linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com>
To: linux-kernel@vger.kernel.org, stable@vger.kernel.org,
	kernel-team@lists.ubuntu.com
Cc: Julius Werner <jwerner@chromium.org>,
	Sarah Sharp <sarah.a.sharp@linux.intel.com>,
	Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com>
Subject: [PATCH 023/222] xhci: fix null-pointer dereference when destroying half-built segment rings
Date: Wed, 16 Jan 2013 13:53:43 -0200	[thread overview]
Message-ID: <1358351822-7675-24-git-send-email-herton.krzesinski@canonical.com> (raw)
In-Reply-To: <1358351822-7675-1-git-send-email-herton.krzesinski@canonical.com>

3.5.7.3 -stable review patch.  If anyone has any objections, please let me know.

------------------

From: Julius Werner <jwerner@chromium.org>

commit 68e5254adb88bede68285f11fb442a4d34fb550c upstream.

xhci_alloc_segments_for_ring() builds a list of xhci_segments and links
the tail to head at the end (forming a ring). When it bails out for OOM
reasons half-way through, it tries to destroy its half-built list with
xhci_free_segments_for_ring(), even though it is not a ring yet. This
causes a null-pointer dereference upon hitting the last element.

Furthermore, one of its callers (xhci_ring_alloc()) mistakenly believes
the output parameters to be valid upon this kind of OOM failure, and
calls xhci_ring_free() on them. Since the (incomplete) list/ring should
already be destroyed in that case, this would lead to a use after free.

This patch fixes those issues by having xhci_alloc_segments_for_ring()
destroy its half-built, non-circular list manually and destroying the
invalid struct xhci_ring in xhci_ring_alloc() with a plain kfree().

This patch should be backported to kernels as old as 2.6.31, that
contains the commit 0ebbab37422315a5d0cb29792271085bafdf38c0 "USB: xhci:
Ring allocation and initialization."

A separate patch will need to be developed for kernels older than 3.4,
since the ring allocation code was refactored in that kernel.

Signed-off-by: Julius Werner <jwerner@chromium.org>
Signed-off-by: Sarah Sharp <sarah.a.sharp@linux.intel.com>
Signed-off-by: Herton Ronaldo Krzesinski <herton.krzesinski@canonical.com>
---
 drivers/usb/host/xhci-mem.c |    9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/drivers/usb/host/xhci-mem.c b/drivers/usb/host/xhci-mem.c
index 487bc08..fb51c70 100644
--- a/drivers/usb/host/xhci-mem.c
+++ b/drivers/usb/host/xhci-mem.c
@@ -205,7 +205,12 @@ static int xhci_alloc_segments_for_ring(struct xhci_hcd *xhci,
 
 		next = xhci_segment_alloc(xhci, cycle_state, flags);
 		if (!next) {
-			xhci_free_segments_for_ring(xhci, *first);
+			prev = *first;
+			while (prev) {
+				next = prev->next;
+				xhci_segment_free(xhci, prev);
+				prev = next;
+			}
 			return -ENOMEM;
 		}
 		xhci_link_segments(xhci, prev, next, type);
@@ -258,7 +263,7 @@ static struct xhci_ring *xhci_ring_alloc(struct xhci_hcd *xhci,
 	return ring;
 
 fail:
-	xhci_ring_free(xhci, ring);
+	kfree(ring);
 	return NULL;
 }
 
-- 
1.7.9.5


  parent reply	other threads:[~2013-01-16 15:58 UTC|newest]

