)]}' { "log": [ { "commit": "ac57b3a9ce280763296f99e32187a0b4384d9389", "tree": "5aa81b60abfe3436a5d7d52a93a9c5cb9b9d71a5", "parents": [ "bfb6709d0b239af5e3ce5859aae926e1b79ba84b" ], "author": { "name": "Denis Lunev", "email": "den@openvz.org", "time": "Wed Apr 18 17:05:58 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 18 17:05:58 2007 -0700" }, "message": "[NETLINK]: Don\u0027t attach callback to a going-away netlink socket\n\nThere is a race between netlink_dump_start() and netlink_release()\nthat can lead to the situation when a netlink socket with non-zero\ncallback is freed.\n\nHere it is:\n\nCPU1: CPU2\nnetlink_release(): netlink_dump_start():\n\n sk \u003d netlink_lookup(); /* OK */\n\nnetlink_remove();\n\nspin_lock(\u0026nlk-\u003ecb_lock);\nif (nlk-\u003ecb) { /* false */\n ...\n}\nspin_unlock(\u0026nlk-\u003ecb_lock);\n\n spin_lock(\u0026nlk-\u003ecb_lock);\n if (nlk-\u003ecb) { /* false */\n ...\n }\n nlk-\u003ecb \u003d cb;\n spin_unlock(\u0026nlk-\u003ecb_lock);\n ...\nsock_orphan(sk);\n/*\n * proceed with releasing\n * the socket\n */\n\nThe proposal it to make sock_orphan before detaching the callback\nin netlink_release() and to check for the sock to be SOCK_DEAD in\nnetlink_dump_start() before setting a new callback.\n\nSigned-off-by: Denis Lunev \u003cden@openvz.org\u003e\nSigned-off-by: Kirill Korotaev \u003cdev@openvz.org\u003e\nSigned-off-by: Pavel Emelianov \u003cxemul@openvz.org\u003e\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bfb6709d0b239af5e3ce5859aae926e1b79ba84b", "tree": "ce675f8597bc6df886889ba4fa737640e72e7349", "parents": [ "d0cf0d9940ef27b46fcbbd9e0cc8427c30fe05eb" ], "author": { "name": "Olaf Kirch", "email": "olaf.kirch@oracle.com", "time": "Wed Apr 18 15:07:22 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 18 15:07:22 2007 -0700" }, "message": "[IrDA]: Correctly handling socket error\n\nThis patch fixes an oops first reported in mid 2006 - see\nhttp://lkml.org/lkml/2006/8/29/358 The cause of this bug report is that\nwhen an error is signalled on the socket, irda_recvmsg_stream returns\nwithout removing a local wait_queue variable from the socket\u0027s sk_sleep\nqueue. This causes havoc further down the road.\n\nIn response to this problem, a patch was made that invoked sock_orphan on\nthe socket when receiving a disconnect indication. This is not a good fix,\nas this sets sk_sleep to NULL, causing applications sleeping in recvmsg\n(and other places) to oops.\n\nThis is against the latest net-2.6 and should be considered for -stable\ninclusion. \n\nSigned-off-by: Olaf Kirch \u003colaf.kirch@oracle.com\u003e\nSigned-off-by: Samuel Ortiz \u003csamuel@sortiz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d0cf0d9940ef27b46fcbbd9e0cc8427c30fe05eb", "tree": "0ac9e4b58b7a14c1215bf0516e8adf8e065cd081", "parents": [ "fefaa75e0451c76225863644be01e4fd70884153" ], "author": { "name": "Vlad Yasevich", "email": "vladislav.yasevich@hp.com", "time": "Wed Apr 18 14:11:06 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Apr 18 14:16:09 2007 -0700" }, "message": "[SCTP]: Do not interleave non-fragments when in partial delivery\n\nThe way partial delivery is currently implemnted, it is possible to\nintereleave a message (either from another steram, or unordered) that\nis not part of partial delivery process. The only way to this is for\na message to not be a fragment and be \u0027in order\u0027 or unorderd for a\ngiven stream. This will result in bypassing the reassembly/ordering\nqueues where things live duing partial delivery, and the\nmessage will be delivered to the socket in the middle of partial delivery.\n\nThis is a two-fold problem, in that:\n1. the app now must check the stream-id and flags which it may not\nbe doing.\n2. this clearing partial delivery state from the association and results\nin ulp hanging.\n\nThis patch is a band-aid over a much bigger problem in that we\ndon\u0027t do stream interleave.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fefaa75e0451c76225863644be01e4fd70884153", "tree": "685d90c0d228505ba7a9188eb82c6ed6949b3b86", "parents": [ "80d74d5123bf3aecd32302809c4e61bb8a16786b" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 21:48:10 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Apr 18 14:16:07 2007 -0700" }, "message": "[IPSEC] af_key: Fix thinko in pfkey_xfrm_policy2msg()\n\nMake sure to actually assign the determined mode to\nrq-\u003esadb_x_ipsecrequest_mode.\n\nNoticed by Joe Perches.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "80d74d5123bf3aecd32302809c4e61bb8a16786b", "tree": "604d95410caa54c60abcfb018bc62f4fde0398bc", "parents": [ "245d95a423664761d9399656098523db6988e9cc", "19bb3506e27096eea5f7b71b89621ad1203ed318" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue Apr 17 16:51:32 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue Apr 17 16:51:32 2007 -0700" }, "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\n* master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6:\n [BRIDGE]: Unaligned access when comparing ethernet addresses\n [SCTP]: Unmap v4mapped addresses during SCTP_BINDX_REM_ADDR operation.\n [SCTP]: Fix assertion (!atomic_read(\u0026sk-\u003esk_rmem_alloc)) failed message\n [NET]: Set a separate lockdep class for neighbour table\u0027s proxy_queue\n [NET]: Fix UDP checksum issue in net poll mode.\n [KEY]: Fix conversion between IPSEC_MODE_xxx and XFRM_MODE_xxx.\n [NET]: Get rid of alloc_skb_from_cache\n" }, { "commit": "30f3deeee81cf22546da1b0b89a937bb991dea23", "tree": "3747930c11b5cf0b25c96ddd161e541c1b00010c", "parents": [ "94256dd680f837dc14dd7d1377c5326fb3362721" ], "author": { "name": "NeilBrown", "email": "neilb@suse.de", "time": "Mon Apr 16 22:53:25 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Tue Apr 17 16:36:27 2007 -0700" }, "message": "knfsd: use a spinlock to protect sk_info_authunix\n\nsk_info_authunix is not being protected properly so the object that it\npoints to can be cache_put twice, leading to corruption.\n\nWe borrow svsk-\u003esk_defer_lock to provide the protection. We should\nprobably rename that lock to have a more generic name - later.\n\nThanks to Gabriel for reporting this.\n\nCc: Greg Banks \u003cgnb@melbourne.sgi.com\u003e\nCc: Gabriel Barazer \u003cgabriel@oxeva.fr\u003e\nSigned-off-by: Neil Brown \u003cneilb@suse.de\u003e\nCc: \u003cstable@kernel.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "19bb3506e27096eea5f7b71b89621ad1203ed318", "tree": "f3385d69595ab50fffbc314b281864ef99f2071b", "parents": [ "0304ff8a2d5f57defb011c7f261b4c1b3eff96d1" ], "author": { "name": "Evgeny Kravtsunov", "email": "emkravts@openvz.org", "time": "Tue Apr 17 12:31:24 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 14:16:00 2007 -0700" }, "message": "[BRIDGE]: Unaligned access when comparing ethernet addresses\n\ncompare_ether_addr() implicitly requires that the addresses\npassed are 2-bytes aligned in memory.\n\nThis is not true for br_stp_change_bridge_id() and\nbr_stp_recalculate_bridge_id() in which one of the addresses\nis unsigned char *, and thus may not be 2-bytes aligned.\n\nSigned-off-by: Evgeny Kravtsunov \u003cemkravts@openvz.org\u003e\nSigned-off-by: Kirill Korotaev \u003cdev@openvz.org\u003e\nSigned-off-by: Pavel Emelianov \u003cxemul@openvz.org\u003e\n" }, { "commit": "0304ff8a2d5f57defb011c7f261b4c1b3eff96d1", "tree": "2891fb70f028c5101a98afa5e4237796d6ecbfc0", "parents": [ "ea2bc483ff5caada7c4aa0d5fbf87d3a6590273d" ], "author": { "name": "Paolo Galtieri", "email": "pgaltieri@mvista.com", "time": "Tue Apr 17 12:52:36 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 13:13:42 2007 -0700" }, "message": "[SCTP]: Unmap v4mapped addresses during SCTP_BINDX_REM_ADDR operation.\n\nDuring the sctp_bindx() call to add additional addresses to the\nendpoint, any v4mapped addresses are converted and stored as regular\nv4 addresses. However, when trying to remove these addresses, the\nv4mapped addresses are not converted and the operation fails. This\npatch unmaps the addresses on during the remove operation as well.\n\nSigned-off-by: Paolo Galtieri \u003cpgaltieri@mvista.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ea2bc483ff5caada7c4aa0d5fbf87d3a6590273d", "tree": "2dea10c6646a961568b3108f2aad0572113576cd", "parents": [ "c2ecba71717c4f60671175fd26083c35a4b9ad58" ], "author": { "name": "Tsutomu Fujii", "email": "t-fujii@nb.jp.nec.com", "time": "Tue Apr 17 12:49:53 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 13:13:37 2007 -0700" }, "message": "[SCTP]: Fix assertion (!atomic_read(\u0026sk-\u003esk_rmem_alloc)) failed message\n\nIn current implementation, LKSCTP does receive buffer accounting for\ndata in sctp_receive_queue and pd_lobby. However, LKSCTP don\u0027t do\naccounting for data in frag_list when data is fragmented. In addition,\nLKSCTP doesn\u0027t do accounting for data in reasm and lobby queue in\nstructure sctp_ulpq.\nWhen there are date in these queue, assertion failed message is printed\nin inet_sock_destruct because sk_rmem_alloc of oldsk does not become 0\nwhen socket is destroyed.\n\nSigned-off-by: Tsutomu Fujii \u003ct-fujii@nb.jp.nec.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c2ecba71717c4f60671175fd26083c35a4b9ad58", "tree": "b51d9e55cc4777254fed5d6b2056cc26d5ccda9f", "parents": [ "5e7d7fa57323dfb48fb09464cf4542daa7ce8a72" ], "author": { "name": "Pavel Emelianov", "email": "xemul@sw.ru", "time": "Tue Apr 17 12:45:31 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 13:13:31 2007 -0700" }, "message": "[NET]: Set a separate lockdep class for neighbour table\u0027s proxy_queue\n\nOtherwise the following calltrace will lead to a wrong\nlockdep warning:\n\n neigh_proxy_process()\n `- lock(neigh_table-\u003eproxy_queue.lock);\n arp_redo /* via tbl-\u003eproxy_redo */\n arp_process\n neigh_event_ns\n neigh_update\n skb_queue_purge\n `- lock(neighbor-\u003earp_queue.lock);\n\nThis is not a deadlock actually, as neighbor table\u0027s proxy_queue\nand the neighbor\u0027s arp_queue are different queues.\n\nLockdep thinks there is a deadlock as both queues are initialized\nwith skb_queue_head_init() and thus have a common class.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5e7d7fa57323dfb48fb09464cf4542daa7ce8a72", "tree": "608dee7ca9e99458e3f6ad799e23e607322e95a1", "parents": [ "55569ce256ce29f4624f0007213432c1ed646584" ], "author": { "name": "Aubrey.Li", "email": "aubreylee@gmail.com", "time": "Tue Apr 17 12:40:20 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 13:13:26 2007 -0700" }, "message": "[NET]: Fix UDP checksum issue in net poll mode.\n\nIn net poll mode, the current checksum function doesn\u0027t consider the\nkind of packet which is padded to reach a specific minimum length. I\nbelieve that\u0027s the problem causing my test case failed. The following\npatch fixed this issue.