)]}'
{
  "log": [
    {
      "commit": "24d1745f4d77918e78ff0095ab233ff4f786287c",
      "tree": "450edfb58165a15440a76bc1645f0e21c6a84d1c",
      "parents": [
        "3146a25c513a1a3d5452db06d711a0a816e76584"
      ],
      "author": {
        "name": "Thadeu Lima de Souza Cascardo",
        "email": "cascardo@linux.vnet.ibm.com",
        "time": "Thu Oct 25 13:37:51 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Oct 31 10:02:56 2012 -0700"
      },
      "message": "genalloc: stop crashing the system when destroying a pool\n\ncommit eedce141cd2dad8d0cefc5468ef41898949a7031 upstream.\n\nThe genalloc code uses the bitmap API from include/linux/bitmap.h and\nlib/bitmap.c, which is based on long values.  Both bitmap_set from\nlib/bitmap.c and bitmap_set_ll, which is the lockless version from\ngenalloc.c, use BITMAP_LAST_WORD_MASK to set the first bits in a long in\nthe bitmap.\n\nThat one uses (1 \u003c\u003c bits) - 1, 0b111, if you are setting the first three\nbits.  This means that the API counts from the least significant bits\n(LSB from now on) to the MSB.  The LSB in the first long is bit 0, then.\nThe same works for the lookup functions.\n\nThe genalloc code uses longs for the bitmap, as it should.  In\ninclude/linux/genalloc.h, struct gen_pool_chunk has unsigned long\nbits[0] as its last member.  When allocating the struct, genalloc should\nreserve enough space for the bitmap.  This should be a proper number of\nlongs that can fit the amount of bits in the bitmap.\n\nHowever, genalloc allocates an integer number of bytes that fit the\namount of bits, but may not be an integer amount of longs.  9 bytes, for\nexample, could be allocated for 70 bits.\n\nThis is a problem in itself if the Least Significat Bit in a long is in\nthe byte with the largest address, which happens in Big Endian machines.\nThis means genalloc is not allocating the byte in which it will try to\nset or check for a bit.\n\nThis may end up in memory corruption, where genalloc will try to set the\nbits it has not allocated.  In fact, genalloc may not set these bits\nbecause it may find them already set, because they were not zeroed since\nthey were not allocated.  And that\u0027s what causes a BUG when\ngen_pool_destroy is called and check for any set bits.\n\nWhat really happens is that genalloc uses kmalloc_node with __GFP_ZERO\non gen_pool_add_virt.  With SLAB and SLUB, this means the whole slab\nwill be cleared, not only the requested bytes.  Since struct\ngen_pool_chunk has a size that is a multiple of 8, and slab sizes are\nmultiples of 8, we get lucky and allocate and clear the right amount of\nbytes.\n\nHower, this is not the case with SLOB or with older code that did memset\nafter allocating instead of using __GFP_ZERO.\n\nSo, a simple module as this (running 3.6.0), will cause a crash when\nrmmod\u0027ed.\n\n  [root@phantom-lp2 foo]# cat foo.c\n  #include \u003clinux/kernel.h\u003e\n  #include \u003clinux/module.h\u003e\n  #include \u003clinux/init.h\u003e\n  #include \u003clinux/genalloc.h\u003e\n\n  MODULE_LICENSE(\"GPL\");\n  MODULE_VERSION(\"0.1\");\n\n  static struct gen_pool *foo_pool;\n\n  static __init int foo_init(void)\n  {\n          int ret;\n          foo_pool \u003d gen_pool_create(10, -1);\n          if (!foo_pool)\n                  return -ENOMEM;\n          ret \u003d gen_pool_add(foo_pool, 0xa0000000, 32 \u003c\u003c 10, -1);\n          if (ret) {\n                  gen_pool_destroy(foo_pool);\n                  return ret;\n          }\n          return 0;\n  }\n\n  static __exit void foo_exit(void)\n  {\n          gen_pool_destroy(foo_pool);\n  }\n\n  module_init(foo_init);\n  module_exit(foo_exit);\n  [root@phantom-lp2 foo]# zcat /proc/config.gz | grep SLOB\n  CONFIG_SLOB\u003dy\n  [root@phantom-lp2 foo]# insmod ./foo.ko\n  [root@phantom-lp2 foo]# rmmod foo\n  ------------[ cut here ]------------\n  kernel BUG at lib/genalloc.c:243!\n  cpu 0x4: Vector: 700 (Program Check) at [c0000000bb0e7960]\n      pc: c0000000003cb50c: .gen_pool_destroy+0xac/0x110\n      lr: c0000000003cb4fc: .gen_pool_destroy+0x9c/0x110\n      sp: c0000000bb0e7be0\n     msr: 8000000000029032\n    current \u003d 0xc0000000bb0e0000\n    paca    \u003d 0xc000000006d30e00   softe: 0        irq_happened: 0x01\n      pid   \u003d 13044, comm \u003d rmmod\n  kernel BUG at lib/genalloc.c:243!\n  [c0000000bb0e7ca0] d000000004b00020 .foo_exit+0x20/0x38 [foo]\n  [c0000000bb0e7d20] c0000000000dff98 .SyS_delete_module+0x1a8/0x290\n  [c0000000bb0e7e30] c0000000000097d4 syscall_exit+0x0/0x94\n  --- Exception: c00 (System Call) at 000000800753d1a0\n  SP (fffd0b0e640) is in userspace\n\nSigned-off-by: Thadeu Lima de Souza Cascardo \u003ccascardo@linux.vnet.ibm.com\u003e\nCc: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nCc: Benjamin Gaignard \u003cbenjamin.gaignard@stericsson.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3146a25c513a1a3d5452db06d711a0a816e76584",
      "tree": "20cc9ee3619d24d9f8a30a5051b9d0f899d3b0f0",
      "parents": [
        "6fddae5c4eda4ebc63ae47f3d47e142ca08b31ff"
      ],
      "author": {
        "name": "Jan Luebbe",
        "email": "jlu@pengutronix.de",
        "time": "Thu Oct 25 13:38:11 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Oct 31 10:02:56 2012 -0700"
      },
      "message": "drivers/rtc/rtc-imxdi.c: add missing spin lock initialization\n\ncommit fee0de7791f967c2c5f0d43eb7b7261761b45e64 upstream.\n\nSigned-off-by: Jan Luebbe \u003cjlu@pengutronix.de\u003e\nCc: Alessandro Zummo \u003ca.zummo@towertech.it\u003e\nCc: Roland Stigge \u003cstigge@antcom.de\u003e\nCc: Grant Likely \u003cgrant.likely@secretlab.ca\u003e\nTested-by: Roland Stigge \u003cstigge@antcom.de\u003e\nCc: Sascha Hauer \u003ckernel@pengutronix.de\u003e\nCc: Russell King \u003clinux@arm.linux.org.uk\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6fddae5c4eda4ebc63ae47f3d47e142ca08b31ff",
      "tree": "d1fa88f1f9f8f3c824a961548f23a4d870bb76da",
      "parents": [
        "419cbf261a717df51878cadd00488ec2a9d9b3a4"
      ],
      "author": {
        "name": "Kees Cook",
        "email": "keescook@chromium.org",
        "time": "Thu Oct 25 13:38:16 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Oct 31 10:02:55 2012 -0700"
      },
      "message": "fs/compat_ioctl.c: VIDEO_SET_SPU_PALETTE missing error check\n\ncommit 12176503366885edd542389eed3aaf94be163fdb upstream.\n\nThe compat ioctl for VIDEO_SET_SPU_PALETTE was missing an error check\nwhile converting ioctl arguments.  This could lead to leaking kernel\nstack contents into userspace.\n\nPatch extracted from existing fix in grsecurity.\n\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: David Miller \u003cdavem@davemloft.net\u003e\nCc: Brad Spengler \u003cspender@grsecurity.net\u003e\nCc: PaX Team \u003cpageexec@freemail.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "419cbf261a717df51878cadd00488ec2a9d9b3a4",
      "tree": "c4210bae64e294ac03a29860df61d97fb9bf7a1a",
      "parents": [
        "218246de04389b7aa0d1e799ed8b0115f342ee37"
      ],
      "author": {
        "name": "Kees Cook",
        "email": "keescook@chromium.org",
        "time": "Thu Oct 25 13:38:14 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Oct 31 10:02:33 2012 -0700"
      },
      "message": "gen_init_cpio: avoid stack overflow when expanding\n\ncommit 20f1de659b77364d55d4e7fad2ef657e7730323f upstream.\n\nFix possible overflow of the buffer used for expanding environment\nvariables when building file list.\n\nIn the extremely unlikely case of an attacker having control over the\nenvironment variables visible to gen_init_cpio, control over the\ncontents of the file gen_init_cpio parses, and gen_init_cpio was built\nwithout compiler hardening, the attacker can gain arbitrary execution\ncontrol via a stack buffer overflow.\n\n  $ cat usr/crash.list\n  file foo ${BIG}${BIG}${BIG}${BIG}${BIG}${BIG} 0755 0 0\n  $ BIG\u003d$(perl -e \u0027print \"A\" x 4096;\u0027) ./usr/gen_init_cpio usr/crash.list\n  *** buffer overflow detected ***: ./usr/gen_init_cpio terminated\n\nThis also replaces the space-indenting with tabs.\n\nPatch based on existing fix extracted from grsecurity.\n\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Michal Marek \u003cmmarek@suse.cz\u003e\nCc: Brad Spengler \u003cspender@grsecurity.net\u003e\nCc: PaX Team \u003cpageexec@freemail.hu\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "218246de04389b7aa0d1e799ed8b0115f342ee37",
      "tree": "7fd11df0a787e822d0975280d5855a9eaef80988",
      "parents": [
        "1c1e11543381f3ff0cee52b69903928ff881c0cb"
      ],
      "author": {
        "name": "Stefán Freyr",
        "email": "stefan.freyr@gmail.com",
        "time": "Fri Oct 19 22:46:00 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Oct 31 10:02:32 2012 -0700"
      },
      "message": "ALSA: hda - add dock support for Thinkpad T430\n\ncommit 84f98fdf7865fbd35b312eb39ea91e5618c514c7 upstream.\n\nI have a Lenovo ThinkPad T430 and an UltraBase Series 3 docking\nstation.\n\nWithout this patch, if I plug my headphones into the jack on the\ncomputer, everything works fine. The computer speakers mute and the\naudio is played in the headphones. However, if I plug into the docking\nstation headphone jack the computer speakers are muted but there is no\naudio in the headphones.\n\nAddresses https://bugs.launchpad.net/bugs/1060372\n\nSigned-off-by: Joseph Salisbury \u003cjoseph.salisbury@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1c1e11543381f3ff0cee52b69903928ff881c0cb",
      "tree": "2e1f6a5b1fde0f0f5c936e5fd8aa52102a56614f",
      "parents": [
        "8357dde8b780b426d398f9e3701fdc16f0856766"
      ],
      "author": {
        "name": "Alex Deucher",
        "email": "alexander.deucher@amd.com",
        "time": "Fri Oct 19 13:27:04 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Oct 31 10:02:32 2012 -0700"
      },
      "message": "drm/radeon: add error output if VM CS fails on cayman\n\ncommit c71721324c612f7f040657ce9917d87f530f9784 upstream.\n\nSo we know why the CS was rejected.\n\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8357dde8b780b426d398f9e3701fdc16f0856766",
      "tree": "027378c8e6fb03205da85714bdb6f2095026a761",
      "parents": [
        "f88df5ff96f5ea632aa2d193d2c9019aa4c728d9"
      ],
      "author": {
        "name": "Alex Deucher",
        "email": "alexander.deucher@amd.com",
        "time": "Tue Oct 16 12:51:45 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Wed Oct 31 10:02:32 2012 -0700"
      },
      "message": "drm/radeon: add some new SI PCI ids\n\ncommit b6aa22db7857ab7ed042d6c56b800bfc727cfdff upstream.\n\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f88df5ff96f5ea632aa2d193d2c9019aa4c728d9",
      "tree": "b5f20f69d7206fa62cb6b69277895f8b007c9843",
      "parents": [
        "f2a713d25e8b95e065c90af72f461e99427e20f8"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:36:33 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:36:33 2012 -0700"
      },
      "message": "Linux 3.4.16\n"
    },
    {
      "commit": "f2a713d25e8b95e065c90af72f461e99427e20f8",
      "tree": "557a4cb321242a78f9adaf0fc5801b641b0afe3b",
      "parents": [
        "3ba595416b15151d2eaa12578c17cbfd64c06aec"
      ],
      "author": {
        "name": "Brian Norris",
        "email": "computersforpeace@gmail.com",
        "time": "Fri Jul 13 09:28:24 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "mtd: nand: allow NAND_NO_SUBPAGE_WRITE to be set from driver\n\ncommit bf7a01bf7987b63b121d572b240c132ec44129c4 upstream.\n\nThe NAND_CHIPOPTIONS_MSK has limited utility and is causing real bugs. It\nsilently masks off at least one flag that might be set by the driver\n(NAND_NO_SUBPAGE_WRITE). This breaks the GPMI NAND driver and possibly\nothers.\n\nReally, as long as driver writers exercise a small amount of care with\nNAND_* options, this mask is not necessary at all; it was only here to\nprevent certain options from accidentally being set by the driver. But the\noriginal thought turns out to be a bad idea occasionally. Thus, kill it.\n\nNote, this patch fixes some major gpmi-nand breakage.\n\nSigned-off-by: Brian Norris \u003ccomputersforpeace@gmail.com\u003e\nTested-by: Huang Shijie \u003cshijie8@gmail.com\u003e\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: David Woodhouse \u003cDavid.Woodhouse@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "3ba595416b15151d2eaa12578c17cbfd64c06aec",
      "tree": "c2099148c3802b288cefe19be0ac65eebab89271",
      "parents": [
        "d37bcccee1b807af77b5c6767cb0df295f9dfbdb"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Aug 15 00:37:29 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "sparc64: Be less verbose during vmemmap population.\n\n[ Upstream commit 2856cc2e4d0852c3ddaae9dcb19cb9396512eb08 ]\n\nOn a 2-node machine with 256GB of ram we get 512 lines of\nconsole output, which is just too much.\n\nThis mimicks Yinghai Lu\u0027s x86 commit c2b91e2eec9678dbda274e906cc32ea8f711da3b\n(x86_64/mm: check and print vmemmap allocation continuous) except that\nwe aren\u0027t ever going to get contiguous block pointers in between calls\nso just print when the virtual address or node changes.\n\nThis decreases the output by an order of 16.\n\nAlso demote this to KERN_DEBUG.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "d37bcccee1b807af77b5c6767cb0df295f9dfbdb",
      "tree": "5b27427064113c553cea8c9dc885b6b07f823705",
      "parents": [
        "f603fa368be8342b2bee401ac6c815e6e34b3373"
      ],
      "author": {
        "name": "Jiri Kosina",
        "email": "jkosina@suse.cz",
        "time": "Wed Aug 01 21:10:51 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "sparc64: do not clobber personality flags in sys_sparc64_personality()\n\n[ Upstream commit a27032eee8cb6e16516f13c8a9752e9d5d4cc430 ]\n\nThere are multiple errors in how sys_sparc64_personality() handles\npersonality flags stored in top three bytes.\n\n- directly comparing current-\u003epersonality against PER_LINUX32 doesn\u0027t work\n  in cases when any of the personality flags stored in the top three bytes\n  are used.\n- directly forcefully setting personality to PER_LINUX32 or PER_LINUX\n  discards any flags stored in the top three bytes\n\nFix the first one by properly using personality() macro to compare only\nPER_MASK bytes.\nFix the second one by setting only the bits that should be set, instead of\noverwriting the whole value.\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "f603fa368be8342b2bee401ac6c815e6e34b3373",
      "tree": "b8fa9a5174419e8907bf998cc2b9884829db2519",
      "parents": [
