)]}' { "log": [ { "commit": "2ffe3ccf80eba0ac9ca71c41e7357d92f1c08fc3", "tree": "b25759efa685d002b043e657fa3d05624c85eaaa", "parents": [ "f935e6192f9e068da8f8395f032ff4b721fe8510" ], "author": { "name": "Steven Rostedt", "email": "srostedt@redhat.com", "time": "Wed Jul 13 15:08:31 2011 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:54 2012 -0800" }, "message": "ftrace: Update filter when tracing enabled in set_ftrace_filter()\n\ncommit 072126f4529196f71a97960248bca54fd4554c2d upstream.\n\nCurrently, if set_ftrace_filter() is called when the ftrace_ops is\nactive, the function filters will not be updated. They will only be updated\nwhen tracing is disabled and re-enabled.\n\nUpdate the functions immediately during set_ftrace_filter().\n\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "f935e6192f9e068da8f8395f032ff4b721fe8510", "tree": "d98c511790df01d7e362a50b72a169ae11008b61", "parents": [ "3ce5564096c4444197e6f7dc83a9dbc63392b084" ], "author": { "name": "Steven Rostedt", "email": "srostedt@redhat.com", "time": "Wed Jul 13 15:03:44 2011 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:53 2012 -0800" }, "message": "ftrace: Balance records when updating the hash\n\ncommit 41fb61c2d08107ce96a5dcb3a6289b2afd3e135c upstream.\n\nWhenever the hash of the ftrace_ops is updated, the record counts\nmust be balance. This requires disabling the records that are set\nin the original hash, and then enabling the records that are set\nin the updated hash.\n\nMoving the update into ftrace_hash_move() removes the bug where the\nhash was updated but the records were not, which results in ftrace\ntriggering a warning and disabling itself because the ftrace_ops filter\nis updated while the ftrace_ops was registered, and then the failure\nhappens when the ftrace_ops is unregistered.\n\nThe current code will not trigger this bug, but new code will.\n\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "3ce5564096c4444197e6f7dc83a9dbc63392b084", "tree": "1c1e01d40b1627f23b78831196d768285c1a6eaf", "parents": [ "7ca6029f1a492528e65bc676113eeb1acf3779e4" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sat Jan 14 21:40:57 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:53 2012 -0800" }, "message": "crypto: sha512 - reduce stack usage to safe number\n\ncommit 51fc6dc8f948047364f7d42a4ed89b416c6cc0a3 upstream.\n\nFor rounds 16--79, W[i] only depends on W[i - 2], W[i - 7], W[i - 15] and W[i - 16].\nConsequently, keeping all W[80] array on stack is unnecessary,\nonly 16 values are really needed.\n\nUsing W[16] instead of W[80] greatly reduces stack usage\n(~750 bytes to ~340 bytes on x86_64).\n\nLine by line explanation:\n* BLEND_OP\n array is \"circular\" now, all indexes have to be modulo 16.\n Round number is positive, so remainder operation should be\n without surprises.\n\n* initial full message scheduling is trimmed to first 16 values which\n come from data block, the rest is calculated before it\u0027s needed.\n\n* original loop body is unrolled version of new SHA512_0_15 and\n SHA512_16_79 macros, unrolling was done to not do explicit variable\n renaming. Otherwise it\u0027s the very same code after preprocessing.\n See sha1_transform() code which does the same trick.\n\nPatch survives in-tree crypto test and original bugreport test\n(ping flood with hmac(sha512).\n\nSee FIPS 180-2 for SHA-512 definition\nhttp://csrc.nist.gov/publications/fips/fips180-2/fips180-2withchangenotice.pdf\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "7ca6029f1a492528e65bc676113eeb1acf3779e4", "tree": "54b5312cc7cae4e1c832e56277608008e24dcad1", "parents": [ "2fbe11fed22ed2751aaf4b4926f27730aaac5470" ], "author": { "name": "Alexey Dobriyan", "email": "adobriyan@gmail.com", "time": "Sat Jan 14 21:27:37 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:52 2012 -0800" }, "message": "crypto: sha512 - make it work, undo percpu message schedule\n\ncommit 84e31fdb7c797a7303e0cc295cb9bc8b73fb872d upstream.\n\ncommit f9e2bca6c22d75a289a349f869701214d63b5060\naka \"crypto: sha512 - Move message schedule W[80] to static percpu area\"\ncreated global message schedule area.\n\nIf sha512_update will ever be entered twice, hash will be silently\ncalculated incorrectly.\n\nProbably the easiest way to notice incorrect hashes being calculated is\nto run 2 ping floods over AH with hmac(sha512):\n\n\t#!/usr/sbin/setkey -f\n\tflush;\n\tspdflush;\n\tadd IP1 IP2 ah 25 -A hmac-sha512 0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025;\n\tadd IP2 IP1 ah 52 -A hmac-sha512 0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052;\n\tspdadd IP1 IP2 any -P out ipsec ah/transport//require;\n\tspdadd IP2 IP1 any -P in ipsec ah/transport//require;\n\nXfrmInStateProtoError will start ticking with -EBADMSG being returned\nfrom ah_input(). This never happens with, say, hmac(sha1).\n\nWith patch applied (on BOTH sides), XfrmInStateProtoError does not tick\nwith multiple bidirectional ping flood streams like it doesn\u0027t tick\nwith SHA-1.\n\nAfter this patch sha512_transform() will start using ~750 bytes of stack on x86_64.\nThis is OK for simple loads, for something more heavy, stack reduction will be done\nseparatedly.\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2fbe11fed22ed2751aaf4b4926f27730aaac5470", "tree": "23a80ce32f738643168226950d5cb7a02212513a", "parents": [ "90af660bec3b2d47e17cb3caae742810656e2d4f" ], "author": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Wed Jan 11 18:52:10 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:52 2012 -0800" }, "message": "xfs: Fix missing xfs_iunlock() on error recovery path in xfs_readlink()\n\ncommit 9b025eb3a89e041bab6698e3858706be2385d692 upstream.\n\nCommit b52a360b forgot to call xfs_iunlock() when it detected corrupted\nsymplink and bailed out. Fix it by jumping to \u0027out\u0027 instead of doing return.\n\nCC: Carlos Maiolino \u003ccmaiolino@redhat.com\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nReviewed-by: Alex Elder \u003celder@kernel.org\u003e\nReviewed-by: Dave Chinner \u003cdchinner@redhat.com\u003e\nSigned-off-by: Ben Myers \u003cbpm@sgi.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "90af660bec3b2d47e17cb3caae742810656e2d4f", "tree": "e8f4d93c7386c19dd9b50156696b4447ba7877d6", "parents": [ "c196878589eb5f88e244a557a55b229a3c285b3b" ], "author": { "name": "Thomas Hellstrom", "email": "thellstrom@vmware.com", "time": "Tue Jan 24 18:54:21 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:52 2012 -0800" }, "message": "drm: Fix authentication kernel crash\n\ncommit 598781d71119827b454fd75d46f84755bca6f0c6 upstream.\n\nIf the master tries to authenticate a client using drm_authmagic and\nthat client has already closed its drm file descriptor,\neither wilfully or because it was terminated, the\ncall to drm_authmagic will dereference a stale pointer into kmalloc\u0027ed memory\nand corrupt it.\n\nTypically this results in a hard system hang.\n\nThis patch fixes that problem by removing any authentication tokens\n(struct drm_magic_entry) open for a file descriptor when that file\ndescriptor is closed.\n\nSigned-off-by: Thomas Hellstrom \u003cthellstrom@vmware.com\u003e\nReviewed-by: Daniel Vetter \u003cdaniel.vetter@ffwll.ch\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "c196878589eb5f88e244a557a55b229a3c285b3b", "tree": "bf9772639fcde855853719343cc8f254a33d01d0", "parents": [ "df29ca6c2b93813c987b35972b215d9b2a0a9159" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Sun Jan 15 08:51:12 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:51 2012 -0800" }, "message": "drm/radeon/kms: Add an MSI quirk for Dell RS690\n\ncommit 44517c44496062180a6376cc704b33129441ce60 upstream.\n\nInterrupts only work with MSIs.\nhttps://bugs.freedesktop.org/show_bug.cgi?id\u003d37679\n\nReported-by: Dmitry Podgorny \u003cpasis.uax@gmail.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "df29ca6c2b93813c987b35972b215d9b2a0a9159", "tree": "21ce785b8fae037cbb359eb85092059851fff018", "parents": [ "714ca4ef28276f142b00ff2e1893f472cc30b07b" ], "author": { "name": "Tyler Hicks", "email": "tyhicks@canonical.com", "time": "Tue Jan 24 10:02:22 2012 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:51 2012 -0800" }, "message": "eCryptfs: Fix oops when printing debug info in extent crypto functions\n\ncommit 58ded24f0fcb85bddb665baba75892f6ad0f4b8a upstream.\n\nIf pages passed to the eCryptfs extent-based crypto functions are not\nmapped and the module parameter ecryptfs_verbosity\u003d1 was specified at\nloading time, a NULL pointer dereference will occur.\n\nNote that this wouldn\u0027t happen on a production system, as you wouldn\u0027t\npass ecryptfs_verbosity\u003d1 on a production system. It leaks private\ninformation to the system logs and is for debugging only.\n\nThe debugging info printed in these messages is no longer very useful\nand rather than doing a kmap() in these debugging paths, it will be\nbetter to simply remove the debugging paths completely.\n\nhttps://launchpad.net/bugs/913651\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "714ca4ef28276f142b00ff2e1893f472cc30b07b", "tree": "1a8a60d68f89f4e9df44cdb7f33c30c6a172f379", "parents": [ "a8d66a0b58b353d47b05891fd20b3bdc4c8a8015" ], "author": { "name": "Tyler Hicks", "email": "tyhicks@canonical.com", "time": "Thu Jan 19 20:33:44 2012 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:50 2012 -0800" }, "message": "eCryptfs: Check inode changes in setattr\n\ncommit a261a03904849c3df50bd0300efb7fb3f865137d upstream.\n\nMost filesystems call inode_change_ok() very early in -\u003esetattr(), but\neCryptfs didn\u0027t call it at all. It allowed the lower filesystem to make\nthe call in its -\u003esetattr() function. Then, eCryptfs would copy the\nappropriate inode attributes from the lower inode to the eCryptfs inode.\n\nThis patch changes that and actually calls inode_change_ok() on the\neCryptfs inode, fairly early in ecryptfs_setattr(). Ideally, the call\nwould happen earlier in ecryptfs_setattr(), but there are some possible\ninode initialization steps that must happen first.\n\nSince the call was already being made on the lower inode, the change in\nfunctionality should be minimal, except for the case of a file extending\ntruncate call. In that case, inode_newsize_ok() was never being\ncalled on the eCryptfs inode. Rather than inode_newsize_ok() catching\nmaximum file size errors early on, eCryptfs would encrypt zeroed pages\nand write them to the lower filesystem until the lower filesystem\u0027s\nwrite path caught the error in generic_write_checks(). This patch\nintroduces a new function, called ecryptfs_inode_newsize_ok(), which\nchecks if the new lower file size is within the appropriate limits when\nthe truncate operation will be growing the lower file.\n\nIn summary this change prevents eCryptfs truncate operations (and the\nresulting page encryptions), which would exceed the lower filesystem\nlimits or FSIZE rlimits, from ever starting.\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nReviewed-by: Li Wang \u003cliwang@nudt.edu.cn\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a8d66a0b58b353d47b05891fd20b3bdc4c8a8015", "tree": "3edad990cea1e70a57775ca6f82557d7dcf7b6f9", "parents": [ "9b9f40e785724a265fb6027216fb2bd1e97894f7" ], "author": { "name": "Tyler Hicks", "email": "tyhicks@canonical.com", "time": "Wed Jan 18 18:30:04 2012 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:50 2012 -0800" }, "message": "eCryptfs: Make truncate path killable\n\ncommit 5e6f0d769017cc49207ef56996e42363ec26c1f0 upstream.\n\necryptfs_write() handles the truncation of eCryptfs inodes. It grabs a\npage, zeroes out the appropriate portions, and then encrypts the page\nbefore writing it to the lower filesystem. It was unkillable and due to\nthe lack of sparse file support could result in tying up a large portion\nof system resources, while encrypting pages of zeros, with no way for\nthe truncate operation to be stopped from userspace.\n\nThis patch adds the ability for ecryptfs_write() to detect a pending\nfatal signal and return as gracefully as possible. The intent is to\nleave the lower file in a useable state, while still allowing a user to\nbreak out of the encryption loop. If a pending fatal signal is detected,\nthe eCryptfs inode size is updated to reflect the modified inode size\nand then -EINTR is returned.\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "9b9f40e785724a265fb6027216fb2bd1e97894f7", "tree": "2744ada6cba7b709425bd2a6fba2b702fa43504a", "parents": [ "cdce30003c234575bbcfddb0980adc04b82408c7" ], "author": { "name": "Tim Gardner", "email": "tim.gardner@canonical.com", "time": "Thu Jan 12 16:31:55 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:50 2012 -0800" }, "message": "ecryptfs: Improve metadata read failure logging\n\ncommit 30373dc0c87ffef68d5628e77d56ffb1fa22e1ee upstream.\n\nPrint inode on metadata read failure. The only real\nway of dealing with metadata read failures is to delete\nthe underlying file system file. Having the inode\nallows one to \u0027find . -inum INODE`.\n\n[tyhicks@canonical.com: Removed some minor not-for-stable parts]\nSigned-off-by: Tim Gardner \u003ctim.gardner@canonical.com\u003e\nReviewed-by: Kees Cook \u003ckeescook@chromium.org\u003e\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "cdce30003c234575bbcfddb0980adc04b82408c7", "tree": "2ee44e04d22b978baba5bac720ba48f0162ff70a", "parents": [ "a3c9ccb3e13812e13be045a97ab309a4e23d9ac4" ], "author": { "name": "Tyler Hicks", "email": "tyhicks@canonical.com", "time": "Thu Jan 12 11:30:44 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:50 2012 -0800" }, "message": "eCryptfs: Sanitize write counts of /dev/ecryptfs\n\ncommit db10e556518eb9d21ee92ff944530d84349684f4 upstream.\n\nA malicious count value specified when writing to /dev/ecryptfs may\nresult in a a very large kernel memory allocation.\n\nThis patch peeks at the specified packet payload size, adds that to the\nsize of the packet headers and compares the result with the write count\nvalue. The resulting maximum memory allocation size is approximately 532\nbytes.