
6758 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
6759 .../size_overflow_transform_core.c | 2 +-
6760 tools/gcc/stackleak_plugin.c | 132 +-
6761 tools/gcc/structleak_plugin.c | 67 +-
6762 33 files changed, 2238 insertions(+), 155123 deletions(-)
6763
6764 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
6765 Merge: 3b5448b 0c85110
6766 Author: Brad Spengler <spender@grsecurity.net>
6767 Date: Wed Feb 17 19:11:25 2016 -0500
6768
6769 Merge branch 'pax-test' into grsec-test
6770
6771 commit 0c851109f683896aaff8a310bbfa943272b47516
6772 Merge: 6cb4f49 1cb8570
6773 Author: Brad Spengler <spender@grsecurity.net>
6774 Date: Wed Feb 17 19:11:21 2016 -0500
6775
6776 Merge branch 'linux-4.4.y' into pax-test
6777
6778 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
6779 Author: Brad Spengler <spender@grsecurity.net>
6780 Date: Mon Feb 15 18:02:40 2016 -0500
6781
6782 Fix a drbd bug reported by iamb on the forums:
6783 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
6784 which caused a size_overflow report
6785
6786 include/linux/genl_magic_struct.h | 4 ++--
6787 1 file changed, 2 insertions(+), 2 deletions(-)
6788
6789 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
6790 Author: Brad Spengler <spender@grsecurity.net>
6791 Date: Mon Feb 15 13:20:38 2016 -0500
6792
6793 compile fix
6794
6795 drivers/staging/wilc1000/host_interface.h | 1 +
6796 1 file changed, 1 insertion(+)
6797
6798 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
6799 Author: Brad Spengler <spender@grsecurity.net>
6800 Date: Mon Feb 15 12:54:52 2016 -0500
6801
6802 Update size_overflow hash table
6803
6804 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
6805 1 file changed, 17 insertions(+), 4 deletions(-)
6806
6807 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
6808 Author: Brad Spengler <spender@grsecurity.net>
6809 Date: Mon Feb 15 12:53:54 2016 -0500
6810
6811 compile fix
6812
6813 drivers/staging/wilc1000/wilc_spi.c | 1 -
6814 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
6815 2 files changed, 1 insertion(+), 2 deletions(-)
6816
6817 commit a9dd4481db099082967585be8e153899e5fd24c7
6818 Author: Brad Spengler <spender@grsecurity.net>
6819 Date: Mon Feb 15 12:52:32 2016 -0500
6820
6821 compile fix
6822
6823 fs/proc/fd.c | 2 --
6824 1 file changed, 2 deletions(-)
6825
6826 commit 5acb4fa0063460807096429f073181d1c5a3e566
6827 Author: Brad Spengler <spender@grsecurity.net>
6828 Date: Mon Feb 15 12:32:13 2016 -0500
6829
6830 Update size_overflow hash table
6831
6832 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
6833 1 file changed, 182 insertions(+), 42 deletions(-)
6834
6835 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
6836 Author: Brad Spengler <spender@grsecurity.net>
6837 Date: Mon Feb 15 12:31:16 2016 -0500
6838
6839 compile fix
6840
6841 drivers/staging/wilc1000/wilc_spi.c | 1 +
6842 1 file changed, 1 insertion(+)
6843
6844 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
6845 Author: Brad Spengler <spender@grsecurity.net>
6846 Date: Mon Feb 15 12:28:36 2016 -0500
6847
6848 RANDSTRUCT compile fix
6849
6850 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
6851 1 file changed, 16 insertions(+), 16 deletions(-)
6852
6853 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
6854 Author: Brad Spengler <spender@grsecurity.net>
6855 Date: Mon Feb 15 12:24:49 2016 -0500
6856
6857 RANDSTRUCT compile fix
6858
6859 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
6860 1 file changed, 17 insertions(+), 17 deletions(-)
6861
6862 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
6863 Author: Hariprasad S <hariprasad@chelsio.com>
6864 Date: Fri Dec 11 13:59:17 2015 +0530
6865
6866 iw_cxgb3: Fix incorrectly returning error on success
6867
6868 The cxgb3_*_send() functions return NET_XMIT_ values, which are
6869 positive integers values. So don't treat positive return values
6870 as an error.
6871
6872 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
6873 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
6874 Signed-off-by: Doug Ledford <dledford@redhat.com>
6875
6876 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
6877 1 file changed, 2 insertions(+), 2 deletions(-)
6878
6879 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
6880 Author: Daniel Borkmann <daniel@iogearbox.net>
6881 Date: Wed Feb 10 16:47:11 2016 +0100
6882
6883 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
6884
6885 When ctx access is used, the kernel often needs to expand/rewrite
6886 instructions, so after that patching, branch offsets have to be
6887 adjusted for both forward and backward jumps in the new eBPF program,
6888 but for backward jumps it fails to account the delta. Meaning, for
6889 example, if the expansion happens exactly on the insn that sits at
6890 the jump target, it doesn't fix up the back jump offset.
6891
6892 Analysis on what the check in adjust_branches() is currently doing:
6893
6894 /* adjust offset of jmps if necessary */
6895 if (i < pos && i + insn->off + 1 > pos)
6896 insn->off += delta;
6897 else if (i > pos && i + insn->off + 1 < pos)
6898 insn->off -= delta;
6899
6900 First condition (forward jumps):
6901
6902 Before: After:
6903
6904 insns[0] insns[0]
6905 insns[1] <--- i/insn insns[1] <--- i/insn
6906 insns[2] <--- pos insns[P] <--- pos
6907 insns[3] insns[P] `------| delta
6908 insns[4] <--- target_X insns[P] `-----|
6909 insns[5] insns[3]
6910 insns[4] <--- target_X
6911 insns[5]
6912
6913 First case is if we cross pos-boundary and the jump instruction was
6914 before pos. This is handeled correctly. I.e. if i == pos, then this
6915 would mean our jump that we currently check was the patchlet itself
6916 that we just injected. Since such patchlets are self-contained and
6917 have no awareness of any insns before or after the patched one, the
6918 delta is correctly not adjusted. Also, for the second condition in
6919 case of i + insn->off + 1 == pos, means we jump to that newly patched
6920 instruction, so no offset adjustment are needed. That part is correct.
6921
6922 Second condition (backward jumps):
6923
6924 Before: After:
6925
6926 insns[0] insns[0]
6927 insns[1] <--- target_X insns[1] <--- target_X
6928 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
6929 insns[3] insns[P] `------| delta
6930 insns[4] <--- i/insn insns[P] `-----|
6931 insns[5] insns[3]
6932 insns[4] <--- i/insn
6933 insns[5]
6934
6935 Second interesting case is where we cross pos-boundary and the jump
6936 instruction was after pos. Backward jump with i == pos would be
6937 impossible and pose a bug somewhere in the patchlet, so the first
6938 condition checking i > pos is okay only by itself. However, i +
6939 insn->off + 1 < pos does not always work as intended to trigger the
6940 adjustment. It works when jump targets would be far off where the
6941 delta wouldn't matter. But, for example, where the fixed insn->off
6942 before pointed to pos (target_Y), it now points to pos + delta, so
6943 that additional room needs to be taken into account for the check.
6944 This means that i) both tests here need to be adjusted into pos + delta,
6945 and ii) for the second condition, the test needs to be <= as pos
6946 itself can be a target in the backjump, too.
6947
6948 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
6949 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
6950 Signed-off-by: David S. Miller <davem@davemloft.net>
6951
6952 kernel/bpf/verifier.c | 2 +-
6953 1 file changed, 1 insertion(+), 1 deletion(-)
6954
6955 commit 61b513b644116e77313addf65970db58f4981608
6956 Author: Ryan Ware <ware@linux.intel.com>
6957 Date: Thu Feb 11 15:58:44 2016 -0800
6958
6959 EVM: Use crypto_memneq() for digest comparisons
6960
6961 This patch fixes vulnerability CVE-2016-2085. The problem exists
6962 because the vm_verify_hmac() function includes a use of memcmp().
6963 Unfortunately, this allows timing side channel attacks; specifically
6964 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
6965 the memcmp() to the cryptographically safe crypto_memneq().
6966
6967 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
6968 Signed-off-by: Ryan Ware <ware@linux.intel.com>
6969 Cc: stable@vger.kernel.org
6970 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
6971 Signed-off-by: James Morris <james.l.morris@oracle.com>
6972
6973 security/integrity/evm/evm_main.c | 3 ++-
6974 1 file changed, 2 insertions(+), 1 deletion(-)
6975
6976 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
6977 Author: Michael McConville <mmcco@mykolab.com>
6978 Date: Fri Feb 5 20:46:25 2016 -0500
6979
6980 dscc4: Undefined signed int shift
6981
6982 My analysis in the below mail applies, although the second part is
6983 unnecessary because i isn't used in arithmetic operations here:
6984
6985 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
6986
6987 Thanks for your time.
6988
6989 Signed-off-by: Michael McConville <mmcco@mykolab.com>
6990 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
6991 Signed-off-by: David S. Miller <davem@davemloft.net>
6992
6993 drivers/net/wan/dscc4.c | 2 +-
6994 1 file changed, 1 insertion(+), 1 deletion(-)
6995
6996 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
6997 Author: Andrey Konovalov <andreyknvl@gmail.com>
6998 Date: Sat Feb 13 11:08:06 2016 +0300
6999
7000 ALSA: usb-audio: avoid freeing umidi object twice
7001
7002 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
7003 when tearing down the rawmidi interface. So we shouldn't try to free it
7004 in snd_usbmidi_create() after having registered the rawmidi interface.
7005
7006 Found by KASAN.
7007
7008 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
7009 Acked-by: Clemens Ladisch <clemens@ladisch.de>
7010 Cc: <stable@vger.kernel.org>
7011 Signed-off-by: Takashi Iwai <tiwai@suse.de>
7012
7013 sound/usb/midi.c | 1 -
7014 1 file changed, 1 deletion(-)
7015
7016 commit ed3a8ab1976674d56e258da93639e61f1446e703
7017 Author: zengtao <prime.zeng@huawei.com>
7018 Date: Tue Feb 2 11:38:34 2016 +0800
7019
7020 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
7021
7022 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
7023 overflows in the timeval/timespec to cputime conversion.
7024
7025 Currently the following functions are affected:
7026 1. setitimer()
7027 2. timer_create/timer_settime()
7028 3. sys_clock_nanosleep
7029
7030 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
7031 enabled, which is required for CONFIG_NO_HZ_FULL.
7032
7033 Enforce u64 conversion to prevent the overflow.
7034
7035 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
7036 Signed-off-by: zengtao <prime.zeng@huawei.com>
7037 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
7038 Cc: <fweisbec@gmail.com>
7039 Cc: stable@vger.kernel.org
7040 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
7041 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
7042
7043 include/asm-generic/cputime_nsecs.h | 5 +++--
7044 1 file changed, 3 insertions(+), 2 deletions(-)
7045
7046 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
7047 Author: Brad Spengler <spender@grsecurity.net>
7048 Date: Mon Feb 15 11:55:18 2016 -0500
7049
7050 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
7051 count as actual mismatches
7052
7053 scripts/mod/modpost.c | 3 ++-
7054 1 file changed, 2 insertions(+), 1 deletion(-)
7055
7056 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
7057 Author: Brad Spengler <spender@grsecurity.net>
7058 Date: Mon Feb 15 11:44:36 2016 -0500
7059
7060 Compile fix
7061
7062 tools/gcc/randomize_layout_seed.h | 1 -
7063 1 file changed, 1 deletion(-)
7064
7065 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
7066 Author: Brad Spengler <spender@grsecurity.net>
7067 Date: Mon Feb 15 11:27:32 2016 -0500
7068
7069 disable USELIB
7070
7071 init/Kconfig | 3 ++-
7072 1 file changed, 2 insertions(+), 1 deletion(-)
7073
7074 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
7075 Author: Brad Spengler <spender@grsecurity.net>
7076 Date: Mon Feb 15 11:23:56 2016 -0500
7077
7078 compile fix
7079
7080 fs/proc/fd.c | 2 +-
7081 1 file changed, 1 insertion(+), 1 deletion(-)
7082
7083 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
7084 Author: Brad Spengler <spender@grsecurity.net>
7085 Date: Mon Feb 15 11:19:26 2016 -0500
7086
7087 Initial import of grsecurity for Linux 4.4.1
7088
7089 Documentation/dontdiff | 2 +
7090 Documentation/kernel-parameters.txt | 11 +
7091 Documentation/sysctl/fs.txt | 23 +
7092 Documentation/sysctl/kernel.txt | 15 +
7093 Makefile | 18 +-
7094 arch/alpha/include/asm/cache.h | 4 +-
7095 arch/alpha/kernel/osf_sys.c | 12 +-
7096 arch/arc/Kconfig | 1 +
7097 arch/arm/Kconfig | 1 +
7098 arch/arm/Kconfig.debug | 1 +
7099 arch/arm/include/asm/thread_info.h | 7 +-
7100 arch/arm/kernel/entry-common.S | 8 +-
7101 arch/arm/kernel/process.c | 4 +-
7102 arch/arm/kernel/ptrace.c | 9 +
7103 arch/arm/kernel/traps.c | 7 +-
7104 arch/arm/mm/Kconfig | 4 +-
7105 arch/arm/mm/fault.c | 40 +-
7106 arch/arm/mm/mmap.c | 8 +-
7107 arch/arm/net/bpf_jit_32.c | 51 +-
7108 arch/arm64/Kconfig.debug | 1 +
7109 arch/avr32/include/asm/cache.h | 4 +-
7110 arch/blackfin/Kconfig.debug | 1 +
7111 arch/blackfin/include/asm/cache.h | 3 +-
7112 arch/cris/include/arch-v10/arch/cache.h | 3 +-
7113 arch/cris/include/arch-v32/arch/cache.h | 3 +-
7114 arch/frv/include/asm/cache.h | 3 +-
7115 arch/frv/mm/elf-fdpic.c | 4 +-
7116 arch/hexagon/include/asm/cache.h | 6 +-
7117 arch/ia64/Kconfig | 1 +
7118 arch/ia64/include/asm/cache.h | 3 +-
7119 arch/ia64/kernel/sys_ia64.c | 2 +
7120 arch/ia64/mm/hugetlbpage.c | 2 +
7121 arch/m32r/include/asm/cache.h | 4 +-
7122 arch/m68k/include/asm/cache.h | 4 +-
7123 arch/metag/mm/hugetlbpage.c | 1 +
7124 arch/microblaze/include/asm/cache.h | 3 +-
7125 arch/mips/Kconfig | 1 +
7126 arch/mips/include/asm/cache.h | 3 +-
7127 arch/mips/include/asm/thread_info.h | 11 +-
7128 arch/mips/kernel/irq.c | 3 +
7129 arch/mips/kernel/ptrace.c | 9 +
7130 arch/mips/mm/mmap.c | 4 +-
7131 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
7132 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
7133 arch/openrisc/include/asm/cache.h | 4 +-
7134 arch/parisc/include/asm/cache.h | 3 +
7135 arch/parisc/kernel/sys_parisc.c | 4 +
7136 arch/powerpc/Kconfig | 1 +
7137 arch/powerpc/include/asm/cache.h | 4 +-
7138 arch/powerpc/include/asm/thread_info.h | 5 +-
7139 arch/powerpc/kernel/Makefile | 2 +
7140 arch/powerpc/kernel/irq.c | 3 +
7141 arch/powerpc/kernel/process.c | 10 +-
7142 arch/powerpc/kernel/ptrace.c | 14 +
7143 arch/powerpc/kernel/traps.c | 5 +
7144 arch/powerpc/mm/slice.c | 2 +-
7145 arch/s390/Kconfig.debug | 1 +
7146 arch/s390/include/asm/cache.h | 4 +-
7147 arch/score/include/asm/cache.h | 4 +-
7148 arch/sh/include/asm/cache.h | 3 +-
7149 arch/sh/mm/mmap.c | 6 +-
7150 arch/sparc/include/asm/cache.h | 4 +-
7151 arch/sparc/include/asm/pgalloc_64.h | 1 +
7152 arch/sparc/include/asm/thread_info_64.h | 8 +-
7153 arch/sparc/kernel/process_32.c | 6 +-
7154 arch/sparc/kernel/process_64.c | 8 +-
7155 arch/sparc/kernel/ptrace_64.c | 14 +
7156 arch/sparc/kernel/sys_sparc_64.c | 8 +-
7157 arch/sparc/kernel/syscalls.S | 8 +-
7158 arch/sparc/kernel/traps_32.c | 8 +-
7159 arch/sparc/kernel/traps_64.c | 28 +-
7160 arch/sparc/kernel/unaligned_64.c | 2 +-
7161 arch/sparc/mm/fault_64.c | 2 +-
7162 arch/sparc/mm/hugetlbpage.c | 15 +-
7163 arch/tile/Kconfig | 1 +
7164 arch/tile/include/asm/cache.h | 3 +-
7165 arch/tile/mm/hugetlbpage.c | 2 +
7166 arch/um/include/asm/cache.h | 3 +-
7167 arch/unicore32/include/asm/cache.h | 6 +-
7168 arch/x86/Kconfig | 21 +
7169 arch/x86/Kconfig.debug | 2 +
7170 arch/x86/entry/common.c | 14 +
7171 arch/x86/entry/entry_32.S | 2 +-
7172 arch/x86/entry/entry_64.S | 2 +-
7173 arch/x86/ia32/ia32_aout.c | 2 +
7174 arch/x86/include/asm/floppy.h | 20 +-
7175 arch/x86/include/asm/fpu/types.h | 69 +-
7176 arch/x86/include/asm/io.h | 2 +-
7177 arch/x86/include/asm/page.h | 12 +-
7178 arch/x86/include/asm/paravirt_types.h | 23 +-
7179 arch/x86/include/asm/pgtable_types.h | 6 +-
7180 arch/x86/include/asm/processor.h | 12 +-
7181 arch/x86/include/asm/thread_info.h | 6 +-
7182 arch/x86/include/asm/uaccess.h | 2 +-
7183 arch/x86/kernel/dumpstack.c | 10 +-
7184 arch/x86/kernel/dumpstack_32.c | 2 +-
7185 arch/x86/kernel/dumpstack_64.c | 2 +-
7186 arch/x86/kernel/ioport.c | 13 +
7187 arch/x86/kernel/irq_32.c | 3 +
7188 arch/x86/kernel/irq_64.c | 4 +
7189 arch/x86/kernel/ldt.c | 18 +
7190 arch/x86/kernel/msr.c | 10 +
7191 arch/x86/kernel/ptrace.c | 14 +
7192 arch/x86/kernel/signal.c | 9 +-
7193 arch/x86/kernel/sys_i386_32.c | 9 +-
7194 arch/x86/kernel/sys_x86_64.c | 8 +-
7195 arch/x86/kernel/traps.c | 5 +
7196 arch/x86/kernel/verify_cpu.S | 1 +
7197 arch/x86/kernel/vm86_32.c | 15 +
7198 arch/x86/mm/fault.c | 12 +-
7199 arch/x86/mm/hugetlbpage.c | 15 +-
7200 arch/x86/mm/init.c | 66 +-
7201 arch/x86/mm/init_32.c | 6 +-
7202 arch/x86/mm/pageattr.c | 4 +-
7203 arch/x86/net/bpf_jit_comp.c | 4 +
7204 arch/x86/platform/efi/efi_64.c | 2 +-
7205 arch/x86/xen/Kconfig | 1 +
7206 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
7207 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
7208 crypto/scatterwalk.c | 10 +-
7209 drivers/acpi/acpica/hwxfsleep.c | 11 +-
7210 drivers/acpi/custom_method.c | 4 +
7211 drivers/block/cciss.h | 30 +-
7212 drivers/block/smart1,2.h | 40 +-
7213 drivers/cdrom/cdrom.c | 2 +-
7214 drivers/char/Kconfig | 4 +-
7215 drivers/char/genrtc.c | 1 +
7216 drivers/char/mem.c | 17 +
7217 drivers/char/random.c | 5 +-
7218 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
7219 drivers/firewire/ohci.c | 4 +
7220 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
7221 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
7222 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
7223 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
7224 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
7225 drivers/hid/hid-wiimote-debug.c | 2 +-
7226 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
7227 drivers/iommu/Kconfig | 1 +
7228 drivers/iommu/amd_iommu.c | 14 +-
7229 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
7230 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
7231 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
7232 drivers/isdn/i4l/isdn_concap.c | 6 +-
7233 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
7234 drivers/md/bcache/Kconfig | 1 +
7235 drivers/md/raid5.c | 8 +
7236 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
7237 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
7238 drivers/media/radio/radio-cadet.c | 5 +-
7239 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
7240 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
7241 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
7242 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
7243 drivers/message/fusion/mptbase.c | 9 +
7244 drivers/misc/sgi-xp/xp_main.c | 12 +-
7245 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
7246 drivers/net/ppp/pptp.c | 34 +-
7247 drivers/net/wan/lmc/lmc_media.c | 97 +-
7248 drivers/net/wan/z85230.c | 24 +-
7249 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
7250 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
7251 drivers/pci/proc.c | 9 +
7252 drivers/platform/x86/asus-wmi.c | 12 +
7253 drivers/rtc/rtc-dev.c | 3 +
7254 drivers/scsi/bfa/bfa_fcs.c | 19 +-
7255 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
7256 drivers/scsi/bfa/bfa_modules.h | 12 +-
7257 drivers/scsi/hpsa.h | 40 +-
7258 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
7259 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
7260 drivers/tty/serial/uartlite.c | 4 +-
7261 drivers/tty/sysrq.c | 2 +-
7262 drivers/tty/tty_io.c | 4 +
7263 drivers/tty/vt/keyboard.c | 22 +-
7264 drivers/uio/uio.c | 6 +-
7265 drivers/usb/core/hub.c | 5 +
7266 drivers/usb/gadget/function/f_uac1.c | 1 +
7267 drivers/usb/gadget/function/u_uac1.c | 1 +
7268 drivers/usb/host/hwa-hc.c | 9 +-
7269 drivers/usb/usbip/vhci_sysfs.c | 2 +-
7270 drivers/video/fbdev/arcfb.c | 2 +-
7271 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
7272 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
7273 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
7274 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
7275 drivers/xen/xenfs/xenstored.c | 5 +
7276 firmware/Makefile | 2 +
7277 firmware/WHENCE | 20 +-
7278 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
7279 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
7280 fs/attr.c | 4 +
7281 fs/autofs4/waitq.c | 9 +
7282 fs/binfmt_aout.c | 7 +
7283 fs/binfmt_elf.c | 40 +-
7284 fs/compat.c | 20 +-
7285 fs/compat_ioctl.c | 253 +-
7286 fs/coredump.c | 17 +-
7287 fs/dcache.c | 3 +
7288 fs/debugfs/inode.c | 11 +-
7289 fs/exec.c | 231 +-
7290 fs/ext2/balloc.c | 4 +-
7291 fs/ext2/super.c | 8 +-
7292 fs/ext4/balloc.c | 4 +-
7293 fs/ext4/extents.c | 2 +-
7294 fs/fcntl.c | 4 +
7295 fs/fhandle.c | 3 +-
7296 fs/file.c | 4 +
7297 fs/filesystems.c | 4 +
7298 fs/fs_struct.c | 20 +-
7299 fs/hugetlbfs/inode.c | 24 +-
7300 fs/inode.c | 8 +-
7301 fs/internal.h | 7 +
7302 fs/ioctl.c | 4 +-
7303 fs/kernfs/dir.c | 6 +
7304 fs/mount.h | 4 +-
7305 fs/namei.c | 283 +-
7306 fs/namespace.c | 24 +
7307 fs/nfsd/nfscache.c | 2 +-
7308 fs/open.c | 38 +
7309 fs/overlayfs/inode.c | 3 +
7310 fs/overlayfs/super.c | 6 +-
7311 fs/pipe.c | 49 +-
7312 fs/posix_acl.c | 15 +-
7313 fs/proc/Kconfig | 10 +-
7314 fs/proc/array.c | 69 +-
7315 fs/proc/base.c | 186 +-
7316 fs/proc/cmdline.c | 4 +
7317 fs/proc/devices.c | 4 +
7318 fs/proc/fd.c | 12 +-
7319 fs/proc/generic.c | 64 +
7320 fs/proc/inode.c | 17 +
7321 fs/proc/internal.h | 11 +-
7322 fs/proc/interrupts.c | 4 +
7323 fs/proc/kcore.c | 3 +
7324 fs/proc/namespaces.c | 4 +-
7325 fs/proc/proc_net.c | 31 +
7326 fs/proc/proc_sysctl.c | 52 +-
7327 fs/proc/root.c | 8 +
7328 fs/proc/stat.c | 69 +-
7329 fs/proc/task_mmu.c | 66 +-
7330 fs/readdir.c | 19 +
7331 fs/reiserfs/item_ops.c | 24 +-
7332 fs/reiserfs/super.c | 4 +
7333 fs/select.c | 2 +
7334 fs/seq_file.c | 30 +-
7335 fs/stat.c | 20 +-
7336 fs/sysfs/dir.c | 30 +-
7337 fs/utimes.c | 7 +
7338 fs/xattr.c | 26 +-
7339 grsecurity/Kconfig | 1203 ++++
7340 grsecurity/Makefile | 54 +
7341 grsecurity/gracl.c | 2757 +++++++++
7342 grsecurity/gracl_alloc.c | 105 +
7343 grsecurity/gracl_cap.c | 127 +
7344 grsecurity/gracl_compat.c | 269 +
7345 grsecurity/gracl_fs.c | 448 ++
7346 grsecurity/gracl_ip.c | 386 ++
7347 grsecurity/gracl_learn.c | 207 +
7348 grsecurity/gracl_policy.c | 1786 ++++++
7349 grsecurity/gracl_res.c | 68 +
7350 grsecurity/gracl_segv.c | 304 +
7351 grsecurity/gracl_shm.c | 40 +
7352 grsecurity/grsec_chdir.c | 19 +
7353 grsecurity/grsec_chroot.c | 467 ++
7354 grsecurity/grsec_disabled.c | 445 ++
7355 grsecurity/grsec_exec.c | 189 +
7356 grsecurity/grsec_fifo.c | 26 +
7357 grsecurity/grsec_fork.c | 23 +
7358 grsecurity/grsec_init.c | 294 +
7359 grsecurity/grsec_ipc.c | 48 +
7360 grsecurity/grsec_link.c | 65 +
7361 grsecurity/grsec_log.c | 340 +
7362 grsecurity/grsec_mem.c | 48 +
7363 grsecurity/grsec_mount.c | 65 +
7364 grsecurity/grsec_pax.c | 47 +
7365 grsecurity/grsec_proc.c | 20 +
7366 grsecurity/grsec_ptrace.c | 30 +
7367 grsecurity/grsec_sig.c | 245 +
7368 grsecurity/grsec_sock.c | 244 +
7369 grsecurity/grsec_sysctl.c | 497 ++
7370 grsecurity/grsec_time.c | 16 +
7371 grsecurity/grsec_tpe.c | 78 +
7372 grsecurity/grsec_tty.c | 18 +
7373 grsecurity/grsec_usb.c | 15 +
7374 grsecurity/grsum.c | 54 +
7375 include/linux/binfmts.h | 5 +-
7376 include/linux/capability.h | 13 +
7377 include/linux/compiler-gcc.h | 5 +
7378 include/linux/compiler.h | 8 +
7379 include/linux/cred.h | 8 +-
7380 include/linux/dcache.h | 5 +-
7381 include/linux/fs.h | 26 +-
7382 include/linux/fs_struct.h | 2 +-
7383 include/linux/fsnotify.h | 6 +
7384 include/linux/gracl.h | 342 ++
7385 include/linux/gracl_compat.h | 156 +
7386 include/linux/gralloc.h | 9 +
7387 include/linux/grdefs.h | 140 +
7388 include/linux/grinternal.h | 231 +
7389 include/linux/grmsg.h | 119 +
7390 include/linux/grsecurity.h | 258 +
7391 include/linux/grsock.h | 19 +
7392 include/linux/ipc.h | 2 +-
7393 include/linux/ipc_namespace.h | 2 +-
7394 include/linux/kallsyms.h | 18 +-
7395 include/linux/key-type.h | 4 +-
7396 include/linux/kmod.h | 5 +
7397 include/linux/kobject.h | 2 +-
7398 include/linux/lsm_hooks.h | 4 +-
7399 include/linux/mm.h | 12 +
7400 include/linux/mm_types.h | 4 +-
7401 include/linux/module.h | 5 +-
7402 include/linux/mount.h | 2 +-
7403 include/linux/msg.h | 2 +-
7404 include/linux/netfilter/xt_gradm.h | 9 +
7405 include/linux/path.h | 4 +-
7406 include/linux/perf_event.h | 13 +-
7407 include/linux/pid_namespace.h | 2 +-
7408 include/linux/pipe_fs_i.h | 4 +
7409 include/linux/poison.h | 2 +-
7410 include/linux/printk.h | 2 +-
7411 include/linux/proc_fs.h | 22 +-
7412 include/linux/proc_ns.h | 2 +-
7413 include/linux/ptrace.h | 24 +-
7414 include/linux/radix-tree.h | 22 +-
7415 include/linux/random.h | 2 +-
7416 include/linux/rbtree_augmented.h | 4 +-
7417 include/linux/scatterlist.h | 12 +-
7418 include/linux/sched.h | 115 +-
7419 include/linux/security.h | 1 +
7420 include/linux/sem.h | 2 +-
7421 include/linux/seq_file.h | 5 +
7422 include/linux/shm.h | 6 +-
7423 include/linux/shmem_fs.h | 5 +-
7424 include/linux/skbuff.h | 3 +
7425 include/linux/slab.h | 9 -
7426 include/linux/sysctl.h | 8 +-
7427 include/linux/thread_info.h | 6 +-
7428 include/linux/tty.h | 2 +-
7429 include/linux/tty_driver.h | 4 +-
7430 include/linux/uidgid.h | 5 +
7431 include/linux/user_namespace.h | 2 +-
7432 include/linux/utsname.h | 2 +-
7433 include/linux/vermagic.h | 16 +-
7434 include/linux/vmalloc.h | 8 +
7435 include/net/af_unix.h | 6 +-
7436 include/net/ip.h | 2 +-
7437 include/net/neighbour.h | 2 +-
7438 include/net/net_namespace.h | 2 +-
7439 include/net/netfilter/nf_conntrack_core.h | 8 +-
7440 include/net/scm.h | 1 +
7441 include/net/sock.h | 2 +-
7442 include/trace/events/fs.h | 53 +
7443 include/uapi/linux/personality.h | 1 +
7444 init/Kconfig | 2 +
7445 init/main.c | 46 +-
7446 ipc/mqueue.c | 1 +
7447 ipc/msg.c | 3 +-
7448 ipc/msgutil.c | 4 +-
7449 ipc/sem.c | 3 +-
7450 ipc/shm.c | 26 +-
7451 ipc/util.c | 6 +
7452 kernel/auditsc.c | 2 +-
7453 kernel/bpf/syscall.c | 10 +-
7454 kernel/capability.c | 41 +-
7455 kernel/cgroup.c | 5 +-
7456 kernel/compat.c | 1 +
7457 kernel/configs.c | 11 +
7458 kernel/cred.c | 112 +-
7459 kernel/events/core.c | 16 +-
7460 kernel/exit.c | 10 +-
7461 kernel/fork.c | 86 +-
7462 kernel/futex.c | 6 +-
7463 kernel/futex_compat.c | 2 +-
7464 kernel/kallsyms.c | 9 +
7465 kernel/kcmp.c | 8 +-
7466 kernel/kexec_core.c | 2 +-
7467 kernel/kmod.c | 96 +-
7468 kernel/kprobes.c | 9 +-
7469 kernel/ksysfs.c | 2 +
7470 kernel/locking/lockdep_proc.c | 10 +-
7471 kernel/module.c | 108 +-
7472 kernel/panic.c | 4 +-
7473 kernel/pid.c | 18 +-
7474 kernel/power/Kconfig | 2 +
7475 kernel/printk/printk.c | 7 +-
7476 kernel/ptrace.c | 89 +-
7477 kernel/resource.c | 10 +
7478 kernel/sched/core.c | 11 +-
7479 kernel/seccomp.c | 22 +-
7480 kernel/signal.c | 37 +-
7481 kernel/sys.c | 64 +-
7482 kernel/sysctl.c | 186 +-
7483 kernel/taskstats.c | 6 +
7484 kernel/time/posix-timers.c | 8 +
7485 kernel/time/time.c | 5 +
7486 kernel/time/timekeeping.c | 3 +
7487 kernel/time/timer_list.c | 13 +-
7488 kernel/time/timer_stats.c | 10 +-
7489 kernel/trace/Kconfig | 2 +
7490 kernel/trace/trace_syscalls.c | 8 +
7491 kernel/user_namespace.c | 15 +
7492 lib/Kconfig.debug | 13 +-
7493 lib/Kconfig.kasan | 2 +-
7494 lib/is_single_threaded.c | 3 +
7495 lib/list_debug.c | 65 +-
7496 lib/nlattr.c | 2 +
7497 lib/radix-tree.c | 12 +-
7498 lib/rbtree.c | 4 +-
7499 lib/vsprintf.c | 39 +-
7500 localversion-grsec | 1 +
7501 mm/Kconfig | 8 +-
7502 mm/Kconfig.debug | 1 +
7503 mm/filemap.c | 1 +
7504 mm/kmemleak.c | 4 +-
7505 mm/memory.c | 2 +-
7506 mm/mempolicy.c | 12 +-
7507 mm/migrate.c | 3 +-
7508 mm/mlock.c | 11 +-
7509 mm/mmap.c | 103 +-
7510 mm/mprotect.c | 8 +
7511 mm/oom_kill.c | 4 +
7512 mm/page_alloc.c | 2 +-
7513 mm/process_vm_access.c | 8 +-
7514 mm/shmem.c | 11 +-
7515 mm/slab.c | 14 +-
7516 mm/slab_common.c | 2 +-
7517 mm/slob.c | 12 +
7518 mm/slub.c | 33 +-
7519 mm/util.c | 3 +
7520 mm/vmalloc.c | 82 +-
7521 mm/vmstat.c | 29 +-
7522 net/appletalk/atalk_proc.c | 2 +-
7523 net/atm/lec.c | 6 +-
7524 net/atm/mpoa_caches.c | 42 +-
7525 net/can/bcm.c | 2 +-
7526 net/can/proc.c | 2 +-
7527 net/core/dev_ioctl.c | 7 +-
7528 net/core/filter.c | 8 +-
7529 net/core/net-procfs.c | 17 +-
7530 net/core/pktgen.c | 2 +-
7531 net/core/scm.c | 7 +
7532 net/core/sock.c | 3 +-
7533 net/core/sysctl_net_core.c | 2 +-
7534 net/decnet/dn_dev.c | 2 +-
7535 net/ipv4/Kconfig | 1 +
7536 net/ipv4/devinet.c | 6 +-
7537 net/ipv4/inet_hashtables.c | 4 +
7538 net/ipv4/ip_input.c | 7 +
7539 net/ipv4/ip_sockglue.c | 3 +-
7540 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
7541 net/ipv4/route.c | 6 +-
7542 net/ipv4/tcp_input.c | 6 +-
7543 net/ipv4/tcp_ipv4.c | 24 +-
7544 net/ipv4/tcp_minisocks.c | 9 +-
7545 net/ipv4/tcp_timer.c | 11 +
7546 net/ipv4/udp.c | 24 +
7547 net/ipv6/Kconfig | 1 +
7548 net/ipv6/addrconf.c | 13 +-
7549 net/ipv6/proc.c | 2 +-
7550 net/ipv6/tcp_ipv6.c | 23 +-
7551 net/ipv6/udp.c | 7 +
7552 net/ipx/ipx_proc.c | 2 +-
7553 net/irda/irproc.c | 2 +-
7554 net/iucv/af_iucv.c | 3 +
7555 net/llc/llc_proc.c | 2 +-
7556 net/netfilter/Kconfig | 10 +
7557 net/netfilter/Makefile | 1 +
7558 net/netfilter/nf_conntrack_core.c | 46 +-
7559 net/netfilter/nf_conntrack_helper.c | 2 +-
7560 net/netfilter/nf_conntrack_netlink.c | 2 +-
7561 net/netfilter/xt_gradm.c | 51 +
7562 net/netfilter/xt_hashlimit.c | 4 +-
7563 net/netfilter/xt_recent.c | 2 +-
7564 net/openvswitch/actions.c | 19 +-
7565 net/sctp/sm_sideeffect.c | 11 +-
7566 net/sctp/sm_statefuns.c | 17 +-
7567 net/socket.c | 75 +-
7568 net/sunrpc/Kconfig | 1 +
7569 net/sunrpc/cache.c | 2 +-
7570 net/sunrpc/stats.c | 2 +-
7571 net/sysctl_net.c | 2 +-
7572 net/unix/af_unix.c | 57 +-
7573 net/unix/garbage.c | 8 +-
7574 net/vmw_vsock/vmci_transport_notify.c | 30 +-
7575 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
7576 net/x25/sysctl_net_x25.c | 2 +-
7577 net/x25/x25_proc.c | 2 +-
7578 scripts/package/Makefile | 2 +-
7579 scripts/package/mkspec | 41 +-
7580 security/Kconfig | 369 +-
7581 security/apparmor/file.c | 4 +-
7582 security/apparmor/lsm.c | 8 +-
7583 security/commoncap.c | 36 +-
7584 security/keys/internal.h | 2 +-
7585 security/min_addr.c | 2 +
7586 security/smack/smack_lsm.c | 8 +-
7587 security/tomoyo/file.c | 12 +-
7588 security/tomoyo/mount.c | 4 +
7589 security/tomoyo/tomoyo.c | 20 +-
7590 security/yama/Kconfig | 2 +-
7591 security/yama/yama_lsm.c | 4 +-
7592 sound/core/timer.c | 4 +-
7593 sound/synth/emux/emux_seq.c | 14 +-
7594 sound/usb/line6/driver.c | 40 +-
7595 sound/usb/line6/toneport.c | 12 +-
7596 tools/gcc/.gitignore | 1 +
7597 tools/gcc/Makefile | 12 +
7598 tools/gcc/gen-random-seed.sh | 8 +
7599 tools/gcc/randomize_layout_plugin.c | 930 +++
7600 tools/gcc/size_overflow_plugin/.gitignore | 1 +
7601 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
7602 513 files changed, 33007 insertions(+), 3251 deletions(-)
7603
7604 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
7605 Author: Brad Spengler <spender@grsecurity.net>
7606 Date: Mon Feb 15 10:51:41 2016 -0500
7607
7608 Initial import of pax-linux-4.4.1-test3.patch
7609
7610 Documentation/dontdiff | 46 +-
7611 Documentation/kbuild/makefiles.txt | 39 +-
7612 Documentation/kernel-parameters.txt | 28 +
7613 Makefile | 119 +-
7614 arch/alpha/include/asm/atomic.h | 10 +
7615 arch/alpha/include/asm/elf.h | 7 +
7616 arch/alpha/include/asm/pgalloc.h | 6 +
7617 arch/alpha/include/asm/pgtable.h | 11 +
7618 arch/alpha/kernel/module.c | 2 +-
7619 arch/alpha/kernel/osf_sys.c | 8 +-
7620 arch/alpha/mm/fault.c | 141 +-
7621 arch/arm/Kconfig | 3 +-
7622 arch/arm/include/asm/atomic.h | 323 +-
7623 arch/arm/include/asm/cache.h | 5 +-
7624 arch/arm/include/asm/cacheflush.h | 2 +-
7625 arch/arm/include/asm/checksum.h | 14 +-
7626 arch/arm/include/asm/cmpxchg.h | 4 +
7627 arch/arm/include/asm/cpuidle.h | 2 +-
7628 arch/arm/include/asm/domain.h | 42 +-
7629 arch/arm/include/asm/elf.h | 9 +-
7630 arch/arm/include/asm/fncpy.h | 2 +
7631 arch/arm/include/asm/futex.h | 1 +
7632 arch/arm/include/asm/kmap_types.h | 2 +-
7633 arch/arm/include/asm/mach/dma.h | 2 +-
7634 arch/arm/include/asm/mach/map.h | 16 +-
7635 arch/arm/include/asm/outercache.h | 2 +-
7636 arch/arm/include/asm/page.h | 3 +-
7637 arch/arm/include/asm/pgalloc.h | 20 +
7638 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
7639 arch/arm/include/asm/pgtable-2level.h | 3 +
7640 arch/arm/include/asm/pgtable-3level.h | 3 +
7641 arch/arm/include/asm/pgtable.h | 54 +-
7642 arch/arm/include/asm/smp.h | 2 +-
7643 arch/arm/include/asm/thread_info.h | 3 +
7644 arch/arm/include/asm/tls.h | 3 +
7645 arch/arm/include/asm/uaccess.h | 113 +-
7646 arch/arm/include/uapi/asm/ptrace.h | 2 +-
7647 arch/arm/kernel/armksyms.c | 2 +-
7648 arch/arm/kernel/cpuidle.c | 2 +-
7649 arch/arm/kernel/entry-armv.S | 109 +-
7650 arch/arm/kernel/entry-common.S | 40 +-
7651 arch/arm/kernel/entry-header.S | 55 +
7652 arch/arm/kernel/fiq.c | 3 +
7653 arch/arm/kernel/module-plts.c | 7 +-
7654 arch/arm/kernel/module.c | 38 +-
7655 arch/arm/kernel/patch.c | 2 +
7656 arch/arm/kernel/process.c | 92 +-
7657 arch/arm/kernel/reboot.c | 1 +
7658 arch/arm/kernel/setup.c | 20 +-
7659 arch/arm/kernel/signal.c | 35 +-
7660 arch/arm/kernel/smp.c | 2 +-
7661 arch/arm/kernel/tcm.c | 4 +-
7662 arch/arm/kernel/vmlinux.lds.S | 6 +-
7663 arch/arm/kvm/arm.c | 8 +-
7664 arch/arm/lib/copy_page.S | 1 +
7665 arch/arm/lib/csumpartialcopyuser.S | 4 +-
7666 arch/arm/lib/delay.c | 2 +-
7667 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
7668 arch/arm/mach-exynos/suspend.c | 6 +-
7669 arch/arm/mach-mvebu/coherency.c | 4 +-
7670 arch/arm/mach-omap2/board-n8x0.c | 2 +-
7671 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
7672 arch/arm/mach-omap2/omap-smp.c | 1 +
7673 arch/arm/mach-omap2/omap_device.c | 4 +-
7674 arch/arm/mach-omap2/omap_device.h | 4 +-
7675 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
7676 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
7677 arch/arm/mach-omap2/wd_timer.c | 6 +-
7678 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
7679 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
7680 arch/arm/mach-tegra/irq.c | 1 +
7681 arch/arm/mach-ux500/pm.c | 1 +
7682 arch/arm/mach-zynq/platsmp.c | 1 +
7683 arch/arm/mm/Kconfig | 6 +-
7684 arch/arm/mm/cache-l2x0.c | 2 +-
7685 arch/arm/mm/context.c | 10 +-
7686 arch/arm/mm/fault.c | 146 +
7687 arch/arm/mm/fault.h | 12 +
7688 arch/arm/mm/init.c | 39 +
7689 arch/arm/mm/ioremap.c | 4 +-
7690 arch/arm/mm/mmap.c | 30 +-
7691 arch/arm/mm/mmu.c | 162 +-
7692 arch/arm/net/bpf_jit_32.c | 3 +
7693 arch/arm/plat-iop/setup.c | 2 +-
7694 arch/arm/plat-omap/sram.c | 2 +
7695 arch/arm64/include/asm/atomic.h | 10 +
7696 arch/arm64/include/asm/percpu.h | 8 +-
7697 arch/arm64/include/asm/pgalloc.h | 5 +
7698 arch/arm64/include/asm/uaccess.h | 1 +
7699 arch/arm64/mm/dma-mapping.c | 2 +-
7700 arch/avr32/include/asm/elf.h | 8 +-
7701 arch/avr32/include/asm/kmap_types.h | 4 +-
7702 arch/avr32/mm/fault.c | 27 +
7703 arch/frv/include/asm/atomic.h | 10 +
7704 arch/frv/include/asm/kmap_types.h | 2 +-
7705 arch/frv/mm/elf-fdpic.c | 3 +-
7706 arch/ia64/Makefile | 1 +
7707 arch/ia64/include/asm/atomic.h | 10 +
7708 arch/ia64/include/asm/elf.h | 7 +
7709 arch/ia64/include/asm/pgalloc.h | 12 +
7710 arch/ia64/include/asm/pgtable.h | 13 +-
7711 arch/ia64/include/asm/spinlock.h | 2 +-
7712 arch/ia64/include/asm/uaccess.h | 27 +-
7713 arch/ia64/kernel/module.c | 45 +-
7714 arch/ia64/kernel/palinfo.c | 2 +-
7715 arch/ia64/kernel/sys_ia64.c | 7 +
7716 arch/ia64/kernel/vmlinux.lds.S | 2 +-
7717 arch/ia64/mm/fault.c | 32 +-
7718 arch/ia64/mm/init.c | 15 +-
7719 arch/m32r/lib/usercopy.c | 6 +
7720 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
7721 arch/mips/include/asm/atomic.h | 368 +-
7722 arch/mips/include/asm/elf.h | 7 +
7723 arch/mips/include/asm/exec.h | 2 +-
7724 arch/mips/include/asm/hw_irq.h | 2 +-
7725 arch/mips/include/asm/local.h | 57 +
7726 arch/mips/include/asm/page.h | 2 +-
7727 arch/mips/include/asm/pgalloc.h | 5 +
7728 arch/mips/include/asm/pgtable.h | 3 +
7729 arch/mips/include/asm/uaccess.h | 1 +
7730 arch/mips/kernel/binfmt_elfn32.c | 7 +
7731 arch/mips/kernel/binfmt_elfo32.c | 7 +
7732 arch/mips/kernel/irq-gt641xx.c | 2 +-
7733 arch/mips/kernel/irq.c | 6 +-
7734 arch/mips/kernel/pm-cps.c | 2 +-
7735 arch/mips/kernel/process.c | 12 -
7736 arch/mips/kernel/sync-r4k.c | 24 +-
7737 arch/mips/kernel/traps.c | 13 +-
7738 arch/mips/mm/fault.c | 25 +
7739 arch/mips/mm/mmap.c | 51 +-
7740 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
7741 arch/mips/sni/rm200.c | 2 +-
7742 arch/mips/vr41xx/common/icu.c | 2 +-
7743 arch/mips/vr41xx/common/irq.c | 4 +-
7744 arch/parisc/include/asm/atomic.h | 10 +
7745 arch/parisc/include/asm/elf.h | 7 +
7746 arch/parisc/include/asm/pgalloc.h | 6 +
7747 arch/parisc/include/asm/pgtable.h | 11 +
7748 arch/parisc/include/asm/uaccess.h | 4 +-
7749 arch/parisc/kernel/module.c | 50 +-
7750 arch/parisc/kernel/sys_parisc.c | 15 +
7751 arch/parisc/kernel/traps.c | 4 +-
7752 arch/parisc/mm/fault.c | 140 +-
7753 arch/powerpc/include/asm/atomic.h | 329 +-
7754 arch/powerpc/include/asm/elf.h | 12 +
7755 arch/powerpc/include/asm/exec.h | 2 +-
7756 arch/powerpc/include/asm/kmap_types.h | 2 +-
7757 arch/powerpc/include/asm/local.h | 46 +
7758 arch/powerpc/include/asm/mman.h | 2 +-
7759 arch/powerpc/include/asm/page.h | 8 +-
7760 arch/powerpc/include/asm/page_64.h | 7 +-
7761 arch/powerpc/include/asm/pgalloc-64.h | 7 +
7762 arch/powerpc/include/asm/pgtable.h | 1 +
7763 arch/powerpc/include/asm/pte-hash32.h | 1 +
7764 arch/powerpc/include/asm/reg.h | 1 +
7765 arch/powerpc/include/asm/smp.h | 2 +-
7766 arch/powerpc/include/asm/spinlock.h | 42 +-
7767 arch/powerpc/include/asm/uaccess.h | 141 +-
7768 arch/powerpc/kernel/Makefile | 5 +
7769 arch/powerpc/kernel/exceptions-64e.S | 4 +-
7770 arch/powerpc/kernel/exceptions-64s.S | 2 +-
7771 arch/powerpc/kernel/module_32.c | 15 +-
7772 arch/powerpc/kernel/process.c | 46 -
7773 arch/powerpc/kernel/signal_32.c | 2 +-
7774 arch/powerpc/kernel/signal_64.c | 2 +-
7775 arch/powerpc/kernel/traps.c | 21 +
7776 arch/powerpc/kernel/vdso.c | 5 +-
7777 arch/powerpc/lib/usercopy_64.c | 18 -
7778 arch/powerpc/mm/fault.c | 56 +-
7779 arch/powerpc/mm/mmap.c | 16 +
7780 arch/powerpc/mm/slice.c | 13 +-
7781 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
7782 arch/s390/include/asm/atomic.h | 10 +
7783 arch/s390/include/asm/elf.h | 7 +
7784 arch/s390/include/asm/exec.h | 2 +-
7785 arch/s390/include/asm/uaccess.h | 13 +-
7786 arch/s390/kernel/module.c | 22 +-
7787 arch/s390/kernel/process.c | 20 -
7788 arch/s390/mm/mmap.c | 16 +
7789 arch/score/include/asm/exec.h | 2 +-
7790 arch/score/kernel/process.c | 5 -
7791 arch/sh/mm/mmap.c | 22 +-
7792 arch/sparc/include/asm/atomic_64.h | 110 +-
7793 arch/sparc/include/asm/cache.h | 2 +-
7794 arch/sparc/include/asm/elf_32.h | 7 +
7795 arch/sparc/include/asm/elf_64.h | 7 +
7796 arch/sparc/include/asm/pgalloc_32.h | 1 +
7797 arch/sparc/include/asm/pgalloc_64.h | 1 +
7798 arch/sparc/include/asm/pgtable.h | 4 +
7799 arch/sparc/include/asm/pgtable_32.h | 15 +-
7800 arch/sparc/include/asm/pgtsrmmu.h | 5 +
7801 arch/sparc/include/asm/setup.h | 4 +-
7802 arch/sparc/include/asm/spinlock_64.h | 35 +-
7803 arch/sparc/include/asm/thread_info_32.h | 1 +
7804 arch/sparc/include/asm/thread_info_64.h | 2 +
7805 arch/sparc/include/asm/uaccess.h | 1 +
7806 arch/sparc/include/asm/uaccess_32.h | 28 +-
7807 arch/sparc/include/asm/uaccess_64.h | 24 +-
7808 arch/sparc/kernel/Makefile | 2 +-
7809 arch/sparc/kernel/prom_common.c | 2 +-
7810 arch/sparc/kernel/smp_64.c | 8 +-
7811 arch/sparc/kernel/sys_sparc_32.c | 2 +-
7812 arch/sparc/kernel/sys_sparc_64.c | 52 +-
7813 arch/sparc/kernel/traps_64.c | 27 +-
7814 arch/sparc/lib/Makefile | 2 +-
7815 arch/sparc/lib/atomic_64.S | 57 +-
7816 arch/sparc/lib/ksyms.c | 6 +-
7817 arch/sparc/mm/Makefile | 2 +-
7818 arch/sparc/mm/fault_32.c | 292 +
7819 arch/sparc/mm/fault_64.c | 486 +
7820 arch/sparc/mm/hugetlbpage.c | 22 +-
7821 arch/sparc/mm/init_64.c | 10 +-
7822 arch/tile/include/asm/atomic_64.h | 10 +
7823 arch/tile/include/asm/uaccess.h | 4 +-
7824 arch/um/Makefile | 4 +
7825 arch/um/include/asm/kmap_types.h | 2 +-
7826 arch/um/include/asm/page.h | 3 +
7827 arch/um/include/asm/pgtable-3level.h | 1 +
7828 arch/um/kernel/process.c | 16 -
7829 arch/x86/Kconfig | 26 +-
7830 arch/x86/Kconfig.cpu | 6 +-
7831 arch/x86/Kconfig.debug | 4 +-
7832 arch/x86/Makefile | 13 +-
7833 arch/x86/boot/Makefile | 3 +
7834 arch/x86/boot/bitops.h | 4 +-
7835 arch/x86/boot/boot.h | 2 +-
7836 arch/x86/boot/compressed/Makefile | 3 +
7837 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
7838 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
7839 arch/x86/boot/compressed/head_32.S | 4 +-
7840 arch/x86/boot/compressed/head_64.S | 12 +-
7841 arch/x86/boot/compressed/misc.c | 11 +-
7842 arch/x86/boot/cpucheck.c | 16 +-
7843 arch/x86/boot/header.S | 6 +-
7844 arch/x86/boot/memory.c | 2 +-
7845 arch/x86/boot/video-vesa.c | 1 +
7846 arch/x86/boot/video.c | 2 +-
7847 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
7848 arch/x86/crypto/aesni-intel_asm.S | 106 +-
7849 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
7850 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
7851 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
7852 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
7853 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
7854 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
7855 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
7856 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
7857 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
7858 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
7859 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
7860 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
7861 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
7862 arch/x86/crypto/sha256-avx-asm.S | 2 +
7863 arch/x86/crypto/sha256-avx2-asm.S | 2 +
7864 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
7865 arch/x86/crypto/sha512-avx-asm.S | 2 +
7866 arch/x86/crypto/sha512-avx2-asm.S | 2 +
7867 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
7868 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
7869 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
7870 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
7871 arch/x86/entry/calling.h | 86 +-
7872 arch/x86/entry/common.c | 28 +-
7873 arch/x86/entry/entry_32.S | 311 +-
7874 arch/x86/entry/entry_64.S | 625 +-
7875 arch/x86/entry/entry_64_compat.S | 67 +-
7876 arch/x86/entry/thunk_64.S | 2 +
7877 arch/x86/entry/vdso/Makefile | 2 +-
7878 arch/x86/entry/vdso/vdso2c.h | 8 +-
7879 arch/x86/entry/vdso/vma.c | 37 +-
7880 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
7881 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
7882 arch/x86/ia32/ia32_signal.c | 23 +-
7883 arch/x86/ia32/sys_ia32.c | 42 +-
7884 arch/x86/include/asm/alternative-asm.h | 43 +-
7885 arch/x86/include/asm/alternative.h | 4 +-
7886 arch/x86/include/asm/apic.h | 2 +-
7887 arch/x86/include/asm/apm.h | 4 +-
7888 arch/x86/include/asm/atomic.h | 230 +-
7889 arch/x86/include/asm/atomic64_32.h | 100 +
7890 arch/x86/include/asm/atomic64_64.h | 164 +-
7891 arch/x86/include/asm/bitops.h | 18 +-
7892 arch/x86/include/asm/boot.h | 2 +-
7893 arch/x86/include/asm/cache.h | 5 +-
7894 arch/x86/include/asm/checksum_32.h | 12 +-
7895 arch/x86/include/asm/cmpxchg.h | 39 +
7896 arch/x86/include/asm/compat.h | 4 +
7897 arch/x86/include/asm/cpufeature.h | 17 +-
7898 arch/x86/include/asm/desc.h | 78 +-
7899 arch/x86/include/asm/desc_defs.h | 6 +
7900 arch/x86/include/asm/div64.h | 2 +-
7901 arch/x86/include/asm/dma.h | 2 +
7902 arch/x86/include/asm/elf.h | 33 +-
7903 arch/x86/include/asm/emergency-restart.h | 2 +-
7904 arch/x86/include/asm/fpu/internal.h | 42 +-
7905 arch/x86/include/asm/fpu/types.h | 5 +-
7906 arch/x86/include/asm/futex.h | 14 +-
7907 arch/x86/include/asm/hw_irq.h | 4 +-
7908 arch/x86/include/asm/i8259.h | 2 +-
7909 arch/x86/include/asm/io.h | 22 +-
7910 arch/x86/include/asm/irqflags.h | 5 +
7911 arch/x86/include/asm/kprobes.h | 9 +-
7912 arch/x86/include/asm/local.h | 106 +-
7913 arch/x86/include/asm/mman.h | 15 +
7914 arch/x86/include/asm/mmu.h | 14 +-
7915 arch/x86/include/asm/mmu_context.h | 133 +-
7916 arch/x86/include/asm/module.h | 17 +-
7917 arch/x86/include/asm/nmi.h | 19 +-
7918 arch/x86/include/asm/page.h | 1 +
7919 arch/x86/include/asm/page_32.h | 12 +-
7920 arch/x86/include/asm/page_64.h | 14 +-
7921 arch/x86/include/asm/paravirt.h | 46 +-
7922 arch/x86/include/asm/paravirt_types.h | 15 +-
7923 arch/x86/include/asm/pgalloc.h | 23 +
7924 arch/x86/include/asm/pgtable-2level.h | 2 +
7925 arch/x86/include/asm/pgtable-3level.h | 7 +
7926 arch/x86/include/asm/pgtable.h | 126 +-
7927 arch/x86/include/asm/pgtable_32.h | 14 +-
7928 arch/x86/include/asm/pgtable_32_types.h | 24 +-
7929 arch/x86/include/asm/pgtable_64.h | 23 +-
7930 arch/x86/include/asm/pgtable_64_types.h | 5 +
7931 arch/x86/include/asm/pgtable_types.h | 26 +-
7932 arch/x86/include/asm/pmem.h | 2 +-
7933 arch/x86/include/asm/preempt.h | 2 +-
7934 arch/x86/include/asm/processor.h | 57 +-
7935 arch/x86/include/asm/ptrace.h | 15 +-
7936 arch/x86/include/asm/realmode.h | 4 +-
7937 arch/x86/include/asm/reboot.h | 10 +-
7938 arch/x86/include/asm/rmwcc.h | 84 +-
7939 arch/x86/include/asm/rwsem.h | 60 +-
7940 arch/x86/include/asm/segment.h | 27 +-
7941 arch/x86/include/asm/smap.h | 43 +
7942 arch/x86/include/asm/smp.h | 14 +-
7943 arch/x86/include/asm/stackprotector.h | 4 +-
7944 arch/x86/include/asm/stacktrace.h | 34 +-
7945 arch/x86/include/asm/switch_to.h | 4 +-
7946 arch/x86/include/asm/sys_ia32.h | 6 +-
7947 arch/x86/include/asm/thread_info.h | 27 +-
7948 arch/x86/include/asm/tlbflush.h | 77 +-
7949 arch/x86/include/asm/uaccess.h | 210 +-
7950 arch/x86/include/asm/uaccess_32.h | 28 +-
7951 arch/x86/include/asm/uaccess_64.h | 169 +-
7952 arch/x86/include/asm/word-at-a-time.h | 2 +-
7953 arch/x86/include/asm/x86_init.h | 10 +-
7954 arch/x86/include/asm/xen/page.h | 2 +-
7955 arch/x86/include/uapi/asm/e820.h | 2 +-
7956 arch/x86/kernel/Makefile | 2 +-
7957 arch/x86/kernel/acpi/boot.c | 4 +-
7958 arch/x86/kernel/acpi/sleep.c | 4 +
7959 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
7960 arch/x86/kernel/alternative.c | 124 +-
7961 arch/x86/kernel/apic/apic.c | 4 +-
7962 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
7963 arch/x86/kernel/apic/apic_noop.c | 2 +-
7964 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
7965 arch/x86/kernel/apic/io_apic.c | 8 +-
7966 arch/x86/kernel/apic/msi.c | 2 +-
7967 arch/x86/kernel/apic/probe_32.c | 4 +-
7968 arch/x86/kernel/apic/vector.c | 2 +
7969 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
7970 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
7971 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
7972 arch/x86/kernel/apm_32.c | 21 +-
7973 arch/x86/kernel/asm-offsets.c | 20 +
7974 arch/x86/kernel/asm-offsets_64.c | 1 +
7975 arch/x86/kernel/cpu/Makefile | 4 -
7976 arch/x86/kernel/cpu/amd.c | 2 +-
7977 arch/x86/kernel/cpu/bugs_64.c | 2 +
7978 arch/x86/kernel/cpu/common.c | 202 +-
7979 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
7980 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
7981 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
7982 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
7983 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
7984 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
7985 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
7986 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
7987 arch/x86/kernel/cpu/perf_event.c | 10 +-
7988 arch/x86/kernel/cpu/perf_event.h | 2 +-
7989 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
7990 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
7991 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
7992 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
7993 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
7994 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
7995 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
7996 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
7997 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
7998 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
7999 arch/x86/kernel/crash_dump_64.c | 2 +-
8000 arch/x86/kernel/doublefault.c | 8 +-
8001 arch/x86/kernel/dumpstack.c | 24 +-
8002 arch/x86/kernel/dumpstack_32.c | 25 +-
8003 arch/x86/kernel/dumpstack_64.c | 62 +-
8004 arch/x86/kernel/e820.c | 4 +-
8005 arch/x86/kernel/early_printk.c | 1 +
8006 arch/x86/kernel/espfix_64.c | 44 +-
8007 arch/x86/kernel/fpu/core.c | 24 +-
8008 arch/x86/kernel/fpu/init.c | 40 +-
8009 arch/x86/kernel/fpu/regset.c | 22 +-
8010 arch/x86/kernel/fpu/signal.c | 20 +-
8011 arch/x86/kernel/fpu/xstate.c | 6 +-
8012 arch/x86/kernel/ftrace.c | 18 +-
8013 arch/x86/kernel/head64.c | 14 +-
8014 arch/x86/kernel/head_32.S | 235 +-
8015 arch/x86/kernel/head_64.S | 173 +-
8016 arch/x86/kernel/i386_ksyms_32.c | 12 +
8017 arch/x86/kernel/i8259.c | 10 +-
8018 arch/x86/kernel/io_delay.c | 2 +-
8019 arch/x86/kernel/ioport.c | 2 +-
8020 arch/x86/kernel/irq.c | 8 +-
8021 arch/x86/kernel/irq_32.c | 45 +-
8022 arch/x86/kernel/jump_label.c | 10 +-
8023 arch/x86/kernel/kgdb.c | 21 +-
8024 arch/x86/kernel/kprobes/core.c | 28 +-
8025 arch/x86/kernel/kprobes/opt.c | 16 +-
8026 arch/x86/kernel/ksysfs.c | 2 +-
8027 arch/x86/kernel/kvmclock.c | 20 +-
8028 arch/x86/kernel/ldt.c | 25 +
8029 arch/x86/kernel/livepatch.c | 11 +-
8030 arch/x86/kernel/machine_kexec_32.c | 6 +-
8031 arch/x86/kernel/mcount_64.S | 19 +-
8032 arch/x86/kernel/module.c | 78 +-
8033 arch/x86/kernel/msr.c | 2 +-
8034 arch/x86/kernel/nmi.c | 34 +-
8035 arch/x86/kernel/nmi_selftest.c | 4 +-
8036 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
8037 arch/x86/kernel/paravirt.c | 45 +-
8038 arch/x86/kernel/paravirt_patch_64.c | 8 +
8039 arch/x86/kernel/pci-calgary_64.c | 2 +-
8040 arch/x86/kernel/pci-iommu_table.c | 2 +-
8041 arch/x86/kernel/pci-swiotlb.c | 2 +-
8042 arch/x86/kernel/process.c | 80 +-
8043 arch/x86/kernel/process_32.c | 29 +-
8044 arch/x86/kernel/process_64.c | 14 +-
8045 arch/x86/kernel/ptrace.c | 20 +-
8046 arch/x86/kernel/pvclock.c | 8 +-
8047 arch/x86/kernel/reboot.c | 44 +-
8048 arch/x86/kernel/reboot_fixups_32.c | 2 +-
8049 arch/x86/kernel/relocate_kernel_64.S | 3 +-
8050 arch/x86/kernel/setup.c | 29 +-
8051 arch/x86/kernel/setup_percpu.c | 29 +-
8052 arch/x86/kernel/signal.c | 17 +-
8053 arch/x86/kernel/smp.c | 2 +-
8054 arch/x86/kernel/smpboot.c | 29 +-
8055 arch/x86/kernel/step.c | 6 +-
8056 arch/x86/kernel/sys_i386_32.c | 184 +
8057 arch/x86/kernel/sys_x86_64.c | 22 +-
8058 arch/x86/kernel/tboot.c | 22 +-
8059 arch/x86/kernel/time.c | 8 +-
8060 arch/x86/kernel/tls.c | 7 +-
8061 arch/x86/kernel/tracepoint.c | 4 +-
8062 arch/x86/kernel/traps.c | 53 +-
8063 arch/x86/kernel/tsc.c | 2 +-
8064 arch/x86/kernel/uprobes.c | 4 +-
8065 arch/x86/kernel/vm86_32.c | 6 +-
8066 arch/x86/kernel/vmlinux.lds.S | 153 +-
8067 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
8068 arch/x86/kernel/x86_init.c | 6 +-
8069 arch/x86/kvm/cpuid.c | 21 +-
8070 arch/x86/kvm/emulate.c | 6 +-
8071 arch/x86/kvm/i8259.c | 10 +-
8072 arch/x86/kvm/ioapic.c | 2 +
8073 arch/x86/kvm/lapic.c | 2 +-
8074 arch/x86/kvm/paging_tmpl.h | 2 +-
8075 arch/x86/kvm/svm.c | 10 +-
8076 arch/x86/kvm/vmx.c | 62 +-
8077 arch/x86/kvm/x86.c | 44 +-
8078 arch/x86/lguest/boot.c | 3 +-
8079 arch/x86/lib/atomic64_386_32.S | 164 +
8080 arch/x86/lib/atomic64_cx8_32.S | 98 +-
8081 arch/x86/lib/checksum_32.S | 99 +-
8082 arch/x86/lib/clear_page_64.S | 3 +
8083 arch/x86/lib/cmpxchg16b_emu.S | 3 +
8084 arch/x86/lib/copy_page_64.S | 14 +-
8085 arch/x86/lib/copy_user_64.S | 66 +-
8086 arch/x86/lib/csum-copy_64.S | 14 +-
8087 arch/x86/lib/csum-wrappers_64.c | 8 +-
8088 arch/x86/lib/getuser.S | 74 +-
8089 arch/x86/lib/insn.c | 8 +-
8090 arch/x86/lib/iomap_copy_64.S | 2 +
8091 arch/x86/lib/memcpy_64.S | 6 +
8092 arch/x86/lib/memmove_64.S | 3 +-
8093 arch/x86/lib/memset_64.S | 3 +
8094 arch/x86/lib/mmx_32.c | 243 +-
8095 arch/x86/lib/msr-reg.S | 2 +
8096 arch/x86/lib/putuser.S | 87 +-
8097 arch/x86/lib/rwsem.S | 6 +-
8098 arch/x86/lib/usercopy_32.c | 359 +-
8099 arch/x86/lib/usercopy_64.c | 22 +-
8100 arch/x86/math-emu/fpu_aux.c | 2 +-
8101 arch/x86/math-emu/fpu_entry.c | 4 +-
8102 arch/x86/math-emu/fpu_system.h | 2 +-
8103 arch/x86/mm/Makefile | 4 +
8104 arch/x86/mm/extable.c | 26 +-
8105 arch/x86/mm/fault.c | 570 +-
8106 arch/x86/mm/gup.c | 6 +-
8107 arch/x86/mm/highmem_32.c | 6 +
8108 arch/x86/mm/hugetlbpage.c | 24 +-
8109 arch/x86/mm/init.c | 111 +-
8110 arch/x86/mm/init_32.c | 111 +-
8111 arch/x86/mm/init_64.c | 46 +-
8112 arch/x86/mm/iomap_32.c | 4 +
8113 arch/x86/mm/ioremap.c | 52 +-
8114 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
8115 arch/x86/mm/mmap.c | 40 +-
8116 arch/x86/mm/mmio-mod.c | 10 +-
8117 arch/x86/mm/mpx.c | 6 +-
8118 arch/x86/mm/numa.c | 4 +-
8119 arch/x86/mm/pageattr.c | 42 +-
8120 arch/x86/mm/pat.c | 12 +-
8121 arch/x86/mm/pat_rbtree.c | 2 +-
8122 arch/x86/mm/pf_in.c | 10 +-
8123 arch/x86/mm/pgtable.c | 214 +-
8124 arch/x86/mm/pgtable_32.c | 3 +
8125 arch/x86/mm/setup_nx.c | 7 +
8126 arch/x86/mm/tlb.c | 4 +
8127 arch/x86/mm/uderef_64.c | 37 +
8128 arch/x86/net/bpf_jit.S | 11 +
8129 arch/x86/net/bpf_jit_comp.c | 13 +-
8130 arch/x86/oprofile/backtrace.c | 6 +-
8131 arch/x86/oprofile/nmi_int.c | 8 +-
8132 arch/x86/oprofile/op_model_amd.c | 8 +-
8133 arch/x86/oprofile/op_model_ppro.c | 7 +-
8134 arch/x86/oprofile/op_x86_model.h | 2 +-
8135 arch/x86/pci/intel_mid_pci.c | 2 +-
8136 arch/x86/pci/irq.c | 8 +-
8137 arch/x86/pci/pcbios.c | 144 +-
8138 arch/x86/platform/efi/efi_32.c | 24 +
8139 arch/x86/platform/efi/efi_64.c | 26 +-
8140 arch/x86/platform/efi/efi_stub_32.S | 64 +-
8141 arch/x86/platform/efi/efi_stub_64.S | 2 +
8142 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
8143 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
8144 arch/x86/platform/intel-mid/mfld.c | 4 +-
8145 arch/x86/platform/intel-mid/mrfl.c | 2 +-
8146 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
8147 arch/x86/platform/olpc/olpc_dt.c | 2 +-
8148 arch/x86/power/cpu.c | 11 +-
8149 arch/x86/realmode/init.c | 10 +-
8150 arch/x86/realmode/rm/Makefile | 3 +
8151 arch/x86/realmode/rm/header.S | 4 +-
8152 arch/x86/realmode/rm/reboot.S | 4 +
8153 arch/x86/realmode/rm/trampoline_32.S | 12 +-
8154 arch/x86/realmode/rm/trampoline_64.S | 3 +-
8155 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
8156 arch/x86/tools/Makefile | 2 +-
8157 arch/x86/tools/relocs.c | 96 +-
8158 arch/x86/um/mem_32.c | 2 +-
8159 arch/x86/um/tls_32.c | 2 +-
8160 arch/x86/xen/enlighten.c | 50 +-
8161 arch/x86/xen/mmu.c | 19 +-
8162 arch/x86/xen/smp.c | 16 +-
8163 arch/x86/xen/xen-asm_32.S | 2 +-
8164 arch/x86/xen/xen-head.S | 11 +
8165 arch/x86/xen/xen-ops.h | 2 -
8166 block/bio.c | 4 +-
8167 block/blk-cgroup.c | 18 +-
8168 block/blk-iopoll.c | 2 +-
8169 block/blk-map.c | 2 +-
8170 block/blk-softirq.c | 2 +-
8171 block/bsg.c | 12 +-
8172 block/cfq-iosched.c | 4 +-
8173 block/compat_ioctl.c | 4 +-
8174 block/genhd.c | 9 +-
8175 block/partitions/efi.c | 8 +-
8176 block/scsi_ioctl.c | 29 +-
8177 crypto/cryptd.c | 4 +-
8178 crypto/crypto_user.c | 8 +-
8179 crypto/pcrypt.c | 2 +-
8180 crypto/zlib.c | 12 +-
8181 drivers/acpi/acpi_video.c | 2 +-
8182 drivers/acpi/apei/apei-internal.h | 2 +-
8183 drivers/acpi/apei/ghes.c | 10 +-
8184 drivers/acpi/bgrt.c | 6 +-
8185 drivers/acpi/blacklist.c | 4 +-
8186 drivers/acpi/bus.c | 4 +-
8187 drivers/acpi/device_pm.c | 4 +-
8188 drivers/acpi/ec.c | 2 +-
8189 drivers/acpi/pci_slot.c | 2 +-
8190 drivers/acpi/processor_idle.c | 2 +-
8191 drivers/acpi/processor_pdc.c | 2 +-
8192 drivers/acpi/sleep.c | 2 +-
8193 drivers/acpi/sysfs.c | 4 +-
8194 drivers/acpi/thermal.c | 2 +-
8195 drivers/acpi/video_detect.c | 7 +-
8196 drivers/ata/libata-core.c | 12 +-
8197 drivers/ata/libata-scsi.c | 2 +-
8198 drivers/ata/libata.h | 2 +-
8199 drivers/ata/pata_arasan_cf.c | 4 +-
8200 drivers/atm/adummy.c | 2 +-
8201 drivers/atm/ambassador.c | 8 +-
8202 drivers/atm/atmtcp.c | 14 +-
8203 drivers/atm/eni.c | 10 +-
8204 drivers/atm/firestream.c | 8 +-
8205 drivers/atm/fore200e.c | 14 +-
8206 drivers/atm/he.c | 18 +-
8207 drivers/atm/horizon.c | 4 +-
8208 drivers/atm/idt77252.c | 36 +-
8209 drivers/atm/iphase.c | 34 +-
8210 drivers/atm/lanai.c | 12 +-
8211 drivers/atm/nicstar.c | 46 +-
8212 drivers/atm/solos-pci.c | 4 +-
8213 drivers/atm/suni.c | 4 +-
8214 drivers/atm/uPD98402.c | 16 +-
8215 drivers/atm/zatm.c | 6 +-
8216 drivers/base/bus.c | 4 +-
8217 drivers/base/devres.c | 4 +-
8218 drivers/base/devtmpfs.c | 8 +-
8219 drivers/base/node.c | 2 +-
8220 drivers/base/platform-msi.c | 20 +-
8221 drivers/base/power/domain.c | 7 +-
8222 drivers/base/power/runtime.c | 6 +-
8223 drivers/base/power/sysfs.c | 2 +-
8224 drivers/base/power/wakeup.c | 8 +-
8225 drivers/base/regmap/regmap-debugfs.c | 4 +-
8226 drivers/base/regmap/regmap.c | 4 +-
8227 drivers/base/syscore.c | 4 +-
8228 drivers/block/cciss.c | 28 +-
8229 drivers/block/cciss.h | 2 +-
8230 drivers/block/cpqarray.c | 28 +-
8231 drivers/block/cpqarray.h | 2 +-
8232 drivers/block/drbd/drbd_bitmap.c | 2 +-
8233 drivers/block/drbd/drbd_int.h | 8 +-
8234 drivers/block/drbd/drbd_main.c | 12 +-
8235 drivers/block/drbd/drbd_nl.c | 4 +-
8236 drivers/block/drbd/drbd_receiver.c | 38 +-
8237 drivers/block/drbd/drbd_worker.c | 14 +-
8238 drivers/block/pktcdvd.c | 4 +-
8239 drivers/block/rbd.c | 2 +-
8240 drivers/bluetooth/btwilink.c | 2 +-
8241 drivers/bus/arm-cci.c | 12 +-
8242 drivers/cdrom/cdrom.c | 11 +-
8243 drivers/cdrom/gdrom.c | 1 -
8244 drivers/char/agp/compat_ioctl.c | 2 +-
8245 drivers/char/agp/frontend.c | 4 +-
8246 drivers/char/agp/intel-gtt.c | 4 +-
8247 drivers/char/hpet.c | 2 +-
8248 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
