)]}' { "log": [ { "commit": "ea2ebaa71c978254c2a93bf561236aec8a167166", "tree": "5b93e476cf4b8c33122821762ed17b0298ac8926", "parents": [ "05aa0d1bc94e2809ec0ccb4be20860784e4640b1" ], "author": { "name": "Colin Cross", "email": "ccross@android.com", "time": "Fri Jul 20 02:03:43 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:06 2012 -0700" }, "message": "ARM: 7476/1: vfp: only clear vfp state for current cpu in vfp_pm_suspend\n\ncommit a84b895a2348f0dbff31b71ddf954f70a6cde368 upstream.\n\nvfp_pm_suspend runs on each cpu, only clear the hardware state\npointer for the current cpu. Prevents a possible crash if one\ncpu clears the hw state pointer when another cpu has already\nchecked if it is valid.\n\nSigned-off-by: Colin Cross \u003cccross@android.com\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "05aa0d1bc94e2809ec0ccb4be20860784e4640b1", "tree": "a5793c18831793b3a880167ba8db26564bae9be0", "parents": [ "ce6f0ff8d1031931df7031a88f4085e5f196a854" ], "author": { "name": "Shawn Guo", "email": "shawn.guo@linaro.org", "time": "Fri Jul 13 08:19:34 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:05 2012 -0700" }, "message": "ARM: 7466/1: disable interrupt before spinning endlessly\n\ncommit 98bd8b96b26db3399a48202318dca4aaa2515355 upstream.\n\nThe CPU will endlessly spin at the end of machine_halt and\nmachine_restart calls. However, this will lead to a soft lockup\nwarning after about 20 seconds, if CONFIG_LOCKUP_DETECTOR is enabled,\nas system timer is still alive.\n\nDisable interrupt before going to spin endlessly, so that the lockup\nwarning will never be seen.\n\nReported-by: Marek Vasut \u003cmarex@denx.de\u003e\nSigned-off-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\nSigned-off-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ce6f0ff8d1031931df7031a88f4085e5f196a854", "tree": "a7966b18420dd6054df99777f9b79beb373030c0", "parents": [ "603cb88c3a73968a0fa498e252cbb781e62bb5b4" ], "author": { "name": "Joonsoo Kim", "email": "js1304@gmail.com", "time": "Mon Jul 30 14:39:04 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:05 2012 -0700" }, "message": "mm: fix wrong argument of migrate_huge_pages() in soft_offline_huge_page()\n\ncommit dc32f63453f56d07a1073a697dcd843dd3098c09 upstream.\n\nCommit a6bc32b89922 (\"mm: compaction: introduce sync-light migration for\nuse by compaction\") changed the declaration of migrate_pages() and\nmigrate_huge_pages().\n\nBut it missed changing the argument of migrate_huge_pages() in\nsoft_offline_huge_page(). In this case, we should call\nmigrate_huge_pages() with MIGRATE_SYNC.\n\nAdditionally, there is a mismatch between type the of argument and the\nfunction declaration for migrate_pages().\n\nSigned-off-by: Joonsoo Kim \u003cjs1304@gmail.com\u003e\nCc: Christoph Lameter \u003ccl@linux.com\u003e\nCc: Mel Gorman \u003cmgorman@suse.de\u003e\nAcked-by: David Rientjes \u003crientjes@google.com\u003e\nCc: \"Aneesh Kumar K.V\" \u003caneesh.kumar@linux.vnet.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "603cb88c3a73968a0fa498e252cbb781e62bb5b4", "tree": "de870673ebb15ced26e5e64e9b003d1ee6561661", "parents": [ "246dec1d5b521ad2cece0a4ea57a59dca2e3cf38" ], "author": { "name": "Greg Pearson", "email": "greg.pearson@hp.com", "time": "Mon Jul 30 14:39:05 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:05 2012 -0700" }, "message": "pcdp: use early_ioremap/early_iounmap to access pcdp table\n\ncommit 6c4088ac3a4d82779903433bcd5f048c58fb1aca upstream.\n\nefi_setup_pcdp_console() is called during boot to parse the HCDP/PCDP\nEFI system table and setup an early console for printk output. The\nroutine uses ioremap/iounmap to setup access to the HCDP/PCDP table\ninformation.\n\nThe call to ioremap is happening early in the boot process which leads\nto a panic on x86_64 systems:\n\n panic+0x01ca\n do_exit+0x043c\n oops_end+0x00a7\n no_context+0x0119\n __bad_area_nosemaphore+0x0138\n bad_area_nosemaphore+0x000e\n do_page_fault+0x0321\n page_fault+0x0020\n reserve_memtype+0x02a1\n __ioremap_caller+0x0123\n ioremap_nocache+0x0012\n efi_setup_pcdp_console+0x002b\n setup_arch+0x03a9\n start_kernel+0x00d4\n x86_64_start_reservations+0x012c\n x86_64_start_kernel+0x00fe\n\nThis replaces the calls to ioremap/iounmap in efi_setup_pcdp_console()\nwith calls to early_ioremap/early_iounmap which can be called during\nearly boot.\n\nThis patch was tested on an x86_64 prototype system which uses the\nHCDP/PCDP table for early console setup.\n\nSigned-off-by: Greg Pearson \u003cgreg.pearson@hp.com\u003e\nAcked-by: Khalid Aziz \u003ckhalid.aziz@hp.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "246dec1d5b521ad2cece0a4ea57a59dca2e3cf38", "tree": "a17fd27759edb47f607dda6619a1838850887305", "parents": [ "d7c61cba59ebdb18ebe357b7952f61e4100c2d92" ], "author": { "name": "Luis Henriques", "email": "luis.henriques@canonical.com", "time": "Tue Jun 19 11:29:49 2012 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:05 2012 -0700" }, "message": "media: ene_ir: Fix driver initialisation\n\ncommit b31b021988fed9e3741a46918f14ba9b063811db upstream.\n\ncommit 9ef449c6b31bb6a8e6dedc24de475a3b8c79be20 (\"[media] rc: Postpone ISR\nregistration\") fixed an early ISR registration on several drivers. It did\nhowever also introduced a bug by moving the invocation of pnp_port_start()\nto the end of the probe function.\n\nThis patch fixes this issue by moving the invocation of pnp_port_start() to\nan earlier stage in the probe function.\n\nSigned-off-by: Luis Henriques \u003cluis.henriques@canonical.com\u003e\nCc: Jarod Wilson \u003cjarod@redhat.com\u003e\nSigned-off-by: Mauro Carvalho Chehab \u003cmchehab@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d7c61cba59ebdb18ebe357b7952f61e4100c2d92", "tree": "3d4dd29b85dbe5ab424ffa4378594e447f4f1aba", "parents": [ "d281dc7448010256bf2e23a65e10a4f6fc786284" ], "author": { "name": "Ryusuke Konishi", "email": "konishi.ryusuke@lab.ntt.co.jp", "time": "Mon Jul 30 14:42:07 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:05 2012 -0700" }, "message": "nilfs2: fix deadlock issue between chcp and thaw ioctls\n\ncommit 572d8b3945a31bee7c40d21556803e4807fd9141 upstream.\n\nAn fs-thaw ioctl causes deadlock with a chcp or mkcp -s command:\n\n chcp D ffff88013870f3d0 0 1325 1324 0x00000004\n ...\n Call Trace:\n nilfs_transaction_begin+0x11c/0x1a0 [nilfs2]\n wake_up_bit+0x20/0x20\n copy_from_user+0x18/0x30 [nilfs2]\n nilfs_ioctl_change_cpmode+0x7d/0xcf [nilfs2]\n nilfs_ioctl+0x252/0x61a [nilfs2]\n do_page_fault+0x311/0x34c\n get_unmapped_area+0x132/0x14e\n do_vfs_ioctl+0x44b/0x490\n __set_task_blocked+0x5a/0x61\n vm_mmap_pgoff+0x76/0x87\n __set_current_blocked+0x30/0x4a\n sys_ioctl+0x4b/0x6f\n system_call_fastpath+0x16/0x1b\n thaw D ffff88013870d890 0 1352 1351 0x00000004\n ...\n Call Trace:\n rwsem_down_failed_common+0xdb/0x10f\n call_rwsem_down_write_failed+0x13/0x20\n down_write+0x25/0x27\n thaw_super+0x13/0x9e\n do_vfs_ioctl+0x1f5/0x490\n vm_mmap_pgoff+0x76/0x87\n sys_ioctl+0x4b/0x6f\n filp_close+0x64/0x6c\n system_call_fastpath+0x16/0x1b\n\nwhere the thaw ioctl deadlocked at thaw_super() when called while chcp was\nwaiting at nilfs_transaction_begin() called from\nnilfs_ioctl_change_cpmode(). This deadlock is 100% reproducible.\n\nThis is because nilfs_ioctl_change_cpmode() first locks sb-\u003es_umount in\nread mode and then waits for unfreezing in nilfs_transaction_begin(),\nwhereas thaw_super() locks sb-\u003es_umount in write mode. The locking of\nsb-\u003es_umount here was intended to make snapshot mounts and the downgrade\nof snapshots to checkpoints exclusive.\n\nThis fixes the deadlock issue by replacing the sb-\u003es_umount usage in\nnilfs_ioctl_change_cpmode() with a dedicated mutex which protects snapshot\nmounts.\n\nSigned-off-by: Ryusuke Konishi \u003ckonishi.ryusuke@lab.ntt.co.jp\u003e\nCc: Fernando Luis Vazquez Cao \u003cfernando@oss.ntt.co.jp\u003e\nTested-by: Ryusuke Konishi \u003ckonishi.ryusuke@lab.ntt.co.jp\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d281dc7448010256bf2e23a65e10a4f6fc786284", "tree": "424581752457e5ba30cd92bbe3746d8b03765c80", "parents": [ "613975f7a65f75b6e720bfca721d2d99542c53b8" ], "author": { "name": "Stanislav Kinsbursky", "email": "skinsbursky@parallels.com", "time": "Fri Jul 20 15:57:48 2012 +0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:05 2012 -0700" }, "message": "SUNRPC: return negative value in case rpcbind client creation error\n\ncommit caea33da898e4e14f0ba58173e3b7689981d2c0b upstream.\n\nWithout this patch kernel will panic on LockD start, because lockd_up() checks\nlockd_up_net() result for negative value.\nFrom my pow it\u0027s better to return negative value from rpcbind routines instead\nof replacing all such checks like in lockd_up().\n\nSigned-off-by: Stanislav Kinsbursky \u003cskinsbursky@parallels.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "613975f7a65f75b6e720bfca721d2d99542c53b8", "tree": "bb5d6b7ed75bb03b05ce36d76514f7f056c37800", "parents": [ "88cdb96565315a7e127a1fcd6a8e2d1374be9aa2" ], "author": { "name": "Joe Perches", "email": "joe@perches.com", "time": "Wed Jul 18 11:17:11 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:04 2012 -0700" }, "message": "sunrpc: clnt: Add missing braces\n\ncommit cac5d07e3ca696dcacfb123553cf6c722111cfd3 upstream.\n\nAdd a missing set of braces that commit 4e0038b6b24\n(\"SUNRPC: Move clnt-\u003ecl_server into struct rpc_xprt\")\nforgot.\n\nSigned-off-by: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "88cdb96565315a7e127a1fcd6a8e2d1374be9aa2", "tree": "5f2971f38e7bc8f1656f4a51f533b46fd556cdd9", "parents": [ "5eaac83b7362a1944afde7e867e53c7135e36d68" ], "author": { "name": "Alex Hung", "email": "alex.hung@canonical.com", "time": "Wed Jun 20 11:47:35 2012 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:04 2012 -0700" }, "message": "asus-wmi: use ASUS_WMI_METHODID_DSTS2 as default DSTS ID.\n\ncommit 63a78bb1051b240417daad3a3fa9c1bb10646dca upstream.\n\nAccording to responses from the BIOS team, ASUS_WMI_METHODID_DSTS2\n(0x53545344) will be used as future DSTS ID. In addition, calling\nasus_wmi_evaluate_method(ASUS_WMI_METHODID_DSTS2, 0, 0, NULL) returns\nASUS_WMI_UNSUPPORTED_METHOD in new ASUS laptop PCs. This patch fixes\nno DSTS ID will be assigned in this case.\n\nSigned-off-by: Alex Hung \u003calex.hung@canonical.com\u003e\nSigned-off-by: Matthew Garrett \u003cmjg@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "5eaac83b7362a1944afde7e867e53c7135e36d68", "tree": "8c3de8082f3243f2f3f4d5f57a85f2b2a1061786", "parents": [ "8067fa23092f2c4e18c29c90f7d5bb765dbf8954" ], "author": { "name": "Tony Luck", "email": "tony.luck@intel.com", "time": "Thu Jul 26 10:55:26 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Wed Aug 15 08:10:04 2012 -0700" }, "message": "Redefine ATOMIC_INIT and ATOMIC64_INIT to drop the casts\n\ncommit a119365586b0130dfea06457f584953e0ff6481d upstream.\n\nThe following build error occured during a ia64 build with\nswap-over-NFS patches applied.\n\nnet/core/sock.c:274:36: error: initializer element is not constant\nnet/core/sock.c:274:36: error: (near initialization for \u0027memalloc_socks\u0027)\nnet/core/sock.c:274:36: error: initializer element is not constant\n\nThis is identical to a parisc build error. Fengguang Wu, Mel Gorman\nand James Bottomley did all the legwork to track the root cause of\nthe problem. This fix and entire commit log is shamelessly copied\nfrom them with one extra detail to change a dubious runtime use of\nATOMIC_INIT() to atomic_set() in drivers/char/mspec.c\n\nDave Anglin says:\n\u003e Here is the line in sock.i:\n\u003e\n\u003e struct static_key memalloc_socks \u003d ((struct static_key) { .enabled \u003d\n\u003e ((atomic_t) { (0) }) });\n\nThe above line contains two compound literals. It also uses a designated\ninitializer to initialize the field enabled. A compound literal is not a\nconstant expression.\n\nThe location of the above statement isn\u0027t fully clear, but if a compound\nliteral occurs outside the body of a function, the initializer list must\nconsist of constant expressions.\n\nSigned-off-by: Tony Luck \u003ctony.luck@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "8067fa23092f2c4e18c29c90f7d5bb765dbf8954", "tree": "71ab3065290a7d78e63d422a104d49d27f133bac", "parents": [ "b3f9576e98e0dfb4f9be87618da4c5f6e8640ee0" ], "author": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:32:11 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:32:11 2012 -0700" }, "message": "Linux 3.4.8\n" }, { "commit": "b3f9576e98e0dfb4f9be87618da4c5f6e8640ee0", "tree": "b405d58aa1c728d27de5b7d08acbe48c756f5d9f", "parents": [ "47b6ff731a701d898c732e2f2dd67c5178fc0960" ], "author": { "name": "Darren Hart", "email": "dvhart@linux.intel.com", "time": "Fri Jul 20 11:53:31 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:53 2012 -0700" }, "message": "futex: Forbid uaddr \u003d\u003d uaddr2 in futex_wait_requeue_pi()\n\ncommit 6f7b0a2a5c0fb03be7c25bd1745baa50582348ef upstream.\n\nIf uaddr \u003d\u003d uaddr2, then we have broken the rule of only requeueing\nfrom a non-pi futex to a pi futex with this call. If we attempt this,\nas the trinity test suite manages to do, we miss early wakeups as\nq.key is equal to key2 (because they are the same uaddr). We will then\nattempt to dereference the pi_mutex (which would exist had the futex_q\nbeen properly requeued to a pi futex) and trigger a NULL pointer\ndereference.\n\nSigned-off-by: Darren Hart \u003cdvhart@linux.intel.com\u003e\nCc: Dave Jones \u003cdavej@redhat.com\u003e\nLink: http://lkml.kernel.org/r/ad82bfe7f7d130247fbe2b5b4275654807774227.1342809673.git.dvhart@linux.intel.