]> git.ipfire.org Git - thirdparty/kernel/stable-queue.git/commitdiff
Fixes for 5.10
authorSasha Levin <sashal@kernel.org>
Mon, 6 Sep 2021 01:10:38 +0000 (21:10 -0400)
committerSasha Levin <sashal@kernel.org>
Mon, 6 Sep 2021 01:10:38 +0000 (21:10 -0400)
Signed-off-by: Sasha Levin <sashal@kernel.org>
queue-5.10/ceph-fix-possible-null-pointer-dereference-in-ceph_m.patch [new file with mode: 0644]
queue-5.10/cryptoloop-add-a-deprecation-warning.patch [new file with mode: 0644]
queue-5.10/gpu-ipu-v3-fix-i.mx-ipu-v3-offset-calculations-for-s.patch [new file with mode: 0644]
queue-5.10/net-macb-add-a-null-check-on-desc_ptp.patch [new file with mode: 0644]
queue-5.10/perf-x86-amd-ibs-work-around-erratum-1197.patch [new file with mode: 0644]
queue-5.10/perf-x86-amd-power-assign-pmu.module.patch [new file with mode: 0644]
queue-5.10/perf-x86-intel-pt-fix-mask-of-num_address_ranges.patch [new file with mode: 0644]
queue-5.10/qed-fix-the-vf-msix-vectors-flow.patch [new file with mode: 0644]
queue-5.10/qede-fix-memset-corruption.patch [new file with mode: 0644]
queue-5.10/reset-reset-zynqmp-fixed-the-argument-data-type.patch [new file with mode: 0644]
queue-5.10/series

diff --git a/queue-5.10/ceph-fix-possible-null-pointer-dereference-in-ceph_m.patch b/queue-5.10/ceph-fix-possible-null-pointer-dereference-in-ceph_m.patch
new file mode 100644 (file)
index 0000000..f87e99e
--- /dev/null
@@ -0,0 +1,53 @@
+From 03cdb97c2b254b6d34a5b56f9e7b0c2c585a9cd8 Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Thu, 5 Aug 2021 08:14:34 -0700
+Subject: ceph: fix possible null-pointer dereference in ceph_mdsmap_decode()
+
+From: Tuo Li <islituo@gmail.com>
+
+[ Upstream commit a9e6ffbc5b7324b6639ee89028908b1e91ceed51 ]
+
+kcalloc() is called to allocate memory for m->m_info, and if it fails,
+ceph_mdsmap_destroy() behind the label out_err will be called:
+  ceph_mdsmap_destroy(m);
+
+In ceph_mdsmap_destroy(), m->m_info is dereferenced through:
+  kfree(m->m_info[i].export_targets);
+
+To fix this possible null-pointer dereference, check m->m_info before the
+for loop to free m->m_info[i].export_targets.
