From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org,
Himanshu Madhani <himanshu.madhani@cavium.com>,
Johannes Thumshirn <jthumshirn@suse.de>,
"Martin K. Petersen" <martin.petersen@oracle.com>
Subject: [PATCH 4.15 018/146] scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
Date: Tue, 13 Mar 2018 16:23:05 +0100 [thread overview]
Message-ID: <20180313152321.924894612@linuxfoundation.org> (raw)
In-Reply-To: <20180313152320.439085687@linuxfoundation.org>
4.15-stable review patch. If anyone has any objections, please let me know.
------------------
From: himanshu.madhani@cavium.com <himanshu.madhani@cavium.com>
commit 1514839b366417934e2f1328edb50ed1e8a719f5 upstream.
This patch fixes NULL pointer crash due to active timer running for abort
IOCB.
>From crash dump analysis it was discoverd that get_next_timer_interrupt()
encountered a corrupted entry on the timer list.
#9 [ffff95e1f6f0fd40] page_fault at ffffffff914fe8f8
[exception RIP: get_next_timer_interrupt+440]
RIP: ffffffff90ea3088 RSP: ffff95e1f6f0fdf0 RFLAGS: 00010013
RAX: ffff95e1f6451028 RBX: 000218e2389e5f40 RCX: 00000001232ad600
RDX: 0000000000000001 RSI: ffff95e1f6f0fdf0 RDI: 0000000001232ad6
RBP: ffff95e1f6f0fe40 R8: ffff95e1f6451188 R9: 0000000000000001
R10: 0000000000000016 R11: 0000000000000016 R12: 00000001232ad5f6
R13: ffff95e1f6450000 R14: ffff95e1f6f0fdf8 R15: ffff95e1f6f0fe10
ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018
Looking at the assembly of get_next_timer_interrupt(), address came
from %r8 (ffff95e1f6451188) which is pointing to list_head with single
entry at ffff95e5ff621178.
0xffffffff90ea307a <get_next_timer_interrupt+426>: mov (%r8),%rdx
0xffffffff90ea307d <get_next_timer_interrupt+429>: cmp %r8,%rdx
0xffffffff90ea3080 <get_next_timer_interrupt+432>: je 0xffffffff90ea30a7 <get_next_timer_interrupt+471>
0xffffffff90ea3082 <get_next_timer_interrupt+434>: nopw 0x0(%rax,%rax,1)
0xffffffff90ea3088 <get_next_timer_interrupt+440>: testb $0x1,0x18(%rdx)
crash> rd ffff95e1f6451188 10
ffff95e1f6451188: ffff95e5ff621178 ffff95e5ff621178 x.b.....x.b.....
ffff95e1f6451198: ffff95e1f6451198 ffff95e1f6451198 ..E.......E.....
ffff95e1f64511a8: ffff95e1f64511a8 ffff95e1f64511a8 ..E.......E.....
ffff95e1f64511b8: ffff95e77cf509a0 ffff95e77cf509a0 ...|.......|....
ffff95e1f64511c8: ffff95e1f64511c8 ffff95e1f64511c8 ..E.......E.....
crash> rd ffff95e5ff621178 10
ffff95e5ff621178: 0000000000000001 ffff95e15936aa00 ..........6Y....
ffff95e5ff621188: 0000000000000000 00000000ffffffff ................
ffff95e5ff621198: 00000000000000a0 0000000000000010 ................
ffff95e5ff6211a8: ffff95e5ff621198 000000000000000c ..b.............
ffff95e5ff6211b8: 00000f5800000000 ffff95e751f8d720 ....X... ..Q....
ffff95e5ff621178 belongs to freed mempool object at ffff95e5ff621080.