\n\nSigned-off-by: Aubrey.Li \u003caubreylee@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "55569ce256ce29f4624f0007213432c1ed646584", "tree": "e8c29263844ed733d6d40bbeb871588eaa1a9bd1", "parents": [ "b4dfa0b1fb39c7ffe74741d60668825de6a47b69" ], "author": { "name": "Kazunori MIYAZAWA", "email": "miyazawa@linux-ipv6.org", "time": "Tue Apr 17 12:32:20 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 13:13:21 2007 -0700" }, "message": "[KEY]: Fix conversion between IPSEC_MODE_xxx and XFRM_MODE_xxx.\n\nWe should not blindly convert between IPSEC_MODE_xxx and XFRM_MODE_xxx just\nby incrementing / decrementing because the assumption is not true any longer.\n\nSigned-off-by: Kazunori MIYAZAWA \u003cmiyazawa@linux-ipv6.org\u003e\nSinged-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\n" }, { "commit": "b4dfa0b1fb39c7ffe74741d60668825de6a47b69", "tree": "1866a6b51f666b4969f6c0be55c25f31e4d42a51", "parents": [ "6f29e35e2d4cdbc3e8785982314e54ec5df4ad37" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Apr 17 12:28:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Apr 17 13:13:16 2007 -0700" }, "message": "[NET]: Get rid of alloc_skb_from_cache\n\nSince this was added originally for Xen, and Xen has recently (~2.6.18)\nstopped using this function, we can safely get rid of it. Good timing\ntoo since this function has started to bit rot.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b1847a041aba157bdf1643bd151e98dc44366b1c", "tree": "60240c03d6af4831fc4a202e471ae87a53caaf11", "parents": [ "2918cd81f58aa9748acf961240c006394f474047", "24fc6f00b64985773b5abd592c4cb2e30bad7584" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Apr 13 18:20:39 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Fri Apr 13 18:20:39 2007 -0700" }, "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/sparc-2.6\n\n* master.kernel.org:/pub/scm/linux/kernel/git/davem/sparc-2.6:\n [SPARC64]: Fix inline directive in pci_iommu.c\n [SPARC64]: Fix arg passing to compat_sys_ipc().\n [SPARC]: Fix section mismatch warnings in pci.c and pcic.c\n [SUNRPC]: Make sure on-stack cmsg buffer is properly aligned.\n [SPARC]: avoid CHILD_MAX and OPEN_MAX constants\n [SPARC64]: Fix SBUS IOMMU allocation code.\n" }, { "commit": "49688c843101ba6275756505e81af45ef50f87d7", "tree": "e30c9d9424115282be11b1495b8bcf8a12a5885b", "parents": [ "612f09e8495ba656032f89147ab999ef2be9c360" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Fri Apr 13 16:37:54 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Fri Apr 13 16:37:54 2007 -0700" }, "message": "[NETFILTER] arp_tables: Fix unaligned accesses.\n\nThere are two device string comparison loops in arp_packet_match().\nThe first one goes byte-by-byte but the second one tries to be\nclever and cast the string to a long and compare by longs.\n\nThe device name strings in the arp table entries are not guarenteed\nto be aligned enough to make this value, so just use byte-by-byte\nfor both cases.\n\nBased upon a report by \u003cdrraid@gmail.com\u003e.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "612f09e8495ba656032f89147ab999ef2be9c360", "tree": "16a0cb310eb6812383f57d3425ceeba6b34f9f52", "parents": [ "661697f728d75302e1f661a58db2fcba71d5cbc9" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Apr 13 16:18:02 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Apr 13 16:18:02 2007 -0700" }, "message": "[IPV6] SNMP: Fix {In,Out}NoRoutes statistics.\n\nA packet which is being discarded because of no routes in the\nforwarding path should not be counted as OutNoRoutes but as\nInNoRoutes.\nAdditionally, on this occasion, a packet whose destinaion is\nnot valid should be counted as InAddrErrors separately.\n\nBased on patch from Mitsuru Chinen \u003cmitch@linux.vnet.ibm.com\u003e.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "661697f728d75302e1f661a58db2fcba71d5cbc9", "tree": "07513117f8bfc5ca1844c768a6edb410c1a0c5bf", "parents": [ "279e172a580d415b83eba4f9fbbc77b08e546553" ], "author": { "name": "Joy Latten", "email": "latten@austin.ibm.com", "time": "Fri Apr 13 16:14:35 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Apr 13 16:14:35 2007 -0700" }, "message": "[IPSEC] XFRM_USER: kernel panic when large security contexts in ACQUIRE\n\nWhen sending a security context of 50+ characters in an ACQUIRE \nmessage, following kernel panic occurred.\n\nkernel BUG in xfrm_send_acquire at net/xfrm/xfrm_user.c:1781!\ncpu 0x3: Vector: 700 (Program Check) at [c0000000421bb2e0]\n pc: c00000000033b074: .xfrm_send_acquire+0x240/0x2c8\n lr: c00000000033b014: .xfrm_send_acquire+0x1e0/0x2c8\n sp: c0000000421bb560\n msr: 8000000000029032\n current \u003d 0xc00000000fce8f00\n paca \u003d 0xc000000000464b00\n pid \u003d 2303, comm \u003d ping\nkernel BUG in xfrm_send_acquire at net/xfrm/xfrm_user.c:1781!\nenter ? for help\n3:mon\u003e t\n[c0000000421bb650] c00000000033538c .km_query+0x6c/0xec\n[c0000000421bb6f0] c000000000337374 .xfrm_state_find+0x7f4/0xb88\n[c0000000421bb7f0] c000000000332350 .xfrm_tmpl_resolve+0xc4/0x21c\n[c0000000421bb8d0] c0000000003326e8 .xfrm_lookup+0x1a0/0x5b0\n[c0000000421bba00] c0000000002e6ea0 .ip_route_output_flow+0x88/0xb4\n[c0000000421bbaa0] c0000000003106d8 .ip4_datagram_connect+0x218/0x374\n[c0000000421bbbd0] c00000000031bc00 .inet_dgram_connect+0xac/0xd4\n[c0000000421bbc60] c0000000002b11ac .sys_connect+0xd8/0x120\n[c0000000421bbd90] c0000000002d38d0 .compat_sys_socketcall+0xdc/0x214\n[c0000000421bbe30] c00000000000869c syscall_exit+0x0/0x40\n--- Exception: c00 (System Call) at 0000000007f0ca9c\nSP (fc0ef8f0) is in userspace\n\nWe are using size of security context from xfrm_policy to determine\nhow much space to alloc skb and then putting security context from\nxfrm_state into skb. Should have been using size of security context \nfrom xfrm_state to alloc skb. Following fix does that\n\nSigned-off-by: Joy Latten \u003clatten@austin.ibm.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "279e172a580d415b83eba4f9fbbc77b08e546553", "tree": "ab9701560e9cffb927f367fad0b1ddd3b3100259", "parents": [ "09fe3ef46c5a2cc65d173df9518013e208eb3ba3" ], "author": { "name": "Jerome Borsboom", "email": "j.borsboom@erasmusmc.nl", "time": "Fri Apr 13 16:12:47 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Apr 13 16:12:47 2007 -0700" }, "message": "[VLAN]: Allow VLAN interface on top of bridge interface\n\nWhen a VLAN interface is created on top of a bridge interface and \nnetfilter is enabled to see the bridged packets, the packets can be \ncorrupted when passing through the netfilter code. This is caused by the \nVLAN driver not setting the \u0027protocol\u0027 and \u0027nh\u0027 members of the sk_buff \nstructure. In general, this is no problem as the VLAN interface is mostly \nconnected to a physical ethernet interface which does not use the \n\u0027protocol\u0027 and \u0027nh\u0027 members. For a bridge interface, however, these \nmembers do matter.\n\nSigned-off-by: Jerome Borsboom \u003cj.borsboom@erasmusmc.nl\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "09fe3ef46c5a2cc65d173df9518013e208eb3ba3", "tree": "ec2ef46a95c1d1c6d85f72c65b429207135951b6", "parents": [ "01102e7ca2e71ec0c300d41a1f3e594235b733ee" ], "author": { "name": "Andrew Morton", "email": "akpm@linux-foundation.org", "time": "Thu Apr 12 14:45:32 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 12 14:45:32 2007 -0700" }, "message": "[PKTGEN]: Add try_to_freeze()\n\nThe pktgen module prevents suspend-to-disk. Fix.\n\nAcked-by: \"Michal Piotrowski\" \u003cmichal.k.k.piotrowski@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "01102e7ca2e71ec0c300d41a1f3e594235b733ee", "tree": "99d68d06670c0ee94da60e7a1035ca9f3e589692", "parents": [ "80584ff3b99c36ead7e130e453b3a48b18072d18" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Apr 12 14:27:03 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 12 14:27:03 2007 -0700" }, "message": "[NETFILTER]: ipt_ULOG: use put_unaligned\n\nUse put_unaligned to fix warnings about unaligned accesses.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bc375ea7efcda0450b7cba9b3514e76d2e1cea79", "tree": "321c7a881214991758b66d6877cae4cd0d2071c2", "parents": [ "1d51c69fb6e61054cd6cc485f9bef77d19d82751" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Apr 12 13:35:59 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Thu Apr 12 13:35:59 2007 -0700" }, "message": "[SUNRPC]: Make sure on-stack cmsg buffer is properly aligned.\n\nBased upon a report from Meelis Roos.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "50c9cc2e540aeaab78ab548a8d42568977c6844f", "tree": "b00c30333f5d124a14e371f4bcf5a69051a2df33", "parents": [ "15d33c070ddde99f7368e6b17b71d22c866f97d9" ], "author": { "name": "Jaroslav Kysela", "email": "perex@suse.cz", "time": "Tue Apr 10 13:26:48 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Apr 10 13:26:48 2007 -0700" }, "message": "[NETFILTER]: ipt_CLUSTERIP: fix oops in checkentry function\n\nThe clusterip_config_find_get() already increases entries reference\ncounter, so there is no reason to do it twice in checkentry() callback.\n\nThis causes the config to be freed before it is removed from the list,\nresulting in a crash when adding the next rule.\n\nSigned-off-by: Jaroslav Kysela \u003cperex@suse.cz\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "15d33c070ddde99f7368e6b17b71d22c866f97d9", "tree": "00e779b01fb3c48e61b3ccc4de8f082e1b929cc4", "parents": [ "699784b7614ce61b16a075445b8e5b6c379c5086" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Apr 09 13:23:14 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Apr 09 13:31:15 2007 -0700" }, "message": "[TCP]: slow_start_after_idle should influence cwnd validation too\n\nFor the cases that slow_start_after_idle are meant to deal\nwith, it is almost a certainty that the congestion window\ntests will think the connection is application limited and\nwe\u0027ll thus decrease the cwnd there too. This defeats the\nwhole point of setting slow_start_after_idle to zero.\n\nSo test it there too.\n\nWe do not cancel out the entire tcp_cwnd_validate() function\nso that if the sysctl is changed we still have the validation\nstate maintained.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "bb8a954f27ed8fb8f57e80e6b63d837cfdcad689", "tree": "3b001cd05b981c38ccd31f088fb434b492301e56", "parents": [ "90f30eccf41302a2542f5d374af243061902bd98" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Mon Apr 09 11:42:25 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Apr 09 13:31:13 2007 -0700" }, "message": "[NET_SCHED]: cls_tcindex: fix compatibility breakage\n\nUserspace uses an integer for TCA_TCINDEX_SHIFT, the kernel was changed\nto expect and use a u16 value in 2.6.11, which broke compatibility on\nbig endian machines. Change back to use int.