LKML Archive on lore.kernel.org
help / color / mirror / Atom feed
From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
To: linux-kernel@vger.kernel.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
	stable@vger.kernel.org, Marc Dionne <marc.dionne@auristor.com>,
	David Howells <dhowells@redhat.com>,
	Sasha Levin <sashal@kernel.org>
Subject: [PATCH 5.4 194/203] rxrpc: Fix missing security check on incoming calls
Date: Fri, 17 Jan 2020 00:18:31 +0100	[thread overview]
Message-ID: <20200116231801.152256547@linuxfoundation.org> (raw)
In-Reply-To: <20200116231745.218684830@linuxfoundation.org>

From: David Howells <dhowells@redhat.com>

[ Upstream commit 063c60d39180cec7c9317f5acfc3071f8fecd705 ]

Fix rxrpc_new_incoming_call() to check that we have a suitable service key
available for the combination of service ID and security class of a new
incoming call - and to reject calls for which we don't.

This causes an assertion like the following to appear:

	rxrpc: Assertion failed - 6(0x6) == 12(0xc) is false
	kernel BUG at net/rxrpc/call_object.c:456!

Where call->state is RXRPC_CALL_SERVER_SECURING (6) rather than
RXRPC_CALL_COMPLETE (12).

Fixes: 248f219cb8bc ("rxrpc: Rewrite the data and ack handling code")
Reported-by: Marc Dionne <marc.dionne@auristor.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>
---
 net/rxrpc/ar-internal.h  | 10 ++++--
 net/rxrpc/call_accept.c  | 14 ++++++--
 net/rxrpc/conn_event.c   | 16 +--------
 net/rxrpc/conn_service.c |  4 +++
 net/rxrpc/rxkad.c        |  5 +--
 net/rxrpc/security.c     | 70 +++++++++++++++++++---------------------
 6 files changed, 59 insertions(+), 60 deletions(-)

diff --git a/net/rxrpc/ar-internal.h b/net/rxrpc/ar-internal.h
index 7c7d10f2e0c1..5e99df80e80a 100644
--- a/net/rxrpc/ar-internal.h
+++ b/net/rxrpc/ar-internal.h
@@ -209,6 +209,7 @@ struct rxrpc_skb_priv {
 struct rxrpc_security {
 	const char		*name;		/* name of this service */
 	u8			security_index;	/* security type provided */
+	u32			no_key_abort;	/* Abort code indicating no key */
 
 	/* Initialise a security service */
 	int (*init)(void);
@@ -977,8 +978,9 @@ static inline void rxrpc_reduce_conn_timer(struct rxrpc_connection *conn,
 struct rxrpc_connection *rxrpc_find_service_conn_rcu(struct rxrpc_peer *,
 						     struct sk_buff *);
 struct rxrpc_connection *rxrpc_prealloc_service_connection(struct rxrpc_net *, gfp_t);
-void rxrpc_new_incoming_connection(struct rxrpc_sock *,
-				   struct rxrpc_connection *, struct sk_buff *);
+void rxrpc_new_incoming_connection(struct rxrpc_sock *, struct rxrpc_connection *,
+				   const struct rxrpc_security *, struct key *,
+				   struct sk_buff *);
 void rxrpc_unpublish_service_conn(struct rxrpc_connection *);
 
 /*
@@ -1103,7 +1105,9 @@ extern const struct rxrpc_security rxkad;
 int __init rxrpc_init_security(void);
 void rxrpc_exit_security(void);
 int rxrpc_init_client_conn_security(struct rxrpc_connection *);
-int rxrpc_init_server_conn_security(struct rxrpc_connection *);
+bool rxrpc_look_up_server_security(struct rxrpc_local *, struct rxrpc_sock *,
+				   const struct rxrpc_security **, struct key **,
+				   struct sk_buff *);
 
