[PATCH 3.12 00/86] 3.12.74-stable review

[Jiri Slaby <jslaby@suse.cz>]

This is the start of the stable review cycle for the 3.12.74 release.
There are 86 patches in this series, all will be posted as a response
to this one.  If anyone has any issues with these being applied, please
let me know.

Responses should be made by Mon May  8 11:03:52 CEST 2017.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
	http://kernel.org/pub/linux/kernel/people/jirislaby/stable-review/patch-3.12.74-rc1.xz
and the diffstat can be found below.

thanks,
js

===============


Al Viro (1):
  p9_client_readdir() fix

Andrey Konovalov (3):
  net/packet: fix overflow in check for priv area size
  net/packet: fix overflow in check for tp_frame_nr
  net/packet: fix overflow in check for tp_reserve

Arnd Bergmann (5):
  dvb-usb-v2: avoid use-after-free
  ACPI / power: Avoid maybe-uninitialized warning
  tty: nozomi: avoid a harmless gcc warning
  hostap: avoid uninitialized variable use in hfa384x_get_rid
  gfs2: avoid uninitialized variable warning

Ben Hutchings (4):
  pegasus: Use heap buffers for all register access
  rtl8150: Use heap buffers for all register access
  catc: Combine failure cleanup code in catc_probe()
  catc: Use heap buffer for memory size test

Benjamin Herrenschmidt (1):
  powerpc: Disable HFSCR[TM] if TM is not supported

Cameron Gutman (1):
  Input: xpad - add support for Razer Wildcat gamepad

Chris Salls (1):
  mm/mempolicy.c: fix error handling in set_mempolicy and mbind.

Chun-Yi Lee (1):
  platform/x86: acer-wmi: setup accelerometer when machine has
    appropriate notify event

Corey Minyard (1):
  MIPS: Fix crash registers on non-crashing CPUs

Daeho Jeong (1):
  ext4: fix inode checksum calculation problem if i_extra_size is small

Dan Williams (1):
  block: fix del_gendisk() vs blkdev_ioctl crash

David Howells (2):
  KEYS: Disallow keyrings beginning with '.' to be joined as session
    keyrings
  KEYS: Change the name of the dead type to ".dead" to prevent user
    access

Dmitry Torokhov (1):
  Input: i8042 - add Clevo P650RS to the i8042 reset list

Eric Biggers (1):
  KEYS: fix keyctl_set_reqkey_keyring() to not leak thread keyrings

Eric Dumazet (2):
  ping: implement proper locking
  net: neigh: guard against NULL solicit() method

Eugenia Emantayev (1):
  net/mlx4_en: Fix bad WQE issue

Florian Larysch (1):
  net: ipv4: fix multipath RTM_GETROUTE behavior when iif is given

Geert Uytterhoeven (1):
  char: Drop bogus dependency of DEVPORT on !M68K

Germano Percossi (1):
  CIFS: remove bad_network_name flag

Guenter Roeck (1):
  usb: hub: Wait for connection to be reestablished after port reset

Guillaume Nault (1):
  l2tp: take reference on sessions being dumped

Hongxu Jia (1):
  netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT"
    failed in 64bit kernel

J. Bruce Fields (1):
  nfsd: check for oversized NFSv2/v3 arguments

Jack Morgenstein (1):
  net/mlx4_core: Fix racy CQ (Completion Queue) free

James Hogan (8):
  metag/usercopy: Drop unused macros
  metag/usercopy: Fix alignment error checking
  metag/usercopy: Add early abort to copy_to_user
  metag/usercopy: Zero rest of buffer from copy_from_user
  metag/usercopy: Set flags before ADDZ
  metag/usercopy: Fix src fixup in from user rapf loops
  metag/usercopy: Add missing fixups
  MIPS: KGDB: Use kernel context for sleeping threads

Jamie Bainbridge (1):
  ipv6: check raw payload size correctly in ioctl

Jan-Marek Glogowski (1):
  Reset TreeId to zero on SMB2 TREE_CONNECT

Janusz Dziedzic (1):
  usb: dwc3: gadget: delay unmap of bounced requests

Josh Poimboeuf (1):
  ftrace/x86: Fix triple fault with graph tracing and suspend-to-ram