\n\nReported by Ole Reinartz \u003cole.reinartz@gmx.de\u003e\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "161980f4c6b846625efe6227420175cb41477de3", "tree": "689e343519191d02624b377c7d2fccb2a76852cf", "parents": [ "254d0d24e31c3df64ccfff349c9aa9d1e5989819" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Fri Apr 06 11:42:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Fri Apr 06 11:42:27 2007 -0700" }, "message": "[IPV6]: Revert recent change to rt6_check_dev().\n\nThis reverts a0d78ebf3a0e33a1aeacf2fc518ad9273d6a1c2f\n\nIt causes pings to link-local addresses to fail.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "254d0d24e31c3df64ccfff349c9aa9d1e5989819", "tree": "adcbb19764ed646adb5fa2008d5a94d97db54566", "parents": [ "d4b1e840629562953d81c9fe0a3a67473f3d993c" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Apr 05 16:03:33 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 05 16:03:33 2007 -0700" }, "message": "[XFRM]: beet: fix IP option decapsulation\n\nBeet mode looks for the beet pseudo header after the outer IP header,\nwhich is wrong since that is followed by the ESP header. Additionally\nit needs to adjust the packet length after removing the pseudo header\nand point the data pointer to the real data location.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d4b1e840629562953d81c9fe0a3a67473f3d993c", "tree": "d20d023cfcb113207a1bb0a3bb18e2e8a48133d7", "parents": [ "04fef9893a1fa5d429522e09bc9591736408f2e8" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Apr 05 15:59:41 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 05 15:59:41 2007 -0700" }, "message": "[XFRM]: beet: fix beet mode decapsulation\n\nBeet mode decapsulation fails to properly set up the skb pointers, which\nonly works by accident in combination with CONFIG_NETFILTER, since in that\ncase the skb is fixed up in xfrm4_input before passing it to the netfilter\nhooks.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "04fef9893a1fa5d429522e09bc9591736408f2e8", "tree": "d997599873920aef8970ce625c8f9d1184d2600e", "parents": [ "c5027c9a896fbe05367fb893a274deca5114bfd0" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Apr 05 15:54:39 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 05 15:54:39 2007 -0700" }, "message": "[XFRM]: beet: use IPOPT_NOP for option padding\n\ndraft-nikander-esp-beet-mode-07.txt states \"The padding MUST be filled\nwith NOP options as defined in Internet Protocol [1] section 3.1\nInternet header format.\", so do that.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c5027c9a896fbe05367fb893a274deca5114bfd0", "tree": "0deedc7c6e8edbd9e0dcc255a2f64bcc8c1ab1da", "parents": [ "4c4d51a7316b164ba08af61aa0c124a88bc60450" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Apr 05 15:54:02 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 05 15:54:02 2007 -0700" }, "message": "[XFRM]: beet: fix IP option encapsulation\n\nBeet mode calculates an incorrect value for the transport header location\nwhen IP options are present, resulting in encapsulation errors.\n\nThe correct location is 4 or 8 bytes before the end of the original IP\nheader, depending on whether the pseudo header is padded.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4c4d51a7316b164ba08af61aa0c124a88bc60450", "tree": "432e2d46513ddb61b0da9da14410b6888c947b70", "parents": [ "60e5c166413f17d5ef00b4c1f398dbd44291309a" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Thu Apr 05 00:07:39 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Apr 05 00:07:39 2007 -0700" }, "message": "[IPSEC]: Reject packets within replay window but outside the bit mask\n\nUp until this point we\u0027ve accepted replay window settings greater than\n32 but our bit mask can only accomodate 32 packets. Thus any packet\nwith a sequence number within the window but outside the bit mask would\nbe accepted.\n\nThis patch causes those packets to be rejected instead.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "60e5c166413f17d5ef00b4c1f398dbd44291309a", "tree": "1aeeb716dbd027b3f29ee2058c3d7c1041b5e3ae", "parents": [ "75559c167bddc1254db5bcff032ad5eed8bd6f4a" ], "author": { "name": "Mitsuru Chinen", "email": "mitch@linux.vnet.ibm.com", "time": "Wed Apr 04 23:54:59 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 04 23:54:59 2007 -0700" }, "message": "[IPv6]: Exclude truncated packets from InHdrErrors statistics\n\nIncoming trancated packets are counted as not only InTruncatedPkts but\nalso InHdrErrors. They should be counted as InTruncatedPkts only.\n\nSigned-off-by: Mitsuru Chinen \u003cmitch@linux.vnet.ibm.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "75559c167bddc1254db5bcff032ad5eed8bd6f4a", "tree": "852cd5b5c86a63a83e5e22d98d44bd83736339b3", "parents": [ "58e949139014a852a83b5ef071136b1f50c86ad1" ], "author": { "name": "Jean Delvare", "email": "jdelvare@suse.de", "time": "Wed Apr 04 23:52:46 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Apr 04 23:52:46 2007 -0700" }, "message": "[APPLETALK]: Fix a remotely triggerable crash\n\nWhen we receive an AppleTalk frame shorter than what its header says,\nwe still attempt to verify its checksum, and trip on the BUG_ON() at\nthe end of function atalk_sum_skb() because of the length mismatch.\n\nThis has security implications because this can be triggered by simply\nsending a specially crafted ethernet frame to a target victim,\neffectively crashing that host. Thus this qualifies, I think, as a\nremote DoS. Here is the frame I used to trigger the crash, in npg\nformat:\n\n\u003cAppletalk Killer\u003e\n{\n# Ethernet header -----\n\n XX XX XX XX XX XX # Destination MAC\n 00 00 00 00 00 00 # Source MAC\n 00 1D # Length\n\n# LLC header -----\n\n AA AA 03\n 08 00 07 80 9B # Appletalk\n\n# Appletalk header -----\n\n 00 1B # Packet length (invalid)\n 00 01 # Fake checksum \n 00 00 00 00 # Destination and source networks\n 00 00 00 00 # Destination and source nodes and ports\n\n# Payload -----\n\n 0C 0D 0E 0F 10 11 12 13\n 14\n}\n\nThe destination MAC address must be set to those of the victim.\n\nThe severity is mitigated by two requirements:\n* The target host must have the appletalk kernel module loaded. I\n suspect this isn\u0027t so frequent.\n* AppleTalk frames are non-IP, thus I guess they can only travel on\n local networks. I am no network expert though, maybe it is possible\n to somehow encapsulate AppleTalk packets over IP.\n\nThe bug has been reported back in June 2004:\n http://bugzilla.kernel.org/show_bug.cgi?id\u003d2979\nBut it wasn\u0027t investigated, and was closed in July 2006 as both\nreporters had vanished meanwhile.\n\nThis code was new in kernel 2.6.0-test5:\n http://git.kernel.org/?p\u003dlinux/kernel/git/tglx/history.git;a\u003dcommitdiff;h\u003d7ab442d7e0a76402c12553ee256f756097cae2d2\nAnd not modified since then, so we can assume that vanilla kernels\n2.6.0-test5 and later, and distribution kernels based thereon, are\naffected.\n\nNote that I still do not know for sure what triggered the bug in the\nreal-world cases. The frame could have been corrupted by the kernel if\nwe have a bug hiding somewhere. But more likely, we are receiving the\nfaulty frame from the network.\n\nSigned-off-by: Jean Delvare \u003cjdelvare@suse.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "418106d6248618bca1add65168a82974c72206db", "tree": "fe8b9484c06814c8d11f4e114db460ebbe613f3c", "parents": [ "5792a2856a63cdc568e08a7d6f9b2413d9217b3e" ], "author": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Wed Apr 04 19:08:21 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Apr 04 21:12:47 2007 -0700" }, "message": "[PATCH] net/sunrpc/svcsock.c: fix a check\n\nThe return value of kernel_recvmsg() should be assigned to \"err\", not\ncompared with the random value of a never initialized \"err\" (and the \"\u003c 0\"\ncheck wrongly always returned false since \u003d\u003d comparisons never have a\nresult \u003c 0).\n\nSpotted by the Coverity checker.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nAcked-by: Neil Brown \u003cneilb@suse.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "927498217c104aab27b81c785ce3a489491a8964", "tree": "931132501440298e6be39c3e218f6016ca9b6558", "parents": [ "e94a40c508dbdce872c79a13b35830c050d71e23" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Tue Apr 03 00:07:30 2007 -0600" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Apr 04 08:51:52 2007 -0700" }, "message": "[PATCH] net: Ignore sysfs network device rename bugs.\n\nThe generic networking code ensures that no two networking devices\nhave the same name, so there is no time except when sysfs has\nimplementation bugs that device_rename when called from\ndev_change_name will fail.\n\nThe current error handling for errors from device_rename in\ndev_change_name is wrong and results in an unusable and unrecoverable\nnetwork device if device_rename is happens to return an error.\n\nThis patch removes the buggy error handling. Which confines the mess\nwhen device_rename hits a problem to sysfs, instead of propagating it\nthe rest of the network stack. Making linux a little more robust.\n\nWithout this patch you can observe what happens when sysfs has a bug\nwhen CONFIG_SYSFS_DEPRECATED is not set and you attempt to rename\na real network device to a name like (broken_parity_status, device,\nmodalias, power, resource2, subsystem_vendor, class, driver, irq,\nmsi_bus, resource, subsystem, uevent, config, enable, local_cpus,\nnuma_node, resource0, subsystem_device, vendor)\n\nGreg has a patch that fixes the sysfs bugs but he doesn\u0027t trust it\nfor a 2.6.21 timeframe. This patch which just ignores errors should\nbe safe and it keeps the system from going completely wacky.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "84565070e442583ec67fb08a5962c80203e491c3", "tree": "b28b0fa66b3feb2f3dddb9db9a9a9c031681a3f5", "parents": [ "c873879c4db31bab414655e191cf56019b48c751" ], "author": { "name": "John Heffner", "email": "jheffner@psc.edu", "time": "Mon Apr 02 13:56:32 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Apr 02 13:56:32 2007 -0700" }, "message": "[TCP]: Do receiver-side SWS avoidance for rcvbuf \u003c MSS.\n\nSigned-off-by: John Heffner \u003cjheffner@psc.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b59e139bbd5c789700aa9cefe7eb6590bc516b86", "tree": "32dfe5facbbf2e4ca83f4254986e05900a7693da", "parents": [ "31ba548f9683c5c5809567549b404404b6017088" ], "author": { "name": "YOSHIFUJI Hideaki", "email": "yoshfuji@linux-ipv6.org", "time": "Fri Mar 30 14:45:35 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Apr 02 13:30:54 2007 -0700" }, "message": "[IPv6]: Fix incorrect length check in rawv6_sendmsg()\n\nIn article \u003c20070329.142644.70222545.davem@davemloft.net\u003e (at Thu, 29 Mar 2007 14:26:44 -0700 (PDT)), David Miller \u003cdavem@davemloft.net\u003e says:\n\n\u003e From: Sridhar Samudrala \u003csri@us.ibm.com\u003e\n\u003e Date: Thu, 29 Mar 2007 14:17:28 -0700\n\u003e\n\u003e \u003e The check for length in rawv6_sendmsg() is incorrect.