CACHE NAME OBJSIZE ALLOCATED TOTAL SLABS SSIZE
ffff95dc7fd74d00 mnt_cache 384 19785 24948 594 16k
SLAB MEMORY NODE TOTAL ALLOCATED FREE
ffffdc5dabfd8800 ffff95e5ff620000 1 42 29 13
FREE / [ALLOCATED]
ffff95e5ff621080 (cpu 6 cache)
Examining the contents of that memory reveals a pointer to a constant string
in the driver, "abort\0", which is set by qla24xx_async_abort_cmd().
crash> rd ffffffffc059277c 20
ffffffffc059277c: 6e490074726f6261 0074707572726574 abort.Interrupt.
ffffffffc059278c: 00676e696c6c6f50 6920726576697244 Polling.Driver i
ffffffffc059279c: 646f6d207325206e 6974736554000a65 n %s mode..Testi
ffffffffc05927ac: 636976656420676e 786c252074612065 ng device at %lx
ffffffffc05927bc: 6b63656843000a2e 646f727020676e69 ...Checking prod
ffffffffc05927cc: 6f20444920746375 0a2e706968632066 uct ID of chip..
ffffffffc05927dc: 5120646e756f4600 204130303232414c .Found QLA2200A
ffffffffc05927ec: 43000a2e70696843 20676e696b636568 Chip...Checking
ffffffffc05927fc: 65786f626c69616d 6c636e69000a2e73 mailboxes...incl
ffffffffc059280c: 756e696c2f656475 616d2d616d642f78 ude/linux/dma-ma
crash> struct -ox srb_iocb
struct srb_iocb {
union {
struct {...} logio;
struct {...} els_logo;
struct {...} tmf;
struct {...} fxiocb;
struct {...} abt;
struct ct_arg ctarg;
struct {...} mbx;
struct {...} nack;
[0x0 ] } u;
[0xb8] struct timer_list timer;
[0x108] void (*timeout)(void *);
}
SIZE: 0x110
crash> ! bc
ibase=16
obase=10
B8+40
F8
The object is a srb_t, and at offset 0xf8 within that structure
(i.e. ffff95e5ff621080 + f8 -> ffff95e5ff621178) is a struct timer_list.
Cc: <stable@vger.kernel.org> #4.4+
Fixes: 4440e46d5db7 ("[SCSI] qla2xxx: Add IOCB Abort command asynchronous handling.")
Signed-off-by: Himanshu Madhani <himanshu.madhani@cavium.com>
Reviewed-by: Johannes Thumshirn <jthumshirn@suse.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
drivers/scsi/qla2xxx/qla_init.c | 1 +
1 file changed, 1 insertion(+)
--- a/drivers/scsi/qla2xxx/qla_init.c
+++ b/drivers/scsi/qla2xxx/qla_init.c
@@ -1347,6 +1347,7 @@ qla24xx_abort_sp_done(void *ptr, int res
srb_t *sp = ptr;
struct srb_iocb *abt = &sp->u.iocb_cmd;
+ del_timer(&sp->u.iocb_cmd.timer);
complete(&abt->u.abt.comp);
}
WARNING: multiple messages have this Message-ID (diff)
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org,
Himanshu Madhani <himanshu.madhani@cavium.com>,
Johannes Thumshirn <jthumshirn@suse.de>,
"Martin K. Petersen" <martin.petersen@oracle.com>
Subject: [PATCH 4.15 018/146] scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS
Date: Tue, 13 Mar 2018 16:23:05 +0100 [thread overview]
Message-ID: <20180313152321.924894612@linuxfoundation.org> (raw)
In-Reply-To: <20180313152320.439085687@linuxfoundation.org>
4.15-stable review patch. If anyone has any objections, please let me know.
------------------
From: himanshu.madhani@cavium.com <himanshu.madhani@cavium.com>
commit 1514839b366417934e2f1328edb50ed1e8a719f5 upstream.
This patch fixes NULL pointer crash due to active timer running for abort
IOCB.
>>From crash dump analysis it was discoverd that get_next_timer_interrupt()
encountered a corrupted entry on the timer list.
#9 [ffff95e1f6f0fd40] page_fault at ffffffff914fe8f8
[exception RIP: get_next_timer_interrupt+440]
RIP: ffffffff90ea3088 RSP: ffff95e1f6f0fdf0 RFLAGS: 00010013
RAX: ffff95e1f6451028 RBX: 000218e2389e5f40 RCX: 00000001232ad600
RDX: 0000000000000001 RSI: ffff95e1f6f0fdf0 RDI: 0000000001232ad6
RBP: ffff95e1f6f0fe40 R8: ffff95e1f6451188 R9: 0000000000000001
R10: 0000000000000016 R11: 0000000000000016 R12: 00000001232ad5f6
R13: ffff95e1f6450000 R14: ffff95e1f6f0fdf8 R15: ffff95e1f6f0fe10
ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018
Looking at the assembly of get_next_timer_interrupt(), address came
from %r8 (ffff95e1f6451188) which is pointing to list_head with single
entry at ffff95e5ff621178.
