Skip to content

4.3.3-stable review

Greg Kroah-Hartman lkml stable 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest69 of 71 patches 12 repliesIn review

69 of 71 patches are in this archive. The cover letter announces 71.

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/71certs: add .gitignore to stop git nagging about x509_certificate_listcerts/.gitignore kernel/.gitignore+4 -10 replies
2/71r8169: fix kasan reported skb use-after-free.drivers/net/ethernet/realtek/r8169.c+3 -30 replies
3/71af-unix: fix use-after-free with concurrent readers while splicingnet/unix/af_unix.c+18 -00 replies
4/71af_unix: dont append consumed skbs to sk_receive_queuenet/unix/af_unix.c+1 -00 replies
5/71af_unix: take receive queue lock while appending new skbnet/unix/af_unix.c+4 -10 replies
6/71unix: avoid use-after-free in ep_remove_wait_queueinclude/net/af_unix.h net/unix/af_unix.c+165 -190 replies
7/71af-unix: passcred support for sendpagenet/unix/af_unix.c+64 -150 replies
8/71ipv6: Avoid creating RTF_CACHE from a rt that is not managed by fib6 treenet/ipv6/route.c+7 -10 replies
9/71ipv6: Check expire on DST_NOCACHE routenet/ipv6/route.c+10 -10 replies
10/71ipv6: Check rt->dst.from for the DST_NOCACHE routeinclude/net/ip6_fib.h net/ipv6/route.c+4 -20 replies
11/71Revert "ipv6: ndisc: inherit metadata dst when creating ndisc requests"include/net/ndisc.h net/ipv6/addrconf.c net/ipv6/ndisc.c +1 more+6 -110 replies
12/71tools/net: Use include/uapi with __EXPORTED_HEADERS__tools/net/Makefile+4 -30 replies
13/71packet: do skb_probe_transport_header when we actually have datanet/packet/af_packet.c+3 -20 replies
14/71packet: always probe for transport headernet/packet/af_packet.c+3 -40 replies
15/71packet: only allow extra vlan len on ethernet devicesnet/packet/af_packet.c+25 -350 replies
16/71packet: infer protocol from ethernet header if unsetnet/packet/af_packet.c+11 -00 replies
17/71packet: fix tpacket_snd max frame lennet/packet/af_packet.c+5 -40 replies
18/71sctp: translate host order to network order when setting a hmacidnet/sctp/auth.c+2 -20 replies
19/71net/mlx5e: Added self loopback preventiondrivers/net/ethernet/mellanox/mlx5/core/en_main.c include/linux/mlx5/mlx5_ifc.h+68 -120 replies
20/71net/mlx4_core: Fix sleeping while holding spinlock at rem_slave_countersdrivers/net/ethernet/mellanox/mlx4/resource_tracker.c+27 -120 replies
21/71ip_tunnel: disable preemption when updating per-cpu tstatsinclude/net/ip6_tunnel.h include/net/ip_tunnels.h+4 -20 replies
22/71net: switchdev: fix return code of fdb_dump stubinclude/net/switchdev.h+1 -10 replies
23/71net: thunder: Check for driver data in nicvf_remove()drivers/net/ethernet/cavium/thunder/nicvf_main.c+8 -23 replies
24/71snmp: Remove duplicate OUTMCAST stat incrementnet/ipv6/mcast.c+0 -20 replies
25/71net/ip6_tunnel: fix dst leaknet/ipv6/ip6_tunnel.c+1 -10 replies
27/71tcp: md5: fix lockdep annotationnet/ipv4/tcp_ipv4.c+2 -10 replies
28/71tcp: disable Fast Open on timeouts after handshakenet/ipv4/tcp_timer.c+12 -00 replies
29/71tcp: fix potential huge kmalloc() calls in TCP_REPAIRnet/ipv4/tcp_input.c+19 -30 replies
30/71tcp: initialize tp->copied_seq in case of cross SYN connectionnet/ipv4/tcp_input.c+1 -00 replies
31/71net, scm: fix PaX detected msg_controllen overflow in scm_detach_fdsnet/core/scm.c+2 -00 replies
32/71net: ipmr: fix static mfc/dev leaks on table destructionnet/ipv4/ipmr.c+8 -70 replies
33/71net: ip6mr: fix static mfc/dev leaks on table destructionnet/ipv6/ip6mr.c+8 -70 replies
34/71vrf: fix double free and memory corruption on register_netdevice failuredrivers/net/vrf.c+2 -1314 replies