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "47b6ff731a701d898c732e2f2dd67c5178fc0960", "tree": "e80a3044eb2c58402d52115c3288a29ee26218f1", "parents": [ "d48c1ba2979634ecbbe344a8bd65035f32777f1b" ], "author": { "name": "Darren Hart", "email": "dvhart@linux.intel.com", "time": "Fri Jul 20 11:53:30 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:53 2012 -0700" }, "message": "futex: Fix bug in WARN_ON for NULL q.pi_state\n\ncommit f27071cb7fe3e1d37a9dbe6c0dfc5395cd40fa43 upstream.\n\nThe WARN_ON in futex_wait_requeue_pi() for a NULL q.pi_state was testing\nthe address (\u0026q.pi_state) of the pointer instead of the value\n(q.pi_state) of the pointer. Correct it accordingly.\n\nSigned-off-by: Darren Hart \u003cdvhart@linux.intel.com\u003e\nCc: Dave Jones \u003cdavej@redhat.com\u003e\nLink: http://lkml.kernel.org/r/1c85d97f6e5f79ec389a4ead3e367363c74bd09a.1342809673.git.dvhart@linux.intel.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d48c1ba2979634ecbbe344a8bd65035f32777f1b", "tree": "93250aaa96091cfbb3449190b94bba614e223085", "parents": [ "ef2e080c19599e3d0844f3bc599ee5dd627fc850" ], "author": { "name": "Darren Hart", "email": "dvhart@linux.intel.com", "time": "Fri Jul 20 11:53:29 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:53 2012 -0700" }, "message": "futex: Test for pi_mutex on fault in futex_wait_requeue_pi()\n\ncommit b6070a8d9853eda010a549fa9a09eb8d7269b929 upstream.\n\nIf fixup_pi_state_owner() faults, pi_mutex may be NULL. Test\nfor pi_mutex !\u003d NULL before testing the owner against current\nand possibly unlocking it.\n\nSigned-off-by: Darren Hart \u003cdvhart@linux.intel.com\u003e\nCc: Dave Jones \u003cdavej@redhat.com\u003e\nCc: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nLink: http://lkml.kernel.org/r/dc59890338fc413606f04e5c5b131530734dae3d.1342809673.git.dvhart@linux.intel.com\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ef2e080c19599e3d0844f3bc599ee5dd627fc850", "tree": "19143fd205d2a4a176bba367794af8b8f979ec4f", "parents": [ "727cda365f7007f75a402f38ecd8bbf88a874e8f" ], "author": { "name": "Mikael Pettersson", "email": "mikpe@it.uu.se", "time": "Thu Apr 19 00:53:36 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:53 2012 -0700" }, "message": "m68k: Correct the Atari ALLOWINT definition\n\ncommit c663600584a596b5e66258cc10716fb781a5c2c9 upstream.\n\nBooting a 3.2, 3.3, or 3.4-rc4 kernel on an Atari using the\n`nfeth\u0027 ethernet device triggers a WARN_ONCE() in generic irq\nhandling code on the first irq for that device:\n\nWARNING: at kernel/irq/handle.c:146 handle_irq_event_percpu+0x134/0x142()\nirq 3 handler nfeth_interrupt+0x0/0x194 enabled interrupts\nModules linked in:\nCall Trace: [\u003c000299b2\u003e] warn_slowpath_common+0x48/0x6a\n [\u003c000299c0\u003e] warn_slowpath_common+0x56/0x6a\n [\u003c00029a4c\u003e] warn_slowpath_fmt+0x2a/0x32\n [\u003c0005b34c\u003e] handle_irq_event_percpu+0x134/0x142\n [\u003c0005b34c\u003e] handle_irq_event_percpu+0x134/0x142\n [\u003c0000a584\u003e] nfeth_interrupt+0x0/0x194\n [\u003c001ba0a8\u003e] schedule_preempt_disabled+0x0/0xc\n [\u003c0005b37a\u003e] handle_irq_event+0x20/0x2c\n [\u003c0005add4\u003e] generic_handle_irq+0x2c/0x3a\n [\u003c00002ab6\u003e] do_IRQ+0x20/0x32\n [\u003c0000289e\u003e] auto_irqhandler_fixup+0x4/0x6\n [\u003c00003144\u003e] cpu_idle+0x22/0x2e\n [\u003c001b8a78\u003e] printk+0x0/0x18\n [\u003c0024d112\u003e] start_kernel+0x37a/0x386\n [\u003c0003021d\u003e] __do_proc_dointvec+0xb1/0x366\n [\u003c0003021d\u003e] __do_proc_dointvec+0xb1/0x366\n [\u003c0024c31e\u003e] _sinittext+0x31e/0x9c0\n\nAfter invoking the irq\u0027s handler the kernel sees !irqs_disabled()\nand concludes that the handler erroneously enabled interrupts.\n\nHowever, debugging shows that !irqs_disabled() is true even before\nthe handler is invoked, which indicates a problem in the platform\ncode rather than the specific driver.\n\nThe warning does not occur in 3.1 or older kernels.\n\nIt turns out that the ALLOWINT definition for Atari is incorrect.\n\nThe Atari definition of ALLOWINT is ~0x400, the stated purpose of\nthat is to avoid taking HSYNC interrupts. irqs_disabled() returns\ntrue if the 3-bit ipl \u0026 4 is non-zero. The nfeth interrupt runs at\nipl 3 (it\u0027s autovector 3), but 3 \u0026 4 is zero so irqs_disabled() is\nfalse, and the warning above is generated.\n\nWhen interrupts are explicitly disabled, ipl is set to 7. When they\nare enabled, ipl is masked with ALLOWINT. On Atari this will result\nin ipl \u003d 3, which blocks interrupts at ipl 3 and below. So how come\nnfeth interrupts at ipl 3 are received at all? That\u0027s because ipl\nis reset to 2 by Atari-specific code in default_idle(), again with\nthe stated purpose of blocking HSYNC interrupts. This discrepancy\nmeans that ipl 3 can remain blocked for longer than intended.\n\nBoth default_idle() and falcon_hblhandler() identify HSYNC with\nipl 2, and the \"Atari ST/.../F030 Hardware Register Listing\" agrees,\nbut ALLOWINT is defined as if HSYNC was ipl 3.\n\n[As an experiment I modified default_idle() to reset ipl to 3, and\nas expected that resulted in all nfeth interrupts being blocked.]\n\nThe fix is simple: define ALLOWINT as ~0x500 instead. This makes\narch_local_irq_enable() consistent with default_idle(), and prevents\nthe !irqs_disabled() problems for ipl 3 interrupts.\n\nTested on Atari running in an Aranym VM.\n\nSigned-off-by: Mikael Pettersson \u003cmikpe@it.uu.se\u003e\nTested-by: Michael Schmitz \u003cschmitzmic@googlemail.com\u003e\nSigned-off-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n\n" }, { "commit": "727cda365f7007f75a402f38ecd8bbf88a874e8f", "tree": "117bba15a0514b07e7b2fdac1d87a545f70a9771", "parents": [ "8f32469c980654a17e935dae06a3557b488910a4" ], "author": { "name": "Andreas Schwab", "email": "schwab@linux-m68k.org", "time": "Sat Jul 28 00:20:34 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:53 2012 -0700" }, "message": "m68k: Make sys_atomic_cmpxchg_32 work on classic m68k\n\ncommit 9e2760d18b3cf179534bbc27692c84879c61b97c upstream.\n\nUser space access must always go through uaccess accessors, since on\nclassic m68k user space and kernel space are completely separate.\n\nSigned-off-by: Andreas Schwab \u003cschwab@linux-m68k.org\u003e\nTested-by: Thorsten Glaser \u003ctg@debian.org\u003e\nSigned-off-by: Geert Uytterhoeven \u003cgeert@linux-m68k.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "8f32469c980654a17e935dae06a3557b488910a4", "tree": "e4b99ec54055ad7763d188e2bdc8a7b7700093d7", "parents": [ "9966af8a7ac83cdc9aa5a054e843fdecc6689aa0" ], "author": { "name": "Mark Brown", "email": "broonie@opensource.wolfsonmicro.com", "time": "Fri Jun 22 17:21:17 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ASoC: wm8994: Ensure there are enough BCLKs for four channels\n\ncommit b8edf3e5522735c8ce78b81845f7a1a2d4a08626 upstream.\n\nOtherwise if someone tries to use all four channels on AIF1 with the\ndevice in master mode we won\u0027t be able to clock out all the data.\n\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "9966af8a7ac83cdc9aa5a054e843fdecc6689aa0", "tree": "0c0b7ff266c232795f1639e128bd73df9b486568", "parents": [ "7dcb3c5de76a8516e7f2391dfbab2727f69ed010" ], "author": { "name": "Mark Brown", "email": "broonie@opensource.wolfsonmicro.com", "time": "Mon Jul 30 18:24:19 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ASoC: wm8962: Allow VMID time to fully ramp\n\ncommit 9d40e5582c9c4cfb6977ba2a0ca9c2ed82c56f21 upstream.\n\nRequired for reliable power up from cold.\n\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "7dcb3c5de76a8516e7f2391dfbab2727f69ed010", "tree": "c73a16cb2d72d7f8a68b7aa13974a21dcffbd6f3", "parents": [ "2a69bac35f3667f380d83ca5ed5b880ee7133154" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Aug 02 09:04:39 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ALSA: hda - Support dock on Lenovo Thinkpad T530 with ALC269VC\n\ncommit 707fba3fa76a4c8855552f5d4c1a12430c09bce8 upstream.\n\nLenovo Thinkpad T530 with ALC269VC codec has a dock port but BIOS\ndoesn\u0027t set up the pins properly. Enable the pins as well as on\nThinkpad X230 Tablet.\n\nReported-and-tested-by: Mario \u003canyc@hadiko.de\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2a69bac35f3667f380d83ca5ed5b880ee7133154", "tree": "c7dfc755ecc699f6b201ac6712940521888e7ec5", "parents": [ "22e0422852d3aa14ad9f1793b8d7cb9e74b81608" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Jul 31 10:40:05 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ALSA: hda - Fix mute-LED GPIO initialization for IDT codecs\n\ncommit 1f43f6c1bc8d740e75b4177eb29110858bb5fea2 upstream.\n\nThe IDT codecs initializes the GPIO setup for mute LEDs via\nsnd_hda_sync_vmaster_hook(). This works in most cases except for the\nvery first call, which is called before PCM and control creations.\nThus before Master switch is set manually via alsactl, the mute LED\nmay show the wrong state, depending on the polarity.\n\nNow it\u0027s fixed by calling the LED-status update function manually when\nno vmaster is set yet.\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "22e0422852d3aa14ad9f1793b8d7cb9e74b81608", "tree": "29268eeb3928210be917cd92abd88a70c7a64fe1", "parents": [ "09f7d3b6fa3511eb0975fb40cda48f032942f49d" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Tue Jul 31 10:16:59 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ALSA: hda - Fix polarity of mute LED on HP Mini 210\n\ncommit ff8a1e274cbc11da6b57849f925b895a212b56c9 upstream.\n\nThe commit a3e199732b made the LED working again on HP Mini 210 but\nwith a wrong polarity. This patch fixes the polarity for this\nmachine, and also introduce a new model string \"hp-inv-led\".\n\nBugzilla: https://bugzilla.novell.com/show_bug.cgi?id\u003d772923\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "09f7d3b6fa3511eb0975fb40cda48f032942f49d", "tree": "0933759c1c4c4aa1fb92cb9d0ef9589027a5e3dc", "parents": [ "ac1d1b446e2e93305611126caa2252c8243f087f" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Thu Jul 26 08:17:20 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ALSA: hda - Fix mute-LED GPIO setup for HP Mini 210\n\ncommit a3e199732b8e2b272e82cc1ccc49c35239ed6c5a upstream.\n\nBIOS on HP Mini 210 doesn\u0027t provide the proper \"HP_Mute_LED\" DMI\nstring, thus the driver doesn\u0027t initialize the GPIO, too. In the\nearlier kernel, the driver falls back to GPIO1, but since 3.3 we\u0027ve\nstopped this due to other wrongly advertised machines.\n\nFor fixing this particular case, add a new model type to specify the\ndefault polarity explicitly so that the fallback to GPIO1 is handled.\n\nBugzilla: https://bugzilla.novell.com/show_bug.cgi?id\u003d772923\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ac1d1b446e2e93305611126caa2252c8243f087f", "tree": "c43f3781d555fdf11e6e5cc6e6769a79fa17233e", "parents": [ "e25824fa92d90e667b4285eddf7da11c541691a0" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Wed Jul 25 13:54:55 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ALSA: hda - Fix invalid D3 of headphone DAC on VT202x codecs\n\ncommit 6162552b0de6ba80937c3dd53e084967851cd199 upstream.\n\nWe\u0027ve got a bug report about the silent output from the headphone on a\nmobo with VT2021, and spotted out that this was because of the wrong\nD3 state on the DAC for the headphone output. The bug is triggered by\nthe incomplete check for this DAC in set_widgets_power_state_vt1718S().\nIt checks only the connectivity of the primary output (0x27) but\ndoesn\u0027t consider the path from the headphone pin (0x28).\n\nNow this patch fixes the problem by checking both pins for DAC 0x0b.\n\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e25824fa92d90e667b4285eddf7da11c541691a0", "tree": "192b2ccc0dec08b95b2eef89fe497654b8ddb2a5", "parents": [ "6fc6d9aea32a459f96ac8678f3e25170a6a8cfa9" ], "author": { "name": "Takashi Iwai", "email": "tiwai@suse.de", "time": "Mon Jul 23 11:35:55 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:52 2012 -0700" }, "message": "ALSA: mpu401: Fix missing initialization of irq field\n\ncommit bc733d495267a23ef8660220d696c6e549ce30b3 upstream.\n\nThe irq field of struct snd_mpu401 is supposed to be initialized to -1.\nSince it\u0027s set to zero as of now, a probing error before the irq\ninstallation results in a kernel warning \"Trying to free already-free\nIRQ 0\".\n\nBugzilla: https://bugzilla.kernel.org/show_bug.cgi?id\u003d44821\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "6fc6d9aea32a459f96ac8678f3e25170a6a8cfa9", "tree": "0e5bcf3d0ed12a2644728d9a7e3e6238b4fdf45c", "parents": [ "6091e5bc36cc2d74b2c5ab1ae2dcf32cf82e242f" ], "author": { "name": "Daniel Mack", "email": "zonque@gmail.com", "time": "Wed Aug 01 10:16:53 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "ALSA: snd-usb: fix clock source validity index\n\ncommit aff252a848ce21b431ba822de3dab9c4c94571cb upstream.\n\nuac_clock_source_is_valid() uses the control selector value to access\nthe bmControls bitmap of the clock source unit. This is wrong, as\ncontrol selector values start from 1, while the bitmap uses all\navailable bits.\n\nIn other words, \"Clock Validity Control\" is stored in D3..2, not D5..4\nof the clock selector unit\u0027s bmControls.\n\nSigned-off-by: Daniel Mack \u003czonque@gmail.com\u003e\nReported-by: Andreas Koch \u003candreas@akdesigninc.