From: Ben Hutchings <ben@decadent.org.uk>
To: linux-kernel@vger.kernel.org, stable@vger.kernel.org
Cc: akpm@linux-foundation.org, Denis Kirjanov <kda@linux-powerpc.org>,
"Pavel Tikhomirov" <ptikhomirov@virtuozzo.com>,
"J. Bruce Fields" <bfields@redhat.com>,
"NeilBrown" <neilb@suse.de>
Subject: [PATCH 3.16 027/148] sunrpc: fix crash when cache_head become valid before update
Date: Sat, 08 Feb 2020 18:19:26 +0000 [thread overview]
Message-ID: <lsq.1581185940.733123692@decadent.org.uk> (raw)
In-Reply-To: <lsq.1581185939.857586636@decadent.org.uk>
3.16.82-rc1 review patch. If anyone has any objections, please let me know.
------------------
From: Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
commit 5fcaf6982d1167f1cd9b264704f6d1ef4c505d54 upstream.
I was investigating a crash in our Virtuozzo7 kernel which happened in
in svcauth_unix_set_client. I found out that we access m_client field
in ip_map structure, which was received from sunrpc_cache_lookup (we
have a bit older kernel, now the code is in sunrpc_cache_add_entry), and
these field looks uninitialized (m_client == 0x74 don't look like a
pointer) but in the cache_head in flags we see 0x1 which is CACHE_VALID.
It looks like the problem appeared from our previous fix to sunrpc (1):
commit 4ecd55ea0742 ("sunrpc: fix cache_head leak due to queued
request")
And we've also found a patch already fixing our patch (2):
commit d58431eacb22 ("sunrpc: don't mark uninitialised items as VALID.")
Though the crash is eliminated, I think the core of the problem is not
completely fixed:
Neil in the patch (2) makes cache_head CACHE_NEGATIVE, before
cache_fresh_locked which was added in (1) to fix crash. These way
cache_is_valid won't say the cache is valid anymore and in
svcauth_unix_set_client the function cache_check will return error
instead of 0, and we don't count entry as initialized.
But it looks like we need to remove cache_fresh_locked completely in
sunrpc_cache_lookup:
In (1) we've only wanted to make cache_fresh_unlocked->cache_dequeue so
that cache_requests with no readers also release corresponding
cache_head, to fix their leak. We with Vasily were not sure if
cache_fresh_locked and cache_fresh_unlocked should be used in pair or
not, so we've guessed to use them in pair.
Now we see that we don't want the CACHE_VALID bit set here by
cache_fresh_locked, as "valid" means "initialized" and there is no
initialization in sunrpc_cache_add_entry. Both expiry_time and
last_refresh are not used in cache_fresh_unlocked code-path and also not
required for the initial fix.
So to conclude cache_fresh_locked was called by mistake, and we can just
safely remove it instead of crutching it with CACHE_NEGATIVE. It looks
ideologically better for me. Hope I don't miss something here.