8249 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
8250 drivers/char/ipmi/ipmi_ssif.c | 12 +-
8251 drivers/char/mem.c | 47 +-
8252 drivers/char/nvram.c | 2 +-
8253 drivers/char/pcmcia/synclink_cs.c | 16 +-
8254 drivers/char/random.c | 12 +-
8255 drivers/char/sonypi.c | 11 +-
8256 drivers/char/tpm/tpm_acpi.c | 3 +-
8257 drivers/char/tpm/tpm_eventlog.c | 5 +-
8258 drivers/char/virtio_console.c | 6 +-
8259 drivers/clk/clk-composite.c | 2 +-
8260 drivers/clk/samsung/clk.h | 2 +-
8261 drivers/clk/socfpga/clk-gate.c | 9 +-
8262 drivers/clk/socfpga/clk-pll.c | 9 +-
8263 drivers/clk/ti/clk.c | 8 +-
8264 drivers/cpufreq/acpi-cpufreq.c | 17 +-
8265 drivers/cpufreq/cpufreq-dt.c | 4 +-
8266 drivers/cpufreq/cpufreq.c | 30 +-
8267 drivers/cpufreq/cpufreq_governor.c | 2 +-
8268 drivers/cpufreq/cpufreq_governor.h | 4 +-
8269 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
8270 drivers/cpufreq/intel_pstate.c | 38 +-
8271 drivers/cpufreq/p4-clockmod.c | 12 +-
8272 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
8273 drivers/cpufreq/speedstep-centrino.c | 7 +-
8274 drivers/cpuidle/driver.c | 2 +-
8275 drivers/cpuidle/dt_idle_states.c | 2 +-
8276 drivers/cpuidle/governor.c | 2 +-
8277 drivers/cpuidle/sysfs.c | 2 +-
8278 drivers/crypto/hifn_795x.c | 4 +-
8279 drivers/devfreq/devfreq.c | 4 +-
8280 drivers/dma/sh/shdma-base.c | 4 +-
8281 drivers/dma/sh/shdmac.c | 2 +-
8282 drivers/edac/edac_device.c | 4 +-
8283 drivers/edac/edac_mc_sysfs.c | 2 +-
8284 drivers/edac/edac_pci.c | 4 +-
8285 drivers/edac/edac_pci_sysfs.c | 22 +-
8286 drivers/edac/mce_amd.h | 2 +-
8287 drivers/firewire/core-card.c | 6 +-
8288 drivers/firewire/core-device.c | 2 +-
8289 drivers/firewire/core-transaction.c | 1 +
8290 drivers/firewire/core.h | 1 +
8291 drivers/firmware/dmi-id.c | 2 +-
8292 drivers/firmware/dmi_scan.c | 12 +-
8293 drivers/firmware/efi/cper.c | 8 +-
8294 drivers/firmware/efi/efi.c | 12 +-
8295 drivers/firmware/efi/efivars.c | 2 +-
8296 drivers/firmware/efi/runtime-map.c | 2 +-
8297 drivers/firmware/google/gsmi.c | 2 +-
8298 drivers/firmware/google/memconsole.c | 7 +-
8299 drivers/firmware/memmap.c | 2 +-
8300 drivers/firmware/psci.c | 2 +-
8301 drivers/gpio/gpio-davinci.c | 6 +-
8302 drivers/gpio/gpio-em.c | 2 +-
8303 drivers/gpio/gpio-ich.c | 2 +-
8304 drivers/gpio/gpio-omap.c | 4 +-
8305 drivers/gpio/gpio-rcar.c | 2 +-
8306 drivers/gpio/gpio-vr41xx.c | 2 +-
8307 drivers/gpio/gpiolib.c | 12 +-
8308 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
8309 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
8310 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
8311 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
8312 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
8313 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
8314 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
8315 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
8316 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
8317 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
8318 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
8319 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
8320 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
8321 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
8322 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
8323 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
8324 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
8325 drivers/gpu/drm/armada/armada_drv.c | 3 +-
8326 drivers/gpu/drm/drm_crtc.c | 2 +-
8327 drivers/gpu/drm/drm_drv.c | 2 +-
8328 drivers/gpu/drm/drm_fops.c | 12 +-
8329 drivers/gpu/drm/drm_global.c | 14 +-
8330 drivers/gpu/drm/drm_info.c | 13 +-
8331 drivers/gpu/drm/drm_ioc32.c | 13 +-
8332 drivers/gpu/drm/drm_ioctl.c | 2 +-
8333 drivers/gpu/drm/drm_pci.c | 9 +-
8334 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
8335 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
8336 drivers/gpu/drm/gma500/psb_drv.c | 1 -
8337 drivers/gpu/drm/i810/i810_dma.c | 2 +-
8338 drivers/gpu/drm/i810/i810_drv.c | 6 +-
8339 drivers/gpu/drm/i810/i810_drv.h | 6 +-
8340 drivers/gpu/drm/i915/i915_dma.c | 4 +-
8341 drivers/gpu/drm/i915/i915_drv.c | 7 +-
8342 drivers/gpu/drm/i915/i915_drv.h | 2 +-
8343 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
8344 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
8345 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
8346 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
8347 drivers/gpu/drm/i915/i915_irq.c | 88 +-
8348 drivers/gpu/drm/i915/intel_display.c | 26 +-
8349 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
8350 drivers/gpu/drm/mga/mga_drv.c | 5 +-
8351 drivers/gpu/drm/mga/mga_drv.h | 6 +-
8352 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
8353 drivers/gpu/drm/mga/mga_irq.c | 8 +-
8354 drivers/gpu/drm/mga/mga_state.c | 2 +-
8355 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
8356 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
8357 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
8358 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
8359 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
8360 drivers/gpu/drm/omapdrm/Makefile | 2 +-
8361 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
8362 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
8363 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
8364 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
8365 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
8366 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
8367 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
8368 drivers/gpu/drm/r128/r128_cce.c | 2 +-
8369 drivers/gpu/drm/r128/r128_drv.c | 4 +-
8370 drivers/gpu/drm/r128/r128_drv.h | 6 +-
8371 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
8372 drivers/gpu/drm/r128/r128_irq.c | 4 +-
8373 drivers/gpu/drm/r128/r128_state.c | 6 +-
8374 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
8375 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
8376 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
8377 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
8378 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
8379 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
8380 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
8381 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
8382 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
8383 drivers/gpu/drm/savage/savage_bci.c | 2 +-
8384 drivers/gpu/drm/savage/savage_drv.c | 5 +-
8385 drivers/gpu/drm/savage/savage_drv.h | 2 +-
8386 drivers/gpu/drm/sis/sis_drv.c | 5 +-
8387 drivers/gpu/drm/sis/sis_drv.h | 2 +-
8388 drivers/gpu/drm/sis/sis_mm.c | 2 +-
8389 drivers/gpu/drm/tegra/dc.c | 2 +-
8390 drivers/gpu/drm/tegra/dsi.c | 2 +-
8391 drivers/gpu/drm/tegra/hdmi.c | 2 +-
8392 drivers/gpu/drm/tegra/sor.c | 7 +-
8393 drivers/gpu/drm/tilcdc/Makefile | 6 +-
8394 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
8395 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
8396 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
8397 drivers/gpu/drm/udl/udl_fb.c | 1 -
8398 drivers/gpu/drm/via/via_dma.c | 2 +-
8399 drivers/gpu/drm/via/via_drv.c | 5 +-
8400 drivers/gpu/drm/via/via_drv.h | 6 +-
8401 drivers/gpu/drm/via/via_irq.c | 18 +-
8402 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
8403 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
8404 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
8405 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
8406 drivers/gpu/vga/vga_switcheroo.c | 4 +-
8407 drivers/hid/hid-core.c | 4 +-
8408 drivers/hid/hid-sensor-custom.c | 2 +-
8409 drivers/hv/channel.c | 6 +-
8410 drivers/hv/hv.c | 4 +-
8411 drivers/hv/hv_balloon.c | 18 +-
8412 drivers/hv/hyperv_vmbus.h | 2 +-
8413 drivers/hwmon/acpi_power_meter.c | 6 +-
8414 drivers/hwmon/applesmc.c | 2 +-
8415 drivers/hwmon/asus_atk0110.c | 10 +-
8416 drivers/hwmon/coretemp.c | 2 +-
8417 drivers/hwmon/dell-smm-hwmon.c | 2 +-
8418 drivers/hwmon/ibmaem.c | 2 +-
8419 drivers/hwmon/iio_hwmon.c | 2 +-
8420 drivers/hwmon/nct6683.c | 6 +-
8421 drivers/hwmon/nct6775.c | 6 +-
8422 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
8423 drivers/hwmon/sht15.c | 12 +-
8424 drivers/hwmon/via-cputemp.c | 2 +-
8425 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
8426 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
8427 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
8428 drivers/i2c/i2c-dev.c | 2 +-
8429 drivers/ide/ide-cd.c | 2 +-
8430 drivers/ide/ide-disk.c | 2 +-
8431 drivers/iio/industrialio-core.c | 2 +-
8432 drivers/iio/magnetometer/ak8975.c | 2 +-
8433 drivers/infiniband/core/cm.c | 32 +-
8434 drivers/infiniband/core/fmr_pool.c | 20 +-
8435 drivers/infiniband/core/netlink.c | 5 +-
8436 drivers/infiniband/core/uverbs_cmd.c | 3 +
8437 drivers/infiniband/hw/cxgb4/device.c | 6 +-
8438 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
8439 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
8440 drivers/infiniband/hw/mlx4/mad.c | 2 +-
8441 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
8442 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
8443 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
8444 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
8445 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
8446 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
8447 drivers/infiniband/hw/nes/nes.c | 4 +-
8448 drivers/infiniband/hw/nes/nes.h | 40 +-
8449 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
8450 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
8451 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
8452 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
8453 drivers/infiniband/hw/qib/qib.h | 1 +
8454 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
8455 drivers/input/evdev.c | 2 +-
8456 drivers/input/gameport/gameport.c | 4 +-
8457 drivers/input/input.c | 4 +-
8458 drivers/input/joystick/sidewinder.c | 1 +
8459 drivers/input/misc/ims-pcu.c | 4 +-
8460 drivers/input/mouse/psmouse.h | 2 +-
8461 drivers/input/mousedev.c | 2 +-
8462 drivers/input/serio/serio.c | 4 +-
8463 drivers/input/serio/serio_raw.c | 4 +-
8464 drivers/input/touchscreen/htcpen.c | 2 +-
8465 drivers/iommu/arm-smmu-v3.c | 2 +-
8466 drivers/iommu/arm-smmu.c | 43 +-
8467 drivers/iommu/io-pgtable-arm.c | 101 +-
8468 drivers/iommu/io-pgtable.c | 11 +-
8469 drivers/iommu/io-pgtable.h | 19 +-
8470 drivers/iommu/iommu.c | 2 +-
8471 drivers/iommu/ipmmu-vmsa.c | 13 +-
8472 drivers/iommu/irq_remapping.c | 2 +-
8473 drivers/irqchip/irq-gic.c | 2 +-
8474 drivers/irqchip/irq-i8259.c | 2 +-
8475 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
8476 drivers/isdn/capi/capi.c | 10 +-
8477 drivers/isdn/gigaset/interface.c | 8 +-
8478 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
8479 drivers/isdn/hardware/avm/b1.c | 4 +-
8480 drivers/isdn/i4l/isdn_common.c | 2 +
8481 drivers/isdn/i4l/isdn_tty.c | 22 +-
8482 drivers/isdn/icn/icn.c | 2 +-
8483 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
8484 drivers/lguest/core.c | 10 +-
8485 drivers/lguest/page_tables.c | 2 +-
8486 drivers/lguest/x86/core.c | 12 +-
8487 drivers/lguest/x86/switcher_32.S | 27 +-
8488 drivers/md/bcache/alloc.c | 2 +-
8489 drivers/md/bcache/bcache.h | 10 +-
8490 drivers/md/bcache/btree.c | 2 +-
8491 drivers/md/bcache/closure.h | 2 +-
8492 drivers/md/bcache/io.c | 10 +-
8493 drivers/md/bcache/journal.c | 2 +-
8494 drivers/md/bcache/stats.c | 26 +-
8495 drivers/md/bcache/stats.h | 16 +-
8496 drivers/md/bcache/super.c | 2 +-
8497 drivers/md/bcache/sysfs.c | 20 +-
8498 drivers/md/bitmap.c | 2 +-
8499 drivers/md/dm-cache-target.c | 98 +-
8500 drivers/md/dm-ioctl.c | 2 +-
8501 drivers/md/dm-raid.c | 2 +-
8502 drivers/md/dm-raid1.c | 18 +-
8503 drivers/md/dm-stats.c | 6 +-
8504 drivers/md/dm-stripe.c | 10 +-
8505 drivers/md/dm-table.c | 2 +-
8506 drivers/md/dm-thin-metadata.c | 4 +-
8507 drivers/md/dm.c | 28 +-
8508 drivers/md/md.c | 37 +-
8509 drivers/md/md.h | 8 +-
8510 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
8511 drivers/md/persistent-data/dm-space-map.h | 1 +
8512 drivers/md/raid1.c | 8 +-
8513 drivers/md/raid10.c | 20 +-
8514 drivers/md/raid5.c | 26 +-
8515 drivers/media/dvb-core/dvbdev.c | 2 +-
8516 drivers/media/dvb-frontends/af9033.h | 2 +-
8517 drivers/media/dvb-frontends/dib3000.h | 2 +-
8518 drivers/media/dvb-frontends/dib7000p.h | 2 +-
8519 drivers/media/dvb-frontends/dib8000.h | 2 +-
8520 drivers/media/pci/cx88/cx88-video.c | 6 +-
8521 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
8522 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
8523 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
8524 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
8525 drivers/media/pci/tw68/tw68-core.c | 2 +-
8526 drivers/media/pci/zoran/zoran.h | 1 -
8527 drivers/media/pci/zoran/zoran_driver.c | 3 -
8528 drivers/media/platform/omap/omap_vout.c | 11 +-
8529 drivers/media/platform/s5p-tv/mixer.h | 2 +-
8530 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
8531 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
8532 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
8533 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
8534 drivers/media/radio/radio-cadet.c | 2 +
8535 drivers/media/radio/radio-maxiradio.c | 2 +-
8536 drivers/media/radio/radio-shark.c | 2 +-
8537 drivers/media/radio/radio-shark2.c | 2 +-
8538 drivers/media/radio/radio-si476x.c | 2 +-
8539 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
8540 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
8541 drivers/media/v4l2-core/v4l2-device.c | 4 +-
8542 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
8543 drivers/memory/omap-gpmc.c | 21 +-
8544 drivers/message/fusion/mptsas.c | 34 +-
8545 drivers/mfd/ab8500-debugfs.c | 2 +-
8546 drivers/mfd/kempld-core.c | 2 +-
8547 drivers/mfd/max8925-i2c.c | 2 +-
8548 drivers/mfd/tps65910.c | 2 +-
8549 drivers/mfd/twl4030-irq.c | 9 +-
8550 drivers/misc/c2port/core.c | 4 +-
8551 drivers/misc/kgdbts.c | 4 +-
8552 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
8553 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
8554 drivers/misc/mic/scif/scif_api.c | 10 +-
8555 drivers/misc/mic/scif/scif_rb.c | 8 +-
8556 drivers/misc/sgi-gru/gruhandles.c | 4 +-
8557 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
8558 drivers/misc/sgi-gru/grutables.h | 158 +-
8559 drivers/misc/sgi-xp/xp.h | 2 +-
8560 drivers/misc/sgi-xp/xpc.h | 3 +-
8561 drivers/misc/sgi-xp/xpc_main.c | 2 +-
8562 drivers/mmc/host/dw_mmc.h | 2 +-
8563 drivers/mmc/host/mmci.c | 4 +-
8564 drivers/mmc/host/omap_hsmmc.c | 4 +-
8565 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
8566 drivers/mmc/host/sdhci-s3c.c | 8 +-
8567 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
8568 drivers/mtd/nand/denali.c | 1 +
8569 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
8570 drivers/mtd/nftlmount.c | 1 +
8571 drivers/mtd/sm_ftl.c | 2 +-
8572 drivers/net/bonding/bond_netlink.c | 2 +-
8573 drivers/net/caif/caif_hsi.c | 2 +-
8574 drivers/net/can/Kconfig | 2 +-
8575 drivers/net/can/dev.c | 2 +-
8576 drivers/net/can/vcan.c | 2 +-
8577 drivers/net/dummy.c | 2 +-
8578 drivers/net/ethernet/8390/ax88796.c | 4 +-
8579 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
8580 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
8581 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
8582 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
8583 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
8584 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
8585 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
8586 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
8587 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
8588 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
8589 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
8590 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
8591 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
8592 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
8593 drivers/net/ethernet/broadcom/tg3.h | 1 +
8594 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
8595 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
8596 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
8597 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
8598 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
8599 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
8600 drivers/net/ethernet/faraday/ftmac100.c | 2 +
8601 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
8602 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
8603 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
8604 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
8605 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
8606 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
8607 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
8608 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
8609 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
8610 drivers/net/ethernet/realtek/r8169.c | 8 +-
8611 drivers/net/ethernet/sfc/ptp.c | 2 +-
8612 drivers/net/ethernet/sfc/selftest.c | 20 +-
8613 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
8614 drivers/net/ethernet/via/via-rhine.c | 2 +-
8615 drivers/net/geneve.c | 2 +-
8616 drivers/net/hyperv/hyperv_net.h | 2 +-
8617 drivers/net/hyperv/rndis_filter.c | 7 +-
8618 drivers/net/ifb.c | 2 +-
8619 drivers/net/ipvlan/ipvlan_core.c | 2 +-
8620 drivers/net/irda/vlsi_ir.c | 18 +-
8621 drivers/net/irda/vlsi_ir.h | 14 +-
8622 drivers/net/macvlan.c | 20 +-
8623 drivers/net/macvtap.c | 10 +-
8624 drivers/net/nlmon.c | 2 +-
8625 drivers/net/phy/phy_device.c | 6 +-
8626 drivers/net/ppp/ppp_generic.c | 4 +-
8627 drivers/net/slip/slhc.c | 2 +-
8628 drivers/net/team/team.c | 4 +-
8629 drivers/net/tun.c | 7 +-
8630 drivers/net/usb/hso.c | 23 +-
8631 drivers/net/usb/r8152.c | 2 +-
8632 drivers/net/usb/sierra_net.c | 4 +-
8633 drivers/net/virtio_net.c | 2 +-
8634 drivers/net/vrf.c | 2 +-
8635 drivers/net/vxlan.c | 4 +-
8636 drivers/net/wimax/i2400m/rx.c | 2 +-
8637 drivers/net/wireless/airo.c | 2 +-
8638 drivers/net/wireless/at76c50x-usb.c | 2 +-
8639 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
8640 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
8641 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
8642 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
8643 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
8644 drivers/net/wireless/ath/ath9k/main.c | 22 +-
8645 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
8646 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
8647 drivers/net/wireless/ath/carl9170/main.c | 10 +-
8648 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
8649 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
8650 drivers/net/wireless/b43/phy_lp.c | 2 +-
8651 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
8652 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
8653 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
8654 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
8655 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
8656 drivers/net/wireless/mac80211_hwsim.c | 28 +-
8657 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
8658 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
8659 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
8660 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
8661 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
8662 drivers/of/fdt.c | 4 +-
8663 drivers/oprofile/buffer_sync.c | 8 +-
8664 drivers/oprofile/event_buffer.c | 2 +-
8665 drivers/oprofile/oprof.c | 2 +-
8666 drivers/oprofile/oprofile_stats.c | 10 +-
8667 drivers/oprofile/oprofile_stats.h | 10 +-
8668 drivers/oprofile/oprofilefs.c | 6 +-
8669 drivers/oprofile/timer_int.c | 2 +-
8670 drivers/parport/procfs.c | 4 +-
8671 drivers/pci/host/pci-host-generic.c | 2 +-
8672 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
8673 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
8674 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
8675 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
8676 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
8677 drivers/pci/hotplug/pciehp_core.c | 2 +-
8678 drivers/pci/msi.c | 22 +-
8679 drivers/pci/pci-sysfs.c | 6 +-
8680 drivers/pci/pci.h | 2 +-
8681 drivers/pci/pcie/aspm.c | 6 +-
8682 drivers/pci/pcie/portdrv_pci.c | 2 +-
8683 drivers/pci/probe.c | 2 +-
8684 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
8685 drivers/pinctrl/pinctrl-at91.c | 5 +-
8686 drivers/platform/chrome/chromeos_pstore.c | 2 +-
8687 drivers/platform/x86/alienware-wmi.c | 4 +-
8688 drivers/platform/x86/compal-laptop.c | 2 +-
8689 drivers/platform/x86/hdaps.c | 2 +-
8690 drivers/platform/x86/ibm_rtl.c | 2 +-
8691 drivers/platform/x86/intel_oaktrail.c | 2 +-
8692 drivers/platform/x86/msi-laptop.c | 16 +-
8693 drivers/platform/x86/msi-wmi.c | 2 +-
8694 drivers/platform/x86/samsung-laptop.c | 2 +-
8695 drivers/platform/x86/samsung-q10.c | 2 +-
8696 drivers/platform/x86/sony-laptop.c | 14 +-
8697 drivers/platform/x86/thinkpad_acpi.c | 2 +-
8698 drivers/pnp/pnpbios/bioscalls.c | 14 +-
8699 drivers/pnp/pnpbios/core.c | 2 +-
8700 drivers/power/pda_power.c | 7 +-
8701 drivers/power/power_supply.h | 4 +-
8702 drivers/power/power_supply_core.c | 7 +-
8703 drivers/power/power_supply_sysfs.c | 6 +-
8704 drivers/power/reset/at91-reset.c | 5 +-
8705 drivers/powercap/powercap_sys.c | 136 +-
8706 drivers/ptp/ptp_private.h | 2 +-
8707 drivers/ptp/ptp_sysfs.c | 2 +-
8708 drivers/regulator/core.c | 4 +-
8709 drivers/regulator/max8660.c | 6 +-
8710 drivers/regulator/max8973-regulator.c | 16 +-
8711 drivers/regulator/mc13892-regulator.c | 8 +-
8712 drivers/rtc/rtc-armada38x.c | 7 +-
8713 drivers/rtc/rtc-cmos.c | 4 +-
8714 drivers/rtc/rtc-ds1307.c | 2 +-
8715 drivers/rtc/rtc-m48t59.c | 4 +-
8716 drivers/rtc/rtc-rv8803.c | 15 +-
8717 drivers/rtc/rtc-test.c | 6 +-
8718 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
8719 drivers/scsi/bfa/bfa_ioc.h | 4 +-
8720 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
8721 drivers/scsi/hosts.c | 4 +-
8722 drivers/scsi/hpsa.c | 38 +-
8723 drivers/scsi/hpsa.h | 2 +-
8724 drivers/scsi/hptiop.c | 2 -
8725 drivers/scsi/hptiop.h | 1 -
8726 drivers/scsi/ipr.c | 6 +-
8727 drivers/scsi/ipr.h | 2 +-
8728 drivers/scsi/libfc/fc_exch.c | 50 +-
8729 drivers/scsi/libsas/sas_ata.c | 2 +-
8730 drivers/scsi/lpfc/lpfc.h | 8 +-
8731 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
8732 drivers/scsi/lpfc/lpfc_init.c | 6 +-
8733 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
8734 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
8735 drivers/scsi/pmcraid.c | 20 +-
8736 drivers/scsi/pmcraid.h | 8 +-
8737 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
8738 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
8739 drivers/scsi/qla2xxx/qla_os.c | 6 +-
8740 drivers/scsi/qla2xxx/qla_target.c | 10 +-
8741 drivers/scsi/qla2xxx/qla_target.h | 2 +-
8742 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
8743 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
8744 drivers/scsi/scsi.c | 2 +-
8745 drivers/scsi/scsi_lib.c | 8 +-
8746 drivers/scsi/scsi_sysfs.c | 2 +-
8747 drivers/scsi/scsi_transport_fc.c | 8 +-
8748 drivers/scsi/scsi_transport_iscsi.c | 6 +-
8749 drivers/scsi/scsi_transport_srp.c | 6 +-
8750 drivers/scsi/sd.c | 6 +-
8751 drivers/scsi/sg.c | 2 +-
8752 drivers/scsi/sr.c | 21 +-
8753 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
8754 drivers/spi/spi.c | 2 +-
8755 drivers/staging/android/timed_output.c | 6 +-
8756 drivers/staging/comedi/comedi_fops.c | 8 +-
8757 drivers/staging/fbtft/fbtft-core.c | 2 +-
8758 drivers/staging/fbtft/fbtft.h | 2 +-
8759 drivers/staging/gdm724x/gdm_tty.c | 2 +-
8760 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
8761 drivers/staging/iio/adc/ad7280a.c | 4 +-
8762 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
8763 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
8764 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
8765 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
8766 drivers/staging/lustre/lustre/include/obd.h | 2 +-
8767 drivers/staging/octeon/ethernet-rx.c | 20 +-
8768 drivers/staging/octeon/ethernet.c | 8 +-
8769 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
8770 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
8771 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
8772 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
8773 drivers/staging/sm750fb/sm750.c | 14 +-
8774 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
8775 drivers/target/sbp/sbp_target.c | 4 +-
8776 drivers/thermal/cpu_cooling.c | 9 +-
8777 drivers/thermal/devfreq_cooling.c | 19 +-
8778 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
8779 drivers/thermal/of-thermal.c | 17 +-
8780 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
8781 drivers/tty/cyclades.c | 6 +-
8782 drivers/tty/hvc/hvc_console.c | 14 +-
8783 drivers/tty/hvc/hvcs.c | 21 +-
8784 drivers/tty/hvc/hvsi.c | 22 +-
8785 drivers/tty/hvc/hvsi_lib.c | 4 +-
8786 drivers/tty/ipwireless/tty.c | 27 +-
8787 drivers/tty/moxa.c | 2 +-
8788 drivers/tty/n_gsm.c | 4 +-
8789 drivers/tty/n_tty.c | 19 +-
8790 drivers/tty/pty.c | 4 +-
8791 drivers/tty/rocket.c | 6 +-
8792 drivers/tty/serial/8250/8250_core.c | 10 +-
8793 drivers/tty/serial/ifx6x60.c | 2 +-
8794 drivers/tty/serial/ioc4_serial.c | 6 +-
8795 drivers/tty/serial/kgdb_nmi.c | 4 +-
8796 drivers/tty/serial/kgdboc.c | 32 +-
8797 drivers/tty/serial/msm_serial.c | 4 +-
8798 drivers/tty/serial/samsung.c | 9 +-
8799 drivers/tty/serial/serial_core.c | 8 +-
8800 drivers/tty/synclink.c | 34 +-
8801 drivers/tty/synclink_gt.c | 28 +-
8802 drivers/tty/synclinkmp.c | 34 +-
8803 drivers/tty/tty_io.c | 2 +-
8804 drivers/tty/tty_ldisc.c | 8 +-
8805 drivers/tty/tty_port.c | 22 +-
8806 drivers/uio/uio.c | 13 +-
8807 drivers/usb/atm/cxacru.c | 2 +-
8808 drivers/usb/atm/usbatm.c | 24 +-
8809 drivers/usb/class/cdc-acm.h | 2 +-
8810 drivers/usb/core/devices.c | 6 +-
8811 drivers/usb/core/devio.c | 12 +-
8812 drivers/usb/core/hcd.c | 4 +-
8813 drivers/usb/core/sysfs.c | 2 +-
8814 drivers/usb/core/usb.c | 2 +-
8815 drivers/usb/early/ehci-dbgp.c | 16 +-
8816 drivers/usb/gadget/function/u_serial.c | 22 +-
8817 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
8818 drivers/usb/host/ehci-hcd.c | 2 +-
8819 drivers/usb/host/ehci-hub.c | 4 +-
8820 drivers/usb/host/ehci-q.c | 4 +-
8821 drivers/usb/host/fotg210-hcd.c | 2 +-
8822 drivers/usb/host/hwa-hc.c | 2 +-
8823 drivers/usb/host/ohci-hcd.c | 2 +-
8824 drivers/usb/host/r8a66597.h | 2 +-
8825 drivers/usb/host/uhci-hcd.c | 2 +-
8826 drivers/usb/host/xhci-pci.c | 2 +-
8827 drivers/usb/host/xhci.c | 2 +-
8828 drivers/usb/misc/appledisplay.c | 4 +-
8829 drivers/usb/serial/console.c | 8 +-
8830 drivers/usb/storage/transport.c | 2 +-
8831 drivers/usb/storage/usb.c | 2 +-
8832 drivers/usb/storage/usb.h | 2 +-
8833 drivers/usb/usbip/vhci.h | 2 +-
8834 drivers/usb/usbip/vhci_hcd.c | 6 +-
8835 drivers/usb/usbip/vhci_rx.c | 2 +-
8836 drivers/usb/wusbcore/wa-hc.h | 4 +-
8837 drivers/usb/wusbcore/wa-xfer.c | 2 +-
8838 drivers/vhost/vringh.c | 20 +-
8839 drivers/video/backlight/kb3886_bl.c | 2 +-
8840 drivers/video/console/fbcon.c | 2 +-
8841 drivers/video/fbdev/aty/aty128fb.c | 2 +-
8842 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
8843 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
8844 drivers/video/fbdev/core/fb_defio.c | 6 +-
8845 drivers/video/fbdev/core/fbmem.c | 12 +-
8846 drivers/video/fbdev/hyperv_fb.c | 4 +-
8847 drivers/video/fbdev/i810/i810_accel.c | 1 +
8848 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
8849 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
8850 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
8851 drivers/video/fbdev/omap2/dss/display.c | 8 +-
8852 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
8853 drivers/video/fbdev/smscufx.c | 4 +-
8854 drivers/video/fbdev/udlfb.c | 36 +-
8855 drivers/video/fbdev/uvesafb.c | 52 +-
8856 drivers/video/fbdev/vesafb.c | 58 +-
8857 drivers/video/fbdev/via/via_clock.h | 2 +-
8858 drivers/xen/events/events_base.c | 6 +-
8859 fs/Kconfig.binfmt | 2 +-
8860 fs/afs/inode.c | 4 +-
8861 fs/aio.c | 2 +-
8862 fs/autofs4/waitq.c | 2 +-
8863 fs/befs/endian.h | 6 +-
8864 fs/binfmt_aout.c | 23 +-
8865 fs/binfmt_elf.c | 670 +-
8866 fs/binfmt_elf_fdpic.c | 4 +-
8867 fs/block_dev.c | 2 +-
8868 fs/btrfs/ctree.c | 11 +-
8869 fs/btrfs/ctree.h | 4 +-
8870 fs/btrfs/delayed-inode.c | 9 +-
8871 fs/btrfs/delayed-inode.h | 6 +-
8872 fs/btrfs/delayed-ref.c | 4 +-
8873 fs/btrfs/disk-io.c | 4 +-
8874 fs/btrfs/extent_map.c | 8 +-
8875 fs/btrfs/file.c | 4 +-
8876 fs/btrfs/inode.c | 14 +-
8877 fs/btrfs/raid56.c | 32 +-
8878 fs/btrfs/super.c | 2 +-
8879 fs/btrfs/sysfs.c | 2 +-
8880 fs/btrfs/tests/btrfs-tests.c | 2 +-
8881 fs/btrfs/tests/free-space-tests.c | 8 +-
8882 fs/btrfs/transaction.c | 2 +-
8883 fs/btrfs/tree-log.c | 8 +-
8884 fs/btrfs/tree-log.h | 2 +-
8885 fs/btrfs/volumes.c | 14 +-
8886 fs/btrfs/volumes.h | 22 +-
8887 fs/buffer.c | 2 +-
8888 fs/cachefiles/bind.c | 6 +-
8889 fs/cachefiles/daemon.c | 8 +-
8890 fs/cachefiles/internal.h | 12 +-
8891 fs/cachefiles/namei.c | 2 +-
8892 fs/cachefiles/proc.c | 12 +-
8893 fs/ceph/dir.c | 12 +-
8894 fs/ceph/super.c | 4 +-
8895 fs/cifs/cifs_debug.c | 12 +-
8896 fs/cifs/cifsfs.c | 8 +-
8897 fs/cifs/cifsglob.h | 54 +-
8898 fs/cifs/file.c | 12 +-
8899 fs/cifs/misc.c | 4 +-
8900 fs/cifs/smb1ops.c | 80 +-
8901 fs/cifs/smb2ops.c | 84 +-
8902 fs/cifs/smb2pdu.c | 3 +-
8903 fs/coda/cache.c | 10 +-
8904 fs/compat.c | 7 +-
8905 fs/compat_binfmt_elf.c | 2 +
8906 fs/compat_ioctl.c | 12 +-
8907 fs/configfs/dir.c | 10 +-
8908 fs/coredump.c | 18 +-
8909 fs/dcache.c | 64 +-
8910 fs/ecryptfs/inode.c | 2 +-
8911 fs/ecryptfs/miscdev.c | 2 +-
8912 fs/exec.c | 362 +-
8913 fs/ext2/xattr.c | 5 +-
8914 fs/ext4/ext4.h | 20 +-
8915 fs/ext4/mballoc.c | 44 +-
8916 fs/ext4/resize.c | 16 +-
8917 fs/ext4/super.c | 2 +-
8918 fs/ext4/sysfs.c | 2 +-
8919 fs/ext4/xattr.c | 5 +-
8920 fs/fhandle.c | 5 +-
8921 fs/file.c | 18 +-
8922 fs/fs-writeback.c | 11 +-
8923 fs/fs_struct.c | 8 +-
8924 fs/fscache/cookie.c | 40 +-
8925 fs/fscache/internal.h | 202 +-
8926 fs/fscache/object.c | 26 +-
8927 fs/fscache/operation.c | 38 +-
8928 fs/fscache/page.c | 110 +-
8929 fs/fscache/stats.c | 348 +-
8930 fs/fuse/cuse.c | 10 +-
8931 fs/fuse/dev.c | 4 +-
8932 fs/gfs2/file.c | 2 +-
8933 fs/gfs2/glock.c | 22 +-
8934 fs/gfs2/glops.c | 4 +-
8935 fs/gfs2/quota.c | 6 +-
8936 fs/hugetlbfs/inode.c | 13 +-
8937 fs/inode.c | 4 +-
8938 fs/jbd2/commit.c | 2 +-
8939 fs/jbd2/transaction.c | 4 +-
8940 fs/jffs2/erase.c | 3 +-
8941 fs/jffs2/wbuf.c | 3 +-
8942 fs/jfs/super.c | 2 +-
8943 fs/kernfs/dir.c | 2 +-
8944 fs/kernfs/file.c | 20 +-
8945 fs/libfs.c | 10 +-
8946 fs/lockd/clntproc.c | 4 +-
8947 fs/namei.c | 16 +-
8948 fs/namespace.c | 16 +-
8949 fs/nfs/callback_xdr.c | 2 +-
8950 fs/nfs/inode.c | 6 +-
8951 fs/nfsd/nfs4proc.c | 2 +-
8952 fs/nfsd/nfs4xdr.c | 2 +-
8953 fs/nfsd/nfscache.c | 11 +-
8954 fs/nfsd/vfs.c | 6 +-
8955 fs/nls/nls_base.c | 26 +-
8956 fs/nls/nls_euc-jp.c | 6 +-
8957 fs/nls/nls_koi8-ru.c | 6 +-
8958 fs/notify/fanotify/fanotify_user.c | 4 +-
8959 fs/notify/notification.c | 4 +-
8960 fs/ntfs/dir.c | 2 +-
8961 fs/ntfs/super.c | 6 +-
8962 fs/ocfs2/dlm/dlmcommon.h | 4 +-
8963 fs/ocfs2/dlm/dlmdebug.c | 10 +-
8964 fs/ocfs2/dlm/dlmdomain.c | 4 +-
8965 fs/ocfs2/dlm/dlmmaster.c | 4 +-
8966 fs/ocfs2/localalloc.c | 2 +-
8967 fs/ocfs2/ocfs2.h | 10 +-
8968 fs/ocfs2/suballoc.c | 12 +-
8969 fs/ocfs2/super.c | 20 +-
8970 fs/overlayfs/copy_up.c | 2 +-
8971 fs/pipe.c | 72 +-
8972 fs/posix_acl.c | 4 +-
8973 fs/proc/array.c | 20 +
8974 fs/proc/base.c | 4 +-
8975 fs/proc/kcore.c | 34 +-
8976 fs/proc/meminfo.c | 2 +-
8977 fs/proc/nommu.c | 2 +-
8978 fs/proc/proc_sysctl.c | 26 +-
8979 fs/proc/task_mmu.c | 42 +-
8980 fs/proc/task_nommu.c | 4 +-
8981 fs/proc/vmcore.c | 16 +-
8982 fs/qnx6/qnx6.h | 4 +-
8983 fs/quota/netlink.c | 4 +-
8984 fs/read_write.c | 2 +-
8985 fs/readdir.c | 3 +-
8986 fs/reiserfs/do_balan.c | 2 +-
8987 fs/reiserfs/procfs.c | 2 +-
8988 fs/reiserfs/reiserfs.h | 4 +-
8989 fs/seq_file.c | 4 +-
8990 fs/splice.c | 43 +-
8991 fs/squashfs/xattr.c | 12 +-
8992 fs/super.c | 3 +-
8993 fs/sysv/sysv.h | 2 +-
8994 fs/tracefs/inode.c | 8 +-
8995 fs/udf/misc.c | 2 +-
8996 fs/ufs/swab.h | 4 +-
8997 fs/userfaultfd.c | 2 +-
8998 fs/xattr.c | 21 +
8999 fs/xfs/libxfs/xfs_bmap.c | 2 +-
9000 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
9001 fs/xfs/xfs_dir2_readdir.c | 7 +-
9002 fs/xfs/xfs_ioctl.c | 2 +-
9003 fs/xfs/xfs_linux.h | 4 +-
9004 include/acpi/ghes.h | 2 +-
9005 include/asm-generic/4level-fixup.h | 2 +
9006 include/asm-generic/atomic-long.h | 176 +-
9007 include/asm-generic/atomic64.h | 12 +
9008 include/asm-generic/bitops/__fls.h | 2 +-
9009 include/asm-generic/bitops/fls.h | 2 +-
9010 include/asm-generic/bitops/fls64.h | 4 +-
9011 include/asm-generic/bug.h | 6 +-
9012 include/asm-generic/cache.h | 4 +-
9013 include/asm-generic/emergency-restart.h | 2 +-
9014 include/asm-generic/kmap_types.h | 4 +-
9015 include/asm-generic/local.h | 13 +
9016 include/asm-generic/pgtable-nopmd.h | 18 +-
9017 include/asm-generic/pgtable-nopud.h | 15 +-
9018 include/asm-generic/pgtable.h | 16 +
9019 include/asm-generic/sections.h | 1 +
9020 include/asm-generic/uaccess.h | 16 +
9021 include/asm-generic/vmlinux.lds.h | 15 +-
9022 include/crypto/algapi.h | 2 +-
9023 include/drm/drmP.h | 19 +-
9024 include/drm/drm_crtc_helper.h | 2 +-
9025 include/drm/drm_mm.h | 2 +-
9026 include/drm/i915_pciids.h | 2 +-
9027 include/drm/intel-gtt.h | 4 +-
9028 include/drm/ttm/ttm_memory.h | 2 +-
9029 include/drm/ttm/ttm_page_alloc.h | 1 +
9030 include/keys/asymmetric-subtype.h | 2 +-
9031 include/linux/atmdev.h | 4 +-
9032 include/linux/atomic.h | 2 +-
9033 include/linux/audit.h | 2 +-
9034 include/linux/average.h | 2 +-
9035 include/linux/binfmts.h | 3 +-
9036 include/linux/bitmap.h | 2 +-
9037 include/linux/bitops.h | 8 +-
9038 include/linux/blk-cgroup.h | 24 +-
9039 include/linux/blkdev.h | 2 +-
9040 include/linux/blktrace_api.h | 2 +-
9041 include/linux/cache.h | 8 +
9042 include/linux/cdrom.h | 1 -
9043 include/linux/cleancache.h | 2 +-
9044 include/linux/clk-provider.h | 1 +
9045 include/linux/compat.h | 6 +-
9046 include/linux/compiler-gcc.h | 28 +-
9047 include/linux/compiler.h | 193 +-
9048 include/linux/configfs.h | 2 +-
9049 include/linux/cpufreq.h | 3 +-
9050 include/linux/cpuidle.h | 5 +-
9051 include/linux/cpumask.h | 14 +-
9052 include/linux/crypto.h | 4 +-
9053 include/linux/ctype.h | 2 +-
9054 include/linux/dcache.h | 4 +-
9055 include/linux/decompress/mm.h | 2 +-
9056 include/linux/devfreq.h | 2 +-
9057 include/linux/device.h | 7 +-
9058 include/linux/dma-mapping.h | 2 +-
9059 include/linux/efi.h | 1 +
9060 include/linux/elf.h | 2 +
9061 include/linux/err.h | 4 +-
9062 include/linux/extcon.h | 2 +-
9063 include/linux/fb.h | 3 +-
9064 include/linux/fdtable.h | 2 +-
9065 include/linux/fs.h | 5 +-
9066 include/linux/fs_struct.h | 2 +-
9067 include/linux/fscache-cache.h | 2 +-
9068 include/linux/fscache.h | 2 +-
9069 include/linux/fsnotify.h | 2 +-
9070 include/linux/genhd.h | 4 +-
9071 include/linux/genl_magic_func.h | 2 +-
9072 include/linux/gfp.h | 12 +-
9073 include/linux/highmem.h | 12 +
9074 include/linux/hwmon-sysfs.h | 6 +-
9075 include/linux/i2c.h | 1 +
9076 include/linux/if_pppox.h | 2 +-
9077 include/linux/init.h | 12 +-
9078 include/linux/init_task.h | 7 +
9079 include/linux/interrupt.h | 6 +-
9080 include/linux/iommu.h | 2 +-
9081 include/linux/ioport.h | 2 +-
9082 include/linux/ipc.h | 2 +-
9083 include/linux/irq.h | 5 +-
9084 include/linux/irqdesc.h | 2 +-
9085 include/linux/irqdomain.h | 3 +
9086 include/linux/jbd2.h | 2 +-
9087 include/linux/jiffies.h | 16 +-
9088 include/linux/key-type.h | 2 +-
9089 include/linux/kgdb.h | 6 +-
9090 include/linux/kmemleak.h | 4 +-
9091 include/linux/kobject.h | 3 +-
9092 include/linux/kobject_ns.h | 2 +-
9093 include/linux/kref.h | 2 +-
9094 include/linux/libata.h | 2 +-
9095 include/linux/linkage.h | 1 +
9096 include/linux/list.h | 15 +
9097 include/linux/lockref.h | 26 +-
9098 include/linux/math64.h | 10 +-
9099 include/linux/mempolicy.h | 7 +
9100 include/linux/mm.h | 102 +-
9101 include/linux/mm_types.h | 20 +
9102 include/linux/mmiotrace.h | 4 +-
9103 include/linux/mmzone.h | 2 +-
9104 include/linux/mod_devicetable.h | 4 +-
9105 include/linux/module.h | 69 +-
9106 include/linux/moduleloader.h | 16 +
9107 include/linux/moduleparam.h | 4 +-
9108 include/linux/net.h | 2 +-
9109 include/linux/netdevice.h | 7 +-
9110 include/linux/netfilter.h | 2 +-
9111 include/linux/netfilter/nfnetlink.h | 2 +-
9112 include/linux/netlink.h | 12 +-
9113 include/linux/nls.h | 4 +-
9114 include/linux/notifier.h | 3 +-
9115 include/linux/oprofile.h | 4 +-
9116 include/linux/padata.h | 2 +-
9117 include/linux/pci_hotplug.h | 3 +-
9118 include/linux/percpu.h | 2 +-
9119 include/linux/perf_event.h | 12 +-
9120 include/linux/pipe_fs_i.h | 8 +-
9121 include/linux/pm.h | 1 +
9122 include/linux/pm_domain.h | 2 +-
9123 include/linux/pm_runtime.h | 2 +-
9124 include/linux/pnp.h | 2 +-
9125 include/linux/poison.h | 4 +-
9126 include/linux/power/smartreflex.h | 2 +-
9127 include/linux/ppp-comp.h | 2 +-
9128 include/linux/preempt.h | 21 +
9129 include/linux/proc_ns.h | 2 +-
9130 include/linux/psci.h | 2 +-
9131 include/linux/quota.h | 2 +-
9132 include/linux/random.h | 19 +-
9133 include/linux/rculist.h | 16 +
9134 include/linux/rcupdate.h | 8 +
9135 include/linux/reboot.h | 14 +-
9136 include/linux/regset.h | 3 +-
9137 include/linux/relay.h | 2 +-
9138 include/linux/rio.h | 2 +-
9139 include/linux/rmap.h | 4 +-
9140 include/linux/sched.h | 76 +-
9141 include/linux/sched/sysctl.h | 1 +
9142 include/linux/scif.h | 2 +-
9143 include/linux/semaphore.h | 2 +-
9144 include/linux/seq_file.h | 1 +
9145 include/linux/seqlock.h | 10 +
9146 include/linux/signal.h | 2 +-
9147 include/linux/skbuff.h | 12 +-
9148 include/linux/slab.h | 47 +-
9149 include/linux/slab_def.h | 14 +-
9150 include/linux/slub_def.h | 2 +-
9151 include/linux/smp.h | 2 +
9152 include/linux/sock_diag.h | 2 +-
9153 include/linux/sonet.h | 2 +-
9154 include/linux/spinlock.h | 17 +-
9155 include/linux/srcu.h | 5 +-
9156 include/linux/sunrpc/addr.h | 8 +-
9157 include/linux/sunrpc/clnt.h | 2 +-
9158 include/linux/sunrpc/svc.h | 2 +-
9159 include/linux/sunrpc/svc_rdma.h | 18 +-
9160 include/linux/sunrpc/svcauth.h | 2 +-
9161 include/linux/swapops.h | 10 +-
9162 include/linux/swiotlb.h | 3 +-
9163 include/linux/syscalls.h | 23 +-
9164 include/linux/syscore_ops.h | 2 +-
9165 include/linux/sysctl.h | 3 +-
9166 include/linux/sysfs.h | 9 +-
9167 include/linux/sysrq.h | 3 +-
9168 include/linux/tcp.h | 14 +-
9169 include/linux/thread_info.h | 7 +
9170 include/linux/tty.h | 4 +-
9171 include/linux/tty_driver.h | 2 +-
9172 include/linux/tty_ldisc.h | 2 +-
9173 include/linux/types.h | 16 +
9174 include/linux/uaccess.h | 2 +-
9175 include/linux/uio_driver.h | 2 +-
9176 include/linux/unaligned/access_ok.h | 24 +-
9177 include/linux/usb.h | 12 +-
9178 include/linux/usb/hcd.h | 1 +
9179 include/linux/usb/renesas_usbhs.h | 2 +-
9180 include/linux/vermagic.h | 21 +-
9181 include/linux/vga_switcheroo.h | 8 +-
9182 include/linux/vmalloc.h | 7 +-
9183 include/linux/vmstat.h | 24 +-
9184 include/linux/writeback.h | 3 +-
9185 include/linux/xattr.h | 5 +-
9186 include/linux/zlib.h | 3 +-
9187 include/media/v4l2-dev.h | 2 +-
9188 include/media/v4l2-device.h | 2 +-
9189 include/net/9p/transport.h | 2 +-
9190 include/net/bluetooth/l2cap.h | 2 +-
9191 include/net/bonding.h | 2 +-
9192 include/net/caif/cfctrl.h | 6 +-
9193 include/net/cfg802154.h | 2 +-
9194 include/net/flow.h | 2 +-
9195 include/net/genetlink.h | 2 +-
9196 include/net/gro_cells.h | 2 +-
9197 include/net/inet_connection_sock.h | 2 +-
9198 include/net/inet_sock.h | 2 +-
9199 include/net/inetpeer.h | 2 +-
9200 include/net/ip_fib.h | 2 +-
9201 include/net/ip_vs.h | 8 +-
9202 include/net/ipv6.h | 2 +-
9203 include/net/irda/ircomm_tty.h | 1 +
9204 include/net/iucv/af_iucv.h | 2 +-
9205 include/net/llc_c_ac.h | 2 +-
9206 include/net/llc_c_ev.h | 4 +-
9207 include/net/llc_c_st.h | 2 +-
9208 include/net/llc_s_ac.h | 2 +-
9209 include/net/llc_s_st.h | 2 +-
9210 include/net/mac80211.h | 6 +-
9211 include/net/neighbour.h | 4 +-
9212 include/net/net_namespace.h | 18 +-
9213 include/net/netlink.h | 2 +-
9214 include/net/netns/conntrack.h | 6 +-
9215 include/net/netns/ipv4.h | 4 +-
9216 include/net/netns/ipv6.h | 4 +-
9217 include/net/netns/xfrm.h | 2 +-
9218 include/net/ping.h | 2 +-
9219 include/net/protocol.h | 4 +-
9220 include/net/rtnetlink.h | 2 +-
9221 include/net/sctp/checksum.h | 4 +-
9222 include/net/sctp/sm.h | 4 +-
9223 include/net/sctp/structs.h | 2 +-
9224 include/net/snmp.h | 10 +-
9225 include/net/sock.h | 12 +-
9226 include/net/tcp.h | 8 +-
9227 include/net/xfrm.h | 13 +-
9228 include/rdma/iw_cm.h | 2 +-
9229 include/scsi/libfc.h | 3 +-
9230 include/scsi/scsi_device.h | 6 +-
9231 include/scsi/scsi_driver.h | 2 +-
9232 include/scsi/scsi_transport_fc.h | 3 +-
9233 include/scsi/sg.h | 2 +-
9234 include/sound/compress_driver.h | 2 +-
9235 include/sound/soc.h | 4 +-
9236 include/trace/events/irq.h | 4 +-
9237 include/uapi/linux/a.out.h | 8 +
9238 include/uapi/linux/bcache.h | 5 +-
9239 include/uapi/linux/byteorder/little_endian.h | 28 +-
9240 include/uapi/linux/connector.h | 2 +-
9241 include/uapi/linux/elf.h | 28 +
9242 include/uapi/linux/screen_info.h | 2 +-
9243 include/uapi/linux/swab.h | 6 +-
9244 include/uapi/linux/xattr.h | 4 +
9245 include/video/udlfb.h | 8 +-
9246 include/video/uvesafb.h | 1 +
9247 init/Kconfig | 2 +-
9248 init/Makefile | 3 +
9249 init/do_mounts.c | 14 +-
9250 init/do_mounts.h | 8 +-
9251 init/do_mounts_initrd.c | 30 +-
9252 init/do_mounts_md.c | 6 +-
9253 init/init_task.c | 4 +
9254 init/initramfs.c | 38 +-
9255 init/main.c | 30 +-
9256 ipc/compat.c | 4 +-
9257 ipc/ipc_sysctl.c | 14 +-
9258 ipc/mq_sysctl.c | 4 +-
9259 ipc/sem.c | 4 +-
9260 ipc/shm.c | 6 +
9261 kernel/audit.c | 8 +-
9262 kernel/auditsc.c | 4 +-
9263 kernel/bpf/core.c | 7 +-
9264 kernel/capability.c | 3 +
9265 kernel/compat.c | 38 +-
9266 kernel/debug/debug_core.c | 16 +-
9267 kernel/debug/kdb/kdb_main.c | 4 +-
9268 kernel/events/core.c | 30 +-
9269 kernel/events/internal.h | 10 +-
9270 kernel/events/uprobes.c | 2 +-
9271 kernel/exit.c | 27 +-
9272 kernel/fork.c | 175 +-
9273 kernel/futex.c | 11 +-
9274 kernel/futex_compat.c | 2 +-
9275 kernel/gcov/base.c | 7 +-
9276 kernel/irq/manage.c | 2 +-
9277 kernel/irq/msi.c | 19 +-
9278 kernel/irq/spurious.c | 2 +-
9279 kernel/jump_label.c | 5 +
9280 kernel/kallsyms.c | 37 +-
9281 kernel/kexec.c | 3 +-
9282 kernel/kmod.c | 8 +-
9283 kernel/kprobes.c | 4 +-
9284 kernel/ksysfs.c | 2 +-
9285 kernel/locking/lockdep.c | 7 +-
9286 kernel/locking/mutex-debug.c | 12 +-
9287 kernel/locking/mutex-debug.h | 4 +-
9288 kernel/locking/mutex.c | 6 +-
9289 kernel/module.c | 422 +-
9290 kernel/notifier.c | 17 +-
9291 kernel/padata.c | 4 +-
9292 kernel/panic.c | 5 +-
9293 kernel/pid.c | 2 +-
9294 kernel/pid_namespace.c | 2 +-
9295 kernel/power/process.c | 12 +-
9296 kernel/profile.c | 14 +-
9297 kernel/ptrace.c | 8 +-
9298 kernel/rcu/rcutorture.c | 60 +-
9299 kernel/rcu/tiny.c | 4 +-
9300 kernel/rcu/tree.c | 42 +-
9301 kernel/rcu/tree.h | 16 +-
9302 kernel/rcu/tree_plugin.h | 18 +-
9303 kernel/rcu/tree_trace.c | 14 +-
9304 kernel/resource.c | 4 +-
9305 kernel/sched/auto_group.c | 4 +-
9306 kernel/sched/core.c | 45 +-
9307 kernel/sched/fair.c | 2 +-
9308 kernel/sched/sched.h | 2 +-
9309 kernel/signal.c | 24 +-
9310 kernel/smpboot.c | 4 +-
9311 kernel/softirq.c | 12 +-
9312 kernel/sys.c | 10 +-
9313 kernel/sysctl.c | 34 +-
9314 kernel/time/alarmtimer.c | 2 +-
9315 kernel/time/posix-cpu-timers.c | 4 +-
9316 kernel/time/posix-timers.c | 24 +-
9317 kernel/time/timer.c | 2 +-
9318 kernel/time/timer_stats.c | 10 +-
9319 kernel/trace/blktrace.c | 6 +-
9320 kernel/trace/ftrace.c | 15 +-
9321 kernel/trace/ring_buffer.c | 96 +-
9322 kernel/trace/trace.c | 2 +-
9323 kernel/trace/trace.h | 2 +-
9324 kernel/trace/trace_clock.c | 4 +-
9325 kernel/trace/trace_events.c | 1 -
9326 kernel/trace/trace_functions_graph.c | 4 +-
9327 kernel/trace/trace_mmiotrace.c | 8 +-
9328 kernel/trace/trace_output.c | 10 +-
9329 kernel/trace/trace_seq.c | 2 +-
9330 kernel/trace/trace_stack.c | 2 +-
9331 kernel/user.c | 2 +-
9332 kernel/user_namespace.c | 2 +-
9333 kernel/utsname_sysctl.c | 2 +-
9334 kernel/watchdog.c | 2 +-
9335 kernel/workqueue.c | 8 +-
9336 lib/Kconfig.debug | 8 +-
9337 lib/Makefile | 2 +-
9338 lib/bitmap.c | 8 +-
9339 lib/bug.c | 2 +
9340 lib/debugobjects.c | 2 +-
9341 lib/decompress_bunzip2.c | 3 +-
9342 lib/decompress_unlzma.c | 4 +-
9343 lib/div64.c | 4 +-
9344 lib/dma-debug.c | 4 +-
9345 lib/inflate.c | 2 +-
9346 lib/ioremap.c | 4 +-
9347 lib/kobject.c | 4 +-
9348 lib/list_debug.c | 126 +-
9349 lib/lockref.c | 44 +-
9350 lib/percpu-refcount.c | 2 +-
9351 lib/radix-tree.c | 2 +-
9352 lib/random32.c | 2 +-
9353 lib/rhashtable.c | 4 +-
9354 lib/show_mem.c | 2 +-
9355 lib/strncpy_from_user.c | 2 +-
9356 lib/strnlen_user.c | 2 +-
9357 lib/swiotlb.c | 2 +-
9358 lib/usercopy.c | 6 +
9359 lib/vsprintf.c | 12 +-
9360 mm/Kconfig | 6 +-
9361 mm/backing-dev.c | 4 +-
9362 mm/debug.c | 3 +
9363 mm/filemap.c | 2 +-
9364 mm/gup.c | 13 +-
9365 mm/highmem.c | 6 +-
9366 mm/hugetlb.c | 70 +-
9367 mm/internal.h | 1 +
9368 mm/maccess.c | 12 +-
9369 mm/madvise.c | 37 +
9370 mm/memory-failure.c | 6 +-
9371 mm/memory.c | 424 +-
9372 mm/mempolicy.c | 25 +
9373 mm/mlock.c | 18 +-
9374 mm/mm_init.c | 2 +-
9375 mm/mmap.c | 582 +-
9376 mm/mprotect.c | 137 +-
9377 mm/mremap.c | 39 +-
9378 mm/nommu.c | 21 +-
9379 mm/page-writeback.c | 2 +-
9380 mm/page_alloc.c | 50 +-
9381 mm/percpu.c | 2 +-
9382 mm/process_vm_access.c | 14 +-
9383 mm/rmap.c | 45 +-
9384 mm/shmem.c | 19 +-
9385 mm/slab.c | 111 +-
9386 mm/slab.h | 22 +-
9387 mm/slab_common.c | 86 +-
9388 mm/slob.c | 218 +-
9389 mm/slub.c | 109 +-
9390 mm/sparse-vmemmap.c | 4 +-
9391 mm/sparse.c | 2 +-
9392 mm/swap.c | 2 +
9393 mm/swapfile.c | 12 +-
9394 mm/util.c | 6 +
9395 mm/vmalloc.c | 114 +-
9396 mm/vmstat.c | 12 +-
9397 net/8021q/vlan.c | 5 +-
9398 net/8021q/vlan_netlink.c | 2 +-
9399 net/9p/mod.c | 4 +-
9400 net/9p/trans_fd.c | 2 +-
9401 net/atm/atm_misc.c | 8 +-
9402 net/atm/lec.h | 2 +-
9403 net/atm/proc.c | 6 +-
9404 net/atm/resources.c | 4 +-
9405 net/ax25/sysctl_net_ax25.c | 2 +-
9406 net/batman-adv/bat_iv_ogm.c | 8 +-
9407 net/batman-adv/fragmentation.c | 2 +-
9408 net/batman-adv/routing.c | 4 +-
9409 net/batman-adv/soft-interface.c | 10 +-
9410 net/batman-adv/translation-table.c | 14 +-
9411 net/batman-adv/types.h | 8 +-
9412 net/bluetooth/hci_sock.c | 2 +-
9413 net/bluetooth/l2cap_core.c | 6 +-
9414 net/bluetooth/l2cap_sock.c | 12 +-
9415 net/bluetooth/rfcomm/sock.c | 4 +-
9416 net/bluetooth/rfcomm/tty.c | 4 +-
9417 net/bridge/br_netlink.c | 2 +-
9418 net/bridge/netfilter/ebtables.c | 6 +-
9419 net/caif/cfctrl.c | 11 +-
9420 net/caif/chnl_net.c | 2 +-
9421 net/can/af_can.c | 2 +-
9422 net/can/gw.c | 6 +-
9423 net/ceph/messenger.c | 4 +-
9424 net/compat.c | 26 +-
9425 net/core/datagram.c | 2 +-
9426 net/core/dev.c | 16 +-
9427 net/core/filter.c | 2 +-
9428 net/core/flow.c | 6 +-
9429 net/core/neighbour.c | 18 +-
9430 net/core/net-sysfs.c | 2 +-
9431 net/core/net_namespace.c | 8 +-
9432 net/core/netpoll.c | 4 +-
9433 net/core/rtnetlink.c | 17 +-
9434 net/core/scm.c | 12 +-
9435 net/core/skbuff.c | 11 +-
9436 net/core/sock.c | 28 +-
9437 net/core/sock_diag.c | 15 +-
9438 net/core/sysctl_net_core.c | 22 +-
9439 net/decnet/af_decnet.c | 1 +
9440 net/decnet/sysctl_net_decnet.c | 4 +-
9441 net/dsa/dsa.c | 2 +-
9442 net/hsr/hsr_netlink.c | 2 +-
9443 net/ieee802154/6lowpan/core.c | 2 +-
9444 net/ieee802154/6lowpan/reassembly.c | 14 +-
9445 net/ipv4/af_inet.c | 2 +-
9446 net/ipv4/arp.c | 2 +-
9447 net/ipv4/devinet.c | 18 +-
9448 net/ipv4/fib_frontend.c | 6 +-
9449 net/ipv4/fib_semantics.c | 2 +-
9450 net/ipv4/inet_connection_sock.c | 4 +-
9451 net/ipv4/inet_diag.c | 4 +-
9452 net/ipv4/inet_timewait_sock.c | 2 +-
9453 net/ipv4/inetpeer.c | 2 +-
9454 net/ipv4/ip_fragment.c | 15 +-
9455 net/ipv4/ip_gre.c | 6 +-
9456 net/ipv4/ip_sockglue.c | 2 +-
9457 net/ipv4/ip_vti.c | 4 +-
9458 net/ipv4/ipconfig.c | 6 +-
9459 net/ipv4/ipip.c | 4 +-
9460 net/ipv4/netfilter/arp_tables.c | 12 +-
9461 net/ipv4/netfilter/ip_tables.c | 12 +-
9462 net/ipv4/ping.c | 14 +-
9463 net/ipv4/proc.c | 8 +-
9464 net/ipv4/raw.c | 14 +-
9465 net/ipv4/route.c | 32 +-
9466 net/ipv4/sysctl_net_ipv4.c | 22 +-
9467 net/ipv4/tcp_input.c | 6 +-
9468 net/ipv4/tcp_probe.c | 2 +-
9469 net/ipv4/udp.c | 10 +-
9470 net/ipv4/xfrm4_mode_transport.c | 2 +-
9471 net/ipv4/xfrm4_policy.c | 17 +-
9472 net/ipv4/xfrm4_state.c | 4 +-
9473 net/ipv6/addrconf.c | 22 +-
9474 net/ipv6/af_inet6.c | 2 +-
9475 net/ipv6/datagram.c | 2 +-
9476 net/ipv6/icmp.c | 2 +-
9477 net/ipv6/ip6_fib.c | 4 +-
9478 net/ipv6/ip6_gre.c | 10 +-
9479 net/ipv6/ip6_tunnel.c | 4 +-
9480 net/ipv6/ip6_vti.c | 4 +-
9481 net/ipv6/ipv6_sockglue.c | 2 +-
9482 net/ipv6/ndisc.c | 2 +-
9483 net/ipv6/netfilter/ip6_tables.c | 12 +-
9484 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
9485 net/ipv6/ping.c | 33 +-
9486 net/ipv6/proc.c | 10 +-
9487 net/ipv6/raw.c | 17 +-
9488 net/ipv6/reassembly.c | 13 +-
9489 net/ipv6/route.c | 2 +-
9490 net/ipv6/sit.c | 4 +-
9491 net/ipv6/sysctl_net_ipv6.c | 2 +-
9492 net/ipv6/udp.c | 6 +-
9493 net/ipv6/xfrm6_policy.c | 17 +-
9494 net/irda/ircomm/ircomm_tty.c | 18 +-
9495 net/iucv/af_iucv.c | 4 +-
9496 net/iucv/iucv.c | 2 +-
9497 net/key/af_key.c | 4 +-
9498 net/l2tp/l2tp_eth.c | 38 +-
9499 net/l2tp/l2tp_ip.c | 2 +-
9500 net/l2tp/l2tp_ip6.c | 2 +-
9501 net/mac80211/cfg.c | 10 +-
9502 net/mac80211/debugfs_key.c | 4 +-
9503 net/mac80211/ieee80211_i.h | 3 +-
9504 net/mac80211/iface.c | 20 +-
9505 net/mac80211/key.c | 4 +-
9506 net/mac80211/main.c | 2 +-
9507 net/mac80211/pm.c | 4 +-
9508 net/mac80211/rate.c | 2 +-
9509 net/mac80211/sta_info.c | 2 +-
9510 net/mac80211/tx.c | 2 +-
9511 net/mac80211/util.c | 8 +-
9512 net/mac80211/wpa.c | 10 +-
9513 net/mac802154/iface.c | 4 +-
9514 net/mpls/af_mpls.c | 6 +-
9515 net/netfilter/ipset/ip_set_core.c | 4 +-
9516 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
9517 net/netfilter/ipvs/ip_vs_core.c | 4 +-
9518 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
9519 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
9520 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
9521 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
9522 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
9523 net/netfilter/nf_conntrack_acct.c | 2 +-
9524 net/netfilter/nf_conntrack_ecache.c | 2 +-
9525 net/netfilter/nf_conntrack_helper.c | 2 +-
9526 net/netfilter/nf_conntrack_netlink.c | 22 +-
9527 net/netfilter/nf_conntrack_proto.c | 2 +-
9528 net/netfilter/nf_conntrack_standalone.c | 2 +-
9529 net/netfilter/nf_conntrack_timestamp.c | 2 +-
9530 net/netfilter/nf_log.c | 10 +-
9531 net/netfilter/nf_sockopt.c | 4 +-
9532 net/netfilter/nf_tables_api.c | 13 +-
9533 net/netfilter/nfnetlink_acct.c | 7 +-
9534 net/netfilter/nfnetlink_cthelper.c | 2 +-
9535 net/netfilter/nfnetlink_cttimeout.c | 2 +-
9536 net/netfilter/nfnetlink_log.c | 4 +-
9537 net/netfilter/nft_compat.c | 9 +-
9538 net/netfilter/xt_statistic.c | 8 +-
9539 net/netlink/af_netlink.c | 14 +-
9540 net/netlink/diag.c | 2 +-
9541 net/netlink/genetlink.c | 14 +-
9542 net/openvswitch/vport-internal_dev.c | 2 +-
9543 net/packet/af_packet.c | 26 +-
9544 net/packet/diag.c | 2 +-
9545 net/packet/internal.h | 6 +-
9546 net/phonet/pep.c | 6 +-
9547 net/phonet/socket.c | 2 +-
9548 net/phonet/sysctl.c | 2 +-
9549 net/rds/cong.c | 6 +-
9550 net/rds/ib.h | 2 +-
9551 net/rds/ib_cm.c | 2 +-
9552 net/rds/ib_recv.c | 4 +-
9553 net/rds/iw.h | 2 +-
9554 net/rds/iw_cm.c | 2 +-
9555 net/rds/iw_recv.c | 4 +-
9556 net/rds/rds.h | 2 +-
9557 net/rds/tcp.c | 2 +-
9558 net/rds/tcp_send.c | 2 +-
9559 net/rxrpc/af_rxrpc.c | 2 +-
9560 net/rxrpc/ar-ack.c | 14 +-
9561 net/rxrpc/ar-call.c | 2 +-
9562 net/rxrpc/ar-connection.c | 2 +-
9563 net/rxrpc/ar-connevent.c | 2 +-
9564 net/rxrpc/ar-input.c | 4 +-
9565 net/rxrpc/ar-internal.h | 8 +-
9566 net/rxrpc/ar-local.c | 2 +-
9567 net/rxrpc/ar-output.c | 4 +-
9568 net/rxrpc/ar-peer.c | 2 +-
9569 net/rxrpc/ar-proc.c | 4 +-
9570 net/rxrpc/ar-transport.c | 2 +-
9571 net/rxrpc/rxkad.c | 4 +-
9572 net/sched/sch_generic.c | 4 +-
9573 net/sctp/ipv6.c | 6 +-
9574 net/sctp/protocol.c | 10 +-
9575 net/sctp/sm_sideeffect.c | 2 +-
9576 net/sctp/socket.c | 21 +-
9577 net/sctp/sysctl.c | 10 +-
9578 net/socket.c | 18 +-
9579 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
9580 net/sunrpc/clnt.c | 4 +-
9581 net/sunrpc/sched.c | 4 +-
9582 net/sunrpc/svc.c | 4 +-
9583 net/sunrpc/svcauth_unix.c | 2 +-
9584 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
9585 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
9586 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
9587 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
9588 net/tipc/netlink_compat.c | 12 +-
9589 net/tipc/subscr.c | 2 +-
9590 net/unix/diag.c | 2 +-
9591 net/unix/sysctl_net_unix.c | 2 +-
9592 net/wireless/wext-core.c | 19 +-
9593 net/xfrm/xfrm_policy.c | 16 +-
9594 net/xfrm/xfrm_state.c | 33 +-
9595 net/xfrm/xfrm_sysctl.c | 2 +-
9596 net/xfrm/xfrm_user.c | 2 +-
9597 scripts/Kbuild.include | 2 +-
9598 scripts/Makefile.build | 2 +-
9599 scripts/Makefile.clean | 3 +-
9600 scripts/Makefile.host | 69 +-
9601 scripts/basic/fixdep.c | 12 +-
9602 scripts/dtc/checks.c | 14 +-
9603 scripts/dtc/data.c | 6 +-
9604 scripts/dtc/flattree.c | 8 +-
9605 scripts/dtc/livetree.c | 4 +-
9606 scripts/gcc-plugin.sh | 51 +
9607 scripts/headers_install.sh | 1 +
9608 scripts/kallsyms.c | 4 +-
9609 scripts/kconfig/lkc.h | 5 +-
9610 scripts/kconfig/menu.c | 2 +-
9611 scripts/kconfig/symbol.c | 6 +-
9612 scripts/link-vmlinux.sh | 2 +-
9613 scripts/mod/file2alias.c | 14 +-
9614 scripts/mod/modpost.c | 25 +-
9615 scripts/mod/modpost.h | 6 +-
9616 scripts/mod/sumversion.c | 2 +-
9617 scripts/module-common.lds | 4 +
9618 scripts/package/builddeb | 1 +
9619 scripts/pnmtologo.c | 6 +-
9620 scripts/sortextable.h | 6 +-
9621 scripts/tags.sh | 2 +-
9622 security/Kconfig | 691 +-
9623 security/apparmor/include/policy.h | 2 +-
9624 security/apparmor/policy.c | 4 +-
9625 security/integrity/ima/ima.h | 4 +-
9626 security/integrity/ima/ima_api.c | 2 +-
9627 security/integrity/ima/ima_fs.c | 4 +-
9628 security/integrity/ima/ima_queue.c | 2 +-
9629 security/keys/internal.h | 8 +-
9630 security/keys/key.c | 18 +-
9631 security/keys/keyring.c | 4 -
9632 security/selinux/avc.c | 6 +-
9633 security/selinux/include/xfrm.h | 2 +-
9634 security/yama/yama_lsm.c | 2 +-
9635 sound/aoa/codecs/onyx.c | 7 +-
9636 sound/aoa/codecs/onyx.h | 1 +
9637 sound/core/oss/pcm_oss.c | 18 +-
9638 sound/core/pcm_compat.c | 2 +-
9639 sound/core/pcm_native.c | 4 +-
9640 sound/core/seq/seq_clientmgr.c | 10 +-
9641 sound/core/seq/seq_compat.c | 2 +-
9642 sound/core/seq/seq_fifo.c | 6 +-
9643 sound/core/seq/seq_fifo.h | 2 +-
9644 sound/core/seq/seq_memory.c | 6 +-
9645 sound/core/sound.c | 2 +-
9646 sound/drivers/mts64.c | 14 +-
9647 sound/drivers/opl4/opl4_lib.c | 2 +-
9648 sound/drivers/portman2x4.c | 3 +-
9649 sound/firewire/amdtp-am824.c | 2 +-
9650 sound/firewire/amdtp-stream.c | 4 +-
9651 sound/firewire/amdtp-stream.h | 2 +-
9652 sound/firewire/digi00x/amdtp-dot.c | 2 +-
9653 sound/firewire/isight.c | 10 +-
9654 sound/firewire/scs1x.c | 8 +-
9655 sound/oss/sb_audio.c | 2 +-
9656 sound/oss/swarm_cs4297a.c | 6 +-
9657 sound/pci/hda/hda_codec.c | 2 +-
9658 sound/pci/ymfpci/ymfpci.h | 2 +-
9659 sound/pci/ymfpci/ymfpci_main.c | 12 +-
9660 sound/soc/codecs/sti-sas.c | 10 +-
9661 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
9662 sound/soc/soc-ac97.c | 6 +-
9663 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
9664 tools/gcc/Makefile | 42 +
9665 tools/gcc/checker_plugin.c | 549 +
9666 tools/gcc/colorize_plugin.c | 215 +
9667 tools/gcc/constify_plugin.c | 571 +
9668 tools/gcc/gcc-common.h | 819 +
9669 tools/gcc/initify_plugin.c | 591 +
9670 tools/gcc/kallocstat_plugin.c | 188 +
9671 tools/gcc/kernexec_plugin.c | 549 +
9672 tools/gcc/latent_entropy_plugin.c | 474 +
9673 tools/gcc/randomize_layout_seed.h | 1 +
9674 tools/gcc/size_overflow_plugin/.gitignore | 2 +
9675 tools/gcc/size_overflow_plugin/Makefile | 28 +
9676 .../disable_size_overflow_hash.data | 12434 ++
9677 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
9678 .../generate_size_overflow_hash.sh | 103 +
9679 .../insert_size_overflow_asm.c | 416 +
9680 .../size_overflow_plugin/intentional_overflow.c | 1116 +
9681 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
9682 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
9683 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
9684 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
9685 .../size_overflow_hash_aux.data | 92 +
9686 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
9687 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
9688 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
9689 .../size_overflow_plugin_hash.c | 352 +
9690 .../size_overflow_plugin/size_overflow_transform.c | 745 +
9691 .../size_overflow_transform_core.c | 1015 +
9692 tools/gcc/stackleak_plugin.c | 444 +
9693 tools/gcc/structleak_plugin.c | 290 +
9694 tools/include/linux/compiler.h | 8 +
9695 tools/perf/util/include/asm/alternative-asm.h | 3 +
9696 tools/virtio/linux/uaccess.h | 2 +-
9697 virt/kvm/kvm_main.c | 42 +-
9698 2088 files changed, 221599 insertions(+), 9618 deletions(-)
9699 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
9700 Author: Matthew Wilcox <willy@linux.intel.com>
9701 Date: Tue Feb 2 16:57:52 2016 -0800
9702
9703 radix-tree: fix race in gang lookup
9704
9705 If the indirect_ptr bit is set on a slot, that indicates we need to redo
9706 the lookup. Introduce a new function radix_tree_iter_retry() which
9707 forces the loop to retry the lookup by setting 'slot' to NULL and
9708 turning the iterator back to point at the problematic entry.
