)]}' { "log": [ { "commit": "526de53cf78d325351904eefb9624f933924df75", "tree": "031287eeb83a98a21d7e2f58aff34139fbd8f9ea", "parents": [ "c117e4a2bb49116b0b51df06bbabe638d28dfae7" ], "author": { "name": "Marc Kleine-Budde", "email": "mkl@pengutronix.de", "time": "Sat Oct 30 16:27:48 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Oct 30 16:27:48 2010 -0700" }, "message": "can: pch_can: fix sparse warning\n\nThis patch fixes the following sparse warning:\n\ndrivers/net/can/pch_can.c:231:26: warning: incorrect type in argument 1 (different address spaces)\ndrivers/net/can/pch_can.c:231:26: expected unsigned int [usertype] *addr\ndrivers/net/can/pch_can.c:231:26: got unsigned int [noderef] \u003casn:2\u003e*\u003cnoident\u003e\n\nLet pch_can_bit_{set,clear} first parameter be a void __iomem pointer.\n\nSigned-off-by: Marc Kleine-Budde \u003cmkl@pengutronix.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c117e4a2bb49116b0b51df06bbabe638d28dfae7", "tree": "8d6e07f8d27ca9accf9a7f8c2b5570d403cfd4e7", "parents": [ "3285ee3bb2e158299ff19b947e41da735980d954" ], "author": { "name": "Denis Kirjanov", "email": "dkirjanov@kernel.org", "time": "Sat Oct 30 16:24:25 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Oct 30 16:24:25 2010 -0700" }, "message": "netxen_nic: Fix the tx queue manipulation bug in netxen_nic_probe\n\nWe should not stop the egress queue during probe because it is wrong.\n\nSigned-off-by: Denis Kirjanov \u003cdkirjanov@kernel.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3285ee3bb2e158299ff19b947e41da735980d954", "tree": "8235c80ec137fd080e23bdeab8eefa0d9d5c395f", "parents": [ "1b803fbfcd1c35857fe52844158213507a8a5bfa" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sat Oct 30 16:21:28 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Oct 30 16:21:28 2010 -0700" }, "message": "ip_gre: fix fallback tunnel setup\n\nBefore making the fallback tunnel visible to lookups, we should make\nsure it is completely setup, once ipgre_tunnel_init() had been called\nand tstats per_cpu pointer allocated.\n\nmove rcu_assign_pointer(ign-\u003etunnels_wc[0], tunnel); from\nipgre_fb_tunnel_init() to ipgre_init_net()\n\nBased on a patch from Pavel Emelyanov\n\nReported-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nAcked-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1b803fbfcd1c35857fe52844158213507a8a5bfa", "tree": "4c9b134deb468fcb755b3ce21ecd48830b74e214", "parents": [ "b8744cabb79a6522bb2e1c22c4edd8fb39fcfc7e" ], "author": { "name": "Harvey Harrison", "email": "harvey.harrison@gmail.com", "time": "Sat Oct 30 16:19:45 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Oct 30 16:19:45 2010 -0700" }, "message": "vmxnet: trivial annotation of protocol constant\n\nNoticed by sparse:\ndrivers/net/vmxnet3/vmxnet3_drv.c:876:38: warning: cast from restricted __be16\ndrivers/net/vmxnet3/vmxnet3_drv.c:876:38: warning: cast from restricted __be16\ndrivers/net/vmxnet3/vmxnet3_drv.c:876:24: warning: restricted __be16 degrades to integer\n\nSigned-off-by: Harvey Harrison \u003charvey.harrison@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b8744cabb79a6522bb2e1c22c4edd8fb39fcfc7e", "tree": "4e4841a4e8806c1c0a44a27c6562c7cc8c188a00", "parents": [ "870be39258cf84b65accf629f5f9e816b1b8512e" ], "author": { "name": "Harvey Harrison", "email": "harvey.harrison@gmail.com", "time": "Sat Oct 30 16:19:18 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Oct 30 16:19:18 2010 -0700" }, "message": "vmxnet3: remove unnecessary byteswapping in BAR writing macros\n\nreadl/writel swap to little-endian internally.\n\nSigned-off-by: Harvey Harrison \u003charvey.harrison@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "870be39258cf84b65accf629f5f9e816b1b8512e", "tree": "ef9ff9af22efbcddf0b9bb961ff0bb8edc414501", "parents": [ "337ac9d5218cc19f40fca13fa4deb3c658c4241b" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sat Oct 30 16:17:23 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Oct 30 16:17:23 2010 -0700" }, "message": "ipv6/udp: report SndbufErrors and RcvbufErrors\n\ncommit a18135eb9389 (Add UDP_MIB_{SND,RCV}BUFERRORS handling.)\nforgot to make the necessary changes in net/ipv6/proc.c to report\nadditional counters in /proc/net/snmp6\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "337ac9d5218cc19f40fca13fa4deb3c658c4241b", "tree": "0a63c0bb554c7cceec778d22f11ca5e1efb39c7a", "parents": [ "a4765fa7bfb92d5b9de19a503674b6624f95a7ae" ], "author": { "name": "Cyril Chemparathy", "email": "cyril@ti.com", "time": "Fri Oct 29 13:50:25 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Oct 29 13:50:25 2010 -0700" }, "message": "phy/marvell: rename 88ec048 to 88e1318s and fix mscr1 addr\n\nThe marvell 88ec048\u0027s official part number is 88e1318s. This patch renames\ndefinitions in the driver to reflect this.\n\nIn addition, a minor bug fix has been added to write back the MSCR1 register\nvalue properly.\n\nSigned-off-by: Cyril Chemparathy \u003ccyril@ti.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a4765fa7bfb92d5b9de19a503674b6624f95a7ae", "tree": "27fa2b40b2fb4843043cc1583cd139844ee3f5fe", "parents": [ "089282fb028198169a0f62f8f833ab6d06bdbb3c", "9f2a0fac625bcef9c579bcf0b0c904ab1a56e7c4" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Oct 29 12:23:15 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Oct 29 12:23:15 2010 -0700" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6\n" }, { "commit": "9f2a0fac625bcef9c579bcf0b0c904ab1a56e7c4", "tree": "de9b4f6d0ba76b77cbbed6f19023defec8c2d59c", "parents": [ "520efd1ace3f826120482e57a95d649b4e1c1684" ], "author": { "name": "Larry Finger", "email": "Larry.Finger@lwfinger.net", "time": "Thu Oct 28 10:43:26 2010 -0500" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Oct 29 14:35:06 2010 -0400" }, "message": "b43: Fix warning at drivers/mmc/core/core.c:237 in mmc_wait_for_cmd\n\nOn module removal, the sdio version of b43 generates the following warning:\n\n[ 851.560519] ------------[ cut here ]------------\n[ 851.560531] WARNING: at drivers/mmc/core/core.c:237 mmc_wait_for_cmd+0x88/0x90()\n[ 851.560534] Hardware name: 20552PG\n[ 851.560536] Modules linked in: b43(-) ssb mmc_block binfmt_misc rfcomm sco bnep ppdev l2cap ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack ipt_REJECT xt_tcpudp iptable_filter ip_tables x_tables bridge stp kvm_intel kvm arc4 iwlagn snd_hda_codec_conexant snd_hda_intel snd_hda_codec iwlcore snd_hwdep snd_pcm thinkpad_acpi mac80211 snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq r852 joydev snd_timer sm_common pcmcia nand snd_seq_device cfg80211 sdhci_pci btusb psmouse tpm_tis yenta_socket nand_ids lp snd pcmcia_rsrc nand_ecc bluetooth sdhci tpm pcmcia_core parport mtd snd_page_alloc serio_raw tpm_bios soundcore nvram led_class sha256_generic aes_i586 aes_generic dm_crypt i915 drm_kms_helper drm ahci intel_agp i2c_algo_bit intel_gtt e1000e libahci video agpgart output\n[ 851.560620] Pid: 2504, comm: rmmod Not tainted 2.6.36-titan0+ #1\n[ 851.560622] Call Trace:\n[ 851.560631] [\u003cc014a102\u003e] warn_slowpath_common+0x72/0xa0\n[ 851.560636] [\u003cc04d94c8\u003e] ? mmc_wait_for_cmd+0x88/0x90\n[ 851.560641] [\u003cc04d94c8\u003e] ? mmc_wait_for_cmd+0x88/0x90\n[ 851.560645] [\u003cc014a152\u003e] warn_slowpath_null+0x22/0x30\n[ 851.560649] [\u003cc04d94c8\u003e] mmc_wait_for_cmd+0x88/0x90\n[ 851.560655] [\u003cc0401585\u003e] ? device_release+0x25/0x80\n[ 851.560660] [\u003cc04df210\u003e] mmc_io_rw_direct_host+0xa0/0x150\n[ 851.560665] [\u003cc04df370\u003e] mmc_io_rw_direct+0x30/0x40\n[ 851.560669] [\u003cc04e06e7\u003e] sdio_disable_func+0x37/0xa0\n[ 851.560683] [\u003cf8dfcb80\u003e] b43_sdio_remove+0x30/0x50 [b43]\n[ 851.560687] [\u003cc04df8cc\u003e] sdio_bus_remove+0x1c/0x60\n[ 851.560692] [\u003cc016d39f\u003e] ? blocking_notifier_call_chain+0x1f/0x30\n[ 851.560697] [\u003cc0404991\u003e] __device_release_driver+0x51/0xb0\n[ 851.560701] [\u003cc0404a7f\u003e] driver_detach+0x8f/0xa0\n[ 851.560705] [\u003cc0403c83\u003e] bus_remove_driver+0x63/0xa0\n[ 851.560709] [\u003cc0405039\u003e] driver_unregister+0x49/0x80\n[ 851.560713] [\u003cc0405039\u003e] ? driver_unregister+0x49/0x80\n[ 851.560718] [\u003cc04dfad7\u003e] sdio_unregister_driver+0x17/0x20\n[ 851.560727] [\u003cf8dfcb42\u003e] b43_sdio_exit+0x12/0x20 [b43]\n[ 851.560734] [\u003cf8dfe76f\u003e] b43_exit+0x17/0x3c [b43]\n[ 851.560740] [\u003cc017fb8d\u003e] sys_delete_module+0x13d/0x200\n[ 851.560747] [\u003cc01fd7d2\u003e] ? do_munmap+0x212/0x300\n[ 851.560752] [\u003cc010311f\u003e] sysenter_do_call+0x12/0x28\n[ 851.560757] ---[ end trace 31e14488072d2f7d ]---\n[ 851.560759] ------------[ cut here ]------------\n\nThe warning is caused by b43 not claiming the device before calling\nsdio_disable_func().\n\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nReported-by: Arnd Hannemann \u003carnd@arndnet.de\u003e\nTested-by: Arnd Hannemann \u003carnd@arndnet.de\u003e\nCc: Stable \u003cstable@kernel.org\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "520efd1ace3f826120482e57a95d649b4e1c1684", "tree": "04445d2fde489b7b7a3d8fa4898a0731817f6ca0", "parents": [ "731b2034999bbfe86c9074f1b0d611940bf7c323" ], "author": { "name": "Jesper Juhl", "email": "jj@chaosbits.net", "time": "Fri Oct 29 16:10:26 2010 +0200" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Oct 29 14:33:26 2010 -0400" }, "message": "mac80211: fix failure to check kmalloc return value in key_key_read\n\nI noticed two small issues in mac80211/debugfs_key.c::key_key_read while\nreading through the code. Patch below.\n\nThe key_key_read() function returns ssize_t and the value that\u0027s actually\nreturned is the return value of simple_read_from_buffer() which also\nreturns ssize_t, so let\u0027s hold the return value in a ssize_t local\nvariable rather than a int one.\n\nAlso, memory is allocated dynamically with kmalloc() which can fail, but\nthe return value of kmalloc() is not checked, so we may end up operating\non a null pointer further on. So check for a NULL return and bail out with\n-ENOMEM in that case.\n\nSigned-off-by: Jesper Juhl \u003cjj@chaosbits.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "731b2034999bbfe86c9074f1b0d611940bf7c323", "tree": "6ef7cf2f32e0352242fb06fad132722546eb1980", "parents": [ "4fc4fbd1d9a05fa4f348b499aca3a6f8d3c9bbe6" ], "author": { "name": "Paul Fox", "email": "pgf@laptop.org", "time": "Fri Oct 29 14:57:28 2010 +0100" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Oct 29 14:33:25 2010 -0400" }, "message": "libertas: Fix sd8686 firmware reload\n\nFor the SD8686, we cannot rely on the scratch register to read the firmware\nload status, because the same register is used for storing RX packet length.\nBroaden the check to account for this.\n\nThe module can now be unloaded/reloaded successfully.\n\nBased on the implementation from libertas_tf.\n\nSigned-off-by: Daniel Drake \u003cdsd@laptop.org\u003e\nAcked-by: Dan Williams \u003cdcbw@redhat.com\u003e\nSigned-off-by: Steve deRosier \u003csteve@cozybit.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "4fc4fbd1d9a05fa4f348b499aca3a6f8d3c9bbe6", "tree": "cb4e10899a98c2888018489ca69325773c1e6410", "parents": [ "3d435ad7218ff58c846d7e52d87c2daf115f50cd" ], "author": { "name": "Mohammed Shafi Shajakhan", "email": "mshajakhan@atheros.com", "time": "Thu Oct 28 19:51:47 2010 +0530" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Oct 29 14:33:25 2010 -0400" }, "message": "ath9k: Fix incorrect access of rate flags in RC\n\nThe index variable to access the rate flags should be obtained from the\ninner loop counter which corresponds to the rate table structure.This\nfixes the invalid rate selection i.e when the supported basic rate is\ninvalid on a particular band and also the following warning message.