[PATCH 3.18 00/90] 3.18.126-stable review

From: Greg Kroah-Hartman
Date: Mon Nov 19 2018 - 12:04:19 EST


This is the start of the stable review cycle for the 3.18.126 release.
There are 90 patches in this series, all will be posted as a response
to this one. If anyone has any issues with these being applied, please
let me know.

Responses should be made by Wed Nov 21 16:25:28 UTC 2018.
Anything received after that time might be too late.

The whole patch series can be found in one patch at:
https://www.kernel.org/pub/linux/kernel/v3.x/stable-review/patch-3.18.126-rc1.gz
or in the git tree and branch at:
git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-3.18.y
and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
Linux 3.18.126-rc1

Mike Kravetz <mike.kravetz@xxxxxxxxxx>
hugetlbfs: fix kernel BUG at fs/hugetlbfs/inode.c:444!

Guenter Roeck <linux@xxxxxxxxxxxx>
configfs: replace strncpy with memcpy

Miklos Szeredi <mszeredi@xxxxxxxxxx>
fuse: fix leaked notify reply

Frank Sorenson <sorenson@xxxxxxxxxx>
sunrpc: correct the computation for page_ptr when truncating

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
mount: Prevent MNT_DETACH from disconnecting locked mounts

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
mount: Don't allow copying MNT_UNBINDABLE|MNT_LOCKED mounts

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
mount: Retest MNT_LOCKED in do_umount

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: fix buffer leak in __ext4_read_dirblock() on error path

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: fix buffer leak in ext4_xattr_move_to_block() on error path

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: release bs.bh before re-using in ext4_xattr_block_find()

Theodore Ts'o <tytso@xxxxxxx>
ext4: fix possible leak of sbi->s_group_desc_leak in error path

Theodore Ts'o <tytso@xxxxxxx>
ext4: avoid possible double brelse() in add_new_gdb() on error path

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: fix missing cleanup if ext4_alloc_flex_bg_array() fails while resizing

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: avoid buffer leak in ext4_orphan_add() after prior errors

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: fix possible inode leak in the retry loop of ext4_resize_fs()

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: avoid potential extra brelse in setup_new_flex_group_blocks()

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: add missing brelse() add_new_gdb_meta_bg()'s error path

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: add missing brelse() in set_flexbg_block_bitmap()'s error path

Vasily Averin <vvs@xxxxxxxxxxxxx>
ext4: add missing brelse() update_backups()'s error path

H. Peter Anvin (Intel) <hpa@xxxxxxxxx>
arch/alpha, termios: implement BOTHER, IBSHIFT and termios2

H. Peter Anvin <hpa@xxxxxxxxx>
termios, tty/tty_baudrate.c: fix buffer overrun

Arnd Bergmann <arnd@xxxxxxxx>
mtd: docg3: don't set conflicting BCH_CONST_PARAMS option

Changwei Ge <ge.changwei@xxxxxxx>
ocfs2: fix a misuse a of brelse after failing ocfs2_check_dir_entry

Mikulas Patocka <mpatocka@xxxxxxxxxx>
mach64: fix image corruption due to reading accelerator registers

Mikulas Patocka <mpatocka@xxxxxxxxxx>
mach64: fix display corruption on big endian machines

Ilya Dryomov <idryomov@xxxxxxxxx>
libceph: bump CEPH_MSG_MAX_DATA_LEN

Krzysztof Kozlowski <krzk@xxxxxxxxxx>
clk: s2mps11: Fix matching when built as module and DT node contains compatible

Max Filippov <jcmvbkbc@xxxxxxxxx>
xtensa: fix boot parameters address translation

Young_X <YangX92@xxxxxxxxxxx>
cdrom: fix improper type cast, which can leat to information leak.