        "846514fcb8f4518aa88636542bb7aa8453faacb2"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Oct 16 13:05:25 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "sparc64: Fix bit twiddling in sparc_pmu_enable_event().\n\n[ Upstream commit e793d8c6740f8fe704fa216e95685f4d92c4c4b9 ]\n\nThere was a serious disconnect in the logic happening in\nsparc_pmu_disable_event() vs. sparc_pmu_enable_event().\n\nEvent disable is implemented by programming a NOP event into the PCR.\n\nHowever, event enable was not reversing this operation.  Instead, it\nwas setting the User/Priv/Hypervisor trace enable bits.\n\nThat\u0027s not sparc_pmu_enable_event()\u0027s job, that\u0027s what\nsparc_pmu_enable() and sparc_pmu_disable() do .\n\nThe intent of sparc_pmu_enable_event() is clear, since it first clear\nout the event type encoding field.  So fix this by OR\u0027ing in the event\nencoding rather than the trace enable bits.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "846514fcb8f4518aa88636542bb7aa8453faacb2",
      "tree": "49333565cd2d8bcda020e928791d534b4c63c4b9",
      "parents": [
        "01afdbe150a888b20b24a427e010214530176cf5"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Oct 14 17:59:40 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "sparc64: Like x86 we should check current-\u003emm during perf backtrace generation.\n\n[ Upstream commit 08280e6c4c2e8049ac61d9e8e3536ec1df629c0d ]\n\nIf the MM is not active, only report the top-level PC.  Do not try to\naccess the address space.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "01afdbe150a888b20b24a427e010214530176cf5",
      "tree": "ed510fe4cea3b749b0f196e6c8c347572d07d175",
      "parents": [
        "dd2c50efa9941fe7393b5f490eeef68f18916211"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Wed Oct 10 17:25:00 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "sparc64: fix ptrace interaction with force_successful_syscall_return()\n\n[ Upstream commit 55c2770e413e96871147b9406a9c41fe9bc5209c ]\n\nwe want syscall_trace_leave() called on exit from any syscall;\nskipping its call in case we\u0027d done force_successful_syscall_return()\nis broken...\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "dd2c50efa9941fe7393b5f490eeef68f18916211",
      "tree": "44296428b9215d6b77b51bd7e3441edcb5873358",
      "parents": [
        "259c5a7fd824ebca122f04fc4202b88896f31d26"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "edumazet@google.com",
        "time": "Tue Oct 16 07:37:27 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "ipv6: addrconf: fix /proc/net/if_inet6\n\n[ Upstream commit 9f0d3c2781baa1102108e16efbe640dd74564a7c ]\n\nCommit 1d5783030a1 (ipv6/addrconf: speedup /proc/net/if_inet6 filling)\nadded bugs hiding some devices from if_inet6 and breaking applications.\n\n\"ip -6 addr\" could still display all IPv6 addresses, while \"ifconfig -a\"\ncouldnt.\n\nOne way to reproduce the bug is by starting in a shell :\n\nunshare -n /bin/bash\nifconfig lo up\n\nAnd in original net namespace, lo device disappeared from if_inet6\n\nReported-by: Jan Hinnerk Stosch \u003cjanhinnerk.stosch@gmail.com\u003e\nTested-by: Jan Hinnerk Stosch \u003cjanhinnerk.stosch@gmail.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Mihai Maruseac \u003cmihai.maruseac@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "259c5a7fd824ebca122f04fc4202b88896f31d26",
      "tree": "1bf6bb73cba3d865aa5964370c1ef47b50299d24",
      "parents": [
        "04c592343f478826bf1e5d0d178bb295d848c428"
      ],
      "author": {
        "name": "Alexey Kuznetsov",
        "email": "kuznet@ms2.inr.ac.ru",
        "time": "Fri Oct 12 04:34:17 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:16 2012 -0700"
      },
      "message": "tcp: resets are misrouted\n\n[ Upstream commit 4c67525849e0b7f4bd4fab2487ec9e43ea52ef29 ]\n\nAfter commit e2446eaa (\"tcp_v4_send_reset: binding oif to iif in no\nsock case\").. tcp resets are always lost, when routing is asymmetric.\nYes, backing out that patch will result in misrouting of resets for\ndead connections which used interface binding when were alive, but we\nactually cannot do anything here.  What\u0027s died that\u0027s died and correct\nhandling normal unbound connections is obviously a priority.\n\nComment to comment:\n\u003e This has few benefits:\n\u003e   1. tcp_v6_send_reset already did that.\n\nIt was done to route resets for IPv6 link local addresses. It was a\nmistake to do so for global addresses. The patch fixes this as well.\n\nActually, the problem appears to be even more serious than guaranteed\nloss of resets.  As reported by Sergey Soloviev \u003csol@eqv.ru\u003e, those\nmisrouted resets create a lot of arp traffic and huge amount of\nunresolved arp entires putting down to knees NAT firewalls which use\nasymmetric routing.\n\nSigned-off-by: Alexey Kuznetsov \u003ckuznet@ms2.inr.ac.ru\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "04c592343f478826bf1e5d0d178bb295d848c428",
      "tree": "e4c1c553b9e0801cbe6e7773f6af18b1a88d7166",
      "parents": [
        "2d2f242f248f19c4618bde9091d20416e2c9a1f6"
      ],
      "author": {
        "name": "jeff.liu",
        "email": "jeff.liu@oracle.com",
        "time": "Mon Oct 08 18:57:27 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "RDS: fix rds-ping spinlock recursion\n\n[ Upstream commit 5175a5e76bbdf20a614fb47ce7a38f0f39e70226 ]\n\nThis is the revised patch for fixing rds-ping spinlock recursion\naccording to Venkat\u0027s suggestions.\n\nRDS ping/pong over TCP feature has been broken for years(2.6.39 to\n3.6.0) since we have to set TCP cork and call kernel_sendmsg() between\nping/pong which both need to lock \"struct sock *sk\". However, this\nlock has already been hold before rds_tcp_data_ready() callback is\ntriggerred. As a result, we always facing spinlock resursion which\nwould resulting in system panic.\n\nGiven that RDS ping is only used to test the connectivity and not for\nserious performance measurements, we can queue the pong transmit to\nrds_wq as a delayed response.\n\nReported-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nCC: Venkat Venkatsubra \u003cvenkat.x.venkatsubra@oracle.com\u003e\nCC: David S. Miller \u003cdavem@davemloft.net\u003e\nCC: James Morris \u003cjames.l.morris@oracle.com\u003e\nSigned-off-by: Jie Liu \u003cjeff.liu@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "2d2f242f248f19c4618bde9091d20416e2c9a1f6",
      "tree": "5b15e35dde9a352bde196de7619b7268271df260",
      "parents": [
        "14a547a85a7fa2b6473eaa73b83e2055b476a5dc"
      ],
      "author": {
        "name": "Florian Zumbiehl",
        "email": "florz@florz.de",
        "time": "Sun Oct 07 15:51:58 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "vlan: don\u0027t deliver frames for unknown vlans to protocols\n\n[ Upstream commit 48cc32d38a52d0b68f91a171a8d00531edc6a46e ]\n\n6a32e4f9dd9219261f8856f817e6655114cfec2f made the vlan code skip marking\nvlan-tagged frames for not locally configured vlans as PACKET_OTHERHOST if\nthere was an rx_handler, as the rx_handler could cause the frame to be received\non a different (virtual) vlan-capable interface where that vlan might be\nconfigured.\n\nAs rx_handlers do not necessarily return RX_HANDLER_ANOTHER, this could cause\nframes for unknown vlans to be delivered to the protocol stack as if they had\nbeen received untagged.\n\nFor example, if an ipv6 router advertisement that\u0027s tagged for a locally not\nconfigured vlan is received on an interface with macvlan interfaces attached,\nmacvlan\u0027s rx_handler returns RX_HANDLER_PASS after delivering the frame to the\nmacvlan interfaces, which caused it to be passed to the protocol stack, leading\nto ipv6 addresses for the announced prefix being configured even though those\nare completely unusable on the underlying interface.\n\nThe fix moves marking as PACKET_OTHERHOST after the rx_handler so the\nrx_handler, if there is one, sees the frame unchanged, but afterwards,\nbefore the frame is delivered to the protocol stack, it gets marked whether\nthere is an rx_handler or not.\n\nSigned-off-by: Florian Zumbiehl \u003cflorz@florz.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "14a547a85a7fa2b6473eaa73b83e2055b476a5dc",
      "tree": "0e2fe3e943c7c092783abe1eacb1f11a12a7fded",
      "parents": [
        "742bd2b3cef97a6eea8168b8e356ca2f16b7f3eb"
      ],
      "author": {
        "name": "Graham Gower",
        "email": "graham.gower@gmail.com",
        "time": "Mon Oct 08 08:34:50 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "skge: Add DMA mask quirk for Marvell 88E8001 on ASUS P5NSLI motherboard\n\n[ Upstream commit a2af139ff1cd85df586690ff626619ab1ee88b0a ]\n\nMarvell 88E8001 on an ASUS P5NSLI motherboard is unable to send/receive\npackets on a system with \u003e4gb ram unless a 32bit DMA mask is used.\n\nThis issue has been around for years and a fix was sent 3.5 years ago, but\nthere was some debate as to whether it should instead be fixed as a PCI quirk.\nhttp://www.spinics.net/lists/netdev/msg88670.html\n\nHowever, 18 months later a similar workaround was introduced for another\nchipset exhibiting the same problem.\nhttp://www.spinics.net/lists/netdev/msg142287.html\n\nSigned-off-by: Graham Gower \u003cgraham.gower@gmail.com\u003e\nSigned-off-by: Jan Ceuleers \u003cjan.ceuleers@computer.org\u003e\nAcked-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "742bd2b3cef97a6eea8168b8e356ca2f16b7f3eb",
      "tree": "8fc0e2b786e880bb7866adc77d25642f2a7394f3",
      "parents": [
        "6114941a295ff186d29ab7462cce6a41a089c354"
      ],
      "author": {
        "name": "ramesh.nagappa@gmail.com",
        "email": "ramesh.nagappa@gmail.com",
        "time": "Fri Oct 05 19:10:15 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "net: Fix skb_under_panic oops in neigh_resolve_output\n\n[ Upstream commit e1f165032c8bade3a6bdf546f8faf61fda4dd01c ]\n\nThe retry loop in neigh_resolve_output() and neigh_connected_output()\ncall dev_hard_header() with out reseting the skb to network_header.\nThis causes the retry to fail with skb_under_panic. The fix is to\nreset the network_header within the retry loop.\n\nSigned-off-by: Ramesh Nagappa \u003cramesh.nagappa@ericsson.com\u003e\nReviewed-by: Shawn Lu \u003cshawn.lu@ericsson.com\u003e\nReviewed-by: Robert Coulson \u003crobert.coulson@ericsson.com\u003e\nReviewed-by: Billie Alsup \u003cbillie.alsup@ericsson.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "6114941a295ff186d29ab7462cce6a41a089c354",
      "tree": "9f75aa36c394130269ce8bd1adf23255ee5ab295",
      "parents": [
        "70f7f1c70af637a23ca09ba1d2d7c966d1bd5990"
      ],
      "author": {
        "name": "Gao feng",
        "email": "gaofeng@cn.fujitsu.com",
        "time": "Thu Oct 04 20:15:49 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "infiniband: pass rdma_cm module to netlink_dump_start\n\n[ Upstream commit 809d5fc9bf6589276a12bd4fd611e4c7ff9940c3 ]\n\nset netlink_dump_control.module to avoid panic.\n\nSigned-off-by: Gao feng \u003cgaofeng@cn.fujitsu.com\u003e\nCc: Roland Dreier \u003croland@kernel.org\u003e\nCc: Sean Hefty \u003csean.hefty@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "70f7f1c70af637a23ca09ba1d2d7c966d1bd5990",
      "tree": "b00dea2ae29b7459a2ff702134cc0824ecd0265d",
      "parents": [
        "f0dc514c8a0fd7ee7b1f6a3ccdae3b38e6ee1578"
      ],
      "author": {
        "name": "Gao feng",
        "email": "gaofeng@cn.fujitsu.com",
        "time": "Thu Oct 04 20:15:48 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "netlink: add reference of module in netlink_dump_start\n\n[ Upstream commit 6dc878a8ca39e93f70c42f3dd7260bde10c1e0f1 ]\n\nI get a panic when I use ss -a and rmmod inet_diag at the\nsame time.\n\nIt\u0027s because netlink_dump uses inet_diag_dump which belongs to module\ninet_diag.\n\nI search the codes and find many modules have the same problem.  We\nneed to add a reference to the module which the cb-\u003edump belongs to.\n\nThanks for all help from Stephen,Jan,Eric,Steffen and Pablo.\n\nChange From v3:\nchange netlink_dump_start to inline,suggestion from Pablo and\nEric.\n\nChange From v2:\ndelete netlink_dump_done,and call module_put in netlink_dump\nand netlink_sock_destruct.\n\nSigned-off-by: Gao feng \u003cgaofeng@cn.fujitsu.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "f0dc514c8a0fd7ee7b1f6a3ccdae3b38e6ee1578",
      "tree": "1109a7144cdc82b63145a0a55b5e1d47d566e5f3",
      "parents": [
        "bfbd61ec59fae6f633db1d139015c3dd81e453be"
      ],
      "author": {
        "name": "Devin Heitmueller",
        "email": "dheitmueller@kernellabs.com",
        "time": "Mon Aug 06 22:47:03 2012 -0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "media: au0828: fix case where STREAMOFF being called on stopped stream causes BUG()\n\ncommit a595c1ce4c9d572cf53513570b9f1a263d7867f2 upstream.\n\nWe weren\u0027t checking whether the resource was in use before calling\nres_free(), so applications which called STREAMOFF on a v4l2 device that\nwasn\u0027t already streaming would cause a BUG() to be hit (MythTV).\n\nReported-by: Larry Finger \u003clarry.finger@lwfinger.net\u003e\nReported-by: Jay Harbeston \u003cjharbestonus@gmail.com\u003e\nSigned-off-by: Devin Heitmueller \u003cdheitmueller@kernellabs.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\n\n"
    },
    {
      "commit": "bfbd61ec59fae6f633db1d139015c3dd81e453be",
      "tree": "acb1763dfb035e47f359fe2710f14da0eae52cb9",
      "parents": [
        "8538f9c30a098c87bb806e80f43b2203a997a4d9"
      ],
      "author": {
        "name": "Felipe Balbi",
        "email": "balbi@ti.com",
        "time": "Thu Oct 04 11:58:00 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "usb: dwc3: gadget: fix \u0027endpoint always busy\u0027 bug\n\ncommit 041d81f493d90c940ec41f0ec98bc7c4f2fba431 upstream.\n\nIf a USB transfer has already been started, meaning\nwe have already issued StartTransfer command to that\nparticular endpoint, DWC3_EP_BUSY flag has also\nalready been set.\n\nWhen we try to cancel this transfer which is already\nin controller\u0027s cache, we will not receive XferComplete\nevent and we must clear DWC3_EP_BUSY in order to allow\nsubsequent requests to be properly started.\n\nThe best place to clear that flag is right after issuing\nDWC3_DEPCMD_ENDTRANSFER.\n\nReported-by: Moiz Sonasath \u003cm-sonasath@ti.com\u003e\nSigned-off-by: Felipe Balbi \u003cbalbi@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n"
    },
    {
      "commit": "8538f9c30a098c87bb806e80f43b2203a997a4d9",
      "tree": "a4a23e993f7f401dcd15b2948da36f090557bf39",
      "parents": [
        "5a58f4890e681eadbb617cace87cfdac948c7edd"
      ],
      "author": {
        "name": "Andrew Morton",
        "email": "akpm@linux-foundation.org",
        "time": "Tue Oct 23 14:09:39 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "amd64_edac:__amd64_set_scrub_rate(): avoid overindexing scrubrates[]\n\ncommit 168bfeef7bba3f9784f7540b053e4ac72b769ce9 upstream.\n\nIf none of the elements in scrubrates[] matches, this loop will cause\n__amd64_set_scrub_rate() to incorrectly use the n+1th element.\n\nAs the function is designed to use the final scrubrates[] element in the\ncase of no match, we can fix this bug by simply terminating the array\nsearch at the n-1th element.\n\nBoris: this code is fragile anyway, see here why:\nhttp://marc.info/?l\u003dlinux-kernel\u0026m\u003d135102834131236\u0026w\u003d2\n\nIt will be rewritten more robustly soonish.\n\nReported-by: Denis Kirjanov \u003ckirjanov@gmail.com\u003e\nCc: Doug Thompson \u003cdougthompson@xmission.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Borislav Petkov \u003cborislav.petkov@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5a58f4890e681eadbb617cace87cfdac948c7edd",