Thread overview: 228+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-01-16 15:53 [ 3.5.y.z extended stable ] Linux 3.5.7.3 stable review Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 001/222] KVM: PPC: e500: fix allocation size error on g2h_tlb1_map Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 002/222] s390/kvm: dont announce RRBM support Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 003/222] cgroup: cgroup_subsys->fork() should be called after the task is added to css_set Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 004/222] freezer: add missing mb's to freezer_count() and freezer_should_skip() Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 005/222] ath9k_hw: Enable hw PLL power save for AR9462 Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 006/222] usb: gadget: tcm_usb_gadget: NULL terminate the FS descriptor list Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 007/222] usb: gadget: network: fix bind() error path Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 008/222] usb: gadget: midi: free hs descriptors Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 009/222] usb: gadget: phonet: free requests in pn_bind()'s error path Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 010/222] usb: gadget: uvc: fix error path in uvc_function_bind() Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 011/222] x86: hpet: Fix masking of MSI interrupts Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 012/222] usb: musb: cppi_dma: export cppi_interrupt() Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 013/222] iscsi-target: Fix bug in handling of ExpStatSN ACK during u32 wrap-around Herton Ronaldo Krzesinski
2013-01-18  3:01   ` Ben Hutchings
2013-01-18  3:40     ` Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 014/222] iscsi-target: Always send a response before terminating iSCSI connection Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 015/222] SUNRPC: Fix validity issues with rpc_pipefs sb->s_fs_info Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 016/222] ext4: fix memory leak in ext4_xattr_set_acl()'s error path Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 017/222] ARM: mm: use pteval_t to represent page protection values Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 018/222] perf test: fix a build error on builtin-test Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 019/222] USB: fix endpoint-disabling for failed config changes Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 020/222] genirq: Always force thread affinity Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 021/222] xhci: Fix conditional check in bandwidth calculation Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 022/222] xHCI: Fix TD Size calculation on 1.0 hosts Herton Ronaldo Krzesinski
2013-01-16 15:53 ` Herton Ronaldo Krzesinski [this message]
2013-01-16 15:53 ` [PATCH 024/222] xhci: Extend Fresco Logic MSI quirk Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 025/222] usb: host: xhci: Stricter conditional for Z1 system models for Compliance Mode Patch Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 026/222] Staging: bcm: Add two products and remove an existing product Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 027/222] rcu: Fix batch-limit size problem Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 028/222] ext4: init pagevec in ext4_da_block_invalidatepages Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 029/222] powerpc: Fix CONFIG_RELOCATABLE=y CONFIG_CRASH_DUMP=n build Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 030/222] ftrace: Clear bits properly in reset_iter_read() Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 031/222] cdc-acm: implement TIOCSSERIAL to avoid blocking close(2) Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 032/222] ACPI / battery: Correct battery capacity values on Thinkpads Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 033/222] cgroup: remove incorrect dget/dput() pair in cgroup_create_dir() Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 034/222] Bluetooth: Add support for BCM20702A0 [04ca, 2003] Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 035/222] Bluetooth: Add support for BCM20702A0 [0b05, 17b5] Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 036/222] regulator: wm831x: Set the new rather than old value for DVS VSEL Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 037/222] drm: fix documentation for drm_crtc_set_mode() Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 038/222] mfd: Only unregister platform devices allocated by the mfd core Herton Ronaldo Krzesinski
2013-01-16 15:53 ` [PATCH 039/222] NFS: Add sequence_priviliged_ops for nfs4_proc_sequence() Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 040/222] drm/i915: make the panel fitter work on pipes B and C on IVB Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 041/222] USB: add new zte 3g-dongle's pid to option.c Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 042/222] ACPI / PM: Add Sony Vaio VPCEB1S1E to nonvs blacklist Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 043/222] mfd: wm8994: Add support for WM1811 rev E Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 044/222] Revert "8139cp: revert "set ring address before enabling receiver"" Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 045/222] 8139cp: set ring address after enabling C+ mode Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 046/222] USB: OHCI: workaround for hardware bug: retired TDs not added to the Done Queue Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 047/222] USB: option: blacklist network interface on Huawei E173 Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 048/222] USB: cp210x: add Virtenio Preon32 device id Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 049/222] usb: ftdi_sio: fixup BeagleBone A5+ quirk Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 050/222] USB: ftdi_sio: Add support for Newport AGILIS motor drivers Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 051/222] qla2xxx: Look up LUN for abort requests Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 052/222] iscsit: use GFP_ATOMIC under spin lock Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 053/222] ASoC: wm8994: Use the same DCS codes for all WM1811 variants Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 054/222] sata_promise: fix hardreset lockdep error Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 055/222] xhci: Add Lynx Point LP to list of Intel switchable hosts Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 056/222] USB: mark uas driver as