diff options
306 files changed, 3254 insertions, 1688 deletions
diff --git a/Documentation/networking/ipvs-sysctl.txt b/Documentation/networking/ipvs-sysctl.txt index f2a2488f1bf..9573d0c48c6 100644 --- a/Documentation/networking/ipvs-sysctl.txt +++ b/Documentation/networking/ipvs-sysctl.txt @@ -15,6 +15,13 @@ amemthresh - INTEGER          enabled and the variable is automatically set to 2, otherwise          the strategy is disabled and the variable is  set  to 1. +backup_only - BOOLEAN +	0 - disabled (default) +	not 0 - enabled + +	If set, disable the director function while the server is +	in backup mode to avoid packet loops for DR/TUN methods. +  conntrack - BOOLEAN  	0 - disabled (default)  	not 0 - enabled diff --git a/MAINTAINERS b/MAINTAINERS index 4cf5fd334a0..74e58a4d035 100644 --- a/MAINTAINERS +++ b/MAINTAINERS @@ -3242,6 +3242,12 @@ F:	Documentation/firmware_class/  F:	drivers/base/firmware*.c  F:	include/linux/firmware.h +FLASHSYSTEM DRIVER (IBM FlashSystem 70/80 PCI SSD Flash Card) +M:	Joshua Morris <josh.h.morris@us.ibm.com> +M:	Philip Kelleher <pjk1939@linux.vnet.ibm.com> +S:	Maintained +F:	drivers/block/rsxx/ +  FLOPPY DRIVER  M:	Jiri Kosina <jkosina@suse.cz>  T:	git git://git.kernel.org/pub/scm/linux/kernel/git/jikos/floppy.git @@ -5683,7 +5689,7 @@ S:	Maintained  F:	arch/arm/*omap*/*clock*  OMAP POWER MANAGEMENT SUPPORT -M:	Kevin Hilman <khilman@ti.com> +M:	Kevin Hilman <khilman@deeprootsystems.com>  L:	linux-omap@vger.kernel.org  S:	Maintained  F:	arch/arm/*omap*/*pm* @@ -5777,7 +5783,7 @@ F:	arch/arm/*omap*/usb*  OMAP GPIO DRIVER  M:	Santosh Shilimkar <santosh.shilimkar@ti.com> -M:	Kevin Hilman <khilman@ti.com> +M:	Kevin Hilman <khilman@deeprootsystems.com>  L:	linux-omap@vger.kernel.org  S:	Maintained  F:	drivers/gpio/gpio-omap.c @@ -6209,7 +6215,7 @@ F:	include/linux/power_supply.h  F:	drivers/power/  PNP SUPPORT -M:	Adam Belay <abelay@mit.edu> +M:	Rafael J. Wysocki <rafael.j.wysocki@intel.com>  M:	Bjorn Helgaas <bhelgaas@google.com>  S:	Maintained  F:	drivers/pnp/ @@ -6551,12 +6557,6 @@ S:	Maintained  F:	Documentation/blockdev/ramdisk.txt  F:	drivers/block/brd.c -RAMSAM DRIVER (IBM RamSan 70/80 PCI SSD Flash Card) -M:	Joshua Morris <josh.h.morris@us.ibm.com> -M:	Philip Kelleher <pjk1939@linux.vnet.ibm.com> -S:	Maintained -F:	drivers/block/rsxx/ -  RANDOM NUMBER DRIVER  M:	Theodore Ts'o" <tytso@mit.edu>  S:	Maintained @@ -7173,7 +7173,7 @@ F:	arch/arm/mach-s3c2410/bast-irq.c  TI DAVINCI MACHINE SUPPORT  M:	Sekhar Nori <nsekhar@ti.com> -M:	Kevin Hilman <khilman@ti.com> +M:	Kevin Hilman <khilman@deeprootsystems.com>  L:	davinci-linux-open-source@linux.davincidsp.com (moderated for non-subscribers)  T:	git git://gitorious.org/linux-davinci/linux-davinci.git  Q:	http://patchwork.kernel.org/project/linux-davinci/list/ @@ -7706,9 +7706,10 @@ F:	include/linux/swiotlb.h  SYNOPSYS ARC ARCHITECTURE  M:	Vineet Gupta <vgupta@synopsys.com> -L:	linux-snps-arc@vger.kernel.org  S:	Supported  F:	arch/arc/ +F:	Documentation/devicetree/bindings/arc/ +F:	drivers/tty/serial/arc-uart.c  SYSV FILESYSTEM  M:	Christoph Hellwig <hch@infradead.org> @@ -1,7 +1,7 @@  VERSION = 3  PATCHLEVEL = 9  SUBLEVEL = 0 -EXTRAVERSION = -rc4 +EXTRAVERSION = -rc5  NAME = Unicycling Gorilla  # *DOCUMENTATION* diff --git a/arch/arc/include/asm/dma-mapping.h b/arch/arc/include/asm/dma-mapping.h index 31f77aec082..45b8e0cea17 100644 --- a/arch/arc/include/asm/dma-mapping.h +++ b/arch/arc/include/asm/dma-mapping.h @@ -126,7 +126,7 @@ dma_map_sg(struct device *dev, struct scatterlist *sg,  	int i;  	for_each_sg(sg, s, nents, i) -		sg->dma_address = dma_map_page(dev, sg_page(s), s->offset, +		s->dma_address = dma_map_page(dev, sg_page(s), s->offset,  					       s->length, dir);  	return nents; diff --git a/arch/arc/include/asm/elf.h b/arch/arc/include/asm/elf.h index f4c8d36ebec..a2628285768 100644 --- a/arch/arc/include/asm/elf.h +++ b/arch/arc/include/asm/elf.h @@ -72,7 +72,4 @@ extern int elf_check_arch(const struct elf32_hdr *);   */  #define ELF_PLATFORM	(NULL) -#define SET_PERSONALITY(ex) \ -	set_personality(PER_LINUX | (current->personality & (~PER_MASK))) -  #endif diff --git a/arch/arc/include/asm/entry.h b/arch/arc/include/asm/entry.h index 23daa326fc9..eb2ae53187d 100644 --- a/arch/arc/include/asm/entry.h +++ b/arch/arc/include/asm/entry.h @@ -415,7 +415,7 @@   *-------------------------------------------------------------*/  .macro SAVE_ALL_EXCEPTION   marker -	st      \marker, [sp, 8] +	st      \marker, [sp, 8]	/* orig_r8 */  	st      r0, [sp, 4]    /* orig_r0, needed only for sys calls */  	/* Restore r9 used to code the early prologue */ diff --git a/arch/arc/include/asm/kgdb.h b/arch/arc/include/asm/kgdb.h index f3c4934f0ca..4930957ca3d 100644 --- a/arch/arc/include/asm/kgdb.h +++ b/arch/arc/include/asm/kgdb.h @@ -13,7 +13,7 @@  #ifdef CONFIG_KGDB -#include <asm/user.h> +#include <asm/ptrace.h>  /* to ensure compatibility with Linux 2.6.35, we don't implement the get/set   * register API yet */ @@ -53,9 +53,7 @@ enum arc700_linux_regnums {  };  #else -static inline void kgdb_trap(struct pt_regs *regs, int param) -{ -} +#define kgdb_trap(regs, param)  #endif  #endif	/* __ARC_KGDB_H__ */ diff --git a/arch/arc/include/asm/ptrace.h b/arch/arc/include/asm/ptrace.h index 8ae783d20a8..6179de7e07c 100644 --- a/arch/arc/include/asm/ptrace.h +++ b/arch/arc/include/asm/ptrace.h @@ -123,7 +123,7 @@ static inline long regs_return_value(struct pt_regs *regs)  #define orig_r8_IS_SCALL		0x0001  #define orig_r8_IS_SCALL_RESTARTED	0x0002  #define orig_r8_IS_BRKPT		0x0004 -#define orig_r8_IS_EXCPN		0x0004 +#define orig_r8_IS_EXCPN		0x0008  #define orig_r8_IS_IRQ1			0x0010  #define orig_r8_IS_IRQ2			0x0020 diff --git a/arch/arc/include/asm/syscalls.h b/arch/arc/include/asm/syscalls.h index e53a5340ba4..dd785befe7f 100644 --- a/arch/arc/include/asm/syscalls.h +++ b/arch/arc/include/asm/syscalls.h @@ -16,8 +16,6 @@  #include <linux/types.h>  int sys_clone_wrapper(int, int, int, int, int); -int sys_fork_wrapper(void); -int sys_vfork_wrapper(void);  int sys_cacheflush(uint32_t, uint32_t uint32_t);  int sys_arc_settls(void *);  int sys_arc_gettls(void); diff --git a/arch/arc/include/uapi/asm/ptrace.h b/arch/arc/include/uapi/asm/ptrace.h index 6afa4f70207..30333cec0fe 100644 --- a/arch/arc/include/uapi/asm/ptrace.h +++ b/arch/arc/include/uapi/asm/ptrace.h @@ -28,14 +28,14 @@  */  struct user_regs_struct { -	struct scratch { +	struct {  		long pad;  		long bta, lp_start, lp_end, lp_count;  		long status32, ret, blink, fp, gp;  		long r12, r11, r10, r9, r8, r7, r6, r5, r4, r3, r2, r1, r0;  		long sp;  	} scratch; -	struct callee { +	struct {  		long pad;  		long r25, r24, r23, r22, r21, r20;  		long r19, r18, r17, r16, r15, r14, r13; diff --git a/arch/arc/kernel/entry.S b/arch/arc/kernel/entry.S index ef6800ba2f0..91eeab81f52 100644 --- a/arch/arc/kernel/entry.S +++ b/arch/arc/kernel/entry.S @@ -452,7 +452,7 @@ tracesys:  	; using ERET won't work since next-PC has already committed  	lr  r12, [efa]  	GET_CURR_TASK_FIELD_PTR   TASK_THREAD, r11 -	st  r12, [r11, THREAD_FAULT_ADDR] +	st  r12, [r11, THREAD_FAULT_ADDR]	; thread.fault_address  	; PRE Sys Call Ptrace hook  	mov r0, sp			; pt_regs needed @@ -792,31 +792,6 @@ ARC_EXIT ret_from_fork  ;################### Special Sys Call Wrappers ########################## -; TBD: call do_fork directly from here -ARC_ENTRY sys_fork_wrapper -	SAVE_CALLEE_SAVED_USER -	bl  @sys_fork -	DISCARD_CALLEE_SAVED_USER - -	GET_CURR_THR_INFO_FLAGS   r10 -	btst r10, TIF_SYSCALL_TRACE -	bnz  tracesys_exit - -	b ret_from_system_call -ARC_EXIT sys_fork_wrapper - -ARC_ENTRY sys_vfork_wrapper -	SAVE_CALLEE_SAVED_USER -	bl  @sys_vfork -	DISCARD_CALLEE_SAVED_USER - -	GET_CURR_THR_INFO_FLAGS   r10 -	btst r10, TIF_SYSCALL_TRACE -	bnz  tracesys_exit - -	b ret_from_system_call -ARC_EXIT sys_vfork_wrapper -  ARC_ENTRY sys_clone_wrapper  	SAVE_CALLEE_SAVED_USER  	bl  @sys_clone diff --git a/arch/arc/kernel/kgdb.c b/arch/arc/kernel/kgdb.c index 2888ba5be47..52bdc83c149 100644 --- a/arch/arc/kernel/kgdb.c +++ b/arch/arc/kernel/kgdb.c @@ -9,6 +9,7 @@   */  #include <linux/kgdb.h> +#include <linux/sched.h>  #include <asm/disasm.h>  #include <asm/cacheflush.h> diff --git a/arch/arc/kernel/setup.c b/arch/arc/kernel/setup.c index dc0f968dae0..2d95ac07df7 100644 --- a/arch/arc/kernel/setup.c +++ b/arch/arc/kernel/setup.c @@ -232,10 +232,8 @@ char *arc_extn_mumbojumbo(int cpu_id, char *buf, int len)  	n += scnprintf(buf + n, len - n, "\n"); -#ifdef _ASM_GENERIC_UNISTD_H  	n += scnprintf(buf + n, len - n, -		       "OS ABI [v2]\t: asm-generic/{unistd,stat,fcntl}\n"); -#endif +		       "OS ABI [v3]\t: no-legacy-syscalls\n");  	return buf;  } diff --git a/arch/arc/kernel/sys.c b/arch/arc/kernel/sys.c index f6bdd07583f..9d6c1ca26af 100644 --- a/arch/arc/kernel/sys.c +++ b/arch/arc/kernel/sys.c @@ -6,8 +6,6 @@  #include <asm/syscalls.h>  #define sys_clone	sys_clone_wrapper -#define sys_fork	sys_fork_wrapper -#define sys_vfork	sys_vfork_wrapper  #undef __SYSCALL  #define __SYSCALL(nr, call) [nr] = (call), diff --git a/arch/arm/Kconfig.debug b/arch/arm/Kconfig.debug index ecfcdba2d17..9b31f4311ea 100644 --- a/arch/arm/Kconfig.debug +++ b/arch/arm/Kconfig.debug @@ -495,6 +495,7 @@ config DEBUG_IMX_UART_PORT  						DEBUG_IMX53_UART || \  						DEBUG_IMX6Q_UART  	default 1 +	depends on ARCH_MXC  	help  	  Choose UART port on which kernel low-level debug messages  	  should be output. diff --git a/arch/arm/boot/dts/tegra20.dtsi b/arch/arm/boot/dts/tegra20.dtsi index 48d00a099ce..3d3f64d2111 100644 --- a/arch/arm/boot/dts/tegra20.dtsi +++ b/arch/arm/boot/dts/tegra20.dtsi @@ -385,7 +385,7 @@  	spi@7000d800 {  		compatible = "nvidia,tegra20-slink"; -		reg = <0x7000d480 0x200>; +		reg = <0x7000d800 0x200>;  		interrupts = <0 83 0x04>;  		nvidia,dma-request-selector = <&apbdma 17>;  		#address-cells = <1>; diff --git a/arch/arm/boot/dts/tegra30.dtsi b/arch/arm/boot/dts/tegra30.dtsi index 9d87a3ffe99..dbf46c27256 100644 --- a/arch/arm/boot/dts/tegra30.dtsi +++ b/arch/arm/boot/dts/tegra30.dtsi @@ -372,7 +372,7 @@  	spi@7000d800 {  		compatible = "nvidia,tegra30-slink", "nvidia,tegra20-slink"; -		reg = <0x7000d480 0x200>; +		reg = <0x7000d800 0x200>;  		interrupts = <0 83 0x04>;  		nvidia,dma-request-selector = <&apbdma 17>;  		#address-cells = <1>; diff --git a/arch/arm/kernel/entry-armv.S b/arch/arm/kernel/entry-armv.S index 0f82098c9bf..cd22d821bf7 100644 --- a/arch/arm/kernel/entry-armv.S +++ b/arch/arm/kernel/entry-armv.S @@ -562,21 +562,21 @@ ENDPROC(__und_usr)  	@ Fall-through from Thumb-2 __und_usr  	@  #ifdef CONFIG_NEON +	get_thread_info r10			@ get current thread  	adr	r6, .LCneon_thumb_opcodes  	b	2f  #endif  call_fpe: +	get_thread_info r10			@ get current thread  #ifdef CONFIG_NEON  	adr	r6, .LCneon_arm_opcodes -2: -	ldr	r7, [r6], #4			@ mask value -	cmp	r7, #0				@ end mask? -	beq	1f -	and	r8, r0, r7 +2:	ldr	r5, [r6], #4			@ mask value  	ldr	r7, [r6], #4			@ opcode bits matching in mask +	cmp	r5, #0				@ end mask? +	beq	1f +	and	r8, r0, r5  	cmp	r8, r7				@ NEON instruction?  	bne	2b -	get_thread_info r10  	mov	r7, #1  	strb	r7, [r10, #TI_USED_CP + 10]	@ mark CP#10 as used  	strb	r7, [r10, #TI_USED_CP + 11]	@ mark CP#11 as used @@ -586,7 +586,6 @@ call_fpe:  	tst	r0, #0x08000000			@ only CDP/CPRT/LDC/STC have bit 27  	tstne	r0, #0x04000000			@ bit 26 set on both ARM and Thumb-2  	moveq	pc, lr -	get_thread_info r10			@ get current thread  	and	r8, r0, #0x00000f00		@ mask out CP number   THUMB(	lsr	r8, r8, #8		)  	mov	r7, #1 diff --git a/arch/arm/kernel/process.c b/arch/arm/kernel/process.c index 047d3e40e47..cbd0f51937c 100644 --- a/arch/arm/kernel/process.c +++ b/arch/arm/kernel/process.c @@ -459,15 +459,16 @@ unsigned long arch_randomize_brk(struct mm_struct *mm)   * atomic helpers and the signal restart code. Insert it into the   * gate_vma so that it is visible through ptrace and /proc/<pid>/mem.   */ -static struct vm_area_struct gate_vma; +static struct vm_area_struct gate_vma = { +	.vm_start	= 0xffff0000, +	.vm_end		= 0xffff0000 + PAGE_SIZE, +	.vm_flags	= VM_READ | VM_EXEC | VM_MAYREAD | VM_MAYEXEC, +	.vm_mm		= &init_mm, +};  static int __init gate_vma_init(void)  { -	gate_vma.vm_start	= 0xffff0000; -	gate_vma.vm_end		= 0xffff0000 + PAGE_SIZE; -	gate_vma.vm_page_prot	= PAGE_READONLY_EXEC; -	gate_vma.vm_flags	= VM_READ | VM_EXEC | -				  VM_MAYREAD | VM_MAYEXEC; +	gate_vma.vm_page_prot = PAGE_READONLY_EXEC;  	return 0;  }  arch_initcall(gate_vma_init); diff --git a/arch/arm/mach-integrator/integrator_ap.c b/arch/arm/mach-integrator/integrator_ap.c index ea961445e0e..b23c8e4f28e 100644 --- a/arch/arm/mach-integrator/integrator_ap.c +++ b/arch/arm/mach-integrator/integrator_ap.c @@ -536,16 +536,14 @@ static void __init ap_init_of(void)  					   'A' + (ap_sc_id & 0x0f));  	soc_dev = soc_device_register(soc_dev_attr); -	if (IS_ERR_OR_NULL(soc_dev)) { +	if (IS_ERR(soc_dev)) {  		kfree(soc_dev_attr->revision);  		kfree(soc_dev_attr);  		return;  	}  	parent = soc_device_to_device(soc_dev); - -	if (!IS_ERR_OR_NULL(parent)) -		integrator_init_sysfs(parent, ap_sc_id); +	integrator_init_sysfs(parent, ap_sc_id);  	of_platform_populate(root, of_default_bus_match_table,  			ap_auxdata_lookup, parent); diff --git a/arch/arm/mach-integrator/integrator_cp.c b/arch/arm/mach-integrator/integrator_cp.c index 2b0db82a538..da1091be088 100644 --- a/arch/arm/mach-integrator/integrator_cp.c +++ b/arch/arm/mach-integrator/integrator_cp.c @@ -360,17 +360,14 @@ static void __init intcp_init_of(void)  					   'A' + (intcp_sc_id & 0x0f));  	soc_dev = soc_device_register(soc_dev_attr); -	if (IS_ERR_OR_NULL(soc_dev)) { +	if (IS_ERR(soc_dev)) {  		kfree(soc_dev_attr->revision);  		kfree(soc_dev_attr);  		return;  	}  	parent = soc_device_to_device(soc_dev); - -	if (!IS_ERR_OR_NULL(parent)) -		integrator_init_sysfs(parent, intcp_sc_id); - +	integrator_init_sysfs(parent, intcp_sc_id);  	of_platform_populate(root, of_default_bus_match_table,  			intcp_auxdata_lookup, parent);  } diff --git a/arch/arm/mach-mxs/mach-mxs.c b/arch/arm/mach-mxs/mach-mxs.c index 3218f1f2c0e..e7b781d3788 100644 --- a/arch/arm/mach-mxs/mach-mxs.c +++ b/arch/arm/mach-mxs/mach-mxs.c @@ -41,8 +41,6 @@ static struct fb_videomode mx23evk_video_modes[] = {  		.lower_margin	= 4,  		.hsync_len	= 1,  		.vsync_len	= 1, -		.sync		= FB_SYNC_DATA_ENABLE_HIGH_ACT | -				  FB_SYNC_DOTCLK_FAILING_ACT,  	},  }; @@ -59,8 +57,6 @@ static struct fb_videomode mx28evk_video_modes[] = {  		.lower_margin	= 10,  		.hsync_len	= 10,  		.vsync_len	= 10, -		.sync		= FB_SYNC_DATA_ENABLE_HIGH_ACT | -				  FB_SYNC_DOTCLK_FAILING_ACT,  	},  }; @@ -77,7 +73,6 @@ static struct fb_videomode m28evk_video_modes[] = {  		.lower_margin	= 45,  		.hsync_len	= 1,  		.vsync_len	= 1, -		.sync		= FB_SYNC_DATA_ENABLE_HIGH_ACT,  	},  }; @@ -94,9 +89,7 @@ static struct fb_videomode apx4devkit_video_modes[] = {  		.lower_margin	= 13,  		.hsync_len	= 48,  		.vsync_len	= 3, -		.sync		= FB_SYNC_HOR_HIGH_ACT | FB_SYNC_VERT_HIGH_ACT | -				  FB_SYNC_DATA_ENABLE_HIGH_ACT | -				  FB_SYNC_DOTCLK_FAILING_ACT, +		.sync		= FB_SYNC_HOR_HIGH_ACT | FB_SYNC_VERT_HIGH_ACT,  	},  }; @@ -113,9 +106,7 @@ static struct fb_videomode apf28dev_video_modes[] = {  		.lower_margin = 0x15,  		.hsync_len = 64,  		.vsync_len = 4, -		.sync = FB_SYNC_HOR_HIGH_ACT | FB_SYNC_VERT_HIGH_ACT | -				FB_SYNC_DATA_ENABLE_HIGH_ACT | -				FB_SYNC_DOTCLK_FAILING_ACT, +		.sync = FB_SYNC_HOR_HIGH_ACT | FB_SYNC_VERT_HIGH_ACT,  	},  }; @@ -132,7 +123,6 @@ static struct fb_videomode cfa10049_video_modes[] = {  		.lower_margin	= 2,  		.hsync_len	= 15,  		.vsync_len	= 15, -		.sync		= FB_SYNC_DATA_ENABLE_HIGH_ACT  	},  }; @@ -259,6 +249,8 @@ static void __init imx23_evk_init(void)  	mxsfb_pdata.mode_count = ARRAY_SIZE(mx23evk_video_modes);  	mxsfb_pdata.default_bpp = 32;  	mxsfb_pdata.ld_intf_width = STMLCDIF_24BIT; +	mxsfb_pdata.sync = MXSFB_SYNC_DATA_ENABLE_HIGH_ACT | +				MXSFB_SYNC_DOTCLK_FAILING_ACT;  }  static inline void enable_clk_enet_out(void) @@ -278,6 +270,8 @@ static void __init imx28_evk_init(void)  	mxsfb_pdata.mode_count = ARRAY_SIZE(mx28evk_video_modes);  	mxsfb_pdata.default_bpp = 32;  	mxsfb_pdata.ld_intf_width = STMLCDIF_24BIT; +	mxsfb_pdata.sync = MXSFB_SYNC_DATA_ENABLE_HIGH_ACT | +				MXSFB_SYNC_DOTCLK_FAILING_ACT;  	mxs_saif_clkmux_select(MXS_DIGCTL_SAIF_CLKMUX_EXTMSTR0);  } @@ -297,6 +291,7 @@ static void __init m28evk_init(void)  	mxsfb_pdata.mode_count = ARRAY_SIZE(m28evk_video_modes);  	mxsfb_pdata.default_bpp = 16;  	mxsfb_pdata.ld_intf_width = STMLCDIF_18BIT; +	mxsfb_pdata.sync = MXSFB_SYNC_DATA_ENABLE_HIGH_ACT;  }  static void __init sc_sps1_init(void) @@ -322,6 +317,8 @@ static void __init apx4devkit_init(void)  	mxsfb_pdata.mode_count = ARRAY_SIZE(apx4devkit_video_modes);  	mxsfb_pdata.default_bpp = 32;  	mxsfb_pdata.ld_intf_width = STMLCDIF_24BIT; +	mxsfb_pdata.sync = MXSFB_SYNC_DATA_ENABLE_HIGH_ACT | +				MXSFB_SYNC_DOTCLK_FAILING_ACT;  }  #define ENET0_MDC__GPIO_4_0	MXS_GPIO_NR(4, 0) @@ -407,6 +404,7 @@ static void __init cfa10049_init(void)  	mxsfb_pdata.mode_count = ARRAY_SIZE(cfa10049_video_modes);  	mxsfb_pdata.default_bpp = 32;  	mxsfb_pdata.ld_intf_width = STMLCDIF_18BIT; +	mxsfb_pdata.sync = MXSFB_SYNC_DATA_ENABLE_HIGH_ACT;  }  static void __init cfa10037_init(void) @@ -423,6 +421,8 @@ static void __init apf28_init(void)  	mxsfb_pdata.mode_count = ARRAY_SIZE(apf28dev_video_modes);  	mxsfb_pdata.default_bpp = 16;  	mxsfb_pdata.ld_intf_width = STMLCDIF_16BIT; +	mxsfb_pdata.sync = MXSFB_SYNC_DATA_ENABLE_HIGH_ACT | +				MXSFB_SYNC_DOTCLK_FAILING_ACT;  }  static void __init mxs_machine_init(void) diff --git a/arch/arm/mach-omap1/Kconfig b/arch/arm/mach-omap1/Kconfig index 903da8eb886..cdd05f2e67e 100644 --- a/arch/arm/mach-omap1/Kconfig +++ b/arch/arm/mach-omap1/Kconfig @@ -55,12 +55,6 @@ config MACH_OMAP_H3  	  TI OMAP 1710 H3 board support. Say Y here if you have such  	  a board. -config MACH_OMAP_HTCWIZARD -	bool "HTC Wizard" -	depends on ARCH_OMAP850 -	help -	  HTC Wizard smartphone support (AKA QTEK 9100, ...) -  config MACH_HERALD  	bool "HTC Herald"  	depends on ARCH_OMAP850 diff --git a/arch/arm/mach-omap2/Kconfig b/arch/arm/mach-omap2/Kconfig index 8111cd9ff3e..b9c0ed3f648 100644 --- a/arch/arm/mach-omap2/Kconfig +++ b/arch/arm/mach-omap2/Kconfig @@ -408,7 +408,7 @@ config OMAP3_SDRC_AC_TIMING  config OMAP4_ERRATA_I688  	bool "OMAP4 errata: Async Bridge Corruption" -	depends on ARCH_OMAP4 && !ARCH_MULTIPLATFORM +	depends on (ARCH_OMAP4 || SOC_OMAP5) && !ARCH_MULTIPLATFORM  	select ARCH_HAS_BARRIERS  	help  	  If a data is stalled inside asynchronous bridge because of back diff --git a/arch/arm/mach-omap2/board-2430sdp.c b/arch/arm/mach-omap2/board-2430sdp.c index a3e0aaa4886..cb0596b631c 100644 --- a/arch/arm/mach-omap2/board-2430sdp.c +++ b/arch/arm/mach-omap2/board-2430sdp.c @@ -166,7 +166,7 @@ static void __init sdp2430_display_init(void)  	omap_display_init(&sdp2430_dss_data);  } -#if defined(CONFIG_SMC91X) || defined(CONFIG_SMC91x_MODULE) +#if IS_ENABLED(CONFIG_SMC91X)  static struct omap_smc91x_platform_data board_smc91x_data = {  	.cs		= 5, diff --git a/arch/arm/mach-omap2/board-cm-t3517.c b/arch/arm/mach-omap2/board-cm-t3517.c index 6920f6cfc97..4eb5e6f2f7f 100644 --- a/arch/arm/mach-omap2/board-cm-t3517.c +++ b/arch/arm/mach-omap2/board-cm-t3517.c @@ -332,6 +332,6 @@ MACHINE_START(CM_T3517, "Compulab CM-T3517")  	.handle_irq	= omap3_intc_handle_irq,  	.init_machine	= cm_t3517_init,  	.init_late	= am35xx_init_late, -	.init_time	= omap3_gp_gptimer_timer_init, +	.init_time	= omap3_gptimer_timer_init,  	.restart	= omap3xxx_restart,  MACHINE_END diff --git a/arch/arm/mach-omap2/board-generic.c b/arch/arm/mach-omap2/board-generic.c index e54a4806019..78813b39720 100644 --- a/arch/arm/mach-omap2/board-generic.c +++ b/arch/arm/mach-omap2/board-generic.c @@ -140,7 +140,7 @@ DT_MACHINE_START(AM33XX_DT, "Generic AM33XX (Flattened Device Tree)")  	.init_irq	= omap_intc_of_init,  	.handle_irq	= omap3_intc_handle_irq,  	.init_machine	= omap_generic_init, -	.init_time	= omap3_am33xx_gptimer_timer_init, +	.init_time	= omap3_gptimer_timer_init,  	.dt_compat	= am33xx_boards_compat,  	.restart	= am33xx_restart,  MACHINE_END diff --git a/arch/arm/mach-omap2/board-h4.c b/arch/arm/mach-omap2/board-h4.c index 812c829fa46..5b4ec51c385 100644 --- a/arch/arm/mach-omap2/board-h4.c +++ b/arch/arm/mach-omap2/board-h4.c @@ -246,7 +246,7 @@ static u32 is_gpmc_muxed(void)  		return 0;  } -#if defined(CONFIG_SMC91X) || defined(CONFIG_SMC91x_MODULE) +#if IS_ENABLED(CONFIG_SMC91X)  static struct omap_smc91x_platform_data board_smc91x_data = {  	.cs		= 1, diff --git a/arch/arm/mach-omap2/board-omap3beagle.c b/arch/arm/mach-omap2/board-omap3beagle.c index 5382215a49b..6955a428f53 100644 --- a/arch/arm/mach-omap2/board-omap3beagle.c +++ b/arch/arm/mach-omap2/board-omap3beagle.c @@ -489,7 +489,7 @@ static int __init beagle_opp_init(void)  	/* Initialize the omap3 opp table if not already created. */  	r = omap3_opp_init(); -	if (IS_ERR_VALUE(r) && (r != -EEXIST)) { +	if (r < 0 && (r != -EEXIST)) {  		pr_err("%s: opp default init failed\n", __func__);  		return r;  	} diff --git a/arch/arm/mach-omap2/cclock33xx_data.c b/arch/arm/mach-omap2/cclock33xx_data.c index 476b82066cb..7f091c85384 100644 --- a/arch/arm/mach-omap2/cclock33xx_data.c +++ b/arch/arm/mach-omap2/cclock33xx_data.c @@ -958,6 +958,14 @@ int __init am33xx_clk_init(void)  	clk_set_parent(&timer3_fck, &sys_clkin_ck);  	clk_set_parent(&timer6_fck, &sys_clkin_ck); +	/* +	 * The On-Chip 32K RC Osc clock is not an accurate clock-source as per +	 * the design/spec, so as a result, for example, timer which supposed +	 * to get expired @60Sec, but will expire somewhere ~@40Sec, which is +	 * not expected by any use-case, so change WDT1 clock source to PRCM +	 * 32KHz clock. +	 */ +	clk_set_parent(&wdt1_fck, &clkdiv32k_ick);  	return 0;  } diff --git a/arch/arm/mach-omap2/clock.c b/arch/arm/mach-omap2/clock.c index e4ec3a69ee2..2191f25ad21 100644 --- a/arch/arm/mach-omap2/clock.c +++ b/arch/arm/mach-omap2/clock.c @@ -596,7 +596,7 @@ int __init omap2_clk_switch_mpurate_at_boot(const char *mpurate_ck_name)  		return -ENOENT;  	r = clk_set_rate(mpurate_ck, mpurate); -	if (IS_ERR_VALUE(r)) { +	if (r < 0) {  		WARN(1, "clock: %s: unable to set MPU rate to %d: %d\n",  		     mpurate_ck_name, mpurate, r);  		clk_put(mpurate_ck); diff --git a/arch/arm/mach-omap2/common.h b/arch/arm/mach-omap2/common.h index 40f4a03d728..bf70e2b57ff 100644 --- a/arch/arm/mach-omap2/common.h +++ b/arch/arm/mach-omap2/common.h @@ -82,8 +82,7 @@ extern void omap2_init_common_infrastructure(void);  extern void omap2_sync32k_timer_init(void);  extern void omap3_sync32k_timer_init(void);  extern void omap3_secure_sync32k_timer_init(void); -extern void omap3_gp_gptimer_timer_init(void); -extern void omap3_am33xx_gptimer_timer_init(void); +extern void omap3_gptimer_timer_init(void);  extern void omap4_local_timer_init(void);  extern void omap5_realtime_timer_init(void); diff --git a/arch/arm/mach-omap2/dpll3xxx.c b/arch/arm/mach-omap2/dpll3xxx.c index 3aed4b0b956..3a0296cfcac 100644 --- a/arch/arm/mach-omap2/dpll3xxx.c +++ b/arch/arm/mach-omap2/dpll3xxx.c @@ -307,10 +307,10 @@ static int omap3_noncore_dpll_program(struct clk_hw_omap *clk, u16 freqsel)  	_omap3_noncore_dpll_bypass(clk);  	/* -	 * Set jitter correction. No jitter correction for OMAP4 and 3630 -	 * since freqsel field is no longer present +	 * Set jitter correction. Jitter correction applicable for OMAP343X +	 * only since freqsel field is no longer present on other devices.  	 */ -	if (!soc_is_am33xx() && !cpu_is_omap44xx() && !cpu_is_omap3630()) { +	if (cpu_is_omap343x()) {  		v = __raw_readl(dd->control_reg);  		v &= ~dd->freqsel_mask;  		v |= freqsel << __ffs(dd->freqsel_mask); @@ -480,29 +480,30 @@ int omap3_noncore_dpll_set_rate(struct clk_hw *hw, unsigned long rate,  	if (!dd)  		return -EINVAL; -	__clk_prepare(dd->clk_bypass); -	clk_enable(dd->clk_bypass); -	__clk_prepare(dd->clk_ref); -	clk_enable(dd->clk_ref); -  	if (__clk_get_rate(dd->clk_bypass) == rate &&  	    (dd->modes & (1 << DPLL_LOW_POWER_BYPASS))) {  		pr_debug("%s: %s: set rate: entering bypass.\n",  			 __func__, __clk_get_name(hw->clk)); +		__clk_prepare(dd->clk_bypass); +		clk_enable(dd->clk_bypass);  		ret = _omap3_noncore_dpll_bypass(clk);  		if (!ret)  			new_parent = dd->clk_bypass; +		clk_disable(dd->clk_bypass); +		__clk_unprepare(dd->clk_bypass);  	} else { +		__clk_prepare(dd->clk_ref); +		clk_enable(dd->clk_ref); +  		if (dd->last_rounded_rate != rate)  			rate = __clk_round_rate(hw->clk, rate);  		if (dd->last_rounded_rate == 0)  			return -EINVAL; -		/* No freqsel on AM335x, OMAP4 and OMAP3630 */ -		if (!soc_is_am33xx() && !cpu_is_omap44xx() && -		    !cpu_is_omap3630()) { +		/* Freqsel is available only on OMAP343X devices */ +		if (cpu_is_omap343x()) {  			freqsel = _omap3_dpll_compute_freqsel(clk,  						dd->last_rounded_n);  			WARN_ON(!freqsel); @@ -514,6 +515,8 @@ int omap3_noncore_dpll_set_rate(struct clk_hw *hw, unsigned long rate,  		ret = omap3_noncore_dpll_program(clk, freqsel);  		if (!ret)  			new_parent = dd->clk_ref; +		clk_disable(dd->clk_ref); +		__clk_unprepare(dd->clk_ref);  	}  	/*  	* FIXME - this is all wrong.  common code handles reparenting and @@ -525,11 +528,6 @@ int omap3_noncore_dpll_set_rate(struct clk_hw *hw, unsigned long rate,  	if (!ret)  		__clk_reparent(hw->clk, new_parent); -	clk_disable(dd->clk_ref); -	__clk_unprepare(dd->clk_ref); -	clk_disable(dd->clk_bypass); -	__clk_unprepare(dd->clk_bypass); -  	return 0;  } diff --git a/arch/arm/mach-omap2/dsp.c b/arch/arm/mach-omap2/dsp.c index b155500e84a..b8208b4b1bd 100644 --- a/arch/arm/mach-omap2/dsp.c +++ b/arch/arm/mach-omap2/dsp.c @@ -26,7 +26,7 @@  #include "control.h"  #include "cm2xxx_3xxx.h"  #include "prm2xxx_3xxx.h" -#ifdef CONFIG_BRIDGE_DVFS +#ifdef CONFIG_TIDSPBRIDGE_DVFS  #include "omap-pm.h"  #endif @@ -35,7 +35,7 @@  static struct platform_device *omap_dsp_pdev;  static struct omap_dsp_platform_data omap_dsp_pdata __initdata = { -#ifdef CONFIG_BRIDGE_DVFS +#ifdef CONFIG_TIDSPBRIDGE_DVFS  	.dsp_set_min_opp = omap_pm_dsp_set_min_opp,  	.dsp_get_opp = omap_pm_dsp_get_opp,  	.cpu_set_freq = omap_pm_cpu_set_freq, diff --git a/arch/arm/mach-omap2/gpmc-onenand.c b/arch/arm/mach-omap2/gpmc-onenand.c index fadd87435cd..0d75889c0a6 100644 --- a/arch/arm/mach-omap2/gpmc-onenand.c +++ b/arch/arm/mach-omap2/gpmc-onenand.c @@ -303,7 +303,7 @@ static int omap2_onenand_setup_async(void __iomem *onenand_base)  	t = omap2_onenand_calc_async_timings();  	ret = gpmc_set_async_mode(gpmc_onenand_data->cs, &t); -	if (IS_ERR_VALUE(ret)) +	if (ret < 0)  		return ret;  	omap2_onenand_set_async_mode(onenand_base); @@ -325,7 +325,7 @@ static int omap2_onenand_setup_sync(void __iomem *onenand_base, int *freq_ptr)  	t = omap2_onenand_calc_sync_timings(gpmc_onenand_data, freq);  	ret = gpmc_set_sync_mode(gpmc_onenand_data->cs, &t); -	if (IS_ERR_VALUE(ret)) +	if (ret < 0)  		return ret;  	set_onenand_cfg(onenand_base); diff --git a/arch/arm/mach-omap2/gpmc.c b/arch/arm/mach-omap2/gpmc.c index 410e1bac781..6de31739b45 100644 --- a/arch/arm/mach-omap2/gpmc.c +++ b/arch/arm/mach-omap2/gpmc.c @@ -716,7 +716,7 @@ static int gpmc_setup_irq(void)  		return -EINVAL;  	gpmc_irq_start = irq_alloc_descs(-1, 0, GPMC_NR_IRQ, 0); -	if (IS_ERR_VALUE(gpmc_irq_start)) { +	if (gpmc_irq_start < 0) {  		pr_err("irq_alloc_descs failed\n");  		return gpmc_irq_start;  	} @@ -801,7 +801,7 @@ static int gpmc_mem_init(void)  			continue;  		gpmc_cs_get_memconf(cs, &base, &size);  		rc = gpmc_cs_insert_mem(cs, base, size); -		if (IS_ERR_VALUE(rc)) { +		if (rc < 0) {  			while (--cs >= 0)  				if (gpmc_cs_mem_enabled(cs))  					gpmc_cs_delete_mem(cs); @@ -1370,14 +1370,14 @@ static int gpmc_probe(struct platform_device *pdev)  		 GPMC_REVISION_MINOR(l));  	rc = gpmc_mem_init(); -	if (IS_ERR_VALUE(rc)) { +	if (rc < 0) {  		clk_disable_unprepare(gpmc_l3_clk);  		clk_put(gpmc_l3_clk);  		dev_err(gpmc_dev, "failed to reserve memory\n");  		return rc;  	} -	if (IS_ERR_VALUE(gpmc_setup_irq())) +	if (gpmc_setup_irq() < 0)  		dev_warn(gpmc_dev, "gpmc_setup_irq failed\n");  	/* Now the GPMC is initialised, unreserve the chip-selects */ diff --git a/arch/arm/mach-omap2/id.c b/arch/arm/mach-omap2/id.c index 8a68f1ec66b..ff0bc9e51aa 100644 --- a/arch/arm/mach-omap2/id.c +++ b/arch/arm/mach-omap2/id.c @@ -529,22 +529,28 @@ void __init omap5xxx_check_revision(void)  	case 0xb942:  		switch (rev) {  		case 0: -		default:  			omap_revision = OMAP5430_REV_ES1_0; +			break; +		case 1: +		default: +			omap_revision = OMAP5430_REV_ES2_0;  		}  		break;  	case 0xb998:  		switch (rev) {  		case 0: -		default:  			omap_revision = OMAP5432_REV_ES1_0; +			break; +		case 1: +		default: +			omap_revision = OMAP5432_REV_ES2_0;  		}  		break;  	default:  		/* Unknown default to latest silicon rev as default*/ -		omap_revision = OMAP5430_REV_ES1_0; +		omap_revision = OMAP5430_REV_ES2_0;  	}  	pr_info("OMAP%04x ES%d.0\n", diff --git a/arch/arm/mach-omap2/io.c b/arch/arm/mach-omap2/io.c index 2c3fdd65387..2bef5a7e6af 100644 --- a/arch/arm/mach-omap2/io.c +++ b/arch/arm/mach-omap2/io.c @@ -271,6 +271,14 @@ static struct map_desc omap54xx_io_desc[] __initdata = {  		.length		= L4_PER_54XX_SIZE,  		.type		= MT_DEVICE,  	}, +#ifdef CONFIG_OMAP4_ERRATA_I688 +	{ +		.virtual	= OMAP4_SRAM_VA, +		.pfn		= __phys_to_pfn(OMAP4_SRAM_PA), +		.length		= PAGE_SIZE, +		.type		= MT_MEMORY_SO, +	}, +#endif  };  #endif @@ -323,6 +331,7 @@ void __init omap4_map_io(void)  void __init omap5_map_io(void)  {  	iotable_init(omap54xx_io_desc, ARRAY_SIZE(omap54xx_io_desc)); +	omap_barriers_init();  }  #endif  /* diff --git a/arch/arm/mach-omap2/omap4-common.c b/arch/arm/mach-omap2/omap4-common.c index 708bb115a27..2aeb928efdf 100644 --- a/arch/arm/mach-omap2/omap4-common.c +++ b/arch/arm/mach-omap2/omap4-common.c @@ -240,15 +240,21 @@ void __iomem *omap4_get_sar_ram_base(void)   */  static int __init omap4_sar_ram_init(void)  { +	unsigned long sar_base; +  	/*  	 * To avoid code running on other OMAPs in  	 * multi-omap builds  	 */ -	if (!cpu_is_omap44xx()) +	if (cpu_is_omap44xx()) +		sar_base = OMAP44XX_SAR_RAM_BASE; +	else if (soc_is_omap54xx()) +		sar_base = OMAP54XX_SAR_RAM_BASE; +	else  		return -ENOMEM;  	/* Static mapping, never released */ -	sar_ram_base = ioremap(OMAP44XX_SAR_RAM_BASE, SZ_16K); +	sar_ram_base = ioremap(sar_base, SZ_16K);  	if (WARN_ON(!sar_ram_base))  		return -ENOMEM; diff --git a/arch/arm/mach-omap2/omap4-sar-layout.h b/arch/arm/mach-omap2/omap4-sar-layout.h index e170fe803b0..937417523b8 100644 --- a/arch/arm/mach-omap2/omap4-sar-layout.h +++ b/arch/arm/mach-omap2/omap4-sar-layout.h @@ -48,13 +48,13 @@  #define SAR_BACKUP_STATUS_WAKEUPGEN		0x10  /* WakeUpGen save restore offset from OMAP54XX_SAR_RAM_BASE */ -#define OMAP5_WAKEUPGENENB_OFFSET_CPU0		(SAR_BANK3_OFFSET + 0x8d4) -#define OMAP5_WAKEUPGENENB_SECURE_OFFSET_CPU0	(SAR_BANK3_OFFSET + 0x8e8) -#define OMAP5_WAKEUPGENENB_OFFSET_CPU1		(SAR_BANK3_OFFSET + 0x8fc) -#define OMAP5_WAKEUPGENENB_SECURE_OFFSET_CPU1	(SAR_BANK3_OFFSET + 0x910) -#define OMAP5_AUXCOREBOOT0_OFFSET		(SAR_BANK3_OFFSET + 0x924) -#define OMAP5_AUXCOREBOOT1_OFFSET		(SAR_BANK3_OFFSET + 0x928) -#define OMAP5_AMBA_IF_MODE_OFFSET		(SAR_BANK3_OFFSET + 0x92c) +#define OMAP5_WAKEUPGENENB_OFFSET_CPU0		(SAR_BANK3_OFFSET + 0x9dc) +#define OMAP5_WAKEUPGENENB_SECURE_OFFSET_CPU0	(SAR_BANK3_OFFSET + 0x9f0) +#define OMAP5_WAKEUPGENENB_OFFSET_CPU1		(SAR_BANK3_OFFSET + 0xa04) +#define OMAP5_WAKEUPGENENB_SECURE_OFFSET_CPU1	(SAR_BANK3_OFFSET + 0xa18) +#define OMAP5_AUXCOREBOOT0_OFFSET		(SAR_BANK3_OFFSET + 0xa2c) +#define OMAP5_AUXCOREBOOT1_OFFSET		(SAR_BANK3_OFFSET + 0x930) +#define OMAP5_AMBA_IF_MODE_OFFSET		(SAR_BANK3_OFFSET + 0xa34)  #define OMAP5_SAR_BACKUP_STATUS_OFFSET		(SAR_BANK3_OFFSET + 0x800)  #endif diff --git a/arch/arm/mach-omap2/omap54xx.h b/arch/arm/mach-omap2/omap54xx.h index a2582bb3cab..a086ba15868 100644 --- a/arch/arm/mach-omap2/omap54xx.h +++ b/arch/arm/mach-omap2/omap54xx.h @@ -28,5 +28,6 @@  #define OMAP54XX_PRCM_MPU_BASE		0x48243000  #define OMAP54XX_SCM_BASE		0x4a002000  #define OMAP54XX_CTRL_BASE		0x4a002800 +#define OMAP54XX_SAR_RAM_BASE		0x4ae26000  #endif /* __ASM_SOC_OMAP555554XX_H */ diff --git a/arch/arm/mach-omap2/omap_device.c b/arch/arm/mach-omap2/omap_device.c index 381be7ac0c1..eeea4fa28fb 100644 --- a/arch/arm/mach-omap2/omap_device.c +++ b/arch/arm/mach-omap2/omap_device.c @@ -131,7 +131,7 @@ static int omap_device_build_from_dt(struct platform_device *pdev)  	int oh_cnt, i, ret = 0;  	oh_cnt = of_property_count_strings(node, "ti,hwmods"); -	if (!oh_cnt || IS_ERR_VALUE(oh_cnt)) { +	if (oh_cnt <= 0) {  		dev_dbg(&pdev->dev, "No 'hwmods' to build omap_device\n");  		return -ENODEV;  	} @@ -815,20 +815,17 @@ struct device *omap_device_get_by_hwmod_name(const char *oh_name)  	}  	oh = omap_hwmod_lookup(oh_name); -	if (IS_ERR_OR_NULL(oh)) { +	if (!oh) {  		WARN(1, "%s: no hwmod for %s\n", __func__,  			oh_name); -		return ERR_PTR(oh ? PTR_ERR(oh) : -ENODEV); +		return ERR_PTR(-ENODEV);  	} -	if (IS_ERR_OR_NULL(oh->od)) { +	if (!oh->od) {  		WARN(1, "%s: no omap_device for %s\n", __func__,  			oh_name); -		return ERR_PTR(oh->od ? PTR_ERR(oh->od) : -ENODEV); +		return ERR_PTR(-ENODEV);  	} -	if (IS_ERR_OR_NULL(oh->od->pdev)) -		return ERR_PTR(oh->od->pdev ? PTR_ERR(oh->od->pdev) : -ENODEV); -  	return &oh->od->pdev->dev;  } diff --git a/arch/arm/mach-omap2/omap_hwmod.c b/arch/arm/mach-omap2/omap_hwmod.c index c2c798c08c2..2520d46c850 100644 --- a/arch/arm/mach-omap2/omap_hwmod.c +++ b/arch/arm/mach-omap2/omap_hwmod.c @@ -610,8 +610,6 @@ static int _enable_wakeup(struct omap_hwmod *oh, u32 *v)  	/* XXX test pwrdm_get_wken for this hwmod's subsystem */ -	oh->_int_flags |= _HWMOD_WAKEUP_ENABLED; -  	return 0;  } @@ -645,8 +643,6 @@ static int _disable_wakeup(struct omap_hwmod *oh, u32 *v)  	/* XXX test pwrdm_get_wken for this hwmod's subsystem */ -	oh->_int_flags &= ~_HWMOD_WAKEUP_ENABLED; -  	return 0;  } @@ -1663,7 +1659,7 @@ static int _deassert_hardreset(struct omap_hwmod *oh, const char *name)  		return -ENOSYS;  	ret = _lookup_hardreset(oh, name, &ohri); -	if (IS_ERR_VALUE(ret)) +	if (ret < 0)  		return ret;  	if (oh->clkdm) { @@ -2413,7 +2409,7 @@ static int __init _init(struct omap_hwmod *oh, void *data)  	_init_mpu_rt_base(oh, NULL);  	r = _init_clocks(oh, NULL); -	if (IS_ERR_VALUE(r)) { +	if (r < 0) {  		WARN(1, "omap_hwmod: %s: couldn't init clocks\n", oh->name);  		return -EINVAL;  	} diff --git a/arch/arm/mach-omap2/omap_hwmod.h b/arch/arm/mach-omap2/omap_hwmod.h index d43d9b608ed..28f4dea0512 100644 --- a/arch/arm/mach-omap2/omap_hwmod.h +++ b/arch/arm/mach-omap2/omap_hwmod.h @@ -477,15 +477,13 @@ struct omap_hwmod_omap4_prcm {   * These are for internal use only and are managed by the omap_hwmod code.   *   * _HWMOD_NO_MPU_PORT: no path exists for the MPU to write to this module - * _HWMOD_WAKEUP_ENABLED: set when the omap_hwmod code has enabled ENAWAKEUP   * _HWMOD_SYSCONFIG_LOADED: set when the OCP_SYSCONFIG value has been cached   * _HWMOD_SKIP_ENABLE: set if hwmod enabled during init (HWMOD_INIT_NO_IDLE) -   *     causes the first call to _enable() to only update the pinmux   */  #define _HWMOD_NO_MPU_PORT			(1 << 0) -#define _HWMOD_WAKEUP_ENABLED			(1 << 1) -#define _HWMOD_SYSCONFIG_LOADED			(1 << 2) -#define _HWMOD_SKIP_ENABLE			(1 << 3) +#define _HWMOD_SYSCONFIG_LOADED			(1 << 1) +#define _HWMOD_SKIP_ENABLE			(1 << 2)  /*   * omap_hwmod._state definitions diff --git a/arch/arm/mach-omap2/omap_hwmod_33xx_data.c b/arch/arm/mach-omap2/omap_hwmod_33xx_data.c index 26eee4a556a..31bea1ce3de 100644 --- a/arch/arm/mach-omap2/omap_hwmod_33xx_data.c +++ b/arch/arm/mach-omap2/omap_hwmod_33xx_data.c @@ -28,6 +28,7 @@  #include "prm-regbits-33xx.h"  #include "i2c.h"  #include "mmc.h" +#include "wd_timer.h"  /*   * IP blocks @@ -2087,8 +2088,21 @@ static struct omap_hwmod am33xx_uart6_hwmod = {  };  /* 'wd_timer' class */ +static struct omap_hwmod_class_sysconfig wdt_sysc = { +	.rev_offs	= 0x0, +	.sysc_offs	= 0x10, +	.syss_offs	= 0x14, +	.sysc_flags	= (SYSC_HAS_EMUFREE | SYSC_HAS_SIDLEMODE | +			SYSC_HAS_SOFTRESET | SYSS_HAS_RESET_STATUS), +	.idlemodes	= (SIDLE_FORCE | SIDLE_NO | SIDLE_SMART | +			SIDLE_SMART_WKUP), +	.sysc_fields	= &omap_hwmod_sysc_type1, +}; +  static struct omap_hwmod_class am33xx_wd_timer_hwmod_class = {  	.name		= "wd_timer", +	.sysc		= &wdt_sysc, +	.pre_shutdown	= &omap2_wd_timer_disable,  };  /* @@ -2099,6 +2113,7 @@ static struct omap_hwmod am33xx_wd_timer1_hwmod = {  	.name		= "wd_timer2",  	.class		= &am33xx_wd_timer_hwmod_class,  	.clkdm_name	= "l4_wkup_clkdm", +	.flags		= HWMOD_SWSUP_SIDLE,  	.main_clk	= "wdt1_fck",  	.prcm		= {  		.omap4	= { diff --git a/arch/arm/mach-omap2/pm-debug.c b/arch/arm/mach-omap2/pm-debug.c index 1edd000a814..0b339861d75 100644 --- a/arch/arm/mach-omap2/pm-debug.c +++ b/arch/arm/mach-omap2/pm-debug.c @@ -217,7 +217,7 @@ static int __init pwrdms_setup(struct powerdomain *pwrdm, void *dir)  		return 0;  	d = debugfs_create_dir(pwrdm->name, (struct dentry *)dir); -	if (!(IS_ERR_OR_NULL(d))) +	if (d)  		(void) debugfs_create_file("suspend", S_IRUGO|S_IWUSR, d,  			(void *)pwrdm, &pwrdm_suspend_fops); @@ -261,8 +261,8 @@ static int __init pm_dbg_init(void)  		return 0;  	d = debugfs_create_dir("pm_debug", NULL); -	if (IS_ERR_OR_NULL(d)) -		return PTR_ERR(d); +	if (!d) +		return -EINVAL;  	(void) debugfs_create_file("count", S_IRUGO,  		d, (void *)DEBUG_FILE_COUNTERS, &debug_fops); diff --git a/arch/arm/mach-omap2/powerdomain.c b/arch/arm/mach-omap2/powerdomain.c index 8e61d80bf6b..86babd740d4 100644 --- a/arch/arm/mach-omap2/powerdomain.c +++ b/arch/arm/mach-omap2/powerdomain.c @@ -52,7 +52,6 @@ enum {  #define ALREADYACTIVE_SWITCH		0  #define FORCEWAKEUP_SWITCH		1  #define LOWPOWERSTATE_SWITCH		2 -#define ERROR_SWITCH			3  /* pwrdm_list contains all registered struct powerdomains */  static LIST_HEAD(pwrdm_list); @@ -233,10 +232,7 @@ static u8 _pwrdm_save_clkdm_state_and_activate(struct powerdomain *pwrdm,  {  	u8 sleep_switch; -	if (curr_pwrst < 0) { -		WARN_ON(1); -		sleep_switch = ERROR_SWITCH; -	} else if (curr_pwrst < PWRDM_POWER_ON) { +	if (curr_pwrst < PWRDM_POWER_ON) {  		if (curr_pwrst > pwrst &&  		    pwrdm->flags & PWRDM_HAS_LOWPOWERSTATECHANGE &&  		    arch_pwrdm->pwrdm_set_lowpwrstchange) { @@ -1091,7 +1087,8 @@ int pwrdm_post_transition(struct powerdomain *pwrdm)   */  int omap_set_pwrdm_state(struct powerdomain *pwrdm, u8 pwrst)  { -	u8 curr_pwrst, next_pwrst, sleep_switch; +	u8 next_pwrst, sleep_switch; +	int curr_pwrst;  	int ret = 0;  	bool hwsup = false; @@ -1107,16 +1104,17 @@ int omap_set_pwrdm_state(struct powerdomain *pwrdm, u8 pwrst)  	pwrdm_lock(pwrdm);  	curr_pwrst = pwrdm_read_pwrst(pwrdm); +	if (curr_pwrst < 0) { +		ret = -EINVAL; +		goto osps_out; +	} +  	next_pwrst = pwrdm_read_next_pwrst(pwrdm);  	if (curr_pwrst == pwrst && next_pwrst == pwrst)  		goto osps_out;  	sleep_switch = _pwrdm_save_clkdm_state_and_activate(pwrdm, curr_pwrst,  							    pwrst, &hwsup); -	if (sleep_switch == ERROR_SWITCH) { -		ret = -EINVAL; -		goto osps_out; -	}  	ret = pwrdm_set_next_pwrst(pwrdm, pwrst);  	if (ret) @@ -1182,7 +1180,7 @@ bool pwrdm_can_ever_lose_context(struct powerdomain *pwrdm)  {  	int i; -	if (IS_ERR_OR_NULL(pwrdm)) { +	if (!pwrdm) {  		pr_debug("powerdomain: %s: invalid powerdomain pointer\n",  			 __func__);  		return 1; diff --git a/arch/arm/mach-omap2/prm44xx.c b/arch/arm/mach-omap2/prm44xx.c index d35f98aabf7..415c7e0c939 100644 --- a/arch/arm/mach-omap2/prm44xx.c +++ b/arch/arm/mach-omap2/prm44xx.c @@ -81,13 +81,13 @@ static struct prm_reset_src_map omap44xx_prm_reset_src_map[] = {  /* Read a register in a CM/PRM instance in the PRM module */  u32 omap4_prm_read_inst_reg(s16 inst, u16 reg)  { -	return __raw_readl(OMAP44XX_PRM_REGADDR(inst, reg)); +	return __raw_readl(prm_base + inst + reg);  }  /* Write into a register in a CM/PRM instance in the PRM module */  void omap4_prm_write_inst_reg(u32 val, s16 inst, u16 reg)  { -	__raw_writel(val, OMAP44XX_PRM_REGADDR(inst, reg)); +	__raw_writel(val, prm_base + inst + reg);  }  /* Read-modify-write a register in a PRM module. Caller must lock */ @@ -650,7 +650,7 @@ static struct prm_ll_data omap44xx_prm_ll_data = {  int __init omap44xx_prm_init(void)  { -	if (!cpu_is_omap44xx()) +	if (!cpu_is_omap44xx() && !soc_is_omap54xx())  		return 0;  	return prm_register(&omap44xx_prm_ll_data); diff --git a/arch/arm/mach-omap2/soc.h b/arch/arm/mach-omap2/soc.h index c62116bbc76..18fdeeb3a44 100644 --- a/arch/arm/mach-omap2/soc.h +++ b/arch/arm/mach-omap2/soc.h @@ -413,7 +413,9 @@ IS_OMAP_TYPE(3430, 0x3430)  #define OMAP54XX_CLASS		0x54000054  #define OMAP5430_REV_ES1_0	(OMAP54XX_CLASS | (0x30 << 16) | (0x10 << 8)) +#define OMAP5430_REV_ES2_0	(OMAP54XX_CLASS | (0x30 << 16) | (0x20 << 8))  #define OMAP5432_REV_ES1_0	(OMAP54XX_CLASS | (0x32 << 16) | (0x10 << 8)) +#define OMAP5432_REV_ES2_0	(OMAP54XX_CLASS | (0x32 << 16) | (0x20 << 8))  void omap2xxx_check_revision(void);  void omap3xxx_check_revision(void); diff --git a/arch/arm/mach-omap2/timer.c b/arch/arm/mach-omap2/timer.c index 4fd80257c73..f12aa6c15da 100644 --- a/arch/arm/mach-omap2/timer.c +++ b/arch/arm/mach-omap2/timer.c @@ -57,15 +57,6 @@  #include "common.h"  #include "powerdomain.h" -/* Parent clocks, eventually these will come from the clock framework */ - -#define OMAP2_MPU_SOURCE	"sys_ck" -#define OMAP3_MPU_SOURCE	OMAP2_MPU_SOURCE -#define OMAP4_MPU_SOURCE	"sys_clkin_ck" -#define OMAP2_32K_SOURCE	"func_32k_ck" -#define OMAP3_32K_SOURCE	"omap_32k_fck" -#define OMAP4_32K_SOURCE	"sys_32k_ck" -  #define REALTIME_COUNTER_BASE				0x48243200  #define INCREMENTER_NUMERATOR_OFFSET			0x10  #define INCREMENTER_DENUMERATOR_RELOAD_OFFSET		0x14 @@ -129,7 +120,6 @@ static void omap2_gp_timer_set_mode(enum clock_event_mode mode,  }  static struct clock_event_device clockevent_gpt = { -	.name		= "gp_timer",  	.features       = CLOCK_EVT_FEAT_PERIODIC | CLOCK_EVT_FEAT_ONESHOT,  	.rating		= 300,  	.set_next_event	= omap2_gp_timer_set_next_event, @@ -170,6 +160,12 @@ static struct device_node * __init omap_get_timer_dt(struct of_device_id *match,  		if (property && !of_get_property(np, property, NULL))  			continue; +		if (!property && (of_get_property(np, "ti,timer-alwon", NULL) || +				  of_get_property(np, "ti,timer-dsp", NULL) || +				  of_get_property(np, "ti,timer-pwm", NULL) || +				  of_get_property(np, "ti,timer-secure", NULL))) +			continue; +  		of_add_property(np, &device_disabled);  		return np;  	} @@ -214,16 +210,17 @@ static u32 __init omap_dm_timer_get_errata(void)  }  static int __init omap_dm_timer_init_one(struct omap_dm_timer *timer, -						int gptimer_id, -						const char *fck_source, -						const char *property, -						int posted) +					 const char *fck_source, +					 const char *property, +					 const char **timer_name, +					 int posted)  {  	char name[10]; /* 10 = sizeof("gptXX_Xck0") */  	const char *oh_name;  	struct device_node *np;  	struct omap_hwmod *oh;  	struct resource irq, mem; +	struct clk *src;  	int r = 0;  	if (of_have_populated_dt()) { @@ -243,10 +240,10 @@ static int __init omap_dm_timer_init_one(struct omap_dm_timer *timer,  		of_node_put(np);  	} else { -		if (omap_dm_timer_reserve_systimer(gptimer_id)) +		if (omap_dm_timer_reserve_systimer(timer->id))  			return -ENODEV; -		sprintf(name, "timer%d", gptimer_id); +		sprintf(name, "timer%d", timer->id);  		oh_name = name;  	} @@ -254,6 +251,8 @@ static int __init omap_dm_timer_init_one(struct omap_dm_timer *timer,  	if (!oh)  		return -ENODEV; +	*timer_name = oh->name; +  	if (!of_have_populated_dt()) {  		r = omap_hwmod_get_resource_byname(oh, IORESOURCE_IRQ, NULL,  						   &irq); @@ -276,24 +275,24 @@ static int __init omap_dm_timer_init_one(struct omap_dm_timer *timer,  	/* After the dmtimer is using hwmod these clocks won't be needed */  	timer->fclk = clk_get(NULL, omap_hwmod_get_main_clk(oh));  	if (IS_ERR(timer->fclk)) -		return -ENODEV; +		return PTR_ERR(timer->fclk); -	/* FIXME: Need to remove hard-coded test on timer ID */ -	if (gptimer_id != 12) { -		struct clk *src; +	src = clk_get(NULL, fck_source); +	if (IS_ERR(src)) +		return PTR_ERR(src); -		src = clk_get(NULL, fck_source); -		if (IS_ERR(src)) { -			r = -EINVAL; -		} else { -			r = clk_set_parent(timer->fclk, src); -			if (IS_ERR_VALUE(r)) -				pr_warn("%s: %s cannot set source\n", -					__func__, oh->name); +	if (clk_get_parent(timer->fclk) != src) { +		r = clk_set_parent(timer->fclk, src); +		if (r < 0) { +			pr_warn("%s: %s cannot set source\n", __func__, +				oh->name);  			clk_put(src); +			return r;  		}  	} +	clk_put(src); +  	omap_hwmod_setup_one(oh_name);  	omap_hwmod_enable(oh);  	__omap_dm_timer_init_regs(timer); @@ -317,6 +316,7 @@ static void __init omap2_gp_clockevent_init(int gptimer_id,  {  	int res; +	clkev.id = gptimer_id;  	clkev.errata = omap_dm_timer_get_errata();  	/* @@ -326,8 +326,8 @@ static void __init omap2_gp_clockevent_init(int gptimer_id,  	 */  	__omap_dm_timer_override_errata(&clkev, OMAP_TIMER_ERRATA_I103_I767); -	res = omap_dm_timer_init_one(&clkev, gptimer_id, fck_source, property, -				     OMAP_TIMER_POSTED); +	res = omap_dm_timer_init_one(&clkev, fck_source, property, +				     &clockevent_gpt.name, OMAP_TIMER_POSTED);  	BUG_ON(res);  	omap2_gp_timer_irq.dev_id = &clkev; @@ -341,8 +341,8 @@ static void __init omap2_gp_clockevent_init(int gptimer_id,  					3, /* Timer internal resynch latency */  					0xffffffff); -	pr_info("OMAP clockevent source: GPTIMER%d at %lu Hz\n", -		gptimer_id, clkev.rate); +	pr_info("OMAP clockevent source: %s at %lu Hz\n", clockevent_gpt.name, +		clkev.rate);  }  /* Clocksource code */ @@ -359,7 +359,6 @@ static cycle_t clocksource_read_cycles(struct clocksource *cs)  }  static struct clocksource clocksource_gpt = { -	.name		= "gp_timer",  	.rating		= 300,  	.read		= clocksource_read_cycles,  	.mask		= CLOCKSOURCE_MASK(32), @@ -442,13 +441,16 @@ static int __init __maybe_unused omap2_sync32k_clocksource_init(void)  }  static void __init omap2_gptimer_clocksource_init(int gptimer_id, -						const char *fck_source) +						  const char *fck_source, +						  const char *property)  {  	int res; +	clksrc.id = gptimer_id;  	clksrc.errata = omap_dm_timer_get_errata(); -	res = omap_dm_timer_init_one(&clksrc, gptimer_id, fck_source, NULL, +	res = omap_dm_timer_init_one(&clksrc, fck_source, property, +				     &clocksource_gpt.name,  				     OMAP_TIMER_NONPOSTED);  	BUG_ON(res); @@ -461,8 +463,8 @@ static void __init omap2_gptimer_clocksource_init(int gptimer_id,  		pr_err("Could not register clocksource %s\n",  			clocksource_gpt.name);  	else -		pr_info("OMAP clocksource: GPTIMER%d at %lu Hz\n", -			gptimer_id, clksrc.rate); +		pr_info("OMAP clocksource: %s at %lu Hz\n", +			clocksource_gpt.name, clksrc.rate);  }  #ifdef CONFIG_SOC_HAS_REALTIME_COUNTER @@ -487,7 +489,7 @@ static void __init realtime_counter_init(void)  		pr_err("%s: ioremap failed\n", __func__);  		return;  	} -	sys_clk = clk_get(NULL, "sys_clkin_ck"); +	sys_clk = clk_get(NULL, "sys_clkin");  	if (IS_ERR(sys_clk)) {  		pr_err("%s: failed to get system clock handle\n", __func__);  		iounmap(base); @@ -544,49 +546,52 @@ static inline void __init realtime_counter_init(void)  #endif  #define OMAP_SYS_GP_TIMER_INIT(name, clkev_nr, clkev_src, clkev_prop,	\ -			       clksrc_nr, clksrc_src)			\ +			       clksrc_nr, clksrc_src, clksrc_prop)	\  void __init omap##name##_gptimer_timer_init(void)			\  {									\  	omap_dmtimer_init();						\  	omap2_gp_clockevent_init((clkev_nr), clkev_src, clkev_prop);	\ -	omap2_gptimer_clocksource_init((clksrc_nr), clksrc_src);	\ +	omap2_gptimer_clocksource_init((clksrc_nr), clksrc_src,		\ +					clksrc_prop);			\  }  #define OMAP_SYS_32K_TIMER_INIT(name, clkev_nr, clkev_src, clkev_prop,	\ -				clksrc_nr, clksrc_src)			\ +				clksrc_nr, clksrc_src, clksrc_prop)	\  void __init omap##name##_sync32k_timer_init(void)		\  {									\  	omap_dmtimer_init();						\  	omap2_gp_clockevent_init((clkev_nr), clkev_src, clkev_prop);	\  	/* Enable the use of clocksource="gp_timer" kernel parameter */	\  	if (use_gptimer_clksrc)						\ -		omap2_gptimer_clocksource_init((clksrc_nr), clksrc_src);\ +		omap2_gptimer_clocksource_init((clksrc_nr), clksrc_src,	\ +						clksrc_prop);		\  	else								\  		omap2_sync32k_clocksource_init();			\  }  #ifdef CONFIG_ARCH_OMAP2 -OMAP_SYS_32K_TIMER_INIT(2, 1, OMAP2_32K_SOURCE, "ti,timer-alwon", -			2, OMAP2_MPU_SOURCE); +OMAP_SYS_32K_TIMER_INIT(2, 1, "timer_32k_ck", "ti,timer-alwon", +			2, "timer_sys_ck", NULL);  #endif /* CONFIG_ARCH_OMAP2 */  #ifdef CONFIG_ARCH_OMAP3 -OMAP_SYS_32K_TIMER_INIT(3, 1, OMAP3_32K_SOURCE, "ti,timer-alwon", -			2, OMAP3_MPU_SOURCE); -OMAP_SYS_32K_TIMER_INIT(3_secure, 12, OMAP3_32K_SOURCE, "ti,timer-secure", -			2, OMAP3_MPU_SOURCE); -OMAP_SYS_GP_TIMER_INIT(3_gp, 1, OMAP3_MPU_SOURCE, "ti,timer-alwon", -		       2, OMAP3_MPU_SOURCE); +OMAP_SYS_32K_TIMER_INIT(3, 1, "timer_32k_ck", "ti,timer-alwon", +			2, "timer_sys_ck", NULL); +OMAP_SYS_32K_TIMER_INIT(3_secure, 12, "secure_32k_fck", "ti,timer-secure", +			2, "timer_sys_ck", NULL);  #endif /* CONFIG_ARCH_OMAP3 */ -#ifdef CONFIG_SOC_AM33XX -OMAP_SYS_GP_TIMER_INIT(3_am33xx, 1, OMAP4_MPU_SOURCE, "ti,timer-alwon", -		       2, OMAP4_MPU_SOURCE); -#endif /* CONFIG_SOC_AM33XX */ +#if defined(CONFIG_ARCH_OMAP3) || defined(CONFIG_SOC_AM33XX) +OMAP_SYS_GP_TIMER_INIT(3, 2, "timer_sys_ck", NULL, +		       1, "timer_sys_ck", "ti,timer-alwon"); +#endif + +#if defined(CONFIG_ARCH_OMAP4) || defined(CONFIG_SOC_OMAP5) +static OMAP_SYS_32K_TIMER_INIT(4, 1, "timer_32k_ck", "ti,timer-alwon", +			       2, "sys_clkin_ck", NULL); +#endif  #ifdef CONFIG_ARCH_OMAP4 -OMAP_SYS_32K_TIMER_INIT(4, 1, OMAP4_32K_SOURCE, "ti,timer-alwon", -			2, OMAP4_MPU_SOURCE);  #ifdef CONFIG_LOCAL_TIMERS  static DEFINE_TWD_LOCAL_TIMER(twd_local_timer, OMAP44XX_LOCAL_TWD_BASE, 29);  void __init omap4_local_timer_init(void) @@ -615,13 +620,11 @@ void __init omap4_local_timer_init(void)  #endif /* CONFIG_ARCH_OMAP4 */  #ifdef CONFIG_SOC_OMAP5 -OMAP_SYS_32K_TIMER_INIT(5, 1, OMAP4_32K_SOURCE, "ti,timer-alwon", -			2, OMAP4_MPU_SOURCE);  void __init omap5_realtime_timer_init(void)  {  	int err; -	omap5_sync32k_timer_init(); +	omap4_sync32k_timer_init();  	realtime_counter_init();  	err = arch_timer_of_register(); diff --git a/arch/arm/mach-tegra/board-harmony-pcie.c b/arch/arm/mach-tegra/board-harmony-pcie.c index 3cdc1bb8254..6d29e6a3954 100644 --- a/arch/arm/mach-tegra/board-harmony-pcie.c +++ b/arch/arm/mach-tegra/board-harmony-pcie.c @@ -56,9 +56,9 @@ int __init harmony_pcie_init(void)  	gpio_direction_output(en_vdd_1v05, 1);  	regulator = regulator_get(NULL, "vdd_ldo0,vddio_pex_clk"); -	if (IS_ERR_OR_NULL(regulator)) { -		pr_err("%s: regulator_get failed: %d\n", __func__, -		       (int)PTR_ERR(regulator)); +	if (IS_ERR(regulator)) { +		err = PTR_ERR(regulator); +		pr_err("%s: regulator_get failed: %d\n", __func__, err);  		goto err_reg;  	} diff --git a/arch/arm/mach-tegra/tegra2_emc.c b/arch/arm/mach-tegra/tegra2_emc.c index ce7ce42a1ac..9e8bdfa2b36 100644 --- a/arch/arm/mach-tegra/tegra2_emc.c +++ b/arch/arm/mach-tegra/tegra2_emc.c @@ -276,7 +276,7 @@ static struct tegra_emc_pdata *tegra_emc_fill_pdata(struct platform_device *pdev  	int i;  	WARN_ON(pdev->dev.platform_data); -	BUG_ON(IS_ERR_OR_NULL(c)); +	BUG_ON(IS_ERR(c));  	pdata = devm_kzalloc(&pdev->dev, sizeof(*pdata), GFP_KERNEL);  	pdata->tables = devm_kzalloc(&pdev->dev, sizeof(*pdata->tables), diff --git a/arch/arm/mach-ux500/cpu.c b/arch/arm/mach-ux500/cpu.c index 537870d3fea..002da9a369d 100644 --- a/arch/arm/mach-ux500/cpu.c +++ b/arch/arm/mach-ux500/cpu.c @@ -140,14 +140,13 @@ struct device * __init ux500_soc_device_init(const char *soc_id)  	soc_info_populate(soc_dev_attr, soc_id);  	soc_dev = soc_device_register(soc_dev_attr); -	if (IS_ERR_OR_NULL(soc_dev)) { +	if (IS_ERR(soc_dev)) {  	        kfree(soc_dev_attr);  		return NULL;  	}  	parent = soc_device_to_device(soc_dev); -	if (!IS_ERR_OR_NULL(parent)) -		device_create_file(parent, &ux500_soc_attr); +	device_create_file(parent, &ux500_soc_attr);  	return parent;  } diff --git a/arch/arm/plat-omap/dmtimer.c b/arch/arm/plat-omap/dmtimer.c index a0daa2fb5de..e6dbc8dbe6a 100644 --- a/arch/arm/plat-omap/dmtimer.c +++ b/arch/arm/plat-omap/dmtimer.c @@ -140,8 +140,7 @@ static int omap_dm_timer_prepare(struct omap_dm_timer *timer)  	 */  	if (!