      "tree": "54d78da7205451ae96e99a73e8897ef1bb0afd59",
      "parents": [
        "248ada294174583d918564de33bc5504311c69bb"
      ],
      "author": {
        "name": "Hiro Sugawara",
        "email": "hsugawara@nvidia.com",
        "time": "Thu Oct 18 08:35:10 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:15 2012 -0700"
      },
      "message": "iommu/tegra: smmu: Fix deadly typo\n\ncommit d0078e72314df2e5ede03f2102cddde06767c374 upstream.\n\nFix a deadly typo in macro definition.\n\nSigned-off-by: Hiro Sugawara \u003chsugawara@nvidia.com\u003e\nSigned-off-by: Hiroshi Doyu \u003chdoyu@nvidia.com\u003e\nSigned-off-by: Joerg Roedel \u003cjoerg.roedel@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "248ada294174583d918564de33bc5504311c69bb",
      "tree": "8f41c65255ec5fe851897456485649367afeb69f",
      "parents": [
        "409dcaefb5c287d68c36e2598154b979a67a9447"
      ],
      "author": {
        "name": "Pritesh Raithatha",
        "email": "praithatha@nvidia.com",
        "time": "Wed Oct 17 17:09:36 2012 +0530"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "pinctrl: tegra: set low power mode bank width to 2\n\ncommit 154f3ebf53edcfbe28728452b4ab37a118581125 upstream.\n\nSigned-off-by: Pritesh Raithatha \u003cpraithatha@nvidia.com\u003e\nAcked-by: Stephen Warren \u003cswarren@nvidia.com\u003e\nTested-by: Stephen Warren \u003cswarren@nvidia.com\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "409dcaefb5c287d68c36e2598154b979a67a9447",
      "tree": "8748b16fc7d253f93956191a123094611cb94695",
      "parents": [
        "727fa37e405a71dc1c7208ea7352be55e0310eca"
      ],
      "author": {
        "name": "Pritesh Raithatha",
        "email": "praithatha@nvidia.com",
        "time": "Wed Oct 17 11:51:37 2012 +0530"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "pinctrl: tegra: correct bank for pingroup and drv pingroup\n\ncommit a03690e44468dcd3088f6600ab036d17bd2130ff upstream.\n\nSigned-off-by: Pritesh Raithatha \u003cpraithatha@nvidia.com\u003e\nAcked-by: Stephen Warren \u003cswarren@nvidia.com\u003e\nTested-by: Stephen Warren \u003cswarren@nvidia.com\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "727fa37e405a71dc1c7208ea7352be55e0310eca",
      "tree": "43de8999a864592379df86384426ad2ebf1038fa",
      "parents": [
        "5993bba302a1a6df9c73690a08346411ff7cd56e"
      ],
      "author": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Oct 18 17:52:07 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "Revert \"cgroup: Drop task_lock(parent) on cgroup_fork()\"\n\ncommit 9bb71308b8133d643648776243e4d5599b1c193d upstream.\n\nThis reverts commit 7e381b0eb1e1a9805c37335562e8dc02e7d7848c.\n\nThe commit incorrectly assumed that fork path always performed\nthreadgroup_change_begin/end() and depended on that for\nsynchronization against task exit and cgroup migration paths instead\nof explicitly grabbing task_lock().\n\nthreadgroup_change is not locked when forking a new process (as\nopposed to a new thread in the same process) and even if it were it\nwouldn\u0027t be effective as different processes use different threadgroup\nlocks.\n\nRevert the incorrect optimization.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nLKML-Reference: \u003c20121008020000.GB2575@localhost\u003e\nAcked-by: Li Zefan \u003clizefan@huawei.com\u003e\nBitterly-Acked-by: Frederic Weisbecker \u003cfweisbec@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "5993bba302a1a6df9c73690a08346411ff7cd56e",
      "tree": "d10d70343dd1df236e6d16d75de9c107c86f82d1",
      "parents": [
        "9a55fef20afb3d7362b0c9d19ba1e78dfe482d3d"
      ],
      "author": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Oct 18 17:40:30 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "Revert \"cgroup: Remove task_lock() from cgroup_post_fork()\"\n\ncommit d87838321124061f6c935069d97f37010fa417e6 upstream.\n\nThis reverts commit 7e3aa30ac8c904a706518b725c451bb486daaae9.\n\nThe commit incorrectly assumed that fork path always performed\nthreadgroup_change_begin/end() and depended on that for\nsynchronization against task exit and cgroup migration paths instead\nof explicitly grabbing task_lock().\n\nthreadgroup_change is not locked when forking a new process (as\nopposed to a new thread in the same process) and even if it were it\nwouldn\u0027t be effective as different processes use different threadgroup\nlocks.\n\nRevert the incorrect optimization.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nLKML-Reference: \u003c20121008020000.GB2575@localhost\u003e\nAcked-by: Li Zefan \u003clizefan@huawei.com\u003e\nCc: Frederic Weisbecker \u003cfweisbec@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9a55fef20afb3d7362b0c9d19ba1e78dfe482d3d",
      "tree": "ee17e4fd3a8b21aa09e66d5bca06bbe349d122b3",
      "parents": [
        "9b1ca55bf3ff5fa1c3ff87bac9c7183bc421dc82"
      ],
      "author": {
        "name": "Daisuke Nishimura",
        "email": "nishimura@mxp.nes.nec.co.jp",
        "time": "Thu Oct 04 16:37:16 2012 +0900"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "cgroup: notify_on_release may not be triggered in some cases\n\ncommit 1f5320d5972aa50d3e8d2b227b636b370e608359 upstream.\n\nnotify_on_release must be triggered when the last process in a cgroup is\nmove to another. But if the first(and only) process in a cgroup is moved to\nanother, notify_on_release is not triggered.\n\n\t# mkdir /cgroup/cpu/SRC\n\t# mkdir /cgroup/cpu/DST\n\t#\n\t# echo 1 \u003e/cgroup/cpu/SRC/notify_on_release\n\t# echo 1 \u003e/cgroup/cpu/DST/notify_on_release\n\t#\n\t# sleep 300 \u0026\n\t[1] 8629\n\t#\n\t# echo 8629 \u003e/cgroup/cpu/SRC/tasks\n\t# echo 8629 \u003e/cgroup/cpu/DST/tasks\n\t-\u003e notify_on_release for /SRC must be triggered at this point,\n\t   but it isn\u0027t.\n\nThis is because put_css_set() is called before setting CGRP_RELEASABLE\nin cgroup_task_migrate(), and is a regression introduce by the\ncommit:74a1166d(cgroups: make procs file writable), which was merged\ninto v3.0.\n\nAcked-by: Li Zefan \u003clizefan@huawei.com\u003e\nCc: Ben Blum \u003cbblum@andrew.cmu.edu\u003e\nSigned-off-by: Daisuke Nishimura \u003cnishimura@mxp.nes.nec.co.jp\u003e\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9b1ca55bf3ff5fa1c3ff87bac9c7183bc421dc82",
      "tree": "dcbef4d0458f62ed03810565bb3c6411a25ac2b0",
      "parents": [
        "f9353fb64e1cfb7a1218fbd610df1980a40b1c9b"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Thu Oct 18 17:14:17 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "USB: option: add more ZTE devices\n\ncommit 4b35f1c52943851b310afb09047bfe991ac8f5ae upstream.\n\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f9353fb64e1cfb7a1218fbd610df1980a40b1c9b",
      "tree": "c4acac35298efc2c9451dabe40038e2ebf8b21b7",
      "parents": [
        "045b361901efac992f4ffd773db7c32319ffe177"
      ],
      "author": {
        "name": "Bjørn Mork",
        "email": "bjorn@mork.no",
        "time": "Thu Oct 18 17:19:53 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "USB: option: blacklist net interface on ZTE devices\n\ncommit 1452df6f1b7e396d89c2a1fdbdc0e0e839f97671 upstream.\n\nBased on information from the ZTE Windows drivers.\n\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "045b361901efac992f4ffd773db7c32319ffe177",
      "tree": "dac2ea1e2a1d0bccf079f607e4d11f7283bd1780",
      "parents": [
        "a5204466fa5da21c4431d391101439d7f5f2b828"
      ],
      "author": {
        "name": "Alexis R. Cortes",
        "email": "alexis.cortes@ti.com",
        "time": "Wed Oct 17 14:09:12 2012 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "usb: host: xhci: New system added for Compliance Mode Patch on SN65LVPE502CP\n\ncommit 470809741a28c3092279f4e1f3f432e534d46068 upstream.\n\nThis minor change adds a new system to which the \"Fix Compliance Mode\non SN65LVPE502CP Hardware\" patch has to be applied also.\n\nSystem added:\nVendor: Hewlett-Packard. System Model: Z1\n\nSigned-off-by: Alexis R. Cortes \u003calexis.cortes@ti.com\u003e\nAcked-by: Sarah Sharp \u003csarah.a.sharp@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a5204466fa5da21c4431d391101439d7f5f2b828",
      "tree": "de416bc77ee425b9e5b6b8f2ea108d556cb441c1",
      "parents": [
        "e83863d3e7ead8c66c1cabb53d95ebd3c7f1805e"
      ],
      "author": {
        "name": "Nicolas Boullis",
        "email": "nboullis@debian.org",
        "time": "Tue Oct 16 00:06:23 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "usb: acm: fix the computation of the number of data bits\n\ncommit 301a29da6e891e7eb95c843af0ecdbe86d01f723 upstream.\n\nThe current code assumes that CSIZE is 0000060, which appears to be\nwrong on some arches (such as powerpc).\n\nSigned-off-by: Nicolas Boullis \u003cnboullis@debian.org\u003e\nAcked-by: Oliver Neukum \u003coneukum@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e83863d3e7ead8c66c1cabb53d95ebd3c7f1805e",
      "tree": "dc86dd7554b34dc95f2aa4a7529a256f4e591d35",
      "parents": [
        "cf32a3a3e7b9a449e3b51bc8114d623d52fa9c5f"
      ],
      "author": {
        "name": "Ming Lei",
        "email": "ming.lei@canonical.com",
        "time": "Tue Oct 16 21:21:21 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:14 2012 -0700"
      },
      "message": "USB: cdc-acm: fix pipe type of write endpoint\n\ncommit c5211187f7ff8e8dbff4ebf7c011ac4c0ffe319c upstream.\n\nIf the write endpoint is interrupt type, usb_sndintpipe() should\nbe passed to usb_fill_int_urb() instead of usb_sndbulkpipe().\n\nSigned-off-by: Ming Lei \u003cming.lei@canonical.com\u003e\nCc: Oliver Neukum \u003coneukum@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "cf32a3a3e7b9a449e3b51bc8114d623d52fa9c5f",
      "tree": "bdf324d90e8e49d060525a17122e924675252173",
      "parents": [
        "efd5fa0c1a1d1b46846ea6e8d1a783d0d8a6a721"
      ],
      "author": {
        "name": "David Vrabel",
        "email": "david.vrabel@citrix.com",
        "time": "Fri Oct 19 17:29:07 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "xen/x86: don\u0027t corrupt %eip when returning from a signal handler\n\ncommit a349e23d1cf746f8bdc603dcc61fae9ee4a695f6 upstream.\n\nIn 32 bit guests, if a userspace process has %eax \u003d\u003d -ERESTARTSYS\n(-512) or -ERESTARTNOINTR (-513) when it is interrupted by an event\n/and/ the process has a pending signal then %eip (and %eax) are\ncorrupted when returning to the main process after handling the\nsignal.  The application may then crash with SIGSEGV or a SIGILL or it\nmay have subtly incorrect behaviour (depending on what instruction it\nreturned to).\n\nThe occurs because handle_signal() is incorrectly thinking that there\nis a system call that needs to restarted so it adjusts %eip and %eax\nto re-execute the system call instruction (even though user space had\nnot done a system call).\n\nIf %eax \u003d\u003d -514 (-ERESTARTNOHAND (-514) or -ERESTART_RESTARTBLOCK\n(-516) then handle_signal() only corrupted %eax (by setting it to\n-EINTR).  This may cause the application to crash or have incorrect\nbehaviour.\n\nhandle_signal() assumes that regs-\u003eorig_ax \u003e\u003d 0 means a system call so\nany kernel entry point that is not for a system call must push a\nnegative value for orig_ax.  For example, for physical interrupts on\nbare metal the inverse of the vector is pushed and page_fault() sets\nregs-\u003eorig_ax to -1, overwriting the hardware provided error code.\n\nxen_hypervisor_callback() was incorrectly pushing 0 for orig_ax\ninstead of -1.\n\nClassic Xen kernels pushed %eax which works as %eax cannot be both\nnon-negative and -RESTARTSYS (etc.), but using -1 is consistent with\nother non-system call entry points and avoids some of the tests in\nhandle_signal().\n\nThere were similar bugs in xen_failsafe_callback() of both 32 and\n64-bit guests. If the fault was corrected and the normal return path\nwas used then 0 was incorrectly pushed as the value for orig_ax.\n\nSigned-off-by: David Vrabel \u003cdavid.vrabel@citrix.com\u003e\nAcked-by: Jan Beulich \u003cJBeulich@suse.com\u003e\nAcked-by: Ian Campbell \u003cian.campbell@citrix.com\u003e\nSigned-off-by: Konrad Rzeszutek Wilk \u003ckonrad.wilk@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "efd5fa0c1a1d1b46846ea6e8d1a783d0d8a6a721",
      "tree": "543b6ed2d42e8a9a3e7066fb3d3f15740f189bc3",
      "parents": [
        "3680030e9747dfa51fe9c1850361c29ae0ad20fe"
      ],
      "author": {
        "name": "Jacob Shin",
        "email": "jacob.shin@amd.com",
        "time": "Thu Oct 20 16:15:26 2011 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "x86: Exclude E820_RESERVED regions and memory holes above 4 GB from direct mapping.\n\ncommit 1bbbbe779aabe1f0768c2bf8f8c0a5583679b54a upstream.\n\nOn systems with very large memory (1 TB in our case), BIOS may report a\nreserved region or a hole in the E820 map, even above the 4 GB range. Exclude\nthese from the direct mapping.\n\n[ hpa: this should be done not just for \u003e 4 GB but for everything above the legacy\n  region (1 MB), at the very least.  That, however, turns out to require significant\n  restructuring.  That work is well underway, but is not suitable for rc/stable. ]\n\nSigned-off-by: Jacob Shin \u003cjacob.shin@amd.com\u003e\nLink: http://lkml.kernel.org/r/1319145326-13902-1-git-send-email-jacob.shin@amd.com\nSigned-off-by: H. Peter Anvin \u003chpa@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3680030e9747dfa51fe9c1850361c29ae0ad20fe",
      "tree": "e48ee344079012b024e949657314f7a184004a28",
      "parents": [
        "643fde8ed4ea75f5d113803084806eff14d97454"
      ],
      "author": {
        "name": "Kees Cook",
        "email": "keescook@chromium.org",
        "time": "Fri Oct 19 18:45:53 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "use clamp_t in UNAME26 fix\n\ncommit 31fd84b95eb211d5db460a1dda85e004800a7b52 upstream.\n\nThe min/max call needed to have explicit types on some architectures\n(e.g. mn10300). Use clamp_t instead to avoid the warning:\n\n  kernel/sys.c: In function \u0027override_release\u0027:\n  kernel/sys.c:1287:10: warning: comparison of distinct pointer types lacks a cast [enabled by default]\n\nReported-by: Fengguang Wu \u003cfengguang.wu@intel.com\u003e\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "643fde8ed4ea75f5d113803084806eff14d97454",
      "tree": "89ce9d1661b1bfffb06a26b3b112f1df9d5181ed",
      "parents": [
        "6eca486b8d28b1fe1d147cf55dfb8832099bb0a2"
      ],
      "author": {
        "name": "Kees Cook",
        "email": "keescook@chromium.org",
