)]}'
{
  "log": [
    {
      "commit": "04045f98e0457aba7d4e6736f37eed189c48a5f7",
      "tree": "c7b927f223e6648885ef6fc3a60d073df883ef82",
      "parents": [
        "9b42c336d06411e6463949d2dac63949f66ff70b"
      ],
      "author": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon Oct 01 21:03:54 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Oct 01 21:03:54 2007 -0700"
      },
      "message": "[IEEE80211]: avoid integer underflow for runt rx frames\n\nReported by Chris Evans \u003cscarybeasts@gmail.com\u003e:\n\n\u003e The summary is that an evil 80211 frame can crash out a victim\u0027s\n\u003e machine. It only applies to drivers using the 80211 wireless code, and\n\u003e only then to certain drivers (and even then depends on a card\u0027s\n\u003e firmware not dropping a dubious packet). I must confess I\u0027m not\n\u003e keeping track of Linux wireless support, and the different protocol\n\u003e stacks etc.\n\u003e\n\u003e Details are as follows:\n\u003e\n\u003e ieee80211_rx() does not explicitly check that \"skb-\u003elen \u003e\u003d hdrlen\".\n\u003e There are other skb-\u003elen checks, but not enough to prevent a subtle\n\u003e off-by-two error if the frame has the IEEE80211_STYPE_QOS_DATA flag\n\u003e set.\n\u003e\n\u003e This leads to integer underflow and crash here:\n\u003e\n\u003e if (frag !\u003d 0)\n\u003e    flen -\u003d hdrlen;\n\u003e\n\u003e (flen is subsequently used as a memcpy length parameter).\n\nHow about this?\n\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "32740ddc1095e5e320bf961dda146bf97bc28adb",
      "tree": "613fccb815ed1c0a8e7712848a0ddea5d0d52b5e",
      "parents": [
        "3146b39c185f8a436d430132457e84fa1d8f8208"
      ],
      "author": {
        "name": "Alexey Kuznetsov",
        "email": "kaber@ms2.inr.ac.ru",
        "time": "Sun Sep 30 17:51:33 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Mon Oct 01 21:01:23 2007 -0700"
      },
      "message": "[SFQ]: Remove artificial limitation for queue limit.\n\nThis is followup to Patrick\u0027s patch. A little optimization to enqueue\nroutine allows to remove artificial limitation on queue length.\n\nPlus, testing showed that hash function used by SFQ is too bad or even worse.\nIt does not even sweep the whole range of hash values.\nSwitched to Jenkins\u0027 hash.\n\nSigned-off-by: Alexey Kuznetsov \u003ckaber@ms2.inr.ac.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "f8ab18d2d987a59ccbf0495032b2aef05b730037",
      "tree": "7a24c79632c91e22235888875813950c6c30d929",
      "parents": [
        "e79ad711a0108475c1b3a03815527e7237020b08"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 28 15:18:35 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 28 15:18:35 2007 -0700"
      },
      "message": "[TCP]: Fix MD5 signature handling on big-endian.\n\nBased upon a report and initial patch by Peter Lieven.\n\ntcp4_md5sig_key and tcp6_md5sig_key need to start with\nthe exact same members as tcp_md5sig_key.  Because they\nare both cast to that type by tcp_v{4,6}_md5_do_lookup().\n\nUnfortunately tcp{4,6}_md5sig_key use a u16 for the key\nlength instead of a u8, which is what tcp_md5sig_key\nuses.  This just so happens to work by accident on\nlittle-endian, but on big-endian it doesn\u0027t.\n\nInstead of casting, just place tcp_md5sig_key as the first member of\nthe address-family specific structures, adjust the access sites, and\nkill off the ugly casts.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e79ad711a0108475c1b3a03815527e7237020b08",
      "tree": "77551ee6c67b5901d7c66ff9daf2a8c6df9b0d41",
      "parents": [
        "ff0ce6845bc18292e80ea40d11c3d3a539a3fc5e"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Sep 27 13:52:00 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Sep 27 13:52:00 2007 -0700"
      },
      "message": "[NET]: Zero length write() on socket should not simply return 0.\n\nThis fixes kernel bugzilla #5731\n\nIt should generate an empty packet for datagram protocols when the\nsocket is connected, for one.\n\nThe check is doubly-wrong because all that a write() can be is a\nsendmsg() call with a NULL msg_control and a single entry iovec.  No\nspecial semantics should be assigned to it, therefore the zero length\ncheck should be removed entirely.\n\nThis matches the behavior of BSD and several other systems.\n\nAlan Cox notes that SuSv3 says the behavior of a zero length write on\nnon-files is \"unspecified\", but that\u0027s kind of useless since BSD has\ndefined this behavior for a quarter century and BSD is essentially\nwhat application folks code to.\n\nBased upon a patch from Stephen Hemminger.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "78bd8fbbcd66fc977baa40e7fd838a4461b0f727",
      "tree": "a2f07d31f69cba7a6afdb8e1d7ad39c9076b510d",
      "parents": [
        "459685c75b82a0431da102365d507fdb72858b84"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@ftp.linux.org.uk",
        "time": "Wed Sep 26 01:54:32 2007 +0100"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Wed Sep 26 09:22:04 2007 -0700"
      },
      "message": "fix sctp_del_bind_addr() last argument type\n\nIt gets pointer to fastcall function, expects a pointer to normal\none and calls the sucker.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "d85f57938ad1d674dff8077a2e6a36a45dbe0e22",
      "tree": "4a3343918da062ca5270429cd9764b0266031463",
      "parents": [
        "acbbe6c28a914db837ad8b75773b0a8f873a718a",
        "45dfd5b5dd20f17fe23dafc5cfe921474d27f849"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Wed Sep 26 08:59:41 2007 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Wed Sep 26 08:59:41 2007 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\n* \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6:\n  [PPP_MPPE]: Don\u0027t put InterimKey on the stack\n  SCTP : Add paramters validity check for ASCONF chunk\n  SCTP: Discard OOTB packetes with bundled INIT early.\n  SCTP: Clean up OOTB handling and fix infinite loop processing\n  SCTP: Explicitely discard OOTB chunks\n  SCTP: Send ABORT chunk with correct tag in response to INIT ACK\n  SCTP: Validate buffer room when processing sequential chunks\n  [PATCH] mac80211: fix initialisation when built-in\n  [PATCH] net/mac80211/wme.c: fix sparse warning\n  [PATCH] cfg80211: fix initialisation if built-in\n  [PATCH] net/wireless/sysfs.c: Shut up build warning\n"
    },
    {
      "commit": "6f4c618ddb0e6b7e6d49cfc8134e694be1c0bc9b",
      "tree": "7ff3a0de1fc54e82bca9201d7f3d5df5c43c7cc7",
      "parents": [
        "3c77f961b55b6060858c68a213d7f4470d7f3eb2"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yjwei@cn.fujitsu.com",
        "time": "Wed Sep 19 17:19:52 2007 +0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:49 2007 -0700"
      },
      "message": "SCTP : Add paramters validity check for ASCONF chunk\n\nIf ADDIP is enabled, when an ASCONF chunk is received with ASCONF\nparamter length set to zero, this will cause infinite loop.\nBy the way, if an malformed ASCONF chunk is received, will cause\nprocessing to access memory without verifying.\n\nThis is because of not check the validity of parameters in ASCONF chunk.\nThis patch fixed this.\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "3c77f961b55b6060858c68a213d7f4470d7f3eb2",
      "tree": "551b912a8d26049a22685401bef93cb553bb8671",
      "parents": [
        "ece25dfa0991f65c4e1d26beb1c3c45bda4239b8"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Mon Sep 17 15:14:28 2007 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:48 2007 -0700"
      },
      "message": "SCTP: Discard OOTB packetes with bundled INIT early.\n\nRFC 4460 and future RFC 4960 (2960-bis) specify that packets\nwith bundled INIT chunks need to be dropped.  We currenlty do\nthat only after processing any leading chunks.  For OOTB chunks,\nsince we already walk the entire packet, we should discard packets\nwith bundled INITs.\n\nThere are other chunks chunks that MUST NOT be bundled, but the spec\nis silent on theire treatment.  Thus, we\u0027ll leave their teatment\nalone for the moment.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nAcked-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\n"
    },
    {
      "commit": "ece25dfa0991f65c4e1d26beb1c3c45bda4239b8",
      "tree": "f81e7c15cb5d4a8126b1cb71f622ecec967fc973",
      "parents": [
        "d3f259687fd248aa4de477149481478c122ba48b"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Fri Sep 07 16:30:54 2007 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:47 2007 -0700"
      },
      "message": "SCTP: Clean up OOTB handling and fix infinite loop processing\n\nWhile processing OOTB chunks as well as chunks with an invalid\nlength of 0, it was possible to SCTP to get wedged inside an\ninfinite loop because we didn\u0027t catch the condition correctly,\nor didn\u0027t mark the packet for discard correctly.\nThis work is based on original findings and work by\nWei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "d3f259687fd248aa4de477149481478c122ba48b",
      "tree": "843b2da4ba740959450ce93570703ec7ef337c5e",
      "parents": [
        "02c4e12c6400b6dccdc6b5c2c18325551e4b2dc9"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Fri Sep 07 11:47:45 2007 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:47 2007 -0700"
      },
      "message": "SCTP: Explicitely discard OOTB chunks\n\nExplicitely discard OOTB chunks, whether the result is a\nSHUTDOWN COMPLETE or an ABORT.  We need to discard the OOTB\nSHUTDOWN ACK to prevent bombing attackes since responsed\nMUST NOT be bundled.  We also explicietely discard in the\nABORT case since that function is widely used internally.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\n"
    },
    {
      "commit": "02c4e12c6400b6dccdc6b5c2c18325551e4b2dc9",
      "tree": "4ccc1cb91ea5be4c2b1b299cff4a5914b9e92eb9",
      "parents": [
        "a09c83847b664dcd67a72613374061c900afb799"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yjwei@cn.fujitsu.com",
        "time": "Fri Aug 31 10:03:58 2007 +0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:46 2007 -0700"
      },
      "message": "SCTP: Send ABORT chunk with correct tag in response to INIT ACK\n\nWhen SCTP client received an INIT ACK chunk with missing mandatory\nparameter such as \"cookie parameter\", it will send back a ABORT\nwith T-bit not set and verification tag is set to 0.\nThis is because before we accept this INIT ACK chunk, we do not know\nthe peer\u0027s tag.  This patch change to reflect vtag when responding to\nINIT ACK with missing mandatory parameter.\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "a09c83847b664dcd67a72613374061c900afb799",
      "tree": "2d861171a944bb415d3cb0af82544836df1ced3d",
      "parents": [
        "ca9938fea576ebbb8d8c4fbe8a5bcc937e49e1ca"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Wed Sep 05 15:53:58 2007 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:45 2007 -0700"
      },
      "message": "SCTP: Validate buffer room when processing sequential chunks\n\nWhen we process bundled chunks, we need to make sure that\nthe skb has the buffer for each header since we assume it\u0027s\nalways there.  Some malicious node can send us something like\nDATA + 2 bytes and we\u0027ll try to walk off the end refrencing\npotentially uninitialized memory.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "ca9938fea576ebbb8d8c4fbe8a5bcc937e49e1ca",
      "tree": "b14b31646f48d181cfd0f7c241655e27b97a7f3d",
      "parents": [
        "136e83d6b8999f4ef680ff9cf2a67e1e1ccbd94e"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Tue Sep 11 12:50:32 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:45 2007 -0700"
      },