\n\nSigned-off-by: Tyler Hicks \u003ctyhicks@canonical.com\u003e\nReported-by: Sasha Levin \u003clevinsasha928@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a3c9ccb3e13812e13be045a97ab309a4e23d9ac4", "tree": "fc5aa862e795e0bb3406e95ff134fce78da4dc42", "parents": [ "235eae6e5e402f5f723203e4444f10c16c7c3be3" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Mon Jan 23 18:23:36 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Fri Feb 03 09:18:49 2012 -0800" }, "message": "ALSA: hda - Fix silent outputs from docking-station jacks of Dell laptops\n\ncommit b4ead019afc201f71c39cd0dfcaafed4a97b3dd2 upstream.\n\nThe recent change of the power-widget handling for IDT codecs caused\nthe silent output from the docking-station line-out jack. This was\npartially fixed by the commit f2cbba7602383cd9cdd21f0a5d0b8bd1aad47b33\n\"ALSA: hda - Fix the lost power-setup of seconary pins after PM resume\".\nBut the line-out on the docking-station is still silent when booted\nwith the jack plugged even by this fix.\n\nThe remainig bug is that the power-widget is set off in stac92xx_init()\nbecause the pins in cfg-\u003eline_out_pins[] aren\u0027t checked there properly\nbut only hp_pins[] are checked in is_nid_hp_pin().\n\nThis patch fixes the problem by checking both HP and line-out pins\nand leaving the power-map correctly.\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d42637\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "235eae6e5e402f5f723203e4444f10c16c7c3be3", "tree": "33345f4ed356aa119c1fa79bb0289678e990ee06", "parents": [ "20ef6312522d42407e8030bb17f25c4fde724a37" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:26:46 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:26:46 2012 -0800" }, "message": "Linux 3.0.18\n" }, { "commit": "20ef6312522d42407e8030bb17f25c4fde724a37", "tree": "9c77a97eec1bd5080e39f2d9acd82a75d3211abf", "parents": [ "e4ae34bbc7386489a0c8253f246e7a5d316f249a" ], "author": { "name": "Artem Bityutskiy", "email": "artem.bityutskiy@linux.intel.com", "time": "Wed Jan 11 15:13:27 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:06 2012 -0800" }, "message": "UBIFS: make debugging messages light again\n\ncommit 1f5d78dc4823a85f112aaa2d0f17624f8c2a6c52 upstream.\n\nWe switch to dynamic debugging in commit\n56e46742e846e4de167dde0e1e1071ace1c882a5 but did not take into account that\nnow we do not control anymore whether a specific message is enabled or not.\nSo now we lock the \"dbg_lock\" and release it in every debugging macro, which\nmake them not so light-weight.\n\nThis commit removes the \"dbg_lock\" protection from the debugging macros to\nfix the issue.\n\nThe downside is that now our DBGKEY() stuff is broken, but this is not\ncritical at all and will be fixed later.\n\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n\n" }, { "commit": "e4ae34bbc7386489a0c8253f246e7a5d316f249a", "tree": "7703fa7dc4caec84a81230119e9c87e3f5a857ff", "parents": [ "dd558f1e43567fd51a258f61081809e60735f9f4" ], "author": { "name": "Stanislaw Gruszka", "email": "sgruszka@redhat.com", "time": "Fri Dec 23 08:13:50 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:06 2012 -0800" }, "message": "iwlegacy: 3945: fix hw passive scan on radar channels\n\ncommit 68acc4afb040d98ddfd2cae0de09e2f4e1ee127f upstream.\n\nPatch fix firmware error on \"iw dev wlan0 scan passive\" for\nhardware scanning (with disable_hw_scan\u003d0 module parameter).\n\n iwl3945 0000:03:00.0: Microcode SW error detected. Restarting 0x82000008.\n iwl3945 0000:03:00.0: Loaded firmware version: 15.32.2.9\n iwl3945 0000:03:00.0: Start IWL Error Log Dump:\n iwl3945 0000:03:00.0: Status: 0x0002A2E4, count: 1\n iwl3945 0000:03:00.0: Desc Time asrtPC blink2 ilink1 nmiPC Line\n iwl3945 0000:03:00.0: SYSASSERT (0x5) 0041263900 0x13756 0x0031C 0x00000 764\n iwl3945 0000:03:00.0: Error Reply type 0x000002FC cmd C_SCAN (0x80) seq 0x443E ser 0x00340000\n iwl3945 0000:03:00.0: Command C_SCAN failed: FW Error\n iwl3945 0000:03:00.0: Can\u0027t stop Rx DMA.\n\nWe have disable ability to change passive scanning to active on\nparticular channel when traffic is detected on that channel. Otherwise\nfirmware will report error, when we try to do passive scan on radar\nchannels.\n\nReported-and-debugged-by: Pedro Francisco \u003cpedrogfrancisco@gmail.com\u003e\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "dd558f1e43567fd51a258f61081809e60735f9f4", "tree": "952d8363de10006622382cb30ae3d20b95ebb237", "parents": [ "bcbef18db94dfb991bd3025069b3413cbc52f8b6" ], "author": { "name": "Wey-Yi Guy", "email": "wey-yi.w.guy@intel.com", "time": "Thu Nov 10 06:55:04 2011 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:05 2012 -0800" }, "message": "iwlagn: check for SMPS mode\n\ncommit b2ccccdca46273c7b321ecf5041c362cd950da20 upstream.\n\nCheck and report WARN only when its invalid\n\nResolves:\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d42621\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d766071\n\nSigned-off-by: Wey-Yi Guy \u003cwey-yi.w.guy@intel.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n\n" }, { "commit": "bcbef18db94dfb991bd3025069b3413cbc52f8b6", "tree": "a6c432dc65b182b84b058ba9408e40000478d57f", "parents": [ "c2c9f543718e15227a4aa0135e793480b94c4d97" ], "author": { "name": "Michal Hocko", "email": "mhocko@suse.cz", "time": "Fri Jan 20 14:33:55 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:05 2012 -0800" }, "message": "mm: fix NULL ptr dereference in __count_immobile_pages\n\ncommit 687875fb7de4a95223af20ee024282fa9099f860 upstream.\n\nFix the following NULL ptr dereference caused by\n\n cat /sys/devices/system/memory/memory0/removable\n\nPid: 13979, comm: sed Not tainted 3.0.13-0.5-default #1 IBM BladeCenter LS21 -[7971PAM]-/Server Blade\nRIP: __count_immobile_pages+0x4/0x100\nProcess sed (pid: 13979, threadinfo ffff880221c36000, task ffff88022e788480)\nCall Trace:\n is_pageblock_removable_nolock+0x34/0x40\n is_mem_section_removable+0x74/0xf0\n show_mem_removable+0x41/0x70\n sysfs_read_file+0xfe/0x1c0\n vfs_read+0xc7/0x130\n sys_read+0x53/0xa0\n system_call_fastpath+0x16/0x1b\n\nWe are crashing because we are trying to dereference NULL zone which\ncame from pfn\u003d0 (struct page ffffea0000000000). According to the boot\nlog this page is marked reserved:\ne820 update range: 0000000000000000 - 0000000000010000 (usable) \u003d\u003d\u003e (reserved)\n\nand early_node_map confirms that:\nearly_node_map[3] active PFN ranges\n 1: 0x00000010 -\u003e 0x0000009c\n 1: 0x00000100 -\u003e 0x000bffa3\n 1: 0x00100000 -\u003e 0x00240000\n\nThe problem is that memory_present works in PAGE_SECTION_MASK aligned\nblocks so the reserved range sneaks into the the section as well. This\nalso means that free_area_init_node will not take care of those reserved\npages and they stay uninitialized.\n\nWhen we try to read the removable status we walk through all available\nsections and hope that the zone is valid for all pages in the section.\nBut this is not true in this case as the zone and nid are not initialized.\n\nWe have only one node in this particular case and it is marked as node\u003d1\n(rather than 0) and that made the problem visible because page_to_nid will\nreturn 0 and there are no zones on the node.\n\nLet\u0027s check that the zone is valid and that the given pfn falls into its\nboundaries and mark the section not removable. This might cause some\nfalse positives, probably, but we do not have any sane way to find out\nwhether the page is reserved by the platform or it is just not used for\nwhatever other reasons.\n\nSigned-off-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nAcked-by: Mel Gorman \u003cmgorman@suse.de\u003e\nCc: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nCc: Andrea Arcangeli \u003caarcange@redhat.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "c2c9f543718e15227a4aa0135e793480b94c4d97", "tree": "54abbd14151f4fd7900237125f92f21571a4a4c5", "parents": [ "b8f256956a063ebc60a674ec5795c7ca5aaa79c6" ], "author": { "name": "Will Deacon", "email": "will.deacon@arm.com", "time": "Fri Jan 20 14:34:09 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:05 2012 -0800" }, "message": "proc: clear_refs: do not clear reserved pages\n\ncommit 85e72aa5384b1a614563ad63257ded0e91d1a620 upstream.\n\n/proc/pid/clear_refs is used to clear the Referenced and YOUNG bits for\npages and corresponding page table entries of the task with PID pid, which\nincludes any special mappings inserted into the page tables in order to\nprovide things like vDSOs and user helper functions.\n\nOn ARM this causes a problem because the vectors page is mapped as a\nglobal mapping and since ec706dab (\"ARM: add a vma entry for the user\naccessible vector page\"), a VMA is also inserted into each task for this\npage to aid unwinding through signals and syscall restarts. Since the\nvectors page is required for handling faults, clearing the YOUNG bit (and\nsubsequently writing a faulting pte) means that we lose the vectors page\n*globally* and cannot fault it back in. This results in a system deadlock\non the next exception.\n\nTo see this problem in action, just run:\n\n\t$ echo 1 \u003e /proc/self/clear_refs\n\non an ARM platform (as any user) and watch your system hang. I think this\nhas been the case since 2.6.37\n\nThis patch avoids clearing the aforementioned bits for reserved pages,\ntherefore leaving the vectors page intact on ARM. Since reserved pages\nare not candidates for swap, this change should not have any impact on the\nusefulness of clear_refs.\n\nSigned-off-by: Will Deacon \u003cwill.deacon@arm.com\u003e\nReported-by: Moussa Ba \u003cmoussaba@micron.com\u003e\nAcked-by: Hugh Dickins \u003chughd@google.com\u003e\nCc: David Rientjes \u003crientjes@google.com\u003e\nCc: Russell King \u003crmk@arm.linux.org.uk\u003e\nAcked-by: Nicolas Pitre \u003cnico@linaro.org\u003e\nCc: Matt Mackall \u003cmpm@selenic.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "b8f256956a063ebc60a674ec5795c7ca5aaa79c6", "tree": "0e84a418d7a9f7cc32db588c933a82c00a22ff80", "parents": [ "72a82010500dea88b2d786a76b063a871e2a4603" ], "author": { "name": "Ananth N Mavinakayanahalli", "email": "ananth@in.ibm.com", "time": "Fri Jan 20 14:34:04 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:04 2012 -0800" }, "message": "kprobes: initialize before using a hlist\n\ncommit d496aab567e7e52b3e974c9192a5de6e77dce32c upstream.\n\nCommit ef53d9c5e (\"kprobes: improve kretprobe scalability with hashed\nlocking\") introduced a bug where we can potentially leak\nkretprobe_instances since we initialize a hlist head after having used\nit.\n\nInitialize the hlist head before using it.\n\nReported by: Jim Keniston \u003cjkenisto@us.ibm.com\u003e\nAcked-by: Jim Keniston \u003cjkenisto@us.ibm.com\u003e\nSigned-off-by: Ananth N Mavinakayanahalli \u003cananth@in.ibm.com\u003e\nAcked-by: Masami Hiramatsu \u003cmasami.hiramatsu.pt@hitachi.com\u003e\nCc: Srinivasa D S \u003csrinivasa@in.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "72a82010500dea88b2d786a76b063a871e2a4603", "tree": "1076db01011cc5bf5bd52e530a44f1e849f9b1ba", "parents": [ "a6007c036e0a0e10c0b4dbd533576d201b822a90" ], "author": { "name": "Dan Rosenberg", "email": "drosenberg@vsecurity.com", "time": "Fri Jan 20 14:34:27 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:04 2012 -0800" }, "message": "score: fix off-by-one index into syscall table\n\ncommit c25a785d6647984505fa165b5cd84cfc9a95970b upstream.\n\nIf the provided system call number is equal to __NR_syscalls, the\ncurrent check will pass and a function pointer just after the system\ncall table may be called, since sys_call_table is an array with total\nsize __NR_syscalls.\n\nWhether or not this is a security bug depends on what the compiler puts\nimmediately after the system call table. It\u0027s likely that this won\u0027t do\nanything bad because there is an additional NULL check on the syscall\nentry, but if there happens to be a non-NULL value immediately after the\nsystem call table, this may result in local privilege escalation.\n\nSigned-off-by: Dan Rosenberg \u003cdrosenberg@vsecurity.com\u003e\nCc: Chen Liqin \u003cliqin.chen@sunplusct.com\u003e\nCc: Lennox Wu \u003clennox.wu@gmail.com\u003e\nCc: Eugene Teo \u003ceugeneteo@kernel.sg\u003e\nCc: Arnd Bergmann \u003carnd@arndb.de\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "a6007c036e0a0e10c0b4dbd533576d201b822a90", "tree": "eac884620072ba48124111347c1e8c5e7d1a94f6", "parents": [ "d7531928ae349a5d59a6820bc3a5e46c9907f5ad" ], "author": { "name": "Toshiharu Okada", "email": "toshiharu-linux@dsn.okisemi.com", "time": "Mon Sep 26 16:16:23 2011 +0900" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:03 2012 -0800" }, "message": "i2c-eg20t: modified the setting of transfer rate.\n\ncommit ff35e8b18984ad2a82cbd259fc07f0be4b34b1aa upstream.\n\nThis patch modified the setting value of\nI2C Bus Transfer Rate Setting Counter regisrer.\n\nSigned-off-by: Toshiharu Okada \u003ctoshiharu-linux@dsn.okisemi.com\u003e\nSigned-off-by: Ben Dooks \u003cben-linux@fluff.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "d7531928ae349a5d59a6820bc3a5e46c9907f5ad", "tree": "73cb71e55d567f44999f7e70abd453741eaa237b", "parents": [ "5e383255dab2f12e7e111e23c057a30955de8cf3" ], "author": { "name": "Dirk Eibach", "email": "eibach@gdsys.de", "time": "Tue Oct 18 03:04:11 2011 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:03 2012 -0800" }, "message": "net: Fix driver name for mdio-gpio.c\n\ncommit f42af6c486aa5ca6ee62800cb45c5b252020509d upstream.\n\nSince commit\n\"7488876... dt/net: Eliminate users of of_platform_{,un}register_driver\"\nthere are two platform drivers named \"mdio-gpio\" registered.\nI renamed the of variant to \"mdio-ofgpio\".\n\nSigned-off-by: Dirk Eibach \u003ceibach@gdsys.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "5e383255dab2f12e7e111e23c057a30955de8cf3", "tree": "48cc4a4df86c0572435f50c120c5cbb1eebf7b43", "parents": [ "8edf7c13515fa2dee528ab348919058b14454457" ], "author": { "name": "Boaz Harrosh", "email": "bharrosh@panasas.com", "time": "Fri Jan 06 09:31:20 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:03 2012 -0800" }, "message": "pnfs-obj: Must return layout on IO error\n\ncommit fe0fe83585f88346557868a803a479dfaaa0688a upstream.\n\nAs mandated by the standard. In case of an IO error, a pNFS\nobjects layout driver must return it\u0027s layout. This is because\nall device errors are reported to the server as part of the\nlayout return buffer.\n\nThis is implemented the same way PNFS_LAYOUTRET_ON_SETATTR\nis done, through a bit flag on the pnfs_layoutdriver_type-\u003eflags\nmember. The flag is set by the layout driver that wants a\nlayout_return preformed at pnfs_ld_{write,read}_done in case\nof an error.