        "time": "Fri Oct 19 13:56:51 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "kernel/sys.c: fix stack memory content leak via UNAME26\n\ncommit 2702b1526c7278c4d65d78de209a465d4de2885e upstream.\n\nCalling uname() with the UNAME26 personality set allows a leak of kernel\nstack contents.  This fixes it by defensively calculating the length of\ncopy_to_user() call, making the len argument unsigned, and initializing\nthe stack buffer to zero (now technically unneeded, but hey, overkill).\n\nCVE-2012-0957\n\nReported-by: PaX Team \u003cpageexec@freemail.hu\u003e\nSigned-off-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCc: Andi Kleen \u003cak@linux.intel.com\u003e\nCc: PaX Team \u003cpageexec@freemail.hu\u003e\nCc: Brad Spengler \u003cspender@grsecurity.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6eca486b8d28b1fe1d147cf55dfb8832099bb0a2",
      "tree": "43c440a58cbddf8af170d87e24c2142635d01403",
      "parents": [
        "9b62355a6daff8696ec7f7b1283b6a39650b9f14"
      ],
      "author": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Mon Apr 30 13:50:56 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "pcmcia: sharpsl: don\u0027t discard sharpsl_pcmcia_ops\n\ncommit fdc858a466b738d35d3492bc7cf77b1dac98bf7c upstream.\n\nThe sharpsl_pcmcia_ops structure gets passed into\nsa11xx_drv_pcmcia_probe, where it gets accessed at run-time,\nunlike all other pcmcia drivers that pass their structures\ninto platform_device_add_data, which makes a copy.\n\nThis means the gcc warning is valid and the structure\nmust not be marked as __initdata.\n\nWithout this patch, building collie_defconfig results in:\n\ndrivers/pcmcia/pxa2xx_sharpsl.c:22:31: fatal error: mach-pxa/hardware.h: No such file or directory\ncompilation terminated.\nmake[3]: *** [drivers/pcmcia/pxa2xx_sharpsl.o] Error 1\nmake[2]: *** [drivers/pcmcia] Error 2\nmake[1]: *** [drivers] Error 2\nmake: *** [sub-make] Error 2\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: Dominik Brodowski \u003clinux@dominikbrodowski.net\u003e\nCc: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nCc: Pavel Machek \u003cpavel@suse.cz\u003e\nCc: linux-pcmcia@lists.infradead.org\nCc: Jochen Friedrich \u003cjochen@scram.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9b62355a6daff8696ec7f7b1283b6a39650b9f14",
      "tree": "3e61e0e953d36b3f6b8705384bec209dcc228425",
      "parents": [
        "baecc6ef799c7ab9a5fc0ba29ee560a5c264f306"
      ],
      "author": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Mon Oct 22 12:56:58 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "SUNRPC: Fix a UDP transport regression\n\ncommit f39c1bfb5a03e2d255451bff05be0d7255298fa4 and\ncommit 84e28a307e376f271505af65a7b7e212dd6f61f4 upstream.\n\nCommit 43cedbf0e8dfb9c5610eb7985d5f21263e313802 (SUNRPC: Ensure that\nwe grab the XPRT_LOCK before calling xprt_alloc_slot) is causing\nhangs in the case of NFS over UDP mounts.\n\nSince neither the UDP or the RDMA transport mechanism use dynamic slot\nallocation, we can skip grabbing the socket lock for those transports.\nAdd a new rpc_xprt_op to allow switching between the TCP and UDP/RDMA\ncase.\n\nNote that the NFSv4.1 back channel assigns the slot directly\nthrough rpc_run_bc_task, so we can ignore that case.\n\nReported-by: Dick Streefland \u003cdick.streefland@altium.nl\u003e\nSigned-off-by: Bryan Schumaker \u003cbjschuma@netapp.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "baecc6ef799c7ab9a5fc0ba29ee560a5c264f306",
      "tree": "ea9f341b7b0f2907d574dde7a8a588b2b7e1633e",
      "parents": [
        "1b91a891bc337ecec08dea5436be0bbb03fec12b"
      ],
      "author": {
        "name": "Sasha Levin",
        "email": "levinsasha928@gmail.com",
        "time": "Tue Jul 17 00:01:26 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "SUNRPC: Prevent kernel stack corruption on long values of flush\n\ncommit 212ba90696ab4884e2025b0b13726d67aadc2cd4 upstream.\n\nThe buffer size in read_flush() is too small for the longest possible values\nfor it. This can lead to a kernel stack corruption:\n\n[   43.047329] Kernel panic - not syncing: stack-protector: Kernel stack is corrupted in: ffffffff833e64b4\n[   43.047329]\n[   43.049030] Pid: 6015, comm: trinity-child18 Tainted: G        W    3.5.0-rc7-next-20120716-sasha #221\n[   43.050038] Call Trace:\n[   43.050435]  [\u003cffffffff836c60c2\u003e] panic+0xcd/0x1f4\n[   43.050931]  [\u003cffffffff833e64b4\u003e] ? read_flush.isra.7+0xe4/0x100\n[   43.051602]  [\u003cffffffff810e94e6\u003e] __stack_chk_fail+0x16/0x20\n[   43.052206]  [\u003cffffffff833e64b4\u003e] read_flush.isra.7+0xe4/0x100\n[   43.052951]  [\u003cffffffff833e6500\u003e] ? read_flush_pipefs+0x30/0x30\n[   43.053594]  [\u003cffffffff833e652c\u003e] read_flush_procfs+0x2c/0x30\n[   43.053596]  [\u003cffffffff812b9a8c\u003e] proc_reg_read+0x9c/0xd0\n[   43.053596]  [\u003cffffffff812b99f0\u003e] ? proc_reg_write+0xd0/0xd0\n[   43.053596]  [\u003cffffffff81250d5b\u003e] do_loop_readv_writev+0x4b/0x90\n[   43.053596]  [\u003cffffffff81250fd6\u003e] do_readv_writev+0xf6/0x1d0\n[   43.053596]  [\u003cffffffff812510ee\u003e] vfs_readv+0x3e/0x60\n[   43.053596]  [\u003cffffffff812511b8\u003e] sys_readv+0x48/0xb0\n[   43.053596]  [\u003cffffffff8378167d\u003e] system_call_fastpath+0x1a/0x1f\n\nSigned-off-by: Sasha Levin \u003clevinsasha928@gmail.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "1b91a891bc337ecec08dea5436be0bbb03fec12b",
      "tree": "700654d4be48dd58f88236b13012be07ca9de251",
      "parents": [
        "d641457de0939adaa140161127f2f72bcfe50b37"
      ],
      "author": {
        "name": "Heiko Carstens",
        "email": "heiko.carstens@de.ibm.com",
        "time": "Thu Oct 18 11:11:01 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "s390: fix linker script for 31 bit builds\n\ncommit c985cb37f1b39c2c8035af741a2a0b79f1fbaca7 upstream.\n\nBecause of a change in the s390 arch backend of binutils (commit 23ecd77\n\"Pick the default arch depending on the target size\" in binutils repo)\n31 bit builds will fail since the linker would now try to create 64 bit\nbinary output.\nFix this by setting OUTPUT_ARCH to s390:31-bit instead of s390.\nThanks to Andreas Krebbel for figuring out the issue.\n\nFixes this build error:\n\n  LD      init/built-in.o\ns390x-4.7.2-ld: s390:31-bit architecture of input file\n `arch/s390/kernel/head.o\u0027 is incompatible with s390:64-bit output\n\nCc: Andreas Krebbel \u003cAndreas.Krebbel@de.ibm.com\u003e\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d641457de0939adaa140161127f2f72bcfe50b37",
      "tree": "5bf6f9663c90eb1f04b2e2db0a3a84770af1ce28",
      "parents": [
        "08eaf6a4ee82eb566c188f71b33f52e780fab57d"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Wed Oct 10 10:18:35 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "oprofile, x86: Fix wrapping bug in op_x86_get_ctrl()\n\ncommit 44009105081b51417f311f4c3be0061870b6b8ed upstream.\n\nThe \"event\" variable is a u16 so the shift will always wrap to zero\nmaking the line a no-op.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: Robert Richter \u003crobert.richter@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "08eaf6a4ee82eb566c188f71b33f52e780fab57d",
      "tree": "5542ba56a9cd7feccae5af3bbde61248537ba5bf",
      "parents": [
        "75383fac9206c9dc57a5f153ffabcd5341ad0c28"
      ],
      "author": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Sat Oct 13 00:30:28 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:13 2012 -0700"
      },
      "message": "NLM: nlm_lookup_file() may return NLMv4-specific error codes\n\ncommit cd0b16c1c3cda12dbed1f8de8f1a9b0591990724 upstream.\n\nIf the filehandle is stale, or open access is denied for some reason,\nnlm_fopen() may return one of the NLMv4-specific error codes nlm4_stale_fh\nor nlm4_failed. These get passed right through nlm_lookup_file(),\nand so when nlmsvc_retrieve_args() calls the latter, it needs to filter\nthe result through the cast_status() machinery.\n\nFailure to do so, will trigger the BUG_ON() in encode_nlm_stat...\n\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nReported-by: Larry McVoy \u003clm@bitmover.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "75383fac9206c9dc57a5f153ffabcd5341ad0c28",
      "tree": "fa0dcdefe2119b23741a049854512a0e5e19f52b",
      "parents": [
        "d39bd2701f0f414aba1376ae61202b526ec7e128"
      ],
      "author": {
        "name": "Chris Metcalf",
        "email": "cmetcalf@tilera.com",
        "time": "Fri Oct 19 11:43:11 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:12 2012 -0700"
      },
      "message": "arch/tile: avoid generating .eh_frame information in modules\n\ncommit 627072b06c362bbe7dc256f618aaa63351f0cfe6 upstream.\n\nThe tile tool chain uses the .eh_frame information for backtracing.\nThe vmlinux build drops any .eh_frame sections at link time, but when\npresent in kernel modules, it causes a module load failure due to the\npresence of unsupported pc-relative relocations.  When compiling to\nuse compiler feedback support, the compiler by default omits .eh_frame\ninformation, so we don\u0027t see this problem.  But when not using feedback,\nwe need to explicitly suppress the .eh_frame.\n\nSigned-off-by: Chris Metcalf \u003ccmetcalf@tilera.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "d39bd2701f0f414aba1376ae61202b526ec7e128",
      "tree": "6d47662cb049804b9dc88064caaea4f0e4ca8fc2",
      "parents": [
        "2807664df50419f56b596aa49da8a22102c0e0a3"
      ],
      "author": {
        "name": "Michal Hocko",
        "email": "mhocko@suse.cz",
        "time": "Wed Oct 10 11:51:09 2012 +0530"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:12 2012 -0700"
      },
      "message": "nohz: Fix idle ticks in cpu summary line of /proc/stat\n\ncommit 7386cdbf2f57ea8cff3c9fde93f206e58b9fe13f upstream.\n\nGit commit 09a1d34f8535ecf9 \"nohz: Make idle/iowait counter update\nconditional\" introduced a bug in regard to cpu hotplug. The effect is\nthat the number of idle ticks in the cpu summary line in /proc/stat is\nstill counting ticks for offline cpus.\n\nReproduction is easy, just start a workload that keeps all cpus busy,\nswitch off one or more cpus and then watch the idle field in top.\nOn a dual-core with one cpu 100% busy and one offline cpu you will get\nsomething like this:\n\n%Cpu(s): 48.7 us,  1.3 sy,  0.0 ni, 50.0 id,  0.0 wa,  0.0 hi,  0.0 si,\n%0.0 st\n\nThe problem is that an offline cpu still has ts-\u003eidle_active \u003d\u003d 1.\nTo fix this we should make sure that the cpu is online when calling\nget_cpu_idle_time_us and get_cpu_iowait_time_us.\n\n[Srivatsa: Rebased to current mainline]\n\nReported-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nReviewed-by: Srivatsa S. Bhat \u003csrivatsa.bhat@linux.vnet.ibm.com\u003e\nSigned-off-by: Srivatsa S. Bhat \u003csrivatsa.bhat@linux.vnet.ibm.com\u003e\nLink: http://lkml.kernel.org/r/20121010061820.8999.57245.stgit@srivatsabhat.in.ibm.com\nCc: deepthi@linux.vnet.ibm.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "2807664df50419f56b596aa49da8a22102c0e0a3",
      "tree": "10093e02bec717aec954d34265189fcb067b2828",
      "parents": [
        "4319fd00002630a761fa5559a086f11ed7623006"
      ],
      "author": {
        "name": "Lukas Czerner",
        "email": "lczerner@redhat.com",
        "time": "Mon Oct 22 18:01:19 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:12 2012 -0700"
      },
      "message": "ext4: Avoid underflow in ext4_trim_fs()\n\ncommit 5de35e8d5c02d271c20e18337e01bc20e6ef472e upstream.\n\nCurrently if len argument in ext4_trim_fs() is smaller than one block,\nthe \u0027end\u0027 variable underflow. Avoid that by returning EINVAL if len is\nsmaller than file system block.\n\nAlso remove useless unlikely().\n\nSigned-off-by: Lukas Czerner \u003clczerner@redhat.com\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4319fd00002630a761fa5559a086f11ed7623006",
      "tree": "c6af97d9649f3b95787bd9fe688a837a0a206ba2",
      "parents": [
        "553f672df76c6213b9a7e644b1d878204a61e013"
      ],
      "author": {
        "name": "Dmitry Monakhov",
        "email": "dmonakhov@openvz.org",
        "time": "Wed Oct 10 01:04:58 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 28 10:14:12 2012 -0700"
      },
      "message": "ext4: race-condition protection for ext4_convert_unwritten_extents_endio\n\ncommit dee1f973ca341c266229faa5a1a5bb268bed3531 upstream.\n\nWe assumed that at the time we call ext4_convert_unwritten_extents_endio()\nextent in question is fully inside [map.m_lblk, map-\u003em_len] because\nit was already split during submission.  But this may not be true due to\na race between writeback vs fallocate.\n\nIf extent in question is larger than requested we will split it again.\nSpecial precautions should being done if zeroout required because\n[map.m_lblk, map-\u003em_len] already contains valid data.\n\nSigned-off-by: Dmitry Monakhov \u003cdmonakhov@openvz.org\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "553f672df76c6213b9a7e644b1d878204a61e013",
      "tree": "6320bfc2179925867aabd7a6fe66fcd67b771e8f",
      "parents": [
        "a6b5c98460148487422c5ceb5bcc88cfdb0a850f"
      ],
      "author": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:17 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:17 2012 -0700"
      },
      "message": "Linux 3.4.15\n"
    },
    {
      "commit": "a6b5c98460148487422c5ceb5bcc88cfdb0a850f",
      "tree": "afffc6a7c0e792232b8d7221e711e76231a60232",
      "parents": [
        "e503f73ae9607b0d4854a40a2f437cfbee529fa3"
      ],
      "author": {
        "name": "Maxim Kachur",
        "email": "mcdebugger@duganet.ru",
        "time": "Wed Oct 17 18:18:10 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:02 2012 -0700"
      },
      "message": "ALSA: emu10k1: add chip details for E-mu 1010 PCIe card\n\ncommit 10f571d09106c3eb85951896522c9650596eff2e upstream.\n\nAdd chip details for E-mu 1010 PCIe card. It has the same\nchip as found in E-mu 1010b but it uses different PCI id.\n\nSigned-off-by: Maxim Kachur \u003cmcdebugger@duganet.ru\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e503f73ae9607b0d4854a40a2f437cfbee529fa3",
      "tree": "12244ee8ab60790b4a2553ec0e6a0077ae99a15d",
      "parents": [
        "60dd77abe18a5a3eb21c4041f6ea02b45c421cc5"
      ],
      "author": {
        "name": "Takashi Iwai",
        "email": "tiwai@suse.de",
        "time": "Thu Oct 11 16:43:40 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:02 2012 -0700"
      },
      "message": "ALSA: ac97 - Fix missing NULL check in snd_ac97_cvol_new()\n\ncommit 733a48e5ae5bf28b046fad984d458c747cbb8c21 upstream.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d44721\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "60dd77abe18a5a3eb21c4041f6ea02b45c421cc5",
      "tree": "c8f0a959c46a4836090f370addcf910147a9c615",
      "parents": [
        "eb695eec8d6fc5b757c05c6538346ef04d091055"
      ],
      "author": {
        "name": "Peter Ujfalusi",
        "email": "peter.ujfalusi@ti.com",
        "time": "Tue Oct 02 15:31:16 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:02 2012 -0700"
      },
      "message": "ASoC: omap-abe-twl6040: Fix typo of Vibrator\n\ncommit 034940a6b3afbe79022ab6922dd9d2982b78e6d5 upstream.\n\nIt is not Vinrator but Vibrator.\n\nSigned-off-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "eb695eec8d6fc5b757c05c6538346ef04d091055",
