From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
stable@vger.kernel.org,
Christophe Leroy <christophe.leroy@c-s.fr>,
Herbert Xu <herbert@gondor.apana.org.au>
Subject: [PATCH 4.9 051/148] crypto: talitos - fix memory corruption on SEC2
Date: Tue, 12 Dec 2017 13:44:21 +0100 [thread overview]
Message-ID: <20171212124433.330612938@linuxfoundation.org> (raw)
In-Reply-To: <20171212124431.207182779@linuxfoundation.org>
4.9-stable review patch. If anyone has any objections, please let me know.
------------------
From: LEROY Christophe <christophe.leroy@c-s.fr>
commit e04a61bebc5da1535b6f194b464295b8d558e2fc upstream.
On SEC2, when using the old descriptors type (hmac snoop no afeu)
for doing IPsec, the CICV out pointeur points out of the allocated
memory.
[ 2.502554] =============================================================================
[ 2.510740] BUG dma-kmalloc-256 (Not tainted): Redzone overwritten
[ 2.516907] -----------------------------------------------------------------------------
[ 2.516907]
[ 2.526535] Disabling lock debugging due to kernel taint
[ 2.531845] INFO: 0xde858108-0xde85810b. First byte 0xf8 instead of 0xcc
[ 2.538549] INFO: Allocated in 0x806181a9 age=0 cpu=0 pid=58
[ 2.544229] __kmalloc+0x374/0x564
[ 2.547649] talitos_edesc_alloc+0x17c/0x48c
[ 2.551929] aead_edesc_alloc+0x80/0x154
[ 2.555863] aead_encrypt+0x30/0xe0
[ 2.559368] __test_aead+0x5a0/0x1f3c
[ 2.563042] test_aead+0x2c/0x110
[ 2.566371] alg_test_aead+0x5c/0xf4
[ 2.569958] alg_test+0x1dc/0x5a0
[ 2.573305] cryptomgr_test+0x50/0x70
[ 2.576984] kthread+0xd8/0x134
[ 2.580155] ret_from_kernel_thread+0x5c/0x64
[ 2.584534] INFO: Freed in ipsec_esp_encrypt_done+0x130/0x240 age=6 cpu=0 pid=0
[ 2.591839] ipsec_esp_encrypt_done+0x130/0x240
[ 2.596395] flush_channel+0x1dc/0x488
[ 2.600161] talitos2_done_4ch+0x30/0x200
[ 2.604185] tasklet_action+0xa0/0x13c
[ 2.607948] __do_softirq+0x148/0x6cc
[ 2.611623] irq_exit+0xc0/0x124
[ 2.614869] call_do_irq+0x24/0x3c
[ 2.618292] do_IRQ+0x78/0x108
[ 2.621369] ret_from_except+0x0/0x14
[ 2.625055] finish_task_switch+0x58/0x350
[ 2.629165] schedule+0x80/0x134
[ 2.632409] schedule_preempt_disabled+0x38/0xc8
[ 2.637042] cpu_startup_entry+0xe4/0x190
[ 2.641074] start_kernel+0x3f4/0x408
[ 2.644741] 0x3438
[ 2.646857] INFO: Slab 0xdffbdb00 objects=9 used=1 fp=0xde8581c0 flags=0x0080
[ 2.653978] INFO: Object 0xde858008 @offset=8 fp=0xca4395df
[ 2.653978]
[ 2.661032] Redzone de858000: cc cc cc cc cc cc cc cc ........
[ 2.669029] Object de858008: 00 00 00 02 00 00 00 02 00 6b 6b 6b 1e 83 ea 28 .........kkk...(
[ 2.677628] Object de858018: 00 00 00 70 1e 85 80 64 ff 73 1d 21 6b 6b 6b 6b ...p...d.s.!kkkk
[ 2.686228] Object de858028: 00 20 00 00 1e 84 17 24 00 10 00 00 1e 85 70 00 . .....$......p.
[ 2.694829] Object de858038: 00 18 00 00 1e 84 17 44 00 08 00 00 1e 83 ea 28 .......D.......(
[ 2.703430] Object de858048: 00 80 00 00 1e 84 f0 00 00 80 00 00 1e 85 70 10 ..............p.
[ 2.712030] Object de858058: 00 20 6b 00 1e 85 80 f4 6b 6b 6b 6b 00 80 02 00 . k.....kkkk....
