Merge android-4.4.178 (7af10f2) into msm-4.4

* refs/heads/tmp-7af10f2
  Linux 4.4.178
  stm class: Hide STM-specific options if STM is disabled
  coresight: removing bind/unbind options from sysfs
  arm64: support keyctl() system call in 32-bit mode
  Revert "USB: core: only clean up what we allocated"
  xhci: Fix port resume done detection for SS ports with LPM enabled
  KVM: Reject device ioctls from processes other than the VM's creator
  x86/smp: Enforce CONFIG_HOTPLUG_CPU when SMP=y
  perf intel-pt: Fix TSC slip
  gpio: adnp: Fix testing wrong value in adnp_gpio_direction_input
  fs/proc/proc_sysctl.c: fix NULL pointer dereference in put_links
  Disable kgdboc failed by echo space to /sys/module/kgdboc/parameters/kgdboc
  USB: serial: option: add Olicard 600
  USB: serial: option: set driver_info for SIM5218 and compatibles
  USB: serial: mos7720: fix mos_parport refcount imbalance on error path
  USB: serial: ftdi_sio: add additional NovaTech products
  USB: serial: cp210x: add new device id
  serial: sh-sci: Fix setting SCSCR_TIE while transferring data
  serial: max310x: Fix to avoid potential NULL pointer dereference
  staging: vt6655: Fix interrupt race condition on device start up.
  staging: vt6655: Remove vif check from vnt_interrupt
  tty: atmel_serial: fix a potential NULL pointer dereference
  scsi: zfcp: fix scsi_eh host reset with port_forced ERP for non-NPIV FCP devices
  scsi: zfcp: fix rport unblock if deleted SCSI devices on Scsi_Host
  scsi: sd: Fix a race between closing an sd device and sd I/O
  ALSA: pcm: Don't suspend stream in unrecoverable PCM state
  ALSA: pcm: Fix possible OOB access in PCM oss plugins
  ALSA: seq: oss: Fix Spectre v1 vulnerability
  ALSA: rawmidi: Fix potential Spectre v1 vulnerability
  ALSA: compress: add support for 32bit calls in a 64bit kernel
  ARM: imx6q: cpuidle: fix bug that CPU might not wake up at expected time
  btrfs: raid56: properly unmap parity page in finish_parity_scrub()
  btrfs: remove WARN_ON in log_dir_items
  mac8390: Fix mmio access size probe
  sctp: get sctphdr by offset in sctp_compute_cksum
  vxlan: Don't call gro_cells_destroy() before device is unregistered
  tcp: do not use ipv6 header for ipv4 flow
  packets: Always register packet sk in the same order
  Add hlist_add_tail_rcu() (Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net)
  net: rose: fix a possible stack overflow
  net/packet: Set __GFP_NOWARN upon allocation in alloc_pg_vec
  mISDN: hfcpci: Test both vendor & device ID for Digium HFC4S
  dccp: do not use ipv6 header for ipv4 flow
  stmmac: copy unicast mac address to MAC registers
  cfg80211: size various nl80211 messages correctly
  mmc: mmc: fix switch timeout issue caused by jiffies precision
  arm64: kconfig: drop CONFIG_RTC_LIB dependency
  video: fbdev: Set pixclock = 0 in goldfishfb
  cpu/hotplug: Handle unbalanced hotplug enable/disable
  usb: gadget: rndis: free response queue during REMOTE_NDIS_RESET_MSG
  usb: gadget: configfs: add mutex lock before unregister gadget
  ipv6: fix endianness error in icmpv6_err
  stm class: Fix stm device initialization order
  stm class: Do not leak the chrdev in error path
  PM / Hibernate: Call flush_icache_range() on pages restored in-place
  arm64: kernel: Include _AC definition in page.h
  perf/ring_buffer: Refuse to begin AUX transaction after rb->aux_mmap_count drops
  mac80211: fix "warning: ‘target_metric’ may be used uninitialized"
  arm64/kernel: fix incorrect EL0 check in inv_entry macro
  ARM: 8510/1: rework ARM_CPU_SUSPEND dependencies
  staging: goldfish: audio: fix compiliation on arm
  staging: ion: Set minimum carveout heap allocation order to PAGE_SHIFT
  staging: ashmem: Add missing include
  staging: ashmem: Avoid deadlock with mmap/shrink
  asm-generic: Fix local variable shadow in __set_fixmap_offset
  coresight: etm4x: Check every parameter used by dma_xx_coherent.
  coresight: "DEVICE_ATTR_RO" should defined as static.
  stm class: Fix a race in unlinking
  stm class: Fix unbalanced module/device refcounting
  stm class: Guard output assignment against concurrency
  stm class: Fix unlocking braino in the error path
  stm class: Support devices with multiple instances
  stm class: Prevent user-controllable allocations
  stm class: Fix link list locking
  stm class: Fix locking in unbinding policy path
  coresight: remove csdev's link from topology
  coresight: release reference taken by 'bus_find_device()'
  coresight: coresight_unregister() function cleanup
  coresight: fixing lockdep error
  writeback: initialize inode members that track writeback history
  Revert "mmc: block: don't use parameter prefix if built as module"
  net: diag: support v4mapped sockets in inet_diag_find_one_icsk()
  perf: Synchronously free aux pages in case of allocation failure
  arm64: hide __efistub_ aliases from kallsyms
  hid-sensor-hub.c: fix wrong do_div() usage
  vmstat: make vmstat_updater deferrable again and shut down on idle
  android: unconditionally remove callbacks in sync_fence_free()
  ARM: 8494/1: mm: Enable PXN when running non-LPAE kernel on LPAE processor
  ARM: 8458/1: bL_switcher: add GIC dependency
  efi: stub: define DISABLE_BRANCH_PROFILING for all architectures
  arm64: fix COMPAT_SHMLBA definition for large pages
  mmc: block: Allow more than 8 partitions per card
