From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: "Greg Kroah-Hartman" <gregkh@linuxfoundation.org>,
stable@vger.kernel.org, 范龙飞 <long7573@126.com>,
"Nicolai Stange" <nstange@suse.de>,
"Takashi Iwai" <tiwai@suse.de>
Subject: [PATCH 4.15 072/146] ALSA: seq: More protection for concurrent write and ioctl races
Date: Tue, 13 Mar 2018 16:23:59 +0100 [thread overview]
Message-ID: <20180313152326.317882899@linuxfoundation.org> (raw)
In-Reply-To: <20180313152320.439085687@linuxfoundation.org>
4.15-stable review patch. If anyone has any objections, please let me know.
------------------
From: Takashi Iwai <tiwai@suse.de>
commit 7bd80091567789f1c0cb70eb4737aac8bcd2b6b9 upstream.
This patch is an attempt for further hardening against races between
the concurrent write and ioctls. The previous fix d15d662e89fc
("ALSA: seq: Fix racy pool initializations") covered the race of the
pool initialization at writer and the pool resize ioctl by the
client->ioctl_mutex (CVE-2018-1000004). However, basically this mutex
should be applied more widely to the whole write operation for
avoiding the unexpected pool operations by another thread.
The only change outside snd_seq_write() is the additional mutex
argument to helper functions, so that we can unlock / relock the given
mutex temporarily during schedule() call for blocking write.
Fixes: d15d662e89fc ("ALSA: seq: Fix racy pool initializations")
Reported-by: 范龙飞 <long7573@126.com>
Reported-by: Nicolai Stange <nstange@suse.de>
Reviewed-and-tested-by: Nicolai Stange <nstange@suse.de>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
---
sound/core/seq/seq_clientmgr.c | 18 +++++++++++-------
sound/core/seq/seq_fifo.c | 2 +-
sound/core/seq/seq_memory.c | 14 ++++++++++----
sound/core/seq/seq_memory.h | 3 ++-
4 files changed, 24 insertions(+), 13 deletions(-)
--- a/sound/core/seq/seq_clientmgr.c
+++ b/sound/core/seq/seq_clientmgr.c
@@ -910,7 +910,8 @@ int snd_seq_dispatch_event(struct snd_se
static int snd_seq_client_enqueue_event(struct snd_seq_client *client,
struct snd_seq_event *event,
struct file *file, int blocking,
- int atomic, int hop)
+ int atomic, int hop,
+ struct mutex *mutexp)
{
struct snd_seq_event_cell *cell;
int err;
@@ -948,7 +949,8 @@ static int snd_seq_client_enqueue_event(
return -ENXIO; /* queue is not allocated */
/* allocate an event cell */
- err = snd_seq_event_dup(client->pool, event, &cell, !blocking || atomic, file);
+ err = snd_seq_event_dup(client->pool, event, &cell, !blocking || atomic,
+ file, mutexp);
if (err < 0)
return err;
@@ -1017,12 +1019,11 @@ static ssize_t snd_seq_write(struct file
return -ENXIO;
/* allocate the pool now if the pool is not allocated yet */
+ mutex_lock(&client->ioctl_mutex);
if (client->pool->size > 0 && !snd_seq_write_pool_allocated(client)) {
- mutex_lock(&client->ioctl_mutex);
err = snd_seq_pool_init(client->pool);
- mutex_unlock(&client->ioctl_mutex);
if (err < 0)
- return -ENOMEM;
+ goto out;
}
/* only process whole events */
@@ -1073,7 +1074,7 @@ static ssize_t snd_seq_write(struct file
/* ok, enqueue it */
err = snd_seq_client_enqueue_event(client, &event, file,
!(file->f_flags & O_NONBLOCK),
- 0, 0);
+ 0, 0, &client->ioctl_mutex);
if (err < 0)
break;
@@ -1084,6 +1085,8 @@ static ssize_t snd_seq_write(struct file
written += len;
}
+ out:
+ mutex_unlock(&client->ioctl_mutex);
return written ? written : err;
}
@@ -2263,7 +2266,8 @@ static int kernel_client_enqueue(int cli
if (! cptr->accept_output)
result = -EPERM;
else /* send it */
- result = snd_seq_client_enqueue_event(cptr, ev, file, blocking, atomic, hop);
+ result = snd_seq_client_enqueue_event(cptr, ev, file, blocking,
+ atomic, hop, NULL);
snd_seq_client_unlock(cptr);
return result;
--- a/sound/core/seq/seq_fifo.c
+++ b/sound/core/seq/seq_fifo.c
@@ -125,7 +125,7 @@ int snd_seq_fifo_event_in(struct snd_seq
return -EINVAL;
snd_use_lock_use(&f->use_lock);
- err = snd_seq_event_dup(f->pool, event, &cell, 1, NULL); /* always non-blocking */
+ err = snd_seq_event_dup(f->pool, event, &cell, 1, NULL, NULL); /* always non-blocking */
if (err < 0) {
if ((err == -ENOMEM) || (err == -EAGAIN))
atomic_inc(&f->overflow);
--- a/sound/core/seq/seq_memory.c
+++ b/sound/core/seq/seq_memory.c
@@ -220,7 +220,8 @@ void snd_seq_cell_free(struct snd_seq_ev
*/
static int snd_seq_cell_alloc(struct snd_seq_pool *pool,
struct snd_seq_event_cell **cellp,
- int nonblock, struct file *file)
+ int nonblock, struct file *file,
+ struct mutex *mutexp)
{
struct snd_seq_event_cell *cell;
unsigned long flags;
@@ -244,7 +245,11 @@ static int snd_seq_cell_alloc(struct snd
set_current_state(TASK_INTERRUPTIBLE);
add_wait_queue(&pool->output_sleep, &wait);
spin_unlock_irq(&pool->lock);
+ if (mutexp)
+ mutex_unlock(mutexp);
schedule();
+ if (mutexp)
+ mutex_lock(mutexp);
spin_lock_irq(&pool->lock);
