~andyliuliming/ubuntu/+source/linux/+git/bionic:cloud_tools_common

Last commit made on 2018-07-27
Get this branch:
git clone -b cloud_tools_common https://git.launchpad.net/~andyliuliming/ubuntu/+source/linux/+git/bionic
Only Andy can upload to this branch. If you are Andy please log in for upload directions.

Branch merges

Branch information

Name:
cloud_tools_common
Repository:
lp:~andyliuliming/ubuntu/+source/linux/+git/bionic

Recent commits

d8cf59d... by Andy

Ensure that hv-kvp-daemon.service starts before cloud-init and walinuxagent.service.

084f3ff... by Kleber Sacilotto de Souza

UBUNTU: Ubuntu-4.15.0-24.26

Signed-off-by: Kleber Sacilotto de Souza <email address hidden>

f840d7f... by Greg Kroah-Hartman <email address hidden>

Revert "pinctrl: intel: Initialize GPIO properly when used through irqchip"

BugLink: http://bugs.launchpad.net/bugs/1775483

This reverts commit f5a26acf0162477af6ee4c11b4fb9cffe5d3e257

Mike writes:
 It seems that commit f5a26acf0162 ("pinctrl: intel: Initialize GPIO
 properly when used through irqchip") can cause problems on some Skylake
 systems with Sunrisepoint PCH-H. Namely on certain systems it may turn
 the backlight PWM pin from native mode to GPIO which makes the screen
 blank during boot.

 There is more information here:

   https://bugzilla.redhat.com/show_bug.cgi?id=1543769

 The actual reason is that GPIO numbering used in BIOS is using "Windows"
 numbers meaning that they don't match the hardware 1:1 and because of
 this a wrong pin (backlight PWM) is picked and switched to GPIO mode.

 There is a proper fix for this but since it has quite many dependencies
 on commits that cannot be considered stable material, I suggest we
 revert commit f5a26acf0162 from stable trees 4.9, 4.14 and 4.15 to
 prevent the backlight issue.

Reported-by: Mika Westerberg <email address hidden>
Fixes: f5a26acf0162 ("pinctrl: intel: Initialize GPIO properly when used through irqchip")
Cc: Daniel Drake <email address hidden>
Cc: Chris Chiu <email address hidden>
Cc: Linus Walleij <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

de34d16... by Johannes Wienke

UBUNTU: SAUCE: Add Lenovo V330 to the ideapad_laptop rfkill blacklist

BugLink: http://bugs.launchpad.net/bugs/1774636

This laptop doesn't have a working hardware kill switch and thus the
wifi and bluetooth might become hard blocked without an option to revert
this state at runtime.

Signed-off-by: Johannes Wienke <email address hidden>
Signed-off-by: Joseph Salisbury <email address hidden>
Acked-by: Kleber Souza <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

9bf1741... by Hans de Goede <email address hidden>

Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table

BugLink: http://bugs.launchpad.net/bugs/1775217

The Dell XPS 13 9360 uses a QCA Rome chip which needs to be reset
(and have its firmware reloaded) for bluetooth to work after
suspend/resume.

BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=1514836
Cc: <email address hidden>
Cc: Garrett LeSage <email address hidden>
Reported-and-tested-by: Garrett LeSage <email address hidden>
Signed-off-by: Hans de Goede <email address hidden>
Signed-off-by: Marcel Holtmann <email address hidden>
(cherry picked from commit 596b07a9a22656493726edf1739569102bd3e136)
Signed-off-by: Joseph Salisbury <email address hidden>
Acked-by: Khalid Elmously <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

a243ee0... by Dexuan Cui

PCI: hv: Fix a comment typo in _hv_pcifront_read_config()

BugLink: http://bugs.launchpad.net/bugs/1758378

Comment in _hv_pcifront_read_config() contains a typo, fix it.

No functional change.

Signed-off-by: Dexuan Cui <email address hidden>
[<email address hidden>: changed commit log]
Signed-off-by: Lorenzo Pieralisi <email address hidden>
Acked-by: Haiyang Zhang <email address hidden>
Cc: Vitaly Kuznetsov <email address hidden>
Cc: Stephen Hemminger <email address hidden>
Cc: K. Y. Srinivasan <email address hidden>
(cherry picked from commit df3f2159f4e4146d40b244725ce79ed921530b99)
Signed-off-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Acked-by: Colin Ian King <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

f2db6a6... by Dexuan Cui

PCI: hv: Remove the bogus test in hv_eject_device_work()

BugLink: http://bugs.launchpad.net/bugs/1758378

When kernel is executing hv_eject_device_work(), hpdev->state value must
be hv_pcichild_ejecting; any other value would consist in a bug,
therefore replace the bogus check with an explicit WARN_ON() on the
condition failure detection.