 /*
  * sendmsg.c
diff --git a/net/rxrpc/call_accept.c b/net/rxrpc/call_accept.c
index 44fa22b020ef..70e44abf106c 100644
--- a/net/rxrpc/call_accept.c
+++ b/net/rxrpc/call_accept.c
@@ -263,6 +263,8 @@ static struct rxrpc_call *rxrpc_alloc_incoming_call(struct rxrpc_sock *rx,
 						    struct rxrpc_local *local,
 						    struct rxrpc_peer *peer,
 						    struct rxrpc_connection *conn,
+						    const struct rxrpc_security *sec,
+						    struct key *key,
 						    struct sk_buff *skb)
 {
 	struct rxrpc_backlog *b = rx->backlog;
@@ -310,7 +312,7 @@ static struct rxrpc_call *rxrpc_alloc_incoming_call(struct rxrpc_sock *rx,
 		conn->params.local = rxrpc_get_local(local);
 		conn->params.peer = peer;
 		rxrpc_see_connection(conn);
-		rxrpc_new_incoming_connection(rx, conn, skb);
+		rxrpc_new_incoming_connection(rx, conn, sec, key, skb);
 	} else {
 		rxrpc_get_connection(conn);
 	}
@@ -349,9 +351,11 @@ struct rxrpc_call *rxrpc_new_incoming_call(struct rxrpc_local *local,
 					   struct sk_buff *skb)
 {
 	struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
+	const struct rxrpc_security *sec = NULL;
 	struct rxrpc_connection *conn;
 	struct rxrpc_peer *peer = NULL;
-	struct rxrpc_call *call;
+	struct rxrpc_call *call = NULL;
+	struct key *key = NULL;
 
 	_enter("");
 
@@ -372,7 +376,11 @@ struct rxrpc_call *rxrpc_new_incoming_call(struct rxrpc_local *local,
 	 */
 	conn = rxrpc_find_connection_rcu(local, skb, &peer);
 
-	call = rxrpc_alloc_incoming_call(rx, local, peer, conn, skb);
+	if (!conn && !rxrpc_look_up_server_security(local, rx, &sec, &key, skb))
+		goto no_call;
+
+	call = rxrpc_alloc_incoming_call(rx, local, peer, conn, sec, key, skb);
+	key_put(key);
 	if (!call) {
 		skb->mark = RXRPC_SKB_MARK_REJECT_BUSY;
 		goto no_call;
diff --git a/net/rxrpc/conn_event.c b/net/rxrpc/conn_event.c
index a1ceef4f5cd0..808a4723f868 100644
--- a/net/rxrpc/conn_event.c
+++ b/net/rxrpc/conn_event.c
@@ -376,21 +376,7 @@ static void rxrpc_secure_connection(struct rxrpc_connection *conn)
 	_enter("{%d}", conn->debug_id);
 
 	ASSERT(conn->security_ix != 0);
-
-	if (!conn->params.key) {
-		_debug("set up security");
-		ret = rxrpc_init_server_conn_security(conn);
-		switch (ret) {
-		case 0:
-			break;
-		case -ENOENT:
-			abort_code = RX_CALL_DEAD;
-			goto abort;
-		default:
-			abort_code = RXKADNOAUTH;
-			goto abort;
-		}
-	}
+	ASSERT(conn->server_key);
 
