Skip to content

4.1.15-stable review

Greg Kroah-Hartman lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest44 of 45 patches 3 repliesIn review

44 of 45 patches are in this archive. The cover letter announces 45.

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/45unix: avoid use-after-free in ep_remove_wait_queueinclude/net/af_unix.h net/unix/af_unix.c+165 -190 replies
2/45tools/net: Use include/uapi with __EXPORTED_HEADERS__tools/net/Makefile+4 -30 replies
3/45packet: do skb_probe_transport_header when we actually have datanet/packet/af_packet.c+3 -20 replies
4/45packet: always probe for transport headernet/packet/af_packet.c+3 -40 replies
5/45packet: only allow extra vlan len on ethernet devicesnet/packet/af_packet.c+25 -350 replies
6/45packet: infer protocol from ethernet header if unsetnet/packet/af_packet.c+11 -00 replies
7/45packet: fix tpacket_snd max frame lennet/packet/af_packet.c+5 -40 replies
8/45sctp: translate host order to network order when setting a hmacidnet/sctp/auth.c+2 -20 replies
9/45ip_tunnel: disable preemption when updating per-cpu tstatsinclude/net/ip6_tunnel.h include/net/ip_tunnels.h+4 -20 replies
10/45snmp: Remove duplicate OUTMCAST stat incrementnet/ipv6/mcast.c+0 -20 replies
12/45tcp: md5: fix lockdep annotationnet/ipv4/tcp_ipv4.c+2 -10 replies
13/45tcp: disable Fast Open on timeouts after handshakenet/ipv4/tcp_timer.c+12 -00 replies
14/45tcp: fix potential huge kmalloc() calls in TCP_REPAIRnet/ipv4/tcp_input.c+19 -30 replies
15/45tcp: initialize tp->copied_seq in case of cross SYN connectionnet/ipv4/tcp_input.c+1 -00 replies
16/45net, scm: fix PaX detected msg_controllen overflow in scm_detach_fdsnet/core/scm.c+2 -00 replies
17/45net: ipmr: fix static mfc/dev leaks on table destructionnet/ipv4/ipmr.c+8 -70 replies
18/45net: ip6mr: fix static mfc/dev leaks on table destructionnet/ipv6/ip6mr.c+8 -70 replies
19/45broadcom: fix PHY_ID_BCM5481 entry in the id tabledrivers/net/phy/broadcom.c+1 -10 replies
20/45ipv6: distinguish frag queues by device for multicast and link-local packetsinclude/net/ipv6.h net/ipv6/netfilter/nf_conntrack_reasm.c net/ipv6/reassembly.c+11 -50 replies
21/45RDS: fix race condition when sending a message on unbound socketnet/rds/connection.c net/rds/send.c+3 -70 replies
22/45bpf, array: fix heap out-of-bounds access when updating elementskernel/bpf/arraymap.c+1 -10 replies
23/45ipv6: add complete rcu protection around np->optinclude/linux/ipv6.h include/net/ipv6.h net/dccp/ipv6.c +10 more+122 -520 replies
24/45net/neighbour: fix crash at dumping device-agnostic proxy entriesnet/core/neighbour.c+2 -20 replies
25/45ipv6: sctp: implement sctp_v6_destroy_sock()net/sctp/socket.c+8 -10 replies
26/45net_sched: fix qdisc_tree_decrease_qlen() racesinclude/net/sch_generic.h net/sched/sch_api.c net/sched/sch_generic.c +2 more+26 -140 replies
27/45btrfs: check unsupported filters in balance argumentsfs/btrfs/ioctl.c fs/btrfs/volumes.h+13 -01 reply
28/45Btrfs: fix file corruption and data loss after cloning inline extentsfs/btrfs/ioctl.c+152 -430 replies
29/45Btrfs: fix truncation of compressed and inlined extentsfs/btrfs/inode.c+68 -140 replies
30/45Btrfs: fix race leading to incorrect item deletion when dropping extentsfs/btrfs/file.c+12 -40 replies
31/45Btrfs: fix race leading to BUG_ON when running delalloc for nodatacowfs/btrfs/inode.c+8 -20 replies
32/45Btrfs: fix race when listing an inodes xattrsfs/btrfs/xattr.c+3 -10 replies
33/45rbd: dont put snap_context twice in rbd_queue_workfn()drivers/block/rbd.c+1 -00 replies
34/45ext4 crypto: fix memory leak in ext4_bio_write_page()fs/ext4/page-io.c+4 -10 replies
35/45ext4: fix potential use after free in __ext4_journal_stopfs/ext4/ext4_jbd2.c+3 -30 replies
36/45ext4, jbd2: ensure entering into panic after recording an error in superblockfs/ext4/super.c fs/jbd2/journal.c include/linux/jbd2.h+16 -30 replies
37/45firewire: ohci: fix JMicron JMB38x IT context discoverydrivers/firewire/ohci.c+5 -00 replies
38/45nfsd: serialize state seqid morphing operationsfs/nfsd/nfs4state.c fs/nfsd/state.h+38 -140 replies
39/45nfsd: eliminate sending duplicate and repeated delegationsfs/nfsd/nfs4state.c+84 -100 replies
40/45debugfs: fix refcount imbalance in start_creatingfs/debugfs/inode.c+5 -10 replies
41/45nfs4: start callback_ident at idr 1fs/nfs/nfs4client.c+1 -10 replies
42/45nfs: if we have no valid attrs, then dont declare the attribute cache validfs/nfs/inode.c+5 -10 replies
43/45ocfs2: fix umask ignored issuefs/ocfs2/namei.c+2 -00 replies
44/45ceph: fix message length computationfs/ceph/mds_client.c+1 -10 replies
45/45ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codecsound/pci/hda/patch_hdmi.c+2 -10 replies

