Currently lz4 uses it's own defaults which include O3 optimization.
Switch from O3 to bitbake default O2 reduces binary package size
from 467056 to 331888 bytes. Enables also building with Os if needed.
(From OE-Core rev: af571c0841265dfa4bd87546080e499336a37fcc)
Signed-off-by: Mikko Rapeli <mikko.rapeli@bmw.de>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit abaaf8c6bcd368728d298937a9406eb2aebc7a7d)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Branch 'master' renamed to 'unstable', which causing following failure.
Error:
Fetcher failure: Unable to find revision cb19bbfbe7e52174332f68bf2f295b39d119fad3 in branch master even from upstream
Switch to 'unstanble' branch.
(From OE-Core rev: d4b96dc1e457b4e68c5bad685ffcfd2f250162e7)
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Branch 'assimp_5.0_release' is not present in repo.
Error:
assimp-5.0.1-r0 do_fetch: Fetcher failure: Unable to find revision 8f0c6b04b2257a520aaab38421b2e090204b69df in branch assimp_5.0_release even from upstream
Set nobranch=1, to fetch from v5.0.1 tag.
(From OE-Core rev: 4bd92b9621909b8b528b648529baaaa48bc1c424)
Signed-off-by: Naveen Saini <naveen.kumar.saini@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
We don't make do_cve_check depend on do_unpack because that would be a
waste of time 99% of the time. The compromise here is that we can't
scan remote patches for issues, but this isn't a problem so downgrade
the warning to a note.
Also move the check for CVEs in the filename before the local file check
so that even with remote patches, we still check for CVE references in
the name.
(From OE-Core rev: 32a19dfbaac38cd4864281a1131ac65e1216318f)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 0251cad677579f5b4dcc25fa2f8552c6040ac2cf)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Occasionally the cve-check tool will warn that it is adding the same
package twice. Knowing what this package is might be the first step
towards understanding where this message comes from.
(From OE-Core rev: e3574760ee59c1ca7d2698f09ddd37ee568f04f3)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c1179faec8583a8b7df192cf1cbf221f0e3001fc)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
The JSON report generated by the cve-check class is basically a huge
list of packages. This list of packages is, however, unsorted.
To make things easier for people comparing the JSON, or more
specifically for git when archiving the JSON over time in a git
repository, we can sort the list by package name.
(From OE-Core rev: 5a509bc6f26247cc7561189d582c91816042fd91)
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit e9861be0e5020830c2ecc24fd091f4f5b05da036)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This reverts commit 45ce9885351a2344737170e6e810dc67ab3e7ea9.
Unfortunately this backport results in qemuarmv5 failing to boot with
a qemu lsi hw error.
[YOCTO #15274]
See discussion: https://bugzilla.yoctoproject.org/show_bug.cgi?id=15274
(From OE-Core rev: 14aa11aecf503cef08e43c90cf0bd574721ca965)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This vulnerability was introduced in 2.36, so 2.31 is not vulnerable.
(From OE-Core rev: 3471922461627c0f0487feb09cfdc4cfeeb3f3ca)
Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
(From OE-Core rev: d34567be6e87afdec55973f8f75be8d44b4acd1b)
Signed-off-by: Lee Chee Yang <chee.yang.lee@intel.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Error occured while running bitbake on cephfs:
WARNING: The free inode of path is running low (-0.001K left)
ERROR: Immediately halt since the disk space monitor action is "HALT"!
(Bitbake rev: 3c7b210e9599058a48d0c38ce8034b94e2d0f781)
Signed-off-by: Samantha Jalabert <samantha.jalabert@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
The pipe library is deprecated in Python 3.11 and will be removed in
Python 3.13. pipe.quote is just an import of shlex.quote anyway.
Clean up imports while we're at it.
(From OE-Core rev: a6ef13bdad40826d76a3331cd0878bb22510f375)
Signed-off-by: Ola x Nilsson <olani@axis.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
(cherry picked from commit 5f33c7b99a991c380d1813da8248ba5470ca4d4e)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Avoid a divide by zero traceback if unfortunate test counts are encountered.
(From OE-Core rev: 33d3374a7149ad1afe86d86c0dc2a948f70e26bd)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit c5aeea53dfacb53dedb8445cb3523dc3a8cb6dca)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This includes CVE fix for CVE-2023-5535.
(From OE-Core rev: 35fc341402f38619922dcfc4dc9e58b00be26259)
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Add a SECURITY.md file with hints for security researchers and other
parties who might report potential security vulnerabilities.
(From meta-yocto rev: d8b84cfded9137a74ab0052ff2d7710887f29f10)
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Add a SECURITY.md file with hints for security researchers and other
parties who might report potential security vulnerabilities.