      "tree": "2a7c563a669bd19e794f9bc7018cfba590337f70",
      "parents": [
        "efd9aa3512ecac932b8b9baebd4ca00c3a44394f"
      ],
      "author": {
        "name": "Mark Brown",
        "email": "broonie@opensource.wolfsonmicro.com",
        "time": "Tue Oct 02 19:10:43 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:02 2012 -0700"
      },
      "message": "ASoC: wm2200: Fix non-inverted OUT2 mute control\n\ncommit a1b98e12b7f8fad2f0aa3c08a3302bcac7ae1ec7 upstream.\n\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "efd9aa3512ecac932b8b9baebd4ca00c3a44394f",
      "tree": "286eff0cf0ee53657fa6a2e12bf3292c9f7cbfe1",
      "parents": [
        "e9eeac8fd06a74dfcadac8970b7d5797dab652c1"
      ],
      "author": {
        "name": "Mark Brown",
        "email": "broonie@opensource.wolfsonmicro.com",
        "time": "Tue Oct 02 12:02:48 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "ASoC: wm2200: Use rev A register patches on rev B\n\ncommit 5ae9eb4cbdfd640269dbd66aa3c92ea8e11cc838 upstream.\n\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e9eeac8fd06a74dfcadac8970b7d5797dab652c1",
      "tree": "cde49daf7dfaf015b5329ccbb6b2ae1b6ca48e7a",
      "parents": [
        "bb4e97376e84d98994a5f576e2bd080d3aeee232"
      ],
      "author": {
        "name": "Guennadi Liakhovetski",
        "email": "g.liakhovetski@gmx.de",
        "time": "Wed Oct 03 14:33:50 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "ASoC: fsi: don\u0027t reschedule DMA from an atomic context\n\ncommit 57451e437796548d658d03c2c4aab659eafcd799 upstream.\n\nshdma doesn\u0027t support transfer re-scheduling or triggering from callbacks\nor from atomic context. The fsi driver issues DMA transfers from a tasklet\ncontext, which is a bug. To fix it convert tasklet to a work.\n\nReported-by: Do Q.Thang \u003cdq-thang@jinso.co.jp\u003e\nTested-by: Do Q.Thang \u003cdq-thang@jinso.co.jp\u003e\nSigned-off-by: Guennadi Liakhovetski \u003cg.liakhovetski@gmx.de\u003e\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "bb4e97376e84d98994a5f576e2bd080d3aeee232",
      "tree": "870a9df57630a164c3520d1c663b009d97711375",
      "parents": [
        "7ec51fc74149ac5caafffce2b065e25ef621e2c1"
      ],
      "author": {
        "name": "David Henningsson",
        "email": "david.henningsson@canonical.com",
        "time": "Wed Oct 17 12:43:44 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "ALSA: hda - Always check array bounds in alc_get_line_out_pfx\n\ncommit 71aa5ebe36a4e936eff281b375a4707b6a8320f2 upstream.\n\nEven when CONFIG_SND_DEBUG is not enabled, we don\u0027t want to\nreturn an arbitrary memory location when the channel count is\nlarger than we expected.\n\nSigned-off-by: David Henningsson \u003cdavid.henningsson@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7ec51fc74149ac5caafffce2b065e25ef621e2c1",
      "tree": "b409386c565a5fdec3cb26a961d53cc593d80d56",
      "parents": [
        "a5b9aa5533324fc9e3c2abe24ef335245473c331"
      ],
      "author": {
        "name": "Fabio Porcedda",
        "email": "fabio.porcedda@gmail.com",
        "time": "Fri Sep 07 15:27:42 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "usb: gadget: at91_udc: fix dt support\n\ncommit 9c6d196d5aa35e07482f23c3e37755e7a82140e0 upstream.\n\nDon\u0027t fail the initialization check for the platform_data\nif there is avaiable an associated device tree node.\n\nSigned-off-by: Fabio Porcedda \u003cfabio.porcedda@gmail.com\u003e\nSigned-off-by: Felipe Balbi \u003cbalbi@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a5b9aa5533324fc9e3c2abe24ef335245473c331",
      "tree": "756d6bdab6d892d668494515873fa4d51b6d3d72",
      "parents": [
        "e7ba1a13e4c4d315d94afb45e6dfaa7c543d9ba2"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Wed Sep 12 18:38:00 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "eCryptfs: Call lower -\u003eflush() from ecryptfs_flush()\n\ncommit 64e6651dcc10e9d2cc6230208a8e6c2cfd19ae18 upstream.\n\nSince eCryptfs only calls fput() on the lower file in\necryptfs_release(), eCryptfs should call the lower filesystem\u0027s\n-\u003eflush() from ecryptfs_flush().\n\nIf the lower filesystem implements -\u003eflush(), then eCryptfs should try\nto flush out any dirty pages prior to calling the lower -\u003eflush(). If\nthe lower filesystem does not implement -\u003eflush(), then eCryptfs has no\nneed to do anything in ecryptfs_flush() since dirty pages are now\nwritten out to the lower filesystem in ecryptfs_release().\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e7ba1a13e4c4d315d94afb45e6dfaa7c543d9ba2",
      "tree": "c41ea530fda66b932081eafbc37cfe7f45ff004a",
      "parents": [
        "068478a54bcd742e34b80f316472f3b06cacd8c6"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Wed Sep 12 18:02:46 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "eCryptfs: Write out all dirty pages just before releasing the lower file\n\ncommit 7149f2558d5b5b988726662fe58b1c388337805b upstream.\n\nFixes a regression caused by:\n\n821f749 eCryptfs: Revert to a writethrough cache model\n\nThat patch reverted some code (specifically, 32001d6f) that was\nnecessary to properly handle open() -\u003e mmap() -\u003e close() -\u003e dirty pages\n-\u003e munmap(), because the lower file could be closed before the dirty\npages are written out.\n\nRather than reapplying 32001d6f, this approach is a better way of\nensuring that the lower file is still open in order to handle writing\nout the dirty pages. It is called from ecryptfs_release(), while we have\na lock on the lower file pointer, just before the lower file gets the\nfinal fput() and we overwrite the pointer.\n\nhttps://launchpad.net/bugs/1047261\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nReported-by: Artemy Tregubenko \u003cme@arty.name\u003e\nTested-by: Artemy Tregubenko \u003cme@arty.name\u003e\nTested-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "068478a54bcd742e34b80f316472f3b06cacd8c6",
      "tree": "70e9c795784d1df37f7575c2306ebcaec567c9f4",
      "parents": [
        "47bd3aa366784c052e7e9a1acf80cd8c8e9df10b"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Tue Jul 03 16:50:57 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "eCryptfs: Revert to a writethrough cache model\n\ncommit 821f7494a77627fb1ab539591c57b22cdca702d6 upstream.\n\nA change was made about a year ago to get eCryptfs to better utilize its\npage cache during writes. The idea was to do the page encryption\noperations during page writeback, rather than doing them when initially\nwriting into the page cache, to reduce the number of page encryption\noperations during sequential writes. This meant that the encrypted page\nwould only be written to the lower filesystem during page writeback,\nwhich was a change from how eCryptfs had previously wrote to the lower\nfilesystem in ecryptfs_write_end().\n\nThe change caused a few eCryptfs-internal bugs that were shook out.\nUnfortunately, more grave side effects have been identified that will\nforce changes outside of eCryptfs. Because the lower filesystem isn\u0027t\nconsulted until page writeback, eCryptfs has no way to pass lower write\nerrors (ENOSPC, mainly) back to userspace. Additionaly, it was reported\nthat quotas could be bypassed because of the way eCryptfs may sometimes\nopen the lower filesystem using a privileged kthread.\n\nIt would be nice to resolve the latest issues, but it is best if the\neCryptfs commits be reverted to the old behavior in the meantime.\n\nThis reverts:\n32001d6f \"eCryptfs: Flush file in vma close\"\n5be79de2 \"eCryptfs: Flush dirty pages in setattr\"\n57db4e8d \"ecryptfs: modify write path to encrypt page in writepage\"\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nTested-by: Colin King \u003ccolin.king@canonical.com\u003e\nCc: Colin King \u003ccolin.king@canonical.com\u003e\nCc: Thieu Le \u003cthieule@google.com\u003e\nCc: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "47bd3aa366784c052e7e9a1acf80cd8c8e9df10b",
      "tree": "f39775e020081027d2207daf1daf0ceaa3d337d7",
      "parents": [
        "4fd441539be925bf3cbbfe88f9371317a952529b"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Wed Jun 20 23:50:59 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "eCryptfs: Initialize empty lower files when opening them\n\ncommit e3ccaa9761200952cc269b1f4b7d7bb77a5e071b upstream.\n\nHistorically, eCryptfs has only initialized lower files in the\necryptfs_create() path. Lower file initialization is the act of writing\nthe cryptographic metadata from the inode\u0027s crypt_stat to the header of\nthe file. The ecryptfs_open() path already expects that metadata to be\nin the header of the file.\n\nA number of users have reported empty lower files in beneath their\neCryptfs mounts. Most of the causes for those empty files being left\naround have been addressed, but the presence of empty files causes\nproblems due to the lack of proper cryptographic metadata.\n\nTo transparently solve this problem, this patch initializes empty lower\nfiles in the ecryptfs_open() error path. If the metadata is unreadable\ndue to the lower inode size being 0, plaintext passthrough support is\nnot in use, and the metadata is stored in the header of the file (as\nopposed to the user.ecryptfs extended attribute), the lower file will be\ninitialized.\n\nThe number of nested conditionals in ecryptfs_open() was getting out of\nhand, so a helper function was created. To avoid the same nested\nconditional problem, the conditional logic was reversed inside of the\nhelper function.\n\nhttps://launchpad.net/bugs/911507\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nCc: John Johansen \u003cjohn.johansen@canonical.com\u003e\nCc: Colin Ian King \u003ccolin.king@canonical.com\u003e\nCc: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "4fd441539be925bf3cbbfe88f9371317a952529b",
      "tree": "0dacbbb315640ccf289604fa4384643f85b7ed23",
      "parents": [
        "8abffa895c8a6c6079e93db68f5eb5e4a2332a82"
      ],
      "author": {
        "name": "Tyler Hicks",
        "email": "tyhicks@canonical.com",
        "time": "Tue May 22 15:09:50 2012 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "eCryptfs: Unlink lower inode when ecryptfs_create() fails\n\ncommit 8bc2d3cf612994a960c2e8eaea37f6676f67082a upstream.\n\necryptfs_create() creates a lower inode, allocates an eCryptfs inode,\ninitializes the eCryptfs inode and cryptographic metadata attached to\nthe inode, and then writes the metadata to the header of the file.\n\nIf an error was to occur after the lower inode was created, an empty\nlower file would be left in the lower filesystem. This is a problem\nbecause ecryptfs_open() refuses to open any lower files which do not\nhave the appropriate metadata in the file header.\n\nThis patch properly unlinks the lower inode when an error occurs in the\nlater stages of ecryptfs_create(), reducing the chance that an empty\nlower file will be left in the lower filesystem.\n\nhttps://launchpad.net/bugs/872905\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nCc: John Johansen \u003cjohn.johansen@canonical.com\u003e\nCc: Colin Ian King \u003ccolin.king@canonical.com\u003e\nCc: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "8abffa895c8a6c6079e93db68f5eb5e4a2332a82",
      "tree": "a110b88a967169e269406b19aaedf771f598042e",
      "parents": [
        "f5e37c549d200e3b899b66d6a84e99c8e2cf5e59"
      ],
      "author": {
        "name": "Peter Huewe",
        "email": "peter.huewe@infineon.com",
        "time": "Thu Sep 27 16:09:33 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "tpm: Propagate error from tpm_transmit to fix a timeout hang\n\ncommit abce9ac292e13da367bbd22c1f7669f988d931ac upstream.\n\ntpm_write calls tpm_transmit without checking the return value and\nassigns the return value unconditionally to chip-\u003epending_data, even if\nit\u0027s an error value.\nThis causes three bugs.\n\nSo if we write to /dev/tpm0 with a tpm_param_size bigger than\nTPM_BUFSIZE\u003d0x1000 (e.g. 0x100a)\nand a bufsize also bigger than TPM_BUFSIZE (e.g. 0x100a)\ntpm_transmit returns -E2BIG which is assigned to chip-\u003epending_data as\n-7, but tpm_write returns that TPM_BUFSIZE bytes have been successfully\nbeen written to the TPM, altough this is not true (bug #1).\n\nAs we did write more than than TPM_BUFSIZE bytes but tpm_write reports\nthat only TPM_BUFSIZE bytes have been written the vfs tries to write\nthe remaining bytes (in this case 10 bytes) to the tpm device driver via\ntpm_write which then blocks at\n\n /* cannot perform a write until the read has cleared\n either via tpm_read or a user_read_timer timeout */\n while (atomic_read(\u0026chip-\u003edata_pending) !\u003d 0)\n\t msleep(TPM_TIMEOUT);\n\nfor 60 seconds, since data_pending is -7 and nobody is able to\nread it (since tpm_read luckily checks if data_pending is greater than\n0) (#bug 2).\n\nAfter that the remaining bytes are written to the TPM which are\ninterpreted by the tpm as a normal command. (bug #3)\nSo if the last bytes of the command stream happen to be a e.g.\ntpm_force_clear this gets accidentally sent to the TPM.\n\nThis patch fixes all three bugs, by propagating the error code of\ntpm_write and returning -E2BIG if the input buffer is too big,\nsince the response from the tpm for a truncated value is bogus anyway.\nMoreover it returns -EBUSY to userspace if there is a response ready to be\nread.\n\nSigned-off-by: Peter Huewe \u003cpeter.huewe@infineon.com\u003e\nSigned-off-by: Kent Yoder \u003ckey@linux.vnet.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "f5e37c549d200e3b899b66d6a84e99c8e2cf5e59",
      "tree": "f972d3dc71361b3e900d9c3b283e91befcd82635",
      "parents": [
        "ea05dc56faeea5a3e0eaafe6de9fae196ed7f036"
      ],
      "author": {
        "name": "Hiroaki SHIMODA",
        "email": "shimoda.hiroaki@gmail.com",
        "time": "Wed Oct 10 15:34:20 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "e1000e: Change wthresh to 1 to avoid possible Tx stalls\n\ncommit 8edc0e624db3756783233e464879eb2e3b904c13 upstream.\n\nThis patch originated from Hiroaki SHIMODA but has been modified\nby Intel with some minor cleanups and additional commit log text.\n\nDenys Fedoryshchenko and others reported Tx stalls on e1000e with\nBQL enabled.  Issue was root caused to hardware delays. They were\nintroduced because some of the e1000e hardware with transmit\nwriteback bursting enabled, waits until the driver does an\nexplict flush OR there are WTHRESH descriptors to write back.\n\nSometimes the delays in question were on the order of seconds,\ncausing visible lag for ssh sessions and unacceptable tx\ncompletion latency, especially for BQL enabled kernels.\n\nTo avoid possible Tx stalls, change WTHRESH back to 1.\n\nThe current plan is to investigate a method for re-enabling\nWTHRESH while not harming BQL, but those patches will be later\nfor net-next if they work.\n\nplease enqueue for stable since v3.3 as this bug was introduced in\ncommit 3f0cfa3bc11e7f00c9994e0f469cbc0e7da7b00c\nAuthor: Tom Herbert \u003ctherbert@google.com\u003e\nDate:   Mon Nov 28 16:33:16 2011 +0000\n\n    e1000e: Support for byte queue limits\n\n    Changes to e1000e to use byte queue limits.\n\nReported-by: Denys Fedoryshchenko \u003cdenys@visp.net.lb\u003e\nTested-by: Denys Fedoryshchenko \u003cdenys@visp.net.lb\u003e\nSigned-off-by: Hiroaki SHIMODA \u003cshimoda.hiroaki@gmail.com\u003e\nCC: eric.dumazet@gmail.com\nCC: therbert@google.com\nSigned-off-by: Jesse Brandeburg \u003cjesse.brandeburg@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "ea05dc56faeea5a3e0eaafe6de9fae196ed7f036",