(timer->capability & OMAP_TIMER_NEEDS_RESET)) {  		timer->fclk = clk_get(&timer->pdev->dev, "fck"); -		if (WARN_ON_ONCE(IS_ERR_OR_NULL(timer->fclk))) { -			timer->fclk = NULL; +		if (WARN_ON_ONCE(IS_ERR(timer->fclk))) {  			dev_err(&timer->pdev->dev, ": No fclk handle.\n");  			return -EINVAL;  		} @@ -373,7 +372,7 @@ EXPORT_SYMBOL_GPL(omap_dm_timer_modify_idlect_mask);  struct clk *omap_dm_timer_get_fclk(struct omap_dm_timer *timer)  { -	if (timer) +	if (timer && !IS_ERR(timer->fclk))  		return timer->fclk;  	return NULL;  } @@ -482,7 +481,7 @@ int omap_dm_timer_set_source(struct omap_dm_timer *timer, int source)  	if (pdata && pdata->set_timer_src)  		return pdata->set_timer_src(timer->pdev, source); -	if (!timer->fclk) +	if (IS_ERR(timer->fclk))  		return -EINVAL;  	switch (source) { @@ -500,13 +499,13 @@ int omap_dm_timer_set_source(struct omap_dm_timer *timer, int source)  	}  	parent = clk_get(&timer->pdev->dev, parent_name); -	if (IS_ERR_OR_NULL(parent)) { +	if (IS_ERR(parent)) {  		pr_err("%s: %s not found\n", __func__, parent_name);  		return -EINVAL;  	}  	ret = clk_set_parent(timer->fclk, parent); -	if (IS_ERR_VALUE(ret)) +	if (ret < 0)  		pr_err("%s: failed to set %s as parent\n", __func__,  			parent_name); @@ -808,6 +807,7 @@ static int omap_dm_timer_probe(struct platform_device *pdev)  		return  -ENOMEM;  	} +	timer->fclk = ERR_PTR(-ENODEV);  	timer->io_base = devm_ioremap_resource(dev, mem);  	if (IS_ERR(timer->io_base))  		return PTR_ERR(timer->io_base); diff --git a/arch/arm64/mm/mmu.c b/arch/arm64/mm/mmu.c index 224b44ab534..70b8cd4021c 100644 --- a/arch/arm64/mm/mmu.c +++ b/arch/arm64/mm/mmu.c @@ -261,7 +261,7 @@ static void __init create_mapping(phys_addr_t phys, unsigned long virt,  void __iomem * __init early_io_map(phys_addr_t phys, unsigned long virt)  {  	unsigned long size, mask; -	bool page64k = IS_ENABLED(ARM64_64K_PAGES); +	bool page64k = IS_ENABLED(CONFIG_ARM64_64K_PAGES);  	pgd_t *pgd;  	pud_t *pud;  	pmd_t *pmd; diff --git a/arch/ia64/kernel/process.c b/arch/ia64/kernel/process.c index e34f565f595..6f7dc8b7b35 100644 --- a/arch/ia64/kernel/process.c +++ b/arch/ia64/kernel/process.c @@ -291,7 +291,6 @@ cpu_idle (void)  		}  		if (!need_resched()) { -			void (*idle)(void);  #ifdef CONFIG_SMP  			min_xtp();  #endif @@ -299,9 +298,7 @@ cpu_idle (void)  			if (mark_idle)  				(*mark_idle)(1); -			if (!idle) -				idle = default_idle; -			(*idle)(); +			default_idle();  			if (mark_idle)  				(*mark_idle)(0);  #ifdef CONFIG_SMP diff --git a/arch/powerpc/kernel/epapr_paravirt.c b/arch/powerpc/kernel/epapr_paravirt.c index f3eab8594d9..d44a571e45a 100644 --- a/arch/powerpc/kernel/epapr_paravirt.c +++ b/arch/powerpc/kernel/epapr_paravirt.c @@ -23,8 +23,10 @@  #include <asm/code-patching.h>  #include <asm/machdep.h> +#if !defined(CONFIG_64BIT) || defined(CONFIG_PPC_BOOK3E_64)  extern void epapr_ev_idle(void);  extern u32 epapr_ev_idle_start[]; +#endif  bool epapr_paravirt_enabled; @@ -47,11 +49,15 @@ static int __init epapr_paravirt_init(void)  	for (i = 0; i < (len / 4); i++) {  		patch_instruction(epapr_hypercall_start + i, insts[i]); +#if !defined(CONFIG_64BIT) || defined(CONFIG_PPC_BOOK3E_64)  		patch_instruction(epapr_ev_idle_start + i, insts[i]); +#endif  	} +#if !defined(CONFIG_64BIT) || defined(CONFIG_PPC_BOOK3E_64)  	if (of_get_property(hyper_node, "has-idle", NULL))  		ppc_md.power_save = epapr_ev_idle; +#endif  	epapr_paravirt_enabled = true; diff --git a/arch/powerpc/kernel/exceptions-64s.S b/arch/powerpc/kernel/exceptions-64s.S index 200afa5bcfb..56bd92362ce 100644 --- a/arch/powerpc/kernel/exceptions-64s.S +++ b/arch/powerpc/kernel/exceptions-64s.S @@ -1066,78 +1066,6 @@ unrecov_user_slb:  #endif /* __DISABLED__ */ -/* - * r13 points to the PACA, r9 contains the saved CR, - * r12 contain the saved SRR1, SRR0 is still ready for return - * r3 has the faulting address - * r9 - r13 are saved in paca->exslb. - * r3 is saved in paca->slb_r3 - * We assume we aren't going to take any exceptions during this procedure. - */ -_GLOBAL(slb_miss_realmode) -	mflr	r10 -#ifdef CONFIG_RELOCATABLE -	mtctr	r11 -#endif - -	stw	r9,PACA_EXSLB+EX_CCR(r13)	/* save CR in exc. frame */ -	std	r10,PACA_EXSLB+EX_LR(r13)	/* save LR */ - -	bl	.slb_allocate_realmode - -	/* All done -- return from exception. */ - -	ld	r10,PACA_EXSLB+EX_LR(r13) -	ld	r3,PACA_EXSLB+EX_R3(r13) -	lwz	r9,PACA_EXSLB+EX_CCR(r13)	/* get saved CR */ - -	mtlr	r10 - -	andi.	r10,r12,MSR_RI	/* check for unrecoverable exception */ -	beq-	2f - -.machine	push -.machine	"power4" -	mtcrf	0x80,r9 -	mtcrf	0x01,r9		/* slb_allocate uses cr0 and cr7 */ -.machine	pop - -	RESTORE_PPR_PACA(PACA_EXSLB, r9) -	ld	r9,PACA_EXSLB+EX_R9(r13) -	ld	r10,PACA_EXSLB+EX_R10(r13) -	ld	r11,PACA_EXSLB+EX_R11(r13) -	ld	r12,PACA_EXSLB+EX_R12(r13) -	ld	r13,PACA_EXSLB+EX_R13(r13) -	rfid -	b	.	/* prevent speculative execution */ - -2:	mfspr	r11,SPRN_SRR0 -	ld	r10,PACAKBASE(r13) -	LOAD_HANDLER(r10,unrecov_slb) -	mtspr	SPRN_SRR0,r10 -	ld	r10,PACAKMSR(r13) -	mtspr	SPRN_SRR1,r10 -	rfid -	b	. - -unrecov_slb: -	EXCEPTION_PROLOG_COMMON(0x4100, PACA_EXSLB) -	DISABLE_INTS -	bl	.save_nvgprs -1:	addi	r3,r1,STACK_FRAME_OVERHEAD -	bl	.unrecoverable_exception -	b	1b - - -#ifdef CONFIG_PPC_970_NAP -power4_fixup_nap: -	andc	r9,r9,r10 -	std	r9,TI_LOCAL_FLAGS(r11) -	ld	r10,_LINK(r1)		/* make idle task do the */ -	std	r10,_NIP(r1)		/* equivalent of a blr */ -	blr -#endif -  	.align	7  	.globl alignment_common  alignment_common: @@ -1336,6 +1264,78 @@ _GLOBAL(opal_mc_secondary_handler)  /* + * r13 points to the PACA, r9 contains the saved CR, + * r12 contain the saved SRR1, SRR0 is still ready for return + * r3 has the faulting address + * r9 - r13 are saved in paca->exslb. + * r3 is saved in paca->slb_r3 + * We assume we aren't going to take any exceptions during this procedure. + */ +_GLOBAL(slb_miss_realmode) +	mflr	r10 +#ifdef CONFIG_RELOCATABLE +	mtctr	r11 +#endif + +	stw	r9,PACA_EXSLB+EX_CCR(r13)	/* save CR in exc. frame */ +	std	r10,PACA_EXSLB+EX_LR(r13)	/* save LR */ + +	bl	.slb_allocate_realmode + +	/* All done -- return from exception. */ + +	ld	r10,PACA_EXSLB+EX_LR(r13) +	ld	r3,PACA_EXSLB+EX_R3(r13) +	lwz	r9,PACA_EXSLB+EX_CCR(r13)	/* get saved CR */ + +	mtlr	r10 + +	andi.	r10,r12,MSR_RI	/* check for unrecoverable exception */ +	beq-	2f + +.machine	push +.machine	"power4" +	mtcrf	0x80,r9 +	mtcrf	0x01,r9		/* slb_allocate uses cr0 and cr7 */ +.machine	pop + +	RESTORE_PPR_PACA(PACA_EXSLB, r9) +	ld	r9,PACA_EXSLB+EX_R9(r13) +	ld	r10,PACA_EXSLB+EX_R10(r13) +	ld	r11,PACA_EXSLB+EX_R11(r13) +	ld	r12,PACA_EXSLB+EX_R12(r13) +	ld	r13,PACA_EXSLB+EX_R13(r13) +	rfid +	b	.	/* prevent speculative execution */ + +2:	mfspr	r11,SPRN_SRR0 +	ld	r10,PACAKBASE(r13) +	LOAD_HANDLER(r10,unrecov_slb) +	mtspr	SPRN_SRR0,r10 +	ld	r10,PACAKMSR(r13) +	mtspr	SPRN_SRR1,r10 +	rfid +	b	. + +unrecov_slb: +	EXCEPTION_PROLOG_COMMON(0x4100, PACA_EXSLB) +	DISABLE_INTS +	bl	.save_nvgprs +1:	addi	r3,r1,STACK_FRAME_OVERHEAD +	bl	.unrecoverable_exception +	b	1b + + +#ifdef CONFIG_PPC_970_NAP +power4_fixup_nap: +	andc	r9,r9,r10 +	std	r9,TI_LOCAL_FLAGS(r11) +	ld	r10,_LINK(r1)		/* make idle task do the */ +	std	r10,_NIP(r1)		/* equivalent of a blr */ +	blr +#endif + +/*   * Hash table stuff   */  	.align	7 diff --git a/arch/x86/include/asm/xen/hypercall.h b/arch/x86/include/asm/xen/hypercall.h index c20d1ce62dc..e709884d0ef 100644 --- a/arch/x86/include/asm/xen/hypercall.h +++ b/arch/x86/include/asm/xen/hypercall.h @@ -382,14 +382,14 @@ HYPERVISOR_console_io(int cmd, int count, char *str)  	return _hypercall3(int, console_io, cmd, count, str);  } -extern int __must_check HYPERVISOR_physdev_op_compat(int, void *); +extern int __must_check xen_physdev_op_compat(int, void *);  static inline int  HYPERVISOR_physdev_op(int cmd, void *arg)  {  	int rc = _hypercall2(int, physdev_op, cmd, arg);  	if (unlikely(rc == -ENOSYS)) -		rc = HYPERVISOR_physdev_op_compat(cmd, arg); +		rc = xen_physdev_op_compat(cmd, arg);  	return rc;  } diff --git a/arch/x86/include/uapi/asm/msr-index.h b/arch/x86/include/uapi/asm/msr-index.h index 892ce40a747..7a060f4b411 100644 --- a/arch/x86/include/uapi/asm/msr-index.h +++ b/arch/x86/include/uapi/asm/msr-index.h @@ -44,6 +44,7 @@  #define SNB_C1_AUTO_UNDEMOTE		(1UL << 27)  #define SNB_C3_AUTO_UNDEMOTE		(1UL << 28) +#define MSR_PLATFORM_INFO		0x000000ce  #define MSR_MTRRcap			0x000000fe  #define MSR_IA32_BBL_CR_CTL		0x00000119  #define MSR_IA32_BBL_CR_CTL3		0x0000011e diff --git a/arch/x86/kernel/microcode_intel_early.c b/arch/x86/kernel/microcode_intel_early.c index 7890bc83895..d893e8ed8ac 100644 --- a/arch/x86/kernel/microcode_intel_early.c +++ b/arch/x86/kernel/microcode_intel_early.c @@ -90,13 +90,13 @@ microcode_phys(struct microcode_intel **mc_saved_tmp,  	struct microcode_intel ***mc_saved;  	mc_saved = (struct microcode_intel ***) -		   __pa_symbol(&mc_saved_data->mc_saved); +		   __pa_nodebug(&mc_saved_data->mc_saved);  	for (i = 0; i < mc_saved_data->mc_saved_count; i++) {  		struct microcode_intel *p;  		p = *(struct microcode_intel **) -			__pa(mc_saved_data->mc_saved + i); -		mc_saved_tmp[i] = (struct microcode_intel *)__pa(p); +			__pa_nodebug(mc_saved_data->mc_saved + i); +		mc_saved_tmp[i] = (struct microcode_intel *)__pa_nodebug(p);  	}  }  #endif @@ -562,7 +562,7 @@ scan_microcode(unsigned long start, unsigned long end,  	struct cpio_data cd;  	long offset = 0;  #ifdef CONFIG_X86_32 -	char *p = (char *)__pa_symbol(ucode_name); +	char *p = (char *)__pa_nodebug(ucode_name);  #else  	char *p = ucode_name;  #endif @@ -630,8 +630,8 @@ static void __cpuinit print_ucode(struct ucode_cpu_info *uci)  	if (mc_intel == NULL)  		return; -	delay_ucode_info_p = (int *)__pa_symbol(&delay_ucode_info); -	current_mc_date_p = (int *)__pa_symbol(¤t_mc_date); +	delay_ucode_info_p = (int *)__pa_nodebug(&delay_ucode_info); +	current_mc_date_p = (int *)__pa_nodebug(¤t_mc_date);  	*delay_ucode_info_p = 1;  	*current_mc_date_p = mc_intel->hdr.date; @@ -659,8 +659,8 @@ static inline void __cpuinit print_ucode(struct ucode_cpu_info *uci)  }  #endif -static int apply_microcode_early(struct mc_saved_data *mc_saved_data, -				 struct ucode_cpu_info *uci) +static int __cpuinit apply_microcode_early(struct mc_saved_data *mc_saved_data, +					   struct ucode_cpu_info *uci)  {  	struct microcode_intel *mc_intel;  	unsigned int val[2]; @@ -741,15 +741,15 @@ load_ucode_intel_bsp(void)  #ifdef CONFIG_X86_32  	struct boot_params *boot_params_p; -	boot_params_p = (struct boot_params *)__pa_symbol(&boot_params); +	boot_params_p = (struct boot_params *)__pa_nodebug(&boot_params);  	ramdisk_image = boot_params_p->hdr.ramdisk_image;  	ramdisk_size  = boot_params_p->hdr.ramdisk_size;  	initrd_start_early = ramdisk_image;  	initrd_end_early = initrd_start_early + ramdisk_size;  	_load_ucode_intel_bsp( -		(struct mc_saved_data *)__pa_symbol(&mc_saved_data), -		(unsigned long *)__pa_symbol(&mc_saved_in_initrd), +		(struct mc_saved_data *)__pa_nodebug(&mc_saved_data), +		(unsigned long *)__pa_nodebug(&mc_saved_in_initrd),  		initrd_start_early, initrd_end_early, &uci);  #else  	ramdisk_image = boot_params.hdr.ramdisk_image; @@ -772,10 +772,10 @@ void __cpuinit load_ucode_intel_ap(void)  	unsigned long *initrd_start_p;  	mc_saved_in_initrd_p = -		(unsigned long *)__pa_symbol(mc_saved_in_initrd); -	mc_saved_data_p = (struct mc_saved_data *)__pa_symbol(&mc_saved_data); -	initrd_start_p = (unsigned long *)__pa_symbol(&initrd_start); -	initrd_start_addr = (unsigned long)__pa_symbol(*initrd_start_p); +		(unsigned long *)__pa_nodebug(mc_saved_in_initrd); +	mc_saved_data_p = (struct mc_saved_data *)__pa_nodebug(&mc_saved_data); +	initrd_start_p = (unsigned long *)__pa_nodebug(&initrd_start); +	initrd_start_addr = (unsigned long)__pa_nodebug(*initrd_start_p);  #else  	mc_saved_data_p = &mc_saved_data;  	mc_saved_in_initrd_p = mc_saved_in_initrd; diff --git a/arch/x86/lib/usercopy_64.c b/arch/x86/lib/usercopy_64.c index 05928aae911..906fea31579 100644 --- a/arch/x86/lib/usercopy_64.c +++ b/arch/x86/lib/usercopy_64.c @@ -74,10 +74,10 @@ copy_user_handle_tail(char *to, char *from, unsigned len, unsigned zerorest)  	char c;  	unsigned zero_len; -	for (; len; --len) { +	for (; len; --len, to++) {  		if (__get_user_nocheck(c, from++, sizeof(char)))  			break; -		if (__put_user_nocheck(c, to++, sizeof(char))) +		if (__put_user_nocheck(c, to, sizeof(char)))  			break;  	} diff --git a/arch/x86/xen/mmu.c b/arch/x86/xen/mmu.c index e8e34938c57..6afbb2ca9a0 100644 --- a/arch/x86/xen/mmu.c +++ b/arch/x86/xen/mmu.c @@ -1467,8 +1467,6 @@ static void __init xen_write_cr3_init(unsigned long cr3)  	__xen_write_cr3(true, cr3);  	xen_mc_issue(PARAVIRT_LAZY_CPU);  /* interrupts restored */ - -	pv_mmu_ops.write_cr3 = &xen_write_cr3;  }  #endif @@ -2122,6 +2120,7 @@ static void __init xen_post_allocator_init(void)  #endif  #ifdef CONFIG_X86_64 +	pv_mmu_ops.write_cr3 = &xen_write_cr3;  	SetPagePinned(virt_to_page(level3_user_vsyscall));  #endif  	xen_mark_init_mm_pinned(); diff --git a/block/blk-flush.c b/block/blk-flush.c index db8f1b50785..cc2b827a853 100644 --- a/block/blk-flush.c +++ b/block/blk-flush.c @@ -444,7 +444,7 @@ int blkdev_issue_flush(struct block_device *bdev, gfp_t gfp_mask,  	 * copied from blk_rq_pos(rq).  	 */  	if (error_sector) -               *error_sector = bio->bi_sector; +		*error_sector = bio->bi_sector;  	if (!bio_flagged(bio, BIO_UPTODATE))  		ret = -EIO; diff --git a/block/partition-generic.c b/block/partition-generic.c index 789cdea0589..ae95ee6a58a 100644 --- a/block/partition-generic.c +++ b/block/partition-generic.c @@ -257,6 +257,7 @@ void delete_partition(struct gendisk *disk, int partno)  	hd_struct_put(part);  } +EXPORT_SYMBOL(delete_partition);  static ssize_t whole_disk_show(struct device *dev,  			       struct device_attribute *attr, char *buf) diff --git a/drivers/acpi/apei/cper.c b/drivers/acpi/apei/cper.c index 1e5d8a40101..fefc2ca7cc3 100644 --- a/drivers/acpi/apei/cper.c +++ b/drivers/acpi/apei/cper.c @@ -405,7 +405,7 @@ int apei_estatus_check(const struct acpi_hest_generic_status *estatus)  		return rc;  	data_len = estatus->data_length;  	gdata = (struct acpi_hest_generic_data *)(estatus + 1); -	while (data_len > sizeof(*gdata)) { +	while (data_len >= sizeof(*gdata)) {  		gedata_len = gdata->error_data_length;  		if (gedata_len > data_len - sizeof(*gdata))  			return -EINVAL; diff --git a/drivers/acpi/pci_root.c b/drivers/acpi/pci_root.c index 0ac546d5e53..5ff17306612 100644 --- a/drivers/acpi/pci_root.c +++ b/drivers/acpi/pci_root.c @@ -646,6 +646,7 @@ static void handle_root_bridge_insertion(acpi_handle handle)  static void handle_root_bridge_removal(struct acpi_device *device)  { +	acpi_status status;  	struct acpi_eject_event *ej_event;  	ej_event = kmalloc(sizeof(*ej_event), GFP_KERNEL); @@ -661,7 +662,9 @@ static void handle_root_bridge_removal(struct acpi_device *device)  	ej_event->device = device;  	ej_event->event = ACPI_NOTIFY_EJECT_REQUEST; -	acpi_bus_hot_remove_device(ej_event); +	status = acpi_os_hotplug_execute(acpi_bus_hot_remove_device, ej_event); +	if (ACPI_FAILURE(status)) +		kfree(ej_event);  }  static void _handle_hotplug_event_root(struct work_struct *work) @@ -676,8 +679,9 @@ static void _handle_hotplug_event_root(struct work_struct *work)  	handle = hp_work->handle;  	type = hp_work->type; -	root = acpi_pci_find_root(handle); +	acpi_scan_lock_acquire(); +	root = acpi_pci_find_root(handle);  	acpi_get_name(handle, ACPI_FULL_PATHNAME, &buffer);  	switch (type) { @@ -711,6 +715,7 @@ static void _handle_hotplug_event_root(struct work_struct *work)  		break;  	} +	acpi_scan_lock_release();  	kfree(hp_work); /* allocated in handle_hotplug_event_bridge */  	kfree(buffer.pointer);  } diff --git a/drivers/acpi/sleep.c b/drivers/acpi/sleep.c index 24213033fba..9c1a435d10e 100644 --- a/drivers/acpi/sleep.c +++ b/drivers/acpi/sleep.c @@ -193,6 +193,14 @@ static struct dmi_system_id __initdata acpisleep_dmi_table[] = {  	},  	{  	.callback = init_nvs_nosave, +	.ident = "Sony Vaio VGN-FW21M", +	.matches = { +		DMI_MATCH(DMI_SYS_VENDOR, "Sony Corporation"), +		DMI_MATCH(DMI_PRODUCT_NAME, "VGN-FW21M"), +		}, +	}, +	{ +	.callback = init_nvs_nosave,  	.ident = "Sony Vaio VPCEB17FX",  	.matches = {  		DMI_MATCH(DMI_SYS_VENDOR, "Sony Corporation"), diff --git a/drivers/block/Kconfig b/drivers/block/Kconfig index 5dc0daed8fa..b81ddfea1da 100644 --- a/drivers/block/Kconfig +++ b/drivers/block/Kconfig @@ -532,11 +532,11 @@ config BLK_DEV_RBD  	  If unsure, say N.  config BLK_DEV_RSXX -	tristate "RamSam PCIe Flash SSD Device Driver" +	tristate "IBM FlashSystem 70/80 PCIe SSD Device Driver"  	depends on PCI  	help  	  Device driver for IBM's high speed PCIe SSD -	  storage devices: RamSan-70 and RamSan-80. +	  storage devices: FlashSystem-70 and FlashSystem-80.  	  To compile this driver as a module, choose M here: the  	  module will be called rsxx. diff --git a/drivers/block/cciss.c b/drivers/block/cciss.c index ade58bc8f3c..1c1b8e544aa 100644 --- a/drivers/block/cciss.c +++ b/drivers/block/cciss.c @@ -4206,7 +4206,7 @@ static int cciss_find_cfgtables(ctlr_info_t *h)  	if (rc)  		return rc;  	h->cfgtable = remap_pci_mem(pci_resource_start(h->pdev, -		cfg_base_addr_index) + cfg_offset, sizeof(h->cfgtable)); +		cfg_base_addr_index) + cfg_offset, sizeof(*h->cfgtable));  	if (!h->cfgtable)  		return -ENOMEM;  	rc = write_driver_ver_to_cfgtable(h->cfgtable); diff --git a/drivers/block/loop.c b/drivers/block/loop.c index 747bb2af69d..fe5f6403417 100644 --- a/drivers/block/loop.c +++ b/drivers/block/loop.c @@ -1044,12 +1044,29 @@ static int loop_clr_fd(struct loop_device *lo)  	lo->lo_state = Lo_unbound;  	/* This is safe: open() is still holding a reference. */  	module_put(THIS_MODULE); -	if (lo->lo_flags & LO_FLAGS_PARTSCAN && bdev) -		ioctl_by_bdev(bdev, BLKRRPART, 0);  	lo->lo_flags = 0;  	if (!part_shift)  		lo->lo_disk->flags |= GENHD_FL_NO_PART_SCAN;  	mutex_unlock(&lo->lo_ctl_mutex); + +	/* +	 * Remove all partitions, since BLKRRPART won't remove user +	 * added partitions when max_part=0 +	 */ +	if (bdev) { +		struct disk_part_iter piter; +		struct hd_struct *part; + +		mutex_lock_nested(&bdev->bd_mutex, 1); +		invalidate_partition(bdev->bd_disk, 0); +		disk_part_iter_init(&piter, bdev->bd_disk, +					DISK_PITER_INCL_EMPTY); +		while ((part = disk_part_iter_next(&piter))) +			delete_partition(bdev->bd_disk, part->partno); +		disk_part_iter_exit(&piter); +		mutex_unlock(&bdev->bd_mutex); +	} +  	/*  	 * Need not hold lo_ctl_mutex to fput backing file.  	 * Calling fput holding lo_ctl_mutex triggers a circular @@ -1623,6 +1640,7 @@ static int loop_add(struct loop_device **l, int i)  		goto out_free_dev;  	i = err; +	err = -ENOMEM;  	lo->lo_queue = blk_alloc_queue(GFP_KERNEL);  	if (!lo->lo_queue)  		goto out_free_dev; diff --git a/drivers/block/mg_disk.c b/drivers/block/mg_disk.c index 1788f491e0f..076ae7f1b78 100644 --- a/drivers/block/mg_disk.c +++ b/drivers/block/mg_disk.c @@ -890,8 +890,10 @@ static int mg_probe(struct platform_device *plat_dev)  	gpio_direction_output(host->rst, 1);  	/* reset out pin */ -	if (!(prv_data->dev_attr & MG_DEV_MASK)) +	if (!(prv_data->dev_attr & MG_DEV_MASK)) { +		err = -EINVAL;  		goto probe_err_3a; +	}  	if (prv_data->dev_attr != MG_BOOT_DEV) {  		rsc = platform_get_resource_byname(plat_dev, IORESOURCE_IO, diff --git a/drivers/block/mtip32xx/mtip32xx.c b/drivers/block/mtip32xx/mtip32xx.c index 11cc9522cdd..92250af84e7 100644 --- a/drivers/block/mtip32xx/mtip32xx.c +++ b/drivers/block/mtip32xx/mtip32xx.c @@ -4224,6 +4224,7 @@ static int mtip_pci_probe(struct pci_dev *pdev,  	dd->isr_workq = create_workqueue(dd->workq_name);  	if (!dd->isr_workq) {  		dev_warn(&pdev->dev, "Can't create wq %d\n", dd->instance); +		rv = -ENOMEM;  		goto block_initialize_err;  	} @@ -4282,7 +4283,8 @@ static int mtip_pci_probe(struct pci_dev *pdev,  	INIT_WORK(&dd->work[7].work, mtip_workq_sdbf7);  	pci_set_master(pdev); -	if (pci_enable_msi(pdev)) { +	rv = pci_enable_msi(pdev); +	if (rv) {  		dev_warn(&pdev->dev,  			"Unable to enable MSI interrupt.\n");  		goto block_initialize_err; diff --git a/drivers/block/rbd.c b/drivers/block/rbd.c index 6c81a4c040b..f556f8a8b3f 100644 --- a/drivers/block/rbd.c +++ b/drivers/block/rbd.c @@ -1264,6 +1264,32 @@ static bool obj_request_done_test(struct rbd_obj_request *obj_request)  	return atomic_read(&obj_request->done) != 0;  } +static void +rbd_img_obj_request_read_callback(struct rbd_obj_request *obj_request) +{ +	dout("%s: obj %p img %p result %d %llu/%llu\n", __func__, +		obj_request, obj_request->img_request, obj_request->result, +		obj_request->xferred, obj_request->length); +	/* +	 * ENOENT means a hole in the image.  We zero-fill the +	 * entire length of the request.  A short read also implies +	 * zero-fill to the end of the request.  Either way we +	 * update the xferred count to indicate the whole request +	 * was satisfied. +	 */ +	BUG_ON(obj_request->type != OBJ_REQUEST_BIO); +	if (obj_request->result == -ENOENT) { +		zero_bio_chain(obj_request->bio_list, 0); +		obj_request->result = 0; +		obj_request->xferred = obj_request->length; +	} else if (obj_request->xferred < obj_request->length && +			!obj_request->result) { +		zero_bio_chain(obj_request->bio_list, obj_request->xferred); +		obj_request->xferred = obj_request->length; +	} +	obj_request_done_set(obj_request); +} +  static void rbd_obj_request_complete(struct rbd_obj_request *obj_request)  {  	dout("%s: obj %p cb %p\n", __func__, obj_request, @@ -1284,23 +1310,10 @@ static void rbd_osd_read_callback(struct rbd_obj_request *obj_request)  {  	dout("%s: obj %p result %d %llu/%llu\n", __func__, obj_request,  		obj_request->result, obj_request->xferred, obj_request->length); -	/* -	 * ENOENT means a hole in the object.  We zero-fill the -	 * entire length of the request.  A short read also implies -	 * zero-fill to the end of the request.  Either way we -	 * update the xferred count to indicate the whole request -	 * was satisfied. -	 */ -	if (obj_request->result == -ENOENT) { -		zero_bio_chain(obj_request->bio_list, 0); -		obj_request->result = 0; -		obj_request->xferred = obj_request->length; -	} else if (obj_request->xferred < obj_request->length && -			!obj_request->result) { -		zero_bio_chain(obj_request->bio_list, obj_request->xferred); -		obj_request->xferred = obj_request->length; -	} -	obj_request_done_set(obj_request); +	if (obj_request->img_request) +		rbd_img_obj_request_read_callback(obj_request); +	else +		obj_request_done_set(obj_request);  }  static void rbd_osd_write_callback(struct rbd_obj_request *obj_request) diff --git a/drivers/block/rsxx/Makefile b/drivers/block/rsxx/Makefile index f35cd0b71f7..b1c53c0aa45 100644 --- a/drivers/block/rsxx/Makefile +++ b/drivers/block/rsxx/Makefile @@ -1,2 +1,2 @@  obj-$(CONFIG_BLK_DEV_RSXX) += rsxx.o -rsxx-y := config.o core.o cregs.o dev.o dma.o +rsxx-objs := config.o core.o cregs.o dev.o dma.o diff --git a/drivers/block/rsxx/config.c b/drivers/block/rsxx/config.c index a295e7e9ee4..10cd530d3e1 100644 --- a/drivers/block/rsxx/config.c +++ b/drivers/block/rsxx/config.c @@ -29,15 +29,13 @@  #include "rsxx_priv.h"  #include "rsxx_cfg.h" -static void initialize_config(void *config) +static void initialize_config(struct rsxx_card_cfg *cfg)  { -	struct rsxx_card_cfg *cfg = config; -  	cfg->hdr.version = RSXX_CFG_VERSION;  	cfg->data.block_size        = RSXX_HW_BLK_SIZE;  	cfg->data.stripe_size       = RSXX_HW_BLK_SIZE; -	cfg->data.vendor_id         = RSXX_VENDOR_ID_TMS_IBM; +	cfg->data.vendor_id         = RSXX_VENDOR_ID_IBM;  	cfg->data.cache_order       = (-1);  	cfg->data.intr_coal.mode    = RSXX_INTR_COAL_DISABLED;  	cfg->data.intr_coal.count   = 0; @@ -181,7 +179,7 @@ int rsxx_load_config(struct rsxx_cardinfo *card)  	} else {  		dev_info(CARD_TO_DEV(card),  			"Initializing card configuration.\n"); -		initialize_config(card); +		initialize_config(&card->config);  		st = rsxx_save_config(card);  		if (st)  			return st; diff --git a/drivers/block/rsxx/core.c b/drivers/block/rsxx/core.c index e5162487686..5af21f2db29 100644 --- a/drivers/block/rsxx/core.c +++ b/drivers/block/rsxx/core.c @@ -30,6 +30,7 @@  #include <linux/reboot.h>  #include <linux/slab.h>  #include <linux/bitops.h> +#include <linux/delay.h>  #include <linux/genhd.h>  #include <linux/idr.h> @@ -39,8 +40,8 @@  #define NO_LEGACY 0 -MODULE_DESCRIPTION("IBM RamSan PCIe Flash SSD Device Driver"); -MODULE_AUTHOR("IBM <support@ramsan.com>"); +MODULE_DESCRIPTION("IBM FlashSystem 70/80 PCIe SSD Device Driver"); +MODULE_AUTHOR("Joshua Morris/Philip Kelleher, IBM");  MODULE_LICENSE("GPL");  MODULE_VERSION(DRIVER_VERSION); @@ -52,6 +53,13 @@ static DEFINE_IDA(rsxx_disk_ida);  static DEFINE_SPINLOCK(rsxx_ida_lock);  /*----------------- Interrupt Control & Handling -------------------*/ + +static void rsxx_mask_interrupts(struct rsxx_cardinfo *card) +{ +	card->isr_mask = 0; +	card->ier_mask = 0; +} +  static void __enable_intr(unsigned int *mask, unsigned int intr)  {  	*mask |= intr; @@ -71,7 +79,8 @@ static void __disable_intr(unsigned int *mask, unsigned int intr)   */  void rsxx_enable_ier(struct rsxx_cardinfo *card, unsigned int intr)  { -	if (unlikely(card->halt)) +	if (unlikely(card->halt) || +	    unlikely(card->eeh_state))  		return;  	__enable_intr(&card->ier_mask, intr); @@ -80,6 +89,9 @@ void rsxx_enable_ier(struct rsxx_cardinfo *card, unsigned int intr)  void rsxx_disable_ier(struct rsxx_cardinfo *card, unsigned int intr)  { +	if (unlikely(card->eeh_state)) +		return; +  	__disable_intr(&card->ier_mask, intr);  	iowrite32(card->ier_mask, card->regmap + IER);  } @@ -87,7 +99,8 @@ void rsxx_disable_ier(struct rsxx_cardinfo *card, unsigned int intr)  void rsxx_enable_ier_and_isr(struct rsxx_cardinfo *card,  				 unsigned int intr)  { -	if (unlikely(card->halt)) +	if (unlikely(card->halt) || +	    unlikely(card->eeh_state))  		return;  	__enable_intr(&card->isr_mask, intr); @@ -97,6 +110,9 @@ void rsxx_enable_ier_and_isr(struct rsxx_cardinfo *card,  void rsxx_disable_ier_and_isr(struct rsxx_cardinfo *card,  				  unsigned int intr)  { +	if (unlikely(card->eeh_state)) +		return; +  	__disable_intr(&card->isr_mask, intr);  	__disable_intr(&card->ier_mask, intr);  	iowrite32(card->ier_mask, card->regmap + IER); @@ -115,6 +131,9 @@ static irqreturn_t rsxx_isr(int irq, void *pdata)  	do {  		reread_isr = 0; +		if (unlikely(card->eeh_state)) +			break; +  		isr = ioread32(card->regmap + ISR);  		if (isr == 0xffffffff) {  			/* @@ -161,9 +180,9 @@ static irqreturn_t rsxx_isr(int irq, void *pdata)  }  /*----------------- Card Event Handler -------------------*/ -static char *rsxx_card_state_to_str(unsigned int state) +static const char * const rsxx_card_state_to_str(unsigned int state)  { -	static char *state_strings[] = { +	static const char * const state_strings[] = {  		"Unknown", "Shutdown", "Starting", "Formatting",  		"Uninitialized", "Good", "Shutting Down",  		"Fault", "Read Only Fault", "dStroying" @@ -304,6 +323,192 @@ static int card_shutdown(struct rsxx_cardinfo *card)  	return 0;  } +static int rsxx_eeh_frozen(struct pci_dev *dev) +{ +	struct rsxx_cardinfo *card = pci_get_drvdata(dev); +	int i; +	int st; + +	dev_warn(&dev->dev, "IBM FlashSystem PCI: preparing for slot reset.\n"); + +	card->eeh_state = 1; +	rsxx_mask_interrupts(card); + +	/* +	 * We need to guarantee that the write for eeh_state and masking +	 * interrupts does not become reordered. This will prevent a possible +	 * race condition with the EEH code. +	 */ +	wmb(); + +	pci_disable_device(dev); + +	st = rsxx_eeh_save_issued_dmas(card); +	if (st) +		return st; + +	rsxx_eeh_save_issued_creg(card); + +	for (i = 0; i < card->n_targets; i++) { +		if (card->ctrl[i].status.buf) +			pci_free_consistent(card->dev, STATUS_BUFFER_SIZE8, +					    card->ctrl[i].status.buf, +					    card->ctrl[i].status.dma_addr); +		if (card->ctrl[i].cmd.buf) +			pci_free_consistent(card->dev, COMMAND_BUFFER_SIZE8, +					    card->ctrl[i].cmd.buf, +					    card->ctrl[i].cmd.dma_addr); +	} + +	return 0; +} + +static void rsxx_eeh_failure(struct pci_dev *dev) +{ +	struct rsxx_cardinfo *card = pci_get_drvdata(dev); +	int i; + +	dev_err(&dev->dev, "IBM FlashSystem PCI: disabling failed card.\n"); + +	card->eeh_state = 1; + +	for (i = 0; i < card->n_targets; i++) +		del_timer_sync(&card->ctrl[i].activity_timer); + +	rsxx_eeh_cancel_dmas(card); +} + +static int rsxx_eeh_fifo_flush_poll(struct rsxx_cardinfo *card) +{ +	unsigned int status; +	int iter = 0; + +	/* We need to wait for the hardware to reset */ +	while (iter++ < 10) { +		status = ioread32(card->regmap + PCI_RECONFIG); + +		if (status & RSXX_FLUSH_BUSY) { +			ssleep(1); +			continue; +		} + +		if (status & RSXX_FLUSH_TIMEOUT) +			dev_warn(CARD_TO_DEV(card), "HW: flash controller timeout\n"); +		return 0; +	} + +	/* Hardware failed resetting itself. */ +	return -1; +} + +static pci_ers_result_t rsxx_error_detected(struct pci_dev *dev, +					    enum pci_channel_state error) +{ +	int st; + +	if (dev->revision < RSXX_EEH_SUPPORT) +		return PCI_ERS_RESULT_NONE; + +	if (error == pci_channel_io_perm_failure) { +		rsxx_eeh_failure(dev); +		return PCI_ERS_RESULT_DISCONNECT; +	} + +	st = rsxx_eeh_frozen(dev); +	if (st) { +		dev_err(&dev->dev, "Slot reset setup failed\n"); +		rsxx_eeh_failure(dev); +		return PCI_ERS_RESULT_DISCONNECT; +	} + +	return PCI_ERS_RESULT_NEED_RESET; +} + +static pci_ers_result_t rsxx_slot_reset(struct pci_dev *dev) +{ +	struct rsxx_cardinfo *card = pci_get_drvdata(dev); +	unsigned long flags; +	int i; +	int st; + +	dev_warn(&dev->dev, +		"IBM FlashSystem PCI: recovering from slot reset.\n"); + +	st = pci_enable_device(dev); +	if (st) +		goto failed_hw_setup; + +	pci_set_master(dev); + +	st = rsxx_eeh_fifo_flush_poll(card); +	if (st) +		goto failed_hw_setup; + +	rsxx_dma_queue_reset(card); + +	for (i = 0; i < card->n_targets; i++) { +		st = rsxx_hw_buffers_init(dev, &card->ctrl[i]); +		if (st) +			goto failed_hw_buffers_init; +	} + +	if (card->config_valid) +		rsxx_dma_configure(card); + +	/* Clears the ISR register from spurious interrupts */ +	st = ioread32(card->regmap + ISR); + +	card->eeh_state = 0; + +	st = rsxx_eeh_remap_dmas(card); +	if (st) +		goto failed_remap_dmas; + +	spin_lock_irqsave(&card->irq_lock, flags); +	if (card->n_targets & RSXX_MAX_TARGETS) +		rsxx_enable_ier_and_isr(card, CR_INTR_ALL_G); +	else +		rsxx_enable_ier_and_isr(card, CR_INTR_ALL_C); +	spin_unlock_irqrestore(&card->irq_lock, flags); + +	rsxx_kick_creg_queue(card); + +	for (i = 0; i < card->n_targets; i++) { +		spin_lock(&card->ctrl[i].queue_lock); +		if (list_empty(&card->ctrl[i].queue)) { +			spin_unlock(&card->ctrl[i].queue_lock); +			continue; +		} +		spin_unlock(&card->ctrl[i].queue_lock); + +		queue_work(card->ctrl[i].issue_wq, +				&card->ctrl[i].issue_dma_work); +	} + +	dev_info(&dev->dev, "IBM FlashSystem PCI: recovery complete.\n"); + +	return PCI_ERS_RESULT_RECOVERED; + +failed_hw_buffers_init: +failed_remap_dmas: +	for (i = 0; i < card->n_targets; i++) { +		if (card->ctrl[i].status.buf) +			pci_free_consistent(card->dev, +					STATUS_BUFFER_SIZE8, +					card->ctrl[i].status.buf, +					card->ctrl[i].status.dma_addr); +		if (card->ctrl[i].cmd.buf) +			pci_free_consistent(card->dev, +					COMMAND_BUFFER_SIZE8, +					card->ctrl[i].cmd.buf, +					card->ctrl[i].cmd.dma_addr); +	} +failed_hw_setup: +	rsxx_eeh_failure(dev); +	return PCI_ERS_RESULT_DISCONNECT; + +} +  /*----------------- Driver Initialization & Setup -------------------*/  /* Returns:   0 if the driver is compatible with the device  	     -1 if the driver is NOT compatible with the device */ @@ -383,6 +588,7 @@ static int rsxx_pci_probe(struct pci_dev *dev,  	spin_lock_init(&card->irq_lock);  	card->halt = 0; +	card->eeh_state = 0;  	spin_lock_irq(&card->irq_lock);  	rsxx_disable_ier_and_isr(card, CR_INTR_ALL); @@ -538,9 +744,6 @@ static void rsxx_pci_remove(struct pci_dev *dev)  	rsxx_disable_ier_and_isr(card, CR_INTR_EVENT);  	spin_unlock_irqrestore(&card->irq_lock, flags); -	/* Prevent work_structs from re-queuing themselves. */ -	card->halt = 1; -  	cancel_work_sync(&card->event_work);  	rsxx_destroy_dev(card); @@ -549,6 +752,10 @@ static void rsxx_pci_remove(struct pci_dev *dev)  	spin_lock_irqsave(&card->irq_lock, flags);  	rsxx_disable_ier_and_isr(card, CR_INTR_ALL);  	spin_unlock_irqrestore(&card->irq_lock, flags); + +	/* Prevent work_structs from re-queuing themselves. */ +	card->halt = 1; +  	free_irq(dev->irq, card);  	if (!force_legacy) @@ -592,11 +799,14 @@ static void rsxx_pci_shutdown(struct pci_dev *dev)  	card_shutdown(card);  } +static const struct pci_error_handlers rsxx_err_handler = { +	.error_detected = rsxx_error_detected, +	.slot_reset     = rsxx_slot_reset, +}; +  static DEFINE_PCI_DEVICE_TABLE(rsxx_pci_ids) = { -	{PCI_DEVICE(PCI_VENDOR_ID_TMS_IBM, PCI_DEVICE_ID_RS70_FLASH)}, -	{PCI_DEVICE(PCI_VENDOR_ID_TMS_IBM, PCI_DEVICE_ID_RS70D_FLASH)}, -	{PCI_DEVICE(PCI_VENDOR_ID_TMS_IBM, PCI_DEVICE_ID_RS80_FLASH)}, -	{PCI_DEVICE(PCI_VENDOR_ID_TMS_IBM, PCI_DEVICE_ID_RS81_FLASH)}, +	{PCI_DEVICE(PCI_VENDOR_ID_IBM, PCI_DEVICE_ID_FS70_FLASH)}, +	{PCI_DEVICE(PCI_VENDOR_ID_IBM, PCI_DEVICE_ID_FS80_FLASH)},  	{0,},  }; @@ -609,6 +819,7 @@ static struct pci_driver rsxx_pci_driver = {  	.remove		= rsxx_pci_remove,  	.suspend	= rsxx_pci_suspend,  	.shutdown	= rsxx_pci_shutdown, +	.err_handler    = &rsxx_err_handler,  };  static int __init rsxx_core_init(void) diff --git a/drivers/block/rsxx/cregs.c b/drivers/block/rsxx/cregs.c index 80bbe639fcc..4b5c020a0a6 100644 --- a/drivers/block/rsxx/cregs.c +++ b/drivers/block/rsxx/cregs.c @@ -58,7 +58,7 @@ static struct kmem_cache *creg_cmd_pool;  #error Unknown endianess!!! Aborting...  #endif -static void copy_to_creg_data(struct rsxx_cardinfo *card, +static int copy_to_creg_data(struct rsxx_cardinfo *card,  			      int cnt8,  			      void *buf,  			      unsigned int stream) @@ -66,6 +66,9 @@ static void copy_to_creg_data(struct rsxx_cardinfo *card,  	int i = 0;  	u32 *data = buf; +	if (unlikely(card->eeh_state)) +		return -EIO; +  	for (i = 0; cnt8 > 0; i++, cnt8 -= 4) {  		/*  		 * Firmware implementation makes it necessary to byte swap on @@ -76,10 +79,12 @@ static void copy_to_creg_data(struct rsxx_cardinfo *card,  		else  			iowrite32(data[i], card->regmap + CREG_DATA(i));  	} + +	return 0;  } -static void copy_from_creg_data(struct rsxx_cardinfo *card, +static int copy_from_creg_data(struct rsxx_cardinfo *card,  				int cnt8,  				void *buf,  				unsigned int stream) @@ -87,6 +92,9 @@ static void copy_from_creg_data(struct rsxx_cardinfo *card,  	int i = 0;  	u32 *data = buf; +	if (unlikely(card->eeh_state)) +		return -EIO; +  	for (i = 0; cnt8 > 0; i++, cnt8 -= 4) {  		/*  		 * Firmware implementation makes it necessary to byte swap on @@ -97,41 +105,31 @@ static void copy_from_creg_data(struct rsxx_cardinfo *card,  		else  			data[i] = ioread32(card->regmap + CREG_DATA(i));  	} -} - -static struct creg_cmd *pop_active_cmd(struct rsxx_cardinfo *card) -{ -	struct creg_cmd *cmd; -	/* -	 * Spin lock is needed because this can be called in atomic/interrupt -	 * context. -	 */ -	spin_lock_bh(&card->creg_ctrl.lock); -	cmd = card->creg_ctrl.active_cmd; -	card->creg_ctrl.active_cmd = NULL; -	spin_unlock_bh(&card->creg_ctrl.lock); - -	return cmd; +	return 0;  }  static void creg_issue_cmd(struct rsxx_cardinfo *card, struct creg_cmd *cmd)  { +	int st; + +	if (unlikely(card->eeh_state)) +		return; +  	iowrite32(cmd->addr, card->regmap + CREG_ADD);  	iowrite32(cmd->cnt8, card->regmap + CREG_CNT);  	if (cmd->op == CREG_OP_WRITE) { -		if (cmd->buf) -			copy_to_creg_data(card, cmd->cnt8, -					  cmd->buf, cmd->stream); +		if (cmd->buf) { +			st = copy_to_creg_data(card, cmd->cnt8, +					       cmd->buf, cmd->stream); +			if (st) +				return; +		}  	} -	/* -	 * Data copy must complete before initiating the command. This is -	 * needed for weakly ordered processors (i.e. PowerPC), so that all -	 * neccessary registers are written before we kick the hardware. -	 */ -	wmb(); +	if (unlikely(card->eeh_state)) +		return;  	/* Setting the valid bit will kick off the command. */  	iowrite32(cmd->op, card->regmap + CREG_CMD); @@ -196,11 +194,11 @@ static int creg_queue_cmd(struct rsxx_cardinfo *card,  	cmd->cb_private = cb_private;  	cmd->status	= 0; -	spin_lock(&card->creg_ctrl.lock); +	spin_lock_bh(&card->creg_ctrl.lock);  	list_add_tail(&cmd->list, &card->creg_ctrl.queue);  	card->creg_ctrl.q_depth++;  	creg_kick_queue(card); -	spin_unlock(&card->creg_ctrl.lock); +	spin_unlock_bh(&card->creg_ctrl.lock);  	return 0;  } @@ -210,7 +208,11 @@ static void creg_cmd_timed_out(unsigned long data)  	struct rsxx_cardinfo *card = (struct rsxx_cardinfo *) data;  	struct creg_cmd *cmd; -	cmd = pop_active_cmd(card); +	spin_lock(&card->creg_ctrl.lock); +	cmd = card->creg_ctrl.active_cmd; +	card->creg_ctrl.active_cmd = NULL; +	spin_unlock(&card->creg_ctrl.lock); +  	if (cmd == NULL) {  		card->creg_ctrl.creg_stats.creg_timeout++;  		dev_warn(CARD_TO_DEV(card), @@ -247,7 +249,11 @@ static void creg_cmd_done(struct work_struct *work)  	if (del_timer_sync(&card->creg_ctrl.cmd_timer) == 0)  		card->creg_ctrl.creg_stats.failed_cancel_timer++; -	cmd = pop_active_cmd(card); +	spin_lock_bh(&card->creg_ctrl.lock); +	cmd = card->creg_ctrl.active_cmd; +	card->creg_ctrl.active_cmd = NULL; +	spin_unlock_bh(&card->creg_ctrl.lock); +  	if (cmd == NULL) {  		dev_err(CARD_TO_DEV(card),  			"Spurious creg interrupt!\n"); @@ -287,7 +293,7 @@ static void creg_cmd_done(struct work_struct *work)  			goto creg_done;  		} -		copy_from_creg_data(card, cnt8, cmd->buf, cmd->stream); +		st = copy_from_creg_data(card, cnt8, cmd->buf, cmd->stream);  	}  creg_done: @@ -296,10 +302,10 @@ creg_done:  	kmem_cache_free(creg_cmd_pool, cmd); -	spin_lock(&card->creg_ctrl.lock); +	spin_lock_bh(&card->creg_ctrl.lock);  	card->creg_ctrl.active = 0;  	creg_kick_queue(card); -	spin_unlock(&card->creg_ctrl.lock); +	spin_unlock_bh(&card->creg_ctrl.lock);  }  static void creg_reset(struct rsxx_cardinfo *card) @@ -324,7 +330,7 @@ static void creg_reset(struct rsxx_cardinfo *card)  		"Resetting creg interface for recovery\n");  	/* Cancel outstanding commands */ -	spin_lock(&card->creg_ctrl.lock); +	spin_lock_bh(&card->creg_ctrl.lock);  	list_for_each_entry_safe(cmd, tmp, &card->creg_ctrl.queue, list) {  		list_del(&cmd->list);  		card->creg_ctrl.q_depth--; @@ -345,7 +351,7 @@ static void creg_reset(struct rsxx_cardinfo *card)  		card->creg_ctrl.active = 0;  	} -	spin_unlock(&card->creg_ctrl.lock); +	spin_unlock_bh(&card->creg_ctrl.lock);  	card->creg_ctrl.reset = 0;  	spin_lock_irqsave(&card->irq_lock, flags); @@ -399,12 +405,12 @@ static int __issue_creg_rw(struct rsxx_cardinfo *card,  		return st;  	/* -	 * This timeout is neccessary for unresponsive hardware. The additional +	 * This timeout is necessary for unresponsive hardware. The additional  	 * 20 seconds to used to guarantee that each cregs requests has time to  	 * complete.  	 */ -	timeout = msecs_to_jiffies((CREG_TIMEOUT_MSEC * -				card->creg_ctrl.q_depth) + 20000); +	timeout = msecs_to_jiffies(CREG_TIMEOUT_MSEC * +				   card->creg_ctrl.q_depth + 20000);  	/*  	 * The creg interface is guaranteed to complete. It has a timeout @@ -690,6 +696,32 @@ int rsxx_reg_access(struct rsxx_cardinfo *card,  	return 0;  } +void rsxx_eeh_save_issued_creg(struct rsxx_cardinfo *card) +{ +	struct creg_cmd *cmd = NULL; + +	cmd = card->creg_ctrl.active_cmd; +	card->creg_ctrl.active_cmd = NULL; + +	if (cmd) { +		del_timer_sync(&card->creg_ctrl.cmd_timer); + +		spin_lock_bh(&card->creg_ctrl.lock); +		list_add(&cmd->list, &card->creg_ctrl.queue); +		card->creg_ctrl.q_depth++; +		card->creg_ctrl.active = 0; +		spin_unlock_bh(&card->creg_ctrl.lock); +	} +} + +void rsxx_kick_creg_queue(struct rsxx_cardinfo *card) +{ +	spin_lock_bh(&card->creg_ctrl.lock); +	if (!list_empty(&card->creg_ctrl.queue)) +		creg_kick_queue(card); +	spin_unlock_bh(&card->creg_ctrl.lock); +} +  /*------------ Initialization & Setup --------------*/  int rsxx_creg_setup(struct rsxx_cardinfo *card)  { @@ -712,7 +744,7 @@ void rsxx_creg_destroy(struct rsxx_cardinfo *card)  	int cnt = 0;  	/* Cancel outstanding commands */ -	spin_lock(&card->creg_ctrl.lock); +	spin_lock_bh(&card->creg_ctrl.lock);  	list_for_each_entry_safe(cmd, tmp, &card->creg_ctrl.queue, list) {  		list_del(&cmd->list);  		if (cmd->cb) @@ -737,7 +769,7 @@ void rsxx_creg_destroy(struct rsxx_cardinfo *card)  			"Canceled active creg command\n");  		kmem_cache_free(creg_cmd_pool, cmd);  	} -	spin_unlock(&card->creg_ctrl.lock); +	spin_unlock_bh(&card->creg_ctrl.lock);  	cancel_work_sync(&card->creg_ctrl.done_work);  } diff --git a/drivers/block/rsxx/dma.c b/drivers/block/rsxx/dma.c index 63176e67662..0607513cfb4 100644 --- a/drivers/block/rsxx/dma.c +++ b/drivers/block/rsxx/dma.c @@ -28,7 +28,7 @@  struct rsxx_dma {  	struct list_head	 list;  	u8			 cmd; -	unsigned int		 laddr;     /* Logical address on the ramsan */ +	unsigned int		 laddr;     /* Logical address */  	struct {  		u32		 off;  		u32		 cnt; @@ -81,9 +81,6 @@ enum rsxx_hw_status {  	HW_STATUS_FAULT		= 0x08,  }; -#define STATUS_BUFFER_SIZE8     4096 -#define COMMAND_BUFFER_SIZE8    4096 -  static struct kmem_cache *rsxx_dma_pool;  struct dma_tracker { @@ -122,7 +119,7 @@ static unsigned int rsxx_get_dma_tgt(struct rsxx_cardinfo *card, u64 addr8)  	return tgt;  } -static void rsxx_dma_queue_reset(struct rsxx_cardinfo *card) +void rsxx_dma_queue_reset(struct rsxx_cardinfo *card)  {  	/* Reset all DMA Command/Status Queues */  	iowrite32(DMA_QUEUE_RESET, card->regmap + RESET); @@ -210,7 +207,8 @@ static void dma_intr_coal_auto_tune(struct rsxx_cardinfo *card)  	u32 q_depth = 0;  	u32 intr_coal; -	if (card->config.data.intr_coal.mode != RSXX_INTR_COAL_AUTO_TUNE) +	if (card->config.data.intr_coal.mode != RSXX_INTR_COAL_AUTO_TUNE || +	    unlikely(card->eeh_state))  		return;  	for (i = 0; i < card->n_targets; i++) @@ -223,31 +221,26 @@ static void dma_intr_coal_auto_tune(struct rsxx_cardinfo *card)  }  /*----------------- RSXX DMA Handling -------------------*/ -static void rsxx_complete_dma(struct rsxx_cardinfo *card, +static void rsxx_complete_dma(struct rsxx_dma_ctrl *ctrl,  				  struct rsxx_dma *dma,  				  unsigned int status)  {  	if (status & DMA_SW_ERR) -		printk_ratelimited(KERN_ERR -				   "SW Error in DMA(cmd x%02x, laddr x%08x)\n", -				   dma->cmd, dma->laddr); +		ctrl->stats.dma_sw_err++;  	if (status & DMA_HW_FAULT) -		printk_ratelimited(KERN_ERR -				   "HW Fault in DMA(cmd x%02x, laddr x%08x)\n", -				   dma->cmd, dma->laddr); +		ctrl->stats.dma_hw_fault++;  	if (status & DMA_CANCELLED) -		printk_ratelimited(KERN_ERR -				   "DMA Cancelled(cmd x%02x, laddr x%08x)\n", -				   dma->cmd, dma->laddr); +		ctrl->stats.dma_cancelled++;  	if (dma->dma_addr) -		pci_unmap_page(card->dev, dma->dma_addr, get_dma_size(dma), +		pci_unmap_page(ctrl->card->dev, dma->dma_addr, +			       get_dma_size(dma),  			       dma->cmd == HW_CMD_BLK_WRITE ?  					   PCI_DMA_TODEVICE :  					   PCI_DMA_FROMDEVICE);  	if (dma->cb) -		dma->cb(card, dma->cb_data, status ? 1 : 0); +		dma->cb(ctrl->card, dma->cb_data, status ? 1 : 0);  	kmem_cache_free(rsxx_dma_pool, dma);  } @@ -330,14 +323,15 @@ static void rsxx_handle_dma_error(struct rsxx_dma_ctrl *ctrl,  	if (requeue_cmd)  		rsxx_requeue_dma(ctrl, dma);  	else -		rsxx_complete_dma(ctrl->card, dma, status); +		rsxx_complete_dma(ctrl, dma, status);  }  static void dma_engine_stalled(unsigned long data)  {  	struct rsxx_dma_ctrl *ctrl = (struct rsxx_dma_ctrl *)data; -	if (atomic_read(&ctrl->stats.hw_q_depth) == 0) +	if (atomic_read(&ctrl->stats.hw_q_depth) == 0 || +	    unlikely(ctrl->card->eeh_state))  		return;  	if (ctrl->cmd.idx != ioread32(ctrl->regmap + SW_CMD_IDX)) { @@ -369,7 +363,8 @@ static void rsxx_issue_dmas(struct work_struct *work)  	ctrl = container_of(work, struct rsxx_dma_ctrl, issue_dma_work);  	hw_cmd_buf = ctrl->cmd.buf; -	if (unlikely(ctrl->card->halt)) +	if (unlikely(ctrl->card->halt) || +	    unlikely(ctrl->card->eeh_state))  		return;  	while (1) { @@ -397,7 +392,7 @@ static void rsxx_issue_dmas(struct work_struct *work)  		 */  		if (unlikely(ctrl->card->dma_fault)) {  			push_tracker(ctrl->trackers, tag); -			rsxx_complete_dma(ctrl->card, dma, DMA_CANCELLED); +			rsxx_complete_dma(ctrl, dma, DMA_CANCELLED);  			continue;  		} @@ -432,19 +427,15 @@ static void rsxx_issue_dmas(struct work_struct *work)  	/* Let HW know we've queued commands. */  	if (cmds_pending) { -		/* -		 * We must guarantee that the CPU writes to 'ctrl->cmd.buf' -		 * (which is in PCI-consistent system-memory) from the loop -		 * above make it into the coherency domain before the -		 * following PIO "trigger" updating the cmd.idx.  