Dominique Martinet <dominique.martinet@xxxxxx>
9p: clear dangling pointers in p9stat_free

Marco Felsch <m.felsch@xxxxxxxxxxxxxx>
media: tvp5150: fix width alignment during set_selection()

Joel Stanley <joel@xxxxxxxxx>
powerpc/boot: Ensure _zimage_start is a weak symbol

Dengcheng Zhu <dzhu@xxxxxxxxxxxx>
MIPS: kexec: Mark CPU offline before disabling local IRQ

Nicholas Mc Guire <hofrat@xxxxxxxxx>
media: pci: cx23885: handle adding to list failure

Tomi Valkeinen <tomi.valkeinen@xxxxxx>
drm/omap: fix memory barrier bug in DMM driver

Daniel Axtens <dja@xxxxxxxxxx>
powerpc/nohash: fix undefined behaviour when testing page size support

Miles Chen <miles.chen@xxxxxxxxxxxx>
tty: check name length in tty_find_polling_driver()

Corey Wright <undefined@xxxxxxxxx>
dm: remove duplicate dm_get_live_table() in __dm_destroy()

Nicolas Pitre <nicolas.pitre@xxxxxxxxxx>
Cramfs: fix abad comparison when wrap-arounds occur

Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx>
media: em28xx: make v4l2-compliance happier by starting sequence on zero

Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx>
media: em28xx: fix input name for Terratec AV 350

Mauro Carvalho Chehab <mchehab+samsung@xxxxxxxxxx>
media: em28xx: use a default format if TRY_FMT fails

He Zhe <zhe.he@xxxxxxxxxxxxx>
kgdboc: Passing ekgdboc to command line causes panic

Maciej W. Rozycki <macro@xxxxxxxxxxxxxx>
TC: Set DMA masks for devices

Wenwen Wang <wang6495@xxxxxxx>
dm ioctl: harden copy_params()'s copy_from_user() from malicious users

Amir Goldstein <amir73il@xxxxxxxxx>
lockd: fix access beyond unterminated strings in prints

Trond Myklebust <trondmy@xxxxxxxxx>
nfsd: Fix an Oops in free_session()

Trond Myklebust <trond.myklebust@xxxxxxxxxxxxxxx>
NFSv4.1: Fix the r/wsize checking

He Zhe <zhe.he@xxxxxxxxxxxxx>
printk: Fix panic caused by passing log_buf_len to command line

Steve French <stfrench@xxxxxxxxxxxxx>
smb3: on kerberos mount if server doesn't specify auth type use krb5

Steve French <stfrench@xxxxxxxxxxxxx>
smb3: do not attempt cifs operation in smb3 query info error path

Steve French <stfrench@xxxxxxxxxxxxx>
smb3: allow stats which track session and share reconnects to be reset

Andreas Kemnade <andreas@xxxxxxxxxxxx>
w1: omap-hdq: fix missing bus unregister at removal

Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx>
iio: adc: at91: fix wrong channel number in triggered buffer mode

Eugen Hristev <eugen.hristev@xxxxxxxxxxxxx>
iio: adc: at91: fix acking DRDY irq on simple conversions

Arnd Bergmann <arnd@xxxxxxxx>
kbuild: fix kernel/bounds.c 'W=1' warning

Eric Biggers <ebiggers@xxxxxxxxxx>
ima: fix showing large 'violations' or 'runtime_measurements_count'

Ondrej Mosnacek <omosnace@xxxxxxxxxx>
crypto: lrw - Fix out-of bounds access on counter overflow

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
signal/GenWQE: Fix sending of SIGKILL

Lukas Czerner <lczerner@xxxxxxxxxx>
ext4: initialize retries variable in ext4_da_write_inline_data_begin()

Al Viro <viro@xxxxxxxxxxxxxxxxxx>
gfs2_meta: ->mount() can get NULL dev_name

Jan Kara <jack@xxxxxxx>
jbd2: fix use after free in jbd2_log_do_checkpoint()

Stefan Nuernberger <snu@xxxxxxxxxx>
net/ipv4: defensive cipso option parsing

Eric W. Biederman <ebiederm@xxxxxxxxxxxx>
signal: Always deliver the kernel's SIGKILL and SIGSTOP to a pid namespace init

James Smart <jsmart2021@xxxxxxxxx>
scsi: lpfc: Correct soft lockup when running mds diagnostics

