From: Ben Hutchings <ben@decadent.org.uk>
To: linux-kernel@vger.kernel.org, stable@vger.kernel.org
Cc: akpm@linux-foundation.org,
"David S. Miller" <davem@davemloft.net>,
"Baozeng Ding" <sploving1@gmail.com>,
"Cyrill Gorcunov" <gorcunov@openvz.org>,
"Guillaume Nault" <g.nault@alphalink.fr>
Subject: [PATCH 3.16 142/217] ppp: take reference on channels netns
Date: Wed, 27 Apr 2016 01:02:21 +0200 [thread overview]
Message-ID: <lsq.1461711741.710558128@decadent.org.uk> (raw)
In-Reply-To: <lsq.1461711740.434915673@decadent.org.uk>
3.16.35-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Guillaume Nault <g.nault@alphalink.fr>
commit 1f461dcdd296eecedaffffc6bae2bfa90bd7eb89 upstream.
Let channels hold a reference on their network namespace.
Some channel types, like ppp_async and ppp_synctty, can have their
userspace controller running in a different namespace. Therefore they
can't rely on them to preclude their netns from being removed from
under them.
==================================================================
BUG: KASAN: use-after-free in ppp_unregister_channel+0x372/0x3a0 at
addr ffff880064e217e0
Read of size 8 by task syz-executor/11581
=============================================================================
BUG net_namespace (Not tainted): kasan: bad access detected
-----------------------------------------------------------------------------
Disabling lock debugging due to kernel taint
INFO: Allocated in copy_net_ns+0x6b/0x1a0 age=92569 cpu=3 pid=6906
[< none >] ___slab_alloc+0x4c7/0x500 kernel/mm/slub.c:2440
[< none >] __slab_alloc+0x4c/0x90 kernel/mm/slub.c:2469
[< inline >] slab_alloc_node kernel/mm/slub.c:2532
[< inline >] slab_alloc kernel/mm/slub.c:2574
[< none >] kmem_cache_alloc+0x23a/0x2b0 kernel/mm/slub.c:2579
[< inline >] kmem_cache_zalloc kernel/include/linux/slab.h:597
[< inline >] net_alloc kernel/net/core/net_namespace.c:325
[< none >] copy_net_ns+0x6b/0x1a0 kernel/net/core/net_namespace.c:360
[< none >] create_new_namespaces+0x2f6/0x610 kernel/kernel/nsproxy.c:95
[< none >] copy_namespaces+0x297/0x320 kernel/kernel/nsproxy.c:150
[< none >] copy_process.part.35+0x1bf4/0x5760 kernel/kernel/fork.c:1451
[< inline >] copy_process kernel/kernel/fork.c:1274
[< none >] _do_fork+0x1bc/0xcb0 kernel/kernel/fork.c:1723
[< inline >] SYSC_clone kernel/kernel/fork.c:1832
[< none >] SyS_clone+0x37/0x50 kernel/kernel/fork.c:1826
[< none >] entry_SYSCALL_64_fastpath+0x16/0x7a kernel/arch/x86/entry/entry_64.S:185
INFO: Freed in net_drop_ns+0x67/0x80 age=575 cpu=2 pid=2631
[< none >] __slab_free+0x1fc/0x320 kernel/mm/slub.c:2650
[< inline >] slab_free kernel/mm/slub.c:2805
[< none >] kmem_cache_free+0x2a0/0x330 kernel/mm/slub.c:2814
[< inline >] net_free kernel/net/core/net_namespace.c:341
[< none >] net_drop_ns+0x67/0x80 kernel/net/core/net_namespace.c:348
[< none >] cleanup_net+0x4e5/0x600 kernel/net/core/net_namespace.c:448
[< none >] process_one_work+0x794/0x1440 kernel/kernel/workqueue.c:2036
[< none >] worker_thread+0xdb/0xfc0 kernel/kernel/workqueue.c:2170
[< none >] kthread+0x23f/0x2d0 kernel/drivers/block/aoe/aoecmd.c:1303
[< none >] ret_from_fork+0x3f/0x70 kernel/arch/x86/entry/entry_64.S:468
INFO: Slab 0xffffea0001938800 objects=3 used=0 fp=0xffff880064e20000
flags=0x5fffc0000004080
INFO: Object 0xffff880064e20000 @offset=0 fp=0xffff880064e24200
CPU: 1 PID: 11581 Comm: syz-executor Tainted: G B 4.4.0+
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS
rel-1.8.2-0-g33fbe13 by qemu-project.org 04/01/2014
00000000ffffffff ffff8800662c7790 ffffffff8292049d ffff88003e36a300
ffff880064e20000 ffff880064e20000 ffff8800662c77c0 ffffffff816f2054
ffff88003e36a300 ffffea0001938800 ffff880064e20000 0000000000000000
Call Trace:
[< inline >] __dump_stack kernel/lib/dump_stack.c:15
[<ffffffff8292049d>] dump_stack+0x6f/0xa2 kernel/lib/dump_stack.c:50
[<ffffffff816f2054>] print_trailer+0xf4/0x150 kernel/mm/slub.c:654
[<ffffffff816f875f>] object_err+0x2f/0x40 kernel/mm/slub.c:661
[< inline >] print_address_description kernel/mm/kasan/report.c:138
[<ffffffff816fb0c5>] kasan_report_error+0x215/0x530 kernel/mm/kasan/report.c:236
[< inline >] kasan_report kernel/mm/kasan/report.c:259
[<ffffffff816fb4de>] __asan_report_load8_noabort+0x3e/0x40 kernel/mm/kasan/report.c:280
[< inline >] ? ppp_pernet kernel/include/linux/compiler.h:218
[<ffffffff83ad71b2>] ? ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
[< inline >] ppp_pernet kernel/include/linux/compiler.h:218
[<ffffffff83ad71b2>] ppp_unregister_channel+0x372/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
[< inline >] ? ppp_pernet kernel/drivers/net/ppp/ppp_generic.c:293
[<ffffffff83ad6f26>] ? ppp_unregister_channel+0xe6/0x3a0 kernel/drivers/net/ppp/ppp_generic.c:2392
[<ffffffff83ae18f3>] ppp_asynctty_close+0xa3/0x130 kernel/drivers/net/ppp/ppp_async.c:241
[<ffffffff83ae1850>] ? async_lcp_peek+0x5b0/0x5b0 kernel/drivers/net/ppp/ppp_async.c:1000
[<ffffffff82c33239>] tty_ldisc_close.isra.1+0x99/0xe0 kernel/drivers/tty/tty_ldisc.c:478