Juergen Gross (1):
  xen, fbfront: fix connecting to backend

Kees Cook (1):
  mm: Tighten x86 /dev/mem with zeroing reads

Li Qiang (1):
  drm/vmwgfx: fix integer overflow in vmw_surface_define_ioctl()

Mantas M (1):
  net: ipv6: check route protocol when deleting routes

Marcelo Henrique Cerri (1):
  s390/decompressor: fix initrd corruption caused by bss clear

Martin K. Petersen (2):
  scsi: sr: Sanity check returned mode data
  scsi: sd: Fix capacity calculation with 32-bit sector_t

Max Bires (1):
  char: lack of bool string made CONFIG_DEVPORT always on

Michael Ellerman (1):
  powerpc: Reject binutils 2.24 when building little endian

Minchan Kim (1):
  zram: do not use copy_page with non-page aligned address

Murray McAllister (2):
  drm/vmwgfx: NULL pointer dereference in vmw_surface_define_ioctl()
  drm/vmwgfx: avoid calling vzalloc with a 0 size in
    vmw_get_cap_3d_ioctl()

Nathan Sullivan (1):
  net: phy: handle state correctly in phy_stop_machine

Nicholas Bellinger (2):
  iscsi-target: Fix TMR reference leak during session shutdown
  iscsi-target: Drop work-around for legacy GlobalSAN initiator

Nikolay Aleksandrov (1):
  ip6mr: fix notification device destruction

Omar Sandoval (1):
  virtio-console: avoid DMA from stack

Paul Mackerras (1):
  powerpc: Don't try to fix up misaligned load-with-reservation
    instructions

Peter Zijlstra (1):
  perf/x86: Avoid exposing wrong/stale data in intel_pmu_lbr_read_32()

Rafał Miłecki (1):
  mtd: bcm47xxpart: fix parsing first block after aligned TRX

Sachin Prabhu (1):
  cifs: Do not send echoes before Negotiate is complete

Sebastian Siewior (1):
  ubi/upd: Always flush after prepared for an update

Stefano Stabellini (1):
  xen/x86: don't lose event interrupts

Steven Rostedt (VMware) (2):
  tracing: Allocate the snapshot buffer before enabling probe
  ring-buffer: Have ring_buffer_iter_empty() return true when empty

Suzuki K Poulose (1):
  kvm: arm/arm64: Fix locking for kvm_free_stage2_pgd

Takashi Iwai (1):
  ALSA: seq: Don't break snd_use_lock_sync() loop by timeout

Theodore Ts'o (1):
  ext4: check if in-inode xattr is corrupted in
    ext4_expand_extra_isize_ea()

Thomas Gleixner (1):
  x86/vdso: Plug race between mapping and ELF header setup

Thomas Hellstrom (1):
  drm/vmwgfx: Remove getparam error message

Thorsten Leemhuis (1):
  Input: elantech - add Fujitsu Lifebook E547 to force crc_enabled

Vitaly Kuznetsov (2):
  Drivers: hv: don't leak memory in vmbus_establish_gpadl()
  Drivers: hv: get rid of timeout in vmbus_open()

Wei Fang (1):
  md:raid1: fix a dead loop when read from a WriteMostly disk

Wei Yongjun (1):
  ring-buffer: Fix return value check in test_ringbuffer()

Xin Long (1):
  sctp: listen on the sock only when it's state is listening or closed

Yazen Ghannam (1):
  x86/mce/AMD: Give a name to MCA bank 3 when accessed with legacy MSRs

bsegall@google.com (1):
  ptrace: fix PTRACE_LISTEN race corrupting task->state

santosh.shilimkar@oracle.com (1):
  RDS: Fix the atomicity for congestion map update