\n(Though I have not defined a wrapper like pnfs_ld_layoutret_on_setattr\n because this code is never called outside of pnfs.c and pnfs IO\n paths)\n\nWithout this patch 3.[0-2] Kernels leak memory and have an annoying\nWARN_ON after every IO error utilizing the pnfs-obj driver.\n\nSigned-off-by: Boaz Harrosh \u003cbharrosh@panasas.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "8edf7c13515fa2dee528ab348919058b14454457", "tree": "1563ae001b581b44e6f2dc6c2d2dfc3e2587e6cd", "parents": [ "ac631973a9ad6bba3d666f687288ebeb819c0df0" ], "author": { "name": "Boaz Harrosh", "email": "bharrosh@panasas.com", "time": "Fri Jan 06 09:28:12 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:02 2012 -0800" }, "message": "pnfs-obj: pNFS errors are communicated on iodata-\u003epnfs_error\n\ncommit 5c0b4129c07b902b27d3f3ebc087757f534a3abd upstream.\n\nSome time along the way pNFS IO errors were switched to\ncommunicate with a special iodata-\u003epnfs_error member instead\nof the regular RPC members. But objlayout was not switched\nover.\n\nFix that!\nWithout this fix any IO error is hanged, because IO is not\nswitched to MDS and pages are never cleared or read.\n\nSigned-off-by: Boaz Harrosh \u003cbharrosh@panasas.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n\n" }, { "commit": "ac631973a9ad6bba3d666f687288ebeb819c0df0", "tree": "5a2d58a408e6ba4984ece526a2fa12f87f2104bf", "parents": [ "415b95df641c998a7cf15c916047f338ab2ce87b" ], "author": { "name": "Stanislaw Gruszka", "email": "sgruszka@redhat.com", "time": "Fri Jan 13 12:59:32 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:02 2012 -0800" }, "message": "rt2800pci: fix spurious interrupts generation\n\ncommit dfd00c4c8f3dfa1fd7cec45f83d98b2a49743dcd upstream.\n\nSame devices can generate interrupt without properly setting bit in\nINT_SOURCE_CSR register (spurious interrupt), what will cause IRQ line\nwill be disabled by interrupts controller driver.\n\nWe discovered that clearing INT_MASK_CSR stops such behaviour. We\npreviously first read that register, and then clear all know interrupt\nsources bits and do not touch reserved bits. After this patch, we write\nto all register content (I believe writing to reserved bits on that\nregister will not cause any problems, I tested that on my rt2800pci\ndevice).\n\nThis fix very bad performance problem, practically making device\nunusable (since worked without interrupts), reported in:\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d658451\n\nWe previously tried to workaround that issue in commit\n4ba7d9997869d25bd223dea7536fc1ce9fab3b3b \"rt2800pci: handle spurious\ninterrupts\", but it was reverted in commit\n82e5fc2a34fa9ffea38f00c4066b7e600a0ca5e6\nas thing, that will prevent to detect real spurious interrupts.\n\nReported-and-tested-by: Amir Hedayaty \u003chedayaty@gmail.com\u003e\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nAcked-by: Gertjan van Wingerde \u003cgwingerde@gmail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "415b95df641c998a7cf15c916047f338ab2ce87b", "tree": "97fb6c5954537a10629a9c7484a01bd3829c4159", "parents": [ "6c8e76e158a9bc849ec946ab030595e06ad89210" ], "author": { "name": "Cliff Wickman", "email": "cpw@sgi.com", "time": "Mon Jan 16 15:18:48 2012 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:01 2012 -0800" }, "message": "x86/UV2: Fix BAU destination timeout initialization\n\ncommit d059f9fa84a30e04279c6ff615e9e2cf3b260191 upstream.\n\nMove the call to enable_timeouts() forward so that\nBAU_MISC_CONTROL is initialized before using it in\ncalculate_destination_timeout().\n\nFix the calculation of a BAU destination timeout\nfor UV2 (in calculate_destination_timeout()).\n\nSigned-off-by: Cliff Wickman \u003ccpw@sgi.com\u003e\nLink: http://lkml.kernel.org/r/20120116211848.GB5767@sgi.com\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "6c8e76e158a9bc849ec946ab030595e06ad89210", "tree": "72ce65be39486578fb73e4bcaae83f0a7239724d", "parents": [ "06a23648ebbb532745eb85c1a381b83dd90e94af" ], "author": { "name": "Alexander Aring", "email": "a.aring@phytec.de", "time": "Thu Dec 08 15:43:53 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:01 2012 -0800" }, "message": "I2C: OMAP: correct SYSC register offset for OMAP4\n\ncommit 2727b1753934e154931d6b3bdf20c9b2398457a2 upstream.\n\nCorrect OMAP_I2C_SYSC_REG offset in omap4 register map.\nOffset 0x20 is reserved and OMAP_I2C_SYSC_REG has 0x10 as offset.\n\nSigned-off-by: Alexander Aring \u003ca.aring@phytec.de\u003e\n[khilman@ti.com: minor changelog edits]\nSigned-off-by: Kevin Hilman \u003ckhilman@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "06a23648ebbb532745eb85c1a381b83dd90e94af", "tree": "49137b15bc60af0e9bb161f7f81f2d0815b688e9", "parents": [ "640bb6ec4ff89b0349d1c7cb42aa25db191b4f63" ], "author": { "name": "Roland Dreier", "email": "roland@purestorage.com", "time": "Tue Dec 13 14:55:33 2011 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:00 2012 -0800" }, "message": "target: Set additional sense length field in sense data\n\ncommit 895f3022523361e9b383cf48f51feb1f7d5e7e53 upstream.\n\nThe target code was not setting the additional sense length field in the\nsense data it returned, which meant that at least the Linux stack\nignored the ASC/ASCQ fields. For example, without this patch, on a\ntcm_loop device:\n\n # sg_raw -v /dev/sda 2 0 0 0 0 0\n\ngives\n\n cdb to send: 02 00 00 00 00 00\n SCSI Status: Check Condition\n\n Sense Information:\n Fixed format, current; Sense key: Illegal Request\n Raw sense data (in hex):\n 70 00 05 00 00 00 00 00\n\nwhile after the patch we correctly get the following (which matches what\na regular disk returns):\n\n cdb to send: 02 00 00 00 00 00\n SCSI Status: Check Condition\n\n Sense Information:\n Fixed format, current; Sense key: Illegal Request\n Additional sense: Invalid command operation code\n Raw sense data (in hex):\n 70 00 05 00 00 00 00 0a 00 00 00 00 20 00 00 00\n 00 00\n\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "640bb6ec4ff89b0349d1c7cb42aa25db191b4f63", "tree": "e23b5280c7b0d6fb829cd128d69a837ac87fed11", "parents": [ "7b3e8a2073d9875dbdcdfec5d40ff54c8e8c418c" ], "author": { "name": "Roland Dreier", "email": "roland@purestorage.com", "time": "Tue Dec 06 10:02:09 2011 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:25:00 2012 -0800" }, "message": "target: Set response format in INQUIRY response\n\ncommit ce136176fea522fc8f4c16dcae7e8ed1d890ca39 upstream.\n\nCurrent SCSI specs say that the \"response format\" field in the standard\nINQUIRY response should be set to 2, and all the real SCSI devices I\nhave do put 2 here. So let\u0027s do that too.\n\nSigned-off-by: Roland Dreier \u003croland@purestorage.com\u003e\nSigned-off-by: Nicholas Bellinger \u003cnab@linux-iscsi.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "7b3e8a2073d9875dbdcdfec5d40ff54c8e8c418c", "tree": "98daae136eab94cbadb11942ead31162b420d448", "parents": [ "68e6689b9b35c8a2fa73e00947238d2c5cb0387c" ], "author": { "name": "Stratos Psomadakis", "email": "psomas@gentoo.org", "time": "Sun Dec 04 02:23:54 2011 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:59 2012 -0800" }, "message": "sym53c8xx: Fix NULL pointer dereference in slave_destroy\n\ncommit cced5041ed5a2d1352186510944b0ddfbdbe4c0b upstream.\n\nsym53c8xx_slave_destroy unconditionally assumes that sym53c8xx_slave_alloc has\nsuccesesfully allocated a sym_lcb. This can lead to a NULL pointer dereference\n(exposed by commit 4e6c82b).\n\nSigned-off-by: Stratos Psomadakis \u003cpsomas@gentoo.org\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "68e6689b9b35c8a2fa73e00947238d2c5cb0387c", "tree": "1a25d95e681074d2e507326a0e06a3e9dfd67ab0", "parents": [ "55bd02eb4c6e40c2870aee19c5e36d1a85713be8" ], "author": { "name": "Lin Ming", "email": "ming.m.lin@intel.com", "time": "Tue Dec 13 09:36:03 2011 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:59 2012 -0800" }, "message": "ACPI: processor: fix acpi_get_cpuid for UP processor\n\ncommit d640113fe80e45ebd4a5b420b220d3f6bf37f682 upstream.\n\nFor UP processor, it is likely that no _MAT method or MADT table defined.\nSo currently acpi_get_cpuid(...) always return -1 for UP processor.\nThis is wrong. It should return valid value for CPU0.\n\nIn the other hand, BIOS may define multiple CPU handles even for UP\nprocessor, for example\n\n Scope (_PR)\n {\n Processor (CPU0, 0x00, 0x00000410, 0x06) {}\n Processor (CPU1, 0x01, 0x00000410, 0x06) {}\n Processor (CPU2, 0x02, 0x00000410, 0x06) {}\n Processor (CPU3, 0x03, 0x00000410, 0x06) {}\n }\n\nWe should only return valid value for CPU0\u0027s acpi handle.\nAnd return invalid value for others.\n\nhttp://marc.info/?t\u003d132329819900003\u0026r\u003d1\u0026w\u003d2\n\nReported-and-tested-by: wallak@free.fr\nSigned-off-by: Lin Ming \u003cming.m.lin@intel.com\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "55bd02eb4c6e40c2870aee19c5e36d1a85713be8", "tree": "2fc87336866c866dcaec7f1458a49bfafb0b5d01", "parents": [ "0076d42a31bac7853d3c77c3858d2685f6fe8f2d" ], "author": { "name": "Lin Ming", "email": "ming.m.lin@intel.com", "time": "Tue Nov 29 22:13:35 2011 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:58 2012 -0800" }, "message": "ACPICA: Put back the call to acpi_os_validate_address\n\ncommit da4d8b287abe783d30e968155614531a0937d090 upstream.\n\nThe call to acpi_os_validate_address in acpi_ds_get_region_arguments was\nremoved by mistake in commit 9ad19ac(ACPICA: Split large dsopcode and\ndsload.c files).\n\nPut it back.\n\nReported-and-bisected-by: Luca Tettamanti \u003ckronos.it@gmail.com\u003e\nSigned-off-by: Lin Ming \u003cming.m.lin@intel.com\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "0076d42a31bac7853d3c77c3858d2685f6fe8f2d", "tree": "55a28b5b5ee2d120f3769dddb399c7ad175409d2", "parents": [ "ef9a04d5b336853aeb3f3975c4e52b07c1c4d3ec" ], "author": { "name": "Kurt Garloff", "email": "kurt@garloff.de", "time": "Tue Jan 17 04:21:49 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:58 2012 -0800" }, "message": "ACPI, ia64: Use SRAT table rev to use 8bit or 16/32bit PXM fields (ia64)\n\ncommit 9f10f6a520deb3639fac78d81151a3ade88b4e7f upstream.\n\nIn SRAT v1, we had 8bit proximity domain (PXM) fields; SRAT v2 provides\n32bits for these. The new fields were reserved before.\nAccording to the ACPI spec, the OS must disregrard reserved fields.\n\nia64 did handle the PXM fields almost consistently, but depending on\nsgi\u0027s sn2 platform. This patch leaves the sn2 logic in, but does also\nuse 16/32 bits for PXM if the SRAT has rev 2 or higher.\n\nThe patch also adds __init to the two pxm accessor functions, as they\naccess __initdata now and are called from an __init function only anyway.\n\nNote that the code only uses 16 bits for the PXM field in the processor\nproximity field; the patch does not address this as 16 bits are more than\nenough.\n\nSigned-off-by: Kurt Garloff \u003ckurt@garloff.de\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "ef9a04d5b336853aeb3f3975c4e52b07c1c4d3ec", "tree": "2f2472a300dd97cffed5a5018bd3721431fe75c7", "parents": [ "643147c50fde7eb0456953f468cc277d621f629e" ], "author": { "name": "Kurt Garloff", "email": "kurt@garloff.de", "time": "Tue Jan 17 04:20:31 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:57 2012 -0800" }, "message": "ACPI, x86: Use SRAT table rev to use 8bit or 32bit PXM fields (x86/x86-64)\n\ncommit cd298f60a2451a16e0f077404bf69b62ec868733 upstream.\n\nIn SRAT v1, we had 8bit proximity domain (PXM) fields; SRAT v2 provides\n32bits for these. The new fields were reserved before.\nAccording to the ACPI spec, the OS must disregrard reserved fields.\n\nx86/x86-64 was rather inconsistent prior to this patch; it used 8 bits\nfor the pxm field in cpu_affinity, but 32 bits in mem_affinity.\nThis patch makes it consistent: Either use 8 bits consistently (SRAT\nrev 1 or lower) or 32 bits (SRAT rev 2 or higher).\n\ncc: x86@kernel.org\nSigned-off-by: Kurt Garloff \u003ckurt@garloff.de\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "643147c50fde7eb0456953f468cc277d621f629e", "tree": "7bc38c991b673bfeb2edfaec520f700403f485af", "parents": [ "e26a6033d0d0183e613a1ae5eafefd3baf7f3e6c" ], "author": { "name": "Kurt Garloff", "email": "kurt@garloff.de", "time": "Tue Jan 17 04:18:02 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:57 2012 -0800" }, "message": "ACPI: Store SRAT table revision\n\ncommit 8df0eb7c9d96f9e82f233ee8b74e0f0c8471f868 upstream.\n\nIn SRAT v1, we had 8bit proximity domain (PXM) fields; SRAT v2 provides\n32bits for these. The new fields were reserved before.\nAccording to the ACPI spec, the OS must disregrard reserved fields.\nIn order to know whether or not, we must know what version the SRAT\ntable has.\n\nThis patch stores the SRAT table revision for later consumption\nby arch specific __init functions.\n\nSigned-off-by: Kurt Garloff \u003ckurt@garloff.de\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "e26a6033d0d0183e613a1ae5eafefd3baf7f3e6c", "tree": "ca56051b0cf33f40befec2aa3ba414f99f9b3752", "parents": [ "57700d3c569071c4c43f220de637461850d027a1" ], "author": { "name": "Shaohua Li", "email": "shaohua.li@intel.com", "time": "Tue Jan 10 15:48:19 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:56 2012 -0800" }, "message": "intel_idle: fix API misuse\n\ncommit 39a74fdedd1c1461d6fb6d330b5266886513c98f upstream.\n\nsmp_call_function() only lets all other CPUs execute a specific function,\nwhile we expect all CPUs do in intel_idle. Without the fix, we could have\none cpu which has auto_demotion enabled or has no broadcast timer setup.\nUsually we don\u0027t see impact because auto demotion just harms power and the\nintel_idle init is called in CPU 0, where boradcast timer delivers\ninterrupt, but this still could be a problem.\n\nSigned-off-by: Shaohua Li \u003cshaohua.li@intel.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "57700d3c569071c4c43f220de637461850d027a1", "tree": "261d465e5537fe8fb6a12487e3f7d88e29ef8793", "parents": [ "db52a757b355ec71670b4b0f85cd2d6f28306a79" ], "author": { "name": "Thomas Renninger", "email": "trenn@suse.de", "time": "Sun Dec 04 22:17:29 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:56 2012 -0800" }, "message": "intel idle: Make idle driver more robust\n\ncommit 5c2a9f06a9cd7194f884cdc88144866235dec07d upstream.