\nThanks to Raj for finding this out.\n\nCall Trace:\n\n [\u003cffffffff8104ee4a\u003e] warn_slowpath_common+0x7a/0xb0\n\n [\u003cffffffff8104ee95\u003e] warn_slowpath_null+0x15/0x20\n\n [\u003cffffffffa0583c45\u003e] ath_get_rate+0x595/0x5b0 [ath9k]\n\n [\u003cffffffff811a0636\u003e] ? cpumask_next_and+0x36/0x50\n\n [\u003cffffffffa0405186\u003e] rate_control_get_rate+0x86/0x160 [mac80211]\n\n [\u003cffffffffa040dfac\u003e] invoke_tx_handlers+0x81c/0x12d0 [mac80211]\n\n [\u003cffffffffa040eae9\u003e] ieee80211_tx+0x89/0x2b0 [mac80211]\n\n [\u003cffffffff812891bc\u003e] ? pskb_expand_head+0x1cc/0x1f0\n\n [\u003cffffffffa040edc5\u003e] ieee80211_xmit+0xb5/0x1c0 [mac80211]\n\n [\u003cffffffffa041026f\u003e] ieee80211_tx_skb+0x4f/0x60 [mac80211]\n\n [\u003cffffffffa03fe016\u003e] ieee80211_send_nullfunc+0x46/0x60 [mac80211]\n\n [\u003cffffffffa03f91d7\u003e] ieee80211_offchannel_stop_station+0x107/0x150\n[mac80211]\n\n [\u003cffffffff812891bc\u003e] ? pskb_expand_head+0x1cc/0x1f0\n\n [\u003cffffffffa040edc5\u003e] ieee80211_xmit+0xb5/0x1c0 [mac80211]\n\n [\u003cffffffffa041026f\u003e] ieee80211_tx_skb+0x4f/0x60 [mac80211]\n\n [\u003cffffffffa03fe016\u003e] ieee80211_send_nullfunc+0x46/0x60 [mac80211]\n\n [\u003cffffffffa03f91d7\u003e] ieee80211_offchannel_stop_station+0x107/0x150\n[mac80211]\n\n [\u003cffffffffa03f8896\u003e] ieee80211_scan_work+0x146/0x600 [mac80211]\n\n [\u003cffffffff8133a375\u003e] ? schedule+0x2f5/0x8e0\n\n [\u003cffffffffa03f8750\u003e] ? ieee80211_scan_work+0x0/0x600 [mac80211]\n\n [\u003cffffffff81064fcf\u003e] process_one_work+0x10f/0x380\n\n [\u003cffffffff81066bc2\u003e] worker_thread+0x162/0x340\n\n [\u003cffffffff81066a60\u003e] ? worker_thread+0x0/0x340\n\nCc: stable@kernel.org\nSigned-off-by: Mohammed Shafi Shajakhan \u003cmshajakhan@atheros.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "089282fb028198169a0f62f8f833ab6d06bdbb3c", "tree": "ad5377fa1310bdf3e8c24694ac729eba4cdada0c", "parents": [ "19449bfc10d163f0024dd5ae5808e28cda32e7b4" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 12:59:53 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 12:59:53 2010 -0700" }, "message": "netfilter: xt_socket: Make tproto signed in socket_mt6_v1().\n\nOtherwise error indications from ipv6_find_hdr() won\u0027t be noticed.\n\nThis required making the protocol argument to extract_icmp6_fields()\nsigned too.\n\nReported-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "19449bfc10d163f0024dd5ae5808e28cda32e7b4", "tree": "b32bcc4f66ac12f1a6c94d73a0ada36412cfa8a7", "parents": [ "d1abc9a9aca06ceb795eb5405264eaafe016ec5c" ], "author": { "name": "avisconti", "email": "armando.visconti@st.com", "time": "Mon Oct 25 18:58:14 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 11:47:54 2010 -0700" }, "message": "stmmac: enable/disable rx/tx in the core with a single write.\n\nThis patch enables and disables the rx and tx bits in the MAC control reg\nby using a single write operation.\nThis also solves a possible problem (spotted on SPEAr platforms) at 10Mbps\nwhere two consecutive writes to a MAC control register can take more than\n4 phy_clk cycles.\n\nSigned-off-by: Armando Visconti \u003carmando.visconti@st.com\u003e\nAcked-by: Giuseppe Cavallaro \u003cpeppe.cavallaro@st.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d1abc9a9aca06ceb795eb5405264eaafe016ec5c", "tree": "40fd4383038b94bdeae86894f7b77ae11ac0acf2", "parents": [ "683b65f89a7c26d9a9180d25066815ef5a31bd71" ], "author": { "name": "Geert Uytterhoeven", "email": "geert@linux-m68k.org", "time": "Thu Oct 28 11:34:58 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 11:47:53 2010 -0700" }, "message": "net: atarilance - flags should be unsigned long\n\ndrivers/net/atarilance.c: In function ‘addr_accessible’:\ndrivers/net/atarilance.c:413: warning: comparison of distinct pointer types lacks a cast\ndrivers/net/atarilance.c:450: warning: comparison of distinct pointer types lacks a cast\n\nSigned-off-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "683b65f89a7c26d9a9180d25066815ef5a31bd71", "tree": "e26a2d8c8ebb1b987bc5892a88caca3f7b91a1d9", "parents": [ "448d7b5daf043d109df98e3e8f8deb165c2e8896" ], "author": { "name": "Rajesh Borundia", "email": "rajesh.borundia@qlogic.com", "time": "Tue Oct 26 22:51:50 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 11:47:53 2010 -0700" }, "message": "netxen: fix kdump\n\nReset the whole hw instead of freeing hw resources\nconsumed by each pci function.\n\nSigned-off-by: Rajesh Borundia \u003crajesh.borundia@qlogic.com\u003e\nSigned-off-by: Amit Kumar Salecha \u003camit.salecha@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "448d7b5daf043d109df98e3e8f8deb165c2e8896", "tree": "475844d92c01fae639bda19988ba1375272c857a", "parents": [ "8acfe468b0384e834a303f08ebc4953d72fb690a" ], "author": { "name": "Nelson Elhage", "email": "nelhage@ksplice.com", "time": "Thu Oct 28 11:31:07 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 11:47:53 2010 -0700" }, "message": "pktgen: Limit how much data we copy onto the stack.\n\nA program that accidentally writes too much data to the pktgen file can overflow\nthe kernel stack and oops the machine. This is only triggerable by root, so\nthere\u0027s no security issue, but it\u0027s still an unfortunate bug.\n\nprintk() won\u0027t print more than 1024 bytes in a single call, anyways, so let\u0027s\njust never copy more than that much data. We\u0027re on a fairly shallow stack, so\nthat should be safe even with CONFIG_4KSTACKS.\n\nSigned-off-by: Nelson Elhage \u003cnelhage@ksplice.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8acfe468b0384e834a303f08ebc4953d72fb690a", "tree": "7ecee335efdbd283a122bcba1d5d9b533906142a", "parents": [ "349f6c5c5d827db909a69e5b9e844e8623c8e881" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 11:41:55 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 11:47:52 2010 -0700" }, "message": "net: Limit socket I/O iovec total length to INT_MAX.\n\nThis helps protect us from overflow issues down in the\nindividual protocol sendmsg/recvmsg handlers. Once\nwe hit INT_MAX we truncate out the rest of the iovec\nby setting the iov_len members to zero.\n\nThis works because:\n\n1) For SOCK_STREAM and SOCK_SEQPACKET sockets, partial\n writes are allowed and the application will just continue\n with another write to send the rest of the data.\n\n2) For datagram oriented sockets, where there must be a\n one-to-one correspondance between write() calls and\n packets on the wire, INT_MAX is going to be far larger\n than the packet size limit the protocol is going to\n check for and signal with -EMSGSIZE.\n\nBased upon a patch by Linus Torvalds.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "349f6c5c5d827db909a69e5b9e844e8623c8e881", "tree": "137b4282105f58a806315c4515dd3c792fcd7d7a", "parents": [ "4aa2c466a7733af093a526e9d1cdd0b3b90d47e9" ], "author": { "name": "Dmitry Artamonow", "email": "mad_soft@inbox.ru", "time": "Thu Oct 28 10:31:58 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 11:47:52 2010 -0700" }, "message": "USB: gadget: fix ethernet gadget crash in gether_setup\n\nCrash is triggered by commit e6484930d7 (\"net: allocate tx queues in\nregister_netdevice\"), which moved tx netqueue creation into register_netdev.\nSo now calling netif_stop_queue() before register_netdev causes an oops.\nMove netif_stop_queue() after net device registration to fix crash.\n\nSigned-off-by: Dmitry Artamonow \u003cmad_soft@inbox.ru\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4aa2c466a7733af093a526e9d1cdd0b3b90d47e9", "tree": "093d99b6c728867a8eb9548463d94661e3d0799e", "parents": [ "b1424ed91076db0b19ba4141856150df9b717dde" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@parallels.com", "time": "Thu Oct 28 02:00:43 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:03 2010 -0700" }, "message": "fib: Fix fib zone and its hash leak on namespace stop\n\nWhen we stop a namespace we flush the table and free one, but the\nadded fn_zone-s (and their hashes if grown) are leaked. Need to free.\nTries releases all its stuff in the flushing code.\n\nShame on us - this bug exists since the very first make-fib-per-net\npatches in 2.6.27 :(\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b1424ed91076db0b19ba4141856150df9b717dde", "tree": "bf08529b7785790c2495507f1162baef11f8851b", "parents": [ "69dcfc8aad24fa95ae0a0ad1405cf6847e3ec14a" ], "author": { "name": "Krishna Kumar", "email": "krkumar2@in.ibm.com", "time": "Wed Oct 27 19:10:31 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:02 2010 -0700" }, "message": "cxgb3: Fix panic in free_tx_desc()\n\nI got a few of these panics (on 2.6.36-rc7) when running high\nnumber of netperf sessions:\n\nBUG: unable to handle kernel paging request at 0000100000000000\nIP: [\u003cffffffff813125f0\u003e] skb_release_data+0xa0/0xd0\nOops: 0000 [#1] SMP\nPid: 2155, comm: vhost-2115 Not tainted 2.6.36-rc7-ORG #1 49Y6512 /System x3650 M2 -[7947AC1]-\nRIP: 0010:[\u003cffffffff813125f0\u003e] [\u003cffffffff813125f0\u003e] skb_release_data+0xa0/0xd0\nRSP: 0018:ffff880001803738 EFLAGS: 00010206\nRAX: ffff880179b0fc00 RBX: ffff880178b441c0 RCX: 0000000000000000\nRSP: 0018:ffff880001803738 EFLAGS: 00010206\nRAX: ffff880179b0fc00 RBX: ffff880178b441c0 RCX: 0000000000000000\nRDX: ffff880179b0fd40 RSI: 0000000000000000 RDI: 0000100000000000\nRBP: ffff880001803748 R08: 0000000000000001 R09: ffff88017f117000\nR10: ffff88017b990608 R11: ffff88017f117090 R12: ffff880178b441c0\nR13: ffff88017f117090 R14: 0000000000000000 R15: ffff880178b441c0\nFS: 0000000000000000(0000) GS:ffff880001800000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 000000008005003b\nCR2: 0000100000000000 CR3: 000000017ea64000 CR4: 00000000000026e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\nProcess vhost-2115 (pid: 2155, threadinfo ffff88017d872000, task ffff88017e954680)\nStack:\nffff880178b441c0 0000000000000007 ffff880001803768 ffffffff81312119\n\u003c0\u003e 0000000000000000 0000000000000002 ffff880001803778 ffffffff813121f9\n\u003c0\u003e ffff880001803818 ffffffffa012d14c ffffffffa02de076 ffff880001803700\nCall Trace:\n\u003cIRQ\u003e\n[\u003cffffffff81312119\u003e] __kfree_skb+0x19/0xa0\n[\u003cffffffff813121f9\u003e] kfree_skb+0x19/0x40\n[\u003cffffffffa012d14c\u003e] free_tx_desc+0x2fc/0x350 [cxgb3]\n[\u003cffffffffa02de076\u003e] ? vhost_poll_wakeup+0x16/0x20 [vhost_net]\n[\u003cffffffffa01323db\u003e] t3_eth_xmit+0x28b/0x380 [cxgb3]\n[\u003cffffffff8131ce47\u003e] dev_hard_start_xmit+0x377/0x5a0\n[\u003cffffffff81335a4a\u003e] sch_direct_xmit+0xfa/0x1d0\n[\u003cffffffff8131d1a9\u003e] dev_queue_xmit+0x139/0x450\n[\u003cffffffff81326225\u003e] neigh_resolve_output+0x125/0x340\n[\u003cffffffff8135a77c\u003e] ip_finish_output+0x14c/0x320\n[\u003cffffffff8135a9fe\u003e] ip_output+0xae/0xc0\n[\u003cffffffff8135620f\u003e] ip_forward_finish+0x3f/0x50\n[\u003cffffffff8135641f\u003e] ip_forward+0x1ff/0x400\n[\u003cffffffff81354789\u003e] ip_rcv_finish+0x119/0x3e0\n[\u003cffffffff81354c7d\u003e] ip_rcv+0x22d/0x300\n[\u003cffffffff8131a95b\u003e] __netif_receive_skb+0x29b/0x570\n[\u003cffffffff8131ba70\u003e] ? netif_receive_skb+0x0/0x80\n[\u003cffffffff8131bae8\u003e] netif_receive_skb+0x78/0x80\n[\u003cffffffffa02a96d8\u003e] br_handle_frame_finish+0x198/0x260 [bridge]\n[\u003cffffffffa02aebc8\u003e] br_nf_pre_routing_finish+0x238/0x380 [bridge]\n[\u003cffffffff813424bc\u003e] ? nf_hook_slow+0x6c/0x100\n[\u003cffffffffa02ae990\u003e] ? br_nf_pre_routing_finish+0x0/0x380 [bridge]\n[\u003cffffffffa02afb08\u003e] br_nf_pre_routing+0x698/0x7a0 [bridge]\n[\u003cffffffff81342414\u003e] nf_iterate+0x64/0xa0\n[\u003cffffffffa02a9540\u003e] ? br_handle_frame_finish+0x0/0x260 [bridge]\n[\u003cffffffff813424bc\u003e] nf_hook_slow+0x6c/0x100\n[\u003cffffffffa02a9540\u003e] ? br_handle_frame_finish+0x0/0x260 [bridge]\n[\u003cffffffffa02a9931\u003e] br_handle_frame+0x191/0x240 [bridge]\n[\u003cffffffffa02a97a0\u003e] ? br_handle_frame+0x0/0x240 [bridge]\n[\u003cffffffff8131a863\u003e] __netif_receive_skb+0x1a3/0x570\n[\u003cffffffff812ef3f6\u003e] ? dma_issue_pending_all+0x76/0xa0\n[\u003cffffffff8131ad32\u003e] process_backlog+0x102/0x200\n[\u003cffffffff8131c2d0\u003e] net_rx_action+0x100/0x220\n[\u003cffffffff810548ef\u003e] __do_softirq+0xaf/0x140\n[\u003cffffffff8100bcdc\u003e] call_softirq+0x1c/0x30\n[\u003cffffffff8100dfc5\u003e] ? do_softirq+0x65/0xa0\n[\u003cffffffff8131c6b8\u003e] netif_rx_ni+0x28/0x30\n[\u003cffffffffa02c305d\u003e] tun_sendmsg+0x2cd/0x4b0 [tun]\n[\u003cffffffffa02e01af\u003e] handle_tx+0x1df/0x340 [vhost_net]\n[\u003cffffffffa02e0340\u003e] handle_tx_kick+0x10/0x20 [vhost_net]\n[\u003cffffffffa02de29b\u003e] vhost_worker+0xbb/0x130 [vhost_net]\n[\u003cffffffffa02de1e0\u003e] ? vhost_worker+0x0/0x130 [vhost_net]\n[\u003cffffffffa02de1e0\u003e] ? vhost_worker+0x0/0x130 [vhost_net]\n[\u003cffffffff81069686\u003e] kthread+0x96/0xa0\n[\u003cffffffff8100bbe4\u003e] kernel_thread_helper+0x4/0x10\n[\u003cffffffff810695f0\u003e] ? kthread+0x0/0xa0\n[\u003cffffffff8100bbe0\u003e] ? kernel_thread_helper+0x0/0x10\nCode: 8b 94 24 d0 00 00 00 49 8b 84 24 d8 00 00 00 48 8d 14 10 0f b7 0a 39 d9 7f d1 48 8b 7a 10 48 85 ff 74 20 48 c7 42 10 00 00 00 00 \u003c48\u003e 8b 1f e8 e8 fb ff ff 48 85 db 48 89 df 75 f0 49 8b 84 24 d8\n\nPatch below fixes the panic. cxgb4 and cxgb4vf already have this fix.