      "message": "[PATCH] mac80211: fix initialisation when built-in\n\nWhen mac80211 is built into the kernel it needs to init earlier\nso that device registrations are run after it has initialised.\nThe same applies to rate control algorithms.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "136e83d6b8999f4ef680ff9cf2a67e1e1ccbd94e",
      "tree": "4af23b61f4b9d9e3d01af87def992ca6a9493828",
      "parents": [
        "3a4624652e68ee897145ac698a85bfd2603367c3"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Mon Sep 10 13:55:08 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:44 2007 -0700"
      },
      "message": "[PATCH] net/mac80211/wme.c: fix sparse warning\n\nwme.c triggers a sparse warning; it wasn\u0027t noticed before because until\nrecently ARRAY_SIZE triggered a sparse error.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "3a4624652e68ee897145ac698a85bfd2603367c3",
      "tree": "73d35ee1454ae2cc3e1dff91bd21e4251113bea6",
      "parents": [
        "7b5ee3a038c869e773092834abaa8174e0d77514"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Mon Sep 10 13:44:45 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:44 2007 -0700"
      },
      "message": "[PATCH] cfg80211: fix initialisation if built-in\n\nWhen cfg80211 is built into the kernel it needs to init earlier\nso that device registrations are run after it has initialised.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "7b5ee3a038c869e773092834abaa8174e0d77514",
      "tree": "f23a492791b8b5e2b8ede60652e67b6ce7953201",
      "parents": [
        "4942de4a0e914f205d351a81873f4f63986bcc3c"
      ],
      "author": {
        "name": "Satyam Sharma",
        "email": "satyam@infradead.org",
        "time": "Mon Sep 03 01:41:34 2007 +0530"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Sep 25 22:55:43 2007 -0700"
      },
      "message": "[PATCH] net/wireless/sysfs.c: Shut up build warning\n\nnet/wireless/sysfs.c:108: warning: ‘wiphy_uevent’ defined but not used\n\nwhen CONFIG_HOTPLUG\u003dn is because the only usage site of this function\nis #ifdef\u0027ed as such, so let\u0027s #ifdef the definition also.\n\nSigned-off-by: Satyam Sharma \u003csatyam@infradead.org\u003e\nAcked-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "2aee6198652b32e5eaef29a8f8330a9dd15b8efd",
      "tree": "a95da0809e23f506639309d584468edb87f60212",
      "parents": [
        "402c79fb1944c8e003a32d07f31504b769fe2b52",
        "d59952d532ed8fc93ccb98186f73d9ce5cfcb93d"
      ],
      "author": {
        "name": "Jeff Garzik",
        "email": "jeff@garzik.org",
        "time": "Tue Sep 25 15:47:12 2007 -0400"
      },
      "committer": {
        "name": "Jeff Garzik",
        "email": "jeff@garzik.org",
        "time": "Tue Sep 25 15:47:12 2007 -0400"
      },
      "message": "Merge branch \u0027fixes-jgarzik\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6 into upstream-fixes\n"
    },
    {
      "commit": "efe870f9f4ad74410a18ecbf0d9ba7c14b50a0fb",
      "tree": "3b6ad109bc0e0da5f648858e0785ee8c927c98c1",
      "parents": [
        "81cfe79b9c577139a873483654640eb3f6e78c39"
      ],
      "author": {
        "name": "Larry Finger",
        "email": "Larry.Finger@lwfinger.net",
        "time": "Tue Sep 18 22:00:52 2007 -0500"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Fri Sep 21 11:26:33 2007 -0400"
      },
      "message": "[PATCH] softmac: Fix inability to associate with WEP networks\n\nCommit 4cf92a3c was submitted as a fix for bug #8686 at bugzilla.kernel.org\n(http://bugzilla.kernel.org/show_bug.cgi?id\u003d8686). Unfortunately, the fix led to\na new bug, reported by Yoshifuji Hideaki, that prevented association for WEP\nencrypted networks that use ifconfig to control the device. This patch effectively\nreverts the earlier commit and does a proper fix for bug #8686.\n\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "9db619e66503494e41159de3c76fafabe80d016b",
      "tree": "8f7d2ba98c216a772b5a0e5ab89708dcaceaa1e3",
      "parents": [
        "f685ddaf0fc9b9f53eb9346c858664776becf5d9"
      ],
      "author": {
        "name": "Wolfgang Walter",
        "email": "wolfgang.walter@studentenwerk.mhn.de",
        "time": "Thu Sep 20 15:51:46 2007 -0400"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Thu Sep 20 13:15:57 2007 -0700"
      },
      "message": "rpc: fix garbage in printk in svc_tcp_accept()\n\nwe upgraded the kernel of a nfs-server from 2.6.17.11 to 2.6.22.6. Since\nthen we get the message\n\nlockd: too many open TCP sockets, consider increasing the number of nfsd threads\nlockd: last TCP connect from ^\\\\236^\\É^D\n\nThese random characters in the second line are caused by a bug in\nsvc_tcp_accept.\n\n(Note: there are two previous __svc_print_addr(sin, buf, sizeof(buf))\ncalls in this function, either of which would initialize buf correctly;\nbut both are inside \"if\"\u0027s and are not necessarily executed.  This is\nless obvious in the second case, which is inside a dprintk(), which is a\nmacro which expands to an if statement.)\n\nSigned-off-by: Wolfgang Walter \u003cwolfgang.walter@studentenwerk.mhn.de\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@citi.umich.edu\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "5588b40d7c2bff75ee573ed42d1738c73ce24492",
      "tree": "ab075cd6d417054139ce9b0d90c4fff5aa59ab0a",
      "parents": [
        "1a03b81db96aeaac0276224f25c0701a1ba37318"
      ],
      "author": {
        "name": "Alexey Kuznetsov",
        "email": "kuznet@ms2.inr.ac.ru",
        "time": "Wed Sep 19 10:42:03 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Sep 20 12:14:08 2007 -0700"
      },
      "message": "[PKT_SCHED]: Fix \u0027SFQ qdisc crashes with limit of 2 packets\u0027\n\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "29c5d4afba51c71cfeadd3f74f3c42e064483fb0",
      "tree": "932854319ca02c2c0190ea35b3e38bb929014d45",
      "parents": [
        "6d0b842d3bf0cc027dcff57a89fb8a6b1fd610e1"
      ],
      "author": {
        "name": "Eric Leblond",
        "email": "eric@inl.fr",
        "time": "Tue Sep 18 13:07:15 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Sep 20 12:13:52 2007 -0700"
      },
      "message": "[NETFILTER]: nfnetlink_log: fix sending of multipart messages\n\nThe following patch fixes the handling of netlink packets containing\nmultiple messages.\n\nAs exposed during netfilter workshop, nfnetlink_log was overwritten the\nmessage type of the last message (setting it to MSG_DONE) in a multipart\npacket. The consequence was libnfnetlink to ignore the last message in the\npacket.\n\nThe following patch adds a supplementary message (with type MSG_DONE) af\nthe end of the netlink skb.\n\nSigned-off-by: Eric Leblond \u003ceric@inl.fr\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "edb1e9671a990e6eb9f593636deed7ac43ba9084",
      "tree": "1b8b592411d9d7e4321479f57cb6d1f38ec483e3",
      "parents": [
        "fa890d586cc127ce72597ba0a909bfecf784e10c",
        "d9f30ec0b0d129b9cbf2b041a6a3159aa24592f6"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Sun Sep 16 21:14:54 2007 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Sun Sep 16 21:14:54 2007 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6\n\n* \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6:\n  [VLAN]: Fix net_device leak.\n  [PPP] generic: Fix receive path data clobbering \u0026 non-linear handling\n  [PPP] generic: Call skb_cow_head before scribbling over skb\n  [NET] skbuff: Add skb_cow_head\n  [BRIDGE]: Kill clone argument to br_flood_*\n  [PPP] pppoe: Fill in header directly in __pppoe_xmit\n  [PPP] pppoe: Fix data clobbering in __pppoe_xmit and return value\n  [PPP] pppoe: Fix skb_unshare_check call position\n  [SCTP]: Convert bind_addr_list locking to RCU\n  [SCTP]: Add RCU synchronization around sctp_localaddr_list\n  [PKT_SCHED]: sch_cbq.c: Shut up uninitialized variable warning\n  [PKTGEN]: srcmac fix\n  [IPV6]: Fix source address selection.\n  [IPV4]: Just increment OutDatagrams once per a datagram.\n  [IPV6]: Just increment OutDatagrams once per a datagram.\n  [IPV6]: Fix unbalanced socket reference with MSG_CONFIRM.\n  [NET_SCHED] protect action config/dump from irqs\n  [NET]: Fix two issues wrt. SO_BINDTODEVICE.\n"
    },
    {
      "commit": "d9f30ec0b0d129b9cbf2b041a6a3159aa24592f6",
      "tree": "325c2d1550ed02e3c652625bb6c9371589af13ff",
      "parents": [
        "2a38b775b77f99308a4e571c13d908df78ac5e57"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Sun Sep 16 16:43:04 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 16:43:04 2007 -0700"
      },
      "message": "[VLAN]: Fix net_device leak.\n\nIn \"[VLAN]: Move device registation to seperate function\" (commit\ne89fe42cd03c8fd3686df82d8390a235717a66de), a pile of code got moved\nto register_vlan_dev(), including grabbing a reference to underlying\ndevice.  However, original dev_hold() had been left behind, so we\nleak a reference to net_device now...\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d9cc20484e5e48c6a5deb4387c20fd45bfbdde8c",
      "tree": "f0a9f05ad00b8a506abeb3b42cb3346cef7d2155",
      "parents": [
        "e081e1e3ef4682802ac63b1e5e26158fb9ca9e90"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Sun Sep 16 16:21:16 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 16:21:16 2007 -0700"
      },
      "message": "[NET] skbuff: Add skb_cow_head\n\nThis patch adds an optimised version of skb_cow that avoids the copy if\nthe header can be modified even if the rest of the payload is cloned.\n\nThis can be used in encapsulating paths where we only need to modify the\nheader.  As it is, this can be used in PPPOE and bridging.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e081e1e3ef4682802ac63b1e5e26158fb9ca9e90",
      "tree": "c43b403bd09c209df7f093810b68e672dcc6330b",
      "parents": [
        "9355ec23397af32799038d0e8edbfa5b6f425c27"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Sun Sep 16 16:20:48 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 16:20:48 2007 -0700"
      },
      "message": "[BRIDGE]: Kill clone argument to br_flood_*\n\nThe clone argument is only used by one caller and that caller can clone\nthe packet itself.  This patch moves the clone call into the caller and\nkills the clone argument.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "559cf710b07c5e2cfa3fb8d8f4a1320fd84c53f9",
      "tree": "deb74aea811a7d7c7e203f3743fd15372f8a6589",
      "parents": [
        "293035479942400a7fe8e4f72465d4e4e466b91a"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Sun Sep 16 16:03:28 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 16:03:28 2007 -0700"
      },
      "message": "[SCTP]: Convert bind_addr_list locking to RCU\n\nSince the sctp_sockaddr_entry is now RCU enabled as part of\nthe patch to synchronize sctp_localaddr_list, it makes sense to\nchange all handling of these entries to RCU.  This includes the\nsctp_bind_addrs structure and it\u0027s list of bound addresses.\n\nThis list is currently protected by an external rw_lock and that\nlooks like an overkill.  There are only 2 writers to the list:\nbind()/bindx() calls, and BH processing of ASCONF-ACK chunks.\nThese are already seriealized via the socket lock, so they will\nnot step on each other.  These are also relatively rare, so we\nshould be good with RCU.\n\nThe readers are varied and they are easily converted to RCU.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nAcked-by: Paul E. McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e\nAcked-by: Sridhar Samdurala \u003csri@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "293035479942400a7fe8e4f72465d4e4e466b91a",
      "tree": "af9890403a554b4cf8389a9116080a0d1aa187fb",
      "parents": [
        "ddeee3ce7fbf0e800f2a26a76d6018b42b337cc2"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Sun Sep 16 16:02:12 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 16:02:12 2007 -0700"
