linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Ben Hutchings <ben@decadent.org.uk>
To: linux-kernel@vger.kernel.org, stable@vger.kernel.org
Cc: akpm@linux-foundation.org, Denis Kirjanov <kda@linux-powerpc.org>,
	"Steffen Klassert" <steffen.klassert@secunet.com>,
	"Eric Dumazet" <edumazet@google.com>,
	"David S. Miller" <davem@davemloft.net>
Subject: [PATCH 3.16 304/305] ipv6: tunnels: fix two use-after-free
Date: Sun, 03 Feb 2019 14:45:08 +0100	[thread overview]
Message-ID: <lsq.1549201508.709911064@decadent.org.uk> (raw)
In-Reply-To: <lsq.1549201507.384106140@decadent.org.uk>

3.16.63-rc1 review patch.  If anyone has any objections, please let me know.

------------------

From: Eric Dumazet <edumazet@google.com>

commit cbb49697d5512ce9e61b45ce75d3ee43d7ea5524 upstream.

xfrm6_policy_check() might have re-allocated skb->head, we need
to reload ipv6 header pointer.

sysbot reported :

BUG: KASAN: use-after-free in __ipv6_addr_type+0x302/0x32f net/ipv6/addrconf_core.c:40
Read of size 4 at addr ffff888191b8cb70 by task syz-executor2/1304

CPU: 0 PID: 1304 Comm: syz-executor2 Not tainted 4.20.0-rc7+ #356
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:77 [inline]
 dump_stack+0x244/0x39d lib/dump_stack.c:113
 print_address_description.cold.7+0x9/0x1ff mm/kasan/report.c:256
 kasan_report_error mm/kasan/report.c:354 [inline]
 kasan_report.cold.8+0x242/0x309 mm/kasan/report.c:412
 __asan_report_load4_noabort+0x14/0x20 mm/kasan/report.c:432
 __ipv6_addr_type+0x302/0x32f net/ipv6/addrconf_core.c:40
 ipv6_addr_type include/net/ipv6.h:403 [inline]
 ip6_tnl_get_cap+0x27/0x190 net/ipv6/ip6_tunnel.c:727
 ip6_tnl_rcv_ctl+0xdb/0x2a0 net/ipv6/ip6_tunnel.c:757
 vti6_rcv+0x336/0x8f3 net/ipv6/ip6_vti.c:321
 xfrm6_ipcomp_rcv+0x1a5/0x3a0 net/ipv6/xfrm6_protocol.c:132
 ip6_protocol_deliver_rcu+0x372/0x1940 net/ipv6/ip6_input.c:394
 ip6_input_finish+0x84/0x170 net/ipv6/ip6_input.c:434
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ip6_input+0xe9/0x600 net/ipv6/ip6_input.c:443
IPVS: ftp: loaded support on port[0] = 21
 ip6_mc_input+0x514/0x11c0 net/ipv6/ip6_input.c:537
 dst_input include/net/dst.h:450 [inline]
 ip6_rcv_finish+0x17a/0x330 net/ipv6/ip6_input.c:76
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ipv6_rcv+0x115/0x640 net/ipv6/ip6_input.c:272
 __netif_receive_skb_one_core+0x14d/0x200 net/core/dev.c:4973
 __netif_receive_skb+0x2c/0x1e0 net/core/dev.c:5083
 process_backlog+0x24e/0x7a0 net/core/dev.c:5923
 napi_poll net/core/dev.c:6346 [inline]
 net_rx_action+0x7fa/0x19b0 net/core/dev.c:6412
 __do_softirq+0x308/0xb7e kernel/softirq.c:292
 do_softirq_own_stack+0x2a/0x40 arch/x86/entry/entry_64.S:1027
 </IRQ>
 do_softirq.part.14+0x126/0x160 kernel/softirq.c:337
 do_softirq+0x19/0x20 kernel/softirq.c:340
 netif_rx_ni+0x521/0x860 net/core/dev.c:4569
 dev_loopback_xmit+0x287/0x8c0 net/core/dev.c:3576
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ip6_finish_output2+0x193a/0x2930 net/ipv6/ip6_output.c:84
 ip6_fragment+0x2b06/0x3850 net/ipv6/ip6_output.c:727
 ip6_finish_output+0x6b7/0xc50 net/ipv6/ip6_output.c:152
 NF_HOOK_COND include/linux/netfilter.h:278 [inline]
 ip6_output+0x232/0x9d0 net/ipv6/ip6_output.c:171
 dst_output include/net/dst.h:444 [inline]
 ip6_local_out+0xc5/0x1b0 net/ipv6/output_core.c:176
 ip6_send_skb+0xbc/0x340 net/ipv6/ip6_output.c:1727
 ip6_push_pending_frames+0xc5/0xf0 net/ipv6/ip6_output.c:1747
 rawv6_push_pending_frames net/ipv6/raw.c:615 [inline]
 rawv6_sendmsg+0x3a3e/0x4b40 net/ipv6/raw.c:945
kobject: 'queues' (0000000089e6eea2): kobject_add_internal: parent: 'tunl0', set: '<NULL>'
kobject: 'queues' (0000000089e6eea2): kobject_uevent_env
 inet_sendmsg+0x1a1/0x690 net/ipv4/af_inet.c:798
kobject: 'queues' (0000000089e6eea2): kobject_uevent_env: filter function caused the event to drop!
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg+0xd5/0x120 net/socket.c:631
 sock_write_iter+0x35e/0x5c0 net/socket.c:900
 call_write_iter include/linux/fs.h:1857 [inline]
 new_sync_write fs/read_write.c:474 [inline]
 __vfs_write+0x6b8/0x9f0 fs/read_write.c:487
kobject: 'rx-0' (00000000e2d902d9): kobject_add_internal: parent: 'queues', set: 'queues'
kobject: 'rx-0' (00000000e2d902d9): kobject_uevent_env
 vfs_write+0x1fc/0x560 fs/read_write.c:549
 ksys_write+0x101/0x260 fs/read_write.c:598
kobject: 'rx-0' (00000000e2d902d9): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/rx-0'
 __do_sys_write fs/read_write.c:610 [inline]
 __se_sys_write fs/read_write.c:607 [inline]
 __x64_sys_write+0x73/0xb0 fs/read_write.c:607
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
kobject: 'tx-0' (00000000443b70ac): kobject_add_internal: parent: 'queues', set: 'queues'
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
RIP: 0033:0x457669
Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007f9bd200bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457669
RDX: 000000000000058f RSI: 00000000200033c0 RDI: 0000000000000003
kobject: 'tx-0' (00000000443b70ac): kobject_uevent_env
RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9bd200c6d4
R13: 00000000004c2dcc R14: 00000000004da398 R15: 00000000ffffffff