9709
9710 This is a pretty rare problem to hit at the moment; the lookup has to
9711 race with a grow of the radix tree from a height of 0. The consequences
9712 of hitting this race are that gang lookup could return a pointer to a
9713 radix_tree_node instead of a pointer to whatever the user had inserted
9714 in the tree.
9715
9716 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
9717 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
9718 Cc: Hugh Dickins <hughd@google.com>
9719 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9720 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
9721 Cc: <stable@vger.kernel.org>
9722 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9723 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9724
9725 include/linux/radix-tree.h | 16 ++++++++++++++++
9726 lib/radix-tree.c | 12 ++++++++++--
9727 2 files changed, 26 insertions(+), 2 deletions(-)
9728
9729 commit bf628043b4589c910919a0f221ae7f42aa8cea93
9730 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9731 Date: Wed Feb 3 02:11:03 2016 +0100
9732
9733 unix: correctly track in-flight fds in sending process user_struct
9734
9735 The commit referenced in the Fixes tag incorrectly accounted the number
9736 of in-flight fds over a unix domain socket to the original opener
9737 of the file-descriptor. This allows another process to arbitrary
9738 deplete the original file-openers resource limit for the maximum of
9739 open files. Instead the sending processes and its struct cred should
9740 be credited.
9741
9742 To do so, we add a reference counted struct user_struct pointer to the
9743 scm_fp_list and use it to account for the number of inflight unix fds.
9744
9745 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
9746 Reported-by: David Herrmann <dh.herrmann@gmail.com>
9747 Cc: David Herrmann <dh.herrmann@gmail.com>
9748 Cc: Willy Tarreau <w@1wt.eu>
9749 Cc: Linus Torvalds <torvalds@linux-foundation.org>
9750 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
9751 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9752 Signed-off-by: David S. Miller <davem@davemloft.net>
9753
9754 include/net/af_unix.h | 4 ++--
9755 include/net/scm.h | 1 +
9756 net/core/scm.c | 7 +++++++
9757 net/unix/af_unix.c | 4 ++--
9758 net/unix/garbage.c | 8 ++++----
9759 5 files changed, 16 insertions(+), 8 deletions(-)
9760
9761 commit e830db443ff78d70b7b63536e688d73907face0c
9762 Author: Mike Kravetz <mike.kravetz@oracle.com>
9763 Date: Fri Jan 15 16:57:37 2016 -0800
9764
9765 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
9766
9767 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
9768 argument end is of type pgoff_t. It was being converted to a vaddr
9769 offset and passed to unmap_hugepage_range. However, end was also being
9770 used as an argument to the vma_interval_tree_foreach controlling loop.
9771 In addition, the conversion of end to vaddr offset was incorrect.
9772
9773 hugetlb_vmtruncate_list is called as part of a file truncate or
9774 fallocate hole punch operation.
9775
9776 When truncating a hugetlbfs file, this bug could prevent some pages from
9777 being unmapped. This is possible if there are multiple vmas mapping the
9778 file, and there is a sufficiently sized hole between the mappings. The
9779 size of the hole between two vmas (A,B) must be such that the starting
9780 virtual address of B is greater than (ending virtual address of A <<
9781 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
9782 pages are not properly unmapped during truncate, the following BUG is
9783 hit:
9784
9785 kernel BUG at fs/hugetlbfs/inode.c:428!
9786
9787 In the fallocate hole punch case, this bug could prevent pages from
9788 being unmapped as in the truncate case. However, for hole punch the
9789 result is that unmapped pages will not be removed during the operation.
9790 For hole punch, it is also possible that more pages than desired will be
9791 unmapped. This unnecessary unmapping will cause page faults to
9792 reestablish the mappings on subsequent page access.
9793
9794 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
9795 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
9796 Cc: Hugh Dickins <hughd@google.com>
9797 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
9798 Cc: Davidlohr Bueso <dave@stgolabs.net>
9799 Cc: Dave Hansen <dave.hansen@linux.intel.com>
9800 Cc: <stable@vger.kernel.org> [4.3]
9801 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9802 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9803
9804 fs/hugetlbfs/inode.c | 19 +++++++++++--------
9805 1 files changed, 11 insertions(+), 8 deletions(-)
9806
9807 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
9808 Author: Takashi Iwai <tiwai@suse.de>
9809 Date: Thu Feb 4 17:06:13 2016 +0100
9810
9811 ALSA: timer: Fix leftover link at closing
9812
9813 In ALSA timer core, the active timer instance is managed in
9814 active_list linked list. Each element is added / removed dynamically
9815 at timer start, stop and in timer interrupt. The problem is that
9816 snd_timer_interrupt() has a thinko and leaves the element in
9817 active_list when it's the last opened element. This eventually leads
9818 to list corruption or use-after-free error.
9819
9820 This hasn't been revealed because we used to delete the list forcibly
9821 in snd_timer_stop() in the past. However, the recent fix avoids the
9822 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
9823 corruption due to double start or stop]), and this leak hits reality.
9824
9825 This patch fixes the link management in snd_timer_interrupt(). Now it
9826 simply unlinks no matter which stream is.
9827
9828 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
9829 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9830 Cc: <stable@vger.kernel.org>
9831 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9832
9833 sound/core/timer.c | 4 ++--
9834 1 files changed, 2 insertions(+), 2 deletions(-)
9835
9836 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
9837 Author: Konstantin Khlebnikov <koct9i@gmail.com>
9838 Date: Fri Feb 5 15:37:01 2016 -0800
9839
9840 radix-tree: fix oops after radix_tree_iter_retry
9841
9842 Helper radix_tree_iter_retry() resets next_index to the current index.
9843 In following radix_tree_next_slot current chunk size becomes zero. This
9844 isn't checked and it tries to dereference null pointer in slot.
9845
9846 Tagged iterator is fine because retry happens only at slot 0 where tag
9847 bitmask in iter->tags is filled with single bit.
9848
9849 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
9850 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
9851 Cc: Matthew Wilcox <willy@linux.intel.com>
9852 Cc: Hugh Dickins <hughd@google.com>
9853 Cc: Ohad Ben-Cohen <ohad@wizery.com>
9854 Cc: Jeremiah Mahler <jmmahler@gmail.com>
9855 Cc: <stable@vger.kernel.org>
9856 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9857 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9858
9859 include/linux/radix-tree.h | 6 +++---
9860 1 files changed, 3 insertions(+), 3 deletions(-)
9861
9862 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
9863 Merge: 438be0b 256aeaf
9864 Author: Brad Spengler <spender@grsecurity.net>
9865 Date: Sun Feb 7 08:29:33 2016 -0500
9866
9867 Merge branch 'pax-test' into grsec-test
9868
9869 commit 256aeaf87c22de8edf1f03682a572c590ae07771
9870 Author: Brad Spengler <spender@grsecurity.net>
9871 Date: Sun Feb 7 08:29:09 2016 -0500
9872
9873 Update to pax-linux-4.3.5-test28.patch:
9874 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
9875 - spender fixed UDEREF on arm
9876
9877 arch/arm/Kconfig | 1 +
9878 arch/arm/include/asm/domain.h | 21 ++++++++-
9879 arch/arm/include/asm/futex.h | 9 ----
9880 arch/arm/include/asm/thread_info.h | 3 +
9881 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9882 arch/arm/kernel/entry-armv.S | 2 +-
9883 arch/arm/kernel/process.c | 2 +-
9884 arch/arm/mm/alignment.c | 8 ----
9885 arch/x86/mm/numa.c | 2 +-
9886 security/Kconfig | 1 -
9887 10 files changed, 60 insertions(+), 70 deletions(-)
9888
9889 commit 438be0bd112bd17942b2628c53054dc1007558a1
9890 Author: Brad Spengler <spender@grsecurity.net>
9891 Date: Sat Feb 6 19:50:31 2016 -0500
9892
9893 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
9894 ARM systems reported on the forums
9895
9896 arch/arm/Kconfig | 1 +
9897 arch/arm/include/asm/domain.h | 21 ++++++++-
9898 arch/arm/include/asm/futex.h | 9 ----
9899 arch/arm/include/asm/thread_info.h | 3 +
9900 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
9901 arch/arm/kernel/entry-armv.S | 2 +-
9902 arch/arm/kernel/process.c | 2 +-
9903 arch/arm/mm/alignment.c | 8 ----
9904 security/Kconfig | 1 -
9905 9 files changed, 59 insertions(+), 69 deletions(-)
9906
9907 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
9908 Author: Brad Spengler <spender@grsecurity.net>
9909 Date: Sat Feb 6 11:21:53 2016 -0500
9910
9911 Fix another compiler warning
9912
9913 net/ipv4/tcp_input.c | 2 ++
9914 1 files changed, 2 insertions(+), 0 deletions(-)
9915
9916 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
9917 Author: Brad Spengler <spender@grsecurity.net>
9918 Date: Sat Feb 6 11:16:12 2016 -0500
9919
9920 Fix two compiler warnings
9921
9922 kernel/pid.c | 5 ++---
9923 kernel/ptrace.c | 3 ++-
9924 2 files changed, 4 insertions(+), 4 deletions(-)
9925
9926 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
9927 Author: Brad Spengler <spender@grsecurity.net>
9928 Date: Wed Feb 3 21:22:40 2016 -0500
9929
9930 Apply fix for integer truncation in NUMA init code, reported by
9931 x14sg1 on the forums:
9932 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
9933
9934 arch/x86/mm/numa.c | 2 +-
9935 1 files changed, 1 insertions(+), 1 deletions(-)
9936
9937 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
9938 Merge: a781740 016d0d8
9939 Author: Brad Spengler <spender@grsecurity.net>
9940 Date: Wed Feb 3 21:20:58 2016 -0500
9941
9942 Merge branch 'pax-test' into grsec-test
9943
9944 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
9945 Author: Brad Spengler <spender@grsecurity.net>
9946 Date: Wed Feb 3 21:20:10 2016 -0500
9947
9948 Update to pax-linux-4.3.5-test27.patch:
9949 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
9950 - restored padding in fpregs_state for storing AVX-512 state in the future
9951 - constified netlink_dump_control
9952 - added const version of debug_gimple_stmt for gcc plugins, by Emese
9953 - Emese fixed a bug in initify that could have initified too much
9954 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
9955
9956 arch/x86/include/asm/fpu/types.h | 1 +
9957 arch/x86/include/asm/mmu_context.h | 2 +-
9958 block/blk-cgroup.c | 18 ++--
9959 block/cfq-iosched.c | 4 +-
9960 crypto/crypto_user.c | 8 ++-
9961 drivers/acpi/apei/ghes.c | 6 +-
9962 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
9963 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
9964 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
9965 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
9966 drivers/infiniband/core/netlink.c | 5 +-
9967 drivers/infiniband/hw/cxgb4/device.c | 6 +-
9968 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
9969 drivers/md/bcache/alloc.c | 2 +-
9970 drivers/md/bcache/bcache.h | 10 +-
9971 drivers/md/bcache/btree.c | 2 +-
9972 drivers/md/bcache/io.c | 10 +-
9973 drivers/md/bcache/journal.c | 2 +-
9974 drivers/md/bcache/stats.c | 26 +++---
9975 drivers/md/bcache/stats.h | 16 ++--
9976 drivers/md/bcache/super.c | 2 +-
9977 drivers/md/bcache/sysfs.c | 20 +++---
9978 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
9979 drivers/md/dm-raid.c | 2 +-
9980 drivers/md/md.c | 6 +-
9981 drivers/md/md.h | 2 +-
9982 drivers/md/raid1.c | 2 +-
9983 drivers/md/raid10.c | 2 +-
9984 drivers/md/raid5.c | 4 +-
9985 drivers/media/pci/zoran/zoran.h | 1 -
9986 drivers/media/pci/zoran/zoran_driver.c | 3 -
9987 drivers/net/ethernet/sfc/selftest.c | 20 +++---
9988 drivers/net/irda/vlsi_ir.c | 18 ++--
9989 drivers/net/irda/vlsi_ir.h | 14 ++--
9990 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
9991 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
9992 drivers/net/wireless/ath/carl9170/main.c | 10 +-
9993 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
9994 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
9995 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
9996 drivers/scsi/hptiop.c | 2 -
9997 drivers/scsi/hptiop.h | 1 -
9998 drivers/scsi/ipr.c | 6 +-
9999 drivers/scsi/ipr.h | 2 +-
10000 drivers/scsi/qla2xxx/qla_target.c | 10 +-
10001 drivers/scsi/qla2xxx/qla_target.h | 2 +-
10002 fs/btrfs/ctree.c | 2 +-
10003 fs/btrfs/ctree.h | 4 +-
10004 fs/btrfs/delayed-ref.c | 4 +-
10005 fs/btrfs/disk-io.c | 4 +-
10006 fs/btrfs/file.c | 4 +-
10007 fs/btrfs/raid56.c | 32 ++++----
10008 fs/btrfs/tests/btrfs-tests.c | 2 +-
10009 fs/btrfs/transaction.c | 2 +-
10010 fs/btrfs/tree-log.c | 8 +-
10011 fs/btrfs/volumes.c | 14 ++--
10012 fs/btrfs/volumes.h | 22 +++---
10013 fs/jbd2/commit.c | 2 +-
10014 fs/jbd2/transaction.c | 4 +-
10015 fs/ocfs2/dlm/dlmcommon.h | 4 +-
10016 fs/ocfs2/dlm/dlmdebug.c | 10 +-
10017 fs/ocfs2/dlm/dlmdomain.c | 4 +-
10018 fs/ocfs2/dlm/dlmmaster.c | 4 +-
10019 include/acpi/ghes.h | 2 +-
10020 include/linux/blk-cgroup.h | 24 +++---
10021 include/linux/jbd2.h | 2 +-
10022 include/linux/netlink.h | 12 ++--
10023 include/net/cfg802154.h | 2 +-
10024 include/net/mac80211.h | 2 +-
10025 include/net/neighbour.h | 2 +-
10026 kernel/rcu/tree_plugin.h | 4 +-
10027 net/batman-adv/routing.c | 4 +-
10028 net/batman-adv/soft-interface.c | 2 +-
10029 net/batman-adv/translation-table.c | 14 ++--
10030 net/batman-adv/types.h | 2 +-
10031 net/core/neighbour.c | 14 ++--
10032 net/core/rtnetlink.c | 2 +-
10033 net/ipv4/arp.c | 2 +-
10034 net/ipv4/inet_diag.c | 4 +-
10035 net/ipv4/xfrm4_state.c | 4 +-
10036 net/ipv6/ndisc.c | 2 +-
10037 net/mac80211/cfg.c | 2 +-
10038 net/mac80211/debugfs_key.c | 2 +-
10039 net/mac80211/key.c | 4 +-
10040 net/mac80211/tx.c | 2 +-
10041 net/mac80211/wpa.c | 10 +-
10042 net/mac802154/iface.c | 4 +-
10043 net/netfilter/ipset/ip_set_core.c | 2 +-
10044 net/netfilter/nf_conntrack_netlink.c | 22 +++---
10045 net/netfilter/nf_tables_api.c | 13 ++--
10046 net/netfilter/nfnetlink_acct.c | 7 +-
10047 net/netfilter/nfnetlink_cthelper.c | 2 +-
10048 net/netfilter/nfnetlink_cttimeout.c | 2 +-
10049 net/netlink/af_netlink.c | 10 ++-
10050 net/netlink/diag.c | 2 +-
10051 net/netlink/genetlink.c | 14 ++--
10052 net/packet/af_packet.c | 18 ++--
10053 net/packet/diag.c | 2 +-
10054 net/packet/internal.h | 6 +-
10055 net/unix/diag.c | 2 +-
10056 net/xfrm/xfrm_user.c | 2 +-
10057 security/apparmor/include/policy.h | 2 +-
10058 security/apparmor/policy.c | 4 +-
10059 sound/core/seq/seq_clientmgr.c | 2 +-
10060 sound/core/seq/seq_fifo.c | 6 +-
10061 sound/core/seq/seq_fifo.h | 2 +-
10062 tools/gcc/gcc-common.h | 24 ++++--
10063 tools/gcc/initify_plugin.c | 7 +-
10064 tools/lib/api/Makefile | 2 +-
10065 109 files changed, 399 insertions(+), 391 deletions(-)
10066
10067 commit a7817402ac837b1aee07fac42537a02097055098
10068 Author: Matt Fleming <matt@codeblueprint.co.uk>
10069 Date: Fri Jan 29 11:36:10 2016 +0000
10070
10071 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
10072
10073 There are a couple of nasty truncation bugs lurking in the pageattr
10074 code that can be triggered when mapping EFI regions, e.g. when we pass
10075 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
10076 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
10077
10078 Viorel-Cătălin managed to trigger this bug on his Dell machine that
10079 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
10080 When calling populate_pud() the end of the region gets calculated
10081 incorrectly in the following buggy expression,
10082
10083 end = start + (cpa->numpages << PAGE_SHIFT);
10084
10085 And only 188416 pages are mapped. Next, populate_pud() gets invoked
10086 for a second time because of the loop in __change_page_attr_set_clr(),
10087 only this time no pages get mapped because shifting the remaining
10088 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
10089 loop in __change_page_attr_set_clr() spins forever because we fail to
10090 map progress.
10091
10092 Hitting this bug depends very much on the virtual address we pick to
10093 map the large region at and how many pages we map on the initial run
10094 through the loop. This explains why this issue was only recently hit
10095 with the introduction of commit
10096
10097 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
10098 entries bottom-up at runtime, instead of top-down")
10099
10100 It's interesting to note that safe uses of cpa->numpages do exist in
10101 the pageattr code. If instead of shifting ->numpages we multiply by
10102 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
10103 so the result is unsigned long.
10104
10105 To avoid surprises when users try to convert very large cpa->numpages
10106 values to addresses, change the data type from 'int' to 'unsigned
10107 long', thereby making it suitable for shifting by PAGE_SHIFT without
10108 any type casting.
10109
10110 The alternative would be to make liberal use of casting, but that is
10111 far more likely to cause problems in the future when someone adds more
10112 code and fails to cast properly; this bug was difficult enough to
10113 track down in the first place.
10114
10115 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
10116 Acked-by: Borislav Petkov <bp@alien8.de>
10117 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
10118 Cc: <stable@vger.kernel.org>
10119 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
10120 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
10121 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
10122 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10123
10124 arch/x86/mm/pageattr.c | 4 ++--
10125 1 files changed, 2 insertions(+), 2 deletions(-)
10126
10127 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
10128 Author: Jan Beulich <JBeulich@suse.com>
10129 Date: Tue Jan 26 04:15:18 2016 -0700
10130
10131 x86/mm: Fix types used in pgprot cacheability flags translations
10132
10133 For PAE kernels "unsigned long" is not suitable to hold page protection
10134 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
10135 few W+X pages getting reported as insecure during boot (observed namely
10136 for the entire initrd range).
10137
10138 Fixes: 281d4078be ("x86: Make page cache mode a real type")
10139 Signed-off-by: Jan Beulich <jbeulich@suse.com>
10140 Reviewed-by: Juergen Gross <JGross@suse.com>
10141 Cc: stable@vger.kernel.org
10142 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
10143 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
10144
10145 arch/x86/include/asm/pgtable_types.h | 6 ++----
10146 1 files changed, 2 insertions(+), 4 deletions(-)
10147
10148 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
10149 Merge: 682d661 f74425b
10150 Author: Brad Spengler <spender@grsecurity.net>
10151 Date: Sun Jan 31 15:06:25 2016 -0500
10152
10153 Merge branch 'pax-test' into grsec-test
10154
10155 Conflicts:
10156 drivers/net/slip/slhc.c
10157 include/linux/sched.h
10158 net/unix/af_unix.c
10159 sound/core/timer.c
10160
10161 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
10162 Merge: d14af1f 849a2d3
10163 Author: Brad Spengler <spender@grsecurity.net>
10164 Date: Sun Jan 31 15:02:55 2016 -0500
10165
10166 Merge branch 'linux-4.3.y' into pax-test
10167
10168 Conflicts:
10169 arch/x86/include/asm/mmu_context.h
10170
10171 commit 682d6611d75542e351c973c8dd74a99d3966c073
10172 Author: Brad Spengler <spender@grsecurity.net>
10173 Date: Sat Jan 30 13:05:03 2016 -0500
10174
10175 Based on a report from Mathias Krause, fix up a number of additional instances
10176 of ulong overflow when passing in values to gr_learn_resource by saturating
10177 to ULONG_MAX
10178
10179 mm/mlock.c | 11 ++++++++---
10180 mm/mmap.c | 16 +++++++++++++---
10181 2 files changed, 21 insertions(+), 6 deletions(-)
10182
10183 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
10184 Author: Jann Horn <jann@thejh.net>
10185 Date: Sat Dec 26 06:00:48 2015 +0100
10186
10187 seccomp: always propagate NO_NEW_PRIVS on tsync
10188
10189 Before this patch, a process with some permissive seccomp filter
10190 that was applied by root without NO_NEW_PRIVS was able to add
10191 more filters to itself without setting NO_NEW_PRIVS by setting
10192 the new filter from a throwaway thread with NO_NEW_PRIVS.
10193
10194 Signed-off-by: Jann Horn <jann@thejh.net>
10195 Cc: stable@vger.kernel.org
10196 Signed-off-by: Kees Cook <keescook@chromium.org>
10197
10198 kernel/seccomp.c | 22 +++++++++++-----------
10199 1 files changed, 11 insertions(+), 11 deletions(-)
10200
10201 commit b85450498a3bbf269441c8963d7574bb3079c838
10202 Merge: 59c216f d14af1f
10203 Author: Brad Spengler <spender@grsecurity.net>
10204 Date: Fri Jan 29 20:54:13 2016 -0500
10205
10206 Merge branch 'pax-test' into grsec-test
10207
10208 commit d14af1f1dd66511f3f0674deee2b572972012b39
10209 Author: Brad Spengler <spender@grsecurity.net>
10210 Date: Fri Jan 29 20:53:51 2016 -0500
10211
10212 Update to pax-linux-4.3.4-test26.patch:
10213 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
10214
10215 fs/cifs/file.c | 2 +-
10216 fs/gfs2/file.c | 2 +-
10217 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
10218 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
10219 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
10220 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
10221 .../size_overflow_transform_core.c | 5 +
10222 7 files changed, 102 insertions(+), 15 deletions(-)
10223
10224 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
10225 Author: Brad Spengler <spender@grsecurity.net>
10226 Date: Wed Jan 27 17:57:21 2016 -0500
10227
10228 Fix a size_overflow report reported by Mathias Krause in our
10229 truncation of an loff_t to an unsigned long when being passed
10230 to gr_learn_resource() (as all resource checks are against unsigned long
10231 values)
10232
10233 fs/attr.c | 5 ++++-
10234 1 files changed, 4 insertions(+), 1 deletions(-)
10235
10236 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
10237 Author: Yuchung Cheng <ycheng@google.com>
10238 Date: Wed Jan 6 12:42:38 2016 -0800
10239
10240 tcp: fix zero cwnd in tcp_cwnd_reduction
10241
10242 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
10243 conditionally") introduced a bug that cwnd may become 0 when both
10244 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
10245 to a div-by-zero if the connection starts another cwnd reduction
10246 phase by setting tp->prior_cwnd to the current cwnd (0) in
10247 tcp_init_cwnd_reduction().
10248
10249 To prevent this we skip PRR operation when nothing is acked or
10250 sacked. Then cwnd must be positive in all cases as long as ssthresh
10251 is positive:
10252
10253 1) The proportional reduction mode
10254 inflight > ssthresh > 0
10255
10256 2) The reduction bound mode
10257 a) inflight == ssthresh > 0
10258
10259 b) inflight < ssthresh
10260 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
10261
10262 Therefore in all cases inflight and sndcnt can not both be 0.
10263 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
10264
10265 In reality this bug is triggered only with a sequence of less common
10266 events. For example, the connection is terminating an ECN-triggered
10267 cwnd reduction with an inflight 0, then it receives reordered/old
10268 ACKs or DSACKs from prior transmission (which acks nothing). Or the
10269 connection is in fast recovery stage that marks everything lost,
10270 but fails to retransmit due to local issues, then receives data
10271 packets from other end which acks nothing.
10272
10273 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
10274 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
10275 Signed-off-by: Yuchung Cheng <ycheng@google.com>
10276 Signed-off-by: Neal Cardwell <ncardwell@google.com>
10277 Signed-off-by: Eric Dumazet <edumazet@google.com>
10278 Signed-off-by: David S. Miller <davem@davemloft.net>
10279
10280 net/ipv4/tcp_input.c | 3 +++
10281 1 files changed, 3 insertions(+), 0 deletions(-)
10282
10283 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
10284 Author: Eric Dumazet <edumazet@google.com>
10285 Date: Sun Jan 24 13:53:50 2016 -0800
10286
10287 af_unix: fix struct pid memory leak
10288
10289 Dmitry reported a struct pid leak detected by a syzkaller program.
10290
10291 Bug happens in unix_stream_recvmsg() when we break the loop when a
10292 signal is pending, without properly releasing scm.
10293
10294 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
10295 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10296 Signed-off-by: Eric Dumazet <edumazet@google.com>
10297 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
10298 Signed-off-by: David S. Miller <davem@davemloft.net>
10299
10300 net/unix/af_unix.c | 1 +
10301 1 files changed, 1 insertions(+), 0 deletions(-)
10302
10303 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
10304 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10305 Date: Fri Jan 22 01:39:43 2016 +0100
10306
10307 pptp: fix illegal memory access caused by multiple bind()s
10308
10309 Several times already this has been reported as kasan reports caused by
10310 syzkaller and trinity and people always looked at RCU races, but it is
10311 much more simple. :)
10312
10313 In case we bind a pptp socket multiple times, we simply add it to
10314 the callid_sock list but don't remove the old binding. Thus the old
10315 socket stays in the bucket with unused call_id indexes and doesn't get
10316 cleaned up. This causes various forms of kasan reports which were hard
10317 to pinpoint.
10318
10319 Simply don't allow multiple binds and correct error handling in
10320 pptp_bind. Also keep sk_state bits in place in pptp_connect.
10321
10322 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
10323 Cc: Dmitry Kozlov <xeb@mail.ru>
10324 Cc: Sasha Levin <sasha.levin@oracle.com>
10325 Cc: Dmitry Vyukov <dvyukov@google.com>
10326 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10327 Cc: Dave Jones <davej@codemonkey.org.uk>
10328 Reported-by: Dave Jones <davej@codemonkey.org.uk>
10329 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10330 Signed-off-by: David S. Miller <davem@davemloft.net>
10331
10332 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
10333 1 files changed, 24 insertions(+), 10 deletions(-)
10334
10335 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
10336 Author: Brad Spengler <spender@grsecurity.net>
10337 Date: Tue Jan 26 18:17:10 2016 -0500
10338
10339 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
10340 wiki but was removed from the config help at some point
10341
10342 grsecurity/Kconfig | 3 +++
10343 1 files changed, 3 insertions(+), 0 deletions(-)
10344
10345 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
10346 Author: Thomas Egerer <hakke_007@gmx.de>
10347 Date: Mon Jan 25 12:58:44 2016 +0100
10348
10349 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
10350
10351 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
10352 to select CRYPTO_ECHAINIV in order to work properly. This solves the
10353 issues caused by a misconfiguration as described in [1].
10354 The original approach, patching crypto/Kconfig was turned down by
10355 Herbert Xu [2].
10356
10357 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
10358 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
10359
10360 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
10361 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
10362 Signed-off-by: David S. Miller <davem@davemloft.net>
10363
10364 net/ipv4/Kconfig | 1 +
10365 net/ipv6/Kconfig | 1 +
10366 2 files changed, 2 insertions(+), 0 deletions(-)
10367
10368 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
10369 Merge: 904114c 6339c1f
10370 Author: Brad Spengler <spender@grsecurity.net>
10371 Date: Tue Jan 26 18:08:40 2016 -0500
10372
10373 Merge branch 'pax-test' into grsec-test
10374
10375 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
10376 Author: Brad Spengler <spender@grsecurity.net>
10377 Date: Tue Jan 26 18:07:51 2016 -0500
10378
10379 Update to pax-linux-4.3.4-test25.patch:
10380 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
10381 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
10382 - fixed a few REFCOUNT false positives in SNMP related statistics
10383
10384 arch/x86/Kconfig | 2 +-
10385 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
10386 include/net/snmp.h | 10 +++++-----
10387 kernel/fork.c | 11 +++++++++--
10388 net/ipv4/proc.c | 8 ++++----
10389 net/ipv6/addrconf.c | 4 ++--
10390 net/ipv6/proc.c | 10 +++++-----
10391 7 files changed, 43 insertions(+), 19 deletions(-)
10392
10393 commit 904114c2fce3fdff5d57e763da56a78960db4e19
10394 Author: Al Viro <viro@zeniv.linux.org.uk>
10395 Date: Fri Jan 22 18:08:52 2016 -0500
10396
10397 make sure that freeing shmem fast symlinks is RCU-delayed
10398
10399 Cc: stable@vger.kernel.org # v4.2+
10400 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10401
10402 include/linux/shmem_fs.h | 5 +----
10403 mm/shmem.c | 9 ++++-----
10404 2 files changed, 5 insertions(+), 9 deletions(-)
10405
10406 commit ab86adee64312a2f827dd516cb199521327943ed
10407 Author: Sasha Levin <sasha.levin@oracle.com>
10408 Date: Mon Jan 18 19:23:51 2016 -0500
10409
10410 netfilter: nf_conntrack: use safer way to lock all buckets
10411
10412 When we need to lock all buckets in the connection hashtable we'd attempt to
10413 lock 1024 spinlocks, which is way more preemption levels than supported by
10414 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
10415 enabled, and if it was - use only 8 buckets(!).
10416
10417 Fix this by using a global lock and synchronize all buckets on it when we
10418 need to lock them all. This is pretty heavyweight, but is only done when we
10419 need to resize the hashtable, and that doesn't happen often enough (or at all).
10420
10421 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10422 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
10423 Reviewed-by: Florian Westphal <fw@strlen.de>
10424 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
10425
10426 Conflicts:
10427
10428 net/netfilter/nfnetlink_cttimeout.c
10429
10430 include/net/netfilter/nf_conntrack_core.h | 8 ++----
10431 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
10432 net/netfilter/nf_conntrack_helper.c | 2 +-
10433 net/netfilter/nf_conntrack_netlink.c | 2 +-
10434 4 files changed, 33 insertions(+), 17 deletions(-)
10435
10436 commit 37014723527225481c720484bb788a1a6358072f
10437 Author: Willy Tarreau <w@1wt.eu>
10438 Date: Mon Jan 18 16:36:09 2016 +0100
10439
10440 pipe: limit the per-user amount of pages allocated in pipes
10441
10442 On no-so-small systems, it is possible for a single process to cause an
10443 OOM condition by filling large pipes with data that are never read. A
10444 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
10445 memory. On small systems it may be tricky to set the pipe max size to
10446 prevent this from happening.
10447
10448 This patch makes it possible to enforce a per-user soft limit above
10449 which new pipes will be limited to a single page, effectively limiting
10450 them to 4 kB each, as well as a hard limit above which no new pipes may
10451 be created for this user. This has the effect of protecting the system
10452 against memory abuse without hurting other users, and still allowing
10453 pipes to work correctly though with less data at once.
10454
10455 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
10456 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
10457 default soft limit allows the default number of FDs per process (1024)
10458 to create pipes of the default size (64kB), thus reaching a limit of 64MB
10459 before starting to create only smaller pipes. With 256 processes limited
10460 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
10461 1084 MB of memory allocated for a user. The hard limit is disabled by
10462 default to avoid breaking existing applications that make intensive use
10463 of pipes (eg: for splicing).
10464
10465 Reported-by: socketpair@gmail.com
10466 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10467 Mitigates: CVE-2013-4312 (Linux 2.0+)
10468 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10469 Signed-off-by: Willy Tarreau <w@1wt.eu>
10470 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10471
10472 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
10473 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
10474 include/linux/pipe_fs_i.h | 4 +++
10475 include/linux/sched.h | 1 +
10476 kernel/sysctl.c | 14 ++++++++++++
10477 5 files changed, 87 insertions(+), 2 deletions(-)
10478
10479 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
10480 Merge: 540f2af 7791ecb
10481 Author: Brad Spengler <spender@grsecurity.net>
10482 Date: Sat Jan 23 10:57:11 2016 -0500
10483
10484 Merge branch 'pax-test' into grsec-test
10485
10486 commit 7791ecb84f840343a5646236fd0d34e1fb450793
10487 Merge: 470069c 399588c
10488 Author: Brad Spengler <spender@grsecurity.net>
10489 Date: Sat Jan 23 10:56:47 2016 -0500
10490
10491 Merge branch 'linux-4.3.y' into pax-test
10492
10493 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
10494 Author: Brad Spengler <spender@grsecurity.net>
10495 Date: Tue Jan 19 21:18:47 2016 -0500
10496
10497 Update size_overflow hash table
10498
10499 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
10500 1 files changed, 3 insertions(+), 1 deletions(-)
10501
10502 commit 7e649765626a28437f573f0fbe7a51a04615f041
10503 Author: Brad Spengler <spender@grsecurity.net>
10504 Date: Tue Jan 19 20:29:46 2016 -0500
10505
10506 Backport fix from: https://lkml.org/lkml/2015/12/13/187
10507
10508 fs/ext4/extents.c | 2 +-
10509 1 files changed, 1 insertions(+), 1 deletions(-)
10510
10511 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
10512 Author: Jann Horn <jann@thejh.net>
10513 Date: Tue Jan 5 18:27:30 2016 +0100
10514
10515 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
10516
10517 This replaces all code in fs/compat_ioctl.c that translated
10518 ioctl arguments into a in-kernel structure, then performed
10519 do_ioctl under set_fs(KERNEL_DS), with code that allocates
10520 data on the user stack and can call the VFS ioctl handler
10521 under USER_DS.
10522
10523 This is done as a hardening measure because the caller
10524 does not know what kind of ioctl handler will be invoked,
10525 only that no corresponding compat_ioctl handler exists and
10526 what the ioctl command number is. The accidental
10527 invocation of an unlocked_ioctl handler that unexpectedly
10528 calls copy_to_user could be a severe security issue.
10529
10530 Signed-off-by: Jann Horn <jann@thejh.net>
10531 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10532
10533 Conflicts:
10534
10535 fs/compat_ioctl.c
10536
10537 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
10538 1 files changed, 68 insertions(+), 62 deletions(-)
10539
10540 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
10541 Author: Al Viro <viro@zeniv.linux.org.uk>
10542 Date: Thu Jan 7 09:53:30 2016 -0500
10543
10544 compat_ioctl: don't pass fd around when not needed
10545
10546 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10547
10548 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
10549 fs/internal.h | 7 ++++
10550 fs/ioctl.c | 4 +-
10551 include/linux/fs.h | 2 -
10552 4 files changed, 61 insertions(+), 55 deletions(-)
10553
10554 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
10555 Author: Jann Horn <jann@thejh.net>
10556 Date: Tue Jan 5 18:27:29 2016 +0100
10557
10558 compat_ioctl: don't look up the fd twice
10559
10560 In code in fs/compat_ioctl.c that translates ioctl arguments
10561 into a in-kernel structure, then performs sys_ioctl, possibly
10562 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
10563 calls to do_ioctl calls. do_ioctl is a new function that does
10564 the same thing as sys_ioctl, but doesn't look up the fd again.
10565
10566 This change is made to avoid (potential) security issues
10567 because of ioctl handlers that accept one of the ioctl
10568 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
10569 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
10570 This can happen for multiple reasons:
10571
10572 - The ioctl command number could be reused.
10573 - The ioctl handler might not check the full ioctl
10574 command. This is e.g. true for drm_ioctl.
10575 - The ioctl handler is very special, e.g. cuse_file_ioctl
10576
10577 The real issue is that set_fs(KERNEL_DS) is used here,
10578 but that's fixed in a separate commit
10579 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
10580
10581 This change mitigates potential security issues by
10582 preventing a race that permits invocation of
10583 unlocked_ioctl handlers under KERNEL_DS through compat
10584 code even if a corresponding compat_ioctl handler exists.
10585
10586 So far, no way has been identified to use this to damage
10587 kernel memory without having CAP_SYS_ADMIN in the init ns
10588 (with the capability, doing reads/writes at arbitrary
10589 kernel addresses should be easy through CUSE's ioctl
10590 handler with FUSE_IOCTL_UNRESTRICTED set).
10591
10592 [AV: two missed sys_ioctl() taken care of]
10593
10594 Signed-off-by: Jann Horn <jann@thejh.net>
10595 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10596
10597 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
10598 1 files changed, 68 insertions(+), 54 deletions(-)
10599
10600 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
10601 Author: Vasily Kulikov <segoon@openwall.com>
10602 Date: Fri Jan 15 16:57:55 2016 -0800
10603
10604 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
10605
10606 TIMER_ENTRY_STATIC is defined as a poison pointers which
10607 should point to nowhere. Redefine them using POISON_POINTER_DELTA
10608 arithmetics to make sure they really point to non-mappable area declared
10609 by the target architecture.
10610
10611 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
10612 Acked-by: Thomas Gleixner <tglx@linutronix.de>
10613 Cc: Solar Designer <solar@openwall.com>
10614 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
10615 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
10616 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
10617
10618 Conflicts:
10619
10620 include/linux/poison.h
10621
10622 include/linux/poison.h | 2 +-
10623 1 files changed, 1 insertions(+), 1 deletions(-)
10624
10625 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
10626 Author: Brad Spengler <spender@grsecurity.net>
10627 Date: Tue Jan 19 19:41:44 2016 -0500
10628
10629 Fix ARM compilation, reported by Austin Sepp
10630
10631 grsecurity/grsec_sig.c | 1 +
10632 1 files changed, 1 insertions(+), 0 deletions(-)
10633
10634 commit e15383743443dc43460a2fd73e0db0b608610dca
10635 Author: Takashi Iwai <tiwai@suse.de>
10636 Date: Mon Jan 18 13:52:47 2016 +0100
10637
10638 ALSA: hrtimer: Fix stall by hrtimer_cancel()
10639
10640 hrtimer_cancel() waits for the completion from the callback, thus it
10641 must not be called inside the callback itself. This was already a
10642 problem in the past with ALSA hrtimer driver, and the early commit
10643 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
10644
10645 However, the previous fix is still insufficient: it may still cause a
10646 lockup when the ALSA timer instance reprograms itself in its callback.
10647 Then it invokes the start function even in snd_timer_interrupt() that
10648 is called in hrtimer callback itself, results in a CPU stall. This is
10649 no hypothetical problem but actually triggered by syzkaller fuzzer.
10650
10651 This patch tries to fix the issue again. Now we call
10652 hrtimer_try_to_cancel() at both start and stop functions so that it
10653 won't fall into a deadlock, yet giving some chance to cancel the queue
10654 if the functions have been called outside the callback. The proper
10655 hrtimer_cancel() is called in anyway at closing, so this should be
10656 enough.
10657
10658 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
10659 Cc: <stable@vger.kernel.org>
10660 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10661
10662 sound/core/hrtimer.c | 3 ++-
10663 1 files changed, 2 insertions(+), 1 deletions(-)
10664
10665 commit 12d874daf706e6e7c1ae709141859c809599297e
10666 Author: Takashi Iwai <tiwai@suse.de>
10667 Date: Tue Jan 12 12:38:02 2016 +0100
10668
10669 ALSA: seq: Fix missing NULL check at remove_events ioctl
10670
10671 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
10672 unconditionally even if there is no FIFO assigned, and this leads to
10673 an Oops due to NULL dereference. The fix is just to add a proper NULL
10674 check.
10675
10676 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10677 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10678 Cc: <stable@vger.kernel.org>
10679 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10680
10681 sound/core/seq/seq_clientmgr.c | 2 +-
10682 1 files changed, 1 insertions(+), 1 deletions(-)
10683
10684 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
10685 Author: Takashi Iwai <tiwai@suse.de>
10686 Date: Tue Jan 12 15:36:27 2016 +0100
10687
10688 ALSA: seq: Fix race at timer setup and close
10689
10690 ALSA sequencer code has an open race between the timer setup ioctl and
10691 the close of the client. This was triggered by syzkaller fuzzer, and
10692 a use-after-free was caught there as a result.
10693
10694 This patch papers over it by adding a proper queue->timer_mutex lock
10695 around the timer-related calls in the relevant code path.
10696
10697 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10698 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10699 Cc: <stable@vger.kernel.org>
10700 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10701
10702 sound/core/seq/seq_queue.c | 2 ++
10703 1 files changed, 2 insertions(+), 0 deletions(-)
10704
10705 commit b9e55ab955e59b4a636d78a748be90334a48b485
10706 Author: Takashi Iwai <tiwai@suse.de>
10707 Date: Thu Jan 14 16:30:58 2016 +0100
10708
10709 ALSA: timer: Harden slave timer list handling
10710
10711 A slave timer instance might be still accessible in a racy way while
10712 operating the master instance as it lacks of locking. Since the
10713 master operation is mostly protected with timer->lock, we should cope
10714 with it while changing the slave instance, too. Also, some linked
10715 lists (active_list and ack_list) of slave instances aren't unlinked
10716 immediately at stopping or closing, and this may lead to unexpected
10717 accesses.
10718
10719 This patch tries to address these issues. It adds spin lock of
10720 timer->lock (either from master or slave, which is equivalent) in a
10721 few places. For avoiding a deadlock, we ensure that the global
10722 slave_active_lock is always locked at first before each timer lock.
10723
10724 Also, ack and active_list of slave instances are properly unlinked at
10725 snd_timer_stop() and snd_timer_close().
10726
10727 Last but not least, remove the superfluous call of _snd_timer_stop()
10728 at removing slave links. This is a noop, and calling it may confuse
10729 readers wrt locking. Further cleanup will follow in a later patch.
10730
10731 Actually we've got reports of use-after-free by syzkaller fuzzer, and
10732 this hopefully fixes these issues.
10733
10734 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10735 Cc: <stable@vger.kernel.org>
10736 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10737
10738 sound/core/timer.c | 18 ++++++++++++++----
10739 1 files changed, 14 insertions(+), 4 deletions(-)
10740
10741 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
10742 Author: Takashi Iwai <tiwai@suse.de>
10743 Date: Wed Jan 13 17:48:01 2016 +0100
10744
10745 ALSA: timer: Fix race among timer ioctls
10746
10747 ALSA timer ioctls have an open race and this may lead to a
10748 use-after-free of timer instance object. A simplistic fix is to make
10749 each ioctl exclusive. We have already tread_sem for controlling the
10750 tread, and extend this as a global mutex to be applied to each ioctl.
10751
10752 The downside is, of course, the worse concurrency. But these ioctls
10753 aren't to be parallel accessible, in anyway, so it should be fine to
10754 serialize there.
10755
10756 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10757 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10758 Cc: <stable@vger.kernel.org>
10759 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10760
10761 sound/core/timer.c | 32 +++++++++++++++++++-------------
10762 1 files changed, 19 insertions(+), 13 deletions(-)
10763
10764 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
10765 Author: Takashi Iwai <tiwai@suse.de>
10766 Date: Wed Jan 13 21:35:06 2016 +0100
10767
10768 ALSA: timer: Fix double unlink of active_list
10769
10770 ALSA timer instance object has a couple of linked lists and they are
10771 unlinked unconditionally at snd_timer_stop(). Meanwhile
10772 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
10773 the element list itself unchanged. This ends up with unlinking twice,
10774 and it was caught by syzkaller fuzzer.
10775
10776 The fix is to use list_del_init() variant properly there, too.
10777
10778 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10779 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10780 Cc: <stable@vger.kernel.org>
10781 Signed-off-by: Takashi Iwai <tiwai@suse.de>
10782
10783 sound/core/timer.c | 2 +-
10784 1 files changed, 1 insertions(+), 1 deletions(-)
10785
10786 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
10787 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10788 Date: Mon Jan 18 18:03:48 2016 +0100
10789
10790 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
10791
10792 It was seen that defective configurations of openvswitch could overwrite
10793 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
10794 many recursions within ovs.
10795
10796 This problem arises due to the high stack usage of openvswitch. The rest
10797 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
10798
10799 We use the already existing recursion counter in ovs_execute_actions to
10800 implement an upper bound of 5 recursions.
10801
10802 Cc: Pravin Shelar <pshelar@ovn.org>
10803 Cc: Simon Horman <simon.horman@netronome.com>
10804 Cc: Eric Dumazet <eric.dumazet@gmail.com>
10805 Cc: Simon Horman <simon.horman@netronome.com>
10806 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10807 Signed-off-by: David S. Miller <davem@davemloft.net>
10808
10809 net/openvswitch/actions.c | 19 ++++++++++++++-----
10810 1 files changed, 14 insertions(+), 5 deletions(-)
10811
10812 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
10813 Author: Ursula Braun <ursula.braun@de.ibm.com>
10814 Date: Tue Jan 19 10:41:33 2016 +0100
10815
10816 af_iucv: Validate socket address length in iucv_sock_bind()
10817
10818 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
10819 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10820 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
10821 Signed-off-by: David S. Miller <davem@davemloft.net>
10822
10823 net/iucv/af_iucv.c | 3 +++
10824 1 files changed, 3 insertions(+), 0 deletions(-)
10825
10826 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
10827 Author: Brad Spengler <spender@grsecurity.net>
10828 Date: Tue Jan 19 19:32:54 2016 -0500
10829
10830 Apply the same fix as everyone else for the recent keys vulnerability that is
10831 unexploitable under PAX_REFCOUNT
10832
10833 Make a couple more changes that no one else can/will
10834
10835 include/linux/key-type.h | 4 ++--
10836 ipc/msgutil.c | 4 ++--
10837 security/keys/internal.h | 2 +-
10838 security/keys/process_keys.c | 1 +
10839 4 files changed, 6 insertions(+), 5 deletions(-)
10840
10841 commit b56c3a63f431c193400aee17543021950bd14bc4
10842 Merge: 38b1a3d 470069c
10843 Author: Brad Spengler <spender@grsecurity.net>
10844 Date: Sun Jan 17 18:30:19 2016 -0500
10845
10846 Merge branch 'pax-test' into grsec-test
10847
10848 commit 470069cfedef2180313233d275be5901bd6d1135
10849 Author: Brad Spengler <spender@grsecurity.net>
10850 Date: Sun Jan 17 18:29:59 2016 -0500
10851
10852 Update to pax-linux-4.3.3-test22.patch:
10853 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
10854 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
10855
10856 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
10857 drivers/gpu/drm/drm_pci.c | 3 +++
10858 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
10859 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
10860 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
10861 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
10862 drivers/net/usb/asix_common.c | 3 ++-
10863 include/drm/drmP.h | 1 +
10864 8 files changed, 22 insertions(+), 29 deletions(-)
10865
10866 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
10867 Author: Brad Spengler <spender@grsecurity.net>
10868 Date: Sun Jan 17 12:33:53 2016 -0500
10869
10870 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
10871 mentioned banning execution of suid/sgid binaries, though the kernel
10872 source clearly only mentions banning execution of suid binaries. Since
10873 there's no reason for us to not ban execution of sgid binaries as well,
10874 make the implementation match the Kconfig description.
10875
10876 fs/exec.c | 4 ++--
10877 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
10878 include/linux/sched.h | 4 ++--
10879 3 files changed, 18 insertions(+), 17 deletions(-)
10880
10881 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
10882 Merge: d141a86 ea4a835
10883 Author: Brad Spengler <spender@grsecurity.net>
10884 Date: Sat Jan 16 14:12:22 2016 -0500
10885
10886 Merge branch 'pax-test' into grsec-test
10887
10888 Conflicts:
10889 drivers/gpu/drm/i810/i810_drv.c
10890
10891 commit ea4a835328ada6513ac013986764d6caea8cd348
10892 Author: Brad Spengler <spender@grsecurity.net>
10893 Date: Sat Jan 16 14:11:30 2016 -0500
10894
10895 Update to pax-linux-4.3.3-test21.patch:
10896 - fixed some fallout from the drm_drivers constification, reported by spender
10897
10898 drivers/gpu/drm/armada/armada_drv.c | 3 +--
10899 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
10900 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10901 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
10902 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10903 5 files changed, 8 insertions(+), 6 deletions(-)
10904
10905 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
10906 Author: Brad Spengler <spender@grsecurity.net>
10907 Date: Sat Jan 16 13:16:36 2016 -0500
10908
10909 compile fix
10910
10911 drivers/gpu/drm/i810/i810_dma.c | 2 +-
10912 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
10913 drivers/gpu/drm/i810/i810_drv.h | 2 +-
10914 3 files changed, 5 insertions(+), 3 deletions(-)
10915
10916 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
10917 Merge: 5fa135d bbda879
10918 Author: Brad Spengler <spender@grsecurity.net>
10919 Date: Sat Jan 16 12:59:22 2016 -0500
10920
10921 Merge branch 'pax-test' into grsec-test
10922
10923 commit bbda87914edf63e27fb46670bf3a373f2b963c73
10924 Author: Brad Spengler <spender@grsecurity.net>
10925 Date: Sat Jan 16 12:58:04 2016 -0500
10926
10927 Update to pax-linux-4.3.3-test20.patch:
10928 - constified drm_driver
10929 - Emese fixed a special case in handling __func__ in the initify plugin
10930 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
10931 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
10932
10933 arch/x86/kernel/cpu/perf_event.h | 2 +-
10934 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
10935 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
10936 arch/x86/kernel/uprobes.c | 2 +-
10937 arch/x86/mm/mpx.c | 2 +-
10938 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
10939 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
10940 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
10941 drivers/gpu/drm/drm_pci.c | 6 +-
10942 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
10943 drivers/gpu/drm/i915/i915_dma.c | 2 +-
10944 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
10945 drivers/gpu/drm/i915/i915_drv.h | 2 +-
10946 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
10947 drivers/gpu/drm/mga/mga_drv.c | 5 +-
10948 drivers/gpu/drm/mga/mga_drv.h | 2 +-
10949 drivers/gpu/drm/mga/mga_state.c | 2 +-
10950 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
10951 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
10952 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
10953 drivers/gpu/drm/r128/r128_drv.c | 4 +-
10954 drivers/gpu/drm/r128/r128_drv.h | 2 +-
10955 drivers/gpu/drm/r128/r128_state.c | 2 +-
10956 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
10957 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
10958 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
10959 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
10960 drivers/gpu/drm/savage/savage_bci.c | 2 +-
10961 drivers/gpu/drm/savage/savage_drv.c | 5 +-
10962 drivers/gpu/drm/savage/savage_drv.h | 2 +-
10963 drivers/gpu/drm/sis/sis_drv.c | 5 +-
10964 drivers/gpu/drm/sis/sis_drv.h | 2 +-
10965 drivers/gpu/drm/sis/sis_mm.c | 2 +-
10966 drivers/gpu/drm/via/via_dma.c | 2 +-
10967 drivers/gpu/drm/via/via_drv.c | 5 +-
10968 drivers/gpu/drm/via/via_drv.h | 2 +-
10969 include/drm/drmP.h | 2 +-
10970 mm/slab.c | 2 +-
10971 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
10972 tools/gcc/initify_plugin.c | 15 +++-
10973 .../disable_size_overflow_hash.data | 1 +
10974 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
10975 42 files changed, 156 insertions(+), 110 deletions(-)
10976
10977 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
10978 Author: Brad Spengler <spender@grsecurity.net>
10979 Date: Sat Jan 16 12:19:23 2016 -0500
10980
10981 compile fix
10982
10983 grsecurity/grsec_sig.c | 3 +--
10984 1 files changed, 1 insertions(+), 2 deletions(-)
10985
10986 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
10987 Author: Brad Spengler <spender@grsecurity.net>
10988 Date: Sat Jan 16 12:10:37 2016 -0500
10989
10990 As pointed out by Jann Horn, some distros are starting to circumvent
10991 previous assumptions about the attainability of a user to control
10992 multiple UIDs by handing out suid binaries that allow a user to run
10993 processes (including exploits) under a number of other pre-defined
10994 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
10995 (though it would have to involve some code path that doesn't involve
10996 locks) fix that here by ensuring no more than 8 users on a system can
10997 be banned before a reboot is required. If more are banned, a panic
10998 is triggered.
10999
11000 grsecurity/grsec_sig.c | 8 ++++++++
11001 1 files changed, 8 insertions(+), 0 deletions(-)
11002
11003 commit a8d37776e9521c567ebff6730d49312f72435f08
11004 Author: Eric Dumazet <edumazet@google.com>
11005 Date: Thu Dec 3 11:12:07 2015 -0800
11006
11007 proc: add a reschedule point in proc_readfd_common()
11008
11009 User can pass an arbitrary large buffer to getdents().
11010
11011 It is typically a 32KB buffer used by libc scandir() implementation.
11012
11013 When scanning /proc/{pid}/fd, we can hold cpu way too long,
11014 so add a cond_resched() to be kind with other tasks.
11015
11016 We've seen latencies of more than 50ms on real workloads.
11017
11018 Signed-off-by: Eric Dumazet <edumazet@google.com>
11019 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
11020 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11021
11022 fs/proc/fd.c | 1 +
11023 1 files changed, 1 insertions(+), 0 deletions(-)
11024
11025 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
11026 Author: Rabin Vincent <rabin@rab.in>
11027 Date: Tue Jan 12 20:17:08 2016 +0100
11028
11029 net: bpf: reject invalid shifts
11030
11031 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
11032 constant shift that can't be encoded in the immediate field of the
11033 UBFM/SBFM instructions is passed to the JIT. Since these shifts
11034 amounts, which are negative or >= regsize, are invalid, reject them in
11035 the eBPF verifier and the classic BPF filter checker, for all
11036 architectures.
11037
11038 Signed-off-by: Rabin Vincent <rabin@rab.in>
11039 Acked-by: Alexei Starovoitov <ast@kernel.org>
11040 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11041 Signed-off-by: David S. Miller <davem@davemloft.net>
11042
11043 kernel/bpf/verifier.c | 10 ++++++++++
11044 net/core/filter.c | 5 +++++
11045 2 files changed, 15 insertions(+), 0 deletions(-)
11046
11047 commit c248e115a73496625a1c64660d0eeefd67e55cbf
11048 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11049 Date: Fri Jan 8 11:00:54 2016 -0200
11050
11051 sctp: fix use-after-free in pr_debug statement
11052
11053 Dmitry Vyukov reported a use-after-free in the code expanded by the
11054 macro debug_post_sfx, which is caused by the use of the asoc pointer
11055 after it was freed within sctp_side_effect() scope.
11056
11057 This patch fixes it by allowing sctp_side_effect to clear that asoc
11058 pointer when the TCB is freed.
11059
11060 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
11061 because it will trigger DELETE_TCB too on that same loop.
11062
11063 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
11064 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
11065 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
11066
11067 The macro is already prepared to handle such NULL pointer.
11068
11069 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11070 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11071 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
11072 Signed-off-by: David S. Miller <davem@davemloft.net>
11073
11074 net/sctp/sm_sideeffect.c | 11 ++++++-----
11075 net/sctp/sm_statefuns.c | 17 ++++-------------
11076 2 files changed, 10 insertions(+), 18 deletions(-)
11077
11078 commit 395ea8a9e73e184fc14153a033000bccf4213213
11079 Author: willy tarreau <w@1wt.eu>
11080 Date: Sun Jan 10 07:54:56 2016 +0100
11081
11082 unix: properly account for FDs passed over unix sockets
11083
11084 It is possible for a process to allocate and accumulate far more FDs than
11085 the process' limit by sending them over a unix socket then closing them
11086 to keep the process' fd count low.
11087
11088 This change addresses this problem by keeping track of the number of FDs
11089 in flight per user and preventing non-privileged processes from having
11090 more FDs in flight than their configured FD limit.
11091
11092 Reported-by: socketpair@gmail.com
11093 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
11094 Mitigates: CVE-2013-4312 (Linux 2.0+)
11095 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
11096 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11097 Signed-off-by: Willy Tarreau <w@1wt.eu>
11098 Signed-off-by: David S. Miller <davem@davemloft.net>
11099
11100 include/linux/sched.h | 1 +
11101 net/unix/af_unix.c | 24 ++++++++++++++++++++----
11102 net/unix/garbage.c | 13 ++++++++-----
11103 3 files changed, 29 insertions(+), 9 deletions(-)
11104
11105 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
11106 Author: Sasha Levin <sasha.levin@oracle.com>
11107 Date: Thu Jan 7 14:52:43 2016 -0500
11108
11109 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
11110
11111 proc_dostring() needs an initialized destination string, while the one
11112 provided in proc_sctp_do_hmac_alg() contains stack garbage.
11113
11114 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
11115 accessing invalid memory.
11116
11117 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
11118 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11119 Signed-off-by: David S. Miller <davem@davemloft.net>
11120
11121 net/sctp/sysctl.c | 2 +-
11122 1 files changed, 1 insertions(+), 1 deletions(-)
11123
11124 commit 4014e09faf0fe9054119624ccfff1236e886b554
11125 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11126 Date: Tue Nov 24 17:13:21 2015 -0500
11127
11128 RDS: fix race condition when sending a message on unbound socket
11129
11130 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
11131
11132 Sasha's found a NULL pointer dereference in the RDS connection code when
11133 sending a message to an apparently unbound socket. The problem is caused
11134 by the code checking if the socket is bound in rds_sendmsg(), which checks
11135 the rs_bound_addr field without taking a lock on the socket. This opens a
11136 race where rs_bound_addr is temporarily set but where the transport is not
11137 in rds_bind(), leading to a NULL pointer dereference when trying to
11138 dereference 'trans' in __rds_conn_create().
11139
11140 Vegard wrote a reproducer for this issue, so kindly ask him to share if
11141 you're interested.
11142
11143 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
11144 with this patch, whereas I could without.
11145
11146 Complete earlier incomplete fix to CVE-2015-6937:
11147
11148 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
11149
11150 Cc: David S. Miller <davem@davemloft.net>
11151
11152 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
11153 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
11154 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11155 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
11156 Signed-off-by: David S. Miller <davem@davemloft.net>
11157 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
11158
11159 Conflicts:
11160
11161 net/rds/send.c
11162
11163 net/rds/connection.c | 6 ------
11164 1 files changed, 0 insertions(+), 6 deletions(-)
11165
11166 commit 206df8d01104344d7588d801016a281a4cd25556
11167 Author: Sasha Levin <sasha.levin@oracle.com>
11168 Date: Tue Sep 8 10:53:40 2015 -0400
11169
11170 RDS: verify the underlying transport exists before creating a connection
11171
11172 There was no verification that an underlying transport exists when creating
11173 a connection, this would cause dereferencing a NULL ptr.
11174
11175 It might happen on sockets that weren't properly bound before attempting to
11176 send a message, which will cause a NULL ptr deref:
11177
11178 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
11179 [135546.051270] Modules linked in:
11180 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
11181 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
11182 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
11183 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
11184 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
11185 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
11186 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
11187 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
11188 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
11189 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
11190 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
11191 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
11192 [135546.064723] Stack:
11193 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
11194 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
11195 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
11196 [135546.068629] Call Trace:
11197 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
11198 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
11199 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
11200 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
11201 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
11202 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
11203 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
11204 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
11205 [135546.076349] ? __might_fault (mm/memory.c:3795)
11206 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
11207 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
11208 [135546.078856] SYSC_sendto (net/socket.c:1657)
11209 [135546.079596] ? SYSC_connect (net/socket.c:1628)
11210 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
11211 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
11212 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11213 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
11214 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
11215 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
11216 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
11217
11218 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
11219 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
11220 Signed-off-by: David S. Miller <davem@davemloft.net>
11221
11222 net/rds/connection.c | 6 ++++++
11223 1 files changed, 6 insertions(+), 0 deletions(-)
11224
11225 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
11226 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
11227 Date: Tue Jan 5 20:32:47 2016 -0500
11228
11229 ftrace/module: Call clean up function when module init fails early
11230
11231 If the module init code fails after calling ftrace_module_init() and before
11232 calling do_init_module(), we can suffer from a memory leak. This is because
11233 ftrace_module_init() allocates pages to store the locations that ftrace
11234 hooks are placed in the module text. If do_init_module() fails, it still
11235 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
11236 the pages it allocated for the module. But if load_module() fails before
11237 then, the pages allocated by ftrace_module_init() will never be freed.
11238
11239 Call ftrace_release_mod() on the module if load_module() fails before
11240 getting to do_init_module().
11241
11242 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
11243
11244 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
11245 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
11246 Cc: stable@vger.kernel.org # v2.6.38+
11247 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
11248 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11249
11250 include/linux/ftrace.h | 1 +
11251 kernel/module.c | 6 ++++++
11252 2 files changed, 7 insertions(+), 0 deletions(-)
11253
11254 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
11255 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
11256 Date: Wed Jan 6 00:18:48 2016 -0800
11257
11258 net: possible use after free in dst_release
11259
11260 dst_release should not access dst->flags after decrementing
11261 __refcnt to 0. The dst_entry may be in dst_busy_list and
11262 dst_gc_task may dst_destroy it before dst_release gets a chance
11263 to access dst->flags.
11264
11265 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
11266 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
11267 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
11268 Acked-by: Eric Dumazet <edumazet@google.com>
11269 Signed-off-by: David S. Miller <davem@davemloft.net>
11270
11271 net/core/dst.c | 3 ++-
11272 1 files changed, 2 insertions(+), 1 deletions(-)
11273
11274 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
11275 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
11276 Date: Wed Jan 6 14:55:02 2016 +0000
11277
11278 mkiss: fix scribble on freed memory
11279
11280 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
11281 scribble on free memory but added a new one which allows the user to
11282 scribble even more and user controlled data into freed space.
11283
11284 As with 6pack we need to halt the queue before we free the buffers, because
11285 the transmit logic is not protected by the semaphore.
11286
11287 Signed-off-by: Alan Cox <alan@linux.intel.com>
11288 Signed-off-by: David S. Miller <davem@davemloft.net>
11289
11290 drivers/net/hamradio/mkiss.c | 5 +++++
11291 1 files changed, 5 insertions(+), 0 deletions(-)
11292
11293 commit 5cbbcbd32dc1949470f61d342503808fa9555276
11294 Author: David Miller <davem@davemloft.net>
11295 Date: Thu Dec 17 16:05:49 2015 -0500
11296
11297 mkiss: Fix use after free in mkiss_close().
11298
11299 Need to do the unregister_device() after all references to the driver
11300 private have been done.
11301
11302 Signed-off-by: David S. Miller <davem@davemloft.net>
11303
11304 drivers/net/hamradio/mkiss.c | 4 ++--
11305 1 files changed, 2 insertions(+), 2 deletions(-)
11306
11307 commit b00171576794a98068e069a660f0991a6a5190ff
11308 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
11309 Date: Tue Jan 5 11:51:25 2016 +0000
11310
11311 6pack: fix free memory scribbles
11312
11313 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
11314 memory scribble but in doing so replaced it with a different one that allows
11315 the user to control the data and scribble even more.
11316
11317 sixpack_close is called by the tty layer in tty context. The tty context is
11318 protected by sp_get() and sp_put(). However network layer activity via
11319 sp_xmit() is not protected this way. We must therefore stop the queue
11320 otherwise the user gets to dump a buffer mostly of their choice into freed
11321 kernel pages.
11322
11323 Signed-off-by: Alan Cox <alan@linux.intel.com>
11324 Signed-off-by: David S. Miller <davem@davemloft.net>
11325
11326 drivers/net/hamradio/6pack.c | 6 ++++++
11327 1 files changed, 6 insertions(+), 0 deletions(-)
11328
11329 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
11330 Author: David Miller <davem@davemloft.net>
11331 Date: Thu Dec 17 16:05:32 2015 -0500
11332
11333 6pack: Fix use after free in sixpack_close().
11334
11335 Need to do the unregister_device() after all references to the driver
11336 private have been done.
11337
11338 Also we need to use del_timer_sync() for the timers so that we don't
11339 have any asynchronous references after the unregister.
11340
11341 Signed-off-by: David S. Miller <davem@davemloft.net>
11342
11343 drivers/net/hamradio/6pack.c | 8 ++++----
11344 1 files changed, 4 insertions(+), 4 deletions(-)
11345
11346 commit 4f9d532742656b3613d579220fd10c78f24ba37b
11347 Author: Rabin Vincent <rabin@rab.in>
11348 Date: Tue Jan 5 16:23:07 2016 +0100
11349
11350 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
11351
11352 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
11353 instructions since it XORs A with X while all the others replace A with
11354 some loaded value. All the BPF JITs fail to clear A if this is used as
11355 the first instruction in a filter. This was found using american fuzzy
11356 lop.
11357
11358 Add a helper to determine if A needs to be cleared given the first
11359 instruction in a filter, and use this in the JITs. Except for ARM, the
11360 rest have only been compile-tested.
11361
11362 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
11363 Signed-off-by: Rabin Vincent <rabin@rab.in>
11364 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11365 Acked-by: Alexei Starovoitov <ast@kernel.org>
11366 Signed-off-by: David S. Miller <davem@davemloft.net>
11367
11368 arch/arm/net/bpf_jit_32.c | 16 +---------------
11369 arch/mips/net/bpf_jit.c | 16 +---------------
11370 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
11371 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
11372 include/linux/filter.h | 19 +++++++++++++++++++
11373 5 files changed, 25 insertions(+), 56 deletions(-)
11374
11375 commit 570d88f8acfffda92b89ae2e1c47320d47256034
11376 Author: John Fastabend <john.fastabend@gmail.com>
11377 Date: Tue Jan 5 09:11:36 2016 -0800
11378
11379 net: sched: fix missing free per cpu on qstats
11380
11381 When a qdisc is using per cpu stats (currently just the ingress
11382 qdisc) only the bstats are being freed. This also free's the qstats.
11383
11384 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
11385 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
11386 Acked-by: Eric Dumazet <edumazet@google.com>
11387 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
11388 Signed-off-by: David S. Miller <davem@davemloft.net>
11389
11390 net/sched/sch_generic.c | 4 +++-
11391 1 files changed, 3 insertions(+), 1 deletions(-)
11392
11393 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
11394 Author: Rabin Vincent <rabin@rab.in>
11395 Date: Tue Jan 5 18:34:04 2016 +0100
11396
11397 ARM: net: bpf: fix zero right shift
11398
11399 The LSR instruction cannot be used to perform a zero right shift since a
11400 0 as the immediate value (imm5) in the LSR instruction encoding means
11401 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
11402
11403 Make the JIT skip generation of the LSR if a zero-shift is requested.
11404
11405 This was found using american fuzzy lop.
11406
11407 Signed-off-by: Rabin Vincent <rabin@rab.in>
11408 Acked-by: Alexei Starovoitov <ast@kernel.org>
11409 Signed-off-by: David S. Miller <davem@davemloft.net>
11410
11411 arch/arm/net/bpf_jit_32.c | 3 ++-
11412 1 files changed, 2 insertions(+), 1 deletions(-)
11413
11414 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
11415 Author: Brad Spengler <spender@grsecurity.net>
11416 Date: Wed Jan 6 20:35:57 2016 -0500
11417
11418 Don't perform hidden lookups in RBAC against the directory of
11419 a file being opened with O_CREAT, reported by Karl Witt
11420
11421 Conflicts:
11422
11423 fs/namei.c
11424
11425 fs/namei.c | 3 ---
11426 1 files changed, 0 insertions(+), 3 deletions(-)
11427
11428 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
11429 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11430 Date: Tue Jan 5 10:46:00 2016 +0100
11431
11432 bridge: Only call /sbin/bridge-stp for the initial network namespace
11433
11434 [I stole this patch from Eric Biederman. He wrote:]
11435
11436 > There is no defined mechanism to pass network namespace information
11437 > into /sbin/bridge-stp therefore don't even try to invoke it except
11438 > for bridge devices in the initial network namespace.
11439 >
11440 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
11441 > invoked for any network device name which if /sbin/bridge-stp does not
11442 > guard against unreasonable arguments or being invoked twice on the
11443 > same network device could cause problems.
11444
11445 [Hannes: changed patch using netns_eq]
11446
11447 Cc: Eric W. Biederman <ebiederm@xmission.com>
11448 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
11449 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11450 Signed-off-by: David S. Miller <davem@davemloft.net>
11451
11452 net/bridge/br_stp_if.c | 5 ++++-
11453 1 files changed, 4 insertions(+), 1 deletions(-)
11454
11455 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
11456 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11457 Date: Wed Dec 23 16:28:40 2015 -0200
11458
11459 sctp: use GFP_USER for user-controlled kmalloc
11460
11461 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11462 missed two other spots.
11463
11464 For connectx, as it's more likely to be used by kernel users of the API,
11465 it detects if GFP_USER should be used or not.
11466
11467 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
11468 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11469 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
11470 Signed-off-by: David S. Miller <davem@davemloft.net>
11471
11472 net/sctp/socket.c | 9 ++++++---
11473 1 files changed, 6 insertions(+), 3 deletions(-)
11474
11475 commit 5718a1f63c41fc156f729783423b002763779d04
11476 Author: Florian Westphal <fw@strlen.de>
11477 Date: Thu Dec 31 14:26:33 2015 +0100
11478
11479 connector: bump skb->users before callback invocation
11480
11481 Dmitry reports memleak with syskaller program.
11482 Problem is that connector bumps skb usecount but might not invoke callback.
11483
11484 So move skb_get to where we invoke the callback.
11485
11486 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11487 Signed-off-by: Florian Westphal <fw@strlen.de>
11488 Signed-off-by: David S. Miller <davem@davemloft.net>
11489
11490 drivers/connector/connector.c | 11 +++--------
11491 1 files changed, 3 insertions(+), 8 deletions(-)
11492
11493 commit 2e6372e6a97f8d642416899861f91777f44f13b7
11494 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11495 Date: Sun Jan 3 18:56:38 2016 +0000
11496
11497 af_unix: Fix splice-bind deadlock
11498
11499 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
11500 system call and AF_UNIX sockets,
11501
11502 http://lists.openwall.net/netdev/2015/11/06/24
11503
11504 The situation was analyzed as
11505
11506 (a while ago) A: socketpair()
11507 B: splice() from a pipe to /mnt/regular_file
11508 does sb_start_write() on /mnt
11509 C: try to freeze /mnt
11510 wait for B to finish with /mnt
11511 A: bind() try to bind our socket to /mnt/new_socket_name
11512 lock our socket, see it not bound yet
11513 decide that it needs to create something in /mnt
11514 try to do sb_start_write() on /mnt, block (it's
11515 waiting for C).
11516 D: splice() from the same pipe to our socket
11517 lock the pipe, see that socket is connected
11518 try to lock the socket, block waiting for A
11519 B: get around to actually feeding a chunk from
11520 pipe to file, try to lock the pipe. Deadlock.
11521
11522 on 2015/11/10 by Al Viro,
11523
11524 http://lists.openwall.net/netdev/2015/11/10/4
11525
11526 The patch fixes this by removing the kern_path_create related code from
11527 unix_mknod and executing it as part of unix_bind prior acquiring the
11528 readlock of the socket in question. This means that A (as used above)
11529 will sb_start_write on /mnt before it acquires the readlock, hence, it
11530 won't indirectly block B which first did a sb_start_write and then
11531 waited for a thread trying to acquire the readlock. Consequently, A
11532 being blocked by C waiting for B won't cause a deadlock anymore
11533 (effectively, both A and B acquire two locks in opposite order in the
11534 situation described above).
11535
11536 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
11537
11538 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
11539 Signed-off-by: David S. Miller <davem@davemloft.net>
11540
11541 Conflicts:
11542
11543 net/unix/af_unix.c
11544
11545 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
11546 1 files changed, 42 insertions(+), 28 deletions(-)
11547
11548 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
11549 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
11550 Date: Thu Dec 31 13:11:28 2015 +0800
11551
11552 tracing: Fix setting of start_index in find_next()
11553
11554 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
11555 panic at t_show.
11556
11557 general protection fault: 0000 [#1] PREEMPT SMP
11558 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
11559 RIP: 0010:[<ffffffff811375b2>]
11560 [<ffffffff811375b2>] t_show+0x22/0xe0
11561 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
11562 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
11563 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
11564 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
11565 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
11566 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
11567 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
11568 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
11569 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
11570 Call Trace:
11571 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
11572 [<ffffffff811b749b>] vfs_read+0x9b/0x160
11573 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
11574 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
11575 ---[ end trace 5bd9eb630614861e ]---
11576 Kernel panic - not syncing: Fatal exception
11577
11578 When the first time find_next calls find_next_mod_format, it should
11579 iterate the trace_bprintk_fmt_list to find the first print format of
11580 the module. However in current code, start_index is smaller than *pos
11581 at first, and code will not iterate the list. Latter container_of will
11582 get the wrong address with former v, which will cause mod_fmt be a
11583 meaningless object and so is the returned mod_fmt->fmt.
11584
11585 This patch will fix it by correcting the start_index. After fixed,
11586 when the first time calls find_next_mod_format, start_index will be
11587 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
11588 get the right module printk format, so is the returned mod_fmt->fmt.
11589
11590 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
11591
11592 Cc: stable@vger.kernel.org # 3.12+
11593 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
11594 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
11595 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
11596
11597 kernel/trace/trace_printk.c | 1 +
11598 1 files changed, 1 insertions(+), 0 deletions(-)
11599
11600 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
11601 Author: Al Viro <viro@zeniv.linux.org.uk>
11602 Date: Mon Dec 28 20:47:08 2015 -0500
11603
11604 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
11605
11606 Cc: stable@vger.kernel.org # 3.15+
11607 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
11608 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
11609
11610 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
11611 1 files changed, 37 insertions(+), 36 deletions(-)
11612
11613 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
11614 Merge: de243c2 3adc55a
11615 Author: Brad Spengler <spender@grsecurity.net>
11616 Date: Tue Jan 5 18:10:10 2016 -0500
11617
11618 Merge branch 'pax-test' into grsec-test
11619
11620 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
11621 Author: Brad Spengler <spender@grsecurity.net>
11622 Date: Tue Jan 5 18:08:53 2016 -0500
11623
11624 Update to pax-linux-4.3.3-test16.patch:
11625 - small cleanup in entry_64.S on x86
11626 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
11627 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
11628 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
11629 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
11630 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
11631
11632 arch/x86/entry/entry_64.S | 60 +++++-----
11633 arch/x86/kernel/alternative.c | 2 +-
11634 arch/x86/kvm/emulate.c | 4 +-
11635 tools/gcc/initify_plugin.c | 123 +++++++++----------
11636 .../disable_size_overflow_hash.data | 4 +-
11637 .../size_overflow_plugin/size_overflow_hash.data | 2 -
11638 6 files changed, 93 insertions(+), 102 deletions(-)
11639
11640 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
11641 Author: Brad Spengler <spender@grsecurity.net>
11642 Date: Tue Dec 29 18:01:24 2015 -0500
11643
11644 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
11645 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
11646 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
11647
11648 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
11649 against suid/sgid attacks and the flaw above would only eliminate the extra
11650 entropy provided for the brk-managed heap, still leaving it with the minimum
11651 of 16-bit entropy for mmap on x86 and 28 on x64.