\n\u003e \u003e As len is an unsigned int, (len \u003c 0) will never be TRUE.\n\u003e \u003e I think checking for IPV6_MAXPLEN(65535) is better.\n\u003e \u003e\n\u003e \u003e Is it possible to send ipv6 jumbo packets using raw\n\u003e \u003e sockets? If so, we can remove this check.\n\u003e\n\u003e I don\u0027t see why such a limitation against jumbo would exist,\n\u003e does anyone else?\n\u003e\n\u003e Thanks for catching this Sridhar. A good compiler should simply\n\u003e fail to compile \"if (x \u003c 0)\" when \u0027x\u0027 is an unsigned type, don\u0027t\n\u003e you think :-)\n\nDave, we use \"int\" for returning value,\nso we should fix this anyway, IMHO;\nwe should not allow len \u003e INT_MAX.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nAcked-by: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "31ba548f9683c5c5809567549b404404b6017088", "tree": "b1362760bfe47476bf487aacde9da2a27971e1af", "parents": [ "83886b6b636173b206f475929e58fac75c6f2446" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Fri Mar 30 13:36:23 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Apr 02 13:30:52 2007 -0700" }, "message": "[NET_SCHED]: cls_basic: fix memory leak in basic_destroy\n\ntp-\u003eroot is not freed on destruction.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "83886b6b636173b206f475929e58fac75c6f2446", "tree": "39db45c6c7cb4f2f3abbcc5e17202531a23ab273", "parents": [ "9a5ee4cc9ef8de5185114237a81f5f395e21d8fd" ], "author": { "name": "Steven Whitehouse", "email": "swhiteho@redhat.com", "time": "Fri Mar 30 13:34:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Mon Apr 02 13:30:51 2007 -0700" }, "message": "[NET]: Change \"not found\" return value for rule lookup\n\nThis changes the \"not found\" error return for the lookup\nfunction to -ESRCH so that it can be distinguished from\nthe case where a rule or route resulting in -ENETUNREACH\nhas been found during the search.\n\nIt fixes a bug where if DECnet was compiled with routing\nsupport, but no routes were added to the routing table,\nit was failing to fall back to endnode routing.\n\nSigned-off-by: Steven Whitehouse \u003cswhiteho@redhat.com\u003e\nSigned-off-by: Patrick Caulfield \u003cpcaulfie@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9415fddd99e12d57640774a3043a809140245c40", "tree": "baafe3ad88c33b853acd81cff3745d45c2a26c2e", "parents": [ "297640e89ea21e314bdda45468e5f78c978dae16", "c01003c20563d1e75ec9828d21743919d2b43977" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Mar 29 13:15:13 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Mar 29 13:15:13 2007 -0700" }, "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\n* master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6:\n [IFB]: Fix crash on input device removal\n [BNX2]: Fix link interrupt problem.\n" }, { "commit": "c01003c20563d1e75ec9828d21743919d2b43977", "tree": "21cae8933e8a4908d8e8c24244a627bf0c997e77", "parents": [ "db8b22550d4b83f0910d27a34d05aa16f7f7159f" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Mar 29 11:46:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 29 11:46:52 2007 -0700" }, "message": "[IFB]: Fix crash on input device removal\n\nThe input_device pointer is not refcounted, which means the device may\ndisappear while packets are queued, causing a crash when ifb passes packets\nwith a stale skb-\u003edev pointer to netif_rx().\n\nFix by storing the interface index instead and do a lookup where neccessary.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nAcked-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cb3fecc2f29056e89658e7eb371e7f9be66cda6d", "tree": "0a524506bae0897fea6b865db88d9c5c7ccaf379", "parents": [ "e6d1fc3d83317678a57db1c1deb2fc0bede73aaf" ], "author": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Thu Mar 29 01:20:25 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Mar 29 08:22:24 2007 -0700" }, "message": "[PATCH] bluetooth hid quirks: mightymouse quirk\n\nI have a bugreport that scrollwheel of bluetooth version of apple\nmightymouse doesn\u0027t work. The USB version of mightymouse works, as there\nis a quirk for handling scrollwheel in hid/usbhid for it.\n\nNow that bluetooth git tree is hooked to generic hid layer, it could easily\nuse the quirks which are already present in generic hid parser, hid-input,\netc.\n\nBelow is a simple patch against bluetooth git tree, which adds quirk\nhandling to current bluetooth hidp code, and sets quirk flags for device\n0x05ac/0x030c, which is the bluetooth version of the apple mightymouse.\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "c203b33d2ee34594f6656c033cddd4f5860eb06c", "tree": "b59fec34142a6d99df85a0d3576bdf7249308e07", "parents": [ "a26b5fce06b92b2f02967d4c845fa628024e5414", "39ebc0276bada8bb70e067cb6d0eb71839c0fb08" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Mar 28 14:00:27 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Mar 28 14:00:27 2007 -0700" }, "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\n* master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6:\n [DCCP] getsockopt: Fix DCCP_SOCKOPT_[SEND,RECV]_CSCOV\n" }, { "commit": "4db43e677ec2dcfb6129d5e557ed4795f9e4a031", "tree": "0592c96d4e5a9a1c39d57fef43fbd66e430121f1", "parents": [ "935c631db827cc3a96df4dcc6fec374b994fdbd1", "a9c87a10db08f53c5220f273d518390cbaeb55c8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Mar 28 13:45:13 2007 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Wed Mar 28 13:45:13 2007 -0700" }, "message": "Merge branch \u0027upstream-linus\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/jgarzik/netdev-2.6\n\n* \u0027upstream-linus\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/jgarzik/netdev-2.6:\n SUN3/3X Lance trivial fix improved\n mv643xx_eth: Fix use of uninitialized port_num field\n forcedeth: fix tx timeout\n forcedeth: fix nic poll\n qla3xxx: bugfix: Jumbo frame handling.\n qla3xxx: bugfix: Dropping interrupt under heavy network load.\n qla3xxx: bugfix: Multi segment sends were getting whacked.\n qla3xxx: bugfix: Add tx control block memset.\n atl1: remove unnecessary crc inversion\n myri10ge: correctly detect when TSO should be used\n [PATCH] WE-22 : prevent information leak on 64 bit\n [PATCH] wext: Add missing ioctls to 64\u003c-\u003e32 conversion\n [PATCH] bcm43xx: Fix machine check on PPC for version 1 PHY\n [PATCH] bcm43xx: fix radio_set_tx_iq\n [PATCH] bcm43xx: Fix code for confusion between PHY revision and PHY version\n" }, { "commit": "39ebc0276bada8bb70e067cb6d0eb71839c0fb08", "tree": "a6afca93101b9142523d6814db12ec09d73e58ef", "parents": [ "53aadcc90931dfa150f76ce9a5f9e8f3e43d57df" ], "author": { "name": "Arnaldo Carvalho de Melo", "email": "acme@ghostprotocols.net", "time": "Wed Mar 28 11:54:32 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 28 11:54:32 2007 -0700" }, "message": "[DCCP] getsockopt: Fix DCCP_SOCKOPT_[SEND,RECV]_CSCOV\n\nWe were only checking if there was enough space to put the int, but\nleft len as specified by the (malicious) user, sigh, fix it by setting\nlen to sizeof(val) and transfering just one int worth of data, the one\nasked for.\n\nAlso check for negative len values.\n\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@ghostprotocols.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a9c87a10db08f53c5220f273d518390cbaeb55c8", "tree": "02c62caea88ffae0c4ad945df0d60996d8e5d2f1", "parents": [ "c14bac628b9fad6fd4dad8fbb9e864c61a8924c9", "c2805fbb8630abb95d94ce7adc3f97976f7e0367" ], "author": { "name": "Jeff Garzik", "email": "jeff@garzik.org", "time": "Wed Mar 28 02:21:18 2007 -0400" }, "committer": { "name": "Jeff Garzik", "email": "jeff@garzik.org", "time": "Wed Mar 28 02:21:18 2007 -0400" }, "message": "Merge branch \u0027upstream-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6 into upstream-fixes\n" }, { "commit": "53aadcc90931dfa150f76ce9a5f9e8f3e43d57df", "tree": "fe2029e1a5bc03250b365bfe544940957ffefc8a", "parents": [ "c38c83cb705a41e30a99545ae2314c00e3b9bf1c" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Mar 27 14:31:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 14:31:52 2007 -0700" }, "message": "[IPV6]: Set IF_READY if the device is up and has carrier\n\nWe still need to set the IF_READY flag in ipv6_add_dev for the case\nwhere all addresses (including the link-local) are deleted and then\nrecreated. In that case the IPv6 device too will be destroyed and\nthen recreated.\n\nIn order to prevent the original problem, we simply ensure that\nthe device is up before setting IF_READY.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c38c83cb705a41e30a99545ae2314c00e3b9bf1c", "tree": "1d91f9303661f75c2104dd6db1d78f55445fc22c", "parents": [ "9b2f7bcf0efea98666da56073448647e2b373b67" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Mar 27 14:04:24 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 27 14:04:24 2007 -0700" }, "message": "[NET_SCHED]: sch_htb/sch_hfsc: fix oops in qlen_notify\n\nDuring both HTB and HFSC class deletion the class is removed from the\nclass hash before calling qdisc_tree_decrease_qlen. This makes the\n-\u003eget operation in qdisc_tree_decrease_qlen fail, so it passes a NULL\npointer to -\u003eqlen_notify, causing an oops.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c2805fbb8630abb95d94ce7adc3f97976f7e0367", "tree": "ca94be7f103d430d38ef6543db597e90f3a63999", "parents": [ "ed4bb1063171b2f44a40b0a9c400dedb0590dce6" ], "author": { "name": "Jean Tourrilhes", "email": "jt@hpl.hp.com", "time": "Fri Mar 23 00:31:16 2007 +0000" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Tue Mar 27 14:10:26 2007 -0400" }, "message": "[PATCH] WE-22 : prevent information leak on 64 bit\n\n \tJohannes Berg discovered that kernel space was leaking to\nuserspace on 64 bit platform. He made a first patch to fix that. This\nis an improved version of his patch.\n\nSigned-off-by: Jean Tourrilhes \u003cjt@hpl.hp.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "9b2f7bcf0efea98666da56073448647e2b373b67", "tree": "f2e4719d070aab492236d9878a7fda70e9b84bf7", "parents": [ "703071b5b93d88d5acb0edd5b9dd86c69ad970f2" ], "author": { "name": "Robert P. J. Day", "email": "rpjday@mindspring.com", "time": "Mon Mar 26 16:20:34 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 16:20:34 2007 -0700" }, "message": "[NET]: Remove dead net/sched/Makefile entry for sch_hpfq.o.\n\nRemove the worthless net/sched/Makefile entry for the non-existent\nsource file sch_hpfq.c.\n\nSigned-off-by: Robert P. J. Day \u003crpjday@mindspring.