\n\nkvm -cpu host passes the original cpuid info to the guest.\n\nLatest kvm version seem to return true for mwait_leaf cpuid\nfunction on recent Intel CPUs. But it does not return mwait\nC-states (mwait_substates), instead zero is returned.\n\nWhile real CPUs seem to always return non-zero values, the intel\nidle driver should not get active in kvm (mwait_substates \u003d\u003d 0)\ncase and bail out.\nOtherwise a Null pointer exception will happen later when the\ncpuidle subsystem tries to get active:\n[0.984807] BUG: unable to handle kernel NULL pointer dereference at (null)\n[0.984807] IP: [\u003c(null)\u003e] (null)\n...\n[0.984807][\u003cffffffff8143cf34\u003e] ? cpuidle_idle_call+0xb4/0x340\n[0.984807][\u003cffffffff8159e7bc\u003e] ? __atomic_notifier_call_chain+0x4c/0x70\n[0.984807][\u003cffffffff81001198\u003e] ? cpu_idle+0x78/0xd0\n\nReference:\nhttps://bugzilla.novell.com/show_bug.cgi?id\u003d726296\n\nSigned-off-by: Thomas Renninger \u003ctrenn@suse.de\u003e\nCC: Bruno Friedmann \u003cbruno@ioda-net.ch\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "db52a757b355ec71670b4b0f85cd2d6f28306a79", "tree": "71df96c7fc6b87292f762fc6142592fe1fd1727d", "parents": [ "cb86f0a0920b63b179d2fa653c6c851db27d069a" ], "author": { "name": "David Henningsson", "email": "david.henningsson@canonical.com", "time": "Mon Jan 16 10:52:20 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:56 2012 -0800" }, "message": "ALSA: HDA: Fix internal microphone on Dell Studio 16 XPS 1645\n\ncommit ffe535edb9a9c5b4d5fe03dfa3d89a1495580f1b upstream.\n\nMore than one user reports that changing the model from \"both\" to\n\"dmic\" makes their Internal Mic work.\n\nTested-by: Martin Ling \u003cmartin-launchpad@earth.li\u003e\nBugLink: https://bugs.launchpad.net/bugs/795823\nSigned-off-by: David Henningsson \u003cdavid.henningsson@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "cb86f0a0920b63b179d2fa653c6c851db27d069a", "tree": "5df474f0a8cfa0d569e59452795ed62e15374971", "parents": [ "c8fec258e5d1c35712795641350cc78da4334629" ], "author": { "name": "Clemens Ladisch", "email": "clemens@ladisch.de", "time": "Sat Jan 14 16:42:24 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:56 2012 -0800" }, "message": "ALSA: virtuoso: Xonar DS: fix polarity of front output\n\ncommit f0e48b6bd4e407459715240cd241ddb6b89bdf81 upstream.\n\nThe two DACs for the front output and the surround/center/LFE/back\noutputs are wired up out of phase, so when channels are duplicated,\ntheir sound can cancel out each other and result in a weaker bass\nresponse. To fix this, reverse the polarity of the neutron flow to\nthe front output.\n\nReported-any-tested-by: Daniel Hill \u003cdaniel@enemyplanet.geek.nz\u003e\nSigned-off-by: Clemens Ladisch \u003cclemens@ladisch.de\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "c8fec258e5d1c35712795641350cc78da4334629", "tree": "154afe98ce6f5c11cccb6de96dfe0a7cb620ab94", "parents": [ "12c3b3ac1e8004616b30aec6acee1bb91badeb99" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Jan 17 15:21:19 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:55 2012 -0800" }, "message": "proc: clean up and fix /proc/\u003cpid\u003e/mem handling\n\ncommit e268337dfe26dfc7efd422a804dbb27977a3cccc upstream.\n\nJüri Aedla reported that the /proc/\u003cpid\u003e/mem handling really isn\u0027t very\nrobust, and it also doesn\u0027t match the permission checking of any of the\nother related files.\n\nThis changes it to do the permission checks at open time, and instead of\ntracking the process, it tracks the VM at the time of the open. That\nsimplifies the code a lot, but does mean that if you hold the file\ndescriptor open over an execve(), you\u0027ll continue to read from the _old_\nVM.\n\nThat is different from our previous behavior, but much simpler. If\nsomebody actually finds a load where this matters, we\u0027ll need to revert\nthis commit.\n\nI suspect that nobody will ever notice - because the process mapping\naddresses will also have changed as part of the execve. So you cannot\nactually usefully access the fd across a VM change simply because all\nthe offsets for IO would have changed too.\n\nReported-by: Jüri Aedla \u003casd@ut.ee\u003e\nCc: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "12c3b3ac1e8004616b30aec6acee1bb91badeb99", "tree": "d24f4e641e1084f234fc3eb32df23b734e2d99c7", "parents": [ "8bd8442fec18284924e17a0fa8ef89d98b0a6d71" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Jan 12 16:01:29 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:54 2012 -0800" }, "message": "dm: do not forward ioctls from logical volumes to the underlying device\n\ncommit ec8013beddd717d1740cfefb1a9b900deef85462 upstream.\n\nA logical volume can map to just part of underlying physical volume.\nIn this case, it must be treated like a partition.\n\nBased on a patch from Alasdair G Kergon.\n\nCc: Alasdair G Kergon \u003cagk@redhat.com\u003e\nCc: dm-devel@redhat.com\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "8bd8442fec18284924e17a0fa8ef89d98b0a6d71", "tree": "94cd21d75673e85efc4442bc639ce15cb12c4aa6", "parents": [ "3b8373b85c761b2a12bdaf9fcee4c7a3eefa8459" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Jan 12 16:01:28 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:54 2012 -0800" }, "message": "block: fail SCSI passthrough ioctls on partition devices\n\ncommit 0bfc96cb77224736dfa35c3c555d37b3646ef35e upstream.\n\n[ Changes with respect to 3.3: return -ENOTTY from scsi_verify_blk_ioctl\n and -ENOIOCTLCMD from sd_compat_ioctl. ]\n\nLinux allows executing the SG_IO ioctl on a partition or LVM volume, and\nwill pass the command to the underlying block device. This is\nwell-known, but it is also a large security problem when (via Unix\npermissions, ACLs, SELinux or a combination thereof) a program or user\nneeds to be granted access only to part of the disk.\n\nThis patch lets partitions forward a small set of harmless ioctls;\nothers are logged with printk so that we can see which ioctls are\nactually sent. In my tests only CDROM_GET_CAPABILITY actually occurred.\nOf course it was being sent to a (partition on a) hard disk, so it would\nhave failed with ENOTTY and the patch isn\u0027t changing anything in\npractice. Still, I\u0027m treating it specially to avoid spamming the logs.\n\nIn principle, this restriction should include programs running with\nCAP_SYS_RAWIO. If for example I let a program access /dev/sda2 and\n/dev/sdb, it still should not be able to read/write outside the\nboundaries of /dev/sda2 independent of the capabilities. However, for\nnow programs with CAP_SYS_RAWIO will still be allowed to send the\nioctls. Their actions will still be logged.\n\nThis patch does not affect the non-libata IDE driver. That driver\nhowever already tests for bd !\u003d bd-\u003ebd_contains before issuing some\nioctl; it could be restricted further to forbid these ioctls even for\nprograms running with CAP_SYS_ADMIN/CAP_SYS_RAWIO.\n\nCc: linux-scsi@vger.kernel.org\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nCc: James Bottomley \u003cJBottomley@parallels.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\n[ Make it also print the command name when warning - Linus ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n\n" }, { "commit": "3b8373b85c761b2a12bdaf9fcee4c7a3eefa8459", "tree": "4960b4933b6eaf81c07f65bbae8d54aa081eadf8", "parents": [ "3ec3f83aee534f732fd7012ff6c04776952e47fd" ], "author": { "name": "Paolo Bonzini", "email": "pbonzini@redhat.com", "time": "Thu Jan 12 16:01:27 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:54 2012 -0800" }, "message": "block: add and use scsi_blk_cmd_ioctl\n\ncommit 577ebb374c78314ac4617242f509e2f5e7156649 upstream.\n\nIntroduce a wrapper around scsi_cmd_ioctl that takes a block device.\n\nThe function will then be enhanced to detect partition block devices\nand, in that case, subject the ioctls to whitelisting.\n\nCc: linux-scsi@vger.kernel.org\nCc: Jens Axboe \u003caxboe@kernel.dk\u003e\nCc: James Bottomley \u003cJBottomley@parallels.com\u003e\nSigned-off-by: Paolo Bonzini \u003cpbonzini@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "3ec3f83aee534f732fd7012ff6c04776952e47fd", "tree": "5de4f91d61a4d454eefa352ff18716a5dd0a055c", "parents": [ "277a05f83af8c82291cf5f2ad0c2dd1aa6f29de7" ], "author": { "name": "Martin Schwidefsky", "email": "schwidefsky@de.ibm.com", "time": "Thu Dec 15 14:56:10 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:53 2012 -0800" }, "message": "fix cputime overflow in uptime_proc_show\n\ncommit c3e0ef9a298e028a82ada28101ccd5cf64d209ee upstream.\n\nFor 32-bit architectures using standard jiffies the idletime calculation\nin uptime_proc_show will quickly overflow. It takes (2^32 / HZ) seconds\nof idle-time, or e.g. 12.45 days with no load on a quad-core with HZ\u003d1000.\nSwitch to 64-bit calculations.\n\nCc: Michael Abbott \u003cmichael.abbott@diamond.ac.uk\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "277a05f83af8c82291cf5f2ad0c2dd1aa6f29de7", "tree": "dd0819f4465a7e5a817a66cdc246be45c494fc8e", "parents": [ "1628de01ac388c9104ddc2816491ff591dfe28a8" ], "author": { "name": "Benjamin Tissoires", "email": "benjamin.tissoires@gmail.com", "time": "Fri Dec 23 15:41:00 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:53 2012 -0800" }, "message": "HID: multitouch: add support for 3M 32\"\n\ncommit c4fad877cd0efb51d8180ae2eaa791c99c92051c upstream.\n\nSigned-off-by: Benjamin Tissoires \u003cbenjamin.tissoires@gmail.com\u003e\nAcked-by: Henrik Rydberg \u003crydberg@euromail.se\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "1628de01ac388c9104ddc2816491ff591dfe28a8", "tree": "2bcd3b0aab939a60a5f7a022295febf50a97f507", "parents": [ "a92035b63540e2d47326540dc38625283143b770" ], "author": { "name": "Benjamin Tissoires", "email": "benjamin.tissoires@enac.fr", "time": "Wed Nov 23 10:54:33 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:53 2012 -0800" }, "message": "HID: multitouch: add support for the MSI Windpad 110W\n\ncommit 66f06127f34ad6e8a1b24a2c03144b694d19f99f upstream.\n\nJust another eGalax device.\nPlease note that adding this device to have_special_driver\nin hid-core.c is not required anymore.\n\nSigned-off-by: Benjamin Tissoires \u003cbenjamin.tissoires@enac.fr\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "a92035b63540e2d47326540dc38625283143b770", "tree": "8b97e9d34db8711f7dd1aab468c17c45e1a17298", "parents": [ "369f7532bcaa78eb3919306e1ff997aa14bbfbbb" ], "author": { "name": "Marek Vasut", "email": "marek.vasut@gmail.com", "time": "Wed Nov 23 10:54:32 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:52 2012 -0800" }, "message": "HID: multitouch: Add egalax ID for Acer Iconia W500\n\ncommit bb9ff21072043634f147c05ac65dbf8185d4af6d upstream.\n\nThis patch adds USB ID for the touchpanel in Acer Iconia W500. The panel\nsupports up to five fingers, therefore the need for a new addition of panel\ntypes.\n\nSigned-off-by: Marek Vasut \u003cmarek.vasut@gmail.com\u003e\nSigned-off-by: Benjamin Tissoires \u003cbenjamin.tissoires@enac.fr\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "369f7532bcaa78eb3919306e1ff997aa14bbfbbb", "tree": "db98983cdeadb7c41ae9150bc7fba414a547de1d", "parents": [ "242d5138b1a8f4a2519518027fff884fce3eeba4" ], "author": { "name": "Benjamin Tissoires", "email": "benjamin.tissoires@enac.fr", "time": "Wed Nov 23 10:54:31 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:52 2012 -0800" }, "message": "HID: multitouch: cleanup with eGalax PID definitions\n\ncommit e36f690b37945e0a9bb1554e1546eeec93f7d1f6 upstream.\n\nThis is just a renaming of USB_DEVICE_ID_DWAV_EGALAX_MULTITOUCH{N}\nto USB_DEVICE_ID_DWAV_EGALAX_MULTITOUCH_{PID} to handle more eGalax\ndevices.\n\nSigned-off-by: Benjamin Tissoires \u003cbenjamin.tissoires@enac.fr\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "242d5138b1a8f4a2519518027fff884fce3eeba4", "tree": "78631a4931b22a8126220105357894d088ef66aa", "parents": [ "c0ab420c6822529fa5aba05668e1e983b065460f" ], "author": { "name": "Chris Bagwell", "email": "chris@cnpbagwell.com", "time": "Wed Nov 23 10:54:27 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:51 2012 -0800" }, "message": "HID: hid-multitouch - add another eGalax id\n\ncommit 1fd8f047490dd0ec4e4db710fcbc1bd4798d944c upstream.\n\nThis allows ASUS Eee Slate touchscreens to work.\n\nSigned-off-by: Chris Bagwell \u003cchris@cnpbagwell.com\u003e\nReviewed-by: Benjamin Tissoires \u003cbenjamin.tissoires@gmail.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "c0ab420c6822529fa5aba05668e1e983b065460f", "tree": "8e8e2be923a3587c3847a98332998f89abdd0da8", "parents": [ "d253520a7b2c2223fb4f704f06d10f2c547bdeef" ], "author": { "name": "Nick Bowler", "email": "nbowler@elliptictech.com", "time": "Tue Nov 08 12:12:45 2011 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:51 2012 -0800" }, "message": "ah: Read nexthdr value before overwriting it in ahash input callback.\n\ncommit b7ea81a58adc123a4e980cb0eff9eb5c144b5dc7 upstream.\n\nThe AH4/6 ahash input callbacks read out the nexthdr field from the AH\nheader *after* they overwrite that header. This is obviously not going\nto end well. Fix it up.\n\nSigned-off-by: Nick Bowler \u003cnbowler@elliptictech.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "d253520a7b2c2223fb4f704f06d10f2c547bdeef", "tree": "5bfcb9bec089ba770b70011da319dcea23b9ac37", "parents": [ "8039a47e67451b8efd6100c4a7f27829fc2d8edd" ], "author": { "name": "Nick Bowler", "email": "nbowler@elliptictech.com", "time": "Tue Nov 08 12:12:44 2011 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:51 2012 -0800" }, "message": "ah: Correctly pass error codes in ahash output callback.\n\ncommit 069294e813ed5f27f82613b027609bcda5f1b914 upstream.\n\nThe AH4/6 ahash output callbacks pass nexthdr to xfrm_output_resume\ninstead of the error code. This appears to be a copy+paste error from\nthe input case, where nexthdr is expected. This causes the driver to\ncontinuously add AH headers to the datagram until either an allocation\nfails and the packet is dropped or the ahash driver hits a synchronous\nfallback and the resulting monstrosity is transmitted.\n\nCorrect this issue by simply passing the error code unadulterated.\n\nSigned-off-by: Nick Bowler \u003cnbowler@elliptictech.