~tyhicks/ubuntu/+source/linux/+git/bionic:spectrersb

Last commit made on 2018-08-28
Get this branch:
git clone -b spectrersb https://git.launchpad.net/~tyhicks/ubuntu/+source/linux/+git/bionic
Only Tyler Hicks can upload to this branch. If you are Tyler Hicks please log in for upload directions.

Branch merges

Branch information

Name:
spectrersb
Repository:
lp:~tyhicks/ubuntu/+source/linux/+git/bionic

Recent commits

ce1585d... by Tyler Hicks

Bump version

87c37bc... by Jiri Kosina <email address hidden>

x86/speculation: Protect against userspace-userspace spectreRSB

The article "Spectre Returns! Speculation Attacks using the Return Stack
Buffer" [1] describes two new (sub-)variants of spectrev2-like attacks,
making use solely of the RSB contents even on CPUs that don't fallback to
BTB on RSB underflow (Skylake+).

Mitigate userspace-userspace attacks by always unconditionally filling RSB on
context switch when the generic spectrev2 mitigation has been enabled.

[1] https://arxiv.org/pdf/1807.07940.pdf

Signed-off-by: Jiri Kosina <email address hidden>
Signed-off-by: Thomas Gleixner <email address hidden>
Reviewed-by: Josh Poimboeuf <email address hidden>
Acked-by: Tim Chen <email address hidden>
Cc: Konrad Rzeszutek Wilk <email address hidden>
Cc: Borislav Petkov <email address hidden>
Cc: David Woodhouse <email address hidden>
Cc: Peter Zijlstra <email address hidden>
Cc: Linus Torvalds <email address hidden>
Cc: <email address hidden>
Link: https://<email address hidden>

CVE-2017-5715 (SpectreRSB sub-variant)

(cherry picked from commit fdf82a7856b32d905c39afc85e34364491e46346)
Signed-off-by: Tyler Hicks <email address hidden>

ffaad0a... by Kleber Sacilotto de Souza

UBUNTU: Ubuntu-4.15.0-34.37

Signed-off-by: Kleber Sacilotto de Souza <email address hidden>

8a5b876... by Heiner Kallweit

soc: amlogic: meson-gx-pwrc-vpu: fix error on shutdown when domain is powered off

BugLink: http://bugs.launchpad.net/bugs/1786352

[ Upstream commit 87f88732d25e6175cb4faa8070658f604660d720 ]

When operating the system headless headless, the domain is never
powered on, leaving the clocks disabled. The shutdown function then
tries to disable the already disabled clocks, resulting in errors.
Therefore call meson_gx_pwrc_vpu_power_off() only if domain is
powered on.
This patch fixes the described issue on my system (Odorid-C2).

Fixes: 339cd0ea0822 "soc: amlogic: meson-gx-pwrc-vpu: fix power-off when powered by bootloader"
Signed-off-by: Heiner Kallweit <email address hidden>
Reviewed-by: Neil Armstrong <email address hidden>
Signed-off-by: Kevin Hilman <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

7ac005e... by David Ahern

selftests: Add FIB onlink tests

BugLink: http://bugs.launchpad.net/bugs/1786352

[ Upstream commit 153e1b84f477f716bc3f81e6cfae1a3d941fc7ec ]

Add test cases verifying FIB onlink commands work as expected in
various conditions - IPv4, IPv6, main table, and VRF.

Signed-off-by: David Ahern <email address hidden>
Signed-off-by: David S. Miller <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

b3405e5... by Dhinakaran Pandiyan <email address hidden>

drm/vblank: Data type fixes for 64-bit vblank sequences.

BugLink: http://bugs.launchpad.net/bugs/1786352

[ Upstream commit 3b765c0b765d2cc03ef02276f1af2658a03b3ced ]

drm_vblank_count() has an u32 type returning what is a 64-bit vblank count.
The effect of this is when drm_wait_vblank_ioctl() tries to widen the user
space requested vblank sequence using this clipped 32-bit count(when the
value is >= 2^32) as reference, the requested sequence remains a 32-bit
value and gets queued like that. However, the code that checks if the
requested sequence has passed compares this against the 64-bit vblank
count.

