Skip to content

Configure Mend for GitHub.com #45

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 10,000 commits into
base: develop
Choose a base branch
from
Open

Configure Mend for GitHub.com #45

wants to merge 10,000 commits into from

Conversation

@mend-for-github-com
Copy link

@mend-for-github-com mend-for-github-com bot commented Dec 24, 2024

Welcome to Mend for GitHub.com (formerly WhiteSource). This is an onboarding PR to help you understand and configure settings before Mend starts scanning your repository for security vulnerabilities.

🚦 Mend for GitHub.com will start scanning your repository only once you merge this Pull Request. To disable Mend for GitHub.com, simply close this Pull Request.

What to Expect

This PR contains a '.whitesource' configuration file which can be customized to your needs. If no changes were applied to this file, Mend for GitHub.com will use the default configuration.

Before merging this PR, Make sure the Issues tab is enabled. Once you merge this PR, Mend for GitHub.com will scan your repository and create a GitHub Issue for every vulnerability detected in your repository.

If you do not want a GitHub Issue to be created for each detected vulnerability, you can edit the '.whitesource' file and set the 'minSeverityLevel' parameter to 'NONE'.

If Mend Remediate Workflow Rules are set on your repository (from the Mend 'Integrate' tab), Mend will also generate a fix Pull Request for relevant vulnerabilities.

❓ Got questions? Check out Mend for GitHub.com docs.
If you need any further assistance then you can also request help here.

smb49 and others added 30 commits September 27, 2024 14:46
@smb49
UBUNTU: link-to-tracker: update tracking bug
8d80b51 
BugLink: https://bugs.launchpad.net/bugs/2083001
Properties: no-test-build
Signed-off-by: Stefan Bader <[email protected]>
@smb49
UBUNTU: Ubuntu-5.15.0-125.135
273f7bb 
Signed-off-by: Stefan Bader <[email protected]>
@krzk @smb49
soundwire: stream: Revert "soundwire: stream: fix programming slave p…
9522a71 
…orts for non-continous port maps"

BugLink: https://bugs.launchpad.net/bugs/2085082

This reverts commit ab8d66d because it
breaks codecs using non-continuous masks in source and sink ports.  The
commit missed the point that port numbers are not used as indices for
iterating over prop.sink_ports or prop.source_ports.

Soundwire core and existing codecs expect that the array passed as
prop.sink_ports and prop.source_ports is continuous.  The port mask still
might be non-continuous, but that's unrelated.

Reported-by: Bard Liao <[email protected]>
Closes: https://lore.kernel.org/all/[email protected]/
Fixes: ab8d66d ("soundwire: stream: fix programming slave ports for non-continous port maps")
Acked-by: Bard Liao <[email protected]>
Reviewed-by: Charles Keepax <[email protected]>
Cc: [email protected]
Signed-off-by: Krzysztof Kozlowski <[email protected]>
Tested-by: Peter Ujfalusi <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Vinod Koul <[email protected]>

(cherry picked from commit 233a95f)
Signed-off-by: Stefan Bader <[email protected]>
UBUNTU: link-to-tracker: update tracking bug
9227ef6 
BugLink: https://bugs.launchpad.net/bugs/2086027

Properties: no-test-build
Signed-off-by: Ubuntu Kernel Bot <[email protected]>
UBUNTU: [Packaging] resync git-ubuntu-log
64c3bbb 
BugLink: http://bugs.launchpad.net/bugs/2086027
Signed-off-by: Ubuntu Kernel Bot <[email protected]>
UBUNTU: Start new release
5bd7660 
Ignore: yes
Signed-off-by: Ubuntu Kernel Bot <[email protected]>
@smb49
UBUNTU: Ubuntu-5.15.0-126.136
87cad89 
Signed-off-by: Ubuntu Kernel Bot <[email protected]>
@smb49
UBUNTU: [Packaging] Initial packaging import from linux-hwe-5.15
4f3f850 
Initial packaging/config files imported from
Ubuntu-hwe-5.13-5.13.0-25.26_20.04.1.

Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: [Packaging] update Ubuntu.md
88d34e8 
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: [Packaging] update update.conf
55060f2 
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: [Packaging] debian.hwe-5.15/scripts: drop reference to d-i
5d336d3 
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: [Packaging] re-align packaging with 5.15
6809b91 
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Start new release
7bb7bf1 
Ignore: yes
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: link-to-tracker: update tracking bug
d566785 
BugLink: https://bugs.launchpad.net/bugs/1958962
Properties: no-test-build
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Ubuntu-hwe-5.15-5.15.0-18.18~20.04.2
b28b1a3 
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Start new release
593a8d8 
Ignore: yes
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: link-to-tracker: update tracking bug
92f3ddb 
BugLink: https://bugs.launchpad.net/bugs/1960408
Properties: no-test-build
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Ubuntu-hwe-5.15-5.15.0-22.22~20.04.1
e468fe0 
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: [Config] hwe-5.15: update config options in local-mangle
246f28b 
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Start new release
9efbdb8 
Ignore: yes
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: link-to-tracker: update tracking bug
cf1d7ec 
BugLink: https://bugs.launchpad.net/bugs/1964906
Properties: no-test-build
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Ubuntu-hwe-5.15-5.15.0-23.23~20.04.1
7f3abfe 
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: [Packaging] drop lowlatency flavour
398e19e 
Now that we have a separate lowlatency derivative we can drop lowlatency
references in debian.hwe-5.15.

Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Start new release
f43391d 
Ignore: yes
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: link-to-tracker: update tracking bug
8480c7b 
BugLink: https://bugs.launchpad.net/bugs/1967509
Properties: no-test-build
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Ubuntu-hwe-5.15-5.15.0-25.25~20.04.1
5e1573b 
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: [Packaging] update Ubuntu.md
2e692d6 
BugLink: https://bugs.launchpad.net/bugs/1786013
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Start new release
4349978 
Ignore: yes
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: link-to-tracker: update tracking bug
8dd6ad3 
BugLink: https://bugs.launchpad.net/bugs/1968530
Properties: no-test-build
Signed-off-by: Andrea Righi <[email protected]>
@smb49
UBUNTU: Ubuntu-hwe-5.15-5.15.0-25.25~20.04.2
cfaae9b 
Signed-off-by: Andrea Righi <[email protected]>
Prakash Surya and others added 14 commits November 20, 2024 04:42
DLPX-83442 Disable various kernel modules which we don't use (#13)
66cd2c8
DLPX-83697 iscsi target login should wait until tx/rx threads have pr…
88029d1 
…operly started
DLPX-83701 Make function mnt_add_count() traceable (#16)
d204b5d
@jwk404
DLPX-84608 Remove merge commit from linux-kernel-generic
010fc75 
PR URL: https://www.github.com/delphix/linux-kernel-generic/pull/20
DLPX-84907 CVE-2022-3628 (#21)
9e39b74
@sdimitro
DLPX-84985 target: iscsi: fix deadlock in the iSCSI login code (#22)
b1a1584
@sumedhbala-delphix
DLPX-84906 Disable frame buffer drivers (#25)
c9b8b9b 
PR URL: https://www.github.com/delphix/linux-kernel-generic/pull/25
@palash-gandhi
DLPX-86177 Azure Accelerated networking broken because Mellanox drive…
ba4a3ab 
…rs absent in kernel (#26)

PR URL: https://www.github.com/delphix/linux-kernel-generic/pull/26
DLPX-86675 Disk quota exceeded when unpacking an upgrade image (#27)
1b10d1b
DLPX-87344 Fix kernel merge conflict with upstream
ecd12c2
@palash-gandhi
DLPX-87710 upgrade from 6.0.16.0 to 15.0.0.0 failed because disk quot…
7ad480a 
…a error (#29)

PR URL: https://www.github.com/delphix/linux-kernel-generic/pull/29
@palash-gandhi
DLPX-87970 Move Delphix annotations to linux-pkg to reduce merge conf…
8c5499d 
…licts (#31)

PR URL: https://www.github.com/delphix/linux-kernel-generic/pull/31
@logost
DLPX-91889 scsi: target: iscsi: Handle abort for WRITE_PENDING cmds (#40
0f96b44 
)

Link: https://lore.kernel.org/r/[email protected]