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "8039a47e67451b8efd6100c4a7f27829fc2d8edd", "tree": "d852e7ea0f4b7387e6f1033bff7bca6ff2cfec74", "parents": [ "087bc746ef05511c3e416846a8eae4588756462c" ], "author": { "name": "Miklos Szeredi", "email": "miklos@szeredi.hu", "time": "Tue Jan 10 18:22:25 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:51 2012 -0800" }, "message": "fix shrink_dcache_parent() livelock\n\ncommit eaf5f9073533cde21c7121c136f1c3f072d9cf59 upstream.\n\nTwo (or more) concurrent calls of shrink_dcache_parent() on the same dentry may\ncause shrink_dcache_parent() to loop forever.\n\nHere\u0027s what appears to happen:\n\n1 - CPU0: select_parent(P) finds C and puts it on dispose list, returns 1\n\n2 - CPU1: select_parent(P) locks P-\u003ed_lock\n\n3 - CPU0: shrink_dentry_list() locks C-\u003ed_lock\n dentry_kill(C) tries to lock P-\u003ed_lock but fails, unlocks C-\u003ed_lock\n\n4 - CPU1: select_parent(P) locks C-\u003ed_lock,\n moves C from dispose list being processed on CPU0 to the new\ndispose list, returns 1\n\n5 - CPU0: shrink_dentry_list() finds dispose list empty, returns\n\n6 - Goto 2 with CPU0 and CPU1 switched\n\nBasically select_parent() steals the dentry from shrink_dentry_list() and thinks\nit found a new one, causing shrink_dentry_list() to think it\u0027s making progress\nand loop over and over.\n\nOne way to trigger this is to make udev calls stat() on the sysfs file while it\nis going away.\n\nHaving a file in /lib/udev/rules.d/ with only this one rule seems to the trick:\n\nATTR{vendor}\u003d\u003d\"0x8086\", ATTR{device}\u003d\u003d\"0x10ca\", ENV{PCI_SLOT_NAME}\u003d\"%k\", ENV{MATCHADDR}\u003d\"$attr{address}\", RUN+\u003d\"/bin/true\"\n\nThen execute the following loop:\n\nwhile true; do\n echo -bond0 \u003e /sys/class/net/bonding_masters\n echo +bond0 \u003e /sys/class/net/bonding_masters\n echo -bond1 \u003e /sys/class/net/bonding_masters\n echo +bond1 \u003e /sys/class/net/bonding_masters\ndone\n\nOne fix would be to check all callers and prevent concurrent calls to\nshrink_dcache_parent(). But I think a better solution is to stop the\nstealing behavior.\n\nThis patch adds a new dentry flag that is set when the dentry is added to the\ndispose list. The flag is cleared in dentry_lru_del() in case the dentry gets a\nnew reference just before being pruned.\n\nIf the dentry has this flag, select_parent() will skip it and let\nshrink_dentry_list() retry pruning it. With select_parent() skipping those\ndentries there will not be the appearance of progress (new dentries found) when\nthere is none, hence shrink_dcache_parent() will not loop forever.\n\nSet the flag is also set in prune_dcache_sb() for consistency as suggested by\nLinus.\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "087bc746ef05511c3e416846a8eae4588756462c", "tree": "c0d1c48dbc486fcf77c5c1910eff701ef58cdb32", "parents": [ "9d3f99878bf33d36739bd772c7dafcb1f71387fb" ], "author": { "name": "Haogang Chen", "email": "haogangchen@gmail.com", "time": "Tue Nov 29 18:32:25 2011 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:50 2012 -0800" }, "message": "uvcvideo: Fix integer overflow in uvc_ioctl_ctrl_map()\n\ncommit 806e23e95f94a27ee445022d724060b9b45cb64a upstream.\n\nThere is a potential integer overflow in uvc_ioctl_ctrl_map(). When a\nlarge xmap-\u003emenu_count is passed from the userspace, the subsequent call\nto kmalloc() will allocate a buffer smaller than expected.\nmap-\u003emenu_count and map-\u003emenu_info would later be used in a loop (e.g.\nin uvc_query_v4l2_ctrl), which leads to out-of-bound access.\n\nThe patch checks the ioctl argument and returns -EINVAL for zero or too\nlarge values in xmap-\u003emenu_count.\n\nSigned-off-by: Haogang Chen \u003chaogangchen@gmail.com\u003e\n[laurent.pinchart@ideasonboard.com Prevent excessive memory consumption]\nSigned-off-by: Laurent Pinchart \u003claurent.pinchart@ideasonboard.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "9d3f99878bf33d36739bd772c7dafcb1f71387fb", "tree": "ccd3f136cda3744df4bd1d67ae3c1eef5c9de56e", "parents": [ "15274414badc6ef0a893454e7102f3753f2c1ccd" ], "author": { "name": "David Daney", "email": "david.daney@cavium.com", "time": "Mon Dec 19 17:42:42 2011 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:50 2012 -0800" }, "message": "recordmcount: Fix handling of elf64 big-endian objects.\n\ncommit 2e885057b7f75035f0b85e02f737891482815a81 upstream.\n\nIn ELF64, the sh_flags field is 64-bits wide. recordmcount was\nerroneously treating it as a 32-bit wide field. For little endian\nobjects this works because the flags of interest (SHF_EXECINSTR)\nreside in the lower 32 bits of the word, and you get the same result\nwith either a 32-bit or 64-bit read. Big endian objects on the\nother hand do not work at all with this error.\n\nThe fix: Correctly treat sh_flags as 64-bits wide in elf64 objects.\n\nThe symptom I observed was that my\n__start_mcount_loc..__stop_mcount_loc was empty even though ftrace\nfunction tracing was enabled.\n\nLink: http://lkml.kernel.org/r/1324345362-12230-1-git-send-email-ddaney.cavm@gmail.com\n\nSigned-off-by: David Daney \u003cdavid.daney@cavium.com\u003e\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "15274414badc6ef0a893454e7102f3753f2c1ccd", "tree": "7bd66c9a3bebcfc7118ae98ac15f64bae1202c66", "parents": [ "a9680ece8e3874382fb2db1b8e247452c306b735" ], "author": { "name": "Jack Steiner", "email": "steiner@sgi.com", "time": "Fri Jan 06 13:19:00 2012 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:49 2012 -0800" }, "message": "x86, UV: Update Boot messages for SGI UV2 platform\n\ncommit da517a08ac5913cd80ce3507cddd00f2a091b13c upstream.\n\nSGI UV systems print a message during boot:\n\n\tUV: Found \u003cnum\u003e blades\n\nDue to packaging changes, the blade count is not accurate for\non the next generation of the platform. This patch corrects the\ncount.\n\nSigned-off-by: Jack Steiner \u003csteiner@sgi.com\u003e\nLink: http://lkml.kernel.org/r/20120106191900.GA19772@sgi.com\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "a9680ece8e3874382fb2db1b8e247452c306b735", "tree": "b3aaa55fa5ff97ed253d71d184c25a40e81c9192", "parents": [ "46a5392ffcb492b8042776ce44b5cc1c07be1b23" ], "author": { "name": "Miklos Szeredi", "email": "mszeredi@suse.cz", "time": "Thu Jan 12 17:59:46 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:49 2012 -0800" }, "message": "fsnotify: don\u0027t BUG in fsnotify_destroy_mark()\n\ncommit fed474857efbed79cd390d0aee224231ca718f63 upstream.\n\nRemoving the parent of a watched file results in \"kernel BUG at\nfs/notify/mark.c:139\".\n\nTo reproduce\n\n add \"-w /tmp/audit/dir/watched_file\" to audit.rules\n rm -rf /tmp/audit/dir\n\nThis is caused by fsnotify_destroy_mark() being called without an\nextra reference taken by the caller.\n\nReported by Francesco Cosoleto here:\n\n https://bugzilla.novell.com/show_bug.cgi?id\u003d689860\n\nFix by removing the BUG_ON and adding a comment about not accessing mark after\nthe iput.\n\nSigned-off-by: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "46a5392ffcb492b8042776ce44b5cc1c07be1b23", "tree": "76f3fb60336e93928f4707e19c56906aac8e10c1", "parents": [ "a141a5eb3ab45131cb168e7a561d662722b43ec3" ], "author": { "name": "Sasha Levin", "email": "levinsasha928@gmail.com", "time": "Fri Nov 18 12:14:49 2011 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:49 2012 -0800" }, "message": "nfsd: Fix oops when parsing a 0 length export\n\ncommit b2ea70afade7080360ac55c4e64ff7a5fafdb67b upstream.\n\nexpkey_parse() oopses when handling a 0 length export. This is easily\ntriggerable from usermode by writing 0 bytes into\n\u0027/proc/[proc id]/net/rpc/nfsd.fh/channel\u0027.\n\nBelow is the log:\n\n[ 1402.286893] BUG: unable to handle kernel paging request at ffff880077c49fff\n[ 1402.287632] IP: [\u003cffffffff812b4b99\u003e] expkey_parse+0x28/0x2e1\n[ 1402.287632] PGD 2206063 PUD 1fdfd067 PMD 1ffbc067 PTE 8000000077c49160\n[ 1402.287632] Oops: 0000 [#1] PREEMPT SMP DEBUG_PAGEALLOC\n[ 1402.287632] CPU 1\n[ 1402.287632] Pid: 20198, comm: trinity Not tainted 3.2.0-rc2-sasha-00058-gc65cd37 #6\n[ 1402.287632] RIP: 0010:[\u003cffffffff812b4b99\u003e] [\u003cffffffff812b4b99\u003e] expkey_parse+0x28/0x2e1\n[ 1402.287632] RSP: 0018:ffff880077f0fd68 EFLAGS: 00010292\n[ 1402.287632] RAX: ffff880077c49fff RBX: 00000000ffffffea RCX: 0000000001043400\n[ 1402.287632] RDX: 0000000000000000 RSI: ffff880077c4a000 RDI: ffffffff82283de0\n[ 1402.287632] RBP: ffff880077f0fe18 R08: 0000000000000001 R09: ffff880000000000\n[ 1402.287632] R10: 0000000000000000 R11: 0000000000000001 R12: ffff880077c4a000\n[ 1402.287632] R13: ffffffff82283de0 R14: 0000000001043400 R15: ffffffff82283de0\n[ 1402.287632] FS: 00007f25fec3f700(0000) GS:ffff88007d400000(0000) knlGS:0000000000000000\n[ 1402.287632] CS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b\n[ 1402.287632] CR2: ffff880077c49fff CR3: 0000000077e1d000 CR4: 00000000000406e0\n[ 1402.287632] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[ 1402.287632] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\n[ 1402.287632] Process trinity (pid: 20198, threadinfo ffff880077f0e000, task ffff880077db17b0)\n[ 1402.287632] Stack:\n[ 1402.287632] ffff880077db17b0 ffff880077c4a000 ffff880077f0fdb8 ffffffff810b411e\n[ 1402.287632] ffff880000000000 ffff880077db17b0 ffff880077c4a000 ffffffff82283de0\n[ 1402.287632] 0000000001043400 ffffffff82283de0 ffff880077f0fde8 ffffffff81111f63\n[ 1402.287632] Call Trace:\n[ 1402.287632] [\u003cffffffff810b411e\u003e] ? lock_release+0x1af/0x1bc\n[ 1402.287632] [\u003cffffffff81111f63\u003e] ? might_fault+0x97/0x9e\n[ 1402.287632] [\u003cffffffff81111f1a\u003e] ? might_fault+0x4e/0x9e\n[ 1402.287632] [\u003cffffffff81a8bcf2\u003e] cache_do_downcall+0x3e/0x4f\n[ 1402.287632] [\u003cffffffff81a8c950\u003e] cache_write.clone.16+0xbb/0x130\n[ 1402.287632] [\u003cffffffff81a8c9df\u003e] ? cache_write_pipefs+0x1a/0x1a\n[ 1402.287632] [\u003cffffffff81a8c9f8\u003e] cache_write_procfs+0x19/0x1b\n[ 1402.287632] [\u003cffffffff8118dc54\u003e] proc_reg_write+0x8e/0xad\n[ 1402.287632] [\u003cffffffff8113fe81\u003e] vfs_write+0xaa/0xfd\n[ 1402.287632] [\u003cffffffff8114142d\u003e] ? fget_light+0x35/0x9e\n[ 1402.287632] [\u003cffffffff8113ff8b\u003e] sys_write+0x48/0x6f\n[ 1402.287632] [\u003cffffffff81bbdb92\u003e] system_call_fastpath+0x16/0x1b\n[ 1402.287632] Code: c0 c9 c3 55 48 63 d2 48 89 e5 48 8d 44 32 ff 41 57 41 56 41 55 41 54 53 bb ea ff ff ff 48 81 ec 88 00 00 00 48 89 b5 58 ff ff ff\n[ 1402.287632] 38 0a 0f 85 89 02 00 00 c6 00 00 48 8b 3d 44 4a e5 01 48 85\n[ 1402.287632] RIP [\u003cffffffff812b4b99\u003e] expkey_parse+0x28/0x2e1\n[ 1402.287632] RSP \u003cffff880077f0fd68\u003e\n[ 1402.287632] CR2: ffff880077c49fff\n[ 1402.287632] ---[ end trace 368ef53ff773a5e3 ]---\n\nCc: \"J. Bruce Fields\" \u003cbfields@fieldses.org\u003e\nCc: Neil Brown \u003cneilb@suse.de\u003e\nCc: linux-nfs@vger.kernel.org\nSigned-off-by: Sasha Levin \u003clevinsasha928@gmail.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "a141a5eb3ab45131cb168e7a561d662722b43ec3", "tree": "f72da23ff947391cc5181842a34b39db81f1dc63", "parents": [ "7df22768c0af8769d805f6db21144d71d91fe13d" ], "author": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Tue Nov 29 17:00:26 2011 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:48 2012 -0800" }, "message": "svcrpc: avoid memory-corruption on pool shutdown\n\ncommit b4f36f88b3ee7cf26bf0be84e6c7fc15f84dcb71 upstream.\n\nSocket callbacks use svc_xprt_enqueue() to add an xprt to a\npool-\u003esp_sockets list. In normal operation a server thread will later\ncome along and take the xprt off that list. On shutdown, after all the\nthreads have exited, we instead manually walk the sv_tempsocks and\nsv_permsocks lists to find all the xprt\u0027s and delete them.\n\nSo the sp_sockets lists don\u0027t really matter any more. As a result,\nwe\u0027ve mostly just ignored them and hoped they would go away.\n\nWhich has gotten us into trouble; witness for example ebc63e531cc6\n\"svcrpc: fix list-corrupting race on nfsd shutdown\", the result of Ben\nGreear noticing that a still-running svc_xprt_enqueue() could re-add an\nxprt to an sp_sockets list just before it was deleted. The fix was to\nremove it from the list at the end of svc_delete_xprt(). But that only\nmade corruption less likely--I can see nothing that prevents a\nsvc_xprt_enqueue() from adding another xprt to the list at the same\nmoment that we\u0027re removing this xprt from the list. In fact, despite\nthe earlier xpo_detach(), I don\u0027t even see what guarantees that\nsvc_xprt_enqueue() couldn\u0027t still be running on this xprt.\n\nSo, instead, note that svc_xprt_enqueue() essentially does:\n\tlock sp_lock\n\t\tif XPT_BUSY unset\n\t\t\tadd to sp_sockets\n\tunlock sp_lock\n\nSo, if we do:\n\n\tset XPT_BUSY on every xprt.\n\tEmpty every sp_sockets list, under the sp_socks locks.\n\nThen we\u0027re left knowing that the sp_sockets lists are all empty and will\nstay that way, since any svc_xprt_enqueue() will check XPT_BUSY under\nthe sp_lock and see it set.\n\nAnd *then* we can continue deleting the xprt\u0027s.\n\n(Thanks to Jeff Layton for being correctly suspicious of this code....)\n\nCc: Ben Greear \u003cgreearb@candelatech.com\u003e\nCc: Jeff Layton \u003cjlayton@redhat.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "7df22768c0af8769d805f6db21144d71d91fe13d", "tree": "59adfcb91048e2510aed8fd406380c813fe7ad0c", "parents": [ "b09577ca6680033a4315e2f5cb3a95ebbb8dea79" ], "author": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Tue Nov 29 11:35:35 2011 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:48 2012 -0800" }, "message": "svcrpc: destroy server sockets all at once\n\ncommit 2fefb8a09e7ed251ae8996e0c69066e74c5aa560 upstream.\n\nThere\u0027s no reason I can see that we need to call sv_shutdown between\nclosing the two lists of sockets.\n\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "b09577ca6680033a4315e2f5cb3a95ebbb8dea79", "tree": "687c2010f9cfb888dd0e3cc196bd4be76453b565", "parents": [ "adc0186cfa38e2736048a638681db511e65e51fd" ], "author": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Thu Dec 22 18:22:49 2011 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:47 2012 -0800" }, "message": "svcrpc: fix double-free on shutdown of nfsd after changing pool mode\n\ncommit 61c8504c428edcebf23b97775a129c5b393a302b upstream.\n\nThe pool_to and to_pool fields of the global svc_pool_map are freed on\nshutdown, but are initialized in nfsd startup only in the\nSVC_POOL_PERCPU and SVC_POOL_PERNODE cases.