A WMB is -		 * sufficient. We need not explicitly CPU cache-flush since -		 * the memory is a PCI-consistent (ie; coherent) mapping. -		 */ -		wmb(); -  		atomic_add(cmds_pending, &ctrl->stats.hw_q_depth);  		mod_timer(&ctrl->activity_timer,  			  jiffies + DMA_ACTIVITY_TIMEOUT); + +		if (unlikely(ctrl->card->eeh_state)) { +			del_timer_sync(&ctrl->activity_timer); +			return; +		} +  		iowrite32(ctrl->cmd.idx, ctrl->regmap + SW_CMD_IDX);  	}  } @@ -463,7 +454,8 @@ static void rsxx_dma_done(struct work_struct *work)  	hw_st_buf = ctrl->status.buf;  	if (unlikely(ctrl->card->halt) || -	    unlikely(ctrl->card->dma_fault)) +	    unlikely(ctrl->card->dma_fault) || +	    unlikely(ctrl->card->eeh_state))  		return;  	count = le16_to_cpu(hw_st_buf[ctrl->status.idx].count); @@ -508,7 +500,7 @@ static void rsxx_dma_done(struct work_struct *work)  		if (status)  			rsxx_handle_dma_error(ctrl, dma, status);  		else -			rsxx_complete_dma(ctrl->card, dma, 0); +			rsxx_complete_dma(ctrl, dma, 0);  		push_tracker(ctrl->trackers, tag); @@ -727,20 +719,54 @@ bvec_err:  /*----------------- DMA Engine Initialization & Setup -------------------*/ +int rsxx_hw_buffers_init(struct pci_dev *dev, struct rsxx_dma_ctrl *ctrl) +{ +	ctrl->status.buf = pci_alloc_consistent(dev, STATUS_BUFFER_SIZE8, +				&ctrl->status.dma_addr); +	ctrl->cmd.buf = pci_alloc_consistent(dev, COMMAND_BUFFER_SIZE8, +				&ctrl->cmd.dma_addr); +	if (ctrl->status.buf == NULL || ctrl->cmd.buf == NULL) +		return -ENOMEM; + +	memset(ctrl->status.buf, 0xac, STATUS_BUFFER_SIZE8); +	iowrite32(lower_32_bits(ctrl->status.dma_addr), +		ctrl->regmap + SB_ADD_LO); +	iowrite32(upper_32_bits(ctrl->status.dma_addr), +		ctrl->regmap + SB_ADD_HI); + +	memset(ctrl->cmd.buf, 0x83, COMMAND_BUFFER_SIZE8); +	iowrite32(lower_32_bits(ctrl->cmd.dma_addr), ctrl->regmap + CB_ADD_LO); +	iowrite32(upper_32_bits(ctrl->cmd.dma_addr), ctrl->regmap + CB_ADD_HI); + +	ctrl->status.idx = ioread32(ctrl->regmap + HW_STATUS_CNT); +	if (ctrl->status.idx > RSXX_MAX_OUTSTANDING_CMDS) { +		dev_crit(&dev->dev, "Failed reading status cnt x%x\n", +			ctrl->status.idx); +		return -EINVAL; +	} +	iowrite32(ctrl->status.idx, ctrl->regmap + HW_STATUS_CNT); +	iowrite32(ctrl->status.idx, ctrl->regmap + SW_STATUS_CNT); + +	ctrl->cmd.idx = ioread32(ctrl->regmap + HW_CMD_IDX); +	if (ctrl->cmd.idx > RSXX_MAX_OUTSTANDING_CMDS) { +		dev_crit(&dev->dev, "Failed reading cmd cnt x%x\n", +			ctrl->status.idx); +		return -EINVAL; +	} +	iowrite32(ctrl->cmd.idx, ctrl->regmap + HW_CMD_IDX); +	iowrite32(ctrl->cmd.idx, ctrl->regmap + SW_CMD_IDX); + +	return 0; +} +  static int rsxx_dma_ctrl_init(struct pci_dev *dev,  				  struct rsxx_dma_ctrl *ctrl)  {  	int i; +	int st;  	memset(&ctrl->stats, 0, sizeof(ctrl->stats)); -	ctrl->status.buf = pci_alloc_consistent(dev, STATUS_BUFFER_SIZE8, -						&ctrl->status.dma_addr); -	ctrl->cmd.buf = pci_alloc_consistent(dev, COMMAND_BUFFER_SIZE8, -					     &ctrl->cmd.dma_addr); -	if (ctrl->status.buf == NULL || ctrl->cmd.buf == NULL) -		return -ENOMEM; -  	ctrl->trackers = vmalloc(DMA_TRACKER_LIST_SIZE8);  	if (!ctrl->trackers)  		return -ENOMEM; @@ -770,35 +796,9 @@ static int rsxx_dma_ctrl_init(struct pci_dev *dev,  	INIT_WORK(&ctrl->issue_dma_work, rsxx_issue_dmas);  	INIT_WORK(&ctrl->dma_done_work, rsxx_dma_done); -	memset(ctrl->status.buf, 0xac, STATUS_BUFFER_SIZE8); -	iowrite32(lower_32_bits(ctrl->status.dma_addr), -		  ctrl->regmap + SB_ADD_LO); -	iowrite32(upper_32_bits(ctrl->status.dma_addr), -		  ctrl->regmap + SB_ADD_HI); - -	memset(ctrl->cmd.buf, 0x83, COMMAND_BUFFER_SIZE8); -	iowrite32(lower_32_bits(ctrl->cmd.dma_addr), ctrl->regmap + CB_ADD_LO); -	iowrite32(upper_32_bits(ctrl->cmd.dma_addr), ctrl->regmap + CB_ADD_HI); - -	ctrl->status.idx = ioread32(ctrl->regmap + HW_STATUS_CNT); -	if (ctrl->status.idx > RSXX_MAX_OUTSTANDING_CMDS) { -		dev_crit(&dev->dev, "Failed reading status cnt x%x\n", -			 ctrl->status.idx); -		return -EINVAL; -	} -	iowrite32(ctrl->status.idx, ctrl->regmap + HW_STATUS_CNT); -	iowrite32(ctrl->status.idx, ctrl->regmap + SW_STATUS_CNT); - -	ctrl->cmd.idx = ioread32(ctrl->regmap + HW_CMD_IDX); -	if (ctrl->cmd.idx > RSXX_MAX_OUTSTANDING_CMDS) { -		dev_crit(&dev->dev, "Failed reading cmd cnt x%x\n", -			 ctrl->status.idx); -		return -EINVAL; -	} -	iowrite32(ctrl->cmd.idx, ctrl->regmap + HW_CMD_IDX); -	iowrite32(ctrl->cmd.idx, ctrl->regmap + SW_CMD_IDX); - -	wmb(); +	st = rsxx_hw_buffers_init(dev, ctrl); +	if (st) +		return st;  	return 0;  } @@ -834,7 +834,7 @@ static int rsxx_dma_stripe_setup(struct rsxx_cardinfo *card,  	return 0;  } -static int rsxx_dma_configure(struct rsxx_cardinfo *card) +int rsxx_dma_configure(struct rsxx_cardinfo *card)  {  	u32 intr_coal; @@ -980,6 +980,103 @@ void rsxx_dma_destroy(struct rsxx_cardinfo *card)  	}  } +int rsxx_eeh_save_issued_dmas(struct rsxx_cardinfo *card) +{ +	int i; +	int j; +	int cnt; +	struct rsxx_dma *dma; +	struct list_head *issued_dmas; + +	issued_dmas = kzalloc(sizeof(*issued_dmas) * card->n_targets, +			      GFP_KERNEL); +	if (!issued_dmas) +		return -ENOMEM; + +	for (i = 0; i < card->n_targets; i++) { +		INIT_LIST_HEAD(&issued_dmas[i]); +		cnt = 0; +		for (j = 0; j < RSXX_MAX_OUTSTANDING_CMDS; j++) { +			dma = get_tracker_dma(card->ctrl[i].trackers, j); +			if (dma == NULL) +				continue; + +			if (dma->cmd == HW_CMD_BLK_WRITE) +				card->ctrl[i].stats.writes_issued--; +			else if (dma->cmd == HW_CMD_BLK_DISCARD) +				card->ctrl[i].stats.discards_issued--; +			else +				card->ctrl[i].stats.reads_issued--; + +			list_add_tail(&dma->list, &issued_dmas[i]); +			push_tracker(card->ctrl[i].trackers, j); +			cnt++; +		} + +		spin_lock(&card->ctrl[i].queue_lock); +		list_splice(&issued_dmas[i], &card->ctrl[i].queue); + +		atomic_sub(cnt, &card->ctrl[i].stats.hw_q_depth); +		card->ctrl[i].stats.sw_q_depth += cnt; +		card->ctrl[i].e_cnt = 0; + +		list_for_each_entry(dma, &card->ctrl[i].queue, list) { +			if (dma->dma_addr) +				pci_unmap_page(card->dev, dma->dma_addr, +					       get_dma_size(dma), +					       dma->cmd == HW_CMD_BLK_WRITE ? +					       PCI_DMA_TODEVICE : +					       PCI_DMA_FROMDEVICE); +		} +		spin_unlock(&card->ctrl[i].queue_lock); +	} + +	kfree(issued_dmas); + +	return 0; +} + +void rsxx_eeh_cancel_dmas(struct rsxx_cardinfo *card) +{ +	struct rsxx_dma *dma; +	struct rsxx_dma *tmp; +	int i; + +	for (i = 0; i < card->n_targets; i++) { +		spin_lock(&card->ctrl[i].queue_lock); +		list_for_each_entry_safe(dma, tmp, &card->ctrl[i].queue, list) { +			list_del(&dma->list); + +			rsxx_complete_dma(&card->ctrl[i], dma, DMA_CANCELLED); +		} +		spin_unlock(&card->ctrl[i].queue_lock); +	} +} + +int rsxx_eeh_remap_dmas(struct rsxx_cardinfo *card) +{ +	struct rsxx_dma *dma; +	int i; + +	for (i = 0; i < card->n_targets; i++) { +		spin_lock(&card->ctrl[i].queue_lock); +		list_for_each_entry(dma, &card->ctrl[i].queue, list) { +			dma->dma_addr = pci_map_page(card->dev, dma->page, +					dma->pg_off, get_dma_size(dma), +					dma->cmd == HW_CMD_BLK_WRITE ? +					PCI_DMA_TODEVICE : +					PCI_DMA_FROMDEVICE); +			if (!dma->dma_addr) { +				spin_unlock(&card->ctrl[i].queue_lock); +				kmem_cache_free(rsxx_dma_pool, dma); +				return -ENOMEM; +			} +		} +		spin_unlock(&card->ctrl[i].queue_lock); +	} + +	return 0; +}  int rsxx_dma_init(void)  { diff --git a/drivers/block/rsxx/rsxx.h b/drivers/block/rsxx/rsxx.h index 2e50b65902b..24ba3642bd8 100644 --- a/drivers/block/rsxx/rsxx.h +++ b/drivers/block/rsxx/rsxx.h @@ -27,15 +27,17 @@  /*----------------- IOCTL Definitions -------------------*/ +#define RSXX_MAX_DATA 8 +  struct rsxx_reg_access {  	__u32 addr;  	__u32 cnt;  	__u32 stat;  	__u32 stream; -	__u32 data[8]; +	__u32 data[RSXX_MAX_DATA];  }; -#define RSXX_MAX_REG_CNT	(8 * (sizeof(__u32))) +#define RSXX_MAX_REG_CNT	(RSXX_MAX_DATA * (sizeof(__u32)))  #define RSXX_IOC_MAGIC 'r' diff --git a/drivers/block/rsxx/rsxx_cfg.h b/drivers/block/rsxx/rsxx_cfg.h index c025fe5fdb7..f384c943846 100644 --- a/drivers/block/rsxx/rsxx_cfg.h +++ b/drivers/block/rsxx/rsxx_cfg.h @@ -58,7 +58,7 @@ struct rsxx_card_cfg {  };  /* Vendor ID Values */ -#define RSXX_VENDOR_ID_TMS_IBM		0 +#define RSXX_VENDOR_ID_IBM		0  #define RSXX_VENDOR_ID_DSI		1  #define RSXX_VENDOR_COUNT		2 diff --git a/drivers/block/rsxx/rsxx_priv.h b/drivers/block/rsxx/rsxx_priv.h index a1ac907d8f4..382e8bf5c03 100644 --- a/drivers/block/rsxx/rsxx_priv.h +++ b/drivers/block/rsxx/rsxx_priv.h @@ -45,16 +45,13 @@  struct proc_cmd; -#define PCI_VENDOR_ID_TMS_IBM		0x15B6 -#define PCI_DEVICE_ID_RS70_FLASH	0x0019 -#define PCI_DEVICE_ID_RS70D_FLASH	0x001A -#define PCI_DEVICE_ID_RS80_FLASH	0x001C -#define PCI_DEVICE_ID_RS81_FLASH	0x001E +#define PCI_DEVICE_ID_FS70_FLASH	0x04A9 +#define PCI_DEVICE_ID_FS80_FLASH	0x04AA  #define RS70_PCI_REV_SUPPORTED	4  #define DRIVER_NAME "rsxx" -#define DRIVER_VERSION "3.7" +#define DRIVER_VERSION "4.0"  /* Block size is 4096 */  #define RSXX_HW_BLK_SHIFT		12 @@ -67,6 +64,9 @@ struct proc_cmd;  #define RSXX_MAX_OUTSTANDING_CMDS	255  #define RSXX_CS_IDX_MASK		0xff +#define STATUS_BUFFER_SIZE8     4096 +#define COMMAND_BUFFER_SIZE8    4096 +  #define RSXX_MAX_TARGETS	8  struct dma_tracker_list; @@ -91,6 +91,9 @@ struct rsxx_dma_stats {  	u32 discards_failed;  	u32 done_rescheduled;  	u32 issue_rescheduled; +	u32 dma_sw_err; +	u32 dma_hw_fault; +	u32 dma_cancelled;  	u32 sw_q_depth;		/* Number of DMAs on the SW queue. */  	atomic_t hw_q_depth;	/* Number of DMAs queued to HW. */  }; @@ -116,6 +119,7 @@ struct rsxx_dma_ctrl {  struct rsxx_cardinfo {  	struct pci_dev		*dev;  	unsigned int		halt; +	unsigned int		eeh_state;  	void			__iomem *regmap;  	spinlock_t		irq_lock; @@ -224,6 +228,7 @@ enum rsxx_pci_regmap {  	PERF_RD512_HI	= 0xac,  	PERF_WR512_LO	= 0xb0,  	PERF_WR512_HI	= 0xb4, +	PCI_RECONFIG	= 0xb8,  };  enum rsxx_intr { @@ -237,6 +242,8 @@ enum rsxx_intr {  	CR_INTR_DMA5	= 0x00000080,  	CR_INTR_DMA6	= 0x00000100,  	CR_INTR_DMA7	= 0x00000200, +	CR_INTR_ALL_C	= 0x0000003f, +	CR_INTR_ALL_G	= 0x000003ff,  	CR_INTR_DMA_ALL = 0x000003f5,  	CR_INTR_ALL	= 0xffffffff,  }; @@ -253,8 +260,14 @@ enum rsxx_pci_reset {  	DMA_QUEUE_RESET		= 0x00000001,  }; +enum rsxx_hw_fifo_flush { +	RSXX_FLUSH_BUSY		= 0x00000002, +	RSXX_FLUSH_TIMEOUT	= 0x00000004, +}; +  enum rsxx_pci_revision {  	RSXX_DISCARD_SUPPORT = 2, +	RSXX_EEH_SUPPORT     = 3,  };  enum rsxx_creg_cmd { @@ -360,11 +373,17 @@ int rsxx_dma_setup(struct rsxx_cardinfo *card);  void rsxx_dma_destroy(struct rsxx_cardinfo *card);  int rsxx_dma_init(void);  void rsxx_dma_cleanup(void); +void rsxx_dma_queue_reset(struct rsxx_cardinfo *card); +int rsxx_dma_configure(struct rsxx_cardinfo *card);  int rsxx_dma_queue_bio(struct rsxx_cardinfo *card,  			   struct bio *bio,  			   atomic_t *n_dmas,  			   rsxx_dma_cb cb,  			   void *cb_data); +int rsxx_hw_buffers_init(struct pci_dev *dev, struct rsxx_dma_ctrl *ctrl); +int rsxx_eeh_save_issued_dmas(struct rsxx_cardinfo *card); +void rsxx_eeh_cancel_dmas(struct rsxx_cardinfo *card); +int rsxx_eeh_remap_dmas(struct rsxx_cardinfo *card);  /***** cregs.c *****/  int rsxx_creg_write(struct rsxx_cardinfo *card, u32 addr, @@ -389,10 +408,11 @@ int rsxx_creg_setup(struct rsxx_cardinfo *card);  void rsxx_creg_destroy(struct rsxx_cardinfo *card);  int rsxx_creg_init(void);  void rsxx_creg_cleanup(void); -  int rsxx_reg_access(struct rsxx_cardinfo *card,  			struct rsxx_reg_access __user *ucmd,  			int read); +void rsxx_eeh_save_issued_creg(struct rsxx_cardinfo *card); +void rsxx_kick_creg_queue(struct rsxx_cardinfo *card); diff --git a/drivers/block/xen-blkback/blkback.c b/drivers/block/xen-blkback/blkback.c index de1f319f7bd..dd5b2fed97e 100644 --- a/drivers/block/xen-blkback/blkback.c +++ b/drivers/block/xen-blkback/blkback.c @@ -164,7 +164,7 @@ static void make_response(struct xen_blkif *blkif, u64 id,  #define foreach_grant_safe(pos, n, rbtree, node) \  	for ((pos) = container_of(rb_first((rbtree)), typeof(*(pos)), node), \ -	     (n) = rb_next(&(pos)->node); \ +	     (n) = (&(pos)->node != NULL) ? rb_next(&(pos)->node) : NULL; \  	     &(pos)->node != NULL; \  	     (pos) = container_of(n, typeof(*(pos)), node), \  	     (n) = (&(pos)->node != NULL) ? rb_next(&(pos)->node) : NULL) @@ -381,8 +381,8 @@ irqreturn_t xen_blkif_be_int(int irq, void *dev_id)  static void print_stats(struct xen_blkif *blkif)  { -	pr_info("xen-blkback (%s): oo %3d  |  rd %4d  |  wr %4d  |  f %4d" -		 "  |  ds %4d\n", +	pr_info("xen-blkback (%s): oo %3llu  |  rd %4llu  |  wr %4llu  |  f %4llu" +		 "  |  ds %4llu\n",  		 current->comm, blkif->st_oo_req,  		 blkif->st_rd_req, blkif->st_wr_req,  		 blkif->st_f_req, blkif->st_ds_req); @@ -442,7 +442,7 @@ int xen_blkif_schedule(void *arg)  }  struct seg_buf { -	unsigned long buf; +	unsigned int offset;  	unsigned int nsec;  };  /* @@ -621,30 +621,21 @@ static int xen_blkbk_map(struct blkif_request *req,  				 * If this is a new persistent grant  				 * save the handler  				 */ -				persistent_gnts[i]->handle = map[j].handle; -				persistent_gnts[i]->dev_bus_addr = -					map[j++].dev_bus_addr; +				persistent_gnts[i]->handle = map[j++].handle;  			}  			pending_handle(pending_req, i) =  				persistent_gnts[i]->handle;  			if (ret)  				continue; - -			seg[i].buf = persistent_gnts[i]->dev_bus_addr | -				(req->u.rw.seg[i].first_sect << 9);  		} else { -			pending_handle(pending_req, i) = map[j].handle; +			pending_handle(pending_req, i) = map[j++].handle;  			bitmap_set(pending_req->unmap_seg, i, 1); -			if (ret) { -				j++; +			if (ret)  				continue; -			} - -			seg[i].buf = map[j++].dev_bus_addr | -				(req->u.rw.seg[i].first_sect << 9);  		} +		seg[i].offset = (req->u.rw.seg[i].first_sect << 9);  	}  	return ret;  } @@ -679,6 +670,16 @@ static int dispatch_discard_io(struct xen_blkif *blkif,  	return err;  } +static int dispatch_other_io(struct xen_blkif *blkif, +			     struct blkif_request *req, +			     struct pending_req *pending_req) +{ +	free_req(pending_req); +	make_response(blkif, req->u.other.id, req->operation, +		      BLKIF_RSP_EOPNOTSUPP); +	return -EIO; +} +  static void xen_blk_drain_io(struct xen_blkif *blkif)  {  	atomic_set(&blkif->drain, 1); @@ -800,17 +801,30 @@ __do_block_io_op(struct xen_blkif *blkif)  		/* Apply all sanity checks to /private copy/ of request. */  		barrier(); -		if (unlikely(req.operation == BLKIF_OP_DISCARD)) { + +		switch (req.operation) { +		case BLKIF_OP_READ: +		case BLKIF_OP_WRITE: +		case BLKIF_OP_WRITE_BARRIER: +		case BLKIF_OP_FLUSH_DISKCACHE: +			if (dispatch_rw_block_io(blkif, &req, pending_req)) +				goto done; +			break; +		case BLKIF_OP_DISCARD:  			free_req(pending_req);  			if (dispatch_discard_io(blkif, &req)) -				break; -		} else if (dispatch_rw_block_io(blkif, &req, pending_req)) +				goto done;  			break; +		default: +			if (dispatch_other_io(blkif, &req, pending_req)) +				goto done; +			break; +		}  		/* Yield point for this unbounded loop. */  		cond_resched();  	} - +done:  	return more_to_do;  } @@ -904,7 +918,8 @@ static int dispatch_rw_block_io(struct xen_blkif *blkif,  		pr_debug(DRV_PFX "access denied: %s of [%llu,%llu] on dev=%04x\n",  			 operation == READ ? "read" : "write",  			 preq.sector_number, -			 preq.sector_number + preq.nr_sects, preq.dev); +			 preq.sector_number + preq.nr_sects, +			 blkif->vbd.pdevice);  		goto fail_response;  	} @@ -947,7 +962,7 @@ static int dispatch_rw_block_io(struct xen_blkif *blkif,  		       (bio_add_page(bio,  				     pages[i],  				     seg[i].nsec << 9, -				     seg[i].buf & ~PAGE_MASK) == 0)) { +				     seg[i].offset) == 0)) {  			bio = bio_alloc(GFP_KERNEL, nseg-i);  			if (unlikely(bio == NULL)) @@ -977,13 +992,7 @@ static int dispatch_rw_block_io(struct xen_blkif *blkif,  		bio->bi_end_io  = end_block_io_op;  	} -	/* -	 * We set it one so that the last submit_bio does not have to call -	 * atomic_inc. -	 */  	atomic_set(&pending_req->pendcnt, nbio); - -	/* Get a reference count for the disk queue and start sending I/O */  	blk_start_plug(&plug);  	for (i = 0; i < nbio; i++) @@ -1011,6 +1020,7 @@ static int dispatch_rw_block_io(struct xen_blkif *blkif,   fail_put_bio:  	for (i = 0; i < nbio; i++)  		bio_put(biolist[i]); +	atomic_set(&pending_req->pendcnt, 1);  	__end_block_io_op(pending_req, -EINVAL);  	msleep(1); /* back off a bit */  	return -EIO; diff --git a/drivers/block/xen-blkback/common.h b/drivers/block/xen-blkback/common.h index 6072390c7f5..60103e2517b 100644 --- a/drivers/block/xen-blkback/common.h +++ b/drivers/block/xen-blkback/common.h @@ -77,11 +77,18 @@ struct blkif_x86_32_request_discard {  	uint64_t       nr_sectors;  } __attribute__((__packed__)); +struct blkif_x86_32_request_other { +	uint8_t        _pad1; +	blkif_vdev_t   _pad2; +	uint64_t       id;           /* private guest value, echoed in resp  */ +} __attribute__((__packed__)); +  struct blkif_x86_32_request {  	uint8_t        operation;    /* BLKIF_OP_???                         */  	union {  		struct blkif_x86_32_request_rw rw;  		struct blkif_x86_32_request_discard discard; +		struct blkif_x86_32_request_other other;  	} u;  } __attribute__((__packed__)); @@ -113,11 +120,19 @@ struct blkif_x86_64_request_discard {  	uint64_t       nr_sectors;  } __attribute__((__packed__)); +struct blkif_x86_64_request_other { +	uint8_t        _pad1; +	blkif_vdev_t   _pad2; +	uint32_t       _pad3;        /* offsetof(blkif_..,u.discard.id)==8   */ +	uint64_t       id;           /* private guest value, echoed in resp  */ +} __attribute__((__packed__)); +  struct blkif_x86_64_request {  	uint8_t        operation;    /* BLKIF_OP_???                         */  	union {  		struct blkif_x86_64_request_rw rw;  		struct blkif_x86_64_request_discard discard; +		struct blkif_x86_64_request_other other;  	} u;  } __attribute__((__packed__)); @@ -172,7 +187,6 @@ struct persistent_gnt {  	struct page *page;  	grant_ref_t gnt;  	grant_handle_t handle; -	uint64_t dev_bus_addr;  	struct rb_node node;  }; @@ -208,13 +222,13 @@ struct xen_blkif {  	/* statistics */  	unsigned long		st_print; -	int			st_rd_req; -	int			st_wr_req; -	int			st_oo_req; -	int			st_f_req; -	int			st_ds_req; -	int			st_rd_sect; -	int			st_wr_sect; +	unsigned long long			st_rd_req; +	unsigned long long			st_wr_req; +	unsigned long long			st_oo_req; +	unsigned long long			st_f_req; +	unsigned long long			st_ds_req; +	unsigned long long			st_rd_sect; +	unsigned long long			st_wr_sect;  	wait_queue_head_t	waiting_to_free;  }; @@ -278,6 +292,11 @@ static inline void blkif_get_x86_32_req(struct blkif_request *dst,  		dst->u.discard.nr_sectors = src->u.discard.nr_sectors;  		break;  	default: +		/* +		 * Don't know how to translate this op. Only get the +		 * ID so failure can be reported to the frontend. +		 */ +		dst->u.other.id = src->u.other.id;  		break;  	}  } @@ -309,6 +328,11 @@ static inline void blkif_get_x86_64_req(struct blkif_request *dst,  		dst->u.discard.nr_sectors = src->u.discard.nr_sectors;  		break;  	default: +		/* +		 * Don't know how to translate this op. Only get the +		 * ID so failure can be reported to the frontend. +		 */ +		dst->u.other.id = src->u.other.id;  		break;  	}  } diff --git a/drivers/block/xen-blkback/xenbus.c b/drivers/block/xen-blkback/xenbus.c index 5e237f630c4..8bfd1bcf95e 100644 --- a/drivers/block/xen-blkback/xenbus.c +++ b/drivers/block/xen-blkback/xenbus.c @@ -230,13 +230,13 @@ int __init xen_blkif_interface_init(void)  	}								\  	static DEVICE_ATTR(name, S_IRUGO, show_##name, NULL) -VBD_SHOW(oo_req,  "%d\n", be->blkif->st_oo_req); -VBD_SHOW(rd_req,  "%d\n", be->blkif->st_rd_req); -VBD_SHOW(wr_req,  "%d\n", be->blkif->st_wr_req); -VBD_SHOW(f_req,  "%d\n", be->blkif->st_f_req); -VBD_SHOW(ds_req,  "%d\n", be->blkif->st_ds_req); -VBD_SHOW(rd_sect, "%d\n", be->blkif->st_rd_sect); -VBD_SHOW(wr_sect, "%d\n", be->blkif->st_wr_sect); +VBD_SHOW(oo_req,  "%llu\n", be->blkif->st_oo_req); +VBD_SHOW(rd_req,  "%llu\n", be->blkif->st_rd_req); +VBD_SHOW(wr_req,  "%llu\n", be->blkif->st_wr_req); +VBD_SHOW(f_req,  "%llu\n", be->blkif->st_f_req); +VBD_SHOW(ds_req,  "%llu\n", be->blkif->st_ds_req); +VBD_SHOW(rd_sect, "%llu\n", be->blkif->st_rd_sect); +VBD_SHOW(wr_sect, "%llu\n", be->blkif->st_wr_sect);  static struct attribute *xen_vbdstat_attrs[] = {  	&dev_attr_oo_req.attr, diff --git a/drivers/block/xen-blkfront.c b/drivers/block/xen-blkfront.c index c3dae2e0f29..a894f88762d 100644 --- a/drivers/block/xen-blkfront.c +++ b/drivers/block/xen-blkfront.c @@ -44,7 +44,7 @@  #include <linux/mutex.h>  #include <linux/scatterlist.h>  #include <linux/bitmap.h> -#include <linux/llist.h> +#include <linux/list.h>  #include <xen/xen.h>  #include <xen/xenbus.h> @@ -68,13 +68,12 @@ enum blkif_state {  struct grant {  	grant_ref_t gref;  	unsigned long pfn; -	struct llist_node node; +	struct list_head node;  };  struct blk_shadow {  	struct blkif_request req;  	struct request *request; -	unsigned long frame[BLKIF_MAX_SEGMENTS_PER_REQUEST];  	struct grant *grants_used[BLKIF_MAX_SEGMENTS_PER_REQUEST];  }; @@ -105,7 +104,7 @@ struct blkfront_info  	struct work_struct work;  	struct gnttab_free_callback callback;  	struct blk_shadow shadow[BLK_RING_SIZE]; -	struct llist_head persistent_gnts; +	struct list_head persistent_gnts;  	unsigned int persistent_gnts_c;  	unsigned long shadow_free;  	unsigned int feature_flush; @@ -165,6 +164,69 @@ static int add_id_to_freelist(struct blkfront_info *info,  	return 0;  } +static int fill_grant_buffer(struct blkfront_info *info, int num) +{ +	struct page *granted_page; +	struct grant *gnt_list_entry, *n; +	int i = 0; + +	while(i < num) { +		gnt_list_entry = kzalloc(sizeof(struct grant), GFP_NOIO); +		if (!gnt_list_entry) +			goto out_of_memory; + +		granted_page = alloc_page(GFP_NOIO); +		if (!granted_page) { +			kfree(gnt_list_entry); +			goto out_of_memory; +		} + +		gnt_list_entry->pfn = page_to_pfn(granted_page); +		gnt_list_entry->gref = GRANT_INVALID_REF; +		list_add(&gnt_list_entry->node, &info->persistent_gnts); +		i++; +	} + +	return 0; + +out_of_memory: +	list_for_each_entry_safe(gnt_list_entry, n, +	                         &info->persistent_gnts, node) { +		list_del(&gnt_list_entry->node); +		__free_page(pfn_to_page(gnt_list_entry->pfn)); +		kfree(gnt_list_entry); +		i--; +	} +	BUG_ON(i != 0); +	return -ENOMEM; +} + +static struct grant *get_grant(grant_ref_t *gref_head, +                               struct blkfront_info *info) +{ +	struct grant *gnt_list_entry; +	unsigned long buffer_mfn; + +	BUG_ON(list_empty(&info->persistent_gnts)); +	gnt_list_entry = list_first_entry(&info->persistent_gnts, struct grant, +	                                  node); +	list_del(&gnt_list_entry->node); + +	if (gnt_list_entry->gref != GRANT_INVALID_REF) { +		info->persistent_gnts_c--; +		return gnt_list_entry; +	} + +	/* Assign a gref to this page */ +	gnt_list_entry->gref = gnttab_claim_grant_reference(gref_head); +	BUG_ON(gnt_list_entry->gref == -ENOSPC); +	buffer_mfn = pfn_to_mfn(gnt_list_entry->pfn); +	gnttab_grant_foreign_access_ref(gnt_list_entry->gref, +	                                info->xbdev->otherend_id, +	                                buffer_mfn, 0); +	return gnt_list_entry; +} +  static const char *op_name(int op)  {  	static const char *const names[] = { @@ -293,7 +355,6 @@ static int blkif_ioctl(struct block_device *bdev, fmode_t mode,  static int blkif_queue_request(struct request *req)  {  	struct blkfront_info *info = req->rq_disk->private_data; -	unsigned long buffer_mfn;  	struct blkif_request *ring_req;  	unsigned long id;  	unsigned int fsect, lsect; @@ -306,7 +367,6 @@ static int blkif_queue_request(struct request *req)  	 */  	bool new_persistent_gnts;  	grant_ref_t gref_head; -	struct page *granted_page;  	struct grant *gnt_list_entry = NULL;  	struct scatterlist *sg; @@ -370,41 +430,8 @@ static int blkif_queue_request(struct request *req)  			fsect = sg->offset >> 9;  			lsect = fsect + (sg->length >> 9) - 1; -			if (info->persistent_gnts_c) { -				BUG_ON(llist_empty(&info->persistent_gnts)); -				gnt_list_entry = llist_entry( -					llist_del_first(&info->persistent_gnts), -					struct grant, node); - -				ref = gnt_list_entry->gref; -				buffer_mfn = pfn_to_mfn(gnt_list_entry->pfn); -				info->persistent_gnts_c--; -			} else { -				ref = gnttab_claim_grant_reference(&gref_head); -				BUG_ON(ref == -ENOSPC); - -				gnt_list_entry = -					kmalloc(sizeof(struct grant), -							 GFP_ATOMIC); -				if (!gnt_list_entry) -					return -ENOMEM; - -				granted_page = alloc_page(GFP_ATOMIC); -				if (!granted_page) { -					kfree(gnt_list_entry); -					return -ENOMEM; -				} - -				gnt_list_entry->pfn = -					page_to_pfn(granted_page); -				gnt_list_entry->gref = ref; - -				buffer_mfn = pfn_to_mfn(page_to_pfn( -								granted_page)); -				gnttab_grant_foreign_access_ref(ref, -					info->xbdev->otherend_id, -					buffer_mfn, 0); -			} +			gnt_list_entry = get_grant(&gref_head, info); +			ref = gnt_list_entry->gref;  			info->shadow[id].grants_used[i] = gnt_list_entry; @@ -435,7 +462,6 @@ static int blkif_queue_request(struct request *req)  				kunmap_atomic(shared_data);  			} -			info->shadow[id].frame[i] = mfn_to_pfn(buffer_mfn);  			ring_req->u.rw.seg[i] =  					(struct blkif_request_segment) {  						.gref       = ref, @@ -790,9 +816,8 @@ static void blkif_restart_queue(struct work_struct *work)  static void blkif_free(struct blkfront_info *info, int suspend)  { -	struct llist_node *all_gnts; -	struct grant *persistent_gnt, *tmp; -	struct llist_node *n; +	struct grant *persistent_gnt; +	struct grant *n;  	/* Prevent new requests being issued until we fix things up. */  	spin_lock_irq(&info->io_lock); @@ -803,22 +828,20 @@ static void blkif_free(struct blkfront_info *info, int suspend)  		blk_stop_queue(info->rq);  	/* Remove all persistent grants */ -	if (info->persistent_gnts_c) { -		all_gnts = llist_del_all(&info->persistent_gnts); -		persistent_gnt = llist_entry(all_gnts, typeof(*(persistent_gnt)), node); -		while (persistent_gnt) { -			gnttab_end_foreign_access(persistent_gnt->gref, 0, 0UL); +	if (!list_empty(&info->persistent_gnts)) { +		list_for_each_entry_safe(persistent_gnt, n, +		                         &info->persistent_gnts, node) { +			list_del(&persistent_gnt->node); +			if (persistent_gnt->gref != GRANT_INVALID_REF) { +				gnttab_end_foreign_access(persistent_gnt->gref, +				                          0, 0UL); +				info->persistent_gnts_c--; +			}  			__free_page(pfn_to_page(persistent_gnt->pfn)); -			tmp = persistent_gnt; -			n = persistent_gnt->node.next; -			if (n) -				persistent_gnt = llist_entry(n, typeof(*(persistent_gnt)), node); -			else -				persistent_gnt = NULL; -			kfree(tmp); +			kfree(persistent_gnt);  		} -		info->persistent_gnts_c = 0;  	} +	BUG_ON(info->persistent_gnts_c != 0);  	/* No more gnttab callback work. */  	gnttab_cancel_free_callback(&info->callback); @@ -875,7 +898,7 @@ static void blkif_completion(struct blk_shadow *s, struct blkfront_info *info,  	}  	/* Add the persistent grant into the list of free grants */  	for (i = 0; i < s->req.u.rw.nr_segments; i++) { -		llist_add(&s->grants_used[i]->node, &info->persistent_gnts); +		list_add(&s->grants_used[i]->node, &info->persistent_gnts);  		info->persistent_gnts_c++;  	}  } @@ -1013,6 +1036,12 @@ static int setup_blkring(struct xenbus_device *dev,  	sg_init_table(info->sg, BLKIF_MAX_SEGMENTS_PER_REQUEST); +	/* Allocate memory for grants */ +	err = fill_grant_buffer(info, BLK_RING_SIZE * +	                              BLKIF_MAX_SEGMENTS_PER_REQUEST); +	if (err) +		goto fail; +  	err = xenbus_grant_ring(dev, virt_to_mfn(info->ring.sring));  	if (err < 0) {  		free_page((unsigned long)sring); @@ -1171,7 +1200,7 @@ static int blkfront_probe(struct xenbus_device *dev,  	spin_lock_init(&info->io_lock);  	info->xbdev = dev;  	info->vdevice = vdevice; -	init_llist_head(&info->persistent_gnts); +	INIT_LIST_HEAD(&info->persistent_gnts);  	info->persistent_gnts_c = 0;  	info->connected = BLKIF_STATE_DISCONNECTED;  	INIT_WORK(&info->work, blkif_restart_queue); @@ -1203,11 +1232,10 @@ static int blkif_recover(struct blkfront_info *info)  	int j;  	/* Stage 1: Make a safe copy of the shadow state. */ -	copy = kmalloc(sizeof(info->shadow), +	copy = kmemdup(info->shadow, sizeof(info->shadow),  		       GFP_NOIO | __GFP_REPEAT | __GFP_HIGH);  	if (!copy)  		return -ENOMEM; -	memcpy(copy, info->shadow, sizeof(info->shadow));  	/* Stage 2: Set up free list. */  	memset(&info->shadow, 0, sizeof(info->shadow)); @@ -1236,7 +1264,7 @@ static int blkif_recover(struct blkfront_info *info)  				gnttab_grant_foreign_access_ref(  					req->u.rw.seg[j].gref,  					info->xbdev->otherend_id, -					pfn_to_mfn(info->shadow[req->u.rw.id].frame[j]), +					pfn_to_mfn(copy[i].grants_used[j]->pfn),  					0);  		}  		info->shadow[req->u.rw.id].req = *req; diff --git a/drivers/bluetooth/ath3k.c b/drivers/bluetooth/ath3k.c index b282af181b4..6aab00ef437 100644 --- a/drivers/bluetooth/ath3k.c +++ b/drivers/bluetooth/ath3k.c @@ -73,9 +73,11 @@ static struct usb_device_id ath3k_table[] = {  	{ USB_DEVICE(0x03F0, 0x311D) },  	/* Atheros AR3012 with sflash firmware*/ +	{ USB_DEVICE(0x0CF3, 0x0036) },  	{ USB_DEVICE(0x0CF3, 0x3004) },  	{ USB_DEVICE(0x0CF3, 0x3008) },  	{ USB_DEVICE(0x0CF3, 0x311D) }, +	{ USB_DEVICE(0x0CF3, 0x817a) },  	{ USB_DEVICE(0x13d3, 0x3375) },  	{ USB_DEVICE(0x04CA, 0x3004) },  	{ USB_DEVICE(0x04CA, 0x3005) }, @@ -107,9 +109,11 @@ MODULE_DEVICE_TABLE(usb, ath3k_table);  static struct usb_device_id ath3k_blist_tbl[] = {  	/* Atheros AR3012 with sflash firmware*/ +	{ USB_DEVICE(0x0CF3, 0x0036), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x0cf3, 0x3004), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x0cf3, 0x3008), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x0cf3, 0x311D), .driver_info = BTUSB_ATH3012 }, +	{ USB_DEVICE(0x0CF3, 0x817a), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x13d3, 0x3375), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x04ca, 0x3004), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x04ca, 0x3005), .driver_info = BTUSB_ATH3012 }, diff --git a/drivers/bluetooth/btusb.c b/drivers/bluetooth/btusb.c index e547851870e..2cc5f774a29 100644 --- a/drivers/bluetooth/btusb.c +++ b/drivers/bluetooth/btusb.c @@ -131,9 +131,11 @@ static struct usb_device_id blacklist_table[] = {  	{ USB_DEVICE(0x03f0, 0x311d), .driver_info = BTUSB_IGNORE },  	/* Atheros 3012 with sflash firmware */ +	{ USB_DEVICE(0x0cf3, 0x0036), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x0cf3, 0x3004), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x0cf3, 0x3008), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x0cf3, 0x311d), .driver_info = BTUSB_ATH3012 }, +	{ USB_DEVICE(0x0cf3, 0x817a), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x13d3, 0x3375), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x04ca, 0x3004), .driver_info = BTUSB_ATH3012 },  	{ USB_DEVICE(0x04ca, 0x3005), .driver_info = BTUSB_ATH3012 }, diff --git a/drivers/cpufreq/acpi-cpufreq.c b/drivers/cpufreq/acpi-cpufreq.c index 937bc286591..57a8774f0b4 100644 --- a/drivers/cpufreq/acpi-cpufreq.c +++ b/drivers/cpufreq/acpi-cpufreq.c @@ -730,7 +730,6 @@ static int acpi_cpufreq_cpu_init(struct cpufreq_policy *policy)  	    policy->shared_type == CPUFREQ_SHARED_TYPE_ANY) {  		cpumask_copy(policy->cpus, perf->shared_cpu_map);  	} -	cpumask_copy(policy->related_cpus, perf->shared_cpu_map);  #ifdef CONFIG_SMP  	dmi_check_system(sw_any_bug_dmi_table); @@ -742,7 +741,6 @@ static int acpi_cpufreq_cpu_init(struct cpufreq_policy *policy)  	if (check_amd_hwpstate_cpu(cpu) && !acpi_pstate_strict) {  		cpumask_clear(policy->cpus);  		cpumask_set_cpu(cpu, policy->cpus); -		cpumask_copy(policy->related_cpus, cpu_sibling_mask(cpu));  		policy->shared_type = CPUFREQ_SHARED_TYPE_HW;  		pr_info_once(PFX "overriding BIOS provided _PSD data\n");  	} diff --git a/drivers/cpufreq/cpufreq_stats.c b/drivers/cpufreq/cpufreq_stats.c index 2fd779eb1ed..bfd6273fd87 100644 --- a/drivers/cpufreq/cpufreq_stats.c +++ b/drivers/cpufreq/cpufreq_stats.c @@ -180,15 +180,19 @@ static void cpufreq_stats_free_sysfs(unsigned int cpu)  {  	struct cpufreq_policy *policy = cpufreq_cpu_get(cpu); -	if (!cpufreq_frequency_get_table(cpu)) +	if (!policy)  		return; -	if (policy && !policy_is_shared(policy)) { +	if (!cpufreq_frequency_get_table(cpu)) +		goto put_ref; + +	if (!policy_is_shared(policy)) {  		pr_debug("%s: Free sysfs stat\n", __func__);  		sysfs_remove_group(&policy->kobj, &stats_attr_group);  	} -	if (policy) -		cpufreq_cpu_put(policy); + +put_ref: +	cpufreq_cpu_put(policy);  }  static int cpufreq_stats_create_table(struct cpufreq_policy *policy, diff --git a/drivers/cpufreq/intel_pstate.c b/drivers/cpufreq/intel_pstate.c index f6dd1e76112..ad72922919e 100644 --- a/drivers/cpufreq/intel_pstate.c +++ b/drivers/cpufreq/intel_pstate.c @@ -358,14 +358,14 @@ static void intel_pstate_sysfs_expose_params(void)  static int intel_pstate_min_pstate(void)  {  	u64 value; -	rdmsrl(0xCE, value); +	rdmsrl(MSR_PLATFORM_INFO, value);  	return (value >> 40) & 0xFF;  }  static int intel_pstate_max_pstate(void)  {  	u64 value; -	rdmsrl(0xCE, value); +	rdmsrl(MSR_PLATFORM_INFO, value);  	return (value >> 8) & 0xFF;  } @@ -373,7 +373,7 @@ static int intel_pstate_turbo_pstate(void)  {  	u64 value;  	int nont, ret; -	rdmsrl(0x1AD, value); +	rdmsrl(MSR_NHM_TURBO_RATIO_LIMIT, value);  	nont = intel_pstate_max_pstate();  	ret = ((value) & 255);  	if (ret <= nont) @@ -454,7 +454,7 @@ static inline void intel_pstate_calc_busy(struct cpudata *cpu,  					sample->idletime_us * 100,  					sample->duration_us);  	core_pct = div64_u64(sample->aperf * 100, sample->mperf); -	sample->freq = cpu->pstate.turbo_pstate * core_pct * 1000; +	sample->freq = cpu->pstate.max_pstate * core_pct * 1000;  	sample->core_pct_busy = div_s64((sample->pstate_pct_busy * core_pct),  					100); @@ -752,6 +752,29 @@ static struct cpufreq_driver intel_pstate_driver = {  static int __initdata no_load; +static int intel_pstate_msrs_not_valid(void) +{ +	/* Check that all the msr's we are using are valid. */ +	u64 aperf, mperf, tmp; + +	rdmsrl(MSR_IA32_APERF, aperf); +	rdmsrl(MSR_IA32_MPERF, mperf); + +	if (!intel_pstate_min_pstate() || +		!intel_pstate_max_pstate() || +		!intel_pstate_turbo_pstate()) +		return -ENODEV; + +	rdmsrl(MSR_IA32_APERF, tmp); +	if (!(tmp - aperf)) +		return -ENODEV; + +	rdmsrl(MSR_IA32_MPERF, tmp); +	if (!(tmp - mperf)) +		return -ENODEV; + +	return 0; +}  static int __init intel_pstate_init(void)  {  	int cpu, rc = 0; @@ -764,6 +787,9 @@ static int __init intel_pstate_init(void)  	if (!id)  		return -ENODEV; +	if (intel_pstate_msrs_not_valid()) +		return -ENODEV; +  	pr_info("Intel P-state driver initializing.\n");  	all_cpu_data = vmalloc(sizeof(void *) * num_possible_cpus()); diff --git a/drivers/crypto/caam/caamalg.c b/drivers/crypto/caam/caamalg.c index b2a0a0726a5..cf268b14ae9 100644 --- a/drivers/crypto/caam/caamalg.c +++ b/drivers/crypto/caam/caamalg.c @@ -1650,11 +1650,7 @@ struct caam_alg_template {  };  static struct caam_alg_template driver_algs[] = { -	/* -	 * single-pass ipsec_esp descriptor -	 * authencesn(*,*) is also registered, although not present -	 * explicitly here. -	 */ +	/* single-pass ipsec_esp descriptor */  	{  		.name = "authenc(hmac(md5),cbc(aes))",  		.driver_name = "authenc-hmac-md5-cbc-aes-caam", @@ -2217,9 +2213,7 @@ static int __init caam_algapi_init(void)  	for (i = 0; i < ARRAY_SIZE(driver_algs); i++) {  		/* TODO: check if h/w supports alg */  		struct caam_crypto_alg *t_alg; -		bool done = false; -authencesn:  		t_alg = caam_alg_alloc(ctrldev, &driver_algs[i]);  		if (IS_ERR(t_alg)) {  			err = PTR_ERR(t_alg); @@ -2233,25 +2227,8 @@ authencesn:  			dev_warn(ctrldev, "%s alg registration failed\n",  				t_alg->crypto_alg.cra_driver_name);  			kfree(t_alg); -		} else { +		} else  			list_add_tail(&t_alg->entry, &priv->alg_list); -			if (driver_algs[i].type == CRYPTO_ALG_TYPE_AEAD && -			    !memcmp(driver_algs[i].name, "authenc", 7) && -			    !done) { -				char *name; - -				name = driver_algs[i].name; -				memmove(name + 10, name + 7, strlen(name) - 7); -				memcpy(name + 7, "esn", 3); - -				name = driver_algs[i].driver_name; -				memmove(name + 10, name + 7, strlen(name) - 7); -				memcpy(name + 7, "esn", 3); - -				done = true; -				goto authencesn; -			} -		}  	}  	if (!list_empty(&priv->alg_list))  		dev_info(ctrldev, "%s algorithms registered in /proc/crypto\n", diff --git a/drivers/crypto/caam/compat.h b/drivers/crypto/caam/compat.h index cf15e781380..762aeff626a 100644 --- a/drivers/crypto/caam/compat.h +++ b/drivers/crypto/caam/compat.h @@ -23,7 +23,6 @@  #include <linux/types.h>  #include <linux/debugfs.h>  #include <linux/circ_buf.h> -#include <linux/string.h>  #include <net/xfrm.h>  #include <crypto/algapi.h> diff --git a/drivers/crypto/talitos.c b/drivers/crypto/talitos.c index 09b184adf31..5b2b5e61e4f 100644 --- a/drivers/crypto/talitos.c +++ b/drivers/crypto/talitos.c @@ -38,7 +38,6 @@  #include <linux/spinlock.h>  #include <linux/rtnetlink.h>  #include <linux/slab.h> -#include <linux/string.h>  #include <crypto/algapi.h>  #include <crypto/aes.h> @@ -1974,11 +1973,7 @@ struct talitos_alg_template {  };  static struct talitos_alg_template driver_algs[] = { -	/* -	 * AEAD algorithms. These use a single-pass ipsec_esp descriptor. -	 * authencesn(*,*) is also registered, although not present -	 * explicitly here. -	 */ +	/* AEAD algorithms.  These use a single-pass ipsec_esp descriptor */  	{	.type = CRYPTO_ALG_TYPE_AEAD,  		.alg.crypto = {  			.cra_name = "authenc(hmac(sha1),cbc(aes))", @@ -2820,9 +2815,7 @@ static int talitos_probe(struct platform_device *ofdev)  		if (hw_supports(dev, driver_algs[i].desc_hdr_template)) {  			struct talitos_crypto_alg *t_alg;  			char *name = NULL; -			bool authenc = false; -authencesn:  			t_alg = talitos_alg_alloc(dev, &driver_algs[i]);  			if (IS_ERR(t_alg)) {  				err = PTR_ERR(t_alg); @@ -2837,8 +2830,6 @@ authencesn:  				err = crypto_register_alg(  						&t_alg->algt.alg.crypto);  				name = t_alg->algt.alg.crypto.cra_driver_name; -				authenc = authenc ? !authenc : -					  !(bool)memcmp(name, "authenc", 7);  				break;  			case CRYPTO_ALG_TYPE_AHASH:  				err = crypto_register_ahash( @@ -2851,25 +2842,8 @@ authencesn:  				dev_err(dev, "%s alg registration failed\n",  					name);  				kfree(t_alg); -			} else { +			} else  				list_add_tail(&t_alg->entry, &priv->alg_list); -				if (authenc) { -					struct crypto_alg *alg = -						&driver_algs[i].alg.crypto; - -					name = alg->cra_name; -					memmove(name + 10, name + 7, -						strlen(name) - 7); -					memcpy(name + 7, "esn", 3); - -					name = alg->cra_driver_name; -					memmove(name + 10, name + 7, -						strlen(name) - 7); -					memcpy(name + 7, "esn", 3); - -					goto authencesn; -				} -			}  		}  	}  	if (!list_empty(&priv->alg_list)) diff --git a/drivers/dma/dw_dmac.c b/drivers/dma/dw_dmac.c index c599558faed..43a5329d448 100644 --- a/drivers/dma/dw_dmac.c +++ b/drivers/dma/dw_dmac.c @@ -1001,6 +1001,13 @@ static inline void convert_burst(u32 *maxburst)  		*maxburst = 0;  } +static inline void convert_slave_id(struct dw_dma_chan *dwc) +{ +	struct dw_dma *dw = to_dw_dma(dwc->chan.device); + +	dwc->dma_sconfig.slave_id -= dw->request_line_base; +} +  static int  set_runtime_config(struct dma_chan *chan, struct dma_slave_config *sconfig)  { @@ -1015,6 +1022,7 @@ set_runtime_config(struct dma_chan *chan, struct dma_slave_config *sconfig)  	convert_burst(&dwc->dma_sconfig.src_maxburst);  	convert_burst(&dwc->dma_sconfig.dst_maxburst); +	convert_slave_id(dwc);  	return 0;  } @@ -1276,9 +1284,9 @@ static struct dma_chan *dw_dma_xlate(struct of_phandle_args *dma_spec,  	if (dma_spec->args_count != 3)  		return NULL; -	fargs.req = be32_to_cpup(dma_spec->args+0); -	fargs.src = be32_to_cpup(dma_spec->args+1); -	fargs.dst = be32_to_cpup(dma_spec->args+2); +	fargs.req = dma_spec->args[0]; +	fargs.src = dma_spec->args[1]; +	fargs.dst = dma_spec->args[2];  	if (WARN_ON(fargs.req >= DW_DMA_MAX_NR_REQUESTS ||  		    fargs.src >= dw->nr_masters || @@ -1628,6 +1636,7 @@ dw_dma_parse_dt(struct platform_device *pdev)  static int dw_probe(struct platform_device *pdev)  { +	const struct platform_device_id *match;  	struct dw_dma_platform_data *pdata;  	struct resource		*io;  	struct dw_dma		*dw; @@ -1711,6 +1720,11 @@ static int dw_probe(struct platform_device *pdev)  		memcpy(dw->data_width, pdata->data_width, 4);  	} +	/* Get the base request line if set */ +	match = platform_get_device_id(pdev); +	if (match) +		dw->request_line_base = (unsigned int)match->driver_data; +  	/* Calculate all channel mask before DMA setup */  	dw->all_chan_mask = (1 << nr_channels) - 1; @@ -1906,7 +1920,8 @@ MODULE_DEVICE_TABLE(of, dw_dma_id_table);  #endif  static const struct platform_device_id dw_dma_ids[] = { -	{ "INTL9C60", 0 }, +	/* Name,	Request Line Base */ +	{ "INTL9C60",	(kernel_ulong_t)16 },  	{ }  }; diff --git a/drivers/dma/dw_dmac_regs.h b/drivers/dma/dw_dmac_regs.h index cf0ce5c77d6..4d02c3669b7 100644 --- a/drivers/dma/dw_dmac_regs.h +++ b/drivers/dma/dw_dmac_regs.h @@ -247,6 +247,7 @@ struct dw_dma {  	/* hardware configuration */  	unsigned char		nr_masters;  	unsigned char		data_width[4]; +	unsigned int		request_line_base;  	struct dw_dma_chan	chan[0];  }; diff --git a/drivers/extcon/extcon-max77693.c b/drivers/extcon/extcon-max77693.c index b70e3815c45..8f3c947b002 100644 --- a/drivers/extcon/extcon-max77693.c +++ b/drivers/extcon/extcon-max77693.c @@ -32,6 +32,38 @@  #define	DEV_NAME			"max77693-muic"  #define	DELAY_MS_DEFAULT		20000		/* unit: millisecond */ +/* + * Default value of MAX77693 register to bring up MUIC device. + * If user don't set some initial value for MUIC device through platform data, + * extcon-max77693 driver use 'default_init_data' to bring up base operation + * of MAX77693 MUIC device. + */ +struct max77693_reg_data default_init_data[] = { +	{ +		/* STATUS2 - [3]ChgDetRun */ +		.addr = MAX77693_MUIC_REG_STATUS2, +		.data = STATUS2_CHGDETRUN_MASK, +	}, { +		/* INTMASK1 - Unmask [3]ADC1KM,[0]ADCM */ +		.addr = MAX77693_MUIC_REG_INTMASK1, +		.data = INTMASK1_ADC1K_MASK +			| INTMASK1_ADC_MASK, +	}, { +		/* INTMASK2 - Unmask [0]ChgTypM */ +		.addr = MAX77693_MUIC_REG_INTMASK2, +		.data = INTMASK2_CHGTYP_MASK, +	}, { +		/* INTMASK3 - Mask all of interrupts */ +		.addr = MAX77693_MUIC_REG_INTMASK3, +		.data = 0x0, +	}, { +		/* CDETCTRL2 */ +		.addr = MAX77693_MUIC_REG_CDETCTRL2, +		.data = CDETCTRL2_VIDRMEN_MASK +			| CDETCTRL2_DXOVPEN_MASK, +	}, +}; +  enum max77693_muic_adc_debounce_time {  	ADC_DEBOUNCE_TIME_5MS = 0,  	ADC_DEBOUNCE_TIME_10MS, @@ -1045,8 +1077,9 @@ static int max77693_muic_probe(struct platform_device *pdev)  {  	struct max77693_dev *max77693 = dev_get_drvdata(pdev->dev.parent);  	struct max77693_platform_data *pdata = dev_get_platdata(max77693->dev); -	struct max77693_muic_platform_data *muic_pdata = pdata->muic_data;  	struct max77693_muic_info *info; +	struct max77693_reg_data *init_data; +	int num_init_data;  	int delay_jiffies;  	int ret;  	int i; @@ -1145,15 +1178,25 @@ static int max77693_muic_probe(struct platform_device *pdev)  		goto err_irq;  	} -	/* Initialize MUIC register by using platform data */ -	for (i = 0 ; i < muic_pdata->num_init_data ; i++) { -		enum max77693_irq_source irq_src = MAX77693_IRQ_GROUP_NR; + +	/* Initialize MUIC register by using platform data or default data */ +	if (pdata->muic_data) { +		init_data = pdata->muic_data->init_data; +		num_init_data = pdata->muic_data->num_init_data; +	} else { +		init_data = default_init_data; +		num_init_data = ARRAY_SIZE(default_init_data); +	} + +	for (i = 0 ; i < num_init_data ; i++) { +		enum max77693_irq_source irq_src +				= MAX77693_IRQ_GROUP_NR;  		max77693_write_reg(info->max77693->regmap_muic, -				muic_pdata->init_data[i].addr, -				muic_pdata->init_data[i].data); +				init_data[i].addr, +				init_data[i].data); -		switch (muic_pdata->init_data[i].addr) { +		switch (init_data[i].addr) {  		case MAX77693_MUIC_REG_INTMASK1:  			irq_src = MUIC_INT1;  			break; @@ -1167,22 +1210,40 @@ static int max77693_muic_probe(struct platform_device *pdev)  		if (irq_src < MAX77693_IRQ_GROUP_NR)  			info->max77693->irq_masks_cur[irq_src] -				= muic_pdata->init_data[i].data; +				= init_data[i].data;  	} -	/* -	 * Default usb/uart path whether UART/USB or AUX_UART/AUX_USB -	 * h/w path of COMP2/COMN1 on CONTROL1 register. -	 */ -	if (muic_pdata->path_uart) -		info->path_uart = muic_pdata->path_uart; -	else -		info->path_uart = CONTROL1_SW_UART; +	if (pdata->muic_data) { +		struct max77693_muic_platform_data *muic_pdata = pdata->muic_data; -	if (muic_pdata->path_usb) -		info->path_usb = muic_pdata->path_usb; -	else +		/* +		 * Default usb/uart path whether UART/USB or AUX_UART/AUX_USB +		 * h/w path of COMP2/COMN1 on CONTROL1 register. +		 */ +		if (muic_pdata->path_uart) +			info->path_uart = muic_pdata->path_uart; +		else +			info->path_uart = CONTROL1_SW_UART; + +		if (muic_pdata->path_usb) +			info->path_usb = muic_pdata->path_usb; +		else +			info->path_usb = CONTROL1_SW_USB; + +		/* +		 * Default delay time for detecting cable state +		 * after certain time. +		 */ +		if (muic_pdata->detcable_delay_ms) +			delay_jiffies = +				msecs_to_jiffies(muic_pdata->detcable_delay_ms); +		else +			delay_jiffies = msecs_to_jiffies(DELAY_MS_DEFAULT); +	} else {  		info->path_usb = CONTROL1_SW_USB; +		info->path_uart = CONTROL1_SW_UART; +		delay_jiffies = msecs_to_jiffies(DELAY_MS_DEFAULT); +	}  	/* Set initial path for UART */  	 max77693_muic_set_path(info, info->path_uart, true); @@ -1208,10 +1269,6 @@ static int max77693_muic_probe(struct platform_device *pdev)  	 * driver should notify cable state to upper layer.  	 */  	INIT_DELAYED_WORK(&info->wq_detcable, max77693_muic_detect_cable_wq); -	if (muic_pdata->detcable_delay_ms) -		delay_jiffies = msecs_to_jiffies(muic_pdata->detcable_delay_ms); -	else -		delay_jiffies = msecs_to_jiffies(DELAY_MS_DEFAULT);  	schedule_delayed_work(&info->wq_detcable, delay_jiffies);  	return ret; diff --git a/drivers/extcon/extcon-max8997.c b/drivers/extcon/extcon-max8997.c index e636d950ad6..69641bcae32 100644 --- a/drivers/extcon/extcon-max8997.c +++ b/drivers/extcon/extcon-max8997.c @@ -712,29 +712,45 @@ static int max8997_muic_probe(struct platform_device *pdev)  		goto err_irq;  	} -	/* Initialize registers according to platform data */  	if (pdata->muic_pdata) { -		struct max8997_muic_platform_data *mdata = info->muic_pdata; +		struct max8997_muic_platform_data *muic_pdata +			= pdata->muic_pdata; -		for (i = 0; i < mdata->num_init_data; i++) { -			max8997_write_reg(info->muic, mdata->init_data[i].addr, -					mdata->init_data[i].data); +		/* Initialize registers according to platform data */ +		for (i = 0; i < muic_pdata->num_init_data; i++) { +			max8997_write_reg(info->muic, +					muic_pdata->init_data[i].addr, +					muic_pdata->init_data[i].data);  		} -	} -	/* -	 * Default usb/uart path whether UART/USB or AUX_UART/AUX_USB -	 * h/w path of COMP2/COMN1 on CONTROL1 register. -	 */ -	if (pdata->muic_pdata->path_uart) -		info->path_uart = pdata->muic_pdata->path_uart; -	else -		info->path_uart = CONTROL1_SW_UART; +		/* +		 * Default usb/uart path whether UART/USB or AUX_UART/AUX_USB +		 * h/w path of COMP2/COMN1 on CONTROL1 register. +		 */ +		if (muic_pdata->path_uart) +			info->path_uart = muic_pdata->path_uart; +		else +			info->path_uart = CONTROL1_SW_UART; -	if (pdata->muic_pdata->path_usb) -		info->path_usb = pdata->muic_pdata->path_usb; -	else +		if (muic_pdata->path_usb) +			info->path_usb = muic_pdata->path_usb; +		else +			info->path_usb = CONTROL1_SW_USB; + +		/* +		 * Default delay time for detecting cable state +		 * after certain time. +		 */ +		if (muic_pdata->detcable_delay_ms) +			delay_jiffies = +				msecs_to_jiffies(muic_pdata->detcable_delay_ms); +		else +			delay_jiffies = msecs_to_jiffies(DELAY_MS_DEFAULT); +	} else { +		info->path_uart = CONTROL1_SW_UART;  		info->path_usb = CONTROL1_SW_USB; +		delay_jiffies = msecs_to_jiffies(DELAY_MS_DEFAULT); +	}  	/* Set initial path for UART */  	 max8997_muic_set_path(info, info->path_uart, true); @@ -751,10 +767,6 @@ static int max8997_muic_probe(struct platform_device *pdev)  	 * driver should notify cable state to upper layer.  	 */  	INIT_DELAYED_WORK(&info->wq_detcable, max8997_muic_detect_cable_wq); -	if (pdata->muic_pdata->detcable_delay_ms) -		delay_jiffies = msecs_to_jiffies(pdata->muic_pdata->detcable_delay_ms); -	else -		delay_jiffies = msecs_to_jiffies(DELAY_MS_DEFAULT);  	schedule_delayed_work(&info->wq_detcable, delay_jiffies);  	return 0; diff --git a/drivers/firmware/Kconfig b/drivers/firmware/Kconfig index 9b00072a020..42c759a4d04 100644 --- a/drivers/firmware/Kconfig +++ b/drivers/firmware/Kconfig @@ -53,6 +53,24 @@ config EFI_VARS  	  Subsequent efibootmgr releases may be found at:  	  <http://linux.dell.com/efibootmgr> +config EFI_VARS_PSTORE +	bool "Register efivars backend for pstore" +	depends on EFI_VARS && PSTORE +	default y +	help +	  Say Y here to enable use efivars as a backend to pstore. This +	  will allow writing console messages, crash dumps, or anything +	  else supported by pstore to EFI variables. + +config EFI_VARS_PSTORE_DEFAULT_DISABLE +	bool "Disable using efivars as a pstore backend by default" +	depends on EFI_VARS_PSTORE +	default n +	help +	  Saying Y here will disable the use of efivars as a storage +	  backend for pstore by default. This setting can be overridden +	  using the efivars module's pstore_disable parameter. +  config EFI_PCDP  	bool "Console device selection via EFI PCDP or HCDP table"  	depends on ACPI && EFI && IA64 diff --git a/drivers/firmware/efivars.c b/drivers/firmware/efivars.c index fe62aa39223..7acafb80fd4 100644 --- a/drivers/firmware/efivars.c +++ b/drivers/firmware/efivars.c @@ -103,6 +103,11 @@ MODULE_VERSION(EFIVARS_VERSION);   */  #define GUID_LEN 36 +static bool efivars_pstore_disable = +	IS_ENABLED(CONFIG_EFI_VARS_PSTORE_DEFAULT_DISABLE); + +module_param_named(pstore_disable, efivars_pstore_disable, bool, 0644); +  /*   * The maximum size of VariableName + Data = 1024   * Therefore, it's reasonable to save that much @@ -165,6 +170,7 @@ efivar_create_sysfs_entry(struct efivars *efivars,  static void efivar_update_sysfs_entries(struct work_struct *);  static DECLARE_WORK(efivar_work, efivar_update_sysfs_entries); +static bool efivar_wq_enabled = true;  /* Return the number of unicode characters in data */  static unsigned long @@ -1309,9 +1315,7 @@ static const struct inode_operations efivarfs_dir_inode_operations = {  	.create = efivarfs_create,  }; -static struct pstore_info efi_pstore_info; - -#ifdef CONFIG_PSTORE +#ifdef CONFIG_EFI_VARS_PSTORE  static int efi_pstore_open(struct pstore_info *psi)  { @@ -1441,7 +1445,7 @@ static int efi_pstore_write(enum pstore_type_id type,  	spin_unlock_irqrestore(&efivars->lock, flags); -	if (reason == KMSG_DUMP_OOPS) +	if (reason == KMSG_DUMP_OOPS && efivar_wq_enabled)  		schedule_work(&efivar_work);  	*id = part; @@ -1514,38 +1518,6 @@ static int efi_pstore_erase(enum pstore_type_id type, u64 id, int count,  	return 0;  } -#else -static int efi_pstore_open(struct pstore_info *psi) -{ -	return 0; -} - -static int efi_pstore_close(struct pstore_info *psi) -{ -	return 0; -} - -static ssize_t efi_pstore_read(u64 *id, enum pstore_type_id *type, int *count, -			       struct timespec *timespec, -			       char **buf, struct pstore_info *psi) -{ -	return -1; -} - -static int efi_pstore_write(enum pstore_type_id type, -		enum kmsg_dump_reason reason, u64 *id, -		unsigned int part, int count, size_t size, -		struct pstore_info *psi) -{ -	return 0; -} - -static int efi_pstore_erase(enum pstore_type_id type, u64 id, int count, -			    struct timespec time, struct pstore_info *psi) -{ -	return 0; -} -#endif  static struct pstore_info efi_pstore_info = {  	.owner		= THIS_MODULE, @@ -1557,6 +1529,24 @@ static struct pstore_info efi_pstore_info = {  	.erase		= efi_pstore_erase,  }; +static void efivar_pstore_register(struct efivars *efivars) +{ +	efivars->efi_pstore_info = efi_pstore_info; +	efivars->efi_pstore_info.buf = kmalloc(4096, GFP_KERNEL); +	if (efivars->efi_pstore_info.buf) { +		efivars->efi_pstore_info.bufsize = 1024; +		efivars->efi_pstore_info.data = efivars; +		spin_lock_init(&efivars->efi_pstore_info.buf_lock); +		pstore_register(&efivars->efi_pstore_info); +	} +} +#else +static void efivar_pstore_register(struct efivars *efivars) +{ +	return; +} +#endif +  static ssize_t efivar_create(struct file *filp, struct kobject *kobj,  			     struct bin_attribute *bin_attr,  			     char *buf, loff_t pos, size_t count) @@ -1716,6 +1706,31 @@ static bool variable_is_present(efi_char16_t *variable_name, efi_guid_t *vendor)  	return found;  } +/* + * Returns the size of variable_name, in bytes, including the + * terminating NULL character, or variable_name_size if no NULL + * character is found among the first variable_name_size bytes. + */ +static unsigned long var_name_strnsize(efi_char16_t *variable_name, +				       unsigned long variable_name_size) +{ +	unsigned long len; +	efi_char16_t c; + +	/* +	 * The variable name is, by definition, a NULL-terminated +	 * string, so make absolutely sure that variable_name_size is +	 * the value we expect it to be. If not, return the real size. +	 */ +	for (len = 2; len <= variable_name_size; len += sizeof(c)) { +		c = variable_name[(len / sizeof(c)) - 1]; +		if (!c) +			break; +	} + +	return min(len, variable_name_size); +} +  static void efivar_update_sysfs_entries(struct work_struct *work)  {  	struct efivars *efivars = &__efivars; @@ -1756,10 +1771,13 @@ static void efivar_update_sysfs_entries(struct work_struct *work)  		if (!found) {  			kfree(variable_name);  			break; -		} else +		} else { +			variable_name_size = var_name_strnsize(variable_name, +							       variable_name_size);  			efivar_create_sysfs_entry(efivars,  						  variable_name_size,  						  variable_name, &vendor); +		}  	}  } @@ -1958,6 +1976,35 @@ void unregister_efivars(struct efivars *efivars)  }  EXPORT_SYMBOL_GPL(unregister_efivars); +/* + * Print a warning when duplicate EFI variables are encountered and + * disable the sysfs workqueue since the firmware is buggy. + */ +static void dup_variable_bug(efi_char16_t *s16, efi_guid_t *vendor_guid, +			     unsigned long len16) +{ +	size_t i, len8 = len16 / sizeof(efi_char16_t); +	char *s8; + +	/* +	 * Disable the workqueue since the algorithm it uses for +	 * detecting new variables won't work with this buggy +	 * implementation of GetNextVariableName(). +	 */ +	efivar_wq_enabled = false; + +	s8 = kzalloc(len8, GFP_KERNEL); +	if (!s8) +		return; + +	for (i = 0; i < len8; i++) +		s8[i] = s16[i]; + +	printk(KERN_WARNING "efivars: duplicate variable: %s-%pUl\n", +	       s8, vendor_guid); +	kfree(s8); +} +  int register_efivars(struct efivars *efivars,  		     const struct efivar_operations *ops,  		     struct kobject *parent_kobj) @@ -2006,6 +2053,24 @@ int register_efivars(struct efivars *efivars,  						&vendor_guid);  		switch (status) {  		case EFI_SUCCESS: +			variable_name_size = var_name_strnsize(variable_name, +							       variable_name_size); + +			/* +			 * Some firmware implementations return the +			 * same variable name on multiple calls to +			 * get_next_variable(). Terminate the loop +			 * immediately as there is no guarantee that +			 * we'll ever see a different variable name, +			 * and may end up looping here forever. +			 */ +			if (variable_is_present(variable_name, &vendor_guid)) { +				dup_variable_bug(variable_name, &vendor_guid, +						 variable_name_size); +				status = EFI_NOT_FOUND; +				break; +			} +  			efivar_create_sysfs_entry(efivars,  						  variable_name_size,  						  variable_name, @@ -2025,15 +2090,8 @@ int register_efivars(struct efivars *efivars,  	if (error)  		unregister_efivars(efivars); -	efivars->efi_pstore_info = efi_pstore_info; - -	efivars->efi_pstore_info.buf = kmalloc(4096, GFP_KERNEL); -	if (efivars->efi_pstore_info.buf) { -		efivars->efi_pstore_info.bufsize = 1024; -		efivars->efi_pstore_info.data = efivars; -		spin_lock_init(&efivars->efi_pstore_info.buf_lock); -		pstore_register(&efivars->efi_pstore_info); -	} +	if (!efivars_pstore_disable) +		efivar_pstore_register(efivars);  	register_filesystem(&efivarfs_type); diff --git a/drivers/gpio/gpiolib-of.c b/drivers/gpio/gpiolib-of.c index a71a54a3e3f..5150df6cba0 100644 --- a/drivers/gpio/gpiolib-of.c +++ b/drivers/gpio/gpiolib-of.c @@ -193,7 +193,7 @@ static void of_gpiochip_add_pin_range(struct gpio_chip *chip)  	if (!np)  		return; -	do { +	for (;; index++) {  		ret = of_parse_phandle_with_args(np, "gpio-ranges",  				"#gpio-range-cells", index, &pinspec);  		if (ret) @@ -222,8 +222,7 @@ static void of_gpiochip_add_pin_range(struct gpio_chip *chip)  		if (ret)  			break; - -	} while (index++); +	}  }  #else diff --git a/drivers/gpu/drm/exynos/exynos_drm_fimd.c b/drivers/gpu/drm/exynos/exynos_drm_fimd.c index 36493ce71f9..98cc14725ba 100644 --- a/drivers/gpu/drm/exynos/exynos_drm_fimd.c +++ b/drivers/gpu/drm/exynos/exynos_drm_fimd.c @@ -38,11 +38,12 @@  /* position control register for hardware window 0, 2 ~ 4.*/  #define VIDOSD_A(win)		(VIDOSD_BASE + 0x00 + (win) * 16)  #define VIDOSD_B(win)		(VIDOSD_BASE + 0x04 + (win) * 16) -/* size control register for hardware window 0. */ -#define VIDOSD_C_SIZE_W0	(VIDOSD_BASE + 0x08) -/* alpha control register for hardware window 1 ~ 4. */ -#define VIDOSD_C(win)		(VIDOSD_BASE + 0x18 + (win) * 16) -/* size control register for hardware window 1 ~ 4. */ +/* + * size control register for hardware windows 0 and alpha control register + * for hardware windows 1 ~ 4 + */ +#define VIDOSD_C(win)		(VIDOSD_BASE + 0x08 + (win) * 16) +/* size control register for hardware windows 1 ~ 2. */  #define VIDOSD_D(win)		(VIDOSD_BASE + 0x0C + (win) * 16)  #define VIDWx_BUF_START(win, buf)	(VIDW_BUF_START(buf) + (win) * 8) @@ -50,9 +51,9 @@  #define VIDWx_BUF_SIZE(win, buf)	(VIDW_BUF_SIZE(buf) + (win) * 4)  /* color key control register for hardware window 1 ~ 4. */ -#define WKEYCON0_BASE(x)		((WKEYCON0 + 0x140) + (x * 8)) +#define WKEYCON0_BASE(x)		((WKEYCON0 + 0x140) + ((x - 1) * 8))  /* color key value register for hardware window 1 ~ 4. */ -#define WKEYCON1_BASE(x)		((WKEYCON1 + 0x140) + (x * 8)) +#define WKEYCON1_BASE(x)		((WKEYCON1 + 0x140) + ((x - 1) * 8))  /* FIMD has totally five hardware windows. */  #define WINDOWS_NR	5 @@ -109,9 +110,9 @@ struct fimd_context {  #ifdef CONFIG_OF  static const struct of_device_id fimd_driver_dt_match[] = { -	{ .compatible = "samsung,exynos4-fimd", +	{ .compatible = "samsung,exynos4210-fimd",  	  .data = &exynos4_fimd_driver_data }, -	{ .compatible = "samsung,exynos5-fimd", +	{ .compatible = "samsung,exynos5250-fimd",  	  .data = &exynos5_fimd_driver_data },  	{},  }; @@ -581,7 +582,7 @@ static void fimd_win_commit(struct device *dev, int zpos)  	if (win != 3 && win != 4) {  		u32 offset = VIDOSD_D(win);  		if (win == 0) -			offset = VIDOSD_C_SIZE_W0; +			offset = VIDOSD_C(win);  		val = win_data->ovl_width * win_data->ovl_height;  		writel(val, ctx->regs + offset); diff --git a/drivers/gpu/drm/exynos/exynos_drm_g2d.c b/drivers/gpu/drm/exynos/exynos_drm_g2d.c index 3b0da0378ac..47a493c8a71 100644 --- a/drivers/gpu/drm/exynos/exynos_drm_g2d.c +++ b/drivers/gpu/drm/exynos/exynos_drm_g2d.c @@ -48,8 +48,14 @@  /* registers for base address */  #define G2D_SRC_BASE_ADDR		0x0304 +#define G2D_SRC_COLOR_MODE		0x030C +#define G2D_SRC_LEFT_TOP		0x0310 +#define G2D_SRC_RIGHT_BOTTOM		0x0314  #define G2D_SRC_PLANE2_BASE_ADDR	0x0318  #define G2D_DST_BASE_ADDR		0x0404 +#define G2D_DST_COLOR_MODE		0x040C +#define G2D_DST_LEFT_TOP		0x0410 +#define G2D_DST_RIGHT_BOTTOM		0x0414  #define G2D_DST_PLANE2_BASE_ADDR	0x0418  #define G2D_PAT_BASE_ADDR		0x0500  #define G2D_MSK_BASE_ADDR		0x0520 @@ -82,7 +88,7 @@  #define G2D_DMA_LIST_DONE_COUNT_OFFSET	17  /* G2D_DMA_HOLD_CMD */ -#define G2D_USET_HOLD			(1 << 2) +#define G2D_USER_HOLD			(1 << 2)  #define G2D_LIST_HOLD			(1 << 1)  #define G2D_BITBLT_HOLD			(1 << 0) @@ -91,13 +97,27 @@  #define G2D_START_NHOLT			(1 << 1)  #define G2D_START_BITBLT		(1 << 0) +/* buffer color format */ +#define G2D_FMT_XRGB8888		0 +#define G2D_FMT_ARGB8888		1 +#define G2D_FMT_RGB565			2 +#define G2D_FMT_XRGB1555		3 +#define G2D_FMT_ARGB1555		4 +#define G2D_FMT_XRGB4444		5 +#define G2D_FMT_ARGB4444		6 +#define G2D_FMT_PACKED_RGB888		7 +#define G2D_FMT_A8			11 +#define G2D_FMT_L8			12 + +/* buffer valid length */ +#define G2D_LEN_MIN			1 +#define G2D_LEN_MAX			8000 +  #define G2D_CMDLIST_SIZE		(PAGE_SIZE / 4)  #define G2D_CMDLIST_NUM			64  #define G2D_CMDLIST_POOL_SIZE		(G2D_CMDLIST_SIZE * G2D_CMDLIST_NUM)  #define G2D_CMDLIST_DATA_NUM		(G2D_CMDLIST_SIZE / sizeof(u32) - 2) -#define MAX_BUF_ADDR_NR			6 -  /* maximum buffer pool size of userptr is 64MB as default */  #define MAX_POOL		(64 * 1024 * 1024) @@ -106,6 +126,17 @@ enum {  	BUF_TYPE_USERPTR,  }; +enum g2d_reg_type { +	REG_TYPE_NONE = -1, +	REG_TYPE_SRC, +	REG_TYPE_SRC_PLANE2, +	REG_TYPE_DST, +	REG_TYPE_DST_PLANE2, +	REG_TYPE_PAT, +	REG_TYPE_MSK, +	MAX_REG_TYPE_NR +}; +  /* cmdlist data structure */  struct g2d_cmdlist {  	u32		head; @@ -113,6 +144,42 @@ struct g2d_cmdlist {  	u32		last;	/* last data offset */  }; +/* + * A structure of buffer description + * + * @format: color format + * @left_x: the x coordinates of left top corner + * @top_y: the y coordinates of left top corner + * @right_x: the x coordinates of right bottom corner + * @bottom_y: the y coordinates of right bottom corner + * + */ +struct g2d_buf_desc { +	unsigned int	format; +	unsigned int	left_x; +	unsigned int	top_y; +	unsigned int	right_x; +	unsigned int	bottom_y; +}; + +/* + * A structure of buffer information + * + * @map_nr: manages the number of mapped buffers + * @reg_types: stores regitster type in the order of requested command + * @handles: stores buffer handle in its reg_type position + * @types: stores buffer type in its reg_type position + * @descs: stores buffer description in its reg_type position + * + */ +struct g2d_buf_info { +	unsigned int		map_nr; +	enum g2d_reg_type	reg_types[MAX_REG_TYPE_NR]; +	unsigned long		handles[MAX_REG_TYPE_NR]; +	unsigned int		types[MAX_REG_TYPE_NR]; +	struct g2d_buf_desc	descs[MAX_REG_TYPE_NR]; +}; +  struct drm_exynos_pending_g2d_event {  	struct drm_pending_event	base;  	struct drm_exynos_g2d_event	event; @@ -131,14 +198,11 @@ struct g2d_cmdlist_userptr {  	bool			in_pool;  	bool			out_of_list;  }; -  struct g2d_cmdlist_node {  	struct list_head	list;  	struct g2d_cmdlist	*cmdlist; -	unsigned int		map_nr; -	unsigned long		handles[MAX_BUF_ADDR_NR]; -	unsigned int		obj_type[MAX_BUF_ADDR_NR];  	dma_addr_t		dma_addr; +	struct g2d_buf_info	buf_info;  	struct drm_exynos_pending_g2d_event	*event;  }; @@ -188,6 +252,7 @@ static int g2d_init_cmdlist(struct g2d_data *g2d)  	struct exynos_drm_subdrv *subdrv = &g2d->subdrv;  	int nr;  	int ret; +	struct g2d_buf_info *buf_info;  	init_dma_attrs(&g2d->cmdlist_dma_attrs);  	dma_set_attr(DMA_ATTR_WRITE_COMBINE, &g2d->cmdlist_dma_attrs); @@ -209,11 +274,17 @@ static int g2d_init_cmdlist(struct g2d_data *g2d)  	}  	for (nr = 0; nr < G2D_CMDLIST_NUM; nr++) { +		unsigned int i; +  		node[nr].cmdlist =  			g2d->cmdlist_pool_virt + nr * G2D_CMDLIST_SIZE;  		node[nr].dma_addr =  			g2d->cmdlist_pool + nr * G2D_CMDLIST_SIZE; +		buf_info = &node[nr].buf_info; +		for (i = 0; i < MAX_REG_TYPE_NR; i++) +			buf_info->reg_types[i] = REG_TYPE_NONE; +  		list_add_tail(&node[nr].list, &g2d->free_cmdlist);  	} @@ -450,7 +521,7 @@ static dma_addr_t *g2d_userptr_get_dma_addr(struct drm_device *drm_dev,  						DMA_BIDIRECTIONAL);  	if (ret < 0) {  		DRM_ERROR("failed to map sgt with dma region.\n"); -		goto err_free_sgt; +		goto err_sg_free_table;  	}  	g2d_userptr->dma_addr = sgt->sgl[0].dma_address; @@ -467,8 +538,10 @@ static dma_addr_t *g2d_userptr_get_dma_addr(struct drm_device *drm_dev,  	return &g2d_userptr->dma_addr; -err_free_sgt: +err_sg_free_table:  	sg_free_table(sgt); + +err_free_sgt:  	kfree(sgt);  	sgt = NULL; @@ -506,36 +579,172 @@ static void g2d_userptr_free_all(struct drm_device *drm_dev,  	g2d->current_pool = 0;  } +static enum g2d_reg_type g2d_get_reg_type(int reg_offset) +{ +	enum g2d_reg_type reg_type; + +	switch (reg_offset) { +	case G2D_SRC_BASE_ADDR: +	case G2D_SRC_COLOR_MODE: +	case G2D_SRC_LEFT_TOP: +	case G2D_SRC_RIGHT_BOTTOM: +		reg_type = REG_TYPE_SRC; +		break; +	case G2D_SRC_PLANE2_BASE_ADDR: +		reg_type = REG_TYPE_SRC_PLANE2; +		break; +	case G2D_DST_BASE_ADDR: +	case G2D_DST_COLOR_MODE: +	case G2D_DST_LEFT_TOP: +	case G2D_DST_RIGHT_BOTTOM: +		reg_type = REG_TYPE_DST; +		break; +	case G2D_DST_PLANE2_BASE_ADDR: +		reg_type = REG_TYPE_DST_PLANE2; +		break; +	case G2D_PAT_BASE_ADDR: +		reg_type = REG_TYPE_PAT; +		break; +	case G2D_MSK_BASE_ADDR: +		reg_type = REG_TYPE_MSK; +		break; +	default: +		reg_type = REG_TYPE_NONE; +		DRM_ERROR("Unknown register offset![%d]\n", reg_offset); +		break; +	}; + +	return reg_type; +} + +static unsigned long g2d_get_buf_bpp(unsigned int format) +{ +	unsigned long bpp; + +	switch (format) { +	case G2D_FMT_XRGB8888: +	case G2D_FMT_ARGB8888: +		bpp = 4; +		break; +	case G2D_FMT_RGB565: +	case G2D_FMT_XRGB1555: +	case G2D_FMT_ARGB1555: +	case G2D_FMT_XRGB4444: +	case G2D_FMT_ARGB4444: +		bpp = 2; +		break; +	case G2D_FMT_PACKED_RGB888: +		bpp = 3; +		break; +	default: +		bpp = 1; +		break; +	} + +	return bpp; +} + +static bool g2d_check_buf_desc_is_valid(struct g2d_buf_desc *buf_desc, +						enum g2d_reg_type reg_type, +						unsigned long size) +{ +	unsigned int width, height; +	unsigned long area; + +	/* +	 * check source and destination buffers only. +	 * so the others are always valid. +	 */ +	if (reg_type != REG_TYPE_SRC && reg_type != REG_TYPE_DST) +		return true; + +	width = buf_desc->right_x - buf_desc->left_x; +	if (width < G2D_LEN_MIN || width > G2D_LEN_MAX) { +		DRM_ERROR("width[%u] is out of range!\n", width); +		return false; +	} + +	height = buf_desc->bottom_y - buf_desc->top_y; +	if (height < G2D_LEN_MIN || height > G2D_LEN_MAX) { +		DRM_ERROR("height[%u] is out of range!\n", height); +		return false; +	} + +	area = (unsigned long)width * (unsigned long)height * +					g2d_get_buf_bpp(buf_desc->format); +	if (area > size) { +		DRM_ERROR("area[%lu] is out of range[%lu]!\n", area, size); +		return false; +	} + +	return true; +} +  static int g2d_map_cmdlist_gem(struct g2d_data *g2d,  				struct g2d_cmdlist_node *node,  				struct drm_device *drm_dev,  				struct drm_file *file)  {  	struct g2d_cmdlist *cmdlist = node->cmdlist; +	struct g2d_buf_info *buf_info = &node->buf_info;  	int offset; +	int ret;  	int i; -	for (i = 0; i < node->map_nr; i++) { +	for (i = 0; i < buf_info->map_nr; i++) { +		struct g2d_buf_desc *buf_desc; +		enum g2d_reg_type reg_type; +		int reg_pos;  		unsigned long handle;  		dma_addr_t *addr; -		offset = cmdlist->last - (i * 2 + 1); -		handle = cmdlist->data[offset]; +		reg_pos = cmdlist->last - 2 * (i + 1); + +		offset = cmdlist->data[reg_pos]; +		handle = cmdlist->data[reg_pos + 1]; + +		reg_type = g2d_get_reg_type(offset); +		if (reg_type == REG_TYPE_NONE) { +			ret = -EFAULT; +			goto err; +		} + +		buf_desc = &buf_info->descs[reg_type]; + +		if (buf_info->types[reg_type] == BUF_TYPE_GEM) { +			unsigned long size; + +			size = exynos_drm_gem_get_size(drm_dev, handle, file); +			if (!size) { +				ret = -EFAULT; +				goto err; +			} + +			if (!g2d_check_buf_desc_is_valid(buf_desc, reg_type, +									size)) { +				ret = -EFAULT; +				goto err; +			} -		if (node->obj_type[i] == BUF_TYPE_GEM) {  			addr = exynos_drm_gem_get_dma_addr(drm_dev, handle,  								file);  			if (IS_ERR(addr)) { -				node->map_nr = i; -				return -EFAULT; +				ret = -EFAULT; +				goto err;  			}  		} else {  			struct drm_exynos_g2d_userptr g2d_userptr;  			if (copy_from_user(&g2d_userptr, (void __user *)handle,  				sizeof(struct drm_exynos_g2d_userptr))) { -				node->map_nr = i; -				return -EFAULT; +				ret = -EFAULT; +				goto err; +			} + +			if (!g2d_check_buf_desc_is_valid(buf_desc, reg_type, +							g2d_userptr.size)) { +				ret = -EFAULT; +				goto err;  			}  			addr = g2d_userptr_get_dma_addr(drm_dev, @@ -544,16 +753,21 @@ static int g2d_map_cmdlist_gem(struct g2d_data *g2d,  							file,  							&handle);  			if (IS_ERR(addr)) { -				node->map_nr = i; -				return -EFAULT; +				ret = -EFAULT; +				goto err;  			}  		} -		cmdlist->data[offset] = *addr; -		node->handles[i] = handle; +		cmdlist->data[reg_pos + 1] = *addr; +		buf_info->reg_types[i] = reg_type; +		buf_info->handles[reg_type] = handle;  	}  	return 0; + +err: +	buf_info->map_nr = i; +	return ret;  }  static void g2d_unmap_cmdlist_gem(struct g2d_data *g2d, @@ -561,22 +775,33 @@ static void g2d_unmap_cmdlist_gem(struct g2d_data *g2d,  				  struct drm_file *filp)  {  	struct exynos_drm_subdrv *subdrv = &g2d->subdrv; +	struct g2d_buf_info *buf_info = &node->buf_info;  	int i; -	for (i = 0; i < node->map_nr; i++) { -		unsigned long handle = node->handles[i]; +	for (i = 0; i < buf_info->map_nr; i++) { +		struct g2d_buf_desc *buf_desc; +		enum g2d_reg_type reg_type; +		unsigned long handle; -		if (node->obj_type[i] == BUF_TYPE_GEM) +		reg_type = buf_info->reg_types[i]; + +		buf_desc = &buf_info->descs[reg_type]; +		handle = buf_info->handles[reg_type]; + +		if (buf_info->types[reg_type] == BUF_TYPE_GEM)  			exynos_drm_gem_put_dma_addr(subdrv->drm_dev, handle,  							filp);  		else  			g2d_userptr_put_dma_addr(subdrv->drm_dev, handle,  							false); -		node->handles[i] = 0; +		buf_info->reg_types[i] = REG_TYPE_NONE; +		buf_info->handles[reg_type] = 0; +		buf_info->types[reg_type] = 0; +		memset(buf_desc, 0x00, sizeof(*buf_desc));  	} -	node->map_nr = 0; +	buf_info->map_nr = 0;  }  static void g2d_dma_start(struct g2d_data *g2d, @@ -589,10 +814,6 @@ static void g2d_dma_start(struct g2d_data *g2d,  	pm_runtime_get_sync(g2d->dev);  	clk_enable(g2d->gate_clk); -	/* interrupt enable */ -	writel_relaxed(G2D_INTEN_ACF | G2D_INTEN_UCF | G2D_INTEN_GCF, -			g2d->regs + G2D_INTEN); -  	writel_relaxed(node->dma_addr, g2d->regs + G2D_DMA_SFR_BASE_ADDR);  	writel_relaxed(G2D_DMA_START, g2d->regs + G2D_DMA_COMMAND);  } @@ -643,7 +864,6 @@ static void g2d_runqueue_worker(struct work_struct *work)  	struct g2d_data *g2d = container_of(work, struct g2d_data,  					    runqueue_work); -  	mutex_lock(&g2d->runqueue_mutex);  	clk_disable(g2d->gate_clk);  	pm_runtime_put_sync(g2d->dev); @@ -724,20 +944,14 @@ static int g2d_check_reg_offset(struct device *dev,  	int i;  	for (i = 0; i < nr; i++) { -		index = cmdlist->last - 2 * (i + 1); +		struct g2d_buf_info *buf_info = &node->buf_info; +		struct g2d_buf_desc *buf_desc; +		enum g2d_reg_type reg_type; +		unsigned long value; -		if (for_addr) { -			/* check userptr buffer type. */ -			reg_offset = (cmdlist->data[index] & -					~0x7fffffff) >> 31; -			if (reg_offset) { -				node->obj_type[i] = BUF_TYPE_USERPTR; -				cmdlist->data[index] &= ~G2D_BUF_USERPTR; -			} -		} +		index = cmdlist->last - 2 * (i + 1);  		reg_offset = cmdlist->data[index] & ~0xfffff000; -  		if (reg_offset < G2D_VALID_START || reg_offset > G2D_VALID_END)  			goto err;  		if (reg_offset % 4) @@ -753,8 +967,60 @@ static int g2d_check_reg_offset(struct device *dev,  			if (!for_addr)  				goto err; -			if (node->obj_type[i] != BUF_TYPE_USERPTR) -				node->obj_type[i] = BUF_TYPE_GEM; +			reg_type = g2d_get_reg_type(reg_offset); +			if (reg_type == REG_TYPE_NONE) +				goto err; + +			/* check userptr buffer type. */ +			if ((cmdlist->data[index] & ~0x7fffffff) >> 31) { +				buf_info->types[reg_type] = BUF_TYPE_USERPTR; +				cmdlist->data[index] &= ~G2D_BUF_USERPTR; +			} else +				buf_info->types[reg_type] = BUF_TYPE_GEM; +			break; +		case G2D_SRC_COLOR_MODE: +		case G2D_DST_COLOR_MODE: +			if (for_addr) +				goto err; + +			reg_type = g2d_get_reg_type(reg_offset); +			if (reg_type == REG_TYPE_NONE) +				goto err; + +			buf_desc = &buf_info->descs[reg_type]; +			value = cmdlist->data[index + 1]; + +			buf_desc->format = value & 0xf; +			break; +		case G2D_SRC_LEFT_TOP: +		case G2D_DST_LEFT_TOP: +			if (for_addr) +				goto err; + +			reg_type = g2d_get_reg_type(reg_offset); +			if (reg_type == REG_TYPE_NONE) +				goto err; + +			buf_desc = &buf_info->descs[reg_type]; +			value = cmdlist->data[index + 1]; + +			buf_desc->left_x = value & 0x1fff; +			buf_desc->top_y = (value & 0x1fff0000) >> 16; +			break; +		case G2D_SRC_RIGHT_BOTTOM: +		case G2D_DST_RIGHT_BOTTOM: +			if (for_addr) +				goto err; + +			reg_type = g2d_get_reg_type(reg_offset); +			if (reg_type == REG_TYPE_NONE) +				goto err; + +			buf_desc = &buf_info->descs[reg_type]; +			value = cmdlist->data[index + 1]; + +			buf_desc->right_x = value & 0x1fff; +			buf_desc->bottom_y = (value & 0x1fff0000) >> 16;  			break;  		default:  			if (for_addr) @@ -860,9 +1126,23 @@ int exynos_g2d_set_cmdlist_ioctl(struct drm_device *drm_dev, void *data,  	cmdlist->data[cmdlist->last++] = G2D_SRC_BASE_ADDR;  	cmdlist->data[cmdlist->last++] = 0; +	/* +	 * 'LIST_HOLD' command should be set to the DMA_HOLD_CMD_REG +	 * and GCF bit should be set to INTEN register if user wants +	 * G2D interrupt event once current command list execution is +	 * finished. +	 * Otherwise only ACF bit should be set to INTEN register so +	 * that one interrupt is occured after all command lists +	 * have been completed. +	 */  	if (node->event) { +		cmdlist->data[cmdlist->last++] = G2D_INTEN; +		cmdlist->data[cmdlist->last++] = G2D_INTEN_ACF | G2D_INTEN_GCF;  		cmdlist->data[cmdlist->last++] = G2D_DMA_HOLD_CMD;  		cmdlist->data[cmdlist->last++] = G2D_LIST_HOLD; +	} else { +		cmdlist->data[cmdlist->last++] = G2D_INTEN; +		cmdlist->data[cmdlist->last++] = G2D_INTEN_ACF;  	}  	/* Check size of cmdlist: last 2 is about G2D_BITBLT_START */ @@ -887,7 +1167,7 @@ int exynos_g2d_set_cmdlist_ioctl(struct drm_device *drm_dev, void *data,  	if (ret < 0)  		goto err_free_event; -	node->map_nr = req->cmd_buf_nr; +	node->buf_info.map_nr = req->cmd_buf_nr;  	if (req->cmd_buf_nr) {  		struct drm_exynos_g2d_cmd *cmd_buf; diff --git a/drivers/gpu/drm/exynos/exynos_drm_gem.c b/drivers/gpu/drm/exynos/exynos_drm_gem.c index 67e17ce112b..0e6fe000578 100644 --- a/drivers/gpu/drm/exynos/exynos_drm_gem.c +++ b/drivers/gpu/drm/exynos/exynos_drm_gem.c @@ -164,6 +164,27 @@ out:  	exynos_gem_obj = NULL;  } +unsigned long exynos_drm_gem_get_size(struct drm_device *dev, +						unsigned int gem_handle, +						struct drm_file *file_priv) +{ +	struct exynos_drm_gem_obj *exynos_gem_obj; +	struct drm_gem_object *obj; + +	obj = drm_gem_object_lookup(dev, file_priv, gem_handle); +	if (!obj) { +		DRM_ERROR("failed to lookup gem object.\n"); +		return 0; +	} + +	exynos_gem_obj = to_exynos_gem_obj(obj); + +	drm_gem_object_unreference_unlocked(obj); + +	return exynos_gem_obj->buffer->size; +} + +  struct exynos_drm_gem_obj *exynos_drm_gem_init(struct drm_device *dev,  						      unsigned long size)  { diff --git a/drivers/gpu/drm/exynos/exynos_drm_gem.h b/drivers/gpu/drm/exynos/exynos_drm_gem.h index 35ebac47dc2..468766bee45 100644 --- a/drivers/gpu/drm/exynos/exynos_drm_gem.h +++ b/drivers/gpu/drm/exynos/exynos_drm_gem.h @@ -130,6 +130,11 @@ int exynos_drm_gem_userptr_ioctl(struct drm_device *dev, void *data,  int exynos_drm_gem_get_ioctl(struct drm_device *dev, void *data,  				      struct drm_file *file_priv); +/* get buffer size to gem handle. */ +unsigned long exynos_drm_gem_get_size(struct drm_device *dev, +						unsigned int gem_handle, +						struct drm_file *file_priv); +  /* initialize gem object. */  int exynos_drm_gem_init_object(struct drm_gem_object *obj); diff --git a/drivers/gpu/drm/exynos/exynos_drm_vidi.c b/drivers/gpu/drm/exynos/exynos_drm_vidi.c index 13ccbd4bcfa..9504b0cd825 100644 --- a/drivers/gpu/drm/exynos/exynos_drm_vidi.c +++ b/drivers/gpu/drm/exynos/exynos_drm_vidi.c @@ -117,13 +117,12 @@ static struct edid *vidi_get_edid(struct device *dev,  	}  	edid_len = (1 + ctx->raw_edid->extensions) * EDID_LENGTH; -	edid = kzalloc(edid_len, GFP_KERNEL); +	edid = kmemdup(ctx->raw_edid, edid_len, GFP_KERNEL);  	if (!edid) {  		DRM_DEBUG_KMS("failed to allocate edid\n");  		return ERR_PTR(-ENOMEM);  	} -	memcpy(edid, ctx->raw_edid, edid_len);  	return edid;  } @@ -563,12 +562,11 @@ int vidi_connection_ioctl(struct drm_device *drm_dev, void *data,  			return -EINVAL;  		}  		edid_len = (1 + raw_edid->extensions) * EDID_LENGTH; -		ctx->raw_edid = kzalloc(edid_len, GFP_KERNEL); +		ctx->raw_edid = kmemdup(raw_edid, edid_len, GFP_KERNEL);  		if (!ctx->raw_edid) {  			DRM_DEBUG_KMS("failed to allocate raw_edid.\n");  			return -ENOMEM;  		} -		memcpy(ctx->raw_edid, raw_edid, edid_len);  	} else {  		/*  		 * with connection = 0, free raw_edid diff --git a/drivers/gpu/drm/exynos/exynos_mixer.c b/drivers/gpu/drm/exynos/exynos_mixer.c index e919aba29b3..2f4f72f0704 100644 --- a/drivers/gpu/drm/exynos/exynos_mixer.c +++ b/drivers/gpu/drm/exynos/exynos_mixer.c @@ -818,7 +818,7 @@ static void mixer_win_disable(void *ctx, int win)  	mixer_ctx->win_data[win].enabled = false;  } -int mixer_check_timing(void *ctx, struct fb_videomode *timing) +static int mixer_check_timing(void *ctx, struct fb_videomode *timing)  {  	struct mixer_context *mixer_ctx = ctx;  	u32 w, h; diff --git a/drivers/gpu/drm/i915/i915_drv.c b/drivers/gpu/drm/i915/i915_drv.c index 0a8eceb7590..e9b57893db2 100644 --- a/drivers/gpu/drm/i915/i915_drv.c +++ b/drivers/gpu/drm/i915/i915_drv.c @@ -125,6 +125,11 @@ MODULE_PARM_DESC(preliminary_hw_support,  		"Enable Haswell and ValleyView Support. "  		"(default: false)"); +int i915_disable_power_well __read_mostly = 0; +module_param_named(disable_power_well, i915_disable_power_well, int, 0600); +MODULE_PARM_DESC(disable_power_well, +		 "Disable the power well when possible (default: false)"); +  static struct drm_driver driver;  extern int intel_agp_enabled; diff --git a/drivers/gpu/drm/i915/i915_drv.h b/drivers/gpu/drm/i915/i915_drv.h index e95337c9745..01769e2a995 100644 --- a/drivers/gpu/drm/i915/i915_drv.h +++ b/drivers/gpu/drm/i915/i915_drv.h @@ -1398,6 +1398,7 @@ extern int i915_enable_fbc __read_mostly;  extern bool i915_enable_hangcheck __read_mostly;  extern int i915_enable_ppgtt __read_mostly;  extern unsigned int i915_preliminary_hw_support __read_mostly; +extern int i915_disable_power_well __read_mostly;  extern int i915_suspend(struct drm_device *dev, pm_message_t state);  extern int i915_resume(struct drm_device *dev); diff --git a/drivers/gpu/drm/i915/intel_display.c b/drivers/gpu/drm/i915/intel_display.c index 287b42c9d1a..b20d50192fc 100644 --- a/drivers/gpu/drm/i915/intel_display.c +++ b/drivers/gpu/drm/i915/intel_display.c @@ -5771,6 +5771,11 @@ static int haswell_crtc_mode_set(struct drm_crtc *crtc,  		num_connectors++;  	} +	if (is_cpu_edp) +		intel_crtc->cpu_transcoder = TRANSCODER_EDP; +	else +		intel_crtc->cpu_transcoder = pipe; +  	/* We are not sure yet this won't happen. */  	WARN(!HAS_PCH_LPT(dev), "Unexpected PCH type %d\n",  	     INTEL_PCH_TYPE(dev)); @@ -5837,11 +5842,6 @@ static int intel_crtc_mode_set(struct drm_crtc *crtc,  	int pipe = intel_crtc->pipe;  	int ret; -	if (IS_HASWELL(dev) && intel_pipe_has_type(crtc, INTEL_OUTPUT_EDP)) -		intel_crtc->cpu_transcoder = TRANSCODER_EDP; -	else -		intel_crtc->cpu_transcoder = pipe; -  	drm_vblank_pre_modeset(dev, pipe);  	ret = dev_priv->display.crtc_mode_set(crtc, mode, adjusted_mode, diff --git a/drivers/gpu/drm/i915/intel_panel.c b/drivers/gpu/drm/i915/intel_panel.c index a3730e0289e..bee8cb6108a 100644 --- a/drivers/gpu/drm/i915/intel_panel.c +++ b/drivers/gpu/drm/i915/intel_panel.c @@ -321,9 +321,6 @@ void intel_panel_enable_backlight(struct drm_device *dev,  	if (dev_priv->backlight_level == 0)  		dev_priv->backlight_level = intel_panel_get_max_backlight(dev); -	dev_priv->backlight_enabled = true; -	intel_panel_actually_set_backlight(dev, dev_priv->backlight_level); -  	if (INTEL_INFO(dev)->gen >= 4) {  		uint32_t reg, tmp; @@ -359,12 +356,12 @@ void intel_panel_enable_backlight(struct drm_device *dev,  	}  set_level: -	/* Check the current backlight level and try to set again if it's zero. -	 * On some machines, BLC_PWM_CPU_CTL is cleared to zero automatically -	 * when BLC_PWM_CPU_CTL2 and BLC_PWM_PCH_CTL1 are written. +	/* Call below after setting BLC_PWM_CPU_CTL2 and BLC_PWM_PCH_CTL1. +	 * BLC_PWM_CPU_CTL may be cleared to zero automatically when these +	 * registers are set.  	 */ -	if (!intel_panel_get_backlight(dev)) -		intel_panel_actually_set_backlight(dev, dev_priv->backlight_level); +	dev_priv->backlight_enabled = true; +	intel_panel_actually_set_backlight(dev, dev_priv->backlight_level);  }  static void intel_panel_init_backlight(struct drm_device *dev) diff --git a/drivers/gpu/drm/i915/intel_pm.c b/drivers/gpu/drm/i915/intel_pm.c index a1794c6df1b..adca00783e6 100644 --- a/drivers/gpu/drm/i915/intel_pm.c +++ b/drivers/gpu/drm/i915/intel_pm.c @@ -4079,6 +4079,9 @@ void intel_set_power_well(struct drm_device *dev, bool enable)  	if (!IS_HASWELL(dev))  		return; +	if (!i915_disable_power_well && !enable) +		return; +  	tmp = I915_READ(HSW_PWR_WELL_DRIVER);  	is_enabled = tmp & HSW_PWR_WELL_STATE;  	enable_requested = tmp & HSW_PWR_WELL_ENABLE; diff --git a/drivers/hid/hid-ids.h b/drivers/hid/hid-ids.h index 92e47e5c956..c4388776f4e 100644 --- a/drivers/hid/hid-ids.h +++ b/drivers/hid/hid-ids.h @@ -590,6 +590,9 @@  #define USB_VENDOR_ID_MONTEREY		0x0566  #define USB_DEVICE_ID_GENIUS_KB29E	0x3004 +#define USB_VENDOR_ID_MSI		0x1770 +#define USB_DEVICE_ID_MSI_GX680R_LED_PANEL	0xff00 +  #define USB_VENDOR_ID_NATIONAL_SEMICONDUCTOR 0x0400  #define USB_DEVICE_ID_N_S_HARMONY	0xc359 @@ -684,6 +687,9 @@  #define USB_DEVICE_ID_QUANTA_OPTICAL_TOUCH_3001		0x3001  #define USB_DEVICE_ID_QUANTA_OPTICAL_TOUCH_3008		0x3008 +#define USB_VENDOR_ID_REALTEK		0x0bda +#define USB_DEVICE_ID_REALTEK_READER	0x0152 +  #define USB_VENDOR_ID_ROCCAT		0x1e7d  #define USB_DEVICE_ID_ROCCAT_ARVO	0x30d4  #define USB_DEVICE_ID_ROCCAT_ISKU	0x319c diff --git a/drivers/hid/hid-multitouch.c b/drivers/hid/hid-multitouch.c index 7a1ebb867cf..82e9211b3ca 100644 --- a/drivers/hid/hid-multitouch.c +++ b/drivers/hid/hid-multitouch.c @@ -621,6 +621,7 @@ static void mt_process_mt_event(struct hid_device *hid, struct hid_field *field,  {  	struct mt_device *td = hid_get_drvdata(hid);  	__s32 quirks = td->mtclass.quirks; +	struct input_dev *input = field->hidinput->input;  	if (hid->claimed & HID_CLAIMED_INPUT) {  		switch (usage->hid) { @@ -670,13 +671,16 @@ static void mt_process_mt_event(struct hid_device *hid, struct hid_field *field,  			break;  		default: +			if (usage->type) +				input_event(input, usage->type, usage->code, +						value);  			return;  		}  		if (usage->usage_index + 1 == field->report_count) {  			/* we only take into account the last report. */  			if (usage->hid == td->last_slot_field) -				mt_complete_slot(td, field->hidinput->input); +				mt_complete_slot(td, input);  			if (field->index == td->last_field_index  				&& td->num_received >= td->num_expected) diff --git a/drivers/hid/usbhid/hid-quirks.c b/drivers/hid/usbhid/hid-quirks.c index e0e6abf1cd3..19b8360f233 100644 --- a/drivers/hid/usbhid/hid-quirks.c +++ b/drivers/hid/usbhid/hid-quirks.c @@ -73,6 +73,7 @@ static const struct hid_blacklist {  	{ USB_VENDOR_ID_FORMOSA, USB_DEVICE_ID_FORMOSA_IR_RECEIVER, HID_QUIRK_NO_INIT_REPORTS },  	{ USB_VENDOR_ID_FREESCALE, USB_DEVICE_ID_FREESCALE_MX28, HID_QUIRK_NOGET },  	{ USB_VENDOR_ID_MGE, USB_DEVICE_ID_MGE_UPS, HID_QUIRK_NOGET }, +	{ USB_VENDOR_ID_MSI, USB_DEVICE_ID_MSI_GX680R_LED_PANEL, HID_QUIRK_NO_INIT_REPORTS },  	{ USB_VENDOR_ID_NOVATEK, USB_DEVICE_ID_NOVATEK_MOUSE, HID_QUIRK_NO_INIT_REPORTS },  	{ USB_VENDOR_ID_PIXART, USB_DEVICE_ID_PIXART_OPTICAL_TOUCH_SCREEN, HID_QUIRK_NO_INIT_REPORTS },  	{ USB_VENDOR_ID_PIXART, USB_DEVICE_ID_PIXART_OPTICAL_TOUCH_SCREEN1, HID_QUIRK_NO_INIT_REPORTS }, @@ -80,6 +81,7 @@ static const struct hid_blacklist {  	{ USB_VENDOR_ID_PRODIGE, USB_DEVICE_ID_PRODIGE_CORDLESS, HID_QUIRK_NOGET },  	{ USB_VENDOR_ID_QUANTA, USB_DEVICE_ID_QUANTA_OPTICAL_TOUCH_3001, HID_QUIRK_NOGET },  	{ USB_VENDOR_ID_QUANTA, USB_DEVICE_ID_QUANTA_OPTICAL_TOUCH_3008, HID_QUIRK_NOGET }, +	{ USB_VENDOR_ID_REALTEK, USB_DEVICE_ID_REALTEK_READER, HID_QUIRK_NO_INIT_REPORTS },  	{ USB_VENDOR_ID_SENNHEISER, USB_DEVICE_ID_SENNHEISER_BTD500USB, HID_QUIRK_NOGET },  	{ USB_VENDOR_ID_SIGMATEL, USB_DEVICE_ID_SIGMATEL_STMP3780, HID_QUIRK_NOGET },  	{ USB_VENDOR_ID_SUN, USB_DEVICE_ID_RARITAN_KVM_DONGLE, HID_QUIRK_NOGET }, diff --git a/drivers/infiniband/hw/cxgb4/qp.c b/drivers/infiniband/hw/cxgb4/qp.c index 17ba4f8bc12..70b1808a08f 100644 --- a/drivers/infiniband/hw/cxgb4/qp.c +++ b/drivers/infiniband/hw/cxgb4/qp.c @@ -186,8 +186,10 @@ static int create_qp(struct c4iw_rdev *rdev, struct t4_wq *wq,  	wq->rq.queue = dma_alloc_coherent(&(rdev->lldi.pdev->dev),  					  wq->rq.memsize, &(wq->rq.dma_addr),  					  GFP_KERNEL); -	if (!wq->rq.queue) +	if (!wq->rq.queue) { +		ret = -ENOMEM;  		goto free_sq; +	}  	PDBG("%s sq base va 0x%p pa 0x%llx rq base va 0x%p pa 0x%llx\n",  		__func__, wq->sq.queue,  		(unsigned long long)virt_to_phys(wq->sq.queue), diff --git a/drivers/infiniband/hw/ipath/ipath_verbs.c b/drivers/infiniband/hw/ipath/ipath_verbs.c index 439c35d4a66..ea93870266e 100644 --- a/drivers/infiniband/hw/ipath/ipath_verbs.c +++ b/drivers/infiniband/hw/ipath/ipath_verbs.c @@ -620,7 +620,7 @@ void ipath_ib_rcv(struct ipath_ibdev *dev, void *rhdr, void *data,  		goto bail;  	} -	opcode = be32_to_cpu(ohdr->bth[0]) >> 24; +	opcode = (be32_to_cpu(ohdr->bth[0]) >> 24) & 0x7f;  	dev->opstats[opcode].n_bytes += tlen;  	dev->opstats[opcode].n_packets++; diff --git a/drivers/infiniband/hw/qib/Kconfig b/drivers/infiniband/hw/qib/Kconfig index 8349f9c5064..1e603a37506 100644 --- a/drivers/infiniband/hw/qib/Kconfig +++ b/drivers/infiniband/hw/qib/Kconfig @@ -1,7 +1,7 @@  config INFINIBAND_QIB -	tristate "QLogic PCIe HCA support" +	tristate "Intel PCIe HCA support"  	depends on 64BIT  	---help--- -	This is a low-level driver for QLogic PCIe QLE InfiniBand host -	channel adapters.  This driver does not support the QLogic +	This is a low-level driver for Intel PCIe QLE InfiniBand host +	channel adapters.  This driver does not support the Intel  	HyperTransport card (model QHT7140). diff --git a/drivers/infiniband/hw/qib/qib_driver.c b/drivers/infiniband/hw/qib/qib_driver.c index 5423edcab51..216092477df 100644 --- a/drivers/infiniband/hw/qib/qib_driver.c +++ b/drivers/infiniband/hw/qib/qib_driver.c @@ -1,4 +1,5 @@  /* + * Copyright (c) 2013 Intel Corporation. All rights reserved.   * Copyright (c) 2006, 2007, 2008, 2009 QLogic Corporation. All rights reserved.   * Copyright (c) 2003, 2004, 2005, 2006 PathScale, Inc. All rights reserved.   * @@ -63,8 +64,8 @@ MODULE_PARM_DESC(compat_ddr_negotiate,  		 "Attempt pre-IBTA 1.2 DDR speed negotiation");  MODULE_LICENSE("Dual BSD/GPL"); -MODULE_AUTHOR("QLogic <support@qlogic.com>"); -MODULE_DESCRIPTION("QLogic IB driver"); +MODULE_AUTHOR("Intel <ibsupport@intel.com>"); +MODULE_DESCRIPTION("Intel IB driver");  MODULE_VERSION(QIB_DRIVER_VERSION);  /* diff --git a/drivers/infiniband/hw/qib/qib_iba6120.c b/drivers/infiniband/hw/qib/qib_iba6120.c index a099ac171e2..0232ae56b1f 100644 --- a/drivers/infiniband/hw/qib/qib_iba6120.c +++ b/drivers/infiniband/hw/qib/qib_iba6120.c @@ -1,4 +1,5 @@  /* + * Copyright (c) 2013 Intel Corporation. All rights reserved.   * Copyright (c) 2006, 2007, 2008, 2009, 2010 QLogic Corporation.   * All rights reserved.   * Copyright (c) 2003, 2004, 2005, 2006 PathScale, Inc. All rights reserved. @@ -51,7 +52,7 @@ static u32 qib_6120_iblink_state(u64);  /*   * This file contains all the chip-specific register information and - * access functions for the QLogic QLogic_IB PCI-Express chip. + * access functions for the Intel Intel_IB PCI-Express chip.   *   */ diff --git a/drivers/infiniband/hw/qib/qib_init.c b/drivers/infiniband/hw/qib/qib_init.c index 50e33aa0b4e..173f805790d 100644 --- a/drivers/infiniband/hw/qib/qib_init.c +++ b/drivers/infiniband/hw/qib/qib_init.c @@ -1,5 +1,5 @@  /* - * Copyright (c) 2012 Intel Corporation.  All rights reserved. + * Copyright (c) 2012, 2013 Intel Corporation.  All rights reserved.   * Copyright (c) 2006 - 2012 QLogic Corporation. All rights reserved.   * Copyright (c) 2003, 2004, 2005, 2006 PathScale, Inc. All rights reserved.   * @@ -1138,7 +1138,7 @@ void qib_disable_after_error(struct qib_devdata *dd)  static void qib_remove_one(struct pci_dev *);  static int qib_init_one(struct pci_dev *, const struct pci_device_id *); -#define DRIVER_LOAD_MSG "QLogic " QIB_DRV_NAME " loaded: " +#define DRIVER_LOAD_MSG "Intel " QIB_DRV_NAME " loaded: "  #define PFX QIB_DRV_NAME ": "  static DEFINE_PCI_DEVICE_TABLE(qib_pci_tbl) = { @@ -1355,7 +1355,7 @@ static int qib_init_one(struct pci_dev *pdev, const struct pci_device_id *ent)  		dd = qib_init_iba6120_funcs(pdev, ent);  #else  		qib_early_err(&pdev->dev, -			"QLogic PCIE device 0x%x cannot work if CONFIG_PCI_MSI is not enabled\n", +			"Intel PCIE device 0x%x cannot work if CONFIG_PCI_MSI is not enabled\n",  			ent->device);  		dd = ERR_PTR(-ENODEV);  #endif @@ -1371,7 +1371,7 @@ static int qib_init_one(struct pci_dev *pdev, const struct pci_device_id *ent)  	default:  		qib_early_err(&pdev->dev, -			"Failing on unknown QLogic deviceid 0x%x\n", +			"Failing on unknown Intel deviceid 0x%x\n",  			ent->device);  		ret = -ENODEV;  	} diff --git a/drivers/infiniband/hw/qib/qib_sd7220.c b/drivers/infiniband/hw/qib/qib_sd7220.c index 50a8a0d4fe6..08a6c6d39e5 100644 --- a/drivers/infiniband/hw/qib/qib_sd7220.c +++ b/drivers/infiniband/hw/qib/qib_sd7220.c @@ -1,5 +1,5 @@  /* - * Copyright (c) 2012 Intel Corporation. All rights reserved. + * Copyright (c) 2013 Intel Corporation. All rights reserved.   * Copyright (c) 2006 - 2012 QLogic Corporation. All rights reserved.   * Copyright (c) 2003, 2004, 2005, 2006 PathScale, Inc. All rights reserved.   * @@ -44,7 +44,7 @@  #include "qib.h"  #include "qib_7220.h" -#define SD7220_FW_NAME "qlogic/sd7220.fw" +#define SD7220_FW_NAME "intel/sd7220.fw"  MODULE_FIRMWARE(SD7220_FW_NAME);  /* diff --git a/drivers/infiniband/hw/qib/qib_verbs.c b/drivers/infiniband/hw/qib/qib_verbs.c index ba51a4715a1..7c0ab16a2fe 100644 --- a/drivers/infiniband/hw/qib/qib_verbs.c +++ b/drivers/infiniband/hw/qib/qib_verbs.c @@ -1,5 +1,5 @@  /* - * Copyright (c) 2012 Intel Corporation.  All rights reserved. + * Copyright (c) 2012, 2013 Intel Corporation.  All rights reserved.   * Copyright (c) 2006 - 2012 QLogic Corporation. All rights reserved.   * Copyright (c) 2005, 2006 PathScale, Inc. All rights reserved.   * @@ -2224,7 +2224,7 @@ int qib_register_ib_device(struct qib_devdata *dd)  	ibdev->dma_ops = &qib_dma_mapping_ops;  	snprintf(ibdev->node_desc, sizeof(ibdev->node_desc), -		 "QLogic Infiniband HCA %s", init_utsname()->nodename); +		 "Intel Infiniband HCA %s", init_utsname()->nodename);  	ret = ib_register_device(ibdev, qib_create_port_files);  	if (ret) diff --git a/drivers/infiniband/ulp/ipoib/ipoib_cm.c b/drivers/infiniband/ulp/ipoib/ipoib_cm.c index 67b0c1d2367..1ef880de3a4 100644 --- a/drivers/infiniband/ulp/ipoib/ipoib_cm.c +++ b/drivers/infiniband/ulp/ipoib/ipoib_cm.c @@ -758,9 +758,13 @@ void ipoib_cm_send(struct net_device *dev, struct sk_buff *skb, struct ipoib_cm_  		if (++priv->tx_outstanding == ipoib_sendq_size) {  			ipoib_dbg(priv, "TX ring 0x%x full, stopping kernel net queue\n",  				  tx->qp->qp_num); -			if (ib_req_notify_cq(priv->send_cq, IB_CQ_NEXT_COMP)) -				ipoib_warn(priv, "request notify on send CQ failed\n");  			netif_stop_queue(dev); +			rc = ib_req_notify_cq(priv->send_cq, +				IB_CQ_NEXT_COMP | IB_CQ_REPORT_MISSED_EVENTS); +			if (rc < 0) +				ipoib_warn(priv, "request notify on send CQ failed\n"); +			else if (rc) +				ipoib_send_comp_handler(priv->send_cq, dev);  		}  	}  } diff --git a/drivers/iommu/Kconfig b/drivers/iommu/Kconfig index 5c514d0711d..c332fb98480 100644 --- a/drivers/iommu/Kconfig +++ b/drivers/iommu/Kconfig @@ -130,7 +130,7 @@ config IRQ_REMAP  # OMAP IOMMU support  config OMAP_IOMMU  	bool "OMAP IOMMU Support" -	depends on ARCH_OMAP +	depends on ARCH_OMAP2PLUS  	select IOMMU_API  config OMAP_IOVMM diff --git a/drivers/iommu/amd_iommu.c b/drivers/iommu/amd_iommu.c index 98f555dafb5..b287ca33833 100644 --- a/drivers/iommu/amd_iommu.c +++ b/drivers/iommu/amd_iommu.c @@ -2466,18 +2466,16 @@ static int device_change_notifier(struct notifier_block *nb,  		/* allocate a protection domain if a device is added */  		dma_domain = find_protection_domain(devid); -		if (dma_domain) -			goto out; -		dma_domain = dma_ops_domain_alloc(); -		if (!dma_domain) -			goto out; -		dma_domain->target_dev = devid; - -		spin_lock_irqsave(&iommu_pd_list_lock, flags); -		list_add_tail(&dma_domain->list, &iommu_pd_list); -		spin_unlock_irqrestore(&iommu_pd_list_lock, flags); +		if (!dma_domain) { +			dma_domain = dma_ops_domain_alloc(); +			if (!dma_domain) +				goto out; +			dma_domain->target_dev = devid; -		dev_data = get_dev_data(dev); +			spin_lock_irqsave(&iommu_pd_list_lock, flags); +			list_add_tail(&dma_domain->list, &iommu_pd_list); +			spin_unlock_irqrestore(&iommu_pd_list_lock, flags); +		}  		dev->archdata.dma_ops = &amd_iommu_dma_ops; diff --git a/drivers/iommu/amd_iommu_init.c b/drivers/iommu/amd_iommu_init.c index b6ecddb63cd..e3c2d74b768 100644 --- a/drivers/iommu/amd_iommu_init.c +++ b/drivers/iommu/amd_iommu_init.c @@ -980,7 +980,7 @@ static void __init free_iommu_all(void)   *     BIOS should disable L2B micellaneous clock gating by setting   *     L2_L2B_CK_GATE_CONTROL[CKGateL2BMiscDisable](D0F2xF4_x90[2]) = 1b   */ -static void __init amd_iommu_erratum_746_workaround(struct amd_iommu *iommu) +static void amd_iommu_erratum_746_workaround(struct amd_iommu *iommu)  {  	u32 value; diff --git a/drivers/iommu/irq_remapping.c b/drivers/iommu/irq_remapping.c index d56f8c17c5f..7c11ff368d0 100644 --- a/drivers/iommu/irq_remapping.c +++ b/drivers/iommu/irq_remapping.c @@ -2,7 +2,6 @@  #include <linux/cpumask.h>  #include <linux/kernel.h>  #include <linux/string.h> -#include <linux/cpumask.h>  #include <linux/errno.h>  #include <linux/msi.h>  #include <linux/irq.h> diff --git a/drivers/media/i2c/m5mols/m5mols_core.c b/drivers/media/i2c/m5mols/m5mols_core.c index d4e7567b367..0b899cb6cda 100644 --- a/drivers/media/i2c/m5mols/m5mols_core.c +++ b/drivers/media/i2c/m5mols/m5mols_core.c @@ -724,7 +724,7 @@ static int m5mols_s_stream(struct v4l2_subdev *sd, int enable)  	if (enable) {  		if (is_code(code, M5MOLS_RESTYPE_MONITOR))  			ret = m5mols_start_monitor(info); -		if (is_code(code, M5MOLS_RESTYPE_CAPTURE)) +		else if (is_code(code, M5MOLS_RESTYPE_CAPTURE))  			ret = m5mols_start_capture(info);  		else  			ret = -EINVAL; diff --git a/drivers/media/pci/bt8xx/bttv-driver.c b/drivers/media/pci/bt8xx/bttv-driver.c index ccd18e4ee78..54579e4c740 100644 --- a/drivers/media/pci/bt8xx/bttv-driver.c +++ b/drivers/media/pci/bt8xx/bttv-driver.c @@ -250,17 +250,19 @@ static u8 SRAM_Table[][60] =     vdelay	start of active video in 2 * field lines relative to  		trailing edge of /VRESET pulse (VDELAY register).     sheight	height of active video in 2 * field lines. +   extraheight	Added to sheight for cropcap.bounds.height only     videostart0	ITU-R frame line number of the line corresponding  		to vdelay in the first field. */  #define CROPCAP(minhdelayx1, hdelayx1, swidth, totalwidth, sqwidth,	 \ -		vdelay, sheight, videostart0)				 \ +		vdelay, sheight, extraheight, videostart0)		 \  	.cropcap.bounds.left = minhdelayx1,				 \  	/* * 2 because vertically we count field lines times two, */	 \  	/* e.g. 23 * 2 to 23 * 2 + 576 in PAL-BGHI defrect. */		 \  	.cropcap.bounds.top = (videostart0) * 2 - (vdelay) + MIN_VDELAY, \  	/* 4 is a safety margin at the end of the line. */		 \  	.cropcap.bounds.width = (totalwidth) - (minhdelayx1) - 4,	 \ -	.cropcap.bounds.height = (sheight) + (vdelay) - MIN_VDELAY,	 \ +	.cropcap.bounds.height = (sheight) + (extraheight) + (vdelay) -	 \ +				 MIN_VDELAY,				 \  	.cropcap.defrect.left = hdelayx1,				 \  	.cropcap.defrect.top = (videostart0) * 2,			 \  	.cropcap.defrect.width = swidth,				 \ @@ -301,9 +303,10 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* totalwidth */ 1135,  			/* sqwidth */ 944,  			/* vdelay */ 0x20, -		/* bt878 (and bt848?) can capture another -		   line below active video. */ -			/* sheight */ (576 + 2) + 0x20 - 2, +			/* sheight */ 576, +			/* bt878 (and bt848?) can capture another +			   line below active video. */ +			/* extraheight */ 2,  			/* videostart0 */ 23)  	},{  		.v4l2_id        = V4L2_STD_NTSC_M | V4L2_STD_NTSC_M_KR, @@ -330,6 +333,7 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* sqwidth */ 780,  			/* vdelay */ 0x1a,  			/* sheight */ 480, +			/* extraheight */ 0,  			/* videostart0 */ 23)  	},{  		.v4l2_id        = V4L2_STD_SECAM, @@ -355,6 +359,7 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* sqwidth */ 944,  			/* vdelay */ 0x20,  			/* sheight */ 576, +			/* extraheight */ 0,  			/* videostart0 */ 23)  	},{  		.v4l2_id        = V4L2_STD_PAL_Nc, @@ -380,6 +385,7 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* sqwidth */ 780,  			/* vdelay */ 0x1a,  			/* sheight */ 576, +			/* extraheight */ 0,  			/* videostart0 */ 23)  	},{  		.v4l2_id        = V4L2_STD_PAL_M, @@ -405,6 +411,7 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* sqwidth */ 780,  			/* vdelay */ 0x1a,  			/* sheight */ 480, +			/* extraheight */ 0,  			/* videostart0 */ 23)  	},{  		.v4l2_id        = V4L2_STD_PAL_N, @@ -430,6 +437,7 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* sqwidth */ 944,  			/* vdelay */ 0x20,  			/* sheight */ 576, +			/* extraheight */ 0,  			/* videostart0 */ 23)  	},{  		.v4l2_id        = V4L2_STD_NTSC_M_JP, @@ -455,6 +463,7 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* sqwidth */ 780,  			/* vdelay */ 0x16,  			/* sheight */ 480, +			/* extraheight */ 0,  			/* videostart0 */ 23)  	},{  		/* that one hopefully works with the strange timing @@ -484,6 +493,7 @@ const struct bttv_tvnorm bttv_tvnorms[] = {  			/* sqwidth */ 944,  			/* vdelay */ 0x1a,  			/* sheight */ 480, +			/* extraheight */ 0,  			/* videostart0 */ 23)  	}  }; diff --git a/drivers/media/platform/exynos-gsc/gsc-core.c b/drivers/media/platform/exynos-gsc/gsc-core.c index 82d9f6ac12f..33b5ffc8d66 100644 --- a/drivers/media/platform/exynos-gsc/gsc-core.c +++ b/drivers/media/platform/exynos-gsc/gsc-core.c @@ -1054,16 +1054,18 @@ static int gsc_m2m_suspend(struct gsc_dev *gsc)  static int gsc_m2m_resume(struct gsc_dev *gsc)  { +	struct gsc_ctx *ctx;  	unsigned long flags;  	spin_lock_irqsave(&gsc->slock, flags);  	/* Clear for full H/W setup in first run after resume */ +	ctx = gsc->m2m.ctx;  	gsc->m2m.ctx = NULL;  	spin_unlock_irqrestore(&gsc->slock, flags);  	if (test_and_clear_bit(ST_M2M_SUSPENDED, &gsc->state)) -		gsc_m2m_job_finish(gsc->m2m.ctx, -				    VB2_BUF_STATE_ERROR); +		gsc_m2m_job_finish(ctx, VB2_BUF_STATE_ERROR); +  	return 0;  } @@ -1204,7 +1206,7 @@ static int gsc_resume(struct device *dev)  	/* Do not resume if the device was idle before system suspend */  	spin_lock_irqsave(&gsc->slock, flags);  	if (!test_and_clear_bit(ST_SUSPEND, &gsc->state) || -	    !gsc_m2m_active(gsc)) { +	    !gsc_m2m_opened(gsc)) {  		spin_unlock_irqrestore(&gsc->slock, flags);  		return 0;  	} diff --git a/drivers/media/platform/s5p-fimc/fimc-core.c b/drivers/media/platform/s5p-fimc/fimc-core.c index e3916bde45c..0f513dd19f8 100644 --- a/drivers/media/platform/s5p-fimc/fimc-core.c +++ b/drivers/media/platform/s5p-fimc/fimc-core.c @@ -850,16 +850,18 @@ static int fimc_m2m_suspend(struct fimc_dev *fimc)  static int fimc_m2m_resume(struct fimc_dev *fimc)  { +	struct fimc_ctx *ctx;  	unsigned long flags;  	spin_lock_irqsave(&fimc->slock, flags);  	/* Clear for full H/W setup in first run after resume */ +	ctx = fimc->m2m.ctx;  	fimc->m2m.ctx = NULL;  	spin_unlock_irqrestore(&fimc->slock, flags);  	if (test_and_clear_bit(ST_M2M_SUSPENDED, &fimc->state)) -		fimc_m2m_job_finish(fimc->m2m.ctx, -				    VB2_BUF_STATE_ERROR); +		fimc_m2m_job_finish(ctx, VB2_BUF_STATE_ERROR); +  	return 0;  } diff --git a/drivers/media/platform/s5p-fimc/fimc-lite-reg.c b/drivers/media/platform/s5p-fimc/fimc-lite-reg.c index f0af0754a7b..ac9663ce2a4 100644 --- a/drivers/media/platform/s5p-fimc/fimc-lite-reg.c +++ b/drivers/media/platform/s5p-fimc/fimc-lite-reg.c @@ -128,10 +128,10 @@ static const u32 src_pixfmt_map[8][3] = {  void flite_hw_set_source_format(struct fimc_lite *dev, struct flite_frame *f)  {  	enum v4l2_mbus_pixelcode pixelcode = dev->fmt->mbus_code; -	unsigned int i = ARRAY_SIZE(src_pixfmt_map); +	int i = ARRAY_SIZE(src_pixfmt_map);  	u32 cfg; -	while (i-- >= 0) { +	while (--i >= 0) {  		if (src_pixfmt_map[i][0] == pixelcode)  			break;  	} @@ -224,9 +224,9 @@ static void flite_hw_set_out_order(struct fimc_lite *dev, struct flite_frame *f)  		{ V4L2_MBUS_FMT_VYUY8_2X8, FLITE_REG_CIODMAFMT_CRYCBY },  	};  	u32 cfg = readl(dev->regs + FLITE_REG_CIODMAFMT); -	unsigned int i = ARRAY_SIZE(pixcode); +	int i = ARRAY_SIZE(pixcode); -	while (i-- >= 0) +	while (--i >= 0)  		if (pixcode[i][0] == dev->fmt->mbus_code)  			break;  	cfg &= ~FLITE_REG_CIODMAFMT_YCBCR_ORDER_MASK; diff --git a/drivers/media/platform/s5p-fimc/fimc-lite.c b/drivers/media/platform/s5p-fimc/fimc-lite.c index bfc4206935c..bbc35de7db2 100644 --- a/drivers/media/platform/s5p-fimc/fimc-lite.c +++ b/drivers/media/platform/s5p-fimc/fimc-lite.c @@ -1408,6 +1408,7 @@ static const struct v4l2_ctrl_config fimc_lite_ctrl = {  	.id	= V4L2_CTRL_CLASS_USER | 0x1001,  	.type	= V4L2_CTRL_TYPE_BOOLEAN,  	.name	= "Test Pattern 640x480", +	.step	= 1,  };  static int fimc_lite_create_capture_subdev(struct fimc_lite *fimc) diff --git a/drivers/media/platform/s5p-fimc/fimc-mdevice.c b/drivers/media/platform/s5p-fimc/fimc-mdevice.c index a17fcb2d5d4..cd38d708ab5 100644 --- a/drivers/media/platform/s5p-fimc/fimc-mdevice.c +++ b/drivers/media/platform/s5p-fimc/fimc-mdevice.c @@ -827,7 +827,7 @@ static int fimc_md_link_notify(struct media_pad *source,  	struct fimc_pipeline *pipeline;  	struct v4l2_subdev *sd;  	struct mutex *lock; -	int ret = 0; +	int i, ret = 0;  	int ref_count;  	if (media_entity_type(sink->entity) != MEDIA_ENT_T_V4L2_SUBDEV) @@ -854,29 +854,28 @@ static int fimc_md_link_notify(struct media_pad *source,  		return 0;  	} +	mutex_lock(lock); +	ref_count = fimc ? fimc->vid_cap.refcnt : fimc_lite->ref_count; +  	if (!