[resend from a different mail account. some dkim troubles]
Hello RT-list!
I'm pleased to announce the 4.4.296-rt229 stable release.
This is just an update to the latest stable release. No RT
specific changes.
Known issue:
- locktorture reports a might_sleep warning for spin_locks test
You can get this release via the git tree at:
git://git.kernel.org/pub/scm/linux/kernel/git/rt/linux-stable-rt.git
branch: v4.4-rt
Head SHA1: e74cae7dec172a5ab396b493760686f629389a45
Signing key fingerprint:
5BF6 7BC5 0826 72CA BB45 ACAE 587C 5ECA 5D0A 306C
Enjoy!
Daniel
Changes from v4.4.292-rt228:
---
Ahmad Fatoum (1):
watchdog: f71808e_wdt: fix inaccurate report in WDIOC_GETTIMEOUT
Alan Young (1):
ALSA: ctl: Fix copy of updated id with element read/write
Aleksander Jan Bajkowski (2):
MIPS: lantiq: dma: add small delay after reset
MIPS: lantiq: dma: reset correct number of channel
Alexander Aring (1):
net: ieee802154: handle iftypes as u32
Alexander Mikhalitsyn (1):
shm: extend forced shm destroy to support objects from several
IPC nses
Anant Thazhemadam (1):
media: usb: dvd-usb: fix uninit-value bug in
dibusb_read_eeprom_byte()
Anatolij Gustschin (1):
powerpc/5200: dts: fix memory node unit name
André Almeida (1):
ACPI: battery: Accept charges over the design capacity as full
Andy Shevchenko (1):
serial: 8250_dw: Drop wrong use of ACPI_PTR()
Anel Orazgaliyeva (1):
cpuidle: Fix kobject memory leaks in error paths
Armin Wolf (1):
hwmon: (dell-smm) Fix warning on /proc/i8k creation error
Arnd Bergmann (5):
hyperv/vmbus: include linux/bitops.h
ARM: 9136/1: ARMv7-M uses BE-8, not BE-32
memstick: avoid out-of-range warning
ARM: 9156/1: drop cc-option fallbacks for architecture selection
siphash: use _unaligned version by default
Austin Kim (1):
ALSA: synth: missing check for possible NULL after the call to
kstrdup
Baokun Li (2):
sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl
sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl
Barnabás Pőcze (1):
platform/x86: wmi: do not fail if disabling fails
Bart Van Assche (1):
MIPS: sni: Fix the build
Chengfeng Ye (2):
nfc: pn533: Fix double free when pn533_fill_fragment_skbs() fails
ALSA: gus: fix null pointer dereference on pointer block
Christian Löhle (1):
mmc: dw_mmc: Dont wait for DRTO on Write RSP error
Christophe JAILLET (1):
platform/x86: hp_accel: Fix an error handling path in
'lis3lv02d_probe()'
Christophe Leroy (1):
video: fbdev: chipsfb: use memset_io() instead of memset()
Claudiu Beznea (1):
dmaengine: at_xdmac: fix AT_XDMAC_CC_PERID() macro
Damien Le Moal (1):
libata: fix read log timeout value
Dan Carpenter (10):
b43legacy: fix a lower bounds test
b43: fix a lower bounds test
memstick: jmb38x_ms: use appropriate free function in
jmb38x_ms_alloc_host()
drm/msm: uninitialized variable in msm_gem_import()
usb: gadget: hid: fix error code in do_config()
scsi: csiostor: Uninitialized data in csio_ln_vnp_read_cbfn()
staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect()
can: sja1000: fix use after free in ems_pcmcia_add_card()
net: altera: set a couple error code in probe()
net/qla3xxx: fix an error code in ql_adapter_up()
Daniel Jordan (1):
crypto: pcrypt - Delay write to padata->info
Daniel Wagner (2):
Merge tag 'v4.4.296' into v4.4-rt
Linux 4.4.296-rt229
Daniele Palmas (2):
USB: serial: option: add Telit LE910S1 0x9200 composition
USB: serial: option: add Telit FN990 compositions
David Hildenbrand (1):
proc/vmcore: fix clearing user buffer by properly using clear_user()
Davidlohr Bueso (1):
block: fix ioprio_get(IOPRIO_WHO_PGRP) vs setuid(2)
Dirk Bender (1):
media: mt9p031: Fix corrupted frame after restarting stream
Dongli Zhang (2):
xen/netfront: stop tx queues during live migration
