I'm announcing the release of the 3.16.70 kernel. All users of the 3.16 kernel series should upgrade. The updated 3.16.y git tree can be found at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable.git linux-3.16.y and can be browsed at the normal kernel.org git web browser: https://git.kernel.org/?p=linux/kernel/git/stable/linux-stable.git The diff from 3.16.69 is attached to this message. Ben. ------------ Makefile | 2 +- arch/arm/mach-imx/clk-imx6q.c | 1 + arch/arm/mach-imx/clk-imx6sx.c | 1 + arch/arm/mach-imx/clk-vf610.c | 1 + arch/arm/mach-s3c24xx/mach-osiris-dvs.c | 8 +- arch/arm64/crypto/aes-ce-ccm-core.S | 5 +- arch/m68k/Makefile | 5 +- arch/powerpc/kernel/entry_32.S | 9 + arch/powerpc/kernel/irq.c | 5 - arch/powerpc/mm/slice.c | 10 +- arch/powerpc/platforms/83xx/suspend-asm.S | 34 +- arch/powerpc/platforms/embedded6xx/wii.c | 4 + arch/powerpc/platforms/powernv/opal-msglog.c | 2 +- arch/x86/kvm/x86.h | 7 +- crypto/ahash.c | 42 ++- crypto/pcbc.c | 14 +- crypto/shash.c | 18 +- crypto/testmgr.c | 14 +- crypto/tgr192.c | 6 +- drivers/char/applicom.c | 35 +- drivers/char/hpet.c | 2 +- drivers/char/tpm/tpm_eventlog.c | 10 +- drivers/char/tpm/tpm_i2c_atmel.c | 9 +- drivers/clk/clk-highbank.c | 1 + drivers/clk/mvebu/armada-370.c | 4 +- drivers/clk/mvebu/armada-xp.c | 4 +- drivers/clk/mvebu/dove.c | 4 +- drivers/clk/mvebu/kirkwood.c | 5 +- drivers/clk/samsung/clk-exynos4.c | 1 + drivers/clk/socfpga/clk-pll.c | 1 + drivers/clocksource/exynos_mct.c | 14 +- drivers/cpufreq/pxa2xx-cpufreq.c | 4 +- drivers/firmware/iscsi_ibft.c | 1 + drivers/gpu/drm/drm_context.c | 15 +- drivers/gpu/drm/radeon/evergreen_cs.c | 1 + drivers/infiniband/hw/ocrdma/ocrdma_verbs.c | 2 +- drivers/infiniband/hw/usnic/usnic_ib_verbs.c | 2 +- drivers/irqchip/irq-brcmstb-l2.c | 10 +- drivers/leds/leds-lp55xx-common.c | 4 +- drivers/md/bcache/extents.c | 13 +- drivers/md/bcache/writeback.h | 3 + drivers/md/raid10.c | 3 +- drivers/md/raid5.c | 2 + drivers/media/i2c/ov7670.c | 16 +- drivers/media/platform/s5p-jpeg/jpeg-core.c | 21 +- drivers/media/usb/uvc/uvc_driver.c | 14 +- drivers/media/usb/uvc/uvc_video.c | 8 + drivers/mmc/host/omap.c | 2 +- drivers/mtd/devices/docg3.c | 18 +- drivers/net/ethernet/mellanox/mlx4/cmd.c | 8 + .../net/ethernet/mellanox/mlx4/resource_tracker.c | 6 +- drivers/net/ethernet/renesas/sh_eth.c | 6 +- drivers/net/ppp/pptp.c | 1 + drivers/net/vxlan.c | 10 + drivers/net/wireless/libertas_tf/if_usb.c | 2 - drivers/net/wireless/mwifiex/ie.c | 30 +- drivers/net/wireless/mwifiex/scan.c | 19 ++ drivers/parport/parport_pc.c | 2 +- drivers/pinctrl/sh-pfc/pfc-r8a7778.c | 6 +- drivers/pinctrl/sh-pfc/pfc-r8a7791.c | 2 +- drivers/pinctrl/sh-pfc/pfc-sh73a0.c | 3 +- drivers/regulator/wm831x-dcdc.c | 4 +- drivers/rtc/rtc-88pm80x.c | 21 +- drivers/rtc/rtc-88pm860x.c | 21 +- drivers/rtc/rtc-ds1672.c | 3 +- drivers/rtc/rtc-pm8xxx.c | 6 +- drivers/s390/kvm/virtio_ccw.c | 4 +- drivers/scsi/virtio_scsi.c | 2 - drivers/staging/android/ashmem.c | 42 ++- drivers/staging/android/binder.c | 28 +- drivers/staging/iio/addac/adt7316.c | 55 ++-- drivers/target/iscsi/iscsi_target.c | 4 +- drivers/tty/ipwireless/hardware.c | 2 + drivers/tty/serial/8250/8250_pci.c | 141 +++++++- drivers/tty/serial/of_serial.c | 4 + drivers/usb/class/cdc-wdm.c | 2 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/ftdi_sio.c | 2 + drivers/usb/serial/ftdi_sio_ids.h | 6 + drivers/xen/cpu_hotplug.c | 2 +- drivers/xen/xenbus/xenbus_dev_frontend.c | 2 +- fs/9p/v9fs_vfs.h | 23 +- fs/9p/vfs_file.c | 6 +- fs/9p/vfs_inode.c | 23 +- fs/9p/vfs_inode_dotl.c | 27 +- fs/9p/vfs_super.c | 4 +- fs/btrfs/extent_io.c | 4 +- fs/btrfs/scrub.c | 2 +- fs/cifs/file.c | 12 +- fs/cifs/smb2misc.c | 17 +- fs/cifs/smb2ops.c | 13 +- fs/ext2/super.c | 39 ++- fs/ext4/ext4.h | 3 + fs/ext4/ioctl.c | 84 +++-- fs/ext4/resize.c | 3 +- fs/fuse/file.c | 4 +- fs/jbd2/transaction.c | 17 +- fs/nfs/nfs4proc.c | 15 +- fs/nfs/super.c | 2 +- fs/nfsd/nfs3proc.c | 16 +- fs/nfsd/nfs3xdr.c | 1 + fs/open.c | 18 + fs/pipe.c | 14 + fs/read_write.c | 5 +- fs/splice.c | 4 + include/linux/fs.h | 4 + include/linux/pipe_fs_i.h | 1 + include/linux/swap.h | 1 + include/net/gro_cells.h | 12 +- include/net/net_namespace.h | 2 + include/net/netns/hash.h | 17 +- include/uapi/linux/fuse.h | 2 + kernel/rcu/tree.c | 20 +- kernel/sysctl.c | 11 +- lib/devres.c | 4 +- lib/div64.c | 4 +- mm/swapfile.c | 83 ++--- mm/vmalloc.c | 2 +- net/core/net-sysfs.c | 3 + net/core/net_namespace.c | 1 + net/hsr/hsr_device.c | 14 +- net/ipv4/route.c | 4 + net/ipv4/tcp_output.c | 2 +- net/ipv6/ip6mr.c | 8 +- net/l2tp/l2tp_ip6.c | 4 +- scripts/coccinelle/api/stream_open.cocci | 363 +++++++++++++++++++++ security/selinux/avc.c | 44 ++- security/selinux/hooks.c | 6 +- security/selinux/include/avc.h | 10 +- sound/firewire/bebob/bebob.c | 14 +- sound/soc/fsl/fsl_esai.c | 7 +- sound/soc/fsl/fsl_ssi.c | 5 +- sound/soc/fsl/imx-sgtl5000.c | 3 +- tools/lib/traceevent/event-parse.c | 2 +- tools/perf/util/header.c | 2 +- 135 files changed, 1417 insertions(+), 458 deletions(-) Aaro Koskinen (1): mmc: omap: fix the maximum timeout setting Aditya Pakki (1): md: Fix failed allocation of md_register_thread Alistair Strachan (1): media: uvcvideo: Fix 'type' check leading to overflow Aneesh Kumar K.V (1): powerpc/mm/hash: Handle mmap_min_addr correctly in get_unmapped_area topdown search Ard Biesheuvel (1): crypto: arm64/aes-ccm - fix logical bug in AAD MAC handling Arnd Bergmann (1): cpufreq: pxa2xx: remove incorrect __init annotation Axel Lin (1): regulator: wm831x-dcdc: Fix list of wm831x_dcdc_ilim from mA to uA Bart Van Assche (1): scsi: target/iscsi: Avoid iscsit_release_commands_from_conn() deadlock Ben Hutchings (2): binder: Replace "%p" with "%pK" for stable Linux 3.16.70 Buland Singh (1): hpet: Fix missing '=' character in the __setup() code of hpet_mmap_enable Christophe Leroy (4): powerpc/irq: drop arch_early_irq_init() powerpc/83xx: Also save/restore SPRG4-7 during suspend powerpc/wii: properly disable use of BATs when requested. powerpc/32: Clear on-stack exception marker upon exception return Colin Ian King (4): rtc: ds1672: fix unintended sign extension rtc: 88pm860x: fix unintended sign extension rtc: 88pm80x: fix unintended sign extension rtc: pm8xxx: fix unintended sign extension Dan Carpenter (1): xen, cpu_hotplug: Prevent an out of bounds access Dan Robertson (1): btrfs: init csum_list before possible free Daniel Axtens (1): bcache: never writeback a discard operation Daniel Jordan (1): mm, swap: bounds check swap_info array accesses to avoid NULL derefs Doug Berger (1): irqchip/brcmstb-l2: Use _irqsave locking variants in non-interrupt code Eric Biggers (5): crypto: pcbc - remove bogus memcpy()s with src == dest crypto: hash - set CRYPTO_TFM_NEED_KEY if ->setkey() fails crypto: tgr192 - fix unaligned memory access crypto: testmgr - skip crc32c context test for ahash algorithms crypto: ahash - fix another early termination in hash walk Eric Dumazet (6): net/hsr: fix possible crash in add_timer() vxlan: test dev->flags & IFF_UP before calling gro_cells_receive() gro_cells: make sure device is up in gro_cells_receive() l2tp: fix infoleak in l2tp_ip6_recvmsg() tcp: refine memory limit test in tcp_fragment() netns: provide pure entropy for net_hash_mix() Eric W. Biederman (1): fs/nfs: Fix nfs_parse_devname to not modify it's argument Felipe Franciosi (1): scsi: virtio_scsi: don't send sc payload with tmfs Filipe Manana (1): Btrfs: fix corruption reading shared and compressed extents after hole punching Finn Thain (1): m68k: Add -ffreestanding to CFLAGS Gal Pressman (2): IB/usnic: Fix out of bounds index check in query pkey RDMA/ocrdma: Fix out of bounds index check in query pkey Geert Uytterhoeven (3): pinctrl: sh-pfc: r8a7778: Fix HSPI pin numbers and names pinctrl: sh-pfc: r8a7791: Fix scifb2_data_c pin group pinctrl: sh-pfc: sh73a0: Fix fsic_spdif pin groups Gustavo A. R. Silva (4): ARM: s3c24xx: Fix boolean expressions in osiris_dvs_notify applicom: Fix potential Spectre v1 vulnerabilities iscsi_ibft: Fix missing break in switch statement drm/radeon/evergreen_cs: fix missing break in switch statement Halil Pasic (1): s390/virtio: handle find on invalid queue gracefully Hou Tao (1): 9p: use inode->i_lock to protect i_size_write() under 32-bit Hugh Dickins (1): mm: fix potential data race in SyS_swapon Ido Schimmel (1): ip6mr: Do not call __IP6_INC_STATS() from preemptible context Ivan Mironov (1): USB: serial: cp210x: add ID for Ingenico 3070 Jack Morgenstein (2): net/mlx4_core: Fix locking in SRIOV mode when switching between events and polling net/mlx4_core: Fix qp mtt size calculation Jacopo Mondi (1): media: v4l2: i2c: ov7670: Fix PLL bypass register values Jan Kara (2): ext2: Fix underflow in ext2_max_size() ext4: fix crash during online resizing Jann Horn (1): splice: don't merge into linked buffers Jarkko Sakkinen (1): tpm/tpm_i2c_atmel: Return -E2BIG when the transfer is incomplete Jay Dolan (2): serial: 8250_pci: Fix number of ports for ACCES serial cards serial: 8250_pci: Have ACCES cards that use the four port Pericom PI7C9X7954 chip use the pci_pericom_setup() Jeremy Fertic (7): staging: iio: adt7316: fix register and bit definitions staging: iio: adt7316: invert the logic of the check for an ldac pin staging: iio: adt7316: allow adt751x to use internal vref for all dacs staging: iio: adt7316: fix dac_bits assignment staging: iio: adt7316: fix handling of dac high resolution option staging: iio: adt7316: fix the dac read calculation staging: iio: adt7316: fix the dac write calculation Jia Zhang (1): tpm: Fix off-by-one when reading binary_bios_measurements Jiri Olsa (1): perf header: Fix wrong node write in NUMA_TOPOLOGY feature Jordan Niethe (1): powerpc/powernv: Make opal log only readable by root Kangjie Lu (1): net: sh_eth: fix a missing check of of_get_phy_mode Kirill Smelkov (2): fs: stream_open - opener for stream-like files so that read and write can run simultaneously without deadlock fuse: Add FOPEN_STREAM to use stream_open() Lubomir Rintel (2): libertas_tf: don't set URB_ZERO_PACKET on IN USB transfer serial: 8250_of: assume reg-shift of 2 for mrvl,mmp-uart Mans Rullgard (1): USB: serial: ftdi_sio: add ID for Hjelmslund Electronics USB485 Marek Szyprowski (1): clocksource/drivers/exynos_mct: Fix error path in timer resources initialization Michal Kazior (1): leds: lp55xx: fix null deref on firmware load failure NeilBrown (2): security/selinux: pass 'flags' arg to avc_audit() and avc_has_perm_flags() nfsd: fix memory corruption caused by readdir Pavel Shilovsky (2): CIFS: Do not reset lease state to NONE on lease break CIFS: Fix read after write for files with read caching Pawe? Chmiel (2): media: s5p-jpeg: Check for fmt_ver_flag when doing fmt enumeration media: s5p-jpeg: Correct step and max values for V4L2_CID_JPEG_RESTART_INTERVAL QiaoChong (1): parport_pc: fix find_superio io compare code, should use equal test. Richard Weinberger (2): mtd: docg3: Don't leak docg3->bbt in error path mtd: docg3: Fix kasprintf() usage Roman Penyaev (1): mm/vmalloc: fix size check for remap_vmalloc_range_partial() S.j. Wang (1): ASoC: fsl_esai: fix register setting issue in RIGHT_J mode Sakari Ailus (1): media: uvcvideo: Avoid NULL pointer dereference at the end of streaming Sean Christopherson (1): KVM: x86/mmu: Do not cache MMIO accesses while memslots are in flux Sergei Shtylyov (1): devres: always use dev_name() in devm_ioremap_resource() Stanislaw Gruszka (1): lib/div64.c: off by one in shift Stefan Agner (1): ASoC: imx-sgtl5000: put of nodes if finding codec fails Stephen Smalley (1): selinux: avoid silent denials in permissive mode under RCU walk Takashi Iwai (4): ASoC: fsl: Fix of-node refcount unbalance in fsl_ssi_probe_from_dt() mwifiex: Fix possible buffer overflows at parsing bss descriptor mwifiex: Abort at too short BSS descriptor element mwifiex: Fix heap overflow in mwifiex_uap_parse_tail_ies() Takashi Sakamoto (1): ALSA: bebob: use more identical mod_alias for Saffire Pro 10 I/O against Liquid Saffire 56 Tang Junhui (1): bcache: treat stale && dirty keys as bad keys Tetsuo Handa (1): staging: android: ashmem: Avoid range_alloc() allocation with ashmem_mutex held. Tony Jones (1): tools lib traceevent: Fix buffer overflow in arg_eval Trond Myklebust (1): NFSv4.1: Reinitialise sequence results before retransmitting a request Xiao Ni (1): It's wrong to add len to sector_nr in raid10 reshape twice Xin Long (2): route: set the deleted fnhe fnhe_daddr to 0 in ip_del_fnhe to fix a race pptp: dst_release sk_dst_cache in pptp_sock_destruct Yangtao Li (10): clk: highbank: fix refcount leak in hb_clk_init() clk: socfpga: fix refcount leak clk: samsung: exynos4: fix refcount leak in exynos4_get_xom() clk: imx6q: fix refcount leak in imx6q_clocks_init() clk: imx6sx: fix refcount leak in imx6sx_clocks_init() clk: vf610: fix refcount leak in vf610_clocks_init() clk: armada-370: fix refcount leak in a370_clk_init() clk: kirkwood: fix refcount leak in kirkwood_clk_init() clk: armada-xp: fix refcount leak in axp_clk_init() clk: dove: fix refcount leak in dove_clk_init() YueHaibing (5): drm: Fix error handling in drm_legacy_addctx mtd: docg3: Fix passing zero to 'PTR_ERR' warning in doc_probe_device tty: ipwireless: Fix potential NULL pointer dereference cdc-wdm: pass return value of recover_from_urb_loss net-sysfs: Fix mem leak in netdev_register_kobject Zev Weiss (1): kernel/sysctl.c: add missing range check in do_proc_dointvec_minmax_conv Zhang, Jun (1): rcu: Do RCU GP kthread self-wakeup from softirq and interrupt yangerkun (3): ext4: fix check of inode in swap_inode_boot_loader ext4: update quota information while swapping boot loader inode ext4: add mask of ext4 flags to swap zhangyi (F) (1): jbd2: clear dirty flag when revoking a buffer from an older transaction -- Ben Hutchings For every complex problem there is a solution that is simple, neat, and wrong.