(Bitbake rev: dd826595414c5dc1a649f45a9dd2430bf6d4699b)
Signed-off-by: Marta Rybczynska <marta.rybczynska@syslinbit.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Widely accepted certificates for IP addresses are expensive and only
affordable for larger organizations. Therefore if the user provides
the hostname in the DNS= option, we should use it instead of the IP
address.
This fixes https://nvd.nist.gov/vuln/detail/CVE-2018-21029 per
suggestion https://github.com/systemd/systemd-stable/issues/72 .
CVE: CVE-2018-21029
(From OE-Core rev: 6b4a583169ae40a8d51e7ffa33785409b5111a81)
Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
The latest 6.5 kernels do not appear to create the source file in
${D}${nonarch_base_libdir}/modules/${KERNEL_VERSION}/source so the
recipe errors out when trying to remove it. Simple fix is to add the
-f (force) flag to the call.
(From OE-Core rev: 2e669bf797b15d803e7d6a700e449bdc467a4bcc)
(From OE-Core rev: 844faa7c51ae8ec0966e9c5c3f70a1dbf2222c21)
Signed-off-by: Ryan Eatmon <reatmon@ti.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Alexander Sverdlin <alexander.sverdlin@siemens.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Backported from kirkstone commit 7e177848f97e.
Signed-off-by: Paul Barker <paul.barker.ct@bp.renesas.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
- This upgrade includes multiple security fixes.
CVE-2022-4883
CVE-2022-44617
CVE-2022-46285
CVE-2022-44617
CVE-2023-43788
CVE-2023-43789
- Removed CVE-2022-46285 as it is already fixed by this upgrade.
- License-update: additional copyright holders
f0857c0 man pages: Correct Copyright/License notices
Due to this commit LIC_FILES_CHKSUM is changed
- Disable reading compressed files as that requires compress/uncompress executables.
Following the approach in oe-core/master:
7de4084634 libxpm: upgrade 3.5.14 -> 3.5.15
- Add XORG_EXT to specify tar.xz as upstream has switched from bz2 to xz compression.
(From OE-Core rev: 47e270a4fd2e086b5ee9f38891f326ce505f2319)
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Upstream has switched some new releases from bz2 to xz compression. Add
an XORG_EXT variable so recipes can set the file name extension needed
for the compression type.
Following the approach in oe-core/master: 6a8068e036b4b2a40b38896275b936916b4db76e
xorg-lib-common: Add variable to set tarball type use a variable for the tarball suffix/compression format.
(From OE-Core rev: ff386fb5632c26ceb12d2381e9128b0546aef795)
Signed-off-by: Robert Joslyn <robert.joslyn@redrectangle.org>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
This includes CVE fix for CVE-2023-5441.
(From OE-Core rev: 624081236d5554dbc7c044396caabc3464b1b3ac)
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
CVE's Fixed:
CVE-2023-29499: glib: GVariant offset table entry size is not checked in is_normal()
CVE-2023-32611: glib: g_variant_byteswap() can take a long time with some non-normal inputs
CVE-2023-32636: glib: Timeout in fuzz_variant_text
CVE-2023-32643: glib: Heap-buffer-overflow in g_variant_serialised_get_child
CVE-2023-32665: glib: GVariant deserialisation does not match spec for non-normal data
(From OE-Core rev: b576beba80d44e67762d46bf3bc2f14c05bc0f6b)
Signed-off-by: Siddharth Doshi <sdoshi@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Take patch from Debian 7.64.0-4+deb10u7.
(From OE-Core rev: 364a9e46f167c2501785cd55a71cf9a614e64710)
Signed-off-by: Mike Crowe <mac@mcrowe.com>
CVE: CVE-2023-38546
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Backporting this change required tweaking the error value since the
two-level CURLE_PROXY error reporting was introduced after curl
7.69.1. The test required some tweaks to not rely on more-recent
improvements to the test infrastructure too.
(From OE-Core rev: ccec26b1437f1ece4cb4f27581b0df904297358f)
Signed-off-by: Mike Crowe <mac@mcrowe.com>
CVE: CVE-2023-38545
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Add fix for tiffcrop tool CVE-2023-1916 [1].
A flaw was found in tiffcrop, a program distributed by the libtiff
package. A specially crafted tiff file can lead to an out-of-bounds
read in the extractImageSection function in tools/tiffcrop.c, resulting
in a denial of service and limited information disclosure. This issue
affects libtiff versions 4.x.
The tool is no longer part of newer libtiff distributions, hence the
fix is rejected by upstream in [2]. The backport is still applicable
to older versions of libtiff, pick the CVE fix from ubuntu 20.04 [3].