Reviews trailers per patch

20 of 44 patches have a Reviewed-by or Acked-by.

PatchJason BaronJason WangWillem de BruijnNeil HormanVlad YasevichDmitry VyukovHannes Frederic SowaCong WangVegard NossumSasha LevinSantosh ShilimkarJosh DurginAndreas DilgerHobin WooSteve FrenchPavel EmelyanovDaniel BorkmannAlexei StarovoitovAndrew W Elble
1/45R-b
2/45A-b
3/45A-b
4/45A-b
5/45A-b
6/45A-b
7/45A-b
8/45A-b A-b
9/45A-b
10/45
12/45
13/45
14/45A-b
15/45T-b
16/45R-b
17/45R-b
18/45R-b
19/45
20/45
21/45R-b R-b A-b
22/45A-b
23/45A-b
24/45
25/45A-b
26/45
27/45
28/45
29/45
30/45
31/45
32/45
33/45R-b
34/45
35/45R-b
36/45T-b
37/45
38/45Reported-and-Tested-by
39/45
40/45
41/45
42/45R-b
43/45
44/45
45/45

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 19 reviewers.

Read the v1 thread

Cover letter [PATCH 4.1 00/45] 4.1.15-stable review

This is the start of the stable review cycle for the 4.1.15 release. There are 45 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Mon Dec 14 19:32:37 UTC 2015. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.1.15-rc1.gz

and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.1.15-rc1

Lu, Han <[email protected]>
ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codec

Arnd Bergmann <[email protected]>
ceph: fix message length computation

Junxiao Bi <[email protected]>
ocfs2: fix umask ignored issue

Jeff Layton <[email protected]>
nfs: if we have no valid attrs, then don't declare the attribute cache valid

Benjamin Coddington <[email protected]>
nfs4: start callback_ident at idr 1

Daniel Borkmann <[email protected]>
debugfs: fix refcount imbalance in start_creating

Andrew Elble <[email protected]>
nfsd: eliminate sending duplicate and repeated delegations

Jeff Layton <[email protected]>
nfsd: serialize state seqid morphing operations

Stefan Richter <[email protected]>
firewire: ohci: fix JMicron JMB38x IT context discovery

Daeho Jeong <[email protected]>
ext4, jbd2: ensure entering into panic after recording an error in superblock

Lukas Czerner <[email protected]>
ext4: fix potential use after free in __ext4_journal_stop

Theodore Ts'o <[email protected]>
ext4 crypto: fix memory leak in ext4_bio_write_page()

Ilya Dryomov <[email protected]>
rbd: don't put snap_context twice in rbd_queue_workfn()

Filipe Manana <[email protected]>
Btrfs: fix race when listing an inode's xattrs

Filipe Manana <[email protected]>
Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow

Filipe Manana <[email protected]>
Btrfs: fix race leading to incorrect item deletion when dropping extents

Filipe Manana <[email protected]>
Btrfs: fix truncation of compressed and inlined extents

Filipe Manana <[email protected]>
Btrfs: fix file corruption and data loss after cloning inline extents

David Sterba <[email protected]>
btrfs: check unsupported filters in balance arguments

Eric Dumazet <[email protected]>
net_sched: fix qdisc_tree_decrease_qlen() races

Eric Dumazet <[email protected]>
ipv6: sctp: implement sctp_v6_destroy_sock()

Konstantin Khlebnikov <[email protected]>
net/neighbour: fix crash at dumping device-agnostic proxy entries

Eric Dumazet <[email protected]>

    ipv6: add complete rcu protection around np->opt

Daniel Borkmann <[email protected]>
bpf, array: fix heap out-of-bounds access when updating elements

Quentin Casasnovas <[email protected]>
RDS: fix race condition when sending a message on unbound socket

Michal Kubeček <[email protected]>
ipv6: distinguish frag queues by device for multicast and link-local packets

Aaro Koskinen <[email protected]>
broadcom: fix PHY_ID_BCM5481 entry in the id table

Nikolay Aleksandrov <[email protected]>
net: ip6mr: fix static mfc/dev leaks on table destruction

Nikolay Aleksandrov <[email protected]>
net: ipmr: fix static mfc/dev leaks on table destruction

Daniel Borkmann <[email protected]>
net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds

Eric Dumazet <[email protected]>

    tcp: initialize tp->copied_seq in case of cross SYN connection

Eric Dumazet <[email protected]>
tcp: fix potential huge kmalloc() calls in TCP_REPAIR

Yuchung Cheng <[email protected]>
tcp: disable Fast Open on timeouts after handshake

Eric Dumazet <[email protected]>
tcp: md5: fix lockdep annotation

Bjørn Mork <[email protected]>
net: qmi_wwan: add XS Stick W100-2 from 4G Systems

Neil Horman <[email protected]>
snmp: Remove duplicate OUTMCAST stat increment

Jason A. Donenfeld <[email protected]>
ip_tunnel: disable preemption when updating per-cpu tstats

lucien <[email protected]>
sctp: translate host order to network order when setting a hmacid

Daniel Borkmann <[email protected]>
packet: fix tpacket_snd max frame len

Daniel Borkmann <[email protected]>
packet: infer protocol from ethernet header if unset

Daniel Borkmann <[email protected]>
packet: only allow extra vlan len on ethernet devices

Daniel Borkmann <[email protected]>
packet: always probe for transport header

Daniel Borkmann <[email protected]>
packet: do skb_probe_transport_header when we actually have data

Kamal Mostafa <[email protected]>
tools/net: Use include/uapi with __EXPORTED_HEADERS__

Rainer Weikusat <[email protected]>
unix: avoid use-after-free in ep_remove_wait_queue

-------------

Diffstat:

 Makefile                                |   4 +-
 drivers/block/rbd.c                     |   1 +
 drivers/firewire/ohci.c                 |   5 +
 drivers/net/phy/broadcom.c              |   2 +-
 drivers/net/usb/qmi_wwan.c              |   1 +
 fs/btrfs/file.c                         |  16 ++-
 fs/btrfs/inode.c                        |  92 ++++++++++++---
 fs/btrfs/ioctl.c                        | 200 +++++++++++++++++++++++++-------
 fs/btrfs/volumes.h                      |   8 ++
 fs/btrfs/xattr.c                        |   4 +-
 fs/ceph/mds_client.c                    |   2 +-
 fs/debugfs/inode.c                      |   6 +-
 fs/ext4/ext4_jbd2.c                     |   6 +-
 fs/ext4/page-io.c                       |   5 +-
 fs/ext4/super.c                         |  12 +-
 fs/jbd2/journal.c                       |   6 +-
 fs/nfs/inode.c                          |   6 +-
 fs/nfs/nfs4client.c                     |   2 +-
 fs/nfsd/nfs4state.c                     | 127 +++++++++++++++++---
 fs/nfsd/state.h                         |  19 +--
 fs/ocfs2/namei.c                        |   2 +
 include/linux/ipv6.h                    |   2 +-
 include/linux/jbd2.h                    |   1 +
 include/net/af_unix.h                   |   1 +
 include/net/ip6_tunnel.h                |   3 +-
 include/net/ip_tunnels.h                |   3 +-
 include/net/ipv6.h                      |  22 +++-
 include/net/sch_generic.h               |   3 +
 kernel/bpf/arraymap.c                   |   2 +-
 net/core/neighbour.c                    |   4 +-
 net/core/scm.c                          |   2 +
 net/dccp/ipv6.c                         |  33 ++++--
 net/ipv4/ipmr.c                         |  15 +--
 net/ipv4/tcp_input.c                    |  23 +++-
 net/ipv4/tcp_ipv4.c                     |   3 +-
 net/ipv4/tcp_timer.c                    |  12 ++
 net/ipv6/af_inet6.c                     |  13 ++-
 net/ipv6/datagram.c                     |   4 +-
 net/ipv6/exthdrs.c                      |   3 +-
 net/ipv6/inet6_connection_sock.c        |  11 +-
 net/ipv6/ip6mr.c                        |  15 +--
 net/ipv6/ipv6_sockglue.c                |  33 ++++--
 net/ipv6/mcast.c                        |   2 -
 net/ipv6/netfilter/nf_conntrack_reasm.c |   5 +-
 net/ipv6/raw.c                          |   8 +-
 net/ipv6/reassembly.c                   |  10 +-
 net/ipv6/syncookies.c                   |   2 +-
 net/ipv6/tcp_ipv6.c                     |  28 +++--
 net/ipv6/udp.c                          |   8 +-
 net/l2tp/l2tp_ip6.c                     |   8 +-
 net/packet/af_packet.c                  |  86 +++++++-------
 net/rds/connection.c                    |   6 -
 net/rds/send.c                          |   4 +-
 net/sched/sch_api.c                     |  27 +++--
 net/sched/sch_generic.c                 |   2 +-
 net/sched/sch_mq.c                      |   4 +-
 net/sched/sch_mqprio.c                  |   4 +-
 net/sctp/auth.c                         |   4 +-
 net/sctp/socket.c                       |   9 +-
 net/unix/af_unix.c                      | 183 ++++++++++++++++++++++++++---
 sound/pci/hda/patch_hdmi.c              |   3 +-
 tools/net/Makefile                      |   7 +-
 62 files changed, 871 insertions(+), 273 deletions(-)