+
+[ jlayton: fix up whitespace damage
+          only kfree(m->m_info) if it's non-NULL ]
+
+Reported-by: TOTE Robot <oslab@tsinghua.edu.cn>
+Signed-off-by: Tuo Li <islituo@gmail.com>
+Signed-off-by: Jeff Layton <jlayton@kernel.org>
+Signed-off-by: Ilya Dryomov <idryomov@gmail.com>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ fs/ceph/mdsmap.c | 8 +++++---
+ 1 file changed, 5 insertions(+), 3 deletions(-)
+
+diff --git a/fs/ceph/mdsmap.c b/fs/ceph/mdsmap.c
+index 1096d1d3a84c..47f2903bacb9 100644
+--- a/fs/ceph/mdsmap.c
++++ b/fs/ceph/mdsmap.c
+@@ -393,9 +393,11 @@ void ceph_mdsmap_destroy(struct ceph_mdsmap *m)
+ {
+       int i;
+-      for (i = 0; i < m->possible_max_rank; i++)
+-              kfree(m->m_info[i].export_targets);
+-      kfree(m->m_info);
++      if (m->m_info) {
++              for (i = 0; i < m->possible_max_rank; i++)
++                      kfree(m->m_info[i].export_targets);
++              kfree(m->m_info);
++      }
+       kfree(m->m_data_pg_pools);
+       kfree(m);
+ }
+-- 
+2.30.2
+
diff --git a/queue-5.10/cryptoloop-add-a-deprecation-warning.patch b/queue-5.10/cryptoloop-add-a-deprecation-warning.patch
new file mode 100644 (file)
index 0000000..2a66598
--- /dev/null
@@ -0,0 +1,62 @@
+From 72f965a173bb12918e5204844fd12fecd594052e Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Fri, 27 Aug 2021 18:32:50 +0200
+Subject: cryptoloop: add a deprecation warning
+
+From: Christoph Hellwig <hch@lst.de>
+
+[ Upstream commit 222013f9ac30b9cec44301daa8dbd0aae38abffb ]
+
+Support for cryptoloop has been officially marked broken and deprecated
+in favor of dm-crypt (which supports the same broken algorithms if
+needed) in Linux 2.6.4 (released in March 2004), and support for it has
+been entirely removed from losetup in util-linux 2.23 (released in April
+2013).  Add a warning and a deprecation schedule.
+
+Signed-off-by: Christoph Hellwig <hch@lst.de>
+Link: https://lore.kernel.org/r/20210827163250.255325-1-hch@lst.de
+Signed-off-by: Jens Axboe <axboe@kernel.dk>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ drivers/block/Kconfig      | 4 ++--
+ drivers/block/cryptoloop.c | 2 ++
+ 2 files changed, 4 insertions(+), 2 deletions(-)
+
+diff --git a/drivers/block/Kconfig b/drivers/block/Kconfig
+index f40ebe9f5047..f2548049aa0e 100644
+--- a/drivers/block/Kconfig
++++ b/drivers/block/Kconfig
+@@ -230,7 +230,7 @@ config BLK_DEV_LOOP_MIN_COUNT
+         dynamically allocated with the /dev/loop-control interface.
+ config BLK_DEV_CRYPTOLOOP
+-      tristate "Cryptoloop Support"
++      tristate "Cryptoloop Support (DEPRECATED)"
+       select CRYPTO
+       select CRYPTO_CBC
+       depends on BLK_DEV_LOOP
+@@ -242,7 +242,7 @@ config BLK_DEV_CRYPTOLOOP
+         WARNING: This device is not safe for journaled file systems like
+         ext3 or Reiserfs. Please use the Device Mapper crypto module
+         instead, which can be configured to be on-disk compatible with the
+-        cryptoloop device.
++        cryptoloop device.  cryptoloop support will be removed in Linux 5.16.
+ source "drivers/block/drbd/Kconfig"
+diff --git a/drivers/block/cryptoloop.c b/drivers/block/cryptoloop.c
+index 3cabc335ae74..f0a91faa43a8 100644
+--- a/drivers/block/cryptoloop.c
++++ b/drivers/block/cryptoloop.c
+@@ -189,6 +189,8 @@ init_cryptoloop(void)
+       if (rc)
+               printk(KERN_ERR "cryptoloop: loop_register_transfer failed\n");
++      else
++              pr_warn("the cryptoloop driver has been deprecated and will be removed in in Linux 5.16\n");
+       return rc;
+ }
+-- 
+2.30.2
+
diff --git a/queue-5.10/gpu-ipu-v3-fix-i.mx-ipu-v3-offset-calculations-for-s.patch b/queue-5.10/gpu-ipu-v3-fix-i.mx-ipu-v3-offset-calculations-for-s.patch
new file mode 100644 (file)
index 0000000..6aa9959
--- /dev/null
@@ -0,0 +1,69 @@
+From 1e61a46b2da595e0ed3700c0648a7fa629b453ab Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Mon, 7 Jun 2021 12:49:07 +0200
+Subject: gpu: ipu-v3: Fix i.MX IPU-v3 offset calculations for (semi)planar U/V
+ formats
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+From: Krzysztof HaƂasa <khalasa@piap.pl>
+
+[ Upstream commit 7cca7c8096e2c8a4149405438329b5035d0744f0 ]
+
+Video captured in 1400x1050 resolution (bytesperline aka stride = 1408
+bytes) is invalid. Fix it.