[1] https://nvd.nist.gov/vuln/detail/CVE-2023-1916
[2] https://gitlab.com/libtiff/libtiff/-/merge_requests/535
[3] https://packages.ubuntu.com/source/focal-updates/tiff
(From OE-Core rev: 28ad0fdd30f490612aca6cc96ee503e5f92360a8)
Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Replace the original "Wrong CRC with ASCII CRC for large files"
patch with upstream backport, and add additional fix on top of
the same problem which upstream detected and fixed.
(From OE-Core rev: 0e167ef0eb7ac62ddb991ce80c27882863d8ee7c)
Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
There is a stack overflow vulnerability in ash.c:6030 in busybox before
1.35. In the environment of Internet of Vehicles, this vulnerability can
be executed from command to arbitrary code execution.
https://nvd.nist.gov/vuln/detail/CVE-2022-48174
CVE: CVE-2022-48174
(From OE-Core rev: 634daf953e4bd8c6df3ee341b5e93cc81e1a620d)
Signed-off-by: Marek Vasut <marex@denx.de>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
In Artifex Ghostscript through 10.01.2, gdevijs.c in GhostPDL can lead to remote
code execution via crafted PostScript documents because they can switch to the
IJS device, or change the IjsServer parameter, after SAFER has been activated.
NOTE: it is a documented risk that the IJS server can be specified on a gs
command line (the IJS device inherently must execute a command to start the IJS server).
References:
https://nvd.nist.gov/vuln/detail/CVE-2023-43115
Upstream commit:
https://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=e59216049cac290fb437a04c4f41ea46826cfba5
(From OE-Core rev: a43f7277061ee6c30c42c9318e3e9dd076563f5d)
Signed-off-by: Vijay Anusuri <vanusuri@mvista.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
The current dunfell CVE scans report 0 CVEs for our dbus version. This
is not correct, though, as we use the wrong product name to query it.
Fix this to get a proper CVE list.
(From OE-Core rev: 922872c85d417a5a319aa4beef57ffa4d05faf27)
Signed-off-by: Julian Haller <julian.haller@philips.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Take the patch from the source for Debian's glibc 2.31-13+deb11u7
package, the changelog for which starts with:
glibc (2.31-13+deb11u7) bullseye-security; urgency=medium
* debian/patches/any/local-CVE-2023-4911.patch: Fix a buffer overflow in the
dynamic loader's processing of the GLIBC_TUNABLES environment variable
(CVE-2023-4911).
This addresses the "Looney Tunables" vulnerability described at
https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
(From OE-Core rev: 9a800a2e2c2b14eab8c1f83cb4ac3b94a70dd23c)
Signed-off-by: Mike Crowe <mac@mcrowe.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Updating to the latest korg -stable release that comprises
the following commits:
a140610d8aff Linux 5.4.257
42900fd140c8 net/sched: Retire rsvp classifier
b3637835ac99 drm/amdgpu: fix amdgpu_cs_p1_user_fence
650ebbba5c15 mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller
b1ef1f2f3737 ext4: fix rec_len verify error
e4efb0aaf288 scsi: megaraid_sas: Fix deadlock on firmware crashdump
44654114fb6f i2c: aspeed: Reset the i2c controller when timeout occurs
ce47fe53f78b tracefs: Add missing lockdown check to tracefs_create_dir()
b6c042d4ac6a nfsd: fix change_info in NFSv4 RENAME replies
952e477f9080 tracing: Have option files inc the trace array ref count
ff8cf370d359 tracing: Have current_trace inc the trace array ref count
a70c6e57316b btrfs: fix lockdep splat and potential deadlock after failure running delayed items
8e8dcc0f1518 attr: block mode changes of symlinks
a8403f9fd402 md/raid1: fix error: ISO C90 forbids mixed declarations
349640248b5e selftests: tracing: Fix to unmount tracefs for recovering environment
5b50c95cf842 btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super
b61aad18b38a btrfs: add a helper to read the superblock metadata_uuid
bd0fe5489102 btrfs: move btrfs_pinned_by_swapfile prototype into volumes.h
a04cce3e79c6 perf tools: Add an option to build without libbfd
f3701ef61fd7 perf jevents: Make build dependency on test JSONs
a12e9ba7f346 tools features: Add feature test to check if libbfd has buildid support
964e025ceefd kobject: Add sanity check for kset->kobj.ktype in kset_register()
545d1070ed7c media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning
44d72e9edd1b serial: cpm_uart: Avoid suspicious locking
2cbe6a88fbdd scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show()
9cd6b3802d7c usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc
abe0cd279aee media: pci: cx23885: replace BUG with error return
641e60223971 media: tuners: qt1010: replace BUG_ON with a regular error