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "6091e5bc36cc2d74b2c5ab1ae2dcf32cf82e242f", "tree": "2dbb4859ee1d9ef896fccbe6117e07f30b1aaf23", "parents": [ "143d9963df6580491f9a5c38c9d4883786f78123" ], "author": { "name": "Colin Ian King", "email": "colin.king@canonical.com", "time": "Mon Jul 30 16:06:42 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "USB: echi-dbgp: increase the controller wait time to come out of halt.\n\ncommit f96a4216e85050c0a9d41a41ecb0ae9d8e39b509 upstream.\n\nThe default 10 microsecond delay for the controller to come out of\nhalt in dbgp_ehci_startup is too short, so increase it to 1 millisecond.\n\nThis is based on emperical testing on various USB debug ports on\nmodern machines such as a Lenovo X220i and an Ivybridge development\nplatform that needed to wait ~450-950 microseconds.\n\nSigned-off-by: Colin Ian King \u003ccolin.king@canonical.com\u003e\nSigned-off-by: Jason Wessel \u003cjason.wessel@windriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "143d9963df6580491f9a5c38c9d4883786f78123", "tree": "ffb8f59e0ed3715d6a14b8664ebd937bc9b4e9dd", "parents": [ "2ce42ec4ef551b08d2e5d26775d838ac640f82ad" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sun Jul 29 19:45:14 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "net/tun: fix ioctl() based info leaks\n\n[ Upstream commits a117dacde0288f3ec60b6e5bcedae8fa37ee0dfc\n and 8bbb181308bc348e02bfdbebdedd4e4ec9d452ce ]\n\nThe tun module leaks up to 36 bytes of memory by not fully initializing\na structure located on the stack that gets copied to user memory by the\nTUNGETIFF and SIOCGIFHWADDR ioctl()s.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "2ce42ec4ef551b08d2e5d26775d838ac640f82ad", "tree": "b0b95bbd562ed19c5423ac568030fee08a841332", "parents": [ "202a3667cfc09edca2338a1fb5d6ffb0dddc9bcc" ], "author": { "name": "Jiri Kosina", "email": "jkosina@suse.cz", "time": "Fri Jul 27 10:38:50 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "tcp: perform DMA to userspace only if there is a task waiting for it\n\n[ Upstream commit 59ea33a68a9083ac98515e4861c00e71efdc49a1 ]\n\nBack in 2006, commit 1a2449a87b (\"[I/OAT]: TCP recv offload to I/OAT\")\nadded support for receive offloading to IOAT dma engine if available.\n\nThe code in tcp_rcv_established() tries to perform early DMA copy if\napplicable. It however does so without checking whether the userspace\ntask is actually expecting the data in the buffer.\n\nThis is not a problem under normal circumstances, but there is a corner\ncase where this doesn\u0027t work -- and that\u0027s when MSG_TRUNC flag to\nrecvmsg() is used.\n\nIf the IOAT dma engine is not used, the code properly checks whether\nthere is a valid ucopy.task and the socket is owned by userspace, but\nmisses the check in the dmaengine case.\n\nThis problem can be observed in real trivially -- for example \u0027tbench\u0027 is a\ngood reproducer, as it makes a heavy use of MSG_TRUNC. On systems utilizing\nIOAT, you will soon find tbench waiting indefinitely in sk_wait_data(), as they\nhave been already early-copied in tcp_rcv_established() using dma engine.\n\nThis patch introduces the same check we are performing in the simple\niovec copy case to the IOAT case as well. It fixes the indefinite\nrecvmsg(MSG_TRUNC) hangs.\n\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "202a3667cfc09edca2338a1fb5d6ffb0dddc9bcc", "tree": "96ab669f4f0011b9e1d0b6c7f79a06c302821b83", "parents": [ "e5481652427aa25fc74b45d755ff678df33601c1" ], "author": { "name": "Jiri Benc", "email": "jbenc@redhat.com", "time": "Fri Jul 27 02:58:22 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "net: fix rtnetlink IFF_PROMISC and IFF_ALLMULTI handling\n\n[ Upstream commit b1beb681cba5358f62e6187340660ade226a5fcc ]\n\nWhen device flags are set using rtnetlink, IFF_PROMISC and IFF_ALLMULTI\nflags are handled specially. Function dev_change_flags sets IFF_PROMISC and\nIFF_ALLMULTI bits in dev-\u003egflags according to the passed value but\ndo_setlink passes a result of rtnl_dev_combine_flags which takes those bits\nfrom dev-\u003eflags.\n\nThis can be easily trigerred by doing:\n\ntcpdump -i eth0 \u0026\nip l s up eth0\n\nip sets IFF_UP flag in ifi_flags and ifi_change, which is combined with\nIFF_PROMISC by rtnl_dev_combine_flags, causing __dev_change_flags to set\nIFF_PROMISC in gflags.\n\nReported-by: Max Matveev \u003cmakc@redhat.com\u003e\nSigned-off-by: Jiri Benc \u003cjbenc@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "e5481652427aa25fc74b45d755ff678df33601c1", "tree": "04b15c7ebde6c02d5089dab768c14df591133634", "parents": [ "ac6b310c5f5ecd6154e07069c6b6b67b7e768d8b" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Fri Jul 27 01:46:51 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "USB: kaweth.c: use GFP_ATOMIC under spin_lock\n\n[ Upstream commit e4c7f259c5be99dcfc3d98f913590663b0305bf8 ]\n\nThe problem is that we call this with a spin lock held. The call tree\nis:\n\tkaweth_start_xmit() holds kaweth-\u003edevice_lock.\n\t-\u003e kaweth_async_set_rx_mode()\n\t -\u003e kaweth_control()\n\t -\u003e kaweth_internal_control_msg()\n\nThe kaweth_internal_control_msg() function is only called from\nkaweth_control() which used GFP_ATOMIC for its allocations.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "ac6b310c5f5ecd6154e07069c6b6b67b7e768d8b", "tree": "a0629399ce8a1e6428b7b7438d8631e61ed1d0b8", "parents": [ "1a8634186c17426f79c3bfcbc4fab75aa0f53c3b" ], "author": { "name": "Hangbin Liu", "email": "liuhangbin@gmail.com", "time": "Thu Jul 26 22:52:21 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "tcp: Add TCP_USER_TIMEOUT negative value check\n\n[ Upstream commit 42493570100b91ef663c4c6f0c0fdab238f9d3c2 ]\n\nTCP_USER_TIMEOUT is a TCP level socket option that takes an unsigned int. But\npatch \"tcp: Add TCP_USER_TIMEOUT socket option\"(dca43c75) didn\u0027t check the negative\nvalues. If a user assign -1 to it, the socket will set successfully and wait\nfor 4294967295 miliseconds. This patch add a negative value check to avoid\nthis issue.\n\nSigned-off-by: Hangbin Liu \u003cliuhangbin@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "1a8634186c17426f79c3bfcbc4fab75aa0f53c3b", "tree": "f17766d79578af5d10746015fb9c3f1041687fdb", "parents": [ "2138dede8c23f5646c81381c71aac37e67b491b0" ], "author": { "name": "Alan Cox", "email": "alan@linux.intel.com", "time": "Tue Jul 24 08:16:25 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:51 2012 -0700" }, "message": "wanmain: comparing array with NULL\n\n[ Upstream commit 8b72ff6484fe303e01498b58621810a114f3cf09 ]\n\ngcc really should warn about these !\n\nSigned-off-by: Alan Cox \u003calan@linux.intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "2138dede8c23f5646c81381c71aac37e67b491b0", "tree": "7149cb0466c7aaaae4449d1cf8bdc47908c95863", "parents": [ "f63b1d926016ce39e06a9a39084d205e072541e2" ], "author": { "name": "Alan Cox", "email": "alan@linux.intel.com", "time": "Tue Jul 24 02:42:14 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:50 2012 -0700" }, "message": "caif: fix NULL pointer check\n\n[ Upstream commit c66b9b7d365444b433307ebb18734757cb668a02 ]\n\nReported-by: \u003crucsoftsec@gmail.com\u003e\nResolves-bug: http://bugzilla.kernel.org/show_bug?44441\nSigned-off-by: Alan Cox \u003calan@linux.intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "f63b1d926016ce39e06a9a39084d205e072541e2", "tree": "2ab0e8d80d11c3a327a97288ff7f09d92f8ad80a", "parents": [ "4deb65e759dd2ff7dd5e40bd6d4bf0dad6d88269" ], "author": { "name": "Francois Romieu", "email": "romieu@fr.zoreil.com", "time": "Mon Jul 23 22:55:55 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:44 2012 -0700" }, "message": "r8169: revert \"add byte queue limit support\".\n\n[ Upstream commit 17bcb684f08649a2ab6a7dcd8288332e72d208f1 ]\n\nThis reverts commit 036dafa28da1e2565a8529de2ae663c37b7a0060.\n\nFirst it appears in bisection, then reverting it solves the usual\nnetdev watchdog problem for different people. I don\u0027t have a proper\nfix yet so get rid of it.\n\nBisected-and-reported-by: Alex Villacís Lasso \u003ca_villacis@palosanto.com\u003e\nSigned-off-by: Francois Romieu \u003cromieu@fr.zoreil.com\u003e\nCc: Josh Boyer \u003cjwboyer@redhat.com\u003e\nCc: Hayes Wang \u003chayeswang@realtek.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "4deb65e759dd2ff7dd5e40bd6d4bf0dad6d88269", "tree": "f3df7cc13f2bb4238e1ec23cf1fcdcf375404ff3", "parents": [ "a080e65186d367508e2b4e68290656ddce493136" ], "author": { "name": "Jesper Juhl", "email": "jj@chaosbits.net", "time": "Sun Jul 22 11:37:20 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:42 2012 -0700" }, "message": "net: Fix references to out-of-scope variables in put_cmsg_compat()\n\n[ Upstream commit 818810472b129004c16fc51bf0a570b60776bfb7 ]\n\nIn net/compat.c::put_cmsg_compat() we may assign \u0027data\u0027 the address of\neither the \u0027ctv\u0027 or \u0027cts\u0027 local variables inside the \u0027if\n(!COMPAT_USE_64BIT_TIME)\u0027 branch.\n\nThose variables go out of scope at the end of the \u0027if\u0027 statement, so\nwhen we use \u0027data\u0027 further down in \u0027copy_to_user(CMSG_COMPAT_DATA(cm),\ndata, cmlen - sizeof(struct compat_cmsghdr))\u0027 there\u0027s no telling what\nit may be refering to - not good.\n\nFix the problem by simply giving \u0027ctv\u0027 and \u0027cts\u0027 function scope.\n\nSigned-off-by: Jesper Juhl \u003cjj@chaosbits.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "a080e65186d367508e2b4e68290656ddce493136", "tree": "ee58c4f07584ab6ae1da3c827f21dc92ce94ae2b", "parents": [ "60d2aa556cc3f00f1276ae363dc6601359180ddc" ], "author": { "name": "Paul Moore", "email": "pmoore@redhat.com", "time": "Tue Jul 17 11:07:47 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:42 2012 -0700" }, "message": "cipso: don\u0027t follow a NULL pointer when setsockopt() is called\n\n[ Upstream commit 89d7ae34cdda4195809a5a987f697a517a2a3177 ]\n\nAs reported by Alan Cox, and verified by Lin Ming, when a user\nattempts to add a CIPSO option to a socket using the CIPSO_V4_TAG_LOCAL\ntag the kernel dies a terrible death when it attempts to follow a NULL\npointer (the skb argument to cipso_v4_validate() is NULL when called via\nthe setsockopt() syscall).\n\nThis patch fixes this by first checking to ensure that the skb is\nnon-NULL before using it to find the incoming network interface. In\nthe unlikely case where the skb is NULL and the user attempts to add\na CIPSO option with the _TAG_LOCAL tag we return an error as this is\nnot something we want to allow.\n\nA simple reproducer, kindly supplied by Lin Ming, although you must\nhave the CIPSO DOI #3 configure on the system first or you will be\ncaught early in cipso_v4_validate():\n\n\t#include \u003csys/types.h\u003e\n\t#include \u003csys/socket.h\u003e\n\t#include \u003clinux/ip.h\u003e\n\t#include \u003clinux/in.h\u003e\n\t#include \u003cstring.h\u003e\n\n\tstruct local_tag {\n\t\tchar type;\n\t\tchar length;\n\t\tchar info[4];\n\t};\n\n\tstruct cipso {\n\t\tchar type;\n\t\tchar length;\n\t\tchar doi[4];\n\t\tstruct local_tag local;\n\t};\n\n\tint main(int argc, char **argv)\n\t{\n\t\tint sockfd;\n\t\tstruct cipso cipso \u003d {\n\t\t\t.type \u003d IPOPT_CIPSO,\n\t\t\t.length \u003d sizeof(struct cipso),\n\t\t\t.local \u003d {\n\t\t\t\t.type \u003d 128,\n\t\t\t\t.length \u003d sizeof(struct local_tag),\n\t\t\t},\n\t\t};\n\n\t\tmemset(cipso.doi, 0, 4);\n\t\tcipso.doi[3] \u003d 3;\n\n\t\tsockfd \u003d socket(AF_INET, SOCK_DGRAM, 0);\n\t\t#define SOL_IP 0\n\t\tsetsockopt(sockfd, SOL_IP, IP_OPTIONS,\n\t\t\t\u0026cipso, sizeof(struct cipso));\n\n\t\treturn 0;\n\t}\n\nCC: Lin Ming \u003cmlin@ss.pku.edu.cn\u003e\nReported-by: Alan Cox \u003calan@lxorguk.ukuu.org.uk\u003e\nSigned-off-by: Paul Moore \u003cpmoore@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "60d2aa556cc3f00f1276ae363dc6601359180ddc", "tree": "b2120ef5892b7b1dd39d2fab0083894445c9c65a", "parents": [ "2936d35db07cc3c9e3f2d60ed90f9a72f2031130" ], "author": { "name": "Sjur Brændeland", "email": "sjur.brandeland@stericsson.com", "time": "Sun Jul 15 10:10:14 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:42 2012 -0700" }, "message": "caif: Fix access to freed pernet memory\n\n[ Upstream commit 96f80d123eff05c3cd4701463786b87952a6c3ac ]\n\nunregister_netdevice_notifier() must be called before\nunregister_pernet_subsys() to avoid accessing already freed\npernet memory. This fixes the following oops when doing rmmod:\n\nCall Trace:\n [\u003cffffffffa0f802bd\u003e] caif_device_notify+0x4d/0x5a0 [caif]\n [\u003cffffffff81552ba9\u003e] unregister_netdevice_notifier+0xb9/0x100\n [\u003cffffffffa0f86dcc\u003e] caif_device_exit+0x1c/0x250 [caif]\n [\u003cffffffff810e7734\u003e] sys_delete_module+0x1a4/0x300\n [\u003cffffffff810da82d\u003e] ? trace_hardirqs_on_caller+0x15d/0x1e0\n [\u003cffffffff813517de\u003e] ? trace_hardirqs_on_thunk+0x3a/0x3\n [\u003cffffffff81696bad\u003e] system_call_fastpath+0x1a/0x1f\n\nRIP\n [\u003cffffffffa0f7f561\u003e] caif_get+0x51/0xb0 [caif]\n\nSigned-off-by: Sjur Brændeland \u003csjur.brandeland@stericsson.com\u003e\nAcked-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "2936d35db07cc3c9e3f2d60ed90f9a72f2031130", "tree": "568237d8b74c8dd354e58dc499f639ad0329d139", "parents": [ "d5eeca5f5c19c472f8f221a81bb27f15a7aeed6c" ], "author": { "name": "Neil Horman", "email": "nhorman@tuxdriver.com", "time": "Mon Jul 16 09:13:51 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:42 2012 -0700" }, "message": "sctp: Fix list corruption resulting from freeing an association on a list\n\n[ Upstream commit 2eebc1e188e9e45886ee00662519849339884d6d ]\n\nA few days ago Dave