]> git.ipfire.org Git - thirdparty/grsecurity-scrape.git/blob - test/changelog-test.txt
Auto commit, 1 new patch{es}.
[thirdparty/grsecurity-scrape.git] / test / changelog-test.txt
1 commit 84f2bc67492f30f06520497a9bb16c0a2e3103df
2 Author: Brad Spengler <spender@grsecurity.net>
3 Date: Tue Jul 19 20:13:30 2016 -0400
4
5 Revert to previous size_overflow hash table temporarily while the
6 root causes of recent FPs are worked out
7
8 .../disable_size_overflow_hash.data | 7 +-
9 .../size_overflow_plugin/size_overflow_hash.data | 13743 +++++++++----------
10 2 files changed, 6845 insertions(+), 6905 deletions(-)
11
12 commit ea2b9616253f017edf97e4b86e82d6c89df17c4d
13 Merge: e52044e cd66132
14 Author: Brad Spengler <spender@grsecurity.net>
15 Date: Tue Jul 19 19:21:52 2016 -0400
16
17 Merge branch 'pax-test' into grsec-test
18
19 commit cd661322f3b91c6fd6fee4a6a5907b054a70a5f7
20 Author: Brad Spengler <spender@grsecurity.net>
21 Date: Tue Jul 19 19:14:36 2016 -0400
22
23 Update to pax-linux-4.6.4-test15.patch:
24 - updated the size overflow hash table from grsecurity
25 - fixed a few size overflow false positives in the tcp timestamp code, reported by Toralf Förster and debrouxl (https://forums.grsecurity.net/viewtopic.php?f=3&t=4514)
26
27 .../disable_size_overflow_hash.data | 7 +-
28 .../size_overflow_plugin/size_overflow_hash.data | 850 +++++++++++++++++----
29 2 files changed, 694 insertions(+), 163 deletions(-)
30
31 commit e52044e34a92f944b99e9219147617dc7449a675
32 Author: Brad Spengler <spender@grsecurity.net>
33 Date: Mon Jul 18 21:25:15 2016 -0400
34
35 Update size_overflow hash table
36
37 .../size_overflow_plugin/size_overflow_hash.data | 466 +++++++++++++++++----
38 1 file changed, 382 insertions(+), 84 deletions(-)
39
40 commit 27ed9167fb98fe9f9e75aace6f651ff814a189a5
41 Author: Brad Spengler <spender@grsecurity.net>
42 Date: Mon Jul 18 21:04:42 2016 -0400
43
44 Update size_overflow hash table
45
46 .../gcc-plugins/size_overflow_plugin/size_overflow_hash.data | 12 ++++++++----
47 1 file changed, 8 insertions(+), 4 deletions(-)
48
49 commit b0a1f25a251b7c1c582fa3a95605654f8da33193
50 Author: Jann Horn <jann@thejh.net>
51 Date: Fri Sep 11 21:39:33 2015 +0200
52
53 xfs: fix type confusion in xfs_ioc_swapext
54
55 Without this check, the following XFS_I invocations would return bad
56 pointers when used on non-XFS inodes (perhaps pointers into preceding
57 allocator chunks).
58
59 This could be used by an attacker to trick xfs_swap_extents into
60 performing locking operations on attacker-chosen structures in kernel
61 memory, potentially leading to code execution in the kernel. (I have
62 not investigated how likely this is to be usable for an attack in
63 practice.)
64
65 Signed-off-by: Jann Horn <jann@thejh.net>
66 Cc: Andy Lutomirski <luto@amacapital.net>
67 Cc: Dave Chinner <david@fromorbit.com>
68 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
69
70 fs/xfs/xfs_ioctl.c | 6 ++++++
71 1 file changed, 6 insertions(+)
72
73 commit 01e9e48be783cefbe69ff9241ab678de69eaab5b
74 Merge: bd6d599 c421d76
75 Author: Brad Spengler <spender@grsecurity.net>
76 Date: Mon Jul 18 20:18:27 2016 -0400
77
78 Merge branch 'pax-test' into grsec-test
79
80 commit c421d76c43d1840ab72bf2cd414e61ee0581e80b
81 Author: Brad Spengler <spender@grsecurity.net>
82 Date: Mon Jul 18 20:04:22 2016 -0400
83
84 Update to pax-linux-4.6.4-test14.patch:
85 - Emese regenerated the size overflow hash table
86 - fixed a few more section mismatches detected in LTO mode
87 - reworked how KERNEXEC coexists with upstream's DEBUG_RODATA
88 - reworked the KERNEXEC plugin configuration, read the Kconfig help!
89 - simplified the constify plugin a bit
90 - fixed an integer truncation bug in pnp_add_dma_resource caught by the size overflow plugin, reported by Thore Bödecker (https://forums.grsecurity.net/viewtopic.php?f=3&t=4511 and https://bugzilla.kernel.org/show_bug.cgi?id=123211)
91 - worked around an integer conversion problem in drbd caught by the size overflow plugin, reported by Georg Weiss (https://forums.grsecurity.net/viewtopic.php?f=3&t=4510 and https://bugs.gentoo.org/show_bug.cgi?id=588624)
92 - fixed !KERNEXEC boot crash on x86, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4512)
93 - fixed compile warnings triggered by the __SYSCALL_DEFINEx macro
94
95 arch/mips/Kbuild | 2 +-
96 arch/mips/include/asm/irq.h | 1 -
97 arch/sparc/include/asm/atomic_64.h | 6 +
98 arch/sparc/kernel/prom_common.c | 2 +-
99 arch/sparc/lib/atomic_64.S | 2 +-
100 arch/sparc/lib/ksyms.c | 4 +-
101 arch/x86/entry/entry_64.S | 2 +-
102 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 3 +-
103 arch/x86/kernel/alternative.c | 21 +
104 arch/x86/kernel/cpu/common.c | 4 +
105 arch/x86/platform/olpc/olpc_dt.c | 2 +-
106 drivers/block/drbd/drbd_int.h | 4 +-
107 drivers/gpu/drm/sti/sti_hda.c | 4 +-
108 drivers/gpu/drm/sti/sti_hqvdp.c | 4 +-
109 drivers/gpu/drm/sti/sti_tvout.c | 4 +-
110 drivers/gpu/drm/tilcdc/tilcdc_external.c | 2 +-
111 drivers/hwmon/applesmc.c | 2 +-
112 drivers/iommu/io-pgtable-arm.c | 2 +-
113 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
114 drivers/leds/leds-clevo-mail.c | 2 +-
115 drivers/leds/leds-ss4200.c | 2 +-
116 drivers/mtd/nand/brcmnand/bcm63138_nand.c | 2 +
117 drivers/mtd/nand/brcmnand/iproc_nand.c | 2 +
118 drivers/platform/chrome/chromeos_laptop.c | 2 +-
119 drivers/platform/chrome/cros_ec_lpc.c | 2 +-
120 drivers/pnp/base.h | 2 +-
121 drivers/pnp/resource.c | 4 +-
122 fs/exec.c | 20 +-
123 include/drm/drm_modeset_helper_vtables.h | 1 +
124 include/linux/syscalls.h | 8 +-
125 mm/slab_common.c | 6 +
126 mm/slob.c | 44 +-
127 mm/slub.c | 7 +
128 scripts/Makefile.gcc-plugins | 4 +-
129 scripts/gcc-plugins/constify_plugin.c | 10 +-
130 .../size_overflow_plugin/size_overflow_hash.data | 13633 +++++++++----------
131 security/Kconfig | 63 +-
132 37 files changed, 6934 insertions(+), 6953 deletions(-)
133
134 commit bd6d599943a777b93600dd4a43bbeea5dde2dfa0
135 Author: Brad Spengler <spender@grsecurity.net>
136 Date: Sun Jul 17 17:18:15 2016 -0400
137
138 Ensure current state is set to TASK_RUNNING before doing a copy on the RBAC learning read side
139
140 grsecurity/gracl_learn.c | 6 ++++--
141 kernel/sched/core.c | 2 +-
142 2 files changed, 5 insertions(+), 3 deletions(-)
143
144 commit 0f2e7d90efc7eeff655d7cc2c15838497f8c0513
145 Author: Brad Spengler <spender@grsecurity.net>
146 Date: Fri Jul 15 15:29:41 2016 -0400
147
148 Force that BUG() be enabled in the kernel config if grsecurity is enabled
149 Suggested by Kees Cook
150
151 security/Kconfig | 1 +
152 1 file changed, 1 insertion(+)
153
154 commit 3efe62268d831fc5c89a64b8ff1496d2b912ebf6
155 Author: Brad Spengler <spender@grsecurity.net>
156 Date: Thu Jul 14 21:14:55 2016 -0400
157
158 randomize layout of two more structs
159
160 include/linux/cdev.h | 2 +-
161 include/linux/fs.h | 2 +-
162 2 files changed, 2 insertions(+), 2 deletions(-)
163
164 commit 58c0443674275163e4d488f890ba1b985d13a4b0
165 Author: Brad Spengler <spender@grsecurity.net>
166 Date: Mon Jul 11 21:30:57 2016 -0400
167
168 Temporary workaround for size_overflow detection reported at:
169 https://forums.grsecurity.net/viewtopic.php?f=3&t=4510
170 by brainatwork
171
172 drivers/block/drbd/drbd_int.h | 4 ++--
173 1 file changed, 2 insertions(+), 2 deletions(-)
174
175 commit aa1f32f7a62f394d1f90c2d9952befdd5294c088
176 Author: Brad Spengler <spender@grsecurity.net>
177 Date: Mon Jul 11 21:18:20 2016 -0400
178
179 Update size_overflow hash table
180
181 scripts/gcc-plugins/size_overflow_plugin/size_overflow_hash.data | 1 +
182 1 file changed, 1 insertion(+)
183
184 commit 329fa438e13041fda3dcd292adf2aeb1c008c72c
185 Author: Jeff Mahoney <jeffm@suse.com>
186 Date: Tue Jul 5 17:32:30 2016 -0400
187
188 ecryptfs: don't allow mmap when the lower fs doesn't support it
189
190 There are legitimate reasons to disallow mmap on certain files, notably
191 in sysfs or procfs. We shouldn't emulate mmap support on file systems
192 that don't offer support natively.
193
194 CVE-2016-1583
195
196 Signed-off-by: Jeff Mahoney <jeffm@suse.com>
197 Cc: stable@vger.kernel.org
198 [tyhicks: clean up f_op check by using ecryptfs_file_to_lower()]
199 Signed-off-by: Tyler Hicks <tyhicks@canonical.com>
200
201 fs/ecryptfs/file.c | 15 ++++++++++++++-
202 1 file changed, 14 insertions(+), 1 deletion(-)
203
204 commit 5b86b77c32a55ebc8b441ac71839bb50012e505a
205 Author: Vegard Nossum <vegard.nossum@oracle.com>
206 Date: Thu Jul 7 13:41:11 2016 -0700
207
208 apparmor: fix oops, validate buffer size in apparmor_setprocattr()
209
210 When proc_pid_attr_write() was changed to use memdup_user apparmor's
211 (interface violating) assumption that the setprocattr buffer was always
212 a single page was violated.
213
214 The size test is not strictly speaking needed as proc_pid_attr_write()
215 will reject anything larger, but for the sake of robustness we can keep
216 it in.
217
218 SMACK and SELinux look safe to me, but somebody else should probably
219 have a look just in case.
220
221 Based on original patch from Vegard Nossum <vegard.nossum@oracle.com>
222 modified for the case that apparmor provides null termination.
223
224 Fixes: bb646cdb12e75d82258c2f2e7746d5952d3e321a
225 Reported-by: Vegard Nossum <vegard.nossum@oracle.com>
226 Cc: Al Viro <viro@zeniv.linux.org.uk>
227 Cc: John Johansen <john.johansen@canonical.com>
228 Cc: Paul Moore <paul@paul-moore.com>
229 Cc: Stephen Smalley <sds@tycho.nsa.gov>
230 Cc: Eric Paris <eparis@parisplace.org>
231 Cc: Casey Schaufler <casey@schaufler-ca.com>
232 Cc: stable@kernel.org
233 Signed-off-by: John Johansen <john.johansen@canonical.com>
234 Reviewed-by: Tyler Hicks <tyhicks@canonical.com>
235 Signed-off-by: James Morris <james.l.morris@oracle.com>
236
237 security/apparmor/lsm.c | 36 +++++++++++++++++++-----------------
238 1 file changed, 19 insertions(+), 17 deletions(-)
239
240 commit cf7f94ad6c32ff91363641573a64c85f4877e290
241 Merge: 7765cd9 50212d6
242 Author: Brad Spengler <spender@grsecurity.net>
243 Date: Mon Jul 11 18:39:35 2016 -0400
244
245 Merge branch 'pax-test' into grsec-test
246
247 commit 50212d610aeb6ced453e1835c169c46acdf3940d
248 Merge: 98d6186 310ca59
249 Author: Brad Spengler <spender@grsecurity.net>
250 Date: Mon Jul 11 18:39:08 2016 -0400
251
252 Merge branch 'linux-4.6.y' into pax-test
253
254 commit 7765cd90c911e58959451529995ea44b7a2271d6
255 Author: Brad Spengler <spender@grsecurity.net>
256 Date: Thu Jul 7 07:12:54 2016 -0400
257
258 Compile fix reported by adminwset on the forums:
259 https://forums.grsecurity.net/viewtopic.php?t=4507&p=16420#p16420
260
261 fs/proc/task_mmu.c | 2 +-
262 1 file changed, 1 insertion(+), 1 deletion(-)
263
264 commit c94fbc6f47fdae9a2dcf29d3048c8da8752dbbdf
265 Author: Brad Spengler <spender@grsecurity.net>
266 Date: Wed Jul 6 21:11:33 2016 -0400
267
268 compile fix
269
270 arch/x86/mm/init_32.c | 1 -
271 1 file changed, 1 deletion(-)
272
273 commit ee4f4cdd26864ac40ac22b4a3b88f284a6d057d0
274 Author: Miklos Szeredi <mszeredi@redhat.com>
275 Date: Wed Jun 29 16:03:55 2016 +0200
276
277 ovl: get_write_access() in truncate
278
279 When truncating a file we should check write access on the underlying
280 inode. And we should do so on the lower file as well (before copy-up) for
281 consistency.
282
283 Original patch and test case by Aihua Zhang.
284
285 - - >o >o - - test.c - - >o >o - -
286 #include <stdio.h>
287 #include <errno.h>
288 #include <unistd.h>
289
290 int main(int argc, char *argv[])
291 {
292 int ret;
293
294 ret = truncate(argv[0], 4096);
295 if (ret != -1) {
296 fprintf(stderr, "truncate(argv[0]) should have failed\n");
297 return 1;
298 }
299 if (errno != ETXTBSY) {
300 perror("truncate(argv[0])");
301 return 1;
302 }
303
304 return 0;
305 }
306 - - >o >o - - >o >o - - >o >o - -
307
308 Reported-by: Aihua Zhang <zhangaihua1@huawei.com>
309 Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
310 Cc: <stable@vger.kernel.org>
311
312 fs/overlayfs/inode.c | 21 +++++++++++++++++++++
313 1 file changed, 21 insertions(+)
314
315 commit 4585d082282707fbe91025c987bd8cef4152196d
316 Author: Vivek Goyal <vgoyal@redhat.com>
317 Date: Fri Jul 1 10:02:44 2016 -0400
318
319 ovl: warn instead of error if d_type is not supported
320
321 overlay needs underlying fs to support d_type. Recently I put in a
322 patch in to detect this condition and started failing mount if
323 underlying fs did not support d_type.
324
325 But this breaks existing configurations over kernel upgrade. Those who
326 are running docker (partially broken configuration) with xfs not
327 supporting d_type, are surprised that after kernel upgrade docker does
328 not run anymore.
329
330 https://github.com/docker/docker/issues/22937#issuecomment-229881315
331
332 So instead of erroring out, detect broken configuration and warn
333 about it. This should allow existing docker setups to continue
334 working after kernel upgrade.
335
336 Signed-off-by: Vivek Goyal <vgoyal@redhat.com>
337 Signed-off-by: Miklos Szeredi <mszeredi@redhat.com>
338 Fixes: 45aebeaf4f67 ("ovl: Ensure upper filesystem supports d_type")
339 Cc: <stable@vger.kernel.org> 4.6
340
341 fs/overlayfs/super.c | 12 +++++++-----
342 1 file changed, 7 insertions(+), 5 deletions(-)
343
344 commit 97bb95801d1ce86dafd1a59483803aba5b93e7c0
345 Author: Randy Dunlap <rdunlap@infradead.org>
346 Date: Wed Jul 6 16:06:53 2016 -0700
347
348 init/Kconfig: keep Expert users menu together
349
350 The "expert" menu was broken (split) such that all entries in it after
351 KALLSYMS were displayed in the "General setup" area instead of in the
352 "Expert users" area. Fix this by adding one kconfig dependency.
353
354 Yes, the Expert users menu is fragile. Problems like this have happened
355 several times in the past. I will attempt to isolate the Expert users
356 menu if there is interest in that.
357
358 Fixes: 4d5d5664c900 ("x86: kallsyms: disable absolute percpu symbols on !SMP")
359 Signed-off-by: Randy Dunlap <rdunlap@infradead.org>
360 Cc: Ard Biesheuvel <ard.biesheuvel@linaro.org>
361 Cc: stable@vger.kernel.org # 4.6
362 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
363
364 init/Kconfig | 1 +
365 1 file changed, 1 insertion(+)
366
367 commit 616a19ea32197667494240e8afc0de98d28fdd47
368 Merge: 769cc1b 98d6186
369 Author: Brad Spengler <spender@grsecurity.net>
370 Date: Wed Jul 6 20:41:51 2016 -0400
371
372 Merge branch 'pax-test' into grsec-test
373
374 commit 98d61867ac6a18500bbd9771678138154869cec3
375 Author: Brad Spengler <spender@grsecurity.net>
376 Date: Wed Jul 6 20:29:35 2016 -0400
377
378 Update to pax-linux-4.6.3-test10.patch:
379 - fixed a size overflow false positive in xfrm4_beet_output and xfrm6_beet_output, by Mathias Krause <minipli@ld-linux.so>
380 - fixed UEFI boot regression under KERNEXEC, reported by Yves-Alexis Perez <corsac@corsac.net> and x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4502)
381 - fixed a few constification related compile errors on arm/mips, by spender
382 - updated the size overflow hash table from grsecurity
383 - fixed an integer truncation bug in __ioremap_caller caught by the size overflow plugin
384
385 arch/arm/mach-mmp/mmp2.c | 4 +-
386 arch/arm/mach-mmp/pxa910.c | 4 +-
387 arch/arm/mach-s3c64xx/mach-smdk6410.c | 2 +-
388 arch/arm/mm/fault.c | 2 +-
389 arch/x86/include/asm/efi.h | 5 +
390 arch/x86/include/asm/pgtable.h | 2 +-
391 arch/x86/mm/dump_pagetables.c | 32 +++-
392 arch/x86/mm/init_32.c | 55 +++---
393 arch/x86/mm/init_64.c | 12 +-
394 arch/x86/mm/ioremap.c | 2 +-
395 arch/x86/mm/pageattr.c | 2 +-
396 drivers/gpu/drm/sti/sti_cursor.c | 4 +-
397 drivers/gpu/drm/sti/sti_dvo.c | 4 +-
398 drivers/gpu/drm/sti/sti_gdp.c | 12 +-
399 drivers/gpu/drm/sti/sti_hdmi.c | 4 +-
400 drivers/gpu/drm/sti/sti_mixer.c | 8 +-
401 drivers/gpu/drm/sti/sti_vid.c | 4 +-
402 drivers/irqchip/irq-mmp.c | 2 +-
403 drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 +-
404 include/linux/irqchip/mmp.h | 2 +-
405 net/ipv4/xfrm4_mode_beet.c | 2 +-
406 net/ipv6/xfrm6_mode_beet.c | 2 +-
407 .../size_overflow_plugin/size_overflow_hash.data | 203 +++++++++++++++++----
408 23 files changed, 280 insertions(+), 91 deletions(-)
409
410 commit 769cc1b850f164d9fd9284898295eb616896d66b
411 Author: Brad Spengler <spender@grsecurity.net>
412 Date: Wed Jul 6 20:08:29 2016 -0400
413
414 Fix bug in RBAC learning reported by Andrew Flannery
415 Nolog/noaudit-type capability checks were handled in a separate
416 function which did not check if the requestor had the capability in
417 their effective set. This would cause privileged processes to be
418 denied use of their capabilities in the small number of instances
419 these kinds of checks were used (for ptrace_may_access() etc, which
420 get used in deciding if privileged processes can bypass /proc
421 restrictions) only when RBAC learning was enabled on the process.
422
423 Remove some code duplication in the process of fixing the bug.
424
425 grsecurity/gracl_cap.c | 49 +++++++++------------------------------------
426 grsecurity/grsec_disabled.c | 2 +-
427 grsecurity/grsec_exec.c | 9 ++++-----
428 include/linux/grsecurity.h | 4 ++--
429 kernel/capability.c | 2 +-
430 kernel/sys.c | 4 ++--
431 6 files changed, 19 insertions(+), 51 deletions(-)
432
433 commit 244fda357c13b44ac2d174713205863c552eb30d
434 Author: Brad Spengler <spender@grsecurity.net>
435 Date: Wed Jul 6 07:19:26 2016 -0400
436
437 Compile fix for recent /proc/pid/mem changes, reported by adminwset at
438 https://forums.grsecurity.net/viewtopic.php?t=4505&p=16415#p16415
439
440 fs/proc/base.c | 2 +-
441 fs/proc/internal.h | 2 +-
442 include/linux/sched.h | 2 ++
443 3 files changed, 4 insertions(+), 2 deletions(-)
444
445 commit 5bd1344d3f28c5402bcd85972bb520a5baaf612c
446 Author: Brad Spengler <spender@grsecurity.net>
447 Date: Sun Jul 3 21:27:25 2016 -0400
448
449 Initial import of grsecurity for Linux 4.6.3
450
451 Documentation/dontdiff | 2 +
452 Documentation/kernel-parameters.txt | 11 +
453 Documentation/sysctl/kernel.txt | 15 +
454 Makefile | 5 +-
455 arch/alpha/include/asm/cache.h | 4 +-
456 arch/alpha/kernel/osf_sys.c | 12 +-
457 arch/arc/Kconfig | 1 +
458 arch/arm/Kconfig | 1 +
459 arch/arm/Kconfig.debug | 1 +
460 arch/arm/include/asm/thread_info.h | 7 +-
461 arch/arm/kernel/entry-common.S | 8 +-
462 arch/arm/kernel/process.c | 4 +-
463 arch/arm/kernel/ptrace.c | 9 +
464 arch/arm/kernel/traps.c | 7 +-
465 arch/arm/mach-mmp/mmp2.c | 4 +-
466 arch/arm/mach-mmp/pxa910.c | 4 +-
467 arch/arm/mach-s3c64xx/mach-smdk6410.c | 2 +-
468 arch/arm/mm/Kconfig | 4 +-
469 arch/arm/mm/alignment.c | 24 +-
470 arch/arm/mm/fault.c | 42 +-
471 arch/arm/mm/mmap.c | 8 +-
472 arch/arm/net/bpf_jit_32.c | 51 +-
473 arch/arm64/Kconfig.debug | 1 +
474 arch/avr32/include/asm/cache.h | 4 +-
475 arch/blackfin/Kconfig.debug | 1 +
476 arch/blackfin/include/asm/cache.h | 3 +-
477 arch/cris/include/arch-v10/arch/cache.h | 3 +-
478 arch/cris/include/arch-v32/arch/cache.h | 3 +-
479 arch/frv/include/asm/cache.h | 3 +-
480 arch/frv/mm/elf-fdpic.c | 4 +-
481 arch/hexagon/include/asm/cache.h | 6 +-
482 arch/ia64/Kconfig | 1 +
483 arch/ia64/include/asm/cache.h | 3 +-
484 arch/ia64/kernel/sys_ia64.c | 2 +
485 arch/ia64/mm/hugetlbpage.c | 2 +
486 arch/m32r/include/asm/cache.h | 4 +-
487 arch/m68k/include/asm/cache.h | 4 +-
488 arch/metag/mm/hugetlbpage.c | 1 +
489 arch/microblaze/include/asm/cache.h | 3 +-
490 arch/mips/Kbuild | 2 +-
491 arch/mips/Kconfig | 1 +
492 arch/mips/include/asm/irq.h | 1 -
493 arch/mips/include/asm/thread_info.h | 11 +-
494 arch/mips/kernel/irq.c | 3 +
495 arch/mips/kernel/ptrace.c | 9 +
496 arch/mips/mm/mmap.c | 4 +-
497 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
498 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
499 arch/openrisc/include/asm/cache.h | 4 +-
500 arch/parisc/include/asm/cache.h | 3 +
501 arch/parisc/kernel/sys_parisc.c | 4 +
502 arch/powerpc/Kconfig | 1 +
503 arch/powerpc/include/asm/cache.h | 4 +-
504 arch/powerpc/include/asm/thread_info.h | 5 +-
505 arch/powerpc/kernel/Makefile | 2 +
506 arch/powerpc/kernel/irq.c | 3 +
507 arch/powerpc/kernel/process.c | 10 +-
508 arch/powerpc/kernel/ptrace.c | 14 +
509 arch/powerpc/kernel/traps.c | 5 +
510 arch/powerpc/mm/slice.c | 2 +-
511 arch/s390/Kconfig.debug | 1 +
512 arch/s390/include/asm/cache.h | 4 +-
513 arch/score/include/asm/cache.h | 4 +-
514 arch/sh/include/asm/cache.h | 3 +-
515 arch/sh/mm/mmap.c | 6 +-
516 arch/sparc/include/asm/atomic_64.h | 5 +
517 arch/sparc/include/asm/cache.h | 4 +-
518 arch/sparc/include/asm/pgalloc_64.h | 1 +
519 arch/sparc/include/asm/thread_info_64.h | 8 +-
520 arch/sparc/kernel/process_32.c | 6 +-
521 arch/sparc/kernel/process_64.c | 8 +-
522 arch/sparc/kernel/ptrace_64.c | 14 +
523 arch/sparc/kernel/sys_sparc_64.c | 8 +-
524 arch/sparc/kernel/syscalls.S | 8 +-
525 arch/sparc/kernel/traps_32.c | 8 +-
526 arch/sparc/kernel/traps_64.c | 28 +-
527 arch/sparc/kernel/unaligned_64.c | 2 +-
528 arch/sparc/lib/atomic_64.S | 2 +-
529 arch/sparc/lib/ksyms.c | 4 +-
530 arch/sparc/mm/fault_64.c | 2 +-
531 arch/sparc/mm/hugetlbpage.c | 15 +-
532 arch/tile/Kconfig | 1 +
533 arch/tile/include/asm/cache.h | 3 +-
534 arch/tile/mm/hugetlbpage.c | 2 +
535 arch/um/include/asm/cache.h | 3 +-
536 arch/unicore32/include/asm/cache.h | 6 +-
537 arch/x86/Kconfig | 21 +
538 arch/x86/Kconfig.debug | 2 +
539 arch/x86/entry/common.c | 14 +
540 arch/x86/entry/entry_32.S | 2 +-
541 arch/x86/entry/entry_64.S | 2 +-
542 arch/x86/ia32/ia32_aout.c | 2 +
543 arch/x86/include/asm/floppy.h | 20 +-
544 arch/x86/include/asm/fpu/types.h | 69 +-
545 arch/x86/include/asm/io.h | 2 +-
546 arch/x86/include/asm/page.h | 12 +-
547 arch/x86/include/asm/paravirt_types.h | 21 +-
548 arch/x86/include/asm/processor.h | 12 +-
549 arch/x86/include/asm/thread_info.h | 6 +-
550 arch/x86/kernel/dumpstack.c | 10 +-
551 arch/x86/kernel/dumpstack_32.c | 2 +-
552 arch/x86/kernel/dumpstack_64.c | 2 +-
553 arch/x86/kernel/ioport.c | 13 +
554 arch/x86/kernel/irq_32.c | 3 +
555 arch/x86/kernel/irq_64.c | 4 +
556 arch/x86/kernel/ldt.c | 18 +
557 arch/x86/kernel/msr.c | 12 +
558 arch/x86/kernel/ptrace.c | 14 +
559 arch/x86/kernel/signal.c | 9 +-
560 arch/x86/kernel/sys_i386_32.c | 9 +-
561 arch/x86/kernel/sys_x86_64.c | 8 +-
562 arch/x86/kernel/traps.c | 5 +
563 arch/x86/kernel/verify_cpu.S | 1 +
564 arch/x86/kernel/vm86_32.c | 15 +
565 arch/x86/mm/fault.c | 12 +-
566 arch/x86/mm/hugetlbpage.c | 15 +-
567 arch/x86/mm/init.c | 51 +-
568 arch/x86/mm/init_32.c | 10 +-
569 arch/x86/net/bpf_jit_comp.c | 4 +
570 arch/x86/platform/efi/efi_64.c | 2 +-
571 arch/x86/xen/Kconfig | 1 +
572 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
573 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
574 crypto/scatterwalk.c | 10 +-
575 drivers/acpi/acpica/hwxfsleep.c | 11 +-
576 drivers/acpi/custom_method.c | 4 +
577 drivers/block/cciss.h | 30 +-
578 drivers/block/smart1,2.h | 40 +-
579 drivers/cdrom/cdrom.c | 2 +-
580 drivers/char/Kconfig | 4 +-
581 drivers/char/genrtc.c | 1 +
582 drivers/char/mem.c | 17 +
583 drivers/char/random.c | 5 +-
584 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
585 drivers/firewire/ohci.c | 4 +
586 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 80 +-
587 .../drm/amd/powerplay/hwmgr/cz_clockpowergating.c | 12 +-
588 drivers/gpu/drm/amd/powerplay/hwmgr/cz_hwmgr.c | 58 +-
589 drivers/gpu/drm/amd/powerplay/hwmgr/fiji_thermal.c | 20 +-
590 .../gpu/drm/amd/powerplay/hwmgr/tonga_thermal.c | 20 +-
591 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 7 +-
592 drivers/gpu/drm/msm/mdp/mdp5/mdp5_kms.c | 9 +-
593 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
594 drivers/gpu/drm/sti/sti_cursor.c | 6 +-
595 drivers/gpu/drm/sti/sti_dvo.c | 6 +-
596 drivers/gpu/drm/sti/sti_gdp.c | 6 +-
597 drivers/gpu/drm/sti/sti_hda.c | 6 +-
598 drivers/gpu/drm/sti/sti_hdmi.c | 6 +-
599 drivers/gpu/drm/sti/sti_hqvdp.c | 6 +-
600 drivers/gpu/drm/sti/sti_mixer.c | 6 +-
601 drivers/gpu/drm/sti/sti_tvout.c | 6 +-
602 drivers/gpu/drm/sti/sti_vid.c | 6 +-
603 drivers/gpu/drm/tilcdc/tilcdc_external.c | 2 +-
604 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
605 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
606 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
607 drivers/hid/hid-wiimote-debug.c | 2 +-
608 drivers/hid/usbhid/hiddev.c | 10 +-
609 drivers/infiniband/hw/i40iw/i40iw_ctrl.c | 160 +-
610 drivers/infiniband/hw/i40iw/i40iw_uk.c | 34 +-
611 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
612 drivers/iommu/Kconfig | 1 +
613 drivers/iommu/amd_iommu.c | 14 +-
614 drivers/irqchip/irq-mmp.c | 2 +-
615 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
616 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
617 drivers/isdn/gigaset/usb-gigaset.c | 34 +-
618 drivers/isdn/i4l/isdn_concap.c | 6 +-
619 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
620 drivers/md/bcache/Kconfig | 1 +
621 drivers/md/raid5.c | 8 +
622 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
623 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
624 drivers/media/radio/radio-cadet.c | 5 +-
625 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
626 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
627 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
628 drivers/media/usb/dvb-usb/technisat-usb2.c | 23 +-
629 drivers/message/fusion/mptbase.c | 9 +
630 drivers/misc/sgi-xp/xp_main.c | 12 +-
631 drivers/mtd/nand/brcmnand/bcm63138_nand.c | 6 +-
632 drivers/mtd/nand/brcmnand/iproc_nand.c | 8 +-
633 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
634 drivers/net/wan/lmc/lmc_media.c | 97 +-
635 drivers/net/wan/z85230.c | 24 +-
636 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
637 drivers/net/wireless/zydas/zd1211rw/zd_usb.c | 2 +-
638 drivers/pci/proc.c | 9 +
639 drivers/platform/x86/asus-wmi.c | 12 +
640 drivers/rtc/rtc-dev.c | 3 +
641 drivers/scsi/bfa/bfa_fcs.c | 19 +-
642 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
643 drivers/scsi/bfa/bfa_modules.h | 12 +-
644 drivers/scsi/hpsa.h | 40 +-
645 drivers/staging/lustre/lnet/libcfs/module.c | 10 +-
646 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
647 drivers/staging/wilc1000/host_interface.h | 1 +
648 drivers/staging/wilc1000/wilc_spi.c | 1 +
649 drivers/tty/serial/uartlite.c | 4 +-
650 drivers/tty/sysrq.c | 2 +-
651 drivers/tty/tty_io.c | 4 +
652 drivers/tty/vt/keyboard.c | 22 +-
653 drivers/uio/uio.c | 6 +-
654 drivers/usb/core/devio.c | 9 +-
655 drivers/usb/core/hub.c | 5 +
656 drivers/usb/gadget/function/f_uac1.c | 1 +
657 drivers/usb/gadget/function/u_uac1.c | 1 +
658 drivers/usb/host/hwa-hc.c | 9 +-
659 drivers/usb/usbip/vhci_sysfs.c | 2 +-
660 drivers/video/fbdev/arcfb.c | 2 +-
661 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
662 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
663 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
664 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
665 drivers/xen/xenfs/xenstored.c | 5 +
666 firmware/Makefile | 2 +
667 firmware/WHENCE | 20 +-
668 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
669 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
670 fs/attr.c | 4 +
671 fs/autofs4/waitq.c | 9 +
672 fs/binfmt_aout.c | 7 +
673 fs/binfmt_elf.c | 40 +-
674 fs/compat.c | 20 +-
675 fs/coredump.c | 17 +-
676 fs/dcache.c | 3 +
677 fs/debugfs/inode.c | 19 +-
678 fs/exec.c | 249 +-
679 fs/ext2/balloc.c | 4 +-
680 fs/ext2/super.c | 8 +-
681 fs/ext4/balloc.c | 4 +-
682 fs/ext4/extents.c | 2 +-
683 fs/fcntl.c | 4 +
684 fs/fhandle.c | 3 +-
685 fs/file.c | 4 +
686 fs/filesystems.c | 4 +
687 fs/fs_struct.c | 20 +-
688 fs/hugetlbfs/inode.c | 5 +-
689 fs/inode.c | 8 +-
690 fs/kernfs/dir.c | 6 +
691 fs/mount.h | 4 +-
692 fs/namei.c | 292 +-
693 fs/namespace.c | 24 +
694 fs/nfsd/nfs2acl.c | 20 +-
695 fs/nfsd/nfs3acl.c | 16 +-
696 fs/nfsd/nfs4acl.c | 16 +-
697 fs/nfsd/nfscache.c | 2 +-
698 fs/open.c | 38 +
699 fs/overlayfs/inode.c | 3 +
700 fs/overlayfs/super.c | 6 +-
701 fs/pipe.c | 2 +-
702 fs/posix_acl.c | 61 +-
703 fs/proc/Kconfig | 10 +-
704 fs/proc/array.c | 67 +-
705 fs/proc/base.c | 193 +-
706 fs/proc/cmdline.c | 4 +
707 fs/proc/devices.c | 4 +
708 fs/proc/fd.c | 13 +-
709 fs/proc/generic.c | 64 +
710 fs/proc/inode.c | 17 +
711 fs/proc/internal.h | 18 +-
712 fs/proc/interrupts.c | 4 +
713 fs/proc/kcore.c | 3 +
714 fs/proc/proc_net.c | 31 +
715 fs/proc/proc_sysctl.c | 52 +-
716 fs/proc/root.c | 8 +
717 fs/proc/stat.c | 69 +-
718 fs/proc/task_mmu.c | 85 +-
719 fs/proc/task_nommu.c | 2 +-
720 fs/readdir.c | 19 +
721 fs/reiserfs/item_ops.c | 24 +-
722 fs/reiserfs/super.c | 4 +
723 fs/select.c | 2 +
724 fs/seq_file.c | 31 +-
725 fs/stat.c | 20 +-
726 fs/sysfs/dir.c | 30 +-
727 fs/utimes.c | 7 +
728 fs/xattr.c | 26 +-
729 fs/xfs/xfs_icache.c | 60 +-
730 fs/xfs/xfs_inode.c | 13 +
731 grsecurity/Kconfig | 1205 ++++
732 grsecurity/Makefile | 54 +
733 grsecurity/gracl.c | 2757 +++++++++
734 grsecurity/gracl_alloc.c | 105 +
735 grsecurity/gracl_cap.c | 127 +
736 grsecurity/gracl_compat.c | 269 +
737 grsecurity/gracl_fs.c | 448 ++
738 grsecurity/gracl_ip.c | 387 ++
739 grsecurity/gracl_learn.c | 207 +
740 grsecurity/gracl_policy.c | 1784 ++++++
741 grsecurity/gracl_res.c | 68 +
742 grsecurity/gracl_segv.c | 306 +
743 grsecurity/gracl_shm.c | 40 +
744 grsecurity/grsec_chdir.c | 19 +
745 grsecurity/grsec_chroot.c | 506 ++
746 grsecurity/grsec_disabled.c | 445 ++
747 grsecurity/grsec_exec.c | 189 +
748 grsecurity/grsec_fifo.c | 26 +
749 grsecurity/grsec_fork.c | 23 +
750 grsecurity/grsec_init.c | 294 +
751 grsecurity/grsec_ipc.c | 48 +
752 grsecurity/grsec_link.c | 65 +
753 grsecurity/grsec_log.c | 340 +
754 grsecurity/grsec_mem.c | 48 +
755 grsecurity/grsec_mount.c | 65 +
756 grsecurity/grsec_pax.c | 47 +
757 grsecurity/grsec_proc.c | 20 +
758 grsecurity/grsec_ptrace.c | 30 +
759 grsecurity/grsec_sig.c | 248 +
760 grsecurity/grsec_sock.c | 244 +
761 grsecurity/grsec_sysctl.c | 497 ++
762 grsecurity/grsec_time.c | 16 +
763 grsecurity/grsec_tpe.c | 78 +
764 grsecurity/grsec_tty.c | 18 +
765 grsecurity/grsec_usb.c | 15 +
766 grsecurity/grsum.c | 56 +
767 include/drm/drm_modeset_helper_vtables.h | 1 +
768 include/linux/binfmts.h | 5 +-
769 include/linux/capability.h | 13 +
770 include/linux/compiler-gcc.h | 5 +
771 include/linux/compiler.h | 8 +
772 include/linux/cred.h | 8 +-
773 include/linux/dcache.h | 5 +-
774 include/linux/fs.h | 24 +-
775 include/linux/fs_struct.h | 2 +-
776 include/linux/fsnotify.h | 6 +
777 include/linux/gracl.h | 342 ++
778 include/linux/gracl_compat.h | 156 +
779 include/linux/gralloc.h | 9 +
780 include/linux/grdefs.h | 140 +
781 include/linux/grinternal.h | 231 +
782 include/linux/grmsg.h | 120 +
783 include/linux/grsecurity.h | 259 +
784 include/linux/grsock.h | 19 +
785 include/linux/ipc.h | 2 +-
786 include/linux/ipc_namespace.h | 2 +-
787 include/linux/kallsyms.h | 18 +-
788 include/linux/key-type.h | 4 +-
789 include/linux/kmod.h | 5 +
790 include/linux/kobject.h | 2 +-
791 include/linux/lsm_hooks.h | 4 +-
792 include/linux/mm.h | 12 +
793 include/linux/mm_types.h | 4 +-
794 include/linux/module.h | 5 +-
795 include/linux/mount.h | 2 +-
796 include/linux/msg.h | 2 +-
797 include/linux/netfilter/xt_gradm.h | 9 +
798 include/linux/path.h | 4 +-
799 include/linux/perf_event.h | 13 +-
800 include/linux/pid_namespace.h | 2 +-
801 include/linux/printk.h | 2 +-
802 include/linux/proc_fs.h | 22 +-
803 include/linux/proc_ns.h | 2 +-
804 include/linux/random.h | 2 +-
805 include/linux/rbtree_augmented.h | 4 +-
806 include/linux/scatterlist.h | 12 +-
807 include/linux/sched.h | 135 +-
808 include/linux/security.h | 1 +
809 include/linux/sem.h | 2 +-
810 include/linux/seq_file.h | 5 +
811 include/linux/shm.h | 6 +-
812 include/linux/skbuff.h | 3 +
813 include/linux/slab.h | 9 -
814 include/linux/sysctl.h | 8 +-
815 include/linux/thread_info.h | 6 +-
816 include/linux/tty.h | 2 +-
817 include/linux/tty_driver.h | 4 +-
818 include/linux/uidgid.h | 6 +
819 include/linux/user_namespace.h | 2 +-
820 include/linux/utsname.h | 2 +-
821 include/linux/vermagic.h | 16 +-
822 include/linux/vmalloc.h | 8 +
823 include/net/af_unix.h | 2 +-
824 include/net/ip.h | 2 +-
825 include/net/neighbour.h | 2 +-
826 include/net/net_namespace.h | 2 +-
827 include/net/sock.h | 2 +-
828 include/trace/events/fs.h | 53 +
829 include/uapi/linux/personality.h | 1 +
830 init/Kconfig | 5 +-
831 init/main.c | 46 +-
832 ipc/mqueue.c | 1 +
833 ipc/msg.c | 3 +-
834 ipc/msgutil.c | 4 +-
835 ipc/sem.c | 3 +-
836 ipc/shm.c | 26 +-
837 ipc/util.c | 6 +
838 kernel/auditsc.c | 2 +-
839 kernel/bpf/syscall.c | 10 +-
840 kernel/capability.c | 41 +-
841 kernel/cgroup.c | 5 +-
842 kernel/compat.c | 1 +
843 kernel/configs.c | 11 +
844 kernel/cred.c | 112 +-
845 kernel/events/core.c | 14 +-
846 kernel/exit.c | 10 +-
847 kernel/fork.c | 92 +-
848 kernel/futex.c | 4 +-
849 kernel/kallsyms.c | 9 +
850 kernel/kcmp.c | 4 +
851 kernel/kexec_core.c | 2 +-
852 kernel/kmod.c | 96 +-
853 kernel/kprobes.c | 9 +-
854 kernel/ksysfs.c | 2 +
855 kernel/locking/lockdep_proc.c | 10 +-
856 kernel/module.c | 108 +-
857 kernel/panic.c | 6 +-
858 kernel/pid.c | 18 +-
859 kernel/power/Kconfig | 2 +
860 kernel/printk/printk.c | 7 +-
861 kernel/ptrace.c | 50 +-
862 kernel/resource.c | 10 +
863 kernel/sched/core.c | 9 +-
864 kernel/sched/debug.c | 4 +
865 kernel/signal.c | 37 +-
866 kernel/sys.c | 64 +-
867 kernel/sysctl.c | 174 +-
868 kernel/taskstats.c | 6 +
869 kernel/time/posix-timers.c | 8 +
870 kernel/time/time.c | 5 +
871 kernel/time/timekeeping.c | 3 +
872 kernel/time/timer_list.c | 13 +-
873 kernel/time/timer_stats.c | 10 +-
874 kernel/trace/Kconfig | 6 +
875 kernel/trace/trace_syscalls.c | 8 +
876 kernel/user_namespace.c | 15 +
877 lib/Kconfig.debug | 13 +-
878 lib/is_single_threaded.c | 3 +
879 lib/list_debug.c | 65 +-
880 lib/nlattr.c | 2 +
881 lib/rbtree.c | 4 +-
882 lib/vsprintf.c | 39 +-
883 localversion-grsec | 1 +
884 mm/Kconfig | 8 +-
885 mm/Kconfig.debug | 1 +
886 mm/filemap.c | 1 +
887 mm/kmemleak.c | 4 +-
888 mm/memory.c | 2 +-
889 mm/mempolicy.c | 12 +-
890 mm/migrate.c | 3 +-
891 mm/mlock.c | 11 +-
892 mm/mmap.c | 124 +-
893 mm/mprotect.c | 8 +
894 mm/page_alloc.c | 2 +-
895 mm/percpu.c | 73 +-
896 mm/process_vm_access.c | 6 +
897 mm/shmem.c | 2 +-
898 mm/slab.c | 14 +-
899 mm/slab_common.c | 2 +-
900 mm/slob.c | 12 +
901 mm/slub.c | 33 +-
902 mm/util.c | 3 +
903 mm/vmalloc.c | 84 +-
904 mm/vmstat.c | 29 +-
905 net/appletalk/atalk_proc.c | 2 +-
906 net/atm/lec.c | 6 +-
907 net/atm/mpoa_caches.c | 43 +-
908 net/can/bcm.c | 2 +-
909 net/can/proc.c | 2 +-
910 net/core/dev_ioctl.c | 7 +-
911 net/core/filter.c | 8 +-
912 net/core/net-procfs.c | 17 +-
913 net/core/pktgen.c | 2 +-
914 net/core/sock.c | 23 +-
915 net/core/sysctl_net_core.c | 2 +-
916 net/decnet/dn_dev.c | 2 +-
917 net/ipv4/devinet.c | 6 +-
918 net/ipv4/inet_hashtables.c | 6 +
919 net/ipv4/ip_input.c | 7 +
920 net/ipv4/ip_sockglue.c | 3 +-
921 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
922 net/ipv4/route.c | 6 +-
923 net/ipv4/tcp_input.c | 6 +-
924 net/ipv4/tcp_ipv4.c | 24 +-
925 net/ipv4/tcp_minisocks.c | 9 +-
926 net/ipv4/tcp_timer.c | 11 +
927 net/ipv4/udp.c | 24 +
928 net/ipv6/addrconf.c | 13 +-
929 net/ipv6/proc.c | 2 +-
930 net/ipv6/tcp_ipv6.c | 23 +-
931 net/ipv6/udp.c | 7 +
932 net/ipx/ipx_proc.c | 2 +-
933 net/irda/irproc.c | 2 +-
934 net/llc/llc_proc.c | 2 +-
935 net/netfilter/Kconfig | 10 +
936 net/netfilter/Makefile | 1 +
937 net/netfilter/xt_gradm.c | 51 +
938 net/netfilter/xt_hashlimit.c | 4 +-
939 net/netfilter/xt_recent.c | 2 +-
940 net/socket.c | 75 +-
941 net/sunrpc/Kconfig | 1 +
942 net/sunrpc/cache.c | 2 +-
943 net/sunrpc/stats.c | 2 +-
944 net/sysctl_net.c | 2 +-
945 net/unix/af_unix.c | 52 +-
946 net/vmw_vsock/vmci_transport_notify.c | 30 +-
947 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
948 net/x25/sysctl_net_x25.c | 2 +-
949 net/x25/x25_proc.c | 2 +-
950 scripts/Makefile.gcc-plugins | 5 +
951 scripts/gcc-plugins/.gitignore | 1 +
952 scripts/gcc-plugins/Makefile | 10 +
953 scripts/gcc-plugins/gen-random-seed.sh | 8 +
954 scripts/gcc-plugins/randomize_layout_plugin.c | 940 +++
955 .../size_overflow_plugin/size_overflow_hash.data | 724 ++-
956 scripts/package/Makefile | 2 +-
957 scripts/package/mkspec | 41 +-
958 security/Kconfig | 364 +-
959 security/apparmor/file.c | 4 +-
960 security/apparmor/lsm.c | 8 +-
961 security/commoncap.c | 29 +
962 security/keys/internal.h | 2 +-
963 security/keys/key.c | 2 +-
964 security/min_addr.c | 2 +
965 security/tomoyo/file.c | 12 +-
966 security/tomoyo/mount.c | 4 +
967 security/tomoyo/tomoyo.c | 20 +-
968 security/yama/Kconfig | 2 +-
969 sound/synth/emux/emux_seq.c | 14 +-
970 sound/usb/line6/driver.c | 40 +-
971 sound/usb/line6/toneport.c | 12 +-
972 521 files changed, 33285 insertions(+), 3355 deletions(-)
973
974 commit 96b2aa21ce8de62dfa0ee023b2cd20928f5021a1
975 Author: Brad Spengler <spender@grsecurity.net>
976 Date: Sat Jul 2 09:03:17 2016 -0400
977
978 Initial commit of pax-linux-4.6.3-test9.patch
979
980 .gitignore | 1 +
981 Documentation/dontdiff | 46 +-
982 Documentation/kbuild/makefiles.txt | 39 +-
983 Documentation/kernel-parameters.txt | 28 +
984 Makefile | 20 +-
985 arch/Kconfig | 14 +
986 arch/alpha/include/asm/atomic.h | 10 +
987 arch/alpha/include/asm/elf.h | 7 +
988 arch/alpha/include/asm/pgalloc.h | 6 +
989 arch/alpha/include/asm/pgtable.h | 11 +
990 arch/alpha/kernel/module.c | 2 +-
991 arch/alpha/kernel/osf_sys.c | 8 +-
992 arch/alpha/mm/fault.c | 141 +-
993 arch/arm/Kconfig | 6 +-
994 arch/arm/boot/compressed/Makefile | 2 +
995 arch/arm/include/asm/atomic.h | 323 +-
996 arch/arm/include/asm/cache.h | 4 +-
997 arch/arm/include/asm/cacheflush.h | 2 +-
998 arch/arm/include/asm/checksum.h | 14 +-
999 arch/arm/include/asm/cmpxchg.h | 4 +
1000 arch/arm/include/asm/cpuidle.h | 2 +-
1001 arch/arm/include/asm/domain.h | 42 +-
1002 arch/arm/include/asm/elf.h | 9 +-
1003 arch/arm/include/asm/fncpy.h | 2 +
1004 arch/arm/include/asm/futex.h | 1 +
1005 arch/arm/include/asm/kmap_types.h | 2 +-
1006 arch/arm/include/asm/mach/dma.h | 2 +-
1007 arch/arm/include/asm/mach/map.h | 16 +-
1008 arch/arm/include/asm/outercache.h | 2 +-
1009 arch/arm/include/asm/page.h | 3 +-
1010 arch/arm/include/asm/pgalloc.h | 20 +
1011 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
1012 arch/arm/include/asm/pgtable-2level.h | 3 +
1013 arch/arm/include/asm/pgtable-3level.h | 3 +
1014 arch/arm/include/asm/pgtable.h | 54 +-
1015 arch/arm/include/asm/smp.h | 2 +-
1016 arch/arm/include/asm/string.h | 10 +-
1017 arch/arm/include/asm/thread_info.h | 3 +
1018 arch/arm/include/asm/tls.h | 3 +
1019 arch/arm/include/asm/uaccess.h | 113 +-
1020 arch/arm/include/uapi/asm/ptrace.h | 2 +-
1021 arch/arm/kernel/armksyms.c | 2 +-
1022 arch/arm/kernel/cpuidle.c | 2 +-
1023 arch/arm/kernel/entry-armv.S | 109 +-
1024 arch/arm/kernel/entry-common.S | 40 +-
1025 arch/arm/kernel/entry-header.S | 55 +
1026 arch/arm/kernel/fiq.c | 3 +
1027 arch/arm/kernel/module-plts.c | 7 +-
1028 arch/arm/kernel/module.c | 38 +-
1029 arch/arm/kernel/patch.c | 2 +
1030 arch/arm/kernel/process.c | 86 +-
1031 arch/arm/kernel/reboot.c | 1 +
1032 arch/arm/kernel/setup.c | 20 +-
1033 arch/arm/kernel/signal.c | 35 +-
1034 arch/arm/kernel/smp.c | 2 +-
1035 arch/arm/kernel/tcm.c | 4 +-
1036 arch/arm/kernel/vmlinux.lds.S | 6 +-
1037 arch/arm/kvm/arm.c | 8 +-
1038 arch/arm/lib/copy_page.S | 1 +
1039 arch/arm/lib/csumpartialcopyuser.S | 4 +-
1040 arch/arm/lib/delay.c | 2 +-
1041 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
1042 arch/arm/mach-exynos/suspend.c | 6 +-
1043 arch/arm/mach-mvebu/coherency.c | 4 +-
1044 arch/arm/mach-omap2/board-n8x0.c | 2 +-
1045 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
1046 arch/arm/mach-omap2/omap-smp.c | 1 +
1047 arch/arm/mach-omap2/omap_device.c | 4 +-
1048 arch/arm/mach-omap2/omap_device.h | 4 +-
1049 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
1050 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
1051 arch/arm/mach-omap2/wd_timer.c | 6 +-
1052 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
1053 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
1054 arch/arm/mach-tegra/irq.c | 1 +
1055 arch/arm/mach-ux500/pm.c | 1 +
1056 arch/arm/mach-zynq/platsmp.c | 1 +
1057 arch/arm/mm/Kconfig | 6 +-
1058 arch/arm/mm/cache-l2x0.c | 2 +-
1059 arch/arm/mm/context.c | 10 +-
1060 arch/arm/mm/fault.c | 160 +
1061 arch/arm/mm/fault.h | 12 +
1062 arch/arm/mm/init.c | 39 +
1063 arch/arm/mm/ioremap.c | 4 +-
1064 arch/arm/mm/mmap.c | 36 +-
1065 arch/arm/mm/mmu.c | 162 +-
1066 arch/arm/net/bpf_jit_32.c | 3 +
1067 arch/arm/plat-iop/setup.c | 2 +-
1068 arch/arm/plat-omap/sram.c | 2 +
1069 arch/arm64/Kconfig | 1 +
1070 arch/arm64/include/asm/atomic.h | 10 +
1071 arch/arm64/include/asm/percpu.h | 8 +-
1072 arch/arm64/include/asm/pgalloc.h | 5 +
1073 arch/arm64/include/asm/string.h | 22 +-
1074 arch/arm64/include/asm/uaccess.h | 1 +
1075 arch/arm64/mm/dma-mapping.c | 2 +-
1076 arch/avr32/include/asm/elf.h | 8 +-
1077 arch/avr32/include/asm/kmap_types.h | 4 +-
1078 arch/avr32/mm/fault.c | 27 +
1079 arch/frv/include/asm/atomic.h | 10 +
1080 arch/frv/include/asm/kmap_types.h | 2 +-
1081 arch/frv/mm/elf-fdpic.c | 3 +-
1082 arch/ia64/Makefile | 1 +
1083 arch/ia64/include/asm/atomic.h | 10 +
1084 arch/ia64/include/asm/elf.h | 7 +
1085 arch/ia64/include/asm/pgalloc.h | 12 +
1086 arch/ia64/include/asm/pgtable.h | 13 +-
1087 arch/ia64/include/asm/spinlock.h | 2 +-
1088 arch/ia64/include/asm/uaccess.h | 27 +-
1089 arch/ia64/kernel/module.c | 20 +-
1090 arch/ia64/kernel/palinfo.c | 2 +-
1091 arch/ia64/kernel/sys_ia64.c | 7 +
1092 arch/ia64/kernel/vmlinux.lds.S | 2 +-
1093 arch/ia64/mm/fault.c | 32 +-
1094 arch/ia64/mm/init.c | 15 +-
1095 arch/m32r/lib/usercopy.c | 6 +
1096 arch/mips/Kconfig | 1 +
1097 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
1098 arch/mips/include/asm/atomic.h | 372 +-
1099 arch/mips/include/asm/cache.h | 3 +-
1100 arch/mips/include/asm/elf.h | 7 +
1101 arch/mips/include/asm/exec.h | 2 +-
1102 arch/mips/include/asm/hw_irq.h | 2 +-
1103 arch/mips/include/asm/local.h | 57 +
1104 arch/mips/include/asm/page.h | 2 +-
1105 arch/mips/include/asm/pgalloc.h | 5 +
1106 arch/mips/include/asm/pgtable.h | 3 +
1107 arch/mips/include/asm/uaccess.h | 1 +
1108 arch/mips/kernel/binfmt_elfn32.c | 7 +
1109 arch/mips/kernel/binfmt_elfo32.c | 7 +
1110 arch/mips/kernel/irq-gt641xx.c | 2 +-
1111 arch/mips/kernel/irq.c | 6 +-
1112 arch/mips/kernel/pm-cps.c | 2 +-
1113 arch/mips/kernel/process.c | 12 -
1114 arch/mips/kernel/sync-r4k.c | 24 +-
1115 arch/mips/kernel/traps.c | 13 +-
1116 arch/mips/lib/ashldi3.c | 21 +-
1117 arch/mips/lib/ashrdi3.c | 19 +-
1118 arch/mips/lib/libgcc.h | 12 +-
1119 arch/mips/mm/fault.c | 25 +
1120 arch/mips/mm/init.c | 4 +-
1121 arch/mips/mm/mmap.c | 24 +-
1122 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
1123 arch/mips/sni/rm200.c | 2 +-
1124 arch/mips/vr41xx/common/icu.c | 2 +-
1125 arch/mips/vr41xx/common/irq.c | 4 +-
1126 arch/parisc/include/asm/atomic.h | 10 +
1127 arch/parisc/include/asm/elf.h | 7 +
1128 arch/parisc/include/asm/pgalloc.h | 6 +
1129 arch/parisc/include/asm/pgtable.h | 11 +
1130 arch/parisc/include/asm/uaccess.h | 4 +-
1131 arch/parisc/kernel/module.c | 26 +-
1132 arch/parisc/kernel/sys_parisc.c | 15 +
1133 arch/parisc/kernel/traps.c | 4 +-
1134 arch/parisc/mm/fault.c | 140 +-
1135 arch/powerpc/Kconfig | 1 +
1136 arch/powerpc/include/asm/atomic.h | 317 +-
1137 arch/powerpc/include/asm/book3s/32/hash.h | 1 +
1138 arch/powerpc/include/asm/elf.h | 12 +
1139 arch/powerpc/include/asm/exec.h | 2 +-
1140 arch/powerpc/include/asm/kmap_types.h | 2 +-
1141 arch/powerpc/include/asm/local.h | 46 +
1142 arch/powerpc/include/asm/mman.h | 2 +-
1143 arch/powerpc/include/asm/page.h | 8 +-
1144 arch/powerpc/include/asm/page_64.h | 7 +-
1145 arch/powerpc/include/asm/pgalloc-64.h | 11 +
1146 arch/powerpc/include/asm/pgtable.h | 1 +
1147 arch/powerpc/include/asm/reg.h | 1 +
1148 arch/powerpc/include/asm/smp.h | 2 +-
1149 arch/powerpc/include/asm/spinlock.h | 42 +-
1150 arch/powerpc/include/asm/string.h | 18 +-
1151 arch/powerpc/include/asm/uaccess.h | 141 +-
1152 arch/powerpc/kernel/Makefile | 5 +
1153 arch/powerpc/kernel/exceptions-64e.S | 4 +-
1154 arch/powerpc/kernel/exceptions-64s.S | 2 +-
1155 arch/powerpc/kernel/module_32.c | 15 +-
1156 arch/powerpc/kernel/process.c | 7 -
1157 arch/powerpc/kernel/signal_32.c | 2 +-
1158 arch/powerpc/kernel/signal_64.c | 2 +-
1159 arch/powerpc/kernel/traps.c | 21 +
1160 arch/powerpc/kernel/vdso.c | 5 +-
1161 arch/powerpc/lib/usercopy_64.c | 18 -
1162 arch/powerpc/mm/fault.c | 56 +-
1163 arch/powerpc/mm/mmap.c | 16 +
1164 arch/powerpc/mm/slice.c | 21 +-
1165 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
1166 arch/s390/include/asm/atomic.h | 10 +
1167 arch/s390/include/asm/elf.h | 7 +
1168 arch/s390/include/asm/exec.h | 2 +-
1169 arch/s390/include/asm/uaccess.h | 13 +-
1170 arch/s390/kernel/module.c | 22 +-
1171 arch/s390/kernel/process.c | 7 -
1172 arch/s390/mm/mmap.c | 22 +-
1173 arch/score/include/asm/exec.h | 2 +-
1174 arch/score/kernel/process.c | 5 -
1175 arch/sh/mm/mmap.c | 28 +-
1176 arch/sparc/Kconfig | 1 +
1177 arch/sparc/include/asm/atomic_64.h | 110 +-
1178 arch/sparc/include/asm/cache.h | 2 +-
1179 arch/sparc/include/asm/elf_32.h | 7 +
1180 arch/sparc/include/asm/elf_64.h | 7 +
1181 arch/sparc/include/asm/pgalloc_32.h | 1 +
1182 arch/sparc/include/asm/pgalloc_64.h | 1 +
1183 arch/sparc/include/asm/pgtable.h | 4 +
1184 arch/sparc/include/asm/pgtable_32.h | 15 +-
1185 arch/sparc/include/asm/pgtsrmmu.h | 5 +
1186 arch/sparc/include/asm/setup.h | 4 +-
1187 arch/sparc/include/asm/spinlock_64.h | 35 +-
1188 arch/sparc/include/asm/thread_info_32.h | 1 +
1189 arch/sparc/include/asm/thread_info_64.h | 2 +
1190 arch/sparc/include/asm/uaccess.h | 1 +
1191 arch/sparc/include/asm/uaccess_32.h | 28 +-
1192 arch/sparc/include/asm/uaccess_64.h | 24 +-
1193 arch/sparc/kernel/Makefile | 2 +-
1194 arch/sparc/kernel/prom_common.c | 2 +-
1195 arch/sparc/kernel/smp_64.c | 8 +-
1196 arch/sparc/kernel/sys_sparc_32.c | 2 +-
1197 arch/sparc/kernel/sys_sparc_64.c | 58 +-
1198 arch/sparc/kernel/traps_64.c | 27 +-
1199 arch/sparc/lib/Makefile | 2 +-
1200 arch/sparc/lib/atomic_64.S | 57 +-
1201 arch/sparc/lib/ksyms.c | 6 +-
1202 arch/sparc/mm/Makefile | 2 +-
1203 arch/sparc/mm/fault_32.c | 292 +
1204 arch/sparc/mm/fault_64.c | 486 +
1205 arch/sparc/mm/hugetlbpage.c | 30 +-
1206 arch/sparc/mm/init_64.c | 10 +-
1207 arch/tile/include/asm/atomic_64.h | 10 +
1208 arch/tile/include/asm/uaccess.h | 4 +-
1209 arch/um/Makefile | 2 +
1210 arch/um/include/asm/kmap_types.h | 2 +-
1211 arch/um/include/asm/page.h | 3 +
1212 arch/um/include/asm/pgtable-3level.h | 1 +
1213 arch/um/kernel/process.c | 16 -
1214 arch/x86/Kconfig | 33 +-
1215 arch/x86/Kconfig.cpu | 6 +-
1216 arch/x86/Kconfig.debug | 3 +-
1217 arch/x86/Makefile | 13 +-
1218 arch/x86/boot/bitops.h | 4 +-
1219 arch/x86/boot/boot.h | 2 +-
1220 arch/x86/boot/compressed/Makefile | 17 +
1221 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
1222 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
1223 arch/x86/boot/compressed/head_32.S | 4 +-
1224 arch/x86/boot/compressed/head_64.S | 12 +-
1225 arch/x86/boot/compressed/misc.c | 11 +-
1226 arch/x86/boot/cpucheck.c | 16 +-
1227 arch/x86/boot/header.S | 6 +-
1228 arch/x86/boot/memory.c | 2 +-
1229 arch/x86/boot/video-vesa.c | 1 +
1230 arch/x86/boot/video.c | 2 +-
1231 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
1232 arch/x86/crypto/aesni-intel_asm.S | 116 +-
1233 arch/x86/crypto/aesni-intel_glue.c | 4 +-
1234 arch/x86/crypto/blowfish-x86_64-asm_64.S | 11 +-
1235 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 22 +-
1236 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 22 +-
1237 arch/x86/crypto/camellia-x86_64-asm_64.S | 11 +-
1238 arch/x86/crypto/camellia_aesni_avx2_glue.c | 18 +-
1239 arch/x86/crypto/camellia_aesni_avx_glue.c | 18 +-
1240 arch/x86/crypto/camellia_glue.c | 8 +-
1241 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 55 +-
1242 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 37 +-
1243 arch/x86/crypto/cast6_avx_glue.c | 16 +-
1244 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
1245 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
1246 arch/x86/crypto/glue_helper.c | 2 +-
1247 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
1248 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 21 +-
1249 arch/x86/crypto/serpent-avx2-asm_64.S | 21 +-
1250 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
1251 arch/x86/crypto/serpent_avx2_glue.c | 14 +-
1252 arch/x86/crypto/serpent_avx_glue.c | 18 +-
1253 arch/x86/crypto/serpent_sse2_glue.c | 4 +-
1254 arch/x86/crypto/sha-mb/sha1_mb_mgr_flush_avx2.S | 4 +-
1255 arch/x86/crypto/sha-mb/sha1_mb_mgr_submit_avx2.S | 2 +-
1256 arch/x86/crypto/sha1_ssse3_asm.S | 13 +-
1257 arch/x86/crypto/sha1_ssse3_glue.c | 56 +-
1258 arch/x86/crypto/sha256-avx-asm.S | 5 +-
1259 arch/x86/crypto/sha256-avx2-asm.S | 5 +-
1260 arch/x86/crypto/sha256-ssse3-asm.S | 6 +-
1261 arch/x86/crypto/sha256_ni_asm.S | 2 +-
1262 arch/x86/crypto/sha256_ssse3_glue.c | 26 +-
1263 arch/x86/crypto/sha512-avx-asm.S | 5 +-
1264 arch/x86/crypto/sha512-avx2-asm.S | 5 +-
1265 arch/x86/crypto/sha512-ssse3-asm.S | 5 +-
1266 arch/x86/crypto/sha512_ssse3_glue.c | 22 +-
1267 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 37 +-
1268 arch/x86/crypto/twofish-i586-asm_32.S | 4 +-
1269 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 6 +-
1270 arch/x86/crypto/twofish-x86_64-asm_64.S | 7 +-
1271 arch/x86/crypto/twofish_avx_glue.c | 21 +-
1272 arch/x86/crypto/twofish_glue.c | 4 +-
1273 arch/x86/crypto/twofish_glue_3way.c | 12 +-
1274 arch/x86/entry/Makefile | 2 +
1275 arch/x86/entry/calling.h | 86 +-
1276 arch/x86/entry/common.c | 89 +-
1277 arch/x86/entry/entry_32.S | 330 +-
1278 arch/x86/entry/entry_64.S | 600 +-
1279 arch/x86/entry/entry_64_compat.S | 115 +-
1280 arch/x86/entry/thunk_64.S | 2 +
1281 arch/x86/entry/vdso/Makefile | 5 +-
1282 arch/x86/entry/vdso/vclock_gettime.c | 2 +-
1283 arch/x86/entry/vdso/vdso2c.h | 4 +-
1284 arch/x86/entry/vdso/vma.c | 42 +-
1285 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
1286 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
1287 arch/x86/events/amd/iommu.c | 8 +-
1288 arch/x86/events/core.c | 8 +-
1289 arch/x86/events/intel/bts.c | 6 +-
1290 arch/x86/events/intel/core.c | 34 +-
1291 arch/x86/events/intel/cqm.c | 14 +-
1292 arch/x86/events/intel/cstate.c | 6 +-
1293 arch/x86/events/intel/ds.c | 7 +-
1294 arch/x86/events/intel/lbr.c | 4 +-
1295 arch/x86/events/intel/pt.c | 44 +-
1296 arch/x86/events/intel/rapl.c | 8 +-
1297 arch/x86/events/intel/uncore.c | 6 +-
1298 arch/x86/events/intel/uncore.h | 14 +-
1299 arch/x86/events/perf_event.h | 2 +-
1300 arch/x86/ia32/ia32_signal.c | 23 +-
1301 arch/x86/ia32/sys_ia32.c | 42 +-
1302 arch/x86/include/asm/alternative-asm.h | 43 +-
1303 arch/x86/include/asm/alternative.h | 4 +-
1304 arch/x86/include/asm/apic.h | 2 +-
1305 arch/x86/include/asm/apm.h | 4 +-
1306 arch/x86/include/asm/atomic.h | 230 +-
1307 arch/x86/include/asm/atomic64_32.h | 119 +
1308 arch/x86/include/asm/atomic64_64.h | 169 +-
1309 arch/x86/include/asm/bitops.h | 18 +-
1310 arch/x86/include/asm/boot.h | 2 +-
1311 arch/x86/include/asm/cache.h | 4 +-
1312 arch/x86/include/asm/checksum_32.h | 12 +-
1313 arch/x86/include/asm/cmpxchg.h | 39 +
1314 arch/x86/include/asm/compat.h | 4 +
1315 arch/x86/include/asm/cpufeature.h | 2 +-
1316 arch/x86/include/asm/cpufeatures.h | 5 +-
1317 arch/x86/include/asm/crypto/camellia.h | 30 +-
1318 arch/x86/include/asm/crypto/glue_helper.h | 10 +-
1319 arch/x86/include/asm/crypto/serpent-avx.h | 18 +-
1320 arch/x86/include/asm/crypto/serpent-sse2.h | 8 +-
1321 arch/x86/include/asm/crypto/twofish.h | 10 +-
1322 arch/x86/include/asm/desc.h | 78 +-
1323 arch/x86/include/asm/desc_defs.h | 6 +
1324 arch/x86/include/asm/div64.h | 2 +-
1325 arch/x86/include/asm/dma.h | 2 +
1326 arch/x86/include/asm/elf.h | 33 +-
1327 arch/x86/include/asm/emergency-restart.h | 2 +-
1328 arch/x86/include/asm/fixmap.h | 2 +-
1329 arch/x86/include/asm/fpu/internal.h | 38 +-
1330 arch/x86/include/asm/fpu/types.h | 5 +-
1331 arch/x86/include/asm/futex.h | 14 +-
1332 arch/x86/include/asm/hw_irq.h | 4 +-
1333 arch/x86/include/asm/hypervisor.h | 2 +-
1334 arch/x86/include/asm/i8259.h | 2 +-
1335 arch/x86/include/asm/io.h | 22 +-
1336 arch/x86/include/asm/irqflags.h | 5 +
1337 arch/x86/include/asm/kprobes.h | 9 +-
1338 arch/x86/include/asm/kvm_emulate.h | 7 +-
1339 arch/x86/include/asm/local.h | 106 +-
1340 arch/x86/include/asm/mman.h | 15 +
1341 arch/x86/include/asm/mmu.h | 14 +-
1342 arch/x86/include/asm/mmu_context.h | 133 +-
1343 arch/x86/include/asm/module.h | 23 +-
1344 arch/x86/include/asm/nmi.h | 19 +-
1345 arch/x86/include/asm/page.h | 1 +
1346 arch/x86/include/asm/page_32.h | 12 +-
1347 arch/x86/include/asm/page_64.h | 14 +-
1348 arch/x86/include/asm/paravirt.h | 46 +-
1349 arch/x86/include/asm/paravirt_types.h | 13 +-
1350 arch/x86/include/asm/pgalloc.h | 23 +
1351 arch/x86/include/asm/pgtable-2level.h | 2 +
1352 arch/x86/include/asm/pgtable-3level.h | 7 +
1353 arch/x86/include/asm/pgtable.h | 126 +-
1354 arch/x86/include/asm/pgtable_32.h | 14 +-
1355 arch/x86/include/asm/pgtable_32_types.h | 24 +-
1356 arch/x86/include/asm/pgtable_64.h | 23 +-
1357 arch/x86/include/asm/pgtable_64_types.h | 5 +
1358 arch/x86/include/asm/pgtable_types.h | 27 +-
1359 arch/x86/include/asm/pmem.h | 2 +-
1360 arch/x86/include/asm/preempt.h | 2 +-
1361 arch/x86/include/asm/processor.h | 57 +-
1362 arch/x86/include/asm/ptrace.h | 15 +-
1363 arch/x86/include/asm/realmode.h | 4 +-
1364 arch/x86/include/asm/reboot.h | 10 +-
1365 arch/x86/include/asm/rmwcc.h | 84 +-
1366 arch/x86/include/asm/rwsem.h | 60 +-
1367 arch/x86/include/asm/segment.h | 27 +-
1368 arch/x86/include/asm/smap.h | 43 +
1369 arch/x86/include/asm/smp.h | 14 +-
1370 arch/x86/include/asm/stackprotector.h | 4 +-
1371 arch/x86/include/asm/stacktrace.h | 34 +-
1372 arch/x86/include/asm/string_32.h | 20 +-
1373 arch/x86/include/asm/string_64.h | 16 +-
1374 arch/x86/include/asm/switch_to.h | 4 +-
1375 arch/x86/include/asm/sys_ia32.h | 6 +-
1376 arch/x86/include/asm/thread_info.h | 54 +-
1377 arch/x86/include/asm/tlbflush.h | 77 +-
1378 arch/x86/include/asm/traps.h | 4 +-
1379 arch/x86/include/asm/uaccess.h | 210 +-
1380 arch/x86/include/asm/uaccess_32.h | 28 +-
1381 arch/x86/include/asm/uaccess_64.h | 169 +-
1382 arch/x86/include/asm/word-at-a-time.h | 2 +-
1383 arch/x86/include/asm/x86_init.h | 10 +-
1384 arch/x86/include/asm/xen/page.h | 2 +-
1385 arch/x86/include/uapi/asm/e820.h | 2 +-
1386 arch/x86/kernel/Makefile | 2 +-
1387 arch/x86/kernel/acpi/boot.c | 4 +-
1388 arch/x86/kernel/acpi/sleep.c | 4 +
1389 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
1390 arch/x86/kernel/alternative.c | 124 +-
1391 arch/x86/kernel/apic/apic.c | 4 +-
1392 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
1393 arch/x86/kernel/apic/apic_noop.c | 2 +-
1394 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
1395 arch/x86/kernel/apic/io_apic.c | 10 +-
1396 arch/x86/kernel/apic/msi.c | 2 +-
1397 arch/x86/kernel/apic/probe_32.c | 4 +-
1398 arch/x86/kernel/apic/vector.c | 2 +
1399 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
1400 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
1401 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
1402 arch/x86/kernel/apm_32.c | 21 +-
1403 arch/x86/kernel/asm-offsets.c | 22 +
1404 arch/x86/kernel/cpu/Makefile | 4 -
1405 arch/x86/kernel/cpu/amd.c | 2 +-
1406 arch/x86/kernel/cpu/bugs_64.c | 2 +
1407 arch/x86/kernel/cpu/common.c | 202 +-
1408 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
1409 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
1410 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
1411 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
1412 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
1413 arch/x86/kernel/cpu/mshyperv.c | 2 +-
1414 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
1415 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
1416 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
1417 arch/x86/kernel/cpu/vmware.c | 2 +-
1418 arch/x86/kernel/crash_dump_64.c | 2 +-
1419 arch/x86/kernel/doublefault.c | 8 +-
1420 arch/x86/kernel/dumpstack.c | 24 +-
1421 arch/x86/kernel/dumpstack_32.c | 25 +-
1422 arch/x86/kernel/dumpstack_64.c | 72 +-
1423 arch/x86/kernel/e820.c | 4 +-
1424 arch/x86/kernel/early_printk.c | 1 +
1425 arch/x86/kernel/espfix_64.c | 44 +-
1426 arch/x86/kernel/fpu/core.c | 30 +-
1427 arch/x86/kernel/fpu/init.c | 49 +-
1428 arch/x86/kernel/fpu/regset.c | 22 +-
1429 arch/x86/kernel/fpu/signal.c | 20 +-
1430 arch/x86/kernel/fpu/xstate.c | 12 +-
1431 arch/x86/kernel/ftrace.c | 18 +-
1432 arch/x86/kernel/head64.c | 14 +-
1433 arch/x86/kernel/head_32.S | 240 +-
1434 arch/x86/kernel/head_64.S | 182 +-
1435 arch/x86/kernel/i386_ksyms_32.c | 12 +
1436 arch/x86/kernel/i8259.c | 10 +-
1437 arch/x86/kernel/io_delay.c | 2 +-
1438 arch/x86/kernel/ioport.c | 2 +-
1439 arch/x86/kernel/irq.c | 8 +-
1440 arch/x86/kernel/irq_32.c | 45 +-
1441 arch/x86/kernel/jump_label.c | 10 +-
1442 arch/x86/kernel/kgdb.c | 21 +-
1443 arch/x86/kernel/kprobes/core.c | 28 +-
1444 arch/x86/kernel/kprobes/opt.c | 16 +-
1445 arch/x86/kernel/ksysfs.c | 2 +-
1446 arch/x86/kernel/kvm.c | 2 +-
1447 arch/x86/kernel/kvmclock.c | 20 +-
1448 arch/x86/kernel/ldt.c | 25 +
1449 arch/x86/kernel/livepatch.c | 9 +-
1450 arch/x86/kernel/machine_kexec_32.c | 6 +-
1451 arch/x86/kernel/mcount_64.S | 21 +-
1452 arch/x86/kernel/module.c | 78 +-
1453 arch/x86/kernel/msr.c | 2 +-
1454 arch/x86/kernel/nmi.c | 34 +-
1455 arch/x86/kernel/nmi_selftest.c | 4 +-
1456 arch/x86/kernel/paravirt-spinlocks.c | 24 +-
1457 arch/x86/kernel/paravirt.c | 133 +-
1458 arch/x86/kernel/paravirt_patch_64.c | 8 +
1459 arch/x86/kernel/pci-calgary_64.c | 2 +-
1460 arch/x86/kernel/pci-iommu_table.c | 2 +-
1461 arch/x86/kernel/pci-swiotlb.c | 2 +-
1462 arch/x86/kernel/process.c | 80 +-
1463 arch/x86/kernel/process_32.c | 29 +-
1464 arch/x86/kernel/process_64.c | 14 +-
1465 arch/x86/kernel/ptrace.c | 20 +-
1466 arch/x86/kernel/pvclock.c | 8 +-
1467 arch/x86/kernel/reboot.c | 44 +-
1468 arch/x86/kernel/reboot_fixups_32.c | 2 +-
1469 arch/x86/kernel/relocate_kernel_64.S | 3 +-
1470 arch/x86/kernel/setup.c | 29 +-
1471 arch/x86/kernel/setup_percpu.c | 29 +-
1472 arch/x86/kernel/signal.c | 17 +-
1473 arch/x86/kernel/smp.c | 2 +-
1474 arch/x86/kernel/smpboot.c | 29 +-
1475 arch/x86/kernel/step.c | 6 +-
1476 arch/x86/kernel/sys_i386_32.c | 184 +
1477 arch/x86/kernel/sys_x86_64.c | 28 +-
1478 arch/x86/kernel/tboot.c | 22 +-
1479 arch/x86/kernel/time.c | 8 +-
1480 arch/x86/kernel/tls.c | 7 +-
1481 arch/x86/kernel/tracepoint.c | 4 +-
1482 arch/x86/kernel/traps.c | 66 +-
1483 arch/x86/kernel/tsc.c | 2 +-
1484 arch/x86/kernel/uprobes.c | 4 +-
1485 arch/x86/kernel/vm86_32.c | 6 +-
1486 arch/x86/kernel/vmlinux.lds.S | 144 +-
1487 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
1488 arch/x86/kernel/x86_init.c | 6 +-
1489 arch/x86/kvm/cpuid.c | 21 +-
1490 arch/x86/kvm/emulate.c | 20 +-
1491 arch/x86/kvm/i8259.c | 10 +-
1492 arch/x86/kvm/ioapic.c | 2 +
1493 arch/x86/kvm/lapic.c | 2 +-
1494 arch/x86/kvm/paging_tmpl.h | 2 +-
1495 arch/x86/kvm/svm.c | 10 +-
1496 arch/x86/kvm/vmx.c | 60 +-
1497 arch/x86/kvm/x86.c | 44 +-
1498 arch/x86/lguest/boot.c | 3 +-
1499 arch/x86/lib/atomic64_386_32.S | 164 +
1500 arch/x86/lib/atomic64_cx8_32.S | 98 +-
1501 arch/x86/lib/checksum_32.S | 99 +-
1502 arch/x86/lib/clear_page_64.S | 3 +
1503 arch/x86/lib/cmpxchg16b_emu.S | 3 +
1504 arch/x86/lib/copy_page_64.S | 14 +-
1505 arch/x86/lib/copy_user_64.S | 66 +-
1506 arch/x86/lib/csum-copy_64.S | 14 +-
1507 arch/x86/lib/csum-wrappers_64.c | 8 +-
1508 arch/x86/lib/getuser.S | 74 +-
1509 arch/x86/lib/insn.c | 8 +-
1510 arch/x86/lib/iomap_copy_64.S | 2 +
1511 arch/x86/lib/memcpy_64.S | 6 +
1512 arch/x86/lib/memmove_64.S | 3 +-
1513 arch/x86/lib/memset_64.S | 3 +
1514 arch/x86/lib/mmx_32.c | 243 +-
1515 arch/x86/lib/msr-reg.S | 2 +
1516 arch/x86/lib/putuser.S | 87 +-
1517 arch/x86/lib/rwsem.S | 4 +
1518 arch/x86/lib/usercopy_32.c | 359 +-
1519 arch/x86/lib/usercopy_64.c | 22 +-
1520 arch/x86/math-emu/fpu_aux.c | 2 +-
1521 arch/x86/math-emu/fpu_entry.c | 4 +-
1522 arch/x86/math-emu/fpu_etc.c | 9 +-
1523 arch/x86/math-emu/fpu_system.h | 2 +-
1524 arch/x86/math-emu/fpu_trig.c | 13 +-
1525 arch/x86/math-emu/reg_constant.c | 7 +-
1526 arch/x86/mm/Makefile | 3 +
1527 arch/x86/mm/extable.c | 20 +-
1528 arch/x86/mm/fault.c | 573 +-
1529 arch/x86/mm/gup.c | 6 +-
1530 arch/x86/mm/highmem_32.c | 6 +
1531 arch/x86/mm/hugetlbpage.c | 24 +-
1532 arch/x86/mm/init.c | 19 +-
1533 arch/x86/mm/init_32.c | 157 +-
1534 arch/x86/mm/init_64.c | 100 +-
1535 arch/x86/mm/iomap_32.c | 4 +
1536 arch/x86/mm/ioremap.c | 52 +-
1537 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
1538 arch/x86/mm/mmap.c | 46 +-
1539 arch/x86/mm/mmio-mod.c | 10 +-
1540 arch/x86/mm/mpx.c | 6 +-
1541 arch/x86/mm/numa.c | 2 +-
1542 arch/x86/mm/pageattr.c | 36 +-
1543 arch/x86/mm/pat.c | 12 +-
1544 arch/x86/mm/pat_rbtree.c | 2 +-
1545 arch/x86/mm/pf_in.c | 10 +-
1546 arch/x86/mm/pgtable.c | 211 +-
1547 arch/x86/mm/pgtable_32.c | 3 +
1548 arch/x86/mm/setup_nx.c | 7 +
1549 arch/x86/mm/tlb.c | 4 +
1550 arch/x86/mm/uderef_64.c | 37 +
1551 arch/x86/net/bpf_jit.S | 11 +
1552 arch/x86/net/bpf_jit_comp.c | 13 +-
1553 arch/x86/oprofile/backtrace.c | 6 +-
1554 arch/x86/oprofile/nmi_int.c | 10 +-
1555 arch/x86/oprofile/op_model_amd.c | 8 +-
1556 arch/x86/oprofile/op_model_ppro.c | 7 +-
1557 arch/x86/oprofile/op_x86_model.h | 2 +-
1558 arch/x86/pci/intel_mid_pci.c | 2 +-
1559 arch/x86/pci/irq.c | 8 +-
1560 arch/x86/pci/pcbios.c | 112 +-
1561 arch/x86/pci/vmd.c | 4 +-
1562 arch/x86/platform/efi/efi_32.c | 24 +
1563 arch/x86/platform/efi/efi_64.c | 26 +-
1564 arch/x86/platform/efi/efi_stub_32.S | 64 +-
1565 arch/x86/platform/efi/efi_stub_64.S | 2 +
1566 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
1567 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
1568 arch/x86/platform/intel-mid/mfld.c | 4 +-
1569 arch/x86/platform/intel-mid/mrfl.c | 2 +-
1570 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
1571 arch/x86/platform/olpc/olpc_dt.c | 2 +-
1572 arch/x86/power/cpu.c | 11 +-
1573 arch/x86/realmode/init.c | 10 +-
1574 arch/x86/realmode/rm/header.S | 4 +-
1575 arch/x86/realmode/rm/reboot.S | 4 +
1576 arch/x86/realmode/rm/trampoline_32.S | 12 +-
1577 arch/x86/realmode/rm/trampoline_64.S | 3 +-
1578 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
1579 arch/x86/tools/Makefile | 2 +-
1580 arch/x86/tools/relocs.c | 97 +-
1581 arch/x86/um/mem_32.c | 2 +-
1582 arch/x86/um/tls_32.c | 2 +-
1583 arch/x86/xen/enlighten.c | 52 +-
1584 arch/x86/xen/mmu.c | 31 +-
1585 arch/x86/xen/smp.c | 16 +-
1586 arch/x86/xen/xen-asm_32.S | 2 +-
1587 arch/x86/xen/xen-head.S | 12 +
1588 arch/x86/xen/xen-ops.h | 2 -
1589 block/bio.c | 4 +-
1590 block/blk-cgroup.c | 18 +-
1591 block/blk-map.c | 2 +-
1592 block/blk-softirq.c | 2 +-
1593 block/bsg.c | 12 +-
1594 block/cfq-iosched.c | 4 +-
1595 block/compat_ioctl.c | 4 +-
1596 block/genhd.c | 9 +-
1597 block/partitions/efi.c | 8 +-
1598 block/scsi_ioctl.c | 29 +-
1599 crypto/cast6_generic.c | 6 +-
1600 crypto/cryptd.c | 4 +-
1601 crypto/crypto_user.c | 2 +-
1602 crypto/pcrypt.c | 2 +-
1603 crypto/salsa20_generic.c | 16 +-
1604 crypto/serpent_generic.c | 6 +-
1605 drivers/acpi/ac.c | 2 +-
1606 drivers/acpi/acpi_video.c | 2 +-
1607 drivers/acpi/apei/apei-internal.h | 2 +-
1608 drivers/acpi/apei/ghes.c | 10 +-
1609 drivers/acpi/battery.c | 2 +-
1610 drivers/acpi/bgrt.c | 6 +-
1611 drivers/acpi/blacklist.c | 4 +-
1612 drivers/acpi/bus.c | 4 +-
1613 drivers/acpi/device_pm.c | 4 +-
1614 drivers/acpi/ec.c | 6 +-
1615 drivers/acpi/pci_slot.c | 2 +-
1616 drivers/acpi/processor_idle.c | 2 +-
1617 drivers/acpi/processor_pdc.c | 2 +-
1618 drivers/acpi/sleep.c | 2 +-
1619 drivers/acpi/sysfs.c | 14 +-
1620 drivers/acpi/thermal.c | 2 +-
1621 drivers/acpi/video_detect.c | 7 +-
1622 drivers/android/binder.c | 2 +-
1623 drivers/ata/libata-core.c | 12 +-
1624 drivers/ata/libata-scsi.c | 2 +-
1625 drivers/ata/libata.h | 2 +-
1626 drivers/ata/pata_arasan_cf.c | 4 +-
1627 drivers/atm/adummy.c | 2 +-
1628 drivers/atm/ambassador.c | 8 +-
1629 drivers/atm/atmtcp.c | 14 +-
1630 drivers/atm/eni.c | 10 +-
1631 drivers/atm/firestream.c | 8 +-
1632 drivers/atm/fore200e.c | 14 +-
1633 drivers/atm/he.c | 18 +-
1634 drivers/atm/horizon.c | 4 +-
1635 drivers/atm/idt77252.c | 36 +-
1636 drivers/atm/iphase.c | 34 +-
1637 drivers/atm/lanai.c | 12 +-
1638 drivers/atm/nicstar.c | 46 +-
1639 drivers/atm/solos-pci.c | 4 +-
1640 drivers/atm/suni.c | 4 +-
1641 drivers/atm/uPD98402.c | 16 +-
1642 drivers/atm/zatm.c | 6 +-
1643 drivers/base/bus.c | 4 +-
1644 drivers/base/devres.c | 4 +-
1645 drivers/base/devtmpfs.c | 8 +-
1646 drivers/base/node.c | 2 +-
1647 drivers/base/platform-msi.c | 20 +-
1648 drivers/base/power/domain.c | 6 +-
1649 drivers/base/power/runtime.c | 61 +-
1650 drivers/base/power/sysfs.c | 2 +-
1651 drivers/base/power/wakeup.c | 8 +-
1652 drivers/base/regmap/regmap-debugfs.c | 4 +-
1653 drivers/base/regmap/regmap.c | 4 +-
1654 drivers/base/syscore.c | 4 +-
1655 drivers/block/cciss.c | 28 +-
1656 drivers/block/cciss.h | 2 +-
1657 drivers/block/drbd/drbd_bitmap.c | 2 +-
1658 drivers/block/drbd/drbd_int.h | 8 +-
1659 drivers/block/drbd/drbd_main.c | 12 +-
1660 drivers/block/drbd/drbd_nl.c | 16 +-
1661 drivers/block/drbd/drbd_receiver.c | 38 +-
1662 drivers/block/drbd/drbd_state.c | 12 +-
1663 drivers/block/drbd/drbd_state.h | 2 +-
1664 drivers/block/drbd/drbd_state_change.h | 8 +-
1665 drivers/block/drbd/drbd_worker.c | 14 +-
1666 drivers/block/floppy.c | 8 +-
1667 drivers/block/pktcdvd.c | 4 +-
1668 drivers/block/rbd.c | 2 +-
1669 drivers/bluetooth/btwilink.c | 2 +-
1670 drivers/bus/arm-cci.c | 6 +-
1671 drivers/cdrom/cdrom.c | 11 +-
1672 drivers/cdrom/gdrom.c | 1 -
1673 drivers/char/agp/compat_ioctl.c | 2 +-
1674 drivers/char/agp/frontend.c | 4 +-
1675 drivers/char/agp/intel-gtt.c | 4 +-
1676 drivers/char/hpet.c | 2 +-
1677 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
1678 drivers/char/ipmi/ipmi_poweroff.c | 2 +-
1679 drivers/char/ipmi/ipmi_si_intf.c | 12 +-
1680 drivers/char/ipmi/ipmi_ssif.c | 12 +-
1681 drivers/char/mem.c | 47 +-
1682 drivers/char/nvram.c | 2 +-
1683 drivers/char/pcmcia/synclink_cs.c | 16 +-
1684 drivers/char/random.c | 12 +-
1685 drivers/char/sonypi.c | 11 +-
1686 drivers/char/tpm/tpm-chip.c | 7 +-
1687 drivers/char/tpm/tpm_acpi.c | 3 +-
1688 drivers/char/tpm/tpm_eventlog.c | 5 +-
1689 drivers/char/virtio_console.c | 6 +-
1690 drivers/clk/clk-composite.c | 2 +-
1691 drivers/clk/samsung/clk.h | 2 +-
1692 drivers/clk/socfpga/clk-gate-a10.c | 9 +-
1693 drivers/clk/socfpga/clk-gate.c | 9 +-
1694 drivers/clk/socfpga/clk-pll-a10.c | 9 +-
1695 drivers/clk/socfpga/clk-pll.c | 9 +-
1696 drivers/clk/ti/adpll.c | 2 +-
1697 drivers/clk/ti/clk.c | 8 +-
1698 drivers/cpufreq/acpi-cpufreq.c | 17 +-
1699 drivers/cpufreq/cpufreq-dt.c | 4 +-
1700 drivers/cpufreq/cpufreq.c | 27 +-
1701 drivers/cpufreq/cpufreq_governor.h | 2 +-
1702 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
1703 drivers/cpufreq/intel_pstate.c | 56 +-
1704 drivers/cpufreq/p4-clockmod.c | 12 +-
1705 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
1706 drivers/cpufreq/speedstep-centrino.c | 7 +-
1707 drivers/cpuidle/driver.c | 2 +-
1708 drivers/cpuidle/dt_idle_states.c | 2 +-
1709 drivers/cpuidle/governor.c | 2 +-
1710 drivers/cpuidle/governors/ladder.c | 13 +-
1711 drivers/cpuidle/sysfs.c | 2 +-
1712 drivers/crypto/hifn_795x.c | 4 +-
1713 drivers/crypto/qat/qat_common/adf_aer.c | 2 +-
1714 drivers/crypto/qat/qat_common/adf_sriov.c | 4 +-
1715 drivers/crypto/qat/qat_common/adf_vf_isr.c | 6 +-
1716 drivers/devfreq/devfreq.c | 4 +-
1717 drivers/dma-buf/dma-buf.c | 5 +-
1718 drivers/dma/qcom/hidma_mgmt_sys.c | 2 +-
1719 drivers/dma/sh/shdma-base.c | 4 +-
1720 drivers/dma/sh/shdmac.c | 2 +-
1721 drivers/edac/edac_device.c | 4 +-
1722 drivers/edac/edac_device_sysfs.c | 2 +-
1723 drivers/edac/edac_mc_sysfs.c | 4 +-
1724 drivers/edac/edac_module.c | 2 +-
1725 drivers/edac/edac_pci.c | 4 +-
1726 drivers/edac/edac_pci_sysfs.c | 22 +-
1727 drivers/edac/mce_amd.h | 2 +-
1728 drivers/firewire/core-card.c | 6 +-
1729 drivers/firewire/core-cdev.c | 4 +-
1730 drivers/firewire/core-device.c | 2 +-
1731 drivers/firewire/core-iso.c | 2 +-
1732 drivers/firewire/core-transaction.c | 1 +
1733 drivers/firewire/core.h | 1 +
1734 drivers/firmware/dmi-id.c | 9 +-
1735 drivers/firmware/dmi_scan.c | 12 +-
1736 drivers/firmware/efi/cper.c | 8 +-
1737 drivers/firmware/efi/efi.c | 14 +-
1738 drivers/firmware/efi/efivars.c | 2 +-
1739 drivers/firmware/efi/runtime-map.c | 2 +-
1740 drivers/firmware/google/gsmi.c | 2 +-
1741 drivers/firmware/google/memconsole.c | 7 +-
1742 drivers/firmware/memmap.c | 2 +-
1743 drivers/firmware/psci.c | 2 +-
1744 drivers/gpio/gpio-davinci.c | 6 +-
1745 drivers/gpio/gpio-em.c | 2 +-
1746 drivers/gpio/gpio-ich.c | 2 +-
1747 drivers/gpio/gpio-mpc8xxx.c | 6 +-
1748 drivers/gpio/gpio-omap.c | 4 +-
1749 drivers/gpio/gpio-rcar.c | 2 +-
1750 drivers/gpio/gpio-vr41xx.c | 2 +-
1751 drivers/gpio/gpiolib.c | 12 +-
1752 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 4 +-
1753 drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 2 +-
1754 drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 8 +-
1755 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
1756 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
1757 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
1758 drivers/gpu/drm/amd/amdgpu/fiji_smc.c | 4 +-
1759 drivers/gpu/drm/amd/amdgpu/iceland_smc.c | 4 +-
1760 drivers/gpu/drm/amd/amdgpu/tonga_smc.c | 4 +-
1761 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
1762 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
1763 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
1764 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
1765 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
1766 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
1767 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
1768 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
1769 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
1770 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
1771 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
1772 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
1773 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
1774 drivers/gpu/drm/armada/armada_drv.c | 3 +-
1775 drivers/gpu/drm/ast/ast_mode.c | 2 +-
1776 drivers/gpu/drm/bochs/bochs_kms.c | 2 +-
1777 drivers/gpu/drm/drm_crtc.c | 2 +-
1778 drivers/gpu/drm/drm_drv.c | 2 +-
1779 drivers/gpu/drm/drm_fops.c | 19 +-
1780 drivers/gpu/drm/drm_global.c | 14 +-
1781 drivers/gpu/drm/drm_info.c | 13 +-
1782 drivers/gpu/drm/drm_ioc32.c | 13 +-
1783 drivers/gpu/drm/drm_ioctl.c | 2 +-
1784 drivers/gpu/drm/drm_pci.c | 9 +-
1785 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
1786 drivers/gpu/drm/exynos/exynos_drm_g2d.c | 5 +
1787 drivers/gpu/drm/gma500/cdv_intel_crt.c | 2 +-
1788 drivers/gpu/drm/gma500/cdv_intel_dp.c | 2 +-
1789 drivers/gpu/drm/gma500/cdv_intel_hdmi.c | 2 +-
1790 drivers/gpu/drm/gma500/cdv_intel_lvds.c | 2 +-
1791 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 3 +
1792 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 2 +-
1793 drivers/gpu/drm/gma500/oaktrail_hdmi.c | 2 +-
1794 drivers/gpu/drm/gma500/psb_drv.c | 1 -
1795 drivers/gpu/drm/gma500/psb_intel_drv.h | 2 +-
1796 drivers/gpu/drm/gma500/psb_intel_lvds.c | 2 +-
1797 drivers/gpu/drm/gma500/psb_intel_sdvo.c | 2 +-
1798 drivers/gpu/drm/i2c/tda998x_drv.c | 2 +-
1799 drivers/gpu/drm/i810/i810_dma.c | 2 +-
1800 drivers/gpu/drm/i810/i810_drv.c | 6 +-
1801 drivers/gpu/drm/i810/i810_drv.h | 6 +-
1802 drivers/gpu/drm/i915/dvo.h | 2 +-
1803 drivers/gpu/drm/i915/i915_dma.c | 4 +-
1804 drivers/gpu/drm/i915/i915_drv.c | 7 +-
1805 drivers/gpu/drm/i915/i915_drv.h | 2 +-
1806 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
1807 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
1808 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
1809 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
1810 drivers/gpu/drm/i915/i915_irq.c | 88 +-
1811 drivers/gpu/drm/i915/intel_display.c | 30 +-
1812 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
1813 drivers/gpu/drm/mga/mga_drv.c | 5 +-
1814 drivers/gpu/drm/mga/mga_drv.h | 6 +-
1815 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
1816 drivers/gpu/drm/mga/mga_irq.c | 8 +-
1817 drivers/gpu/drm/mga/mga_state.c | 2 +-
1818 drivers/gpu/drm/mgag200/mgag200_mode.c | 2 +-
1819 drivers/gpu/drm/nouveau/nouveau_acpi.c | 2 +-
1820 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
1821 drivers/gpu/drm/nouveau/nouveau_connector.c | 2 +-
1822 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
1823 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
1824 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
1825 drivers/gpu/drm/nouveau/nouveau_usif.c | 7 +-
1826 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
1827 drivers/gpu/drm/nouveau/nvkm/subdev/bios/shadow.c | 7 +-
1828 .../gpu/drm/nouveau/nvkm/subdev/bios/shadowpci.c | 7 +-
1829 drivers/gpu/drm/nouveau/nvkm/subdev/secboot/priv.h | 4 +-
1830 drivers/gpu/drm/omapdrm/dss/display.c | 8 +-
1831 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
1832 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
1833 drivers/gpu/drm/qxl/qxl_display.c | 2 +-
1834 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
1835 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
1836 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
1837 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
1838 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
1839 drivers/gpu/drm/r128/r128_cce.c | 2 +-
1840 drivers/gpu/drm/r128/r128_drv.c | 4 +-
1841 drivers/gpu/drm/r128/r128_drv.h | 6 +-
1842 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
1843 drivers/gpu/drm/r128/r128_irq.c | 4 +-
1844 drivers/gpu/drm/r128/r128_state.c | 6 +-
1845 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
1846 drivers/gpu/drm/radeon/radeon_atpx_handler.c | 2 +-
1847 drivers/gpu/drm/radeon/radeon_connectors.c | 10 +-
1848 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
1849 drivers/gpu/drm/radeon/radeon_drv.c | 11 +-
1850 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
1851 drivers/gpu/drm/radeon/radeon_kms.c | 8 +-
1852 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
1853 drivers/gpu/drm/savage/savage_bci.c | 2 +-
1854 drivers/gpu/drm/savage/savage_drv.c | 5 +-
1855 drivers/gpu/drm/savage/savage_drv.h | 2 +-
1856 drivers/gpu/drm/sis/sis_drv.c | 5 +-
1857 drivers/gpu/drm/sis/sis_drv.h | 2 +-
1858 drivers/gpu/drm/sis/sis_mm.c | 2 +-
1859 drivers/gpu/drm/tegra/dc.c | 2 +-
1860 drivers/gpu/drm/tegra/dsi.c | 2 +-
1861 drivers/gpu/drm/tegra/hdmi.c | 2 +-
1862 drivers/gpu/drm/tegra/sor.c | 7 +-
1863 drivers/gpu/drm/tilcdc/Makefile | 6 +-
1864 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
1865 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
1866 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
1867 drivers/gpu/drm/udl/udl_connector.c | 2 +-
1868 drivers/gpu/drm/udl/udl_fb.c | 1 -
1869 drivers/gpu/drm/vc4/vc4_drv.c | 8 +-
1870 drivers/gpu/drm/via/via_dma.c | 2 +-
1871 drivers/gpu/drm/via/via_drv.c | 5 +-
1872 drivers/gpu/drm/via/via_drv.h | 6 +-
1873 drivers/gpu/drm/via/via_irq.c | 18 +-
1874 drivers/gpu/drm/virtio/virtgpu_display.c | 2 +-
1875 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
1876 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
1877 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
1878 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
1879 drivers/gpu/vga/vga_switcheroo.c | 4 +-
1880 drivers/hid/hid-core.c | 4 +-
1881 drivers/hid/hid-magicmouse.c | 2 +-
1882 drivers/hid/hid-sensor-custom.c | 2 +-
1883 drivers/hv/channel.c | 6 +-
1884 drivers/hv/hv.c | 22 +-
1885 drivers/hv/hv_balloon.c | 18 +-
1886 drivers/hv/hyperv_vmbus.h | 2 +-
1887 drivers/hwmon/acpi_power_meter.c | 6 +-
1888 drivers/hwmon/applesmc.c | 4 +-
1889 drivers/hwmon/asus_atk0110.c | 10 +-
1890 drivers/hwmon/coretemp.c | 2 +-
1891 drivers/hwmon/dell-smm-hwmon.c | 4 +-
1892 drivers/hwmon/ibmaem.c | 2 +-
1893 drivers/hwmon/iio_hwmon.c | 2 +-
1894 drivers/hwmon/nct6683.c | 6 +-
1895 drivers/hwmon/nct6775.c | 6 +-
1896 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
1897 drivers/hwmon/sht15.c | 12 +-
1898 drivers/hwmon/via-cputemp.c | 2 +-
1899 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
1900 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
1901 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
1902 drivers/i2c/i2c-dev.c | 2 +-
1903 drivers/ide/ide-cd.c | 2 +-
1904 drivers/ide/ide-disk.c | 2 +-
1905 drivers/ide/ide.c | 4 +-
1906 drivers/idle/intel_idle.c | 6 +-
1907 drivers/iio/industrialio-core.c | 2 +-
1908 drivers/iio/magnetometer/ak8975.c | 2 +-
1909 drivers/infiniband/core/cm.c | 46 +-
1910 drivers/infiniband/core/fmr_pool.c | 20 +-
1911 drivers/infiniband/core/netlink.c | 5 +-
1912 drivers/infiniband/core/ucm.c | 4 +-
1913 drivers/infiniband/core/uverbs_cmd.c | 3 +
1914 drivers/infiniband/hw/cxgb4/device.c | 6 +-
1915 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
1916 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
1917 drivers/infiniband/hw/i40iw/i40iw_user.h | 2 +-
1918 drivers/infiniband/hw/mlx4/mad.c | 2 +-
1919 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
1920 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
1921 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
1922 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
1923 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
1924 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
1925 drivers/infiniband/hw/nes/nes.c | 4 +-
1926 drivers/infiniband/hw/nes/nes.h | 40 +-
1927 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
1928 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
1929 drivers/infiniband/hw/nes/nes_nic.c | 42 +-
1930 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
1931 drivers/infiniband/hw/qib/qib_iba7322.c | 4 +-
1932 drivers/infiniband/hw/qib/qib_pcie.c | 2 +-
1933 drivers/infiniband/ulp/ipoib/ipoib_main.c | 2 +-
1934 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
1935 drivers/infiniband/ulp/srpt/ib_srpt.c | 8 +-
1936 drivers/input/evdev.c | 2 +-
1937 drivers/input/gameport/gameport.c | 4 +-
1938 drivers/input/input.c | 4 +-
1939 drivers/input/joystick/sidewinder.c | 1 +
1940 drivers/input/misc/ims-pcu.c | 4 +-
1941 drivers/input/mouse/psmouse.h | 2 +-
1942 drivers/input/mousedev.c | 2 +-
1943 drivers/input/serio/serio.c | 4 +-
1944 drivers/input/serio/serio_raw.c | 4 +-
1945 drivers/input/touchscreen/htcpen.c | 2 +-
1946 drivers/iommu/arm-smmu-v3.c | 2 +-
1947 drivers/iommu/arm-smmu.c | 42 +-
1948 drivers/iommu/io-pgtable-arm-v7s.c | 62 +-
1949 drivers/iommu/io-pgtable-arm.c | 99 +-
1950 drivers/iommu/io-pgtable.c | 11 +-
1951 drivers/iommu/io-pgtable.h | 21 +-
1952 drivers/iommu/iommu.c | 2 +-
1953 drivers/iommu/ipmmu-vmsa.c | 13 +-
1954 drivers/iommu/irq_remapping.c | 2 +-
1955 drivers/iommu/mtk_iommu.c | 16 +-
1956 drivers/irqchip/irq-gic.c | 2 +-
1957 drivers/irqchip/irq-i8259.c | 2 +-
1958 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
1959 drivers/irqchip/irq-ts4800.c | 2 +-
1960 drivers/isdn/capi/capi.c | 10 +-
1961 drivers/isdn/gigaset/interface.c | 8 +-
1962 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
1963 drivers/isdn/hardware/avm/b1.c | 4 +-
1964 drivers/isdn/hardware/eicon/capifunc.c | 6 +-
1965 drivers/isdn/hardware/eicon/dadapter.c | 18 +-
1966 drivers/isdn/hardware/eicon/diddfunc.c | 7 +-
1967 drivers/isdn/hardware/eicon/divasfunc.c | 9 +-
1968 drivers/isdn/hardware/eicon/divasync.h | 2 +-
1969 drivers/isdn/hardware/eicon/idifunc.c | 9 +-
1970 drivers/isdn/hardware/eicon/mntfunc.c | 13 +-
1971 drivers/isdn/hardware/mISDN/avmfritz.c | 2 +-
1972 drivers/isdn/hardware/mISDN/hfcmulti.c | 7 +-
1973 drivers/isdn/hardware/mISDN/hfcpci.c | 16 +-
1974 drivers/isdn/hardware/mISDN/mISDNinfineon.c | 7 +-
1975 drivers/isdn/hardware/mISDN/mISDNipac.c | 5 +-
1976 drivers/isdn/hardware/mISDN/netjet.c | 2 +-
1977 drivers/isdn/hardware/mISDN/speedfax.c | 7 +-
1978 drivers/isdn/hardware/mISDN/w6692.c | 7 +-
1979 drivers/isdn/hisax/amd7930_fn.c | 5 +-
1980 drivers/isdn/hisax/arcofi.c | 5 +-
1981 drivers/isdn/hisax/diva.c | 7 +-
1982 drivers/isdn/hisax/elsa.c | 9 +-
1983 drivers/isdn/hisax/fsm.c | 5 +-
1984 drivers/isdn/hisax/hfc4s8s_l1.c | 14 +-
1985 drivers/isdn/hisax/hfc_2bds0.c | 4 +-
1986 drivers/isdn/hisax/hfc_pci.c | 10 +-
1987 drivers/isdn/hisax/hfc_sx.c | 10 +-
1988 drivers/isdn/hisax/hfc_usb.c | 12 +-
1989 drivers/isdn/hisax/hfcscard.c | 6 +-
1990 drivers/isdn/hisax/icc.c | 5 +-
1991 drivers/isdn/hisax/ipacx.c | 7 +-
1992 drivers/isdn/hisax/isac.c | 5 +-
1993 drivers/isdn/hisax/isar.c | 5 +-
1994 drivers/isdn/hisax/isdnl3.c | 5 +-
1995 drivers/isdn/hisax/saphir.c | 5 +-
1996 drivers/isdn/hisax/teleint.c | 5 +-
1997 drivers/isdn/hisax/w6692.c | 5 +-
1998 drivers/isdn/i4l/isdn_common.c | 2 +
1999 drivers/isdn/i4l/isdn_tty.c | 22 +-
2000 drivers/isdn/mISDN/dsp.h | 4 +-
2001 drivers/isdn/mISDN/dsp_cmx.c | 4 +-
2002 drivers/isdn/mISDN/dsp_core.c | 4 +-
2003 drivers/isdn/mISDN/dsp_tones.c | 4 +-
2004 drivers/isdn/mISDN/fsm.c | 5 +-
2005 drivers/isdn/mISDN/l1oip_core.c | 8 +-
2006 drivers/leds/leds-clevo-mail.c | 2 +-
2007 drivers/leds/leds-ss4200.c | 2 +-
2008 drivers/lguest/core.c | 9 +-
2009 drivers/lguest/page_tables.c | 2 +-
2010 drivers/lguest/x86/core.c | 12 +-
2011 drivers/lguest/x86/switcher_32.S | 27 +-
2012 drivers/lightnvm/rrpc.c | 4 +-
2013 drivers/lightnvm/rrpc.h | 2 +-
2014 drivers/md/bcache/alloc.c | 2 +-
2015 drivers/md/bcache/bcache.h | 10 +-
2016 drivers/md/bcache/btree.c | 13 +-
2017 drivers/md/bcache/closure.c | 4 +-
2018 drivers/md/bcache/closure.h | 10 +-
2019 drivers/md/bcache/io.c | 10 +-
2020 drivers/md/bcache/journal.c | 18 +-
2021 drivers/md/bcache/movinggc.c | 12 +-
2022 drivers/md/bcache/request.c | 54 +-
2023 drivers/md/bcache/request.h | 2 +-
2024 drivers/md/bcache/stats.c | 26 +-
2025 drivers/md/bcache/stats.h | 16 +-
2026 drivers/md/bcache/super.c | 32 +-
2027 drivers/md/bcache/sysfs.c | 20 +-
2028 drivers/md/bcache/writeback.c | 12 +-
2029 drivers/md/bitmap.c | 2 +-
2030 drivers/md/dm-cache-target.c | 116 +-
2031 drivers/md/dm-ioctl.c | 2 +-
2032 drivers/md/dm-raid.c | 2 +-
2033 drivers/md/dm-raid1.c | 18 +-
2034 drivers/md/dm-stats.c | 6 +-
2035 drivers/md/dm-stripe.c | 10 +-
2036 drivers/md/dm-table.c | 2 +-
2037 drivers/md/dm-thin-metadata.c | 4 +-
2038 drivers/md/dm.c | 28 +-
2039 drivers/md/md.c | 41 +-
2040 drivers/md/md.h | 8 +-
2041 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
2042 drivers/md/persistent-data/dm-space-map.h | 1 +
2043 drivers/md/raid1.c | 8 +-
2044 drivers/md/raid10.c | 20 +-
2045 drivers/md/raid5.c | 26 +-
2046 drivers/media/dvb-core/dvb_net.c | 2 +-
2047 drivers/media/dvb-core/dvbdev.c | 2 +-
2048 drivers/media/dvb-frontends/af9033.h | 2 +-
2049 drivers/media/dvb-frontends/cx24116.c | 2 +-
2050 drivers/media/dvb-frontends/cx24117.c | 2 +-
2051 drivers/media/dvb-frontends/cx24120.c | 2 +-
2052 drivers/media/dvb-frontends/cx24123.c | 2 +-
2053 drivers/media/dvb-frontends/cxd2820r_core.c | 2 +-
2054 drivers/media/dvb-frontends/dib3000.h | 2 +-
2055 drivers/media/dvb-frontends/dib7000p.h | 2 +-
2056 drivers/media/dvb-frontends/dib8000.h | 2 +-
2057 drivers/media/dvb-frontends/hd29l2.c | 2 +-
2058 drivers/media/dvb-frontends/lgdt3306a.c | 2 +-
2059 drivers/media/dvb-frontends/mt312.c | 6 +-
2060 drivers/media/dvb-frontends/s921.c | 2 +-
2061 drivers/media/pci/bt8xx/dst.c | 2 +-
2062 drivers/media/pci/cx88/cx88-video.c | 6 +-
2063 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
2064 drivers/media/pci/pt1/va1j5jf8007s.c | 2 +-
2065 drivers/media/pci/pt1/va1j5jf8007t.c | 2 +-
2066 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
2067 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
2068 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
2069 drivers/media/pci/sta2x11/sta2x11_vip.c | 5 +-
2070 drivers/media/pci/tw68/tw68-core.c | 2 +-
2071 drivers/media/pci/zoran/zoran.h | 1 -
2072 drivers/media/pci/zoran/zoran_card.c | 4 +-
2073 drivers/media/pci/zoran/zoran_driver.c | 3 -
2074 drivers/media/platform/am437x/am437x-vpfe.c | 2 +-
2075 drivers/media/platform/omap/omap_vout.c | 11 +-
2076 drivers/media/platform/s5p-tv/mixer.h | 2 +-
2077 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
2078 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
2079 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
2080 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
2081 drivers/media/platform/soc_camera/soc_camera.c | 2 +-
2082 drivers/media/radio/radio-cadet.c | 2 +
2083 drivers/media/radio/radio-maxiradio.c | 2 +-
2084 drivers/media/radio/radio-shark.c | 2 +-
2085 drivers/media/radio/radio-shark2.c | 2 +-
2086 drivers/media/radio/radio-si476x.c | 2 +-
2087 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
2088 drivers/media/usb/pvrusb2/pvrusb2-context.c | 8 +-
2089 drivers/media/usb/pvrusb2/pvrusb2-dvb.c | 7 +-
2090 drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 2 +-
2091 drivers/media/usb/pvrusb2/pvrusb2-std.c | 2 +-
2092 drivers/media/usb/pvrusb2/pvrusb2-v4l2.c | 6 +-
2093 drivers/media/usb/uvc/uvc_driver.c | 4 +-
2094 drivers/media/v4l2-core/v4l2-common.c | 2 +-
2095 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
2096 drivers/media/v4l2-core/v4l2-device.c | 4 +-
2097 drivers/media/v4l2-core/v4l2-ioctl.c | 287 +-
2098 drivers/memory/omap-gpmc.c | 21 +-
2099 drivers/message/fusion/mptbase.c | 4 +-
2100 drivers/message/fusion/mptlan.c | 2 +-
2101 drivers/message/fusion/mptsas.c | 34 +-
2102 drivers/mfd/ab8500-debugfs.c | 2 +-
2103 drivers/mfd/kempld-core.c | 2 +-
2104 drivers/mfd/max8925-i2c.c | 2 +-
2105 drivers/mfd/tps65910.c | 2 +-
2106 drivers/mfd/twl4030-irq.c | 9 +-
2107 drivers/misc/c2port/core.c | 4 +-
2108 drivers/misc/kgdbts.c | 6 +-
2109 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
2110 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
2111 drivers/misc/mic/scif/scif_api.c | 10 +-
2112 drivers/misc/mic/scif/scif_rb.c | 8 +-
2113 drivers/misc/panel.c | 4 +-
2114 drivers/misc/sgi-gru/gruhandles.c | 4 +-
2115 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
2116 drivers/misc/sgi-gru/grutables.h | 158 +-
2117 drivers/misc/sgi-xp/xp.h | 2 +-
2118 drivers/misc/sgi-xp/xp_main.c | 57 +-
2119 drivers/misc/sgi-xp/xpc.h | 3 +-
2120 drivers/misc/sgi-xp/xpc_main.c | 2 +-
2121 drivers/misc/sgi-xp/xpnet.c | 2 +-
2122 drivers/misc/ti-st/st_kim.c | 32 +-
2123 drivers/mmc/card/mmc_test.c | 4 +-
2124 drivers/mmc/host/dw_mmc.h | 2 +-
2125 drivers/mmc/host/mmci.c | 4 +-
2126 drivers/mmc/host/omap_hsmmc.c | 4 +-
2127 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
2128 drivers/mmc/host/sdhci-s3c.c | 8 +-
2129 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
2130 drivers/mtd/devices/block2mtd.c | 2 +-
2131 drivers/mtd/devices/phram.c | 2 +-
2132 drivers/mtd/maps/gpio-addr-flash.c | 2 +-
2133 drivers/mtd/maps/latch-addr-flash.c | 2 +-
2134 drivers/mtd/maps/pci.c | 4 +-
2135 drivers/mtd/maps/pcmciamtd.c | 8 +-
2136 drivers/mtd/maps/sbc_gxx.c | 2 +-
2137 drivers/mtd/nand/brcmnand/brcmnand.h | 2 +-
2138 drivers/mtd/nand/cafe_nand.c | 18 +-
2139 drivers/mtd/nand/denali.c | 1 +
2140 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
2141 drivers/mtd/nftlmount.c | 1 +
2142 drivers/mtd/sm_ftl.c | 2 +-
2143 drivers/mtd/ubi/build.c | 2 +-
2144 drivers/net/bonding/bond_netlink.c | 2 +-
2145 drivers/net/caif/caif_hsi.c | 4 +-
2146 drivers/net/caif/caif_serial.c | 2 +-
2147 drivers/net/caif/caif_spi.c | 2 +-
2148 drivers/net/caif/caif_virtio.c | 2 +-
2149 drivers/net/can/Kconfig | 2 +-
2150 drivers/net/can/bfin_can.c | 2 +-
2151 drivers/net/can/dev.c | 2 +-
2152 drivers/net/can/flexcan.c | 2 +-
2153 drivers/net/can/janz-ican3.c | 2 +-
2154 drivers/net/can/led.c | 2 +-
2155 drivers/net/can/sun4i_can.c | 2 +-
2156 drivers/net/can/vcan.c | 2 +-
2157 drivers/net/can/xilinx_can.c | 2 +-
2158 drivers/net/dummy.c | 2 +-
2159 drivers/net/ethernet/8390/ax88796.c | 6 +-
2160 drivers/net/ethernet/8390/axnet_cs.c | 4 +-
2161 drivers/net/ethernet/8390/ne2k-pci.c | 6 +-
2162 drivers/net/ethernet/8390/pcnet_cs.c | 4 +-
2163 drivers/net/ethernet/adi/bfin_mac.c | 2 +-
2164 drivers/net/ethernet/allwinner/sun4i-emac.c | 2 +-