 	if (conn->security->issue_challenge(conn) < 0) {
 		abort_code = RX_CALL_DEAD;
diff --git a/net/rxrpc/conn_service.c b/net/rxrpc/conn_service.c
index 123d6ceab15c..21da48e3d2e5 100644
--- a/net/rxrpc/conn_service.c
+++ b/net/rxrpc/conn_service.c
@@ -148,6 +148,8 @@ struct rxrpc_connection *rxrpc_prealloc_service_connection(struct rxrpc_net *rxn
  */
 void rxrpc_new_incoming_connection(struct rxrpc_sock *rx,
 				   struct rxrpc_connection *conn,
+				   const struct rxrpc_security *sec,
+				   struct key *key,
 				   struct sk_buff *skb)
 {
 	struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
@@ -160,6 +162,8 @@ void rxrpc_new_incoming_connection(struct rxrpc_sock *rx,
 	conn->service_id	= sp->hdr.serviceId;
 	conn->security_ix	= sp->hdr.securityIndex;
 	conn->out_clientflag	= 0;
+	conn->security		= sec;
+	conn->server_key	= key_get(key);
 	if (conn->security_ix)
 		conn->state	= RXRPC_CONN_SERVICE_UNSECURED;
 	else
diff --git a/net/rxrpc/rxkad.c b/net/rxrpc/rxkad.c
index 8d8aa3c230b5..098f1f9ec53b 100644
--- a/net/rxrpc/rxkad.c
+++ b/net/rxrpc/rxkad.c
@@ -648,9 +648,9 @@ static int rxkad_issue_challenge(struct rxrpc_connection *conn)
 	u32 serial;
 	int ret;
 
-	_enter("{%d,%x}", conn->debug_id, key_serial(conn->params.key));
+	_enter("{%d,%x}", conn->debug_id, key_serial(conn->server_key));
 
-	ret = key_validate(conn->params.key);
+	ret = key_validate(conn->server_key);
 	if (ret < 0)
 		return ret;
 
@@ -1293,6 +1293,7 @@ static void rxkad_exit(void)
 const struct rxrpc_security rxkad = {
 	.name				= "rxkad",
 	.security_index			= RXRPC_SECURITY_RXKAD,
+	.no_key_abort			= RXKADUNKNOWNKEY,
 	.init				= rxkad_init,
 	.exit				= rxkad_exit,
 	.init_connection_security	= rxkad_init_connection_security,
diff --git a/net/rxrpc/security.c b/net/rxrpc/security.c
index a4c47d2b7054..9b1fb9ed0717 100644
--- a/net/rxrpc/security.c
+++ b/net/rxrpc/security.c
@@ -101,62 +101,58 @@ int rxrpc_init_client_conn_security(struct rxrpc_connection *conn)
 }
 
 /*
- * initialise the security on a server connection
+ * Find the security key for a server connection.
  */
-int rxrpc_init_server_conn_security(struct rxrpc_connection *conn)
+bool rxrpc_look_up_server_security(struct rxrpc_local *local, struct rxrpc_sock *rx,
+				   const struct rxrpc_security **_sec,
+				   struct key **_key,
+				   struct sk_buff *skb)
 {
 	const struct rxrpc_security *sec;
-	struct rxrpc_local *local = conn->params.local;
-	struct rxrpc_sock *rx;
-	struct key *key;
-	key_ref_t kref;
+	struct rxrpc_skb_priv *sp = rxrpc_skb(skb);
+	key_ref_t kref = NULL;
 	char kdesc[5 + 1 + 3 + 1];
 
 	_enter("");
 
-	sprintf(kdesc, "%u:%u", conn->service_id, conn->security_ix);
+	sprintf(kdesc, "%u:%u", sp->hdr.serviceId, sp->hdr.securityIndex);
 
-	sec = rxrpc_security_lookup(conn->security_ix);
+	sec = rxrpc_security_lookup(sp->hdr.securityIndex);
 	if (!sec) {
-		_leave(" = -ENOKEY [lookup]");
-		return -ENOKEY;
+		trace_rxrpc_abort(0, "SVS",
+				  sp->hdr.cid, sp->hdr.callNumber, sp->hdr.seq,
+				  RX_INVALID_OPERATION, EKEYREJECTED);
+		skb->mark = RXRPC_SKB_MARK_REJECT_ABORT;
+		skb->priority = RX_INVALID_OPERATION;
+		return false;
 	}
 