Jones reported this oops:\n\n[22766.294255] general protection fault: 0000 [#1] PREEMPT SMP\n[22766.295376] CPU 0\n[22766.295384] Modules linked in:\n[22766.387137] ffffffffa169f292 6b6b6b6b6b6b6b6b ffff880147c03a90\nffff880147c03a74\n[22766.387135] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 00000000000\n[22766.387136] Process trinity-watchdo (pid: 10896, threadinfo ffff88013e7d2000,\n[22766.387137] Stack:\n[22766.387140] ffff880147c03a10\n[22766.387140] ffffffffa169f2b6\n[22766.387140] ffff88013ed95728\n[22766.387143] 0000000000000002\n[22766.387143] 0000000000000000\n[22766.387143] ffff880003fad062\n[22766.387144] ffff88013c120000\n[22766.387144]\n[22766.387145] Call Trace:\n[22766.387145] \u003cIRQ\u003e\n[22766.387150] [\u003cffffffffa169f292\u003e] ? __sctp_lookup_association+0x62/0xd0\n[sctp]\n[22766.387154] [\u003cffffffffa169f2b6\u003e] __sctp_lookup_association+0x86/0xd0 [sctp]\n[22766.387157] [\u003cffffffffa169f597\u003e] sctp_rcv+0x207/0xbb0 [sctp]\n[22766.387161] [\u003cffffffff810d4da8\u003e] ? trace_hardirqs_off_caller+0x28/0xd0\n[22766.387163] [\u003cffffffff815827e3\u003e] ? nf_hook_slow+0x133/0x210\n[22766.387166] [\u003cffffffff815902fc\u003e] ? ip_local_deliver_finish+0x4c/0x4c0\n[22766.387168] [\u003cffffffff8159043d\u003e] ip_local_deliver_finish+0x18d/0x4c0\n[22766.387169] [\u003cffffffff815902fc\u003e] ? ip_local_deliver_finish+0x4c/0x4c0\n[22766.387171] [\u003cffffffff81590a07\u003e] ip_local_deliver+0x47/0x80\n[22766.387172] [\u003cffffffff8158fd80\u003e] ip_rcv_finish+0x150/0x680\n[22766.387174] [\u003cffffffff81590c54\u003e] ip_rcv+0x214/0x320\n[22766.387176] [\u003cffffffff81558c07\u003e] __netif_receive_skb+0x7b7/0x910\n[22766.387178] [\u003cffffffff8155856c\u003e] ? __netif_receive_skb+0x11c/0x910\n[22766.387180] [\u003cffffffff810d423e\u003e] ? put_lock_stats.isra.25+0xe/0x40\n[22766.387182] [\u003cffffffff81558f83\u003e] netif_receive_skb+0x23/0x1f0\n[22766.387183] [\u003cffffffff815596a9\u003e] ? dev_gro_receive+0x139/0x440\n[22766.387185] [\u003cffffffff81559280\u003e] napi_skb_finish+0x70/0xa0\n[22766.387187] [\u003cffffffff81559cb5\u003e] napi_gro_receive+0xf5/0x130\n[22766.387218] [\u003cffffffffa01c4679\u003e] e1000_receive_skb+0x59/0x70 [e1000e]\n[22766.387242] [\u003cffffffffa01c5aab\u003e] e1000_clean_rx_irq+0x28b/0x460 [e1000e]\n[22766.387266] [\u003cffffffffa01c9c18\u003e] e1000e_poll+0x78/0x430 [e1000e]\n[22766.387268] [\u003cffffffff81559fea\u003e] net_rx_action+0x1aa/0x3d0\n[22766.387270] [\u003cffffffff810a495f\u003e] ? account_system_vtime+0x10f/0x130\n[22766.387273] [\u003cffffffff810734d0\u003e] __do_softirq+0xe0/0x420\n[22766.387275] [\u003cffffffff8169826c\u003e] call_softirq+0x1c/0x30\n[22766.387278] [\u003cffffffff8101db15\u003e] do_softirq+0xd5/0x110\n[22766.387279] [\u003cffffffff81073bc5\u003e] irq_exit+0xd5/0xe0\n[22766.387281] [\u003cffffffff81698b03\u003e] do_IRQ+0x63/0xd0\n[22766.387283] [\u003cffffffff8168ee2f\u003e] common_interrupt+0x6f/0x6f\n[22766.387283] \u003cEOI\u003e\n[22766.387284]\n[22766.387285] [\u003cffffffff8168eed9\u003e] ? retint_swapgs+0x13/0x1b\n[22766.387285] Code: c0 90 5d c3 66 0f 1f 44 00 00 4c 89 c8 5d c3 0f 1f 00 55 48\n89 e5 48 83\nec 20 48 89 5d e8 4c 89 65 f0 4c 89 6d f8 66 66 66 66 90 \u003c0f\u003e b7 87 98 00 00 00\n48 89 fb\n49 89 f5 66 c1 c0 08 66 39 46 02\n[22766.387307]\n[22766.387307] RIP\n[22766.387311] [\u003cffffffffa168a2c9\u003e] sctp_assoc_is_match+0x19/0x90 [sctp]\n[22766.387311] RSP \u003cffff880147c039b0\u003e\n[22766.387142] ffffffffa16ab120\n[22766.599537] ---[ end trace 3f6dae82e37b17f5 ]---\n[22766.601221] Kernel panic - not syncing: Fatal exception in interrupt\n\nIt appears from his analysis and some staring at the code that this is likely\noccuring because an association is getting freed while still on the\nsctp_assoc_hashtable. As a result, we get a gpf when traversing the hashtable\nwhile a freed node corrupts part of the list.\n\nNominally I would think that an mibalanced refcount was responsible for this,\nbut I can\u0027t seem to find any obvious imbalance. What I did note however was\nthat the two places where we create an association using\nsctp_primitive_ASSOCIATE (__sctp_connect and sctp_sendmsg), have failure paths\nwhich free a newly created association after calling sctp_primitive_ASSOCIATE.\nsctp_primitive_ASSOCIATE brings us into the sctp_sf_do_prm_asoc path, which\nissues a SCTP_CMD_NEW_ASOC side effect, which in turn adds a new association to\nthe aforementioned hash table. the sctp command interpreter that process side\neffects has not way to unwind previously processed commands, so freeing the\nassociation from the __sctp_connect or sctp_sendmsg error path would lead to a\nfreed association remaining on this hash table.\n\nI\u0027ve fixed this but modifying sctp_[un]hash_established to use hlist_del_init,\nwhich allows us to proerly use hlist_unhashed to check if the node is on a\nhashlist safely during a delete. That in turn alows us to safely call\nsctp_unhash_established in the __sctp_connect and sctp_sendmsg error paths\nbefore freeing them, regardles of what the associations state is on the hash\nlist.\n\nI noted, while I was doing this, that the __sctp_unhash_endpoint was using\nhlist_unhsashed in a simmilar fashion, but never nullified any removed nodes\npointers to make that function work properly, so I fixed that up in a simmilar\nfashion.\n\nI attempted to test this using a virtual guest running the SCTP_RR test from\nnetperf in a loop while running the trinity fuzzer, both in a loop. I wasn\u0027t\nable to recreate the problem prior to this fix, nor was I able to trigger the\nfailure after (neither of which I suppose is suprising). Given the trace above\nhowever, I think its likely that this is what we hit.\n\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nReported-by: davej@redhat.com\nCC: davej@redhat.com\nCC: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCC: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nCC: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nCC: linux-sctp@vger.kernel.org\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "d5eeca5f5c19c472f8f221a81bb27f15a7aeed6c", "tree": "4812210a3233ee1532376ffb3fc88191e94faa98", "parents": [ "af8ca6ddbb2928d5fb26f0a78710971e1210a299" ], "author": { "name": "Alan Cox", "email": "alan@linux.intel.com", "time": "Thu Jul 12 03:39:11 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:42 2012 -0700" }, "message": "sch_sfb: Fix missing NULL check\n\n[ Upstream commit 7ac2908e4b2edaec60e9090ddb4d9ceb76c05e7d ]\n\nResolves-bug: https://bugzilla.kernel.org/show_bug.cgi?id\u003d44461\n\nSigned-off-by: Alan Cox \u003calan@linux.intel.com\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "af8ca6ddbb2928d5fb26f0a78710971e1210a299", "tree": "d25220dfac1ad1627388cc19fd4047480b16e415", "parents": [ "a5b4b62d8517f12c77f912b8c249e36019d31a0c" ], "author": { "name": "Michael Chan", "email": "mchan@broadcom.com", "time": "Tue Jul 10 10:04:40 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "bnx2: Fix bug in bnx2_free_tx_skbs().\n\n[ Upstream commit c1f5163de417dab01fa9daaf09a74bbb19303f3c ]\n\nIn rare cases, bnx2x_free_tx_skbs() can unmap the wrong DMA address\nwhen it gets to the last entry of the tx ring. We were not using\nthe proper macro to skip the last entry when advancing the tx index.\n\nReported-by: Zongyun Lai \u003czlai@vmware.com\u003e\nReviewed-by: Jeffrey Huang \u003chuangjw@broadcom.com\u003e\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "a5b4b62d8517f12c77f912b8c249e36019d31a0c", "tree": "21a1b8386a690f0544ce2895f4f45f6b303dc33c", "parents": [ "d680c0462d9f4d96b255853364fb0bcd5c202553" ], "author": { "name": "Amir Hanania", "email": "amir.hanania@intel.com", "time": "Mon Jul 09 20:47:19 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "net: Fix memory leak - vlan_info struct\n\n[ Upstream commit efc73f4bbc238d4f579fb612c04c8e1dd8a82979 ]\n\nIn driver reload test there is a memory leak.\nThe structure vlan_info was not freed when the driver was removed.\nIt was not released since the nr_vids var is one after last vlan was removed.\nThe nr_vids is one, since vlan zero is added to the interface when the interface\nis being set, but the vlan zero is not deleted at unregister.\nFix - delete vlan zero when we unregister the device.\n\nSigned-off-by: Amir Hanania \u003camir.hanania@intel.com\u003e\nAcked-by: John Fastabend \u003cjohn.r.fastabend@intel.com\u003e\nTested-by: Aaron Brown \u003caaron.f.brown@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "d680c0462d9f4d96b255853364fb0bcd5c202553", "tree": "4518122000e4a1b258c2f345f5b2ed4849fdf218", "parents": [ "f7a47ee34686694148f6d34a4576385853c5e33f" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Thu Jul 05 11:45:13 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "gianfar: fix potential sk_wmem_alloc imbalance\n\n[ Upstream commit 313b037cf054ec908de92fb4c085403ffd7420d4 ]\n\ncommit db83d136d7f753 (gianfar: Fix missing sock reference when\nprocessing TX time stamps) added a potential sk_wmem_alloc imbalance\n\nIf the new skb has a different truesize than old one, we can get a\nnegative sk_wmem_alloc once new skb is orphaned at TX completion.\n\nNow we no longer early orphan skbs in dev_hard_start_xmit(), this\nprobably can lead to fatal bugs.\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nTested-by: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nCc: Manfred Rudigier \u003cmanfred.rudigier@omicron.at\u003e\nCc: Claudiu Manoil \u003cclaudiu.manoil@freescale.com\u003e\nCc: Jiajun Wu \u003cb06378@freescale.com\u003e\nCc: Andy Fleming \u003cafleming@freescale.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "f7a47ee34686694148f6d34a4576385853c5e33f", "tree": "543b6be306465338ca6a7bfa60a643c84da7b937", "parents": [ "aa505bba77961634215eb8bdd8ab9f4bd0c6f1d1" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Tue Jul 03 20:55:21 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "netem: add limitation to reordered packets\n\n[ Upstream commit 960fb66e520a405dde39ff883f17ff2669c13d85 ]\n\nFix two netem bugs :\n\n1) When a frame was dropped by tfifo_enqueue(), drop counter\n was incremented twice.\n\n2) When reordering is triggered, we enqueue a packet without\n checking queue limit. This can OOM pretty fast when this\n is repeated enough, since skbs are orphaned, no socket limit\n can help in this situation.\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: Mark Gordon \u003cmsg@google.com\u003e\nCc: Andreas Terzis \u003caterzis@google.com\u003e\nCc: Yuchung Cheng \u003cycheng@google.com\u003e\nCc: Hagen Paul Pfeifer \u003chagen@jauu.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "aa505bba77961634215eb8bdd8ab9f4bd0c6f1d1", "tree": "ddbbc0950dee37a968241c4d19071c2bd4dc268b", "parents": [ "c0ce1fd51e122606d555dfd57f5c703b2af12146" ], "author": { "name": "Cloud Ren", "email": "cjren@qca.qualcomm.com", "time": "Tue Jul 03 16:51:48 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "atl1c: fix issue of transmit queue 0 timed out\n\n[ Upstream commit b94e52f62683dc0b00c6d1b58b80929a078c0fd5 ]\n\nsome people report atl1c could cause system hang with following\nkernel trace info:\n---------------------------------------\nWARNING: at.../net/sched/sch_generic.c:258 dev_watchdog+0x1db/0x1d0()\n...\nNETDEV WATCHDOG: eth0 (atl1c): transmit queue 0 timed out\n...\n---------------------------------------\nThis is caused by netif_stop_queue calling when cable Link is down.\nSo remove netif_stop_queue, because link_watch will take it over.\n\nSigned-off-by: xiong \u003cxiong@qca.qualcomm.com\u003e\nCc: stable \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Cloud Ren \u003ccjren@qca.qualcomm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n" }, { "commit": "c0ce1fd51e122606d555dfd57f5c703b2af12146", "tree": "6490b66667d746ec0236e09868e78b13af7c543f", "parents": [ "2dd71727e4bf6787caa56770b99a9102ac9a65f4" ], "author": { "name": "Theodore Ts\u0027o", "email": "tytso@mit.edu", "time": "Mon Jul 23 00:00:20 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "ext4: undo ext4_calc_metadata_amount if we fail to claim space\n\ncommit 03179fe92318e7934c180d96f12eff2cb36ef7b6 upstream.\n\nThe function ext4_calc_metadata_amount() has side effects, although\nit\u0027s not obvious from its function name. So if we fail to claim\nspace, regardless of whether we retry to claim the space again, or\nreturn an error, we need to undo these side effects.\n\nOtherwise we can end up incorrectly calculating the number of metadata\nblocks needed for the operation, which was responsible for an xfstests\nfailure for test #271 when using an ext2 file system with delalloc\nenabled.\n\nReported-by: Brian Foster \u003cbfoster@redhat.com\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2dd71727e4bf6787caa56770b99a9102ac9a65f4", "tree": "1fb478c19b6a469106076b5c794026f3605f80cd", "parents": [ "6918ff0bf4ba47ce863813fe5010796718219f8f" ], "author": { "name": "Brian Foster", "email": "bfoster@redhat.com", "time": "Sun Jul 22 23:59:40 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "ext4: don\u0027t let i_reserved_meta_blocks go negative\n\ncommit 97795d2a5b8d3c8dc4365d4bd3404191840453ba upstream.\n\nIf we hit a condition where we have allocated metadata blocks that\nwere not appropriately reserved, we risk underflow of\nei-\u003ei_reserved_meta_blocks. In turn, this can throw\nsbi-\u003es_dirtyclusters_counter significantly out of whack and undermine\nthe nondelalloc fallback logic in ext4_nonda_switch(). Warn if this\noccurs and set i_allocated_meta_blocks to avoid this problem.