11652
11653 mm/mmap.c | 2 +-
11654 1 files changed, 1 insertions(+), 1 deletions(-)
11655
11656 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
11657 Merge: 436201b 2584340
11658 Author: Brad Spengler <spender@grsecurity.net>
11659 Date: Mon Dec 28 20:30:01 2015 -0500
11660
11661 Merge branch 'pax-test' into grsec-test
11662
11663 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
11664 Author: Brad Spengler <spender@grsecurity.net>
11665 Date: Mon Dec 28 20:29:28 2015 -0500
11666
11667 Update to pax-linux-4.3.3-test14.patch:
11668 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
11669 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
11670 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
11671 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
11672 - fixed an assert in the initify plugin that triggered in vic_register on arm
11673
11674 arch/arm/include/asm/atomic.h | 7 +++++--
11675 arch/arm/include/asm/domain.h | 5 ++---
11676 arch/x86/kernel/tboot.c | 14 +++++++++-----
11677 drivers/hv/channel.c | 4 +---
11678 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
11679 drivers/net/hyperv/rndis_filter.c | 3 +--
11680 fs/exec.c | 4 ++--
11681 include/linux/atomic.h | 15 ---------------
11682 net/core/skbuff.c | 3 ++-
11683 tools/gcc/initify_plugin.c | 4 +++-
11684 10 files changed, 26 insertions(+), 35 deletions(-)
11685
11686 commit 436201b6626b488d173c8076447000077c27b84a
11687 Author: David Howells <dhowells@redhat.com>
11688 Date: Fri Dec 18 01:34:26 2015 +0000
11689
11690 KEYS: Fix race between read and revoke
11691
11692 This fixes CVE-2015-7550.
11693
11694 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
11695 happens between keyctl_read() checking the validity of a key and the key's
11696 semaphore being taken, then the key type read method will see a revoked key.
11697
11698 This causes a problem for the user-defined key type because it assumes in
11699 its read method that there will always be a payload in a non-revoked key
11700 and doesn't check for a NULL pointer.
11701
11702 Fix this by making keyctl_read() check the validity of a key after taking
11703 semaphore instead of before.
11704
11705 I think the bug was introduced with the original keyrings code.
11706
11707 This was discovered by a multithreaded test program generated by syzkaller
11708 (http://github.com/google/syzkaller). Here's a cleaned up version:
11709
11710 #include <sys/types.h>
11711 #include <keyutils.h>
11712 #include <pthread.h>
11713 void *thr0(void *arg)
11714 {
11715 key_serial_t key = (unsigned long)arg;
11716 keyctl_revoke(key);
11717 return 0;
11718 }
11719 void *thr1(void *arg)
11720 {
11721 key_serial_t key = (unsigned long)arg;
11722 char buffer[16];
11723 keyctl_read(key, buffer, 16);
11724 return 0;
11725 }
11726 int main()
11727 {
11728 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
11729 pthread_t th[5];
11730 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
11731 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
11732 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
11733 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
11734 pthread_join(th[0], 0);
11735 pthread_join(th[1], 0);
11736 pthread_join(th[2], 0);
11737 pthread_join(th[3], 0);
11738 return 0;
11739 }
11740
11741 Build as:
11742
11743 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
11744
11745 Run as:
11746
11747 while keyctl-race; do :; done
11748
11749 as it may need several iterations to crash the kernel. The crash can be
11750 summarised as:
11751
11752 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
11753 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
11754 ...
11755 Call Trace:
11756 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
11757 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
11758 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
11759
11760 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11761 Signed-off-by: David Howells <dhowells@redhat.com>
11762 Tested-by: Dmitry Vyukov <dvyukov@google.com>
11763 Cc: stable@vger.kernel.org
11764 Signed-off-by: James Morris <james.l.morris@oracle.com>
11765
11766 security/keys/keyctl.c | 18 +++++++++---------
11767 1 files changed, 9 insertions(+), 9 deletions(-)
11768
11769 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
11770 Author: Brad Spengler <spender@grsecurity.net>
11771 Date: Tue Dec 22 20:44:01 2015 -0500
11772
11773 Add new kernel command-line param: pax_size_overflow_report_only
11774 If a user triggers a size_overflow violation that makes it difficult
11775 to obtain the call trace without serial console/net console, they can
11776 use this option to provide that information to us
11777
11778 Documentation/kernel-parameters.txt | 5 +++++
11779 fs/exec.c | 12 +++++++++---
11780 init/main.c | 11 +++++++++++
11781 3 files changed, 25 insertions(+), 3 deletions(-)
11782
11783 commit 4254a8da5851df8c08cdca5c392916e8c105408d
11784 Author: WANG Cong <xiyou.wangcong@gmail.com>
11785 Date: Mon Dec 21 10:55:45 2015 -0800
11786
11787 addrconf: always initialize sysctl table data
11788
11789 When sysctl performs restrict writes, it allows to write from
11790 a middle position of a sysctl file, which requires us to initialize
11791 the table data before calling proc_dostring() for the write case.
11792
11793 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
11794 Reported-by: Sasha Levin <sasha.levin@oracle.com>
11795 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11796 Tested-by: Sasha Levin <sasha.levin@oracle.com>
11797 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11798 Signed-off-by: David S. Miller <davem@davemloft.net>
11799
11800 net/ipv6/addrconf.c | 11 ++++-------
11801 1 files changed, 4 insertions(+), 7 deletions(-)
11802
11803 commit f8002863fb06c363180637046947a78a6ccb3d33
11804 Author: WANG Cong <xiyou.wangcong@gmail.com>
11805 Date: Wed Dec 16 23:39:04 2015 -0800
11806
11807 net: check both type and procotol for tcp sockets
11808
11809 Dmitry reported the following out-of-bound access:
11810
11811 Call Trace:
11812 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
11813 mm/kasan/report.c:294
11814 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
11815 [< inline >] SYSC_setsockopt net/socket.c:1746
11816 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
11817 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
11818 arch/x86/entry/entry_64.S:185
11819
11820 This is because we mistake a raw socket as a tcp socket.
11821 We should check both sk->sk_type and sk->sk_protocol to ensure
11822 it is a tcp socket.
11823
11824 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
11825
11826 Reported-by: Dmitry Vyukov <dvyukov@google.com>
11827 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
11828 Cc: Eric Dumazet <eric.dumazet@gmail.com>
11829 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
11830 Acked-by: Willem de Bruijn <willemb@google.com>
11831 Signed-off-by: David S. Miller <davem@davemloft.net>
11832
11833 net/core/skbuff.c | 3 ++-
11834 net/core/sock.c | 3 ++-
11835 2 files changed, 4 insertions(+), 2 deletions(-)
11836
11837 commit bd6b3399804470a4ad8f34229469ca149dceba3d
11838 Author: Colin Ian King <colin.king@canonical.com>
11839 Date: Fri Dec 18 14:22:01 2015 -0800
11840
11841 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
11842
11843 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
11844 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
11845 the setting of ret after the get_proc_task call and incorrectly left it as
11846 -ESRCH. Instead, return 0 when successful.
11847
11848 Example breakage:
11849
11850 echo 0 > /proc/self/coredump_filter
11851 bash: echo: write error: No such process
11852
11853 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
11854 Signed-off-by: Colin Ian King <colin.king@canonical.com>
11855 Acked-by: Kees Cook <keescook@chromium.org>
11856 Cc: <stable@vger.kernel.org> [4.3+]
11857 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
11858 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
11859
11860 fs/proc/base.c | 1 +
11861 1 files changed, 1 insertions(+), 0 deletions(-)
11862
11863 commit b28aca2b99ed08546778355fb9402c503ff9b29e
11864 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
11865 Date: Tue Dec 22 10:23:44 2015 -0700
11866
11867 block: ensure to split after potentially bouncing a bio
11868
11869 blk_queue_bio() does split then bounce, which makes the segment
11870 counting based on pages before bouncing and could go wrong. Move
11871 the split to after bouncing, like we do for blk-mq, and the we
11872 fix the issue of having the bio count for segments be wrong.
11873
11874 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
11875 Cc: stable@vger.kernel.org
11876 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
11877 Signed-off-by: Jens Axboe <axboe@fb.com>
11878
11879 block/blk-core.c | 4 ++--
11880 1 files changed, 2 insertions(+), 2 deletions(-)
11881
11882 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
11883 Merge: f6f63ae ec72fa5
11884 Author: Brad Spengler <spender@grsecurity.net>
11885 Date: Tue Dec 22 19:46:26 2015 -0500
11886
11887 Merge branch 'pax-test' into grsec-test
11888
11889 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
11890 Author: Brad Spengler <spender@grsecurity.net>
11891 Date: Tue Dec 22 19:45:51 2015 -0500
11892
11893 Update to pax-linux-4.3.3-test13.patch:
11894 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
11895 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
11896
11897 arch/arm/mm/fault.c | 2 +-
11898 arch/x86/mm/fault.c | 2 +-
11899 fs/btrfs/extent_map.c | 8 ++++++--
11900 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
11901 4 files changed, 11 insertions(+), 5 deletions(-)
11902
11903 commit f6f63ae154cd45028add1dc41957878060d77fbf
11904 Author: Brad Spengler <spender@grsecurity.net>
11905 Date: Thu Dec 17 18:43:44 2015 -0500
11906
11907 ptrace_has_cap() checks whether the current process should be
11908 treated as having a certain capability for ptrace checks
11909 against another process. Until now, this was equivalent to
11910 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
11911
11912 However, if a root-owned process wants to enter a user
11913 namespace for some reason without knowing who owns it and
11914 therefore can't change to the namespace owner's uid and gid
11915 before entering, as soon as it has entered the namespace,
11916 the namespace owner can attach to it via ptrace and thereby
11917 gain access to its uid and gid.
11918
11919 While it is possible for the entering process to switch to
11920 the uid of a claimed namespace owner before entering,
11921 causing the attempt to enter to fail if the claimed uid is
11922 wrong, this doesn't solve the problem of determining an
11923 appropriate gid.
11924
11925 With this change, the entering process can first enter the
11926 namespace and then safely inspect the namespace's
11927 properties, e.g. through /proc/self/{uid_map,gid_map},
11928 assuming that the namespace owner doesn't have access to
11929 uid 0.
11930 Signed-off-by: Jann Horn <jann@thejh.net>
11931
11932 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
11933 1 files changed, 25 insertions(+), 5 deletions(-)
11934
11935 commit e314f0fb63020f61543b401ff594e953c2c304e5
11936 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
11937 Date: Tue Dec 15 10:46:17 2015 -0800
11938
11939 net: fix uninitialized variable issue
11940
11941 msg_iocb needs to be initialized on the recv/recvfrom path.
11942 Otherwise afalg will wrongly interpret it as an async call.
11943
11944 Cc: stable@vger.kernel.org
11945 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
11946 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
11947 Signed-off-by: David S. Miller <davem@davemloft.net>
11948
11949 net/socket.c | 1 +
11950 1 files changed, 1 insertions(+), 0 deletions(-)
11951
11952 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
11953 Merge: dfa764c 142edcf
11954 Author: Brad Spengler <spender@grsecurity.net>
11955 Date: Wed Dec 16 21:01:17 2015 -0500
11956
11957 Merge branch 'pax-test' into grsec-test
11958
11959 commit 142edcf1005a57fb8887823565cf0bafad2f313c
11960 Author: Brad Spengler <spender@grsecurity.net>
11961 Date: Wed Dec 16 21:00:57 2015 -0500
11962
11963 Update to pax-linux-4.3.3-test12.patch:
11964 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
11965 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
11966
11967 drivers/tty/n_tty.c | 16 ++++++++--------
11968 .../disable_size_overflow_hash.data | 2 ++
11969 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
11970 3 files changed, 12 insertions(+), 12 deletions(-)
11971
11972 commit dfa764cc549892a5bfc1083cac78b99032cae577
11973 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
11974 Date: Tue Dec 15 22:59:12 2015 +0100
11975
11976 ipv6: automatically enable stable privacy mode if stable_secret set
11977
11978 Bjørn reported that while we switch all interfaces to privacy stable mode
11979 when setting the secret, we don't set this mode for new interfaces. This
11980 does not make sense, so change this behaviour.
11981
11982 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
11983 Reported-by: Bjørn Mork <bjorn@mork.no>
11984 Cc: Bjørn Mork <bjorn@mork.no>
11985 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
11986 Signed-off-by: David S. Miller <davem@davemloft.net>
11987
11988 net/ipv6/addrconf.c | 6 ++++++
11989 1 files changed, 6 insertions(+), 0 deletions(-)
11990
11991 commit c2815a1fee03f222273e77c14e43f960da06f35a
11992 Author: Brad Spengler <spender@grsecurity.net>
11993 Date: Wed Dec 16 13:03:38 2015 -0500
11994
11995 Work around upstream limitation on the number of thread info flags causing a compilation error
11996 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
11997
11998 arch/arm/kernel/entry-common.S | 8 ++++++--
11999 1 files changed, 6 insertions(+), 2 deletions(-)
12000
12001 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
12002 Author: Brad Spengler <spender@grsecurity.net>
12003 Date: Tue Dec 15 19:03:41 2015 -0500
12004
12005 Initial import of grsecurity 3.1 for Linux 4.3.3
12006
12007 Documentation/dontdiff | 2 +
12008 Documentation/kernel-parameters.txt | 7 +
12009 Documentation/sysctl/kernel.txt | 15 +
12010 Makefile | 18 +-
12011 arch/alpha/include/asm/cache.h | 4 +-
12012 arch/alpha/kernel/osf_sys.c | 12 +-
12013 arch/arc/Kconfig | 1 +
12014 arch/arm/Kconfig | 1 +
12015 arch/arm/Kconfig.debug | 1 +
12016 arch/arm/include/asm/thread_info.h | 7 +-
12017 arch/arm/kernel/process.c | 4 +-
12018 arch/arm/kernel/ptrace.c | 9 +
12019 arch/arm/kernel/traps.c | 7 +-
12020 arch/arm/mm/Kconfig | 2 +-
12021 arch/arm/mm/fault.c | 40 +-
12022 arch/arm/mm/mmap.c | 8 +-
12023 arch/arm/net/bpf_jit_32.c | 51 +-
12024 arch/arm64/Kconfig.debug | 1 +
12025 arch/avr32/include/asm/cache.h | 4 +-
12026 arch/blackfin/Kconfig.debug | 1 +
12027 arch/blackfin/include/asm/cache.h | 3 +-
12028 arch/cris/include/arch-v10/arch/cache.h | 3 +-
12029 arch/cris/include/arch-v32/arch/cache.h | 3 +-
12030 arch/frv/include/asm/cache.h | 3 +-
12031 arch/frv/mm/elf-fdpic.c | 4 +-
12032 arch/hexagon/include/asm/cache.h | 6 +-
12033 arch/ia64/Kconfig | 1 +
12034 arch/ia64/include/asm/cache.h | 3 +-
12035 arch/ia64/kernel/sys_ia64.c | 2 +
12036 arch/ia64/mm/hugetlbpage.c | 2 +
12037 arch/m32r/include/asm/cache.h | 4 +-
12038 arch/m68k/include/asm/cache.h | 4 +-
12039 arch/metag/mm/hugetlbpage.c | 1 +
12040 arch/microblaze/include/asm/cache.h | 3 +-
12041 arch/mips/Kconfig | 1 +
12042 arch/mips/include/asm/cache.h | 3 +-
12043 arch/mips/include/asm/thread_info.h | 11 +-
12044 arch/mips/kernel/irq.c | 3 +
12045 arch/mips/kernel/ptrace.c | 9 +
12046 arch/mips/mm/mmap.c | 4 +-
12047 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
12048 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
12049 arch/openrisc/include/asm/cache.h | 4 +-
12050 arch/parisc/include/asm/cache.h | 5 +-
12051 arch/parisc/kernel/sys_parisc.c | 4 +
12052 arch/powerpc/Kconfig | 1 +
12053 arch/powerpc/include/asm/cache.h | 4 +-
12054 arch/powerpc/include/asm/thread_info.h | 5 +-
12055 arch/powerpc/kernel/Makefile | 2 +
12056 arch/powerpc/kernel/irq.c | 3 +
12057 arch/powerpc/kernel/process.c | 10 +-
12058 arch/powerpc/kernel/ptrace.c | 14 +
12059 arch/powerpc/kernel/traps.c | 5 +
12060 arch/powerpc/mm/slice.c | 2 +-
12061 arch/s390/Kconfig.debug | 1 +
12062 arch/s390/include/asm/cache.h | 4 +-
12063 arch/score/include/asm/cache.h | 4 +-
12064 arch/sh/include/asm/cache.h | 3 +-
12065 arch/sh/mm/mmap.c | 6 +-
12066 arch/sparc/include/asm/cache.h | 4 +-
12067 arch/sparc/include/asm/pgalloc_64.h | 1 +
12068 arch/sparc/include/asm/thread_info_64.h | 8 +-
12069 arch/sparc/kernel/process_32.c | 6 +-
12070 arch/sparc/kernel/process_64.c | 8 +-
12071 arch/sparc/kernel/ptrace_64.c | 14 +
12072 arch/sparc/kernel/sys_sparc_64.c | 8 +-
12073 arch/sparc/kernel/syscalls.S | 8 +-
12074 arch/sparc/kernel/traps_32.c | 8 +-
12075 arch/sparc/kernel/traps_64.c | 28 +-
12076 arch/sparc/kernel/unaligned_64.c | 2 +-
12077 arch/sparc/mm/fault_64.c | 2 +-
12078 arch/sparc/mm/hugetlbpage.c | 15 +-
12079 arch/tile/Kconfig | 1 +
12080 arch/tile/include/asm/cache.h | 3 +-
12081 arch/tile/mm/hugetlbpage.c | 2 +
12082 arch/um/include/asm/cache.h | 3 +-
12083 arch/unicore32/include/asm/cache.h | 6 +-
12084 arch/x86/Kconfig | 21 +
12085 arch/x86/Kconfig.debug | 2 +
12086 arch/x86/entry/common.c | 14 +
12087 arch/x86/entry/entry_32.S | 2 +-
12088 arch/x86/entry/entry_64.S | 2 +-
12089 arch/x86/ia32/ia32_aout.c | 2 +
12090 arch/x86/include/asm/floppy.h | 20 +-
12091 arch/x86/include/asm/fpu/types.h | 69 +-
12092 arch/x86/include/asm/io.h | 2 +-
12093 arch/x86/include/asm/page.h | 12 +-
12094 arch/x86/include/asm/paravirt_types.h | 23 +-
12095 arch/x86/include/asm/processor.h | 12 +-
12096 arch/x86/include/asm/thread_info.h | 6 +-
12097 arch/x86/include/asm/uaccess.h | 2 +-
12098 arch/x86/kernel/dumpstack.c | 10 +-
12099 arch/x86/kernel/dumpstack_32.c | 2 +-
12100 arch/x86/kernel/dumpstack_64.c | 2 +-
12101 arch/x86/kernel/ioport.c | 13 +
12102 arch/x86/kernel/irq_32.c | 3 +
12103 arch/x86/kernel/irq_64.c | 4 +
12104 arch/x86/kernel/ldt.c | 18 +
12105 arch/x86/kernel/msr.c | 10 +
12106 arch/x86/kernel/ptrace.c | 14 +
12107 arch/x86/kernel/signal.c | 9 +-
12108 arch/x86/kernel/sys_i386_32.c | 9 +-
12109 arch/x86/kernel/sys_x86_64.c | 8 +-
12110 arch/x86/kernel/traps.c | 5 +
12111 arch/x86/kernel/verify_cpu.S | 1 +
12112 arch/x86/kernel/vm86_32.c | 15 +
12113 arch/x86/kvm/svm.c | 14 +-
12114 arch/x86/mm/fault.c | 12 +-
12115 arch/x86/mm/hugetlbpage.c | 15 +-
12116 arch/x86/mm/init.c | 66 +-
12117 arch/x86/mm/init_32.c | 6 +-
12118 arch/x86/net/bpf_jit_comp.c | 4 +
12119 arch/x86/platform/efi/efi_64.c | 2 +-
12120 arch/x86/xen/Kconfig | 1 +
12121 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
12122 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
12123 crypto/ablkcipher.c | 2 +-
12124 crypto/blkcipher.c | 2 +-
12125 crypto/scatterwalk.c | 10 +-
12126 drivers/acpi/acpica/hwxfsleep.c | 11 +-
12127 drivers/acpi/custom_method.c | 4 +
12128 drivers/block/cciss.h | 30 +-
12129 drivers/block/smart1,2.h | 40 +-
12130 drivers/cdrom/cdrom.c | 2 +-
12131 drivers/char/Kconfig | 4 +-
12132 drivers/char/genrtc.c | 1 +
12133 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
12134 drivers/char/mem.c | 17 +
12135 drivers/char/random.c | 5 +-
12136 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
12137 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
12138 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
12139 drivers/crypto/talitos.c | 2 +-
12140 drivers/firewire/ohci.c | 4 +
12141 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
12142 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
12143 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
12144 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
12145 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
12146 drivers/hid/hid-wiimote-debug.c | 2 +-
12147 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
12148 drivers/iommu/Kconfig | 1 +
12149 drivers/iommu/amd_iommu.c | 14 +-
12150 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
12151 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
12152 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
12153 drivers/isdn/hisax/config.c | 2 +-
12154 drivers/isdn/hisax/hfc_pci.c | 2 +-
12155 drivers/isdn/hisax/hfc_sx.c | 2 +-
12156 drivers/isdn/hisax/q931.c | 6 +-
12157 drivers/isdn/i4l/isdn_concap.c | 6 +-
12158 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
12159 drivers/md/bcache/Kconfig | 1 +
12160 drivers/md/raid5.c | 8 +
12161 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
12162 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
12163 drivers/media/platform/vivid/vivid-osd.c | 1 +
12164 drivers/media/radio/radio-cadet.c | 5 +-
12165 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
12166 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
12167 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
12168 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
12169 drivers/message/fusion/mptbase.c | 9 +
12170 drivers/misc/sgi-xp/xp_main.c | 12 +-
12171 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
12172 drivers/net/ppp/pppoe.c | 14 +-
12173 drivers/net/ppp/pptp.c | 6 +
12174 drivers/net/slip/slhc.c | 3 +
12175 drivers/net/wan/lmc/lmc_media.c | 97 +-
12176 drivers/net/wan/x25_asy.c | 6 +-
12177 drivers/net/wan/z85230.c | 24 +-
12178 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
12179 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
12180 drivers/pci/pci-sysfs.c | 2 +-
12181 drivers/pci/proc.c | 9 +
12182 drivers/platform/x86/asus-wmi.c | 12 +
12183 drivers/rtc/rtc-dev.c | 3 +
12184 drivers/scsi/bfa/bfa_fcs.c | 19 +-
12185 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
12186 drivers/scsi/bfa/bfa_modules.h | 12 +-
12187 drivers/scsi/hpsa.h | 40 +-
12188 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
12189 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
12190 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
12191 drivers/target/target_core_sbc.c | 17 +-
12192 drivers/target/target_core_transport.c | 14 +-
12193 drivers/tty/serial/uartlite.c | 4 +-
12194 drivers/tty/sysrq.c | 2 +-
12195 drivers/tty/vt/keyboard.c | 22 +-
12196 drivers/uio/uio.c | 6 +-
12197 drivers/usb/core/hub.c | 5 +
12198 drivers/usb/gadget/function/f_uac1.c | 1 +
12199 drivers/usb/gadget/function/u_uac1.c | 1 +
12200 drivers/usb/host/hwa-hc.c | 9 +-
12201 drivers/usb/usbip/vhci_sysfs.c | 2 +-
12202 drivers/video/fbdev/arcfb.c | 2 +-
12203 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
12204 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
12205 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
12206 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
12207 drivers/xen/xenfs/xenstored.c | 5 +
12208 firmware/Makefile | 2 +
12209 firmware/WHENCE | 20 +-
12210 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
12211 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
12212 fs/9p/vfs_inode.c | 4 +-
12213 fs/attr.c | 1 +
12214 fs/autofs4/waitq.c | 9 +
12215 fs/binfmt_aout.c | 7 +
12216 fs/binfmt_elf.c | 50 +-
12217 fs/compat.c | 20 +-
12218 fs/coredump.c | 17 +-
12219 fs/dcache.c | 3 +
12220 fs/debugfs/inode.c | 11 +-
12221 fs/exec.c | 219 +-
12222 fs/ext2/balloc.c | 4 +-
12223 fs/ext2/super.c | 8 +-
12224 fs/ext4/balloc.c | 4 +-
12225 fs/fcntl.c | 4 +
12226 fs/fhandle.c | 3 +-
12227 fs/file.c | 4 +
12228 fs/filesystems.c | 4 +
12229 fs/fs_struct.c | 20 +-
12230 fs/hugetlbfs/inode.c | 5 +-
12231 fs/inode.c | 8 +-
12232 fs/kernfs/dir.c | 6 +
12233 fs/mount.h | 4 +-
12234 fs/namei.c | 286 +-
12235 fs/namespace.c | 24 +
12236 fs/nfsd/nfscache.c | 2 +-
12237 fs/open.c | 38 +
12238 fs/overlayfs/inode.c | 11 +-
12239 fs/overlayfs/super.c | 6 +-
12240 fs/pipe.c | 2 +-
12241 fs/posix_acl.c | 15 +-
12242 fs/proc/Kconfig | 10 +-
12243 fs/proc/array.c | 69 +-
12244 fs/proc/base.c | 186 +-
12245 fs/proc/cmdline.c | 4 +
12246 fs/proc/devices.c | 4 +
12247 fs/proc/fd.c | 17 +-
12248 fs/proc/generic.c | 64 +
12249 fs/proc/inode.c | 17 +
12250 fs/proc/internal.h | 11 +-
12251 fs/proc/interrupts.c | 4 +
12252 fs/proc/kcore.c | 3 +
12253 fs/proc/meminfo.c | 7 +-
12254 fs/proc/namespaces.c | 4 +-
12255 fs/proc/proc_net.c | 31 +
12256 fs/proc/proc_sysctl.c | 52 +-
12257 fs/proc/root.c | 8 +
12258 fs/proc/stat.c | 69 +-
12259 fs/proc/task_mmu.c | 66 +-
12260 fs/readdir.c | 19 +
12261 fs/reiserfs/item_ops.c | 24 +-
12262 fs/reiserfs/super.c | 4 +
12263 fs/select.c | 2 +
12264 fs/seq_file.c | 30 +-
12265 fs/splice.c | 8 +
12266 fs/stat.c | 20 +-
12267 fs/sysfs/dir.c | 30 +-
12268 fs/sysv/inode.c | 11 +-
12269 fs/utimes.c | 7 +
12270 fs/xattr.c | 26 +-
12271 grsecurity/Kconfig | 1182 ++++
12272 grsecurity/Makefile | 54 +
12273 grsecurity/gracl.c | 2757 +++++++++
12274 grsecurity/gracl_alloc.c | 105 +
12275 grsecurity/gracl_cap.c | 127 +
12276 grsecurity/gracl_compat.c | 269 +
12277 grsecurity/gracl_fs.c | 448 ++
12278 grsecurity/gracl_ip.c | 386 ++
12279 grsecurity/gracl_learn.c | 207 +
12280 grsecurity/gracl_policy.c | 1786 ++++++
12281 grsecurity/gracl_res.c | 68 +
12282 grsecurity/gracl_segv.c | 304 +
12283 grsecurity/gracl_shm.c | 40 +
12284 grsecurity/grsec_chdir.c | 19 +
12285 grsecurity/grsec_chroot.c | 467 ++
12286 grsecurity/grsec_disabled.c | 445 ++
12287 grsecurity/grsec_exec.c | 189 +
12288 grsecurity/grsec_fifo.c | 26 +
12289 grsecurity/grsec_fork.c | 23 +
12290 grsecurity/grsec_init.c | 290 +
12291 grsecurity/grsec_ipc.c | 48 +
12292 grsecurity/grsec_link.c | 65 +
12293 grsecurity/grsec_log.c | 340 +
12294 grsecurity/grsec_mem.c | 48 +
12295 grsecurity/grsec_mount.c | 65 +
12296 grsecurity/grsec_pax.c | 47 +
12297 grsecurity/grsec_proc.c | 20 +
12298 grsecurity/grsec_ptrace.c | 30 +
12299 grsecurity/grsec_sig.c | 236 +
12300 grsecurity/grsec_sock.c | 244 +
12301 grsecurity/grsec_sysctl.c | 488 ++
12302 grsecurity/grsec_time.c | 16 +
12303 grsecurity/grsec_tpe.c | 78 +
12304 grsecurity/grsec_usb.c | 15 +
12305 grsecurity/grsum.c | 64 +
12306 include/linux/binfmts.h | 5 +-
12307 include/linux/bitops.h | 2 +-
12308 include/linux/capability.h | 13 +
12309 include/linux/compiler-gcc.h | 5 +
12310 include/linux/compiler.h | 8 +
12311 include/linux/cred.h | 8 +-
12312 include/linux/dcache.h | 5 +-
12313 include/linux/fs.h | 24 +-
12314 include/linux/fs_struct.h | 2 +-
12315 include/linux/fsnotify.h | 6 +
12316 include/linux/gracl.h | 342 +
12317 include/linux/gracl_compat.h | 156 +
12318 include/linux/gralloc.h | 9 +
12319 include/linux/grdefs.h | 140 +
12320 include/linux/grinternal.h | 230 +
12321 include/linux/grmsg.h | 118 +
12322 include/linux/grsecurity.h | 255 +
12323 include/linux/grsock.h | 19 +
12324 include/linux/ipc.h | 2 +-
12325 include/linux/ipc_namespace.h | 2 +-
12326 include/linux/kallsyms.h | 18 +-
12327 include/linux/kmod.h | 5 +
12328 include/linux/kobject.h | 2 +-
12329 include/linux/lsm_hooks.h | 4 +-
12330 include/linux/mm.h | 12 +
12331 include/linux/mm_types.h | 4 +-
12332 include/linux/module.h | 5 +-
12333 include/linux/mount.h | 2 +-
12334 include/linux/msg.h | 2 +-
12335 include/linux/netfilter/xt_gradm.h | 9 +
12336 include/linux/path.h | 4 +-
12337 include/linux/perf_event.h | 13 +-
12338 include/linux/pid_namespace.h | 2 +-
12339 include/linux/printk.h | 2 +-
12340 include/linux/proc_fs.h | 22 +-
12341 include/linux/proc_ns.h | 2 +-
12342 include/linux/ptrace.h | 24 +-
12343 include/linux/random.h | 2 +-
12344 include/linux/rbtree_augmented.h | 4 +-
12345 include/linux/scatterlist.h | 12 +-
12346 include/linux/sched.h | 114 +-
12347 include/linux/security.h | 1 +
12348 include/linux/sem.h | 2 +-
12349 include/linux/seq_file.h | 5 +
12350 include/linux/shm.h | 6 +-
12351 include/linux/skbuff.h | 3 +
12352 include/linux/slab.h | 9 -
12353 include/linux/sysctl.h | 8 +-
12354 include/linux/thread_info.h | 6 +-
12355 include/linux/tty.h | 2 +-
12356 include/linux/tty_driver.h | 4 +-
12357 include/linux/uidgid.h | 5 +
12358 include/linux/user_namespace.h | 2 +-
12359 include/linux/utsname.h | 2 +-
12360 include/linux/vermagic.h | 16 +-
12361 include/linux/vmalloc.h | 20 +-
12362 include/net/af_unix.h | 2 +-
12363 include/net/dst.h | 33 +
12364 include/net/ip.h | 2 +-
12365 include/net/neighbour.h | 2 +-
12366 include/net/net_namespace.h | 2 +-
12367 include/net/sock.h | 4 +-
12368 include/target/target_core_base.h | 2 +-
12369 include/trace/events/fs.h | 53 +
12370 include/uapi/linux/personality.h | 1 +
12371 init/Kconfig | 4 +-
12372 init/main.c | 35 +-
12373 ipc/mqueue.c | 1 +
12374 ipc/msg.c | 3 +-
12375 ipc/sem.c | 3 +-
12376 ipc/shm.c | 26 +-
12377 ipc/util.c | 6 +
12378 kernel/auditsc.c | 2 +-
12379 kernel/bpf/syscall.c | 8 +-
12380 kernel/capability.c | 41 +-
12381 kernel/cgroup.c | 5 +-
12382 kernel/compat.c | 1 +
12383 kernel/configs.c | 11 +
12384 kernel/cred.c | 112 +-
12385 kernel/events/core.c | 16 +-
12386 kernel/exit.c | 10 +-
12387 kernel/fork.c | 86 +-
12388 kernel/futex.c | 6 +-
12389 kernel/futex_compat.c | 2 +-
12390 kernel/kallsyms.c | 9 +
12391 kernel/kcmp.c | 8 +-
12392 kernel/kexec_core.c | 2 +-
12393 kernel/kmod.c | 95 +-
12394 kernel/kprobes.c | 7 +-
12395 kernel/ksysfs.c | 2 +
12396 kernel/locking/lockdep_proc.c | 10 +-
12397 kernel/module.c | 108 +-
12398 kernel/panic.c | 4 +-
12399 kernel/pid.c | 23 +-
12400 kernel/power/Kconfig | 2 +
12401 kernel/printk/printk.c | 20 +-
12402 kernel/ptrace.c | 56 +-
12403 kernel/resource.c | 10 +
12404 kernel/sched/core.c | 11 +-
12405 kernel/signal.c | 37 +-
12406 kernel/sys.c | 64 +-
12407 kernel/sysctl.c | 172 +-
12408 kernel/taskstats.c | 6 +
12409 kernel/time/posix-timers.c | 8 +
12410 kernel/time/time.c | 5 +
12411 kernel/time/timekeeping.c | 3 +
12412 kernel/time/timer_list.c | 13 +-
12413 kernel/time/timer_stats.c | 10 +-
12414 kernel/trace/Kconfig | 2 +
12415 kernel/trace/trace_syscalls.c | 8 +
12416 kernel/user_namespace.c | 15 +
12417 lib/Kconfig.debug | 13 +-
12418 lib/Kconfig.kasan | 2 +-
12419 lib/is_single_threaded.c | 3 +
12420 lib/list_debug.c | 65 +-
12421 lib/nlattr.c | 2 +
12422 lib/rbtree.c | 4 +-
12423 lib/vsprintf.c | 39 +-
12424 localversion-grsec | 1 +
12425 mm/Kconfig | 8 +-
12426 mm/Kconfig.debug | 1 +
12427 mm/filemap.c | 1 +
12428 mm/kmemleak.c | 4 +-
12429 mm/memory.c | 2 +-
12430 mm/mempolicy.c | 12 +-
12431 mm/migrate.c | 3 +-
12432 mm/mlock.c | 6 +-
12433 mm/mmap.c | 93 +-
12434 mm/mprotect.c | 8 +
12435 mm/oom_kill.c | 28 +-
12436 mm/page_alloc.c | 2 +-
12437 mm/process_vm_access.c | 8 +-
12438 mm/shmem.c | 36 +-
12439 mm/slab.c | 14 +-
12440 mm/slab_common.c | 2 +-
12441 mm/slob.c | 12 +
12442 mm/slub.c | 33 +-
12443 mm/util.c | 3 +
12444 mm/vmalloc.c | 129 +-
12445 mm/vmstat.c | 29 +-
12446 net/appletalk/atalk_proc.c | 2 +-
12447 net/atm/lec.c | 6 +-
12448 net/atm/mpoa_caches.c | 42 +-
12449 net/bluetooth/sco.c | 3 +
12450 net/can/bcm.c | 2 +-
12451 net/can/proc.c | 2 +-
12452 net/core/dev_ioctl.c | 7 +-
12453 net/core/filter.c | 8 +-
12454 net/core/net-procfs.c | 17 +-
12455 net/core/pktgen.c | 2 +-
12456 net/core/sock.c | 3 +-
12457 net/core/sysctl_net_core.c | 2 +-
12458 net/decnet/dn_dev.c | 2 +-
12459 net/ipv4/devinet.c | 6 +-
12460 net/ipv4/inet_hashtables.c | 4 +
12461 net/ipv4/ip_input.c | 7 +
12462 net/ipv4/ip_sockglue.c | 3 +-
12463 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
12464 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
12465 net/ipv4/route.c | 6 +-
12466 net/ipv4/tcp_input.c | 4 +-
12467 net/ipv4/tcp_ipv4.c | 29 +-
12468 net/ipv4/tcp_minisocks.c | 9 +-
12469 net/ipv4/tcp_timer.c | 11 +
12470 net/ipv4/udp.c | 24 +
12471 net/ipv6/addrconf.c | 13 +-
12472 net/ipv6/proc.c | 2 +-
12473 net/ipv6/tcp_ipv6.c | 26 +-
12474 net/ipv6/udp.c | 7 +
12475 net/ipx/ipx_proc.c | 2 +-
12476 net/irda/irproc.c | 2 +-
12477 net/llc/llc_proc.c | 2 +-
12478 net/netfilter/Kconfig | 10 +
12479 net/netfilter/Makefile | 1 +
12480 net/netfilter/nf_conntrack_core.c | 8 +
12481 net/netfilter/xt_gradm.c | 51 +
12482 net/netfilter/xt_hashlimit.c | 4 +-
12483 net/netfilter/xt_recent.c | 2 +-
12484 net/sched/sch_api.c | 2 +-
12485 net/sctp/socket.c | 4 +-
12486 net/socket.c | 75 +-
12487 net/sunrpc/Kconfig | 1 +
12488 net/sunrpc/cache.c | 2 +-
12489 net/sunrpc/stats.c | 2 +-
12490 net/sysctl_net.c | 2 +-
12491 net/unix/af_unix.c | 52 +-
12492 net/vmw_vsock/vmci_transport_notify.c | 30 +-
12493 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
12494 net/x25/sysctl_net_x25.c | 2 +-
12495 net/x25/x25_proc.c | 2 +-
12496 scripts/package/Makefile | 2 +-
12497 scripts/package/mkspec | 41 +-
12498 security/Kconfig | 369 +-
12499 security/apparmor/file.c | 4 +-
12500 security/apparmor/lsm.c | 8 +-
12501 security/commoncap.c | 36 +-
12502 security/min_addr.c | 2 +
12503 security/smack/smack_lsm.c | 8 +-
12504 security/tomoyo/file.c | 12 +-
12505 security/tomoyo/mount.c | 4 +
12506 security/tomoyo/tomoyo.c | 20 +-
12507 security/yama/Kconfig | 2 +-
12508 security/yama/yama_lsm.c | 4 +-
12509 sound/synth/emux/emux_seq.c | 14 +-
12510 sound/usb/line6/driver.c | 40 +-
12511 sound/usb/line6/toneport.c | 12 +-
12512 tools/gcc/.gitignore | 1 +
12513 tools/gcc/Makefile | 12 +
12514 tools/gcc/gen-random-seed.sh | 8 +
12515 tools/gcc/randomize_layout_plugin.c | 930 +++
12516 tools/gcc/size_overflow_plugin/.gitignore | 1 +
12517 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
12518 511 files changed, 32631 insertions(+), 3196 deletions(-)
12519
12520 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
12521 Author: Brad Spengler <spender@grsecurity.net>
12522 Date: Tue Dec 15 14:31:49 2015 -0500
12523
12524 Update to pax-linux-4.3.3-test11.patch:
12525 - fixed a few compile regressions with the recent plugin changes, reported by spender
12526 - updated the size overflow hash table
12527
12528 tools/gcc/latent_entropy_plugin.c | 2 +-
12529 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
12530 tools/gcc/stackleak_plugin.c | 2 +-
12531 tools/gcc/structleak_plugin.c | 6 +--
12532 4 files changed, 60 insertions(+), 16 deletions(-)
12533
12534 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
12535 Author: Brad Spengler <spender@grsecurity.net>
12536 Date: Tue Dec 15 11:50:24 2015 -0500
12537
12538 Apply structleak ICE fix for gcc < 4.9
12539
12540 tools/gcc/structleak_plugin.c | 4 ++++
12541 1 files changed, 4 insertions(+), 0 deletions(-)
12542
12543 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
12544 Author: Brad Spengler <spender@grsecurity.net>
12545 Date: Tue Dec 15 07:57:06 2015 -0500
12546
12547 Update to pax-linux-4.3.1-test10.patch:
12548 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
12549 - Emese regenerated the size overflow hash tables for 4.3
12550 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
12551 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
12552
12553 arch/x86/entry/entry_64.S | 2 +-
12554 arch/x86/entry/entry_64_compat.S | 15 +-
12555 scripts/package/builddeb | 2 +-
12556 tools/gcc/initify_plugin.c | 11 +-
12557 tools/gcc/latent_entropy_plugin.c | 20 +-
12558 .../disable_size_overflow_hash.data | 4 +
12559 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
12560 tools/gcc/stackleak_plugin.c | 26 +-
12561 tools/gcc/structleak_plugin.c | 21 +-
12562 9 files changed, 3079 insertions(+), 2367 deletions(-)
12563
12564 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
12565 Merge: b5847e6 3548341
12566 Author: Brad Spengler <spender@grsecurity.net>
12567 Date: Tue Dec 15 07:47:56 2015 -0500
12568
12569 Merge branch 'linux-4.3.y' into pax-4_3
12570
12571 Conflicts:
12572 net/unix/af_unix.c
12573
12574 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
12575 Author: Brad Spengler <spender@grsecurity.net>
12576 Date: Wed Dec 9 23:11:36 2015 -0500
12577
12578 Update to pax-linux-4.3.1-test9.patch:
12579 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
12580 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
12581 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
12582 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
12583 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
12584 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
12585 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
12586
12587 Makefile | 6 +
12588 arch/x86/include/asm/compat.h | 4 +
12589 arch/x86/include/asm/dma.h | 2 +
12590 arch/x86/include/asm/pmem.h | 2 +-
12591 arch/x86/include/asm/uaccess.h | 20 +-
12592 arch/x86/kernel/apic/vector.c | 6 +-
12593 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
12594 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
12595 arch/x86/kernel/head_64.S | 1 -
12596 arch/x86/kvm/i8259.c | 10 +-
12597 arch/x86/kvm/ioapic.c | 2 +
12598 arch/x86/kvm/x86.c | 2 +
12599 arch/x86/lib/usercopy_64.c | 2 +-
12600 arch/x86/mm/mpx.c | 4 +-
12601 arch/x86/mm/pageattr.c | 7 +
12602 drivers/base/devres.c | 4 +-
12603 drivers/base/power/runtime.c | 6 +-
12604 drivers/base/regmap/regmap.c | 4 +-
12605 drivers/block/drbd/drbd_receiver.c | 4 +-
12606 drivers/block/drbd/drbd_worker.c | 6 +-
12607 drivers/char/virtio_console.c | 6 +-
12608 drivers/md/dm.c | 12 +-
12609 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
12610 drivers/net/macvtap.c | 4 +-
12611 drivers/video/fbdev/core/fbmem.c | 10 +-
12612 fs/compat.c | 3 +-
12613 fs/coredump.c | 2 +-
12614 fs/dcache.c | 13 +-
12615 fs/fhandle.c | 2 +-
12616 fs/file.c | 14 +-
12617 fs/fs-writeback.c | 11 +-
12618 fs/overlayfs/copy_up.c | 2 +-
12619 fs/readdir.c | 3 +-
12620 fs/super.c | 3 +-
12621 include/linux/compiler.h | 36 ++-
12622 include/linux/rcupdate.h | 8 +
12623 include/linux/sched.h | 4 +-
12624 include/linux/seqlock.h | 10 +
12625 include/linux/spinlock.h | 17 +-
12626 include/linux/srcu.h | 5 +-
12627 include/linux/syscalls.h | 2 +-
12628 include/linux/writeback.h | 3 +-
12629 include/uapi/linux/swab.h | 6 +-
12630 ipc/ipc_sysctl.c | 6 +
12631 kernel/exit.c | 25 +-
12632 kernel/resource.c | 4 +-
12633 kernel/signal.c | 12 +-
12634 kernel/user.c | 2 +-
12635 kernel/workqueue.c | 6 +-
12636 lib/rhashtable.c | 4 +-
12637 net/compat.c | 2 +-
12638 net/ipv4/xfrm4_mode_transport.c | 2 +-
12639 security/keys/internal.h | 8 +-
12640 security/keys/keyring.c | 4 -
12641 sound/core/seq/seq_clientmgr.c | 8 +-
12642 sound/core/seq/seq_compat.c | 2 +-
12643 sound/core/seq/seq_memory.c | 6 +-
12644 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
12645 tools/gcc/gcc-common.h | 1 +
12646 tools/gcc/initify_plugin.c | 33 ++-
12647 .../disable_size_overflow_hash.data | 1 +
12648 .../size_overflow_plugin/size_overflow_hash.data | 1 -
12649 62 files changed, 708 insertions(+), 140 deletions(-)
12650
12651 commit f2634c2f6995f4231616f24ed016f890c701f939
12652 Merge: 1241bff 5f8b236
12653 Author: Brad Spengler <spender@grsecurity.net>
12654 Date: Wed Dec 9 21:50:47 2015 -0500
12655
12656 Merge branch 'linux-4.3.y' into pax-4_3
12657
12658 Conflicts:
12659 arch/x86/kernel/fpu/xstate.c
12660 arch/x86/kernel/head_64.S
12661
12662 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
12663 Author: Brad Spengler <spender@grsecurity.net>
12664 Date: Sun Dec 6 08:44:56 2015 -0500
12665
12666 Update to pax-linux-4.3-test8.patch:
12667 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
12668 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
12669 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
12670 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
12671
12672 Makefile | 5 +++
12673 drivers/md/md.c | 5 ++-
12674 drivers/md/raid1.c | 2 +-
12675 fs/proc/task_mmu.c | 3 ++
12676 .../disable_size_overflow_hash.data | 4 ++-
12677 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
12678 .../size_overflow_plugin/size_overflow_hash.data | 2 -
12679 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
12680 8 files changed, 43 insertions(+), 12 deletions(-)
12681
12682 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
12683 Author: Brad Spengler <spender@grsecurity.net>
12684 Date: Fri Dec 4 14:24:12 2015 -0500
12685
12686 Initial import of pax-linux-4.3-test7.patch
12687
12688 Documentation/dontdiff | 47 +-
12689 Documentation/kbuild/makefiles.txt | 39 +-
12690 Documentation/kernel-parameters.txt | 28 +
12691 Makefile | 108 +-
12692 arch/alpha/include/asm/atomic.h | 10 +
12693 arch/alpha/include/asm/elf.h | 7 +
12694 arch/alpha/include/asm/pgalloc.h | 6 +
12695 arch/alpha/include/asm/pgtable.h | 11 +
12696 arch/alpha/kernel/module.c | 2 +-
12697 arch/alpha/kernel/osf_sys.c | 8 +-
12698 arch/alpha/mm/fault.c | 141 +-
12699 arch/arm/Kconfig | 2 +-
12700 arch/arm/include/asm/atomic.h | 320 +-
12701 arch/arm/include/asm/cache.h | 5 +-
12702 arch/arm/include/asm/cacheflush.h | 2 +-
12703 arch/arm/include/asm/checksum.h | 14 +-
12704 arch/arm/include/asm/cmpxchg.h | 4 +
12705 arch/arm/include/asm/cpuidle.h | 2 +-
12706 arch/arm/include/asm/domain.h | 22 +-
12707 arch/arm/include/asm/elf.h | 9 +-
12708 arch/arm/include/asm/fncpy.h | 2 +
12709 arch/arm/include/asm/futex.h | 10 +
12710 arch/arm/include/asm/kmap_types.h | 2 +-
12711 arch/arm/include/asm/mach/dma.h | 2 +-
12712 arch/arm/include/asm/mach/map.h | 16 +-
12713 arch/arm/include/asm/outercache.h | 2 +-
12714 arch/arm/include/asm/page.h | 3 +-
12715 arch/arm/include/asm/pgalloc.h | 20 +
12716 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
12717 arch/arm/include/asm/pgtable-2level.h | 3 +
12718 arch/arm/include/asm/pgtable-3level.h | 3 +
12719 arch/arm/include/asm/pgtable.h | 54 +-
12720 arch/arm/include/asm/smp.h | 2 +-
12721 arch/arm/include/asm/tls.h | 3 +
12722 arch/arm/include/asm/uaccess.h | 79 +-
12723 arch/arm/include/uapi/asm/ptrace.h | 2 +-
12724 arch/arm/kernel/armksyms.c | 2 +-
12725 arch/arm/kernel/cpuidle.c | 2 +-
12726 arch/arm/kernel/entry-armv.S | 109 +-
12727 arch/arm/kernel/entry-common.S | 40 +-
12728 arch/arm/kernel/entry-header.S | 55 +
12729 arch/arm/kernel/fiq.c | 3 +
12730 arch/arm/kernel/module-plts.c | 7 +-
12731 arch/arm/kernel/module.c | 38 +-
12732 arch/arm/kernel/patch.c | 2 +
12733 arch/arm/kernel/process.c | 90 +-
12734 arch/arm/kernel/reboot.c | 1 +
12735 arch/arm/kernel/setup.c | 20 +-
12736 arch/arm/kernel/signal.c | 35 +-
12737 arch/arm/kernel/smp.c | 2 +-
12738 arch/arm/kernel/tcm.c | 4 +-
12739 arch/arm/kernel/vmlinux.lds.S | 6 +-
12740 arch/arm/kvm/arm.c | 8 +-
12741 arch/arm/lib/copy_page.S | 1 +
12742 arch/arm/lib/csumpartialcopyuser.S | 4 +-
12743 arch/arm/lib/delay.c | 2 +-
12744 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
12745 arch/arm/mach-exynos/suspend.c | 6 +-
12746 arch/arm/mach-mvebu/coherency.c | 4 +-
12747 arch/arm/mach-omap2/board-n8x0.c | 2 +-
12748 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
12749 arch/arm/mach-omap2/omap-smp.c | 1 +
12750 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
12751 arch/arm/mach-omap2/omap_device.c | 4 +-
12752 arch/arm/mach-omap2/omap_device.h | 4 +-
12753 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
12754 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
12755 arch/arm/mach-omap2/wd_timer.c | 6 +-
12756 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
12757 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
12758 arch/arm/mach-tegra/irq.c | 1 +
12759 arch/arm/mach-ux500/pm.c | 1 +
12760 arch/arm/mach-zynq/platsmp.c | 1 +
12761 arch/arm/mm/Kconfig | 6 +-
12762 arch/arm/mm/alignment.c | 8 +
12763 arch/arm/mm/cache-l2x0.c | 2 +-
12764 arch/arm/mm/context.c | 10 +-
12765 arch/arm/mm/fault.c | 146 +
12766 arch/arm/mm/fault.h | 12 +
12767 arch/arm/mm/init.c | 39 +
12768 arch/arm/mm/ioremap.c | 4 +-
12769 arch/arm/mm/mmap.c | 30 +-
12770 arch/arm/mm/mmu.c | 162 +-
12771 arch/arm/net/bpf_jit_32.c | 3 +
12772 arch/arm/plat-iop/setup.c | 2 +-
12773 arch/arm/plat-omap/sram.c | 2 +
12774 arch/arm64/include/asm/atomic.h | 10 +
12775 arch/arm64/include/asm/percpu.h | 8 +-
12776 arch/arm64/include/asm/pgalloc.h | 5 +
12777 arch/arm64/include/asm/uaccess.h | 1 +
12778 arch/arm64/mm/dma-mapping.c | 2 +-
12779 arch/avr32/include/asm/elf.h | 8 +-
12780 arch/avr32/include/asm/kmap_types.h | 4 +-
12781 arch/avr32/mm/fault.c | 27 +
12782 arch/frv/include/asm/atomic.h | 10 +
12783 arch/frv/include/asm/kmap_types.h | 2 +-
12784 arch/frv/mm/elf-fdpic.c | 3 +-
12785 arch/ia64/Makefile | 1 +
12786 arch/ia64/include/asm/atomic.h | 10 +
12787 arch/ia64/include/asm/elf.h | 7 +
12788 arch/ia64/include/asm/pgalloc.h | 12 +
12789 arch/ia64/include/asm/pgtable.h | 13 +-
12790 arch/ia64/include/asm/spinlock.h | 2 +-
12791 arch/ia64/include/asm/uaccess.h | 27 +-
12792 arch/ia64/kernel/module.c | 45 +-
12793 arch/ia64/kernel/palinfo.c | 2 +-
12794 arch/ia64/kernel/sys_ia64.c | 7 +
12795 arch/ia64/kernel/vmlinux.lds.S | 2 +-
12796 arch/ia64/mm/fault.c | 32 +-
12797 arch/ia64/mm/init.c | 15 +-
12798 arch/m32r/lib/usercopy.c | 6 +
12799 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
12800 arch/mips/include/asm/atomic.h | 368 +-
12801 arch/mips/include/asm/elf.h | 7 +
12802 arch/mips/include/asm/exec.h | 2 +-
12803 arch/mips/include/asm/hw_irq.h | 2 +-
12804 arch/mips/include/asm/local.h | 57 +
12805 arch/mips/include/asm/page.h | 2 +-
12806 arch/mips/include/asm/pgalloc.h | 5 +
12807 arch/mips/include/asm/pgtable.h | 3 +
12808 arch/mips/include/asm/uaccess.h | 1 +
12809 arch/mips/kernel/binfmt_elfn32.c | 7 +
12810 arch/mips/kernel/binfmt_elfo32.c | 7 +
12811 arch/mips/kernel/irq-gt641xx.c | 2 +-
12812 arch/mips/kernel/irq.c | 6 +-
12813 arch/mips/kernel/pm-cps.c | 2 +-
12814 arch/mips/kernel/process.c | 12 -
12815 arch/mips/kernel/sync-r4k.c | 24 +-
12816 arch/mips/kernel/traps.c | 13 +-
12817 arch/mips/mm/fault.c | 25 +
12818 arch/mips/mm/mmap.c | 51 +-
12819 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
12820 arch/mips/sni/rm200.c | 2 +-
12821 arch/mips/vr41xx/common/icu.c | 2 +-
12822 arch/mips/vr41xx/common/irq.c | 4 +-
12823 arch/parisc/include/asm/atomic.h | 10 +
12824 arch/parisc/include/asm/elf.h | 7 +
12825 arch/parisc/include/asm/pgalloc.h | 6 +
12826 arch/parisc/include/asm/pgtable.h | 11 +
12827 arch/parisc/include/asm/uaccess.h | 4 +-
12828 arch/parisc/kernel/module.c | 50 +-
12829 arch/parisc/kernel/sys_parisc.c | 15 +
12830 arch/parisc/kernel/traps.c | 4 +-
12831 arch/parisc/mm/fault.c | 140 +-
12832 arch/powerpc/include/asm/atomic.h | 329 +-
12833 arch/powerpc/include/asm/elf.h | 12 +
12834 arch/powerpc/include/asm/exec.h | 2 +-
12835 arch/powerpc/include/asm/kmap_types.h | 2 +-
12836 arch/powerpc/include/asm/local.h | 46 +
12837 arch/powerpc/include/asm/mman.h | 2 +-
12838 arch/powerpc/include/asm/page.h | 8 +-
12839 arch/powerpc/include/asm/page_64.h | 7 +-
12840 arch/powerpc/include/asm/pgalloc-64.h | 7 +
12841 arch/powerpc/include/asm/pgtable.h | 1 +
12842 arch/powerpc/include/asm/pte-hash32.h | 1 +
12843 arch/powerpc/include/asm/reg.h | 1 +
12844 arch/powerpc/include/asm/smp.h | 2 +-
12845 arch/powerpc/include/asm/spinlock.h | 42 +-
12846 arch/powerpc/include/asm/uaccess.h | 141 +-
12847 arch/powerpc/kernel/Makefile | 5 +
12848 arch/powerpc/kernel/exceptions-64e.S | 4 +-
12849 arch/powerpc/kernel/exceptions-64s.S | 2 +-
12850 arch/powerpc/kernel/module_32.c | 15 +-
12851 arch/powerpc/kernel/process.c | 46 -
12852 arch/powerpc/kernel/signal_32.c | 2 +-
12853 arch/powerpc/kernel/signal_64.c | 2 +-
12854 arch/powerpc/kernel/traps.c | 21 +
12855 arch/powerpc/kernel/vdso.c | 5 +-
12856 arch/powerpc/lib/usercopy_64.c | 18 -
12857 arch/powerpc/mm/fault.c | 56 +-
12858 arch/powerpc/mm/mmap.c | 16 +
12859 arch/powerpc/mm/slice.c | 13 +-
12860 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
12861 arch/s390/include/asm/atomic.h | 10 +
12862 arch/s390/include/asm/elf.h | 7 +
12863 arch/s390/include/asm/exec.h | 2 +-
12864 arch/s390/include/asm/uaccess.h | 13 +-
12865 arch/s390/kernel/module.c | 22 +-
12866 arch/s390/kernel/process.c | 24 -
12867 arch/s390/mm/mmap.c | 16 +
12868 arch/score/include/asm/exec.h | 2 +-
12869 arch/score/kernel/process.c | 5 -
12870 arch/sh/mm/mmap.c | 22 +-
12871 arch/sparc/include/asm/atomic_64.h | 110 +-
12872 arch/sparc/include/asm/cache.h | 2 +-
12873 arch/sparc/include/asm/elf_32.h | 7 +
12874 arch/sparc/include/asm/elf_64.h | 7 +
12875 arch/sparc/include/asm/pgalloc_32.h | 1 +
12876 arch/sparc/include/asm/pgalloc_64.h | 1 +
12877 arch/sparc/include/asm/pgtable.h | 4 +
12878 arch/sparc/include/asm/pgtable_32.h | 15 +-
12879 arch/sparc/include/asm/pgtsrmmu.h | 5 +
12880 arch/sparc/include/asm/setup.h | 4 +-
12881 arch/sparc/include/asm/spinlock_64.h | 35 +-
12882 arch/sparc/include/asm/thread_info_32.h | 1 +
12883 arch/sparc/include/asm/thread_info_64.h | 2 +
12884 arch/sparc/include/asm/uaccess.h | 1 +
12885 arch/sparc/include/asm/uaccess_32.h | 28 +-
12886 arch/sparc/include/asm/uaccess_64.h | 24 +-
12887 arch/sparc/kernel/Makefile | 2 +-
12888 arch/sparc/kernel/prom_common.c | 2 +-
12889 arch/sparc/kernel/smp_64.c | 8 +-
12890 arch/sparc/kernel/sys_sparc_32.c | 2 +-
12891 arch/sparc/kernel/sys_sparc_64.c | 52 +-
12892 arch/sparc/kernel/traps_64.c | 27 +-
12893 arch/sparc/lib/Makefile | 2 +-
12894 arch/sparc/lib/atomic_64.S | 57 +-
12895 arch/sparc/lib/ksyms.c | 6 +-
12896 arch/sparc/mm/Makefile | 2 +-
12897 arch/sparc/mm/fault_32.c | 292 +
12898 arch/sparc/mm/fault_64.c | 486 +
12899 arch/sparc/mm/hugetlbpage.c | 22 +-
12900 arch/sparc/mm/init_64.c | 10 +-
12901 arch/tile/include/asm/atomic_64.h | 10 +
12902 arch/tile/include/asm/uaccess.h | 4 +-
12903 arch/um/Makefile | 4 +
12904 arch/um/include/asm/kmap_types.h | 2 +-
12905 arch/um/include/asm/page.h | 3 +
12906 arch/um/include/asm/pgtable-3level.h | 1 +
12907 arch/um/kernel/process.c | 16 -
12908 arch/x86/Kconfig | 15 +-
12909 arch/x86/Kconfig.cpu | 6 +-
12910 arch/x86/Kconfig.debug | 4 +-
12911 arch/x86/Makefile | 13 +-
12912 arch/x86/boot/Makefile | 3 +
12913 arch/x86/boot/bitops.h | 4 +-
12914 arch/x86/boot/boot.h | 2 +-
12915 arch/x86/boot/compressed/Makefile | 3 +
12916 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
12917 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
12918 arch/x86/boot/compressed/head_32.S | 4 +-
12919 arch/x86/boot/compressed/head_64.S | 12 +-
12920 arch/x86/boot/compressed/misc.c | 11 +-
12921 arch/x86/boot/cpucheck.c | 16 +-
12922 arch/x86/boot/header.S | 6 +-
12923 arch/x86/boot/memory.c | 2 +-
12924 arch/x86/boot/video-vesa.c | 1 +
12925 arch/x86/boot/video.c | 2 +-
12926 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
12927 arch/x86/crypto/aesni-intel_asm.S | 106 +-
12928 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
12929 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
12930 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
12931 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
12932 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
12933 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
12934 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
12935 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
12936 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
12937 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
12938 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
12939 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
12940 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
12941 arch/x86/crypto/sha256-avx-asm.S | 2 +
12942 arch/x86/crypto/sha256-avx2-asm.S | 2 +
12943 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
12944 arch/x86/crypto/sha512-avx-asm.S | 2 +
12945 arch/x86/crypto/sha512-avx2-asm.S | 2 +
12946 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
12947 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
12948 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
12949 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
12950 arch/x86/entry/calling.h | 86 +-
12951 arch/x86/entry/common.c | 13 +-
12952 arch/x86/entry/entry_32.S | 351 +-
12953 arch/x86/entry/entry_64.S | 619 +-
12954 arch/x86/entry/entry_64_compat.S | 159 +-
12955 arch/x86/entry/thunk_64.S | 2 +
12956 arch/x86/entry/vdso/Makefile | 2 +-
12957 arch/x86/entry/vdso/vdso2c.h | 8 +-
12958 arch/x86/entry/vdso/vma.c | 41 +-
12959 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
12960 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
12961 arch/x86/ia32/ia32_signal.c | 23 +-
12962 arch/x86/ia32/sys_ia32.c | 42 +-
12963 arch/x86/include/asm/alternative-asm.h | 43 +-
12964 arch/x86/include/asm/alternative.h | 4 +-
12965 arch/x86/include/asm/apic.h | 2 +-
12966 arch/x86/include/asm/apm.h | 4 +-
12967 arch/x86/include/asm/atomic.h | 230 +-
12968 arch/x86/include/asm/atomic64_32.h | 100 +
12969 arch/x86/include/asm/atomic64_64.h | 164 +-
12970 arch/x86/include/asm/bitops.h | 18 +-
12971 arch/x86/include/asm/boot.h | 2 +-
12972 arch/x86/include/asm/cache.h | 5 +-
12973 arch/x86/include/asm/checksum_32.h | 12 +-
12974 arch/x86/include/asm/cmpxchg.h | 39 +
12975 arch/x86/include/asm/compat.h | 2 +-
12976 arch/x86/include/asm/cpufeature.h | 17 +-
12977 arch/x86/include/asm/desc.h | 78 +-
12978 arch/x86/include/asm/desc_defs.h | 6 +
12979 arch/x86/include/asm/div64.h | 2 +-
12980 arch/x86/include/asm/elf.h | 33 +-
12981 arch/x86/include/asm/emergency-restart.h | 2 +-
12982 arch/x86/include/asm/fpu/internal.h | 42 +-
12983 arch/x86/include/asm/fpu/types.h | 6 +-
12984 arch/x86/include/asm/futex.h | 14 +-
12985 arch/x86/include/asm/hw_irq.h | 4 +-
12986 arch/x86/include/asm/i8259.h | 2 +-
12987 arch/x86/include/asm/io.h | 22 +-
12988 arch/x86/include/asm/irqflags.h | 5 +
12989 arch/x86/include/asm/kprobes.h | 9 +-
12990 arch/x86/include/asm/local.h | 106 +-
12991 arch/x86/include/asm/mman.h | 15 +
12992 arch/x86/include/asm/mmu.h | 14 +-
12993 arch/x86/include/asm/mmu_context.h | 114 +-
12994 arch/x86/include/asm/module.h | 17 +-
12995 arch/x86/include/asm/nmi.h | 19 +-
12996 arch/x86/include/asm/page.h | 1 +
12997 arch/x86/include/asm/page_32.h | 12 +-
12998 arch/x86/include/asm/page_64.h | 14 +-
12999 arch/x86/include/asm/paravirt.h | 46 +-
13000 arch/x86/include/asm/paravirt_types.h | 15 +-
13001 arch/x86/include/asm/pgalloc.h | 23 +
13002 arch/x86/include/asm/pgtable-2level.h | 2 +
13003 arch/x86/include/asm/pgtable-3level.h | 7 +
13004 arch/x86/include/asm/pgtable.h | 128 +-
13005 arch/x86/include/asm/pgtable_32.h | 14 +-
13006 arch/x86/include/asm/pgtable_32_types.h | 24 +-
13007 arch/x86/include/asm/pgtable_64.h | 23 +-
13008 arch/x86/include/asm/pgtable_64_types.h | 5 +
13009 arch/x86/include/asm/pgtable_types.h | 26 +-
13010 arch/x86/include/asm/preempt.h | 2 +-
13011 arch/x86/include/asm/processor.h | 57 +-
13012 arch/x86/include/asm/ptrace.h | 13 +-
13013 arch/x86/include/asm/realmode.h | 4 +-
13014 arch/x86/include/asm/reboot.h | 10 +-
13015 arch/x86/include/asm/rmwcc.h | 84 +-
13016 arch/x86/include/asm/rwsem.h | 60 +-
13017 arch/x86/include/asm/segment.h | 27 +-
13018 arch/x86/include/asm/smap.h | 43 +
13019 arch/x86/include/asm/smp.h | 14 +-
13020 arch/x86/include/asm/stackprotector.h | 4 +-
13021 arch/x86/include/asm/stacktrace.h | 32 +-
13022 arch/x86/include/asm/switch_to.h | 4 +-
13023 arch/x86/include/asm/sys_ia32.h | 6 +-
13024 arch/x86/include/asm/thread_info.h | 27 +-
13025 arch/x86/include/asm/tlbflush.h | 77 +-
13026 arch/x86/include/asm/uaccess.h | 192 +-
13027 arch/x86/include/asm/uaccess_32.h | 28 +-
13028 arch/x86/include/asm/uaccess_64.h | 169 +-
13029 arch/x86/include/asm/word-at-a-time.h | 2 +-
13030 arch/x86/include/asm/x86_init.h | 10 +-
13031 arch/x86/include/asm/xen/page.h | 2 +-
13032 arch/x86/include/uapi/asm/e820.h | 2 +-
13033 arch/x86/kernel/Makefile | 2 +-
13034 arch/x86/kernel/acpi/boot.c | 4 +-
13035 arch/x86/kernel/acpi/sleep.c | 4 +
13036 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
13037 arch/x86/kernel/alternative.c | 124 +-
13038 arch/x86/kernel/apic/apic.c | 4 +-
13039 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
13040 arch/x86/kernel/apic/apic_noop.c | 2 +-
13041 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
13042 arch/x86/kernel/apic/io_apic.c | 8 +-
13043 arch/x86/kernel/apic/msi.c | 2 +-
13044 arch/x86/kernel/apic/probe_32.c | 4 +-
13045 arch/x86/kernel/apic/vector.c | 4 +-
13046 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
13047 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
13048 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
13049 arch/x86/kernel/apm_32.c | 21 +-
13050 arch/x86/kernel/asm-offsets.c | 20 +
13051 arch/x86/kernel/asm-offsets_64.c | 1 +
13052 arch/x86/kernel/cpu/Makefile | 4 -
13053 arch/x86/kernel/cpu/amd.c | 2 +-
13054 arch/x86/kernel/cpu/bugs_64.c | 2 +
13055 arch/x86/kernel/cpu/common.c | 202 +-
13056 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
13057 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
13058 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
13059 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
13060 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
13061 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
13062 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
13063 arch/x86/kernel/cpu/perf_event.c | 10 +-
13064 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
13065 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
13066 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
13067 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
13068 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
13069 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
13070 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
13071 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
13072 arch/x86/kernel/crash_dump_64.c | 2 +-
13073 arch/x86/kernel/doublefault.c | 8 +-
13074 arch/x86/kernel/dumpstack.c | 24 +-
13075 arch/x86/kernel/dumpstack_32.c | 25 +-
13076 arch/x86/kernel/dumpstack_64.c | 62 +-
13077 arch/x86/kernel/e820.c | 4 +-
13078 arch/x86/kernel/early_printk.c | 1 +
13079 arch/x86/kernel/espfix_64.c | 44 +-
13080 arch/x86/kernel/fpu/core.c | 24 +-
13081 arch/x86/kernel/fpu/init.c | 40 +-
13082 arch/x86/kernel/fpu/regset.c | 22 +-
13083 arch/x86/kernel/fpu/signal.c | 20 +-
13084 arch/x86/kernel/fpu/xstate.c | 8 +-
13085 arch/x86/kernel/ftrace.c | 18 +-
13086 arch/x86/kernel/head64.c | 14 +-
13087 arch/x86/kernel/head_32.S | 235 +-
13088 arch/x86/kernel/head_64.S | 173 +-
13089 arch/x86/kernel/i386_ksyms_32.c | 12 +
13090 arch/x86/kernel/i8259.c | 10 +-
13091 arch/x86/kernel/io_delay.c | 2 +-
13092 arch/x86/kernel/ioport.c | 2 +-
13093 arch/x86/kernel/irq.c | 8 +-
13094 arch/x86/kernel/irq_32.c | 45 +-
13095 arch/x86/kernel/jump_label.c | 10 +-
13096 arch/x86/kernel/kgdb.c | 21 +-
13097 arch/x86/kernel/kprobes/core.c | 28 +-
13098 arch/x86/kernel/kprobes/opt.c | 16 +-
13099 arch/x86/kernel/ksysfs.c | 2 +-
13100 arch/x86/kernel/kvmclock.c | 20 +-
13101 arch/x86/kernel/ldt.c | 25 +
13102 arch/x86/kernel/livepatch.c | 12 +-
13103 arch/x86/kernel/machine_kexec_32.c | 6 +-
13104 arch/x86/kernel/mcount_64.S | 19 +-
13105 arch/x86/kernel/module.c | 78 +-
13106 arch/x86/kernel/msr.c | 2 +-
13107 arch/x86/kernel/nmi.c | 34 +-
13108 arch/x86/kernel/nmi_selftest.c | 4 +-
13109 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
13110 arch/x86/kernel/paravirt.c | 45 +-
13111 arch/x86/kernel/paravirt_patch_64.c | 8 +
13112 arch/x86/kernel/pci-calgary_64.c | 2 +-
13113 arch/x86/kernel/pci-iommu_table.c | 2 +-
13114 arch/x86/kernel/pci-swiotlb.c | 2 +-
13115 arch/x86/kernel/process.c | 80 +-
13116 arch/x86/kernel/process_32.c | 29 +-
13117 arch/x86/kernel/process_64.c | 14 +-
13118 arch/x86/kernel/ptrace.c | 20 +-
13119 arch/x86/kernel/pvclock.c | 8 +-
13120 arch/x86/kernel/reboot.c | 44 +-
13121 arch/x86/kernel/reboot_fixups_32.c | 2 +-
13122 arch/x86/kernel/relocate_kernel_64.S | 3 +-
13123 arch/x86/kernel/setup.c | 29 +-
13124 arch/x86/kernel/setup_percpu.c | 29 +-
13125 arch/x86/kernel/signal.c | 17 +-
13126 arch/x86/kernel/smp.c | 2 +-
13127 arch/x86/kernel/smpboot.c | 29 +-
13128 arch/x86/kernel/step.c | 6 +-
13129 arch/x86/kernel/sys_i386_32.c | 184 +
13130 arch/x86/kernel/sys_x86_64.c | 22 +-
13131 arch/x86/kernel/tboot.c | 14 +-
13132 arch/x86/kernel/time.c | 8 +-
13133 arch/x86/kernel/tls.c | 7 +-
13134 arch/x86/kernel/tracepoint.c | 4 +-
13135 arch/x86/kernel/traps.c | 53 +-
13136 arch/x86/kernel/tsc.c | 2 +-
13137 arch/x86/kernel/uprobes.c | 2 +-
13138 arch/x86/kernel/vm86_32.c | 6 +-
13139 arch/x86/kernel/vmlinux.lds.S | 153 +-
13140 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
13141 arch/x86/kernel/x86_init.c | 6 +-
13142 arch/x86/kvm/cpuid.c | 21 +-
13143 arch/x86/kvm/emulate.c | 2 +-
13144 arch/x86/kvm/lapic.c | 2 +-
13145 arch/x86/kvm/paging_tmpl.h | 2 +-