remove_wait_queue(&pool->output_sleep, &wait);
/* interrupted? */
@@ -287,7 +292,7 @@ __error:
*/
int snd_seq_event_dup(struct snd_seq_pool *pool, struct snd_seq_event *event,
struct snd_seq_event_cell **cellp, int nonblock,
- struct file *file)
+ struct file *file, struct mutex *mutexp)
{
int ncells, err;
unsigned int extlen;
@@ -304,7 +309,7 @@ int snd_seq_event_dup(struct snd_seq_poo
if (ncells >= pool->total_elements)
return -ENOMEM;
- err = snd_seq_cell_alloc(pool, &cell, nonblock, file);
+ err = snd_seq_cell_alloc(pool, &cell, nonblock, file, mutexp);
if (err < 0)
return err;
@@ -330,7 +335,8 @@ int snd_seq_event_dup(struct snd_seq_poo
int size = sizeof(struct snd_seq_event);
if (len < size)
size = len;
- err = snd_seq_cell_alloc(pool, &tmp, nonblock, file);
+ err = snd_seq_cell_alloc(pool, &tmp, nonblock, file,
+ mutexp);
if (err < 0)
goto __error;
if (cell->event.data.ext.ptr == NULL)
--- a/sound/core/seq/seq_memory.h
+++ b/sound/core/seq/seq_memory.h
@@ -66,7 +66,8 @@ struct snd_seq_pool {
void snd_seq_cell_free(struct snd_seq_event_cell *cell);
int snd_seq_event_dup(struct snd_seq_pool *pool, struct snd_seq_event *event,
- struct snd_seq_event_cell **cellp, int nonblock, struct file *file);
+ struct snd_seq_event_cell **cellp, int nonblock,
+ struct file *file, struct mutex *mutexp);
/* return number of unused (free) cells */
static inline int snd_seq_unused_cells(struct snd_seq_pool *pool)
next prev parent reply other threads:[~2018-03-13 15:23 UTC|newest]
Thread overview: 160+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-03-13 15:22 [PATCH 4.15 000/146] 4.15.10-stable review Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 001/146] RDMA/ucma: Limit possible option size Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 002/146] RDMA/ucma: Check that user doesnt overflow QP state Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 003/146] RDMA/mlx5: Fix integer overflow while resizing CQ Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 004/146] bpf: cpumap: use GFP_KERNEL instead of GFP_ATOMIC in __cpu_map_entry_alloc() Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 005/146] IB/uverbs: Improve lockdep_check Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 006/146] mac80211_hwsim: dont use WQ_MEM_RECLAIM Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 007/146] net/smc: fix NULL pointer dereference on sock_create_kern() error path Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 008/146] regulator: stm32-vrefbuf: fix check on ready flag Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 009/146] drm/i915: Check for fused or unused pipes Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 010/146] drm/i915/audio: fix check for av_enc_map overflow Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 011/146] drm/i915: Fix rsvd2 mask when out-fence is returned Greg Kroah-Hartman
2018-03-13 15:22 ` [PATCH 4.15 012/146] drm/i915: Clear the in-use marker on execbuf failure Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 013/146] drm/i915: Disable DC states around GMBUS on GLK Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 014/146] drm/i915: Update watermark state correctly in sanitize_watermarks Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 015/146] drm/i915: Try EDID bitbanging on HDMI after failed read Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 016/146] drm/i915/perf: fix perf stream opening lock Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 017/146] scsi: core: Avoid that ATA error handling can trigger a kernel hang or oops Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 018/146] scsi: qla2xxx: Fix NULL pointer crash due to active timer for ABTS Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 019/146] drm/i915: Always call to intel_display_set_init_power() in resume_early Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 020/146] workqueue: Allow retrieval of current tasks work struct Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 021/146] drm: Allow determining if current task is output poll worker Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 022/146] drm/nouveau: Fix deadlock on runtime suspend Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 023/146] drm/radeon: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 024/146] drm/amdgpu: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 025/146] drm/nouveau: prefer XBGR2101010 for addfb ioctl Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 026/146] drm/amd/powerplay/smu7: allow mclk switching with no displays Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 027/146] drm/amd/powerplay/vega10: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 028/146] Revert "drm/radeon/pm: autoswitch power state when in balanced