+
+Signed-off-by: Krzysztof Halasa <khalasa@piap.pl>
+Link: https://lore.kernel.org/r/m3y2bmq7a4.fsf@t19.piap.pl
+[p.zabel@pengutronix.de: added "gpu: ipu-v3:" prefix to commit description]
+Signed-off-by: Philipp Zabel <p.zabel@pengutronix.de>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ drivers/gpu/ipu-v3/ipu-cpmem.c | 30 +++++++++++++++---------------
+ 1 file changed, 15 insertions(+), 15 deletions(-)
+
+diff --git a/drivers/gpu/ipu-v3/ipu-cpmem.c b/drivers/gpu/ipu-v3/ipu-cpmem.c
+index a1c85d1521f5..82b244cb313e 100644
+--- a/drivers/gpu/ipu-v3/ipu-cpmem.c
++++ b/drivers/gpu/ipu-v3/ipu-cpmem.c
+@@ -585,21 +585,21 @@ static const struct ipu_rgb def_bgra_16 = {
+       .bits_per_pixel = 16,
+ };
+-#define Y_OFFSET(pix, x, y)   ((x) + pix->width * (y))
+-#define U_OFFSET(pix, x, y)   ((pix->width * pix->height) +           \
+-                               (pix->width * ((y) / 2) / 2) + (x) / 2)
+-#define V_OFFSET(pix, x, y)   ((pix->width * pix->height) +           \
+-                               (pix->width * pix->height / 4) +       \
+-                               (pix->width * ((y) / 2) / 2) + (x) / 2)
+-#define U2_OFFSET(pix, x, y)  ((pix->width * pix->height) +           \
+-                               (pix->width * (y) / 2) + (x) / 2)
+-#define V2_OFFSET(pix, x, y)  ((pix->width * pix->height) +           \
+-                               (pix->width * pix->height / 2) +       \
+-                               (pix->width * (y) / 2) + (x) / 2)
+-#define UV_OFFSET(pix, x, y)  ((pix->width * pix->height) +   \
+-                               (pix->width * ((y) / 2)) + (x))
+-#define UV2_OFFSET(pix, x, y) ((pix->width * pix->height) +   \
+-                               (pix->width * y) + (x))
++#define Y_OFFSET(pix, x, y)   ((x) + pix->bytesperline * (y))
++#define U_OFFSET(pix, x, y)   ((pix->bytesperline * pix->height) +     \
++                               (pix->bytesperline * ((y) / 2) / 2) + (x) / 2)
++#define V_OFFSET(pix, x, y)   ((pix->bytesperline * pix->height) +     \
++                               (pix->bytesperline * pix->height / 4) + \
++                               (pix->bytesperline * ((y) / 2) / 2) + (x) / 2)
++#define U2_OFFSET(pix, x, y)  ((pix->bytesperline * pix->height) +     \
++                               (pix->bytesperline * (y) / 2) + (x) / 2)
++#define V2_OFFSET(pix, x, y)  ((pix->bytesperline * pix->height) +     \
++                               (pix->bytesperline * pix->height / 2) + \
++                               (pix->bytesperline * (y) / 2) + (x) / 2)
++#define UV_OFFSET(pix, x, y)  ((pix->bytesperline * pix->height) +     \
++                               (pix->bytesperline * ((y) / 2)) + (x))
++#define UV2_OFFSET(pix, x, y) ((pix->bytesperline * pix->height) +     \
++                               (pix->bytesperline * y) + (x))
+ #define NUM_ALPHA_CHANNELS    7
+-- 
+2.30.2
+
diff --git a/queue-5.10/net-macb-add-a-null-check-on-desc_ptp.patch b/queue-5.10/net-macb-add-a-null-check-on-desc_ptp.patch
new file mode 100644 (file)
index 0000000..2cc5bef
--- /dev/null
@@ -0,0 +1,61 @@
+From 08f4bd2df45cb99f3f41e00ffc201131fa9994ae Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Tue, 24 Aug 2021 15:32:09 +0530
+Subject: net: macb: Add a NULL check on desc_ptp
+
+From: Harini Katakam <harini.katakam@xilinx.com>
+
