Changelog
linux (3.2.78-1) wheezy; urgency=medium
* New upstream stable update:
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.74
- PCI: Fix devfn for VPD access through function 0
- PCI: Use function 0 VPD for identical functions, regular VPD for others
- mac80211: fix driver RSSI event calculations
- HID: core: Avoid uninitialized buffer access
- wm831x_power: Use IRQF_ONESHOT to request threaded IRQs
- mwifiex: fix mwifiex_rdeeprom_read()
- mtd: mtdpart: fix add_mtd_partitions error path
- devres: fix a for loop bounds check
- packet: fix match_fanout_group()
- Btrfs: added helper btrfs_next_item()
- Btrfs: fix file corruption and data loss after cloning inline extents
- [x86] iommu/vt-d: Fix ATSR handling for Root-Complex integrated endpoints
- Btrfs: don't use ram_bytes for uncompressed inline items
- Btrfs: fix truncation of compressed and inlined extents
- ext4, jbd2: ensure entering into panic after recording an error in
superblock
- ACPI: Use correct IRQ when uninstalling ACPI interrupt handler
- ALSA: hda - Disable 64bit address for Creative HDA controllers
- megaraid_sas: Do not use PAGE_SIZE for max_sectors
- can: Use correct type in sizeof() in nla_put()
- mtd: blkdevs: fix potential deadlock + lockdep warnings
- crypto: algif_hash - Only export and import on sockets with data
- megaraid_sas : do not access user memory from IOCTL code
- ipv6: fix tunnel error handling
- ALSA: hda - Apply pin fixup for HP ProBook 6550b
- firewire: ohci: fix JMicron JMB38x IT context discovery
- scsi: restart list search after unlock in scsi_remove_target
- [amd64] cpu: Call verify_cpu() after having entered long mode too
- Btrfs: fix race leading to incorrect item deletion when dropping extents
- Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow
- perf: Fix inherited events vs. tracepoint filters
- scsi_sysfs: Fix queue_ramp_up_period return code
- Btrfs: fix race when listing an inode's xattrs
- net: fix a race in dst_release()
- FS-Cache: Increase reference of parent after registering, netfs success
- FS-Cache: Don't override netfs's primary_index if registering failed
- FS-Cache: Handle a write to the page immediately beyond the EOF marker
- binfmt_elf: Don't clobber passed executable's file header
- fs: make dumpable=2 require fully qualified path
- fs: if a coredump already exists, unlink and recreate with O_EXCL
- irda: precedence bug in irlmp_seq_hb_idx()
- RDS-TCP: Recover correctly from pskb_pull()/pksb_trim() failure in
rds_tcp_data_recv
- ipmr: fix possible race resulting from improper usage of IP_INC_STATS_BH()
in preemptible context.
- net: avoid NULL deref in inet_ctl_sock_destroy()
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.75
- fuse: break infinite loop in fuse_fill_write_pages()
- sctp: translate host order to network order when setting a hmacid
- ALSA: usb-audio: add packet size quirk for the Medeli DD305
- ALSA: usb-audio: prevent CH345 multiport output SysEx corruption
- ALSA: usb-audio: work around CH345 input SysEx corruption
- usb: musb: core: fix order of arguments to ulpi write callback
- ASoC: wm8962: correct addresses for HPF_C_0/1
- net: fix __netdev_update_features return on ndo_set_features failure
- FS-Cache: Add missing initialization of ret in cachefiles_write_page()
- mac80211: mesh: fix call_rcu() usage
- macvlan: fix leak in macvlan_handle_frame
- xhci: Add XHCI_INTEL_HOST quirk
- xhci: Workaround to get Intel xHCI reset working more reliably
- usblp: do not set TASK_INTERRUPTIBLE before lock
- mac: validate mac_partition is within sector
- ip6mr: call del_timer_sync() in ip6mr_free_table()
- net: ip6mr: fix static mfc/dev leaks on table destruction
- can: sja1000: clear interrupts on start
- USB: cp210x: Remove CP2110 ID from compatibility list
- USB: cdc-acm - Add IGNORE_DEVICE quirk
- USB: cdc_acm: Ignore Infineon Flash Loader utility
- fix sysvfs symlinks
- vfs: Make sendfile(2) killable even better
- vfs: Avoid softlockups with sendfile(2)
- broadcom: fix PHY_ID_BCM5481 entry in the id table
- ring-buffer: Update read stamp with first real commit on page
- ext4: Fix handling of extended tv_sec
- jbd2: Fix unreclaimed pages after truncate in data=journal mode
