UBUNTU: Start new release

Ignore: yes
cciss: fix info leak in cciss_ioctl32_passthru()

BugLink: http://bugs.launchpad.net/bugs/1188355

CVE-2013-2147

The arg64 struct has a hole after ->buf_size which isn't cleared.  Or if
any of the calls to copy_from_user() fail then that would cause an
information leak as well.

This was assigned CVE-2013-2147.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Mike Miller <mike.miller@hp.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
(cherry picked from commit 58f09e00ae095e46ef9edfcf3a5fd9ccdfad065e)
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
Acked-by: Andy Whitcroft <andy.whitcroft@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
cpqarray: fix info leak in ida_locked_ioctl()

BugLink: http://bugs.launchpad.net/bugs/1188355

CVE-2013-2147

The pciinfo struct has a two byte hole after ->dev_fn so stack
information could be leaked to the user.

This was assigned CVE-2013-2147.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Mike Miller <mike.miller@hp.com>
Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
(cherry picked from commit 627aad1c01da6f881e7f98d71fd928ca0c316b1a)
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
Acked-by: Andy Whitcroft <andy.whitcroft@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Revert "xfs: fix _xfs_buf_find oops on blocks beyond the filesystem end"

BugLink: http://bugs.launchpad.net/bugs/1236041

This reverts commit 150c8fee1a79a70043605185f88e38a2cb6bb64f which is
commit eb178619f930fa2ba2348de332a1ff1c66a31424 upstream.

Several people have reported issues using xfs_growfs after applying the
CVE-2013-1819 fix backport:

[  133.574503] XFS (loop0): _xfs_buf_find: Block out of range: block 0x500001, EOFS 0x400000
[  133.575554] XFS (loop0): _xfs_buf_find: Block out of range: block 0x500001, EOFS 0x400000

Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
Acked-by: Brad Figg <brad.figg@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
SAUCE: (no-up) Only let characters through when there are active readers.

upstreamed

BugLink: http://bugs.launchpad.net/bugs/1208740

If there is an active reader, previous behavior is in place. When there is no
active reader, input is blocked until the next read call unblocks it.

This fixes a long standing issue with readline when pasting more than 4096
bytes.

Signed-off-by: Chris J Arges <chris.j.arges@canonical.com>
Acked-by: Steve Conklin <sconklin@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Btrfs: fix hash overflow handling

CVE-2012-5374
BugLink: http://bugs.launchpad.net/bugs/1091187

CVE-2012-5375
BugLink: http://bugs.launchpad.net/bugs/1091188

The handling for directory crc hash overflows was fairly obscure,
split_leaf returns EOVERFLOW when we try to extend the item and that is
supposed to bubble up to userland.  For a while it did so, but along the
way we added better handling of errors and forced the FS readonly if we
hit IO errors during the directory insertion.

Along the way, we started testing only for EEXIST and the EOVERFLOW case
was dropped.  The end result is that we may force the FS readonly if we
catch a directory hash bucket overflow.

This fixes a few problem spots.  First I add tests for EOVERFLOW in the
places where we can safely just return the error up the chain.

btrfs_rename is harder though, because it tries to insert the new
directory item only after it has already unlinked anything the rename
was going to overwrite.  Rather than adding very complex logic, I added
a helper to test for the hash overflow case early while it is still safe
to bail out.

Snapshot and subvolume creation had a similar problem, so they are using
the new helper now too.

Signed-off-by: Chris Mason <chris.mason@fusionio.com>
Reported-by: Pascal Junod <pascal@junod.info>
(back ported from commit 9c52057c698fb96f8f07e7a4bcf4801a092bda89)
Signed-off-by: Luis Henriques <luis.henriques@canonical.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
UBUNTU: Ubuntu-3.2.0-56.86

Signed-off-by: Steve Conklin <sconklin@canonical.com>
UBUNTU: [Config] add the lowlatency flavours

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: SAUCE: Made kernel irq-threaded by default

Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Look for releases marked Lowlatency instead of Ubuntu

The printchanges target needs to look for Lowlatency instead of Ubuntu
when searching for changes to print since the last release.

Signed-off-by: Luke Yelavich <themuso@ubuntu.com>
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: hooks -- should use :: to maintain unordered hooks

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: [Config] update Vcs-git: to point to current home

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: [Config] add update-from-master script

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: [Config] fix ABI copy in update script

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Start new release

Ignore: yes
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: rebase to Ubuntu-3.2.0-33.52

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Bump ABI

Ignore: yes
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Lowlatency-3.2.0-33.32

Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: [Config] enable lowlatency-pae on i386

BugLink: http://bugs.launchpad.net/bugs/1079594
Signed-off-by: Andy Whitcroft <apw@canonical.com>
UBUNTU: Start new release

Ignore: yes
Signed-off-by: Andy Whitcroft <apw@canonical.com>