\n\nSigned-off-by: Krishna Kumar \u003ckrkumar2@in.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "69dcfc8aad24fa95ae0a0ad1405cf6847e3ec14a", "tree": "01e2ccc4f6e2cdc440262cd245ea79af2210efaa", "parents": [ "b7126d8c70a1d4656f1c351de8528df22dfd2d46" ], "author": { "name": "Nishanth Aravamudan", "email": "nacc@us.ibm.com", "time": "Wed Oct 27 19:06:30 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:02 2010 -0700" }, "message": "cxgb3: fix crash due to manipulating queues before registration\n\nAlong the same lines as \"cxgb4: fix crash due to manipulating queues\nbefore registration\" (8f6d9f40476895571df039b6f1f5230ec7faebad), before\ncommit \"net: allocate tx queues in register_netdevice\"\nnetif_tx_stop_all_queues and related functions could be used between\ndevice allocation and registration but now only after registration.\ncxgb4 has such a call before registration and crashes now. Move it\nafter register_netdev.\n\nSigned-off-by: Nishanth Aravamudan \u003cnacc@us.ibm.com\u003e\nCc: eric.dumazet@gmail.com\nCc: sonnyrao@us.ibm.com\nCc: Divy Le Ray \u003cdivy@chelsio.com\u003e\nCc: Dimitris Michailidis \u003cdm@chelsio.com\u003e\nCc: netdev@vger.kernel.org\nCc: linux-kernel@vger.kernel.org\nTested-by: Nishanth Aravamudan \u003cnacc@us.ibm.com\u003e\nAcked-by: Divy Le Ray \u003cdivy@chelsio.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b7126d8c70a1d4656f1c351de8528df22dfd2d46", "tree": "a761faf9eab993569a7e79ff392a829f42bca21d", "parents": [ "1c0e0a0569e925220c2948ea9b92fc013895917f" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@parallels.com", "time": "Wed Oct 27 23:01:02 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:01 2010 -0700" }, "message": "8390: Don\u0027t oops on starting dev queue\n\nThe __NS8390_init tries to start the device queue before the\ndevice is registered. This results in an oops (snipped):\n\n[ 2.865493] BUG: unable to handle kernel NULL pointer dereference at 0000000000000010\n[ 2.866106] IP: [\u003cffffffffa000602a\u003e] netif_start_queue+0xb/0x12 [8390]\n[ 2.881267] Call Trace:\n[ 2.881437] [\u003cffffffffa000624d\u003e] __NS8390_init+0x102/0x15a [8390]\n[ 2.881999] [\u003cffffffffa00062ae\u003e] NS8390_init+0x9/0xb [8390]\n[ 2.882237] [\u003cffffffffa000d820\u003e] ne2k_pci_init_one+0x297/0x354 [ne2k_pci]\n[ 2.882955] [\u003cffffffff811c7a0e\u003e] local_pci_probe+0x12/0x16\n[ 2.883308] [\u003cffffffff811c85ad\u003e] pci_device_probe+0xc3/0xef\n[ 2.884049] [\u003cffffffff8129218d\u003e] driver_probe_device+0xbe/0x14b\n[ 2.884937] [\u003cffffffff81292260\u003e] __driver_attach+0x46/0x62\n[ 2.885170] [\u003cffffffff81291788\u003e] bus_for_each_dev+0x49/0x78\n[ 2.885781] [\u003cffffffff81291fbb\u003e] driver_attach+0x1c/0x1e\n[ 2.886089] [\u003cffffffff812912ab\u003e] bus_add_driver+0xba/0x227\n[ 2.886330] [\u003cffffffff8129259a\u003e] driver_register+0x9e/0x115\n[ 2.886933] [\u003cffffffff811c8815\u003e] __pci_register_driver+0x50/0xac\n[ 2.887785] [\u003cffffffffa001102c\u003e] ne2k_pci_init+0x2c/0x2e [ne2k_pci]\n[ 2.888093] [\u003cffffffff81000212\u003e] do_one_initcall+0x7c/0x130\n[ 2.888693] [\u003cffffffff8106d74f\u003e] sys_init_module+0x99/0x1da\n[ 2.888946] [\u003cffffffff81002a2b\u003e] system_call_fastpath+0x16/0x1b\n\nThis happens because the netif_start_queue sets respective bit on the dev-\u003e_tx\narray which is not yet allocated.\n\nAs far as I understand the code removing the netif_start_queue from __NS8390_init\nis OK, since queue will be started later on device open. Plz, correct me if I\u0027m wrong.\n\nFound in the Dave\u0027s current tree, so he\u0027s in Cc.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1c0e0a0569e925220c2948ea9b92fc013895917f", "tree": "533f97f037679a7ba92867baf816dda21a3c9f84", "parents": [ "b1fcf55eea541af9efa5d39f5a0d1aec8ceca55d" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Wed Oct 27 19:16:28 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:01 2010 -0700" }, "message": "dccp ccid-2: Stop polling\n\nThis updates CCID-2 to use the CCID dequeuing mechanism, converting from\nprevious continuous-polling to a now event-driven mechanism.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b1fcf55eea541af9efa5d39f5a0d1aec8ceca55d", "tree": "a021b6abde9c784d67ee0de3bb7fb31f7d5b2e9f", "parents": [ "dc841e30eaea9f9f83c9ab1ee0b3ef9e5c95ce8a" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Wed Oct 27 19:16:27 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:01 2010 -0700" }, "message": "dccp: Refine the wait-for-ccid mechanism\n\nThis extends the existing wait-for-ccid routine so that it may be used with\ndifferent types of CCID, addressing the following problems:\n\n 1) The queue-drain mechanism only works with rate-based CCIDs. If CCID-2 for\n example has a full TX queue and becomes network-limited just as the\n application wants to close, then waiting for CCID-2 to become unblocked\n could lead to an indefinite delay (i.e., application \"hangs\").\n 2) Since each TX CCID in turn uses a feedback mechanism, there may be changes\n in its sending policy while the queue is being drained. This can lead to\n further delays during which the application will not be able to terminate.\n 3) The minimum wait time for CCID-3/4 can be expected to be the queue length\n times the current inter-packet delay. For example if tx_qlen\u003d100 and a delay\n of 15 ms is used for each packet, then the application would have to wait\n for a minimum of 1.5 seconds before being allowed to exit.\n 4) There is no way for the user/application to control this behaviour. It would\n be good to use the timeout argument of dccp_close() as an upper bound. Then\n the maximum time that an application is willing to wait for its CCIDs to can\n be set via the SO_LINGER option.\n\nThese problems are addressed by giving the CCID a grace period of up to the\n`timeout\u0027 value.\n\nThe wait-for-ccid function is, as before, used when the application\n (a) has read all the data in its receive buffer and\n (b) if SO_LINGER was set with a non-zero linger time, or\n (c) the socket is either in the OPEN (active close) or in the PASSIVE_CLOSEREQ\n state (client application closes after receiving CloseReq).\n\nIn addition, there is a catch-all case of __skb_queue_purge() after waiting for\nthe CCID. This is necessary since the write queue may still have data when\n (a) the host has been passively-closed,\n (b) abnormal termination (unread data, zero linger time),\n (c) wait-for-ccid could not finish within the given time limit.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dc841e30eaea9f9f83c9ab1ee0b3ef9e5c95ce8a", "tree": "921458d0ea02f1478dbac9305c1925dbea8c0dd9", "parents": [ "fe84f4140f0d24deca8591e38926b95cfd097e62" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Wed Oct 27 19:16:26 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:00 2010 -0700" }, "message": "dccp: Extend CCID packet dequeueing interface\n\nThis extends the packet dequeuing interface of dccp_write_xmit() to allow\n 1. CCIDs to take care of timing when the next packet may be sent;\n 2. delayed sending (as before, with an inter-packet gap up to 65.535 seconds).\n\nThe main purpose is to take CCID-2 out of its polling mode (when it is network-\nlimited, it tries every millisecond to send, without interruption).\n\nThe mode of operation for (2) is as follows:\n * new packet is enqueued via dccp_sendmsg() \u003d\u003e dccp_write_xmit(),\n * ccid_hc_tx_send_packet() detects that it may not send (e.g. window full),\n * it signals this condition via `CCID_PACKET_WILL_DEQUEUE_LATER\u0027,\n * dccp_write_xmit() returns without further action;\n * after some time the wait-condition for CCID becomes true,\n * that CCID schedules the tasklet,\n * tasklet function calls ccid_hc_tx_send_packet() via dccp_write_xmit(),\n * since the wait-condition is now true, ccid_hc_tx_packet() returns \"send now\",\n * packet is sent, and possibly more (since dccp_write_xmit() loops).\n\nCode reuse: the taskled function calls dccp_write_xmit(), the timer function\n reduces to a wrapper around the same code.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fe84f4140f0d24deca8591e38926b95cfd097e62", "tree": "5b4c809f131105fddb533776632ff1d546b604a7", "parents": [ "de7fe7874dc55e8226245c50f07dec3c7b285044" ], "author": { "name": "Gerrit Renker", "email": "gerrit@erg.abdn.ac.uk", "time": "Wed Oct 27 19:16:25 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:27:00 2010 -0700" }, "message": "dccp: Return-value convention of hc_tx_send_packet()\n\nThis patch reorganises the return value convention of the CCID TX sending\nfunction, to permit more flexible schemes, as required by subsequent patches.\n\nCurrently the convention is\n * values \u003c 0 mean error,\n * a value \u003d\u003d 0 means \"send now\", and\n * a value x \u003e 0 means \"send in x milliseconds\".\n\nThe patch provides symbolic constants and a function to interpret return values.\n\nIn addition, it caps the maximum positive return value to 0xFFFF milliseconds,\ncorresponding to 65.535 seconds. This is possible since in CCID-3/4 the\nmaximum possible inter-packet gap is fixed at t_mbi \u003d 64 sec.\n\nSigned-off-by: Gerrit Renker \u003cgerrit@erg.abdn.ac.uk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "de7fe7874dc55e8226245c50f07dec3c7b285044", "tree": "9b44d5b477917a8742bbc3382409754fec797edd", "parents": [ "ec43a81cfa85b1ba0c9ac1aa995fe652f30fd4d6" ], "author": { "name": "Emil Tantilov", "email": "emil.s.tantilov@intel.com", "time": "Thu Oct 28 00:59:51 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:19:01 2010 -0700" }, "message": "igbvf: fix panic on load\n\nIntroduced by commit:e6484930d7c73d324bccda7d43d131088da697b9\nnet: allocate tx queues in register_netdevice\n\nSigned-off-by: Emil Tantilov \u003cemil.s.tantilov@intel.com\u003e\nAcked-by: Greg Rose \u003cgreg.v.rose@intel.com\u003e\nTested-by: Jeff Pieper \u003cjeffrey.e.pieper@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ec43a81cfa85b1ba0c9ac1aa995fe652f30fd4d6", "tree": "110963d7857fe29750394485c4c4e404ca637f33", "parents": [ "9806307a1c5a2a79e268ae4e78b437d38c8adf7f" ], "author": { "name": "Emil Tantilov", "email": "emil.s.tantilov@intel.com", "time": "Thu Oct 28 00:59:49 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:19:00 2010 -0700" }, "message": "ixgb: call pci_disable_device in ixgb_remove\n\nixgb fails to work after reload on recent kernels:\n\nrmmod ixgb (dev-\u003ecurrent_state \u003d PCI_UNKNOWN)\nmodprobe ixgb (pci_enable_device will bail leaving current_state to PCI_UNKNOWN)\nifup eth0\ndo_IRQ: 2.82 No irq handler for vector (irq -1)\n\nThe issue was exposed by commit fcd097f31a6ee207cc0c3da9cccd2a86d4334785\nPCI: MSI: Remove unsafe and unnecessary hardware access\n\nwhich avoids HW writes for power states !