Signed-off-by: Dexuan Cui <email address hidden>
[<email address hidden>: updated commit log]
Signed-off-by: Lorenzo Pieralisi <email address hidden>
Reviewed-by: Michael Kelley <email address hidden>
Acked-by: Haiyang Zhang <email address hidden>
Cc: Vitaly Kuznetsov <email address hidden>
Cc: Jack Morgenstein <email address hidden>
Cc: Stephen Hemminger <email address hidden>
Cc: K. Y. Srinivasan <email address hidden>
(cherry picked from commit fca288c0153b2b97114b9081bc3c33c3735145b6)
Signed-off-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Acked-by: Colin Ian King <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

ca038b7... by Dexuan Cui

PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary

BugLink: http://bugs.launchpad.net/bugs/1758378

If there is pending work in hv_pci_devices_present() we just need to add
the new dr entry into the dr_list. Add a check to detect pending work
items and update the code to skip queuing work if pending work items
are detected.

Signed-off-by: Dexuan Cui <email address hidden>
[<email address hidden>: updated commit log]
Signed-off-by: Lorenzo Pieralisi <email address hidden>
Reviewed-by: Michael Kelley <email address hidden>
Acked-by: Haiyang Zhang <email address hidden>
Cc: Vitaly Kuznetsov <email address hidden>
Cc: Jack Morgenstein <email address hidden>
Cc: Stephen Hemminger <email address hidden>
Cc: K. Y. Srinivasan <email address hidden>
(cherry picked from commit 948373b3ed1bcf05a237c24675b84804315aff14)
Signed-off-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Acked-by: Colin Ian King <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

613e069... by Thadeu Lima de Souza Cascardo

fs/binfmt_misc.c: do not allow offset overflow

BugLink: https://bugs.launchpad.net/bugs/1775856

WHen registering a new binfmt_misc handler, it is possible to overflow
the offset to get a negative value, which might crash the system, or
possibly leak kernel data.

Here is a crash log when 2500000000 was used as an offset:

  BUG: unable to handle kernel paging request at ffff989cfd6edca0
  IP: load_misc_binary+0x22b/0x470 [binfmt_misc]
  PGD 1ef3e067 P4D 1ef3e067 PUD 0
  Oops: 0000 [#1] SMP NOPTI
  Modules linked in: binfmt_misc kvm_intel ppdev kvm irqbypass joydev input_leds serio_raw mac_hid parport_pc qemu_fw_cfg parpy
  CPU: 0 PID: 2499 Comm: bash Not tainted 4.15.0-22-generic #24-Ubuntu
  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.1-1 04/01/2014
  RIP: 0010:load_misc_binary+0x22b/0x470 [binfmt_misc]
  Call Trace:
    search_binary_handler+0x97/0x1d0
    do_execveat_common.isra.34+0x667/0x810
    SyS_execve+0x31/0x40
    do_syscall_64+0x73/0x130
    entry_SYSCALL_64_after_hwframe+0x3d/0xa2

Use kstrtoint instead of simple_strtoul. It will work as the code
already set the delimiter byte to '\0' and we only do it when the field
is not empty.

Tested with offsets -1, 2500000000, UINT_MAX and INT_MAX. Also tested
with examples documented at Documentation/admin-guide/binfmt-misc.rst
and other registrations from packages on Ubuntu.

Link: http://<email address hidden>
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>
Reviewed-by: Andrew Morton <email address hidden>
Cc: Alexander Viro <email address hidden>
Cc: <email address hidden>
Signed-off-by: Andrew Morton <email address hidden>
Signed-off-by: Linus Torvalds <email address hidden>
(cherry picked from commit 5cc41e099504b77014358b58567c5ea6293dd220)
Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>
Acked-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

134eb53... by Jann Horn (corp account)

compat: fix 4-byte infoleak via uninitialized struct field

Commit 3a4d44b61625 ("ntp: Move adjtimex related compat syscalls to
native counterparts") removed the memset() in compat_get_timex(). Since
then, the compat adjtimex syscall can invoke do_adjtimex() with an
uninitialized ->tai.

If do_adjtimex() doesn't write to ->tai (e.g. because the arguments are
invalid), compat_put_timex() then copies the uninitialized ->tai field
to userspace.

Fix it by adding the memset() back.

Fixes: 3a4d44b61625 ("ntp: Move adjtimex related compat syscalls to native counterparts")
Signed-off-by: Jann Horn <email address hidden>
Acked-by: Kees Cook <email address hidden>
Acked-by: Al Viro <email address hidden>
Signed-off-by: Linus Torvalds <email address hidden>

(cherry picked from commit 0a0b98734479aa5b3c671d5190e86273372cab95)
CVE-2018-11508
Signed-off-by: Andy Whitcroft <email address hidden>
Acked-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Thadeu Lima de Souza Cascardo <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>