- nfs: if we have no valid attrs, then don't declare the attribute cache
valid
- AHCI: Fix softreset failed issue of Port Multiplier
- sata_sil: disable trim
- wan/x25: Fix use-after-free in x25_asy_open_tty()
- USB: whci-hcd: add check for dma mapping error
- usb: Use the USB_SS_MULT() macro to decode burst multiplier for log message
- dm btree: fix leak of bufio-backed block in btree_split_sibling error path
- ipv4: igmp: Allow removing groups from a removed interface
- locking: Add WARN_ON_ONCE lock assertion
- sched/core: Remove false-positive warning from wake_up_process()
- sched/core: Clear the root_domain cpumasks in init_rootdomain()
- usb: xhci: fix config fail of FS hub behind a HS hub with MTT
- ALSA: rme96: Fix unexpected volume reset after rate changes
- 9p: ->evict_inode() should kick out ->i_data, not ->i_mapping
- ipmi: move timer init to before irq is setup
- dm btree: fix bufio buffer leaks in dm_btree_del() error path
- vgaarb: fix signal handling in vga_get()
- mm, vmstat: allow WQ concurrency to discover memory reclaim doesn't make
any progress
- mm: hugetlb: call huge_pte_alloc() only if ptep is null
- snmp: Remove duplicate OUTMCAST stat increment
- tcp: initialize tp->copied_seq in case of cross SYN connection
- net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds
- net: ipmr: fix static mfc/dev leaks on table destruction
- ipv6: distinguish frag queues by device for multicast and link-local
packets
- dccp: remove unnecessary codes in ipv6.c
- ipv6: add complete rcu protection around np->opt
- ipv6: sctp: implement sctp_v6_destroy_sock()
- atl1c: Improve driver not to do order 4 GFP_ATOMIC allocation
- sctp: update the netstamp_needed counter when copying sockets
- ipv6: sctp: clone options to avoid use after free
- af_unix: Revert 'lock_interruptible' in stream receive code
- af_unix: fix a fatal race with bit fields
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.76
- sctp: start t5 timer only when peer rwnd is 0 and local state is
SHUTDOWN_PENDING
- ipv6: sctp: fix lockdep splat in sctp_v6_get_dst()
- video: fbdev: fsl: Fix kernel crash when diu_ops is not implemented
- crypto: skcipher - Copy iv from desc even for 0-len walks
- rfkill: copy the name into the rfkill struct
- ses: Fix problems with simple enclosures
- ses: fix additional element traversal bug
- tty: Fix GPF in flush_to_ldisc()
- ALSA: tlv: compute TLV_*_ITEM lengths automatically
- ALSA: tlv: add DECLARE_TLV_DB_RANGE()
- ALSA: usb-audio: Add a more accurate volume quirk for AudioQuest DragonFly
- sh_eth: fix TX buffer byte-swapping
- mISDN: fix a loop count
- ser_gigaset: fix deallocation of platform device structure
- spi: fix parent-device reference leak
- [s390*] dis: Fix handling of format specifiers
- USB: ipaq.c: fix a timeout loop
- USB: fix invalid memory access in hub_activate()
- ipv6/addrlabel: fix ip6addrlbl_get()
- ocfs2: fix BUG when calculate new backup super
- mm/memory_hotplug.c: check for missing sections in test_pages_in_a_zone()
- [mips*] Fix restart of indirect syscalls
- net/core: revert "net: fix __netdev_update_features return.." and add
comment
- genirq: Prevent chip buslock deadlock
- net: possible use after free in dst_release
- [x86] kvm: only channel 0 of the i8254 is linked to the HPET
- vmstat: allocate vmstat_wq before it is used
- cdrom: Random writing support for BD-RE media
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.77
- gspca: ov534/topro: prevent a division by 0
- media: dvb-core: Don't force CAN_INVERSION_AUTO in oneshot mode
- rc: allow rc modules to be loaded if rc-main is not a module
- SCSI: initio: remove duplicate module device table
- [x86] KVM: expose MSR_TSC_AUX to userspace
- [x86] KVM: correctly print #AC in traces
- ath9k_htc: check for underflow in ath9k_htc_rx_msg()
- mtd: nand: fix ONFI parameter page layout
- drm/radeon: call hpd_irq_event on resume
- xhci: refuse loading if nousb is used
- rtlwifi: fix memory leak for USB device
- wlcore: SPI - fix spi transfer_list
- wlcore/wl12xx: spi: fix oops on firmware load
- EDAC: Robustify workqueues destruction
- powerpc: Make value-returning atomics fully ordered
- powerpc: Make {cmp}xchg* and their atomic_ versions fully ordered