[ 2.720629] Object de858068: 1e 84 f0 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b ....kkkkkkkkkkkk
[ 2.729230] Object de858078: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 2.737830] Object de858088: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 2.746429] Object de858098: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 2.755029] Object de8580a8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 2.763628] Object de8580b8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 2.772229] Object de8580c8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 2.780829] Object de8580d8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b kkkkkkkkkkkkkkkk
[ 2.789430] Object de8580e8: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 73 b0 ea 9f kkkkkkkkkkkks...
[ 2.798030] Object de8580f8: e8 18 80 d6 56 38 44 c0 db e3 4f 71 f7 ce d1 d3 ....V8D...Oq....
[ 2.806629] Redzone de858108: f8 bd 3e 4f ..>O
[ 2.814279] Padding de8581b0: 5a 5a 5a 5a 5a 5a 5a 5a ZZZZZZZZ
[ 2.822283] CPU: 0 PID: 0 Comm: swapper Tainted: G B 4.9.50-g995be12679 #179
[ 2.831819] Call Trace:
[ 2.834301] [dffefd20] [c01aa9a8] check_bytes_and_report+0x100/0x194 (unreliable)
[ 2.841801] [dffefd50] [c01aac3c] check_object+0x200/0x530
[ 2.847306] [dffefd80] [c01ae584] free_debug_processing+0x290/0x690
[ 2.853585] [dffefde0] [c01aec8c] __slab_free+0x308/0x628
[ 2.859000] [dffefe80] [c05057f4] ipsec_esp_encrypt_done+0x130/0x240
[ 2.865378] [dffefeb0] [c05002c4] flush_channel+0x1dc/0x488
[ 2.870968] [dffeff10] [c05007a8] talitos2_done_4ch+0x30/0x200
[ 2.876814] [dffeff30] [c002fe38] tasklet_action+0xa0/0x13c
[ 2.882399] [dffeff60] [c002f118] __do_softirq+0x148/0x6cc
[ 2.887896] [dffeffd0] [c002f954] irq_exit+0xc0/0x124
[ 2.892968] [dffefff0] [c0013adc] call_do_irq+0x24/0x3c
[ 2.898213] [c0d4be00] [c000757c] do_IRQ+0x78/0x108
[ 2.903113] [c0d4be30] [c0015c08] ret_from_except+0x0/0x14
[ 2.908634] --- interrupt: 501 at finish_task_switch+0x70/0x350
[ 2.908634] LR = finish_task_switch+0x58/0x350
[ 2.919327] [c0d4bf20] [c085e1d4] schedule+0x80/0x134
[ 2.924398] [c0d4bf50] [c085e2c0] schedule_preempt_disabled+0x38/0xc8
[ 2.930853] [c0d4bf60] [c007f064] cpu_startup_entry+0xe4/0x190
[ 2.936707] [c0d4bfb0] [c096c434] start_kernel+0x3f4/0x408
[ 2.942198] [c0d4bff0] [00003438] 0x3438
[ 2.946137] FIX dma-kmalloc-256: Restoring 0xde858108-0xde85810b=0xcc
[ 2.946137]
[ 2.954158] FIX dma-kmalloc-256: Object at 0xde858008 not freed
This patch reworks the handling of the CICV out in order
to properly handle all cases.
Signed-off-by: Christophe Leroy <christophe.leroy@c-s.fr>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
drivers/crypto/talitos.c | 42 ++++++++++++++++++++++++++++--------------
1 file changed, 28 insertions(+), 14 deletions(-)
--- a/drivers/crypto/talitos.c
+++ b/drivers/crypto/talitos.c
@@ -1247,14 +1247,15 @@ static int ipsec_esp(struct talitos_edes
dma_map_sg(dev, areq->dst, sg_count, DMA_FROM_DEVICE);
}
- sg_count = talitos_sg_map(dev, areq->dst, cryptlen, edesc,
- &desc->ptr[5], sg_count, areq->assoclen,
- tbl_off);
+ ret = talitos_sg_map(dev, areq->dst, cryptlen, edesc, &desc->ptr[5],
+ sg_count, areq->assoclen, tbl_off);
if (desc->hdr & DESC_HDR_TYPE_IPSEC_ESP)
to_talitos_ptr_ext_or(&desc->ptr[5], authsize, is_sec1);
- if (sg_count > 1) {
+ /* ICV data */
+ if (ret > 1) {
+ tbl_off += ret;
edesc->icv_ool = true;
sync_needed = true;
@@ -1264,9 +1265,7 @@ static int ipsec_esp(struct talitos_edes
sizeof(struct talitos_ptr) + authsize;
/* Add an entry to the link table for ICV data */
- tbl_ptr += sg_count - 1;
- to_talitos_ptr_ext_set(tbl_ptr, 0, is_sec1);
- tbl_ptr++;
+ to_talitos_ptr_ext_set(tbl_ptr - 1, 0, is_sec1);
to_talitos_ptr_ext_set(tbl_ptr, DESC_PTR_LNKTBL_RETURN,
is_sec1);
to_talitos_ptr_len(tbl_ptr, authsize, is_sec1);
@@ -1274,18 +1273,33 @@ static int ipsec_esp(struct talitos_edes
/* icv data follows link tables */
to_talitos_ptr(tbl_ptr, edesc->dma_link_tbl + offset,
is_sec1);
+ } else {
+ dma_addr_t addr = edesc->dma_link_tbl;
+
+ if (is_sec1)
+ addr += areq->assoclen + cryptlen;
+ else
+ addr += sizeof(struct talitos_ptr) * tbl_off;
+
+ to_talitos_ptr(&desc->ptr[6], addr, is_sec1);
+ to_talitos_ptr_len(&desc->ptr[6], authsize, is_sec1);
+ }
+ } else if (!(desc->hdr & DESC_HDR_TYPE_IPSEC_ESP)) {
+ ret = talitos_sg_map(dev, areq->dst, authsize, edesc,
+ &desc->ptr[6], sg_count, areq->assoclen +
+ cryptlen,
+ tbl_off);
+ if (ret > 1) {
+ tbl_off += ret;
+ edesc->icv_ool = true;
+ sync_needed = true;
+ } else {
+ edesc->icv_ool = false;
}
} else {
edesc->icv_ool = false;
}
- /* ICV data */
- if (!(desc->hdr & DESC_HDR_TYPE_IPSEC_ESP)) {
- to_talitos_ptr_len(&desc->ptr[6], authsize, is_sec1);
- to_talitos_ptr(&desc->ptr[6], edesc->dma_link_tbl +
- areq->assoclen + cryptlen, is_sec1);
- }
-
/* iv out */
if (desc->hdr & DESC_HDR_TYPE_IPSEC_ESP)
map_single_talitos_ptr(dev, &desc->ptr[6], ivsize, ctx->iv,
next prev parent reply other threads:[~2017-12-12 13:25 UTC|newest]