\n\nThey *are* initialized to zero on kernel startup. So as long as you use\nonly SVC_POOL_GLOBAL (the default), this will never be a problem.\n\nYou\u0027re also OK if you only ever use SVC_POOL_PERCPU or SVC_POOL_PERNODE.\n\nHowever, the following sequence events leads to a double-free:\n\n\t1. set SVC_POOL_PERCPU or SVC_POOL_PERNODE\n\t2. start nfsd: both fields are initialized.\n\t3. shutdown nfsd: both fields are freed.\n\t4. set SVC_POOL_GLOBAL\n\t5. start nfsd: the fields are left untouched.\n\t6. shutdown nfsd: now we try to free them again.\n\nStep 4 is actually unnecessary, since (for some bizarre reason), nfsd\nautomatically resets the pool mode to SVC_POOL_GLOBAL on shutdown.\n\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "adc0186cfa38e2736048a638681db511e65e51fd", "tree": "f103524ac9031f799b099b4675749a97cc702ab6", "parents": [ "e5303c25bfacd745f6c6b99a2604ef4e11926c34" ], "author": { "name": "Steven Rostedt", "email": "srostedt@redhat.com", "time": "Fri Jan 13 17:53:40 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:47 2012 -0800" }, "message": "kconfig/streamline-config.pl: Fix parsing Makefile with variables\n\ncommit 364212fddaaa60c5a64f67a0f5624ad996ecc8a0 upstream.\n\nThomas Lange reported that when he did a \u0027make localmodconfig\u0027, his\nconfig was missing the brcmsmac driver, even though he had the module\nloaded.\n\nLooking into this, I found the file:\ndrivers/net/wireless/brcm80211/brcmsmac/Makefile\nhad the following in the Makefile:\n\nMODULEPFX :\u003d brcmsmac\n\nobj-$(CONFIG_BRCMSMAC) +\u003d $(MODULEPFX).o\n\nThe way streamline-config.pl works, is parsing all the\n obj-$(CONFIG_FOO) +\u003d foo.o\nlines to find that CONFIG_FOO belongs to the module foo.ko.\n\nBut in this case, the brcmsmac.o was not used, but a variable in its place.\n\nBy changing streamline-config.pl to remember defined variables in Makefiles\nand substituting them when they are used in the obj-X lines, allows\nThomas (and others) to have their brcmsmac module stay configured\nwhen it is loaded and running \"make localmodconfig\".\n\nReported-by: Thomas Lange \u003cthomas-lange2@gmx.de\u003e\nTested-by: Thomas Lange \u003cthomas-lange2@gmx.de\u003e\nCc: Arend van Spriel \u003carend@broadcom.com\u003e\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "e5303c25bfacd745f6c6b99a2604ef4e11926c34", "tree": "14f22ac2afc1d6dda125ea38a6c596fdc8687b91", "parents": [ "065449fd56d2f75cc943a6d501b292f6b0e40325" ], "author": { "name": "Steven Rostedt", "email": "srostedt@redhat.com", "time": "Fri Jan 13 17:50:39 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:47 2012 -0800" }, "message": "kconfig/streamline-config.pl: Simplify backslash line concatination\n\ncommit d060d963e88f3e990cec2fe5214de49de9a49eca upstream.\n\nSimplify the way lines ending with backslashes (continuation) in Makefiles\nis parsed. This is needed to implement a necessary fix.\n\nTested-by: Thomas Lange \u003cthomas-lange2@gmx.de\u003e\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "065449fd56d2f75cc943a6d501b292f6b0e40325", "tree": "944eb13b6e59e29869631a30e27460249524a572", "parents": [ "b1830247c9927d7d2ca17c9f84908fc130051792" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Thu Jan 05 02:27:57 2012 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:46 2012 -0800" }, "message": "V4L/DVB: v4l2-ioctl: integer overflow in video_usercopy()\n\ncommit 6c06108be53ca5e94d8b0e93883d534dd9079646 upstream.\n\nIf ctrls-\u003ecount is too high the multiplication could overflow and\narray_size would be lower than expected. Mauro and Hans Verkuil\nsuggested that we cap it at 1024. That comes from the maximum\nnumber of controls with lots of room for expantion.\n\n$ grep V4L2_CID include/linux/videodev2.h | wc -l\n211\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "b1830247c9927d7d2ca17c9f84908fc130051792", "tree": "4dce49e2d1ab5f53ec3dfe0cde1b83518bb1bdc6", "parents": [ "62a0e438f7275e845bfbcccd6e641e07d4b89182" ], "author": { "name": "Alexander Elbs", "email": "alex@segv.de", "time": "Tue Jan 03 23:26:53 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:46 2012 -0800" }, "message": "mmc: sd: Fix SDR12 timing regression\n\ncommit dd8df17fe83483d7ea06ff229895e35a42071599 upstream.\n\nThis patch fixes a failure to recognize SD cards reported on a Dell\nVostro with O2 Micro SD card reader. Patch 49c468f (\"mmc: sd: add\nsupport for uhs bus speed mode selection\") caused the problem, by\nsetting the SDHCI_CTRL_HISPD flag even for legacy timings.\n\nSigned-off-by: Alexander Elbs \u003calex@segv.de\u003e\nAcked-by: Philip Rakity \u003cprakity@marvell.com\u003e\nAcked-by: Arindam Nath \u003carindam.nath@amd.com\u003e\nSigned-off-by: Chris Ball \u003ccjb@laptop.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "62a0e438f7275e845bfbcccd6e641e07d4b89182", "tree": "2270fbdb8bf9b1ef0d37f1fe676e25fc998b4071", "parents": [ "1cfbbb9ba574157c9f2312d3267762fdde0bfc59" ], "author": { "name": "Aaron Lu", "email": "aaron.lu@amd.com", "time": "Wed Dec 28 11:11:12 2011 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:46 2012 -0800" }, "message": "mmc: sdhci: Fix tuning timer incorrect setting when suspending host\n\ncommit c6ced0db08010ed75df221a2946c5228454b38d5 upstream.\n\nWhen suspending host, the tuning timer shoule be deactivated.\nAnd the HOST_NEEDS_TUNING flag should be set after tuning timer is\ndeactivated.\n\nSigned-off-by: Philip Rakity \u003cprakity@marvell.com\u003e\nSigned-off-by: Aaron Lu \u003caaron.lu@amd.com\u003e\nAcked-by: Adrian Hunter \u003cadrian.hunter@intel.com\u003e\nSigned-off-by: Chris Ball \u003ccjb@laptop.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "1cfbbb9ba574157c9f2312d3267762fdde0bfc59", "tree": "4ad35db7004c8c19c12ebc70da9b29b131f7342f", "parents": [ "fcf53a1ed4225c1f23997ef02f2770a39e73c515" ], "author": { "name": "Girish K S", "email": "girish.shivananjappa@linaro.org", "time": "Thu Dec 15 17:27:42 2011 +0530" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:45 2012 -0800" }, "message": "mmc: core: Fix voltage select in DDR mode\n\ncommit 913047e9e5787a90696533a9f109552b7694ecc9 upstream.\n\nThis patch fixes the wrong comparison before setting the interface\nvoltage in DDR mode.\n\nThe assignment to the variable ddr before comaprison is either\nddr \u003d MMC_1_2V_DDR_MODE; or ddr \u003d\u003d MMC_1_8V_DDR_MODE. But the comparison\nis done with the extended csd value if ddr \u003d\u003d EXT_CSD_CARD_TYPE_DDR_1_2V.\n\nSigned-off-by: Girish K S \u003cgirish.shivananjappa@linaro.org\u003e\nAcked-by: Subhash Jadavani \u003csubhashj@codeaurora.org\u003e\nAcked-by: Philip Rakity \u003cprakity@marvell.com\u003e\nSigned-off-by: Chris Ball \u003ccjb@laptop.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "fcf53a1ed4225c1f23997ef02f2770a39e73c515", "tree": "629873ccdc2656feb505627ce4df04faaa34fd5c", "parents": [ "8aee2e296d19910d8ad4c676970f0055abc5b5e5" ], "author": { "name": "Jean Delvare", "email": "khali@linux-fr.org", "time": "Thu Jan 12 20:32:03 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:45 2012 -0800" }, "message": "i2c: Fix error value returned by several bus drivers\n\ncommit 7c1f59c9d5caf3a84f35549b5d58f3c055a68da5 upstream.\n\nWhen adding checks for ACPI resource conflicts to many bus drivers,\nnot enough attention was paid to the error paths, and for several\ndrivers this causes 0 to be returned on error in some cases. Fix this\nby properly returning a non-zero value on every error.\n\nSigned-off-by: Jean Delvare \u003ckhali@linux-fr.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "8aee2e296d19910d8ad4c676970f0055abc5b5e5", "tree": "510dba144c10df9277aa32df171a08f08f0a657a", "parents": [ "d8ece1b43acdec47c0823aa306910239754ef9e9" ], "author": { "name": "Artem Bityutskiy", "email": "artem.bityutskiy@linux.intel.com", "time": "Tue Jan 10 19:32:30 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:45 2012 -0800" }, "message": "UBIFS: fix debugging messages\n\ncommit d34315da9146253351146140ea4b277193ee5e5f upstream.\n\nPatch 56e46742e846e4de167dde0e1e1071ace1c882a5 broke UBIFS debugging messages:\nbefore that commit when UBIFS debugging was enabled, users saw few useful\ndebugging messages after mount. However, that patch turned \u0027dbg_msg()\u0027 into\n\u0027pr_debug()\u0027, so to enable the debugging messages users have to enable them\nfirst via /sys/kernel/debug/dynamic_debug/control, which is very impractical.\n\nThis commit makes \u0027dbg_msg()\u0027 to use \u0027printk()\u0027 instead of \u0027pr_debug()\u0027, just\nas it was before the breakage.\n\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "d8ece1b43acdec47c0823aa306910239754ef9e9", "tree": "f361d6d0985ac46e90d5f370620a810e7b736a78", "parents": [ "028bb43eac25b7423198b7e22cfea9bd3e870e24" ], "author": { "name": "Artem Bityutskiy", "email": "artem.bityutskiy@linux.intel.com", "time": "Tue Jan 10 19:32:30 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:44 2012 -0800" }, "message": "UBI: fix debugging messages\n\ncommit 72f0d453d81d35087b1d3ad7c8285628c2be6e1d upstream.\n\nPatch ab50ff684707031ed4bad2fdd313208ae392e5bb broke UBI debugging messages:\nbefore that commit when UBI debugging was enabled, users saw few useful\ndebugging messages after attaching an MTD device. However, that patch turned\n\u0027dbg_msg()\u0027 into \u0027pr_debug()\u0027, so to enable the debugging messages users have\nto enable them first via /sys/kernel/debug/dynamic_debug/control, which is\nvery impractical.\n\nThis commit makes \u0027dbg_msg()\u0027 to use \u0027printk()\u0027 instead of \u0027pr_debug()\u0027, just\nas it was before the breakage.\n\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "028bb43eac25b7423198b7e22cfea9bd3e870e24", "tree": "9c0bf7a7ca2e60deeb0e77855b009500827746bb", "parents": [ "59c43b2c3ef410e585646825ea552507cd51ccb1" ], "author": { "name": "Richard Weinberger", "email": "richard@nod.at", "time": "Fri Jan 13 15:07:40 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:44 2012 -0800" }, "message": "UBI: fix nameless volumes handling\n\ncommit 4a59c797a18917a5cf3ff7ade296b46134d91e6a upstream.\n\nCurrently it\u0027s possible to create a volume without a name. E.g:\nubimkvol -n 32 -s 2MiB -t static /dev/ubi0 -N \"\"\n\nAfter that vtbl_check() will always fail because it does not permit\nempty strings.\n\nSigned-off-by: Richard Weinberger \u003crichard@nod.at\u003e\nSigned-off-by: Artem Bityutskiy \u003cArtem.Bityutskiy@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "59c43b2c3ef410e585646825ea552507cd51ccb1", "tree": "a3841562c5bb1ee5aaa3244b3c250528d5c6cdcc", "parents": [ "ea1c62778121f6ece5e0120250716b45e204cb13" ], "author": { "name": "Ludwig Nussel", "email": "ludwig.nussel@suse.de", "time": "Tue Nov 15 14:46:46 2011 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:43 2012 -0800" }, "message": "x86: Fix mmap random address range\n\ncommit 9af0c7a6fa860698d080481f24a342ba74b68982 upstream.\n\nOn x86_32 casting the unsigned int result of get_random_int() to\nlong may result in a negative value. On x86_32 the range of\nmmap_rnd() therefore was -255 to 255. The 32bit mode on x86_64\nused 0 to 255 as intended.\n\nThe bug was introduced by 675a081 (\"x86: unify mmap_{32|64}.c\")\nin January 2008.\n\nSigned-off-by: Ludwig Nussel \u003cludwig.nussel@suse.de\u003e\nCc: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nCc: harvey.harrison@gmail.com\nCc: \"H. Peter Anvin\" \u003chpa@zytor.com\u003e\nCc: Harvey Harrison \u003charvey.harrison@gmail.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nLink: http://lkml.kernel.org/r/201111152246.pAFMklOB028527@wpaz5.hot.corp.google.com\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "ea1c62778121f6ece5e0120250716b45e204cb13", "tree": "65501073ab7e5a33a351f375bb0fa24216852ef9", "parents": [ "b9e11747e1227d7ad67c5b80be4b206e4059687e" ], "author": { "name": "KAMEZAWA Hiroyuki", "email": "kamezawa.hiroyu@jp.fujitsu.com", "time": "Thu Jan 12 17:17:44 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:43 2012 -0800" }, "message": "memcg: add mem_cgroup_replace_page_cache() to fix LRU issue\n\ncommit ab936cbcd02072a34b60d268f94440fd5cf1970b upstream.\n\nCommit ef6a3c6311 (\"mm: add replace_page_cache_page() function\") added a\nfunction replace_page_cache_page(). This function replaces a page in the\nradix-tree with a new page. WHen doing this, memory cgroup needs to fix\nup the accounting information. memcg need to check PCG_USED bit etc.\n\nIn some(many?) cases, \u0027newpage\u0027 is on LRU before calling\nreplace_page_cache(). So, memcg\u0027s LRU accounting information should be\nfixed, too.\n\nThis patch adds mem_cgroup_replace_page_cache() and removes the old hooks.\n In that function, old pages will be unaccounted without touching\nres_counter and new page will be accounted to the memcg (of old page).\nWHen overwriting pc-\u003emem_cgroup of newpage, take zone-\u003elru_lock and avoid\nraces with LRU handling.\n\nBackground:\n replace_page_cache_page() is called by FUSE code in its splice() handling.\n Here, \u0027newpage\u0027 is replacing oldpage but this newpage is not a newly allocated\n page and may be on LRU. LRU mis-accounting will be critical for memory cgroup\n because rmdir() checks the whole LRU is empty and there is no account leak.\n If a page is on the other LRU than it should be, rmdir() will fail.\n\nThis bug was added in March 2011, but no bug report yet. I guess there\nare not many people who use memcg and FUSE at the same time with upstream\nkernels.\n\nThe result of this bug is that admin cannot destroy a memcg because of\naccount leak. So, no panic, no deadlock. And, even if an active cgroup\nexist, umount can succseed. So no problem at shutdown.\n\nSigned-off-by: KAMEZAWA Hiroyuki \u003ckamezawa.hiroyu@jp.fujitsu.com\u003e\nAcked-by: Johannes Weiner \u003channes@cmpxchg.org\u003e\nAcked-by: Michal Hocko \u003cmhocko@suse.cz\u003e\nCc: Miklos Szeredi \u003cmszeredi@suse.cz\u003e\nCc: Hugh Dickins \u003chughd@google.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "b9e11747e1227d7ad67c5b80be4b206e4059687e", "tree": "b75224b77cf1dd440d8763cdd2ea228624a4a072", "parents": [ "93d150e945fdaceb9e8fe18c7b9014569123195d" ], "author": { "name": "Stanislaw Gruszka", "email": "sgruszka@redhat.com", "time": "Wed Jan 11 09:26:54 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:43 2012 -0800" }, "message": "mac80211: fix rx-\u003ekey NULL pointer dereference in promiscuous mode\n\ncommit 1140afa862842ac3e56678693050760edc4ecde9 upstream.