Alexandre Belloni <alexandre.belloni@xxxxxxxxxxx>
uio: ensure class is registered before devices

Loic Poulain <loic.poulain@xxxxxxxxxx>
usb: chipidea: Prevent unbalanced IRQ disable

Theodore Ts'o <tytso@xxxxxxx>
ext4: fix argument checking in EXT4_IOC_MOVE_EXT

Finn Thain <fthain@xxxxxxxxxxxxxxxxxxx>
scsi: esp_scsi: Track residual for PIO transfers

Martin Willi <martin@xxxxxxxxxxxxxx>
ath10k: schedule hardware restart if WMI command times out

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
kprobes: Return error if we fail to reuse kprobe instead of BUG_ON()

Ben Hutchings <ben@xxxxxxxxxxxxxxx>
x86: boot: Fix EFI stub alignment

Lubomir Rintel <lkundrak@xxxxx>
x86/olpc: Indicate that legacy PC XO-1 platform should not register RTC

Yu Zhao <yuzhao@xxxxxxxxxx>
mmc: sdhci-pci-o2micro: Add quirk for O2 Micro dev 0x8620 rev 0x01

Prarit Bhargava <prarit@xxxxxxxxxx>
cpupower: Fix coredump on VMWare

Sanskriti Sharma <sansharm@xxxxxxxxxx>
perf tools: Cleanup trace-event-info 'tdata' leak

Sanskriti Sharma <sansharm@xxxxxxxxxx>
perf tools: Free temporary 'sys' string in read_event_files()

Serhey Popovych <serhe.popovych@xxxxxxxxx>
tun: Consistently configure generic netdev params via rtnetlink

Omar Sandoval <osandov@xxxxxx>
swim: fix cleanup on setup error

Omar Sandoval <osandov@xxxxxx>
ataflop: fix error handling during setup

Waiman Long <longman@xxxxxxxxxx>
locking/lockdep: Fix debug_locks off performance problem

Masami Hiramatsu <mhiramat@xxxxxxxxxx>
selftests: ftrace: Add synthetic event syntax testcase

Nathan Chancellor <natechancellor@xxxxxxxxx>
net: qla3xxx: Remove overflowing shift statement

David S. Miller <davem@xxxxxxxxxxxxx>
sparc: Throttle perf events properly.

David S. Miller <davem@xxxxxxxxxxxxx>
sparc: Fix single-pcr perf event counter management.

He Zhe <zhe.he@xxxxxxxxxxxxx>
x86/corruption-check: Fix panic in memory_corruption_check() when boot option without value is provided

Alex Stanoev <alex@xxxxxxxxxxxx>
ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops

Maciej S. Szmigiero <mail@xxxxxxxxxxxxxxxxxxxxx>
pcmcia: Implement CLKRUN protocol disabling for Ricoh bridges

Hou Tao <houtao1@xxxxxxxxxx>
jffs2: free jffs2_sb_info through jffs2_kill_sb()

Tang Junhui <tang.junhui.linux@xxxxxxxxx>
bcache: fix miss key refill->end in writeback


-------------

Diffstat:

Makefile | 4 +-
arch/alpha/include/asm/termios.h | 8 ++-
arch/alpha/include/uapi/asm/ioctls.h | 5 ++
arch/alpha/include/uapi/asm/termbits.h | 17 +++++
arch/mips/kernel/crash.c | 3 +
arch/mips/kernel/machine_kexec.c | 3 +
arch/powerpc/boot/crt0.S | 4 +-
arch/powerpc/mm/tlb_nohash.c | 3 +
arch/sparc/kernel/perf_event.c | 26 +++++--
arch/x86/boot/tools/build.c | 7 ++
arch/x86/kernel/check.c | 15 ++++
arch/x86/platform/olpc/olpc-xo1-rtc.c | 3 +
arch/xtensa/kernel/head.S | 7 +-
crypto/lrw.c | 7 +-
drivers/block/ataflop.c | 25 ++++---
drivers/block/swim.c | 13 +++-
drivers/cdrom/cdrom.c | 2 +-
drivers/clk/clk-s2mps11.c | 30 ++++++++
drivers/gpu/drm/omapdrm/omap_dmm_tiler.c | 11 +++
drivers/iio/adc/at91_adc.c | 6 +-
drivers/md/bcache/btree.c | 2 +-
drivers/md/dm-ioctl.c | 18 ++---
drivers/md/dm.c | 1 -
drivers/media/i2c/tvp5150.c | 14 ++--
drivers/media/pci/cx23885/altera-ci.c | 10 +++
drivers/media/usb/em28xx/em28xx-cards.c | 4 +-
drivers/media/usb/em28xx/em28xx-video.c | 8 ++-
drivers/misc/genwqe/card_base.h | 2 +-
drivers/misc/genwqe/card_dev.c | 9 +--
drivers/mmc/host/sdhci-pci-o2micro.c | 3 +
drivers/mtd/devices/Kconfig | 2 +-
drivers/net/ethernet/qlogic/qla3xxx.c | 2 -
drivers/net/tun.c | 2 +
drivers/net/wireless/ath/ath10k/wmi.c | 6 ++
drivers/pcmcia/ricoh.h | 35 ++++++++++
drivers/pcmcia/yenta_socket.c | 3 +-
drivers/scsi/esp_scsi.c | 1 +
drivers/scsi/esp_scsi.h | 2 +
drivers/scsi/lpfc/lpfc_sli.c | 7 ++
drivers/scsi/mac_esp.c | 2 +
drivers/tc/tc.c | 8 ++-
drivers/tty/serial/kgdboc.c | 5 ++
drivers/tty/tty_io.c | 2 +-
drivers/tty/tty_ioctl.c | 4 +-
drivers/uio/uio.c | 9 +++
drivers/usb/chipidea/otg.h | 3 +-
drivers/video/fbdev/aty/mach64_accel.c | 28 ++++----
drivers/w1/masters/omap_hdq.c | 2 +
fs/cifs/cifs_debug.c | 3 +
fs/cifs/cifs_spnego.c | 6 +-
fs/cifs/inode.c | 10 ++-
fs/configfs/symlink.c | 2 +-
fs/cramfs/inode.c | 3 +-
fs/ext4/inline.c | 2 +-
fs/ext4/move_extent.c | 8 ++-
fs/ext4/namei.c | 5 +-
fs/ext4/resize.c | 28 ++++----
fs/ext4/super.c | 16 ++---
fs/ext4/xattr.c | 4 ++
fs/fuse/dev.c | 4 +-
fs/gfs2/ops_fstype.c | 3 +
fs/jbd2/checkpoint.c | 4 +-
fs/jffs2/super.c | 4 +-
fs/lockd/host.c | 2 +-
fs/namespace.c | 22 ++++--
fs/nfs/nfs4client.c | 16 +++--
fs/ocfs2/dir.c | 3 +-
include/linux/ceph/libceph.h | 8 ++-
include/linux/tc.h | 1 +
kernel/bounds.c | 4 +-
kernel/kprobes.c | 27 ++++++--
kernel/locking/lockdep.c | 4 +-
kernel/printk/printk.c | 7 +-
kernel/signal.c | 2 +-
lib/debug_locks.c | 2 +-
mm/hugetlb.c | 23 +++++--
net/9p/protocol.c | 5 ++
net/ipv4/cipso_ipv4.c | 11 +--
net/sunrpc/svc_xprt.c | 2 +-
net/sunrpc/xdr.c | 5 +-
security/integrity/ima/ima_fs.c | 6 +-
sound/pci/ca0106/ca0106.h | 2 +-
tools/perf/util/trace-event-info.c | 2 +
tools/perf/util/trace-event-read.c | 5 +-
tools/power/cpupower/utils/cpufreq-info.c | 2 +
tools/power/cpupower/utils/helpers/amd.c | 5 ++
.../inter-event/trigger-synthetic-event-syntax.tc | 80 ++++++++++++++++++++++
87 files changed, 581 insertions(+), 160 deletions(-)