\u003d PCI_D0\n\nCC: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: Emil Tantilov \u003cemil.s.tantilov@intel.com\u003e\nTested-by: Jeff Pieper \u003cjeffrey.e.pieper@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9806307a1c5a2a79e268ae4e78b437d38c8adf7f", "tree": "1a4ceada09e85a3cd9083790c6b16a16e99bb928", "parents": [ "affa9dfb04b7e2e3a0b0e6d844ea0c9ed97505f9" ], "author": { "name": "John Fastabend", "email": "john.r.fastabend@intel.com", "time": "Thu Oct 28 00:59:57 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:19:00 2010 -0700" }, "message": "ixgbe: DCB, fix TX hang occurring in stress condition with PFC\n\nThe DCB credits refill quantum _must_ be greater than half the max\npacket size. This is needed to guarantee that TX DMA operations\nare not attempted during a pause state. Additionally, the min IFG\nmust be set correctly for DCB mode. If a DMA operation is\nrequested unexpectedly during the pause state the HW data\nstore may be corrupted leading to a DMA hang. The DMA hang\nrequires a reset to correct. This fixes the HW configuration\nto avoid this condition.\n\nSigned-off-by: John Fastabend \u003cjohn.r.fastabend@intel.com\u003e\nTested-by: Ross Brattain \u003cross.b.brattain@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "affa9dfb04b7e2e3a0b0e6d844ea0c9ed97505f9", "tree": "5bf0e4f0d230b237a19ddbafc2bcdb62dbd704fe", "parents": [ "ff10e13cd06f3dbe90e9fffc3c2dd2057a116e4b" ], "author": { "name": "Carolyn Wyborny", "email": "carolyn.wyborny@intel.com", "time": "Thu Oct 28 00:59:55 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:18:59 2010 -0700" }, "message": "e1000e: Add check for reset flags before displaying reset message\n\nSome parts need to execute resets during normal operation. This flag\ncheck ensures that those parts reset without needlessly alarming the\nuser. Other unexpected resets by other parts will dump debug info\nand message the reset action to the user, as originally intended.\n\nSigned-off-by: Carolyn Wyborny \u003ccarolyn.wyborny@intel.com\u003e\nAcked-by: Bruce Allan \u003cbruce.w.allan@intel.com\u003e\nTested-by: Emil Tantilov \u003cemil.s.tantilov@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ff10e13cd06f3dbe90e9fffc3c2dd2057a116e4b", "tree": "673e0bf9ad8a7b78cc646e0c90cb390378202f2c", "parents": [ "116c1ea0aa871a2d6554e7fae124fc2880a596c1" ], "author": { "name": "Carolyn Wyborny", "email": "carolyn.wyborny@intel.com", "time": "Thu Oct 28 00:59:53 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:18:59 2010 -0700" }, "message": "e1000e: reset PHY after errors detected\n\nSome errors can be induced in the PHY via environmental testing\n(specifically extreme temperature changes and electro static\ndischarge testing), and in the case of the PHY hanging due to\nthis input, this detects the problem and resets to continue.\nThis issue only applies to 82574 silicon.\n\nSigned-off-by: Jesse Brandeburg \u003cjesse.brandeburg@intel.com\u003e\nSigned-off-by: Carolyn Wyborny \u003ccarolyn.wyborny@intel.com\u003e\nTested-by: Emil Tantilov \u003cemil.s.tantilov@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "116c1ea0aa871a2d6554e7fae124fc2880a596c1", "tree": "4e0138d5370a055600b79b5267d1751cdcced007", "parents": [ "c1758012971e0410790b2bc96a77e26d7b286593" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:15:43 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Oct 28 10:15:43 2010 -0700" }, "message": "pch_gbe: Select MII.\n\nReported-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c1758012971e0410790b2bc96a77e26d7b286593", "tree": "d2cfd9463d9e381af40955848b5b296832808098", "parents": [ "ce45b873028fdf94a24f0850cd554e6fda593e16" ], "author": { "name": "Jesse Gross", "email": "jesse@nicira.com", "time": "Tue Oct 26 14:56:03 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 19:43:55 2010 -0700" }, "message": "igb: Fix unused variable warning.\n\nCommit eab6d18d \"vlan: Don\u0027t check for vlan group before\nvlan_tx_tag_present\" removed the need for the adapter variable\nin igb_xmit_frame_ring_adv(). This removes the variable as well\nto avoid the compiler warning.\n\nReported-by: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\nSigned-off-by: Jesse Gross \u003cjesse@nicira.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ce45b873028fdf94a24f0850cd554e6fda593e16", "tree": "ca3ff2670d7a8c12228bdc86d4d0d501facb05a0", "parents": [ "a71fb88145a03678fef3796930993e390db68a15" ], "author": { "name": "Breno Leitao", "email": "leitao@linux.vnet.ibm.com", "time": "Wed Oct 27 08:45:14 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 14:24:13 2010 -0700" }, "message": "ehea: Fixing statistics\n\n(Applied over Eric\u0027s \"ehea: fix use after free\" patch)\n\nCurrently ehea stats are broken. The bytes counters are got from\nthe hardware, while the packets counters are got from the device\ndriver. Also, the device driver counters are resetted during the\nthe down process, and the hardware aren\u0027t, causing some weird\nnumbers.\n\nThis patch just consolidates the packets and bytes on the device\ndriver.\n\nSigned-off-by: Breno Leitao \u003cleitao@linux.vnet.ibm.com\u003e\nReviewed-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a71fb88145a03678fef3796930993e390db68a15", "tree": "d35645b0f3768861e2b18723c2a4bcc68c0034eb", "parents": [ "74b0b85b88aaa952023762e0280799aaae849841" ], "author": { "name": "Jarek Poplawski", "email": "jarkao2@gmail.com", "time": "Wed Oct 27 07:08:22 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 14:24:07 2010 -0700" }, "message": "bonding: Fix lockdep warning after bond_vlan_rx_register()\n\nFix lockdep warning:\n[ 52.991402] \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ 52.991511] [ INFO: SOFTIRQ-safe -\u003e SOFTIRQ-unsafe lock order detected ]\n[ 52.991569] 2.6.36-04573-g4b60626-dirty #65\n[ 52.991622] ------------------------------------------------------\n[ 52.991696] ip/4842 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:\n[ 52.991758] (\u0026bond-\u003elock){++++..}, at: [\u003cefe4d300\u003e] bond_set_multicast_list+0x60/0x2c0 [bonding]\n[ 52.991966]\n[ 52.991967] and this task is already holding:\n[ 52.992008] (\u0026bonding_netdev_addr_lock_key){+.....}, at: [\u003cc04e5530\u003e] dev_mc_sync+0x50/0xa0\n[ 52.992008] which would create a new lock dependency:\n[ 52.992008] (\u0026bonding_netdev_addr_lock_key){+.....} -\u003e (\u0026bond-\u003elock){++++..}\n[ 52.992008]\n[ 52.992008] but this new dependency connects a SOFTIRQ-irq-safe lock:\n[ 52.992008] (\u0026(\u0026mc-\u003emca_lock)-\u003erlock){+.-...}\n[ 52.992008] ... which became SOFTIRQ-irq-safe at:\n[ 52.992008] [\u003cc0272beb\u003e] __lock_acquire+0x96b/0x1960\n[ 52.992008] [\u003cc027415e\u003e] lock_acquire+0x7e/0xf0\n[ 52.992008] [\u003cc05f356d\u003e] _raw_spin_lock_bh+0x3d/0x50\n[ 52.992008] [\u003cc0584e40\u003e] mld_ifc_timer_expire+0xf0/0x280\n[ 52.992008] [\u003cc024cee6\u003e] run_timer_softirq+0x146/0x310\n[ 52.992008] [\u003cc024591d\u003e] __do_softirq+0xad/0x1c0\n[ 52.992008]\n[ 52.992008] to a SOFTIRQ-irq-unsafe lock:\n[ 52.992008] (\u0026bond-\u003elock){++++..}\n[ 52.992008] ... which became SOFTIRQ-irq-unsafe at:\n[ 52.992008] ... [\u003cc0272c3b\u003e] __lock_acquire+0x9bb/0x1960\n[ 52.992008] [\u003cc027415e\u003e] lock_acquire+0x7e/0xf0\n[ 52.992008] [\u003cc05f36b8\u003e] _raw_write_lock+0x38/0x50\n[ 52.992008] [\u003cefe4cbe4\u003e] bond_vlan_rx_register+0x24/0x70 [bonding]\n[ 52.992008] [\u003cc0598010\u003e] register_vlan_dev+0xc0/0x280\n[ 52.992008] [\u003cc0599f3a\u003e] vlan_newlink+0xaa/0xd0\n[ 52.992008] [\u003cc04ed4b4\u003e] rtnl_newlink+0x404/0x490\n[ 52.992008] [\u003cc04ece35\u003e] rtnetlink_rcv_msg+0x1e5/0x220\n[ 52.992008] [\u003cc050424e\u003e] netlink_rcv_skb+0x8e/0xb0\n[ 52.992008] [\u003cc04ecbac\u003e] rtnetlink_rcv+0x1c/0x30\n[ 52.992008] [\u003cc0503bfb\u003e] netlink_unicast+0x24b/0x290\n[ 52.992008] [\u003cc0503e37\u003e] netlink_sendmsg+0x1f7/0x310\n[ 52.992008] [\u003cc04cd41c\u003e] sock_sendmsg+0xac/0xe0\n[ 52.992008] [\u003cc04ceb80\u003e] sys_sendmsg+0x130/0x230\n[ 52.992008] [\u003cc04cf04e\u003e] sys_socketcall+0xde/0x280\n[ 52.992008] [\u003cc0202d10\u003e] sysenter_do_call+0x12/0x36\n[ 52.992008]\n[ 52.992008] other info that might help us debug this:\n...\n[ Full info at netdev: Wed, 27 Oct 2010 12:24:30 +0200\n Subject: [BUG net-2.6 vlan/bonding] lockdep splats ]\n\nUse BH variant of write_lock(\u0026bond-\u003elock) (as elsewhere in bond_main)\nto prevent this dependency.\n\nFixes commit f35188faa0fbabefac476536994f4b6f3677380f [v2.6.36]\n\nReported-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nTested-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: Jarek Poplawski \u003cjarkao2@gmail.com\u003e\nAcked-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nCc: Jay Vosburgh \u003cfubar@us.ibm.com\u003e\n" }, { "commit": "74b0b85b88aaa952023762e0280799aaae849841", "tree": "a3049c0efd6332785e2323581506c89d49c67538", "parents": [ "1933f0c09438ed8ccfee2281b814d9b26cef336c" ], "author": { "name": "Pavel Emelyanov", "email": "xemul@parallels.com", "time": "Wed Oct 27 05:43:53 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 14:20:08 2010 -0700" }, "message": "tunnels: Fix tunnels change rcu protection\n\nAfter making rcu protection for tunnels (ipip, gre, sit and ip6) a bug\nwas introduced into the SIOCCHGTUNNEL code.\n\nThe tunnel is first unlinked, then addresses change, then it is linked\nback probably into another bucket. But while changing the parms, the\nhash table is unlocked to readers and they can lookup the improper tunnel.\n\nRespective commits are b7285b79 (ipip: get rid of ipip_lock), 1507850b\n(gre: get rid of ipgre_lock), 3a43be3c (sit: get rid of ipip6_lock) and\n94767632 (ip6tnl: get rid of ip6_tnl_lock).\n\nThe quick fix is to wait for quiescent state to pass after unlinking,\nbut if it is inappropriate I can invent something better, just let me\nknow.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nAcked-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3d435ad7218ff58c846d7e52d87c2daf115f50cd", "tree": "67d70141b5d7df2c4194231bed3ec1430771bcc5", "parents": [ "dc9f48ce7c7d345be31208def51572a8250a4a03" ], "author": { "name": "Jones Desougi", "email": "jones.desougi@27m.se", "time": "Wed Oct 27 19:38:34 2010 +0200" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:54:54 2010 -0400" }, "message": "ath5k: Fix double free on hw attach error path\n\nIf ath5k_hw_attach fails it will free sc-\u003eah (local variable ah) before\nreturning. However, when it reports failure the caller (ath5k_pci_probe)\nwill also free sc-\u003eah. Let the caller handle the deallocation, it does\nso on further errors as well.\n\nSigned-off-by: Jones Desougi \u003cjones.desougi@27m.se\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "dc9f48ce7c7d345be31208def51572a8250a4a03", "tree": "c8989c1905d740bb49c1b186b909b8408c1a4315", "parents": [ "d654567dec75782d6fd9add4b7b9c50e0926d369" ], "author": { "name": "Jouni Malinen", "email": "j@w1.fi", "time": "Wed Oct 27 13:40:33 2010 +0300" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:46:51 2010 -0400" }, "message": "mac80211: Fix scan_ies_len to include DS Params\n\nCommit 651b52254fc061f02d965524e71de4333a009a5a added DS Parameter Set\ninformation into Probe Request frames that are transmitted on 2.4 GHz\nband, but it failed to increment local-\u003escan_ies_len to cover this new\ninformation. This variable needs to be updated to match the maximum IE\ndata length so that the extra buffer need gets reduced from the driver\nlimit.