- asix: silence log message from oversize packet
- futex: Drop refcount if requeue_pi() acquired the rtmutex
- ALSA: fm801: propagate TUNER_ONLY bit when autodetected
- drm/radeon: clean up fujitsu quirks
- udf: limit the maximum number of indirect extents in a row
- USB: cp210x: add ID for ELV Marble Sound Board 1
- posix-clock: Fix return code on the poll method's error path
- [x86] LDT: Print the real LDT base address
- rtlwifi: rtl8192de: Fix incorrect module parameter descriptions
- rtlwifi: rtl8192se: Fix module parameter initialization
- rtlwifi: rtl8192ce: Fix handling of module parameters
- rtlwifi: rtl8192cu: Add missing parameter setup
- NFS: Fix attribute cache revalidation
- Input: i8042 - add Fujitsu Lifebook U745 to the nomux list
- [x86] xen: don't reset vcpu_info on a cancelled suspend
- udf: Prevent buffer overrun with multi-byte characters
- udf: Check output buffer length when converting name to CS0
- power: test_power: correctly handle empty writes
- locks: fix unlock when fcntl_setlk races with a close
- dm snapshot: fix hung bios when copy error occurs
- ipv6: tcp: add rcu locking in tcp_v6_send_synack()
- [x86] mm: Add barriers and document switch_mm()-vs-flush synchronization
- [x86] boot: Double BOOT_HEAP_SIZE to 64KB
- [x86] reboot/quirks: Add iMac10,1 to pci_reboot_dmi_table[]
- ALSA: seq: Fix missing NULL check at remove_events ioctl
- ALSA: seq: Fix race at timer setup and close
- [hppa] Fix __ARCH_SI_PREAMBLE_SIZE
- [x86] mm: Improve switch_mm() barrier comments
- ALSA: timer: Fix double unlink of active_list
- ALSA: timer: Fix race among timer ioctls
- [sparc64] fix incorrect sign extension in sys_sparc64_personality
- cifs: Ratelimit kernel log messages
- cifs: fix race between call_async() and reconnect()
- cifs_dbg() outputs an uninitialized buffer in cifs_readdir()
- dma-debug: switch check from _text to _stext
- ocfs2/dlm: ignore cleaning the migration mle that is inuse
- ALSA: timer: Harden slave timer list handling
- memcg: only free spare array when readers are done
- printk: help pr_debug and pr_devel to optimize out arguments
- crypto: af_alg - Fix socket double-free when accept fails
- ALSA: hrtimer: Fix stall by hrtimer_cancel()
- ALSA: pcm: Fix snd_pcm_hw_params struct copy in compat mode
- ALSA: seq: Fix snd_seq_call_port_info_ioctl in compat mode
- ALSA: control: Avoid kernel warnings from tlv ioctl with numid 0
- IB/qib: fix mcast detach when qp not attached
- IB/mlx4: Initialize hop_limit when creating address handle
- ocfs2: NFS hangs in __ocfs2_cluster_lock due to race with
ocfs2_unblock_lock
- crypto: algif_skcipher - Require setkey before accept(2)
- crypto: af_alg - Disallow bind/setkey/... after accept(2)
- crypto: af_alg - Add nokey compatibility path
- crypto: algif_skcipher - Add nokey compatibility path
- crypto: hash - Add crypto_ahash_has_setkey
- crypto: algif_hash - Require setkey before accept(2)
- crypto: skcipher - Add crypto_skcipher_has_setkey
- crypto: algif_skcipher - Add key check exception for cipher_null
- crypto: af_alg - Allow af_af_alg_release_parent to be called on nokey path
- crypto: algif_hash - Remove custom release parent function
- crypto: algif_skcipher - Remove custom release parent function
- crypto: af_alg - Forbid bind(2) when nokey child sockets are present
- crypto: algif_hash - Fix race condition in hash_check_key
- crypto: algif_skcipher - Fix race condition in skcipher_check_key
- crypto: algif_skcipher - Load TX SG list after waiting
- sctp: Prevent soft lockup when sctp_accept() is called during a timeout
event
- usbvision-video: fix memory leak of alt_max_pkt_size
- usbvision: fix leak of usb_dev on failure paths in usbvision_probe()
- usbvision fix overflow of interfaces array
- usbvision: fix crash on detecting device with invalid configuration
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.2.78
- [x86] KVM: vmx: fix MPX detection
- hrtimer: Handle remaining time proper for TIME_LOW_RES
- timerfd: Handle relative timers with CONFIG_TIME_LOW_RES proper
- posix-timers: Handle relative timers with CONFIG_TIME_LOW_RES proper
- itimers: Handle relative timers with CONFIG_TIME_LOW_RES proper
- usb: cdc-acm: send zero packet for intel 7260 modem
