linux.git/include, branch v4.18-rc5

mm: allow arch to supply p??_free_tlb functions

2018-07-14T18:11:09+00:00

The mmu_gather APIs keep track of the invalidated address range
including the span covered by invalidated page table pages.  Ranges
covered by page tables but not ptes (and therefore no TLBs) still need
to be invalidated because some architectures (x86) can cache
intermediate page table entries, and invalidate those with normal TLB
invalidation instructions to be almost-backward-compatible.

Architectures which don't cache intermediate page table entries, or
which invalidate these caches separately from TLB invalidation, do not
require TLB invalidation range expanded over page tables.

Allow architectures to supply their own p??_free_tlb functions, which
can avoid the __tlb_adjust_range.

Link: http://lkml.kernel.org/r/20180703013131.2807-1-npiggin@gmail.com
Signed-off-by: Nicholas Piggin 
Reviewed-by: Andrew Morton 
Cc: "Aneesh Kumar K. V" 
Cc: Minchan Kim 
Cc: Mel Gorman 
Cc: Nadav Amit 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

Merge branch 'core-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2018-07-13T19:50:42+00:00

Pull rseq fixes from Ingo Molnar:
 "Various rseq ABI fixes and cleanups: use get_user()/put_user(),
  validate parameters and use proper uapi types, etc"

* 'core-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
  rseq/selftests: cleanup: Update comment above rseq_prepare_unload
  rseq: Remove unused types_32_64.h uapi header
  rseq: uapi: Declare rseq_cs field as union, update includes
  rseq: uapi: Update uapi comments
  rseq: Use get_user/put_user rather than __get_user/__put_user
  rseq: Use __u64 for rseq_cs fields, validate user inputs

Merge branch 'for-4.18-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata

2018-07-11T19:44:07+00:00

Pull libata fixes from Tejun Heo:

 - Jens's patches to expand the usable command depth from 31 to 32 broke
   sata_fsl due to a subtle command iteration bug. Fixed by introducing
   explicit iteration helpers and using the correct variant.

 - On some laptops, enabling LPM by default reportedly led to occasional
   hard hangs. Blacklist the affected cases.

 - Other misc fixes / changes.

* 'for-4.18-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/libata:
  ata: Remove depends on HAS_DMA in case of platform dependency
  ata: Fix ZBC_OUT all bit handling
  ata: Fix ZBC_OUT command block check
  ahci: Add Intel Ice Lake LP PCI ID
  ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS
  sata_nv: remove redundant pointers sdev0 and sdev1
  sata_fsl: remove dead code in tag retrieval
  sata_fsl: convert to command iterator
  libata: convert eh to command iterators
  libata: add command iterator helpers
  ata: ahci_mvebu: ahci_mvebu_stop_engine() can be static
  libahci: Fix possible Spectre-v1 pmp indexing in ahci_led_store()

Merge tag 'char-misc-4.18-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2018-07-11T17:10:50+00:00

Pull char/misc fixes from Greg KH:
 "Here are a few char/misc driver fixes for 4.18-rc5.

  The "largest" stuff here is fixes for the UIO changes in 4.18-rc1 that
  caused breakages for some people. Thanks to Xiubo Li for fixing them
  quickly. Other than that, minor fixes for thunderbolt, vmw_balloon,
  nvmem, mei, ibmasm, and mei drivers. There's also a MAINTAINERS update
  where Rafael is offering to help out with reviewing driver core
  patches.

  All of these have been in linux-next with no reported issues"

* tag 'char-misc-4.18-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:
  nvmem: Don't let a NULL cell_id for nvmem_cell_get() crash us
  thunderbolt: Notify userspace when boot_acl is changed
  uio: fix crash after the device is unregistered
  uio: change to use the mutex lock instead of the spin lock
  uio: use request_threaded_irq instead
  fpga: altera-cvp: Fix an error handling path in 'altera_cvp_probe()'
  ibmasm: don't write out of bounds in read handler
  MAINTAINERS: Add myself as driver core changes reviewer
  mei: discard messages from not connected client during power down.
  vmw_balloon: fix inflation with batching

rseq: Remove unused types_32_64.h uapi header

2018-07-10T20:18:52+00:00

This header was introduced in the 4.18 merge window, and rseq does
not need it anymore. Nuke it before the final release.