35/71broadcom: fix PHY_ID_BCM5481 entry in the id tabledrivers/net/phy/broadcom.c+1 -10 replies
36/71tipc: fix error handling of expanding buffer headroomnet/tipc/udp_media.c+5 -22 replies
37/71ipv6: distinguish frag queues by device for multicast and link-local packetsinclude/net/ipv6.h net/ipv6/netfilter/nf_conntrack_reasm.c net/ipv6/reassembly.c+11 -50 replies
38/71RDS: fix race condition when sending a message on unbound socketnet/rds/connection.c net/rds/send.c+3 -70 replies
39/71bpf, array: fix heap out-of-bounds access when updating elementskernel/bpf/arraymap.c+1 -10 replies
40/71ipv6: add complete rcu protection around np->optinclude/linux/ipv6.h include/net/ipv6.h net/dccp/ipv6.c +10 more+122 -520 replies
41/71net/neighbour: fix crash at dumping device-agnostic proxy entriesnet/core/neighbour.c+2 -20 replies
42/71ipv6: sctp: implement sctp_v6_destroy_sock()net/sctp/socket.c+8 -10 replies
43/71openvswitch: fix hangup on vxlan/gre/geneve device deletionnet/openvswitch/dp_notify.c net/openvswitch/vport-netdev.c+7 -30 replies
44/71net_sched: fix qdisc_tree_decrease_qlen() racesinclude/net/sch_generic.h net/sched/sch_api.c net/sched/sch_generic.c +2 more+26 -140 replies
45/71btrfs: fix resending received snapshot with parentfs/btrfs/send.c+8 -20 replies
46/71btrfs: check unsupported filters in balance argumentsfs/btrfs/ioctl.c fs/btrfs/volumes.h+13 -00 replies
47/71Btrfs: fix file corruption and data loss after cloning inline extentsfs/btrfs/ioctl.c+152 -430 replies
48/71Btrfs: fix truncation of compressed and inlined extentsfs/btrfs/inode.c+68 -140 replies
50/71Btrfs: fix race leading to incorrect item deletion when dropping extentsfs/btrfs/file.c+12 -40 replies
51/71Btrfs: fix race leading to BUG_ON when running delalloc for nodatacowfs/btrfs/inode.c+8 -20 replies
52/71Btrfs: fix race when listing an inodes xattrsfs/btrfs/xattr.c+3 -10 replies
53/71btrfs: fix signed overflows in btrfs_sync_filefs/btrfs/file.c+7 -30 replies
54/71rbd: dont put snap_context twice in rbd_queue_workfn()drivers/block/rbd.c+1 -00 replies
55/71ext4 crypto: fix memory leak in ext4_bio_write_page()fs/ext4/page-io.c+4 -10 replies
56/71ext4 crypto: fix bugs in ext4_encrypted_zeroout()fs/ext4/crypto.c fs/ext4/extents.c+22 -40 replies
57/71ext4: fix potential use after free in __ext4_journal_stopfs/ext4/ext4_jbd2.c+3 -30 replies
58/71ext4, jbd2: ensure entering into panic after recording an error in superblockfs/ext4/super.c fs/jbd2/journal.c include/linux/jbd2.h+16 -30 replies
59/71firewire: ohci: fix JMicron JMB38x IT context discoverydrivers/firewire/ohci.c+5 -00 replies
60/71nfsd: serialize state seqid morphing operationsfs/nfsd/nfs4state.c fs/nfsd/state.h+38 -140 replies
61/71nfsd: eliminate sending duplicate and repeated delegationsfs/nfsd/nfs4state.c+84 -100 replies
62/71debugfs: fix refcount imbalance in start_creatingfs/debugfs/inode.c+5 -10 replies
63/71nfs4: start callback_ident at idr 1fs/nfs/nfs4client.c+1 -10 replies
64/71nfs4: resend LAYOUTGET when there is a race that changes the seqidfs/nfs/pnfs.c+31 -250 replies
65/71nfs: if we have no valid attrs, then dont declare the attribute cache validfs/nfs/inode.c+5 -10 replies
66/71ocfs2: fix umask ignored issuefs/ocfs2/namei.c+2 -00 replies
67/71block: fix segment splitblock/blk-merge.c+2 -20 replies
68/71ceph: fix message length computationfs/ceph/mds_client.c+1 -10 replies
69/71ALSA: pci: depend on ZONE_DMAsound/pci/Kconfig+12 -120 replies
70/71ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codecsound/pci/hda/patch_hdmi.c+2 -10 replies
71/71cobalt: fix Kconfig dependencydrivers/media/pci/cobalt/Kconfig+1 -10 replies