      },
      "message": "[SCTP]: Add RCU synchronization around sctp_localaddr_list\n\nsctp_localaddr_list is modified dynamically via NETDEV_UP\nand NETDEV_DOWN events, but there is not synchronization\nbetween writer (even handler) and readers.  As a result,\nthe readers can access an entry that has been freed and\ncrash the sytem.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\nAcked-by: Paul E. McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e\nAcked-by: Sridhar Samdurala \u003csri@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ddeee3ce7fbf0e800f2a26a76d6018b42b337cc2",
      "tree": "686d949a3ce1b80aa96bec276dc144cc33052f35",
      "parents": [
        "ce5d0b47f13f83dfb9fbb8ac91adad7120747aaf"
      ],
      "author": {
        "name": "Satyam Sharma",
        "email": "satyam@infradead.org",
        "time": "Sun Sep 16 14:54:05 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 14:54:05 2007 -0700"
      },
      "message": "[PKT_SCHED]: sch_cbq.c: Shut up uninitialized variable warning\n\nnet/sched/sch_cbq.c: In function \u0027cbq_enqueue\u0027:\nnet/sched/sch_cbq.c:383: warning: \u0027ret\u0027 may be used uninitialized in this function\n\nhas been verified to be a bogus case. So let\u0027s shut it up.\n\nSigned-off-by: Satyam Sharma \u003csatyam@infradead.org\u003e\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ce5d0b47f13f83dfb9fbb8ac91adad7120747aaf",
      "tree": "f1d24348ac9244b30433aa335f870ff9a21d54fa",
      "parents": [
        "6ae5f983cf8de769214d2d9e8a783c881eccd4cd"
      ],
      "author": {
        "name": "Adit Ranadive",
        "email": "adit.262@gmail.com",
        "time": "Sun Sep 16 14:52:15 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 14:52:15 2007 -0700"
      },
      "message": "[PKTGEN]: srcmac fix\n\nFrom: Adit Ranadive \u003cadit.262@gmail.com\u003e\n\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6ae5f983cf8de769214d2d9e8a783c881eccd4cd",
      "tree": "bfc249a8c92e1cbd73845b502eadb4516eb46c69",
      "parents": [
        "2a0c6c980d209827e5d69017fa736f107a744d1d"
      ],
      "author": {
        "name": "Jiri Kosina",
        "email": "jkosina@suse.cz",
        "time": "Sun Sep 16 14:48:21 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Sep 16 14:48:21 2007 -0700"
      },
      "message": "[IPV6]: Fix source address selection.\n\nThe commit 95c385 broke proper source address selection for cases in which \nthere is a address which is makred \u0027deprecated\u0027. The commit mistakenly \nchanged ifa-\u003eflags to ifa_result-\u003eflags (probably copy/paste error from a \nfew lines above) in the \u0027Rule 3\u0027 address selection code.\n\nThe patch restores the previous RFC-compliant behavior.\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2a0c6c980d209827e5d69017fa736f107a744d1d",
      "tree": "dff735fe15844667577fd25bf87bae470d50306b",
      "parents": [
        "cd562c9859f648d78224e9fc0dafa5a3d5000fdb"
      ],
      "author": {
        "name": "YOSHIFUJI Hideaki",
        "email": "yoshfuji@linux-ipv6.org",
        "time": "Fri Sep 14 17:15:19 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri Sep 14 17:15:19 2007 -0700"
      },
      "message": "[IPV4]: Just increment OutDatagrams once per a datagram.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "cd562c9859f648d78224e9fc0dafa5a3d5000fdb",
      "tree": "845cd92b8d59598495427b1aeb32c6d7e2410911",
      "parents": [
        "3ef9d943d26dea764f4fecf3767001c90b778b0c"
      ],
      "author": {
        "name": "YOSHIFUJI Hideaki",
        "email": "yoshfuji@linux-ipv6.org",
        "time": "Fri Sep 14 17:15:01 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri Sep 14 17:15:01 2007 -0700"
      },
      "message": "[IPV6]: Just increment OutDatagrams once per a datagram.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3ef9d943d26dea764f4fecf3767001c90b778b0c",
      "tree": "f1fab72a4de636b6019374380dfb3afc9b3f9888",
      "parents": [
        "e1e992e52faa588667e1378a2573b4b8e3fa6670"
      ],
      "author": {
        "name": "YOSHIFUJI Hideaki",
        "email": "yoshfuji@linux-ipv6.org",
        "time": "Fri Sep 14 16:45:40 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri Sep 14 16:45:40 2007 -0700"
      },
      "message": "[IPV6]: Fix unbalanced socket reference with MSG_CONFIRM.\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e1e992e52faa588667e1378a2573b4b8e3fa6670",
      "tree": "771f664db9e2d7119dfea92a117deeb89e7b55e5",
      "parents": [
        "4878809f711981a602cc562eb47994fc81ea0155"
      ],
      "author": {
        "name": "Jamal Hadi Salim",
        "email": "hadi@cyberus.ca",
        "time": "Wed Sep 12 16:32:59 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 14 16:43:05 2007 -0700"
      },
      "message": "[NET_SCHED] protect action config/dump from irqs\n\n(with no apologies to C Heston)\n\nOn Mon, 2007-10-09 at 21:00 +0800, Herbert Xu wrote:\nOn Sun, Sep 02, 2007 at 01:11:29PM +0000, Christian Kujau wrote:\n\u003e \u003e\n\u003e \u003e after upgrading to 2.6.23-rc5 (and applying davem\u0027s fix [0]), lockdep\n\u003e \u003e was quite noisy when I tried to shape my external (wireless) interface:\n\u003e \u003e\n\u003e \u003e [ 6400.534545] FahCore_78.exe/3552 just changed the state of lock:\n\u003e \u003e [ 6400.534713]  (\u0026dev-\u003eingress_lock){-+..}, at: [\u003cc038d595\u003e]\n\u003e \u003e netif_receive_skb+0x2d5/0x3c0\n\u003e \u003e [ 6400.534941] but this lock took another, soft-read-irq-unsafe lock in the\n\u003e \u003e past:\n\u003e \u003e [ 6400.535145]  (police_lock){-.--}\n\u003e\n\u003e This is a genuine dead-lock.  The police lock can be taken\n\u003e for reading with softirqs on.  If a second CPU tries to take\n\u003e the police lock for writing, while holding the ingress lock,\n\u003e then a softirq on the first CPU can dead-lock when it tries\n\u003e to get the ingress lock.\n\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4878809f711981a602cc562eb47994fc81ea0155",
      "tree": "17e84e056331e90514fe1a5069d1fba9cdaab274",
      "parents": [
        "19299b1a722198830e39264a0f2edadd3fde74c2"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 14 16:41:03 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Sep 14 16:41:03 2007 -0700"
      },
      "message": "[NET]: Fix two issues wrt. SO_BINDTODEVICE.\n\n1) Comments suggest that setting optlen to zero will unbind\n   the socket from whatever device it might be attached to.  This\n   hasn\u0027t been the case since at least 2.2.x because the first thing\n   this function does is return -EINVAL if \u0027optlen\u0027 is less than\n   sizeof(int).\n\n   This check also means that passing in a two byte string doesn\u0027t\n   work so well.  It\u0027s almost as if this code was testing with \"eth?\"\n   patterned strings and nothing else :-)\n\n   Fix this by breaking the logic of this facility out into a\n   seperate function which validates optlen more appropriately.\n\n   The optlen\u003d\u003d0 and small string cases now work properly.\n\n2) We should reset the cached route of the socket after we have made\n   the device binding changes, not before.\n\nReported by Ben Greear.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7a1fa065a0264f6b3d3003ba5635289f6583c478",
      "tree": "c8193e1c65a7b2ced3366a02668261a553150ff4",
      "parents": [
        "2123a09f3f129f4d56f59026ec63e5990f86db2f"
      ],
      "author": {
        "name": "Neil Brown",
        "email": "neilb@suse.de",
        "time": "Fri Sep 14 10:28:08 2007 -0400"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Fri Sep 14 13:58:11 2007 -0700"
      },
      "message": "Correctly close old nfsd/lockd sockets.\n\nCommit aaf68cfbf2241d24d46583423f6bff5c47e088b3 added a bias\nto sk_inuse, so this test for an unused socket now fails.  So no\nsockets get closed because they are old (they might get closed\nif the client closed them).\n\nThis bug has existed since 2.6.21-rc1.\n\nThanks to Wolfgang Walter for finding and reporting the bug.\n\nCc: Wolfgang Walter \u003cwolfgang.walter@studentenwerk.mhn.de\u003e\nSigned-off-by: Neil Brown \u003cneilb@suse.de\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@citi.umich.edu\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "1da97f83a843f92678b614fcaebdb3e4ebd6c9dd",
      "tree": "fa4b516c20714b203c42b6e6b8b55811aef7e67a",
      "parents": [
        "577107e8e4cf9f6f4f5ef8350ac9a8faa6c3796d"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@kimchee.(none)",
        "time": "Wed Sep 12 14:10:58 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@kimchee.(none)",
        "time": "Wed Sep 12 14:10:58 2007 +0200"
      },
      "message": "[BLUETOOTH]: Fix non-COMPAT build of hci_sock.c\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "0a9c73014415d2a84dac346c1e12169142a6ad37",
      "tree": "8cac662fe643df9e73c8b25c98cdb71f7bafe0ea",
      "parents": [
        "e1f52208bb968291f7d9142eff60b62984b4a511"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Sep 11 11:33:28 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Sep 11 11:33:28 2007 +0200"
      },
      "message": "[INET_DIAG]: Fix oops in netlink_rcv_skb\n\nnetlink_run_queue() doesn\u0027t handle multiple processes processing the\nqueue concurrently. Serialize queue processing in inet_diag to fix\na oops in netlink_rcv_skb caused by netlink_run_queue passing a\nNULL for the skb.\n\nBUG: unable to handle kernel NULL pointer dereference at virtual address 00000054\n[349587.500454]  printing eip:\n[349587.500457] c03318ae\n[349587.500459] *pde \u003d 00000000\n[349587.500464] Oops: 0000 [#1]\n[349587.500466] PREEMPT SMP\n[349587.500474] Modules linked in: w83627hf hwmon_vid i2c_isa\n[349587.500483] CPU:    0\n[349587.500485] EIP:    0060:[\u003cc03318ae\u003e]    Not tainted VLI\n[349587.500487] EFLAGS: 00010246   (2.6.22.3 #1)\n[349587.500499] EIP is at netlink_rcv_skb+0xa/0x7e\n[349587.500506] eax: 00000000   ebx: 00000000   ecx: c148d2a0   edx: c0398819\n[349587.500510] esi: 00000000   edi: c0398819   ebp: c7a21c8c   esp: c7a21c80\n[349587.500517] ds: 007b   es: 007b   fs: 00d8  gs: 0033  ss: 0068\n[349587.500521] Process oidentd (pid: 17943, ti\u003dc7a20000 task\u003dcee231c0 task.ti\u003dc7a20000)\n[349587.500527] Stack: 00000000 c7a21cac f7c8ba78 c7a21ca4 c0331962 c0398819 f7c8ba00 0000004c\n[349587.500542]        f736f000 c7a21cb4 c03988e3 00000001 f7c8ba00 c7a21cc4 c03312a5 0000004c\n[349587.500558]        f7c8ba00 c7a21cd4 c0330681 f7c8ba00 e4695280 c7a21d00 c03307c6 7fffffff\n[349587.500578] Call Trace:\n[349587.500581]  [\u003cc010361a\u003e] show_trace_log_lvl+0x1c/0x33\n[349587.500591]  [\u003cc01036d4\u003e] show_stack_log_lvl+0x8d/0xaa\n[349587.500595]  [\u003cc010390e\u003e] show_registers+0x1cb/0x321\n[349587.500604]  [\u003cc0103bff\u003e] die+0x112/0x1e1\n[349587.500607]  [\u003cc01132d2\u003e] do_page_fault+0x229/0x565\n[349587.500618]  [\u003cc03c8d3a\u003e] error_code+0x72/0x78\n[349587.500625]  [\u003cc0331962\u003e] netlink_run_queue+0x40/0x76\n[349587.500632]  [\u003cc03988e3\u003e] inet_diag_rcv+0x1f/0x2c\n[349587.500639]  [\u003cc03312a5\u003e] netlink_data_ready+0x57/0x59\n[349587.500643]  [\u003cc0330681\u003e] netlink_sendskb+0x24/0x45\n[349587.500651]  [\u003cc03307c6\u003e] netlink_unicast+0x100/0x116\n[349587.500656]  [\u003cc0330f83\u003e] netlink_sendmsg+0x1c2/0x280\n[349587.500664]  [\u003cc02fcce9\u003e] sock_sendmsg+0xba/0xd5\n[349587.500671]  [\u003cc02fe4d1\u003e] sys_sendmsg+0x17b/0x1e8\n[349587.500676]  [\u003cc02fe92d\u003e] sys_socketcall+0x230/0x24d\n[349587.500684]  [\u003cc01028d2\u003e] syscall_call+0x7/0xb\n[349587.500691]  \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[349587.500693] Code: f0 ff 4e 18 0f 94 c0 84 c0 0f 84 66 ff ff ff 89 f0 e8 86 e2 fc ff e9 5a ff ff ff f0 ff 40 10 eb be 55 89 e5 57 89 d7 56 89 c6 53 \u003c8b\u003e 50 54 83 fa 10 72 55 8b 9e 9c 00 00 00 31 c9 8b 03 83 f8 0f\n\nReported by Athanasius \u003clink@miggy.org\u003e\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e1f52208bb968291f7d9142eff60b62984b4a511",