(flags & MEDIA_LNK_FL_ENABLED)) { -		int i; -		mutex_lock(lock); -		ret = __fimc_pipeline_close(pipeline); +		if (ref_count > 0) { +			ret = __fimc_pipeline_close(pipeline); +			if (!ret && fimc) +				fimc_ctrls_delete(fimc->vid_cap.ctx); +		}  		for (i = 0; i < IDX_MAX; i++)  			pipeline->subdevs[i] = NULL; -		if (fimc) -			fimc_ctrls_delete(fimc->vid_cap.ctx); -		mutex_unlock(lock); -		return ret; +	} else if (ref_count > 0) { +		/* +		 * Link activation. Enable power of pipeline elements only if +		 * the pipeline is already in use, i.e. its video node is open. +		 * Recreate the controls destroyed during the link deactivation. +		 */ +		ret = __fimc_pipeline_open(pipeline, +					   source->entity, true); +		if (!ret && fimc) +			ret = fimc_capture_ctrls_create(fimc);  	} -	/* -	 * Link activation. Enable power of pipeline elements only if the -	 * pipeline is already in use, i.e. its video node is opened. -	 * Recreate the controls destroyed during the link deactivation. -	 */ -	mutex_lock(lock); - -	ref_count = fimc ? fimc->vid_cap.refcnt : fimc_lite->ref_count; -	if (ref_count > 0) -		ret = __fimc_pipeline_open(pipeline, source->entity, true); -	if (!ret && fimc) -		ret = fimc_capture_ctrls_create(fimc);  	mutex_unlock(lock);  	return ret ? -EPIPE : ret; diff --git a/drivers/media/platform/s5p-mfc/s5p_mfc.c b/drivers/media/platform/s5p-mfc/s5p_mfc.c index e84703c314c..1cb6d57987c 100644 --- a/drivers/media/platform/s5p-mfc/s5p_mfc.c +++ b/drivers/media/platform/s5p-mfc/s5p_mfc.c @@ -276,7 +276,7 @@ static void s5p_mfc_handle_frame_new(struct s5p_mfc_ctx *ctx, unsigned int err)  	unsigned int frame_type;  	dspl_y_addr = s5p_mfc_hw_call(dev->mfc_ops, get_dspl_y_adr, dev); -	frame_type = s5p_mfc_hw_call(dev->mfc_ops, get_dec_frame_type, dev); +	frame_type = s5p_mfc_hw_call(dev->mfc_ops, get_disp_frame_type, ctx);  	/* If frame is same as previous then skip and do not dequeue */  	if (frame_type == S5P_FIMV_DECODE_FRAME_SKIPPED) { diff --git a/drivers/media/platform/s5p-mfc/s5p_mfc_enc.c b/drivers/media/platform/s5p-mfc/s5p_mfc_enc.c index 2356fd52a16..4f6b553c4b2 100644 --- a/drivers/media/platform/s5p-mfc/s5p_mfc_enc.c +++ b/drivers/media/platform/s5p-mfc/s5p_mfc_enc.c @@ -232,6 +232,7 @@ static struct mfc_control controls[] = {  		.minimum = 0,  		.maximum = 1,  		.default_value = 0, +		.step = 1,  		.menu_skip_mask = 0,  	},  	{ diff --git a/drivers/media/rc/Kconfig b/drivers/media/rc/Kconfig index 19f3563c61d..5a79c333d45 100644 --- a/drivers/media/rc/Kconfig +++ b/drivers/media/rc/Kconfig @@ -291,7 +291,7 @@ config IR_TTUSBIR  config IR_RX51  	tristate "Nokia N900 IR transmitter diode" -	depends on OMAP_DM_TIMER && LIRC && !ARCH_MULTIPLATFORM +	depends on OMAP_DM_TIMER && ARCH_OMAP2PLUS && LIRC && !ARCH_MULTIPLATFORM  	---help---  	   Say Y or M here if you want to enable support for the IR  	   transmitter diode built in the Nokia N900 (RX51) device. diff --git a/drivers/media/v4l2-core/Makefile b/drivers/media/v4l2-core/Makefile index a9d355230e8..768aaf62d5d 100644 --- a/drivers/media/v4l2-core/Makefile +++ b/drivers/media/v4l2-core/Makefile @@ -10,7 +10,7 @@ ifeq ($(CONFIG_COMPAT),y)    videodev-objs += v4l2-compat-ioctl32.o  endif -obj-$(CONFIG_VIDEO_DEV) += videodev.o +obj-$(CONFIG_VIDEO_V4L2) += videodev.o  obj-$(CONFIG_VIDEO_V4L2_INT_DEVICE) += v4l2-int-device.o  obj-$(CONFIG_VIDEO_V4L2) += v4l2-common.o diff --git a/drivers/misc/mei/hw-me.c b/drivers/misc/mei/hw-me.c index 45ea7185c00..642c6223fa6 100644 --- a/drivers/misc/mei/hw-me.c +++ b/drivers/misc/mei/hw-me.c @@ -152,6 +152,20 @@ static void mei_me_intr_disable(struct mei_device *dev)  }  /** + * mei_me_hw_reset_release - release device from the reset + * + * @dev: the device structure + */ +static void mei_me_hw_reset_release(struct mei_device *dev) +{ +	struct mei_me_hw *hw = to_me_hw(dev); +	u32 hcsr = mei_hcsr_read(hw); + +	hcsr |= H_IG; +	hcsr &= ~H_RST; +	mei_hcsr_set(hw, hcsr); +} +/**   * mei_me_hw_reset - resets fw via mei csr register.   *   * @dev: the device structure @@ -169,18 +183,14 @@ static void mei_me_hw_reset(struct mei_device *dev, bool intr_enable)  	if (intr_enable)  		hcsr |= H_IE;  	else -		hcsr &= ~H_IE; - -	mei_hcsr_set(hw, hcsr); - -	hcsr = mei_hcsr_read(hw) | H_IG; -	hcsr &= ~H_RST; +		hcsr |= ~H_IE;  	mei_hcsr_set(hw, hcsr); -	hcsr = mei_hcsr_read(hw); +	if (dev->dev_state == MEI_DEV_POWER_DOWN) +		mei_me_hw_reset_release(dev); -	dev_dbg(&dev->pdev->dev, "current HCSR = 0x%08x.\n", hcsr); +	dev_dbg(&dev->pdev->dev, "current HCSR = 0x%08x.\n", mei_hcsr_read(hw));  }  /** @@ -466,7 +476,8 @@ irqreturn_t mei_me_irq_thread_handler(int irq, void *dev_id)  			mutex_unlock(&dev->device_lock);  			return IRQ_HANDLED;  		} else { -			dev_dbg(&dev->pdev->dev, "FW not ready.\n"); +			dev_dbg(&dev->pdev->dev, "Reset Completed.\n"); +			mei_me_hw_reset_release(dev);  			mutex_unlock(&dev->device_lock);  			return IRQ_HANDLED;  		} diff --git a/drivers/misc/mei/init.c b/drivers/misc/mei/init.c index 6ec530168af..356179991a2 100644 --- a/drivers/misc/mei/init.c +++ b/drivers/misc/mei/init.c @@ -183,6 +183,24 @@ void mei_reset(struct mei_device *dev, int interrupts_enabled)  	mei_cl_all_write_clear(dev);  } +void mei_stop(struct mei_device *dev) +{ +	dev_dbg(&dev->pdev->dev, "stopping the device.\n"); + +	mutex_lock(&dev->device_lock); + +	cancel_delayed_work(&dev->timer_work); + +	mei_wd_stop(dev); + +	dev->dev_state = MEI_DEV_POWER_DOWN; +	mei_reset(dev, 0); + +	mutex_unlock(&dev->device_lock); + +	flush_scheduled_work(); +} + diff --git a/drivers/misc/mei/mei_dev.h b/drivers/misc/mei/mei_dev.h index cb80166161f..97873812e33 100644 --- a/drivers/misc/mei/mei_dev.h +++ b/drivers/misc/mei/mei_dev.h @@ -381,6 +381,7 @@ static inline unsigned long mei_secs_to_jiffies(unsigned long sec)  void mei_device_init(struct mei_device *dev);  void mei_reset(struct mei_device *dev, int interrupts);  int mei_hw_init(struct mei_device *dev); +void mei_stop(struct mei_device *dev);  /*   *  MEI interrupt functions prototype diff --git a/drivers/misc/mei/pci-me.c b/drivers/misc/mei/pci-me.c index b40ec0601ab..b8b5c9c3ad0 100644 --- a/drivers/misc/mei/pci-me.c +++ b/drivers/misc/mei/pci-me.c @@ -247,44 +247,14 @@ static void mei_remove(struct pci_dev *pdev)  	hw = to_me_hw(dev); -	mutex_lock(&dev->device_lock); - -	cancel_delayed_work(&dev->timer_work); -	mei_wd_stop(dev); +	dev_err(&pdev->dev, "stop\n"); +	mei_stop(dev);  	mei_pdev = NULL; -	if (dev->iamthif_cl.state == MEI_FILE_CONNECTED) { -		dev->iamthif_cl.state = MEI_FILE_DISCONNECTING; -		mei_cl_disconnect(&dev->iamthif_cl); -	} -	if (dev->wd_cl.state == MEI_FILE_CONNECTED) { -		dev->wd_cl.state = MEI_FILE_DISCONNECTING; -		mei_cl_disconnect(&dev->wd_cl); -	} - -	/* Unregistering watchdog device */  	mei_watchdog_unregister(dev); -	/* remove entry if already in list */ -	dev_dbg(&pdev->dev, "list del iamthif and wd file list.\n"); - -	if (dev->open_handle_count > 0) -		dev->open_handle_count--; -	mei_cl_unlink(&dev->wd_cl); - -	if (dev->open_handle_count > 0) -		dev->open_handle_count--; -	mei_cl_unlink(&dev->iamthif_cl); - -	dev->iamthif_current_cb = NULL; -	dev->me_clients_num = 0; - -	mutex_unlock(&dev->device_lock); - -	flush_scheduled_work(); -  	/* disable interrupts */  	mei_disable_interrupts(dev); @@ -308,28 +278,20 @@ static int mei_pci_suspend(struct device *device)  {  	struct pci_dev *pdev = to_pci_dev(device);  	struct mei_device *dev = pci_get_drvdata(pdev); -	int err;  	if (!dev)  		return -ENODEV; -	mutex_lock(&dev->device_lock); -	cancel_delayed_work(&dev->timer_work); +	dev_err(&pdev->dev, "suspend\n"); -	/* Stop watchdog if exists */ -	err = mei_wd_stop(dev); -	/* Set new mei state */ -	if (dev->dev_state == MEI_DEV_ENABLED || -	    dev->dev_state == MEI_DEV_RECOVERING_FROM_RESET) { -		dev->dev_state = MEI_DEV_POWER_DOWN; -		mei_reset(dev, 0); -	} -	mutex_unlock(&dev->device_lock); +	mei_stop(dev); + +	mei_disable_interrupts(dev);  	free_irq(pdev->irq, dev);  	pci_disable_msi(pdev); -	return err; +	return 0;  }  static int mei_pci_resume(struct device *device) diff --git a/drivers/misc/vmw_vmci/vmci_datagram.c b/drivers/misc/vmw_vmci/vmci_datagram.c index ed5c433cd49..f3cdd904fe4 100644 --- a/drivers/misc/vmw_vmci/vmci_datagram.c +++ b/drivers/misc/vmw_vmci/vmci_datagram.c @@ -42,9 +42,11 @@ struct datagram_entry {  struct delayed_datagram_info {  	struct datagram_entry *entry; -	struct vmci_datagram msg;  	struct work_struct work;  	bool in_dg_host_queue; +	/* msg and msg_payload must be together. */ +	struct vmci_datagram msg; +	u8 msg_payload[];  };  /* Number of in-flight host->host datagrams */ diff --git a/drivers/net/bonding/bond_sysfs.c b/drivers/net/bonding/bond_sysfs.c index 1c9e09fbdff..db103e03ba0 100644 --- a/drivers/net/bonding/bond_sysfs.c +++ b/drivers/net/bonding/bond_sysfs.c @@ -183,6 +183,11 @@ int bond_create_slave_symlinks(struct net_device *master,  	sprintf(linkname, "slave_%s", slave->name);  	ret = sysfs_create_link(&(master->dev.kobj), &(slave->dev.kobj),  				linkname); + +	/* free the master link created earlier in case of error */ +	if (ret) +		sysfs_remove_link(&(slave->dev.kobj), "master"); +  	return ret;  } diff --git a/drivers/net/ethernet/broadcom/bnx2x/bnx2x_dcb.c b/drivers/net/ethernet/broadcom/bnx2x/bnx2x_dcb.c index 568205436a1..91ecd6a00d0 100644 --- a/drivers/net/ethernet/broadcom/bnx2x/bnx2x_dcb.c +++ b/drivers/net/ethernet/broadcom/bnx2x/bnx2x_dcb.c @@ -2139,12 +2139,12 @@ static u8 bnx2x_dcbnl_get_cap(struct net_device *netdev, int capid, u8 *cap)  			break;  		default:  			BNX2X_ERR("Non valid capability ID\n"); -			rval = -EINVAL; +			rval = 1;  			break;  		}  	} else {  		DP(BNX2X_MSG_DCB, "DCB disabled\n"); -		rval = -EINVAL; +		rval = 1;  	}  	DP(BNX2X_MSG_DCB, "capid %d:%x\n", capid, *cap); @@ -2170,12 +2170,12 @@ static int bnx2x_dcbnl_get_numtcs(struct net_device *netdev, int tcid, u8 *num)  			break;  		default:  			BNX2X_ERR("Non valid TC-ID\n"); -			rval = -EINVAL; +			rval = 1;  			break;  		}  	} else {  		DP(BNX2X_MSG_DCB, "DCB disabled\n"); -		rval = -EINVAL; +		rval = 1;  	}  	return rval; @@ -2188,7 +2188,7 @@ static int bnx2x_dcbnl_set_numtcs(struct net_device *netdev, int tcid, u8 num)  	return -EINVAL;  } -static u8  bnx2x_dcbnl_get_pfc_state(struct net_device *netdev) +static u8 bnx2x_dcbnl_get_pfc_state(struct net_device *netdev)  {  	struct bnx2x *bp = netdev_priv(netdev);  	DP(BNX2X_MSG_DCB, "state = %d\n", bp->dcbx_local_feat.pfc.enabled); @@ -2390,12 +2390,12 @@ static u8 bnx2x_dcbnl_get_featcfg(struct net_device *netdev, int featid,  			break;  		default:  			BNX2X_ERR("Non valid featrue-ID\n"); -			rval = -EINVAL; +			rval = 1;  			break;  		}  	} else {  		DP(BNX2X_MSG_DCB, "DCB disabled\n"); -		rval = -EINVAL; +		rval = 1;  	}  	return rval; @@ -2431,12 +2431,12 @@ static u8 bnx2x_dcbnl_set_featcfg(struct net_device *netdev, int featid,  			break;  		default:  			BNX2X_ERR("Non valid featrue-ID\n"); -			rval = -EINVAL; +			rval = 1;  			break;  		}  	} else {  		DP(BNX2X_MSG_DCB, "dcbnl call not valid\n"); -		rval = -EINVAL; +		rval = 1;  	}  	return rval; diff --git a/drivers/net/ethernet/freescale/fec.c b/drivers/net/ethernet/freescale/fec.c index e3f39372ce2..911d0253dbb 100644 --- a/drivers/net/ethernet/freescale/fec.c +++ b/drivers/net/ethernet/freescale/fec.c @@ -1332,7 +1332,7 @@ static int fec_enet_ioctl(struct net_device *ndev, struct ifreq *rq, int cmd)  static void fec_enet_free_buffers(struct net_device *ndev)  {  	struct fec_enet_private *fep = netdev_priv(ndev); -	int i; +	unsigned int i;  	struct sk_buff *skb;  	struct bufdesc	*bdp; @@ -1356,7 +1356,7 @@ static void fec_enet_free_buffers(struct net_device *ndev)  static int fec_enet_alloc_buffers(struct net_device *ndev)  {  	struct fec_enet_private *fep = netdev_priv(ndev); -	int i; +	unsigned int i;  	struct sk_buff *skb;  	struct bufdesc	*bdp; @@ -1598,7 +1598,7 @@ static int fec_enet_init(struct net_device *ndev)  	struct fec_enet_private *fep = netdev_priv(ndev);  	struct bufdesc *cbd_base;  	struct bufdesc *bdp; -	int i; +	unsigned int i;  	/* Allocate memory for buffer descriptors. */  	cbd_base = dma_alloc_coherent(NULL, PAGE_SIZE, &fep->bd_dma, diff --git a/drivers/net/ethernet/freescale/fec_ptp.c b/drivers/net/ethernet/freescale/fec_ptp.c index 1f17ca0f220..0d8df400a47 100644 --- a/drivers/net/ethernet/freescale/fec_ptp.c +++ b/drivers/net/ethernet/freescale/fec_ptp.c @@ -128,6 +128,7 @@ void fec_ptp_start_cyclecounter(struct net_device *ndev)  	spin_unlock_irqrestore(&fep->tmreg_lock, flags);  } +EXPORT_SYMBOL(fec_ptp_start_cyclecounter);  /**   * fec_ptp_adjfreq - adjust ptp cycle frequency @@ -318,6 +319,7 @@ int fec_ptp_ioctl(struct net_device *ndev, struct ifreq *ifr, int cmd)  	return copy_to_user(ifr->ifr_data, &config, sizeof(config)) ?  	    -EFAULT : 0;  } +EXPORT_SYMBOL(fec_ptp_ioctl);  /**   * fec_time_keep - call timecounter_read every second to avoid timer overrun @@ -383,3 +385,4 @@ void fec_ptp_init(struct net_device *ndev, struct platform_device *pdev)  		pr_info("registered PHC device on %s\n", ndev->name);  	}  } +EXPORT_SYMBOL(fec_ptp_init); diff --git a/drivers/net/ethernet/intel/igb/e1000_82575.c b/drivers/net/ethernet/intel/igb/e1000_82575.c index b64542acfa3..12b1d848080 100644 --- a/drivers/net/ethernet/intel/igb/e1000_82575.c +++ b/drivers/net/ethernet/intel/igb/e1000_82575.c @@ -1818,27 +1818,32 @@ out:   **/  void igb_vmdq_set_anti_spoofing_pf(struct e1000_hw *hw, bool enable, int pf)  { -	u32 dtxswc; +	u32 reg_val, reg_offset;  	switch (hw->mac.type) {  	case e1000_82576: +		reg_offset = E1000_DTXSWC; +		break;  	case e1000_i350: -		dtxswc = rd32(E1000_DTXSWC); -		if (enable) { -			dtxswc |= (E1000_DTXSWC_MAC_SPOOF_MASK | -				   E1000_DTXSWC_VLAN_SPOOF_MASK); -			/* The PF can spoof - it has to in order to -			 * support emulation mode NICs */ -			dtxswc ^= (1 << pf | 1 << (pf + MAX_NUM_VFS)); -		} else { -			dtxswc &= ~(E1000_DTXSWC_MAC_SPOOF_MASK | -				    E1000_DTXSWC_VLAN_SPOOF_MASK); -		} -		wr32(E1000_DTXSWC, dtxswc); +		reg_offset = E1000_TXSWC;  		break;  	default: -		break; +		return; +	} + +	reg_val = rd32(reg_offset); +	if (enable) { +		reg_val |= (E1000_DTXSWC_MAC_SPOOF_MASK | +			     E1000_DTXSWC_VLAN_SPOOF_MASK); +		/* The PF can spoof - it has to in order to +		 * support emulation mode NICs +		 */ +		reg_val ^= (1 << pf | 1 << (pf + MAX_NUM_VFS)); +	} else { +		reg_val &= ~(E1000_DTXSWC_MAC_SPOOF_MASK | +			     E1000_DTXSWC_VLAN_SPOOF_MASK);  	} +	wr32(reg_offset, reg_val);  }  /** diff --git a/drivers/net/ethernet/intel/igb/igb_hwmon.c b/drivers/net/ethernet/intel/igb/igb_hwmon.c index 4623502054d..0478a1abe54 100644 --- a/drivers/net/ethernet/intel/igb/igb_hwmon.c +++ b/drivers/net/ethernet/intel/igb/igb_hwmon.c @@ -39,7 +39,7 @@  #include <linux/pci.h>  #ifdef CONFIG_IGB_HWMON -struct i2c_board_info i350_sensor_info = { +static struct i2c_board_info i350_sensor_info = {  	I2C_BOARD_INFO("i350bb", (0Xf8 >> 1)),  }; diff --git a/drivers/net/ethernet/intel/igb/igb_main.c b/drivers/net/ethernet/intel/igb/igb_main.c index 4dbd62968c7..8496adfc6a6 100644 --- a/drivers/net/ethernet/intel/igb/igb_main.c +++ b/drivers/net/ethernet/intel/igb/igb_main.c @@ -2542,8 +2542,8 @@ static void igb_probe_vfs(struct igb_adapter *adapter)  	if ((hw->mac.type == e1000_i210) || (hw->mac.type == e1000_i211))  		return; -	igb_enable_sriov(pdev, max_vfs);  	pci_sriov_set_totalvfs(pdev, 7); +	igb_enable_sriov(pdev, max_vfs);  #endif /* CONFIG_PCI_IOV */  } @@ -2652,7 +2652,7 @@ static int igb_sw_init(struct igb_adapter *adapter)  		if (max_vfs > 7) {  			dev_warn(&pdev->dev,  				 "Maximum of 7 VFs per PF, using max\n"); -			adapter->vfs_allocated_count = 7; +			max_vfs = adapter->vfs_allocated_count = 7;  		} else  			adapter->vfs_allocated_count = max_vfs;  		if (adapter->vfs_allocated_count) diff --git a/drivers/net/ethernet/intel/igb/igb_ptp.c b/drivers/net/ethernet/intel/igb/igb_ptp.c index 0987822359f..0a237507ee8 100644 --- a/drivers/net/ethernet/intel/igb/igb_ptp.c +++ b/drivers/net/ethernet/intel/igb/igb_ptp.c @@ -740,7 +740,7 @@ void igb_ptp_init(struct igb_adapter *adapter)  	case e1000_82576:  		snprintf(adapter->ptp_caps.name, 16, "%pm", netdev->dev_addr);  		adapter->ptp_caps.owner = THIS_MODULE; -		adapter->ptp_caps.max_adj = 1000000000; +		adapter->ptp_caps.max_adj = 999999881;  		adapter->ptp_caps.n_ext_ts = 0;  		adapter->ptp_caps.pps = 0;  		adapter->ptp_caps.adjfreq = igb_ptp_adjfreq_82576; diff --git a/drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c b/drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c index c3db6cd69b6..2b6cb5ca48e 100644 --- a/drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c +++ b/drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c @@ -944,9 +944,17 @@ free_queue_irqs:  		free_irq(adapter->msix_entries[vector].vector,  			 adapter->q_vector[vector]);  	} -	pci_disable_msix(adapter->pdev); -	kfree(adapter->msix_entries); -	adapter->msix_entries = NULL; +	/* This failure is non-recoverable - it indicates the system is +	 * out of MSIX vector resources and the VF driver cannot run +	 * without them.  Set the number of msix vectors to zero +	 * indicating that not enough can be allocated.  The error +	 * will be returned to the user indicating device open failed. +	 * Any further attempts to force the driver to open will also +	 * fail.  The only way to recover is to unload the driver and +	 * reload it again.  If the system has recovered some MSIX +	 * vectors then it may succeed. +	 */ +	adapter->num_msix_vectors = 0;  	return err;  } @@ -2572,6 +2580,15 @@ static int ixgbevf_open(struct net_device *netdev)  	struct ixgbe_hw *hw = &adapter->hw;  	int err; +	/* A previous failure to open the device because of a lack of +	 * available MSIX vector resources may have reset the number +	 * of msix vectors variable to zero.  The only way to recover +	 * is to unload/reload the driver and hope that the system has +	 * been able to recover some MSIX vector resources. +	 */ +	if (!adapter->num_msix_vectors) +		return -ENOMEM; +  	/* disallow open during test */  	if (test_bit(__IXGBEVF_TESTING, &adapter->state))  		return -EBUSY; @@ -2628,7 +2645,6 @@ static int ixgbevf_open(struct net_device *netdev)  err_req_irq:  	ixgbevf_down(adapter); -	ixgbevf_free_irq(adapter);  err_setup_rx:  	ixgbevf_free_all_rx_resources(adapter);  err_setup_tx: diff --git a/drivers/net/ethernet/lantiq_etop.c b/drivers/net/ethernet/lantiq_etop.c index 6a2127489af..bfdb0686039 100644 --- a/drivers/net/ethernet/lantiq_etop.c +++ b/drivers/net/ethernet/lantiq_etop.c @@ -769,7 +769,7 @@ ltq_etop_probe(struct platform_device *pdev)  	return 0;  err_free: -	kfree(dev); +	free_netdev(dev);  err_out:  	return err;  } diff --git a/drivers/net/ethernet/mellanox/mlx4/en_netdev.c b/drivers/net/ethernet/mellanox/mlx4/en_netdev.c index 995d4b6d5c1..f278b10ef71 100644 --- a/drivers/net/ethernet/mellanox/mlx4/en_netdev.c +++ b/drivers/net/ethernet/mellanox/mlx4/en_netdev.c @@ -1637,6 +1637,17 @@ void mlx4_en_stop_port(struct net_device *dev, int detach)  	/* Flush multicast filter */  	mlx4_SET_MCAST_FLTR(mdev->dev, priv->port, 0, 1, MLX4_MCAST_CONFIG); +	/* Remove flow steering rules for the port*/ +	if (mdev->dev->caps.steering_mode == +	    MLX4_STEERING_MODE_DEVICE_MANAGED) { +		ASSERT_RTNL(); +		list_for_each_entry_safe(flow, tmp_flow, +					 &priv->ethtool_list, list) { +			mlx4_flow_detach(mdev->dev, flow->id); +			list_del(&flow->list); +		} +	} +  	mlx4_en_destroy_drop_qp(priv);  	/* Free TX Rings */ @@ -1657,17 +1668,6 @@ void mlx4_en_stop_port(struct net_device *dev, int detach)  	if (!(mdev->dev->caps.flags2 & MLX4_DEV_CAP_FLAGS2_REASSIGN_MAC_EN))  		mdev->mac_removed[priv->port] = 1; -	/* Remove flow steering rules for the port*/ -	if (mdev->dev->caps.steering_mode == -	    MLX4_STEERING_MODE_DEVICE_MANAGED) { -		ASSERT_RTNL(); -		list_for_each_entry_safe(flow, tmp_flow, -					 &priv->ethtool_list, list) { -			mlx4_flow_detach(mdev->dev, flow->id); -			list_del(&flow->list); -		} -	} -  	/* Free RX Rings */  	for (i = 0; i < priv->rx_ring_num; i++) {  		mlx4_en_deactivate_rx_ring(priv, &priv->rx_ring[i]); diff --git a/drivers/net/ethernet/mellanox/mlx4/eq.c b/drivers/net/ethernet/mellanox/mlx4/eq.c index 251ae2f9311..8e3123a1df8 100644 --- a/drivers/net/ethernet/mellanox/mlx4/eq.c +++ b/drivers/net/ethernet/mellanox/mlx4/eq.c @@ -771,7 +771,7 @@ int mlx4_MAP_EQ_wrapper(struct mlx4_dev *dev, int slave,  	struct mlx4_slave_event_eq_info *event_eq =  		priv->mfunc.master.slave_state[slave].event_eq;  	u32 in_modifier = vhcr->in_modifier; -	u32 eqn = in_modifier & 0x1FF; +	u32 eqn = in_modifier & 0x3FF;  	u64 in_param =  vhcr->in_param;  	int err = 0;  	int i; diff --git a/drivers/net/ethernet/mellanox/mlx4/resource_tracker.c b/drivers/net/ethernet/mellanox/mlx4/resource_tracker.c index 2995687f1ae..1391b52f443 100644 --- a/drivers/net/ethernet/mellanox/mlx4/resource_tracker.c +++ b/drivers/net/ethernet/mellanox/mlx4/resource_tracker.c @@ -99,6 +99,7 @@ struct res_qp {  	struct list_head	mcg_list;  	spinlock_t		mcg_spl;  	int			local_qpn; +	atomic_t		ref_count;  };  enum res_mtt_states { @@ -197,6 +198,7 @@ enum res_fs_rule_states {  struct res_fs_rule {  	struct res_common	com; +	int			qpn;  };  static void *res_tracker_lookup(struct rb_root *root, u64 res_id) @@ -355,7 +357,7 @@ static int mpt_mask(struct mlx4_dev *dev)  	return dev->caps.num_mpts - 1;  } -static void *find_res(struct mlx4_dev *dev, int res_id, +static void *find_res(struct mlx4_dev *dev, u64 res_id,  		      enum mlx4_resource type)  {  	struct mlx4_priv *priv = mlx4_priv(dev); @@ -447,6 +449,7 @@ static struct res_common *alloc_qp_tr(int id)  	ret->local_qpn = id;  	INIT_LIST_HEAD(&ret->mcg_list);  	spin_lock_init(&ret->mcg_spl); +	atomic_set(&ret->ref_count, 0);  	return &ret->com;  } @@ -554,7 +557,7 @@ static struct res_common *alloc_xrcdn_tr(int id)  	return &ret->com;  } -static struct res_common *alloc_fs_rule_tr(u64 id) +static struct res_common *alloc_fs_rule_tr(u64 id, int qpn)  {  	struct res_fs_rule *ret; @@ -564,7 +567,7 @@ static struct res_common *alloc_fs_rule_tr(u64 id)  	ret->com.res_id = id;  	ret->com.state = RES_FS_RULE_ALLOCATED; - +	ret->qpn = qpn;  	return &ret->com;  } @@ -602,7 +605,7 @@ static struct res_common *alloc_tr(u64 id, enum mlx4_resource type, int slave,  		ret = alloc_xrcdn_tr(id);  		break;  	case RES_FS_RULE: -		ret = alloc_fs_rule_tr(id); +		ret = alloc_fs_rule_tr(id, extra);  		break;  	default:  		return NULL; @@ -671,10 +674,14 @@ undo:  static int remove_qp_ok(struct res_qp *res)  { -	if (res->com.state == RES_QP_BUSY) +	if (res->com.state == RES_QP_BUSY || atomic_read(&res->ref_count) || +	    !list_empty(&res->mcg_list)) { +		pr_err("resource tracker: fail to remove qp, state %d, ref_count %d\n", +		       res->com.state, atomic_read(&res->ref_count));  		return -EBUSY; -	else if (res->com.state != RES_QP_RESERVED) +	} else if (res->com.state != RES_QP_RESERVED) {  		return -EPERM; +	}  	return 0;  } @@ -3124,6 +3131,7 @@ int mlx4_QP_FLOW_STEERING_ATTACH_wrapper(struct mlx4_dev *dev, int slave,  	struct list_head *rlist = &tracker->slave_list[slave].res_list[RES_MAC];  	int err;  	int qpn; +	struct res_qp *rqp;  	struct mlx4_net_trans_rule_hw_ctrl *ctrl;  	struct _rule_hw  *rule_header;  	int header_id; @@ -3134,7 +3142,7 @@ int mlx4_QP_FLOW_STEERING_ATTACH_wrapper(struct mlx4_dev *dev, int slave,  	ctrl = (struct mlx4_net_trans_rule_hw_ctrl *)inbox->buf;  	qpn = be32_to_cpu(ctrl->qpn) & 0xffffff; -	err = get_res(dev, slave, qpn, RES_QP, NULL); +	err = get_res(dev, slave, qpn, RES_QP, &rqp);  	if (err) {  		pr_err("Steering rule with qpn 0x%x rejected.\n", qpn);  		return err; @@ -3175,14 +3183,16 @@ int mlx4_QP_FLOW_STEERING_ATTACH_wrapper(struct mlx4_dev *dev, int slave,  	if (err)  		goto err_put; -	err = add_res_range(dev, slave, vhcr->out_param, 1, RES_FS_RULE, 0); +	err = add_res_range(dev, slave, vhcr->out_param, 1, RES_FS_RULE, qpn);  	if (err) {  		mlx4_err(dev, "Fail to add flow steering resources.\n ");  		/* detach rule*/  		mlx4_cmd(dev, vhcr->out_param, 0, 0,  			 MLX4_QP_FLOW_STEERING_DETACH, MLX4_CMD_TIME_CLASS_A,  			 MLX4_CMD_NATIVE); +		goto err_put;  	} +	atomic_inc(&rqp->ref_count);  err_put:  	put_res(dev, slave, qpn, RES_QP);  	return err; @@ -3195,20 +3205,35 @@ int mlx4_QP_FLOW_STEERING_DETACH_wrapper(struct mlx4_dev *dev, int slave,  					 struct mlx4_cmd_info *cmd)  {  	int err; +	struct res_qp *rqp; +	struct res_fs_rule *rrule;  	if (dev->caps.steering_mode !=  	    MLX4_STEERING_MODE_DEVICE_MANAGED)  		return -EOPNOTSUPP; +	err = get_res(dev, slave, vhcr->in_param, RES_FS_RULE, &rrule); +	if (err) +		return err; +	/* Release the rule form busy state before removal */ +	put_res(dev, slave, vhcr->in_param, RES_FS_RULE); +	err = get_res(dev, slave, rrule->qpn, RES_QP, &rqp); +	if (err) +		return err; +  	err = rem_res_range(dev, slave, vhcr->in_param, 1, RES_FS_RULE, 0);  	if (err) {  		mlx4_err(dev, "Fail to remove flow steering resources.\n "); -		return err; +		goto out;  	}  	err = mlx4_cmd(dev, vhcr->in_param, 0, 0,  		       MLX4_QP_FLOW_STEERING_DETACH, MLX4_CMD_TIME_CLASS_A,  		       MLX4_CMD_NATIVE); +	if (!err) +		atomic_dec(&rqp->ref_count); +out: +	put_res(dev, slave, rrule->qpn, RES_QP);  	return err;  } @@ -3806,6 +3831,7 @@ void mlx4_delete_all_resources_for_slave(struct mlx4_dev *dev, int slave)  	mutex_lock(&priv->mfunc.master.res_tracker.slave_list[slave].mutex);  	/*VLAN*/  	rem_slave_macs(dev, slave); +	rem_slave_fs_rule(dev, slave);  	rem_slave_qps(dev, slave);  	rem_slave_srqs(dev, slave);  	rem_slave_cqs(dev, slave); @@ -3814,6 +3840,5 @@ void mlx4_delete_all_resources_for_slave(struct mlx4_dev *dev, int slave)  	rem_slave_mtts(dev, slave);  	rem_slave_counters(dev, slave);  	rem_slave_xrcdns(dev, slave); -	rem_slave_fs_rule(dev, slave);  	mutex_unlock(&priv->mfunc.master.res_tracker.slave_list[slave].mutex);  } diff --git a/drivers/net/ethernet/nxp/lpc_eth.c b/drivers/net/ethernet/nxp/lpc_eth.c index c4122c86f82..efa29b712d5 100644 --- a/drivers/net/ethernet/nxp/lpc_eth.c +++ b/drivers/net/ethernet/nxp/lpc_eth.c @@ -1472,7 +1472,8 @@ static int lpc_eth_drv_probe(struct platform_device *pdev)  	}  	platform_set_drvdata(pdev, ndev); -	if (lpc_mii_init(pldat) != 0) +	ret = lpc_mii_init(pldat); +	if (ret)  		goto err_out_unregister_netdev;  	netdev_info(ndev, "LPC mac at 0x%08x irq %d\n", diff --git a/drivers/net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c b/drivers/net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c index 39ab4d09faa..73ce7dd6b95 100644 --- a/drivers/net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c +++ b/drivers/net/ethernet/oki-semi/pch_gbe/pch_gbe_main.c @@ -1726,9 +1726,9 @@ pch_gbe_clean_rx(struct pch_gbe_adapter *adapter,  			skb->protocol = eth_type_trans(skb, netdev);  			if (tcp_ip_status & PCH_GBE_RXD_ACC_STAT_TCPIPOK) -				skb->ip_summed = CHECKSUM_NONE; -			else  				skb->ip_summed = CHECKSUM_UNNECESSARY; +			else +				skb->ip_summed = CHECKSUM_NONE;  			napi_gro_receive(&adapter->napi, skb);  			(*work_done)++; diff --git a/drivers/net/ethernet/renesas/sh_eth.c b/drivers/net/ethernet/renesas/sh_eth.c index 33e96176e4d..bf5e3cf97c4 100644 --- a/drivers/net/ethernet/renesas/sh_eth.c +++ b/drivers/net/ethernet/renesas/sh_eth.c @@ -2220,6 +2220,7 @@ static void sh_eth_tsu_init(struct sh_eth_private *mdp)  /* MDIO bus release function */  static int sh_mdio_release(struct net_device *ndev)  { +	struct sh_eth_private *mdp = netdev_priv(ndev);  	struct mii_bus *bus = dev_get_drvdata(&ndev->dev);  	/* unregister mdio bus */ @@ -2234,6 +2235,9 @@ static int sh_mdio_release(struct net_device *ndev)  	/* free bitbang info */  	free_mdio_bitbang(bus); +	/* free bitbang memory */ +	kfree(mdp->bitbang); +  	return 0;  } @@ -2262,6 +2266,7 @@ static int sh_mdio_init(struct net_device *ndev, int id,  	bitbang->ctrl.ops = &bb_ops;  	/* MII controller setting */ +	mdp->bitbang = bitbang;  	mdp->mii_bus = alloc_mdio_bitbang(&bitbang->ctrl);  	if (!mdp->mii_bus) {  		ret = -ENOMEM; @@ -2441,6 +2446,11 @@ static int sh_eth_drv_probe(struct platform_device *pdev)  		}  		mdp->tsu_addr = ioremap(rtsu->start,  					resource_size(rtsu)); +		if (mdp->tsu_addr == NULL) { +			ret = -ENOMEM; +			dev_err(&pdev->dev, "TSU ioremap failed.\n"); +			goto out_release; +		}  		mdp->port = devno % 2;  		ndev->features = NETIF_F_HW_VLAN_FILTER;  	} diff --git a/drivers/net/ethernet/renesas/sh_eth.h b/drivers/net/ethernet/renesas/sh_eth.h index bae84fd2e73..e6655678458 100644 --- a/drivers/net/ethernet/renesas/sh_eth.h +++ b/drivers/net/ethernet/renesas/sh_eth.h @@ -705,6 +705,7 @@ struct sh_eth_private {  	const u16 *reg_offset;  	void __iomem *addr;  	void __iomem *tsu_addr; +	struct bb_info *bitbang;  	u32 num_rx_ring;  	u32 num_tx_ring;  	dma_addr_t rx_desc_dma; diff --git a/drivers/net/ethernet/ti/cpsw.c b/drivers/net/ethernet/ti/cpsw.c index 75c48558e6f..df32a090d08 100644 --- a/drivers/net/ethernet/ti/cpsw.c +++ b/drivers/net/ethernet/ti/cpsw.c @@ -1364,7 +1364,7 @@ static int cpsw_probe_dt(struct cpsw_platform_data *data,  		struct platform_device *mdio;  		parp = of_get_property(slave_node, "phy_id", &lenp); -		if ((parp == NULL) && (lenp != (sizeof(void *) * 2))) { +		if ((parp == NULL) || (lenp != (sizeof(void *) * 2))) {  			pr_err("Missing slave[%d] phy_id property\n", i);  			ret = -EINVAL;  			goto error_ret; diff --git a/drivers/net/wireless/ath/ath9k/ar9003_calib.c b/drivers/net/wireless/ath/ath9k/ar9003_calib.c index 4cc13940c89..f76c3ca07a4 100644 --- a/drivers/net/wireless/ath/ath9k/ar9003_calib.c +++ b/drivers/net/wireless/ath/ath9k/ar9003_calib.c @@ -1023,6 +1023,7 @@ static bool ar9003_hw_init_cal(struct ath_hw *ah,  					  AR_PHY_AGC_CONTROL_FLTR_CAL   |  					  AR_PHY_AGC_CONTROL_PKDET_CAL; +	/* Use chip chainmask only for calibration */  	ar9003_hw_set_chain_masks(ah, ah->caps.rx_chainmask, ah->caps.tx_chainmask);  	if (rtt) { @@ -1150,6 +1151,9 @@ skip_tx_iqcal:  		ar9003_hw_rtt_disable(ah);  	} +	/* Revert chainmask to runtime parameters */ +	ar9003_hw_set_chain_masks(ah, ah->rxchainmask, ah->txchainmask); +  	/* Initialize list pointers */  	ah->cal_list = ah->cal_list_last = ah->cal_list_curr = NULL; diff --git a/drivers/net/wireless/ath/ath9k/link.c b/drivers/net/wireless/ath/ath9k/link.c index ade3afb21f9..39c84ecf6a4 100644 --- a/drivers/net/wireless/ath/ath9k/link.c +++ b/drivers/net/wireless/ath/ath9k/link.c @@ -28,21 +28,21 @@ void ath_tx_complete_poll_work(struct work_struct *work)  	int i;  	bool needreset = false; -	for (i = 0; i < ATH9K_NUM_TX_QUEUES; i++) -		if (ATH_TXQ_SETUP(sc, i)) { -			txq = &sc->tx.txq[i]; -			ath_txq_lock(sc, txq); -			if (txq->axq_depth) { -				if (txq->axq_tx_inprogress) { -					needreset = true; -					ath_txq_unlock(sc, txq); -					break; -				} else { -					txq->axq_tx_inprogress = true; -				} +	for (i = 0; i < IEEE80211_NUM_ACS; i++) { +		txq = sc->tx.txq_map[i]; + +		ath_txq_lock(sc, txq); +		if (txq->axq_depth) { +			if (txq->axq_tx_inprogress) { +				needreset = true; +				ath_txq_unlock(sc, txq); +				break; +			} else { +				txq->axq_tx_inprogress = true;  			} -			ath_txq_unlock_complete(sc, txq);  		} +		ath_txq_unlock_complete(sc, txq); +	}  	if (needreset) {  		ath_dbg(ath9k_hw_common(sc->sc_ah), RESET, diff --git a/drivers/net/wireless/iwlegacy/3945-mac.c b/drivers/net/wireless/iwlegacy/3945-mac.c index 3630a41df50..c353b5f19c8 100644 --- a/drivers/net/wireless/iwlegacy/3945-mac.c +++ b/drivers/net/wireless/iwlegacy/3945-mac.c @@ -475,6 +475,7 @@ il3945_tx_skb(struct il_priv *il,  	dma_addr_t txcmd_phys;  	int txq_id = skb_get_queue_mapping(skb);  	u16 len, idx, hdr_len; +	u16 firstlen, secondlen;  	u8 id;  	u8 unicast;  	u8 sta_id; @@ -589,21 +590,22 @@ il3945_tx_skb(struct il_priv *il,  	len =  	    sizeof(struct il3945_tx_cmd) + sizeof(struct il_cmd_header) +  	    hdr_len; -	len = (len + 3) & ~3; +	firstlen = (len + 3) & ~3;  	/* Physical address of this Tx command's header (not MAC header!),  	 * within command buffer array. */  	txcmd_phys = -	    pci_map_single(il->pci_dev, &out_cmd->hdr, len, PCI_DMA_TODEVICE); +	    pci_map_single(il->pci_dev, &out_cmd->hdr, firstlen, +			   PCI_DMA_TODEVICE);  	if (unlikely(pci_dma_mapping_error(il->pci_dev, txcmd_phys)))  		goto drop_unlock;  	/* Set up TFD's 2nd entry to point directly to remainder of skb,  	 * if any (802.11 null frames have no payload). */ -	len = skb->len - hdr_len; -	if (len) { +	secondlen = skb->len - hdr_len; +	if (secondlen > 0) {  		phys_addr = -		    pci_map_single(il->pci_dev, skb->data + hdr_len, len, +		    pci_map_single(il->pci_dev, skb->data + hdr_len, secondlen,  				   PCI_DMA_TODEVICE);  		if (unlikely(pci_dma_mapping_error(il->pci_dev, phys_addr)))  			goto drop_unlock; @@ -611,12 +613,12 @@ il3945_tx_skb(struct il_priv *il,  	/* Add buffer containing Tx command and MAC(!) header to TFD's  	 * first entry */ -	il->ops->txq_attach_buf_to_tfd(il, txq, txcmd_phys, len, 1, 0); +	il->ops->txq_attach_buf_to_tfd(il, txq, txcmd_phys, firstlen, 1, 0);  	dma_unmap_addr_set(out_meta, mapping, txcmd_phys); -	dma_unmap_len_set(out_meta, len, len); -	if (len) -		il->ops->txq_attach_buf_to_tfd(il, txq, phys_addr, len, 0, -					       U32_PAD(len)); +	dma_unmap_len_set(out_meta, len, firstlen); +	if (secondlen > 0) +		il->ops->txq_attach_buf_to_tfd(il, txq, phys_addr, secondlen, 0, +					       U32_PAD(secondlen));  	if (!ieee80211_has_morefrags(hdr->frame_control)) {  		txq->need_update = 1; diff --git a/drivers/net/wireless/mwifiex/cmdevt.c b/drivers/net/wireless/mwifiex/cmdevt.c index 20a6c555587..b5c8b962ce1 100644 --- a/drivers/net/wireless/mwifiex/cmdevt.c +++ b/drivers/net/wireless/mwifiex/cmdevt.c @@ -157,6 +157,20 @@ static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,  		return -1;  	} +	cmd_code = le16_to_cpu(host_cmd->command); +	cmd_size = le16_to_cpu(host_cmd->size); + +	if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET && +	    cmd_code != HostCmd_CMD_FUNC_SHUTDOWN && +	    cmd_code != HostCmd_CMD_FUNC_INIT) { +		dev_err(adapter->dev, +			"DNLD_CMD: FW in reset state, ignore cmd %#x\n", +			cmd_code); +		mwifiex_complete_cmd(adapter, cmd_node); +		mwifiex_insert_cmd_to_free_q(adapter, cmd_node); +		return -1; +	} +  	/* Set command sequence number */  	adapter->seq_num++;  	host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO @@ -168,9 +182,6 @@ static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,  	adapter->curr_cmd = cmd_node;  	spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags); -	cmd_code = le16_to_cpu(host_cmd->command); -	cmd_size = le16_to_cpu(host_cmd->size); -  	/* Adjust skb length */  	if (cmd_node->cmd_skb->len > cmd_size)  		/* @@ -484,8 +495,6 @@ int mwifiex_send_cmd_sync(struct mwifiex_private *priv, uint16_t cmd_no,  	ret = mwifiex_send_cmd_async(priv, cmd_no, cmd_action, cmd_oid,  				     data_buf); -	if (!ret) -		ret = mwifiex_wait_queue_complete(adapter);  	return ret;  } @@ -588,9 +597,10 @@ int mwifiex_send_cmd_async(struct mwifiex_private *priv, uint16_t cmd_no,  	if (cmd_no == HostCmd_CMD_802_11_SCAN) {  		mwifiex_queue_scan_cmd(priv, cmd_node);  	} else { -		adapter->cmd_queued = cmd_node;  		mwifiex_insert_cmd_to_pending_q(adapter, cmd_node, true);  		queue_work(adapter->workqueue, &adapter->main_work); +		if (cmd_node->wait_q_enabled) +			ret = mwifiex_wait_queue_complete(adapter, cmd_node);  	}  	return ret; diff --git a/drivers/net/wireless/mwifiex/init.c b/drivers/net/wireless/mwifiex/init.c index e38aa9b3663..0ff4c37ab42 100644 --- a/drivers/net/wireless/mwifiex/init.c +++ b/drivers/net/wireless/mwifiex/init.c @@ -709,6 +709,14 @@ mwifiex_shutdown_drv(struct mwifiex_adapter *adapter)  		return ret;  	} +	/* cancel current command */ +	if (adapter->curr_cmd) { +		dev_warn(adapter->dev, "curr_cmd is still in processing\n"); +		del_timer(&adapter->cmd_timer); +		mwifiex_insert_cmd_to_free_q(adapter, adapter->curr_cmd); +		adapter->curr_cmd = NULL; +	} +  	/* shut down mwifiex */  	dev_dbg(adapter->dev, "info: shutdown mwifiex...\n"); diff --git a/drivers/net/wireless/mwifiex/main.h b/drivers/net/wireless/mwifiex/main.h index 553adfb0aa8..7035ade9af7 100644 --- a/drivers/net/wireless/mwifiex/main.h +++ b/drivers/net/wireless/mwifiex/main.h @@ -723,7 +723,6 @@ struct mwifiex_adapter {  	u16 cmd_wait_q_required;  	struct mwifiex_wait_queue cmd_wait_q;  	u8 scan_wait_q_woken; -	struct cmd_ctrl_node *cmd_queued;  	spinlock_t queue_lock;		/* lock for tx queues */  	struct completion fw_load;  	u8 country_code[IEEE80211_COUNTRY_STRING_LEN]; @@ -1018,7 +1017,8 @@ int mwifiex_request_set_multicast_list(struct mwifiex_private *priv,  			struct mwifiex_multicast_list *mcast_list);  int mwifiex_copy_mcast_addr(struct mwifiex_multicast_list *mlist,  			    struct net_device *dev); -int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter); +int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter, +				struct cmd_ctrl_node *cmd_queued);  int mwifiex_bss_start(struct mwifiex_private *priv, struct cfg80211_bss *bss,  		      struct cfg80211_ssid *req_ssid);  int mwifiex_cancel_hs(struct mwifiex_private *priv, int cmd_type); diff --git a/drivers/net/wireless/mwifiex/scan.c b/drivers/net/wireless/mwifiex/scan.c index bb60c2754a9..d215b4d3c51 100644 --- a/drivers/net/wireless/mwifiex/scan.c +++ b/drivers/net/wireless/mwifiex/scan.c @@ -1388,10 +1388,13 @@ int mwifiex_scan_networks(struct mwifiex_private *priv,  			list_del(&cmd_node->list);  			spin_unlock_irqrestore(&adapter->scan_pending_q_lock,  					       flags); -			adapter->cmd_queued = cmd_node;  			mwifiex_insert_cmd_to_pending_q(adapter, cmd_node,  							true);  			queue_work(adapter->workqueue, &adapter->main_work); + +			/* Perform internal scan synchronously */ +			if (!priv->scan_request) +				mwifiex_wait_queue_complete(adapter, cmd_node);  		} else {  			spin_unlock_irqrestore(&adapter->scan_pending_q_lock,  					       flags); @@ -1946,9 +1949,6 @@ int mwifiex_request_scan(struct mwifiex_private *priv,  		/* Normal scan */  		ret = mwifiex_scan_networks(priv, NULL); -	if (!ret) -		ret = mwifiex_wait_queue_complete(priv->adapter); -  	up(&priv->async_sem);  	return ret; diff --git a/drivers/net/wireless/mwifiex/sta_ioctl.c b/drivers/net/wireless/mwifiex/sta_ioctl.c index 9f33c92c90f..13100f8de3d 100644 --- a/drivers/net/wireless/mwifiex/sta_ioctl.c +++ b/drivers/net/wireless/mwifiex/sta_ioctl.c @@ -54,16 +54,10 @@ int mwifiex_copy_mcast_addr(struct mwifiex_multicast_list *mlist,   * This function waits on a cmd wait queue. It also cancels the pending   * request after waking up, in case of errors.   */ -int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter) +int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter, +				struct cmd_ctrl_node *cmd_queued)  {  	int status; -	struct cmd_ctrl_node *cmd_queued; - -	if (!adapter->cmd_queued) -		return 0; - -	cmd_queued = adapter->cmd_queued; -	adapter->cmd_queued = NULL;  	dev_dbg(adapter->dev, "cmd pending\n");  	atomic_inc(&adapter->cmd_pending); diff --git a/drivers/net/wireless/rtlwifi/usb.c b/drivers/net/wireless/rtlwifi/usb.c index 156b52732f3..5847d6d0881 100644 --- a/drivers/net/wireless/rtlwifi/usb.c +++ b/drivers/net/wireless/rtlwifi/usb.c @@ -851,6 +851,7 @@ static void _rtl_usb_transmit(struct ieee80211_hw *hw, struct sk_buff *skb,  	if (unlikely(!_urb)) {  		RT_TRACE(rtlpriv, COMP_ERR, DBG_EMERG,  			 "Can't allocate urb. Drop skb!\n"); +		kfree_skb(skb);  		return;  	}  	_rtl_submit_tx_urb(hw, _urb); diff --git a/drivers/pinctrl/mvebu/pinctrl-mvebu.c b/drivers/pinctrl/mvebu/pinctrl-mvebu.c index c689c04a4f5..2d2f0a43d36 100644 --- a/drivers/pinctrl/mvebu/pinctrl-mvebu.c +++ b/drivers/pinctrl/mvebu/pinctrl-mvebu.c @@ -620,7 +620,7 @@ int mvebu_pinctrl_probe(struct platform_device *pdev)  		/* special soc specific control */  		if (ctrl->mpp_get || ctrl->mpp_set) { -			if (!ctrl->name || !ctrl->mpp_set || !ctrl->mpp_set) { +			if (!ctrl->name || !ctrl->mpp_get || !ctrl->mpp_set) {  				dev_err(&pdev->dev, "wrong soc control info\n");  				return -EINVAL;  			} diff --git a/drivers/pinctrl/pinconf.c b/drivers/pinctrl/pinconf.c index ac8d382a79b..d611ecfcbf7 100644 --- a/drivers/pinctrl/pinconf.c +++ b/drivers/pinctrl/pinconf.c @@ -622,7 +622,7 @@ static const struct file_operations pinconf_dbg_pinname_fops = {  static int pinconf_dbg_state_print(struct seq_file *s, void *d)  {  	if (strlen(dbg_state_name)) -		seq_printf(s, "%s\n", dbg_pinname); +		seq_printf(s, "%s\n", dbg_state_name);  	else  		seq_printf(s, "No pin state set\n");  	return 0; diff --git a/drivers/pinctrl/pinconf.h b/drivers/pinctrl/pinconf.h index e3ed8cb072a..bfda73d64ee 100644 --- a/drivers/pinctrl/pinconf.h +++ b/drivers/pinctrl/pinconf.h @@ -90,7 +90,7 @@ static inline void pinconf_init_device_debugfs(struct dentry *devroot,   * pin config.   */ -#ifdef CONFIG_GENERIC_PINCONF +#if defined(CONFIG_GENERIC_PINCONF) && defined(CONFIG_DEBUG_FS)  void pinconf_generic_dump_pin(struct pinctrl_dev *pctldev,  			      struct seq_file *s, unsigned pin); diff --git a/drivers/pinctrl/pinctrl-abx500.c b/drivers/pinctrl/pinctrl-abx500.c index caecdd37306..c542a97c82f 100644 --- a/drivers/pinctrl/pinctrl-abx500.c +++ b/drivers/pinctrl/pinctrl-abx500.c @@ -422,7 +422,7 @@ static u8 abx500_get_mode(struct pinctrl_dev *pctldev, struct gpio_chip *chip,  	}  	/* check if pin use AlternateFunction register */ -	if ((af.alt_bit1 == UNUSED) && (af.alt_bit1 == UNUSED)) +	if ((af.alt_bit1 == UNUSED) && (af.alt_bit2 == UNUSED))  		return mode;  	/*  	 * if pin GPIOSEL bit is set and pin supports alternate function, diff --git a/drivers/pinctrl/pinmux.c b/drivers/pinctrl/pinmux.c index 1a00658b3ea..bd83c8b01cd 100644 --- a/drivers/pinctrl/pinmux.c +++ b/drivers/pinctrl/pinmux.c @@ -194,6 +194,11 @@ static const char *pin_free(struct pinctrl_dev *pctldev, int pin,  	}  	if (!gpio_range) { +		/* +		 * A pin should not be freed more times than allocated. +		 */ +		if (WARN_ON(!desc->mux_usecount)) +			return NULL;  		desc->mux_usecount--;  		if (desc->mux_usecount)  			return NULL; diff --git a/drivers/staging/comedi/drivers/s626.c b/drivers/staging/comedi/drivers/s626.c index 81a1fe66157..71a73ec5af8 100644 --- a/drivers/staging/comedi/drivers/s626.c +++ b/drivers/staging/comedi/drivers/s626.c @@ -1483,7 +1483,7 @@ static int s626_ai_cmd(struct comedi_device *dev, struct comedi_subdevice *s)  	case TRIG_NONE:  		/*  continous acquisition */  		devpriv->ai_continous = 1; -		devpriv->ai_sample_count = 0; +		devpriv->ai_sample_count = 1;  		break;  	} diff --git a/drivers/staging/zcache/Kconfig b/drivers/staging/zcache/Kconfig index 73582705e8c..5c371453096 100644 --- a/drivers/staging/zcache/Kconfig +++ b/drivers/staging/zcache/Kconfig @@ -15,7 +15,7 @@ config RAMSTER  	depends on CONFIGFS_FS=y && SYSFS=y && !HIGHMEM && ZCACHE=y  	depends on NET  	# must ensure struct page is 8-byte aligned -	select HAVE_ALIGNED_STRUCT_PAGE if !64_BIT +	select HAVE_ALIGNED_STRUCT_PAGE if !64BIT  	default n  	help  	  RAMster allows RAM on other machines in a cluster to be utilized diff --git a/drivers/target/target_core_transport.c b/drivers/target/target_core_transport.c index 2030b608136..3243ea790ea 100644 --- a/drivers/target/target_core_transport.c +++ b/drivers/target/target_core_transport.c @@ -1139,8 +1139,10 @@ target_setup_cmd_from_cdb(struct se_cmd *cmd, unsigned char *cdb)  		return ret;  	ret = target_check_reservation(cmd); -	if (ret) +	if (ret) { +		cmd->scsi_status = SAM_STAT_RESERVATION_CONFLICT;  		return ret; +	}  	ret = dev->transport->parse_cdb(cmd);  	if (ret) diff --git a/drivers/tty/serial/8250/8250.c b/drivers/tty/serial/8250/8250_core.c index cf6a5383748..35f9c96aada 100644 --- a/drivers/tty/serial/8250/8250.c +++ b/drivers/tty/serial/8250/8250_core.c @@ -3418,6 +3418,7 @@ MODULE_PARM_DESC(probe_rsa, "Probe I/O ports for RSA");  #endif  MODULE_ALIAS_CHARDEV_MAJOR(TTY_MAJOR); +#ifdef CONFIG_SERIAL_8250_DEPRECATED_OPTIONS  #ifndef MODULE  /* This module was renamed to 8250_core in 3.7.  Keep the old "8250" name   * working as well for the module options so we don't break people.  We @@ -3432,7 +3433,7 @@ MODULE_ALIAS_CHARDEV_MAJOR(TTY_MAJOR);  static void __used s8250_options(void)  {  #undef MODULE_PARAM_PREFIX -#define MODULE_PARAM_PREFIX "8250." +#define MODULE_PARAM_PREFIX "8250_core."  	module_param_cb(share_irqs, ¶m_ops_uint, &share_irqs, 0644);  	module_param_cb(nr_uarts, ¶m_ops_uint, &nr_uarts, 0644); @@ -3444,5 +3445,6 @@ static void __used s8250_options(void)  #endif  }  #else -MODULE_ALIAS("8250"); +MODULE_ALIAS("8250_core"); +#endif  #endif diff --git a/drivers/tty/serial/8250/8250_pci.c b/drivers/tty/serial/8250/8250_pci.c index aa76825229d..26e3a97ab15 100644 --- a/drivers/tty/serial/8250/8250_pci.c +++ b/drivers/tty/serial/8250/8250_pci.c @@ -1554,6 +1554,7 @@ pci_wch_ch353_setup(struct serial_private *priv,  #define PCI_DEVICE_ID_PLX_CRONYX_OMEGA	0xc001  #define PCI_DEVICE_ID_INTEL_PATSBURG_KT 0x1d3d  #define PCI_VENDOR_ID_WCH		0x4348 +#define PCI_DEVICE_ID_WCH_CH352_2S	0x3253  #define PCI_DEVICE_ID_WCH_CH353_4S	0x3453  #define PCI_DEVICE_ID_WCH_CH353_2S1PF	0x5046  #define PCI_DEVICE_ID_WCH_CH353_2S1P	0x7053 @@ -2172,6 +2173,14 @@ static struct pci_serial_quirk pci_serial_quirks[] __refdata = {  		.subdevice      = PCI_ANY_ID,  		.setup          = pci_wch_ch353_setup,  	}, +	/* WCH CH352 2S card (16550 clone) */ +	{ +		.vendor		= PCI_VENDOR_ID_WCH, +		.device		= PCI_DEVICE_ID_WCH_CH352_2S, +		.subvendor	= PCI_ANY_ID, +		.subdevice	= PCI_ANY_ID, +		.setup		= pci_wch_ch353_setup, +	},  	/*  	 * ASIX devices with FIFO bug  	 */ @@ -4870,6 +4879,10 @@ static struct pci_device_id serial_pci_tbl[] = {  		PCI_ANY_ID, PCI_ANY_ID,  		0, 0, pbn_b0_bt_2_115200 }, +	{	PCI_VENDOR_ID_WCH, PCI_DEVICE_ID_WCH_CH352_2S, +		PCI_ANY_ID, PCI_ANY_ID, +		0, 0, pbn_b0_bt_2_115200 }, +  	/*  	 * Commtech, Inc. Fastcom adapters  	 */ diff --git a/drivers/tty/serial/8250/Kconfig b/drivers/tty/serial/8250/Kconfig index 2ef9537bcb2..80fe91e64a5 100644 --- a/drivers/tty/serial/8250/Kconfig +++ b/drivers/tty/serial/8250/Kconfig @@ -33,6 +33,23 @@ config SERIAL_8250  	  Most people will say Y or M here, so that they can use serial mice,  	  modems and similar devices connecting to the standard serial ports. +config SERIAL_8250_DEPRECATED_OPTIONS +	bool "Support 8250_core.