2165 drivers/net/ethernet/altera/altera_tse_main.c | 6 +-
2166 drivers/net/ethernet/amd/7990.c | 2 +-
2167 drivers/net/ethernet/amd/7990.h | 2 +-
2168 drivers/net/ethernet/amd/amd8111e.c | 5 +-
2169 drivers/net/ethernet/amd/atarilance.c | 4 +-
2170 drivers/net/ethernet/amd/declance.c | 2 +-
2171 drivers/net/ethernet/amd/pcnet32.c | 7 +-
2172 drivers/net/ethernet/amd/sun3lance.c | 4 +-
2173 drivers/net/ethernet/amd/sunlance.c | 2 +-
2174 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
2175 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
2176 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
2177 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 145 +-
2178 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 68 +-
2179 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
2180 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
2181 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
2182 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
2183 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
2184 drivers/net/ethernet/apm/xgene/xgene_enet_main.c | 4 +-
2185 drivers/net/ethernet/arc/emac_main.c | 2 +-
2186 drivers/net/ethernet/atheros/alx/main.c | 2 +-
2187 drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 2 +-
2188 drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 2 +-
2189 drivers/net/ethernet/aurora/nb8800.c | 2 +-
2190 drivers/net/ethernet/broadcom/bcm63xx_enet.c | 2 +-
2191 drivers/net/ethernet/broadcom/bnx2.c | 2 +-
2192 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
2193 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.c | 216 +-
2194 drivers/net/ethernet/broadcom/bnx2x/bnx2x_link.h | 4 +-
2195 drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 2 +-
2196 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
2197 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
2198 drivers/net/ethernet/broadcom/tg3.c | 2 +-
2199 drivers/net/ethernet/broadcom/tg3.h | 1 +
2200 drivers/net/ethernet/brocade/bna/bfa_cs.h | 42 +-
2201 drivers/net/ethernet/brocade/bna/bfa_ioc.c | 10 +-
2202 drivers/net/ethernet/brocade/bna/bfa_ioc.h | 4 +-
2203 drivers/net/ethernet/brocade/bna/bfa_msgq.h | 8 +-
2204 drivers/net/ethernet/brocade/bna/bna_enet.c | 6 +-
2205 drivers/net/ethernet/brocade/bna/bna_tx_rx.c | 6 +-
2206 drivers/net/ethernet/brocade/bna/bna_types.h | 24 +-
2207 drivers/net/ethernet/brocade/bna/bnad.c | 11 +-
2208 drivers/net/ethernet/cadence/macb.c | 4 +-
2209 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
2210 drivers/net/ethernet/cavium/liquidio/lio_main.c | 15 +-
2211 drivers/net/ethernet/chelsio/cxgb3/cxgb3_main.c | 2 +-
2212 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
2213 drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c | 2 +-
2214 drivers/net/ethernet/chelsio/cxgb4vf/adapter.h | 2 +-
2215 drivers/net/ethernet/chelsio/cxgb4vf/sge.c | 2 +-
2216 drivers/net/ethernet/davicom/dm9000.c | 2 +-
2217 drivers/net/ethernet/dec/tulip/de4x5.c | 13 +-
2218 drivers/net/ethernet/emulex/benet/be_main.c | 4 +-
2219 drivers/net/ethernet/faraday/ftgmac100.c | 4 +-
2220 drivers/net/ethernet/faraday/ftmac100.c | 4 +-
2221 drivers/net/ethernet/freescale/fec_mpc52xx.c | 2 +-
2222 .../net/ethernet/freescale/fs_enet/fs_enet-main.c | 2 +-
2223 drivers/net/ethernet/freescale/gianfar.c | 4 +-
2224 drivers/net/ethernet/freescale/ucc_geth.c | 2 +-
2225 drivers/net/ethernet/hisilicon/hip04_eth.c | 2 +-
2226 drivers/net/ethernet/hisilicon/hix5hd2_gmac.c | 2 +-
2227 drivers/net/ethernet/hisilicon/hns/hns_ae_adapt.c | 6 +-
2228 drivers/net/ethernet/i825xx/lib82596.c | 4 +-
2229 drivers/net/ethernet/ibm/ehea/ehea_main.c | 2 +-
2230 drivers/net/ethernet/ibm/emac/core.c | 4 +-
2231 drivers/net/ethernet/intel/e100.c | 2 +-
2232 drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +-
2233 drivers/net/ethernet/intel/e1000e/netdev.c | 2 +-
2234 drivers/net/ethernet/intel/fm10k/fm10k_pci.c | 2 +-
2235 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
2236 drivers/net/ethernet/intel/igb/igb_main.c | 2 +-
2237 drivers/net/ethernet/intel/igbvf/netdev.c | 2 +-
2238 drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 2 +-
2239 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
2240 drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 4 +-
2241 drivers/net/ethernet/marvell/pxa168_eth.c | 2 +-
2242 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
2243 drivers/net/ethernet/mellanox/mlx4/main.c | 2 +-
2244 drivers/net/ethernet/mellanox/mlx5/core/main.c | 2 +-
2245 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
2246 drivers/net/ethernet/micrel/ks8695net.c | 2 +-
2247 drivers/net/ethernet/micrel/ks8851_mll.c | 2 +-
2248 drivers/net/ethernet/moxa/moxart_ether.c | 2 +-
2249 drivers/net/ethernet/neterion/s2io.c | 2 +-
2250 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
2251 drivers/net/ethernet/neterion/vxge/vxge-main.c | 2 +-
2252 .../net/ethernet/netronome/nfp/nfp_net_common.c | 2 +-
2253 drivers/net/ethernet/netx-eth.c | 2 +-
2254 drivers/net/ethernet/nuvoton/w90p910_ether.c | 2 +-
2255 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
2256 drivers/net/ethernet/nxp/lpc_eth.c | 2 +-
2257 .../net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c | 4 +-
2258 .../net/ethernet/qlogic/netxen/netxen_nic_main.c | 2 +-
2259 drivers/net/ethernet/qlogic/qed/qed_mcp.c | 6 +-
2260 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
2261 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
2262 drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 2 +-
2263 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
2264 drivers/net/ethernet/realtek/r8169.c | 8 +-
2265 drivers/net/ethernet/renesas/sh_eth.c | 2 +-
2266 drivers/net/ethernet/rocker/rocker_main.c | 4 +-
2267 drivers/net/ethernet/seeq/sgiseeq.c | 2 +-
2268 drivers/net/ethernet/sfc/ptp.c | 2 +-
2269 drivers/net/ethernet/sfc/selftest.c | 20 +-
2270 drivers/net/ethernet/sgi/ioc3-eth.c | 4 +-
2271 drivers/net/ethernet/smsc/smc911x.c | 2 +-
2272 drivers/net/ethernet/smsc/smc91x.c | 2 +-
2273 drivers/net/ethernet/smsc/smsc911x.c | 2 +-
2274 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
2275 drivers/net/ethernet/sun/sunbmac.c | 2 +-
2276 drivers/net/ethernet/sun/sunqe.c | 2 +-
2277 drivers/net/ethernet/sun/sunvnet.c | 2 +-
2278 drivers/net/ethernet/sun/sunvnet_common.c | 6 +-
2279 drivers/net/ethernet/synopsys/dwc_eth_qos.c | 2 +-
2280 drivers/net/ethernet/ti/cpmac.c | 2 +-
2281 drivers/net/ethernet/ti/netcp_core.c | 2 +-
2282 drivers/net/ethernet/via/via-rhine.c | 2 +-
2283 drivers/net/ethernet/wiznet/w5100.c | 2 +-
2284 drivers/net/ethernet/wiznet/w5300.c | 2 +-
2285 drivers/net/ethernet/xilinx/ll_temac_main.c | 2 +-
2286 drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 2 +-
2287 drivers/net/geneve.c | 2 +-
2288 drivers/net/hamradio/baycom_epp.c | 2 +-
2289 drivers/net/hyperv/hyperv_net.h | 2 +-
2290 drivers/net/hyperv/netvsc_drv.c | 2 +-
2291 drivers/net/hyperv/rndis_filter.c | 7 +-
2292 drivers/net/ifb.c | 2 +-
2293 drivers/net/ipvlan/ipvlan_core.c | 2 +-
2294 drivers/net/ipvlan/ipvlan_main.c | 6 +-
2295 drivers/net/irda/sh_irda.c | 2 +-
2296 drivers/net/irda/vlsi_ir.c | 18 +-
2297 drivers/net/irda/vlsi_ir.h | 14 +-
2298 drivers/net/loopback.c | 2 +-
2299 drivers/net/macsec.c | 2 +-
2300 drivers/net/macvlan.c | 20 +-
2301 drivers/net/macvtap.c | 10 +-
2302 drivers/net/nlmon.c | 2 +-
2303 drivers/net/phy/phy_device.c | 6 +-
2304 drivers/net/plip/plip.c | 2 +-
2305 drivers/net/ppp/ppp_generic.c | 4 +-
2306 drivers/net/ppp/pptp.c | 2 +-
2307 drivers/net/rionet.c | 2 +-
2308 drivers/net/slip/slhc.c | 2 +-
2309 drivers/net/team/team.c | 4 +-
2310 drivers/net/tun.c | 7 +-
2311 drivers/net/usb/hso.c | 28 +-
2312 drivers/net/usb/ipheth.c | 2 +-
2313 drivers/net/usb/r8152.c | 2 +-
2314 drivers/net/usb/sierra_net.c | 4 +-
2315 drivers/net/virtio_net.c | 2 +-
2316 drivers/net/vrf.c | 4 +-
2317 drivers/net/vxlan.c | 4 +-
2318 drivers/net/wimax/i2400m/rx.c | 2 +-
2319 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
2320 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
2321 drivers/net/wireless/ath/ath6kl/core.h | 2 +-
2322 drivers/net/wireless/ath/ath6kl/txrx.c | 2 +-
2323 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
2324 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
2325 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
2326 drivers/net/wireless/ath/ath9k/main.c | 22 +-
2327 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
2328 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
2329 drivers/net/wireless/ath/carl9170/main.c | 10 +-
2330 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
2331 drivers/net/wireless/ath/wil6210/pcie_bus.c | 2 +-
2332 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
2333 drivers/net/wireless/atmel/at76c50x-usb.c | 2 +-
2334 drivers/net/wireless/atmel/atmel.c | 183 +-
2335 drivers/net/wireless/broadcom/b43/phy_lp.c | 2 +-
2336 drivers/net/wireless/broadcom/b43legacy/main.c | 5 +-
2337 .../broadcom/brcm80211/brcmfmac/cfg80211.c | 55 +-
2338 .../broadcom/brcm80211/brcmsmac/phy/phy_cmn.c | 3 +-
2339 .../broadcom/brcm80211/brcmsmac/phy_shim.c | 5 +-
2340 .../broadcom/brcm80211/brcmsmac/phy_shim.h | 2 +-
2341 drivers/net/wireless/cisco/airo.c | 201 +-
2342 drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +-
2343 drivers/net/wireless/intel/ipw2x00/ipw2200.c | 6 +-
2344 drivers/net/wireless/intel/iwlegacy/3945-mac.c | 11 +-
2345 drivers/net/wireless/intel/iwlegacy/4965-mac.c | 7 +-
2346 drivers/net/wireless/intel/iwlwifi/dvm/debugfs.c | 34 +-
2347 drivers/net/wireless/intel/iwlwifi/dvm/lib.c | 4 +-
2348 drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 8 +-
2349 drivers/net/wireless/intel/iwlwifi/mvm/tx.c | 4 +-
2350 drivers/net/wireless/intel/iwlwifi/pcie/trans.c | 4 +-
2351 .../net/wireless/intersil/hostap/hostap_ioctl.c | 134 +-
2352 drivers/net/wireless/intersil/orinoco/wext.c | 131 +-
2353 drivers/net/wireless/intersil/prism54/isl_ioctl.c | 292 +-
2354 drivers/net/wireless/mac80211_hwsim.c | 28 +-
2355 drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 2 +-
2356 drivers/net/wireless/marvell/mwifiex/main.c | 2 +-
2357 drivers/net/wireless/marvell/mwifiex/pcie.c | 4 +-
2358 drivers/net/wireless/marvell/mwifiex/sdio.c | 10 +-
2359 drivers/net/wireless/ralink/rt2x00/rt2400pci.c | 4 +-
2360 drivers/net/wireless/ralink/rt2x00/rt2500pci.c | 4 +-
2361 drivers/net/wireless/ralink/rt2x00/rt2500usb.c | 4 +-
2362 drivers/net/wireless/ralink/rt2x00/rt2800lib.c | 6 +-
2363 drivers/net/wireless/ralink/rt2x00/rt2x00.h | 2 +-
2364 drivers/net/wireless/ralink/rt2x00/rt2x00queue.c | 4 +-
2365 drivers/net/wireless/ralink/rt2x00/rt61pci.c | 4 +-
2366 drivers/net/wireless/ralink/rt2x00/rt73usb.c | 4 +-
2367 drivers/net/wireless/realtek/rtlwifi/base.c | 14 +-
2368 drivers/net/wireless/realtek/rtlwifi/base.h | 4 +-
2369 drivers/net/wireless/realtek/rtlwifi/pci.c | 15 +-
2370 drivers/net/wireless/realtek/rtlwifi/ps.c | 6 +-
2371 drivers/net/wireless/realtek/rtlwifi/ps.h | 6 +-
2372 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
2373 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
2374 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
2375 drivers/net/wireless/zydas/zd1201.c | 192 +-
2376 drivers/net/xen-netback/interface.c | 2 +-
2377 drivers/net/xen-netfront.c | 2 +-
2378 drivers/nvme/host/pci.c | 2 +-
2379 drivers/of/fdt.c | 4 +-
2380 drivers/oprofile/buffer_sync.c | 8 +-
2381 drivers/oprofile/event_buffer.c | 2 +-
2382 drivers/oprofile/oprof.c | 2 +-
2383 drivers/oprofile/oprofile_stats.c | 10 +-
2384 drivers/oprofile/oprofile_stats.h | 10 +-
2385 drivers/oprofile/oprofilefs.c | 6 +-
2386 drivers/oprofile/timer_int.c | 2 +-
2387 drivers/parport/procfs.c | 4 +-
2388 drivers/pci/host/pci-host-common.h | 2 +-
2389 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
2390 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
2391 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
2392 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
2393 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
2394 drivers/pci/hotplug/pciehp_core.c | 2 +-
2395 drivers/pci/msi.c | 22 +-
2396 drivers/pci/pci-sysfs.c | 6 +-
2397 drivers/pci/pci.h | 4 +-
2398 drivers/pci/pcie/aspm.c | 10 +-
2399 drivers/pci/pcie/portdrv_pci.c | 2 +-
2400 drivers/pci/probe.c | 2 +-
2401 drivers/pci/setup-bus.c | 10 +-
2402 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
2403 drivers/pinctrl/pinctrl-at91.c | 5 +-
2404 drivers/platform/chrome/chromeos_laptop.c | 2 +-
2405 drivers/platform/chrome/chromeos_pstore.c | 2 +-
2406 drivers/platform/chrome/cros_ec_lpc.c | 2 +-
2407 drivers/platform/x86/alienware-wmi.c | 4 +-
2408 drivers/platform/x86/apple-gmux.c | 2 +-
2409 drivers/platform/x86/compal-laptop.c | 2 +-
2410 drivers/platform/x86/hdaps.c | 2 +-
2411 drivers/platform/x86/ibm_rtl.c | 2 +-
2412 drivers/platform/x86/intel_oaktrail.c | 2 +-
2413 drivers/platform/x86/msi-laptop.c | 16 +-
2414 drivers/platform/x86/msi-wmi.c | 2 +-
2415 drivers/platform/x86/samsung-laptop.c | 2 +-
2416 drivers/platform/x86/samsung-q10.c | 2 +-
2417 drivers/platform/x86/sony-laptop.c | 14 +-
2418 drivers/platform/x86/thinkpad_acpi.c | 10 +-
2419 drivers/pnp/pnpbios/bioscalls.c | 14 +-
2420 drivers/pnp/pnpbios/core.c | 2 +-
2421 drivers/power/pda_power.c | 7 +-
2422 drivers/power/power_supply.h | 4 +-
2423 drivers/power/power_supply_core.c | 7 +-
2424 drivers/power/power_supply_sysfs.c | 6 +-
2425 drivers/power/reset/at91-reset.c | 5 +-
2426 drivers/powercap/powercap_sys.c | 136 +-
2427 drivers/ptp/ptp_private.h | 2 +-
2428 drivers/ptp/ptp_sysfs.c | 2 +-
2429 drivers/regulator/core.c | 4 +-
2430 drivers/regulator/max8660.c | 6 +-
2431 drivers/regulator/max8973-regulator.c | 16 +-
2432 drivers/regulator/mc13892-regulator.c | 8 +-
2433 drivers/remoteproc/remoteproc_core.c | 26 +-
2434 drivers/rtc/rtc-armada38x.c | 7 +-
2435 drivers/rtc/rtc-cmos.c | 4 +-
2436 drivers/rtc/rtc-ds1307.c | 2 +-
2437 drivers/rtc/rtc-m48t59.c | 4 +-
2438 drivers/rtc/rtc-rv8803.c | 15 +-
2439 drivers/rtc/rtc-rx8010.c | 8 +-
2440 drivers/rtc/rtc-test.c | 6 +-
2441 drivers/scsi/aacraid/aachba.c | 7 +-
2442 drivers/scsi/aic7xxx/aic79xx.h | 2 +-
2443 drivers/scsi/aic7xxx/aic79xx_core.c | 11 +-
2444 drivers/scsi/be2iscsi/be_main.c | 2 +-
2445 drivers/scsi/bfa/bfa.h | 4 +-
2446 drivers/scsi/bfa/bfa_core.c | 4 +-
2447 drivers/scsi/bfa/bfa_cs.h | 124 +-
2448 drivers/scsi/bfa/bfa_fcpim.h | 14 +-
2449 drivers/scsi/bfa/bfa_fcs.h | 34 +-
2450 drivers/scsi/bfa/bfa_fcs_fcpim.c | 6 +-
2451 drivers/scsi/bfa/bfa_fcs_lport.c | 4 +-
2452 drivers/scsi/bfa/bfa_fcs_rport.c | 4 +-
2453 drivers/scsi/bfa/bfa_ioc.c | 8 +-
2454 drivers/scsi/bfa/bfa_ioc.h | 16 +-
2455 drivers/scsi/bfa/bfa_svc.c | 12 +-
2456 drivers/scsi/bfa/bfa_svc.h | 20 +-
2457 drivers/scsi/bfa/bfad.c | 12 +-
2458 drivers/scsi/bfa/bfad_bsg.c | 8 +-
2459 drivers/scsi/bfa/bfad_drv.h | 5 +-
2460 drivers/scsi/csiostor/csio_defs.h | 19 +-
2461 drivers/scsi/csiostor/csio_hw.c | 67 +-
2462 drivers/scsi/csiostor/csio_init.c | 2 +-
2463 drivers/scsi/csiostor/csio_lnode.c | 32 +-
2464 drivers/scsi/csiostor/csio_rnode.c | 28 +-
2465 drivers/scsi/csiostor/csio_scsi.c | 37 +-
2466 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
2467 drivers/scsi/fcoe/fcoe_transport.c | 16 +-
2468 drivers/scsi/hpsa.c | 38 +-
2469 drivers/scsi/hpsa.h | 2 +-
2470 drivers/scsi/hptiop.c | 2 -
2471 drivers/scsi/hptiop.h | 1 -
2472 drivers/scsi/ipr.c | 32 +-
2473 drivers/scsi/ipr.h | 2 +-
2474 drivers/scsi/libfc/fc_exch.c | 50 +-
2475 drivers/scsi/libsas/sas_ata.c | 2 +-
2476 drivers/scsi/lpfc/lpfc.h | 8 +-
2477 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
2478 drivers/scsi/lpfc/lpfc_init.c | 8 +-
2479 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
2480 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
2481 drivers/scsi/mpt3sas/mpt3sas_base.c | 2 +-
2482 drivers/scsi/mpt3sas/mpt3sas_scsih.c | 4 +-
2483 drivers/scsi/pmcraid.c | 46 +-
2484 drivers/scsi/pmcraid.h | 8 +-
2485 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
2486 drivers/scsi/qla2xxx/qla_gbl.h | 8 +-
2487 drivers/scsi/qla2xxx/qla_os.c | 15 +-
2488 drivers/scsi/qla2xxx/qla_target.c | 16 +-
2489 drivers/scsi/qla2xxx/qla_target.h | 2 +-
2490 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
2491 drivers/scsi/qla4xxx/ql4_os.c | 15 +-
2492 drivers/scsi/scsi.c | 2 +-
2493 drivers/scsi/scsi_lib.c | 8 +-
2494 drivers/scsi/scsi_sysfs.c | 2 +-
2495 drivers/scsi/scsi_transport_fc.c | 8 +-
2496 drivers/scsi/scsi_transport_iscsi.c | 6 +-
2497 drivers/scsi/scsi_transport_spi.c | 2 +-
2498 drivers/scsi/scsi_transport_srp.c | 8 +-
2499 drivers/scsi/sd.c | 6 +-
2500 drivers/scsi/sg.c | 2 +-
2501 drivers/scsi/sr.c | 21 +-
2502 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
2503 drivers/spi/spi.c | 2 +-
2504 drivers/staging/android/timed_output.c | 6 +-
2505 drivers/staging/comedi/comedi_fops.c | 8 +-
2506 drivers/staging/fbtft/fbtft-core.c | 2 +-
2507 drivers/staging/fbtft/fbtft.h | 2 +-
2508 drivers/staging/gdm724x/gdm_lte.c | 2 +-
2509 drivers/staging/gdm724x/gdm_tty.c | 2 +-
2510 drivers/staging/i4l/icn/icn.c | 2 +-
2511 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
2512 drivers/staging/iio/adc/ad7280a.c | 4 +-
2513 .../staging/lustre/lnet/klnds/socklnd/socklnd.h | 6 +-
2514 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
2515 drivers/staging/lustre/lnet/selftest/framework.c | 2 -
2516 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
2517 drivers/staging/lustre/lnet/selftest/selftest.h | 2 -
2518 .../lustre/lustre/include/lustre/lustre_idl.h | 82 +-
2519 drivers/staging/lustre/lustre/include/lustre_dlm.h | 8 +-
2520 drivers/staging/lustre/lustre/include/lustre_net.h | 2 +-
2521 drivers/staging/lustre/lustre/include/obd.h | 2 +-
2522 drivers/staging/lustre/lustre/ldlm/ldlm_request.c | 5 +-
2523 drivers/staging/lustre/lustre/llite/dir.c | 2 +-
2524 drivers/staging/lustre/lustre/lov/lov_io.c | 62 +-
2525 drivers/staging/lustre/lustre/obdclass/llog_swab.c | 24 +-
2526 drivers/staging/lustre/lustre/osc/osc_request.c | 24 +-
2527 drivers/staging/lustre/lustre/ptlrpc/layout.c | 7 +-
2528 .../staging/lustre/lustre/ptlrpc/pack_generic.c | 136 +-
2529 drivers/staging/rdma/hfi1/pcie.c | 2 +-
2530 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 18 +-
2531 drivers/staging/rtl8188eu/hal/rtl8188eu_recv.c | 2 +-
2532 drivers/staging/rtl8188eu/hal/rtl8188eu_xmit.c | 2 +-
2533 drivers/staging/rtl8188eu/include/Hal8188EPhyCfg.h | 8 -
2534 drivers/staging/rtl8188eu/include/hal_intf.h | 5 +-
2535 drivers/staging/rtl8188eu/include/odm_precomp.h | 2 +-
2536 drivers/staging/rtl8188eu/include/recv_osdep.h | 1 -
2537 drivers/staging/rtl8188eu/include/rtl8188e_recv.h | 2 +-
2538 drivers/staging/rtl8188eu/include/rtl8188e_xmit.h | 2 +-
2539 drivers/staging/rtl8188eu/include/rtw_cmd.h | 1 -
2540 drivers/staging/rtl8188eu/include/rtw_eeprom.h | 6 -
2541 drivers/staging/rtl8188eu/include/rtw_ioctl.h | 9 -
2542 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 12 +-
2543 drivers/staging/rtl8188eu/include/xmit_osdep.h | 2 +-
2544 drivers/staging/rtl8188eu/os_dep/usb_ops_linux.c | 4 +-
2545 drivers/staging/rtl8188eu/os_dep/xmit_linux.c | 2 +-
2546 drivers/staging/rtl8192e/rtl8192e/rtl_core.c | 49 +-
2547 drivers/staging/rtl8192e/rtl8192e/rtl_core.h | 4 +-
2548 drivers/staging/rtl8192e/rtl8192e/rtl_dm.c | 10 +-
2549 drivers/staging/rtl8192e/rtl8192e/rtl_dm.h | 4 +-
2550 drivers/staging/rtl8192e/rtl8192e/rtl_ps.c | 6 +-
2551 drivers/staging/rtl8192e/rtl8192e/rtl_ps.h | 3 +-
2552 drivers/staging/rtl8192e/rtl8192e/rtl_wx.c | 48 +-
2553 drivers/staging/rtl8192e/rtllib.h | 4 +-
2554 drivers/staging/rtl8192e/rtllib_softmac.c | 32 +-
2555 drivers/staging/rtl8192e/rtllib_softmac_wx.c | 2 +-
2556 drivers/staging/rtl8192e/rtllib_tx.c | 2 +-
2557 drivers/staging/rtl8192u/ieee80211/ieee80211.h | 2 +-
2558 .../staging/rtl8192u/ieee80211/ieee80211_softmac.c | 6 +-
2559 drivers/staging/rtl8192u/ieee80211/ieee80211_tx.c | 2 +-
2560 drivers/staging/rtl8192u/r8192U_core.c | 7 +-
2561 drivers/staging/rtl8712/rtl8712_recv.c | 6 +-
2562 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
2563 drivers/staging/rtl8712/rtl871x_ioctl.h | 14 -
2564 drivers/staging/rtl8712/rtl871x_xmit.c | 2 +-
2565 drivers/staging/rtl8712/rtl871x_xmit.h | 2 +-
2566 drivers/staging/rtl8712/usb_ops_linux.c | 4 +-
2567 drivers/staging/rtl8712/xmit_linux.c | 2 +-
2568 drivers/staging/rtl8712/xmit_osdep.h | 2 +-
2569 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 +-
2570 drivers/staging/rtl8723au/core/rtw_xmit.c | 2 +-
2571 drivers/staging/rtl8723au/hal/rtl8723au_recv.c | 2 +-
2572 drivers/staging/rtl8723au/hal/usb_ops_linux.c | 4 +-
2573 drivers/staging/rtl8723au/include/Hal8723APhyCfg.h | 8 -
2574 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
2575 drivers/staging/rtl8723au/include/hal_intf.h | 2 -
2576 drivers/staging/rtl8723au/include/recv_osdep.h | 1 -
2577 drivers/staging/rtl8723au/include/rtw_ap.h | 2 -
2578 drivers/staging/rtl8723au/include/rtw_cmd.h | 1 -
2579 drivers/staging/rtl8723au/include/rtw_eeprom.h | 7 -
2580 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 14 +-
2581 drivers/staging/rtl8723au/include/usb_ops.h | 8 +-
2582 drivers/staging/rtl8723au/include/xmit_osdep.h | 2 +-
2583 drivers/staging/rtl8723au/os_dep/ioctl_cfg80211.c | 2 +-
2584 drivers/staging/rtl8723au/os_dep/xmit_linux.c | 2 +-
2585 drivers/staging/sm750fb/sm750.c | 14 +-
2586 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
2587 drivers/staging/unisys/visornic/visornic_main.c | 2 +-
2588 drivers/staging/vt6655/rxtx.c | 2 +-
2589 drivers/staging/vt6656/rxtx.c | 2 +-
2590 drivers/staging/wilc1000/linux_wlan.c | 2 +-
2591 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
2592 drivers/staging/wlan-ng/p80211netdev.c | 2 +-
2593 drivers/target/sbp/sbp_target.c | 4 +-
2594 drivers/thermal/cpu_cooling.c | 9 +-
2595 drivers/thermal/devfreq_cooling.c | 19 +-
2596 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
2597 drivers/thermal/of-thermal.c | 17 +-
2598 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
2599 drivers/tty/cyclades.c | 6 +-
2600 drivers/tty/hvc/hvc_console.c | 14 +-
2601 drivers/tty/hvc/hvcs.c | 21 +-
2602 drivers/tty/hvc/hvsi.c | 22 +-
2603 drivers/tty/hvc/hvsi_lib.c | 4 +-
2604 drivers/tty/ipwireless/tty.c | 27 +-
2605 drivers/tty/moxa.c | 2 +-
2606 drivers/tty/n_gsm.c | 6 +-
2607 drivers/tty/n_tty.c | 28 +-
2608 drivers/tty/pty.c | 4 +-
2609 drivers/tty/rocket.c | 6 +-
2610 drivers/tty/serial/8250/8250_core.c | 10 +-
2611 drivers/tty/serial/8250/8250_pci.c | 2 +-
2612 drivers/tty/serial/ifx6x60.c | 2 +-
2613 drivers/tty/serial/ioc4_serial.c | 6 +-
2614 drivers/tty/serial/jsm/jsm_driver.c | 2 +-
2615 drivers/tty/serial/kgdb_nmi.c | 4 +-
2616 drivers/tty/serial/kgdboc.c | 34 +-
2617 drivers/tty/serial/msm_serial.c | 4 +-
2618 drivers/tty/serial/samsung.c | 9 +-
2619 drivers/tty/serial/serial_core.c | 8 +-
2620 drivers/tty/synclink.c | 34 +-
2621 drivers/tty/synclink_gt.c | 28 +-
2622 drivers/tty/synclinkmp.c | 34 +-
2623 drivers/tty/tty_io.c | 2 +-
2624 drivers/tty/tty_ldisc.c | 8 +-
2625 drivers/tty/tty_port.c | 22 +-
2626 drivers/uio/uio.c | 13 +-
2627 drivers/usb/atm/cxacru.c | 2 +-
2628 drivers/usb/atm/usbatm.c | 24 +-
2629 drivers/usb/class/cdc-acm.h | 2 +-
2630 drivers/usb/core/devices.c | 6 +-
2631 drivers/usb/core/devio.c | 12 +-
2632 drivers/usb/core/hcd.c | 4 +-
2633 drivers/usb/core/sysfs.c | 2 +-
2634 drivers/usb/core/usb.c | 2 +-
2635 drivers/usb/early/ehci-dbgp.c | 16 +-
2636 drivers/usb/gadget/function/f_phonet.c | 2 +-
2637 drivers/usb/gadget/function/u_serial.c | 22 +-
2638 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
2639 drivers/usb/host/ehci-hcd.c | 2 +-
2640 drivers/usb/host/ehci-hub.c | 4 +-
2641 drivers/usb/host/ehci-q.c | 4 +-
2642 drivers/usb/host/fotg210-hcd.c | 2 +-
2643 drivers/usb/host/hwa-hc.c | 2 +-
2644 drivers/usb/host/ohci-hcd.c | 2 +-
2645 drivers/usb/host/r8a66597.h | 2 +-
2646 drivers/usb/host/uhci-hcd.c | 2 +-
2647 drivers/usb/host/xhci-pci.c | 2 +-
2648 drivers/usb/host/xhci-ring.c | 52 +-
2649 drivers/usb/host/xhci.c | 2 +-
2650 drivers/usb/misc/appledisplay.c | 4 +-
2651 drivers/usb/misc/sisusbvga/sisusb_con.c | 98 +-
2652 drivers/usb/serial/console.c | 8 +-
2653 drivers/usb/storage/transport.c | 2 +-
2654 drivers/usb/storage/usb.c | 2 +-
2655 drivers/usb/storage/usb.h | 2 +-
2656 drivers/usb/usbip/vhci.h | 2 +-
2657 drivers/usb/usbip/vhci_hcd.c | 6 +-
2658 drivers/usb/usbip/vhci_rx.c | 2 +-
2659 drivers/usb/wusbcore/wa-hc.h | 4 +-
2660 drivers/usb/wusbcore/wa-xfer.c | 2 +-
2661 drivers/vfio/pci/vfio_pci.c | 2 +-
2662 drivers/vhost/vringh.c | 20 +-
2663 drivers/video/backlight/kb3886_bl.c | 2 +-
2664 drivers/video/console/dummycon.c | 96 +-
2665 drivers/video/console/fbcon.c | 2 +-
2666 drivers/video/console/vgacon.c | 23 +-
2667 drivers/video/fbdev/aty/aty128fb.c | 2 +-
2668 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
2669 drivers/video/fbdev/aty/mach64_ct.c | 5 +-
2670 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
2671 drivers/video/fbdev/aty/mach64_gx.c | 17 +-
2672 drivers/video/fbdev/core/fb_defio.c | 8 +-
2673 drivers/video/fbdev/core/fbmem.c | 12 +-
2674 drivers/video/fbdev/hyperv_fb.c | 4 +-
2675 drivers/video/fbdev/i810/i810_accel.c | 1 +
2676 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
2677 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
2678 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
2679 drivers/video/fbdev/omap2/omapfb/dss/display.c | 8 +-
2680 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
2681 drivers/video/fbdev/sis/sis_main.h | 2 +-
2682 drivers/video/fbdev/smscufx.c | 4 +-
2683 drivers/video/fbdev/udlfb.c | 36 +-
2684 drivers/video/fbdev/uvesafb.c | 52 +-
2685 drivers/video/fbdev/vesafb.c | 58 +-
2686 drivers/video/fbdev/via/via_clock.h | 2 +-
2687 drivers/xen/events/events_base.c | 6 +-
2688 drivers/xen/xen-pciback/pci_stub.c | 2 +-
2689 fs/9p/vfs_addr.c | 2 +-
2690 fs/9p/vfs_inode_dotl.c | 4 +-
2691 fs/Kconfig.binfmt | 2 +-
2692 fs/afs/file.c | 8 +-
2693 fs/afs/inode.c | 4 +-
2694 fs/afs/internal.h | 4 +-
2695 fs/aio.c | 2 +-
2696 fs/autofs4/waitq.c | 2 +-
2697 fs/befs/endian.h | 6 +-
2698 fs/binfmt_aout.c | 23 +-
2699 fs/binfmt_elf.c | 670 +-
2700 fs/binfmt_elf_fdpic.c | 4 +-
2701 fs/block_dev.c | 2 +-
2702 fs/btrfs/ctree.c | 11 +-
2703 fs/btrfs/ctree.h | 4 +-
2704 fs/btrfs/delayed-inode.c | 6 +-
2705 fs/btrfs/delayed-inode.h | 4 +-
2706 fs/btrfs/delayed-ref.c | 4 +-
2707 fs/btrfs/disk-io.c | 4 +-
2708 fs/btrfs/extent_map.c | 8 +-
2709 fs/btrfs/file.c | 4 +-
2710 fs/btrfs/free-space-cache.h | 1 +
2711 fs/btrfs/raid56.c | 30 +-
2712 fs/btrfs/super.c | 2 +-
2713 fs/btrfs/sysfs.c | 2 +-
2714 fs/btrfs/tests/btrfs-tests.c | 2 +-
2715 fs/btrfs/tests/free-space-tests.c | 2 +-
2716 fs/btrfs/transaction.c | 2 +-
2717 fs/btrfs/tree-log.c | 8 +-
2718 fs/btrfs/tree-log.h | 2 +-
2719 fs/btrfs/volumes.c | 14 +-
2720 fs/btrfs/volumes.h | 22 +-
2721 fs/buffer.c | 2 +-
2722 fs/cachefiles/bind.c | 6 +-
2723 fs/cachefiles/daemon.c | 12 +-
2724 fs/cachefiles/internal.h | 16 +-
2725 fs/cachefiles/namei.c | 6 +-
2726 fs/cachefiles/proc.c | 12 +-
2727 fs/ceph/dir.c | 12 +-
2728 fs/ceph/super.c | 4 +-
2729 fs/cifs/cifs_debug.c | 12 +-
2730 fs/cifs/cifsfs.c | 8 +-
2731 fs/cifs/cifsglob.h | 54 +-
2732 fs/cifs/file.c | 14 +-
2733 fs/cifs/misc.c | 4 +-
2734 fs/cifs/smb1ops.c | 80 +-
2735 fs/cifs/smb2ops.c | 84 +-
2736 fs/cifs/smb2pdu.c | 3 +-
2737 fs/coda/cache.c | 10 +-
2738 fs/coda/dir.c | 5 +-
2739 fs/compat.c | 9 +-
2740 fs/compat_binfmt_elf.c | 2 +
2741 fs/compat_ioctl.c | 12 +-
2742 fs/configfs/dir.c | 10 +-
2743 fs/coredump.c | 18 +-
2744 fs/dcache.c | 64 +-
2745 fs/ecryptfs/inode.c | 2 +-
2746 fs/ecryptfs/miscdev.c | 2 +-
2747 fs/exec.c | 370 +-
2748 fs/exofs/inode.c | 7 +-
2749 fs/ext2/xattr.c | 5 +-
2750 fs/ext4/ext4.h | 20 +-
2751 fs/ext4/mballoc.c | 44 +-
2752 fs/ext4/resize.c | 16 +-
2753 fs/ext4/super.c | 2 +-
2754 fs/ext4/sysfs.c | 2 +-
2755 fs/ext4/xattr.c | 5 +-
2756 fs/fhandle.c | 5 +-
2757 fs/file.c | 18 +-
2758 fs/freevxfs/vxfs_inode.c | 8 +-
2759 fs/freevxfs/vxfs_inode.h | 4 +-
2760 fs/fs-writeback.c | 11 +-
2761 fs/fs_struct.c | 8 +-
2762 fs/fscache/cookie.c | 40 +-
2763 fs/fscache/internal.h | 202 +-
2764 fs/fscache/object.c | 26 +-
2765 fs/fscache/operation.c | 38 +-
2766 fs/fscache/page.c | 110 +-
2767 fs/fscache/stats.c | 348 +-
2768 fs/fuse/cuse.c | 10 +-
2769 fs/fuse/dev.c | 4 +-
2770 fs/fuse/file.c | 4 +-
2771 fs/fuse/inode.c | 4 +-
2772 fs/gfs2/aops.c | 2 +-
2773 fs/gfs2/file.c | 2 +-
2774 fs/gfs2/glock.c | 22 +-
2775 fs/gfs2/glops.c | 4 +-
2776 fs/gfs2/quota.c | 6 +-
2777 fs/hugetlbfs/inode.c | 13 +-
2778 fs/inode.c | 4 +-
2779 fs/jbd2/commit.c | 2 +-
2780 fs/jbd2/transaction.c | 4 +-
2781 fs/jffs2/erase.c | 3 +-
2782 fs/jffs2/file.c | 5 +-
2783 fs/jffs2/fs.c | 2 +-
2784 fs/jffs2/os-linux.h | 2 +-
2785 fs/jffs2/wbuf.c | 3 +-
2786 fs/jfs/super.c | 2 +-
2787 fs/kernfs/dir.c | 2 +-
2788 fs/kernfs/file.c | 20 +-
2789 fs/libfs.c | 10 +-
2790 fs/lockd/clnt4xdr.c | 46 +-
2791 fs/lockd/clntproc.c | 4 +-
2792 fs/lockd/clntxdr.c | 44 +-
2793 fs/lockd/mon.c | 24 +-
2794 fs/lockd/svc.c | 2 +-
2795 fs/lockd/svc4proc.c | 69 +-
2796 fs/lockd/svcproc.c | 75 +-
2797 fs/lockd/xdr.c | 44 +-
2798 fs/lockd/xdr4.c | 41 +-
2799 fs/logfs/dev_bdev.c | 13 +-
2800 fs/logfs/dev_mtd.c | 13 +-
2801 fs/logfs/dir.c | 4 +-
2802 fs/logfs/logfs.h | 5 +-
2803 fs/logfs/readwrite.c | 2 +-
2804 fs/logfs/segment.c | 2 +-
2805 fs/logfs/super.c | 39 -
2806 fs/namei.c | 14 +-
2807 fs/namespace.c | 15 +-
2808 fs/nfs/callback.h | 18 +-
2809 fs/nfs/callback_proc.c | 26 +-
2810 fs/nfs/callback_xdr.c | 73 +-
2811 fs/nfs/dir.c | 5 +-
2812 fs/nfs/inode.c | 6 +-
2813 fs/nfs/internal.h | 5 +-
2814 fs/nfs/mount_clnt.c | 26 +-
2815 fs/nfs/nfs2xdr.c | 101 +-
2816 fs/nfs/nfs3xdr.c | 201 +-
2817 fs/nfs/nfs42xdr.c | 60 +-
2818 fs/nfs/nfs4xdr.c | 507 +-
2819 fs/nfs/read.c | 2 +-
2820 fs/nfs/symlink.c | 6 +-
2821 fs/nfsd/current_stateid.h | 24 +-
2822 fs/nfsd/nfs2acl.c | 85 +-
2823 fs/nfsd/nfs3acl.c | 44 +-
2824 fs/nfsd/nfs3proc.c | 271 +-
2825 fs/nfsd/nfs3xdr.c | 171 +-
2826 fs/nfsd/nfs4callback.c | 31 +-
2827 fs/nfsd/nfs4proc.c | 320 +-
2828 fs/nfsd/nfs4state.c | 111 +-
2829 fs/nfsd/nfs4xdr.c | 564 +-
2830 fs/nfsd/nfscache.c | 11 +-
2831 fs/nfsd/nfsproc.c | 193 +-
2832 fs/nfsd/nfsxdr.c | 96 +-
2833 fs/nfsd/vfs.c | 6 +-
2834 fs/nfsd/xdr.h | 50 +-
2835 fs/nfsd/xdr3.h | 100 +-
2836 fs/nfsd/xdr4.h | 50 +-
2837 fs/nls/nls_base.c | 26 +-
2838 fs/nls/nls_cp932.c | 2 +-
2839 fs/nls/nls_cp936.c | 2 +-
2840 fs/nls/nls_cp949.c | 2 +-
2841 fs/nls/nls_cp950.c | 2 +-
2842 fs/nls/nls_euc-jp.c | 8 +-
2843 fs/nls/nls_koi8-ru.c | 8 +-
2844 fs/notify/fanotify/fanotify_user.c | 4 +-
2845 fs/notify/notification.c | 4 +-
2846 fs/ntfs/dir.c | 4 +-
2847 fs/ntfs/inode.c | 19 +-
2848 fs/ntfs/inode.h | 4 +-
2849 fs/ntfs/mft.c | 4 +-
2850 fs/ntfs/super.c | 8 +-
2851 fs/ocfs2/dlm/dlmcommon.h | 4 +-
2852 fs/ocfs2/dlm/dlmdebug.c | 10 +-
2853 fs/ocfs2/dlm/dlmdomain.c | 4 +-
2854 fs/ocfs2/dlm/dlmmaster.c | 4 +-
2855 fs/ocfs2/dlmfs/dlmfs.c | 4 +-
2856 fs/ocfs2/filecheck.c | 2 +-
2857 fs/ocfs2/localalloc.c | 2 +-
2858 fs/ocfs2/ocfs2.h | 10 +-
2859 fs/ocfs2/suballoc.c | 12 +-
2860 fs/ocfs2/super.c | 20 +-
2861 fs/overlayfs/copy_up.c | 2 +-
2862 fs/pipe.c | 72 +-
2863 fs/posix_acl.c | 4 +-
2864 fs/proc/array.c | 20 +
2865 fs/proc/base.c | 7 +-
2866 fs/proc/kcore.c | 36 +-
2867 fs/proc/meminfo.c | 2 +-
2868 fs/proc/nommu.c | 2 +-
2869 fs/proc/proc_net.c | 2 +-
2870 fs/proc/proc_sysctl.c | 26 +-
2871 fs/proc/task_mmu.c | 39 +-
2872 fs/proc/task_nommu.c | 6 +-
2873 fs/proc/vmcore.c | 16 +-
2874 fs/qnx6/qnx6.h | 4 +-
2875 fs/quota/netlink.c | 4 +-
2876 fs/read_write.c | 34 +-
2877 fs/readdir.c | 3 +-
2878 fs/reiserfs/do_balan.c | 2 +-
2879 fs/reiserfs/procfs.c | 2 +-
2880 fs/reiserfs/reiserfs.h | 4 +-
2881 fs/select.c | 2 +-
2882 fs/seq_file.c | 4 +-
2883 fs/splice.c | 43 +-
2884 fs/squashfs/xattr.c | 10 +-
2885 fs/super.c | 3 +-
2886 fs/sysv/sysv.h | 2 +-
2887 fs/tracefs/inode.c | 8 +-
2888 fs/ubifs/find.c | 34 +-
2889 fs/ubifs/lprops.c | 5 +-
2890 fs/udf/misc.c | 2 +-
2891 fs/ufs/swab.h | 4 +-
2892 fs/userfaultfd.c | 2 +-
2893 fs/xattr.c | 21 +
2894 fs/xfs/libxfs/xfs_bmap.c | 2 +-
2895 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
2896 fs/xfs/xfs_dir2_readdir.c | 7 +-
2897 fs/xfs/xfs_ioctl.c | 2 +-
2898 fs/xfs/xfs_linux.h | 4 +-
2899 include/acpi/ghes.h | 2 +-
2900 include/asm-generic/4level-fixup.h | 2 +
2901 include/asm-generic/atomic-long.h | 186 +-
2902 include/asm-generic/atomic64.h | 12 +
2903 include/asm-generic/bitops/__fls.h | 2 +-
2904 include/asm-generic/bitops/fls.h | 2 +-
2905 include/asm-generic/bitops/fls64.h | 4 +-
2906 include/asm-generic/bug.h | 6 +-
2907 include/asm-generic/cache.h | 4 +-
2908 include/asm-generic/emergency-restart.h | 2 +-
2909 include/asm-generic/kmap_types.h | 4 +-
2910 include/asm-generic/local.h | 13 +
2911 include/asm-generic/pgtable-nopmd.h | 18 +-
2912 include/asm-generic/pgtable-nopud.h | 15 +-
2913 include/asm-generic/pgtable.h | 16 +
2914 include/asm-generic/sections.h | 1 +
2915 include/asm-generic/uaccess.h | 16 +
2916 include/asm-generic/vmlinux.lds.h | 15 +-
2917 include/crypto/algapi.h | 2 +-
2918 include/crypto/cast6.h | 4 +-
2919 include/crypto/serpent.h | 4 +-
2920 include/crypto/xts.h | 2 +-
2921 include/drm/drmP.h | 19 +-
2922 include/drm/drm_mm.h | 2 +-
2923 include/drm/drm_modeset_helper_vtables.h | 2 +-
2924 include/drm/i915_pciids.h | 2 +-
2925 include/drm/intel-gtt.h | 4 +-
2926 include/drm/ttm/ttm_memory.h | 2 +-
2927 include/drm/ttm/ttm_page_alloc.h | 1 +
2928 include/keys/asymmetric-subtype.h | 2 +-
2929 include/keys/encrypted-type.h | 2 +-
2930 include/keys/rxrpc-type.h | 2 +-
2931 include/keys/user-type.h | 2 +-
2932 include/linux/atmdev.h | 4 +-
2933 include/linux/atomic.h | 12 +-
2934 include/linux/audit.h | 2 +-
2935 include/linux/average.h | 2 +-
2936 include/linux/binfmts.h | 3 +-
2937 include/linux/bitmap.h | 2 +-
2938 include/linux/bitops.h | 8 +-
2939 include/linux/blk-cgroup.h | 24 +-
2940 include/linux/blkdev.h | 2 +-
2941 include/linux/blktrace_api.h | 2 +-
2942 include/linux/cache.h | 9 +
2943 include/linux/cdrom.h | 1 -
2944 include/linux/cgroup-defs.h | 2 +-
2945 include/linux/cleancache.h | 2 +-
2946 include/linux/clk-provider.h | 1 +
2947 include/linux/compat.h | 15 +-
2948 include/linux/compiler-gcc.h | 33 +-
2949 include/linux/compiler.h | 197 +-
2950 include/linux/configfs.h | 2 +-
2951 include/linux/cpufreq.h | 7 +-
2952 include/linux/cpuidle.h | 5 +-
2953 include/linux/cpumask.h | 14 +-
2954 include/linux/crypto.h | 4 +-
2955 include/linux/ctype.h | 2 +-
2956 include/linux/dcache.h | 4 +-
2957 include/linux/decompress/mm.h | 2 +-
2958 include/linux/devfreq.h | 2 +-
2959 include/linux/device.h | 7 +-
2960 include/linux/dma-mapping.h | 2 +-
2961 include/linux/efi.h | 1 +
2962 include/linux/elf.h | 2 +
2963 include/linux/err.h | 4 +-
2964 include/linux/extcon.h | 2 +-
2965 include/linux/fb.h | 3 +-
2966 include/linux/fdtable.h | 2 +-
2967 include/linux/firewire.h | 2 +-
2968 include/linux/fs.h | 5 +-
2969 include/linux/fs_struct.h | 2 +-
2970 include/linux/fscache-cache.h | 2 +-
2971 include/linux/fscache.h | 2 +-
2972 include/linux/fsnotify.h | 2 +-
2973 include/linux/genhd.h | 4 +-
2974 include/linux/genl_magic_func.h | 2 +-
2975 include/linux/genl_magic_struct.h | 4 +-
2976 include/linux/gfp.h | 14 +-
2977 include/linux/highmem.h | 12 +
2978 include/linux/hugetlb.h | 2 +-
2979 include/linux/hugetlb_cgroup.h | 11 +
2980 include/linux/hwmon-sysfs.h | 6 +-
2981 include/linux/i2c.h | 1 +
2982 include/linux/if_pppox.h | 2 +-
2983 include/linux/init.h | 10 +-
2984 include/linux/init_task.h | 7 +
2985 include/linux/interrupt.h | 6 +-
2986 include/linux/iommu.h | 2 +-
2987 include/linux/ioport.h | 2 +-
2988 include/linux/ipc.h | 2 +-
2989 include/linux/irq.h | 5 +-
2990 include/linux/irqdesc.h | 2 +-
2991 include/linux/irqdomain.h | 3 +
2992 include/linux/jbd2.h | 2 +-
2993 include/linux/jiffies.h | 16 +-
2994 include/linux/kallsyms.h | 18 +-
2995 include/linux/key-type.h | 2 +-
2996 include/linux/kgdb.h | 6 +-
2997 include/linux/kmemleak.h | 4 +-
2998 include/linux/kobject.h | 3 +-
2999 include/linux/kobject_ns.h | 2 +-
3000 include/linux/kref.h | 2 +-
3001 include/linux/libata.h | 2 +-
3002 include/linux/linkage.h | 22 +-
3003 include/linux/list.h | 15 +
3004 include/linux/lockd/xdr.h | 34 +-
3005 include/linux/lockd/xdr4.h | 34 +-
3006 include/linux/lockref.h | 26 +-
3007 include/linux/math64.h | 10 +-
3008 include/linux/memcontrol.h | 2 +-
3009 include/linux/memory.h | 2 +-
3010 include/linux/mempolicy.h | 7 +
3011 include/linux/mm.h | 98 +-
3012 include/linux/mm_types.h | 20 +
3013 include/linux/mmiotrace.h | 4 +-
3014 include/linux/mmzone.h | 2 +-
3015 include/linux/mod_devicetable.h | 4 +-
3016 include/linux/module.h | 58 +-
3017 include/linux/moduleloader.h | 16 +
3018 include/linux/moduleparam.h | 12 +-
3019 include/linux/net.h | 2 +-
3020 include/linux/netdevice.h | 11 +-
3021 include/linux/netfilter.h | 2 +-
3022 include/linux/netfilter/ipset/ip_set_comment.h | 3 +-
3023 include/linux/netfilter/nfnetlink.h | 2 +-
3024 include/linux/netlink.h | 12 +-
3025 include/linux/nls.h | 4 +-
3026 include/linux/notifier.h | 3 +-
3027 include/linux/oprofile.h | 4 +-
3028 include/linux/padata.h | 2 +-
3029 include/linux/pagemap.h | 4 +-
3030 include/linux/pci_hotplug.h | 3 +-
3031 include/linux/percpu.h | 2 +-
3032 include/linux/perf_event.h | 12 +-
3033 include/linux/pid.h | 4 +-
3034 include/linux/pipe_fs_i.h | 8 +-
3035 include/linux/pm.h | 1 +
3036 include/linux/pm_domain.h | 2 +-
3037 include/linux/pm_runtime.h | 2 +-
3038 include/linux/pnp.h | 2 +-
3039 include/linux/poison.h | 4 +-
3040 include/linux/power/smartreflex.h | 2 +-
3041 include/linux/ppp-comp.h | 2 +-
3042 include/linux/preempt.h | 21 +
3043 include/linux/printk.h | 2 +-
3044 include/linux/proc_ns.h | 2 +-
3045 include/linux/psci.h | 2 +-
3046 include/linux/quota.h | 2 +-
3047 include/linux/random.h | 19 +-
3048 include/linux/rculist.h | 16 +
3049 include/linux/rcupdate.h | 8 +
3050 include/linux/reboot.h | 14 +-
3051 include/linux/regset.h | 3 +-
3052 include/linux/relay.h | 2 +-
3053 include/linux/rio.h | 2 +-
3054 include/linux/rmap.h | 4 +-
3055 include/linux/sched.h | 76 +-
3056 include/linux/scif.h | 2 +-
3057 include/linux/semaphore.h | 2 +-
3058 include/linux/seq_buf.h | 4 +-
3059 include/linux/seq_file.h | 1 +
3060 include/linux/seqlock.h | 10 +
3061 include/linux/signal.h | 2 +-
3062 include/linux/skbuff.h | 12 +-
3063 include/linux/slab.h | 47 +-
3064 include/linux/slab_def.h | 14 +-
3065 include/linux/slub_def.h | 2 +-
3066 include/linux/smp.h | 2 +
3067 include/linux/sock_diag.h | 2 +-
3068 include/linux/sonet.h | 2 +-
3069 include/linux/spinlock.h | 17 +-
3070 include/linux/srcu.h | 5 +-
3071 include/linux/string.h | 70 +-
3072 include/linux/sunrpc/addr.h | 8 +-
3073 include/linux/sunrpc/clnt.h | 2 +-
3074 include/linux/sunrpc/svc.h | 2 +-
3075 include/linux/sunrpc/svc_rdma.h | 18 +-
3076 include/linux/sunrpc/svcauth.h | 2 +-
3077 include/linux/swapops.h | 10 +-
3078 include/linux/swiotlb.h | 3 +-
3079 include/linux/syscalls.h | 36 +-
3080 include/linux/syscore_ops.h | 2 +-
3081 include/linux/sysctl.h | 3 +-
3082 include/linux/sysfs.h | 11 +-
3083 include/linux/sysrq.h | 3 +-
3084 include/linux/tcp.h | 14 +-
3085 include/linux/thread_info.h | 7 +
3086 include/linux/tty.h | 4 +-
3087 include/linux/tty_driver.h | 2 +-
3088 include/linux/tty_ldisc.h | 2 +-
3089 include/linux/types.h | 18 +
3090 include/linux/uaccess.h | 2 +-
3091 include/linux/uio_driver.h | 2 +-
3092 include/linux/unaligned/access_ok.h | 24 +-
3093 include/linux/usb.h | 12 +-
3094 include/linux/usb/hcd.h | 1 +
3095 include/linux/usb/renesas_usbhs.h | 2 +-
3096 include/linux/vermagic.h | 21 +-
3097 include/linux/vga_switcheroo.h | 8 +-
3098 include/linux/vmalloc.h | 7 +-
3099 include/linux/vmstat.h | 24 +-
3100 include/linux/writeback.h | 3 +-
3101 include/linux/xattr.h | 5 +-
3102 include/linux/zlib.h | 3 +-
3103 include/media/v4l2-dev.h | 2 +-
3104 include/media/v4l2-device.h | 2 +-
3105 include/net/9p/transport.h | 2 +-
3106 include/net/bluetooth/l2cap.h | 2 +-
3107 include/net/bonding.h | 2 +-
3108 include/net/caif/cfctrl.h | 6 +-
3109 include/net/cfg80211-wext.h | 20 +-
3110 include/net/cfg802154.h | 2 +-
3111 include/net/fib_rules.h | 3 +-
3112 include/net/flow.h | 2 +-
3113 include/net/genetlink.h | 2 +-
3114 include/net/gro_cells.h | 2 +-
3115 include/net/inet_connection_sock.h | 2 +-
3116 include/net/inet_sock.h | 2 +-
3117 include/net/inetpeer.h | 2 +-
3118 include/net/ip_fib.h | 2 +-
3119 include/net/ip_vs.h | 8 +-
3120 include/net/ipv6.h | 2 +-
3121 include/net/irda/ircomm_tty.h | 1 +
3122 include/net/irda/irias_object.h | 2 +-
3123 include/net/irda/irlmp.h | 1 +
3124 include/net/irda/irlmp_event.h | 6 +-
3125 include/net/irda/timer.h | 6 +-
3126 include/net/iucv/af_iucv.h | 2 +-
3127 include/net/llc_c_ac.h | 2 +-
3128 include/net/llc_c_ev.h | 4 +-
3129 include/net/llc_c_st.h | 2 +-
3130 include/net/llc_s_ac.h | 2 +-
3131 include/net/llc_s_st.h | 2 +-
3132 include/net/mac80211.h | 6 +-
3133 include/net/neighbour.h | 4 +-
3134 include/net/net_namespace.h | 18 +-
3135 include/net/netfilter/nf_conntrack.h | 2 +-
3136 include/net/netlink.h | 2 +-
3137 include/net/netns/conntrack.h | 6 +-
3138 include/net/netns/ipv4.h | 4 +-
3139 include/net/netns/ipv6.h | 4 +-
3140 include/net/netns/xfrm.h | 2 +-
3141 include/net/ping.h | 2 +-
3142 include/net/protocol.h | 4 +-
3143 include/net/rtnetlink.h | 2 +-
3144 include/net/sctp/checksum.h | 4 +-
3145 include/net/sctp/sm.h | 4 +-
3146 include/net/sctp/structs.h | 2 +-
3147 include/net/snmp.h | 10 +-
3148 include/net/sock.h | 12 +-
3149 include/net/tcp.h | 8 +-
3150 include/net/xfrm.h | 15 +-
3151 include/rdma/ib_cm.h | 8 +-
3152 include/scsi/libfc.h | 3 +-
3153 include/scsi/scsi_device.h | 6 +-
3154 include/scsi/scsi_driver.h | 2 +-
3155 include/scsi/scsi_transport_fc.h | 3 +-
3156 include/scsi/sg.h | 2 +-
3157 include/sound/compress_driver.h | 2 +-
3158 include/sound/control.h | 4 +-
3159 include/sound/pcm.h | 2 +-
3160 include/sound/rawmidi.h | 3 +-
3161 include/sound/seq_kernel.h | 2 +-
3162 include/sound/soc.h | 4 +-
3163 include/trace/events/irq.h | 4 +-
3164 include/trace/events/mmflags.h | 7 +
3165 include/uapi/linux/a.out.h | 8 +
3166 include/uapi/linux/bcache.h | 5 +-
3167 include/uapi/linux/byteorder/little_endian.h | 28 +-
3168 include/uapi/linux/connector.h | 2 +-
3169 include/uapi/linux/elf.h | 28 +
3170 include/uapi/linux/screen_info.h | 2 +-
3171 include/uapi/linux/swab.h | 6 +-
3172 include/uapi/linux/xattr.h | 5 +
3173 include/video/udlfb.h | 8 +-
3174 include/video/uvesafb.h | 1 +
3175 init/Kconfig | 2 +-
3176 init/do_mounts.c | 16 +-
3177 init/do_mounts.h | 8 +-
3178 init/do_mounts_initrd.c | 30 +-
3179 init/do_mounts_md.c | 6 +-
3180 init/init_task.c | 4 +
3181 init/initramfs.c | 38 +-
3182 init/main.c | 30 +-
3183 ipc/compat.c | 4 +-
3184 ipc/ipc_sysctl.c | 14 +-
3185 ipc/mq_sysctl.c | 4 +-
3186 ipc/sem.c | 4 +-
3187 ipc/shm.c | 8 +-
3188 kernel/audit.c | 10 +-
3189 kernel/auditsc.c | 4 +-
3190 kernel/bpf/core.c | 28 +-
3191 kernel/capability.c | 3 +
3192 kernel/cgroup.c | 29 +-
3193 kernel/compat.c | 38 +-
3194 kernel/debug/debug_core.c | 16 +-
3195 kernel/debug/kdb/kdb_main.c | 4 +-
3196 kernel/events/core.c | 36 +-
3197 kernel/events/internal.h | 10 +-
3198 kernel/events/uprobes.c | 2 +-
3199 kernel/exit.c | 27 +-
3200 kernel/fork.c | 175 +-
3201 kernel/futex.c | 11 +-
3202 kernel/futex_compat.c | 2 +-
3203 kernel/irq/manage.c | 2 +-
3204 kernel/irq/msi.c | 19 +-
3205 kernel/irq/spurious.c | 2 +-
3206 kernel/jump_label.c | 5 +
3207 kernel/kallsyms.c | 40 +-
3208 kernel/kexec.c | 3 +-
3209 kernel/kmod.c | 8 +-
3210 kernel/kprobes.c | 4 +-
3211 kernel/ksysfs.c | 2 +-
3212 kernel/locking/lockdep.c | 7 +-
3213 kernel/locking/mutex-debug.c | 12 +-
3214 kernel/locking/mutex-debug.h | 4 +-
3215 kernel/locking/mutex.c | 6 +-
3216 kernel/module.c | 405 +-
3217 kernel/notifier.c | 17 +-
3218 kernel/padata.c | 4 +-
3219 kernel/panic.c | 11 +-
3220 kernel/pid.c | 8 +-
3221 kernel/pid_namespace.c | 2 +-
3222 kernel/power/process.c | 12 +-
3223 kernel/profile.c | 14 +-
3224 kernel/ptrace.c | 8 +-
3225 kernel/rcu/rcutorture.c | 60 +-
3226 kernel/rcu/tiny.c | 4 +-
3227 kernel/rcu/tree.c | 42 +-
3228 kernel/rcu/tree.h | 16 +-
3229 kernel/rcu/tree_plugin.h | 18 +-
3230 kernel/rcu/tree_trace.c | 14 +-
3231 kernel/resource.c | 4 +-
3232 kernel/sched/auto_group.c | 4 +-
3233 kernel/sched/core.c | 8 +-
3234 kernel/sched/deadline.c | 4 +-
3235 kernel/sched/debug.c | 43 +-
3236 kernel/sched/fair.c | 2 +-
3237 kernel/sched/rt.c | 4 +-
3238 kernel/sched/sched.h | 13 +-
3239 kernel/signal.c | 28 +-
3240 kernel/smp.c | 2 +-
3241 kernel/smpboot.c | 7 +-
3242 kernel/softirq.c | 12 +-
3243 kernel/stop_machine.c | 2 +-
3244 kernel/sys.c | 10 +-
3245 kernel/sys_ni.c | 4 +-
3246 kernel/sysctl.c | 34 +-
3247 kernel/time/alarmtimer.c | 4 +-
3248 kernel/time/posix-clock.c | 8 +-
3249 kernel/time/posix-cpu-timers.c | 4 +-
3250 kernel/time/posix-timers.c | 36 +-
3251 kernel/time/timer.c | 2 +-
3252 kernel/time/timer_stats.c | 10 +-
3253 kernel/trace/blktrace.c | 6 +-
3254 kernel/trace/ftrace.c | 33 +-
3255 kernel/trace/ring_buffer.c | 96 +-
3256 kernel/trace/trace.c | 2 +-
3257 kernel/trace/trace.h | 2 +-
3258 kernel/trace/trace_clock.c | 4 +-
3259 kernel/trace/trace_events.c | 1 -
3260 kernel/trace/trace_functions_graph.c | 4 +-
3261 kernel/trace/trace_mmiotrace.c | 8 +-
3262 kernel/trace/trace_output.c | 10 +-
3263 kernel/trace/trace_seq.c | 2 +-
3264 kernel/trace/trace_stack.c | 2 +-
3265 kernel/user.c | 2 +-
3266 kernel/user_namespace.c | 2 +-
3267 kernel/utsname_sysctl.c | 2 +-
3268 kernel/watchdog.c | 2 +-
3269 kernel/workqueue.c | 8 +-
3270 lib/Kconfig.debug | 8 +-
3271 lib/Makefile | 2 +-
3272 lib/bitmap.c | 8 +-
3273 lib/bug.c | 2 +
3274 lib/debugobjects.c | 2 +-
3275 lib/decompress_bunzip2.c | 3 +-
3276 lib/decompress_unlzma.c | 4 +-
3277 lib/div64.c | 4 +-
3278 lib/dma-debug.c | 4 +-
3279 lib/extable.c | 11 +-
3280 lib/inflate.c | 2 +-
3281 lib/ioremap.c | 4 +-
3282 lib/irq_poll.c | 2 +-
3283 lib/kobject.c | 4 +-
3284 lib/list_debug.c | 126 +-
3285 lib/lockref.c | 44 +-
3286 lib/percpu-refcount.c | 2 +-
3287 lib/radix-tree.c | 2 +-
3288 lib/random32.c | 2 +-
3289 lib/rhashtable.c | 4 +-
3290 lib/seq_buf.c | 4 +-
3291 lib/show_mem.c | 2 +-
3292 lib/strncpy_from_user.c | 2 +-
3293 lib/strnlen_user.c | 2 +-
3294 lib/swiotlb.c | 2 +-
3295 lib/usercopy.c | 6 +
3296 lib/vsprintf.c | 12 +-
3297 mm/Kconfig | 6 +-
3298 mm/backing-dev.c | 4 +-
3299 mm/fadvise.c | 2 +-
3300 mm/filemap.c | 8 +-
3301 mm/gup.c | 13 +-
3302 mm/highmem.c | 6 +-
3303 mm/hugetlb.c | 125 +-
3304 mm/hugetlb_cgroup.c | 60 +-
3305 mm/internal.h | 3 +-
3306 mm/maccess.c | 12 +-
3307 mm/madvise.c | 37 +
3308 mm/memcontrol.c | 6 +-
3309 mm/memory-failure.c | 6 +-
3310 mm/memory.c | 424 +-
3311 mm/mempolicy.c | 25 +
3312 mm/mlock.c | 18 +-
3313 mm/mm_init.c | 2 +-
3314 mm/mmap.c | 572 +-
3315 mm/mprotect.c | 137 +-
3316 mm/mremap.c | 39 +-
3317 mm/nommu.c | 21 +-
3318 mm/page-writeback.c | 2 +-
3319 mm/page_alloc.c | 61 +-
3320 mm/percpu.c | 2 +-
3321 mm/process_vm_access.c | 14 +-
3322 mm/readahead.c | 2 +-
3323 mm/rmap.c | 43 +-
3324 mm/shmem.c | 35 +-
3325 mm/slab.c | 113 +-
3326 mm/slab.h | 37 +-
3327 mm/slab_common.c | 79 +-
3328 mm/slob.c | 220 +-
3329 mm/slub.c | 111 +-
3330 mm/sparse-vmemmap.c | 4 +-
3331 mm/sparse.c | 2 +-
3332 mm/swap.c | 7 +
3333 mm/swapfile.c | 12 +-
3334 mm/util.c | 7 +
3335 mm/vmalloc.c | 116 +-
3336 mm/vmstat.c | 12 +-
3337 net/8021q/vlan.c | 5 +-
3338 net/8021q/vlan_netlink.c | 2 +-
3339 net/9p/mod.c | 4 +-
3340 net/9p/trans_fd.c | 2 +-
3341 net/atm/atm_misc.c | 8 +-
3342 net/atm/lec.h | 2 +-
3343 net/atm/proc.c | 6 +-
3344 net/atm/resources.c | 4 +-
3345 net/ax25/sysctl_net_ax25.c | 2 +-
3346 net/batman-adv/bat_iv_ogm.c | 8 +-
3347 net/batman-adv/fragmentation.c | 2 +-
3348 net/batman-adv/routing.c | 4 +-
3349 net/batman-adv/soft-interface.c | 12 +-
3350 net/batman-adv/sysfs.c | 48 +-
3351 net/batman-adv/sysfs.h | 4 +-
3352 net/batman-adv/translation-table.c | 14 +-
3353 net/batman-adv/types.h | 8 +-
3354 net/bluetooth/hci_sock.c | 2 +-
3355 net/bluetooth/l2cap_core.c | 6 +-
3356 net/bluetooth/l2cap_sock.c | 12 +-
3357 net/bluetooth/rfcomm/sock.c | 4 +-
3358 net/bluetooth/rfcomm/tty.c | 4 +-
3359 net/bridge/br_netfilter_hooks.c | 4 +-
3360 net/bridge/br_netlink.c | 2 +-
3361 net/bridge/netfilter/ebtables.c | 6 +-
3362 net/caif/cfctrl.c | 11 +-
3363 net/caif/chnl_net.c | 4 +-
3364 net/can/af_can.c | 2 +-
3365 net/can/gw.c | 6 +-
3366 net/ceph/ceph_common.c | 2 +-
3367 net/ceph/messenger.c | 4 +-
3368 net/compat.c | 26 +-
3369 net/core/datagram.c | 2 +-
3370 net/core/dev.c | 24 +-
3371 net/core/filter.c | 2 +-
3372 net/core/flow.c | 8 +-
3373 net/core/neighbour.c | 18 +-
3374 net/core/net-procfs.c | 4 +-
3375 net/core/net-sysfs.c | 2 +-
3376 net/core/net_namespace.c | 10 +-
3377 net/core/netpoll.c | 4 +-
3378 net/core/rtnetlink.c | 17 +-
3379 net/core/scm.c | 12 +-
3380 net/core/skbuff.c | 11 +-
3381 net/core/sock.c | 30 +-
3382 net/core/sock_diag.c | 15 +-
3383 net/core/sysctl_net_core.c | 22 +-
3384 net/decnet/af_decnet.c | 1 +
3385 net/decnet/sysctl_net_decnet.c | 4 +-
3386 net/dsa/dsa.c | 2 +-
3387 net/hsr/hsr_device.c | 2 +-
3388 net/hsr/hsr_netlink.c | 2 +-
3389 net/ieee802154/6lowpan/core.c | 2 +-
3390 net/ieee802154/6lowpan/reassembly.c | 14 +-
3391 net/ieee802154/core.c | 6 +-
3392 net/ipv4/af_inet.c | 6 +-
3393 net/ipv4/arp.c | 2 +-
3394 net/ipv4/devinet.c | 20 +-
3395 net/ipv4/fib_frontend.c | 6 +-
3396 net/ipv4/fib_semantics.c | 2 +-
3397 net/ipv4/icmp.c | 2 +-
3398 net/ipv4/inet_connection_sock.c | 4 +-
3399 net/ipv4/inet_diag.c | 4 +-
3400 net/ipv4/inet_timewait_sock.c | 2 +-
3401 net/ipv4/inetpeer.c | 2 +-
3402 net/ipv4/ip_fragment.c | 17 +-
3403 net/ipv4/ip_gre.c | 6 +-
3404 net/ipv4/ip_sockglue.c | 2 +-
3405 net/ipv4/ip_vti.c | 4 +-
3406 net/ipv4/ipconfig.c | 6 +-
3407 net/ipv4/ipip.c | 4 +-
3408 net/ipv4/netfilter/arp_tables.c | 12 +-
3409 net/ipv4/netfilter/ip_tables.c | 12 +-
3410 net/ipv4/ping.c | 14 +-
3411 net/ipv4/proc.c | 10 +-
3412 net/ipv4/raw.c | 16 +-
3413 net/ipv4/route.c | 40 +-
3414 net/ipv4/sysctl_net_ipv4.c | 24 +-
3415 net/ipv4/tcp_input.c | 6 +-
3416 net/ipv4/tcp_ipv4.c | 2 +-
3417 net/ipv4/tcp_metrics.c | 2 +-
3418 net/ipv4/tcp_probe.c | 2 +-
3419 net/ipv4/udp.c | 10 +-
3420 net/ipv4/xfrm4_mode_transport.c | 2 +-
3421 net/ipv4/xfrm4_policy.c | 19 +-
3422 net/ipv4/xfrm4_state.c | 4 +-
3423 net/ipv6/addrconf.c | 24 +-
3424 net/ipv6/af_inet6.c | 2 +-
3425 net/ipv6/datagram.c | 2 +-
3426 net/ipv6/icmp.c | 2 +-
3427 net/ipv6/inet6_hashtables.c | 2 +-
3428 net/ipv6/ip6_fib.c | 4 +-
3429 net/ipv6/ip6_gre.c | 10 +-
3430 net/ipv6/ip6_tunnel.c | 4 +-
3431 net/ipv6/ip6_vti.c | 4 +-
3432 net/ipv6/ipv6_sockglue.c | 2 +-
3433 net/ipv6/ndisc.c | 2 +-
3434 net/ipv6/netfilter/ip6_tables.c | 12 +-
3435 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
3436 net/ipv6/ping.c | 33 +-
3437 net/ipv6/proc.c | 10 +-
3438 net/ipv6/raw.c | 17 +-
3439 net/ipv6/reassembly.c | 13 +-
3440 net/ipv6/route.c | 2 +-
3441 net/ipv6/sit.c | 4 +-
3442 net/ipv6/sysctl_net_ipv6.c | 2 +-
3443 net/ipv6/udp.c | 6 +-
3444 net/ipv6/xfrm6_mode_transport.c | 2 +-
3445 net/ipv6/xfrm6_policy.c | 17 +-
3446 net/irda/discovery.c | 2 +-
3447 net/irda/ircomm/ircomm_core.c | 13 +-
3448 net/irda/ircomm/ircomm_tty.c | 24 +-
3449 net/irda/ircomm/ircomm_tty_attach.c | 4 +-
3450 net/irda/irda_device.c | 14 +-
3451 net/irda/iriap.c | 14 +-
3452 net/irda/irias_object.c | 10 +-
3453 net/irda/irlan/irlan_client.c | 2 +-
3454 net/irda/irlap.c | 15 +-
3455 net/irda/irlap_event.c | 2 +-
3456 net/irda/irlmp.c | 21 +-
3457 net/irda/irlmp_event.c | 6 +-
3458 net/irda/irnet/irnet.h | 2 +-
3459 net/irda/irnet/irnet_irda.c | 6 +-
3460 net/irda/irttp.c | 8 +-
3461 net/irda/timer.c | 24 +-
3462 net/iucv/af_iucv.c | 4 +-
3463 net/iucv/iucv.c | 2 +-
3464 net/key/af_key.c | 4 +-
3465 net/l2tp/l2tp_eth.c | 40 +-
3466 net/l2tp/l2tp_ip.c | 2 +-
3467 net/l2tp/l2tp_ip6.c | 2 +-
3468 net/mac80211/cfg.c | 12 +-
3469 net/mac80211/debugfs.c | 2 +-
3470 net/mac80211/debugfs_key.c | 6 +-
3471 net/mac80211/ieee80211_i.h | 3 +-
3472 net/mac80211/iface.c | 20 +-
3473 net/mac80211/main.c | 2 +-
3474 net/mac80211/pm.c | 4 +-
3475 net/mac80211/rate.c | 2 +-
3476 net/mac80211/sta_info.c | 2 +-
3477 net/mac80211/tx.c | 2 +-
3478 net/mac80211/util.c | 8 +-
3479 net/mac80211/wpa.c | 12 +-
3480 net/mac802154/iface.c | 6 +-
3481 net/mpls/af_mpls.c | 10 +-
3482 net/netfilter/ipset/ip_set_core.c | 7 +-
3483 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
3484 net/netfilter/ipvs/ip_vs_core.c | 4 +-
3485 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
3486 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
3487 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
3488 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
3489 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
3490 net/netfilter/nf_conntrack_acct.c | 2 +-
3491 net/netfilter/nf_conntrack_core.c | 6 +-
3492 net/netfilter/nf_conntrack_ecache.c | 2 +-
3493 net/netfilter/nf_conntrack_helper.c | 2 +-
3494 net/netfilter/nf_conntrack_netlink.c | 22 +-
3495 net/netfilter/nf_conntrack_proto.c | 2 +-
3496 net/netfilter/nf_conntrack_standalone.c | 2 +-
3497 net/netfilter/nf_conntrack_timestamp.c | 2 +-
3498 net/netfilter/nf_log.c | 10 +-
3499 net/netfilter/nf_nat_ftp.c | 2 +-
3500 net/netfilter/nf_nat_irc.c | 2 +-
3501 net/netfilter/nf_sockopt.c | 4 +-
3502 net/netfilter/nf_tables_api.c | 13 +-
3503 net/netfilter/nfnetlink_acct.c | 7 +-
3504 net/netfilter/nfnetlink_cthelper.c | 2 +-
3505 net/netfilter/nfnetlink_cttimeout.c | 2 +-
3506 net/netfilter/nfnetlink_log.c | 4 +-
3507 net/netfilter/nft_compat.c | 9 +-
3508 net/netfilter/xt_IDLETIMER.c | 12 +-
3509 net/netfilter/xt_statistic.c | 8 +-
3510 net/netlink/af_netlink.c | 16 +-
3511 net/netlink/diag.c | 2 +-
3512 net/netlink/genetlink.c | 14 +-
3513 net/openvswitch/vport-geneve.c | 7 +-
3514 net/openvswitch/vport-gre.c | 7 +-
3515 net/openvswitch/vport-internal_dev.c | 4 +-
3516 net/openvswitch/vport-netdev.c | 7 +-
3517 net/openvswitch/vport-vxlan.c | 7 +-
3518 net/packet/af_packet.c | 26 +-
3519 net/packet/diag.c | 2 +-
3520 net/packet/internal.h | 6 +-
3521 net/phonet/pep.c | 6 +-
3522 net/phonet/socket.c | 2 +-
3523 net/phonet/sysctl.c | 2 +-
3524 net/rds/cong.c | 6 +-
3525 net/rds/ib.h | 2 +-
3526 net/rds/ib_cm.c | 2 +-
3527 net/rds/ib_recv.c | 4 +-
3528 net/rds/rds.h | 2 +-
3529 net/rds/tcp.c | 6 +-
3530 net/rds/tcp.h | 6 +-
3531 net/rds/tcp_send.c | 2 +-
3532 net/rxrpc/af_rxrpc.c | 2 +-
3533 net/rxrpc/ar-ack.c | 14 +-
3534 net/rxrpc/ar-call.c | 2 +-
3535 net/rxrpc/ar-connection.c | 2 +-
3536 net/rxrpc/ar-connevent.c | 2 +-
3537 net/rxrpc/ar-input.c | 4 +-
3538 net/rxrpc/ar-internal.h | 8 +-
3539 net/rxrpc/ar-local.c | 2 +-
3540 net/rxrpc/ar-output.c | 4 +-
3541 net/rxrpc/ar-peer.c | 2 +-
3542 net/rxrpc/ar-proc.c | 4 +-
3543 net/rxrpc/ar-transport.c | 2 +-
3544 net/rxrpc/rxkad.c | 4 +-
3545 net/sched/sch_generic.c | 4 +-
3546 net/sched/sch_tbf.c | 9 +-
3547 net/sctp/ipv6.c | 4 +-
3548 net/sctp/protocol.c | 8 +-
3549 net/sctp/sm_sideeffect.c | 4 +-
3550 net/sctp/socket.c | 21 +-
3551 net/sctp/sysctl.c | 10 +-
3552 net/socket.c | 18 +-
3553 net/sunrpc/auth_gss/gss_rpc_upcall.c | 4 +-
3554 net/sunrpc/auth_gss/gss_rpc_xdr.c | 11 +-
3555 net/sunrpc/auth_gss/gss_rpc_xdr.h | 8 +-
3556 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
3557 net/sunrpc/clnt.c | 4 +-
3558 net/sunrpc/rpcb_clnt.c | 66 +-
3559 net/sunrpc/sched.c | 4 +-
3560 net/sunrpc/svc.c | 8 +-
3561 net/sunrpc/svcauth_unix.c | 2 +-
3562 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
3563 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
3564 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
3565 net/sunrpc/xprtrdma/svc_rdma_transport.c | 2 +-
3566 net/tipc/netlink_compat.c | 12 +-
3567 net/tipc/subscr.c | 2 +-
3568 net/unix/diag.c | 2 +-
3569 net/unix/sysctl_net_unix.c | 2 +-
3570 net/wireless/scan.c | 3 +-
3571 net/wireless/wext-compat.c | 140 +-
3572 net/wireless/wext-compat.h | 8 +-
3573 net/wireless/wext-core.c | 19 +-
3574 net/wireless/wext-sme.c | 5 +-
3575 net/xfrm/xfrm_policy.c | 18 +-
3576 net/xfrm/xfrm_state.c | 37 +-
3577 net/xfrm/xfrm_sysctl.c | 2 +-
3578 net/xfrm/xfrm_user.c | 2 +-
3579 scripts/Kbuild.include | 12 +-
3580 scripts/Makefile | 2 +-
3581 scripts/Makefile.build | 2 +-
3582 scripts/Makefile.clean | 4 +-
3583 scripts/Makefile.extrawarn | 4 +
3584 scripts/Makefile.gcc-plugins | 93 +
3585 scripts/Makefile.host | 73 +-
3586 scripts/basic/fixdep.c | 12 +-
3587 scripts/dtc/checks.c | 14 +-
3588 scripts/dtc/data.c | 6 +-
3589 scripts/dtc/flattree.c | 8 +-
3590 scripts/dtc/livetree.c | 4 +-
3591 scripts/gcc-plugin.sh | 65 +
3592 scripts/gcc-plugins/Makefile | 25 +
3593 scripts/gcc-plugins/checker_plugin.c | 496 +
3594 scripts/gcc-plugins/colorize_plugin.c | 162 +
3595 scripts/gcc-plugins/constify_plugin.c | 583 +
3596 scripts/gcc-plugins/gcc-common.h | 893 +
3597 scripts/gcc-plugins/gcc-generate-gimple-pass.h | 175 +
3598 scripts/gcc-plugins/gcc-generate-ipa-pass.h | 289 +
3599 scripts/gcc-plugins/gcc-generate-rtl-pass.h | 175 +
3600 scripts/gcc-plugins/gcc-generate-simple_ipa-pass.h | 175 +
3601 scripts/gcc-plugins/initify_plugin.c | 536 +
3602 scripts/gcc-plugins/kallocstat_plugin.c | 135 +
3603 scripts/gcc-plugins/kernexec_plugin.c | 407 +
3604 scripts/gcc-plugins/latent_entropy_plugin.c | 613 +
3605 scripts/gcc-plugins/rap_plugin/Makefile | 6 +
3606 scripts/gcc-plugins/rap_plugin/rap.h | 36 +
3607 scripts/gcc-plugins/rap_plugin/rap_fptr_pass.c | 220 +
3608 scripts/gcc-plugins/rap_plugin/rap_hash.c | 382 +
3609 scripts/gcc-plugins/rap_plugin/rap_plugin.c | 511 +
3610 scripts/gcc-plugins/rap_plugin/sip.c | 96 +
3611 .../gcc-plugins/size_overflow_plugin/.gitignore | 3 +
3612 scripts/gcc-plugins/size_overflow_plugin/Makefile | 30 +
3613 .../disable_size_overflow_hash.data | 12445 +++++++++++
3614 .../generate_size_overflow_hash.sh | 103 +
3615 .../insert_size_overflow_asm.c | 369 +
3616 .../size_overflow_plugin/intentional_overflow.c | 1166 +
3617 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
3618 .../size_overflow_plugin/size_overflow.h | 331 +
3619 .../size_overflow_plugin/size_overflow_debug.c | 194 +
3620 .../size_overflow_plugin/size_overflow_hash.data | 21503 +++++++++++++++++++
3621 .../size_overflow_hash_aux.data | 97 +
3622 .../size_overflow_plugin/size_overflow_ipa.c | 1163 +
3623 .../size_overflow_plugin/size_overflow_misc.c | 505 +
3624 .../size_overflow_plugin/size_overflow_plugin.c | 290 +
3625 .../size_overflow_plugin_hash.c | 352 +
3626 .../size_overflow_plugin/size_overflow_transform.c | 743 +
3627 .../size_overflow_transform_core.c | 1025 +
3628 scripts/gcc-plugins/stackleak_plugin.c | 350 +
3629 scripts/gcc-plugins/structleak_plugin.c | 239 +
3630 scripts/headers_install.sh | 1 +
3631 scripts/kallsyms.c | 4 +-
3632 scripts/kconfig/lkc.h | 5 +-
3633 scripts/kconfig/menu.c | 2 +-
3634 scripts/kconfig/symbol.c | 6 +-
3635 scripts/link-vmlinux.sh | 2 +-
3636 scripts/mod/file2alias.c | 14 +-
3637 scripts/mod/modpost.c | 40 +-
3638 scripts/mod/modpost.h | 6 +-
3639 scripts/mod/sumversion.c | 2 +-
3640 scripts/module-common.lds | 4 +
3641 scripts/package/builddeb | 1 +
3642 scripts/pnmtologo.c | 6 +-
3643 scripts/sortextable.h | 6 +-
3644 scripts/tags.sh | 2 +-
3645 security/Kconfig | 710 +-
3646 security/apparmor/include/policy.h | 2 +-
3647 security/apparmor/lsm.c | 16 +-
3648 security/apparmor/policy.c | 4 +-
3649 security/integrity/ima/ima.h | 4 +-
3650 security/integrity/ima/ima_api.c | 2 +-
3651 security/integrity/ima/ima_fs.c | 4 +-
3652 security/integrity/ima/ima_queue.c | 2 +-
3653 security/keys/internal.h | 8 +-
3654 security/keys/key.c | 18 +-
3655 security/keys/keyring.c | 4 -
3656 security/selinux/avc.c | 6 +-
3657 security/selinux/include/xfrm.h | 2 +-
3658 security/yama/yama_lsm.c | 2 +-
3659 sound/aoa/codecs/onyx.c | 7 +-
3660 sound/aoa/codecs/onyx.h | 1 +
3661 sound/core/oss/pcm_oss.c | 18 +-
3662 sound/core/pcm_compat.c | 2 +-
3663 sound/core/pcm_lib.c | 3 +-
3664 sound/core/pcm_native.c | 4 +-
3665 sound/core/rawmidi.c | 5 +-
3666 sound/core/seq/oss/seq_oss_synth.c | 4 +-
3667 sound/core/seq/seq_clientmgr.c | 10 +-
3668 sound/core/seq/seq_compat.c | 2 +-
3669 sound/core/seq/seq_fifo.c | 6 +-
3670 sound/core/seq/seq_fifo.h | 2 +-
3671 sound/core/seq/seq_memory.c | 18 +-
3672 sound/core/seq/seq_midi.c | 5 +-
3673 sound/core/seq/seq_virmidi.c | 2 +-
3674 sound/core/sound.c | 2 +-
3675 sound/drivers/mts64.c | 14 +-
3676 sound/drivers/opl4/opl4_lib.c | 2 +-
3677 sound/drivers/portman2x4.c | 3 +-
3678 sound/firewire/amdtp-am824.c | 2 +-
3679 sound/firewire/amdtp-stream.c | 4 +-
3680 sound/firewire/amdtp-stream.h | 2 +-
3681 sound/firewire/digi00x/amdtp-dot.c | 2 +-
3682 sound/firewire/isight.c | 10 +-
3683 sound/firewire/oxfw/oxfw-scs1x.c | 8 +-
3684 sound/oss/sb_audio.c | 2 +-
3685 sound/oss/swarm_cs4297a.c | 6 +-
3686 sound/pci/als300.c | 2 +-
3687 sound/pci/aw2/aw2-alsa.c | 2 -
3688 sound/pci/aw2/aw2-saa7146.c | 4 +-
3689 sound/pci/ctxfi/ctamixer.c | 14 +-
3690 sound/pci/ctxfi/ctamixer.h | 8 +-
3691 sound/pci/ctxfi/ctatc.c | 20 +-
3692 sound/pci/ctxfi/ctdaio.c | 6 +-
3693 sound/pci/ctxfi/ctdaio.h | 4 +-
3694 sound/pci/ctxfi/ctsrc.c | 13 +-
3695 sound/pci/ctxfi/ctsrc.h | 8 +-
3696 sound/pci/hda/hda_codec.c | 2 +-
3697 sound/pci/ymfpci/ymfpci.h | 2 +-
3698 sound/pci/ymfpci/ymfpci_main.c | 12 +-
3699 sound/soc/codecs/cx20442.c | 8 +-
3700 sound/soc/codecs/sti-sas.c | 10 +-
3701 sound/soc/codecs/tlv320dac33.c | 7 +-
3702 sound/soc/codecs/uda1380.c | 7 +-
3703 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
3704 sound/soc/soc-ac97.c | 6 +-
3705 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
3706 tools/include/linux/compiler.h | 8 +
3707 tools/perf/util/include/asm/alternative-asm.h | 3 +
3708 tools/virtio/linux/uaccess.h | 2 +-
3709 virt/kvm/kvm_main.c | 42 +-
3710 2730 files changed, 77381 insertions(+), 14195 deletions(-)
3711 commit 5988c8dba8a5da45e35d71f4a8fec34c267258c5
3712 Author: Brad Spengler <spender@grsecurity.net>
3713 Date: Mon Apr 25 20:40:53 2016 -0400
3714
3715 Fix DoS in n_tty_receive_buf_common reported by marcan at:
3716 https://forums.grsecurity.net/viewtopic.php?t=4342&p=16222
3717 and via lengthy diatribe on Twitter:
3718 https://twitter.com/marcan42/status/724740708104474626
3719 https://twitter.com/marcan42/status/724740985146609664
3720 https://twitter.com/marcan42/status/724741270325760000
3721 https://twitter.com/marcan42/status/724742465199050752
3722 https://twitter.com/marcan42/status/724745886794833920
3723 https://twitter.com/marcan42/status/724749571495075840
3724 https://twitter.com/marcan42/status/724746427285409796
3725 https://twitter.com/marcan42/status/724743150263095296
3726 https://twitter.com/marcan42/status/724757473433808896
3727
3728 Fix it correctly instead of using the incorrect fix suggested
3729 by marcan (aka "try reading the code next time")
3730 The original code was meant to fix an integer truncation issue
3731 that would also have caused a SIZE_OVERFLOW "DoS".
3732
3733 drivers/tty/n_tty.c | 9 +++++----
3734 1 file changed, 5 insertions(+), 4 deletions(-)
3735
3736 commit 5459ff57d8987389fa17d5d6f55b70a789347c2f
3737 Author: Brad Spengler <spender@grsecurity.net>
3738 Date: Mon Apr 25 19:52:33 2016 -0400
3739
3740 Avoid overflow in environ_read() caught by SIZE_OVERFLOW,
3741 reported by jotik at:
3742 https://forums.grsecurity.net/viewtopic.php?t=4363&p=16217
3743 patch from Mathias Krause
3744
3745 fs/proc/base.c | 2 +-
3746 1 file changed, 1 insertion(+), 1 deletion(-)
3747
3748 commit 24a5c92e147af1e739e9eeca020c61ad2674e784
3749 Author: Jiri Benc <jbenc@redhat.com>
3750 Date: Fri Apr 22 13:09:13 2016 +0200
3751
3752 cxgbi: fix uninitialized flowi6
3753
3754 ip6_route_output looks into different fields in the passed flowi6 structure,
3755 yet cxgbi passes garbage in nearly all those fields. Zero the structure out
3756 first.
3757
3758 Fixes: fc8d0590d9142 ("libcxgbi: Add ipv6 api to driver")
3759 Signed-off-by: Jiri Benc <jbenc@redhat.com>
3760 Signed-off-by: David S. Miller <davem@davemloft.net>
3761
3762 drivers/scsi/cxgbi/libcxgbi.c | 1 +
3763 1 file changed, 1 insertion(+)
3764
3765 commit ec65caa32652841a5be21d6e73146921af16d7a8
3766 Author: Brad Spengler <spender@grsecurity.net>
3767 Date: Wed Apr 20 20:59:43 2016 -0400
3768
3769 Make /proc/sched_debug only readable by root, mentioned in
3770 recent NCC Group paper on Linux containers
3771
3772 kernel/sched/debug.c | 4 ++++
3773 1 file changed, 4 insertions(+)
3774
3775 commit 7957d30730bb26a4aef54ab484dc3b4108f1fdb1
3776 Merge: 463149f ff26083
3777 Author: Brad Spengler <spender@grsecurity.net>
3778 Date: Wed Apr 20 17:55:53 2016 -0400
3779
3780 Merge branch 'pax-test' into grsec-test
3781
3782 commit ff260839e610d2bc1b0c579edd7deb0028198f01
3783 Author: Brad Spengler <spender@grsecurity.net>
3784 Date: Wed Apr 20 17:55:24 2016 -0400
3785
3786 Update to pax-linux-4.4.8-test14.patch:
3787 - Emese fixed some CodingStyle issues in the latent entropy plugin
3788 - fixed some build problems on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
3789
3790 arch/mips/include/asm/cache.h | 3 ++-
3791 arch/mips/lib/ashldi3.c | 21 ++++++++++++++-------
3792 arch/mips/lib/ashrdi3.c | 19 +++++++++++++------
3793 arch/mips/lib/libgcc.h | 12 +++++++++---
3794 drivers/idle/intel_idle.c | 6 ++++--
3795 tools/gcc/latent_entropy_plugin.c | 29 +++++++++++++++--------------
3796 6 files changed, 57 insertions(+), 33 deletions(-)
3797
3798 commit 463149f47a64db4b26a13009f83ed73d393a209c
3799 Author: Xiaodong Liu <xiaodong.liu@intel.com>
3800 Date: Tue Apr 12 09:45:51 2016 +0000
3801
3802 crypto: sha1-mb - use corrcet pointer while completing jobs
3803
3804 In sha_complete_job, incorrect mcryptd_hash_request_ctx pointer is used
3805 when check and complete other jobs. If the memory of first completed req
3806 is freed, while still completing other jobs in the func, kernel will
3807 crash since NULL pointer is assigned to RIP.
3808
3809 Cc: <stable@vger.kernel.org>
3810 Signed-off-by: Xiaodong Liu <xiaodong.liu@intel.com>
3811 Acked-by: Tim Chen <tim.c.chen@linux.intel.com>
3812 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
3813
3814 arch/x86/crypto/sha-mb/sha1_mb.c | 4 ++--
3815 1 file changed, 2 insertions(+), 2 deletions(-)
3816
3817 commit b4e6484e67b917afb77478cab1260f41dbbc92fc
3818 Author: Tom Lendacky <thomas.lendacky@amd.com>
3819 Date: Wed Apr 13 10:52:25 2016 -0500
3820
3821 crypto: ccp - Prevent information leakage on export
3822
3823 Prevent information from leaking to userspace by doing a memset to 0 of
3824 the export state structure before setting the structure values and copying
3825 it. This prevents un-initialized padding areas from being copied into the
3826 export area.
3827
3828 Cc: <stable@vger.kernel.org> # 3.14.x-
3829 Reported-by: Ben Hutchings <ben@decadent.org.uk>
3830 Signed-off-by: Tom Lendacky <thomas.lendacky@amd.com>
3831 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
3832
3833 drivers/crypto/ccp/ccp-crypto-aes-cmac.c | 3 +++
3834 drivers/crypto/ccp/ccp-crypto-sha.c | 3 +++
3835 2 files changed, 6 insertions(+)
3836
3837 commit 7d7e961d3f4e4614b22518d8e410e6cf4108f1b0
3838 Author: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
3839 Date: Mon Apr 18 14:33:54 2016 +0300
3840
3841 net/mlx4_en: allocate non 0-order pages for RX ring with __GFP_NOMEMALLOC
3842
3843 High order pages are optional here since commit 51151a16a60f ("mlx4: allow
3844 order-0 memory allocations in RX path"), so here is no reason for depleting
3845 reserves. Generic __netdev_alloc_frag() implements the same logic.
3846
3847 Signed-off-by: Konstantin Khlebnikov <khlebnikov@yandex-team.ru>
3848 Acked-by: Eric Dumazet <edumazet@google.com>
3849 Signed-off-by: David S. Miller <davem@davemloft.net>
3850
3851 drivers/net/ethernet/mellanox/mlx4/en_rx.c | 2 +-
3852 1 file changed, 1 insertion(+), 1 deletion(-)
3853
3854 commit 6b80edde2edc7fd055f9be8ec42b88abbe328639
3855 Author: Ignat Korchagin <ignat.korchagin@gmail.com>
3856 Date: Thu Mar 17 18:00:29 2016 +0000
3857
3858 USB: usbip: fix potential out-of-bounds write
3859
3860 Fix potential out-of-bounds write to urb->transfer_buffer
3861 usbip handles network communication directly in the kernel. When receiving a
3862 packet from its peer, usbip code parses headers according to protocol. As
3863 part of this parsing urb->actual_length is filled. Since the input for
3864 urb->actual_length comes from the network, it should be treated as untrusted.
3865 Any entity controlling the network may put any value in the input and the
3866 preallocated urb->transfer_buffer may not be large enough to hold the data.
3867 Thus, the malicious entity is able to write arbitrary data to kernel memory.
3868
3869 Signed-off-by: Ignat Korchagin <ignat.korchagin@gmail.com>
3870 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
3871
3872 drivers/usb/usbip/usbip_common.c | 11 +++++++++++
3873 1 file changed, 11 insertions(+)
3874
3875 commit 0ce101ec9e74c2cfcd28cbcd18b0626e3d9a2482
3876 Merge: d60a24d f5fe5fd
3877 Author: Brad Spengler <spender@grsecurity.net>
3878 Date: Wed Apr 20 17:35:58 2016 -0400
3879
3880 Merge branch 'pax-test' into grsec-test
3881
3882 commit f5fe5fddf49f1b81a2a3bb43b1e0a8c087aba438
3883 Merge: a107ba2 8c9aef0
3884 Author: Brad Spengler <spender@grsecurity.net>
3885 Date: Wed Apr 20 17:35:29 2016 -0400
3886
3887 Merge branch 'linux-4.4.y' into pax-test
3888
3889 commit d60a24d6e4f61072d0bd1dc12be1177181fa8c2b
3890 Author: Brad Spengler <spender@grsecurity.net>
3891 Date: Mon Apr 18 17:48:10 2016 -0400
3892
3893 fix cast for constify change, reported by pipacs
3894
3895 drivers/idle/intel_idle.c | 4 ++--
3896 1 file changed, 2 insertions(+), 2 deletions(-)
3897
3898 commit 1d376287aeba7a53c91d5ee49ef0a11d02193964
3899 Author: Brad Spengler <spender@grsecurity.net>
3900 Date: Fri Apr 15 21:31:07 2016 -0400
3901
3902 Use proper type for function pointer
3903
3904 drivers/gpu/drm/gma500/mdfld_dsi_output.c | 6 +++---
3905 1 file changed, 3 insertions(+), 3 deletions(-)
3906
3907 commit 0a4104a2fa32904102fac07245426d78a1e9dfab
3908 Author: Brad Spengler <spender@grsecurity.net>
3909 Date: Fri Apr 15 21:24:04 2016 -0400
3910
3911 Fix skylake cstates compat with constify
3912
3913 drivers/idle/intel_idle.c | 6 ++++--
3914 1 file changed, 4 insertions(+), 2 deletions(-)
3915
3916 commit f433f8fd372253c9e78e307afe5b800c5ab0ea61
3917 Author: Brad Spengler <spender@grsecurity.net>
3918 Date: Fri Apr 15 21:10:44 2016 -0400
3919
3920 Update size_overflow hash table
3921
3922 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 3 ++-
3923 1 file changed, 2 insertions(+), 1 deletion(-)
3924
3925 commit ef7804da81cb3c6b6a4c985a3c14ee230a03f26a
3926 Author: Brad Spengler <spender@grsecurity.net>
3927 Date: Fri Apr 15 20:52:37 2016 -0400
3928
3929 compile fix
3930
3931 fs/coredump.c | 3 ---
3932 1 file changed, 3 deletions(-)
3933
3934 commit 967224da52bd98d078b1237aea5ec9e622238fba
3935 Merge: 92771d6 a107ba2
3936 Author: Brad Spengler <spender@grsecurity.net>
3937 Date: Fri Apr 15 20:30:23 2016 -0400
3938
3939 Merge branch 'pax-test' into grsec-test
3940
3941 commit a107ba25214d9694eb836fb04c782ad694977b91
3942 Merge: 4d8fc00 b40108b
3943 Author: Brad Spengler <spender@grsecurity.net>
3944 Date: Fri Apr 15 20:18:26 2016 -0400
3945
3946 Merge branch 'linux-4.4.y' into pax-test
3947
3948 commit 92771d60677d68e8f6ea7a91ff34dd6e24b6d4cf
3949 Author: Brad Spengler <spender@grsecurity.net>
3950 Date: Sun Apr 10 07:18:03 2016 -0400
3951
3952 From: Mathias Krause <minipli@googlemail.com>
3953 To: "David S. Miller" <davem@davemloft.net>
3954 Cc: netdev@vger.kernel.org, "Eric W. Biederman" <ebiederm@xmission.com>, Pavel
3955 Emelyanov <xemul@parallels.com>
3956 Subject: [PATCH net] packet: fix heap info leak in PACKET_DIAG_MCLIST sock_diag
3957 interface
3958
3959 Because we miss to wipe the remainder of i->addr[] in packet_mc_add(),
3960 pdiag_put_mclist() leaks uninitialized heap bytes via the
3961 PACKET_DIAG_MCLIST netlink attribute.
3962
3963 Fix this by explicitly memset(0)ing the remaining bytes in i->addr[].
3964
3965 Fixes: eea68e2f1a00 ("packet: Report socket mclist info via diag module")
3966 Signed-off-by: Mathias Krause <minipli@googlemail.com>
3967 Cc: Eric W. Biederman <ebiederm@xmission.com>
3968 Cc: Pavel Emelyanov <xemul@parallels.com>
3969 ---
3970 The bug itself precedes commit eea68e2f1a00 but the list wasn't exposed
3971 to userland before the introduction of the packet_diag interface.
3972 Therefore the "Fixes:" line on that commit.
3973
3974 net/packet/af_packet.c | 1 +
3975 1 file changed, 1 insertion(+)
3976
3977 commit 4286ce3f9e9db4d68870af46ae1d5f9b90b920dd
3978 Author: Jakub Sitnicki <jkbs@redhat.com>
3979 Date: Tue Apr 5 18:41:08 2016 +0200
3980
3981 ipv6: Count in extension headers in skb->network_header
3982
3983 When sending a UDPv6 message longer than MTU, account for the length
3984 of fragmentable IPv6 extension headers in skb->network_header offset.
3985 Same as we do in alloc_new_skb path in __ip6_append_data().
3986
3987 This ensures that later on __ip6_make_skb() will make space in
3988 headroom for fragmentable extension headers:
3989
3990 /* move skb->data to ip header from ext header */
3991 if (skb->data < skb_network_header(skb))
3992 __skb_pull(skb, skb_network_offset(skb));
3993
3994 Prevents a splat due to skb_under_panic:
3995
3996 skbuff: skb_under_panic: text:ffffffff8143397b len:2126 put:14 \
3997 head:ffff880005bacf50 data:ffff880005bacf4a tail:0x48 end:0xc0 dev:lo
3998 ------------[ cut here ]------------
3999 kernel BUG at net/core/skbuff.c:104!
4000 invalid opcode: 0000 [#1] KASAN
4001 CPU: 0 PID: 160 Comm: reproducer Not tainted 4.6.0-rc2 #65
4002 [...]
4003 Call Trace:
4004 [<ffffffff813eb7b9>] skb_push+0x79/0x80
4005 [<ffffffff8143397b>] eth_header+0x2b/0x100
4006 [<ffffffff8141e0d0>] neigh_resolve_output+0x210/0x310
4007 [<ffffffff814eab77>] ip6_finish_output2+0x4a7/0x7c0
4008 [<ffffffff814efe3a>] ip6_output+0x16a/0x280
4009 [<ffffffff815440c1>] ip6_local_out+0xb1/0xf0
4010 [<ffffffff814f1115>] ip6_send_skb+0x45/0xd0
4011 [<ffffffff81518836>] udp_v6_send_skb+0x246/0x5d0
4012 [<ffffffff8151985e>] udpv6_sendmsg+0xa6e/0x1090
4013 [...]
4014
4015 Reported-by: Ji Jianwen <jiji@redhat.com>
4016 Signed-off-by: Jakub Sitnicki <jkbs@redhat.com>
4017 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
4018 Signed-off-by: David S. Miller <davem@davemloft.net>
4019
4020 net/ipv6/ip6_output.c | 8 ++++----
4021 1 file changed, 4 insertions(+), 4 deletions(-)
4022
4023 commit 638dad49a9ba3d86f627adb58b2f4636ed253685
4024 Author: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
4025 Date: Fri Apr 1 17:17:50 2016 -0300
4026
4027 ip6_tunnel: set rtnl_link_ops before calling register_netdevice
4028
4029 When creating an ip6tnl tunnel with ip tunnel, rtnl_link_ops is not set
4030 before ip6_tnl_create2 is called. When register_netdevice is called, there
4031 is no linkinfo attribute in the NEWLINK message because of that.
4032
4033 Setting rtnl_link_ops before calling register_netdevice fixes that.
4034
4035 Fixes: 0b112457229d ("ip6tnl: add support of link creation via rtnl")
4036 Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@redhat.com>
4037 Acked-by: Nicolas Dichtel <nicolas.dichtel@6wind.com>
4038 Signed-off-by: David S. Miller <davem@davemloft.net>
4039
4040 net/ipv6/ip6_tunnel.c | 2 +-
4041 1 file changed, 1 insertion(+), 1 deletion(-)
4042
4043 commit 14146a0bfaf2ced0055fe549c8fa0941c61e2457
4044 Author: Brad Spengler <spender@grsecurity.net>
4045 Date: Tue Apr 5 21:12:44 2016 -0400
4046
4047 Code cleanups to RANDSTRUCT based on feedback from the PaX Team
4048
4049 tools/gcc/randomize_layout_plugin.c | 18 ++++++++++++------
4050 1 file changed, 12 insertions(+), 6 deletions(-)
4051
4052 commit 3f7dea5e59b0bb34f6bdb628c87251f0105b3d57
4053 Author: Brad Spengler <spender@grsecurity.net>
4054 Date: Sun Apr 3 20:10:10 2016 -0400
4055
4056 Fix RANDSTRUCT support on ARM
4057
4058 tools/gcc/randomize_layout_plugin.c | 54 +++++++++++++++++++++++++++++++++++--
4059 1 file changed, 52 insertions(+), 2 deletions(-)
4060
4061 commit bd893a75ab49f6ea5a216eb334471507337118ba
4062 Merge: 87b7f1d 4d8fc00
4063 Author: Brad Spengler <spender@grsecurity.net>
4064 Date: Sat Apr 2 11:54:20 2016 -0400
4065
4066 Merge branch 'pax-test' into grsec-test
4067
4068 commit 4d8fc00c0066b1921e233123b346efe6ffb27691
4069 Author: Brad Spengler <spender@grsecurity.net>
4070 Date: Sat Apr 2 11:53:53 2016 -0400
4071
4072 Update to pax-linux-4.4.6-test13.patch:
4073 - fixed a REFCOUNT related compile regression on mips, reported by Steve Arnold (https://bugs.gentoo.org/show_bug.cgi?id=578394)
4074 - worked around an integer signedness mixup in md causing a size overflow false positive, reported by Étienne Buira (https://bugs.gentoo.org/show_bug.cgi?id=578502)
4075
4076 arch/mips/include/asm/atomic.h | 4 ----
4077 tools/gcc/size_overflow_plugin/disable_size_overflow_hash.data | 1 +
4078 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 -
4079 3 files changed, 1 insertion(+), 5 deletions(-)
4080
4081 commit 87b7f1d200023ba826b9d552834a2ee85e67526c
4082 Merge: 3335266 3abdad0
4083 Author: Brad Spengler <spender@grsecurity.net>
4084 Date: Sat Apr 2 11:19:17 2016 -0400
4085
4086 Merge branch 'pax-test' into grsec-test
4087
4088 commit 3abdad0c3b436c076c88289f07a250b811d6f79d
4089 Author: Brad Spengler <spender@grsecurity.net>
4090 Date: Sat Apr 2 11:12:56 2016 -0400
4091
4092 Update to pax-linux-4.4.6-test12.patch:
4093 - fixed vmalloc_fault on i386/PAE to use the correct percpu userland pgd table/entry
4094 - fixed a size overflow false positive report in pptp, reported by Pinkbyte (https://forums.grsecurity.net/viewtopic.php?f=3&t=4437)
4095 - fixed a size overflow false positive report in tbf_segment, reported by audiocricket (https://forums.grsecurity.net/viewtopic.php?f=3&t=4438)
4096 - Emese fixed the x86 vdso32 CFLAGS to omit the gcc plugins
4097 - Emese simplified the gcc plugin related make rules, suggested by Masahiro Yamada
4098 - André Fabian Silva Delgado fixed a compile regression on arm, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4435)
4099 - fixed an integer sign conversion error in nfs_super_set_maxbytes caught by the size overflow plugin, reported by Alexey Dvoichenkov <xale@hyperplane.net>
4100 - fixed a size overflow false positive in squashfs, reported by Mathias Krause <minipli@ld-linux.so>
4101 - fixed a size overflow false positive in xfrm6_transport_output, reported by marcan (https://forums.grsecurity.net/viewtopic.php?f=3&t=4426)
4102 - fixed an integer truncation bug in elf_kcore_store_hdr caught by the size overflow plugin
4103 - fixed a gratuitous userland dereference in the amd64 stack walker
4104 - added latent entropy gathering to a few more functions
4105 - constified a few smp_hotplug_thread instances
4106
4107 arch/x86/entry/vdso/Makefile | 1 +
4108 arch/x86/include/asm/cpufeature.h | 1 -
4109 arch/x86/kernel/dumpstack_64.c | 17 ++++++-----------
4110 arch/x86/kernel/head_32.S | 6 +++---
4111 arch/x86/mm/fault.c | 2 +-
4112 drivers/iommu/arm-smmu.c | 2 +-
4113 drivers/net/ppp/pptp.c | 1 +
4114 drivers/staging/rdma/ehca/ehca_irq.c | 2 +-
4115 fs/nfs/internal.h | 5 +++--
4116 fs/proc/kcore.c | 2 +-
4117 kernel/module.c | 6 +++---
4118 kernel/rcu/tree.c | 2 +-
4119 kernel/softirq.c | 2 +-
4120 kernel/stop_machine.c | 2 +-
4121 net/ipv6/xfrm6_mode_transport.c | 2 +-
4122 net/sched/sch_tbf.c | 9 ++++++---
4123 scripts/Makefile.gcc-plugins | 13 +++----------
4124 scripts/Makefile.host | 3 +--
4125 .../disable_size_overflow_hash.data | 4 +++-
4126 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 6 ++----
4127 20 files changed, 40 insertions(+), 48 deletions(-)
4128
4129 commit 3335266d5bec9bc01580736c0a7026ed96cf25e5
4130 Author: Mika Penttilä <mika.penttila@nextfour.com>
4131 Date: Mon Feb 22 17:56:52 2016 +0100
4132
4133 ARM: 8544/1: set_memory_xx fixes
4134
4135 Allow zero size updates. This makes set_memory_xx() consistent with x86, s390 and arm64 and makes apply_to_page_range() not to BUG() when loading modules.
4136
4137 Signed-off-by: Mika Penttilä mika.penttila@nextfour.com
4138 Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>
4139
4140 arch/arm/mm/pageattr.c | 3 +++
4141 1 file changed, 3 insertions(+)
4142
4143 commit d6d6499b22c0e5593a16f41c516041b23fbf9eeb
4144 Author: Josh Boyer <jwboyer@fedoraproject.org>
4145 Date: Mon Mar 14 10:42:38 2016 -0400
4146
4147 USB: iowarrior: fix oops with malicious USB descriptors
4148
4149 The iowarrior driver expects at least one valid endpoint. If given
4150 malicious descriptors that specify 0 for the number of endpoints,
4151 it will crash in the probe function. Ensure there is at least
4152 one endpoint on the interface before using it.
4153
4154 The full report of this issue can be found here:
4155 http://seclists.org/bugtraq/2016/Mar/87
4156
4157 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
4158 Cc: stable <stable@vger.kernel.org>
4159 Signed-off-by: Josh Boyer <jwboyer@fedoraproject.org>
4160 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4161
4162 drivers/usb/misc/iowarrior.c | 6 ++++++
4163 1 file changed, 6 insertions(+)
4164
4165 commit 79a1fb47ab1245e81040bcd45b3e44e65d282684
4166 Author: Oliver Neukum <oneukum@suse.com>
4167 Date: Tue Mar 15 10:14:04 2016 +0100
4168
4169 USB: cdc-acm: more sanity checking
4170
4171 An attack has become available which pretends to be a quirky
4172 device circumventing normal sanity checks and crashes the kernel
4173 by an insufficient number of interfaces. This patch adds a check
4174 to the code path for quirky devices.
4175
4176 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
4177 CC: stable@vger.kernel.org
4178 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4179
4180 drivers/usb/class/cdc-acm.c | 3 +++
4181 1 file changed, 3 insertions(+)
4182
4183 commit 6ee21acdf0da6602671cb50edeca0abfba3955f7
4184 Author: Oliver Neukum <oneukum@suse.com>
4185 Date: Wed Mar 16 13:26:17 2016 +0100
4186
4187 USB: usb_driver_claim_interface: add sanity checking
4188
4189 Attacks that trick drivers into passing a NULL pointer
4190 to usb_driver_claim_interface() using forged descriptors are
4191 known. This thwarts them by sanity checking.
4192
4193 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
4194 CC: stable@vger.kernel.org
4195 Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
4196
4197 drivers/usb/core/driver.c | 6 +++++-
4198 1 file changed, 5 insertions(+), 1 deletion(-)
4199
4200 commit 44247834ddab762509eaaf5c742e15bfadcd9d94
4201 Author: Paolo Bonzini <pbonzini@redhat.com>
4202 Date: Mon Mar 21 10:15:25 2016 +0100
4203
4204 KVM: fix spin_lock_init order on x86
4205
4206 Moving the initialization earlier is needed in 4.6 because
4207 kvm_arch_init_vm is now using mmu_lock, causing lockdep to
4208 complain:
4209
4210 [ 284.440294] INFO: trying to register non-static key.
4211 [ 284.445259] the code is fine but needs lockdep annotation.
4212 [ 284.450736] turning off the locking correctness validator.
4213 ...
4214 [ 284.528318] [<ffffffff810aecc3>] lock_acquire+0xd3/0x240
4215 [ 284.533733] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
4216 [ 284.541467] [<ffffffff81715581>] _raw_spin_lock+0x41/0x80
4217 [ 284.546960] [<ffffffffa0305aa0>] ? kvm_page_track_register_notifier+0x20/0x60 [kvm]
4218 [ 284.554707] [<ffffffffa0305aa0>] kvm_page_track_register_notifier+0x20/0x60 [kvm]
4219 [ 284.562281] [<ffffffffa02ece70>] kvm_mmu_init_vm+0x20/0x30 [kvm]
4220 [ 284.568381] [<ffffffffa02dbf7a>] kvm_arch_init_vm+0x1ea/0x200 [kvm]
4221 [ 284.574740] [<ffffffffa02bff3f>] kvm_dev_ioctl+0xbf/0x4d0 [kvm]
4222
4223 However, it also helps fixing a preexisting problem, which is why this
4224 patch is also good for stable kernels: kvm_create_vm was incrementing
4225 current->mm->mm_count but not decrementing it at the out_err label (in
4226 case kvm_init_mmu_notifier failed). The new initialization order makes
4227 it possible to add the required mmdrop without adding a new error label.
4228
4229 Cc: stable@vger.kernel.org
4230 Reported-by: Borislav Petkov <bp@alien8.de>
4231 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
4232
4233 virt/kvm/kvm_main.c | 21 +++++++++++----------
4234 1 file changed, 11 insertions(+), 10 deletions(-)
4235
4236 commit 9d0cf281d74a9fe490f3ba5ca3d0e57eac066e1c
4237 Author: Paolo Bonzini <pbonzini@redhat.com>
4238 Date: Fri Mar 18 16:53:42 2016 +0100
4239
4240 KVM: VMX: avoid guest hang on invalid invvpid instruction
4241
4242 A guest executing an invalid invvpid instruction would hang
4243 because the instruction pointer was not updated.
4244
4245 Reported-by: jmontleo@redhat.com
4246 Tested-by: jmontleo@redhat.com
4247 Cc: stable@vger.kernel.org
4248 Fixes: 99b83ac893b84ed1a62ad6d1f2b6cc32026b9e85
4249 Reviewed-by: David Matlack <dmatlack@google.com>
4250 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
4251
4252 arch/x86/kvm/vmx.c | 1 +
4253 1 file changed, 1 insertion(+)
4254
4255 commit 602caaece277e5e21ae43771398bbf7778061beb
4256 Author: Paolo Bonzini <pbonzini@redhat.com>
4257 Date: Fri Mar 18 16:53:29 2016 +0100
4258
4259 KVM: VMX: avoid guest hang on invalid invept instruction
4260
4261 A guest executing an invalid invept instruction would hang
4262 because the instruction pointer was not updated.
4263
4264 Cc: stable@vger.kernel.org
4265 Fixes: bfd0a56b90005f8c8a004baf407ad90045c2b11e
4266 Reviewed-by: David Matlack <dmatlack@google.com>
4267 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
4268
4269 arch/x86/kvm/vmx.c | 1 +
4270 1 file changed, 1 insertion(+)
4271
4272 commit 3309ac82d6596de8abc6ea51dd0a942416da1cc1
4273 Author: Jann Horn <jann@thejh.net>
4274 Date: Tue Mar 22 14:25:36 2016 -0700
4275
4276 fs/coredump: prevent fsuid=0 dumps into user-controlled directories
4277
4278 This commit fixes the following security hole affecting systems where
4279 all of the following conditions are fulfilled:
4280
4281 - The fs.suid_dumpable sysctl is set to 2.
4282 - The kernel.core_pattern sysctl's value starts with "/". (Systems
4283 where kernel.core_pattern starts with "|/" are not affected.)
4284 - Unprivileged user namespace creation is permitted. (This is
4285 true on Linux >=3.8, but some distributions disallow it by
4286 default using a distro patch.)
4287
4288 Under these conditions, if a program executes under secure exec rules,
4289 causing it to run with the SUID_DUMP_ROOT flag, then unshares its user
4290 namespace, changes its root directory and crashes, the coredump will be
4291 written using fsuid=0 and a path derived from kernel.core_pattern - but
4292 this path is interpreted relative to the root directory of the process,
4293 allowing the attacker to control where a coredump will be written with
4294 root privileges.
4295
4296 To fix the security issue, always interpret core_pattern for dumps that
4297 are written under SUID_DUMP_ROOT relative to the root directory of init.
4298
4299 Signed-off-by: Jann Horn <jann@thejh.net>
4300 Acked-by: Kees Cook <keescook@chromium.org>
4301 Cc: Al Viro <viro@zeniv.linux.org.uk>
4302 Cc: "Eric W. Biederman" <ebiederm@xmission.com>
4303 Cc: Andy Lutomirski <luto@kernel.org>
4304 Cc: Oleg Nesterov <oleg@redhat.com>
4305 Cc: <stable@vger.kernel.org>
4306 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
4307 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
4308
4309 arch/um/drivers/mconsole_kern.c | 2 +-
4310 fs/coredump.c | 31 +++++++++++++++++++++++++++----
4311 fs/fhandle.c | 2 +-
4312 fs/open.c | 6 ++----
4313 include/linux/fs.h | 2 +-
4314 kernel/sysctl_binary.c | 2 +-
4315 6 files changed, 33 insertions(+), 12 deletions(-)
4316
4317 commit a7c8d3c91a3e50d0873942f09afbb5071382d5e7
4318 Author: Takashi Iwai <tiwai@suse.de>
4319 Date: Fri Apr 1 12:28:16 2016 +0200
4320
4321 ALSA: timer: Use mod_timer() for rearming the system timer
4322
4323 ALSA system timer backend stops the timer via del_timer() without sync
4324 and leaves del_timer_sync() at the close instead. This is because of
4325 the restriction by the design of ALSA timer: namely, the stop callback
4326 may be called from the timer handler, and calling the sync shall lead
4327 to a hangup. However, this also triggers a kernel BUG() when the
4328 timer is rearmed immediately after stopping without sync:
4329 kernel BUG at kernel/time/timer.c:966!