- cdc-acm:exclude Samsung phone 04e8:685d
- af_unix: fix struct pid memory leak
- pptp: fix illegal memory access caused by multiple bind()s
- sctp: allow setting SCTP_SACK_IMMEDIATELY by the application
- USB: cp210x: add ID for IAI USB to RS485 adaptor
- USB: visor: fix null-deref at probe
- USB: serial: visor: fix crash on detecting device without write_urbs
- USB: serial: option: Adding support for Telit LE922
- ALSA: seq: Fix incorrect sanity check at snd_seq_oss_synth_cleanup()
- ALSA: seq: Degrade the error message for too many opens
- USB: serial: ftdi_sio: add support for Yaesu SCU-18 cable
- PCI/AER: Flush workqueue on device remove to avoid use-after-free
- libata: disable forced PORTS_IMPL for >= AHCI 1.3
- virtio_pci: fix use after free on release
- rfkill: fix rfkill_fop_read wait_event usage
- SCSI: fix crashes in sd and sr runtime PM
- tty: Fix unsafe ldisc reference via ioctl(TIOCGETD)
- crypto: shash - Fix has_key setting
- ALSA: dummy: Disable switching timer backend via sysfs
- [x86] drm/vmwgfx: respect 'nomodeset'
- [x86] mm/pat: Avoid truncation when converting cpa->numpages to address
- crypto: algif_hash - wait for crypto_ahash_init() to complete
- [x86] intel_scu_ipcutil: underflow in scu_reg_access()
- ALSA: seq: Fix race at closing in virmidi driver
- ALSA: rawmidi: Remove kernel WARNING for NULL user-space buffer check
- ALSA: pcm: Fix potential deadlock in OSS emulation
- ALSA: seq: Fix yet another races among ALSA timer accesses
- ALSA: timer: Fix link corruption due to double start or stop
- libata: fix sff host state machine locking while polling
- ALSA: rawmidi: Make snd_rawmidi_transmit() race-free
- ALSA: rawmidi: Fix race at copying & updating the position
- ALSA: seq: Fix lockdep warnings due to double mutex locks
- Revert "xhci: don't finish a TD if we get a short-transfer event mid TD"
- [x86] usb: xhci: apply XHCI_PME_STUCK_QUIRK to Intel Broxton-M platforms
- xhci: Fix list corruption in urb dequeue at host removal
- tda1004x: only update the frontend properties if locked
- ALSA: timer: Fix leftover link at closing
- saa7134-alsa: Only frees registered sound cards
- scsi_dh_rdac: always retry MODE SELECT on command lock violation
- mm, vmstat: fix wrong WQ sleep when memory reclaim doesn't make any
progress
- ocfs2/dlm: clear refmap bit of recovery lock while doing local
recovery cleanup
- crypto: user - lock crypto_alg_list on alg dump
- klist: fix starting point removed bug in klist iterators
- ALSA: dummy: Implement timer backend switching more safely
- ALSA: timer: Fix wrong instance passed to slave callbacks
- [arm*] 8517/1: ICST: avoid arithmetic overflow in icst_hz()
- sctp: translate network order to host order when users get a hmacid
- ALSA: timer: Fix race between stop and interrupt
- ALSA: timer: Fix race at concurrent reads
- [x86] ahci: Intel DNV device IDs SATA
- [arm*] 8519/1: ICST: try other dividends than 1
- btrfs: properly set the termination value of ctx->pos in readdir
- ALSA: usb-audio: avoid freeing umidi object twice
- unix: properly account for FDs passed over unix sockets
- unix: correctly track in-flight fds in sending process user_struct
- pipe: limit the per-user amount of pages allocated in pipes
- iw_cxgb3: Fix incorrectly returning error on success
- pipe: Fix buffer offset after partially failed read
- sched: fix __sched_setscheduler() vs load balancing race
[ Ben Hutchings ]
* net: Ignore ABI changes due to "ipv6: add complete rcu protection around
np->opt", which don't appear to affect out-of-tree modules
* [rt] Update to 3.2.77-rt111:
- rtmutex: Handle non enqueued waiters gracefully
- rtmutex: Use chainwalking control enum
- dump stack: don't disable preemption during trace
- net: Make synchronize_rcu_expedited() conditional on
- sched: Introduce the trace_sched_waking tracepoint
- rtmutex: Have slowfn of rt_mutex_timed_fastlock() use
* Revert "crypto: algif_skcipher - Do not dereference ctx without socket lock"
(regression in 3.2.78)
* crypto: {blk,giv}cipher: Set has_setkey (avoids regressing cryptsetup;
see #815480)
* [rt] Fix trace function type mismatch introduced in 3.2.77-rt111
-- Ben Hutchings <email address hidden> Mon, 07 Mar 2016 02:33:29 +0000