991c77fe18c6 media: az6007: Fix null-ptr-deref in az6007_i2c_xfer()
8dc5b370254a media: anysee: fix null-ptr-deref in anysee_master_xfer
0c02eb70b1dd media: af9005: Fix null-ptr-deref in af9005_i2c_xfer
beb9550494e7 media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer()
b49c6e5dd236 media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer
7ffe14fce742 powerpc/pseries: fix possible memory leak in ibmebus_bus_init()
5873df019512 jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount
b12ccbfdf653 fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount()
a7fde3d46ac6 ext2: fix datatype of block number in ext2_xattr_set2()
25a68f2286be md: raid1: fix potential OOB in raid1_remove_disk()
77918680ab07 bus: ti-sysc: Configure uart quirks for k3 SoC
279e32b79d03 drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable()
3beb97bed860 wifi: mac80211_hwsim: drop short frames
6773ea9982dc alx: fix OOB-read compiler warning
fd1a177d2ccb mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450
ff75c853b7db tpm_tis: Resend command to recover from data transfer errors
61f5453e9706 crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui()
d1473fc030d3 wifi: mwifiex: fix fortify warning
38eb4ef67f60 wifi: ath9k: fix printk specifier
93f4a0b74413 devlink: remove reload failed checks in params get/set callbacks
aadb178c5123 hw_breakpoint: fix single-stepping when using bpf_overflow_handler
cb37e7fa2339 perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09
4de282f49135 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470
d0a13c395e22 kernel/fork: beware of __put_task_struct() calling context
3bf4463e40a1 ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer
117fb80cd1e6 locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock
7afbfde45d66 btrfs: output extra debug info if we failed to find an inline backref
6079dc77c6f3 autofs: fix memory leak of waitqueues in autofs_catatonic_mode
8c027a5798f1 parisc: Drop loops_per_jiffy from per_cpu struct
4316b8294503 drm/amd/display: Fix a bug when searching for insert_above_mpcc
1ce8362b4ac6 kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg().
b5fc6fd660ab ixgbe: fix timestamp configuration code
f9f3ce7719eb net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict()
08d36f317c40 platform/mellanox: mlxbf-tmfifo: Drop jumbo frames
0507815ae94b mlxbf-tmfifo: sparse tags for config access
7efc9e97f6e2 platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors
479c71cda14b kcm: Fix memory leak in error path of kcm_sendmsg()
c565533407cd r8152: check budget for r8152_poll()
653fbddbdfc6 net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all()
ba6673824efa net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc()
5624f26a3574 net: ipv4: fix one memleak in __inet_del_ifa()
e757ca9c1ca1 clk: imx8mm: Move 1443X/1416X PLL clock structure to common place
75e0bd976154 ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2
5f71716772b8 usb: typec: bus: verify partner exists in typec_altmode_attention
14fe0f8627f8 usb: typec: tcpm: Refactor tcpm_handle_vdm_request
979f8743f373 usb: typec: tcpm: Refactor tcpm_handle_vdm_request payload handling
6ca8e31480b5 perf tools: Handle old data in PERF_RECORD_ATTR
dffa46d0ca52 perf hists browser: Fix hierarchy mode header
6095dd28217e mtd: rawnand: brcmnand: Fix potential false time out warning
aae45746f4ae mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write
09417fbf12f8 mtd: rawnand: brcmnand: Fix crash during the panic_write
aa64f6f0ce7e btrfs: use the correct superblock to compare fsid in btrfs_validate_super
6eb1fc314ce4 btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART
b0d236e3afac fuse: nlookup missing decrement in fuse_direntplus_link
0e918d7c00da ata: pata_ftide010: Add missing MODULE_DESCRIPTION
e03ac1773414 ata: sata_gemini: Add missing MODULE_DESCRIPTION
118db787bab3 sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory()
89099d73b2dd net: hns3: fix the port information display when sfp is absent
a44602888bbe netfilter: nfnetlink_osf: avoid OOB read
62c363e6041c ip_tunnels: use DEV_STATS_INC()
a5dffc12038f idr: fix param name in idr_alloc_cyclic() doc
6b0cb9c05584 s390/zcrypt: don't leak memory if dev_set_name() fails
c149b61301fe igb: Change IGB_MIN to allow set rx/tx value between 64 and 80
4a5defbfe88b igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80
c805b8741476 igc: Change IGC_MIN to allow set rx/tx value between 64 and 80
8047a4898498 kcm: Destroy mutex in kcm_exit_net()
a6d11571b91d net: sched: sch_qfq: Fix UAF in qfq_dequeue()
f1ba9a03b166 af_unix: Fix data race around sk->sk_err.
1ffed3ea8750 af_unix: Fix data-races around sk->sk_shutdown.