4330 Call Trace:
4331 <IRQ>
4332 [<ffffffff8239c94e>] snd_timer_s_start+0x13e/0x1a0
4333 [<ffffffff8239e1f4>] snd_timer_interrupt+0x504/0xec0
4334 [<ffffffff8122fca0>] ? debug_check_no_locks_freed+0x290/0x290
4335 [<ffffffff8239ec64>] snd_timer_s_function+0xb4/0x120
4336 [<ffffffff81296b72>] call_timer_fn+0x162/0x520
4337 [<ffffffff81296add>] ? call_timer_fn+0xcd/0x520
4338 [<ffffffff8239ebb0>] ? snd_timer_interrupt+0xec0/0xec0
4339 ....
4340
4341 It's the place where add_timer() checks the pending timer. It's clear
4342 that this may happen after the immediate restart without sync in our
4343 cases.
4344
4345 So, the workaround here is just to use mod_timer() instead of
4346 add_timer(). This looks like a band-aid fix, but it's a right move,
4347 as snd_timer_interrupt() takes care of the continuous rearm of timer.
4348
4349 Reported-by: Jiri Slaby <jslaby@suse.cz>
4350 Cc: <stable@vger.kernel.org>
4351 Signed-off-by: Takashi Iwai <tiwai@suse.de>
4352
4353 sound/core/timer.c | 4 ++--
4354 1 file changed, 2 insertions(+), 2 deletions(-)
4355
4356 commit 2de05c5fc90b461d78a54a7240b664a068844c8c
4357 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
4358 Date: Wed Mar 30 11:40:43 2016 +0200
4359
4360 drm/udl: Use unlocked gem unreferencing
4361
4362 For drm_gem_object_unreference callers are required to hold
4363 dev->struct_mutex, which these paths don't. Enforcing this requirement
4364 has become a bit more strict with
4365
4366 commit ef4c6270bf2867e2f8032e9614d1a8cfc6c71663
4367 Author: Daniel Vetter <daniel.vetter@ffwll.ch>
4368 Date: Thu Oct 15 09:36:25 2015 +0200
4369
4370 drm/gem: Check locking in drm_gem_object_unreference
4371
4372 Cc: stable@vger.kernel.org
4373 Signed-off-by: Daniel Vetter <daniel.vetter@intel.com>
4374 Signed-off-by: Dave Airlie <airlied@redhat.com>
4375
4376 drivers/gpu/drm/udl/udl_fb.c | 2 +-
4377 drivers/gpu/drm/udl/udl_gem.c | 2 +-
4378 2 files changed, 2 insertions(+), 2 deletions(-)
4379
4380 commit c8153b6b1731b8fee33966dd8d148643240f1dc0
4381 Author: Jan Kara <jack@suse.com>
4382 Date: Mon Dec 7 14:34:49 2015 -0500
4383
4384 ext4: fix races of writeback with punch hole and zero range
4385
4386 When doing delayed allocation, update of on-disk inode size is postponed
4387 until IO submission time. However hole punch or zero range fallocate
4388 calls can end up discarding the tail page cache page and thus on-disk
4389 inode size would never be properly updated.
4390
4391 Make sure the on-disk inode size is updated before truncating page
4392 cache.
4393
4394 Signed-off-by: Jan Kara <jack@suse.com>
4395 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
4396
4397 fs/ext4/ext4.h | 3 +++
4398 fs/ext4/extents.c | 5 +++++
4399 fs/ext4/inode.c | 35 ++++++++++++++++++++++++++++++++++-
4400 3 files changed, 42 insertions(+), 1 deletion(-)
4401
4402 commit d64beb441579f2667e99eb9d4d6e83deb88bf59b
4403 Author: Jan Kara <jack@suse.com>
4404 Date: Mon Dec 7 14:31:11 2015 -0500
4405
4406 ext4: fix races between buffered IO and collapse / insert range
4407
4408 Current code implementing FALLOC_FL_COLLAPSE_RANGE and
4409 FALLOC_FL_INSERT_RANGE is prone to races with buffered writes and page
4410 faults. If buffered write or write via mmap manages to squeeze between
4411 filemap_write_and_wait_range() and truncate_pagecache() in the fallocate
4412 implementations, the written data is simply discarded by
4413 truncate_pagecache() although it should have been shifted.
4414
4415 Fix the problem by moving filemap_write_and_wait_range() call inside
4416 i_mutex and i_mmap_sem. That way we are protected against races with
4417 both buffered writes and page faults.
4418
4419 Signed-off-by: Jan Kara <jack@suse.com>
4420 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
4421
4422 fs/ext4/extents.c | 59 +++++++++++++++++++++++++++++--------------------------
4423 1 file changed, 31 insertions(+), 28 deletions(-)
4424
4425 commit b1ae49aa4dad39233b16456e0765a23ba4e0546c
4426 Author: Jan Kara <jack@suse.com>
4427 Date: Mon Dec 7 14:29:17 2015 -0500
4428
4429 ext4: move unlocked dio protection from ext4_alloc_file_blocks()
4430
4431 Currently ext4_alloc_file_blocks() was handling protection against
4432 unlocked DIO. However we now need to sometimes call it under i_mmap_sem
4433 and sometimes not and DIO protection ranks above it (although strictly
4434 speaking this cannot currently create any deadlocks). Also
4435 ext4_zero_range() was actually getting & releasing unlocked DIO
4436 protection twice in some cases. Luckily it didn't introduce any real bug
4437 but it was a land mine waiting to be stepped on. So move DIO protection
4438 out from ext4_alloc_file_blocks() into the two callsites.
4439
4440 Signed-off-by: Jan Kara <jack@suse.com>
4441 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
4442
4443 fs/ext4/extents.c | 21 ++++++++++-----------
4444 1 file changed, 10 insertions(+), 11 deletions(-)
4445
4446 commit f9329a4ec30a26f0fababf809c5f1a3ef851b625
4447 Author: Jan Kara <jack@suse.com>
4448 Date: Mon Dec 7 14:28:03 2015 -0500
4449
4450 ext4: fix races between page faults and hole punching
4451
4452 Currently, page faults and hole punching are completely unsynchronized.
4453 This can result in page fault faulting in a page into a range that we
4454 are punching after truncate_pagecache_range() has been called and thus
4455 we can end up with a page mapped to disk blocks that will be shortly
4456 freed. Filesystem corruption will shortly follow. Note that the same
4457 race is avoided for truncate by checking page fault offset against
4458 i_size but there isn't similar mechanism available for punching holes.
4459
4460 Fix the problem by creating new rw semaphore i_mmap_sem in inode and
4461 grab it for writing over truncate, hole punching, and other functions
4462 removing blocks from extent tree and for read over page faults. We
4463 cannot easily use i_data_sem for this since that ranks below transaction
4464 start and we need something ranking above it so that it can be held over
4465 the whole truncate / hole punching operation. Also remove various
4466 workarounds we had in the code to reduce race window when page fault
4467 could have created pages with stale mapping information.
4468
4469 Signed-off-by: Jan Kara <jack@suse.com>
4470 Signed-off-by: Theodore Ts'o <tytso@mit.edu>
4471
4472 fs/ext4/ext4.h | 10 +++++++++
4473 fs/ext4/extents.c | 54 ++++++++++++++++++++++++--------------------
4474 fs/ext4/file.c | 66 ++++++++++++++++++++++++++++++++++++++++++++++--------
4475 fs/ext4/inode.c | 36 +++++++++++++++++++++--------
4476 fs/ext4/super.c | 1 +
4477 fs/ext4/truncate.h | 2 ++
4478 6 files changed, 127 insertions(+), 42 deletions(-)
4479
4480 commit 572a615b85c1d5c8aeea4ffd24ab428775a1cca9
4481 Author: Guenter Roeck <linux@roeck-us.net>
4482 Date: Sat Mar 26 12:28:05 2016 -0700
4483
4484 hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated
4485
4486 arm:pxa_defconfig can result in the following crash if the max1111 driver
4487 is not instantiated.
4488
4489 Unhandled fault: page domain fault (0x01b) at 0x00000000
4490 pgd = c0004000
4491 [00000000] *pgd=00000000
4492 Internal error: : 1b [#1] PREEMPT ARM
4493 Modules linked in:
4494 CPU: 0 PID: 300 Comm: kworker/0:1 Not tainted 4.5.0-01301-g1701f680407c #10
4495 Hardware name: SHARP Akita
4496 Workqueue: events sharpsl_charge_toggle
4497 task: c390a000 ti: c391e000 task.ti: c391e000
4498 PC is at max1111_read_channel+0x20/0x30
4499 LR is at sharpsl_pm_pxa_read_max1111+0x2c/0x3c
4500 pc : [<c03aaab0>] lr : [<c0024b50>] psr: 20000013
4501 ...
4502 [<c03aaab0>] (max1111_read_channel) from [<c0024b50>]
4503 (sharpsl_pm_pxa_read_max1111+0x2c/0x3c)
4504 [<c0024b50>] (sharpsl_pm_pxa_read_max1111) from [<c00262e0>]
4505 (spitzpm_read_devdata+0x5c/0xc4)
4506 [<c00262e0>] (spitzpm_read_devdata) from [<c0024094>]
4507 (sharpsl_check_battery_temp+0x78/0x110)
4508 [<c0024094>] (sharpsl_check_battery_temp) from [<c0024f9c>]
4509 (sharpsl_charge_toggle+0x48/0x110)
4510 [<c0024f9c>] (sharpsl_charge_toggle) from [<c004429c>]
4511 (process_one_work+0x14c/0x48c)
4512 [<c004429c>] (process_one_work) from [<c0044618>] (worker_thread+0x3c/0x5d4)
4513 [<c0044618>] (worker_thread) from [<c004a238>] (kthread+0xd0/0xec)
4514 [<c004a238>] (kthread) from [<c000a670>] (ret_from_fork+0x14/0x24)
4515
4516 This can occur because the SPI controller driver (SPI_PXA2XX) is built as
4517 module and thus not necessarily loaded. While building SPI_PXA2XX into the
4518 kernel would make the problem disappear, it appears prudent to ensure that
4519 the driver is instantiated before accessing its data structures.
4520
4521 Cc: Arnd Bergmann <arnd@arndb.de>
4522 Cc: stable@vger.kernel.org
4523 Signed-off-by: Guenter Roeck <linux@roeck-us.net>
4524
4525 drivers/hwmon/max1111.c | 6 ++++++
4526 1 file changed, 6 insertions(+)
4527
4528 commit f75f1af7a0b4be055855ca5120ee78174f3370f2
4529 Author: Nicolai Stange <nicstange@gmail.com>
4530 Date: Sun Mar 20 23:23:46 2016 +0100
4531
4532 PKCS#7: pkcs7_validate_trust(): initialize the _trusted output argument
4533
4534 Despite what the DocBook comment to pkcs7_validate_trust() says, the
4535 *_trusted argument is never set to false.
4536
4537 pkcs7_validate_trust() only positively sets *_trusted upon encountering
4538 a trusted PKCS#7 SignedInfo block.
4539
4540 This is quite unfortunate since its callers, system_verify_data() for
4541 example, depend on pkcs7_validate_trust() clearing *_trusted on non-trust.
4542
4543 Indeed, UBSAN splats when attempting to load the uninitialized local
4544 variable 'trusted' from system_verify_data() in pkcs7_validate_trust():
4545
4546 UBSAN: Undefined behaviour in crypto/asymmetric_keys/pkcs7_trust.c:194:14
4547 load of value 82 is not a valid value for type '_Bool'
4548 [...]
4549 Call Trace:
4550 [<ffffffff818c4d35>] dump_stack+0xbc/0x117
4551 [<ffffffff818c4c79>] ? _atomic_dec_and_lock+0x169/0x169
4552 [<ffffffff8194113b>] ubsan_epilogue+0xd/0x4e
4553 [<ffffffff819419fa>] __ubsan_handle_load_invalid_value+0x111/0x158
4554 [<ffffffff819418e9>] ? val_to_string.constprop.12+0xcf/0xcf
4555 [<ffffffff818334a4>] ? x509_request_asymmetric_key+0x114/0x370
4556 [<ffffffff814b83f0>] ? kfree+0x220/0x370
4557 [<ffffffff818312c2>] ? public_key_verify_signature_2+0x32/0x50
4558 [<ffffffff81835e04>] pkcs7_validate_trust+0x524/0x5f0
4559 [<ffffffff813c391a>] system_verify_data+0xca/0x170
4560 [<ffffffff813c3850>] ? top_trace_array+0x9b/0x9b
4561 [<ffffffff81510b29>] ? __vfs_read+0x279/0x3d0
4562 [<ffffffff8129372f>] mod_verify_sig+0x1ff/0x290
4563 [...]
4564
4565 The implication is that pkcs7_validate_trust() effectively grants trust
4566 when it really shouldn't have.
4567
4568 Fix this by explicitly setting *_trusted to false at the very beginning
4569 of pkcs7_validate_trust().
4570
4571 Cc: <stable@vger.kernel.org>
4572 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
4573 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4574
4575 crypto/asymmetric_keys/pkcs7_trust.c | 2 ++
4576 1 file changed, 2 insertions(+)
4577
4578 commit 1052826f7352ccc98167129b0b83222f45d50046
4579 Author: Florian Westphal <fw@strlen.de>
4580 Date: Tue Mar 22 18:02:49 2016 +0100
4581
4582 netfilter: x_tables: validate e->target_offset early
4583
4584 We should check that e->target_offset is sane before
4585 mark_source_chains gets called since it will fetch the target entry
4586 for loop detection.
4587
4588 Signed-off-by: Florian Westphal <fw@strlen.de>
4589 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
4590
4591 net/ipv4/netfilter/arp_tables.c | 17 ++++++++---------
4592 net/ipv4/netfilter/ip_tables.c | 17 ++++++++---------
4593 net/ipv6/netfilter/ip6_tables.c | 17 ++++++++---------
4594 3 files changed, 24 insertions(+), 27 deletions(-)
4595
4596 commit b35d19509e8dab157214e46dd24314663ccf554f
4597 Author: Florian Westphal <fw@strlen.de>
4598 Date: Tue Mar 22 18:02:50 2016 +0100
4599
4600 netfilter: x_tables: make sure e->next_offset covers remaining blob size
4601
4602 Otherwise this function may read data beyond the ruleset blob.
4603
4604 Signed-off-by: Florian Westphal <fw@strlen.de>
4605 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
4606
4607 net/ipv4/netfilter/arp_tables.c | 6 ++++--
4608 net/ipv4/netfilter/ip_tables.c | 6 ++++--
4609 net/ipv6/netfilter/ip6_tables.c | 6 ++++--
4610 3 files changed, 12 insertions(+), 6 deletions(-)
4611
4612 commit 4d7642ed66b69140733a7b51fcd6d37ce4d4514c
4613 Author: Florian Westphal <fw@strlen.de>
4614 Date: Tue Mar 22 18:02:52 2016 +0100
4615
4616 netfilter: x_tables: fix unconditional helper
4617
4618 Ben Hawkes says:
4619
4620 In the mark_source_chains function (net/ipv4/netfilter/ip_tables.c) it
4621 is possible for a user-supplied ipt_entry structure to have a large
4622 next_offset field. This field is not bounds checked prior to writing a
4623 counter value at the supplied offset.
4624
4625 Problem is that mark_source_chains should not have been called --
4626 the rule doesn't have a next entry, so its supposed to return
4627 an absolute verdict of either ACCEPT or DROP.
4628
4629 However, the function conditional() doesn't work as the name implies.
4630 It only checks that the rule is using wildcard address matching.
4631
4632 However, an unconditional rule must also not be using any matches
4633 (no -m args).
4634
4635 The underflow validator only checked the addresses, therefore
4636 passing the 'unconditional absolute verdict' test, while
4637 mark_source_chains also tested for presence of matches, and thus
4638 proceeeded to the next (not-existent) rule.
4639
4640 Unify this so that all the callers have same idea of 'unconditional rule'.
4641
4642 Reported-by: Ben Hawkes <hawkes@google.com>
4643 Signed-off-by: Florian Westphal <fw@strlen.de>
4644 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
4645
4646 net/ipv4/netfilter/arp_tables.c | 18 +++++++++---------
4647 net/ipv4/netfilter/ip_tables.c | 23 +++++++++++------------
4648 net/ipv6/netfilter/ip6_tables.c | 23 +++++++++++------------
4649 3 files changed, 31 insertions(+), 33 deletions(-)
4650
4651 commit e3e51682563f1453dfc4b9ef88b29af4d1a78e78
4652 Author: Pablo Neira Ayuso <pablo@netfilter.org>
4653 Date: Thu Mar 24 21:29:53 2016 +0100
4654
4655 netfilter: x_tables: enforce nul-terminated table name from getsockopt GET_ENTRIES
4656
4657 Make sure the table names via getsockopt GET_ENTRIES is nul-terminated
4658 in ebtables and all the x_tables variants and their respective compat
4659 code. Uncovered by KASAN.
4660
4661 Reported-by: Baozeng Ding <sploving1@gmail.com>
4662 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
4663
4664 net/bridge/netfilter/ebtables.c | 4 ++++
4665 net/ipv4/netfilter/arp_tables.c | 2 ++
4666 net/ipv4/netfilter/ip_tables.c | 2 ++
4667 net/ipv6/netfilter/ip6_tables.c | 2 ++
4668 4 files changed, 10 insertions(+)
4669
4670 commit 7742471b674597627f8f608f6a89c6e5bbd6533d
4671 Author: Nicolai Stange <nicstange@gmail.com>
4672 Date: Fri Mar 25 14:22:14 2016 -0700
4673
4674 mm/filemap: generic_file_read_iter(): check for zero reads unconditionally
4675
4676 If
4677 - generic_file_read_iter() gets called with a zero read length,
4678 - the read offset is at a page boundary,
4679 - IOCB_DIRECT is not set
4680 - and the page in question hasn't made it into the page cache yet,
4681 then do_generic_file_read() will trigger a readahead with a req_size hint
4682 of zero.
4683
4684 Since roundup_pow_of_two(0) is undefined, UBSAN reports
4685
4686 UBSAN: Undefined behaviour in include/linux/log2.h:63:13
4687 shift exponent 64 is too large for 64-bit type 'long unsigned int'
4688 CPU: 3 PID: 1017 Comm: sa1 Tainted: G L 4.5.0-next-20160318+ #14
4689 [...]
4690 Call Trace:
4691 [...]
4692 [<ffffffff813ef61a>] ondemand_readahead+0x3aa/0x3d0
4693 [<ffffffff813ef61a>] ? ondemand_readahead+0x3aa/0x3d0
4694 [<ffffffff813c73bd>] ? find_get_entry+0x2d/0x210
4695 [<ffffffff813ef9c3>] page_cache_sync_readahead+0x63/0xa0
4696 [<ffffffff813cc04d>] do_generic_file_read+0x80d/0xf90
4697 [<ffffffff813cc955>] generic_file_read_iter+0x185/0x420
4698 [...]
4699 [<ffffffff81510b06>] __vfs_read+0x256/0x3d0
4700 [...]
4701
4702 when get_init_ra_size() gets called from ondemand_readahead().
4703
4704 The net effect is that the initial readahead size is arch dependent for
4705 requested read lengths of zero: for example, since
4706
4707 1UL << (sizeof(unsigned long) * 8)
4708
4709 evaluates to 1 on x86 while its result is 0 on ARMv7, the initial readahead
4710 size becomes 4 on the former and 0 on the latter.
4711
4712 What's more, whether or not the file access timestamp is updated for zero
4713 length reads is decided differently for the two cases of IOCB_DIRECT
4714 being set or cleared: in the first case, generic_file_read_iter()
4715 explicitly skips updating that timestamp while in the latter case, it is
4716 always updated through the call to do_generic_file_read().
4717
4718 According to POSIX, zero length reads "do not modify the last data access
4719 timestamp" and thus, the IOCB_DIRECT behaviour is POSIXly correct.
4720
4721 Let generic_file_read_iter() unconditionally check the requested read
4722 length at its entry and return immediately with success if it is zero.
4723
4724 Signed-off-by: Nicolai Stange <nicstange@gmail.com>
4725 Cc: Al Viro <viro@zeniv.linux.org.uk>
4726 Reviewed-by: Jan Kara <jack@suse.cz>
4727 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
4728 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
4729
4730 mm/filemap.c | 7 ++++---
4731 1 file changed, 4 insertions(+), 3 deletions(-)
4732
4733 commit 604785419da498d7e876a0191b2e11626db706bb
4734 Author: Oliver Neukum <oneukum@suse.com>
4735 Date: Thu Mar 17 14:00:17 2016 -0700
4736
4737 Input: ims-pcu - sanity check against missing interfaces
4738
4739 A malicious device missing interface can make the driver oops.
4740 Add sanity checking.
4741
4742 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
4743 CC: stable@vger.kernel.org
4744 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
4745
4746 drivers/input/misc/ims-pcu.c | 4 ++++
4747 1 file changed, 4 insertions(+)
4748
4749 commit 24c3f4f6652f07eb2c3deea1488ff4de00592e80
4750 Author: Vladis Dronov <vdronov@redhat.com>
4751 Date: Wed Mar 23 11:53:46 2016 -0700
4752
4753 Input: ati_remote2 - fix crashes on detecting device with invalid descriptor
4754
4755 The ati_remote2 driver expects at least two interfaces with one
4756 endpoint each. If given malicious descriptor that specify one
4757 interface or no endpoints, it will crash in the probe function.
4758 Ensure there is at least two interfaces and one endpoint for each
4759 interface before using it.
4760
4761 The full disclosure: http://seclists.org/bugtraq/2016/Mar/90
4762
4763 Reported-by: Ralf Spenneberg <ralf@spenneberg.net>
4764 Signed-off-by: Vladis Dronov <vdronov@redhat.com>
4765 Cc: stable@vger.kernel.org
4766 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
4767
4768 drivers/input/misc/ati_remote2.c | 36 ++++++++++++++++++++++++++++++------
4769 1 file changed, 30 insertions(+), 6 deletions(-)
4770
4771 commit 262df604d00e72a4b930fbf7fe3a770f0196a5a5
4772 Author: Oliver Neukum <oneukum@suse.com>
4773 Date: Wed Mar 23 14:36:56 2016 -0700
4774
4775 Input: sur40 - fix DMA on stack
4776
4777 During the initialisation the driver uses a buffer on the stack for DMA.
4778 That violates the cache coherency rules. The fix is to allocate the buffer
4779 with kmalloc().
4780
4781 Signed-off-by: Oliver Neukum <ONeukum@suse.com>
4782 Signed-off-by: Dmitry Torokhov <dmitry.torokhov@gmail.com>
4783
4784 drivers/input/touchscreen/sur40.c | 21 ++++++++++++++-------
4785 1 file changed, 14 insertions(+), 7 deletions(-)
4786
4787 commit 015dd03669b2ab646723f6b123377e4ef5694a10
4788 Author: Haiyang Zhang <haiyangz@microsoft.com>
4789 Date: Wed Mar 23 09:43:10 2016 -0700
4790
4791 hv_netvsc: Fix the array sizes to be max supported channels
4792
4793 The VRSS_CHANNEL_MAX is the max number of channels supported by Hyper-V
4794 hosts. We use it for the related array sizes instead of using NR_CPUS,
4795 which may be set to several thousands.
4796 This patch reduces possible memory allocation failures.
4797
4798 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
4799 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
4800 Signed-off-by: David S. Miller <davem@davemloft.net>
4801
4802 drivers/net/hyperv/hyperv_net.h | 7 ++++---
4803 drivers/net/hyperv/rndis_filter.c | 4 ++--
4804 2 files changed, 6 insertions(+), 5 deletions(-)
4805
4806 commit a850a78d6393ef22a970266cbbefdf3dba0267b5
4807 Author: Haiyang Zhang <haiyangz@microsoft.com>
4808 Date: Wed Mar 23 09:43:09 2016 -0700
4809
4810 hv_netvsc: Fix accessing freed memory in netvsc_change_mtu()
4811
4812 struct netvsc_device is freed in rndis_filter_device_remove(). So we save
4813 the nvdev->num_chn into a temp variable for later usage.
4814
4815 (Please also include this patch into stable branch.)
4816
4817 Signed-off-by: Haiyang Zhang <haiyangz@microsoft.com>
4818 Reviewed-by: K. Y. Srinivasan <kys@microsoft.com>
4819 Signed-off-by: David S. Miller <davem@davemloft.net>
4820
4821 drivers/net/hyperv/netvsc_drv.c | 5 ++++-
4822 1 file changed, 4 insertions(+), 1 deletion(-)
4823
4824 commit 7409626e43fe871cede30ac926425938f3ccddaf
4825 Author: Guillaume Nault <g.nault@alphalink.fr>
4826 Date: Wed Mar 23 16:38:55 2016 +0100
4827
4828 ppp: take reference on channels netns
4829
4830 Let channels hold a reference on their network namespace.
4831 Some channel types, like ppp_async and ppp_synctty, can have their
4832 userspace controller running in a different namespace. Therefore they
4833 can't rely on them to preclude their netns from being removed from
4834 under them.
4835
4836 ==================================================================
4837 BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
4838 addr ffff880064e217e0
4839 Read of size 8 by task syz-executor/11581
4840 =============================================================================
4841 BUG net_namespace (Not tainted): kasan: bad access detected
4842 -----------------------------------------------------------------------------
4843
4844 Disabling lock debugging due to kernel taint
4845 INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
4846 [< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
4847 [< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
4848 [< inline >] slab_alloc_node kernel/mm/slub.c:2532
4849 [< inline >] slab_alloc kernel/mm/slub.c:2574
4850 [< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
4851 [< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
4852 [< inline >] net_alloc kernel/net/core/net_namespace.c:325
4853 [< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
4854 [< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
4855 [< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
4856 [< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
4857 [< inline >] copy_process kernel/kernel/fork.c:1274
4858 [< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
4859 [< inline >] SYSC_clone kernel/kernel/fork.c:1832
4860 [< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
4861 [< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
4862
4863 INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
4864 [< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
4865 [< inline >] slab_free kernel/mm/slub.c:2805
4866 [< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
4867 [< inline >] net_free kernel/net/core/net_namespace.c:341
4868 [< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
4869 [< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
4870 [< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
4871 [< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
4872 [< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
4873 [< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
4874 INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
4875 flags=0x5fffc0000004080
4876 INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
4877
4878 CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
4879 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
4880 rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
4881 00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
4882 ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
4883 ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
4884 Call Trace:
4885 [< inline >] __dump_stack kernel/lib/dump_stack.c:15
4886 [<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
4887 [<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
4888 [<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
4889 [< inline >] print_address_description kernel/mm/kasan/report.c:138
4890 [<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
4891 [< inline >] kasan_report kernel/mm/kasan/report.c:259
4892 [<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
4893 [< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
4894 [<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
4895 [< inline >] ppp_pernet kernel/include/linux/compiler.h:218
4896 [<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
4897 [< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
4898 [<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
4899 [<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
4900 [<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
4901 [<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
4902 [<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
4903 [<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
4904 [<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
4905 [<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
4906 [<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
4907 [<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
4908 [<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
4909 [< inline >] exit_task_work kernel/include/linux/task_work.h:21
4910 [<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
4911 [<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
4912 [<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
4913 [<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
4914 [<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
4915 [<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
4916 [<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
4917 [< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
4918 [<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
4919 [<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
4920 [<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
4921 [<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
4922 [<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
4923 [< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
4924 [<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
4925 [< inline >] ? context_switch kernel/kernel/sched/core.c:2807
4926 [<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
4927 [<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
4928 [< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
4929 [<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
4930 [<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
4931 Memory state around the buggy address:
4932 ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
4933 ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
4934 >ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
4935 ^
4936 ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
4937 ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
4938 ==================================================================
4939
4940 Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
4941 Reported-by: Baozeng Ding <sploving1@gmail.com>
4942 Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
4943 Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
4944 Signed-off-by: David S. Miller <davem@davemloft.net>
4945
4946 drivers/net/ppp/ppp_generic.c | 4 +++-
4947 1 file changed, 3 insertions(+), 1 deletion(-)
4948
4949 commit bfb890c1ac9d29b377f6bec4a5aab51d053114c4
4950 Author: Herbert Xu <herbert@gondor.apana.org.au>
4951 Date: Wed Mar 16 17:06:01 2016 +0800
4952
4953 eCryptfs: Use skcipher and shash
4954
4955 eCryptfs: Fix null pointer dereference on kzalloc error path
4956
4957 The conversion to skcipher and shash added a couple of null pointer
4958 dereference bugs on the kzalloc failure path. This patch fixes them.
4959
4960 Fixes: 3095e8e366b4 ("eCryptfs: Use skcipher and shash")
4961 Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
4962 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4963
4964 fs/ecryptfs/keystore.c | 6 ++----
4965 1 file changed, 2 insertions(+), 4 deletions(-)
4966
4967 commit 58a8421ae537e0609c4ff59bf6b11be869a43cc6
4968 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
4969 Date: Thu Mar 17 10:21:34 2016 +0100
4970
4971 crypto: marvell/cesa - fix memory leak
4972
4973 Crypto requests are not guaranteed to be finalized (->final() call),
4974 and can be freed at any moment, without getting any notification from
4975 the core. This can lead to memory leaks of the ->cache buffer.
4976
4977 Make this buffer part of the request object, and allocate an extra buffer
4978 from the DMA cache pool when doing DMA operations.
4979
4980 As a side effect, this patch also fixes another bug related to cache
4981 allocation and DMA operations. When the core allocates a new request and
4982 import an existing state, a cache buffer can be allocated (depending
4983 on the state). The problem is, at that very moment, we don't know yet
4984 whether the request will use DMA or not, and since everything is
4985 likely to be initialized to zero, mv_cesa_ahash_alloc_cache() thinks it
4986 should allocate a buffer for standard operation. But when
4987 mv_cesa_ahash_free_cache() is called, req->type has been set to
4988 CESA_DMA_REQ in the meantime, thus leading to an invalind dma_pool_free()
4989 call (the buffer passed in argument has not been allocated from the pool).
4990
4991 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
4992 Reported-by: Gregory CLEMENT <gregory.clement@free-electrons.com>
4993 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
4994
4995 drivers/crypto/marvell/cesa.h | 3 +-
4996 drivers/crypto/marvell/hash.c | 86 +++++++++----------------------------------
4997 2 files changed, 20 insertions(+), 69 deletions(-)
4998
4999 commit 1ec604f99895b9c37f26a692ff83a7da02d667fd
5000 Author: Boris BREZILLON <boris.brezillon@free-electrons.com>
5001 Date: Thu Mar 17 10:21:35 2016 +0100
5002
5003 crypto: marvell/cesa - initialize hash states
5004
5005 ->export() might be called before we have done an update operation,
5006 and in this case the ->state field is left uninitialized.
5007 Put the correct default value when initializing the request.
5008
5009 Signed-off-by: Boris Brezillon <boris.brezillon@free-electrons.com>
5010 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
5011
5012 drivers/crypto/marvell/hash.c | 20 ++++++++++++++++++++
5013 1 file changed, 20 insertions(+)
5014
5015 commit 23879f055d23e82c2f78cceca22c33e631973977
5016 Author: David S. Miller <davem@davemloft.net>
5017 Date: Sun Mar 13 23:28:00 2016 -0400
5018
5019 ipv4: Don't do expensive useless work during inetdev destroy.
5020
5021 When an inetdev is destroyed, every address assigned to the interface
5022 is removed. And in this scenerio we do two pointless things which can
5023 be very expensive if the number of assigned interfaces is large:
5024
5025 1) Address promotion. We are deleting all addresses, so there is no
5026 point in doing this.
5027
5028 2) A full nf conntrack table purge for every address. We only need to
5029 do this once, as is already caught by the existing
5030 masq_dev_notifier so masq_inet_event() can skip this.
5031
5032 Reported-by: Solar Designer <solar@openwall.com>
5033 Signed-off-by: David S. Miller <davem@davemloft.net>
5034 Tested-by: Cyrill Gorcunov <gorcunov@openvz.org>
5035
5036 net/ipv4/devinet.c | 4 ++++
5037 net/ipv4/fib_frontend.c | 4 ++++
5038 net/ipv4/netfilter/nf_nat_masquerade_ipv4.c | 12 ++++++++++--
5039 3 files changed, 18 insertions(+), 2 deletions(-)
5040
5041 commit 60394231e840e884024592a76a6c5612433d3756
5042 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
5043 Date: Tue Mar 8 10:34:28 2016 -0300
5044
5045 sctp: fix copying more bytes than expected in sctp_add_bind_addr
5046
5047 Dmitry reported that sctp_add_bind_addr may read more bytes than
5048 expected in case the parameter is a IPv4 addr supplied by the user
5049 through calls such as sctp_bindx_add(), because it always copies
5050 sizeof(union sctp_addr) while the buffer may be just a struct
5051 sockaddr_in, which is smaller.
5052
5053 This patch then fixes it by limiting the memcpy to the min between the
5054 union size and a (new parameter) provided addr size. Where possible this
5055 parameter still is the size of that union, except for reading from
5056 user-provided buffers, which then it accounts for protocol type.
5057
5058 Reported-by: Dmitry Vyukov <dvyukov@google.com>
5059 Tested-by: Dmitry Vyukov <dvyukov@google.com>
5060 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
5061 Signed-off-by: David S. Miller <davem@davemloft.net>
5062
5063 include/net/sctp/structs.h | 2 +-
5064 net/sctp/bind_addr.c | 14 ++++++++------
5065 net/sctp/protocol.c | 1 +
5066 net/sctp/sm_make_chunk.c | 3 ++-
5067 net/sctp/socket.c | 4 +++-
5068 5 files changed, 15 insertions(+), 9 deletions(-)
5069
5070 commit 9831caa50e1453818c5ec618890291f028b7992f
5071 Author: Brad Spengler <spender@grsecurity.net>
5072 Date: Mon Mar 28 19:20:28 2016 -0400
5073
5074 Also allow /bin/false as needed by systemd
5075
5076 kernel/kmod.c | 2 +-
5077 1 file changed, 1 insertion(+), 1 deletion(-)
5078
5079 commit bb38a61b496a3f09f4d7b93d2f0fe15476918147
5080 Author: Brad Spengler <spender@grsecurity.net>
5081 Date: Tue Mar 22 16:59:43 2016 -0400
5082
5083 Fix size_overflow FP reported by marcan at:
5084 https://forums.grsecurity.net/viewtopic.php?f=3&t=4426
5085
5086 net/ipv6/xfrm6_mode_transport.c | 2 +-
5087 1 file changed, 1 insertion(+), 1 deletion(-)
5088
5089 commit 523a36a9c845da3051e58c6767c2e1a0f640998a
5090 Merge: 0d0ec9e c0b77a7
5091 Author: Brad Spengler <spender@grsecurity.net>
5092 Date: Wed Mar 16 20:20:40 2016 -0400
5093
5094 Merge branch 'pax-test' into grsec-test
5095
5096 commit c0b77a7cb578199f0b7dc90768a13ca6c044aba9
5097 Merge: 10d57c1 0d19123
5098 Author: Brad Spengler <spender@grsecurity.net>
5099 Date: Wed Mar 16 20:20:27 2016 -0400
5100
5101 Merge branch 'linux-4.4.y' into pax-test
5102
5103 commit 0d0ec9ee83144ab839710a01cfd746bd78257394
5104 Author: Brad Spengler <spender@grsecurity.net>
5105 Date: Mon Mar 14 20:15:47 2016 -0400
5106
5107 Invert logic to clean up code
5108
5109 fs/namei.c | 32 +++++++-------------------------
5110 grsecurity/grsec_chroot.c | 10 +++++-----
5111 2 files changed, 12 insertions(+), 30 deletions(-)
5112
5113 commit 39e0e623c84863af7b3ace759b583ff938fde2b7
5114 Author: Brad Spengler <spender@grsecurity.net>
5115 Date: Mon Mar 14 19:59:36 2016 -0400
5116
5117 compile fix
5118
5119 fs/namei.c | 5 ++---
5120 1 file changed, 2 insertions(+), 3 deletions(-)
5121
5122 commit 2b3ad8bc095fea829275b7fcc7e5671677b8ed33
5123 Author: Brad Spengler <spender@grsecurity.net>
5124 Date: Mon Mar 14 19:57:53 2016 -0400
5125
5126 Also handle renames
5127
5128 fs/namei.c | 9 +++++++++
5129 1 file changed, 9 insertions(+)
5130
5131 commit 54dfd13b19743d4a340de0cd5683b5bde44e7d9c
5132 Author: Brad Spengler <spender@grsecurity.net>
5133 Date: Mon Mar 14 19:45:56 2016 -0400
5134
5135 Add additional check to cover lookup family of functions
5136
5137 fs/namei.c | 9 +++++++++
5138 1 file changed, 9 insertions(+)
5139
5140 commit c3df846baa7873fb99401136f220676b87452918
5141 Author: Brad Spengler <spender@grsecurity.net>
5142 Date: Mon Mar 14 18:42:37 2016 -0400
5143
5144 compile fix
5145
5146 fs/namei.c | 2 +-
5147 1 file changed, 1 insertion(+), 1 deletion(-)
5148
5149 commit 384ea9c0ef9df4298dfa3a71948c08e70f1092bf
5150 Author: Brad Spengler <spender@grsecurity.net>
5151 Date: Mon Mar 14 18:34:40 2016 -0400
5152
5153 Fix recent chroot check on the create side, as reported by
5154 Toralf Foerster
5155
5156 fs/namei.c | 26 ++++++++++++++++----------
5157 1 file changed, 16 insertions(+), 10 deletions(-)
5158
5159 commit 82e7dc61a626c47887d392ff9cd35b104f01fd25
5160 Author: Paolo Bonzini <pbonzini@redhat.com>
5161 Date: Tue Mar 8 12:13:39 2016 +0100
5162
5163 KVM: MMU: fix ept=0/pte.u=1/pte.w=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0 combo
5164
5165 Yes, all of these are needed. :) This is admittedly a bit odd, but
5166 kvm-unit-tests access.flat tests this if you run it with "-cpu host"
5167 and of course ept=0.
5168
5169 KVM runs the guest with CR0.WP=1, so it must handle supervisor writes
5170 specially when pte.u=1/pte.w=0/CR0.WP=0. Such writes cause a fault
5171 when U=1 and W=0 in the SPTE, but they must succeed because CR0.WP=0.
5172 When KVM gets the fault, it sets U=0 and W=1 in the shadow PTE and
5173 restarts execution. This will still cause a user write to fault, while
5174 supervisor writes will succeed. User reads will fault spuriously now,
5175 and KVM will then flip U and W again in the SPTE (U=1, W=0). User reads
5176 will be enabled and supervisor writes disabled, going back to the
5177 originary situation where supervisor writes fault spuriously.
5178
5179 When SMEP is in effect, however, U=0 will enable kernel execution of
5180 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
5181 with U=0. If the guest has not enabled NX, the result is a continuous
5182 stream of page faults due to the NX bit being reserved.
5183
5184 The fix is to force EFER.NX=1 even if the CPU is taking care of the EFER
5185 switch. (All machines with SMEP have the CPU_LOAD_IA32_EFER vm-entry
5186 control, so they do not use user-return notifiers for EFER---if they did,
5187 EFER.NX would be forced to the same value as the host).
5188
5189 There is another bug in the reserved bit check, which I've split to a
5190 separate patch for easier application to stable kernels.
5191
5192 Cc: stable@vger.kernel.org
5193 Cc: Andy Lutomirski <luto@amacapital.net>
5194 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.intel.com>
5195 Fixes: f6577a5fa15d82217ca73c74cd2dcbc0f6c781dd
5196 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5197
5198 Documentation/virtual/kvm/mmu.txt | 3 ++-
5199 arch/x86/kvm/vmx.c | 36 +++++++++++++++++++++++-------------
5200 2 files changed, 25 insertions(+), 14 deletions(-)
5201
5202 commit 802a88e57b141e9643e93afb7805813ad8da22f3
5203 Author: Paolo Bonzini <pbonzini@redhat.com>
5204 Date: Wed Mar 9 14:28:02 2016 +0100
5205
5206 KVM: MMU: fix reserved bit check for ept=0/CR0.WP=0/CR4.SMEP=1/EFER.NX=0
5207
5208 KVM has special logic to handle pages with pte.u=1 and pte.w=0 when
5209 CR0.WP=1. These pages' SPTEs flip continuously between two states:
5210 U=1/W=0 (user and supervisor reads allowed, supervisor writes not allowed)
5211 and U=0/W=1 (supervisor reads and writes allowed, user writes not allowed).
5212
5213 When SMEP is in effect, however, U=0 will enable kernel execution of
5214 this page. To avoid this, KVM also sets NX=1 in the shadow PTE together
5215 with U=0, making the two states U=1/W=0/NX=gpte.NX and U=0/W=1/NX=1.
5216 When guest EFER has the NX bit cleared, the reserved bit check thinks
5217 that the latter state is invalid; teach it that the smep_andnot_wp case
5218 will also use the NX bit of SPTEs.
5219
5220 Cc: stable@vger.kernel.org
5221 Reviewed-by: Xiao Guangrong <guangrong.xiao@linux.inel.com>
5222 Fixes: c258b62b264fdc469b6d3610a907708068145e3b
5223 Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
5224
5225 arch/x86/kvm/mmu.c | 4 +++-
5226 1 file changed, 3 insertions(+), 1 deletion(-)
5227
5228 commit 3925851224428c1d2bca32cf33821befb947c4f3
5229 Author: Ming Lei <ming.lei@canonical.com>
5230 Date: Sat Mar 12 22:56:19 2016 +0800
5231
5232 block: don't optimize for non-cloned bio in bio_get_last_bvec()
5233
5234 For !BIO_CLONED bio, we can use .bi_vcnt safely, but it
5235 doesn't mean we can just simply return .bi_io_vec[.bi_vcnt - 1]
5236 because the start postion may have been moved in the middle of
5237 the bvec, such as splitting in the middle of bvec.
5238
5239 Fixes: 7bcd79ac50d9(block: bio: introduce helpers to get the 1st and last bvec)
5240 Cc: stable@vger.kernel.org
5241 Reported-by: Kent Overstreet <kent.overstreet@gmail.com>
5242 Signed-off-by: Ming Lei <ming.lei@canonical.com>
5243 Signed-off-by: Jens Axboe <axboe@fb.com>
5244
5245 include/linux/bio.h | 5 -----
5246 1 file changed, 5 deletions(-)
5247
5248 commit db541463b4a0926bebdbac743c8736fb9e903d58
5249 Author: Borislav Petkov <bp@alien8.de>
5250 Date: Fri Mar 11 12:32:06 2016 +0100
5251
5252 x86/fpu: Fix eager-FPU handling on legacy FPU machines
5253
5254 i486 derived cores like Intel Quark support only the very old,
5255 legacy x87 FPU (FSAVE/FRSTOR, CPUID bit FXSR is not set), and
5256 our FPU code wasn't handling the saving and restoring there
5257 properly in the 'eagerfpu' case.
5258
5259 So after we made eagerfpu the default for all CPU types:
5260
5261 58122bf1d856 x86/fpu: Default eagerfpu=on on all CPUs
5262
5263 these old FPU designs broke. First, Andy Shevchenko reported a splat:
5264
5265 WARNING: CPU: 0 PID: 823 at arch/x86/include/asm/fpu/internal.h:163 fpu__clear+0x8c/0x160
5266
5267 which was us trying to execute FXRSTOR on those machines even though
5268 they don't support it.
5269
5270 After taking care of that, Bryan O'Donoghue reported that a simple FPU
5271 test still failed because we weren't initializing the FPU state properly
5272 on those machines.
5273
5274 Take care of all that.
5275
5276 Reported-and-tested-by: Bryan O'Donoghue <pure.logic@nexus-software.ie>
5277 Reported-by: Andy Shevchenko <andy.shevchenko@gmail.com>
5278 Signed-off-by: Borislav Petkov <bp@suse.de>
5279 Acked-by: Linus Torvalds <torvalds@linux-foundation.org>
5280 Cc: Andrew Morton <akpm@linux-foundation.org>
5281 Cc: Andy Lutomirski <luto@amacapital.net>
5282 Cc: Borislav Petkov <bp@alien8.de>
5283 Cc: Brian Gerst <brgerst@gmail.com>
5284 Cc: Dave Hansen <dave.hansen@linux.intel.com>
5285 Cc: Denys Vlasenko <dvlasenk@redhat.com>
5286 Cc: Fenghua Yu <fenghua.yu@intel.com>
5287 Cc: H. Peter Anvin <hpa@zytor.com>
5288 Cc: Oleg Nesterov <oleg@redhat.com>
5289 Cc: Peter Zijlstra <peterz@infradead.org>
5290 Cc: Quentin Casasnovas <quentin.casasnovas@oracle.com>
5291 Cc: Thomas Gleixner <tglx@linutronix.de>
5292 Cc: Yu-cheng <yu-cheng.yu@intel.com>
5293 Link: http://lkml.kernel.org/r/20160311113206.GD4312@pd.tnic
5294 Signed-off-by: Ingo Molnar <mingo@kernel.org>
5295
5296 arch/x86/kernel/fpu/core.c | 4 +++-
5297 arch/x86/kernel/fpu/init.c | 2 +-
5298 2 files changed, 4 insertions(+), 2 deletions(-)
5299
5300 commit 8fed14e935cb62d2d46e99793d728dc7760dcc87
5301 Author: Brad Spengler <spender@grsecurity.net>
5302 Date: Sun Mar 13 11:35:56 2016 -0400
5303
5304 Compile fixes
5305
5306 fs/namei.c | 2 +-
5307 grsecurity/grsec_chroot.c | 2 +-
5308 include/linux/grsecurity.h | 2 +-
5309 3 files changed, 3 insertions(+), 3 deletions(-)
5310
5311 commit aab25a3496c4683c5858056960010119fb7d9a5a
5312 Author: Brad Spengler <spender@grsecurity.net>
5313 Date: Sun Mar 13 10:53:59 2016 -0400
5314
5315 Use fput instead of put_filp()
5316
5317 fs/namei.c | 4 ++--
5318 1 file changed, 2 insertions(+), 2 deletions(-)
5319
5320 commit 928ddec9dfe5415dff82d941c3b3e76ee6f48761
5321 Author: Brad Spengler <spender@grsecurity.net>
5322 Date: Sun Mar 13 10:30:54 2016 -0400
5323
5324 Update MPROTECT_COMPAT config description, disable by default
5325
5326 security/Kconfig | 18 ++++++------------
5327 1 file changed, 6 insertions(+), 12 deletions(-)
5328
5329 commit 4cc29af2e81e7a4bdfab1afedfdedca6e23362d5
5330 Author: Brad Spengler <spender@grsecurity.net>
5331 Date: Sun Mar 13 10:35:55 2016 -0400
5332
5333 As reported by Jann Horn, chroot scenarios where the chrooting application
5334 brings in a directory fd can be used to access any file outside of the chroot
5335 via *at syscalls. To maintain compatibility with Chromium and other apps,
5336 we specifically only disallow relative accesses off a directory fd when the
5337 final path is not located under that directory described by the fd and exists
5338 outside of the chroot. This additional restriction will exist under the
5339 current GRKERNSEC_CHROOT_FCHDIR option.
5340
5341 fs/namei.c | 9 +++++++++
5342 grsecurity/Kconfig | 10 ++++++----
5343 grsecurity/grsec_chroot.c | 39 +++++++++++++++++++++++++++++++++++++++
5344 include/linux/grmsg.h | 1 +
5345 include/linux/grsecurity.h | 1 +
5346 5 files changed, 56 insertions(+), 4 deletions(-)
5347
5348 commit 7d02a991213f0b07a3677dcc93cdafc3ac309142
5349 Author: Brad Spengler <spender@grsecurity.net>
5350 Date: Thu Mar 10 22:17:16 2016 -0500
5351
5352 Update size_overflow hash table
5353
5354 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
5355 1 file changed, 1 insertion(+)
5356
5357 commit 29f25ddda6a5625340df26beb394279fefea2b49
5358 Author: Brad Spengler <spender@grsecurity.net>
5359 Date: Thu Mar 10 22:16:04 2016 -0500
5360
5361 Fix module support
5362
5363 kernel/module.c | 3 ++-
5364 1 file changed, 2 insertions(+), 1 deletion(-)
5365
5366 commit b057a45636b626e7eaf03077ed0916b95fea054c
5367 Merge: ba5ee94 10d57c1
5368 Author: Brad Spengler <spender@grsecurity.net>
5369 Date: Thu Mar 10 21:36:10 2016 -0500
5370
5371 Merge branch 'pax-test' into grsec-test
5372
5373 commit 10d57c107e7fabffbe616b14efab73df585576c2
5374 Merge: 1cbae46 62e2195
5375 Author: Brad Spengler <spender@grsecurity.net>
5376 Date: Thu Mar 10 21:34:58 2016 -0500
5377
5378 Update to pax-linux-4.4.5-test9.patch:
5379 - fixed an integer signedness mixup in the old select syscall caught by the size overflow plugin, by Mathias Krause <minipli@ld-linux.so>
5380 - Emese cleaned up a few unnecessary type casts in the size overflow plugin
5381 - fixed the initify plugin to not trigger a compiler assert with gcc 6 in LTO mode
5382 - compile the x86 vdso without plugins, reported by Emese
5383 - fixed a REFCOUNT/arm compile error, reported by coadde (https://forums.grsecurity.net/viewtopic.php?f=3&t=4410)
5384 - fixed gcc-common.h for gcc 6, reported by psturm (https://forums.grsecurity.net/viewtopic.php?f=3&t=4394)
5385
5386 Merge branch 'linux-4.4.y' into pax-test
5387
5388 commit ba5ee94199b11c1429559a08c2158677dd8f1761
5389 Author: Brad Spengler <spender@grsecurity.net>
5390 Date: Thu Mar 3 20:20:19 2016 -0500
5391
5392 Update size_overflow hash table
5393
5394 tools/gcc/size_overflow_plugin/size_overflow_hash.data | 1 +
5395 1 file changed, 1 insertion(+)
5396
5397 commit 50a5cd726362f0988b81a54d4c962acf8fd34a70
5398 Merge: 335c04c 1cbae46
5399 Author: Brad Spengler <spender@grsecurity.net>
5400 Date: Thu Mar 3 20:04:00 2016 -0500
5401
5402 Merge branch 'pax-test' into grsec-test
5403
5404 commit 1cbae46efa0b111ef2d46502f8d34c4c572a0e00
5405 Merge: a51cdb8 c252409
5406 Author: Brad Spengler <spender@grsecurity.net>
5407 Date: Thu Mar 3 19:57:43 2016 -0500
5408
5409 Merge branch 'linux-4.4.y' into pax-test
5410
5411 commit 335c04c8146a696a6101a9c69dbd47f11383549e
5412 Merge: 897877e a51cdb8
5413 Author: Brad Spengler <spender@grsecurity.net>
5414 Date: Tue Mar 1 17:57:24 2016 -0500
5415
5416 Merge branch 'pax-test' into grsec-test
5417
5418 commit a51cdb83569b450858737a30d2be043d87d7ddc1
5419 Author: Brad Spengler <spender@grsecurity.net>
5420 Date: Tue Mar 1 17:56:43 2016 -0500
5421
5422 Update to pax-linux-4.4.3-test6.patch:
5423 - spender fixed the cftype constification fallout, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4391)
5424 - fixed a few section mismatches on notifier_block variables
5425 - fixed a few REFCOUNT false positives found by Emese's plugin
5426 - constified hypervisor_x86
5427
5428 arch/x86/include/asm/hypervisor.h | 2 +-
5429 arch/x86/kernel/cpu/mshyperv.c | 2 +-
5430 arch/x86/kernel/cpu/vmware.c | 2 +-
5431 arch/x86/kernel/kvm.c | 2 +-
5432 drivers/lightnvm/rrpc.c | 4 ++--
5433 drivers/lightnvm/rrpc.h | 2 +-
5434 drivers/net/can/led.c | 2 +-
5435 drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +-
5436 drivers/net/ethernet/rocker/rocker.c | 4 ++--
5437 drivers/net/ipvlan/ipvlan_main.c | 6 +++---
5438 drivers/net/vrf.c | 2 +-
5439 drivers/staging/rtl8188eu/core/rtw_mlme_ext.c | 12 ++++++------
5440 drivers/staging/rtl8188eu/include/rtw_mlme_ext.h | 2 +-
5441 drivers/staging/rtl8723au/core/rtw_mlme_ext.c | 12 ++++++------
5442 drivers/staging/rtl8723au/include/drv_types.h | 2 +-
5443 drivers/staging/rtl8723au/include/rtw_mlme_ext.h | 2 +-
5444 drivers/staging/rtl8723au/include/usb_ops.h | 4 ++--
5445 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
5446 fs/proc/kcore.c | 2 +-
5447 mm/hugetlb_cgroup.c | 8 ++++----
5448 mm/mm_init.c | 2 +-
5449 mm/slub.c | 2 +-
5450 net/mac802154/iface.c | 2 +-
5451 23 files changed, 41 insertions(+), 41 deletions(-)
5452
5453 commit 897877e79629a0b854e98cb666a9d898256d45a7
5454 Merge: 1ffa5d5 4f4b213
5455 Author: Brad Spengler <spender@grsecurity.net>
5456 Date: Sun Feb 28 20:54:59 2016 -0500
5457
5458 Merge branch 'pax-test' into grsec-test
5459
5460 commit 4f4b21342a4a4f87c01f7909406e6b5f4c9dadbf
5461 Author: Brad Spengler <spender@grsecurity.net>
5462 Date: Sun Feb 28 20:54:06 2016 -0500
5463
5464 Update to pax-linux-4.4.3-test5.patch:
5465 - constified xfrm_mgr and cftype, by Mathias Krause <minipli@ld-linux.so>
5466 - Emese fixed a few checkpatch reports on the gcc plugin generator headers
5467 - Emese fixed a false positive size overflow report in get_next_ino, reported by KARBOWSKI Piotr <piotr.karbowski@gmail.com>
5468 - added a generator for SIMPLE_IPA passes as well
5469
5470 include/linux/cgroup-defs.h | 2 +-
5471 include/linux/hugetlb.h | 2 +-
5472 include/linux/hugetlb_cgroup.h | 11 ++
5473 include/net/xfrm.h | 2 +-
5474 kernel/cgroup.c | 29 ++--
5475 mm/hugetlb.c | 55 ++++++-
5476 mm/hugetlb_cgroup.c | 60 ++-----
5477 mm/mmap.c | 38 ++---
5478 net/xfrm/xfrm_state.c | 4 +-
5479 tools/gcc/constify_plugin.c | 5 +-
5480 tools/gcc/gcc-common.h | 42 +++--
5481 tools/gcc/gcc-generate-gimple-pass.h | 27 ++--
5482 tools/gcc/gcc-generate-ipa-pass.h | 43 ++---
5483 tools/gcc/gcc-generate-rtl-pass.h | 27 ++--
5484 tools/gcc/gcc-generate-simple_ipa-pass.h | 173 +++++++++++++++++++++
5485 tools/gcc/size_overflow_plugin/.gitignore | 1 +
5486 .../disable_size_overflow_hash.data | 7 +-
5487 .../size_overflow_plugin/size_overflow_hash.data | 3 -
5488 18 files changed, 385 insertions(+), 146 deletions(-)
5489
5490 commit 1ffa5d50a2161311d46b56fdef734f309503cb80
5491 Author: Brad Spengler <spender@grsecurity.net>
5492 Date: Sun Feb 28 20:43:02 2016 -0500
5493
5494 Make suid/sgid bruteforce prevention also apply to binaries with fscaps
5495 enabled
5496
5497 grsecurity/grsec_sig.c | 3 +--
5498 1 file changed, 1 insertion(+), 2 deletions(-)
5499
5500 commit cfdb373a77c88d01c1539e605e28143af5981571
5501 Author: Brad Spengler <spender@grsecurity.net>
5502 Date: Sun Feb 28 19:12:39 2016 -0500
5503
5504 compile fix
5505
5506 grsecurity/gracl_segv.c | 2 +-
5507 grsecurity/grsec_sig.c | 2 +-
5508 2 files changed, 2 insertions(+), 2 deletions(-)
5509
5510 commit 67d5160f8c1ee12ee4da1e7ad57f8688fcc77b53
5511 Author: Brad Spengler <spender@grsecurity.net>
5512 Date: Sun Feb 28 18:24:50 2016 -0500
5513
5514 Update the daemon check in handling of anti-bruteforcing of suid binaries
5515 by GRKERNSEC_BRUTE to prevent a bypass reported by Jann Horn where one
5516 could create unprivileged copies of the suid binary via ptrace, inject
5517 code into them, and fork+exec a privileged copy. A crash then in the
5518 privileged copy would trigger the daemon detection which could be avoided
5519 by simply terminating the original process. Defeat this by using our
5520 is_privileged_binary() function against the task's mm->binfmt->file to detect
5521 an fscaps-enabled or suid/sgid binary being involved.
5522
5523 Also update the RBAC RES_CRASH code to use is_privileged_binary().
5524
5525 grsecurity/gracl_segv.c | 15 +--------------
5526 grsecurity/grsec_sig.c | 3 ++-
5527 2 files changed, 3 insertions(+), 15 deletions(-)
5528
5529 commit 7382ec22b0c9627c674ccbb00210276d26f219e3
5530 Author: Brad Spengler <spender@grsecurity.net>
5531 Date: Sun Feb 28 15:06:32 2016 -0500
5532
5533 Fix a GRKERNSEC_PTRACE_READEXEC bypass reported by Jann Horn where one
5534 could dump out an unreadable suid binary by creating a script that used
5535 that binary as an interpreter.
5536
5537 fs/exec.c | 14 +++++++++-----
5538 1 file changed, 9 insertions(+), 5 deletions(-)
5539
5540 commit 3e60eddebe1c59b97c0b5432506bf8e13d84e8e6
5541 Merge: 2d35d52 8327ee6
5542 Author: Brad Spengler <spender@grsecurity.net>
5543 Date: Thu Feb 25 18:44:11 2016 -0500
5544
5545 Merge branch 'pax-test' into grsec-test
5546
5547 Conflicts:
5548 fs/proc/base.c
5549 kernel/ptrace.c
5550 mm/process_vm_access.c
5551
5552 commit 8327ee64e5e24ae6a3446dd96b95d5185f70e1f6
5553 Merge: 09d53c7 2134d97
5554 Author: Brad Spengler <spender@grsecurity.net>
5555 Date: Thu Feb 25 18:36:46 2016 -0500
5556
5557 Merge branch 'linux-4.4.y' into pax-test
5558
5559 Conflicts:
5560 mm/mmap.c
5561
5562 commit 2d35d5276f3feb0c053209f8c3a77b1f55f9d96b
5563 Author: Brad Spengler <spender@grsecurity.net>
5564 Date: Wed Feb 24 07:59:12 2016 -0500
5565
5566 Remove /proc/pid/map_files which we had previously prevented via
5567 an inverted dependency on checkpoint/restart, but clearly should have
5568 guarded independently as upstream in 4.3 enabled it regardless of checkpoint/
5569 restart support. It can be used since 4.3 as an ASLR leak under RBAC to
5570 processes of the same UID. Thanks to Mathias Krause for the report!
5571
5572 fs/proc/base.c | 2 ++
5573 1 file changed, 2 insertions(+)
5574
5575 commit e4f1e517092222aa28179b20e14c0ddfb2796049
5576 Author: Brad Spengler <spender@grsecurity.net>
5577 Date: Thu Feb 18 19:32:39 2016 -0500
5578
5579 Update size_overflow hash table
5580
5581 .../size_overflow_plugin/size_overflow_hash.data | 158 +++++++++++++++++----
5582 1 file changed, 131 insertions(+), 27 deletions(-)
5583
5584 commit d5f895ddfa903d0d70425b8c3d7ef649c7e6943b
5585 Author: Brad Spengler <spender@grsecurity.net>
5586 Date: Thu Feb 18 18:52:37 2016 -0500
5587
5588 Update size_overflow hash table
5589
5590 .../size_overflow_plugin/size_overflow_hash.data | 293 +++++++++++++++++----
5591 1 file changed, 237 insertions(+), 56 deletions(-)
5592
5593 commit 9d198df724c306c36e254fe19d0957fb608c3fa2
5594 Author: Brad Spengler <spender@grsecurity.net>
5595 Date: Thu Feb 18 18:23:03 2016 -0500
5596
5597 compile fix
5598
5599 tools/gcc/randomize_layout_plugin.c | 2 +-
5600 1 file changed, 1 insertion(+), 1 deletion(-)
5601
5602 commit 024d2af98b755712daff6ed7c49af921da4e8883
5603 Author: Brad Spengler <spender@grsecurity.net>
5604 Date: Thu Feb 18 18:19:47 2016 -0500
5605
5606 compile fix
5607
5608 tools/gcc/randomize_layout_plugin.c | 2 +-
5609 1 file changed, 1 insertion(+), 1 deletion(-)
5610
5611 commit 14a7b3bb5c3d8c6ef70c3e0842a5adc7f0f3e2c8
5612 Author: Brad Spengler <spender@grsecurity.net>
5613 Date: Thu Feb 18 18:16:32 2016 -0500
5614
5615 compile fix
5616
5617 tools/gcc/randomize_layout_plugin.c | 9 +++++----
5618 1 file changed, 5 insertions(+), 4 deletions(-)
5619
5620 commit 9b2d0ee62bc66858c274f256c0502cbcbd34b2bf
5621 Author: Brad Spengler <spender@grsecurity.net>
5622 Date: Thu Feb 18 17:54:51 2016 -0500
5623
5624 Compile fix
5625
5626 tools/gcc/randomize_layout_plugin.c | 2 +-
5627 1 file changed, 1 insertion(+), 1 deletion(-)
5628
5629 commit 13823395101c4228ecded4b624583389ee13bfb3
5630 Author: Brad Spengler <spender@grsecurity.net>
5631 Date: Thu Feb 18 17:35:21 2016 -0500
5632
5633 compile fix
5634
5635 Makefile | 5 +----
5636 1 file changed, 1 insertion(+), 4 deletions(-)
5637
5638 commit 0316a42a37e67b0bc8a545c7a8b63db2d25f1ab0
5639 Merge: 45cbb7e 09d53c7
5640 Author: Brad Spengler <spender@grsecurity.net>
5641 Date: Thu Feb 18 16:40:51 2016 -0500
5642
5643 Merge branch 'pax-test' into grsec-test
5644
5645 Conflicts:
5646 Makefile
5647 include/linux/genl_magic_struct.h
5648 scripts/mod/modpost.c
5649 tools/gcc/size_overflow_plugin/size_overflow_hash.data
5650
5651 commit 09d53c74140e87e886a28980cedbb7e771f2a356
5652 Author: Brad Spengler <spender@grsecurity.net>
5653 Date: Thu Feb 18 16:24:02 2016 -0500
5654
5655 Update to pax-linux-4.4.2-test4.patch:
5656 - fixed the initialization of ipc_namespace.shm_ctlmax to prevent the size overflow plugin from catching an integer truncation when calling shmem_kernel_file_setup, reported by Mathias Krause <minipli@ld-linux.so>
5657 - moved gcc plugin related makefile bits into a separate file, by Emese
5658 - changed modpost to report writable function pointers separately
5659 - increased the size of mem_cgroup.numainfo_events to avoid a wraparound caught by REFCOUNT, reported by alexey vlasov
5660 - reduced the size of the compat syscall entry points on amd64
5661 - fixed an integer signedness mixup in drbd caught by the size overflow plugin, reported by iamb and gaima (https://forums.grsecurity.net/viewtopic.php?f=3&t=4366)
5662 - Emese regenerated the size overflow hash table for 4.4
5663 - all plugins now use the new pass generator headers
5664
5665 Makefile | 73 +-
5666 arch/x86/entry/entry_64.S | 2 +-
5667 arch/x86/entry/entry_64_compat.S | 48 +-
5668 fs/exec.c | 3 +
5669 include/linux/genl_magic_struct.h | 4 +-
5670 include/linux/memcontrol.h | 2 +-
5671 ipc/shm.c | 2 +-
5672 mm/memcontrol.c | 6 +-
5673 scripts/Makefile.extrawarn | 4 +
5674 scripts/Makefile.gcc-plugins | 69 +
5675 scripts/mod/modpost.c | 15 +-
5676 tools/gcc/checker_plugin.c | 71 +-
5677 tools/gcc/colorize_plugin.c | 65 +-
5678 tools/gcc/constify_plugin.c | 65 +-
5679 tools/gcc/gcc-generate-gimple-pass.h | 172 +
5680 tools/gcc/gcc-generate-ipa-pass.h | 286 +
5681 tools/gcc/gcc-generate-rtl-pass.h | 172 +
5682 tools/gcc/initify_plugin.c | 74 +-
5683 tools/gcc/kallocstat_plugin.c | 65 +-
5684 tools/gcc/kernexec_plugin.c | 184 +-
5685 tools/gcc/latent_entropy_plugin.c | 71 +-
5686 tools/gcc/randomize_layout_seed.h | 1 -
5687 .../disable_size_overflow_hash.h | 152601 ------------------
5688 .../insert_size_overflow_asm.c | 71 +-
5689 .../size_overflow_plugin/intentional_overflow.c | 6 +-
5690 tools/gcc/size_overflow_plugin/size_overflow.h | 20 +-
5691 .../size_overflow_plugin/size_overflow_hash.data | 2898 +-
5692 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 94 +-
5693 .../size_overflow_plugin/size_overflow_plugin.c | 14 +-
5694 .../size_overflow_plugin/size_overflow_transform.c | 2 +-
5695 .../size_overflow_transform_core.c | 2 +-
5696 tools/gcc/stackleak_plugin.c | 132 +-
5697 tools/gcc/structleak_plugin.c | 67 +-
5698 33 files changed, 2238 insertions(+), 155123 deletions(-)
5699
5700 commit 45cbb7e015a18625dafb019246e13e8cf3a18ace
5701 Merge: 3b5448b 0c85110
5702 Author: Brad Spengler <spender@grsecurity.net>
5703 Date: Wed Feb 17 19:11:25 2016 -0500
5704
5705 Merge branch 'pax-test' into grsec-test
5706
5707 commit 0c851109f683896aaff8a310bbfa943272b47516
5708 Merge: 6cb4f49 1cb8570
5709 Author: Brad Spengler <spender@grsecurity.net>
5710 Date: Wed Feb 17 19:11:21 2016 -0500
5711
5712 Merge branch 'linux-4.4.y' into pax-test
5713
5714 commit 3b5448bd1d85025d19b2587902e4264eb212a0a3
5715 Author: Brad Spengler <spender@grsecurity.net>
5716 Date: Mon Feb 15 18:02:40 2016 -0500
5717
5718 Fix a drbd bug reported by iamb on the forums:
5719 https://forums.grsecurity.net/viewtopic.php?f=3&t=4366#p16032
5720 which caused a size_overflow report
5721
5722 include/linux/genl_magic_struct.h | 4 ++--
5723 1 file changed, 2 insertions(+), 2 deletions(-)
5724
5725 commit 061fcd0e74441189a87bfe13b55fb02b98f7d7c0
5726 Author: Brad Spengler <spender@grsecurity.net>
5727 Date: Mon Feb 15 13:20:38 2016 -0500
5728
5729 compile fix
5730
5731 drivers/staging/wilc1000/host_interface.h | 1 +
5732 1 file changed, 1 insertion(+)
5733
5734 commit 675f2dcbdd4ea3293eea9c42f0cc427b1c903fc8
5735 Author: Brad Spengler <spender@grsecurity.net>
5736 Date: Mon Feb 15 12:54:52 2016 -0500
5737
5738 Update size_overflow hash table
5739
5740 .../size_overflow_plugin/size_overflow_hash.data | 21 +++++++++++++++++----
5741 1 file changed, 17 insertions(+), 4 deletions(-)
5742
5743 commit c8c50394f0c9f2e9baaeb884a29be2057cadbf7b
5744 Author: Brad Spengler <spender@grsecurity.net>
5745 Date: Mon Feb 15 12:53:54 2016 -0500
5746
5747 compile fix
5748
5749 drivers/staging/wilc1000/wilc_spi.c | 1 -
5750 drivers/staging/wilc1000/wilc_wlan.h | 2 +-
5751 2 files changed, 1 insertion(+), 2 deletions(-)
5752
5753 commit a9dd4481db099082967585be8e153899e5fd24c7
5754 Author: Brad Spengler <spender@grsecurity.net>
5755 Date: Mon Feb 15 12:52:32 2016 -0500
5756
5757 compile fix
5758
5759 fs/proc/fd.c | 2 --
5760 1 file changed, 2 deletions(-)
5761
5762 commit 5acb4fa0063460807096429f073181d1c5a3e566
5763 Author: Brad Spengler <spender@grsecurity.net>
5764 Date: Mon Feb 15 12:32:13 2016 -0500
5765
5766 Update size_overflow hash table
5767
5768 .../size_overflow_plugin/size_overflow_hash.data | 224 +++++++++++++++++----
5769 1 file changed, 182 insertions(+), 42 deletions(-)
5770
5771 commit c0bac9ff9af7ef753740622b5736684a32b49a9f
5772 Author: Brad Spengler <spender@grsecurity.net>
5773 Date: Mon Feb 15 12:31:16 2016 -0500
5774
5775 compile fix
5776
5777 drivers/staging/wilc1000/wilc_spi.c | 1 +
5778 1 file changed, 1 insertion(+)
5779
5780 commit 2f89ebdee131f6a6c85e611e5b993d4b19bc2673
5781 Author: Brad Spengler <spender@grsecurity.net>
5782 Date: Mon Feb 15 12:28:36 2016 -0500
5783
5784 RANDSTRUCT compile fix
5785
5786 drivers/staging/wilc1000/wilc_spi.c | 32 ++++++++++++++++----------------
5787 1 file changed, 16 insertions(+), 16 deletions(-)
5788
5789 commit 693be5d7f5b783f451499bbe83162aeb0f27a09f
5790 Author: Brad Spengler <spender@grsecurity.net>
5791 Date: Mon Feb 15 12:24:49 2016 -0500
5792
5793 RANDSTRUCT compile fix
5794
5795 drivers/staging/wilc1000/wilc_sdio.c | 34 +++++++++++++++++-----------------
5796 1 file changed, 17 insertions(+), 17 deletions(-)
5797
5798 commit bdf3dcd665c1a8ef9b69ad6525760c5160ec19a2
5799 Author: Hariprasad S <hariprasad@chelsio.com>
5800 Date: Fri Dec 11 13:59:17 2015 +0530
5801
5802 iw_cxgb3: Fix incorrectly returning error on success
5803
5804 The cxgb3_*_send() functions return NET_XMIT_ values, which are
5805 positive integers values. So don't treat positive return values
5806 as an error.
5807
5808 Signed-off-by: Steve Wise <swise@opengridcomputing.com>
5809 Signed-off-by: Hariprasad Shenai <hariprasad@chelsio.com>
5810 Signed-off-by: Doug Ledford <dledford@redhat.com>
5811
5812 drivers/infiniband/hw/cxgb3/iwch_cm.c | 4 ++--
5813 1 file changed, 2 insertions(+), 2 deletions(-)
5814
5815 commit 8705fe372dc21046ca3fc55381b70cffb4c60207
5816 Author: Daniel Borkmann <daniel@iogearbox.net>
5817 Date: Wed Feb 10 16:47:11 2016 +0100
5818
5819 bpf: fix branch offset adjustment on backjumps after patching ctx expansion
5820
5821 When ctx access is used, the kernel often needs to expand/rewrite
5822 instructions, so after that patching, branch offsets have to be
5823 adjusted for both forward and backward jumps in the new eBPF program,
5824 but for backward jumps it fails to account the delta. Meaning, for
5825 example, if the expansion happens exactly on the insn that sits at
5826 the jump target, it doesn't fix up the back jump offset.
5827
5828 Analysis on what the check in adjust_branches() is currently doing:
5829
5830 /* adjust offset of jmps if necessary */
5831 if (i < pos && i + insn->off + 1 > pos)
5832 insn->off += delta;
5833 else if (i > pos && i + insn->off + 1 < pos)
5834 insn->off -= delta;
5835
5836 First condition (forward jumps):
5837
5838 Before: After:
5839
5840 insns[0] insns[0]
5841 insns[1] <--- i/insn insns[1] <--- i/insn
5842 insns[2] <--- pos insns[P] <--- pos
5843 insns[3] insns[P] `------| delta
5844 insns[4] <--- target_X insns[P] `-----|
5845 insns[5] insns[3]
5846 insns[4] <--- target_X
5847 insns[5]
5848
5849 First case is if we cross pos-boundary and the jump instruction was
5850 before pos. This is handeled correctly. I.e. if i == pos, then this
5851 would mean our jump that we currently check was the patchlet itself
5852 that we just injected. Since such patchlets are self-contained and
5853 have no awareness of any insns before or after the patched one, the
5854 delta is correctly not adjusted. Also, for the second condition in
5855 case of i + insn->off + 1 == pos, means we jump to that newly patched
5856 instruction, so no offset adjustment are needed. That part is correct.
5857
5858 Second condition (backward jumps):
5859
5860 Before: After:
5861
5862 insns[0] insns[0]
5863 insns[1] <--- target_X insns[1] <--- target_X
5864 insns[2] <--- pos <-- target_Y insns[P] <--- pos <-- target_Y
5865 insns[3] insns[P] `------| delta
5866 insns[4] <--- i/insn insns[P] `-----|
5867 insns[5] insns[3]
5868 insns[4] <--- i/insn
5869 insns[5]
5870
5871 Second interesting case is where we cross pos-boundary and the jump
5872 instruction was after pos. Backward jump with i == pos would be
5873 impossible and pose a bug somewhere in the patchlet, so the first
5874 condition checking i > pos is okay only by itself. However, i +
5875 insn->off + 1 < pos does not always work as intended to trigger the
5876 adjustment. It works when jump targets would be far off where the
5877 delta wouldn't matter. But, for example, where the fixed insn->off
5878 before pointed to pos (target_Y), it now points to pos + delta, so
5879 that additional room needs to be taken into account for the check.
5880 This means that i) both tests here need to be adjusted into pos + delta,
5881 and ii) for the second condition, the test needs to be <= as pos
5882 itself can be a target in the backjump, too.
5883
5884 Fixes: 9bac3d6d548e ("bpf: allow extended BPF programs access skb fields")
5885 Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
5886 Signed-off-by: David S. Miller <davem@davemloft.net>
5887
5888 kernel/bpf/verifier.c | 2 +-
5889 1 file changed, 1 insertion(+), 1 deletion(-)
5890
5891 commit 61b513b644116e77313addf65970db58f4981608
5892 Author: Ryan Ware <ware@linux.intel.com>
5893 Date: Thu Feb 11 15:58:44 2016 -0800
5894
5895 EVM: Use crypto_memneq() for digest comparisons
5896
5897 This patch fixes vulnerability CVE-2016-2085. The problem exists
5898 because the vm_verify_hmac() function includes a use of memcmp().
5899 Unfortunately, this allows timing side channel attacks; specifically
5900 a MAC forgery complexity drop from 2^128 to 2^12. This patch changes
5901 the memcmp() to the cryptographically safe crypto_memneq().
5902
5903 Reported-by: Xiaofei Rex Guo <xiaofei.rex.guo@intel.com>
5904 Signed-off-by: Ryan Ware <ware@linux.intel.com>
5905 Cc: stable@vger.kernel.org
5906 Signed-off-by: Mimi Zohar <zohar@linux.vnet.ibm.com>
5907 Signed-off-by: James Morris <james.l.morris@oracle.com>
5908
5909 security/integrity/evm/evm_main.c | 3 ++-
5910 1 file changed, 2 insertions(+), 1 deletion(-)
5911
5912 commit 970b961e7d0684624f9c69f0b4367d5c76b65a63
5913 Author: Michael McConville <mmcco@mykolab.com>
5914 Date: Fri Feb 5 20:46:25 2016 -0500
5915
5916 dscc4: Undefined signed int shift
5917
5918 My analysis in the below mail applies, although the second part is
5919 unnecessary because i isn't used in arithmetic operations here:
5920
5921 https://marc.info/?l=openbsd-tech&m=145377854103866&w=2
5922
5923 Thanks for your time.
5924
5925 Signed-off-by: Michael McConville <mmcco@mykolab.com>
5926 Acked-by: Francois Romieu <romieu@fr.zoreil.com>
5927 Signed-off-by: David S. Miller <davem@davemloft.net>
5928
5929 drivers/net/wan/dscc4.c | 2 +-
5930 1 file changed, 1 insertion(+), 1 deletion(-)
5931
5932 commit d843df24b6680b600e87ebfea3b7b198b90b5a2a
5933 Author: Andrey Konovalov <andreyknvl@gmail.com>
5934 Date: Sat Feb 13 11:08:06 2016 +0300
5935
5936 ALSA: usb-audio: avoid freeing umidi object twice
5937
5938 The 'umidi' object will be free'd on the error path by snd_usbmidi_free()
5939 when tearing down the rawmidi interface. So we shouldn't try to free it
5940 in snd_usbmidi_create() after having registered the rawmidi interface.
5941
5942 Found by KASAN.
5943
5944 Signed-off-by: Andrey Konovalov <andreyknvl@gmail.com>
5945 Acked-by: Clemens Ladisch <clemens@ladisch.de>
5946 Cc: <stable@vger.kernel.org>
5947 Signed-off-by: Takashi Iwai <tiwai@suse.de>
5948
5949 sound/usb/midi.c | 1 -
5950 1 file changed, 1 deletion(-)
5951
5952 commit ed3a8ab1976674d56e258da93639e61f1446e703
5953 Author: zengtao <prime.zeng@huawei.com>
5954 Date: Tue Feb 2 11:38:34 2016 +0800
5955
5956 cputime: Prevent 32bit overflow in time[val|spec]_to_cputime()
5957
5958 The datatype __kernel_time_t is u32 on 32bit platform, so its subject to
5959 overflows in the timeval/timespec to cputime conversion.
5960
5961 Currently the following functions are affected:
5962 1. setitimer()
5963 2. timer_create/timer_settime()
5964 3. sys_clock_nanosleep
5965
5966 This can happen on MIPS32 and ARM32 with "Full dynticks CPU time accounting"
5967 enabled, which is required for CONFIG_NO_HZ_FULL.
5968
5969 Enforce u64 conversion to prevent the overflow.
5970
5971 Fixes: 31c1fc818715 ("ARM: Kconfig: allow full nohz CPU accounting")
5972 Signed-off-by: zengtao <prime.zeng@huawei.com>
5973 Reviewed-by: Arnd Bergmann <arnd@arndb.de>
5974 Cc: <fweisbec@gmail.com>
5975 Cc: stable@vger.kernel.org
5976 Link: http://lkml.kernel.org/r/1454384314-154784-1-git-send-email-prime.zeng@huawei.com
5977 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
5978
5979 include/asm-generic/cputime_nsecs.h | 5 +++--
5980 1 file changed, 3 insertions(+), 2 deletions(-)
5981
5982 commit bf8a2de485da37d73850e7cfa31967b7798b6ce0
5983 Author: Brad Spengler <spender@grsecurity.net>
5984 Date: Mon Feb 15 11:55:18 2016 -0500
5985
5986 Fix building with allnoconfig, don't make our added DATA_TO_TEXT mismatch warnings
5987 count as actual mismatches
5988
5989 scripts/mod/modpost.c | 3 ++-
5990 1 file changed, 2 insertions(+), 1 deletion(-)
5991
5992 commit c9d82b6d0f1a2484fea0a516989dbdc6c55e5693
5993 Author: Brad Spengler <spender@grsecurity.net>
5994 Date: Mon Feb 15 11:44:36 2016 -0500
5995
5996 Compile fix
5997
5998 tools/gcc/randomize_layout_seed.h | 1 -
5999 1 file changed, 1 deletion(-)
6000
6001 commit fb68cbb98732e6801e8fc8d1da1f1195e51ff077
6002 Author: Brad Spengler <spender@grsecurity.net>
6003 Date: Mon Feb 15 11:27:32 2016 -0500
6004
6005 disable USELIB
6006
6007 init/Kconfig | 3 ++-
6008 1 file changed, 2 insertions(+), 1 deletion(-)
6009
6010 commit cbda9a44b7f92161eb1e444bf7fe2bbcbedaae65
6011 Author: Brad Spengler <spender@grsecurity.net>
6012 Date: Mon Feb 15 11:23:56 2016 -0500
6013
6014 compile fix
6015
6016 fs/proc/fd.c | 2 +-
6017 1 file changed, 1 insertion(+), 1 deletion(-)
6018
6019 commit 5cf0a2e87ab7105d1ba01f55f7636fa2e1fa4bb4
6020 Author: Brad Spengler <spender@grsecurity.net>
6021 Date: Mon Feb 15 11:19:26 2016 -0500
6022
6023 Initial import of grsecurity for Linux 4.4.1
6024
6025 Documentation/dontdiff | 2 +
6026 Documentation/kernel-parameters.txt | 11 +
6027 Documentation/sysctl/fs.txt | 23 +
6028 Documentation/sysctl/kernel.txt | 15 +
6029 Makefile | 18 +-
6030 arch/alpha/include/asm/cache.h | 4 +-
6031 arch/alpha/kernel/osf_sys.c | 12 +-
6032 arch/arc/Kconfig | 1 +
6033 arch/arm/Kconfig | 1 +
6034 arch/arm/Kconfig.debug | 1 +
6035 arch/arm/include/asm/thread_info.h | 7 +-
6036 arch/arm/kernel/entry-common.S | 8 +-
6037 arch/arm/kernel/process.c | 4 +-
6038 arch/arm/kernel/ptrace.c | 9 +
6039 arch/arm/kernel/traps.c | 7 +-
6040 arch/arm/mm/Kconfig | 4 +-
6041 arch/arm/mm/fault.c | 40 +-
6042 arch/arm/mm/mmap.c | 8 +-
6043 arch/arm/net/bpf_jit_32.c | 51 +-
6044 arch/arm64/Kconfig.debug | 1 +
6045 arch/avr32/include/asm/cache.h | 4 +-
6046 arch/blackfin/Kconfig.debug | 1 +
6047 arch/blackfin/include/asm/cache.h | 3 +-
6048 arch/cris/include/arch-v10/arch/cache.h | 3 +-
6049 arch/cris/include/arch-v32/arch/cache.h | 3 +-
6050 arch/frv/include/asm/cache.h | 3 +-
6051 arch/frv/mm/elf-fdpic.c | 4 +-
6052 arch/hexagon/include/asm/cache.h | 6 +-
6053 arch/ia64/Kconfig | 1 +
6054 arch/ia64/include/asm/cache.h | 3 +-
6055 arch/ia64/kernel/sys_ia64.c | 2 +
6056 arch/ia64/mm/hugetlbpage.c | 2 +
6057 arch/m32r/include/asm/cache.h | 4 +-
6058 arch/m68k/include/asm/cache.h | 4 +-
6059 arch/metag/mm/hugetlbpage.c | 1 +
6060 arch/microblaze/include/asm/cache.h | 3 +-
6061 arch/mips/Kconfig | 1 +
6062 arch/mips/include/asm/cache.h | 3 +-
6063 arch/mips/include/asm/thread_info.h | 11 +-
6064 arch/mips/kernel/irq.c | 3 +
6065 arch/mips/kernel/ptrace.c | 9 +
6066 arch/mips/mm/mmap.c | 4 +-
6067 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
6068 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
6069 arch/openrisc/include/asm/cache.h | 4 +-
6070 arch/parisc/include/asm/cache.h | 3 +
6071 arch/parisc/kernel/sys_parisc.c | 4 +
6072 arch/powerpc/Kconfig | 1 +
6073 arch/powerpc/include/asm/cache.h | 4 +-
6074 arch/powerpc/include/asm/thread_info.h | 5 +-
6075 arch/powerpc/kernel/Makefile | 2 +
6076 arch/powerpc/kernel/irq.c | 3 +
6077 arch/powerpc/kernel/process.c | 10 +-
6078 arch/powerpc/kernel/ptrace.c | 14 +
6079 arch/powerpc/kernel/traps.c | 5 +
6080 arch/powerpc/mm/slice.c | 2 +-
6081 arch/s390/Kconfig.debug | 1 +
6082 arch/s390/include/asm/cache.h | 4 +-
6083 arch/score/include/asm/cache.h | 4 +-
6084 arch/sh/include/asm/cache.h | 3 +-
6085 arch/sh/mm/mmap.c | 6 +-
6086 arch/sparc/include/asm/cache.h | 4 +-
6087 arch/sparc/include/asm/pgalloc_64.h | 1 +
6088 arch/sparc/include/asm/thread_info_64.h | 8 +-
6089 arch/sparc/kernel/process_32.c | 6 +-
6090 arch/sparc/kernel/process_64.c | 8 +-
6091 arch/sparc/kernel/ptrace_64.c | 14 +
6092 arch/sparc/kernel/sys_sparc_64.c | 8 +-
6093 arch/sparc/kernel/syscalls.S | 8 +-
6094 arch/sparc/kernel/traps_32.c | 8 +-
6095 arch/sparc/kernel/traps_64.c | 28 +-
6096 arch/sparc/kernel/unaligned_64.c | 2 +-
6097 arch/sparc/mm/fault_64.c | 2 +-
6098 arch/sparc/mm/hugetlbpage.c | 15 +-
6099 arch/tile/Kconfig | 1 +
6100 arch/tile/include/asm/cache.h | 3 +-
6101 arch/tile/mm/hugetlbpage.c | 2 +
6102 arch/um/include/asm/cache.h | 3 +-
6103 arch/unicore32/include/asm/cache.h | 6 +-
6104 arch/x86/Kconfig | 21 +
6105 arch/x86/Kconfig.debug | 2 +
6106 arch/x86/entry/common.c | 14 +
6107 arch/x86/entry/entry_32.S | 2 +-
6108 arch/x86/entry/entry_64.S | 2 +-
6109 arch/x86/ia32/ia32_aout.c | 2 +
6110 arch/x86/include/asm/floppy.h | 20 +-
6111 arch/x86/include/asm/fpu/types.h | 69 +-
6112 arch/x86/include/asm/io.h | 2 +-
6113 arch/x86/include/asm/page.h | 12 +-
6114 arch/x86/include/asm/paravirt_types.h | 23 +-
6115 arch/x86/include/asm/pgtable_types.h | 6 +-
6116 arch/x86/include/asm/processor.h | 12 +-
6117 arch/x86/include/asm/thread_info.h | 6 +-
6118 arch/x86/include/asm/uaccess.h | 2 +-
6119 arch/x86/kernel/dumpstack.c | 10 +-
6120 arch/x86/kernel/dumpstack_32.c | 2 +-
6121 arch/x86/kernel/dumpstack_64.c | 2 +-
6122 arch/x86/kernel/ioport.c | 13 +
6123 arch/x86/kernel/irq_32.c | 3 +
6124 arch/x86/kernel/irq_64.c | 4 +
6125 arch/x86/kernel/ldt.c | 18 +
6126 arch/x86/kernel/msr.c | 10 +
6127 arch/x86/kernel/ptrace.c | 14 +
6128 arch/x86/kernel/signal.c | 9 +-
6129 arch/x86/kernel/sys_i386_32.c | 9 +-
6130 arch/x86/kernel/sys_x86_64.c | 8 +-
6131 arch/x86/kernel/traps.c | 5 +
6132 arch/x86/kernel/verify_cpu.S | 1 +
6133 arch/x86/kernel/vm86_32.c | 15 +
6134 arch/x86/mm/fault.c | 12 +-
6135 arch/x86/mm/hugetlbpage.c | 15 +-
6136 arch/x86/mm/init.c | 66 +-
6137 arch/x86/mm/init_32.c | 6 +-
6138 arch/x86/mm/pageattr.c | 4 +-
6139 arch/x86/net/bpf_jit_comp.c | 4 +
6140 arch/x86/platform/efi/efi_64.c | 2 +-
6141 arch/x86/xen/Kconfig | 1 +
6142 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
6143 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
6144 crypto/scatterwalk.c | 10 +-
6145 drivers/acpi/acpica/hwxfsleep.c | 11 +-
6146 drivers/acpi/custom_method.c | 4 +
6147 drivers/block/cciss.h | 30 +-
6148 drivers/block/smart1,2.h | 40 +-
6149 drivers/cdrom/cdrom.c | 2 +-
6150 drivers/char/Kconfig | 4 +-
6151 drivers/char/genrtc.c | 1 +
6152 drivers/char/mem.c | 17 +
6153 drivers/char/random.c | 5 +-
6154 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
6155 drivers/firewire/ohci.c | 4 +
6156 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
6157 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
6158 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
6159 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
6160 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
6161 drivers/hid/hid-wiimote-debug.c | 2 +-
6162 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
6163 drivers/iommu/Kconfig | 1 +
6164 drivers/iommu/amd_iommu.c | 14 +-
6165 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
6166 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
6167 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
6168 drivers/isdn/i4l/isdn_concap.c | 6 +-
6169 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
6170 drivers/md/bcache/Kconfig | 1 +
6171 drivers/md/raid5.c | 8 +
6172 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
6173 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
6174 drivers/media/radio/radio-cadet.c | 5 +-
6175 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
6176 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
6177 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
6178 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
6179 drivers/message/fusion/mptbase.c | 9 +
6180 drivers/misc/sgi-xp/xp_main.c | 12 +-
6181 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
6182 drivers/net/ppp/pptp.c | 34 +-
6183 drivers/net/wan/lmc/lmc_media.c | 97 +-
6184 drivers/net/wan/z85230.c | 24 +-
6185 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
6186 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
6187 drivers/pci/proc.c | 9 +
6188 drivers/platform/x86/asus-wmi.c | 12 +
6189 drivers/rtc/rtc-dev.c | 3 +
6190 drivers/scsi/bfa/bfa_fcs.c | 19 +-
6191 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
6192 drivers/scsi/bfa/bfa_modules.h | 12 +-
6193 drivers/scsi/hpsa.h | 40 +-
6194 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
6195 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
6196 drivers/tty/serial/uartlite.c | 4 +-
6197 drivers/tty/sysrq.c | 2 +-
6198 drivers/tty/tty_io.c | 4 +
6199 drivers/tty/vt/keyboard.c | 22 +-
6200 drivers/uio/uio.c | 6 +-
6201 drivers/usb/core/hub.c | 5 +
6202 drivers/usb/gadget/function/f_uac1.c | 1 +
6203 drivers/usb/gadget/function/u_uac1.c | 1 +
6204 drivers/usb/host/hwa-hc.c | 9 +-
6205 drivers/usb/usbip/vhci_sysfs.c | 2 +-
6206 drivers/video/fbdev/arcfb.c | 2 +-
6207 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
6208 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
6209 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
6210 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++----
6211 drivers/xen/xenfs/xenstored.c | 5 +
6212 firmware/Makefile | 2 +
6213 firmware/WHENCE | 20 +-
6214 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
6215 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
6216 fs/attr.c | 4 +
6217 fs/autofs4/waitq.c | 9 +
6218 fs/binfmt_aout.c | 7 +
6219 fs/binfmt_elf.c | 40 +-
6220 fs/compat.c | 20 +-
6221 fs/compat_ioctl.c | 253 +-
6222 fs/coredump.c | 17 +-
6223 fs/dcache.c | 3 +
6224 fs/debugfs/inode.c | 11 +-
6225 fs/exec.c | 231 +-
6226 fs/ext2/balloc.c | 4 +-
6227 fs/ext2/super.c | 8 +-
6228 fs/ext4/balloc.c | 4 +-
6229 fs/ext4/extents.c | 2 +-
6230 fs/fcntl.c | 4 +
6231 fs/fhandle.c | 3 +-
6232 fs/file.c | 4 +
6233 fs/filesystems.c | 4 +
6234 fs/fs_struct.c | 20 +-
6235 fs/hugetlbfs/inode.c | 24 +-
6236 fs/inode.c | 8 +-
6237 fs/internal.h | 7 +
6238 fs/ioctl.c | 4 +-
6239 fs/kernfs/dir.c | 6 +
6240 fs/mount.h | 4 +-
6241 fs/namei.c | 283 +-
6242 fs/namespace.c | 24 +
6243 fs/nfsd/nfscache.c | 2 +-
6244 fs/open.c | 38 +
6245 fs/overlayfs/inode.c | 3 +
6246 fs/overlayfs/super.c | 6 +-
6247 fs/pipe.c | 49 +-
6248 fs/posix_acl.c | 15 +-
6249 fs/proc/Kconfig | 10 +-
6250 fs/proc/array.c | 69 +-
6251 fs/proc/base.c | 186 +-
6252 fs/proc/cmdline.c | 4 +
6253 fs/proc/devices.c | 4 +
6254 fs/proc/fd.c | 12 +-
6255 fs/proc/generic.c | 64 +
6256 fs/proc/inode.c | 17 +
6257 fs/proc/internal.h | 11 +-
6258 fs/proc/interrupts.c | 4 +
6259 fs/proc/kcore.c | 3 +
6260 fs/proc/namespaces.c | 4 +-
6261 fs/proc/proc_net.c | 31 +
6262 fs/proc/proc_sysctl.c | 52 +-
6263 fs/proc/root.c | 8 +
6264 fs/proc/stat.c | 69 +-
6265 fs/proc/task_mmu.c | 66 +-
6266 fs/readdir.c | 19 +
6267 fs/reiserfs/item_ops.c | 24 +-
6268 fs/reiserfs/super.c | 4 +
6269 fs/select.c | 2 +
6270 fs/seq_file.c | 30 +-
6271 fs/stat.c | 20 +-
6272 fs/sysfs/dir.c | 30 +-
6273 fs/utimes.c | 7 +
6274 fs/xattr.c | 26 +-
6275 grsecurity/Kconfig | 1203 ++++
6276 grsecurity/Makefile | 54 +
6277 grsecurity/gracl.c | 2757 +++++++++
6278 grsecurity/gracl_alloc.c | 105 +
6279 grsecurity/gracl_cap.c | 127 +
6280 grsecurity/gracl_compat.c | 269 +
6281 grsecurity/gracl_fs.c | 448 ++
6282 grsecurity/gracl_ip.c | 386 ++
6283 grsecurity/gracl_learn.c | 207 +
6284 grsecurity/gracl_policy.c | 1786 ++++++
6285 grsecurity/gracl_res.c | 68 +
6286 grsecurity/gracl_segv.c | 304 +
6287 grsecurity/gracl_shm.c | 40 +
6288 grsecurity/grsec_chdir.c | 19 +
6289 grsecurity/grsec_chroot.c | 467 ++
6290 grsecurity/grsec_disabled.c | 445 ++
6291 grsecurity/grsec_exec.c | 189 +
6292 grsecurity/grsec_fifo.c | 26 +
6293 grsecurity/grsec_fork.c | 23 +
6294 grsecurity/grsec_init.c | 294 +
6295 grsecurity/grsec_ipc.c | 48 +
6296 grsecurity/grsec_link.c | 65 +
6297 grsecurity/grsec_log.c | 340 +
6298 grsecurity/grsec_mem.c | 48 +
6299 grsecurity/grsec_mount.c | 65 +
6300 grsecurity/grsec_pax.c | 47 +
6301 grsecurity/grsec_proc.c | 20 +
6302 grsecurity/grsec_ptrace.c | 30 +
6303 grsecurity/grsec_sig.c | 245 +
6304 grsecurity/grsec_sock.c | 244 +
6305 grsecurity/grsec_sysctl.c | 497 ++
6306 grsecurity/grsec_time.c | 16 +
6307 grsecurity/grsec_tpe.c | 78 +
6308 grsecurity/grsec_tty.c | 18 +
6309 grsecurity/grsec_usb.c | 15 +
6310 grsecurity/grsum.c | 54 +
6311 include/linux/binfmts.h | 5 +-
6312 include/linux/capability.h | 13 +
6313 include/linux/compiler-gcc.h | 5 +
6314 include/linux/compiler.h | 8 +
6315 include/linux/cred.h | 8 +-
6316 include/linux/dcache.h | 5 +-
6317 include/linux/fs.h | 26 +-
6318 include/linux/fs_struct.h | 2 +-
6319 include/linux/fsnotify.h | 6 +
6320 include/linux/gracl.h | 342 ++
6321 include/linux/gracl_compat.h | 156 +
6322 include/linux/gralloc.h | 9 +
6323 include/linux/grdefs.h | 140 +
6324 include/linux/grinternal.h | 231 +
6325 include/linux/grmsg.h | 119 +
6326 include/linux/grsecurity.h | 258 +
6327 include/linux/grsock.h | 19 +
6328 include/linux/ipc.h | 2 +-
6329 include/linux/ipc_namespace.h | 2 +-
6330 include/linux/kallsyms.h | 18 +-
6331 include/linux/key-type.h | 4 +-
6332 include/linux/kmod.h | 5 +
6333 include/linux/kobject.h | 2 +-
6334 include/linux/lsm_hooks.h | 4 +-
6335 include/linux/mm.h | 12 +
6336 include/linux/mm_types.h | 4 +-
6337 include/linux/module.h | 5 +-
6338 include/linux/mount.h | 2 +-
6339 include/linux/msg.h | 2 +-
6340 include/linux/netfilter/xt_gradm.h | 9 +
6341 include/linux/path.h | 4 +-
6342 include/linux/perf_event.h | 13 +-
6343 include/linux/pid_namespace.h | 2 +-
6344 include/linux/pipe_fs_i.h | 4 +
6345 include/linux/poison.h | 2 +-
6346 include/linux/printk.h | 2 +-
6347 include/linux/proc_fs.h | 22 +-
6348 include/linux/proc_ns.h | 2 +-
6349 include/linux/ptrace.h | 24 +-
6350 include/linux/radix-tree.h | 22 +-
6351 include/linux/random.h | 2 +-
6352 include/linux/rbtree_augmented.h | 4 +-
6353 include/linux/scatterlist.h | 12 +-
6354 include/linux/sched.h | 115 +-
6355 include/linux/security.h | 1 +
6356 include/linux/sem.h | 2 +-
6357 include/linux/seq_file.h | 5 +
6358 include/linux/shm.h | 6 +-
6359 include/linux/shmem_fs.h | 5 +-
6360 include/linux/skbuff.h | 3 +
6361 include/linux/slab.h | 9 -
6362 include/linux/sysctl.h | 8 +-
6363 include/linux/thread_info.h | 6 +-
6364 include/linux/tty.h | 2 +-
6365 include/linux/tty_driver.h | 4 +-
6366 include/linux/uidgid.h | 5 +
6367 include/linux/user_namespace.h | 2 +-
6368 include/linux/utsname.h | 2 +-
6369 include/linux/vermagic.h | 16 +-
6370 include/linux/vmalloc.h | 8 +
6371 include/net/af_unix.h | 6 +-
6372 include/net/ip.h | 2 +-
6373 include/net/neighbour.h | 2 +-
6374 include/net/net_namespace.h | 2 +-
6375 include/net/netfilter/nf_conntrack_core.h | 8 +-
6376 include/net/scm.h | 1 +
6377 include/net/sock.h | 2 +-
6378 include/trace/events/fs.h | 53 +
6379 include/uapi/linux/personality.h | 1 +
6380 init/Kconfig | 2 +
6381 init/main.c | 46 +-
6382 ipc/mqueue.c | 1 +
6383 ipc/msg.c | 3 +-
6384 ipc/msgutil.c | 4 +-
6385 ipc/sem.c | 3 +-
6386 ipc/shm.c | 26 +-
6387 ipc/util.c | 6 +
6388 kernel/auditsc.c | 2 +-
6389 kernel/bpf/syscall.c | 10 +-
6390 kernel/capability.c | 41 +-
6391 kernel/cgroup.c | 5 +-
6392 kernel/compat.c | 1 +
6393 kernel/configs.c | 11 +
6394 kernel/cred.c | 112 +-
6395 kernel/events/core.c | 16 +-
6396 kernel/exit.c | 10 +-
6397 kernel/fork.c | 86 +-
6398 kernel/futex.c | 6 +-
6399 kernel/futex_compat.c | 2 +-
6400 kernel/kallsyms.c | 9 +
6401 kernel/kcmp.c | 8 +-
6402 kernel/kexec_core.c | 2 +-
6403 kernel/kmod.c | 96 +-
6404 kernel/kprobes.c | 9 +-
6405 kernel/ksysfs.c | 2 +
6406 kernel/locking/lockdep_proc.c | 10 +-
6407 kernel/module.c | 108 +-
6408 kernel/panic.c | 4 +-
6409 kernel/pid.c | 18 +-
6410 kernel/power/Kconfig | 2 +
6411 kernel/printk/printk.c | 7 +-
6412 kernel/ptrace.c | 89 +-
6413 kernel/resource.c | 10 +
6414 kernel/sched/core.c | 11 +-
6415 kernel/seccomp.c | 22 +-
6416 kernel/signal.c | 37 +-
6417 kernel/sys.c | 64 +-
6418 kernel/sysctl.c | 186 +-
6419 kernel/taskstats.c | 6 +
6420 kernel/time/posix-timers.c | 8 +
6421 kernel/time/time.c | 5 +
6422 kernel/time/timekeeping.c | 3 +
6423 kernel/time/timer_list.c | 13 +-
6424 kernel/time/timer_stats.c | 10 +-
6425 kernel/trace/Kconfig | 2 +
6426 kernel/trace/trace_syscalls.c | 8 +
6427 kernel/user_namespace.c | 15 +
6428 lib/Kconfig.debug | 13 +-
6429 lib/Kconfig.kasan | 2 +-
6430 lib/is_single_threaded.c | 3 +
6431 lib/list_debug.c | 65 +-
6432 lib/nlattr.c | 2 +
6433 lib/radix-tree.c | 12 +-
6434 lib/rbtree.c | 4 +-
6435 lib/vsprintf.c | 39 +-
6436 localversion-grsec | 1 +
6437 mm/Kconfig | 8 +-
6438 mm/Kconfig.debug | 1 +
6439 mm/filemap.c | 1 +
6440 mm/kmemleak.c | 4 +-
6441 mm/memory.c | 2 +-
6442 mm/mempolicy.c | 12 +-
6443 mm/migrate.c | 3 +-
6444 mm/mlock.c | 11 +-
6445 mm/mmap.c | 103 +-
6446 mm/mprotect.c | 8 +
6447 mm/oom_kill.c | 4 +
6448 mm/page_alloc.c | 2 +-
6449 mm/process_vm_access.c | 8 +-
6450 mm/shmem.c | 11 +-
6451 mm/slab.c | 14 +-
6452 mm/slab_common.c | 2 +-
6453 mm/slob.c | 12 +
6454 mm/slub.c | 33 +-
6455 mm/util.c | 3 +
6456 mm/vmalloc.c | 82 +-
6457 mm/vmstat.c | 29 +-
6458 net/appletalk/atalk_proc.c | 2 +-
6459 net/atm/lec.c | 6 +-
6460 net/atm/mpoa_caches.c | 42 +-
6461 net/can/bcm.c | 2 +-
6462 net/can/proc.c | 2 +-
6463 net/core/dev_ioctl.c | 7 +-
6464 net/core/filter.c | 8 +-
6465 net/core/net-procfs.c | 17 +-
6466 net/core/pktgen.c | 2 +-
6467 net/core/scm.c | 7 +
6468 net/core/sock.c | 3 +-
6469 net/core/sysctl_net_core.c | 2 +-
6470 net/decnet/dn_dev.c | 2 +-
6471 net/ipv4/Kconfig | 1 +
6472 net/ipv4/devinet.c | 6 +-
6473 net/ipv4/inet_hashtables.c | 4 +
6474 net/ipv4/ip_input.c | 7 +
6475 net/ipv4/ip_sockglue.c | 3 +-
6476 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
6477 net/ipv4/route.c | 6 +-
6478 net/ipv4/tcp_input.c | 6 +-
6479 net/ipv4/tcp_ipv4.c | 24 +-
6480 net/ipv4/tcp_minisocks.c | 9 +-
6481 net/ipv4/tcp_timer.c | 11 +
6482 net/ipv4/udp.c | 24 +
6483 net/ipv6/Kconfig | 1 +
6484 net/ipv6/addrconf.c | 13 +-
6485 net/ipv6/proc.c | 2 +-
6486 net/ipv6/tcp_ipv6.c | 23 +-
6487 net/ipv6/udp.c | 7 +
6488 net/ipx/ipx_proc.c | 2 +-
6489 net/irda/irproc.c | 2 +-
6490 net/iucv/af_iucv.c | 3 +
6491 net/llc/llc_proc.c | 2 +-
6492 net/netfilter/Kconfig | 10 +
6493 net/netfilter/Makefile | 1 +
6494 net/netfilter/nf_conntrack_core.c | 46 +-
6495 net/netfilter/nf_conntrack_helper.c | 2 +-
6496 net/netfilter/nf_conntrack_netlink.c | 2 +-
6497 net/netfilter/xt_gradm.c | 51 +
6498 net/netfilter/xt_hashlimit.c | 4 +-
6499 net/netfilter/xt_recent.c | 2 +-
6500 net/openvswitch/actions.c | 19 +-
6501 net/sctp/sm_sideeffect.c | 11 +-
6502 net/sctp/sm_statefuns.c | 17 +-
6503 net/socket.c | 75 +-
6504 net/sunrpc/Kconfig | 1 +
6505 net/sunrpc/cache.c | 2 +-
6506 net/sunrpc/stats.c | 2 +-
6507 net/sysctl_net.c | 2 +-
6508 net/unix/af_unix.c | 57 +-
6509 net/unix/garbage.c | 8 +-
6510 net/vmw_vsock/vmci_transport_notify.c | 30 +-
6511 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
6512 net/x25/sysctl_net_x25.c | 2 +-
6513 net/x25/x25_proc.c | 2 +-
6514 scripts/package/Makefile | 2 +-
6515 scripts/package/mkspec | 41 +-
6516 security/Kconfig | 369 +-
6517 security/apparmor/file.c | 4 +-
6518 security/apparmor/lsm.c | 8 +-
6519 security/commoncap.c | 36 +-
6520 security/keys/internal.h | 2 +-
6521 security/min_addr.c | 2 +
6522 security/smack/smack_lsm.c | 8 +-
6523 security/tomoyo/file.c | 12 +-
6524 security/tomoyo/mount.c | 4 +
6525 security/tomoyo/tomoyo.c | 20 +-
6526 security/yama/Kconfig | 2 +-
6527 security/yama/yama_lsm.c | 4 +-
6528 sound/core/timer.c | 4 +-
6529 sound/synth/emux/emux_seq.c | 14 +-
6530 sound/usb/line6/driver.c | 40 +-
6531 sound/usb/line6/toneport.c | 12 +-
6532 tools/gcc/.gitignore | 1 +
6533 tools/gcc/Makefile | 12 +
6534 tools/gcc/gen-random-seed.sh | 8 +
6535 tools/gcc/randomize_layout_plugin.c | 930 +++
6536 tools/gcc/size_overflow_plugin/.gitignore | 1 +
6537 .../size_overflow_plugin/size_overflow_hash.data | 463 +-
6538 513 files changed, 33007 insertions(+), 3251 deletions(-)
6539
6540 commit 6cb4f49b6a55cf16ae82685e1ab9b74c95b2f743
6541 Author: Brad Spengler <spender@grsecurity.net>
6542 Date: Mon Feb 15 10:51:41 2016 -0500
6543
6544 Initial import of pax-linux-4.4.1-test3.patch
6545
6546 Documentation/dontdiff | 46 +-
6547 Documentation/kbuild/makefiles.txt | 39 +-
6548 Documentation/kernel-parameters.txt | 28 +
6549 Makefile | 119 +-
6550 arch/alpha/include/asm/atomic.h | 10 +
6551 arch/alpha/include/asm/elf.h | 7 +
6552 arch/alpha/include/asm/pgalloc.h | 6 +
6553 arch/alpha/include/asm/pgtable.h | 11 +
6554 arch/alpha/kernel/module.c | 2 +-
6555 arch/alpha/kernel/osf_sys.c | 8 +-
6556 arch/alpha/mm/fault.c | 141 +-
6557 arch/arm/Kconfig | 3 +-
6558 arch/arm/include/asm/atomic.h | 323 +-
6559 arch/arm/include/asm/cache.h | 5 +-
6560 arch/arm/include/asm/cacheflush.h | 2 +-
6561 arch/arm/include/asm/checksum.h | 14 +-
6562 arch/arm/include/asm/cmpxchg.h | 4 +
6563 arch/arm/include/asm/cpuidle.h | 2 +-
6564 arch/arm/include/asm/domain.h | 42 +-
6565 arch/arm/include/asm/elf.h | 9 +-
6566 arch/arm/include/asm/fncpy.h | 2 +
6567 arch/arm/include/asm/futex.h | 1 +
6568 arch/arm/include/asm/kmap_types.h | 2 +-
6569 arch/arm/include/asm/mach/dma.h | 2 +-
6570 arch/arm/include/asm/mach/map.h | 16 +-
6571 arch/arm/include/asm/outercache.h | 2 +-
6572 arch/arm/include/asm/page.h | 3 +-
6573 arch/arm/include/asm/pgalloc.h | 20 +
6574 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
6575 arch/arm/include/asm/pgtable-2level.h | 3 +
6576 arch/arm/include/asm/pgtable-3level.h | 3 +
6577 arch/arm/include/asm/pgtable.h | 54 +-
6578 arch/arm/include/asm/smp.h | 2 +-
6579 arch/arm/include/asm/thread_info.h | 3 +
6580 arch/arm/include/asm/tls.h | 3 +
6581 arch/arm/include/asm/uaccess.h | 113 +-
6582 arch/arm/include/uapi/asm/ptrace.h | 2 +-
6583 arch/arm/kernel/armksyms.c | 2 +-
6584 arch/arm/kernel/cpuidle.c | 2 +-
6585 arch/arm/kernel/entry-armv.S | 109 +-
6586 arch/arm/kernel/entry-common.S | 40 +-
6587 arch/arm/kernel/entry-header.S | 55 +
6588 arch/arm/kernel/fiq.c | 3 +
6589 arch/arm/kernel/module-plts.c | 7 +-
6590 arch/arm/kernel/module.c | 38 +-
6591 arch/arm/kernel/patch.c | 2 +
6592 arch/arm/kernel/process.c | 92 +-
6593 arch/arm/kernel/reboot.c | 1 +
6594 arch/arm/kernel/setup.c | 20 +-
6595 arch/arm/kernel/signal.c | 35 +-
6596 arch/arm/kernel/smp.c | 2 +-
6597 arch/arm/kernel/tcm.c | 4 +-
6598 arch/arm/kernel/vmlinux.lds.S | 6 +-
6599 arch/arm/kvm/arm.c | 8 +-
6600 arch/arm/lib/copy_page.S | 1 +
6601 arch/arm/lib/csumpartialcopyuser.S | 4 +-
6602 arch/arm/lib/delay.c | 2 +-
6603 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
6604 arch/arm/mach-exynos/suspend.c | 6 +-
6605 arch/arm/mach-mvebu/coherency.c | 4 +-
6606 arch/arm/mach-omap2/board-n8x0.c | 2 +-
6607 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
6608 arch/arm/mach-omap2/omap-smp.c | 1 +
6609 arch/arm/mach-omap2/omap_device.c | 4 +-
6610 arch/arm/mach-omap2/omap_device.h | 4 +-
6611 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
6612 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
6613 arch/arm/mach-omap2/wd_timer.c | 6 +-
6614 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
6615 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
6616 arch/arm/mach-tegra/irq.c | 1 +
6617 arch/arm/mach-ux500/pm.c | 1 +
6618 arch/arm/mach-zynq/platsmp.c | 1 +
6619 arch/arm/mm/Kconfig | 6 +-
6620 arch/arm/mm/cache-l2x0.c | 2 +-
6621 arch/arm/mm/context.c | 10 +-
6622 arch/arm/mm/fault.c | 146 +
6623 arch/arm/mm/fault.h | 12 +
6624 arch/arm/mm/init.c | 39 +
6625 arch/arm/mm/ioremap.c | 4 +-
6626 arch/arm/mm/mmap.c | 30 +-
6627 arch/arm/mm/mmu.c | 162 +-
6628 arch/arm/net/bpf_jit_32.c | 3 +
6629 arch/arm/plat-iop/setup.c | 2 +-
6630 arch/arm/plat-omap/sram.c | 2 +
6631 arch/arm64/include/asm/atomic.h | 10 +
6632 arch/arm64/include/asm/percpu.h | 8 +-
6633 arch/arm64/include/asm/pgalloc.h | 5 +
6634 arch/arm64/include/asm/uaccess.h | 1 +
6635 arch/arm64/mm/dma-mapping.c | 2 +-
6636 arch/avr32/include/asm/elf.h | 8 +-
6637 arch/avr32/include/asm/kmap_types.h | 4 +-
6638 arch/avr32/mm/fault.c | 27 +
6639 arch/frv/include/asm/atomic.h | 10 +
6640 arch/frv/include/asm/kmap_types.h | 2 +-
6641 arch/frv/mm/elf-fdpic.c | 3 +-
6642 arch/ia64/Makefile | 1 +
6643 arch/ia64/include/asm/atomic.h | 10 +
6644 arch/ia64/include/asm/elf.h | 7 +
6645 arch/ia64/include/asm/pgalloc.h | 12 +
6646 arch/ia64/include/asm/pgtable.h | 13 +-
6647 arch/ia64/include/asm/spinlock.h | 2 +-
6648 arch/ia64/include/asm/uaccess.h | 27 +-
6649 arch/ia64/kernel/module.c | 45 +-
6650 arch/ia64/kernel/palinfo.c | 2 +-
6651 arch/ia64/kernel/sys_ia64.c | 7 +
6652 arch/ia64/kernel/vmlinux.lds.S | 2 +-
6653 arch/ia64/mm/fault.c | 32 +-
6654 arch/ia64/mm/init.c | 15 +-
6655 arch/m32r/lib/usercopy.c | 6 +
6656 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
6657 arch/mips/include/asm/atomic.h | 368 +-
6658 arch/mips/include/asm/elf.h | 7 +
6659 arch/mips/include/asm/exec.h | 2 +-
6660 arch/mips/include/asm/hw_irq.h | 2 +-
6661 arch/mips/include/asm/local.h | 57 +
6662 arch/mips/include/asm/page.h | 2 +-
6663 arch/mips/include/asm/pgalloc.h | 5 +
6664 arch/mips/include/asm/pgtable.h | 3 +
6665 arch/mips/include/asm/uaccess.h | 1 +
6666 arch/mips/kernel/binfmt_elfn32.c | 7 +
6667 arch/mips/kernel/binfmt_elfo32.c | 7 +
6668 arch/mips/kernel/irq-gt641xx.c | 2 +-
6669 arch/mips/kernel/irq.c | 6 +-
6670 arch/mips/kernel/pm-cps.c | 2 +-
6671 arch/mips/kernel/process.c | 12 -
6672 arch/mips/kernel/sync-r4k.c | 24 +-
6673 arch/mips/kernel/traps.c | 13 +-
6674 arch/mips/mm/fault.c | 25 +
6675 arch/mips/mm/mmap.c | 51 +-
6676 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
6677 arch/mips/sni/rm200.c | 2 +-
6678 arch/mips/vr41xx/common/icu.c | 2 +-
6679 arch/mips/vr41xx/common/irq.c | 4 +-
6680 arch/parisc/include/asm/atomic.h | 10 +
6681 arch/parisc/include/asm/elf.h | 7 +
6682 arch/parisc/include/asm/pgalloc.h | 6 +
6683 arch/parisc/include/asm/pgtable.h | 11 +
6684 arch/parisc/include/asm/uaccess.h | 4 +-
6685 arch/parisc/kernel/module.c | 50 +-
6686 arch/parisc/kernel/sys_parisc.c | 15 +
6687 arch/parisc/kernel/traps.c | 4 +-
6688 arch/parisc/mm/fault.c | 140 +-
6689 arch/powerpc/include/asm/atomic.h | 329 +-
6690 arch/powerpc/include/asm/elf.h | 12 +
6691 arch/powerpc/include/asm/exec.h | 2 +-
6692 arch/powerpc/include/asm/kmap_types.h | 2 +-
6693 arch/powerpc/include/asm/local.h | 46 +
6694 arch/powerpc/include/asm/mman.h | 2 +-
6695 arch/powerpc/include/asm/page.h | 8 +-
6696 arch/powerpc/include/asm/page_64.h | 7 +-
6697 arch/powerpc/include/asm/pgalloc-64.h | 7 +
6698 arch/powerpc/include/asm/pgtable.h | 1 +
6699 arch/powerpc/include/asm/pte-hash32.h | 1 +
6700 arch/powerpc/include/asm/reg.h | 1 +
6701 arch/powerpc/include/asm/smp.h | 2 +-
6702 arch/powerpc/include/asm/spinlock.h | 42 +-
6703 arch/powerpc/include/asm/uaccess.h | 141 +-
6704 arch/powerpc/kernel/Makefile | 5 +
6705 arch/powerpc/kernel/exceptions-64e.S | 4 +-
6706 arch/powerpc/kernel/exceptions-64s.S | 2 +-
6707 arch/powerpc/kernel/module_32.c | 15 +-
6708 arch/powerpc/kernel/process.c | 46 -
6709 arch/powerpc/kernel/signal_32.c | 2 +-
6710 arch/powerpc/kernel/signal_64.c | 2 +-
6711 arch/powerpc/kernel/traps.c | 21 +
6712 arch/powerpc/kernel/vdso.c | 5 +-
6713 arch/powerpc/lib/usercopy_64.c | 18 -
6714 arch/powerpc/mm/fault.c | 56 +-
6715 arch/powerpc/mm/mmap.c | 16 +
6716 arch/powerpc/mm/slice.c | 13 +-
6717 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
6718 arch/s390/include/asm/atomic.h | 10 +
6719 arch/s390/include/asm/elf.h | 7 +
6720 arch/s390/include/asm/exec.h | 2 +-
6721 arch/s390/include/asm/uaccess.h | 13 +-