Allocated by task 1304:
 save_stack+0x43/0xd0 mm/kasan/kasan.c:448
 set_track mm/kasan/kasan.c:460 [inline]
 kasan_kmalloc+0xc7/0xe0 mm/kasan/kasan.c:553
 __do_kmalloc_node mm/slab.c:3684 [inline]
 __kmalloc_node_track_caller+0x50/0x70 mm/slab.c:3698
 __kmalloc_reserve.isra.41+0x41/0xe0 net/core/skbuff.c:140
 __alloc_skb+0x155/0x760 net/core/skbuff.c:208
kobject: 'tx-0' (00000000443b70ac): fill_kobj_path: path = '/devices/virtual/net/tunl0/queues/tx-0'
 alloc_skb include/linux/skbuff.h:1011 [inline]
 __ip6_append_data.isra.49+0x2f1a/0x3f50 net/ipv6/ip6_output.c:1450
 ip6_append_data+0x1bc/0x2d0 net/ipv6/ip6_output.c:1619
 rawv6_sendmsg+0x15ab/0x4b40 net/ipv6/raw.c:938
 inet_sendmsg+0x1a1/0x690 net/ipv4/af_inet.c:798
 sock_sendmsg_nosec net/socket.c:621 [inline]
 sock_sendmsg+0xd5/0x120 net/socket.c:631
 ___sys_sendmsg+0x7fd/0x930 net/socket.c:2116
 __sys_sendmsg+0x11d/0x280 net/socket.c:2154
 __do_sys_sendmsg net/socket.c:2163 [inline]
 __se_sys_sendmsg net/socket.c:2161 [inline]
 __x64_sys_sendmsg+0x78/0xb0 net/socket.c:2161
 do_syscall_64+0x1b9/0x820 arch/x86/entry/common.c:290
 entry_SYSCALL_64_after_hwframe+0x49/0xbe
kobject: 'gre0' (00000000cb1b2d7b): kobject_add_internal: parent: 'net', set: 'devices'