vmxnet3: do not stop tx queues after netif_device_detach()
Dongliang Mu (2):
JFS: fix memleak in jfs_mount
memory: fsl_ifc: fix leak of irq and nand_irq in fsl_ifc_ctrl_probe
Eiichi Tsukata (1):
vsock: prevent unnecessary refcnt inc for nonblocking connect
Eric Badger (1):
EDAC/sb_edac: Fix top-of-high-memory value for Broadwell/Haswell
Eric Biggers (3):
wait: add wake_up_pollfree()
binder: use wake_up_pollfree()
signalfd: use wake_up_pollfree()
Eric Dumazet (3):
llc: fix out-of-bound array index in llc_sk_dev_hash()
tcp_cubic: fix spurious Hystart ACK train detections for
not-cwnd-limited flows
net, neigh: clear whole pneigh_entry at alloc time
Eric W. Biederman (1):
signal: Remove the bogus sigkill_pending in ptrace_stop
Felix Fietkau (1):
mac80211: send ADDBA requests using the tid/queue of the
aggregation session
Filipe Manana (1):
btrfs: fix lost error handling when replaying directory deletes
Florian Fainelli (2):
ARM: dts: BCM5301X: Add interrupt properties to GPIO node
net: systemport: Add global locking for descriptor lifecycle
Florian Westphal (1):
netfilter: nfnetlink_queue: fix OOB when mac header was cleared
Giovanni Cabiddu (1):
crypto: qat - detect PFVF collision after ACK
Greg Kroah-Hartman (13):
Linux 4.4.293
Linux 4.4.294
HID: add hid_is_usb() function to make it simpler for USB detection
HID: add USB_HID dependancy to hid-prodikeys
HID: add USB_HID dependancy to hid-chicony
HID: add USB_HID dependancy on some USB HID drivers
HID: wacom: fix problems when device is not a valid USB device
HID: check for valid USB device for many HID drivers
USB: gadget: detect too-big endpoint 0 requests
USB: gadget: zero allocate endpoint 0 buffers
Linux 4.4.295
USB: gadget: bRequestType is a bitfield, not a enum
Linux 4.4.296
Guanghui Feng (1):
tty: tty_buffer: Fix the softlockup issue in flush_to_ldisc
Guo Zhi (1):
scsi: advansys: Fix kernel pointer leak
Hannes Reinecke (1):
libata: add horkage for ASMedia 1092
Harshit Mogalapalli (1):
net: netlink: af_netlink: Prevent empty skb by adding a check on len.
Helge Deller (3):
parisc: Fix ptrace check on syscall return
parisc: Fix "make install" on newer debian releases
parisc/agp: Annotate parisc agp init functions with __init
Henrik Grimler (1):
power: supply: max17042_battery: use VFSOC for capacity when no rsns
Huang Guobin (1):
bonding: Fix a use-after-free problem when bond_sysfs_slave_add()
failed
Ingmar Klein (1):
PCI: Mark Atheros QCA6174 to avoid bus reset
J. Bruce Fields (1):
nfsd: fix use-after-free due to delegation race
Jackie Liu (1):
ARM: s3c: irq-s3c24xx: Fix return value check for s3c24xx_init_intc()
Jakob Hauser (1):
power: supply: rt5033_battery: Change voltage values to µV
Jakub Kicinski (1):
net: stream: don't purge sk_error_queue in sk_stream_kill_queues()
James Smart (1):
scsi: lpfc: Fix list_add() corruption in lpfc_drain_txq()
Jan Kara (1):
ocfs2: fix data corruption on truncate
Jason Gerecke (1):
HID: introduce hid_is_using_ll_driver
Jens Axboe (1):
fs: add fget_many() and fput_many()
Jerome Marchand (1):
recordmcount.pl: look for jgnop instruction as well as bcrl on s390
Joakim Zhang (1):
net: fec: only clear interrupt of handling queue in
fec_enet_rx_queue()
Joe Thornber (1):
dm btree remove: fix use after free in rebalance_children()
Johan Hovold (9):
ALSA: ua101: fix division by zero at probe
ALSA: 6fire: fix control and bulk message timeouts
ALSA: line6: fix control and interrupt message timeouts
mwifiex: fix division by zero in fw download path
ath6kl: fix division by zero in send path
ath6kl: fix control-message timeout
USB: iowarrior: fix control-message timeouts
USB: chipidea: fix interrupt deadlock
drm/udl: fix control-message timeout