Thread overview: 148+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-12-12 12:43 [PATCH 4.9 000/148] 4.9.69-stable review Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 001/148] usb: gadget: udc: renesas_usb3: fix number of the pipes Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 003/148] can: kvaser_usb: free buf in error paths Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 004/148] can: kvaser_usb: Fix comparison bug in kvaser_usb_read_bulk_callback() Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 005/148] can: kvaser_usb: ratelimit errors if incomplete messages are received Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 006/148] can: kvaser_usb: cancel urb on -EPIPE and -EPROTO Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 007/148] can: ems_usb: " Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 008/148] can: esd_usb2: " Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 009/148] can: usb_8dev: " Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 010/148] virtio: release virtio index when fail to device_register Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 011/148] hv: kvp: Avoid reading past allocated blocks from KVP file Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 012/148] isa: Prevent NULL dereference in isa_bus driver callbacks Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 013/148] scsi: dma-mapping: always provide dma_get_cache_alignment Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 014/148] scsi: use dma_get_cache_alignment() as minimum DMA alignment Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 015/148] scsi: libsas: align sata_devices rps_resp on a cacheline Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 016/148] efi: Move some sysfs files to be read-only by root Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 017/148] efi/esrt: Use memunmap() instead of kfree() to free the remapping Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 018/148] ASN.1: fix out-of-bounds read when parsing indefinite length item Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 019/148] ASN.1: check for error from ASN1_OP_END__ACT actions Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 020/148] KEYS: add missing permission check for request_key() destination Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 021/148] X.509: reject invalid BIT STRING for subjectPublicKey Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 022/148] X.509: fix comparisons of ->pkey_algo Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 023/148] x86/PCI: Make broadcom_postcore_init() check acpi_disabled Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 025/148] btrfs: fix missing error return in btrfs_drop_snapshot Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 026/148] ALSA: pcm: prevent UAF in snd_pcm_info Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 027/148] ALSA: seq: Remove spurious WARN_ON() at timer check Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 028/148] ALSA: usb-audio: Fix out-of-bound error Greg Kroah-Hartman
2017-12-12 12:43 ` [PATCH 4.9 029/148] ALSA: usb-audio: Add check return value for usb_string() Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 030/148] iommu/vt-d: Fix scatterlist offset handling Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 031/148] smp/hotplug: Move step CPUHP_AP_SMPCFD_DYING to the correct place Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 032/148] s390: fix compat system call table Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 033/148] KVM: s390: Fix skey emulation permission check Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 034/148] powerpc/64s: Initialize ISAv3 MMU registers before setting partition table Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 035/148] brcmfmac: change driver unbind order of the sdio function devices Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 036/148] kdb: Fix handling of kallsyms_symbol_next() return value Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 037/148] drm/exynos: gem: Drop NONCONTIG flag for buffers allocated without IOMMU Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 038/148] media: dvb: i2c transfers over usb cannot be done from stack Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 039/148] arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 040/148] arm: KVM: Fix " Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 042/148] KVM: arm/arm64: Fix broken GICH_ELRSR big endian conversion Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 043/148] KVM: arm/arm64: vgic-irqfd: Fix MSI entry allocation Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 044/148] KVM: arm/arm64: vgic-its: Check result of allocation before use Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 045/148] arm64: fpsimd: Prevent registers leaking from dead tasks Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 046/148] bus: arm-cci: Fix use of smp_processor_id() in preemptible context Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 047/148] bus: arm-ccn: Check memory allocation failure Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 048/148] bus: arm-ccn: Fix use of smp_processor_id() in preemptible context Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 049/148] bus: arm-ccn: fix module unloading Error: Removing state 147 which has instances left Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 050/148] crypto: talitos - fix AEAD test failures Greg Kroah-Hartman
2017-12-12 12:44 ` Greg Kroah-Hartman [this message]