mode" Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 029/146] drm/amd/display: check for ipp before calling cursor operations Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 030/146] drm/radeon: insist on 32-bit DMA for Cedar on PPC64/PPC64LE Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 031/146] drm/amd/powerplay: fix power over limit on Fiji Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 032/146] drm/amd/display: Default HDMI6G support to true. Log VBIOS table error Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 033/146] drm/amdgpu: used cached pcie gen info for SI (v2) Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 034/146] drm/amdgpu: Notify sbios device ready before send request Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 035/146] drm/radeon: fix KV harvesting Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 036/146] drm/amdgpu: " Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 037/146] drm/amdgpu:Correct max uvd handles Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 038/146] drm/amdgpu:Always save uvd vcpu_bo in VM Mode Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 039/146] ovl: redirect_dir=nofollow should not follow redirect for opaque lower Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 040/146] MIPS: BMIPS: Do not mask IPIs during suspend Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 041/146] MIPS: ath25: Check for kzalloc allocation failure Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 042/146] MIPS: OCTEON: irq: Check for null return on kzalloc allocation Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 043/146] PCI: dwc: Fix enumeration end when reaching root subordinate Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 044/146] Input: matrix_keypad - fix race when disabling interrupts Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 045/146] Revert "Input: synaptics - Lenovo Thinkpad T460p devices should use RMI" Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 046/146] bug: use %pB in BUG and stack protector failure Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 047/146] lib/bug.c: exclude non-BUG/WARN exceptions from report_bug() Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 048/146] mm/memblock.c: hardcode the end_pfn being -1 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 049/146] mm/page_alloc: fix memmap_init_zone pageblock alignment Greg Kroah-Hartman
2018-03-13 19:34 ` Dan Rue
2018-03-13 21:47 ` Daniel Vacek
2018-03-14 10:54 ` Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 050/146] Documentation/sphinx: Fix Directive import error Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 051/146] loop: Fix lost writes caused by missing flag Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 052/146] virtio_ring: fix num_free handling in error case Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 053/146] KVM: s390: fix memory overwrites when not using SCA entries Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 054/146] arm64: mm: fix thinko in non-global page table attribute check Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 055/146] IB/core: Fix missing RDMA cgroups release in case of failure to register device Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 056/146] Revert "nvme: create slaves and holders entries for hidden controllers" Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 057/146] kbuild: Handle builtin dtb file names containing hyphens Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 058/146] dm bufio: avoid false-positive Wmaybe-uninitialized warning Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 059/146] IB/mlx5: Fix incorrect size of klms in the memory region Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 060/146] bcache: fix crashes in duplicate cache device register Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 061/146] bcache: dont attach backing with duplicate UUID Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 062/146] x86/MCE: Save microcode revision in machine check records Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 063/146] x86/MCE: Serialize sysfs changes Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 064/146] perf tools: Fix trigger class trigger_on() Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 065/146] x86/spectre_v2: Dont check microcode versions when running under hypervisors Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 066/146] ALSA: hda/realtek - Add support headset mode for DELL WYSE Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 067/146] ALSA: hda/realtek - Add headset mode support for Dell laptop Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 068/146] ALSA: hda/realtek: Limit mic boost on T480 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 069/146] ALSA: hda/realtek - Fix dock line-out volume on Dell Precision 7520 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 070/146] ALSA: hda/realtek - Make dock sound work on ThinkPad L570 Greg Kroah-Hartman