Freed by task 1304:
 save_stack+0x43/0xd0 mm/kasan/kasan.c:448
 set_track mm/kasan/kasan.c:460 [inline]
 __kasan_slab_free+0x102/0x150 mm/kasan/kasan.c:521
 kasan_slab_free+0xe/0x10 mm/kasan/kasan.c:528
 __cache_free mm/slab.c:3498 [inline]
 kfree+0xcf/0x230 mm/slab.c:3817
 skb_free_head+0x93/0xb0 net/core/skbuff.c:553
 pskb_expand_head+0x3b2/0x10d0 net/core/skbuff.c:1498
 __pskb_pull_tail+0x156/0x18a0 net/core/skbuff.c:1896
 pskb_may_pull include/linux/skbuff.h:2188 [inline]
 _decode_session6+0xd11/0x14d0 net/ipv6/xfrm6_policy.c:150
 __xfrm_decode_session+0x71/0x140 net/xfrm/xfrm_policy.c:3272
kobject: 'gre0' (00000000cb1b2d7b): kobject_uevent_env
 __xfrm_policy_check+0x380/0x2c40 net/xfrm/xfrm_policy.c:3322
 __xfrm_policy_check2 include/net/xfrm.h:1170 [inline]
 xfrm_policy_check include/net/xfrm.h:1175 [inline]
 xfrm6_policy_check include/net/xfrm.h:1185 [inline]
 vti6_rcv+0x4bd/0x8f3 net/ipv6/ip6_vti.c:316
 xfrm6_ipcomp_rcv+0x1a5/0x3a0 net/ipv6/xfrm6_protocol.c:132
 ip6_protocol_deliver_rcu+0x372/0x1940 net/ipv6/ip6_input.c:394
 ip6_input_finish+0x84/0x170 net/ipv6/ip6_input.c:434
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ip6_input+0xe9/0x600 net/ipv6/ip6_input.c:443
 ip6_mc_input+0x514/0x11c0 net/ipv6/ip6_input.c:537
 dst_input include/net/dst.h:450 [inline]
 ip6_rcv_finish+0x17a/0x330 net/ipv6/ip6_input.c:76
 NF_HOOK include/linux/netfilter.h:289 [inline]
 ipv6_rcv+0x115/0x640 net/ipv6/ip6_input.c:272
 __netif_receive_skb_one_core+0x14d/0x200 net/core/dev.c:4973
 __netif_receive_skb+0x2c/0x1e0 net/core/dev.c:5083
 process_backlog+0x24e/0x7a0 net/core/dev.c:5923
kobject: 'gre0' (00000000cb1b2d7b): fill_kobj_path: path = '/devices/virtual/net/gre0'
 napi_poll net/core/dev.c:6346 [inline]
 net_rx_action+0x7fa/0x19b0 net/core/dev.c:6412
 __do_softirq+0x308/0xb7e kernel/softirq.c:292

The buggy address belongs to the object at ffff888191b8cac0
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 176 bytes inside of
 512-byte region [ffff888191b8cac0, ffff888191b8ccc0)
The buggy address belongs to the page:
page:ffffea000646e300 count:1 mapcount:0 mapping:ffff8881da800940 index:0x0
flags: 0x2fffc0000000200(slab)
raw: 02fffc0000000200 ffffea0006eaaa48 ffffea00065356c8 ffff8881da800940
raw: 0000000000000000 ffff888191b8c0c0 0000000100000006 0000000000000000
page dumped because: kasan: bad access detected
kobject: 'queues' (000000005fd6226e): kobject_add_internal: parent: 'gre0', set: '<NULL>'

Memory state around the buggy address:
 ffff888191b8ca00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff888191b8ca80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
>ffff888191b8cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                                                             ^
 ffff888191b8cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888191b8cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb

Fixes: 0d3c703a9d17 ("ipv6: Cleanup IPv6 tunnel receive path")
Fixes: ed1efb2aefbb ("ipv6: Add support for IPsec virtual tunnel interfaces")
Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Steffen Klassert <steffen.klassert@secunet.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
[bwh: Backported to 3.16: Drop change in ipxip6_rcv()]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
--- a/net/ipv6/ip6_vti.c
+++ b/net/ipv6/ip6_vti.c
@@ -297,6 +297,7 @@ static int vti6_rcv(struct sk_buff *skb)
 			return 0;
 		}
 
+		ipv6h = ipv6_hdr(skb);
 		if (!ip6_tnl_rcv_ctl(t, &ipv6h->daddr, &ipv6h->saddr)) {
 			t->dev->stats.rx_dropped++;
 			rcu_read_unlock();


  parent reply	other threads:[~2019-02-03 14:03 UTC|newest]