+[ Upstream commit 85520079afce885b80647fbd0d13d8f03d057167 ]
+
+macb_ptp_desc will not return NULL under most circumstances with correct
+Kconfig and IP design config register. But for the sake of the extreme
+corner case, check for NULL when using the helper. In case of rx_tstamp,
+no action is necessary except to return (similar to timestamp disabled)
+and warn. In case of TX, return -EINVAL to let the skb be free. Perform
+this check before marking skb in progress.
+Fixes coverity warning:
+(4) Event dereference:
+Dereferencing a null pointer "desc_ptp"
+
+Signed-off-by: Harini Katakam <harini.katakam@xilinx.com>
+Reviewed-by: Radhey Shyam Pandey <radhey.shyam.pandey@xilinx.com>
+Signed-off-by: Michal Simek <michal.simek@xilinx.com>
+Signed-off-by: David S. Miller <davem@davemloft.net>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ drivers/net/ethernet/cadence/macb_ptp.c | 11 ++++++++++-
+ 1 file changed, 10 insertions(+), 1 deletion(-)
+
+diff --git a/drivers/net/ethernet/cadence/macb_ptp.c b/drivers/net/ethernet/cadence/macb_ptp.c
+index 283918aeb741..09d64a29f56e 100644
+--- a/drivers/net/ethernet/cadence/macb_ptp.c
++++ b/drivers/net/ethernet/cadence/macb_ptp.c
+@@ -275,6 +275,12 @@ void gem_ptp_rxstamp(struct macb *bp, struct sk_buff *skb,
+       if (GEM_BFEXT(DMA_RXVALID, desc->addr)) {
+               desc_ptp = macb_ptp_desc(bp, desc);
++              /* Unlikely but check */
++              if (!desc_ptp) {
++                      dev_warn_ratelimited(&bp->pdev->dev,
++                                           "Timestamp not supported in BD\n");
++                      return;
++              }
+               gem_hw_timestamp(bp, desc_ptp->ts_1, desc_ptp->ts_2, &ts);
+               memset(shhwtstamps, 0, sizeof(struct skb_shared_hwtstamps));
+               shhwtstamps->hwtstamp = ktime_set(ts.tv_sec, ts.tv_nsec);
+@@ -307,8 +313,11 @@ int gem_ptp_txstamp(struct macb_queue *queue, struct sk_buff *skb,
+       if (CIRC_SPACE(head, tail, PTP_TS_BUFFER_SIZE) == 0)
+               return -ENOMEM;
+-      skb_shinfo(skb)->tx_flags |= SKBTX_IN_PROGRESS;
+       desc_ptp = macb_ptp_desc(queue->bp, desc);
++      /* Unlikely but check */
++      if (!desc_ptp)
++              return -EINVAL;
++      skb_shinfo(skb)->tx_flags |= SKBTX_IN_PROGRESS;
+       tx_timestamp = &queue->tx_timestamps[head];
+       tx_timestamp->skb = skb;
+       /* ensure ts_1/ts_2 is loaded after ctrl (TX_USED check) */
+-- 
+2.30.2
+
diff --git a/queue-5.10/perf-x86-amd-ibs-work-around-erratum-1197.patch b/queue-5.10/perf-x86-amd-ibs-work-around-erratum-1197.patch
new file mode 100644 (file)
index 0000000..da5c8a7
--- /dev/null
@@ -0,0 +1,64 @@
+From 9be712be632c8ff07d4ee0773ab37efe076ba4e0 Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Tue, 17 Aug 2021 17:10:42 -0500
+Subject: perf/x86/amd/ibs: Work around erratum #1197
+
+From: Kim Phillips <kim.phillips@amd.com>
+
+[ Upstream commit 26db2e0c51fe83e1dd852c1321407835b481806e ]
+
+Erratum #1197 "IBS (Instruction Based Sampling) Register State May be
+Incorrect After Restore From CC6" is published in a document:
+
+  "Revision Guide for AMD Family 19h Models 00h-0Fh Processors" 56683 Rev. 1.04 July 2021
+
+  https://bugzilla.kernel.org/show_bug.cgi?id=206537
+
+Implement the erratum's suggested workaround and ignore IBS samples if
+MSRC001_1031 == 0.