13146 arch/x86/kvm/svm.c | 10 +-
13147 arch/x86/kvm/vmx.c | 62 +-
13148 arch/x86/kvm/x86.c | 42 +-
13149 arch/x86/lguest/boot.c | 3 +-
13150 arch/x86/lib/atomic64_386_32.S | 164 +
13151 arch/x86/lib/atomic64_cx8_32.S | 98 +-
13152 arch/x86/lib/checksum_32.S | 99 +-
13153 arch/x86/lib/clear_page_64.S | 3 +
13154 arch/x86/lib/cmpxchg16b_emu.S | 3 +
13155 arch/x86/lib/copy_page_64.S | 14 +-
13156 arch/x86/lib/copy_user_64.S | 66 +-
13157 arch/x86/lib/csum-copy_64.S | 14 +-
13158 arch/x86/lib/csum-wrappers_64.c | 8 +-
13159 arch/x86/lib/getuser.S | 74 +-
13160 arch/x86/lib/insn.c | 8 +-
13161 arch/x86/lib/iomap_copy_64.S | 2 +
13162 arch/x86/lib/memcpy_64.S | 6 +
13163 arch/x86/lib/memmove_64.S | 3 +-
13164 arch/x86/lib/memset_64.S | 3 +
13165 arch/x86/lib/mmx_32.c | 243 +-
13166 arch/x86/lib/msr-reg.S | 2 +
13167 arch/x86/lib/putuser.S | 87 +-
13168 arch/x86/lib/rwsem.S | 6 +-
13169 arch/x86/lib/usercopy_32.c | 359 +-
13170 arch/x86/lib/usercopy_64.c | 20 +-
13171 arch/x86/math-emu/fpu_aux.c | 2 +-
13172 arch/x86/math-emu/fpu_entry.c | 4 +-
13173 arch/x86/math-emu/fpu_system.h | 2 +-
13174 arch/x86/mm/Makefile | 4 +
13175 arch/x86/mm/extable.c | 26 +-
13176 arch/x86/mm/fault.c | 570 +-
13177 arch/x86/mm/gup.c | 6 +-
13178 arch/x86/mm/highmem_32.c | 6 +
13179 arch/x86/mm/hugetlbpage.c | 24 +-
13180 arch/x86/mm/init.c | 111 +-
13181 arch/x86/mm/init_32.c | 111 +-
13182 arch/x86/mm/init_64.c | 46 +-
13183 arch/x86/mm/iomap_32.c | 4 +
13184 arch/x86/mm/ioremap.c | 52 +-
13185 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
13186 arch/x86/mm/mmap.c | 40 +-
13187 arch/x86/mm/mmio-mod.c | 10 +-
13188 arch/x86/mm/numa.c | 2 +-
13189 arch/x86/mm/pageattr.c | 38 +-
13190 arch/x86/mm/pat.c | 12 +-
13191 arch/x86/mm/pat_rbtree.c | 2 +-
13192 arch/x86/mm/pf_in.c | 10 +-
13193 arch/x86/mm/pgtable.c | 214 +-
13194 arch/x86/mm/pgtable_32.c | 3 +
13195 arch/x86/mm/setup_nx.c | 7 +
13196 arch/x86/mm/tlb.c | 4 +
13197 arch/x86/mm/uderef_64.c | 37 +
13198 arch/x86/net/bpf_jit.S | 11 +
13199 arch/x86/net/bpf_jit_comp.c | 13 +-
13200 arch/x86/oprofile/backtrace.c | 6 +-
13201 arch/x86/oprofile/nmi_int.c | 8 +-
13202 arch/x86/oprofile/op_model_amd.c | 8 +-
13203 arch/x86/oprofile/op_model_ppro.c | 7 +-
13204 arch/x86/oprofile/op_x86_model.h | 2 +-
13205 arch/x86/pci/intel_mid_pci.c | 2 +-
13206 arch/x86/pci/irq.c | 8 +-
13207 arch/x86/pci/pcbios.c | 144 +-
13208 arch/x86/platform/efi/efi_32.c | 24 +
13209 arch/x86/platform/efi/efi_64.c | 26 +-
13210 arch/x86/platform/efi/efi_stub_32.S | 64 +-
13211 arch/x86/platform/efi/efi_stub_64.S | 2 +
13212 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
13213 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
13214 arch/x86/platform/intel-mid/mfld.c | 4 +-
13215 arch/x86/platform/intel-mid/mrfl.c | 2 +-
13216 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
13217 arch/x86/platform/olpc/olpc_dt.c | 2 +-
13218 arch/x86/power/cpu.c | 11 +-
13219 arch/x86/realmode/init.c | 10 +-
13220 arch/x86/realmode/rm/Makefile | 3 +
13221 arch/x86/realmode/rm/header.S | 4 +-
13222 arch/x86/realmode/rm/reboot.S | 4 +
13223 arch/x86/realmode/rm/trampoline_32.S | 12 +-
13224 arch/x86/realmode/rm/trampoline_64.S | 3 +-
13225 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
13226 arch/x86/tools/Makefile | 2 +-
13227 arch/x86/tools/relocs.c | 96 +-
13228 arch/x86/um/mem_32.c | 2 +-
13229 arch/x86/um/tls_32.c | 2 +-
13230 arch/x86/xen/enlighten.c | 50 +-
13231 arch/x86/xen/mmu.c | 19 +-
13232 arch/x86/xen/smp.c | 16 +-
13233 arch/x86/xen/xen-asm_32.S | 2 +-
13234 arch/x86/xen/xen-head.S | 11 +
13235 arch/x86/xen/xen-ops.h | 2 -
13236 block/bio.c | 4 +-
13237 block/blk-iopoll.c | 2 +-
13238 block/blk-map.c | 2 +-
13239 block/blk-softirq.c | 2 +-
13240 block/bsg.c | 12 +-
13241 block/compat_ioctl.c | 4 +-
13242 block/genhd.c | 9 +-
13243 block/partitions/efi.c | 8 +-
13244 block/scsi_ioctl.c | 29 +-
13245 crypto/cryptd.c | 4 +-
13246 crypto/pcrypt.c | 2 +-
13247 crypto/zlib.c | 12 +-
13248 drivers/acpi/acpi_video.c | 2 +-
13249 drivers/acpi/apei/apei-internal.h | 2 +-
13250 drivers/acpi/apei/ghes.c | 4 +-
13251 drivers/acpi/bgrt.c | 6 +-
13252 drivers/acpi/blacklist.c | 4 +-
13253 drivers/acpi/bus.c | 4 +-
13254 drivers/acpi/device_pm.c | 4 +-
13255 drivers/acpi/ec.c | 2 +-
13256 drivers/acpi/pci_slot.c | 2 +-
13257 drivers/acpi/processor_idle.c | 2 +-
13258 drivers/acpi/processor_pdc.c | 2 +-
13259 drivers/acpi/sleep.c | 2 +-
13260 drivers/acpi/sysfs.c | 4 +-
13261 drivers/acpi/thermal.c | 2 +-
13262 drivers/acpi/video_detect.c | 7 +-
13263 drivers/ata/libata-core.c | 12 +-
13264 drivers/ata/libata-scsi.c | 2 +-
13265 drivers/ata/libata.h | 2 +-
13266 drivers/ata/pata_arasan_cf.c | 4 +-
13267 drivers/atm/adummy.c | 2 +-
13268 drivers/atm/ambassador.c | 8 +-
13269 drivers/atm/atmtcp.c | 14 +-
13270 drivers/atm/eni.c | 10 +-
13271 drivers/atm/firestream.c | 8 +-
13272 drivers/atm/fore200e.c | 14 +-
13273 drivers/atm/he.c | 18 +-
13274 drivers/atm/horizon.c | 4 +-
13275 drivers/atm/idt77252.c | 36 +-
13276 drivers/atm/iphase.c | 34 +-
13277 drivers/atm/lanai.c | 12 +-
13278 drivers/atm/nicstar.c | 46 +-
13279 drivers/atm/solos-pci.c | 4 +-
13280 drivers/atm/suni.c | 4 +-
13281 drivers/atm/uPD98402.c | 16 +-
13282 drivers/atm/zatm.c | 6 +-
13283 drivers/base/bus.c | 4 +-
13284 drivers/base/devtmpfs.c | 8 +-
13285 drivers/base/node.c | 2 +-
13286 drivers/base/platform-msi.c | 20 +-
13287 drivers/base/power/domain.c | 11 +-
13288 drivers/base/power/sysfs.c | 2 +-
13289 drivers/base/power/wakeup.c | 8 +-
13290 drivers/base/regmap/regmap-debugfs.c | 11 +-
13291 drivers/base/syscore.c | 4 +-
13292 drivers/block/cciss.c | 28 +-
13293 drivers/block/cciss.h | 2 +-
13294 drivers/block/cpqarray.c | 28 +-
13295 drivers/block/cpqarray.h | 2 +-
13296 drivers/block/drbd/drbd_bitmap.c | 2 +-
13297 drivers/block/drbd/drbd_int.h | 8 +-
13298 drivers/block/drbd/drbd_main.c | 12 +-
13299 drivers/block/drbd/drbd_nl.c | 4 +-
13300 drivers/block/drbd/drbd_receiver.c | 34 +-
13301 drivers/block/drbd/drbd_worker.c | 8 +-
13302 drivers/block/pktcdvd.c | 4 +-
13303 drivers/block/rbd.c | 2 +-
13304 drivers/bluetooth/btwilink.c | 2 +-
13305 drivers/bus/arm-cci.c | 12 +-
13306 drivers/cdrom/cdrom.c | 11 +-
13307 drivers/cdrom/gdrom.c | 1 -
13308 drivers/char/agp/compat_ioctl.c | 2 +-
13309 drivers/char/agp/frontend.c | 4 +-
13310 drivers/char/agp/intel-gtt.c | 4 +-
13311 drivers/char/hpet.c | 2 +-
13312 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
13313 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
13314 drivers/char/mem.c | 47 +-
13315 drivers/char/nvram.c | 2 +-
13316 drivers/char/pcmcia/synclink_cs.c | 16 +-
13317 drivers/char/random.c | 12 +-
13318 drivers/char/sonypi.c | 11 +-
13319 drivers/char/tpm/tpm_acpi.c | 3 +-
13320 drivers/char/tpm/tpm_eventlog.c | 4 +-
13321 drivers/char/virtio_console.c | 4 +-
13322 drivers/clk/clk-composite.c | 2 +-
13323 drivers/clk/samsung/clk.h | 2 +-
13324 drivers/clk/socfpga/clk-gate.c | 9 +-
13325 drivers/clk/socfpga/clk-pll.c | 9 +-
13326 drivers/clk/ti/clk.c | 8 +-
13327 drivers/cpufreq/acpi-cpufreq.c | 17 +-
13328 drivers/cpufreq/cpufreq-dt.c | 4 +-
13329 drivers/cpufreq/cpufreq.c | 30 +-
13330 drivers/cpufreq/cpufreq_governor.c | 2 +-
13331 drivers/cpufreq/cpufreq_governor.h | 4 +-
13332 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
13333 drivers/cpufreq/intel_pstate.c | 33 +-
13334 drivers/cpufreq/p4-clockmod.c | 12 +-
13335 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
13336 drivers/cpufreq/speedstep-centrino.c | 7 +-
13337 drivers/cpuidle/driver.c | 2 +-
13338 drivers/cpuidle/dt_idle_states.c | 2 +-
13339 drivers/cpuidle/governor.c | 2 +-
13340 drivers/cpuidle/sysfs.c | 2 +-
13341 drivers/crypto/hifn_795x.c | 4 +-
13342 drivers/devfreq/devfreq.c | 4 +-
13343 drivers/dma/sh/shdma-base.c | 4 +-
13344 drivers/dma/sh/shdmac.c | 2 +-
13345 drivers/edac/edac_device.c | 4 +-
13346 drivers/edac/edac_mc_sysfs.c | 2 +-
13347 drivers/edac/edac_pci.c | 4 +-
13348 drivers/edac/edac_pci_sysfs.c | 22 +-
13349 drivers/edac/mce_amd.h | 2 +-
13350 drivers/firewire/core-card.c | 6 +-
13351 drivers/firewire/core-device.c | 2 +-
13352 drivers/firewire/core-transaction.c | 1 +
13353 drivers/firewire/core.h | 1 +
13354 drivers/firmware/dmi-id.c | 2 +-
13355 drivers/firmware/dmi_scan.c | 12 +-
13356 drivers/firmware/efi/cper.c | 8 +-
13357 drivers/firmware/efi/efi.c | 12 +-
13358 drivers/firmware/efi/efivars.c | 2 +-
13359 drivers/firmware/efi/runtime-map.c | 2 +-
13360 drivers/firmware/google/gsmi.c | 2 +-
13361 drivers/firmware/google/memconsole.c | 7 +-
13362 drivers/firmware/memmap.c | 2 +-
13363 drivers/firmware/psci.c | 2 +-
13364 drivers/gpio/gpio-davinci.c | 6 +-
13365 drivers/gpio/gpio-em.c | 2 +-
13366 drivers/gpio/gpio-ich.c | 2 +-
13367 drivers/gpio/gpio-omap.c | 4 +-
13368 drivers/gpio/gpio-rcar.c | 2 +-
13369 drivers/gpio/gpio-vr41xx.c | 2 +-
13370 drivers/gpio/gpiolib.c | 12 +-
13371 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
13372 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
13373 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
13374 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
13375 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
13376 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
13377 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
13378 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
13379 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
13380 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
13381 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
13382 drivers/gpu/drm/drm_crtc.c | 2 +-
13383 drivers/gpu/drm/drm_drv.c | 2 +-
13384 drivers/gpu/drm/drm_fops.c | 12 +-
13385 drivers/gpu/drm/drm_global.c | 14 +-
13386 drivers/gpu/drm/drm_info.c | 13 +-
13387 drivers/gpu/drm/drm_ioc32.c | 13 +-
13388 drivers/gpu/drm/drm_ioctl.c | 2 +-
13389 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
13390 drivers/gpu/drm/i810/i810_drv.h | 4 +-
13391 drivers/gpu/drm/i915/i915_dma.c | 2 +-
13392 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
13393 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
13394 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
13395 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
13396 drivers/gpu/drm/i915/intel_display.c | 26 +-
13397 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
13398 drivers/gpu/drm/mga/mga_drv.h | 4 +-
13399 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
13400 drivers/gpu/drm/mga/mga_irq.c | 8 +-
13401 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
13402 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
13403 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
13404 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
13405 drivers/gpu/drm/omapdrm/Makefile | 2 +-
13406 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
13407 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
13408 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
13409 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
13410 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
13411 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
13412 drivers/gpu/drm/r128/r128_cce.c | 2 +-
13413 drivers/gpu/drm/r128/r128_drv.h | 4 +-
13414 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
13415 drivers/gpu/drm/r128/r128_irq.c | 4 +-
13416 drivers/gpu/drm/r128/r128_state.c | 4 +-
13417 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
13418 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
13419 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
13420 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
13421 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
13422 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
13423 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
13424 drivers/gpu/drm/tegra/dc.c | 2 +-
13425 drivers/gpu/drm/tegra/dsi.c | 2 +-
13426 drivers/gpu/drm/tegra/hdmi.c | 2 +-
13427 drivers/gpu/drm/tegra/sor.c | 7 +-
13428 drivers/gpu/drm/tilcdc/Makefile | 6 +-
13429 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
13430 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
13431 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
13432 drivers/gpu/drm/udl/udl_fb.c | 1 -
13433 drivers/gpu/drm/via/via_drv.h | 4 +-
13434 drivers/gpu/drm/via/via_irq.c | 18 +-
13435 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
13436 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
13437 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
13438 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
13439 drivers/gpu/vga/vga_switcheroo.c | 4 +-
13440 drivers/hid/hid-core.c | 4 +-
13441 drivers/hid/hid-sensor-custom.c | 2 +-
13442 drivers/hv/channel.c | 2 +-
13443 drivers/hv/hv.c | 4 +-
13444 drivers/hv/hv_balloon.c | 18 +-
13445 drivers/hv/hyperv_vmbus.h | 2 +-
13446 drivers/hwmon/acpi_power_meter.c | 6 +-
13447 drivers/hwmon/applesmc.c | 2 +-
13448 drivers/hwmon/asus_atk0110.c | 10 +-
13449 drivers/hwmon/coretemp.c | 2 +-
13450 drivers/hwmon/dell-smm-hwmon.c | 2 +-
13451 drivers/hwmon/ibmaem.c | 2 +-
13452 drivers/hwmon/iio_hwmon.c | 2 +-
13453 drivers/hwmon/nct6683.c | 6 +-
13454 drivers/hwmon/nct6775.c | 6 +-
13455 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
13456 drivers/hwmon/sht15.c | 12 +-
13457 drivers/hwmon/via-cputemp.c | 2 +-
13458 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
13459 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
13460 drivers/i2c/i2c-dev.c | 2 +-
13461 drivers/ide/ide-cd.c | 2 +-
13462 drivers/ide/ide-disk.c | 2 +-
13463 drivers/iio/industrialio-core.c | 2 +-
13464 drivers/iio/magnetometer/ak8975.c | 2 +-
13465 drivers/infiniband/core/cm.c | 32 +-
13466 drivers/infiniband/core/fmr_pool.c | 20 +-
13467 drivers/infiniband/core/uverbs_cmd.c | 3 +
13468 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
13469 drivers/infiniband/hw/mlx4/mad.c | 2 +-
13470 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
13471 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
13472 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
13473 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
13474 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
13475 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
13476 drivers/infiniband/hw/nes/nes.c | 4 +-
13477 drivers/infiniband/hw/nes/nes.h | 40 +-
13478 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
13479 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
13480 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
13481 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
13482 drivers/infiniband/hw/qib/qib.h | 1 +
13483 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
13484 drivers/input/gameport/gameport.c | 4 +-
13485 drivers/input/input.c | 4 +-
13486 drivers/input/joystick/sidewinder.c | 1 +
13487 drivers/input/joystick/xpad.c | 4 +-
13488 drivers/input/misc/ims-pcu.c | 4 +-
13489 drivers/input/mouse/psmouse.h | 2 +-
13490 drivers/input/mousedev.c | 2 +-
13491 drivers/input/serio/serio.c | 4 +-
13492 drivers/input/serio/serio_raw.c | 4 +-
13493 drivers/input/touchscreen/htcpen.c | 2 +-
13494 drivers/iommu/arm-smmu-v3.c | 2 +-
13495 drivers/iommu/arm-smmu.c | 43 +-
13496 drivers/iommu/io-pgtable-arm.c | 101 +-
13497 drivers/iommu/io-pgtable.c | 11 +-
13498 drivers/iommu/io-pgtable.h | 19 +-
13499 drivers/iommu/iommu.c | 2 +-
13500 drivers/iommu/ipmmu-vmsa.c | 13 +-
13501 drivers/iommu/irq_remapping.c | 2 +-
13502 drivers/irqchip/irq-gic.c | 2 +-
13503 drivers/irqchip/irq-i8259.c | 2 +-
13504 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
13505 drivers/irqchip/irq-renesas-irqc.c | 2 +-
13506 drivers/isdn/capi/capi.c | 10 +-
13507 drivers/isdn/gigaset/interface.c | 8 +-
13508 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
13509 drivers/isdn/hardware/avm/b1.c | 4 +-
13510 drivers/isdn/i4l/isdn_common.c | 2 +
13511 drivers/isdn/i4l/isdn_tty.c | 22 +-
13512 drivers/isdn/icn/icn.c | 2 +-
13513 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
13514 drivers/lguest/core.c | 10 +-
13515 drivers/lguest/page_tables.c | 2 +-
13516 drivers/lguest/x86/core.c | 12 +-
13517 drivers/lguest/x86/switcher_32.S | 27 +-
13518 drivers/md/bcache/closure.h | 2 +-
13519 drivers/md/bitmap.c | 2 +-
13520 drivers/md/dm-ioctl.c | 2 +-
13521 drivers/md/dm-raid1.c | 18 +-
13522 drivers/md/dm-stats.c | 6 +-
13523 drivers/md/dm-stripe.c | 10 +-
13524 drivers/md/dm-table.c | 2 +-
13525 drivers/md/dm-thin-metadata.c | 4 +-
13526 drivers/md/dm.c | 16 +-
13527 drivers/md/md.c | 26 +-
13528 drivers/md/md.h | 6 +-
13529 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
13530 drivers/md/persistent-data/dm-space-map.h | 1 +
13531 drivers/md/raid1.c | 4 +-
13532 drivers/md/raid10.c | 18 +-
13533 drivers/md/raid5.c | 22 +-
13534 drivers/media/dvb-core/dvbdev.c | 2 +-
13535 drivers/media/dvb-frontends/af9033.h | 2 +-
13536 drivers/media/dvb-frontends/dib3000.h | 2 +-
13537 drivers/media/dvb-frontends/dib7000p.h | 2 +-
13538 drivers/media/dvb-frontends/dib8000.h | 2 +-
13539 drivers/media/pci/cx88/cx88-video.c | 6 +-
13540 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
13541 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
13542 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
13543 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
13544 drivers/media/pci/tw68/tw68-core.c | 2 +-
13545 drivers/media/platform/omap/omap_vout.c | 11 +-
13546 drivers/media/platform/s5p-tv/mixer.h | 2 +-
13547 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
13548 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
13549 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
13550 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
13551 drivers/media/radio/radio-cadet.c | 2 +
13552 drivers/media/radio/radio-maxiradio.c | 2 +-
13553 drivers/media/radio/radio-shark.c | 2 +-
13554 drivers/media/radio/radio-shark2.c | 2 +-
13555 drivers/media/radio/radio-si476x.c | 2 +-
13556 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
13557 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
13558 drivers/media/v4l2-core/v4l2-device.c | 4 +-
13559 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
13560 drivers/memory/omap-gpmc.c | 21 +-
13561 drivers/message/fusion/mptsas.c | 34 +-
13562 drivers/mfd/ab8500-debugfs.c | 2 +-
13563 drivers/mfd/kempld-core.c | 2 +-
13564 drivers/mfd/max8925-i2c.c | 2 +-
13565 drivers/mfd/tps65910.c | 2 +-
13566 drivers/mfd/twl4030-irq.c | 9 +-
13567 drivers/mfd/wm5110-tables.c | 2 +-
13568 drivers/mfd/wm8998-tables.c | 2 +-
13569 drivers/misc/c2port/core.c | 4 +-
13570 drivers/misc/kgdbts.c | 4 +-
13571 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
13572 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
13573 drivers/misc/mic/scif/scif_rb.c | 8 +-
13574 drivers/misc/sgi-gru/gruhandles.c | 4 +-
13575 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
13576 drivers/misc/sgi-gru/grutables.h | 154 +-
13577 drivers/misc/sgi-xp/xp.h | 2 +-
13578 drivers/misc/sgi-xp/xpc.h | 3 +-
13579 drivers/misc/sgi-xp/xpc_main.c | 2 +-
13580 drivers/mmc/card/block.c | 2 +-
13581 drivers/mmc/host/dw_mmc.h | 2 +-
13582 drivers/mmc/host/mmci.c | 4 +-
13583 drivers/mmc/host/omap_hsmmc.c | 4 +-
13584 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
13585 drivers/mmc/host/sdhci-s3c.c | 8 +-
13586 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
13587 drivers/mtd/nand/denali.c | 1 +
13588 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
13589 drivers/mtd/nftlmount.c | 1 +
13590 drivers/mtd/sm_ftl.c | 2 +-
13591 drivers/net/bonding/bond_netlink.c | 2 +-
13592 drivers/net/caif/caif_hsi.c | 2 +-
13593 drivers/net/can/Kconfig | 2 +-
13594 drivers/net/can/dev.c | 2 +-
13595 drivers/net/can/vcan.c | 2 +-
13596 drivers/net/dummy.c | 2 +-
13597 drivers/net/ethernet/8390/ax88796.c | 4 +-
13598 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
13599 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
13600 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
13601 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
13602 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
13603 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
13604 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
13605 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
13606 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
13607 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
13608 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
13609 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
13610 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
13611 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
13612 drivers/net/ethernet/broadcom/tg3.h | 1 +
13613 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
13614 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
13615 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
13616 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
13617 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
13618 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
13619 drivers/net/ethernet/faraday/ftmac100.c | 2 +
13620 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
13621 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
13622 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
13623 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
13624 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
13625 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
13626 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
13627 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
13628 drivers/net/ethernet/realtek/r8169.c | 8 +-
13629 drivers/net/ethernet/sfc/ptp.c | 2 +-
13630 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
13631 drivers/net/ethernet/via/via-rhine.c | 2 +-
13632 drivers/net/geneve.c | 2 +-
13633 drivers/net/hyperv/hyperv_net.h | 2 +-
13634 drivers/net/hyperv/rndis_filter.c | 4 +-
13635 drivers/net/ifb.c | 2 +-
13636 drivers/net/ipvlan/ipvlan_core.c | 2 +-
13637 drivers/net/macvlan.c | 20 +-
13638 drivers/net/macvtap.c | 6 +-
13639 drivers/net/nlmon.c | 2 +-
13640 drivers/net/phy/phy_device.c | 6 +-
13641 drivers/net/ppp/ppp_generic.c | 4 +-
13642 drivers/net/slip/slhc.c | 2 +-
13643 drivers/net/team/team.c | 4 +-
13644 drivers/net/tun.c | 7 +-
13645 drivers/net/usb/hso.c | 23 +-
13646 drivers/net/usb/r8152.c | 2 +-
13647 drivers/net/usb/sierra_net.c | 4 +-
13648 drivers/net/virtio_net.c | 2 +-
13649 drivers/net/vrf.c | 2 +-
13650 drivers/net/vxlan.c | 4 +-
13651 drivers/net/wimax/i2400m/rx.c | 2 +-
13652 drivers/net/wireless/airo.c | 2 +-
13653 drivers/net/wireless/at76c50x-usb.c | 2 +-
13654 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
13655 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
13656 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
13657 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
13658 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
13659 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
13660 drivers/net/wireless/ath/ath9k/main.c | 22 +-
13661 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
13662 drivers/net/wireless/b43/phy_lp.c | 2 +-
13663 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
13664 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
13665 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
13666 drivers/net/wireless/mac80211_hwsim.c | 28 +-
13667 drivers/net/wireless/rndis_wlan.c | 2 +-
13668 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
13669 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
13670 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
13671 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
13672 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
13673 drivers/nfc/nfcwilink.c | 2 +-
13674 drivers/of/fdt.c | 4 +-
13675 drivers/oprofile/buffer_sync.c | 8 +-
13676 drivers/oprofile/event_buffer.c | 2 +-
13677 drivers/oprofile/oprof.c | 2 +-
13678 drivers/oprofile/oprofile_stats.c | 10 +-
13679 drivers/oprofile/oprofile_stats.h | 10 +-
13680 drivers/oprofile/oprofilefs.c | 6 +-
13681 drivers/oprofile/timer_int.c | 2 +-
13682 drivers/parport/procfs.c | 4 +-
13683 drivers/pci/host/pci-host-generic.c | 24 +-
13684 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
13685 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
13686 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
13687 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
13688 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
13689 drivers/pci/hotplug/pciehp_core.c | 2 +-
13690 drivers/pci/msi.c | 22 +-
13691 drivers/pci/pci-sysfs.c | 6 +-
13692 drivers/pci/pci.h | 2 +-
13693 drivers/pci/pcie/aspm.c | 6 +-
13694 drivers/pci/pcie/portdrv_pci.c | 2 +-
13695 drivers/pci/probe.c | 2 +-
13696 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
13697 drivers/pinctrl/pinctrl-at91.c | 5 +-
13698 drivers/platform/chrome/chromeos_pstore.c | 2 +-
13699 drivers/platform/x86/alienware-wmi.c | 4 +-
13700 drivers/platform/x86/compal-laptop.c | 2 +-
13701 drivers/platform/x86/hdaps.c | 2 +-
13702 drivers/platform/x86/ibm_rtl.c | 2 +-
13703 drivers/platform/x86/intel_oaktrail.c | 2 +-
13704 drivers/platform/x86/msi-laptop.c | 16 +-
13705 drivers/platform/x86/msi-wmi.c | 2 +-
13706 drivers/platform/x86/samsung-laptop.c | 2 +-
13707 drivers/platform/x86/samsung-q10.c | 2 +-
13708 drivers/platform/x86/sony-laptop.c | 14 +-
13709 drivers/platform/x86/thinkpad_acpi.c | 2 +-
13710 drivers/pnp/pnpbios/bioscalls.c | 14 +-
13711 drivers/pnp/pnpbios/core.c | 2 +-
13712 drivers/power/pda_power.c | 7 +-
13713 drivers/power/power_supply.h | 4 +-
13714 drivers/power/power_supply_core.c | 7 +-
13715 drivers/power/power_supply_sysfs.c | 6 +-
13716 drivers/power/reset/at91-reset.c | 9 +-
13717 drivers/powercap/powercap_sys.c | 136 +-
13718 drivers/ptp/ptp_private.h | 2 +-
13719 drivers/ptp/ptp_sysfs.c | 2 +-
13720 drivers/regulator/core.c | 4 +-
13721 drivers/regulator/max8660.c | 6 +-
13722 drivers/regulator/max8973-regulator.c | 16 +-
13723 drivers/regulator/mc13892-regulator.c | 8 +-
13724 drivers/rtc/rtc-armada38x.c | 7 +-
13725 drivers/rtc/rtc-cmos.c | 4 +-
13726 drivers/rtc/rtc-ds1307.c | 2 +-
13727 drivers/rtc/rtc-m48t59.c | 4 +-
13728 drivers/rtc/rtc-test.c | 6 +-
13729 drivers/scsi/be2iscsi/be_main.c | 2 +-
13730 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
13731 drivers/scsi/bfa/bfa_ioc.h | 4 +-
13732 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
13733 drivers/scsi/hosts.c | 4 +-
13734 drivers/scsi/hpsa.c | 38 +-
13735 drivers/scsi/hpsa.h | 2 +-
13736 drivers/scsi/libfc/fc_exch.c | 50 +-
13737 drivers/scsi/libsas/sas_ata.c | 2 +-
13738 drivers/scsi/lpfc/lpfc.h | 8 +-
13739 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
13740 drivers/scsi/lpfc/lpfc_init.c | 6 +-
13741 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
13742 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
13743 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
13744 drivers/scsi/pmcraid.c | 20 +-
13745 drivers/scsi/pmcraid.h | 8 +-
13746 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
13747 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
13748 drivers/scsi/qla2xxx/qla_os.c | 6 +-
13749 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
13750 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
13751 drivers/scsi/scsi.c | 2 +-
13752 drivers/scsi/scsi_lib.c | 8 +-
13753 drivers/scsi/scsi_sysfs.c | 2 +-
13754 drivers/scsi/scsi_transport_fc.c | 8 +-
13755 drivers/scsi/scsi_transport_iscsi.c | 6 +-
13756 drivers/scsi/scsi_transport_srp.c | 6 +-
13757 drivers/scsi/sd.c | 6 +-
13758 drivers/scsi/sg.c | 2 +-
13759 drivers/scsi/sr.c | 21 +-
13760 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
13761 drivers/spi/spi.c | 2 +-
13762 drivers/staging/android/timed_output.c | 6 +-
13763 drivers/staging/comedi/comedi_fops.c | 8 +-
13764 drivers/staging/fbtft/fbtft-core.c | 2 +-
13765 drivers/staging/fbtft/fbtft.h | 2 +-
13766 drivers/staging/gdm724x/gdm_tty.c | 2 +-
13767 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
13768 drivers/staging/iio/adc/ad7280a.c | 4 +-
13769 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
13770 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
13771 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
13772 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
13773 drivers/staging/lustre/lustre/include/obd.h | 2 +-
13774 drivers/staging/octeon/ethernet-rx.c | 20 +-
13775 drivers/staging/octeon/ethernet.c | 8 +-
13776 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
13777 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
13778 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
13779 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
13780 drivers/staging/sm750fb/sm750.c | 14 +-
13781 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
13782 drivers/target/sbp/sbp_target.c | 4 +-
13783 drivers/thermal/cpu_cooling.c | 9 +-
13784 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
13785 drivers/thermal/of-thermal.c | 17 +-
13786 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
13787 drivers/tty/cyclades.c | 6 +-
13788 drivers/tty/hvc/hvc_console.c | 14 +-
13789 drivers/tty/hvc/hvcs.c | 21 +-
13790 drivers/tty/hvc/hvsi.c | 22 +-
13791 drivers/tty/hvc/hvsi_lib.c | 4 +-
13792 drivers/tty/ipwireless/tty.c | 27 +-
13793 drivers/tty/moxa.c | 2 +-
13794 drivers/tty/n_gsm.c | 4 +-
13795 drivers/tty/n_tty.c | 3 +-
13796 drivers/tty/pty.c | 4 +-
13797 drivers/tty/rocket.c | 6 +-
13798 drivers/tty/serial/8250/8250_core.c | 10 +-
13799 drivers/tty/serial/ifx6x60.c | 2 +-
13800 drivers/tty/serial/ioc4_serial.c | 6 +-
13801 drivers/tty/serial/kgdb_nmi.c | 4 +-
13802 drivers/tty/serial/kgdboc.c | 32 +-
13803 drivers/tty/serial/msm_serial.c | 4 +-
13804 drivers/tty/serial/samsung.c | 9 +-
13805 drivers/tty/serial/serial_core.c | 8 +-
13806 drivers/tty/synclink.c | 34 +-
13807 drivers/tty/synclink_gt.c | 28 +-
13808 drivers/tty/synclinkmp.c | 34 +-
13809 drivers/tty/tty_io.c | 2 +-
13810 drivers/tty/tty_ldisc.c | 8 +-
13811 drivers/tty/tty_port.c | 22 +-
13812 drivers/uio/uio.c | 13 +-
13813 drivers/usb/atm/cxacru.c | 2 +-
13814 drivers/usb/atm/usbatm.c | 24 +-
13815 drivers/usb/class/cdc-acm.h | 2 +-
13816 drivers/usb/core/devices.c | 6 +-
13817 drivers/usb/core/devio.c | 12 +-
13818 drivers/usb/core/hcd.c | 4 +-
13819 drivers/usb/core/sysfs.c | 2 +-
13820 drivers/usb/core/usb.c | 2 +-
13821 drivers/usb/early/ehci-dbgp.c | 16 +-
13822 drivers/usb/gadget/function/u_serial.c | 22 +-
13823 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
13824 drivers/usb/host/ehci-hcd.c | 2 +-
13825 drivers/usb/host/ehci-hub.c | 4 +-
13826 drivers/usb/host/ehci-q.c | 4 +-
13827 drivers/usb/host/fotg210-hcd.c | 2 +-
13828 drivers/usb/host/fusbh200-hcd.c | 2 +-
13829 drivers/usb/host/hwa-hc.c | 2 +-
13830 drivers/usb/host/ohci-hcd.c | 2 +-
13831 drivers/usb/host/r8a66597.h | 2 +-
13832 drivers/usb/host/uhci-hcd.c | 2 +-
13833 drivers/usb/host/xhci-pci.c | 2 +-
13834 drivers/usb/host/xhci.c | 2 +-
13835 drivers/usb/misc/appledisplay.c | 4 +-
13836 drivers/usb/serial/console.c | 8 +-
13837 drivers/usb/storage/transport.c | 2 +-
13838 drivers/usb/storage/usb.c | 2 +-
13839 drivers/usb/storage/usb.h | 2 +-
13840 drivers/usb/usbip/vhci.h | 2 +-
13841 drivers/usb/usbip/vhci_hcd.c | 6 +-
13842 drivers/usb/usbip/vhci_rx.c | 2 +-
13843 drivers/usb/wusbcore/wa-hc.h | 4 +-
13844 drivers/usb/wusbcore/wa-xfer.c | 2 +-
13845 drivers/vfio/vfio.c | 2 +-
13846 drivers/vhost/vringh.c | 20 +-
13847 drivers/video/backlight/kb3886_bl.c | 2 +-
13848 drivers/video/console/fbcon.c | 2 +-
13849 drivers/video/fbdev/aty/aty128fb.c | 2 +-
13850 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
13851 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
13852 drivers/video/fbdev/core/fb_defio.c | 6 +-
13853 drivers/video/fbdev/core/fbmem.c | 2 +-
13854 drivers/video/fbdev/hyperv_fb.c | 4 +-
13855 drivers/video/fbdev/i810/i810_accel.c | 1 +
13856 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
13857 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
13858 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
13859 drivers/video/fbdev/omap2/dss/display.c | 8 +-
13860 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
13861 drivers/video/fbdev/smscufx.c | 4 +-
13862 drivers/video/fbdev/udlfb.c | 36 +-
13863 drivers/video/fbdev/uvesafb.c | 52 +-
13864 drivers/video/fbdev/vesafb.c | 58 +-
13865 drivers/video/fbdev/via/via_clock.h | 2 +-
13866 drivers/xen/events/events_base.c | 6 +-
13867 drivers/xen/evtchn.c | 4 +-
13868 fs/Kconfig.binfmt | 2 +-
13869 fs/afs/inode.c | 4 +-
13870 fs/aio.c | 2 +-
13871 fs/autofs4/waitq.c | 2 +-
13872 fs/befs/endian.h | 6 +-
13873 fs/binfmt_aout.c | 23 +-
13874 fs/binfmt_elf.c | 670 +-
13875 fs/binfmt_elf_fdpic.c | 4 +-
13876 fs/block_dev.c | 2 +-
13877 fs/btrfs/ctree.c | 9 +-
13878 fs/btrfs/delayed-inode.c | 9 +-
13879 fs/btrfs/delayed-inode.h | 6 +-
13880 fs/btrfs/file.c | 10 +-
13881 fs/btrfs/inode.c | 14 +-
13882 fs/btrfs/super.c | 2 +-
13883 fs/btrfs/sysfs.c | 2 +-
13884 fs/btrfs/tests/free-space-tests.c | 8 +-
13885 fs/btrfs/tree-log.h | 2 +-
13886 fs/buffer.c | 2 +-
13887 fs/cachefiles/bind.c | 6 +-
13888 fs/cachefiles/daemon.c | 8 +-
13889 fs/cachefiles/internal.h | 12 +-
13890 fs/cachefiles/namei.c | 2 +-
13891 fs/cachefiles/proc.c | 12 +-
13892 fs/ceph/dir.c | 12 +-
13893 fs/ceph/super.c | 4 +-
13894 fs/cifs/cifs_debug.c | 12 +-
13895 fs/cifs/cifsfs.c | 8 +-
13896 fs/cifs/cifsglob.h | 54 +-
13897 fs/cifs/file.c | 10 +-
13898 fs/cifs/misc.c | 4 +-
13899 fs/cifs/smb1ops.c | 80 +-
13900 fs/cifs/smb2ops.c | 84 +-
13901 fs/cifs/smb2pdu.c | 3 +-
13902 fs/coda/cache.c | 10 +-
13903 fs/compat.c | 4 +-
13904 fs/compat_binfmt_elf.c | 2 +
13905 fs/compat_ioctl.c | 12 +-
13906 fs/configfs/dir.c | 10 +-
13907 fs/coredump.c | 16 +-
13908 fs/dcache.c | 51 +-
13909 fs/ecryptfs/inode.c | 2 +-
13910 fs/ecryptfs/miscdev.c | 2 +-
13911 fs/exec.c | 362 +-
13912 fs/ext2/xattr.c | 5 +-
13913 fs/ext4/ext4.h | 20 +-
13914 fs/ext4/mballoc.c | 44 +-
13915 fs/ext4/resize.c | 16 +-
13916 fs/ext4/super.c | 4 +-
13917 fs/ext4/xattr.c | 5 +-
13918 fs/fhandle.c | 3 +-
13919 fs/file.c | 4 +-
13920 fs/fs_struct.c | 8 +-
13921 fs/fscache/cookie.c | 40 +-
13922 fs/fscache/internal.h | 202 +-
13923 fs/fscache/object.c | 26 +-
13924 fs/fscache/operation.c | 38 +-
13925 fs/fscache/page.c | 110 +-
13926 fs/fscache/stats.c | 348 +-
13927 fs/fuse/cuse.c | 10 +-
13928 fs/fuse/dev.c | 4 +-
13929 fs/gfs2/glock.c | 22 +-
13930 fs/gfs2/glops.c | 4 +-
13931 fs/gfs2/quota.c | 6 +-
13932 fs/hugetlbfs/inode.c | 13 +-
13933 fs/inode.c | 4 +-
13934 fs/jffs2/erase.c | 3 +-
13935 fs/jffs2/wbuf.c | 3 +-
13936 fs/jfs/super.c | 2 +-
13937 fs/kernfs/dir.c | 2 +-
13938 fs/kernfs/file.c | 20 +-
13939 fs/libfs.c | 10 +-
13940 fs/lockd/clntproc.c | 4 +-
13941 fs/namei.c | 16 +-
13942 fs/namespace.c | 16 +-
13943 fs/nfs/callback_xdr.c | 2 +-
13944 fs/nfs/inode.c | 6 +-
13945 fs/nfsd/nfs4proc.c | 2 +-
13946 fs/nfsd/nfs4xdr.c | 2 +-
13947 fs/nfsd/nfscache.c | 11 +-
13948 fs/nfsd/vfs.c | 6 +-
13949 fs/nls/nls_base.c | 26 +-
13950 fs/nls/nls_euc-jp.c | 6 +-
13951 fs/nls/nls_koi8-ru.c | 6 +-
13952 fs/notify/fanotify/fanotify_user.c | 4 +-
13953 fs/notify/notification.c | 4 +-
13954 fs/ntfs/dir.c | 2 +-
13955 fs/ntfs/super.c | 6 +-
13956 fs/ocfs2/localalloc.c | 2 +-
13957 fs/ocfs2/ocfs2.h | 10 +-
13958 fs/ocfs2/suballoc.c | 12 +-
13959 fs/ocfs2/super.c | 20 +-
13960 fs/pipe.c | 72 +-
13961 fs/posix_acl.c | 4 +-
13962 fs/proc/array.c | 20 +
13963 fs/proc/base.c | 4 +-
13964 fs/proc/kcore.c | 34 +-
13965 fs/proc/meminfo.c | 2 +-
13966 fs/proc/nommu.c | 2 +-
13967 fs/proc/proc_sysctl.c | 26 +-
13968 fs/proc/task_mmu.c | 39 +-
13969 fs/proc/task_nommu.c | 4 +-
13970 fs/proc/vmcore.c | 16 +-
13971 fs/qnx6/qnx6.h | 4 +-
13972 fs/quota/netlink.c | 4 +-
13973 fs/read_write.c | 2 +-
13974 fs/reiserfs/do_balan.c | 2 +-
13975 fs/reiserfs/procfs.c | 2 +-
13976 fs/reiserfs/reiserfs.h | 4 +-
13977 fs/seq_file.c | 4 +-
13978 fs/splice.c | 43 +-
13979 fs/squashfs/xattr.c | 12 +-
13980 fs/sysv/sysv.h | 2 +-
13981 fs/tracefs/inode.c | 8 +-
13982 fs/udf/misc.c | 2 +-
13983 fs/ufs/swab.h | 4 +-
13984 fs/userfaultfd.c | 2 +-
13985 fs/xattr.c | 21 +
13986 fs/xfs/libxfs/xfs_bmap.c | 2 +-
13987 fs/xfs/xfs_dir2_readdir.c | 7 +-
13988 fs/xfs/xfs_ioctl.c | 2 +-
13989 fs/xfs/xfs_linux.h | 4 +-
13990 include/asm-generic/4level-fixup.h | 2 +
13991 include/asm-generic/atomic-long.h | 156 +-
13992 include/asm-generic/atomic64.h | 12 +
13993 include/asm-generic/bitops/__fls.h | 2 +-
13994 include/asm-generic/bitops/fls.h | 2 +-
13995 include/asm-generic/bitops/fls64.h | 4 +-
13996 include/asm-generic/bug.h | 6 +-
13997 include/asm-generic/cache.h | 4 +-
13998 include/asm-generic/emergency-restart.h | 2 +-
13999 include/asm-generic/kmap_types.h | 4 +-
14000 include/asm-generic/local.h | 13 +
14001 include/asm-generic/pgtable-nopmd.h | 18 +-
14002 include/asm-generic/pgtable-nopud.h | 15 +-
14003 include/asm-generic/pgtable.h | 16 +
14004 include/asm-generic/sections.h | 1 +
14005 include/asm-generic/uaccess.h | 16 +
14006 include/asm-generic/vmlinux.lds.h | 15 +-
14007 include/crypto/algapi.h | 2 +-
14008 include/drm/drmP.h | 16 +-
14009 include/drm/drm_crtc_helper.h | 2 +-
14010 include/drm/drm_mm.h | 2 +-
14011 include/drm/i915_pciids.h | 2 +-
14012 include/drm/intel-gtt.h | 4 +-
14013 include/drm/ttm/ttm_memory.h | 2 +-
14014 include/drm/ttm/ttm_page_alloc.h | 1 +
14015 include/keys/asymmetric-subtype.h | 2 +-
14016 include/linux/atmdev.h | 4 +-
14017 include/linux/atomic.h | 17 +-
14018 include/linux/audit.h | 2 +-
14019 include/linux/average.h | 2 +-
14020 include/linux/binfmts.h | 3 +-
14021 include/linux/bitmap.h | 2 +-
14022 include/linux/bitops.h | 8 +-
14023 include/linux/blkdev.h | 2 +-
14024 include/linux/blktrace_api.h | 2 +-
14025 include/linux/cache.h | 8 +
14026 include/linux/cdrom.h | 1 -
14027 include/linux/cleancache.h | 2 +-
14028 include/linux/clk-provider.h | 1 +
14029 include/linux/compat.h | 6 +-
14030 include/linux/compiler-gcc.h | 28 +-
14031 include/linux/compiler.h | 157 +-
14032 include/linux/configfs.h | 2 +-
14033 include/linux/cpufreq.h | 3 +-
14034 include/linux/cpuidle.h | 5 +-
14035 include/linux/cpumask.h | 14 +-
14036 include/linux/crypto.h | 4 +-
14037 include/linux/ctype.h | 2 +-
14038 include/linux/dcache.h | 4 +-
14039 include/linux/decompress/mm.h | 2 +-
14040 include/linux/devfreq.h | 2 +-
14041 include/linux/device.h | 7 +-
14042 include/linux/dma-mapping.h | 2 +-
14043 include/linux/efi.h | 1 +
14044 include/linux/elf.h | 2 +
14045 include/linux/err.h | 4 +-
14046 include/linux/extcon.h | 2 +-
14047 include/linux/fb.h | 3 +-
14048 include/linux/fdtable.h | 2 +-
14049 include/linux/fs.h | 5 +-
14050 include/linux/fs_struct.h | 2 +-
14051 include/linux/fscache-cache.h | 2 +-
14052 include/linux/fscache.h | 2 +-
14053 include/linux/fsnotify.h | 2 +-
14054 include/linux/genhd.h | 4 +-
14055 include/linux/genl_magic_func.h | 2 +-
14056 include/linux/gfp.h | 12 +-
14057 include/linux/highmem.h | 12 +
14058 include/linux/hwmon-sysfs.h | 6 +-
14059 include/linux/i2c.h | 1 +
14060 include/linux/if_pppox.h | 2 +-
14061 include/linux/init.h | 12 +-
14062 include/linux/init_task.h | 7 +
14063 include/linux/interrupt.h | 6 +-
14064 include/linux/iommu.h | 2 +-
14065 include/linux/ioport.h | 2 +-
14066 include/linux/ipc.h | 2 +-
14067 include/linux/irq.h | 5 +-
14068 include/linux/irqdesc.h | 2 +-
14069 include/linux/irqdomain.h | 3 +
14070 include/linux/jiffies.h | 16 +-
14071 include/linux/key-type.h | 2 +-
14072 include/linux/kgdb.h | 6 +-
14073 include/linux/kmemleak.h | 4 +-
14074 include/linux/kobject.h | 3 +-
14075 include/linux/kobject_ns.h | 2 +-
14076 include/linux/kref.h | 2 +-
14077 include/linux/libata.h | 2 +-
14078 include/linux/linkage.h | 1 +
14079 include/linux/list.h | 15 +
14080 include/linux/lockref.h | 26 +-
14081 include/linux/math64.h | 10 +-
14082 include/linux/mempolicy.h | 7 +
14083 include/linux/mm.h | 102 +-
14084 include/linux/mm_types.h | 20 +
14085 include/linux/mmiotrace.h | 4 +-
14086 include/linux/mmzone.h | 2 +-
14087 include/linux/mod_devicetable.h | 4 +-
14088 include/linux/module.h | 69 +-
14089 include/linux/moduleloader.h | 16 +
14090 include/linux/moduleparam.h | 4 +-
14091 include/linux/net.h | 2 +-
14092 include/linux/netdevice.h | 7 +-
14093 include/linux/netfilter.h | 2 +-
14094 include/linux/netfilter/nfnetlink.h | 2 +-
14095 include/linux/nls.h | 4 +-
14096 include/linux/notifier.h | 3 +-
14097 include/linux/oprofile.h | 4 +-
14098 include/linux/padata.h | 2 +-
14099 include/linux/pci_hotplug.h | 3 +-
14100 include/linux/percpu.h | 2 +-
14101 include/linux/perf_event.h | 12 +-
14102 include/linux/pipe_fs_i.h | 8 +-
14103 include/linux/pm.h | 1 +
14104 include/linux/pm_domain.h | 4 +-
14105 include/linux/pm_runtime.h | 2 +-
14106 include/linux/pnp.h | 2 +-
14107 include/linux/poison.h | 4 +-
14108 include/linux/power/smartreflex.h | 2 +-
14109 include/linux/ppp-comp.h | 2 +-
14110 include/linux/preempt.h | 21 +
14111 include/linux/proc_ns.h | 2 +-
14112 include/linux/psci.h | 2 +-
14113 include/linux/quota.h | 2 +-
14114 include/linux/random.h | 19 +-
14115 include/linux/rculist.h | 16 +
14116 include/linux/reboot.h | 14 +-
14117 include/linux/regset.h | 3 +-
14118 include/linux/relay.h | 2 +-
14119 include/linux/rio.h | 2 +-
14120 include/linux/rmap.h | 4 +-
14121 include/linux/sched.h | 72 +-
14122 include/linux/sched/sysctl.h | 1 +
14123 include/linux/semaphore.h | 2 +-
14124 include/linux/seq_file.h | 1 +
14125 include/linux/signal.h | 2 +-
14126 include/linux/skbuff.h | 12 +-
14127 include/linux/slab.h | 47 +-
14128 include/linux/slab_def.h | 14 +-
14129 include/linux/slub_def.h | 2 +-
14130 include/linux/smp.h | 2 +
14131 include/linux/sock_diag.h | 2 +-
14132 include/linux/sonet.h | 2 +-
14133 include/linux/sunrpc/addr.h | 8 +-
14134 include/linux/sunrpc/clnt.h | 2 +-
14135 include/linux/sunrpc/svc.h | 2 +-
14136 include/linux/sunrpc/svc_rdma.h | 18 +-
14137 include/linux/sunrpc/svcauth.h | 2 +-
14138 include/linux/swapops.h | 10 +-
14139 include/linux/swiotlb.h | 3 +-
14140 include/linux/syscalls.h | 21 +-
14141 include/linux/syscore_ops.h | 2 +-
14142 include/linux/sysctl.h | 3 +-
14143 include/linux/sysfs.h | 9 +-
14144 include/linux/sysrq.h | 3 +-
14145 include/linux/tcp.h | 14 +-
14146 include/linux/thread_info.h | 7 +
14147 include/linux/tty.h | 4 +-
14148 include/linux/tty_driver.h | 2 +-
14149 include/linux/tty_ldisc.h | 2 +-
14150 include/linux/types.h | 16 +
14151 include/linux/uaccess.h | 6 +-
14152 include/linux/uio_driver.h | 2 +-
14153 include/linux/unaligned/access_ok.h | 24 +-
14154 include/linux/usb.h | 12 +-
14155 include/linux/usb/hcd.h | 1 +
14156 include/linux/usb/renesas_usbhs.h | 2 +-
14157 include/linux/vermagic.h | 21 +-
14158 include/linux/vga_switcheroo.h | 8 +-
14159 include/linux/vmalloc.h | 7 +-
14160 include/linux/vmstat.h | 24 +-
14161 include/linux/xattr.h | 5 +-
14162 include/linux/zlib.h | 3 +-
14163 include/media/v4l2-dev.h | 2 +-
14164 include/media/v4l2-device.h | 2 +-
14165 include/net/9p/transport.h | 2 +-
14166 include/net/bluetooth/l2cap.h | 2 +-
14167 include/net/bonding.h | 2 +-
14168 include/net/caif/cfctrl.h | 6 +-
14169 include/net/flow.h | 2 +-
14170 include/net/genetlink.h | 2 +-
14171 include/net/gro_cells.h | 2 +-
14172 include/net/inet_connection_sock.h | 2 +-
14173 include/net/inet_sock.h | 2 +-
14174 include/net/inetpeer.h | 2 +-
14175 include/net/ip_fib.h | 2 +-
14176 include/net/ip_vs.h | 8 +-
14177 include/net/ipv6.h | 2 +-
14178 include/net/irda/ircomm_tty.h | 1 +
14179 include/net/iucv/af_iucv.h | 2 +-
14180 include/net/llc_c_ac.h | 2 +-
14181 include/net/llc_c_ev.h | 4 +-
14182 include/net/llc_c_st.h | 2 +-
14183 include/net/llc_s_ac.h | 2 +-
14184 include/net/llc_s_st.h | 2 +-
14185 include/net/mac80211.h | 4 +-
14186 include/net/neighbour.h | 2 +-
14187 include/net/net_namespace.h | 18 +-
14188 include/net/netlink.h | 2 +-
14189 include/net/netns/conntrack.h | 6 +-
14190 include/net/netns/ipv4.h | 4 +-
14191 include/net/netns/ipv6.h | 4 +-
14192 include/net/netns/xfrm.h | 2 +-
14193 include/net/ping.h | 2 +-
14194 include/net/protocol.h | 4 +-
14195 include/net/rtnetlink.h | 2 +-
14196 include/net/sctp/checksum.h | 4 +-
14197 include/net/sctp/sm.h | 4 +-
14198 include/net/sctp/structs.h | 2 +-
14199 include/net/sock.h | 12 +-
14200 include/net/tcp.h | 8 +-
14201 include/net/xfrm.h | 13 +-
14202 include/rdma/iw_cm.h | 2 +-
14203 include/scsi/libfc.h | 3 +-
14204 include/scsi/scsi_device.h | 6 +-
14205 include/scsi/scsi_driver.h | 2 +-
14206 include/scsi/scsi_transport_fc.h | 3 +-
14207 include/scsi/sg.h | 2 +-
14208 include/sound/compress_driver.h | 2 +-
14209 include/sound/soc.h | 4 +-
14210 include/trace/events/irq.h | 4 +-
14211 include/uapi/linux/a.out.h | 8 +
14212 include/uapi/linux/bcache.h | 5 +-
14213 include/uapi/linux/byteorder/little_endian.h | 28 +-
14214 include/uapi/linux/connector.h | 2 +-
14215 include/uapi/linux/elf.h | 28 +
14216 include/uapi/linux/screen_info.h | 3 +-
14217 include/uapi/linux/swab.h | 6 +-
14218 include/uapi/linux/xattr.h | 4 +
14219 include/video/udlfb.h | 8 +-
14220 include/video/uvesafb.h | 1 +
14221 init/Kconfig | 2 +-
14222 init/Makefile | 3 +
14223 init/do_mounts.c | 14 +-
14224 init/do_mounts.h | 8 +-
14225 init/do_mounts_initrd.c | 30 +-
14226 init/do_mounts_md.c | 6 +-
14227 init/init_task.c | 4 +
14228 init/initramfs.c | 38 +-
14229 init/main.c | 30 +-
14230 ipc/compat.c | 4 +-
14231 ipc/ipc_sysctl.c | 8 +-
14232 ipc/mq_sysctl.c | 4 +-
14233 ipc/sem.c | 4 +-
14234 ipc/shm.c | 6 +
14235 kernel/audit.c | 8 +-
14236 kernel/auditsc.c | 4 +-
14237 kernel/bpf/core.c | 7 +-
14238 kernel/capability.c | 3 +
14239 kernel/compat.c | 38 +-
14240 kernel/debug/debug_core.c | 16 +-
14241 kernel/debug/kdb/kdb_main.c | 4 +-
14242 kernel/events/core.c | 26 +-
14243 kernel/events/internal.h | 10 +-
14244 kernel/events/uprobes.c | 2 +-
14245 kernel/exit.c | 2 +-
14246 kernel/fork.c | 167 +-
14247 kernel/futex.c | 11 +-
14248 kernel/futex_compat.c | 2 +-
14249 kernel/gcov/base.c | 7 +-
14250 kernel/irq/manage.c | 2 +-
14251 kernel/irq/msi.c | 19 +-
14252 kernel/irq/spurious.c | 2 +-
14253 kernel/jump_label.c | 5 +
14254 kernel/kallsyms.c | 37 +-
14255 kernel/kexec.c | 3 +-
14256 kernel/kmod.c | 8 +-
14257 kernel/kprobes.c | 4 +-
14258 kernel/ksysfs.c | 2 +-
14259 kernel/locking/lockdep.c | 7 +-
14260 kernel/locking/mutex-debug.c | 12 +-
14261 kernel/locking/mutex-debug.h | 4 +-
14262 kernel/locking/mutex.c | 6 +-
14263 kernel/module.c | 422 +-
14264 kernel/notifier.c | 17 +-
14265 kernel/padata.c | 4 +-
14266 kernel/panic.c | 5 +-
14267 kernel/pid.c | 2 +-
14268 kernel/pid_namespace.c | 2 +-
14269 kernel/power/process.c | 12 +-
14270 kernel/profile.c | 14 +-
14271 kernel/ptrace.c | 8 +-
14272 kernel/rcu/rcutorture.c | 60 +-
14273 kernel/rcu/tiny.c | 4 +-
14274 kernel/rcu/tree.c | 44 +-
14275 kernel/rcu/tree.h | 14 +-
14276 kernel/rcu/tree_plugin.h | 14 +-
14277 kernel/rcu/tree_trace.c | 12 +-
14278 kernel/sched/auto_group.c | 4 +-
14279 kernel/sched/core.c | 45 +-
14280 kernel/sched/fair.c | 2 +-
14281 kernel/sched/sched.h | 2 +-
14282 kernel/signal.c | 12 +-
14283 kernel/smpboot.c | 4 +-
14284 kernel/softirq.c | 12 +-
14285 kernel/sys.c | 10 +-
14286 kernel/sysctl.c | 34 +-
14287 kernel/time/alarmtimer.c | 2 +-
14288 kernel/time/posix-cpu-timers.c | 4 +-
14289 kernel/time/posix-timers.c | 24 +-
14290 kernel/time/timer.c | 2 +-
14291 kernel/time/timer_stats.c | 10 +-
14292 kernel/trace/blktrace.c | 6 +-
14293 kernel/trace/ftrace.c | 15 +-
14294 kernel/trace/ring_buffer.c | 96 +-
14295 kernel/trace/trace.c | 2 +-
14296 kernel/trace/trace.h | 2 +-
14297 kernel/trace/trace_clock.c | 4 +-
14298 kernel/trace/trace_events.c | 1 -
14299 kernel/trace/trace_functions_graph.c | 4 +-
14300 kernel/trace/trace_mmiotrace.c | 8 +-
14301 kernel/trace/trace_output.c | 10 +-
14302 kernel/trace/trace_seq.c | 2 +-
14303 kernel/trace/trace_stack.c | 2 +-
14304 kernel/user_namespace.c | 2 +-
14305 kernel/utsname_sysctl.c | 2 +-
14306 kernel/watchdog.c | 2 +-
14307 kernel/workqueue.c | 2 +-
14308 lib/Kconfig.debug | 8 +-
14309 lib/Makefile | 2 +-
14310 lib/bitmap.c | 8 +-
14311 lib/bug.c | 2 +
14312 lib/debugobjects.c | 2 +-
14313 lib/decompress_bunzip2.c | 3 +-
14314 lib/decompress_unlzma.c | 4 +-
14315 lib/div64.c | 4 +-
14316 lib/dma-debug.c | 4 +-
14317 lib/inflate.c | 2 +-
14318 lib/ioremap.c | 4 +-
14319 lib/kobject.c | 4 +-
14320 lib/list_debug.c | 126 +-
14321 lib/lockref.c | 44 +-
14322 lib/percpu-refcount.c | 2 +-
14323 lib/radix-tree.c | 2 +-
14324 lib/random32.c | 2 +-
14325 lib/show_mem.c | 2 +-
14326 lib/strncpy_from_user.c | 2 +-
14327 lib/strnlen_user.c | 2 +-
14328 lib/swiotlb.c | 2 +-
14329 lib/usercopy.c | 6 +
14330 lib/vsprintf.c | 12 +-
14331 mm/Kconfig | 6 +-
14332 mm/backing-dev.c | 4 +-
14333 mm/debug.c | 3 +
14334 mm/filemap.c | 2 +-
14335 mm/gup.c | 13 +-
14336 mm/highmem.c | 6 +-
14337 mm/hugetlb.c | 70 +-
14338 mm/internal.h | 1 +
14339 mm/maccess.c | 4 +-
14340 mm/madvise.c | 37 +
14341 mm/memory-failure.c | 6 +-
14342 mm/memory.c | 424 +-
14343 mm/mempolicy.c | 25 +
14344 mm/mlock.c | 15 +-
14345 mm/mm_init.c | 2 +-
14346 mm/mmap.c | 582 +-
14347 mm/mprotect.c | 137 +-
14348 mm/mremap.c | 39 +-
14349 mm/nommu.c | 21 +-
14350 mm/page-writeback.c | 2 +-
14351 mm/page_alloc.c | 49 +-
14352 mm/percpu.c | 2 +-
14353 mm/process_vm_access.c | 14 +-
14354 mm/rmap.c | 45 +-
14355 mm/shmem.c | 19 +-
14356 mm/slab.c | 109 +-
14357 mm/slab.h | 22 +-
14358 mm/slab_common.c | 86 +-
14359 mm/slob.c | 218 +-
14360 mm/slub.c | 102 +-
14361 mm/sparse-vmemmap.c | 4 +-
14362 mm/sparse.c | 2 +-
14363 mm/swap.c | 2 +
14364 mm/swapfile.c | 12 +-
14365 mm/util.c | 6 +
14366 mm/vmalloc.c | 114 +-
14367 mm/vmstat.c | 12 +-
14368 net/8021q/vlan.c | 5 +-
14369 net/8021q/vlan_netlink.c | 2 +-
14370 net/9p/mod.c | 4 +-
14371 net/9p/trans_fd.c | 2 +-
14372 net/atm/atm_misc.c | 8 +-
14373 net/atm/lec.h | 2 +-
14374 net/atm/proc.c | 6 +-
14375 net/atm/resources.c | 4 +-
14376 net/ax25/sysctl_net_ax25.c | 2 +-
14377 net/batman-adv/bat_iv_ogm.c | 8 +-
14378 net/batman-adv/fragmentation.c | 2 +-
14379 net/batman-adv/soft-interface.c | 8 +-
14380 net/batman-adv/types.h | 6 +-
14381 net/bluetooth/hci_sock.c | 2 +-
14382 net/bluetooth/l2cap_core.c | 6 +-
14383 net/bluetooth/l2cap_sock.c | 12 +-
14384 net/bluetooth/rfcomm/sock.c | 4 +-
14385 net/bluetooth/rfcomm/tty.c | 4 +-
14386 net/bridge/br_netlink.c | 2 +-
14387 net/bridge/netfilter/ebtables.c | 6 +-
14388 net/caif/cfctrl.c | 11 +-
14389 net/caif/chnl_net.c | 2 +-
14390 net/can/af_can.c | 2 +-
14391 net/can/gw.c | 6 +-
14392 net/ceph/messenger.c | 4 +-
14393 net/compat.c | 24 +-
14394 net/core/datagram.c | 2 +-
14395 net/core/dev.c | 16 +-
14396 net/core/filter.c | 2 +-
14397 net/core/flow.c | 6 +-
14398 net/core/neighbour.c | 4 +-
14399 net/core/net-sysfs.c | 2 +-
14400 net/core/net_namespace.c | 8 +-
14401 net/core/netpoll.c | 4 +-
14402 net/core/rtnetlink.c | 15 +-
14403 net/core/scm.c | 14 +-
14404 net/core/skbuff.c | 8 +-
14405 net/core/sock.c | 28 +-
14406 net/core/sock_diag.c | 15 +-
14407 net/core/sysctl_net_core.c | 22 +-
14408 net/decnet/af_decnet.c | 1 +
14409 net/decnet/sysctl_net_decnet.c | 4 +-
14410 net/dsa/dsa.c | 2 +-
14411 net/hsr/hsr_netlink.c | 2 +-
14412 net/ieee802154/6lowpan/core.c | 2 +-
14413 net/ieee802154/6lowpan/reassembly.c | 14 +-
14414 net/ipv4/af_inet.c | 2 +-
14415 net/ipv4/devinet.c | 18 +-
14416 net/ipv4/fib_frontend.c | 6 +-
14417 net/ipv4/fib_semantics.c | 2 +-
14418 net/ipv4/inet_connection_sock.c | 4 +-
14419 net/ipv4/inet_timewait_sock.c | 2 +-
14420 net/ipv4/inetpeer.c | 2 +-
14421 net/ipv4/ip_fragment.c | 15 +-
14422 net/ipv4/ip_gre.c | 6 +-
14423 net/ipv4/ip_sockglue.c | 2 +-
14424 net/ipv4/ip_vti.c | 4 +-
14425 net/ipv4/ipconfig.c | 6 +-
14426 net/ipv4/ipip.c | 4 +-
14427 net/ipv4/netfilter/arp_tables.c | 12 +-
14428 net/ipv4/netfilter/ip_tables.c | 12 +-
14429 net/ipv4/ping.c | 14 +-
14430 net/ipv4/raw.c | 14 +-
14431 net/ipv4/route.c | 32 +-
14432 net/ipv4/sysctl_net_ipv4.c | 22 +-
14433 net/ipv4/tcp_input.c | 6 +-
14434 net/ipv4/tcp_probe.c | 2 +-
14435 net/ipv4/udp.c | 10 +-
14436 net/ipv4/xfrm4_policy.c | 18 +-
14437 net/ipv6/addrconf.c | 18 +-
14438 net/ipv6/af_inet6.c | 2 +-
14439 net/ipv6/datagram.c | 2 +-
14440 net/ipv6/icmp.c | 2 +-
14441 net/ipv6/ip6_fib.c | 4 +-
14442 net/ipv6/ip6_gre.c | 10 +-
14443 net/ipv6/ip6_tunnel.c | 4 +-
14444 net/ipv6/ip6_vti.c | 4 +-
14445 net/ipv6/ipv6_sockglue.c | 2 +-
14446 net/ipv6/netfilter/ip6_tables.c | 12 +-
14447 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
14448 net/ipv6/ping.c | 33 +-
14449 net/ipv6/raw.c | 17 +-
14450 net/ipv6/reassembly.c | 13 +-
14451 net/ipv6/route.c | 2 +-
14452 net/ipv6/sit.c | 4 +-
14453 net/ipv6/sysctl_net_ipv6.c | 2 +-
14454 net/ipv6/udp.c | 6 +-
14455 net/ipv6/xfrm6_policy.c | 17 +-
14456 net/irda/ircomm/ircomm_tty.c | 18 +-
14457 net/iucv/af_iucv.c | 4 +-
14458 net/iucv/iucv.c | 2 +-
14459 net/key/af_key.c | 4 +-
14460 net/l2tp/l2tp_eth.c | 38 +-
14461 net/l2tp/l2tp_ip.c | 2 +-
14462 net/l2tp/l2tp_ip6.c | 2 +-
14463 net/mac80211/cfg.c | 8 +-
14464 net/mac80211/ieee80211_i.h | 3 +-
14465 net/mac80211/iface.c | 20 +-
14466 net/mac80211/main.c | 2 +-
14467 net/mac80211/pm.c | 4 +-
14468 net/mac80211/rate.c | 2 +-
14469 net/mac80211/sta_info.c | 2 +-
14470 net/mac80211/util.c | 8 +-
14471 net/mpls/af_mpls.c | 6 +-
14472 net/netfilter/ipset/ip_set_core.c | 2 +-
14473 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
14474 net/netfilter/ipvs/ip_vs_core.c | 4 +-
14475 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
14476 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
14477 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
14478 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
14479 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
14480 net/netfilter/nf_conntrack_acct.c | 2 +-
14481 net/netfilter/nf_conntrack_ecache.c | 2 +-
14482 net/netfilter/nf_conntrack_helper.c | 2 +-
14483 net/netfilter/nf_conntrack_proto.c | 2 +-
14484 net/netfilter/nf_conntrack_standalone.c | 2 +-
14485 net/netfilter/nf_conntrack_timestamp.c | 2 +-
14486 net/netfilter/nf_log.c | 10 +-
14487 net/netfilter/nf_sockopt.c | 4 +-
14488 net/netfilter/nfnetlink_log.c | 4 +-
14489 net/netfilter/nft_compat.c | 9 +-
14490 net/netfilter/xt_statistic.c | 8 +-
14491 net/netlink/af_netlink.c | 4 +-
14492 net/openvswitch/vport-internal_dev.c | 2 +-
14493 net/packet/af_packet.c | 8 +-
14494 net/phonet/pep.c | 6 +-
14495 net/phonet/socket.c | 2 +-
14496 net/phonet/sysctl.c | 2 +-
14497 net/rds/cong.c | 6 +-
14498 net/rds/ib.h | 2 +-
14499 net/rds/ib_cm.c | 2 +-
14500 net/rds/ib_recv.c | 4 +-
14501 net/rds/iw.h | 2 +-
14502 net/rds/iw_cm.c | 2 +-
14503 net/rds/iw_recv.c | 4 +-
14504 net/rds/rds.h | 2 +-
14505 net/rds/tcp.c | 2 +-
14506 net/rds/tcp_send.c | 2 +-
14507 net/rxrpc/af_rxrpc.c | 2 +-
14508 net/rxrpc/ar-ack.c | 14 +-
14509 net/rxrpc/ar-call.c | 2 +-
14510 net/rxrpc/ar-connection.c | 2 +-
14511 net/rxrpc/ar-connevent.c | 2 +-
14512 net/rxrpc/ar-input.c | 4 +-
14513 net/rxrpc/ar-internal.h | 8 +-
14514 net/rxrpc/ar-local.c | 2 +-
14515 net/rxrpc/ar-output.c | 4 +-
14516 net/rxrpc/ar-peer.c | 2 +-
14517 net/rxrpc/ar-proc.c | 4 +-
14518 net/rxrpc/ar-transport.c | 2 +-
14519 net/rxrpc/rxkad.c | 4 +-
14520 net/sched/sch_generic.c | 4 +-
14521 net/sctp/ipv6.c | 6 +-
14522 net/sctp/protocol.c | 10 +-
14523 net/sctp/sm_sideeffect.c | 2 +-
14524 net/sctp/socket.c | 21 +-
14525 net/sctp/sysctl.c | 10 +-
14526 net/socket.c | 18 +-
14527 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
14528 net/sunrpc/clnt.c | 4 +-
14529 net/sunrpc/sched.c | 4 +-
14530 net/sunrpc/svc.c | 4 +-
14531 net/sunrpc/svcauth_unix.c | 2 +-
14532 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
14533 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
14534 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
14535 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
14536 net/tipc/netlink_compat.c | 12 +-
14537 net/tipc/subscr.c | 2 +-
14538 net/unix/af_unix.c | 7 +-
14539 net/unix/sysctl_net_unix.c | 2 +-
14540 net/wireless/wext-core.c | 19 +-
14541 net/xfrm/xfrm_policy.c | 16 +-
14542 net/xfrm/xfrm_state.c | 33 +-
14543 net/xfrm/xfrm_sysctl.c | 2 +-
14544 scripts/Kbuild.include | 2 +-
14545 scripts/Makefile.build | 2 +-
14546 scripts/Makefile.clean | 3 +-
14547 scripts/Makefile.host | 69 +-
14548 scripts/basic/fixdep.c | 12 +-
14549 scripts/dtc/checks.c | 14 +-
14550 scripts/dtc/data.c | 6 +-
14551 scripts/dtc/flattree.c | 8 +-
14552 scripts/dtc/livetree.c | 4 +-
14553 scripts/gcc-plugin.sh | 51 +
14554 scripts/headers_install.sh | 1 +
14555 scripts/kallsyms.c | 4 +-
14556 scripts/kconfig/lkc.h | 5 +-
14557 scripts/kconfig/menu.c | 2 +-
14558 scripts/kconfig/symbol.c | 6 +-
14559 scripts/link-vmlinux.sh | 2 +-
14560 scripts/mod/file2alias.c | 14 +-
14561 scripts/mod/modpost.c | 25 +-
14562 scripts/mod/modpost.h | 6 +-
14563 scripts/mod/sumversion.c | 2 +-
14564 scripts/module-common.lds | 4 +
14565 scripts/package/builddeb | 1 +
14566 scripts/pnmtologo.c | 6 +-
14567 scripts/sortextable.h | 6 +-
14568 scripts/tags.sh | 2 +-
14569 security/Kconfig | 692 +-
14570 security/integrity/ima/ima.h | 4 +-
14571 security/integrity/ima/ima_api.c | 2 +-
14572 security/integrity/ima/ima_fs.c | 4 +-
14573 security/integrity/ima/ima_queue.c | 2 +-
14574 security/keys/key.c | 18 +-
14575 security/selinux/avc.c | 6 +-
14576 security/selinux/include/xfrm.h | 2 +-
14577 security/yama/yama_lsm.c | 2 +-
14578 sound/aoa/codecs/onyx.c | 7 +-
14579 sound/aoa/codecs/onyx.h | 1 +
14580 sound/core/oss/pcm_oss.c | 18 +-
14581 sound/core/pcm_compat.c | 2 +-
14582 sound/core/pcm_native.c | 4 +-
14583 sound/core/sound.c | 2 +-
14584 sound/drivers/mts64.c | 14 +-
14585 sound/drivers/opl4/opl4_lib.c | 2 +-
14586 sound/drivers/portman2x4.c | 3 +-
14587 sound/firewire/amdtp.c | 4 +-
14588 sound/firewire/amdtp.h | 4 +-
14589 sound/firewire/isight.c | 10 +-
14590 sound/firewire/scs1x.c | 8 +-
14591 sound/oss/sb_audio.c | 2 +-
14592 sound/oss/swarm_cs4297a.c | 6 +-
14593 sound/pci/hda/hda_codec.c | 2 +-
14594 sound/pci/ymfpci/ymfpci.h | 2 +-
14595 sound/pci/ymfpci/ymfpci_main.c | 12 +-
14596 sound/soc/codecs/sti-sas.c | 10 +-
14597 sound/soc/soc-ac97.c | 6 +-
14598 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
14599 tools/gcc/Makefile | 42 +
14600 tools/gcc/checker_plugin.c | 150 +
14601 tools/gcc/colorize_plugin.c | 215 +
14602 tools/gcc/constify_plugin.c | 571 +
14603 tools/gcc/gcc-common.h | 812 +
14604 tools/gcc/initify_plugin.c | 552 +
14605 tools/gcc/kallocstat_plugin.c | 188 +
14606 tools/gcc/kernexec_plugin.c | 549 +
14607 tools/gcc/latent_entropy_plugin.c | 470 +
14608 tools/gcc/size_overflow_plugin/.gitignore | 2 +
14609 tools/gcc/size_overflow_plugin/Makefile | 28 +
14610 .../disable_size_overflow_hash.data |12422 ++++++++++++
14611 .../generate_size_overflow_hash.sh | 103 +
14612 .../insert_size_overflow_asm.c | 416 +
14613 .../size_overflow_plugin/intentional_overflow.c | 1010 +
14614 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
14615 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
14616 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
14617 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
14618 .../size_overflow_hash_aux.data | 92 +
14619 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
14620 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
14621 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
14622 .../size_overflow_plugin_hash.c | 352 +
14623 .../size_overflow_plugin/size_overflow_transform.c | 749 +
14624 .../size_overflow_transform_core.c | 1010 +
14625 tools/gcc/stackleak_plugin.c | 436 +
14626 tools/gcc/structleak_plugin.c | 287 +
14627 tools/include/linux/compiler.h | 8 +
14628 tools/lib/api/Makefile | 2 +-
14629 tools/perf/util/include/asm/alternative-asm.h | 3 +
14630 tools/virtio/linux/uaccess.h | 2 +-
14631 virt/kvm/kvm_main.c | 42 +-
14632 1944 files changed, 66925 insertions(+), 8949 deletions(-)
14633 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
14634 Author: Matthew Wilcox <willy@linux.intel.com>
14635 Date: Tue Feb 2 16:57:52 2016 -0800
14636
14637 radix-tree: fix race in gang lookup
14638
14639 If the indirect_ptr bit is set on a slot, that indicates we need to redo
14640 the lookup. Introduce a new function radix_tree_iter_retry() which
14641 forces the loop to retry the lookup by setting 'slot' to NULL and
14642 turning the iterator back to point at the problematic entry.