2018-03-13 15:23 ` [PATCH 4.15 071/146] ALSA: seq: Dont allow resizing pool in use Greg Kroah-Hartman
2018-03-13 15:23 ` Greg Kroah-Hartman [this message]
2018-03-13 15:24 ` [PATCH 4.15 073/146] ALSA: hda - Fix a wrong FIXUP for alc289 on Dell machines Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 074/146] ALSA: hda: add dock and led support for HP EliteBook 820 G3 Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 075/146] ALSA: hda: add dock and led support for HP ProBook 640 G2 Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 076/146] scsi: qla2xxx: Fix NULL pointer crash due to probe failure Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 077/146] scsi: qla2xxx: Fix recursion while sending terminate exchange Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 078/146] dt-bindings: Document mti,mips-cpc binding Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 079/146] MIPS: CPC: Map registers using DT in mips_cpc_default_phys_base() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 080/146] nospec: Kill array_index_nospec_mask_check() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 081/146] nospec: Include <asm/barrier.h> dependency Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 082/146] x86/entry: Reduce the code footprint of the idtentry macro Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 083/146] x86/entry/64: Use xorl for faster register clearing Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 084/146] x86/mm: Remove stale comment about KMEMCHECK Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 085/146] x86/asm: Improve how GEN_*_SUFFIXED_RMWcc() specify clobbers Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 086/146] x86/IO-APIC: Avoid warning in 32-bit builds Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 087/146] x86/LDT: Avoid warning in 32-bit builds with older gcc Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 088/146] x86-64/realmode: Add instruction suffix Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 089/146] Revert "x86/retpoline: Simplify vmexit_fill_RSB()" Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 090/146] x86/speculation: Use IBRS if available before calling into firmware Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 091/146] x86/retpoline: Support retpoline builds with Clang Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 092/146] x86/speculation, objtool: Annotate indirect calls/jumps for objtool Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 093/146] x86/speculation: Move firmware_restrict_branch_speculation_*() from C to CPP Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 094/146] x86/paravirt, objtool: Annotate indirect calls Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 095/146] x86/boot, objtool: Annotate indirect jump in secondary_startup_64() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 096/146] x86/mm/sme, objtool: Annotate indirect call in sme_encrypt_execute() Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 097/146] objtool: Use existing global variables for options Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 098/146] objtool: Add retpoline validation Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 099/146] objtool: Add module specific retpoline rules Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 100/146] objtool, retpolines: Integrate objtool with retpoline support more closely Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 101/146] objtool: Fix another switch table detection issue Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 102/146] objtool: Fix 32-bit build Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 103/146] x86/kprobes: Fix kernel crash when probing .entry_trampoline code Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 104/146] watchdog: hpwdt: SMBIOS check Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 105/146] watchdog: hpwdt: Check source of NMI Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 106/146] watchdog: hpwdt: fix unused variable warning Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 107/146] watchdog: hpwdt: Remove legacy NMI sourcing Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 108/146] netfilter: add back stackpointer size checks Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 109/146] netfilter: ipt_CLUSTERIP: fix a race condition of proc file creation Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 110/146] netfilter: xt_hashlimit: fix lock imbalance Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 