[<ffffffff82c332c0>] tty_ldisc_kill+0x40/0x170 kernel/drivers/tty/tty_ldisc.c:744
[<ffffffff82c34943>] tty_ldisc_release+0x1b3/0x260 kernel/drivers/tty/tty_ldisc.c:772
[<ffffffff82c1ef21>] tty_release+0xac1/0x13e0 kernel/drivers/tty/tty_io.c:1901
[<ffffffff82c1e460>] ? release_tty+0x320/0x320 kernel/drivers/tty/tty_io.c:1688
[<ffffffff8174de36>] __fput+0x236/0x780 kernel/fs/file_table.c:208
[<ffffffff8174e405>] ____fput+0x15/0x20 kernel/fs/file_table.c:244
[<ffffffff813595ab>] task_work_run+0x16b/0x200 kernel/kernel/task_work.c:115
[< inline >] exit_task_work kernel/include/linux/task_work.h:21
[<ffffffff81307105>] do_exit+0x8b5/0x2c60 kernel/kernel/exit.c:750
[<ffffffff813fdd20>] ? debug_check_no_locks_freed+0x290/0x290 kernel/kernel/locking/lockdep.c:4123
[<ffffffff81306850>] ? mm_update_next_owner+0x6f0/0x6f0 kernel/kernel/exit.c:357
[<ffffffff813215e6>] ? __dequeue_signal+0x136/0x470 kernel/kernel/signal.c:550
[<ffffffff8132067b>] ? recalc_sigpending_tsk+0x13b/0x180 kernel/kernel/signal.c:145
[<ffffffff81309628>] do_group_exit+0x108/0x330 kernel/kernel/exit.c:880
[<ffffffff8132b9d4>] get_signal+0x5e4/0x14f0 kernel/kernel/signal.c:2307
[< inline >] ? kretprobe_table_lock kernel/kernel/kprobes.c:1113
[<ffffffff8151d355>] ? kprobe_flush_task+0xb5/0x450 kernel/kernel/kprobes.c:1158
[<ffffffff8115f7d3>] do_signal+0x83/0x1c90 kernel/arch/x86/kernel/signal.c:712
[<ffffffff8151d2a0>] ? recycle_rp_inst+0x310/0x310 kernel/include/linux/list.h:655
[<ffffffff8115f750>] ? setup_sigcontext+0x780/0x780 kernel/arch/x86/kernel/signal.c:165
[<ffffffff81380864>] ? finish_task_switch+0x424/0x5f0 kernel/kernel/sched/core.c:2692
[< inline >] ? finish_lock_switch kernel/kernel/sched/sched.h:1099
[<ffffffff81380560>] ? finish_task_switch+0x120/0x5f0 kernel/kernel/sched/core.c:2678
[< inline >] ? context_switch kernel/kernel/sched/core.c:2807
[<ffffffff85d794e9>] ? __schedule+0x919/0x1bd0 kernel/kernel/sched/core.c:3283
[<ffffffff81003901>] exit_to_usermode_loop+0xf1/0x1a0 kernel/arch/x86/entry/common.c:247
[< inline >] prepare_exit_to_usermode kernel/arch/x86/entry/common.c:282
[<ffffffff810062ef>] syscall_return_slowpath+0x19f/0x210 kernel/arch/x86/entry/common.c:344
[<ffffffff85d88022>] int_ret_from_sys_call+0x25/0x9f kernel/arch/x86/entry/entry_64.S:281
Memory state around the buggy address:
ffff880064e21680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff880064e21700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
>ffff880064e21780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
^
ffff880064e21800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
ffff880064e21880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================
Fixes: 273ec51dd7ce ("net: ppp_generic - introduce net-namespace functionality v2")
Reported-by: Baozeng Ding <sploving1@gmail.com>
Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
Reviewed-by: Cyrill Gorcunov <gorcunov@openvz.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
drivers/net/ppp/ppp_generic.c | 4 +++-
1 file changed, 3 insertions(+), 1 deletion(-)
--- a/drivers/net/ppp/ppp_generic.c
+++ b/drivers/net/ppp/ppp_generic.c
@@ -2241,7 +2241,7 @@ int ppp_register_net_channel(struct net
pch->ppp = NULL;
pch->chan = chan;
- pch->chan_net = net;
+ pch->chan_net = get_net(net);
chan->ppp = pch;
init_ppp_file(&pch->file, CHANNEL);
pch->file.hdrlen = chan->hdrlen;
@@ -2338,6 +2338,8 @@ ppp_unregister_channel(struct ppp_channe
spin_lock_bh(&pn->all_channels_lock);
list_del(&pch->list);
spin_unlock_bh(&pn->all_channels_lock);
+ put_net(pch->chan_net);
+ pch->chan_net = NULL;
pch->file.dead = 1;
wake_up_interruptible(&pch->file.rwait);
next prev parent reply other threads:[~2016-04-27 0:09 UTC|newest]
Thread overview: 236+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-04-26 23:02 [PATCH 3.16 000/217] 3.16.35-rc1 review Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 206/217] qlge: Fix receive packets drop Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 180/217] netfilter: x_tables: make sure e->next_offset covers remaining blob size Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 144/217] MAINTAINERS: Update mailing list and web page for hwmon subsystem Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 151/217] usb: renesas_usbhs: avoid NULL pointer derefernce in usbhsf_pkt_handler() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 217/217] crypto: gcm - Fix rfc4543 decryption crash Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 064/217] usb: hub: fix a typo in hub_port_init() leading to wrong logic Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 130/217] bitops: Do not default to __clear_bit() for __clear_bit_unlock() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 034/217] mei: fix format string in debug prints Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 182/217] x86/mm/32: Enable full randomization on i386 and X86_32 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 035/217] perf tools: Dont stop PMU parsing on alias parse error Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 213/217] ipv6: Count in extension headers in skb->network_header Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 015/217] nbd: ratelimit error msgs after socket close Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 051/217] fbdev: da8xx-fb: fix videomodes of lcd panels Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 106/217] sd: disable discard_zeroes_data for UNMAP Ben Hutchings