\n\nThis condition is reproduced by xfstests 270 against ext2 with\ndelalloc enabled:\n\nMar 28 08:58:02 localhost kernel: [ 171.526344] EXT4-fs (loop1): delayed block allocation failed for inode 14 at logical offset 64486 with max blocks 64 with error -28\nMar 28 08:58:02 localhost kernel: [ 171.526346] EXT4-fs (loop1): This should not happen!! Data will be lost\n\n270 ultimately fails with an inconsistent filesystem and requires an\nfsck to repair. The cause of the error is an underflow in\next4_da_update_reserve_space() due to an unreserved meta block\nallocation.\n\nSigned-off-by: Brian Foster \u003cbfoster@redhat.com\u003e\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "6918ff0bf4ba47ce863813fe5010796718219f8f", "tree": "57e88ec841850a19a2de95485c1e4a2e26d413a4", "parents": [ "25471391e7a0acace5821318fc0123a0a5cfdbbe" ], "author": { "name": "Ashish Sangwan", "email": "ashishsangwan2@gmail.com", "time": "Sun Jul 22 22:49:08 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "ext4: fix hole punch failure when depth is greater than 0\n\ncommit 968dee77220768a5f52cf8b21d0bdb73486febef upstream.\n\nWhether to continue removing extents or not is decided by the return\nvalue of function ext4_ext_more_to_rm() which checks 2 conditions:\na) if there are no more indexes to process.\nb) if the number of entries are decreased in the header of \"depth -1\".\n\nIn case of hole punch, if the last block to be removed is not part of\nthe last extent index than this index will not be deleted, hence the\nnumber of valid entries in the extent header of \"depth - 1\" will\nremain as it is and ext4_ext_more_to_rm will return 0 although the\nrequired blocks are not yet removed.\n\nThis patch fixes the above mentioned problem as instead of removing\nthe extents from the end of file, it starts removing the blocks from\nthe particular extent from which removing blocks is actually required\nand continue backward until done.\n\nSigned-off-by: Ashish Sangwan \u003cashish.sangwan2@gmail.com\u003e\nSigned-off-by: Namjae Jeon \u003clinkinjeon@gmail.com\u003e\nReviewed-by: Lukas Czerner \u003clczerner@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "25471391e7a0acace5821318fc0123a0a5cfdbbe", "tree": "9baba899124c6d1e893bd8595383dc0b391e3e23", "parents": [ "2a271d6a66d1d10f001c5653da68c1f72d0ded59" ], "author": { "name": "Theodore Ts\u0027o", "email": "tytso@mit.edu", "time": "Mon Jul 09 16:27:05 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:41 2012 -0700" }, "message": "ext4: fix overhead calculation used by ext4_statfs()\n\ncommit 952fc18ef9ec707ebdc16c0786ec360295e5ff15 upstream.\n\nCommit f975d6bcc7a introduced bug which caused ext4_statfs() to\nmiscalculate the number of file system overhead blocks. This causes\nthe f_blocks field in the statfs structure to be larger than it should\nbe. This would in turn cause the \"df\" output to show the number of\ndata blocks in the file system and the number of data blocks used to\nbe larger than they should be.\n\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2a271d6a66d1d10f001c5653da68c1f72d0ded59", "tree": "75b43233ebdf83d5f5706c95365a56f4b64280cc", "parents": [ "66b68d2374b0c251224c28c69fc25eeef343e122" ], "author": { "name": "Theodore Ts\u0027o", "email": "tytso@mit.edu", "time": "Sat Jun 30 19:14:57 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "ext4: pass a char * to ext4_count_free() instead of a buffer_head ptr\n\ncommit f6fb99cadcd44660c68e13f6eab28333653621e6 upstream.\n\nMake it possible for ext4_count_free to operate on buffers and not\njust data in buffer_heads.\n\nSigned-off-by: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "66b68d2374b0c251224c28c69fc25eeef343e122", "tree": "4d8e66efd0e193cd6befb96661392e23b799420f", "parents": [ "4d71d5a6b6931f82fa9db44214019839a0ebbb4a" ], "author": { "name": "Maarten Lankhorst", "email": "maarten.lankhorst@canonical.com", "time": "Mon Jun 04 12:00:31 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "nouveau: Fix alignment requirements on src and dst addresses\n\ncommit ce806a30470bcd846d148bf39d46de3ad7748228 upstream.\n\nLinear copy works by adding the offset to the buffer address,\nwhich may end up not being 16-byte aligned.\n\nSome tests I\u0027ve written for prime_pcopy show that the engine\nallows this correctly, so the restriction on lowest 4 bits of\naddress can be lifted safely.\n\nThe comments added were by envyas, I think because I used\na newer version.\n\nSigned-off-by: Maarten Lankhorst \u003cmaarten.lankhorst@canonical.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "4d71d5a6b6931f82fa9db44214019839a0ebbb4a", "tree": "0bfa25a6f776fe8d84f2403ac07eeff2f4a41de6", "parents": [ "032da6abbc34272959c790941ce8705337061dbf" ], "author": { "name": "David Howells", "email": "dhowells@redhat.com", "time": "Wed Jul 25 16:53:36 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "NFS: Fix a number of bugs in the idmapper\n\ncommit a427b9ec4eda8cd6e641ea24541d30b641fc3140 upstream.\n\nFix a number of bugs in the NFS idmapper code:\n\n (1) Only registered key types can be passed to the core keys code, so\n register the legacy idmapper key type.\n\n This is a requirement because the unregister function cleans up keys\n belonging to that key type so that there aren\u0027t dangling pointers to the\n module left behind - including the key-\u003etype pointer.\n\n (2) Rename the legacy key type. You can\u0027t have two key types with the same\n name, and (1) would otherwise require that.\n\n (3) complete_request_key() must be called in the error path of\n nfs_idmap_legacy_upcall().\n\n (4) There is one idmap struct for each nfs_client struct. This means that\n idmap-\u003eidmap_key_cons is shared without the use of a lock. This is a\n problem because key_instantiate_and_link() - as called indirectly by\n idmap_pipe_downcall() - releases anyone waiting for the key to be\n instantiated.\n\n What happens is that idmap_pipe_downcall() running in the rpc.idmapd\n thread, releases the NFS filesystem in whatever thread that is running in\n to continue. This may then make another idmapper call, overwriting\n idmap_key_cons before idmap_pipe_downcall() gets the chance to call\n complete_request_key().\n\n I *think* that reading idmap_key_cons only once, before\n key_instantiate_and_link() is called, and then caching the result in a\n variable is sufficient.\n\nBug (4) is the cause of:\n\nBUG: unable to handle kernel NULL pointer dereference at (null)\nIP: [\u003c (null)\u003e] (null)\nPGD 0\nOops: 0010 [#1] SMP\nCPU 1\nModules linked in: ppdev parport_pc lp parport ip6table_filter ip6_tables ebtable_nat ebtables ipt_MASQUERADE iptable_nat nf_nat nf_conntrack_ipv4 nf_defrag_ipv4 xt_state nf_conntrack nfs fscache xt_CHECKSUM auth_rpcgss iptable_mangle nfs_acl bridge stp llc lockd be2iscsi iscsi_boot_sysfs bnx2i cnic uio cxgb4i cxgb4 cxgb3i libcxgbi cxgb3 mdio ib_iser rdma_cm ib_cm iw_cm ib_sa ib_mad ib_core ib_addr iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi snd_hda_codec_realtek snd_usb_audio snd_hda_intel snd_hda_codec snd_seq snd_pcm snd_hwdep snd_usbmidi_lib snd_rawmidi snd_timer uvcvideo videobuf2_core videodev media videobuf2_vmalloc snd_seq_device videobuf2_memops e1000e vhost_net iTCO_wdt joydev coretemp snd soundcore macvtap macvlan i2c_i801 snd_page_alloc tun iTCO_vendor_support microcode kvm_intel kvm sunrpc hid_logitech_dj usb_storage i915 drm_kms_helper drm i2c_algo_bit i2c_core video [last unloaded: scsi_wait_scan]\nPid: 1229, comm: rpc.idmapd Not tainted 3.4.2-1.fc16.x86_64 #1 Gateway DX4710-UB801A/G33M05G1\nRIP: 0010:[\u003c0000000000000000\u003e] [\u003c (null)\u003e] (null)\nRSP: 0018:ffff8801a3645d40 EFLAGS: 00010246\nRAX: ffff880077707e30 RBX: ffff880077707f50 RCX: ffff8801a18ccd80\nRDX: 0000000000000006 RSI: ffff8801a3645e75 RDI: ffff880077707f50\nRBP: ffff8801a3645d88 R08: ffff8801a430f9c0 R09: ffff8801a3645db0\nR10: 000000000000000a R11: 0000000000000246 R12: ffff8801a18ccd80\nR13: ffff8801a3645e75 R14: ffff8801a430f9c0 R15: 0000000000000006\nFS: 00007fb6fb51a700(0000) GS:ffff8801afc80000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 0000000000000000 CR3: 00000001a49b0000 CR4: 00000000000027e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400\nProcess rpc.idmapd (pid: 1229, threadinfo ffff8801a3644000, task ffff8801a3bf9710)\nStack:\n ffffffff81260878 ffff8801a3645db0 ffff8801a3645db0 ffff880077707a90\n ffff880077707f50 ffff8801a18ccd80 0000000000000006 ffff8801a3645e75\n ffff8801a430f9c0 ffff8801a3645dd8 ffffffff81260983 ffff8801a3645de8\nCall Trace:\n [\u003cffffffff81260878\u003e] ? __key_instantiate_and_link+0x58/0x100\n [\u003cffffffff81260983\u003e] key_instantiate_and_link+0x63/0xa0\n [\u003cffffffffa057062b\u003e] idmap_pipe_downcall+0x1cb/0x1e0 [nfs]\n [\u003cffffffffa0107f57\u003e] rpc_pipe_write+0x67/0x90 [sunrpc]\n [\u003cffffffff8117f833\u003e] vfs_write+0xb3/0x180\n [\u003cffffffff8117fb5a\u003e] sys_write+0x4a/0x90\n [\u003cffffffff81600329\u003e] system_call_fastpath+0x16/0x1b\nCode: Bad RIP value.\nRIP [\u003c (null)\u003e] (null)\n RSP \u003cffff8801a3645d40\u003e\nCR2: 0000000000000000\n\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nReviewed-by: Steve Dickson \u003csteved@redhat.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "032da6abbc34272959c790941ce8705337061dbf", "tree": "f55aa206bf8cd63cd9348dc0758e0a31ff15e4dd", "parents": [ "f0f5dcc0020b78983061a2a674491f4eaa03e386" ], "author": { "name": "Jeff Layton", "email": "jlayton@redhat.com", "time": "Mon Jul 23 13:58:51 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "nfs: skip commit in releasepage if we\u0027re freeing memory for fs-related reasons\n\ncommit 5cf02d09b50b1ee1c2d536c9cf64af5a7d433f56 upstream.\n\nWe\u0027ve had some reports of a deadlock where rpciod ends up with a stack\ntrace like this:\n\n PID: 2507 TASK: ffff88103691ab40 CPU: 14 COMMAND: \"rpciod/14\"\n #0 [ffff8810343bf2f0] schedule at ffffffff814dabd9\n #1 [ffff8810343bf3b8] nfs_wait_bit_killable at ffffffffa038fc04 [nfs]\n #2 [ffff8810343bf3c8] __wait_on_bit at ffffffff814dbc2f\n #3 [ffff8810343bf418] out_of_line_wait_on_bit at ffffffff814dbcd8\n #4 [ffff8810343bf488] nfs_commit_inode at ffffffffa039e0c1 [nfs]\n #5 [ffff8810343bf4f8] nfs_release_page at ffffffffa038bef6 [nfs]\n #6 [ffff8810343bf528] try_to_release_page at ffffffff8110c670\n #7 [ffff8810343bf538] shrink_page_list.clone.0 at ffffffff81126271\n #8 [ffff8810343bf668] shrink_inactive_list at ffffffff81126638\n #9 [ffff8810343bf818] shrink_zone at ffffffff8112788f\n #10 [ffff8810343bf8c8] do_try_to_free_pages at ffffffff81127b1e\n #11 [ffff8810343bf958] try_to_free_pages at ffffffff8112812f\n #12 [ffff8810343bfa08] __alloc_pages_nodemask at ffffffff8111fdad\n #13 [ffff8810343bfb28] kmem_getpages at ffffffff81159942\n #14 [ffff8810343bfb58] fallback_alloc at ffffffff8115a55a\n #15 [ffff8810343bfbd8] ____cache_alloc_node at ffffffff8115a2d9\n #16 [ffff8810343bfc38] kmem_cache_alloc at ffffffff8115b09b\n #17 [ffff8810343bfc78] sk_prot_alloc at ffffffff81411808\n #18 [ffff8810343bfcb8] sk_alloc at ffffffff8141197c\n #19 [ffff8810343bfce8] inet_create at ffffffff81483ba6\n #20 [ffff8810343bfd38] __sock_create at ffffffff8140b4a7\n #21 [ffff8810343bfd98] xs_create_sock at ffffffffa01f649b [sunrpc]\n #22 [ffff8810343bfdd8] xs_tcp_setup_socket at ffffffffa01f6965 [sunrpc]\n #23 [ffff8810343bfe38] worker_thread at ffffffff810887d0\n #24 [ffff8810343bfee8] kthread at ffffffff8108dd96\n #25 [ffff8810343bff48] kernel_thread at ffffffff8100c1ca\n\nrpciod is trying to allocate memory for a new socket to talk to the\nserver. The VM ends up calling -\u003ereleasepage to get more memory, and it\ntries to do a blocking commit. That commit can\u0027t succeed however without\na connected socket, so we deadlock.\n\nFix this by setting PF_FSTRANS on the workqueue task prior to doing the\nsocket allocation, and having nfs_release_page check for that flag when\ndeciding whether to do a commit call. Also, set PF_FSTRANS\nunconditionally in rpc_async_schedule since that function can also do\nallocations sometimes.\n\nSigned-off-by: Jeff Layton \u003cjlayton@redhat.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "f0f5dcc0020b78983061a2a674491f4eaa03e386", "tree": "01546cc32722b449a13a9baa400e1d5a43abc3d9", "parents": [ "a647f0df62cc4eaa0f42b85c71843ed90e150536" ], "author": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Tue Jun 05 16:52:06 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "nfsd4: our filesystems are normally case sensitive\n\ncommit 2930d381d22b9c56f40dd4c63a8fa59719ca2c3c upstream.\n\nActually, xfs and jfs can optionally be case insensitive; we\u0027ll handle\nthat case in later patches.\n\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a647f0df62cc4eaa0f42b85c71843ed90e150536", "tree": "a628b80623747017698a8020e9066f86adf66905", "parents": [ "e73b09d8f258df200adb6383c77c38c31f6f4baa" ], "author": { "name": "Boaz Harrosh", "email": "bharrosh@panasas.com", "time": "Fri Jun 08 02:02:30 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "pnfs-obj: Fix __r4w_get_page when offset is beyond i_size\n\ncommit c999ff68029ebd0f56ccae75444f640f6d5a27d2 upstream.\n\nIt is very common for the end of the file to be unaligned on\nstripe size. But since we know it\u0027s beyond file\u0027s end then\nthe XOR should be preformed with all zeros.\n\nOld code used to just read zeros out of the OSD devices, which is a great\nwaist. But what scares me more about this situation is that, we now have\npages attached to the file\u0027s mapping that are beyond i_size. I don\u0027t\nlike the kind of bugs this calls for.