0xffffffff90ea307a <get_next_timer_interrupt+426>: mov (%r8),%rdx
0xffffffff90ea307d <get_next_timer_interrupt+429>: cmp %r8,%rdx
0xffffffff90ea3080 <get_next_timer_interrupt+432>: je 0xffffffff90ea30a7 <get_next_timer_interrupt+471>
0xffffffff90ea3082 <get_next_timer_interrupt+434>: nopw 0x0(%rax,%rax,1)
0xffffffff90ea3088 <get_next_timer_interrupt+440>: testb $0x1,0x18(%rdx)
crash> rd ffff95e1f6451188 10
ffff95e1f6451188: ffff95e5ff621178 ffff95e5ff621178 x.b.....x.b.....
ffff95e1f6451198: ffff95e1f6451198 ffff95e1f6451198 ..E.......E.....
ffff95e1f64511a8: ffff95e1f64511a8 ffff95e1f64511a8 ..E.......E.....
ffff95e1f64511b8: ffff95e77cf509a0 ffff95e77cf509a0 ...|.......|....
ffff95e1f64511c8: ffff95e1f64511c8 ffff95e1f64511c8 ..E.......E.....
crash> rd ffff95e5ff621178 10
ffff95e5ff621178: 0000000000000001 ffff95e15936aa00 ..........6Y....
ffff95e5ff621188: 0000000000000000 00000000ffffffff ................
ffff95e5ff621198: 00000000000000a0 0000000000000010 ................
ffff95e5ff6211a8: ffff95e5ff621198 000000000000000c ..b.............
ffff95e5ff6211b8: 00000f5800000000 ffff95e751f8d720 ....X... ..Q....
ffff95e5ff621178 belongs to freed mempool object at ffff95e5ff621080.
CACHE NAME OBJSIZE ALLOCATED TOTAL SLABS SSIZE
ffff95dc7fd74d00 mnt_cache 384 19785 24948 594 16k
SLAB MEMORY NODE TOTAL ALLOCATED FREE
ffffdc5dabfd8800 ffff95e5ff620000 1 42 29 13
FREE / [ALLOCATED]
ffff95e5ff621080 (cpu 6 cache)
Examining the contents of that memory reveals a pointer to a constant string
in the driver, "abort\0", which is set by qla24xx_async_abort_cmd().
crash> rd ffffffffc059277c 20
ffffffffc059277c: 6e490074726f6261 0074707572726574 abort.Interrupt.
ffffffffc059278c: 00676e696c6c6f50 6920726576697244 Polling.Driver i
ffffffffc059279c: 646f6d207325206e 6974736554000a65 n %s mode..Testi
ffffffffc05927ac: 636976656420676e 786c252074612065 ng device at %lx
ffffffffc05927bc: 6b63656843000a2e 646f727020676e69 ...Checking prod
ffffffffc05927cc: 6f20444920746375 0a2e706968632066 uct ID of chip..
ffffffffc05927dc: 5120646e756f4600 204130303232414c .Found QLA2200A
ffffffffc05927ec: 43000a2e70696843 20676e696b636568 Chip...Checking
ffffffffc05927fc: 65786f626c69616d 6c636e69000a2e73 mailboxes...incl
ffffffffc059280c: 756e696c2f656475 616d2d616d642f78 ude/linux/dma-ma
crash> struct -ox srb_iocb
struct srb_iocb {
union {
struct {...} logio;
struct {...} els_logo;
struct {...} tmf;
struct {...} fxiocb;
struct {...} abt;
struct ct_arg ctarg;
struct {...} mbx;
struct {...} nack;
[0x0 ] } u;
[0xb8] struct timer_list timer;
[0x108] void (*timeout)(void *);
}
SIZE: 0x110
crash> ! bc
ibase=16
obase=10
B8+40
F8
The object is a srb_t, and at offset 0xf8 within that structure
(i.e. ffff95e5ff621080 + f8 -> ffff95e5ff621178) is a struct timer_list.