Here is our crash backtrace:
[13108726.326291] BUG: unable to handle kernel NULL pointer dereference at 0000000000000074
[13108726.326365] IP: [<ffffffffc01f79eb>] svcauth_unix_set_client+0x2ab/0x520 [sunrpc]
[13108726.326448] PGD 0
[13108726.326468] Oops: 0002 [#1] SMP
[13108726.326497] Modules linked in: nbd isofs xfs loop kpatch_cumulative_81_0_r1(O) xt_physdev nfnetlink_queue bluetooth rfkill ip6table_nat nf_nat_ipv6 ip_vs_wrr ip_vs_wlc ip_vs_sh nf_conntrack_netlink ip_vs_sed ip_vs_pe_sip nf_conntrack_sip ip_vs_nq ip_vs_lc ip_vs_lblcr ip_vs_lblc ip_vs_ftp ip_vs_dh nf_nat_ftp nf_conntrack_ftp iptable_raw xt_recent nf_log_ipv6 xt_hl ip6t_rt nf_log_ipv4 nf_log_common xt_LOG xt_limit xt_TCPMSS xt_tcpmss vxlan ip6_udp_tunnel udp_tunnel xt_statistic xt_NFLOG nfnetlink_log dummy xt_mark xt_REDIRECT nf_nat_redirect raw_diag udp_diag tcp_diag inet_diag netlink_diag af_packet_diag unix_diag rpcsec_gss_krb5 xt_addrtype ip6t_rpfilter ipt_REJECT nf_reject_ipv4 ip6t_REJECT nf_reject_ipv6 ebtable_nat ebtable_broute nf_conntrack_ipv6 nf_defrag_ipv6 ip6table_mangle ip6table_raw nfsv4
[13108726.327173] dns_resolver cls_u32 binfmt_misc arptable_filter arp_tables ip6table_filter ip6_tables devlink fuse_kio_pcs ipt_MASQUERADE nf_nat_masquerade_ipv4 xt_nat iptable_nat nf_nat_ipv4 xt_comment nf_conntrack_ipv4 nf_defrag_ipv4 xt_wdog_tmo xt_multiport bonding xt_set xt_conntrack iptable_filter iptable_mangle kpatch(O) ebtable_filter ebt_among ebtables ip_set_hash_ip ip_set nfnetlink vfat fat skx_edac intel_powerclamp coretemp intel_rapl iosf_mbi kvm_intel kvm irqbypass fuse pcspkr ses enclosure joydev sg mei_me hpwdt hpilo lpc_ich mei ipmi_si shpchp ipmi_devintf ipmi_msghandler xt_ipvs acpi_power_meter ip_vs_rr nfsv3 nfsd auth_rpcgss nfs_acl nfs lockd grace fscache nf_nat cls_fw sch_htb sch_cbq sch_sfq ip_vs em_u32 nf_conntrack tun br_netfilter veth overlay ip6_vzprivnet ip6_vznetstat ip_vznetstat
[13108726.327817] ip_vzprivnet vziolimit vzevent vzlist vzstat vznetstat vznetdev vzmon vzdev bridge pio_kaio pio_nfs pio_direct pfmt_raw pfmt_ploop1 ploop ip_tables ext4 mbcache jbd2 sd_mod crc_t10dif crct10dif_generic mgag200 i2c_algo_bit drm_kms_helper scsi_transport_iscsi 8021q syscopyarea sysfillrect garp sysimgblt fb_sys_fops mrp stp ttm llc bnx2x crct10dif_pclmul crct10dif_common crc32_pclmul crc32c_intel drm dm_multipath ghash_clmulni_intel uas aesni_intel lrw gf128mul glue_helper ablk_helper cryptd tg3 smartpqi scsi_transport_sas mdio libcrc32c i2c_core usb_storage ptp pps_core wmi sunrpc dm_mirror dm_region_hash dm_log dm_mod [last unloaded: kpatch_cumulative_82_0_r1]
[13108726.328403] CPU: 35 PID: 63742 Comm: nfsd ve: 51332 Kdump: loaded Tainted: G W O ------------ 3.10.0-862.20.2.vz7.73.29 #1 73.29
[13108726.328491] Hardware name: HPE ProLiant DL360 Gen10/ProLiant DL360 Gen10, BIOS U32 10/02/2018
[13108726.328554] task: ffffa0a6a41b1160 ti: ffffa0c2a74bc000 task.ti: ffffa0c2a74bc000
[13108726.328610] RIP: 0010:[<ffffffffc01f79eb>] [<ffffffffc01f79eb>] svcauth_unix_set_client+0x2ab/0x520 [sunrpc]
[13108726.328706] RSP: 0018:ffffa0c2a74bfd80 EFLAGS: 00010246
[13108726.328750] RAX: 0000000000000001 RBX: ffffa0a6183ae000 RCX: 0000000000000000
[13108726.328811] RDX: 0000000000000074 RSI: 0000000000000286 RDI: ffffa0c2a74bfcf0
[13108726.328864] RBP: ffffa0c2a74bfe00 R08: ffffa0bab8c22960 R09: 0000000000000001
[13108726.328916] R10: 0000000000000001 R11: 0000000000000001 R12: ffffa0a32aa7f000
[13108726.328969] R13: ffffa0a6183afac0 R14: ffffa0c233d88d00 R15: ffffa0c2a74bfdb4
[13108726.329022] FS: 0000000000000000(0000) GS:ffffa0e17f9c0000(0000) knlGS:0000000000000000
[13108726.329081] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[13108726.332311] CR2: 0000000000000074 CR3: 00000026a1b28000 CR4: 00000000007607e0
[13108726.334606] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[13108726.336754] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[13108726.338908] PKRU: 00000000
[13108726.341047] Call Trace:
[13108726.343074] [<ffffffff8a2c78b4>] ? groups_alloc+0x34/0x110
[13108726.344837] [<ffffffffc01f5eb4>] svc_set_client+0x24/0x30 [sunrpc]
[13108726.346631] [<ffffffffc01f2ac1>] svc_process_common+0x241/0x710 [sunrpc]
[13108726.348332] [<ffffffffc01f3093>] svc_process+0x103/0x190 [sunrpc]
[13108726.350016] [<ffffffffc07d605f>] nfsd+0xdf/0x150 [nfsd]
[13108726.351735] [<ffffffffc07d5f80>] ? nfsd_destroy+0x80/0x80 [nfsd]
[13108726.353459] [<ffffffff8a2bf741>] kthread+0xd1/0xe0
[13108726.355195] [<ffffffff8a2bf670>] ? create_kthread+0x60/0x60
[13108726.356896] [<ffffffff8a9556dd>] ret_from_fork_nospec_begin+0x7/0x21
[13108726.358577] [<ffffffff8a2bf670>] ? create_kthread+0x60/0x60