Reviews trailers per patch

29 of 69 patches have a Reviewed-by or Acked-by.

PatchEric DumazetCorinna VinschenJason WangWillem de BruijnNeil HormanVlad YasevichMoni ShouaPavel EmelyanovDmitry VyukovHannes Frederic SowaCong WangDavid AhernVegard NossumSasha LevinSantosh ShilimkarAlexei StarovoitovDaniel BorkmannHobin WooAndrew W ElbleSteve FrenchJason BaronFlavio LeitnerPravin B ShelarFilipe MananaEd TomlinsonJiri PirkoMartin KaFai LauLaurent DufourMark SalterJosh DurginAndreas DilgerDavid S. Miller
1/71
2/71A-b A-b
3/71A-b
4/71A-b
5/71A-b
6/71R-b
7/71
8/71
9/71
10/71
11/71
12/71A-b
13/71A-b
14/71A-b
15/71A-b
16/71A-b
17/71A-b
18/71A-b A-b
19/71
20/71T-b
21/71A-b
22/71A-b
23/71
24/71
25/71A-b
27/71
28/71
29/71A-b
30/71T-b
31/71R-b
32/71R-b
33/71R-b
34/71A-b A-b A-b A-b A-b A-b A-b A-b A-b A-b
35/71
36/71
37/71
38/71R-b R-b A-b
39/71A-b
40/71A-b
41/71
42/71A-b
43/71A-b A-b
44/71
45/71R-b T-b
46/71
47/71
48/71
50/71
51/71
52/71
53/71
54/71R-b
55/71
56/71
57/71R-b
58/71T-b
59/71
60/71Reported-and-Tested-by
61/71
62/71
63/71
64/71
65/71R-b
66/71
67/71T-b T-b
68/71
69/71
70/71
71/71

Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes. Scroll the table sideways for all 32 reviewers.

Read the v1 thread

Cover letter [PATCH 4.3 00/71] 4.3.3-stable review

This is the start of the stable review cycle for the 4.3.3 release. There are 71 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Mon Dec 14 20:05:02 UTC 2015. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v4.x/stable-review/patch-4.3.3-rc1.gz

and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 4.3.3-rc1

Hans Verkuil <[email protected]>
cobalt: fix Kconfig dependency

Lu, Han <[email protected]>
ALSA: hda/hdmi - apply Skylake fix-ups to Broxton display codec

Dan Williams <[email protected]>
ALSA: pci: depend on ZONE_DMA

Arnd Bergmann <[email protected]>
ceph: fix message length computation

Ming Lei <[email protected]>
block: fix segment split

Junxiao Bi <[email protected]>
ocfs2: fix umask ignored issue

Jeff Layton <[email protected]>
nfs: if we have no valid attrs, then don't declare the attribute cache valid