      "tree": "562076978b4a8f71f4cf49903496cf95ab02d3d2",
      "parents": [
        "16fcec35e7d7c4faaa4709f6434a4a25b06d25e3"
      ],
      "author": {
        "name": "YOSHIFUJI Hideaki",
        "email": "yoshfuji@linux-ipv6.org",
        "time": "Tue Sep 11 11:31:43 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Sep 11 11:31:43 2007 +0200"
      },
      "message": "[IPv6]: Fix NULL pointer dereference in ip6_flush_pending_frames\n\nSome of skbs in sk-\u003ewrite_queue do not have skb-\u003edst because\nwe do not fill skb-\u003edst when we allocate new skb in append_data().\n\nBTW, I think we may not need to (or we should not) increment some stats\nwhen using corking; if 100 sendmsg() (with MSG_MORE) result in 2 packets,\nhow many should we increment?\n\nIf 100, we should set skb-\u003edst for every queued skbs.\n\nIf 1 (or 2 (*)), we increment the stats for the first queued skb and\nwe should just skip incrementing OutDiscards for the rest of queued skbs,\nadn we should also impelement this semantics in other places;\ne.g., we should increment other stats just once, not 100 times.\n\n*: depends on the place we are discarding the datagram.\n\nI guess should just increment by 1 (or 2).\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "16fcec35e7d7c4faaa4709f6434a4a25b06d25e3",
      "tree": "5febf4d688f2c32ed55e02bc20246388b74d85e4",
      "parents": [
        "0fb96701376874c9f1f80322f89a5bf4457c709f"
      ],
      "author": {
        "name": "Neil Horman",
        "email": "nhorman@tuxdriver.com",
        "time": "Tue Sep 11 11:28:26 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Sep 11 11:28:26 2007 +0200"
      },
      "message": "[NETFILTER]: Fix/improve deadlock condition on module removal netfilter\n\nSo I\u0027ve had a deadlock reported to me.  I\u0027ve found that the sequence of\nevents goes like this:\n\n1) process A (modprobe) runs to remove ip_tables.ko\n\n2) process B (iptables-restore) runs and calls setsockopt on a netfilter socket,\nincreasing the ip_tables socket_ops use count\n\n3) process A acquires a file lock on the file ip_tables.ko, calls remove_module\nin the kernel, which in turn executes the ip_tables module cleanup routine,\nwhich calls nf_unregister_sockopt\n\n4) nf_unregister_sockopt, seeing that the use count is non-zero, puts the\ncalling process into uninterruptible sleep, expecting the process using the\nsocket option code to wake it up when it exits the kernel\n\n4) the user of the socket option code (process B) in do_ipt_get_ctl, calls\nipt_find_table_lock, which in this case calls request_module to load\nip_tables_nat.ko\n\n5) request_module forks a copy of modprobe (process C) to load the module and\nblocks until modprobe exits.\n\n6) Process C. forked by request_module process the dependencies of\nip_tables_nat.ko, of which ip_tables.ko is one.\n\n7) Process C attempts to lock the request module and all its dependencies, it\nblocks when it attempts to lock ip_tables.ko (which was previously locked in\nstep 3)\n\nTheres not really any great permanent solution to this that I can see, but I\u0027ve\ndeveloped a two part solution that corrects the problem\n\nPart 1) Modifies the nf_sockopt registration code so that, instead of using a\nuse counter internal to the nf_sockopt_ops structure, we instead use a pointer\nto the registering modules owner to do module reference counting when nf_sockopt\ncalls a modules set/get routine.  This prevents the deadlock by preventing set 4\nfrom happening.\n\nPart 2) Enhances the modprobe utilty so that by default it preforms non-blocking\nremove operations (the same way rmmod does), and add an option to explicity\nrequest blocking operation.  So if you select blocking operation in modprobe you\ncan still cause the above deadlock, but only if you explicity try (and since\nroot can do any old stupid thing it would like....  :)  ).\n\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "0fb96701376874c9f1f80322f89a5bf4457c709f",
      "tree": "d62aa99af2e68d0d2ac1191af6f402aafa25ffce",
      "parents": [
        "66eb50d5c972cc16df2be730497b7f06d75d8132"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Sep 11 11:27:01 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Sep 11 11:27:01 2007 +0200"
      },
      "message": "[NETFILTER]: nf_conntrack_ipv4: fix \"Frag of proto ...\" messages\n\nSince we\u0027re now using a generic tuple decoding function in ICMP\nconnection tracking, ipv4_get_l4proto() might get called with a\nfragmented packet from within an ICMP error. Remove the error\nmessage we used to print when this happens.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "66eb50d5c972cc16df2be730497b7f06d75d8132",
      "tree": "975abcb46c951a6960921671f33ca1f8857e6ca1",
      "parents": [
        "fdd8a532a6764393305ae7063a8994d71404c482",
        "89f2783ded0a4fc98852cb9552bb27a80cd6a41a"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@kimchee.(none)",
        "time": "Tue Sep 11 11:15:30 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@kimchee.(none)",
        "time": "Tue Sep 11 11:15:30 2007 +0200"
      },
      "message": "Merge master.kernel.org:/pub/scm/linux/kernel/git/holtmann/bluetooth-2.6\n"
    },
    {
      "commit": "9e3be4b34364a670bd6e57d2e8c3caabdd8d89f8",
      "tree": "2282e4480875948c6fff379a24ca027a324d6ecf",
      "parents": [
        "a2221f308dabb95abb914ad858d36c2462705558"
      ],
      "author": {
        "name": "Denis V. Lunev",
        "email": "den@openvz.org",
        "time": "Tue Sep 11 11:04:49 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Sep 11 11:04:49 2007 +0200"
      },
      "message": "[IPV6]: Freeing alive inet6 address\n\nFrom: Denis V. Lunev \u003cden@openvz.org\u003e\n\naddrconf_dad_failure calls addrconf_dad_stop which takes referenced address\nand drops the count. So, in6_ifa_put perrformed at out: is extra. This\nresults in message: \"Freeing alive inet6 address\" and not released dst entries.\n\nSigned-off-by: Denis V. Lunev \u003cden@openvz.org\u003e\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a2221f308dabb95abb914ad858d36c2462705558",
      "tree": "13179de94495566dd4d66b2d0148722b5f46f6ca",
      "parents": [
        "596e41509550447b030f7b16adaeb0138ab585a8"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Sep 11 10:45:15 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Sep 11 10:45:15 2007 +0200"
      },
      "message": "[DECNET]: Fix interface address listing regression.\n\nNot all are listed, same as the IPV4 devinet bug.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "596e41509550447b030f7b16adaeb0138ab585a8",
      "tree": "eafb66a4e5dcd5d15a8dc8187aef8d7d483b83d6",
      "parents": [
        "ef8aef55ce61fd0e2af798695f7386ac756ae1e7"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@linux-foundation.org",
        "time": "Tue Sep 11 10:41:04 2007 +0200"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Sep 11 10:41:04 2007 +0200"
      },
      "message": "[IPV4] devinet: show all addresses assigned to interface\n\nBug: http://bugzilla.kernel.org/show_bug.cgi?id\u003d8876\n\nNot all ips are shown by \"ip addr show\" command when IPs number assigned to an\ninterface is more than 60-80 (in fact it depends on broadcast/label etc\npresence on each address).\n\nSteps to reproduce:\nIt\u0027s terribly simple to reproduce:\n\n# for i in $(seq 1 100); do ip ad add 10.0.$i.1/24 dev eth10 ; done\n# ip addr show\n\nthis will _not_ show all IPs.\nLooks like the problem is in netlink/ipv4 message processing.\n\nThis is fix from bug submitter, it looks correct.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ef8aef55ce61fd0e2af798695f7386ac756ae1e7",
      "tree": "dd3d30a25e69fa94dcffa024e5a87758c0f6ba24",
      "parents": [
        "2fbe43f6f631dd7ce19fb1499d6164a5bdb34568"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Thu Sep 06 14:06:35 2007 +0100"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@kimchee.(none)",
        "time": "Tue Sep 11 10:29:07 2007 +0200"
      },
      "message": "[NET]: Do not dereference iov if length is zero\n\nWhen msg_iovlen is zero we shouldn\u0027t try to dereference\nmsg_iov.  Right now the only thing that tries to do so\nis skb_copy_and_csum_datagram_iovec.  Since the total\nlength should also be zero if msg_iovlen is zero, it\u0027s\nsufficient to check the total length there and simply\nreturn if it\u0027s zero.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "89f2783ded0a4fc98852cb9552bb27a80cd6a41a",
      "tree": "3227a8f56a6a1240d620cfe3b091a34836f69437",
      "parents": [
        "7c631a67601f116d303cfb98a3d964a150090e38"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sun Sep 09 08:39:49 2007 +0200"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sun Sep 09 08:39:49 2007 +0200"
      },
      "message": "[Bluetooth] Fix parameter list for event filter command\n\nOn device initialization the event filters are cleared. In case of\nclearing the filters the extra condition type shall be omitted.\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n"
    },
    {
      "commit": "7c631a67601f116d303cfb98a3d964a150090e38",
      "tree": "f2c1396a62054a023261f397fa2900955ace453c",
      "parents": [
        "767c5eb5d35aeb85987143f0a730bc21d3ecfb3d"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sun Sep 09 08:39:43 2007 +0200"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sun Sep 09 08:39:43 2007 +0200"
      },
      "message": "[Bluetooth] Update security filter for Bluetooth 2.1\n\nThis patch updates the HCI security filter with support for the\nBluetooth 2.1 commands and events.\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n"
    },
    {
      "commit": "767c5eb5d35aeb85987143f0a730bc21d3ecfb3d",
      "tree": "f292706a782bfb8d768a3c6f96871b3ba9e5dc81",
      "parents": [
        "26a4a06e7ff2874154eb3f4b4ba0514dc563b100"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sun Sep 09 08:39:34 2007 +0200"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sun Sep 09 08:39:34 2007 +0200"
      },
      "message": "[Bluetooth] Add compat handling for timestamp structure\n\nThe timestamp structure needs special handling in case of compat\nprograms. Use the same wrapping method the network core uses.\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n"
    },
    {
      "commit": "5c127c58ae9bf196d787815b1bd6b0aec5aee816",
      "tree": "9edf6e04fe5ac494d024da4f7581ce6afaa44e63",
      "parents": [
        "88282c6ecf0dacefda6090b0289d35e8a3cc6221"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Aug 31 14:39:44 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Aug 31 14:39:44 2007 -0700"
      },
      "message": "[TCP]: \u0027dst\u0027 can be NULL in tcp_rto_min()\n\nReported by Rick Jones.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "88282c6ecf0dacefda6090b0289d35e8a3cc6221",
      "tree": "a9679d3f2266598221d5282e6ccc390437c29c81",
      "parents": [
        "a289d70d74c39a8e6938619f967fc6cd70ce1798"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Thu Aug 30 22:46:36 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Aug 30 22:46:36 2007 -0700"
      },
      "message": "[PKTGEN]: Remove write-only variable.\n\nThe pktgen_thread.pid is set to current-\u003epid and is never used\nafter this. So remove this at all.\n\nFound during isolating the explicit pid/tgid usage.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Sukadev Bhattiprolu \u003csukadev@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a289d70d74c39a8e6938619f967fc6cd70ce1798",