  sched/fair: Fix new task's load avg removed from source CPU in wake_up_new_task()
  Bluetooth: Verify that l2cap_get_conf_opt provides large enough buffer
  Bluetooth: Check L2CAP option sizes returned from l2cap_get_conf_opt
  ath10k: avoid possible string overflow
  rtc: Fix overflow when converting time64_t to rtc_time
  USB: core: only clean up what we allocated
  lib/int_sqrt: optimize small argument
  serial: sprd: clear timeout interrupt only rather than all interrupts
  usb: renesas_usbhs: gadget: fix unused-but-set-variable warning
  arm64: traps: disable irq in die()
  Hang/soft lockup in d_invalidate with simultaneous calls
  serial: sprd: adjust TIMEOUT to a big value
  tcp/dccp: drop SYN packets if accept queue is full
  usb: gadget: Add the gserial port checking in gs_start_tx()
  usb: gadget: composite: fix dereference after null check coverify warning
  kbuild: setlocalversion: print error to STDERR
  extcon: usb-gpio: Don't miss event during suspend/resume
  mm/rmap: replace BUG_ON(anon_vma->degree) with VM_WARN_ON
  mmc: core: fix using wrong io voltage if mmc_select_hs200 fails
  arm64: mm: Add trace_irqflags annotations to do_debug_exception()
  usb: dwc3: gadget: Fix suspend/resume during device mode
  mmc: core: shut up "voltage-ranges unspecified" pr_info()
  mmc: sanitize 'bus width' in debug output
  mmc: make MAN_BKOPS_EN message a debug
  mmc: debugfs: Add a restriction to mmc debugfs clock setting
  mmc: pwrseq_simple: Make reset-gpios optional to match doc
  ALSA: hda - Enforces runtime_resume after S3 and S4 for each codec
  ALSA: hda - Record the current power state before suspend/resume calls
  locking/lockdep: Add debug_locks check in __lock_downgrade()
  media: v4l2-ctrls.c/uvc: zero v4l2_event
  mmc: tmio_mmc_core: don't claim spurious interrupts
  ext4: brelse all indirect buffer in ext4_ind_remove_space()
  ext4: fix data corruption caused by unaligned direct AIO
  ext4: fix NULL pointer dereference while journal is aborted
  futex: Ensure that futex address is aligned in handle_futex_death()
  MIPS: Fix kernel crash for R6 in jump label branch function
  mips: loongson64: lemote-2f: Add IRQF_NO_SUSPEND to "cascade" irqaction.
  udf: Fix crash on IO error during truncate
  drm/vmwgfx: Don't double-free the mode stored in par->set_mode
  mmc: pxamci: fix enum type confusion
  ANDROID: drop CONFIG_INPUT_KEYCHORD from cuttlefish and ranchu
  UPSTREAM: virt_wifi: Remove REGULATORY_WIPHY_SELF_MANAGED
  UPSTREAM: net: socket: set sock->sk to NULL after calling proto_ops::release()
  f2fs: set pin_file under CAP_SYS_ADMIN
  f2fs: fix to avoid deadlock in f2fs_read_inline_dir()
  f2fs: fix to adapt small inline xattr space in __find_inline_xattr()
  f2fs: fix to do sanity check with inode.i_inline_xattr_size
  f2fs: give some messages for inline_xattr_size
  f2fs: don't trigger read IO for beyond EOF page
  f2fs: fix to add refcount once page is tagged PG_private
  f2fs: remove wrong comment in f2fs_invalidate_page()
  f2fs: fix to use kvfree instead of kzfree
  f2fs: print more parameters in trace_f2fs_map_blocks
  f2fs: trace f2fs_ioc_shutdown
  f2fs: fix to avoid deadlock of atomic file operations
  f2fs: fix to dirty inode for i_mode recovery
  f2fs: give random value to i_generation
  f2fs: no need to take page lock in readdir
  f2fs: fix to update iostat correctly in IPU path
  f2fs: fix encrypted page memory leak
  f2fs: make fault injection covering __submit_flush_wait()
  f2fs: fix to retry fill_super only if recovery failed
  f2fs: silence VM_WARN_ON_ONCE in mempool_alloc
  f2fs: correct spelling mistake
  f2fs: fix wrong #endif
  f2fs: don't clear CP_QUOTA_NEED_FSCK_FLAG
  f2fs: don't allow negative ->write_io_size_bits
  f2fs: fix to check inline_xattr_size boundary correctly
  Revert "f2fs: fix to avoid deadlock of atomic file operations"
  Revert "f2fs: fix to check inline_xattr_size boundary correctly"
  f2fs: do not use mutex lock in atomic context
  f2fs: fix potential data inconsistence of checkpoint
  f2fs: fix to avoid deadlock of atomic file operations
  f2fs: fix to check inline_xattr_size boundary correctly
  f2fs: jump to label 'free_node_inode' when failing from d_make_root()
  f2fs: fix to document inline_xattr_size option
  f2fs: fix to data block override node segment by mistake
  f2fs: fix typos in code comments
  f2fs: sync filesystem after roll-forward recovery
  fs: export evict_inodes
  f2fs: flush quota blocks after turnning it off
  f2fs: avoid null pointer exception in dcc_info
  f2fs: don't wake up too frequently, if there is lots of IOs
  f2fs: try to keep CP_TRIMMED_FLAG after successful umount
  f2fs: add quick mode of checkpoint=disable for QA
  f2fs: run discard jobs when put_super
  f2fs: fix to set sbi dirty correctly
  f2fs: UBSAN: set boolean value iostat_enable correctly
  f2fs: add brackets for macros
  f2fs: check if file namelen exceeds max value
  f2fs: fix to trigger fsck if dirent.name_len is zero
  f2fs: no need to check return value of debugfs_create functions
  f2fs: export FS_NOCOW_FL flag to user
  f2fs: check inject_rate validity during configuring
  f2fs: remove set but not used variable 'err'
  f2fs: fix compile warnings: 'struct *' declared inside parameter list
  f2fs: change error code to -ENOMEM from -EINVAL