\n\nSince:\n\ncommit 816c04fe7ef01dd9649f5ccfe796474db8708be5\nAuthor: Christian Lamparter \u003cchunkeey@googlemail.com\u003e\nDate: Sat Apr 30 15:24:30 2011 +0200\n\n mac80211: consolidate MIC failure report handling\n\nis possible to that we dereference rx-\u003ekey \u003d\u003d NULL when driver set\nRX_FLAG_MMIC_STRIPPED and not RX_FLAG_IV_STRIPPED and we are in\npromiscuous mode. This happen with rt73usb and rt61pci at least.\n\nBefore the commit we always check rx-\u003ekey against NULL, so I assume\nfix should be done in mac80211 (also mic_fail path has similar check).\n\nReferences:\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d769766\nhttp://rt2x00.serialmonkey.com/pipermail/users_rt2x00.serialmonkey.com/2012-January/004395.html\n\nReported-by: Stuart D Gathman \u003cstuart@gathman.org\u003e\nReported-by: Kai Wohlfahrt \u003ckai.scorpio@gmail.com\u003e\nSigned-off-by: Stanislaw Gruszka \u003csgruszka@redhat.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "93d150e945fdaceb9e8fe18c7b9014569123195d", "tree": "34e567a15b4ad54a4c6d2c08e7a3785a1a860bd9", "parents": [ "982e49a7cbcca1347b701e2098431153d83c3dd2" ], "author": { "name": "Larry Finger", "email": "Larry.Finger@lwfinger.net", "time": "Wed Jan 04 20:50:47 2012 -0600" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:42 2012 -0800" }, "message": "rtl8192se: Fix BUG caused by failure to check skb allocation\n\ncommit d90db4b12bc1b9b8a787ef28550fdb767ee25a49 upstream.\n\nWhen downloading firmware into the device, the driver fails to check the\nreturn when allocating an skb. When the allocation fails, a BUG can be\ngenerated, as seen in https://bugzilla.redhat.com/show_bug.cgi?id\u003d771656.\n\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "982e49a7cbcca1347b701e2098431153d83c3dd2", "tree": "26e8d16d68965b86f8ad8e7eeff3f7cda4edc5f0", "parents": [ "ffdfcb4347b7f5082e6e191175d46d74c235c2c7" ], "author": { "name": "Bjorn Helgaas", "email": "bhelgaas@google.com", "time": "Thu Jan 05 14:27:24 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:42 2012 -0800" }, "message": "PNP: work around Dell 1536/1546 BIOS MMCONFIG bug that breaks USB\n\ncommit eb31aae8cb5eb54e234ed2d857ddac868195d911 upstream.\n\nSome Dell BIOSes have MCFG tables that don\u0027t report the entire\nMMCONFIG area claimed by the chipset. If we move PCI devices into\nthat claimed-but-unreported area, they don\u0027t work.\n\nThis quirk reads the AMD MMCONFIG MSRs and adds PNP0C01 resources as\nneeded to cover the entire area.\n\nExample problem scenario:\n\n BIOS-e820: 00000000cfec5400 - 00000000d4000000 (reserved)\n Fam 10h mmconf [d0000000, dfffffff]\n PCI: MMCONFIG for domain 0000 [bus 00-3f] at [mem 0xd0000000-0xd3ffffff] (base 0xd0000000)\n pnp 00:0c: [mem 0xd0000000-0xd3ffffff]\n pci 0000:00:12.0: reg 10: [mem 0xffb00000-0xffb00fff]\n pci 0000:00:12.0: no compatible bridge window for [mem 0xffb00000-0xffb00fff]\n pci 0000:00:12.0: BAR 0: assigned [mem 0xd4000000-0xd40000ff]\n\nReported-by: Lisa Salimbas \u003clisa.salimbas@canonical.com\u003e\nReported-by: \u003cthuban@singularity.fr\u003e\nTested-by: dann frazier \u003cdann.frazier@canonical.com\u003e\nReferences: https://bugzilla.kernel.org/show_bug.cgi?id\u003d31602\nReferences: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/647043\nReferences: https://bugzilla.redhat.com/show_bug.cgi?id\u003d770308\nSigned-off-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nSigned-off-by: Jesse Barnes \u003cjbarnes@virtuousgeek.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "ffdfcb4347b7f5082e6e191175d46d74c235c2c7", "tree": "8b23426844bf24fd8c355c43563edec9d2daa8a1", "parents": [ "808f398267e920a772c1ae07781adfb0d4d1c48a" ], "author": { "name": "Roberto Sassu", "email": "roberto.sassu@polito.it", "time": "Mon Dec 19 15:57:28 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:41 2012 -0800" }, "message": "ima: fix invalid memory reference\n\ncommit 7b7e5916aa2f46e57f8bd8cb89c34620ebfda5da upstream.\n\nDon\u0027t free a valid measurement entry on TPM PCR extend failure.\n\nSigned-off-by: Roberto Sassu \u003croberto.sassu@polito.it\u003e\nSigned-off-by: Mimi Zohar \u003czohar@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "808f398267e920a772c1ae07781adfb0d4d1c48a", "tree": "8fab39a3e202c4bbd239ed69af475413a2a76287", "parents": [ "9919fe804d613e513ef13f5eedc9e583c4429d38" ], "author": { "name": "Roberto Sassu", "email": "roberto.sassu@polito.it", "time": "Mon Dec 19 15:57:27 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:41 2012 -0800" }, "message": "ima: free duplicate measurement memory\n\ncommit 45fae7493970d7c45626ccd96d4a74f5f1eea5a9 upstream.\n\nInfo about new measurements are cached in the iint for performance. When\nthe inode is flushed from cache, the associated iint is flushed as well.\nSubsequent access to the inode will cause the inode to be re-measured and\nwill attempt to add a duplicate entry to the measurement list.\n\nThis patch frees the duplicate measurement memory, fixing a memory leak.\n\nSigned-off-by: Roberto Sassu \u003croberto.sassu@polito.it\u003e\nSigned-off-by: Mimi Zohar \u003czohar@us.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "9919fe804d613e513ef13f5eedc9e583c4429d38", "tree": "90344a399fd8748a626315a39557ce2b0302ec1c", "parents": [ "73669debb5f508962ffcc8b632ffb2971c606e5c" ], "author": { "name": "Ian Campbell", "email": "Ian.Campbell@citrix.com", "time": "Wed Jan 04 09:34:49 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:41 2012 -0800" }, "message": "xen/xenbus: Reject replies with payload \u003e XENSTORE_PAYLOAD_MAX.\n\ncommit 9e7860cee18241633eddb36a4c34c7b61d8cecbc upstream.\n\nHaogang Chen found out that:\n\n There is a potential integer overflow in process_msg() that could result\n in cross-domain attack.\n\n \tbody \u003d kmalloc(msg-\u003ehdr.len + 1, GFP_NOIO | __GFP_HIGH);\n\n When a malicious guest passes 0xffffffff in msg-\u003ehdr.len, the subsequent\n call to xb_read() would write to a zero-length buffer.\n\n The other end of this connection is always the xenstore backend daemon\n so there is no guest (malicious or otherwise) which can do this. The\n xenstore daemon is a trusted component in the system.\n\n However this seem like a reasonable robustness improvement so we should\n have it.\n\nAnd Ian when read the API docs found that:\n The payload length (len field of the header) is limited to 4096\n (XENSTORE_PAYLOAD_MAX) in both directions. If a client exceeds the\n limit, its xenstored connection will be immediately killed by\n xenstored, which is usually catastrophic from the client\u0027s point of\n view. Clients (particularly domains, which cannot just reconnect)\n should avoid this.\n\nso this patch checks against that instead.\n\nThis also avoids a potential integer overflow pointed out by Haogang Chen.\n\nSigned-off-by: Ian Campbell \u003cian.campbell@citrix.com\u003e\nCc: Haogang Chen \u003chaogangchen@gmail.com\u003e\nSigned-off-by: Konrad Rzeszutek Wilk \u003ckonrad.wilk@oracle.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "73669debb5f508962ffcc8b632ffb2971c606e5c", "tree": "86f1de490a8b2fa3ed2e4278bf33600661e7b199", "parents": [ "de3f88ba084473ce5365632f0209c3e95aeb55e9" ], "author": { "name": "nagalakshmi.nandigama@lsi.com", "email": "nagalakshmi.nandigama@lsi.com", "time": "Thu Dec 01 07:53:08 2011 +0530" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:41 2012 -0800" }, "message": "SCSI: mpt2sas : Fix for memory allocation error for large host credits\n\ncommit aff132d95ffe14eca96cab90597cdd010b457af7 upstream.\n\nThe amount of memory required for tracking chain buffers is rather\nlarge, and when the host credit count is big, memory allocation\nfailure occurs inside __get_free_pages.\n\nThe fix is to limit the number of chains to 100,000. In addition,\nthe number of host credits is limited to 30,000 IOs. However this\nlimitation can be overridden this using the command line option\nmax_queue_depth. The algorithm for calculating the\nreply_post_queue_depth is changed so that it is equal to\n(reply_free_queue_depth + 16), previously it was (reply_free_queue_depth * 2).\n\nSigned-off-by: Nagalakshmi Nandigama \u003cnagalakshmi.nandigama@lsi.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "de3f88ba084473ce5365632f0209c3e95aeb55e9", "tree": "386a0db81fe617b533b02791161ac0ab34b37e0e", "parents": [ "72ce943013baaba4af7afec76c3556b16b9f6de4" ], "author": { "name": "nagalakshmi.nandigama@lsi.com", "email": "nagalakshmi.nandigama@lsi.com", "time": "Thu Dec 01 07:52:56 2011 +0530" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:40 2012 -0800" }, "message": "SCSI: mpt2sas: Release spinlock for the raid device list before blocking it\n\ncommit 30c43282f3d347f47f9e05199d2b14f56f3f2837 upstream.\n\nAdded code to release the spinlock that is used to protect the\nraid device list before calling a function that can block. The\nblocking was causing a reschedule, and subsequently it is tried\nto acquire the same lock, resulting in a panic (NMI Watchdog\ndetecting a CPU lockup).\n\nSigned-off-by: Nagalakshmi Nandigama \u003cnagalakshmi.nandigama@lsi.com\u003e\nSigned-off-by: James Bottomley \u003cJBottomley@Parallels.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "72ce943013baaba4af7afec76c3556b16b9f6de4", "tree": "c372c65ba8efbc72b870c4d7639814a68dc57d47", "parents": [ "45e7e24360e799f7753f37ca5642a0d6e29b9c62" ], "author": { "name": "Bjorn Helgaas", "email": "bhelgaas@google.com", "time": "Thu Jan 12 08:01:40 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:40 2012 -0800" }, "message": "x86/PCI: build amd_bus.o only when CONFIG_AMD_NB\u003dy\n\ncommit 5cf9a4e69c1ff0ccdd1d2b7404f95c0531355274 upstream.\n\nWe only need amd_bus.o for AMD systems with PCI. arch/x86/pci/Makefile\nalready depends on CONFIG_PCI\u003dy, so this patch just adds the dependency\non CONFIG_AMD_NB.\n\nCc: Yinghai Lu \u003cyinghai@kernel.org\u003e\nSigned-off-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "45e7e24360e799f7753f37ca5642a0d6e29b9c62", "tree": "e02c560d68a4458c66e7598d458dc41e82396759", "parents": [ "0a4179971477550df61b9218e664eb9128abf2e3" ], "author": { "name": "Bjorn Helgaas", "email": "bhelgaas@google.com", "time": "Thu Jan 05 14:27:19 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:39 2012 -0800" }, "message": "x86/PCI: amd: factor out MMCONFIG discovery\n\ncommit 24d25dbfa63c376323096660bfa9ad45a08870ce upstream.\n\nThis factors out the AMD native MMCONFIG discovery so we can use it\noutside amd_bus.c.\n\namd_bus.c reads AMD MSRs so it can remove the MMCONFIG area from the\nPCI resources. We may also need the MMCONFIG information to work\naround BIOS defects in the ACPI MCFG table.\n\nCc: Borislav Petkov \u003cborislav.petkov@amd.com\u003e\nCc: Yinghai Lu \u003cyinghai@kernel.org\u003e\nSigned-off-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nSigned-off-by: Jesse Barnes \u003cjbarnes@virtuousgeek.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "0a4179971477550df61b9218e664eb9128abf2e3", "tree": "33309b9b7433ddd33dfc82b0de16df8644e8e181", "parents": [ "65d61b46700e059210b4c9f63355d57dc0e1a18e" ], "author": { "name": "Gary Hade", "email": "garyhade@us.ibm.com", "time": "Mon Nov 14 15:42:16 2011 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:39 2012 -0800" }, "message": "x86/PCI: Ignore CPU non-addressable _CRS reserved memory resources\n\ncommit ae5cd86455381282ece162966183d3f208c6fad7 upstream.\n\nThis assures that a _CRS reserved host bridge window or window region is\nnot used if it is not addressable by the CPU. The new code either trims\nthe window to exclude the non-addressable portion or totally ignores the\nwindow if the entire window is non-addressable.\n\nThe current code has been shown to be problematic with 32-bit non-PAE\nkernels on systems where _CRS reserves resources above 4GB.\n\nSigned-off-by: Gary Hade \u003cgaryhade@us.ibm.com\u003e\nReviewed-by: Bjorn Helgaas \u003cbhelgaas@google.com\u003e\nCc: Thomas Renninger \u003ctrenn@novell.com\u003e\nCc: linux-kernel@vger.kernel.org\nSigned-off-by: Jesse Barnes \u003cjbarnes@virtuousgeek.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "65d61b46700e059210b4c9f63355d57dc0e1a18e", "tree": "3fd6a4eaf1de233c65246fc4577787246da27a3b", "parents": [ "58f98e86f9138e283b98766541727af91a58e849" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Mon Oct 17 11:46:06 2011 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:38 2012 -0800" }, "message": "PCI: msi: Disable msi interrupts when we initialize a pci device\n\ncommit a776c491ca5e38c26d9f66923ff574d041e747f4 upstream.\n\nI traced a nasty kexec on panic boot failure to the fact that we had\nscreaming msi interrupts and we were not disabling the msi messages at\nkernel startup. The booting kernel had not enabled those interupts so\nwas not prepared to handle them.\n\nI can see no reason why we would ever want to leave the msi interrupts\nenabled at boot if something else has enabled those interrupts. The pci\nspec specifies that msi interrupts should be off by default. Drivers\nare expected to enable the msi interrupts if they want to use them. Our\ninterrupt handling code reprograms the interrupt handlers at boot and\nwill not be be able to do anything useful with an unexpected interrupt.\n\nThis patch applies cleanly all of the way back to 2.6.32 where I noticed\nthe problem.\n\nSigned-off-by: Eric W. Biederman \u003cebiederm@xmission.com\u003e\nSigned-off-by: Jesse Barnes \u003cjbarnes@virtuousgeek.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "58f98e86f9138e283b98766541727af91a58e849", "tree": "36f00e9bda0d1ebd8fdaf33c5089e6ffb2f4ae56", "parents": [ "c16686fc0c9c8f6fa46741e50c6ab621ab507cf9" ], "author": { "name": "Alex Williamson", "email": "alex.williamson@redhat.com", "time": "Wed Nov 16 09:24:16 2011 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:38 2012 -0800" }, "message": "PCI: Fix PCI_EXP_TYPE_RC_EC value\n\ncommit 1830ea91c20b06608f7cdb2455ce05ba834b3214 upstream.\n\nSpec shows this as 1010b \u003d 0xa\n\nSigned-off-by: Alex Williamson \u003calex.williamson@redhat.com\u003e\nSigned-off-by: Jesse Barnes \u003cjbarnes@virtuousgeek.