      "tree": "559c37bd822097139daa4ec8d01ca7cbaa9f2a5f",
      "parents": [
        "6a52f3c682cf4c191885d1029449d68fd60b40e6"
      ],
      "author": {
        "name": "Jan Kara",
        "email": "jack@suse.cz",
        "time": "Wed Jul 11 23:16:25 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:01 2012 -0700"
      },
      "message": "jbd: Fix assertion failure in commit code due to lacking transaction credits\n\ncommit 09e05d4805e6c524c1af74e524e5d0528bb3fef3 upstream.\n\next3 users of data\u003djournal mode with blocksize \u003c pagesize were occasionally\nhitting assertion failure in journal_commit_transaction() checking whether the\ntransaction has at least as many credits reserved as buffers attached.  The\ncore of the problem is that when a file gets truncated, buffers that still need\ncheckpointing or that are attached to the committing transaction are left with\nbuffer_mapped set. When this happens to buffers beyond i_size attached to a\npage stradding i_size, subsequent write extending the file will see these\nbuffers and as they are mapped (but underlying blocks were freed) things go\nawry from here.\n\nThe assertion failure just coincidentally (and in this case luckily as we would\nstart corrupting filesystem) triggers due to journal_head not being properly\ncleaned up as well.\n\nUnder some rare circumstances this bug could even hit data\u003dordered mode users.\nThere the assertion won\u0027t trigger and we would end up corrupting the\nfilesystem.\n\nWe fix the problem by unmapping buffers if possible (in lots of cases we just\nneed a buffer attached to a transaction as a place holder but it must not be\nwritten out anyway). And in one case, we just have to bite the bullet and wait\nfor transaction commit to finish.\n\nReviewed-by: Josef Bacik \u003cjbacik@fusionio.com\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6a52f3c682cf4c191885d1029449d68fd60b40e6",
      "tree": "f8c7bf0b0a45ba1f3b2253a444cb54f1418238ed",
      "parents": [
        "ab8cd49a6e1984398984e1657f7b6787c37a9a45"
      ],
      "author": {
        "name": "Jani Nikula",
        "email": "jani.nikula@intel.com",
        "time": "Wed Sep 26 18:43:10 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "drm/i915: use adjusted_mode instead of mode for checking the 6bpc force flag\n\ncommit 0c96c65b48fba3ffe9822a554cbc0cd610765cd5 upstream.\n\nThe dithering introduced in\n\ncommit 3b5c78a35cf7511c15e09a9b0ffab290a42d9bcf\nAuthor: Adam Jackson \u003cajax@redhat.com\u003e\nDate:   Tue Dec 13 15:41:00 2011 -0800\n\n    drm/i915/dp: Dither down to 6bpc if it makes the mode fit\n\nstores the INTEL_MODE_DP_FORCE_6BPC flag in the private_flags of the\nadjusted mode, while i9xx_crtc_mode_set() and ironlake_crtc_mode_set() use\nthe original mode, without the flag, so it would never have any\neffect. However, the BPC was clamped by VBT settings, making things work by\ncoincidence, until that part was removed in\n\ncommit 4344b813f105a19f793f1fd93ad775b784648b95\nAuthor: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nDate:   Fri Aug 10 11:10:20 2012 +0200\n\nUse adjusted_mode instead of mode when checking for\nINTEL_MODE_DP_FORCE_6BPC to make the flag have effect.\n\nv2: Don\u0027t forget to fix this in i9xx_crtc_mode_set() also, pointed out by\nDaniel both before and after sending the first patch.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d47621\nCC: Adam Jackson \u003cajax@redhat.com\u003e\nSigned-off-by: Jani Nikula \u003cjani.nikula@intel.com\u003e\nReviewed-by: Adam Jackson \u003cajax@redhat.com\u003e\nSigned-off-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n"
    },
    {
      "commit": "ab8cd49a6e1984398984e1657f7b6787c37a9a45",
      "tree": "740c8c7bd961f22125525f2a82773702d9b1a5cf",
      "parents": [
        "525383548a58de3cf3c1f35abfebed453d3d190c"
      ],
      "author": {
        "name": "Egbert Eich",
        "email": "eich@suse.de",
        "time": "Mon Oct 15 08:21:39 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "drm/radeon: Don\u0027t destroy I2C Bus Rec in radeon_ext_tmds_enc_destroy().\n\ncommit 082918471139b07964967cfe5f70230909c82ae1 upstream.\n\nradeon_i2c_fini() walks thru the list of I2C bus recs rdev-\u003ei2c_bus[]\nto destroy each of them.\nradeon_ext_tmds_enc_destroy() however also has code to destroy it\u0027s\nassociated I2C bus rec which has been obtained by radeon_i2c_lookup()\nand is therefore also in the i2c_bus[] list.\nThis causes a double free resulting in a kernel panic when unloading\nthe radeon driver.\nRemoving destroy code from radeon_ext_tmds_enc_destroy() fixes this\nproblem.\n\nagd5f: fix compiler warning\n\nSigned-off-by: Egbert Eich \u003ceich@suse.de\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "525383548a58de3cf3c1f35abfebed453d3d190c",
      "tree": "761b6983254f485114ff9b39ca7619c1b2f0ac4e",
      "parents": [
        "7ae3bb7d050f8c7e3ef46c830968f3bb5ca2e232"
      ],
      "author": {
        "name": "Jean-Christian de Rivaz",
        "email": "jc@eclis.ch",
        "time": "Wed Oct 10 12:49:02 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "Add CDC-ACM support for the CX93010-2x UCMxx USB Modem\n\ncommit e7d491a19d3e3aac544070293891a2542ae0c565 upstream.\n\nThis USB V.92/V.32bis Controllered Modem have the USB vendor ID 0x0572\nand device ID 0x1340. It need the NO_UNION_NORMAL quirk to be recognized.\n\nReference:\nhttp://www.conexant.com/servlets/DownloadServlet/DSH-201723-005.pdf?docid\u003d1725\u0026revid\u003d5\nSee idVendor and idProduct in table 6-1. Device Descriptors\n\nSigned-off-by: Jean-Christian de Rivaz \u003cjc@eclis.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7ae3bb7d050f8c7e3ef46c830968f3bb5ca2e232",
      "tree": "02f3770d015be5a50890e3d3354d855c238d284d",
      "parents": [
        "aee054fb840f6fca8067a42f44df0e2a22e0378c"
      ],
      "author": {
        "name": "Jan Engelhardt",
        "email": "jengelh@inai.de",
        "time": "Fri Sep 21 22:26:52 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: xt_limit: have r-\u003ecost !\u003d 0 case work\n\ncommit 82e6bfe2fbc4d48852114c4f979137cd5bf1d1a8 upstream.\n\nCommit v2.6.19-rc1~1272^2~41 tells us that r-\u003ecost !\u003d 0 can happen when\na running state is saved to userspace and then reinstated from there.\n\nMake sure that private xt_limit area is initialized with correct values.\nOtherwise, random matchings due to use of uninitialized memory.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@inai.de\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "aee054fb840f6fca8067a42f44df0e2a22e0378c",
      "tree": "eba739490e10e462b18a408caa621b4e3d8e63ca",
      "parents": [
        "29f0d1b362fcdcd7bb3071782184f4035d5784bd"
      ],
      "author": {
        "name": "Florian Westphal",
        "email": "fw@strlen.de",
        "time": "Mon May 07 10:51:43 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: limit, hashlimit: avoid duplicated inline\n\ncommit 7a909ac70f6b0823d9f23a43f19598d4b57ac901 upstream.\n\ncredit_cap can be set to credit, which avoids inlining user2credits\ntwice. Also, remove inline keyword and let compiler decide.\n\nold:\n    684     192       0     876     36c net/netfilter/xt_limit.o\n   4927     344      32    5303    14b7 net/netfilter/xt_hashlimit.o\nnow:\n    668     192       0     860     35c net/netfilter/xt_limit.o\n   4793     344      32    5169    1431 net/netfilter/xt_hashlimit.o\n\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "29f0d1b362fcdcd7bb3071782184f4035d5784bd",
      "tree": "5c3dc526737873c2d53ca876b24455e78a3ec56d",
      "parents": [
        "7ea0513ee0bc8c8e85ade576caaf13a58b2cb55d"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Thu Aug 16 02:25:24 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: nf_ct_expect: fix possible access to uninitialized timer\n\ncommit 2614f86490122bf51eb7c12ec73927f1900f4e7d upstream.\n\nIn __nf_ct_expect_check, the function refresh_timer returns 1\nif a matching expectation is found and its timer is successfully\nrefreshed. This results in nf_ct_expect_related returning 0.\nNote that at this point:\n\n- the passed expectation is not inserted in the expectation table\n  and its timer was not initialized, since we have refreshed one\n  matching/existing expectation.\n\n- nf_ct_expect_alloc uses kmem_cache_alloc, so the expectation\n  timer is in some undefined state just after the allocation,\n  until it is appropriately initialized.\n\nThis can be a problem for the SIP helper during the expectation\naddition:\n\n ...\n if (nf_ct_expect_related(rtp_exp) \u003d\u003d 0) {\n         if (nf_ct_expect_related(rtcp_exp) !\u003d 0)\n                 nf_ct_unexpect_related(rtp_exp);\n ...\n\nNote that nf_ct_expect_related(rtp_exp) may return 0 for the timer refresh\ncase that is detailed above. Then, if nf_ct_unexpect_related(rtcp_exp)\nreturns !\u003d 0, nf_ct_unexpect_related(rtp_exp) is called, which does:\n\n spin_lock_bh(\u0026nf_conntrack_lock);\n if (del_timer(\u0026exp-\u003etimeout)) {\n         nf_ct_unlink_expect(exp);\n         nf_ct_expect_put(exp);\n }\n spin_unlock_bh(\u0026nf_conntrack_lock);\n\nNote that del_timer always returns false if the timer has been\ninitialized.  However, the timer was not initialized since setup_timer\nwas not called, therefore, the expectation timer remains in some\nundefined state. If I\u0027m not missing anything, this may lead to the\nremoval an unexistent expectation.\n\nTo fix this, the optimization that allows refreshing an expectation\nis removed. Now nf_conntrack_expect_related looks more consistent\nto me since it always add the expectation in case that it returns\nsuccess.\n\nThanks to Patrick McHardy for participating in the discussion of\nthis patch.\n\nI think this may be the source of the problem described by:\nhttp://marc.info/?l\u003dnetfilter-devel\u0026m\u003d134073514719421\u0026w\u003d2\n\nReported-by: Rafal Fitt \u003crafalf@aplusc.com.pl\u003e\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7ea0513ee0bc8c8e85ade576caaf13a58b2cb55d",
      "tree": "6873907a8edb14ccb9144669c2473675fd0ad9a4",
      "parents": [
        "6ebe631c590aa6c5e61ccec9ab1808f99705f9d5"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Thu Aug 09 10:08:47 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: nf_nat_sip: fix via header translation with multiple parameters\n\ncommit f22eb25cf5b1157b29ef88c793b71972efc47143 upstream.\n\nVia-headers are parsed beginning at the first character after the Via-address.\nWhen the address is translated first and its length decreases, the offset to\nstart parsing at is incorrect and header parameters might be missed.\n\nUpdate the offset after translating the Via-address to fix this.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "6ebe631c590aa6c5e61ccec9ab1808f99705f9d5",
      "tree": "171a20f7d1e35f571e29fdf83f667396802d819b",
      "parents": [
        "0b0ea6a363eb3f5802adcb07c8c23e052a10d6bb"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Wed Aug 29 15:24:09 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: nf_nat_sip: fix incorrect handling of EBUSY for RTCP expectation\n\ncommit 3f509c689a07a4aa989b426893d8491a7ffcc410 upstream.\n\nWe\u0027re hitting bug while trying to reinsert an already existing\nexpectation:\n\nkernel BUG at kernel/timer.c:895!\ninvalid opcode: 0000 [#1] SMP\n[...]\nCall Trace:\n \u003cIRQ\u003e\n [\u003cffffffffa0069563\u003e] nf_ct_expect_related_report+0x4a0/0x57a [nf_conntrack]\n [\u003cffffffff812d423a\u003e] ? in4_pton+0x72/0x131\n [\u003cffffffffa00ca69e\u003e] ip_nat_sdp_media+0xeb/0x185 [nf_nat_sip]\n [\u003cffffffffa00b5b9b\u003e] set_expected_rtp_rtcp+0x32d/0x39b [nf_conntrack_sip]\n [\u003cffffffffa00b5f15\u003e] process_sdp+0x30c/0x3ec [nf_conntrack_sip]\n [\u003cffffffff8103f1eb\u003e] ? irq_exit+0x9a/0x9c\n [\u003cffffffffa00ca738\u003e] ? ip_nat_sdp_media+0x185/0x185 [nf_nat_sip]\n\nWe have to remove the RTP expectation if the RTCP expectation hits EBUSY\nsince we keep trying with other ports until we succeed.\n\nReported-by: Rafal Fitt \u003crafalf@aplusc.com.pl\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0b0ea6a363eb3f5802adcb07c8c23e052a10d6bb",
      "tree": "5da08e9b81132440bba37497163a4b23e4366d17",
      "parents": [
        "285ff6c4a762f556275182bcef767b61174c0424"
      ],
      "author": {
        "name": "Lin Ming",
        "email": "mlin@ss.pku.edu.cn",