Signed-off-by: Dmitry Bogdanov <[email protected]>
Signed-off-by: Mike Christie <[email protected]>
Signed-off-by: Martin K. Petersen <[email protected]>
Co-authored-by: Dmitry Bogdanov <[email protected]>
@mend-for-github-com
Add .whitesource configuration file
3aefc8a
@delphix-devops-bot delphix-devops-bot force-pushed the develop branch 2 times, most recently from 8f98a02 to 93ed934 Compare May 20, 2025 17:56
@delphix-devops-bot delphix-devops-bot force-pushed the develop branch 2 times, most recently from ace7aeb to 3411991 Compare July 1, 2025 18:31
@delphix-devops-bot delphix-devops-bot force-pushed the develop branch 2 times, most recently from 9b689c1 to 0068121 Compare October 3, 2025 06:41
delphix-devops-bot pushed a commit that referenced this pull request Nov 1, 2025
@smb49
ext4: inline: fix len overflow in ext4_prepare_inline_data
75cd754 
BugLink: https://bugs.launchpad.net/bugs/2120812

commit 227cb4ca5a6502164f850d22aec3104d7888b270 upstream.

When running the following code on an ext4 filesystem with inline_data
feature enabled, it will lead to the bug below.

        fd = open("file1", O_RDWR | O_CREAT | O_TRUNC, 0666);
        ftruncate(fd, 30);
        pwrite(fd, "a", 1, (1UL << 40) + 5UL);

That happens because write_begin will succeed as when
ext4_generic_write_inline_data calls ext4_prepare_inline_data, pos + len
will be truncated, leading to ext4_prepare_inline_data parameter to be 6
instead of 0x10000000006.

Then, later when write_end is called, we hit:

        BUG_ON(pos + len > EXT4_I(inode)->i_inline_size);

at ext4_write_inline_data.

Fix it by using a loff_t type for the len parameter in
ext4_prepare_inline_data instead of an unsigned int.