+
+Signed-off-by: Kim Phillips <kim.phillips@amd.com>
+Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
+Signed-off-by: Ingo Molnar <mingo@kernel.org>
+Link: https://lore.kernel.org/r/20210817221048.88063-3-kim.phillips@amd.com
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ arch/x86/events/amd/ibs.c | 8 ++++++++
+ 1 file changed, 8 insertions(+)
+
+diff --git a/arch/x86/events/amd/ibs.c b/arch/x86/events/amd/ibs.c
+index 40669eac9d6d..921f47b9bb24 100644
+--- a/arch/x86/events/amd/ibs.c
++++ b/arch/x86/events/amd/ibs.c
+@@ -90,6 +90,7 @@ struct perf_ibs {
+       unsigned long                   offset_mask[1];
+       int                             offset_max;
+       unsigned int                    fetch_count_reset_broken : 1;
++      unsigned int                    fetch_ignore_if_zero_rip : 1;
+       struct cpu_perf_ibs __percpu    *pcpu;
+       struct attribute                **format_attrs;
+@@ -672,6 +673,10 @@ fail:
+       if (check_rip && (ibs_data.regs[2] & IBS_RIP_INVALID)) {
+               regs.flags &= ~PERF_EFLAGS_EXACT;
+       } else {
++              /* Workaround for erratum #1197 */
++              if (perf_ibs->fetch_ignore_if_zero_rip && !(ibs_data.regs[1]))
++                      goto out;
++
+               set_linear_ip(&regs, ibs_data.regs[1]);
+               regs.flags |= PERF_EFLAGS_EXACT;
+       }
+@@ -769,6 +774,9 @@ static __init void perf_event_ibs_init(void)
+       if (boot_cpu_data.x86 >= 0x16 && boot_cpu_data.x86 <= 0x18)
+               perf_ibs_fetch.fetch_count_reset_broken = 1;
++      if (boot_cpu_data.x86 == 0x19 && boot_cpu_data.x86_model < 0x10)
++              perf_ibs_fetch.fetch_ignore_if_zero_rip = 1;
++
+       perf_ibs_pmu_init(&perf_ibs_fetch, "ibs_fetch");
+       if (ibs_caps & IBS_CAPS_OPCNT) {
+-- 
+2.30.2
+
diff --git a/queue-5.10/perf-x86-amd-power-assign-pmu.module.patch b/queue-5.10/perf-x86-amd-power-assign-pmu.module.patch
new file mode 100644 (file)
index 0000000..f1dc5f9
--- /dev/null
@@ -0,0 +1,35 @@
+From 0e6bb451687fd12e2bf42c113351c41409a8ac09 Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Tue, 17 Aug 2021 17:10:43 -0500
+Subject: perf/x86/amd/power: Assign pmu.module
+
+From: Kim Phillips <kim.phillips@amd.com>
+
+[ Upstream commit ccf26483416a339c114409f6e7cd02abdeaf8052 ]
+
+Assign pmu.module so the driver can't be unloaded whilst in use.