        "time": "Sat Jul 07 18:26:10 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "ipvs: fix oops on NAT reply in br_nf context\n\ncommit 9e33ce453f8ac8452649802bee1f410319408f4b upstream.\n\nIPVS should not reset skb-\u003enf_bridge in FORWARD hook\nby calling nf_reset for NAT replies. It triggers oops in\nbr_nf_forward_finish.\n\n[  579.781508] BUG: unable to handle kernel NULL pointer dereference at 0000000000000004\n[  579.781669] IP: [\u003cffffffff817b1ca5\u003e] br_nf_forward_finish+0x58/0x112\n[  579.781792] PGD 218f9067 PUD 0\n[  579.781865] Oops: 0000 [#1] SMP\n[  579.781945] CPU 0\n[  579.781983] Modules linked in:\n[  579.782047]\n[  579.782080]\n[  579.782114] Pid: 4644, comm: qemu Tainted: G        W    3.5.0-rc5-00006-g95e69f9 #282 Hewlett-Packard  /30E8\n[  579.782300] RIP: 0010:[\u003cffffffff817b1ca5\u003e]  [\u003cffffffff817b1ca5\u003e] br_nf_forward_finish+0x58/0x112\n[  579.782455] RSP: 0018:ffff88007b003a98  EFLAGS: 00010287\n[  579.782541] RAX: 0000000000000008 RBX: ffff8800762ead00 RCX: 000000000001670a\n[  579.782653] RDX: 0000000000000000 RSI: 000000000000000a RDI: ffff8800762ead00\n[  579.782845] RBP: ffff88007b003ac8 R08: 0000000000016630 R09: ffff88007b003a90\n[  579.782957] R10: ffff88007b0038e8 R11: ffff88002da37540 R12: ffff88002da01a02\n[  579.783066] R13: ffff88002da01a80 R14: ffff88002d83c000 R15: ffff88002d82a000\n[  579.783177] FS:  0000000000000000(0000) GS:ffff88007b000000(0063) knlGS:00000000f62d1b70\n[  579.783306] CS:  0010 DS: 002b ES: 002b CR0: 000000008005003b\n[  579.783395] CR2: 0000000000000004 CR3: 00000000218fe000 CR4: 00000000000027f0\n[  579.783505] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[  579.783684] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\n[  579.783795] Process qemu (pid: 4644, threadinfo ffff880021b20000, task ffff880021aba760)\n[  579.783919] Stack:\n[  579.783959]  ffff88007693cedc ffff8800762ead00 ffff88002da01a02 ffff8800762ead00\n[  579.784110]  ffff88002da01a02 ffff88002da01a80 ffff88007b003b18 ffffffff817b26c7\n[  579.784260]  ffff880080000000 ffffffff81ef59f0 ffff8800762ead00 ffffffff81ef58b0\n[  579.784477] Call Trace:\n[  579.784523]  \u003cIRQ\u003e\n[  579.784562]\n[  579.784603]  [\u003cffffffff817b26c7\u003e] br_nf_forward_ip+0x275/0x2c8\n[  579.784707]  [\u003cffffffff81704b58\u003e] nf_iterate+0x47/0x7d\n[  579.784797]  [\u003cffffffff817ac32e\u003e] ? br_dev_queue_push_xmit+0xae/0xae\n[  579.784906]  [\u003cffffffff81704bfb\u003e] nf_hook_slow+0x6d/0x102\n[  579.784995]  [\u003cffffffff817ac32e\u003e] ? br_dev_queue_push_xmit+0xae/0xae\n[  579.785175]  [\u003cffffffff8187fa95\u003e] ? _raw_write_unlock_bh+0x19/0x1b\n[  579.785179]  [\u003cffffffff817ac417\u003e] __br_forward+0x97/0xa2\n[  579.785179]  [\u003cffffffff817ad366\u003e] br_handle_frame_finish+0x1a6/0x257\n[  579.785179]  [\u003cffffffff817b2386\u003e] br_nf_pre_routing_finish+0x26d/0x2cb\n[  579.785179]  [\u003cffffffff817b2cf0\u003e] br_nf_pre_routing+0x55d/0x5c1\n[  579.785179]  [\u003cffffffff81704b58\u003e] nf_iterate+0x47/0x7d\n[  579.785179]  [\u003cffffffff817ad1c0\u003e] ? br_handle_local_finish+0x44/0x44\n[  579.785179]  [\u003cffffffff81704bfb\u003e] nf_hook_slow+0x6d/0x102\n[  579.785179]  [\u003cffffffff817ad1c0\u003e] ? br_handle_local_finish+0x44/0x44\n[  579.785179]  [\u003cffffffff81551525\u003e] ? sky2_poll+0xb35/0xb54\n[  579.785179]  [\u003cffffffff817ad62a\u003e] br_handle_frame+0x213/0x229\n[  579.785179]  [\u003cffffffff817ad417\u003e] ? br_handle_frame_finish+0x257/0x257\n[  579.785179]  [\u003cffffffff816e3b47\u003e] __netif_receive_skb+0x2b4/0x3f1\n[  579.785179]  [\u003cffffffff816e69fc\u003e] process_backlog+0x99/0x1e2\n[  579.785179]  [\u003cffffffff816e6800\u003e] net_rx_action+0xdf/0x242\n[  579.785179]  [\u003cffffffff8107e8a8\u003e] __do_softirq+0xc1/0x1e0\n[  579.785179]  [\u003cffffffff8135a5ba\u003e] ? trace_hardirqs_off_thunk+0x3a/0x6c\n[  579.785179]  [\u003cffffffff8188812c\u003e] call_softirq+0x1c/0x30\n\nThe steps to reproduce as follow,\n\n1. On Host1, setup brige br0(192.168.1.106)\n2. Boot a kvm guest(192.168.1.105) on Host1 and start httpd\n3. Start IPVS service on Host1\n   ipvsadm -A -t 192.168.1.106:80 -s rr\n   ipvsadm -a -t 192.168.1.106:80 -r 192.168.1.105:80 -m\n4. Run apache benchmark on Host2(192.168.1.101)\n   ab -n 1000 http://192.168.1.106/\n\nip_vs_reply4\n  ip_vs_out\n    handle_response\n      ip_vs_notrack\n        nf_reset()\n        {\n          skb-\u003enf_bridge \u003d NULL;\n        }\n\nActually, IPVS wants in this case just to replace nfct\nwith untracked version. So replace the nf_reset(skb) call\nin ip_vs_notrack() with a nf_conntrack_put(skb-\u003enfct) call.\n\nSigned-off-by: Lin Ming \u003cmlin@ss.pku.edu.cn\u003e\nSigned-off-by: Julian Anastasov \u003cja@ssi.bg\u003e\nSigned-off-by: Simon Horman \u003chorms@verge.net.au\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "285ff6c4a762f556275182bcef767b61174c0424",
      "tree": "4960f988e187c49a6273d42328f1ba20e0be8c12",
      "parents": [
        "0fc58b2ff3f70a6bcfac562c68ec62939c37268a"
      ],
      "author": {
        "name": "Jozsef Kadlecsik",
        "email": "kadlec@blackhole.kfki.hu",
        "time": "Fri Jun 29 09:42:28 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: ipset: timeout fixing bug broke SET target special timeout value\n\ncommit a73f89a61f92b364f0b4a3be412b5b70553afc23 upstream.\n\nThe patch \"127f559 netfilter: ipset: fix timeout value overflow bug\"\nbroke the SET target when no timeout was specified.\n\nReported-by: Jean-Philippe Menil \u003cjean-philippe.menil@univ-nantes.fr\u003e\nSigned-off-by: Jozsef Kadlecsik \u003ckadlec@blackhole.kfki.hu\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0fc58b2ff3f70a6bcfac562c68ec62939c37268a",
      "tree": "b18b3e78186d41acd9c5b1ba73c3e5a3aff807d3",
      "parents": [
        "7fcbcdc96302e9d3e3b36df4fbc86a4c82761092"
      ],
      "author": {
        "name": "Jozsef Kadlecsik",
        "email": "kadlec@blackhole.kfki.hu",
        "time": "Mon May 07 02:35:44 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: ipset: fix timeout value overflow bug\n\ncommit 127f559127f5175e4bec3dab725a34845d956591 upstream.\n\nLarge timeout parameters could result wrong timeout values due to\nan overflow at msec to jiffies conversion (reported by Andreas Herz)\n\n[ This patch was mangled by Pablo Neira Ayuso since David Laight and\n  Eric Dumazet noticed that we were using hardcoded 1000 instead of\n  MSEC_PER_SEC to calculate the timeout ]\n\nSigned-off-by: Jozsef Kadlecsik \u003ckadlec@blackhole.kfki.hu\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7fcbcdc96302e9d3e3b36df4fbc86a4c82761092",
      "tree": "770030ce43176a21b837307e7f8a4474d95d7296",
      "parents": [
        "486aaeb0b972820ed704bdf416270ec4b0950da3"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Wed Aug 29 16:25:49 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:28:00 2012 -0700"
      },
      "message": "netfilter: nf_conntrack: fix racy timer handling with reliable events\n\ncommit 5b423f6a40a0327f9d40bc8b97ce9be266f74368 upstream.\n\nExisting code assumes that del_timer returns true for alive conntrack\nentries. However, this is not true if reliable events are enabled.\nIn that case, del_timer may return true for entries that were\njust inserted in the dying list. Note that packets / ctnetlink may\nhold references to conntrack entries that were just inserted to such\nlist.\n\nThis patch fixes the issue by adding an independent timer for\nevent delivery. This increases the size of the ecache extension.\nStill we can revisit this later and use variable size extensions\nto allocate this area on demand.\n\nTested-by: Oliver Smith \u003colipro@8.c.9.b.0.7.4.0.1.0.0.2.ip6.arpa\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "486aaeb0b972820ed704bdf416270ec4b0950da3",
      "tree": "a7bd741818d81ec8b85c273c009225f40170945a",
      "parents": [
        "c8479435f2191c22871a4b27e7eb2d501f4661e8"
      ],
      "author": {
        "name": "Julian Anastasov",
        "email": "ja@ssi.bg",
        "time": "Sat Jul 07 20:30:11 2012 +0300"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "ipvs: fix oops in ip_vs_dst_event on rmmod\n\ncommit 283283c4da91adc44b03519f434ee1e7e91d6fdb upstream.\n\n\tAfter commit 39f618b4fd95ae243d940ec64c961009c74e3333 (3.4)\n\"ipvs: reset ipvs pointer in netns\" we can oops in\nip_vs_dst_event on rmmod ip_vs because ip_vs_control_cleanup\nis called after the ipvs_core_ops subsys is unregistered and\nnet-\u003eipvs is NULL. Fix it by exiting early from ip_vs_dst_event\nif ipvs is NULL. It is safe because all services and dests\nfor the net are already freed.\n\nSigned-off-by: Julian Anastasov \u003cja@ssi.bg\u003e\nSigned-off-by: Simon Horman \u003chorms@verge.net.au\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nAcked-by: David Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c8479435f2191c22871a4b27e7eb2d501f4661e8",
      "tree": "aca208ae881fd4de8e75d818942e3ecc9164eb59",
      "parents": [
        "c4c493a4adcee75e1e44af044d0b7fc1b5192b61"
      ],
      "author": {
        "name": "Amerigo Wang",
        "email": "amwang@redhat.com",
        "time": "Tue Oct 09 17:48:16 2012 +0000"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "pktgen: fix crash when generating IPv6 packets\n\ncommit 5aa8b572007c4bca1e6d3dd4c4820f1ae49d6bb2 upstream.\n\nFor IPv6, sizeof(struct ipv6hdr) \u003d 40, thus the following\nexpression will result negative:\n\n        datalen \u003d pkt_dev-\u003ecur_pkt_size - 14 -\n                  sizeof(struct ipv6hdr) - sizeof(struct udphdr) -\n                  pkt_dev-\u003epkt_overhead;\n\nAnd,  the check \"if (datalen \u003c sizeof(struct pktgen_hdr))\" will be\npassed as \"datalen\" is promoted to unsigned, therefore will cause\na crash later.\n\nThis is a quick fix by checking if \"datalen\" is negative. The following\npatch will increase the default value of \u0027min_pkt_size\u0027 for IPv6.\n\nThis bug should exist for a long time, so Cc -stable too.\n\nSigned-off-by: Cong Wang \u003camwang@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c4c493a4adcee75e1e44af044d0b7fc1b5192b61",
      "tree": "5209e3b5533486721824ee61514ac24749e06d2b",
      "parents": [
        "9b38cc4a70f2c83857fd37707570a18c1027effe"
      ],
      "author": {
        "name": "Jason Wessel",
        "email": "jason.wessel@windriver.com",
        "time": "Sun Aug 26 22:37:03 2012 -0500"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "kdb,vt_console: Fix missed data due to pager overruns\n\ncommit 17b572e82032bc246324ce136696656b66d4e3f1 upstream.\n\nIt is possible to miss data when using the kdb pager.  The kdb pager\ndoes not pay attention to the maximum column constraint of the screen\nor serial terminal.  This result is not incrementing the shown lines\ncorrectly and the pager will print more lines that fit on the screen.\nObviously that is less than useful when using a VGA console where you\ncannot scroll back.\n\nThe pager will now look at the kdb_buffer string to see how many\ncharacters are printed.  It might not be perfect considering you can\noutput ASCII that might move the cursor position, but it is a\nsubstantially better approximation for viewing dmesg and trace logs.\n\nThis also means that the vt screen needs to set the kdb COLUMNS\nvariable.\n\nSigned-off-by: Jason Wessel \u003cjason.wessel@windriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "9b38cc4a70f2c83857fd37707570a18c1027effe",
      "tree": "a9841de8c174c5c0e37522ceba2ce9ad59170396",
      "parents": [
        "a0fee8de3ae5784d4308b7bd18c303a4144ece18"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "dan.carpenter@oracle.com",
        "time": "Thu Oct 11 14:20:58 2012 +1100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "md/raid10: use correct limit variable\n\ncommit 91502f099dfc5a1e8812898e26ee280713e1d002 upstream.\n\nClang complains that we are assigning a variable to itself.  This should\nbe using bad_sectors like the similar earlier check does.\n\nBug has been present since 3.1-rc1.  It is minor but could\nconceivably cause corruption or other bad behaviour.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: NeilBrown \u003cneilb@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a0fee8de3ae5784d4308b7bd18c303a4144ece18",
      "tree": "b6eed95981841de24a47722e923bb8924558b854",
      "parents": [
        "00dff266efe889d4fc6569f3e39ae7195cb83da7"
      ],
      "author": {
        "name": "Felix Fietkau",
        "email": "nbd@openwrt.org",
        "time": "Wed Oct 03 21:07:52 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "ath9k: use ieee80211_free_txskb\n\ncommit 249ee72249140fe5b9adc988f97298f0aa5db2fc upstream.\n\nUsing ieee80211_free_txskb for tx frames is required, since mac80211 clones\nskbs for which socket tx status is requested.\n\nSigned-off-by: Felix Fietkau \u003cnbd@openwrt.org\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "00dff266efe889d4fc6569f3e39ae7195cb83da7",
      "tree": "27c90c73c8d17598fe841baf0fc3033e3f96307d",
      "parents": [
        "3dca360fc8484e40f50205a09f6dbbb591791663"
      ],
      "author": {
        "name": "Hildner, Christian",
        "email": "christian.hildner@siemens.com",
        "time": "Mon Oct 08 15:49:03 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "timers: Fix endless looping between cascade() and internal_add_timer()\n\ncommit 26cff4e2aa4d666dc6a120ea34336b5057e3e187 upstream.\n\nAdding two (or more) timers with large values for \"expires\" (they have\nto reside within tv5 in the same list) leads to endless looping\nbetween cascade() and internal_add_timer() in case CONFIG_BASE_SMALL\nis one and jiffies are crossing the value 1 \u003c\u003c 18. The bug was\nintroduced between 2.6.11 and 2.6.12 (and survived for quite some\ntime).\n\nThis patch ensures that when cascade() is called timers within tv5 are\nnot added endlessly to their own list again, instead they are added to\nthe next lower tv level tv4 (as expected).\n\nSigned-off-by: Christian Hildner \u003cchristian.hildner@siemens.com\u003e\nReviewed-by: Jan Kiszka \u003cjan.kiszka@siemens.com\u003e\nLink: http://lkml.kernel.org/r/98673C87CB31274881CFFE0B65ECC87B0F5FC1963E@DEFTHW99EA4MSX.ww902.siemens.net\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "3dca360fc8484e40f50205a09f6dbbb591791663",
      "tree": "d56f05c0d897cfec894244d0f8e59e2bd441fbc7",
      "parents": [
        "a065f95a851f18c2b4531808c0a9503f14aa9624"
      ],
      "author": {
        "name": "Daniel Drake",
        "email": "dsd@laptop.org",
        "time": "Tue Sep 04 11:45:32 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "viafb: don\u0027t touch clock state on OLPC XO-1.5\n\ncommit 012a1211845eab69a5488d59eb87d24cc518c627 upstream.\n\nAs detailed in the thread titled \"viafb PLL/clock tweaking causes XO-1.5\ninstability,\" enabling or disabling the IGA1/IGA2 clocks causes occasional\nstability problems during suspend/resume cycles on this platform.\n\nThis is rather odd, as the documentation suggests that clocks have two\nstates (on/off) and the default (stable) configuration is configured to\nenable the clock only when it is needed. However, explicitly enabling *or*\ndisabling the clock triggers this system instability, suggesting that there\nis a 3rd state at play here.\n\nLeaving the clock enable/disable registers alone solves this problem.\nThis fixes spurious reboots during suspend/resume behaviour introduced by\ncommit b692a63a.\n\nSigned-off-by: Daniel Drake \u003cdsd@laptop.org\u003e\nSigned-off-by: Florian Tobias Schandinat \u003cFlorianSchandinat@gmx.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a065f95a851f18c2b4531808c0a9503f14aa9624",
      "tree": "7da698e15f524aa9252b8d923e59b2296bfacb24",
      "parents": [
        "08de372d6c39473773fc303b9253a2be938badbd"
      ],
      "author": {
        "name": "Alexander Holler",
        "email": "holler@ahsoftware.de",
        "time": "Tue Aug 14 09:11:09 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "video/udlfb: fix line counting in fb_write\n\ncommit b8c4321f3d194469007f5f5f2b34ec278c264a04 upstream.\n\nLine 0 and 1 were both written to line 0 (on the display) and all subsequent\nlines had an offset of -1. The result was that the last line on the display\nwas never overwritten by writes to /dev/fbN.\n\nSigned-off-by: Alexander Holler \u003choller@ahsoftware.de\u003e\nAcked-by: Bernie Thompson \u003cbernie@plugable.com\u003e\nSigned-off-by: Florian Tobias Schandinat \u003cFlorianSchandinat@gmx.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "08de372d6c39473773fc303b9253a2be938badbd",
      "tree": "5d885c264e2ca34cb91877cc4abadf4e4e1d91fe",
      "parents": [
        "865221d84f23dafcf63485e9081fe972646fef0a"
      ],
      "author": {
        "name": "Matthew Garrett",
        "email": "mjg59@srcf.ucam.org",