      "tree": "45e5257729d5a1f8ae0a607cbe51a7846f51f9e8",
      "parents": [
        "dbaaa07a60edf71670b484a65e14400ab40c84f7"
      ],
      "author": {
        "name": "Jesper Bengtsson",
        "email": "jesper.bengtsson@axis.com",
        "time": "Thu Aug 30 22:36:43 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Aug 30 22:36:43 2007 -0700"
      },
      "message": "[NETFILTER]: xt_tcpudp: fix wrong struct in udp_checkentry\n\nIt doesn\u0027t seem to have any effect on the x86 architecture but it does\nhave effect on the Axis CRIS architecture.\n\nSigned-off-by: Jesper Bengtsson \u003cjesper.bengtsson@axis.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "dbaaa07a60edf71670b484a65e14400ab40c84f7",
      "tree": "2cc33dfd6509c6cac456ae0ccfe386333aaec70a",
      "parents": [
        "b4a488d1824a2cc3514f9ee1298d805bd5edc893"
      ],
      "author": {
        "name": "Lucas Nussbaum",
        "email": "lucas.nussbaum@imag.fr",
        "time": "Thu Aug 30 22:35:46 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Aug 30 22:35:46 2007 -0700"
      },
      "message": "[NET_SCHED] sch_prio.c: remove duplicate call of tc_classify()\n\nWhen CONFIG_NET_CLS_ACT is enabled, tc_classify() is called twice in\nprio_classify(). This causes \"interesting\" behaviour: with the setup\nbelow, packets are duplicated, sent twice to ifb0, and then loop in and\nout of ifb0.\n\nThe patch uses the previously calculated return value in the switch,\nwhich is probably what Patrick had in mind in commit\nbdba91ec70fb5ccbdeb1c7068319adc6ea9e1a7d -- maybe Patrick can\ndouble-check this?\n\n-- example setup --\nifconfig ifb0 up\ntc qdisc add dev ifb0 root netem delay 2s\ntc qdisc add dev $ETH root handle 1: prio\ntc filter add dev $ETH parent 1: protocol ip prio 10 u32 \\\n match ip dst 172.24.110.6/32 flowid 1:1 \\\n action mirred egress redirect dev ifb0\nping -c1 172.24.110.6\n\nSigned-off-by: Lucas Nussbaum \u003clucas.nussbaum@imag.fr\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b4a488d1824a2cc3514f9ee1298d805bd5edc893",
      "tree": "7198cc4ce2146b16e595f5dbbb222f5f6ebf982e",
      "parents": [
        "df1c0b8468b34628ed12b103804a4576cd9af8bb"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@linux-foundation.org",
        "time": "Thu Aug 30 22:16:22 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Aug 30 22:16:22 2007 -0700"
      },
      "message": "[BRIDGE]: Fix OOPS when bridging device without ethtool.\n\nBridge code calls ethtool to get speed. The conversion to using\nonly ethtool_ops broke the case of devices without ethtool_ops.\nThis is a new regression in 2.6.23.\n\nRearranged the switch to a logical order, and use gcc initializer.\n\nPs: speed should have been part of the network device structure from\n    the start rather than burying it in ethtool.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nAcked-by: Matthew Wilcox \u003cmatthew@wil.cx\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "df1c0b8468b34628ed12b103804a4576cd9af8bb",
      "tree": "415a646ecbec816b1ee415768e25987b91e08129",
      "parents": [
        "b91ddd843751947e2f81dfc8a86c5c21cbe07158"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@linux-foundation.org",
        "time": "Thu Aug 30 22:15:35 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Aug 30 22:15:35 2007 -0700"
      },
      "message": "[BRIDGE]: Packets leaking out of disabled/blocked ports.\n\nThis patch fixes some packet leakage in bridge.  The bridging code was\nallowing forward table entries to be generated even if a device was\nbeing blocked. The fix is to not add forwarding database entries\nunless the port is active.\n\nThe bug arose as part of the conversion to processing STP frames\nthrough normal receive path (in 2.6.17).\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nAcked-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b91ddd843751947e2f81dfc8a86c5c21cbe07158",
      "tree": "abeab3c0fa11e4295c889951bae407317b7e7eda",
      "parents": [
        "05bb1fad1cde025a864a90cfeb98dcbefe78a44a",
        "cb243a1a9fef4aaff262a5dd14f987070d37229b"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Aug 30 22:11:31 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Aug 30 22:11:31 2007 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/vxy/lksctp-dev\n"
    },
    {
      "commit": "05bb1fad1cde025a864a90cfeb98dcbefe78a44a",
      "tree": "d4146d601e960599a5a1249317beb45692619396",
      "parents": [
        "378be2c08314fc46e3f814fa264ff8ebdb79712f"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Aug 30 22:10:28 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Thu Aug 30 22:10:28 2007 -0700"
      },
      "message": "[TCP]: Allow minimum RTO to be configurable via routing metrics.\n\nCell phone networks do link layer retransmissions and other\nthings that cause unnecessary timeout retransmits.  So allow\nthe minimum RTO to be inflated per-route to deal with this.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "cb243a1a9fef4aaff262a5dd14f987070d37229b",
      "tree": "5f15c06b52e98964070e56aaa6f8997ebf5f47ed",
      "parents": [
        "609ee4679b8a0831257552dd2b0e54f509ba0c77"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yjwei@cn.fujitsu.com",
        "time": "Mon Aug 06 13:55:58 2007 +0800"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 16:44:27 2007 -0400"
      },
      "message": "SCTP: Fix to handle invalid parameter length correctly\n\nIf an INIT with invalid parameter length look like this:\nParameter Type : 1\nParameter Length: 800\nand not contain any payload, SCTP will ignore this  parameter and send\nback a INIT-ACK.\nThis patch is fix to handle this invalid parameter length correctly.\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "609ee4679b8a0831257552dd2b0e54f509ba0c77",
      "tree": "2a7a4bc4848de6fb6b0bd502e358f2893cfe71d3",
      "parents": [
        "498d63071ef378e201979e441aefcc6565702ca7"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Fri Aug 31 03:10:59 2007 +0900"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 14:12:25 2007 -0400"
      },
      "message": "SCTP: Abort on COOKIE-ECHO if backlog is exceeded.\n\nCurrently we abort on the INIT chunk we our backlog is currenlty\nexceeded.  Delay this about untill COOKIE-ECHO to give the user\ntime to accept the socket.  Also, make sure that we treat\nsk_max_backlog of 0 as no connections allowed.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "498d63071ef378e201979e441aefcc6565702ca7",
      "tree": "2acf9c0c979de07840b42b204aed91cfafdd9f07",
      "parents": [
        "d0ce92910bc04e107b2f3f2048f07e94f570035d"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 14:03:58 2007 -0400"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 14:03:58 2007 -0400"
      },
      "message": "SCTP: Correctly disable listening when backlog is 0.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "d0ce92910bc04e107b2f3f2048f07e94f570035d",
      "tree": "9c207786faf64e210d4e3e9c0a2388a0576b4cf8",
      "parents": [
        "cc75689a4c4eb94b2fd7e3870347b9237ab39503"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Fri Aug 24 19:37:46 2007 +0900"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 13:56:06 2007 -0400"
      },
      "message": "SCTP: Do not retransmit chunks that are newer then rtt.\n\nWhen performing a retransmit, do not include the chunk if\nit was sent less then 1 rtt ago.  The reason is that we\nmay receive the SACK very soon and wouldn\u0027t retransmit.\nSuggested by Randy Stewart.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "cc75689a4c4eb94b2fd7e3870347b9237ab39503",
      "tree": "973cdbe0003d508c643a39ed629b50137e79d3a1",
      "parents": [
        "2772b495efe341a02c867bc3a03d7362bd336832"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Fri Aug 24 19:30:25 2007 +0900"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 13:55:41 2007 -0400"
      },
      "message": "SCTP: Uncomfirmed transports can\u0027t become Inactive\n\nDo not set Unconfirmed transports to Inactive state.  This may\nresult in an inactive association being destroyed since we start\ncounting errors on \"inactive\" transports against the association.\nThis was found at the SCTP interop event.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "2772b495efe341a02c867bc3a03d7362bd336832",
      "tree": "7ca42b0e414fffd340bb2242cc1f61547cf21183",
      "parents": [
        "d99fa42963a5ae394cf1df9d5bb739eb378a189b"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Tue Aug 21 14:24:30 2007 +0900"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 13:55:20 2007 -0400"
      },
      "message": "SCTP: Pick the correct port when binding to 0.\n\nsctp_bindx() allows the use of unspecified port.  The problem is\nthat every address we bind to ends up selecting a new port if\nthe user specified port 0.  This patch allows re-use of the\nalready selected port when the port from bindx was 0.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "d99fa42963a5ae394cf1df9d5bb739eb378a189b",
      "tree": "cfbad786d1115135ce7fc61ffef83018feadaa5b",
      "parents": [
        "00f1c2df2a1c4903f4daa1333bafeb6dcbc9591d"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yjwei@cn.fujitsu.com",
        "time": "Mon Aug 27 11:19:24 2007 +0800"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 13:52:56 2007 -0400"
      },
      "message": "SCTP: Use net_ratelimit to suppress error messages print too fast\n\nWhen multi bundling SHUTDOWN-ACK message is received in ESTAB state,\nthis will cause \"sctp protocol violation state\" message print many times.\nIf SHUTDOWN-ACK is bundled 300 times in one packet, message will be\nprint 300 times. The same problem also exists when received unexpected\nHEARTBEAT-ACK message which is bundled message times.\n\nThis patch used net_ratelimit() to suppress error messages print too fast.\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "00f1c2df2a1c4903f4daa1333bafeb6dcbc9591d",
      "tree": "61e9da42f580f7f120bac8c7cbeab39f2a0311ab",
      "parents": [
        "8d614ade511fef11f992d6a73e538d33b3b81f12"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yjwei@cn.fujitsu.com",
        "time": "Tue Aug 21 15:50:01 2007 +0800"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 13:50:48 2007 -0400"
      },
      "message": "SCTP: Fix to encode PROTOCOL VIOLATION error cause correctly\n\nPROTOCOL VIOLATION error cause in ABORT is bad encode when make abort\nchunk. When SCTP encode ABORT chunk with PROTOCOL VIOLATION error cause,\nit just add the error messages to PROTOCOL VIOLATION error cause, the\nrest four bytes(struct sctp_paramhdr) is just add to the chunk, not\nchange the length of error cause. This cause the ABORT chunk to be a bad\nformat. The chunk is like this:\n\nABORT chunk\n  Chunk type: ABORT (6)\n  Chunk flags: 0x00\n  Chunk length: 72 (*1)\n  Protocol violation cause\n    Cause code: Protocol violation (0x000d)\n    Cause length: 62 (*2)\n    Cause information: 5468652063756D756C61746976652074736E2061636B2062...\n    Cause padding: 0000\n[Needless] 00030010\nChunk Length(*1) \u003d 72 but Cause length(*2) only 62, not include the\nextend 4 bytes.\n((72 - sizeof(chunk_hdr)) \u003d 68) !\u003d (62 +3) / 4 * 4\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "8d614ade511fef11f992d6a73e538d33b3b81f12",
      "tree": "d003f0eaeae83af128991a9d3d5e0da76df5eda0",
      "parents": [
        "ab3e5e7b65dde661f5eb86b445496c5967283333"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yjwei@cn.fujitsu.com",
        "time": "Mon Aug 06 13:55:47 2007 +0800"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 30 11:56:17 2007 -0400"