+
+Signed-off-by: Kim Phillips <kim.phillips@amd.com>
+Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
+Signed-off-by: Ingo Molnar <mingo@kernel.org>
+Link: https://lore.kernel.org/r/20210817221048.88063-4-kim.phillips@amd.com
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ arch/x86/events/amd/power.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/arch/x86/events/amd/power.c b/arch/x86/events/amd/power.c
+index 16a2369c586e..37d5b380516e 100644
+--- a/arch/x86/events/amd/power.c
++++ b/arch/x86/events/amd/power.c
+@@ -213,6 +213,7 @@ static struct pmu pmu_class = {
+       .stop           = pmu_event_stop,
+       .read           = pmu_event_read,
+       .capabilities   = PERF_PMU_CAP_NO_EXCLUDE,
++      .module         = THIS_MODULE,
+ };
+ static int power_cpu_exit(unsigned int cpu)
+-- 
+2.30.2
+
diff --git a/queue-5.10/perf-x86-intel-pt-fix-mask-of-num_address_ranges.patch b/queue-5.10/perf-x86-intel-pt-fix-mask-of-num_address_ranges.patch
new file mode 100644 (file)
index 0000000..c63a97c
--- /dev/null
@@ -0,0 +1,37 @@
+From 67040babc310dfff9aab22eee3c7bf632c1572f9 Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Tue, 24 Aug 2021 12:06:22 +0800
+Subject: perf/x86/intel/pt: Fix mask of num_address_ranges
+
+From: Xiaoyao Li <xiaoyao.li@intel.com>
+
+[ Upstream commit c53c6b7409f4cd9e542991b53d597fbe2751d7db ]
+
+Per SDM, bit 2:0 of CPUID(0x14,1).EAX[2:0] reports the number of
+configurable address ranges for filtering, not bit 1:0.
+
+Signed-off-by: Xiaoyao Li <xiaoyao.li@intel.com>
+Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
+Acked-by: Alexander Shishkin <alexander.shishkin@linux.intel.com>
+Link: https://lkml.kernel.org/r/20210824040622.4081502-1-xiaoyao.li@intel.com
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ arch/x86/events/intel/pt.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/arch/x86/events/intel/pt.c b/arch/x86/events/intel/pt.c
+index e94af4a54d0d..37129b76135a 100644
+--- a/arch/x86/events/intel/pt.c
++++ b/arch/x86/events/intel/pt.c
+@@ -62,7 +62,7 @@ static struct pt_cap_desc {
+       PT_CAP(single_range_output,     0, CPUID_ECX, BIT(2)),
+       PT_CAP(output_subsys,           0, CPUID_ECX, BIT(3)),
+       PT_CAP(payloads_lip,            0, CPUID_ECX, BIT(31)),
+-      PT_CAP(num_address_ranges,      1, CPUID_EAX, 0x3),
++      PT_CAP(num_address_ranges,      1, CPUID_EAX, 0x7),
+       PT_CAP(mtc_periods,             1, CPUID_EAX, 0xffff0000),
+       PT_CAP(cycle_thresholds,        1, CPUID_EBX, 0xffff),
+       PT_CAP(psb_periods,             1, CPUID_EBX, 0xffff0000),
+-- 
+2.30.2
+
diff --git a/queue-5.10/qed-fix-the-vf-msix-vectors-flow.patch b/queue-5.10/qed-fix-the-vf-msix-vectors-flow.patch
new file mode 100644 (file)
index 0000000..b5733f6
--- /dev/null
@@ -0,0 +1,43 @@
+From 556099df8cbafac00c3cfa8472ef5f2a7669d1d2 Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Sun, 22 Aug 2021 22:21:14 +0300
+Subject: qed: Fix the VF msix vectors flow
+
+From: Shai Malin <smalin@marvell.com>
+
+[ Upstream commit b0cd08537db8d2fbb227cdb2e5835209db295a24 ]
+
+For VFs we should return with an error in case we didn't get the exact
+number of msix vectors as we requested.