[13108726.360240] Code: 4c 8b 45 98 0f 8e 2e 01 00 00 83 f8 fe 0f 84 76 fe ff ff 85 c0 0f 85 2b 01 00 00 49 8b 50 40 b8 01 00 00 00 48 89 93 d0 1a 00 00 <f0> 0f c1 02 83 c0 01 83 f8 01 0f 8e 53 02 00 00 49 8b 44 24 38
[13108726.363769] RIP [<ffffffffc01f79eb>] svcauth_unix_set_client+0x2ab/0x520 [sunrpc]
[13108726.365530] RSP <ffffa0c2a74bfd80>
[13108726.367179] CR2: 0000000000000074
Fixes: d58431eacb22 ("sunrpc: don't mark uninitialised items as VALID.")
Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
Acked-by: NeilBrown <neilb@suse.de>
Signed-off-by: J. Bruce Fields <bfields@redhat.com>
[bwh: Backported to 3.16: cache_fresh_locked() had only 2 parameters here]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
---
net/sunrpc/cache.c | 6 ------
1 file changed, 6 deletions(-)
--- a/net/sunrpc/cache.c
+++ b/net/sunrpc/cache.c
@@ -50,8 +50,6 @@ static void cache_init(struct cache_head
h->last_refresh = now;
}
-static inline int cache_is_valid(struct cache_head *h);
-static void cache_fresh_locked(struct cache_head *head, time_t expiry);
static void cache_fresh_unlocked(struct cache_head *head,
struct cache_detail *detail);
@@ -99,9 +97,6 @@ struct cache_head *sunrpc_cache_lookup(s
*hp = tmp->next;
tmp->next = NULL;
detail->entries --;
- if (cache_is_valid(tmp) == -EAGAIN)
- set_bit(CACHE_NEGATIVE, &tmp->flags);
- cache_fresh_locked(tmp, 0);
freeme = tmp;
break;
}
next prev parent reply other threads:[~2020-02-08 18:38 UTC|newest]
Thread overview: 151+ messages / expand[flat|nested] mbox.gz Atom feed top
2020-02-08 18:18 [PATCH 3.16 000/148] 3.16.82-rc1 review Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 001/148] ALSA: line6: Drop superfluous snd_device for PCM Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 002/148] ALSA: line6: Fix memory leak at line6_init_pcm() error path Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 003/148] x86: Treat R_X86_64_PLT32 as R_X86_64_PC32 Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 004/148] pstore/ram: Write new dumps to start of recycled zones Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 005/148] net: davinci_cpdma: use dma_addr_t for DMA address Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 006/148] stmmac: fix oversized frame reception Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 007/148] net: stmmac: use correct DMA buffer size in the RX descriptor Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 008/148] net: stmmac: don't stop NAPI processing when dropping a packet Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 009/148] workqueue: Fix spurious sanity check failures in destroy_workqueue() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 010/148] ath9k_hw: fix uninitialized variable data Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 011/148] pinctrl: samsung: Fix device node refcount leaks in S3C24xx wakeup controller init Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 012/148] pinctrl: samsung: Fix device node refcount leaks in S3C64xx " Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 013/148] media: ov6650: Fix incorrect use of JPEG colorspace Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 014/148] media: ov6650: Fix stored frame format not in sync with hardware Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 015/148] tools/power/cpupower: Fix initializer override in hsw_ext_cstates Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 016/148] cw1200: Fix a signedness bug in cw1200_load_firmware() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 017/148] ar5523: check NULL before memcpy() in ar5523_cmd() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 018/148] hwrng: omap3-rom - Call clk_disable_unprepare() on exit only if not idled Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 019/148] drm/i810: Prevent underflow in ioctl Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 020/148] ARM: dts: s3c64xx: Fix init order of clock providers Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 021/148] [media] usbvision: remove power_on_at_open and timed power off Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 022/148] [media] usbvision-video: two use after frees Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 023/148] [media] usbvision: fix locking error Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 024/148] " Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 025/148] media: usbvision: Fix invalid accesses after device disconnect Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 026/148] media: usbvision: Fix races among open, close, and disconnect Ben Hutchings
2020-02-08 18:19 ` Ben Hutchings [this message]