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d562f1f8a92035d5d4681c178fccb991ce57f33a", "tree": "0d0f8b635f3a5ab33c72b83d559f2e82b39e95ee", "parents": [ "79f4f6428f6ceb9af57330092271bda028c23a96" ], "author": { "name": "Robert Olsson", "email": "robert.olsson@its.uu.se", "time": "Mon Mar 26 14:22:22 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 14:22:22 2007 -0700" }, "message": "[IPV4] fib_trie: Document locking.\n\nPaul E. McKenney writes:\n\n\u003e Those of use who dive into networking only occasionally would much\n\u003e appreciate this. ;-)\n\nNo problem here... \n\nAcked-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: Paul E. McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e (but trivial)\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "79f4f6428f6ceb9af57330092271bda028c23a96", "tree": "e73a452517b3e6f8cc5c583a3e0174b039ccc5a2", "parents": [ "165de5b7f2719c1984956504128545839762d635" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Mon Mar 26 14:09:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 26 14:09:52 2007 -0700" }, "message": "[NET]: Correct accept(2) recovery after sock_attach_fd()\n\n* d_alloc() in sock_attach_fd() fails leaving -\u003ef_dentry of new file NULL\n* bail out to out_fd label, doing fput()/__fput() on new file\n* but __fput() assumes valid -\u003ef_dentry and dereferences it\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "035832a2806408ff209a0cb94bd64ea7dcf4d222", "tree": "e8c545d1689dc655690d981d4be113c3ae26b8bc", "parents": [ "d3fa76ee6b4a8dd0efda4e78e96f5b19533b3dea" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Mar 24 22:13:25 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:12 2007 -0700" }, "message": "[NET_SCHED]: Fix ingress locking\n\nIngress queueing uses a seperate lock for serializing enqueue operations,\nbut fails to properly protect itself against concurrent changes to the\nqdisc tree. Use queue_lock for now since the real fix it quite intrusive.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d3fa76ee6b4a8dd0efda4e78e96f5b19533b3dea", "tree": "f960e24f323770fd3f26b0b14107cf3b0c0c0024", "parents": [ "c93a882ebe673b5e6da0a70fd433f7517e032d23" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Sat Mar 24 22:13:06 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:11 2007 -0700" }, "message": "[NET_SCHED]: cls_basic: fix NULL pointer dereference\n\ncls_basic doesn\u0027t allocate tp-\u003eroot before it is linked into the\nactive classifier list, resulting in a NULL pointer dereference\nwhen packets hit the classifier before its -\u003echange function is\ncalled.\n\nReported by Chris Madden \u003cchris@reflexsecurity.com\u003e\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c93a882ebe673b5e6da0a70fd433f7517e032d23", "tree": "94a18636932628ce0b0cbf8e17e93a0d5a6b82f9", "parents": [ "20bd7dd4cabfd0d6b6b70b99e88df901480a9841" ], "author": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Sat Mar 24 21:01:31 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:10 2007 -0700" }, "message": "[DCCP]: make dccp_write_xmit_timer() static again\n\ndccp_write_xmit_timer() needlessly became global.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f11e6659ce9058928d73ff440f9b40a818d628ab", "tree": "00b7b33eec4c8e5ade0be1d7a6fc8a8f74b383da", "parents": [ "a979101106f549f4ed80d6dcbc35077be34d4346" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sat Mar 24 20:36:25 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:05 2007 -0700" }, "message": "[IPV6]: Fix routing round-robin locking.\n\nAs per RFC2461, section 6.3.6, item #2, when no routers on the\nmatching list are known to be reachable or probably reachable we\ndo round robin on those available routes so that we make sure\nto probe as many of them as possible to detect when one becomes\nreachable faster.\n\nEach routing table has a rwlock protecting the tree and the linked\nlist of routes at each leaf. The round robin code executes during\nlookup and thus with the rwlock taken as a reader. A small local\nspinlock tries to provide protection but this does not work at all\nfor two reasons:\n\n1) The round-robin list manipulation, as coded, goes like this (with\n read lock held):\n\n\twalk routes finding head and tail\n\n\tspin_lock();\n\trotate list using head and tail\n\tspin_unlock();\n\n While one thread is rotating the list, another thread can\n end up with stale values of head and tail and then proceed\n to corrupt the list when it gets the lock. This ends up causing\n the OOPS in fib6_add() later onthat many people have been hitting.\n\n2) All the other code paths that run with the rwlock held as\n a reader do not expect the list to change on them, they\n expect it to remain completely fixed while they hold the\n lock in that way.\n\nSo, simply stated, it is impossible to implement this correctly using\na manipulation of the list without violating the rwlock locking\nsemantics.\n\nReimplement using a per-fib6_node round-robin pointer. This way we\ndon\u0027t need to manipulate the list at all, and since the round-robin\npointer can only ever point to real existing entries we don\u0027t need\nto perform any locking on the changing of the round-robin pointer\nitself. We only need to reset the round-robin pointer to NULL when\nthe entry it is pointing to is removed.\n\nThe idea is from Thomas Graf and it is very similar to how this\nwas implemented before the advanced router selection code when in.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a979101106f549f4ed80d6dcbc35077be34d4346", "tree": "1a8e9cf8cc6ccb6501233099c89701f2ccb0b36f", "parents": [ "a0ee18b9b7d3847976c6fb315c06a34fb296de0e" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Sat Mar 24 20:33:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:04 2007 -0700" }, "message": "[DECNet] fib: Fix out of bound access of dn_fib_props[]\n\nFixes a typo which caused fib_props[] to have the wrong size\nand makes sure the value used to index the array which is\nprovided by userspace via netlink is checked to avoid out of\nbound access.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a0ee18b9b7d3847976c6fb315c06a34fb296de0e", "tree": "5ebef9a68b3aba01c0d8b3285429ae47bb287c9a", "parents": [ "954b2e7f4c37cbcdcf4ca7ac47524f3f6bf30119" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Sat Mar 24 20:32:54 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:03 2007 -0700" }, "message": "[IPv4] fib: Fix out of bound access of fib_props[]\n\nFixes a typo which caused fib_props[] to have the wrong size\nand makes sure the value used to index the array which is\nprovided by userspace via netlink is checked to avoid out of\nbound access.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "954b2e7f4c37cbcdcf4ca7ac47524f3f6bf30119", "tree": "05ff48b5ec43cbf1b99a839c6d8de5f84e0160fc", "parents": [ "ecbb416939da77c0d107409976499724baddce7b" ], "author": { "name": "Ralf Baechle", "email": "ralf@linux-mips.org", "time": "Sat Mar 24 12:54:26 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:02 2007 -0700" }, "message": "[NET] AX.25 Kconfig and docs updates and fixes\n\n o The AX.25 Howto is unmaintained since several years. I\u0027ve replaced it\n with a wiki at http://www.linux-ax25.org which provides more uptodate\n information.\n o Change default for AX25_DAMA_SLAVE to Y. AX25_DAMA_SLAVE only compiles\n in support for DAMA but doesn\u0027t activate it. I hope this gets Linux\n distributions to ship their AX.25 kernels with AX25_DAMA_SLAVE enabled.\n The price for this would be very small.\n o Delete historic changelog from comments, that\u0027s what SCM systems are\n meant to do.\n o ---help--- in Kconfig looks so yellingly eye insulting. Use just help.\n o Rewrite the commented out piece of old Linux 2.4 configuration language\n to Kconfig for consistency.\n o Fixup dependencies.\n\nSigned-off-by: Ralf Baechle \u003cralf@linux-mips.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ecbb416939da77c0d107409976499724baddce7b", "tree": "313f786f9f4d5fec3f016c292dea1705924fa9b6", "parents": [ "e1701c68c1d1aeb3213d7016593ea9a1d4309417" ], "author": { "name": "Alexey Kuznetsov", "email": "kuznet@ms2.inr.ac.ru", "time": "Sat Mar 24 12:52:16 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:01 2007 -0700" }, "message": "[NET]: Fix neighbour destructor handling.\n\n-\u003eneigh_destructor() is killed (not used), replaced with\n-\u003eneigh_cleanup(), which is called when neighbor entry goes to dead\nstate. At this point everything is still valid: neigh-\u003edev,\nneigh-\u003eparms etc.\n\nThe device should guarantee that dead neighbor entries (neigh-\u003edead !\u003d\n0) do not get private part initialized, otherwise nobody will cleanup\nit.\n\nI think this is enough for ipoib which is the only user of this thing.\nInitialization private part of neighbor entries happens in ipib\nstart_xmit routine, which is not reached when device is down. But it\nwould be better to add explicit test for neigh-\u003edead in any case.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e1701c68c1d1aeb3213d7016593ea9a1d4309417", "tree": "96dc2e47b36589636b15602dcdcfd2ea426260b7", "parents": [ "5f85813c33ddbf6d11ccfdbcc01f176e24a76bd2" ], "author": { "name": "Thomas Graf", "email": "tgraf@suug.ch", "time": "Sat Mar 24 12:46:02 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Sun Mar 25 18:48:00 2007 -0700" }, "message": "[NET]: Fix fib_rules compatibility breakage\n\nBased upon a patch from Patrick McHardy.\n\nThe fib_rules netlink attribute policy introduced in 2.6.19 broke\nuserspace compatibilty. When specifying a rule with \"from all\"\nor \"to all\", iproute adds a zero byte long netlink attribute,\nbut the policy requires all addresses to have a size equal to\nsizeof(struct in_addr)/sizeof(struct in6_addr), resulting in a\nvalidation error.\n\nCheck attribute length of FRA_SRC/FRA_DST in the generic framework\nby letting the family specific rules implementation provide the\nlength of an address. Report an error if address length is non\nzero but no address attribute is provided. Fix actual bug by\nchecking address length for non-zero instead of relying on\navailability of attribute.\n\nSigned-off-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0fa7d868ca456ddf4f41b700fd9dee186f8f4e12", "tree": "1ed1f74195181e440775c80ff2a97b47c9282d9b", "parents": [ "f5ae29e284b328e0976789d5c199bbbe80e4b005" ], "author": { "name": "Patrick Ringl", "email": "patrick_@freenet.de", "time": "Sat Mar 24 23:56:58 2007 +0100" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Sat Mar 24 16:51:53 2007 -0700" }, "message": "[PATCH] fix typos in net/ieee80211/Kconfig\n\nThis is just a QA / cosmetic fix ..