BROKEN Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 057/222] can: Do not call dev_put if restart timer is running upon close Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 058/222] mlx4_core: Fix potential deadlock in mlx4_eq_int() Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 059/222] xfs: fix stray dquot unlock when reclaiming dquots Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 060/222] KVM: Fix user memslot overlap check Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 061/222] ext4: fix possible use after free with metadata csum Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 062/222] prevent stack buffer overflow in host_reset Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 063/222] mvsas: fix undefined bit shift Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 064/222] qla2xxx: Test and clear FCPORT_UPDATE_NEEDED atomically Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 065/222] ACPI: do acpisleep dmi check when CONFIG_ACPI_SLEEP is set Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 066/222] ACPI / PNP: Do not crash due to stale pointer use during system resume Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 067/222] ring-buffer: Fix NULL pointer if rb_set_head_page() fails Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 068/222] firewire: net: Fix handling of fragmented multicast/broadcast packets Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 069/222] HID: Add Apple wireless keyboard 2011 ANSI to special driver list Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 070/222] libata: set dma_mode to 0xff in reset Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 071/222] s390/cio: fix pgid reserved check Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 072/222] Bluetooth: Add missing lock nesting notation Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 073/222] Bluetooth: cancel power_on work when unregistering the device Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 074/222] Input: wacom - fix touch support for Bamboo Fun CTH-461 Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 075/222] ALSA: usb-audio: Avoid autopm calls after disconnection Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 076/222] ALSA: usb-audio: Fix missing autopm for MIDI input Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 077/222] ACPI / video: ignore BIOS initial backlight value for HP Folio 13-2000 Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 078/222] mac80211: introduce IEEE80211_HW_TEARDOWN_AGGR_ON_BAR_FAIL Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 079/222] Revert: "rt2x00: Don't let mac80211 send a BAR when an AMPDU subframe fails" Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 080/222] x86,AMD: Power driver support for AMD's family 16h processors Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 081/222] target/file: Fix 32-bit highmem breakage for SGL -> iovec mapping Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 082/222] drm/i915: Close race between processing unpin task and queueing the flip Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 083/222] cgroup_rm_file: don't delete the uncreated files Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 084/222] pnpacpi: fix incorrect TEST_ALPHA() test Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 085/222] drm/radeon: stop page faults from hanging the system (v2) Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 086/222] drm/radeon/dce32+: use fractional fb dividers for high clocks Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 087/222] drm/radeon: fix eDP clk and lane setup for scaled modes Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 088/222] regmap: debugfs: Avoid overflows for very small reads Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 089/222] Revert "ath9k_hw: Update AR9003 high_power tx gain table" Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 090/222] b43legacy: Fix firmware loading when driver is built into the kernel Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 091/222] ath9k: ar9003: fix OTP register offsets for AR9340 Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 092/222] bcma: mips: fix clearing device IRQ Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 093/222] ath9k_hw: Fix signal strength / channel noise reporting Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 094/222] ath5k: fix tx path skb leaks Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 095/222] b43: " Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 096/222] drm/i915: drop buggy write to FDI_RX_CHICKEN register Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 097/222] drm/i915: disable cpt phase pointer fdi rx workaround Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 098/222] iwlwifi: silently ignore fw flaws in Tx path Herton Ronaldo Krzesinski
2013-01-16 15:54 ` [PATCH 099/222] iwlwifi: don't handle masked interrupt Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 100/222] mm: dmapool: use provided gfp flags for all dma_alloc_coherent() calls Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 101/222] nfs: don't extend writes to cover entire page if pagecache is invalid Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 102/222] solos-pci: fix double-free of TX skb in DMA mode Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 103/222] ALSA: hda - Add stereo-dmic fixup for Acer Aspire One 522 Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 104/222] nfs: don't zero out the rest of the page if we hit the EOF on a DIO READ Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 105/222] drm/radeon: fix amd afusion gpu setup aka sumo v2 Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 106/222] NFS: avoid NULL dereference in nfs_destroy_server Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 107/222] sbp-target: fix error path in sbp_make_tpg() Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 108/222] target/tcm_fc: fix the lockdep warning due to inconsistent lock state Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 109/222] MIPS: Fix poweroff failure when HOTPLUG_CPU configured Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 110/222] fix Null pointer dereference on disk error Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 111/222] NFS: Fix calls to drop_nlink() Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 112/222] Input: walkera0701 - fix crash on startup Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 113/222] SUNRPC: continue run over clients list on PipeFS event instead of break Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 