      },
      "message": "SCTP: Fix sctp_addto_chunk() to add pad with correct length\n\nAt function sctp_addto_chunk(), it do pad before add payload to chunk if\nchunk length is not 4-byte alignment. But it do pad with a bad length.\nThis patch fixed this probleam.\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "ab3e5e7b65dde661f5eb86b445496c5967283333",
      "tree": "c371de81c5b7de518360ba0af337627e21d43d24",
      "parents": [
        "ea2dfb3733d53ac98b17756435d1f99e25490357"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Thu Aug 02 16:51:42 2007 -0400"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Wed Aug 29 13:34:34 2007 -0400"
      },
      "message": "SCTP: Assign stream sequence numbers to the entire message\n\nCurrently we only assign the sequence number to a packet that\nwe are about to transmit.  This however breaks the Partial\nReliability extensions, because it\u0027s possible for us to\nnever transmit a packet, i.e. it expires before we get to send\nit.  In such cases, if the message contained multiple SCTP\nfragments, and we did manage to send the first part of the\nmessage, the Stream sequence numbers would get into invalid\nstate and cause receiver to stall.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com\u003e\n"
    },
    {
      "commit": "ea2dfb3733d53ac98b17756435d1f99e25490357",
      "tree": "9a70c036bcf1ed57a059efa245cbb63f300db0c5",
      "parents": [
        "b07d68b5ca4d55a16fab223d63d5fb36f89ff42f"
      ],
      "author": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Fri Jul 13 17:01:19 2007 -0400"
      },
      "committer": {
        "name": "Vlad Yasevich",
        "email": "vladislav.yasevich@hp.com",
        "time": "Wed Aug 29 13:34:33 2007 -0400"
      },
      "message": "SCTP: properly clean up fragment and ordering queues during FWD-TSN.\n\nWhen we recieve a FWD-TSN (meaning the peer has abandoned the data),\nwe need to clean up any partially received messages that may be\nhanging out on the re-assembly or re-ordering queues.  This is\na MUST requirement that was not properly done before.\n\nSigned-off-by: Vlad Yasevich \u003cvladislav.yasevich@hp.com.\u003e\n"
    },
    {
      "commit": "378be2c08314fc46e3f814fa264ff8ebdb79712f",
      "tree": "63624dbb5ddbb25085ed6f0bf9970991fb6dd508",
      "parents": [
        "594a9dfae7113d9601b2c353754c40d0b7e00a03"
      ],
      "author": {
        "name": "Robert Olsson",
        "email": "robert.olsson@its.uu.se",
        "time": "Tue Aug 28 15:43:14 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 28 15:43:14 2007 -0700"
      },
      "message": "[PKTGEN]: Fix multiqueue oops.\n\nInitially pkt_dev can be NULL this causes netif_subqueue_stopped to \noops. The patch below should cure it. But maybe the pktgen TX logic \nshould be reworked to better support the new multiqueue support. \n\nSigned-off-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e7c243c925f6d9dcb898504ff24d6650b5cbb3b1",
      "tree": "f06ae59e206e4876b0326c65811f496a8b1f4bdc",
      "parents": [
        "7c8347a91dbbb723d8ed106ec817dabac97f2bbc"
      ],
      "author": {
        "name": "Evgeniy Polyakov",
        "email": "johnpol@2ka.mipt.ru",
        "time": "Fri Aug 24 23:36:29 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Aug 26 18:35:47 2007 -0700"
      },
      "message": "[VLAN/BRIDGE]: Fix \"skb_pull_rcsum - Fatal exception in interrupt\"\n\nI tried to preserve bridging code as it was before, but logic is quite\nstrange - I think we should free skb on error, since it is already\nunshared and thus will just leak.\n\nHerbert Xu states:\n\n\u003e +\tif ((skb \u003d skb_share_check(skb, GFP_ATOMIC)) \u003d\u003d NULL)\n\u003e +\t\tgoto out;\n\nIf this happens it\u0027ll be a double-free on skb since we\u0027ll\nreturn NF_DROP which makes the caller free it too.\n\nWe could return NF_STOLEN to prevent that but I\u0027m not sure\nwhether that\u0027s correct netfilter semantics.  Patrick, could\nyou please make a call on this?\n\nPatrick McHardy states:\n\nNF_STOLEN should work fine here.\n\nSigned-off-by: Evgeniy Polyakov \u003cjohnpol@2ka.mipt.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "aaa53c4aba14f14de06419a20e552fe2d8823a33",
      "tree": "f026db39803fa265b588dac40f014cdfd69cbc56",
      "parents": [
        "f424bb9efaee90b752aabcb4e5e95920ee9580bb"
      ],
      "author": {
        "name": "Benjamin Thery",
        "email": "benjamin.thery@bull.net",
        "time": "Fri Aug 24 23:12:08 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Aug 26 18:35:43 2007 -0700"
      },
      "message": "[NET]: Fix crash in dev_mc_sync()/dev_mc_unsync()\n\nThis patch fixes a crash that may occur when the routine dev_mc_sync()\ndeletes an address from the list it is currently going through. It\nsaves the pointer to the next element before deleting the current one.\nThe problem may also exist in dev_mc_unsync().\n\nSigned-off-by: Benjamin Thery \u003cbenjamin.thery@bull.net\u003e\nAcked-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c3609d510f844100669965db8a9ff10ba029bb4a",
      "tree": "fb86593f7310805bb6c70cf2b61f4e7b3731d7aa",
      "parents": [
        "26722873a460703e319462afa7ebb8ed3a036c07"
      ],
      "author": {
        "name": "vignesh babu",
        "email": "vignesh.babu@wipro.com",
        "time": "Fri Aug 24 22:27:55 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Aug 26 18:35:37 2007 -0700"
      },
      "message": "[NET]: is_power_of_2 in net/core/neighbour.c\n\nReplacing n \u0026 (n - 1) for power of 2 check by is_power_of_2(n)\n\nSigned-off-by: vignesh babu \u003cvignesh.babu@wipro.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "26722873a460703e319462afa7ebb8ed3a036c07",
      "tree": "d621eb098a252a8e91d74d635d33eb30ee05aa21",
      "parents": [
        "a96fb49be3dd2031f722bf32af6ed7db965b60f7"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Fri Aug 24 22:21:50 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Aug 26 18:35:36 2007 -0700"
      },
      "message": "[TCP]: Describe tcp_init_cwnd() thoroughly in a comment.\n\nPeople often get tripped up by this function and think that\nit does not implemented the prescribed algorithms from\nRFC2414 and RFC3390, even though it does.\n\nSo add a comment to head off such misunderstandings in the\nfuture.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a96fb49be3dd2031f722bf32af6ed7db965b60f7",
      "tree": "3c02106c65a3013990007d9bdf2708616bc9ba6e",
      "parents": [
        "36d98d3edce12c8f9ffd33f8f5d23ce728380925"
      ],
      "author": {
        "name": "Flavio Leitner",
        "email": "fleitner@redhat.com",
        "time": "Fri Aug 24 22:16:39 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Aug 26 18:35:35 2007 -0700"
      },
      "message": "[NET]: Fix IP_ADD/DROP_MEMBERSHIP to handle only connectionless\n\nFix IP[V6]_ADD_MEMBERSHIP and IP[V6]_DROP_MEMBERSHIP to\nreturn -EPROTO for connection oriented sockets.\n\nSigned-off-by: Flavio Leitner \u003cfleitner@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "96fe1c0237224b24a0dfaaee6467a5767902ba4a",
      "tree": "6fb801473d339ec36843c76c4a0beaa0ae3921cf",
      "parents": [
        "50c46637aa894f904e2fb39086a3d7732f68bd50"
      ],
      "author": {
        "name": "Nick Bowler",
        "email": "nbowler@ellipticsemi.com",
        "time": "Wed Aug 22 12:33:51 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Sun Aug 26 18:35:33 2007 -0700"
      },
      "message": "[IPSEC] AH4: Update IPv4 options handling to conform to RFC 4302.\n\nIn testing our ESP/AH offload hardware, I discovered an issue with how\nAH handles mutable fields in IPv4.  RFC 4302 (AH) states the following\non the subject:\n\n        For IPv4, the entire option is viewed as a unit; so even\n        though the type and length fields within most options are immutable\n        in transit, if an option is classified as mutable, the entire option\n        is zeroed for ICV computation purposes.\n\nThe current implementation does not zero the type and length fields,\nresulting in authentication failures when communicating with hosts\nthat do (i.e. FreeBSD).\n\nI have tested record route and timestamp options (ping -R and ping -T)\non a small network involving Windows XP, FreeBSD 6.2, and Linux hosts,\nwith one router.  In the presence of these options, the FreeBSD and\nLinux hosts (with the patch or with the hardware) can communicate.\nThe Windows XP host simply fails to accept these packets with or\nwithout the patch.\n\nI have also been trying to test source routing options (using\ntraceroute -g), but haven\u0027t had much luck getting this option to work\n*without* AH, let alone with.\n\nSigned-off-by: Nick Bowler \u003cnbowler@ellipticsemi.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "0542170dec523d50e8bed5515e2f7314e738c8d8",
      "tree": "4154d3a3a511e1d0cf9b80eaaef5d02f00fd3a04",
      "parents": [
        "6dc2c1b7798ef645213afc82f6d5eac3d61bc18b",
        "02881d94780faa86e32952e46381f7cd4c78d5ac"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Thu Aug 23 21:38:21 2007 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Thu Aug 23 21:38:21 2007 -0700"
      },
      "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ericvh/v9fs\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ericvh/v9fs:\n  9p: fix bad error path in conversion routines\n  9p: remove deprecated v9fs_fid_lookup_remove()\n  9p: update maintainers and documentation\n  9p: fix use after free\n"
    },
    {
      "commit": "02881d94780faa86e32952e46381f7cd4c78d5ac",
      "tree": "3bd68a74e275ef3c59a646ff531a7c0582b17895",
      "parents": [
        "fbcb7599e411309cf47a2b834d3546469c153cf4"
      ],
      "author": {
        "name": "Mariusz Kozlowski",
        "email": "m.kozlowski@tuxland.pl",
        "time": "Thu Aug 23 10:24:28 2007 -0500"
      },
      "committer": {
        "name": "Eric Van Hensbergen",
        "email": "ericvh@ericvh-laptop.austin.ibm.com",
        "time": "Thu Aug 23 10:25:05 2007 -0500"
      },
      "message": "9p: fix bad error path in conversion routines\n\nWhen buf_check_overflow() returns !\u003d 0 we will hit kfree(ERR_PTR(err))\nand it will not be happy about it.\n\nSigned-off-by: Mariusz Kozlowski \u003cm.kozlowski@tuxland.pl\u003e\nSigned-off-by: Eric Van Hensbergen \u003cericvh@gmail.com\u003e\n"
    },
    {
      "commit": "1a3cac6c6d1f56dc26939eb41be29844f897c15a",
      "tree": "02922961c01db29922737f37796265103e96dc6b",
      "parents": [
        "8eb891fc809b2300137bcd247025628c06c95a63"
      ],
      "author": {
        "name": "Eric Van Hensbergen",
        "email": "ericvh@ericvh-desktop.austin.ibm.com",
        "time": "Thu Jul 26 14:04:54 2007 -0500"
      },
      "committer": {
        "name": "Eric Van Hensbergen",
        "email": "ericvh@ericvh-laptop.austin.ibm.com",
        "time": "Thu Aug 23 10:12:48 2007 -0500"
      },
      "message": "9p: fix use after free\n\nOn 7/22/07, Adrian Bunk \u003cbunk@stusta.de\u003e wrote:\n     The Coverity checker spotted the following use-after-free\n     in net/9p/mux.c:\n\n     \u003c--  snip  --\u003e\n\n     ...\n     struct p9_conn *p9_conn_create(struct p9_transport *trans, int msize,\n                                         unsigned char *extended)\n     {\n     ...\n             if (!m-\u003etagpool) {\n                     kfree(m);\n                     return ERR_PTR(PTR_ERR(m-\u003etagpool));\n             }\n     ...\n\n     \u003c--  snip  --\u003e\n\nAlso spotted was a leak of the same structure further down in the function.\n\nSigned-off-by: Eric Van Hensbergen \u003cericvh@gmail.com\u003e\n"
    },
    {
      "commit": "22117ea4fef4ea1c7d97c4d68c02c96c268a511b",
      "tree": "b25aa62a488fc8751a9161d994726dfe28d9b7f6",
