~kmously/ubuntu/+source/linux/+git/bionic:dann_fix

Last commit made on 2018-06-12
Get this branch:
git clone -b dann_fix https://git.launchpad.net/~kmously/ubuntu/+source/linux/+git/bionic
Only Khaled El Mously can upload to this branch. If you are Khaled El Mously please log in for upload directions.

Branch merges

Branch information

Recent commits

f840d7f... by Greg Kroah-Hartman <email address hidden>

Revert "pinctrl: intel: Initialize GPIO properly when used through irqchip"

BugLink: http://bugs.launchpad.net/bugs/1775483

This reverts commit f5a26acf0162477af6ee4c11b4fb9cffe5d3e257

Mike writes:
 It seems that commit f5a26acf0162 ("pinctrl: intel: Initialize GPIO
 properly when used through irqchip") can cause problems on some Skylake
 systems with Sunrisepoint PCH-H. Namely on certain systems it may turn
 the backlight PWM pin from native mode to GPIO which makes the screen
 blank during boot.

 There is more information here:

   https://bugzilla.redhat.com/show_bug.cgi?id=1543769

 The actual reason is that GPIO numbering used in BIOS is using "Windows"
 numbers meaning that they don't match the hardware 1:1 and because of
 this a wrong pin (backlight PWM) is picked and switched to GPIO mode.

 There is a proper fix for this but since it has quite many dependencies
 on commits that cannot be considered stable material, I suggest we
 revert commit f5a26acf0162 from stable trees 4.9, 4.14 and 4.15 to
 prevent the backlight issue.

Reported-by: Mika Westerberg <email address hidden>
Fixes: f5a26acf0162 ("pinctrl: intel: Initialize GPIO properly when used through irqchip")
Cc: Daniel Drake <email address hidden>
Cc: Chris Chiu <email address hidden>
Cc: Linus Walleij <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

de34d16... by Johannes Wienke

UBUNTU: SAUCE: Add Lenovo V330 to the ideapad_laptop rfkill blacklist

BugLink: http://bugs.launchpad.net/bugs/1774636

This laptop doesn't have a working hardware kill switch and thus the
wifi and bluetooth might become hard blocked without an option to revert
this state at runtime.

Signed-off-by: Johannes Wienke <email address hidden>
Signed-off-by: Joseph Salisbury <email address hidden>
Acked-by: Kleber Souza <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

9bf1741... by Hans de Goede <email address hidden>

Bluetooth: btusb: Add Dell XPS 13 9360 to btusb_needs_reset_resume_table

BugLink: http://bugs.launchpad.net/bugs/1775217

The Dell XPS 13 9360 uses a QCA Rome chip which needs to be reset
(and have its firmware reloaded) for bluetooth to work after
suspend/resume.

BugLink: https://bugzilla.redhat.com/show_bug.cgi?id=1514836
Cc: <email address hidden>
Cc: Garrett LeSage <email address hidden>
Reported-and-tested-by: Garrett LeSage <email address hidden>
Signed-off-by: Hans de Goede <email address hidden>
Signed-off-by: Marcel Holtmann <email address hidden>
(cherry picked from commit 596b07a9a22656493726edf1739569102bd3e136)
Signed-off-by: Joseph Salisbury <email address hidden>
Acked-by: Khalid Elmously <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

a243ee0... by Dexuan Cui

PCI: hv: Fix a comment typo in _hv_pcifront_read_config()

BugLink: http://bugs.launchpad.net/bugs/1758378

Comment in _hv_pcifront_read_config() contains a typo, fix it.

No functional change.

Signed-off-by: Dexuan Cui <email address hidden>
[<email address hidden>: changed commit log]
Signed-off-by: Lorenzo Pieralisi <email address hidden>
Acked-by: Haiyang Zhang <email address hidden>
Cc: Vitaly Kuznetsov <email address hidden>
Cc: Stephen Hemminger <email address hidden>
Cc: K. Y. Srinivasan <email address hidden>
(cherry picked from commit df3f2159f4e4146d40b244725ce79ed921530b99)
Signed-off-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Acked-by: Colin Ian King <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

f2db6a6... by Dexuan Cui

PCI: hv: Remove the bogus test in hv_eject_device_work()

BugLink: http://bugs.launchpad.net/bugs/1758378

When kernel is executing hv_eject_device_work(), hpdev->state value must
be hv_pcichild_ejecting; any other value would consist in a bug,
therefore replace the bogus check with an explicit WARN_ON() on the
condition failure detection.

Signed-off-by: Dexuan Cui <email address hidden>
[<email address hidden>: updated commit log]
Signed-off-by: Lorenzo Pieralisi <email address hidden>
Reviewed-by: Michael Kelley <email address hidden>
Acked-by: Haiyang Zhang <email address hidden>
Cc: Vitaly Kuznetsov <email address hidden>
Cc: Jack Morgenstein <email address hidden>
Cc: Stephen Hemminger <email address hidden>
Cc: K. Y. Srinivasan <email address hidden>
(cherry picked from commit fca288c0153b2b97114b9081bc3c33c3735145b6)
Signed-off-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Acked-by: Colin Ian King <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

ca038b7... by Dexuan Cui

PCI: hv: Only queue new work items in hv_pci_devices_present() if necessary

BugLink: http://bugs.launchpad.net/bugs/1758378

If there is pending work in hv_pci_devices_present() we just need to add
the new dr entry into the dr_list. Add a check to detect pending work
items and update the code to skip queuing work if pending work items
are detected.