-	/* find the service */
-	read_lock(&local->services_lock);
-	rx = rcu_dereference_protected(local->service,
-				       lockdep_is_held(&local->services_lock));
-	if (rx && (rx->srx.srx_service == conn->service_id ||
-		   rx->second_service == conn->service_id))
-		goto found_service;
+	if (sp->hdr.securityIndex == RXRPC_SECURITY_NONE)
+		goto out;
 
-	/* the service appears to have died */
-	read_unlock(&local->services_lock);
-	_leave(" = -ENOENT");
-	return -ENOENT;
-
-found_service:
 	if (!rx->securities) {
-		read_unlock(&local->services_lock);
-		_leave(" = -ENOKEY");
-		return -ENOKEY;
+		trace_rxrpc_abort(0, "SVR",
+				  sp->hdr.cid, sp->hdr.callNumber, sp->hdr.seq,
+				  RX_INVALID_OPERATION, EKEYREJECTED);
+		skb->mark = RXRPC_SKB_MARK_REJECT_ABORT;
+		skb->priority = RX_INVALID_OPERATION;
+		return false;
 	}
 
 	/* look through the service's keyring */
 	kref = keyring_search(make_key_ref(rx->securities, 1UL),
 			      &key_type_rxrpc_s, kdesc, true);
 	if (IS_ERR(kref)) {
-		read_unlock(&local->services_lock);
-		_leave(" = %ld [search]", PTR_ERR(kref));
-		return PTR_ERR(kref);
+		trace_rxrpc_abort(0, "SVK",
+				  sp->hdr.cid, sp->hdr.callNumber, sp->hdr.seq,
+				  sec->no_key_abort, EKEYREJECTED);
+		skb->mark = RXRPC_SKB_MARK_REJECT_ABORT;
+		skb->priority = sec->no_key_abort;
+		return false;
 	}
 
-	key = key_ref_to_ptr(kref);
-	read_unlock(&local->services_lock);
-
-	conn->server_key = key;
-	conn->security = sec;
-
-	_leave(" = 0");
-	return 0;
+out:
+	*_sec = sec;
+	*_key = key_ref_to_ptr(kref);
+	return true;
 }
-- 
2.20.1




  parent reply	other threads:[~2020-01-16 23:42 UTC|newest]