+Not doing that will lead to a crash when starting queues for this VF.
+
+Signed-off-by: Prabhakar Kushwaha <pkushwaha@marvell.com>
+Signed-off-by: Ariel Elior <aelior@marvell.com>
+Signed-off-by: Shai Malin <smalin@marvell.com>
+Signed-off-by: David S. Miller <davem@davemloft.net>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ drivers/net/ethernet/qlogic/qed/qed_main.c | 7 ++++++-
+ 1 file changed, 6 insertions(+), 1 deletion(-)
+
+diff --git a/drivers/net/ethernet/qlogic/qed/qed_main.c b/drivers/net/ethernet/qlogic/qed/qed_main.c
+index 5bd58c65e163..6bb9ec98a12b 100644
+--- a/drivers/net/ethernet/qlogic/qed/qed_main.c
++++ b/drivers/net/ethernet/qlogic/qed/qed_main.c
+@@ -616,7 +616,12 @@ static int qed_enable_msix(struct qed_dev *cdev,
+                       rc = cnt;
+       }
+-      if (rc > 0) {
++      /* For VFs, we should return with an error in case we didn't get the
++       * exact number of msix vectors as we requested.
++       * Not doing that will lead to a crash when starting queues for
++       * this VF.
++       */
++      if ((IS_PF(cdev) && rc > 0) || (IS_VF(cdev) && rc == cnt)) {
+               /* MSI-x configuration was achieved */
+               int_params->out.int_mode = QED_INT_MODE_MSIX;
+               int_params->out.num_vectors = rc;
+-- 
+2.30.2
+
diff --git a/queue-5.10/qede-fix-memset-corruption.patch b/queue-5.10/qede-fix-memset-corruption.patch
new file mode 100644 (file)
index 0000000..bc486b9
--- /dev/null
@@ -0,0 +1,48 @@
+From 4cf53df3666b33ececfabd93670228fa368a3e22 Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Tue, 24 Aug 2021 19:52:49 +0300
+Subject: qede: Fix memset corruption
+
+From: Shai Malin <smalin@marvell.com>
+
+[ Upstream commit e543468869e2532f5d7926e8f417782b48eca3dc ]
+
+Thanks to Kees Cook who detected the problem of memset that starting
+from not the first member, but sized for the whole struct.
+The better change will be to remove the redundant memset and to clear
+only the msix_cnt member.