14643
14644 This is a pretty rare problem to hit at the moment; the lookup has to
14645 race with a grow of the radix tree from a height of 0. The consequences
14646 of hitting this race are that gang lookup could return a pointer to a
14647 radix_tree_node instead of a pointer to whatever the user had inserted
14648 in the tree.
14649
14650 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
14651 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
14652 Cc: Hugh Dickins <hughd@google.com>
14653 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14654 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
14655 Cc: <stable@vger.kernel.org>
14656 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14657 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14658
14659 include/linux/radix-tree.h | 16 ++++++++++++++++
14660 lib/radix-tree.c | 12 ++++++++++--
14661 2 files changed, 26 insertions(+), 2 deletions(-)
14662
14663 commit bf628043b4589c910919a0f221ae7f42aa8cea93
14664 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14665 Date: Wed Feb 3 02:11:03 2016 +0100
14666
14667 unix: correctly track in-flight fds in sending process user_struct
14668
14669 The commit referenced in the Fixes tag incorrectly accounted the number
14670 of in-flight fds over a unix domain socket to the original opener
14671 of the file-descriptor. This allows another process to arbitrary
14672 deplete the original file-openers resource limit for the maximum of
14673 open files. Instead the sending processes and its struct cred should
14674 be credited.
14675
14676 To do so, we add a reference counted struct user_struct pointer to the
14677 scm_fp_list and use it to account for the number of inflight unix fds.
14678
14679 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
14680 Reported-by: David Herrmann <dh.herrmann@gmail.com>
14681 Cc: David Herrmann <dh.herrmann@gmail.com>
14682 Cc: Willy Tarreau <w@1wt.eu>
14683 Cc: Linus Torvalds <torvalds@linux-foundation.org>
14684 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14685 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14686 Signed-off-by: David S. Miller <davem@davemloft.net>
14687
14688 include/net/af_unix.h | 4 ++--
14689 include/net/scm.h | 1 +
14690 net/core/scm.c | 7 +++++++
14691 net/unix/af_unix.c | 4 ++--
14692 net/unix/garbage.c | 8 ++++----
14693 5 files changed, 16 insertions(+), 8 deletions(-)
14694
14695 commit e830db443ff78d70b7b63536e688d73907face0c
14696 Author: Mike Kravetz <mike.kravetz@oracle.com>
14697 Date: Fri Jan 15 16:57:37 2016 -0800
14698
14699 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
14700
14701 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
14702 argument end is of type pgoff_t. It was being converted to a vaddr
14703 offset and passed to unmap_hugepage_range. However, end was also being
14704 used as an argument to the vma_interval_tree_foreach controlling loop.
14705 In addition, the conversion of end to vaddr offset was incorrect.
14706
14707 hugetlb_vmtruncate_list is called as part of a file truncate or
14708 fallocate hole punch operation.
14709
14710 When truncating a hugetlbfs file, this bug could prevent some pages from
14711 being unmapped. This is possible if there are multiple vmas mapping the
14712 file, and there is a sufficiently sized hole between the mappings. The
14713 size of the hole between two vmas (A,B) must be such that the starting
14714 virtual address of B is greater than (ending virtual address of A <<
14715 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
14716 pages are not properly unmapped during truncate, the following BUG is
14717 hit:
14718
14719 kernel BUG at fs/hugetlbfs/inode.c:428!
14720
14721 In the fallocate hole punch case, this bug could prevent pages from
14722 being unmapped as in the truncate case. However, for hole punch the
14723 result is that unmapped pages will not be removed during the operation.
14724 For hole punch, it is also possible that more pages than desired will be
14725 unmapped. This unnecessary unmapping will cause page faults to
14726 reestablish the mappings on subsequent page access.
14727
14728 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
14729 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
14730 Cc: Hugh Dickins <hughd@google.com>
14731 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
14732 Cc: Davidlohr Bueso <dave@stgolabs.net>
14733 Cc: Dave Hansen <dave.hansen@linux.intel.com>
14734 Cc: <stable@vger.kernel.org> [4.3]
14735 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14736 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14737
14738 fs/hugetlbfs/inode.c | 19 +++++++++++--------
14739 1 files changed, 11 insertions(+), 8 deletions(-)
14740
14741 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
14742 Author: Takashi Iwai <tiwai@suse.de>
14743 Date: Thu Feb 4 17:06:13 2016 +0100
14744
14745 ALSA: timer: Fix leftover link at closing
14746
14747 In ALSA timer core, the active timer instance is managed in
14748 active_list linked list. Each element is added / removed dynamically
14749 at timer start, stop and in timer interrupt. The problem is that
14750 snd_timer_interrupt() has a thinko and leaves the element in
14751 active_list when it's the last opened element. This eventually leads
14752 to list corruption or use-after-free error.
14753
14754 This hasn't been revealed because we used to delete the list forcibly
14755 in snd_timer_stop() in the past. However, the recent fix avoids the
14756 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
14757 corruption due to double start or stop]), and this leak hits reality.
14758
14759 This patch fixes the link management in snd_timer_interrupt(). Now it
14760 simply unlinks no matter which stream is.
14761
14762 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
14763 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14764 Cc: <stable@vger.kernel.org>
14765 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14766
14767 sound/core/timer.c | 4 ++--
14768 1 files changed, 2 insertions(+), 2 deletions(-)
14769
14770 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
14771 Author: Konstantin Khlebnikov <koct9i@gmail.com>
14772 Date: Fri Feb 5 15:37:01 2016 -0800
14773
14774 radix-tree: fix oops after radix_tree_iter_retry
14775
14776 Helper radix_tree_iter_retry() resets next_index to the current index.
14777 In following radix_tree_next_slot current chunk size becomes zero. This
14778 isn't checked and it tries to dereference null pointer in slot.
14779
14780 Tagged iterator is fine because retry happens only at slot 0 where tag
14781 bitmask in iter->tags is filled with single bit.
14782
14783 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
14784 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
14785 Cc: Matthew Wilcox <willy@linux.intel.com>
14786 Cc: Hugh Dickins <hughd@google.com>
14787 Cc: Ohad Ben-Cohen <ohad@wizery.com>
14788 Cc: Jeremiah Mahler <jmmahler@gmail.com>
14789 Cc: <stable@vger.kernel.org>
14790 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14791 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14792
14793 include/linux/radix-tree.h | 6 +++---
14794 1 files changed, 3 insertions(+), 3 deletions(-)
14795
14796 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
14797 Merge: 438be0b 256aeaf
14798 Author: Brad Spengler <spender@grsecurity.net>
14799 Date: Sun Feb 7 08:29:33 2016 -0500
14800
14801 Merge branch 'pax-test' into grsec-test
14802
14803 commit 256aeaf87c22de8edf1f03682a572c590ae07771
14804 Author: Brad Spengler <spender@grsecurity.net>
14805 Date: Sun Feb 7 08:29:09 2016 -0500
14806
14807 Update to pax-linux-4.3.5-test28.patch:
14808 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
14809 - spender fixed UDEREF on arm
14810
14811 arch/arm/Kconfig | 1 +
14812 arch/arm/include/asm/domain.h | 21 ++++++++-
14813 arch/arm/include/asm/futex.h | 9 ----
14814 arch/arm/include/asm/thread_info.h | 3 +
14815 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14816 arch/arm/kernel/entry-armv.S | 2 +-
14817 arch/arm/kernel/process.c | 2 +-
14818 arch/arm/mm/alignment.c | 8 ----
14819 arch/x86/mm/numa.c | 2 +-
14820 security/Kconfig | 1 -
14821 10 files changed, 60 insertions(+), 70 deletions(-)
14822
14823 commit 438be0bd112bd17942b2628c53054dc1007558a1
14824 Author: Brad Spengler <spender@grsecurity.net>
14825 Date: Sat Feb 6 19:50:31 2016 -0500
14826
14827 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
14828 ARM systems reported on the forums
14829
14830 arch/arm/Kconfig | 1 +
14831 arch/arm/include/asm/domain.h | 21 ++++++++-
14832 arch/arm/include/asm/futex.h | 9 ----
14833 arch/arm/include/asm/thread_info.h | 3 +
14834 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
14835 arch/arm/kernel/entry-armv.S | 2 +-
14836 arch/arm/kernel/process.c | 2 +-
14837 arch/arm/mm/alignment.c | 8 ----
14838 security/Kconfig | 1 -
14839 9 files changed, 59 insertions(+), 69 deletions(-)
14840
14841 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
14842 Author: Brad Spengler <spender@grsecurity.net>
14843 Date: Sat Feb 6 11:21:53 2016 -0500
14844
14845 Fix another compiler warning
14846
14847 net/ipv4/tcp_input.c | 2 ++
14848 1 files changed, 2 insertions(+), 0 deletions(-)
14849
14850 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
14851 Author: Brad Spengler <spender@grsecurity.net>
14852 Date: Sat Feb 6 11:16:12 2016 -0500
14853
14854 Fix two compiler warnings
14855
14856 kernel/pid.c | 5 ++---
14857 kernel/ptrace.c | 3 ++-
14858 2 files changed, 4 insertions(+), 4 deletions(-)
14859
14860 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
14861 Author: Brad Spengler <spender@grsecurity.net>
14862 Date: Wed Feb 3 21:22:40 2016 -0500
14863
14864 Apply fix for integer truncation in NUMA init code, reported by
14865 x14sg1 on the forums:
14866 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
14867
14868 arch/x86/mm/numa.c | 2 +-
14869 1 files changed, 1 insertions(+), 1 deletions(-)
14870
14871 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
14872 Merge: a781740 016d0d8
14873 Author: Brad Spengler <spender@grsecurity.net>
14874 Date: Wed Feb 3 21:20:58 2016 -0500
14875
14876 Merge branch 'pax-test' into grsec-test
14877
14878 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
14879 Author: Brad Spengler <spender@grsecurity.net>
14880 Date: Wed Feb 3 21:20:10 2016 -0500
14881
14882 Update to pax-linux-4.3.5-test27.patch:
14883 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
14884 - restored padding in fpregs_state for storing AVX-512 state in the future
14885 - constified netlink_dump_control
14886 - added const version of debug_gimple_stmt for gcc plugins, by Emese
14887 - Emese fixed a bug in initify that could have initified too much
14888 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
14889
14890 arch/x86/include/asm/fpu/types.h | 1 +
14891 arch/x86/include/asm/mmu_context.h | 2 +-
14892 block/blk-cgroup.c | 18 ++--
14893 block/cfq-iosched.c | 4 +-
14894 crypto/crypto_user.c | 8 ++-
14895 drivers/acpi/apei/ghes.c | 6 +-
14896 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
14897 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
14898 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
14899 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
14900 drivers/infiniband/core/netlink.c | 5 +-
14901 drivers/infiniband/hw/cxgb4/device.c | 6 +-
14902 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
14903 drivers/md/bcache/alloc.c | 2 +-
14904 drivers/md/bcache/bcache.h | 10 +-
14905 drivers/md/bcache/btree.c | 2 +-
14906 drivers/md/bcache/io.c | 10 +-
14907 drivers/md/bcache/journal.c | 2 +-
14908 drivers/md/bcache/stats.c | 26 +++---
14909 drivers/md/bcache/stats.h | 16 ++--
14910 drivers/md/bcache/super.c | 2 +-
14911 drivers/md/bcache/sysfs.c | 20 +++---
14912 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
14913 drivers/md/dm-raid.c | 2 +-
14914 drivers/md/md.c | 6 +-
14915 drivers/md/md.h | 2 +-
14916 drivers/md/raid1.c | 2 +-
14917 drivers/md/raid10.c | 2 +-
14918 drivers/md/raid5.c | 4 +-
14919 drivers/media/pci/zoran/zoran.h | 1 -
14920 drivers/media/pci/zoran/zoran_driver.c | 3 -
14921 drivers/net/ethernet/sfc/selftest.c | 20 +++---
14922 drivers/net/irda/vlsi_ir.c | 18 ++--
14923 drivers/net/irda/vlsi_ir.h | 14 ++--
14924 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
14925 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
14926 drivers/net/wireless/ath/carl9170/main.c | 10 +-
14927 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
14928 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
14929 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
14930 drivers/scsi/hptiop.c | 2 -
14931 drivers/scsi/hptiop.h | 1 -
14932 drivers/scsi/ipr.c | 6 +-
14933 drivers/scsi/ipr.h | 2 +-
14934 drivers/scsi/qla2xxx/qla_target.c | 10 +-
14935 drivers/scsi/qla2xxx/qla_target.h | 2 +-
14936 fs/btrfs/ctree.c | 2 +-
14937 fs/btrfs/ctree.h | 4 +-
14938 fs/btrfs/delayed-ref.c | 4 +-
14939 fs/btrfs/disk-io.c | 4 +-
14940 fs/btrfs/file.c | 4 +-
14941 fs/btrfs/raid56.c | 32 ++++----
14942 fs/btrfs/tests/btrfs-tests.c | 2 +-
14943 fs/btrfs/transaction.c | 2 +-
14944 fs/btrfs/tree-log.c | 8 +-
14945 fs/btrfs/volumes.c | 14 ++--
14946 fs/btrfs/volumes.h | 22 +++---
14947 fs/jbd2/commit.c | 2 +-
14948 fs/jbd2/transaction.c | 4 +-
14949 fs/ocfs2/dlm/dlmcommon.h | 4 +-
14950 fs/ocfs2/dlm/dlmdebug.c | 10 +-
14951 fs/ocfs2/dlm/dlmdomain.c | 4 +-
14952 fs/ocfs2/dlm/dlmmaster.c | 4 +-
14953 include/acpi/ghes.h | 2 +-
14954 include/linux/blk-cgroup.h | 24 +++---
14955 include/linux/jbd2.h | 2 +-
14956 include/linux/netlink.h | 12 ++--
14957 include/net/cfg802154.h | 2 +-
14958 include/net/mac80211.h | 2 +-
14959 include/net/neighbour.h | 2 +-
14960 kernel/rcu/tree_plugin.h | 4 +-
14961 net/batman-adv/routing.c | 4 +-
14962 net/batman-adv/soft-interface.c | 2 +-
14963 net/batman-adv/translation-table.c | 14 ++--
14964 net/batman-adv/types.h | 2 +-
14965 net/core/neighbour.c | 14 ++--
14966 net/core/rtnetlink.c | 2 +-
14967 net/ipv4/arp.c | 2 +-
14968 net/ipv4/inet_diag.c | 4 +-
14969 net/ipv4/xfrm4_state.c | 4 +-
14970 net/ipv6/ndisc.c | 2 +-
14971 net/mac80211/cfg.c | 2 +-
14972 net/mac80211/debugfs_key.c | 2 +-
14973 net/mac80211/key.c | 4 +-
14974 net/mac80211/tx.c | 2 +-
14975 net/mac80211/wpa.c | 10 +-
14976 net/mac802154/iface.c | 4 +-
14977 net/netfilter/ipset/ip_set_core.c | 2 +-
14978 net/netfilter/nf_conntrack_netlink.c | 22 +++---
14979 net/netfilter/nf_tables_api.c | 13 ++--
14980 net/netfilter/nfnetlink_acct.c | 7 +-
14981 net/netfilter/nfnetlink_cthelper.c | 2 +-
14982 net/netfilter/nfnetlink_cttimeout.c | 2 +-
14983 net/netlink/af_netlink.c | 10 ++-
14984 net/netlink/diag.c | 2 +-
14985 net/netlink/genetlink.c | 14 ++--
14986 net/packet/af_packet.c | 18 ++--
14987 net/packet/diag.c | 2 +-
14988 net/packet/internal.h | 6 +-
14989 net/unix/diag.c | 2 +-
14990 net/xfrm/xfrm_user.c | 2 +-
14991 security/apparmor/include/policy.h | 2 +-
14992 security/apparmor/policy.c | 4 +-
14993 sound/core/seq/seq_clientmgr.c | 2 +-
14994 sound/core/seq/seq_fifo.c | 6 +-
14995 sound/core/seq/seq_fifo.h | 2 +-
14996 tools/gcc/gcc-common.h | 24 ++++--
14997 tools/gcc/initify_plugin.c | 7 +-
14998 tools/lib/api/Makefile | 2 +-
14999 109 files changed, 399 insertions(+), 391 deletions(-)
15000
15001 commit a7817402ac837b1aee07fac42537a02097055098
15002 Author: Matt Fleming <matt@codeblueprint.co.uk>
15003 Date: Fri Jan 29 11:36:10 2016 +0000
15004
15005 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
15006
15007 There are a couple of nasty truncation bugs lurking in the pageattr
15008 code that can be triggered when mapping EFI regions, e.g. when we pass
15009 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
15010 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
15011
15012 Viorel-Cătălin managed to trigger this bug on his Dell machine that
15013 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
15014 When calling populate_pud() the end of the region gets calculated
15015 incorrectly in the following buggy expression,
15016
15017 end = start + (cpa->numpages << PAGE_SHIFT);
15018
15019 And only 188416 pages are mapped. Next, populate_pud() gets invoked
15020 for a second time because of the loop in __change_page_attr_set_clr(),
15021 only this time no pages get mapped because shifting the remaining
15022 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
15023 loop in __change_page_attr_set_clr() spins forever because we fail to
15024 map progress.
15025
15026 Hitting this bug depends very much on the virtual address we pick to
15027 map the large region at and how many pages we map on the initial run
15028 through the loop. This explains why this issue was only recently hit
15029 with the introduction of commit
15030
15031 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
15032 entries bottom-up at runtime, instead of top-down")
15033
15034 It's interesting to note that safe uses of cpa->numpages do exist in
15035 the pageattr code. If instead of shifting ->numpages we multiply by
15036 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
15037 so the result is unsigned long.
15038
15039 To avoid surprises when users try to convert very large cpa->numpages
15040 values to addresses, change the data type from 'int' to 'unsigned
15041 long', thereby making it suitable for shifting by PAGE_SHIFT without
15042 any type casting.
15043
15044 The alternative would be to make liberal use of casting, but that is
15045 far more likely to cause problems in the future when someone adds more
15046 code and fails to cast properly; this bug was difficult enough to
15047 track down in the first place.
15048
15049 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
15050 Acked-by: Borislav Petkov <bp@alien8.de>
15051 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
15052 Cc: <stable@vger.kernel.org>
15053 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
15054 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
15055 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
15056 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
15057
15058 arch/x86/mm/pageattr.c | 4 ++--
15059 1 files changed, 2 insertions(+), 2 deletions(-)
15060
15061 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
15062 Author: Jan Beulich <JBeulich@suse.com>
15063 Date: Tue Jan 26 04:15:18 2016 -0700
15064
15065 x86/mm: Fix types used in pgprot cacheability flags translations
15066
15067 For PAE kernels "unsigned long" is not suitable to hold page protection
15068 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
15069 few W+X pages getting reported as insecure during boot (observed namely
15070 for the entire initrd range).
15071
15072 Fixes: 281d4078be ("x86: Make page cache mode a real type")
15073 Signed-off-by: Jan Beulich <jbeulich@suse.com>
15074 Reviewed-by: Juergen Gross <JGross@suse.com>
15075 Cc: stable@vger.kernel.org
15076 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
15077 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
15078
15079 arch/x86/include/asm/pgtable_types.h | 6 ++----
15080 1 files changed, 2 insertions(+), 4 deletions(-)
15081
15082 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
15083 Merge: 682d661 f74425b
15084 Author: Brad Spengler <spender@grsecurity.net>
15085 Date: Sun Jan 31 15:06:25 2016 -0500
15086
15087 Merge branch 'pax-test' into grsec-test
15088
15089 Conflicts:
15090 drivers/net/slip/slhc.c
15091 include/linux/sched.h
15092 net/unix/af_unix.c
15093 sound/core/timer.c
15094
15095 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
15096 Merge: d14af1f 849a2d3
15097 Author: Brad Spengler <spender@grsecurity.net>
15098 Date: Sun Jan 31 15:02:55 2016 -0500
15099
15100 Merge branch 'linux-4.3.y' into pax-test
15101
15102 Conflicts:
15103 arch/x86/include/asm/mmu_context.h
15104
15105 commit 682d6611d75542e351c973c8dd74a99d3966c073
15106 Author: Brad Spengler <spender@grsecurity.net>
15107 Date: Sat Jan 30 13:05:03 2016 -0500
15108
15109 Based on a report from Mathias Krause, fix up a number of additional instances
15110 of ulong overflow when passing in values to gr_learn_resource by saturating
15111 to ULONG_MAX
15112
15113 mm/mlock.c | 11 ++++++++---
15114 mm/mmap.c | 16 +++++++++++++---
15115 2 files changed, 21 insertions(+), 6 deletions(-)
15116
15117 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
15118 Author: Jann Horn <jann@thejh.net>
15119 Date: Sat Dec 26 06:00:48 2015 +0100
15120
15121 seccomp: always propagate NO_NEW_PRIVS on tsync
15122
15123 Before this patch, a process with some permissive seccomp filter
15124 that was applied by root without NO_NEW_PRIVS was able to add
15125 more filters to itself without setting NO_NEW_PRIVS by setting
15126 the new filter from a throwaway thread with NO_NEW_PRIVS.
15127
15128 Signed-off-by: Jann Horn <jann@thejh.net>
15129 Cc: stable@vger.kernel.org
15130 Signed-off-by: Kees Cook <keescook@chromium.org>
15131
15132 kernel/seccomp.c | 22 +++++++++++-----------
15133 1 files changed, 11 insertions(+), 11 deletions(-)
15134
15135 commit b85450498a3bbf269441c8963d7574bb3079c838
15136 Merge: 59c216f d14af1f
15137 Author: Brad Spengler <spender@grsecurity.net>
15138 Date: Fri Jan 29 20:54:13 2016 -0500
15139
15140 Merge branch 'pax-test' into grsec-test
15141
15142 commit d14af1f1dd66511f3f0674deee2b572972012b39
15143 Author: Brad Spengler <spender@grsecurity.net>
15144 Date: Fri Jan 29 20:53:51 2016 -0500
15145
15146 Update to pax-linux-4.3.4-test26.patch:
15147 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
15148
15149 fs/cifs/file.c | 2 +-
15150 fs/gfs2/file.c | 2 +-
15151 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
15152 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
15153 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
15154 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
15155 .../size_overflow_transform_core.c | 5 +
15156 7 files changed, 102 insertions(+), 15 deletions(-)
15157
15158 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
15159 Author: Brad Spengler <spender@grsecurity.net>
15160 Date: Wed Jan 27 17:57:21 2016 -0500
15161
15162 Fix a size_overflow report reported by Mathias Krause in our
15163 truncation of an loff_t to an unsigned long when being passed
15164 to gr_learn_resource() (as all resource checks are against unsigned long
15165 values)
15166
15167 fs/attr.c | 5 ++++-
15168 1 files changed, 4 insertions(+), 1 deletions(-)
15169
15170 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
15171 Author: Yuchung Cheng <ycheng@google.com>
15172 Date: Wed Jan 6 12:42:38 2016 -0800
15173
15174 tcp: fix zero cwnd in tcp_cwnd_reduction
15175
15176 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
15177 conditionally") introduced a bug that cwnd may become 0 when both
15178 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
15179 to a div-by-zero if the connection starts another cwnd reduction
15180 phase by setting tp->prior_cwnd to the current cwnd (0) in
15181 tcp_init_cwnd_reduction().
15182
15183 To prevent this we skip PRR operation when nothing is acked or
15184 sacked. Then cwnd must be positive in all cases as long as ssthresh
15185 is positive:
15186
15187 1) The proportional reduction mode
15188 inflight > ssthresh > 0
15189
15190 2) The reduction bound mode
15191 a) inflight == ssthresh > 0
15192
15193 b) inflight < ssthresh
15194 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
15195
15196 Therefore in all cases inflight and sndcnt can not both be 0.
15197 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
15198
15199 In reality this bug is triggered only with a sequence of less common
15200 events. For example, the connection is terminating an ECN-triggered
15201 cwnd reduction with an inflight 0, then it receives reordered/old
15202 ACKs or DSACKs from prior transmission (which acks nothing). Or the
15203 connection is in fast recovery stage that marks everything lost,
15204 but fails to retransmit due to local issues, then receives data
15205 packets from other end which acks nothing.
15206
15207 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
15208 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
15209 Signed-off-by: Yuchung Cheng <ycheng@google.com>
15210 Signed-off-by: Neal Cardwell <ncardwell@google.com>
15211 Signed-off-by: Eric Dumazet <edumazet@google.com>
15212 Signed-off-by: David S. Miller <davem@davemloft.net>
15213
15214 net/ipv4/tcp_input.c | 3 +++
15215 1 files changed, 3 insertions(+), 0 deletions(-)
15216
15217 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
15218 Author: Eric Dumazet <edumazet@google.com>
15219 Date: Sun Jan 24 13:53:50 2016 -0800
15220
15221 af_unix: fix struct pid memory leak
15222
15223 Dmitry reported a struct pid leak detected by a syzkaller program.
15224
15225 Bug happens in unix_stream_recvmsg() when we break the loop when a
15226 signal is pending, without properly releasing scm.
15227
15228 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
15229 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15230 Signed-off-by: Eric Dumazet <edumazet@google.com>
15231 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
15232 Signed-off-by: David S. Miller <davem@davemloft.net>
15233
15234 net/unix/af_unix.c | 1 +
15235 1 files changed, 1 insertions(+), 0 deletions(-)
15236
15237 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
15238 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15239 Date: Fri Jan 22 01:39:43 2016 +0100
15240
15241 pptp: fix illegal memory access caused by multiple bind()s
15242
15243 Several times already this has been reported as kasan reports caused by
15244 syzkaller and trinity and people always looked at RCU races, but it is
15245 much more simple. :)
15246
15247 In case we bind a pptp socket multiple times, we simply add it to
15248 the callid_sock list but don't remove the old binding. Thus the old
15249 socket stays in the bucket with unused call_id indexes and doesn't get
15250 cleaned up. This causes various forms of kasan reports which were hard
15251 to pinpoint.
15252
15253 Simply don't allow multiple binds and correct error handling in
15254 pptp_bind. Also keep sk_state bits in place in pptp_connect.
15255
15256 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
15257 Cc: Dmitry Kozlov <xeb@mail.ru>
15258 Cc: Sasha Levin <sasha.levin@oracle.com>
15259 Cc: Dmitry Vyukov <dvyukov@google.com>
15260 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15261 Cc: Dave Jones <davej@codemonkey.org.uk>
15262 Reported-by: Dave Jones <davej@codemonkey.org.uk>
15263 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15264 Signed-off-by: David S. Miller <davem@davemloft.net>
15265
15266 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
15267 1 files changed, 24 insertions(+), 10 deletions(-)
15268
15269 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
15270 Author: Brad Spengler <spender@grsecurity.net>
15271 Date: Tue Jan 26 18:17:10 2016 -0500
15272
15273 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
15274 wiki but was removed from the config help at some point
15275
15276 grsecurity/Kconfig | 3 +++
15277 1 files changed, 3 insertions(+), 0 deletions(-)
15278
15279 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
15280 Author: Thomas Egerer <hakke_007@gmx.de>
15281 Date: Mon Jan 25 12:58:44 2016 +0100
15282
15283 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
15284
15285 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
15286 to select CRYPTO_ECHAINIV in order to work properly. This solves the
15287 issues caused by a misconfiguration as described in [1].
15288 The original approach, patching crypto/Kconfig was turned down by
15289 Herbert Xu [2].
15290
15291 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
15292 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
15293
15294 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
15295 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
15296 Signed-off-by: David S. Miller <davem@davemloft.net>
15297
15298 net/ipv4/Kconfig | 1 +
15299 net/ipv6/Kconfig | 1 +
15300 2 files changed, 2 insertions(+), 0 deletions(-)
15301
15302 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
15303 Merge: 904114c 6339c1f
15304 Author: Brad Spengler <spender@grsecurity.net>
15305 Date: Tue Jan 26 18:08:40 2016 -0500
15306
15307 Merge branch 'pax-test' into grsec-test
15308
15309 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
15310 Author: Brad Spengler <spender@grsecurity.net>
15311 Date: Tue Jan 26 18:07:51 2016 -0500
15312
15313 Update to pax-linux-4.3.4-test25.patch:
15314 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
15315 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
15316 - fixed a few REFCOUNT false positives in SNMP related statistics
15317
15318 arch/x86/Kconfig | 2 +-
15319 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
15320 include/net/snmp.h | 10 +++++-----
15321 kernel/fork.c | 11 +++++++++--
15322 net/ipv4/proc.c | 8 ++++----
15323 net/ipv6/addrconf.c | 4 ++--
15324 net/ipv6/proc.c | 10 +++++-----
15325 7 files changed, 43 insertions(+), 19 deletions(-)
15326
15327 commit 904114c2fce3fdff5d57e763da56a78960db4e19
15328 Author: Al Viro <viro@zeniv.linux.org.uk>
15329 Date: Fri Jan 22 18:08:52 2016 -0500
15330
15331 make sure that freeing shmem fast symlinks is RCU-delayed
15332
15333 Cc: stable@vger.kernel.org # v4.2+
15334 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15335
15336 include/linux/shmem_fs.h | 5 +----
15337 mm/shmem.c | 9 ++++-----
15338 2 files changed, 5 insertions(+), 9 deletions(-)
15339
15340 commit ab86adee64312a2f827dd516cb199521327943ed
15341 Author: Sasha Levin <sasha.levin@oracle.com>
15342 Date: Mon Jan 18 19:23:51 2016 -0500
15343
15344 netfilter: nf_conntrack: use safer way to lock all buckets
15345
15346 When we need to lock all buckets in the connection hashtable we'd attempt to
15347 lock 1024 spinlocks, which is way more preemption levels than supported by
15348 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
15349 enabled, and if it was - use only 8 buckets(!).
15350
15351 Fix this by using a global lock and synchronize all buckets on it when we
15352 need to lock them all. This is pretty heavyweight, but is only done when we
15353 need to resize the hashtable, and that doesn't happen often enough (or at all).
15354
15355 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15356 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
15357 Reviewed-by: Florian Westphal <fw@strlen.de>
15358 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
15359
15360 Conflicts:
15361
15362 net/netfilter/nfnetlink_cttimeout.c
15363
15364 include/net/netfilter/nf_conntrack_core.h | 8 ++----
15365 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
15366 net/netfilter/nf_conntrack_helper.c | 2 +-
15367 net/netfilter/nf_conntrack_netlink.c | 2 +-
15368 4 files changed, 33 insertions(+), 17 deletions(-)
15369
15370 commit 37014723527225481c720484bb788a1a6358072f
15371 Author: Willy Tarreau <w@1wt.eu>
15372 Date: Mon Jan 18 16:36:09 2016 +0100
15373
15374 pipe: limit the per-user amount of pages allocated in pipes
15375
15376 On no-so-small systems, it is possible for a single process to cause an
15377 OOM condition by filling large pipes with data that are never read. A
15378 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
15379 memory. On small systems it may be tricky to set the pipe max size to
15380 prevent this from happening.
15381
15382 This patch makes it possible to enforce a per-user soft limit above
15383 which new pipes will be limited to a single page, effectively limiting
15384 them to 4 kB each, as well as a hard limit above which no new pipes may
15385 be created for this user. This has the effect of protecting the system
15386 against memory abuse without hurting other users, and still allowing
15387 pipes to work correctly though with less data at once.
15388
15389 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
15390 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
15391 default soft limit allows the default number of FDs per process (1024)
15392 to create pipes of the default size (64kB), thus reaching a limit of 64MB
15393 before starting to create only smaller pipes. With 256 processes limited
15394 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
15395 1084 MB of memory allocated for a user. The hard limit is disabled by
15396 default to avoid breaking existing applications that make intensive use
15397 of pipes (eg: for splicing).
15398
15399 Reported-by: socketpair@gmail.com
15400 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
15401 Mitigates: CVE-2013-4312 (Linux 2.0+)
15402 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
15403 Signed-off-by: Willy Tarreau <w@1wt.eu>
15404 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15405
15406 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
15407 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
15408 include/linux/pipe_fs_i.h | 4 +++
15409 include/linux/sched.h | 1 +
15410 kernel/sysctl.c | 14 ++++++++++++
15411 5 files changed, 87 insertions(+), 2 deletions(-)
15412
15413 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
15414 Merge: 540f2af 7791ecb
15415 Author: Brad Spengler <spender@grsecurity.net>
15416 Date: Sat Jan 23 10:57:11 2016 -0500
15417
15418 Merge branch 'pax-test' into grsec-test
15419
15420 commit 7791ecb84f840343a5646236fd0d34e1fb450793
15421 Merge: 470069c 399588c
15422 Author: Brad Spengler <spender@grsecurity.net>
15423 Date: Sat Jan 23 10:56:47 2016 -0500
15424
15425 Merge branch 'linux-4.3.y' into pax-test
15426
15427 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
15428 Author: Brad Spengler <spender@grsecurity.net>
15429 Date: Tue Jan 19 21:18:47 2016 -0500
15430
15431 Update size_overflow hash table
15432
15433 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
15434 1 files changed, 3 insertions(+), 1 deletions(-)
15435
15436 commit 7e649765626a28437f573f0fbe7a51a04615f041
15437 Author: Brad Spengler <spender@grsecurity.net>
15438 Date: Tue Jan 19 20:29:46 2016 -0500
15439
15440 Backport fix from: https://lkml.org/lkml/2015/12/13/187
15441
15442 fs/ext4/extents.c | 2 +-
15443 1 files changed, 1 insertions(+), 1 deletions(-)
15444
15445 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
15446 Author: Jann Horn <jann@thejh.net>
15447 Date: Tue Jan 5 18:27:30 2016 +0100
15448
15449 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
15450
15451 This replaces all code in fs/compat_ioctl.c that translated
15452 ioctl arguments into a in-kernel structure, then performed
15453 do_ioctl under set_fs(KERNEL_DS), with code that allocates
15454 data on the user stack and can call the VFS ioctl handler
15455 under USER_DS.
15456
15457 This is done as a hardening measure because the caller
15458 does not know what kind of ioctl handler will be invoked,
15459 only that no corresponding compat_ioctl handler exists and
15460 what the ioctl command number is. The accidental
15461 invocation of an unlocked_ioctl handler that unexpectedly
15462 calls copy_to_user could be a severe security issue.
15463
15464 Signed-off-by: Jann Horn <jann@thejh.net>
15465 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15466
15467 Conflicts:
15468
15469 fs/compat_ioctl.c
15470
15471 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
15472 1 files changed, 68 insertions(+), 62 deletions(-)
15473
15474 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
15475 Author: Al Viro <viro@zeniv.linux.org.uk>
15476 Date: Thu Jan 7 09:53:30 2016 -0500
15477
15478 compat_ioctl: don't pass fd around when not needed
15479
15480 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15481
15482 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
15483 fs/internal.h | 7 ++++
15484 fs/ioctl.c | 4 +-
15485 include/linux/fs.h | 2 -
15486 4 files changed, 61 insertions(+), 55 deletions(-)
15487
15488 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
15489 Author: Jann Horn <jann@thejh.net>
15490 Date: Tue Jan 5 18:27:29 2016 +0100
15491
15492 compat_ioctl: don't look up the fd twice
15493
15494 In code in fs/compat_ioctl.c that translates ioctl arguments
15495 into a in-kernel structure, then performs sys_ioctl, possibly
15496 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
15497 calls to do_ioctl calls. do_ioctl is a new function that does
15498 the same thing as sys_ioctl, but doesn't look up the fd again.
15499
15500 This change is made to avoid (potential) security issues
15501 because of ioctl handlers that accept one of the ioctl
15502 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
15503 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
15504 This can happen for multiple reasons:
15505
15506 - The ioctl command number could be reused.
15507 - The ioctl handler might not check the full ioctl
15508 command. This is e.g. true for drm_ioctl.
15509 - The ioctl handler is very special, e.g. cuse_file_ioctl
15510
15511 The real issue is that set_fs(KERNEL_DS) is used here,
15512 but that's fixed in a separate commit
15513 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
15514
15515 This change mitigates potential security issues by
15516 preventing a race that permits invocation of
15517 unlocked_ioctl handlers under KERNEL_DS through compat
15518 code even if a corresponding compat_ioctl handler exists.
15519
15520 So far, no way has been identified to use this to damage
15521 kernel memory without having CAP_SYS_ADMIN in the init ns
15522 (with the capability, doing reads/writes at arbitrary
15523 kernel addresses should be easy through CUSE's ioctl
15524 handler with FUSE_IOCTL_UNRESTRICTED set).
15525
15526 [AV: two missed sys_ioctl() taken care of]
15527
15528 Signed-off-by: Jann Horn <jann@thejh.net>
15529 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15530
15531 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
15532 1 files changed, 68 insertions(+), 54 deletions(-)
15533
15534 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
15535 Author: Vasily Kulikov <segoon@openwall.com>
15536 Date: Fri Jan 15 16:57:55 2016 -0800
15537
15538 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
15539
15540 TIMER_ENTRY_STATIC is defined as a poison pointers which
15541 should point to nowhere. Redefine them using POISON_POINTER_DELTA
15542 arithmetics to make sure they really point to non-mappable area declared
15543 by the target architecture.
15544
15545 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
15546 Acked-by: Thomas Gleixner <tglx@linutronix.de>
15547 Cc: Solar Designer <solar@openwall.com>
15548 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
15549 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
15550 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
15551
15552 Conflicts:
15553
15554 include/linux/poison.h
15555
15556 include/linux/poison.h | 2 +-
15557 1 files changed, 1 insertions(+), 1 deletions(-)
15558
15559 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
15560 Author: Brad Spengler <spender@grsecurity.net>
15561 Date: Tue Jan 19 19:41:44 2016 -0500
15562
15563 Fix ARM compilation, reported by Austin Sepp
15564
15565 grsecurity/grsec_sig.c | 1 +
15566 1 files changed, 1 insertions(+), 0 deletions(-)
15567
15568 commit e15383743443dc43460a2fd73e0db0b608610dca
15569 Author: Takashi Iwai <tiwai@suse.de>
15570 Date: Mon Jan 18 13:52:47 2016 +0100
15571
15572 ALSA: hrtimer: Fix stall by hrtimer_cancel()
15573
15574 hrtimer_cancel() waits for the completion from the callback, thus it
15575 must not be called inside the callback itself. This was already a
15576 problem in the past with ALSA hrtimer driver, and the early commit
15577 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
15578
15579 However, the previous fix is still insufficient: it may still cause a
15580 lockup when the ALSA timer instance reprograms itself in its callback.
15581 Then it invokes the start function even in snd_timer_interrupt() that
15582 is called in hrtimer callback itself, results in a CPU stall. This is
15583 no hypothetical problem but actually triggered by syzkaller fuzzer.
15584
15585 This patch tries to fix the issue again. Now we call
15586 hrtimer_try_to_cancel() at both start and stop functions so that it
15587 won't fall into a deadlock, yet giving some chance to cancel the queue
15588 if the functions have been called outside the callback. The proper
15589 hrtimer_cancel() is called in anyway at closing, so this should be
15590 enough.
15591
15592 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
15593 Cc: <stable@vger.kernel.org>
15594 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15595
15596 sound/core/hrtimer.c | 3 ++-
15597 1 files changed, 2 insertions(+), 1 deletions(-)
15598
15599 commit 12d874daf706e6e7c1ae709141859c809599297e
15600 Author: Takashi Iwai <tiwai@suse.de>
15601 Date: Tue Jan 12 12:38:02 2016 +0100
15602
15603 ALSA: seq: Fix missing NULL check at remove_events ioctl
15604
15605 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
15606 unconditionally even if there is no FIFO assigned, and this leads to
15607 an Oops due to NULL dereference. The fix is just to add a proper NULL
15608 check.
15609
15610 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15611 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15612 Cc: <stable@vger.kernel.org>
15613 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15614
15615 sound/core/seq/seq_clientmgr.c | 2 +-
15616 1 files changed, 1 insertions(+), 1 deletions(-)
15617
15618 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
15619 Author: Takashi Iwai <tiwai@suse.de>
15620 Date: Tue Jan 12 15:36:27 2016 +0100
15621
15622 ALSA: seq: Fix race at timer setup and close
15623
15624 ALSA sequencer code has an open race between the timer setup ioctl and
15625 the close of the client. This was triggered by syzkaller fuzzer, and
15626 a use-after-free was caught there as a result.
15627
15628 This patch papers over it by adding a proper queue->timer_mutex lock
15629 around the timer-related calls in the relevant code path.
15630
15631 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15632 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15633 Cc: <stable@vger.kernel.org>
15634 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15635
15636 sound/core/seq/seq_queue.c | 2 ++
15637 1 files changed, 2 insertions(+), 0 deletions(-)
15638
15639 commit b9e55ab955e59b4a636d78a748be90334a48b485
15640 Author: Takashi Iwai <tiwai@suse.de>
15641 Date: Thu Jan 14 16:30:58 2016 +0100
15642
15643 ALSA: timer: Harden slave timer list handling
15644
15645 A slave timer instance might be still accessible in a racy way while
15646 operating the master instance as it lacks of locking. Since the
15647 master operation is mostly protected with timer->lock, we should cope
15648 with it while changing the slave instance, too. Also, some linked
15649 lists (active_list and ack_list) of slave instances aren't unlinked
15650 immediately at stopping or closing, and this may lead to unexpected
15651 accesses.
15652
15653 This patch tries to address these issues. It adds spin lock of
15654 timer->lock (either from master or slave, which is equivalent) in a
15655 few places. For avoiding a deadlock, we ensure that the global
15656 slave_active_lock is always locked at first before each timer lock.
15657
15658 Also, ack and active_list of slave instances are properly unlinked at
15659 snd_timer_stop() and snd_timer_close().
15660
15661 Last but not least, remove the superfluous call of _snd_timer_stop()
15662 at removing slave links. This is a noop, and calling it may confuse
15663 readers wrt locking. Further cleanup will follow in a later patch.
15664
15665 Actually we've got reports of use-after-free by syzkaller fuzzer, and
15666 this hopefully fixes these issues.
15667
15668 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15669 Cc: <stable@vger.kernel.org>
15670 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15671
15672 sound/core/timer.c | 18 ++++++++++++++----
15673 1 files changed, 14 insertions(+), 4 deletions(-)
15674
15675 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
15676 Author: Takashi Iwai <tiwai@suse.de>
15677 Date: Wed Jan 13 17:48:01 2016 +0100
15678
15679 ALSA: timer: Fix race among timer ioctls
15680
15681 ALSA timer ioctls have an open race and this may lead to a
15682 use-after-free of timer instance object. A simplistic fix is to make
15683 each ioctl exclusive. We have already tread_sem for controlling the
15684 tread, and extend this as a global mutex to be applied to each ioctl.
15685
15686 The downside is, of course, the worse concurrency. But these ioctls
15687 aren't to be parallel accessible, in anyway, so it should be fine to
15688 serialize there.
15689
15690 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15691 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15692 Cc: <stable@vger.kernel.org>
15693 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15694
15695 sound/core/timer.c | 32 +++++++++++++++++++-------------
15696 1 files changed, 19 insertions(+), 13 deletions(-)
15697
15698 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
15699 Author: Takashi Iwai <tiwai@suse.de>
15700 Date: Wed Jan 13 21:35:06 2016 +0100
15701
15702 ALSA: timer: Fix double unlink of active_list
15703
15704 ALSA timer instance object has a couple of linked lists and they are
15705 unlinked unconditionally at snd_timer_stop(). Meanwhile
15706 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
15707 the element list itself unchanged. This ends up with unlinking twice,
15708 and it was caught by syzkaller fuzzer.
15709
15710 The fix is to use list_del_init() variant properly there, too.
15711
15712 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15713 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15714 Cc: <stable@vger.kernel.org>
15715 Signed-off-by: Takashi Iwai <tiwai@suse.de>
15716
15717 sound/core/timer.c | 2 +-
15718 1 files changed, 1 insertions(+), 1 deletions(-)
15719
15720 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
15721 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15722 Date: Mon Jan 18 18:03:48 2016 +0100
15723
15724 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
15725
15726 It was seen that defective configurations of openvswitch could overwrite
15727 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
15728 many recursions within ovs.
15729
15730 This problem arises due to the high stack usage of openvswitch. The rest
15731 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
15732
15733 We use the already existing recursion counter in ovs_execute_actions to
15734 implement an upper bound of 5 recursions.
15735
15736 Cc: Pravin Shelar <pshelar@ovn.org>
15737 Cc: Simon Horman <simon.horman@netronome.com>
15738 Cc: Eric Dumazet <eric.dumazet@gmail.com>
15739 Cc: Simon Horman <simon.horman@netronome.com>
15740 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15741 Signed-off-by: David S. Miller <davem@davemloft.net>
15742
15743 net/openvswitch/actions.c | 19 ++++++++++++++-----
15744 1 files changed, 14 insertions(+), 5 deletions(-)
15745
15746 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
15747 Author: Ursula Braun <ursula.braun@de.ibm.com>
15748 Date: Tue Jan 19 10:41:33 2016 +0100
15749
15750 af_iucv: Validate socket address length in iucv_sock_bind()
15751
15752 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
15753 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15754 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
15755 Signed-off-by: David S. Miller <davem@davemloft.net>
15756
15757 net/iucv/af_iucv.c | 3 +++
15758 1 files changed, 3 insertions(+), 0 deletions(-)
15759
15760 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
15761 Author: Brad Spengler <spender@grsecurity.net>
15762 Date: Tue Jan 19 19:32:54 2016 -0500
15763
15764 Apply the same fix as everyone else for the recent keys vulnerability that is
15765 unexploitable under PAX_REFCOUNT
15766
15767 Make a couple more changes that no one else can/will
15768
15769 include/linux/key-type.h | 4 ++--
15770 ipc/msgutil.c | 4 ++--
15771 security/keys/internal.h | 2 +-
15772 security/keys/process_keys.c | 1 +
15773 4 files changed, 6 insertions(+), 5 deletions(-)
15774
15775 commit b56c3a63f431c193400aee17543021950bd14bc4
15776 Merge: 38b1a3d 470069c
15777 Author: Brad Spengler <spender@grsecurity.net>
15778 Date: Sun Jan 17 18:30:19 2016 -0500
15779
15780 Merge branch 'pax-test' into grsec-test
15781
15782 commit 470069cfedef2180313233d275be5901bd6d1135
15783 Author: Brad Spengler <spender@grsecurity.net>
15784 Date: Sun Jan 17 18:29:59 2016 -0500
15785
15786 Update to pax-linux-4.3.3-test22.patch:
15787 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
15788 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
15789
15790 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
15791 drivers/gpu/drm/drm_pci.c | 3 +++
15792 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
15793 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
15794 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
15795 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
15796 drivers/net/usb/asix_common.c | 3 ++-
15797 include/drm/drmP.h | 1 +
15798 8 files changed, 22 insertions(+), 29 deletions(-)
15799
15800 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
15801 Author: Brad Spengler <spender@grsecurity.net>
15802 Date: Sun Jan 17 12:33:53 2016 -0500
15803
15804 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
15805 mentioned banning execution of suid/sgid binaries, though the kernel
15806 source clearly only mentions banning execution of suid binaries. Since
15807 there's no reason for us to not ban execution of sgid binaries as well,
15808 make the implementation match the Kconfig description.
15809
15810 fs/exec.c | 4 ++--
15811 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
15812 include/linux/sched.h | 4 ++--
15813 3 files changed, 18 insertions(+), 17 deletions(-)
15814
15815 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
15816 Merge: d141a86 ea4a835
15817 Author: Brad Spengler <spender@grsecurity.net>
15818 Date: Sat Jan 16 14:12:22 2016 -0500
15819
15820 Merge branch 'pax-test' into grsec-test
15821
15822 Conflicts:
15823 drivers/gpu/drm/i810/i810_drv.c
15824
15825 commit ea4a835328ada6513ac013986764d6caea8cd348
15826 Author: Brad Spengler <spender@grsecurity.net>
15827 Date: Sat Jan 16 14:11:30 2016 -0500
15828
15829 Update to pax-linux-4.3.3-test21.patch:
15830 - fixed some fallout from the drm_drivers constification, reported by spender
15831
15832 drivers/gpu/drm/armada/armada_drv.c | 3 +--
15833 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
15834 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15835 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
15836 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15837 5 files changed, 8 insertions(+), 6 deletions(-)
15838
15839 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
15840 Author: Brad Spengler <spender@grsecurity.net>
15841 Date: Sat Jan 16 13:16:36 2016 -0500
15842
15843 compile fix
15844
15845 drivers/gpu/drm/i810/i810_dma.c | 2 +-
15846 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
15847 drivers/gpu/drm/i810/i810_drv.h | 2 +-
15848 3 files changed, 5 insertions(+), 3 deletions(-)
15849
15850 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
15851 Merge: 5fa135d bbda879
15852 Author: Brad Spengler <spender@grsecurity.net>
15853 Date: Sat Jan 16 12:59:22 2016 -0500
15854
15855 Merge branch 'pax-test' into grsec-test
15856
15857 commit bbda87914edf63e27fb46670bf3a373f2b963c73
15858 Author: Brad Spengler <spender@grsecurity.net>
15859 Date: Sat Jan 16 12:58:04 2016 -0500
15860
15861 Update to pax-linux-4.3.3-test20.patch:
15862 - constified drm_driver
15863 - Emese fixed a special case in handling __func__ in the initify plugin
15864 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
15865 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
15866
15867 arch/x86/kernel/cpu/perf_event.h | 2 +-
15868 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
15869 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
15870 arch/x86/kernel/uprobes.c | 2 +-
15871 arch/x86/mm/mpx.c | 2 +-
15872 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
15873 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
15874 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
15875 drivers/gpu/drm/drm_pci.c | 6 +-
15876 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
15877 drivers/gpu/drm/i915/i915_dma.c | 2 +-
15878 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
15879 drivers/gpu/drm/i915/i915_drv.h | 2 +-
15880 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
15881 drivers/gpu/drm/mga/mga_drv.c | 5 +-
15882 drivers/gpu/drm/mga/mga_drv.h | 2 +-
15883 drivers/gpu/drm/mga/mga_state.c | 2 +-
15884 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
15885 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
15886 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
15887 drivers/gpu/drm/r128/r128_drv.c | 4 +-
15888 drivers/gpu/drm/r128/r128_drv.h | 2 +-
15889 drivers/gpu/drm/r128/r128_state.c | 2 +-
15890 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
15891 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
15892 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
15893 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
15894 drivers/gpu/drm/savage/savage_bci.c | 2 +-
15895 drivers/gpu/drm/savage/savage_drv.c | 5 +-
15896 drivers/gpu/drm/savage/savage_drv.h | 2 +-
15897 drivers/gpu/drm/sis/sis_drv.c | 5 +-
15898 drivers/gpu/drm/sis/sis_drv.h | 2 +-
15899 drivers/gpu/drm/sis/sis_mm.c | 2 +-
15900 drivers/gpu/drm/via/via_dma.c | 2 +-
15901 drivers/gpu/drm/via/via_drv.c | 5 +-
15902 drivers/gpu/drm/via/via_drv.h | 2 +-
15903 include/drm/drmP.h | 2 +-
15904 mm/slab.c | 2 +-
15905 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
15906 tools/gcc/initify_plugin.c | 15 +++-
15907 .../disable_size_overflow_hash.data | 1 +
15908 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
15909 42 files changed, 156 insertions(+), 110 deletions(-)
15910
15911 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
15912 Author: Brad Spengler <spender@grsecurity.net>
15913 Date: Sat Jan 16 12:19:23 2016 -0500
15914
15915 compile fix
15916
15917 grsecurity/grsec_sig.c | 3 +--
15918 1 files changed, 1 insertions(+), 2 deletions(-)
15919
15920 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
15921 Author: Brad Spengler <spender@grsecurity.net>
15922 Date: Sat Jan 16 12:10:37 2016 -0500
15923
15924 As pointed out by Jann Horn, some distros are starting to circumvent
15925 previous assumptions about the attainability of a user to control
15926 multiple UIDs by handing out suid binaries that allow a user to run
15927 processes (including exploits) under a number of other pre-defined
15928 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
15929 (though it would have to involve some code path that doesn't involve
15930 locks) fix that here by ensuring no more than 8 users on a system can
15931 be banned before a reboot is required. If more are banned, a panic
15932 is triggered.
15933
15934 grsecurity/grsec_sig.c | 8 ++++++++
15935 1 files changed, 8 insertions(+), 0 deletions(-)
15936
15937 commit a8d37776e9521c567ebff6730d49312f72435f08
15938 Author: Eric Dumazet <edumazet@google.com>
15939 Date: Thu Dec 3 11:12:07 2015 -0800
15940
15941 proc: add a reschedule point in proc_readfd_common()
15942
15943 User can pass an arbitrary large buffer to getdents().
15944
15945 It is typically a 32KB buffer used by libc scandir() implementation.
15946
15947 When scanning /proc/{pid}/fd, we can hold cpu way too long,
15948 so add a cond_resched() to be kind with other tasks.
15949
15950 We've seen latencies of more than 50ms on real workloads.
15951
15952 Signed-off-by: Eric Dumazet <edumazet@google.com>
15953 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
15954 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15955
15956 fs/proc/fd.c | 1 +
15957 1 files changed, 1 insertions(+), 0 deletions(-)
15958
15959 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
15960 Author: Rabin Vincent <rabin@rab.in>
15961 Date: Tue Jan 12 20:17:08 2016 +0100
15962
15963 net: bpf: reject invalid shifts
15964
15965 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
15966 constant shift that can't be encoded in the immediate field of the
15967 UBFM/SBFM instructions is passed to the JIT. Since these shifts
15968 amounts, which are negative or >= regsize, are invalid, reject them in
15969 the eBPF verifier and the classic BPF filter checker, for all
15970 architectures.
15971
15972 Signed-off-by: Rabin Vincent <rabin@rab.in>
15973 Acked-by: Alexei Starovoitov <ast@kernel.org>
15974 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15975 Signed-off-by: David S. Miller <davem@davemloft.net>
15976
15977 kernel/bpf/verifier.c | 10 ++++++++++
15978 net/core/filter.c | 5 +++++
15979 2 files changed, 15 insertions(+), 0 deletions(-)
15980
15981 commit c248e115a73496625a1c64660d0eeefd67e55cbf
15982 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15983 Date: Fri Jan 8 11:00:54 2016 -0200
15984
15985 sctp: fix use-after-free in pr_debug statement
15986
15987 Dmitry Vyukov reported a use-after-free in the code expanded by the
15988 macro debug_post_sfx, which is caused by the use of the asoc pointer
15989 after it was freed within sctp_side_effect() scope.
15990
15991 This patch fixes it by allowing sctp_side_effect to clear that asoc
15992 pointer when the TCB is freed.
15993
15994 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
15995 because it will trigger DELETE_TCB too on that same loop.
15996
15997 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
15998 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
15999 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
16000
16001 The macro is already prepared to handle such NULL pointer.
16002
16003 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16004 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16005 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
16006 Signed-off-by: David S. Miller <davem@davemloft.net>
16007
16008 net/sctp/sm_sideeffect.c | 11 ++++++-----
16009 net/sctp/sm_statefuns.c | 17 ++++-------------
16010 2 files changed, 10 insertions(+), 18 deletions(-)
16011
16012 commit 395ea8a9e73e184fc14153a033000bccf4213213
16013 Author: willy tarreau <w@1wt.eu>
16014 Date: Sun Jan 10 07:54:56 2016 +0100
16015
16016 unix: properly account for FDs passed over unix sockets
16017
16018 It is possible for a process to allocate and accumulate far more FDs than
16019 the process' limit by sending them over a unix socket then closing them
16020 to keep the process' fd count low.
16021
16022 This change addresses this problem by keeping track of the number of FDs
16023 in flight per user and preventing non-privileged processes from having
16024 more FDs in flight than their configured FD limit.
16025
16026 Reported-by: socketpair@gmail.com
16027 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
16028 Mitigates: CVE-2013-4312 (Linux 2.0+)
16029 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
16030 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16031 Signed-off-by: Willy Tarreau <w@1wt.eu>
16032 Signed-off-by: David S. Miller <davem@davemloft.net>
16033
16034 include/linux/sched.h | 1 +
16035 net/unix/af_unix.c | 24 ++++++++++++++++++++----
16036 net/unix/garbage.c | 13 ++++++++-----
16037 3 files changed, 29 insertions(+), 9 deletions(-)
16038
16039 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
16040 Author: Sasha Levin <sasha.levin@oracle.com>
16041 Date: Thu Jan 7 14:52:43 2016 -0500
16042
16043 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
16044
16045 proc_dostring() needs an initialized destination string, while the one
16046 provided in proc_sctp_do_hmac_alg() contains stack garbage.
16047
16048 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
16049 accessing invalid memory.
16050
16051 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
16052 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16053 Signed-off-by: David S. Miller <davem@davemloft.net>
16054
16055 net/sctp/sysctl.c | 2 +-
16056 1 files changed, 1 insertions(+), 1 deletions(-)
16057
16058 commit 4014e09faf0fe9054119624ccfff1236e886b554
16059 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
16060 Date: Tue Nov 24 17:13:21 2015 -0500
16061
16062 RDS: fix race condition when sending a message on unbound socket
16063
16064 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
16065
16066 Sasha's found a NULL pointer dereference in the RDS connection code when
16067 sending a message to an apparently unbound socket. The problem is caused
16068 by the code checking if the socket is bound in rds_sendmsg(), which checks
16069 the rs_bound_addr field without taking a lock on the socket. This opens a
16070 race where rs_bound_addr is temporarily set but where the transport is not
16071 in rds_bind(), leading to a NULL pointer dereference when trying to
16072 dereference 'trans' in __rds_conn_create().
16073
16074 Vegard wrote a reproducer for this issue, so kindly ask him to share if
16075 you're interested.
16076
16077 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
16078 with this patch, whereas I could without.
16079
16080 Complete earlier incomplete fix to CVE-2015-6937:
16081
16082 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
16083
16084 Cc: David S. Miller <davem@davemloft.net>
16085
16086 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
16087 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
16088 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16089 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
16090 Signed-off-by: David S. Miller <davem@davemloft.net>
16091 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
16092
16093 Conflicts:
16094
16095 net/rds/send.c
16096
16097 net/rds/connection.c | 6 ------
16098 1 files changed, 0 insertions(+), 6 deletions(-)
16099
16100 commit 206df8d01104344d7588d801016a281a4cd25556
16101 Author: Sasha Levin <sasha.levin@oracle.com>
16102 Date: Tue Sep 8 10:53:40 2015 -0400
16103
16104 RDS: verify the underlying transport exists before creating a connection
16105
16106 There was no verification that an underlying transport exists when creating
16107 a connection, this would cause dereferencing a NULL ptr.
16108
16109 It might happen on sockets that weren't properly bound before attempting to
16110 send a message, which will cause a NULL ptr deref:
16111
16112 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
16113 [135546.051270] Modules linked in:
16114 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
16115 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
16116 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
16117 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
16118 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
16119 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
16120 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
16121 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
16122 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
16123 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
16124 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
16125 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
16126 [135546.064723] Stack:
16127 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
16128 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
16129 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
16130 [135546.068629] Call Trace:
16131 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
16132 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
16133 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
16134 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
16135 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
16136 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
16137 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
16138 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
16139 [135546.076349] ? __might_fault (mm/memory.c:3795)
16140 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
16141 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
16142 [135546.078856] SYSC_sendto (net/socket.c:1657)
16143 [135546.079596] ? SYSC_connect (net/socket.c:1628)
16144 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
16145 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
16146 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16147 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
16148 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
16149 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
16150 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
16151
16152 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
16153 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
16154 Signed-off-by: David S. Miller <davem@davemloft.net>
16155
16156 net/rds/connection.c | 6 ++++++
16157 1 files changed, 6 insertions(+), 0 deletions(-)
16158
16159 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
16160 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
16161 Date: Tue Jan 5 20:32:47 2016 -0500
16162
16163 ftrace/module: Call clean up function when module init fails early
16164
16165 If the module init code fails after calling ftrace_module_init() and before
16166 calling do_init_module(), we can suffer from a memory leak. This is because
16167 ftrace_module_init() allocates pages to store the locations that ftrace
16168 hooks are placed in the module text. If do_init_module() fails, it still
16169 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
16170 the pages it allocated for the module. But if load_module() fails before
16171 then, the pages allocated by ftrace_module_init() will never be freed.
16172
16173 Call ftrace_release_mod() on the module if load_module() fails before
16174 getting to do_init_module().
16175
16176 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
16177
16178 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
16179 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
16180 Cc: stable@vger.kernel.org # v2.6.38+
16181 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
16182 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16183
16184 include/linux/ftrace.h | 1 +
16185 kernel/module.c | 6 ++++++
16186 2 files changed, 7 insertions(+), 0 deletions(-)
16187
16188 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
16189 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
16190 Date: Wed Jan 6 00:18:48 2016 -0800
16191
16192 net: possible use after free in dst_release
16193
16194 dst_release should not access dst->flags after decrementing
16195 __refcnt to 0. The dst_entry may be in dst_busy_list and
16196 dst_gc_task may dst_destroy it before dst_release gets a chance
16197 to access dst->flags.
16198
16199 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
16200 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
16201 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
16202 Acked-by: Eric Dumazet <edumazet@google.com>
16203 Signed-off-by: David S. Miller <davem@davemloft.net>
16204
16205 net/core/dst.c | 3 ++-
16206 1 files changed, 2 insertions(+), 1 deletions(-)
16207
16208 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
16209 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
16210 Date: Wed Jan 6 14:55:02 2016 +0000
16211
16212 mkiss: fix scribble on freed memory
16213
16214 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
16215 scribble on free memory but added a new one which allows the user to
16216 scribble even more and user controlled data into freed space.
16217
16218 As with 6pack we need to halt the queue before we free the buffers, because
16219 the transmit logic is not protected by the semaphore.
16220
16221 Signed-off-by: Alan Cox <alan@linux.intel.com>
16222 Signed-off-by: David S. Miller <davem@davemloft.net>
16223
16224 drivers/net/hamradio/mkiss.c | 5 +++++
16225 1 files changed, 5 insertions(+), 0 deletions(-)
16226
16227 commit 5cbbcbd32dc1949470f61d342503808fa9555276
16228 Author: David Miller <davem@davemloft.net>
16229 Date: Thu Dec 17 16:05:49 2015 -0500
16230
16231 mkiss: Fix use after free in mkiss_close().
16232
16233 Need to do the unregister_device() after all references to the driver
16234 private have been done.
16235
16236 Signed-off-by: David S. Miller <davem@davemloft.net>
16237
16238 drivers/net/hamradio/mkiss.c | 4 ++--
16239 1 files changed, 2 insertions(+), 2 deletions(-)
16240
16241 commit b00171576794a98068e069a660f0991a6a5190ff
16242 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
16243 Date: Tue Jan 5 11:51:25 2016 +0000
16244
16245 6pack: fix free memory scribbles
16246
16247 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
16248 memory scribble but in doing so replaced it with a different one that allows
16249 the user to control the data and scribble even more.
16250
16251 sixpack_close is called by the tty layer in tty context. The tty context is
16252 protected by sp_get() and sp_put(). However network layer activity via
16253 sp_xmit() is not protected this way. We must therefore stop the queue
16254 otherwise the user gets to dump a buffer mostly of their choice into freed
16255 kernel pages.
16256
16257 Signed-off-by: Alan Cox <alan@linux.intel.com>
16258 Signed-off-by: David S. Miller <davem@davemloft.net>
16259
16260 drivers/net/hamradio/6pack.c | 6 ++++++
16261 1 files changed, 6 insertions(+), 0 deletions(-)
16262
16263 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
16264 Author: David Miller <davem@davemloft.net>
16265 Date: Thu Dec 17 16:05:32 2015 -0500
16266
16267 6pack: Fix use after free in sixpack_close().
16268
16269 Need to do the unregister_device() after all references to the driver
16270 private have been done.
16271
16272 Also we need to use del_timer_sync() for the timers so that we don't
16273 have any asynchronous references after the unregister.
16274
16275 Signed-off-by: David S. Miller <davem@davemloft.net>
16276
16277 drivers/net/hamradio/6pack.c | 8 ++++----
16278 1 files changed, 4 insertions(+), 4 deletions(-)
16279
16280 commit 4f9d532742656b3613d579220fd10c78f24ba37b
16281 Author: Rabin Vincent <rabin@rab.in>
16282 Date: Tue Jan 5 16:23:07 2016 +0100
16283
16284 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
16285
16286 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
16287 instructions since it XORs A with X while all the others replace A with
16288 some loaded value. All the BPF JITs fail to clear A if this is used as
16289 the first instruction in a filter. This was found using american fuzzy
16290 lop.
16291
16292 Add a helper to determine if A needs to be cleared given the first
16293 instruction in a filter, and use this in the JITs. Except for ARM, the
16294 rest have only been compile-tested.
16295
16296 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
16297 Signed-off-by: Rabin Vincent <rabin@rab.in>
16298 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16299 Acked-by: Alexei Starovoitov <ast@kernel.org>
16300 Signed-off-by: David S. Miller <davem@davemloft.net>
16301
16302 arch/arm/net/bpf_jit_32.c | 16 +---------------
16303 arch/mips/net/bpf_jit.c | 16 +---------------
16304 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
16305 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
16306 include/linux/filter.h | 19 +++++++++++++++++++
16307 5 files changed, 25 insertions(+), 56 deletions(-)
16308
16309 commit 570d88f8acfffda92b89ae2e1c47320d47256034
16310 Author: John Fastabend <john.fastabend@gmail.com>
16311 Date: Tue Jan 5 09:11:36 2016 -0800
16312
16313 net: sched: fix missing free per cpu on qstats
16314
16315 When a qdisc is using per cpu stats (currently just the ingress
16316 qdisc) only the bstats are being freed. This also free's the qstats.
16317
16318 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
16319 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
16320 Acked-by: Eric Dumazet <edumazet@google.com>
16321 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
16322 Signed-off-by: David S. Miller <davem@davemloft.net>
16323
16324 net/sched/sch_generic.c | 4 +++-
16325 1 files changed, 3 insertions(+), 1 deletions(-)
16326
16327 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
16328 Author: Rabin Vincent <rabin@rab.in>
16329 Date: Tue Jan 5 18:34:04 2016 +0100
16330
16331 ARM: net: bpf: fix zero right shift
16332
16333 The LSR instruction cannot be used to perform a zero right shift since a
16334 0 as the immediate value (imm5) in the LSR instruction encoding means
16335 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
16336
16337 Make the JIT skip generation of the LSR if a zero-shift is requested.
16338
16339 This was found using american fuzzy lop.
16340
16341 Signed-off-by: Rabin Vincent <rabin@rab.in>
16342 Acked-by: Alexei Starovoitov <ast@kernel.org>
16343 Signed-off-by: David S. Miller <davem@davemloft.net>
16344
16345 arch/arm/net/bpf_jit_32.c | 3 ++-
16346 1 files changed, 2 insertions(+), 1 deletions(-)
16347
16348 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
16349 Author: Brad Spengler <spender@grsecurity.net>
16350 Date: Wed Jan 6 20:35:57 2016 -0500
16351
16352 Don't perform hidden lookups in RBAC against the directory of
16353 a file being opened with O_CREAT, reported by Karl Witt
16354
16355 Conflicts:
16356
16357 fs/namei.c
16358
16359 fs/namei.c | 3 ---
16360 1 files changed, 0 insertions(+), 3 deletions(-)
16361
16362 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
16363 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16364 Date: Tue Jan 5 10:46:00 2016 +0100
16365
16366 bridge: Only call /sbin/bridge-stp for the initial network namespace
16367
16368 [I stole this patch from Eric Biederman. He wrote:]
16369
16370 > There is no defined mechanism to pass network namespace information
16371 > into /sbin/bridge-stp therefore don't even try to invoke it except
16372 > for bridge devices in the initial network namespace.
16373 >
16374 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
16375 > invoked for any network device name which if /sbin/bridge-stp does not
16376 > guard against unreasonable arguments or being invoked twice on the
16377 > same network device could cause problems.
16378
16379 [Hannes: changed patch using netns_eq]
16380
16381 Cc: Eric W. Biederman <ebiederm@xmission.com>
16382 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
16383 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16384 Signed-off-by: David S. Miller <davem@davemloft.net>
16385
16386 net/bridge/br_stp_if.c | 5 ++++-
16387 1 files changed, 4 insertions(+), 1 deletions(-)
16388
16389 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
16390 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16391 Date: Wed Dec 23 16:28:40 2015 -0200
16392
16393 sctp: use GFP_USER for user-controlled kmalloc
16394
16395 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16396 missed two other spots.
16397
16398 For connectx, as it's more likely to be used by kernel users of the API,
16399 it detects if GFP_USER should be used or not.
16400
16401 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
16402 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16403 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
16404 Signed-off-by: David S. Miller <davem@davemloft.net>
16405
16406 net/sctp/socket.c | 9 ++++++---
16407 1 files changed, 6 insertions(+), 3 deletions(-)
16408
16409 commit 5718a1f63c41fc156f729783423b002763779d04
16410 Author: Florian Westphal <fw@strlen.de>
16411 Date: Thu Dec 31 14:26:33 2015 +0100
16412
16413 connector: bump skb->users before callback invocation
16414
16415 Dmitry reports memleak with syskaller program.
16416 Problem is that connector bumps skb usecount but might not invoke callback.
16417
16418 So move skb_get to where we invoke the callback.
16419
16420 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16421 Signed-off-by: Florian Westphal <fw@strlen.de>
16422 Signed-off-by: David S. Miller <davem@davemloft.net>
16423
16424 drivers/connector/connector.c | 11 +++--------
16425 1 files changed, 3 insertions(+), 8 deletions(-)
16426
16427 commit 2e6372e6a97f8d642416899861f91777f44f13b7
16428 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16429 Date: Sun Jan 3 18:56:38 2016 +0000
16430
16431 af_unix: Fix splice-bind deadlock
16432
16433 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
16434 system call and AF_UNIX sockets,
16435
16436 http://lists.openwall.net/netdev/2015/11/06/24
16437
16438 The situation was analyzed as
16439
16440 (a while ago) A: socketpair()
16441 B: splice() from a pipe to /mnt/regular_file
16442 does sb_start_write() on /mnt
16443 C: try to freeze /mnt
16444 wait for B to finish with /mnt
16445 A: bind() try to bind our socket to /mnt/new_socket_name
16446 lock our socket, see it not bound yet
16447 decide that it needs to create something in /mnt
16448 try to do sb_start_write() on /mnt, block (it's
16449 waiting for C).
16450 D: splice() from the same pipe to our socket
16451 lock the pipe, see that socket is connected
16452 try to lock the socket, block waiting for A
16453 B: get around to actually feeding a chunk from
16454 pipe to file, try to lock the pipe. Deadlock.
16455
16456 on 2015/11/10 by Al Viro,
16457
16458 http://lists.openwall.net/netdev/2015/11/10/4
16459
16460 The patch fixes this by removing the kern_path_create related code from
16461 unix_mknod and executing it as part of unix_bind prior acquiring the
16462 readlock of the socket in question. This means that A (as used above)
16463 will sb_start_write on /mnt before it acquires the readlock, hence, it
16464 won't indirectly block B which first did a sb_start_write and then
16465 waited for a thread trying to acquire the readlock. Consequently, A
16466 being blocked by C waiting for B won't cause a deadlock anymore
16467 (effectively, both A and B acquire two locks in opposite order in the
16468 situation described above).
16469
16470 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
16471
16472 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
16473 Signed-off-by: David S. Miller <davem@davemloft.net>
16474
16475 Conflicts:
16476
16477 net/unix/af_unix.c
16478
16479 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
16480 1 files changed, 42 insertions(+), 28 deletions(-)
16481
16482 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
16483 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
16484 Date: Thu Dec 31 13:11:28 2015 +0800
16485
16486 tracing: Fix setting of start_index in find_next()
16487
16488 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
16489 panic at t_show.
16490
16491 general protection fault: 0000 [#1] PREEMPT SMP
16492 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
16493 RIP: 0010:[<ffffffff811375b2>]
16494 [<ffffffff811375b2>] t_show+0x22/0xe0
16495 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
16496 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
16497 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
16498 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
16499 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
16500 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
16501 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
16502 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
16503 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
16504 Call Trace:
16505 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
16506 [<ffffffff811b749b>] vfs_read+0x9b/0x160
16507 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
16508 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
16509 ---[ end trace 5bd9eb630614861e ]---
16510 Kernel panic - not syncing: Fatal exception
16511
16512 When the first time find_next calls find_next_mod_format, it should
16513 iterate the trace_bprintk_fmt_list to find the first print format of
16514 the module. However in current code, start_index is smaller than *pos
16515 at first, and code will not iterate the list. Latter container_of will
16516 get the wrong address with former v, which will cause mod_fmt be a
16517 meaningless object and so is the returned mod_fmt->fmt.
16518
16519 This patch will fix it by correcting the start_index. After fixed,
16520 when the first time calls find_next_mod_format, start_index will be
16521 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
16522 get the right module printk format, so is the returned mod_fmt->fmt.
16523
16524 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
16525
16526 Cc: stable@vger.kernel.org # 3.12+
16527 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
16528 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
16529 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
16530
16531 kernel/trace/trace_printk.c | 1 +
16532 1 files changed, 1 insertions(+), 0 deletions(-)
16533
16534 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
16535 Author: Al Viro <viro@zeniv.linux.org.uk>
16536 Date: Mon Dec 28 20:47:08 2015 -0500
16537
16538 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
16539
16540 Cc: stable@vger.kernel.org # 3.15+
16541 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
16542 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
16543
16544 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
16545 1 files changed, 37 insertions(+), 36 deletions(-)
16546
16547 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
16548 Merge: de243c2 3adc55a
16549 Author: Brad Spengler <spender@grsecurity.net>
16550 Date: Tue Jan 5 18:10:10 2016 -0500
16551
16552 Merge branch 'pax-test' into grsec-test
16553
16554 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
16555 Author: Brad Spengler <spender@grsecurity.net>
16556 Date: Tue Jan 5 18:08:53 2016 -0500
16557
16558 Update to pax-linux-4.3.3-test16.patch:
16559 - small cleanup in entry_64.S on x86
16560 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
16561 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
16562 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
16563 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
16564 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
16565
16566 arch/x86/entry/entry_64.S | 60 +++++-----
16567 arch/x86/kernel/alternative.c | 2 +-
16568 arch/x86/kvm/emulate.c | 4 +-
16569 tools/gcc/initify_plugin.c | 123 +++++++++----------
16570 .../disable_size_overflow_hash.data | 4 +-
16571 .../size_overflow_plugin/size_overflow_hash.data | 2 -
16572 6 files changed, 93 insertions(+), 102 deletions(-)
16573
16574 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
16575 Author: Brad Spengler <spender@grsecurity.net>
16576 Date: Tue Dec 29 18:01:24 2015 -0500
16577
16578 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
16579 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
16580 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
16581
16582 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
16583 against suid/sgid attacks and the flaw above would only eliminate the extra
16584 entropy provided for the brk-managed heap, still leaving it with the minimum
16585 of 16-bit entropy for mmap on x86 and 28 on x64.