2020-02-08 18:19 ` [PATCH 3.16 028/148] PCI: Fix Intel ACS quirk UPDCR register address Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 029/148] Bluetooth: hci_core: fix init for HCI_USER_CHANNEL Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 030/148] spi: atmel: fix handling of cs_change set on non-last xfer Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 031/148] usb: gadget: u_serial: add missing port entry locking Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 032/148] compat_ioctl: handle SIOCOUTQNSD Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 033/148] x86/ioapic: Prevent inconsistent state when moving an interrupt Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 034/148] xfs: Sanity check flags of Q_XQUOTARM call Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 035/148] cpuidle: Do not unset the driver if it is there already Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 036/148] scsi: csiostor: Don't enable IRQs too early Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 037/148] scsi: esas2r: unlock on error in esas2r_nvram_read_direct() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 038/148] scsi: zfcp: trace channel log even for FCP command responses Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 039/148] clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 040/148] mtd: spear_smi: Fix Write Burst mode Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 041/148] ARM: tegra: Fix FLOW_CTLR_HALT register clobbering by tegra_resume() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 042/148] quota: fix livelock in dquot_writeback_dquots Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 043/148] quota: Check that quota is not dirty before release Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 044/148] scsi: core: scsi_trace: Use get_unaligned_be*() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 045/148] blk-mq: fix deadlock when reading cpu_list Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 046/148] blk-mq: avoid sysfs buffer overflow with too many CPU cores Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 047/148] iio: imu: adis16480: assign bias value only if operation succeeded Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 048/148] blk-mq: make sure that line break can be printed Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 049/148] tty: serial: msm_serial: Fix flow control Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 050/148] ext2: check err when partial != NULL Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 051/148] media: radio: wl1273: fix interrupt masking on release Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 052/148] media: exynos4-is: Fix recursive locking in isp_video_release() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 053/148] staging: rtl8192e: fix potential use after free Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 054/148] jbd2: Fix possible overflow in jbd2_log_space_left() Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 055/148] bnx2x: Enable Multi-Cos feature Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 056/148] PM / devfreq: Lock devfreq in trans_stat_show Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 057/148] scsi: tracing: Fix handling of TRANSFER LENGTH == 0 for READ(6) and WRITE(6) Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 058/148] USB: serial: mos7840: add USB ID to support Moxa UPort 2210 Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 059/148] perf probe: Fix to handle optimized not-inlined functions Ben Hutchings
2020-02-08 18:19 ` [PATCH 3.16 060/148] perf probe: Fix to show lines of sys_ functions correctly Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 061/148] perf probe: Fix to add missed brace around if block Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 062/148] perf probe: Skip if the function address is 0 Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 063/148] perf probe: Fix to find range-only function instance Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 064/148] perf probe: Fix to show function entry line as probe-able Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 065/148] perf probe: Fix wrong address verification Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 066/148] perf probe: Fix to probe a function which has no entry pc Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 067/148] perf probe: Fix to probe an inline " Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 068/148] perf probe: Fix to list probe event with correct line number Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 069/148] perf probe: Fix to show inlined function callsite without entry_pc Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 070/148] usb: gadget: pch_udc: fix use after free Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 071/148] usb: Allow USB device to be warm reset in suspended state Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 072/148] appledisplay: fix error handling in the scheduled work Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 073/148] perf probe: Skip end-of-sequence and non statement lines Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 074/148] perf probe: Filter out instances except for inlined subroutine and subprogram Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 075/148] perf probe: Fix to show calling lines of inlined functions Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 076/148] perf probe: Skip overlapped location on searching variables Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 077/148] powerpc: Allow flush_icache_range to work across ranges >4GB Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 078/148] powerpc: Allow 64bit VDSO __kernel_sync_dicache " Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 079/148] ARM: ux500: remove unused regulator data Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 080/148] regulator: ab8500: Remove AB8505 USB regulator Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 081/148] regulator: ab8500: Remove SYSCLKREQ from enum ab8505_regulator_id Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 082/148] inetpeer: fix data-race in inet_putpeer / inet_putpeer Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 083/148] iio: adis16480: Add debugfs_reg_access entry Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 084/148] drm/i915/userptr: Try to acquire the page lock around set_page_dirty() Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 085/148] USB: serial: mos7720: fix remote wakeup Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 086/148] USB: serial: mos7840: " Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 087/148] fuse: verify attributes Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 088/148] fuse: verify nlink Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 089/148] ASoC: Jack: Fix NULL pointer dereference in snd_soc_jack_report Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 090/148] scsi: lpfc: fix: Coverity: lpfc_cmpl_els_rsp(): Null pointer dereferences Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 091/148] tty: serial: imx: use the sg count from dma_map_sg Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 092/148] tty: serial: pch_uart: correct usage of dma_unmap_sg Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 093/148] RDMA/srpt: Report the SCSI residual to the initiator Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 094/148] binder: Handle start==NULL in binder_update_page_range() Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 095/148] USB: serial: ftdi_sio: add device IDs for U-Blox C099-F9P Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 096/148] futex: Prevent robust futex exit race Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 097/148] x86/speculation: Fix incorrect MDS/TAA mitigation status Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 098/148] usb-serial: cp201x: support Mark-10 digital force gauge Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 099/148] USB: uas: honor flag to avoid CAPACITY16 Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 100/148] USB: uas: heed CAPACITY_HEURISTICS Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 101/148] USB: documentation: flags on usb-storage versus UAS Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 102/148] Btrfs: fix negative subv_writers counter and data space leak after buffered write Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 103/148] btrfs: check page->mapping when loading free space cache Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 104/148] serial: ifx6x60: add missed pm_runtime_disable Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 105/148] rtc: msm6242: Fix reading of 10-hour digit Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 106/148] Bluetooth: delete a stray unlock Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 107/148] ext4: work around deleting a file with i_nlink == 0 safely Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 108/148] scsi: qla4xxx: fix double free bug Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 109/148] scsi: bnx2i: fix potential use after free Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 110/148] iwlwifi: check kasprintf() return value Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 111/148] serial: serial_core: Perform NULL checks for break_ctl ops Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 