\n\n[ \"a modules\" \u003d\u003e \"a module\" ]\n\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "848c29fd648e78fa87d0e399223826ce5dfc1b7a", "tree": "e76dac40d1d318f98bfdfe604ae43a29dec85ff9", "parents": [ "ca8fbb859c42c9a402c5c19fd0588d89ae4988ba" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Mar 22 12:30:29 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 22 12:30:29 2007 -0700" }, "message": "[NETFILTER]: nat: avoid rerouting packets if only XFRM policy key changed\n\nCurrently NAT not only reroutes packets in the OUTPUT chain when the\nrouting key changed, but also if only the non-routing part of the\nIPsec policy key changed. This breaks ping -I since it doesn\u0027t use\nSO_BINDTODEVICE but IP_PKTINFO cmsg to specify the output device, and\nthis information is lost.\n\nOnly do full rerouting if the routing key changed, and just do a new\npolicy lookup with the old route if only the ports changed.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ca8fbb859c42c9a402c5c19fd0588d89ae4988ba", "tree": "d9fdb8f6e711f0a6c61ff498125a39d6fc160632", "parents": [ "b6f99a211957910a07437f46ce54dcfb1755cf84" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Mar 22 12:29:57 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 22 12:29:57 2007 -0700" }, "message": "[NETFILTER]: nf_conntrack_netlink: add missing dependency on NF_NAT\n\nNF_CT_NETLINK\u003dy, NF_NAT\u003dm results in:\n\n LD .tmp_vmlinux1\n net/built-in.o: dans la fonction « nfnetlink_parse_nat_proto »:\n nf_conntrack_netlink.c:(.text+0x28db9): référence indéfinie vers « nf_nat_proto_find_get »\n nf_conntrack_netlink.c:(.text+0x28dd6): référence indéfinie vers « nf_nat_proto_put »\n net/built-in.o: dans la fonction « ctnetlink_new_conntrack »:\n nf_conntrack_netlink.c:(.text+0x29959): référence indéfinie vers « nf_nat_setup_info »\n nf_conntrack_netlink.c:(.text+0x29b35): référence indéfinie vers « nf_nat_setup_info »\n nf_conntrack_netlink.c:(.text+0x29cf7): référence indéfinie vers « nf_nat_setup_info »\n nf_conntrack_netlink.c:(.text+0x29de2): référence indéfinie vers « nf_nat_setup_info »\n make: *** [.tmp_vmlinux1] Erreur 1 \n\nReported by Kevin Baradon \u003ckevin.baradon@gmail.com\u003e\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b6f99a211957910a07437f46ce54dcfb1755cf84", "tree": "0ae2ffc1982d445318363fb94d656b9a483c0c7a", "parents": [ "289f42492c0958871b6045050474c752ec99704f" ], "author": { "name": "Dave Jones", "email": "davej@redhat.com", "time": "Thu Mar 22 12:27:49 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 22 12:27:49 2007 -0700" }, "message": "[NET]: fix up misplaced inlines.\n\nTurning up the warnings on gcc makes it emit warnings\nabout the placement of \u0027inline\u0027 in function declarations.\nHere\u0027s everything that was under net/\n\nSigned-off-by: Dave Jones \u003cdavej@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "289f42492c0958871b6045050474c752ec99704f", "tree": "0bde956ccdf95cab650c6155071baac34a54a958", "parents": [ "b19cbe2a1695c09c74f83646c4b82b51123b3690" ], "author": { "name": "Vlad Yasevich", "email": "vladislav.yasevich@hp.com", "time": "Thu Mar 22 12:26:25 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 22 12:26:25 2007 -0700" }, "message": "[SCTP]: Correctly reset ssthresh when restarting association\n\nReset ssthresh to the correct value (peer\u0027s a_rwnd) when restarting\nassociation.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b19cbe2a1695c09c74f83646c4b82b51123b3690", "tree": "138761d3360b981292569e318757e53502f8887b", "parents": [ "ec25615b9ddd5c584b4066652840581fdb6c5e7a" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Mar 22 12:25:20 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 22 12:25:20 2007 -0700" }, "message": "[BRIDGE]: Fix fdb RCU race\n\nbr_fdb_get use atomic_inc to increase the refcount of an element found\non a RCU protected list, which can lead to the following race:\n\nCPU0\t\t\t\t\tCPU1\n\n\t\t\t\t\tbr_fdb_get: rcu_read_lock\n\t\t\t\t\t__br_fdb_get: find element\nfdb_delete: hlist_del_rcu\n\t br_fdb_put\nbr_fdb_put: atomic_dec_and_test\n\t call_rcu(fdb_rcu_free)\tbr_fdb_get: atomic_inc\n\t\t\t\t\t\t rcu_read_unlock\nfdb_rcu_free: kmem_cache_free\n\nUse atomic_inc_not_zero instead.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ec25615b9ddd5c584b4066652840581fdb6c5e7a", "tree": "e84b4eff19ef3919232bb54d53b6e1ffd41d9cdc", "parents": [ "961995582e3752e983dc3906a57546a188007440" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Thu Mar 22 12:24:38 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 22 12:24:38 2007 -0700" }, "message": "[NET]: Fix fib_rules dump race\n\nfib_rules_dump needs to use list_for_each_entry_rcu to protect against\nconcurrent changes to the rules list.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "961995582e3752e983dc3906a57546a188007440", "tree": "af315f93ea010e43e7925641a8d0c92f84f6c8f1", "parents": [ "e4ce837de96d58509f5f815ab37a46889788e701" ], "author": { "name": "Joy Latten", "email": "latten@austin.ibm.com", "time": "Mon Mar 19 18:47:26 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Mar 20 00:09:47 2007 -0700" }, "message": "[XFRM]: ipsecv6 needs a space when printing audit record.\n\nThis patch adds a space between printing of the src and dst ipv6 addresses.\nOtherwise, audit or other test tools may fail to process the audit\nrecord properly because they cannot find the dst address.\n\nSigned-off-by: Joy Latten \u003clatten@austin.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e4ce837de96d58509f5f815ab37a46889788e701", "tree": "573d9e2b11fb0b15e93089a2c32c42e3d162f718", "parents": [ "749bf9215ed1a8b6edb4bb03693c2b62c6b9c2a4" ], "author": { "name": "Adrian Bunk", "email": "bunk@stusta.de", "time": "Mon Mar 19 17:04:56 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Mar 20 00:09:46 2007 -0700" }, "message": "[X25] x25_forward_call(): fix NULL dereferences\n\nThis patch fixes two NULL dereferences spotted by the Coverity checker.\n\nSigned-off-by: Adrian Bunk \u003cbunk@stusta.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "749bf9215ed1a8b6edb4bb03693c2b62c6b9c2a4", "tree": "d5656c441181fddef41392a4aa07f54e56487312", "parents": [ "fb78525ae1b75bfac1da600ceb008aef4d293649" ], "author": { "name": "Vlad Yasevich", "email": "vladislav.yasevich@hp.com", "time": "Mon Mar 19 17:02:30 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Mar 20 00:09:45 2007 -0700" }, "message": "[SCTP]: Reset some transport and association variables on restart\n\nIf the association has been restarted, we need to reset the\ntransport congestion variables as well as accumulated error\ncounts and CACC variables. If we do not, the association\nwill use the wrong values and may terminate prematurely.\n\nThis was found with a scenario where the peer restarted\nthe association when lksctp was in the last HB timeout for\nits association. The restart happened, but the error counts\nhave not been reset and when the timeout occurred, a newly\nrestarted association was terminated due to excessive\nretransmits.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fb78525ae1b75bfac1da600ceb008aef4d293649", "tree": "bb976df718057e0cc41f22118e537da7070de47e", "parents": [ "0b58a811461ccf3cf848aba4cc192538fd3b0516" ], "author": { "name": "Vlad Yasevich", "email": "vladislav.yasevich@hp.com", "time": "Mon Mar 19 17:02:03 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Mar 20 00:09:44 2007 -0700" }, "message": "[SCTP]: Increment error counters on user requested HBs.\n\n2960bis states (Section 8.3):\n\n D) Request an on-demand HEARTBEAT on a specific destination transport\n address of a given association.\n\n The endpoint should increment the respective error counter of the\n destination transport address each time a HEARTBEAT is sent to that\n address and not acknowledged within one RTO.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0b58a811461ccf3cf848aba4cc192538fd3b0516", "tree": "e8ada90819aabdcc2041a5637c7e6f44446cc36b", "parents": [ "c577c2b99387b5ff8607d42d6eaff9ec024d4773" ], "author": { "name": "Vlad Yasevich", "email": "vladislav.yasevich@hp.com", "time": "Mon Mar 19 17:01:17 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Mar 20 00:09:43 2007 -0700" }, "message": "[SCTP]: Clean up stale data during association restart\n\nDuring association restart we may have stale data sitting\non the ULP queue waiting for ordering or reassembly. This\ndata may cause severe problems if not cleaned up. In particular\nstale data pending ordering may cause problems with receive\nwindow exhaustion if our peer has decided to restart the\nassociation.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nSigned-off-by: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c577c2b99387b5ff8607d42d6eaff9ec024d4773", "tree": "1f4e56d1209b1140060978183e7c03655477d149", "parents": [ "7bb1bbe615de25d955b974cb47d40fa198154bb9" ], "author": { "name": "Samuel Ortiz", "email": "samuel@sortiz.org", "time": "Fri Mar 16 20:31:03 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Mar 20 00:09:42 2007 -0700" }, "message": "[IrDA]: Calling ppp_unregister_channel() from process context\n\nWe need to call ppp_unregister_channel() when IrNET disconnects, and this\nmust be done from a process context.\n\nBug reported and patch tested by Guennadi Liakhovetski.\n\nSigned-off-by: Samuel Ortiz \u003csamuel@sortiz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7bb1bbe615de25d955b974cb47d40fa198154bb9", "tree": "04b6963a9f0a186022b79e3a788133f0962c7668", "parents": [ "2e360d81ea1fe1a7701e05cdefd3a91c11c3b13f" ], "author": { "name": "G. Liakhovetski", "email": "gl@dsa-ac.de", "time": "Fri Mar 16 20:30:03 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Tue Mar 20 00:09:41 2007 -0700" }, "message": "[IrDA]: irttp_dup spin_lock initialisation\n\nWithout this initialization one gets\n\nkernel BUG at kernel/rtmutex_common.h:80!\n\nThis patch should also be included in the -stable kernel.\n\nSigned-off-by: G. Liakhovetski \u003cgl@dsa-ac.de\u003e\nSigned-off-by: Samuel Ortiz \u003csamuel@sortiz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d35690beda1429544d46c8eb34b2e3a8c37ab299", "tree": "a9f87fa226d8f687c0072409ccb3c7ff0d60698d", "parents": [ "53cdcc04c1e85d4e423b2822b66149b6f2e52c2c" ], "author": { "name": "Masayuki Nakagawa", "email": "nakagawa.msy@ncos.nec.co.jp", "time": "Fri Mar 16 16:14:03 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 16 16:14:03 2007 -0700" }, "message": "[IPV6]: ipv6_fl_socklist is inadvertently shared.\n\nThe ipv6_fl_socklist from listening socket is inadvertently shared\nwith new socket created for connection. This leads to a variety of\ninteresting, but fatal, bugs. For example, removing one of the\nsockets may lead to the other socket\u0027s encountering a page fault\nwhen the now freed list is referenced.