114/222] proc: pid/status: show all supplementary groups Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 115/222] CRIS: fix I/O macros Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 116/222] virtio: force vring descriptors to be allocated from lowmem Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 117/222] nfs: fix wrong object type in lockowner_slab Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 118/222] jffs2: hold erase_completion_lock on exit Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 119/222] nfsd: fix v4 reply caching Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 120/222] mtd cs553x_nand: Initialise ecc.strength before nand_scan() Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 121/222] kbuild: Do not remove vmlinux when cleaning external module Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 122/222] ASoC: sigmadsp: Fix endianness conversion issue Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 123/222] nfsd: avoid permission checks on EXCLUSIVE_CREATE replay Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 124/222] x86, 8042: Enable A20 using KBC to fix S3 resume on some MSI laptops Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 125/222] mtd: nand: gpmi: reset BCH earlier, too, to avoid NAND startup problems Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 126/222] ALSA: hda - Fix pin configuration of HP Pavilion dv7 Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 127/222] ALSA: hda - Always turn on pins for HDMI/DP Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 128/222] OMAP: board-files: fix i2c_bus for tfp410 Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 129/222] i2400m: add Intel 6150 device IDs Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 130/222] ALSA: hda - Fix the wrong pincaps set in ALC861VD dallas/hp fixup Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 131/222] nfsd4: fix oops on unusual readlike compound Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 132/222] qmi_wwan/cdc_ether: add Dell Wireless 5800 (Novatel E362) USB IDs Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 133/222] ARM: missing ->mmap_sem around find_vma() in swp_emulate.c Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 134/222] ARM: 7607/1: realview: fix private peripheral memory base for EB rev. B boards Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 135/222] cifs: don't compare uniqueids in cifs_prime_dcache unless server inode numbers are in use Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 136/222] intel-iommu: Free old page tables before creating superpage Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 137/222] vfs: d_obtain_alias() needs to use "/" as default name Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 138/222] mm: fix calculation of dirtyable memory Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 139/222] exec: do not leave bprm->interp on stack Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 140/222] SGI-XP: handle non-fatal traps Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 141/222] dm persistent data: rename node to btree_node Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 142/222] dm ioctl: prevent unsafe change to dm_ioctl data_size Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 143/222] sis900: fix sis900_set_mode call parameters Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 144/222] ne2000: add the right platform device Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 145/222] irda: sir_dev: Fix copy/paste typo Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 146/222] ipv4: ip_check_defrag must not modify skb before unsharing Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 147/222] inet_diag: fix oops for IPv4 AF_INET6 TCP SYN-RECV state Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 148/222] inet_diag: validate byte code to prevent oops in inet_diag_bc_run() Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 149/222] inet_diag: avoid unsafe and nonsensical prefix matches " Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 150/222] inet_diag: validate port comparison byte code to prevent unsafe reads Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 151/222] usb/ipheth: Add iPhone 5 support Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 152/222] bonding: Bonding driver does not consider the gso_max_size/gso_max_segs setting of slave devices Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 153/222] bonding: fix race condition in bonding_store_slaves_active Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 154/222] sctp: fix memory leak in sctp_datamsg_from_user() when copy from user space fails Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 155/222] sctp: fix -ENOMEM result with invalid user space pointer in sendto() syscall Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 156/222] udf: fix memory leak while allocating blocks during write Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 157/222] udf: don't increment lenExtents while writing to a hole Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 158/222] staging: vt6656: [BUG] out of bound array reference in RFbSetPower Herton Ronaldo Krzesinski
2013-01-16 15:55 ` [PATCH 159/222] staging: vt6656: 64 bit fixes: use u32 for QWORD definition Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 160/222] staging: vt6656: 64 bit fixes : correct all type sizes Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 161/222] staging: vt6656: 64 bit fixes: fix long warning messages Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 162/222] staging: vt6656: 64bit fixes: key.c/h change unsigned long to u32 Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 163/222] staging: vt6656: 64bit fixes: vCommandTimerWait change calculation of timer Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 164/222] drm/i915: Flush outstanding unpin tasks before pageflipping Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 165/222] ext4: fix extent tree corruption caused by hole punch Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 166/222] ext4: check dioread_nolock on remount Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 167/222] drm/i915: fix flags in dma buf exporting Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 168/222] jbd2: fix assertion failure in jbd2_journal_flush() Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 169/222] drm/radeon: add WAIT_UNTIL to evergreen VM safe reg list Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 170/222] hwmon: (lm73} Detect and report i2c bus errors Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 