[   44.545164] ------------[ cut here ]------------
[   44.545530] kernel BUG at fs/ext4/inline.c:240!
[   44.545834] Oops: invalid opcode: 0000 [#1] SMP NOPTI
[   44.546172] CPU: 3 UID: 0 PID: 343 Comm: test Not tainted 6.15.0-rc2-00003-g9080916f4863 #45 PREEMPT(full)  112853fcebfdb93254270a7959841d2c6aa2c8bb
[   44.546523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   44.546523] RIP: 0010:ext4_write_inline_data+0xfe/0x100
[   44.546523] Code: 3c 0e 48 83 c7 48 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e4 fa 43 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 0f 0b <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 49
[   44.546523] RSP: 0018:ffffb342008b79a8 EFLAGS: 00010216
[   44.546523] RAX: 0000000000000001 RBX: ffff9329c579c000 RCX: 0000010000000006
[   44.546523] RDX: 000000000000003c RSI: ffffb342008b79f0 RDI: ffff9329c158e738
[   44.546523] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[   44.546523] R10: 00007ffffffff000 R11: ffffffff9bd0d910 R12: 0000006210000000
[   44.546523] R13: fffffc7e4015e700 R14: 0000010000000005 R15: ffff9329c158e738
[   44.546523] FS:  00007f4299934740(0000) GS:ffff932a60179000(0000) knlGS:0000000000000000
[   44.546523] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   44.546523] CR2: 00007f4299a1ec90 CR3: 0000000002886002 CR4: 0000000000770eb0
[   44.546523] PKRU: 55555554
[   44.546523] Call Trace:
[   44.546523]  <TASK>
[   44.546523]  ext4_write_inline_data_end+0x126/0x2d0
[   44.546523]  generic_perform_write+0x17e/0x270
[   44.546523]  ext4_buffered_write_iter+0xc8/0x170
[   44.546523]  vfs_write+0x2be/0x3e0
[   44.546523]  __x64_sys_pwrite64+0x6d/0xc0
[   44.546523]  do_syscall_64+0x6a/0xf0
[   44.546523]  ? __wake_up+0x89/0xb0
[   44.546523]  ? xas_find+0x72/0x1c0
[   44.546523]  ? next_uptodate_folio+0x317/0x330
[   44.546523]  ? set_pte_range+0x1a6/0x270
[   44.546523]  ? filemap_map_pages+0x6ee/0x840
[   44.546523]  ? ext4_setattr+0x2fa/0x750
[   44.546523]  ? do_pte_missing+0x128/0xf70
[   44.546523]  ? security_inode_post_setattr+0x3e/0xd0
[   44.546523]  ? ___pte_offset_map+0x19/0x100
[   44.546523]  ? handle_mm_fault+0x721/0xa10
[   44.546523]  ? do_user_addr_fault+0x197/0x730
[   44.546523]  ? do_syscall_64+0x76/0xf0
[   44.546523]  ? arch_exit_to_user_mode_prepare+0x1e/0x60
[   44.546523]  ? irqentry_exit_to_user_mode+0x79/0x90
[   44.546523]  entry_SYSCALL_64_after_hwframe+0x55/0x5d
[   44.546523] RIP: 0033:0x7f42999c6687
[   44.546523] Code: 48 89 fa 4c 89 df e8 58 b3 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[   44.546523] RSP: 002b:00007ffeae4a7930 EFLAGS: 00000202 ORIG_RAX: 0000000000000012
[   44.546523] RAX: ffffffffffffffda RBX: 00007f4299934740 RCX: 00007f42999c6687
[   44.546523] RDX: 0000000000000001 RSI: 000055ea6149200f RDI: 0000000000000003
[   44.546523] RBP: 00007ffeae4a79a0 R08: 0000000000000000 R09: 0000000000000000
[   44.546523] R10: 0000010000000005 R11: 0000000000000202 R12: 0000000000000000
[   44.546523] R13: 00007ffeae4a7ac8 R14: 00007f4299b86000 R15: 000055ea61493dd8
[   44.546523]  </TASK>
[   44.546523] Modules linked in:
[   44.568501] ---[ end trace 0000000000000000 ]---
[   44.568889] RIP: 0010:ext4_write_inline_data+0xfe/0x100
[   44.569328] Code: 3c 0e 48 83 c7 48 48 89 de 5b 41 5c 41 5d 41 5e 41 5f 5d e9 e4 fa 43 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 0f 0b <0f> 0b 0f 1f 44 00 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 49
[   44.570931] RSP: 0018:ffffb342008b79a8 EFLAGS: 00010216
[   44.571356] RAX: 0000000000000001 RBX: ffff9329c579c000 RCX: 0000010000000006
[   44.571959] RDX: 000000000000003c RSI: ffffb342008b79f0 RDI: ffff9329c158e738
[   44.572571] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
[   44.573148] R10: 00007ffffffff000 R11: ffffffff9bd0d910 R12: 0000006210000000
[   44.573748] R13: fffffc7e4015e700 R14: 0000010000000005 R15: ffff9329c158e738
[   44.574335] FS:  00007f4299934740(0000) GS:ffff932a60179000(0000) knlGS:0000000000000000
[   44.575027] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   44.575520] CR2: 00007f4299a1ec90 CR3: 0000000002886002 CR4: 0000000000770eb0
[   44.576112] PKRU: 55555554
[   44.576338] Kernel panic - not syncing: Fatal exception
[   44.576517] Kernel Offset: 0x1a600000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)

Reported-by: [email protected]
Closes: https://syzkaller.appspot.com/bug?extid=fe2a25dae02a207717a0
Fixes: f19d587 ("ext4: add normal write support for inline data")
Signed-off-by: Thadeu Lima de Souza Cascardo <[email protected]>
Cc: [email protected]
Reviewed-by: Jan Kara <[email protected]>
Reviewed-by: Andreas Dilger <[email protected]>
Link: https://patch.msgid.link/20250415-ext4-prepare-inline-overflow-v1-1-f4c13d900967@igalia.com
Signed-off-by: Theodore Ts'o <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Signed-off-by: Noah Wager <[email protected]>
Signed-off-by: Stefan Bader <[email protected]>
@delphix-devops-bot delphix-devops-bot force-pushed the develop branch 2 times, most recently from 5981a67 to e426723 Compare November 5, 2025 18:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.