\n\nSigned-off-by: Jouni Malinen \u003cj@w1.fi\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "d654567dec75782d6fd9add4b7b9c50e0926d369", "tree": "fbe39dca59d496503e5bc20dc551d02fd0e915bc", "parents": [ "e609e2ea2cdb3448e7849703179cd792a28dcc55" ], "author": { "name": "Rajkumar Manoharan", "email": "rmanoharan@atheros.com", "time": "Wed Oct 27 12:02:54 2010 +0530" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:46:50 2010 -0400" }, "message": "ath9k_htc: Set proper firmware offset for Netgear WNDA3200\n\nNetgear WNDA3200 device uses ar7010 firmware but it is failed to set\ncorrect firmware offset on firmware download which causes device initialization\nfailure.\n\nCc: stable@kernel.org\nSigned-off-by: Rajkumar Manoharan \u003crmanoharan@atheros.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "e609e2ea2cdb3448e7849703179cd792a28dcc55", "tree": "d28901d24ff6ff619aaa0191e99b6bee18294cac", "parents": [ "5e848f789d60000d39d9a5f26ab02dbdd963f6cd" ], "author": { "name": "Felix Fietkau", "email": "nbd@openwrt.org", "time": "Wed Oct 27 02:15:05 2010 +0200" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:46:50 2010 -0400" }, "message": "ath9k: fix tx aggregation flush on AR9003\n\nCompleting aggregate frames can lead to new buffers being pushed into\nthe tid queues due to software retransmission.\nWhen the tx queues are being drained, all pending aggregates must be\ncompleted before the tid queues get drained, otherwise buffers might be\nleaked.\n\nSigned-off-by: Felix Fietkau \u003cnbd@openwrt.org\u003e\nCc: stable@kernel.org\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "5e848f789d60000d39d9a5f26ab02dbdd963f6cd", "tree": "1489d23e7934767c48c4ba604e55cd447c497276", "parents": [ "b79b33c4baf2532aac2c0924dce5a738099b888c" ], "author": { "name": "Luis R. Rodriguez", "email": "lrodriguez@atheros.com", "time": "Wed Oct 20 16:07:06 2010 -0700" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:42:58 2010 -0400" }, "message": "ath9k: lock reset and PCU start/stopping\n\nApart from locking the start and stop PCU we need\nto ensure we also content starting and stopping the PCU\nbetween hardware resets.\n\nThis is part of a series that will help resolve the bug:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d14624\n\nFor more details about this issue refer to:\n\nhttp://marc.info/?l\u003dlinux-wireless\u0026m\u003d128629803703756\u0026w\u003d2\n\nCc: stable@kernel.org\nCc: Ben Greear \u003cgreearb@candelatech.com\u003e\nCc: Kyungwan Nam \u003ckyungwan.nam@atheros.com\u003e\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nTested-by: Ben Greear \u003cgreearb@candelatech.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "b79b33c4baf2532aac2c0924dce5a738099b888c", "tree": "145a75d5a58d98fd6bf33cd7c3410f1294883fbd", "parents": [ "7583c550c3e635dcc61ab127c36ecefd59fb8dc8" ], "author": { "name": "Luis R. Rodriguez", "email": "lrodriguez@atheros.com", "time": "Wed Oct 20 16:07:05 2010 -0700" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:41:15 2010 -0400" }, "message": "ath9k: rename rxflushlock to pcu_lock\n\nThe real way to lock RX is to contend on the PCU\nand reset, this will be fixed in the next patch but for\nnow just do the renames so that the next patch which changes\nthe locking order is crystal clear.\n\nThis is part of a series that will help resolve the bug:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d14624\n\nFor more details about this issue refer to:\n\nhttp://marc.info/?l\u003dlinux-wireless\u0026m\u003d128629803703756\u0026w\u003d2\n\nCc: stable@kernel.org\nCc: Ben Greear \u003cgreearb@candelatech.com\u003e\nCc: Kyungwan Nam \u003ckyungwan.nam@atheros.com\u003e\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nTested-by: Ben Greear \u003cgreearb@candelatech.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "7583c550c3e635dcc61ab127c36ecefd59fb8dc8", "tree": "6f6ba84e24622bc0c15e81b3510e28bf234a87a9", "parents": [ "1e450285281bdf766272c181ecd43d4f2f0711ce" ], "author": { "name": "Luis R. Rodriguez", "email": "lrodriguez@atheros.com", "time": "Wed Oct 20 16:07:04 2010 -0700" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:41:14 2010 -0400" }, "message": "ath9k: add locking for starting the PCU on RX\n\nThere was some locking for starting some parts of\nRX but not for starting the PCU. Include this otherwise\nwe can content against stopping the PCU.\n\nThis can potentially lead to races against different\nbuffers on the PCU which can lead to to the DMA RX\nengine writing to buffers which are already freed.\n\nThis is part of a series that will help resolve the bug:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d14624\n\nFor more details about this issue refer to:\n\nhttp://marc.info/?l\u003dlinux-wireless\u0026m\u003d128629803703756\u0026w\u003d2\n\nCc: stable@kernel.org\nCc: Ben Greear \u003cgreearb@candelatech.com\u003e\nCc: Kyungwan Nam \u003ckyungwan.nam@atheros.com\u003e\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nTested-by: Ben Greear \u003cgreearb@candelatech.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "1e450285281bdf766272c181ecd43d4f2f0711ce", "tree": "c7c8cd58d3f08af970e93f3489450886e4489bec", "parents": [ "822395b591db32ad3cf8a5b57b0fe30fb8d12c37" ], "author": { "name": "Luis R. Rodriguez", "email": "lrodriguez@atheros.com", "time": "Wed Oct 20 16:07:03 2010 -0700" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Oct 27 15:41:14 2010 -0400" }, "message": "ath9k: add locking for stopping RX\n\nath9k locks for starting RX but not for stopping RX. We could\npotentially run into a situation where tried to stop RX\nbut immediately started RX. This allows for races on the\nthe RX engine deciding what buffer we last left off on\nand could potentially cause ath9k to DMA into already\nfree\u0027d memory or in the worst case at a later time to\nalready given memory to other drivers.\n\nFix this by locking stopping RX.\n\nThis is part of a series that will help resolve the bug:\n\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d14624\n\nFor more details about this issue refer to:\n\nhttp://marc.info/?l\u003dlinux-wireless\u0026m\u003d128629803703756\u0026w\u003d2\n\nCc: stable@kernel.org\nCc: Ben Greear \u003cgreearb@candelatech.com\u003e\nCc: Kyungwan Nam \u003ckyungwan.nam@atheros.com\u003e\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nTested-by: Ben Greear \u003cgreearb@candelatech.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "1933f0c09438ed8ccfee2281b814d9b26cef336c", "tree": "b059ba9d441f5e352807e7a477405bce13d0bd63", "parents": [ "e57731f4dda7a5d0c82ec3cc9ba91691b826b76e" ], "author": { "name": "Amarnath Revanna", "email": "amarnath.bangalore.revanna@stericsson.com", "time": "Wed Oct 27 08:34:42 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:29:53 2010 -0700" }, "message": "caif-u5500: Build config for CAIF shared mem driver\n\nSigned-off-by: Sjur Braendeland \u003csjur.brandeland@stericsson.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e57731f4dda7a5d0c82ec3cc9ba91691b826b76e", "tree": "66bd9ce2cf968ad24b3246611fd197513937a7ed", "parents": [ "dfae55d6a5873718fe0d996fc929519073a85ff7" ], "author": { "name": "Amarnath Revanna", "email": "amarnath.bangalore.revanna@stericsson.com", "time": "Wed Oct 27 08:34:41 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:29:52 2010 -0700" }, "message": "caif-u5500: CAIF shared memory mailbox interface\n\nSigned-off-by: Sjur Braendeland \u003csjur.brandeland@stericsson.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "dfae55d6a5873718fe0d996fc929519073a85ff7", "tree": "3ce631876e11a25c7b35245a977a005424adb74c", "parents": [ "a10c02036f82b1fa30d69a62f7c7d9a927e8adbc" ], "author": { "name": "sjur.brandeland@stericsson.com", "email": "sjur.brandeland@stericsson.com", "time": "Wed Oct 27 08:34:40 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:29:52 2010 -0700" }, "message": "caif-u5500: CAIF shared memory transport protocol\n\nSigned-off-by: Sjur Braendeland \u003csjur.brandeland@stericsson.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a10c02036f82b1fa30d69a62f7c7d9a927e8adbc", "tree": "c7435bd8023305fe708a91912aa6d49c68032e90", "parents": [ "4101e976e0376a1820ae55adf8bca7dda5089a7d" ], "author": { "name": "Amarnath Revanna", "email": "amarnath.bangalore.revanna@stericsson.com", "time": "Wed Oct 27 08:34:39 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:29:51 2010 -0700" }, "message": "caif-u5500: Adding shared memory include\n\nSigned-off-by: Sjur Braendeland \u003csjur.brandeland@stericsson.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4101e976e0376a1820ae55adf8bca7dda5089a7d", "tree": "2b424d287bb44f83ee874ba90110d9d0d75c54c3", "parents": [ "13c3ab86f27967488b8182a173ebc899c9111bf0" ], "author": { "name": "Julia Lawall", "email": "julia@diku.dk", "time": "Tue Oct 26 02:20:56 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:23:21 2010 -0700" }, "message": "drivers/isdn: delete double assignment\n\nDelete successive assignments to the same location. In the first case, the\nhscx array has two elements, so change the assignment to initialize the\nsecond one. In the second case, the two assignments are simply identical.\nFurthermore, neither is necessary, because the effect of the assignment is\nonly visible in the next line, in the assignment in the if test. The patch\ninlines the right hand side value in the latter assignment and pulls that\nassignment out of the if test.\n\nA simplified version of the semantic match that finds this problem is as\nfollows: (http://coccinelle.lip6.fr/)\n\n// \u003csmpl\u003e\n@@\nexpression i;\n@@\n\n*i \u003d ...;\n i \u003d ...;\n// \u003c/smpl\u003e\n\nSigned-off-by: Julia Lawall \u003cjulia@diku.dk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "13c3ab86f27967488b8182a173ebc899c9111bf0", "tree": "1bcfa9b90c9226fc04d12d5863c829858dd9466f", "parents": [ "d58c0e95622c0de271ae57c083ad25ff4eb032c8" ], "author": { "name": "Julia Lawall", "email": "julia@diku.dk", "time": "Tue Oct 26 00:25:36 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:23:20 2010 -0700" }, "message": "drivers/net/typhoon.c: delete double assignment\n\nDelete successive assignments to the same location. The current definition\ndoes not initialize the respRing structure, which has the same type as the\ncmdRing structure, so initialize that one instead.\n\nA simplified version of the semantic match that finds this problem is as\nfollows: (http://coccinelle.lip6.fr/)\n\n// \u003csmpl\u003e\n@@\nexpression i;\n@@\n\n*i \u003d ...;\n i \u003d ...;\n// \u003c/smpl\u003e\n\nSigned-off-by: Julia Lawall \u003cjulia@diku.dk\u003e\nAcked-by: David Dillow \u003cdave@thedillows.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d58c0e95622c0de271ae57c083ad25ff4eb032c8", "tree": "aadbd621ee7c737e9acb1d9fedfa3266b3f8621b", "parents": [ "0184bbba1cb535dec2eaacacabe188964fbddd7c" ], "author": { "name": "Julia Lawall", "email": "julia@diku.dk", "time": "Tue Oct 26 00:25:34 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:23:20 2010 -0700" }, "message": "drivers/net/sb1000.c: delete double assignment\n\nThe other code around these duplicated assignments initializes the 0 1 2\nand 3 elements of an array, so change the initialization of the\nrx_session_id array to do the same.