111/146] netfilter: x_tables: fix missing timer initialization in xt_LED Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 112/146] netfilter: nat: cope with negative port range Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 113/146] netfilter: IDLETIMER: be syzkaller friendly Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 114/146] netfilter: ebtables: CONFIG_COMPAT: dont trust userland offsets Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 115/146] netfilter: bridge: ebt_among: add missing match size checks Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 116/146] netfilter: ipv6: fix use-after-free Write in nf_nat_ipv6_manip_pkt Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 117/146] netfilter: use skb_to_full_sk in ip6_route_me_harder Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 118/146] tpm_tis: Move ilb_base_addr to tpm_tis_data Greg Kroah-Hartman
2018-03-14 0:42 ` Shaikh, Azhar
2018-03-13 15:24 ` [PATCH 4.15 119/146] tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd() Greg Kroah-Hartman
2018-03-14 0:42 ` Shaikh, Azhar
2018-03-13 15:24 ` [PATCH 4.15 120/146] tpm: delete the TPM_TIS_CLK_ENABLE flag Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 121/146] tpm: remove unused variables Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 122/146] tpm: only attempt to disable the LPC CLKRUN if is already enabled Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 123/146] x86/xen: Calculate __max_logical_packages on PV domains Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 124/146] scsi: qla2xxx: Fix system crash for Notify ack timeout handling Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 125/146] scsi: qla2xxx: Fix gpnid error processing Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 126/146] scsi: qla2xxx: Move session delete to driver work queue Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 127/146] scsi: qla2xxx: Skip IRQ affinity for Target QPairs Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 128/146] scsi: qla2xxx: Fix re-login for Nport Handle in use Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 129/146] scsi: qla2xxx: Retry switch command on time out Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 130/146] scsi: qla2xxx: Serialize GPNID for multiple RSCN Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 131/146] scsi: qla2xxx: Fix login state machine stuck at GPDB Greg Kroah-Hartman
2018-03-13 15:24 ` [PATCH 4.15 132/146] scsi: qla2xxx: Fix NPIV host cleanup in target mode Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 133/146] scsi: qla2xxx: Relogin to target port on a cable swap Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 134/146] scsi: qla2xxx: Fix Relogin being triggered too fast Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 135/146] scsi: qla2xxx: Fix PRLI state check Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 136/146] scsi: qla2xxx: Fix abort command deadlock due to spinlock Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 137/146] scsi: qla2xxx: Replace fcport alloc with qla2x00_alloc_fcport Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 138/146] scsi: qla2xxx: Fix scan state field for fcport Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 139/146] scsi: qla2xxx: Clear loop id after delete Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 140/146] scsi: qla2xxx: Defer processing of GS IOCB calls Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 141/146] scsi: qla2xxx: Remove aborting ELS IOCB call issued as part of timeout Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 142/146] scsi: qla2xxx: Fix system crash in qlt_plogi_ack_unref Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 143/146] scsi: qla2xxx: Fix memory leak in dual/target mode Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 144/146] NFS: Fix an incorrect type in struct nfs_direct_req Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 145/146] pNFS: Prevent the layout header refcount going to zero in pnfs_roc() Greg Kroah-Hartman
2018-03-13 15:25 ` [PATCH 4.15 146/146] NFS: Fix unstable write completion Greg Kroah-Hartman
2018-03-13 20:19 ` [PATCH 4.15 000/146] 4.15.10-stable review kernelci.org bot
2018-03-13 22:28 ` Guenter Roeck
2018-03-14 7:50 ` Greg Kroah-Hartman
2018-03-14 10:20 ` Naresh Kamboju
2018-03-14 10:51 ` Greg Kroah-Hartman
2018-03-14 10:56 ` Greg Kroah-Hartman
2018-03-14 18:53 ` Naresh Kamboju
2018-03-15 10:19 ` Greg Kroah-Hartman
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20180313152326.317882899@linuxfoundation.org \
--to=gregkh@linuxfoundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=long7573@126.com \
--cc=nstange@suse.de \
--cc=stable@vger.kernel.org \
--cc=tiwai@suse.de \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).