2016-04-27 20:43 ` Rafael David Tinoco
2016-04-28 0:01 ` Martin K. Petersen
2016-04-28 16:11 ` Ben Hutchings
2016-04-29 4:00 ` Rafael David Tinoco
2016-04-29 12:16 ` Martin K. Petersen
2016-04-29 15:14 ` Rafael David Tinoco
2016-04-30 19:33 ` Ben Hutchings
2016-05-03 1:47 ` Martin K. Petersen
2016-05-09 14:17 ` Paolo Bonzini
2016-04-26 23:02 ` [PATCH 3.16 094/217] ALSA: hda - Add new GPU codec ID 0x10de0083 to snd-hda Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 101/217] net: Fix use after free in the recvmmsg exit path Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 133/217] KVM: VMX: avoid guest hang on invalid invept instruction Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 146/217] ocfs2/dlm: fix race between convert and recovery Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 002/217] crypto: ccp - Add hash state import and export support Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 028/217] ARM: davinci: make I2C support optional Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 053/217] [media] bttv: Width must be a multiple of 16 when capturing planar formats Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 181/217] x86: standardize mmap_rnd() usage Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 085/217] drm/radeon: Don't drop DP 2.7 Ghz link setup on some cards Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 192/217] qmi_wwan: add Sierra Wireless MC74xx/EM74xx Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 079/217] bcache: cleaned up error handling around register_cache() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 083/217] drm/radeon: add a PX quirk list Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 122/217] USB: uas: Reduce can_queue to MAX_CMNDS Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 212/217] ipv6: l2tp: fix a potential issue in l2tp_ip6_recv Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 207/217] xfrm: Fix crash observed during device unregistration and decryption Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 158/217] sd: Fix excessive capacity printing on devices with blocks bigger than 512 bytes Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 116/217] x86/iopl: Fix iopl capability check on Xen PV Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 026/217] HID: fix hid_ignore_special_drivers module parameter Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 153/217] ALSA: usb-audio: Minor code cleanup in create_fixed_stream_quirk() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 184/217] USB: usbip: fix potential out-of-bounds write Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 139/217] ALSA: hda - Fix white noise on Asus N750JV headphone Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 043/217] PCI: Disable IO/MEM decoding for devices with non-compliant BARs Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 080/217] bcache: fix cache_set_flush() NULL pointer dereference on OOM Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 052/217] IB/srpt: Simplify srpt_handle_tsk_mgmt() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 105/217] net: mvneta: enable change MAC address when interface is up Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 167/217] usb: renesas_usbhs: fix to avoid using a disabled ep in usbhsg_queue_done() Ben Hutchings
2016-04-28 15:46 ` Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 201/217] net: validate variable length ll headers Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 209/217] qmi_wwan: add "D-Link DWM-221 B1" device id Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 168/217] compiler-gcc: disable -ftracer for __noclone functions Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 061/217] mtip32xx: Avoid issuing standby immediate cmd during FTL rebuild Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 089/217] xtensa: ISS: don't hang if stdin EOF is reached Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 038/217] aacraid: Fix memory leak in aac_fib_map_free Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 081/217] x86/PCI: Mark Broadwell-EP Home Agent & PCU as having non-compliant BARs Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 147/217] ocfs2/dlm: fix BUG in dlm_move_lockres_to_recovery_list Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 092/217] bus: imx-weim: Take the 'status' property value into account Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 070/217] perf stat: Document --detailed option Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 197/217] qmi_wwan: add Sierra Wireless EM74xx device ID Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 114/217] vfs: show_vfsstat: do not ignore errors from show_devname method Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 016/217] perf tools: handle spaces in file names obtained from /proc/pid/maps Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 140/217] ALSA: hda - Apply fix for white noise on Asus N550JV, too Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 115/217] ppp: ensure file->private_data can't be overridden Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 190/217] qmi_wwan: add the second QMI/network interface for Sierra Wireless MC7305/MC7355 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 169/217] ip6_tunnel: set rtnl_link_ops before calling register_netdevice Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 126/217] splice: handle zero nr_pages in splice_to_pipe() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 048/217] Bluetooth: btusb: Add a new AR3012 ID 04ca:3014 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 117/217] sunrpc/cache: drop reference when sunrpc_cache_pipe_upcall() detects a race Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 096/217] ALSA: intel8x0: Add clock quirk entry for AD1981B on IBM ThinkPad X41 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 157/217] USB: digi_acceleport: do sanity checking for the number of ports Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 154/217] ALSA: usb-audio: Fix double-free in error paths after snd_usb_add_audio_stream() call Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 033/217] mei: fix possible integer overflow issue Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 063/217] of: alloc anywhere from memblock if range not specified Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 199/217] cdc_ncm: toggle altsetting to force reset before setup Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 164/217] ALSA: timer: Use mod_timer() for rearming the system timer Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 021/217] ARM: dts: armada-375: use armada-370-sata for SATA Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 109/217] HID: i2c-hid: fix OOB write in i2c_hid_set_or_send_report() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 060/217] mtip32xx: Remove unwanted code from taskfile error handler Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 127/217] ethernet: micrel: fix some error codes Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 135/217] tracing: Fix trace_printk() to print when not using bprintk() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 110/217] ALSA: hda - Fix unconditional GPIO toggle via automute Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 120/217] x86/apic: Fix suspicious RCU usage in smp_trace_call_function_interrupt() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 149/217] drm/radeon: add another R7 370 quirk Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 069/217] rt2x00: add new rt2800usb device Buffalo WLI-UC-G450 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 128/217] net: bcmgenet: fix dma api length mismatch Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 062/217] clk: xgene: Add missing parenthesis when clearing divider value Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 156/217] USB: cypress_m8: add endpoint sanity check Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 160/217] drm/udl: Use unlocked gem unreferencing Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 003/217] PCI: imx6: Move PHY reset into imx6_pcie_establish_link() Ben Hutchings
2016-04-28 16:20 ` Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 087/217] jbd2: fix FS corruption possibility in jbd2_journal_destroy() on umount path Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 172/217] USB: serial: cp210x: Adding GE Healthcare Device ID Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 018/217] 8250: use callbacks to access UART_DLL/UART_DLM Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 162/217] ALSA: hda - fix front mic problem for a HP desktop Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 186/217] ext4: fix NULL pointer dereference in ext4_mark_inode_dirty() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 036/217] Bluetooth: btusb: Add new AR3012 ID 13d3:3395 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 010/217] [media] pwc: Add USB id for Philips Spc880nc webcam Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 004/217] PCI: imx6: Remove broken Gen2 workaround Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 185/217] s390/mm: four page table levels vs. fork Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 044/217] clk: versatile: sp810: support