6722 arch/s390/kernel/module.c | 22 +-
6723 arch/s390/kernel/process.c | 20 -
6724 arch/s390/mm/mmap.c | 16 +
6725 arch/score/include/asm/exec.h | 2 +-
6726 arch/score/kernel/process.c | 5 -
6727 arch/sh/mm/mmap.c | 22 +-
6728 arch/sparc/include/asm/atomic_64.h | 110 +-
6729 arch/sparc/include/asm/cache.h | 2 +-
6730 arch/sparc/include/asm/elf_32.h | 7 +
6731 arch/sparc/include/asm/elf_64.h | 7 +
6732 arch/sparc/include/asm/pgalloc_32.h | 1 +
6733 arch/sparc/include/asm/pgalloc_64.h | 1 +
6734 arch/sparc/include/asm/pgtable.h | 4 +
6735 arch/sparc/include/asm/pgtable_32.h | 15 +-
6736 arch/sparc/include/asm/pgtsrmmu.h | 5 +
6737 arch/sparc/include/asm/setup.h | 4 +-
6738 arch/sparc/include/asm/spinlock_64.h | 35 +-
6739 arch/sparc/include/asm/thread_info_32.h | 1 +
6740 arch/sparc/include/asm/thread_info_64.h | 2 +
6741 arch/sparc/include/asm/uaccess.h | 1 +
6742 arch/sparc/include/asm/uaccess_32.h | 28 +-
6743 arch/sparc/include/asm/uaccess_64.h | 24 +-
6744 arch/sparc/kernel/Makefile | 2 +-
6745 arch/sparc/kernel/prom_common.c | 2 +-
6746 arch/sparc/kernel/smp_64.c | 8 +-
6747 arch/sparc/kernel/sys_sparc_32.c | 2 +-
6748 arch/sparc/kernel/sys_sparc_64.c | 52 +-
6749 arch/sparc/kernel/traps_64.c | 27 +-
6750 arch/sparc/lib/Makefile | 2 +-
6751 arch/sparc/lib/atomic_64.S | 57 +-
6752 arch/sparc/lib/ksyms.c | 6 +-
6753 arch/sparc/mm/Makefile | 2 +-
6754 arch/sparc/mm/fault_32.c | 292 +
6755 arch/sparc/mm/fault_64.c | 486 +
6756 arch/sparc/mm/hugetlbpage.c | 22 +-
6757 arch/sparc/mm/init_64.c | 10 +-
6758 arch/tile/include/asm/atomic_64.h | 10 +
6759 arch/tile/include/asm/uaccess.h | 4 +-
6760 arch/um/Makefile | 4 +
6761 arch/um/include/asm/kmap_types.h | 2 +-
6762 arch/um/include/asm/page.h | 3 +
6763 arch/um/include/asm/pgtable-3level.h | 1 +
6764 arch/um/kernel/process.c | 16 -
6765 arch/x86/Kconfig | 26 +-
6766 arch/x86/Kconfig.cpu | 6 +-
6767 arch/x86/Kconfig.debug | 4 +-
6768 arch/x86/Makefile | 13 +-
6769 arch/x86/boot/Makefile | 3 +
6770 arch/x86/boot/bitops.h | 4 +-
6771 arch/x86/boot/boot.h | 2 +-
6772 arch/x86/boot/compressed/Makefile | 3 +
6773 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
6774 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
6775 arch/x86/boot/compressed/head_32.S | 4 +-
6776 arch/x86/boot/compressed/head_64.S | 12 +-
6777 arch/x86/boot/compressed/misc.c | 11 +-
6778 arch/x86/boot/cpucheck.c | 16 +-
6779 arch/x86/boot/header.S | 6 +-
6780 arch/x86/boot/memory.c | 2 +-
6781 arch/x86/boot/video-vesa.c | 1 +
6782 arch/x86/boot/video.c | 2 +-
6783 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
6784 arch/x86/crypto/aesni-intel_asm.S | 106 +-
6785 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
6786 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
6787 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
6788 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
6789 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
6790 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
6791 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 2 +
6792 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
6793 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
6794 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
6795 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
6796 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
6797 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
6798 arch/x86/crypto/sha256-avx-asm.S | 2 +
6799 arch/x86/crypto/sha256-avx2-asm.S | 2 +
6800 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
6801 arch/x86/crypto/sha512-avx-asm.S | 2 +
6802 arch/x86/crypto/sha512-avx2-asm.S | 2 +
6803 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
6804 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
6805 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
6806 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
6807 arch/x86/entry/calling.h | 86 +-
6808 arch/x86/entry/common.c | 28 +-
6809 arch/x86/entry/entry_32.S | 311 +-
6810 arch/x86/entry/entry_64.S | 625 +-
6811 arch/x86/entry/entry_64_compat.S | 67 +-
6812 arch/x86/entry/thunk_64.S | 2 +
6813 arch/x86/entry/vdso/Makefile | 2 +-
6814 arch/x86/entry/vdso/vdso2c.h | 8 +-
6815 arch/x86/entry/vdso/vma.c | 37 +-
6816 arch/x86/entry/vsyscall/vsyscall_64.c | 20 +-
6817 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
6818 arch/x86/ia32/ia32_signal.c | 23 +-
6819 arch/x86/ia32/sys_ia32.c | 42 +-
6820 arch/x86/include/asm/alternative-asm.h | 43 +-
6821 arch/x86/include/asm/alternative.h | 4 +-
6822 arch/x86/include/asm/apic.h | 2 +-
6823 arch/x86/include/asm/apm.h | 4 +-
6824 arch/x86/include/asm/atomic.h | 230 +-
6825 arch/x86/include/asm/atomic64_32.h | 100 +
6826 arch/x86/include/asm/atomic64_64.h | 164 +-
6827 arch/x86/include/asm/bitops.h | 18 +-
6828 arch/x86/include/asm/boot.h | 2 +-
6829 arch/x86/include/asm/cache.h | 5 +-
6830 arch/x86/include/asm/checksum_32.h | 12 +-
6831 arch/x86/include/asm/cmpxchg.h | 39 +
6832 arch/x86/include/asm/compat.h | 4 +
6833 arch/x86/include/asm/cpufeature.h | 17 +-
6834 arch/x86/include/asm/desc.h | 78 +-
6835 arch/x86/include/asm/desc_defs.h | 6 +
6836 arch/x86/include/asm/div64.h | 2 +-
6837 arch/x86/include/asm/dma.h | 2 +
6838 arch/x86/include/asm/elf.h | 33 +-
6839 arch/x86/include/asm/emergency-restart.h | 2 +-
6840 arch/x86/include/asm/fpu/internal.h | 42 +-
6841 arch/x86/include/asm/fpu/types.h | 5 +-
6842 arch/x86/include/asm/futex.h | 14 +-
6843 arch/x86/include/asm/hw_irq.h | 4 +-
6844 arch/x86/include/asm/i8259.h | 2 +-
6845 arch/x86/include/asm/io.h | 22 +-
6846 arch/x86/include/asm/irqflags.h | 5 +
6847 arch/x86/include/asm/kprobes.h | 9 +-
6848 arch/x86/include/asm/local.h | 106 +-
6849 arch/x86/include/asm/mman.h | 15 +
6850 arch/x86/include/asm/mmu.h | 14 +-
6851 arch/x86/include/asm/mmu_context.h | 133 +-
6852 arch/x86/include/asm/module.h | 17 +-
6853 arch/x86/include/asm/nmi.h | 19 +-
6854 arch/x86/include/asm/page.h | 1 +
6855 arch/x86/include/asm/page_32.h | 12 +-
6856 arch/x86/include/asm/page_64.h | 14 +-
6857 arch/x86/include/asm/paravirt.h | 46 +-
6858 arch/x86/include/asm/paravirt_types.h | 15 +-
6859 arch/x86/include/asm/pgalloc.h | 23 +
6860 arch/x86/include/asm/pgtable-2level.h | 2 +
6861 arch/x86/include/asm/pgtable-3level.h | 7 +
6862 arch/x86/include/asm/pgtable.h | 126 +-
6863 arch/x86/include/asm/pgtable_32.h | 14 +-
6864 arch/x86/include/asm/pgtable_32_types.h | 24 +-
6865 arch/x86/include/asm/pgtable_64.h | 23 +-
6866 arch/x86/include/asm/pgtable_64_types.h | 5 +
6867 arch/x86/include/asm/pgtable_types.h | 26 +-
6868 arch/x86/include/asm/pmem.h | 2 +-
6869 arch/x86/include/asm/preempt.h | 2 +-
6870 arch/x86/include/asm/processor.h | 57 +-
6871 arch/x86/include/asm/ptrace.h | 15 +-
6872 arch/x86/include/asm/realmode.h | 4 +-
6873 arch/x86/include/asm/reboot.h | 10 +-
6874 arch/x86/include/asm/rmwcc.h | 84 +-
6875 arch/x86/include/asm/rwsem.h | 60 +-
6876 arch/x86/include/asm/segment.h | 27 +-
6877 arch/x86/include/asm/smap.h | 43 +
6878 arch/x86/include/asm/smp.h | 14 +-
6879 arch/x86/include/asm/stackprotector.h | 4 +-
6880 arch/x86/include/asm/stacktrace.h | 34 +-
6881 arch/x86/include/asm/switch_to.h | 4 +-
6882 arch/x86/include/asm/sys_ia32.h | 6 +-
6883 arch/x86/include/asm/thread_info.h | 27 +-
6884 arch/x86/include/asm/tlbflush.h | 77 +-
6885 arch/x86/include/asm/uaccess.h | 210 +-
6886 arch/x86/include/asm/uaccess_32.h | 28 +-
6887 arch/x86/include/asm/uaccess_64.h | 169 +-
6888 arch/x86/include/asm/word-at-a-time.h | 2 +-
6889 arch/x86/include/asm/x86_init.h | 10 +-
6890 arch/x86/include/asm/xen/page.h | 2 +-
6891 arch/x86/include/uapi/asm/e820.h | 2 +-
6892 arch/x86/kernel/Makefile | 2 +-
6893 arch/x86/kernel/acpi/boot.c | 4 +-
6894 arch/x86/kernel/acpi/sleep.c | 4 +
6895 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
6896 arch/x86/kernel/alternative.c | 124 +-
6897 arch/x86/kernel/apic/apic.c | 4 +-
6898 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
6899 arch/x86/kernel/apic/apic_noop.c | 2 +-
6900 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
6901 arch/x86/kernel/apic/io_apic.c | 8 +-
6902 arch/x86/kernel/apic/msi.c | 2 +-
6903 arch/x86/kernel/apic/probe_32.c | 4 +-
6904 arch/x86/kernel/apic/vector.c | 2 +
6905 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
6906 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
6907 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
6908 arch/x86/kernel/apm_32.c | 21 +-
6909 arch/x86/kernel/asm-offsets.c | 20 +
6910 arch/x86/kernel/asm-offsets_64.c | 1 +
6911 arch/x86/kernel/cpu/Makefile | 4 -
6912 arch/x86/kernel/cpu/amd.c | 2 +-
6913 arch/x86/kernel/cpu/bugs_64.c | 2 +
6914 arch/x86/kernel/cpu/common.c | 202 +-
6915 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
6916 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
6917 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
6918 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
6919 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
6920 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
6921 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
6922 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
6923 arch/x86/kernel/cpu/perf_event.c | 10 +-
6924 arch/x86/kernel/cpu/perf_event.h | 2 +-
6925 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
6926 arch/x86/kernel/cpu/perf_event_intel.c | 34 +-
6927 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
6928 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
6929 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
6930 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
6931 arch/x86/kernel/cpu/perf_event_intel_pt.c | 42 +-
6932 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
6933 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
6934 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
6935 arch/x86/kernel/crash_dump_64.c | 2 +-
6936 arch/x86/kernel/doublefault.c | 8 +-
6937 arch/x86/kernel/dumpstack.c | 24 +-
6938 arch/x86/kernel/dumpstack_32.c | 25 +-
6939 arch/x86/kernel/dumpstack_64.c | 62 +-
6940 arch/x86/kernel/e820.c | 4 +-
6941 arch/x86/kernel/early_printk.c | 1 +
6942 arch/x86/kernel/espfix_64.c | 44 +-
6943 arch/x86/kernel/fpu/core.c | 24 +-
6944 arch/x86/kernel/fpu/init.c | 40 +-
6945 arch/x86/kernel/fpu/regset.c | 22 +-
6946 arch/x86/kernel/fpu/signal.c | 20 +-
6947 arch/x86/kernel/fpu/xstate.c | 6 +-
6948 arch/x86/kernel/ftrace.c | 18 +-
6949 arch/x86/kernel/head64.c | 14 +-
6950 arch/x86/kernel/head_32.S | 235 +-
6951 arch/x86/kernel/head_64.S | 173 +-
6952 arch/x86/kernel/i386_ksyms_32.c | 12 +
6953 arch/x86/kernel/i8259.c | 10 +-
6954 arch/x86/kernel/io_delay.c | 2 +-
6955 arch/x86/kernel/ioport.c | 2 +-
6956 arch/x86/kernel/irq.c | 8 +-
6957 arch/x86/kernel/irq_32.c | 45 +-
6958 arch/x86/kernel/jump_label.c | 10 +-
6959 arch/x86/kernel/kgdb.c | 21 +-
6960 arch/x86/kernel/kprobes/core.c | 28 +-
6961 arch/x86/kernel/kprobes/opt.c | 16 +-
6962 arch/x86/kernel/ksysfs.c | 2 +-
6963 arch/x86/kernel/kvmclock.c | 20 +-
6964 arch/x86/kernel/ldt.c | 25 +
6965 arch/x86/kernel/livepatch.c | 11 +-
6966 arch/x86/kernel/machine_kexec_32.c | 6 +-
6967 arch/x86/kernel/mcount_64.S | 19 +-
6968 arch/x86/kernel/module.c | 78 +-
6969 arch/x86/kernel/msr.c | 2 +-
6970 arch/x86/kernel/nmi.c | 34 +-
6971 arch/x86/kernel/nmi_selftest.c | 4 +-
6972 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
6973 arch/x86/kernel/paravirt.c | 45 +-
6974 arch/x86/kernel/paravirt_patch_64.c | 8 +
6975 arch/x86/kernel/pci-calgary_64.c | 2 +-
6976 arch/x86/kernel/pci-iommu_table.c | 2 +-
6977 arch/x86/kernel/pci-swiotlb.c | 2 +-
6978 arch/x86/kernel/process.c | 80 +-
6979 arch/x86/kernel/process_32.c | 29 +-
6980 arch/x86/kernel/process_64.c | 14 +-
6981 arch/x86/kernel/ptrace.c | 20 +-
6982 arch/x86/kernel/pvclock.c | 8 +-
6983 arch/x86/kernel/reboot.c | 44 +-
6984 arch/x86/kernel/reboot_fixups_32.c | 2 +-
6985 arch/x86/kernel/relocate_kernel_64.S | 3 +-
6986 arch/x86/kernel/setup.c | 29 +-
6987 arch/x86/kernel/setup_percpu.c | 29 +-
6988 arch/x86/kernel/signal.c | 17 +-
6989 arch/x86/kernel/smp.c | 2 +-
6990 arch/x86/kernel/smpboot.c | 29 +-
6991 arch/x86/kernel/step.c | 6 +-
6992 arch/x86/kernel/sys_i386_32.c | 184 +
6993 arch/x86/kernel/sys_x86_64.c | 22 +-
6994 arch/x86/kernel/tboot.c | 22 +-
6995 arch/x86/kernel/time.c | 8 +-
6996 arch/x86/kernel/tls.c | 7 +-
6997 arch/x86/kernel/tracepoint.c | 4 +-
6998 arch/x86/kernel/traps.c | 53 +-
6999 arch/x86/kernel/tsc.c | 2 +-
7000 arch/x86/kernel/uprobes.c | 4 +-
7001 arch/x86/kernel/vm86_32.c | 6 +-
7002 arch/x86/kernel/vmlinux.lds.S | 153 +-
7003 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
7004 arch/x86/kernel/x86_init.c | 6 +-
7005 arch/x86/kvm/cpuid.c | 21 +-
7006 arch/x86/kvm/emulate.c | 6 +-
7007 arch/x86/kvm/i8259.c | 10 +-
7008 arch/x86/kvm/ioapic.c | 2 +
7009 arch/x86/kvm/lapic.c | 2 +-
7010 arch/x86/kvm/paging_tmpl.h | 2 +-
7011 arch/x86/kvm/svm.c | 10 +-
7012 arch/x86/kvm/vmx.c | 62 +-
7013 arch/x86/kvm/x86.c | 44 +-
7014 arch/x86/lguest/boot.c | 3 +-
7015 arch/x86/lib/atomic64_386_32.S | 164 +
7016 arch/x86/lib/atomic64_cx8_32.S | 98 +-
7017 arch/x86/lib/checksum_32.S | 99 +-
7018 arch/x86/lib/clear_page_64.S | 3 +
7019 arch/x86/lib/cmpxchg16b_emu.S | 3 +
7020 arch/x86/lib/copy_page_64.S | 14 +-
7021 arch/x86/lib/copy_user_64.S | 66 +-
7022 arch/x86/lib/csum-copy_64.S | 14 +-
7023 arch/x86/lib/csum-wrappers_64.c | 8 +-
7024 arch/x86/lib/getuser.S | 74 +-
7025 arch/x86/lib/insn.c | 8 +-
7026 arch/x86/lib/iomap_copy_64.S | 2 +
7027 arch/x86/lib/memcpy_64.S | 6 +
7028 arch/x86/lib/memmove_64.S | 3 +-
7029 arch/x86/lib/memset_64.S | 3 +
7030 arch/x86/lib/mmx_32.c | 243 +-
7031 arch/x86/lib/msr-reg.S | 2 +
7032 arch/x86/lib/putuser.S | 87 +-
7033 arch/x86/lib/rwsem.S | 6 +-
7034 arch/x86/lib/usercopy_32.c | 359 +-
7035 arch/x86/lib/usercopy_64.c | 22 +-
7036 arch/x86/math-emu/fpu_aux.c | 2 +-
7037 arch/x86/math-emu/fpu_entry.c | 4 +-
7038 arch/x86/math-emu/fpu_system.h | 2 +-
7039 arch/x86/mm/Makefile | 4 +
7040 arch/x86/mm/extable.c | 26 +-
7041 arch/x86/mm/fault.c | 570 +-
7042 arch/x86/mm/gup.c | 6 +-
7043 arch/x86/mm/highmem_32.c | 6 +
7044 arch/x86/mm/hugetlbpage.c | 24 +-
7045 arch/x86/mm/init.c | 111 +-
7046 arch/x86/mm/init_32.c | 111 +-
7047 arch/x86/mm/init_64.c | 46 +-
7048 arch/x86/mm/iomap_32.c | 4 +
7049 arch/x86/mm/ioremap.c | 52 +-
7050 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
7051 arch/x86/mm/mmap.c | 40 +-
7052 arch/x86/mm/mmio-mod.c | 10 +-
7053 arch/x86/mm/mpx.c | 6 +-
7054 arch/x86/mm/numa.c | 4 +-
7055 arch/x86/mm/pageattr.c | 42 +-
7056 arch/x86/mm/pat.c | 12 +-
7057 arch/x86/mm/pat_rbtree.c | 2 +-
7058 arch/x86/mm/pf_in.c | 10 +-
7059 arch/x86/mm/pgtable.c | 214 +-
7060 arch/x86/mm/pgtable_32.c | 3 +
7061 arch/x86/mm/setup_nx.c | 7 +
7062 arch/x86/mm/tlb.c | 4 +
7063 arch/x86/mm/uderef_64.c | 37 +
7064 arch/x86/net/bpf_jit.S | 11 +
7065 arch/x86/net/bpf_jit_comp.c | 13 +-
7066 arch/x86/oprofile/backtrace.c | 6 +-
7067 arch/x86/oprofile/nmi_int.c | 8 +-
7068 arch/x86/oprofile/op_model_amd.c | 8 +-
7069 arch/x86/oprofile/op_model_ppro.c | 7 +-
7070 arch/x86/oprofile/op_x86_model.h | 2 +-
7071 arch/x86/pci/intel_mid_pci.c | 2 +-
7072 arch/x86/pci/irq.c | 8 +-
7073 arch/x86/pci/pcbios.c | 144 +-
7074 arch/x86/platform/efi/efi_32.c | 24 +
7075 arch/x86/platform/efi/efi_64.c | 26 +-
7076 arch/x86/platform/efi/efi_stub_32.S | 64 +-
7077 arch/x86/platform/efi/efi_stub_64.S | 2 +
7078 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
7079 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
7080 arch/x86/platform/intel-mid/mfld.c | 4 +-
7081 arch/x86/platform/intel-mid/mrfl.c | 2 +-
7082 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
7083 arch/x86/platform/olpc/olpc_dt.c | 2 +-
7084 arch/x86/power/cpu.c | 11 +-
7085 arch/x86/realmode/init.c | 10 +-
7086 arch/x86/realmode/rm/Makefile | 3 +
7087 arch/x86/realmode/rm/header.S | 4 +-
7088 arch/x86/realmode/rm/reboot.S | 4 +
7089 arch/x86/realmode/rm/trampoline_32.S | 12 +-
7090 arch/x86/realmode/rm/trampoline_64.S | 3 +-
7091 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
7092 arch/x86/tools/Makefile | 2 +-
7093 arch/x86/tools/relocs.c | 96 +-
7094 arch/x86/um/mem_32.c | 2 +-
7095 arch/x86/um/tls_32.c | 2 +-
7096 arch/x86/xen/enlighten.c | 50 +-
7097 arch/x86/xen/mmu.c | 19 +-
7098 arch/x86/xen/smp.c | 16 +-
7099 arch/x86/xen/xen-asm_32.S | 2 +-
7100 arch/x86/xen/xen-head.S | 11 +
7101 arch/x86/xen/xen-ops.h | 2 -
7102 block/bio.c | 4 +-
7103 block/blk-cgroup.c | 18 +-
7104 block/blk-iopoll.c | 2 +-
7105 block/blk-map.c | 2 +-
7106 block/blk-softirq.c | 2 +-
7107 block/bsg.c | 12 +-
7108 block/cfq-iosched.c | 4 +-
7109 block/compat_ioctl.c | 4 +-
7110 block/genhd.c | 9 +-
7111 block/partitions/efi.c | 8 +-
7112 block/scsi_ioctl.c | 29 +-
7113 crypto/cryptd.c | 4 +-
7114 crypto/crypto_user.c | 8 +-
7115 crypto/pcrypt.c | 2 +-
7116 crypto/zlib.c | 12 +-
7117 drivers/acpi/acpi_video.c | 2 +-
7118 drivers/acpi/apei/apei-internal.h | 2 +-
7119 drivers/acpi/apei/ghes.c | 10 +-
7120 drivers/acpi/bgrt.c | 6 +-
7121 drivers/acpi/blacklist.c | 4 +-
7122 drivers/acpi/bus.c | 4 +-
7123 drivers/acpi/device_pm.c | 4 +-
7124 drivers/acpi/ec.c | 2 +-
7125 drivers/acpi/pci_slot.c | 2 +-
7126 drivers/acpi/processor_idle.c | 2 +-
7127 drivers/acpi/processor_pdc.c | 2 +-
7128 drivers/acpi/sleep.c | 2 +-
7129 drivers/acpi/sysfs.c | 4 +-
7130 drivers/acpi/thermal.c | 2 +-
7131 drivers/acpi/video_detect.c | 7 +-
7132 drivers/ata/libata-core.c | 12 +-
7133 drivers/ata/libata-scsi.c | 2 +-
7134 drivers/ata/libata.h | 2 +-
7135 drivers/ata/pata_arasan_cf.c | 4 +-
7136 drivers/atm/adummy.c | 2 +-
7137 drivers/atm/ambassador.c | 8 +-
7138 drivers/atm/atmtcp.c | 14 +-
7139 drivers/atm/eni.c | 10 +-
7140 drivers/atm/firestream.c | 8 +-
7141 drivers/atm/fore200e.c | 14 +-
7142 drivers/atm/he.c | 18 +-
7143 drivers/atm/horizon.c | 4 +-
7144 drivers/atm/idt77252.c | 36 +-
7145 drivers/atm/iphase.c | 34 +-
7146 drivers/atm/lanai.c | 12 +-
7147 drivers/atm/nicstar.c | 46 +-
7148 drivers/atm/solos-pci.c | 4 +-
7149 drivers/atm/suni.c | 4 +-
7150 drivers/atm/uPD98402.c | 16 +-
7151 drivers/atm/zatm.c | 6 +-
7152 drivers/base/bus.c | 4 +-
7153 drivers/base/devres.c | 4 +-
7154 drivers/base/devtmpfs.c | 8 +-
7155 drivers/base/node.c | 2 +-
7156 drivers/base/platform-msi.c | 20 +-
7157 drivers/base/power/domain.c | 7 +-
7158 drivers/base/power/runtime.c | 6 +-
7159 drivers/base/power/sysfs.c | 2 +-
7160 drivers/base/power/wakeup.c | 8 +-
7161 drivers/base/regmap/regmap-debugfs.c | 4 +-
7162 drivers/base/regmap/regmap.c | 4 +-
7163 drivers/base/syscore.c | 4 +-
7164 drivers/block/cciss.c | 28 +-
7165 drivers/block/cciss.h | 2 +-
7166 drivers/block/cpqarray.c | 28 +-
7167 drivers/block/cpqarray.h | 2 +-
7168 drivers/block/drbd/drbd_bitmap.c | 2 +-
7169 drivers/block/drbd/drbd_int.h | 8 +-
7170 drivers/block/drbd/drbd_main.c | 12 +-
7171 drivers/block/drbd/drbd_nl.c | 4 +-
7172 drivers/block/drbd/drbd_receiver.c | 38 +-
7173 drivers/block/drbd/drbd_worker.c | 14 +-
7174 drivers/block/pktcdvd.c | 4 +-
7175 drivers/block/rbd.c | 2 +-
7176 drivers/bluetooth/btwilink.c | 2 +-
7177 drivers/bus/arm-cci.c | 12 +-
7178 drivers/cdrom/cdrom.c | 11 +-
7179 drivers/cdrom/gdrom.c | 1 -
7180 drivers/char/agp/compat_ioctl.c | 2 +-
7181 drivers/char/agp/frontend.c | 4 +-
7182 drivers/char/agp/intel-gtt.c | 4 +-
7183 drivers/char/hpet.c | 2 +-
7184 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
7185 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
7186 drivers/char/ipmi/ipmi_ssif.c | 12 +-
7187 drivers/char/mem.c | 47 +-
7188 drivers/char/nvram.c | 2 +-
7189 drivers/char/pcmcia/synclink_cs.c | 16 +-
7190 drivers/char/random.c | 12 +-
7191 drivers/char/sonypi.c | 11 +-
7192 drivers/char/tpm/tpm_acpi.c | 3 +-
7193 drivers/char/tpm/tpm_eventlog.c | 5 +-
7194 drivers/char/virtio_console.c | 6 +-
7195 drivers/clk/clk-composite.c | 2 +-
7196 drivers/clk/samsung/clk.h | 2 +-
7197 drivers/clk/socfpga/clk-gate.c | 9 +-
7198 drivers/clk/socfpga/clk-pll.c | 9 +-
7199 drivers/clk/ti/clk.c | 8 +-
7200 drivers/cpufreq/acpi-cpufreq.c | 17 +-
7201 drivers/cpufreq/cpufreq-dt.c | 4 +-
7202 drivers/cpufreq/cpufreq.c | 30 +-
7203 drivers/cpufreq/cpufreq_governor.c | 2 +-
7204 drivers/cpufreq/cpufreq_governor.h | 4 +-
7205 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
7206 drivers/cpufreq/intel_pstate.c | 38 +-
7207 drivers/cpufreq/p4-clockmod.c | 12 +-
7208 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
7209 drivers/cpufreq/speedstep-centrino.c | 7 +-
7210 drivers/cpuidle/driver.c | 2 +-
7211 drivers/cpuidle/dt_idle_states.c | 2 +-
7212 drivers/cpuidle/governor.c | 2 +-
7213 drivers/cpuidle/sysfs.c | 2 +-
7214 drivers/crypto/hifn_795x.c | 4 +-
7215 drivers/devfreq/devfreq.c | 4 +-
7216 drivers/dma/sh/shdma-base.c | 4 +-
7217 drivers/dma/sh/shdmac.c | 2 +-
7218 drivers/edac/edac_device.c | 4 +-
7219 drivers/edac/edac_mc_sysfs.c | 2 +-
7220 drivers/edac/edac_pci.c | 4 +-
7221 drivers/edac/edac_pci_sysfs.c | 22 +-
7222 drivers/edac/mce_amd.h | 2 +-
7223 drivers/firewire/core-card.c | 6 +-
7224 drivers/firewire/core-device.c | 2 +-
7225 drivers/firewire/core-transaction.c | 1 +
7226 drivers/firewire/core.h | 1 +
7227 drivers/firmware/dmi-id.c | 2 +-
7228 drivers/firmware/dmi_scan.c | 12 +-
7229 drivers/firmware/efi/cper.c | 8 +-
7230 drivers/firmware/efi/efi.c | 12 +-
7231 drivers/firmware/efi/efivars.c | 2 +-
7232 drivers/firmware/efi/runtime-map.c | 2 +-
7233 drivers/firmware/google/gsmi.c | 2 +-
7234 drivers/firmware/google/memconsole.c | 7 +-
7235 drivers/firmware/memmap.c | 2 +-
7236 drivers/firmware/psci.c | 2 +-
7237 drivers/gpio/gpio-davinci.c | 6 +-
7238 drivers/gpio/gpio-em.c | 2 +-
7239 drivers/gpio/gpio-ich.c | 2 +-
7240 drivers/gpio/gpio-omap.c | 4 +-
7241 drivers/gpio/gpio-rcar.c | 2 +-
7242 drivers/gpio/gpio-vr41xx.c | 2 +-
7243 drivers/gpio/gpiolib.c | 12 +-
7244 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
7245 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
7246 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 18 +-
7247 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
7248 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
7249 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
7250 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
7251 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
7252 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
7253 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
7254 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
7255 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
7256 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
7257 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
7258 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
7259 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
7260 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
7261 drivers/gpu/drm/armada/armada_drv.c | 3 +-
7262 drivers/gpu/drm/drm_crtc.c | 2 +-
7263 drivers/gpu/drm/drm_drv.c | 2 +-
7264 drivers/gpu/drm/drm_fops.c | 12 +-
7265 drivers/gpu/drm/drm_global.c | 14 +-
7266 drivers/gpu/drm/drm_info.c | 13 +-
7267 drivers/gpu/drm/drm_ioc32.c | 13 +-
7268 drivers/gpu/drm/drm_ioctl.c | 2 +-
7269 drivers/gpu/drm/drm_pci.c | 9 +-
7270 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
7271 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
7272 drivers/gpu/drm/gma500/psb_drv.c | 1 -
7273 drivers/gpu/drm/i810/i810_dma.c | 2 +-
7274 drivers/gpu/drm/i810/i810_drv.c | 6 +-
7275 drivers/gpu/drm/i810/i810_drv.h | 6 +-
7276 drivers/gpu/drm/i915/i915_dma.c | 4 +-
7277 drivers/gpu/drm/i915/i915_drv.c | 7 +-
7278 drivers/gpu/drm/i915/i915_drv.h | 2 +-
7279 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
7280 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
7281 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
7282 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
7283 drivers/gpu/drm/i915/i915_irq.c | 88 +-
7284 drivers/gpu/drm/i915/intel_display.c | 26 +-
7285 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
7286 drivers/gpu/drm/mga/mga_drv.c | 5 +-
7287 drivers/gpu/drm/mga/mga_drv.h | 6 +-
7288 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
7289 drivers/gpu/drm/mga/mga_irq.c | 8 +-
7290 drivers/gpu/drm/mga/mga_state.c | 2 +-
7291 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
7292 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 +-
7293 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
7294 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
7295 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
7296 drivers/gpu/drm/omapdrm/Makefile | 2 +-
7297 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
7298 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
7299 drivers/gpu/drm/qxl/qxl_drv.c | 8 +-
7300 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
7301 drivers/gpu/drm/qxl/qxl_ioctl.c | 12 +-
7302 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
7303 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
7304 drivers/gpu/drm/r128/r128_cce.c | 2 +-
7305 drivers/gpu/drm/r128/r128_drv.c | 4 +-
7306 drivers/gpu/drm/r128/r128_drv.h | 6 +-
7307 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
7308 drivers/gpu/drm/r128/r128_irq.c | 4 +-
7309 drivers/gpu/drm/r128/r128_state.c | 6 +-
7310 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
7311 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
7312 drivers/gpu/drm/radeon/radeon_drv.c | 17 +-
7313 drivers/gpu/drm/radeon/radeon_drv.h | 4 +-
7314 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
7315 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
7316 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
7317 drivers/gpu/drm/radeon/radeon_state.c | 6 +-
7318 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
7319 drivers/gpu/drm/savage/savage_bci.c | 2 +-
7320 drivers/gpu/drm/savage/savage_drv.c | 5 +-
7321 drivers/gpu/drm/savage/savage_drv.h | 2 +-
7322 drivers/gpu/drm/sis/sis_drv.c | 5 +-
7323 drivers/gpu/drm/sis/sis_drv.h | 2 +-
7324 drivers/gpu/drm/sis/sis_mm.c | 2 +-
7325 drivers/gpu/drm/tegra/dc.c | 2 +-
7326 drivers/gpu/drm/tegra/dsi.c | 2 +-
7327 drivers/gpu/drm/tegra/hdmi.c | 2 +-
7328 drivers/gpu/drm/tegra/sor.c | 7 +-
7329 drivers/gpu/drm/tilcdc/Makefile | 6 +-
7330 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
7331 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
7332 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
7333 drivers/gpu/drm/udl/udl_fb.c | 1 -
7334 drivers/gpu/drm/via/via_dma.c | 2 +-
7335 drivers/gpu/drm/via/via_drv.c | 5 +-
7336 drivers/gpu/drm/via/via_drv.h | 6 +-
7337 drivers/gpu/drm/via/via_irq.c | 18 +-
7338 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
7339 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
7340 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
7341 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
7342 drivers/gpu/vga/vga_switcheroo.c | 4 +-
7343 drivers/hid/hid-core.c | 4 +-
7344 drivers/hid/hid-sensor-custom.c | 2 +-
7345 drivers/hv/channel.c | 6 +-
7346 drivers/hv/hv.c | 4 +-
7347 drivers/hv/hv_balloon.c | 18 +-
7348 drivers/hv/hyperv_vmbus.h | 2 +-
7349 drivers/hwmon/acpi_power_meter.c | 6 +-
7350 drivers/hwmon/applesmc.c | 2 +-
7351 drivers/hwmon/asus_atk0110.c | 10 +-
7352 drivers/hwmon/coretemp.c | 2 +-
7353 drivers/hwmon/dell-smm-hwmon.c | 2 +-
7354 drivers/hwmon/ibmaem.c | 2 +-
7355 drivers/hwmon/iio_hwmon.c | 2 +-
7356 drivers/hwmon/nct6683.c | 6 +-
7357 drivers/hwmon/nct6775.c | 6 +-
7358 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
7359 drivers/hwmon/sht15.c | 12 +-
7360 drivers/hwmon/via-cputemp.c | 2 +-
7361 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
7362 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
7363 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
7364 drivers/i2c/i2c-dev.c | 2 +-
7365 drivers/ide/ide-cd.c | 2 +-
7366 drivers/ide/ide-disk.c | 2 +-
7367 drivers/iio/industrialio-core.c | 2 +-
7368 drivers/iio/magnetometer/ak8975.c | 2 +-
7369 drivers/infiniband/core/cm.c | 32 +-
7370 drivers/infiniband/core/fmr_pool.c | 20 +-
7371 drivers/infiniband/core/netlink.c | 5 +-
7372 drivers/infiniband/core/uverbs_cmd.c | 3 +
7373 drivers/infiniband/hw/cxgb4/device.c | 6 +-
7374 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
7375 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
7376 drivers/infiniband/hw/mlx4/mad.c | 2 +-
7377 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
7378 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
7379 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
7380 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
7381 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
7382 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
7383 drivers/infiniband/hw/nes/nes.c | 4 +-
7384 drivers/infiniband/hw/nes/nes.h | 40 +-
7385 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
7386 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
7387 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
7388 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
7389 drivers/infiniband/hw/qib/qib.h | 1 +
7390 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
7391 drivers/input/evdev.c | 2 +-
7392 drivers/input/gameport/gameport.c | 4 +-
7393 drivers/input/input.c | 4 +-
7394 drivers/input/joystick/sidewinder.c | 1 +
7395 drivers/input/misc/ims-pcu.c | 4 +-
7396 drivers/input/mouse/psmouse.h | 2 +-
7397 drivers/input/mousedev.c | 2 +-
7398 drivers/input/serio/serio.c | 4 +-
7399 drivers/input/serio/serio_raw.c | 4 +-
7400 drivers/input/touchscreen/htcpen.c | 2 +-
7401 drivers/iommu/arm-smmu-v3.c | 2 +-
7402 drivers/iommu/arm-smmu.c | 43 +-
7403 drivers/iommu/io-pgtable-arm.c | 101 +-
7404 drivers/iommu/io-pgtable.c | 11 +-
7405 drivers/iommu/io-pgtable.h | 19 +-
7406 drivers/iommu/iommu.c | 2 +-
7407 drivers/iommu/ipmmu-vmsa.c | 13 +-
7408 drivers/iommu/irq_remapping.c | 2 +-
7409 drivers/irqchip/irq-gic.c | 2 +-
7410 drivers/irqchip/irq-i8259.c | 2 +-
7411 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
7412 drivers/isdn/capi/capi.c | 10 +-
7413 drivers/isdn/gigaset/interface.c | 8 +-
7414 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
7415 drivers/isdn/hardware/avm/b1.c | 4 +-
7416 drivers/isdn/i4l/isdn_common.c | 2 +
7417 drivers/isdn/i4l/isdn_tty.c | 22 +-
7418 drivers/isdn/icn/icn.c | 2 +-
7419 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
7420 drivers/lguest/core.c | 10 +-
7421 drivers/lguest/page_tables.c | 2 +-
7422 drivers/lguest/x86/core.c | 12 +-
7423 drivers/lguest/x86/switcher_32.S | 27 +-
7424 drivers/md/bcache/alloc.c | 2 +-
7425 drivers/md/bcache/bcache.h | 10 +-
7426 drivers/md/bcache/btree.c | 2 +-
7427 drivers/md/bcache/closure.h | 2 +-
7428 drivers/md/bcache/io.c | 10 +-
7429 drivers/md/bcache/journal.c | 2 +-
7430 drivers/md/bcache/stats.c | 26 +-
7431 drivers/md/bcache/stats.h | 16 +-
7432 drivers/md/bcache/super.c | 2 +-
7433 drivers/md/bcache/sysfs.c | 20 +-
7434 drivers/md/bitmap.c | 2 +-
7435 drivers/md/dm-cache-target.c | 98 +-
7436 drivers/md/dm-ioctl.c | 2 +-
7437 drivers/md/dm-raid.c | 2 +-
7438 drivers/md/dm-raid1.c | 18 +-
7439 drivers/md/dm-stats.c | 6 +-
7440 drivers/md/dm-stripe.c | 10 +-
7441 drivers/md/dm-table.c | 2 +-
7442 drivers/md/dm-thin-metadata.c | 4 +-
7443 drivers/md/dm.c | 28 +-
7444 drivers/md/md.c | 37 +-
7445 drivers/md/md.h | 8 +-
7446 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
7447 drivers/md/persistent-data/dm-space-map.h | 1 +
7448 drivers/md/raid1.c | 8 +-
7449 drivers/md/raid10.c | 20 +-
7450 drivers/md/raid5.c | 26 +-
7451 drivers/media/dvb-core/dvbdev.c | 2 +-
7452 drivers/media/dvb-frontends/af9033.h | 2 +-
7453 drivers/media/dvb-frontends/dib3000.h | 2 +-
7454 drivers/media/dvb-frontends/dib7000p.h | 2 +-
7455 drivers/media/dvb-frontends/dib8000.h | 2 +-
7456 drivers/media/pci/cx88/cx88-video.c | 6 +-
7457 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
7458 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
7459 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
7460 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
7461 drivers/media/pci/tw68/tw68-core.c | 2 +-
7462 drivers/media/pci/zoran/zoran.h | 1 -
7463 drivers/media/pci/zoran/zoran_driver.c | 3 -
7464 drivers/media/platform/omap/omap_vout.c | 11 +-
7465 drivers/media/platform/s5p-tv/mixer.h | 2 +-
7466 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
7467 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
7468 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
7469 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
7470 drivers/media/radio/radio-cadet.c | 2 +
7471 drivers/media/radio/radio-maxiradio.c | 2 +-
7472 drivers/media/radio/radio-shark.c | 2 +-
7473 drivers/media/radio/radio-shark2.c | 2 +-
7474 drivers/media/radio/radio-si476x.c | 2 +-
7475 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
7476 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
7477 drivers/media/v4l2-core/v4l2-device.c | 4 +-
7478 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
7479 drivers/memory/omap-gpmc.c | 21 +-
7480 drivers/message/fusion/mptsas.c | 34 +-
7481 drivers/mfd/ab8500-debugfs.c | 2 +-
7482 drivers/mfd/kempld-core.c | 2 +-
7483 drivers/mfd/max8925-i2c.c | 2 +-
7484 drivers/mfd/tps65910.c | 2 +-
7485 drivers/mfd/twl4030-irq.c | 9 +-
7486 drivers/misc/c2port/core.c | 4 +-
7487 drivers/misc/kgdbts.c | 4 +-
7488 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
7489 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
7490 drivers/misc/mic/scif/scif_api.c | 10 +-
7491 drivers/misc/mic/scif/scif_rb.c | 8 +-
7492 drivers/misc/sgi-gru/gruhandles.c | 4 +-
7493 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
7494 drivers/misc/sgi-gru/grutables.h | 158 +-
7495 drivers/misc/sgi-xp/xp.h | 2 +-
7496 drivers/misc/sgi-xp/xpc.h | 3 +-
7497 drivers/misc/sgi-xp/xpc_main.c | 2 +-
7498 drivers/mmc/host/dw_mmc.h | 2 +-
7499 drivers/mmc/host/mmci.c | 4 +-
7500 drivers/mmc/host/omap_hsmmc.c | 4 +-
7501 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
7502 drivers/mmc/host/sdhci-s3c.c | 8 +-
7503 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
7504 drivers/mtd/nand/denali.c | 1 +
7505 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
7506 drivers/mtd/nftlmount.c | 1 +
7507 drivers/mtd/sm_ftl.c | 2 +-
7508 drivers/net/bonding/bond_netlink.c | 2 +-
7509 drivers/net/caif/caif_hsi.c | 2 +-
7510 drivers/net/can/Kconfig | 2 +-
7511 drivers/net/can/dev.c | 2 +-
7512 drivers/net/can/vcan.c | 2 +-
7513 drivers/net/dummy.c | 2 +-
7514 drivers/net/ethernet/8390/ax88796.c | 4 +-
7515 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
7516 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
7517 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
7518 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
7519 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
7520 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
7521 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
7522 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
7523 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
7524 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
7525 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
7526 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
7527 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
7528 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
7529 drivers/net/ethernet/broadcom/tg3.h | 1 +
7530 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
7531 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
7532 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
7533 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
7534 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
7535 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
7536 drivers/net/ethernet/faraday/ftmac100.c | 2 +
7537 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
7538 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
7539 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
7540 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
7541 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
7542 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
7543 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
7544 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
7545 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
7546 drivers/net/ethernet/realtek/r8169.c | 8 +-
7547 drivers/net/ethernet/sfc/ptp.c | 2 +-
7548 drivers/net/ethernet/sfc/selftest.c | 20 +-
7549 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
7550 drivers/net/ethernet/via/via-rhine.c | 2 +-
7551 drivers/net/geneve.c | 2 +-
7552 drivers/net/hyperv/hyperv_net.h | 2 +-
7553 drivers/net/hyperv/rndis_filter.c | 7 +-
7554 drivers/net/ifb.c | 2 +-
7555 drivers/net/ipvlan/ipvlan_core.c | 2 +-
7556 drivers/net/irda/vlsi_ir.c | 18 +-
7557 drivers/net/irda/vlsi_ir.h | 14 +-
7558 drivers/net/macvlan.c | 20 +-
7559 drivers/net/macvtap.c | 10 +-
7560 drivers/net/nlmon.c | 2 +-
7561 drivers/net/phy/phy_device.c | 6 +-
7562 drivers/net/ppp/ppp_generic.c | 4 +-
7563 drivers/net/slip/slhc.c | 2 +-
7564 drivers/net/team/team.c | 4 +-
7565 drivers/net/tun.c | 7 +-
7566 drivers/net/usb/hso.c | 23 +-
7567 drivers/net/usb/r8152.c | 2 +-
7568 drivers/net/usb/sierra_net.c | 4 +-
7569 drivers/net/virtio_net.c | 2 +-
7570 drivers/net/vrf.c | 2 +-
7571 drivers/net/vxlan.c | 4 +-
7572 drivers/net/wimax/i2400m/rx.c | 2 +-
7573 drivers/net/wireless/airo.c | 2 +-
7574 drivers/net/wireless/at76c50x-usb.c | 2 +-
7575 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
7576 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
7577 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
7578 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
7579 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
7580 drivers/net/wireless/ath/ath9k/main.c | 22 +-
7581 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
7582 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
7583 drivers/net/wireless/ath/carl9170/main.c | 10 +-
7584 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
7585 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
7586 drivers/net/wireless/b43/phy_lp.c | 2 +-
7587 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
7588 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
7589 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
7590 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
7591 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
7592 drivers/net/wireless/mac80211_hwsim.c | 28 +-
7593 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
7594 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
7595 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
7596 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
7597 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
7598 drivers/of/fdt.c | 4 +-
7599 drivers/oprofile/buffer_sync.c | 8 +-
7600 drivers/oprofile/event_buffer.c | 2 +-
7601 drivers/oprofile/oprof.c | 2 +-
7602 drivers/oprofile/oprofile_stats.c | 10 +-
7603 drivers/oprofile/oprofile_stats.h | 10 +-
7604 drivers/oprofile/oprofilefs.c | 6 +-
7605 drivers/oprofile/timer_int.c | 2 +-
7606 drivers/parport/procfs.c | 4 +-
7607 drivers/pci/host/pci-host-generic.c | 2 +-
7608 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
7609 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
7610 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
7611 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
7612 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
7613 drivers/pci/hotplug/pciehp_core.c | 2 +-
7614 drivers/pci/msi.c | 22 +-
7615 drivers/pci/pci-sysfs.c | 6 +-
7616 drivers/pci/pci.h | 2 +-
7617 drivers/pci/pcie/aspm.c | 6 +-
7618 drivers/pci/pcie/portdrv_pci.c | 2 +-
7619 drivers/pci/probe.c | 2 +-
7620 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
7621 drivers/pinctrl/pinctrl-at91.c | 5 +-
7622 drivers/platform/chrome/chromeos_pstore.c | 2 +-
7623 drivers/platform/x86/alienware-wmi.c | 4 +-
7624 drivers/platform/x86/compal-laptop.c | 2 +-
7625 drivers/platform/x86/hdaps.c | 2 +-
7626 drivers/platform/x86/ibm_rtl.c | 2 +-
7627 drivers/platform/x86/intel_oaktrail.c | 2 +-
7628 drivers/platform/x86/msi-laptop.c | 16 +-
7629 drivers/platform/x86/msi-wmi.c | 2 +-
7630 drivers/platform/x86/samsung-laptop.c | 2 +-
7631 drivers/platform/x86/samsung-q10.c | 2 +-
7632 drivers/platform/x86/sony-laptop.c | 14 +-
7633 drivers/platform/x86/thinkpad_acpi.c | 2 +-
7634 drivers/pnp/pnpbios/bioscalls.c | 14 +-
7635 drivers/pnp/pnpbios/core.c | 2 +-
7636 drivers/power/pda_power.c | 7 +-
7637 drivers/power/power_supply.h | 4 +-
7638 drivers/power/power_supply_core.c | 7 +-
7639 drivers/power/power_supply_sysfs.c | 6 +-
7640 drivers/power/reset/at91-reset.c | 5 +-
7641 drivers/powercap/powercap_sys.c | 136 +-
7642 drivers/ptp/ptp_private.h | 2 +-
7643 drivers/ptp/ptp_sysfs.c | 2 +-
7644 drivers/regulator/core.c | 4 +-
7645 drivers/regulator/max8660.c | 6 +-
7646 drivers/regulator/max8973-regulator.c | 16 +-
7647 drivers/regulator/mc13892-regulator.c | 8 +-
7648 drivers/rtc/rtc-armada38x.c | 7 +-
7649 drivers/rtc/rtc-cmos.c | 4 +-
7650 drivers/rtc/rtc-ds1307.c | 2 +-
7651 drivers/rtc/rtc-m48t59.c | 4 +-
7652 drivers/rtc/rtc-rv8803.c | 15 +-
7653 drivers/rtc/rtc-test.c | 6 +-
7654 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
7655 drivers/scsi/bfa/bfa_ioc.h | 4 +-
7656 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
7657 drivers/scsi/hosts.c | 4 +-
7658 drivers/scsi/hpsa.c | 38 +-
7659 drivers/scsi/hpsa.h | 2 +-
7660 drivers/scsi/hptiop.c | 2 -
7661 drivers/scsi/hptiop.h | 1 -
7662 drivers/scsi/ipr.c | 6 +-
7663 drivers/scsi/ipr.h | 2 +-
7664 drivers/scsi/libfc/fc_exch.c | 50 +-
7665 drivers/scsi/libsas/sas_ata.c | 2 +-
7666 drivers/scsi/lpfc/lpfc.h | 8 +-
7667 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
7668 drivers/scsi/lpfc/lpfc_init.c | 6 +-
7669 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
7670 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
7671 drivers/scsi/pmcraid.c | 20 +-
7672 drivers/scsi/pmcraid.h | 8 +-
7673 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
7674 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
7675 drivers/scsi/qla2xxx/qla_os.c | 6 +-
7676 drivers/scsi/qla2xxx/qla_target.c | 10 +-
7677 drivers/scsi/qla2xxx/qla_target.h | 2 +-
7678 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
7679 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
7680 drivers/scsi/scsi.c | 2 +-
7681 drivers/scsi/scsi_lib.c | 8 +-
7682 drivers/scsi/scsi_sysfs.c | 2 +-
7683 drivers/scsi/scsi_transport_fc.c | 8 +-
7684 drivers/scsi/scsi_transport_iscsi.c | 6 +-
7685 drivers/scsi/scsi_transport_srp.c | 6 +-
7686 drivers/scsi/sd.c | 6 +-
7687 drivers/scsi/sg.c | 2 +-
7688 drivers/scsi/sr.c | 21 +-
7689 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
7690 drivers/spi/spi.c | 2 +-
7691 drivers/staging/android/timed_output.c | 6 +-
7692 drivers/staging/comedi/comedi_fops.c | 8 +-
7693 drivers/staging/fbtft/fbtft-core.c | 2 +-
7694 drivers/staging/fbtft/fbtft.h | 2 +-
7695 drivers/staging/gdm724x/gdm_tty.c | 2 +-
7696 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
7697 drivers/staging/iio/adc/ad7280a.c | 4 +-
7698 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
7699 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
7700 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
7701 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
7702 drivers/staging/lustre/lustre/include/obd.h | 2 +-
7703 drivers/staging/octeon/ethernet-rx.c | 20 +-
7704 drivers/staging/octeon/ethernet.c | 8 +-
7705 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
7706 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
7707 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
7708 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
7709 drivers/staging/sm750fb/sm750.c | 14 +-
7710 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
7711 drivers/target/sbp/sbp_target.c | 4 +-
7712 drivers/thermal/cpu_cooling.c | 9 +-
7713 drivers/thermal/devfreq_cooling.c | 19 +-
7714 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
7715 drivers/thermal/of-thermal.c | 17 +-
7716 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
7717 drivers/tty/cyclades.c | 6 +-
7718 drivers/tty/hvc/hvc_console.c | 14 +-
7719 drivers/tty/hvc/hvcs.c | 21 +-
7720 drivers/tty/hvc/hvsi.c | 22 +-
7721 drivers/tty/hvc/hvsi_lib.c | 4 +-
7722 drivers/tty/ipwireless/tty.c | 27 +-
7723 drivers/tty/moxa.c | 2 +-
7724 drivers/tty/n_gsm.c | 4 +-
7725 drivers/tty/n_tty.c | 19 +-
7726 drivers/tty/pty.c | 4 +-
7727 drivers/tty/rocket.c | 6 +-
7728 drivers/tty/serial/8250/8250_core.c | 10 +-
7729 drivers/tty/serial/ifx6x60.c | 2 +-
7730 drivers/tty/serial/ioc4_serial.c | 6 +-
7731 drivers/tty/serial/kgdb_nmi.c | 4 +-
7732 drivers/tty/serial/kgdboc.c | 32 +-
7733 drivers/tty/serial/msm_serial.c | 4 +-
7734 drivers/tty/serial/samsung.c | 9 +-
7735 drivers/tty/serial/serial_core.c | 8 +-
7736 drivers/tty/synclink.c | 34 +-
7737 drivers/tty/synclink_gt.c | 28 +-
7738 drivers/tty/synclinkmp.c | 34 +-
7739 drivers/tty/tty_io.c | 2 +-
7740 drivers/tty/tty_ldisc.c | 8 +-
7741 drivers/tty/tty_port.c | 22 +-
7742 drivers/uio/uio.c | 13 +-
7743 drivers/usb/atm/cxacru.c | 2 +-
7744 drivers/usb/atm/usbatm.c | 24 +-
7745 drivers/usb/class/cdc-acm.h | 2 +-
7746 drivers/usb/core/devices.c | 6 +-
7747 drivers/usb/core/devio.c | 12 +-
7748 drivers/usb/core/hcd.c | 4 +-
7749 drivers/usb/core/sysfs.c | 2 +-
7750 drivers/usb/core/usb.c | 2 +-
7751 drivers/usb/early/ehci-dbgp.c | 16 +-
7752 drivers/usb/gadget/function/u_serial.c | 22 +-
7753 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
7754 drivers/usb/host/ehci-hcd.c | 2 +-
7755 drivers/usb/host/ehci-hub.c | 4 +-
7756 drivers/usb/host/ehci-q.c | 4 +-
7757 drivers/usb/host/fotg210-hcd.c | 2 +-
7758 drivers/usb/host/hwa-hc.c | 2 +-
7759 drivers/usb/host/ohci-hcd.c | 2 +-
7760 drivers/usb/host/r8a66597.h | 2 +-
7761 drivers/usb/host/uhci-hcd.c | 2 +-
7762 drivers/usb/host/xhci-pci.c | 2 +-
7763 drivers/usb/host/xhci.c | 2 +-
7764 drivers/usb/misc/appledisplay.c | 4 +-
7765 drivers/usb/serial/console.c | 8 +-
7766 drivers/usb/storage/transport.c | 2 +-
7767 drivers/usb/storage/usb.c | 2 +-
7768 drivers/usb/storage/usb.h | 2 +-
7769 drivers/usb/usbip/vhci.h | 2 +-
7770 drivers/usb/usbip/vhci_hcd.c | 6 +-
7771 drivers/usb/usbip/vhci_rx.c | 2 +-
7772 drivers/usb/wusbcore/wa-hc.h | 4 +-
7773 drivers/usb/wusbcore/wa-xfer.c | 2 +-
7774 drivers/vhost/vringh.c | 20 +-
7775 drivers/video/backlight/kb3886_bl.c | 2 +-
7776 drivers/video/console/fbcon.c | 2 +-
7777 drivers/video/fbdev/aty/aty128fb.c | 2 +-
7778 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
7779 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
7780 drivers/video/fbdev/core/fb_defio.c | 6 +-
7781 drivers/video/fbdev/core/fbmem.c | 12 +-
7782 drivers/video/fbdev/hyperv_fb.c | 4 +-
7783 drivers/video/fbdev/i810/i810_accel.c | 1 +
7784 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
7785 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
7786 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
7787 drivers/video/fbdev/omap2/dss/display.c | 8 +-
7788 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
7789 drivers/video/fbdev/smscufx.c | 4 +-
7790 drivers/video/fbdev/udlfb.c | 36 +-
7791 drivers/video/fbdev/uvesafb.c | 52 +-
7792 drivers/video/fbdev/vesafb.c | 58 +-
7793 drivers/video/fbdev/via/via_clock.h | 2 +-
7794 drivers/xen/events/events_base.c | 6 +-
7795 fs/Kconfig.binfmt | 2 +-
7796 fs/afs/inode.c | 4 +-
7797 fs/aio.c | 2 +-
7798 fs/autofs4/waitq.c | 2 +-
7799 fs/befs/endian.h | 6 +-
7800 fs/binfmt_aout.c | 23 +-
7801 fs/binfmt_elf.c | 670 +-
7802 fs/binfmt_elf_fdpic.c | 4 +-
7803 fs/block_dev.c | 2 +-
7804 fs/btrfs/ctree.c | 11 +-
7805 fs/btrfs/ctree.h | 4 +-
7806 fs/btrfs/delayed-inode.c | 9 +-
7807 fs/btrfs/delayed-inode.h | 6 +-
7808 fs/btrfs/delayed-ref.c | 4 +-
7809 fs/btrfs/disk-io.c | 4 +-
7810 fs/btrfs/extent_map.c | 8 +-
7811 fs/btrfs/file.c | 4 +-
7812 fs/btrfs/inode.c | 14 +-
7813 fs/btrfs/raid56.c | 32 +-
7814 fs/btrfs/super.c | 2 +-
7815 fs/btrfs/sysfs.c | 2 +-
7816 fs/btrfs/tests/btrfs-tests.c | 2 +-
7817 fs/btrfs/tests/free-space-tests.c | 8 +-
7818 fs/btrfs/transaction.c | 2 +-
7819 fs/btrfs/tree-log.c | 8 +-
7820 fs/btrfs/tree-log.h | 2 +-
7821 fs/btrfs/volumes.c | 14 +-
7822 fs/btrfs/volumes.h | 22 +-
7823 fs/buffer.c | 2 +-
7824 fs/cachefiles/bind.c | 6 +-
7825 fs/cachefiles/daemon.c | 8 +-
7826 fs/cachefiles/internal.h | 12 +-
7827 fs/cachefiles/namei.c | 2 +-
7828 fs/cachefiles/proc.c | 12 +-
7829 fs/ceph/dir.c | 12 +-
7830 fs/ceph/super.c | 4 +-
7831 fs/cifs/cifs_debug.c | 12 +-
7832 fs/cifs/cifsfs.c | 8 +-
7833 fs/cifs/cifsglob.h | 54 +-
7834 fs/cifs/file.c | 12 +-
7835 fs/cifs/misc.c | 4 +-
7836 fs/cifs/smb1ops.c | 80 +-
7837 fs/cifs/smb2ops.c | 84 +-
7838 fs/cifs/smb2pdu.c | 3 +-
7839 fs/coda/cache.c | 10 +-
7840 fs/compat.c | 7 +-
7841 fs/compat_binfmt_elf.c | 2 +
7842 fs/compat_ioctl.c | 12 +-
7843 fs/configfs/dir.c | 10 +-
7844 fs/coredump.c | 18 +-
7845 fs/dcache.c | 64 +-
7846 fs/ecryptfs/inode.c | 2 +-
7847 fs/ecryptfs/miscdev.c | 2 +-
7848 fs/exec.c | 362 +-
7849 fs/ext2/xattr.c | 5 +-
7850 fs/ext4/ext4.h | 20 +-
7851 fs/ext4/mballoc.c | 44 +-
7852 fs/ext4/resize.c | 16 +-
7853 fs/ext4/super.c | 2 +-
7854 fs/ext4/sysfs.c | 2 +-
7855 fs/ext4/xattr.c | 5 +-
7856 fs/fhandle.c | 5 +-
7857 fs/file.c | 18 +-
7858 fs/fs-writeback.c | 11 +-
7859 fs/fs_struct.c | 8 +-
7860 fs/fscache/cookie.c | 40 +-
7861 fs/fscache/internal.h | 202 +-
7862 fs/fscache/object.c | 26 +-
7863 fs/fscache/operation.c | 38 +-
7864 fs/fscache/page.c | 110 +-
7865 fs/fscache/stats.c | 348 +-
7866 fs/fuse/cuse.c | 10 +-
7867 fs/fuse/dev.c | 4 +-
7868 fs/gfs2/file.c | 2 +-
7869 fs/gfs2/glock.c | 22 +-
7870 fs/gfs2/glops.c | 4 +-
7871 fs/gfs2/quota.c | 6 +-
7872 fs/hugetlbfs/inode.c | 13 +-
7873 fs/inode.c | 4 +-
7874 fs/jbd2/commit.c | 2 +-
7875 fs/jbd2/transaction.c | 4 +-
7876 fs/jffs2/erase.c | 3 +-
7877 fs/jffs2/wbuf.c | 3 +-
7878 fs/jfs/super.c | 2 +-
7879 fs/kernfs/dir.c | 2 +-
7880 fs/kernfs/file.c | 20 +-
7881 fs/libfs.c | 10 +-
7882 fs/lockd/clntproc.c | 4 +-
7883 fs/namei.c | 16 +-
7884 fs/namespace.c | 16 +-
7885 fs/nfs/callback_xdr.c | 2 +-
7886 fs/nfs/inode.c | 6 +-
7887 fs/nfsd/nfs4proc.c | 2 +-
7888 fs/nfsd/nfs4xdr.c | 2 +-
7889 fs/nfsd/nfscache.c | 11 +-
7890 fs/nfsd/vfs.c | 6 +-
7891 fs/nls/nls_base.c | 26 +-
7892 fs/nls/nls_euc-jp.c | 6 +-
7893 fs/nls/nls_koi8-ru.c | 6 +-
7894 fs/notify/fanotify/fanotify_user.c | 4 +-
7895 fs/notify/notification.c | 4 +-
7896 fs/ntfs/dir.c | 2 +-
7897 fs/ntfs/super.c | 6 +-
7898 fs/ocfs2/dlm/dlmcommon.h | 4 +-
7899 fs/ocfs2/dlm/dlmdebug.c | 10 +-
7900 fs/ocfs2/dlm/dlmdomain.c | 4 +-
7901 fs/ocfs2/dlm/dlmmaster.c | 4 +-
7902 fs/ocfs2/localalloc.c | 2 +-
7903 fs/ocfs2/ocfs2.h | 10 +-
7904 fs/ocfs2/suballoc.c | 12 +-
7905 fs/ocfs2/super.c | 20 +-
7906 fs/overlayfs/copy_up.c | 2 +-
7907 fs/pipe.c | 72 +-
7908 fs/posix_acl.c | 4 +-
7909 fs/proc/array.c | 20 +
7910 fs/proc/base.c | 4 +-
7911 fs/proc/kcore.c | 34 +-
7912 fs/proc/meminfo.c | 2 +-
7913 fs/proc/nommu.c | 2 +-
7914 fs/proc/proc_sysctl.c | 26 +-
7915 fs/proc/task_mmu.c | 42 +-
7916 fs/proc/task_nommu.c | 4 +-
7917 fs/proc/vmcore.c | 16 +-
7918 fs/qnx6/qnx6.h | 4 +-
7919 fs/quota/netlink.c | 4 +-
7920 fs/read_write.c | 2 +-
7921 fs/readdir.c | 3 +-
7922 fs/reiserfs/do_balan.c | 2 +-
7923 fs/reiserfs/procfs.c | 2 +-
7924 fs/reiserfs/reiserfs.h | 4 +-
7925 fs/seq_file.c | 4 +-
7926 fs/splice.c | 43 +-
7927 fs/squashfs/xattr.c | 12 +-
7928 fs/super.c | 3 +-
7929 fs/sysv/sysv.h | 2 +-
7930 fs/tracefs/inode.c | 8 +-
7931 fs/udf/misc.c | 2 +-
7932 fs/ufs/swab.h | 4 +-
7933 fs/userfaultfd.c | 2 +-
7934 fs/xattr.c | 21 +
7935 fs/xfs/libxfs/xfs_bmap.c | 2 +-
7936 fs/xfs/libxfs/xfs_da_btree.c | 4 +-
7937 fs/xfs/xfs_dir2_readdir.c | 7 +-
7938 fs/xfs/xfs_ioctl.c | 2 +-
7939 fs/xfs/xfs_linux.h | 4 +-
7940 include/acpi/ghes.h | 2 +-
7941 include/asm-generic/4level-fixup.h | 2 +
7942 include/asm-generic/atomic-long.h | 176 +-
7943 include/asm-generic/atomic64.h | 12 +
7944 include/asm-generic/bitops/__fls.h | 2 +-
7945 include/asm-generic/bitops/fls.h | 2 +-
7946 include/asm-generic/bitops/fls64.h | 4 +-
7947 include/asm-generic/bug.h | 6 +-
7948 include/asm-generic/cache.h | 4 +-
7949 include/asm-generic/emergency-restart.h | 2 +-
7950 include/asm-generic/kmap_types.h | 4 +-
7951 include/asm-generic/local.h | 13 +
7952 include/asm-generic/pgtable-nopmd.h | 18 +-
7953 include/asm-generic/pgtable-nopud.h | 15 +-
7954 include/asm-generic/pgtable.h | 16 +
7955 include/asm-generic/sections.h | 1 +
7956 include/asm-generic/uaccess.h | 16 +
7957 include/asm-generic/vmlinux.lds.h | 15 +-
7958 include/crypto/algapi.h | 2 +-
7959 include/drm/drmP.h | 19 +-
7960 include/drm/drm_crtc_helper.h | 2 +-
7961 include/drm/drm_mm.h | 2 +-
7962 include/drm/i915_pciids.h | 2 +-
7963 include/drm/intel-gtt.h | 4 +-
7964 include/drm/ttm/ttm_memory.h | 2 +-
7965 include/drm/ttm/ttm_page_alloc.h | 1 +
7966 include/keys/asymmetric-subtype.h | 2 +-
7967 include/linux/atmdev.h | 4 +-
7968 include/linux/atomic.h | 2 +-
7969 include/linux/audit.h | 2 +-
7970 include/linux/average.h | 2 +-
7971 include/linux/binfmts.h | 3 +-
7972 include/linux/bitmap.h | 2 +-
7973 include/linux/bitops.h | 8 +-
7974 include/linux/blk-cgroup.h | 24 +-
7975 include/linux/blkdev.h | 2 +-
7976 include/linux/blktrace_api.h | 2 +-
7977 include/linux/cache.h | 8 +
7978 include/linux/cdrom.h | 1 -
7979 include/linux/cleancache.h | 2 +-
7980 include/linux/clk-provider.h | 1 +
7981 include/linux/compat.h | 6 +-
7982 include/linux/compiler-gcc.h | 28 +-
7983 include/linux/compiler.h | 193 +-
7984 include/linux/configfs.h | 2 +-
7985 include/linux/cpufreq.h | 3 +-
7986 include/linux/cpuidle.h | 5 +-
7987 include/linux/cpumask.h | 14 +-
7988 include/linux/crypto.h | 4 +-
7989 include/linux/ctype.h | 2 +-
7990 include/linux/dcache.h | 4 +-
7991 include/linux/decompress/mm.h | 2 +-
7992 include/linux/devfreq.h | 2 +-
7993 include/linux/device.h | 7 +-
7994 include/linux/dma-mapping.h | 2 +-
7995 include/linux/efi.h | 1 +
7996 include/linux/elf.h | 2 +
7997 include/linux/err.h | 4 +-
7998 include/linux/extcon.h | 2 +-
7999 include/linux/fb.h | 3 +-
8000 include/linux/fdtable.h | 2 +-
8001 include/linux/fs.h | 5 +-
8002 include/linux/fs_struct.h | 2 +-
8003 include/linux/fscache-cache.h | 2 +-
8004 include/linux/fscache.h | 2 +-
8005 include/linux/fsnotify.h | 2 +-
8006 include/linux/genhd.h | 4 +-
8007 include/linux/genl_magic_func.h | 2 +-
8008 include/linux/gfp.h | 12 +-
8009 include/linux/highmem.h | 12 +
8010 include/linux/hwmon-sysfs.h | 6 +-
8011 include/linux/i2c.h | 1 +
8012 include/linux/if_pppox.h | 2 +-
8013 include/linux/init.h | 12 +-
8014 include/linux/init_task.h | 7 +
8015 include/linux/interrupt.h | 6 +-
8016 include/linux/iommu.h | 2 +-
8017 include/linux/ioport.h | 2 +-
8018 include/linux/ipc.h | 2 +-
8019 include/linux/irq.h | 5 +-
8020 include/linux/irqdesc.h | 2 +-
8021 include/linux/irqdomain.h | 3 +
8022 include/linux/jbd2.h | 2 +-
8023 include/linux/jiffies.h | 16 +-
8024 include/linux/key-type.h | 2 +-
8025 include/linux/kgdb.h | 6 +-
8026 include/linux/kmemleak.h | 4 +-
8027 include/linux/kobject.h | 3 +-
8028 include/linux/kobject_ns.h | 2 +-
8029 include/linux/kref.h | 2 +-
8030 include/linux/libata.h | 2 +-
8031 include/linux/linkage.h | 1 +
8032 include/linux/list.h | 15 +
8033 include/linux/lockref.h | 26 +-
8034 include/linux/math64.h | 10 +-
8035 include/linux/mempolicy.h | 7 +
8036 include/linux/mm.h | 102 +-
8037 include/linux/mm_types.h | 20 +
8038 include/linux/mmiotrace.h | 4 +-
8039 include/linux/mmzone.h | 2 +-
8040 include/linux/mod_devicetable.h | 4 +-
8041 include/linux/module.h | 69 +-
8042 include/linux/moduleloader.h | 16 +
8043 include/linux/moduleparam.h | 4 +-
8044 include/linux/net.h | 2 +-
8045 include/linux/netdevice.h | 7 +-
8046 include/linux/netfilter.h | 2 +-
8047 include/linux/netfilter/nfnetlink.h | 2 +-
8048 include/linux/netlink.h | 12 +-
8049 include/linux/nls.h | 4 +-
8050 include/linux/notifier.h | 3 +-
8051 include/linux/oprofile.h | 4 +-
8052 include/linux/padata.h | 2 +-
8053 include/linux/pci_hotplug.h | 3 +-
8054 include/linux/percpu.h | 2 +-
8055 include/linux/perf_event.h | 12 +-
8056 include/linux/pipe_fs_i.h | 8 +-
8057 include/linux/pm.h | 1 +
8058 include/linux/pm_domain.h | 2 +-
8059 include/linux/pm_runtime.h | 2 +-
8060 include/linux/pnp.h | 2 +-
8061 include/linux/poison.h | 4 +-
8062 include/linux/power/smartreflex.h | 2 +-
8063 include/linux/ppp-comp.h | 2 +-
8064 include/linux/preempt.h | 21 +
8065 include/linux/proc_ns.h | 2 +-
8066 include/linux/psci.h | 2 +-
8067 include/linux/quota.h | 2 +-
8068 include/linux/random.h | 19 +-
8069 include/linux/rculist.h | 16 +
8070 include/linux/rcupdate.h | 8 +
8071 include/linux/reboot.h | 14 +-
8072 include/linux/regset.h | 3 +-
8073 include/linux/relay.h | 2 +-
8074 include/linux/rio.h | 2 +-
8075 include/linux/rmap.h | 4 +-
8076 include/linux/sched.h | 76 +-
8077 include/linux/sched/sysctl.h | 1 +
8078 include/linux/scif.h | 2 +-
8079 include/linux/semaphore.h | 2 +-
8080 include/linux/seq_file.h | 1 +
8081 include/linux/seqlock.h | 10 +
8082 include/linux/signal.h | 2 +-
8083 include/linux/skbuff.h | 12 +-
8084 include/linux/slab.h | 47 +-
8085 include/linux/slab_def.h | 14 +-
8086 include/linux/slub_def.h | 2 +-
8087 include/linux/smp.h | 2 +
8088 include/linux/sock_diag.h | 2 +-
8089 include/linux/sonet.h | 2 +-
8090 include/linux/spinlock.h | 17 +-
8091 include/linux/srcu.h | 5 +-
8092 include/linux/sunrpc/addr.h | 8 +-
8093 include/linux/sunrpc/clnt.h | 2 +-
8094 include/linux/sunrpc/svc.h | 2 +-
8095 include/linux/sunrpc/svc_rdma.h | 18 +-
8096 include/linux/sunrpc/svcauth.h | 2 +-
8097 include/linux/swapops.h | 10 +-
8098 include/linux/swiotlb.h | 3 +-
8099 include/linux/syscalls.h | 23 +-
8100 include/linux/syscore_ops.h | 2 +-
8101 include/linux/sysctl.h | 3 +-
8102 include/linux/sysfs.h | 9 +-
8103 include/linux/sysrq.h | 3 +-
8104 include/linux/tcp.h | 14 +-
8105 include/linux/thread_info.h | 7 +
8106 include/linux/tty.h | 4 +-
8107 include/linux/tty_driver.h | 2 +-
8108 include/linux/tty_ldisc.h | 2 +-
8109 include/linux/types.h | 16 +
8110 include/linux/uaccess.h | 2 +-
8111 include/linux/uio_driver.h | 2 +-
8112 include/linux/unaligned/access_ok.h | 24 +-
8113 include/linux/usb.h | 12 +-
8114 include/linux/usb/hcd.h | 1 +
8115 include/linux/usb/renesas_usbhs.h | 2 +-
8116 include/linux/vermagic.h | 21 +-
8117 include/linux/vga_switcheroo.h | 8 +-
8118 include/linux/vmalloc.h | 7 +-
8119 include/linux/vmstat.h | 24 +-
8120 include/linux/writeback.h | 3 +-
8121 include/linux/xattr.h | 5 +-
8122 include/linux/zlib.h | 3 +-
8123 include/media/v4l2-dev.h | 2 +-
8124 include/media/v4l2-device.h | 2 +-
8125 include/net/9p/transport.h | 2 +-
8126 include/net/bluetooth/l2cap.h | 2 +-
8127 include/net/bonding.h | 2 +-
8128 include/net/caif/cfctrl.h | 6 +-
8129 include/net/cfg802154.h | 2 +-
8130 include/net/flow.h | 2 +-
8131 include/net/genetlink.h | 2 +-
8132 include/net/gro_cells.h | 2 +-
8133 include/net/inet_connection_sock.h | 2 +-
8134 include/net/inet_sock.h | 2 +-
8135 include/net/inetpeer.h | 2 +-
8136 include/net/ip_fib.h | 2 +-
8137 include/net/ip_vs.h | 8 +-
8138 include/net/ipv6.h | 2 +-
8139 include/net/irda/ircomm_tty.h | 1 +
8140 include/net/iucv/af_iucv.h | 2 +-
8141 include/net/llc_c_ac.h | 2 +-
8142 include/net/llc_c_ev.h | 4 +-
8143 include/net/llc_c_st.h | 2 +-
8144 include/net/llc_s_ac.h | 2 +-
8145 include/net/llc_s_st.h | 2 +-
8146 include/net/mac80211.h | 6 +-
8147 include/net/neighbour.h | 4 +-
8148 include/net/net_namespace.h | 18 +-
8149 include/net/netlink.h | 2 +-
8150 include/net/netns/conntrack.h | 6 +-
8151 include/net/netns/ipv4.h | 4 +-
8152 include/net/netns/ipv6.h | 4 +-
8153 include/net/netns/xfrm.h | 2 +-
8154 include/net/ping.h | 2 +-
8155 include/net/protocol.h | 4 +-
8156 include/net/rtnetlink.h | 2 +-
8157 include/net/sctp/checksum.h | 4 +-
8158 include/net/sctp/sm.h | 4 +-
8159 include/net/sctp/structs.h | 2 +-
8160 include/net/snmp.h | 10 +-
8161 include/net/sock.h | 12 +-
8162 include/net/tcp.h | 8 +-
8163 include/net/xfrm.h | 13 +-
8164 include/rdma/iw_cm.h | 2 +-
8165 include/scsi/libfc.h | 3 +-
8166 include/scsi/scsi_device.h | 6 +-
8167 include/scsi/scsi_driver.h | 2 +-
8168 include/scsi/scsi_transport_fc.h | 3 +-
8169 include/scsi/sg.h | 2 +-
8170 include/sound/compress_driver.h | 2 +-
8171 include/sound/soc.h | 4 +-
8172 include/trace/events/irq.h | 4 +-
8173 include/uapi/linux/a.out.h | 8 +
8174 include/uapi/linux/bcache.h | 5 +-
8175 include/uapi/linux/byteorder/little_endian.h | 28 +-
8176 include/uapi/linux/connector.h | 2 +-
8177 include/uapi/linux/elf.h | 28 +
8178 include/uapi/linux/screen_info.h | 2 +-
8179 include/uapi/linux/swab.h | 6 +-
8180 include/uapi/linux/xattr.h | 4 +
8181 include/video/udlfb.h | 8 +-
8182 include/video/uvesafb.h | 1 +
8183 init/Kconfig | 2 +-
8184 init/Makefile | 3 +
8185 init/do_mounts.c | 14 +-
8186 init/do_mounts.h | 8 +-
8187 init/do_mounts_initrd.c | 30 +-
8188 init/do_mounts_md.c | 6 +-
8189 init/init_task.c | 4 +
8190 init/initramfs.c | 38 +-
8191 init/main.c | 30 +-
8192 ipc/compat.c | 4 +-
8193 ipc/ipc_sysctl.c | 14 +-
8194 ipc/mq_sysctl.c | 4 +-
8195 ipc/sem.c | 4 +-
8196 ipc/shm.c | 6 +
8197 kernel/audit.c | 8 +-
8198 kernel/auditsc.c | 4 +-
8199 kernel/bpf/core.c | 7 +-
8200 kernel/capability.c | 3 +
8201 kernel/compat.c | 38 +-
8202 kernel/debug/debug_core.c | 16 +-
8203 kernel/debug/kdb/kdb_main.c | 4 +-
8204 kernel/events/core.c | 30 +-
8205 kernel/events/internal.h | 10 +-
8206 kernel/events/uprobes.c | 2 +-
8207 kernel/exit.c | 27 +-
8208 kernel/fork.c | 175 +-
8209 kernel/futex.c | 11 +-
8210 kernel/futex_compat.c | 2 +-
8211 kernel/gcov/base.c | 7 +-
8212 kernel/irq/manage.c | 2 +-
8213 kernel/irq/msi.c | 19 +-
8214 kernel/irq/spurious.c | 2 +-
8215 kernel/jump_label.c | 5 +
8216 kernel/kallsyms.c | 37 +-
8217 kernel/kexec.c | 3 +-
8218 kernel/kmod.c | 8 +-
8219 kernel/kprobes.c | 4 +-
8220 kernel/ksysfs.c | 2 +-
8221 kernel/locking/lockdep.c | 7 +-
8222 kernel/locking/mutex-debug.c | 12 +-
8223 kernel/locking/mutex-debug.h | 4 +-
8224 kernel/locking/mutex.c | 6 +-
8225 kernel/module.c | 422 +-
8226 kernel/notifier.c | 17 +-
8227 kernel/padata.c | 4 +-
8228 kernel/panic.c | 5 +-
8229 kernel/pid.c | 2 +-
8230 kernel/pid_namespace.c | 2 +-
8231 kernel/power/process.c | 12 +-
8232 kernel/profile.c | 14 +-
8233 kernel/ptrace.c | 8 +-
8234 kernel/rcu/rcutorture.c | 60 +-
8235 kernel/rcu/tiny.c | 4 +-
8236 kernel/rcu/tree.c | 42 +-
8237 kernel/rcu/tree.h | 16 +-
8238 kernel/rcu/tree_plugin.h | 18 +-
8239 kernel/rcu/tree_trace.c | 14 +-
8240 kernel/resource.c | 4 +-
8241 kernel/sched/auto_group.c | 4 +-
8242 kernel/sched/core.c | 45 +-
8243 kernel/sched/fair.c | 2 +-
8244 kernel/sched/sched.h | 2 +-
8245 kernel/signal.c | 24 +-
8246 kernel/smpboot.c | 4 +-
8247 kernel/softirq.c | 12 +-
8248 kernel/sys.c | 10 +-
8249 kernel/sysctl.c | 34 +-
8250 kernel/time/alarmtimer.c | 2 +-
8251 kernel/time/posix-cpu-timers.c | 4 +-
8252 kernel/time/posix-timers.c | 24 +-
8253 kernel/time/timer.c | 2 +-
8254 kernel/time/timer_stats.c | 10 +-
8255 kernel/trace/blktrace.c | 6 +-
8256 kernel/trace/ftrace.c | 15 +-
8257 kernel/trace/ring_buffer.c | 96 +-
8258 kernel/trace/trace.c | 2 +-
8259 kernel/trace/trace.h | 2 +-
8260 kernel/trace/trace_clock.c | 4 +-
8261 kernel/trace/trace_events.c | 1 -
8262 kernel/trace/trace_functions_graph.c | 4 +-
8263 kernel/trace/trace_mmiotrace.c | 8 +-
8264 kernel/trace/trace_output.c | 10 +-
8265 kernel/trace/trace_seq.c | 2 +-
8266 kernel/trace/trace_stack.c | 2 +-
8267 kernel/user.c | 2 +-
8268 kernel/user_namespace.c | 2 +-
8269 kernel/utsname_sysctl.c | 2 +-
8270 kernel/watchdog.c | 2 +-
8271 kernel/workqueue.c | 8 +-
8272 lib/Kconfig.debug | 8 +-
8273 lib/Makefile | 2 +-
8274 lib/bitmap.c | 8 +-
8275 lib/bug.c | 2 +
8276 lib/debugobjects.c | 2 +-
8277 lib/decompress_bunzip2.c | 3 +-
8278 lib/decompress_unlzma.c | 4 +-
8279 lib/div64.c | 4 +-
8280 lib/dma-debug.c | 4 +-
8281 lib/inflate.c | 2 +-
8282 lib/ioremap.c | 4 +-
8283 lib/kobject.c | 4 +-
8284 lib/list_debug.c | 126 +-
8285 lib/lockref.c | 44 +-
8286 lib/percpu-refcount.c | 2 +-
8287 lib/radix-tree.c | 2 +-
8288 lib/random32.c | 2 +-
8289 lib/rhashtable.c | 4 +-
8290 lib/show_mem.c | 2 +-
8291 lib/strncpy_from_user.c | 2 +-
8292 lib/strnlen_user.c | 2 +-
8293 lib/swiotlb.c | 2 +-
8294 lib/usercopy.c | 6 +
8295 lib/vsprintf.c | 12 +-
8296 mm/Kconfig | 6 +-
8297 mm/backing-dev.c | 4 +-
8298 mm/debug.c | 3 +
8299 mm/filemap.c | 2 +-
8300 mm/gup.c | 13 +-
8301 mm/highmem.c | 6 +-
8302 mm/hugetlb.c | 70 +-
8303 mm/internal.h | 1 +
8304 mm/maccess.c | 12 +-
8305 mm/madvise.c | 37 +
8306 mm/memory-failure.c | 6 +-
8307 mm/memory.c | 424 +-
8308 mm/mempolicy.c | 25 +
8309 mm/mlock.c | 18 +-
8310 mm/mm_init.c | 2 +-
8311 mm/mmap.c | 582 +-
8312 mm/mprotect.c | 137 +-
8313 mm/mremap.c | 39 +-
8314 mm/nommu.c | 21 +-
8315 mm/page-writeback.c | 2 +-
8316 mm/page_alloc.c | 50 +-
8317 mm/percpu.c | 2 +-
8318 mm/process_vm_access.c | 14 +-
8319 mm/rmap.c | 45 +-
8320 mm/shmem.c | 19 +-
8321 mm/slab.c | 111 +-
8322 mm/slab.h | 22 +-
8323 mm/slab_common.c | 86 +-
8324 mm/slob.c | 218 +-
8325 mm/slub.c | 109 +-
8326 mm/sparse-vmemmap.c | 4 +-
8327 mm/sparse.c | 2 +-
8328 mm/swap.c | 2 +
8329 mm/swapfile.c | 12 +-
8330 mm/util.c | 6 +
8331 mm/vmalloc.c | 114 +-
8332 mm/vmstat.c | 12 +-
8333 net/8021q/vlan.c | 5 +-
8334 net/8021q/vlan_netlink.c | 2 +-
8335 net/9p/mod.c | 4 +-
8336 net/9p/trans_fd.c | 2 +-
8337 net/atm/atm_misc.c | 8 +-
8338 net/atm/lec.h | 2 +-
8339 net/atm/proc.c | 6 +-
8340 net/atm/resources.c | 4 +-
8341 net/ax25/sysctl_net_ax25.c | 2 +-
8342 net/batman-adv/bat_iv_ogm.c | 8 +-
8343 net/batman-adv/fragmentation.c | 2 +-
8344 net/batman-adv/routing.c | 4 +-
8345 net/batman-adv/soft-interface.c | 10 +-
8346 net/batman-adv/translation-table.c | 14 +-
8347 net/batman-adv/types.h | 8 +-
8348 net/bluetooth/hci_sock.c | 2 +-
8349 net/bluetooth/l2cap_core.c | 6 +-
8350 net/bluetooth/l2cap_sock.c | 12 +-
8351 net/bluetooth/rfcomm/sock.c | 4 +-
8352 net/bluetooth/rfcomm/tty.c | 4 +-
8353 net/bridge/br_netlink.c | 2 +-
8354 net/bridge/netfilter/ebtables.c | 6 +-
8355 net/caif/cfctrl.c | 11 +-
8356 net/caif/chnl_net.c | 2 +-
8357 net/can/af_can.c | 2 +-
8358 net/can/gw.c | 6 +-
8359 net/ceph/messenger.c | 4 +-
8360 net/compat.c | 26 +-
8361 net/core/datagram.c | 2 +-
8362 net/core/dev.c | 16 +-
8363 net/core/filter.c | 2 +-
8364 net/core/flow.c | 6 +-
8365 net/core/neighbour.c | 18 +-
8366 net/core/net-sysfs.c | 2 +-
8367 net/core/net_namespace.c | 8 +-
8368 net/core/netpoll.c | 4 +-
8369 net/core/rtnetlink.c | 17 +-
8370 net/core/scm.c | 12 +-
8371 net/core/skbuff.c | 11 +-
8372 net/core/sock.c | 28 +-
8373 net/core/sock_diag.c | 15 +-
8374 net/core/sysctl_net_core.c | 22 +-
8375 net/decnet/af_decnet.c | 1 +
8376 net/decnet/sysctl_net_decnet.c | 4 +-
8377 net/dsa/dsa.c | 2 +-
8378 net/hsr/hsr_netlink.c | 2 +-
8379 net/ieee802154/6lowpan/core.c | 2 +-
8380 net/ieee802154/6lowpan/reassembly.c | 14 +-
8381 net/ipv4/af_inet.c | 2 +-
8382 net/ipv4/arp.c | 2 +-
8383 net/ipv4/devinet.c | 18 +-
8384 net/ipv4/fib_frontend.c | 6 +-
8385 net/ipv4/fib_semantics.c | 2 +-
8386 net/ipv4/inet_connection_sock.c | 4 +-
8387 net/ipv4/inet_diag.c | 4 +-
8388 net/ipv4/inet_timewait_sock.c | 2 +-
8389 net/ipv4/inetpeer.c | 2 +-
8390 net/ipv4/ip_fragment.c | 15 +-
8391 net/ipv4/ip_gre.c | 6 +-
8392 net/ipv4/ip_sockglue.c | 2 +-
8393 net/ipv4/ip_vti.c | 4 +-
8394 net/ipv4/ipconfig.c | 6 +-
8395 net/ipv4/ipip.c | 4 +-
8396 net/ipv4/netfilter/arp_tables.c | 12 +-
8397 net/ipv4/netfilter/ip_tables.c | 12 +-
8398 net/ipv4/ping.c | 14 +-
8399 net/ipv4/proc.c | 8 +-
8400 net/ipv4/raw.c | 14 +-
8401 net/ipv4/route.c | 32 +-
8402 net/ipv4/sysctl_net_ipv4.c | 22 +-
8403 net/ipv4/tcp_input.c | 6 +-
8404 net/ipv4/tcp_probe.c | 2 +-
8405 net/ipv4/udp.c | 10 +-
8406 net/ipv4/xfrm4_mode_transport.c | 2 +-
8407 net/ipv4/xfrm4_policy.c | 17 +-
8408 net/ipv4/xfrm4_state.c | 4 +-
8409 net/ipv6/addrconf.c | 22 +-
8410 net/ipv6/af_inet6.c | 2 +-
8411 net/ipv6/datagram.c | 2 +-
8412 net/ipv6/icmp.c | 2 +-
8413 net/ipv6/ip6_fib.c | 4 +-
8414 net/ipv6/ip6_gre.c | 10 +-
8415 net/ipv6/ip6_tunnel.c | 4 +-
8416 net/ipv6/ip6_vti.c | 4 +-
8417 net/ipv6/ipv6_sockglue.c | 2 +-
8418 net/ipv6/ndisc.c | 2 +-
8419 net/ipv6/netfilter/ip6_tables.c | 12 +-
8420 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
8421 net/ipv6/ping.c | 33 +-
8422 net/ipv6/proc.c | 10 +-
8423 net/ipv6/raw.c | 17 +-
8424 net/ipv6/reassembly.c | 13 +-
8425 net/ipv6/route.c | 2 +-
8426 net/ipv6/sit.c | 4 +-
8427 net/ipv6/sysctl_net_ipv6.c | 2 +-
8428 net/ipv6/udp.c | 6 +-
8429 net/ipv6/xfrm6_policy.c | 17 +-
8430 net/irda/ircomm/ircomm_tty.c | 18 +-
8431 net/iucv/af_iucv.c | 4 +-
8432 net/iucv/iucv.c | 2 +-
8433 net/key/af_key.c | 4 +-
8434 net/l2tp/l2tp_eth.c | 38 +-
8435 net/l2tp/l2tp_ip.c | 2 +-
8436 net/l2tp/l2tp_ip6.c | 2 +-
8437 net/mac80211/cfg.c | 10 +-
8438 net/mac80211/debugfs_key.c | 4 +-
8439 net/mac80211/ieee80211_i.h | 3 +-
8440 net/mac80211/iface.c | 20 +-
8441 net/mac80211/key.c | 4 +-
8442 net/mac80211/main.c | 2 +-
8443 net/mac80211/pm.c | 4 +-
8444 net/mac80211/rate.c | 2 +-
8445 net/mac80211/sta_info.c | 2 +-
8446 net/mac80211/tx.c | 2 +-
8447 net/mac80211/util.c | 8 +-
8448 net/mac80211/wpa.c | 10 +-
8449 net/mac802154/iface.c | 4 +-
8450 net/mpls/af_mpls.c | 6 +-
8451 net/netfilter/ipset/ip_set_core.c | 4 +-
8452 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
8453 net/netfilter/ipvs/ip_vs_core.c | 4 +-
8454 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
8455 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
8456 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
8457 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
8458 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
8459 net/netfilter/nf_conntrack_acct.c | 2 +-
8460 net/netfilter/nf_conntrack_ecache.c | 2 +-
8461 net/netfilter/nf_conntrack_helper.c | 2 +-
8462 net/netfilter/nf_conntrack_netlink.c | 22 +-
8463 net/netfilter/nf_conntrack_proto.c | 2 +-
8464 net/netfilter/nf_conntrack_standalone.c | 2 +-
8465 net/netfilter/nf_conntrack_timestamp.c | 2 +-
8466 net/netfilter/nf_log.c | 10 +-
8467 net/netfilter/nf_sockopt.c | 4 +-
8468 net/netfilter/nf_tables_api.c | 13 +-
8469 net/netfilter/nfnetlink_acct.c | 7 +-
8470 net/netfilter/nfnetlink_cthelper.c | 2 +-
8471 net/netfilter/nfnetlink_cttimeout.c | 2 +-
8472 net/netfilter/nfnetlink_log.c | 4 +-
8473 net/netfilter/nft_compat.c | 9 +-
8474 net/netfilter/xt_statistic.c | 8 +-
8475 net/netlink/af_netlink.c | 14 +-
8476 net/netlink/diag.c | 2 +-
8477 net/netlink/genetlink.c | 14 +-
8478 net/openvswitch/vport-internal_dev.c | 2 +-
8479 net/packet/af_packet.c | 26 +-
8480 net/packet/diag.c | 2 +-
8481 net/packet/internal.h | 6 +-
8482 net/phonet/pep.c | 6 +-
8483 net/phonet/socket.c | 2 +-
8484 net/phonet/sysctl.c | 2 +-
8485 net/rds/cong.c | 6 +-
8486 net/rds/ib.h | 2 +-
8487 net/rds/ib_cm.c | 2 +-
8488 net/rds/ib_recv.c | 4 +-
8489 net/rds/iw.h | 2 +-
8490 net/rds/iw_cm.c | 2 +-
8491 net/rds/iw_recv.c | 4 +-
8492 net/rds/rds.h | 2 +-
8493 net/rds/tcp.c | 2 +-
8494 net/rds/tcp_send.c | 2 +-
8495 net/rxrpc/af_rxrpc.c | 2 +-
8496 net/rxrpc/ar-ack.c | 14 +-
8497 net/rxrpc/ar-call.c | 2 +-
8498 net/rxrpc/ar-connection.c | 2 +-
8499 net/rxrpc/ar-connevent.c | 2 +-
8500 net/rxrpc/ar-input.c | 4 +-
8501 net/rxrpc/ar-internal.h | 8 +-
8502 net/rxrpc/ar-local.c | 2 +-
8503 net/rxrpc/ar-output.c | 4 +-
8504 net/rxrpc/ar-peer.c | 2 +-
8505 net/rxrpc/ar-proc.c | 4 +-
8506 net/rxrpc/ar-transport.c | 2 +-
8507 net/rxrpc/rxkad.c | 4 +-
8508 net/sched/sch_generic.c | 4 +-
8509 net/sctp/ipv6.c | 6 +-
8510 net/sctp/protocol.c | 10 +-
8511 net/sctp/sm_sideeffect.c | 2 +-
8512 net/sctp/socket.c | 21 +-
8513 net/sctp/sysctl.c | 10 +-
8514 net/socket.c | 18 +-
8515 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
8516 net/sunrpc/clnt.c | 4 +-
8517 net/sunrpc/sched.c | 4 +-
8518 net/sunrpc/svc.c | 4 +-
8519 net/sunrpc/svcauth_unix.c | 2 +-
8520 net/sunrpc/xprtrdma/svc_rdma.c | 44 +-
8521 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
8522 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
8523 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
8524 net/tipc/netlink_compat.c | 12 +-
8525 net/tipc/subscr.c | 2 +-
8526 net/unix/diag.c | 2 +-
8527 net/unix/sysctl_net_unix.c | 2 +-
8528 net/wireless/wext-core.c | 19 +-
8529 net/xfrm/xfrm_policy.c | 16 +-
8530 net/xfrm/xfrm_state.c | 33 +-
8531 net/xfrm/xfrm_sysctl.c | 2 +-
8532 net/xfrm/xfrm_user.c | 2 +-
8533 scripts/Kbuild.include | 2 +-
8534 scripts/Makefile.build | 2 +-
8535 scripts/Makefile.clean | 3 +-
8536 scripts/Makefile.host | 69 +-
8537 scripts/basic/fixdep.c | 12 +-
8538 scripts/dtc/checks.c | 14 +-
8539 scripts/dtc/data.c | 6 +-
8540 scripts/dtc/flattree.c | 8 +-
8541 scripts/dtc/livetree.c | 4 +-
8542 scripts/gcc-plugin.sh | 51 +
8543 scripts/headers_install.sh | 1 +
8544 scripts/kallsyms.c | 4 +-
8545 scripts/kconfig/lkc.h | 5 +-
8546 scripts/kconfig/menu.c | 2 +-
8547 scripts/kconfig/symbol.c | 6 +-
8548 scripts/link-vmlinux.sh | 2 +-
8549 scripts/mod/file2alias.c | 14 +-
8550 scripts/mod/modpost.c | 25 +-
8551 scripts/mod/modpost.h | 6 +-
8552 scripts/mod/sumversion.c | 2 +-
8553 scripts/module-common.lds | 4 +
8554 scripts/package/builddeb | 1 +
8555 scripts/pnmtologo.c | 6 +-
8556 scripts/sortextable.h | 6 +-
8557 scripts/tags.sh | 2 +-
8558 security/Kconfig | 691 +-
8559 security/apparmor/include/policy.h | 2 +-
8560 security/apparmor/policy.c | 4 +-
8561 security/integrity/ima/ima.h | 4 +-
8562 security/integrity/ima/ima_api.c | 2 +-
8563 security/integrity/ima/ima_fs.c | 4 +-
8564 security/integrity/ima/ima_queue.c | 2 +-
8565 security/keys/internal.h | 8 +-
8566 security/keys/key.c | 18 +-
8567 security/keys/keyring.c | 4 -
8568 security/selinux/avc.c | 6 +-
8569 security/selinux/include/xfrm.h | 2 +-
8570 security/yama/yama_lsm.c | 2 +-
8571 sound/aoa/codecs/onyx.c | 7 +-
8572 sound/aoa/codecs/onyx.h | 1 +
8573 sound/core/oss/pcm_oss.c | 18 +-
8574 sound/core/pcm_compat.c | 2 +-
8575 sound/core/pcm_native.c | 4 +-
8576 sound/core/seq/seq_clientmgr.c | 10 +-
8577 sound/core/seq/seq_compat.c | 2 +-
8578 sound/core/seq/seq_fifo.c | 6 +-
8579 sound/core/seq/seq_fifo.h | 2 +-
8580 sound/core/seq/seq_memory.c | 6 +-
8581 sound/core/sound.c | 2 +-
8582 sound/drivers/mts64.c | 14 +-
8583 sound/drivers/opl4/opl4_lib.c | 2 +-
8584 sound/drivers/portman2x4.c | 3 +-
8585 sound/firewire/amdtp-am824.c | 2 +-
8586 sound/firewire/amdtp-stream.c | 4 +-
8587 sound/firewire/amdtp-stream.h | 2 +-
8588 sound/firewire/digi00x/amdtp-dot.c | 2 +-
8589 sound/firewire/isight.c | 10 +-
8590 sound/firewire/scs1x.c | 8 +-
8591 sound/oss/sb_audio.c | 2 +-
8592 sound/oss/swarm_cs4297a.c | 6 +-
8593 sound/pci/hda/hda_codec.c | 2 +-
8594 sound/pci/ymfpci/ymfpci.h | 2 +-
8595 sound/pci/ymfpci/ymfpci_main.c | 12 +-
8596 sound/soc/codecs/sti-sas.c | 10 +-
8597 sound/soc/intel/skylake/skl-sst-dsp.h | 4 +-
8598 sound/soc/soc-ac97.c | 6 +-
8599 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
8600 tools/gcc/Makefile | 42 +
8601 tools/gcc/checker_plugin.c | 549 +
8602 tools/gcc/colorize_plugin.c | 215 +
8603 tools/gcc/constify_plugin.c | 571 +
8604 tools/gcc/gcc-common.h | 819 +
8605 tools/gcc/initify_plugin.c | 591 +
8606 tools/gcc/kallocstat_plugin.c | 188 +
8607 tools/gcc/kernexec_plugin.c | 549 +
8608 tools/gcc/latent_entropy_plugin.c | 474 +
8609 tools/gcc/randomize_layout_seed.h | 1 +
8610 tools/gcc/size_overflow_plugin/.gitignore | 2 +
8611 tools/gcc/size_overflow_plugin/Makefile | 28 +
8612 .../disable_size_overflow_hash.data | 12434 ++
8613 .../disable_size_overflow_hash.h | 152601 ++++++++++++++++++
8614 .../generate_size_overflow_hash.sh | 103 +
8615 .../insert_size_overflow_asm.c | 416 +
8616 .../size_overflow_plugin/intentional_overflow.c | 1116 +
8617 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
8618 tools/gcc/size_overflow_plugin/size_overflow.h | 325 +
8619 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
8620 .../size_overflow_plugin/size_overflow_hash.data | 21454 +++
8621 .../size_overflow_hash_aux.data | 92 +
8622 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 +
8623 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
8624 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
8625 .../size_overflow_plugin_hash.c | 352 +
8626 .../size_overflow_plugin/size_overflow_transform.c | 745 +
8627 .../size_overflow_transform_core.c | 1015 +
8628 tools/gcc/stackleak_plugin.c | 444 +
8629 tools/gcc/structleak_plugin.c | 290 +
8630 tools/include/linux/compiler.h | 8 +
8631 tools/perf/util/include/asm/alternative-asm.h | 3 +
8632 tools/virtio/linux/uaccess.h | 2 +-
8633 virt/kvm/kvm_main.c | 42 +-
8634 2088 files changed, 221599 insertions(+), 9618 deletions(-)
8635 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
8636 Author: Matthew Wilcox <willy@linux.intel.com>
8637 Date: Tue Feb 2 16:57:52 2016 -0800
8638
8639 radix-tree: fix race in gang lookup
8640
8641 If the indirect_ptr bit is set on a slot, that indicates we need to redo
8642 the lookup. Introduce a new function radix_tree_iter_retry() which
8643 forces the loop to retry the lookup by setting 'slot' to NULL and
8644 turning the iterator back to point at the problematic entry.
8645
8646 This is a pretty rare problem to hit at the moment; the lookup has to
8647 race with a grow of the radix tree from a height of 0. The consequences
8648 of hitting this race are that gang lookup could return a pointer to a
8649 radix_tree_node instead of a pointer to whatever the user had inserted
8650 in the tree.
8651
8652 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
8653 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
8654 Cc: Hugh Dickins <hughd@google.com>
8655 Cc: Ohad Ben-Cohen <ohad@wizery.com>
8656 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
8657 Cc: <stable@vger.kernel.org>
8658 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
8659 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
8660
8661 include/linux/radix-tree.h | 16 ++++++++++++++++
8662 lib/radix-tree.c | 12 ++++++++++--
8663 2 files changed, 26 insertions(+), 2 deletions(-)
8664
8665 commit bf628043b4589c910919a0f221ae7f42aa8cea93
8666 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
8667 Date: Wed Feb 3 02:11:03 2016 +0100
8668
8669 unix: correctly track in-flight fds in sending process user_struct
8670
8671 The commit referenced in the Fixes tag incorrectly accounted the number
8672 of in-flight fds over a unix domain socket to the original opener
8673 of the file-descriptor. This allows another process to arbitrary
8674 deplete the original file-openers resource limit for the maximum of
8675 open files. Instead the sending processes and its struct cred should
8676 be credited.
8677
8678 To do so, we add a reference counted struct user_struct pointer to the
8679 scm_fp_list and use it to account for the number of inflight unix fds.
8680
8681 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
8682 Reported-by: David Herrmann <dh.herrmann@gmail.com>
8683 Cc: David Herrmann <dh.herrmann@gmail.com>
8684 Cc: Willy Tarreau <w@1wt.eu>
8685 Cc: Linus Torvalds <torvalds@linux-foundation.org>
8686 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
8687 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
8688 Signed-off-by: David S. Miller <davem@davemloft.net>
8689
8690 include/net/af_unix.h | 4 ++--
8691 include/net/scm.h | 1 +
8692 net/core/scm.c | 7 +++++++
8693 net/unix/af_unix.c | 4 ++--
8694 net/unix/garbage.c | 8 ++++----
8695 5 files changed, 16 insertions(+), 8 deletions(-)
8696
8697 commit e830db443ff78d70b7b63536e688d73907face0c
8698 Author: Mike Kravetz <mike.kravetz@oracle.com>
8699 Date: Fri Jan 15 16:57:37 2016 -0800
8700
8701 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
8702
8703 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
8704 argument end is of type pgoff_t. It was being converted to a vaddr
8705 offset and passed to unmap_hugepage_range. However, end was also being
8706 used as an argument to the vma_interval_tree_foreach controlling loop.
8707 In addition, the conversion of end to vaddr offset was incorrect.
8708
8709 hugetlb_vmtruncate_list is called as part of a file truncate or
8710 fallocate hole punch operation.
8711
8712 When truncating a hugetlbfs file, this bug could prevent some pages from
8713 being unmapped. This is possible if there are multiple vmas mapping the
8714 file, and there is a sufficiently sized hole between the mappings. The
8715 size of the hole between two vmas (A,B) must be such that the starting
8716 virtual address of B is greater than (ending virtual address of A <<
8717 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
8718 pages are not properly unmapped during truncate, the following BUG is
8719 hit:
8720
8721 kernel BUG at fs/hugetlbfs/inode.c:428!
8722
8723 In the fallocate hole punch case, this bug could prevent pages from
8724 being unmapped as in the truncate case. However, for hole punch the
8725 result is that unmapped pages will not be removed during the operation.
8726 For hole punch, it is also possible that more pages than desired will be
8727 unmapped. This unnecessary unmapping will cause page faults to
8728 reestablish the mappings on subsequent page access.
8729
8730 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
8731 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
8732 Cc: Hugh Dickins <hughd@google.com>
8733 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
8734 Cc: Davidlohr Bueso <dave@stgolabs.net>
8735 Cc: Dave Hansen <dave.hansen@linux.intel.com>
8736 Cc: <stable@vger.kernel.org> [4.3]
8737 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
8738 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
8739
8740 fs/hugetlbfs/inode.c | 19 +++++++++++--------
8741 1 files changed, 11 insertions(+), 8 deletions(-)
8742
8743 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
8744 Author: Takashi Iwai <tiwai@suse.de>
8745 Date: Thu Feb 4 17:06:13 2016 +0100
8746
8747 ALSA: timer: Fix leftover link at closing
8748
8749 In ALSA timer core, the active timer instance is managed in
8750 active_list linked list. Each element is added / removed dynamically
8751 at timer start, stop and in timer interrupt. The problem is that
8752 snd_timer_interrupt() has a thinko and leaves the element in
8753 active_list when it's the last opened element. This eventually leads
8754 to list corruption or use-after-free error.
8755
8756 This hasn't been revealed because we used to delete the list forcibly
8757 in snd_timer_stop() in the past. However, the recent fix avoids the
8758 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
8759 corruption due to double start or stop]), and this leak hits reality.
8760
8761 This patch fixes the link management in snd_timer_interrupt(). Now it
8762 simply unlinks no matter which stream is.
8763
8764 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
8765 Reported-by: Dmitry Vyukov <dvyukov@google.com>
8766 Cc: <stable@vger.kernel.org>
8767 Signed-off-by: Takashi Iwai <tiwai@suse.de>
8768
8769 sound/core/timer.c | 4 ++--
8770 1 files changed, 2 insertions(+), 2 deletions(-)
8771
8772 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
8773 Author: Konstantin Khlebnikov <koct9i@gmail.com>
8774 Date: Fri Feb 5 15:37:01 2016 -0800
8775
8776 radix-tree: fix oops after radix_tree_iter_retry
8777
8778 Helper radix_tree_iter_retry() resets next_index to the current index.
8779 In following radix_tree_next_slot current chunk size becomes zero. This
8780 isn't checked and it tries to dereference null pointer in slot.
8781
8782 Tagged iterator is fine because retry happens only at slot 0 where tag
8783 bitmask in iter->tags is filled with single bit.
8784
8785 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
8786 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
8787 Cc: Matthew Wilcox <willy@linux.intel.com>
8788 Cc: Hugh Dickins <hughd@google.com>
8789 Cc: Ohad Ben-Cohen <ohad@wizery.com>
8790 Cc: Jeremiah Mahler <jmmahler@gmail.com>
8791 Cc: <stable@vger.kernel.org>
8792 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
8793 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
8794
8795 include/linux/radix-tree.h | 6 +++---
8796 1 files changed, 3 insertions(+), 3 deletions(-)
8797
8798 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
8799 Merge: 438be0b 256aeaf
8800 Author: Brad Spengler <spender@grsecurity.net>
8801 Date: Sun Feb 7 08:29:33 2016 -0500
8802
8803 Merge branch 'pax-test' into grsec-test
8804
8805 commit 256aeaf87c22de8edf1f03682a572c590ae07771
8806 Author: Brad Spengler <spender@grsecurity.net>
8807 Date: Sun Feb 7 08:29:09 2016 -0500
8808
8809 Update to pax-linux-4.3.5-test28.patch:
8810 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
8811 - spender fixed UDEREF on arm
8812
8813 arch/arm/Kconfig | 1 +
8814 arch/arm/include/asm/domain.h | 21 ++++++++-
8815 arch/arm/include/asm/futex.h | 9 ----
8816 arch/arm/include/asm/thread_info.h | 3 +
8817 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
8818 arch/arm/kernel/entry-armv.S | 2 +-
8819 arch/arm/kernel/process.c | 2 +-
8820 arch/arm/mm/alignment.c | 8 ----
8821 arch/x86/mm/numa.c | 2 +-
8822 security/Kconfig | 1 -
8823 10 files changed, 60 insertions(+), 70 deletions(-)
8824
8825 commit 438be0bd112bd17942b2628c53054dc1007558a1
8826 Author: Brad Spengler <spender@grsecurity.net>
8827 Date: Sat Feb 6 19:50:31 2016 -0500
8828
8829 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
8830 ARM systems reported on the forums
8831
8832 arch/arm/Kconfig | 1 +
8833 arch/arm/include/asm/domain.h | 21 ++++++++-
8834 arch/arm/include/asm/futex.h | 9 ----
8835 arch/arm/include/asm/thread_info.h | 3 +
8836 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
8837 arch/arm/kernel/entry-armv.S | 2 +-
8838 arch/arm/kernel/process.c | 2 +-
8839 arch/arm/mm/alignment.c | 8 ----
8840 security/Kconfig | 1 -
8841 9 files changed, 59 insertions(+), 69 deletions(-)
8842
8843 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
8844 Author: Brad Spengler <spender@grsecurity.net>
8845 Date: Sat Feb 6 11:21:53 2016 -0500
8846
8847 Fix another compiler warning
8848
8849 net/ipv4/tcp_input.c | 2 ++
8850 1 files changed, 2 insertions(+), 0 deletions(-)
8851
8852 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
8853 Author: Brad Spengler <spender@grsecurity.net>
8854 Date: Sat Feb 6 11:16:12 2016 -0500
8855
8856 Fix two compiler warnings
8857
8858 kernel/pid.c | 5 ++---
8859 kernel/ptrace.c | 3 ++-
8860 2 files changed, 4 insertions(+), 4 deletions(-)
8861
8862 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
8863 Author: Brad Spengler <spender@grsecurity.net>
8864 Date: Wed Feb 3 21:22:40 2016 -0500
8865
8866 Apply fix for integer truncation in NUMA init code, reported by
8867 x14sg1 on the forums:
8868 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
8869
8870 arch/x86/mm/numa.c | 2 +-
8871 1 files changed, 1 insertions(+), 1 deletions(-)
8872
8873 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
8874 Merge: a781740 016d0d8
8875 Author: Brad Spengler <spender@grsecurity.net>
8876 Date: Wed Feb 3 21:20:58 2016 -0500
8877
8878 Merge branch 'pax-test' into grsec-test
8879
8880 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
8881 Author: Brad Spengler <spender@grsecurity.net>
8882 Date: Wed Feb 3 21:20:10 2016 -0500
8883
8884 Update to pax-linux-4.3.5-test27.patch:
8885 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
8886 - restored padding in fpregs_state for storing AVX-512 state in the future
8887 - constified netlink_dump_control
8888 - added const version of debug_gimple_stmt for gcc plugins, by Emese
8889 - Emese fixed a bug in initify that could have initified too much
8890 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
8891
8892 arch/x86/include/asm/fpu/types.h | 1 +
8893 arch/x86/include/asm/mmu_context.h | 2 +-
8894 block/blk-cgroup.c | 18 ++--
8895 block/cfq-iosched.c | 4 +-
8896 crypto/crypto_user.c | 8 ++-
8897 drivers/acpi/apei/ghes.c | 6 +-
8898 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
8899 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
8900 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
8901 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
8902 drivers/infiniband/core/netlink.c | 5 +-
8903 drivers/infiniband/hw/cxgb4/device.c | 6 +-
8904 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
8905 drivers/md/bcache/alloc.c | 2 +-
8906 drivers/md/bcache/bcache.h | 10 +-
8907 drivers/md/bcache/btree.c | 2 +-
8908 drivers/md/bcache/io.c | 10 +-
8909 drivers/md/bcache/journal.c | 2 +-
8910 drivers/md/bcache/stats.c | 26 +++---
8911 drivers/md/bcache/stats.h | 16 ++--
8912 drivers/md/bcache/super.c | 2 +-
8913 drivers/md/bcache/sysfs.c | 20 +++---
8914 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
8915 drivers/md/dm-raid.c | 2 +-
8916 drivers/md/md.c | 6 +-
8917 drivers/md/md.h | 2 +-
8918 drivers/md/raid1.c | 2 +-
8919 drivers/md/raid10.c | 2 +-
8920 drivers/md/raid5.c | 4 +-
8921 drivers/media/pci/zoran/zoran.h | 1 -
8922 drivers/media/pci/zoran/zoran_driver.c | 3 -
8923 drivers/net/ethernet/sfc/selftest.c | 20 +++---
8924 drivers/net/irda/vlsi_ir.c | 18 ++--
8925 drivers/net/irda/vlsi_ir.h | 14 ++--
8926 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
8927 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
8928 drivers/net/wireless/ath/carl9170/main.c | 10 +-
8929 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
8930 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
8931 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
8932 drivers/scsi/hptiop.c | 2 -
8933 drivers/scsi/hptiop.h | 1 -
8934 drivers/scsi/ipr.c | 6 +-
8935 drivers/scsi/ipr.h | 2 +-
8936 drivers/scsi/qla2xxx/qla_target.c | 10 +-
8937 drivers/scsi/qla2xxx/qla_target.h | 2 +-
8938 fs/btrfs/ctree.c | 2 +-
8939 fs/btrfs/ctree.h | 4 +-
8940 fs/btrfs/delayed-ref.c | 4 +-
8941 fs/btrfs/disk-io.c | 4 +-
8942 fs/btrfs/file.c | 4 +-
8943 fs/btrfs/raid56.c | 32 ++++----
8944 fs/btrfs/tests/btrfs-tests.c | 2 +-
8945 fs/btrfs/transaction.c | 2 +-
8946 fs/btrfs/tree-log.c | 8 +-
8947 fs/btrfs/volumes.c | 14 ++--
8948 fs/btrfs/volumes.h | 22 +++---
8949 fs/jbd2/commit.c | 2 +-
8950 fs/jbd2/transaction.c | 4 +-
8951 fs/ocfs2/dlm/dlmcommon.h | 4 +-
8952 fs/ocfs2/dlm/dlmdebug.c | 10 +-
8953 fs/ocfs2/dlm/dlmdomain.c | 4 +-
8954 fs/ocfs2/dlm/dlmmaster.c | 4 +-
8955 include/acpi/ghes.h | 2 +-
8956 include/linux/blk-cgroup.h | 24 +++---
8957 include/linux/jbd2.h | 2 +-
8958 include/linux/netlink.h | 12 ++--
8959 include/net/cfg802154.h | 2 +-
8960 include/net/mac80211.h | 2 +-
8961 include/net/neighbour.h | 2 +-
8962 kernel/rcu/tree_plugin.h | 4 +-
8963 net/batman-adv/routing.c | 4 +-
8964 net/batman-adv/soft-interface.c | 2 +-
8965 net/batman-adv/translation-table.c | 14 ++--
8966 net/batman-adv/types.h | 2 +-
8967 net/core/neighbour.c | 14 ++--
8968 net/core/rtnetlink.c | 2 +-
8969 net/ipv4/arp.c | 2 +-
8970 net/ipv4/inet_diag.c | 4 +-
8971 net/ipv4/xfrm4_state.c | 4 +-
8972 net/ipv6/ndisc.c | 2 +-
8973 net/mac80211/cfg.c | 2 +-
8974 net/mac80211/debugfs_key.c | 2 +-
8975 net/mac80211/key.c | 4 +-
8976 net/mac80211/tx.c | 2 +-
8977 net/mac80211/wpa.c | 10 +-
8978 net/mac802154/iface.c | 4 +-
8979 net/netfilter/ipset/ip_set_core.c | 2 +-
8980 net/netfilter/nf_conntrack_netlink.c | 22 +++---
8981 net/netfilter/nf_tables_api.c | 13 ++--
8982 net/netfilter/nfnetlink_acct.c | 7 +-
8983 net/netfilter/nfnetlink_cthelper.c | 2 +-
8984 net/netfilter/nfnetlink_cttimeout.c | 2 +-
8985 net/netlink/af_netlink.c | 10 ++-
8986 net/netlink/diag.c | 2 +-
8987 net/netlink/genetlink.c | 14 ++--
8988 net/packet/af_packet.c | 18 ++--
8989 net/packet/diag.c | 2 +-
8990 net/packet/internal.h | 6 +-
8991 net/unix/diag.c | 2 +-
8992 net/xfrm/xfrm_user.c | 2 +-
8993 security/apparmor/include/policy.h | 2 +-
8994 security/apparmor/policy.c | 4 +-
8995 sound/core/seq/seq_clientmgr.c | 2 +-
8996 sound/core/seq/seq_fifo.c | 6 +-
8997 sound/core/seq/seq_fifo.h | 2 +-
8998 tools/gcc/gcc-common.h | 24 ++++--
8999 tools/gcc/initify_plugin.c | 7 +-
9000 tools/lib/api/Makefile | 2 +-
9001 109 files changed, 399 insertions(+), 391 deletions(-)
9002
9003 commit a7817402ac837b1aee07fac42537a02097055098
9004 Author: Matt Fleming <matt@codeblueprint.co.uk>
9005 Date: Fri Jan 29 11:36:10 2016 +0000
9006
9007 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
9008
9009 There are a couple of nasty truncation bugs lurking in the pageattr
9010 code that can be triggered when mapping EFI regions, e.g. when we pass
9011 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
9012 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
9013
9014 Viorel-Cătălin managed to trigger this bug on his Dell machine that
9015 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
9016 When calling populate_pud() the end of the region gets calculated
9017 incorrectly in the following buggy expression,
9018
9019 end = start + (cpa->numpages << PAGE_SHIFT);
9020
9021 And only 188416 pages are mapped. Next, populate_pud() gets invoked
9022 for a second time because of the loop in __change_page_attr_set_clr(),
9023 only this time no pages get mapped because shifting the remaining
9024 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
9025 loop in __change_page_attr_set_clr() spins forever because we fail to
9026 map progress.
9027
9028 Hitting this bug depends very much on the virtual address we pick to
9029 map the large region at and how many pages we map on the initial run
9030 through the loop. This explains why this issue was only recently hit
9031 with the introduction of commit
9032
9033 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
9034 entries bottom-up at runtime, instead of top-down")
9035
9036 It's interesting to note that safe uses of cpa->numpages do exist in
9037 the pageattr code. If instead of shifting ->numpages we multiply by
9038 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
9039 so the result is unsigned long.
9040
9041 To avoid surprises when users try to convert very large cpa->numpages
9042 values to addresses, change the data type from 'int' to 'unsigned
9043 long', thereby making it suitable for shifting by PAGE_SHIFT without
9044 any type casting.
9045
9046 The alternative would be to make liberal use of casting, but that is
9047 far more likely to cause problems in the future when someone adds more
9048 code and fails to cast properly; this bug was difficult enough to
9049 track down in the first place.
9050
9051 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
9052 Acked-by: Borislav Petkov <bp@alien8.de>
9053 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
9054 Cc: <stable@vger.kernel.org>
9055 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
9056 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
9057 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
9058 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
9059
9060 arch/x86/mm/pageattr.c | 4 ++--
9061 1 files changed, 2 insertions(+), 2 deletions(-)
9062
9063 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
9064 Author: Jan Beulich <JBeulich@suse.com>
9065 Date: Tue Jan 26 04:15:18 2016 -0700
9066
9067 x86/mm: Fix types used in pgprot cacheability flags translations
9068
9069 For PAE kernels "unsigned long" is not suitable to hold page protection
9070 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
9071 few W+X pages getting reported as insecure during boot (observed namely
9072 for the entire initrd range).
9073
9074 Fixes: 281d4078be ("x86: Make page cache mode a real type")
9075 Signed-off-by: Jan Beulich <jbeulich@suse.com>
9076 Reviewed-by: Juergen Gross <JGross@suse.com>
9077 Cc: stable@vger.kernel.org
9078 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
9079 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
9080
9081 arch/x86/include/asm/pgtable_types.h | 6 ++----
9082 1 files changed, 2 insertions(+), 4 deletions(-)
9083
9084 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
9085 Merge: 682d661 f74425b
9086 Author: Brad Spengler <spender@grsecurity.net>
9087 Date: Sun Jan 31 15:06:25 2016 -0500
9088
9089 Merge branch 'pax-test' into grsec-test
9090
9091 Conflicts:
9092 drivers/net/slip/slhc.c
9093 include/linux/sched.h
9094 net/unix/af_unix.c
9095 sound/core/timer.c
9096
9097 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
9098 Merge: d14af1f 849a2d3
9099 Author: Brad Spengler <spender@grsecurity.net>
9100 Date: Sun Jan 31 15:02:55 2016 -0500
9101
9102 Merge branch 'linux-4.3.y' into pax-test
9103
9104 Conflicts:
9105 arch/x86/include/asm/mmu_context.h
9106
9107 commit 682d6611d75542e351c973c8dd74a99d3966c073
9108 Author: Brad Spengler <spender@grsecurity.net>
9109 Date: Sat Jan 30 13:05:03 2016 -0500
9110
9111 Based on a report from Mathias Krause, fix up a number of additional instances
9112 of ulong overflow when passing in values to gr_learn_resource by saturating
9113 to ULONG_MAX
9114
9115 mm/mlock.c | 11 ++++++++---
9116 mm/mmap.c | 16 +++++++++++++---
9117 2 files changed, 21 insertions(+), 6 deletions(-)
9118
9119 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
9120 Author: Jann Horn <jann@thejh.net>
9121 Date: Sat Dec 26 06:00:48 2015 +0100
9122
9123 seccomp: always propagate NO_NEW_PRIVS on tsync
9124
9125 Before this patch, a process with some permissive seccomp filter
9126 that was applied by root without NO_NEW_PRIVS was able to add
9127 more filters to itself without setting NO_NEW_PRIVS by setting
9128 the new filter from a throwaway thread with NO_NEW_PRIVS.