Thread overview: 216+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2020-01-16 23:15 [PATCH 5.4 000/203] 5.4.13-stable review Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 001/203] HID: hidraw, uhid: Always report EPOLLOUT Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 002/203] rtc: mt6397: fix alarm register overwrite Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 003/203] phy: mapphone-mdm6600: Fix uninitialized status value regression Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 004/203] RDMA/bnxt_re: Avoid freeing MR resources if dereg fails Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 005/203] RDMA/bnxt_re: Fix Send Work Entry state check while polling completions Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 006/203] IB/hfi1: Dont cancel unused work item Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 007/203] mtd: rawnand: stm32_fmc2: avoid to lock the CPU bus Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 008/203] i2c: bcm2835: Store pointer to bus clock Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 009/203] ASoC: SOF: imx8: fix memory allocation failure check on priv->pd_dev Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 010/203] ASoC: soc-core: Set dpcm_playback / dpcm_capture Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 011/203] ASoC: stm32: spdifrx: fix inconsistent lock state Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 012/203] ASoC: stm32: spdifrx: fix race condition in irq handler Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 013/203] ASoC: stm32: spdifrx: fix input pin state management Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 014/203] pinctrl: lochnagar: select GPIOLIB Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 015/203] netfilter: nft_flow_offload: fix underflow in flowtable reference counter Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 016/203] ASoC: SOF: imx8: Fix dsp_box offset Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 017/203] mtd: onenand: omap2: Pass correct flags for prep_dma_memcpy Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 018/203] gpio: zynq: Fix for bug in zynq_gpio_restore_context API Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 019/203] pinctrl: meson: Fix wrong shift value when get drive-strength Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 020/203] selftests: loopback.sh: skip this test if the driver does not support Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 021/203] iommu/vt-d: Unlink device if failed to add to group Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 022/203] iommu: Remove device link to group on failure Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 023/203] bpf: cgroup: prevent out-of-order release of cgroup bpf Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 024/203] fs: move guard_bio_eod() after bio_set_op_attrs Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 025/203] scsi: mpt3sas: Fix double free in attach error handling Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 026/203] gpio: Fix error message on out-of-range GPIO in lookup table Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 027/203] PM / devfreq: tegra: Add COMMON_CLK dependency Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 028/203] PCI: amlogic: Fix probed clock names Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 029/203] drm/tegra: Fix ordering of cleanup code Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 030/203] hsr: add hsr root debugfs directory Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 031/203] hsr: rename debugfs file when interface name is changed Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 032/203] hsr: reset network header when supervision frame is created Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 033/203] s390/qeth: fix qdio teardown after early init error Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 034/203] s390/qeth: fix false reporting of VNIC CHAR config failure Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 035/203] s390/qeth: Fix vnicc_is_in_use if rx_bcast not set Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 036/203] s390/qeth: vnicc Fix init to default Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 037/203] s390/qeth: fix initialization on old HW Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 038/203] cifs: Adjust indentation in smb2_open_file Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 039/203] scsi: smartpqi: Update attribute name to `driver_version` Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 040/203] MAINTAINERS: Append missed file to the database Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 041/203] ath9k: use iowrite32 over __raw_writel Greg Kroah-Hartman
2020-01-16 23:15 ` [PATCH 5.4 042/203] can: j1939: fix address claim code example Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 043/203] dt-bindings: reset: Fix brcmstb-reset example Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 044/203] reset: brcmstb: Remove resource checks Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 045/203] afs: Fix missing cell comparison in afs_test_super() Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 046/203] perf vendor events s390: Remove name from L1D_RO_EXCL_WRITES description Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 047/203] syscalls/x86: Wire up COMPAT_SYSCALL_DEFINE0 Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 048/203] syscalls/x86: Use COMPAT_SYSCALL_DEFINE0 for IA32 (rt_)sigreturn Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 049/203] syscalls/x86: Use the correct function type for sys_ni_syscall Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 050/203] syscalls/x86: Fix function types in COND_SYSCALL Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 051/203] hsr: fix slab-out-of-bounds Read in hsr_debugfs_rename() Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 052/203] btrfs: simplify inode locking for RWF_NOWAIT Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 053/203] netfilter: nf_tables_offload: release flow_rule on error from commit path Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 054/203] netfilter: nft_meta: use 64-bit time arithmetic Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 055/203] ASoC: dt-bindings: mt8183: add missing update Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 056/203] ASoC: simple_card_utils.h: Add missing include Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 057/203] ASoC: fsl_esai: Add spin lock to protect reset, stop and start Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 058/203] ASoC: SOF: Intel: Broadwell: clarify mutual exclusion with legacy driver Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 059/203] ASoC: core: Fix compile warning with CONFIG_DEBUG_FS=n Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 060/203] ASoC: rsnd: fix DALIGN register for SSIU Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 061/203] RDMA/hns: Prevent undefined behavior in hns_roce_set_user_sq_size() Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 062/203] RDMA/hns: remove a redundant le16_to_cpu Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 063/203] RDMA/hns: Modify return value of restrack functions Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 064/203] RDMA/counter: Prevent QP counter manual binding in auto mode Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 065/203] RDMA/siw: Fix port number endianness in a debug message Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 066/203] RDMA/hns: Fix build error again Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 067/203] RDMA/hns: Release qp resources when failed to destroy qp Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 068/203] xprtrdma: Add unique trace points for posting Local Invalidate WRs Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 069/203] xprtrdma: Connection becomes unstable after a reconnect Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 070/203] xprtrdma: Fix MR list handling Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 071/203] xprtrdma: Close window between waking RPC senders and posting Receives Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 072/203] RDMA/hns: Fix to support 64K page for srq Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 073/203] RDMA/hns: Bugfix for qpc/cqc timer configuration Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 074/203] rdma: Remove nes ABI header Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 075/203] RDMA/mlx5: Return proper error value Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 076/203] RDMA/srpt: Report the SCSI residual to the initiator Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 077/203] uaccess: Add non-pagefault user-space write function Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 078/203] bpf: Make use of probe_user_write in probe write helper Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 079/203] bpf: skmsg, fix potential psock NULL pointer dereference Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 080/203] bpf: Support pre-2.25-binutils objcopy for vmlinux BTF Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 081/203] libbpf: Fix Makefile libbpf symbol mismatch diagnostic Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 082/203] afs: Fix use-after-loss-of-ref Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 083/203] afs: Fix afs_lookup() to not clobber the version on a new dentry Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 084/203] keys: Fix request_key() cache Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 085/203] scsi: enclosure: Fix stale device oops with hot replug Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 086/203] scsi: sd: Clear sdkp->protection_type if disk is reformatted without PI Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 087/203] platform/mellanox: fix potential deadlock in the tmfifo driver Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 088/203] platform/x86: asus-wmi: Fix keyboard brightness cannot be set to 0 Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 089/203] platform/x86: GPD pocket fan: Use default values when wrong modparams are given Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 090/203] asm-generic/nds32: dont redefine cacheflush primitives Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 091/203] Documentation/ABI: Fix documentation inconsistency for mlxreg-io sysfs interfaces Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 092/203] Documentation/ABI: Add missed attribute " Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 093/203] xprtrdma: Fix create_qp crash on device unload Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 094/203] xprtrdma: Fix completion wait during device removal Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 095/203] xprtrdma: Fix oops in Receive handler after " Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 096/203] dm: add dm-clone to the documentation index Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 097/203] scsi: ufs: Give an unique ID to each ufs-bsg Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 098/203] crypto: cavium/nitrox - fix firmware assignment to AE cores Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 099/203] crypto: hisilicon - select NEED_SG_DMA_LENGTH in qm Kconfig Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 100/203] crypto: arm64/aes-neonbs - add return value of skcipher_walk_done() in __xts_crypt() Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 101/203] crypto: virtio - implement missing support for output IVs Greg Kroah-Hartman