5d91b7891f4a af_unix: Fix data-race around unix_tot_inflight.
adcf4e069358 af_unix: Fix data-races around user->unix_inflight.
e13db62db9ef net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr
23b4b1a069e9 veth: Fixing transmit return status for dropped packets
0133bc289720 igb: disable virtualization features on 82580
41f10a4d78fe net: read sk->sk_family once in sk_mc_loop()
cd12efc54ff8 ipv4: annotate data-races around fi->fib_dead
01585fa32650 sctp: annotate data-races around sk->sk_wmem_queued
04301da4d870 pwm: lpc32xx: Remove handling of PWM channels
565f7bb0b3fe watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load
7a0e41223e98 perf top: Don't pass an ERR_PTR() directly to perf_session__delete()
c5be10f1bf61 x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm()
1d0cc1a9c4bd perf annotate bpf: Don't enclose non-debug code with an assert()
c7cc4dc2473c kconfig: fix possible buffer overflow
0158dab8e8b8 NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info
64c5e916fabe soc: qcom: qmi_encdec: Restrict string length in decode
5c7608d976ab clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock
b88626c47217 parisc: led: Reduce CPU overhead for disk & lan LED computation
536f30922556 parisc: led: Fix LAN receive and transmit LEDs
cbfffe51221b lib/test_meminit: allocate pages up to order MAX_ORDER
9b7f6e500969 drm/ast: Fix DRAM init on AST2200
8ffa40ff64aa fbdev/ep93xx-fb: Do not assign to struct fb_info.dev
6d5eb57a02a5 scsi: qla2xxx: Remove unsupported ql2xenabledif option
e24bc58113d1 scsi: qla2xxx: Turn off noisy message log
05935f9106f1 scsi: qla2xxx: Fix erroneous link up failure
61641000ad33 scsi: qla2xxx: fix inconsistent TMF timeout
f966dc8c2d18 net/ipv6: SKB symmetric hash should incorporate transport ports
d31331e2df6e drm: fix double free for gbo in drm_gem_vram_init and drm_gem_vram_create
34eb4bd9152c udf: initialize newblock to 0
206d2b7bafc0 usb: typec: tcpci: clear the fault status bit
824421868102 serial: sc16is7xx: fix broken port 0 uart init
159bc8c6b5db sc16is7xx: Set iobase to device index
355ac795843f cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug
5e7d0acc69b5 crypto: stm32 - fix loop iterating through scatterlist for DMA
306e356d583d s390/ipl: add missing secure/has_secure file to ipl type 'unknown'
e972231db29b pstore/ram: Check start of empty przs during init
b6c9d040191f fsverity: skip PKCS#7 parser when keyring is empty
712491c9abf2 net: handle ARPHRD_PPP in dev_is_mac_header_xmit()
15b3727108c7 X.509: if signature is unsupported skip validation
7a7dd70cb954 dccp: Fix out of bounds access in DCCP error handler
1c675c937cb2 dlm: fix plock lookup when using multiple lockspaces
8cd1c5cec6c9 parisc: Fix /proc/cpuinfo output for lscpu
0337bb53cb7d procfs: block chmod on /proc/thread-self/comm
2e1f12ce0da7 Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset"
eb1fa4819d9c ntb: Fix calculation ntb_transport_tx_free_entry()
b2a6a169c222 ntb: Clean up tx tail index on link down
94491412a2af ntb: Drop packets when qp link is down
ff3bb51e2136 media: dvb: symbol fixup for dvb_attach()
b047ac1528a1 xtensa: PMU: fix base address for the newer hardware
2791a2a69a2c backlight/lv5207lp: Compare against struct fb_info.device
bc86f29e1281 backlight/bd6107: Compare against struct fb_info.device
3dd8ff569596 backlight/gpio_backlight: Compare against struct fb_info.device
c2e1ce4fa498 ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch()
f53ab5a2bf20 ipmi_si: fix a memleak in try_smi_init()
e7f97980f735 ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl
29811f4b8255 PM / devfreq: Fix leak in devfreq_dev_release()
c2ad60ed38b8 igb: set max size RX buffer when store bad packet is enabled
d44403ec0676 skbuff: skb_segment, Call zero copy functions before using skbuff frags
64831fb6a204 netfilter: xt_sctp: validate the flag_info count
28ce8495b559 netfilter: xt_u32: validate user space input
109e830585e8 netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c
3d54e9949930 igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU
ec6ad9d99ef4 virtio_ring: fix avail_wrap_counter in virtqueue_add_packed
12fcca2ee445 cpufreq: Fix the race condition while updating the transition_task of policy
fe5dd3950178 dmaengine: ste_dma40: Add missing IRQ check in d40_probe
e0f2d85ea3d0 um: Fix hostaudio build errors
88d508faf3dd mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume()
efa7f31669f0 rpmsg: glink: Add check for kstrdup
d2473df751d2 phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write
f36a06988c19 phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate
b0d5d77b14b4 phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328
90e037cabc2c tracing: Fix race issue between cpu buffer write and swap
ac78921ec246 x86/speculation: Mark all Skylake CPUs as vulnerable to GDS
df7ca43fe090 HID: multitouch: Correct devm device reference for hidinput input_dev name
cf48a7ba5c09 HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode()
011daffb53ce RDMA/siw: Correct wrong debug message
35a78898cdfd RDMA/siw: Balance the reference of cep->kref in the error path
9b6296861a5a Revert "IB/isert: Fix incorrect release of isert connection"
03db4fe7917b amba: bus: fix refcount leak
93a4aefa5745 serial: tegra: handle clk prepare error in tegra_uart_hw_init()
d2bf25674cea scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock
b1e3199bade0 scsi: core: Use 32-bit hostnum in scsi_host_lookup()
103b41e97275 media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors
009b1202a099 media: ov2680: Fix vflip / hflip set functions
560624cf1d3a media: ov2680: Fix ov2680_bayer_order()
218b60bc06bc media: ov2680: Remove auto-gain and auto-exposure controls
768d4d230c02 media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips
c04ae531eea6 media: ov5640: Enable MIPI interface in ov5640_set_power_mipi()
916219c523e0 media: i2c: ov5640: Configure HVP lines in s_power callback
93c518d28600 USB: gadget: f_mass_storage: Fix unused variable warning
0d8c6770983e media: go7007: Remove redundant if statement
38269b9ec843 iommu/vt-d: Fix to flush cache of PASID directory table
a94aaffe9290 IB/uverbs: Fix an potential error pointer dereference
c3a679853826 driver core: test_async: fix an error code
27a218419c86 dma-buf/sync_file: Fix docs syntax
c9e6c1fefcd5 coresight: tmc: Explicit type conversions to prevent integer overflow
463934ca5d98 scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly
668ce8d508a3 scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly
06a2dde58f40 scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly
e26d52128691 x86/APM: drop the duplicate APM_MINOR_DEV macro
c65be6ad55e5 serial: sprd: Fix DMA buffer leak issue
730d1b7ec94c serial: sprd: Assign sprd_port after initialized to avoid wrong access
dff8066579c0 serial: sprd: remove redundant sprd_port cleanup
a7d80271a150 serial: sprd: getting port index via serial aliases only
47f3be62eab5 scsi: qla4xxx: Add length check when parsing nlattrs
bc66e701ca8f scsi: be2iscsi: Add length check when parsing nlattrs
161d4509dde4 scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param()
bc4fbf2dab31 usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host()
de4345fe4312 media: mediatek: vcodec: Return NULL if no vdec_fb is found
02c0ea731f31 media: cx24120: Add retval check for cx24120_message_send()
75d6ef197c48 media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer()
74697b417624 media: dib7000p: Fix potential division by zero
afd90d353f80 drivers: usb: smsusb: fix error handling code in smsusb_init_device
4bc5ffaf8ac4 media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link()
008b334af84a media: v4l2-fwnode: simplify v4l2_fwnode_parse_link
064e156e9f66 media: v4l2-fwnode: fix v4l2_fwnode_parse_link handling
7a9619e38c2b NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN
16282aeca44b NFSD: da_addr_body field missing in some GETDEVICEINFO replies
93a14ab67582 fs: lockd: avoid possible wrong NULL parameter
d3351799be41 jfs: validate max amount of blocks before allocation.