 arch/arm/kvm/mmu.c                             |  12 +
 arch/metag/include/asm/uaccess.h               |  15 +-
 arch/metag/lib/usercopy.c                      | 312 ++++++++++---------------
 arch/mips/kernel/crash.c                       |  16 +-
 arch/mips/kernel/kgdb.c                        |  48 ++--
 arch/powerpc/Makefile                          |   8 +
 arch/powerpc/kernel/align.c                    |  28 ++-
 arch/powerpc/kernel/setup_64.c                 |   9 +
 arch/s390/boot/compressed/misc.c               |  35 +--
 arch/x86/include/asm/elf.h                     |   2 +-
 arch/x86/kernel/cpu/mcheck/mce_amd.c           |   2 +-
 arch/x86/kernel/cpu/perf_event_intel_lbr.c     |   2 +
 arch/x86/kernel/ftrace.c                       |  12 +
 arch/x86/mm/init.c                             |  41 +++-
 arch/x86/xen/time.c                            |   6 +-
 block/genhd.c                                  |   1 -
 drivers/acpi/power.c                           |   1 +
 drivers/char/Kconfig                           |   6 +-
 drivers/char/mem.c                             |  82 ++++---
 drivers/char/virtio_console.c                  |  12 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_ioctl.c          |   4 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_surface.c        |   9 +-
 drivers/hv/channel.c                           |  17 +-
 drivers/input/joystick/xpad.c                  |   2 +
 drivers/input/mouse/elantech.c                 |   8 +
 drivers/input/serio/i8042-x86ia64io.h          |   7 +
 drivers/md/raid1.c                             |   2 +-
 drivers/media/usb/dvb-usb-v2/dvb_usb_core.c    |   9 +-
 drivers/mtd/bcm47xxpart.c                      |  10 +-
 drivers/mtd/ubi/upd.c                          |   8 +-
 drivers/net/ethernet/mellanox/mlx4/cq.c        |  38 +--
 drivers/net/ethernet/mellanox/mlx4/en_rx.c     |   8 +-
 drivers/net/phy/phy.c                          |   2 +-
 drivers/net/usb/catc.c                         |  56 +++--
 drivers/net/usb/pegasus.c                      |  29 ++-
 drivers/net/usb/rtl8150.c                      |  34 ++-
 drivers/net/wireless/hostap/hostap_hw.c        |  15 +-
 drivers/platform/x86/acer-wmi.c                |  22 +-
 drivers/scsi/sd.c                              |  20 +-
 drivers/scsi/sr.c                              |   6 +-
 drivers/staging/zram/zram_drv.c                |   6 +-
 drivers/target/iscsi/iscsi_target_parameters.c |  16 --
 drivers/target/iscsi/iscsi_target_util.c       |  12 +-
 drivers/tty/nozomi.c                           |   2 +-
 drivers/usb/core/hub.c                         |  11 +-
 drivers/usb/dwc3/gadget.c                      |  21 +-
 drivers/video/xen-fbfront.c                    |   4 +-
 fs/cifs/cifsglob.h                             |   1 -
 fs/cifs/smb1ops.c                              |  10 +
 fs/cifs/smb2pdu.c                              |   9 +-
 fs/ext4/inode.c                                |   5 +-
 fs/ext4/xattr.c                                |  32 ++-
 fs/gfs2/dir.c                                  |   4 +-
 fs/nfsd/nfssvc.c                               |  36 +++
 kernel/ptrace.c                                |  14 +-
 kernel/trace/ring_buffer.c                     |  24 +-
 kernel/trace/trace.c                           |   8 +-
 mm/mempolicy.c                                 |  20 +-
 net/9p/client.c                                |   4 +
 net/core/neighbour.c                           |   3 +-
 net/ipv4/netfilter/arp_tables.c                |   4 +-
 net/ipv4/ping.c                                |   5 +-
 net/ipv4/route.c                               |   2 +-
 net/ipv6/ip6mr.c                               |  13 +-
 net/ipv6/raw.c                                 |   3 +-
 net/ipv6/route.c                               |   2 +
 net/l2tp/l2tp_core.c                           |   8 +-
 net/l2tp/l2tp_core.h                           |   3 +-
 net/l2tp/l2tp_debugfs.c                        |  10 +-
 net/l2tp/l2tp_netlink.c                        |   7 +-
 net/l2tp/l2tp_ppp.c                            |  10 +-
 net/packet/af_packet.c                         |   8 +-
 net/rds/cong.c                                 |   4 +-
 net/sctp/socket.c                              |   3 +
 security/keys/gc.c                             |   2 +-
 security/keys/keyctl.c                         |  20 +-
 security/keys/process_keys.c                   |  44 ++--
 sound/core/seq/seq_lock.c                      |   9 +-
 78 files changed, 833 insertions(+), 522 deletions(-)

-- 
2.12.2