reentrance Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 202/217] ax25: add link layer header validation function Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 175/217] gpio: pca953x: Use correct u16 value for register word write Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 150/217] drm/radeon: add a dpm quirk for all R7 370 parts Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 210/217] tun, bpf: fix suspicious RCU usage in tun_{attach, detach}_filter Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 030/217] [media] adv7511: TX_EDID_PRESENT is still 1 after a disconnect Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 007/217] ASoC: s3c24xx: use const snd_soc_component_driver pointer Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 194/217] net: qmi_wwan: Add WeTelecom-WPD600N Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 074/217] perf/x86/intel: Add definition for PT PMI bit Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 068/217] mwifiex: fix corner case association failure Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 073/217] perf/x86/intel: Fix PEBS warning by only restoring active PMU in pmi Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 214/217] jme: Do not enable NIC WoL functions on S0 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 166/217] xen/events: Mask a moving irq Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 163/217] KVM: x86: Inject pending interrupt even if pending nmi exist Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 183/217] usbnet: cleanup after bind() in probe() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 078/217] bcache: Fix more early shutdown bugs Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 065/217] KVM: i8254: change PIT discard tick policy Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 050/217] mmc: sdhci: fix data timeout (part 2) Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 161/217] ext4: add lockdep annotations for i_data_sem Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 006/217] perf pmu: Fix misleadingly indented assignment (whitespace) Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 179/217] netfilter: x_tables: validate e->target_offset early Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 108/217] sd: Fix discard granularity when LBPRZ=1 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 173/217] USB: option: add "D-Link DWM-221 B1" device id Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 134/217] KVM: fix spin_lock_init order on x86 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 100/217] rtc: hym8563: fix invalid year calculation Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 204/217] macvtap: always pass ethernet header in linear Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 196/217] Add Dell Wireless 5809e Gobi 4G HSPA+ Mobile Broadband Card (rev3) to qmi_wwan Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 066/217] sched/cputime: Fix steal time accounting vs. CPU hotplug Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 187/217] serial: sh-sci: Remove cpufreq notifier to fix crash/deadlock Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 178/217] parisc: Unbreak handling exceptions from kernel modules Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 137/217] rapidio/rionet: fix deadlock on SMP Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 082/217] be2iscsi: set the boot_kset pointer to NULL in case of failure Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 208/217] qmi_wwan: Added support for Gemalto's Cinterion PHxx WWAN interface Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 124/217] lpfc: fix misleading indentation Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 058/217] drivers/misc/ad525x_dpot: AD5274 fix RDAC read back errors Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 203/217] sh_eth: fix NULL pointer dereference in sh_eth_ring_format() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 107/217] sd: Make discard granularity match logical block size when LBPRZ=1 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 090/217] xtensa: clear all DBREAKC registers on start Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 097/217] fuse: do not use iocb after it may have been freed Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 086/217] sg: fix dxferp in from_to case Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 171/217] USB: serial: ftdi_sio: Add support for ICP DAS I-756xU devices Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 176/217] parisc: Avoid function pointers for kernel exception routines Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 141/217] ideapad-laptop: Add ideapad Y700 (15) to the no_hw_rfkill DMI list Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 076/217] perf/x86/intel: Fix PEBS data source interpretation on Nehalem/Westmere Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 