Thread overview: 313+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2019-02-03 13:45 [PATCH 3.16 000/305] 3.16.63-rc1 review Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 157/305] ext4: fix buffer leak in ext4_xattr_move_to_block() on error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 041/305] usb: chipidea: Prevent unbalanced IRQ disable Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 109/305] llc: do not use sk_eat_skb() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 220/305] drm/ast: change resolution may cause screen blurred Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 186/305] uio: Fix an Oops on load Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 258/305] mmc: core: use mrq->sbc when sending CMD23 for RPMB Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 142/305] sunrpc: correct the computation for page_ptr when truncating Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 169/305] mac80211_hwsim: Replace bogus hrtimer clockid Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 029/305] signal/GenWQE: Fix sending of SIGKILL Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 089/305] IB/cm: Fix sleeping while spin lock is held Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 199/305] netfilter: nf_tables: fix use-after-free when deleting compat expressions Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 247/305] dmaengine: at_hdmac: fix memory leak in at_dma_xlate() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 034/305] media: em28xx: make v4l2-compliance happier by starting sequence on zero Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 102/305] dm ioctl: harden copy_params()'s copy_from_user() from malicious users Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 191/305] libata: Apply NOLPM quirk for SAMSUNG MZMPC128HBFU-000MV SSD Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 177/305] can: dev: __can_get_echo_skb(): Don't crash the kernel if can_priv::echo_skb is accessed out of bounds Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 215/305] usb: cdc-acm: add entry for Hiro (Conexant) modem Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 040/305] kgdboc: Passing ekgdboc to command line causes panic Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 033/305] media: em28xx: fix input name for Terratec AV 350 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 134/305] memory_hotplug: cond_resched in __remove_pages Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 046/305] fuse: fix blocked_waitq wakeup Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 159/305] mount: Retest MNT_LOCKED in do_umount Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 091/305] RDMA/cm: Respect returned status of cm_init_av_by_path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 200/305] xtensa: fix boot parameters address translation Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 230/305] ALSA: control: fix failure to return numerical ID in 'add' event Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 187/305] batman-adv: Check total_size when queueing fragments Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 054/305] ext4: fix EXT4_IOC_SWAP_BOOT Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 068/305] bcache: fix wrong cache_misses statistics Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 062/305] IB/mthca: Fix error return code in __mthca_init_one() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 127/305] rtnetlink: Disallow FDB configuration for non-Ethernet device Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 208/305] hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444! Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 056/305] VMCI: Resource wildcard match fixed Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 121/305] ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 026/305] signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 204/305] usb: xhci: Prevent bus suspend if a port connect change or polling state is detected Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 022/305] libertas_tf: prevent underflow in process_cmdrequest() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 305/305] x86/vdso: Fix vDSO syscall fallback asm constraint regression Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 156/305] ext4: release bs.bh before re-using in ext4_xattr_block_find() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 249/305] hfs: do not free node before using Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 093/305] KVM: x86: remove code for lazy FPU handling Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 257/305] ARM: mmp/mmp2: fix cpu_is_mmp2() on mmp2-dt Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 116/305] thermal: rcar_thermal: Prevent doing work after unbind Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 120/305] net: sched: gred: pass the right attribute to gred_change_table_def() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 175/305] can: dev: can_get_echo_skb(): factor out non sending code to __can_get_echo_skb() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 049/305] iio: adc: at91: fix wrong channel number in triggered buffer mode Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 128/305] Cramfs: fix abad comparison when wrap-arounds occur Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 025/305] media: uvcvideo: Fix uvc_alloc_entity() allocation alignment Ben Hutchings
2019-06-07 15:09   ` Doug Anderson
2019-06-07 15:34     ` Greg KH
2019-02-03 13:45 ` [PATCH 3.16 227/305] team: no need to do team_notify_peers or team_mcast_rejoin when disabling port Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 212/305] drm/i915: Disable LP3 watermarks on all SNB machines Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 235/305] Drivers: hv: vmbus: check the creation_status in vmbus_establish_gpadl() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 198/305] netfilter: nf_tables: fix oob access Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 279/305] tracing: Fix memory leak of instance function hash filters Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 104/305] xen-swiotlb: use actually allocated size on check physical continuous Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 118/305] ipv6/ndisc: Preserve IPv6 control buffer if protocol error handlers are called Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 038/305] Cipso: cipso_v4_optptr enter infinite loop Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 150/305] ext4: avoid possible double brelse() in add_new_gdb() on error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 138/305] ext4: add missing brelse() update_backups()'s " Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 274/305] scsi: bnx2fc: Fix NULL dereference in error handling Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 031/305] s390/qeth: invoke softirqs after napi_schedule() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 094/305] KVM: nVMX: Always reflect #NM VM-exits to L1 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 055/305] w1: omap-hdq: fix missing bus unregister at