+
+Signed-off-by: Prabhakar Kushwaha <pkushwaha@marvell.com>
+Signed-off-by: Ariel Elior <aelior@marvell.com>
+Signed-off-by: Shai Malin <smalin@marvell.com>
+Reported-by: Kees Cook <keescook@chromium.org>
+Reviewed-by: Kees Cook <keescook@chromium.org>
+Signed-off-by: David S. Miller <davem@davemloft.net>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ drivers/net/ethernet/qlogic/qede/qede_main.c | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/drivers/net/ethernet/qlogic/qede/qede_main.c b/drivers/net/ethernet/qlogic/qede/qede_main.c
+index d9a3c811ac8b..e93f06e4a172 100644
+--- a/drivers/net/ethernet/qlogic/qede/qede_main.c
++++ b/drivers/net/ethernet/qlogic/qede/qede_main.c
+@@ -1869,6 +1869,7 @@ static void qede_sync_free_irqs(struct qede_dev *edev)
+       }
+       edev->int_info.used_cnt = 0;
++      edev->int_info.msix_cnt = 0;
+ }
+ static int qede_req_msix_irqs(struct qede_dev *edev)
+@@ -2409,7 +2410,6 @@ static int qede_load(struct qede_dev *edev, enum qede_load_mode mode,
+       goto out;
+ err4:
+       qede_sync_free_irqs(edev);
+-      memset(&edev->int_info.msix_cnt, 0, sizeof(struct qed_int_info));
+ err3:
+       qede_napi_disable_remove(edev);
+ err2:
+-- 
+2.30.2
+
diff --git a/queue-5.10/reset-reset-zynqmp-fixed-the-argument-data-type.patch b/queue-5.10/reset-reset-zynqmp-fixed-the-argument-data-type.patch
new file mode 100644 (file)
index 0000000..9f31536
--- /dev/null
@@ -0,0 +1,39 @@
+From 8af21e5ceda732efd0906634a41b2d5ea2d98abd Mon Sep 17 00:00:00 2001
+From: Sasha Levin <sashal@kernel.org>
+Date: Wed, 23 Jun 2021 13:46:20 +0200
+Subject: reset: reset-zynqmp: Fixed the argument data type
+
+From: Sai Krishna Potthuri <lakshmi.sai.krishna.potthuri@xilinx.com>
+
+[ Upstream commit ed104ca4bd9c405b41e968ad4ece51f6462e90b6 ]
+
+This patch changes the data type of the variable 'val' from
+int to u32.
+
+Addresses-Coverity: argument of type "int *" is incompatible with parameter of type "u32 *"
+Signed-off-by: Sai Krishna Potthuri <lakshmi.sai.krishna.potthuri@xilinx.com>
+Signed-off-by: Michal Simek <michal.simek@xilinx.com>
+Link: https://lore.kernel.org/r/925cebbe4eb73c7d0a536da204748d33c7100d8c.1624448778.git.michal.simek@xilinx.com
+Signed-off-by: Philipp Zabel <p.zabel@pengutronix.de>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+---
+ drivers/reset/reset-zynqmp.c | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/drivers/reset/reset-zynqmp.c b/drivers/reset/reset-zynqmp.c
+index ebd433fa09dd..8c51768e9a72 100644
+--- a/drivers/reset/reset-zynqmp.c
++++ b/drivers/reset/reset-zynqmp.c
+@@ -53,7 +53,8 @@ static int zynqmp_reset_status(struct reset_controller_dev *rcdev,
+                              unsigned long id)
+ {
+       struct zynqmp_reset_data *priv = to_zynqmp_reset_data(rcdev);
+-      int val, err;
++      int err;
++      u32 val;
+       err = zynqmp_pm_reset_get_status(priv->data->reset_id + id, &val);
+       if (err)
+-- 
+2.30.2
+
index bfca522725832fa03a6964d728b226a732959abd..54aaa296d01d3ff972456aba049b6b780a287237 100644 (file)
@@ -7,3 +7,13 @@ revert-ucounts-increase-ucounts-reference-counter-before-the-security-hook.patch
 revert-cred-add-missing-return-error-code-when-set_cred_ucounts-failed.patch
 revert-add-a-reference-to-ucounts-for-each-cred.patch
 static_call-fix-unused-variable-warn-w-o-module.patch
+gpu-ipu-v3-fix-i.mx-ipu-v3-offset-calculations-for-s.patch
+reset-reset-zynqmp-fixed-the-argument-data-type.patch
+qed-fix-the-vf-msix-vectors-flow.patch
+net-macb-add-a-null-check-on-desc_ptp.patch
+qede-fix-memset-corruption.patch
+perf-x86-intel-pt-fix-mask-of-num_address_ranges.patch
+ceph-fix-possible-null-pointer-dereference-in-ceph_m.patch
+perf-x86-amd-ibs-work-around-erratum-1197.patch
+perf-x86-amd-power-assign-pmu.module.patch
+cryptoloop-add-a-deprecation-warning.patch