059/217] mtip32xx: Fix broken service thread handling Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 131/217] mdio-sun4i: oops in error handling in probe Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 027/217] regulator: s5m8767: fix get_register() error handling Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 123/217] tracing: Have preempt(irqs)off trace preempt disabled functions Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 125/217] tracing: Fix crash from reading trace_pipe with sendfile Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 189/217] sctp: lack the check for ports in sctp_v6_cmp_addr Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 159/217] drm/dp: move hw_mutex up the call stack Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 138/217] ALSA: hda - Asus N750JV external subwoofer fixup Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 071/217] perf/core: Fix perf_sched_count derailment Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 072/217] perf/x86/intel: Use PAGE_SIZE for PEBS buffer size on Core2 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 046/217] kbuild/mkspec: fix grub2 installkernel issue Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 031/217] [media] saa7134: Fix bytesperline not being set correctly for planar formats Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 019/217] net: irda: Fix use-after-free in irtty_open() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 200/217] udp6: fix UDP/IPv6 encap resubmit path Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 037/217] Bluetooth: Add new AR3012 ID 0489:e095 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 188/217] net: jme: fix suspend/resume on JMC260 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 205/217] farsync: fix off-by-one bug in fst_add_one Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 093/217] sctp: fix the transports round robin issue when init is retransmitted Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 032/217] ARM: OMAP3: Add cpuidle parameters table for omap3430 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 177/217] parisc: Fix kernel crash with reversed copy_from_user() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 148/217] hwmon: (max1111) Return -ENODEV from max1111_read_channel if not instantiated Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 193/217] USB: qmi_wwan: Add quirk for Quectel EC20 Mini PCIe module Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 008/217] tty: Fix GPF in flush_to_ldisc(), part 2 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 025/217] HID: core: do not scan reports if the group is already set Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 084/217] drm/radeon: add PX quirk for asus K53TK Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 056/217] net/mlx5: Make command timeout way shorter Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 095/217] ALSA: hda - Add new GPU codec ID 0x10de0082 to snd-hda Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 152/217] usb: renesas_usbhs: disable TX IRQ before starting TX DMAC transfer Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 077/217] sched/cputime: Fix steal_account_process_tick() to always return jiffies Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 075/217] perf/x86/pebs: Add workaround for broken OVFL status on HSW+ Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 195/217] net: qmi_wwan: Add SIMCom 7230E Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 136/217] fs/coredump: prevent fsuid=0 dumps into user-controlled directories Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 047/217] crypto: ccp - memset request context to zero during import Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 039/217] mac80211: fix unnecessary frame drops in mesh fwding Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 088/217] Bluetooth: btusb: Add a new AR3012 ID 13d3:3472 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 014/217] [media] xc2028: unlock on error in xc2028_set_config() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 041/217] mac80211: fix memory leak Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 045/217] md/raid5: Compare apples to apples (or sectors to sectors) Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 215/217] jme: Fix device PM wakeup API usage Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 017/217] crypto: ccp - Don't assume export/import areas are aligned Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 013/217] [media] xc2028: avoid use after free Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 099/217] rtc: vr41xx: Wire up alarm_irq_enable Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 049/217] mmc: sdhci: fix data timeout (part 1) Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 104/217] md: multipath: don't hardcopy bio in .make_request path Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 118/217] Input: ims-pcu - sanity check against missing interfaces Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 155/217] USB: mct_u232: add sanity checking in probe Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 029/217] scripts/coccinelle: modernize & Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 011/217] unbreak allmodconfig KCONFIG_ALLCONFIG= Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 098/217] s390/pci: enforce fmb page boundary rule Ben Hutchings
