lp:~ubuntu-kernel/ubuntu/+source/linux/+git/utopic

Author: Pali
Author Date: 2015-07-23 06:40:31 UTC

dell-laptop: Use dell-rbtn instead i8042 filter when possible

Until now module dell-laptop registered rfkill device which used i8042
filter function for receiving HW switch rfkill events (handling special
keycode).

But for some dell laptops there is native ACPI driver dell-rbtn which can
receive rfkill events (without i8042 hooks).

So this patch will combine best from both sides. It will use native ACPI
driver dell-rbtn for receiving events and dell-laptop SMBIOS interface for
enabling or disabling radio devices. If ACPI driver or device will not be
available fallback to i8042 filter function will be used.

Patch also changes module_init() to late_initcall() to ensure that init
function will be called after initializing dell-rbtn.c driver.

Signed-off-by: Pali Rohár <pali.rohar@gmail.com>
Tested-by: Gabriele Mazzotta <gabriele.mzt@gmail.com>
Signed-off-by: Darren Hart <dvhart@linux.intel.com>
(cherry picked from commit f8358578e2f23bd82d0454c17676bdb28a40664a)

Conflicts:

 drivers/platform/x86/dell-laptop.c

Signed-off-by: Alex Hung <alex.hung@canonical.com>
Reviewed-by: Keng-Yu Lin <kengyu@canonical.com>

Author: Brad Figg
Author Date: 2015-07-07 00:48:47 UTC

UBUNTU: Ubuntu-3.16.0-44.59

Signed-off-by: Brad Figg <brad.figg@canonical.com>

Author: Tim Gardner
Author Date: 2014-10-27 20:14:08 UTC

UBUNTU: [Debian] Fix linux-doc dangling symlinks

BugLink: https://bugs.launchpad.net/bugs/661306

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Acked-by: Stefan Bader <stefan.bader@canonical.com>
Acked-by: Chris J Arges <chris.j.arges@canonical.com>

Author: Andy Whitcroft
Author Date: 2014-10-21 15:56:00 UTC

UBUNTU: Ubuntu-3.16.0-23.31

Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Tim Gardner
Author Date: 2014-10-20 10:12:25 UTC

UBUNTU: rebase to v3.18-rc1

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

Author: Tim Gardner
Author Date: 2014-09-22 18:00:43 UTC

UBUNTU: Ubuntu-goldfish-3.4.0-4.23

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

Author: Tim Gardner
Author Date: 2014-09-20 02:08:49 UTC

UBUNTU: Ubuntu-manta-3.4.0-6.29

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

Author: Tim Gardner
Author Date: 2014-09-19 16:25:00 UTC

UBUNTU: Ubuntu-mako-3.4.0-5.34

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

Author: Tim Gardner
Author Date: 2014-09-19 15:40:41 UTC

UBUNTU: Ubuntu-flo-3.4.0-3.15

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>

Author: Andy Whitcroft
Author Date: 2014-02-26 12:45:20 UTC

UBUNTU: Ubuntu-grouper-3.1.10-8.28

Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Jeff Layton
Author Date: 2014-02-14 12:20:35 UTC

cifs: ensure that uncached writes handle unmapped areas correctly

It's possible for userland to pass down an iovec via writev() that has a
bogus user pointer in it. If that happens and we're doing an uncached
write, then we can end up getting less bytes than we expect from the
call to iov_iter_copy_from_user. This is CVE-2014-0069

cifs_iovec_write isn't set up to handle that situation however. It'll
blindly keep chugging through the page array and not filling those pages
with anything useful. Worse yet, we'll later end up with a negative
number in wdata->tailsz, which will confuse the sending routines and
cause an oops at the very least.

Fix this by having the copy phase of cifs_iovec_write stop copying data
in this situation and send the last write as a short one. At the same
time, we want to avoid sending a zero-length write to the server, so
break out of the loop and set rc to -EFAULT if that happens. This also
allows us to handle the case where no address in the iovec is valid.

[Note: Marking this for stable on v3.4+ kernels, but kernels as old as
       v2.6.38 may have a similar problem and may need similar fix]

Cc: <stable@vger.kernel.org> # v3.4+
Reviewed-by: Pavel Shilovsky <piastry@etersoft.ru>
Reported-by: Al Viro <viro@zeniv.linux.org.uk>
Signed-off-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Steve French <smfrench@gmail.com>

(cherry picked from commit 5d81de8e8667da7135d3a32a964087c0faf5483f)
Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Andy Honig
Author Date: 2013-11-19 22:12:18 UTC

KVM: x86: Fix potential divide by 0 in lapic (CVE-2013-6367)

commit b963a22e6d1a266a67e9eecc88134713fd54775c upstream.

Under guest controllable circumstances apic_get_tmcct will execute a
divide by zero and cause a crash. If the guest cpuid support
tsc deadline timers and performs the following sequence of requests
the host will crash.
- Set the mode to periodic
- Set the TMICT to 0
- Set the mode bits to 11 (neither periodic, nor one shot, nor tsc deadline)
- Set the TMICT to non-zero.
Then the lapic_timer.period will be 0, but the TMICT will not be. If the
guest then reads from the TMCCT then the host will perform a divide by 0.

This patch ensures that if the lapic_timer.period is 0, then the division
does not occur.

Reported-by: Andrew Honig <ahonig@google.com>
Signed-off-by: Andrew Honig <ahonig@google.com>
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
[bwh: Backported to 3.2: s/kvm_apic_get_reg/apic_get_reg/]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Cc: Vinson Lee <vlee@twopensource.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

(cherry picked from commit cd1e02030a6f006234061a306454c4e3e4d4701a)
Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Andy Whitcroft
Author Date: 2013-11-20 14:16:48 UTC

UBUNTU: [Config] switch build-depends to libiberty-dev

Switch from binutils-dev to libiberty-dev in order to simplify
cross-compilation.

Signed-off-by: Andy Whitcroft <apw@canonical.com>

Author: Andy Whitcroft
Author Date: 2013-08-16 12:30:25 UTC

UBUNTU: Lowlatency-3.11.0-2.1

Signed-off-by: Andy Whitcroft <apw@canonical.com>