1. 17 1月, 2018 2 次提交
  2. 16 1月, 2018 3 次提交
    • S
      sh_eth: fix dumping ARSTR · 17d0fb0c
      Sergei Shtylyov 提交于
      ARSTR  is always located at the start of the TSU register region, thus
      using add_reg()  instead of add_tsu_reg() in __sh_eth_get_regs() to dump it
      causes EDMR or EDSR (depending on the register layout) to be dumped instead
      of ARSTR.  Use the correct condition/macro there...
      
      Fixes: 6b4b4fea ("sh_eth: Implement ethtool register dump operations")
      Signed-off-by: NSergei Shtylyov <sergei.shtylyov@cogentembedded.com>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      17d0fb0c
    • A
      net: cs89x0: add MODULE_LICENSE · 6200b430
      Arnd Bergmann 提交于
      This driver lacks a MODULE_LICENSE tag, leading to a Kbuild warning:
      
      WARNING: modpost: missing MODULE_LICENSE() in drivers/net/ethernet/cirrus/cs89x0.o
      
      This adds license, author, and description according to the
      comment block at the start of the file.
      Signed-off-by: NArnd Bergmann <arnd@arndb.de>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      6200b430
    • G
      ppp: unlock all_ppp_mutex before registering device · 0171c418
      Guillaume Nault 提交于
      ppp_dev_uninit(), which is the .ndo_uninit() handler of PPP devices,
      needs to lock pn->all_ppp_mutex. Therefore we mustn't call
      register_netdevice() with pn->all_ppp_mutex already locked, or we'd
      deadlock in case register_netdevice() fails and calls .ndo_uninit().
      
      Fortunately, we can unlock pn->all_ppp_mutex before calling
      register_netdevice(). This lock protects pn->units_idr, which isn't
      used in the device registration process.
      
      However, keeping pn->all_ppp_mutex locked during device registration
      did ensure that no device in transient state would be published in
      pn->units_idr. In practice, unlocking it before calling
      register_netdevice() doesn't change this property: ppp_unit_register()
      is called with 'ppp_mutex' locked and all searches done in
      pn->units_idr hold this lock too.
      
      Fixes: 8cb775bc ("ppp: fix device unregistration upon netns deletion")
      Reported-and-tested-by: syzbot+367889b9c9e279219175@syzkaller.appspotmail.com
      Signed-off-by: NGuillaume Nault <g.nault@alphalink.fr>
      Signed-off-by: NDavid S. Miller <davem@davemloft.net>
      0171c418
  3. 15 1月, 2018 2 次提交
  4. 12 1月, 2018 10 次提交
  5. 11 1月, 2018 5 次提交
  6. 10 1月, 2018 3 次提交
  7. 09 1月, 2018 7 次提交
  8. 07 1月, 2018 3 次提交
    • J
      leds: core: Fix regression caused by commit 2b83ff96 · 7b6af2c5
      Jacek Anaszewski 提交于
      Commit 2b83ff96 ("led: core: Fix brightness setting when setting delay_off=0")
      replaced del_timer_sync(&led_cdev->blink_timer) with led_stop_software_blink()
      in led_blink_set(), which additionally clears LED_BLINK_SW flag as well as
      zeroes blink_delay_on and blink_delay_off properties of the struct led_classdev.
      
      Cleansing of the latter ones wasn't required to fix the original issue but
      wasn't considered harmful. It nonetheless turned out to be so in case when
      pointer to one or both props is passed to led_blink_set() like in the
      ledtrig-timer.c. In such cases zeroes are passed later in delay_on and/or
      delay_off arguments to led_blink_setup(), which results either in stopping
      the software blinking or setting blinking frequency always to 1Hz.
      
      Avoid using led_stop_software_blink() and add a single call required
      to clear LED_BLINK_SW flag, which was the only needed modification to
      fix the original issue.
      
      Fixes 2b83ff96 ("led: core: Fix brightness setting when setting delay_off=0")
      Signed-off-by: NJacek Anaszewski <jacek.anaszewski@gmail.com>
      7b6af2c5
    • B
      mtd: nand: pxa3xx: Fix READOOB implementation · fee4380f
      Boris Brezillon 提交于
      In the current driver, OOB bytes are accessed in raw mode, and when a
      page access is done with NDCR_SPARE_EN set and NDCR_ECC_EN cleared, the
      driver must read the whole spare area (64 bytes in case of a 2k page,
      16 bytes for a 512 page). The driver was only reading the free OOB
      bytes, which was leaving some unread data in the FIFO and was somehow
      leading to a timeout.
      
      We could patch the driver to read ->spare_size + ->ecc_size instead of
      just ->spare_size when READOOB is requested, but we'd better make
      in-band and OOB accesses consistent.
      Since the driver is always accessing in-band data in non-raw mode (with
      the ECC engine enabled), we should also access OOB data in this mode.
      That's particularly useful when using the BCH engine because in this
      mode the free OOB bytes are also ECC protected.
      
      Fixes: 43bcfd2b ("mtd: nand: pxa3xx: Add driver-specific ECC BCH support")
      Cc: stable@vger.kernel.org
      Reported-by: NSean Nyekjær <sean.nyekjaer@prevas.dk>
      Tested-by: NWilly Tarreau <w@1wt.eu>
      Signed-off-by: NBoris Brezillon <boris.brezillon@free-electrons.com>
      Acked-by: NEzequiel Garcia <ezequiel@vanguardiasur.com.ar>
      Tested-by: NSean Nyekjaer <sean.nyekjaer@prevas.dk>
      Acked-by: NRobert Jarzmik <robert.jarzmik@free.fr>
      Signed-off-by: NRichard Weinberger <richard@nod.at>
      fee4380f
    • L
      loop: fix concurrent lo_open/lo_release · ae665016
      Linus Torvalds 提交于
      范龙飞 reports that KASAN can report a use-after-free in __lock_acquire.
      The reason is due to insufficient serialization in lo_release(), which
      will continue to use the loop device even after it has decremented the
      lo_refcnt to zero.
      
      In the meantime, another process can come in, open the loop device
      again as it is being shut down. Confusion ensues.
      Reported-by: N范龙飞 <long7573@126.com>
      Signed-off-by: NLinus Torvalds <torvalds@linux-foundation.org>
      Signed-off-by: NJens Axboe <axboe@kernel.dk>
      ae665016
  9. 06 1月, 2018 2 次提交
  10. 05 1月, 2018 3 次提交