\n\nFix both birds, by returning a global zero_page, if offset is beyond\ni_size.\n\nTODO:\n\tChange the API to -\u003e__r4w_get_page() so a NULL can be\n\treturned without being considered as error, since XOR API\n\ttreats NULL entries as zero_pages.\n\n[Bug since 3.2. Should apply the same way to all Kernels since]\nSigned-off-by: Boaz Harrosh \u003cbharrosh@panasas.com\u003e\n[bwh: Backported to 3.2: adjust for lack of wdata-\u003eheader]\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e73b09d8f258df200adb6383c77c38c31f6f4baa", "tree": "5d67fdbc9e8636156681f69bf46d61a5ab6a1e45", "parents": [ "b4ce163953a4baab2341ba42386904a7199d11af" ], "author": { "name": "Joe Thornber", "email": "ejt@redhat.com", "time": "Fri Jul 27 15:08:05 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "dm thin: fix memory leak in process_prepared_mapping error paths\n\ncommit 905386f82d08f66726912f303f3e6605248c60a3 upstream.\n\nFix memory leak in process_prepared_mapping by always freeing\nthe dm_thin_new_mapping structs from the mapping_pool mempool on\nthe error paths.\n\nSigned-off-by: Joe Thornber \u003cejt@redhat.com\u003e\nSigned-off-by: Mike Snitzer \u003csnitzer@redhat.com\u003e\nSigned-off-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "b4ce163953a4baab2341ba42386904a7199d11af", "tree": "9ce488763642d813f454f09fb819f15bee700a90", "parents": [ "27cd8f51344dcf4799c7a092c1797402b833126a" ], "author": { "name": "Alasdair G Kergon", "email": "agk@redhat.com", "time": "Fri Jul 27 15:07:57 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:40 2012 -0700" }, "message": "dm thin: reduce endio_hook pool size\n\ncommit 7768ed33ccdc02801c4483fc5682dc66ace14aea upstream.\n\nReduce the slab size used for the dm_thin_endio_hook mempool.\n\nAllocation has been seen to fail on machines with smaller amounts\nof memory due to fragmentation.\n\n lvm: page allocation failure. order:5, mode:0xd0\n device-mapper: table: 253:38: thin-pool: Error creating pool\u0027s endio_hook mempool\n\nSigned-off-by: Alasdair G Kergon \u003cagk@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "27cd8f51344dcf4799c7a092c1797402b833126a", "tree": "4af5fa7d852c6f73795dd0ea9508b86283fb009e", "parents": [ "b6e9ffcdb09fbf28665e025aa31fda702689786c" ], "author": { "name": "Josh Boyer", "email": "jwboyer@redhat.com", "time": "Wed Jul 25 10:40:34 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:39 2012 -0700" }, "message": "posix_types.h: Cleanup stale __NFDBITS and related definitions\n\ncommit 8ded2bbc1845e19c771eb55209aab166ef011243 upstream.\n\nRecently, glibc made a change to suppress sign-conversion warnings in\nFD_SET (glibc commit ceb9e56b3d1). This uncovered an issue with the\nkernel\u0027s definition of __NFDBITS if applications #include\n\u003clinux/types.h\u003e after including \u003csys/select.h\u003e. A build failure would\nbe seen when passing the -Werror\u003dsign-compare and -D_FORTIFY_SOURCE\u003d2\nflags to gcc.\n\nIt was suggested that the kernel should either match the glibc\ndefinition of __NFDBITS or remove that entirely. The current in-kernel\nuses of __NFDBITS can be replaced with BITS_PER_LONG, and there are no\nuses of the related __FDELT and __FDMASK defines. Given that, we\u0027ll\ncontinue the cleanup that was started with commit 8b3d1cda4f5f\n(\"posix_types: Remove fd_set macros\") and drop the remaining unused\nmacros.\n\nAdditionally, linux/time.h has similar macros defined that expand to\nnothing so we\u0027ll remove those at the same time.\n\nReported-by: Jeff Law \u003claw@redhat.com\u003e\nSuggested-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Josh Boyer \u003cjwboyer@redhat.com\u003e\n[ .. and fix up whitespace as per akpm ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "b6e9ffcdb09fbf28665e025aa31fda702689786c", "tree": "95d2db47f38308441f874ec732b4c80c510762ba", "parents": [ "de5b1c0849465404f94ffc0574e9ec9e8dc97570" ], "author": { "name": "Jerome Glisse", "email": "jglisse@redhat.com", "time": "Tue Jul 24 17:06:11 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:39 2012 -0700" }, "message": "drm/radeon: fix dpms on/off on trinity/aruba v2\n\ncommit fcedac670c3da0d17aaa5db1708694971e8024a9 upstream.\n\nThe external encoder need to be setup again before enabling the\ntransmiter. This seems to be only needed on some trinity/aruba\nto fix dpms on.\n\nv2: Add comment, only setup again on dce6 ie aruba or newer.\n\nSigned-off-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "de5b1c0849465404f94ffc0574e9ec9e8dc97570", "tree": "c9be5b74459220423c8006aa6e24c23998139113", "parents": [ "b7ea4b8363e16630219674b9b8178dc07e7e6022" ], "author": { "name": "Jerome Glisse", "email": "jglisse@redhat.com", "time": "Thu Jul 19 17:25:55 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:39 2012 -0700" }, "message": "drm/radeon: on hotplug force link training to happen (v2)\n\ncommit ca2ccde5e2f24a792caa4cca919fc5c6f65d1887 upstream.\n\nTo have DP behave like VGA/DVI we need to retrain the link\non hotplug. For this to happen we need to force link\ntraining to happen by setting connector dpms to off\nbefore asking it turning it on again.\n\nv2: agd5f\n- drop the dp_get_link_status() change in atombios_dp.c\n for now. We still need the dpms OFF change.\n\nSigned-off-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "b7ea4b8363e16630219674b9b8178dc07e7e6022", "tree": "ae1622f951a6bd070b6e90e6e0c4b73ffa8e8781", "parents": [ "108c49a5cd65e2edc904212e6bd365db8d2f29e8" ], "author": { "name": "Jerome Glisse", "email": "jglisse@redhat.com", "time": "Thu Jul 19 17:15:56 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:39 2012 -0700" }, "message": "drm/radeon: fix hotplug of DP to DVI|HDMI passive adapters (v2)\n\ncommit 266dcba541a1ef7e5d82d9e67c67fde2910636e8 upstream.\n\nNo need to retrain the link for passive adapters.\n\nv2: agd5f\n- no passive DP to VGA adapters, update comments\n- assign radeon_connector_atom_dig after we are sure\n we have a digital connector as analog connectors\n have different private data.\n- get new sink type before checking for retrain. No\n need to check if it\u0027s no longer a DP connection.\n\nSigned-off-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nSigned-off-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "108c49a5cd65e2edc904212e6bd365db8d2f29e8", "tree": "17671fd2602d6598bc0fbb88683837b75dff7843", "parents": [ "bec6d04dc715ad9fbc0d86abb3eea125109cf98f" ], "author": { "name": "Jerome Glisse", "email": "jglisse@redhat.com", "time": "Tue Jul 17 17:17:16 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:39 2012 -0700" }, "message": "drm/radeon: fix non revealent error message\n\ncommit 8d1c702aa0b2c4b22b0742b72a1149d91690674b upstream.\n\nWe want to print link status query failed only if it\u0027s\nan unexepected fail. If we query to see if we need\nlink training it might be because there is nothing\nconnected and thus link status query have the right\nto fail in that case.\n\nTo avoid printing failure when it\u0027s expected, move the\nfailure message to proper place.\n\nSigned-off-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "bec6d04dc715ad9fbc0d86abb3eea125109cf98f", "tree": "e3d0e13cbb3b32995a4d65099627de8890b6ae00", "parents": [ "47be757968b4344dd3e46f4e62c842cc201e830d" ], "author": { "name": "Michel Dänzer", "email": "michel.daenzer@amd.com", "time": "Tue Jul 17 19:02:09 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "drm/radeon: Try harder to avoid HW cursor ending on a multiple of 128 columns.\n\ncommit f60ec4c7df043df81e62891ac45383d012afe0da upstream.\n\nThis could previously fail if either of the enabled displays was using a\nhorizontal resolution that is a multiple of 128, and only the leftmost column\nof the cursor was (supposed to be) visible at the right edge of that display.\n\nThe solution is to move the cursor one pixel to the left in that case.\n\nBugzilla: https://bugs.freedesktop.org/show_bug.cgi?id\u003d33183\n\nSigned-off-by: Michel Dänzer \u003cmichel.daenzer@amd.com\u003e\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "47be757968b4344dd3e46f4e62c842cc201e830d", "tree": "13758a3f7197b40fa9e5f3a2bd2dde6822043dc5", "parents": [ "5d11fb27d2f819d61df7e6dc36eb27374a92abe8" ], "author": { "name": "Jerome Glisse", "email": "jglisse@redhat.com", "time": "Thu Jul 12 18:23:05 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "drm/radeon: fix bo creation retry path\n\ncommit d1c7871ddb1f588b8eb35affd9ee1a3d5e11cd0c upstream.\n\nRetry label was at wrong place in function leading to memory\nleak.\n\nSigned-off-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nReviewed-by: Michel Dänzer \u003cmichel.daenzer@amd.com\u003e\nReviewed-by: Christian König \u003cchristian.koenig@amd.com\u003e\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "5d11fb27d2f819d61df7e6dc36eb27374a92abe8", "tree": "f3f06fe91b71f3062c70f5b82e7362ba5181825b", "parents": [ "cbb9e89c375e167d012058c82fa69dd17ec17d4c" ], "author": { "name": "Christian König", "email": "deathsimple@vodafone.de", "time": "Tue Jul 03 14:05:41 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "drm/radeon: fix fence related segfault in CS\n\ncommit 93bf888c5c730605e3470f5d2381f296eda88d79 upstream.\n\nDon\u0027t return success if scheduling the IB fails, otherwise\nwe end up with an oops in ttm_eu_fence_buffer_objects.\n\nSigned-off-by: Christian König \u003cdeathsimple@vodafone.de\u003e\nReviewed-by: Jerome Glisse \u003cjglisse@redhat.com\u003e\nReviewed-by: Michel Dänzer \u003cmichel.daenzer@amd.com\u003e\nReviewed-by: Alex Deucher \u003calexander.deucher@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "cbb9e89c375e167d012058c82fa69dd17ec17d4c", "tree": "45d1c8f79e712038355016ffcffb85d078d91199", "parents": [ "4593e510277fec9fbe8708b1276301ead59470f0" ], "author": { "name": "Michael Chan", "email": "mchan@broadcom.com", "time": "Sun Jul 29 19:15:44 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "tg3: Fix race condition in tg3_get_stats64()\n\ncommit 0f566b208b41918053b2e67399673aaec02dde5d upstream.\n\nSpinlock should be taken before checking for tp-\u003ehw_stats.\n\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "4593e510277fec9fbe8708b1276301ead59470f0", "tree": "3eea1d4ba7d5f4c75d5daf4020ab4a3ad4ffbec7", "parents": [ "e49e6d039117405be1c4de6ac9cce196f9aea22e" ], "author": { "name": "Michael Chan", "email": "mchan@broadcom.com", "time": "Sun Jul 29 19:15:42 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "tg3: Fix Read DMA workaround for 5719 A0.\n\ncommit 10ce95d6ef36c65df7dcd3b8fcf86913f8b298bd upstream.\n\nThe workaround was mis-applied to all 5719 and 5720 chips.\n\nSigned-off-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e49e6d039117405be1c4de6ac9cce196f9aea22e", "tree": "8784a004200c1425680c26e67e9f2c900fd01ec8", "parents": [ "bfc41a820b085dff6048aab510a4dcb48b570d3b" ], "author": { "name": "Greg KH", "email": "gregkh@linuxfoundation.org", "time": "Thu Jul 12 15:39:44 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "tg3: add device id of Apple Thunderbolt Ethernet device\n\ncommit 02eca3f5f5e458c3a5d7b772bc8042ee2a4ebedf upstream.\n\nThe Apple Thunderbolt ethernet device is already listed in the driver,\nbut not hooked up in the MODULE_DEVICE_TABLE(). This fixes that and\nallows it to work properly.\n\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nAcked-by: Michael Chan \u003cmchan@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n\n" }, { "commit": "bfc41a820b085dff6048aab510a4dcb48b570d3b", "tree": "bbef45ba4dc4adf7b3e7d7685e35edfa17fd4cfb", "parents": [ "7e7a57b3ea066e3caf149feb37c6487d8423c772" ], "author": { "name": "Frank Blaschka", "email": "frank.blaschka@de.ibm.com", "time": "Tue Jul 24 22:34:29 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "qeth: repair crash in qeth_l3_vlan_rx_kill_vid()\n\ncommit eabfbe6230ee7363681e7a561948d362b87169f0 upstream.\n\nCommit efc73f4b \"net: Fix memory leak - vlan_info struct\" adds deletion of\nVLAN 0 for devices with feature NETIF_F_HW_VLAN_FILTER. For driver\nqeth these are the layer 3 devices. Usually there exists no\nseparate vlan net_device for VLAN 0. Thus the qeth functions\nqeth_l3_free_vlan_addresses4() and qeth_l3_free_vlan_addresses6()\nrequire an extra checking if function __vlan_find_dev_deep()\nreturns with a net_device.\n\nSigned-off-by: Ursula Braun \u003cursula.braun@de.ibm.com\u003e\nSigned-off-by: Frank Blaschka \u003cfrank.blaschka@de.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "7e7a57b3ea066e3caf149feb37c6487d8423c772", "tree": "add5a030b33c5eb4d1d307c317725912ee122d47", "parents": [ "da49dbd95a28bd166f8935f53ed76d406cd891ca" ], "author": { "name": "Virupax Sadashivpetimath", "email": "virupax.sadashivpetimath@stericsson.com", "time": "Tue Jun 12 15:10:58 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "spi/pl022: disable port when unused\n\ncommit fd316941cfee1fbd12746afea83720fb7823888a upstream.\n\nCommit ffbbdd21329f3e15eeca6df2d4bc11c04d9d91c0\n\"spi: create a message queueing infrastructure\"\nAccidentally deleted the logic to disable the port\nwhen unused leading to higher power consumption.\nFix this up.\n\nCc: Vinit Shenoy \u003cvinit.shenoy@st.com\u003e\nSigned-off-by: Virupax Sadashivpetimath \u003cvirupax.sadashivpetimath@stericsson.com\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "da49dbd95a28bd166f8935f53ed76d406cd891ca", "tree": "2557d9838862d43c15b18a746e87c03c2ad70fd7", "parents": [ "d458a00f17bd1c883eaf0192e1cc33a2ae530750" ], "author": { "name": "Jeff Layton", "email": "jlayton@redhat.com", "time": "Mon Jul 23 20:34:17 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:38 2012 -0700" }, "message": "cifs: reinstate sec\u003dntlmv2 mount option\n\ncommit 7659624ffb550d69c87f9af9ae63e717daa874bd upstream.