16586
16587 mm/mmap.c | 2 +-
16588 1 files changed, 1 insertions(+), 1 deletions(-)
16589
16590 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
16591 Merge: 436201b 2584340
16592 Author: Brad Spengler <spender@grsecurity.net>
16593 Date: Mon Dec 28 20:30:01 2015 -0500
16594
16595 Merge branch 'pax-test' into grsec-test
16596
16597 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
16598 Author: Brad Spengler <spender@grsecurity.net>
16599 Date: Mon Dec 28 20:29:28 2015 -0500
16600
16601 Update to pax-linux-4.3.3-test14.patch:
16602 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
16603 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
16604 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
16605 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
16606 - fixed an assert in the initify plugin that triggered in vic_register on arm
16607
16608 arch/arm/include/asm/atomic.h | 7 +++++--
16609 arch/arm/include/asm/domain.h | 5 ++---
16610 arch/x86/kernel/tboot.c | 14 +++++++++-----
16611 drivers/hv/channel.c | 4 +---
16612 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
16613 drivers/net/hyperv/rndis_filter.c | 3 +--
16614 fs/exec.c | 4 ++--
16615 include/linux/atomic.h | 15 ---------------
16616 net/core/skbuff.c | 3 ++-
16617 tools/gcc/initify_plugin.c | 4 +++-
16618 10 files changed, 26 insertions(+), 35 deletions(-)
16619
16620 commit 436201b6626b488d173c8076447000077c27b84a
16621 Author: David Howells <dhowells@redhat.com>
16622 Date: Fri Dec 18 01:34:26 2015 +0000
16623
16624 KEYS: Fix race between read and revoke
16625
16626 This fixes CVE-2015-7550.
16627
16628 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
16629 happens between keyctl_read() checking the validity of a key and the key's
16630 semaphore being taken, then the key type read method will see a revoked key.
16631
16632 This causes a problem for the user-defined key type because it assumes in
16633 its read method that there will always be a payload in a non-revoked key
16634 and doesn't check for a NULL pointer.
16635
16636 Fix this by making keyctl_read() check the validity of a key after taking
16637 semaphore instead of before.
16638
16639 I think the bug was introduced with the original keyrings code.
16640
16641 This was discovered by a multithreaded test program generated by syzkaller
16642 (http://github.com/google/syzkaller). Here's a cleaned up version:
16643
16644 #include <sys/types.h>
16645 #include <keyutils.h>
16646 #include <pthread.h>
16647 void *thr0(void *arg)
16648 {
16649 key_serial_t key = (unsigned long)arg;
16650 keyctl_revoke(key);
16651 return 0;
16652 }
16653 void *thr1(void *arg)
16654 {
16655 key_serial_t key = (unsigned long)arg;
16656 char buffer[16];
16657 keyctl_read(key, buffer, 16);
16658 return 0;
16659 }
16660 int main()
16661 {
16662 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
16663 pthread_t th[5];
16664 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
16665 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
16666 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
16667 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
16668 pthread_join(th[0], 0);
16669 pthread_join(th[1], 0);
16670 pthread_join(th[2], 0);
16671 pthread_join(th[3], 0);
16672 return 0;
16673 }
16674
16675 Build as:
16676
16677 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
16678
16679 Run as:
16680
16681 while keyctl-race; do :; done
16682
16683 as it may need several iterations to crash the kernel. The crash can be
16684 summarised as:
16685
16686 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
16687 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
16688 ...
16689 Call Trace:
16690 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
16691 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
16692 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
16693
16694 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16695 Signed-off-by: David Howells <dhowells@redhat.com>
16696 Tested-by: Dmitry Vyukov <dvyukov@google.com>
16697 Cc: stable@vger.kernel.org
16698 Signed-off-by: James Morris <james.l.morris@oracle.com>
16699
16700 security/keys/keyctl.c | 18 +++++++++---------
16701 1 files changed, 9 insertions(+), 9 deletions(-)
16702
16703 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
16704 Author: Brad Spengler <spender@grsecurity.net>
16705 Date: Tue Dec 22 20:44:01 2015 -0500
16706
16707 Add new kernel command-line param: pax_size_overflow_report_only
16708 If a user triggers a size_overflow violation that makes it difficult
16709 to obtain the call trace without serial console/net console, they can
16710 use this option to provide that information to us
16711
16712 Documentation/kernel-parameters.txt | 5 +++++
16713 fs/exec.c | 12 +++++++++---
16714 init/main.c | 11 +++++++++++
16715 3 files changed, 25 insertions(+), 3 deletions(-)
16716
16717 commit 4254a8da5851df8c08cdca5c392916e8c105408d
16718 Author: WANG Cong <xiyou.wangcong@gmail.com>
16719 Date: Mon Dec 21 10:55:45 2015 -0800
16720
16721 addrconf: always initialize sysctl table data
16722
16723 When sysctl performs restrict writes, it allows to write from
16724 a middle position of a sysctl file, which requires us to initialize
16725 the table data before calling proc_dostring() for the write case.
16726
16727 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
16728 Reported-by: Sasha Levin <sasha.levin@oracle.com>
16729 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16730 Tested-by: Sasha Levin <sasha.levin@oracle.com>
16731 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16732 Signed-off-by: David S. Miller <davem@davemloft.net>
16733
16734 net/ipv6/addrconf.c | 11 ++++-------
16735 1 files changed, 4 insertions(+), 7 deletions(-)
16736
16737 commit f8002863fb06c363180637046947a78a6ccb3d33
16738 Author: WANG Cong <xiyou.wangcong@gmail.com>
16739 Date: Wed Dec 16 23:39:04 2015 -0800
16740
16741 net: check both type and procotol for tcp sockets
16742
16743 Dmitry reported the following out-of-bound access:
16744
16745 Call Trace:
16746 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
16747 mm/kasan/report.c:294
16748 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
16749 [< inline >] SYSC_setsockopt net/socket.c:1746
16750 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
16751 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
16752 arch/x86/entry/entry_64.S:185
16753
16754 This is because we mistake a raw socket as a tcp socket.
16755 We should check both sk->sk_type and sk->sk_protocol to ensure
16756 it is a tcp socket.
16757
16758 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
16759
16760 Reported-by: Dmitry Vyukov <dvyukov@google.com>
16761 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
16762 Cc: Eric Dumazet <eric.dumazet@gmail.com>
16763 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
16764 Acked-by: Willem de Bruijn <willemb@google.com>
16765 Signed-off-by: David S. Miller <davem@davemloft.net>
16766
16767 net/core/skbuff.c | 3 ++-
16768 net/core/sock.c | 3 ++-
16769 2 files changed, 4 insertions(+), 2 deletions(-)
16770
16771 commit bd6b3399804470a4ad8f34229469ca149dceba3d
16772 Author: Colin Ian King <colin.king@canonical.com>
16773 Date: Fri Dec 18 14:22:01 2015 -0800
16774
16775 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
16776
16777 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
16778 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
16779 the setting of ret after the get_proc_task call and incorrectly left it as
16780 -ESRCH. Instead, return 0 when successful.
16781
16782 Example breakage:
16783
16784 echo 0 > /proc/self/coredump_filter
16785 bash: echo: write error: No such process
16786
16787 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
16788 Signed-off-by: Colin Ian King <colin.king@canonical.com>
16789 Acked-by: Kees Cook <keescook@chromium.org>
16790 Cc: <stable@vger.kernel.org> [4.3+]
16791 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
16792 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
16793
16794 fs/proc/base.c | 1 +
16795 1 files changed, 1 insertions(+), 0 deletions(-)
16796
16797 commit b28aca2b99ed08546778355fb9402c503ff9b29e
16798 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
16799 Date: Tue Dec 22 10:23:44 2015 -0700
16800
16801 block: ensure to split after potentially bouncing a bio
16802
16803 blk_queue_bio() does split then bounce, which makes the segment
16804 counting based on pages before bouncing and could go wrong. Move
16805 the split to after bouncing, like we do for blk-mq, and the we
16806 fix the issue of having the bio count for segments be wrong.
16807
16808 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
16809 Cc: stable@vger.kernel.org
16810 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
16811 Signed-off-by: Jens Axboe <axboe@fb.com>
16812
16813 block/blk-core.c | 4 ++--
16814 1 files changed, 2 insertions(+), 2 deletions(-)
16815
16816 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
16817 Merge: f6f63ae ec72fa5
16818 Author: Brad Spengler <spender@grsecurity.net>
16819 Date: Tue Dec 22 19:46:26 2015 -0500
16820
16821 Merge branch 'pax-test' into grsec-test
16822
16823 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
16824 Author: Brad Spengler <spender@grsecurity.net>
16825 Date: Tue Dec 22 19:45:51 2015 -0500
16826
16827 Update to pax-linux-4.3.3-test13.patch:
16828 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
16829 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
16830
16831 arch/arm/mm/fault.c | 2 +-
16832 arch/x86/mm/fault.c | 2 +-
16833 fs/btrfs/extent_map.c | 8 ++++++--
16834 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
16835 4 files changed, 11 insertions(+), 5 deletions(-)
16836
16837 commit f6f63ae154cd45028add1dc41957878060d77fbf
16838 Author: Brad Spengler <spender@grsecurity.net>
16839 Date: Thu Dec 17 18:43:44 2015 -0500
16840
16841 ptrace_has_cap() checks whether the current process should be
16842 treated as having a certain capability for ptrace checks
16843 against another process. Until now, this was equivalent to
16844 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
16845
16846 However, if a root-owned process wants to enter a user
16847 namespace for some reason without knowing who owns it and
16848 therefore can't change to the namespace owner's uid and gid
16849 before entering, as soon as it has entered the namespace,
16850 the namespace owner can attach to it via ptrace and thereby
16851 gain access to its uid and gid.
16852
16853 While it is possible for the entering process to switch to
16854 the uid of a claimed namespace owner before entering,
16855 causing the attempt to enter to fail if the claimed uid is
16856 wrong, this doesn't solve the problem of determining an
16857 appropriate gid.
16858
16859 With this change, the entering process can first enter the
16860 namespace and then safely inspect the namespace's
16861 properties, e.g. through /proc/self/{uid_map,gid_map},
16862 assuming that the namespace owner doesn't have access to
16863 uid 0.
16864 Signed-off-by: Jann Horn <jann@thejh.net>
16865
16866 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
16867 1 files changed, 25 insertions(+), 5 deletions(-)
16868
16869 commit e314f0fb63020f61543b401ff594e953c2c304e5
16870 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
16871 Date: Tue Dec 15 10:46:17 2015 -0800
16872
16873 net: fix uninitialized variable issue
16874
16875 msg_iocb needs to be initialized on the recv/recvfrom path.
16876 Otherwise afalg will wrongly interpret it as an async call.
16877
16878 Cc: stable@vger.kernel.org
16879 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
16880 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
16881 Signed-off-by: David S. Miller <davem@davemloft.net>
16882
16883 net/socket.c | 1 +
16884 1 files changed, 1 insertions(+), 0 deletions(-)
16885
16886 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
16887 Merge: dfa764c 142edcf
16888 Author: Brad Spengler <spender@grsecurity.net>
16889 Date: Wed Dec 16 21:01:17 2015 -0500
16890
16891 Merge branch 'pax-test' into grsec-test
16892
16893 commit 142edcf1005a57fb8887823565cf0bafad2f313c
16894 Author: Brad Spengler <spender@grsecurity.net>
16895 Date: Wed Dec 16 21:00:57 2015 -0500
16896
16897 Update to pax-linux-4.3.3-test12.patch:
16898 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
16899 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
16900
16901 drivers/tty/n_tty.c | 16 ++++++++--------
16902 .../disable_size_overflow_hash.data | 2 ++
16903 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
16904 3 files changed, 12 insertions(+), 12 deletions(-)
16905
16906 commit dfa764cc549892a5bfc1083cac78b99032cae577
16907 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
16908 Date: Tue Dec 15 22:59:12 2015 +0100
16909
16910 ipv6: automatically enable stable privacy mode if stable_secret set
16911
16912 Bjørn reported that while we switch all interfaces to privacy stable mode
16913 when setting the secret, we don't set this mode for new interfaces. This
16914 does not make sense, so change this behaviour.
16915
16916 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
16917 Reported-by: Bjørn Mork <bjorn@mork.no>
16918 Cc: Bjørn Mork <bjorn@mork.no>
16919 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
16920 Signed-off-by: David S. Miller <davem@davemloft.net>
16921
16922 net/ipv6/addrconf.c | 6 ++++++
16923 1 files changed, 6 insertions(+), 0 deletions(-)
16924
16925 commit c2815a1fee03f222273e77c14e43f960da06f35a
16926 Author: Brad Spengler <spender@grsecurity.net>
16927 Date: Wed Dec 16 13:03:38 2015 -0500
16928
16929 Work around upstream limitation on the number of thread info flags causing a compilation error
16930 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
16931
16932 arch/arm/kernel/entry-common.S | 8 ++++++--
16933 1 files changed, 6 insertions(+), 2 deletions(-)
16934
16935 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
16936 Author: Brad Spengler <spender@grsecurity.net>
16937 Date: Tue Dec 15 19:03:41 2015 -0500
16938
16939 Initial import of grsecurity 3.1 for Linux 4.3.3
16940
16941 Documentation/dontdiff | 2 +
16942 Documentation/kernel-parameters.txt | 7 +
16943 Documentation/sysctl/kernel.txt | 15 +
16944 Makefile | 18 +-
16945 arch/alpha/include/asm/cache.h | 4 +-
16946 arch/alpha/kernel/osf_sys.c | 12 +-
16947 arch/arc/Kconfig | 1 +
16948 arch/arm/Kconfig | 1 +
16949 arch/arm/Kconfig.debug | 1 +
16950 arch/arm/include/asm/thread_info.h | 7 +-
16951 arch/arm/kernel/process.c | 4 +-
16952 arch/arm/kernel/ptrace.c | 9 +
16953 arch/arm/kernel/traps.c | 7 +-
16954 arch/arm/mm/Kconfig | 2 +-
16955 arch/arm/mm/fault.c | 40 +-
16956 arch/arm/mm/mmap.c | 8 +-
16957 arch/arm/net/bpf_jit_32.c | 51 +-
16958 arch/arm64/Kconfig.debug | 1 +
16959 arch/avr32/include/asm/cache.h | 4 +-
16960 arch/blackfin/Kconfig.debug | 1 +
16961 arch/blackfin/include/asm/cache.h | 3 +-
16962 arch/cris/include/arch-v10/arch/cache.h | 3 +-
16963 arch/cris/include/arch-v32/arch/cache.h | 3 +-
16964 arch/frv/include/asm/cache.h | 3 +-
16965 arch/frv/mm/elf-fdpic.c | 4 +-
16966 arch/hexagon/include/asm/cache.h | 6 +-
16967 arch/ia64/Kconfig | 1 +
16968 arch/ia64/include/asm/cache.h | 3 +-
16969 arch/ia64/kernel/sys_ia64.c | 2 +
16970 arch/ia64/mm/hugetlbpage.c | 2 +
16971 arch/m32r/include/asm/cache.h | 4 +-
16972 arch/m68k/include/asm/cache.h | 4 +-
16973 arch/metag/mm/hugetlbpage.c | 1 +
16974 arch/microblaze/include/asm/cache.h | 3 +-
16975 arch/mips/Kconfig | 1 +
16976 arch/mips/include/asm/cache.h | 3 +-
16977 arch/mips/include/asm/thread_info.h | 11 +-
16978 arch/mips/kernel/irq.c | 3 +
16979 arch/mips/kernel/ptrace.c | 9 +
16980 arch/mips/mm/mmap.c | 4 +-
16981 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
16982 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
16983 arch/openrisc/include/asm/cache.h | 4 +-
16984 arch/parisc/include/asm/cache.h | 5 +-
16985 arch/parisc/kernel/sys_parisc.c | 4 +
16986 arch/powerpc/Kconfig | 1 +
16987 arch/powerpc/include/asm/cache.h | 4 +-
16988 arch/powerpc/include/asm/thread_info.h | 5 +-
16989 arch/powerpc/kernel/Makefile | 2 +
16990 arch/powerpc/kernel/irq.c | 3 +
16991 arch/powerpc/kernel/process.c | 10 +-
16992 arch/powerpc/kernel/ptrace.c | 14 +
16993 arch/powerpc/kernel/traps.c | 5 +
16994 arch/powerpc/mm/slice.c | 2 +-
16995 arch/s390/Kconfig.debug | 1 +
16996 arch/s390/include/asm/cache.h | 4 +-
16997 arch/score/include/asm/cache.h | 4 +-
16998 arch/sh/include/asm/cache.h | 3 +-
16999 arch/sh/mm/mmap.c | 6 +-
17000 arch/sparc/include/asm/cache.h | 4 +-
17001 arch/sparc/include/asm/pgalloc_64.h | 1 +
17002 arch/sparc/include/asm/thread_info_64.h | 8 +-
17003 arch/sparc/kernel/process_32.c | 6 +-
17004 arch/sparc/kernel/process_64.c | 8 +-
17005 arch/sparc/kernel/ptrace_64.c | 14 +
17006 arch/sparc/kernel/sys_sparc_64.c | 8 +-
17007 arch/sparc/kernel/syscalls.S | 8 +-
17008 arch/sparc/kernel/traps_32.c | 8 +-
17009 arch/sparc/kernel/traps_64.c | 28 +-
17010 arch/sparc/kernel/unaligned_64.c | 2 +-
17011 arch/sparc/mm/fault_64.c | 2 +-
17012 arch/sparc/mm/hugetlbpage.c | 15 +-
17013 arch/tile/Kconfig | 1 +
17014 arch/tile/include/asm/cache.h | 3 +-
17015 arch/tile/mm/hugetlbpage.c | 2 +
17016 arch/um/include/asm/cache.h | 3 +-
17017 arch/unicore32/include/asm/cache.h | 6 +-
17018 arch/x86/Kconfig | 21 +
17019 arch/x86/Kconfig.debug | 2 +
17020 arch/x86/entry/common.c | 14 +
17021 arch/x86/entry/entry_32.S | 2 +-
17022 arch/x86/entry/entry_64.S | 2 +-
17023 arch/x86/ia32/ia32_aout.c | 2 +
17024 arch/x86/include/asm/floppy.h | 20 +-
17025 arch/x86/include/asm/fpu/types.h | 69 +-
17026 arch/x86/include/asm/io.h | 2 +-
17027 arch/x86/include/asm/page.h | 12 +-
17028 arch/x86/include/asm/paravirt_types.h | 23 +-
17029 arch/x86/include/asm/processor.h | 12 +-
17030 arch/x86/include/asm/thread_info.h | 6 +-
17031 arch/x86/include/asm/uaccess.h | 2 +-
17032 arch/x86/kernel/dumpstack.c | 10 +-
17033 arch/x86/kernel/dumpstack_32.c | 2 +-
17034 arch/x86/kernel/dumpstack_64.c | 2 +-
17035 arch/x86/kernel/ioport.c | 13 +
17036 arch/x86/kernel/irq_32.c | 3 +
17037 arch/x86/kernel/irq_64.c | 4 +
17038 arch/x86/kernel/ldt.c | 18 +
17039 arch/x86/kernel/msr.c | 10 +
17040 arch/x86/kernel/ptrace.c | 14 +
17041 arch/x86/kernel/signal.c | 9 +-
17042 arch/x86/kernel/sys_i386_32.c | 9 +-
17043 arch/x86/kernel/sys_x86_64.c | 8 +-
17044 arch/x86/kernel/traps.c | 5 +
17045 arch/x86/kernel/verify_cpu.S | 1 +
17046 arch/x86/kernel/vm86_32.c | 15 +
17047 arch/x86/kvm/svm.c | 14 +-
17048 arch/x86/mm/fault.c | 12 +-
17049 arch/x86/mm/hugetlbpage.c | 15 +-
17050 arch/x86/mm/init.c | 66 +-
17051 arch/x86/mm/init_32.c | 6 +-
17052 arch/x86/net/bpf_jit_comp.c | 4 +
17053 arch/x86/platform/efi/efi_64.c | 2 +-
17054 arch/x86/xen/Kconfig | 1 +
17055 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
17056 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
17057 crypto/ablkcipher.c | 2 +-
17058 crypto/blkcipher.c | 2 +-
17059 crypto/scatterwalk.c | 10 +-
17060 drivers/acpi/acpica/hwxfsleep.c | 11 +-
17061 drivers/acpi/custom_method.c | 4 +
17062 drivers/block/cciss.h | 30 +-
17063 drivers/block/smart1,2.h | 40 +-
17064 drivers/cdrom/cdrom.c | 2 +-
17065 drivers/char/Kconfig | 4 +-
17066 drivers/char/genrtc.c | 1 +
17067 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
17068 drivers/char/mem.c | 17 +
17069 drivers/char/random.c | 5 +-
17070 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
17071 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
17072 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
17073 drivers/crypto/talitos.c | 2 +-
17074 drivers/firewire/ohci.c | 4 +
17075 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
17076 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
17077 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
17078 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
17079 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
17080 drivers/hid/hid-wiimote-debug.c | 2 +-
17081 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
17082 drivers/iommu/Kconfig | 1 +
17083 drivers/iommu/amd_iommu.c | 14 +-
17084 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
17085 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
17086 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
17087 drivers/isdn/hisax/config.c | 2 +-
17088 drivers/isdn/hisax/hfc_pci.c | 2 +-
17089 drivers/isdn/hisax/hfc_sx.c | 2 +-
17090 drivers/isdn/hisax/q931.c | 6 +-
17091 drivers/isdn/i4l/isdn_concap.c | 6 +-
17092 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
17093 drivers/md/bcache/Kconfig | 1 +
17094 drivers/md/raid5.c | 8 +
17095 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
17096 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
17097 drivers/media/platform/vivid/vivid-osd.c | 1 +
17098 drivers/media/radio/radio-cadet.c | 5 +-
17099 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
17100 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
17101 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
17102 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
17103 drivers/message/fusion/mptbase.c | 9 +
17104 drivers/misc/sgi-xp/xp_main.c | 12 +-
17105 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
17106 drivers/net/ppp/pppoe.c | 14 +-
17107 drivers/net/ppp/pptp.c | 6 +
17108 drivers/net/slip/slhc.c | 3 +
17109 drivers/net/wan/lmc/lmc_media.c | 97 +-
17110 drivers/net/wan/x25_asy.c | 6 +-
17111 drivers/net/wan/z85230.c | 24 +-
17112 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
17113 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
17114 drivers/pci/pci-sysfs.c | 2 +-
17115 drivers/pci/proc.c | 9 +
17116 drivers/platform/x86/asus-wmi.c | 12 +
17117 drivers/rtc/rtc-dev.c | 3 +
17118 drivers/scsi/bfa/bfa_fcs.c | 19 +-
17119 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
17120 drivers/scsi/bfa/bfa_modules.h | 12 +-
17121 drivers/scsi/hpsa.h | 40 +-
17122 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
17123 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
17124 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
17125 drivers/target/target_core_sbc.c | 17 +-
17126 drivers/target/target_core_transport.c | 14 +-
17127 drivers/tty/serial/uartlite.c | 4 +-
17128 drivers/tty/sysrq.c | 2 +-
17129 drivers/tty/vt/keyboard.c | 22 +-
17130 drivers/uio/uio.c | 6 +-
17131 drivers/usb/core/hub.c | 5 +
17132 drivers/usb/gadget/function/f_uac1.c | 1 +
17133 drivers/usb/gadget/function/u_uac1.c | 1 +
17134 drivers/usb/host/hwa-hc.c | 9 +-
17135 drivers/usb/usbip/vhci_sysfs.c | 2 +-
17136 drivers/video/fbdev/arcfb.c | 2 +-
17137 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
17138 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
17139 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
17140 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
17141 drivers/xen/xenfs/xenstored.c | 5 +
17142 firmware/Makefile | 2 +
17143 firmware/WHENCE | 20 +-
17144 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
17145 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
17146 fs/9p/vfs_inode.c | 4 +-
17147 fs/attr.c | 1 +
17148 fs/autofs4/waitq.c | 9 +
17149 fs/binfmt_aout.c | 7 +
17150 fs/binfmt_elf.c | 50 +-
17151 fs/compat.c | 20 +-
17152 fs/coredump.c | 17 +-
17153 fs/dcache.c | 3 +
17154 fs/debugfs/inode.c | 11 +-
17155 fs/exec.c | 219 +-
17156 fs/ext2/balloc.c | 4 +-
17157 fs/ext2/super.c | 8 +-
17158 fs/ext4/balloc.c | 4 +-
17159 fs/fcntl.c | 4 +
17160 fs/fhandle.c | 3 +-
17161 fs/file.c | 4 +
17162 fs/filesystems.c | 4 +
17163 fs/fs_struct.c | 20 +-
17164 fs/hugetlbfs/inode.c | 5 +-
17165 fs/inode.c | 8 +-
17166 fs/kernfs/dir.c | 6 +
17167 fs/mount.h | 4 +-
17168 fs/namei.c | 286 +-
17169 fs/namespace.c | 24 +
17170 fs/nfsd/nfscache.c | 2 +-
17171 fs/open.c | 38 +
17172 fs/overlayfs/inode.c | 11 +-
17173 fs/overlayfs/super.c | 6 +-
17174 fs/pipe.c | 2 +-
17175 fs/posix_acl.c | 15 +-
17176 fs/proc/Kconfig | 10 +-
17177 fs/proc/array.c | 69 +-
17178 fs/proc/base.c | 186 +-
17179 fs/proc/cmdline.c | 4 +
17180 fs/proc/devices.c | 4 +
17181 fs/proc/fd.c | 17 +-
17182 fs/proc/generic.c | 64 +
17183 fs/proc/inode.c | 17 +
17184 fs/proc/internal.h | 11 +-
17185 fs/proc/interrupts.c | 4 +
17186 fs/proc/kcore.c | 3 +
17187 fs/proc/meminfo.c | 7 +-
17188 fs/proc/namespaces.c | 4 +-
17189 fs/proc/proc_net.c | 31 +
17190 fs/proc/proc_sysctl.c | 52 +-
17191 fs/proc/root.c | 8 +
17192 fs/proc/stat.c | 69 +-
17193 fs/proc/task_mmu.c | 66 +-
17194 fs/readdir.c | 19 +
17195 fs/reiserfs/item_ops.c | 24 +-
17196 fs/reiserfs/super.c | 4 +
17197 fs/select.c | 2 +
17198 fs/seq_file.c | 30 +-
17199 fs/splice.c | 8 +
17200 fs/stat.c | 20 +-
17201 fs/sysfs/dir.c | 30 +-
17202 fs/sysv/inode.c | 11 +-
17203 fs/utimes.c | 7 +
17204 fs/xattr.c | 26 +-
17205 grsecurity/Kconfig | 1182 ++++
17206 grsecurity/Makefile | 54 +
17207 grsecurity/gracl.c | 2757 +++++++++
17208 grsecurity/gracl_alloc.c | 105 +
17209 grsecurity/gracl_cap.c | 127 +
17210 grsecurity/gracl_compat.c | 269 +
17211 grsecurity/gracl_fs.c | 448 ++
17212 grsecurity/gracl_ip.c | 386 ++
17213 grsecurity/gracl_learn.c | 207 +
17214 grsecurity/gracl_policy.c | 1786 ++++++
17215 grsecurity/gracl_res.c | 68 +
17216 grsecurity/gracl_segv.c | 304 +
17217 grsecurity/gracl_shm.c | 40 +
17218 grsecurity/grsec_chdir.c | 19 +
17219 grsecurity/grsec_chroot.c | 467 ++
17220 grsecurity/grsec_disabled.c | 445 ++
17221 grsecurity/grsec_exec.c | 189 +
17222 grsecurity/grsec_fifo.c | 26 +
17223 grsecurity/grsec_fork.c | 23 +
17224 grsecurity/grsec_init.c | 290 +
17225 grsecurity/grsec_ipc.c | 48 +
17226 grsecurity/grsec_link.c | 65 +
17227 grsecurity/grsec_log.c | 340 +
17228 grsecurity/grsec_mem.c | 48 +
17229 grsecurity/grsec_mount.c | 65 +
17230 grsecurity/grsec_pax.c | 47 +
17231 grsecurity/grsec_proc.c | 20 +
17232 grsecurity/grsec_ptrace.c | 30 +
17233 grsecurity/grsec_sig.c | 236 +
17234 grsecurity/grsec_sock.c | 244 +
17235 grsecurity/grsec_sysctl.c | 488 ++
17236 grsecurity/grsec_time.c | 16 +
17237 grsecurity/grsec_tpe.c | 78 +
17238 grsecurity/grsec_usb.c | 15 +
17239 grsecurity/grsum.c | 64 +
17240 include/linux/binfmts.h | 5 +-
17241 include/linux/bitops.h | 2 +-
17242 include/linux/capability.h | 13 +
17243 include/linux/compiler-gcc.h | 5 +
17244 include/linux/compiler.h | 8 +
17245 include/linux/cred.h | 8 +-
17246 include/linux/dcache.h | 5 +-
17247 include/linux/fs.h | 24 +-
17248 include/linux/fs_struct.h | 2 +-
17249 include/linux/fsnotify.h | 6 +
17250 include/linux/gracl.h | 342 +
17251 include/linux/gracl_compat.h | 156 +
17252 include/linux/gralloc.h | 9 +
17253 include/linux/grdefs.h | 140 +
17254 include/linux/grinternal.h | 230 +
17255 include/linux/grmsg.h | 118 +
17256 include/linux/grsecurity.h | 255 +
17257 include/linux/grsock.h | 19 +
17258 include/linux/ipc.h | 2 +-
17259 include/linux/ipc_namespace.h | 2 +-
17260 include/linux/kallsyms.h | 18 +-
17261 include/linux/kmod.h | 5 +
17262 include/linux/kobject.h | 2 +-
17263 include/linux/lsm_hooks.h | 4 +-
17264 include/linux/mm.h | 12 +
17265 include/linux/mm_types.h | 4 +-
17266 include/linux/module.h | 5 +-
17267 include/linux/mount.h | 2 +-
17268 include/linux/msg.h | 2 +-
17269 include/linux/netfilter/xt_gradm.h | 9 +
17270 include/linux/path.h | 4 +-
17271 include/linux/perf_event.h | 13 +-
17272 include/linux/pid_namespace.h | 2 +-
17273 include/linux/printk.h | 2 +-
17274 include/linux/proc_fs.h | 22 +-
17275 include/linux/proc_ns.h | 2 +-
17276 include/linux/ptrace.h | 24 +-
17277 include/linux/random.h | 2 +-
17278 include/linux/rbtree_augmented.h | 4 +-
17279 include/linux/scatterlist.h | 12 +-
17280 include/linux/sched.h | 114 +-
17281 include/linux/security.h | 1 +
17282 include/linux/sem.h | 2 +-
17283 include/linux/seq_file.h | 5 +
17284 include/linux/shm.h | 6 +-
17285 include/linux/skbuff.h | 3 +
17286 include/linux/slab.h | 9 -
17287 include/linux/sysctl.h | 8 +-
17288 include/linux/thread_info.h | 6 +-
17289 include/linux/tty.h | 2 +-
17290 include/linux/tty_driver.h | 4 +-
17291 include/linux/uidgid.h | 5 +
17292 include/linux/user_namespace.h | 2 +-
17293 include/linux/utsname.h | 2 +-
17294 include/linux/vermagic.h | 16 +-
17295 include/linux/vmalloc.h | 20 +-
17296 include/net/af_unix.h | 2 +-
17297 include/net/dst.h | 33 +
17298 include/net/ip.h | 2 +-
17299 include/net/neighbour.h | 2 +-
17300 include/net/net_namespace.h | 2 +-
17301 include/net/sock.h | 4 +-
17302 include/target/target_core_base.h | 2 +-
17303 include/trace/events/fs.h | 53 +
17304 include/uapi/linux/personality.h | 1 +
17305 init/Kconfig | 4 +-
17306 init/main.c | 35 +-
17307 ipc/mqueue.c | 1 +
17308 ipc/msg.c | 3 +-
17309 ipc/sem.c | 3 +-
17310 ipc/shm.c | 26 +-
17311 ipc/util.c | 6 +
17312 kernel/auditsc.c | 2 +-
17313 kernel/bpf/syscall.c | 8 +-
17314 kernel/capability.c | 41 +-
17315 kernel/cgroup.c | 5 +-
17316 kernel/compat.c | 1 +
17317 kernel/configs.c | 11 +
17318 kernel/cred.c | 112 +-
17319 kernel/events/core.c | 16 +-
17320 kernel/exit.c | 10 +-
17321 kernel/fork.c | 86 +-
17322 kernel/futex.c | 6 +-
17323 kernel/futex_compat.c | 2 +-
17324 kernel/kallsyms.c | 9 +
17325 kernel/kcmp.c | 8 +-
17326 kernel/kexec_core.c | 2 +-
17327 kernel/kmod.c | 95 +-
17328 kernel/kprobes.c | 7 +-
17329 kernel/ksysfs.c | 2 +
17330 kernel/locking/lockdep_proc.c | 10 +-
17331 kernel/module.c | 108 +-
17332 kernel/panic.c | 4 +-
17333 kernel/pid.c | 23 +-
17334 kernel/power/Kconfig | 2 +
17335 kernel/printk/printk.c | 20 +-
17336 kernel/ptrace.c | 56 +-
17337 kernel/resource.c | 10 +
17338 kernel/sched/core.c | 11 +-
17339 kernel/signal.c | 37 +-
17340 kernel/sys.c | 64 +-
17341 kernel/sysctl.c | 172 +-
17342 kernel/taskstats.c | 6 +
17343 kernel/time/posix-timers.c | 8 +
17344 kernel/time/time.c | 5 +
17345 kernel/time/timekeeping.c | 3 +
17346 kernel/time/timer_list.c | 13 +-
17347 kernel/time/timer_stats.c | 10 +-
17348 kernel/trace/Kconfig | 2 +
17349 kernel/trace/trace_syscalls.c | 8 +
17350 kernel/user_namespace.c | 15 +
17351 lib/Kconfig.debug | 13 +-
17352 lib/Kconfig.kasan | 2 +-
17353 lib/is_single_threaded.c | 3 +
17354 lib/list_debug.c | 65 +-
17355 lib/nlattr.c | 2 +
17356 lib/rbtree.c | 4 +-
17357 lib/vsprintf.c | 39 +-
17358 localversion-grsec | 1 +
17359 mm/Kconfig | 8 +-
17360 mm/Kconfig.debug | 1 +
17361 mm/filemap.c | 1 +
17362 mm/kmemleak.c | 4 +-
17363 mm/memory.c | 2 +-
17364 mm/mempolicy.c | 12 +-
17365 mm/migrate.c | 3 +-
17366 mm/mlock.c | 6 +-
17367 mm/mmap.c | 93 +-
17368 mm/mprotect.c | 8 +
17369 mm/oom_kill.c | 28 +-
17370 mm/page_alloc.c | 2 +-
17371 mm/process_vm_access.c | 8 +-
17372 mm/shmem.c | 36 +-
17373 mm/slab.c | 14 +-
17374 mm/slab_common.c | 2 +-
17375 mm/slob.c | 12 +
17376 mm/slub.c | 33 +-
17377 mm/util.c | 3 +
17378 mm/vmalloc.c | 129 +-
17379 mm/vmstat.c | 29 +-
17380 net/appletalk/atalk_proc.c | 2 +-
17381 net/atm/lec.c | 6 +-
17382 net/atm/mpoa_caches.c | 42 +-
17383 net/bluetooth/sco.c | 3 +
17384 net/can/bcm.c | 2 +-
17385 net/can/proc.c | 2 +-
17386 net/core/dev_ioctl.c | 7 +-
17387 net/core/filter.c | 8 +-
17388 net/core/net-procfs.c | 17 +-
17389 net/core/pktgen.c | 2 +-
17390 net/core/sock.c | 3 +-
17391 net/core/sysctl_net_core.c | 2 +-
17392 net/decnet/dn_dev.c | 2 +-
17393 net/ipv4/devinet.c | 6 +-
17394 net/ipv4/inet_hashtables.c | 4 +
17395 net/ipv4/ip_input.c | 7 +
17396 net/ipv4/ip_sockglue.c | 3 +-
17397 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
17398 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
17399 net/ipv4/route.c | 6 +-
17400 net/ipv4/tcp_input.c | 4 +-
17401 net/ipv4/tcp_ipv4.c | 29 +-
17402 net/ipv4/tcp_minisocks.c | 9 +-
17403 net/ipv4/tcp_timer.c | 11 +
17404 net/ipv4/udp.c | 24 +
17405 net/ipv6/addrconf.c | 13 +-
17406 net/ipv6/proc.c | 2 +-
17407 net/ipv6/tcp_ipv6.c | 26 +-
17408 net/ipv6/udp.c | 7 +
17409 net/ipx/ipx_proc.c | 2 +-
17410 net/irda/irproc.c | 2 +-
17411 net/llc/llc_proc.c | 2 +-
17412 net/netfilter/Kconfig | 10 +
17413 net/netfilter/Makefile | 1 +
17414 net/netfilter/nf_conntrack_core.c | 8 +
17415 net/netfilter/xt_gradm.c | 51 +
17416 net/netfilter/xt_hashlimit.c | 4 +-
17417 net/netfilter/xt_recent.c | 2 +-
17418 net/sched/sch_api.c | 2 +-
17419 net/sctp/socket.c | 4 +-
17420 net/socket.c | 75 +-
17421 net/sunrpc/Kconfig | 1 +
17422 net/sunrpc/cache.c | 2 +-
17423 net/sunrpc/stats.c | 2 +-
17424 net/sysctl_net.c | 2 +-
17425 net/unix/af_unix.c | 52 +-
17426 net/vmw_vsock/vmci_transport_notify.c | 30 +-
17427 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
17428 net/x25/sysctl_net_x25.c | 2 +-
17429 net/x25/x25_proc.c | 2 +-
17430 scripts/package/Makefile | 2 +-
17431 scripts/package/mkspec | 41 +-
17432 security/Kconfig | 369 +-
17433 security/apparmor/file.c | 4 +-
17434 security/apparmor/lsm.c | 8 +-
17435 security/commoncap.c | 36 +-
17436 security/min_addr.c | 2 +
17437 security/smack/smack_lsm.c | 8 +-
17438 security/tomoyo/file.c | 12 +-
17439 security/tomoyo/mount.c | 4 +
17440 security/tomoyo/tomoyo.c | 20 +-
17441 security/yama/Kconfig | 2 +-
17442 security/yama/yama_lsm.c | 4 +-
17443 sound/synth/emux/emux_seq.c | 14 +-
17444 sound/usb/line6/driver.c | 40 +-
17445 sound/usb/line6/toneport.c | 12 +-
17446 tools/gcc/.gitignore | 1 +
17447 tools/gcc/Makefile | 12 +
17448 tools/gcc/gen-random-seed.sh | 8 +
17449 tools/gcc/randomize_layout_plugin.c | 930 +++
17450 tools/gcc/size_overflow_plugin/.gitignore | 1 +
17451 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
17452 511 files changed, 32631 insertions(+), 3196 deletions(-)
17453
17454 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
17455 Author: Brad Spengler <spender@grsecurity.net>
17456 Date: Tue Dec 15 14:31:49 2015 -0500
17457
17458 Update to pax-linux-4.3.3-test11.patch:
17459 - fixed a few compile regressions with the recent plugin changes, reported by spender
17460 - updated the size overflow hash table
17461
17462 tools/gcc/latent_entropy_plugin.c | 2 +-
17463 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
17464 tools/gcc/stackleak_plugin.c | 2 +-
17465 tools/gcc/structleak_plugin.c | 6 +--
17466 4 files changed, 60 insertions(+), 16 deletions(-)
17467
17468 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
17469 Author: Brad Spengler <spender@grsecurity.net>
17470 Date: Tue Dec 15 11:50:24 2015 -0500
17471
17472 Apply structleak ICE fix for gcc < 4.9
17473
17474 tools/gcc/structleak_plugin.c | 4 ++++
17475 1 files changed, 4 insertions(+), 0 deletions(-)
17476
17477 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
17478 Author: Brad Spengler <spender@grsecurity.net>
17479 Date: Tue Dec 15 07:57:06 2015 -0500
17480
17481 Update to pax-linux-4.3.1-test10.patch:
17482 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
17483 - Emese regenerated the size overflow hash tables for 4.3
17484 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
17485 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
17486
17487 arch/x86/entry/entry_64.S | 2 +-
17488 arch/x86/entry/entry_64_compat.S | 15 +-
17489 scripts/package/builddeb | 2 +-
17490 tools/gcc/initify_plugin.c | 11 +-
17491 tools/gcc/latent_entropy_plugin.c | 20 +-
17492 .../disable_size_overflow_hash.data | 4 +
17493 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
17494 tools/gcc/stackleak_plugin.c | 26 +-
17495 tools/gcc/structleak_plugin.c | 21 +-
17496 9 files changed, 3079 insertions(+), 2367 deletions(-)
17497
17498 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
17499 Merge: b5847e6 3548341
17500 Author: Brad Spengler <spender@grsecurity.net>
17501 Date: Tue Dec 15 07:47:56 2015 -0500
17502
17503 Merge branch 'linux-4.3.y' into pax-4_3
17504
17505 Conflicts:
17506 net/unix/af_unix.c
17507
17508 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
17509 Author: Brad Spengler <spender@grsecurity.net>
17510 Date: Wed Dec 9 23:11:36 2015 -0500
17511
17512 Update to pax-linux-4.3.1-test9.patch:
17513 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
17514 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
17515 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
17516 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
17517 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
17518 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
17519 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
17520
17521 Makefile | 6 +
17522 arch/x86/include/asm/compat.h | 4 +
17523 arch/x86/include/asm/dma.h | 2 +
17524 arch/x86/include/asm/pmem.h | 2 +-
17525 arch/x86/include/asm/uaccess.h | 20 +-
17526 arch/x86/kernel/apic/vector.c | 6 +-
17527 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
17528 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
17529 arch/x86/kernel/head_64.S | 1 -
17530 arch/x86/kvm/i8259.c | 10 +-
17531 arch/x86/kvm/ioapic.c | 2 +
17532 arch/x86/kvm/x86.c | 2 +
17533 arch/x86/lib/usercopy_64.c | 2 +-
17534 arch/x86/mm/mpx.c | 4 +-
17535 arch/x86/mm/pageattr.c | 7 +
17536 drivers/base/devres.c | 4 +-
17537 drivers/base/power/runtime.c | 6 +-
17538 drivers/base/regmap/regmap.c | 4 +-
17539 drivers/block/drbd/drbd_receiver.c | 4 +-
17540 drivers/block/drbd/drbd_worker.c | 6 +-
17541 drivers/char/virtio_console.c | 6 +-
17542 drivers/md/dm.c | 12 +-
17543 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
17544 drivers/net/macvtap.c | 4 +-
17545 drivers/video/fbdev/core/fbmem.c | 10 +-
17546 fs/compat.c | 3 +-
17547 fs/coredump.c | 2 +-
17548 fs/dcache.c | 13 +-
17549 fs/fhandle.c | 2 +-
17550 fs/file.c | 14 +-
17551 fs/fs-writeback.c | 11 +-
17552 fs/overlayfs/copy_up.c | 2 +-
17553 fs/readdir.c | 3 +-
17554 fs/super.c | 3 +-
17555 include/linux/compiler.h | 36 ++-
17556 include/linux/rcupdate.h | 8 +
17557 include/linux/sched.h | 4 +-
17558 include/linux/seqlock.h | 10 +
17559 include/linux/spinlock.h | 17 +-
17560 include/linux/srcu.h | 5 +-
17561 include/linux/syscalls.h | 2 +-
17562 include/linux/writeback.h | 3 +-
17563 include/uapi/linux/swab.h | 6 +-
17564 ipc/ipc_sysctl.c | 6 +
17565 kernel/exit.c | 25 +-
17566 kernel/resource.c | 4 +-
17567 kernel/signal.c | 12 +-
17568 kernel/user.c | 2 +-
17569 kernel/workqueue.c | 6 +-
17570 lib/rhashtable.c | 4 +-
17571 net/compat.c | 2 +-
17572 net/ipv4/xfrm4_mode_transport.c | 2 +-
17573 security/keys/internal.h | 8 +-
17574 security/keys/keyring.c | 4 -
17575 sound/core/seq/seq_clientmgr.c | 8 +-
17576 sound/core/seq/seq_compat.c | 2 +-
17577 sound/core/seq/seq_memory.c | 6 +-
17578 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
17579 tools/gcc/gcc-common.h | 1 +
17580 tools/gcc/initify_plugin.c | 33 ++-
17581 .../disable_size_overflow_hash.data | 1 +
17582 .../size_overflow_plugin/size_overflow_hash.data | 1 -
17583 62 files changed, 708 insertions(+), 140 deletions(-)
17584
17585 commit f2634c2f6995f4231616f24ed016f890c701f939
17586 Merge: 1241bff 5f8b236
17587 Author: Brad Spengler <spender@grsecurity.net>
17588 Date: Wed Dec 9 21:50:47 2015 -0500
17589
17590 Merge branch 'linux-4.3.y' into pax-4_3
17591
17592 Conflicts:
17593 arch/x86/kernel/fpu/xstate.c
17594 arch/x86/kernel/head_64.S
17595
17596 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
17597 Author: Brad Spengler <spender@grsecurity.net>
17598 Date: Sun Dec 6 08:44:56 2015 -0500
17599
17600 Update to pax-linux-4.3-test8.patch:
17601 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
17602 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
17603 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
17604 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
17605
17606 Makefile | 5 +++
17607 drivers/md/md.c | 5 ++-
17608 drivers/md/raid1.c | 2 +-
17609 fs/proc/task_mmu.c | 3 ++
17610 .../disable_size_overflow_hash.data | 4 ++-
17611 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
17612 .../size_overflow_plugin/size_overflow_hash.data | 2 -
17613 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
17614 8 files changed, 43 insertions(+), 12 deletions(-)
17615
17616 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
17617 Author: Brad Spengler <spender@grsecurity.net>
17618 Date: Fri Dec 4 14:24:12 2015 -0500
17619
17620 Initial import of pax-linux-4.3-test7.patch
17621
17622 Documentation/dontdiff | 47 +-
17623 Documentation/kbuild/makefiles.txt | 39 +-
17624 Documentation/kernel-parameters.txt | 28 +
17625 Makefile | 108 +-
17626 arch/alpha/include/asm/atomic.h | 10 +
17627 arch/alpha/include/asm/elf.h | 7 +
17628 arch/alpha/include/asm/pgalloc.h | 6 +
17629 arch/alpha/include/asm/pgtable.h | 11 +
17630 arch/alpha/kernel/module.c | 2 +-
17631 arch/alpha/kernel/osf_sys.c | 8 +-
17632 arch/alpha/mm/fault.c | 141 +-
17633 arch/arm/Kconfig | 2 +-
17634 arch/arm/include/asm/atomic.h | 320 +-
17635 arch/arm/include/asm/cache.h | 5 +-
17636 arch/arm/include/asm/cacheflush.h | 2 +-
17637 arch/arm/include/asm/checksum.h | 14 +-
17638 arch/arm/include/asm/cmpxchg.h | 4 +
17639 arch/arm/include/asm/cpuidle.h | 2 +-
17640 arch/arm/include/asm/domain.h | 22 +-
17641 arch/arm/include/asm/elf.h | 9 +-
17642 arch/arm/include/asm/fncpy.h | 2 +
17643 arch/arm/include/asm/futex.h | 10 +
17644 arch/arm/include/asm/kmap_types.h | 2 +-
17645 arch/arm/include/asm/mach/dma.h | 2 +-
17646 arch/arm/include/asm/mach/map.h | 16 +-
17647 arch/arm/include/asm/outercache.h | 2 +-
17648 arch/arm/include/asm/page.h | 3 +-
17649 arch/arm/include/asm/pgalloc.h | 20 +
17650 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
17651 arch/arm/include/asm/pgtable-2level.h | 3 +
17652 arch/arm/include/asm/pgtable-3level.h | 3 +
17653 arch/arm/include/asm/pgtable.h | 54 +-
17654 arch/arm/include/asm/smp.h | 2 +-
17655 arch/arm/include/asm/tls.h | 3 +
17656 arch/arm/include/asm/uaccess.h | 79 +-
17657 arch/arm/include/uapi/asm/ptrace.h | 2 +-
17658 arch/arm/kernel/armksyms.c | 2 +-
17659 arch/arm/kernel/cpuidle.c | 2 +-
17660 arch/arm/kernel/entry-armv.S | 109 +-
17661 arch/arm/kernel/entry-common.S | 40 +-
17662 arch/arm/kernel/entry-header.S | 55 +
17663 arch/arm/kernel/fiq.c | 3 +
17664 arch/arm/kernel/module-plts.c | 7 +-
17665 arch/arm/kernel/module.c | 38 +-
17666 arch/arm/kernel/patch.c | 2 +
17667 arch/arm/kernel/process.c | 90 +-
17668 arch/arm/kernel/reboot.c | 1 +
17669 arch/arm/kernel/setup.c | 20 +-
17670 arch/arm/kernel/signal.c | 35 +-
17671 arch/arm/kernel/smp.c | 2 +-
17672 arch/arm/kernel/tcm.c | 4 +-
17673 arch/arm/kernel/vmlinux.lds.S | 6 +-
17674 arch/arm/kvm/arm.c | 8 +-
17675 arch/arm/lib/copy_page.S | 1 +
17676 arch/arm/lib/csumpartialcopyuser.S | 4 +-
17677 arch/arm/lib/delay.c | 2 +-
17678 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
17679 arch/arm/mach-exynos/suspend.c | 6 +-
17680 arch/arm/mach-mvebu/coherency.c | 4 +-
17681 arch/arm/mach-omap2/board-n8x0.c | 2 +-
17682 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
17683 arch/arm/mach-omap2/omap-smp.c | 1 +
17684 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
17685 arch/arm/mach-omap2/omap_device.c | 4 +-
17686 arch/arm/mach-omap2/omap_device.h | 4 +-
17687 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
17688 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
17689 arch/arm/mach-omap2/wd_timer.c | 6 +-
17690 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
17691 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
17692 arch/arm/mach-tegra/irq.c | 1 +
17693 arch/arm/mach-ux500/pm.c | 1 +
17694 arch/arm/mach-zynq/platsmp.c | 1 +
17695 arch/arm/mm/Kconfig | 6 +-
17696 arch/arm/mm/alignment.c | 8 +
17697 arch/arm/mm/cache-l2x0.c | 2 +-
17698 arch/arm/mm/context.c | 10 +-
17699 arch/arm/mm/fault.c | 146 +
17700 arch/arm/mm/fault.h | 12 +
17701 arch/arm/mm/init.c | 39 +
17702 arch/arm/mm/ioremap.c | 4 +-
17703 arch/arm/mm/mmap.c | 30 +-
17704 arch/arm/mm/mmu.c | 162 +-
17705 arch/arm/net/bpf_jit_32.c | 3 +
17706 arch/arm/plat-iop/setup.c | 2 +-
17707 arch/arm/plat-omap/sram.c | 2 +
17708 arch/arm64/include/asm/atomic.h | 10 +
17709 arch/arm64/include/asm/percpu.h | 8 +-
17710 arch/arm64/include/asm/pgalloc.h | 5 +
17711 arch/arm64/include/asm/uaccess.h | 1 +
17712 arch/arm64/mm/dma-mapping.c | 2 +-
17713 arch/avr32/include/asm/elf.h | 8 +-
17714 arch/avr32/include/asm/kmap_types.h | 4 +-
17715 arch/avr32/mm/fault.c | 27 +
17716 arch/frv/include/asm/atomic.h | 10 +
17717 arch/frv/include/asm/kmap_types.h | 2 +-
17718 arch/frv/mm/elf-fdpic.c | 3 +-
17719 arch/ia64/Makefile | 1 +
17720 arch/ia64/include/asm/atomic.h | 10 +
17721 arch/ia64/include/asm/elf.h | 7 +
17722 arch/ia64/include/asm/pgalloc.h | 12 +
17723 arch/ia64/include/asm/pgtable.h | 13 +-
17724 arch/ia64/include/asm/spinlock.h | 2 +-
17725 arch/ia64/include/asm/uaccess.h | 27 +-
17726 arch/ia64/kernel/module.c | 45 +-
17727 arch/ia64/kernel/palinfo.c | 2 +-
17728 arch/ia64/kernel/sys_ia64.c | 7 +
17729 arch/ia64/kernel/vmlinux.lds.S | 2 +-
17730 arch/ia64/mm/fault.c | 32 +-
17731 arch/ia64/mm/init.c | 15 +-
17732 arch/m32r/lib/usercopy.c | 6 +
17733 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
17734 arch/mips/include/asm/atomic.h | 368 +-
17735 arch/mips/include/asm/elf.h | 7 +
17736 arch/mips/include/asm/exec.h | 2 +-
17737 arch/mips/include/asm/hw_irq.h | 2 +-
17738 arch/mips/include/asm/local.h | 57 +
17739 arch/mips/include/asm/page.h | 2 +-
17740 arch/mips/include/asm/pgalloc.h | 5 +
17741 arch/mips/include/asm/pgtable.h | 3 +
17742 arch/mips/include/asm/uaccess.h | 1 +
17743 arch/mips/kernel/binfmt_elfn32.c | 7 +
17744 arch/mips/kernel/binfmt_elfo32.c | 7 +
17745 arch/mips/kernel/irq-gt641xx.c | 2 +-
17746 arch/mips/kernel/irq.c | 6 +-
17747 arch/mips/kernel/pm-cps.c | 2 +-
17748 arch/mips/kernel/process.c | 12 -
17749 arch/mips/kernel/sync-r4k.c | 24 +-
17750 arch/mips/kernel/traps.c | 13 +-
17751 arch/mips/mm/fault.c | 25 +
17752 arch/mips/mm/mmap.c | 51 +-
17753 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
17754 arch/mips/sni/rm200.c | 2 +-
17755 arch/mips/vr41xx/common/icu.c | 2 +-
17756 arch/mips/vr41xx/common/irq.c | 4 +-
17757 arch/parisc/include/asm/atomic.h | 10 +
17758 arch/parisc/include/asm/elf.h | 7 +
17759 arch/parisc/include/asm/pgalloc.h | 6 +
17760 arch/parisc/include/asm/pgtable.h | 11 +
17761 arch/parisc/include/asm/uaccess.h | 4 +-
17762 arch/parisc/kernel/module.c | 50 +-
17763 arch/parisc/kernel/sys_parisc.c | 15 +
17764 arch/parisc/kernel/traps.c | 4 +-
17765 arch/parisc/mm/fault.c | 140 +-
17766 arch/powerpc/include/asm/atomic.h | 329 +-
17767 arch/powerpc/include/asm/elf.h | 12 +
17768 arch/powerpc/include/asm/exec.h | 2 +-
17769 arch/powerpc/include/asm/kmap_types.h | 2 +-
17770 arch/powerpc/include/asm/local.h | 46 +
17771 arch/powerpc/include/asm/mman.h | 2 +-
17772 arch/powerpc/include/asm/page.h | 8 +-
17773 arch/powerpc/include/asm/page_64.h | 7 +-
17774 arch/powerpc/include/asm/pgalloc-64.h | 7 +
17775 arch/powerpc/include/asm/pgtable.h | 1 +
17776 arch/powerpc/include/asm/pte-hash32.h | 1 +
17777 arch/powerpc/include/asm/reg.h | 1 +
17778 arch/powerpc/include/asm/smp.h | 2 +-
17779 arch/powerpc/include/asm/spinlock.h | 42 +-
17780 arch/powerpc/include/asm/uaccess.h | 141 +-
17781 arch/powerpc/kernel/Makefile | 5 +
17782 arch/powerpc/kernel/exceptions-64e.S | 4 +-
17783 arch/powerpc/kernel/exceptions-64s.S | 2 +-
17784 arch/powerpc/kernel/module_32.c | 15 +-
17785 arch/powerpc/kernel/process.c | 46 -
17786 arch/powerpc/kernel/signal_32.c | 2 +-
17787 arch/powerpc/kernel/signal_64.c | 2 +-
17788 arch/powerpc/kernel/traps.c | 21 +
17789 arch/powerpc/kernel/vdso.c | 5 +-
17790 arch/powerpc/lib/usercopy_64.c | 18 -
17791 arch/powerpc/mm/fault.c | 56 +-
17792 arch/powerpc/mm/mmap.c | 16 +
17793 arch/powerpc/mm/slice.c | 13 +-
17794 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
17795 arch/s390/include/asm/atomic.h | 10 +
17796 arch/s390/include/asm/elf.h | 7 +
17797 arch/s390/include/asm/exec.h | 2 +-
17798 arch/s390/include/asm/uaccess.h | 13 +-
17799 arch/s390/kernel/module.c | 22 +-
17800 arch/s390/kernel/process.c | 24 -
17801 arch/s390/mm/mmap.c | 16 +
17802 arch/score/include/asm/exec.h | 2 +-
17803 arch/score/kernel/process.c | 5 -
17804 arch/sh/mm/mmap.c | 22 +-
17805 arch/sparc/include/asm/atomic_64.h | 110 +-
17806 arch/sparc/include/asm/cache.h | 2 +-
17807 arch/sparc/include/asm/elf_32.h | 7 +
17808 arch/sparc/include/asm/elf_64.h | 7 +
17809 arch/sparc/include/asm/pgalloc_32.h | 1 +
17810 arch/sparc/include/asm/pgalloc_64.h | 1 +
17811 arch/sparc/include/asm/pgtable.h | 4 +
17812 arch/sparc/include/asm/pgtable_32.h | 15 +-
17813 arch/sparc/include/asm/pgtsrmmu.h | 5 +
17814 arch/sparc/include/asm/setup.h | 4 +-
17815 arch/sparc/include/asm/spinlock_64.h | 35 +-
17816 arch/sparc/include/asm/thread_info_32.h | 1 +
17817 arch/sparc/include/asm/thread_info_64.h | 2 +
17818 arch/sparc/include/asm/uaccess.h | 1 +
17819 arch/sparc/include/asm/uaccess_32.h | 28 +-
17820 arch/sparc/include/asm/uaccess_64.h | 24 +-
17821 arch/sparc/kernel/Makefile | 2 +-
17822 arch/sparc/kernel/prom_common.c | 2 +-
17823 arch/sparc/kernel/smp_64.c | 8 +-
17824 arch/sparc/kernel/sys_sparc_32.c | 2 +-
17825 arch/sparc/kernel/sys_sparc_64.c | 52 +-
17826 arch/sparc/kernel/traps_64.c | 27 +-
17827 arch/sparc/lib/Makefile | 2 +-
17828 arch/sparc/lib/atomic_64.S | 57 +-
17829 arch/sparc/lib/ksyms.c | 6 +-
17830 arch/sparc/mm/Makefile | 2 +-
17831 arch/sparc/mm/fault_32.c | 292 +
17832 arch/sparc/mm/fault_64.c | 486 +
17833 arch/sparc/mm/hugetlbpage.c | 22 +-
17834 arch/sparc/mm/init_64.c | 10 +-
17835 arch/tile/include/asm/atomic_64.h | 10 +
17836 arch/tile/include/asm/uaccess.h | 4 +-
17837 arch/um/Makefile | 4 +
17838 arch/um/include/asm/kmap_types.h | 2 +-
17839 arch/um/include/asm/page.h | 3 +
17840 arch/um/include/asm/pgtable-3level.h | 1 +
17841 arch/um/kernel/process.c | 16 -
17842 arch/x86/Kconfig | 15 +-
17843 arch/x86/Kconfig.cpu | 6 +-
17844 arch/x86/Kconfig.debug | 4 +-
17845 arch/x86/Makefile | 13 +-
17846 arch/x86/boot/Makefile | 3 +
17847 arch/x86/boot/bitops.h | 4 +-
17848 arch/x86/boot/boot.h | 2 +-
17849 arch/x86/boot/compressed/Makefile | 3 +
17850 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
17851 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
17852 arch/x86/boot/compressed/head_32.S | 4 +-
17853 arch/x86/boot/compressed/head_64.S | 12 +-
17854 arch/x86/boot/compressed/misc.c | 11 +-
17855 arch/x86/boot/cpucheck.c | 16 +-
17856 arch/x86/boot/header.S | 6 +-
17857 arch/x86/boot/memory.c | 2 +-
17858 arch/x86/boot/video-vesa.c | 1 +
17859 arch/x86/boot/video.c | 2 +-
17860 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
17861 arch/x86/crypto/aesni-intel_asm.S | 106 +-
17862 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
17863 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
17864 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
17865 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
17866 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
17867 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
17868 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
17869 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
17870 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
17871 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
17872 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
17873 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
17874 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
17875 arch/x86/crypto/sha256-avx-asm.S | 2 +
17876 arch/x86/crypto/sha256-avx2-asm.S | 2 +
17877 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
17878 arch/x86/crypto/sha512-avx-asm.S | 2 +
17879 arch/x86/crypto/sha512-avx2-asm.S | 2 +
17880 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
17881 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
17882 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
17883 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
17884 arch/x86/entry/calling.h | 86 +-
17885 arch/x86/entry/common.c | 13 +-
17886 arch/x86/entry/entry_32.S | 351 +-
17887 arch/x86/entry/entry_64.S | 619 +-
17888 arch/x86/entry/entry_64_compat.S | 159 +-
17889 arch/x86/entry/thunk_64.S | 2 +
17890 arch/x86/entry/vdso/Makefile | 2 +-
17891 arch/x86/entry/vdso/vdso2c.h | 8 +-
17892 arch/x86/entry/vdso/vma.c | 41 +-
17893 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
17894 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
17895 arch/x86/ia32/ia32_signal.c | 23 +-
17896 arch/x86/ia32/sys_ia32.c | 42 +-
17897 arch/x86/include/asm/alternative-asm.h | 43 +-
17898 arch/x86/include/asm/alternative.h | 4 +-
17899 arch/x86/include/asm/apic.h | 2 +-
17900 arch/x86/include/asm/apm.h | 4 +-
17901 arch/x86/include/asm/atomic.h | 230 +-
17902 arch/x86/include/asm/atomic64_32.h | 100 +
17903 arch/x86/include/asm/atomic64_64.h | 164 +-
17904 arch/x86/include/asm/bitops.h | 18 +-
17905 arch/x86/include/asm/boot.h | 2 +-
17906 arch/x86/include/asm/cache.h | 5 +-
17907 arch/x86/include/asm/checksum_32.h | 12 +-
17908 arch/x86/include/asm/cmpxchg.h | 39 +
17909 arch/x86/include/asm/compat.h | 2 +-
17910 arch/x86/include/asm/cpufeature.h | 17 +-
17911 arch/x86/include/asm/desc.h | 78 +-
17912 arch/x86/include/asm/desc_defs.h | 6 +
17913 arch/x86/include/asm/div64.h | 2 +-
17914 arch/x86/include/asm/elf.h | 33 +-
17915 arch/x86/include/asm/emergency-restart.h | 2 +-
17916 arch/x86/include/asm/fpu/internal.h | 42 +-
17917 arch/x86/include/asm/fpu/types.h | 6 +-
17918 arch/x86/include/asm/futex.h | 14 +-
17919 arch/x86/include/asm/hw_irq.h | 4 +-
17920 arch/x86/include/asm/i8259.h | 2 +-
17921 arch/x86/include/asm/io.h | 22 +-
17922 arch/x86/include/asm/irqflags.h | 5 +
17923 arch/x86/include/asm/kprobes.h | 9 +-
17924 arch/x86/include/asm/local.h | 106 +-
17925 arch/x86/include/asm/mman.h | 15 +
17926 arch/x86/include/asm/mmu.h | 14 +-
17927 arch/x86/include/asm/mmu_context.h | 114 +-
17928 arch/x86/include/asm/module.h | 17 +-
17929 arch/x86/include/asm/nmi.h | 19 +-
17930 arch/x86/include/asm/page.h | 1 +
17931 arch/x86/include/asm/page_32.h | 12 +-
17932 arch/x86/include/asm/page_64.h | 14 +-
17933 arch/x86/include/asm/paravirt.h | 46 +-
17934 arch/x86/include/asm/paravirt_types.h | 15 +-
17935 arch/x86/include/asm/pgalloc.h | 23 +
17936 arch/x86/include/asm/pgtable-2level.h | 2 +
17937 arch/x86/include/asm/pgtable-3level.h | 7 +
17938 arch/x86/include/asm/pgtable.h | 128 +-
17939 arch/x86/include/asm/pgtable_32.h | 14 +-
17940 arch/x86/include/asm/pgtable_32_types.h | 24 +-
17941 arch/x86/include/asm/pgtable_64.h | 23 +-
17942 arch/x86/include/asm/pgtable_64_types.h | 5 +
17943 arch/x86/include/asm/pgtable_types.h | 26 +-
17944 arch/x86/include/asm/preempt.h | 2 +-
17945 arch/x86/include/asm/processor.h | 57 +-
17946 arch/x86/include/asm/ptrace.h | 13 +-
17947 arch/x86/include/asm/realmode.h | 4 +-
17948 arch/x86/include/asm/reboot.h | 10 +-
17949 arch/x86/include/asm/rmwcc.h | 84 +-
17950 arch/x86/include/asm/rwsem.h | 60 +-
17951 arch/x86/include/asm/segment.h | 27 +-
17952 arch/x86/include/asm/smap.h | 43 +
17953 arch/x86/include/asm/smp.h | 14 +-
17954 arch/x86/include/asm/stackprotector.h | 4 +-
17955 arch/x86/include/asm/stacktrace.h | 32 +-
17956 arch/x86/include/asm/switch_to.h | 4 +-
17957 arch/x86/include/asm/sys_ia32.h | 6 +-
17958 arch/x86/include/asm/thread_info.h | 27 +-
17959 arch/x86/include/asm/tlbflush.h | 77 +-
17960 arch/x86/include/asm/uaccess.h | 192 +-
17961 arch/x86/include/asm/uaccess_32.h | 28 +-
17962 arch/x86/include/asm/uaccess_64.h | 169 +-
17963 arch/x86/include/asm/word-at-a-time.h | 2 +-
17964 arch/x86/include/asm/x86_init.h | 10 +-
17965 arch/x86/include/asm/xen/page.h | 2 +-
17966 arch/x86/include/uapi/asm/e820.h | 2 +-
17967 arch/x86/kernel/Makefile | 2 +-
17968 arch/x86/kernel/acpi/boot.c | 4 +-
17969 arch/x86/kernel/acpi/sleep.c | 4 +
17970 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
17971 arch/x86/kernel/alternative.c | 124 +-
17972 arch/x86/kernel/apic/apic.c | 4 +-
17973 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
17974 arch/x86/kernel/apic/apic_noop.c | 2 +-
17975 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
17976 arch/x86/kernel/apic/io_apic.c | 8 +-
17977 arch/x86/kernel/apic/msi.c | 2 +-
17978 arch/x86/kernel/apic/probe_32.c | 4 +-
17979 arch/x86/kernel/apic/vector.c | 4 +-
17980 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
17981 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
17982 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
17983 arch/x86/kernel/apm_32.c | 21 +-
17984 arch/x86/kernel/asm-offsets.c | 20 +
17985 arch/x86/kernel/asm-offsets_64.c | 1 +
17986 arch/x86/kernel/cpu/Makefile | 4 -
17987 arch/x86/kernel/cpu/amd.c | 2 +-
17988 arch/x86/kernel/cpu/bugs_64.c | 2 +
17989 arch/x86/kernel/cpu/common.c | 202 +-
17990 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
17991 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
17992 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
17993 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
17994 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
17995 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
17996 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
17997 arch/x86/kernel/cpu/perf_event.c | 10 +-
17998 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
17999 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
18000 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
18001 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
18002 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
18003 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
18004 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
18005 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
18006 arch/x86/kernel/crash_dump_64.c | 2 +-
18007 arch/x86/kernel/doublefault.c | 8 +-
18008 arch/x86/kernel/dumpstack.c | 24 +-
18009 arch/x86/kernel/dumpstack_32.c | 25 +-
18010 arch/x86/kernel/dumpstack_64.c | 62 +-
18011 arch/x86/kernel/e820.c | 4 +-
18012 arch/x86/kernel/early_printk.c | 1 +
18013 arch/x86/kernel/espfix_64.c | 44 +-
18014 arch/x86/kernel/fpu/core.c | 24 +-
18015 arch/x86/kernel/fpu/init.c | 40 +-
18016 arch/x86/kernel/fpu/regset.c | 22 +-
18017 arch/x86/kernel/fpu/signal.c | 20 +-
18018 arch/x86/kernel/fpu/xstate.c | 8 +-
18019 arch/x86/kernel/ftrace.c | 18 +-
18020 arch/x86/kernel/head64.c | 14 +-
18021 arch/x86/kernel/head_32.S | 235 +-
18022 arch/x86/kernel/head_64.S | 173 +-
18023 arch/x86/kernel/i386_ksyms_32.c | 12 +
18024 arch/x86/kernel/i8259.c | 10 +-
18025 arch/x86/kernel/io_delay.c | 2 +-
18026 arch/x86/kernel/ioport.c | 2 +-
18027 arch/x86/kernel/irq.c | 8 +-
18028 arch/x86/kernel/irq_32.c | 45 +-
18029 arch/x86/kernel/jump_label.c | 10 +-
18030 arch/x86/kernel/kgdb.c | 21 +-
18031 arch/x86/kernel/kprobes/core.c | 28 +-
18032 arch/x86/kernel/kprobes/opt.c | 16 +-
18033 arch/x86/kernel/ksysfs.c | 2 +-
18034 arch/x86/kernel/kvmclock.c | 20 +-
18035 arch/x86/kernel/ldt.c | 25 +
18036 arch/x86/kernel/livepatch.c | 12 +-
18037 arch/x86/kernel/machine_kexec_32.c | 6 +-
18038 arch/x86/kernel/mcount_64.S | 19 +-
18039 arch/x86/kernel/module.c | 78 +-
18040 arch/x86/kernel/msr.c | 2 +-
18041 arch/x86/kernel/nmi.c | 34 +-
18042 arch/x86/kernel/nmi_selftest.c | 4 +-
18043 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
18044 arch/x86/kernel/paravirt.c | 45 +-
18045 arch/x86/kernel/paravirt_patch_64.c | 8 +
18046 arch/x86/kernel/pci-calgary_64.c | 2 +-
18047 arch/x86/kernel/pci-iommu_table.c | 2 +-
18048 arch/x86/kernel/pci-swiotlb.c | 2 +-
18049 arch/x86/kernel/process.c | 80 +-
18050 arch/x86/kernel/process_32.c | 29 +-
18051 arch/x86/kernel/process_64.c | 14 +-
18052 arch/x86/kernel/ptrace.c | 20 +-
18053 arch/x86/kernel/pvclock.c | 8 +-
18054 arch/x86/kernel/reboot.c | 44 +-
18055 arch/x86/kernel/reboot_fixups_32.c | 2 +-
18056 arch/x86/kernel/relocate_kernel_64.S | 3 +-
18057 arch/x86/kernel/setup.c | 29 +-
18058 arch/x86/kernel/setup_percpu.c | 29 +-
18059 arch/x86/kernel/signal.c | 17 +-
18060 arch/x86/kernel/smp.c | 2 +-
18061 arch/x86/kernel/smpboot.c | 29 +-
18062 arch/x86/kernel/step.c | 6 +-
18063 arch/x86/kernel/sys_i386_32.c | 184 +
18064 arch/x86/kernel/sys_x86_64.c | 22 +-
18065 arch/x86/kernel/tboot.c | 14 +-
18066 arch/x86/kernel/time.c | 8 +-
18067 arch/x86/kernel/tls.c | 7 +-
18068 arch/x86/kernel/tracepoint.c | 4 +-
18069 arch/x86/kernel/traps.c | 53 +-
18070 arch/x86/kernel/tsc.c | 2 +-
18071 arch/x86/kernel/uprobes.c | 2 +-
18072 arch/x86/kernel/vm86_32.c | 6 +-
18073 arch/x86/kernel/vmlinux.lds.S | 153 +-