2020-01-16 23:16 ` [PATCH 5.4 102/203] crypto: algif_skcipher - Use chunksize instead of blocksize Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 103/203] crypto: geode-aes - convert to skcipher API and make thread-safe Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 104/203] NFSv2: Fix a typo in encode_sattr() Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 105/203] nfsd: Fix cld_net->cn_tfm initialization Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 106/203] nfsd: v4 support requires CRYPTO_SHA256 Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 107/203] NFSv4.x: Handle bad/dead sessions correctly in nfs41_sequence_process() Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 108/203] NFSv4.x: Drop the slot if nfs4_delegreturn_prepare waits for layoutreturn Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 109/203] iio: imu: st_lsm6dsx: fix gyro gain definitions for LSM9DS1 Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 110/203] iio: imu: adis16480: assign bias value only if operation succeeded Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 111/203] mei: fix modalias documentation Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 112/203] clk: meson: axg-audio: fix regmap last register Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 113/203] clk: samsung: exynos5420: Preserve CPU clocks configuration during suspend/resume Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 114/203] clk: Fix memory leak in clk_unregister() Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 115/203] dmaengine: dw: platform: Mark hclk clock optional Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 116/203] clk: imx: pll14xx: Fix quick switch of S/K parameter Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 117/203] rsi: fix potential null dereference in rsi_probe() Greg Kroah-Hartman
2020-02-04  8:33   ` Johan Hovold
2020-02-04 10:00     ` Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 118/203] affs: fix a memory leak in affs_remount Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 119/203] pinctl: ti: iodelay: fix error checking on pinctrl_count_index_with_args call Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 120/203] pinctrl: sh-pfc: Fix PINMUX_IPSR_PHYS() to set GPSR Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 121/203] pinctrl: sh-pfc: Do not use platform_get_irq() to count interrupts Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 122/203] pinctrl: lewisburg: Update pin list according to v1.1v6 Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 123/203] PCI: pciehp: Do not disable interrupt twice on suspend Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 124/203] Revert "drm/virtio: switch virtio_gpu_wait_ioctl() to gem helper." Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 125/203] drm/amdgpu: cleanup creating BOs at fixed location (v2) Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 126/203] drm/amdgpu/discovery: reserve discovery data at the top of VRAM Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 127/203] scsi: sd: enable compat ioctls for sed-opal Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 128/203] arm64: dts: apq8096-db820c: Increase load on l21 for SDCARD Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 129/203] gfs2: add compat_ioctl support Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 130/203] af_unix: " Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 131/203] compat_ioctl: handle SIOCOUTQNSD Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 132/203] PCI: aardvark: Use LTSSM state to build link training flag Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 133/203] PCI: aardvark: Fix PCI_EXP_RTCTL register configuration Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 134/203] PCI: dwc: Fix find_next_bit() usage Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 135/203] PCI: Fix missing bridge dma_ranges resource list cleanup Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 136/203] PCI/PM: Clear PCIe PME Status even for legacy power management Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 137/203] tools: PCI: Fix fd leakage Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 138/203] PCI/PTM: Remove spurious "d" from granularity message Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 139/203] powerpc/powernv: Disable native PCIe port management Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 140/203] MIPS: PCI: remember nasid changed by set interrupt affinity Greg Kroah-Hartman
2020-11-18 21:41   ` Sudip Mukherjee
2020-01-16 23:17 ` [PATCH 5.4 141/203] MIPS: Loongson: Fix return value of loongson_hwmon_init Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 142/203] MIPS: SGI-IP27: Fix crash, when CPUs are disabled via nr_cpus parameter Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 143/203] tty: serial: imx: use the sg count from dma_map_sg Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 144/203] tty: serial: pch_uart: correct usage of dma_unmap_sg Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 145/203] ARM: 8943/1: Fix topology setup in case of CPU hotplug for CONFIG_SCHED_MC Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 146/203] media: ov6650: Fix incorrect use of JPEG colorspace Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 147/203] media: ov6650: Fix some format attributes not under control Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 148/203] media: ov6650: Fix .get_fmt() V4L2_SUBDEV_FORMAT_TRY support Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 149/203] media: ov6650: Fix default format not applied on device probe Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 150/203] media: rcar-vin: Fix incorrect return statement in rvin_try_format() Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 151/203] media: hantro: h264: Fix the frame_num wraparound case Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 152/203] media: v4l: cadence: Fix how unsued lanes are handled in csi2rx_start() Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 153/203] media: exynos4-is: Fix recursive locking in isp_video_release() Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 154/203] media: coda: fix deadlock between decoder picture run and start command Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 155/203] media: cedrus: Use correct H264 8x8 scaling list Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 156/203] media: hantro: Do not reorder H264 " Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 157/203] media: aspeed-video: Fix memory leaks in aspeed_video_probe Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 158/203] media: hantro: Set H264 FIELDPIC_FLAG_E flag correctly Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 159/203] iommu/mediatek: Correct the flush_iotlb_all callback Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 160/203] iommu/mediatek: Add a new tlb_lock for tlb_flush Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 161/203] memory: mtk-smi: Add PM suspend and resume ops Greg Kroah-Hartman