112/148] KVM: x86: fix presentation of TSX feature in ARCH_CAPABILITIES Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 113/148] KVM: x86: do not modify masked bits of shared MSRs Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 114/148] x86/PCI: Avoid AMD FCH XHCI USB PME# from D0 defect Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 115/148] ALSA: cs4236: fix error return comparison of an unsigned integer Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 116/148] libtraceevent: Fix memory leakage in copy_filter_type Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 117/148] drm/radeon: fix bad DMA from INTERRUPT_CNTL2 Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 118/148] tty: vt: keyboard: reject invalid keycodes Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 119/148] CIFS: Respect O_SYNC and O_DIRECT flags during reconnect Ben Hutchings
2020-02-08 18:20 ` [PATCH 3.16 120/148] CIFS: Fix SMB2 oplock break processing Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 121/148] platform/x86: hp-wmi: Fix ACPI errors caused by too small buffer Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 122/148] platform/x86: hp-wmi: Fix ACPI errors caused by passing 0 as input size Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 123/148] macvlan: schedule bc_work even if error Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 124/148] PCI/MSI: Fix incorrect MSI-X masking on resume Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 125/148] xtensa: fix TLB sanity checker Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 126/148] perf regs: Make perf_reg_name() return "unknown" instead of NULL Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 127/148] ACPI / osl: speedup grace period in acpi_os_map_cleanup Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 128/148] ACPI: OSL: only free map once in osl.c Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 129/148] ACPI: bus: Fix NULL pointer check in acpi_bus_get_private_data() Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 130/148] openvswitch: drop unneeded BUG_ON() in ovs_flow_cmd_build_info() Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 131/148] openvswitch: remove another BUG_ON() Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 132/148] cifs: Fix cifsInodeInfo lock_sem deadlock when reconnect occurs Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 133/148] CIFS: Fix NULL-pointer dereference in smb2_push_mandatory_locks Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 134/148] net: bridge: deny dev_set_mac_address() when unregistering Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 135/148] drm/radeon: fix r1xx/r2xx register checker for POT textures Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 136/148] xen/blkback: Avoid unmapping unmapped grant pages Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 137/148] hrtimer: Get rid of the resolution field in hrtimer_clock_base Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 138/148] powerpc: Fix vDSO clock_getres() Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 139/148] ALSA: pcm: oss: Avoid potential buffer overflows Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 140/148] tcp: md5: fix potential overestimation of TCP option space Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 141/148] tcp: syncookies: extend validity range Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 142/148] tcp: fix rejected syncookies due to stale timestamps Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 143/148] tcp: Protect accesses to .ts_recent_stamp with {READ,WRITE}_ONCE() Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 144/148] inet: protect against too small mtu values Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 145/148] deb-pkg: remove obsolete -isp option to dpkg-gencontrol Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 146/148] mmc: sdhci-s3c: Check if clk_set_rate() succeeds Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 147/148] mmc: sdhci-s3c: solve problem with sleeping in atomic context Ben Hutchings
2020-02-08 18:21 ` [PATCH 3.16 148/148] s390: Fix unmatched preempt_disable() on exit Ben Hutchings
2020-02-08 23:10 ` [PATCH 3.16 000/148] 3.16.82-rc1 review Guenter Roeck
2020-02-09 18:51 ` Ben Hutchings
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=lsq.1581185940.733123692@decadent.org.uk \
--to=ben@decadent.org.uk \
--cc=akpm@linux-foundation.org \
--cc=bfields@redhat.com \
--cc=kda@linux-powerpc.org \
--cc=linux-kernel@vger.kernel.org \
--cc=neilb@suse.de \
--cc=ptikhomirov@virtuozzo.com \
--cc=stable@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®