Johannes Berg (1):
iwlwifi: mvm: disable RX-diversity in powersave
Jonas Dreßler (2):
mwifiex: Read a PCI register after writing the TX ring write pointer
mwifiex: Send DELBA requests according to spec
Juergen Gross (13):
xen: sync include/xen/interface/io/ring.h with Xen's newest version
xen/blkfront: read response from backend only once
xen/blkfront: don't take local copy of a request from the ring page
xen/blkfront: don't trust the backend response data blindly
xen/netfront: read response from backend only once
xen/netfront: don't read data from request on the ring page
xen/netfront: disentangle tx_skb_freelist
xen/netfront: don't trust the backend response data blindly
tty: hvc: replace BUG_ON() with negative return value
xen/blkfront: harden blkfront against event channel storms
xen/netfront: harden netfront against event channel storms
xen/console: harden hvc_xen against event channel storms
xen/netback: don't queue unlimited number of packages
Kees Cook (1):
media: si470x: Avoid card name truncation
Krzysztof Kozlowski (1):
nfc: fix potential NULL pointer deref in nfc_genl_dump_ses_done
Lars-Peter Clausen (4):
iio: stk3310: Don't return error code in interrupt handler
iio: mma8452: Fix trigger reference couting
iio: ltr501: Don't return error code in trigger handler
iio: itg3200: Call iio_trigger_notify_done() on error
Lasse Collin (2):
lib/xz: Avoid overlapping memcpy() with invalid input with
in-place decompression
lib/xz: Validate the value before assigning it to an enum variable
Lee Jones (2):
staging: ion: Prevent incorrect reference counting behavour
net: cdc_ncm: Allow for dwNtbOutMaxSize to be unset or zero
Leon Romanovsky (1):
RDMA/mlx4: Return missed an error if device doesn't support steering
Letu Ren (1):
igbvf: fix double free in `igbvf_probe`
Lin Ma (3):
NFC: reorganize the functions in nci_request
NFC: reorder the logic in nfc_{un,}register_device
NFC: add NCI_UNREG flag to eliminate the race
Linus Lüssing (5):
ath9k: Fix potential interrupt storm on queue reset
batman-adv: Fix multicast TT issues with bogus ROAM flags
batman-adv: mcast: fix duplicate mcast packets in BLA backbone
from LAN
batman-adv: mcast: fix duplicate mcast packets in BLA backbone
from mesh
batman-adv: mcast: fix duplicate mcast packets from BLA backbone
to mesh
Linus Torvalds (1):
fget: check that the fd still exists after getting a ref to it
Loic Poulain (1):
wcn36xx: Fix HT40 capability for 2Ghz band
Lu Wei (1):
maple: fix wrong return value of maple_bus_init().
Maciej W. Rozycki (1):
vgacon: Propagate console boot parameters before calling `vc_resize'
Manjong Lee (1):
mm: bdi: initialize bdi_min_ratio when bdi is unregistered
Masami Hiramatsu (2):
ARM: clang: Do not rely on lr register for stacktrace
kprobes: Limit max data_size of the kretprobe instances
Mathias Nyman (3):
xhci: Fix USB 3.1 enumeration issues by increasing roothub
power-on-good delay
usb: hub: Fix usb enumeration issue due to address0 race
usb: hub: Fix locking issues with address0_mutex
Maxim Kiselev (1):
net: davinci_emac: Fix interrupt pacing disable
Michael Ellerman (1):
powerpc/dcr: Use cmplwi instead of 3-argument cmpli
Mike Christie (3):
scsi: target: Fix ordered tag handling
scsi: target: Fix alua_tg_pt_gps_count tracking
scsi: iscsi: Unblock session then wake up error handler
Mike Kravetz (1):
hugetlb: take PMD sharing into account when flushing tlb/caches
Miklos Szeredi (2):
fuse: fix page stealing
fuse: release pipe buf after last use
Mingjie Zhang (1):
USB: serial: option: add Fibocom FM101-GL variants
Nadav Amit (1):
hugetlbfs: flush TLBs correctly after huge_pmd_unshare
Nathan Chancellor (5):
platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning
hexagon: export raw I/O routines for modules
soc/tegra: fuse: Fix bitwise vs. logical OR warning
net: lan78xx: Avoid unnecessary self assignment
Input: touchscreen - avoid bitwise vs logical OR warning
Nguyen Dinh Phi (1):
cfg80211: call cfg80211_stop_ap when switch from P2P_GO type
Nick Desaulniers (1):
sh: check return code of request_irq
Nicolas Dichtel (1):
tun: fix bonding active backup with arp monitoring
Nicolas Pitre (1):
ARM: 8805/2: remove unneeded naked function usage
Nikolay Borisov (1):
btrfs: fix memory ordering between normal and ordered work functions
Ondrej Jirman (1):
i2c: rk3x: Handle a spurious start completion interrupt flag
Pali Rohár (1):
PCI: Add PCI_EXP_DEVCTL_PAYLOAD_* macros
Pavel Hofman (1):
usb: core: config: fix validation of wMaxPacketValue entries
Pavel Skripkin (4):
ALSA: mixer: fix deadlock in snd_mixer_oss_set_volume
media: dvb-usb: fix ununit-value in az6027_rc_query
net: batman-adv: fix error handling
net: bnx2x: fix variable dereferenced before check
Pawan Gupta (1):
smackfs: Fix use-after-free in netlbl_catmap_walk()
Pekka Korpinen (1):
iio: dac: ad5446: Fix ad5622_write() return value
Peter Zijlstra (1):
x86: Increase exception stack sizes
Phoenix Huang (1):
Input: elantench - fix misreporting trackpoint coordinates
Pierre Gondois (1):
serial: pl011: Add ACPI SBSA UART match id
Quinn Tran (1):
scsi: qla2xxx: Turn off target reset during issue_lip
Rafael J. Wysocki (1):
ACPICA: Avoid evaluating methods too early during system resume
Rajat Asthana (1):
media: mceusb: return without resubmitting URB in case of -EPROTO
error.
Randy Dunlap (8):
mmc: winbond: don't build on M68K
ia64: don't do IA64_CMPXCHG_DEBUG without CONFIG_PRINTK
m68k: set a default value for MEMORY_RESERVE
sh: fix kconfig unmet dependency warning for FRAME_POINTER
sh: define __BIG_ENDIAN for math-emu
mips: BCM63XX: ensure that CPU_SUPPORTS_32BIT_KERNEL is set
mips: bcm63xx: add support for clk_get_parent()
natsemi: xtensa: fix section mismatch warnings
Ricardo Ribalda (1):
media: uvcvideo: Set capability in s_param
Roger Quadros (1):
ARM: dts: omap: fix gpmc,mux-add-data type
Rustam Kovhaev (1):
mm: kmemleak: slob: respect SLAB_NOLEAKTRACE flag
Sean Christopherson (1):
x86/irq: Ensure PI wakeup handler is unregistered before module
unload
Sean Young (1):
media: ite-cir: IR receiver stop working after receive overflow
Sebastian Krzyszkowiak (1):
power: supply: max17042_battery: Prevent int underflow in
set_soc_threshold
Slark Xiao (1):
platform/x86: thinkpad_acpi: Fix WWAN device disabled issue after
S3 deep
Sreekanth Reddy (1):
scsi: mpt3sas: Fix kernel panic during drive powercycle test
Stefano Stabellini (2):
xen: don't continue xenstore initialization in case of errors
xen: detect uninitialized xenbus in xenbus_init
Steven Rostedt (VMware) (4):
tracefs: Have tracefs directories not set OTH permission bits by
default
tracing: Check pid filtering when creating events
tracefs: Have new files inherit the ownership of their parent
tracefs: Set all files to the same group ownership as the mount
option
Sven Eckelmann (7):
batman-adv: Keep fragments equally sized
batman-adv: Prevent duplicated softif_vlan entry
batman-adv: Consider fragmentation for needed_headroom
batman-adv: Reserve needed_*room for fragments
batman-adv: Don't always reallocate the fragmentation skb head
batman-adv: Avoid WARN_ON timing related checks
tty: serial: msm_serial: Deactivate RX DMA for polling support
Sven Schnelle (4):
parisc: fix warning in flush_tlb_all
parisc/kgdb: add kgdb_roundup() to make kgdb work with idle polling
parisc/entry: fix trace test in syscall exit path
parisc/sticon: fix reverse colors
Tadeusz Struk (1):