\n\nsec\u003dntlmv2 as a mount option got dropped in the mount option overhaul.\n\nCc: Sachin Prabhu \u003csprabhu@redhat.com\u003e\nReported-by: Günter Kukkukk \u003clinux@kukkukk.com\u003e\nSigned-off-by: Jeff Layton \u003cjlayton@redhat.com\u003e\nSigned-off-by: Steve French \u003csmfrench@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d458a00f17bd1c883eaf0192e1cc33a2ae530750", "tree": "80f25603e2f025aee9d89634af34b99f59cb139f", "parents": [ "c1542109ac67110d3072fabb23e4604be0ff7554" ], "author": { "name": "Chris Mason", "email": "chris.mason@fusionio.com", "time": "Wed Jul 25 15:57:13 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:37 2012 -0700" }, "message": "Btrfs: call the ordered free operation without any locks held\n\ncommit e9fbcb42201c862fd6ab45c48ead4f47bb2dea9d upstream.\n\nEach ordered operation has a free callback, and this was called with the\nworker spinlock held. Josef made the free callback also call iput,\nwhich we can\u0027t do with the spinlock.\n\nThis drops the spinlock for the free operation and grabs it again before\nmoving through the rest of the list. We\u0027ll circle back around to this\nand find a cleaner way that doesn\u0027t bounce the lock around so much.\n\nSigned-off-by: Chris Mason \u003cchris.mason@fusionio.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "c1542109ac67110d3072fabb23e4604be0ff7554", "tree": "6be846158ca9621deb86bc5e8a54cc6a991ea5fc", "parents": [ "8ebdf76ba264031c60e8dc720775833e0ab6512d" ], "author": { "name": "Lan Tianyu", "email": "tianyu.lan@intel.com", "time": "Fri Jul 20 13:29:16 2012 +0800" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:37 2012 -0700" }, "message": "ACPI/AC: prevent OOPS on some boxes due to missing check power_supply_register() return value check\n\ncommit f197ac13f6eeb351b31250b9ab7d0da17434ea36 upstream.\n\nIn the ac.c, power_supply_register()\u0027s return value is not checked.\n\nAs a result, the driver\u0027s add() ops may return success\neven though the device failed to initialize.\n\nFor example, some BIOS may describe two ACADs in the same DSDT.\nThe second ACAD device will fail to register,\nbut ACPI driver\u0027s add() ops returns sucessfully.\nThe ACPI device will receive ACPI notification and cause OOPS.\n\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d772730\n\nSigned-off-by: Lan Tianyu \u003ctianyu.lan@intel.com\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "8ebdf76ba264031c60e8dc720775833e0ab6512d", "tree": "4a6b0049c61a89be773c9b895551f2e558cc3ae7", "parents": [ "d3b42543cf269243ccf2add49008db879ff7f146" ], "author": { "name": "Jean Delvare", "email": "jdelvare@suse.de", "time": "Tue Jun 12 10:43:28 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:37 2012 -0700" }, "message": "ACPI, APEI: Fixup common access width firmware bug\n\ncommit f712c71f7b2b43b894d1e92e1b77385fcad8815f upstream.\n\nMany firmwares have a common register definition bug where 8-bit\naccess width is specified for a 32-bit register. Ideally this should\nbe fixed in the BIOS, but earlier versions of the kernel did not\ncomplain, so fix that up silently.\n\nThis closes kernel bug #43282:\nhttps://bugzilla.kernel.org/show_bug.cgi?id\u003d43282\n\nSigned-off-by: Jean Delvare \u003cjdelvare@suse.de\u003e\nAcked-by: Huang Ying \u003cying.huang@intel.com\u003e\nAcked-by: Gary Hade \u003cgaryhade@us.ibm.com\u003e\nSigned-off-by: Len Brown \u003clen.brown@intel.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d3b42543cf269243ccf2add49008db879ff7f146", "tree": "db596959747095c3c76fa57fd8420a33a2974615", "parents": [ "c7815406caf7efdd805e893caef4a63e61b7645e" ], "author": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Tue Jul 17 12:39:26 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:37 2012 -0700" }, "message": "workqueue: perform cpu down operations from low priority cpu_notifier()\n\ncommit 6575820221f7a4dd6eadecf7bf83cdd154335eda upstream.\n\nCurrently, all workqueue cpu hotplug operations run off\nCPU_PRI_WORKQUEUE which is higher than normal notifiers. This is to\nensure that workqueue is up and running while bringing up a CPU before\nother notifiers try to use workqueue on the CPU.\n\nPer-cpu workqueues are supposed to remain working and bound to the CPU\nfor normal CPU_DOWN_PREPARE notifiers. This holds mostly true even\nwith workqueue offlining running with higher priority because\nworkqueue CPU_DOWN_PREPARE only creates a bound trustee thread which\nruns the per-cpu workqueue without concurrency management without\nexplicitly detaching the existing workers.\n\nHowever, if the trustee needs to create new workers, it creates\nunbound workers which may wander off to other CPUs while\nCPU_DOWN_PREPARE notifiers are in progress. Furthermore, if the CPU\ndown is cancelled, the per-CPU workqueue may end up with workers which\naren\u0027t bound to the CPU.\n\nWhile reliably reproducible with a convoluted artificial test-case\ninvolving scheduling and flushing CPU burning work items from CPU down\nnotifiers, this isn\u0027t very likely to happen in the wild, and, even\nwhen it happens, the effects are likely to be hidden by the following\nsuccessful CPU down.\n\nFix it by using different priorities for up and down notifiers - high\npriority for up operations and low priority for down operations.\n\nWorkqueue cpu hotplug operations will soon go through further cleanup.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nAcked-by: \"Rafael J. Wysocki\" \u003crjw@sisk.pl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "c7815406caf7efdd805e893caef4a63e61b7645e", "tree": "ae308b8e7ac0fd404426c9484545d80960b160de", "parents": [ "02f5c5d768faf0417b6801a1bfebc866a6db7878" ], "author": { "name": "Ben Hutchings", "email": "ben@decadent.org.uk", "time": "Wed Jun 20 02:31:11 2012 +0100" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:37 2012 -0700" }, "message": "staging: zsmalloc: Finish conversion to a separate module\n\ncommit 069f101fa463351f528773d73b74e9b606b3f66a upstream.\n\nZSMALLOC is tristate, but the code has no MODULE_LICENSE and since it\ndepends on GPL-only symbols it cannot be loaded as a module. This in\nturn breaks zram which now depends on it. I assume it\u0027s meant to be\nDual BSD/GPL like the other z-stuff.\n\nThere is also no module_exit, which will make it impossible to unload.\nAdd the appropriate module_init and module_exit declarations suggested\nby comments.\n\nReported-by: Christian Ohm \u003cchr.ohm@gmx.net\u003e\nReferences: http://bugs.debian.org/677273\nSigned-off-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nReviewed-by: Jonathan Nieder \u003cjrnieder@gmail.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "02f5c5d768faf0417b6801a1bfebc866a6db7878", "tree": "3301f564e076698565cec668512a51c193ea6966", "parents": [ "664634f8a03e721a7fffb5f1e21cbdd806598cda" ], "author": { "name": "Paul Gortmaker", "email": "paul.gortmaker@windriver.com", "time": "Tue Jun 05 11:15:50 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:37 2012 -0700" }, "message": "stable: update references to older 2.6 versions for 3.x\n\ncommit 2584f5212d97b664be250ad5700a2d0fee31a10d upstream.\n\nAlso add information on where the respective trees are.\n\nSigned-off-by: Paul Gortmaker \u003cpaul.gortmaker@windriver.com\u003e\nAcked-by: Rob Landley \u003crob@landley.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "664634f8a03e721a7fffb5f1e21cbdd806598cda", "tree": "7ac4078aee20f705905be154ef083e7796ae4b8e", "parents": [ "06e619c5073d1830f58039cd97e95ae184cf7bbb" ], "author": { "name": "Jan Kara", "email": "jack@suse.cz", "time": "Tue Jul 10 17:58:04 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:36 2012 -0700" }, "message": "udf: Improve table length check to avoid possible overflow\n\ncommit 57b9655d01ef057a523e810d29c37ac09b80eead upstream.\n\nWhen a partition table length is corrupted to be close to 1 \u003c\u003c 32, the\ncheck for its length may overflow on 32-bit systems and we will think\nthe length is valid. Later on the kernel can crash trying to read beyond\nend of buffer. Fix the check to avoid possible overflow.\n\nReported-by: Ben Hutchings \u003cben@decadent.org.uk\u003e\nSigned-off-by: Jan Kara \u003cjack@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "06e619c5073d1830f58039cd97e95ae184cf7bbb", "tree": "06ed3d1ec3c4456bebe7f65fed9c31020bc138de", "parents": [ "e6c1b59aaa759ae5374dedf8508ee14aff2f967f" ], "author": { "name": "Joerg Roedel", "email": "joerg.roedel@amd.com", "time": "Thu Jul 19 13:42:54 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:32 2012 -0700" }, "message": "iommu/amd: Fix hotplug with iommu\u003dpt\n\ncommit 2c9195e990297068d0f1f1bd8e2f1d09538009da upstream.\n\nThis did not work because devices are not put into the\npt_domain. Fix this.\n\nSigned-off-by: Joerg Roedel \u003cjoerg.roedel@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "e6c1b59aaa759ae5374dedf8508ee14aff2f967f", "tree": "3d489f4259adb2219056879eb2e6c928e1db9d69", "parents": [ "351bb0ecc5b0b9dc60d07a44078fa16971c7f3e7" ], "author": { "name": "Joerg Roedel", "email": "joerg.roedel@amd.com", "time": "Thu Jul 19 10:56:10 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:31 2012 -0700" }, "message": "iommu/amd: Add missing spin_lock initialization\n\ncommit 2c13d47a1a7ee8808796016c617aef25fd1d1925 upstream.\n\nAdd missing spin_lock initialization in\namd_iommu_bind_pasid() function and make lockdep happy\nagain.\n\nSigned-off-by: Joerg Roedel \u003cjoerg.roedel@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "351bb0ecc5b0b9dc60d07a44078fa16971c7f3e7", "tree": "ae8c5c448e855657289affc7f907bd11b2142efd", "parents": [ "cd1af8b7d386e6b3991252650c16b3e9d5a03b65" ], "author": { "name": "Heiko Carstens", "email": "heiko.carstens@de.ibm.com", "time": "Fri Jul 27 09:45:39 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:31 2012 -0700" }, "message": "s390/mm: fix fault handling for page table walk case\n\ncommit 008c2e8f247f0a8db1e8e26139da12f3a3abcda0 upstream.\n\nMake sure the kernel does not incorrectly create a SIGBUS signal during\nuser space accesses:\n\nFor user space accesses in the switched addressing mode case the kernel\nmay walk page tables and access user address space via the kernel\nmapping. If a page table entry is invalid the function __handle_fault()\ngets called in order to emulate a page fault and trigger all the usual\nactions like paging in a missing page etc. by calling handle_mm_fault().\n\nIf handle_mm_fault() returns with an error fixup handling is necessary.\nFor the switched addressing mode case all errors need to be mapped to\n-EFAULT, so that the calling uaccess function can return -EFAULT to\nuser space.\n\nUnfortunately the __handle_fault() incorrectly calls do_sigbus() if\nVM_FAULT_SIGBUS is set. This however should only happen if a page fault\nwas triggered by a user space instruction. For kernel mode uaccesses\nthe correct action is to only return -EFAULT.\nSo user space may incorrectly see SIGBUS signals because of this bug.\n\nFor current machines this would only be possible for the switched\naddressing mode case in conjunction with futex operations.\n\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "cd1af8b7d386e6b3991252650c16b3e9d5a03b65", "tree": "93fc53558ab9ad563fb4d58b5f3b7f6a62e85215", "parents": [ "554c9a0c6f72a8a5c44962b82f495d95e547b4b3" ], "author": { "name": "Martin Schwidefsky", "email": "schwidefsky@de.ibm.com", "time": "Thu Jul 26 08:53:06 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:31 2012 -0700" }, "message": "s390/mm: downgrade page table after fork of a 31 bit process\n\ncommit 0f6f281b731d20bfe75c13f85d33f3f05b440222 upstream.\n\nThe downgrade of the 4 level page table created by init_new_context is\ncurrently done only in start_thread31. If a 31 bit process forks the\nnew mm uses a 4 level page table, including the task size of 2\u003c\u003c42\nthat goes along with it. This is incorrect as now a 31 bit process\ncan map memory beyond 2GB. Define arch_dup_mmap to do the downgrade\nafter fork.\n\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "554c9a0c6f72a8a5c44962b82f495d95e547b4b3", "tree": "451c24b944fcc114f4f7fc719b760e82d7491c06", "parents": [ "2c3fea5b8591cd8c539bff95108efc2a1f9c5f20" ], "author": { "name": "Heiko Carstens", "email": "heiko.carstens@de.ibm.com", "time": "Fri Jul 13 15:45:33 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "s390/idle: fix sequence handling vs cpu hotplug\n\ncommit 0008204ffe85d23382d6fd0f971f3f0fbe70bae2 upstream.\n\nThe s390 idle accounting code uses a sequence counter which gets used\nwhen the per cpu idle statistics get updated and read.\n\nOne assumption on read access is that only when the sequence counter is\neven and did not change while reading all values the result is valid.\nOn cpu hotplug however the per cpu data structure gets initialized via\na cpu hotplug notifier on CPU_ONLINE.\nCPU_ONLINE however is too late, since the onlined cpu is already running\nand might access the per cpu data. Worst case is that the data structure\ngets initialized while an idle thread is updating its idle statistics.\nThis will result in an uneven sequence counter after an update.