Cc: <stable@vger.kernel.org> #4.4+
Fixes: 4440e46d5db7 ("[SCSI] qla2xxx: Add IOCB Abort command asynchronous handling.")
Signed-off-by: Himanshu Madhani <himanshu.madhani@cavium.com>
Reviewed-by: Johannes Thumshirn <jthumshirn@suse.de>
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
drivers/scsi/qla2xxx/qla_init.c | 1 +
1 file changed, 1 insertion(+)
--- a/drivers/scsi/qla2xxx/qla_init.c
+++ b/drivers/scsi/qla2xxx/qla_init.c
@@ -1347,6 +1347,7 @@ qla24xx_abort_sp_done(void *ptr, int res
srb_t *sp = ptr;
struct srb_iocb *abt = &sp->u.iocb_cmd;
+ del_timer(&sp->u.iocb_cmd.timer);
complete(&abt->u.abt.comp);
}
next prev parent reply other threads:[~2018-03-13 15:23 UTC|newest]
Thread overview: 167+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-03-13 15:22 [PATCH 4.15 000/146] 4.15.10-stable review Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 001/146] RDMA/ucma: Limit possible option size Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 002/146] RDMA/ucma: Check that user doesnt overflow QP state Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 003/146] RDMA/mlx5: Fix integer overflow while resizing CQ Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 004/146] bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc() Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 005/146] IB/uverbs: Improve lockdep_check Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 006/146] mac80211_hwsim: dont use WQ_MEM_RECLAIM Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 007/146] net/smc: fix NULL pointer dereference on sock_create_kern() error path Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 008/146] regulator: stm32-vrefbuf: fix check on ready flag Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 009/146] drm/i915: Check for fused or unused pipes Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 010/146] drm/i915/audio: fix check for av_enc_map overflow Greg Kroah-Hartman
2018-03-13 15:22 ` Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 011/146] drm/i915: Fix rsvd2 mask when out-fence is returned Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 012/146] drm/i915: Clear the in-use marker on execbuf failure Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 013/146] drm/i915: Disable DC states around GMBUS on GLK Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 014/146] drm/i915: Update watermark state correctly in sanitize_watermarks Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 015/146] drm/i915: Try EDID bitbanging on HDMI after failed read Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 016/146] drm/i915/perf: fix perf stream opening lock Greg Kroah-Hartman
2018-03-13 15:23 ` Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 017/146] scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops Greg Kroah-Hartman
2018-03-13 15:23 ` Greg Kroah-Hartman [this message]
2018-03-13 15:23 ` [PATCH 4.15 018/146] scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 019/146] drm/i915: Always call to intel_display_set_init_power() in resume_early Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 020/146] workqueue: Allow retrieval of current tasks work struct Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 021/146] drm: Allow determining if current task is output poll worker Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 022/146] drm/nouveau: Fix deadlock on runtime suspend Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 023/146] drm/radeon: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 024/146] drm/amdgpu: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 025/146] drm/nouveau: prefer XBGR2101010 for addfb ioctl Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 026/146] drm/amd/powerplay/smu7: allow mclk switching with no displays Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 027/146] drm/amd/powerplay/vega10: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 028/146] Revert "drm/radeon/pm: autoswitch power state when in balanced mode" Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 029/146] drm/amd/display: check for ipp before calling cursor operations Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 030/146] drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 031/146] drm/amd/powerplay: fix power over limit on Fiji Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 032/146] drm/amd/display: Default HDMI6G support to true. Log VBIOS table error Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 033/146] drm/amdgpu: used cached pcie gen info for SI (v2) Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 034/146] drm/amdgpu: Notify sbios device ready before send request Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 035/146] drm/radeon: fix KV harvesting Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 036/146] drm/amdgpu: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 037/146] drm/amdgpu:Correct max uvd handles Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 038/146] drm/amdgpu:Always save uvd vcpu_bo in VM Mode Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 039/146] ovl: redirect_dir=nofollow should not follow redirect for opaque lower Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 040/146] MIPS: BMIPS: Do not mask IPIs during suspend Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 041/146] MIPS: ath25: Check for kzalloc allocation failure Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 042/146] MIPS: OCTEON: irq: Check for null return on kzalloc allocation Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 043/146] PCI: dwc: Fix enumeration end when reaching root subordinate Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 044/146] Input: matrix_keypad - fix race when disabling interrupts Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 045/146] Revert "Input: synaptics - Lenovo Thinkpad T460p devices should use RMI" Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 046/146] bug: use %pB in BUG and stack protector failure Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 047/146] lib/bug.c: exclude non-BUG/WARN exceptions from report_bug() Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 048/146] mm/memblock.c: hardcode the end_pfn being -1 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 049/146] mm/page_alloc: fix memmap_init_zone pageblock alignment Greg Kroah-Hartman