With drm_vblank_count() returning all bits of the vblank count, update
drm_crtc_accurate_vblank_count() so that drm_crtc_arm_vblank_event() queues
the correct sequence. Otherwise, this leads to prolonged waits for a vblank
sequence when the current count is >=2^32.

Finally, fix drm_wait_one_vblank() too.

v2: Commit message fix (Keith)
    Squash commits (Rodrigo)

Fixes: 570e86963a51 ("drm: Widen vblank count to 64-bits [v3]")
Cc: Keith Packard <email address hidden>
Cc: Michel Dänzer <email address hidden>
Cc: Daniel Vetter <email address hidden>
Cc: Rodrigo Vivi <email address hidden>
Signed-off-by: Dhinakaran Pandiyan <email address hidden>
Acked-by: Daniel Vetter <email address hidden>
Reviewed-by: Keith Packard <email address hidden>
Signed-off-by: Rodrigo Vivi <email address hidden>
Link: https://patchwork.freedesktop<email address hidden>
Signed-off-by: Sasha Levin <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

6824159... by Sergei Shtylyov <email address hidden>

soc: renesas: r8a77970-sysc: fix power area parents

BugLink: http://bugs.launchpad.net/bugs/1786352

[ Upstream commit 40d5c8e94751f4a4fa4e0e27e3805e201a4e79c0 ]

According to the figure 9.2(b) of the R-Car Series, 3rd Generation User’s
Manual: Hardware Rev. 0.80 the A2IRn and A2SCn power areas in R8A77970 have
the A3IR area as a parent, thus the SYSC driver has those parents wrong...

Fixes: bab9b2a74fe9 ("soc: renesas: rcar-sysc: add R8A77970 support")
Signed-off-by: Sergei Shtylyov <email address hidden>
Reviewed-by: Geert Uytterhoeven <email address hidden>
Signed-off-by: Simon Horman <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

9665eb1... by Tao <email address hidden>

drm/amd/display: Set vsc pack revision when DPCD revision is >= 1.2

BugLink: http://bugs.launchpad.net/bugs/1786352

[ Upstream commit 3b94a4007dcfd4ac5780cd3d8a2d99979c966073 ]

Brightness couldn't change when booting up in DC mode.
It was because "psr_enabled" flag was not set to true before
setting vsc packet revision, causing packet rev setup was skipped.
Now instead of checking the psr flag, it checks if the DPCD_REV >= 1.2
and set the vsc packet revision.

Signed-off-by: Tao <email address hidden>
Reviewed-by: Tony Cheng <email address hidden>
Acked-by: Harry Wentland <email address hidden>
Signed-off-by: Alex Deucher <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

5ab0d75... by Archit Taneja <email address hidden>

dt-bindings: display: msm/dsi: Fix the PHY regulator supply props

BugLink: http://bugs.launchpad.net/bugs/1786352

[ Upstream commit 8c4905fd4939c59e0f7993ba34883e328eef4b59 ]

The PHY regulator supply names vary across different PHY versions.
Mention explicitly which PHYs require which supplies.

Cc: Rob Herring <email address hidden>
Cc: <email address hidden>
Signed-off-by: Archit Taneja <email address hidden>
Reviewed-by: Rob Herring <email address hidden>
Signed-off-by: Rob Clark <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>

9fc0a07... by Thomas Falcon <email address hidden>

ibmvnic: Allocate statistics buffers during probe

BugLink: http://bugs.launchpad.net/bugs/1786352

[ Upstream commit 53cc7721fdf12e649994cfb7d8f562acb0e4510b ]

Currently, buffers holding individual queue statistics are allocated
when the device is opened. If an ibmvnic interface is hotplugged or
initialized but never opened, an attempt to get statistics with
ethtool will result in a kernel panic.

Since the driver allocates a constant number, the maximum supported
queues, of buffers, these can be allocated during device probe and
freed when the device is hot-unplugged or the module is removed.

Signed-off-by: Thomas Falcon <email address hidden>
Signed-off-by: David S. Miller <email address hidden>
Signed-off-by: Sasha Levin <email address hidden>
Signed-off-by: Greg Kroah-Hartman <email address hidden>
Signed-off-by: Kamal Mostafa <email address hidden>
Signed-off-by: Khalid Elmously <email address hidden>