Jeff Layton <[email protected]>
nfs4: resend LAYOUTGET when there is a race that changes the seqid

Benjamin Coddington <[email protected]>
nfs4: start callback_ident at idr 1

Daniel Borkmann <[email protected]>
debugfs: fix refcount imbalance in start_creating

Andrew Elble <[email protected]>
nfsd: eliminate sending duplicate and repeated delegations

Jeff Layton <[email protected]>
nfsd: serialize state seqid morphing operations

Stefan Richter <[email protected]>
firewire: ohci: fix JMicron JMB38x IT context discovery

Daeho Jeong <[email protected]>
ext4, jbd2: ensure entering into panic after recording an error in superblock

Lukas Czerner <[email protected]>
ext4: fix potential use after free in __ext4_journal_stop

Theodore Ts'o <[email protected]>
ext4 crypto: fix bugs in ext4_encrypted_zeroout()

Theodore Ts'o <[email protected]>
ext4 crypto: fix memory leak in ext4_bio_write_page()

Ilya Dryomov <[email protected]>
rbd: don't put snap_context twice in rbd_queue_workfn()

David Sterba <[email protected]>
btrfs: fix signed overflows in btrfs_sync_file

Filipe Manana <[email protected]>
Btrfs: fix race when listing an inode's xattrs

Filipe Manana <[email protected]>
Btrfs: fix race leading to BUG_ON when running delalloc for nodatacow

Filipe Manana <[email protected]>
Btrfs: fix race leading to incorrect item deletion when dropping extents

Filipe Manana <[email protected]>
Btrfs: fix regression when running delayed references

Filipe Manana <[email protected]>
Btrfs: fix truncation of compressed and inlined extents

Filipe Manana <[email protected]>
Btrfs: fix file corruption and data loss after cloning inline extents

David Sterba <[email protected]>
btrfs: check unsupported filters in balance arguments

Robin Ruede <[email protected]>
btrfs: fix resending received snapshot with parent

Eric Dumazet <[email protected]>
net_sched: fix qdisc_tree_decrease_qlen() races

Paolo Abeni <[email protected]>
openvswitch: fix hangup on vxlan/gre/geneve device deletion

Eric Dumazet <[email protected]>
ipv6: sctp: implement sctp_v6_destroy_sock()

Konstantin Khlebnikov <[email protected]>
net/neighbour: fix crash at dumping device-agnostic proxy entries

Eric Dumazet <[email protected]>

    ipv6: add complete rcu protection around np->opt

Daniel Borkmann <[email protected]>
bpf, array: fix heap out-of-bounds access when updating elements

Quentin Casasnovas <[email protected]>
RDS: fix race condition when sending a message on unbound socket

Michal Kubeček <[email protected]>
ipv6: distinguish frag queues by device for multicast and link-local packets

Ying Xue <[email protected]>
tipc: fix error handling of expanding buffer headroom

Aaro Koskinen <[email protected]>
broadcom: fix PHY_ID_BCM5481 entry in the id table

Nikolay Aleksandrov <[email protected]>
vrf: fix double free and memory corruption on register_netdevice failure

Nikolay Aleksandrov <[email protected]>
net: ip6mr: fix static mfc/dev leaks on table destruction

Nikolay Aleksandrov <[email protected]>
net: ipmr: fix static mfc/dev leaks on table destruction

Daniel Borkmann <[email protected]>
net, scm: fix PaX detected msg_controllen overflow in scm_detach_fds

Eric Dumazet <[email protected]>

    tcp: initialize tp->copied_seq in case of cross SYN connection

Eric Dumazet <[email protected]>
tcp: fix potential huge kmalloc() calls in TCP_REPAIR

Yuchung Cheng <[email protected]>
tcp: disable Fast Open on timeouts after handshake

Eric Dumazet <[email protected]>
tcp: md5: fix lockdep annotation

Bjørn Mork <[email protected]>
net: qmi_wwan: add XS Stick W100-2 from 4G Systems