2018-03-13 15:23 ` Greg Kroah-Hartman
2018-03-13 19:34 ` Dan Rue
2018-03-13 21:47 ` Daniel Vacek
2018-03-14 10:54 ` Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 050/146] Documentation/sphinx: Fix Directive import error Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 051/146] loop: Fix lost writes caused by missing flag Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 052/146] virtio_ring: fix num_free handling in error case Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 053/146] KVM: s390: fix memory overwrites when not using SCA entries Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 054/146] arm64: mm: fix thinko in non-global page table attribute check Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 055/146] IB/core: Fix missing RDMA cgroups release in case of failure to register device Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 056/146] Revert "nvme: create slaves and holders entries for hidden controllers" Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 057/146] kbuild: Handle builtin dtb file names containing hyphens Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 058/146] dm bufio: avoid false-positive Wmaybe-uninitialized warning Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 059/146] IB/mlx5: Fix incorrect size of klms in the memory region Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 060/146] bcache: fix crashes in duplicate cache device register Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 061/146] bcache: dont attach backing with duplicate UUID Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 062/146] x86/MCE: Save microcode revision in machine check records Greg Kroah-Hartman
2018-03-13 15:23 ` [4.15,062/146] " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 063/146] x86/MCE: Serialize sysfs changes Greg Kroah-Hartman
2018-03-13 15:23 ` [4.15,063/146] " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 064/146] perf tools: Fix trigger class trigger_on() Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 065/146] x86/spectre_v2: Dont check microcode versions when running under hypervisors Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 066/146] ALSA: hda/realtek - Add support headset mode for DELL WYSE Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 067/146] ALSA: hda/realtek - Add headset mode support for Dell laptop Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 068/146] ALSA: hda/realtek: Limit mic boost on T480 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 069/146] ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 070/146] ALSA: hda/realtek - Make dock sound work on ThinkPad L570 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 071/146] ALSA: seq: Dont allow resizing pool in use Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 072/146] ALSA: seq: More protection for concurrent write and ioctl races Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 073/146] ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 074/146] ALSA: hda: add dock and led support for HP EliteBook 820 G3 Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 075/146] ALSA: hda: add dock and led support for HP ProBook 640 G2 Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 076/146] scsi: qla2xxx: Fix NULL pointer crash due to probe failure Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 077/146] scsi: qla2xxx: Fix recursion while sending terminate exchange Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 078/146] dt-bindings: Document mti,mips-cpc binding Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 079/146] MIPS: CPC: Map registers using DT in mips_cpc_default_phys_base() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 080/146] nospec: Kill array_index_nospec_mask_check() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 081/146] nospec: Include <asm/barrier.h> dependency Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 082/146] x86/entry: Reduce the code footprint of the idtentry macro Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 083/146] x86/entry/64: Use xorl for faster register clearing Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 084/146] x86/mm: Remove stale comment about KMEMCHECK Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 085/146] x86/asm: Improve how GEN_*_SUFFIXED_RMWcc() specify clobbers Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 086/146] x86/IO-APIC: Avoid warning in 32-bit builds Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 087/146] x86/LDT: Avoid warning in 32-bit builds with older gcc Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 088/146] x86-64/realmode: Add instruction suffix Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 089/146] Revert "x86/retpoline: Simplify vmexit_fill_RSB()" Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 090/146] x86/speculation: Use IBRS if available before calling into firmware Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 091/146] x86/retpoline: Support retpoline builds with Clang Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 092/146] x86/speculation, objtool: Annotate indirect calls/jumps for objtool Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 093/146] x86/speculation: Move firmware_restrict_branch_speculation_*() from C to CPP Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 094/146] x86/paravirt, objtool: Annotate indirect calls Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 095/146] x86/boot, objtool: Annotate indirect jump in secondary_startup_64() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 096/146] x86/mm/sme, objtool: Annotate indirect call in sme_encrypt_execute() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 