\n\nA simplified version of the semantic match that finds this problem is as\nfollows: (http://coccinelle.lip6.fr/)\n\n// \u003csmpl\u003e\n@@\nexpression i;\n@@\n\n*i \u003d ...;\n i \u003d ...;\n// \u003c/smpl\u003e\n\nSigned-off-by: Julia Lawall \u003cjulia@diku.dk\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0184bbba1cb535dec2eaacacabe188964fbddd7c", "tree": "c54b43e9ec17a925f536a5dfec876dc7371db1bf", "parents": [ "90d190055589b35986c2ff3f56e2f47613b9a67f" ], "author": { "name": "Sony Chacko", "email": "sony.chacko@qlogic.com", "time": "Tue Oct 26 17:53:09 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:21:54 2010 -0700" }, "message": "qlcnic: define valid vlan id range\n\n4095 vlan id is reserved and should not be use.\n\nSigned-off-by: Sony Chacko \u003csony.chacko@qlogic.com\u003e\nSigned-off-by: Amit Kumar Salecha \u003camit.salecha@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "90d190055589b35986c2ff3f56e2f47613b9a67f", "tree": "ac6fb50686a870aa6d2aa6aa9e6d0ccb67781a2e", "parents": [ "e5edb7b19fd207f78adfdf4d9d5e1dd74a7eabd3" ], "author": { "name": "Sony Chacko", "email": "sony.chacko@qlogic.com", "time": "Tue Oct 26 17:53:08 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:21:54 2010 -0700" }, "message": "qlcnic: reduce rx ring size\n\nIf eswitch is enabled, rcv ring size can be reduce, as\nphysical port is partition-ed.\n\nSigned-off-by: Sony Chacko \u003csony.chacko@qlogic.com\u003e\nSigned-off-by: Amit Kumar Salecha \u003camit.salecha@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e5edb7b19fd207f78adfdf4d9d5e1dd74a7eabd3", "tree": "2bf861e9ec8cb407892b6271289a22925af6ae27", "parents": [ "e5ccd96110d5ac0f73b695ba606feb6d69472f26" ], "author": { "name": "amit salecha", "email": "amit.salecha@qlogic.com", "time": "Tue Oct 26 17:53:07 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 12:21:53 2010 -0700" }, "message": "qlcnic: fix mac learning\n\nIn failover bonding case, same mac address can be programmed on other slave function.\nFw will delete old entry (original func) associated with that mac address.\nNeed to reporgram mac address, if failover again happen to original function.\n\nSigned-off-by: Amit Kumar Salecha \u003camit.salecha@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e5ccd96110d5ac0f73b695ba606feb6d69472f26", "tree": "6178c6bc06df10664837c9589afdebf6369a9c98", "parents": [ "b914c4ea929a4ba6fb97967800dc473c31552b98" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Tue Oct 26 19:21:07 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:33 2010 -0700" }, "message": "ehea: fix use after free\n\nehea_start_xmit() dereferences skb after its freeing in ehea_xmit3() to\nget vlan tags.\n\nMove the offending block before the potential ehea_xmit3() call.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: Breno Leitao \u003cleitao@linux.vnet.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b914c4ea929a4ba6fb97967800dc473c31552b98", "tree": "630f7c81d82e580e5aa5164c0e4cf1d0dadca3ba", "parents": [ "7a2b03c5175e9ddcc2a2d48ca86dea8a88b68383" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 23:55:38 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:33 2010 -0700" }, "message": "inetpeer: __rcu annotations\n\nAdds __rcu annotations to inetpeer\n\t(struct inet_peer)-\u003eavl_left\n\t(struct inet_peer)-\u003eavl_right\n\nThis is a tedious cleanup, but removes one smp_wmb() from link_to_pool()\nsince we now use more self documenting rcu_assign_pointer().\n\nNote the use of RCU_INIT_POINTER() instead of rcu_assign_pointer() in\nall cases we dont need a memory barrier.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7a2b03c5175e9ddcc2a2d48ca86dea8a88b68383", "tree": "ccc580891d9d17e2482e2f3db2b2c8cf80bdf773", "parents": [ "b33eab08445d86c3d0dec3111ce10df561328705" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Tue Oct 26 09:24:55 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:32 2010 -0700" }, "message": "fib_rules: __rcu annotates ctarget\n\nAdds __rcu annotation to (struct fib_rule)-\u003ectarget\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b33eab08445d86c3d0dec3111ce10df561328705", "tree": "381a37141d4da9cf6cb3a8c8c37c6363d856f8e4", "parents": [ "e0ad61ec867fdd262804afa7a68e11fc9930c2b9" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 21:01:26 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:32 2010 -0700" }, "message": "tunnels: add __rcu annotations\n\nAdd __rcu annotations to :\n (struct ip_tunnel)-\u003eprl\n (struct ip_tunnel_prl_entry)-\u003enext\n (struct xfrm_tunnel)-\u003enext\n\tstruct xfrm_tunnel *tunnel4_handlers\n\tstruct xfrm_tunnel *tunnel64_handlers\n\nAnd use appropriate rcu primitives to reduce sparse warnings if\nCONFIG_SPARSE_RCU_POINTER\u003dy\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "e0ad61ec867fdd262804afa7a68e11fc9930c2b9", "tree": "f59451cdfa2086757e55b18b87167b0fef3de2c1", "parents": [ "1c31720a74e19bb57f301350a3b03210fa2ba9e3" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 21:02:28 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:31 2010 -0700" }, "message": "net: add __rcu annotations to protocol\n\nAdd __rcu annotations to :\n struct net_protocol *inet_protos\n struct net_protocol *inet6_protos\n\nAnd use appropriate casts to reduce sparse warnings if\nCONFIG_SPARSE_RCU_POINTER\u003dy\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1c31720a74e19bb57f301350a3b03210fa2ba9e3", "tree": "053f29ffa53383eb003ac632971f31e1643ef1d9", "parents": [ "c1b60092cf307fef12f793abf7cf8167e26a6ccf" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 21:02:07 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:31 2010 -0700" }, "message": "ipv4: add __rcu annotations to routes.c\n\nAdd __rcu annotations to :\n (struct dst_entry)-\u003ert_next\n (struct rt_hash_bucket)-\u003echain\n\nAnd use appropriate rcu primitives to reduce sparse warnings if\nCONFIG_SPARSE_RCU_POINTER\u003dy\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c1b60092cf307fef12f793abf7cf8167e26a6ccf", "tree": "c2dc4b94b2f2ba1423c1d7252677b9ce9c141518", "parents": [ "f203af7088cad0845ee128bb736bd372158c3e22" ], "author": { "name": "Ron Mercer", "email": "ron.mercer@qlogic.com", "time": "Wed Oct 27 04:58:12 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:30 2010 -0700" }, "message": "qlge: bugfix: Restoring the vlan setting.\n\nSigned-off-by: Jitendra Kalsaria \u003cjitendra.kalsaria@qlogic.com\u003e\nSigned-off-by: Ron Mercer \u003cron.mercer@qlogic.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f203af7088cad0845ee128bb736bd372158c3e22", "tree": "23e8c8a9ef0ee10e9a06df0029b25f95bdffca6f", "parents": [ "853dc2e03ddd0c49885ed55c48755d2b1073122a" ], "author": { "name": "Somnath Kotur", "email": "somnath.kotur@emulex.com", "time": "Mon Oct 25 23:01:03 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:30 2010 -0700" }, "message": "be2net: Schedule/Destroy worker thread in probe()/remove() rather than open()/close()\n\nWhen async mcc compls are rcvd on an i/f that is down (and so interrupts are disabled)\nthey just lie unprocessed in the compl queue.The compl queue can eventually get filled\nup and cause the BE to lock up.The fix is to use be_worker to reap mcc compls when the\ni/f is down.be_worker is now launched in be_probe() and canceled in be_remove().\n\nSigned-off-by: Somnath Kotur \u003csomnath.kotur@emulex.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "853dc2e03ddd0c49885ed55c48755d2b1073122a", "tree": "04269eb6d7e502ee4db2b3658b0eef22c67d34eb", "parents": [ "66c68bcc489fadd4f5e8839e966e3a366e50d1d5" ], "author": { "name": "Ursula Braun", "email": "ursula.braun@de.ibm.com", "time": "Sun Oct 24 23:06:43 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:30 2010 -0700" }, "message": "ipv6: fix refcnt problem related to POSTDAD state\n\nAfter running this bonding setup script\n modprobe bonding miimon\u003d100 mode\u003d0 max_bonds\u003d1\n ifconfig bond0 10.1.1.1/16\n ifenslave bond0 eth1\n ifenslave bond0 eth3\non s390 with qeth-driven slaves, modprobe -r fails with this message\n unregister_netdevice: waiting for bond0 to become free. Usage count \u003d 1\ndue to twice detection of duplicate address.\nProblem is caused by a missing decrease of ifp-\u003erefcnt in addrconf_dad_failure.\nAn extra call of in6_ifa_put(ifp) solves it.\nProblem has been introduced with commit f2344a131bccdbfc5338e17fa71a807dee7944fa.\n\nSigned-off-by: Ursula Braun \u003cursula.braun@de.ibm.com\u003e\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nAcked-by: Herbert Xu \u003cherbert@gondor.apana.org.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "66c68bcc489fadd4f5e8839e966e3a366e50d1d5", "tree": "3491719cf7988e7ef11735ed64223a5fb386f2c6", "parents": [ "af1905dbec44445d75851996819ac2203670bd0f" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Fri Oct 22 04:38:26 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:29 2010 -0700" }, "message": "net: NETIF_F_HW_CSUM does not imply FCoE CRC offload\n\nNETIF_F_HW_CSUM indicates the ability to update an TCP/IP-style 16-bit\nchecksum with the checksum of an arbitrary part of the packet data,\nwhereas the FCoE CRC is something entirely different.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nCc: stable@kernel.org [2.6.32+]\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "af1905dbec44445d75851996819ac2203670bd0f", "tree": "0b34c62feeda057f5cb7233875b2b14b4228b2f1", "parents": [ "cd0ea2419544cfc4ccbf8ee0087d0d9f109852d2" ], "author": { "name": "Ben Hutchings", "email": "bhutchings@solarflare.com", "time": "Fri Oct 22 04:12:19 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:29 2010 -0700" }, "message": "net: Fix some corner cases in dev_can_checksum()\n\ndev_can_checksum() incorrectly returns true in these cases:\n\n1. The skb has both out-of-band and in-band VLAN tags and the device\n supports checksum offload for the encapsulated protocol but only with\n one layer of encapsulation.\n2. The skb has a VLAN tag and the device supports generic checksumming\n but not in conjunction with VLAN encapsulation.\n\nRearrange the VLAN tag checks to avoid these.\n\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "cd0ea2419544cfc4ccbf8ee0087d0d9f109852d2", "tree": "13f9f62dd9583170d1b93259b7ee1393ad9bc9ba", "parents": [ "7a876b0efcba3804da3051313445fa7be751cab7" ], "author": { "name": "Jarek Poplawski", "email": "jarkao2@gmail.com", "time": "Tue Oct 19 00:06:36 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Oct 27 11:37:28 2010 -0700" }, "message": "gianfar: Fix crashes on RX path (Was Re: [Bugme-new] [Bug 19692] New: linux-2.6.36-rc5 crash with gianfar ethernet at full line rate traffic)\n\nThe rx_recycle queue is global per device but can be accesed by many\nnapi handlers at the same time, so it needs full skb_queue primitives\n(with locking). Otherwise, various crashes caused by broken skbs are\npossible.\n\nThis patch resolves, at least partly, bugzilla bug 19692. (Because of\nsome doubts that there could be still something around which is hard\nto reproduce my proposal is to leave this bug opened for a month.)\n\nFixes commit: 0fd56bb5be6455d0d42241e65aed057244665e5e (\"gianfar: Add\nsupport for skb recycling\")\n\nReported-by: emin ak \u003ceminak71@gmail.com\u003e\nTested-by: emin ak \u003ceminak71@gmail.com\u003e\nSigned-off-by: Jarek Poplawski \u003cjarkao2@gmail.com\u003e\nCC: Andy Fleming \u003cafleming@freescale.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7a876b0efcba3804da3051313445fa7be751cab7", "tree": "2135dfa1c8ffa8807e831d0817f49a31caf22cc2", "parents": [ "aed65501e8c072b52c5b4dc807cd938659329673" ], "author": { "name": "Glenn Wurster", "email": "gwurster@scs.carleton.ca", "time": "Mon Sep 27 07:10:10 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 12:35:13 2010 -0700" }, "message": "IPv6: Temp addresses are immediately deleted.