\n\nThe fix is to not share the flow label list with the new socket.\n\nSigned-off-by: Masayuki Nakagawa \u003cnakagawa.msy@ncos.nec.co.jp\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "53cdcc04c1e85d4e423b2822b66149b6f2e52c2c", "tree": "7a4072113c88b00f28e75dbcee3e8e803c44d79b", "parents": [ "3e6b3b2e34ac2c72fa05b5e4b20bd88d64c298dc" ], "author": { "name": "John Heffner", "email": "jheffner@psc.edu", "time": "Fri Mar 16 15:04:03 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 16 15:04:03 2007 -0700" }, "message": "[TCP]: Fix tcp_mem[] initialization.\n\nChange tcp_mem initialization function. The fraction of total memory\nis now a continuous function of memory size, and independent of page\nsize.\n\nSigned-off-by: John Heffner \u003cjheffner@psc.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3e6b3b2e34ac2c72fa05b5e4b20bd88d64c298dc", "tree": "316083929e53cbb2904729251384903bf0c8ddf1", "parents": [ "d5cc4a73a5b5c8374b810d5371e9e7ed05c1e02c" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@sw.ru", "time": "Fri Mar 16 15:00:46 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 16 15:00:46 2007 -0700" }, "message": "[NET]: Copy mac_len in skb_clone() as well\n\nANK says: \"It is rarely used, that\u0027s wy it was not noticed.\nBut in the places, where it is used, it should be disaster.\"\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@sw.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d5cc4a73a5b5c8374b810d5371e9e7ed05c1e02c", "tree": "9fc98bedcecf6f910ec0c76f28e15fbda1ff6f1e", "parents": [ "db98e0b434a6265c451ffe94ec0a29b8d0aaf587" ], "author": { "name": "Robert Olsson", "email": "robert.olsson@its.uu.se", "time": "Fri Mar 16 15:00:07 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 16 15:00:07 2007 -0700" }, "message": "[IPV4]: Do not disable preemption in trie_leaf_remove().\n\nHello, Just discussed this Patrick...\n\nWe have two users of trie_leaf_remove, fn_trie_flush and fn_trie_delete\nboth are holding RTNL. So there shouldn\u0027t be need for this preempt stuff.\nThis is assumed to a leftover from an older RCU-take.\n\n\u003e Mhh .. I think I just remembered something - me incorrectly suggesting\n\u003e to add it there while we were talking about this at OLS :) IIRC the\n\u003e idea was to make sure tnode_free (which at that time didn\u0027t use\n\u003e call_rcu) wouldn\u0027t free memory while still in use in a rcu read-side\n\u003e critical section. It should have been synchronize_rcu of course,\n\u003e but with tnode_free using call_rcu it seems to be completely\n\u003e unnecessary. So I guess we can simply remove it.\n\nSigned-off-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "75e252d981c0e80c14ce90df246e9b1300474c4f", "tree": "668f2df92fb85e17574a1fbdf34062539eff69d7", "parents": [ "ce0ecd594d78710422599918a608e96dd1ee6024" ], "author": { "name": "Joy Latten", "email": "latten@austin.ibm.com", "time": "Mon Mar 12 17:14:07 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 12 17:14:07 2007 -0700" }, "message": "[XFRM]: Fix missing protocol comparison of larval SAs.\n\nI noticed that in xfrm_state_add we look for the larval SA in a few\nplaces without checking for protocol match. So when using both \nAH and ESP, whichever one gets added first, deletes the larval SA. \nIt seems AH always gets added first and ESP is always the larval \nSA\u0027s protocol since the xfrm-\u003etmpl has it first. Thus causing the\nadditional km_query()\n\nAdding the check eliminates accidental double SA creation. \n\nSigned-off-by: Joy Latten \u003clatten@austin.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ce0ecd594d78710422599918a608e96dd1ee6024", "tree": "c4825b3b48ee20c7bba7ba3baeeaf15bb39ce1b7", "parents": [ "08882669e06099eb3e6ac407f552743aeaaec73f" ], "author": { "name": "Robert P. J. Day", "email": "rpjday@mindspring.com", "time": "Mon Mar 12 17:06:27 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 12 17:06:27 2007 -0700" }, "message": "[WANROUTER]: Delete superfluous source file \"net/wanrouter/af_wanpipe.c\".\n\nDelete the apparently superfluous source file\nnet/wanrouter/af_wanpipe.c.\n\nSigned-off-by: Robert P. J. Day \u003crpjday@mindspring.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "08882669e06099eb3e6ac407f552743aeaaec73f", "tree": "1f52e97265a74bd3d8a96e92d9d415c48bfe6570", "parents": [ "2536b94a2d2e37dd6c14171d6251f63bbda47293" ], "author": { "name": "Geert Uytterhoeven", "email": "Geert.Uytterhoeven@sonycom.com", "time": "Mon Mar 12 17:02:37 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 12 17:02:37 2007 -0700" }, "message": "[IPV4]: Fix warning in ip_mc_rejoin_group.\n\nKill warning about unused variable `in_dev\u0027 when CONFIG_IP_MULTICAST\nis not set.\n\nSigned-off-by: Geert Uytterhoeven \u003cGeert.Uytterhoeven@sonycom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2536b94a2d2e37dd6c14171d6251f63bbda47293", "tree": "963a1b750e0844bbd90b42b7e55c728b3abb3629", "parents": [ "6cee77dbf29e3c4c2cf2ce16621759accc76891e" ], "author": { "name": "Ralf Baechle", "email": "ralf@linux-mips.org", "time": "Mon Mar 12 15:53:33 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 12 15:53:33 2007 -0700" }, "message": "[ROSE]: Socket locking is a great invention.\n\nEspecially if you actually try to do it ;-)\n\nSigned-off-by: Ralf Baechle \u003cralf@linux-mips.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6cee77dbf29e3c4c2cf2ce16621759accc76891e", "tree": "6ebfad8b6c14e70627365c61c1ff2bc6634dc70e", "parents": [ "38c8947c1b46e5985df36435a6f21ef6a7e8a4b8" ], "author": { "name": "Ralf Baechle", "email": "ralf@linux-mips.org", "time": "Mon Mar 12 15:52:52 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 12 15:52:52 2007 -0700" }, "message": "[ROSE]: Remove ourselves from waitqueue when receiving a signal\n\nSigned-off-by: Ralf Baechle \u003cralf@linux-mips.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "38c8947c1b46e5985df36435a6f21ef6a7e8a4b8", "tree": "da59e988d09f8b16137e16cf7b033ae6ce8e7730", "parents": [ "be521466feb3bb1cd89de82a2b1d080e9ebd3cb6" ], "author": { "name": "Paul Moore", "email": "paul.moore@hp.com", "time": "Mon Mar 12 14:38:02 2007 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 12 14:38:02 2007 -0700" }, "message": "[NetLabel]: parse the CIPSO ranged tag on incoming packets\n\nCommit 484b366932be0b73a22c74a82748ca10a721643e added support for the CIPSO\nranged categories tag. However, it appears that I made a mistake when rebasing\nthen patch to the latest upstream sources for submission and dropped the part\nof the patch that actually parses the tag on incoming packets. This patch\nfixes this mistake by adding the required function call to the\ncipso_v4_skbuff_getattr() function.\n\nI\u0027ve run this patch over the weekend and have not noticed any problems.\n\nSigned-off-by: Paul Moore \u003cpaul.moore@hp.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d2b02ed9487ed25832d19534575052e43f8e0c4f", "tree": "292944e3306f4209dde7ffc18e36fc3d6e3fd8d7", "parents": [ "dfee0a725bb027b749ffdd318eb48b91d564b266" ], "author": { "name": "Chris Wright", "email": "chrisw@sous-sol.org", "time": "Fri Mar 09 16:19:17 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 09 16:19:17 2007 -0800" }, "message": "[IPV6] fix ipv6_getsockopt_sticky copy_to_user leak\n\nUser supplied len \u003c 0 can cause leak of kernel memory.\nUse unsigned compare instead.\n\nSigned-off-by: Chris Wright \u003cchrisw@sous-sol.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dfee0a725bb027b749ffdd318eb48b91d564b266", "tree": "cdb3571b66fec9105ece2e22b27575a2cf2cbfb5", "parents": [ "aabb601b0f08b909b650f1a7bfa1e8d9b5a8d999" ], "author": { "name": "Olaf Kirch", "email": "olaf.kirch@oracle.com", "time": "Fri Mar 09 13:55:38 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 09 13:55:38 2007 -0800" }, "message": "[IPV6]: Fix for ipv6_setsockopt NULL dereference\n\nI came across this bug in http://bugzilla.kernel.org/show_bug.cgi?id\u003d8155\n\nSigned-off-by: Olaf Kirch \u003colaf.kirch@oracle.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "aabb601b0f08b909b650f1a7bfa1e8d9b5a8d999", "tree": "c3060d0005f6b035b43fe4e5855a1d514b43e589", "parents": [ "c4e38f41e34ad853651d66227aae23e48457dce0" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Fri Mar 09 13:47:58 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 09 13:47:58 2007 -0800" }, "message": "[DCCP]: Initialise write_xmit_timer also on passive sockets\n\nThe TX CCID needs the write_xmit_timer for delaying packet sends. Previously\nthis timer was only activated on active (connecting) sockets.\n\nThis patch initialises the write_xmit_timer in sync with the other timers, i.e.\nthe timer will be ready on any socket. This is used by applications with a\nlistening socket which start to stream after receiving an initiation by the\nclient. The write_xmit_timer is stopped when the application closes, as before.\n\nWas tested to work and to remove the timer bug reported on dccp@vger.\n\nAlso moved timer initialisation into timer.c (static). \n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nAcked-by: Ian McDonald \u003cian.mcdonald@jandi.co.nz\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c4e38f41e34ad853651d66227aae23e48457dce0", "tree": "1bbae8ba06b94474d09cf1834d8e1fabbf62162f", "parents": [ "30fbc9f77c5a77f5f7f053d29eb92e41f6043406" ], "author": { "name": "Evgeniy Polyakov", "email": "johnpol@2ka.mipt.ru", "time": "Fri Mar 09 13:43:24 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 09 13:43:24 2007 -0800" }, "message": "[IPV4]: Fix rtm_to_ifaddr() error handling.\n\nReturn negative error value (embedded in the pointer) instead of\nreturning NULL.\n\nSigned-off-by: Evgeniy Polyakov \u003cjohnpol@2ka.mipt.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e2eb8d452827b8d1f73db384cd7c6482eac29478", "tree": "f54eb5b8fee852dc1e670cd3c10efe751f4e4434", "parents": [ "ca4266359d0c1199af088447f209ab5bcc32a989" ], "author": { "name": "Jarek Poplawski", "email": "jarkao2@o2.pl", "time": "Thu Mar 08 14:43:41 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 08 14:43:41 2007 -0800" }, "message": "[SCTP] ipv6: inconsistent lock state ipv6_add_addr/sctp_v6_copy_addrlist\n\nlockdep found that dev-\u003elock taken from softirq in ipv6_add_addr\nis also taken in sctp_v6_copy_addrlist with softirqs enabled, so\nlockup is possible.\n\nNoticed-by: Simon Arlott \u003csimon@arlott.org\u003e\nSigned-off-by: Jarek Poplawski \u003cjarkao2@o2.pl\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b40df5743ee8aed8674edbbb77b8fd3c8c7a747f", "tree": "ea10376ffa9a1a26e91cfca075761828c9b54623", "parents": [ "47c51dff4af25341c575e5089dbb92d61ac69cdf" ], "author": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Wed Mar 07 20:41:18 2007 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@woody.linux-foundation.org", "time": "Thu Mar 08 07:38:21 2007 -0800" }, "message": "[PATCH] bluetooth: fix socket locking in hci_sock_dev_event()\n\n[Bluetooth] Fix socket locking in hci_sock_dev_event()\n\nhci_sock_dev_event() uses bh_lock_sock() to lock the socket lock.