      "parents": [
        "06c7af563d925d04961ce70cd9154fad8e2750c8"
      ],
      "author": {
        "name": "Andy Whitcroft",
        "email": "apw@shadowen.org",
        "time": "Tue Aug 21 21:23:39 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 21 21:23:39 2007 -0700"
      },
      "message": "[IRDA] irda_nl_get_mode: always results in failure\n\nIt seems an extraneous trailing \u0027;\u0027 has slipped in to the error handling for a\nname registration failure causing the error path to trigger unconditionally.\n\nSigned-off-by: Andy Whitcroft \u003capw@shadowen.org\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Samuel Ortiz \u003csamuel@sortiz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2c20d72aaadd41fdf0a3b6cb8514c2f7b7d263e4",
      "tree": "a3ace87b1550dd709716b2f1269d84e78d320efb",
      "parents": [
        "8984e41d18a545320201950b8721e7ce3ac2a5e7"
      ],
      "author": {
        "name": "Jesper Juhl",
        "email": "jesper.juhl@gmail.com",
        "time": "Tue Aug 21 00:10:50 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Aug 21 20:59:30 2007 -0700"
      },
      "message": "[IRDA]: Avoid a label defined but not used warning in irda_init()\n\nEasily avoidable compiler warnings bug me.\n\nBuilding irmod without CONFIG_SYSCTL currently results in :\n net/irda/irmod.c:132: warning: label \u0027out_err_2\u0027 defined but not used\n\nBut that can easily be avoided by simply moving the label inside\nthe existing \"#ifdef CONFIG_SYSCTL\" one line above it.\n\nThis patch moves the label and buys us one less warning with no\nill effects.\n\nSigned-off-by: Jesper Juhl \u003cjesper.juhl@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "8984e41d18a545320201950b8721e7ce3ac2a5e7",
      "tree": "086c209698a9d9e1bc60e3cf572c2593a02073c0",
      "parents": [
        "d92a7db710c32db826a00ba9bc7a22e741d5041e"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yjwei@cn.fujitsu.com",
        "time": "Tue Aug 21 20:59:08 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 21 20:59:08 2007 -0700"
      },
      "message": "[IPV6]: Fix kernel panic while send SCTP data with IP fragments\n\nIf ICMP6 message with \"Packet Too Big\" is received after send SCTP DATA,\nkernel panic will occur when SCTP DATA is send again.\n\nThis is because of a bad dest address when call to skb_copy_bits().\n\nThe messages sequence is like this:\n\nEndpoint A                             Endpoint B\n                               \u003c-------  SCTP DATA (size\u003d1432)\nICMP6 message -------\u003e\n(Packet Too Big pmtu\u003d1280)\n                               \u003c-------  Resend SCTP DATA (size\u003d1432)\n------------kernel panic---------------\n\n printing eip:\nc05be62a\n*pde \u003d 00000000\nOops: 0002 [#1]\nSMP\nModules linked in: scomm l2cap bluetooth ipv6 dm_mirror dm_mod video output sbs battery lp floppy sg i2c_piix4 i2c_core pcnet32 mii button ac parport_pc parport ide_cd cdrom serio_raw mptspi mptscsih mptbase scsi_transport_spi sd_mod scsi_mod ext3 jbd ehci_hcd ohci_hcd uhci_hcd\nCPU:    0\nEIP:    0060:[\u003cc05be62a\u003e]    Not tainted VLI\nEFLAGS: 00010282   (2.6.23-rc2 #1)\nEIP is at skb_copy_bits+0x4f/0x1ef\neax: 000004d0   ebx: ce12a980   ecx: 00000134   edx: cfd5a880\nesi: c8246858   edi: 00000000   ebp: c0759b14   esp: c0759adc\nds: 007b   es: 007b   fs: 00d8  gs: 0000  ss: 0068\nProcess swapper (pid: 0, ti\u003dc0759000 task\u003dc06d0340 task.ti\u003dc0713000)\nStack: c0759b88 c0405867 ce12a980 c8bff838 c789c084 00000000 00000028 cfd5a880\n       d09f1890 000005dc 0000007b ce12a980 cfd5a880 c8bff838 c0759b88 d09bc521\n       000004d0 fffff96c 00000200 00000100 c0759b50 cfd5a880 00000246 c0759bd4\nCall Trace:\n [\u003cc0405e1d\u003e] show_trace_log_lvl+0x1a/0x2f\n [\u003cc0405ecd\u003e] show_stack_log_lvl+0x9b/0xa3\n [\u003cc040608d\u003e] show_registers+0x1b8/0x289\n [\u003cc0406271\u003e] die+0x113/0x246\n [\u003cc0625dbc\u003e] do_page_fault+0x4ad/0x57e\n [\u003cc0624642\u003e] error_code+0x72/0x78\n [\u003cd09bc521\u003e] ip6_output+0x8e5/0xab2 [ipv6]\n [\u003cd09bcec1\u003e] ip6_xmit+0x2ea/0x3a3 [ipv6]\n [\u003cd0a3f2ca\u003e] sctp_v6_xmit+0x248/0x253 [sctp]\n [\u003cd0a3c934\u003e] sctp_packet_transmit+0x53f/0x5ae [sctp]\n [\u003cd0a34bf8\u003e] sctp_outq_flush+0x555/0x587 [sctp]\n [\u003cd0a34d3c\u003e] sctp_retransmit+0xf8/0x10f [sctp]\n [\u003cd0a3d183\u003e] sctp_icmp_frag_needed+0x57/0x5b [sctp]\n [\u003cd0a3ece2\u003e] sctp_v6_err+0xcd/0x148 [sctp]\n [\u003cd09cf1ce\u003e] icmpv6_notify+0xe6/0x167 [ipv6]\n [\u003cd09d009a\u003e] icmpv6_rcv+0x7d7/0x849 [ipv6]\n [\u003cd09be240\u003e] ip6_input+0x1dc/0x310 [ipv6]\n [\u003cd09be965\u003e] ipv6_rcv+0x294/0x2df [ipv6]\n [\u003cc05c3789\u003e] netif_receive_skb+0x2d2/0x335\n [\u003cc05c5733\u003e] process_backlog+0x7f/0xd0\n [\u003cc05c58f6\u003e] net_rx_action+0x96/0x17e\n [\u003cc042e722\u003e] __do_softirq+0x64/0xcd\n [\u003cc0406f37\u003e] do_softirq+0x5c/0xac\n \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nCode: 00 00 29 ca 89 d0 2b 45 e0 89 55 ec 85 c0 7e 35 39 45 08 8b 55 e4 0f 4e 45 08 8b 75 e0 8b 7d dc 89 c1 c1 e9 02 03 b2 a0 00 00 00 \u003cf3\u003e a5 89 c1 83 e1 03 74 02 f3 a4 29 45 08 0f 84 7b 01 00 00 01\nEIP: [\u003cc05be62a\u003e] skb_copy_bits+0x4f/0x1ef SS:ESP 0068:c0759adc\nKernel panic - not syncing: Fatal exception in interrupt\n\nArnaldo says:\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nThanks! I\u0027m to blame for this one, problem was introduced in:\n\nb0e380b1d8a8e0aca215df97702f99815f05c094\n\n@@ -761,7 +762,7 @@ slow_path:\n                /*\n                 *      Copy a block of the IP datagram.\n                 */\n-               if (skb_copy_bits(skb, ptr, frag-\u003eh.raw, len))\n+               if (skb_copy_bits(skb, ptr, skb_transport_header(skb),\nlen))\n                        BUG();\n                left -\u003d len;\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: Wei Yongjun \u003cyjwei@cn.fujitsu.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@ghostprotocols.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d92a7db710c32db826a00ba9bc7a22e741d5041e",
      "tree": "800eeede84fea9ab9397b7a1a326629cf3c45bc8",
      "parents": [
        "39dad26c37fdb1382e4173172a2704fa278f7fd6"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Tue Aug 21 00:06:37 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Aug 21 20:58:13 2007 -0700"
      },
      "message": "[SNAP]: Check packet length before reading\n\nThe snap_rcv code reads 5 bytes so we should make sure that\nwe have 5 bytes in the head before proceeding.\n\nBased on diagnosis and fix by Evgeniy Polyakov, reported by\nAlan J. Wylie.\n\nPatch also kills the skb-\u003esk assignment before kfree_skb\nsince it\u0027s redundant.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "39dad26c37fdb1382e4173172a2704fa278f7fd6",
      "tree": "3c53ca38e7879b309e0e93b3106987afd885a18f",
      "parents": [
        "cb00e99c0abd844b884c64c6b54aa3b7d345ebb1"
      ],
      "author": {
        "name": "Gerrit Renker",
        "email": "gerrit@erg.abdn.ac.uk",
        "time": "Sun Aug 19 17:12:50 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Aug 21 20:58:06 2007 -0700"
      },
      "message": "[DCCP]: Allocation in atomic context\n\nThis fixes the following bug reported in syslog:\n\n[ 4039.051658] BUG: sleeping function called from invalid context at /usr/src/davem-2.6/mm/slab.c:3032\n[ 4039.051668] in_atomic():1, irqs_disabled():0\n[ 4039.051670] INFO: lockdep is turned off.\n[ 4039.051674]  [\u003cc0104c0f\u003e] show_trace_log_lvl+0x1a/0x30\n[ 4039.051687]  [\u003cc0104d4d\u003e] show_trace+0x12/0x14\n[ 4039.051691]  [\u003cc0104d65\u003e] dump_stack+0x16/0x18\n[ 4039.051695]  [\u003cc011371e\u003e] __might_sleep+0xaf/0xbe\n[ 4039.051700]  [\u003cc0157b66\u003e] __kmalloc+0xb1/0xd0\n[ 4039.051706]  [\u003cf090416f\u003e] ccid2_hc_tx_alloc_seq+0x35/0xc3 [dccp_ccid2]\n[ 4039.051717]  [\u003cf09048d6\u003e] ccid2_hc_tx_packet_sent+0x27f/0x2d9 [dccp_ccid2]\n[ 4039.051723]  [\u003cf085486b\u003e] dccp_write_xmit+0x1eb/0x338 [dccp]\n[ 4039.051741]  [\u003cf085603d\u003e] dccp_sendmsg+0x113/0x18f [dccp]\n[ 4039.051750]  [\u003cc03907fc\u003e] inet_sendmsg+0x2e/0x4c\n[ 4039.051758]  [\u003cc033a47d\u003e] sock_aio_write+0xd5/0x107\n[ 4039.051766]  [\u003cc015abc1\u003e] do_sync_write+0xcd/0x11c\n[ 4039.051772]  [\u003cc015b296\u003e] vfs_write+0x118/0x11f\n[ 4039.051840]  [\u003cc015b932\u003e] sys_write+0x3d/0x64\n[ 4039.051845]  [\u003cc0103e7c\u003e] syscall_call+0x7/0xb\n[ 4039.051848]  \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nThe problem was that GFP_KERNEL was used; fixed by using gfp_any().\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: Arnaldo Carvalho de Melo \u003cacme@ghostprotocols.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "35b426c329e12e33bd0f0912f3d2e3f5f7b2c486",
      "tree": "7699cf822c2102cc853f8b23f1455b3b77c4c4b6",
      "parents": [
        "6ec8a856e4097d42ece9b0b9459bbca1586f13d7"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@ftp.linux.org.uk",
        "time": "Sun Aug 19 04:51:26 2007 +0100"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@woody.linux-foundation.org",
        "time": "Sun Aug 19 10:32:31 2007 -0700"
      },
      "message": "missing return in bridge sysfs code\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\nAcked-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "660adc6e60bc8882b16e466c09401cff017dcd94",
      "tree": "8274d6dd489b5ee7fd410f71ae10c1818041335e",
      "parents": [
        "3b1855255098e1f78fa74c0f3378c0391e9a7a2b"
      ],
      "author": {
        "name": "Ilpo Järvinen",
        "email": "ilpo.jarvinen@helsinki.fi",
        "time": "Wed Aug 15 15:07:30 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Aug 15 15:07:30 2007 -0700"
      },
      "message": "[IPv6]: Invalid semicolon after if statement\n\nA similar fix to netfilter from Eric Dumazet inspired me to\nlook around a bit by using some grep/sed stuff as looking for\nthis kind of bugs seemed easy to automate. This is one of them\nI found where it looks like this semicolon is not valid.\n\nSigned-off-by: Ilpo Järvinen \u003cilpo.jarvinen@helsinki.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3b1855255098e1f78fa74c0f3378c0391e9a7a2b",
      "tree": "1478418d585bc29ef4d2029819748e98004fff4c",
      "parents": [
        "cd8d60f28f519786f00d64d68bb3b7669bdfbcb8"
      ],
      "author": {
        "name": "Herbert Xu",
        "email": "herbert@gondor.apana.org.au",
        "time": "Wed Aug 15 14:46:02 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Aug 15 14:46:02 2007 -0700"
      },
      "message": "[NET]: Fix unbalanced rcu_read_unlock in __sock_create\n\nThe recent RCU work created an unbalanced rcu_read_unlock\nin __sock_create.  This patch fixes that.  Reported by\noleg 123.\n\nSigned-off-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "cd8d60f28f519786f00d64d68bb3b7669bdfbcb8",
      "tree": "413685703c5d47aae38b51d673a31813907069dd",
      "parents": [
        "16f3051b166bde3f1bd741783b64a8feebdb6f00",
        "b9bf1e60a294fc7795d5198f94a917290e52865b"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Aug 14 18:32:20 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Tue Aug 14 18:32:20 2007 -0700"
      },
      "message": "Merge branch \u0027fixes-davem\u0027 of master.kernel.org:/pub/scm/linux/kernel/git/linville/wireless-2.6\n"
    },
    {
      "commit": "16f3051b166bde3f1bd741783b64a8feebdb6f00",
      "tree": "7f3ce2314cc2ccb2790b6c48cdd553a0aaea1bb8",
      "parents": [
        "6f93b9c28326df34b23a6c0dbe4c51d4654bdf0b"
      ],
      "author": {
        "name": "Adrian Bunk",
        "email": "bunk@kernel.org",