65bf8a196ba2 powerpc/iommu: Fix notifiers being shared by PCI and VIO buses
650803f93dd8 nfs/blocklayout: Use the passed in gfp flags
68ba08ab40c5 wifi: ath10k: Use RMW accessors for changing LNKCTL
ab28c56192f5 drm/radeon: Use RMW accessors for changing LNKCTL
d835a13232c0 drm/radeon: Prefer pcie_capability_read_word()
06c0c15ab03c drm/radeon: Replace numbers with PCI_EXP_LNKCTL2 definitions
30e633dbcd4c drm/radeon: Correct Transmit Margin masks
108ce391d6da drm/amdgpu: Use RMW accessors for changing LNKCTL
7085f1aab194 drm/amdgpu: Prefer pcie_capability_read_word()
62a1c1bd45d8 drm/amdgpu: Replace numbers with PCI_EXP_LNKCTL2 definitions
adf810206cca drm/amdgpu: Correct Transmit Margin masks
7f9129b66c87 PCI: Add #defines for Enter Compliance, Transmit Margin
81d1de3b9793 powerpc/fadump: reset dump area size if fadump memory reserve fails
7159a27b1ac1 clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op
044ff5356a3b PCI/ASPM: Use RMW accessors for changing LNKCTL
73d73556ed1d PCI: pciehp: Use RMW accessors for changing LNKCTL
e7e3268ae9b7 PCI: Mark NVIDIA T4 GPUs to avoid bus reset
a611e38d5b94 clk: sunxi-ng: Modify mismatched function name
9ad9cca12b10 drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init()
de677f4379fa ipmi:ssif: Fix a memory leak when scanning for an adapter
ef0d286989b1 ipmi:ssif: Add check for kstrdup
90fddb87892e ALSA: ac97: Fix possible error value of *rac97
0b1e48e4dccb of: unittest: Fix overlay type in apply/revert check
0a6f39488c38 drm/mediatek: Fix potential memory leak if vmap() fail
f6364fa751d7 audit: fix possible soft lockup in __audit_inode_child()
43f0c2bb16af smackfs: Prevent underflow in smk_set_cipso()
b8a61df6f404 drm/msm/mdp5: Don't leak some plane state
1f3d0e65d111 ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig
dbdc828991ae drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01
4db0a85cf865 drm/armada: Fix off-by-one error in armada_overlay_get_property()
dadf0d0dfcc8 of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name()
def1fd88ae97 drm/tegra: dpaux: Fix incorrect return value of platform_get_irq
c1ff601e1aa5 drm/tegra: Remove superfluous error messages around platform_get_irq()
1603f086200a md/md-bitmap: hold 'reconfig_mutex' in backlog_store()
630be0110e6a md/bitmap: don't set max_write_behind if there is no write mostly device
a8f8c4e7281c drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl'
c6b423ab655c arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC
69d9fb39480c ARM: dts: BCM53573: Fix Ethernet info for Luxul devices
e6fc20a5425b drm: adv7511: Fix low refresh rate register for ADV7533/5
88d32b9ad274 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split)
dfe36c23abf9 ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210
febead00308f ARM: dts: s5pv210: correct ethernet unit address in SMDKV210
00b3f8004bdc ARM: dts: s5pv210: use defines for IRQ flags in SMDKV210
9dff1deb2507 ARM: dts: s5pv210: add RTC 32 KHz clock in SMDKV210
df9929c61c9d ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split)
c20456c2cd29 ARM: dts: s3c64xx: align pinctrl with dtschema
a355d140eb49 ARM: dts: s3c6410: align node SROM bus node name with dtschema in Mini6410
e5deee40fa04 ARM: dts: s3c6410: move fixed clocks under root node in Mini6410
d38b67da1572 drm/etnaviv: fix dumping of active MMU context
5b8c8527a2c3 ARM: dts: BCM53573: Use updated "spi-gpio" binding properties
5680c01363ea ARM: dts: BCM53573: Add cells sizes to PCIe node
17a5848bdca0 ARM: dts: BCM53573: Drop nonexistent "default-off" LED trigger
c01cbe6c0345 drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar()
d40c192e1198 quota: fix dqput() to follow the guarantees dquot_srcu should provide
dd918952b1ed quota: add new helper dquot_active()
88c0cdfe10fb quota: rename dquot_active() to inode_quota_active()
29d7249bb61c quota: factor out dquot_write_dquot()
f2f64c2951a3 quota: avoid increasing DQST_LOOKUPS when iterating over dirty/inuse list
1e4f7ce32a1d drm/bridge: tc358764: Fix debug print parameter order
835f0a848a8b netrom: Deny concurrent connect().