* kernel options (DEPRECATED)" +	depends on SERIAL_8250 +	default y +	---help--- +	  In 3.7 we renamed 8250 to 8250_core by mistake, so now we have to +	  accept kernel parameters in both forms like 8250_core.nr_uarts=4 and +	  8250.nr_uarts=4. We now renamed the module back to 8250, but if +	  anybody noticed in 3.7 and changed their userspace we still have to +	  keep the 8350_core.* options around until they revert the changes +	  they already did. + +	  If 8250 is built as a module, this adds 8250_core alias instead.  + +	  If you did not notice yet and/or you have userspace from pre-3.7, it +	  is safe (and recommended) to say N here. +  config SERIAL_8250_PNP  	bool "8250/16550 PNP device support" if EXPERT  	depends on SERIAL_8250 && PNP diff --git a/drivers/tty/serial/8250/Makefile b/drivers/tty/serial/8250/Makefile index a23838a4d53..36d68d05430 100644 --- a/drivers/tty/serial/8250/Makefile +++ b/drivers/tty/serial/8250/Makefile @@ -2,10 +2,10 @@  # Makefile for the 8250 serial device drivers.  # -obj-$(CONFIG_SERIAL_8250)		+= 8250_core.o -8250_core-y				:= 8250.o -8250_core-$(CONFIG_SERIAL_8250_PNP)	+= 8250_pnp.o -8250_core-$(CONFIG_SERIAL_8250_DMA)	+= 8250_dma.o +obj-$(CONFIG_SERIAL_8250)		+= 8250.o +8250-y					:= 8250_core.o +8250-$(CONFIG_SERIAL_8250_PNP)		+= 8250_pnp.o +8250-$(CONFIG_SERIAL_8250_DMA)		+= 8250_dma.o  obj-$(CONFIG_SERIAL_8250_GSC)		+= 8250_gsc.o  obj-$(CONFIG_SERIAL_8250_PCI)		+= 8250_pci.o  obj-$(CONFIG_SERIAL_8250_HP300)		+= 8250_hp300.o diff --git a/drivers/tty/serial/atmel_serial.c b/drivers/tty/serial/atmel_serial.c index d4a7c241b75..3467462869c 100644 --- a/drivers/tty/serial/atmel_serial.c +++ b/drivers/tty/serial/atmel_serial.c @@ -158,7 +158,7 @@ struct atmel_uart_port {  };  static struct atmel_uart_port atmel_ports[ATMEL_MAX_UART]; -static unsigned long atmel_ports_in_use; +static DECLARE_BITMAP(atmel_ports_in_use, ATMEL_MAX_UART);  #ifdef SUPPORT_SYSRQ  static struct console atmel_console; @@ -1769,15 +1769,14 @@ static int atmel_serial_probe(struct platform_device *pdev)  	if (ret < 0)  		/* port id not found in platform data nor device-tree aliases:  		 * auto-enumerate it */ -		ret = find_first_zero_bit(&atmel_ports_in_use, -				sizeof(atmel_ports_in_use)); +		ret = find_first_zero_bit(atmel_ports_in_use, ATMEL_MAX_UART); -	if (ret > ATMEL_MAX_UART) { +	if (ret >= ATMEL_MAX_UART) {  		ret = -ENODEV;  		goto err;  	} -	if (test_and_set_bit(ret, &atmel_ports_in_use)) { +	if (test_and_set_bit(ret, atmel_ports_in_use)) {  		/* port already in use */  		ret = -EBUSY;  		goto err; @@ -1857,7 +1856,7 @@ static int atmel_serial_remove(struct platform_device *pdev)  	/* "port" is allocated statically, so we shouldn't free it */ -	clear_bit(port->line, &atmel_ports_in_use); +	clear_bit(port->line, atmel_ports_in_use);  	clk_put(atmel_port->clk); diff --git a/drivers/tty/serial/xilinx_uartps.c b/drivers/tty/serial/xilinx_uartps.c index ba451c7209f..f36bbba1ac8 100644 --- a/drivers/tty/serial/xilinx_uartps.c +++ b/drivers/tty/serial/xilinx_uartps.c @@ -578,6 +578,8 @@ static int xuartps_startup(struct uart_port *port)  	/* Receive Timeout register is enabled with value of 10 */  	xuartps_writel(10, XUARTPS_RXTOUT_OFFSET); +	/* Clear out any pending interrupts before enabling them */ +	xuartps_writel(xuartps_readl(XUARTPS_ISR_OFFSET), XUARTPS_ISR_OFFSET);  	/* Set the Interrupt Registers with desired interrupts */  	xuartps_writel(XUARTPS_IXR_TXEMPTY | XUARTPS_IXR_PARITY | diff --git a/drivers/tty/vt/vc_screen.c b/drivers/tty/vt/vc_screen.c index e4ca345873c..d7799deacb2 100644 --- a/drivers/tty/vt/vc_screen.c +++ b/drivers/tty/vt/vc_screen.c @@ -93,7 +93,7 @@ vcs_poll_data_free(struct vcs_poll_data *poll)  static struct vcs_poll_data *  vcs_poll_data_get(struct file *file)  { -	struct vcs_poll_data *poll = file->private_data; +	struct vcs_poll_data *poll = file->private_data, *kill = NULL;  	if (poll)  		return poll; @@ -122,10 +122,12 @@ vcs_poll_data_get(struct file *file)  		file->private_data = poll;  	} else {  		/* someone else raced ahead of us */ -		vcs_poll_data_free(poll); +		kill = poll;  		poll = file->private_data;  	}  	spin_unlock(&file->f_lock); +	if (kill) +		vcs_poll_data_free(kill);  	return poll;  } diff --git a/drivers/usb/core/hcd.c b/drivers/usb/core/hcd.c index 99b34a30354..f9ec44cbb82 100644 --- a/drivers/usb/core/hcd.c +++ b/drivers/usb/core/hcd.c @@ -2412,6 +2412,14 @@ int usb_hcd_is_primary_hcd(struct usb_hcd *hcd)  }  EXPORT_SYMBOL_GPL(usb_hcd_is_primary_hcd); +int usb_hcd_find_raw_port_number(struct usb_hcd *hcd, int port1) +{ +	if (!hcd->driver->find_raw_port_number) +		return port1; + +	return hcd->driver->find_raw_port_number(hcd, port1); +} +  static int usb_hcd_request_irqs(struct usb_hcd *hcd,  		unsigned int irqnum, unsigned long irqflags)  { diff --git a/drivers/usb/core/usb-acpi.c b/drivers/usb/core/usb-acpi.c index b6f4bad3f75..255c14464bf 100644 --- a/drivers/usb/core/usb-acpi.c +++ b/drivers/usb/core/usb-acpi.c @@ -15,6 +15,7 @@  #include <linux/kernel.h>  #include <linux/acpi.h>  #include <linux/pci.h> +#include <linux/usb/hcd.h>  #include <acpi/acpi_bus.h>  #include "usb.h" @@ -188,8 +189,13 @@ static int usb_acpi_find_device(struct device *dev, acpi_handle *handle)  		 * connected to.  		 */  		if (!udev->parent) { -			*handle = acpi_get_child(DEVICE_ACPI_HANDLE(&udev->dev), +			struct usb_hcd *hcd = bus_to_hcd(udev->bus); +			int raw_port_num; + +			raw_port_num = usb_hcd_find_raw_port_number(hcd,  				port_num); +			*handle = acpi_get_child(DEVICE_ACPI_HANDLE(&udev->dev), +				raw_port_num);  			if (!*handle)  				return -ENODEV;  		} else { diff --git a/drivers/usb/gadget/Kconfig b/drivers/usb/gadget/Kconfig index 5a0c541daf8..c7525b1cad7 100644 --- a/drivers/usb/gadget/Kconfig +++ b/drivers/usb/gadget/Kconfig @@ -145,6 +145,7 @@ config USB_LPC32XX  	tristate "LPC32XX USB Peripheral Controller"  	depends on ARCH_LPC32XX  	select USB_ISP1301 +	select USB_OTG_UTILS  	help  	   This option selects the USB device controller in the LPC32xx SoC. diff --git a/drivers/usb/host/ehci-sched.c b/drivers/usb/host/ehci-sched.c index b476daf49f6..010f686d888 100644 --- a/drivers/usb/host/ehci-sched.c +++ b/drivers/usb/host/ehci-sched.c @@ -1214,6 +1214,7 @@ itd_urb_transaction (  		memset (itd, 0, sizeof *itd);  		itd->itd_dma = itd_dma; +		itd->frame = 9999;		/* an invalid value */  		list_add (&itd->itd_list, &sched->td_list);  	}  	spin_unlock_irqrestore (&ehci->lock, flags); @@ -1915,6 +1916,7 @@ sitd_urb_transaction (  		memset (sitd, 0, sizeof *sitd);  		sitd->sitd_dma = sitd_dma; +		sitd->frame = 9999;		/* an invalid value */  		list_add (&sitd->sitd_list, &iso_sched->td_list);  	} diff --git a/drivers/usb/host/xhci-mem.c b/drivers/usb/host/xhci-mem.c index 35616ffbe3a..6dc238c592b 100644 --- a/drivers/usb/host/xhci-mem.c +++ b/drivers/usb/host/xhci-mem.c @@ -1022,44 +1022,24 @@ void xhci_copy_ep0_dequeue_into_input_ctx(struct xhci_hcd *xhci,   * is attached to (or the roothub port its ancestor hub is attached to).  All we   * know is the index of that port under either the USB 2.0 or the USB 3.0   * roothub, but that doesn't give us the real index into the HW port status - * registers.  Scan through the xHCI roothub port array, looking for the Nth - * entry of the correct port speed.  Return the port number of that entry. + * registers. Call xhci_find_raw_port_number() to get real index.   */  static u32 xhci_find_real_port_number(struct xhci_hcd *xhci,  		struct usb_device *udev)  {  	struct usb_device *top_dev; -	unsigned int num_similar_speed_ports; -	unsigned int faked_port_num; -	int i; +	struct usb_hcd *hcd; + +	if (udev->speed == USB_SPEED_SUPER) +		hcd = xhci->shared_hcd; +	else +		hcd = xhci->main_hcd;  	for (top_dev = udev; top_dev->parent && top_dev->parent->parent;  			top_dev = top_dev->parent)  		/* Found device below root hub */; -	faked_port_num = top_dev->portnum; -	for (i = 0, num_similar_speed_ports = 0; -			i < HCS_MAX_PORTS(xhci->hcs_params1); i++) { -		u8 port_speed = xhci->port_array[i]; - -		/* -		 * Skip ports that don't have known speeds, or have duplicate -		 * Extended Capabilities port speed entries. -		 */ -		if (port_speed == 0 || port_speed == DUPLICATE_ENTRY) -			continue; -		/* -		 * USB 3.0 ports are always under a USB 3.0 hub.  USB 2.0 and -		 * 1.1 ports are under the USB 2.0 hub.  If the port speed -		 * matches the device speed, it's a similar speed port. -		 */ -		if ((port_speed == 0x03) == (udev->speed == USB_SPEED_SUPER)) -			num_similar_speed_ports++; -		if (num_similar_speed_ports == faked_port_num) -			/* Roothub ports are numbered from 1 to N */ -			return i+1; -	} -	return 0; +	return	xhci_find_raw_port_number(hcd, top_dev->portnum);  }  /* Setup an xHCI virtual device for a Set Address command */ diff --git a/drivers/usb/host/xhci-pci.c b/drivers/usb/host/xhci-pci.c index af259e0ec17..1a30c380043 100644 --- a/drivers/usb/host/xhci-pci.c +++ b/drivers/usb/host/xhci-pci.c @@ -313,6 +313,7 @@ static const struct hc_driver xhci_pci_hc_driver = {  	.set_usb2_hw_lpm =	xhci_set_usb2_hardware_lpm,  	.enable_usb3_lpm_timeout =	xhci_enable_usb3_lpm_timeout,  	.disable_usb3_lpm_timeout =	xhci_disable_usb3_lpm_timeout, +	.find_raw_port_number =	xhci_find_raw_port_number,  };  /*-------------------------------------------------------------------------*/ diff --git a/drivers/usb/host/xhci-ring.c b/drivers/usb/host/xhci-ring.c index 88287546530..1969c001b3f 100644 --- a/drivers/usb/host/xhci-ring.c +++ b/drivers/usb/host/xhci-ring.c @@ -1599,14 +1599,20 @@ static void handle_port_status(struct xhci_hcd *xhci,  	max_ports = HCS_MAX_PORTS(xhci->hcs_params1);  	if ((port_id <= 0) || (port_id > max_ports)) {  		xhci_warn(xhci, "Invalid port id %d\n", port_id); -		bogus_port_status = true; -		goto cleanup; +		inc_deq(xhci, xhci->event_ring); +		return;  	}  	/* Figure out which usb_hcd this port is attached to:  	 * is it a USB 3.0 port or a USB 2.0/1.1 port?  	 */  	major_revision = xhci->port_array[port_id - 1]; + +	/* Find the right roothub. */ +	hcd = xhci_to_hcd(xhci); +	if ((major_revision == 0x03) != (hcd->speed == HCD_USB3)) +		hcd = xhci->shared_hcd; +  	if (major_revision == 0) {  		xhci_warn(xhci, "Event for port %u not in "  				"Extended Capabilities, ignoring.\n", @@ -1629,10 +1635,6 @@ static void handle_port_status(struct xhci_hcd *xhci,  	 * into the index into the ports on the correct split roothub, and the  	 * correct bus_state structure.  	 */ -	/* Find the right roothub. */ -	hcd = xhci_to_hcd(xhci); -	if ((major_revision == 0x03) != (hcd->speed == HCD_USB3)) -		hcd = xhci->shared_hcd;  	bus_state = &xhci->bus_state[hcd_index(hcd)];  	if (hcd->speed == HCD_USB3)  		port_array = xhci->usb3_ports; @@ -2027,8 +2029,8 @@ static int process_ctrl_td(struct xhci_hcd *xhci, struct xhci_td *td,  		if (event_trb != ep_ring->dequeue &&  				event_trb != td->last_trb)  			td->urb->actual_length = -				td->urb->transfer_buffer_length -				- TRB_LEN(le32_to_cpu(event->transfer_len)); +				td->urb->transfer_buffer_length - +				EVENT_TRB_LEN(le32_to_cpu(event->transfer_len));  		else  			td->urb->actual_length = 0; @@ -2060,7 +2062,7 @@ static int process_ctrl_td(struct xhci_hcd *xhci, struct xhci_td *td,  		/* Maybe the event was for the data stage? */  			td->urb->actual_length =  				td->urb->transfer_buffer_length - -				TRB_LEN(le32_to_cpu(event->transfer_len)); +				EVENT_TRB_LEN(le32_to_cpu(event->transfer_len));  			xhci_dbg(xhci, "Waiting for status "  					"stage event\n");  			return 0; @@ -2096,7 +2098,7 @@ static int process_isoc_td(struct xhci_hcd *xhci, struct xhci_td *td,  	/* handle completion code */  	switch (trb_comp_code) {  	case COMP_SUCCESS: -		if (TRB_LEN(le32_to_cpu(event->transfer_len)) == 0) { +		if (EVENT_TRB_LEN(le32_to_cpu(event->transfer_len)) == 0) {  			frame->status = 0;  			break;  		} @@ -2141,7 +2143,7 @@ static int process_isoc_td(struct xhci_hcd *xhci, struct xhci_td *td,  				len += TRB_LEN(le32_to_cpu(cur_trb->generic.field[2]));  		}  		len += TRB_LEN(le32_to_cpu(cur_trb->generic.field[2])) - -			TRB_LEN(le32_to_cpu(event->transfer_len)); +			EVENT_TRB_LEN(le32_to_cpu(event->transfer_len));  		if (trb_comp_code != COMP_STOP_INVAL) {  			frame->actual_length = len; @@ -2199,7 +2201,7 @@ static int process_bulk_intr_td(struct xhci_hcd *xhci, struct xhci_td *td,  	case COMP_SUCCESS:  		/* Double check that the HW transferred everything. */  		if (event_trb != td->last_trb || -				TRB_LEN(le32_to_cpu(event->transfer_len)) != 0) { +		    EVENT_TRB_LEN(le32_to_cpu(event->transfer_len)) != 0) {  			xhci_warn(xhci, "WARN Successful completion "  					"on short TX\n");  			if (td->urb->transfer_flags & URB_SHORT_NOT_OK) @@ -2227,18 +2229,18 @@ static int process_bulk_intr_td(struct xhci_hcd *xhci, struct xhci_td *td,  				"%d bytes untransferred\n",  				td->urb->ep->desc.bEndpointAddress,  				td->urb->transfer_buffer_length, -				TRB_LEN(le32_to_cpu(event->transfer_len))); +				EVENT_TRB_LEN(le32_to_cpu(event->transfer_len)));  	/* Fast path - was this the last TRB in the TD for this URB? */  	if (event_trb == td->last_trb) { -		if (TRB_LEN(le32_to_cpu(event->transfer_len)) != 0) { +		if (EVENT_TRB_LEN(le32_to_cpu(event->transfer_len)) != 0) {  			td->urb->actual_length =  				td->urb->transfer_buffer_length - -				TRB_LEN(le32_to_cpu(event->transfer_len)); +				EVENT_TRB_LEN(le32_to_cpu(event->transfer_len));  			if (td->urb->transfer_buffer_length <  					td->urb->actual_length) {  				xhci_warn(xhci, "HC gave bad length "  						"of %d bytes left\n", -					  TRB_LEN(le32_to_cpu(event->transfer_len))); +					  EVENT_TRB_LEN(le32_to_cpu(event->transfer_len)));  				td->urb->actual_length = 0;  				if (td->urb->transfer_flags & URB_SHORT_NOT_OK)  					*status = -EREMOTEIO; @@ -2280,7 +2282,7 @@ static int process_bulk_intr_td(struct xhci_hcd *xhci, struct xhci_td *td,  		if (trb_comp_code != COMP_STOP_INVAL)  			td->urb->actual_length +=  				TRB_LEN(le32_to_cpu(cur_trb->generic.field[2])) - -				TRB_LEN(le32_to_cpu(event->transfer_len)); +				EVENT_TRB_LEN(le32_to_cpu(event->transfer_len));  	}  	return finish_td(xhci, td, event_trb, event, ep, status, false); @@ -2368,7 +2370,7 @@ static int handle_tx_event(struct xhci_hcd *xhci,  	 * transfer type  	 */  	case COMP_SUCCESS: -		if (TRB_LEN(le32_to_cpu(event->transfer_len)) == 0) +		if (EVENT_TRB_LEN(le32_to_cpu(event->transfer_len)) == 0)  			break;  		if (xhci->quirks & XHCI_TRUST_TX_LENGTH)  			trb_comp_code = COMP_SHORT_TX; @@ -2461,14 +2463,21 @@ static int handle_tx_event(struct xhci_hcd *xhci,  		 * TD list.  		 */  		if (list_empty(&ep_ring->td_list)) { -			xhci_warn(xhci, "WARN Event TRB for slot %d ep %d " -					"with no TDs queued?\n", -				  TRB_TO_SLOT_ID(le32_to_cpu(event->flags)), -				  ep_index); -			xhci_dbg(xhci, "Event TRB with TRB type ID %u\n", -				 (le32_to_cpu(event->flags) & -				  TRB_TYPE_BITMASK)>>10); -			xhci_print_trb_offsets(xhci, (union xhci_trb *) event); +			/* +			 * A stopped endpoint may generate an extra completion +			 * event if the device was suspended.  Don't print +			 * warnings. +			 */ +			if (!(trb_comp_code == COMP_STOP || +						trb_comp_code == COMP_STOP_INVAL)) { +				xhci_warn(xhci, "WARN Event TRB for slot %d ep %d with no TDs queued?\n", +						TRB_TO_SLOT_ID(le32_to_cpu(event->flags)), +						ep_index); +				xhci_dbg(xhci, "Event TRB with TRB type ID %u\n", +						(le32_to_cpu(event->flags) & +						 TRB_TYPE_BITMASK)>>10); +				xhci_print_trb_offsets(xhci, (union xhci_trb *) event); +			}  			if (ep->skip) {  				ep->skip = false;  				xhci_dbg(xhci, "td_list is empty while skip " diff --git a/drivers/usb/host/xhci.c b/drivers/usb/host/xhci.c index 849470b1883..53b8f89a0b1 100644 --- a/drivers/usb/host/xhci.c +++ b/drivers/usb/host/xhci.c @@ -3779,6 +3779,28 @@ int xhci_address_device(struct usb_hcd *hcd, struct usb_device *udev)  	return 0;  } +/* + * Transfer the port index into real index in the HW port status + * registers. Caculate offset between the port's PORTSC register + * and port status base. Divide the number of per port register + * to get the real index. The raw port number bases 1. + */ +int xhci_find_raw_port_number(struct usb_hcd *hcd, int port1) +{ +	struct xhci_hcd *xhci = hcd_to_xhci(hcd); +	__le32 __iomem *base_addr = &xhci->op_regs->port_status_base; +	__le32 __iomem *addr; +	int raw_port; + +	if (hcd->speed != HCD_USB3) +		addr = xhci->usb2_ports[port1 - 1]; +	else +		addr = xhci->usb3_ports[port1 - 1]; + +	raw_port = (addr - base_addr)/NUM_PORT_REGS + 1; +	return raw_port; +} +  #ifdef CONFIG_USB_SUSPEND  /* BESL to HIRD Encoding array for USB2 LPM */ diff --git a/drivers/usb/host/xhci.h b/drivers/usb/host/xhci.h index 2c510e4a7d4..63582719e0f 100644 --- a/drivers/usb/host/xhci.h +++ b/drivers/usb/host/xhci.h @@ -972,6 +972,10 @@ struct xhci_transfer_event {  	__le32	flags;  }; +/* Transfer event TRB length bit mask */ +/* bits 0:23 */ +#define	EVENT_TRB_LEN(p)		((p) & 0xffffff) +  /** Transfer Event bit fields **/  #define	TRB_TO_EP_ID(p)	(((p) >> 16) & 0x1f) @@ -1829,6 +1833,7 @@ void xhci_test_and_clear_bit(struct xhci_hcd *xhci, __le32 __iomem **port_array,  int xhci_hub_control(struct usb_hcd *hcd, u16 typeReq, u16 wValue, u16 wIndex,  		char *buf, u16 wLength);  int xhci_hub_status_data(struct usb_hcd *hcd, char *buf); +int xhci_find_raw_port_number(struct usb_hcd *hcd, int port1);  #ifdef CONFIG_PM  int xhci_bus_suspend(struct usb_hcd *hcd); diff --git a/drivers/usb/phy/Kconfig b/drivers/usb/phy/Kconfig index 65217a59006..90549382eba 100644 --- a/drivers/usb/phy/Kconfig +++ b/drivers/usb/phy/Kconfig @@ -38,6 +38,7 @@ config USB_ISP1301  	tristate "NXP ISP1301 USB transceiver support"  	depends on USB || USB_GADGET  	depends on I2C +	select USB_OTG_UTILS  	help  	  Say Y here to add support for the NXP ISP1301 USB transceiver driver.  	  This chip is typically used as USB transceiver for USB host, gadget diff --git a/drivers/usb/serial/ftdi_sio.c b/drivers/usb/serial/ftdi_sio.c index d4809d55147..9886180e45f 100644 --- a/drivers/usb/serial/ftdi_sio.c +++ b/drivers/usb/serial/ftdi_sio.c @@ -640,6 +640,7 @@ static struct usb_device_id id_table_combined [] = {  	{ USB_DEVICE(FTDI_VID, FTDI_RM_CANVIEW_PID) },  	{ USB_DEVICE(ACTON_VID, ACTON_SPECTRAPRO_PID) },  	{ USB_DEVICE(CONTEC_VID, CONTEC_COM1USBH_PID) }, +	{ USB_DEVICE(MITSUBISHI_VID, MITSUBISHI_FXUSB_PID) },  	{ USB_DEVICE(BANDB_VID, BANDB_USOTL4_PID) },  	{ USB_DEVICE(BANDB_VID, BANDB_USTL4_PID) },  	{ USB_DEVICE(BANDB_VID, BANDB_USO9ML2_PID) }, diff --git a/drivers/usb/serial/ftdi_sio_ids.h b/drivers/usb/serial/ftdi_sio_ids.h index 9d359e189a6..e79861eeed4 100644 --- a/drivers/usb/serial/ftdi_sio_ids.h +++ b/drivers/usb/serial/ftdi_sio_ids.h @@ -584,6 +584,13 @@  #define CONTEC_COM1USBH_PID	0x8311	/* COM-1(USB)H */  /* + * Mitsubishi Electric Corp. (http://www.meau.com) + * Submitted by Konstantin Holoborodko + */ +#define MITSUBISHI_VID		0x06D3 +#define MITSUBISHI_FXUSB_PID	0x0284 /* USB/RS422 converters: FX-USB-AW/-BD */ + +/*   * Definitions for B&B Electronics products.   */  #define BANDB_VID		0x0856	/* B&B Electronics Vendor ID */ diff --git a/drivers/usb/serial/usb-serial.c b/drivers/usb/serial/usb-serial.c index 2e70efa08b7..5d9b178484f 100644 --- a/drivers/usb/serial/usb-serial.c +++ b/drivers/usb/serial/usb-serial.c @@ -903,6 +903,7 @@ static int usb_serial_probe(struct usb_interface *interface,  		port->port.ops = &serial_port_ops;  		port->serial = serial;  		spin_lock_init(&port->lock); +		init_waitqueue_head(&port->delta_msr_wait);  		/* Keep this for private driver use for the moment but  		   should probably go away */  		INIT_WORK(&port->work, usb_serial_port_work); diff --git a/drivers/vhost/tcm_vhost.c b/drivers/vhost/tcm_vhost.c index 43fb11ee2e8..2968b493465 100644 --- a/drivers/vhost/tcm_vhost.c +++ b/drivers/vhost/tcm_vhost.c @@ -60,6 +60,15 @@ enum {  	VHOST_SCSI_VQ_IO = 2,  }; +/* + * VIRTIO_RING_F_EVENT_IDX seems broken. Not sure the bug is in + * kernel but disabling it helps. + * TODO: debug and remove the workaround. + */ +enum { +	VHOST_SCSI_FEATURES = VHOST_FEATURES & (~VIRTIO_RING_F_EVENT_IDX) +}; +  #define VHOST_SCSI_MAX_TARGET	256  #define VHOST_SCSI_MAX_VQ	128 @@ -946,7 +955,7 @@ static void vhost_scsi_flush(struct vhost_scsi *vs)  static int vhost_scsi_set_features(struct vhost_scsi *vs, u64 features)  { -	if (features & ~VHOST_FEATURES) +	if (features & ~VHOST_SCSI_FEATURES)  		return -EOPNOTSUPP;  	mutex_lock(&vs->dev.mutex); @@ -992,7 +1001,7 @@ static long vhost_scsi_ioctl(struct file *f, unsigned int ioctl,  			return -EFAULT;  		return 0;  	case VHOST_GET_FEATURES: -		features = VHOST_FEATURES; +		features = VHOST_SCSI_FEATURES;  		if (copy_to_user(featurep, &features, sizeof features))  			return -EFAULT;  		return 0; diff --git a/drivers/video/mxsfb.c b/drivers/video/mxsfb.c index 755556ca5b2..45169cbaba6 100644 --- a/drivers/video/mxsfb.c +++ b/drivers/video/mxsfb.c @@ -169,6 +169,7 @@ struct mxsfb_info {  	unsigned dotclk_delay;  	const struct mxsfb_devdata *devdata;  	int mapped; +	u32 sync;  };  #define mxsfb_is_v3(host) (host->devdata->ipversion == 3) @@ -456,9 +457,9 @@ static int mxsfb_set_par(struct fb_info *fb_info)  		vdctrl0 |= VDCTRL0_HSYNC_ACT_HIGH;  	if (fb_info->var.sync & FB_SYNC_VERT_HIGH_ACT)  		vdctrl0 |= VDCTRL0_VSYNC_ACT_HIGH; -	if (fb_info->var.sync & FB_SYNC_DATA_ENABLE_HIGH_ACT) +	if (host->sync & MXSFB_SYNC_DATA_ENABLE_HIGH_ACT)  		vdctrl0 |= VDCTRL0_ENABLE_ACT_HIGH; -	if (fb_info->var.sync & FB_SYNC_DOTCLK_FAILING_ACT) +	if (host->sync & MXSFB_SYNC_DOTCLK_FAILING_ACT)  		vdctrl0 |= VDCTRL0_DOTCLK_ACT_FAILING;  	writel(vdctrl0, host->base + LCDC_VDCTRL0); @@ -861,6 +862,8 @@ static int mxsfb_probe(struct platform_device *pdev)  	INIT_LIST_HEAD(&fb_info->modelist); +	host->sync = pdata->sync; +  	ret = mxsfb_init_fbinfo(host);  	if (ret != 0)  		goto error_init_fb; diff --git a/drivers/video/omap/omapfb_main.c b/drivers/video/omap/omapfb_main.c index e31f5b33b50..d40612c31a9 100644 --- a/drivers/video/omap/omapfb_main.c +++ b/drivers/video/omap/omapfb_main.c @@ -32,6 +32,8 @@  #include <linux/omap-dma.h> +#include <mach/hardware.h> +  #include "omapfb.h"  #include "lcdc.h" diff --git a/drivers/video/omap2/displays/panel-tpo-td043mtea1.c b/drivers/video/omap2/displays/panel-tpo-td043mtea1.c index 6b6643911d2..048c98381ef 100644 --- a/drivers/video/omap2/displays/panel-tpo-td043mtea1.c +++ b/drivers/video/omap2/displays/panel-tpo-td043mtea1.c @@ -63,6 +63,9 @@ struct tpo_td043_device {  	u32 power_on_resume:1;  }; +/* used to pass spi_device from SPI to DSS portion of the driver */ +static struct tpo_td043_device *g_tpo_td043; +  static int tpo_td043_write(struct spi_device *spi, u8 addr, u8 data)  {  	struct spi_message	m; @@ -403,7 +406,7 @@ static void tpo_td043_disable(struct omap_dss_device *dssdev)  static int tpo_td043_probe(struct omap_dss_device *dssdev)  { -	struct tpo_td043_device *tpo_td043 = dev_get_drvdata(&dssdev->dev); +	struct tpo_td043_device *tpo_td043 = g_tpo_td043;  	int nreset_gpio = dssdev->reset_gpio;  	int ret = 0; @@ -440,6 +443,8 @@ static int tpo_td043_probe(struct omap_dss_device *dssdev)  	if (ret)  		dev_warn(&dssdev->dev, "failed to create sysfs files\n"); +	dev_set_drvdata(&dssdev->dev, tpo_td043); +  	return 0;  fail_gpio_req: @@ -505,6 +510,9 @@ static int tpo_td043_spi_probe(struct spi_device *spi)  		return -ENODEV;  	} +	if (g_tpo_td043 != NULL) +		return -EBUSY; +  	spi->bits_per_word = 16;  	spi->mode = SPI_MODE_0; @@ -521,7 +529,7 @@ static int tpo_td043_spi_probe(struct spi_device *spi)  	tpo_td043->spi = spi;  	tpo_td043->nreset_gpio = dssdev->reset_gpio;  	dev_set_drvdata(&spi->dev, tpo_td043); -	dev_set_drvdata(&dssdev->dev, tpo_td043); +	g_tpo_td043 = tpo_td043;  	omap_dss_register_driver(&tpo_td043_driver); @@ -534,6 +542,7 @@ static int tpo_td043_spi_remove(struct spi_device *spi)  	omap_dss_unregister_driver(&tpo_td043_driver);  	kfree(tpo_td043); +	g_tpo_td043 = NULL;  	return 0;  } diff --git a/drivers/video/omap2/dss/dss_features.c b/drivers/video/omap2/dss/dss_features.c index d7d66ef5cb5..7f791aeda4d 100644 --- a/drivers/video/omap2/dss/dss_features.c +++ b/drivers/video/omap2/dss/dss_features.c @@ -202,12 +202,10 @@ static const enum omap_dss_output_id omap3630_dss_supported_outputs[] = {  static const enum omap_dss_output_id omap4_dss_supported_outputs[] = {  	/* OMAP_DSS_CHANNEL_LCD */ -	OMAP_DSS_OUTPUT_DPI | OMAP_DSS_OUTPUT_DBI | -	OMAP_DSS_OUTPUT_DSI1, +	OMAP_DSS_OUTPUT_DBI | OMAP_DSS_OUTPUT_DSI1,  	/* OMAP_DSS_CHANNEL_DIGIT */ -	OMAP_DSS_OUTPUT_VENC | OMAP_DSS_OUTPUT_HDMI | -	OMAP_DSS_OUTPUT_DPI, +	OMAP_DSS_OUTPUT_VENC | OMAP_DSS_OUTPUT_HDMI,  	/* OMAP_DSS_CHANNEL_LCD2 */  	OMAP_DSS_OUTPUT_DPI | OMAP_DSS_OUTPUT_DBI | diff --git a/drivers/xen/Kconfig b/drivers/xen/Kconfig index 5a32232cf7c..67af155cf60 100644 --- a/drivers/xen/Kconfig +++ b/drivers/xen/Kconfig @@ -182,7 +182,7 @@ config XEN_PRIVCMD  config XEN_STUB  	bool "Xen stub drivers" -	depends on XEN && X86_64 +	depends on XEN && X86_64 && BROKEN  	default n  	help  	  Allow kernel to install stub drivers, to reserve space for Xen drivers, diff --git a/drivers/xen/events.c b/drivers/xen/events.c index d17aa41a904..aa85881d17b 100644 --- a/drivers/xen/events.c +++ b/drivers/xen/events.c @@ -403,11 +403,23 @@ static void unmask_evtchn(int port)  	if (unlikely((cpu != cpu_from_evtchn(port))))  		do_hypercall = 1; -	else +	else { +		/* +		 * Need to clear the mask before checking pending to +		 * avoid a race with an event becoming pending. +		 * +		 * EVTCHNOP_unmask will only trigger an upcall if the +		 * mask bit was set, so if a hypercall is needed +		 * remask the event. +		 */ +		sync_clear_bit(port, BM(&s->evtchn_mask[0]));  		evtchn_pending = sync_test_bit(port, BM(&s->evtchn_pending[0])); -	if (unlikely(evtchn_pending && xen_hvm_domain())) -		do_hypercall = 1; +		if (unlikely(evtchn_pending && xen_hvm_domain())) { +			sync_set_bit(port, BM(&s->evtchn_mask[0])); +			do_hypercall = 1; +		} +	}  	/* Slow path (hypercall) if this is a non-local port or if this is  	 * an hvm domain and an event is pending (hvm domains don't have @@ -418,8 +430,6 @@ static void unmask_evtchn(int port)  	} else {  		struct vcpu_info *vcpu_info = __this_cpu_read(xen_vcpu); -		sync_clear_bit(port, BM(&s->evtchn_mask[0])); -  		/*  		 * The following is basically the equivalent of  		 * 'hw_resend_irq'. Just like a real IO-APIC we 'lose diff --git a/drivers/xen/fallback.c b/drivers/xen/fallback.c index 0ef7c4d40f8..b04fb64c5a9 100644 --- a/drivers/xen/fallback.c +++ b/drivers/xen/fallback.c @@ -44,7 +44,7 @@ int xen_event_channel_op_compat(int cmd, void *arg)  }  EXPORT_SYMBOL_GPL(xen_event_channel_op_compat); -int HYPERVISOR_physdev_op_compat(int cmd, void *arg) +int xen_physdev_op_compat(int cmd, void *arg)  {  	struct physdev_op op;  	int rc; @@ -78,3 +78,4 @@ int HYPERVISOR_physdev_op_compat(int cmd, void *arg)  	return rc;  } +EXPORT_SYMBOL_GPL(xen_physdev_op_compat); diff --git a/drivers/xen/xen-acpi-processor.c b/drivers/xen/xen-acpi-processor.c index f3278a6603c..90e34ac7e52 100644 --- a/drivers/xen/xen-acpi-processor.c +++ b/drivers/xen/xen-acpi-processor.c @@ -505,6 +505,9 @@ static int __init xen_acpi_processor_init(void)  		pr = per_cpu(processors, i);  		perf = per_cpu_ptr(acpi_perf_data, i); +		if (!pr) +			continue; +  		pr->performance = perf;  		rc = acpi_processor_get_performance_info(pr);  		if (rc) diff --git a/drivers/xen/xen-pciback/pci_stub.c b/drivers/xen/xen-pciback/pci_stub.c index 9204126f156..a2278ba7fb2 100644 --- a/drivers/xen/xen-pciback/pci_stub.c +++ b/drivers/xen/xen-pciback/pci_stub.c @@ -17,6 +17,7 @@  #include <xen/events.h>  #include <asm/xen/pci.h>  #include <asm/xen/hypervisor.h> +#include <xen/interface/physdev.h>  #include "pciback.h"  #include "conf_space.h"  #include "conf_space_quirks.h" @@ -85,37 +86,52 @@ static struct pcistub_device *pcistub_device_alloc(struct pci_dev *dev)  static void pcistub_device_release(struct kref *kref)  {  	struct pcistub_device *psdev; +	struct pci_dev *dev;  	struct xen_pcibk_dev_data *dev_data;  	psdev = container_of(kref, struct pcistub_device, kref); -	dev_data = pci_get_drvdata(psdev->dev); +	dev = psdev->dev; +	dev_data = pci_get_drvdata(dev); -	dev_dbg(&psdev->dev->dev, "pcistub_device_release\n"); +	dev_dbg(&dev->dev, "pcistub_device_release\n"); -	xen_unregister_device_domain_owner(psdev->dev); +	xen_unregister_device_domain_owner(dev);  	/* Call the reset function which does not take lock as this  	 * is called from "unbind" which takes a device_lock mutex.  	 */ -	__pci_reset_function_locked(psdev->dev); -	if (pci_load_and_free_saved_state(psdev->dev, -					  &dev_data->pci_saved_state)) { -		dev_dbg(&psdev->dev->dev, "Could not reload PCI state\n"); -	} else -		pci_restore_state(psdev->dev); +	__pci_reset_function_locked(dev); +	if (pci_load_and_free_saved_state(dev, &dev_data->pci_saved_state)) +		dev_dbg(&dev->dev, "Could not reload PCI state\n"); +	else +		pci_restore_state(dev); + +	if (pci_find_capability(dev, PCI_CAP_ID_MSIX)) { +		struct physdev_pci_device ppdev = { +			.seg = pci_domain_nr(dev->bus), +			.bus = dev->bus->number, +			.devfn = dev->devfn +		}; +		int err = HYPERVISOR_physdev_op(PHYSDEVOP_release_msix, +						&ppdev); + +		if (err) +			dev_warn(&dev->dev, "MSI-X release failed (%d)\n", +				 err); +	}  	/* Disable the device */ -	xen_pcibk_reset_device(psdev->dev); +	xen_pcibk_reset_device(dev);  	kfree(dev_data); -	pci_set_drvdata(psdev->dev, NULL); +	pci_set_drvdata(dev, NULL);  	/* Clean-up the device */ -	xen_pcibk_config_free_dyn_fields(psdev->dev); -	xen_pcibk_config_free_dev(psdev->dev); +	xen_pcibk_config_free_dyn_fields(dev); +	xen_pcibk_config_free_dev(dev); -	psdev->dev->dev_flags &= ~PCI_DEV_FLAGS_ASSIGNED; -	pci_dev_put(psdev->dev); +	dev->dev_flags &= ~PCI_DEV_FLAGS_ASSIGNED; +	pci_dev_put(dev);  	kfree(psdev);  } @@ -355,6 +371,19 @@ static int pcistub_init_device(struct pci_dev *dev)  	if (err)  		goto config_release; +	if (pci_find_capability(dev, PCI_CAP_ID_MSIX)) { +		struct physdev_pci_device ppdev = { +			.seg = pci_domain_nr(dev->bus), +			.bus = dev->bus->number, +			.devfn = dev->devfn +		}; + +		err = HYPERVISOR_physdev_op(PHYSDEVOP_prepare_msix, &ppdev); +		if (err) +			dev_err(&dev->dev, "MSI-X preparation failed (%d)\n", +				err); +	} +  	/* We need the device active to save the state. */  	dev_dbg(&dev->dev, "save state of device\n");  	pci_save_state(dev); diff --git a/firmware/Makefile b/firmware/Makefile index cbb09ce9730..5d8ee1319b5 100644 --- a/firmware/Makefile +++ b/firmware/Makefile @@ -82,7 +82,7 @@ fw-shipped-$(CONFIG_SCSI_ADVANSYS) += advansys/mcode.bin advansys/38C1600.bin \  fw-shipped-$(CONFIG_SCSI_QLOGIC_1280) += qlogic/1040.bin qlogic/1280.bin \  					 qlogic/12160.bin  fw-shipped-$(CONFIG_SCSI_QLOGICPTI) += qlogic/isp1000.bin -fw-shipped-$(CONFIG_INFINIBAND_QIB) += qlogic/sd7220.fw +fw-shipped-$(CONFIG_INFINIBAND_QIB) += intel/sd7220.fw  fw-shipped-$(CONFIG_SND_KORG1212) += korg/k1212.dsp  fw-shipped-$(CONFIG_SND_MAESTRO3) += ess/maestro3_assp_kernel.fw \  				     ess/maestro3_assp_minisrc.fw diff --git a/firmware/qlogic/sd7220.fw.ihex b/firmware/intel/sd7220.fw.ihex index a3363631911..a3363631911 100644 --- a/firmware/qlogic/sd7220.fw.ihex +++ b/firmware/intel/sd7220.fw.ihex diff --git a/fs/btrfs/ctree.c b/fs/btrfs/ctree.c index ecd25a1b4e5..ca9d8f1a3bb 100644 --- a/fs/btrfs/ctree.c +++ b/fs/btrfs/ctree.c @@ -651,6 +651,8 @@ tree_mod_log_insert_root(struct btrfs_fs_info *fs_info,  	if (tree_mod_dont_log(fs_info, NULL))  		return 0; +	__tree_mod_log_free_eb(fs_info, old_root); +  	ret = tree_mod_alloc(fs_info, flags, &tm);  	if (ret < 0)  		goto out; @@ -736,7 +738,7 @@ tree_mod_log_search(struct btrfs_fs_info *fs_info, u64 start, u64 min_seq)  static noinline void  tree_mod_log_eb_copy(struct btrfs_fs_info *fs_info, struct extent_buffer *dst,  		     struct extent_buffer *src, unsigned long dst_offset, -		     unsigned long src_offset, int nr_items) +		     unsigned long src_offset, int nr_items, int log_removal)  {  	int ret;  	int i; @@ -750,10 +752,12 @@ tree_mod_log_eb_copy(struct btrfs_fs_info *fs_info, struct extent_buffer *dst,  	}  	for (i = 0; i < nr_items; i++) { -		ret = tree_mod_log_insert_key_locked(fs_info, src, -						     i + src_offset, -						     MOD_LOG_KEY_REMOVE); -		BUG_ON(ret < 0); +		if (log_removal) { +			ret = tree_mod_log_insert_key_locked(fs_info, src, +							i + src_offset, +							MOD_LOG_KEY_REMOVE); +			BUG_ON(ret < 0); +		}  		ret = tree_mod_log_insert_key_locked(fs_info, dst,  						     i + dst_offset,  						     MOD_LOG_KEY_ADD); @@ -927,7 +931,6 @@ static noinline int update_ref_for_cow(struct btrfs_trans_handle *trans,  			ret = btrfs_dec_ref(trans, root, buf, 1, 1);  			BUG_ON(ret); /* -ENOMEM */  		} -		tree_mod_log_free_eb(root->fs_info, buf);  		clean_tree_block(trans, root, buf);  		*last_ref = 1;  	} @@ -1046,6 +1049,7 @@ static noinline int __btrfs_cow_block(struct btrfs_trans_handle *trans,  		btrfs_set_node_ptr_generation(parent, parent_slot,  					      trans->transid);  		btrfs_mark_buffer_dirty(parent); +		tree_mod_log_free_eb(root->fs_info, buf);  		btrfs_free_tree_block(trans, root, buf, parent_start,  				      last_ref);  	} @@ -1750,7 +1754,6 @@ static noinline int balance_level(struct btrfs_trans_handle *trans,  			goto enospc;  		} -		tree_mod_log_free_eb(root->fs_info, root->node);  		tree_mod_log_set_root_pointer(root, child);  		rcu_assign_pointer(root->node, child); @@ -2995,7 +2998,7 @@ static int push_node_left(struct btrfs_trans_handle *trans,  		push_items = min(src_nritems - 8, push_items);  	tree_mod_log_eb_copy(root->fs_info, dst, src, dst_nritems, 0, -			     push_items); +			     push_items, 1);  	copy_extent_buffer(dst, src,  			   btrfs_node_key_ptr_offset(dst_nritems),  			   btrfs_node_key_ptr_offset(0), @@ -3066,7 +3069,7 @@ static int balance_node_right(struct btrfs_trans_handle *trans,  				      sizeof(struct btrfs_key_ptr));  	tree_mod_log_eb_copy(root->fs_info, dst, src, 0, -			     src_nritems - push_items, push_items); +			     src_nritems - push_items, push_items, 1);  	copy_extent_buffer(dst, src,  			   btrfs_node_key_ptr_offset(0),  			   btrfs_node_key_ptr_offset(src_nritems - push_items), @@ -3218,12 +3221,18 @@ static noinline int split_node(struct btrfs_trans_handle *trans,  	int mid;  	int ret;  	u32 c_nritems; +	int tree_mod_log_removal = 1;  	c = path->nodes[level];  	WARN_ON(btrfs_header_generation(c) != trans->transid);  	if (c == root->node) {  		/* trying to split the root, lets make a new one */  		ret = insert_new_root(trans, root, path, level + 1); +		/* +		 * removal of root nodes has been logged by +		 * tree_mod_log_set_root_pointer due to locking +		 */ +		tree_mod_log_removal = 0;  		if (ret)  			return ret;  	} else { @@ -3261,7 +3270,8 @@ static noinline int split_node(struct btrfs_trans_handle *trans,  			    (unsigned long)btrfs_header_chunk_tree_uuid(split),  			    BTRFS_UUID_SIZE); -	tree_mod_log_eb_copy(root->fs_info, split, c, 0, mid, c_nritems - mid); +	tree_mod_log_eb_copy(root->fs_info, split, c, 0, mid, c_nritems - mid, +			     tree_mod_log_removal);  	copy_extent_buffer(split, c,  			   btrfs_node_key_ptr_offset(0),  			   btrfs_node_key_ptr_offset(mid), diff --git a/fs/btrfs/disk-io.c b/fs/btrfs/disk-io.c index 7d84651e850..6d19a0a554a 100644 --- a/fs/btrfs/disk-io.c +++ b/fs/btrfs/disk-io.c @@ -1291,6 +1291,7 @@ struct btrfs_root *btrfs_create_tree(struct btrfs_trans_handle *trans,  				      0, objectid, NULL, 0, 0, 0);  	if (IS_ERR(leaf)) {  		ret = PTR_ERR(leaf); +		leaf = NULL;  		goto fail;  	} @@ -1334,11 +1335,16 @@ struct btrfs_root *btrfs_create_tree(struct btrfs_trans_handle *trans,  	btrfs_tree_unlock(leaf); +	return root; +  fail: -	if (ret) -		return ERR_PTR(ret); +	if (leaf) { +		btrfs_tree_unlock(leaf); +		free_extent_buffer(leaf); +	} +	kfree(root); -	return root; +	return ERR_PTR(ret);  }  static struct btrfs_root *alloc_log_tree(struct btrfs_trans_handle *trans, @@ -3253,7 +3259,7 @@ void btrfs_free_fs_root(struct btrfs_fs_info *fs_info, struct btrfs_root *root)  	if (btrfs_root_refs(&root->root_item) == 0)  		synchronize_srcu(&fs_info->subvol_srcu); -	if (fs_info->fs_state & BTRFS_SUPER_FLAG_ERROR) { +	if (test_bit(BTRFS_FS_STATE_ERROR, &fs_info->fs_state)) {  		btrfs_free_log(NULL, root);  		btrfs_free_log_root_tree(NULL, fs_info);  	} diff --git a/fs/btrfs/extent-tree.c b/fs/btrfs/extent-tree.c index 9ac2eca681e..3d551231cab 100644 --- a/fs/btrfs/extent-tree.c +++ b/fs/btrfs/extent-tree.c @@ -257,7 +257,8 @@ static int exclude_super_stripes(struct btrfs_root *root,  		cache->bytes_super += stripe_len;  		ret = add_excluded_extent(root, cache->key.objectid,  					  stripe_len); -		BUG_ON(ret); /* -ENOMEM */ +		if (ret) +			return ret;  	}  	for (i = 0; i < BTRFS_SUPER_MIRROR_MAX; i++) { @@ -265,13 +266,17 @@ static int exclude_super_stripes(struct btrfs_root *root,  		ret = btrfs_rmap_block(&root->fs_info->mapping_tree,  				       cache->key.objectid, bytenr,  				       0, &logical, &nr, &stripe_len); -		BUG_ON(ret); /* -ENOMEM */ +		if (ret) +			return ret;  		while (nr--) {  			cache->bytes_super += stripe_len;  			ret = add_excluded_extent(root, logical[nr],  						  stripe_len); -			BUG_ON(ret); /* -ENOMEM */ +			if (ret) { +				kfree(logical); +				return ret; +			}  		}  		kfree(logical); @@ -4438,7 +4443,7 @@ static void update_global_block_rsv(struct btrfs_fs_info *fs_info)  	spin_lock(&sinfo->lock);  	spin_lock(&block_rsv->lock); -	block_rsv->size = num_bytes; +	block_rsv->size = min_t(u64, num_bytes, 512 * 1024 * 1024);  	num_bytes = sinfo->bytes_used + sinfo->bytes_pinned +  		    sinfo->bytes_reserved + sinfo->bytes_readonly + @@ -4793,14 +4798,49 @@ out_fail:  	 * If the inodes csum_bytes is the same as the original  	 * csum_bytes then we know we haven't raced with any free()ers  	 * so we can just reduce our inodes csum bytes and carry on. -	 * Otherwise we have to do the normal free thing to account for -	 * the case that the free side didn't free up its reserve -	 * because of this outstanding reservation.  	 */ -	if (BTRFS_I(inode)->csum_bytes == csum_bytes) +	if (BTRFS_I(inode)->csum_bytes == csum_bytes) {  		calc_csum_metadata_size(inode, num_bytes, 0); -	else -		to_free = calc_csum_metadata_size(inode, num_bytes, 0); +	} else { +		u64 orig_csum_bytes = BTRFS_I(inode)->csum_bytes; +		u64 bytes; + +		/* +		 * This is tricky, but first we need to figure out how much we +		 * free'd from any free-ers that occured during this +		 * reservation, so we reset ->csum_bytes to the csum_bytes +		 * before we dropped our lock, and then call the free for the +		 * number of bytes that were freed while we were trying our +		 * reservation. +		 */ +		bytes = csum_bytes - BTRFS_I(inode)->csum_bytes; +		BTRFS_I(inode)->csum_bytes = csum_bytes; +		to_free = calc_csum_metadata_size(inode, bytes, 0); + + +		/* +		 * Now we need to see how much we would have freed had we not +		 * been making this reservation and our ->csum_bytes were not +		 * artificially inflated. +		 */ +		BTRFS_I(inode)->csum_bytes = csum_bytes - num_bytes; +		bytes = csum_bytes - orig_csum_bytes; +		bytes = calc_csum_metadata_size(inode, bytes, 0); + +		/* +		 * Now reset ->csum_bytes to what it should be.  If bytes is +		 * more than to_free then we would have free'd more space had we +		 * not had an artificially high ->csum_bytes, so we need to free +		 * the remainder.  If bytes is the same or less then we don't +		 * need to do anything, the other free-ers did the correct +		 * thing. +		 */ +		BTRFS_I(inode)->csum_bytes = orig_csum_bytes - num_bytes; +		if (bytes > to_free) +			to_free = bytes - to_free; +		else +			to_free = 0; +	}  	spin_unlock(&BTRFS_I(inode)->lock);  	if (dropped)  		to_free += btrfs_calc_trans_metadata_size(root, dropped); @@ -7947,7 +7987,17 @@ int btrfs_read_block_groups(struct btrfs_root *root)  		 * info has super bytes accounted for, otherwise we'll think  		 * we have more space than we actually do.  		 */ -		exclude_super_stripes(root, cache); +		ret = exclude_super_stripes(root, cache); +		if (ret) { +			/* +			 * We may have excluded something, so call this just in +			 * case. +			 */ +			free_excluded_extents(root, cache); +			kfree(cache->free_space_ctl); +			kfree(cache); +			goto error; +		}  		/*  		 * check for two cases, either we are full, and therefore @@ -8089,7 +8139,17 @@ int btrfs_make_block_group(struct btrfs_trans_handle *trans,  	cache->last_byte_to_unpin = (u64)-1;  	cache->cached = BTRFS_CACHE_FINISHED; -	exclude_super_stripes(root, cache); +	ret = exclude_super_stripes(root, cache); +	if (ret) { +		/* +		 * We may have excluded something, so call this just in +		 * case. +		 */ +		free_excluded_extents(root, cache); +		kfree(cache->free_space_ctl); +		kfree(cache); +		return ret; +	}  	add_new_free_space(cache, root->fs_info, chunk_offset,  			   chunk_offset + size); diff --git a/fs/btrfs/extent_io.c b/fs/btrfs/extent_io.c index f173c5af646..cdee391fc7b 100644 --- a/fs/btrfs/extent_io.c +++ b/fs/btrfs/extent_io.c @@ -1257,6 +1257,39 @@ int unlock_extent(struct extent_io_tree *tree, u64 start, u64 end)  				GFP_NOFS);  } +int extent_range_clear_dirty_for_io(struct inode *inode, u64 start, u64 end) +{ +	unsigned long index = start >> PAGE_CACHE_SHIFT; +	unsigned long end_index = end >> PAGE_CACHE_SHIFT; +	struct page *page; + +	while (index <= end_index) { +		page = find_get_page(inode->i_mapping, index); +		BUG_ON(!page); /* Pages should be in the extent_io_tree */ +		clear_page_dirty_for_io(page); +		page_cache_release(page); +		index++; +	} +	return 0; +} + +int extent_range_redirty_for_io(struct inode *inode, u64 start, u64 end) +{ +	unsigned long index = start >> PAGE_CACHE_SHIFT; +	unsigned long end_index = end >> PAGE_CACHE_SHIFT; +	struct page *page; + +	while (index <= end_index) { +		page = find_get_page(inode->i_mapping, index); +		BUG_ON(!page); /* Pages should be in the extent_io_tree */ +		account_page_redirty(page); +		__set_page_dirty_nobuffers(page); +		page_cache_release(page); +		index++; +	} +	return 0; +} +  /*   * helper function to set both pages and extents in the tree writeback   */ diff --git a/fs/btrfs/extent_io.h b/fs/btrfs/extent_io.h index 6068a198556..258c9215685 100644 --- a/fs/btrfs/extent_io.h +++ b/fs/btrfs/extent_io.h @@ -325,6 +325,8 @@ int map_private_extent_buffer(struct extent_buffer *eb, unsigned long offset,  		      unsigned long *map_len);  int extent_range_uptodate(struct extent_io_tree *tree,  			  u64 start, u64 end); +int extent_range_clear_dirty_for_io(struct inode *inode, u64 start, u64 end); +int extent_range_redirty_for_io(struct inode *inode, u64 start, u64 end);  int extent_clear_unlock_delalloc(struct inode *inode,  				struct extent_io_tree *tree,  				u64 start, u64 end, struct page *locked_page, diff --git a/fs/btrfs/file-item.c b/fs/btrfs/file-item.c index ec160202be3..c4628a201cb 100644 --- a/fs/btrfs/file-item.c +++ b/fs/btrfs/file-item.c @@ -118,9 +118,11 @@ struct btrfs_csum_item *btrfs_lookup_csum(struct btrfs_trans_handle *trans,  		csums_in_item = btrfs_item_size_nr(leaf, path->slots[0]);  		csums_in_item /= csum_size; -		if (csum_offset >= csums_in_item) { +		if (csum_offset == csums_in_item) {  			ret = -EFBIG;  			goto fail; +		} else if (csum_offset > csums_in_item) { +			goto fail;  		}  	}  	item = btrfs_item_ptr(leaf, path->slots[0], struct btrfs_csum_item); @@ -728,7 +730,6 @@ int btrfs_csum_file_blocks(struct btrfs_trans_handle *trans,  		return -ENOMEM;  	sector_sum = sums->sums; -	trans->adding_csums = 1;  again:  	next_offset = (u64)-1;  	found_next = 0; @@ -899,7 +900,6 @@ next_sector:  		goto again;  	}  out: -	trans->adding_csums = 0;  	btrfs_free_path(path);  	return ret; diff --git a/fs/btrfs/file.c b/fs/btrfs/file.c index 5b4ea5f55b8..ade03e6f7bd 100644 --- a/fs/btrfs/file.c +++ b/fs/btrfs/file.c @@ -2142,6 +2142,7 @@ static long btrfs_fallocate(struct file *file, int mode,  {  	struct inode *inode = file_inode(file);  	struct extent_state *cached_state = NULL; +	struct btrfs_root *root = BTRFS_I(inode)->root;  	u64 cur_offset;  	u64 last_byte;  	u64 alloc_start; @@ -2169,6 +2170,11 @@ static long btrfs_fallocate(struct file *file, int mode,  	ret = btrfs_check_data_free_space(inode, alloc_end - alloc_start);  	if (ret)  		return ret; +	if (root->fs_info->quota_enabled) { +		ret = btrfs_qgroup_reserve(root, alloc_end - alloc_start); +		if (ret) +			goto out_reserve_fail; +	}  	/*  	 * wait for ordered IO before we have any locks.  We'll loop again @@ -2272,6 +2278,9 @@ static long btrfs_fallocate(struct file *file, int mode,  			     &cached_state, GFP_NOFS);  out:  	mutex_unlock(&inode->i_mutex); +	if (root->fs_info->quota_enabled) +		btrfs_qgroup_free(root, alloc_end - alloc_start); +out_reserve_fail:  	/* Let go of our reservation. */  	btrfs_free_reserved_data_space(inode, alloc_end - alloc_start);  	return ret; diff --git a/fs/btrfs/inode.c b/fs/btrfs/inode.c index ca1b767d51f..09c58a35b42 100644 --- a/fs/btrfs/inode.c +++ b/fs/btrfs/inode.c @@ -353,6 +353,7 @@ static noinline int compress_file_range(struct inode *inode,  	int i;  	int will_compress;  	int compress_type = root->fs_info->compress_type; +	int redirty = 0;  	/* if this is a small write inside eof, kick off a defrag */  	if ((end - start + 1) < 16 * 1024 && @@ -415,6 +416,17 @@ again:  		if (BTRFS_I(inode)->force_compress)  			compress_type = BTRFS_I(inode)->force_compress; +		/* +		 * we need to call clear_page_dirty_for_io on each +		 * page in the range.  Otherwise applications with the file +		 * mmap'd can wander in and change the page contents while +		 * we are compressing them. +		 * +		 * If the compression fails for any reason, we set the pages +		 * dirty again later on. +		 */ +		extent_range_clear_dirty_for_io(inode, start, end); +		redirty = 1;  		ret = btrfs_compress_pages(compress_type,  					   inode->i_mapping, start,  					   total_compressed, pages, @@ -554,6 +566,8 @@ cleanup_and_bail_uncompressed:  			__set_page_dirty_nobuffers(locked_page);  			/* unlocked later on in the async handlers */  		} +		if (redirty) +			extent_range_redirty_for_io(inode, start, end);  		add_async_extent(async_cow, start, end - start + 1,  				 0, NULL, 0, BTRFS_COMPRESS_NONE);  		*num_added += 1; @@ -1743,8 +1757,10 @@ static noinline int add_pending_csums(struct btrfs_trans_handle *trans,  	struct btrfs_ordered_sum *sum;  	list_for_each_entry(sum, list, list) { +		trans->adding_csums = 1;  		btrfs_csum_file_blocks(trans,  		       BTRFS_I(inode)->root->fs_info->csum_root, sum); +		trans->adding_csums = 0;  	}  	return 0;  } @@ -3679,11 +3695,9 @@ static struct btrfs_trans_handle *__unlink_start_trans(struct inode *dir,  	 * 1 for the dir item  	 * 1 for the dir index  	 * 1 for the inode ref -	 * 1 for the inode ref in the tree log -	 * 2 for the dir entries in the log  	 * 1 for the inode  	 */ -	trans = btrfs_start_transaction(root, 8); +	trans = btrfs_start_transaction(root, 5);  	if (!IS_ERR(trans) || PTR_ERR(trans) != -ENOSPC)  		return trans; @@ -8127,7 +8141,7 @@ static int btrfs_rename(struct inode *old_dir, struct dentry *old_dentry,  	 * inodes.  So 5 * 2 is 10, plus 1 for the new link, so 11 total items  	 * should cover the worst case number of items we'll modify.  	 */ -	trans = btrfs_start_transaction(root, 20); +	trans = btrfs_start_transaction(root, 11);  	if (IS_ERR(trans)) {                  ret = PTR_ERR(trans);                  goto out_notrans; diff --git a/fs/btrfs/ordered-data.c b/fs/btrfs/ordered-data.c index dc08d77b717..005c45db699 100644 --- a/fs/btrfs/ordered-data.c +++ b/fs/btrfs/ordered-data.c @@ -557,6 +557,7 @@ void btrfs_wait_ordered_extents(struct btrfs_root *root, int delay_iput)  	INIT_LIST_HEAD(&splice);  	INIT_LIST_HEAD(&works); +	mutex_lock(&root->fs_info->ordered_operations_mutex);  	spin_lock(&root->fs_info->ordered_extent_lock);  	list_splice_init(&root->fs_info->ordered_extents, &splice);  	while (!list_empty(&splice)) { @@ -600,6 +601,7 @@ void btrfs_wait_ordered_extents(struct btrfs_root *root, int delay_iput)  		cond_resched();  	} +	mutex_unlock(&root->fs_info->ordered_operations_mutex);  }  /* diff --git a/fs/btrfs/qgroup.c b/fs/btrfs/qgroup.c index 5471e47d655..b44124dd237 100644 --- a/fs/btrfs/qgroup.c +++ b/fs/btrfs/qgroup.c @@ -1153,7 +1153,7 @@ int btrfs_qgroup_account_ref(struct btrfs_trans_handle *trans,  	ret = btrfs_find_all_roots(trans, fs_info, node->bytenr,  				   sgn > 0 ? node->seq - 1 : node->seq, &roots);  	if (ret < 0) -		goto out; +		return ret;  	spin_lock(&fs_info->qgroup_lock);  	quota_root = fs_info->quota_root; @@ -1275,7 +1275,6 @@ int btrfs_qgroup_account_ref(struct btrfs_trans_handle *trans,  	ret = 0;  unlock:  	spin_unlock(&fs_info->qgroup_lock); -out:  	ulist_free(roots);  	ulist_free(tmp); diff --git a/fs/btrfs/scrub.c b/fs/btrfs/scrub.c index 53c3501fa4c..85e072b956d 100644 --- a/fs/btrfs/scrub.c +++ b/fs/btrfs/scrub.c @@ -542,7 +542,6 @@ static void scrub_print_warning(const char *errstr, struct scrub_block *sblock)  	eb = path->nodes[0];  	ei = btrfs_item_ptr(eb, path->slots[0], struct btrfs_extent_item);  	item_size = btrfs_item_size_nr(eb, path->slots[0]); -	btrfs_release_path(path);  	if (flags & BTRFS_EXTENT_FLAG_TREE_BLOCK) {  		do { @@ -558,7 +557,9 @@ static void scrub_print_warning(const char *errstr, struct scrub_block *sblock)  				ret < 0 ? -1 : ref_level,  				ret < 0 ? -1 : ref_root);  		} while (ret != 1); +		btrfs_release_path(path);  	} else { +		btrfs_release_path(path);  		swarn.path = path;  		swarn.dev = dev;  		iterate_extent_inodes(fs_info, found_key.objectid, diff --git a/fs/btrfs/send.c b/fs/btrfs/send.c index f7a8b861058..c85e7c6b459 100644 --- a/fs/btrfs/send.c +++ b/fs/btrfs/send.c @@ -3945,12 +3945,10 @@ static int is_extent_unchanged(struct send_ctx *sctx,  		    found_key.type != key.type) {  			key.offset += right_len;  			break; -		} else { -			if (found_key.offset != key.offset + right_len) { -				/* Should really not happen */ -				ret = -EIO; -				goto out; -			} +		} +		if (found_key.offset != key.offset + right_len) { +			ret = 0; +			goto out;  		}  		key = found_key;  	} diff --git a/fs/btrfs/volumes.c b/fs/btrfs/volumes.c index 5989a92236f..2854c824ab6 100644 --- a/fs/btrfs/volumes.c +++ b/fs/btrfs/volumes.c @@ -4935,7 +4935,18 @@ int btrfs_rmap_block(struct btrfs_mapping_tree *map_tree,  	em = lookup_extent_mapping(em_tree, chunk_start, 1);  	read_unlock(&em_tree->lock); -	BUG_ON(!em || em->start != chunk_start); +	if (!em) { +		printk(KERN_ERR "btrfs: couldn't find em for chunk %Lu\n", +		       chunk_start); +		return -EIO; +	} + +	if (em->start != chunk_start) { +		printk(KERN_ERR "btrfs: bad chunk start, em=%Lu, wanted=%Lu\n", +		       em->start, chunk_start); +		free_extent_map(em); +		return -EIO; +	}  	map = (struct map_lookup *)em->bdev;  	length = em->len; diff --git a/fs/dcache.c b/fs/dcache.c index fbfae008ba4..e8bc3420d63 100644 --- a/fs/dcache.c +++ b/fs/dcache.c @@ -2542,7 +2542,6 @@ static int prepend_path(const struct path *path,  	bool slash = false;  	int error = 0; -	br_read_lock(&vfsmount_lock);  	while (dentry != root->dentry || vfsmnt != root->mnt) {  		struct dentry * parent; @@ -2572,8 +2571,6 @@ static int prepend_path(const struct path *path,  	if (!error && !slash)  		error = prepend(buffer, buflen, "/", 1); -out: -	br_read_unlock(&vfsmount_lock);  	return error;  global_root: @@ -2590,7 +2587,7 @@ global_root:  		error = prepend(buffer, buflen, "/", 1);  	if (!error)  		error = is_mounted(vfsmnt) ? 1 : 2; -	goto out; +	return error;  }  /** @@ -2617,9 +2614,11 @@ char *__d_path(const struct path *path,  	int error;  	prepend(&res, &buflen, "\0", 1); +	br_read_lock(&vfsmount_lock);  	write_seqlock(&rename_lock);  	error = prepend_path(path, root, &res, &buflen);  	write_sequnlock(&rename_lock); +	br_read_unlock(&vfsmount_lock);  	if (error < 0)  		return ERR_PTR(error); @@ -2636,9 +2635,11 @@ char *d_absolute_path(const struct path *path,  	int error;  	prepend(&res, &buflen, "\0", 1); +	br_read_lock(&vfsmount_lock);  	write_seqlock(&rename_lock);  	error = prepend_path(path, &root, &res, &buflen);  	write_sequnlock(&rename_lock); +	br_read_unlock(&vfsmount_lock);  	if (error > 1)  		error = -EINVAL; @@ -2702,11 +2703,13 @@ char *d_path(const struct path *path, char *buf, int buflen)  		return path->dentry->d_op->d_dname(path->dentry, buf, buflen);  	get_fs_root(current->fs, &root); +	br_read_lock(&vfsmount_lock);  	write_seqlock(&rename_lock);  	error = path_with_deleted(path, &root, &res, &buflen); +	write_sequnlock(&rename_lock); +	br_read_unlock(&vfsmount_lock);  	if (error < 0)  		res = ERR_PTR(error); -	write_sequnlock(&rename_lock);  	path_put(&root);  	return res;  } @@ -2830,6 +2833,7 @@ SYSCALL_DEFINE2(getcwd, char __user *, buf, unsigned long, size)  	get_fs_root_and_pwd(current->fs, &root, &pwd);  	error = -ENOENT; +	br_read_lock(&vfsmount_lock);  	write_seqlock(&rename_lock);  	if (!d_unlinked(pwd.dentry)) {  		unsigned long len; @@ -2839,6 +2843,7 @@ SYSCALL_DEFINE2(getcwd, char __user *, buf, unsigned long, size)  		prepend(&cwd, &buflen, "\0", 1);  		error = prepend_path(&pwd, &root, &cwd, &buflen);  		write_sequnlock(&rename_lock); +		br_read_unlock(&vfsmount_lock);  		if (error < 0)  			goto out; @@ -2859,6 +2864,7 @@ SYSCALL_DEFINE2(getcwd, char __user *, buf, unsigned long, size)  		}  	} else {  		write_sequnlock(&rename_lock); +		br_read_unlock(&vfsmount_lock);  	}  out: diff --git a/fs/internal.h b/fs/internal.h index 507141fceb9..4be78237d89 100644 --- a/fs/internal.h +++ b/fs/internal.h @@ -125,3 +125,8 @@ extern int invalidate_inodes(struct super_block *, bool);   * dcache.c   */  extern struct dentry *__d_alloc(struct super_block *, const struct qstr *); + +/* + * read_write.c + */ +extern ssize_t __kernel_write(struct file *, const char *, size_t, loff_t *); diff --git a/fs/namespace.c b/fs/namespace.c index 50ca17d3cb4..d581e45c0a9 100644 --- a/fs/namespace.c +++ b/fs/namespace.c @@ -798,6 +798,10 @@ static struct mount *clone_mnt(struct mount *old, struct dentry *root,  	}  	mnt->mnt.mnt_flags = old->mnt.mnt_flags & ~MNT_WRITE_HOLD; +	/* Don't allow unprivileged users to change mount flags */ +	if ((flag & CL_UNPRIVILEGED) && (mnt->mnt.mnt_flags & MNT_READONLY)) +		mnt->mnt.mnt_flags |= MNT_LOCK_READONLY; +  	atomic_inc(&sb->s_active);  	mnt->mnt.mnt_sb = sb;  	mnt->mnt.mnt_root = dget(root); @@ -1713,6 +1717,9 @@ static int change_mount_flags(struct vfsmount *mnt, int ms_flags)  	if (readonly_request == __mnt_is_readonly(mnt))  		return 0; +	if (mnt->mnt_flags & MNT_LOCK_READONLY) +		return -EPERM; +  	if (readonly_request)  		error = mnt_make_readonly(real_mount(mnt));  	else @@ -2339,7 +2346,7 @@ static struct mnt_namespace *dup_mnt_ns(struct mnt_namespace *mnt_ns,  	/* First pass: copy the tree topology */  	copy_flags = CL_COPY_ALL | CL_EXPIRE;  	if (user_ns != mnt_ns->user_ns) -		copy_flags |= CL_SHARED_TO_SLAVE; +		copy_flags |= CL_SHARED_TO_SLAVE | CL_UNPRIVILEGED;  	new = copy_tree(old, old->mnt.mnt_root, copy_flags);  	if (IS_ERR(new)) {  		up_write(&namespace_sem); @@ -2732,6 +2739,51 @@ bool our_mnt(struct vfsmount *mnt)  	return check_mnt(real_mount(mnt));  } +bool current_chrooted(void) +{ +	/* Does the current process have a non-standard root */ +	struct path ns_root; +	struct path fs_root; +	bool chrooted; + +	/* Find the namespace root */ +	ns_root.mnt = ¤t->nsproxy->mnt_ns->root->mnt; +	ns_root.dentry = ns_root.mnt->mnt_root; +	path_get(&ns_root); +	while (d_mountpoint(ns_root.dentry) && follow_down_one(&ns_root)) +		; + +	get_fs_root(current->fs, &fs_root); + +	chrooted = !path_equal(&fs_root, &ns_root); + +	path_put(&fs_root); +	path_put(&ns_root); + +	return chrooted; +} + +void update_mnt_policy(struct user_namespace *userns) +{ +	struct mnt_namespace *ns = current->nsproxy->mnt_ns; +	struct mount *mnt; + +	down_read(&namespace_sem); +	list_for_each_entry(mnt, &ns->list, mnt_list) { +		switch (mnt->mnt.mnt_sb->s_magic) { +		case SYSFS_MAGIC: +			userns->may_mount_sysfs = true; +			break; +		case PROC_SUPER_MAGIC: +			userns->may_mount_proc = true; +			break; +		} +		if (userns->may_mount_sysfs && userns->may_mount_proc) +			break; +	} +	up_read(&namespace_sem); +} +  static void *mntns_get(struct task_struct *task)  {  	struct mnt_namespace *ns = NULL; diff --git a/fs/nfs/blocklayout/blocklayoutdm.c b/fs/nfs/blocklayout/blocklayoutdm.c index 737d839bc17..6fc7b5cae92 100644 --- a/fs/nfs/blocklayout/blocklayoutdm.c +++ b/fs/nfs/blocklayout/blocklayoutdm.c @@ -55,7 +55,8 @@ static void dev_remove(struct net *net, dev_t dev)  	bl_pipe_msg.bl_wq = &nn->bl_wq;  	memset(msg, 0, sizeof(*msg)); -	msg->data = kzalloc(1 + sizeof(bl_umount_request), GFP_NOFS); +	msg->len = sizeof(bl_msg) + bl_msg.totallen; +	msg->data = kzalloc(msg->len, GFP_NOFS);  	if (!msg->data)  		goto out; @@ -66,7 +67,6 @@ static void dev_remove(struct net *net, dev_t dev)  	memcpy(msg->data, &bl_msg, sizeof(bl_msg));  	dataptr = (uint8_t *) msg->data;  	memcpy(&dataptr[sizeof(bl_msg)], &bl_umount_request, sizeof(bl_umount_request)); -	msg->len = sizeof(bl_msg) + bl_msg.totallen;  	add_wait_queue(&nn->bl_wq, &wq);  	if (rpc_queue_upcall(nn->bl_device_pipe, msg) < 0) { diff --git a/fs/nfs/idmap.c b/fs/nfs/idmap.c index dc0f98dfa71..c516da5873f 100644 --- a/fs/nfs/idmap.c +++ b/fs/nfs/idmap.c @@ -726,9 +726,9 @@ out1:  	return ret;  } -static int nfs_idmap_instantiate(struct key *key, struct key *authkey, char *data) +static int nfs_idmap_instantiate(struct key *key, struct key *authkey, char *data, size_t datalen)  { -	return key_instantiate_and_link(key, data, strlen(data) + 1, +	return key_instantiate_and_link(key, data, datalen,  					id_resolver_cache->thread_keyring,  					authkey);  } @@ -738,6 +738,7 @@ static int nfs_idmap_read_and_verify_message(struct idmap_msg *im,  		struct key *key, struct key *authkey)  {  	char id_str[NFS_UINT_MAXLEN]; +	size_t len;  	int ret = -ENOKEY;  	/* ret = -ENOKEY */ @@ -747,13 +748,15 @@ static int nfs_idmap_read_and_verify_message(struct idmap_msg *im,  	case IDMAP_CONV_NAMETOID:  		if (strcmp(upcall->im_name, im->im_name) != 0)  			break; -		sprintf(id_str, "%d", im->im_id); -		ret = nfs_idmap_instantiate(key, authkey, id_str); +		/* Note: here we store the NUL terminator too */ +		len = sprintf(id_str, "%d", im->im_id) + 1; +		ret = nfs_idmap_instantiate(key, authkey, id_str, len);  		break;  	case IDMAP_CONV_IDTONAME:  		if (upcall->im_id != im->im_id)  			break; -		ret = nfs_idmap_instantiate(key, authkey, im->im_name); +		len = strlen(im->im_name); +		ret = nfs_idmap_instantiate(key, authkey, im->im_name, len);  		break;  	default:  		ret = -EINVAL; diff --git a/fs/nfs/nfs4filelayout.c b/fs/nfs/nfs4filelayout.c index 49eeb044c10..4fb234d3aef 100644 --- a/fs/nfs/nfs4filelayout.c +++ b/fs/nfs/nfs4filelayout.c @@ -129,7 +129,6 @@ static void filelayout_fenceme(struct inode *inode, struct pnfs_layout_hdr *lo)  {  	if (!test_and_clear_bit(NFS_LAYOUT_RETURN, &lo->plh_flags))  		return; -	clear_bit(NFS_INO_LAYOUTCOMMIT, &NFS_I(inode)->flags);  	pnfs_return_layout(inode);  } diff --git a/fs/nfs/nfs4proc.c b/fs/nfs/nfs4proc.c index b2671cb0f90..26431cf62dd 100644 --- a/fs/nfs/nfs4proc.c +++ b/fs/nfs/nfs4proc.c @@ -2632,7 +2632,7 @@ nfs4_proc_setattr(struct dentry *dentry, struct nfs_fattr *fattr,  	int status;  	if (pnfs_ld_layoutret_on_setattr(inode)) -		pnfs_return_layout(inode); +		pnfs_commit_and_return_layout(inode);  	nfs_fattr_init(fattr); @@ -6416,22 +6416,8 @@ nfs4_layoutcommit_done(struct rpc_task *task, void *calldata)  static void nfs4_layoutcommit_release(void *calldata)  {  	struct nfs4_layoutcommit_data *data = calldata; -	struct pnfs_layout_segment *lseg, *tmp; -	unsigned long *bitlock = &NFS_I(data->args.inode)->flags;  	pnfs_cleanup_layoutcommit(data); -	/* Matched by references in pnfs_set_layoutcommit */ -	list_for_each_entry_safe(lseg, tmp, &data->lseg_list, pls_lc_list) { -		list_del_init(&lseg->pls_lc_list); -		if (test_and_clear_bit(NFS_LSEG_LAYOUTCOMMIT, -				       &lseg->pls_flags)) -			pnfs_put_lseg(lseg); -	} - -	clear_bit_unlock(NFS_INO_LAYOUTCOMMITTING, bitlock); -	smp_mb__after_clear_bit(); -	wake_up_bit(bitlock, NFS_INO_LAYOUTCOMMITTING); -  	put_rpccred(data->cred);  	kfree(data);  } diff --git a/fs/nfs/pnfs.c b/fs/nfs/pnfs.c index 48ac5aad625..4bdffe0ba02 100644 --- a/fs/nfs/pnfs.c +++ b/fs/nfs/pnfs.c @@ -417,6 +417,16 @@ should_free_lseg(struct pnfs_layout_range *lseg_range,  	       lo_seg_intersecting(lseg_range, recall_range);  } +static bool pnfs_lseg_dec_and_remove_zero(struct pnfs_layout_segment *lseg, +		struct list_head *tmp_list) +{ +	if (!atomic_dec_and_test(&lseg->pls_refcount)) +		return false; +	pnfs_layout_remove_lseg(lseg->pls_layout, lseg); +	list_add(&lseg->pls_list, tmp_list); +	return true; +} +  /* Returns 1 if lseg is removed from list, 0 otherwise */  static int mark_lseg_invalid(struct pnfs_layout_segment *lseg,  			     struct list_head *tmp_list) @@ -430,11 +440,8 @@ static int mark_lseg_invalid(struct pnfs_layout_segment *lseg,  		 */  		dprintk("%s: lseg %p ref %d\n", __func__, lseg,  			atomic_read(&lseg->pls_refcount)); -		if (atomic_dec_and_test(&lseg->pls_refcount)) { -			pnfs_layout_remove_lseg(lseg->pls_layout, lseg); -			list_add(&lseg->pls_list, tmp_list); +		if (pnfs_lseg_dec_and_remove_zero(lseg, tmp_list))  			rv = 1; -		}  	}  	return rv;  } @@ -777,6 +784,21 @@ send_layoutget(struct pnfs_layout_hdr *lo,  	return lseg;  } +static void pnfs_clear_layoutcommit(struct inode *inode, +		struct list_head *head) +{ +	struct nfs_inode *nfsi = NFS_I(inode); +	struct pnfs_layout_segment *lseg, *tmp; + +	if (!test_and_clear_bit(NFS_INO_LAYOUTCOMMIT, &nfsi->flags)) +		return; +	list_for_each_entry_safe(lseg, tmp, &nfsi->layout->plh_segs, pls_list) { +		if (!test_and_clear_bit(NFS_LSEG_LAYOUTCOMMIT, &lseg->pls_flags)) +			continue; +		pnfs_lseg_dec_and_remove_zero(lseg, head); +	} +} +  /*   * Initiates a LAYOUTRETURN(FILE), and removes the pnfs_layout_hdr   * when the layout segment list is empty. @@ -808,6 +830,7 @@ _pnfs_return_layout(struct inode *ino)  	/* Reference matched in nfs4_layoutreturn_release */  	pnfs_get_layout_hdr(lo);  	empty = list_empty(&lo->plh_segs); +	pnfs_clear_layoutcommit(ino, &tmp_list);  	pnfs_mark_matching_lsegs_invalid(lo, &tmp_list, NULL);  	/* Don't send a LAYOUTRETURN if list was initially empty */  	if (empty) { @@ -820,8 +843,6 @@ _pnfs_return_layout(struct inode *ino)  	spin_unlock(&ino->i_lock);  	pnfs_free_lseg_list(&tmp_list); -	WARN_ON(test_bit(NFS_INO_LAYOUTCOMMIT, &nfsi->flags)); -  	lrp = kzalloc(sizeof(*lrp), GFP_KERNEL);  	if (unlikely(lrp == NULL)) {  		status = -ENOMEM; @@ -845,6 +866,33 @@ out:  }  EXPORT_SYMBOL_GPL(_pnfs_return_layout); +int +pnfs_commit_and_return_layout(struct inode *inode) +{ +	struct pnfs_layout_hdr *lo; +	int ret; + +	spin_lock(&inode->i_lock); +	lo = NFS_I(inode)->layout; +	if (lo == NULL) { +		spin_unlock(&inode->i_lock); +		return 0; +	} +	pnfs_get_layout_hdr(lo); +	/* Block new layoutgets and read/write to ds */ +	lo->plh_block_lgets++; +	spin_unlock(&inode->i_lock); +	filemap_fdatawait(inode->i_mapping); +	ret = pnfs_layoutcommit_inode(inode, true); +	if (ret == 0) +		ret = _pnfs_return_layout(inode); +	spin_lock(&inode->i_lock); +	lo->plh_block_lgets--; +	spin_unlock(&inode->i_lock); +	pnfs_put_layout_hdr(lo); +	return ret; +} +  bool pnfs_roc(struct inode *ino)  {  	struct pnfs_layout_hdr *lo; @@ -1458,7 +1506,6 @@ static void pnfs_ld_handle_write_error(struct nfs_write_data *data)  	dprintk("pnfs write error = %d\n", hdr->pnfs_error);  	if (NFS_SERVER(hdr->inode)->pnfs_curr_ld->flags &  	    PNFS_LAYOUTRET_ON_ERROR) { -		clear_bit(NFS_INO_LAYOUTCOMMIT, &NFS_I(hdr->inode)->flags);  		pnfs_return_layout(hdr->inode);  	}  	if (!test_and_set_bit(NFS_IOHDR_REDO, &hdr->flags)) @@ -1613,7 +1660,6 @@ static void pnfs_ld_handle_read_error(struct nfs_read_data *data)  	dprintk("pnfs read error = %d\n", hdr->pnfs_error);  	if (NFS_SERVER(hdr->inode)->pnfs_curr_ld->flags &  	    PNFS_LAYOUTRET_ON_ERROR) { -		clear_bit(NFS_INO_LAYOUTCOMMIT, &NFS_I(hdr->inode)->flags);  		pnfs_return_layout(hdr->inode);  	}  	if (!test_and_set_bit(NFS_IOHDR_REDO, &hdr->flags)) @@ -1746,11 +1792,27 @@ static void pnfs_list_write_lseg(struct inode *inode, struct list_head *listp)  	list_for_each_entry(lseg, &NFS_I(inode)->layout->plh_segs, pls_list) {  		if (lseg->pls_range.iomode == IOMODE_RW && -		    test_bit(NFS_LSEG_LAYOUTCOMMIT, &lseg->pls_flags)) +		    test_and_clear_bit(NFS_LSEG_LAYOUTCOMMIT, &lseg->pls_flags))  			list_add(&lseg->pls_lc_list, listp);  	}  } +static void pnfs_list_write_lseg_done(struct inode *inode, struct list_head *listp) +{ +	struct pnfs_layout_segment *lseg, *tmp; +	unsigned long *bitlock = &NFS_I(inode)->flags; + +	/* Matched by references in pnfs_set_layoutcommit */ +	list_for_each_entry_safe(lseg, tmp, listp, pls_lc_list) { +		list_del_init(&lseg->pls_lc_list); +		pnfs_put_lseg(lseg); +	} + +	clear_bit_unlock(NFS_INO_LAYOUTCOMMITTING, bitlock); +	smp_mb__after_clear_bit(); +	wake_up_bit(bitlock, NFS_INO_LAYOUTCOMMITTING); +} +  void pnfs_set_lo_fail(struct pnfs_layout_segment *lseg)  {  	pnfs_layout_io_set_failed(lseg->pls_layout, lseg->pls_range.iomode); @@ -1795,6 +1857,7 @@ void pnfs_cleanup_layoutcommit(struct nfs4_layoutcommit_data *data)  	if (nfss->pnfs_curr_ld->cleanup_layoutcommit)  		nfss->pnfs_curr_ld->cleanup_layoutcommit(data); +	pnfs_list_write_lseg_done(data->args.inode, &data->lseg_list);  }  /* diff --git a/fs/nfs/pnfs.h b/fs/nfs/pnfs.h index 94ba8041774..f5f8a470a64 100644 --- a/fs/nfs/pnfs.h +++ b/fs/nfs/pnfs.h @@ -219,6 +219,7 @@ void pnfs_set_layoutcommit(struct nfs_write_data *wdata);  void pnfs_cleanup_layoutcommit(struct nfs4_layoutcommit_data *data);  int pnfs_layoutcommit_inode(struct inode *inode, bool sync);  int _pnfs_return_layout(struct inode *); +int pnfs_commit_and_return_layout(struct inode *);  void pnfs_ld_write_done(struct nfs_write_data *);  void pnfs_ld_read_done(struct nfs_read_data *);  struct pnfs_layout_segment *pnfs_update_layout(struct inode *ino, @@ -407,6 +408,11 @@ static inline int pnfs_return_layout(struct inode *ino)  	return 0;  } +static inline int pnfs_commit_and_return_layout(struct inode *inode) +{ +	return 0; +} +  static inline bool  pnfs_ld_layoutret_on_setattr(struct inode *inode)  { diff --git a/fs/nfsd/nfscache.c b/fs/nfsd/nfscache.c index 62c1ee128ae..ca05f6dc354 100644 --- a/fs/nfsd/nfscache.c +++ b/fs/nfsd/nfscache.c @@ -102,7 +102,8 @@ nfsd_reply_cache_free_locked(struct svc_cacherep *rp)  {  	if (rp->c_type == RC_REPLBUFF)  		kfree(rp->c_replvec.iov_base); -	hlist_del(&rp->c_hash); +	if (!hlist_unhashed(&rp->c_hash)) +		hlist_del(&rp->c_hash);  	list_del(&rp->c_lru);  	--num_drc_entries;  	kmem_cache_free(drc_slab, rp); @@ -118,6 +119,10 @@ nfsd_reply_cache_free(struct svc_cacherep *rp)  int nfsd_reply_cache_init(void)  { +	INIT_LIST_HEAD(&lru_head); +	max_drc_entries = nfsd_cache_size_limit(); +	num_drc_entries = 0; +  	register_shrinker(&nfsd_reply_cache_shrinker);  	drc_slab = kmem_cache_create("nfsd_drc", sizeof(struct svc_cacherep),  					0, 0, NULL); @@ -128,10 +133,6 @@ int nfsd_reply_cache_init(void)  	if (!cache_hash)  		goto out_nomem; -	INIT_LIST_HEAD(&lru_head); -	max_drc_entries = nfsd_cache_size_limit(); -	num_drc_entries = 0; -  	return 0;  out_nomem:  	printk(KERN_ERR "nfsd: failed to allocate reply cache\n"); diff --git a/fs/nfsd/vfs.c b/fs/nfsd/vfs.c index 2a7eb536de0..2b2e2396a86 100644 --- a/fs/nfsd/vfs.c +++ b/fs/nfsd/vfs.c @@ -1013,6 +1013,7 @@ nfsd_vfs_write(struct svc_rqst *rqstp, struct svc_fh *fhp, struct file *file,  	int			host_err;  	int			stable = *stablep;  	int			use_wgather; +	loff_t			pos = offset;  	dentry = file->f_path.dentry;  	inode = dentry->d_inode; @@ -1025,7 +1026,7 @@ nfsd_vfs_write(struct svc_rqst *rqstp, struct svc_fh *fhp, struct file *file,  	/* Write the data. */  	oldfs = get_fs(); set_fs(KERNEL_DS); -	host_err = vfs_writev(file, (struct iovec __user *)vec, vlen, &offset); +	host_err = vfs_writev(file, (struct iovec __user *)vec, vlen, &pos);  	set_fs(oldfs);  	if (host_err < 0)  		goto out_nfserr; diff --git a/fs/pnode.c b/fs/pnode.c index 3e000a51ac0..8b29d2164da 100644 --- a/fs/pnode.c +++ b/fs/pnode.c @@ -9,6 +9,7 @@  #include <linux/mnt_namespace.h>  #include <linux/mount.h>  #include <linux/fs.h> +#include <linux/nsproxy.h>  #include "internal.h"  #include "pnode.h" @@ -220,6 +221,7 @@ static struct mount *get_source(struct mount *dest,  int propagate_mnt(struct mount *dest_mnt, struct dentry *dest_dentry,  		    struct mount *source_mnt, struct list_head *tree_list)  { +	struct user_namespace *user_ns = current->nsproxy->mnt_ns->user_ns;  	struct mount *m, *child;  	int ret = 0;  	struct mount *prev_dest_mnt = dest_mnt; @@ -237,6 +239,10 @@ int propagate_mnt(struct mount *dest_mnt, struct dentry *dest_dentry,  		source =  get_source(m, prev_dest_mnt, prev_src_mnt, &type); +		/* Notice when we are propagating across user namespaces */ +		if (m->mnt_ns->user_ns != user_ns) +			type |= CL_UNPRIVILEGED; +  		child = copy_tree(source, source->mnt.mnt_root, type);  		if (IS_ERR(child)) {  			ret = PTR_ERR(child); diff --git a/fs/pnode.h b/fs/pnode.h index 19b853a3445..a0493d5ebfb 100644 --- a/fs/pnode.h +++ b/fs/pnode.h @@ -23,6 +23,7 @@  #define CL_MAKE_SHARED 		0x08  #define CL_PRIVATE 		0x10  #define CL_SHARED_TO_SLAVE	0x20 +#define CL_UNPRIVILEGED		0x40  static inline void set_mnt_shared(struct mount *mnt)  { diff --git a/fs/proc/root.c b/fs/proc/root.c index c6e9fac26ba..9c7fab1d23f 100644 --- a/fs/proc/root.c +++ b/fs/proc/root.c @@ -16,6 +16,7 @@  #include <linux/sched.h>  #include <linux/module.h>  #include <linux/bitops.h> +#include <linux/user_namespace.h>  #include <linux/mount.h>  #include <linux/pid_namespace.h>  #include <linux/parser.h> @@ -108,6 +109,9 @@ static struct dentry *proc_mount(struct file_system_type *fs_type,  	} else {  		ns = task_active_pid_ns(current);  		options = data; + +		if (!current_user_ns()->may_mount_proc) +			return ERR_PTR(-EPERM);  	}  	sb = sget(fs_type, proc_test_super, proc_set_super, flags, ns); diff --git a/fs/read_write.c b/fs/read_write.c index a698eff457f..e6ddc8dceb9 100644 --- a/fs/read_write.c +++ b/fs/read_write.c @@ -17,6 +17,7 @@  #include <linux/splice.h>  #include <linux/compat.h>  #include "read_write.h" +#include "internal.h"  #include <asm/uaccess.h>  #include <asm/unistd.h> @@ -417,6 +418,33 @@ ssize_t do_sync_write(struct file *filp, const char __user *buf, size_t len, lof  EXPORT_SYMBOL(do_sync_write); +ssize_t __kernel_write(struct file *file, const char *buf, size_t count, loff_t *pos) +{ +	mm_segment_t old_fs; +	const char __user *p; +	ssize_t ret; + +	if (!file->f_op || (!file->f_op->write && !file->f_op->aio_write)) +		return -EINVAL; + +	old_fs = get_fs(); +	set_fs(get_ds()); +	p = (__force const char __user *)buf; +	if (count > MAX_RW_COUNT) +		count =  MAX_RW_COUNT; +	if (file->f_op->write) +		ret = file->f_op->write(file, p, count, pos); +	else +		ret = do_sync_write(file, p, count, pos); +	set_fs(old_fs); +	if (ret > 0) { +		fsnotify_modify(file); +		add_wchar(current, ret); +	} +	inc_syscw(current); +	return ret; +} +  ssize_t vfs_write(struct file *file, const char __user *buf, size_t count, loff_t *pos)  {  	ssize_t ret; diff --git a/fs/splice.c b/fs/splice.c index 718bd005638..29e394e49dd 100644 --- a/fs/splice.c +++ b/fs/splice.c @@ -31,6 +31,7 @@  #include <linux/security.h>  #include <linux/gfp.h>  #include <linux/socket.h> +#include "internal.h"  /*   * Attempt to steal a page from a pipe buffer. This should perhaps go into @@ -1048,9 +1049,10 @@ static int write_pipe_buf(struct pipe_inode_info *pipe, struct pipe_buffer *buf,  {  	int ret;  	void *data; +	loff_t tmp = sd->pos;  	data = buf->ops->map(pipe, buf, 0); -	ret = kernel_write(sd->u.file, data + buf->offset, sd->len, sd->pos); +	ret = __kernel_write(sd->u.file, data + buf->offset, sd->len, &tmp);  	buf->ops->unmap(pipe, buf, data);  	return ret; diff --git a/fs/sysfs/dir.c b/fs/sysfs/dir.c index 2fbdff6be25..e14512678c9 100644 --- a/fs/sysfs/dir.c +++ b/fs/sysfs/dir.c @@ -1020,6 +1020,8 @@ static int sysfs_readdir(struct file * filp, void * dirent, filldir_t filldir)  		ino = parent_sd->s_ino;  		if (filldir(dirent, ".", 1, filp->f_pos, ino, DT_DIR) == 0)  			filp->f_pos++; +		else +			return 0;  	}  	if (filp->f_pos == 1) {  		if (parent_sd->s_parent) @@ -1028,6 +1030,8 @@ static int sysfs_readdir(struct file * filp, void * dirent, filldir_t filldir)  			ino = parent_sd->s_ino;  		if (filldir(dirent, "..", 2, filp->f_pos, ino, DT_DIR) == 0)  			filp->f_pos++; +		else +			return 0;  	}  	mutex_lock(&sysfs_mutex);  	for (pos = sysfs_dir_pos(ns, parent_sd, filp->f_pos, pos); @@ -1058,10 +1062,21 @@ static int sysfs_readdir(struct file * filp, void * dirent, filldir_t filldir)  	return 0;  } +static loff_t sysfs_dir_llseek(struct file *file, loff_t offset, int whence) +{ +	struct inode *inode = file_inode(file); +	loff_t ret; + +	mutex_lock(&inode->i_mutex); +	ret = generic_file_llseek(file, offset, whence); +	mutex_unlock(&inode->i_mutex); + +	return ret; +}  const struct file_operations sysfs_dir_operations = {  	.read		= generic_read_dir,  	.readdir	= sysfs_readdir,  	.release	= sysfs_dir_release, -	.llseek		= generic_file_llseek, +	.llseek		= sysfs_dir_llseek,  }; diff --git a/fs/sysfs/mount.c b/fs/sysfs/mount.c index 8d924b5ec73..afd83273e6c 100644 --- a/fs/sysfs/mount.c +++ b/fs/sysfs/mount.c @@ -19,6 +19,7 @@  #include <linux/module.h>  #include <linux/magic.h>  #include <linux/slab.h> +#include <linux/user_namespace.h>  #include "sysfs.h" @@ -111,6 +112,9 @@ static struct dentry *sysfs_mount(struct file_system_type *fs_type,  	struct super_block *sb;  	int error; +	if (!(flags & MS_KERNMOUNT) && !current_user_ns()->may_mount_sysfs) +		return ERR_PTR(-EPERM); +  	info = kzalloc(sizeof(*info), GFP_KERNEL);  	if (!info)  		return ERR_PTR(-ENOMEM); diff --git a/include/linux/debug_locks.h b/include/linux/debug_locks.h index a975de1ff59..3bd46f76675 100644 --- a/include/linux/debug_locks.h +++ b/include/linux/debug_locks.h @@ -51,7 +51,7 @@ struct task_struct;  extern void debug_show_all_locks(void);  extern void debug_show_held_locks(struct task_struct *task);  extern void debug_check_no_locks_freed(const void *from, unsigned long len); -extern void debug_check_no_locks_held(void); +extern void debug_check_no_locks_held(struct task_struct *task);  #else  static inline void debug_show_all_locks(void)  { @@ -67,7 +67,7 @@ debug_check_no_locks_freed(const void *from, unsigned long len)  }  static inline void -debug_check_no_locks_held(void) +debug_check_no_locks_held(struct task_struct *task)  {  }  #endif diff --git a/include/linux/freezer.h b/include/linux/freezer.h index 043a5cf8b5b..e70df40d84f 100644 --- a/include/linux/freezer.h +++ b/include/linux/freezer.h @@ -3,7 +3,6 @@  #ifndef FREEZER_H_INCLUDED  #define FREEZER_H_INCLUDED -#include <linux/debug_locks.h>  #include <linux/sched.h>  #include <linux/wait.h>  #include <linux/atomic.h> @@ -49,8 +48,6 @@ extern void thaw_kernel_threads(void);  static inline bool try_to_freeze(void)  { -	if (!(current->flags & PF_NOFREEZE)) -		debug_check_no_locks_held();  	might_sleep();  	if (likely(!freezing(current)))  		return false; diff --git a/include/linux/fs_struct.h b/include/linux/fs_struct.h index 729eded4b24..2b93a9a5a1e 100644 --- a/include/linux/fs_struct.h +++ b/include/linux/fs_struct.h @@ -50,4 +50,6 @@ static inline void get_fs_root_and_pwd(struct fs_struct *fs, struct path *root,  	spin_unlock(&fs->lock);  } +extern bool current_chrooted(void); +  #endif /* _LINUX_FS_STRUCT_H */ diff --git a/include/linux/mfd/max77693-private.h b/include/linux/mfd/max77693-private.h index 5b18ecde69b..1aa4f13cdfa 100644 --- a/include/linux/mfd/max77693-private.h +++ b/include/linux/mfd/max77693-private.h @@ -106,6 +106,29 @@ enum max77693_muic_reg {  	MAX77693_MUIC_REG_END,  }; +/* MAX77693 INTMASK1~2 Register */ +#define INTMASK1_ADC1K_SHIFT		3 +#define INTMASK1_ADCERR_SHIFT		2 +#define INTMASK1_ADCLOW_SHIFT		1 +#define INTMASK1_ADC_SHIFT		0 +#define INTMASK1_ADC1K_MASK		(1 << INTMASK1_ADC1K_SHIFT) +#define INTMASK1_ADCERR_MASK		(1 << INTMASK1_ADCERR_SHIFT) +#define INTMASK1_ADCLOW_MASK		(1 << INTMASK1_ADCLOW_SHIFT) +#define INTMASK1_ADC_MASK		(1 << INTMASK1_ADC_SHIFT) + +#define INTMASK2_VIDRM_SHIFT		5 +#define INTMASK2_VBVOLT_SHIFT		4 +#define INTMASK2_DXOVP_SHIFT		3 +#define INTMASK2_DCDTMR_SHIFT		2 +#define INTMASK2_CHGDETRUN_SHIFT	1 +#define INTMASK2_CHGTYP_SHIFT		0 +#define INTMASK2_VIDRM_MASK		(1 << INTMASK2_VIDRM_SHIFT) +#define INTMASK2_VBVOLT_MASK		(1 << INTMASK2_VBVOLT_SHIFT) +#define INTMASK2_DXOVP_MASK		(1 << INTMASK2_DXOVP_SHIFT) +#define INTMASK2_DCDTMR_MASK		(1 << INTMASK2_DCDTMR_SHIFT) +#define INTMASK2_CHGDETRUN_MASK		(1 << INTMASK2_CHGDETRUN_SHIFT) +#define INTMASK2_CHGTYP_MASK		(1 << INTMASK2_CHGTYP_SHIFT) +  /* MAX77693 MUIC - STATUS1~3 Register */  #define STATUS1_ADC_SHIFT		(0)  #define STATUS1_ADCLOW_SHIFT		(5) diff --git a/include/linux/mm.h b/include/linux/mm.h index 7acc9dc73c9..e19ff30ad0a 100644 --- a/include/linux/mm.h +++ b/include/linux/mm.h @@ -87,7 +87,6 @@ extern unsigned int kobjsize(const void *objp);  #define VM_PFNMAP	0x00000400	/* Page-ranges managed without "struct page", just pure PFN */  #define VM_DENYWRITE	0x00000800	/* ETXTBSY on write attempts.. */ -#define VM_POPULATE     0x00001000  #define VM_LOCKED	0x00002000  #define VM_IO           0x00004000	/* Memory mapped I/O or similar */ diff --git a/include/linux/mman.h b/include/linux/mman.h index 61c7a87e5d2..9aa863da287 100644 --- a/include/linux/mman.h +++ b/include/linux/mman.h @@ -79,8 +79,6 @@ calc_vm_flag_bits(unsigned long flags)  {  	return _calc_vm_trans(flags, MAP_GROWSDOWN,  VM_GROWSDOWN ) |  	       _calc_vm_trans(flags, MAP_DENYWRITE,  VM_DENYWRITE ) | -	       ((flags & MAP_LOCKED) ? (VM_LOCKED | VM_POPULATE) : 0) | -	       (((flags & (MAP_POPULATE | MAP_NONBLOCK)) == MAP_POPULATE) ? -							VM_POPULATE : 0); +	       _calc_vm_trans(flags, MAP_LOCKED,     VM_LOCKED    );  }  #endif /* _LINUX_MMAN_H */ diff --git a/include/linux/mount.h b/include/linux/mount.h index d7029f4a191..73005f9957e 100644 --- a/include/linux/mount.h +++ b/include/linux/mount.h @@ -47,6 +47,8 @@ struct mnt_namespace;  #define MNT_INTERNAL	0x4000 +#define MNT_LOCK_READONLY	0x400000 +  struct vfsmount {  	struct dentry *mnt_root;	/* root of the mounted tree */  	struct super_block *mnt_sb;	/* pointer to superblock */ diff --git a/include/linux/mxsfb.h b/include/linux/mxsfb.h index f14943d5531..f80af867434 100644 --- a/include/linux/mxsfb.h +++ b/include/linux/mxsfb.h @@ -24,8 +24,8 @@  #define STMLCDIF_18BIT 2 /** pixel data bus to the display is of 18 bit width */  #define STMLCDIF_24BIT 3 /** pixel data bus to the display is of 24 bit width */ -#define FB_SYNC_DATA_ENABLE_HIGH_ACT	(1 << 6) -#define FB_SYNC_DOTCLK_FAILING_ACT	(1 << 7) /* failing/negtive edge sampling */ +#define MXSFB_SYNC_DATA_ENABLE_HIGH_ACT	(1 << 6) +#define MXSFB_SYNC_DOTCLK_FAILING_ACT	(1 << 7) /* failing/negtive edge sampling */  struct mxsfb_platform_data {  	struct fb_videomode *mode_list; @@ -44,6 +44,9 @@ struct mxsfb_platform_data {  				 * allocated. If specified,fb_size must also be specified.  				 * fb_phys must be unused by Linux.  				 */ +	u32 sync;		/* sync mask, contains MXSFB specifics not +				 * carried in fb_info->var.sync +				 */  };  #endif /* __LINUX_MXSFB_H */ diff --git a/include/linux/thermal.h b/include/linux/thermal.h index f0bd7f90a90..e3c0ae9bb1f 100644 --- a/include/linux/thermal.h +++ b/include/linux/thermal.h @@ -44,7 +44,7 @@  /* Adding event notification support elements */  #define THERMAL_GENL_FAMILY_NAME                "thermal_event"  #define THERMAL_GENL_VERSION                    0x01 -#define THERMAL_GENL_MCAST_GROUP_NAME           "thermal_mc_group" +#define THERMAL_GENL_MCAST_GROUP_NAME           "thermal_mc_grp"  /* Default Thermal Governor */  #if defined(CONFIG_THERMAL_DEFAULT_GOV_STEP_WISE) diff --git a/include/linux/udp.h b/include/linux/udp.h index 9d81de123c9..42278bbf7a8 100644 --- a/include/linux/udp.h +++ b/include/linux/udp.h @@ -68,6 +68,7 @@ struct udp_sock {  	 * For encapsulation sockets.  	 */  	int (*encap_rcv)(struct sock *sk, struct sk_buff *skb); +	void (*encap_destroy)(struct sock *sk);  };  static inline struct udp_sock *udp_sk(const struct sock *sk) diff --git a/include/linux/usb/hcd.h b/include/linux/usb/hcd.h index 0a78df5f6cf..59694b5e5e9 100644 --- a/include/linux/usb/hcd.h +++ b/include/linux/usb/hcd.h @@ -357,6 +357,7 @@ struct hc_driver {  		 */  	int	(*disable_usb3_lpm_timeout)(struct usb_hcd *,  			struct usb_device *, enum usb3_link_state state); +	int	(*find_raw_port_number)(struct usb_hcd *, int);  };  extern int usb_hcd_link_urb_to_ep(struct usb_hcd *hcd, struct urb *urb); @@ -396,6 +397,7 @@ extern int usb_hcd_is_primary_hcd(struct usb_hcd *hcd);  extern int usb_add_hcd(struct usb_hcd *hcd,  		unsigned int irqnum, unsigned long irqflags);  extern void usb_remove_hcd(struct usb_hcd *hcd); +extern int usb_hcd_find_raw_port_number(struct usb_hcd *hcd, int port1);  struct platform_device;  extern void usb_hcd_platform_shutdown(struct platform_device *dev); diff --git a/include/linux/user_namespace.h b/include/linux/user_namespace.h index 4ce00932493..b6b215f13b4 100644 --- a/include/linux/user_namespace.h +++ b/include/linux/user_namespace.h @@ -26,6 +26,8 @@ struct user_namespace {  	kuid_t			owner;  	kgid_t			group;  	unsigned int		proc_inum; +	bool			may_mount_sysfs; +	bool			may_mount_proc;  };  extern struct user_namespace init_user_ns; @@ -82,4 +84,6 @@ static inline void put_user_ns(struct user_namespace *ns)  #endif +void update_mnt_policy(struct user_namespace *userns); +  #endif /* _LINUX_USER_H */ diff --git a/include/net/flow_keys.h b/include/net/flow_keys.h index 80461c1ae9e..bb8271d487b 100644 --- a/include/net/flow_keys.h +++ b/include/net/flow_keys.h @@ -9,6 +9,7 @@ struct flow_keys {  		__be32 ports;  		__be16 port16[2];  	}; +	u16 thoff;  	u8 ip_proto;  }; diff --git a/include/net/ip_vs.h b/include/net/ip_vs.h index 68c69d54d39..fce8e6b66d5 100644 --- a/include/net/ip_vs.h +++ b/include/net/ip_vs.h @@ -976,6 +976,7 @@ struct netns_ipvs {  	int			sysctl_sync_retries;  	int			sysctl_nat_icmp_send;  	int			sysctl_pmtu_disc; +	int			sysctl_backup_only;  	/* ip_vs_lblc */  	int			sysctl_lblc_expiration; @@ -1067,6 +1068,12 @@ static inline int sysctl_pmtu_disc(struct netns_ipvs *ipvs)  	return ipvs->sysctl_pmtu_disc;  } +static inline int sysctl_backup_only(struct netns_ipvs *ipvs) +{ +	return ipvs->sync_state & IP_VS_STATE_BACKUP && +	       ipvs->sysctl_backup_only; +} +  #else  static inline int sysctl_sync_threshold(struct netns_ipvs *ipvs) @@ -1114,6 +1121,11 @@ static inline int sysctl_pmtu_disc(struct netns_ipvs *ipvs)  	return 1;  } +static inline int sysctl_backup_only(struct netns_ipvs *ipvs) +{ +	return 0; +} +  #endif  /* diff --git a/include/net/ipip.h b/include/net/ipip.h index fd19625ff99..982141c1520 100644 --- a/include/net/ipip.h +++ b/include/net/ipip.h @@ -77,15 +77,11 @@ static inline void tunnel_ip_select_ident(struct sk_buff *skb,  {  	struct iphdr *iph = ip_hdr(skb); -	if (iph->frag_off & htons(IP_DF)) -		iph->id	= 0; -	else { -		/* Use inner packet iph-id if possible. */ -		if (skb->protocol == htons(ETH_P_IP) && old_iph->id) -			iph->id	= old_iph->id; -		else -			__ip_select_ident(iph, dst, -					  (skb_shinfo(skb)->gso_segs ?: 1) - 1); -	} +	/* Use inner packet iph-id if possible. */ +	if (skb->protocol == htons(ETH_P_IP) && old_iph->id) +		iph->id	= old_iph->id; +	else +		__ip_select_ident(iph, dst, +				  (skb_shinfo(skb)->gso_segs ?: 1) - 1);  }  #endif diff --git a/include/uapi/linux/packet_diag.h b/include/uapi/linux/packet_diag.h index 93f5fa94a43..afafd703ad9 100644 --- a/include/uapi/linux/packet_diag.h +++ b/include/uapi/linux/packet_diag.h @@ -33,9 +33,11 @@ enum {  	PACKET_DIAG_TX_RING,  	PACKET_DIAG_FANOUT, -	PACKET_DIAG_MAX, +	__PACKET_DIAG_MAX,  }; +#define PACKET_DIAG_MAX (__PACKET_DIAG_MAX - 1) +  struct packet_diag_info {  	__u32	pdi_index;  	__u32	pdi_version; diff --git a/include/uapi/linux/unix_diag.h b/include/uapi/linux/unix_diag.h index b8a24941db2..b9e2a6a7446 100644 --- a/include/uapi/linux/unix_diag.h +++ b/include/uapi/linux/unix_diag.h @@ -39,9 +39,11 @@ enum {  	UNIX_DIAG_MEMINFO,  	UNIX_DIAG_SHUTDOWN, -	UNIX_DIAG_MAX, +	__UNIX_DIAG_MAX,  }; +#define UNIX_DIAG_MAX (__UNIX_DIAG_MAX - 1) +  struct unix_diag_vfs {  	__u32	udiag_vfs_ino;  	__u32	udiag_vfs_dev; diff --git a/include/xen/interface/io/blkif.h b/include/xen/interface/io/blkif.h index 01c3d62436e..ffd4652de91 100644 --- a/include/xen/interface/io/blkif.h +++ b/include/xen/interface/io/blkif.h @@ -138,11 +138,21 @@ struct blkif_request_discard {  	uint8_t        _pad3;  } __attribute__((__packed__)); +struct blkif_request_other { +	uint8_t      _pad1; +	blkif_vdev_t _pad2;        /* only for read/write requests         */ +#ifdef CONFIG_X86_64 +	uint32_t     _pad3;        /* offsetof(blkif_req..,u.other.id)==8*/ +#endif +	uint64_t     id;           /* private guest value, echoed in resp  */ +} __attribute__((__packed__)); +  struct blkif_request {  	uint8_t        operation;    /* BLKIF_OP_???                         */  	union {  		struct blkif_request_rw rw;  		struct blkif_request_discard discard; +		struct blkif_request_other other;  	} u;  } __attribute__((__packed__)); diff --git a/include/xen/interface/physdev.h b/include/xen/interface/physdev.h index 1844d31f455..7000bb1f6e9 100644 --- a/include/xen/interface/physdev.h +++ b/include/xen/interface/physdev.h @@ -251,6 +251,12 @@ struct physdev_pci_device_add {  #define PHYSDEVOP_pci_device_remove     26  #define PHYSDEVOP_restore_msi_ext       27 +/* + * Dom0 should use these two to announce MMIO resources assigned to + * MSI-X capable devices won't (prepare) or may (release) change. + */ +#define PHYSDEVOP_prepare_msix          30 +#define PHYSDEVOP_release_msix          31  struct physdev_pci_device {      /* IN */      uint16_t seg; diff --git a/ipc/mqueue.c b/ipc/mqueue.c index 3953fda2e8b..e4e47f64744 100644 --- a/ipc/mqueue.c +++ b/ipc/mqueue.c @@ -330,8 +330,16 @@ static struct dentry *mqueue_mount(struct file_system_type *fs_type,  			 int flags, const char *dev_name,  			 void *data)  { -	if (!(flags & MS_KERNMOUNT)) -		data = current->nsproxy->ipc_ns; +	if (!(flags & MS_KERNMOUNT)) { +		struct ipc_namespace *ns = current->nsproxy->ipc_ns; +		/* Don't allow mounting unless the caller has CAP_SYS_ADMIN +		 * over the ipc namespace. +		 */ +		if (!ns_capable(ns->user_ns, CAP_SYS_ADMIN)) +			return ERR_PTR(-EPERM); + +		data = ns; +	}  	return mount_ns(fs_type, flags, data, mqueue_fill_super);  } diff --git a/kernel/exit.c b/kernel/exit.c index 51e485ca993..60bc027c61c 100644 --- a/kernel/exit.c +++ b/kernel/exit.c @@ -835,7 +835,7 @@ void do_exit(long code)  	/*  	 * Make sure we are holding no locks:  	 */ -	debug_check_no_locks_held(); +	debug_check_no_locks_held(tsk);  	/*  	 * We can do this unlocked here. The futex code uses this flag  	 * just to verify whether the pi state cleanup has been done diff --git a/kernel/lockdep.c b/kernel/lockdep.c index 259db207b5d..8a0efac4f99 100644 --- a/kernel/lockdep.c +++ b/kernel/lockdep.c @@ -4088,7 +4088,7 @@ void debug_check_no_locks_freed(const void *mem_from, unsigned long mem_len)  }  EXPORT_SYMBOL_GPL(debug_check_no_locks_freed); -static void print_held_locks_bug(void) +static void print_held_locks_bug(struct task_struct *curr)  {  	if (!debug_locks_off())  		return; @@ -4097,21 +4097,22 @@ static void print_held_locks_bug(void)  	printk("\n");  	printk("=====================================\n"); -	printk("[ BUG: %s/%d still has locks held! ]\n", -	       current->comm, task_pid_nr(current)); +	printk("[ BUG: lock held at task exit time! ]\n");  	print_kernel_ident();  	printk("-------------------------------------\n"); -	lockdep_print_held_locks(current); +	printk("%s/%d is exiting with locks still held!\n", +		curr->comm, task_pid_nr(curr)); +	lockdep_print_held_locks(curr); +  	printk("\nstack backtrace:\n");  	dump_stack();  } -void debug_check_no_locks_held(void) +void debug_check_no_locks_held(struct task_struct *task)  { -	if (unlikely(current->lockdep_depth > 0)) -		print_held_locks_bug(); +	if (unlikely(task->lockdep_depth > 0)) +		print_held_locks_bug(task);  } -EXPORT_SYMBOL_GPL(debug_check_no_locks_held);  void debug_show_all_locks(void)  { diff --git a/kernel/pid_namespace.c b/kernel/pid_namespace.c index c1c3dc1c602..bea15bdf82b 100644 --- a/kernel/pid_namespace.c +++ b/kernel/pid_namespace.c @@ -181,6 +181,7 @@ void zap_pid_ns_processes(struct pid_namespace *pid_ns)  	int nr;  	int rc;  	struct task_struct *task, *me = current; +	int init_pids = thread_group_leader(me) ? 1 : 2;  	/* Don't allow any more processes into the pid namespace */  	disable_pid_allocation(pid_ns); @@ -230,7 +231,7 @@ void zap_pid_ns_processes(struct pid_namespace *pid_ns)  	 */  	for (;;) {  		set_current_state(TASK_UNINTERRUPTIBLE); -		if (pid_ns->nr_hashed == 1) +		if (pid_ns->nr_hashed == init_pids)  			break;  		schedule();  	} diff --git a/kernel/time/tick-broadcast.c b/kernel/time/tick-broadcast.c index 2fb8cb88df8..7f32fe0e52c 100644 --- a/kernel/time/tick-broadcast.c +++ b/kernel/time/tick-broadcast.c @@ -67,7 +67,8 @@ static void tick_broadcast_start_periodic(struct clock_event_device *bc)   */  int tick_check_broadcast_device(struct clock_event_device *dev)  { -	if ((tick_broadcast_device.evtdev && +	if ((dev->features & CLOCK_EVT_FEAT_DUMMY) || +	    (tick_broadcast_device.evtdev &&  	     tick_broadcast_device.evtdev->rating >= dev->rating) ||  	     (dev->features & CLOCK_EVT_FEAT_C3STOP))  		return 0; diff --git a/kernel/user.c b/kernel/user.c index e81978e8c03..8e635a18ab5 100644 --- a/kernel/user.c +++ b/kernel/user.c @@ -51,6 +51,8 @@ struct user_namespace init_user_ns = {  	.owner = GLOBAL_ROOT_UID,  	.group = GLOBAL_ROOT_GID,  	.proc_inum = PROC_USER_INIT_INO, +	.may_mount_sysfs = true, +	.may_mount_proc = true,  };  EXPORT_SYMBOL_GPL(init_user_ns); diff --git a/kernel/user_namespace.c b/kernel/user_namespace.c index b14f4d34204..a54f26f82eb 100644 --- a/kernel/user_namespace.c +++ b/kernel/user_namespace.c @@ -61,6 +61,15 @@ int create_user_ns(struct cred *new)  	kgid_t group = new->egid;  	int ret; +	/* +	 * Verify that we can not violate the policy of which files +	 * may be accessed that is specified by the root directory, +	 * by verifing that the root directory is at the root of the +	 * mount namespace which allows all files to be accessed. +	 */ +	if (current_chrooted()) +		return -EPERM; +  	/* The creator needs a mapping in the parent user namespace  	 * or else we won't be able to reasonably tell userspace who  	 * created a user_namespace. @@ -87,6 +96,8 @@ int create_user_ns(struct cred *new)  	set_cred_user_ns(new, ns); +	update_mnt_policy(ns); +  	return 0;  } diff --git a/mm/fremap.c b/mm/fremap.c index 4723ac8d2fc..87da3590c61 100644 --- a/mm/fremap.c +++ b/mm/fremap.c @@ -204,10 +204,8 @@ get_write_lock:  			unsigned long addr;  			struct file *file = get_file(vma->vm_file); -			vm_flags = vma->vm_flags; -			if (!(flags & MAP_NONBLOCK)) -				vm_flags |= VM_POPULATE; -			addr = mmap_region(file, start, size, vm_flags, pgoff); +			addr = mmap_region(file, start, size, +					vma->vm_flags, pgoff);  			fput(file);  			if (IS_ERR_VALUE(addr)) {  				err = addr; @@ -226,12 +224,6 @@ get_write_lock:  		mutex_unlock(&mapping->i_mmap_mutex);  	} -	if (!(flags & MAP_NONBLOCK) && !(vma->vm_flags & VM_POPULATE)) { -		if (!has_write_lock) -			goto get_write_lock; -		vma->vm_flags |= VM_POPULATE; -	} -  	if (vma->vm_flags & VM_LOCKED) {  		/*  		 * drop PG_Mlocked flag for over-mapped range diff --git a/mm/mlock.c b/mm/mlock.c index 1c5e33fce63..79b7cf7d1bc 100644 --- a/mm/mlock.c +++ b/mm/mlock.c @@ -358,7 +358,7 @@ static int do_mlock(unsigned long start, size_t len, int on)  		newflags = vma->vm_flags & ~VM_LOCKED;  		if (on) -			newflags |= VM_LOCKED | VM_POPULATE; +			newflags |= VM_LOCKED;  		tmp = vma->vm_end;  		if (tmp > end) @@ -418,8 +418,7 @@ int __mm_populate(unsigned long start, unsigned long len, int ignore_errors)  		 * range with the first VMA. Also, skip undesirable VMA types.  		 */  		nend = min(end, vma->vm_end); -		if ((vma->vm_flags & (VM_IO | VM_PFNMAP | VM_POPULATE)) != -		    VM_POPULATE) +		if (vma->vm_flags & (VM_IO | VM_PFNMAP))  			continue;  		if (nstart < vma->vm_start)  			nstart = vma->vm_start; @@ -492,9 +491,9 @@ static int do_mlockall(int flags)  	struct vm_area_struct * vma, * prev = NULL;  	if (flags & MCL_FUTURE) -		current->mm->def_flags |= VM_LOCKED | VM_POPULATE; +		current->mm->def_flags |= VM_LOCKED;  	else -		current->mm->def_flags &= ~(VM_LOCKED | VM_POPULATE); +		current->mm->def_flags &= ~VM_LOCKED;  	if (flags == MCL_FUTURE)  		goto out; @@ -503,7 +502,7 @@ static int do_mlockall(int flags)  		newflags = vma->vm_flags & ~VM_LOCKED;  		if (flags & MCL_CURRENT) -			newflags |= VM_LOCKED | VM_POPULATE; +			newflags |= VM_LOCKED;  		/* Ignore errors */  		mlock_fixup(vma, &prev, vma->vm_start, vma->vm_end, newflags); diff --git a/mm/mmap.c b/mm/mmap.c index 2664a47cec9..6466699b16c 100644 --- a/mm/mmap.c +++ b/mm/mmap.c @@ -1306,7 +1306,9 @@ unsigned long do_mmap_pgoff(struct file *file, unsigned long addr,  	}  	addr = mmap_region(file, addr, len, vm_flags, pgoff); -	if (!IS_ERR_VALUE(addr) && (vm_flags & VM_POPULATE)) +	if (!IS_ERR_VALUE(addr) && +	    ((vm_flags & VM_LOCKED) || +	     (flags & (MAP_POPULATE | MAP_NONBLOCK)) == MAP_POPULATE))  		*populate = len;  	return addr;  } diff --git a/net/8021q/vlan.c b/net/8021q/vlan.c index a18714469bf..85addcd9372 100644 --- a/net/8021q/vlan.c +++ b/net/8021q/vlan.c @@ -86,13 +86,6 @@ void unregister_vlan_dev(struct net_device *dev, struct list_head *head)  	grp = &vlan_info->grp; -	/* Take it out of our own structures, but be sure to interlock with -	 * HW accelerating devices or SW vlan input packet processing if -	 * VLAN is not 0 (leave it there for 802.1p). -	 */ -	if (vlan_id) -		vlan_vid_del(real_dev, vlan_id); -  	grp->nr_vlan_devs--;  	if (vlan->flags & VLAN_FLAG_MVRP) @@ -114,6 +107,13 @@ void unregister_vlan_dev(struct net_device *dev, struct list_head *head)  		vlan_gvrp_uninit_applicant(real_dev);  	} +	/* Take it out of our own structures, but be sure to interlock with +	 * HW accelerating devices or SW vlan input packet processing if +	 * VLAN is not 0 (leave it there for 802.1p). +	 */ +	if (vlan_id) +		vlan_vid_del(real_dev, vlan_id); +  	/* Get rid of the vlan's reference to real_dev */  	dev_put(real_dev);  } diff --git a/net/bluetooth/sco.c b/net/bluetooth/sco.c index 79d87d8d4f5..fad0302bdb3 100644 --- a/net/bluetooth/sco.c +++ b/net/bluetooth/sco.c @@ -359,6 +359,7 @@ static void __sco_sock_close(struct sock *sk)  			sco_chan_del(sk, ECONNRESET);  		break; +	case BT_CONNECT2:  	case BT_CONNECT:  	case BT_DISCONN:  		sco_chan_del(sk, ECONNRESET); diff --git a/net/bridge/br_fdb.c b/net/bridge/br_fdb.c index b0812c91c0f..bab338e6270 100644 --- a/net/bridge/br_fdb.c +++ b/net/bridge/br_fdb.c @@ -423,7 +423,7 @@ static int fdb_insert(struct net_bridge *br, struct net_bridge_port *source,  			return 0;  		br_warn(br, "adding interface %s with same address "  		       "as a received packet\n", -		       source->dev->name); +		       source ? source->dev->name : br->dev->name);  		fdb_delete(br, fdb);  	} diff --git a/net/core/dev.c b/net/core/dev.c index d540ced1f6c..b13e5c766c1 100644 --- a/net/core/dev.c +++ b/net/core/dev.c @@ -1545,7 +1545,6 @@ void net_enable_timestamp(void)  		return;  	}  #endif -	WARN_ON(in_interrupt());  	static_key_slow_inc(&netstamp_needed);  }  EXPORT_SYMBOL(net_enable_timestamp); diff --git a/net/core/flow_dissector.c b/net/core/flow_dissector.c index 9d4c7201400..e187bf06d67 100644 --- a/net/core/flow_dissector.c +++ b/net/core/flow_dissector.c @@ -140,6 +140,8 @@ ipv6:  			flow->ports = *ports;  	} +	flow->thoff = (u16) nhoff; +  	return true;  }  EXPORT_SYMBOL(skb_flow_dissect); diff --git a/net/core/scm.c b/net/core/scm.c index 905dcc6ad1e..2dc6cdaaae8 100644 --- a/net/core/scm.c +++ b/net/core/scm.c @@ -24,6 +24,7 @@  #include <linux/interrupt.h>  #include <linux/netdevice.h>  #include <linux/security.h> +#include <linux/pid_namespace.h>  #include <linux/pid.h>  #include <linux/nsproxy.h>  #include <linux/slab.h> @@ -52,7 +53,8 @@ static __inline__ int scm_check_creds(struct ucred *creds)  	if (!uid_valid(uid) || !gid_valid(gid))  		return -EINVAL; -	if ((creds->pid == task_tgid_vnr(current) || nsown_capable(CAP_SYS_ADMIN)) && +	if ((creds->pid == task_tgid_vnr(current) || +	     ns_capable(current->nsproxy->pid_ns->user_ns, CAP_SYS_ADMIN)) &&  	    ((uid_eq(uid, cred->uid)   || uid_eq(uid, cred->euid) ||  	      uid_eq(uid, cred->suid)) || nsown_capable(CAP_SETUID)) &&  	    ((gid_eq(gid, cred->gid)   || gid_eq(gid, cred->egid) || diff --git a/net/ipv4/af_inet.c b/net/ipv4/af_inet.c index 68f6a94f766..c929d9c1c4b 100644 --- a/net/ipv4/af_inet.c +++ b/net/ipv4/af_inet.c @@ -1333,8 +1333,7 @@ static struct sk_buff *inet_gso_segment(struct sk_buff *skb,  				iph->frag_off |= htons(IP_MF);  			offset += (skb->len - skb->mac_len - iph->ihl * 4);  		} else  { -			if (!