9129
9130 Signed-off-by: Jann Horn <jann@thejh.net>
9131 Cc: stable@vger.kernel.org
9132 Signed-off-by: Kees Cook <keescook@chromium.org>
9133
9134 kernel/seccomp.c | 22 +++++++++++-----------
9135 1 files changed, 11 insertions(+), 11 deletions(-)
9136
9137 commit b85450498a3bbf269441c8963d7574bb3079c838
9138 Merge: 59c216f d14af1f
9139 Author: Brad Spengler <spender@grsecurity.net>
9140 Date: Fri Jan 29 20:54:13 2016 -0500
9141
9142 Merge branch 'pax-test' into grsec-test
9143
9144 commit d14af1f1dd66511f3f0674deee2b572972012b39
9145 Author: Brad Spengler <spender@grsecurity.net>
9146 Date: Fri Jan 29 20:53:51 2016 -0500
9147
9148 Update to pax-linux-4.3.4-test26.patch:
9149 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
9150
9151 fs/cifs/file.c | 2 +-
9152 fs/gfs2/file.c | 2 +-
9153 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
9154 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
9155 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
9156 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
9157 .../size_overflow_transform_core.c | 5 +
9158 7 files changed, 102 insertions(+), 15 deletions(-)
9159
9160 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
9161 Author: Brad Spengler <spender@grsecurity.net>
9162 Date: Wed Jan 27 17:57:21 2016 -0500
9163
9164 Fix a size_overflow report reported by Mathias Krause in our
9165 truncation of an loff_t to an unsigned long when being passed
9166 to gr_learn_resource() (as all resource checks are against unsigned long
9167 values)
9168
9169 fs/attr.c | 5 ++++-
9170 1 files changed, 4 insertions(+), 1 deletions(-)
9171
9172 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
9173 Author: Yuchung Cheng <ycheng@google.com>
9174 Date: Wed Jan 6 12:42:38 2016 -0800
9175
9176 tcp: fix zero cwnd in tcp_cwnd_reduction
9177
9178 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
9179 conditionally") introduced a bug that cwnd may become 0 when both
9180 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
9181 to a div-by-zero if the connection starts another cwnd reduction
9182 phase by setting tp->prior_cwnd to the current cwnd (0) in
9183 tcp_init_cwnd_reduction().
9184
9185 To prevent this we skip PRR operation when nothing is acked or
9186 sacked. Then cwnd must be positive in all cases as long as ssthresh
9187 is positive:
9188
9189 1) The proportional reduction mode
9190 inflight > ssthresh > 0
9191
9192 2) The reduction bound mode
9193 a) inflight == ssthresh > 0
9194
9195 b) inflight < ssthresh
9196 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
9197
9198 Therefore in all cases inflight and sndcnt can not both be 0.
9199 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
9200
9201 In reality this bug is triggered only with a sequence of less common
9202 events. For example, the connection is terminating an ECN-triggered
9203 cwnd reduction with an inflight 0, then it receives reordered/old
9204 ACKs or DSACKs from prior transmission (which acks nothing). Or the
9205 connection is in fast recovery stage that marks everything lost,
9206 but fails to retransmit due to local issues, then receives data
9207 packets from other end which acks nothing.
9208
9209 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
9210 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
9211 Signed-off-by: Yuchung Cheng <ycheng@google.com>
9212 Signed-off-by: Neal Cardwell <ncardwell@google.com>
9213 Signed-off-by: Eric Dumazet <edumazet@google.com>
9214 Signed-off-by: David S. Miller <davem@davemloft.net>
9215
9216 net/ipv4/tcp_input.c | 3 +++
9217 1 files changed, 3 insertions(+), 0 deletions(-)
9218
9219 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
9220 Author: Eric Dumazet <edumazet@google.com>
9221 Date: Sun Jan 24 13:53:50 2016 -0800
9222
9223 af_unix: fix struct pid memory leak
9224
9225 Dmitry reported a struct pid leak detected by a syzkaller program.
9226
9227 Bug happens in unix_stream_recvmsg() when we break the loop when a
9228 signal is pending, without properly releasing scm.
9229
9230 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
9231 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9232 Signed-off-by: Eric Dumazet <edumazet@google.com>
9233 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
9234 Signed-off-by: David S. Miller <davem@davemloft.net>
9235
9236 net/unix/af_unix.c | 1 +
9237 1 files changed, 1 insertions(+), 0 deletions(-)
9238
9239 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
9240 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9241 Date: Fri Jan 22 01:39:43 2016 +0100
9242
9243 pptp: fix illegal memory access caused by multiple bind()s
9244
9245 Several times already this has been reported as kasan reports caused by
9246 syzkaller and trinity and people always looked at RCU races, but it is
9247 much more simple. :)
9248
9249 In case we bind a pptp socket multiple times, we simply add it to
9250 the callid_sock list but don't remove the old binding. Thus the old
9251 socket stays in the bucket with unused call_id indexes and doesn't get
9252 cleaned up. This causes various forms of kasan reports which were hard
9253 to pinpoint.
9254
9255 Simply don't allow multiple binds and correct error handling in
9256 pptp_bind. Also keep sk_state bits in place in pptp_connect.
9257
9258 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
9259 Cc: Dmitry Kozlov <xeb@mail.ru>
9260 Cc: Sasha Levin <sasha.levin@oracle.com>
9261 Cc: Dmitry Vyukov <dvyukov@google.com>
9262 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9263 Cc: Dave Jones <davej@codemonkey.org.uk>
9264 Reported-by: Dave Jones <davej@codemonkey.org.uk>
9265 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9266 Signed-off-by: David S. Miller <davem@davemloft.net>
9267
9268 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
9269 1 files changed, 24 insertions(+), 10 deletions(-)
9270
9271 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
9272 Author: Brad Spengler <spender@grsecurity.net>
9273 Date: Tue Jan 26 18:17:10 2016 -0500
9274
9275 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
9276 wiki but was removed from the config help at some point
9277
9278 grsecurity/Kconfig | 3 +++
9279 1 files changed, 3 insertions(+), 0 deletions(-)
9280
9281 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
9282 Author: Thomas Egerer <hakke_007@gmx.de>
9283 Date: Mon Jan 25 12:58:44 2016 +0100
9284
9285 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
9286
9287 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
9288 to select CRYPTO_ECHAINIV in order to work properly. This solves the
9289 issues caused by a misconfiguration as described in [1].
9290 The original approach, patching crypto/Kconfig was turned down by
9291 Herbert Xu [2].
9292
9293 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
9294 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
9295
9296 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
9297 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
9298 Signed-off-by: David S. Miller <davem@davemloft.net>
9299
9300 net/ipv4/Kconfig | 1 +
9301 net/ipv6/Kconfig | 1 +
9302 2 files changed, 2 insertions(+), 0 deletions(-)
9303
9304 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
9305 Merge: 904114c 6339c1f
9306 Author: Brad Spengler <spender@grsecurity.net>
9307 Date: Tue Jan 26 18:08:40 2016 -0500
9308
9309 Merge branch 'pax-test' into grsec-test
9310
9311 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
9312 Author: Brad Spengler <spender@grsecurity.net>
9313 Date: Tue Jan 26 18:07:51 2016 -0500
9314
9315 Update to pax-linux-4.3.4-test25.patch:
9316 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
9317 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
9318 - fixed a few REFCOUNT false positives in SNMP related statistics
9319
9320 arch/x86/Kconfig | 2 +-
9321 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
9322 include/net/snmp.h | 10 +++++-----
9323 kernel/fork.c | 11 +++++++++--
9324 net/ipv4/proc.c | 8 ++++----
9325 net/ipv6/addrconf.c | 4 ++--
9326 net/ipv6/proc.c | 10 +++++-----
9327 7 files changed, 43 insertions(+), 19 deletions(-)
9328
9329 commit 904114c2fce3fdff5d57e763da56a78960db4e19
9330 Author: Al Viro <viro@zeniv.linux.org.uk>
9331 Date: Fri Jan 22 18:08:52 2016 -0500
9332
9333 make sure that freeing shmem fast symlinks is RCU-delayed
9334
9335 Cc: stable@vger.kernel.org # v4.2+
9336 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
9337
9338 include/linux/shmem_fs.h | 5 +----
9339 mm/shmem.c | 9 ++++-----
9340 2 files changed, 5 insertions(+), 9 deletions(-)
9341
9342 commit ab86adee64312a2f827dd516cb199521327943ed
9343 Author: Sasha Levin <sasha.levin@oracle.com>
9344 Date: Mon Jan 18 19:23:51 2016 -0500
9345
9346 netfilter: nf_conntrack: use safer way to lock all buckets
9347
9348 When we need to lock all buckets in the connection hashtable we'd attempt to
9349 lock 1024 spinlocks, which is way more preemption levels than supported by
9350 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
9351 enabled, and if it was - use only 8 buckets(!).
9352
9353 Fix this by using a global lock and synchronize all buckets on it when we
9354 need to lock them all. This is pretty heavyweight, but is only done when we
9355 need to resize the hashtable, and that doesn't happen often enough (or at all).
9356
9357 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
9358 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
9359 Reviewed-by: Florian Westphal <fw@strlen.de>
9360 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
9361
9362 Conflicts:
9363
9364 net/netfilter/nfnetlink_cttimeout.c
9365
9366 include/net/netfilter/nf_conntrack_core.h | 8 ++----
9367 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
9368 net/netfilter/nf_conntrack_helper.c | 2 +-
9369 net/netfilter/nf_conntrack_netlink.c | 2 +-
9370 4 files changed, 33 insertions(+), 17 deletions(-)
9371
9372 commit 37014723527225481c720484bb788a1a6358072f
9373 Author: Willy Tarreau <w@1wt.eu>
9374 Date: Mon Jan 18 16:36:09 2016 +0100
9375
9376 pipe: limit the per-user amount of pages allocated in pipes
9377
9378 On no-so-small systems, it is possible for a single process to cause an
9379 OOM condition by filling large pipes with data that are never read. A
9380 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
9381 memory. On small systems it may be tricky to set the pipe max size to
9382 prevent this from happening.
9383
9384 This patch makes it possible to enforce a per-user soft limit above
9385 which new pipes will be limited to a single page, effectively limiting
9386 them to 4 kB each, as well as a hard limit above which no new pipes may
9387 be created for this user. This has the effect of protecting the system
9388 against memory abuse without hurting other users, and still allowing
9389 pipes to work correctly though with less data at once.
9390
9391 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
9392 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
9393 default soft limit allows the default number of FDs per process (1024)
9394 to create pipes of the default size (64kB), thus reaching a limit of 64MB
9395 before starting to create only smaller pipes. With 256 processes limited
9396 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
9397 1084 MB of memory allocated for a user. The hard limit is disabled by
9398 default to avoid breaking existing applications that make intensive use
9399 of pipes (eg: for splicing).
9400
9401 Reported-by: socketpair@gmail.com
9402 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
9403 Mitigates: CVE-2013-4312 (Linux 2.0+)
9404 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
9405 Signed-off-by: Willy Tarreau <w@1wt.eu>
9406 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
9407
9408 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
9409 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
9410 include/linux/pipe_fs_i.h | 4 +++
9411 include/linux/sched.h | 1 +
9412 kernel/sysctl.c | 14 ++++++++++++
9413 5 files changed, 87 insertions(+), 2 deletions(-)
9414
9415 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
9416 Merge: 540f2af 7791ecb
9417 Author: Brad Spengler <spender@grsecurity.net>
9418 Date: Sat Jan 23 10:57:11 2016 -0500
9419
9420 Merge branch 'pax-test' into grsec-test
9421
9422 commit 7791ecb84f840343a5646236fd0d34e1fb450793
9423 Merge: 470069c 399588c
9424 Author: Brad Spengler <spender@grsecurity.net>
9425 Date: Sat Jan 23 10:56:47 2016 -0500
9426
9427 Merge branch 'linux-4.3.y' into pax-test
9428
9429 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
9430 Author: Brad Spengler <spender@grsecurity.net>
9431 Date: Tue Jan 19 21:18:47 2016 -0500
9432
9433 Update size_overflow hash table
9434
9435 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
9436 1 files changed, 3 insertions(+), 1 deletions(-)
9437
9438 commit 7e649765626a28437f573f0fbe7a51a04615f041
9439 Author: Brad Spengler <spender@grsecurity.net>
9440 Date: Tue Jan 19 20:29:46 2016 -0500
9441
9442 Backport fix from: https://lkml.org/lkml/2015/12/13/187
9443
9444 fs/ext4/extents.c | 2 +-
9445 1 files changed, 1 insertions(+), 1 deletions(-)
9446
9447 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
9448 Author: Jann Horn <jann@thejh.net>
9449 Date: Tue Jan 5 18:27:30 2016 +0100
9450
9451 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
9452
9453 This replaces all code in fs/compat_ioctl.c that translated
9454 ioctl arguments into a in-kernel structure, then performed
9455 do_ioctl under set_fs(KERNEL_DS), with code that allocates
9456 data on the user stack and can call the VFS ioctl handler
9457 under USER_DS.
9458
9459 This is done as a hardening measure because the caller
9460 does not know what kind of ioctl handler will be invoked,
9461 only that no corresponding compat_ioctl handler exists and
9462 what the ioctl command number is. The accidental
9463 invocation of an unlocked_ioctl handler that unexpectedly
9464 calls copy_to_user could be a severe security issue.
9465
9466 Signed-off-by: Jann Horn <jann@thejh.net>
9467 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
9468
9469 Conflicts:
9470
9471 fs/compat_ioctl.c
9472
9473 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
9474 1 files changed, 68 insertions(+), 62 deletions(-)
9475
9476 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
9477 Author: Al Viro <viro@zeniv.linux.org.uk>
9478 Date: Thu Jan 7 09:53:30 2016 -0500
9479
9480 compat_ioctl: don't pass fd around when not needed
9481
9482 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
9483
9484 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
9485 fs/internal.h | 7 ++++
9486 fs/ioctl.c | 4 +-
9487 include/linux/fs.h | 2 -
9488 4 files changed, 61 insertions(+), 55 deletions(-)
9489
9490 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
9491 Author: Jann Horn <jann@thejh.net>
9492 Date: Tue Jan 5 18:27:29 2016 +0100
9493
9494 compat_ioctl: don't look up the fd twice
9495
9496 In code in fs/compat_ioctl.c that translates ioctl arguments
9497 into a in-kernel structure, then performs sys_ioctl, possibly
9498 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
9499 calls to do_ioctl calls. do_ioctl is a new function that does
9500 the same thing as sys_ioctl, but doesn't look up the fd again.
9501
9502 This change is made to avoid (potential) security issues
9503 because of ioctl handlers that accept one of the ioctl
9504 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
9505 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
9506 This can happen for multiple reasons:
9507
9508 - The ioctl command number could be reused.
9509 - The ioctl handler might not check the full ioctl
9510 command. This is e.g. true for drm_ioctl.
9511 - The ioctl handler is very special, e.g. cuse_file_ioctl
9512
9513 The real issue is that set_fs(KERNEL_DS) is used here,
9514 but that's fixed in a separate commit
9515 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
9516
9517 This change mitigates potential security issues by
9518 preventing a race that permits invocation of
9519 unlocked_ioctl handlers under KERNEL_DS through compat
9520 code even if a corresponding compat_ioctl handler exists.
9521
9522 So far, no way has been identified to use this to damage
9523 kernel memory without having CAP_SYS_ADMIN in the init ns
9524 (with the capability, doing reads/writes at arbitrary
9525 kernel addresses should be easy through CUSE's ioctl
9526 handler with FUSE_IOCTL_UNRESTRICTED set).
9527
9528 [AV: two missed sys_ioctl() taken care of]
9529
9530 Signed-off-by: Jann Horn <jann@thejh.net>
9531 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
9532
9533 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
9534 1 files changed, 68 insertions(+), 54 deletions(-)
9535
9536 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
9537 Author: Vasily Kulikov <segoon@openwall.com>
9538 Date: Fri Jan 15 16:57:55 2016 -0800
9539
9540 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
9541
9542 TIMER_ENTRY_STATIC is defined as a poison pointers which
9543 should point to nowhere. Redefine them using POISON_POINTER_DELTA
9544 arithmetics to make sure they really point to non-mappable area declared
9545 by the target architecture.
9546
9547 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
9548 Acked-by: Thomas Gleixner <tglx@linutronix.de>
9549 Cc: Solar Designer <solar@openwall.com>
9550 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
9551 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
9552 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
9553
9554 Conflicts:
9555
9556 include/linux/poison.h
9557
9558 include/linux/poison.h | 2 +-
9559 1 files changed, 1 insertions(+), 1 deletions(-)
9560
9561 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
9562 Author: Brad Spengler <spender@grsecurity.net>
9563 Date: Tue Jan 19 19:41:44 2016 -0500
9564
9565 Fix ARM compilation, reported by Austin Sepp
9566
9567 grsecurity/grsec_sig.c | 1 +
9568 1 files changed, 1 insertions(+), 0 deletions(-)
9569
9570 commit e15383743443dc43460a2fd73e0db0b608610dca
9571 Author: Takashi Iwai <tiwai@suse.de>
9572 Date: Mon Jan 18 13:52:47 2016 +0100
9573
9574 ALSA: hrtimer: Fix stall by hrtimer_cancel()
9575
9576 hrtimer_cancel() waits for the completion from the callback, thus it
9577 must not be called inside the callback itself. This was already a
9578 problem in the past with ALSA hrtimer driver, and the early commit
9579 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
9580
9581 However, the previous fix is still insufficient: it may still cause a
9582 lockup when the ALSA timer instance reprograms itself in its callback.
9583 Then it invokes the start function even in snd_timer_interrupt() that
9584 is called in hrtimer callback itself, results in a CPU stall. This is
9585 no hypothetical problem but actually triggered by syzkaller fuzzer.
9586
9587 This patch tries to fix the issue again. Now we call
9588 hrtimer_try_to_cancel() at both start and stop functions so that it
9589 won't fall into a deadlock, yet giving some chance to cancel the queue
9590 if the functions have been called outside the callback. The proper
9591 hrtimer_cancel() is called in anyway at closing, so this should be
9592 enough.
9593
9594 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
9595 Cc: <stable@vger.kernel.org>
9596 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9597
9598 sound/core/hrtimer.c | 3 ++-
9599 1 files changed, 2 insertions(+), 1 deletions(-)
9600
9601 commit 12d874daf706e6e7c1ae709141859c809599297e
9602 Author: Takashi Iwai <tiwai@suse.de>
9603 Date: Tue Jan 12 12:38:02 2016 +0100
9604
9605 ALSA: seq: Fix missing NULL check at remove_events ioctl
9606
9607 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
9608 unconditionally even if there is no FIFO assigned, and this leads to
9609 an Oops due to NULL dereference. The fix is just to add a proper NULL
9610 check.
9611
9612 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9613 Tested-by: Dmitry Vyukov <dvyukov@google.com>
9614 Cc: <stable@vger.kernel.org>
9615 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9616
9617 sound/core/seq/seq_clientmgr.c | 2 +-
9618 1 files changed, 1 insertions(+), 1 deletions(-)
9619
9620 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
9621 Author: Takashi Iwai <tiwai@suse.de>
9622 Date: Tue Jan 12 15:36:27 2016 +0100
9623
9624 ALSA: seq: Fix race at timer setup and close
9625
9626 ALSA sequencer code has an open race between the timer setup ioctl and
9627 the close of the client. This was triggered by syzkaller fuzzer, and
9628 a use-after-free was caught there as a result.
9629
9630 This patch papers over it by adding a proper queue->timer_mutex lock
9631 around the timer-related calls in the relevant code path.
9632
9633 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9634 Tested-by: Dmitry Vyukov <dvyukov@google.com>
9635 Cc: <stable@vger.kernel.org>
9636 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9637
9638 sound/core/seq/seq_queue.c | 2 ++
9639 1 files changed, 2 insertions(+), 0 deletions(-)
9640
9641 commit b9e55ab955e59b4a636d78a748be90334a48b485
9642 Author: Takashi Iwai <tiwai@suse.de>
9643 Date: Thu Jan 14 16:30:58 2016 +0100
9644
9645 ALSA: timer: Harden slave timer list handling
9646
9647 A slave timer instance might be still accessible in a racy way while
9648 operating the master instance as it lacks of locking. Since the
9649 master operation is mostly protected with timer->lock, we should cope
9650 with it while changing the slave instance, too. Also, some linked
9651 lists (active_list and ack_list) of slave instances aren't unlinked
9652 immediately at stopping or closing, and this may lead to unexpected
9653 accesses.
9654
9655 This patch tries to address these issues. It adds spin lock of
9656 timer->lock (either from master or slave, which is equivalent) in a
9657 few places. For avoiding a deadlock, we ensure that the global
9658 slave_active_lock is always locked at first before each timer lock.
9659
9660 Also, ack and active_list of slave instances are properly unlinked at
9661 snd_timer_stop() and snd_timer_close().
9662
9663 Last but not least, remove the superfluous call of _snd_timer_stop()
9664 at removing slave links. This is a noop, and calling it may confuse
9665 readers wrt locking. Further cleanup will follow in a later patch.
9666
9667 Actually we've got reports of use-after-free by syzkaller fuzzer, and
9668 this hopefully fixes these issues.
9669
9670 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9671 Cc: <stable@vger.kernel.org>
9672 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9673
9674 sound/core/timer.c | 18 ++++++++++++++----
9675 1 files changed, 14 insertions(+), 4 deletions(-)
9676
9677 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
9678 Author: Takashi Iwai <tiwai@suse.de>
9679 Date: Wed Jan 13 17:48:01 2016 +0100
9680
9681 ALSA: timer: Fix race among timer ioctls
9682
9683 ALSA timer ioctls have an open race and this may lead to a
9684 use-after-free of timer instance object. A simplistic fix is to make
9685 each ioctl exclusive. We have already tread_sem for controlling the
9686 tread, and extend this as a global mutex to be applied to each ioctl.
9687
9688 The downside is, of course, the worse concurrency. But these ioctls
9689 aren't to be parallel accessible, in anyway, so it should be fine to
9690 serialize there.
9691
9692 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9693 Tested-by: Dmitry Vyukov <dvyukov@google.com>
9694 Cc: <stable@vger.kernel.org>
9695 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9696
9697 sound/core/timer.c | 32 +++++++++++++++++++-------------
9698 1 files changed, 19 insertions(+), 13 deletions(-)
9699
9700 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
9701 Author: Takashi Iwai <tiwai@suse.de>
9702 Date: Wed Jan 13 21:35:06 2016 +0100
9703
9704 ALSA: timer: Fix double unlink of active_list
9705
9706 ALSA timer instance object has a couple of linked lists and they are
9707 unlinked unconditionally at snd_timer_stop(). Meanwhile
9708 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
9709 the element list itself unchanged. This ends up with unlinking twice,
9710 and it was caught by syzkaller fuzzer.
9711
9712 The fix is to use list_del_init() variant properly there, too.
9713
9714 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9715 Tested-by: Dmitry Vyukov <dvyukov@google.com>
9716 Cc: <stable@vger.kernel.org>
9717 Signed-off-by: Takashi Iwai <tiwai@suse.de>
9718
9719 sound/core/timer.c | 2 +-
9720 1 files changed, 1 insertions(+), 1 deletions(-)
9721
9722 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
9723 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
9724 Date: Mon Jan 18 18:03:48 2016 +0100
9725
9726 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
9727
9728 It was seen that defective configurations of openvswitch could overwrite
9729 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
9730 many recursions within ovs.
9731
9732 This problem arises due to the high stack usage of openvswitch. The rest
9733 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
9734
9735 We use the already existing recursion counter in ovs_execute_actions to
9736 implement an upper bound of 5 recursions.
9737
9738 Cc: Pravin Shelar <pshelar@ovn.org>
9739 Cc: Simon Horman <simon.horman@netronome.com>
9740 Cc: Eric Dumazet <eric.dumazet@gmail.com>
9741 Cc: Simon Horman <simon.horman@netronome.com>
9742 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
9743 Signed-off-by: David S. Miller <davem@davemloft.net>
9744
9745 net/openvswitch/actions.c | 19 ++++++++++++++-----
9746 1 files changed, 14 insertions(+), 5 deletions(-)
9747
9748 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
9749 Author: Ursula Braun <ursula.braun@de.ibm.com>
9750 Date: Tue Jan 19 10:41:33 2016 +0100
9751
9752 af_iucv: Validate socket address length in iucv_sock_bind()
9753
9754 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
9755 Reported-by: Dmitry Vyukov <dvyukov@google.com>
9756 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
9757 Signed-off-by: David S. Miller <davem@davemloft.net>
9758
9759 net/iucv/af_iucv.c | 3 +++
9760 1 files changed, 3 insertions(+), 0 deletions(-)
9761
9762 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
9763 Author: Brad Spengler <spender@grsecurity.net>
9764 Date: Tue Jan 19 19:32:54 2016 -0500
9765
9766 Apply the same fix as everyone else for the recent keys vulnerability that is
9767 unexploitable under PAX_REFCOUNT
9768
9769 Make a couple more changes that no one else can/will
9770
9771 include/linux/key-type.h | 4 ++--
9772 ipc/msgutil.c | 4 ++--
9773 security/keys/internal.h | 2 +-
9774 security/keys/process_keys.c | 1 +
9775 4 files changed, 6 insertions(+), 5 deletions(-)
9776
9777 commit b56c3a63f431c193400aee17543021950bd14bc4
9778 Merge: 38b1a3d 470069c
9779 Author: Brad Spengler <spender@grsecurity.net>
9780 Date: Sun Jan 17 18:30:19 2016 -0500
9781
9782 Merge branch 'pax-test' into grsec-test
9783
9784 commit 470069cfedef2180313233d275be5901bd6d1135
9785 Author: Brad Spengler <spender@grsecurity.net>
9786 Date: Sun Jan 17 18:29:59 2016 -0500
9787
9788 Update to pax-linux-4.3.3-test22.patch:
9789 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
9790 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
9791
9792 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
9793 drivers/gpu/drm/drm_pci.c | 3 +++
9794 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
9795 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
9796 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
9797 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
9798 drivers/net/usb/asix_common.c | 3 ++-
9799 include/drm/drmP.h | 1 +
9800 8 files changed, 22 insertions(+), 29 deletions(-)
9801
9802 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
9803 Author: Brad Spengler <spender@grsecurity.net>
9804 Date: Sun Jan 17 12:33:53 2016 -0500
9805
9806 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
9807 mentioned banning execution of suid/sgid binaries, though the kernel
9808 source clearly only mentions banning execution of suid binaries. Since
9809 there's no reason for us to not ban execution of sgid binaries as well,
9810 make the implementation match the Kconfig description.
9811
9812 fs/exec.c | 4 ++--
9813 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
9814 include/linux/sched.h | 4 ++--
9815 3 files changed, 18 insertions(+), 17 deletions(-)
9816
9817 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
9818 Merge: d141a86 ea4a835
9819 Author: Brad Spengler <spender@grsecurity.net>
9820 Date: Sat Jan 16 14:12:22 2016 -0500
9821
9822 Merge branch 'pax-test' into grsec-test
9823
9824 Conflicts:
9825 drivers/gpu/drm/i810/i810_drv.c
9826
9827 commit ea4a835328ada6513ac013986764d6caea8cd348
9828 Author: Brad Spengler <spender@grsecurity.net>
9829 Date: Sat Jan 16 14:11:30 2016 -0500
9830
9831 Update to pax-linux-4.3.3-test21.patch:
9832 - fixed some fallout from the drm_drivers constification, reported by spender
9833
9834 drivers/gpu/drm/armada/armada_drv.c | 3 +--
9835 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
9836 drivers/gpu/drm/i810/i810_dma.c | 2 +-
9837 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
9838 drivers/gpu/drm/i810/i810_drv.h | 2 +-
9839 5 files changed, 8 insertions(+), 6 deletions(-)
9840
9841 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
9842 Author: Brad Spengler <spender@grsecurity.net>
9843 Date: Sat Jan 16 13:16:36 2016 -0500
9844
9845 compile fix
9846
9847 drivers/gpu/drm/i810/i810_dma.c | 2 +-
9848 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
9849 drivers/gpu/drm/i810/i810_drv.h | 2 +-
9850 3 files changed, 5 insertions(+), 3 deletions(-)
9851
9852 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
9853 Merge: 5fa135d bbda879
9854 Author: Brad Spengler <spender@grsecurity.net>
9855 Date: Sat Jan 16 12:59:22 2016 -0500
9856
9857 Merge branch 'pax-test' into grsec-test
9858
9859 commit bbda87914edf63e27fb46670bf3a373f2b963c73
9860 Author: Brad Spengler <spender@grsecurity.net>
9861 Date: Sat Jan 16 12:58:04 2016 -0500
9862
9863 Update to pax-linux-4.3.3-test20.patch:
9864 - constified drm_driver
9865 - Emese fixed a special case in handling __func__ in the initify plugin
9866 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
9867 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
9868
9869 arch/x86/kernel/cpu/perf_event.h | 2 +-
9870 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
9871 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
9872 arch/x86/kernel/uprobes.c | 2 +-
9873 arch/x86/mm/mpx.c | 2 +-
9874 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
9875 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
9876 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
9877 drivers/gpu/drm/drm_pci.c | 6 +-
9878 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
9879 drivers/gpu/drm/i915/i915_dma.c | 2 +-
9880 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
9881 drivers/gpu/drm/i915/i915_drv.h | 2 +-
9882 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
9883 drivers/gpu/drm/mga/mga_drv.c | 5 +-
9884 drivers/gpu/drm/mga/mga_drv.h | 2 +-
9885 drivers/gpu/drm/mga/mga_state.c | 2 +-
9886 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
9887 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
9888 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
9889 drivers/gpu/drm/r128/r128_drv.c | 4 +-
9890 drivers/gpu/drm/r128/r128_drv.h | 2 +-
9891 drivers/gpu/drm/r128/r128_state.c | 2 +-
9892 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
9893 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
9894 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
9895 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
9896 drivers/gpu/drm/savage/savage_bci.c | 2 +-
9897 drivers/gpu/drm/savage/savage_drv.c | 5 +-
9898 drivers/gpu/drm/savage/savage_drv.h | 2 +-
9899 drivers/gpu/drm/sis/sis_drv.c | 5 +-
9900 drivers/gpu/drm/sis/sis_drv.h | 2 +-
9901 drivers/gpu/drm/sis/sis_mm.c | 2 +-
9902 drivers/gpu/drm/via/via_dma.c | 2 +-
9903 drivers/gpu/drm/via/via_drv.c | 5 +-
9904 drivers/gpu/drm/via/via_drv.h | 2 +-
9905 include/drm/drmP.h | 2 +-
9906 mm/slab.c | 2 +-
9907 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
9908 tools/gcc/initify_plugin.c | 15 +++-
9909 .../disable_size_overflow_hash.data | 1 +
9910 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
9911 42 files changed, 156 insertions(+), 110 deletions(-)
9912
9913 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
9914 Author: Brad Spengler <spender@grsecurity.net>
9915 Date: Sat Jan 16 12:19:23 2016 -0500
9916
9917 compile fix
9918
9919 grsecurity/grsec_sig.c | 3 +--
9920 1 files changed, 1 insertions(+), 2 deletions(-)
9921
9922 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
9923 Author: Brad Spengler <spender@grsecurity.net>
9924 Date: Sat Jan 16 12:10:37 2016 -0500
9925
9926 As pointed out by Jann Horn, some distros are starting to circumvent
9927 previous assumptions about the attainability of a user to control
9928 multiple UIDs by handing out suid binaries that allow a user to run
9929 processes (including exploits) under a number of other pre-defined
9930 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
9931 (though it would have to involve some code path that doesn't involve
9932 locks) fix that here by ensuring no more than 8 users on a system can
9933 be banned before a reboot is required. If more are banned, a panic
9934 is triggered.
9935
9936 grsecurity/grsec_sig.c | 8 ++++++++
9937 1 files changed, 8 insertions(+), 0 deletions(-)
9938
9939 commit a8d37776e9521c567ebff6730d49312f72435f08
9940 Author: Eric Dumazet <edumazet@google.com>
9941 Date: Thu Dec 3 11:12:07 2015 -0800
9942
9943 proc: add a reschedule point in proc_readfd_common()
9944
9945 User can pass an arbitrary large buffer to getdents().
9946
9947 It is typically a 32KB buffer used by libc scandir() implementation.
9948
9949 When scanning /proc/{pid}/fd, we can hold cpu way too long,
9950 so add a cond_resched() to be kind with other tasks.
9951
9952 We've seen latencies of more than 50ms on real workloads.
9953
9954 Signed-off-by: Eric Dumazet <edumazet@google.com>
9955 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
9956 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
9957
9958 fs/proc/fd.c | 1 +
9959 1 files changed, 1 insertions(+), 0 deletions(-)
9960
9961 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
9962 Author: Rabin Vincent <rabin@rab.in>
9963 Date: Tue Jan 12 20:17:08 2016 +0100
9964
9965 net: bpf: reject invalid shifts
9966
9967 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
9968 constant shift that can't be encoded in the immediate field of the
9969 UBFM/SBFM instructions is passed to the JIT. Since these shifts
9970 amounts, which are negative or >= regsize, are invalid, reject them in
9971 the eBPF verifier and the classic BPF filter checker, for all
9972 architectures.
9973
9974 Signed-off-by: Rabin Vincent <rabin@rab.in>
9975 Acked-by: Alexei Starovoitov <ast@kernel.org>
9976 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
9977 Signed-off-by: David S. Miller <davem@davemloft.net>
9978
9979 kernel/bpf/verifier.c | 10 ++++++++++
9980 net/core/filter.c | 5 +++++
9981 2 files changed, 15 insertions(+), 0 deletions(-)
9982
9983 commit c248e115a73496625a1c64660d0eeefd67e55cbf
9984 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
9985 Date: Fri Jan 8 11:00:54 2016 -0200
9986
9987 sctp: fix use-after-free in pr_debug statement
9988
9989 Dmitry Vyukov reported a use-after-free in the code expanded by the
9990 macro debug_post_sfx, which is caused by the use of the asoc pointer
9991 after it was freed within sctp_side_effect() scope.
9992
9993 This patch fixes it by allowing sctp_side_effect to clear that asoc
9994 pointer when the TCB is freed.
9995
9996 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
9997 because it will trigger DELETE_TCB too on that same loop.
9998
9999 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
10000 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
10001 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
10002
10003 The macro is already prepared to handle such NULL pointer.
10004
10005 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10006 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10007 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
10008 Signed-off-by: David S. Miller <davem@davemloft.net>
10009
10010 net/sctp/sm_sideeffect.c | 11 ++++++-----
10011 net/sctp/sm_statefuns.c | 17 ++++-------------
10012 2 files changed, 10 insertions(+), 18 deletions(-)
10013
10014 commit 395ea8a9e73e184fc14153a033000bccf4213213
10015 Author: willy tarreau <w@1wt.eu>
10016 Date: Sun Jan 10 07:54:56 2016 +0100
10017
10018 unix: properly account for FDs passed over unix sockets
10019
10020 It is possible for a process to allocate and accumulate far more FDs than
10021 the process' limit by sending them over a unix socket then closing them
10022 to keep the process' fd count low.
10023
10024 This change addresses this problem by keeping track of the number of FDs
10025 in flight per user and preventing non-privileged processes from having
10026 more FDs in flight than their configured FD limit.
10027
10028 Reported-by: socketpair@gmail.com
10029 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
10030 Mitigates: CVE-2013-4312 (Linux 2.0+)
10031 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
10032 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10033 Signed-off-by: Willy Tarreau <w@1wt.eu>
10034 Signed-off-by: David S. Miller <davem@davemloft.net>
10035
10036 include/linux/sched.h | 1 +
10037 net/unix/af_unix.c | 24 ++++++++++++++++++++----
10038 net/unix/garbage.c | 13 ++++++++-----
10039 3 files changed, 29 insertions(+), 9 deletions(-)
10040
10041 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
10042 Author: Sasha Levin <sasha.levin@oracle.com>
10043 Date: Thu Jan 7 14:52:43 2016 -0500
10044
10045 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
10046
10047 proc_dostring() needs an initialized destination string, while the one
10048 provided in proc_sctp_do_hmac_alg() contains stack garbage.
10049
10050 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
10051 accessing invalid memory.
10052
10053 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
10054 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10055 Signed-off-by: David S. Miller <davem@davemloft.net>
10056
10057 net/sctp/sysctl.c | 2 +-
10058 1 files changed, 1 insertions(+), 1 deletions(-)
10059
10060 commit 4014e09faf0fe9054119624ccfff1236e886b554
10061 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
10062 Date: Tue Nov 24 17:13:21 2015 -0500
10063
10064 RDS: fix race condition when sending a message on unbound socket
10065
10066 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
10067
10068 Sasha's found a NULL pointer dereference in the RDS connection code when
10069 sending a message to an apparently unbound socket. The problem is caused
10070 by the code checking if the socket is bound in rds_sendmsg(), which checks
10071 the rs_bound_addr field without taking a lock on the socket. This opens a
10072 race where rs_bound_addr is temporarily set but where the transport is not
10073 in rds_bind(), leading to a NULL pointer dereference when trying to
10074 dereference 'trans' in __rds_conn_create().
10075
10076 Vegard wrote a reproducer for this issue, so kindly ask him to share if
10077 you're interested.
10078
10079 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
10080 with this patch, whereas I could without.
10081
10082 Complete earlier incomplete fix to CVE-2015-6937:
10083
10084 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
10085
10086 Cc: David S. Miller <davem@davemloft.net>
10087
10088 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
10089 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
10090 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
10091 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
10092 Signed-off-by: David S. Miller <davem@davemloft.net>
10093 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
10094
10095 Conflicts:
10096
10097 net/rds/send.c
10098
10099 net/rds/connection.c | 6 ------
10100 1 files changed, 0 insertions(+), 6 deletions(-)
10101
10102 commit 206df8d01104344d7588d801016a281a4cd25556
10103 Author: Sasha Levin <sasha.levin@oracle.com>
10104 Date: Tue Sep 8 10:53:40 2015 -0400
10105
10106 RDS: verify the underlying transport exists before creating a connection
10107
10108 There was no verification that an underlying transport exists when creating
10109 a connection, this would cause dereferencing a NULL ptr.
10110
10111 It might happen on sockets that weren't properly bound before attempting to
10112 send a message, which will cause a NULL ptr deref:
10113
10114 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
10115 [135546.051270] Modules linked in:
10116 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
10117 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
10118 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
10119 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
10120 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
10121 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
10122 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
10123 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
10124 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
10125 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
10126 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
10127 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
10128 [135546.064723] Stack:
10129 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
10130 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
10131 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
10132 [135546.068629] Call Trace:
10133 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
10134 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
10135 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
10136 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
10137 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
10138 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
10139 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
10140 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
10141 [135546.076349] ? __might_fault (mm/memory.c:3795)
10142 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
10143 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
10144 [135546.078856] SYSC_sendto (net/socket.c:1657)
10145 [135546.079596] ? SYSC_connect (net/socket.c:1628)
10146 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
10147 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
10148 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
10149 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
10150 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
10151 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
10152 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
10153
10154 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
10155 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
10156 Signed-off-by: David S. Miller <davem@davemloft.net>
10157
10158 net/rds/connection.c | 6 ++++++
10159 1 files changed, 6 insertions(+), 0 deletions(-)
10160
10161 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
10162 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
10163 Date: Tue Jan 5 20:32:47 2016 -0500
10164
10165 ftrace/module: Call clean up function when module init fails early
10166
10167 If the module init code fails after calling ftrace_module_init() and before
10168 calling do_init_module(), we can suffer from a memory leak. This is because
10169 ftrace_module_init() allocates pages to store the locations that ftrace
10170 hooks are placed in the module text. If do_init_module() fails, it still
10171 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
10172 the pages it allocated for the module. But if load_module() fails before
10173 then, the pages allocated by ftrace_module_init() will never be freed.
10174
10175 Call ftrace_release_mod() on the module if load_module() fails before
10176 getting to do_init_module().
10177
10178 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
10179
10180 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
10181 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
10182 Cc: stable@vger.kernel.org # v2.6.38+
10183 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
10184 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
10185
10186 include/linux/ftrace.h | 1 +
10187 kernel/module.c | 6 ++++++
10188 2 files changed, 7 insertions(+), 0 deletions(-)
10189
10190 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
10191 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
10192 Date: Wed Jan 6 00:18:48 2016 -0800
10193
10194 net: possible use after free in dst_release
10195
10196 dst_release should not access dst->flags after decrementing
10197 __refcnt to 0. The dst_entry may be in dst_busy_list and
10198 dst_gc_task may dst_destroy it before dst_release gets a chance
10199 to access dst->flags.
10200
10201 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
10202 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
10203 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
10204 Acked-by: Eric Dumazet <edumazet@google.com>
10205 Signed-off-by: David S. Miller <davem@davemloft.net>
10206
10207 net/core/dst.c | 3 ++-
10208 1 files changed, 2 insertions(+), 1 deletions(-)
10209
10210 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
10211 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
10212 Date: Wed Jan 6 14:55:02 2016 +0000
10213
10214 mkiss: fix scribble on freed memory
10215
10216 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
10217 scribble on free memory but added a new one which allows the user to
10218 scribble even more and user controlled data into freed space.
10219
10220 As with 6pack we need to halt the queue before we free the buffers, because
10221 the transmit logic is not protected by the semaphore.
10222
10223 Signed-off-by: Alan Cox <alan@linux.intel.com>
10224 Signed-off-by: David S. Miller <davem@davemloft.net>
10225
10226 drivers/net/hamradio/mkiss.c | 5 +++++
10227 1 files changed, 5 insertions(+), 0 deletions(-)
10228
10229 commit 5cbbcbd32dc1949470f61d342503808fa9555276
10230 Author: David Miller <davem@davemloft.net>
10231 Date: Thu Dec 17 16:05:49 2015 -0500
10232
10233 mkiss: Fix use after free in mkiss_close().
10234
10235 Need to do the unregister_device() after all references to the driver
10236 private have been done.
10237
10238 Signed-off-by: David S. Miller <davem@davemloft.net>
10239
10240 drivers/net/hamradio/mkiss.c | 4 ++--
10241 1 files changed, 2 insertions(+), 2 deletions(-)
10242
10243 commit b00171576794a98068e069a660f0991a6a5190ff
10244 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
10245 Date: Tue Jan 5 11:51:25 2016 +0000
10246
10247 6pack: fix free memory scribbles
10248
10249 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
10250 memory scribble but in doing so replaced it with a different one that allows
10251 the user to control the data and scribble even more.
10252
10253 sixpack_close is called by the tty layer in tty context. The tty context is
10254 protected by sp_get() and sp_put(). However network layer activity via
10255 sp_xmit() is not protected this way. We must therefore stop the queue
10256 otherwise the user gets to dump a buffer mostly of their choice into freed
10257 kernel pages.
10258
10259 Signed-off-by: Alan Cox <alan@linux.intel.com>
10260 Signed-off-by: David S. Miller <davem@davemloft.net>
10261
10262 drivers/net/hamradio/6pack.c | 6 ++++++
10263 1 files changed, 6 insertions(+), 0 deletions(-)
10264
10265 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
10266 Author: David Miller <davem@davemloft.net>
10267 Date: Thu Dec 17 16:05:32 2015 -0500
10268
10269 6pack: Fix use after free in sixpack_close().
10270
10271 Need to do the unregister_device() after all references to the driver
10272 private have been done.
10273
10274 Also we need to use del_timer_sync() for the timers so that we don't
10275 have any asynchronous references after the unregister.
10276
10277 Signed-off-by: David S. Miller <davem@davemloft.net>
10278
10279 drivers/net/hamradio/6pack.c | 8 ++++----
10280 1 files changed, 4 insertions(+), 4 deletions(-)
10281
10282 commit 4f9d532742656b3613d579220fd10c78f24ba37b
10283 Author: Rabin Vincent <rabin@rab.in>
10284 Date: Tue Jan 5 16:23:07 2016 +0100
10285
10286 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
10287
10288 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
10289 instructions since it XORs A with X while all the others replace A with
10290 some loaded value. All the BPF JITs fail to clear A if this is used as
10291 the first instruction in a filter. This was found using american fuzzy
10292 lop.
10293
10294 Add a helper to determine if A needs to be cleared given the first
10295 instruction in a filter, and use this in the JITs. Except for ARM, the
10296 rest have only been compile-tested.
10297
10298 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
10299 Signed-off-by: Rabin Vincent <rabin@rab.in>
10300 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
10301 Acked-by: Alexei Starovoitov <ast@kernel.org>
10302 Signed-off-by: David S. Miller <davem@davemloft.net>
10303
10304 arch/arm/net/bpf_jit_32.c | 16 +---------------
10305 arch/mips/net/bpf_jit.c | 16 +---------------
10306 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
10307 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
10308 include/linux/filter.h | 19 +++++++++++++++++++
10309 5 files changed, 25 insertions(+), 56 deletions(-)
10310
10311 commit 570d88f8acfffda92b89ae2e1c47320d47256034
10312 Author: John Fastabend <john.fastabend@gmail.com>
10313 Date: Tue Jan 5 09:11:36 2016 -0800
10314
10315 net: sched: fix missing free per cpu on qstats
10316
10317 When a qdisc is using per cpu stats (currently just the ingress
10318 qdisc) only the bstats are being freed. This also free's the qstats.
10319
10320 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
10321 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
10322 Acked-by: Eric Dumazet <edumazet@google.com>
10323 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
10324 Signed-off-by: David S. Miller <davem@davemloft.net>
10325
10326 net/sched/sch_generic.c | 4 +++-
10327 1 files changed, 3 insertions(+), 1 deletions(-)
10328
10329 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
10330 Author: Rabin Vincent <rabin@rab.in>
10331 Date: Tue Jan 5 18:34:04 2016 +0100
10332
10333 ARM: net: bpf: fix zero right shift
10334
10335 The LSR instruction cannot be used to perform a zero right shift since a
10336 0 as the immediate value (imm5) in the LSR instruction encoding means
10337 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
10338
10339 Make the JIT skip generation of the LSR if a zero-shift is requested.
10340
10341 This was found using american fuzzy lop.
10342
10343 Signed-off-by: Rabin Vincent <rabin@rab.in>
10344 Acked-by: Alexei Starovoitov <ast@kernel.org>
10345 Signed-off-by: David S. Miller <davem@davemloft.net>
10346
10347 arch/arm/net/bpf_jit_32.c | 3 ++-
10348 1 files changed, 2 insertions(+), 1 deletions(-)
10349
10350 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
10351 Author: Brad Spengler <spender@grsecurity.net>
10352 Date: Wed Jan 6 20:35:57 2016 -0500
10353
10354 Don't perform hidden lookups in RBAC against the directory of
10355 a file being opened with O_CREAT, reported by Karl Witt
10356
10357 Conflicts:
10358
10359 fs/namei.c
10360
10361 fs/namei.c | 3 ---
10362 1 files changed, 0 insertions(+), 3 deletions(-)
10363
10364 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
10365 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10366 Date: Tue Jan 5 10:46:00 2016 +0100
10367
10368 bridge: Only call /sbin/bridge-stp for the initial network namespace
10369
10370 [I stole this patch from Eric Biederman. He wrote:]
10371
10372 > There is no defined mechanism to pass network namespace information
10373 > into /sbin/bridge-stp therefore don't even try to invoke it except
10374 > for bridge devices in the initial network namespace.
10375 >
10376 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
10377 > invoked for any network device name which if /sbin/bridge-stp does not
10378 > guard against unreasonable arguments or being invoked twice on the
10379 > same network device could cause problems.
10380
10381 [Hannes: changed patch using netns_eq]
10382
10383 Cc: Eric W. Biederman <ebiederm@xmission.com>
10384 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
10385 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10386 Signed-off-by: David S. Miller <davem@davemloft.net>
10387
10388 net/bridge/br_stp_if.c | 5 ++++-
10389 1 files changed, 4 insertions(+), 1 deletions(-)
10390
10391 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
10392 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10393 Date: Wed Dec 23 16:28:40 2015 -0200
10394
10395 sctp: use GFP_USER for user-controlled kmalloc
10396
10397 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
10398 missed two other spots.
10399
10400 For connectx, as it's more likely to be used by kernel users of the API,
10401 it detects if GFP_USER should be used or not.
10402
10403 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
10404 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10405 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
10406 Signed-off-by: David S. Miller <davem@davemloft.net>
10407
10408 net/sctp/socket.c | 9 ++++++---
10409 1 files changed, 6 insertions(+), 3 deletions(-)
10410
10411 commit 5718a1f63c41fc156f729783423b002763779d04
10412 Author: Florian Westphal <fw@strlen.de>
10413 Date: Thu Dec 31 14:26:33 2015 +0100
10414
10415 connector: bump skb->users before callback invocation
10416
10417 Dmitry reports memleak with syskaller program.
10418 Problem is that connector bumps skb usecount but might not invoke callback.
10419
10420 So move skb_get to where we invoke the callback.
10421
10422 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10423 Signed-off-by: Florian Westphal <fw@strlen.de>
10424 Signed-off-by: David S. Miller <davem@davemloft.net>
10425
10426 drivers/connector/connector.c | 11 +++--------
10427 1 files changed, 3 insertions(+), 8 deletions(-)
10428
10429 commit 2e6372e6a97f8d642416899861f91777f44f13b7
10430 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
10431 Date: Sun Jan 3 18:56:38 2016 +0000
10432
10433 af_unix: Fix splice-bind deadlock
10434
10435 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
10436 system call and AF_UNIX sockets,
10437
10438 http://lists.openwall.net/netdev/2015/11/06/24
10439
10440 The situation was analyzed as
10441
10442 (a while ago) A: socketpair()
10443 B: splice() from a pipe to /mnt/regular_file
10444 does sb_start_write() on /mnt
10445 C: try to freeze /mnt
10446 wait for B to finish with /mnt
10447 A: bind() try to bind our socket to /mnt/new_socket_name
10448 lock our socket, see it not bound yet
10449 decide that it needs to create something in /mnt
10450 try to do sb_start_write() on /mnt, block (it's
10451 waiting for C).
10452 D: splice() from the same pipe to our socket
10453 lock the pipe, see that socket is connected
10454 try to lock the socket, block waiting for A
10455 B: get around to actually feeding a chunk from
10456 pipe to file, try to lock the pipe. Deadlock.
10457
10458 on 2015/11/10 by Al Viro,
10459
10460 http://lists.openwall.net/netdev/2015/11/10/4
10461
10462 The patch fixes this by removing the kern_path_create related code from
10463 unix_mknod and executing it as part of unix_bind prior acquiring the
10464 readlock of the socket in question. This means that A (as used above)
10465 will sb_start_write on /mnt before it acquires the readlock, hence, it
10466 won't indirectly block B which first did a sb_start_write and then
10467 waited for a thread trying to acquire the readlock. Consequently, A
10468 being blocked by C waiting for B won't cause a deadlock anymore
10469 (effectively, both A and B acquire two locks in opposite order in the
10470 situation described above).
10471
10472 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
10473
10474 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
10475 Signed-off-by: David S. Miller <davem@davemloft.net>
10476
10477 Conflicts:
10478
10479 net/unix/af_unix.c
10480
10481 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
10482 1 files changed, 42 insertions(+), 28 deletions(-)
10483
10484 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
10485 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
10486 Date: Thu Dec 31 13:11:28 2015 +0800
10487
10488 tracing: Fix setting of start_index in find_next()
10489
10490 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
10491 panic at t_show.
10492
10493 general protection fault: 0000 [#1] PREEMPT SMP
10494 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
10495 RIP: 0010:[<ffffffff811375b2>]
10496 [<ffffffff811375b2>] t_show+0x22/0xe0
10497 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
10498 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
10499 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
10500 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
10501 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
10502 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
10503 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
10504 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
10505 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
10506 Call Trace:
10507 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
10508 [<ffffffff811b749b>] vfs_read+0x9b/0x160
10509 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
10510 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
10511 ---[ end trace 5bd9eb630614861e ]---
10512 Kernel panic - not syncing: Fatal exception
10513
10514 When the first time find_next calls find_next_mod_format, it should
10515 iterate the trace_bprintk_fmt_list to find the first print format of
10516 the module. However in current code, start_index is smaller than *pos
10517 at first, and code will not iterate the list. Latter container_of will
10518 get the wrong address with former v, which will cause mod_fmt be a
10519 meaningless object and so is the returned mod_fmt->fmt.
10520
10521 This patch will fix it by correcting the start_index. After fixed,
10522 when the first time calls find_next_mod_format, start_index will be
10523 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
10524 get the right module printk format, so is the returned mod_fmt->fmt.
10525
10526 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
10527
10528 Cc: stable@vger.kernel.org # 3.12+
10529 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
10530 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
10531 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
10532
10533 kernel/trace/trace_printk.c | 1 +
10534 1 files changed, 1 insertions(+), 0 deletions(-)
10535
10536 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
10537 Author: Al Viro <viro@zeniv.linux.org.uk>
10538 Date: Mon Dec 28 20:47:08 2015 -0500
10539
10540 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
10541
10542 Cc: stable@vger.kernel.org # 3.15+
10543 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
10544 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
10545
10546 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
10547 1 files changed, 37 insertions(+), 36 deletions(-)
10548
10549 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
10550 Merge: de243c2 3adc55a
10551 Author: Brad Spengler <spender@grsecurity.net>
10552 Date: Tue Jan 5 18:10:10 2016 -0500
10553
10554 Merge branch 'pax-test' into grsec-test
10555
10556 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
10557 Author: Brad Spengler <spender@grsecurity.net>
10558 Date: Tue Jan 5 18:08:53 2016 -0500
10559
10560 Update to pax-linux-4.3.3-test16.patch:
10561 - small cleanup in entry_64.S on x86
10562 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
10563 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
10564 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
10565 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
10566 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
10567
10568 arch/x86/entry/entry_64.S | 60 +++++-----
10569 arch/x86/kernel/alternative.c | 2 +-
10570 arch/x86/kvm/emulate.c | 4 +-
10571 tools/gcc/initify_plugin.c | 123 +++++++++----------
10572 .../disable_size_overflow_hash.data | 4 +-
10573 .../size_overflow_plugin/size_overflow_hash.data | 2 -
10574 6 files changed, 93 insertions(+), 102 deletions(-)
10575
10576 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
10577 Author: Brad Spengler <spender@grsecurity.net>
10578 Date: Tue Dec 29 18:01:24 2015 -0500
10579
10580 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
10581 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
10582 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
10583
10584 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
10585 against suid/sgid attacks and the flaw above would only eliminate the extra
10586 entropy provided for the brk-managed heap, still leaving it with the minimum
10587 of 16-bit entropy for mmap on x86 and 28 on x64.
10588
10589 mm/mmap.c | 2 +-
10590 1 files changed, 1 insertions(+), 1 deletions(-)
10591
10592 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
10593 Merge: 436201b 2584340
10594 Author: Brad Spengler <spender@grsecurity.net>
10595 Date: Mon Dec 28 20:30:01 2015 -0500
10596
10597 Merge branch 'pax-test' into grsec-test
10598
10599 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
10600 Author: Brad Spengler <spender@grsecurity.net>
10601 Date: Mon Dec 28 20:29:28 2015 -0500
10602
10603 Update to pax-linux-4.3.3-test14.patch:
10604 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
10605 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
10606 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
10607 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
10608 - fixed an assert in the initify plugin that triggered in vic_register on arm
10609
10610 arch/arm/include/asm/atomic.h | 7 +++++--
10611 arch/arm/include/asm/domain.h | 5 ++---
10612 arch/x86/kernel/tboot.c | 14 +++++++++-----
10613 drivers/hv/channel.c | 4 +---
10614 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
10615 drivers/net/hyperv/rndis_filter.c | 3 +--
10616 fs/exec.c | 4 ++--
10617 include/linux/atomic.h | 15 ---------------
10618 net/core/skbuff.c | 3 ++-
10619 tools/gcc/initify_plugin.c | 4 +++-
10620 10 files changed, 26 insertions(+), 35 deletions(-)
10621
10622 commit 436201b6626b488d173c8076447000077c27b84a
10623 Author: David Howells <dhowells@redhat.com>
10624 Date: Fri Dec 18 01:34:26 2015 +0000
10625
10626 KEYS: Fix race between read and revoke
10627
10628 This fixes CVE-2015-7550.
10629
10630 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
10631 happens between keyctl_read() checking the validity of a key and the key's
10632 semaphore being taken, then the key type read method will see a revoked key.
10633
10634 This causes a problem for the user-defined key type because it assumes in
10635 its read method that there will always be a payload in a non-revoked key
10636 and doesn't check for a NULL pointer.
10637
10638 Fix this by making keyctl_read() check the validity of a key after taking
10639 semaphore instead of before.
10640
10641 I think the bug was introduced with the original keyrings code.
10642
10643 This was discovered by a multithreaded test program generated by syzkaller
10644 (http://github.com/google/syzkaller). Here's a cleaned up version:
10645
10646 #include <sys/types.h>
10647 #include <keyutils.h>
10648 #include <pthread.h>
10649 void *thr0(void *arg)
10650 {
10651 key_serial_t key = (unsigned long)arg;
10652 keyctl_revoke(key);
10653 return 0;
10654 }
10655 void *thr1(void *arg)
10656 {
10657 key_serial_t key = (unsigned long)arg;
10658 char buffer[16];
10659 keyctl_read(key, buffer, 16);
10660 return 0;
10661 }
10662 int main()
10663 {
10664 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
10665 pthread_t th[5];
10666 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
10667 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
10668 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
10669 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
10670 pthread_join(th[0], 0);
10671 pthread_join(th[1], 0);
10672 pthread_join(th[2], 0);
10673 pthread_join(th[3], 0);
10674 return 0;
10675 }
10676
10677 Build as:
10678
10679 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
10680
10681 Run as:
10682
10683 while keyctl-race; do :; done
10684
10685 as it may need several iterations to crash the kernel. The crash can be
10686 summarised as:
10687
10688 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
10689 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
10690 ...
10691 Call Trace:
10692 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
10693 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
10694 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
10695
10696 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10697 Signed-off-by: David Howells <dhowells@redhat.com>
10698 Tested-by: Dmitry Vyukov <dvyukov@google.com>
10699 Cc: stable@vger.kernel.org
10700 Signed-off-by: James Morris <james.l.morris@oracle.com>
10701
10702 security/keys/keyctl.c | 18 +++++++++---------
10703 1 files changed, 9 insertions(+), 9 deletions(-)
10704
10705 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
10706 Author: Brad Spengler <spender@grsecurity.net>
10707 Date: Tue Dec 22 20:44:01 2015 -0500
10708
10709 Add new kernel command-line param: pax_size_overflow_report_only
10710 If a user triggers a size_overflow violation that makes it difficult
10711 to obtain the call trace without serial console/net console, they can
10712 use this option to provide that information to us
10713
10714 Documentation/kernel-parameters.txt | 5 +++++
10715 fs/exec.c | 12 +++++++++---
10716 init/main.c | 11 +++++++++++
10717 3 files changed, 25 insertions(+), 3 deletions(-)
10718
10719 commit 4254a8da5851df8c08cdca5c392916e8c105408d
10720 Author: WANG Cong <xiyou.wangcong@gmail.com>
10721 Date: Mon Dec 21 10:55:45 2015 -0800
10722
10723 addrconf: always initialize sysctl table data
10724
10725 When sysctl performs restrict writes, it allows to write from
10726 a middle position of a sysctl file, which requires us to initialize
10727 the table data before calling proc_dostring() for the write case.
10728
10729 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
10730 Reported-by: Sasha Levin <sasha.levin@oracle.com>
10731 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10732 Tested-by: Sasha Levin <sasha.levin@oracle.com>
10733 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
10734 Signed-off-by: David S. Miller <davem@davemloft.net>
10735
10736 net/ipv6/addrconf.c | 11 ++++-------
10737 1 files changed, 4 insertions(+), 7 deletions(-)
10738
10739 commit f8002863fb06c363180637046947a78a6ccb3d33
10740 Author: WANG Cong <xiyou.wangcong@gmail.com>
10741 Date: Wed Dec 16 23:39:04 2015 -0800
10742
10743 net: check both type and procotol for tcp sockets
10744
10745 Dmitry reported the following out-of-bound access:
10746
10747 Call Trace:
10748 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
10749 mm/kasan/report.c:294
10750 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
10751 [< inline >] SYSC_setsockopt net/socket.c:1746
10752 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
10753 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
10754 arch/x86/entry/entry_64.S:185
10755
10756 This is because we mistake a raw socket as a tcp socket.
10757 We should check both sk->sk_type and sk->sk_protocol to ensure
10758 it is a tcp socket.
10759
10760 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
10761
10762 Reported-by: Dmitry Vyukov <dvyukov@google.com>
10763 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
10764 Cc: Eric Dumazet <eric.dumazet@gmail.com>
10765 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
10766 Acked-by: Willem de Bruijn <willemb@google.com>
10767 Signed-off-by: David S. Miller <davem@davemloft.net>
10768
10769 net/core/skbuff.c | 3 ++-
10770 net/core/sock.c | 3 ++-
10771 2 files changed, 4 insertions(+), 2 deletions(-)
10772
10773 commit bd6b3399804470a4ad8f34229469ca149dceba3d
10774 Author: Colin Ian King <colin.king@canonical.com>
10775 Date: Fri Dec 18 14:22:01 2015 -0800
10776
10777 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
10778
10779 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
10780 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
10781 the setting of ret after the get_proc_task call and incorrectly left it as
10782 -ESRCH. Instead, return 0 when successful.
10783
10784 Example breakage:
10785
10786 echo 0 > /proc/self/coredump_filter
10787 bash: echo: write error: No such process
10788
10789 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
10790 Signed-off-by: Colin Ian King <colin.king@canonical.com>
10791 Acked-by: Kees Cook <keescook@chromium.org>
10792 Cc: <stable@vger.kernel.org> [4.3+]
10793 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
10794 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
10795
10796 fs/proc/base.c | 1 +
10797 1 files changed, 1 insertions(+), 0 deletions(-)
10798
10799 commit b28aca2b99ed08546778355fb9402c503ff9b29e
10800 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
10801 Date: Tue Dec 22 10:23:44 2015 -0700
10802
10803 block: ensure to split after potentially bouncing a bio
10804
10805 blk_queue_bio() does split then bounce, which makes the segment
10806 counting based on pages before bouncing and could go wrong. Move
10807 the split to after bouncing, like we do for blk-mq, and the we
10808 fix the issue of having the bio count for segments be wrong.
10809
10810 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
10811 Cc: stable@vger.kernel.org
10812 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
10813 Signed-off-by: Jens Axboe <axboe@fb.com>
10814
10815 block/blk-core.c | 4 ++--
10816 1 files changed, 2 insertions(+), 2 deletions(-)
10817
10818 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
10819 Merge: f6f63ae ec72fa5
10820 Author: Brad Spengler <spender@grsecurity.net>
10821 Date: Tue Dec 22 19:46:26 2015 -0500
10822
10823 Merge branch 'pax-test' into grsec-test
10824
10825 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
10826 Author: Brad Spengler <spender@grsecurity.net>
10827 Date: Tue Dec 22 19:45:51 2015 -0500
10828
10829 Update to pax-linux-4.3.3-test13.patch:
10830 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
10831 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
10832
10833 arch/arm/mm/fault.c | 2 +-
10834 arch/x86/mm/fault.c | 2 +-
10835 fs/btrfs/extent_map.c | 8 ++++++--
10836 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
10837 4 files changed, 11 insertions(+), 5 deletions(-)
10838
10839 commit f6f63ae154cd45028add1dc41957878060d77fbf
10840 Author: Brad Spengler <spender@grsecurity.net>
10841 Date: Thu Dec 17 18:43:44 2015 -0500
10842
10843 ptrace_has_cap() checks whether the current process should be
10844 treated as having a certain capability for ptrace checks
10845 against another process. Until now, this was equivalent to
10846 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
10847
10848 However, if a root-owned process wants to enter a user
10849 namespace for some reason without knowing who owns it and
10850 therefore can't change to the namespace owner's uid and gid
10851 before entering, as soon as it has entered the namespace,
10852 the namespace owner can attach to it via ptrace and thereby
10853 gain access to its uid and gid.
10854
10855 While it is possible for the entering process to switch to
10856 the uid of a claimed namespace owner before entering,
10857 causing the attempt to enter to fail if the claimed uid is
10858 wrong, this doesn't solve the problem of determining an
10859 appropriate gid.
10860
10861 With this change, the entering process can first enter the
10862 namespace and then safely inspect the namespace's
10863 properties, e.g. through /proc/self/{uid_map,gid_map},
10864 assuming that the namespace owner doesn't have access to
10865 uid 0.
10866 Signed-off-by: Jann Horn <jann@thejh.net>
10867
10868 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
10869 1 files changed, 25 insertions(+), 5 deletions(-)
10870
10871 commit e314f0fb63020f61543b401ff594e953c2c304e5
10872 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
10873 Date: Tue Dec 15 10:46:17 2015 -0800
10874
10875 net: fix uninitialized variable issue
10876
10877 msg_iocb needs to be initialized on the recv/recvfrom path.
10878 Otherwise afalg will wrongly interpret it as an async call.
10879
10880 Cc: stable@vger.kernel.org
10881 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
10882 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
10883 Signed-off-by: David S. Miller <davem@davemloft.net>
10884
10885 net/socket.c | 1 +
10886 1 files changed, 1 insertions(+), 0 deletions(-)
10887
10888 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
10889 Merge: dfa764c 142edcf
10890 Author: Brad Spengler <spender@grsecurity.net>
10891 Date: Wed Dec 16 21:01:17 2015 -0500
10892
10893 Merge branch 'pax-test' into grsec-test
10894
10895 commit 142edcf1005a57fb8887823565cf0bafad2f313c
10896 Author: Brad Spengler <spender@grsecurity.net>
10897 Date: Wed Dec 16 21:00:57 2015 -0500
10898
10899 Update to pax-linux-4.3.3-test12.patch:
10900 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
10901 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
10902
10903 drivers/tty/n_tty.c | 16 ++++++++--------
10904 .../disable_size_overflow_hash.data | 2 ++
10905 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
10906 3 files changed, 12 insertions(+), 12 deletions(-)
10907
10908 commit dfa764cc549892a5bfc1083cac78b99032cae577
10909 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
10910 Date: Tue Dec 15 22:59:12 2015 +0100
10911
10912 ipv6: automatically enable stable privacy mode if stable_secret set
10913
10914 Bjørn reported that while we switch all interfaces to privacy stable mode
10915 when setting the secret, we don't set this mode for new interfaces. This
10916 does not make sense, so change this behaviour.
10917
10918 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
10919 Reported-by: Bjørn Mork <bjorn@mork.no>
10920 Cc: Bjørn Mork <bjorn@mork.no>
10921 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
10922 Signed-off-by: David S. Miller <davem@davemloft.net>
10923
10924 net/ipv6/addrconf.c | 6 ++++++
10925 1 files changed, 6 insertions(+), 0 deletions(-)
10926
10927 commit c2815a1fee03f222273e77c14e43f960da06f35a
10928 Author: Brad Spengler <spender@grsecurity.net>
10929 Date: Wed Dec 16 13:03:38 2015 -0500
10930
10931 Work around upstream limitation on the number of thread info flags causing a compilation error
10932 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
10933
10934 arch/arm/kernel/entry-common.S | 8 ++++++--
10935 1 files changed, 6 insertions(+), 2 deletions(-)
10936
10937 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
10938 Author: Brad Spengler <spender@grsecurity.net>
10939 Date: Tue Dec 15 19:03:41 2015 -0500
10940
10941 Initial import of grsecurity 3.1 for Linux 4.3.3
10942
10943 Documentation/dontdiff | 2 +
10944 Documentation/kernel-parameters.txt | 7 +
10945 Documentation/sysctl/kernel.txt | 15 +
10946 Makefile | 18 +-
10947 arch/alpha/include/asm/cache.h | 4 +-
10948 arch/alpha/kernel/osf_sys.c | 12 +-
10949 arch/arc/Kconfig | 1 +
10950 arch/arm/Kconfig | 1 +
10951 arch/arm/Kconfig.debug | 1 +
10952 arch/arm/include/asm/thread_info.h | 7 +-
10953 arch/arm/kernel/process.c | 4 +-
10954 arch/arm/kernel/ptrace.c | 9 +
10955 arch/arm/kernel/traps.c | 7 +-
10956 arch/arm/mm/Kconfig | 2 +-
10957 arch/arm/mm/fault.c | 40 +-
10958 arch/arm/mm/mmap.c | 8 +-
10959 arch/arm/net/bpf_jit_32.c | 51 +-
10960 arch/arm64/Kconfig.debug | 1 +
10961 arch/avr32/include/asm/cache.h | 4 +-
10962 arch/blackfin/Kconfig.debug | 1 +
10963 arch/blackfin/include/asm/cache.h | 3 +-
10964 arch/cris/include/arch-v10/arch/cache.h | 3 +-
10965 arch/cris/include/arch-v32/arch/cache.h | 3 +-
10966 arch/frv/include/asm/cache.h | 3 +-
10967 arch/frv/mm/elf-fdpic.c | 4 +-
10968 arch/hexagon/include/asm/cache.h | 6 +-
10969 arch/ia64/Kconfig | 1 +
10970 arch/ia64/include/asm/cache.h | 3 +-
10971 arch/ia64/kernel/sys_ia64.c | 2 +
10972 arch/ia64/mm/hugetlbpage.c | 2 +
10973 arch/m32r/include/asm/cache.h | 4 +-
10974 arch/m68k/include/asm/cache.h | 4 +-
10975 arch/metag/mm/hugetlbpage.c | 1 +
10976 arch/microblaze/include/asm/cache.h | 3 +-
10977 arch/mips/Kconfig | 1 +
10978 arch/mips/include/asm/cache.h | 3 +-
10979 arch/mips/include/asm/thread_info.h | 11 +-
10980 arch/mips/kernel/irq.c | 3 +
10981 arch/mips/kernel/ptrace.c | 9 +
10982 arch/mips/mm/mmap.c | 4 +-
10983 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
10984 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
10985 arch/openrisc/include/asm/cache.h | 4 +-
10986 arch/parisc/include/asm/cache.h | 5 +-
10987 arch/parisc/kernel/sys_parisc.c | 4 +
10988 arch/powerpc/Kconfig | 1 +
10989 arch/powerpc/include/asm/cache.h | 4 +-
10990 arch/powerpc/include/asm/thread_info.h | 5 +-
10991 arch/powerpc/kernel/Makefile | 2 +
10992 arch/powerpc/kernel/irq.c | 3 +
10993 arch/powerpc/kernel/process.c | 10 +-
10994 arch/powerpc/kernel/ptrace.c | 14 +
10995 arch/powerpc/kernel/traps.c | 5 +
10996 arch/powerpc/mm/slice.c | 2 +-
10997 arch/s390/Kconfig.debug | 1 +
10998 arch/s390/include/asm/cache.h | 4 +-
10999 arch/score/include/asm/cache.h | 4 +-
11000 arch/sh/include/asm/cache.h | 3 +-
11001 arch/sh/mm/mmap.c | 6 +-
11002 arch/sparc/include/asm/cache.h | 4 +-
11003 arch/sparc/include/asm/pgalloc_64.h | 1 +
11004 arch/sparc/include/asm/thread_info_64.h | 8 +-
11005 arch/sparc/kernel/process_32.c | 6 +-
11006 arch/sparc/kernel/process_64.c | 8 +-
11007 arch/sparc/kernel/ptrace_64.c | 14 +
11008 arch/sparc/kernel/sys_sparc_64.c | 8 +-
11009 arch/sparc/kernel/syscalls.S | 8 +-
11010 arch/sparc/kernel/traps_32.c | 8 +-
11011 arch/sparc/kernel/traps_64.c | 28 +-
11012 arch/sparc/kernel/unaligned_64.c | 2 +-
11013 arch/sparc/mm/fault_64.c | 2 +-
11014 arch/sparc/mm/hugetlbpage.c | 15 +-
11015 arch/tile/Kconfig | 1 +
11016 arch/tile/include/asm/cache.h | 3 +-
11017 arch/tile/mm/hugetlbpage.c | 2 +
11018 arch/um/include/asm/cache.h | 3 +-
11019 arch/unicore32/include/asm/cache.h | 6 +-
11020 arch/x86/Kconfig | 21 +
11021 arch/x86/Kconfig.debug | 2 +
11022 arch/x86/entry/common.c | 14 +
11023 arch/x86/entry/entry_32.S | 2 +-
11024 arch/x86/entry/entry_64.S | 2 +-
11025 arch/x86/ia32/ia32_aout.c | 2 +
11026 arch/x86/include/asm/floppy.h | 20 +-
11027 arch/x86/include/asm/fpu/types.h | 69 +-
11028 arch/x86/include/asm/io.h | 2 +-
11029 arch/x86/include/asm/page.h | 12 +-
11030 arch/x86/include/asm/paravirt_types.h | 23 +-
11031 arch/x86/include/asm/processor.h | 12 +-
11032 arch/x86/include/asm/thread_info.h | 6 +-
11033 arch/x86/include/asm/uaccess.h | 2 +-
11034 arch/x86/kernel/dumpstack.c | 10 +-
11035 arch/x86/kernel/dumpstack_32.c | 2 +-
11036 arch/x86/kernel/dumpstack_64.c | 2 +-
11037 arch/x86/kernel/ioport.c | 13 +
11038 arch/x86/kernel/irq_32.c | 3 +
11039 arch/x86/kernel/irq_64.c | 4 +
11040 arch/x86/kernel/ldt.c | 18 +
11041 arch/x86/kernel/msr.c | 10 +
11042 arch/x86/kernel/ptrace.c | 14 +
11043 arch/x86/kernel/signal.c | 9 +-
11044 arch/x86/kernel/sys_i386_32.c | 9 +-
11045 arch/x86/kernel/sys_x86_64.c | 8 +-
11046 arch/x86/kernel/traps.c | 5 +
11047 arch/x86/kernel/verify_cpu.S | 1 +
11048 arch/x86/kernel/vm86_32.c | 15 +
11049 arch/x86/kvm/svm.c | 14 +-
11050 arch/x86/mm/fault.c | 12 +-
11051 arch/x86/mm/hugetlbpage.c | 15 +-
11052 arch/x86/mm/init.c | 66 +-
11053 arch/x86/mm/init_32.c | 6 +-
11054 arch/x86/net/bpf_jit_comp.c | 4 +
11055 arch/x86/platform/efi/efi_64.c | 2 +-
11056 arch/x86/xen/Kconfig | 1 +
11057 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
11058 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
11059 crypto/ablkcipher.c | 2 +-
11060 crypto/blkcipher.c | 2 +-
11061 crypto/scatterwalk.c | 10 +-
11062 drivers/acpi/acpica/hwxfsleep.c | 11 +-
11063 drivers/acpi/custom_method.c | 4 +
11064 drivers/block/cciss.h | 30 +-
11065 drivers/block/smart1,2.h | 40 +-
11066 drivers/cdrom/cdrom.c | 2 +-
11067 drivers/char/Kconfig | 4 +-
11068 drivers/char/genrtc.c | 1 +
11069 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
11070 drivers/char/mem.c | 17 +
11071 drivers/char/random.c | 5 +-
11072 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
11073 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
11074 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
11075 drivers/crypto/talitos.c | 2 +-
11076 drivers/firewire/ohci.c | 4 +
11077 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
11078 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
11079 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
11080 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
11081 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
11082 drivers/hid/hid-wiimote-debug.c | 2 +-
11083 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
11084 drivers/iommu/Kconfig | 1 +
11085 drivers/iommu/amd_iommu.c | 14 +-
11086 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
11087 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
11088 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
11089 drivers/isdn/hisax/config.c | 2 +-
11090 drivers/isdn/hisax/hfc_pci.c | 2 +-
11091 drivers/isdn/hisax/hfc_sx.c | 2 +-
11092 drivers/isdn/hisax/q931.c | 6 +-
11093 drivers/isdn/i4l/isdn_concap.c | 6 +-
11094 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
11095 drivers/md/bcache/Kconfig | 1 +
11096 drivers/md/raid5.c | 8 +
11097 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
11098 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
11099 drivers/media/platform/vivid/vivid-osd.c | 1 +
11100 drivers/media/radio/radio-cadet.c | 5 +-
11101 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
11102 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
11103 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
11104 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
11105 drivers/message/fusion/mptbase.c | 9 +
11106 drivers/misc/sgi-xp/xp_main.c | 12 +-
11107 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
11108 drivers/net/ppp/pppoe.c | 14 +-
11109 drivers/net/ppp/pptp.c | 6 +
11110 drivers/net/slip/slhc.c | 3 +
11111 drivers/net/wan/lmc/lmc_media.c | 97 +-
11112 drivers/net/wan/x25_asy.c | 6 +-
11113 drivers/net/wan/z85230.c | 24 +-
11114 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
11115 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
11116 drivers/pci/pci-sysfs.c | 2 +-
11117 drivers/pci/proc.c | 9 +
11118 drivers/platform/x86/asus-wmi.c | 12 +
11119 drivers/rtc/rtc-dev.c | 3 +
11120 drivers/scsi/bfa/bfa_fcs.c | 19 +-
11121 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
11122 drivers/scsi/bfa/bfa_modules.h | 12 +-
11123 drivers/scsi/hpsa.h | 40 +-
11124 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
11125 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
11126 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
11127 drivers/target/target_core_sbc.c | 17 +-
11128 drivers/target/target_core_transport.c | 14 +-
11129 drivers/tty/serial/uartlite.c | 4 +-
11130 drivers/tty/sysrq.c | 2 +-
11131 drivers/tty/vt/keyboard.c | 22 +-
11132 drivers/uio/uio.c | 6 +-
11133 drivers/usb/core/hub.c | 5 +
11134 drivers/usb/gadget/function/f_uac1.c | 1 +
11135 drivers/usb/gadget/function/u_uac1.c | 1 +
11136 drivers/usb/host/hwa-hc.c | 9 +-
11137 drivers/usb/usbip/vhci_sysfs.c | 2 +-
11138 drivers/video/fbdev/arcfb.c | 2 +-
11139 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
11140 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
11141 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
11142 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
11143 drivers/xen/xenfs/xenstored.c | 5 +
11144 firmware/Makefile | 2 +
11145 firmware/WHENCE | 20 +-
11146 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
11147 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
11148 fs/9p/vfs_inode.c | 4 +-
11149 fs/attr.c | 1 +
11150 fs/autofs4/waitq.c | 9 +
11151 fs/binfmt_aout.c | 7 +
11152 fs/binfmt_elf.c | 50 +-
11153 fs/compat.c | 20 +-
11154 fs/coredump.c | 17 +-
11155 fs/dcache.c | 3 +
11156 fs/debugfs/inode.c | 11 +-
11157 fs/exec.c | 219 +-
11158 fs/ext2/balloc.c | 4 +-
11159 fs/ext2/super.c | 8 +-
11160 fs/ext4/balloc.c | 4 +-
11161 fs/fcntl.c | 4 +
11162 fs/fhandle.c | 3 +-
11163 fs/file.c | 4 +
11164 fs/filesystems.c | 4 +
11165 fs/fs_struct.c | 20 +-
11166 fs/hugetlbfs/inode.c | 5 +-
11167 fs/inode.c | 8 +-
11168 fs/kernfs/dir.c | 6 +
11169 fs/mount.h | 4 +-
11170 fs/namei.c | 286 +-
11171 fs/namespace.c | 24 +
11172 fs/nfsd/nfscache.c | 2 +-
11173 fs/open.c | 38 +
11174 fs/overlayfs/inode.c | 11 +-
11175 fs/overlayfs/super.c | 6 +-
11176 fs/pipe.c | 2 +-
11177 fs/posix_acl.c | 15 +-
11178 fs/proc/Kconfig | 10 +-
11179 fs/proc/array.c | 69 +-
11180 fs/proc/base.c | 186 +-
11181 fs/proc/cmdline.c | 4 +
11182 fs/proc/devices.c | 4 +
11183 fs/proc/fd.c | 17 +-
11184 fs/proc/generic.c | 64 +
11185 fs/proc/inode.c | 17 +
11186 fs/proc/internal.h | 11 +-
11187 fs/proc/interrupts.c | 4 +
11188 fs/proc/kcore.c | 3 +
11189 fs/proc/meminfo.c | 7 +-
11190 fs/proc/namespaces.c | 4 +-
11191 fs/proc/proc_net.c | 31 +
11192 fs/proc/proc_sysctl.c | 52 +-
11193 fs/proc/root.c | 8 +
11194 fs/proc/stat.c | 69 +-
11195 fs/proc/task_mmu.c | 66 +-
11196 fs/readdir.c | 19 +
11197 fs/reiserfs/item_ops.c | 24 +-
11198 fs/reiserfs/super.c | 4 +
11199 fs/select.c | 2 +
11200 fs/seq_file.c | 30 +-
11201 fs/splice.c | 8 +
11202 fs/stat.c | 20 +-
11203 fs/sysfs/dir.c | 30 +-
11204 fs/sysv/inode.c | 11 +-
11205 fs/utimes.c | 7 +
11206 fs/xattr.c | 26 +-
11207 grsecurity/Kconfig | 1182 ++++
11208 grsecurity/Makefile | 54 +
11209 grsecurity/gracl.c | 2757 +++++++++
11210 grsecurity/gracl_alloc.c | 105 +
11211 grsecurity/gracl_cap.c | 127 +
11212 grsecurity/gracl_compat.c | 269 +
11213 grsecurity/gracl_fs.c | 448 ++
11214 grsecurity/gracl_ip.c | 386 ++
11215 grsecurity/gracl_learn.c | 207 +
11216 grsecurity/gracl_policy.c | 1786 ++++++
11217 grsecurity/gracl_res.c | 68 +
11218 grsecurity/gracl_segv.c | 304 +
11219 grsecurity/gracl_shm.c | 40 +
11220 grsecurity/grsec_chdir.c | 19 +
11221 grsecurity/grsec_chroot.c | 467 ++
11222 grsecurity/grsec_disabled.c | 445 ++
11223 grsecurity/grsec_exec.c | 189 +
11224 grsecurity/grsec_fifo.c | 26 +
11225 grsecurity/grsec_fork.c | 23 +
11226 grsecurity/grsec_init.c | 290 +
11227 grsecurity/grsec_ipc.c | 48 +
11228 grsecurity/grsec_link.c | 65 +
11229 grsecurity/grsec_log.c | 340 +
11230 grsecurity/grsec_mem.c | 48 +
11231 grsecurity/grsec_mount.c | 65 +
11232 grsecurity/grsec_pax.c | 47 +
11233 grsecurity/grsec_proc.c | 20 +
11234 grsecurity/grsec_ptrace.c | 30 +
11235 grsecurity/grsec_sig.c | 236 +
11236 grsecurity/grsec_sock.c | 244 +
11237 grsecurity/grsec_sysctl.c | 488 ++
11238 grsecurity/grsec_time.c | 16 +
11239 grsecurity/grsec_tpe.c | 78 +
11240 grsecurity/grsec_usb.c | 15 +
11241 grsecurity/grsum.c | 64 +
11242 include/linux/binfmts.h | 5 +-
11243 include/linux/bitops.h | 2 +-
11244 include/linux/capability.h | 13 +
11245 include/linux/compiler-gcc.h | 5 +
11246 include/linux/compiler.h | 8 +
11247 include/linux/cred.h | 8 +-
11248 include/linux/dcache.h | 5 +-
11249 include/linux/fs.h | 24 +-
11250 include/linux/fs_struct.h | 2 +-
11251 include/linux/fsnotify.h | 6 +
11252 include/linux/gracl.h | 342 +
11253 include/linux/gracl_compat.h | 156 +
11254 include/linux/gralloc.h | 9 +
11255 include/linux/grdefs.h | 140 +
11256 include/linux/grinternal.h | 230 +
11257 include/linux/grmsg.h | 118 +
11258 include/linux/grsecurity.h | 255 +
11259 include/linux/grsock.h | 19 +
11260 include/linux/ipc.h | 2 +-
11261 include/linux/ipc_namespace.h | 2 +-
11262 include/linux/kallsyms.h | 18 +-
11263 include/linux/kmod.h | 5 +
11264 include/linux/kobject.h | 2 +-
11265 include/linux/lsm_hooks.h | 4 +-
11266 include/linux/mm.h | 12 +
11267 include/linux/mm_types.h | 4 +-
11268 include/linux/module.h | 5 +-
11269 include/linux/mount.h | 2 +-
11270 include/linux/msg.h | 2 +-
11271 include/linux/netfilter/xt_gradm.h | 9 +
11272 include/linux/path.h | 4 +-
11273 include/linux/perf_event.h | 13 +-
11274 include/linux/pid_namespace.h | 2 +-
11275 include/linux/printk.h | 2 +-
11276 include/linux/proc_fs.h | 22 +-
11277 include/linux/proc_ns.h | 2 +-
11278 include/linux/ptrace.h | 24 +-
11279 include/linux/random.h | 2 +-
11280 include/linux/rbtree_augmented.h | 4 +-
11281 include/linux/scatterlist.h | 12 +-
11282 include/linux/sched.h | 114 +-
11283 include/linux/security.h | 1 +
11284 include/linux/sem.h | 2 +-
11285 include/linux/seq_file.h | 5 +
11286 include/linux/shm.h | 6 +-
11287 include/linux/skbuff.h | 3 +
11288 include/linux/slab.h | 9 -
11289 include/linux/sysctl.h | 8 +-
11290 include/linux/thread_info.h | 6 +-
11291 include/linux/tty.h | 2 +-
11292 include/linux/tty_driver.h | 4 +-
11293 include/linux/uidgid.h | 5 +
11294 include/linux/user_namespace.h | 2 +-
11295 include/linux/utsname.h | 2 +-
11296 include/linux/vermagic.h | 16 +-
11297 include/linux/vmalloc.h | 20 +-
11298 include/net/af_unix.h | 2 +-
11299 include/net/dst.h | 33 +
11300 include/net/ip.h | 2 +-
11301 include/net/neighbour.h | 2 +-
11302 include/net/net_namespace.h | 2 +-
11303 include/net/sock.h | 4 +-
11304 include/target/target_core_base.h | 2 +-
11305 include/trace/events/fs.h | 53 +
11306 include/uapi/linux/personality.h | 1 +
11307 init/Kconfig | 4 +-
11308 init/main.c | 35 +-
11309 ipc/mqueue.c | 1 +
11310 ipc/msg.c | 3 +-
11311 ipc/sem.c | 3 +-
11312 ipc/shm.c | 26 +-
11313 ipc/util.c | 6 +
11314 kernel/auditsc.c | 2 +-
11315 kernel/bpf/syscall.c | 8 +-
11316 kernel/capability.c | 41 +-
11317 kernel/cgroup.c | 5 +-
11318 kernel/compat.c | 1 +
11319 kernel/configs.c | 11 +
11320 kernel/cred.c | 112 +-
11321 kernel/events/core.c | 16 +-
11322 kernel/exit.c | 10 +-
11323 kernel/fork.c | 86 +-
11324 kernel/futex.c | 6 +-
11325 kernel/futex_compat.c | 2 +-
11326 kernel/kallsyms.c | 9 +
11327 kernel/kcmp.c | 8 +-
11328 kernel/kexec_core.c | 2 +-
11329 kernel/kmod.c | 95 +-
11330 kernel/kprobes.c | 7 +-
11331 kernel/ksysfs.c | 2 +
11332 kernel/locking/lockdep_proc.c | 10 +-
11333 kernel/module.c | 108 +-
11334 kernel/panic.c | 4 +-
11335 kernel/pid.c | 23 +-
11336 kernel/power/Kconfig | 2 +
11337 kernel/printk/printk.c | 20 +-
11338 kernel/ptrace.c | 56 +-
11339 kernel/resource.c | 10 +
11340 kernel/sched/core.c | 11 +-
11341 kernel/signal.c | 37 +-
11342 kernel/sys.c | 64 +-
11343 kernel/sysctl.c | 172 +-
11344 kernel/taskstats.c | 6 +
11345 kernel/time/posix-timers.c | 8 +
11346 kernel/time/time.c | 5 +
11347 kernel/time/timekeeping.c | 3 +
11348 kernel/time/timer_list.c | 13 +-
11349 kernel/time/timer_stats.c | 10 +-
11350 kernel/trace/Kconfig | 2 +
11351 kernel/trace/trace_syscalls.c | 8 +
11352 kernel/user_namespace.c | 15 +
11353 lib/Kconfig.debug | 13 +-
11354 lib/Kconfig.kasan | 2 +-
11355 lib/is_single_threaded.c | 3 +
11356 lib/list_debug.c | 65 +-
11357 lib/nlattr.c | 2 +
11358 lib/rbtree.c | 4 +-
11359 lib/vsprintf.c | 39 +-
11360 localversion-grsec | 1 +
11361 mm/Kconfig | 8 +-
11362 mm/Kconfig.debug | 1 +
11363 mm/filemap.c | 1 +
11364 mm/kmemleak.c | 4 +-
11365 mm/memory.c | 2 +-
11366 mm/mempolicy.c | 12 +-
11367 mm/migrate.c | 3 +-
11368 mm/mlock.c | 6 +-
11369 mm/mmap.c | 93 +-
11370 mm/mprotect.c | 8 +
11371 mm/oom_kill.c | 28 +-
11372 mm/page_alloc.c | 2 +-
11373 mm/process_vm_access.c | 8 +-
11374 mm/shmem.c | 36 +-
11375 mm/slab.c | 14 +-
11376 mm/slab_common.c | 2 +-
11377 mm/slob.c | 12 +
11378 mm/slub.c | 33 +-
11379 mm/util.c | 3 +
11380 mm/vmalloc.c | 129 +-
11381 mm/vmstat.c | 29 +-
11382 net/appletalk/atalk_proc.c | 2 +-
11383 net/atm/lec.c | 6 +-
11384 net/atm/mpoa_caches.c | 42 +-
11385 net/bluetooth/sco.c | 3 +
11386 net/can/bcm.c | 2 +-
11387 net/can/proc.c | 2 +-
11388 net/core/dev_ioctl.c | 7 +-
11389 net/core/filter.c | 8 +-
11390 net/core/net-procfs.c | 17 +-
11391 net/core/pktgen.c | 2 +-
11392 net/core/sock.c | 3 +-
11393 net/core/sysctl_net_core.c | 2 +-
11394 net/decnet/dn_dev.c | 2 +-
11395 net/ipv4/devinet.c | 6 +-
11396 net/ipv4/inet_hashtables.c | 4 +
11397 net/ipv4/ip_input.c | 7 +
11398 net/ipv4/ip_sockglue.c | 3 +-
11399 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
11400 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
11401 net/ipv4/route.c | 6 +-
11402 net/ipv4/tcp_input.c | 4 +-
11403 net/ipv4/tcp_ipv4.c | 29 +-
11404 net/ipv4/tcp_minisocks.c | 9 +-
11405 net/ipv4/tcp_timer.c | 11 +
11406 net/ipv4/udp.c | 24 +
11407 net/ipv6/addrconf.c | 13 +-
11408 net/ipv6/proc.c | 2 +-
11409 net/ipv6/tcp_ipv6.c | 26 +-
11410 net/ipv6/udp.c | 7 +
11411 net/ipx/ipx_proc.c | 2 +-
11412 net/irda/irproc.c | 2 +-
11413 net/llc/llc_proc.c | 2 +-
11414 net/netfilter/Kconfig | 10 +
11415 net/netfilter/Makefile | 1 +
11416 net/netfilter/nf_conntrack_core.c | 8 +
11417 net/netfilter/xt_gradm.c | 51 +
11418 net/netfilter/xt_hashlimit.c | 4 +-
11419 net/netfilter/xt_recent.c | 2 +-
11420 net/sched/sch_api.c | 2 +-
11421 net/sctp/socket.c | 4 +-
11422 net/socket.c | 75 +-
11423 net/sunrpc/Kconfig | 1 +
11424 net/sunrpc/cache.c | 2 +-
11425 net/sunrpc/stats.c | 2 +-
11426 net/sysctl_net.c | 2 +-
11427 net/unix/af_unix.c | 52 +-
11428 net/vmw_vsock/vmci_transport_notify.c | 30 +-
11429 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
11430 net/x25/sysctl_net_x25.c | 2 +-
11431 net/x25/x25_proc.c | 2 +-
11432 scripts/package/Makefile | 2 +-
11433 scripts/package/mkspec | 41 +-
11434 security/Kconfig | 369 +-
11435 security/apparmor/file.c | 4 +-
11436 security/apparmor/lsm.c | 8 +-
11437 security/commoncap.c | 36 +-
11438 security/min_addr.c | 2 +
11439 security/smack/smack_lsm.c | 8 +-
11440 security/tomoyo/file.c | 12 +-
11441 security/tomoyo/mount.c | 4 +
11442 security/tomoyo/tomoyo.c | 20 +-
11443 security/yama/Kconfig | 2 +-
11444 security/yama/yama_lsm.c | 4 +-
11445 sound/synth/emux/emux_seq.c | 14 +-
11446 sound/usb/line6/driver.c | 40 +-
11447 sound/usb/line6/toneport.c | 12 +-
11448 tools/gcc/.gitignore | 1 +
11449 tools/gcc/Makefile | 12 +
11450 tools/gcc/gen-random-seed.sh | 8 +
11451 tools/gcc/randomize_layout_plugin.c | 930 +++
11452 tools/gcc/size_overflow_plugin/.gitignore | 1 +
11453 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
11454 511 files changed, 32631 insertions(+), 3196 deletions(-)
11455
11456 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
11457 Author: Brad Spengler <spender@grsecurity.net>
11458 Date: Tue Dec 15 14:31:49 2015 -0500
11459
11460 Update to pax-linux-4.3.3-test11.patch:
11461 - fixed a few compile regressions with the recent plugin changes, reported by spender
11462 - updated the size overflow hash table
11463
11464 tools/gcc/latent_entropy_plugin.c | 2 +-
11465 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
11466 tools/gcc/stackleak_plugin.c | 2 +-
11467 tools/gcc/structleak_plugin.c | 6 +--
11468 4 files changed, 60 insertions(+), 16 deletions(-)
11469
11470 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
11471 Author: Brad Spengler <spender@grsecurity.net>
11472 Date: Tue Dec 15 11:50:24 2015 -0500
11473
11474 Apply structleak ICE fix for gcc < 4.9
11475
11476 tools/gcc/structleak_plugin.c | 4 ++++
11477 1 files changed, 4 insertions(+), 0 deletions(-)
11478
11479 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
11480 Author: Brad Spengler <spender@grsecurity.net>
11481 Date: Tue Dec 15 07:57:06 2015 -0500
11482
11483 Update to pax-linux-4.3.1-test10.patch:
11484 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
11485 - Emese regenerated the size overflow hash tables for 4.3
11486 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
11487 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
11488
11489 arch/x86/entry/entry_64.S | 2 +-
11490 arch/x86/entry/entry_64_compat.S | 15 +-
11491 scripts/package/builddeb | 2 +-
11492 tools/gcc/initify_plugin.c | 11 +-
11493 tools/gcc/latent_entropy_plugin.c | 20 +-
11494 .../disable_size_overflow_hash.data | 4 +
11495 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
11496 tools/gcc/stackleak_plugin.c | 26 +-
11497 tools/gcc/structleak_plugin.c | 21 +-
11498 9 files changed, 3079 insertions(+), 2367 deletions(-)
11499
11500 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
11501 Merge: b5847e6 3548341
11502 Author: Brad Spengler <spender@grsecurity.net>
11503 Date: Tue Dec 15 07:47:56 2015 -0500
11504
11505 Merge branch 'linux-4.3.y' into pax-4_3
11506
11507 Conflicts:
11508 net/unix/af_unix.c
11509
11510 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
11511 Author: Brad Spengler <spender@grsecurity.net>
11512 Date: Wed Dec 9 23:11:36 2015 -0500
11513
11514 Update to pax-linux-4.3.1-test9.patch:
11515 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
11516 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
11517 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
11518 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
11519 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
11520 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
11521 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
11522
11523 Makefile | 6 +
11524 arch/x86/include/asm/compat.h | 4 +
11525 arch/x86/include/asm/dma.h | 2 +
11526 arch/x86/include/asm/pmem.h | 2 +-
11527 arch/x86/include/asm/uaccess.h | 20 +-
11528 arch/x86/kernel/apic/vector.c | 6 +-
11529 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
11530 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
11531 arch/x86/kernel/head_64.S | 1 -
11532 arch/x86/kvm/i8259.c | 10 +-
11533 arch/x86/kvm/ioapic.c | 2 +
11534 arch/x86/kvm/x86.c | 2 +
11535 arch/x86/lib/usercopy_64.c | 2 +-
11536 arch/x86/mm/mpx.c | 4 +-
11537 arch/x86/mm/pageattr.c | 7 +
11538 drivers/base/devres.c | 4 +-
11539 drivers/base/power/runtime.c | 6 +-
11540 drivers/base/regmap/regmap.c | 4 +-
11541 drivers/block/drbd/drbd_receiver.c | 4 +-
11542 drivers/block/drbd/drbd_worker.c | 6 +-
11543 drivers/char/virtio_console.c | 6 +-
11544 drivers/md/dm.c | 12 +-
11545 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
11546 drivers/net/macvtap.c | 4 +-
11547 drivers/video/fbdev/core/fbmem.c | 10 +-
11548 fs/compat.c | 3 +-
11549 fs/coredump.c | 2 +-
11550 fs/dcache.c | 13 +-
11551 fs/fhandle.c | 2 +-
11552 fs/file.c | 14 +-
11553 fs/fs-writeback.c | 11 +-
11554 fs/overlayfs/copy_up.c | 2 +-
11555 fs/readdir.c | 3 +-
11556 fs/super.c | 3 +-
11557 include/linux/compiler.h | 36 ++-
11558 include/linux/rcupdate.h | 8 +
11559 include/linux/sched.h | 4 +-
11560 include/linux/seqlock.h | 10 +
11561 include/linux/spinlock.h | 17 +-
11562 include/linux/srcu.h | 5 +-
11563 include/linux/syscalls.h | 2 +-
11564 include/linux/writeback.h | 3 +-
11565 include/uapi/linux/swab.h | 6 +-
11566 ipc/ipc_sysctl.c | 6 +
11567 kernel/exit.c | 25 +-
11568 kernel/resource.c | 4 +-
11569 kernel/signal.c | 12 +-
11570 kernel/user.c | 2 +-
11571 kernel/workqueue.c | 6 +-
11572 lib/rhashtable.c | 4 +-
11573 net/compat.c | 2 +-
11574 net/ipv4/xfrm4_mode_transport.c | 2 +-
11575 security/keys/internal.h | 8 +-
11576 security/keys/keyring.c | 4 -
11577 sound/core/seq/seq_clientmgr.c | 8 +-
11578 sound/core/seq/seq_compat.c | 2 +-
11579 sound/core/seq/seq_memory.c | 6 +-
11580 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
11581 tools/gcc/gcc-common.h | 1 +
11582 tools/gcc/initify_plugin.c | 33 ++-
11583 .../disable_size_overflow_hash.data | 1 +
11584 .../size_overflow_plugin/size_overflow_hash.data | 1 -
11585 62 files changed, 708 insertions(+), 140 deletions(-)
11586
11587 commit f2634c2f6995f4231616f24ed016f890c701f939
11588 Merge: 1241bff 5f8b236
11589 Author: Brad Spengler <spender@grsecurity.net>
11590 Date: Wed Dec 9 21:50:47 2015 -0500
11591
11592 Merge branch 'linux-4.3.y' into pax-4_3
11593
11594 Conflicts:
11595 arch/x86/kernel/fpu/xstate.c
11596 arch/x86/kernel/head_64.S
11597
11598 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
11599 Author: Brad Spengler <spender@grsecurity.net>
11600 Date: Sun Dec 6 08:44:56 2015 -0500
11601
11602 Update to pax-linux-4.3-test8.patch:
11603 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
11604 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
11605 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
11606 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
11607
11608 Makefile | 5 +++
11609 drivers/md/md.c | 5 ++-
11610 drivers/md/raid1.c | 2 +-
11611 fs/proc/task_mmu.c | 3 ++
11612 .../disable_size_overflow_hash.data | 4 ++-
11613 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
11614 .../size_overflow_plugin/size_overflow_hash.data | 2 -
11615 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
11616 8 files changed, 43 insertions(+), 12 deletions(-)
11617
11618 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
11619 Author: Brad Spengler <spender@grsecurity.net>
11620 Date: Fri Dec 4 14:24:12 2015 -0500
11621
11622 Initial import of pax-linux-4.3-test7.patch
11623
11624 Documentation/dontdiff | 47 +-
11625 Documentation/kbuild/makefiles.txt | 39 +-
11626 Documentation/kernel-parameters.txt | 28 +
11627 Makefile | 108 +-
11628 arch/alpha/include/asm/atomic.h | 10 +
11629 arch/alpha/include/asm/elf.h | 7 +
11630 arch/alpha/include/asm/pgalloc.h | 6 +
11631 arch/alpha/include/asm/pgtable.h | 11 +
11632 arch/alpha/kernel/module.c | 2 +-
11633 arch/alpha/kernel/osf_sys.c | 8 +-
11634 arch/alpha/mm/fault.c | 141 +-
11635 arch/arm/Kconfig | 2 +-
11636 arch/arm/include/asm/atomic.h | 320 +-
11637 arch/arm/include/asm/cache.h | 5 +-
11638 arch/arm/include/asm/cacheflush.h | 2 +-
11639 arch/arm/include/asm/checksum.h | 14 +-
11640 arch/arm/include/asm/cmpxchg.h | 4 +
11641 arch/arm/include/asm/cpuidle.h | 2 +-
11642 arch/arm/include/asm/domain.h | 22 +-
11643 arch/arm/include/asm/elf.h | 9 +-
11644 arch/arm/include/asm/fncpy.h | 2 +
11645 arch/arm/include/asm/futex.h | 10 +
11646 arch/arm/include/asm/kmap_types.h | 2 +-
11647 arch/arm/include/asm/mach/dma.h | 2 +-
11648 arch/arm/include/asm/mach/map.h | 16 +-
11649 arch/arm/include/asm/outercache.h | 2 +-
11650 arch/arm/include/asm/page.h | 3 +-
11651 arch/arm/include/asm/pgalloc.h | 20 +
11652 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
11653 arch/arm/include/asm/pgtable-2level.h | 3 +
11654 arch/arm/include/asm/pgtable-3level.h | 3 +
11655 arch/arm/include/asm/pgtable.h | 54 +-
11656 arch/arm/include/asm/smp.h | 2 +-
11657 arch/arm/include/asm/tls.h | 3 +
11658 arch/arm/include/asm/uaccess.h | 79 +-
11659 arch/arm/include/uapi/asm/ptrace.h | 2 +-
11660 arch/arm/kernel/armksyms.c | 2 +-
11661 arch/arm/kernel/cpuidle.c | 2 +-
11662 arch/arm/kernel/entry-armv.S | 109 +-
11663 arch/arm/kernel/entry-common.S | 40 +-
11664 arch/arm/kernel/entry-header.S | 55 +
11665 arch/arm/kernel/fiq.c | 3 +
11666 arch/arm/kernel/module-plts.c | 7 +-
11667 arch/arm/kernel/module.c | 38 +-
11668 arch/arm/kernel/patch.c | 2 +
11669 arch/arm/kernel/process.c | 90 +-
11670 arch/arm/kernel/reboot.c | 1 +
11671 arch/arm/kernel/setup.c | 20 +-
11672 arch/arm/kernel/signal.c | 35 +-
11673 arch/arm/kernel/smp.c | 2 +-
11674 arch/arm/kernel/tcm.c | 4 +-
11675 arch/arm/kernel/vmlinux.lds.S | 6 +-
11676 arch/arm/kvm/arm.c | 8 +-
11677 arch/arm/lib/copy_page.S | 1 +
11678 arch/arm/lib/csumpartialcopyuser.S | 4 +-
11679 arch/arm/lib/delay.c | 2 +-
11680 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
11681 arch/arm/mach-exynos/suspend.c | 6 +-
11682 arch/arm/mach-mvebu/coherency.c | 4 +-
11683 arch/arm/mach-omap2/board-n8x0.c | 2 +-
11684 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
11685 arch/arm/mach-omap2/omap-smp.c | 1 +
11686 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
11687 arch/arm/mach-omap2/omap_device.c | 4 +-
11688 arch/arm/mach-omap2/omap_device.h | 4 +-
11689 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
11690 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
11691 arch/arm/mach-omap2/wd_timer.c | 6 +-
11692 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
11693 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
11694 arch/arm/mach-tegra/irq.c | 1 +
11695 arch/arm/mach-ux500/pm.c | 1 +
11696 arch/arm/mach-zynq/platsmp.c | 1 +
11697 arch/arm/mm/Kconfig | 6 +-
11698 arch/arm/mm/alignment.c | 8 +
11699 arch/arm/mm/cache-l2x0.c | 2 +-
11700 arch/arm/mm/context.c | 10 +-
11701 arch/arm/mm/fault.c | 146 +
11702 arch/arm/mm/fault.h | 12 +
11703 arch/arm/mm/init.c | 39 +
11704 arch/arm/mm/ioremap.c | 4 +-
11705 arch/arm/mm/mmap.c | 30 +-
11706 arch/arm/mm/mmu.c | 162 +-
11707 arch/arm/net/bpf_jit_32.c | 3 +
11708 arch/arm/plat-iop/setup.c | 2 +-
11709 arch/arm/plat-omap/sram.c | 2 +
11710 arch/arm64/include/asm/atomic.h | 10 +