\n\nThere is a bug in the interaction between ipv6_create_tempaddr and\naddrconf_verify. Because ipv6_create_tempaddr uses the cstamp and tstamp\nfrom the public address in creating a private address, if we have not\nreceived a router advertisement in a while, tstamp + temp_valid_lft might be\n\u003c now. If this happens, the new address is created inside\nipv6_create_tempaddr, then the loop within addrconf_verify starts again and\nthe address is immediately deleted. We are left with no temporary addresses\non the interface, and no more will be created until the public IP address is\nupdated. To avoid this, set the expiry time to be the minimum of the time\nleft on the public address or the config option PLUS the current age of the\npublic interface.\n\nSigned-off-by: Glenn Wurster \u003cgwurster@scs.carleton.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "aed65501e8c072b52c5b4dc807cd938659329673", "tree": "c604168d37323a2ca02faee256cb0d21e9ccf578", "parents": [ "ded85aa86bff953190cb893fceeecaadcab53a80" ], "author": { "name": "Glenn Wurster", "email": "gwurster@scs.carleton.ca", "time": "Mon Sep 27 07:04:30 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 12:35:12 2010 -0700" }, "message": "IPv6: Create temporary address if none exists.\n\nIf privacy extentions are enabled, but no current temporary address exists,\nthen create one when we get a router advertisement.\n\nSigned-off-by: Glenn Wurster \u003cgwurster@scs.carleton.ca\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ded85aa86bff953190cb893fceeecaadcab53a80", "tree": "abbb2c614d4b1778c2afc34038ac06e0aac14381", "parents": [ "ebb9fed2defa55f2ca91c8be582c59612e9940d1" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Tue Oct 26 03:24:16 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 11:42:39 2010 -0700" }, "message": "fib_hash: fix rcu sparse and logical errors\n\nWhile fixing CONFIG_SPARSE_RCU_POINTER errors, I had to fix accesses to\nfz-\u003efz_hash for real.\n\n-\t\u0026fz-\u003efz_hash[fn_hash(f-\u003efn_key, fz)]\n+\trcu_dereference(fz-\u003efz_hash) + fn_hash(f-\u003efn_key, fz)\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ebb9fed2defa55f2ca91c8be582c59612e9940d1", "tree": "00c749fb425cc1c30222d9911017849861ed2627", "parents": [ "1941bf8c8d9392b18cd9bfed8050a2d78850aede" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sat Oct 23 09:44:25 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 11:42:38 2010 -0700" }, "message": "fib: fix fib_nl_newrule()\n\nSome panic reports in fib_rules_lookup() show a rule could have a NULL\npointer as a next pointer in the rules_list.\n\nThis can actually happen because of a bug in fib_nl_newrule() : It\nchecks if current rule is the destination of unresolved gotos. (Other\nrules have gotos to this about to be inserted rule)\n\nProblem is it does the resolution of the gotos before the rule is\ninserted in the rules_list (and has a valid next pointer)\n\nFix this by moving the rules_list insertion before the changes on gotos.\n\nA lockless reader can not any more follow a ctarget pointer, unless\ndestination is ready (has a valid next pointer)\n\nReported-by: Oleg A. Arkhangelsky \u003csysoleg@yandex.ru\u003e\nReported-by: Joe Buehler \u003caspam@cox.net\u003e\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1941bf8c8d9392b18cd9bfed8050a2d78850aede", "tree": "4bee36e7713772fd39b790ddc69f12b5bd0e1225", "parents": [ "f2dc0d1809ab7e0147c7e4ac837be1682f706538" ], "author": { "name": "Joe Perches", "email": "joe@perches.com", "time": "Mon Oct 25 16:44:20 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 11:35:37 2010 -0700" }, "message": "drivers/atm/eni.c: Remove multiple uses of KERN_\u003clevel\u003e\n\nSigned-off-by: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f2dc0d1809ab7e0147c7e4ac837be1682f706538", "tree": "1b97e8fda5b7893cf3e227f091b91c92e8cc8334", "parents": [ "78fd9c4491a9c4cf8b401f1c5a516d3d28d3b42b" ], "author": { "name": "Rafael J. Wysocki", "email": "rjw@sisk.pl", "time": "Mon Oct 25 13:01:55 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 11:34:09 2010 -0700" }, "message": "tg3: Do not call device_set_wakeup_enable() under spin_lock_bh\n\nThe tg3 driver calls device_set_wakeup_enable() under spin_lock_bh,\nwhich causes a problem to happen after the recent core power\nmanagement changes, because this function can sleep now. Fix this\nby moving the device_set_wakeup_enable() call out of the\nspin_lock_bh-protected area.\n\nReported-by: Maxim Levitsky \u003cmaximlevitsky@gmail.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "78fd9c4491a9c4cf8b401f1c5a516d3d28d3b42b", "tree": "aa65a89a09cd28f7b305c4f27a47903996b5b365", "parents": [ "b9958a951ed4f8adff9ce02c2b1cb4ede8e2aa0e", "822395b591db32ad3cf8a5b57b0fe30fb8d12c37" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 11:32:28 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 11:32:28 2010 -0700" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6\n" }, { "commit": "b9958a951ed4f8adff9ce02c2b1cb4ede8e2aa0e", "tree": "e4769a1ceb27ec5c48fa4f3a398ea00d13333a8a", "parents": [ "9a27586d3d5c3157260b055d057c6f4f6654c72c" ], "author": { "name": "Marc Kleine-Budde", "email": "mkl@pengutronix.de", "time": "Thu Oct 21 06:37:10 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 10:48:59 2010 -0700" }, "message": "can: mcp251x: fix reception of standard RTR frames\n\nThis patch sets the missing CAN_RTR_FLAG if a standard RTR frame is\nreceived.\n(For extended frames the CAN_RTR_FLAG was already set correctly.)\n\nSigned-off-by: Marc Kleine-Budde \u003cmkl@pengutronix.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9a27586d3d5c3157260b055d057c6f4f6654c72c", "tree": "27ac8230bde3a11881795acedc7b4c44671a8fbe", "parents": [ "06d6e6d2e4ef61172f342fddeea5cfa465d81578" ], "author": { "name": "Marc Kleine-Budde", "email": "mkl@pengutronix.de", "time": "Thu Oct 21 05:07:58 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 10:48:58 2010 -0700" }, "message": "can: flexcan: fix use after free of priv\n\nThe priv is part of the memory allocated by alloc_candev().\nThis patch moved the free it after last usage of priv.\n\nSigned-off-by: Marc Kleine-Budde \u003cmkl@pengutronix.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "06d6e6d2e4ef61172f342fddeea5cfa465d81578", "tree": "d16add332aa264a1f60fd48302d1f2d07981fcb5", "parents": [ "7932c2e55c707350ac166effea2f49afe2e47400" ], "author": { "name": "Nicolas Kaiser", "email": "nikai@nikai.net", "time": "Tue Oct 26 10:02:13 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 10:02:13 2010 -0700" }, "message": "drivers/net: sgiseeq: fix return on error\n\nIf we continue on error, we\u0027d likely free the IRQ that we\ndidn\u0027t get, right?\n\nSigned-off-by: Nicolas Kaiser \u003cnikai@nikai.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7932c2e55c707350ac166effea2f49afe2e47400", "tree": "875bba102f539fc138c4d8979e620f02d5c8ed07", "parents": [ "10d8c4638c5a797baad5846a3447c0ccca8986a3" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 09:08:53 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Oct 26 09:08:53 2010 -0700" }, "message": "netfilter: Add missing CONFIG_SYSCTL checks in ipv6\u0027s nf_conntrack_reasm.c\n\nReported-by: Randy Dunlap \u003crandy.dunlap@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "10d8c4638c5a797baad5846a3447c0ccca8986a3", "tree": "77d173b74329a25d065188799828e0d8cfbd6fbe", "parents": [ "43a951e9994fd218ab4e641f94a2fc53556c3675" ], "author": { "name": "Randy Dunlap", "email": "randy.dunlap@oracle.com", "time": "Mon Oct 25 16:47:36 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 16:47:36 2010 -0700" }, "message": "pch_can: depends on PCI\n\nFix pch_can build when CONFIG_PCI is not enabled. It uses pci interfaces\nand data structures, so it should depend on PCI.\n\ndrivers/net/can/pch_can.c:1044: error: implicit declaration of function \u0027pci_enable_msi\u0027\ndrivers/net/can/pch_can.c:1079: error: implicit declaration of function \u0027pci_disable_msi\u0027\n\nSigned-off-by: Randy Dunlap \u003crandy.dunlap@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "43a951e9994fd218ab4e641f94a2fc53556c3675", "tree": "497fe39185131f1d729c980c264562ff5cab86e8", "parents": [ "0d7da9ddd9a4eb7808698d04b98bf9d62d02649b" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 03:32:44 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 14:18:28 2010 -0700" }, "message": "ipv4: add __rcu annotations to ip_ra_chain\n\nAdd __rcu annotations to :\n (struct ip_ra_chain)-\u003enext\n\tstruct ip_ra_chain *ip_ra_chain;\n\nAnd use appropriate rcu primitives.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0d7da9ddd9a4eb7808698d04b98bf9d62d02649b", "tree": "b170122c08d47be35a056782be54573ba19fe0b0", "parents": [ "1c87733d0682547050ccccb400cdac425fa43b39" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 03:47:05 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 14:18:28 2010 -0700" }, "message": "net: add __rcu annotation to sk_filter\n\nAdd __rcu annotation to :\n (struct sock)-\u003esk_filter\n\nAnd use appropriate rcu primitives to reduce sparse warnings if\nCONFIG_SPARSE_RCU_POINTER\u003dy\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "1c87733d0682547050ccccb400cdac425fa43b39", "tree": "8ec9de7722a2be0e97d9ad6a04d12fb0d298b201", "parents": [ "6e3f7faf3e8a3e226b1a6b955aac12abf2f2e1b6" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 03:20:11 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 14:18:27 2010 -0700" }, "message": "net_ns: add __rcu annotations\n\nadd __rcu annotation to (struct net)-\u003egen, and use\nrcu_dereference_protected() in net_assign_generic()\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6e3f7faf3e8a3e226b1a6b955aac12abf2f2e1b6", "tree": "a2ff2fe9f86ff561d62ceac56e8fe18d7b6f14a0", "parents": [ "f6318e558806c925029dc101f14874be9f9fa78f" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Mon Oct 25 03:02:02 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 14:18:27 2010 -0700" }, "message": "rps: add __rcu annotations\n\nAdd __rcu annotations to :\n\t(struct netdev_rx_queue)-\u003erps_map\n\t(struct netdev_rx_queue)-\u003erps_flow_table\n\tstruct rps_sock_flow_table *rps_sock_flow_table;\n\nAnd use appropriate rcu primitives.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f6318e558806c925029dc101f14874be9f9fa78f", "tree": "995a09d340c55a01a4d1b6235c3a8efea6b8a14f", "parents": [ "6f0bcf152582e7403155627a38e07bf3ef7f3cf5" ], "author": { "name": "KOVACS Krisztian", "email": "hidden@balabit.hu", "time": "Sun Oct 24 23:38:32 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 13:58:36 2010 -0700" }, "message": "netfilter: fix module dependency issues with IPv6 defragmentation, ip6tables and xt_TPROXY\n\nOne of the previous tproxy related patches split IPv6 defragmentation and\nconnection tracking, but did not correctly add Kconfig stanzas to handle the\nnew dependencies correctly. This patch fixes that by making the config options\nmirror the setup we have for IPv4: a distinct config option for defragmentation\nthat is automatically selected by both connection tracking and\nxt_TPROXY/xt_socket.\n\nThe patch also changes the #ifdefs enclosing IPv6 specific code in xt_socket\nand xt_TPROXY: we only compile these in case we have ip6tables support enabled.\n\nSigned-off-by: KOVACS Krisztian \u003chidden@balabit.hu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "6f0bcf152582e7403155627a38e07bf3ef7f3cf5", "tree": "0dafb9ea61fa01bb8850ee2bcce97b98c23a7c8f", "parents": [ "3cc77ec74e1583b50b8405114cdbd6b8ebb8c474" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sun Oct 24 21:33:16 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 13:09:45 2010 -0700" }, "message": "tunnels: add _rcu annotations\n\n(struct ip6_tnl)-\u003enext is rcu protected :\n(struct ip_tunnel)-\u003enext is rcu protected :\n(struct xfrm6_tunnel)-\u003enext is rcu protected :\n\nadd __rcu annotation and proper rcu primitives.