Signed-off-by: Mathieu Desnoyers 
Signed-off-by: Thomas Gleixner 
Cc: linux-api@vger.kernel.org
Cc: Peter Zijlstra 
Cc: "Paul E . McKenney" 
Cc: Boqun Feng 
Cc: Andy Lutomirski 
Cc: Dave Watson 
Cc: Paul Turner 
Cc: Andrew Morton 
Cc: Russell King 
Cc: "H . Peter Anvin" 
Cc: Andi Kleen 
Cc: Chris Lameter 
Cc: Ben Maurer 
Cc: Steven Rostedt 
Cc: Josh Triplett 
Cc: Linus Torvalds 
Cc: Catalin Marinas 
Cc: Will Deacon 
Cc: Michael Kerrisk 
Cc: Joel Fernandes 
Cc: "Paul E. McKenney" 
Cc: "H. Peter Anvin" 
Link: https://lkml.kernel.org/r/20180709195155.7654-6-mathieu.desnoyers@efficios.com

rseq: uapi: Declare rseq_cs field as union, update includes

2018-07-10T20:18:52+00:00

Declaring the rseq_cs field as a union between __u64 and two __u32
allows both 32-bit and 64-bit kernels to read the full __u64, and
therefore validate that a 32-bit user-space cleared the upper 32
bits, thus ensuring a consistent behavior between native 32-bit
kernels and 32-bit compat tasks on 64-bit kernels.

Check that the rseq_cs value read is < TASK_SIZE.

The asm/byteorder.h header needs to be included by rseq.h, now
that it is not using linux/types_32_64.h anymore.

Considering that only __32 and __u64 types are declared in linux/rseq.h,
the linux/types.h header should always be included for both kernel and
user-space code: including stdint.h is just for u64 and u32, which are
not used in this header at all.

Use copy_from_user()/clear_user() to interact with a 64-bit field,
because arm32 does not implement 64-bit __get_user, and ppc32 does not
64-bit get_user. Considering that the rseq_cs pointer does not need to
be loaded/stored with single-copy atomicity from the kernel anymore, we
can simply use copy_from_user()/clear_user().

Signed-off-by: Mathieu Desnoyers 
Signed-off-by: Thomas Gleixner 
Cc: linux-api@vger.kernel.org
Cc: Peter Zijlstra 
Cc: "Paul E . McKenney" 
Cc: Boqun Feng 
Cc: Andy Lutomirski 
Cc: Dave Watson 
Cc: Paul Turner 
Cc: Andrew Morton 
Cc: Russell King 
Cc: "H . Peter Anvin" 
Cc: Andi Kleen 
Cc: Chris Lameter 
Cc: Ben Maurer 
Cc: Steven Rostedt 
Cc: Josh Triplett 
Cc: Linus Torvalds 
Cc: Catalin Marinas 
Cc: Will Deacon 
Cc: Michael Kerrisk 
Cc: Joel Fernandes 
Cc: "Paul E. McKenney" 
Cc: "H. Peter Anvin" 
Link: https://lkml.kernel.org/r/20180709195155.7654-5-mathieu.desnoyers@efficios.com

rseq: uapi: Update uapi comments

2018-07-10T20:18:52+00:00

Update rseq uapi header comments to reflect that user-space need to do
thread-local loads/stores from/to the struct rseq fields.

As a consequence of this added requirement, the kernel does not need
to perform loads/stores with single-copy atomicity.

Update the comment associated to the "flags" fields to describe
more accurately that it's only useful to facilitate single-stepping
through rseq critical sections with debuggers.