Paolo Abeni <[email protected]>
net/ip6_tunnel: fix dst leak

Neil Horman <[email protected]>
snmp: Remove duplicate OUTMCAST stat increment

Pavel Fedin <[email protected]>
net: thunder: Check for driver data in nicvf_remove()

Dragos Tatulea <[email protected]>
net: switchdev: fix return code of fdb_dump stub

Jason A. Donenfeld <[email protected]>
ip_tunnel: disable preemption when updating per-cpu tstats

Eran Ben Elisha <[email protected]>
net/mlx4_core: Fix sleeping while holding spinlock at rem_slave_counters

Tariq Toukan <[email protected]>
net/mlx5e: Added self loopback prevention

lucien <[email protected]>
sctp: translate host order to network order when setting a hmacid

Daniel Borkmann <[email protected]>
packet: fix tpacket_snd max frame len

Daniel Borkmann <[email protected]>
packet: infer protocol from ethernet header if unset

Daniel Borkmann <[email protected]>
packet: only allow extra vlan len on ethernet devices

Daniel Borkmann <[email protected]>
packet: always probe for transport header

Daniel Borkmann <[email protected]>
packet: do skb_probe_transport_header when we actually have data

Kamal Mostafa <[email protected]>
tools/net: Use include/uapi with __EXPORTED_HEADERS__

Nicolas Dichtel <[email protected]>
Revert "ipv6: ndisc: inherit metadata dst when creating ndisc requests"

Martin KaFai Lau <[email protected]>

    ipv6: Check rt->dst.from for the DST_NOCACHE route

Martin KaFai Lau <[email protected]>
ipv6: Check expire on DST_NOCACHE route

Martin KaFai Lau <[email protected]>
ipv6: Avoid creating RTF_CACHE from a rt that is not managed by fib6 tree

Hannes Frederic Sowa <[email protected]>
af-unix: passcred support for sendpage

Rainer Weikusat <[email protected]>
unix: avoid use-after-free in ep_remove_wait_queue

Hannes Frederic Sowa <[email protected]>
af_unix: take receive queue lock while appending new skb

Hannes Frederic Sowa <[email protected]>
af_unix: don't append consumed skbs to sk_receive_queue

Hannes Frederic Sowa <[email protected]>
af-unix: fix use-after-free with concurrent readers while splicing

françois romieu <[email protected]>
r8169: fix kasan reported skb use-after-free.

Paul Gortmaker <[email protected]>
certs: add .gitignore to stop git nagging about x509_certificate_list

-------------

Diffstat:

 Makefile                                           |   4 +-
 block/blk-merge.c                                  |   4 +-
 certs/.gitignore                                   |   4 +
 drivers/block/rbd.c                                |   1 +
 drivers/firewire/ohci.c                            |   5 +
 drivers/media/pci/cobalt/Kconfig                   |   2 +-
 drivers/net/ethernet/cavium/thunder/nicvf_main.c   |  10 +-
 .../net/ethernet/mellanox/mlx4/resource_tracker.c  |  39 ++-
 drivers/net/ethernet/mellanox/mlx5/core/en_main.c  |  56 +++-
 drivers/net/ethernet/realtek/r8169.c               |   6 +-
 drivers/net/phy/broadcom.c                         |   2 +-
 drivers/net/usb/qmi_wwan.c                         |   1 +
 drivers/net/vrf.c                                  |  15 +-
 fs/btrfs/delayed-ref.c                             | 113 ++++++++
 fs/btrfs/extent-tree.c                             |  14 +
 fs/btrfs/file.c                                    |  26 +-
 fs/btrfs/inode.c                                   |  92 +++++--
 fs/btrfs/ioctl.c                                   | 200 ++++++++++----
 fs/btrfs/send.c                                    |  10 +-
 fs/btrfs/volumes.h                                 |   8 +
 fs/btrfs/xattr.c                                   |   4 +-
 fs/ceph/mds_client.c                               |   2 +-
 fs/debugfs/inode.c                                 |   6 +-
 fs/ext4/crypto.c                                   |  23 +-
 fs/ext4/ext4_jbd2.c                                |   6 +-
 fs/ext4/extents.c                                  |   3 +
 fs/ext4/page-io.c                                  |   5 +-
 fs/ext4/super.c                                    |  12 +-
 fs/jbd2/journal.c                                  |   6 +-
 fs/nfs/inode.c                                     |   6 +-
 fs/nfs/nfs4client.c                                |   2 +-
 fs/nfs/pnfs.c                                      |  56 ++--
 fs/nfsd/nfs4state.c                                | 127 +++++++--
 fs/nfsd/state.h                                    |  19 +-
 fs/ocfs2/namei.c                                   |   2 +
 include/linux/ipv6.h                               |   2 +-
 include/linux/jbd2.h                               |   1 +
 include/linux/mlx5/mlx5_ifc.h                      |  24 +-
 include/net/af_unix.h                              |   1 +
 include/net/ip6_fib.h                              |   3 +-
 include/net/ip6_tunnel.h                           |   3 +-
 include/net/ip_tunnels.h                           |   3 +-
 include/net/ipv6.h                                 |  22 +-
 include/net/ndisc.h                                |   3 +-
 include/net/sch_generic.h                          |   3 +
 include/net/switchdev.h                            |   2 +-
 kernel/.gitignore                                  |   1 -
 kernel/bpf/arraymap.c                              |   2 +-
 net/core/neighbour.c                               |   4 +-
 net/core/scm.c                                     |   2 +
 net/dccp/ipv6.c                                    |  33 ++-
 net/ipv4/ipmr.c                                    |  15 +-
 net/ipv4/tcp_input.c                               |  23 +-
 net/ipv4/tcp_ipv4.c                                |   3 +-
 net/ipv4/tcp_timer.c                               |  12 +
 net/ipv6/addrconf.c                                |   2 +-
 net/ipv6/af_inet6.c                                |  13 +-
 net/ipv6/datagram.c                                |   4 +-
 net/ipv6/exthdrs.c                                 |   3 +-
 net/ipv6/inet6_connection_sock.c                   |  11 +-
 net/ipv6/ip6_tunnel.c                              |   2 +-
 net/ipv6/ip6mr.c                                   |  15 +-
 net/ipv6/ipv6_sockglue.c                           |  33 ++-
 net/ipv6/mcast.c                                   |   2 -
 net/ipv6/ndisc.c                                   |  10 +-
 net/ipv6/netfilter/nf_conntrack_reasm.c            |   5 +-
 net/ipv6/raw.c                                     |   8 +-
 net/ipv6/reassembly.c                              |  10 +-
 net/ipv6/route.c                                   |  24 +-
 net/ipv6/syncookies.c                              |   2 +-
 net/ipv6/tcp_ipv6.c                                |  28 +-
 net/ipv6/udp.c                                     |   8 +-
 net/l2tp/l2tp_ip6.c                                |   8 +-
 net/openvswitch/dp_notify.c                        |   2 +-
 net/openvswitch/vport-netdev.c                     |   8 +-
 net/packet/af_packet.c                             |  86 ++++---
 net/rds/connection.c                               |   6 -
 net/rds/send.c                                     |   4 +-
 net/sched/sch_api.c                                |  27 +-
 net/sched/sch_generic.c                            |   2 +-
 net/sched/sch_mq.c                                 |   4 +-
 net/sched/sch_mqprio.c                             |   4 +-
 net/sctp/auth.c                                    |   4 +-
 net/sctp/socket.c                                  |   9 +-
 net/tipc/udp_media.c                               |   7 +-
 net/unix/af_unix.c                                 | 286 ++++++++++++++++++---
 sound/pci/Kconfig                                  |  24 +-
 sound/pci/hda/patch_hdmi.c                         |   3 +-
 tools/net/Makefile                                 |   7 +-
 89 files changed, 1321 insertions(+), 403 deletions(-)