097/146] objtool: Use existing global variables for options Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 098/146] objtool: Add retpoline validation Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 099/146] objtool: Add module specific retpoline rules Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 100/146] objtool, retpolines: Integrate objtool with retpoline support more closely Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 101/146] objtool: Fix another switch table detection issue Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 102/146] objtool: Fix 32-bit build Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 103/146] x86/kprobes: Fix kernel crash when probing .entry_trampoline code Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 104/146] watchdog: hpwdt: SMBIOS check Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 105/146] watchdog: hpwdt: Check source of NMI Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 106/146] watchdog: hpwdt: fix unused variable warning Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 107/146] watchdog: hpwdt: Remove legacy NMI sourcing Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 108/146] netfilter: add back stackpointer size checks Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 109/146] netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 110/146] netfilter: xt_hashlimit: fix lock imbalance Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 111/146] netfilter: x_tables: fix missing timer initialization in xt_LED Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 112/146] netfilter: nat: cope with negative port range Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 113/146] netfilter: IDLETIMER: be syzkaller friendly Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 114/146] netfilter: ebtables: CONFIG_COMPAT: dont trust userland offsets Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 115/146] netfilter: bridge: ebt_among: add missing match size checks Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 116/146] netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 117/146] netfilter: use skb_to_full_sk in ip6_route_me_harder Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 118/146] tpm_tis: Move ilb_base_addr to tpm_tis_data Greg Kroah-Hartman
2018-03-14 0:42 ` Shaikh, Azhar
2018-03-13 15:24 ` [PATCH 4.15 119/146] tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd() Greg Kroah-Hartman
2018-03-14 0:42 ` Shaikh, Azhar
2018-03-13 15:24 ` [PATCH 4.15 120/146] tpm: delete the TPM_TIS_CLK_ENABLE flag Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 121/146] tpm: remove unused variables Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 122/146] tpm: only attempt to disable the LPC CLKRUN if is already enabled Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 123/146] x86/xen: Calculate __max_logical_packages on PV domains Greg Kroah-Hartman
2018-03-13 15:24 ` Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 124/146] scsi: qla2xxx: Fix system crash for Notify ack timeout handling Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 125/146] scsi: qla2xxx: Fix gpnid error processing Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 126/146] scsi: qla2xxx: Move session delete to driver work queue Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 127/146] scsi: qla2xxx: Skip IRQ affinity for Target QPairs Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 128/146] scsi: qla2xxx: Fix re-login for Nport Handle in use Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 129/146] scsi: qla2xxx: Retry switch command on time out Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 130/146] scsi: qla2xxx: Serialize GPNID for multiple RSCN Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 131/146] scsi: qla2xxx: Fix login state machine stuck at GPDB Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 132/146] scsi: qla2xxx: Fix NPIV host cleanup in target mode Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 133/146] scsi: qla2xxx: Relogin to target port on a cable swap Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 134/146] scsi: qla2xxx: Fix Relogin being triggered too fast Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 135/146] scsi: qla2xxx: Fix PRLI state check Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 136/146] scsi: qla2xxx: Fix abort command deadlock due to spinlock Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 137/146] scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 138/146] scsi: qla2xxx: Fix scan state field for fcport Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 139/146] scsi: qla2xxx: Clear loop id after delete Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 140/146] scsi: qla2xxx: Defer processing of GS IOCB calls Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 141/146] scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 142/146] scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 143/146] scsi: qla2xxx: Fix memory leak in dual/target mode Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 144/146] NFS: Fix an incorrect type in struct nfs_direct_req Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 145/146] pNFS: Prevent the layout header refcount going to zero in pnfs_roc() Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 146/146] NFS: Fix unstable write completion Greg Kroah-Hartman
2018-03-13 20:19 ` [PATCH 4.15 000/146] 4.15.10-stable review kernelci.org bot
2018-03-13 22:28 ` Guenter Roeck
2018-03-14 7:50 ` Greg Kroah-Hartman
2018-03-14 10:20 ` Naresh Kamboju
2018-03-14 10:51 ` Greg Kroah-Hartman
2018-03-14 10:56 ` Greg Kroah-Hartman
2018-03-14 18:53 ` Naresh Kamboju
2018-03-15 10:19 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20180313152321.924894612@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=himanshu.madhani@cavium.com \
--cc=jthumshirn@suse.de \
--cc=linux-kernel@vger.kernel.org \
--cc=martin.petersen@oracle.com \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.