da13749d5ff7 net/sched: sch_hfsc: Ensure inner classes have fsc curve
83382eafc745 mlxsw: i2c: Limit single transaction buffer size
b2d7f0f313b8 mlxsw: i2c: Fix chunk size setting in output mailbox buffer
400ef5f79c90 net: arcnet: Do not call kfree_skb() under local_irq_disable()
f306bbdce631 wifi: ath9k: use IS_ERR() with debugfs_create_dir()
231086e6a363 wifi: mwifiex: avoid possible NULL skb pointer dereference
5f6f00bcf947 wifi: ath9k: protect WMI command response buffer replacement with a lock
ff703b5f3f3c wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx
df1753eae74b wifi: mwifiex: Fix missed return in oob checks failed path
8f717752f94e wifi: mwifiex: fix memory leak in mwifiex_histogram_read()
ab4810042cdd fs: ocfs2: namei: check return value of ocfs2_add_entry()
dbe64279ae34 lwt: Check LWTUNNEL_XMIT_CONTINUE strictly
67f8f2bae8e7 lwt: Fix return values of BPF xmit ops
12bf7d9cc6af hwrng: iproc-rng200 - Implement suspend and resume calls
4f1ca8e39732 hwrng: iproc-rng200 - use semicolons rather than commas to separate statements
6c015ebce180 crypto: caam - fix unchecked return value error
ec348676c7d0 Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe()
0ce06035ea67 crypto: stm32 - Properly handle pm_runtime_get failing
34de9f1d6359 wifi: mwifiex: fix error recovery in PCIE buffer descriptor management
87f8c5442373 mwifiex: switch from 'pci_' to 'dma_' API
29eca8b7863d wifi: mwifiex: Fix OOB and integer underflow when rx packets
042aeb45e484 can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM
516f21f21068 spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe()
4fb6fcc04a99 regmap: rbtree: Use alloc_flags for memory allocations
57935355dc67 tcp: tcp_enter_quickack_mode() should be static
75b8b5b52985 bpf: Clear the probe_addr for uprobe
a0fa690894c1 cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit()
991b7c260476 perf/imx_ddr: don't enable counter0 if none of 4 counters are used
07415be140d0 x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved
6dbac48ea344 x86/boot: Annotate local functions
c418814fae86 x86/asm: Make more symbols local
3eb241e47d05 OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd()
5d3975e36c64 tmpfs: verify {g,u}id mount options correctly
48c54877ce33 fs: Fix error checking for d_hash_and_lookup()
0c8c20538115 new helper: lookup_positive_unlocked()
0a2b1eb8a9ce eventfd: prevent underflow for eventfd semaphores
3e9617d63edf eventfd: Export eventfd_ctx_do_read()
f59ff666989c reiserfs: Check the return value from __getblk()
e74903b5fbc9 Revert "net: macsec: preserve ingress frame ordering"
b36c4a731aae udf: Handle error when adding extent to a file
7648ea9896b3 udf: Check consistency of Space Bitmap Descriptor
3e2265cda14e powerpc/32s: Fix assembler warning about r0
aea73dde7180 net: Avoid address overwrite in kernel_connect
d7d42f114252 platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications
6614af25e142 ALSA: seq: oss: Fix racy open/close of MIDI devices
601dc776a09a scsi: storvsc: Always set no_report_opcodes
107f5cad230b cifs: add a warning when the in-flight count goes negative
f31618e4fc00 sctp: handle invalid error codes without calling BUG()
8d7395d0ea5e bnx2x: fix page fault following EEH recovery
c1ce2f09573e netlabel: fix shift wrapping bug in netlbl_catmap_setlong()
499eb477f76b scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock
d0189e40c2d1 idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM
617d1d0e1730 net: usb: qmi_wwan: add Quectel EM05GV2
5d2481bc924e clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM
3899c1d158c5 security: keys: perform capable check only on privileged operations
97ed1be29bf0 platform/x86: huawei-wmi: Silence ambient light sensor
762c352dfc41 platform/x86: intel: hid: Always call BTNL ACPI method
0e3f0e55974c ASoC: atmel: Fix the 8K sample parameter in I2SC master
0b718d1d5780 ASoc: codecs: ES8316: Fix DMIC config
b796adfc9869 fs/nls: make load_nls() take a const parameter
35a9b057bfd4 s390/dasd: fix hanging device after request requeue
d7768b33d0fd s390/dasd: use correct number of retries for ERP requests
a21ff228f0e1 m68k: Fix invalid .section syntax
4dfc0d1edad3 vxlan: generalize vxlan_parse_gpe_hdr and remove unused args
d65c5ef975d1 ethernet: atheros: fix return value check in atl1c_tso_csum()
ea95a0111494 ASoC: da7219: Check for failure reading AAD IRQ events
216953c3de60 ASoC: da7219: Flush pending AAD IRQ when suspending
b6f827c3f8db 9p: virtio: make sure 'offs' is initialized in zc_request
b6fefef07dca pinctrl: amd: Don't show `Invalid config param` errors
99a73016a5e1 nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse
724474dfaa98 nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers()
efe8244ba960 fsi: master-ast-cf: Add MODULE_FIRMWARE macro
6b701dab1993 firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
bee7f3a49469 serial: sc16is7xx: fix bug when first setting GPIO direction
a6650d27ab2c Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition
5876cae6d6ef staging: rtl8712: fix race condition
a17c6efa1413 HID: wacom: remove the battery when the EKR is off
e4f5ad7b539a USB: serial: option: add FOXCONN T99W368/T99W373 product
837f6647b2bf USB: serial: option: add Quectel EM05G variant (0x030e)
1d2432804815 modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules
6938ef59e3ff rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff
0e0914f9a899 net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index
6b39bd898bb0 mmc: au1xmmc: force non-modular build and remove symbol_get usage
7a67c5d93292 ARM: pxa: remove use of symbol_get()
e83f5d13cb73 erofs: ensure that the post-EOF tails are all zeroed
(From OE-Core rev: 0111b5b152c1bcff0ab26cf8632ca9002237f070)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Steve Sakoman <steve@sakoman.com>