Conflicts:
	arch/arm/Kconfig
	arch/arm64/kernel/traps.c
	drivers/hwtracing/coresight/coresight-etm4x.c
	drivers/hwtracing/coresight/coresight-tmc.c
	drivers/hwtracing/stm/Kconfig
	drivers/hwtracing/stm/core.c
	drivers/mmc/core/mmc.c
	drivers/usb/gadget/function/u_serial.c
	kernel/events/ring_buffer.c
	net/wireless/nl80211.c
	sound/core/compress_offload.c

Change-Id: I33783dbd0a25d678d6c61204f9e67690e57bed8f
Signed-off-by: Srinivasarao P <spathi@codeaurora.org>

1 files changed, 4 insertions, 0 deletions

diff --git a/kernel/futex.c b/kernel/futex.c
index 3acfd7f583b6..39c2b3eda1b9 100644
--- a/kernel/futex.c
+++ b/kernel/futex.c
@@ -3067,6 +3067,10 @@ int handle_futex_death(u32 __user *uaddr, struct task_struct *curr, int pi)
 {
 	u32 uval, uninitialized_var(nval), mval;
 
+	/* Futex address must be 32bit aligned */
+	if ((((unsigned long)uaddr) % sizeof(*uaddr)) != 0)
+		return -1;
+
 retry:
 	if (get_user(uval, uaddr))
 		return -1;