11711 arch/arm64/include/asm/percpu.h | 8 +-
11712 arch/arm64/include/asm/pgalloc.h | 5 +
11713 arch/arm64/include/asm/uaccess.h | 1 +
11714 arch/arm64/mm/dma-mapping.c | 2 +-
11715 arch/avr32/include/asm/elf.h | 8 +-
11716 arch/avr32/include/asm/kmap_types.h | 4 +-
11717 arch/avr32/mm/fault.c | 27 +
11718 arch/frv/include/asm/atomic.h | 10 +
11719 arch/frv/include/asm/kmap_types.h | 2 +-
11720 arch/frv/mm/elf-fdpic.c | 3 +-
11721 arch/ia64/Makefile | 1 +
11722 arch/ia64/include/asm/atomic.h | 10 +
11723 arch/ia64/include/asm/elf.h | 7 +
11724 arch/ia64/include/asm/pgalloc.h | 12 +
11725 arch/ia64/include/asm/pgtable.h | 13 +-
11726 arch/ia64/include/asm/spinlock.h | 2 +-
11727 arch/ia64/include/asm/uaccess.h | 27 +-
11728 arch/ia64/kernel/module.c | 45 +-
11729 arch/ia64/kernel/palinfo.c | 2 +-
11730 arch/ia64/kernel/sys_ia64.c | 7 +
11731 arch/ia64/kernel/vmlinux.lds.S | 2 +-
11732 arch/ia64/mm/fault.c | 32 +-
11733 arch/ia64/mm/init.c | 15 +-
11734 arch/m32r/lib/usercopy.c | 6 +
11735 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
11736 arch/mips/include/asm/atomic.h | 368 +-
11737 arch/mips/include/asm/elf.h | 7 +
11738 arch/mips/include/asm/exec.h | 2 +-
11739 arch/mips/include/asm/hw_irq.h | 2 +-
11740 arch/mips/include/asm/local.h | 57 +
11741 arch/mips/include/asm/page.h | 2 +-
11742 arch/mips/include/asm/pgalloc.h | 5 +
11743 arch/mips/include/asm/pgtable.h | 3 +
11744 arch/mips/include/asm/uaccess.h | 1 +
11745 arch/mips/kernel/binfmt_elfn32.c | 7 +
11746 arch/mips/kernel/binfmt_elfo32.c | 7 +
11747 arch/mips/kernel/irq-gt641xx.c | 2 +-
11748 arch/mips/kernel/irq.c | 6 +-
11749 arch/mips/kernel/pm-cps.c | 2 +-
11750 arch/mips/kernel/process.c | 12 -
11751 arch/mips/kernel/sync-r4k.c | 24 +-
11752 arch/mips/kernel/traps.c | 13 +-
11753 arch/mips/mm/fault.c | 25 +
11754 arch/mips/mm/mmap.c | 51 +-
11755 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
11756 arch/mips/sni/rm200.c | 2 +-
11757 arch/mips/vr41xx/common/icu.c | 2 +-
11758 arch/mips/vr41xx/common/irq.c | 4 +-
11759 arch/parisc/include/asm/atomic.h | 10 +
11760 arch/parisc/include/asm/elf.h | 7 +
11761 arch/parisc/include/asm/pgalloc.h | 6 +
11762 arch/parisc/include/asm/pgtable.h | 11 +
11763 arch/parisc/include/asm/uaccess.h | 4 +-
11764 arch/parisc/kernel/module.c | 50 +-
11765 arch/parisc/kernel/sys_parisc.c | 15 +
11766 arch/parisc/kernel/traps.c | 4 +-
11767 arch/parisc/mm/fault.c | 140 +-
11768 arch/powerpc/include/asm/atomic.h | 329 +-
11769 arch/powerpc/include/asm/elf.h | 12 +
11770 arch/powerpc/include/asm/exec.h | 2 +-
11771 arch/powerpc/include/asm/kmap_types.h | 2 +-
11772 arch/powerpc/include/asm/local.h | 46 +
11773 arch/powerpc/include/asm/mman.h | 2 +-
11774 arch/powerpc/include/asm/page.h | 8 +-
11775 arch/powerpc/include/asm/page_64.h | 7 +-
11776 arch/powerpc/include/asm/pgalloc-64.h | 7 +
11777 arch/powerpc/include/asm/pgtable.h | 1 +
11778 arch/powerpc/include/asm/pte-hash32.h | 1 +
11779 arch/powerpc/include/asm/reg.h | 1 +
11780 arch/powerpc/include/asm/smp.h | 2 +-
11781 arch/powerpc/include/asm/spinlock.h | 42 +-
11782 arch/powerpc/include/asm/uaccess.h | 141 +-
11783 arch/powerpc/kernel/Makefile | 5 +
11784 arch/powerpc/kernel/exceptions-64e.S | 4 +-
11785 arch/powerpc/kernel/exceptions-64s.S | 2 +-
11786 arch/powerpc/kernel/module_32.c | 15 +-
11787 arch/powerpc/kernel/process.c | 46 -
11788 arch/powerpc/kernel/signal_32.c | 2 +-
11789 arch/powerpc/kernel/signal_64.c | 2 +-
11790 arch/powerpc/kernel/traps.c | 21 +
11791 arch/powerpc/kernel/vdso.c | 5 +-
11792 arch/powerpc/lib/usercopy_64.c | 18 -
11793 arch/powerpc/mm/fault.c | 56 +-
11794 arch/powerpc/mm/mmap.c | 16 +
11795 arch/powerpc/mm/slice.c | 13 +-
11796 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
11797 arch/s390/include/asm/atomic.h | 10 +
11798 arch/s390/include/asm/elf.h | 7 +
11799 arch/s390/include/asm/exec.h | 2 +-
11800 arch/s390/include/asm/uaccess.h | 13 +-
11801 arch/s390/kernel/module.c | 22 +-
11802 arch/s390/kernel/process.c | 24 -
11803 arch/s390/mm/mmap.c | 16 +
11804 arch/score/include/asm/exec.h | 2 +-
11805 arch/score/kernel/process.c | 5 -
11806 arch/sh/mm/mmap.c | 22 +-
11807 arch/sparc/include/asm/atomic_64.h | 110 +-
11808 arch/sparc/include/asm/cache.h | 2 +-
11809 arch/sparc/include/asm/elf_32.h | 7 +
11810 arch/sparc/include/asm/elf_64.h | 7 +
11811 arch/sparc/include/asm/pgalloc_32.h | 1 +
11812 arch/sparc/include/asm/pgalloc_64.h | 1 +
11813 arch/sparc/include/asm/pgtable.h | 4 +
11814 arch/sparc/include/asm/pgtable_32.h | 15 +-
11815 arch/sparc/include/asm/pgtsrmmu.h | 5 +
11816 arch/sparc/include/asm/setup.h | 4 +-
11817 arch/sparc/include/asm/spinlock_64.h | 35 +-
11818 arch/sparc/include/asm/thread_info_32.h | 1 +
11819 arch/sparc/include/asm/thread_info_64.h | 2 +
11820 arch/sparc/include/asm/uaccess.h | 1 +
11821 arch/sparc/include/asm/uaccess_32.h | 28 +-
11822 arch/sparc/include/asm/uaccess_64.h | 24 +-
11823 arch/sparc/kernel/Makefile | 2 +-
11824 arch/sparc/kernel/prom_common.c | 2 +-
11825 arch/sparc/kernel/smp_64.c | 8 +-
11826 arch/sparc/kernel/sys_sparc_32.c | 2 +-
11827 arch/sparc/kernel/sys_sparc_64.c | 52 +-
11828 arch/sparc/kernel/traps_64.c | 27 +-
11829 arch/sparc/lib/Makefile | 2 +-
11830 arch/sparc/lib/atomic_64.S | 57 +-
11831 arch/sparc/lib/ksyms.c | 6 +-
11832 arch/sparc/mm/Makefile | 2 +-
11833 arch/sparc/mm/fault_32.c | 292 +
11834 arch/sparc/mm/fault_64.c | 486 +
11835 arch/sparc/mm/hugetlbpage.c | 22 +-
11836 arch/sparc/mm/init_64.c | 10 +-
11837 arch/tile/include/asm/atomic_64.h | 10 +
11838 arch/tile/include/asm/uaccess.h | 4 +-
11839 arch/um/Makefile | 4 +
11840 arch/um/include/asm/kmap_types.h | 2 +-
11841 arch/um/include/asm/page.h | 3 +
11842 arch/um/include/asm/pgtable-3level.h | 1 +
11843 arch/um/kernel/process.c | 16 -
11844 arch/x86/Kconfig | 15 +-
11845 arch/x86/Kconfig.cpu | 6 +-
11846 arch/x86/Kconfig.debug | 4 +-
11847 arch/x86/Makefile | 13 +-
11848 arch/x86/boot/Makefile | 3 +
11849 arch/x86/boot/bitops.h | 4 +-
11850 arch/x86/boot/boot.h | 2 +-
11851 arch/x86/boot/compressed/Makefile | 3 +
11852 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
11853 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
11854 arch/x86/boot/compressed/head_32.S | 4 +-
11855 arch/x86/boot/compressed/head_64.S | 12 +-
11856 arch/x86/boot/compressed/misc.c | 11 +-
11857 arch/x86/boot/cpucheck.c | 16 +-
11858 arch/x86/boot/header.S | 6 +-
11859 arch/x86/boot/memory.c | 2 +-
11860 arch/x86/boot/video-vesa.c | 1 +
11861 arch/x86/boot/video.c | 2 +-
11862 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
11863 arch/x86/crypto/aesni-intel_asm.S | 106 +-
11864 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
11865 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
11866 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
11867 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
11868 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
11869 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
11870 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
11871 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
11872 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
11873 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
11874 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
11875 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
11876 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
11877 arch/x86/crypto/sha256-avx-asm.S | 2 +
11878 arch/x86/crypto/sha256-avx2-asm.S | 2 +
11879 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
11880 arch/x86/crypto/sha512-avx-asm.S | 2 +
11881 arch/x86/crypto/sha512-avx2-asm.S | 2 +
11882 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
11883 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
11884 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
11885 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
11886 arch/x86/entry/calling.h | 86 +-
11887 arch/x86/entry/common.c | 13 +-
11888 arch/x86/entry/entry_32.S | 351 +-
11889 arch/x86/entry/entry_64.S | 619 +-
11890 arch/x86/entry/entry_64_compat.S | 159 +-
11891 arch/x86/entry/thunk_64.S | 2 +
11892 arch/x86/entry/vdso/Makefile | 2 +-
11893 arch/x86/entry/vdso/vdso2c.h | 8 +-
11894 arch/x86/entry/vdso/vma.c | 41 +-
11895 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
11896 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
11897 arch/x86/ia32/ia32_signal.c | 23 +-
11898 arch/x86/ia32/sys_ia32.c | 42 +-
11899 arch/x86/include/asm/alternative-asm.h | 43 +-
11900 arch/x86/include/asm/alternative.h | 4 +-
11901 arch/x86/include/asm/apic.h | 2 +-
11902 arch/x86/include/asm/apm.h | 4 +-
11903 arch/x86/include/asm/atomic.h | 230 +-
11904 arch/x86/include/asm/atomic64_32.h | 100 +
11905 arch/x86/include/asm/atomic64_64.h | 164 +-
11906 arch/x86/include/asm/bitops.h | 18 +-
11907 arch/x86/include/asm/boot.h | 2 +-
11908 arch/x86/include/asm/cache.h | 5 +-
11909 arch/x86/include/asm/checksum_32.h | 12 +-
11910 arch/x86/include/asm/cmpxchg.h | 39 +
11911 arch/x86/include/asm/compat.h | 2 +-
11912 arch/x86/include/asm/cpufeature.h | 17 +-
11913 arch/x86/include/asm/desc.h | 78 +-
11914 arch/x86/include/asm/desc_defs.h | 6 +
11915 arch/x86/include/asm/div64.h | 2 +-
11916 arch/x86/include/asm/elf.h | 33 +-
11917 arch/x86/include/asm/emergency-restart.h | 2 +-
11918 arch/x86/include/asm/fpu/internal.h | 42 +-
11919 arch/x86/include/asm/fpu/types.h | 6 +-
11920 arch/x86/include/asm/futex.h | 14 +-
11921 arch/x86/include/asm/hw_irq.h | 4 +-
11922 arch/x86/include/asm/i8259.h | 2 +-
11923 arch/x86/include/asm/io.h | 22 +-
11924 arch/x86/include/asm/irqflags.h | 5 +
11925 arch/x86/include/asm/kprobes.h | 9 +-
11926 arch/x86/include/asm/local.h | 106 +-
11927 arch/x86/include/asm/mman.h | 15 +
11928 arch/x86/include/asm/mmu.h | 14 +-
11929 arch/x86/include/asm/mmu_context.h | 114 +-
11930 arch/x86/include/asm/module.h | 17 +-
11931 arch/x86/include/asm/nmi.h | 19 +-
11932 arch/x86/include/asm/page.h | 1 +
11933 arch/x86/include/asm/page_32.h | 12 +-
11934 arch/x86/include/asm/page_64.h | 14 +-
11935 arch/x86/include/asm/paravirt.h | 46 +-
11936 arch/x86/include/asm/paravirt_types.h | 15 +-
11937 arch/x86/include/asm/pgalloc.h | 23 +
11938 arch/x86/include/asm/pgtable-2level.h | 2 +
11939 arch/x86/include/asm/pgtable-3level.h | 7 +
11940 arch/x86/include/asm/pgtable.h | 128 +-
11941 arch/x86/include/asm/pgtable_32.h | 14 +-
11942 arch/x86/include/asm/pgtable_32_types.h | 24 +-
11943 arch/x86/include/asm/pgtable_64.h | 23 +-
11944 arch/x86/include/asm/pgtable_64_types.h | 5 +
11945 arch/x86/include/asm/pgtable_types.h | 26 +-
11946 arch/x86/include/asm/preempt.h | 2 +-
11947 arch/x86/include/asm/processor.h | 57 +-
11948 arch/x86/include/asm/ptrace.h | 13 +-
11949 arch/x86/include/asm/realmode.h | 4 +-
11950 arch/x86/include/asm/reboot.h | 10 +-
11951 arch/x86/include/asm/rmwcc.h | 84 +-
11952 arch/x86/include/asm/rwsem.h | 60 +-
11953 arch/x86/include/asm/segment.h | 27 +-
11954 arch/x86/include/asm/smap.h | 43 +
11955 arch/x86/include/asm/smp.h | 14 +-
11956 arch/x86/include/asm/stackprotector.h | 4 +-
11957 arch/x86/include/asm/stacktrace.h | 32 +-
11958 arch/x86/include/asm/switch_to.h | 4 +-
11959 arch/x86/include/asm/sys_ia32.h | 6 +-
11960 arch/x86/include/asm/thread_info.h | 27 +-
11961 arch/x86/include/asm/tlbflush.h | 77 +-
11962 arch/x86/include/asm/uaccess.h | 192 +-
11963 arch/x86/include/asm/uaccess_32.h | 28 +-
11964 arch/x86/include/asm/uaccess_64.h | 169 +-
11965 arch/x86/include/asm/word-at-a-time.h | 2 +-
11966 arch/x86/include/asm/x86_init.h | 10 +-
11967 arch/x86/include/asm/xen/page.h | 2 +-
11968 arch/x86/include/uapi/asm/e820.h | 2 +-
11969 arch/x86/kernel/Makefile | 2 +-
11970 arch/x86/kernel/acpi/boot.c | 4 +-
11971 arch/x86/kernel/acpi/sleep.c | 4 +
11972 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
11973 arch/x86/kernel/alternative.c | 124 +-
11974 arch/x86/kernel/apic/apic.c | 4 +-
11975 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
11976 arch/x86/kernel/apic/apic_noop.c | 2 +-
11977 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
11978 arch/x86/kernel/apic/io_apic.c | 8 +-
11979 arch/x86/kernel/apic/msi.c | 2 +-
11980 arch/x86/kernel/apic/probe_32.c | 4 +-
11981 arch/x86/kernel/apic/vector.c | 4 +-
11982 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
11983 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
11984 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
11985 arch/x86/kernel/apm_32.c | 21 +-
11986 arch/x86/kernel/asm-offsets.c | 20 +
11987 arch/x86/kernel/asm-offsets_64.c | 1 +
11988 arch/x86/kernel/cpu/Makefile | 4 -
11989 arch/x86/kernel/cpu/amd.c | 2 +-
11990 arch/x86/kernel/cpu/bugs_64.c | 2 +
11991 arch/x86/kernel/cpu/common.c | 202 +-
11992 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
11993 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
11994 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
11995 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
11996 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
11997 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
11998 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
11999 arch/x86/kernel/cpu/perf_event.c | 10 +-
12000 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
12001 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
12002 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
12003 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
12004 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
12005 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
12006 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
12007 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
12008 arch/x86/kernel/crash_dump_64.c | 2 +-
12009 arch/x86/kernel/doublefault.c | 8 +-
12010 arch/x86/kernel/dumpstack.c | 24 +-
12011 arch/x86/kernel/dumpstack_32.c | 25 +-
12012 arch/x86/kernel/dumpstack_64.c | 62 +-
12013 arch/x86/kernel/e820.c | 4 +-
12014 arch/x86/kernel/early_printk.c | 1 +
12015 arch/x86/kernel/espfix_64.c | 44 +-
12016 arch/x86/kernel/fpu/core.c | 24 +-
12017 arch/x86/kernel/fpu/init.c | 40 +-
12018 arch/x86/kernel/fpu/regset.c | 22 +-
12019 arch/x86/kernel/fpu/signal.c | 20 +-
12020 arch/x86/kernel/fpu/xstate.c | 8 +-
12021 arch/x86/kernel/ftrace.c | 18 +-
12022 arch/x86/kernel/head64.c | 14 +-
12023 arch/x86/kernel/head_32.S | 235 +-
12024 arch/x86/kernel/head_64.S | 173 +-
12025 arch/x86/kernel/i386_ksyms_32.c | 12 +
12026 arch/x86/kernel/i8259.c | 10 +-
12027 arch/x86/kernel/io_delay.c | 2 +-
12028 arch/x86/kernel/ioport.c | 2 +-
12029 arch/x86/kernel/irq.c | 8 +-
12030 arch/x86/kernel/irq_32.c | 45 +-
12031 arch/x86/kernel/jump_label.c | 10 +-
12032 arch/x86/kernel/kgdb.c | 21 +-
12033 arch/x86/kernel/kprobes/core.c | 28 +-
12034 arch/x86/kernel/kprobes/opt.c | 16 +-
12035 arch/x86/kernel/ksysfs.c | 2 +-
12036 arch/x86/kernel/kvmclock.c | 20 +-
12037 arch/x86/kernel/ldt.c | 25 +
12038 arch/x86/kernel/livepatch.c | 12 +-
12039 arch/x86/kernel/machine_kexec_32.c | 6 +-
12040 arch/x86/kernel/mcount_64.S | 19 +-
12041 arch/x86/kernel/module.c | 78 +-
12042 arch/x86/kernel/msr.c | 2 +-
12043 arch/x86/kernel/nmi.c | 34 +-
12044 arch/x86/kernel/nmi_selftest.c | 4 +-
12045 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
12046 arch/x86/kernel/paravirt.c | 45 +-
12047 arch/x86/kernel/paravirt_patch_64.c | 8 +
12048 arch/x86/kernel/pci-calgary_64.c | 2 +-
12049 arch/x86/kernel/pci-iommu_table.c | 2 +-
12050 arch/x86/kernel/pci-swiotlb.c | 2 +-
12051 arch/x86/kernel/process.c | 80 +-
12052 arch/x86/kernel/process_32.c | 29 +-
12053 arch/x86/kernel/process_64.c | 14 +-
12054 arch/x86/kernel/ptrace.c | 20 +-
12055 arch/x86/kernel/pvclock.c | 8 +-
12056 arch/x86/kernel/reboot.c | 44 +-
12057 arch/x86/kernel/reboot_fixups_32.c | 2 +-
12058 arch/x86/kernel/relocate_kernel_64.S | 3 +-
12059 arch/x86/kernel/setup.c | 29 +-
12060 arch/x86/kernel/setup_percpu.c | 29 +-
12061 arch/x86/kernel/signal.c | 17 +-
12062 arch/x86/kernel/smp.c | 2 +-
12063 arch/x86/kernel/smpboot.c | 29 +-
12064 arch/x86/kernel/step.c | 6 +-
12065 arch/x86/kernel/sys_i386_32.c | 184 +
12066 arch/x86/kernel/sys_x86_64.c | 22 +-
12067 arch/x86/kernel/tboot.c | 14 +-
12068 arch/x86/kernel/time.c | 8 +-
12069 arch/x86/kernel/tls.c | 7 +-
12070 arch/x86/kernel/tracepoint.c | 4 +-
12071 arch/x86/kernel/traps.c | 53 +-
12072 arch/x86/kernel/tsc.c | 2 +-
12073 arch/x86/kernel/uprobes.c | 2 +-
12074 arch/x86/kernel/vm86_32.c | 6 +-
12075 arch/x86/kernel/vmlinux.lds.S | 153 +-
12076 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
12077 arch/x86/kernel/x86_init.c | 6 +-
12078 arch/x86/kvm/cpuid.c | 21 +-
12079 arch/x86/kvm/emulate.c | 2 +-
12080 arch/x86/kvm/lapic.c | 2 +-
12081 arch/x86/kvm/paging_tmpl.h | 2 +-
12082 arch/x86/kvm/svm.c | 10 +-
12083 arch/x86/kvm/vmx.c | 62 +-
12084 arch/x86/kvm/x86.c | 42 +-
12085 arch/x86/lguest/boot.c | 3 +-
12086 arch/x86/lib/atomic64_386_32.S | 164 +
12087 arch/x86/lib/atomic64_cx8_32.S | 98 +-
12088 arch/x86/lib/checksum_32.S | 99 +-
12089 arch/x86/lib/clear_page_64.S | 3 +
12090 arch/x86/lib/cmpxchg16b_emu.S | 3 +
12091 arch/x86/lib/copy_page_64.S | 14 +-
12092 arch/x86/lib/copy_user_64.S | 66 +-
12093 arch/x86/lib/csum-copy_64.S | 14 +-
12094 arch/x86/lib/csum-wrappers_64.c | 8 +-
12095 arch/x86/lib/getuser.S | 74 +-
12096 arch/x86/lib/insn.c | 8 +-
12097 arch/x86/lib/iomap_copy_64.S | 2 +
12098 arch/x86/lib/memcpy_64.S | 6 +
12099 arch/x86/lib/memmove_64.S | 3 +-
12100 arch/x86/lib/memset_64.S | 3 +
12101 arch/x86/lib/mmx_32.c | 243 +-
12102 arch/x86/lib/msr-reg.S | 2 +
12103 arch/x86/lib/putuser.S | 87 +-
12104 arch/x86/lib/rwsem.S | 6 +-
12105 arch/x86/lib/usercopy_32.c | 359 +-
12106 arch/x86/lib/usercopy_64.c | 20 +-
12107 arch/x86/math-emu/fpu_aux.c | 2 +-
12108 arch/x86/math-emu/fpu_entry.c | 4 +-
12109 arch/x86/math-emu/fpu_system.h | 2 +-
12110 arch/x86/mm/Makefile | 4 +
12111 arch/x86/mm/extable.c | 26 +-
12112 arch/x86/mm/fault.c | 570 +-
12113 arch/x86/mm/gup.c | 6 +-
12114 arch/x86/mm/highmem_32.c | 6 +
12115 arch/x86/mm/hugetlbpage.c | 24 +-
12116 arch/x86/mm/init.c | 111 +-
12117 arch/x86/mm/init_32.c | 111 +-
12118 arch/x86/mm/init_64.c | 46 +-
12119 arch/x86/mm/iomap_32.c | 4 +
12120 arch/x86/mm/ioremap.c | 52 +-
12121 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
12122 arch/x86/mm/mmap.c | 40 +-
12123 arch/x86/mm/mmio-mod.c | 10 +-
12124 arch/x86/mm/numa.c | 2 +-
12125 arch/x86/mm/pageattr.c | 38 +-
12126 arch/x86/mm/pat.c | 12 +-
12127 arch/x86/mm/pat_rbtree.c | 2 +-
12128 arch/x86/mm/pf_in.c | 10 +-
12129 arch/x86/mm/pgtable.c | 214 +-
12130 arch/x86/mm/pgtable_32.c | 3 +
12131 arch/x86/mm/setup_nx.c | 7 +
12132 arch/x86/mm/tlb.c | 4 +
12133 arch/x86/mm/uderef_64.c | 37 +
12134 arch/x86/net/bpf_jit.S | 11 +
12135 arch/x86/net/bpf_jit_comp.c | 13 +-
12136 arch/x86/oprofile/backtrace.c | 6 +-
12137 arch/x86/oprofile/nmi_int.c | 8 +-
12138 arch/x86/oprofile/op_model_amd.c | 8 +-
12139 arch/x86/oprofile/op_model_ppro.c | 7 +-
12140 arch/x86/oprofile/op_x86_model.h | 2 +-
12141 arch/x86/pci/intel_mid_pci.c | 2 +-
12142 arch/x86/pci/irq.c | 8 +-
12143 arch/x86/pci/pcbios.c | 144 +-
12144 arch/x86/platform/efi/efi_32.c | 24 +
12145 arch/x86/platform/efi/efi_64.c | 26 +-
12146 arch/x86/platform/efi/efi_stub_32.S | 64 +-
12147 arch/x86/platform/efi/efi_stub_64.S | 2 +
12148 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
12149 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
12150 arch/x86/platform/intel-mid/mfld.c | 4 +-
12151 arch/x86/platform/intel-mid/mrfl.c | 2 +-
12152 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
12153 arch/x86/platform/olpc/olpc_dt.c | 2 +-
12154 arch/x86/power/cpu.c | 11 +-
12155 arch/x86/realmode/init.c | 10 +-
12156 arch/x86/realmode/rm/Makefile | 3 +
12157 arch/x86/realmode/rm/header.S | 4 +-
12158 arch/x86/realmode/rm/reboot.S | 4 +
12159 arch/x86/realmode/rm/trampoline_32.S | 12 +-
12160 arch/x86/realmode/rm/trampoline_64.S | 3 +-
12161 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
12162 arch/x86/tools/Makefile | 2 +-
12163 arch/x86/tools/relocs.c | 96 +-
12164 arch/x86/um/mem_32.c | 2 +-
12165 arch/x86/um/tls_32.c | 2 +-
12166 arch/x86/xen/enlighten.c | 50 +-
12167 arch/x86/xen/mmu.c | 19 +-
12168 arch/x86/xen/smp.c | 16 +-
12169 arch/x86/xen/xen-asm_32.S | 2 +-
12170 arch/x86/xen/xen-head.S | 11 +
12171 arch/x86/xen/xen-ops.h | 2 -
12172 block/bio.c | 4 +-
12173 block/blk-iopoll.c | 2 +-
12174 block/blk-map.c | 2 +-
12175 block/blk-softirq.c | 2 +-
12176 block/bsg.c | 12 +-
12177 block/compat_ioctl.c | 4 +-
12178 block/genhd.c | 9 +-
12179 block/partitions/efi.c | 8 +-
12180 block/scsi_ioctl.c | 29 +-
12181 crypto/cryptd.c | 4 +-
12182 crypto/pcrypt.c | 2 +-
12183 crypto/zlib.c | 12 +-
12184 drivers/acpi/acpi_video.c | 2 +-
12185 drivers/acpi/apei/apei-internal.h | 2 +-
12186 drivers/acpi/apei/ghes.c | 4 +-
12187 drivers/acpi/bgrt.c | 6 +-
12188 drivers/acpi/blacklist.c | 4 +-
12189 drivers/acpi/bus.c | 4 +-
12190 drivers/acpi/device_pm.c | 4 +-
12191 drivers/acpi/ec.c | 2 +-
12192 drivers/acpi/pci_slot.c | 2 +-
12193 drivers/acpi/processor_idle.c | 2 +-
12194 drivers/acpi/processor_pdc.c | 2 +-
12195 drivers/acpi/sleep.c | 2 +-
12196 drivers/acpi/sysfs.c | 4 +-
12197 drivers/acpi/thermal.c | 2 +-
12198 drivers/acpi/video_detect.c | 7 +-
12199 drivers/ata/libata-core.c | 12 +-
12200 drivers/ata/libata-scsi.c | 2 +-
12201 drivers/ata/libata.h | 2 +-
12202 drivers/ata/pata_arasan_cf.c | 4 +-
12203 drivers/atm/adummy.c | 2 +-
12204 drivers/atm/ambassador.c | 8 +-
12205 drivers/atm/atmtcp.c | 14 +-
12206 drivers/atm/eni.c | 10 +-
12207 drivers/atm/firestream.c | 8 +-
12208 drivers/atm/fore200e.c | 14 +-
12209 drivers/atm/he.c | 18 +-
12210 drivers/atm/horizon.c | 4 +-
12211 drivers/atm/idt77252.c | 36 +-
12212 drivers/atm/iphase.c | 34 +-
12213 drivers/atm/lanai.c | 12 +-
12214 drivers/atm/nicstar.c | 46 +-
12215 drivers/atm/solos-pci.c | 4 +-
12216 drivers/atm/suni.c | 4 +-
12217 drivers/atm/uPD98402.c | 16 +-
12218 drivers/atm/zatm.c | 6 +-
12219 drivers/base/bus.c | 4 +-
12220 drivers/base/devtmpfs.c | 8 +-
12221 drivers/base/node.c | 2 +-
12222 drivers/base/platform-msi.c | 20 +-
12223 drivers/base/power/domain.c | 11 +-
12224 drivers/base/power/sysfs.c | 2 +-
12225 drivers/base/power/wakeup.c | 8 +-
12226 drivers/base/regmap/regmap-debugfs.c | 11 +-
12227 drivers/base/syscore.c | 4 +-
12228 drivers/block/cciss.c | 28 +-
12229 drivers/block/cciss.h | 2 +-
12230 drivers/block/cpqarray.c | 28 +-
12231 drivers/block/cpqarray.h | 2 +-
12232 drivers/block/drbd/drbd_bitmap.c | 2 +-
12233 drivers/block/drbd/drbd_int.h | 8 +-
12234 drivers/block/drbd/drbd_main.c | 12 +-
12235 drivers/block/drbd/drbd_nl.c | 4 +-
12236 drivers/block/drbd/drbd_receiver.c | 34 +-
12237 drivers/block/drbd/drbd_worker.c | 8 +-
12238 drivers/block/pktcdvd.c | 4 +-
12239 drivers/block/rbd.c | 2 +-
12240 drivers/bluetooth/btwilink.c | 2 +-
12241 drivers/bus/arm-cci.c | 12 +-
12242 drivers/cdrom/cdrom.c | 11 +-
12243 drivers/cdrom/gdrom.c | 1 -
12244 drivers/char/agp/compat_ioctl.c | 2 +-
12245 drivers/char/agp/frontend.c | 4 +-
12246 drivers/char/agp/intel-gtt.c | 4 +-
12247 drivers/char/hpet.c | 2 +-
12248 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
12249 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
12250 drivers/char/mem.c | 47 +-
12251 drivers/char/nvram.c | 2 +-
12252 drivers/char/pcmcia/synclink_cs.c | 16 +-
12253 drivers/char/random.c | 12 +-
12254 drivers/char/sonypi.c | 11 +-
12255 drivers/char/tpm/tpm_acpi.c | 3 +-
12256 drivers/char/tpm/tpm_eventlog.c | 4 +-
12257 drivers/char/virtio_console.c | 4 +-
12258 drivers/clk/clk-composite.c | 2 +-
12259 drivers/clk/samsung/clk.h | 2 +-
12260 drivers/clk/socfpga/clk-gate.c | 9 +-
12261 drivers/clk/socfpga/clk-pll.c | 9 +-
12262 drivers/clk/ti/clk.c | 8 +-
12263 drivers/cpufreq/acpi-cpufreq.c | 17 +-
12264 drivers/cpufreq/cpufreq-dt.c | 4 +-
12265 drivers/cpufreq/cpufreq.c | 30 +-
12266 drivers/cpufreq/cpufreq_governor.c | 2 +-
12267 drivers/cpufreq/cpufreq_governor.h | 4 +-
12268 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
12269 drivers/cpufreq/intel_pstate.c | 33 +-
12270 drivers/cpufreq/p4-clockmod.c | 12 +-
12271 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
12272 drivers/cpufreq/speedstep-centrino.c | 7 +-
12273 drivers/cpuidle/driver.c | 2 +-
12274 drivers/cpuidle/dt_idle_states.c | 2 +-
12275 drivers/cpuidle/governor.c | 2 +-
12276 drivers/cpuidle/sysfs.c | 2 +-
12277 drivers/crypto/hifn_795x.c | 4 +-
12278 drivers/devfreq/devfreq.c | 4 +-
12279 drivers/dma/sh/shdma-base.c | 4 +-
12280 drivers/dma/sh/shdmac.c | 2 +-
12281 drivers/edac/edac_device.c | 4 +-
12282 drivers/edac/edac_mc_sysfs.c | 2 +-
12283 drivers/edac/edac_pci.c | 4 +-
12284 drivers/edac/edac_pci_sysfs.c | 22 +-
12285 drivers/edac/mce_amd.h | 2 +-
12286 drivers/firewire/core-card.c | 6 +-
12287 drivers/firewire/core-device.c | 2 +-
12288 drivers/firewire/core-transaction.c | 1 +
12289 drivers/firewire/core.h | 1 +
12290 drivers/firmware/dmi-id.c | 2 +-
12291 drivers/firmware/dmi_scan.c | 12 +-
12292 drivers/firmware/efi/cper.c | 8 +-
12293 drivers/firmware/efi/efi.c | 12 +-
12294 drivers/firmware/efi/efivars.c | 2 +-
12295 drivers/firmware/efi/runtime-map.c | 2 +-
12296 drivers/firmware/google/gsmi.c | 2 +-
12297 drivers/firmware/google/memconsole.c | 7 +-
12298 drivers/firmware/memmap.c | 2 +-
12299 drivers/firmware/psci.c | 2 +-
12300 drivers/gpio/gpio-davinci.c | 6 +-
12301 drivers/gpio/gpio-em.c | 2 +-
12302 drivers/gpio/gpio-ich.c | 2 +-
12303 drivers/gpio/gpio-omap.c | 4 +-
12304 drivers/gpio/gpio-rcar.c | 2 +-
12305 drivers/gpio/gpio-vr41xx.c | 2 +-
12306 drivers/gpio/gpiolib.c | 12 +-
12307 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
12308 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
12309 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
12310 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
12311 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
12312 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
12313 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
12314 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
12315 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
12316 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
12317 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
12318 drivers/gpu/drm/drm_crtc.c | 2 +-
12319 drivers/gpu/drm/drm_drv.c | 2 +-
12320 drivers/gpu/drm/drm_fops.c | 12 +-
12321 drivers/gpu/drm/drm_global.c | 14 +-
12322 drivers/gpu/drm/drm_info.c | 13 +-
12323 drivers/gpu/drm/drm_ioc32.c | 13 +-
12324 drivers/gpu/drm/drm_ioctl.c | 2 +-
12325 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
12326 drivers/gpu/drm/i810/i810_drv.h | 4 +-
12327 drivers/gpu/drm/i915/i915_dma.c | 2 +-
12328 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
12329 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
12330 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
12331 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
12332 drivers/gpu/drm/i915/intel_display.c | 26 +-
12333 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
12334 drivers/gpu/drm/mga/mga_drv.h | 4 +-
12335 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
12336 drivers/gpu/drm/mga/mga_irq.c | 8 +-
12337 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
12338 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
12339 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
12340 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
12341 drivers/gpu/drm/omapdrm/Makefile | 2 +-
12342 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
12343 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
12344 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
12345 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
12346 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
12347 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
12348 drivers/gpu/drm/r128/r128_cce.c | 2 +-
12349 drivers/gpu/drm/r128/r128_drv.h | 4 +-
12350 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
12351 drivers/gpu/drm/r128/r128_irq.c | 4 +-
12352 drivers/gpu/drm/r128/r128_state.c | 4 +-
12353 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
12354 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
12355 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
12356 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
12357 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
12358 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
12359 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
12360 drivers/gpu/drm/tegra/dc.c | 2 +-
12361 drivers/gpu/drm/tegra/dsi.c | 2 +-
12362 drivers/gpu/drm/tegra/hdmi.c | 2 +-
12363 drivers/gpu/drm/tegra/sor.c | 7 +-
12364 drivers/gpu/drm/tilcdc/Makefile | 6 +-
12365 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
12366 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
12367 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
12368 drivers/gpu/drm/udl/udl_fb.c | 1 -
12369 drivers/gpu/drm/via/via_drv.h | 4 +-
12370 drivers/gpu/drm/via/via_irq.c | 18 +-
12371 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
12372 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
12373 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
12374 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
12375 drivers/gpu/vga/vga_switcheroo.c | 4 +-
12376 drivers/hid/hid-core.c | 4 +-
12377 drivers/hid/hid-sensor-custom.c | 2 +-
12378 drivers/hv/channel.c | 2 +-
12379 drivers/hv/hv.c | 4 +-
12380 drivers/hv/hv_balloon.c | 18 +-
12381 drivers/hv/hyperv_vmbus.h | 2 +-
12382 drivers/hwmon/acpi_power_meter.c | 6 +-
12383 drivers/hwmon/applesmc.c | 2 +-
12384 drivers/hwmon/asus_atk0110.c | 10 +-
12385 drivers/hwmon/coretemp.c | 2 +-
12386 drivers/hwmon/dell-smm-hwmon.c | 2 +-
12387 drivers/hwmon/ibmaem.c | 2 +-
12388 drivers/hwmon/iio_hwmon.c | 2 +-
12389 drivers/hwmon/nct6683.c | 6 +-
12390 drivers/hwmon/nct6775.c | 6 +-
12391 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
12392 drivers/hwmon/sht15.c | 12 +-
12393 drivers/hwmon/via-cputemp.c | 2 +-
12394 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
12395 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
12396 drivers/i2c/i2c-dev.c | 2 +-
12397 drivers/ide/ide-cd.c | 2 +-
12398 drivers/ide/ide-disk.c | 2 +-
12399 drivers/iio/industrialio-core.c | 2 +-
12400 drivers/iio/magnetometer/ak8975.c | 2 +-
12401 drivers/infiniband/core/cm.c | 32 +-
12402 drivers/infiniband/core/fmr_pool.c | 20 +-
12403 drivers/infiniband/core/uverbs_cmd.c | 3 +
12404 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
12405 drivers/infiniband/hw/mlx4/mad.c | 2 +-
12406 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
12407 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
12408 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
12409 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
12410 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
12411 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
12412 drivers/infiniband/hw/nes/nes.c | 4 +-
12413 drivers/infiniband/hw/nes/nes.h | 40 +-
12414 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
12415 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
12416 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
12417 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
12418 drivers/infiniband/hw/qib/qib.h | 1 +
12419 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
12420 drivers/input/gameport/gameport.c | 4 +-
12421 drivers/input/input.c | 4 +-
12422 drivers/input/joystick/sidewinder.c | 1 +
12423 drivers/input/joystick/xpad.c | 4 +-
12424 drivers/input/misc/ims-pcu.c | 4 +-
12425 drivers/input/mouse/psmouse.h | 2 +-
12426 drivers/input/mousedev.c | 2 +-
12427 drivers/input/serio/serio.c | 4 +-
12428 drivers/input/serio/serio_raw.c | 4 +-
12429 drivers/input/touchscreen/htcpen.c | 2 +-
12430 drivers/iommu/arm-smmu-v3.c | 2 +-
12431 drivers/iommu/arm-smmu.c | 43 +-
12432 drivers/iommu/io-pgtable-arm.c | 101 +-
12433 drivers/iommu/io-pgtable.c | 11 +-
12434 drivers/iommu/io-pgtable.h | 19 +-
12435 drivers/iommu/iommu.c | 2 +-
12436 drivers/iommu/ipmmu-vmsa.c | 13 +-
12437 drivers/iommu/irq_remapping.c | 2 +-
12438 drivers/irqchip/irq-gic.c | 2 +-
12439 drivers/irqchip/irq-i8259.c | 2 +-
12440 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
12441 drivers/irqchip/irq-renesas-irqc.c | 2 +-
12442 drivers/isdn/capi/capi.c | 10 +-
12443 drivers/isdn/gigaset/interface.c | 8 +-
12444 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
12445 drivers/isdn/hardware/avm/b1.c | 4 +-
12446 drivers/isdn/i4l/isdn_common.c | 2 +
12447 drivers/isdn/i4l/isdn_tty.c | 22 +-
12448 drivers/isdn/icn/icn.c | 2 +-
12449 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
12450 drivers/lguest/core.c | 10 +-
12451 drivers/lguest/page_tables.c | 2 +-
12452 drivers/lguest/x86/core.c | 12 +-
12453 drivers/lguest/x86/switcher_32.S | 27 +-
12454 drivers/md/bcache/closure.h | 2 +-
12455 drivers/md/bitmap.c | 2 +-
12456 drivers/md/dm-ioctl.c | 2 +-
12457 drivers/md/dm-raid1.c | 18 +-
12458 drivers/md/dm-stats.c | 6 +-
12459 drivers/md/dm-stripe.c | 10 +-
12460 drivers/md/dm-table.c | 2 +-
12461 drivers/md/dm-thin-metadata.c | 4 +-
12462 drivers/md/dm.c | 16 +-
12463 drivers/md/md.c | 26 +-
12464 drivers/md/md.h | 6 +-
12465 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
12466 drivers/md/persistent-data/dm-space-map.h | 1 +
12467 drivers/md/raid1.c | 4 +-
12468 drivers/md/raid10.c | 18 +-
12469 drivers/md/raid5.c | 22 +-
12470 drivers/media/dvb-core/dvbdev.c | 2 +-
12471 drivers/media/dvb-frontends/af9033.h | 2 +-
12472 drivers/media/dvb-frontends/dib3000.h | 2 +-
12473 drivers/media/dvb-frontends/dib7000p.h | 2 +-
12474 drivers/media/dvb-frontends/dib8000.h | 2 +-
12475 drivers/media/pci/cx88/cx88-video.c | 6 +-
12476 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
12477 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
12478 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
12479 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
12480 drivers/media/pci/tw68/tw68-core.c | 2 +-
12481 drivers/media/platform/omap/omap_vout.c | 11 +-
12482 drivers/media/platform/s5p-tv/mixer.h | 2 +-
12483 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
12484 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
12485 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
12486 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
12487 drivers/media/radio/radio-cadet.c | 2 +
12488 drivers/media/radio/radio-maxiradio.c | 2 +-
12489 drivers/media/radio/radio-shark.c | 2 +-
12490 drivers/media/radio/radio-shark2.c | 2 +-
12491 drivers/media/radio/radio-si476x.c | 2 +-
12492 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
12493 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
12494 drivers/media/v4l2-core/v4l2-device.c | 4 +-
12495 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
12496 drivers/memory/omap-gpmc.c | 21 +-
12497 drivers/message/fusion/mptsas.c | 34 +-
12498 drivers/mfd/ab8500-debugfs.c | 2 +-
12499 drivers/mfd/kempld-core.c | 2 +-
12500 drivers/mfd/max8925-i2c.c | 2 +-
12501 drivers/mfd/tps65910.c | 2 +-
12502 drivers/mfd/twl4030-irq.c | 9 +-
12503 drivers/mfd/wm5110-tables.c | 2 +-
12504 drivers/mfd/wm8998-tables.c | 2 +-
12505 drivers/misc/c2port/core.c | 4 +-
12506 drivers/misc/kgdbts.c | 4 +-
12507 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
12508 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
12509 drivers/misc/mic/scif/scif_rb.c | 8 +-
12510 drivers/misc/sgi-gru/gruhandles.c | 4 +-
12511 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
12512 drivers/misc/sgi-gru/grutables.h | 154 +-
12513 drivers/misc/sgi-xp/xp.h | 2 +-
12514 drivers/misc/sgi-xp/xpc.h | 3 +-
12515 drivers/misc/sgi-xp/xpc_main.c | 2 +-
12516 drivers/mmc/card/block.c | 2 +-
12517 drivers/mmc/host/dw_mmc.h | 2 +-
12518 drivers/mmc/host/mmci.c | 4 +-
12519 drivers/mmc/host/omap_hsmmc.c | 4 +-
12520 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
12521 drivers/mmc/host/sdhci-s3c.c | 8 +-
12522 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
12523 drivers/mtd/nand/denali.c | 1 +
12524 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
12525 drivers/mtd/nftlmount.c | 1 +
12526 drivers/mtd/sm_ftl.c | 2 +-
12527 drivers/net/bonding/bond_netlink.c | 2 +-
12528 drivers/net/caif/caif_hsi.c | 2 +-
12529 drivers/net/can/Kconfig | 2 +-
12530 drivers/net/can/dev.c | 2 +-
12531 drivers/net/can/vcan.c | 2 +-
12532 drivers/net/dummy.c | 2 +-
12533 drivers/net/ethernet/8390/ax88796.c | 4 +-
12534 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
12535 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
12536 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
12537 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
12538 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
12539 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
12540 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
12541 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
12542 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
12543 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
12544 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
12545 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
12546 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
12547 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
12548 drivers/net/ethernet/broadcom/tg3.h | 1 +
12549 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
12550 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
12551 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
12552 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
12553 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
12554 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
12555 drivers/net/ethernet/faraday/ftmac100.c | 2 +
12556 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
12557 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
12558 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
12559 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
12560 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
12561 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
12562 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
12563 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
12564 drivers/net/ethernet/realtek/r8169.c | 8 +-
12565 drivers/net/ethernet/sfc/ptp.c | 2 +-
12566 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
12567 drivers/net/ethernet/via/via-rhine.c | 2 +-
12568 drivers/net/geneve.c | 2 +-
12569 drivers/net/hyperv/hyperv_net.h | 2 +-
12570 drivers/net/hyperv/rndis_filter.c | 4 +-
12571 drivers/net/ifb.c | 2 +-
12572 drivers/net/ipvlan/ipvlan_core.c | 2 +-
12573 drivers/net/macvlan.c | 20 +-
12574 drivers/net/macvtap.c | 6 +-
12575 drivers/net/nlmon.c | 2 +-
12576 drivers/net/phy/phy_device.c | 6 +-
12577 drivers/net/ppp/ppp_generic.c | 4 +-
12578 drivers/net/slip/slhc.c | 2 +-
12579 drivers/net/team/team.c | 4 +-
12580 drivers/net/tun.c | 7 +-
12581 drivers/net/usb/hso.c | 23 +-
12582 drivers/net/usb/r8152.c | 2 +-
12583 drivers/net/usb/sierra_net.c | 4 +-
12584 drivers/net/virtio_net.c | 2 +-
12585 drivers/net/vrf.c | 2 +-
12586 drivers/net/vxlan.c | 4 +-
12587 drivers/net/wimax/i2400m/rx.c | 2 +-
12588 drivers/net/wireless/airo.c | 2 +-
12589 drivers/net/wireless/at76c50x-usb.c | 2 +-
12590 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
12591 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
12592 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
12593 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
12594 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
12595 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
12596 drivers/net/wireless/ath/ath9k/main.c | 22 +-
12597 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
12598 drivers/net/wireless/b43/phy_lp.c | 2 +-
12599 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
12600 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
12601 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
12602 drivers/net/wireless/mac80211_hwsim.c | 28 +-
12603 drivers/net/wireless/rndis_wlan.c | 2 +-
12604 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
12605 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
12606 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
12607 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
12608 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
12609 drivers/nfc/nfcwilink.c | 2 +-
12610 drivers/of/fdt.c | 4 +-
12611 drivers/oprofile/buffer_sync.c | 8 +-
12612 drivers/oprofile/event_buffer.c | 2 +-
12613 drivers/oprofile/oprof.c | 2 +-
12614 drivers/oprofile/oprofile_stats.c | 10 +-
12615 drivers/oprofile/oprofile_stats.h | 10 +-
12616 drivers/oprofile/oprofilefs.c | 6 +-
12617 drivers/oprofile/timer_int.c | 2 +-
12618 drivers/parport/procfs.c | 4 +-
12619 drivers/pci/host/pci-host-generic.c | 24 +-
12620 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
12621 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
12622 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
12623 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
12624 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
12625 drivers/pci/hotplug/pciehp_core.c | 2 +-
12626 drivers/pci/msi.c | 22 +-
12627 drivers/pci/pci-sysfs.c | 6 +-
12628 drivers/pci/pci.h | 2 +-
12629 drivers/pci/pcie/aspm.c | 6 +-
12630 drivers/pci/pcie/portdrv_pci.c | 2 +-
12631 drivers/pci/probe.c | 2 +-
12632 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
12633 drivers/pinctrl/pinctrl-at91.c | 5 +-
12634 drivers/platform/chrome/chromeos_pstore.c | 2 +-
12635 drivers/platform/x86/alienware-wmi.c | 4 +-
12636 drivers/platform/x86/compal-laptop.c | 2 +-
12637 drivers/platform/x86/hdaps.c | 2 +-
12638 drivers/platform/x86/ibm_rtl.c | 2 +-
12639 drivers/platform/x86/intel_oaktrail.c | 2 +-
12640 drivers/platform/x86/msi-laptop.c | 16 +-
12641 drivers/platform/x86/msi-wmi.c | 2 +-
12642 drivers/platform/x86/samsung-laptop.c | 2 +-
12643 drivers/platform/x86/samsung-q10.c | 2 +-
12644 drivers/platform/x86/sony-laptop.c | 14 +-
12645 drivers/platform/x86/thinkpad_acpi.c | 2 +-
12646 drivers/pnp/pnpbios/bioscalls.c | 14 +-
12647 drivers/pnp/pnpbios/core.c | 2 +-
12648 drivers/power/pda_power.c | 7 +-
12649 drivers/power/power_supply.h | 4 +-
12650 drivers/power/power_supply_core.c | 7 +-
12651 drivers/power/power_supply_sysfs.c | 6 +-
12652 drivers/power/reset/at91-reset.c | 9 +-
12653 drivers/powercap/powercap_sys.c | 136 +-
12654 drivers/ptp/ptp_private.h | 2 +-
12655 drivers/ptp/ptp_sysfs.c | 2 +-
12656 drivers/regulator/core.c | 4 +-
12657 drivers/regulator/max8660.c | 6 +-
12658 drivers/regulator/max8973-regulator.c | 16 +-
12659 drivers/regulator/mc13892-regulator.c | 8 +-
12660 drivers/rtc/rtc-armada38x.c | 7 +-
12661 drivers/rtc/rtc-cmos.c | 4 +-
12662 drivers/rtc/rtc-ds1307.c | 2 +-
12663 drivers/rtc/rtc-m48t59.c | 4 +-
12664 drivers/rtc/rtc-test.c | 6 +-
12665 drivers/scsi/be2iscsi/be_main.c | 2 +-
12666 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
12667 drivers/scsi/bfa/bfa_ioc.h | 4 +-
12668 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
12669 drivers/scsi/hosts.c | 4 +-
12670 drivers/scsi/hpsa.c | 38 +-
12671 drivers/scsi/hpsa.h | 2 +-
12672 drivers/scsi/libfc/fc_exch.c | 50 +-
12673 drivers/scsi/libsas/sas_ata.c | 2 +-
12674 drivers/scsi/lpfc/lpfc.h | 8 +-
12675 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
12676 drivers/scsi/lpfc/lpfc_init.c | 6 +-
12677 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
12678 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
12679 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
12680 drivers/scsi/pmcraid.c | 20 +-
12681 drivers/scsi/pmcraid.h | 8 +-
12682 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
12683 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
12684 drivers/scsi/qla2xxx/qla_os.c | 6 +-
12685 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
12686 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
12687 drivers/scsi/scsi.c | 2 +-
12688 drivers/scsi/scsi_lib.c | 8 +-
12689 drivers/scsi/scsi_sysfs.c | 2 +-
12690 drivers/scsi/scsi_transport_fc.c | 8 +-
12691 drivers/scsi/scsi_transport_iscsi.c | 6 +-
12692 drivers/scsi/scsi_transport_srp.c | 6 +-
12693 drivers/scsi/sd.c | 6 +-
12694 drivers/scsi/sg.c | 2 +-
12695 drivers/scsi/sr.c | 21 +-
12696 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
12697 drivers/spi/spi.c | 2 +-
12698 drivers/staging/android/timed_output.c | 6 +-
12699 drivers/staging/comedi/comedi_fops.c | 8 +-
12700 drivers/staging/fbtft/fbtft-core.c | 2 +-
12701 drivers/staging/fbtft/fbtft.h | 2 +-
12702 drivers/staging/gdm724x/gdm_tty.c | 2 +-
12703 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
12704 drivers/staging/iio/adc/ad7280a.c | 4 +-
12705 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
12706 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
12707 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
12708 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
12709 drivers/staging/lustre/lustre/include/obd.h | 2 +-
12710 drivers/staging/octeon/ethernet-rx.c | 20 +-
12711 drivers/staging/octeon/ethernet.c | 8 +-
12712 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
12713 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
12714 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
12715 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
12716 drivers/staging/sm750fb/sm750.c | 14 +-
12717 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
12718 drivers/target/sbp/sbp_target.c | 4 +-
12719 drivers/thermal/cpu_cooling.c | 9 +-
12720 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
12721 drivers/thermal/of-thermal.c | 17 +-
12722 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
12723 drivers/tty/cyclades.c | 6 +-
12724 drivers/tty/hvc/hvc_console.c | 14 +-
12725 drivers/tty/hvc/hvcs.c | 21 +-
12726 drivers/tty/hvc/hvsi.c | 22 +-
12727 drivers/tty/hvc/hvsi_lib.c | 4 +-
12728 drivers/tty/ipwireless/tty.c | 27 +-
12729 drivers/tty/moxa.c | 2 +-
12730 drivers/tty/n_gsm.c | 4 +-
12731 drivers/tty/n_tty.c | 3 +-
12732 drivers/tty/pty.c | 4 +-
12733 drivers/tty/rocket.c | 6 +-
12734 drivers/tty/serial/8250/8250_core.c | 10 +-
12735 drivers/tty/serial/ifx6x60.c | 2 +-
12736 drivers/tty/serial/ioc4_serial.c | 6 +-
12737 drivers/tty/serial/kgdb_nmi.c | 4 +-
12738 drivers/tty/serial/kgdboc.c | 32 +-
12739 drivers/tty/serial/msm_serial.c | 4 +-
12740 drivers/tty/serial/samsung.c | 9 +-
12741 drivers/tty/serial/serial_core.c | 8 +-
12742 drivers/tty/synclink.c | 34 +-
12743 drivers/tty/synclink_gt.c | 28 +-
12744 drivers/tty/synclinkmp.c | 34 +-
12745 drivers/tty/tty_io.c | 2 +-
12746 drivers/tty/tty_ldisc.c | 8 +-
12747 drivers/tty/tty_port.c | 22 +-
12748 drivers/uio/uio.c | 13 +-
12749 drivers/usb/atm/cxacru.c | 2 +-
12750 drivers/usb/atm/usbatm.c | 24 +-
12751 drivers/usb/class/cdc-acm.h | 2 +-
12752 drivers/usb/core/devices.c | 6 +-
12753 drivers/usb/core/devio.c | 12 +-
12754 drivers/usb/core/hcd.c | 4 +-
12755 drivers/usb/core/sysfs.c | 2 +-
12756 drivers/usb/core/usb.c | 2 +-
12757 drivers/usb/early/ehci-dbgp.c | 16 +-
12758 drivers/usb/gadget/function/u_serial.c | 22 +-
12759 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
12760 drivers/usb/host/ehci-hcd.c | 2 +-
12761 drivers/usb/host/ehci-hub.c | 4 +-
12762 drivers/usb/host/ehci-q.c | 4 +-
12763 drivers/usb/host/fotg210-hcd.c | 2 +-
12764 drivers/usb/host/fusbh200-hcd.c | 2 +-
12765 drivers/usb/host/hwa-hc.c | 2 +-
12766 drivers/usb/host/ohci-hcd.c | 2 +-
12767 drivers/usb/host/r8a66597.h | 2 +-
12768 drivers/usb/host/uhci-hcd.c | 2 +-
12769 drivers/usb/host/xhci-pci.c | 2 +-
12770 drivers/usb/host/xhci.c | 2 +-
12771 drivers/usb/misc/appledisplay.c | 4 +-
12772 drivers/usb/serial/console.c | 8 +-
12773 drivers/usb/storage/transport.c | 2 +-
12774 drivers/usb/storage/usb.c | 2 +-
12775 drivers/usb/storage/usb.h | 2 +-
12776 drivers/usb/usbip/vhci.h | 2 +-
12777 drivers/usb/usbip/vhci_hcd.c | 6 +-
12778 drivers/usb/usbip/vhci_rx.c | 2 +-
12779 drivers/usb/wusbcore/wa-hc.h | 4 +-
12780 drivers/usb/wusbcore/wa-xfer.c | 2 +-
12781 drivers/vfio/vfio.c | 2 +-
12782 drivers/vhost/vringh.c | 20 +-
12783 drivers/video/backlight/kb3886_bl.c | 2 +-
12784 drivers/video/console/fbcon.c | 2 +-
12785 drivers/video/fbdev/aty/aty128fb.c | 2 +-
12786 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
12787 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
12788 drivers/video/fbdev/core/fb_defio.c | 6 +-
12789 drivers/video/fbdev/core/fbmem.c | 2 +-
12790 drivers/video/fbdev/hyperv_fb.c | 4 +-
12791 drivers/video/fbdev/i810/i810_accel.c | 1 +
12792 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
12793 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
12794 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
12795 drivers/video/fbdev/omap2/dss/display.c | 8 +-
12796 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
12797 drivers/video/fbdev/smscufx.c | 4 +-
12798 drivers/video/fbdev/udlfb.c | 36 +-
12799 drivers/video/fbdev/uvesafb.c | 52 +-
12800 drivers/video/fbdev/vesafb.c | 58 +-
12801 drivers/video/fbdev/via/via_clock.h | 2 +-
12802 drivers/xen/events/events_base.c | 6 +-
12803 drivers/xen/evtchn.c | 4 +-
12804 fs/Kconfig.binfmt | 2 +-
12805 fs/afs/inode.c | 4 +-
12806 fs/aio.c | 2 +-
12807 fs/autofs4/waitq.c | 2 +-
12808 fs/befs/endian.h | 6 +-
12809 fs/binfmt_aout.c | 23 +-
12810 fs/binfmt_elf.c | 670 +-
12811 fs/binfmt_elf_fdpic.c | 4 +-
12812 fs/block_dev.c | 2 +-
12813 fs/btrfs/ctree.c | 9 +-
12814 fs/btrfs/delayed-inode.c | 9 +-
12815 fs/btrfs/delayed-inode.h | 6 +-
12816 fs/btrfs/file.c | 10 +-
12817 fs/btrfs/inode.c | 14 +-
12818 fs/btrfs/super.c | 2 +-
12819 fs/btrfs/sysfs.c | 2 +-
12820 fs/btrfs/tests/free-space-tests.c | 8 +-
12821 fs/btrfs/tree-log.h | 2 +-
12822 fs/buffer.c | 2 +-
12823 fs/cachefiles/bind.c | 6 +-
12824 fs/cachefiles/daemon.c | 8 +-
12825 fs/cachefiles/internal.h | 12 +-
12826 fs/cachefiles/namei.c | 2 +-
12827 fs/cachefiles/proc.c | 12 +-
12828 fs/ceph/dir.c | 12 +-
12829 fs/ceph/super.c | 4 +-
12830 fs/cifs/cifs_debug.c | 12 +-
12831 fs/cifs/cifsfs.c | 8 +-
12832 fs/cifs/cifsglob.h | 54 +-
12833 fs/cifs/file.c | 10 +-
12834 fs/cifs/misc.c | 4 +-
12835 fs/cifs/smb1ops.c | 80 +-
12836 fs/cifs/smb2ops.c | 84 +-
12837 fs/cifs/smb2pdu.c | 3 +-
12838 fs/coda/cache.c | 10 +-
12839 fs/compat.c | 4 +-
12840 fs/compat_binfmt_elf.c | 2 +
12841 fs/compat_ioctl.c | 12 +-
12842 fs/configfs/dir.c | 10 +-
12843 fs/coredump.c | 16 +-
12844 fs/dcache.c | 51 +-
12845 fs/ecryptfs/inode.c | 2 +-
12846 fs/ecryptfs/miscdev.c | 2 +-
12847 fs/exec.c | 362 +-
12848 fs/ext2/xattr.c | 5 +-
12849 fs/ext4/ext4.h | 20 +-
12850 fs/ext4/mballoc.c | 44 +-
12851 fs/ext4/resize.c | 16 +-
12852 fs/ext4/super.c | 4 +-
12853 fs/ext4/xattr.c | 5 +-
12854 fs/fhandle.c | 3 +-
12855 fs/file.c | 4 +-
12856 fs/fs_struct.c | 8 +-
12857 fs/fscache/cookie.c | 40 +-
12858 fs/fscache/internal.h | 202 +-
12859 fs/fscache/object.c | 26 +-
12860 fs/fscache/operation.c | 38 +-
12861 fs/fscache/page.c | 110 +-
12862 fs/fscache/stats.c | 348 +-
12863 fs/fuse/cuse.c | 10 +-
12864 fs/fuse/dev.c | 4 +-
12865 fs/gfs2/glock.c | 22 +-
12866 fs/gfs2/glops.c | 4 +-
12867 fs/gfs2/quota.c | 6 +-
12868 fs/hugetlbfs/inode.c | 13 +-
12869 fs/inode.c | 4 +-
12870 fs/jffs2/erase.c | 3 +-
12871 fs/jffs2/wbuf.c | 3 +-
12872 fs/jfs/super.c | 2 +-
12873 fs/kernfs/dir.c | 2 +-
12874 fs/kernfs/file.c | 20 +-
12875 fs/libfs.c | 10 +-
12876 fs/lockd/clntproc.c | 4 +-
12877 fs/namei.c | 16 +-
12878 fs/namespace.c | 16 +-
12879 fs/nfs/callback_xdr.c | 2 +-
12880 fs/nfs/inode.c | 6 +-
12881 fs/nfsd/nfs4proc.c | 2 +-
12882 fs/nfsd/nfs4xdr.c | 2 +-
12883 fs/nfsd/nfscache.c | 11 +-
12884 fs/nfsd/vfs.c | 6 +-
12885 fs/nls/nls_base.c | 26 +-
12886 fs/nls/nls_euc-jp.c | 6 +-
12887 fs/nls/nls_koi8-ru.c | 6 +-
12888 fs/notify/fanotify/fanotify_user.c | 4 +-
12889 fs/notify/notification.c | 4 +-
12890 fs/ntfs/dir.c | 2 +-
12891 fs/ntfs/super.c | 6 +-
12892 fs/ocfs2/localalloc.c | 2 +-
12893 fs/ocfs2/ocfs2.h | 10 +-
12894 fs/ocfs2/suballoc.c | 12 +-
12895 fs/ocfs2/super.c | 20 +-
12896 fs/pipe.c | 72 +-
12897 fs/posix_acl.c | 4 +-
12898 fs/proc/array.c | 20 +
12899 fs/proc/base.c | 4 +-
12900 fs/proc/kcore.c | 34 +-
12901 fs/proc/meminfo.c | 2 +-
12902 fs/proc/nommu.c | 2 +-
12903 fs/proc/proc_sysctl.c | 26 +-
12904 fs/proc/task_mmu.c | 39 +-
12905 fs/proc/task_nommu.c | 4 +-
12906 fs/proc/vmcore.c | 16 +-
12907 fs/qnx6/qnx6.h | 4 +-
12908 fs/quota/netlink.c | 4 +-
12909 fs/read_write.c | 2 +-
12910 fs/reiserfs/do_balan.c | 2 +-
12911 fs/reiserfs/procfs.c | 2 +-
12912 fs/reiserfs/reiserfs.h | 4 +-
12913 fs/seq_file.c | 4 +-
12914 fs/splice.c | 43 +-
12915 fs/squashfs/xattr.c | 12 +-
12916 fs/sysv/sysv.h | 2 +-
12917 fs/tracefs/inode.c | 8 +-
12918 fs/udf/misc.c | 2 +-
12919 fs/ufs/swab.h | 4 +-
12920 fs/userfaultfd.c | 2 +-
12921 fs/xattr.c | 21 +
12922 fs/xfs/libxfs/xfs_bmap.c | 2 +-
12923 fs/xfs/xfs_dir2_readdir.c | 7 +-
12924 fs/xfs/xfs_ioctl.c | 2 +-
12925 fs/xfs/xfs_linux.h | 4 +-
12926 include/asm-generic/4level-fixup.h | 2 +
12927 include/asm-generic/atomic-long.h | 156 +-
12928 include/asm-generic/atomic64.h | 12 +
12929 include/asm-generic/bitops/__fls.h | 2 +-
12930 include/asm-generic/bitops/fls.h | 2 +-
12931 include/asm-generic/bitops/fls64.h | 4 +-
12932 include/asm-generic/bug.h | 6 +-
12933 include/asm-generic/cache.h | 4 +-
12934 include/asm-generic/emergency-restart.h | 2 +-
12935 include/asm-generic/kmap_types.h | 4 +-
12936 include/asm-generic/local.h | 13 +
12937 include/asm-generic/pgtable-nopmd.h | 18 +-
12938 include/asm-generic/pgtable-nopud.h | 15 +-
12939 include/asm-generic/pgtable.h | 16 +
12940 include/asm-generic/sections.h | 1 +
12941 include/asm-generic/uaccess.h | 16 +
12942 include/asm-generic/vmlinux.lds.h | 15 +-
12943 include/crypto/algapi.h | 2 +-
12944 include/drm/drmP.h | 16 +-
12945 include/drm/drm_crtc_helper.h | 2 +-
12946 include/drm/drm_mm.h | 2 +-
12947 include/drm/i915_pciids.h | 2 +-
12948 include/drm/intel-gtt.h | 4 +-
12949 include/drm/ttm/ttm_memory.h | 2 +-
12950 include/drm/ttm/ttm_page_alloc.h | 1 +
12951 include/keys/asymmetric-subtype.h | 2 +-
12952 include/linux/atmdev.h | 4 +-
12953 include/linux/atomic.h | 17 +-
12954 include/linux/audit.h | 2 +-
12955 include/linux/average.h | 2 +-
12956 include/linux/binfmts.h | 3 +-
12957 include/linux/bitmap.h | 2 +-
12958 include/linux/bitops.h | 8 +-
12959 include/linux/blkdev.h | 2 +-
12960 include/linux/blktrace_api.h | 2 +-
12961 include/linux/cache.h | 8 +
12962 include/linux/cdrom.h | 1 -
12963 include/linux/cleancache.h | 2 +-
12964 include/linux/clk-provider.h | 1 +
12965 include/linux/compat.h | 6 +-
12966 include/linux/compiler-gcc.h | 28 +-
12967 include/linux/compiler.h | 157 +-
12968 include/linux/configfs.h | 2 +-
12969 include/linux/cpufreq.h | 3 +-
12970 include/linux/cpuidle.h | 5 +-
12971 include/linux/cpumask.h | 14 +-
12972 include/linux/crypto.h | 4 +-
12973 include/linux/ctype.h | 2 +-
12974 include/linux/dcache.h | 4 +-
12975 include/linux/decompress/mm.h | 2 +-
12976 include/linux/devfreq.h | 2 +-
12977 include/linux/device.h | 7 +-
12978 include/linux/dma-mapping.h | 2 +-
12979 include/linux/efi.h | 1 +
12980 include/linux/elf.h | 2 +
12981 include/linux/err.h | 4 +-
12982 include/linux/extcon.h | 2 +-
12983 include/linux/fb.h | 3 +-
12984 include/linux/fdtable.h | 2 +-
12985 include/linux/fs.h | 5 +-
12986 include/linux/fs_struct.h | 2 +-
12987 include/linux/fscache-cache.h | 2 +-
12988 include/linux/fscache.h | 2 +-
12989 include/linux/fsnotify.h | 2 +-
12990 include/linux/genhd.h | 4 +-
12991 include/linux/genl_magic_func.h | 2 +-
12992 include/linux/gfp.h | 12 +-
12993 include/linux/highmem.h | 12 +
12994 include/linux/hwmon-sysfs.h | 6 +-
12995 include/linux/i2c.h | 1 +
12996 include/linux/if_pppox.h | 2 +-
12997 include/linux/init.h | 12 +-
12998 include/linux/init_task.h | 7 +
12999 include/linux/interrupt.h | 6 +-
13000 include/linux/iommu.h | 2 +-
13001 include/linux/ioport.h | 2 +-
13002 include/linux/ipc.h | 2 +-
13003 include/linux/irq.h | 5 +-
13004 include/linux/irqdesc.h | 2 +-
13005 include/linux/irqdomain.h | 3 +
13006 include/linux/jiffies.h | 16 +-
13007 include/linux/key-type.h | 2 +-
13008 include/linux/kgdb.h | 6 +-
13009 include/linux/kmemleak.h | 4 +-
13010 include/linux/kobject.h | 3 +-
13011 include/linux/kobject_ns.h | 2 +-
13012 include/linux/kref.h | 2 +-
13013 include/linux/libata.h | 2 +-
13014 include/linux/linkage.h | 1 +
13015 include/linux/list.h | 15 +
13016 include/linux/lockref.h | 26 +-
13017 include/linux/math64.h | 10 +-
13018 include/linux/mempolicy.h | 7 +
13019 include/linux/mm.h | 102 +-
13020 include/linux/mm_types.h | 20 +
13021 include/linux/mmiotrace.h | 4 +-
13022 include/linux/mmzone.h | 2 +-
13023 include/linux/mod_devicetable.h | 4 +-
13024 include/linux/module.h | 69 +-
13025 include/linux/moduleloader.h | 16 +
13026 include/linux/moduleparam.h | 4 +-
13027 include/linux/net.h | 2 +-
13028 include/linux/netdevice.h | 7 +-
13029 include/linux/netfilter.h | 2 +-
13030 include/linux/netfilter/nfnetlink.h | 2 +-
13031 include/linux/nls.h | 4 +-
13032 include/linux/notifier.h | 3 +-
13033 include/linux/oprofile.h | 4 +-
13034 include/linux/padata.h | 2 +-
13035 include/linux/pci_hotplug.h | 3 +-
13036 include/linux/percpu.h | 2 +-
13037 include/linux/perf_event.h | 12 +-
13038 include/linux/pipe_fs_i.h | 8 +-
13039 include/linux/pm.h | 1 +
13040 include/linux/pm_domain.h | 4 +-
13041 include/linux/pm_runtime.h | 2 +-
13042 include/linux/pnp.h | 2 +-
13043 include/linux/poison.h | 4 +-
13044 include/linux/power/smartreflex.h | 2 +-
13045 include/linux/ppp-comp.h | 2 +-
13046 include/linux/preempt.h | 21 +
13047 include/linux/proc_ns.h | 2 +-
13048 include/linux/psci.h | 2 +-
13049 include/linux/quota.h | 2 +-
13050 include/linux/random.h | 19 +-
13051 include/linux/rculist.h | 16 +
13052 include/linux/reboot.h | 14 +-
13053 include/linux/regset.h | 3 +-
13054 include/linux/relay.h | 2 +-
13055 include/linux/rio.h | 2 +-
13056 include/linux/rmap.h | 4 +-
13057 include/linux/sched.h | 72 +-
13058 include/linux/sched/sysctl.h | 1 +
13059 include/linux/semaphore.h | 2 +-
13060 include/linux/seq_file.h | 1 +
13061 include/linux/signal.h | 2 +-
13062 include/linux/skbuff.h | 12 +-
13063 include/linux/slab.h | 47 +-
13064 include/linux/slab_def.h | 14 +-
13065 include/linux/slub_def.h | 2 +-
13066 include/linux/smp.h | 2 +
13067 include/linux/sock_diag.h | 2 +-
13068 include/linux/sonet.h | 2 +-
13069 include/linux/sunrpc/addr.h | 8 +-
13070 include/linux/sunrpc/clnt.h | 2 +-
13071 include/linux/sunrpc/svc.h | 2 +-
13072 include/linux/sunrpc/svc_rdma.h | 18 +-
13073 include/linux/sunrpc/svcauth.h | 2 +-
13074 include/linux/swapops.h | 10 +-
13075 include/linux/swiotlb.h | 3 +-
13076 include/linux/syscalls.h | 21 +-
13077 include/linux/syscore_ops.h | 2 +-
13078 include/linux/sysctl.h | 3 +-
13079 include/linux/sysfs.h | 9 +-
13080 include/linux/sysrq.h | 3 +-
13081 include/linux/tcp.h | 14 +-
13082 include/linux/thread_info.h | 7 +
13083 include/linux/tty.h | 4 +-
13084 include/linux/tty_driver.h | 2 +-
13085 include/linux/tty_ldisc.h | 2 +-
13086 include/linux/types.h | 16 +
13087 include/linux/uaccess.h | 6 +-
13088 include/linux/uio_driver.h | 2 +-
13089 include/linux/unaligned/access_ok.h | 24 +-
13090 include/linux/usb.h | 12 +-
13091 include/linux/usb/hcd.h | 1 +
13092 include/linux/usb/renesas_usbhs.h | 2 +-
13093 include/linux/vermagic.h | 21 +-
13094 include/linux/vga_switcheroo.h | 8 +-
13095 include/linux/vmalloc.h | 7 +-
13096 include/linux/vmstat.h | 24 +-
13097 include/linux/xattr.h | 5 +-
13098 include/linux/zlib.h | 3 +-
13099 include/media/v4l2-dev.h | 2 +-
13100 include/media/v4l2-device.h | 2 +-
13101 include/net/9p/transport.h | 2 +-
13102 include/net/bluetooth/l2cap.h | 2 +-
13103 include/net/bonding.h | 2 +-
13104 include/net/caif/cfctrl.h | 6 +-
13105 include/net/flow.h | 2 +-
13106 include/net/genetlink.h | 2 +-
13107 include/net/gro_cells.h | 2 +-
13108 include/net/inet_connection_sock.h | 2 +-
13109 include/net/inet_sock.h | 2 +-
13110 include/net/inetpeer.h | 2 +-
13111 include/net/ip_fib.h | 2 +-
13112 include/net/ip_vs.h | 8 +-
13113 include/net/ipv6.h | 2 +-
13114 include/net/irda/ircomm_tty.h | 1 +
13115 include/net/iucv/af_iucv.h | 2 +-
13116 include/net/llc_c_ac.h | 2 +-
13117 include/net/llc_c_ev.h | 4 +-
13118 include/net/llc_c_st.h | 2 +-
13119 include/net/llc_s_ac.h | 2 +-
13120 include/net/llc_s_st.h | 2 +-
13121 include/net/mac80211.h | 4 +-
13122 include/net/neighbour.h | 2 +-
13123 include/net/net_namespace.h | 18 +-
13124 include/net/netlink.h | 2 +-
13125 include/net/netns/conntrack.h | 6 +-
13126 include/net/netns/ipv4.h | 4 +-
13127 include/net/netns/ipv6.h | 4 +-
13128 include/net/netns/xfrm.h | 2 +-
13129 include/net/ping.h | 2 +-
13130 include/net/protocol.h | 4 +-
13131 include/net/rtnetlink.h | 2 +-
13132 include/net/sctp/checksum.h | 4 +-
13133 include/net/sctp/sm.h | 4 +-
13134 include/net/sctp/structs.h | 2 +-
13135 include/net/sock.h | 12 +-
13136 include/net/tcp.h | 8 +-
13137 include/net/xfrm.h | 13 +-
13138 include/rdma/iw_cm.h | 2 +-
13139 include/scsi/libfc.h | 3 +-
13140 include/scsi/scsi_device.h | 6 +-
13141 include/scsi/scsi_driver.h | 2 +-
13142 include/scsi/scsi_transport_fc.h | 3 +-
13143 include/scsi/sg.h | 2 +-
13144 include/sound/compress_driver.h | 2 +-
13145 include/sound/soc.h | 4 +-
13146 include/trace/events/irq.h | 4 +-
13147 include/uapi/linux/a.out.h | 8 +
13148 include/uapi/linux/bcache.h | 5 +-
13149 include/uapi/linux/byteorder/little_endian.h | 28 +-
13150 include/uapi/linux/connector.h | 2 +-
13151 include/uapi/linux/elf.h | 28 +
13152 include/uapi/linux/screen_info.h | 3 +-
13153 include/uapi/linux/swab.h | 6 +-
13154 include/uapi/linux/xattr.h | 4 +
13155 include/video/udlfb.h | 8 +-
13156 include/video/uvesafb.h | 1 +
13157 init/Kconfig | 2 +-
13158 init/Makefile | 3 +
13159 init/do_mounts.c | 14 +-
13160 init/do_mounts.h | 8 +-
13161 init/do_mounts_initrd.c | 30 +-
13162 init/do_mounts_md.c | 6 +-
13163 init/init_task.c | 4 +
13164 init/initramfs.c | 38 +-
13165 init/main.c | 30 +-
13166 ipc/compat.c | 4 +-
13167 ipc/ipc_sysctl.c | 8 +-
13168 ipc/mq_sysctl.c | 4 +-
13169 ipc/sem.c | 4 +-
13170 ipc/shm.c | 6 +
13171 kernel/audit.c | 8 +-
13172 kernel/auditsc.c | 4 +-
13173 kernel/bpf/core.c | 7 +-
13174 kernel/capability.c | 3 +
13175 kernel/compat.c | 38 +-
13176 kernel/debug/debug_core.c | 16 +-
13177 kernel/debug/kdb/kdb_main.c | 4 +-
13178 kernel/events/core.c | 26 +-
13179 kernel/events/internal.h | 10 +-
13180 kernel/events/uprobes.c | 2 +-
13181 kernel/exit.c | 2 +-
13182 kernel/fork.c | 167 +-
13183 kernel/futex.c | 11 +-
13184 kernel/futex_compat.c | 2 +-
13185 kernel/gcov/base.c | 7 +-
13186 kernel/irq/manage.c | 2 +-
13187 kernel/irq/msi.c | 19 +-
13188 kernel/irq/spurious.c | 2 +-
13189 kernel/jump_label.c | 5 +
13190 kernel/kallsyms.c | 37 +-
13191 kernel/kexec.c | 3 +-
13192 kernel/kmod.c | 8 +-
13193 kernel/kprobes.c | 4 +-
13194 kernel/ksysfs.c | 2 +-
13195 kernel/locking/lockdep.c | 7 +-
13196 kernel/locking/mutex-debug.c | 12 +-
13197 kernel/locking/mutex-debug.h | 4 +-
13198 kernel/locking/mutex.c | 6 +-
13199 kernel/module.c | 422 +-
13200 kernel/notifier.c | 17 +-
13201 kernel/padata.c | 4 +-
13202 kernel/panic.c | 5 +-
13203 kernel/pid.c | 2 +-
13204 kernel/pid_namespace.c | 2 +-
13205 kernel/power/process.c | 12 +-
13206 kernel/profile.c | 14 +-
13207 kernel/ptrace.c | 8 +-
13208 kernel/rcu/rcutorture.c | 60 +-
13209 kernel/rcu/tiny.c | 4 +-
13210 kernel/rcu/tree.c | 44 +-
13211 kernel/rcu/tree.h | 14 +-
13212 kernel/rcu/tree_plugin.h | 14 +-
13213 kernel/rcu/tree_trace.c | 12 +-
13214 kernel/sched/auto_group.c | 4 +-
13215 kernel/sched/core.c | 45 +-
13216 kernel/sched/fair.c | 2 +-
13217 kernel/sched/sched.h | 2 +-
13218 kernel/signal.c | 12 +-
13219 kernel/smpboot.c | 4 +-
13220 kernel/softirq.c | 12 +-
13221 kernel/sys.c | 10 +-
13222 kernel/sysctl.c | 34 +-
13223 kernel/time/alarmtimer.c | 2 +-
13224 kernel/time/posix-cpu-timers.c | 4 +-
13225 kernel/time/posix-timers.c | 24 +-
13226 kernel/time/timer.c | 2 +-
13227 kernel/time/timer_stats.c | 10 +-
13228 kernel/trace/blktrace.c | 6 +-
13229 kernel/trace/ftrace.c | 15 +-
13230 kernel/trace/ring_buffer.c | 96 +-
13231 kernel/trace/trace.c | 2 +-
13232 kernel/trace/trace.h | 2 +-
13233 kernel/trace/trace_clock.c | 4 +-
13234 kernel/trace/trace_events.c | 1 -
13235 kernel/trace/trace_functions_graph.c | 4 +-
13236 kernel/trace/trace_mmiotrace.c | 8 +-
13237 kernel/trace/trace_output.c | 10 +-
13238 kernel/trace/trace_seq.c | 2 +-
13239 kernel/trace/trace_stack.c | 2 +-
13240 kernel/user_namespace.c | 2 +-
13241 kernel/utsname_sysctl.c | 2 +-
13242 kernel/watchdog.c | 2 +-
13243 kernel/workqueue.c | 2 +-
13244 lib/Kconfig.debug | 8 +-
13245 lib/Makefile | 2 +-
13246 lib/bitmap.c | 8 +-
13247 lib/bug.c | 2 +
13248 lib/debugobjects.c | 2 +-
13249 lib/decompress_bunzip2.c | 3 +-
13250 lib/decompress_unlzma.c | 4 +-
13251 lib/div64.c | 4 +-
13252 lib/dma-debug.c | 4 +-
13253 lib/inflate.c | 2 +-
13254 lib/ioremap.c | 4 +-
13255 lib/kobject.c | 4 +-
13256 lib/list_debug.c | 126 +-
13257 lib/lockref.c | 44 +-
13258 lib/percpu-refcount.c | 2 +-
13259 lib/radix-tree.c | 2 +-
13260 lib/random32.c | 2 +-
13261 lib/show_mem.c | 2 +-
13262 lib/strncpy_from_user.c | 2 +-
13263 lib/strnlen_user.c | 2 +-
13264 lib/swiotlb.c | 2 +-
13265 lib/usercopy.c | 6 +
13266 lib/vsprintf.c | 12 +-
13267 mm/Kconfig | 6 +-
13268 mm/backing-dev.c | 4 +-
13269 mm/debug.c | 3 +
13270 mm/filemap.c | 2 +-
13271 mm/gup.c | 13 +-
13272 mm/highmem.c | 6 +-
13273 mm/hugetlb.c | 70 +-
13274 mm/internal.h | 1 +
13275 mm/maccess.c | 4 +-
13276 mm/madvise.c | 37 +
13277 mm/memory-failure.c | 6 +-
13278 mm/memory.c | 424 +-
13279 mm/mempolicy.c | 25 +
13280 mm/mlock.c | 15 +-
13281 mm/mm_init.c | 2 +-
13282 mm/mmap.c | 582 +-
13283 mm/mprotect.c | 137 +-
13284 mm/mremap.c | 39 +-
13285 mm/nommu.c | 21 +-
13286 mm/page-writeback.c | 2 +-
13287 mm/page_alloc.c | 49 +-
13288 mm/percpu.c | 2 +-
13289 mm/process_vm_access.c | 14 +-
13290 mm/rmap.c | 45 +-
13291 mm/shmem.c | 19 +-
13292 mm/slab.c | 109 +-
13293 mm/slab.h | 22 +-
13294 mm/slab_common.c | 86 +-
13295 mm/slob.c | 218 +-
13296 mm/slub.c | 102 +-
13297 mm/sparse-vmemmap.c | 4 +-
13298 mm/sparse.c | 2 +-
13299 mm/swap.c | 2 +
13300 mm/swapfile.c | 12 +-
13301 mm/util.c | 6 +
13302 mm/vmalloc.c | 114 +-
13303 mm/vmstat.c | 12 +-
13304 net/8021q/vlan.c | 5 +-
13305 net/8021q/vlan_netlink.c | 2 +-
13306 net/9p/mod.c | 4 +-
13307 net/9p/trans_fd.c | 2 +-
13308 net/atm/atm_misc.c | 8 +-
13309 net/atm/lec.h | 2 +-
13310 net/atm/proc.c | 6 +-
13311 net/atm/resources.c | 4 +-
13312 net/ax25/sysctl_net_ax25.c | 2 +-
13313 net/batman-adv/bat_iv_ogm.c | 8 +-
13314 net/batman-adv/fragmentation.c | 2 +-
13315 net/batman-adv/soft-interface.c | 8 +-
13316 net/batman-adv/types.h | 6 +-
13317 net/bluetooth/hci_sock.c | 2 +-
13318 net/bluetooth/l2cap_core.c | 6 +-
13319 net/bluetooth/l2cap_sock.c | 12 +-
13320 net/bluetooth/rfcomm/sock.c | 4 +-
13321 net/bluetooth/rfcomm/tty.c | 4 +-
13322 net/bridge/br_netlink.c | 2 +-
13323 net/bridge/netfilter/ebtables.c | 6 +-
13324 net/caif/cfctrl.c | 11 +-
13325 net/caif/chnl_net.c | 2 +-
13326 net/can/af_can.c | 2 +-
13327 net/can/gw.c | 6 +-
13328 net/ceph/messenger.c | 4 +-
13329 net/compat.c | 24 +-
13330 net/core/datagram.c | 2 +-
13331 net/core/dev.c | 16 +-
13332 net/core/filter.c | 2 +-
13333 net/core/flow.c | 6 +-
13334 net/core/neighbour.c | 4 +-
13335 net/core/net-sysfs.c | 2 +-
13336 net/core/net_namespace.c | 8 +-
13337 net/core/netpoll.c | 4 +-
13338 net/core/rtnetlink.c | 15 +-
13339 net/core/scm.c | 14 +-
13340 net/core/skbuff.c | 8 +-
13341 net/core/sock.c | 28 +-
13342 net/core/sock_diag.c | 15 +-
13343 net/core/sysctl_net_core.c | 22 +-
13344 net/decnet/af_decnet.c | 1 +
13345 net/decnet/sysctl_net_decnet.c | 4 +-
13346 net/dsa/dsa.c | 2 +-
13347 net/hsr/hsr_netlink.c | 2 +-
13348 net/ieee802154/6lowpan/core.c | 2 +-
13349 net/ieee802154/6lowpan/reassembly.c | 14 +-
13350 net/ipv4/af_inet.c | 2 +-
13351 net/ipv4/devinet.c | 18 +-
13352 net/ipv4/fib_frontend.c | 6 +-
13353 net/ipv4/fib_semantics.c | 2 +-
13354 net/ipv4/inet_connection_sock.c | 4 +-
13355 net/ipv4/inet_timewait_sock.c | 2 +-
13356 net/ipv4/inetpeer.c | 2 +-
13357 net/ipv4/ip_fragment.c | 15 +-
13358 net/ipv4/ip_gre.c | 6 +-
13359 net/ipv4/ip_sockglue.c | 2 +-
13360 net/ipv4/ip_vti.c | 4 +-
13361 net/ipv4/ipconfig.c | 6 +-
13362 net/ipv4/ipip.c | 4 +-
13363 net/ipv4/netfilter/arp_tables.c | 12 +-
13364 net/ipv4/netfilter/ip_tables.c | 12 +-
13365 net/ipv4/ping.c | 14 +-
13366 net/ipv4/raw.c | 14 +-
13367 net/ipv4/route.c | 32 +-
13368 net/ipv4/sysctl_net_ipv4.c | 22 +-
13369 net/ipv4/tcp_input.c | 6 +-
13370 net/ipv4/tcp_probe.c | 2 +-
13371 net/ipv4/udp.c | 10 +-
13372 net/ipv4/xfrm4_policy.c | 18 +-
13373 net/ipv6/addrconf.c | 18 +-
13374 net/ipv6/af_inet6.c | 2 +-
13375 net/ipv6/datagram.c | 2 +-
13376 net/ipv6/icmp.c | 2 +-
13377 net/ipv6/ip6_fib.c | 4 +-
13378 net/ipv6/ip6_gre.c | 10 +-
13379 net/ipv6/ip6_tunnel.c | 4 +-
13380 net/ipv6/ip6_vti.c | 4 +-
13381 net/ipv6/ipv6_sockglue.c | 2 +-
13382 net/ipv6/netfilter/ip6_tables.c | 12 +-
13383 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
13384 net/ipv6/ping.c | 33 +-
13385 net/ipv6/raw.c | 17 +-
13386 net/ipv6/reassembly.c | 13 +-
13387 net/ipv6/route.c | 2 +-
13388 net/ipv6/sit.c | 4 +-
13389 net/ipv6/sysctl_net_ipv6.c | 2 +-
13390 net/ipv6/udp.c | 6 +-
13391 net/ipv6/xfrm6_policy.c | 17 +-
13392 net/irda/ircomm/ircomm_tty.c | 18 +-
13393 net/iucv/af_iucv.c | 4 +-
13394 net/iucv/iucv.c | 2 +-
13395 net/key/af_key.c | 4 +-
13396 net/l2tp/l2tp_eth.c | 38 +-
13397 net/l2tp/l2tp_ip.c | 2 +-
13398 net/l2tp/l2tp_ip6.c | 2 +-
13399 net/mac80211/cfg.c | 8 +-
13400 net/mac80211/ieee80211_i.h | 3 +-
13401 net/mac80211/iface.c | 20 +-
13402 net/mac80211/main.c | 2 +-
13403 net/mac80211/pm.c | 4 +-
13404 net/mac80211/rate.c | 2 +-
13405 net/mac80211/sta_info.c | 2 +-
13406 net/mac80211/util.c | 8 +-
13407 net/mpls/af_mpls.c | 6 +-
13408 net/netfilter/ipset/ip_set_core.c | 2 +-
13409 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
13410 net/netfilter/ipvs/ip_vs_core.c | 4 +-
13411 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
13412 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
13413 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
13414 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
13415 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
13416 net/netfilter/nf_conntrack_acct.c | 2 +-
13417 net/netfilter/nf_conntrack_ecache.c | 2 +-
13418 net/netfilter/nf_conntrack_helper.c | 2 +-
13419 net/netfilter/nf_conntrack_proto.c | 2 +-
13420 net/netfilter/nf_conntrack_standalone.c | 2 +-
13421 net/netfilter/nf_conntrack_timestamp.c | 2 +-
13422 net/netfilter/nf_log.c | 10 +-
13423 net/netfilter/nf_sockopt.c | 4 +-
13424 net/netfilter/nfnetlink_log.c | 4 +-
13425 net/netfilter/nft_compat.c | 9 +-
13426 net/netfilter/xt_statistic.c | 8 +-
13427 net/netlink/af_netlink.c | 4 +-
13428 net/openvswitch/vport-internal_dev.c | 2 +-
13429 net/packet/af_packet.c | 8 +-
13430 net/phonet/pep.c | 6 +-
13431 net/phonet/socket.c | 2 +-
13432 net/phonet/sysctl.c | 2 +-
13433 net/rds/cong.c | 6 +-
13434 net/rds/ib.h | 2 +-
13435 net/rds/ib_cm.c | 2 +-
13436 net/rds/ib_recv.c | 4 +-
13437 net/rds/iw.h | 2 +-
13438 net/rds/iw_cm.c | 2 +-
13439 net/rds/iw_recv.c | 4 +-
13440 net/rds/rds.h | 2 +-
13441 net/rds/tcp.c | 2 +-
13442 net/rds/tcp_send.c | 2 +-
13443 net/rxrpc/af_rxrpc.c | 2 +-
13444 net/rxrpc/ar-ack.c | 14 +-
13445 net/rxrpc/ar-call.c | 2 +-
13446 net/rxrpc/ar-connection.c | 2 +-
13447 net/rxrpc/ar-connevent.c | 2 +-
13448 net/rxrpc/ar-input.c | 4 +-
13449 net/rxrpc/ar-internal.h | 8 +-
13450 net/rxrpc/ar-local.c | 2 +-
13451 net/rxrpc/ar-output.c | 4 +-
13452 net/rxrpc/ar-peer.c | 2 +-
13453 net/rxrpc/ar-proc.c | 4 +-
13454 net/rxrpc/ar-transport.c | 2 +-
13455 net/rxrpc/rxkad.c | 4 +-
13456 net/sched/sch_generic.c | 4 +-
13457 net/sctp/ipv6.c | 6 +-
13458 net/sctp/protocol.c | 10 +-
13459 net/sctp/sm_sideeffect.c | 2 +-
13460 net/sctp/socket.c | 21 +-
13461 net/sctp/sysctl.c | 10 +-
13462 net/socket.c | 18 +-
13463 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
13464 net/sunrpc/clnt.c | 4 +-
13465 net/sunrpc/sched.c | 4 +-
13466 net/sunrpc/svc.c | 4 +-
13467 net/sunrpc/svcauth_unix.c | 2 +-
13468 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
13469 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
13470 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
13471 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
13472 net/tipc/netlink_compat.c | 12 +-
13473 net/tipc/subscr.c | 2 +-
13474 net/unix/af_unix.c | 7 +-
13475 net/unix/sysctl_net_unix.c | 2 +-
13476 net/wireless/wext-core.c | 19 +-
13477 net/xfrm/xfrm_policy.c | 16 +-
13478 net/xfrm/xfrm_state.c | 33 +-
13479 net/xfrm/xfrm_sysctl.c | 2 +-
13480 scripts/Kbuild.include | 2 +-
13481 scripts/Makefile.build | 2 +-
13482 scripts/Makefile.clean | 3 +-
13483 scripts/Makefile.host | 69 +-
13484 scripts/basic/fixdep.c | 12 +-
13485 scripts/dtc/checks.c | 14 +-
13486 scripts/dtc/data.c | 6 +-
13487 scripts/dtc/flattree.c | 8 +-
13488 scripts/dtc/livetree.c | 4 +-
13489 scripts/gcc-plugin.sh | 51 +
13490 scripts/headers_install.sh | 1 +
13491 scripts/kallsyms.c | 4 +-
13492 scripts/kconfig/lkc.h | 5 +-
13493 scripts/kconfig/menu.c | 2 +-
13494 scripts/kconfig/symbol.c | 6 +-
13495 scripts/link-vmlinux.sh | 2 +-
13496 scripts/mod/file2alias.c | 14 +-
13497 scripts/mod/modpost.c | 25 +-
13498 scripts/mod/modpost.h | 6 +-
13499 scripts/mod/sumversion.c | 2 +-
13500 scripts/module-common.lds | 4 +
13501 scripts/package/builddeb | 1 +
13502 scripts/pnmtologo.c | 6 +-
13503 scripts/sortextable.h | 6 +-
13504 scripts/tags.sh | 2 +-
13505 security/Kconfig | 692 +-
13506 security/integrity/ima/ima.h | 4 +-
13507 security/integrity/ima/ima_api.c | 2 +-
13508 security/integrity/ima/ima_fs.c | 4 +-
13509 security/integrity/ima/ima_queue.c | 2 +-
13510 security/keys/key.c | 18 +-
13511 security/selinux/avc.c | 6 +-
13512 security/selinux/include/xfrm.h | 2 +-
13513 security/yama/yama_lsm.c | 2 +-
13514 sound/aoa/codecs/onyx.c | 7 +-
13515 sound/aoa/codecs/onyx.h | 1 +
13516 sound/core/oss/pcm_oss.c | 18 +-
13517 sound/core/pcm_compat.c | 2 +-
13518 sound/core/pcm_native.c | 4 +-
13519 sound/core/sound.c | 2 +-
13520 sound/drivers/mts64.c | 14 +-
13521 sound/drivers/opl4/opl4_lib.c | 2 +-
13522 sound/drivers/portman2x4.c | 3 +-
13523 sound/firewire/amdtp.c | 4 +-
13524 sound/firewire/amdtp.h | 4 +-
13525 sound/firewire/isight.c | 10 +-
13526 sound/firewire/scs1x.c | 8 +-
13527 sound/oss/sb_audio.c | 2 +-
13528 sound/oss/swarm_cs4297a.c | 6 +-
13529 sound/pci/hda/hda_codec.c | 2 +-
13530 sound/pci/ymfpci/ymfpci.h | 2 +-
13531 sound/pci/ymfpci/ymfpci_main.c | 12 +-
13532 sound/soc/codecs/sti-sas.c | 10 +-
13533 sound/soc/soc-ac97.c | 6 +-
13534 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
13535 tools/gcc/Makefile | 42 +
13536 tools/gcc/checker_plugin.c | 150 +
13537 tools/gcc/colorize_plugin.c | 215 +
13538 tools/gcc/constify_plugin.c | 571 +
13539 tools/gcc/gcc-common.h | 812 +
13540 tools/gcc/initify_plugin.c | 552 +
13541 tools/gcc/kallocstat_plugin.c | 188 +
13542 tools/gcc/kernexec_plugin.c | 549 +
13543 tools/gcc/latent_entropy_plugin.c | 470 +
13544 tools/gcc/size_overflow_plugin/.gitignore | 2 +
13545 tools/gcc/size_overflow_plugin/Makefile | 28 +
13546 .../disable_size_overflow_hash.data |12422 ++++++++++++
13547 .../generate_size_overflow_hash.sh | 103 +
13548 .../insert_size_overflow_asm.c | 416 +
13549 .../size_overflow_plugin/intentional_overflow.c | 1010 +
13550 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
13551 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
13552 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
13553 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
13554 .../size_overflow_hash_aux.data | 92 +
13555 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
13556 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
13557 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
13558 .../size_overflow_plugin_hash.c | 352 +
13559 .../size_overflow_plugin/size_overflow_transform.c | 749 +
13560 .../size_overflow_transform_core.c | 1010 +
13561 tools/gcc/stackleak_plugin.c | 436 +
13562 tools/gcc/structleak_plugin.c | 287 +
13563 tools/include/linux/compiler.h | 8 +
13564 tools/lib/api/Makefile | 2 +-
13565 tools/perf/util/include/asm/alternative-asm.h | 3 +
13566 tools/virtio/linux/uaccess.h | 2 +-
13567 virt/kvm/kvm_main.c | 42 +-
13568 1944 files changed, 66925 insertions(+), 8949 deletions(-)
13569 commit 87790bbd0d8dc2bd7fd86cb947e32886db9e9766
13570 Author: Matthew Wilcox <willy@linux.intel.com>
13571 Date: Tue Feb 2 16:57:52 2016 -0800
13572
13573 radix-tree: fix race in gang lookup
13574
13575 If the indirect_ptr bit is set on a slot, that indicates we need to redo
13576 the lookup. Introduce a new function radix_tree_iter_retry() which
13577 forces the loop to retry the lookup by setting 'slot' to NULL and
13578 turning the iterator back to point at the problematic entry.
13579
13580 This is a pretty rare problem to hit at the moment; the lookup has to
13581 race with a grow of the radix tree from a height of 0. The consequences
13582 of hitting this race are that gang lookup could return a pointer to a
13583 radix_tree_node instead of a pointer to whatever the user had inserted
13584 in the tree.
13585
13586 Fixes: cebbd29e1c2f ("radix-tree: rewrite gang lookup using iterator")
13587 Signed-off-by: Matthew Wilcox <willy@linux.intel.com>
13588 Cc: Hugh Dickins <hughd@google.com>
13589 Cc: Ohad Ben-Cohen <ohad@wizery.com>
13590 Cc: Konstantin Khlebnikov <khlebnikov@openvz.org>
13591 Cc: <stable@vger.kernel.org>
13592 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
13593 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
13594
13595 include/linux/radix-tree.h | 16 ++++++++++++++++
13596 lib/radix-tree.c | 12 ++++++++++--
13597 2 files changed, 26 insertions(+), 2 deletions(-)
13598
13599 commit bf628043b4589c910919a0f221ae7f42aa8cea93
13600 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
13601 Date: Wed Feb 3 02:11:03 2016 +0100
13602
13603 unix: correctly track in-flight fds in sending process user_struct
13604
13605 The commit referenced in the Fixes tag incorrectly accounted the number
13606 of in-flight fds over a unix domain socket to the original opener
13607 of the file-descriptor. This allows another process to arbitrary
13608 deplete the original file-openers resource limit for the maximum of
13609 open files. Instead the sending processes and its struct cred should
13610 be credited.
13611
13612 To do so, we add a reference counted struct user_struct pointer to the
13613 scm_fp_list and use it to account for the number of inflight unix fds.
13614
13615 Fixes: 712f4aad406bb1 ("unix: properly account for FDs passed over unix sockets")
13616 Reported-by: David Herrmann <dh.herrmann@gmail.com>
13617 Cc: David Herrmann <dh.herrmann@gmail.com>
13618 Cc: Willy Tarreau <w@1wt.eu>
13619 Cc: Linus Torvalds <torvalds@linux-foundation.org>
13620 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
13621 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
13622 Signed-off-by: David S. Miller <davem@davemloft.net>
13623
13624 include/net/af_unix.h | 4 ++--
13625 include/net/scm.h | 1 +
13626 net/core/scm.c | 7 +++++++
13627 net/unix/af_unix.c | 4 ++--
13628 net/unix/garbage.c | 8 ++++----
13629 5 files changed, 16 insertions(+), 8 deletions(-)
13630
13631 commit e830db443ff78d70b7b63536e688d73907face0c
13632 Author: Mike Kravetz <mike.kravetz@oracle.com>
13633 Date: Fri Jan 15 16:57:37 2016 -0800
13634
13635 fs/hugetlbfs/inode.c: fix bugs in hugetlb_vmtruncate_list()
13636
13637 Hillf Danton noticed bugs in the hugetlb_vmtruncate_list routine. The
13638 argument end is of type pgoff_t. It was being converted to a vaddr
13639 offset and passed to unmap_hugepage_range. However, end was also being
13640 used as an argument to the vma_interval_tree_foreach controlling loop.
13641 In addition, the conversion of end to vaddr offset was incorrect.
13642
13643 hugetlb_vmtruncate_list is called as part of a file truncate or
13644 fallocate hole punch operation.
13645
13646 When truncating a hugetlbfs file, this bug could prevent some pages from
13647 being unmapped. This is possible if there are multiple vmas mapping the
13648 file, and there is a sufficiently sized hole between the mappings. The
13649 size of the hole between two vmas (A,B) must be such that the starting
13650 virtual address of B is greater than (ending virtual address of A <<
13651 PAGE_SHIFT). In this case, the pages in B would not be unmapped. If
13652 pages are not properly unmapped during truncate, the following BUG is
13653 hit:
13654
13655 kernel BUG at fs/hugetlbfs/inode.c:428!
13656
13657 In the fallocate hole punch case, this bug could prevent pages from
13658 being unmapped as in the truncate case. However, for hole punch the
13659 result is that unmapped pages will not be removed during the operation.
13660 For hole punch, it is also possible that more pages than desired will be
13661 unmapped. This unnecessary unmapping will cause page faults to
13662 reestablish the mappings on subsequent page access.
13663
13664 Fixes: 1bfad99ab (" hugetlbfs: hugetlb_vmtruncate_list() needs to take a range")Reported-by: Hillf Danton <hillf.zj@alibaba-inc.com>
13665 Signed-off-by: Mike Kravetz <mike.kravetz@oracle.com>
13666 Cc: Hugh Dickins <hughd@google.com>
13667 Cc: Naoya Horiguchi <n-horiguchi@ah.jp.nec.com>
13668 Cc: Davidlohr Bueso <dave@stgolabs.net>
13669 Cc: Dave Hansen <dave.hansen@linux.intel.com>
13670 Cc: <stable@vger.kernel.org> [4.3]
13671 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
13672 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
13673
13674 fs/hugetlbfs/inode.c | 19 +++++++++++--------
13675 1 files changed, 11 insertions(+), 8 deletions(-)
13676
13677 commit cdb3ba4a9113b779347387f3b6c6ea72dd4db12f
13678 Author: Takashi Iwai <tiwai@suse.de>
13679 Date: Thu Feb 4 17:06:13 2016 +0100
13680
13681 ALSA: timer: Fix leftover link at closing
13682
13683 In ALSA timer core, the active timer instance is managed in
13684 active_list linked list. Each element is added / removed dynamically
13685 at timer start, stop and in timer interrupt. The problem is that
13686 snd_timer_interrupt() has a thinko and leaves the element in
13687 active_list when it's the last opened element. This eventually leads
13688 to list corruption or use-after-free error.
13689
13690 This hasn't been revealed because we used to delete the list forcibly
13691 in snd_timer_stop() in the past. However, the recent fix avoids the
13692 double-stop behavior (in commit [f784beb75ce8: ALSA: timer: Fix link
13693 corruption due to double start or stop]), and this leak hits reality.
13694
13695 This patch fixes the link management in snd_timer_interrupt(). Now it
13696 simply unlinks no matter which stream is.
13697
13698 BugLink: http://lkml.kernel.org/r/CACT4Y+Yy2aukHP-EDp8-ziNqNNmb-NTf=jDWXMP7jB8HDa2vng@mail.gmail.com
13699 Reported-by: Dmitry Vyukov <dvyukov@google.com>
13700 Cc: <stable@vger.kernel.org>
13701 Signed-off-by: Takashi Iwai <tiwai@suse.de>
13702
13703 sound/core/timer.c | 4 ++--
13704 1 files changed, 2 insertions(+), 2 deletions(-)
13705
13706 commit 47d9647902f6a2f46a2be1e0140ba0f6f8c06008
13707 Author: Konstantin Khlebnikov <koct9i@gmail.com>
13708 Date: Fri Feb 5 15:37:01 2016 -0800
13709
13710 radix-tree: fix oops after radix_tree_iter_retry
13711
13712 Helper radix_tree_iter_retry() resets next_index to the current index.
13713 In following radix_tree_next_slot current chunk size becomes zero. This
13714 isn't checked and it tries to dereference null pointer in slot.
13715
13716 Tagged iterator is fine because retry happens only at slot 0 where tag
13717 bitmask in iter->tags is filled with single bit.
13718
13719 Fixes: 46437f9a554f ("radix-tree: fix race in gang lookup")
13720 Signed-off-by: Konstantin Khlebnikov <koct9i@gmail.com>
13721 Cc: Matthew Wilcox <willy@linux.intel.com>
13722 Cc: Hugh Dickins <hughd@google.com>
13723 Cc: Ohad Ben-Cohen <ohad@wizery.com>
13724 Cc: Jeremiah Mahler <jmmahler@gmail.com>
13725 Cc: <stable@vger.kernel.org>
13726 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
13727 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
13728
13729 include/linux/radix-tree.h | 6 +++---
13730 1 files changed, 3 insertions(+), 3 deletions(-)
13731
13732 commit 95b5dcb3c01958502af00b0bc0da1d906aae11a2
13733 Merge: 438be0b 256aeaf
13734 Author: Brad Spengler <spender@grsecurity.net>
13735 Date: Sun Feb 7 08:29:33 2016 -0500
13736
13737 Merge branch 'pax-test' into grsec-test
13738
13739 commit 256aeaf87c22de8edf1f03682a572c590ae07771
13740 Author: Brad Spengler <spender@grsecurity.net>
13741 Date: Sun Feb 7 08:29:09 2016 -0500
13742
13743 Update to pax-linux-4.3.5-test28.patch:
13744 - fixed an integer truncation bug in numa_clear_kernel_node_hotplug caught by the size overflow plugin, reported by x14sg1 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4374)
13745 - spender fixed UDEREF on arm
13746
13747 arch/arm/Kconfig | 1 +
13748 arch/arm/include/asm/domain.h | 21 ++++++++-
13749 arch/arm/include/asm/futex.h | 9 ----
13750 arch/arm/include/asm/thread_info.h | 3 +
13751 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
13752 arch/arm/kernel/entry-armv.S | 2 +-
13753 arch/arm/kernel/process.c | 2 +-
13754 arch/arm/mm/alignment.c | 8 ----
13755 arch/x86/mm/numa.c | 2 +-
13756 security/Kconfig | 1 -
13757 10 files changed, 60 insertions(+), 70 deletions(-)
13758
13759 commit 438be0bd112bd17942b2628c53054dc1007558a1
13760 Author: Brad Spengler <spender@grsecurity.net>
13761 Date: Sat Feb 6 19:50:31 2016 -0500
13762
13763 Fix a number of issues caused by the upstream merging of a UDEREF ripoff resulting in unbootable
13764 ARM systems reported on the forums
13765
13766 arch/arm/Kconfig | 1 +
13767 arch/arm/include/asm/domain.h | 21 ++++++++-
13768 arch/arm/include/asm/futex.h | 9 ----
13769 arch/arm/include/asm/thread_info.h | 3 +
13770 arch/arm/include/asm/uaccess.h | 81 +++++++++++++++---------------------
13771 arch/arm/kernel/entry-armv.S | 2 +-
13772 arch/arm/kernel/process.c | 2 +-
13773 arch/arm/mm/alignment.c | 8 ----
13774 security/Kconfig | 1 -
13775 9 files changed, 59 insertions(+), 69 deletions(-)
13776
13777 commit 4ffdd5ef1f87e611af1efb4f251ada92abe9f4c0
13778 Author: Brad Spengler <spender@grsecurity.net>
13779 Date: Sat Feb 6 11:21:53 2016 -0500
13780
13781 Fix another compiler warning
13782
13783 net/ipv4/tcp_input.c | 2 ++
13784 1 files changed, 2 insertions(+), 0 deletions(-)
13785
13786 commit 30b5b7bc0fd67d458bdd5ab35e4689769eabd2ed
13787 Author: Brad Spengler <spender@grsecurity.net>
13788 Date: Sat Feb 6 11:16:12 2016 -0500
13789
13790 Fix two compiler warnings
13791
13792 kernel/pid.c | 5 ++---
13793 kernel/ptrace.c | 3 ++-
13794 2 files changed, 4 insertions(+), 4 deletions(-)
13795
13796 commit dda4d2a21914c480750f10bd55c6e3203d415d8d
13797 Author: Brad Spengler <spender@grsecurity.net>
13798 Date: Wed Feb 3 21:22:40 2016 -0500
13799
13800 Apply fix for integer truncation in NUMA init code, reported by
13801 x14sg1 on the forums:
13802 https://forums.grsecurity.net/viewtopic.php?f=3&t=4374
13803
13804 arch/x86/mm/numa.c | 2 +-
13805 1 files changed, 1 insertions(+), 1 deletions(-)
13806
13807 commit 477505f7c893cb6a2c3e22f83eefd9c985d7b3ca
13808 Merge: a781740 016d0d8
13809 Author: Brad Spengler <spender@grsecurity.net>
13810 Date: Wed Feb 3 21:20:58 2016 -0500
13811
13812 Merge branch 'pax-test' into grsec-test
13813
13814 commit 016d0d81a8dd4be1304c82a68e0ccf425868f467
13815 Author: Brad Spengler <spender@grsecurity.net>
13816 Date: Wed Feb 3 21:20:10 2016 -0500
13817
13818 Update to pax-linux-4.3.5-test27.patch:
13819 - fixed a bunch of potential REFCOUNT false positives, reported by Emese
13820 - restored padding in fpregs_state for storing AVX-512 state in the future
13821 - constified netlink_dump_control
13822 - added const version of debug_gimple_stmt for gcc plugins, by Emese
13823 - Emese fixed a bug in initify that could have initified too much
13824 - Emese fixed a false positive intentional integer overflow in xfrm4_extract_header, reported by corsac
13825
13826 arch/x86/include/asm/fpu/types.h | 1 +
13827 arch/x86/include/asm/mmu_context.h | 2 +-
13828 block/blk-cgroup.c | 18 ++--
13829 block/cfq-iosched.c | 4 +-
13830 crypto/crypto_user.c | 8 ++-
13831 drivers/acpi/apei/ghes.c | 6 +-
13832 drivers/char/ipmi/ipmi_ssif.c | 12 ++--
13833 drivers/gpu/drm/amd/scheduler/gpu_scheduler.c | 2 +-
13834 drivers/gpu/drm/amd/scheduler/gpu_scheduler.h | 2 +-
13835 drivers/gpu/drm/amd/scheduler/sched_fence.c | 2 +-
13836 drivers/infiniband/core/netlink.c | 5 +-
13837 drivers/infiniband/hw/cxgb4/device.c | 6 +-
13838 drivers/infiniband/hw/cxgb4/iw_cxgb4.h | 2 +-
13839 drivers/md/bcache/alloc.c | 2 +-
13840 drivers/md/bcache/bcache.h | 10 +-
13841 drivers/md/bcache/btree.c | 2 +-
13842 drivers/md/bcache/io.c | 10 +-
13843 drivers/md/bcache/journal.c | 2 +-
13844 drivers/md/bcache/stats.c | 26 +++---
13845 drivers/md/bcache/stats.h | 16 ++--
13846 drivers/md/bcache/super.c | 2 +-
13847 drivers/md/bcache/sysfs.c | 20 +++---
13848 drivers/md/dm-cache-target.c | 98 ++++++++++++------------
13849 drivers/md/dm-raid.c | 2 +-
13850 drivers/md/md.c | 6 +-
13851 drivers/md/md.h | 2 +-
13852 drivers/md/raid1.c | 2 +-
13853 drivers/md/raid10.c | 2 +-
13854 drivers/md/raid5.c | 4 +-
13855 drivers/media/pci/zoran/zoran.h | 1 -
13856 drivers/media/pci/zoran/zoran_driver.c | 3 -
13857 drivers/net/ethernet/sfc/selftest.c | 20 +++---
13858 drivers/net/irda/vlsi_ir.c | 18 ++--
13859 drivers/net/irda/vlsi_ir.h | 14 ++--
13860 drivers/net/wireless/ath/carl9170/carl9170.h | 6 +-
13861 drivers/net/wireless/ath/carl9170/debug.c | 6 +-
13862 drivers/net/wireless/ath/carl9170/main.c | 10 +-
13863 drivers/net/wireless/ath/carl9170/tx.c | 4 +-
13864 drivers/net/wireless/iwlwifi/mvm/d3.c | 4 +-
13865 drivers/net/wireless/iwlwifi/mvm/tx.c | 2 +-
13866 drivers/scsi/hptiop.c | 2 -
13867 drivers/scsi/hptiop.h | 1 -
13868 drivers/scsi/ipr.c | 6 +-
13869 drivers/scsi/ipr.h | 2 +-
13870 drivers/scsi/qla2xxx/qla_target.c | 10 +-
13871 drivers/scsi/qla2xxx/qla_target.h | 2 +-
13872 fs/btrfs/ctree.c | 2 +-
13873 fs/btrfs/ctree.h | 4 +-
13874 fs/btrfs/delayed-ref.c | 4 +-
13875 fs/btrfs/disk-io.c | 4 +-
13876 fs/btrfs/file.c | 4 +-
13877 fs/btrfs/raid56.c | 32 ++++----
13878 fs/btrfs/tests/btrfs-tests.c | 2 +-
13879 fs/btrfs/transaction.c | 2 +-
13880 fs/btrfs/tree-log.c | 8 +-
13881 fs/btrfs/volumes.c | 14 ++--
13882 fs/btrfs/volumes.h | 22 +++---
13883 fs/jbd2/commit.c | 2 +-
13884 fs/jbd2/transaction.c | 4 +-
13885 fs/ocfs2/dlm/dlmcommon.h | 4 +-
13886 fs/ocfs2/dlm/dlmdebug.c | 10 +-
13887 fs/ocfs2/dlm/dlmdomain.c | 4 +-
13888 fs/ocfs2/dlm/dlmmaster.c | 4 +-
13889 include/acpi/ghes.h | 2 +-
13890 include/linux/blk-cgroup.h | 24 +++---
13891 include/linux/jbd2.h | 2 +-
13892 include/linux/netlink.h | 12 ++--
13893 include/net/cfg802154.h | 2 +-
13894 include/net/mac80211.h | 2 +-
13895 include/net/neighbour.h | 2 +-
13896 kernel/rcu/tree_plugin.h | 4 +-
13897 net/batman-adv/routing.c | 4 +-
13898 net/batman-adv/soft-interface.c | 2 +-
13899 net/batman-adv/translation-table.c | 14 ++--
13900 net/batman-adv/types.h | 2 +-
13901 net/core/neighbour.c | 14 ++--
13902 net/core/rtnetlink.c | 2 +-
13903 net/ipv4/arp.c | 2 +-
13904 net/ipv4/inet_diag.c | 4 +-
13905 net/ipv4/xfrm4_state.c | 4 +-
13906 net/ipv6/ndisc.c | 2 +-
13907 net/mac80211/cfg.c | 2 +-
13908 net/mac80211/debugfs_key.c | 2 +-
13909 net/mac80211/key.c | 4 +-
13910 net/mac80211/tx.c | 2 +-
13911 net/mac80211/wpa.c | 10 +-
13912 net/mac802154/iface.c | 4 +-
13913 net/netfilter/ipset/ip_set_core.c | 2 +-
13914 net/netfilter/nf_conntrack_netlink.c | 22 +++---
13915 net/netfilter/nf_tables_api.c | 13 ++--
13916 net/netfilter/nfnetlink_acct.c | 7 +-
13917 net/netfilter/nfnetlink_cthelper.c | 2 +-
13918 net/netfilter/nfnetlink_cttimeout.c | 2 +-
13919 net/netlink/af_netlink.c | 10 ++-
13920 net/netlink/diag.c | 2 +-
13921 net/netlink/genetlink.c | 14 ++--
13922 net/packet/af_packet.c | 18 ++--
13923 net/packet/diag.c | 2 +-
13924 net/packet/internal.h | 6 +-
13925 net/unix/diag.c | 2 +-
13926 net/xfrm/xfrm_user.c | 2 +-
13927 security/apparmor/include/policy.h | 2 +-
13928 security/apparmor/policy.c | 4 +-
13929 sound/core/seq/seq_clientmgr.c | 2 +-
13930 sound/core/seq/seq_fifo.c | 6 +-
13931 sound/core/seq/seq_fifo.h | 2 +-
13932 tools/gcc/gcc-common.h | 24 ++++--
13933 tools/gcc/initify_plugin.c | 7 +-
13934 tools/lib/api/Makefile | 2 +-
13935 109 files changed, 399 insertions(+), 391 deletions(-)
13936
13937 commit a7817402ac837b1aee07fac42537a02097055098
13938 Author: Matt Fleming <matt@codeblueprint.co.uk>
13939 Date: Fri Jan 29 11:36:10 2016 +0000
13940
13941 x86/mm/pat: Avoid truncation when converting cpa->numpages to address
13942
13943 There are a couple of nasty truncation bugs lurking in the pageattr
13944 code that can be triggered when mapping EFI regions, e.g. when we pass
13945 a cpa->pgd pointer. Because cpa->numpages is a 32-bit value, shifting
13946 left by PAGE_SHIFT will truncate the resultant address to 32-bits.
13947
13948 Viorel-Cătălin managed to trigger this bug on his Dell machine that
13949 provides a ~5GB EFI region which requires 1236992 pages to be mapped.
13950 When calling populate_pud() the end of the region gets calculated
13951 incorrectly in the following buggy expression,
13952
13953 end = start + (cpa->numpages << PAGE_SHIFT);
13954
13955 And only 188416 pages are mapped. Next, populate_pud() gets invoked
13956 for a second time because of the loop in __change_page_attr_set_clr(),
13957 only this time no pages get mapped because shifting the remaining
13958 number of pages (1048576) by PAGE_SHIFT is zero. At which point the
13959 loop in __change_page_attr_set_clr() spins forever because we fail to
13960 map progress.
13961
13962 Hitting this bug depends very much on the virtual address we pick to
13963 map the large region at and how many pages we map on the initial run
13964 through the loop. This explains why this issue was only recently hit
13965 with the introduction of commit
13966
13967 a5caa209ba9c ("x86/efi: Fix boot crash by mapping EFI memmap
13968 entries bottom-up at runtime, instead of top-down")
13969
13970 It's interesting to note that safe uses of cpa->numpages do exist in
13971 the pageattr code. If instead of shifting ->numpages we multiply by
13972 PAGE_SIZE, no truncation occurs because PAGE_SIZE is a UL value, and
13973 so the result is unsigned long.
13974
13975 To avoid surprises when users try to convert very large cpa->numpages
13976 values to addresses, change the data type from 'int' to 'unsigned
13977 long', thereby making it suitable for shifting by PAGE_SHIFT without
13978 any type casting.
13979
13980 The alternative would be to make liberal use of casting, but that is
13981 far more likely to cause problems in the future when someone adds more
13982 code and fails to cast properly; this bug was difficult enough to
13983 track down in the first place.
13984
13985 Reported-and-tested-by: Viorel-Cătălin Răpițeanu <rapiteanu.catalin@gmail.com>
13986 Acked-by: Borislav Petkov <bp@alien8.de>
13987 Cc: Sai Praneeth Prakhya <sai.praneeth.prakhya@intel.com>
13988 Cc: <stable@vger.kernel.org>
13989 Signed-off-by: Matt Fleming <matt@codeblueprint.co.uk>
13990 Link: https://bugzilla.kernel.org/show_bug.cgi?id=110131
13991 Link: http://lkml.kernel.org/r/1454067370-10374-1-git-send-email-matt@codeblueprint.co.uk
13992 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
13993
13994 arch/x86/mm/pageattr.c | 4 ++--
13995 1 files changed, 2 insertions(+), 2 deletions(-)
13996
13997 commit 64dd9d7a67a742fda257cdd16510c29e695c34b5
13998 Author: Jan Beulich <JBeulich@suse.com>
13999 Date: Tue Jan 26 04:15:18 2016 -0700
14000
14001 x86/mm: Fix types used in pgprot cacheability flags translations
14002
14003 For PAE kernels "unsigned long" is not suitable to hold page protection
14004 flags, since _PAGE_NX doesn't fit there. This is the reason for quite a
14005 few W+X pages getting reported as insecure during boot (observed namely
14006 for the entire initrd range).
14007
14008 Fixes: 281d4078be ("x86: Make page cache mode a real type")
14009 Signed-off-by: Jan Beulich <jbeulich@suse.com>
14010 Reviewed-by: Juergen Gross <JGross@suse.com>
14011 Cc: stable@vger.kernel.org
14012 Link: http://lkml.kernel.org/r/56A7635602000078000CAFF1@prv-mh.provo.novell.com
14013 Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
14014
14015 arch/x86/include/asm/pgtable_types.h | 6 ++----
14016 1 files changed, 2 insertions(+), 4 deletions(-)
14017
14018 commit bb9a3a9df0d8dfc96d521676e64c42b37ba22aea
14019 Merge: 682d661 f74425b
14020 Author: Brad Spengler <spender@grsecurity.net>
14021 Date: Sun Jan 31 15:06:25 2016 -0500
14022
14023 Merge branch 'pax-test' into grsec-test
14024
14025 Conflicts:
14026 drivers/net/slip/slhc.c
14027 include/linux/sched.h
14028 net/unix/af_unix.c
14029 sound/core/timer.c
14030
14031 commit f74425b5705bfe52aff9e97659ef10c4a14176c3
14032 Merge: d14af1f 849a2d3
14033 Author: Brad Spengler <spender@grsecurity.net>
14034 Date: Sun Jan 31 15:02:55 2016 -0500
14035
14036 Merge branch 'linux-4.3.y' into pax-test
14037
14038 Conflicts:
14039 arch/x86/include/asm/mmu_context.h
14040
14041 commit 682d6611d75542e351c973c8dd74a99d3966c073
14042 Author: Brad Spengler <spender@grsecurity.net>
14043 Date: Sat Jan 30 13:05:03 2016 -0500
14044
14045 Based on a report from Mathias Krause, fix up a number of additional instances
14046 of ulong overflow when passing in values to gr_learn_resource by saturating
14047 to ULONG_MAX
14048
14049 mm/mlock.c | 11 ++++++++---
14050 mm/mmap.c | 16 +++++++++++++---
14051 2 files changed, 21 insertions(+), 6 deletions(-)
14052
14053 commit adb52e95fb9ad4ac9c56cd5d47bd668f47c33096
14054 Author: Jann Horn <jann@thejh.net>
14055 Date: Sat Dec 26 06:00:48 2015 +0100
14056
14057 seccomp: always propagate NO_NEW_PRIVS on tsync
14058
14059 Before this patch, a process with some permissive seccomp filter
14060 that was applied by root without NO_NEW_PRIVS was able to add
14061 more filters to itself without setting NO_NEW_PRIVS by setting
14062 the new filter from a throwaway thread with NO_NEW_PRIVS.
14063
14064 Signed-off-by: Jann Horn <jann@thejh.net>
14065 Cc: stable@vger.kernel.org
14066 Signed-off-by: Kees Cook <keescook@chromium.org>
14067
14068 kernel/seccomp.c | 22 +++++++++++-----------
14069 1 files changed, 11 insertions(+), 11 deletions(-)
14070
14071 commit b85450498a3bbf269441c8963d7574bb3079c838
14072 Merge: 59c216f d14af1f
14073 Author: Brad Spengler <spender@grsecurity.net>
14074 Date: Fri Jan 29 20:54:13 2016 -0500
14075
14076 Merge branch 'pax-test' into grsec-test
14077
14078 commit d14af1f1dd66511f3f0674deee2b572972012b39
14079 Author: Brad Spengler <spender@grsecurity.net>
14080 Date: Fri Jan 29 20:53:51 2016 -0500
14081
14082 Update to pax-linux-4.3.4-test26.patch:
14083 - Emese fixed a few intentional overflows introduced by gcc, reported by StalkR (https://forums.grsecurity.net/viewtopic.php?f=3&t=4370)
14084
14085 fs/cifs/file.c | 2 +-
14086 fs/gfs2/file.c | 2 +-
14087 .../size_overflow_plugin/intentional_overflow.c | 96 ++++++++++++++++++--
14088 tools/gcc/size_overflow_plugin/size_overflow.h | 2 +
14089 .../size_overflow_plugin/size_overflow_plugin.c | 4 +-
14090 .../size_overflow_plugin/size_overflow_transform.c | 6 +-
14091 .../size_overflow_transform_core.c | 5 +
14092 7 files changed, 102 insertions(+), 15 deletions(-)
14093
14094 commit 59c216f13587eacdd692386b7a403ae78ed84fb6
14095 Author: Brad Spengler <spender@grsecurity.net>
14096 Date: Wed Jan 27 17:57:21 2016 -0500
14097
14098 Fix a size_overflow report reported by Mathias Krause in our
14099 truncation of an loff_t to an unsigned long when being passed
14100 to gr_learn_resource() (as all resource checks are against unsigned long
14101 values)
14102
14103 fs/attr.c | 5 ++++-
14104 1 files changed, 4 insertions(+), 1 deletions(-)
14105
14106 commit 70636c6ad60fc1db3af764ecc789b827b7497a97
14107 Author: Yuchung Cheng <ycheng@google.com>
14108 Date: Wed Jan 6 12:42:38 2016 -0800
14109
14110 tcp: fix zero cwnd in tcp_cwnd_reduction
14111
14112 Patch 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode
14113 conditionally") introduced a bug that cwnd may become 0 when both
14114 inflight and sndcnt are 0 (cwnd = inflight + sndcnt). This may lead
14115 to a div-by-zero if the connection starts another cwnd reduction
14116 phase by setting tp->prior_cwnd to the current cwnd (0) in
14117 tcp_init_cwnd_reduction().
14118
14119 To prevent this we skip PRR operation when nothing is acked or
14120 sacked. Then cwnd must be positive in all cases as long as ssthresh
14121 is positive:
14122
14123 1) The proportional reduction mode
14124 inflight > ssthresh > 0
14125
14126 2) The reduction bound mode
14127 a) inflight == ssthresh > 0
14128
14129 b) inflight < ssthresh
14130 sndcnt > 0 since newly_acked_sacked > 0 and inflight < ssthresh
14131
14132 Therefore in all cases inflight and sndcnt can not both be 0.
14133 We check invalid tp->prior_cwnd to avoid potential div0 bugs.
14134
14135 In reality this bug is triggered only with a sequence of less common
14136 events. For example, the connection is terminating an ECN-triggered
14137 cwnd reduction with an inflight 0, then it receives reordered/old
14138 ACKs or DSACKs from prior transmission (which acks nothing). Or the
14139 connection is in fast recovery stage that marks everything lost,
14140 but fails to retransmit due to local issues, then receives data
14141 packets from other end which acks nothing.
14142
14143 Fixes: 3759824da87b ("tcp: PRR uses CRB mode by default and SS mode conditionally")
14144 Reported-by: Oleksandr Natalenko <oleksandr@natalenko.name>
14145 Signed-off-by: Yuchung Cheng <ycheng@google.com>
14146 Signed-off-by: Neal Cardwell <ncardwell@google.com>
14147 Signed-off-by: Eric Dumazet <edumazet@google.com>
14148 Signed-off-by: David S. Miller <davem@davemloft.net>
14149
14150 net/ipv4/tcp_input.c | 3 +++
14151 1 files changed, 3 insertions(+), 0 deletions(-)
14152
14153 commit dac1da2bedbb43195d371c7a192cfeeb45683df0
14154 Author: Eric Dumazet <edumazet@google.com>
14155 Date: Sun Jan 24 13:53:50 2016 -0800
14156
14157 af_unix: fix struct pid memory leak
14158
14159 Dmitry reported a struct pid leak detected by a syzkaller program.
14160
14161 Bug happens in unix_stream_recvmsg() when we break the loop when a
14162 signal is pending, without properly releasing scm.
14163
14164 Fixes: b3ca9b02b007 ("net: fix multithreaded signal handling in unix recv routines")
14165 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14166 Signed-off-by: Eric Dumazet <edumazet@google.com>
14167 Cc: Rainer Weikusat <rweikusat@mobileactivedefense.com>
14168 Signed-off-by: David S. Miller <davem@davemloft.net>
14169
14170 net/unix/af_unix.c | 1 +
14171 1 files changed, 1 insertions(+), 0 deletions(-)
14172
14173 commit 15cc47f127520d1ac0c1fe76d993c2c27f0f2571
14174 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14175 Date: Fri Jan 22 01:39:43 2016 +0100
14176
14177 pptp: fix illegal memory access caused by multiple bind()s
14178
14179 Several times already this has been reported as kasan reports caused by
14180 syzkaller and trinity and people always looked at RCU races, but it is
14181 much more simple. :)
14182
14183 In case we bind a pptp socket multiple times, we simply add it to
14184 the callid_sock list but don't remove the old binding. Thus the old
14185 socket stays in the bucket with unused call_id indexes and doesn't get
14186 cleaned up. This causes various forms of kasan reports which were hard
14187 to pinpoint.
14188
14189 Simply don't allow multiple binds and correct error handling in
14190 pptp_bind. Also keep sk_state bits in place in pptp_connect.
14191
14192 Fixes: 00959ade36acad ("PPTP: PPP over IPv4 (Point-to-Point Tunneling Protocol)")
14193 Cc: Dmitry Kozlov <xeb@mail.ru>
14194 Cc: Sasha Levin <sasha.levin@oracle.com>
14195 Cc: Dmitry Vyukov <dvyukov@google.com>
14196 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14197 Cc: Dave Jones <davej@codemonkey.org.uk>
14198 Reported-by: Dave Jones <davej@codemonkey.org.uk>
14199 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14200 Signed-off-by: David S. Miller <davem@davemloft.net>
14201
14202 drivers/net/ppp/pptp.c | 34 ++++++++++++++++++++++++----------
14203 1 files changed, 24 insertions(+), 10 deletions(-)
14204
14205 commit e2b7b8c66851c85188fa6dab2d2b2a6c85bc7332
14206 Author: Brad Spengler <spender@grsecurity.net>
14207 Date: Tue Jan 26 18:17:10 2016 -0500
14208
14209 Add info about cpupower/powertop to GRKERNSEC_KMEM, was present on our
14210 wiki but was removed from the config help at some point
14211
14212 grsecurity/Kconfig | 3 +++
14213 1 files changed, 3 insertions(+), 0 deletions(-)
14214
14215 commit ce2e88efa000fc32bfcd84098f57c8ed8310fefc
14216 Author: Thomas Egerer <hakke_007@gmx.de>
14217 Date: Mon Jan 25 12:58:44 2016 +0100
14218
14219 ipv4+ipv6: Make INET*_ESP select CRYPTO_ECHAINIV
14220
14221 The ESP algorithms using CBC mode require echainiv. Hence INET*_ESP have
14222 to select CRYPTO_ECHAINIV in order to work properly. This solves the
14223 issues caused by a misconfiguration as described in [1].