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "c16686fc0c9c8f6fa46741e50c6ab621ab507cf9", "tree": "9abdf8514c3704340562437e2f8a502ceade8f2b", "parents": [ "75947f78d026b6eb2c4f16c54042325f97e3288a" ], "author": { "name": "Artem Bityutskiy", "email": "artem.bityutskiy@linux.intel.com", "time": "Thu Jan 05 10:47:18 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:37 2012 -0800" }, "message": "UBI: fix use-after-free on error path\n\ncommit e57e0d8e818512047fe379157c3f77f1b9fabffb upstream.\n\nWhen we fail to erase a PEB, we free the corresponding erase entry object,\nbut then re-schedule this object if the error code was something like -EAGAIN.\nObviously, it is a bug to use the object after we have freed it.\n\nReported-by: Emese Revfy \u003cre.emese@gmail.com\u003e\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "75947f78d026b6eb2c4f16c54042325f97e3288a", "tree": "4d81b1db35ca49ad96149cb6ca58c73572f2d3a2", "parents": [ "729a9768761809079d07c9716f656da20a14eb2f" ], "author": { "name": "Bhavesh Parekh", "email": "bparekh@nvidia.com", "time": "Wed Nov 30 17:43:42 2011 +0530" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:37 2012 -0800" }, "message": "UBI: fix missing scrub when there is a bit-flip\n\ncommit e801e128b2200c40a0ec236cf2330b2586b6e05a upstream.\n\nUnder some cases, when scrubbing the PEB if we did not get the lock on\nthe PEB it fails to scrub. Add that PEB again to the scrub list\n\nArtem: minor amendments.\n\nSigned-off-by: Bhavesh Parekh \u003cbparekh@nvidia.com\u003e\nSigned-off-by: Artem Bityutskiy \u003cartem.bityutskiy@linux.intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "729a9768761809079d07c9716f656da20a14eb2f", "tree": "1706cca008cdb06b8e20e53f8c6848736662323e", "parents": [ "dbbef3cbdef5e2363caeb343efa68650f20d7bfc" ], "author": { "name": "Chase Douglas", "email": "chase.douglas@canonical.com", "time": "Mon Nov 07 11:08:05 2011 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:37 2012 -0800" }, "message": "HID: bump maximum global item tag report size to 96 bytes\n\ncommit e46e927b9b7e8d95526e69322855243882b7e1a3 upstream.\n\nThis allows the latest N-Trig devices to function properly.\n\nBugLink: https://bugs.launchpad.net/bugs/724831\n\nSigned-off-by: Chase Douglas \u003cchase.douglas@canonical.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "dbbef3cbdef5e2363caeb343efa68650f20d7bfc", "tree": "1bfe1b45cc725adec9ba7c10565ff43dc1880032", "parents": [ "58a902db8896b6bb4c779a223f6e8e7b289cdcc9" ], "author": { "name": "Jeff Layton", "email": "jlayton@redhat.com", "time": "Tue Dec 20 06:57:45 2011 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:36 2012 -0800" }, "message": "nfs: fix regression in handling of context\u003d option in NFSv4\n\ncommit 8a0d551a59ac92d8ff048d6cb29d3a02073e81e8 upstream.\n\nSetting the security context of a NFSv4 mount via the context\u003d mount\noption is currently broken. The NFSv4 codepath allocates a parsed\noptions struct, and then parses the mount options to fill it. It\neventually calls nfs4_remote_mount which calls security_init_mnt_opts.\nThat clobbers the lsm_opts struct that was populated earlier. This bug\nalso looks like it causes a small memory leak on each v4 mount where\ncontext\u003d is used.\n\nFix this by moving the initialization of the lsm_opts into\nnfs_alloc_parsed_mount_data. Also, add a destructor for\nnfs_parsed_mount_data to make it easier to free all of the allocations\nhanging off of it, and to ensure that the security_free_mnt_opts is\ncalled whenever security_init_mnt_opts is.\n\nI believe this regression was introduced quite some time ago, probably\nby commit c02d7adf.\n\nSigned-off-by: Jeff Layton \u003cjlayton@redhat.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "58a902db8896b6bb4c779a223f6e8e7b289cdcc9", "tree": "14e057509b4274d0d1975cf9400c509877a29125", "parents": [ "2dda99b3d5f3f6be05f0c9cc7cf0b05740e6e9f5" ], "author": { "name": "Andy Adamson", "email": "andros@netapp.com", "time": "Wed Nov 09 13:58:20 2011 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:36 2012 -0800" }, "message": "NFSv4.1: fix backchannel slotid off-by-one bug\n\ncommit 61f2e5106582d02f30b6807e3f9c07463c572ccb upstream.\n\nSigned-off-by: Andy Adamson \u003candros@netapp.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "2dda99b3d5f3f6be05f0c9cc7cf0b05740e6e9f5", "tree": "dd8953ed5c99fa33d2e14d17d042999792d960e6", "parents": [ "be2ef85142e6f00c7f6c8842d903701bdf88cb5c" ], "author": { "name": "Chuck Lever", "email": "chuck.lever@oracle.com", "time": "Mon Dec 05 15:40:30 2011 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:35 2012 -0800" }, "message": "NFS: Retry mounting NFSROOT\n\ncommit 43717c7daebf10b43f12e68512484b3095bb1ba5 upstream.\n\nLukas Razik \u003clinux@razik.name\u003e reports that on his SPARC system,\nbooting with an NFS root file system stopped working after commit\n56463e50 \"NFS: Use super.c for NFSROOT mount option parsing.\"\n\nWe found that the network switch to which Lukas\u0027 client was attached\nwas delaying access to the LAN after the client\u0027s NIC driver reported\nthat its link was up. The delay was longer than the timeouts used in\nthe NFS client during mounting.\n\nNFSROOT worked for Lukas before commit 56463e50 because in those\nkernels, the client\u0027s first operation was an rpcbind request to\ndetermine which port the NFS server was listening on. When that\nrequest failed after a long timeout, the client simply selected the\ndefault NFS port (2049). By that time the switch was allowing access\nto the LAN, and the mount succeeded.\n\nNeither of these client behaviors is desirable, so reverting 56463e50\nis really not a choice. Instead, introduce a mechanism that retries\nthe NFSROOT mount request several times. This is the same tactic that\nnormal user space NFS mounts employ to overcome server and network\ndelays.\n\nSigned-off-by: Lukas Razik \u003clinux@razik.name\u003e\n[ cel: match kernel coding style, add proper patch description ]\n[ cel: add exponential back-off ]\nSigned-off-by: Chuck Lever \u003cchuck.lever@oracle.com\u003e\nTested-by: Lukas Razik \u003clinux@razik.name\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "be2ef85142e6f00c7f6c8842d903701bdf88cb5c", "tree": "0ec6924a5f1afc07c0b171540dd5949782043b74", "parents": [ "a674b8b3e345496a96aec389446650455b2fdfa1" ], "author": { "name": "Michel Dänzer", "email": "michel.daenzer@amd.com", "time": "Thu Jan 05 18:42:17 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:35 2012 -0800" }, "message": "radeon: Fix disabling PCI bus mastering on big endian hosts.\n\ncommit 3df96909b75835d487a9178761622b0cbd7310d4 upstream.\n\nIt would previously write basically random bits to PCI configuration space...\nNot very surprising that the GPU tended to stop responding completely. The\nresulting MCE even froze the whole machine sometimes.\n\nNow resetting the GPU after a lockup has at least a fighting chance of\nsucceeding.\n\nSigned-off-by: Michel Dänzer \u003cmichel.daenzer@amd.com\u003e\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "a674b8b3e345496a96aec389446650455b2fdfa1", "tree": "5bd47c2bcfdb68a9f6aa9de38ae3eed0b8e5bbca", "parents": [ "b48620dfff7a12774bb83348a88eddb5921dcdd2" ], "author": { "name": "Alex Deucher", "email": "alexander.deucher@amd.com", "time": "Tue Jan 03 09:48:38 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:35 2012 -0800" }, "message": "drm/radeon/kms: disable writeback on pre-R300 asics\n\ncommit 28eebb703e28bc455ba704adb1026f76649b768c upstream.\n\nWe often end up missing fences on older asics with\nwriteback enabled which leads to delays in the userspace\naccel code, so just disable it by default on those asics.\n\nReported-by: Helge Deller \u003cdeller@gmx.de\u003e\nReported-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "b48620dfff7a12774bb83348a88eddb5921dcdd2", "tree": "7287491ef44fe8d6fd7ad9b4ff1747becd4d8ced", "parents": [ "24973a17310bd933969d79cf4080049df85aff2c" ], "author": { "name": "Rafał Miłecki", "email": "zajec5@gmail.com", "time": "Fri Dec 23 20:32:18 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:35 2012 -0800" }, "message": "drm/radeon/kms: workaround invalid AVI infoframe checksum issue\n\ncommit 92db7f6c860b8190571a9dc1fcbc16d003422fe8 upstream.\n\nThis change was verified to fix both issues with no video I\u0027ve\ninvestigated. I\u0027ve also checked checksum calculation with fglrx on:\nRV620, HD54xx, HD5450, HD6310, HD6320.\n\nSigned-off-by: Rafał Miłecki \u003czajec5@gmail.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "24973a17310bd933969d79cf4080049df85aff2c", "tree": "116ea3413c3770c20cbf270edeee20e0e907a437", "parents": [ "35cdd5ea88762e22c9d21c5c826cbd7ef1edd7db" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Jan 10 12:41:22 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:34 2012 -0800" }, "message": "ALSA: hda - Return the error from get_wcaps_type() for invalid NIDs\n\ncommit 3a90274de3548ebb2aabfbf488cea8e275a73dc6 upstream.\n\nWhen an invalid NID is given, get_wcaps() returns zero as the error,\nbut get_wcaps_type() takes it as the normal value and returns a bogus\nAC_WID_AUD_OUT value. This confuses the parser.\n\nWith this patch, get_wcaps_type() returns -1 when value 0 is given,\ni.e. an invalid NID is passed to get_wcaps().\n\nBugzilla: https://bugzilla.novell.com/show_bug.cgi?id\u003d740118\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "35cdd5ea88762e22c9d21c5c826cbd7ef1edd7db", "tree": "a3a7dfbde3f7b9e74d83410731c3fbe3c89a2737", "parents": [ "730580b66c412cd8fbe9c7077ce42c55a85e6281" ], "author": { "name": "Pavel Hofman", "email": "pavel.hofman@ivitera.com", "time": "Thu Jan 05 23:05:18 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:34 2012 -0800" }, "message": "ALSA: ice1724 - Check for ac97 to avoid kernel oops\n\ncommit e7848163aa2a649d9065f230fadff80dc3519775 upstream.\n\nCards with identical PCI ids but no AC97 config in EEPROM do not have\nthe ac97 field initialized. We must check for this case to avoid kernel oops.\n\nSigned-off-by: Pavel Hofman \u003cpavel.hofman@ivitera.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "730580b66c412cd8fbe9c7077ce42c55a85e6281", "tree": "9633c79c48c9b2768c3bf239b1d610b3b73bb6cd", "parents": [ "0146b288f47cc3ef3f0791b3023643ccdeeeb339" ], "author": { "name": "Karsten Wiese", "email": "fzu@wemgehoertderstaat.de", "time": "Fri Dec 30 01:42:01 2011 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:33 2012 -0800" }, "message": "ALSA: snd-usb-us122l: Delete calls to preempt_disable\n\ncommit d0f3a2eb9062560bebca8b923424f3ca02a331ba upstream.\n\nThey are not needed here.\n\nSigned-off-by: Karsten Wiese \u003cfzu@wemgehoertderstaat.de\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "0146b288f47cc3ef3f0791b3023643ccdeeeb339", "tree": "5e1890f8ededa9b2e1e52c83302b9679d47ae3b2", "parents": [ "922d41ed4740408d2719a8c99d9f80138e562c03" ], "author": { "name": "Xi Wang", "email": "xi.wang@gmail.com", "time": "Tue Jan 10 11:51:10 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:33 2012 -0800" }, "message": "ext4: fix undefined behavior in ext4_fill_flex_info()\n\ncommit d50f2ab6f050311dbf7b8f5501b25f0bf64a439b upstream.\n\nCommit 503358ae01b70ce6909d19dd01287093f6b6271c (\"ext4: avoid divide by\nzero when trying to mount a corrupted file system\") fixes CVE-2009-4307\nby performing a sanity check on s_log_groups_per_flex, since it can be\nset to a bogus value by an attacker.\n\n\tsbi-\u003es_log_groups_per_flex \u003d sbi-\u003es_es-\u003es_log_groups_per_flex;\n\tgroups_per_flex \u003d 1 \u003c\u003c sbi-\u003es_log_groups_per_flex;\n\n\tif (groups_per_flex \u003c 2) { ... }\n\nThis patch fixes two potential issues in the previous commit.\n\n1) The sanity check might only work on architectures like PowerPC.\nOn x86, 5 bits are used for the shifting amount. That means, given a\nlarge s_log_groups_per_flex value like 36, groups_per_flex \u003d 1 \u003c\u003c 36\nis essentially 1 \u003c\u003c 4 \u003d 16, rather than 0. This will bypass the check,\nleaving s_log_groups_per_flex and groups_per_flex inconsistent.\n\n2) The sanity check relies on undefined behavior, i.e., oversized shift.\nA standard-confirming C compiler could rewrite the check in unexpected\nways. Consider the following equivalent form, assuming groups_per_flex\nis unsigned for simplicity.\n\n\tgroups_per_flex \u003d 1 \u003c\u003c sbi-\u003es_log_groups_per_flex;\n\tif (groups_per_flex \u003d\u003d 0 || groups_per_flex \u003d\u003d 1) {\n\nWe compile the code snippet using Clang 3.0 and GCC 4.6. Clang will\ncompletely optimize away the check groups_per_flex \u003d\u003d 0, leaving the\npatched code as vulnerable as the original. GCC keeps the check, but\nthere is no guarantee that future versions will do the same.\n\nSigned-off-by: Xi Wang \u003cxi.wang@gmail.com\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" }, { "commit": "922d41ed4740408d2719a8c99d9f80138e562c03", "tree": "07113f3ab10bf712f565b805344138dde2eb9c40", "parents": [ "f3a6e79c583423a55f7068ccdad732a5f4a0faad" ], "author": { "name": "Ben Hutchings", "email": "ben@decadent.org.uk", "time": "Tue Jan 10 15:11:02 2012 -0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@suse.de", "time": "Wed Jan 25 17:24:33 2012 -0800" }, "message": "drivers/rtc/interface.c: fix alarm rollover when day or month is out-of-range\n\ncommit e74a8f2edb92cb690b467cea0ab652c509e9f624 upstream.\n\nCommit f44f7f96a20a (\"RTC: Initialize kernel state from RTC\") introduced a\npotential infinite loop. If an alarm time contains a wildcard month and\nan invalid day (\u003e 31), or a wildcard year and an invalid month (\u003e\u003d 12),\nthe loop searching for the next matching date will never terminate. Treat\nthe invalid values as wildcards.\n\nFixes \u003chttp://bugs.debian.org/646429\u003e, \u003chttp://bugs.debian.org/653331\u003e\n\nReported-by: leo weppelman \u003cleoweppelman@googlemail.com\u003e\nReported-by: \"P. van Gaans\" \u003cmailme667@yahoo.co.uk\u003e\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nCc: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nCc: Marcelo Roberto Jimenez \u003cmroberto@cpti.cetuc.puc-rio.br\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: John Stultz \u003cjohn.stultz@linaro.org\u003e\nAcked-by: Alessandro Zummo \u003ca.zummo@towertech.it\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@suse.de\u003e\n\n" } ], "next": "f3a6e79c583423a55f7068ccdad732a5f4a0faad" }