171/222] ext4: do not try to write superblock on ro remount w/o journal Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 172/222] PCI: Work around Stratus ftServer broken PCIe hierarchy (fix DMI check) Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 173/222] PCI: Reduce Ricoh 0xe822 SD card reader base clock frequency to 50MHz Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 174/222] mm: Fix PageHead when !CONFIG_PAGEFLAGS_EXTENDED Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 175/222] tmpfs mempolicy: fix /proc/mounts corrupting memory Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 176/222] epoll: prevent missed events on EPOLL_CTL_MOD Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 177/222] drm/i915: add some barriers when changing DIPs Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 178/222] drm/i915: make sure we write all the DIP data bytes Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 179/222] RDMA/nes: Fix for terminate timer crash Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 180/222] RDMA/nes: Fix for crash when registering zero length MR for CQ Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 181/222] sparc: huge_ptep_set_* functions need to call set_huge_pte_at() Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 182/222] batman-adv: fix random jitter calculation Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 183/222] inet: Fix kmemleak in tcp_v4/6_syn_recv_sock and dccp_v4/6_request_recv_sock Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 184/222] net: sched: integer overflow fix Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 185/222] tcp: fix MSG_SENDPAGE_NOTLAST logic Herton Ronaldo Krzesinski
2013-02-01 17:40   ` Ben Hutchings
2013-02-12  7:36     ` David Miller
2013-01-16 15:56 ` [PATCH 186/222] tcp: implement RFC 5961 3.2 Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 187/222] tcp: implement RFC 5961 4.2 Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 188/222] tcp: refine SYN handling in tcp_validate_incoming Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 189/222] tcp: tcp_replace_ts_recent() should not be called from tcp_validate_incoming() Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 190/222] tcp: RFC 5961 5.2 Blind Data Injection Attack Mitigation Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 191/222] ACPI : do not use Lid and Sleep button for S5 wakeup Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 192/222] aoe: do not call bdi_init after blk_alloc_queue Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 193/222] Input: sentelic - only report position of first finger as ST coordinates Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 194/222] Input: gpio_keys - defer probing if GPIO probing is deferred Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 195/222] cifs: adjust sequence number downward after signing NT_CANCEL request Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 196/222] rtlwifi: fix incorrect use of usb_alloc_coherent with usb_control_msg Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 197/222] p54usb: add USB ID for T-Com Sinus 154 data II Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 198/222] ath9k_hw: Fix RX gain initvals for AR9485 Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 199/222] p54usb: add USBIDs for two more p54usb devices Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 200/222] powerpc/vdso: Remove redundant locking in update_vsyscall_tz() Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 201/222] powerpc: Add missing NULL terminator to avoid boot panic on PPC40x Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 202/222] drm/radeon: add connector table for Mac G4 Silver Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 203/222] drm/radeon: Properly handle DDC probe for DP bridges Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 204/222] drm/nouveau: fix init with agpgart-uninorth Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 205/222] video: mxsfb: fix crash when unblanking the display Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 206/222] nfs: fix null checking in nfs_get_option_str() Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 207/222] SUNRPC: Ensure that we free the rpc_task after cleanups are done Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 208/222] NFS: Ensure that we free the rpc_task after read and write " Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 209/222] ACPI / scan: Do not use dummy HID for system bus ACPI nodes Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 210/222] mm: limit mmu_gather batching to fix soft lockups on !CONFIG_PREEMPT Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 211/222] drivers/rtc/rtc-vt8500.c: correct handling of CR_24H bitfield Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 212/222] drivers/rtc/rtc-vt8500.c: fix handling of data passed in struct rtc_time Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 213/222] printk: fix incorrect length from print_time() when seconds > 99999 Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 214/222] PM: Move disabling/enabling runtime PM to late suspend/early resume Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 215/222] signals: sys_ssetmask() uses uninitialized newmask Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 216/222] ext4: release buffer in failed path in dx_probe() Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 217/222] ALSA: hda - add mute LED for HP Pavilion 17 (Realtek codec) Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 218/222] drm/prime: drop reference on imported dma-buf come from gem Herton Ronaldo Krzesinski
2013-01-16 15:56 ` [PATCH 219/222] i915: ensure that VGA plane is disabled Herton Ronaldo Krzesinski
2013-01-16 15:57 ` [PATCH 220/222] [SCSI] mvsas: Fix oops when ata commond timeout Herton Ronaldo Krzesinski
2013-01-16 15:57 ` [PATCH 221/222] Revert "drm/i915: no lvds quirk for Zotac ZDBOX SD ID12/ID13" Herton Ronaldo Krzesinski
2013-01-16 15:57 ` [PATCH 222/222] staging: comedi: Kconfig: COMEDI_NI_AT_A2150 should select COMEDI_FC Herton Ronaldo Krzesinski
2013-01-16 16:25 ` [ 3.5.y.z extended stable ] Linux 3.5.7.3 stable review Herton Ronaldo Krzesinski

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1358351822-7675-24-git-send-email-herton.krzesinski@canonical.com \
    --to=herton.krzesinski@canonical.com \
    --cc=jwerner@chromium.org \
    --cc=kernel-team@lists.ubuntu.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=sarah.a.sharp@linux.intel.com \
    --cc=stable@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).