2020-01-16 23:17 ` [PATCH 5.4 162/203] Revert "ubifs: Fix memory leak bug in alloc_ubifs_info() error path" Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 163/203] ubifs: Fixed missed le64_to_cpu() in journal Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 164/203] ubifs: do_kill_orphans: Fix a memory leak bug Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 165/203] spi: sprd: Fix the incorrect SPI register Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 166/203] mtd: spi-nor: fix silent truncation in spi_nor_read() Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 167/203] mtd: spi-nor: fix silent truncation in spi_nor_read_raw() Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 168/203] spi: pxa2xx: Set controller->max_transfer_size in dma mode Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 169/203] spi: atmel: fix handling of cs_change set on non-last xfer Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 170/203] spi: rspi: Use platform_get_irq_byname_optional() for optional irqs Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 171/203] spi: lpspi: fix memory leak in fsl_lpspi_probe Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 172/203] iwlwifi: mvm: consider ieee80211 station max amsdu value Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 173/203] rtlwifi: Remove unnecessary NULL check in rtl_regd_init Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 174/203] iwlwifi: mvm: fix support for single antenna diversity Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 175/203] sch_cake: Add missing NLA policy entry TCA_CAKE_SPLIT_GSO Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 176/203] f2fs: fix potential overflow Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 177/203] NFSD fixing possible null pointer derefering in copy offload Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 178/203] rtc: msm6242: Fix reading of 10-hour digit Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 179/203] rtc: brcmstb-waketimer: add missed clk_disable_unprepare Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 180/203] rtc: bd70528: Add MODULE ALIAS to autoload module Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 181/203] gpio: mpc8xxx: Add platform device to gpiochip->parent Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 182/203] scsi: libcxgbi: fix NULL pointer dereference in cxgbi_device_destroy() Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 183/203] scsi: target/iblock: Fix protection error with blocks greater than 512B Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 184/203] selftests: firmware: Fix it to do root uid check and skip Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 185/203] rseq/selftests: Turn off timeout setting Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 186/203] riscv: export flush_icache_all to modules Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 187/203] mips: cacheinfo: report shared CPU map Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 188/203] mips: Fix gettimeofday() in the vdso library Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 189/203] tomoyo: Suppress RCU warning at list_for_each_entry_rcu() Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 190/203] MIPS: Prevent link failure with kcov instrumentation Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 191/203] drm/arm/mali: make malidp_mw_connector_helper_funcs static Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 192/203] rxrpc: Unlock new call in rxrpc_new_incoming_call() rather than the caller Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 193/203] rxrpc: Dont take call->user_mutex in rxrpc_new_incoming_call() Greg Kroah-Hartman
2020-01-16 23:18 ` Greg Kroah-Hartman [this message]
2020-01-16 23:18 ` [PATCH 5.4 195/203] dmaengine: k3dma: Avoid null pointer traversal Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 196/203] s390/qeth: lock the card while changing its hsuid Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 197/203] ioat: ioat_alloc_ring() failure handling Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 198/203] drm/amdgpu: enable gfxoff for raven1 refresh Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 199/203] media: intel-ipu3: Align struct ipu3_uapi_awb_fr_config_s to 32 bytes Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 200/203] kbuild/deb-pkg: annotate libelf-dev dependency as :native Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 201/203] hexagon: parenthesize registers in asm predicates Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 202/203] hexagon: work around compiler crash Greg Kroah-Hartman
2020-01-16 23:18 ` [PATCH 5.4 203/203] ocfs2: call journal flush to mark journal as empty after journal recovery when mount Greg Kroah-Hartman
2020-01-17 13:21 ` [PATCH 5.4 000/203] 5.4.13-stable review Jon Hunter
2020-01-17 14:23   ` Greg Kroah-Hartman
2020-01-17 14:20 ` Naresh Kamboju
2020-01-17 14:29   ` Greg Kroah-Hartman
2020-01-17 16:01 ` Guenter Roeck
2020-01-17 17:00   ` Greg Kroah-Hartman
2020-01-17 16:05 ` shuah
2020-01-17 17:00   ` Greg Kroah-Hartman
2020-01-17 23:18 ` Jeffrin Jose

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20200116231801.152256547@linuxfoundation.org \
    --to=gregkh@linuxfoundation.org \
    --cc=dhowells@redhat.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=marc.dionne@auristor.com \
    --cc=sashal@kernel.org \
    --cc=stable@vger.kernel.org \
    --subject='Re: [PATCH 5.4 194/203] rxrpc: Fix missing security check on incoming calls' \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).