18074 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
18075 arch/x86/kernel/x86_init.c | 6 +-
18076 arch/x86/kvm/cpuid.c | 21 +-
18077 arch/x86/kvm/emulate.c | 2 +-
18078 arch/x86/kvm/lapic.c | 2 +-
18079 arch/x86/kvm/paging_tmpl.h | 2 +-
18080 arch/x86/kvm/svm.c | 10 +-
18081 arch/x86/kvm/vmx.c | 62 +-
18082 arch/x86/kvm/x86.c | 42 +-
18083 arch/x86/lguest/boot.c | 3 +-
18084 arch/x86/lib/atomic64_386_32.S | 164 +
18085 arch/x86/lib/atomic64_cx8_32.S | 98 +-
18086 arch/x86/lib/checksum_32.S | 99 +-
18087 arch/x86/lib/clear_page_64.S | 3 +
18088 arch/x86/lib/cmpxchg16b_emu.S | 3 +
18089 arch/x86/lib/copy_page_64.S | 14 +-
18090 arch/x86/lib/copy_user_64.S | 66 +-
18091 arch/x86/lib/csum-copy_64.S | 14 +-
18092 arch/x86/lib/csum-wrappers_64.c | 8 +-
18093 arch/x86/lib/getuser.S | 74 +-
18094 arch/x86/lib/insn.c | 8 +-
18095 arch/x86/lib/iomap_copy_64.S | 2 +
18096 arch/x86/lib/memcpy_64.S | 6 +
18097 arch/x86/lib/memmove_64.S | 3 +-
18098 arch/x86/lib/memset_64.S | 3 +
18099 arch/x86/lib/mmx_32.c | 243 +-
18100 arch/x86/lib/msr-reg.S | 2 +
18101 arch/x86/lib/putuser.S | 87 +-
18102 arch/x86/lib/rwsem.S | 6 +-
18103 arch/x86/lib/usercopy_32.c | 359 +-
18104 arch/x86/lib/usercopy_64.c | 20 +-
18105 arch/x86/math-emu/fpu_aux.c | 2 +-
18106 arch/x86/math-emu/fpu_entry.c | 4 +-
18107 arch/x86/math-emu/fpu_system.h | 2 +-
18108 arch/x86/mm/Makefile | 4 +
18109 arch/x86/mm/extable.c | 26 +-
18110 arch/x86/mm/fault.c | 570 +-
18111 arch/x86/mm/gup.c | 6 +-
18112 arch/x86/mm/highmem_32.c | 6 +
18113 arch/x86/mm/hugetlbpage.c | 24 +-
18114 arch/x86/mm/init.c | 111 +-
18115 arch/x86/mm/init_32.c | 111 +-
18116 arch/x86/mm/init_64.c | 46 +-
18117 arch/x86/mm/iomap_32.c | 4 +
18118 arch/x86/mm/ioremap.c | 52 +-
18119 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
18120 arch/x86/mm/mmap.c | 40 +-
18121 arch/x86/mm/mmio-mod.c | 10 +-
18122 arch/x86/mm/numa.c | 2 +-
18123 arch/x86/mm/pageattr.c | 38 +-
18124 arch/x86/mm/pat.c | 12 +-
18125 arch/x86/mm/pat_rbtree.c | 2 +-
18126 arch/x86/mm/pf_in.c | 10 +-
18127 arch/x86/mm/pgtable.c | 214 +-
18128 arch/x86/mm/pgtable_32.c | 3 +
18129 arch/x86/mm/setup_nx.c | 7 +
18130 arch/x86/mm/tlb.c | 4 +
18131 arch/x86/mm/uderef_64.c | 37 +
18132 arch/x86/net/bpf_jit.S | 11 +
18133 arch/x86/net/bpf_jit_comp.c | 13 +-
18134 arch/x86/oprofile/backtrace.c | 6 +-
18135 arch/x86/oprofile/nmi_int.c | 8 +-
18136 arch/x86/oprofile/op_model_amd.c | 8 +-
18137 arch/x86/oprofile/op_model_ppro.c | 7 +-
18138 arch/x86/oprofile/op_x86_model.h | 2 +-
18139 arch/x86/pci/intel_mid_pci.c | 2 +-
18140 arch/x86/pci/irq.c | 8 +-
18141 arch/x86/pci/pcbios.c | 144 +-
18142 arch/x86/platform/efi/efi_32.c | 24 +
18143 arch/x86/platform/efi/efi_64.c | 26 +-
18144 arch/x86/platform/efi/efi_stub_32.S | 64 +-
18145 arch/x86/platform/efi/efi_stub_64.S | 2 +
18146 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
18147 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
18148 arch/x86/platform/intel-mid/mfld.c | 4 +-
18149 arch/x86/platform/intel-mid/mrfl.c | 2 +-
18150 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
18151 arch/x86/platform/olpc/olpc_dt.c | 2 +-
18152 arch/x86/power/cpu.c | 11 +-
18153 arch/x86/realmode/init.c | 10 +-
18154 arch/x86/realmode/rm/Makefile | 3 +
18155 arch/x86/realmode/rm/header.S | 4 +-
18156 arch/x86/realmode/rm/reboot.S | 4 +
18157 arch/x86/realmode/rm/trampoline_32.S | 12 +-
18158 arch/x86/realmode/rm/trampoline_64.S | 3 +-
18159 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
18160 arch/x86/tools/Makefile | 2 +-
18161 arch/x86/tools/relocs.c | 96 +-
18162 arch/x86/um/mem_32.c | 2 +-
18163 arch/x86/um/tls_32.c | 2 +-
18164 arch/x86/xen/enlighten.c | 50 +-
18165 arch/x86/xen/mmu.c | 19 +-
18166 arch/x86/xen/smp.c | 16 +-
18167 arch/x86/xen/xen-asm_32.S | 2 +-
18168 arch/x86/xen/xen-head.S | 11 +
18169 arch/x86/xen/xen-ops.h | 2 -
18170 block/bio.c | 4 +-
18171 block/blk-iopoll.c | 2 +-
18172 block/blk-map.c | 2 +-
18173 block/blk-softirq.c | 2 +-
18174 block/bsg.c | 12 +-
18175 block/compat_ioctl.c | 4 +-
18176 block/genhd.c | 9 +-
18177 block/partitions/efi.c | 8 +-
18178 block/scsi_ioctl.c | 29 +-
18179 crypto/cryptd.c | 4 +-
18180 crypto/pcrypt.c | 2 +-
18181 crypto/zlib.c | 12 +-
18182 drivers/acpi/acpi_video.c | 2 +-
18183 drivers/acpi/apei/apei-internal.h | 2 +-
18184 drivers/acpi/apei/ghes.c | 4 +-
18185 drivers/acpi/bgrt.c | 6 +-
18186 drivers/acpi/blacklist.c | 4 +-
18187 drivers/acpi/bus.c | 4 +-
18188 drivers/acpi/device_pm.c | 4 +-
18189 drivers/acpi/ec.c | 2 +-
18190 drivers/acpi/pci_slot.c | 2 +-
18191 drivers/acpi/processor_idle.c | 2 +-
18192 drivers/acpi/processor_pdc.c | 2 +-
18193 drivers/acpi/sleep.c | 2 +-
18194 drivers/acpi/sysfs.c | 4 +-
18195 drivers/acpi/thermal.c | 2 +-
18196 drivers/acpi/video_detect.c | 7 +-
18197 drivers/ata/libata-core.c | 12 +-
18198 drivers/ata/libata-scsi.c | 2 +-
18199 drivers/ata/libata.h | 2 +-
18200 drivers/ata/pata_arasan_cf.c | 4 +-
18201 drivers/atm/adummy.c | 2 +-
18202 drivers/atm/ambassador.c | 8 +-
18203 drivers/atm/atmtcp.c | 14 +-
18204 drivers/atm/eni.c | 10 +-
18205 drivers/atm/firestream.c | 8 +-
18206 drivers/atm/fore200e.c | 14 +-
18207 drivers/atm/he.c | 18 +-
18208 drivers/atm/horizon.c | 4 +-
18209 drivers/atm/idt77252.c | 36 +-
18210 drivers/atm/iphase.c | 34 +-
18211 drivers/atm/lanai.c | 12 +-
18212 drivers/atm/nicstar.c | 46 +-
18213 drivers/atm/solos-pci.c | 4 +-
18214 drivers/atm/suni.c | 4 +-
18215 drivers/atm/uPD98402.c | 16 +-
18216 drivers/atm/zatm.c | 6 +-
18217 drivers/base/bus.c | 4 +-
18218 drivers/base/devtmpfs.c | 8 +-
18219 drivers/base/node.c | 2 +-
18220 drivers/base/platform-msi.c | 20 +-
18221 drivers/base/power/domain.c | 11 +-
18222 drivers/base/power/sysfs.c | 2 +-
18223 drivers/base/power/wakeup.c | 8 +-
18224 drivers/base/regmap/regmap-debugfs.c | 11 +-
18225 drivers/base/syscore.c | 4 +-
18226 drivers/block/cciss.c | 28 +-
18227 drivers/block/cciss.h | 2 +-
18228 drivers/block/cpqarray.c | 28 +-
18229 drivers/block/cpqarray.h | 2 +-
18230 drivers/block/drbd/drbd_bitmap.c | 2 +-
18231 drivers/block/drbd/drbd_int.h | 8 +-
18232 drivers/block/drbd/drbd_main.c | 12 +-
18233 drivers/block/drbd/drbd_nl.c | 4 +-
18234 drivers/block/drbd/drbd_receiver.c | 34 +-
18235 drivers/block/drbd/drbd_worker.c | 8 +-
18236 drivers/block/pktcdvd.c | 4 +-
18237 drivers/block/rbd.c | 2 +-
18238 drivers/bluetooth/btwilink.c | 2 +-
18239 drivers/bus/arm-cci.c | 12 +-
18240 drivers/cdrom/cdrom.c | 11 +-
18241 drivers/cdrom/gdrom.c | 1 -
18242 drivers/char/agp/compat_ioctl.c | 2 +-
18243 drivers/char/agp/frontend.c | 4 +-
18244 drivers/char/agp/intel-gtt.c | 4 +-
18245 drivers/char/hpet.c | 2 +-
18246 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
18247 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
18248 drivers/char/mem.c | 47 +-
18249 drivers/char/nvram.c | 2 +-
18250 drivers/char/pcmcia/synclink_cs.c | 16 +-
18251 drivers/char/random.c | 12 +-
18252 drivers/char/sonypi.c | 11 +-
18253 drivers/char/tpm/tpm_acpi.c | 3 +-
18254 drivers/char/tpm/tpm_eventlog.c | 4 +-
18255 drivers/char/virtio_console.c | 4 +-
18256 drivers/clk/clk-composite.c | 2 +-
18257 drivers/clk/samsung/clk.h | 2 +-
18258 drivers/clk/socfpga/clk-gate.c | 9 +-
18259 drivers/clk/socfpga/clk-pll.c | 9 +-
18260 drivers/clk/ti/clk.c | 8 +-
18261 drivers/cpufreq/acpi-cpufreq.c | 17 +-
18262 drivers/cpufreq/cpufreq-dt.c | 4 +-
18263 drivers/cpufreq/cpufreq.c | 30 +-
18264 drivers/cpufreq/cpufreq_governor.c | 2 +-
18265 drivers/cpufreq/cpufreq_governor.h | 4 +-
18266 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
18267 drivers/cpufreq/intel_pstate.c | 33 +-
18268 drivers/cpufreq/p4-clockmod.c | 12 +-
18269 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
18270 drivers/cpufreq/speedstep-centrino.c | 7 +-
18271 drivers/cpuidle/driver.c | 2 +-
18272 drivers/cpuidle/dt_idle_states.c | 2 +-
18273 drivers/cpuidle/governor.c | 2 +-
18274 drivers/cpuidle/sysfs.c | 2 +-
18275 drivers/crypto/hifn_795x.c | 4 +-
18276 drivers/devfreq/devfreq.c | 4 +-
18277 drivers/dma/sh/shdma-base.c | 4 +-
18278 drivers/dma/sh/shdmac.c | 2 +-
18279 drivers/edac/edac_device.c | 4 +-
18280 drivers/edac/edac_mc_sysfs.c | 2 +-
18281 drivers/edac/edac_pci.c | 4 +-
18282 drivers/edac/edac_pci_sysfs.c | 22 +-
18283 drivers/edac/mce_amd.h | 2 +-
18284 drivers/firewire/core-card.c | 6 +-
18285 drivers/firewire/core-device.c | 2 +-
18286 drivers/firewire/core-transaction.c | 1 +
18287 drivers/firewire/core.h | 1 +
18288 drivers/firmware/dmi-id.c | 2 +-
18289 drivers/firmware/dmi_scan.c | 12 +-
18290 drivers/firmware/efi/cper.c | 8 +-
18291 drivers/firmware/efi/efi.c | 12 +-
18292 drivers/firmware/efi/efivars.c | 2 +-
18293 drivers/firmware/efi/runtime-map.c | 2 +-
18294 drivers/firmware/google/gsmi.c | 2 +-
18295 drivers/firmware/google/memconsole.c | 7 +-
18296 drivers/firmware/memmap.c | 2 +-
18297 drivers/firmware/psci.c | 2 +-
18298 drivers/gpio/gpio-davinci.c | 6 +-
18299 drivers/gpio/gpio-em.c | 2 +-
18300 drivers/gpio/gpio-ich.c | 2 +-
18301 drivers/gpio/gpio-omap.c | 4 +-
18302 drivers/gpio/gpio-rcar.c | 2 +-
18303 drivers/gpio/gpio-vr41xx.c | 2 +-
18304 drivers/gpio/gpiolib.c | 12 +-
18305 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
18306 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
18307 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
18308 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
18309 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
18310 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
18311 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
18312 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
18313 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
18314 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
18315 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
18316 drivers/gpu/drm/drm_crtc.c | 2 +-
18317 drivers/gpu/drm/drm_drv.c | 2 +-
18318 drivers/gpu/drm/drm_fops.c | 12 +-
18319 drivers/gpu/drm/drm_global.c | 14 +-
18320 drivers/gpu/drm/drm_info.c | 13 +-
18321 drivers/gpu/drm/drm_ioc32.c | 13 +-
18322 drivers/gpu/drm/drm_ioctl.c | 2 +-
18323 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
18324 drivers/gpu/drm/i810/i810_drv.h | 4 +-
18325 drivers/gpu/drm/i915/i915_dma.c | 2 +-
18326 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
18327 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
18328 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
18329 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
18330 drivers/gpu/drm/i915/intel_display.c | 26 +-
18331 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
18332 drivers/gpu/drm/mga/mga_drv.h | 4 +-
18333 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
18334 drivers/gpu/drm/mga/mga_irq.c | 8 +-
18335 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
18336 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
18337 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
18338 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
18339 drivers/gpu/drm/omapdrm/Makefile | 2 +-
18340 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
18341 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
18342 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
18343 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
18344 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
18345 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
18346 drivers/gpu/drm/r128/r128_cce.c | 2 +-
18347 drivers/gpu/drm/r128/r128_drv.h | 4 +-
18348 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
18349 drivers/gpu/drm/r128/r128_irq.c | 4 +-
18350 drivers/gpu/drm/r128/r128_state.c | 4 +-
18351 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
18352 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
18353 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
18354 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
18355 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
18356 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
18357 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
18358 drivers/gpu/drm/tegra/dc.c | 2 +-
18359 drivers/gpu/drm/tegra/dsi.c | 2 +-
18360 drivers/gpu/drm/tegra/hdmi.c | 2 +-
18361 drivers/gpu/drm/tegra/sor.c | 7 +-
18362 drivers/gpu/drm/tilcdc/Makefile | 6 +-
18363 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
18364 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
18365 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
18366 drivers/gpu/drm/udl/udl_fb.c | 1 -
18367 drivers/gpu/drm/via/via_drv.h | 4 +-
18368 drivers/gpu/drm/via/via_irq.c | 18 +-
18369 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
18370 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
18371 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
18372 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
18373 drivers/gpu/vga/vga_switcheroo.c | 4 +-
18374 drivers/hid/hid-core.c | 4 +-
18375 drivers/hid/hid-sensor-custom.c | 2 +-
18376 drivers/hv/channel.c | 2 +-
18377 drivers/hv/hv.c | 4 +-
18378 drivers/hv/hv_balloon.c | 18 +-
18379 drivers/hv/hyperv_vmbus.h | 2 +-
18380 drivers/hwmon/acpi_power_meter.c | 6 +-
18381 drivers/hwmon/applesmc.c | 2 +-
18382 drivers/hwmon/asus_atk0110.c | 10 +-
18383 drivers/hwmon/coretemp.c | 2 +-
18384 drivers/hwmon/dell-smm-hwmon.c | 2 +-
18385 drivers/hwmon/ibmaem.c | 2 +-
18386 drivers/hwmon/iio_hwmon.c | 2 +-
18387 drivers/hwmon/nct6683.c | 6 +-
18388 drivers/hwmon/nct6775.c | 6 +-
18389 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
18390 drivers/hwmon/sht15.c | 12 +-
18391 drivers/hwmon/via-cputemp.c | 2 +-
18392 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
18393 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
18394 drivers/i2c/i2c-dev.c | 2 +-
18395 drivers/ide/ide-cd.c | 2 +-
18396 drivers/ide/ide-disk.c | 2 +-
18397 drivers/iio/industrialio-core.c | 2 +-
18398 drivers/iio/magnetometer/ak8975.c | 2 +-
18399 drivers/infiniband/core/cm.c | 32 +-
18400 drivers/infiniband/core/fmr_pool.c | 20 +-
18401 drivers/infiniband/core/uverbs_cmd.c | 3 +
18402 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
18403 drivers/infiniband/hw/mlx4/mad.c | 2 +-
18404 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
18405 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
18406 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
18407 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
18408 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
18409 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
18410 drivers/infiniband/hw/nes/nes.c | 4 +-
18411 drivers/infiniband/hw/nes/nes.h | 40 +-
18412 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
18413 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
18414 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
18415 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
18416 drivers/infiniband/hw/qib/qib.h | 1 +
18417 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
18418 drivers/input/gameport/gameport.c | 4 +-
18419 drivers/input/input.c | 4 +-
18420 drivers/input/joystick/sidewinder.c | 1 +
18421 drivers/input/joystick/xpad.c | 4 +-
18422 drivers/input/misc/ims-pcu.c | 4 +-
18423 drivers/input/mouse/psmouse.h | 2 +-
18424 drivers/input/mousedev.c | 2 +-
18425 drivers/input/serio/serio.c | 4 +-
18426 drivers/input/serio/serio_raw.c | 4 +-
18427 drivers/input/touchscreen/htcpen.c | 2 +-
18428 drivers/iommu/arm-smmu-v3.c | 2 +-
18429 drivers/iommu/arm-smmu.c | 43 +-
18430 drivers/iommu/io-pgtable-arm.c | 101 +-
18431 drivers/iommu/io-pgtable.c | 11 +-
18432 drivers/iommu/io-pgtable.h | 19 +-
18433 drivers/iommu/iommu.c | 2 +-
18434 drivers/iommu/ipmmu-vmsa.c | 13 +-
18435 drivers/iommu/irq_remapping.c | 2 +-
18436 drivers/irqchip/irq-gic.c | 2 +-
18437 drivers/irqchip/irq-i8259.c | 2 +-
18438 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
18439 drivers/irqchip/irq-renesas-irqc.c | 2 +-
18440 drivers/isdn/capi/capi.c | 10 +-
18441 drivers/isdn/gigaset/interface.c | 8 +-
18442 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
18443 drivers/isdn/hardware/avm/b1.c | 4 +-
18444 drivers/isdn/i4l/isdn_common.c | 2 +
18445 drivers/isdn/i4l/isdn_tty.c | 22 +-
18446 drivers/isdn/icn/icn.c | 2 +-
18447 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
18448 drivers/lguest/core.c | 10 +-
18449 drivers/lguest/page_tables.c | 2 +-
18450 drivers/lguest/x86/core.c | 12 +-
18451 drivers/lguest/x86/switcher_32.S | 27 +-
18452 drivers/md/bcache/closure.h | 2 +-
18453 drivers/md/bitmap.c | 2 +-
18454 drivers/md/dm-ioctl.c | 2 +-
18455 drivers/md/dm-raid1.c | 18 +-
18456 drivers/md/dm-stats.c | 6 +-
18457 drivers/md/dm-stripe.c | 10 +-
18458 drivers/md/dm-table.c | 2 +-
18459 drivers/md/dm-thin-metadata.c | 4 +-
18460 drivers/md/dm.c | 16 +-
18461 drivers/md/md.c | 26 +-
18462 drivers/md/md.h | 6 +-
18463 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
18464 drivers/md/persistent-data/dm-space-map.h | 1 +
18465 drivers/md/raid1.c | 4 +-
18466 drivers/md/raid10.c | 18 +-
18467 drivers/md/raid5.c | 22 +-
18468 drivers/media/dvb-core/dvbdev.c | 2 +-
18469 drivers/media/dvb-frontends/af9033.h | 2 +-
18470 drivers/media/dvb-frontends/dib3000.h | 2 +-
18471 drivers/media/dvb-frontends/dib7000p.h | 2 +-
18472 drivers/media/dvb-frontends/dib8000.h | 2 +-
18473 drivers/media/pci/cx88/cx88-video.c | 6 +-
18474 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
18475 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
18476 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
18477 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
18478 drivers/media/pci/tw68/tw68-core.c | 2 +-
18479 drivers/media/platform/omap/omap_vout.c | 11 +-
18480 drivers/media/platform/s5p-tv/mixer.h | 2 +-
18481 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
18482 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
18483 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
18484 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
18485 drivers/media/radio/radio-cadet.c | 2 +
18486 drivers/media/radio/radio-maxiradio.c | 2 +-
18487 drivers/media/radio/radio-shark.c | 2 +-
18488 drivers/media/radio/radio-shark2.c | 2 +-
18489 drivers/media/radio/radio-si476x.c | 2 +-
18490 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
18491 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
18492 drivers/media/v4l2-core/v4l2-device.c | 4 +-
18493 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
18494 drivers/memory/omap-gpmc.c | 21 +-
18495 drivers/message/fusion/mptsas.c | 34 +-
18496 drivers/mfd/ab8500-debugfs.c | 2 +-
18497 drivers/mfd/kempld-core.c | 2 +-
18498 drivers/mfd/max8925-i2c.c | 2 +-
18499 drivers/mfd/tps65910.c | 2 +-
18500 drivers/mfd/twl4030-irq.c | 9 +-
18501 drivers/mfd/wm5110-tables.c | 2 +-
18502 drivers/mfd/wm8998-tables.c | 2 +-
18503 drivers/misc/c2port/core.c | 4 +-
18504 drivers/misc/kgdbts.c | 4 +-
18505 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
18506 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
18507 drivers/misc/mic/scif/scif_rb.c | 8 +-
18508 drivers/misc/sgi-gru/gruhandles.c | 4 +-
18509 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
18510 drivers/misc/sgi-gru/grutables.h | 154 +-
18511 drivers/misc/sgi-xp/xp.h | 2 +-
18512 drivers/misc/sgi-xp/xpc.h | 3 +-
18513 drivers/misc/sgi-xp/xpc_main.c | 2 +-
18514 drivers/mmc/card/block.c | 2 +-
18515 drivers/mmc/host/dw_mmc.h | 2 +-
18516 drivers/mmc/host/mmci.c | 4 +-
18517 drivers/mmc/host/omap_hsmmc.c | 4 +-
18518 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
18519 drivers/mmc/host/sdhci-s3c.c | 8 +-
18520 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
18521 drivers/mtd/nand/denali.c | 1 +
18522 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
18523 drivers/mtd/nftlmount.c | 1 +
18524 drivers/mtd/sm_ftl.c | 2 +-
18525 drivers/net/bonding/bond_netlink.c | 2 +-
18526 drivers/net/caif/caif_hsi.c | 2 +-
18527 drivers/net/can/Kconfig | 2 +-
18528 drivers/net/can/dev.c | 2 +-
18529 drivers/net/can/vcan.c | 2 +-
18530 drivers/net/dummy.c | 2 +-
18531 drivers/net/ethernet/8390/ax88796.c | 4 +-
18532 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
18533 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
18534 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
18535 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
18536 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
18537 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
18538 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
18539 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
18540 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
18541 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
18542 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
18543 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
18544 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
18545 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
18546 drivers/net/ethernet/broadcom/tg3.h | 1 +
18547 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
18548 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
18549 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
18550 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
18551 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
18552 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
18553 drivers/net/ethernet/faraday/ftmac100.c | 2 +
18554 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
18555 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
18556 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
18557 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
18558 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
18559 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
18560 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
18561 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
18562 drivers/net/ethernet/realtek/r8169.c | 8 +-
18563 drivers/net/ethernet/sfc/ptp.c | 2 +-
18564 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
18565 drivers/net/ethernet/via/via-rhine.c | 2 +-
18566 drivers/net/geneve.c | 2 +-
18567 drivers/net/hyperv/hyperv_net.h | 2 +-
18568 drivers/net/hyperv/rndis_filter.c | 4 +-
18569 drivers/net/ifb.c | 2 +-
18570 drivers/net/ipvlan/ipvlan_core.c | 2 +-
18571 drivers/net/macvlan.c | 20 +-
18572 drivers/net/macvtap.c | 6 +-
18573 drivers/net/nlmon.c | 2 +-
18574 drivers/net/phy/phy_device.c | 6 +-
18575 drivers/net/ppp/ppp_generic.c | 4 +-
18576 drivers/net/slip/slhc.c | 2 +-
18577 drivers/net/team/team.c | 4 +-
18578 drivers/net/tun.c | 7 +-
18579 drivers/net/usb/hso.c | 23 +-
18580 drivers/net/usb/r8152.c | 2 +-
18581 drivers/net/usb/sierra_net.c | 4 +-
18582 drivers/net/virtio_net.c | 2 +-
18583 drivers/net/vrf.c | 2 +-
18584 drivers/net/vxlan.c | 4 +-
18585 drivers/net/wimax/i2400m/rx.c | 2 +-
18586 drivers/net/wireless/airo.c | 2 +-
18587 drivers/net/wireless/at76c50x-usb.c | 2 +-
18588 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
18589 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
18590 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
18591 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
18592 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
18593 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
18594 drivers/net/wireless/ath/ath9k/main.c | 22 +-
18595 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
18596 drivers/net/wireless/b43/phy_lp.c | 2 +-
18597 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
18598 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
18599 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
18600 drivers/net/wireless/mac80211_hwsim.c | 28 +-
18601 drivers/net/wireless/rndis_wlan.c | 2 +-
18602 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
18603 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
18604 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
18605 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
18606 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
18607 drivers/nfc/nfcwilink.c | 2 +-
18608 drivers/of/fdt.c | 4 +-
18609 drivers/oprofile/buffer_sync.c | 8 +-
18610 drivers/oprofile/event_buffer.c | 2 +-
18611 drivers/oprofile/oprof.c | 2 +-
18612 drivers/oprofile/oprofile_stats.c | 10 +-
18613 drivers/oprofile/oprofile_stats.h | 10 +-
18614 drivers/oprofile/oprofilefs.c | 6 +-
18615 drivers/oprofile/timer_int.c | 2 +-
18616 drivers/parport/procfs.c | 4 +-
18617 drivers/pci/host/pci-host-generic.c | 24 +-
18618 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
18619 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
18620 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
18621 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
18622 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
18623 drivers/pci/hotplug/pciehp_core.c | 2 +-
18624 drivers/pci/msi.c | 22 +-
18625 drivers/pci/pci-sysfs.c | 6 +-
18626 drivers/pci/pci.h | 2 +-
18627 drivers/pci/pcie/aspm.c | 6 +-
18628 drivers/pci/pcie/portdrv_pci.c | 2 +-
18629 drivers/pci/probe.c | 2 +-
18630 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
18631 drivers/pinctrl/pinctrl-at91.c | 5 +-
18632 drivers/platform/chrome/chromeos_pstore.c | 2 +-
18633 drivers/platform/x86/alienware-wmi.c | 4 +-
18634 drivers/platform/x86/compal-laptop.c | 2 +-
18635 drivers/platform/x86/hdaps.c | 2 +-
18636 drivers/platform/x86/ibm_rtl.c | 2 +-
18637 drivers/platform/x86/intel_oaktrail.c | 2 +-
18638 drivers/platform/x86/msi-laptop.c | 16 +-
18639 drivers/platform/x86/msi-wmi.c | 2 +-
18640 drivers/platform/x86/samsung-laptop.c | 2 +-
18641 drivers/platform/x86/samsung-q10.c | 2 +-
18642 drivers/platform/x86/sony-laptop.c | 14 +-
18643 drivers/platform/x86/thinkpad_acpi.c | 2 +-
18644 drivers/pnp/pnpbios/bioscalls.c | 14 +-
18645 drivers/pnp/pnpbios/core.c | 2 +-
18646 drivers/power/pda_power.c | 7 +-
18647 drivers/power/power_supply.h | 4 +-
18648 drivers/power/power_supply_core.c | 7 +-
18649 drivers/power/power_supply_sysfs.c | 6 +-
18650 drivers/power/reset/at91-reset.c | 9 +-
18651 drivers/powercap/powercap_sys.c | 136 +-
18652 drivers/ptp/ptp_private.h | 2 +-
18653 drivers/ptp/ptp_sysfs.c | 2 +-
18654 drivers/regulator/core.c | 4 +-
18655 drivers/regulator/max8660.c | 6 +-
18656 drivers/regulator/max8973-regulator.c | 16 +-
18657 drivers/regulator/mc13892-regulator.c | 8 +-
18658 drivers/rtc/rtc-armada38x.c | 7 +-
18659 drivers/rtc/rtc-cmos.c | 4 +-
18660 drivers/rtc/rtc-ds1307.c | 2 +-
18661 drivers/rtc/rtc-m48t59.c | 4 +-
18662 drivers/rtc/rtc-test.c | 6 +-
18663 drivers/scsi/be2iscsi/be_main.c | 2 +-
18664 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
18665 drivers/scsi/bfa/bfa_ioc.h | 4 +-
18666 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
18667 drivers/scsi/hosts.c | 4 +-
18668 drivers/scsi/hpsa.c | 38 +-
18669 drivers/scsi/hpsa.h | 2 +-
18670 drivers/scsi/libfc/fc_exch.c | 50 +-
18671 drivers/scsi/libsas/sas_ata.c | 2 +-
18672 drivers/scsi/lpfc/lpfc.h | 8 +-
18673 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
18674 drivers/scsi/lpfc/lpfc_init.c | 6 +-
18675 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
18676 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
18677 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
18678 drivers/scsi/pmcraid.c | 20 +-
18679 drivers/scsi/pmcraid.h | 8 +-
18680 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
18681 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
18682 drivers/scsi/qla2xxx/qla_os.c | 6 +-
18683 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
18684 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
18685 drivers/scsi/scsi.c | 2 +-
18686 drivers/scsi/scsi_lib.c | 8 +-
18687 drivers/scsi/scsi_sysfs.c | 2 +-
18688 drivers/scsi/scsi_transport_fc.c | 8 +-
18689 drivers/scsi/scsi_transport_iscsi.c | 6 +-
18690 drivers/scsi/scsi_transport_srp.c | 6 +-
18691 drivers/scsi/sd.c | 6 +-
18692 drivers/scsi/sg.c | 2 +-
18693 drivers/scsi/sr.c | 21 +-
18694 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
18695 drivers/spi/spi.c | 2 +-
18696 drivers/staging/android/timed_output.c | 6 +-
18697 drivers/staging/comedi/comedi_fops.c | 8 +-
18698 drivers/staging/fbtft/fbtft-core.c | 2 +-
18699 drivers/staging/fbtft/fbtft.h | 2 +-
18700 drivers/staging/gdm724x/gdm_tty.c | 2 +-
18701 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
18702 drivers/staging/iio/adc/ad7280a.c | 4 +-
18703 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
18704 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
18705 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
18706 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
18707 drivers/staging/lustre/lustre/include/obd.h | 2 +-
18708 drivers/staging/octeon/ethernet-rx.c | 20 +-
18709 drivers/staging/octeon/ethernet.c | 8 +-
18710 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
18711 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
18712 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
18713 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
18714 drivers/staging/sm750fb/sm750.c | 14 +-
18715 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
18716 drivers/target/sbp/sbp_target.c | 4 +-
18717 drivers/thermal/cpu_cooling.c | 9 +-
18718 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
18719 drivers/thermal/of-thermal.c | 17 +-
18720 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
18721 drivers/tty/cyclades.c | 6 +-
18722 drivers/tty/hvc/hvc_console.c | 14 +-
18723 drivers/tty/hvc/hvcs.c | 21 +-
18724 drivers/tty/hvc/hvsi.c | 22 +-
18725 drivers/tty/hvc/hvsi_lib.c | 4 +-
18726 drivers/tty/ipwireless/tty.c | 27 +-
18727 drivers/tty/moxa.c | 2 +-
18728 drivers/tty/n_gsm.c | 4 +-
18729 drivers/tty/n_tty.c | 3 +-
18730 drivers/tty/pty.c | 4 +-
18731 drivers/tty/rocket.c | 6 +-
18732 drivers/tty/serial/8250/8250_core.c | 10 +-
18733 drivers/tty/serial/ifx6x60.c | 2 +-
18734 drivers/tty/serial/ioc4_serial.c | 6 +-
18735 drivers/tty/serial/kgdb_nmi.c | 4 +-
18736 drivers/tty/serial/kgdboc.c | 32 +-
18737 drivers/tty/serial/msm_serial.c | 4 +-
18738 drivers/tty/serial/samsung.c | 9 +-
18739 drivers/tty/serial/serial_core.c | 8 +-
18740 drivers/tty/synclink.c | 34 +-
18741 drivers/tty/synclink_gt.c | 28 +-
18742 drivers/tty/synclinkmp.c | 34 +-
18743 drivers/tty/tty_io.c | 2 +-
18744 drivers/tty/tty_ldisc.c | 8 +-
18745 drivers/tty/tty_port.c | 22 +-
18746 drivers/uio/uio.c | 13 +-
18747 drivers/usb/atm/cxacru.c | 2 +-
18748 drivers/usb/atm/usbatm.c | 24 +-
18749 drivers/usb/class/cdc-acm.h | 2 +-
18750 drivers/usb/core/devices.c | 6 +-
18751 drivers/usb/core/devio.c | 12 +-
18752 drivers/usb/core/hcd.c | 4 +-
18753 drivers/usb/core/sysfs.c | 2 +-
18754 drivers/usb/core/usb.c | 2 +-
18755 drivers/usb/early/ehci-dbgp.c | 16 +-
18756 drivers/usb/gadget/function/u_serial.c | 22 +-
18757 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
18758 drivers/usb/host/ehci-hcd.c | 2 +-
18759 drivers/usb/host/ehci-hub.c | 4 +-
18760 drivers/usb/host/ehci-q.c | 4 +-
18761 drivers/usb/host/fotg210-hcd.c | 2 +-
18762 drivers/usb/host/fusbh200-hcd.c | 2 +-
18763 drivers/usb/host/hwa-hc.c | 2 +-
18764 drivers/usb/host/ohci-hcd.c | 2 +-
18765 drivers/usb/host/r8a66597.h | 2 +-
18766 drivers/usb/host/uhci-hcd.c | 2 +-
18767 drivers/usb/host/xhci-pci.c | 2 +-
18768 drivers/usb/host/xhci.c | 2 +-
18769 drivers/usb/misc/appledisplay.c | 4 +-
18770 drivers/usb/serial/console.c | 8 +-
18771 drivers/usb/storage/transport.c | 2 +-
18772 drivers/usb/storage/usb.c | 2 +-
18773 drivers/usb/storage/usb.h | 2 +-
18774 drivers/usb/usbip/vhci.h | 2 +-
18775 drivers/usb/usbip/vhci_hcd.c | 6 +-
18776 drivers/usb/usbip/vhci_rx.c | 2 +-
18777 drivers/usb/wusbcore/wa-hc.h | 4 +-
18778 drivers/usb/wusbcore/wa-xfer.c | 2 +-
18779 drivers/vfio/vfio.c | 2 +-
18780 drivers/vhost/vringh.c | 20 +-
18781 drivers/video/backlight/kb3886_bl.c | 2 +-
18782 drivers/video/console/fbcon.c | 2 +-
18783 drivers/video/fbdev/aty/aty128fb.c | 2 +-
18784 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
18785 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
18786 drivers/video/fbdev/core/fb_defio.c | 6 +-
18787 drivers/video/fbdev/core/fbmem.c | 2 +-
18788 drivers/video/fbdev/hyperv_fb.c | 4 +-
18789 drivers/video/fbdev/i810/i810_accel.c | 1 +
18790 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
18791 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
18792 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
18793 drivers/video/fbdev/omap2/dss/display.c | 8 +-
18794 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
18795 drivers/video/fbdev/smscufx.c | 4 +-
18796 drivers/video/fbdev/udlfb.c | 36 +-
18797 drivers/video/fbdev/uvesafb.c | 52 +-
18798 drivers/video/fbdev/vesafb.c | 58 +-
18799 drivers/video/fbdev/via/via_clock.h | 2 +-
18800 drivers/xen/events/events_base.c | 6 +-
18801 drivers/xen/evtchn.c | 4 +-
18802 fs/Kconfig.binfmt | 2 +-
18803 fs/afs/inode.c | 4 +-
18804 fs/aio.c | 2 +-
18805 fs/autofs4/waitq.c | 2 +-
18806 fs/befs/endian.h | 6 +-
18807 fs/binfmt_aout.c | 23 +-
18808 fs/binfmt_elf.c | 670 +-
18809 fs/binfmt_elf_fdpic.c | 4 +-
18810 fs/block_dev.c | 2 +-
18811 fs/btrfs/ctree.c | 9 +-
18812 fs/btrfs/delayed-inode.c | 9 +-
18813 fs/btrfs/delayed-inode.h | 6 +-
18814 fs/btrfs/file.c | 10 +-
18815 fs/btrfs/inode.c | 14 +-
18816 fs/btrfs/super.c | 2 +-
18817 fs/btrfs/sysfs.c | 2 +-
18818 fs/btrfs/tests/free-space-tests.c | 8 +-
18819 fs/btrfs/tree-log.h | 2 +-
18820 fs/buffer.c | 2 +-
18821 fs/cachefiles/bind.c | 6 +-
18822 fs/cachefiles/daemon.c | 8 +-
18823 fs/cachefiles/internal.h | 12 +-
18824 fs/cachefiles/namei.c | 2 +-
18825 fs/cachefiles/proc.c | 12 +-
18826 fs/ceph/dir.c | 12 +-
18827 fs/ceph/super.c | 4 +-
18828 fs/cifs/cifs_debug.c | 12 +-
18829 fs/cifs/cifsfs.c | 8 +-
18830 fs/cifs/cifsglob.h | 54 +-
18831 fs/cifs/file.c | 10 +-
18832 fs/cifs/misc.c | 4 +-
18833 fs/cifs/smb1ops.c | 80 +-
18834 fs/cifs/smb2ops.c | 84 +-
18835 fs/cifs/smb2pdu.c | 3 +-
18836 fs/coda/cache.c | 10 +-
18837 fs/compat.c | 4 +-
18838 fs/compat_binfmt_elf.c | 2 +
18839 fs/compat_ioctl.c | 12 +-
18840 fs/configfs/dir.c | 10 +-
18841 fs/coredump.c | 16 +-
18842 fs/dcache.c | 51 +-
18843 fs/ecryptfs/inode.c | 2 +-
18844 fs/ecryptfs/miscdev.c | 2 +-
18845 fs/exec.c | 362 +-
18846 fs/ext2/xattr.c | 5 +-
18847 fs/ext4/ext4.h | 20 +-
18848 fs/ext4/mballoc.c | 44 +-
18849 fs/ext4/resize.c | 16 +-
18850 fs/ext4/super.c | 4 +-
18851 fs/ext4/xattr.c | 5 +-
18852 fs/fhandle.c | 3 +-
18853 fs/file.c | 4 +-
18854 fs/fs_struct.c | 8 +-
18855 fs/fscache/cookie.c | 40 +-
18856 fs/fscache/internal.h | 202 +-
18857 fs/fscache/object.c | 26 +-
18858 fs/fscache/operation.c | 38 +-
18859 fs/fscache/page.c | 110 +-
18860 fs/fscache/stats.c | 348 +-
18861 fs/fuse/cuse.c | 10 +-
18862 fs/fuse/dev.c | 4 +-
18863 fs/gfs2/glock.c | 22 +-
18864 fs/gfs2/glops.c | 4 +-
18865 fs/gfs2/quota.c | 6 +-
18866 fs/hugetlbfs/inode.c | 13 +-
18867 fs/inode.c | 4 +-
18868 fs/jffs2/erase.c | 3 +-
18869 fs/jffs2/wbuf.c | 3 +-
18870 fs/jfs/super.c | 2 +-
18871 fs/kernfs/dir.c | 2 +-
18872 fs/kernfs/file.c | 20 +-
18873 fs/libfs.c | 10 +-
18874 fs/lockd/clntproc.c | 4 +-
18875 fs/namei.c | 16 +-
18876 fs/namespace.c | 16 +-
18877 fs/nfs/callback_xdr.c | 2 +-
18878 fs/nfs/inode.c | 6 +-
18879 fs/nfsd/nfs4proc.c | 2 +-
18880 fs/nfsd/nfs4xdr.c | 2 +-
18881 fs/nfsd/nfscache.c | 11 +-
18882 fs/nfsd/vfs.c | 6 +-
18883 fs/nls/nls_base.c | 26 +-
18884 fs/nls/nls_euc-jp.c | 6 +-
18885 fs/nls/nls_koi8-ru.c | 6 +-
18886 fs/notify/fanotify/fanotify_user.c | 4 +-
18887 fs/notify/notification.c | 4 +-
18888 fs/ntfs/dir.c | 2 +-
18889 fs/ntfs/super.c | 6 +-
18890 fs/ocfs2/localalloc.c | 2 +-
18891 fs/ocfs2/ocfs2.h | 10 +-
18892 fs/ocfs2/suballoc.c | 12 +-
18893 fs/ocfs2/super.c | 20 +-
18894 fs/pipe.c | 72 +-
18895 fs/posix_acl.c | 4 +-
18896 fs/proc/array.c | 20 +
18897 fs/proc/base.c | 4 +-
18898 fs/proc/kcore.c | 34 +-
18899 fs/proc/meminfo.c | 2 +-
18900 fs/proc/nommu.c | 2 +-
18901 fs/proc/proc_sysctl.c | 26 +-
18902 fs/proc/task_mmu.c | 39 +-
18903 fs/proc/task_nommu.c | 4 +-
18904 fs/proc/vmcore.c | 16 +-
18905 fs/qnx6/qnx6.h | 4 +-
18906 fs/quota/netlink.c | 4 +-
18907 fs/read_write.c | 2 +-
18908 fs/reiserfs/do_balan.c | 2 +-
18909 fs/reiserfs/procfs.c | 2 +-
18910 fs/reiserfs/reiserfs.h | 4 +-
18911 fs/seq_file.c | 4 +-
18912 fs/splice.c | 43 +-
18913 fs/squashfs/xattr.c | 12 +-
18914 fs/sysv/sysv.h | 2 +-
18915 fs/tracefs/inode.c | 8 +-
18916 fs/udf/misc.c | 2 +-
18917 fs/ufs/swab.h | 4 +-
18918 fs/userfaultfd.c | 2 +-
18919 fs/xattr.c | 21 +
18920 fs/xfs/libxfs/xfs_bmap.c | 2 +-
18921 fs/xfs/xfs_dir2_readdir.c | 7 +-
18922 fs/xfs/xfs_ioctl.c | 2 +-
18923 fs/xfs/xfs_linux.h | 4 +-
18924 include/asm-generic/4level-fixup.h | 2 +
18925 include/asm-generic/atomic-long.h | 156 +-
18926 include/asm-generic/atomic64.h | 12 +
18927 include/asm-generic/bitops/__fls.h | 2 +-
18928 include/asm-generic/bitops/fls.h | 2 +-
18929 include/asm-generic/bitops/fls64.h | 4 +-
18930 include/asm-generic/bug.h | 6 +-
18931 include/asm-generic/cache.h | 4 +-
18932 include/asm-generic/emergency-restart.h | 2 +-
18933 include/asm-generic/kmap_types.h | 4 +-
18934 include/asm-generic/local.h | 13 +
18935 include/asm-generic/pgtable-nopmd.h | 18 +-
18936 include/asm-generic/pgtable-nopud.h | 15 +-
18937 include/asm-generic/pgtable.h | 16 +
18938 include/asm-generic/sections.h | 1 +
18939 include/asm-generic/uaccess.h | 16 +
18940 include/asm-generic/vmlinux.lds.h | 15 +-
18941 include/crypto/algapi.h | 2 +-
18942 include/drm/drmP.h | 16 +-
18943 include/drm/drm_crtc_helper.h | 2 +-
18944 include/drm/drm_mm.h | 2 +-
18945 include/drm/i915_pciids.h | 2 +-
18946 include/drm/intel-gtt.h | 4 +-
18947 include/drm/ttm/ttm_memory.h | 2 +-
18948 include/drm/ttm/ttm_page_alloc.h | 1 +
18949 include/keys/asymmetric-subtype.h | 2 +-
18950 include/linux/atmdev.h | 4 +-
18951 include/linux/atomic.h | 17 +-
18952 include/linux/audit.h | 2 +-
18953 include/linux/average.h | 2 +-
18954 include/linux/binfmts.h | 3 +-
18955 include/linux/bitmap.h | 2 +-
18956 include/linux/bitops.h | 8 +-
18957 include/linux/blkdev.h | 2 +-
18958 include/linux/blktrace_api.h | 2 +-
18959 include/linux/cache.h | 8 +
18960 include/linux/cdrom.h | 1 -
18961 include/linux/cleancache.h | 2 +-
18962 include/linux/clk-provider.h | 1 +
18963 include/linux/compat.h | 6 +-
18964 include/linux/compiler-gcc.h | 28 +-
18965 include/linux/compiler.h | 157 +-
18966 include/linux/configfs.h | 2 +-
18967 include/linux/cpufreq.h | 3 +-
18968 include/linux/cpuidle.h | 5 +-
18969 include/linux/cpumask.h | 14 +-
18970 include/linux/crypto.h | 4 +-
18971 include/linux/ctype.h | 2 +-
18972 include/linux/dcache.h | 4 +-
18973 include/linux/decompress/mm.h | 2 +-
18974 include/linux/devfreq.h | 2 +-
18975 include/linux/device.h | 7 +-
18976 include/linux/dma-mapping.h | 2 +-
18977 include/linux/efi.h | 1 +
18978 include/linux/elf.h | 2 +
18979 include/linux/err.h | 4 +-
18980 include/linux/extcon.h | 2 +-
18981 include/linux/fb.h | 3 +-
18982 include/linux/fdtable.h | 2 +-
18983 include/linux/fs.h | 5 +-
18984 include/linux/fs_struct.h | 2 +-
18985 include/linux/fscache-cache.h | 2 +-
18986 include/linux/fscache.h | 2 +-
18987 include/linux/fsnotify.h | 2 +-
18988 include/linux/genhd.h | 4 +-
18989 include/linux/genl_magic_func.h | 2 +-
18990 include/linux/gfp.h | 12 +-
18991 include/linux/highmem.h | 12 +
18992 include/linux/hwmon-sysfs.h | 6 +-
18993 include/linux/i2c.h | 1 +
18994 include/linux/if_pppox.h | 2 +-
18995 include/linux/init.h | 12 +-
18996 include/linux/init_task.h | 7 +
18997 include/linux/interrupt.h | 6 +-
18998 include/linux/iommu.h | 2 +-
18999 include/linux/ioport.h | 2 +-
19000 include/linux/ipc.h | 2 +-
19001 include/linux/irq.h | 5 +-
19002 include/linux/irqdesc.h | 2 +-
19003 include/linux/irqdomain.h | 3 +
19004 include/linux/jiffies.h | 16 +-
19005 include/linux/key-type.h | 2 +-
19006 include/linux/kgdb.h | 6 +-
19007 include/linux/kmemleak.h | 4 +-
19008 include/linux/kobject.h | 3 +-
19009 include/linux/kobject_ns.h | 2 +-
19010 include/linux/kref.h | 2 +-
19011 include/linux/libata.h | 2 +-
19012 include/linux/linkage.h | 1 +
19013 include/linux/list.h | 15 +
19014 include/linux/lockref.h | 26 +-
19015 include/linux/math64.h | 10 +-
19016 include/linux/mempolicy.h | 7 +
19017 include/linux/mm.h | 102 +-
19018 include/linux/mm_types.h | 20 +
19019 include/linux/mmiotrace.h | 4 +-
19020 include/linux/mmzone.h | 2 +-
19021 include/linux/mod_devicetable.h | 4 +-
19022 include/linux/module.h | 69 +-
19023 include/linux/moduleloader.h | 16 +
19024 include/linux/moduleparam.h | 4 +-
19025 include/linux/net.h | 2 +-
19026 include/linux/netdevice.h | 7 +-
19027 include/linux/netfilter.h | 2 +-
19028 include/linux/netfilter/nfnetlink.h | 2 +-
19029 include/linux/nls.h | 4 +-
19030 include/linux/notifier.h | 3 +-
19031 include/linux/oprofile.h | 4 +-
19032 include/linux/padata.h | 2 +-
19033 include/linux/pci_hotplug.h | 3 +-
19034 include/linux/percpu.h | 2 +-
19035 include/linux/perf_event.h | 12 +-
19036 include/linux/pipe_fs_i.h | 8 +-
19037 include/linux/pm.h | 1 +
19038 include/linux/pm_domain.h | 4 +-
19039 include/linux/pm_runtime.h | 2 +-
19040 include/linux/pnp.h | 2 +-
19041 include/linux/poison.h | 4 +-
19042 include/linux/power/smartreflex.h | 2 +-
19043 include/linux/ppp-comp.h | 2 +-
19044 include/linux/preempt.h | 21 +
19045 include/linux/proc_ns.h | 2 +-
19046 include/linux/psci.h | 2 +-
19047 include/linux/quota.h | 2 +-
19048 include/linux/random.h | 19 +-
19049 include/linux/rculist.h | 16 +
19050 include/linux/reboot.h | 14 +-
19051 include/linux/regset.h | 3 +-
19052 include/linux/relay.h | 2 +-
19053 include/linux/rio.h | 2 +-
19054 include/linux/rmap.h | 4 +-
19055 include/linux/sched.h | 72 +-
19056 include/linux/sched/sysctl.h | 1 +
19057 include/linux/semaphore.h | 2 +-
19058 include/linux/seq_file.h | 1 +
19059 include/linux/signal.h | 2 +-
19060 include/linux/skbuff.h | 12 +-
19061 include/linux/slab.h | 47 +-
19062 include/linux/slab_def.h | 14 +-
19063 include/linux/slub_def.h | 2 +-
19064 include/linux/smp.h | 2 +
19065 include/linux/sock_diag.h | 2 +-
19066 include/linux/sonet.h | 2 +-
19067 include/linux/sunrpc/addr.h | 8 +-
19068 include/linux/sunrpc/clnt.h | 2 +-
19069 include/linux/sunrpc/svc.h | 2 +-
19070 include/linux/sunrpc/svc_rdma.h | 18 +-
19071 include/linux/sunrpc/svcauth.h | 2 +-
19072 include/linux/swapops.h | 10 +-
19073 include/linux/swiotlb.h | 3 +-
19074 include/linux/syscalls.h | 21 +-
19075 include/linux/syscore_ops.h | 2 +-
19076 include/linux/sysctl.h | 3 +-
19077 include/linux/sysfs.h | 9 +-
19078 include/linux/sysrq.h | 3 +-
19079 include/linux/tcp.h | 14 +-
19080 include/linux/thread_info.h | 7 +
19081 include/linux/tty.h | 4 +-
19082 include/linux/tty_driver.h | 2 +-
19083 include/linux/tty_ldisc.h | 2 +-
19084 include/linux/types.h | 16 +
19085 include/linux/uaccess.h | 6 +-
19086 include/linux/uio_driver.h | 2 +-
19087 include/linux/unaligned/access_ok.h | 24 +-
19088 include/linux/usb.h | 12 +-
19089 include/linux/usb/hcd.h | 1 +
19090 include/linux/usb/renesas_usbhs.h | 2 +-
19091 include/linux/vermagic.h | 21 +-
19092 include/linux/vga_switcheroo.h | 8 +-
19093 include/linux/vmalloc.h | 7 +-
19094 include/linux/vmstat.h | 24 +-
19095 include/linux/xattr.h | 5 +-
19096 include/linux/zlib.h | 3 +-
19097 include/media/v4l2-dev.h | 2 +-
19098 include/media/v4l2-device.h | 2 +-
19099 include/net/9p/transport.h | 2 +-
19100 include/net/bluetooth/l2cap.h | 2 +-
19101 include/net/bonding.h | 2 +-
19102 include/net/caif/cfctrl.h | 6 +-
19103 include/net/flow.h | 2 +-
19104 include/net/genetlink.h | 2 +-
19105 include/net/gro_cells.h | 2 +-
19106 include/net/inet_connection_sock.h | 2 +-
19107 include/net/inet_sock.h | 2 +-
19108 include/net/inetpeer.h | 2 +-
19109 include/net/ip_fib.h | 2 +-
19110 include/net/ip_vs.h | 8 +-
19111 include/net/ipv6.h | 2 +-
19112 include/net/irda/ircomm_tty.h | 1 +
19113 include/net/iucv/af_iucv.h | 2 +-
19114 include/net/llc_c_ac.h | 2 +-
19115 include/net/llc_c_ev.h | 4 +-
19116 include/net/llc_c_st.h | 2 +-
19117 include/net/llc_s_ac.h | 2 +-
19118 include/net/llc_s_st.h | 2 +-
19119 include/net/mac80211.h | 4 +-
19120 include/net/neighbour.h | 2 +-
19121 include/net/net_namespace.h | 18 +-
19122 include/net/netlink.h | 2 +-
19123 include/net/netns/conntrack.h | 6 +-
19124 include/net/netns/ipv4.h | 4 +-
19125 include/net/netns/ipv6.h | 4 +-
19126 include/net/netns/xfrm.h | 2 +-
19127 include/net/ping.h | 2 +-
19128 include/net/protocol.h | 4 +-
19129 include/net/rtnetlink.h | 2 +-
19130 include/net/sctp/checksum.h | 4 +-
19131 include/net/sctp/sm.h | 4 +-
19132 include/net/sctp/structs.h | 2 +-
19133 include/net/sock.h | 12 +-
19134 include/net/tcp.h | 8 +-
19135 include/net/xfrm.h | 13 +-
19136 include/rdma/iw_cm.h | 2 +-
19137 include/scsi/libfc.h | 3 +-
19138 include/scsi/scsi_device.h | 6 +-
19139 include/scsi/scsi_driver.h | 2 +-
19140 include/scsi/scsi_transport_fc.h | 3 +-
19141 include/scsi/sg.h | 2 +-
19142 include/sound/compress_driver.h | 2 +-
19143 include/sound/soc.h | 4 +-
19144 include/trace/events/irq.h | 4 +-
19145 include/uapi/linux/a.out.h | 8 +
19146 include/uapi/linux/bcache.h | 5 +-
19147 include/uapi/linux/byteorder/little_endian.h | 28 +-
19148 include/uapi/linux/connector.h | 2 +-
19149 include/uapi/linux/elf.h | 28 +
19150 include/uapi/linux/screen_info.h | 3 +-
19151 include/uapi/linux/swab.h | 6 +-
19152 include/uapi/linux/xattr.h | 4 +
19153 include/video/udlfb.h | 8 +-
19154 include/video/uvesafb.h | 1 +
19155 init/Kconfig | 2 +-
19156 init/Makefile | 3 +
19157 init/do_mounts.c | 14 +-
19158 init/do_mounts.h | 8 +-
19159 init/do_mounts_initrd.c | 30 +-
19160 init/do_mounts_md.c | 6 +-
19161 init/init_task.c | 4 +
19162 init/initramfs.c | 38 +-
19163 init/main.c | 30 +-
19164 ipc/compat.c | 4 +-
19165 ipc/ipc_sysctl.c | 8 +-
19166 ipc/mq_sysctl.c | 4 +-
19167 ipc/sem.c | 4 +-
19168 ipc/shm.c | 6 +
19169 kernel/audit.c | 8 +-
19170 kernel/auditsc.c | 4 +-
19171 kernel/bpf/core.c | 7 +-
19172 kernel/capability.c | 3 +
19173 kernel/compat.c | 38 +-
19174 kernel/debug/debug_core.c | 16 +-
19175 kernel/debug/kdb/kdb_main.c | 4 +-
19176 kernel/events/core.c | 26 +-
19177 kernel/events/internal.h | 10 +-
19178 kernel/events/uprobes.c | 2 +-
19179 kernel/exit.c | 2 +-
19180 kernel/fork.c | 167 +-
19181 kernel/futex.c | 11 +-
19182 kernel/futex_compat.c | 2 +-
19183 kernel/gcov/base.c | 7 +-
19184 kernel/irq/manage.c | 2 +-
19185 kernel/irq/msi.c | 19 +-
19186 kernel/irq/spurious.c | 2 +-
19187 kernel/jump_label.c | 5 +
19188 kernel/kallsyms.c | 37 +-
19189 kernel/kexec.c | 3 +-
19190 kernel/kmod.c | 8 +-
19191 kernel/kprobes.c | 4 +-
19192 kernel/ksysfs.c | 2 +-
19193 kernel/locking/lockdep.c | 7 +-
19194 kernel/locking/mutex-debug.c | 12 +-
19195 kernel/locking/mutex-debug.h | 4 +-
19196 kernel/locking/mutex.c | 6 +-
19197 kernel/module.c | 422 +-
19198 kernel/notifier.c | 17 +-
19199 kernel/padata.c | 4 +-
19200 kernel/panic.c | 5 +-
19201 kernel/pid.c | 2 +-
19202 kernel/pid_namespace.c | 2 +-
19203 kernel/power/process.c | 12 +-
19204 kernel/profile.c | 14 +-
19205 kernel/ptrace.c | 8 +-
19206 kernel/rcu/rcutorture.c | 60 +-
19207 kernel/rcu/tiny.c | 4 +-
19208 kernel/rcu/tree.c | 44 +-
19209 kernel/rcu/tree.h | 14 +-
19210 kernel/rcu/tree_plugin.h | 14 +-
19211 kernel/rcu/tree_trace.c | 12 +-
19212 kernel/sched/auto_group.c | 4 +-
19213 kernel/sched/core.c | 45 +-
19214 kernel/sched/fair.c | 2 +-
19215 kernel/sched/sched.h | 2 +-
19216 kernel/signal.c | 12 +-
19217 kernel/smpboot.c | 4 +-
19218 kernel/softirq.c | 12 +-
19219 kernel/sys.c | 10 +-
19220 kernel/sysctl.c | 34 +-
19221 kernel/time/alarmtimer.c | 2 +-
19222 kernel/time/posix-cpu-timers.c | 4 +-
19223 kernel/time/posix-timers.c | 24 +-
19224 kernel/time/timer.c | 2 +-
19225 kernel/time/timer_stats.c | 10 +-
19226 kernel/trace/blktrace.c | 6 +-
19227 kernel/trace/ftrace.c | 15 +-
19228 kernel/trace/ring_buffer.c | 96 +-
19229 kernel/trace/trace.c | 2 +-
19230 kernel/trace/trace.h | 2 +-
19231 kernel/trace/trace_clock.c | 4 +-
19232 kernel/trace/trace_events.c | 1 -
19233 kernel/trace/trace_functions_graph.c | 4 +-
19234 kernel/trace/trace_mmiotrace.c | 8 +-
19235 kernel/trace/trace_output.c | 10 +-
19236 kernel/trace/trace_seq.c | 2 +-
19237 kernel/trace/trace_stack.c | 2 +-
19238 kernel/user_namespace.c | 2 +-
19239 kernel/utsname_sysctl.c | 2 +-
19240 kernel/watchdog.c | 2 +-
19241 kernel/workqueue.c | 2 +-
19242 lib/Kconfig.debug | 8 +-
19243 lib/Makefile | 2 +-
19244 lib/bitmap.c | 8 +-
19245 lib/bug.c | 2 +
19246 lib/debugobjects.c | 2 +-
19247 lib/decompress_bunzip2.c | 3 +-
19248 lib/decompress_unlzma.c | 4 +-
19249 lib/div64.c | 4 +-
19250 lib/dma-debug.c | 4 +-
19251 lib/inflate.c | 2 +-
19252 lib/ioremap.c | 4 +-
19253 lib/kobject.c | 4 +-
19254 lib/list_debug.c | 126 +-
19255 lib/lockref.c | 44 +-
19256 lib/percpu-refcount.c | 2 +-
19257 lib/radix-tree.c | 2 +-
19258 lib/random32.c | 2 +-
19259 lib/show_mem.c | 2 +-
19260 lib/strncpy_from_user.c | 2 +-
19261 lib/strnlen_user.c | 2 +-
19262 lib/swiotlb.c | 2 +-
19263 lib/usercopy.c | 6 +
19264 lib/vsprintf.c | 12 +-
19265 mm/Kconfig | 6 +-
19266 mm/backing-dev.c | 4 +-
19267 mm/debug.c | 3 +
19268 mm/filemap.c | 2 +-
19269 mm/gup.c | 13 +-
19270 mm/highmem.c | 6 +-
19271 mm/hugetlb.c | 70 +-
19272 mm/internal.h | 1 +
19273 mm/maccess.c | 4 +-
19274 mm/madvise.c | 37 +
19275 mm/memory-failure.c | 6 +-
19276 mm/memory.c | 424 +-
19277 mm/mempolicy.c | 25 +
19278 mm/mlock.c | 15 +-
19279 mm/mm_init.c | 2 +-
19280 mm/mmap.c | 582 +-
19281 mm/mprotect.c | 137 +-
19282 mm/mremap.c | 39 +-
19283 mm/nommu.c | 21 +-
19284 mm/page-writeback.c | 2 +-
19285 mm/page_alloc.c | 49 +-
19286 mm/percpu.c | 2 +-
19287 mm/process_vm_access.c | 14 +-
19288 mm/rmap.c | 45 +-
19289 mm/shmem.c | 19 +-
19290 mm/slab.c | 109 +-
19291 mm/slab.h | 22 +-
19292 mm/slab_common.c | 86 +-
19293 mm/slob.c | 218 +-
19294 mm/slub.c | 102 +-
19295 mm/sparse-vmemmap.c | 4 +-
19296 mm/sparse.c | 2 +-
19297 mm/swap.c | 2 +
19298 mm/swapfile.c | 12 +-
19299 mm/util.c | 6 +
19300 mm/vmalloc.c | 114 +-
19301 mm/vmstat.c | 12 +-
19302 net/8021q/vlan.c | 5 +-
19303 net/8021q/vlan_netlink.c | 2 +-
19304 net/9p/mod.c | 4 +-
19305 net/9p/trans_fd.c | 2 +-
19306 net/atm/atm_misc.c | 8 +-
19307 net/atm/lec.h | 2 +-
19308 net/atm/proc.c | 6 +-
19309 net/atm/resources.c | 4 +-
19310 net/ax25/sysctl_net_ax25.c | 2 +-
19311 net/batman-adv/bat_iv_ogm.c | 8 +-
19312 net/batman-adv/fragmentation.c | 2 +-
19313 net/batman-adv/soft-interface.c | 8 +-
19314 net/batman-adv/types.h | 6 +-
19315 net/bluetooth/hci_sock.c | 2 +-
19316 net/bluetooth/l2cap_core.c | 6 +-
19317 net/bluetooth/l2cap_sock.c | 12 +-
19318 net/bluetooth/rfcomm/sock.c | 4 +-
19319 net/bluetooth/rfcomm/tty.c | 4 +-
19320 net/bridge/br_netlink.c | 2 +-
19321 net/bridge/netfilter/ebtables.c | 6 +-
19322 net/caif/cfctrl.c | 11 +-
19323 net/caif/chnl_net.c | 2 +-
19324 net/can/af_can.c | 2 +-
19325 net/can/gw.c | 6 +-
19326 net/ceph/messenger.c | 4 +-
19327 net/compat.c | 24 +-
19328 net/core/datagram.c | 2 +-
19329 net/core/dev.c | 16 +-
19330 net/core/filter.c | 2 +-
19331 net/core/flow.c | 6 +-
19332 net/core/neighbour.c | 4 +-
19333 net/core/net-sysfs.c | 2 +-
19334 net/core/net_namespace.c | 8 +-
19335 net/core/netpoll.c | 4 +-
19336 net/core/rtnetlink.c | 15 +-
19337 net/core/scm.c | 14 +-
19338 net/core/skbuff.c | 8 +-
19339 net/core/sock.c | 28 +-
19340 net/core/sock_diag.c | 15 +-
19341 net/core/sysctl_net_core.c | 22 +-
19342 net/decnet/af_decnet.c | 1 +
19343 net/decnet/sysctl_net_decnet.c | 4 +-
19344 net/dsa/dsa.c | 2 +-
19345 net/hsr/hsr_netlink.c | 2 +-
19346 net/ieee802154/6lowpan/core.c | 2 +-
19347 net/ieee802154/6lowpan/reassembly.c | 14 +-
19348 net/ipv4/af_inet.c | 2 +-
19349 net/ipv4/devinet.c | 18 +-
19350 net/ipv4/fib_frontend.c | 6 +-
19351 net/ipv4/fib_semantics.c | 2 +-
19352 net/ipv4/inet_connection_sock.c | 4 +-
19353 net/ipv4/inet_timewait_sock.c | 2 +-
19354 net/ipv4/inetpeer.c | 2 +-
19355 net/ipv4/ip_fragment.c | 15 +-
19356 net/ipv4/ip_gre.c | 6 +-
19357 net/ipv4/ip_sockglue.c | 2 +-
19358 net/ipv4/ip_vti.c | 4 +-
19359 net/ipv4/ipconfig.c | 6 +-
19360 net/ipv4/ipip.c | 4 +-
19361 net/ipv4/netfilter/arp_tables.c | 12 +-
19362 net/ipv4/netfilter/ip_tables.c | 12 +-
19363 net/ipv4/ping.c | 14 +-
19364 net/ipv4/raw.c | 14 +-
19365 net/ipv4/route.c | 32 +-
19366 net/ipv4/sysctl_net_ipv4.c | 22 +-
19367 net/ipv4/tcp_input.c | 6 +-
19368 net/ipv4/tcp_probe.c | 2 +-
19369 net/ipv4/udp.c | 10 +-
19370 net/ipv4/xfrm4_policy.c | 18 +-
19371 net/ipv6/addrconf.c | 18 +-
19372 net/ipv6/af_inet6.c | 2 +-
19373 net/ipv6/datagram.c | 2 +-
19374 net/ipv6/icmp.c | 2 +-
19375 net/ipv6/ip6_fib.c | 4 +-
19376 net/ipv6/ip6_gre.c | 10 +-
19377 net/ipv6/ip6_tunnel.c | 4 +-
19378 net/ipv6/ip6_vti.c | 4 +-
19379 net/ipv6/ipv6_sockglue.c | 2 +-
19380 net/ipv6/netfilter/ip6_tables.c | 12 +-
19381 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
19382 net/ipv6/ping.c | 33 +-
19383 net/ipv6/raw.c | 17 +-
19384 net/ipv6/reassembly.c | 13 +-
19385 net/ipv6/route.c | 2 +-
19386 net/ipv6/sit.c | 4 +-
19387 net/ipv6/sysctl_net_ipv6.c | 2 +-
19388 net/ipv6/udp.c | 6 +-
19389 net/ipv6/xfrm6_policy.c | 17 +-
19390 net/irda/ircomm/ircomm_tty.c | 18 +-
19391 net/iucv/af_iucv.c | 4 +-
19392 net/iucv/iucv.c | 2 +-
19393 net/key/af_key.c | 4 +-
19394 net/l2tp/l2tp_eth.c | 38 +-
19395 net/l2tp/l2tp_ip.c | 2 +-
19396 net/l2tp/l2tp_ip6.c | 2 +-
19397 net/mac80211/cfg.c | 8 +-
19398 net/mac80211/ieee80211_i.h | 3 +-
19399 net/mac80211/iface.c | 20 +-
19400 net/mac80211/main.c | 2 +-
19401 net/mac80211/pm.c | 4 +-
19402 net/mac80211/rate.c | 2 +-
19403 net/mac80211/sta_info.c | 2 +-
19404 net/mac80211/util.c | 8 +-
19405 net/mpls/af_mpls.c | 6 +-
19406 net/netfilter/ipset/ip_set_core.c | 2 +-
19407 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
19408 net/netfilter/ipvs/ip_vs_core.c | 4 +-
19409 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
19410 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
19411 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
19412 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
19413 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
19414 net/netfilter/nf_conntrack_acct.c | 2 +-
19415 net/netfilter/nf_conntrack_ecache.c | 2 +-
19416 net/netfilter/nf_conntrack_helper.c | 2 +-
19417 net/netfilter/nf_conntrack_proto.c | 2 +-
19418 net/netfilter/nf_conntrack_standalone.c | 2 +-
19419 net/netfilter/nf_conntrack_timestamp.c | 2 +-
19420 net/netfilter/nf_log.c | 10 +-
19421 net/netfilter/nf_sockopt.c | 4 +-
19422 net/netfilter/nfnetlink_log.c | 4 +-
19423 net/netfilter/nft_compat.c | 9 +-
19424 net/netfilter/xt_statistic.c | 8 +-
19425 net/netlink/af_netlink.c | 4 +-
19426 net/openvswitch/vport-internal_dev.c | 2 +-
19427 net/packet/af_packet.c | 8 +-
19428 net/phonet/pep.c | 6 +-
19429 net/phonet/socket.c | 2 +-
19430 net/phonet/sysctl.c | 2 +-
19431 net/rds/cong.c | 6 +-
19432 net/rds/ib.h | 2 +-
19433 net/rds/ib_cm.c | 2 +-
19434 net/rds/ib_recv.c | 4 +-
19435 net/rds/iw.h | 2 +-
19436 net/rds/iw_cm.c | 2 +-
19437 net/rds/iw_recv.c | 4 +-
19438 net/rds/rds.h | 2 +-
19439 net/rds/tcp.c | 2 +-
19440 net/rds/tcp_send.c | 2 +-
19441 net/rxrpc/af_rxrpc.c | 2 +-
19442 net/rxrpc/ar-ack.c | 14 +-
19443 net/rxrpc/ar-call.c | 2 +-
19444 net/rxrpc/ar-connection.c | 2 +-
19445 net/rxrpc/ar-connevent.c | 2 +-
19446 net/rxrpc/ar-input.c | 4 +-
19447 net/rxrpc/ar-internal.h | 8 +-
19448 net/rxrpc/ar-local.c | 2 +-
19449 net/rxrpc/ar-output.c | 4 +-
19450 net/rxrpc/ar-peer.c | 2 +-
19451 net/rxrpc/ar-proc.c | 4 +-
19452 net/rxrpc/ar-transport.c | 2 +-
19453 net/rxrpc/rxkad.c | 4 +-
19454 net/sched/sch_generic.c | 4 +-
19455 net/sctp/ipv6.c | 6 +-
19456 net/sctp/protocol.c | 10 +-
19457 net/sctp/sm_sideeffect.c | 2 +-
19458 net/sctp/socket.c | 21 +-
19459 net/sctp/sysctl.c | 10 +-
19460 net/socket.c | 18 +-
19461 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
19462 net/sunrpc/clnt.c | 4 +-
19463 net/sunrpc/sched.c | 4 +-
19464 net/sunrpc/svc.c | 4 +-
19465 net/sunrpc/svcauth_unix.c | 2 +-
19466 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
19467 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
19468 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
19469 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
19470 net/tipc/netlink_compat.c | 12 +-
19471 net/tipc/subscr.c | 2 +-
19472 net/unix/af_unix.c | 7 +-
19473 net/unix/sysctl_net_unix.c | 2 +-
19474 net/wireless/wext-core.c | 19 +-
19475 net/xfrm/xfrm_policy.c | 16 +-
19476 net/xfrm/xfrm_state.c | 33 +-
19477 net/xfrm/xfrm_sysctl.c | 2 +-
19478 scripts/Kbuild.include | 2 +-
19479 scripts/Makefile.build | 2 +-
19480 scripts/Makefile.clean | 3 +-
19481 scripts/Makefile.host | 69 +-
19482 scripts/basic/fixdep.c | 12 +-
19483 scripts/dtc/checks.c | 14 +-
19484 scripts/dtc/data.c | 6 +-
19485 scripts/dtc/flattree.c | 8 +-
19486 scripts/dtc/livetree.c | 4 +-
19487 scripts/gcc-plugin.sh | 51 +
19488 scripts/headers_install.sh | 1 +
19489 scripts/kallsyms.c | 4 +-
19490 scripts/kconfig/lkc.h | 5 +-
19491 scripts/kconfig/menu.c | 2 +-
19492 scripts/kconfig/symbol.c | 6 +-
19493 scripts/link-vmlinux.sh | 2 +-
19494 scripts/mod/file2alias.c | 14 +-
19495 scripts/mod/modpost.c | 25 +-
19496 scripts/mod/modpost.h | 6 +-
19497 scripts/mod/sumversion.c | 2 +-
19498 scripts/module-common.lds | 4 +
19499 scripts/package/builddeb | 1 +
19500 scripts/pnmtologo.c | 6 +-
19501 scripts/sortextable.h | 6 +-
19502 scripts/tags.sh | 2 +-
19503 security/Kconfig | 692 +-
19504 security/integrity/ima/ima.h | 4 +-
19505 security/integrity/ima/ima_api.c | 2 +-
19506 security/integrity/ima/ima_fs.c | 4 +-
19507 security/integrity/ima/ima_queue.c | 2 +-
19508 security/keys/key.c | 18 +-
19509 security/selinux/avc.c | 6 +-
19510 security/selinux/include/xfrm.h | 2 +-
19511 security/yama/yama_lsm.c | 2 +-
19512 sound/aoa/codecs/onyx.c | 7 +-
19513 sound/aoa/codecs/onyx.h | 1 +
19514 sound/core/oss/pcm_oss.c | 18 +-
19515 sound/core/pcm_compat.c | 2 +-
19516 sound/core/pcm_native.c | 4 +-
19517 sound/core/sound.c | 2 +-
19518 sound/drivers/mts64.c | 14 +-
19519 sound/drivers/opl4/opl4_lib.c | 2 +-
19520 sound/drivers/portman2x4.c | 3 +-
19521 sound/firewire/amdtp.c | 4 +-
19522 sound/firewire/amdtp.h | 4 +-
19523 sound/firewire/isight.c | 10 +-
19524 sound/firewire/scs1x.c | 8 +-
19525 sound/oss/sb_audio.c | 2 +-
19526 sound/oss/swarm_cs4297a.c | 6 +-
19527 sound/pci/hda/hda_codec.c | 2 +-
19528 sound/pci/ymfpci/ymfpci.h | 2 +-
19529 sound/pci/ymfpci/ymfpci_main.c | 12 +-
19530 sound/soc/codecs/sti-sas.c | 10 +-
19531 sound/soc/soc-ac97.c | 6 +-
19532 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
19533 tools/gcc/Makefile | 42 +
19534 tools/gcc/checker_plugin.c | 150 +
19535 tools/gcc/colorize_plugin.c | 215 +
19536 tools/gcc/constify_plugin.c | 571 +
19537 tools/gcc/gcc-common.h | 812 +
19538 tools/gcc/initify_plugin.c | 552 +
19539 tools/gcc/kallocstat_plugin.c | 188 +
19540 tools/gcc/kernexec_plugin.c | 549 +
19541 tools/gcc/latent_entropy_plugin.c | 470 +
19542 tools/gcc/size_overflow_plugin/.gitignore | 2 +
19543 tools/gcc/size_overflow_plugin/Makefile | 28 +
19544 .../disable_size_overflow_hash.data |12422 ++++++++++++
19545 .../generate_size_overflow_hash.sh | 103 +
19546 .../insert_size_overflow_asm.c | 416 +
19547 .../size_overflow_plugin/intentional_overflow.c | 1010 +
19548 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
19549 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
19550 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
19551 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
19552 .../size_overflow_hash_aux.data | 92 +
19553 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
19554 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
19555 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
19556 .../size_overflow_plugin_hash.c | 352 +
19557 .../size_overflow_plugin/size_overflow_transform.c | 749 +
19558 .../size_overflow_transform_core.c | 1010 +
19559 tools/gcc/stackleak_plugin.c | 436 +
19560 tools/gcc/structleak_plugin.c | 287 +
19561 tools/include/linux/compiler.h | 8 +
19562 tools/lib/api/Makefile | 2 +-
19563 tools/perf/util/include/asm/alternative-asm.h | 3 +
19564 tools/virtio/linux/uaccess.h | 2 +-
19565 virt/kvm/kvm_main.c | 42 +-
19566 1944 files changed, 66925 insertions(+), 8949 deletions(-)