14224 The original approach, patching crypto/Kconfig was turned down by
14225 Herbert Xu [2].
14226
14227 [1] https://lists.strongswan.org/pipermail/users/2015-December/009074.html
14228 [2] http://marc.info/?l=linux-crypto-vger&m=145224655809562&w=2
14229
14230 Signed-off-by: Thomas Egerer <hakke_007@gmx.de>
14231 Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
14232 Signed-off-by: David S. Miller <davem@davemloft.net>
14233
14234 net/ipv4/Kconfig | 1 +
14235 net/ipv6/Kconfig | 1 +
14236 2 files changed, 2 insertions(+), 0 deletions(-)
14237
14238 commit fca5a303155ea67d28aece0caf2b03ffc3b2668d
14239 Merge: 904114c 6339c1f
14240 Author: Brad Spengler <spender@grsecurity.net>
14241 Date: Tue Jan 26 18:08:40 2016 -0500
14242
14243 Merge branch 'pax-test' into grsec-test
14244
14245 commit 6339c1f9a9beafd417bf9f04d4b257e62aeb45b7
14246 Author: Brad Spengler <spender@grsecurity.net>
14247 Date: Tue Jan 26 18:07:51 2016 -0500
14248
14249 Update to pax-linux-4.3.4-test25.patch:
14250 - fixed incorrect handling of VM_DONTCOPY during fork that would trigger a consistency check in the vma mirroring logic, reported by Mathias Krause <minipli@googlemail.com>
14251 - fixed init_new_context on !MODIFY_LDT_SYSCALL configs, reported by tjh (https://forums.grsecurity.net/viewtopic.php?f=3&t=4368)
14252 - fixed a few REFCOUNT false positives in SNMP related statistics
14253
14254 arch/x86/Kconfig | 2 +-
14255 arch/x86/include/asm/mmu_context.h | 17 +++++++++++++++++
14256 include/net/snmp.h | 10 +++++-----
14257 kernel/fork.c | 11 +++++++++--
14258 net/ipv4/proc.c | 8 ++++----
14259 net/ipv6/addrconf.c | 4 ++--
14260 net/ipv6/proc.c | 10 +++++-----
14261 7 files changed, 43 insertions(+), 19 deletions(-)
14262
14263 commit 904114c2fce3fdff5d57e763da56a78960db4e19
14264 Author: Al Viro <viro@zeniv.linux.org.uk>
14265 Date: Fri Jan 22 18:08:52 2016 -0500
14266
14267 make sure that freeing shmem fast symlinks is RCU-delayed
14268
14269 Cc: stable@vger.kernel.org # v4.2+
14270 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
14271
14272 include/linux/shmem_fs.h | 5 +----
14273 mm/shmem.c | 9 ++++-----
14274 2 files changed, 5 insertions(+), 9 deletions(-)
14275
14276 commit ab86adee64312a2f827dd516cb199521327943ed
14277 Author: Sasha Levin <sasha.levin@oracle.com>
14278 Date: Mon Jan 18 19:23:51 2016 -0500
14279
14280 netfilter: nf_conntrack: use safer way to lock all buckets
14281
14282 When we need to lock all buckets in the connection hashtable we'd attempt to
14283 lock 1024 spinlocks, which is way more preemption levels than supported by
14284 the kernel. Furthermore, this behavior was hidden by checking if lockdep is
14285 enabled, and if it was - use only 8 buckets(!).
14286
14287 Fix this by using a global lock and synchronize all buckets on it when we
14288 need to lock them all. This is pretty heavyweight, but is only done when we
14289 need to resize the hashtable, and that doesn't happen often enough (or at all).
14290
14291 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
14292 Acked-by: Jesper Dangaard Brouer <brouer@redhat.com>
14293 Reviewed-by: Florian Westphal <fw@strlen.de>
14294 Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
14295
14296 Conflicts:
14297
14298 net/netfilter/nfnetlink_cttimeout.c
14299
14300 include/net/netfilter/nf_conntrack_core.h | 8 ++----
14301 net/netfilter/nf_conntrack_core.c | 38 +++++++++++++++++++++-------
14302 net/netfilter/nf_conntrack_helper.c | 2 +-
14303 net/netfilter/nf_conntrack_netlink.c | 2 +-
14304 4 files changed, 33 insertions(+), 17 deletions(-)
14305
14306 commit 37014723527225481c720484bb788a1a6358072f
14307 Author: Willy Tarreau <w@1wt.eu>
14308 Date: Mon Jan 18 16:36:09 2016 +0100
14309
14310 pipe: limit the per-user amount of pages allocated in pipes
14311
14312 On no-so-small systems, it is possible for a single process to cause an
14313 OOM condition by filling large pipes with data that are never read. A
14314 typical process filling 4000 pipes with 1 MB of data will use 4 GB of
14315 memory. On small systems it may be tricky to set the pipe max size to
14316 prevent this from happening.
14317
14318 This patch makes it possible to enforce a per-user soft limit above
14319 which new pipes will be limited to a single page, effectively limiting
14320 them to 4 kB each, as well as a hard limit above which no new pipes may
14321 be created for this user. This has the effect of protecting the system
14322 against memory abuse without hurting other users, and still allowing
14323 pipes to work correctly though with less data at once.
14324
14325 The limit are controlled by two new sysctls : pipe-user-pages-soft, and
14326 pipe-user-pages-hard. Both may be disabled by setting them to zero. The
14327 default soft limit allows the default number of FDs per process (1024)
14328 to create pipes of the default size (64kB), thus reaching a limit of 64MB
14329 before starting to create only smaller pipes. With 256 processes limited
14330 to 1024 FDs each, this results in 1024*64kB + (256*1024 - 1024) * 4kB =
14331 1084 MB of memory allocated for a user. The hard limit is disabled by
14332 default to avoid breaking existing applications that make intensive use
14333 of pipes (eg: for splicing).
14334
14335 Reported-by: socketpair@gmail.com
14336 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
14337 Mitigates: CVE-2013-4312 (Linux 2.0+)
14338 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14339 Signed-off-by: Willy Tarreau <w@1wt.eu>
14340 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
14341
14342 Documentation/sysctl/fs.txt | 23 +++++++++++++++++++++
14343 fs/pipe.c | 47 +++++++++++++++++++++++++++++++++++++++++-
14344 include/linux/pipe_fs_i.h | 4 +++
14345 include/linux/sched.h | 1 +
14346 kernel/sysctl.c | 14 ++++++++++++
14347 5 files changed, 87 insertions(+), 2 deletions(-)
14348
14349 commit 51645fa198d194f746651dcfbc5f24a4cf8b9fb8
14350 Merge: 540f2af 7791ecb
14351 Author: Brad Spengler <spender@grsecurity.net>
14352 Date: Sat Jan 23 10:57:11 2016 -0500
14353
14354 Merge branch 'pax-test' into grsec-test
14355
14356 commit 7791ecb84f840343a5646236fd0d34e1fb450793
14357 Merge: 470069c 399588c
14358 Author: Brad Spengler <spender@grsecurity.net>
14359 Date: Sat Jan 23 10:56:47 2016 -0500
14360
14361 Merge branch 'linux-4.3.y' into pax-test
14362
14363 commit 540f2affebd42cdc26a699208ab4f1cb0cb75e33
14364 Author: Brad Spengler <spender@grsecurity.net>
14365 Date: Tue Jan 19 21:18:47 2016 -0500
14366
14367 Update size_overflow hash table
14368
14369 .../size_overflow_plugin/size_overflow_hash.data | 4 +++-
14370 1 files changed, 3 insertions(+), 1 deletions(-)
14371
14372 commit 7e649765626a28437f573f0fbe7a51a04615f041
14373 Author: Brad Spengler <spender@grsecurity.net>
14374 Date: Tue Jan 19 20:29:46 2016 -0500
14375
14376 Backport fix from: https://lkml.org/lkml/2015/12/13/187
14377
14378 fs/ext4/extents.c | 2 +-
14379 1 files changed, 1 insertions(+), 1 deletions(-)
14380
14381 commit 53b859cd0a5f5b6ad54fe0c879dfedaa3c5a3005
14382 Author: Jann Horn <jann@thejh.net>
14383 Date: Tue Jan 5 18:27:30 2016 +0100
14384
14385 compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)
14386
14387 This replaces all code in fs/compat_ioctl.c that translated
14388 ioctl arguments into a in-kernel structure, then performed
14389 do_ioctl under set_fs(KERNEL_DS), with code that allocates
14390 data on the user stack and can call the VFS ioctl handler
14391 under USER_DS.
14392
14393 This is done as a hardening measure because the caller
14394 does not know what kind of ioctl handler will be invoked,
14395 only that no corresponding compat_ioctl handler exists and
14396 what the ioctl command number is. The accidental
14397 invocation of an unlocked_ioctl handler that unexpectedly
14398 calls copy_to_user could be a severe security issue.
14399
14400 Signed-off-by: Jann Horn <jann@thejh.net>
14401 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
14402
14403 Conflicts:
14404
14405 fs/compat_ioctl.c
14406
14407 fs/compat_ioctl.c | 130 ++++++++++++++++++++++++++++-------------------------
14408 1 files changed, 68 insertions(+), 62 deletions(-)
14409
14410 commit 3e89e770ae27e931cd1583f021abac41eeebc3e7
14411 Author: Al Viro <viro@zeniv.linux.org.uk>
14412 Date: Thu Jan 7 09:53:30 2016 -0500
14413
14414 compat_ioctl: don't pass fd around when not needed
14415
14416 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
14417
14418 fs/compat_ioctl.c | 103 ++++++++++++++++++++++++++--------------------------
14419 fs/internal.h | 7 ++++
14420 fs/ioctl.c | 4 +-
14421 include/linux/fs.h | 2 -
14422 4 files changed, 61 insertions(+), 55 deletions(-)
14423
14424 commit 9d4e04082752d4d2d68445c4e6faf33a2613df55
14425 Author: Jann Horn <jann@thejh.net>
14426 Date: Tue Jan 5 18:27:29 2016 +0100
14427
14428 compat_ioctl: don't look up the fd twice
14429
14430 In code in fs/compat_ioctl.c that translates ioctl arguments
14431 into a in-kernel structure, then performs sys_ioctl, possibly
14432 under set_fs(KERNEL_DS), this commit changes the sys_ioctl
14433 calls to do_ioctl calls. do_ioctl is a new function that does
14434 the same thing as sys_ioctl, but doesn't look up the fd again.
14435
14436 This change is made to avoid (potential) security issues
14437 because of ioctl handlers that accept one of the ioctl
14438 commands I2C_FUNCS, VIDEO_GET_EVENT, MTIOCPOS, MTIOCGET,
14439 TIOCGSERIAL, TIOCSSERIAL, RTC_IRQP_READ, RTC_EPOCH_READ.
14440 This can happen for multiple reasons:
14441
14442 - The ioctl command number could be reused.
14443 - The ioctl handler might not check the full ioctl
14444 command. This is e.g. true for drm_ioctl.
14445 - The ioctl handler is very special, e.g. cuse_file_ioctl
14446
14447 The real issue is that set_fs(KERNEL_DS) is used here,
14448 but that's fixed in a separate commit
14449 "compat_ioctl: don't call do_ioctl under set_fs(KERNEL_DS)".
14450
14451 This change mitigates potential security issues by
14452 preventing a race that permits invocation of
14453 unlocked_ioctl handlers under KERNEL_DS through compat
14454 code even if a corresponding compat_ioctl handler exists.
14455
14456 So far, no way has been identified to use this to damage
14457 kernel memory without having CAP_SYS_ADMIN in the init ns
14458 (with the capability, doing reads/writes at arbitrary
14459 kernel addresses should be easy through CUSE's ioctl
14460 handler with FUSE_IOCTL_UNRESTRICTED set).
14461
14462 [AV: two missed sys_ioctl() taken care of]
14463
14464 Signed-off-by: Jann Horn <jann@thejh.net>
14465 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
14466
14467 fs/compat_ioctl.c | 122 +++++++++++++++++++++++++++++-----------------------
14468 1 files changed, 68 insertions(+), 54 deletions(-)
14469
14470 commit 5bf9e1ed4ebb278cd956ba142914fc04a024309c
14471 Author: Vasily Kulikov <segoon@openwall.com>
14472 Date: Fri Jan 15 16:57:55 2016 -0800
14473
14474 include/linux/poison.h: use POISON_POINTER_DELTA for poison pointers
14475
14476 TIMER_ENTRY_STATIC is defined as a poison pointers which
14477 should point to nowhere. Redefine them using POISON_POINTER_DELTA
14478 arithmetics to make sure they really point to non-mappable area declared
14479 by the target architecture.
14480
14481 Signed-off-by: Vasily Kulikov <segoon@openwall.com>
14482 Acked-by: Thomas Gleixner <tglx@linutronix.de>
14483 Cc: Solar Designer <solar@openwall.com>
14484 Cc: "Kirill A. Shutemov" <kirill.shutemov@linux.intel.com>
14485 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
14486 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
14487
14488 Conflicts:
14489
14490 include/linux/poison.h
14491
14492 include/linux/poison.h | 2 +-
14493 1 files changed, 1 insertions(+), 1 deletions(-)
14494
14495 commit 60f2e0a05ab8f56c804a9334a23e2b446305d110
14496 Author: Brad Spengler <spender@grsecurity.net>
14497 Date: Tue Jan 19 19:41:44 2016 -0500
14498
14499 Fix ARM compilation, reported by Austin Sepp
14500
14501 grsecurity/grsec_sig.c | 1 +
14502 1 files changed, 1 insertions(+), 0 deletions(-)
14503
14504 commit e15383743443dc43460a2fd73e0db0b608610dca
14505 Author: Takashi Iwai <tiwai@suse.de>
14506 Date: Mon Jan 18 13:52:47 2016 +0100
14507
14508 ALSA: hrtimer: Fix stall by hrtimer_cancel()
14509
14510 hrtimer_cancel() waits for the completion from the callback, thus it
14511 must not be called inside the callback itself. This was already a
14512 problem in the past with ALSA hrtimer driver, and the early commit
14513 [fcfdebe70759: ALSA: hrtimer - Fix lock-up] tried to address it.
14514
14515 However, the previous fix is still insufficient: it may still cause a
14516 lockup when the ALSA timer instance reprograms itself in its callback.
14517 Then it invokes the start function even in snd_timer_interrupt() that
14518 is called in hrtimer callback itself, results in a CPU stall. This is
14519 no hypothetical problem but actually triggered by syzkaller fuzzer.
14520
14521 This patch tries to fix the issue again. Now we call
14522 hrtimer_try_to_cancel() at both start and stop functions so that it
14523 won't fall into a deadlock, yet giving some chance to cancel the queue
14524 if the functions have been called outside the callback. The proper
14525 hrtimer_cancel() is called in anyway at closing, so this should be
14526 enough.
14527
14528 Reported-and-tested-by: Dmitry Vyukov <dvyukov@google.com>
14529 Cc: <stable@vger.kernel.org>
14530 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14531
14532 sound/core/hrtimer.c | 3 ++-
14533 1 files changed, 2 insertions(+), 1 deletions(-)
14534
14535 commit 12d874daf706e6e7c1ae709141859c809599297e
14536 Author: Takashi Iwai <tiwai@suse.de>
14537 Date: Tue Jan 12 12:38:02 2016 +0100
14538
14539 ALSA: seq: Fix missing NULL check at remove_events ioctl
14540
14541 snd_seq_ioctl_remove_events() calls snd_seq_fifo_clear()
14542 unconditionally even if there is no FIFO assigned, and this leads to
14543 an Oops due to NULL dereference. The fix is just to add a proper NULL
14544 check.
14545
14546 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14547 Tested-by: Dmitry Vyukov <dvyukov@google.com>
14548 Cc: <stable@vger.kernel.org>
14549 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14550
14551 sound/core/seq/seq_clientmgr.c | 2 +-
14552 1 files changed, 1 insertions(+), 1 deletions(-)
14553
14554 commit 2eb0632df1351378946507e7ef7ba0682632a7b5
14555 Author: Takashi Iwai <tiwai@suse.de>
14556 Date: Tue Jan 12 15:36:27 2016 +0100
14557
14558 ALSA: seq: Fix race at timer setup and close
14559
14560 ALSA sequencer code has an open race between the timer setup ioctl and
14561 the close of the client. This was triggered by syzkaller fuzzer, and
14562 a use-after-free was caught there as a result.
14563
14564 This patch papers over it by adding a proper queue->timer_mutex lock
14565 around the timer-related calls in the relevant code path.
14566
14567 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14568 Tested-by: Dmitry Vyukov <dvyukov@google.com>
14569 Cc: <stable@vger.kernel.org>
14570 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14571
14572 sound/core/seq/seq_queue.c | 2 ++
14573 1 files changed, 2 insertions(+), 0 deletions(-)
14574
14575 commit b9e55ab955e59b4a636d78a748be90334a48b485
14576 Author: Takashi Iwai <tiwai@suse.de>
14577 Date: Thu Jan 14 16:30:58 2016 +0100
14578
14579 ALSA: timer: Harden slave timer list handling
14580
14581 A slave timer instance might be still accessible in a racy way while
14582 operating the master instance as it lacks of locking. Since the
14583 master operation is mostly protected with timer->lock, we should cope
14584 with it while changing the slave instance, too. Also, some linked
14585 lists (active_list and ack_list) of slave instances aren't unlinked
14586 immediately at stopping or closing, and this may lead to unexpected
14587 accesses.
14588
14589 This patch tries to address these issues. It adds spin lock of
14590 timer->lock (either from master or slave, which is equivalent) in a
14591 few places. For avoiding a deadlock, we ensure that the global
14592 slave_active_lock is always locked at first before each timer lock.
14593
14594 Also, ack and active_list of slave instances are properly unlinked at
14595 snd_timer_stop() and snd_timer_close().
14596
14597 Last but not least, remove the superfluous call of _snd_timer_stop()
14598 at removing slave links. This is a noop, and calling it may confuse
14599 readers wrt locking. Further cleanup will follow in a later patch.
14600
14601 Actually we've got reports of use-after-free by syzkaller fuzzer, and
14602 this hopefully fixes these issues.
14603
14604 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14605 Cc: <stable@vger.kernel.org>
14606 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14607
14608 sound/core/timer.c | 18 ++++++++++++++----
14609 1 files changed, 14 insertions(+), 4 deletions(-)
14610
14611 commit f1ce0547bdfda1b42ae8a66c222f2a897cbe1586
14612 Author: Takashi Iwai <tiwai@suse.de>
14613 Date: Wed Jan 13 17:48:01 2016 +0100
14614
14615 ALSA: timer: Fix race among timer ioctls
14616
14617 ALSA timer ioctls have an open race and this may lead to a
14618 use-after-free of timer instance object. A simplistic fix is to make
14619 each ioctl exclusive. We have already tread_sem for controlling the
14620 tread, and extend this as a global mutex to be applied to each ioctl.
14621
14622 The downside is, of course, the worse concurrency. But these ioctls
14623 aren't to be parallel accessible, in anyway, so it should be fine to
14624 serialize there.
14625
14626 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14627 Tested-by: Dmitry Vyukov <dvyukov@google.com>
14628 Cc: <stable@vger.kernel.org>
14629 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14630
14631 sound/core/timer.c | 32 +++++++++++++++++++-------------
14632 1 files changed, 19 insertions(+), 13 deletions(-)
14633
14634 commit 8347d8461ed48a98f9c76cc3cfcdad8217d314bc
14635 Author: Takashi Iwai <tiwai@suse.de>
14636 Date: Wed Jan 13 21:35:06 2016 +0100
14637
14638 ALSA: timer: Fix double unlink of active_list
14639
14640 ALSA timer instance object has a couple of linked lists and they are
14641 unlinked unconditionally at snd_timer_stop(). Meanwhile
14642 snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
14643 the element list itself unchanged. This ends up with unlinking twice,
14644 and it was caught by syzkaller fuzzer.
14645
14646 The fix is to use list_del_init() variant properly there, too.
14647
14648 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14649 Tested-by: Dmitry Vyukov <dvyukov@google.com>
14650 Cc: <stable@vger.kernel.org>
14651 Signed-off-by: Takashi Iwai <tiwai@suse.de>
14652
14653 sound/core/timer.c | 2 +-
14654 1 files changed, 1 insertions(+), 1 deletions(-)
14655
14656 commit 243aebb7ae71d6e11ea9880faa893d1d0d60cd75
14657 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
14658 Date: Mon Jan 18 18:03:48 2016 +0100
14659
14660 ovs: limit ovs recursions in ovs_execute_actions to not corrupt stack
14661
14662 It was seen that defective configurations of openvswitch could overwrite
14663 the STACK_END_MAGIC and cause a hard crash of the kernel because of too
14664 many recursions within ovs.
14665
14666 This problem arises due to the high stack usage of openvswitch. The rest
14667 of the kernel is fine with the current limit of 10 (RECURSION_LIMIT).
14668
14669 We use the already existing recursion counter in ovs_execute_actions to
14670 implement an upper bound of 5 recursions.
14671
14672 Cc: Pravin Shelar <pshelar@ovn.org>
14673 Cc: Simon Horman <simon.horman@netronome.com>
14674 Cc: Eric Dumazet <eric.dumazet@gmail.com>
14675 Cc: Simon Horman <simon.horman@netronome.com>
14676 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14677 Signed-off-by: David S. Miller <davem@davemloft.net>
14678
14679 net/openvswitch/actions.c | 19 ++++++++++++++-----
14680 1 files changed, 14 insertions(+), 5 deletions(-)
14681
14682 commit 8080793479c6d5befe37a67b1dbd9e4e0a61af96
14683 Author: Ursula Braun <ursula.braun@de.ibm.com>
14684 Date: Tue Jan 19 10:41:33 2016 +0100
14685
14686 af_iucv: Validate socket address length in iucv_sock_bind()
14687
14688 Signed-off-by: Ursula Braun <ursula.braun@de.ibm.com>
14689 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14690 Reviewed-by: Evgeny Cherkashin <Eugene.Crosser@ru.ibm.com>
14691 Signed-off-by: David S. Miller <davem@davemloft.net>
14692
14693 net/iucv/af_iucv.c | 3 +++
14694 1 files changed, 3 insertions(+), 0 deletions(-)
14695
14696 commit 50a383c1c91ed7409c3cbdd41e662d6891463d1b
14697 Author: Brad Spengler <spender@grsecurity.net>
14698 Date: Tue Jan 19 19:32:54 2016 -0500
14699
14700 Apply the same fix as everyone else for the recent keys vulnerability that is
14701 unexploitable under PAX_REFCOUNT
14702
14703 Make a couple more changes that no one else can/will
14704
14705 include/linux/key-type.h | 4 ++--
14706 ipc/msgutil.c | 4 ++--
14707 security/keys/internal.h | 2 +-
14708 security/keys/process_keys.c | 1 +
14709 4 files changed, 6 insertions(+), 5 deletions(-)
14710
14711 commit b56c3a63f431c193400aee17543021950bd14bc4
14712 Merge: 38b1a3d 470069c
14713 Author: Brad Spengler <spender@grsecurity.net>
14714 Date: Sun Jan 17 18:30:19 2016 -0500
14715
14716 Merge branch 'pax-test' into grsec-test
14717
14718 commit 470069cfedef2180313233d275be5901bd6d1135
14719 Author: Brad Spengler <spender@grsecurity.net>
14720 Date: Sun Jan 17 18:29:59 2016 -0500
14721
14722 Update to pax-linux-4.3.3-test22.patch:
14723 - Emesed fixed a gcc induced intentional integer overflow in asix_rx_fixup_internal, reported by thomas callison caffrey
14724 - fixed some more fallout from the drm_drivers constification, reported by Colin Childs and Toralf Foerster
14725
14726 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 ++++----------
14727 drivers/gpu/drm/drm_pci.c | 3 +++
14728 drivers/gpu/drm/gma500/psb_drv.c | 4 ----
14729 drivers/gpu/drm/i915/i915_drv.c | 16 ++++++++--------
14730 drivers/gpu/drm/nouveau/nouveau_drm.c | 6 +++---
14731 drivers/gpu/drm/radeon/radeon_drv.c | 4 +---
14732 drivers/net/usb/asix_common.c | 3 ++-
14733 include/drm/drmP.h | 1 +
14734 8 files changed, 22 insertions(+), 29 deletions(-)
14735
14736 commit 38b1a3d676f407865c3d41840df8213c5ad639c1
14737 Author: Brad Spengler <spender@grsecurity.net>
14738 Date: Sun Jan 17 12:33:53 2016 -0500
14739
14740 As reported by Luis Ressel, the Kconfig help for GRKERNSEC_BRUTE
14741 mentioned banning execution of suid/sgid binaries, though the kernel
14742 source clearly only mentions banning execution of suid binaries. Since
14743 there's no reason for us to not ban execution of sgid binaries as well,
14744 make the implementation match the Kconfig description.
14745
14746 fs/exec.c | 4 ++--
14747 grsecurity/grsec_sig.c | 27 ++++++++++++++-------------
14748 include/linux/sched.h | 4 ++--
14749 3 files changed, 18 insertions(+), 17 deletions(-)
14750
14751 commit 8c3bcb7dbf7f606acfa0983e81f0f928da1f1ace
14752 Merge: d141a86 ea4a835
14753 Author: Brad Spengler <spender@grsecurity.net>
14754 Date: Sat Jan 16 14:12:22 2016 -0500
14755
14756 Merge branch 'pax-test' into grsec-test
14757
14758 Conflicts:
14759 drivers/gpu/drm/i810/i810_drv.c
14760
14761 commit ea4a835328ada6513ac013986764d6caea8cd348
14762 Author: Brad Spengler <spender@grsecurity.net>
14763 Date: Sat Jan 16 14:11:30 2016 -0500
14764
14765 Update to pax-linux-4.3.3-test21.patch:
14766 - fixed some fallout from the drm_drivers constification, reported by spender
14767
14768 drivers/gpu/drm/armada/armada_drv.c | 3 +--
14769 drivers/gpu/drm/exynos/exynos_drm_drv.c | 1 -
14770 drivers/gpu/drm/i810/i810_dma.c | 2 +-
14771 drivers/gpu/drm/i810/i810_drv.c | 6 +++++-
14772 drivers/gpu/drm/i810/i810_drv.h | 2 +-
14773 5 files changed, 8 insertions(+), 6 deletions(-)
14774
14775 commit d141a86fd66194bc3f896b6809b189e2f12a9a83
14776 Author: Brad Spengler <spender@grsecurity.net>
14777 Date: Sat Jan 16 13:16:36 2016 -0500
14778
14779 compile fix
14780
14781 drivers/gpu/drm/i810/i810_dma.c | 2 +-
14782 drivers/gpu/drm/i810/i810_drv.c | 4 +++-
14783 drivers/gpu/drm/i810/i810_drv.h | 2 +-
14784 3 files changed, 5 insertions(+), 3 deletions(-)
14785
14786 commit 0d9dc4b25ea32c14561bcfe6b5b24f1b00fe0270
14787 Merge: 5fa135d bbda879
14788 Author: Brad Spengler <spender@grsecurity.net>
14789 Date: Sat Jan 16 12:59:22 2016 -0500
14790
14791 Merge branch 'pax-test' into grsec-test
14792
14793 commit bbda87914edf63e27fb46670bf3a373f2b963c73
14794 Author: Brad Spengler <spender@grsecurity.net>
14795 Date: Sat Jan 16 12:58:04 2016 -0500
14796
14797 Update to pax-linux-4.3.3-test20.patch:
14798 - constified drm_driver
14799 - Emese fixed a special case in handling __func__ in the initify plugin
14800 - Emese fixed a false positive size overflow report in handling inbufBits, reported by Martin Filo (https://bugs.gentoo.org/show_bug.cgi?id=567048)
14801 - fixed regression that caused perf to not resolve kernel code addresses under KERNEXEC/i386, reported by minipli
14802
14803 arch/x86/kernel/cpu/perf_event.h | 2 +-
14804 arch/x86/kernel/cpu/perf_event_intel_ds.c | 7 +-
14805 arch/x86/kernel/cpu/perf_event_intel_lbr.c | 4 +-
14806 arch/x86/kernel/uprobes.c | 2 +-
14807 arch/x86/mm/mpx.c | 2 +-
14808 drivers/gpu/drm/amd/amdgpu/amdgpu.h | 2 +-
14809 drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 ++-
14810 drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +-
14811 drivers/gpu/drm/drm_pci.c | 6 +-
14812 drivers/gpu/drm/gma500/psb_drv.c | 5 +-
14813 drivers/gpu/drm/i915/i915_dma.c | 2 +-
14814 drivers/gpu/drm/i915/i915_drv.c | 15 ++--
14815 drivers/gpu/drm/i915/i915_drv.h | 2 +-
14816 drivers/gpu/drm/i915/i915_irq.c | 88 ++++++++++----------
14817 drivers/gpu/drm/mga/mga_drv.c | 5 +-
14818 drivers/gpu/drm/mga/mga_drv.h | 2 +-
14819 drivers/gpu/drm/mga/mga_state.c | 2 +-
14820 drivers/gpu/drm/nouveau/nouveau_drm.c | 13 ++--
14821 drivers/gpu/drm/qxl/qxl_drv.c | 8 ++-
14822 drivers/gpu/drm/qxl/qxl_ioctl.c | 2 +-
14823 drivers/gpu/drm/r128/r128_drv.c | 4 +-
14824 drivers/gpu/drm/r128/r128_drv.h | 2 +-
14825 drivers/gpu/drm/r128/r128_state.c | 2 +-
14826 drivers/gpu/drm/radeon/radeon_drv.c | 17 +++-
14827 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
14828 drivers/gpu/drm/radeon/radeon_kms.c | 2 +-
14829 drivers/gpu/drm/radeon/radeon_state.c | 2 +-
14830 drivers/gpu/drm/savage/savage_bci.c | 2 +-
14831 drivers/gpu/drm/savage/savage_drv.c | 5 +-
14832 drivers/gpu/drm/savage/savage_drv.h | 2 +-
14833 drivers/gpu/drm/sis/sis_drv.c | 5 +-
14834 drivers/gpu/drm/sis/sis_drv.h | 2 +-
14835 drivers/gpu/drm/sis/sis_mm.c | 2 +-
14836 drivers/gpu/drm/via/via_dma.c | 2 +-
14837 drivers/gpu/drm/via/via_drv.c | 5 +-
14838 drivers/gpu/drm/via/via_drv.h | 2 +-
14839 include/drm/drmP.h | 2 +-
14840 mm/slab.c | 2 +-
14841 net/sunrpc/xprtrdma/svc_rdma.c | 6 +-
14842 tools/gcc/initify_plugin.c | 15 +++-
14843 .../disable_size_overflow_hash.data | 1 +
14844 .../size_overflow_plugin/size_overflow_hash.data | 3 +-
14845 42 files changed, 156 insertions(+), 110 deletions(-)
14846
14847 commit 5fa135dc116350e0205c39ef65eaf6496ed2748a
14848 Author: Brad Spengler <spender@grsecurity.net>
14849 Date: Sat Jan 16 12:19:23 2016 -0500
14850
14851 compile fix
14852
14853 grsecurity/grsec_sig.c | 3 +--
14854 1 files changed, 1 insertions(+), 2 deletions(-)
14855
14856 commit a9090fa58f33f75c7450fda5721a9b13625a47d9
14857 Author: Brad Spengler <spender@grsecurity.net>
14858 Date: Sat Jan 16 12:10:37 2016 -0500
14859
14860 As pointed out by Jann Horn, some distros are starting to circumvent
14861 previous assumptions about the attainability of a user to control
14862 multiple UIDs by handing out suid binaries that allow a user to run
14863 processes (including exploits) under a number of other pre-defined
14864 UIDs. As this could potentially be used to bypass GRKERNSEC_BRUTE
14865 (though it would have to involve some code path that doesn't involve
14866 locks) fix that here by ensuring no more than 8 users on a system can
14867 be banned before a reboot is required. If more are banned, a panic
14868 is triggered.
14869
14870 grsecurity/grsec_sig.c | 8 ++++++++
14871 1 files changed, 8 insertions(+), 0 deletions(-)
14872
14873 commit a8d37776e9521c567ebff6730d49312f72435f08
14874 Author: Eric Dumazet <edumazet@google.com>
14875 Date: Thu Dec 3 11:12:07 2015 -0800
14876
14877 proc: add a reschedule point in proc_readfd_common()
14878
14879 User can pass an arbitrary large buffer to getdents().
14880
14881 It is typically a 32KB buffer used by libc scandir() implementation.
14882
14883 When scanning /proc/{pid}/fd, we can hold cpu way too long,
14884 so add a cond_resched() to be kind with other tasks.
14885
14886 We've seen latencies of more than 50ms on real workloads.
14887
14888 Signed-off-by: Eric Dumazet <edumazet@google.com>
14889 Cc: Alexander Viro <viro@zeniv.linux.org.uk>
14890 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
14891
14892 fs/proc/fd.c | 1 +
14893 1 files changed, 1 insertions(+), 0 deletions(-)
14894
14895 commit 0adba75f8708f13b1f5d98ebe3fc2fb961e100c8
14896 Author: Rabin Vincent <rabin@rab.in>
14897 Date: Tue Jan 12 20:17:08 2016 +0100
14898
14899 net: bpf: reject invalid shifts
14900
14901 On ARM64, a BUG() is triggered in the eBPF JIT if a filter with a
14902 constant shift that can't be encoded in the immediate field of the
14903 UBFM/SBFM instructions is passed to the JIT. Since these shifts
14904 amounts, which are negative or >= regsize, are invalid, reject them in
14905 the eBPF verifier and the classic BPF filter checker, for all
14906 architectures.
14907
14908 Signed-off-by: Rabin Vincent <rabin@rab.in>
14909 Acked-by: Alexei Starovoitov <ast@kernel.org>
14910 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
14911 Signed-off-by: David S. Miller <davem@davemloft.net>
14912
14913 kernel/bpf/verifier.c | 10 ++++++++++
14914 net/core/filter.c | 5 +++++
14915 2 files changed, 15 insertions(+), 0 deletions(-)
14916
14917 commit c248e115a73496625a1c64660d0eeefd67e55cbf
14918 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
14919 Date: Fri Jan 8 11:00:54 2016 -0200
14920
14921 sctp: fix use-after-free in pr_debug statement
14922
14923 Dmitry Vyukov reported a use-after-free in the code expanded by the
14924 macro debug_post_sfx, which is caused by the use of the asoc pointer
14925 after it was freed within sctp_side_effect() scope.
14926
14927 This patch fixes it by allowing sctp_side_effect to clear that asoc
14928 pointer when the TCB is freed.
14929
14930 As Vlad explained, we also have to cover the SCTP_DISPOSITION_ABORT case
14931 because it will trigger DELETE_TCB too on that same loop.
14932
14933 Also, there were places issuing SCTP_CMD_INIT_FAILED and ASSOC_FAILED
14934 but returning SCTP_DISPOSITION_CONSUME, which would fool the scheme
14935 above. Fix it by returning SCTP_DISPOSITION_ABORT instead.
14936
14937 The macro is already prepared to handle such NULL pointer.
14938
14939 Reported-by: Dmitry Vyukov <dvyukov@google.com>
14940 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
14941 Acked-by: Vlad Yasevich <vyasevich@gmail.com>
14942 Signed-off-by: David S. Miller <davem@davemloft.net>
14943
14944 net/sctp/sm_sideeffect.c | 11 ++++++-----
14945 net/sctp/sm_statefuns.c | 17 ++++-------------
14946 2 files changed, 10 insertions(+), 18 deletions(-)
14947
14948 commit 395ea8a9e73e184fc14153a033000bccf4213213
14949 Author: willy tarreau <w@1wt.eu>
14950 Date: Sun Jan 10 07:54:56 2016 +0100
14951
14952 unix: properly account for FDs passed over unix sockets
14953
14954 It is possible for a process to allocate and accumulate far more FDs than
14955 the process' limit by sending them over a unix socket then closing them
14956 to keep the process' fd count low.
14957
14958 This change addresses this problem by keeping track of the number of FDs
14959 in flight per user and preventing non-privileged processes from having
14960 more FDs in flight than their configured FD limit.
14961
14962 Reported-by: socketpair@gmail.com
14963 Reported-by: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
14964 Mitigates: CVE-2013-4312 (Linux 2.0+)
14965 Suggested-by: Linus Torvalds <torvalds@linux-foundation.org>
14966 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
14967 Signed-off-by: Willy Tarreau <w@1wt.eu>
14968 Signed-off-by: David S. Miller <davem@davemloft.net>
14969
14970 include/linux/sched.h | 1 +
14971 net/unix/af_unix.c | 24 ++++++++++++++++++++----
14972 net/unix/garbage.c | 13 ++++++++-----
14973 3 files changed, 29 insertions(+), 9 deletions(-)
14974
14975 commit cb207ab8fbd71dcfc4a49d533aba8085012543fd
14976 Author: Sasha Levin <sasha.levin@oracle.com>
14977 Date: Thu Jan 7 14:52:43 2016 -0500
14978
14979 net: sctp: prevent writes to cookie_hmac_alg from accessing invalid memory
14980
14981 proc_dostring() needs an initialized destination string, while the one
14982 provided in proc_sctp_do_hmac_alg() contains stack garbage.
14983
14984 Thus, writing to cookie_hmac_alg would strlen() that garbage and end up
14985 accessing invalid memory.
14986
14987 Fixes: 3c68198e7 ("sctp: Make hmac algorithm selection for cookie generation dynamic")
14988 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
14989 Signed-off-by: David S. Miller <davem@davemloft.net>
14990
14991 net/sctp/sysctl.c | 2 +-
14992 1 files changed, 1 insertions(+), 1 deletions(-)
14993
14994 commit 4014e09faf0fe9054119624ccfff1236e886b554
14995 Author: Quentin Casasnovas <quentin.casasnovas@oracle.com>
14996 Date: Tue Nov 24 17:13:21 2015 -0500
14997
14998 RDS: fix race condition when sending a message on unbound socket
14999
15000 commit 8c7188b23474cca017b3ef354c4a58456f68303a upstream.
15001
15002 Sasha's found a NULL pointer dereference in the RDS connection code when
15003 sending a message to an apparently unbound socket. The problem is caused
15004 by the code checking if the socket is bound in rds_sendmsg(), which checks
15005 the rs_bound_addr field without taking a lock on the socket. This opens a
15006 race where rs_bound_addr is temporarily set but where the transport is not
15007 in rds_bind(), leading to a NULL pointer dereference when trying to
15008 dereference 'trans' in __rds_conn_create().
15009
15010 Vegard wrote a reproducer for this issue, so kindly ask him to share if
15011 you're interested.
15012
15013 I cannot reproduce the NULL pointer dereference using Vegard's reproducer
15014 with this patch, whereas I could without.
15015
15016 Complete earlier incomplete fix to CVE-2015-6937:
15017
15018 74e98eb08588 ("RDS: verify the underlying transport exists before creating a connection")
15019
15020 Cc: David S. Miller <davem@davemloft.net>
15021
15022 Reviewed-by: Vegard Nossum <vegard.nossum@oracle.com>
15023 Reviewed-by: Sasha Levin <sasha.levin@oracle.com>
15024 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
15025 Signed-off-by: Quentin Casasnovas <quentin.casasnovas@oracle.com>
15026 Signed-off-by: David S. Miller <davem@davemloft.net>
15027 Signed-off-by: Jiri Slaby <jslaby@suse.cz>
15028
15029 Conflicts:
15030
15031 net/rds/send.c
15032
15033 net/rds/connection.c | 6 ------
15034 1 files changed, 0 insertions(+), 6 deletions(-)
15035
15036 commit 206df8d01104344d7588d801016a281a4cd25556
15037 Author: Sasha Levin <sasha.levin@oracle.com>
15038 Date: Tue Sep 8 10:53:40 2015 -0400
15039
15040 RDS: verify the underlying transport exists before creating a connection
15041
15042 There was no verification that an underlying transport exists when creating
15043 a connection, this would cause dereferencing a NULL ptr.
15044
15045 It might happen on sockets that weren't properly bound before attempting to
15046 send a message, which will cause a NULL ptr deref:
15047
15048 [135546.047719] kasan: GPF could be caused by NULL-ptr deref or user memory accessgeneral protection fault: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC KASAN
15049 [135546.051270] Modules linked in:
15050 [135546.051781] CPU: 4 PID: 15650 Comm: trinity-c4 Not tainted 4.2.0-next-20150902-sasha-00041-gbaa1222-dirty #2527
15051 [135546.053217] task: ffff8800835bc000 ti: ffff8800bc708000 task.ti: ffff8800bc708000
15052 [135546.054291] RIP: __rds_conn_create (net/rds/connection.c:194)
15053 [135546.055666] RSP: 0018:ffff8800bc70fab0 EFLAGS: 00010202
15054 [135546.056457] RAX: dffffc0000000000 RBX: 0000000000000f2c RCX: ffff8800835bc000
15055 [135546.057494] RDX: 0000000000000007 RSI: ffff8800835bccd8 RDI: 0000000000000038
15056 [135546.058530] RBP: ffff8800bc70fb18 R08: 0000000000000001 R09: 0000000000000000
15057 [135546.059556] R10: ffffed014d7a3a23 R11: ffffed014d7a3a21 R12: 0000000000000000
15058 [135546.060614] R13: 0000000000000001 R14: ffff8801ec3d0000 R15: 0000000000000000
15059 [135546.061668] FS: 00007faad4ffb700(0000) GS:ffff880252000000(0000) knlGS:0000000000000000
15060 [135546.062836] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b
15061 [135546.063682] CR2: 000000000000846a CR3: 000000009d137000 CR4: 00000000000006a0
15062 [135546.064723] Stack:
15063 [135546.065048] ffffffffafe2055c ffffffffafe23fc1 ffffed00493097bf ffff8801ec3d0008
15064 [135546.066247] 0000000000000000 00000000000000d0 0000000000000000 ac194a24c0586342
15065 [135546.067438] 1ffff100178e1f78 ffff880320581b00 ffff8800bc70fdd0 ffff880320581b00
15066 [135546.068629] Call Trace:
15067 [135546.069028] ? __rds_conn_create (include/linux/rcupdate.h:856 net/rds/connection.c:134)
15068 [135546.069989] ? rds_message_copy_from_user (net/rds/message.c:298)
15069 [135546.071021] rds_conn_create_outgoing (net/rds/connection.c:278)
15070 [135546.071981] rds_sendmsg (net/rds/send.c:1058)
15071 [135546.072858] ? perf_trace_lock (include/trace/events/lock.h:38)
15072 [135546.073744] ? lockdep_init (kernel/locking/lockdep.c:3298)
15073 [135546.074577] ? rds_send_drop_to (net/rds/send.c:976)
15074 [135546.075508] ? __might_fault (./arch/x86/include/asm/current.h:14 mm/memory.c:3795)
15075 [135546.076349] ? __might_fault (mm/memory.c:3795)
15076 [135546.077179] ? rds_send_drop_to (net/rds/send.c:976)
15077 [135546.078114] sock_sendmsg (net/socket.c:611 net/socket.c:620)
15078 [135546.078856] SYSC_sendto (net/socket.c:1657)
15079 [135546.079596] ? SYSC_connect (net/socket.c:1628)
15080 [135546.080510] ? trace_dump_stack (kernel/trace/trace.c:1926)
15081 [135546.081397] ? ring_buffer_unlock_commit (kernel/trace/ring_buffer.c:2479 kernel/trace/ring_buffer.c:2558 kernel/trace/ring_buffer.c:2674)
15082 [135546.082390] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
15083 [135546.083410] ? trace_event_raw_event_sys_enter (include/trace/events/syscalls.h:16)
15084 [135546.084481] ? do_audit_syscall_entry (include/trace/events/syscalls.h:16)
15085 [135546.085438] ? trace_buffer_unlock_commit (kernel/trace/trace.c:1749)
15086 [135546.085515] rds_ib_laddr_check(): addr 36.74.25.172 ret -99 node type -1
15087
15088 Acked-by: Santosh Shilimkar <santosh.shilimkar@oracle.com>
15089 Signed-off-by: Sasha Levin <sasha.levin@oracle.com>
15090 Signed-off-by: David S. Miller <davem@davemloft.net>
15091
15092 net/rds/connection.c | 6 ++++++
15093 1 files changed, 6 insertions(+), 0 deletions(-)
15094
15095 commit 173fa03f05cf0ad485d49a42cbdee8844d3a689a
15096 Author: Steven Rostedt (Red Hat) <rostedt@goodmis.org>
15097 Date: Tue Jan 5 20:32:47 2016 -0500
15098
15099 ftrace/module: Call clean up function when module init fails early
15100
15101 If the module init code fails after calling ftrace_module_init() and before
15102 calling do_init_module(), we can suffer from a memory leak. This is because
15103 ftrace_module_init() allocates pages to store the locations that ftrace
15104 hooks are placed in the module text. If do_init_module() fails, it still
15105 calls the MODULE_GOING notifiers which will tell ftrace to do a clean up of
15106 the pages it allocated for the module. But if load_module() fails before
15107 then, the pages allocated by ftrace_module_init() will never be freed.
15108
15109 Call ftrace_release_mod() on the module if load_module() fails before
15110 getting to do_init_module().
15111
15112 Link: http://lkml.kernel.org/r/567CEA31.1070507@intel.com
15113
15114 Reported-by: "Qiu, PeiyangX" <peiyangx.qiu@intel.com>
15115 Fixes: a949ae560a511 "ftrace/module: Hardcode ftrace_module_init() call into load_module()"
15116 Cc: stable@vger.kernel.org # v2.6.38+
15117 Acked-by: Rusty Russell <rusty@rustcorp.com.au>
15118 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
15119
15120 include/linux/ftrace.h | 1 +
15121 kernel/module.c | 6 ++++++
15122 2 files changed, 7 insertions(+), 0 deletions(-)
15123
15124 commit 1e5a4a81a4c16c8ac2e264b88a02cc2f42ed0399
15125 Author: Francesco Ruggeri <fruggeri@aristanetworks.com>
15126 Date: Wed Jan 6 00:18:48 2016 -0800
15127
15128 net: possible use after free in dst_release
15129
15130 dst_release should not access dst->flags after decrementing
15131 __refcnt to 0. The dst_entry may be in dst_busy_list and
15132 dst_gc_task may dst_destroy it before dst_release gets a chance
15133 to access dst->flags.
15134
15135 Fixes: d69bbf88c8d0 ("net: fix a race in dst_release()")
15136 Fixes: 27b75c95f10d ("net: avoid RCU for NOCACHE dst")
15137 Signed-off-by: Francesco Ruggeri <fruggeri@arista.com>
15138 Acked-by: Eric Dumazet <edumazet@google.com>
15139 Signed-off-by: David S. Miller <davem@davemloft.net>
15140
15141 net/core/dst.c | 3 ++-
15142 1 files changed, 2 insertions(+), 1 deletions(-)
15143
15144 commit bfb0455793dd4e0f0b49d34a68b3249ab55565cc
15145 Author: Alan <gnomes@lxorguk.ukuu.org.uk>
15146 Date: Wed Jan 6 14:55:02 2016 +0000
15147
15148 mkiss: fix scribble on freed memory
15149
15150 commit d79f16c046086f4fe0d42184a458e187464eb83e fixed a user triggerable
15151 scribble on free memory but added a new one which allows the user to
15152 scribble even more and user controlled data into freed space.
15153
15154 As with 6pack we need to halt the queue before we free the buffers, because
15155 the transmit logic is not protected by the semaphore.
15156
15157 Signed-off-by: Alan Cox <alan@linux.intel.com>
15158 Signed-off-by: David S. Miller <davem@davemloft.net>
15159
15160 drivers/net/hamradio/mkiss.c | 5 +++++
15161 1 files changed, 5 insertions(+), 0 deletions(-)
15162
15163 commit 5cbbcbd32dc1949470f61d342503808fa9555276
15164 Author: David Miller <davem@davemloft.net>
15165 Date: Thu Dec 17 16:05:49 2015 -0500
15166
15167 mkiss: Fix use after free in mkiss_close().
15168
15169 Need to do the unregister_device() after all references to the driver
15170 private have been done.
15171
15172 Signed-off-by: David S. Miller <davem@davemloft.net>
15173
15174 drivers/net/hamradio/mkiss.c | 4 ++--
15175 1 files changed, 2 insertions(+), 2 deletions(-)
15176
15177 commit b00171576794a98068e069a660f0991a6a5190ff
15178 Author: One Thousand Gnomes <gnomes@lxorguk.ukuu.org.uk>
15179 Date: Tue Jan 5 11:51:25 2016 +0000
15180
15181 6pack: fix free memory scribbles
15182
15183 commit acf673a3187edf72068ee2f92f4dc47d66baed47 fixed a user triggerable free
15184 memory scribble but in doing so replaced it with a different one that allows
15185 the user to control the data and scribble even more.
15186
15187 sixpack_close is called by the tty layer in tty context. The tty context is
15188 protected by sp_get() and sp_put(). However network layer activity via
15189 sp_xmit() is not protected this way. We must therefore stop the queue
15190 otherwise the user gets to dump a buffer mostly of their choice into freed
15191 kernel pages.
15192
15193 Signed-off-by: Alan Cox <alan@linux.intel.com>
15194 Signed-off-by: David S. Miller <davem@davemloft.net>
15195
15196 drivers/net/hamradio/6pack.c | 6 ++++++
15197 1 files changed, 6 insertions(+), 0 deletions(-)
15198
15199 commit 5b64a833907cd230a3106aeba2304b2c1bcd116d
15200 Author: David Miller <davem@davemloft.net>
15201 Date: Thu Dec 17 16:05:32 2015 -0500
15202
15203 6pack: Fix use after free in sixpack_close().
15204
15205 Need to do the unregister_device() after all references to the driver
15206 private have been done.
15207
15208 Also we need to use del_timer_sync() for the timers so that we don't
15209 have any asynchronous references after the unregister.
15210
15211 Signed-off-by: David S. Miller <davem@davemloft.net>
15212
15213 drivers/net/hamradio/6pack.c | 8 ++++----
15214 1 files changed, 4 insertions(+), 4 deletions(-)
15215
15216 commit 4f9d532742656b3613d579220fd10c78f24ba37b
15217 Author: Rabin Vincent <rabin@rab.in>
15218 Date: Tue Jan 5 16:23:07 2016 +0100
15219
15220 net: filter: make JITs zero A for SKF_AD_ALU_XOR_X
15221
15222 The SKF_AD_ALU_XOR_X ancillary is not like the other ancillary data
15223 instructions since it XORs A with X while all the others replace A with
15224 some loaded value. All the BPF JITs fail to clear A if this is used as
15225 the first instruction in a filter. This was found using american fuzzy
15226 lop.
15227
15228 Add a helper to determine if A needs to be cleared given the first
15229 instruction in a filter, and use this in the JITs. Except for ARM, the
15230 rest have only been compile-tested.
15231
15232 Fixes: 3480593131e0 ("net: filter: get rid of BPF_S_* enum")
15233 Signed-off-by: Rabin Vincent <rabin@rab.in>
15234 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15235 Acked-by: Alexei Starovoitov <ast@kernel.org>
15236 Signed-off-by: David S. Miller <davem@davemloft.net>
15237
15238 arch/arm/net/bpf_jit_32.c | 16 +---------------
15239 arch/mips/net/bpf_jit.c | 16 +---------------
15240 arch/powerpc/net/bpf_jit_comp.c | 13 ++-----------
15241 arch/sparc/net/bpf_jit_comp.c | 17 ++---------------
15242 include/linux/filter.h | 19 +++++++++++++++++++
15243 5 files changed, 25 insertions(+), 56 deletions(-)
15244
15245 commit 570d88f8acfffda92b89ae2e1c47320d47256034
15246 Author: John Fastabend <john.fastabend@gmail.com>
15247 Date: Tue Jan 5 09:11:36 2016 -0800
15248
15249 net: sched: fix missing free per cpu on qstats
15250
15251 When a qdisc is using per cpu stats (currently just the ingress
15252 qdisc) only the bstats are being freed. This also free's the qstats.
15253
15254 Fixes: b0ab6f92752b9f9d8 ("net: sched: enable per cpu qstats")
15255 Signed-off-by: John Fastabend <john.r.fastabend@intel.com>
15256 Acked-by: Eric Dumazet <edumazet@google.com>
15257 Acked-by: Daniel Borkmann <daniel@iogearbox.net>
15258 Signed-off-by: David S. Miller <davem@davemloft.net>
15259
15260 net/sched/sch_generic.c | 4 +++-
15261 1 files changed, 3 insertions(+), 1 deletions(-)
15262
15263 commit 32c0ebc51857ee83470a10dcb234d308a0ed1881
15264 Author: Rabin Vincent <rabin@rab.in>
15265 Date: Tue Jan 5 18:34:04 2016 +0100
15266
15267 ARM: net: bpf: fix zero right shift
15268
15269 The LSR instruction cannot be used to perform a zero right shift since a
15270 0 as the immediate value (imm5) in the LSR instruction encoding means
15271 that a shift of 32 is perfomed. See DecodeIMMShift() in the ARM ARM.
15272
15273 Make the JIT skip generation of the LSR if a zero-shift is requested.
15274
15275 This was found using american fuzzy lop.
15276
15277 Signed-off-by: Rabin Vincent <rabin@rab.in>
15278 Acked-by: Alexei Starovoitov <ast@kernel.org>
15279 Signed-off-by: David S. Miller <davem@davemloft.net>
15280
15281 arch/arm/net/bpf_jit_32.c | 3 ++-
15282 1 files changed, 2 insertions(+), 1 deletions(-)
15283
15284 commit 51f5d291750285efa4d4bbe84e5ec23dc00c8d2d
15285 Author: Brad Spengler <spender@grsecurity.net>
15286 Date: Wed Jan 6 20:35:57 2016 -0500
15287
15288 Don't perform hidden lookups in RBAC against the directory of
15289 a file being opened with O_CREAT, reported by Karl Witt
15290
15291 Conflicts:
15292
15293 fs/namei.c
15294
15295 fs/namei.c | 3 ---
15296 1 files changed, 0 insertions(+), 3 deletions(-)
15297
15298 commit 5a8266a6b2769ccdb447256f95bc2577a73cccd1
15299 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15300 Date: Tue Jan 5 10:46:00 2016 +0100
15301
15302 bridge: Only call /sbin/bridge-stp for the initial network namespace
15303
15304 [I stole this patch from Eric Biederman. He wrote:]
15305
15306 > There is no defined mechanism to pass network namespace information
15307 > into /sbin/bridge-stp therefore don't even try to invoke it except
15308 > for bridge devices in the initial network namespace.
15309 >
15310 > It is possible for unprivileged users to cause /sbin/bridge-stp to be
15311 > invoked for any network device name which if /sbin/bridge-stp does not
15312 > guard against unreasonable arguments or being invoked twice on the
15313 > same network device could cause problems.
15314
15315 [Hannes: changed patch using netns_eq]
15316
15317 Cc: Eric W. Biederman <ebiederm@xmission.com>
15318 Signed-off-by: Eric W. Biederman <ebiederm@xmission.com>
15319 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15320 Signed-off-by: David S. Miller <davem@davemloft.net>
15321
15322 net/bridge/br_stp_if.c | 5 ++++-
15323 1 files changed, 4 insertions(+), 1 deletions(-)
15324
15325 commit 650d535cc39f0aeff2f57e60b6617be25d3ef48b
15326 Author: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15327 Date: Wed Dec 23 16:28:40 2015 -0200
15328
15329 sctp: use GFP_USER for user-controlled kmalloc
15330
15331 Commit cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
15332 missed two other spots.
15333
15334 For connectx, as it's more likely to be used by kernel users of the API,
15335 it detects if GFP_USER should be used or not.
15336
15337 Fixes: cacc06215271 ("sctp: use GFP_USER for user-controlled kmalloc")
15338 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15339 Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
15340 Signed-off-by: David S. Miller <davem@davemloft.net>
15341
15342 net/sctp/socket.c | 9 ++++++---
15343 1 files changed, 6 insertions(+), 3 deletions(-)
15344
15345 commit 5718a1f63c41fc156f729783423b002763779d04
15346 Author: Florian Westphal <fw@strlen.de>
15347 Date: Thu Dec 31 14:26:33 2015 +0100
15348
15349 connector: bump skb->users before callback invocation
15350
15351 Dmitry reports memleak with syskaller program.
15352 Problem is that connector bumps skb usecount but might not invoke callback.
15353
15354 So move skb_get to where we invoke the callback.
15355
15356 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15357 Signed-off-by: Florian Westphal <fw@strlen.de>
15358 Signed-off-by: David S. Miller <davem@davemloft.net>
15359
15360 drivers/connector/connector.c | 11 +++--------
15361 1 files changed, 3 insertions(+), 8 deletions(-)
15362
15363 commit 2e6372e6a97f8d642416899861f91777f44f13b7
15364 Author: Rainer Weikusat <rweikusat@mobileactivedefense.com>
15365 Date: Sun Jan 3 18:56:38 2016 +0000
15366
15367 af_unix: Fix splice-bind deadlock
15368
15369 On 2015/11/06, Dmitry Vyukov reported a deadlock involving the splice
15370 system call and AF_UNIX sockets,
15371
15372 http://lists.openwall.net/netdev/2015/11/06/24
15373
15374 The situation was analyzed as
15375
15376 (a while ago) A: socketpair()
15377 B: splice() from a pipe to /mnt/regular_file
15378 does sb_start_write() on /mnt
15379 C: try to freeze /mnt
15380 wait for B to finish with /mnt
15381 A: bind() try to bind our socket to /mnt/new_socket_name
15382 lock our socket, see it not bound yet
15383 decide that it needs to create something in /mnt
15384 try to do sb_start_write() on /mnt, block (it's
15385 waiting for C).
15386 D: splice() from the same pipe to our socket
15387 lock the pipe, see that socket is connected
15388 try to lock the socket, block waiting for A
15389 B: get around to actually feeding a chunk from
15390 pipe to file, try to lock the pipe. Deadlock.
15391
15392 on 2015/11/10 by Al Viro,
15393
15394 http://lists.openwall.net/netdev/2015/11/10/4
15395
15396 The patch fixes this by removing the kern_path_create related code from
15397 unix_mknod and executing it as part of unix_bind prior acquiring the
15398 readlock of the socket in question. This means that A (as used above)
15399 will sb_start_write on /mnt before it acquires the readlock, hence, it
15400 won't indirectly block B which first did a sb_start_write and then
15401 waited for a thread trying to acquire the readlock. Consequently, A
15402 being blocked by C waiting for B won't cause a deadlock anymore
15403 (effectively, both A and B acquire two locks in opposite order in the
15404 situation described above).
15405
15406 Dmitry Vyukov(<dvyukov@google.com>) tested the original patch.
15407
15408 Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
15409 Signed-off-by: David S. Miller <davem@davemloft.net>
15410
15411 Conflicts:
15412
15413 net/unix/af_unix.c
15414
15415 net/unix/af_unix.c | 70 +++++++++++++++++++++++++++++++--------------------
15416 1 files changed, 42 insertions(+), 28 deletions(-)
15417
15418 commit 2e729e557c571f3253e32472cd7d382ac16cf1c3
15419 Author: Qiu Peiyang <peiyangx.qiu@intel.com>
15420 Date: Thu Dec 31 13:11:28 2015 +0800
15421
15422 tracing: Fix setting of start_index in find_next()
15423
15424 When we do cat /sys/kernel/debug/tracing/printk_formats, we hit kernel
15425 panic at t_show.
15426
15427 general protection fault: 0000 [#1] PREEMPT SMP
15428 CPU: 0 PID: 2957 Comm: sh Tainted: G W O 3.14.55-x86_64-01062-gd4acdc7 #2
15429 RIP: 0010:[<ffffffff811375b2>]
15430 [<ffffffff811375b2>] t_show+0x22/0xe0
15431 RSP: 0000:ffff88002b4ebe80 EFLAGS: 00010246
15432 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000004
15433 RDX: 0000000000000004 RSI: ffffffff81fd26a6 RDI: ffff880032f9f7b1
15434 RBP: ffff88002b4ebe98 R08: 0000000000001000 R09: 000000000000ffec
15435 R10: 0000000000000000 R11: 000000000000000f R12: ffff880004d9b6c0
15436 R13: 7365725f6d706400 R14: ffff880004d9b6c0 R15: ffffffff82020570
15437 FS: 0000000000000000(0000) GS:ffff88003aa00000(0063) knlGS:00000000f776bc40
15438 CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033
15439 CR2: 00000000f6c02ff0 CR3: 000000002c2b3000 CR4: 00000000001007f0
15440 Call Trace:
15441 [<ffffffff811dc076>] seq_read+0x2f6/0x3e0
15442 [<ffffffff811b749b>] vfs_read+0x9b/0x160
15443 [<ffffffff811b7f69>] SyS_read+0x49/0xb0
15444 [<ffffffff81a3a4b9>] ia32_do_call+0x13/0x13
15445 ---[ end trace 5bd9eb630614861e ]---
15446 Kernel panic - not syncing: Fatal exception
15447
15448 When the first time find_next calls find_next_mod_format, it should
15449 iterate the trace_bprintk_fmt_list to find the first print format of
15450 the module. However in current code, start_index is smaller than *pos
15451 at first, and code will not iterate the list. Latter container_of will
15452 get the wrong address with former v, which will cause mod_fmt be a
15453 meaningless object and so is the returned mod_fmt->fmt.
15454
15455 This patch will fix it by correcting the start_index. After fixed,
15456 when the first time calls find_next_mod_format, start_index will be
15457 equal to *pos, and code will iterate the trace_bprintk_fmt_list to
15458 get the right module printk format, so is the returned mod_fmt->fmt.
15459
15460 Link: http://lkml.kernel.org/r/5684B900.9000309@intel.com
15461
15462 Cc: stable@vger.kernel.org # 3.12+
15463 Fixes: 102c9323c35a8 "tracing: Add __tracepoint_string() to export string pointers"
15464 Signed-off-by: Qiu Peiyang <peiyangx.qiu@intel.com>
15465 Signed-off-by: Steven Rostedt <rostedt@goodmis.org>
15466
15467 kernel/trace/trace_printk.c | 1 +
15468 1 files changed, 1 insertions(+), 0 deletions(-)
15469
15470 commit 0994af4b1930f32aa493dc08145cd304f8bfc8f4
15471 Author: Al Viro <viro@zeniv.linux.org.uk>
15472 Date: Mon Dec 28 20:47:08 2015 -0500
15473
15474 [PATCH] arm: fix handling of F_OFD_... in oabi_fcntl64()
15475
15476 Cc: stable@vger.kernel.org # 3.15+
15477 Reviewed-by: Jeff Layton <jeff.layton@primarydata.com>
15478 Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
15479
15480 arch/arm/kernel/sys_oabi-compat.c | 73 +++++++++++++++++++------------------
15481 1 files changed, 37 insertions(+), 36 deletions(-)
15482
15483 commit 4ed030f65dcf3e6b0128032a49a7d75f947fa351
15484 Merge: de243c2 3adc55a
15485 Author: Brad Spengler <spender@grsecurity.net>
15486 Date: Tue Jan 5 18:10:10 2016 -0500
15487
15488 Merge branch 'pax-test' into grsec-test
15489
15490 commit 3adc55a5acfa429c2a7cc883aef08b960c0079b0
15491 Author: Brad Spengler <spender@grsecurity.net>
15492 Date: Tue Jan 5 18:08:53 2016 -0500
15493
15494 Update to pax-linux-4.3.3-test16.patch:
15495 - small cleanup in entry_64.S on x86
15496 - Emese fixed the initify plugin to recursively check variable initializers, reported by Rasmus Villemoes
15497 - fixed an integer truncation of a partially uninitialized value bug in em_pop_sreg, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4354)
15498 - fixed alternatives patching of call insns under KERNEXEC/i386, reported by fly_a320 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4305) and TTgrsec (https://forums.grsecurity.net/viewtopic.php?f=3&t=4353)
15499 - fixed a size overflow false positive that triggered in tcp_parse_options on arm, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350&p=15917#p15916)
15500 - fixed a boot crash on amd64 with KERNEXEC/OR and CONTEXT_TRACKING, reported by Klaus Kusche (https://bugs.gentoo.org/show_bug.cgi?id=570420)
15501
15502 arch/x86/entry/entry_64.S | 60 +++++-----
15503 arch/x86/kernel/alternative.c | 2 +-
15504 arch/x86/kvm/emulate.c | 4 +-
15505 tools/gcc/initify_plugin.c | 123 +++++++++----------
15506 .../disable_size_overflow_hash.data | 4 +-
15507 .../size_overflow_plugin/size_overflow_hash.data | 2 -
15508 6 files changed, 93 insertions(+), 102 deletions(-)
15509
15510 commit de243c26efd0e423ca92db825af2c3f8eb1ca043
15511 Author: Brad Spengler <spender@grsecurity.net>
15512 Date: Tue Dec 29 18:01:24 2015 -0500
15513
15514 It was noticed during an internal audit that the code under GRKERNSEC_PROC_MEMMAP
15515 which aimed to enforce a 16MB minimum on RLIMIT_DATA for suid/sgid binaries only
15516 did so if RLIMIT_DATA was set lower than PAGE_SIZE.
15517
15518 This addition was only supplemental as GRKERNSEC_BRUTE is the main defense
15519 against suid/sgid attacks and the flaw above would only eliminate the extra
15520 entropy provided for the brk-managed heap, still leaving it with the minimum
15521 of 16-bit entropy for mmap on x86 and 28 on x64.
15522
15523 mm/mmap.c | 2 +-
15524 1 files changed, 1 insertions(+), 1 deletions(-)
15525
15526 commit 8e264cfe47e5f08cdc9ed009a630277206cd2534
15527 Merge: 436201b 2584340
15528 Author: Brad Spengler <spender@grsecurity.net>
15529 Date: Mon Dec 28 20:30:01 2015 -0500
15530
15531 Merge branch 'pax-test' into grsec-test
15532
15533 commit 2584340eab494e64ec1bf9eb5b0d1ae31f926306
15534 Author: Brad Spengler <spender@grsecurity.net>
15535 Date: Mon Dec 28 20:29:28 2015 -0500
15536
15537 Update to pax-linux-4.3.3-test14.patch:
15538 - fixed an integer sign conversion error in i2c_dw_pci_probe caught by the size overflow plugin, reported by Jean Lucas and ganymede (https://forums.grsecurity.net/viewtopic.php?f=3&t=4349)
15539 - fixed shutdown crash with tboot and KERNEXEC, reported by perfinion
15540 - fixed a few false positive and one real size overflow reports in hyperv, reported by hunger
15541 - fixed compile regressions on armv5, reported by iamb (https://forums.grsecurity.net/viewtopic.php?f=3&t=4350)
15542 - fixed an assert in the initify plugin that triggered in vic_register on arm
15543
15544 arch/arm/include/asm/atomic.h | 7 +++++--
15545 arch/arm/include/asm/domain.h | 5 ++---
15546 arch/x86/kernel/tboot.c | 14 +++++++++-----
15547 drivers/hv/channel.c | 4 +---
15548 drivers/i2c/busses/i2c-designware-pcidrv.c | 2 +-
15549 drivers/net/hyperv/rndis_filter.c | 3 +--
15550 fs/exec.c | 4 ++--
15551 include/linux/atomic.h | 15 ---------------
15552 net/core/skbuff.c | 3 ++-
15553 tools/gcc/initify_plugin.c | 4 +++-
15554 10 files changed, 26 insertions(+), 35 deletions(-)
15555
15556 commit 436201b6626b488d173c8076447000077c27b84a
15557 Author: David Howells <dhowells@redhat.com>
15558 Date: Fri Dec 18 01:34:26 2015 +0000
15559
15560 KEYS: Fix race between read and revoke
15561
15562 This fixes CVE-2015-7550.
15563
15564 There's a race between keyctl_read() and keyctl_revoke(). If the revoke
15565 happens between keyctl_read() checking the validity of a key and the key's
15566 semaphore being taken, then the key type read method will see a revoked key.
15567
15568 This causes a problem for the user-defined key type because it assumes in
15569 its read method that there will always be a payload in a non-revoked key
15570 and doesn't check for a NULL pointer.
15571
15572 Fix this by making keyctl_read() check the validity of a key after taking
15573 semaphore instead of before.
15574
15575 I think the bug was introduced with the original keyrings code.
15576
15577 This was discovered by a multithreaded test program generated by syzkaller
15578 (http://github.com/google/syzkaller). Here's a cleaned up version:
15579
15580 #include <sys/types.h>
15581 #include <keyutils.h>
15582 #include <pthread.h>
15583 void *thr0(void *arg)
15584 {
15585 key_serial_t key = (unsigned long)arg;
15586 keyctl_revoke(key);
15587 return 0;
15588 }
15589 void *thr1(void *arg)
15590 {
15591 key_serial_t key = (unsigned long)arg;
15592 char buffer[16];
15593 keyctl_read(key, buffer, 16);
15594 return 0;
15595 }
15596 int main()
15597 {
15598 key_serial_t key = add_key("user", "%", "foo", 3, KEY_SPEC_USER_KEYRING);
15599 pthread_t th[5];
15600 pthread_create(&th[0], 0, thr0, (void *)(unsigned long)key);
15601 pthread_create(&th[1], 0, thr1, (void *)(unsigned long)key);
15602 pthread_create(&th[2], 0, thr0, (void *)(unsigned long)key);
15603 pthread_create(&th[3], 0, thr1, (void *)(unsigned long)key);
15604 pthread_join(th[0], 0);
15605 pthread_join(th[1], 0);
15606 pthread_join(th[2], 0);
15607 pthread_join(th[3], 0);
15608 return 0;
15609 }
15610
15611 Build as:
15612
15613 cc -o keyctl-race keyctl-race.c -lkeyutils -lpthread
15614
15615 Run as:
15616
15617 while keyctl-race; do :; done
15618
15619 as it may need several iterations to crash the kernel. The crash can be
15620 summarised as:
15621
15622 BUG: unable to handle kernel NULL pointer dereference at 0000000000000010
15623 IP: [<ffffffff81279b08>] user_read+0x56/0xa3
15624 ...
15625 Call Trace:
15626 [<ffffffff81276aa9>] keyctl_read_key+0xb6/0xd7
15627 [<ffffffff81277815>] SyS_keyctl+0x83/0xe0
15628 [<ffffffff815dbb97>] entry_SYSCALL_64_fastpath+0x12/0x6f
15629
15630 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15631 Signed-off-by: David Howells <dhowells@redhat.com>
15632 Tested-by: Dmitry Vyukov <dvyukov@google.com>
15633 Cc: stable@vger.kernel.org
15634 Signed-off-by: James Morris <james.l.morris@oracle.com>
15635
15636 security/keys/keyctl.c | 18 +++++++++---------
15637 1 files changed, 9 insertions(+), 9 deletions(-)
15638
15639 commit 195cea04477025da4a2078bd3e1fb7c4e11206c2
15640 Author: Brad Spengler <spender@grsecurity.net>
15641 Date: Tue Dec 22 20:44:01 2015 -0500
15642
15643 Add new kernel command-line param: pax_size_overflow_report_only
15644 If a user triggers a size_overflow violation that makes it difficult
15645 to obtain the call trace without serial console/net console, they can
15646 use this option to provide that information to us
15647
15648 Documentation/kernel-parameters.txt | 5 +++++
15649 fs/exec.c | 12 +++++++++---
15650 init/main.c | 11 +++++++++++
15651 3 files changed, 25 insertions(+), 3 deletions(-)
15652
15653 commit 4254a8da5851df8c08cdca5c392916e8c105408d
15654 Author: WANG Cong <xiyou.wangcong@gmail.com>
15655 Date: Mon Dec 21 10:55:45 2015 -0800
15656
15657 addrconf: always initialize sysctl table data
15658
15659 When sysctl performs restrict writes, it allows to write from
15660 a middle position of a sysctl file, which requires us to initialize
15661 the table data before calling proc_dostring() for the write case.
15662
15663 Fixes: 3d1bec99320d ("ipv6: introduce secret_stable to ipv6_devconf")
15664 Reported-by: Sasha Levin <sasha.levin@oracle.com>
15665 Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15666 Tested-by: Sasha Levin <sasha.levin@oracle.com>
15667 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
15668 Signed-off-by: David S. Miller <davem@davemloft.net>
15669
15670 net/ipv6/addrconf.c | 11 ++++-------
15671 1 files changed, 4 insertions(+), 7 deletions(-)
15672
15673 commit f8002863fb06c363180637046947a78a6ccb3d33
15674 Author: WANG Cong <xiyou.wangcong@gmail.com>
15675 Date: Wed Dec 16 23:39:04 2015 -0800
15676
15677 net: check both type and procotol for tcp sockets
15678
15679 Dmitry reported the following out-of-bound access:
15680
15681 Call Trace:
15682 [<ffffffff816cec2e>] __asan_report_load4_noabort+0x3e/0x40
15683 mm/kasan/report.c:294
15684 [<ffffffff84affb14>] sock_setsockopt+0x1284/0x13d0 net/core/sock.c:880
15685 [< inline >] SYSC_setsockopt net/socket.c:1746
15686 [<ffffffff84aed7ee>] SyS_setsockopt+0x1fe/0x240 net/socket.c:1729
15687 [<ffffffff85c18c76>] entry_SYSCALL_64_fastpath+0x16/0x7a
15688 arch/x86/entry/entry_64.S:185
15689
15690 This is because we mistake a raw socket as a tcp socket.
15691 We should check both sk->sk_type and sk->sk_protocol to ensure
15692 it is a tcp socket.
15693
15694 Willem points out __skb_complete_tx_timestamp() needs to fix as well.
15695
15696 Reported-by: Dmitry Vyukov <dvyukov@google.com>
15697 Cc: Willem de Bruijn <willemdebruijn.kernel@gmail.com>
15698 Cc: Eric Dumazet <eric.dumazet@gmail.com>
15699 Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
15700 Acked-by: Willem de Bruijn <willemb@google.com>
15701 Signed-off-by: David S. Miller <davem@davemloft.net>
15702
15703 net/core/skbuff.c | 3 ++-
15704 net/core/sock.c | 3 ++-
15705 2 files changed, 4 insertions(+), 2 deletions(-)
15706
15707 commit bd6b3399804470a4ad8f34229469ca149dceba3d
15708 Author: Colin Ian King <colin.king@canonical.com>
15709 Date: Fri Dec 18 14:22:01 2015 -0800
15710
15711 proc: fix -ESRCH error when writing to /proc/$pid/coredump_filter
15712
15713 Writing to /proc/$pid/coredump_filter always returns -ESRCH because commit
15714 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()") removed
15715 the setting of ret after the get_proc_task call and incorrectly left it as
15716 -ESRCH. Instead, return 0 when successful.
15717
15718 Example breakage:
15719
15720 echo 0 > /proc/self/coredump_filter
15721 bash: echo: write error: No such process
15722
15723 Fixes: 774636e19ed51 ("proc: convert to kstrto*()/kstrto*_from_user()")
15724 Signed-off-by: Colin Ian King <colin.king@canonical.com>
15725 Acked-by: Kees Cook <keescook@chromium.org>
15726 Cc: <stable@vger.kernel.org> [4.3+]
15727 Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
15728 Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
15729
15730 fs/proc/base.c | 1 +
15731 1 files changed, 1 insertions(+), 0 deletions(-)
15732
15733 commit b28aca2b99ed08546778355fb9402c503ff9b29e
15734 Author: Junichi Nomura <j-nomura@ce.jp.nec.com>
15735 Date: Tue Dec 22 10:23:44 2015 -0700
15736
15737 block: ensure to split after potentially bouncing a bio
15738
15739 blk_queue_bio() does split then bounce, which makes the segment
15740 counting based on pages before bouncing and could go wrong. Move
15741 the split to after bouncing, like we do for blk-mq, and the we
15742 fix the issue of having the bio count for segments be wrong.
15743
15744 Fixes: 54efd50bfd87 ("block: make generic_make_request handle arbitrarily sized bios")
15745 Cc: stable@vger.kernel.org
15746 Tested-by: Artem S. Tashkinov <t.artem@lycos.com>
15747 Signed-off-by: Jens Axboe <axboe@fb.com>
15748
15749 block/blk-core.c | 4 ++--
15750 1 files changed, 2 insertions(+), 2 deletions(-)
15751
15752 commit e62a25e917a9e5b35ddd5b4f1b5e5e30fbd2e84c
15753 Merge: f6f63ae ec72fa5
15754 Author: Brad Spengler <spender@grsecurity.net>
15755 Date: Tue Dec 22 19:46:26 2015 -0500
15756
15757 Merge branch 'pax-test' into grsec-test
15758
15759 commit ec72fa5f8d9cb4e223bad1b8b5c2e1071c222f2a
15760 Author: Brad Spengler <spender@grsecurity.net>
15761 Date: Tue Dec 22 19:45:51 2015 -0500
15762
15763 Update to pax-linux-4.3.3-test13.patch:
15764 - Emese fixed a (probably) false positive integer truncation in xfs_da_grow_inode_int, reported by jdkbx (http://forums.grsecurity.net/viewtopic.php?f=3&t=4346)
15765 - fixed a size overflow in btrfs/try_merge_map, reported by Alex W (https://bugs.archlinux.org/task/47173) and mathias and dwokfur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4344)
15766
15767 arch/arm/mm/fault.c | 2 +-
15768 arch/x86/mm/fault.c | 2 +-
15769 fs/btrfs/extent_map.c | 8 ++++++--
15770 fs/xfs/libxfs/xfs_da_btree.c | 4 +++-
15771 4 files changed, 11 insertions(+), 5 deletions(-)
15772
15773 commit f6f63ae154cd45028add1dc41957878060d77fbf
15774 Author: Brad Spengler <spender@grsecurity.net>
15775 Date: Thu Dec 17 18:43:44 2015 -0500
15776
15777 ptrace_has_cap() checks whether the current process should be
15778 treated as having a certain capability for ptrace checks
15779 against another process. Until now, this was equivalent to
15780 has_ns_capability(current, target_ns, CAP_SYS_PTRACE).
15781
15782 However, if a root-owned process wants to enter a user
15783 namespace for some reason without knowing who owns it and
15784 therefore can't change to the namespace owner's uid and gid
15785 before entering, as soon as it has entered the namespace,
15786 the namespace owner can attach to it via ptrace and thereby
15787 gain access to its uid and gid.
15788
15789 While it is possible for the entering process to switch to
15790 the uid of a claimed namespace owner before entering,
15791 causing the attempt to enter to fail if the claimed uid is
15792 wrong, this doesn't solve the problem of determining an
15793 appropriate gid.
15794
15795 With this change, the entering process can first enter the
15796 namespace and then safely inspect the namespace's
15797 properties, e.g. through /proc/self/{uid_map,gid_map},
15798 assuming that the namespace owner doesn't have access to
15799 uid 0.
15800 Signed-off-by: Jann Horn <jann@thejh.net>
15801
15802 kernel/ptrace.c | 30 +++++++++++++++++++++++++-----
15803 1 files changed, 25 insertions(+), 5 deletions(-)
15804
15805 commit e314f0fb63020f61543b401ff594e953c2c304e5
15806 Author: tadeusz.struk@intel.com <tadeusz.struk@intel.com>
15807 Date: Tue Dec 15 10:46:17 2015 -0800
15808
15809 net: fix uninitialized variable issue
15810
15811 msg_iocb needs to be initialized on the recv/recvfrom path.
15812 Otherwise afalg will wrongly interpret it as an async call.
15813
15814 Cc: stable@vger.kernel.org
15815 Reported-by: Harald Freudenberger <freude@linux.vnet.ibm.com>
15816 Signed-off-by: Tadeusz Struk <tadeusz.struk@intel.com>
15817 Signed-off-by: David S. Miller <davem@davemloft.net>
15818
15819 net/socket.c | 1 +
15820 1 files changed, 1 insertions(+), 0 deletions(-)
15821
15822 commit a3f56a43ad56b8fcaf04f6327636ed2f5970de3b
15823 Merge: dfa764c 142edcf
15824 Author: Brad Spengler <spender@grsecurity.net>
15825 Date: Wed Dec 16 21:01:17 2015 -0500
15826
15827 Merge branch 'pax-test' into grsec-test
15828
15829 commit 142edcf1005a57fb8887823565cf0bafad2f313c
15830 Author: Brad Spengler <spender@grsecurity.net>
15831 Date: Wed Dec 16 21:00:57 2015 -0500
15832
15833 Update to pax-linux-4.3.3-test12.patch:
15834 - Emese fixed a size overflow false positive in reiserfs/leaf_paste_entries, reported by Christian Apeltauer (https://bugs.gentoo.org/show_bug.cgi?id=568046)
15835 - fixed a bunch of int/size_t mismatches in the drivers/tty/n_tty.c code causing size overflow false positives, reported by Toralf Förster, mathias (https://forums.grsecurity.net/viewtopic.php?f=3&t=4342), N8Fear (https://forums.grsecurity.net/viewtopic.php?f=3&t=4341)
15836
15837 drivers/tty/n_tty.c | 16 ++++++++--------
15838 .../disable_size_overflow_hash.data | 2 ++
15839 .../size_overflow_plugin/size_overflow_hash.data | 6 ++----
15840 3 files changed, 12 insertions(+), 12 deletions(-)
15841
15842 commit dfa764cc549892a5bfc1083cac78b99032cae577
15843 Author: Hannes Frederic Sowa <hannes@stressinduktion.org>
15844 Date: Tue Dec 15 22:59:12 2015 +0100
15845
15846 ipv6: automatically enable stable privacy mode if stable_secret set
15847
15848 Bjørn reported that while we switch all interfaces to privacy stable mode
15849 when setting the secret, we don't set this mode for new interfaces. This
15850 does not make sense, so change this behaviour.
15851
15852 Fixes: 622c81d57b392cc ("ipv6: generation of stable privacy addresses for link-local and autoconf")
15853 Reported-by: Bjørn Mork <bjorn@mork.no>
15854 Cc: Bjørn Mork <bjorn@mork.no>
15855 Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
15856 Signed-off-by: David S. Miller <davem@davemloft.net>
15857
15858 net/ipv6/addrconf.c | 6 ++++++
15859 1 files changed, 6 insertions(+), 0 deletions(-)
15860
15861 commit c2815a1fee03f222273e77c14e43f960da06f35a
15862 Author: Brad Spengler <spender@grsecurity.net>
15863 Date: Wed Dec 16 13:03:38 2015 -0500
15864
15865 Work around upstream limitation on the number of thread info flags causing a compilation error
15866 Reported by fabled at http://forums.grsecurity.net/viewtopic.php?f=3&t=4339
15867
15868 arch/arm/kernel/entry-common.S | 8 ++++++--
15869 1 files changed, 6 insertions(+), 2 deletions(-)
15870
15871 commit 8c9ae168e09ae49324d709d76d73d9fc4ca477e1
15872 Author: Brad Spengler <spender@grsecurity.net>
15873 Date: Tue Dec 15 19:03:41 2015 -0500
15874
15875 Initial import of grsecurity 3.1 for Linux 4.3.3
15876
15877 Documentation/dontdiff | 2 +
15878 Documentation/kernel-parameters.txt | 7 +
15879 Documentation/sysctl/kernel.txt | 15 +
15880 Makefile | 18 +-
15881 arch/alpha/include/asm/cache.h | 4 +-
15882 arch/alpha/kernel/osf_sys.c | 12 +-
15883 arch/arc/Kconfig | 1 +
15884 arch/arm/Kconfig | 1 +
15885 arch/arm/Kconfig.debug | 1 +
15886 arch/arm/include/asm/thread_info.h | 7 +-
15887 arch/arm/kernel/process.c | 4 +-
15888 arch/arm/kernel/ptrace.c | 9 +
15889 arch/arm/kernel/traps.c | 7 +-
15890 arch/arm/mm/Kconfig | 2 +-
15891 arch/arm/mm/fault.c | 40 +-
15892 arch/arm/mm/mmap.c | 8 +-
15893 arch/arm/net/bpf_jit_32.c | 51 +-
15894 arch/arm64/Kconfig.debug | 1 +
15895 arch/avr32/include/asm/cache.h | 4 +-
15896 arch/blackfin/Kconfig.debug | 1 +
15897 arch/blackfin/include/asm/cache.h | 3 +-
15898 arch/cris/include/arch-v10/arch/cache.h | 3 +-
15899 arch/cris/include/arch-v32/arch/cache.h | 3 +-
15900 arch/frv/include/asm/cache.h | 3 +-
15901 arch/frv/mm/elf-fdpic.c | 4 +-
15902 arch/hexagon/include/asm/cache.h | 6 +-
15903 arch/ia64/Kconfig | 1 +
15904 arch/ia64/include/asm/cache.h | 3 +-
15905 arch/ia64/kernel/sys_ia64.c | 2 +
15906 arch/ia64/mm/hugetlbpage.c | 2 +
15907 arch/m32r/include/asm/cache.h | 4 +-
15908 arch/m68k/include/asm/cache.h | 4 +-
15909 arch/metag/mm/hugetlbpage.c | 1 +
15910 arch/microblaze/include/asm/cache.h | 3 +-
15911 arch/mips/Kconfig | 1 +
15912 arch/mips/include/asm/cache.h | 3 +-
15913 arch/mips/include/asm/thread_info.h | 11 +-
15914 arch/mips/kernel/irq.c | 3 +
15915 arch/mips/kernel/ptrace.c | 9 +
15916 arch/mips/mm/mmap.c | 4 +-
15917 arch/mn10300/proc-mn103e010/include/proc/cache.h | 4 +-
15918 arch/mn10300/proc-mn2ws0050/include/proc/cache.h | 4 +-
15919 arch/openrisc/include/asm/cache.h | 4 +-
15920 arch/parisc/include/asm/cache.h | 5 +-
15921 arch/parisc/kernel/sys_parisc.c | 4 +
15922 arch/powerpc/Kconfig | 1 +
15923 arch/powerpc/include/asm/cache.h | 4 +-
15924 arch/powerpc/include/asm/thread_info.h | 5 +-
15925 arch/powerpc/kernel/Makefile | 2 +
15926 arch/powerpc/kernel/irq.c | 3 +
15927 arch/powerpc/kernel/process.c | 10 +-
15928 arch/powerpc/kernel/ptrace.c | 14 +
15929 arch/powerpc/kernel/traps.c | 5 +
15930 arch/powerpc/mm/slice.c | 2 +-
15931 arch/s390/Kconfig.debug | 1 +
15932 arch/s390/include/asm/cache.h | 4 +-
15933 arch/score/include/asm/cache.h | 4 +-
15934 arch/sh/include/asm/cache.h | 3 +-
15935 arch/sh/mm/mmap.c | 6 +-
15936 arch/sparc/include/asm/cache.h | 4 +-
15937 arch/sparc/include/asm/pgalloc_64.h | 1 +
15938 arch/sparc/include/asm/thread_info_64.h | 8 +-
15939 arch/sparc/kernel/process_32.c | 6 +-
15940 arch/sparc/kernel/process_64.c | 8 +-
15941 arch/sparc/kernel/ptrace_64.c | 14 +
15942 arch/sparc/kernel/sys_sparc_64.c | 8 +-
15943 arch/sparc/kernel/syscalls.S | 8 +-
15944 arch/sparc/kernel/traps_32.c | 8 +-
15945 arch/sparc/kernel/traps_64.c | 28 +-
15946 arch/sparc/kernel/unaligned_64.c | 2 +-
15947 arch/sparc/mm/fault_64.c | 2 +-
15948 arch/sparc/mm/hugetlbpage.c | 15 +-
15949 arch/tile/Kconfig | 1 +
15950 arch/tile/include/asm/cache.h | 3 +-
15951 arch/tile/mm/hugetlbpage.c | 2 +
15952 arch/um/include/asm/cache.h | 3 +-
15953 arch/unicore32/include/asm/cache.h | 6 +-
15954 arch/x86/Kconfig | 21 +
15955 arch/x86/Kconfig.debug | 2 +
15956 arch/x86/entry/common.c | 14 +
15957 arch/x86/entry/entry_32.S | 2 +-
15958 arch/x86/entry/entry_64.S | 2 +-
15959 arch/x86/ia32/ia32_aout.c | 2 +
15960 arch/x86/include/asm/floppy.h | 20 +-
15961 arch/x86/include/asm/fpu/types.h | 69 +-
15962 arch/x86/include/asm/io.h | 2 +-
15963 arch/x86/include/asm/page.h | 12 +-
15964 arch/x86/include/asm/paravirt_types.h | 23 +-
15965 arch/x86/include/asm/processor.h | 12 +-
15966 arch/x86/include/asm/thread_info.h | 6 +-
15967 arch/x86/include/asm/uaccess.h | 2 +-
15968 arch/x86/kernel/dumpstack.c | 10 +-
15969 arch/x86/kernel/dumpstack_32.c | 2 +-
15970 arch/x86/kernel/dumpstack_64.c | 2 +-
15971 arch/x86/kernel/ioport.c | 13 +
15972 arch/x86/kernel/irq_32.c | 3 +
15973 arch/x86/kernel/irq_64.c | 4 +
15974 arch/x86/kernel/ldt.c | 18 +
15975 arch/x86/kernel/msr.c | 10 +
15976 arch/x86/kernel/ptrace.c | 14 +
15977 arch/x86/kernel/signal.c | 9 +-
15978 arch/x86/kernel/sys_i386_32.c | 9 +-
15979 arch/x86/kernel/sys_x86_64.c | 8 +-
15980 arch/x86/kernel/traps.c | 5 +
15981 arch/x86/kernel/verify_cpu.S | 1 +
15982 arch/x86/kernel/vm86_32.c | 15 +
15983 arch/x86/kvm/svm.c | 14 +-
15984 arch/x86/mm/fault.c | 12 +-
15985 arch/x86/mm/hugetlbpage.c | 15 +-
15986 arch/x86/mm/init.c | 66 +-
15987 arch/x86/mm/init_32.c | 6 +-
15988 arch/x86/net/bpf_jit_comp.c | 4 +
15989 arch/x86/platform/efi/efi_64.c | 2 +-
15990 arch/x86/xen/Kconfig | 1 +
15991 arch/xtensa/variants/dc232b/include/variant/core.h | 2 +-
15992 arch/xtensa/variants/fsf/include/variant/core.h | 3 +-
15993 crypto/ablkcipher.c | 2 +-
15994 crypto/blkcipher.c | 2 +-
15995 crypto/scatterwalk.c | 10 +-
15996 drivers/acpi/acpica/hwxfsleep.c | 11 +-
15997 drivers/acpi/custom_method.c | 4 +
15998 drivers/block/cciss.h | 30 +-
15999 drivers/block/smart1,2.h | 40 +-
16000 drivers/cdrom/cdrom.c | 2 +-
16001 drivers/char/Kconfig | 4 +-
16002 drivers/char/genrtc.c | 1 +
16003 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
16004 drivers/char/mem.c | 17 +
16005 drivers/char/random.c | 5 +-
16006 drivers/cpufreq/sparc-us3-cpufreq.c | 2 -
16007 drivers/crypto/nx/nx-aes-ccm.c | 2 +-
16008 drivers/crypto/nx/nx-aes-gcm.c | 2 +-
16009 drivers/crypto/talitos.c | 2 +-
16010 drivers/firewire/ohci.c | 4 +
16011 drivers/gpu/drm/amd/amdgpu/amdgpu_cgs.c | 70 +-
16012 drivers/gpu/drm/nouveau/nouveau_ttm.c | 28 +-
16013 drivers/gpu/drm/ttm/ttm_bo_manager.c | 10 +-
16014 drivers/gpu/drm/virtio/virtgpu_ttm.c | 10 +-
16015 drivers/gpu/drm/vmwgfx/vmwgfx_gmrid_manager.c | 10 +-
16016 drivers/hid/hid-wiimote-debug.c | 2 +-
16017 drivers/infiniband/hw/nes/nes_cm.c | 22 +-
16018 drivers/iommu/Kconfig | 1 +
16019 drivers/iommu/amd_iommu.c | 14 +-
16020 drivers/isdn/gigaset/bas-gigaset.c | 32 +-
16021 drivers/isdn/gigaset/ser-gigaset.c | 32 +-
16022 drivers/isdn/gigaset/usb-gigaset.c | 32 +-
16023 drivers/isdn/hisax/config.c | 2 +-
16024 drivers/isdn/hisax/hfc_pci.c | 2 +-
16025 drivers/isdn/hisax/hfc_sx.c | 2 +-
16026 drivers/isdn/hisax/q931.c | 6 +-
16027 drivers/isdn/i4l/isdn_concap.c | 6 +-
16028 drivers/isdn/i4l/isdn_x25iface.c | 16 +-
16029 drivers/md/bcache/Kconfig | 1 +
16030 drivers/md/raid5.c | 8 +
16031 drivers/media/pci/solo6x10/solo6x10-g723.c | 2 +-
16032 drivers/media/platform/sti/c8sectpfe/Kconfig | 1 +
16033 drivers/media/platform/vivid/vivid-osd.c | 1 +
16034 drivers/media/radio/radio-cadet.c | 5 +-
16035 drivers/media/usb/dvb-usb/cinergyT2-core.c | 91 +-
16036 drivers/media/usb/dvb-usb/cinergyT2-fe.c | 182 +-
16037 drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 37 +-
16038 drivers/media/usb/dvb-usb/technisat-usb2.c | 75 +-
16039 drivers/message/fusion/mptbase.c | 9 +
16040 drivers/misc/sgi-xp/xp_main.c | 12 +-
16041 drivers/net/ethernet/brocade/bna/bna_enet.c | 8 +-
16042 drivers/net/ppp/pppoe.c | 14 +-
16043 drivers/net/ppp/pptp.c | 6 +
16044 drivers/net/slip/slhc.c | 3 +
16045 drivers/net/wan/lmc/lmc_media.c | 97 +-
16046 drivers/net/wan/x25_asy.c | 6 +-
16047 drivers/net/wan/z85230.c | 24 +-
16048 drivers/net/wireless/ath/ath9k/Kconfig | 1 -
16049 drivers/net/wireless/zd1211rw/zd_usb.c | 2 +-
16050 drivers/pci/pci-sysfs.c | 2 +-
16051 drivers/pci/proc.c | 9 +
16052 drivers/platform/x86/asus-wmi.c | 12 +
16053 drivers/rtc/rtc-dev.c | 3 +
16054 drivers/scsi/bfa/bfa_fcs.c | 19 +-
16055 drivers/scsi/bfa/bfa_fcs_lport.c | 29 +-
16056 drivers/scsi/bfa/bfa_modules.h | 12 +-
16057 drivers/scsi/hpsa.h | 40 +-
16058 drivers/staging/dgnc/dgnc_mgmt.c | 1 +
16059 drivers/staging/lustre/lustre/ldlm/ldlm_flock.c | 2 +-
16060 drivers/staging/lustre/lustre/libcfs/module.c | 10 +-
16061 drivers/target/target_core_sbc.c | 17 +-
16062 drivers/target/target_core_transport.c | 14 +-
16063 drivers/tty/serial/uartlite.c | 4 +-
16064 drivers/tty/sysrq.c | 2 +-
16065 drivers/tty/vt/keyboard.c | 22 +-
16066 drivers/uio/uio.c | 6 +-
16067 drivers/usb/core/hub.c | 5 +
16068 drivers/usb/gadget/function/f_uac1.c | 1 +
16069 drivers/usb/gadget/function/u_uac1.c | 1 +
16070 drivers/usb/host/hwa-hc.c | 9 +-
16071 drivers/usb/usbip/vhci_sysfs.c | 2 +-
16072 drivers/video/fbdev/arcfb.c | 2 +-
16073 drivers/video/fbdev/matrox/matroxfb_DAC1064.c | 10 +-
16074 drivers/video/fbdev/matrox/matroxfb_Ti3026.c | 5 +-
16075 drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +-
16076 drivers/video/logo/logo_linux_clut224.ppm | 2720 ++++-----
16077 drivers/xen/xenfs/xenstored.c | 5 +
16078 firmware/Makefile | 2 +
16079 firmware/WHENCE | 20 +-
16080 firmware/bnx2/bnx2-mips-06-6.2.3.fw.ihex | 5804 +++++++++++++++++
16081 firmware/bnx2/bnx2-mips-09-6.2.1b.fw.ihex | 6496 ++++++++++++++++++++
16082 fs/9p/vfs_inode.c | 4 +-
16083 fs/attr.c | 1 +
16084 fs/autofs4/waitq.c | 9 +
16085 fs/binfmt_aout.c | 7 +
16086 fs/binfmt_elf.c | 50 +-
16087 fs/compat.c | 20 +-
16088 fs/coredump.c | 17 +-
16089 fs/dcache.c | 3 +
16090 fs/debugfs/inode.c | 11 +-
16091 fs/exec.c | 219 +-
16092 fs/ext2/balloc.c | 4 +-
16093 fs/ext2/super.c | 8 +-
16094 fs/ext4/balloc.c | 4 +-
16095 fs/fcntl.c | 4 +
16096 fs/fhandle.c | 3 +-
16097 fs/file.c | 4 +
16098 fs/filesystems.c | 4 +
16099 fs/fs_struct.c | 20 +-
16100 fs/hugetlbfs/inode.c | 5 +-
16101 fs/inode.c | 8 +-
16102 fs/kernfs/dir.c | 6 +
16103 fs/mount.h | 4 +-
16104 fs/namei.c | 286 +-
16105 fs/namespace.c | 24 +
16106 fs/nfsd/nfscache.c | 2 +-
16107 fs/open.c | 38 +
16108 fs/overlayfs/inode.c | 11 +-
16109 fs/overlayfs/super.c | 6 +-
16110 fs/pipe.c | 2 +-
16111 fs/posix_acl.c | 15 +-
16112 fs/proc/Kconfig | 10 +-
16113 fs/proc/array.c | 69 +-
16114 fs/proc/base.c | 186 +-
16115 fs/proc/cmdline.c | 4 +
16116 fs/proc/devices.c | 4 +
16117 fs/proc/fd.c | 17 +-
16118 fs/proc/generic.c | 64 +
16119 fs/proc/inode.c | 17 +
16120 fs/proc/internal.h | 11 +-
16121 fs/proc/interrupts.c | 4 +
16122 fs/proc/kcore.c | 3 +
16123 fs/proc/meminfo.c | 7 +-
16124 fs/proc/namespaces.c | 4 +-
16125 fs/proc/proc_net.c | 31 +
16126 fs/proc/proc_sysctl.c | 52 +-
16127 fs/proc/root.c | 8 +
16128 fs/proc/stat.c | 69 +-
16129 fs/proc/task_mmu.c | 66 +-
16130 fs/readdir.c | 19 +
16131 fs/reiserfs/item_ops.c | 24 +-
16132 fs/reiserfs/super.c | 4 +
16133 fs/select.c | 2 +
16134 fs/seq_file.c | 30 +-
16135 fs/splice.c | 8 +
16136 fs/stat.c | 20 +-
16137 fs/sysfs/dir.c | 30 +-
16138 fs/sysv/inode.c | 11 +-
16139 fs/utimes.c | 7 +
16140 fs/xattr.c | 26 +-
16141 grsecurity/Kconfig | 1182 ++++
16142 grsecurity/Makefile | 54 +
16143 grsecurity/gracl.c | 2757 +++++++++
16144 grsecurity/gracl_alloc.c | 105 +
16145 grsecurity/gracl_cap.c | 127 +
16146 grsecurity/gracl_compat.c | 269 +
16147 grsecurity/gracl_fs.c | 448 ++
16148 grsecurity/gracl_ip.c | 386 ++
16149 grsecurity/gracl_learn.c | 207 +
16150 grsecurity/gracl_policy.c | 1786 ++++++
16151 grsecurity/gracl_res.c | 68 +
16152 grsecurity/gracl_segv.c | 304 +
16153 grsecurity/gracl_shm.c | 40 +
16154 grsecurity/grsec_chdir.c | 19 +
16155 grsecurity/grsec_chroot.c | 467 ++
16156 grsecurity/grsec_disabled.c | 445 ++
16157 grsecurity/grsec_exec.c | 189 +
16158 grsecurity/grsec_fifo.c | 26 +
16159 grsecurity/grsec_fork.c | 23 +
16160 grsecurity/grsec_init.c | 290 +
16161 grsecurity/grsec_ipc.c | 48 +
16162 grsecurity/grsec_link.c | 65 +
16163 grsecurity/grsec_log.c | 340 +
16164 grsecurity/grsec_mem.c | 48 +
16165 grsecurity/grsec_mount.c | 65 +
16166 grsecurity/grsec_pax.c | 47 +
16167 grsecurity/grsec_proc.c | 20 +
16168 grsecurity/grsec_ptrace.c | 30 +
16169 grsecurity/grsec_sig.c | 236 +
16170 grsecurity/grsec_sock.c | 244 +
16171 grsecurity/grsec_sysctl.c | 488 ++
16172 grsecurity/grsec_time.c | 16 +
16173 grsecurity/grsec_tpe.c | 78 +
16174 grsecurity/grsec_usb.c | 15 +
16175 grsecurity/grsum.c | 64 +
16176 include/linux/binfmts.h | 5 +-
16177 include/linux/bitops.h | 2 +-
16178 include/linux/capability.h | 13 +
16179 include/linux/compiler-gcc.h | 5 +
16180 include/linux/compiler.h | 8 +
16181 include/linux/cred.h | 8 +-
16182 include/linux/dcache.h | 5 +-
16183 include/linux/fs.h | 24 +-
16184 include/linux/fs_struct.h | 2 +-
16185 include/linux/fsnotify.h | 6 +
16186 include/linux/gracl.h | 342 +
16187 include/linux/gracl_compat.h | 156 +
16188 include/linux/gralloc.h | 9 +
16189 include/linux/grdefs.h | 140 +
16190 include/linux/grinternal.h | 230 +
16191 include/linux/grmsg.h | 118 +
16192 include/linux/grsecurity.h | 255 +
16193 include/linux/grsock.h | 19 +
16194 include/linux/ipc.h | 2 +-
16195 include/linux/ipc_namespace.h | 2 +-
16196 include/linux/kallsyms.h | 18 +-
16197 include/linux/kmod.h | 5 +
16198 include/linux/kobject.h | 2 +-
16199 include/linux/lsm_hooks.h | 4 +-
16200 include/linux/mm.h | 12 +
16201 include/linux/mm_types.h | 4 +-
16202 include/linux/module.h | 5 +-
16203 include/linux/mount.h | 2 +-
16204 include/linux/msg.h | 2 +-
16205 include/linux/netfilter/xt_gradm.h | 9 +
16206 include/linux/path.h | 4 +-
16207 include/linux/perf_event.h | 13 +-
16208 include/linux/pid_namespace.h | 2 +-
16209 include/linux/printk.h | 2 +-
16210 include/linux/proc_fs.h | 22 +-
16211 include/linux/proc_ns.h | 2 +-
16212 include/linux/ptrace.h | 24 +-
16213 include/linux/random.h | 2 +-
16214 include/linux/rbtree_augmented.h | 4 +-
16215 include/linux/scatterlist.h | 12 +-
16216 include/linux/sched.h | 114 +-
16217 include/linux/security.h | 1 +
16218 include/linux/sem.h | 2 +-
16219 include/linux/seq_file.h | 5 +
16220 include/linux/shm.h | 6 +-
16221 include/linux/skbuff.h | 3 +
16222 include/linux/slab.h | 9 -
16223 include/linux/sysctl.h | 8 +-
16224 include/linux/thread_info.h | 6 +-
16225 include/linux/tty.h | 2 +-
16226 include/linux/tty_driver.h | 4 +-
16227 include/linux/uidgid.h | 5 +
16228 include/linux/user_namespace.h | 2 +-
16229 include/linux/utsname.h | 2 +-
16230 include/linux/vermagic.h | 16 +-
16231 include/linux/vmalloc.h | 20 +-
16232 include/net/af_unix.h | 2 +-
16233 include/net/dst.h | 33 +
16234 include/net/ip.h | 2 +-
16235 include/net/neighbour.h | 2 +-
16236 include/net/net_namespace.h | 2 +-
16237 include/net/sock.h | 4 +-
16238 include/target/target_core_base.h | 2 +-
16239 include/trace/events/fs.h | 53 +
16240 include/uapi/linux/personality.h | 1 +
16241 init/Kconfig | 4 +-
16242 init/main.c | 35 +-
16243 ipc/mqueue.c | 1 +
16244 ipc/msg.c | 3 +-
16245 ipc/sem.c | 3 +-
16246 ipc/shm.c | 26 +-
16247 ipc/util.c | 6 +
16248 kernel/auditsc.c | 2 +-
16249 kernel/bpf/syscall.c | 8 +-
16250 kernel/capability.c | 41 +-
16251 kernel/cgroup.c | 5 +-
16252 kernel/compat.c | 1 +
16253 kernel/configs.c | 11 +
16254 kernel/cred.c | 112 +-
16255 kernel/events/core.c | 16 +-
16256 kernel/exit.c | 10 +-
16257 kernel/fork.c | 86 +-
16258 kernel/futex.c | 6 +-
16259 kernel/futex_compat.c | 2 +-
16260 kernel/kallsyms.c | 9 +
16261 kernel/kcmp.c | 8 +-
16262 kernel/kexec_core.c | 2 +-
16263 kernel/kmod.c | 95 +-
16264 kernel/kprobes.c | 7 +-
16265 kernel/ksysfs.c | 2 +
16266 kernel/locking/lockdep_proc.c | 10 +-
16267 kernel/module.c | 108 +-
16268 kernel/panic.c | 4 +-
16269 kernel/pid.c | 23 +-
16270 kernel/power/Kconfig | 2 +
16271 kernel/printk/printk.c | 20 +-
16272 kernel/ptrace.c | 56 +-
16273 kernel/resource.c | 10 +
16274 kernel/sched/core.c | 11 +-
16275 kernel/signal.c | 37 +-
16276 kernel/sys.c | 64 +-
16277 kernel/sysctl.c | 172 +-
16278 kernel/taskstats.c | 6 +
16279 kernel/time/posix-timers.c | 8 +
16280 kernel/time/time.c | 5 +
16281 kernel/time/timekeeping.c | 3 +
16282 kernel/time/timer_list.c | 13 +-
16283 kernel/time/timer_stats.c | 10 +-
16284 kernel/trace/Kconfig | 2 +
16285 kernel/trace/trace_syscalls.c | 8 +
16286 kernel/user_namespace.c | 15 +
16287 lib/Kconfig.debug | 13 +-
16288 lib/Kconfig.kasan | 2 +-
16289 lib/is_single_threaded.c | 3 +
16290 lib/list_debug.c | 65 +-
16291 lib/nlattr.c | 2 +
16292 lib/rbtree.c | 4 +-
16293 lib/vsprintf.c | 39 +-
16294 localversion-grsec | 1 +
16295 mm/Kconfig | 8 +-
16296 mm/Kconfig.debug | 1 +
16297 mm/filemap.c | 1 +
16298 mm/kmemleak.c | 4 +-
16299 mm/memory.c | 2 +-
