fec8fe8069
Refreshed all patches Remove upstreamed patches. - 103-MIPS-ath79-fix-register-address-in-ath79_ddr_wb_flus.patch - 403-mtd_fix_cfi_cmdset_0002_status_check.patch - 001-4.11-01-mtd-m25p80-consider-max-message-size-in-m25p80_read.patch - 001-4.15-08-bcm63xx_enet-correct-clock-usage.patch - 001-4.15-09-bcm63xx_enet-do-not-write-to-random-DMA-channel-on-B.patch - 900-gen_stats-fix-netlink-stats-padding.patch Introduce a new backported patch to address ext4 breakage, introduced in 4.9.112 - backport-4.9/500-ext4-fix-check-to-prevent-initializing-reserved-inod.patch This patch has been slightly altered to compensate for a new helper function introduced in later kernels. Also add ARM64_SSBD symbol to ARM64 targets still running kernel 4.9 Compile-tested on: ar71xx, bcm2710 Runtime-tested on: ar71xx Signed-off-by: Koen Vandeputte <koen.vandeputte@ncentric.com>
40 lines
1.5 KiB
Diff
40 lines
1.5 KiB
Diff
From 0a9648f1293966c838dc570da73c15a76f4c89d6 Mon Sep 17 00:00:00 2001
|
|
From: Eric Dumazet <edumazet@google.com>
|
|
Date: Wed, 21 Dec 2016 05:42:43 -0800
|
|
Subject: [PATCH 09/10] tcp: add a missing barrier in tcp_tasklet_func()
|
|
|
|
Madalin reported crashes happening in tcp_tasklet_func() on powerpc64
|
|
|
|
Before TSQ_QUEUED bit is cleared, we must ensure the changes done
|
|
by list_del(&tp->tsq_node); are committed to memory, otherwise
|
|
corruption might happen, as an other cpu could catch TSQ_QUEUED
|
|
clearance too soon.
|
|
|
|
We can notice that old kernels were immune to this bug, because
|
|
TSQ_QUEUED was cleared after a bh_lock_sock(sk)/bh_unlock_sock(sk)
|
|
section, but they could have missed a kick to write additional bytes,
|
|
when NIC interrupts for a given flow are spread to multiple cpus.
|
|
|
|
Affected TCP flows would need an incoming ACK or RTO timer to add more
|
|
packets to the pipe. So overall situation should be better now.
|
|
|
|
Fixes: b223feb9de2a ("tcp: tsq: add shortcut in tcp_tasklet_func()")
|
|
Signed-off-by: Eric Dumazet <edumazet@google.com>
|
|
Reported-by: Madalin Bucur <madalin.bucur@nxp.com>
|
|
Tested-by: Madalin Bucur <madalin.bucur@nxp.com>
|
|
Tested-by: Xing Lei <xing.lei@nxp.com>
|
|
Signed-off-by: David S. Miller <davem@davemloft.net>
|
|
---
|
|
net/ipv4/tcp_output.c | 1 +
|
|
1 file changed, 1 insertion(+)
|
|
|
|
--- a/net/ipv4/tcp_output.c
|
|
+++ b/net/ipv4/tcp_output.c
|
|
@@ -774,6 +774,7 @@ static void tcp_tasklet_func(unsigned lo
|
|
list_del(&tp->tsq_node);
|
|
|
|
sk = (struct sock *)tp;
|
|
+ smp_mb__before_atomic();
|
|
clear_bit(TSQ_QUEUED, &sk->sk_tsq_flags);
|
|
|
|
if (!sk->sk_lock.owned &&
|