        "time": "Fri Jun 22 13:49:31 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "module: taint kernel when lve module is loaded\n\ncommit c99af3752bb52ba3aece5315279a57a477edfaf1 upstream.\n\nCloudlinux have a product called lve that includes a kernel module. This\nwas previously GPLed but is now under a proprietary license, but the\nmodule continues to declare MODULE_LICENSE(\"GPL\") and makes use of some\nEXPORT_SYMBOL_GPL symbols. Forcibly taint it in order to avoid this.\n\nSigned-off-by: Matthew Garrett \u003cmjg59@srcf.ucam.org\u003e\nCc: Alex Lyashkov \u003cumka@cloudlinux.com\u003e\nSigned-off-by: Rusty Russell \u003crusty@rustcorp.com.au\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "865221d84f23dafcf63485e9081fe972646fef0a",
      "tree": "136e591e7721a9c58705908ba7d9ee657159fee4",
      "parents": [
        "7fce34e1a40c49a2f579ffd1342884cf8bca8e96"
      ],
      "author": {
        "name": "Ian Kent",
        "email": "raven@themaw.net",
        "time": "Thu Oct 11 08:00:33 2012 +0800"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "autofs4 - fix reset pending flag on mount fail\n\ncommit 49999ab27eab6289a8e4f450e148bdab521361b2 upstream.\n\nIn autofs4_d_automount(), if a mount fail occurs the AUTOFS_INF_PENDING\nmount pending flag is not cleared.\n\nOne effect of this is when using the \"browse\" option, directory entry\nattributes show up with all \"?\"s due to the incorrect callback and\nsubsequent failure return (when in fact no callback should be made).\n\nSigned-off-by: Ian Kent \u003cikent@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "7fce34e1a40c49a2f579ffd1342884cf8bca8e96",
      "tree": "5c5fad410759da04a14d72dd1d7e59fdb0b1cb7f",
      "parents": [
        "e299f8abb241b52fe0de458143a537ac91b269a2"
      ],
      "author": {
        "name": "Tejun Heo",
        "email": "tj@kernel.org",
        "time": "Thu Sep 20 14:09:30 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "block: fix request_queue-\u003eflags initialization\n\ncommit 60ea8226cbd5c8301f9a39edc574ddabcb8150e0 upstream.\n\nA queue newly allocated with blk_alloc_queue_node() has only\nQUEUE_FLAG_BYPASS set.  For request-based drivers,\nblk_init_allocated_queue() is called and q-\u003equeue_flags is overwritten\nwith QUEUE_FLAG_DEFAULT which doesn\u0027t include BYPASS even though the\ninitial bypass is still in effect.\n\nIn blk_init_allocated_queue(), or QUEUE_FLAG_DEFAULT to q-\u003equeue_flags\ninstead of overwriting.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nAcked-by: Vivek Goyal \u003cvgoyal@redhat.com\u003e\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e299f8abb241b52fe0de458143a537ac91b269a2",
      "tree": "107d402b7fe0175f6a6a270fe69cd47cfe5dad1d",
      "parents": [
        "c525d8ee0c7701d72d8144f536d47a5bd30159e9"
      ],
      "author": {
        "name": "Konrad Rzeszutek Wilk",
        "email": "konrad.wilk@oracle.com",
        "time": "Wed Oct 10 13:30:47 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:59 2012 -0700"
      },
      "message": "xen/bootup: allow read_tscp call for Xen PV guests.\n\ncommit cd0608e71e9757f4dae35bcfb4e88f4d1a03a8ab upstream.\n\nThe hypervisor will trap it. However without this patch,\nwe would crash as the .read_tscp is set to NULL. This patch\nfixes it and sets it to the native_read_tscp call.\n\nSigned-off-by: Konrad Rzeszutek Wilk \u003ckonrad.wilk@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "c525d8ee0c7701d72d8144f536d47a5bd30159e9",
      "tree": "c80611156fbfc37ce354207dba24088c6eb08e86",
      "parents": [
        "e1621ec4754097582c73c0ed8c394dcc50b1e0fd"
      ],
      "author": {
        "name": "Konrad Rzeszutek Wilk",
        "email": "konrad.wilk@oracle.com",
        "time": "Wed Oct 10 13:25:48 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "xen/bootup: allow {read|write}_cr8 pvops call.\n\ncommit 1a7bbda5b1ab0e02622761305a32dc38735b90b2 upstream.\n\nWe actually do not do anything about it. Just return a default\nvalue of zero and if the kernel tries to write anything but 0\nwe BUG_ON.\n\nThis fixes the case when an user tries to suspend the machine\nand it blows up in save_processor_state b/c \u0027read_cr8\u0027 is set\nto NULL and we get:\n\nkernel BUG at /home/konrad/ssd/linux/arch/x86/include/asm/paravirt.h:100!\ninvalid opcode: 0000 [#1] SMP\nPid: 2687, comm: init.late Tainted: G           O 3.6.0upstream-00002-gac264ac-dirty #4 Bochs Bochs\nRIP: e030:[\u003cffffffff814d5f42\u003e]  [\u003cffffffff814d5f42\u003e] save_processor_state+0x212/0x270\n\n.. snip..\nCall Trace:\n [\u003cffffffff810733bf\u003e] do_suspend_lowlevel+0xf/0xac\n [\u003cffffffff8107330c\u003e] ? x86_acpi_suspend_lowlevel+0x10c/0x150\n [\u003cffffffff81342ee2\u003e] acpi_suspend_enter+0x57/0xd5\n\nSigned-off-by: Konrad Rzeszutek Wilk \u003ckonrad.wilk@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "e1621ec4754097582c73c0ed8c394dcc50b1e0fd",
      "tree": "473e8cf05aa8ef5b256298006343e74ecb2213d7",
      "parents": [
        "b77a7a0e9f3ed51b523857f26c42e350faf43add"
      ],
      "author": {
        "name": "Peter Senna Tschudin",
        "email": "peter.senna@gmail.com",
        "time": "Mon Sep 17 20:05:33 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "target: fix return code in target_core_init_configfs error path\n\ncommit 37bb7899ca366dc212b71b150e78566d04808cc0 upstream.\n\nThis patch fixes error cases within target_core_init_configfs() to\nproperly set ret \u003d -ENOMEM before jumping to the out_global exception\npath.\n\nThis was originally discovered with the following Coccinelle semantic\nmatch information:\n\nConvert a nonnegative error return code to a negative one, as returned\nelsewhere in the function.  A simplified version of the semantic match\nthat finds this problem is as follows: (http://coccinelle.lip6.fr/)\n\n// \u003csmpl\u003e\n(\nif@p1 (\\(ret \u003c 0\\|ret !\u003d 0\\))\n { ... return ret; }\n|\nret@p1 \u003d 0\n)\n... when !\u003d ret \u003d e1\n    when !\u003d \u0026ret\n*if(...)\n{\n  ... when !\u003d ret \u003d e2\n      when forall\n return ret;\n}\n// \u003c/smpl\u003e\n\nSigned-off-by: Peter Senna Tschudin \u003cpeter.senna@gmail.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "b77a7a0e9f3ed51b523857f26c42e350faf43add",
      "tree": "7333f7635b06fd46713006a4b5842697fe87d375",
      "parents": [
        "0bd1ed9ead1a2b7fc1534bff04729c3712a6fb25"
      ],
      "author": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Wed Sep 12 16:49:15 2012 -0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "SUNRPC: Ensure that the TCP socket is closed when in CLOSE_WAIT\n\ncommit a519fc7a70d1a918574bb826cc6905b87b482eb9 upstream.\n\nInstead of doing a shutdown() call, we need to do an actual close().\nDitto if/when the server is sending us junk RPC headers.\n\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nTested-by: Simon Kirby \u003csim@hostway.ca\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "0bd1ed9ead1a2b7fc1534bff04729c3712a6fb25",
      "tree": "97f7e4b5b5c8359aa21c53900ae11046c97d7d77",
      "parents": [
        "90e4ed1b7de612e4ed18029e61134ab2fea6233e"
      ],
      "author": {
        "name": "Stefan Richter",
        "email": "stefanr@s5r6.in-berlin.de",
        "time": "Sat Oct 06 14:12:56 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "firewire: cdev: fix user memory corruption (i386 userland on amd64 kernel)\n\ncommit 790198f74c9d1b46b6a89504361b1a844670d050 upstream.\n\nFix two bugs of the /dev/fw* character device concerning the\nFW_CDEV_IOC_GET_INFO ioctl with nonzero fw_cdev_get_info.bus_reset.\n(Practically all /dev/fw* clients issue this ioctl right after opening\nthe device.)\n\nBoth bugs are caused by sizeof(struct fw_cdev_event_bus_reset) being 36\nwithout natural alignment and 40 with natural alignment.\n\n 1) Memory corruption, affecting i386 userland on amd64 kernel:\n    Userland reserves a 36 bytes large buffer, kernel writes 40 bytes.\n    This has been first found and reported against libraw1394 if\n    compiled with gcc 4.7 which happens to order libraw1394\u0027s stack such\n    that the bug became visible as data corruption.\n\n 2) Information leak, affecting all kernel architectures except i386:\n    4 bytes of random kernel stack data were leaked to userspace.\n\nHence limit the respective copy_to_user() to the 32-bit aligned size of\nstruct fw_cdev_event_bus_reset.\n\nReported-by: Simon Kirby \u003csim@hostway.ca\u003e\nSigned-off-by: Stefan Richter \u003cstefanr@s5r6.in-berlin.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "90e4ed1b7de612e4ed18029e61134ab2fea6233e",
      "tree": "3e796aa4bb46f3f647b19685305a99fdae7e566c",
      "parents": [
        "023f18fee60cd9ef86c8299dd9debccad1f93351"
      ],
      "author": {
        "name": "Simon Horman",
        "email": "horms@verge.net.au",
        "time": "Fri Sep 28 02:12:45 2012 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "ARM: 7541/1: Add ARM ERRATA 775420 workaround\n\ncommit 7253b85cc62d6ff84143d96fe6cd54f73736f4d7 upstream.\n\narm: Add ARM ERRATA 775420 workaround\n\nWorkaround for the 775420 Cortex-A9 (r2p2, r2p6,r2p8,r2p10,r3p0) erratum.\nIn case a date cache maintenance operation aborts with MMU exception, it\nmight cause the processor to deadlock. This workaround puts DSB before\nexecuting ISB if an abort may occur on cache maintenance.\n\nBased on work by Kouei Abe and feedback from Catalin Marinas.\n\nSigned-off-by: Kouei Abe \u003ckouei.abe.cp@rms.renesas.com\u003e\n[ horms@verge.net.au: Changed to implementation\n  suggested by catalin.marinas@arm.com ]\nAcked-by: Catalin Marinas \u003ccatalin.marinas@arm.com\u003e\nSigned-off-by: Simon Horman \u003chorms@verge.net.au\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "023f18fee60cd9ef86c8299dd9debccad1f93351",
      "tree": "f4d33d8ecc988e41c356c2fc5a14e3c11177d0f3",
      "parents": [
        "791f153c5bea0636537ceb417bfea78f0f232d4f"
      ],
      "author": {
        "name": "Lukas Czerner",
        "email": "lczerner@redhat.com",
        "time": "Thu Aug 16 16:38:45 2012 +0200"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "SCSI: scsi_debug: Fix off-by-one bug when unmapping region\n\ncommit bc977749e967daa56de1922cf4cb38525631c51c upstream.\n\nCurrently it is possible to unmap one more block than user requested to\ndue to the off-by-one error in unmap_region(). This is probably due to\nthe fact that the end variable despite its name actually points to the\nlast block to unmap + 1. However in the condition it is handled as the\nlast block of the region to unmap.\n\nThe bug was not previously spotted probably due to the fact that the\nregion was not zeroed, which has changed with commit\nbe1dd78de5686c062bb3103f9e86d444a10ed783. With that commit we were able\nto corrupt the ext4 file system on 256M scsi_debug device with LBPRZ\nenabled using fstrim.\n\nSince the \u0027end\u0027 semantic is the same in several functions there this\ncommit just fixes the condition to use the \u0027end\u0027 variable correctly in\nthat context.\n\nReported-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nSigned-off-by: Lukas Czerner \u003clczerner@redhat.com\u003e\nReviewed-by: Martin K. Petersen \u003cmartin.petersen@oracle.com\u003e\nAcked-by: Douglas Gilbert \u003cdgilbert@interlog.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "791f153c5bea0636537ceb417bfea78f0f232d4f",
      "tree": "1732be7baf856348fd83e19660639994f5e561d3",
      "parents": [
        "2a7c11208e542071eee2240dde98e1673f5c01d4"
      ],
      "author": {
        "name": "K. Y. Srinivasan",
        "email": "kys@microsoft.com",
        "time": "Tue Oct 02 11:03:31 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "SCSI: storvsc: Account for in-transit packets in the RESET path\n\ncommit 5c1b10ab7f93d24f29b5630286e323d1c5802d5c upstream.\n\nProperly account for I/O in transit before returning from the RESET call.\nIn the absense of this patch, we could have a situation where the host may\nrespond to a command that was issued prior to the issuance of the RESET\ncommand at some arbitrary time after responding to the RESET command.\nCurrently, the host does not do anything with the RESET command.\n\nSigned-off-by: K. Y. Srinivasan \u003ckys@microsoft.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "2a7c11208e542071eee2240dde98e1673f5c01d4",
      "tree": "5671584456986d8a6bff7650384d132e4af36dec",
      "parents": [
        "a114a8b43b038c327aff0298cfb69509469e84b4"
      ],
      "author": {
        "name": "Nicholas Bellinger",
        "email": "nab@linux-iscsi.org",
        "time": "Wed Oct 03 15:42:48 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "iscsi-target: Bump defaults for nopin_timeout + nopin_response_timeout values\n\ncommit cf0eb28d3ba60098865bf7dbcbfdd6b1cc483e3b upstream.\n\nThis patch increases the default for nopin_timeout to 15 seconds (wait\nbetween sending a new NopIN ping) and nopin_response_timeout to 30 seconds\n(wait for NopOUT response before failing the connection) in order to avoid\nfalse positives by iSCSI Initiators who are not always able (under load) to\nrespond to NopIN echo PING requests within the current 5 second window.\n\nFalse positives have been observed recently using Open-iSCSI code on v3.3.x\nwith heavy large-block READ workloads over small MTU 1 Gb/sec ports, and\nincreasing these values to more reasonable defaults significantly reduces\nthe possibility of false positive NopIN response timeout events under\nthis specific workload.\n\nHistorically these have been set low to initiate connection recovery as\nsoon as possible if we don\u0027t hear a ping back, but for modern v3.x code\non 1 -\u003e 10 Gb/sec ports these new defaults make alot more sense.\n\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nCc: Christoph Hellwig \u003chch@lst.de\u003e\nCc: Andy Grover \u003cagrover@redhat.com\u003e\nCc: Mike Christie \u003cmichaelc@cs.wisc.edu\u003e\nCc: Hannes Reinecke \u003chare@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    },
    {
      "commit": "a114a8b43b038c327aff0298cfb69509469e84b4",
      "tree": "4b5bcbf9adabf6377c5b838522682ab871c86ae6",
      "parents": [
        "b095d61243b5f2333e2ae11a9051cd9d47597002"
      ],
      "author": {
        "name": "Nicholas Bellinger",
        "email": "nab@linux-iscsi.org",
        "time": "Sun Sep 30 12:20:02 2012 -0700"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Sun Oct 21 09:27:58 2012 -0700"
      },
      "message": "iscsi-target: Add explicit set of cache_dynamic_acls\u003d1 for TPG demo-mode\n\ncommit 38b11bae6ba02da352340aff12ee25755977b222 upstream.\n\nWe\u0027ve had reports in the past about this specific case, so it\u0027s time to\ngo ahead and explicitly set cache_dynamic_acls\u003d1 for generate_node_acls\u003d1\n(TPG demo-mode) operation.\n\nDuring normal generate_node_acls\u003d0 operation with explicit NodeACLs -\u003e\nse_node_acl memory is persistent to the configfs group located at\n/sys/kernel/config/target/$TARGETNAME/$TPGT/acls/$INITIATORNAME, so in\nthe generate_node_acls\u003d1 case we want the reservation logic to reference\nexisting per initiator IQN se_node_acl memory (not to generate a new\nse_node_acl), so go ahead and always set cache_dynamic_acls\u003d1 when\nTPG demo-mode is enabled.\n\nReported-by: Ronnie Sahlberg \u003cronniesahlberg@gmail.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n"
    }
  ],
  "next": "b095d61243b5f2333e2ae11a9051cd9d47597002"
}