16300 mm/mempolicy.c | 12 +-
16301 mm/migrate.c | 3 +-
16302 mm/mlock.c | 6 +-
16303 mm/mmap.c | 93 +-
16304 mm/mprotect.c | 8 +
16305 mm/oom_kill.c | 28 +-
16306 mm/page_alloc.c | 2 +-
16307 mm/process_vm_access.c | 8 +-
16308 mm/shmem.c | 36 +-
16309 mm/slab.c | 14 +-
16310 mm/slab_common.c | 2 +-
16311 mm/slob.c | 12 +
16312 mm/slub.c | 33 +-
16313 mm/util.c | 3 +
16314 mm/vmalloc.c | 129 +-
16315 mm/vmstat.c | 29 +-
16316 net/appletalk/atalk_proc.c | 2 +-
16317 net/atm/lec.c | 6 +-
16318 net/atm/mpoa_caches.c | 42 +-
16319 net/bluetooth/sco.c | 3 +
16320 net/can/bcm.c | 2 +-
16321 net/can/proc.c | 2 +-
16322 net/core/dev_ioctl.c | 7 +-
16323 net/core/filter.c | 8 +-
16324 net/core/net-procfs.c | 17 +-
16325 net/core/pktgen.c | 2 +-
16326 net/core/sock.c | 3 +-
16327 net/core/sysctl_net_core.c | 2 +-
16328 net/decnet/dn_dev.c | 2 +-
16329 net/ipv4/devinet.c | 6 +-
16330 net/ipv4/inet_hashtables.c | 4 +
16331 net/ipv4/ip_input.c | 7 +
16332 net/ipv4/ip_sockglue.c | 3 +-
16333 net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 +-
16334 net/ipv4/netfilter/nf_nat_pptp.c | 2 +-
16335 net/ipv4/route.c | 6 +-
16336 net/ipv4/tcp_input.c | 4 +-
16337 net/ipv4/tcp_ipv4.c | 29 +-
16338 net/ipv4/tcp_minisocks.c | 9 +-
16339 net/ipv4/tcp_timer.c | 11 +
16340 net/ipv4/udp.c | 24 +
16341 net/ipv6/addrconf.c | 13 +-
16342 net/ipv6/proc.c | 2 +-
16343 net/ipv6/tcp_ipv6.c | 26 +-
16344 net/ipv6/udp.c | 7 +
16345 net/ipx/ipx_proc.c | 2 +-
16346 net/irda/irproc.c | 2 +-
16347 net/llc/llc_proc.c | 2 +-
16348 net/netfilter/Kconfig | 10 +
16349 net/netfilter/Makefile | 1 +
16350 net/netfilter/nf_conntrack_core.c | 8 +
16351 net/netfilter/xt_gradm.c | 51 +
16352 net/netfilter/xt_hashlimit.c | 4 +-
16353 net/netfilter/xt_recent.c | 2 +-
16354 net/sched/sch_api.c | 2 +-
16355 net/sctp/socket.c | 4 +-
16356 net/socket.c | 75 +-
16357 net/sunrpc/Kconfig | 1 +
16358 net/sunrpc/cache.c | 2 +-
16359 net/sunrpc/stats.c | 2 +-
16360 net/sysctl_net.c | 2 +-
16361 net/unix/af_unix.c | 52 +-
16362 net/vmw_vsock/vmci_transport_notify.c | 30 +-
16363 net/vmw_vsock/vmci_transport_notify_qstate.c | 30 +-
16364 net/x25/sysctl_net_x25.c | 2 +-
16365 net/x25/x25_proc.c | 2 +-
16366 scripts/package/Makefile | 2 +-
16367 scripts/package/mkspec | 41 +-
16368 security/Kconfig | 369 +-
16369 security/apparmor/file.c | 4 +-
16370 security/apparmor/lsm.c | 8 +-
16371 security/commoncap.c | 36 +-
16372 security/min_addr.c | 2 +
16373 security/smack/smack_lsm.c | 8 +-
16374 security/tomoyo/file.c | 12 +-
16375 security/tomoyo/mount.c | 4 +
16376 security/tomoyo/tomoyo.c | 20 +-
16377 security/yama/Kconfig | 2 +-
16378 security/yama/yama_lsm.c | 4 +-
16379 sound/synth/emux/emux_seq.c | 14 +-
16380 sound/usb/line6/driver.c | 40 +-
16381 sound/usb/line6/toneport.c | 12 +-
16382 tools/gcc/.gitignore | 1 +
16383 tools/gcc/Makefile | 12 +
16384 tools/gcc/gen-random-seed.sh | 8 +
16385 tools/gcc/randomize_layout_plugin.c | 930 +++
16386 tools/gcc/size_overflow_plugin/.gitignore | 1 +
16387 .../size_overflow_plugin/size_overflow_hash.data | 459 ++-
16388 511 files changed, 32631 insertions(+), 3196 deletions(-)
16389
16390 commit a76adb92ce39aee8eec5a025c828030ad6135c6d
16391 Author: Brad Spengler <spender@grsecurity.net>
16392 Date: Tue Dec 15 14:31:49 2015 -0500
16393
16394 Update to pax-linux-4.3.3-test11.patch:
16395 - fixed a few compile regressions with the recent plugin changes, reported by spender
16396 - updated the size overflow hash table
16397
16398 tools/gcc/latent_entropy_plugin.c | 2 +-
16399 .../size_overflow_plugin/size_overflow_hash.data | 66 +++++++++++++++++---
16400 tools/gcc/stackleak_plugin.c | 2 +-
16401 tools/gcc/structleak_plugin.c | 6 +--
16402 4 files changed, 60 insertions(+), 16 deletions(-)
16403
16404 commit f7284b1fc06628fcb2d35d2beecdea5454d46af9
16405 Author: Brad Spengler <spender@grsecurity.net>
16406 Date: Tue Dec 15 11:50:24 2015 -0500
16407
16408 Apply structleak ICE fix for gcc < 4.9
16409
16410 tools/gcc/structleak_plugin.c | 4 ++++
16411 1 files changed, 4 insertions(+), 0 deletions(-)
16412
16413 commit 92fe3eb9fd10ec7f7334decab1526989669b0287
16414 Author: Brad Spengler <spender@grsecurity.net>
16415 Date: Tue Dec 15 07:57:06 2015 -0500
16416
16417 Update to pax-linux-4.3.1-test10.patch:
16418 - Emese fixed INDIRECT_REF and TARGET_MEM_REF handling in the initify plugin
16419 - Emese regenerated the size overflow hash tables for 4.3
16420 - fixed some compat syscall exit paths to restore r12 under KERNEXEC/or
16421 - the latent entropy, stackleak and structleak plugins no longer split the entry block unnecessarily
16422
16423 arch/x86/entry/entry_64.S | 2 +-
16424 arch/x86/entry/entry_64_compat.S | 15 +-
16425 scripts/package/builddeb | 2 +-
16426 tools/gcc/initify_plugin.c | 11 +-
16427 tools/gcc/latent_entropy_plugin.c | 20 +-
16428 .../disable_size_overflow_hash.data | 4 +
16429 .../size_overflow_plugin/size_overflow_hash.data | 5345 +++++++++++---------
16430 tools/gcc/stackleak_plugin.c | 26 +-
16431 tools/gcc/structleak_plugin.c | 21 +-
16432 9 files changed, 3079 insertions(+), 2367 deletions(-)
16433
16434 commit 5bd245cb687319079c2f1c0d6a1170791ed1ed2c
16435 Merge: b5847e6 3548341
16436 Author: Brad Spengler <spender@grsecurity.net>
16437 Date: Tue Dec 15 07:47:56 2015 -0500
16438
16439 Merge branch 'linux-4.3.y' into pax-4_3
16440
16441 Conflicts:
16442 net/unix/af_unix.c
16443
16444 commit b5847e6a896c5d99191135ca4d7c3b6be8f116ff
16445 Author: Brad Spengler <spender@grsecurity.net>
16446 Date: Wed Dec 9 23:11:36 2015 -0500
16447
16448 Update to pax-linux-4.3.1-test9.patch:
16449 - fixed __get_user on x86 to lie less about the size of the load, reported by peetaur (https://forums.grsecurity.net/viewtopic.php?f=3&t=4332)
16450 - Emese fixed an intentional overflow caused by gcc, reported by saironiq (https://forums.grsecurity.net/viewtopic.php?f=3&t=4333)
16451 - Emese fixed a false positive overflow report in the forcedeth driver, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?t=4334)
16452 - Emese fixed a false positive overflow report in KVM's emulator, reported by fx3 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4336)
16453 - Emese fixed the initify plugin to detect some captured use of __func__, reported by Rasmus Villemoes <linux@rasmusvillemoes.dk>
16454 - constrained shmmax and shmall to avoid triggering size overflow checks, reported by Mathias Krause <minipli@ld-linux.so>
16455 - the checker plugin can partially handle sparse's locking context annotations, it's context insensitive and thus not exactly useful for now, also see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=59856
16456
16457 Makefile | 6 +
16458 arch/x86/include/asm/compat.h | 4 +
16459 arch/x86/include/asm/dma.h | 2 +
16460 arch/x86/include/asm/pmem.h | 2 +-
16461 arch/x86/include/asm/uaccess.h | 20 +-
16462 arch/x86/kernel/apic/vector.c | 6 +-
16463 arch/x86/kernel/cpu/mtrr/generic.c | 6 +-
16464 arch/x86/kernel/cpu/perf_event_intel.c | 28 +-
16465 arch/x86/kernel/head_64.S | 1 -
16466 arch/x86/kvm/i8259.c | 10 +-
16467 arch/x86/kvm/ioapic.c | 2 +
16468 arch/x86/kvm/x86.c | 2 +
16469 arch/x86/lib/usercopy_64.c | 2 +-
16470 arch/x86/mm/mpx.c | 4 +-
16471 arch/x86/mm/pageattr.c | 7 +
16472 drivers/base/devres.c | 4 +-
16473 drivers/base/power/runtime.c | 6 +-
16474 drivers/base/regmap/regmap.c | 4 +-
16475 drivers/block/drbd/drbd_receiver.c | 4 +-
16476 drivers/block/drbd/drbd_worker.c | 6 +-
16477 drivers/char/virtio_console.c | 6 +-
16478 drivers/md/dm.c | 12 +-
16479 drivers/net/ethernet/nvidia/forcedeth.c | 4 +-
16480 drivers/net/macvtap.c | 4 +-
16481 drivers/video/fbdev/core/fbmem.c | 10 +-
16482 fs/compat.c | 3 +-
16483 fs/coredump.c | 2 +-
16484 fs/dcache.c | 13 +-
16485 fs/fhandle.c | 2 +-
16486 fs/file.c | 14 +-
16487 fs/fs-writeback.c | 11 +-
16488 fs/overlayfs/copy_up.c | 2 +-
16489 fs/readdir.c | 3 +-
16490 fs/super.c | 3 +-
16491 include/linux/compiler.h | 36 ++-
16492 include/linux/rcupdate.h | 8 +
16493 include/linux/sched.h | 4 +-
16494 include/linux/seqlock.h | 10 +
16495 include/linux/spinlock.h | 17 +-
16496 include/linux/srcu.h | 5 +-
16497 include/linux/syscalls.h | 2 +-
16498 include/linux/writeback.h | 3 +-
16499 include/uapi/linux/swab.h | 6 +-
16500 ipc/ipc_sysctl.c | 6 +
16501 kernel/exit.c | 25 +-
16502 kernel/resource.c | 4 +-
16503 kernel/signal.c | 12 +-
16504 kernel/user.c | 2 +-
16505 kernel/workqueue.c | 6 +-
16506 lib/rhashtable.c | 4 +-
16507 net/compat.c | 2 +-
16508 net/ipv4/xfrm4_mode_transport.c | 2 +-
16509 security/keys/internal.h | 8 +-
16510 security/keys/keyring.c | 4 -
16511 sound/core/seq/seq_clientmgr.c | 8 +-
16512 sound/core/seq/seq_compat.c | 2 +-
16513 sound/core/seq/seq_memory.c | 6 +-
16514 tools/gcc/checker_plugin.c | 415 +++++++++++++++++++-
16515 tools/gcc/gcc-common.h | 1 +
16516 tools/gcc/initify_plugin.c | 33 ++-
16517 .../disable_size_overflow_hash.data | 1 +
16518 .../size_overflow_plugin/size_overflow_hash.data | 1 -
16519 62 files changed, 708 insertions(+), 140 deletions(-)
16520
16521 commit f2634c2f6995f4231616f24ed016f890c701f939
16522 Merge: 1241bff 5f8b236
16523 Author: Brad Spengler <spender@grsecurity.net>
16524 Date: Wed Dec 9 21:50:47 2015 -0500
16525
16526 Merge branch 'linux-4.3.y' into pax-4_3
16527
16528 Conflicts:
16529 arch/x86/kernel/fpu/xstate.c
16530 arch/x86/kernel/head_64.S
16531
16532 commit 1241bff82e3d7dadb05de0a60b8d2822afc6547c
16533 Author: Brad Spengler <spender@grsecurity.net>
16534 Date: Sun Dec 6 08:44:56 2015 -0500
16535
16536 Update to pax-linux-4.3-test8.patch:
16537 - fixed integer truncation check in md introduced by upstream commits 284ae7cab0f7335c9e0aa8992b28415ef1a54c7c and 58c0fed400603a802968b23ddf78f029c5a84e41, reported by BeiKed9o (https://forums.grsecurity.net/viewtopic.php?f=3&t=4328)
16538 - gcc plugin compilation problems will now also produce the output of the checking script to make diagnosis easier, reported by hunger
16539 - Emese fixed a false positive size overflow report in __vhost_add_used_n, reported by quasar366 (https://forums.grsecurity.net/viewtopic.php?f=3&t=4329)
16540 - fixed a potential integer truncation error in the raid1 code caught by the size overflow plugin, reported by d1b (https://forums.grsecurity.net/viewtopic.php?f=3&t=4331)
16541
16542 Makefile | 5 +++
16543 drivers/md/md.c | 5 ++-
16544 drivers/md/raid1.c | 2 +-
16545 fs/proc/task_mmu.c | 3 ++
16546 .../disable_size_overflow_hash.data | 4 ++-
16547 .../size_overflow_plugin/intentional_overflow.c | 32 ++++++++++++++++---
16548 .../size_overflow_plugin/size_overflow_hash.data | 2 -
16549 .../size_overflow_plugin/size_overflow_plugin.c | 2 +-
16550 8 files changed, 43 insertions(+), 12 deletions(-)
16551
16552 commit cce6a9f9bdd27096632ca1c0246dcc07f2eb1a18
16553 Author: Brad Spengler <spender@grsecurity.net>
16554 Date: Fri Dec 4 14:24:12 2015 -0500
16555
16556 Initial import of pax-linux-4.3-test7.patch
16557
16558 Documentation/dontdiff | 47 +-
16559 Documentation/kbuild/makefiles.txt | 39 +-
16560 Documentation/kernel-parameters.txt | 28 +
16561 Makefile | 108 +-
16562 arch/alpha/include/asm/atomic.h | 10 +
16563 arch/alpha/include/asm/elf.h | 7 +
16564 arch/alpha/include/asm/pgalloc.h | 6 +
16565 arch/alpha/include/asm/pgtable.h | 11 +
16566 arch/alpha/kernel/module.c | 2 +-
16567 arch/alpha/kernel/osf_sys.c | 8 +-
16568 arch/alpha/mm/fault.c | 141 +-
16569 arch/arm/Kconfig | 2 +-
16570 arch/arm/include/asm/atomic.h | 320 +-
16571 arch/arm/include/asm/cache.h | 5 +-
16572 arch/arm/include/asm/cacheflush.h | 2 +-
16573 arch/arm/include/asm/checksum.h | 14 +-
16574 arch/arm/include/asm/cmpxchg.h | 4 +
16575 arch/arm/include/asm/cpuidle.h | 2 +-
16576 arch/arm/include/asm/domain.h | 22 +-
16577 arch/arm/include/asm/elf.h | 9 +-
16578 arch/arm/include/asm/fncpy.h | 2 +
16579 arch/arm/include/asm/futex.h | 10 +
16580 arch/arm/include/asm/kmap_types.h | 2 +-
16581 arch/arm/include/asm/mach/dma.h | 2 +-
16582 arch/arm/include/asm/mach/map.h | 16 +-
16583 arch/arm/include/asm/outercache.h | 2 +-
16584 arch/arm/include/asm/page.h | 3 +-
16585 arch/arm/include/asm/pgalloc.h | 20 +
16586 arch/arm/include/asm/pgtable-2level-hwdef.h | 4 +-
16587 arch/arm/include/asm/pgtable-2level.h | 3 +
16588 arch/arm/include/asm/pgtable-3level.h | 3 +
16589 arch/arm/include/asm/pgtable.h | 54 +-
16590 arch/arm/include/asm/smp.h | 2 +-
16591 arch/arm/include/asm/tls.h | 3 +
16592 arch/arm/include/asm/uaccess.h | 79 +-
16593 arch/arm/include/uapi/asm/ptrace.h | 2 +-
16594 arch/arm/kernel/armksyms.c | 2 +-
16595 arch/arm/kernel/cpuidle.c | 2 +-
16596 arch/arm/kernel/entry-armv.S | 109 +-
16597 arch/arm/kernel/entry-common.S | 40 +-
16598 arch/arm/kernel/entry-header.S | 55 +
16599 arch/arm/kernel/fiq.c | 3 +
16600 arch/arm/kernel/module-plts.c | 7 +-
16601 arch/arm/kernel/module.c | 38 +-
16602 arch/arm/kernel/patch.c | 2 +
16603 arch/arm/kernel/process.c | 90 +-
16604 arch/arm/kernel/reboot.c | 1 +
16605 arch/arm/kernel/setup.c | 20 +-
16606 arch/arm/kernel/signal.c | 35 +-
16607 arch/arm/kernel/smp.c | 2 +-
16608 arch/arm/kernel/tcm.c | 4 +-
16609 arch/arm/kernel/vmlinux.lds.S | 6 +-
16610 arch/arm/kvm/arm.c | 8 +-
16611 arch/arm/lib/copy_page.S | 1 +
16612 arch/arm/lib/csumpartialcopyuser.S | 4 +-
16613 arch/arm/lib/delay.c | 2 +-
16614 arch/arm/lib/uaccess_with_memcpy.c | 4 +-
16615 arch/arm/mach-exynos/suspend.c | 6 +-
16616 arch/arm/mach-mvebu/coherency.c | 4 +-
16617 arch/arm/mach-omap2/board-n8x0.c | 2 +-
16618 arch/arm/mach-omap2/omap-mpuss-lowpower.c | 4 +-
16619 arch/arm/mach-omap2/omap-smp.c | 1 +
16620 arch/arm/mach-omap2/omap-wakeupgen.c | 2 +-
16621 arch/arm/mach-omap2/omap_device.c | 4 +-
16622 arch/arm/mach-omap2/omap_device.h | 4 +-
16623 arch/arm/mach-omap2/omap_hwmod.c | 4 +-
16624 arch/arm/mach-omap2/powerdomains43xx_data.c | 5 +-
16625 arch/arm/mach-omap2/wd_timer.c | 6 +-
16626 arch/arm/mach-shmobile/platsmp-apmu.c | 5 +-
16627 arch/arm/mach-tegra/cpuidle-tegra20.c | 2 +-
16628 arch/arm/mach-tegra/irq.c | 1 +
16629 arch/arm/mach-ux500/pm.c | 1 +
16630 arch/arm/mach-zynq/platsmp.c | 1 +
16631 arch/arm/mm/Kconfig | 6 +-
16632 arch/arm/mm/alignment.c | 8 +
16633 arch/arm/mm/cache-l2x0.c | 2 +-
16634 arch/arm/mm/context.c | 10 +-
16635 arch/arm/mm/fault.c | 146 +
16636 arch/arm/mm/fault.h | 12 +
16637 arch/arm/mm/init.c | 39 +
16638 arch/arm/mm/ioremap.c | 4 +-
16639 arch/arm/mm/mmap.c | 30 +-
16640 arch/arm/mm/mmu.c | 162 +-
16641 arch/arm/net/bpf_jit_32.c | 3 +
16642 arch/arm/plat-iop/setup.c | 2 +-
16643 arch/arm/plat-omap/sram.c | 2 +
16644 arch/arm64/include/asm/atomic.h | 10 +
16645 arch/arm64/include/asm/percpu.h | 8 +-
16646 arch/arm64/include/asm/pgalloc.h | 5 +
16647 arch/arm64/include/asm/uaccess.h | 1 +
16648 arch/arm64/mm/dma-mapping.c | 2 +-
16649 arch/avr32/include/asm/elf.h | 8 +-
16650 arch/avr32/include/asm/kmap_types.h | 4 +-
16651 arch/avr32/mm/fault.c | 27 +
16652 arch/frv/include/asm/atomic.h | 10 +
16653 arch/frv/include/asm/kmap_types.h | 2 +-
16654 arch/frv/mm/elf-fdpic.c | 3 +-
16655 arch/ia64/Makefile | 1 +
16656 arch/ia64/include/asm/atomic.h | 10 +
16657 arch/ia64/include/asm/elf.h | 7 +
16658 arch/ia64/include/asm/pgalloc.h | 12 +
16659 arch/ia64/include/asm/pgtable.h | 13 +-
16660 arch/ia64/include/asm/spinlock.h | 2 +-
16661 arch/ia64/include/asm/uaccess.h | 27 +-
16662 arch/ia64/kernel/module.c | 45 +-
16663 arch/ia64/kernel/palinfo.c | 2 +-
16664 arch/ia64/kernel/sys_ia64.c | 7 +
16665 arch/ia64/kernel/vmlinux.lds.S | 2 +-
16666 arch/ia64/mm/fault.c | 32 +-
16667 arch/ia64/mm/init.c | 15 +-
16668 arch/m32r/lib/usercopy.c | 6 +
16669 arch/mips/cavium-octeon/dma-octeon.c | 2 +-
16670 arch/mips/include/asm/atomic.h | 368 +-
16671 arch/mips/include/asm/elf.h | 7 +
16672 arch/mips/include/asm/exec.h | 2 +-
16673 arch/mips/include/asm/hw_irq.h | 2 +-
16674 arch/mips/include/asm/local.h | 57 +
16675 arch/mips/include/asm/page.h | 2 +-
16676 arch/mips/include/asm/pgalloc.h | 5 +
16677 arch/mips/include/asm/pgtable.h | 3 +
16678 arch/mips/include/asm/uaccess.h | 1 +
16679 arch/mips/kernel/binfmt_elfn32.c | 7 +
16680 arch/mips/kernel/binfmt_elfo32.c | 7 +
16681 arch/mips/kernel/irq-gt641xx.c | 2 +-
16682 arch/mips/kernel/irq.c | 6 +-
16683 arch/mips/kernel/pm-cps.c | 2 +-
16684 arch/mips/kernel/process.c | 12 -
16685 arch/mips/kernel/sync-r4k.c | 24 +-
16686 arch/mips/kernel/traps.c | 13 +-
16687 arch/mips/mm/fault.c | 25 +
16688 arch/mips/mm/mmap.c | 51 +-
16689 arch/mips/sgi-ip27/ip27-nmi.c | 6 +-
16690 arch/mips/sni/rm200.c | 2 +-
16691 arch/mips/vr41xx/common/icu.c | 2 +-
16692 arch/mips/vr41xx/common/irq.c | 4 +-
16693 arch/parisc/include/asm/atomic.h | 10 +
16694 arch/parisc/include/asm/elf.h | 7 +
16695 arch/parisc/include/asm/pgalloc.h | 6 +
16696 arch/parisc/include/asm/pgtable.h | 11 +
16697 arch/parisc/include/asm/uaccess.h | 4 +-
16698 arch/parisc/kernel/module.c | 50 +-
16699 arch/parisc/kernel/sys_parisc.c | 15 +
16700 arch/parisc/kernel/traps.c | 4 +-
16701 arch/parisc/mm/fault.c | 140 +-
16702 arch/powerpc/include/asm/atomic.h | 329 +-
16703 arch/powerpc/include/asm/elf.h | 12 +
16704 arch/powerpc/include/asm/exec.h | 2 +-
16705 arch/powerpc/include/asm/kmap_types.h | 2 +-
16706 arch/powerpc/include/asm/local.h | 46 +
16707 arch/powerpc/include/asm/mman.h | 2 +-
16708 arch/powerpc/include/asm/page.h | 8 +-
16709 arch/powerpc/include/asm/page_64.h | 7 +-
16710 arch/powerpc/include/asm/pgalloc-64.h | 7 +
16711 arch/powerpc/include/asm/pgtable.h | 1 +
16712 arch/powerpc/include/asm/pte-hash32.h | 1 +
16713 arch/powerpc/include/asm/reg.h | 1 +
16714 arch/powerpc/include/asm/smp.h | 2 +-
16715 arch/powerpc/include/asm/spinlock.h | 42 +-
16716 arch/powerpc/include/asm/uaccess.h | 141 +-
16717 arch/powerpc/kernel/Makefile | 5 +
16718 arch/powerpc/kernel/exceptions-64e.S | 4 +-
16719 arch/powerpc/kernel/exceptions-64s.S | 2 +-
16720 arch/powerpc/kernel/module_32.c | 15 +-
16721 arch/powerpc/kernel/process.c | 46 -
16722 arch/powerpc/kernel/signal_32.c | 2 +-
16723 arch/powerpc/kernel/signal_64.c | 2 +-
16724 arch/powerpc/kernel/traps.c | 21 +
16725 arch/powerpc/kernel/vdso.c | 5 +-
16726 arch/powerpc/lib/usercopy_64.c | 18 -
16727 arch/powerpc/mm/fault.c | 56 +-
16728 arch/powerpc/mm/mmap.c | 16 +
16729 arch/powerpc/mm/slice.c | 13 +-
16730 arch/powerpc/platforms/cell/spufs/file.c | 4 +-
16731 arch/s390/include/asm/atomic.h | 10 +
16732 arch/s390/include/asm/elf.h | 7 +
16733 arch/s390/include/asm/exec.h | 2 +-
16734 arch/s390/include/asm/uaccess.h | 13 +-
16735 arch/s390/kernel/module.c | 22 +-
16736 arch/s390/kernel/process.c | 24 -
16737 arch/s390/mm/mmap.c | 16 +
16738 arch/score/include/asm/exec.h | 2 +-
16739 arch/score/kernel/process.c | 5 -
16740 arch/sh/mm/mmap.c | 22 +-
16741 arch/sparc/include/asm/atomic_64.h | 110 +-
16742 arch/sparc/include/asm/cache.h | 2 +-
16743 arch/sparc/include/asm/elf_32.h | 7 +
16744 arch/sparc/include/asm/elf_64.h | 7 +
16745 arch/sparc/include/asm/pgalloc_32.h | 1 +
16746 arch/sparc/include/asm/pgalloc_64.h | 1 +
16747 arch/sparc/include/asm/pgtable.h | 4 +
16748 arch/sparc/include/asm/pgtable_32.h | 15 +-
16749 arch/sparc/include/asm/pgtsrmmu.h | 5 +
16750 arch/sparc/include/asm/setup.h | 4 +-
16751 arch/sparc/include/asm/spinlock_64.h | 35 +-
16752 arch/sparc/include/asm/thread_info_32.h | 1 +
16753 arch/sparc/include/asm/thread_info_64.h | 2 +
16754 arch/sparc/include/asm/uaccess.h | 1 +
16755 arch/sparc/include/asm/uaccess_32.h | 28 +-
16756 arch/sparc/include/asm/uaccess_64.h | 24 +-
16757 arch/sparc/kernel/Makefile | 2 +-
16758 arch/sparc/kernel/prom_common.c | 2 +-
16759 arch/sparc/kernel/smp_64.c | 8 +-
16760 arch/sparc/kernel/sys_sparc_32.c | 2 +-
16761 arch/sparc/kernel/sys_sparc_64.c | 52 +-
16762 arch/sparc/kernel/traps_64.c | 27 +-
16763 arch/sparc/lib/Makefile | 2 +-
16764 arch/sparc/lib/atomic_64.S | 57 +-
16765 arch/sparc/lib/ksyms.c | 6 +-
16766 arch/sparc/mm/Makefile | 2 +-
16767 arch/sparc/mm/fault_32.c | 292 +
16768 arch/sparc/mm/fault_64.c | 486 +
16769 arch/sparc/mm/hugetlbpage.c | 22 +-
16770 arch/sparc/mm/init_64.c | 10 +-
16771 arch/tile/include/asm/atomic_64.h | 10 +
16772 arch/tile/include/asm/uaccess.h | 4 +-
16773 arch/um/Makefile | 4 +
16774 arch/um/include/asm/kmap_types.h | 2 +-
16775 arch/um/include/asm/page.h | 3 +
16776 arch/um/include/asm/pgtable-3level.h | 1 +
16777 arch/um/kernel/process.c | 16 -
16778 arch/x86/Kconfig | 15 +-
16779 arch/x86/Kconfig.cpu | 6 +-
16780 arch/x86/Kconfig.debug | 4 +-
16781 arch/x86/Makefile | 13 +-
16782 arch/x86/boot/Makefile | 3 +
16783 arch/x86/boot/bitops.h | 4 +-
16784 arch/x86/boot/boot.h | 2 +-
16785 arch/x86/boot/compressed/Makefile | 3 +
16786 arch/x86/boot/compressed/efi_stub_32.S | 16 +-
16787 arch/x86/boot/compressed/efi_thunk_64.S | 4 +-
16788 arch/x86/boot/compressed/head_32.S | 4 +-
16789 arch/x86/boot/compressed/head_64.S | 12 +-
16790 arch/x86/boot/compressed/misc.c | 11 +-
16791 arch/x86/boot/cpucheck.c | 16 +-
16792 arch/x86/boot/header.S | 6 +-
16793 arch/x86/boot/memory.c | 2 +-
16794 arch/x86/boot/video-vesa.c | 1 +
16795 arch/x86/boot/video.c | 2 +-
16796 arch/x86/crypto/aes-x86_64-asm_64.S | 4 +
16797 arch/x86/crypto/aesni-intel_asm.S | 106 +-
16798 arch/x86/crypto/blowfish-x86_64-asm_64.S | 7 +
16799 arch/x86/crypto/camellia-aesni-avx-asm_64.S | 10 +
16800 arch/x86/crypto/camellia-aesni-avx2-asm_64.S | 10 +
16801 arch/x86/crypto/camellia-x86_64-asm_64.S | 7 +
16802 arch/x86/crypto/cast5-avx-x86_64-asm_64.S | 51 +-
16803 arch/x86/crypto/cast6-avx-x86_64-asm_64.S | 25 +-
16804 arch/x86/crypto/crc32c-pcl-intel-asm_64.S | 4 +-
16805 arch/x86/crypto/ghash-clmulni-intel_asm.S | 4 +
16806 arch/x86/crypto/salsa20-x86_64-asm_64.S | 4 +
16807 arch/x86/crypto/serpent-avx-x86_64-asm_64.S | 9 +
16808 arch/x86/crypto/serpent-avx2-asm_64.S | 9 +
16809 arch/x86/crypto/serpent-sse2-x86_64-asm_64.S | 4 +
16810 arch/x86/crypto/sha1_ssse3_asm.S | 10 +-
16811 arch/x86/crypto/sha256-avx-asm.S | 2 +
16812 arch/x86/crypto/sha256-avx2-asm.S | 2 +
16813 arch/x86/crypto/sha256-ssse3-asm.S | 2 +
16814 arch/x86/crypto/sha512-avx-asm.S | 2 +
16815 arch/x86/crypto/sha512-avx2-asm.S | 2 +
16816 arch/x86/crypto/sha512-ssse3-asm.S | 2 +
16817 arch/x86/crypto/twofish-avx-x86_64-asm_64.S | 25 +-
16818 arch/x86/crypto/twofish-x86_64-asm_64-3way.S | 4 +
16819 arch/x86/crypto/twofish-x86_64-asm_64.S | 3 +
16820 arch/x86/entry/calling.h | 86 +-
16821 arch/x86/entry/common.c | 13 +-
16822 arch/x86/entry/entry_32.S | 351 +-
16823 arch/x86/entry/entry_64.S | 619 +-
16824 arch/x86/entry/entry_64_compat.S | 159 +-
16825 arch/x86/entry/thunk_64.S | 2 +
16826 arch/x86/entry/vdso/Makefile | 2 +-
16827 arch/x86/entry/vdso/vdso2c.h | 8 +-
16828 arch/x86/entry/vdso/vma.c | 41 +-
16829 arch/x86/entry/vsyscall/vsyscall_64.c | 16 +-
16830 arch/x86/entry/vsyscall/vsyscall_emu_64.S | 2 +-
16831 arch/x86/ia32/ia32_signal.c | 23 +-
16832 arch/x86/ia32/sys_ia32.c | 42 +-
16833 arch/x86/include/asm/alternative-asm.h | 43 +-
16834 arch/x86/include/asm/alternative.h | 4 +-
16835 arch/x86/include/asm/apic.h | 2 +-
16836 arch/x86/include/asm/apm.h | 4 +-
16837 arch/x86/include/asm/atomic.h | 230 +-
16838 arch/x86/include/asm/atomic64_32.h | 100 +
16839 arch/x86/include/asm/atomic64_64.h | 164 +-
16840 arch/x86/include/asm/bitops.h | 18 +-
16841 arch/x86/include/asm/boot.h | 2 +-
16842 arch/x86/include/asm/cache.h | 5 +-
16843 arch/x86/include/asm/checksum_32.h | 12 +-
16844 arch/x86/include/asm/cmpxchg.h | 39 +
16845 arch/x86/include/asm/compat.h | 2 +-
16846 arch/x86/include/asm/cpufeature.h | 17 +-
16847 arch/x86/include/asm/desc.h | 78 +-
16848 arch/x86/include/asm/desc_defs.h | 6 +
16849 arch/x86/include/asm/div64.h | 2 +-
16850 arch/x86/include/asm/elf.h | 33 +-
16851 arch/x86/include/asm/emergency-restart.h | 2 +-
16852 arch/x86/include/asm/fpu/internal.h | 42 +-
16853 arch/x86/include/asm/fpu/types.h | 6 +-
16854 arch/x86/include/asm/futex.h | 14 +-
16855 arch/x86/include/asm/hw_irq.h | 4 +-
16856 arch/x86/include/asm/i8259.h | 2 +-
16857 arch/x86/include/asm/io.h | 22 +-
16858 arch/x86/include/asm/irqflags.h | 5 +
16859 arch/x86/include/asm/kprobes.h | 9 +-
16860 arch/x86/include/asm/local.h | 106 +-
16861 arch/x86/include/asm/mman.h | 15 +
16862 arch/x86/include/asm/mmu.h | 14 +-
16863 arch/x86/include/asm/mmu_context.h | 114 +-
16864 arch/x86/include/asm/module.h | 17 +-
16865 arch/x86/include/asm/nmi.h | 19 +-
16866 arch/x86/include/asm/page.h | 1 +
16867 arch/x86/include/asm/page_32.h | 12 +-
16868 arch/x86/include/asm/page_64.h | 14 +-
16869 arch/x86/include/asm/paravirt.h | 46 +-
16870 arch/x86/include/asm/paravirt_types.h | 15 +-
16871 arch/x86/include/asm/pgalloc.h | 23 +
16872 arch/x86/include/asm/pgtable-2level.h | 2 +
16873 arch/x86/include/asm/pgtable-3level.h | 7 +
16874 arch/x86/include/asm/pgtable.h | 128 +-
16875 arch/x86/include/asm/pgtable_32.h | 14 +-
16876 arch/x86/include/asm/pgtable_32_types.h | 24 +-
16877 arch/x86/include/asm/pgtable_64.h | 23 +-
16878 arch/x86/include/asm/pgtable_64_types.h | 5 +
16879 arch/x86/include/asm/pgtable_types.h | 26 +-
16880 arch/x86/include/asm/preempt.h | 2 +-
16881 arch/x86/include/asm/processor.h | 57 +-
16882 arch/x86/include/asm/ptrace.h | 13 +-
16883 arch/x86/include/asm/realmode.h | 4 +-
16884 arch/x86/include/asm/reboot.h | 10 +-
16885 arch/x86/include/asm/rmwcc.h | 84 +-
16886 arch/x86/include/asm/rwsem.h | 60 +-
16887 arch/x86/include/asm/segment.h | 27 +-
16888 arch/x86/include/asm/smap.h | 43 +
16889 arch/x86/include/asm/smp.h | 14 +-
16890 arch/x86/include/asm/stackprotector.h | 4 +-
16891 arch/x86/include/asm/stacktrace.h | 32 +-
16892 arch/x86/include/asm/switch_to.h | 4 +-
16893 arch/x86/include/asm/sys_ia32.h | 6 +-
16894 arch/x86/include/asm/thread_info.h | 27 +-
16895 arch/x86/include/asm/tlbflush.h | 77 +-
16896 arch/x86/include/asm/uaccess.h | 192 +-
16897 arch/x86/include/asm/uaccess_32.h | 28 +-
16898 arch/x86/include/asm/uaccess_64.h | 169 +-
16899 arch/x86/include/asm/word-at-a-time.h | 2 +-
16900 arch/x86/include/asm/x86_init.h | 10 +-
16901 arch/x86/include/asm/xen/page.h | 2 +-
16902 arch/x86/include/uapi/asm/e820.h | 2 +-
16903 arch/x86/kernel/Makefile | 2 +-
16904 arch/x86/kernel/acpi/boot.c | 4 +-
16905 arch/x86/kernel/acpi/sleep.c | 4 +
16906 arch/x86/kernel/acpi/wakeup_32.S | 6 +-
16907 arch/x86/kernel/alternative.c | 124 +-
16908 arch/x86/kernel/apic/apic.c | 4 +-
16909 arch/x86/kernel/apic/apic_flat_64.c | 6 +-
16910 arch/x86/kernel/apic/apic_noop.c | 2 +-
16911 arch/x86/kernel/apic/bigsmp_32.c | 2 +-
16912 arch/x86/kernel/apic/io_apic.c | 8 +-
16913 arch/x86/kernel/apic/msi.c | 2 +-
16914 arch/x86/kernel/apic/probe_32.c | 4 +-
16915 arch/x86/kernel/apic/vector.c | 4 +-
16916 arch/x86/kernel/apic/x2apic_cluster.c | 2 +-
16917 arch/x86/kernel/apic/x2apic_phys.c | 2 +-
16918 arch/x86/kernel/apic/x2apic_uv_x.c | 2 +-
16919 arch/x86/kernel/apm_32.c | 21 +-
16920 arch/x86/kernel/asm-offsets.c | 20 +
16921 arch/x86/kernel/asm-offsets_64.c | 1 +
16922 arch/x86/kernel/cpu/Makefile | 4 -
16923 arch/x86/kernel/cpu/amd.c | 2 +-
16924 arch/x86/kernel/cpu/bugs_64.c | 2 +
16925 arch/x86/kernel/cpu/common.c | 202 +-
16926 arch/x86/kernel/cpu/intel_cacheinfo.c | 14 +-
16927 arch/x86/kernel/cpu/mcheck/mce.c | 34 +-
16928 arch/x86/kernel/cpu/mcheck/p5.c | 3 +
16929 arch/x86/kernel/cpu/mcheck/winchip.c | 3 +
16930 arch/x86/kernel/cpu/microcode/intel.c | 4 +-
16931 arch/x86/kernel/cpu/mtrr/main.c | 2 +-
16932 arch/x86/kernel/cpu/mtrr/mtrr.h | 2 +-
16933 arch/x86/kernel/cpu/perf_event.c | 10 +-
16934 arch/x86/kernel/cpu/perf_event_amd_iommu.c | 2 +-
16935 arch/x86/kernel/cpu/perf_event_intel.c | 6 +-
16936 arch/x86/kernel/cpu/perf_event_intel_bts.c | 6 +-
16937 arch/x86/kernel/cpu/perf_event_intel_cqm.c | 4 +-
16938 arch/x86/kernel/cpu/perf_event_intel_pt.c | 44 +-
16939 arch/x86/kernel/cpu/perf_event_intel_rapl.c | 2 +-
16940 arch/x86/kernel/cpu/perf_event_intel_uncore.c | 2 +-
16941 arch/x86/kernel/cpu/perf_event_intel_uncore.h | 2 +-
16942 arch/x86/kernel/crash_dump_64.c | 2 +-
16943 arch/x86/kernel/doublefault.c | 8 +-
16944 arch/x86/kernel/dumpstack.c | 24 +-
16945 arch/x86/kernel/dumpstack_32.c | 25 +-
16946 arch/x86/kernel/dumpstack_64.c | 62 +-
16947 arch/x86/kernel/e820.c | 4 +-
16948 arch/x86/kernel/early_printk.c | 1 +
16949 arch/x86/kernel/espfix_64.c | 44 +-
16950 arch/x86/kernel/fpu/core.c | 24 +-
16951 arch/x86/kernel/fpu/init.c | 40 +-
16952 arch/x86/kernel/fpu/regset.c | 22 +-
16953 arch/x86/kernel/fpu/signal.c | 20 +-
16954 arch/x86/kernel/fpu/xstate.c | 8 +-
16955 arch/x86/kernel/ftrace.c | 18 +-
16956 arch/x86/kernel/head64.c | 14 +-
16957 arch/x86/kernel/head_32.S | 235 +-
16958 arch/x86/kernel/head_64.S | 173 +-
16959 arch/x86/kernel/i386_ksyms_32.c | 12 +
16960 arch/x86/kernel/i8259.c | 10 +-
16961 arch/x86/kernel/io_delay.c | 2 +-
16962 arch/x86/kernel/ioport.c | 2 +-
16963 arch/x86/kernel/irq.c | 8 +-
16964 arch/x86/kernel/irq_32.c | 45 +-
16965 arch/x86/kernel/jump_label.c | 10 +-
16966 arch/x86/kernel/kgdb.c | 21 +-
16967 arch/x86/kernel/kprobes/core.c | 28 +-
16968 arch/x86/kernel/kprobes/opt.c | 16 +-
16969 arch/x86/kernel/ksysfs.c | 2 +-
16970 arch/x86/kernel/kvmclock.c | 20 +-
16971 arch/x86/kernel/ldt.c | 25 +
16972 arch/x86/kernel/livepatch.c | 12 +-
16973 arch/x86/kernel/machine_kexec_32.c | 6 +-
16974 arch/x86/kernel/mcount_64.S | 19 +-
16975 arch/x86/kernel/module.c | 78 +-
16976 arch/x86/kernel/msr.c | 2 +-
16977 arch/x86/kernel/nmi.c | 34 +-
16978 arch/x86/kernel/nmi_selftest.c | 4 +-
16979 arch/x86/kernel/paravirt-spinlocks.c | 2 +-
16980 arch/x86/kernel/paravirt.c | 45 +-
16981 arch/x86/kernel/paravirt_patch_64.c | 8 +
16982 arch/x86/kernel/pci-calgary_64.c | 2 +-
16983 arch/x86/kernel/pci-iommu_table.c | 2 +-
16984 arch/x86/kernel/pci-swiotlb.c | 2 +-
16985 arch/x86/kernel/process.c | 80 +-
16986 arch/x86/kernel/process_32.c | 29 +-
16987 arch/x86/kernel/process_64.c | 14 +-
16988 arch/x86/kernel/ptrace.c | 20 +-
16989 arch/x86/kernel/pvclock.c | 8 +-
16990 arch/x86/kernel/reboot.c | 44 +-
16991 arch/x86/kernel/reboot_fixups_32.c | 2 +-
16992 arch/x86/kernel/relocate_kernel_64.S | 3 +-
16993 arch/x86/kernel/setup.c | 29 +-
16994 arch/x86/kernel/setup_percpu.c | 29 +-
16995 arch/x86/kernel/signal.c | 17 +-
16996 arch/x86/kernel/smp.c | 2 +-
16997 arch/x86/kernel/smpboot.c | 29 +-
16998 arch/x86/kernel/step.c | 6 +-
16999 arch/x86/kernel/sys_i386_32.c | 184 +
17000 arch/x86/kernel/sys_x86_64.c | 22 +-
17001 arch/x86/kernel/tboot.c | 14 +-
17002 arch/x86/kernel/time.c | 8 +-
17003 arch/x86/kernel/tls.c | 7 +-
17004 arch/x86/kernel/tracepoint.c | 4 +-
17005 arch/x86/kernel/traps.c | 53 +-
17006 arch/x86/kernel/tsc.c | 2 +-
17007 arch/x86/kernel/uprobes.c | 2 +-
17008 arch/x86/kernel/vm86_32.c | 6 +-
17009 arch/x86/kernel/vmlinux.lds.S | 153 +-
17010 arch/x86/kernel/x8664_ksyms_64.c | 6 +-
17011 arch/x86/kernel/x86_init.c | 6 +-
17012 arch/x86/kvm/cpuid.c | 21 +-
17013 arch/x86/kvm/emulate.c | 2 +-
17014 arch/x86/kvm/lapic.c | 2 +-
17015 arch/x86/kvm/paging_tmpl.h | 2 +-
17016 arch/x86/kvm/svm.c | 10 +-
17017 arch/x86/kvm/vmx.c | 62 +-
17018 arch/x86/kvm/x86.c | 42 +-
17019 arch/x86/lguest/boot.c | 3 +-
17020 arch/x86/lib/atomic64_386_32.S | 164 +
17021 arch/x86/lib/atomic64_cx8_32.S | 98 +-
17022 arch/x86/lib/checksum_32.S | 99 +-
17023 arch/x86/lib/clear_page_64.S | 3 +
17024 arch/x86/lib/cmpxchg16b_emu.S | 3 +
17025 arch/x86/lib/copy_page_64.S | 14 +-
17026 arch/x86/lib/copy_user_64.S | 66 +-
17027 arch/x86/lib/csum-copy_64.S | 14 +-
17028 arch/x86/lib/csum-wrappers_64.c | 8 +-
17029 arch/x86/lib/getuser.S | 74 +-
17030 arch/x86/lib/insn.c | 8 +-
17031 arch/x86/lib/iomap_copy_64.S | 2 +
17032 arch/x86/lib/memcpy_64.S | 6 +
17033 arch/x86/lib/memmove_64.S | 3 +-
17034 arch/x86/lib/memset_64.S | 3 +
17035 arch/x86/lib/mmx_32.c | 243 +-
17036 arch/x86/lib/msr-reg.S | 2 +
17037 arch/x86/lib/putuser.S | 87 +-
17038 arch/x86/lib/rwsem.S | 6 +-
17039 arch/x86/lib/usercopy_32.c | 359 +-
17040 arch/x86/lib/usercopy_64.c | 20 +-
17041 arch/x86/math-emu/fpu_aux.c | 2 +-
17042 arch/x86/math-emu/fpu_entry.c | 4 +-
17043 arch/x86/math-emu/fpu_system.h | 2 +-
17044 arch/x86/mm/Makefile | 4 +
17045 arch/x86/mm/extable.c | 26 +-
17046 arch/x86/mm/fault.c | 570 +-
17047 arch/x86/mm/gup.c | 6 +-
17048 arch/x86/mm/highmem_32.c | 6 +
17049 arch/x86/mm/hugetlbpage.c | 24 +-
17050 arch/x86/mm/init.c | 111 +-
17051 arch/x86/mm/init_32.c | 111 +-
17052 arch/x86/mm/init_64.c | 46 +-
17053 arch/x86/mm/iomap_32.c | 4 +
17054 arch/x86/mm/ioremap.c | 52 +-
17055 arch/x86/mm/kmemcheck/kmemcheck.c | 4 +-
17056 arch/x86/mm/mmap.c | 40 +-
17057 arch/x86/mm/mmio-mod.c | 10 +-
17058 arch/x86/mm/numa.c | 2 +-
17059 arch/x86/mm/pageattr.c | 38 +-
17060 arch/x86/mm/pat.c | 12 +-
17061 arch/x86/mm/pat_rbtree.c | 2 +-
17062 arch/x86/mm/pf_in.c | 10 +-
17063 arch/x86/mm/pgtable.c | 214 +-
17064 arch/x86/mm/pgtable_32.c | 3 +
17065 arch/x86/mm/setup_nx.c | 7 +
17066 arch/x86/mm/tlb.c | 4 +
17067 arch/x86/mm/uderef_64.c | 37 +
17068 arch/x86/net/bpf_jit.S | 11 +
17069 arch/x86/net/bpf_jit_comp.c | 13 +-
17070 arch/x86/oprofile/backtrace.c | 6 +-
17071 arch/x86/oprofile/nmi_int.c | 8 +-
17072 arch/x86/oprofile/op_model_amd.c | 8 +-
17073 arch/x86/oprofile/op_model_ppro.c | 7 +-
17074 arch/x86/oprofile/op_x86_model.h | 2 +-
17075 arch/x86/pci/intel_mid_pci.c | 2 +-
17076 arch/x86/pci/irq.c | 8 +-
17077 arch/x86/pci/pcbios.c | 144 +-
17078 arch/x86/platform/efi/efi_32.c | 24 +
17079 arch/x86/platform/efi/efi_64.c | 26 +-
17080 arch/x86/platform/efi/efi_stub_32.S | 64 +-
17081 arch/x86/platform/efi/efi_stub_64.S | 2 +
17082 arch/x86/platform/intel-mid/intel-mid.c | 5 +-
17083 arch/x86/platform/intel-mid/intel_mid_weak_decls.h | 6 +-
17084 arch/x86/platform/intel-mid/mfld.c | 4 +-
17085 arch/x86/platform/intel-mid/mrfl.c | 2 +-
17086 arch/x86/platform/intel-quark/imr_selftest.c | 2 +-
17087 arch/x86/platform/olpc/olpc_dt.c | 2 +-
17088 arch/x86/power/cpu.c | 11 +-
17089 arch/x86/realmode/init.c | 10 +-
17090 arch/x86/realmode/rm/Makefile | 3 +
17091 arch/x86/realmode/rm/header.S | 4 +-
17092 arch/x86/realmode/rm/reboot.S | 4 +
17093 arch/x86/realmode/rm/trampoline_32.S | 12 +-
17094 arch/x86/realmode/rm/trampoline_64.S | 3 +-
17095 arch/x86/realmode/rm/wakeup_asm.S | 5 +-
17096 arch/x86/tools/Makefile | 2 +-
17097 arch/x86/tools/relocs.c | 96 +-
17098 arch/x86/um/mem_32.c | 2 +-
17099 arch/x86/um/tls_32.c | 2 +-
17100 arch/x86/xen/enlighten.c | 50 +-
17101 arch/x86/xen/mmu.c | 19 +-
17102 arch/x86/xen/smp.c | 16 +-
17103 arch/x86/xen/xen-asm_32.S | 2 +-
17104 arch/x86/xen/xen-head.S | 11 +
17105 arch/x86/xen/xen-ops.h | 2 -
17106 block/bio.c | 4 +-
17107 block/blk-iopoll.c | 2 +-
17108 block/blk-map.c | 2 +-
17109 block/blk-softirq.c | 2 +-
17110 block/bsg.c | 12 +-
17111 block/compat_ioctl.c | 4 +-
17112 block/genhd.c | 9 +-
17113 block/partitions/efi.c | 8 +-
17114 block/scsi_ioctl.c | 29 +-
17115 crypto/cryptd.c | 4 +-
17116 crypto/pcrypt.c | 2 +-
17117 crypto/zlib.c | 12 +-
17118 drivers/acpi/acpi_video.c | 2 +-
17119 drivers/acpi/apei/apei-internal.h | 2 +-
17120 drivers/acpi/apei/ghes.c | 4 +-
17121 drivers/acpi/bgrt.c | 6 +-
17122 drivers/acpi/blacklist.c | 4 +-
17123 drivers/acpi/bus.c | 4 +-
17124 drivers/acpi/device_pm.c | 4 +-
17125 drivers/acpi/ec.c | 2 +-
17126 drivers/acpi/pci_slot.c | 2 +-
17127 drivers/acpi/processor_idle.c | 2 +-
17128 drivers/acpi/processor_pdc.c | 2 +-
17129 drivers/acpi/sleep.c | 2 +-
17130 drivers/acpi/sysfs.c | 4 +-
17131 drivers/acpi/thermal.c | 2 +-
17132 drivers/acpi/video_detect.c | 7 +-
17133 drivers/ata/libata-core.c | 12 +-
17134 drivers/ata/libata-scsi.c | 2 +-
17135 drivers/ata/libata.h | 2 +-
17136 drivers/ata/pata_arasan_cf.c | 4 +-
17137 drivers/atm/adummy.c | 2 +-
17138 drivers/atm/ambassador.c | 8 +-
17139 drivers/atm/atmtcp.c | 14 +-
17140 drivers/atm/eni.c | 10 +-
17141 drivers/atm/firestream.c | 8 +-
17142 drivers/atm/fore200e.c | 14 +-
17143 drivers/atm/he.c | 18 +-
17144 drivers/atm/horizon.c | 4 +-
17145 drivers/atm/idt77252.c | 36 +-
17146 drivers/atm/iphase.c | 34 +-
17147 drivers/atm/lanai.c | 12 +-
17148 drivers/atm/nicstar.c | 46 +-
17149 drivers/atm/solos-pci.c | 4 +-
17150 drivers/atm/suni.c | 4 +-
17151 drivers/atm/uPD98402.c | 16 +-
17152 drivers/atm/zatm.c | 6 +-
17153 drivers/base/bus.c | 4 +-
17154 drivers/base/devtmpfs.c | 8 +-
17155 drivers/base/node.c | 2 +-
17156 drivers/base/platform-msi.c | 20 +-
17157 drivers/base/power/domain.c | 11 +-
17158 drivers/base/power/sysfs.c | 2 +-
17159 drivers/base/power/wakeup.c | 8 +-
17160 drivers/base/regmap/regmap-debugfs.c | 11 +-
17161 drivers/base/syscore.c | 4 +-
17162 drivers/block/cciss.c | 28 +-
17163 drivers/block/cciss.h | 2 +-
17164 drivers/block/cpqarray.c | 28 +-
17165 drivers/block/cpqarray.h | 2 +-
17166 drivers/block/drbd/drbd_bitmap.c | 2 +-
17167 drivers/block/drbd/drbd_int.h | 8 +-
17168 drivers/block/drbd/drbd_main.c | 12 +-
17169 drivers/block/drbd/drbd_nl.c | 4 +-
17170 drivers/block/drbd/drbd_receiver.c | 34 +-
17171 drivers/block/drbd/drbd_worker.c | 8 +-
17172 drivers/block/pktcdvd.c | 4 +-
17173 drivers/block/rbd.c | 2 +-
17174 drivers/bluetooth/btwilink.c | 2 +-
17175 drivers/bus/arm-cci.c | 12 +-
17176 drivers/cdrom/cdrom.c | 11 +-
17177 drivers/cdrom/gdrom.c | 1 -
17178 drivers/char/agp/compat_ioctl.c | 2 +-
17179 drivers/char/agp/frontend.c | 4 +-
17180 drivers/char/agp/intel-gtt.c | 4 +-
17181 drivers/char/hpet.c | 2 +-
17182 drivers/char/ipmi/ipmi_msghandler.c | 8 +-
17183 drivers/char/ipmi/ipmi_si_intf.c | 8 +-
17184 drivers/char/mem.c | 47 +-
17185 drivers/char/nvram.c | 2 +-
17186 drivers/char/pcmcia/synclink_cs.c | 16 +-
17187 drivers/char/random.c | 12 +-
17188 drivers/char/sonypi.c | 11 +-
17189 drivers/char/tpm/tpm_acpi.c | 3 +-
17190 drivers/char/tpm/tpm_eventlog.c | 4 +-
17191 drivers/char/virtio_console.c | 4 +-
17192 drivers/clk/clk-composite.c | 2 +-
17193 drivers/clk/samsung/clk.h | 2 +-
17194 drivers/clk/socfpga/clk-gate.c | 9 +-
17195 drivers/clk/socfpga/clk-pll.c | 9 +-
17196 drivers/clk/ti/clk.c | 8 +-
17197 drivers/cpufreq/acpi-cpufreq.c | 17 +-
17198 drivers/cpufreq/cpufreq-dt.c | 4 +-
17199 drivers/cpufreq/cpufreq.c | 30 +-
17200 drivers/cpufreq/cpufreq_governor.c | 2 +-
17201 drivers/cpufreq/cpufreq_governor.h | 4 +-
17202 drivers/cpufreq/cpufreq_ondemand.c | 10 +-
17203 drivers/cpufreq/intel_pstate.c | 33 +-
17204 drivers/cpufreq/p4-clockmod.c | 12 +-
17205 drivers/cpufreq/sparc-us3-cpufreq.c | 67 +-
17206 drivers/cpufreq/speedstep-centrino.c | 7 +-
17207 drivers/cpuidle/driver.c | 2 +-
17208 drivers/cpuidle/dt_idle_states.c | 2 +-
17209 drivers/cpuidle/governor.c | 2 +-
17210 drivers/cpuidle/sysfs.c | 2 +-
17211 drivers/crypto/hifn_795x.c | 4 +-
17212 drivers/devfreq/devfreq.c | 4 +-
17213 drivers/dma/sh/shdma-base.c | 4 +-
17214 drivers/dma/sh/shdmac.c | 2 +-
17215 drivers/edac/edac_device.c | 4 +-
17216 drivers/edac/edac_mc_sysfs.c | 2 +-
17217 drivers/edac/edac_pci.c | 4 +-
17218 drivers/edac/edac_pci_sysfs.c | 22 +-
17219 drivers/edac/mce_amd.h | 2 +-
17220 drivers/firewire/core-card.c | 6 +-
17221 drivers/firewire/core-device.c | 2 +-
17222 drivers/firewire/core-transaction.c | 1 +
17223 drivers/firewire/core.h | 1 +
17224 drivers/firmware/dmi-id.c | 2 +-
17225 drivers/firmware/dmi_scan.c | 12 +-
17226 drivers/firmware/efi/cper.c | 8 +-
17227 drivers/firmware/efi/efi.c | 12 +-
17228 drivers/firmware/efi/efivars.c | 2 +-
17229 drivers/firmware/efi/runtime-map.c | 2 +-
17230 drivers/firmware/google/gsmi.c | 2 +-
17231 drivers/firmware/google/memconsole.c | 7 +-
17232 drivers/firmware/memmap.c | 2 +-
17233 drivers/firmware/psci.c | 2 +-
17234 drivers/gpio/gpio-davinci.c | 6 +-
17235 drivers/gpio/gpio-em.c | 2 +-
17236 drivers/gpio/gpio-ich.c | 2 +-
17237 drivers/gpio/gpio-omap.c | 4 +-
17238 drivers/gpio/gpio-rcar.c | 2 +-
17239 drivers/gpio/gpio-vr41xx.c | 2 +-
17240 drivers/gpio/gpiolib.c | 12 +-
17241 drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 +-
17242 drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 2 +-
17243 drivers/gpu/drm/amd/amdkfd/kfd_device.c | 6 +-
17244 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 90 +-
17245 .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 8 +-
17246 .../drm/amd/amdkfd/kfd_device_queue_manager_cik.c | 14 +-
17247 .../drm/amd/amdkfd/kfd_device_queue_manager_vi.c | 14 +-
17248 drivers/gpu/drm/amd/amdkfd/kfd_interrupt.c | 4 +-
17249 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.c | 2 +-
17250 drivers/gpu/drm/amd/amdkfd/kfd_kernel_queue.h | 2 +-
17251 .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 16 +-
17252 drivers/gpu/drm/drm_crtc.c | 2 +-
17253 drivers/gpu/drm/drm_drv.c | 2 +-
17254 drivers/gpu/drm/drm_fops.c | 12 +-
17255 drivers/gpu/drm/drm_global.c | 14 +-
17256 drivers/gpu/drm/drm_info.c | 13 +-
17257 drivers/gpu/drm/drm_ioc32.c | 13 +-
17258 drivers/gpu/drm/drm_ioctl.c | 2 +-
17259 drivers/gpu/drm/gma500/mdfld_dsi_dpi.c | 10 +-
17260 drivers/gpu/drm/i810/i810_drv.h | 4 +-
17261 drivers/gpu/drm/i915/i915_dma.c | 2 +-
17262 drivers/gpu/drm/i915/i915_gem_execbuffer.c | 4 +-
17263 drivers/gpu/drm/i915/i915_gem_gtt.c | 16 +-
17264 drivers/gpu/drm/i915/i915_gem_gtt.h | 6 +-
17265 drivers/gpu/drm/i915/i915_ioc32.c | 10 +-
17266 drivers/gpu/drm/i915/intel_display.c | 26 +-
17267 drivers/gpu/drm/imx/imx-drm-core.c | 2 +-
17268 drivers/gpu/drm/mga/mga_drv.h | 4 +-
17269 drivers/gpu/drm/mga/mga_ioc32.c | 10 +-
17270 drivers/gpu/drm/mga/mga_irq.c | 8 +-
17271 drivers/gpu/drm/nouveau/nouveau_bios.c | 2 +-
17272 drivers/gpu/drm/nouveau/nouveau_drm.h | 1 -
17273 drivers/gpu/drm/nouveau/nouveau_ioc32.c | 2 +-
17274 drivers/gpu/drm/nouveau/nouveau_vga.c | 2 +-
17275 drivers/gpu/drm/omapdrm/Makefile | 2 +-
17276 drivers/gpu/drm/qxl/qxl_cmd.c | 12 +-
17277 drivers/gpu/drm/qxl/qxl_debugfs.c | 8 +-
17278 drivers/gpu/drm/qxl/qxl_drv.h | 8 +-
17279 drivers/gpu/drm/qxl/qxl_ioctl.c | 10 +-
17280 drivers/gpu/drm/qxl/qxl_irq.c | 16 +-
17281 drivers/gpu/drm/qxl/qxl_ttm.c | 38 +-
17282 drivers/gpu/drm/r128/r128_cce.c | 2 +-
17283 drivers/gpu/drm/r128/r128_drv.h | 4 +-
17284 drivers/gpu/drm/r128/r128_ioc32.c | 10 +-
17285 drivers/gpu/drm/r128/r128_irq.c | 4 +-
17286 drivers/gpu/drm/r128/r128_state.c | 4 +-
17287 drivers/gpu/drm/radeon/mkregtable.c | 4 +-
17288 drivers/gpu/drm/radeon/radeon_device.c | 2 +-
17289 drivers/gpu/drm/radeon/radeon_drv.h | 2 +-
17290 drivers/gpu/drm/radeon/radeon_ioc32.c | 12 +-
17291 drivers/gpu/drm/radeon/radeon_irq.c | 6 +-
17292 drivers/gpu/drm/radeon/radeon_state.c | 4 +-
17293 drivers/gpu/drm/radeon/radeon_ttm.c | 4 +-
17294 drivers/gpu/drm/tegra/dc.c | 2 +-
17295 drivers/gpu/drm/tegra/dsi.c | 2 +-
17296 drivers/gpu/drm/tegra/hdmi.c | 2 +-
17297 drivers/gpu/drm/tegra/sor.c | 7 +-
17298 drivers/gpu/drm/tilcdc/Makefile | 6 +-
17299 drivers/gpu/drm/ttm/ttm_memory.c | 4 +-
17300 drivers/gpu/drm/ttm/ttm_page_alloc.c | 18 +-
17301 drivers/gpu/drm/ttm/ttm_page_alloc_dma.c | 18 +-
17302 drivers/gpu/drm/udl/udl_fb.c | 1 -
17303 drivers/gpu/drm/via/via_drv.h | 4 +-
17304 drivers/gpu/drm/via/via_irq.c | 18 +-
17305 drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +-
17306 drivers/gpu/drm/vmwgfx/vmwgfx_fifo.c | 8 +-
17307 drivers/gpu/drm/vmwgfx/vmwgfx_irq.c | 4 +-
17308 drivers/gpu/drm/vmwgfx/vmwgfx_marker.c | 2 +-
17309 drivers/gpu/vga/vga_switcheroo.c | 4 +-
17310 drivers/hid/hid-core.c | 4 +-
17311 drivers/hid/hid-sensor-custom.c | 2 +-
17312 drivers/hv/channel.c | 2 +-
17313 drivers/hv/hv.c | 4 +-
17314 drivers/hv/hv_balloon.c | 18 +-
17315 drivers/hv/hyperv_vmbus.h | 2 +-
17316 drivers/hwmon/acpi_power_meter.c | 6 +-
17317 drivers/hwmon/applesmc.c | 2 +-
17318 drivers/hwmon/asus_atk0110.c | 10 +-
17319 drivers/hwmon/coretemp.c | 2 +-
17320 drivers/hwmon/dell-smm-hwmon.c | 2 +-
17321 drivers/hwmon/ibmaem.c | 2 +-
17322 drivers/hwmon/iio_hwmon.c | 2 +-
17323 drivers/hwmon/nct6683.c | 6 +-
17324 drivers/hwmon/nct6775.c | 6 +-
17325 drivers/hwmon/pmbus/pmbus_core.c | 10 +-
17326 drivers/hwmon/sht15.c | 12 +-
17327 drivers/hwmon/via-cputemp.c | 2 +-
17328 drivers/i2c/busses/i2c-amd756-s4882.c | 2 +-
17329 drivers/i2c/busses/i2c-nforce2-s4985.c | 2 +-
17330 drivers/i2c/i2c-dev.c | 2 +-
17331 drivers/ide/ide-cd.c | 2 +-
17332 drivers/ide/ide-disk.c | 2 +-
17333 drivers/iio/industrialio-core.c | 2 +-
17334 drivers/iio/magnetometer/ak8975.c | 2 +-
17335 drivers/infiniband/core/cm.c | 32 +-
17336 drivers/infiniband/core/fmr_pool.c | 20 +-
17337 drivers/infiniband/core/uverbs_cmd.c | 3 +
17338 drivers/infiniband/hw/cxgb4/mem.c | 4 +-
17339 drivers/infiniband/hw/mlx4/mad.c | 2 +-
17340 drivers/infiniband/hw/mlx4/mcg.c | 2 +-
17341 drivers/infiniband/hw/mlx4/mlx4_ib.h | 2 +-
17342 drivers/infiniband/hw/mthca/mthca_cmd.c | 8 +-
17343 drivers/infiniband/hw/mthca/mthca_main.c | 2 +-
17344 drivers/infiniband/hw/mthca/mthca_mr.c | 6 +-
17345 drivers/infiniband/hw/mthca/mthca_provider.c | 2 +-
17346 drivers/infiniband/hw/nes/nes.c | 4 +-
17347 drivers/infiniband/hw/nes/nes.h | 40 +-
17348 drivers/infiniband/hw/nes/nes_cm.c | 62 +-
17349 drivers/infiniband/hw/nes/nes_mgt.c | 8 +-
17350 drivers/infiniband/hw/nes/nes_nic.c | 40 +-
17351 drivers/infiniband/hw/nes/nes_verbs.c | 10 +-
17352 drivers/infiniband/hw/qib/qib.h | 1 +
17353 drivers/infiniband/ulp/ipoib/ipoib_netlink.c | 2 +-
17354 drivers/input/gameport/gameport.c | 4 +-
17355 drivers/input/input.c | 4 +-
17356 drivers/input/joystick/sidewinder.c | 1 +
17357 drivers/input/joystick/xpad.c | 4 +-
17358 drivers/input/misc/ims-pcu.c | 4 +-
17359 drivers/input/mouse/psmouse.h | 2 +-
17360 drivers/input/mousedev.c | 2 +-
17361 drivers/input/serio/serio.c | 4 +-
17362 drivers/input/serio/serio_raw.c | 4 +-
17363 drivers/input/touchscreen/htcpen.c | 2 +-
17364 drivers/iommu/arm-smmu-v3.c | 2 +-
17365 drivers/iommu/arm-smmu.c | 43 +-
17366 drivers/iommu/io-pgtable-arm.c | 101 +-
17367 drivers/iommu/io-pgtable.c | 11 +-
17368 drivers/iommu/io-pgtable.h | 19 +-
17369 drivers/iommu/iommu.c | 2 +-
17370 drivers/iommu/ipmmu-vmsa.c | 13 +-
17371 drivers/iommu/irq_remapping.c | 2 +-
17372 drivers/irqchip/irq-gic.c | 2 +-
17373 drivers/irqchip/irq-i8259.c | 2 +-
17374 drivers/irqchip/irq-renesas-intc-irqpin.c | 2 +-
17375 drivers/irqchip/irq-renesas-irqc.c | 2 +-
17376 drivers/isdn/capi/capi.c | 10 +-
17377 drivers/isdn/gigaset/interface.c | 8 +-
17378 drivers/isdn/gigaset/usb-gigaset.c | 2 +-
17379 drivers/isdn/hardware/avm/b1.c | 4 +-
17380 drivers/isdn/i4l/isdn_common.c | 2 +
17381 drivers/isdn/i4l/isdn_tty.c | 22 +-
17382 drivers/isdn/icn/icn.c | 2 +-
17383 drivers/isdn/mISDN/dsp_cmx.c | 2 +-
17384 drivers/lguest/core.c | 10 +-
17385 drivers/lguest/page_tables.c | 2 +-
17386 drivers/lguest/x86/core.c | 12 +-
17387 drivers/lguest/x86/switcher_32.S | 27 +-
17388 drivers/md/bcache/closure.h | 2 +-
17389 drivers/md/bitmap.c | 2 +-
17390 drivers/md/dm-ioctl.c | 2 +-
17391 drivers/md/dm-raid1.c | 18 +-
17392 drivers/md/dm-stats.c | 6 +-
17393 drivers/md/dm-stripe.c | 10 +-
17394 drivers/md/dm-table.c | 2 +-
17395 drivers/md/dm-thin-metadata.c | 4 +-
17396 drivers/md/dm.c | 16 +-
17397 drivers/md/md.c | 26 +-
17398 drivers/md/md.h | 6 +-
17399 drivers/md/persistent-data/dm-space-map-metadata.c | 4 +-
17400 drivers/md/persistent-data/dm-space-map.h | 1 +
17401 drivers/md/raid1.c | 4 +-
17402 drivers/md/raid10.c | 18 +-
17403 drivers/md/raid5.c | 22 +-
17404 drivers/media/dvb-core/dvbdev.c | 2 +-
17405 drivers/media/dvb-frontends/af9033.h | 2 +-
17406 drivers/media/dvb-frontends/dib3000.h | 2 +-
17407 drivers/media/dvb-frontends/dib7000p.h | 2 +-
17408 drivers/media/dvb-frontends/dib8000.h | 2 +-
17409 drivers/media/pci/cx88/cx88-video.c | 6 +-
17410 drivers/media/pci/ivtv/ivtv-driver.c | 2 +-
17411 drivers/media/pci/solo6x10/solo6x10-core.c | 2 +-
17412 drivers/media/pci/solo6x10/solo6x10-p2m.c | 2 +-
17413 drivers/media/pci/solo6x10/solo6x10.h | 2 +-
17414 drivers/media/pci/tw68/tw68-core.c | 2 +-
17415 drivers/media/platform/omap/omap_vout.c | 11 +-
17416 drivers/media/platform/s5p-tv/mixer.h | 2 +-
17417 drivers/media/platform/s5p-tv/mixer_grp_layer.c | 2 +-
17418 drivers/media/platform/s5p-tv/mixer_reg.c | 2 +-
17419 drivers/media/platform/s5p-tv/mixer_video.c | 24 +-
17420 drivers/media/platform/s5p-tv/mixer_vp_layer.c | 2 +-
17421 drivers/media/radio/radio-cadet.c | 2 +
17422 drivers/media/radio/radio-maxiradio.c | 2 +-
17423 drivers/media/radio/radio-shark.c | 2 +-
17424 drivers/media/radio/radio-shark2.c | 2 +-
17425 drivers/media/radio/radio-si476x.c | 2 +-
17426 drivers/media/radio/wl128x/fmdrv_common.c | 2 +-
17427 drivers/media/v4l2-core/v4l2-compat-ioctl32.c | 12 +-
17428 drivers/media/v4l2-core/v4l2-device.c | 4 +-
17429 drivers/media/v4l2-core/v4l2-ioctl.c | 13 +-
17430 drivers/memory/omap-gpmc.c | 21 +-
17431 drivers/message/fusion/mptsas.c | 34 +-
17432 drivers/mfd/ab8500-debugfs.c | 2 +-
17433 drivers/mfd/kempld-core.c | 2 +-
17434 drivers/mfd/max8925-i2c.c | 2 +-
17435 drivers/mfd/tps65910.c | 2 +-
17436 drivers/mfd/twl4030-irq.c | 9 +-
17437 drivers/mfd/wm5110-tables.c | 2 +-
17438 drivers/mfd/wm8998-tables.c | 2 +-
17439 drivers/misc/c2port/core.c | 4 +-
17440 drivers/misc/kgdbts.c | 4 +-
17441 drivers/misc/lis3lv02d/lis3lv02d.c | 8 +-
17442 drivers/misc/lis3lv02d/lis3lv02d.h | 2 +-
17443 drivers/misc/mic/scif/scif_rb.c | 8 +-
17444 drivers/misc/sgi-gru/gruhandles.c | 4 +-
17445 drivers/misc/sgi-gru/gruprocfs.c | 8 +-
17446 drivers/misc/sgi-gru/grutables.h | 154 +-
17447 drivers/misc/sgi-xp/xp.h | 2 +-
17448 drivers/misc/sgi-xp/xpc.h | 3 +-
17449 drivers/misc/sgi-xp/xpc_main.c | 2 +-
17450 drivers/mmc/card/block.c | 2 +-
17451 drivers/mmc/host/dw_mmc.h | 2 +-
17452 drivers/mmc/host/mmci.c | 4 +-
17453 drivers/mmc/host/omap_hsmmc.c | 4 +-
17454 drivers/mmc/host/sdhci-esdhc-imx.c | 7 +-
17455 drivers/mmc/host/sdhci-s3c.c | 8 +-
17456 drivers/mtd/chips/cfi_cmdset_0020.c | 2 +-
17457 drivers/mtd/nand/denali.c | 1 +
17458 drivers/mtd/nand/gpmi-nand/gpmi-nand.c | 2 +-
17459 drivers/mtd/nftlmount.c | 1 +
17460 drivers/mtd/sm_ftl.c | 2 +-
17461 drivers/net/bonding/bond_netlink.c | 2 +-
17462 drivers/net/caif/caif_hsi.c | 2 +-
17463 drivers/net/can/Kconfig | 2 +-
17464 drivers/net/can/dev.c | 2 +-
17465 drivers/net/can/vcan.c | 2 +-
17466 drivers/net/dummy.c | 2 +-
17467 drivers/net/ethernet/8390/ax88796.c | 4 +-
17468 drivers/net/ethernet/altera/altera_tse_main.c | 4 +-
17469 drivers/net/ethernet/amd/xgbe/xgbe-common.h | 4 +-
17470 drivers/net/ethernet/amd/xgbe/xgbe-dcb.c | 4 +-
17471 drivers/net/ethernet/amd/xgbe/xgbe-desc.c | 27 +-
17472 drivers/net/ethernet/amd/xgbe/xgbe-dev.c | 143 +-
17473 drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 64 +-
17474 drivers/net/ethernet/amd/xgbe/xgbe-ethtool.c | 10 +-
17475 drivers/net/ethernet/amd/xgbe/xgbe-main.c | 15 +-
17476 drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 27 +-
17477 drivers/net/ethernet/amd/xgbe/xgbe-ptp.c | 4 +-
17478 drivers/net/ethernet/amd/xgbe/xgbe.h | 10 +-
17479 drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.h | 2 +-
17480 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.c | 11 +-
17481 drivers/net/ethernet/broadcom/bnx2x/bnx2x_sp.h | 3 +-
17482 drivers/net/ethernet/broadcom/tg3.h | 1 +
17483 drivers/net/ethernet/cavium/liquidio/lio_ethtool.c | 6 +-
17484 drivers/net/ethernet/cavium/liquidio/lio_main.c | 11 +-
17485 drivers/net/ethernet/chelsio/cxgb3/l2t.h | 2 +-
17486 drivers/net/ethernet/dec/tulip/de4x5.c | 4 +-
17487 drivers/net/ethernet/emulex/benet/be_main.c | 2 +-
17488 drivers/net/ethernet/faraday/ftgmac100.c | 2 +
17489 drivers/net/ethernet/faraday/ftmac100.c | 2 +
17490 drivers/net/ethernet/intel/i40e/i40e_ptp.c | 2 +-
17491 drivers/net/ethernet/intel/ixgbe/ixgbe_ptp.c | 2 +-
17492 drivers/net/ethernet/mellanox/mlx4/en_tx.c | 4 +-
17493 drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 7 +-
17494 drivers/net/ethernet/neterion/vxge/vxge-config.c | 7 +-
17495 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_init.c | 4 +-
17496 .../net/ethernet/qlogic/qlcnic/qlcnic_83xx_vnic.c | 12 +-
17497 .../net/ethernet/qlogic/qlcnic/qlcnic_minidump.c | 2 +-
17498 drivers/net/ethernet/realtek/r8169.c | 8 +-
17499 drivers/net/ethernet/sfc/ptp.c | 2 +-
17500 drivers/net/ethernet/stmicro/stmmac/mmc_core.c | 4 +-
17501 drivers/net/ethernet/via/via-rhine.c | 2 +-
17502 drivers/net/geneve.c | 2 +-
17503 drivers/net/hyperv/hyperv_net.h | 2 +-
17504 drivers/net/hyperv/rndis_filter.c | 4 +-
17505 drivers/net/ifb.c | 2 +-
17506 drivers/net/ipvlan/ipvlan_core.c | 2 +-
17507 drivers/net/macvlan.c | 20 +-
17508 drivers/net/macvtap.c | 6 +-
17509 drivers/net/nlmon.c | 2 +-
17510 drivers/net/phy/phy_device.c | 6 +-
17511 drivers/net/ppp/ppp_generic.c | 4 +-
17512 drivers/net/slip/slhc.c | 2 +-
17513 drivers/net/team/team.c | 4 +-
17514 drivers/net/tun.c | 7 +-
17515 drivers/net/usb/hso.c | 23 +-
17516 drivers/net/usb/r8152.c | 2 +-
17517 drivers/net/usb/sierra_net.c | 4 +-
17518 drivers/net/virtio_net.c | 2 +-
17519 drivers/net/vrf.c | 2 +-
17520 drivers/net/vxlan.c | 4 +-
17521 drivers/net/wimax/i2400m/rx.c | 2 +-
17522 drivers/net/wireless/airo.c | 2 +-
17523 drivers/net/wireless/at76c50x-usb.c | 2 +-
17524 drivers/net/wireless/ath/ath10k/ce.c | 6 +-
17525 drivers/net/wireless/ath/ath10k/htc.c | 7 +-
17526 drivers/net/wireless/ath/ath10k/htc.h | 4 +-
17527 drivers/net/wireless/ath/ath9k/ar9002_mac.c | 36 +-
17528 drivers/net/wireless/ath/ath9k/ar9003_mac.c | 64 +-
17529 drivers/net/wireless/ath/ath9k/hw.h | 4 +-
17530 drivers/net/wireless/ath/ath9k/main.c | 22 +-
17531 drivers/net/wireless/ath/wil6210/wil_platform.h | 2 +-
17532 drivers/net/wireless/b43/phy_lp.c | 2 +-
17533 drivers/net/wireless/iwlegacy/3945-mac.c | 4 +-
17534 drivers/net/wireless/iwlwifi/dvm/debugfs.c | 34 +-
17535 drivers/net/wireless/iwlwifi/pcie/trans.c | 4 +-
17536 drivers/net/wireless/mac80211_hwsim.c | 28 +-
17537 drivers/net/wireless/rndis_wlan.c | 2 +-
17538 drivers/net/wireless/rt2x00/rt2x00.h | 2 +-
17539 drivers/net/wireless/rt2x00/rt2x00queue.c | 4 +-
17540 drivers/net/wireless/ti/wl1251/sdio.c | 12 +-
17541 drivers/net/wireless/ti/wl12xx/main.c | 8 +-
17542 drivers/net/wireless/ti/wl18xx/main.c | 6 +-
17543 drivers/nfc/nfcwilink.c | 2 +-
17544 drivers/of/fdt.c | 4 +-
17545 drivers/oprofile/buffer_sync.c | 8 +-
17546 drivers/oprofile/event_buffer.c | 2 +-
17547 drivers/oprofile/oprof.c | 2 +-
17548 drivers/oprofile/oprofile_stats.c | 10 +-
17549 drivers/oprofile/oprofile_stats.h | 10 +-
17550 drivers/oprofile/oprofilefs.c | 6 +-
17551 drivers/oprofile/timer_int.c | 2 +-
17552 drivers/parport/procfs.c | 4 +-
17553 drivers/pci/host/pci-host-generic.c | 24 +-
17554 drivers/pci/hotplug/acpiphp_ibm.c | 4 +-
17555 drivers/pci/hotplug/cpcihp_generic.c | 6 +-
17556 drivers/pci/hotplug/cpcihp_zt5550.c | 14 +-
17557 drivers/pci/hotplug/cpqphp_nvram.c | 2 +
17558 drivers/pci/hotplug/pci_hotplug_core.c | 6 +-
17559 drivers/pci/hotplug/pciehp_core.c | 2 +-
17560 drivers/pci/msi.c | 22 +-
17561 drivers/pci/pci-sysfs.c | 6 +-
17562 drivers/pci/pci.h | 2 +-
17563 drivers/pci/pcie/aspm.c | 6 +-
17564 drivers/pci/pcie/portdrv_pci.c | 2 +-
17565 drivers/pci/probe.c | 2 +-
17566 drivers/pinctrl/nomadik/pinctrl-nomadik.c | 2 +-
17567 drivers/pinctrl/pinctrl-at91.c | 5 +-
17568 drivers/platform/chrome/chromeos_pstore.c | 2 +-
17569 drivers/platform/x86/alienware-wmi.c | 4 +-
17570 drivers/platform/x86/compal-laptop.c | 2 +-
17571 drivers/platform/x86/hdaps.c | 2 +-
17572 drivers/platform/x86/ibm_rtl.c | 2 +-
17573 drivers/platform/x86/intel_oaktrail.c | 2 +-
17574 drivers/platform/x86/msi-laptop.c | 16 +-
17575 drivers/platform/x86/msi-wmi.c | 2 +-
17576 drivers/platform/x86/samsung-laptop.c | 2 +-
17577 drivers/platform/x86/samsung-q10.c | 2 +-
17578 drivers/platform/x86/sony-laptop.c | 14 +-
17579 drivers/platform/x86/thinkpad_acpi.c | 2 +-
17580 drivers/pnp/pnpbios/bioscalls.c | 14 +-
17581 drivers/pnp/pnpbios/core.c | 2 +-
17582 drivers/power/pda_power.c | 7 +-
17583 drivers/power/power_supply.h | 4 +-
17584 drivers/power/power_supply_core.c | 7 +-
17585 drivers/power/power_supply_sysfs.c | 6 +-
17586 drivers/power/reset/at91-reset.c | 9 +-
17587 drivers/powercap/powercap_sys.c | 136 +-
17588 drivers/ptp/ptp_private.h | 2 +-
17589 drivers/ptp/ptp_sysfs.c | 2 +-
17590 drivers/regulator/core.c | 4 +-
17591 drivers/regulator/max8660.c | 6 +-
17592 drivers/regulator/max8973-regulator.c | 16 +-
17593 drivers/regulator/mc13892-regulator.c | 8 +-
17594 drivers/rtc/rtc-armada38x.c | 7 +-
17595 drivers/rtc/rtc-cmos.c | 4 +-
17596 drivers/rtc/rtc-ds1307.c | 2 +-
17597 drivers/rtc/rtc-m48t59.c | 4 +-
17598 drivers/rtc/rtc-test.c | 6 +-
17599 drivers/scsi/be2iscsi/be_main.c | 2 +-
17600 drivers/scsi/bfa/bfa_fcpim.h | 2 +-
17601 drivers/scsi/bfa/bfa_ioc.h | 4 +-
17602 drivers/scsi/fcoe/fcoe_sysfs.c | 12 +-
17603 drivers/scsi/hosts.c | 4 +-
17604 drivers/scsi/hpsa.c | 38 +-
17605 drivers/scsi/hpsa.h | 2 +-
17606 drivers/scsi/libfc/fc_exch.c | 50 +-
17607 drivers/scsi/libsas/sas_ata.c | 2 +-
17608 drivers/scsi/lpfc/lpfc.h | 8 +-
17609 drivers/scsi/lpfc/lpfc_debugfs.c | 18 +-
17610 drivers/scsi/lpfc/lpfc_init.c | 6 +-
17611 drivers/scsi/lpfc/lpfc_scsi.c | 10 +-
17612 drivers/scsi/megaraid/megaraid_sas.h | 2 +-
17613 drivers/scsi/mpt2sas/mpt2sas_scsih.c | 8 +-
17614 drivers/scsi/pmcraid.c | 20 +-
17615 drivers/scsi/pmcraid.h | 8 +-
17616 drivers/scsi/qla2xxx/qla_attr.c | 4 +-
17617 drivers/scsi/qla2xxx/qla_gbl.h | 4 +-
17618 drivers/scsi/qla2xxx/qla_os.c | 6 +-
17619 drivers/scsi/qla4xxx/ql4_def.h | 2 +-
17620 drivers/scsi/qla4xxx/ql4_os.c | 6 +-
17621 drivers/scsi/scsi.c | 2 +-
17622 drivers/scsi/scsi_lib.c | 8 +-
17623 drivers/scsi/scsi_sysfs.c | 2 +-
17624 drivers/scsi/scsi_transport_fc.c | 8 +-
17625 drivers/scsi/scsi_transport_iscsi.c | 6 +-
17626 drivers/scsi/scsi_transport_srp.c | 6 +-
17627 drivers/scsi/sd.c | 6 +-
17628 drivers/scsi/sg.c | 2 +-
17629 drivers/scsi/sr.c | 21 +-
17630 drivers/soc/tegra/fuse/fuse-tegra.c | 2 +-
17631 drivers/spi/spi.c | 2 +-
17632 drivers/staging/android/timed_output.c | 6 +-
17633 drivers/staging/comedi/comedi_fops.c | 8 +-
17634 drivers/staging/fbtft/fbtft-core.c | 2 +-
17635 drivers/staging/fbtft/fbtft.h | 2 +-
17636 drivers/staging/gdm724x/gdm_tty.c | 2 +-
17637 drivers/staging/iio/accel/lis3l02dq_ring.c | 2 +-
17638 drivers/staging/iio/adc/ad7280a.c | 4 +-
17639 drivers/staging/lustre/lnet/selftest/brw_test.c | 12 +-
17640 drivers/staging/lustre/lnet/selftest/framework.c | 4 -
17641 drivers/staging/lustre/lnet/selftest/ping_test.c | 14 +-
17642 drivers/staging/lustre/lustre/include/lustre_dlm.h | 2 +-
17643 drivers/staging/lustre/lustre/include/obd.h | 2 +-
17644 drivers/staging/octeon/ethernet-rx.c | 20 +-
17645 drivers/staging/octeon/ethernet.c | 8 +-
17646 drivers/staging/rdma/ipath/ipath_rc.c | 6 +-
17647 drivers/staging/rdma/ipath/ipath_ruc.c | 6 +-
17648 drivers/staging/rtl8188eu/include/hal_intf.h | 2 +-
17649 drivers/staging/rtl8712/rtl871x_io.h | 2 +-
17650 drivers/staging/sm750fb/sm750.c | 14 +-
17651 drivers/staging/unisys/visorbus/visorbus_private.h | 4 +-
17652 drivers/target/sbp/sbp_target.c | 4 +-
17653 drivers/thermal/cpu_cooling.c | 9 +-
17654 drivers/thermal/int340x_thermal/int3400_thermal.c | 6 +-
17655 drivers/thermal/of-thermal.c | 17 +-
17656 drivers/thermal/x86_pkg_temp_thermal.c | 2 +-
17657 drivers/tty/cyclades.c | 6 +-
17658 drivers/tty/hvc/hvc_console.c | 14 +-
17659 drivers/tty/hvc/hvcs.c | 21 +-
17660 drivers/tty/hvc/hvsi.c | 22 +-
17661 drivers/tty/hvc/hvsi_lib.c | 4 +-
17662 drivers/tty/ipwireless/tty.c | 27 +-
17663 drivers/tty/moxa.c | 2 +-
17664 drivers/tty/n_gsm.c | 4 +-
17665 drivers/tty/n_tty.c | 3 +-
17666 drivers/tty/pty.c | 4 +-
17667 drivers/tty/rocket.c | 6 +-
17668 drivers/tty/serial/8250/8250_core.c | 10 +-
17669 drivers/tty/serial/ifx6x60.c | 2 +-
17670 drivers/tty/serial/ioc4_serial.c | 6 +-
17671 drivers/tty/serial/kgdb_nmi.c | 4 +-
17672 drivers/tty/serial/kgdboc.c | 32 +-
17673 drivers/tty/serial/msm_serial.c | 4 +-
17674 drivers/tty/serial/samsung.c | 9 +-
17675 drivers/tty/serial/serial_core.c | 8 +-
17676 drivers/tty/synclink.c | 34 +-
17677 drivers/tty/synclink_gt.c | 28 +-
17678 drivers/tty/synclinkmp.c | 34 +-
17679 drivers/tty/tty_io.c | 2 +-
17680 drivers/tty/tty_ldisc.c | 8 +-
17681 drivers/tty/tty_port.c | 22 +-
17682 drivers/uio/uio.c | 13 +-
17683 drivers/usb/atm/cxacru.c | 2 +-
17684 drivers/usb/atm/usbatm.c | 24 +-
17685 drivers/usb/class/cdc-acm.h | 2 +-
17686 drivers/usb/core/devices.c | 6 +-
17687 drivers/usb/core/devio.c | 12 +-
17688 drivers/usb/core/hcd.c | 4 +-
17689 drivers/usb/core/sysfs.c | 2 +-
17690 drivers/usb/core/usb.c | 2 +-
17691 drivers/usb/early/ehci-dbgp.c | 16 +-
17692 drivers/usb/gadget/function/u_serial.c | 22 +-
17693 drivers/usb/gadget/udc/dummy_hcd.c | 2 +-
17694 drivers/usb/host/ehci-hcd.c | 2 +-
17695 drivers/usb/host/ehci-hub.c | 4 +-
17696 drivers/usb/host/ehci-q.c | 4 +-
17697 drivers/usb/host/fotg210-hcd.c | 2 +-
17698 drivers/usb/host/fusbh200-hcd.c | 2 +-
17699 drivers/usb/host/hwa-hc.c | 2 +-
17700 drivers/usb/host/ohci-hcd.c | 2 +-
17701 drivers/usb/host/r8a66597.h | 2 +-
17702 drivers/usb/host/uhci-hcd.c | 2 +-
17703 drivers/usb/host/xhci-pci.c | 2 +-
17704 drivers/usb/host/xhci.c | 2 +-
17705 drivers/usb/misc/appledisplay.c | 4 +-
17706 drivers/usb/serial/console.c | 8 +-
17707 drivers/usb/storage/transport.c | 2 +-
17708 drivers/usb/storage/usb.c | 2 +-
17709 drivers/usb/storage/usb.h | 2 +-
17710 drivers/usb/usbip/vhci.h | 2 +-
17711 drivers/usb/usbip/vhci_hcd.c | 6 +-
17712 drivers/usb/usbip/vhci_rx.c | 2 +-
17713 drivers/usb/wusbcore/wa-hc.h | 4 +-
17714 drivers/usb/wusbcore/wa-xfer.c | 2 +-
17715 drivers/vfio/vfio.c | 2 +-
17716 drivers/vhost/vringh.c | 20 +-
17717 drivers/video/backlight/kb3886_bl.c | 2 +-
17718 drivers/video/console/fbcon.c | 2 +-
17719 drivers/video/fbdev/aty/aty128fb.c | 2 +-
17720 drivers/video/fbdev/aty/atyfb_base.c | 8 +-
17721 drivers/video/fbdev/aty/mach64_cursor.c | 5 +-
17722 drivers/video/fbdev/core/fb_defio.c | 6 +-
17723 drivers/video/fbdev/core/fbmem.c | 2 +-
17724 drivers/video/fbdev/hyperv_fb.c | 4 +-
17725 drivers/video/fbdev/i810/i810_accel.c | 1 +
17726 drivers/video/fbdev/matrox/matroxfb_base.c | 2 +-
17727 drivers/video/fbdev/mb862xx/mb862xxfb_accel.c | 16 +-
17728 drivers/video/fbdev/nvidia/nvidia.c | 27 +-
17729 drivers/video/fbdev/omap2/dss/display.c | 8 +-
17730 drivers/video/fbdev/s1d13xxxfb.c | 6 +-
17731 drivers/video/fbdev/smscufx.c | 4 +-
17732 drivers/video/fbdev/udlfb.c | 36 +-
17733 drivers/video/fbdev/uvesafb.c | 52 +-
17734 drivers/video/fbdev/vesafb.c | 58 +-
17735 drivers/video/fbdev/via/via_clock.h | 2 +-
17736 drivers/xen/events/events_base.c | 6 +-
17737 drivers/xen/evtchn.c | 4 +-
17738 fs/Kconfig.binfmt | 2 +-
17739 fs/afs/inode.c | 4 +-
17740 fs/aio.c | 2 +-
17741 fs/autofs4/waitq.c | 2 +-
17742 fs/befs/endian.h | 6 +-
17743 fs/binfmt_aout.c | 23 +-
17744 fs/binfmt_elf.c | 670 +-
17745 fs/binfmt_elf_fdpic.c | 4 +-
17746 fs/block_dev.c | 2 +-
17747 fs/btrfs/ctree.c | 9 +-
17748 fs/btrfs/delayed-inode.c | 9 +-
17749 fs/btrfs/delayed-inode.h | 6 +-
17750 fs/btrfs/file.c | 10 +-
17751 fs/btrfs/inode.c | 14 +-
17752 fs/btrfs/super.c | 2 +-
17753 fs/btrfs/sysfs.c | 2 +-
17754 fs/btrfs/tests/free-space-tests.c | 8 +-
17755 fs/btrfs/tree-log.h | 2 +-
17756 fs/buffer.c | 2 +-
17757 fs/cachefiles/bind.c | 6 +-
17758 fs/cachefiles/daemon.c | 8 +-
17759 fs/cachefiles/internal.h | 12 +-
17760 fs/cachefiles/namei.c | 2 +-
17761 fs/cachefiles/proc.c | 12 +-
17762 fs/ceph/dir.c | 12 +-
17763 fs/ceph/super.c | 4 +-
17764 fs/cifs/cifs_debug.c | 12 +-
17765 fs/cifs/cifsfs.c | 8 +-
17766 fs/cifs/cifsglob.h | 54 +-
17767 fs/cifs/file.c | 10 +-
17768 fs/cifs/misc.c | 4 +-
17769 fs/cifs/smb1ops.c | 80 +-
17770 fs/cifs/smb2ops.c | 84 +-
17771 fs/cifs/smb2pdu.c | 3 +-
17772 fs/coda/cache.c | 10 +-
17773 fs/compat.c | 4 +-
17774 fs/compat_binfmt_elf.c | 2 +
17775 fs/compat_ioctl.c | 12 +-
17776 fs/configfs/dir.c | 10 +-
17777 fs/coredump.c | 16 +-
17778 fs/dcache.c | 51 +-
17779 fs/ecryptfs/inode.c | 2 +-
17780 fs/ecryptfs/miscdev.c | 2 +-
17781 fs/exec.c | 362 +-
17782 fs/ext2/xattr.c | 5 +-
17783 fs/ext4/ext4.h | 20 +-
17784 fs/ext4/mballoc.c | 44 +-
17785 fs/ext4/resize.c | 16 +-
17786 fs/ext4/super.c | 4 +-
17787 fs/ext4/xattr.c | 5 +-
17788 fs/fhandle.c | 3 +-
17789 fs/file.c | 4 +-
17790 fs/fs_struct.c | 8 +-
17791 fs/fscache/cookie.c | 40 +-
17792 fs/fscache/internal.h | 202 +-
17793 fs/fscache/object.c | 26 +-
17794 fs/fscache/operation.c | 38 +-
17795 fs/fscache/page.c | 110 +-
17796 fs/fscache/stats.c | 348 +-
17797 fs/fuse/cuse.c | 10 +-
17798 fs/fuse/dev.c | 4 +-
17799 fs/gfs2/glock.c | 22 +-
17800 fs/gfs2/glops.c | 4 +-
17801 fs/gfs2/quota.c | 6 +-
17802 fs/hugetlbfs/inode.c | 13 +-
17803 fs/inode.c | 4 +-
17804 fs/jffs2/erase.c | 3 +-
17805 fs/jffs2/wbuf.c | 3 +-
17806 fs/jfs/super.c | 2 +-
17807 fs/kernfs/dir.c | 2 +-
17808 fs/kernfs/file.c | 20 +-
17809 fs/libfs.c | 10 +-
17810 fs/lockd/clntproc.c | 4 +-
17811 fs/namei.c | 16 +-
17812 fs/namespace.c | 16 +-
17813 fs/nfs/callback_xdr.c | 2 +-
17814 fs/nfs/inode.c | 6 +-
17815 fs/nfsd/nfs4proc.c | 2 +-
17816 fs/nfsd/nfs4xdr.c | 2 +-
17817 fs/nfsd/nfscache.c | 11 +-
17818 fs/nfsd/vfs.c | 6 +-
17819 fs/nls/nls_base.c | 26 +-
17820 fs/nls/nls_euc-jp.c | 6 +-
17821 fs/nls/nls_koi8-ru.c | 6 +-
17822 fs/notify/fanotify/fanotify_user.c | 4 +-
17823 fs/notify/notification.c | 4 +-
17824 fs/ntfs/dir.c | 2 +-
17825 fs/ntfs/super.c | 6 +-
17826 fs/ocfs2/localalloc.c | 2 +-
17827 fs/ocfs2/ocfs2.h | 10 +-
17828 fs/ocfs2/suballoc.c | 12 +-
17829 fs/ocfs2/super.c | 20 +-
17830 fs/pipe.c | 72 +-
17831 fs/posix_acl.c | 4 +-
17832 fs/proc/array.c | 20 +
17833 fs/proc/base.c | 4 +-
17834 fs/proc/kcore.c | 34 +-
17835 fs/proc/meminfo.c | 2 +-
17836 fs/proc/nommu.c | 2 +-
17837 fs/proc/proc_sysctl.c | 26 +-
17838 fs/proc/task_mmu.c | 39 +-
17839 fs/proc/task_nommu.c | 4 +-
17840 fs/proc/vmcore.c | 16 +-
17841 fs/qnx6/qnx6.h | 4 +-
17842 fs/quota/netlink.c | 4 +-
17843 fs/read_write.c | 2 +-
17844 fs/reiserfs/do_balan.c | 2 +-
17845 fs/reiserfs/procfs.c | 2 +-
17846 fs/reiserfs/reiserfs.h | 4 +-
17847 fs/seq_file.c | 4 +-
17848 fs/splice.c | 43 +-
17849 fs/squashfs/xattr.c | 12 +-
17850 fs/sysv/sysv.h | 2 +-
17851 fs/tracefs/inode.c | 8 +-
17852 fs/udf/misc.c | 2 +-
17853 fs/ufs/swab.h | 4 +-
17854 fs/userfaultfd.c | 2 +-
17855 fs/xattr.c | 21 +
17856 fs/xfs/libxfs/xfs_bmap.c | 2 +-
17857 fs/xfs/xfs_dir2_readdir.c | 7 +-
17858 fs/xfs/xfs_ioctl.c | 2 +-
17859 fs/xfs/xfs_linux.h | 4 +-
17860 include/asm-generic/4level-fixup.h | 2 +
17861 include/asm-generic/atomic-long.h | 156 +-
17862 include/asm-generic/atomic64.h | 12 +
17863 include/asm-generic/bitops/__fls.h | 2 +-
17864 include/asm-generic/bitops/fls.h | 2 +-
17865 include/asm-generic/bitops/fls64.h | 4 +-
17866 include/asm-generic/bug.h | 6 +-
17867 include/asm-generic/cache.h | 4 +-
17868 include/asm-generic/emergency-restart.h | 2 +-
17869 include/asm-generic/kmap_types.h | 4 +-
17870 include/asm-generic/local.h | 13 +
17871 include/asm-generic/pgtable-nopmd.h | 18 +-
17872 include/asm-generic/pgtable-nopud.h | 15 +-
17873 include/asm-generic/pgtable.h | 16 +
17874 include/asm-generic/sections.h | 1 +
17875 include/asm-generic/uaccess.h | 16 +
17876 include/asm-generic/vmlinux.lds.h | 15 +-
17877 include/crypto/algapi.h | 2 +-
17878 include/drm/drmP.h | 16 +-
17879 include/drm/drm_crtc_helper.h | 2 +-
17880 include/drm/drm_mm.h | 2 +-
17881 include/drm/i915_pciids.h | 2 +-
17882 include/drm/intel-gtt.h | 4 +-
17883 include/drm/ttm/ttm_memory.h | 2 +-
17884 include/drm/ttm/ttm_page_alloc.h | 1 +
17885 include/keys/asymmetric-subtype.h | 2 +-
17886 include/linux/atmdev.h | 4 +-
17887 include/linux/atomic.h | 17 +-
17888 include/linux/audit.h | 2 +-
17889 include/linux/average.h | 2 +-
17890 include/linux/binfmts.h | 3 +-
17891 include/linux/bitmap.h | 2 +-
17892 include/linux/bitops.h | 8 +-
17893 include/linux/blkdev.h | 2 +-
17894 include/linux/blktrace_api.h | 2 +-
17895 include/linux/cache.h | 8 +
17896 include/linux/cdrom.h | 1 -
17897 include/linux/cleancache.h | 2 +-
17898 include/linux/clk-provider.h | 1 +
17899 include/linux/compat.h | 6 +-
17900 include/linux/compiler-gcc.h | 28 +-
17901 include/linux/compiler.h | 157 +-
17902 include/linux/configfs.h | 2 +-
17903 include/linux/cpufreq.h | 3 +-
17904 include/linux/cpuidle.h | 5 +-
17905 include/linux/cpumask.h | 14 +-
17906 include/linux/crypto.h | 4 +-
17907 include/linux/ctype.h | 2 +-
17908 include/linux/dcache.h | 4 +-
17909 include/linux/decompress/mm.h | 2 +-
17910 include/linux/devfreq.h | 2 +-
17911 include/linux/device.h | 7 +-
17912 include/linux/dma-mapping.h | 2 +-
17913 include/linux/efi.h | 1 +
17914 include/linux/elf.h | 2 +
17915 include/linux/err.h | 4 +-
17916 include/linux/extcon.h | 2 +-
17917 include/linux/fb.h | 3 +-
17918 include/linux/fdtable.h | 2 +-
17919 include/linux/fs.h | 5 +-
17920 include/linux/fs_struct.h | 2 +-
17921 include/linux/fscache-cache.h | 2 +-
17922 include/linux/fscache.h | 2 +-
17923 include/linux/fsnotify.h | 2 +-
17924 include/linux/genhd.h | 4 +-
17925 include/linux/genl_magic_func.h | 2 +-
17926 include/linux/gfp.h | 12 +-
17927 include/linux/highmem.h | 12 +
17928 include/linux/hwmon-sysfs.h | 6 +-
17929 include/linux/i2c.h | 1 +
17930 include/linux/if_pppox.h | 2 +-
17931 include/linux/init.h | 12 +-
17932 include/linux/init_task.h | 7 +
17933 include/linux/interrupt.h | 6 +-
17934 include/linux/iommu.h | 2 +-
17935 include/linux/ioport.h | 2 +-
17936 include/linux/ipc.h | 2 +-
17937 include/linux/irq.h | 5 +-
17938 include/linux/irqdesc.h | 2 +-
17939 include/linux/irqdomain.h | 3 +
17940 include/linux/jiffies.h | 16 +-
17941 include/linux/key-type.h | 2 +-
17942 include/linux/kgdb.h | 6 +-
17943 include/linux/kmemleak.h | 4 +-
17944 include/linux/kobject.h | 3 +-
17945 include/linux/kobject_ns.h | 2 +-
17946 include/linux/kref.h | 2 +-
17947 include/linux/libata.h | 2 +-
17948 include/linux/linkage.h | 1 +
17949 include/linux/list.h | 15 +
17950 include/linux/lockref.h | 26 +-
17951 include/linux/math64.h | 10 +-
17952 include/linux/mempolicy.h | 7 +
17953 include/linux/mm.h | 102 +-
17954 include/linux/mm_types.h | 20 +
17955 include/linux/mmiotrace.h | 4 +-
17956 include/linux/mmzone.h | 2 +-
17957 include/linux/mod_devicetable.h | 4 +-
17958 include/linux/module.h | 69 +-
17959 include/linux/moduleloader.h | 16 +
17960 include/linux/moduleparam.h | 4 +-
17961 include/linux/net.h | 2 +-
17962 include/linux/netdevice.h | 7 +-
17963 include/linux/netfilter.h | 2 +-
17964 include/linux/netfilter/nfnetlink.h | 2 +-
17965 include/linux/nls.h | 4 +-
17966 include/linux/notifier.h | 3 +-
17967 include/linux/oprofile.h | 4 +-
17968 include/linux/padata.h | 2 +-
17969 include/linux/pci_hotplug.h | 3 +-
17970 include/linux/percpu.h | 2 +-
17971 include/linux/perf_event.h | 12 +-
17972 include/linux/pipe_fs_i.h | 8 +-
17973 include/linux/pm.h | 1 +
17974 include/linux/pm_domain.h | 4 +-
17975 include/linux/pm_runtime.h | 2 +-
17976 include/linux/pnp.h | 2 +-
17977 include/linux/poison.h | 4 +-
17978 include/linux/power/smartreflex.h | 2 +-
17979 include/linux/ppp-comp.h | 2 +-
17980 include/linux/preempt.h | 21 +
17981 include/linux/proc_ns.h | 2 +-
17982 include/linux/psci.h | 2 +-
17983 include/linux/quota.h | 2 +-
17984 include/linux/random.h | 19 +-
17985 include/linux/rculist.h | 16 +
17986 include/linux/reboot.h | 14 +-
17987 include/linux/regset.h | 3 +-
17988 include/linux/relay.h | 2 +-
17989 include/linux/rio.h | 2 +-
17990 include/linux/rmap.h | 4 +-
17991 include/linux/sched.h | 72 +-
17992 include/linux/sched/sysctl.h | 1 +
17993 include/linux/semaphore.h | 2 +-
17994 include/linux/seq_file.h | 1 +
17995 include/linux/signal.h | 2 +-
17996 include/linux/skbuff.h | 12 +-
17997 include/linux/slab.h | 47 +-
17998 include/linux/slab_def.h | 14 +-
17999 include/linux/slub_def.h | 2 +-
18000 include/linux/smp.h | 2 +
18001 include/linux/sock_diag.h | 2 +-
18002 include/linux/sonet.h | 2 +-
18003 include/linux/sunrpc/addr.h | 8 +-
18004 include/linux/sunrpc/clnt.h | 2 +-
18005 include/linux/sunrpc/svc.h | 2 +-
18006 include/linux/sunrpc/svc_rdma.h | 18 +-
18007 include/linux/sunrpc/svcauth.h | 2 +-
18008 include/linux/swapops.h | 10 +-
18009 include/linux/swiotlb.h | 3 +-
18010 include/linux/syscalls.h | 21 +-
18011 include/linux/syscore_ops.h | 2 +-
18012 include/linux/sysctl.h | 3 +-
18013 include/linux/sysfs.h | 9 +-
18014 include/linux/sysrq.h | 3 +-
18015 include/linux/tcp.h | 14 +-
18016 include/linux/thread_info.h | 7 +
18017 include/linux/tty.h | 4 +-
18018 include/linux/tty_driver.h | 2 +-
18019 include/linux/tty_ldisc.h | 2 +-
18020 include/linux/types.h | 16 +
18021 include/linux/uaccess.h | 6 +-
18022 include/linux/uio_driver.h | 2 +-
18023 include/linux/unaligned/access_ok.h | 24 +-
18024 include/linux/usb.h | 12 +-
18025 include/linux/usb/hcd.h | 1 +
18026 include/linux/usb/renesas_usbhs.h | 2 +-
18027 include/linux/vermagic.h | 21 +-
18028 include/linux/vga_switcheroo.h | 8 +-
18029 include/linux/vmalloc.h | 7 +-
18030 include/linux/vmstat.h | 24 +-
18031 include/linux/xattr.h | 5 +-
18032 include/linux/zlib.h | 3 +-
18033 include/media/v4l2-dev.h | 2 +-
18034 include/media/v4l2-device.h | 2 +-
18035 include/net/9p/transport.h | 2 +-
18036 include/net/bluetooth/l2cap.h | 2 +-
18037 include/net/bonding.h | 2 +-
18038 include/net/caif/cfctrl.h | 6 +-
18039 include/net/flow.h | 2 +-
18040 include/net/genetlink.h | 2 +-
18041 include/net/gro_cells.h | 2 +-
18042 include/net/inet_connection_sock.h | 2 +-
18043 include/net/inet_sock.h | 2 +-
18044 include/net/inetpeer.h | 2 +-
18045 include/net/ip_fib.h | 2 +-
18046 include/net/ip_vs.h | 8 +-
18047 include/net/ipv6.h | 2 +-
18048 include/net/irda/ircomm_tty.h | 1 +
18049 include/net/iucv/af_iucv.h | 2 +-
18050 include/net/llc_c_ac.h | 2 +-
18051 include/net/llc_c_ev.h | 4 +-
18052 include/net/llc_c_st.h | 2 +-
18053 include/net/llc_s_ac.h | 2 +-
18054 include/net/llc_s_st.h | 2 +-
18055 include/net/mac80211.h | 4 +-
18056 include/net/neighbour.h | 2 +-
18057 include/net/net_namespace.h | 18 +-
18058 include/net/netlink.h | 2 +-
18059 include/net/netns/conntrack.h | 6 +-
18060 include/net/netns/ipv4.h | 4 +-
18061 include/net/netns/ipv6.h | 4 +-
18062 include/net/netns/xfrm.h | 2 +-
18063 include/net/ping.h | 2 +-
18064 include/net/protocol.h | 4 +-
18065 include/net/rtnetlink.h | 2 +-
18066 include/net/sctp/checksum.h | 4 +-
18067 include/net/sctp/sm.h | 4 +-
18068 include/net/sctp/structs.h | 2 +-
18069 include/net/sock.h | 12 +-
18070 include/net/tcp.h | 8 +-
18071 include/net/xfrm.h | 13 +-
18072 include/rdma/iw_cm.h | 2 +-
18073 include/scsi/libfc.h | 3 +-
18074 include/scsi/scsi_device.h | 6 +-
18075 include/scsi/scsi_driver.h | 2 +-
18076 include/scsi/scsi_transport_fc.h | 3 +-
18077 include/scsi/sg.h | 2 +-
18078 include/sound/compress_driver.h | 2 +-
18079 include/sound/soc.h | 4 +-
18080 include/trace/events/irq.h | 4 +-
18081 include/uapi/linux/a.out.h | 8 +
18082 include/uapi/linux/bcache.h | 5 +-
18083 include/uapi/linux/byteorder/little_endian.h | 28 +-
18084 include/uapi/linux/connector.h | 2 +-
18085 include/uapi/linux/elf.h | 28 +
18086 include/uapi/linux/screen_info.h | 3 +-
18087 include/uapi/linux/swab.h | 6 +-
18088 include/uapi/linux/xattr.h | 4 +
18089 include/video/udlfb.h | 8 +-
18090 include/video/uvesafb.h | 1 +
18091 init/Kconfig | 2 +-
18092 init/Makefile | 3 +
18093 init/do_mounts.c | 14 +-
18094 init/do_mounts.h | 8 +-
18095 init/do_mounts_initrd.c | 30 +-
18096 init/do_mounts_md.c | 6 +-
18097 init/init_task.c | 4 +
18098 init/initramfs.c | 38 +-
18099 init/main.c | 30 +-
18100 ipc/compat.c | 4 +-
18101 ipc/ipc_sysctl.c | 8 +-
18102 ipc/mq_sysctl.c | 4 +-
18103 ipc/sem.c | 4 +-
18104 ipc/shm.c | 6 +
18105 kernel/audit.c | 8 +-
18106 kernel/auditsc.c | 4 +-
18107 kernel/bpf/core.c | 7 +-
18108 kernel/capability.c | 3 +
18109 kernel/compat.c | 38 +-
18110 kernel/debug/debug_core.c | 16 +-
18111 kernel/debug/kdb/kdb_main.c | 4 +-
18112 kernel/events/core.c | 26 +-
18113 kernel/events/internal.h | 10 +-
18114 kernel/events/uprobes.c | 2 +-
18115 kernel/exit.c | 2 +-
18116 kernel/fork.c | 167 +-
18117 kernel/futex.c | 11 +-
18118 kernel/futex_compat.c | 2 +-
18119 kernel/gcov/base.c | 7 +-
18120 kernel/irq/manage.c | 2 +-
18121 kernel/irq/msi.c | 19 +-
18122 kernel/irq/spurious.c | 2 +-
18123 kernel/jump_label.c | 5 +
18124 kernel/kallsyms.c | 37 +-
18125 kernel/kexec.c | 3 +-
18126 kernel/kmod.c | 8 +-
18127 kernel/kprobes.c | 4 +-
18128 kernel/ksysfs.c | 2 +-
18129 kernel/locking/lockdep.c | 7 +-
18130 kernel/locking/mutex-debug.c | 12 +-
18131 kernel/locking/mutex-debug.h | 4 +-
18132 kernel/locking/mutex.c | 6 +-
18133 kernel/module.c | 422 +-
18134 kernel/notifier.c | 17 +-
18135 kernel/padata.c | 4 +-
18136 kernel/panic.c | 5 +-
18137 kernel/pid.c | 2 +-
18138 kernel/pid_namespace.c | 2 +-
18139 kernel/power/process.c | 12 +-
18140 kernel/profile.c | 14 +-
18141 kernel/ptrace.c | 8 +-
18142 kernel/rcu/rcutorture.c | 60 +-
18143 kernel/rcu/tiny.c | 4 +-
18144 kernel/rcu/tree.c | 44 +-
18145 kernel/rcu/tree.h | 14 +-
18146 kernel/rcu/tree_plugin.h | 14 +-
18147 kernel/rcu/tree_trace.c | 12 +-
18148 kernel/sched/auto_group.c | 4 +-
18149 kernel/sched/core.c | 45 +-
18150 kernel/sched/fair.c | 2 +-
18151 kernel/sched/sched.h | 2 +-
18152 kernel/signal.c | 12 +-
18153 kernel/smpboot.c | 4 +-
18154 kernel/softirq.c | 12 +-
18155 kernel/sys.c | 10 +-
18156 kernel/sysctl.c | 34 +-
18157 kernel/time/alarmtimer.c | 2 +-
18158 kernel/time/posix-cpu-timers.c | 4 +-
18159 kernel/time/posix-timers.c | 24 +-
18160 kernel/time/timer.c | 2 +-
18161 kernel/time/timer_stats.c | 10 +-
18162 kernel/trace/blktrace.c | 6 +-
18163 kernel/trace/ftrace.c | 15 +-
18164 kernel/trace/ring_buffer.c | 96 +-
18165 kernel/trace/trace.c | 2 +-
18166 kernel/trace/trace.h | 2 +-
18167 kernel/trace/trace_clock.c | 4 +-
18168 kernel/trace/trace_events.c | 1 -
18169 kernel/trace/trace_functions_graph.c | 4 +-
18170 kernel/trace/trace_mmiotrace.c | 8 +-
18171 kernel/trace/trace_output.c | 10 +-
18172 kernel/trace/trace_seq.c | 2 +-
18173 kernel/trace/trace_stack.c | 2 +-
18174 kernel/user_namespace.c | 2 +-
18175 kernel/utsname_sysctl.c | 2 +-
18176 kernel/watchdog.c | 2 +-
18177 kernel/workqueue.c | 2 +-
18178 lib/Kconfig.debug | 8 +-
18179 lib/Makefile | 2 +-
18180 lib/bitmap.c | 8 +-
18181 lib/bug.c | 2 +
18182 lib/debugobjects.c | 2 +-
18183 lib/decompress_bunzip2.c | 3 +-
18184 lib/decompress_unlzma.c | 4 +-
18185 lib/div64.c | 4 +-
18186 lib/dma-debug.c | 4 +-
18187 lib/inflate.c | 2 +-
18188 lib/ioremap.c | 4 +-
18189 lib/kobject.c | 4 +-
18190 lib/list_debug.c | 126 +-
18191 lib/lockref.c | 44 +-
18192 lib/percpu-refcount.c | 2 +-
18193 lib/radix-tree.c | 2 +-
18194 lib/random32.c | 2 +-
18195 lib/show_mem.c | 2 +-
18196 lib/strncpy_from_user.c | 2 +-
18197 lib/strnlen_user.c | 2 +-
18198 lib/swiotlb.c | 2 +-
18199 lib/usercopy.c | 6 +
18200 lib/vsprintf.c | 12 +-
18201 mm/Kconfig | 6 +-
18202 mm/backing-dev.c | 4 +-
18203 mm/debug.c | 3 +
18204 mm/filemap.c | 2 +-
18205 mm/gup.c | 13 +-
18206 mm/highmem.c | 6 +-
18207 mm/hugetlb.c | 70 +-
18208 mm/internal.h | 1 +
18209 mm/maccess.c | 4 +-
18210 mm/madvise.c | 37 +
18211 mm/memory-failure.c | 6 +-
18212 mm/memory.c | 424 +-
18213 mm/mempolicy.c | 25 +
18214 mm/mlock.c | 15 +-
18215 mm/mm_init.c | 2 +-
18216 mm/mmap.c | 582 +-
18217 mm/mprotect.c | 137 +-
18218 mm/mremap.c | 39 +-
18219 mm/nommu.c | 21 +-
18220 mm/page-writeback.c | 2 +-
18221 mm/page_alloc.c | 49 +-
18222 mm/percpu.c | 2 +-
18223 mm/process_vm_access.c | 14 +-
18224 mm/rmap.c | 45 +-
18225 mm/shmem.c | 19 +-
18226 mm/slab.c | 109 +-
18227 mm/slab.h | 22 +-
18228 mm/slab_common.c | 86 +-
18229 mm/slob.c | 218 +-
18230 mm/slub.c | 102 +-
18231 mm/sparse-vmemmap.c | 4 +-
18232 mm/sparse.c | 2 +-
18233 mm/swap.c | 2 +
18234 mm/swapfile.c | 12 +-
18235 mm/util.c | 6 +
18236 mm/vmalloc.c | 114 +-
18237 mm/vmstat.c | 12 +-
18238 net/8021q/vlan.c | 5 +-
18239 net/8021q/vlan_netlink.c | 2 +-
18240 net/9p/mod.c | 4 +-
18241 net/9p/trans_fd.c | 2 +-
18242 net/atm/atm_misc.c | 8 +-
18243 net/atm/lec.h | 2 +-
18244 net/atm/proc.c | 6 +-
18245 net/atm/resources.c | 4 +-
18246 net/ax25/sysctl_net_ax25.c | 2 +-
18247 net/batman-adv/bat_iv_ogm.c | 8 +-
18248 net/batman-adv/fragmentation.c | 2 +-
18249 net/batman-adv/soft-interface.c | 8 +-
18250 net/batman-adv/types.h | 6 +-
18251 net/bluetooth/hci_sock.c | 2 +-
18252 net/bluetooth/l2cap_core.c | 6 +-
18253 net/bluetooth/l2cap_sock.c | 12 +-
18254 net/bluetooth/rfcomm/sock.c | 4 +-
18255 net/bluetooth/rfcomm/tty.c | 4 +-
18256 net/bridge/br_netlink.c | 2 +-
18257 net/bridge/netfilter/ebtables.c | 6 +-
18258 net/caif/cfctrl.c | 11 +-
18259 net/caif/chnl_net.c | 2 +-
18260 net/can/af_can.c | 2 +-
18261 net/can/gw.c | 6 +-
18262 net/ceph/messenger.c | 4 +-
18263 net/compat.c | 24 +-
18264 net/core/datagram.c | 2 +-
18265 net/core/dev.c | 16 +-
18266 net/core/filter.c | 2 +-
18267 net/core/flow.c | 6 +-
18268 net/core/neighbour.c | 4 +-
18269 net/core/net-sysfs.c | 2 +-
18270 net/core/net_namespace.c | 8 +-
18271 net/core/netpoll.c | 4 +-
18272 net/core/rtnetlink.c | 15 +-
18273 net/core/scm.c | 14 +-
18274 net/core/skbuff.c | 8 +-
18275 net/core/sock.c | 28 +-
18276 net/core/sock_diag.c | 15 +-
18277 net/core/sysctl_net_core.c | 22 +-
18278 net/decnet/af_decnet.c | 1 +
18279 net/decnet/sysctl_net_decnet.c | 4 +-
18280 net/dsa/dsa.c | 2 +-
18281 net/hsr/hsr_netlink.c | 2 +-
18282 net/ieee802154/6lowpan/core.c | 2 +-
18283 net/ieee802154/6lowpan/reassembly.c | 14 +-
18284 net/ipv4/af_inet.c | 2 +-
18285 net/ipv4/devinet.c | 18 +-
18286 net/ipv4/fib_frontend.c | 6 +-
18287 net/ipv4/fib_semantics.c | 2 +-
18288 net/ipv4/inet_connection_sock.c | 4 +-
18289 net/ipv4/inet_timewait_sock.c | 2 +-
18290 net/ipv4/inetpeer.c | 2 +-
18291 net/ipv4/ip_fragment.c | 15 +-
18292 net/ipv4/ip_gre.c | 6 +-
18293 net/ipv4/ip_sockglue.c | 2 +-
18294 net/ipv4/ip_vti.c | 4 +-
18295 net/ipv4/ipconfig.c | 6 +-
18296 net/ipv4/ipip.c | 4 +-
18297 net/ipv4/netfilter/arp_tables.c | 12 +-
18298 net/ipv4/netfilter/ip_tables.c | 12 +-
18299 net/ipv4/ping.c | 14 +-
18300 net/ipv4/raw.c | 14 +-
18301 net/ipv4/route.c | 32 +-
18302 net/ipv4/sysctl_net_ipv4.c | 22 +-
18303 net/ipv4/tcp_input.c | 6 +-
18304 net/ipv4/tcp_probe.c | 2 +-
18305 net/ipv4/udp.c | 10 +-
18306 net/ipv4/xfrm4_policy.c | 18 +-
18307 net/ipv6/addrconf.c | 18 +-
18308 net/ipv6/af_inet6.c | 2 +-
18309 net/ipv6/datagram.c | 2 +-
18310 net/ipv6/icmp.c | 2 +-
18311 net/ipv6/ip6_fib.c | 4 +-
18312 net/ipv6/ip6_gre.c | 10 +-
18313 net/ipv6/ip6_tunnel.c | 4 +-
18314 net/ipv6/ip6_vti.c | 4 +-
18315 net/ipv6/ipv6_sockglue.c | 2 +-
18316 net/ipv6/netfilter/ip6_tables.c | 12 +-
18317 net/ipv6/netfilter/nf_conntrack_reasm.c | 14 +-
18318 net/ipv6/ping.c | 33 +-
18319 net/ipv6/raw.c | 17 +-
18320 net/ipv6/reassembly.c | 13 +-
18321 net/ipv6/route.c | 2 +-
18322 net/ipv6/sit.c | 4 +-
18323 net/ipv6/sysctl_net_ipv6.c | 2 +-
18324 net/ipv6/udp.c | 6 +-
18325 net/ipv6/xfrm6_policy.c | 17 +-
18326 net/irda/ircomm/ircomm_tty.c | 18 +-
18327 net/iucv/af_iucv.c | 4 +-
18328 net/iucv/iucv.c | 2 +-
18329 net/key/af_key.c | 4 +-
18330 net/l2tp/l2tp_eth.c | 38 +-
18331 net/l2tp/l2tp_ip.c | 2 +-
18332 net/l2tp/l2tp_ip6.c | 2 +-
18333 net/mac80211/cfg.c | 8 +-
18334 net/mac80211/ieee80211_i.h | 3 +-
18335 net/mac80211/iface.c | 20 +-
18336 net/mac80211/main.c | 2 +-
18337 net/mac80211/pm.c | 4 +-
18338 net/mac80211/rate.c | 2 +-
18339 net/mac80211/sta_info.c | 2 +-
18340 net/mac80211/util.c | 8 +-
18341 net/mpls/af_mpls.c | 6 +-
18342 net/netfilter/ipset/ip_set_core.c | 2 +-
18343 net/netfilter/ipvs/ip_vs_conn.c | 6 +-
18344 net/netfilter/ipvs/ip_vs_core.c | 4 +-
18345 net/netfilter/ipvs/ip_vs_ctl.c | 14 +-
18346 net/netfilter/ipvs/ip_vs_lblc.c | 2 +-
18347 net/netfilter/ipvs/ip_vs_lblcr.c | 2 +-
18348 net/netfilter/ipvs/ip_vs_sync.c | 6 +-
18349 net/netfilter/ipvs/ip_vs_xmit.c | 4 +-
18350 net/netfilter/nf_conntrack_acct.c | 2 +-
18351 net/netfilter/nf_conntrack_ecache.c | 2 +-
18352 net/netfilter/nf_conntrack_helper.c | 2 +-
18353 net/netfilter/nf_conntrack_proto.c | 2 +-
18354 net/netfilter/nf_conntrack_standalone.c | 2 +-
18355 net/netfilter/nf_conntrack_timestamp.c | 2 +-
18356 net/netfilter/nf_log.c | 10 +-
18357 net/netfilter/nf_sockopt.c | 4 +-
18358 net/netfilter/nfnetlink_log.c | 4 +-
18359 net/netfilter/nft_compat.c | 9 +-
18360 net/netfilter/xt_statistic.c | 8 +-
18361 net/netlink/af_netlink.c | 4 +-
18362 net/openvswitch/vport-internal_dev.c | 2 +-
18363 net/packet/af_packet.c | 8 +-
18364 net/phonet/pep.c | 6 +-
18365 net/phonet/socket.c | 2 +-
18366 net/phonet/sysctl.c | 2 +-
18367 net/rds/cong.c | 6 +-
18368 net/rds/ib.h | 2 +-
18369 net/rds/ib_cm.c | 2 +-
18370 net/rds/ib_recv.c | 4 +-
18371 net/rds/iw.h | 2 +-
18372 net/rds/iw_cm.c | 2 +-
18373 net/rds/iw_recv.c | 4 +-
18374 net/rds/rds.h | 2 +-
18375 net/rds/tcp.c | 2 +-
18376 net/rds/tcp_send.c | 2 +-
18377 net/rxrpc/af_rxrpc.c | 2 +-
18378 net/rxrpc/ar-ack.c | 14 +-
18379 net/rxrpc/ar-call.c | 2 +-
18380 net/rxrpc/ar-connection.c | 2 +-
18381 net/rxrpc/ar-connevent.c | 2 +-
18382 net/rxrpc/ar-input.c | 4 +-
18383 net/rxrpc/ar-internal.h | 8 +-
18384 net/rxrpc/ar-local.c | 2 +-
18385 net/rxrpc/ar-output.c | 4 +-
18386 net/rxrpc/ar-peer.c | 2 +-
18387 net/rxrpc/ar-proc.c | 4 +-
18388 net/rxrpc/ar-transport.c | 2 +-
18389 net/rxrpc/rxkad.c | 4 +-
18390 net/sched/sch_generic.c | 4 +-
18391 net/sctp/ipv6.c | 6 +-
18392 net/sctp/protocol.c | 10 +-
18393 net/sctp/sm_sideeffect.c | 2 +-
18394 net/sctp/socket.c | 21 +-
18395 net/sctp/sysctl.c | 10 +-
18396 net/socket.c | 18 +-
18397 net/sunrpc/auth_gss/svcauth_gss.c | 4 +-
18398 net/sunrpc/clnt.c | 4 +-
18399 net/sunrpc/sched.c | 4 +-
18400 net/sunrpc/svc.c | 4 +-
18401 net/sunrpc/svcauth_unix.c | 2 +-
18402 net/sunrpc/xprtrdma/svc_rdma.c | 38 +-
18403 net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 8 +-
18404 net/sunrpc/xprtrdma/svc_rdma_sendto.c | 2 +-
18405 net/sunrpc/xprtrdma/svc_rdma_transport.c | 10 +-
18406 net/tipc/netlink_compat.c | 12 +-
18407 net/tipc/subscr.c | 2 +-
18408 net/unix/af_unix.c | 7 +-
18409 net/unix/sysctl_net_unix.c | 2 +-
18410 net/wireless/wext-core.c | 19 +-
18411 net/xfrm/xfrm_policy.c | 16 +-
18412 net/xfrm/xfrm_state.c | 33 +-
18413 net/xfrm/xfrm_sysctl.c | 2 +-
18414 scripts/Kbuild.include | 2 +-
18415 scripts/Makefile.build | 2 +-
18416 scripts/Makefile.clean | 3 +-
18417 scripts/Makefile.host | 69 +-
18418 scripts/basic/fixdep.c | 12 +-
18419 scripts/dtc/checks.c | 14 +-
18420 scripts/dtc/data.c | 6 +-
18421 scripts/dtc/flattree.c | 8 +-
18422 scripts/dtc/livetree.c | 4 +-
18423 scripts/gcc-plugin.sh | 51 +
18424 scripts/headers_install.sh | 1 +
18425 scripts/kallsyms.c | 4 +-
18426 scripts/kconfig/lkc.h | 5 +-
18427 scripts/kconfig/menu.c | 2 +-
18428 scripts/kconfig/symbol.c | 6 +-
18429 scripts/link-vmlinux.sh | 2 +-
18430 scripts/mod/file2alias.c | 14 +-
18431 scripts/mod/modpost.c | 25 +-
18432 scripts/mod/modpost.h | 6 +-
18433 scripts/mod/sumversion.c | 2 +-
18434 scripts/module-common.lds | 4 +
18435 scripts/package/builddeb | 1 +
18436 scripts/pnmtologo.c | 6 +-
18437 scripts/sortextable.h | 6 +-
18438 scripts/tags.sh | 2 +-
18439 security/Kconfig | 692 +-
18440 security/integrity/ima/ima.h | 4 +-
18441 security/integrity/ima/ima_api.c | 2 +-
18442 security/integrity/ima/ima_fs.c | 4 +-
18443 security/integrity/ima/ima_queue.c | 2 +-
18444 security/keys/key.c | 18 +-
18445 security/selinux/avc.c | 6 +-
18446 security/selinux/include/xfrm.h | 2 +-
18447 security/yama/yama_lsm.c | 2 +-
18448 sound/aoa/codecs/onyx.c | 7 +-
18449 sound/aoa/codecs/onyx.h | 1 +
18450 sound/core/oss/pcm_oss.c | 18 +-
18451 sound/core/pcm_compat.c | 2 +-
18452 sound/core/pcm_native.c | 4 +-
18453 sound/core/sound.c | 2 +-
18454 sound/drivers/mts64.c | 14 +-
18455 sound/drivers/opl4/opl4_lib.c | 2 +-
18456 sound/drivers/portman2x4.c | 3 +-
18457 sound/firewire/amdtp.c | 4 +-
18458 sound/firewire/amdtp.h | 4 +-
18459 sound/firewire/isight.c | 10 +-
18460 sound/firewire/scs1x.c | 8 +-
18461 sound/oss/sb_audio.c | 2 +-
18462 sound/oss/swarm_cs4297a.c | 6 +-
18463 sound/pci/hda/hda_codec.c | 2 +-
18464 sound/pci/ymfpci/ymfpci.h | 2 +-
18465 sound/pci/ymfpci/ymfpci_main.c | 12 +-
18466 sound/soc/codecs/sti-sas.c | 10 +-
18467 sound/soc/soc-ac97.c | 6 +-
18468 sound/soc/xtensa/xtfpga-i2s.c | 2 +-
18469 tools/gcc/Makefile | 42 +
18470 tools/gcc/checker_plugin.c | 150 +
18471 tools/gcc/colorize_plugin.c | 215 +
18472 tools/gcc/constify_plugin.c | 571 +
18473 tools/gcc/gcc-common.h | 812 +
18474 tools/gcc/initify_plugin.c | 552 +
18475 tools/gcc/kallocstat_plugin.c | 188 +
18476 tools/gcc/kernexec_plugin.c | 549 +
18477 tools/gcc/latent_entropy_plugin.c | 470 +
18478 tools/gcc/size_overflow_plugin/.gitignore | 2 +
18479 tools/gcc/size_overflow_plugin/Makefile | 28 +
18480 .../disable_size_overflow_hash.data |12422 ++++++++++++
18481 .../generate_size_overflow_hash.sh | 103 +
18482 .../insert_size_overflow_asm.c | 416 +
18483 .../size_overflow_plugin/intentional_overflow.c | 1010 +
18484 .../size_overflow_plugin/remove_unnecessary_dup.c | 137 +
18485 tools/gcc/size_overflow_plugin/size_overflow.h | 323 +
18486 .../gcc/size_overflow_plugin/size_overflow_debug.c | 194 +
18487 .../size_overflow_plugin/size_overflow_hash.data |20735 ++++++++++++++++++++
18488 .../size_overflow_hash_aux.data | 92 +
18489 tools/gcc/size_overflow_plugin/size_overflow_ipa.c | 1226 ++
18490 .../gcc/size_overflow_plugin/size_overflow_misc.c | 505 +
18491 .../size_overflow_plugin/size_overflow_plugin.c | 318 +
18492 .../size_overflow_plugin_hash.c | 352 +
18493 .../size_overflow_plugin/size_overflow_transform.c | 749 +
18494 .../size_overflow_transform_core.c | 1010 +
18495 tools/gcc/stackleak_plugin.c | 436 +
18496 tools/gcc/structleak_plugin.c | 287 +
18497 tools/include/linux/compiler.h | 8 +
18498 tools/lib/api/Makefile | 2 +-
18499 tools/perf/util/include/asm/alternative-asm.h | 3 +
18500 tools/virtio/linux/uaccess.h | 2 +-
18501 virt/kvm/kvm_main.c | 42 +-
18502 1944 files changed, 66925 insertions(+), 8949 deletions(-)