nfc: fix segfault in nfc_genl_dump_devices_done
Taehee Yoo (1):
batman-adv: set .owner to THIS_MODULE
Takashi Iwai (11):
Input: i8042 - Add quirk for Fujitsu Lifebook T725
ALSA: timer: Unconditionally unlink slave instances, too
ALSA: mixer: oss: Fix racy access to slots
Bluetooth: sco: Fix lock_sock() blockage by memcpy_from_msg()
ASoC: DAPM: Cover regression by kctl change notification fix
ALSA: ctxfi: Fix out-of-range access
ASoC: topology: Add missing rwsem around snd_ctl_remove() calls
ARM: socfpga: Fix crash with CONFIG_FORTIRY_SOURCE
ALSA: pcm: oss: Fix negative period/buffer sizes
ALSA: pcm: oss: Limit the period size to 16MB
ALSA: pcm: oss: Handle missing errors in snd_pcm_oss_change_params*()
Teng Qi (1):
net: ethernet: dec: tulip: de4x5: fix possible array overflows in
type3_infoblock()
Tetsuo Handa (2):
smackfs: use __GFP_NOFAIL for smk_cipso_doi()
smackfs: use netlbl_cfg_cipsov4_del() for deleting cipso_v4_doi
Thomas Gleixner (2):
PCI/MSI: Destroy sysfs before freeing entries
PCI/MSI: Clear PCI_MSIX_FLAGS_MASKALL on error
Thomas Perrot (1):
spi: spl022: fix Microwire full duplex mode
Todd Kjos (3):
binder: use euid from cred instead of using task
binder: use cred instead of task for selinux checks
binder: fix test regression due to sender_euid change
Tong Zhang (1):
scsi: dc395: Fix error case unwinding
Trond Myklebust (1):
NFSv42: Don't fail clone() unless the OP_CLONE operation failed
Tuo Li (2):
media: s5p-mfc: fix possible null-pointer dereference in
s5p_mfc_probe()
ath: dfs_pattern_detector: Fix possible null-pointer dereference
in channel_detector_create()
Uwe Kleine-König (1):
usb: max-3421: Use driver data instead of maintaining a list of
bound devices
Vasily Averin (1):
mm, oom: pagefault_out_of_memory: don't force global OOM for
dying tasks
Vasily Gorbik (1):
s390/setup: avoid using memblock_enforce_memory_limit
Vincent Donnefort (1):
sched/core: Mitigate race
cpus_share_cache()/update_top_cache_domain()
Vincent Mailhol (1):
can: pch_can: pch_can_rx_normal: fix use after free
Vladimir Murzin (1):
irqchip: nvic: Fix offset for Interrupt Priority Offsets
Wang Hai (3):
USB: serial: keyspan: fix memleak on probe errors
libertas_tf: Fix possible memory leak in probe and disconnect
libertas: Fix possible memory leak in probe and disconnect
Wang ShaoBo (1):
Bluetooth: fix use-after-free error in lock_sock_nested()
Wang Wensheng (1):
ALSA: timer: Fix use-after-free problem
Wudi Wang (1):
irqchip/irq-gic-v3-its.c: Force synchronisation when issuing INVALL
Yang Yingliang (3):
usb: musb: tusb6010: check return value after calling
platform_get_resource()
usb: host: ohci-tmio: check return value after calling
platform_get_resource()
iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
Ye Bin (1):
PM: hibernate: Get block device exclusively in swsusp_check()
Yu Liao (1):
timekeeping: Really make sure wall_to_monotonic isn't positive
YueHaibing (1):
xen-pciback: Fix return in pm_ctrl_init()
Zev Weiss (1):
hwmon: (pmbus/lm25066) Add offset coefficients
Zhang Yi (2):
quota: check block number when reading the block in quota file
quota: correct error number in free_dqentry()
Zheyu Ma (3):
media: netup_unidvb: handle interrupt properly according to the
firmware
memstick: r592: Fix a UAF bug when removing the driver
mwl8k: Fix use-after-free in mwl8k_fw_state_machine()
Zhou Qingyang (1):
net: qlogic: qlcnic: Fix a NULL pointer dereference in
qlcnic_83xx_add_rings()
hongao (1):
drm/amdgpu: fix set scaling mode Full/Full aspect/Center not
works on vga and dvi connectors
liuguoqiang (1):
net: return correct error code
zhangyue (1):
net: tulip: de4x5: fix the problem that the array 'lp->phy[8]'
may be out of bound