\nThis is not deadlock-safe against locking of the same socket lock in\nl2cap_connect_cfm() from softirq context. In addition to that,\nhci_sock_dev_event() doesn\u0027t seem to be called from softirq context,\nso it is safe to use lock_sock()/release_sock() instead.\n\nThe lockdep warning can be triggered on my T42p simply by switching\nthe Bluetooth off by the keyboard button.\n\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n [ INFO: inconsistent lock state ]\n 2.6.21-rc2 #4\n ---------------------------------\n inconsistent {in-softirq-W} -\u003e {softirq-on-W} usage.\n khubd/156 [HC0[0]:SC0[0]:HE1:SE1] takes:\n (slock-AF_BLUETOOTH){-+..}, at: [\u003ce0ca5520\u003e] hci_sock_dev_event+0xa8/0xc5 [bluetooth]\n {in-softirq-W} state was registered at:\n [\u003cc012d1db\u003e] mark_lock+0x59/0x414\n [\u003ce0cef688\u003e] l2cap_connect_cfm+0x4e/0x11f [l2cap]\n [\u003cc012dfd7\u003e] __lock_acquire+0x3e5/0xb99\n [\u003ce0cef688\u003e] l2cap_connect_cfm+0x4e/0x11f [l2cap]\n [\u003cc012e7f2\u003e] lock_acquire+0x67/0x81\n [\u003ce0cef688\u003e] l2cap_connect_cfm+0x4e/0x11f [l2cap]\n [\u003cc036ee72\u003e] _spin_lock+0x29/0x34\n [\u003ce0cef688\u003e] l2cap_connect_cfm+0x4e/0x11f [l2cap]\n [\u003ce0cef688\u003e] l2cap_connect_cfm+0x4e/0x11f [l2cap]\n [\u003ce0ca17c3\u003e] hci_send_cmd+0x126/0x14f [bluetooth]\n [\u003ce0ca4ce4\u003e] hci_event_packet+0x729/0xebd [bluetooth]\n [\u003ce0ca205b\u003e] hci_rx_task+0x2a/0x20f [bluetooth]\n [\u003ce0ca209d\u003e] hci_rx_task+0x6c/0x20f [bluetooth]\n [\u003cc012d7be\u003e] trace_hardirqs_on+0x10d/0x14e\n [\u003cc011ac85\u003e] tasklet_action+0x3d/0x68\n [\u003cc011abba\u003e] __do_softirq+0x41/0x92\n [\u003cc011ac32\u003e] do_softirq+0x27/0x3d\n [\u003cc0105134\u003e] do_IRQ+0x7b/0x8f\n [\u003cc0103dec\u003e] common_interrupt+0x24/0x34\n [\u003cc0103df6\u003e] common_interrupt+0x2e/0x34\n [\u003cc0248e65\u003e] acpi_processor_idle+0x1b3/0x34a\n [\u003cc0248e68\u003e] acpi_processor_idle+0x1b6/0x34a\n [\u003cc010232b\u003e] cpu_idle+0x39/0x4e\n [\u003cc04bab0c\u003e] start_kernel+0x372/0x37a\n [\u003cc04ba42b\u003e] unknown_bootoption+0x0/0x202\n [\u003cffffffff\u003e] 0xffffffff\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nAcked-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "de79059ecd7cd650f3788ece978a64586921d1f1", "tree": "d243e26bd799242ddd681e04311f70e40070a4b8", "parents": [ "c7ababbdc647e67e953d153ddf62cbdc9fe3297e" ], "author": { "name": "Aji Srinivas", "email": "emc.com", "time": "Wed Mar 07 16:10:53 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 07 16:10:53 2007 -0800" }, "message": "[BRIDGE]: adding new device to bridge should enable if up\n\nOne change introduced by the workqueue removal patch is that adding an\ninterface that is up to a bridge which is also up does not ever call\nbr_stp_enable_port(), leaving the port in DISABLED state until we do\nifconfig down and up or link events occur.\n\nThe following patch to the br_add_if function fixes it.\nThis is a regression introduced in 2.6.21.\n\nSubmitted-by: Aji_Srinivas@emc.com\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c7ababbdc647e67e953d153ddf62cbdc9fe3297e", "tree": "af469f536ede3b5e1961e26e2195d610827dcc5e", "parents": [ "16bec31db751030171b31d7767fa3a5bdbe980ea" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Wed Mar 07 16:02:40 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:12 2007 -0800" }, "message": "[IPV6]: Do not set IF_READY if device is down\n\nNow that we add the IPv6 device at registration time we don\u0027t need\nto set IF_READY in ipv6_add_dev anymore because we will always get\na NETDEV_UP event later on should the device ever become ready.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "16bec31db751030171b31d7767fa3a5bdbe980ea", "tree": "60b69d571ba42ef0bf9f54833bd10228220c87bd", "parents": [ "215a2dd3b43e0dc425e81d21de9d961416b1dad4" ], "author": { "name": "Eric Paris", "email": "eparis@redhat.com", "time": "Wed Mar 07 16:02:16 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:11 2007 -0800" }, "message": "[IPSEC]: xfrm audit hook misplaced in pfkey_delete and xfrm_del_sa\n\nInside pfkey_delete and xfrm_del_sa the audit hooks were not called if\nthere was any permission/security failures in attempting to do the del\noperation (such as permission denied from security_xfrm_state_delete).\nThis patch moves the audit hook to the exit path such that all failures\n(and successes) will actually get audited.\n\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nAcked-by: Venkat Yekkirala \u003cvyekkirala@trustedcs.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "215a2dd3b43e0dc425e81d21de9d961416b1dad4", "tree": "1b59b4ae1b4682d5da10a684a262e67b22a19246", "parents": [ "ef41aaa0b755f479012341ac11db9ca5b8928d98" ], "author": { "name": "Eric Paris", "email": "eparis@redhat.com", "time": "Wed Mar 07 16:01:45 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:10 2007 -0800" }, "message": "[IPSEC]: Add xfrm policy change auditing to pfkey_spdget\n\npfkey_spdget neither had an LSM security hook nor auditing for the\nremoval of xfrm_policy structs. The security hook was added when it was\nmoved into xfrm_policy_byid instead of the callers to that function by\nmy earlier patch and this patch adds the auditing hooks as well.\n\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nAcked-by: Venkat Yekkirala \u003cvyekkirala@trustedcs.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ef41aaa0b755f479012341ac11db9ca5b8928d98", "tree": "f5cd83b9117d0092f40006fbf4fd1f39652ad925", "parents": [ "05e52dd7396514648fba6c275eb7b49eca333c6d" ], "author": { "name": "Eric Paris", "email": "eparis@redhat.com", "time": "Wed Mar 07 15:37:58 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:09 2007 -0800" }, "message": "[IPSEC]: xfrm_policy delete security check misplaced\n\nThe security hooks to check permissions to remove an xfrm_policy were\nactually done after the policy was removed. Since the unlinking and\ndeletion are done in xfrm_policy_by* functions this moves the hooks\ninside those 2 functions. There we have all the information needed to\ndo the security check and it can be done before the deletion. Since\nauditing requires the result of that security check err has to be passed\nback and forth from the xfrm_policy_by* functions.\n\nThis patch also fixes a bug where a deletion that failed the security\ncheck could cause improper accounting on the xfrm_policy\n(xfrm_get_policy didn\u0027t have a put on the exit path for the hold taken\nby xfrm_policy_by*)\n\nIt also fixes the return code when no policy is found in\nxfrm_add_pol_expire. In old code (at least back in the 2.6.18 days) err\nwasn\u0027t used before the return when no policy is found and so the\ninitialization would cause err to be ENOENT. But since err has since\nbeen used above when we don\u0027t get a policy back from the xfrm_policy_by*\nfunction we would always return 0 instead of the intended ENOENT. Also\nfixed some white space damage in the same area.\n\nSigned-off-by: Eric Paris \u003ceparis@redhat.com\u003e\nAcked-by: Venkat Yekkirala \u003cvyekkirala@trustedcs.com\u003e\nAcked-by: James Morris \u003cjmorris@namei.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "151a99317ee9efcfd3e642da62e1edf4f47fcb3e", "tree": "8abf1427c3e25fc7ec6d48c863a4a2cf33ddc004", "parents": [ "286930797d74b2c9a5beae84836044f6a836235f" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Wed Mar 07 12:53:48 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:07 2007 -0800" }, "message": "[DCCP]: Revert patch which disables bidirectional mode\n\nThis reverts an earlier patch which disabled bidirectional mode, meaning that\na listening (passive) socket was not allowed to write to the other (active)\nend of the connection.\n\nThis mode had been disabled when there were problems with CCID3, but it\nimposes a constraint on socket programming and thus hinders deployment.\n\nA change is included to ignore RX feedback received by the TX CCID3 module.\n\nMany thanks to Andre Noll for pointing out this issue.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "286930797d74b2c9a5beae84836044f6a836235f", "tree": "95a12839a1ff2eb82914a20556ed6f7d614a9490", "parents": [ "d644329bc9f10213a282387dfe4984ff891dd768" ], "author": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 12:50:46 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:05 2007 -0800" }, "message": "[IPV6]: Handle np-\u003eopt being NULL in ipv6_getsockopt_sticky().\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d644329bc9f10213a282387dfe4984ff891dd768", "tree": "a22fa4740a9bba8f8b994a9b988cc5bc68da9538", "parents": [ "ba5dcee128d9f2877a6d2a5b150c24d90d77dad1" ], "author": { "name": "Herbert Xu", "email": "herbert@gondor.apana.org.au", "time": "Tue Mar 06 20:26:48 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:04 2007 -0800" }, "message": "[UDP]: Reread uh pointer after pskb_trim\n\nThe header may have moved when trimming.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ba5dcee128d9f2877a6d2a5b150c24d90d77dad1", "tree": "efd5a53fcb30f56bf912bb2eb81ab156205d9a1b", "parents": [ "881dbfe8accc9434dd0d7d052505e3dca6ad9b3c" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Mar 06 20:24:53 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:03 2007 -0800" }, "message": "[NETFILTER]: nfnetlink_log: fix crash on bridged packet\n\nphysoutdev is only set on purely bridged packet, when nfnetlink_log is used\nin the OUTPUT/FORWARD/POSTROUTING hooks on packets forwarded from or to a\nbridge it crashes when trying to dereference skb-\u003enf_bridge-\u003ephysoutdev.\n\nReported by Holger Eitzenberger \u003cheitzenberger@astaro.com\u003e\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "881dbfe8accc9434dd0d7d052505e3dca6ad9b3c", "tree": "2e742e2ae5162be28ca2ede93daea67712b83ddd", "parents": [ "dd63006b8fb5abf2336e145632610c6175a28fea" ], "author": { "name": "Patrick McHardy", "email": "kaber@trash.net", "time": "Tue Mar 06 20:24:35 2007 -0800" }, "committer": { "name": "David S. Miller", "email": "davem@sunset.davemloft.net", "time": "Wed Mar 07 16:08:02 2007 -0800" }, "message": "[NETFILTER]: nfnetlink_log: zero-terminate prefix\n\nUserspace expects a zero-terminated string, so include the trailing\nzero in the netlink message.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" } ], "next": "dd63006b8fb5abf2336e145632610c6175a28fea" }