removal Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 250/305] tun: forbid iface creation with rtnl ops Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 260/305] rtnetlink: ndo_dflt_fdb_dump() only work for ARPHRD_ETHER devices Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 073/305] staging: comedi: ni_mio_common: protect register write overflow Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 135/305] ext4: avoid potential extra brelse in setup_new_flex_group_blocks() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 124/305] um: Drop own definition of PTRACE_SYSEMU/_SINGLESTEP Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 072/305] media: cx231xx: fix potential sign-extension overflow on large shift Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 155/305] ext4: fix possible leak of sbi->s_group_desc_leak in error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 205/305] net/mlx4: Fix UBSAN warning of signed integer overflow Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 012/305] x86/pae: use 64 bit atomic xchg function in native_ptep_get_and_clear Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 059/305] powerpc/pseries: Fix DTL buffer registration Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 076/305] ALSA: hda - Add mic quirk for the Lenovo G50-30 (17aa:3905) Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 052/305] PM / devfreq: Fix devfreq_add_device() when drivers are built as modules Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 209/305] hwmon: (w83795) temp4_type has writable permission Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 261/305] staging: rtl8712: Fix possible buffer overrun Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 265/305] mac80211: ignore NullFunc frames in the duplicate detection Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 301/305] drm: Rewrite drm_ioctl_flags() to resemble the new drm_ioctl() code Ben Hutchings
2019-02-03 13:45 ` Ben Hutchings [this message]
2019-02-03 13:45 ` [PATCH 3.16 017/305] staging: comedi: quatech_daqp_cs: use comedi_timeout() in ao (*insn_write) Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 154/305] USB: misc: appledisplay: add 20" Apple Cinema Display Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 256/305] media: vb2: don't call __vb2_queue_cancel if vb2_start_streaming failed Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 021/305] cpupower: remove stringop-truncation waring Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 223/305] uprobes: Fix handle_swbp() vs. unregister() + register() race once more Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 240/305] ext2: fix potential use after free Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 079/305] iwlwifi: mvm: check return value of rs_rate_from_ucode_rate() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 263/305] usb: quirk: add no-LPM quirk on SanDisk Ultra Flair device Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 271/305] virtio/s390: avoid race on vcdev->config Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 166/305] SUNRPC: drop pointless static qualifier in xdr_get_next_encode_buffer() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 241/305] kvm: mmu: Fix race in emulated page table writes Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 090/305] IB/cm: Avoid AV ah_attr overwriting during LAP message handling Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 125/305] um: Give start_idle_thread() a return code Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 145/305] Btrfs: fix cur_offset in the error case for nocow Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 270/305] kgdboc: fix KASAN global-out-of-bounds bug in param_set_kgdboc_var() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 133/305] ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 008/305] s390/timex: fix get_tod_clock_ext() inline assembly Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 176/305] can: dev: __can_get_echo_skb(): replace struct can_frame by canfd_frame to access frame length Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 218/305] mips: fix mips_get_syscall_arg o32 check Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 168/305] net: stmmac: Fix RX packet size > 8191 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 106/305] libceph: bump CEPH_MSG_MAX_DATA_LEN Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 282/305] USB: serial: option: add Simcom SIM7500/SIM7600 (MBIM mode) Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 011/305] timer/debug: Change /proc/timer_list from 0444 to 0400 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 066/305] mach64: fix display corruption on big endian machines Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 183/305] Drivers: hv: kvp: Fix the recent regression caused by incorrect clean-up Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 032/305] media: em28xx: use a default format if TRY_FMT fails Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 288/305] mmc: core: Reset HPI enabled state during re-init and in case of errors Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 122/305] nfsd: Fix an Oops in free_session() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 163/305] HID: Add quirk for Microsoft PIXART OEM mouse Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 232/305] Revert "usb: dwc3: gadget: skip Set/Clear Halt when invalid" Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 020/305] sparc32: Fix inverted invalid_frame_pointer checks on sigreturns Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 224/305] btrfs: relocation: set trans to be NULL after ending transaction Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 238/305] xtensa: fix coprocessor context offset definitions Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 077/305] ext4: fix use-after-free race in ext4_remount()'s error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 043/305] media: pci: cx23885: handle adding to list failure Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 234/305] usb: core: quirks: add RESET_RESUME quirk for Cherry G230 Stream series Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 113/305] smb3: do not attempt cifs operation in smb3 query info error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 164/305] termios, tty/tty_baudrate.c: fix buffer overrun Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 178/305] can: dev: __can_get_echo_skb(): print error message, if trying to echo non existing skb Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 099/305] scsi: esp_scsi: Track residual for PIO transfers Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 236/305] powerpc: Fix COFF zImage booting on old powermacs Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 172/305] ALSA: oss: Use kvzalloc() for local buffer allocations Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 160/305] mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 194/305] libata: blacklist SAMSUNG MZ7TD256HAFV-000L9 SSD Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 037/305] cipso: don't use IPCB() to locate the CIPSO IP option Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 001/305] x86/asm: Add pud/pmd mask interfaces to handle large PAT bit Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 009/305] s390/dasd: Restore a necessary cast Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 264/305] mac80211: fix reordering of buffered broadcast packets Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 141/305] mtd: docg3: don't set conflicting BCH_CONST_PARAMS option Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 105/305] genirq: Fix race on spurious interrupt detection Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 013/305] ARM: fix put_user() for gcc-8 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 047/305] EDAC, {i7core,sb,skx}_edac: Fix uncorrected error counting Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 202/305] usb: core: Fix hub port connection events lost Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 207/305] net-gro: reset skb->pkt_type in napi_reuse_skb() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 173/305] fuse: fix leaked notify reply Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 165/305] arch/alpha, termios: implement BOTHER, IBSHIFT and termios2 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 276/305] USB: serial: option: add HP lt4132 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 217/305] ACPI / platform: Add SMB0001 HID to forbidden_id_list Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 083/305] btrfs: wait on caching when putting the bg cache Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 180/305] usb: xhci: fix timeout for transition from RExit to U0 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 063/305] ALSA: usb-audio: update quirk for B&W PX to remove microphone Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 085/305] hwmon: (pmbus) Fix page count auto-detection Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 048/305] iio: adc: at91: fix acking DRDY irq on simple conversions Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 148/305] ext4: fix possible inode leak in the retry loop of ext4_resize_fs() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 201/305] Btrfs: ensure path name is null terminated at btrfs_control_ioctl Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 273/305] bnx2fc: fix an error code in _bnx2fc_create() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 137/305] ext4: add missing brelse() add_new_gdb_meta_bg()'s error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 286/305] xhci: Don't prevent USB2 bus suspend in state check intended for USB3 only Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 246/305] ALSA: hda: Add support for AMD Stoney Ridge Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 170/305] mac80211_hwsim: Timer should be initialized before device registered Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 019/305] media: v4l: event: Add subscription to list before calling "add" operation Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 140/305] x86/hyper-v: Enable PIT shutdown quirk Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 129/305] kbuild: fix kernel/bounds.c 'W=1' warning Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 193/305] libata: Apply NOLPM quirk for SAMSUNG MZ7TD256HAFV-000L9 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 064/305] USB: serial: cypress_m8: fix interrupt-out transfer length Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 300/305] vxge: ensure data0 is initialized in when fetching firmware version information Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 302/305] drm/ioctl: Fix Spectre v1 vulnerabilities Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 007/305] x86/boot: eboot.c: Include string function declarations Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 219/305] iser: set sector for ambiguous mr status errors Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 295/305] x86/mtrr: Don't copy uninitialized gentry fields back to userspace Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 267/305] cifs: Fix separator when building path from dentry Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 045/305] x86/speculation: Apply IBPB more strictly to avoid cross-process data leak Ben Hutchings
2019-02-03 19:05   ` Jiri Kosina
2019-02-03 21:37     ` Andi Kleen
2019-02-05  1:13       ` Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 285/305] Drivers: hv: vmbus: Return -EINVAL for the sys files for unopened channels Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 293/305] KVM: x86: Add MSR_AMD64_DC_CFG to the list of ignored MSRs Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 039/305] net/ipv4: defensive cipso option parsing Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 280/305] fuse: cleanup fuse_file refcounting Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 192/305] libata: Apply NOLPM quirk for SAMSUNG PM830 CXM13D1Q Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 081/305] spi: sh-msiof: fix deferred probing Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 061/305] x86, hibernate: Fix nosave_regions setup for hibernation Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 096/305] parisc: Fix address in HPMC IVA Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 014/305] disable new gcc-7.1.1 warnings for now Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 269/305] xhci: Prevent U1/U2 link pm states if exit latency is too long Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 108/305] qlcnic: fix a return in qlcnic_dcb_get_capability() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 272/305] virtio/s390: fix race in ccw_io_helper() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 004/305] x86/mm: Simplify p[g4um]d_page() macros Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 095/305] parisc: Fix map_pages() to not overwrite existing pte entries Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 162/305] iommu/ipmmu-vmsa: Fix crash on early domain free Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 210/305] drm/ast: Remove existing framebuffers before loading driver Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 082/305] btrfs: fix error handling in btrfs_dev_replace_start Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 044/305] net: phy: Stop with excessive soft reset Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 190/305] netfilter: nf_tables: don't use position attribute on rule replacement Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 147/305] ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 292/305] KVM: Handle MSR_IA32_PERF_CTL Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 226/305] ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 299/305] vxlan: Fix error path in __vxlan_dev_create() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 243/305] rapidio/rionet: do not free skb before reading its length Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 206/305] iio/hid-sensors: Fix IIO_CHAN_INFO_RAW returning wrong values for signed numbers Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 167/305] ARM: OMAP1: ams-delta: Fix possible use of uninitialized field Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 088/305] IB/{cm, umad}: Handle av init error Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 284/305] vhost: make sure used idx is seen before log in vhost_add_used_n() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 067/305] mach64: fix image corruption due to reading accelerator registers Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 245/305] ALSA: pcm: Call snd_pcm_unlink() conditionally at closing Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 290/305] VSOCK: Send reset control packet when socket is partially bound Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 244/305] s390/qeth: fix length check in SNMP processing Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 028/305] scsi: qla2xxx: shutdown chip if reset fail Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 015/305] turn off -Wattribute-alias Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 130/305] smb3: on kerberos mount if server doesn't specify auth type use krb5 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 214/305] HID: uhid: forbid UHID_CREATE under KERNEL_DS or elevated privileges Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 036/305] PCI/ASPM: Fix link_state teardown on device removal Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 074/305] ima: fix showing large 'violations' or 'runtime_measurements_count' Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 057/305] Drivers: hv: kvp: Fix two "this statement may fall through" warnings Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 252/305] SUNRPC: Fix a potential race in xprt_connect() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 069/305] bcache: fix miss key refill->end in writeback Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 080/305] libertas: don't set URB_ZERO_PACKET on IN USB transfer Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 296/305] net: macb: Fix race condition in driver when Rx frame is dropped Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 225/305] exportfs: do not read dentry after free Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 006/305] x86/eisa: Add missing include Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 196/305] NFSv4: Don't exit the state manager without clearing NFS4CLNT_MANAGER_RUNNING Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 255/305] ALSA: usb-audio: Fix UAF decrement if card has no live interfaces in card.c Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 050/305] iio: ad5064: Fix regulator handling Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 268/305] xhci: workaround CSS timeout on AMD SNPS 3.0 xHC Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 189/305] batman-adv: Expand merged fragment buffer for full packet Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 002/305] x86/asm: Move PUD_PAGE macros to page_types.h Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 262/305] usb: appledisplay: Add 27" Apple Cinema Display Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 213/305] new helper: uaccess_kernel() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 297/305] net: macb: fix dropped RX frames due to a race Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 237/305] xtensa: enable coprocessors that are being flushed Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 229/305] ALSA: sparc: Fix invalid snd_free_pages() at error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 035/305] media: tvp5150: fix width alignment during set_selection() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 131/305] netfilter: x_tables: add and use xt_check_proc_name Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 117/305] HID: hiddev: fix potential Spectre v1 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 171/305] mac80211: Clear beacon_int in ieee80211_do_stop Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 275/305] net/mlx4_core: Correctly set PFC param if global pause is turned off Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 298/305] net: macb: add missing barriers when reading descriptors Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 281/305] fuse: continue to send FUSE_RELEASEDIR when FUSE_OPEN returns ENOSYS Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 092/305] clk: s2mps11: Fix matching when built as module and DT node contains compatible Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 058/305] ext4: initialize retries variable in ext4_da_write_inline_data_begin() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 132/305] netfilter: xt_IDLETIMER: add sysfs filename checking routine Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 303/305] gpio: max7301: fix driver for use with CONFIG_VMAP_STACK Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 016/305] staging: comedi: quatech_daqp_cs: fix bug in daqp_ao_insn_write() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 086/305] tun: Consistently configure generic netdev params via rtnetlink Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 070/305] mtd: spi-nor: fsl-quadspi: fix api naming typo _init_ahb_read Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 018/305] staging: comedi: quatech_daqp_cs: fix no-op loop daqp_ao_insn_write() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 179/305] usb: xhci: fix uninitialized completion when USB3 port got wrong status Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 231/305] ALSA: control: Fix race between adding and removing a user element Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 030/305] power: supply: max8998-charger: Fix platform data retrieval Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 053/305] usb: gadget: fsl_udc_core: check allocation return value and cleanup on failure Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 126/305] xtensa: add NOTES section to the linker script Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 239/305] xtensa: fix coprocessor part of ptrace_{get,set}xregs Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 136/305] ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 277/305] aio: fix spectre gadget in lookup_ioctx Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 107/305] Btrfs: fix use-after-free when dumping free space Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 111/305] net: bcmgenet: fix OF child-node lookup Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 060/305] powerpc/pseries: Fix how we iterate over the DTL entries Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 098/305] drm/i915: Large page offsets for pread/pwrite Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 181/305] sysv: return 'err' instead of 0 in __sysv_write_inode Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 144/305] xfrm: Fix bucket count reported to userspace Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 289/305] mmc: core: Use a minimum 1600ms timeout when enabling CACHE ctrl Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 103/305] clk: s2mps11: Add used attribute to s2mps11_dt_match Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 