        "time": "Tue Aug 14 17:39:43 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 17:39:43 2007 -0700"
      },
      "message": "[VLAN] net/8021q/vlanproc.c: fix check-after-use\n\nThe Coverity checker spotted that we\u0027d have already oops\u0027ed if\n\"vlandev\" was NULL.\n\nSigned-off-by: Adrian Bunk \u003cbunk@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6f93b9c28326df34b23a6c0dbe4c51d4654bdf0b",
      "tree": "2e42ff501f22af2fb10a435edf8507bb84c30d96",
      "parents": [
        "54a09feb0ebb018dadaebeb51e860154198abc83"
      ],
      "author": {
        "name": "Adrian Bunk",
        "email": "bunk@kernel.org",
        "time": "Tue Aug 14 17:38:44 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 17:38:44 2007 -0700"
      },
      "message": "[NET]: Unexport dev_ethtool\n\nThis patch removes the no longer used EXPORT_SYMBOL(dev_ethtool).\n\nSigned-off-by: Adrian Bunk \u003cbunk@kernel.org\u003e\nAcked-by: Matthew Wilcox \u003cmatthew@wil.cx\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "9c29a377f99b42c59721112cd2388cf27547fc84",
      "tree": "47e4437a9e6afcf958248ea6bb404343f789bdca",
      "parents": [
        "9ac0be9d4fa0c0ec7a447eeaa080bc13cf865319"
      ],
      "author": {
        "name": "Alexey Dobriyan",
        "email": "adobriyan@gmail.com",
        "time": "Tue Aug 14 17:25:20 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 17:25:20 2007 -0700"
      },
      "message": "[ECONET]: remove econet_packet_type on unload\n\nSteps to reproduce:\n\n\tmodprobe econet\n\trmmod econet\n\tmodprobe econet\n\nUnable to handle kernel paging request at ffffffff8870a098 RIP: \n [\u003cffffffff8040bfb8\u003e] dev_add_pack+0x48/0x90\nPGD 203067 PUD 207063 PMD 7817f067 PTE 0\nOops: 0002 [1] PREEMPT SMP \nCPU 1 \nModules linked in: econet [maaaany]\nPid: 10671, comm: modprobe Not tainted 2.6.23-rc3-bloat #6\nRIP: 0010:[\u003cffffffff8040bfb8\u003e]  [\u003cffffffff8040bfb8\u003e] dev_add_pack+0x48/0x90\nRSP: 0000:ffff810076293df8  EFLAGS: 00010202\nRAX: ffffffff88659090 RBX: ffffffff88659060 RCX: ffffffff8870a090\nRDX: 0000000000000080 RSI: ffffffff805ec660 RDI: ffff810078ce4680\nRBP: ffff810076293e08 R08: 0000000000000002 R09: 0000000000000000\nR10: ffffffff8040bf88 R11: 0000000000000001 R12: ffff810076293e18\nR13: 000000000000001b R14: ffff810076dd06b0 R15: ffffffff886590c0\nFS:  00002b96a525dae0(0000) GS:ffff81007e0e2138(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b\nCR2: ffffffff8870a098 CR3: 000000007bb67000 CR4: 00000000000026e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\nProcess modprobe (pid: 10671, threadinfo ffff810076292000, task ffff810078ce4680)\nStack:  ffff810076dd06b0 0000000000000000 ffff810076293e38 ffffffff8865b180\n 0000000000800000 0000000000000000 ffffffff886590c0 ffff810076dd01c8\n ffff810076293f78 ffffffff8026723c ffff810076293e48 ffffffff886590d8\nCall Trace:\n [\u003cffffffff8865b180\u003e] :econet:econet_proto_init+0x180/0x1da\n [\u003cffffffff8026723c\u003e] sys_init_module+0x15c/0x19e0\n [\u003cffffffff8020c13e\u003e] system_call+0x7e/0x83\n\n\nCode: 48 89 41 08 48 89 82 e0 c5 5e 80 48 c7 c7 a0 08 5d 80 e8 f1 \nRIP  [\u003cffffffff8040bfb8\u003e] dev_add_pack+0x48/0x90\n RSP \u003cffff810076293df8\u003e\nCR2: ffffffff8870a098\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "9ac0be9d4fa0c0ec7a447eeaa080bc13cf865319",
      "tree": "ee32db18de1e46157c040062de7918f2bd4e972d",
      "parents": [
        "02f44315dc4bce8a222564aa023c965efbeb73b5"
      ],
      "author": {
        "name": "Alexey Dobriyan",
        "email": "adobriyan@gmail.com",
        "time": "Tue Aug 14 17:24:05 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 17:24:05 2007 -0700"
      },
      "message": "[AX25]: don\u0027t free pointers to statically allocated data\n\ncommit 8d5cf596d10d740b69b5f4bbdb54b85abf75810d started to add statically\nallocated ax25_protocol\u0027s to list. However kfree() was still in place waiting\nfor unsuspecting ones on module removal.\n\nSteps to reproduce:\n\n\tmodprobe netrom\n\trmmod netrom\n\nP.S.: code would benefit greatly from list_add/list_del usage\n\nkernel BUG at mm/slab.c:592!\ninvalid opcode: 0000 [1] PREEMPT SMP \nCPU 0 \nModules linked in: netrom ax25 af_packet usbcore rtc_cmos rtc_core rtc_lib\nPid: 4477, comm: rmmod Not tainted 2.6.23-rc3-bloat #2\nRIP: 0010:[\u003cffffffff802ac646\u003e]  [\u003cffffffff802ac646\u003e] kfree+0x1c6/0x260\nRSP: 0000:ffff810079a05e48  EFLAGS: 00010046\nRAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff81000000c000\nRDX: ffff81007e552458 RSI: 0000000000000000 RDI: 000000000000805d\nRBP: ffff810079a05e88 R08: 0000000000000001 R09: 0000000000000000\nR10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8805d080\nR13: ffffffff8805d080 R14: 0000000000000000 R15: 0000000000000282\nFS:  00002b73fc98aae0(0000) GS:ffffffff805dc000(0000) knlGS:0000000000000000\nCS:  0010 DS: 0000 ES: 0000 CR0: 000000008005003b\nCR2: 000000000053f3b8 CR3: 0000000079ff2000 CR4: 00000000000006e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\nProcess rmmod (pid: 4477, threadinfo ffff810079a04000, task ffff8100775aa480)\nStack:  ffff810079a05e68 0000000000000246 ffffffff8804eca0 0000000000000000\n ffffffff8805d080 00000000000000cf 0000000000000000 0000000000000880\n ffff810079a05eb8 ffffffff8803ec90 ffff810079a05eb8 0000000000000000\nCall Trace:\n [\u003cffffffff8803ec90\u003e] :ax25:ax25_protocol_release+0xa0/0xb0\n [\u003cffffffff88056ecb\u003e] :netrom:nr_exit+0x6b/0xf0\n [\u003cffffffff80268bf0\u003e] sys_delete_module+0x170/0x1f0\n [\u003cffffffff8025da35\u003e] trace_hardirqs_on+0xd5/0x170\n [\u003cffffffff804835aa\u003e] trace_hardirqs_on_thunk+0x35/0x37\n [\u003cffffffff8020c13e\u003e] system_call+0x7e/0x83\n\n\nCode: 0f 0b eb fe 66 66 90 66 66 90 48 8b 52 10 48 8b 02 25 00 40 \nRIP  [\u003cffffffff802ac646\u003e] kfree+0x1c6/0x260\n RSP \u003cffff810079a05e48\u003e\nKernel panic - not syncing: Fatal exception\n\nSigned-off-by: Alexey Dobriyan \u003cadobriyan@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b9bf1e60a294fc7795d5198f94a917290e52865b",
      "tree": "80460b0993fcb6069731e9173220d709116d362c",
      "parents": [
        "7b7ed879254ad43990c9d67f95be3427401c3392"
      ],
      "author": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Tue Aug 07 16:33:15 2007 -0400"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Tue Aug 14 16:48:23 2007 -0400"
      },
      "message": "[PATCH] mac80211: probe for hidden SSIDs in pre-auth scan\n\nProbe for hidden SSIDs if initiating pre-authentication scan and SSID\nis set for STA interface.\n\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "7b7ed879254ad43990c9d67f95be3427401c3392",
      "tree": "bd0e5d1e8ffe32b9b26137c853b902b174b69bbb",
      "parents": [
        "39d3520c92cf7a28c07229ca00cc35a1e8026c77"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Tue Aug 07 10:23:57 2007 +0200"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Tue Aug 14 16:48:23 2007 -0400"
      },
      "message": "[PATCH] mac80211: fix tx status frame code\n\nWhen I added the monitor for outgoing frames somehow a break\nstatement slipped in. Remove it.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "02f44315dc4bce8a222564aa023c965efbeb73b5",
      "tree": "4c792548632cb44fc88d2df887d9afd65235e24e",
      "parents": [
        "17120889b0706b69ae24cba3ef0a340dc3fb7edc"
      ],
      "author": {
        "name": "Jussi Kivilinna",
        "email": "jussi.kivilinna@mbnet.fi",
        "time": "Tue Aug 14 13:22:58 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 13:22:58 2007 -0700"
      },
      "message": "[BRIDGE]: Fix typo in net/bridge/br_stp_if.c\n\nSigned-off-by: Jussi Kivilinna \u003cjussi.kivilinna@mbnet.fi\u003e\nAcked-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "17120889b0706b69ae24cba3ef0a340dc3fb7edc",
      "tree": "4c36e5f7592ba6b06fddc8ca141d1879326de564",
      "parents": [
        "45241a7a07537266eec363593ef377a1e6b7db7f"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@linux-foundation.org",
        "time": "Tue Aug 14 13:21:34 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 13:21:34 2007 -0700"
      },
      "message": "[BRIDGE]: sysfs locking fix.\n\nThe stp change code generates \"sleeping function called from invalid\ncontext\" because rtnl_lock() called with BH disabled. This fixes it by\nnot acquiring then dropping the bridge lock.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "45241a7a07537266eec363593ef377a1e6b7db7f",
      "tree": "d7f467775f6406764d547bd01c3f513f09557bd6",
      "parents": [
        "aa584eda5d2002097de9f608b362d9150730abd7"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Aug 14 13:14:58 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 13:14:58 2007 -0700"
      },
      "message": "[NETFILTER]: nf_nat_sip: don\u0027t drop short packets\n\nDon\u0027t drop packets shorter than \"SIP/2.0\", just ignore them. Keep-alives\ncan validly be shorter for example.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "aa584eda5d2002097de9f608b362d9150730abd7",
      "tree": "1885f67c19755f4aba3eb20144483bb92966bf52",
      "parents": [
        "465f90a486cd724d364167747e8b8b9f806fa91a"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Aug 14 13:14:35 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 13:14:35 2007 -0700"
      },
      "message": "[NETFILTER]: nf_conntrack_sip: fix SIP-URI parsing\n\nThe userinfo component of a SIP-URI is optional, continue parsing at the\nbeginning of the SIP-URI in case its not found.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "465f90a486cd724d364167747e8b8b9f806fa91a",
      "tree": "e78fa392a9f983aa551853546a26a7ba3d2a15e5",
      "parents": [
        "35019539d71bacd98de318c34728c97b1b505b49"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue Aug 14 13:13:54 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 13:13:54 2007 -0700"
      },
      "message": "[NETFILTER]: nf_conntrack_sip: check sname !\u003d NULL before calling strncmp\n\nThe check got lost during the conversion to nf_conntrack.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "35019539d71bacd98de318c34728c97b1b505b49",
      "tree": "9cb9ff580b03e965145e53e472955377f4807ade",
      "parents": [
        "28e8351ac22de25034e048c680014ad824323c65"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "dada1@cosmosbay.com",
        "time": "Tue Aug 14 13:13:28 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Aug 14 13:13:28 2007 -0700"
      },
      "message": "[NETFILTER]: netfilter: xt_u32 bug correction\n\nAn extraneous \";\" makes xt_u32 match useless\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "cae7ca3d3de48851e929de9469397749638df779",
      "tree": "2919ea031c5dcc43668f080faa3a463ac04cfed6",
      "parents": [
        "7f353bf29e162459f2f1e2ca25e41011fae65241"
      ],
      "author": {
        "name": "Heiko Carstens",
        "email": "heiko.carstens@de.ibm.com",
        "time": "Fri Aug 10 15:50:30 2007 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@sunset.davemloft.net",
        "time": "Mon Aug 13 22:52:15 2007 -0700"
      },
      "message": "[IPVS]: Use IP_VS_WAIT_WHILE when encessary.\n\nFor architectures that don\u0027t have a volatile atomic_ts constructs like\nwhile (atomic_read(\u0026something)); might result in endless loops since a\nbarrier() is missing which forces the compiler to generate code that\nactually reads memory contents.\nFix this in ipvs by using the IP_VS_WAIT_WHILE macro which resolves to\nwhile (expr) { cpu_relax(); }\n(why isn\u0027t this open coded btw?)\n\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nSigned-off-by: Simon Horman \u003chorms@verge.net.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    }
  ],
  "next": "7f353bf29e162459f2f1e2ca25e41011fae65241"
}