Signed-off-by: Mathieu Desnoyers 
Signed-off-by: Thomas Gleixner 
Cc: linux-api@vger.kernel.org
Cc: Peter Zijlstra 
Cc: "Paul E . McKenney" 
Cc: Boqun Feng 
Cc: Andy Lutomirski 
Cc: Dave Watson 
Cc: Paul Turner 
Cc: Andrew Morton 
Cc: Russell King 
Cc: "H . Peter Anvin" 
Cc: Andi Kleen 
Cc: Chris Lameter 
Cc: Ben Maurer 
Cc: Steven Rostedt 
Cc: Josh Triplett 
Cc: Linus Torvalds 
Cc: Catalin Marinas 
Cc: Will Deacon 
Cc: Michael Kerrisk 
Cc: Joel Fernandes 
Cc: "Paul E. McKenney" 
Cc: "H. Peter Anvin" 
Link: https://lkml.kernel.org/r/20180709195155.7654-4-mathieu.desnoyers@efficios.com

rseq: Use __u64 for rseq_cs fields, validate user inputs

2018-07-10T20:18:51+00:00

Change the rseq ABI so rseq_cs start_ip, post_commit_offset and abort_ip
fields are seen as 64-bit fields by both 32-bit and 64-bit kernels rather
that ignoring the 32 upper bits on 32-bit kernels. This ensures we have a
consistent behavior for a 32-bit binary executed on 32-bit kernels and in
compat mode on 64-bit kernels.

Validating the value of abort_ip field to be below TASK_SIZE ensures the
kernel don't return to an invalid address when returning to userspace
after an abort. I don't fully trust each architecture code to consistently
deal with invalid return addresses.

Validating the value of the start_ip and post_commit_offset fields
prevents overflow on arithmetic performed on those values, used to
check whether abort_ip is within the rseq critical section.

If validation fails, the process is killed with a segmentation fault.

When the signature encountered before abort_ip does not match the expected
signature, return -EINVAL rather than -EPERM to be consistent with other
input validation return codes from rseq_get_rseq_cs().

Signed-off-by: Mathieu Desnoyers 
Signed-off-by: Thomas Gleixner 
Cc: linux-api@vger.kernel.org
Cc: Peter Zijlstra 
Cc: "Paul E . McKenney" 
Cc: Boqun Feng 
Cc: Andy Lutomirski 
Cc: Dave Watson 
Cc: Paul Turner 
Cc: Andrew Morton 
Cc: Russell King 
Cc: "H . Peter Anvin" 
Cc: Andi Kleen 
Cc: Chris Lameter 
Cc: Ben Maurer 
Cc: Steven Rostedt 
Cc: Josh Triplett 
Cc: Linus Torvalds 
Cc: Catalin Marinas 
Cc: Will Deacon 
Cc: Michael Kerrisk 
Cc: Joel Fernandes 
Cc: "Paul E. McKenney" 
Cc: "H. Peter Anvin" 
Link: https://lkml.kernel.org/r/20180709195155.7654-2-mathieu.desnoyers@efficios.com

Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid

2018-07-10T00:16:11+00:00

Pull HID fixes from Jiri Kosina:

 - spectrev1 pattern fix in hiddev from Gustavo A. R. Silva

 - bounds check fix for hid-debug from Daniel Rosenberg

 - regression fix for HID autobinding from Benjamin Tissoires

 - removal of excessive logging from i2c-hid driver from Jason Andryuk

 - fix specific to 2nd generation of Wacom Intuos devices from Jason
   Gerecke

* 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/hid:
  HID: hiddev: fix potential Spectre v1
  HID: i2c-hid: Fix "incomplete report" noise
  HID: wacom: Correct touch maximum XY of 2nd-gen Intuos
  HID: debug: check length before copy_to_user()
  HID: core: allow concurrent registration of drivers

Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip

2018-07-08T20:26:55+00:00

Pull x86 fixes from Thomas Gleixner:

 - Prevent an out-of-bounds access in mtrr_write()

 - Break a circular dependency in the new hyperv IPI acceleration code

 - Address the build breakage related to inline functions by enforcing
   gnu_inline and explicitly bringing native_save_fl() out of line,
   which also adds a set of _ARM_ARG macros which provide 32/64bit
   safety.

 - Initialize the shadow CR4 per cpu variable before using it.

* 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip:
  x86/mtrr: Don't copy out-of-bounds data in mtrr_write
  x86/hyper-v: Fix the circular dependency in IPI enlightenment
  x86/paravirt: Make native_save_fl() extern inline
  x86/asm: Add _ASM_ARG* constants for argument registers to 
  compiler-gcc.h: Add __attribute__((gnu_inline)) to all inline declarations
  x86/mm/32: Initialize the CR4 shadow before __flush_tlb_all()