2016-04-27 17:27 ` Sebastian Ott
2016-04-27 18:14 ` Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 020/217] misc/bmp085: Enable building as a module Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 216/217] netfilter: x_tables: fix unconditional helper Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 023/217] usb: retry reset if a device times out Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 145/217] drm/radeon: add a dpm quirk for sapphire Dual-X R7 370 2G D5 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 191/217] qmi_wwan: Add support for Dell Wireless 5809e 4G Modem Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 111/217] paride: make 'verbose' parameter an 'int' again Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 129/217] tunnels: Don't apply GRO to multiple layers of encapsulation Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 067/217] ipvs: correct initial offset of Call-ID header search in SIP persistence engine Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 102/217] mlx4: add missing braces in verify_qp_parameters Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 165/217] mm: fix invalid node in alloc_migrate_target() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 170/217] Btrfs: fix file/data loss caused by fsync after rename and new inode Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 211/217] ipv4: l2tp: fix a potential issue in l2tp_ip_recv Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 009/217] [media] media: v4l2-compat-ioctl32: fix missing length copy in put_v4l2_buffer32 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 113/217] nfsd: fix deadlock secinfo+readdir compound Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 143/217] net: bcmgenet: fix skb_len in bcmgenet_xmit_single() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 119/217] Input: synaptics - handle spurious release of trackstick buttons, again Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 005/217] PCI: imx6: Move link up check into imx6_pcie_wait_for_link() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 121/217] USB: usb_driver_claim_interface: add sanity checking Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 001/217] EDAC, amd64_edac: Shift wrapping issue in f1x_get_norm_dct_addr() Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 198/217] net: qmi_wwan: remove 1199:9070 device id Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 024/217] HID: logitech: fix Dual Action gamepad support Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 040/217] mac80211: avoid excessive stack usage in sta_info Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 012/217] crypto: ccp - Limit the amount of information exported Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 174/217] usb: dwc3: keystone: drop dma_mask configuration Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 022/217] mtd: map: fix .set_vpp() documentation Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 055/217] nfsd4: fix bad bounds checking Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 057/217] xfs: fix two memory leaks in xfs_attr_list.c error paths Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 042/217] mtd: onenand: fix deadlock in onenand_block_markbad Ben Hutchings
2016-04-26 23:02 ` Ben Hutchings [this message]
2016-04-26 23:02 ` [PATCH 3.16 132/217] target: Fix target_release_cmd_kref shutdown comp leak Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 103/217] ath9k: fix buffer overrun for ar9287 Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 054/217] watchdog: rc32434_wdt: fix ioctl error handling Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 091/217] xen kconfig: don't "select INPUT_XEN_KBDDEV_FRONTEND" Ben Hutchings
2016-04-26 23:02 ` [PATCH 3.16 112/217] gpiolib: Fix comment referring to gpio_*() in gpiod_*() Ben Hutchings
2016-04-27 21:20 ` [PATCH 3.16 000/217] 3.16.35-rc1 review Ben Hutchings
2016-04-28 18:07 ` Guenter Roeck
2016-04-29 4:16 ` Guenter Roeck
2016-04-30 19:44 ` Ben Hutchings
2016-04-30 23:19 ` Guenter Roeck
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=lsq.1461711741.710558128@decadent.org.uk \
--to=ben@decadent.org.uk \
--cc=akpm@linux-foundation.org \
--cc=davem@davemloft.net \
--cc=g.nault@alphalink.fr \
--cc=gorcunov@openvz.org \
--cc=linux-kernel@vger.kernel.org \
--cc=sploving1@gmail.com \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®