(iph->frag_off & htons(IP_DF))) -				iph->id = htons(id++); +			iph->id = htons(id++);  		}  		iph->tot_len = htons(skb->len - skb->mac_len);  		iph->check = 0; diff --git a/net/ipv4/ipconfig.c b/net/ipv4/ipconfig.c index 98cbc687701..bf6c5cf31ae 100644 --- a/net/ipv4/ipconfig.c +++ b/net/ipv4/ipconfig.c @@ -1522,7 +1522,8 @@ static int __init ip_auto_config(void)  		}  	for (i++; i < CONF_NAMESERVERS_MAX; i++)  		if (ic_nameservers[i] != NONE) -			pr_cont(", nameserver%u=%pI4\n", i, &ic_nameservers[i]); +			pr_cont(", nameserver%u=%pI4", i, &ic_nameservers[i]); +	pr_cont("\n");  #endif /* !SILENT */  	return 0; diff --git a/net/ipv4/netfilter/Kconfig b/net/ipv4/netfilter/Kconfig index ce2d43e1f09..0d755c50994 100644 --- a/net/ipv4/netfilter/Kconfig +++ b/net/ipv4/netfilter/Kconfig @@ -36,19 +36,6 @@ config NF_CONNTRACK_PROC_COMPAT  	  If unsure, say Y. -config IP_NF_QUEUE -	tristate "IP Userspace queueing via NETLINK (OBSOLETE)" -	depends on NETFILTER_ADVANCED -	help -	  Netfilter has the ability to queue packets to user space: the -	  netlink device can be used to access them using this driver. - -	  This option enables the old IPv4-only "ip_queue" implementation -	  which has been obsoleted by the new "nfnetlink_queue" code (see -	  CONFIG_NETFILTER_NETLINK_QUEUE). - -	  To compile it as a module, choose M here.  If unsure, say N. -  config IP_NF_IPTABLES  	tristate "IP tables support (required for filtering/masq/NAT)"  	default m if NETFILTER_ADVANCED=n diff --git a/net/ipv4/tcp_input.c b/net/ipv4/tcp_input.c index 0d9bdacce99..3bd55bad230 100644 --- a/net/ipv4/tcp_input.c +++ b/net/ipv4/tcp_input.c @@ -2059,11 +2059,8 @@ void tcp_enter_loss(struct sock *sk, int how)  	if (tcp_is_reno(tp))  		tcp_reset_reno_sack(tp); -	if (!how) { -		/* Push undo marker, if it was plain RTO and nothing -		 * was retransmitted. */ -		tp->undo_marker = tp->snd_una; -	} else { +	tp->undo_marker = tp->snd_una; +	if (how) {  		tp->sacked_out = 0;  		tp->fackets_out = 0;  	} diff --git a/net/ipv4/tcp_output.c b/net/ipv4/tcp_output.c index 817fbb396bc..5d0b4387cba 100644 --- a/net/ipv4/tcp_output.c +++ b/net/ipv4/tcp_output.c @@ -1809,8 +1809,11 @@ static bool tcp_tso_should_defer(struct sock *sk, struct sk_buff *skb)  			goto send_now;  	} -	/* Ok, it looks like it is advisable to defer.  */ -	tp->tso_deferred = 1 | (jiffies << 1); +	/* Ok, it looks like it is advisable to defer. +	 * Do not rearm the timer if already set to not break TCP ACK clocking. +	 */ +	if (!tp->tso_deferred) +		tp->tso_deferred = 1 | (jiffies << 1);  	return true; diff --git a/net/ipv4/udp.c b/net/ipv4/udp.c index 265c42cf963..0a073a26372 100644 --- a/net/ipv4/udp.c +++ b/net/ipv4/udp.c @@ -1762,9 +1762,16 @@ int udp_rcv(struct sk_buff *skb)  void udp_destroy_sock(struct sock *sk)  { +	struct udp_sock *up = udp_sk(sk);  	bool slow = lock_sock_fast(sk);  	udp_flush_pending_frames(sk);  	unlock_sock_fast(sk, slow); +	if (static_key_false(&udp_encap_needed) && up->encap_type) { +		void (*encap_destroy)(struct sock *sk); +		encap_destroy = ACCESS_ONCE(up->encap_destroy); +		if (encap_destroy) +			encap_destroy(sk); +	}  }  /* diff --git a/net/ipv6/addrconf.c b/net/ipv6/addrconf.c index f2c7e615f90..26512250e09 100644 --- a/net/ipv6/addrconf.c +++ b/net/ipv6/addrconf.c @@ -4784,26 +4784,20 @@ static void addrconf_sysctl_unregister(struct inet6_dev *idev)  static int __net_init addrconf_init_net(struct net *net)  { -	int err; +	int err = -ENOMEM;  	struct ipv6_devconf *all, *dflt; -	err = -ENOMEM; -	all = &ipv6_devconf; -	dflt = &ipv6_devconf_dflt; +	all = kmemdup(&ipv6_devconf, sizeof(ipv6_devconf), GFP_KERNEL); +	if (all == NULL) +		goto err_alloc_all; -	if (!net_eq(net, &init_net)) { -		all = kmemdup(all, sizeof(ipv6_devconf), GFP_KERNEL); -		if (all == NULL) -			goto err_alloc_all; +	dflt = kmemdup(&ipv6_devconf_dflt, sizeof(ipv6_devconf_dflt), GFP_KERNEL); +	if (dflt == NULL) +		goto err_alloc_dflt; -		dflt = kmemdup(dflt, sizeof(ipv6_devconf_dflt), GFP_KERNEL); -		if (dflt == NULL) -			goto err_alloc_dflt; -	} else { -		/* these will be inherited by all namespaces */ -		dflt->autoconf = ipv6_defaults.autoconf; -		dflt->disable_ipv6 = ipv6_defaults.disable_ipv6; -	} +	/* these will be inherited by all namespaces */ +	dflt->autoconf = ipv6_defaults.autoconf; +	dflt->disable_ipv6 = ipv6_defaults.disable_ipv6;  	net->ipv6.devconf_all = all;  	net->ipv6.devconf_dflt = dflt; diff --git a/net/ipv6/netfilter/ip6t_NPT.c b/net/ipv6/netfilter/ip6t_NPT.c index 83acc1405a1..33608c61027 100644 --- a/net/ipv6/netfilter/ip6t_NPT.c +++ b/net/ipv6/netfilter/ip6t_NPT.c @@ -114,6 +114,7 @@ ip6t_dnpt_tg(struct sk_buff *skb, const struct xt_action_param *par)  static struct xt_target ip6t_npt_target_reg[] __read_mostly = {  	{  		.name		= "SNPT", +		.table		= "mangle",  		.target		= ip6t_snpt_tg,  		.targetsize	= sizeof(struct ip6t_npt_tginfo),  		.checkentry	= ip6t_npt_checkentry, @@ -124,6 +125,7 @@ static struct xt_target ip6t_npt_target_reg[] __read_mostly = {  	},  	{  		.name		= "DNPT", +		.table		= "mangle",  		.target		= ip6t_dnpt_tg,  		.targetsize	= sizeof(struct ip6t_npt_tginfo),  		.checkentry	= ip6t_npt_checkentry, diff --git a/net/ipv6/udp.c b/net/ipv6/udp.c index 599e1ba6d1c..d8e5e852fc7 100644 --- a/net/ipv6/udp.c +++ b/net/ipv6/udp.c @@ -1285,10 +1285,18 @@ do_confirm:  void udpv6_destroy_sock(struct sock *sk)  { +	struct udp_sock *up = udp_sk(sk);  	lock_sock(sk);  	udp_v6_flush_pending_frames(sk);  	release_sock(sk); +	if (static_key_false(&udpv6_encap_needed) && up->encap_type) { +		void (*encap_destroy)(struct sock *sk); +		encap_destroy = ACCESS_ONCE(up->encap_destroy); +		if (encap_destroy) +			encap_destroy(sk); +	} +  	inet6_destroy_sock(sk);  } diff --git a/net/irda/af_irda.c b/net/irda/af_irda.c index d07e3a62644..d28e7f014cc 100644 --- a/net/irda/af_irda.c +++ b/net/irda/af_irda.c @@ -2583,8 +2583,10 @@ bed:  				    NULL, NULL, NULL);  		/* Check if the we got some results */ -		if (!self->cachedaddr) -			return -EAGAIN;		/* Didn't find any devices */ +		if (!self->cachedaddr) { +			err = -EAGAIN;		/* Didn't find any devices */ +			goto out; +		}  		daddr = self->cachedaddr;  		/* Cleanup */  		self->cachedaddr = 0; diff --git a/net/l2tp/l2tp_core.c b/net/l2tp/l2tp_core.c index d36875f3427..8aecf5df665 100644 --- a/net/l2tp/l2tp_core.c +++ b/net/l2tp/l2tp_core.c @@ -114,7 +114,6 @@ struct l2tp_net {  static void l2tp_session_set_header_len(struct l2tp_session *session, int version);  static void l2tp_tunnel_free(struct l2tp_tunnel *tunnel); -static void l2tp_tunnel_closeall(struct l2tp_tunnel *tunnel);  static inline struct l2tp_net *l2tp_pernet(struct net *net)  { @@ -192,6 +191,7 @@ struct sock *l2tp_tunnel_sock_lookup(struct l2tp_tunnel *tunnel)  	} else {  		/* Socket is owned by kernelspace */  		sk = tunnel->sock; +		sock_hold(sk);  	}  out: @@ -210,6 +210,7 @@ void l2tp_tunnel_sock_put(struct sock *sk)  		}  		sock_put(sk);  	} +	sock_put(sk);  }  EXPORT_SYMBOL_GPL(l2tp_tunnel_sock_put); @@ -373,10 +374,8 @@ static void l2tp_recv_queue_skb(struct l2tp_session *session, struct sk_buff *sk  	struct sk_buff *skbp;  	struct sk_buff *tmp;  	u32 ns = L2TP_SKB_CB(skb)->ns; -	struct l2tp_stats *sstats;  	spin_lock_bh(&session->reorder_q.lock); -	sstats = &session->stats;  	skb_queue_walk_safe(&session->reorder_q, skbp, tmp) {  		if (L2TP_SKB_CB(skbp)->ns > ns) {  			__skb_queue_before(&session->reorder_q, skbp, skb); @@ -384,9 +383,7 @@ static void l2tp_recv_queue_skb(struct l2tp_session *session, struct sk_buff *sk  				 "%s: pkt %hu, inserted before %hu, reorder_q len=%d\n",  				 session->name, ns, L2TP_SKB_CB(skbp)->ns,  				 skb_queue_len(&session->reorder_q)); -			u64_stats_update_begin(&sstats->syncp); -			sstats->rx_oos_packets++; -			u64_stats_update_end(&sstats->syncp); +			atomic_long_inc(&session->stats.rx_oos_packets);  			goto out;  		}  	} @@ -403,23 +400,16 @@ static void l2tp_recv_dequeue_skb(struct l2tp_session *session, struct sk_buff *  {  	struct l2tp_tunnel *tunnel = session->tunnel;  	int length = L2TP_SKB_CB(skb)->length; -	struct l2tp_stats *tstats, *sstats;  	/* We're about to requeue the skb, so return resources  	 * to its current owner (a socket receive buffer).  	 */  	skb_orphan(skb); -	tstats = &tunnel->stats; -	u64_stats_update_begin(&tstats->syncp); -	sstats = &session->stats; -	u64_stats_update_begin(&sstats->syncp); -	tstats->rx_packets++; -	tstats->rx_bytes += length; -	sstats->rx_packets++; -	sstats->rx_bytes += length; -	u64_stats_update_end(&tstats->syncp); -	u64_stats_update_end(&sstats->syncp); +	atomic_long_inc(&tunnel->stats.rx_packets); +	atomic_long_add(length, &tunnel->stats.rx_bytes); +	atomic_long_inc(&session->stats.rx_packets); +	atomic_long_add(length, &session->stats.rx_bytes);  	if (L2TP_SKB_CB(skb)->has_seq) {  		/* Bump our Nr */ @@ -450,7 +440,6 @@ static void l2tp_recv_dequeue(struct l2tp_session *session)  {  	struct sk_buff *skb;  	struct sk_buff *tmp; -	struct l2tp_stats *sstats;  	/* If the pkt at the head of the queue has the nr that we  	 * expect to send up next, dequeue it and any other @@ -458,13 +447,10 @@ static void l2tp_recv_dequeue(struct l2tp_session *session)  	 */  start:  	spin_lock_bh(&session->reorder_q.lock); -	sstats = &session->stats;  	skb_queue_walk_safe(&session->reorder_q, skb, tmp) {  		if (time_after(jiffies, L2TP_SKB_CB(skb)->expires)) { -			u64_stats_update_begin(&sstats->syncp); -			sstats->rx_seq_discards++; -			sstats->rx_errors++; -			u64_stats_update_end(&sstats->syncp); +			atomic_long_inc(&session->stats.rx_seq_discards); +			atomic_long_inc(&session->stats.rx_errors);  			l2tp_dbg(session, L2TP_MSG_SEQ,  				 "%s: oos pkt %u len %d discarded (too old), waiting for %u, reorder_q_len=%d\n",  				 session->name, L2TP_SKB_CB(skb)->ns, @@ -623,7 +609,6 @@ void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb,  	struct l2tp_tunnel *tunnel = session->tunnel;  	int offset;  	u32 ns, nr; -	struct l2tp_stats *sstats = &session->stats;  	/* The ref count is increased since we now hold a pointer to  	 * the session. Take care to decrement the refcnt when exiting @@ -640,9 +625,7 @@ void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb,  				  "%s: cookie mismatch (%u/%u). Discarding.\n",  				  tunnel->name, tunnel->tunnel_id,  				  session->session_id); -			u64_stats_update_begin(&sstats->syncp); -			sstats->rx_cookie_discards++; -			u64_stats_update_end(&sstats->syncp); +			atomic_long_inc(&session->stats.rx_cookie_discards);  			goto discard;  		}  		ptr += session->peer_cookie_len; @@ -711,9 +694,7 @@ void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb,  			l2tp_warn(session, L2TP_MSG_SEQ,  				  "%s: recv data has no seq numbers when required. Discarding.\n",  				  session->name); -			u64_stats_update_begin(&sstats->syncp); -			sstats->rx_seq_discards++; -			u64_stats_update_end(&sstats->syncp); +			atomic_long_inc(&session->stats.rx_seq_discards);  			goto discard;  		} @@ -732,9 +713,7 @@ void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb,  			l2tp_warn(session, L2TP_MSG_SEQ,  				  "%s: recv data has no seq numbers when required. Discarding.\n",  				  session->name); -			u64_stats_update_begin(&sstats->syncp); -			sstats->rx_seq_discards++; -			u64_stats_update_end(&sstats->syncp); +			atomic_long_inc(&session->stats.rx_seq_discards);  			goto discard;  		}  	} @@ -788,9 +767,7 @@ void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb,  			 * packets  			 */  			if (L2TP_SKB_CB(skb)->ns != session->nr) { -				u64_stats_update_begin(&sstats->syncp); -				sstats->rx_seq_discards++; -				u64_stats_update_end(&sstats->syncp); +				atomic_long_inc(&session->stats.rx_seq_discards);  				l2tp_dbg(session, L2TP_MSG_SEQ,  					 "%s: oos pkt %u len %d discarded, waiting for %u, reorder_q_len=%d\n",  					 session->name, L2TP_SKB_CB(skb)->ns, @@ -816,9 +793,7 @@ void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb,  	return;  discard: -	u64_stats_update_begin(&sstats->syncp); -	sstats->rx_errors++; -	u64_stats_update_end(&sstats->syncp); +	atomic_long_inc(&session->stats.rx_errors);  	kfree_skb(skb);  	if (session->deref) @@ -828,6 +803,23 @@ discard:  }  EXPORT_SYMBOL(l2tp_recv_common); +/* Drop skbs from the session's reorder_q + */ +int l2tp_session_queue_purge(struct l2tp_session *session) +{ +	struct sk_buff *skb = NULL; +	BUG_ON(!session); +	BUG_ON(session->magic != L2TP_SESSION_MAGIC); +	while ((skb = skb_dequeue(&session->reorder_q))) { +		atomic_long_inc(&session->stats.rx_errors); +		kfree_skb(skb); +		if (session->deref) +			(*session->deref)(session); +	} +	return 0; +} +EXPORT_SYMBOL_GPL(l2tp_session_queue_purge); +  /* Internal UDP receive frame. Do the real work of receiving an L2TP data frame   * here. The skb is not on a list when we get here.   * Returns 0 if the packet was a data packet and was successfully passed on. @@ -843,7 +835,6 @@ static int l2tp_udp_recv_core(struct l2tp_tunnel *tunnel, struct sk_buff *skb,  	u32 tunnel_id, session_id;  	u16 version;  	int length; -	struct l2tp_stats *tstats;  	if (tunnel->sock && l2tp_verify_udp_checksum(tunnel->sock, skb))  		goto discard_bad_csum; @@ -932,10 +923,7 @@ static int l2tp_udp_recv_core(struct l2tp_tunnel *tunnel, struct sk_buff *skb,  discard_bad_csum:  	LIMIT_NETDEBUG("%s: UDP: bad checksum\n", tunnel->name);  	UDP_INC_STATS_USER(tunnel->l2tp_net, UDP_MIB_INERRORS, 0); -	tstats = &tunnel->stats; -	u64_stats_update_begin(&tstats->syncp); -	tstats->rx_errors++; -	u64_stats_update_end(&tstats->syncp); +	atomic_long_inc(&tunnel->stats.rx_errors);  	kfree_skb(skb);  	return 0; @@ -1062,7 +1050,6 @@ static int l2tp_xmit_core(struct l2tp_session *session, struct sk_buff *skb,  	struct l2tp_tunnel *tunnel = session->tunnel;  	unsigned int len = skb->len;  	int error; -	struct l2tp_stats *tstats, *sstats;  	/* Debug */  	if (session->send_seq) @@ -1091,21 +1078,15 @@ static int l2tp_xmit_core(struct l2tp_session *session, struct sk_buff *skb,  		error = ip_queue_xmit(skb, fl);  	/* Update stats */ -	tstats = &tunnel->stats; -	u64_stats_update_begin(&tstats->syncp); -	sstats = &session->stats; -	u64_stats_update_begin(&sstats->syncp);  	if (error >= 0) { -		tstats->tx_packets++; -		tstats->tx_bytes += len; -		sstats->tx_packets++; -		sstats->tx_bytes += len; +		atomic_long_inc(&tunnel->stats.tx_packets); +		atomic_long_add(len, &tunnel->stats.tx_bytes); +		atomic_long_inc(&session->stats.tx_packets); +		atomic_long_add(len, &session->stats.tx_bytes);  	} else { -		tstats->tx_errors++; -		sstats->tx_errors++; +		atomic_long_inc(&tunnel->stats.tx_errors); +		atomic_long_inc(&session->stats.tx_errors);  	} -	u64_stats_update_end(&tstats->syncp); -	u64_stats_update_end(&sstats->syncp);  	return 0;  } @@ -1282,6 +1263,7 @@ static void l2tp_tunnel_destruct(struct sock *sk)  		/* No longer an encapsulation socket. See net/ipv4/udp.c */  		(udp_sk(sk))->encap_type = 0;  		(udp_sk(sk))->encap_rcv = NULL; +		(udp_sk(sk))->encap_destroy = NULL;  		break;  	case L2TP_ENCAPTYPE_IP:  		break; @@ -1311,7 +1293,7 @@ end:  /* When the tunnel is closed, all the attached sessions need to go too.   */ -static void l2tp_tunnel_closeall(struct l2tp_tunnel *tunnel) +void l2tp_tunnel_closeall(struct l2tp_tunnel *tunnel)  {  	int hash;  	struct hlist_node *walk; @@ -1334,25 +1316,13 @@ again:  			hlist_del_init(&session->hlist); -			/* Since we should hold the sock lock while -			 * doing any unbinding, we need to release the -			 * lock we're holding before taking that lock. -			 * Hold a reference to the sock so it doesn't -			 * disappear as we're jumping between locks. -			 */  			if (session->ref != NULL)  				(*session->ref)(session);  			write_unlock_bh(&tunnel->hlist_lock); -			if (tunnel->version != L2TP_HDR_VER_2) { -				struct l2tp_net *pn = l2tp_pernet(tunnel->l2tp_net); - -				spin_lock_bh(&pn->l2tp_session_hlist_lock); -				hlist_del_init_rcu(&session->global_hlist); -				spin_unlock_bh(&pn->l2tp_session_hlist_lock); -				synchronize_rcu(); -			} +			__l2tp_session_unhash(session); +			l2tp_session_queue_purge(session);  			if (session->session_close != NULL)  				(*session->session_close)(session); @@ -1360,6 +1330,8 @@ again:  			if (session->deref != NULL)  				(*session->deref)(session); +			l2tp_session_dec_refcount(session); +  			write_lock_bh(&tunnel->hlist_lock);  			/* Now restart from the beginning of this hash @@ -1372,6 +1344,17 @@ again:  	}  	write_unlock_bh(&tunnel->hlist_lock);  } +EXPORT_SYMBOL_GPL(l2tp_tunnel_closeall); + +/* Tunnel socket destroy hook for UDP encapsulation */ +static void l2tp_udp_encap_destroy(struct sock *sk) +{ +	struct l2tp_tunnel *tunnel = l2tp_sock_to_tunnel(sk); +	if (tunnel) { +		l2tp_tunnel_closeall(tunnel); +		sock_put(sk); +	} +}  /* Really kill the tunnel.   * Come here only when all sessions have been cleared from the tunnel. @@ -1397,19 +1380,21 @@ static void l2tp_tunnel_del_work(struct work_struct *work)  		return;  	sock = sk->sk_socket; -	BUG_ON(!sock); -	/* If the tunnel socket was created directly by the kernel, use the -	 * sk_* API to release the socket now.  Otherwise go through the -	 * inet_* layer to shut the socket down, and let userspace close it. +	/* If the tunnel socket was created by userspace, then go through the +	 * inet layer to shut the socket down, and let userspace close it. +	 * Otherwise, if we created the socket directly within the kernel, use +	 * the sk API to release it here.  	 * In either case the tunnel resources are freed in the socket  	 * destructor when the tunnel socket goes away.  	 */ -	if (sock->file == NULL) { -		kernel_sock_shutdown(sock, SHUT_RDWR); -		sk_release_kernel(sk); +	if (tunnel->fd >= 0) { +		if (sock) +			inet_shutdown(sock, 2);  	} else { -		inet_shutdown(sock, 2); +		if (sock) +			kernel_sock_shutdown(sock, SHUT_RDWR); +		sk_release_kernel(sk);  	}  	l2tp_tunnel_sock_put(sk); @@ -1668,6 +1653,7 @@ int l2tp_tunnel_create(struct net *net, int fd, int version, u32 tunnel_id, u32  		/* Mark socket as an encapsulation socket. See net/ipv4/udp.c */  		udp_sk(sk)->encap_type = UDP_ENCAP_L2TPINUDP;  		udp_sk(sk)->encap_rcv = l2tp_udp_encap_recv; +		udp_sk(sk)->encap_destroy = l2tp_udp_encap_destroy;  #if IS_ENABLED(CONFIG_IPV6)  		if (sk->sk_family == PF_INET6)  			udpv6_encap_enable(); @@ -1723,6 +1709,7 @@ EXPORT_SYMBOL_GPL(l2tp_tunnel_create);   */  int l2tp_tunnel_delete(struct l2tp_tunnel *tunnel)  { +	l2tp_tunnel_closeall(tunnel);  	return (false == queue_work(l2tp_wq, &tunnel->del_work));  }  EXPORT_SYMBOL_GPL(l2tp_tunnel_delete); @@ -1731,62 +1718,71 @@ EXPORT_SYMBOL_GPL(l2tp_tunnel_delete);   */  void l2tp_session_free(struct l2tp_session *session)  { -	struct l2tp_tunnel *tunnel; +	struct l2tp_tunnel *tunnel = session->tunnel;  	BUG_ON(atomic_read(&session->ref_count) != 0); -	tunnel = session->tunnel; -	if (tunnel != NULL) { +	if (tunnel) {  		BUG_ON(tunnel->magic != L2TP_TUNNEL_MAGIC); +		if (session->session_id != 0) +			atomic_dec(&l2tp_session_count); +		sock_put(tunnel->sock); +		session->tunnel = NULL; +		l2tp_tunnel_dec_refcount(tunnel); +	} + +	kfree(session); -		/* Delete the session from the hash */ +	return; +} +EXPORT_SYMBOL_GPL(l2tp_session_free); + +/* Remove an l2tp session from l2tp_core's hash lists. + * Provides a tidyup interface for pseudowire code which can't just route all + * shutdown via. l2tp_session_delete and a pseudowire-specific session_close + * callback. + */ +void __l2tp_session_unhash(struct l2tp_session *session) +{ +	struct l2tp_tunnel *tunnel = session->tunnel; + +	/* Remove the session from core hashes */ +	if (tunnel) { +		/* Remove from the per-tunnel hash */  		write_lock_bh(&tunnel->hlist_lock);  		hlist_del_init(&session->hlist);  		write_unlock_bh(&tunnel->hlist_lock); -		/* Unlink from the global hash if not L2TPv2 */ +		/* For L2TPv3 we have a per-net hash: remove from there, too */  		if (tunnel->version != L2TP_HDR_VER_2) {  			struct l2tp_net *pn = l2tp_pernet(tunnel->l2tp_net); -  			spin_lock_bh(&pn->l2tp_session_hlist_lock);  			hlist_del_init_rcu(&session->global_hlist);  			spin_unlock_bh(&pn->l2tp_session_hlist_lock);  			synchronize_rcu();  		} - -		if (session->session_id != 0) -			atomic_dec(&l2tp_session_count); - -		sock_put(tunnel->sock); - -		/* This will delete the tunnel context if this -		 * is the last session on the tunnel. -		 */ -		session->tunnel = NULL; -		l2tp_tunnel_dec_refcount(tunnel);  	} - -	kfree(session); - -	return;  } -EXPORT_SYMBOL_GPL(l2tp_session_free); +EXPORT_SYMBOL_GPL(__l2tp_session_unhash);  /* This function is used by the netlink SESSION_DELETE command and by     pseudowire modules.   */  int l2tp_session_delete(struct l2tp_session *session)  { +	if (session->ref) +		(*session->ref)(session); +	__l2tp_session_unhash(session); +	l2tp_session_queue_purge(session);  	if (session->session_close != NULL)  		(*session->session_close)(session); - +	if (session->deref) +		(*session->ref)(session);  	l2tp_session_dec_refcount(session); -  	return 0;  }  EXPORT_SYMBOL_GPL(l2tp_session_delete); -  /* We come here whenever a session's send_seq, cookie_len or   * l2specific_len parameters are set.   */ diff --git a/net/l2tp/l2tp_core.h b/net/l2tp/l2tp_core.h index 8eb8f1d47f3..485a490fd99 100644 --- a/net/l2tp/l2tp_core.h +++ b/net/l2tp/l2tp_core.h @@ -36,16 +36,15 @@ enum {  struct sk_buff;  struct l2tp_stats { -	u64			tx_packets; -	u64			tx_bytes; -	u64			tx_errors; -	u64			rx_packets; -	u64			rx_bytes; -	u64			rx_seq_discards; -	u64			rx_oos_packets; -	u64			rx_errors; -	u64			rx_cookie_discards; -	struct u64_stats_sync	syncp; +	atomic_long_t		tx_packets; +	atomic_long_t		tx_bytes; +	atomic_long_t		tx_errors; +	atomic_long_t		rx_packets; +	atomic_long_t		rx_bytes; +	atomic_long_t		rx_seq_discards; +	atomic_long_t		rx_oos_packets; +	atomic_long_t		rx_errors; +	atomic_long_t		rx_cookie_discards;  };  struct l2tp_tunnel; @@ -240,11 +239,14 @@ extern struct l2tp_tunnel *l2tp_tunnel_find(struct net *net, u32 tunnel_id);  extern struct l2tp_tunnel *l2tp_tunnel_find_nth(struct net *net, int nth);  extern int l2tp_tunnel_create(struct net *net, int fd, int version, u32 tunnel_id, u32 peer_tunnel_id, struct l2tp_tunnel_cfg *cfg, struct l2tp_tunnel **tunnelp); +extern void l2tp_tunnel_closeall(struct l2tp_tunnel *tunnel);  extern int l2tp_tunnel_delete(struct l2tp_tunnel *tunnel);  extern struct l2tp_session *l2tp_session_create(int priv_size, struct l2tp_tunnel *tunnel, u32 session_id, u32 peer_session_id, struct l2tp_session_cfg *cfg); +extern void __l2tp_session_unhash(struct l2tp_session *session);  extern int l2tp_session_delete(struct l2tp_session *session);  extern void l2tp_session_free(struct l2tp_session *session);  extern void l2tp_recv_common(struct l2tp_session *session, struct sk_buff *skb, unsigned char *ptr, unsigned char *optr, u16 hdrflags, int length, int (*payload_hook)(struct sk_buff *skb)); +extern int l2tp_session_queue_purge(struct l2tp_session *session);  extern int l2tp_udp_encap_recv(struct sock *sk, struct sk_buff *skb);  extern int l2tp_xmit_skb(struct l2tp_session *session, struct sk_buff *skb, int hdr_len); diff --git a/net/l2tp/l2tp_debugfs.c b/net/l2tp/l2tp_debugfs.c index c3813bc8455..072d7202e18 100644 --- a/net/l2tp/l2tp_debugfs.c +++ b/net/l2tp/l2tp_debugfs.c @@ -146,14 +146,14 @@ static void l2tp_dfs_seq_tunnel_show(struct seq_file *m, void *v)  		   tunnel->sock ? atomic_read(&tunnel->sock->sk_refcnt) : 0,  		   atomic_read(&tunnel->ref_count)); -	seq_printf(m, " %08x rx %llu/%llu/%llu rx %llu/%llu/%llu\n", +	seq_printf(m, " %08x rx %ld/%ld/%ld rx %ld/%ld/%ld\n",  		   tunnel->debug, -		   (unsigned long long)tunnel->stats.tx_packets, -		   (unsigned long long)tunnel->stats.tx_bytes, -		   (unsigned long long)tunnel->stats.tx_errors, -		   (unsigned long long)tunnel->stats.rx_packets, -		   (unsigned long long)tunnel->stats.rx_bytes, -		   (unsigned long long)tunnel->stats.rx_errors); +		   atomic_long_read(&tunnel->stats.tx_packets), +		   atomic_long_read(&tunnel->stats.tx_bytes), +		   atomic_long_read(&tunnel->stats.tx_errors), +		   atomic_long_read(&tunnel->stats.rx_packets), +		   atomic_long_read(&tunnel->stats.rx_bytes), +		   atomic_long_read(&tunnel->stats.rx_errors));  	if (tunnel->show != NULL)  		tunnel->show(m, tunnel); @@ -203,14 +203,14 @@ static void l2tp_dfs_seq_session_show(struct seq_file *m, void *v)  		seq_printf(m, "\n");  	} -	seq_printf(m, "   %hu/%hu tx %llu/%llu/%llu rx %llu/%llu/%llu\n", +	seq_printf(m, "   %hu/%hu tx %ld/%ld/%ld rx %ld/%ld/%ld\n",  		   session->nr, session->ns, -		   (unsigned long long)session->stats.tx_packets, -		   (unsigned long long)session->stats.tx_bytes, -		   (unsigned long long)session->stats.tx_errors, -		   (unsigned long long)session->stats.rx_packets, -		   (unsigned long long)session->stats.rx_bytes, -		   (unsigned long long)session->stats.rx_errors); +		   atomic_long_read(&session->stats.tx_packets), +		   atomic_long_read(&session->stats.tx_bytes), +		   atomic_long_read(&session->stats.tx_errors), +		   atomic_long_read(&session->stats.rx_packets), +		   atomic_long_read(&session->stats.rx_bytes), +		   atomic_long_read(&session->stats.rx_errors));  	if (session->show != NULL)  		session->show(m, session); diff --git a/net/l2tp/l2tp_ip.c b/net/l2tp/l2tp_ip.c index 7f41b705126..571db8dd229 100644 --- a/net/l2tp/l2tp_ip.c +++ b/net/l2tp/l2tp_ip.c @@ -228,10 +228,16 @@ static void l2tp_ip_close(struct sock *sk, long timeout)  static void l2tp_ip_destroy_sock(struct sock *sk)  {  	struct sk_buff *skb; +	struct l2tp_tunnel *tunnel = l2tp_sock_to_tunnel(sk);  	while ((skb = __skb_dequeue_tail(&sk->sk_write_queue)) != NULL)  		kfree_skb(skb); +	if (tunnel) { +		l2tp_tunnel_closeall(tunnel); +		sock_put(sk); +	} +  	sk_refcnt_debug_dec(sk);  } diff --git a/net/l2tp/l2tp_ip6.c b/net/l2tp/l2tp_ip6.c index 41f2f8126eb..c74f5a91ff6 100644 --- a/net/l2tp/l2tp_ip6.c +++ b/net/l2tp/l2tp_ip6.c @@ -241,10 +241,17 @@ static void l2tp_ip6_close(struct sock *sk, long timeout)  static void l2tp_ip6_destroy_sock(struct sock *sk)  { +	struct l2tp_tunnel *tunnel = l2tp_sock_to_tunnel(sk); +  	lock_sock(sk);  	ip6_flush_pending_frames(sk);  	release_sock(sk); +	if (tunnel) { +		l2tp_tunnel_closeall(tunnel); +		sock_put(sk); +	} +  	inet6_destroy_sock(sk);  } diff --git a/net/l2tp/l2tp_netlink.c b/net/l2tp/l2tp_netlink.c index c1bab22db85..0825ff26e11 100644 --- a/net/l2tp/l2tp_netlink.c +++ b/net/l2tp/l2tp_netlink.c @@ -246,8 +246,6 @@ static int l2tp_nl_tunnel_send(struct sk_buff *skb, u32 portid, u32 seq, int fla  #if IS_ENABLED(CONFIG_IPV6)  	struct ipv6_pinfo *np = NULL;  #endif -	struct l2tp_stats stats; -	unsigned int start;  	hdr = genlmsg_put(skb, portid, seq, &l2tp_nl_family, flags,  			  L2TP_CMD_TUNNEL_GET); @@ -265,28 +263,22 @@ static int l2tp_nl_tunnel_send(struct sk_buff *skb, u32 portid, u32 seq, int fla  	if (nest == NULL)  		goto nla_put_failure; -	do { -		start = u64_stats_fetch_begin(&tunnel->stats.syncp); -		stats.tx_packets = tunnel->stats.tx_packets; -		stats.tx_bytes = tunnel->stats.tx_bytes; -		stats.tx_errors = tunnel->stats.tx_errors; -		stats.rx_packets = tunnel->stats.rx_packets; -		stats.rx_bytes = tunnel->stats.rx_bytes; -		stats.rx_errors = tunnel->stats.rx_errors; -		stats.rx_seq_discards = tunnel->stats.rx_seq_discards; -		stats.rx_oos_packets = tunnel->stats.rx_oos_packets; -	} while (u64_stats_fetch_retry(&tunnel->stats.syncp, start)); - -	if (nla_put_u64(skb, L2TP_ATTR_TX_PACKETS, stats.tx_packets) || -	    nla_put_u64(skb, L2TP_ATTR_TX_BYTES, stats.tx_bytes) || -	    nla_put_u64(skb, L2TP_ATTR_TX_ERRORS, stats.tx_errors) || -	    nla_put_u64(skb, L2TP_ATTR_RX_PACKETS, stats.rx_packets) || -	    nla_put_u64(skb, L2TP_ATTR_RX_BYTES, stats.rx_bytes) || +	if (nla_put_u64(skb, L2TP_ATTR_TX_PACKETS, +		    atomic_long_read(&tunnel->stats.tx_packets)) || +	    nla_put_u64(skb, L2TP_ATTR_TX_BYTES, +		    atomic_long_read(&tunnel->stats.tx_bytes)) || +	    nla_put_u64(skb, L2TP_ATTR_TX_ERRORS, +		    atomic_long_read(&tunnel->stats.tx_errors)) || +	    nla_put_u64(skb, L2TP_ATTR_RX_PACKETS, +		    atomic_long_read(&tunnel->stats.rx_packets)) || +	    nla_put_u64(skb, L2TP_ATTR_RX_BYTES, +		    atomic_long_read(&tunnel->stats.rx_bytes)) ||  	    nla_put_u64(skb, L2TP_ATTR_RX_SEQ_DISCARDS, -			stats.rx_seq_discards) || +		    atomic_long_read(&tunnel->stats.rx_seq_discards)) ||  	    nla_put_u64(skb, L2TP_ATTR_RX_OOS_PACKETS, -			stats.rx_oos_packets) || -	    nla_put_u64(skb, L2TP_ATTR_RX_ERRORS, stats.rx_errors)) +		    atomic_long_read(&tunnel->stats.rx_oos_packets)) || +	    nla_put_u64(skb, L2TP_ATTR_RX_ERRORS, +		    atomic_long_read(&tunnel->stats.rx_errors)))  		goto nla_put_failure;  	nla_nest_end(skb, nest); @@ -612,8 +604,6 @@ static int l2tp_nl_session_send(struct sk_buff *skb, u32 portid, u32 seq, int fl  	struct nlattr *nest;  	struct l2tp_tunnel *tunnel = session->tunnel;  	struct sock *sk = NULL; -	struct l2tp_stats stats; -	unsigned int start;  	sk = tunnel->sock; @@ -656,28 +646,22 @@ static int l2tp_nl_session_send(struct sk_buff *skb, u32 portid, u32 seq, int fl  	if (nest == NULL)  		goto nla_put_failure; -	do { -		start = u64_stats_fetch_begin(&session->stats.syncp); -		stats.tx_packets = session->stats.tx_packets; -		stats.tx_bytes = session->stats.tx_bytes; -		stats.tx_errors = session->stats.tx_errors; -		stats.rx_packets = session->stats.rx_packets; -		stats.rx_bytes = session->stats.rx_bytes; -		stats.rx_errors = session->stats.rx_errors; -		stats.rx_seq_discards = session->stats.rx_seq_discards; -		stats.rx_oos_packets = session->stats.rx_oos_packets; -	} while (u64_stats_fetch_retry(&session->stats.syncp, start)); - -	if (nla_put_u64(skb, L2TP_ATTR_TX_PACKETS, stats.tx_packets) || -	    nla_put_u64(skb, L2TP_ATTR_TX_BYTES, stats.tx_bytes) || -	    nla_put_u64(skb, L2TP_ATTR_TX_ERRORS, stats.tx_errors) || -	    nla_put_u64(skb, L2TP_ATTR_RX_PACKETS, stats.rx_packets) || -	    nla_put_u64(skb, L2TP_ATTR_RX_BYTES, stats.rx_bytes) || +	if (nla_put_u64(skb, L2TP_ATTR_TX_PACKETS, +		atomic_long_read(&session->stats.tx_packets)) || +	    nla_put_u64(skb, L2TP_ATTR_TX_BYTES, +		atomic_long_read(&session->stats.tx_bytes)) || +	    nla_put_u64(skb, L2TP_ATTR_TX_ERRORS, +		atomic_long_read(&session->stats.tx_errors)) || +	    nla_put_u64(skb, L2TP_ATTR_RX_PACKETS, +		atomic_long_read(&session->stats.rx_packets)) || +	    nla_put_u64(skb, L2TP_ATTR_RX_BYTES, +		atomic_long_read(&session->stats.rx_bytes)) ||  	    nla_put_u64(skb, L2TP_ATTR_RX_SEQ_DISCARDS, -			stats.rx_seq_discards) || +		atomic_long_read(&session->stats.rx_seq_discards)) ||  	    nla_put_u64(skb, L2TP_ATTR_RX_OOS_PACKETS, -			stats.rx_oos_packets) || -	    nla_put_u64(skb, L2TP_ATTR_RX_ERRORS, stats.rx_errors)) +		atomic_long_read(&session->stats.rx_oos_packets)) || +	    nla_put_u64(skb, L2TP_ATTR_RX_ERRORS, +		atomic_long_read(&session->stats.rx_errors)))  		goto nla_put_failure;  	nla_nest_end(skb, nest); diff --git a/net/l2tp/l2tp_ppp.c b/net/l2tp/l2tp_ppp.c index 6a53371dba1..637a341c1e2 100644 --- a/net/l2tp/l2tp_ppp.c +++ b/net/l2tp/l2tp_ppp.c @@ -97,6 +97,7 @@  #include <net/ip.h>  #include <net/udp.h>  #include <net/xfrm.h> +#include <net/inet_common.h>  #include <asm/byteorder.h>  #include <linux/atomic.h> @@ -259,7 +260,7 @@ static void pppol2tp_recv(struct l2tp_session *session, struct sk_buff *skb, int  			  session->name);  		/* Not bound. Nothing we can do, so discard. */ -		session->stats.rx_errors++; +		atomic_long_inc(&session->stats.rx_errors);  		kfree_skb(skb);  	} @@ -447,34 +448,16 @@ static void pppol2tp_session_close(struct l2tp_session *session)  {  	struct pppol2tp_session *ps = l2tp_session_priv(session);  	struct sock *sk = ps->sock; -	struct sk_buff *skb; +	struct socket *sock = sk->sk_socket;  	BUG_ON(session->magic != L2TP_SESSION_MAGIC); -	if (session->session_id == 0) -		goto out; - -	if (sk != NULL) { -		lock_sock(sk); - -		if (sk->sk_state & (PPPOX_CONNECTED | PPPOX_BOUND)) { -			pppox_unbind_sock(sk); -			sk->sk_state = PPPOX_DEAD; -			sk->sk_state_change(sk); -		} - -		/* Purge any queued data */ -		skb_queue_purge(&sk->sk_receive_queue); -		skb_queue_purge(&sk->sk_write_queue); -		while ((skb = skb_dequeue(&session->reorder_q))) { -			kfree_skb(skb); -			sock_put(sk); -		} -		release_sock(sk); +	if (sock) { +		inet_shutdown(sock, 2); +		/* Don't let the session go away before our socket does */ +		l2tp_session_inc_refcount(session);  	} - -out:  	return;  } @@ -483,19 +466,12 @@ out:   */  static void pppol2tp_session_destruct(struct sock *sk)  { -	struct l2tp_session *session; - -	if (sk->sk_user_data != NULL) { -		session = sk->sk_user_data; -		if (session == NULL) -			goto out; - +	struct l2tp_session *session = sk->sk_user_data; +	if (session) {  		sk->sk_user_data = NULL;  		BUG_ON(session->magic != L2TP_SESSION_MAGIC);  		l2tp_session_dec_refcount(session);  	} - -out:  	return;  } @@ -525,16 +501,13 @@ static int pppol2tp_release(struct socket *sock)  	session = pppol2tp_sock_to_session(sk);  	/* Purge any queued data */ -	skb_queue_purge(&sk->sk_receive_queue); -	skb_queue_purge(&sk->sk_write_queue);  	if (session != NULL) { -		struct sk_buff *skb; -		while ((skb = skb_dequeue(&session->reorder_q))) { -			kfree_skb(skb); -			sock_put(sk); -		} +		__l2tp_session_unhash(session); +		l2tp_session_queue_purge(session);  		sock_put(sk);  	} +	skb_queue_purge(&sk->sk_receive_queue); +	skb_queue_purge(&sk->sk_write_queue);  	release_sock(sk); @@ -880,18 +853,6 @@ out:  	return error;  } -/* Called when deleting sessions via the netlink interface. - */ -static int pppol2tp_session_delete(struct l2tp_session *session) -{ -	struct pppol2tp_session *ps = l2tp_session_priv(session); - -	if (ps->sock == NULL) -		l2tp_session_dec_refcount(session); - -	return 0; -} -  #endif /* CONFIG_L2TP_V3 */  /* getname() support. @@ -1025,14 +986,14 @@ end:  static void pppol2tp_copy_stats(struct pppol2tp_ioc_stats *dest,  				struct l2tp_stats *stats)  { -	dest->tx_packets = stats->tx_packets; -	dest->tx_bytes = stats->tx_bytes; -	dest->tx_errors = stats->tx_errors; -	dest->rx_packets = stats->rx_packets; -	dest->rx_bytes = stats->rx_bytes; -	dest->rx_seq_discards = stats->rx_seq_discards; -	dest->rx_oos_packets = stats->rx_oos_packets; -	dest->rx_errors = stats->rx_errors; +	dest->tx_packets = atomic_long_read(&stats->tx_packets); +	dest->tx_bytes = atomic_long_read(&stats->tx_bytes); +	dest->tx_errors = atomic_long_read(&stats->tx_errors); +	dest->rx_packets = atomic_long_read(&stats->rx_packets); +	dest->rx_bytes = atomic_long_read(&stats->rx_bytes); +	dest->rx_seq_discards = atomic_long_read(&stats->rx_seq_discards); +	dest->rx_oos_packets = atomic_long_read(&stats->rx_oos_packets); +	dest->rx_errors = atomic_long_read(&stats->rx_errors);  }  /* Session ioctl helper. @@ -1666,14 +1627,14 @@ static void pppol2tp_seq_tunnel_show(struct seq_file *m, void *v)  		   tunnel->name,  		   (tunnel == tunnel->sock->sk_user_data) ? 'Y' : 'N',  		   atomic_read(&tunnel->ref_count) - 1); -	seq_printf(m, " %08x %llu/%llu/%llu %llu/%llu/%llu\n", +	seq_printf(m, " %08x %ld/%ld/%ld %ld/%ld/%ld\n",  		   tunnel->debug, -		   (unsigned long long)tunnel->stats.tx_packets, -		   (unsigned long long)tunnel->stats.tx_bytes, -		   (unsigned long long)tunnel->stats.tx_errors, -		   (unsigned long long)tunnel->stats.rx_packets, -		   (unsigned long long)tunnel->stats.rx_bytes, -		   (unsigned long long)tunnel->stats.rx_errors); +		   atomic_long_read(&tunnel->stats.tx_packets), +		   atomic_long_read(&tunnel->stats.tx_bytes), +		   atomic_long_read(&tunnel->stats.tx_errors), +		   atomic_long_read(&tunnel->stats.rx_packets), +		   atomic_long_read(&tunnel->stats.rx_bytes), +		   atomic_long_read(&tunnel->stats.rx_errors));  }  static void pppol2tp_seq_session_show(struct seq_file *m, void *v) @@ -1708,14 +1669,14 @@ static void pppol2tp_seq_session_show(struct seq_file *m, void *v)  		   session->lns_mode ? "LNS" : "LAC",  		   session->debug,  		   jiffies_to_msecs(session->reorder_timeout)); -	seq_printf(m, "   %hu/%hu %llu/%llu/%llu %llu/%llu/%llu\n", +	seq_printf(m, "   %hu/%hu %ld/%ld/%ld %ld/%ld/%ld\n",  		   session->nr, session->ns, -		   (unsigned long long)session->stats.tx_packets, -		   (unsigned long long)session->stats.tx_bytes, -		   (unsigned long long)session->stats.tx_errors, -		   (unsigned long long)session->stats.rx_packets, -		   (unsigned long long)session->stats.rx_bytes, -		   (unsigned long long)session->stats.rx_errors); +		   atomic_long_read(&session->stats.tx_packets), +		   atomic_long_read(&session->stats.tx_bytes), +		   atomic_long_read(&session->stats.tx_errors), +		   atomic_long_read(&session->stats.rx_packets), +		   atomic_long_read(&session->stats.rx_bytes), +		   atomic_long_read(&session->stats.rx_errors));  	if (po)  		seq_printf(m, "   interface %s\n", ppp_dev_name(&po->chan)); @@ -1839,7 +1800,7 @@ static const struct pppox_proto pppol2tp_proto = {  static const struct l2tp_nl_cmd_ops pppol2tp_nl_cmd_ops = {  	.session_create	= pppol2tp_session_create, -	.session_delete	= pppol2tp_session_delete, +	.session_delete	= l2tp_session_delete,  };  #endif /* CONFIG_L2TP_V3 */ diff --git a/net/netfilter/ipvs/ip_vs_core.c b/net/netfilter/ipvs/ip_vs_core.c index 47edf5a40a5..61f49d24171 100644 --- a/net/netfilter/ipvs/ip_vs_core.c +++ b/net/netfilter/ipvs/ip_vs_core.c @@ -1394,10 +1394,8 @@ ip_vs_in_icmp(struct sk_buff *skb, int *related, unsigned int hooknum)  			skb_reset_network_header(skb);  			IP_VS_DBG(12, "ICMP for IPIP %pI4->%pI4: mtu=%u\n",  				&ip_hdr(skb)->saddr, &ip_hdr(skb)->daddr, mtu); -			rcu_read_lock();  			ipv4_update_pmtu(skb, dev_net(skb->dev),  					 mtu, 0, 0, 0, 0); -			rcu_read_unlock();  			/* Client uses PMTUD? */  			if (!(cih->frag_off & htons(IP_DF)))  				goto ignore_ipip; @@ -1577,7 +1575,8 @@ ip_vs_in(unsigned int hooknum, struct sk_buff *skb, int af)  	}  	/* ipvs enabled in this netns ? */  	net = skb_net(skb); -	if (!net_ipvs(net)->enable) +	ipvs = net_ipvs(net); +	if (unlikely(sysctl_backup_only(ipvs) || !ipvs->enable))  		return NF_ACCEPT;  	ip_vs_fill_iph_skb(af, skb, &iph); @@ -1654,7 +1653,6 @@ ip_vs_in(unsigned int hooknum, struct sk_buff *skb, int af)  	}  	IP_VS_DBG_PKT(11, af, pp, skb, 0, "Incoming packet"); -	ipvs = net_ipvs(net);  	/* Check the server status */  	if (cp->dest && !(cp->dest->flags & IP_VS_DEST_F_AVAILABLE)) {  		/* the destination server is not available */ @@ -1815,13 +1813,15 @@ ip_vs_forward_icmp(unsigned int hooknum, struct sk_buff *skb,  {  	int r;  	struct net *net; +	struct netns_ipvs *ipvs;  	if (ip_hdr(skb)->protocol != IPPROTO_ICMP)  		return NF_ACCEPT;  	/* ipvs enabled in this netns ? */  	net = skb_net(skb); -	if (!net_ipvs(net)->enable) +	ipvs = net_ipvs(net); +	if (unlikely(sysctl_backup_only(ipvs) || !ipvs->enable))  		return NF_ACCEPT;  	return ip_vs_in_icmp(skb, &r, hooknum); @@ -1835,6 +1835,7 @@ ip_vs_forward_icmp_v6(unsigned int hooknum, struct sk_buff *skb,  {  	int r;  	struct net *net; +	struct netns_ipvs *ipvs;  	struct ip_vs_iphdr iphdr;  	ip_vs_fill_iph_skb(AF_INET6, skb, &iphdr); @@ -1843,7 +1844,8 @@ ip_vs_forward_icmp_v6(unsigned int hooknum, struct sk_buff *skb,  	/* ipvs enabled in this netns ? */  	net = skb_net(skb); -	if (!net_ipvs(net)->enable) +	ipvs = net_ipvs(net); +	if (unlikely(sysctl_backup_only(ipvs) || !ipvs->enable))  		return NF_ACCEPT;  	return ip_vs_in_icmp_v6(skb, &r, hooknum, &iphdr); diff --git a/net/netfilter/ipvs/ip_vs_ctl.c b/net/netfilter/ipvs/ip_vs_ctl.c index c68198bf912..9e2d1cccd1e 100644 --- a/net/netfilter/ipvs/ip_vs_ctl.c +++ b/net/netfilter/ipvs/ip_vs_ctl.c @@ -1808,6 +1808,12 @@ static struct ctl_table vs_vars[] = {  		.mode		= 0644,  		.proc_handler	= proc_dointvec,  	}, +	{ +		.procname	= "backup_only", +		.maxlen		= sizeof(int), +		.mode		= 0644, +		.proc_handler	= proc_dointvec, +	},  #ifdef CONFIG_IP_VS_DEBUG  	{  		.procname	= "debug_level", @@ -3741,6 +3747,7 @@ static int __net_init ip_vs_control_net_init_sysctl(struct net *net)  	tbl[idx++].data = &ipvs->sysctl_nat_icmp_send;  	ipvs->sysctl_pmtu_disc = 1;  	tbl[idx++].data = &ipvs->sysctl_pmtu_disc; +	tbl[idx++].data = &ipvs->sysctl_backup_only;  	ipvs->sysctl_hdr = register_net_sysctl(net, "net/ipv4/vs", tbl); diff --git a/net/netfilter/ipvs/ip_vs_proto_sctp.c b/net/netfilter/ipvs/ip_vs_proto_sctp.c index ae8ec6f2768..cd1d7298f7b 100644 --- a/net/netfilter/ipvs/ip_vs_proto_sctp.c +++ b/net/netfilter/ipvs/ip_vs_proto_sctp.c @@ -906,7 +906,7 @@ set_sctp_state(struct ip_vs_proto_data *pd, struct ip_vs_conn *cp,  	sctp_chunkhdr_t _sctpch, *sch;  	unsigned char chunk_type;  	int event, next_state; -	int ihl; +	int ihl, cofs;  #ifdef CONFIG_IP_VS_IPV6  	ihl = cp->af == AF_INET ? ip_hdrlen(skb) : sizeof(struct ipv6hdr); @@ -914,8 +914,8 @@ set_sctp_state(struct ip_vs_proto_data *pd, struct ip_vs_conn *cp,  	ihl = ip_hdrlen(skb);  #endif -	sch = skb_header_pointer(skb, ihl + sizeof(sctp_sctphdr_t), -				sizeof(_sctpch), &_sctpch); +	cofs = ihl + sizeof(sctp_sctphdr_t); +	sch = skb_header_pointer(skb, cofs, sizeof(_sctpch), &_sctpch);  	if (sch == NULL)  		return; @@ -933,10 +933,12 @@ set_sctp_state(struct ip_vs_proto_data *pd, struct ip_vs_conn *cp,  	 */  	if ((sch->type == SCTP_CID_COOKIE_ECHO) ||  	    (sch->type == SCTP_CID_COOKIE_ACK)) { -		sch = skb_header_pointer(skb, (ihl + sizeof(sctp_sctphdr_t) + -				sch->length), sizeof(_sctpch), &_sctpch); -		if (sch) { -			if (sch->type == SCTP_CID_ABORT) +		int clen = ntohs(sch->length); + +		if (clen >= sizeof(sctp_chunkhdr_t)) { +			sch = skb_header_pointer(skb, cofs + ALIGN(clen, 4), +						 sizeof(_sctpch), &_sctpch); +			if (sch && sch->type == SCTP_CID_ABORT)  				chunk_type = sch->type;  		}  	} diff --git a/net/netfilter/nf_conntrack_proto_dccp.c b/net/netfilter/nf_conntrack_proto_dccp.c index 432f9578000..ba65b2041eb 100644 --- a/net/netfilter/nf_conntrack_proto_dccp.c +++ b/net/netfilter/nf_conntrack_proto_dccp.c @@ -969,6 +969,10 @@ static int __init nf_conntrack_proto_dccp_init(void)  {  	int ret; +	ret = register_pernet_subsys(&dccp_net_ops); +	if (ret < 0) +		goto out_pernet; +  	ret = nf_ct_l4proto_register(&dccp_proto4);  	if (ret < 0)  		goto out_dccp4; @@ -977,16 +981,12 @@ static int __init nf_conntrack_proto_dccp_init(void)  	if (ret < 0)  		goto out_dccp6; -	ret = register_pernet_subsys(&dccp_net_ops); -	if (ret < 0) -		goto out_pernet; -  	return 0; -out_pernet: -	nf_ct_l4proto_unregister(&dccp_proto6);  out_dccp6:  	nf_ct_l4proto_unregister(&dccp_proto4);  out_dccp4: +	unregister_pernet_subsys(&dccp_net_ops); +out_pernet:  	return ret;  } diff --git a/net/netfilter/nf_conntrack_proto_gre.c b/net/netfilter/nf_conntrack_proto_gre.c index bd7d01d9c7e..155ce9f8a0d 100644 --- a/net/netfilter/nf_conntrack_proto_gre.c +++ b/net/netfilter/nf_conntrack_proto_gre.c @@ -420,18 +420,18 @@ static int __init nf_ct_proto_gre_init(void)  {  	int ret; -	ret = nf_ct_l4proto_register(&nf_conntrack_l4proto_gre4); -	if (ret < 0) -		goto out_gre4; -  	ret = register_pernet_subsys(&proto_gre_net_ops);  	if (ret < 0)  		goto out_pernet; +	ret = nf_ct_l4proto_register(&nf_conntrack_l4proto_gre4); +	if (ret < 0) +		goto out_gre4; +  	return 0; -out_pernet: -	nf_ct_l4proto_unregister(&nf_conntrack_l4proto_gre4);  out_gre4: +	unregister_pernet_subsys(&proto_gre_net_ops); +out_pernet:  	return ret;  } diff --git a/net/netfilter/nf_conntrack_proto_sctp.c b/net/netfilter/nf_conntrack_proto_sctp.c index 480f616d593..ec83536def9 100644 --- a/net/netfilter/nf_conntrack_proto_sctp.c +++ b/net/netfilter/nf_conntrack_proto_sctp.c @@ -888,6 +888,10 @@ static int __init nf_conntrack_proto_sctp_init(void)  {  	int ret; +	ret = register_pernet_subsys(&sctp_net_ops); +	if (ret < 0) +		goto out_pernet; +  	ret = nf_ct_l4proto_register(&nf_conntrack_l4proto_sctp4);  	if (ret < 0)  		goto out_sctp4; @@ -896,16 +900,12 @@ static int __init nf_conntrack_proto_sctp_init(void)  	if (ret < 0)  		goto out_sctp6; -	ret = register_pernet_subsys(&sctp_net_ops); -	if (ret < 0) -		goto out_pernet; -  	return 0; -out_pernet: -	nf_ct_l4proto_unregister(&nf_conntrack_l4proto_sctp6);  out_sctp6:  	nf_ct_l4proto_unregister(&nf_conntrack_l4proto_sctp4);  out_sctp4: +	unregister_pernet_subsys(&sctp_net_ops); +out_pernet:  	return ret;  } diff --git a/net/netfilter/nf_conntrack_proto_udplite.c b/net/netfilter/nf_conntrack_proto_udplite.c index 157489581c3..ca969f6273f 100644 --- a/net/netfilter/nf_conntrack_proto_udplite.c +++ b/net/netfilter/nf_conntrack_proto_udplite.c @@ -371,6 +371,10 @@ static int __init nf_conntrack_proto_udplite_init(void)  {  	int ret; +	ret = register_pernet_subsys(&udplite_net_ops); +	if (ret < 0) +		goto out_pernet; +  	ret = nf_ct_l4proto_register(&nf_conntrack_l4proto_udplite4);  	if (ret < 0)  		goto out_udplite4; @@ -379,16 +383,12 @@ static int __init nf_conntrack_proto_udplite_init(void)  	if (ret < 0)  		goto out_udplite6; -	ret = register_pernet_subsys(&udplite_net_ops); -	if (ret < 0) -		goto out_pernet; -  	return 0; -out_pernet: -	nf_ct_l4proto_unregister(&nf_conntrack_l4proto_udplite6);  out_udplite6:  	nf_ct_l4proto_unregister(&nf_conntrack_l4proto_udplite4);  out_udplite4: +	unregister_pernet_subsys(&udplite_net_ops); +out_pernet:  	return ret;  } diff --git a/net/netfilter/nfnetlink_queue_core.c b/net/netfilter/nfnetlink_queue_core.c index 858fd52c104..1cb48540f86 100644 --- a/net/netfilter/nfnetlink_queue_core.c +++ b/net/netfilter/nfnetlink_queue_core.c @@ -112,7 +112,7 @@ instance_create(u_int16_t queue_num, int portid)  	inst->queue_num = queue_num;  	inst->peer_portid = portid;  	inst->queue_maxlen = NFQNL_QMAX_DEFAULT; -	inst->copy_range = 0xfffff; +	inst->copy_range = 0xffff;  	inst->copy_mode = NFQNL_COPY_NONE;  	spin_lock_init(&inst->lock);  	INIT_LIST_HEAD(&inst->queue_list); diff --git a/net/netlink/genetlink.c b/net/netlink/genetlink.c index f2aabb6f410..5a55be3f17a 100644 --- a/net/netlink/genetlink.c +++ b/net/netlink/genetlink.c @@ -142,6 +142,7 @@ int genl_register_mc_group(struct genl_family *family,  	int err = 0;  	BUG_ON(grp->name[0] == '\0'); +	BUG_ON(memchr(grp->name, '\0', GENL_NAMSIZ) == NULL);  	genl_lock(); diff --git a/net/sunrpc/sched.c b/net/sunrpc/sched.c index fb20f25ddec..f8529fc8e54 100644 --- a/net/sunrpc/sched.c +++ b/net/sunrpc/sched.c @@ -180,6 +180,8 @@ static void __rpc_add_wait_queue(struct rpc_wait_queue *queue,  		list_add_tail(&task->u.tk_wait.list, &queue->tasks[0]);  	task->tk_waitqueue = queue;  	queue->qlen++; +	/* barrier matches the read in rpc_wake_up_task_queue_locked() */ +	smp_wmb();  	rpc_set_queued(task);  	dprintk("RPC: %5u added to queue %p \"%s\"\n", @@ -430,8 +432,11 @@ static void __rpc_do_wake_up_task(struct rpc_wait_queue *queue, struct rpc_task   */  static void rpc_wake_up_task_queue_locked(struct rpc_wait_queue *queue, struct rpc_task *task)  { -	if (RPC_IS_QUEUED(task) && task->tk_waitqueue == queue) -		__rpc_do_wake_up_task(queue, task); +	if (RPC_IS_QUEUED(task)) { +		smp_rmb(); +		if (task->tk_waitqueue == queue) +			__rpc_do_wake_up_task(queue, task); +	}  }  /* diff --git a/net/unix/af_unix.c b/net/unix/af_unix.c index 51be64f163e..971282b6f6a 100644 --- a/net/unix/af_unix.c +++ b/net/unix/af_unix.c @@ -382,7 +382,7 @@ static void unix_sock_destructor(struct sock *sk)  #endif  } -static int unix_release_sock(struct sock *sk, int embrion) +static void unix_release_sock(struct sock *sk, int embrion)  {  	struct unix_sock *u = unix_sk(sk);  	struct path path; @@ -451,8 +451,6 @@ static int unix_release_sock(struct sock *sk, int embrion)  	if (unix_tot_inflight)  		unix_gc();		/* Garbage collect fds */ - -	return 0;  }  static void init_peercred(struct sock *sk) @@ -699,9 +697,10 @@ static int unix_release(struct socket *sock)  	if (!sk)  		return 0; +	unix_release_sock(sk, 0);  	sock->sk = NULL; -	return unix_release_sock(sk, 0); +	return 0;  }  static int unix_autobind(struct socket *sock) @@ -1413,8 +1412,8 @@ static void maybe_add_creds(struct sk_buff *skb, const struct socket *sock,  	if (UNIXCB(skb).cred)  		return;  	if (test_bit(SOCK_PASSCRED, &sock->flags) || -	    !other->sk_socket || -	    test_bit(SOCK_PASSCRED, &other->sk_socket->flags)) { +	    (other->sk_socket && +	    test_bit(SOCK_PASSCRED, &other->sk_socket->flags))) {  		UNIXCB(skb).pid  = get_pid(task_tgid(current));  		UNIXCB(skb).cred = get_current_cred();  	} diff --git a/security/yama/yama_lsm.c b/security/yama/yama_lsm.c index 23414b93771..13c88fbcf03 100644 --- a/security/yama/yama_lsm.c +++ b/security/yama/yama_lsm.c @@ -347,10 +347,8 @@ int yama_ptrace_traceme(struct task_struct *parent)  	/* Only disallow PTRACE_TRACEME on more aggressive settings. */  	switch (ptrace_scope) {  	case YAMA_SCOPE_CAPABILITY: -		rcu_read_lock(); -		if (!ns_capable(__task_cred(parent)->user_ns, CAP_SYS_PTRACE)) +		if (!has_ns_capability(parent, current_user_ns(), CAP_SYS_PTRACE))  			rc = -EPERM; -		rcu_read_unlock();  		break;  	case YAMA_SCOPE_NO_ATTACH:  		rc = -EPERM;  |