287/305] mmc: omap_hsmmc: fix DMA API warning Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 195/305] Input: matrix_keypad - check for errors from of_get_named_gpio() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 024/305] x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 139/305] clockevents/drivers/i8253: Add support for PIT shutdown quirk Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 197/305] btrfs: Always try all copies when reading extent buffers Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 042/305] crypto: lrw - Fix out-of bounds access on counter overflow Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 221/305] drm/ast: fixed cursor may disappear sometimes Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 078/305] gfs2_meta: ->mount() can get NULL dev_name Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 071/305] mtd: spi-nor: fsl-quadspi: Don't let -EINVAL on the bus Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 182/305] floppy: fix race condition in __floppy_read_block_0() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 254/305] ALSA: usb-audio: Replace probing flag with active refcount Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 188/305] batman-adv: Use only queued fragments when merging Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 151/305] USB: Wait for extra delay time after USB_PORT_FEAT_RESET for quirky hub Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 003/305] x86/asm: Fix pud/pmd interfaces to handle large PAT bit Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 222/305] Btrfs: fix race between enabling quotas and subvolume creation Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 266/305] USB: check usb_get_extra_descriptor for proper size Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 146/305] Btrfs: fix data corruption due to cloning of eof block Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 119/305] hugetlbfs: dirty pages as they are added to pagecache Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 203/305] l2tp: fix a sock refcnt leak in l2tp_tunnel_register Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 005/305] x86/mm: Fix regression with huge pages on PAE Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 114/305] thermal: rcar_thermal: Prevent hardware access during system suspend Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 216/305] HID: Add quirk for Primax PIXART OEM mice Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 153/305] USB: quirks: Add no-lpm quirk for Raydium touchscreens Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 065/305] printk: Fix panic caused by passing log_buf_len to command line Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 174/305] can: raw: check for CAN FD capable netdev in raw_sendmsg() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 278/305] tracing: Fix memory leak in set_trigger_filter() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 101/305] ACPICA: AML interpreter: add region addresses in global list during initialization Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 259/305] MMC: OMAP: fix broken MMC on OMAP15XX/OMAP5910/OMAP310 Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 100/305] xfs: Fix xqmstats offsets in /proc/fs/xfs/xqmstat Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 233/305] USB: usb-storage: Add new IDs to ums-realtek Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 087/305] jffs2: free jffs2_sb_info through jffs2_kill_sb() Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 283/305] scsi: sd: use mempool for discard special page Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 291/305] KVM: X86: Fix NULL deref in vcpu_scan_ioapic Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 027/305] scsi: qla2xxx: Fix incorrect port speed being set for FC adapters Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 075/305] PCI: Add Device IDs for Intel GPU "spurious interrupt" quirk Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 084/305] Btrfs: don't clean dirty pages during buffered writes Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 110/305] of: add helper to lookup compatible child node Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 149/305] ext4: avoid buffer leak in ext4_orphan_add() after prior errors Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 123/305] lockd: fix access beyond unterminated strings in prints Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 115/305] thermal: rcar: Make error and remove paths symmetrical with init Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 158/305] ext4: fix buffer leak in __ext4_read_dirblock() on error path Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 294/305] kvm: x86: Add AMD's EX_CFG to the list of ignored MSRs Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 161/305] mount: Prevent MNT_DETACH from disconnecting locked mounts Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 184/305] drivers/misc/sgi-gru: fix Spectre v1 vulnerability Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 253/305] ALSA: usb-audio: Avoid nested autoresume calls Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 242/305] kvm: svm: Ensure an IBPB on all affected CPUs when freeing a vmcb Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 251/305] SUNRPC: Fix leak of krb5p encode pages Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 010/305] ipv6: Fix another sparse warning on rt6i_node Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 152/305] usb: quirks: Add delay-init quirk for Corsair K70 LUX RGB Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 051/305] pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 023/305] ARM: dts: exynos: Disable pull control for MAX8997 interrupts on Origen Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 112/305] smb3: allow stats which track session and share reconnects to be reset Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 248/305] dmaengine: at_hdmac: fix module unloading Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 143/305] xtensa: make sure bFLT stack is 16 byte aligned Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 185/305] misc: atmel-ssc: Fix section annotation on atmel_ssc_get_driver_data Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 211/305] exportfs: fix 'passing zero to ERR_PTR()' warning Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 097/305] Btrfs: fix null pointer dereference on compressed write path error Ben Hutchings
2019-02-03 13:45 ` [PATCH 3.16 228/305] ALSA: wss: Fix invalid snd_free_pages() at error path Ben Hutchings
2019-02-04 21:38 ` [PATCH 3.16 000/305] 3.16.63-rc1 review Guenter Roeck
2019-02-04 23:51   ` Ben Hutchings

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=lsq.1549201508.709911064@decadent.org.uk \
    --to=ben@decadent.org.uk \
    --cc=akpm@linux-foundation.org \
    --cc=davem@davemloft.net \
    --cc=edumazet@google.com \
    --cc=kda@linux-powerpc.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=stable@vger.kernel.org \
    --cc=steffen.klassert@secunet.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).