2017-12-12 12:44 ` [PATCH 4.9 052/148] crypto: talitos - fix setkey to check key weakness Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 053/148] crypto: talitos - fix AEAD for sha224 on non sha224 capable chips Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 054/148] crypto: talitos - fix use of sg_link_tbl_len Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 055/148] crypto: talitos - fix ctr-aes-talitos Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 056/148] usb: f_fs: Force Reserved1=1 in OS_DESC_EXT_COMPAT Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 057/148] ARM: BUG if jumping to usermode address in kernel mode Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 058/148] ARM: avoid faulting on qemu Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 059/148] thp: reduce indentation level in change_huge_pmd() Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 060/148] thp: fix MADV_DONTNEED vs. numa balancing race Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 061/148] mm: drop unused pmdp_huge_get_and_clear_notify() Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 062/148] Revert "drm/armada: Fix compile fail" Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 063/148] Revert "spi: SPI_FSL_DSPI should depend on HAS_DMA" Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 064/148] ARM: 8657/1: uaccess: consistently check object sizes Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 065/148] vti6: Dont report path MTU below IPV6_MIN_MTU Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 066/148] ARM: OMAP2+: gpmc-onenand: propagate error on initialization failure Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 067/148] x86/selftests: Add clobbers for int80 on x86_64 Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 068/148] x86/platform/uv/BAU: Fix HUB errors by remove initial write to sw-ack register Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 069/148] sched/fair: Make select_idle_cpu() more aggressive Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 070/148] x86/hpet: Prevent might sleep splat on resume Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 071/148] powerpc/64: Invalidate process table caching after setting process table Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 072/148] selftest/powerpc: Fix false failures for skipped tests Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 073/148] powerpc: Fix compiling a BE kernel with a powerpc64le toolchain Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 074/148] [media] lirc: fix dead lock between open and wakeup_filter Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 075/148] module: set __jump_table alignment to 8 Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 076/148] powerpc/64: Fix checksum folding in csum_add() Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 077/148] ARM: OMAP2+: Fix device node reference counts Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 078/148] ARM: OMAP2+: Release device node after it is no longer needed Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 079/148] ASoC: rcar: avoid SSI_MODEx settings for SSI8 Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 080/148] gpio: altera: Use handle_level_irq when configured as a level_high Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 081/148] HID: chicony: Add support for another ASUS Zen AiO keyboard Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 082/148] usb: gadget: configs: plug memory leak Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 083/148] USB: gadgetfs: Fix a potential memory leak in dev_config() Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 084/148] usb: dwc3: gadget: Fix system suspend/resume on TI platforms Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 085/148] usb: gadget: pxa27x: Test for a valid argument pointer Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 086/148] usb: gadget: udc: net2280: Fix tmp reusage in net2280 driver Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 088/148] libata: drop WARN from protocol error in ata_sff_qc_issue() Greg Kroah-Hartman
2017-12-12 12:44 ` [PATCH 4.9 089/148] workqueue: trigger WARN if queue_delayed_work() is called with NULL @wq Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 090/148] scsi: qla2xxx: Fix ql_dump_buffer Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 091/148] scsi: lpfc: Fix crash during Hardware error recovery on SLI3 adapters Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 092/148] irqchip/crossbar: Fix incorrect type of register size Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 094/148] arm: KVM: Survive unknown traps from guests Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 095/148] arm64: " Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 096/148] KVM: arm/arm64: VGIC: Fix command handling while ITS being disabled Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 097/148] spi_ks8995: fix "BUG: key accdaa28 not in .data!" Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 098/148] spi_ks8995: regs_size incorrect for some devices Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 099/148] bnx2x: prevent crash when accessing PTP with interface down Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 100/148] bnx2x: fix possible overrun of VFPF multicast addresses array Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 101/148] bnx2x: fix detection of VLAN filtering feature for VF Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 102/148] bnx2x: do not rollback VF MAC/VLAN filters we did not configure Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 103/148] rds: tcp: Sequence teardown of listen and acceptor sockets to avoid races Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 104/148] ibmvnic: Fix overflowing firmware/hardware TX queue Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 105/148] ibmvnic: Allocate number of rx/tx buffers agreed on by firmware Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 106/148] ipv6: reorder icmpv6_init() and ip6_mr_init() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 107/148] crypto: s5p-sss - Fix completing crypto request in IRQ handler Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 108/148] i2c: riic: fix restart condition Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 109/148] blk-mq: initialize mq kobjects in blk_mq_init_allocated_queue() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 110/148] zram: set physical queue limits to avoid array out of bounds accesses Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 111/148] netfilter: dont track fragmented packets Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 112/148] axonram: Fix gendisk handling Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 113/148] drm/amd/amdgpu: fix console deadlock if late init failed Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 114/148] powerpc/powernv/ioda2: Gracefully fail if too many TCE levels requested Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 117/148] kbuild: pkg: use --transform option to prefix paths in tar Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 118/148] coccinelle: fix parallel build with CHECK=scripts/coccicheck Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 119/148] x86/mpx/selftests: Fix up weird arrays Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 120/148] mac80211_hwsim: Fix memory leak in hwsim_new_radio_nl() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 121/148] gre6: use log_ecn_error module parameter in ip6_tnl_rcv() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 122/148] route: also update fnhe_genid when updating a route cache Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 123/148] route: update fnhe_expires for redirect when the fnhe exists Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 124/148] drivers/rapidio/devices/rio_mport_cdev.c: fix resource leak in error handling path in rio_dma_transfer() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 125/148] lib/genalloc.c: make the avail variable an atomic_long_t Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 126/148] dynamic-debug-howto: fix optional/omitted ending line number to be LARGE instead of 0 Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 127/148] NFS: Fix a typo in nfs_rename() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 128/148] sunrpc: Fix rpc_task_begin trace point Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 129/148] xfs: fix forgotten rcu read unlock when skipping inode reclaim Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 130/148] dt-bindings: usb: fix reg-property port-number range Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 131/148] block: wake up all tasks blocked in get_request() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 132/148] sparc64/mm: set fields in deferred pages Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 133/148] zsmalloc: calling zs_map_object() from irq is a bug Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 134/148] sctp: do not free asoc when it is already dead in sctp_sendmsg Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 135/148] sctp: use the right sk after waking up from wait_buf sleep Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 136/148] bpf: fix lockdep splat Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 137/148] clk: uniphier: fix DAPLL2 clock rate of Pro5 Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 138/148] atm: horizon: Fix irq release error Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 139/148] jump_label: Invoke jump_label_test() via early_initcall() Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 140/148] xfrm: Copy policy family in clone_policy Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 141/148] IB/mlx4: Increase maximal message size under UD QP Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 142/148] IB/mlx5: Assign send CQ and recv CQ of UMR QP Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 143/148] afs: Connect up the CB.ProbeUuid Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 144/148] kbuild: do not call cc-option before KBUILD_CFLAGS initialization Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 145/148] ipvlan: fix ipv6 outbound device Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 146/148] audit: ensure that audit=1 actually enables audit for PID 1 Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 147/148] md: free unused memory after bitmap resize Greg Kroah-Hartman
2017-12-12 12:45 ` [PATCH 4.9 148/148] RDMA/cxgb4: Annotate r2 and stag as __be32 Greg Kroah-Hartman
2017-12-12 21:55 ` [PATCH 4.9 000/148] 4.9.69-stable review Shuah Khan
2017-12-13 0:22 ` Guenter Roeck
2017-12-13 0:30 ` Nathan Chancellor
2017-12-14 7:53 ` Greg Kroah-Hartman
2017-12-13 11:58 ` Naresh Kamboju
2017-12-14 7:53 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20171212124433.330612938@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=christophe.leroy@c-s.fr \
--cc=herbert@gondor.apana.org.au \
--cc=linux-kernel@vger.kernel.org \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).