Signed-off-by: Dexuan Cui <email address hidden>
[<email address hidden>: updated commit log]
Signed-off-by: Lorenzo Pieralisi <email address hidden>
Reviewed-by: Michael Kelley <email address hidden>
Acked-by: Haiyang Zhang <email address hidden>
Cc: Vitaly Kuznetsov <email address hidden>
Cc: Jack Morgenstein <email address hidden>
Cc: Stephen Hemminger <email address hidden>
Cc: K. Y. Srinivasan <email address hidden>
(cherry picked from commit 948373b3ed1bcf05a237c24675b84804315aff14)
Signed-off-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Acked-by: Colin Ian King <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

613e069... by Thadeu Lima de Souza Cascardo

fs/binfmt_misc.c: do not allow offset overflow

BugLink: https://bugs.launchpad.net/bugs/1775856

WHen registering a new binfmt_misc handler, it is possible to overflow
the offset to get a negative value, which might crash the system, or
possibly leak kernel data.

Here is a crash log when 2500000000 was used as an offset:

  BUG: unable to handle kernel paging request at ffff989cfd6edca0
  IP: load_misc_binary+0x22b/0x470 [binfmt_misc]
  PGD 1ef3e067 P4D 1ef3e067 PUD 0
  Oops: 0000 [#1] SMP NOPTI
  Modules linked in: binfmt_misc kvm_intel ppdev kvm irqbypass joydev input_leds serio_raw mac_hid parport_pc qemu_fw_cfg parpy
  CPU: 0 PID: 2499 Comm: bash Not tainted 4.15.0-22-generic #24-Ubuntu
  Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.1-1 04/01/2014
  RIP: 0010:load_misc_binary+0x22b/0x470 [binfmt_misc]
  Call Trace:
    search_binary_handler+0x97/0x1d0
    do_execveat_common.isra.34+0x667/0x810
    SyS_execve+0x31/0x40
    do_syscall_64+0x73/0x130
    entry_SYSCALL_64_after_hwframe+0x3d/0xa2

Use kstrtoint instead of simple_strtoul. It will work as the code
already set the delimiter byte to '\0' and we only do it when the field
is not empty.

Tested with offsets -1, 2500000000, UINT_MAX and INT_MAX. Also tested
with examples documented at Documentation/admin-guide/binfmt-misc.rst
and other registrations from packages on Ubuntu.

Link: http://<email address hidden>
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>
Reviewed-by: Andrew Morton <email address hidden>
Cc: Alexander Viro <email address hidden>
Cc: <email address hidden>
Signed-off-by: Andrew Morton <email address hidden>
Signed-off-by: Linus Torvalds <email address hidden>
(cherry picked from commit 5cc41e099504b77014358b58567c5ea6293dd220)
Signed-off-by: Thadeu Lima de Souza Cascardo <email address hidden>
Acked-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

134eb53... by Jann Horn (corp account)

compat: fix 4-byte infoleak via uninitialized struct field

Commit 3a4d44b61625 ("ntp: Move adjtimex related compat syscalls to
native counterparts") removed the memset() in compat_get_timex(). Since
then, the compat adjtimex syscall can invoke do_adjtimex() with an
uninitialized ->tai.

If do_adjtimex() doesn't write to ->tai (e.g. because the arguments are
invalid), compat_put_timex() then copies the uninitialized ->tai field
to userspace.

Fix it by adding the memset() back.

Fixes: 3a4d44b61625 ("ntp: Move adjtimex related compat syscalls to native counterparts")
Signed-off-by: Jann Horn <email address hidden>
Acked-by: Kees Cook <email address hidden>
Acked-by: Al Viro <email address hidden>
Signed-off-by: Linus Torvalds <email address hidden>

(cherry picked from commit 0a0b98734479aa5b3c671d5190e86273372cab95)
CVE-2018-11508
Signed-off-by: Andy Whitcroft <email address hidden>
Acked-by: Marcelo Henrique Cerri <email address hidden>
Acked-by: Thadeu Lima de Souza Cascardo <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

f654922... by Jassi Brar

net: netsec: enable tx-irq during open callback

BugLink: https://bugs.launchpad.net/bugs/1775884

Enable TX-irq as well during ndo_open() as we can not count upon
RX to arrive early enough to trigger the napi. This patch is critical
for installation over network.

Fixes: 533dd11a12f6 ("net: socionext: Add Synquacer NetSec driver")
Signed-off-by: Jassi Brar <email address hidden>
Signed-off-by: David S. Miller <email address hidden>
(cherry picked from commit c009f413b79de526a355b6eefa4f900b6c45d5f4)
Signed-off-by: dann frazier <email address hidden>
Acked-by: Kleber Souza <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

78934bc... by Masahisa KOJIMA <email address hidden>

net: socionext: reset hardware in ndo_stop

BugLink: https://bugs.launchpad.net/bugs/1775884

When the interface is down, head/tail of the descriptor
ring address is set to 0 in netsec_netdev_stop().
But netsec hardware still keeps the previous descriptor
ring address, so there is inconsistency between driver
and hardware after interface is up at a later time.
To address this inconsistency, add netsec_reset_hardware()
when the interface is down.

In addition, to minimize the reset process,
add flag to decide whether driver loads the netsec microcode.
Even if driver resets the netsec hardware, netsec microcode
keeps resident on RAM, so it is ok we only load the microcode
at initialization.

This patch is critical for installation over network.

Signed-off-by: Masahisa KOJIMA <email address hidden>
Fixes: 533dd11a12f6 ("net: socionext: Add Synquacer NetSec driver")
Signed-off-by: Jassi Brar <email address hidden>
Signed-off-by: David S. Miller <email address hidden>
(cherry picked from commit 9a00b697ce31e38c670a3042cf9f1e9cf28dabb5)
Signed-off-by: dann frazier <email address hidden>
Acked-by: Kleber Souza <email address hidden>
Acked-by: Stefan Bader <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>