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3cc77ec74e1583b50b8405114cdbd6b8ebb8c474", "tree": "3f45e2ddfc224edd166b1cdc79ddff62532b4c7d", "parents": [ "198caeca3eb4c81bbdbeb34a870868002f89b3d2" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sun Oct 24 21:32:36 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 13:09:44 2010 -0700" }, "message": "net/802: add __rcu annotations\n\n(struct net_device)-\u003egarp_port is rcu protected :\n(struct garp_port)-\u003eapplicants is rcu protected :\n\nadd __rcu annotation and proper rcu primitives.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "198caeca3eb4c81bbdbeb34a870868002f89b3d2", "tree": "ac2c01e12b71c3a88a8b2d6b86151b618878af1a", "parents": [ "b616b09afabf6d569aa31176aa86f05d2586de3e" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sun Oct 24 21:32:05 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 13:09:43 2010 -0700" }, "message": "ipv6: ip6_ptr rcu annotations\n\n(struct net_device)-\u003eip6_ptr is rcu protected :\n\nadd __rcu annotation and proper rcu primitives.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b616b09afabf6d569aa31176aa86f05d2586de3e", "tree": "9765278f9825a612c27fea34aba0c614594b88c5", "parents": [ "5202e173d7bc5ff832a4f36e66f26e00feb343c6" ], "author": { "name": "Eric Dumazet", "email": "eric.dumazet@gmail.com", "time": "Sun Oct 24 21:31:58 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 13:09:43 2010 -0700" }, "message": "vlan: rcu annotations\n\n(struct net_device)-\u003evlgrp is rcu protected :\n\nadd __rcu annotation and proper rcu primitives.\n\nSigned-off-by: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "5202e173d7bc5ff832a4f36e66f26e00feb343c6", "tree": "cd2aa17c18842c61380e56aeb5c89aba1323e016", "parents": [ "11a766ce915fc9f8663714eac6d59239388534ea" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 13:04:48 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 13:04:48 2010 -0700" }, "message": "tms380tr: Use mdelay() in tms380tr_wait().\n\nThis driver tries to do up to half-second udelay()\ncalls, which overflows on x86-64.\n\nReported-by: Andi Kleen \u003candi@firstfloor.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "11a766ce915fc9f8663714eac6d59239388534ea", "tree": "a796626038d96d9e1fdf53d94a7aecd5acc14803", "parents": [ "0926f91083f34d047abc74f1ca4fa6a9c161f7db" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 12:51:55 2010 -0700" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 12:51:55 2010 -0700" }, "message": "net: Increase xmit RECURSION_LIMIT to 10.\n\nThree is definitely too low, and we know from reports that GRE tunnels\nstacked as deeply as 37 levels cause stack overflows, so pick some\nreasonable value between those two.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0926f91083f34d047abc74f1ca4fa6a9c161f7db", "tree": "751135348a369dcdf85100b2cc7c7f8aefb508da", "parents": [ "b336369c1e1ad88495895260a9068eb18bc48b6c" ], "author": { "name": "Eli Cohen", "email": "eli@dev.mellanox.co.il", "time": "Mon Oct 25 02:56:47 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 12:14:11 2010 -0700" }, "message": "mlx4_en: Fix out of bounds array access\n\nWhen searching for a free entry in either mlx4_register_vlan() or\nmlx4_register_mac(), and there is no free entry, the loop terminates without\nupdating the local variable free thus causing out of array bounds access. Fix\nthis by adding a proper check outside the loop.\n\nSigned-off-by: Eli Cohen \u003celi@mellanox.co.il\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b336369c1e1ad88495895260a9068eb18bc48b6c", "tree": "3ae8bbf24949584c521ac8bf0755c2eb1b970b97", "parents": [ "c6ce2f4b270cb1d4d6b6f4f692a12ca2fea13f3f" ], "author": { "name": "Joshua Hoke", "email": "Joshua.Hoke@sixnet.com", "time": "Mon Oct 25 01:44:22 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 12:14:11 2010 -0700" }, "message": "macb: Don\u0027t re-enable interrupts while in polling mode\n\nOn a busy network, the macb driver could get stuck in the interrupt\nhandler, quickly triggering the watchdog, due to a confluence of\nfactors:\n\n 1. macb_poll re-enables interrupts unconditionally, even when it will\n be called again because it exhausted its rx budget\n\n 2. macb_interrupt only disables interrupts after scheduling\n macb_poll, but scheduling fails when macb_poll is already scheduled\n because it didn\u0027t call napi_complete\n\n 3. macb_interrupt loops until the interrupt status register is clear,\n which will never happen in this case if the driver doesn\u0027t disable\n the RX interrupt\n\nSince macb_interrupt runs in interrupt context, this effectively locks\nup the machine, triggering the hardware watchdog.\n\nThis issue was readily reproducible on a flooded network with a\nmodified 2.6.27.48 kernel. The same problem appears to still be in the\n2.6.36-rc8 driver code, so I am submitting this patch against that\nversion. I have not tested this version of the patch except to make\nsure the kernel compiles.\n\nSigned-off-by: Joshua Hoke \u003cjoshua.hoke@sixnet.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c6ce2f4b270cb1d4d6b6f4f692a12ca2fea13f3f", "tree": "326fb38f70b391291d5a170c1a3888f8bba6778b", "parents": [ "63a76944b674bb758232e4213da0da95ae055012" ], "author": { "name": "Somnath Kotur", "email": "somnath.kotur@emulex.com", "time": "Mon Oct 25 01:11:58 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 12:14:10 2010 -0700" }, "message": "be2net: Fix CSO for UDP packets\n\nWe\u0027re setting skb-\u003eip_summed to CHECKSUM_NONE for all non-TCP pkts, making the stack\nrecompute checksum.This is a bug for UDP pkts for which cso must be used.\n\nSigned-off-by: Somnath Kotur \u003csomnath.kotur@emulex.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "63a76944b674bb758232e4213da0da95ae055012", "tree": "70b0389ed576a06cb193a47d15daa7b66b3bf048", "parents": [ "18edc84cf15cbe114dcdf7e8612ee52586d0aad7" ], "author": { "name": "Somnath Kotur", "email": "somnath.kotur@emulex.com", "time": "Mon Oct 25 01:11:10 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 12:14:10 2010 -0700" }, "message": "be2net: Call netif_carier_off() after register_netdev()\n\nCalling netif_carrier_off before register_netdev was causing the network interface\nto miss a linkwatch pending event leading to an inconsistent state if the link\nis not up when interface is initialized.This is now invoked after register_netdev.\n\nSigned-off-by: Somnath Kotur \u003csomnath.kotur@emulex.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "18edc84cf15cbe114dcdf7e8612ee52586d0aad7", "tree": "304d01879a6928586ac68313c54411e2185cc617", "parents": [ "e341b2ddc1e8e5ff998ac5462dc5138775d1d492" ], "author": { "name": "Divy Le Ray", "email": "divy@chelsio.com", "time": "Mon Oct 25 07:35:02 2010 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Oct 25 12:14:09 2010 -0700" }, "message": "cxgb3: fix device opening error path\n\nOnly negative return from bind_qsets() should be considered an error and\npropagated.\nIt fixes an issue reported by IBM on P Series platform.\n\nSigned-off-by: Divy Le Ray \u003cdivy@chelsio.com\u003e\nTested-by: Nishanth Aravamudan \u003cnacc@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "822395b591db32ad3cf8a5b57b0fe30fb8d12c37", "tree": "335506c09a2e17a6ab677fb9b32e8e2c854bb8e8", "parents": [ "fac6b6a065da42f826088c58bddad82e1b1ccb40" ], "author": { "name": "Don Fry", "email": "donald.h.fry@intel.com", "time": "Sat Oct 23 09:02:50 2010 -0700" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon Oct 25 14:45:56 2010 -0400" }, "message": "iwlwifi: quiet a noisy printk\n\nTiming issues in microcode for some devices can cause a compressed BA to\nbe sent to the driver prior to returning any a-MPDU notification.\nTraces show RTS-CTS is exchanged and then the timer fires which causes an\nempty BA to be sent which acknowledges nothing. This results in a noisy\nprintk. Only print the message if the bitmap is non-zero.\n\nSigned-off-by: Don Fry \u003cdonald.h.fry@intel.com\u003e\nSigned-off-by: Wey-Yi Guy \u003cwey-yi.w.guy@intel.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "fac6b6a065da42f826088c58bddad82e1b1ccb40", "tree": "75ba2bfb626d24615adb77ff9ffee931006c2238", "parents": [ "dafeac387d7f10d12d4fa9cc626af43c805540f7" ], "author": { "name": "Felix Fietkau", "email": "nbd@openwrt.org", "time": "Sat Oct 23 17:45:38 2010 +0200" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon Oct 25 14:45:56 2010 -0400" }, "message": "ath9k: resume aggregation immediately after a hardware reset\n\nSince aggregation is usually triggered by tx completion, a hardware\nreset (because of beacon stuck, tx hang or baseband hang) can\nsignificantly delay the transmission of the next AMPDU (until the next\ntx completion event).\nFix this by rescheduling aggregation after such a reset.\n\nSigned-off-by: Felix Fietkau \u003cnbd@openwrt.org\u003e\nCc: stable@kernel.org\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "dafeac387d7f10d12d4fa9cc626af43c805540f7", "tree": "263ab2bc2c5fbf20780cf85cbaab8adc21471206", "parents": [ "c8716d9dc13c7f6ee92f2bfc6cc3b723b417bff8" ], "author": { "name": "Christian Lamparter", "email": "chunkeey@googlemail.com", "time": "Sat Oct 23 15:02:02 2010 +0200" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon Oct 25 14:45:56 2010 -0400" }, "message": "carl9170: fix scheduling while atomic\n\nThis patch fixes the following mishap:\n\nBUG: scheduling while atomic: wpa_supplicant/4164/0x00000002\nModules linked in: carl9170 mac80211 [...]\nPid: 4164, comm: wpa_supplicant Not tainted 2.6.36-wl+ #119\nCall Trace:\n [\u003cc13779a9\u003e] ? schedule+0x349/0x4c0\n [\u003cc13780d6\u003e] ? schedule_timeout+0x106/0x1e0\n [\u003cc1037f50\u003e] ? process_timeout+0x0/0x10\n [\u003cc1377e8d\u003e] ? wait_for_common+0x9d/0x140\n [\u003cc1029110\u003e] ? default_wake_function+0x0/0x10\n [\u003cf80c6080\u003e] ? carl9170_exec_cmd+0xf0/0x250 [carl9170]\n [\u003cf80c695e\u003e] ? carl9170_set_mac_reg+0x5e/0x70 [carl9170]\n [\u003cf80c3f76\u003e] ? carl9170_op_add_interface+0x176/0x310 [carl9170]\n [...]\n\nrcu_read_unlock() call was erroneously placed after the\nsync. function carl9170_mod_virtual_mac.\n\nSigned-off-by: Christian Lamparter \u003cchunkeey@googlemail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "c8716d9dc13c7f6ee92f2bfc6cc3b723b417bff8", "tree": "3714709813e4e529de7210cb679d1e34b20a59d9", "parents": [ "30115c2252fcf9d21aae029ff0e27f4cc962ef44" ], "author": { "name": "Rajkumar Manoharan", "email": "rmanoharan@atheros.com", "time": "Sat Oct 23 10:59:57 2010 +0530" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon Oct 25 14:45:56 2010 -0400" }, "message": "mac80211: Fix ibss station got expired immediately\n\nStation addition in ieee80211_ibss_rx_queued_mgmt is not updating\nsta-\u003elast_rx which is causing station expiry in ieee80211_ibss_work\npath. So sta addition and deletion happens repeatedly.\n\nCC: stable@kernel.org\nSigned-off-by: Rajkumar Manoharan \u003crmanoharan@atheros.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" }, { "commit": "30115c2252fcf9d21aae029ff0e27f4cc962ef44", "tree": "423201e1d14b50b66dff80b7a79cd2a1e3ad3258", "parents": [ "04348f2732a067c75da22413f9d341e29b46c7ae" ], "author": { "name": "Rafał Miłecki", "email": "zajec5@gmail.com", "time": "Fri Oct 22 17:43:45 2010 +0200" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Mon Oct 25 14:45:55 2010 -0400" }, "message": "b43: N-PHY: fix infinite-loop-typo\n\nSigned-off-by: Rafał Miłecki \u003czajec5@gmail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n" } ], "next": "04348f2732a067c75da22413f9d341e29b46c7ae" }