\n\nAs a result user space tools like top, which access /proc/stat in order\nto get idle stats, will busy loop waiting for the sequence counter to\nbecome even again, which will never happen until the queried cpu will\nupdate its idle statistics again. And even then the sequence counter\nwill only have an even value for a couple of cpu cycles.\n\nFix this by moving the initialization of the per cpu idle statistics\nto cpu_init(). I prefer that solution in favor of changing the\nnotifier to CPU_UP_PREPARE, which would be a different solution to\nthe problem.\n\nSigned-off-by: Heiko Carstens \u003cheiko.carstens@de.ibm.com\u003e\nSigned-off-by: Martin Schwidefsky \u003cschwidefsky@de.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2c3fea5b8591cd8c539bff95108efc2a1f9c5f20", "tree": "ba89da2cd9a0c8f509a87332baa54b323f79de3a", "parents": [ "ae9bc43cfc53968dd628052d1c225ace8560da64" ], "author": { "name": "Amitkumar Karwar", "email": "akarwar@marvell.com", "time": "Wed Jul 11 18:12:57 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "mwifiex: correction in mcs index check\n\ncommit fe020120cb863ba918c6d603345342a880272c4d upstream.\n\nmwifiex driver supports 2x2 chips as well. Hence valid mcs values\nare 0 to 15. The check for mcs index is corrected in this patch.\n\nFor example: if 40MHz is enabled and mcs index is 11, \"iw link\"\ncommand would show \"tx bitrate: 108.0 MBit/s\" without this patch.\nNow it shows \"tx bitrate: 108.0 MBit/s MCS 11 40Mhz\" with the patch.\n\nSigned-off-by: Amitkumar Karwar \u003cakarwar@marvell.com\u003e\nSigned-off-by: Bing Zhao \u003cbzhao@marvell.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ae9bc43cfc53968dd628052d1c225ace8560da64", "tree": "68cc09beb33e8b1ffe1e2379cc5d7c0c1fba3b69", "parents": [ "74ec52aa07788b9bce2edd6ce9763c0d79bad38a" ], "author": { "name": "Forest Bond", "email": "forest.bond@rapidrollout.com", "time": "Fri Jul 13 12:26:06 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "rtlwifi: rtl8192de: Fix phy-based version calculation\n\ncommit f1b00f4dab29b57bdf1bc03ef12020b280fd2a72 upstream.\n\nCommit d83579e2a50ac68389e6b4c58b845c702cf37516 incorporated some\nchanges from the vendor driver that made it newly important that the\ncalculated hardware version correctly include the CHIP_92D bit, as all\nof the IS_92D_* macros were changed to depend on it. However, this bit\nwas being unset for dual-mac, dual-phy devices. The vendor driver\nbehavior was modified to not do this, but unfortunately this change was\nnot picked up along with the others. This caused scanning in the 2.4GHz\nband to be broken, and possibly other bugs as well.\n\nThis patch brings the version calculation logic in parity with the\nvendor driver in this regard, and in doing so fixes the regression.\nHowever, the version calculation code in general continues to be largely\nincoherent and messy, and needs to be cleaned up.\n\nSigned-off-by: Forest Bond \u003cforest.bond@rapidrollout.com\u003e\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "74ec52aa07788b9bce2edd6ce9763c0d79bad38a", "tree": "9212ad804d04566d7dbbf59d0c6dee0e59850158", "parents": [ "a75b6122aacd06507cae1010e0fb6b06fe53336a" ], "author": { "name": "Larry Finger", "email": "Larry.Finger@lwfinger.net", "time": "Wed Jul 11 14:37:28 2012 -0500" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "rtlwifi: rtl8192cu: Change buffer allocation for synchronous reads\n\ncommit 3ce4d85b76010525adedcc2555fa164bf706a2f3 upstream.\n\nIn commit a7959c1, the USB part of rtlwifi was switched to convert\n_usb_read_sync() to using a preallocated buffer rather than one\nthat has been acquired using kmalloc. Although this routine is named\nas though it were synchronous, there seem to be simultaneous users,\nand the selection of the index to the data buffer is not multi-user\nsafe. This situation is addressed by adding a new spinlock. The routine\ncannot sleep, thus a mutex is not allowed.\n\nSigned-off-by: Larry Finger \u003cLarry.Finger@lwfinger.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "a75b6122aacd06507cae1010e0fb6b06fe53336a", "tree": "5596fe38ee3dafda023167bee2b4098c99a32b72", "parents": [ "79746484cab1dede1480580efe9edde68de06770" ], "author": { "name": "Meenakshi Venkataraman", "email": "meenakshi.venkataraman@intel.com", "time": "Wed May 16 22:40:50 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "iwlwifi: fix debug print in iwl_sta_calc_ht_flags\n\ncommit a35e270881a5db1ec9ac8bc6d61ebc3e85c14f33 upstream.\n\nWe missed passing an argument to the\ndebug print. Fix it.\n\nSigned-off-by: Meenakshi Venkataraman \u003cmeenakshi.venkataraman@intel.com\u003e\nReviewed-by: Emmanuel Grumbach \u003cemmanuel.grumbach@intel.com\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "79746484cab1dede1480580efe9edde68de06770", "tree": "88fc5ecfd54d8e1e595bd971e33f2f5b662ef51e", "parents": [ "20855fe2097ccfde927c6997101ae35340f1d278" ], "author": { "name": "Eliad Peller", "email": "eliad@wizery.com", "time": "Sun May 13 18:07:04 2012 +0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "mac80211: fail authentication when AP denied authentication\n\ncommit dac211ec10d268b9d09000093a9fa2ac1773894f upstream.\n\nieee80211_rx_mgmt_auth() doesn\u0027t handle denied authentication\nproperly - it authenticates the station and waits for association\n(for 5 seconds) instead of failing the authentication.\n\nFix it by destroying auth_data and bailing out instead.\n\nSigned-off-by: Eliad Peller \u003celiad@wizery.com\u003e\nAcked-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "20855fe2097ccfde927c6997101ae35340f1d278", "tree": "b185ec5c08472d49f5c96c65c0a4b9d51e41cfc1", "parents": [ "ecbd55f98e07e25d4017077d0a611ce6c766257b" ], "author": { "name": "Mikulas Patocka", "email": "mikulas@artax.karlin.mff.cuni.cz", "time": "Thu Jul 19 06:13:36 2012 +0000" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "tun: fix a crash bug and a memory leak\n\ncommit b09e786bd1dd66418b69348cb110f3a64764626a upstream.\n\nThis patch fixes a crash\ntun_chr_close -\u003e netdev_run_todo -\u003e tun_free_netdev -\u003e sk_release_kernel -\u003e\nsock_release -\u003e iput(SOCK_INODE(sock))\nintroduced by commit 1ab5ecb90cb6a3df1476e052f76a6e8f6511cb3d\n\nThe problem is that this socket is embedded in struct tun_struct, it has\nno inode, iput is called on invalid inode, which modifies invalid memory\nand optionally causes a crash.\n\nsock_release also decrements sockets_in_use, this causes a bug that\n\"sockets: used\" field in /proc/*/net/sockstat keeps on decreasing when\ncreating and closing tun devices.\n\nThis patch introduces a flag SOCK_EXTERNALLY_ALLOCATED that instructs\nsock_release to not free the inode and not decrement sockets_in_use,\nfixing both memory corruption and sockets_in_use underflow.\n\nIt should be backported to 3.3 an 3.4 stabke.\n\nSigned-off-by: Mikulas Patocka \u003cmikulas@artax.karlin.mff.cuni.cz\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "ecbd55f98e07e25d4017077d0a611ce6c766257b", "tree": "b80eb829958ea49e44a6945d57fc4da1c387e584", "parents": [ "46dbb0f5903b71e3c7b37e4ad707a9aa70fe3eed" ], "author": { "name": "Rajiv Andrade", "email": "srajiv@linux.vnet.ibm.com", "time": "Tue Apr 24 17:38:17 2012 -0300" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "TPM: chip disabled state erronously being reported as error\n\ncommit 24ebe6670de3d1f0dca11c9eb372134c7ab05503 upstream.\n\ntpm_do_selftest() attempts to read a PCR in order to\ndecide if one can rely on the TPM being used or not.\nThe function that\u0027s used by __tpm_pcr_read() does not\nexpect the TPM to be disabled or deactivated, and if so,\nreports an error.\n\nIt\u0027s fine if the TPM returns this error when trying to\nuse it for the first time after a power cycle, but it\u0027s\ndefinitely not if it already returned success for a\nprevious attempt to read one of its PCRs.\n\nThe tpm_do_selftest() was modified so that the driver only\nreports this return code as an error when it really is.\n\nReported-and-tested-by: Paul Bolle \u003cpebolle@tiscali.nl\u003e\nSigned-off-by: Rajiv Andrade \u003csrajiv@linux.vnet.ibm.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "46dbb0f5903b71e3c7b37e4ad707a9aa70fe3eed", "tree": "b89b5a76cc3f18c49311552816a837c79a12a595", "parents": [ "d3dd392851e014c90ce9e26d03a93188840a5a0b" ], "author": { "name": "Colin Cross", "email": "ccross@android.com", "time": "Thu Jul 19 10:38:06 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:30 2012 -0700" }, "message": "PM / Sleep: call early resume handlers when suspend_noirq fails\n\ncommit 064b021fbe470ecc9ca10f9f87af48c0fc0865fb upstream.\n\nCommit cf579dfb82550e34de7ccf3ef090d8b834ccd3a9 (PM / Sleep: Introduce\n\"late suspend\" and \"early resume\" of devices) introduced a bug where\nsuspend_late handlers would be called, but if dpm_suspend_noirq returned\nan error the early_resume handlers would never be called. All devices\nwould end up on the dpm_late_early_list, and would never be resumed\nagain.\n\nFix it by calling dpm_resume_early when dpm_suspend_noirq returns\nan error.\n\nSigned-off-by: Colin Cross \u003cccross@android.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "d3dd392851e014c90ce9e26d03a93188840a5a0b", "tree": "b3c8bdf03765360c2d7b1eaf0bbb6f82ea06dbb3", "parents": [ "fd3cca0a4e6ac0512e9122f59dfe0214b74049fb" ], "author": { "name": "Srivatsa S. Bhat", "email": "srivatsa.bhat@linux.vnet.ibm.com", "time": "Sat Jun 16 15:30:45 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "ftrace: Disable function tracing during suspend/resume and hibernation, again\n\ncommit 443772d408a25af62498793f6f805ce3c559309a upstream.\n\nIf function tracing is enabled for some of the low-level suspend/resume\nfunctions, it leads to triple fault during resume from suspend, ultimately\nending up in a reboot instead of a resume (or a total refusal to come out\nof suspended state, on some machines).\n\nThis issue was explained in more detail in commit f42ac38c59e0a03d (ftrace:\ndisable tracing for suspend to ram). However, the changes made by that commit\ngot reverted by commit cbe2f5a6e84eebb (tracing: allow tracing of\nsuspend/resume \u0026 hibernation code again). So, unfortunately since things are\nnot yet robust enough to allow tracing of low-level suspend/resume functions,\nsuspend/resume is still broken when ftrace is enabled.\n\nSo fix this by disabling function tracing during suspend/resume \u0026 hibernation.\n\nSigned-off-by: Srivatsa S. Bhat \u003csrivatsa.bhat@linux.vnet.ibm.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crjw@sisk.pl\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "fd3cca0a4e6ac0512e9122f59dfe0214b74049fb", "tree": "a8d354f5602a097d4c4b585b0dec93558a9b9547", "parents": [ "7b689c5d930f281e417597af9f817ba03dc9d898" ], "author": { "name": "J. Bruce Fields", "email": "bfields@fieldses.org", "time": "Mon Jul 23 15:17:17 2012 -0400" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "locks: fix checking of fcntl_setlease argument\n\ncommit 0ec4f431eb56d633da3a55da67d5c4b88886ccc7 upstream.\n\nThe only checks of the long argument passed to fcntl(fd,F_SETLEASE,.)\nare done after converting the long to an int. Thus some illegal values\nmay be let through and cause problems in later code.\n\n[ They actually *don\u0027t* cause problems in mainline, as of Dave Jones\u0027s\n commit 8d657eb3b438 \"Remove easily user-triggerable BUG from\n generic_setlease\", but we should fix this anyway. And this patch will\n be necessary to fix real bugs on earlier kernels. ]\n\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "7b689c5d930f281e417597af9f817ba03dc9d898", "tree": "75bb26f8fc89a58f25377e60cf2af6879fb795b0", "parents": [ "2830f9a08c084bcf40819942f04d0ca500faf4b8" ], "author": { "name": "Tony Luck", "email": "tony.luck@intel.com", "time": "Wed Jul 11 10:20:47 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "x86/mce: Fix siginfo_t-\u003esi_addr value for non-recoverable memory faults\n\ncommit 6751ed65dc6642af64f7b8a440a75563c8aab7ae upstream.\n\nIn commit dad1743e5993f1 (\"x86/mce: Only restart instruction after machine\ncheck recovery if it is safe\") we fixed mce_notify_process() to force a\nsignal to the current process if it was not restartable (RIPV bit not\nset in MCG_STATUS). But doing it here means that the process doesn\u0027t\nget told the virtual address of the fault via siginfo_t-\u003esi_addr. This\nwould prevent application level recovery from the fault.\n\nMake a new MF_MUST_KILL flag bit for memory_failure() et al. to use so\nthat we will provide the right information with the signal.\n\nSigned-off-by: Tony Luck \u003ctony.luck@intel.com\u003e\nAcked-by: Borislav Petkov \u003cborislav.petkov@amd.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2830f9a08c084bcf40819942f04d0ca500faf4b8", "tree": "968ba4a92907c410518ef4b37a4d289030b887c4", "parents": [ "22dacbd152e98dfd627664f5ee3c21d2bd32430b" ], "author": { "name": "David Henningsson", "email": "david.henningsson@canonical.com", "time": "Fri Jul 20 10:37:25 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "ALSA: hda - add dock support for Thinkpad X230 Tablet\n\ncommit 108cc108a3bb42fe4705df1317ff98e1e29428a6 upstream.\n\nAlso add a model/fixup string \"lenovo-dock\", so that other Thinkpad\nusers will be able to test this fixup easily, to see if it enables\ndock I/O for them as well.\n\nBugLink: https://bugs.launchpad.net/bugs/1026953\nTested-by: John McCarron \u003cjohn.mccarron@canonical.com\u003e\nSigned-off-by: David Henningsson \u003cdavid.henningsson@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "22dacbd152e98dfd627664f5ee3c21d2bd32430b", "tree": "2316eb3692768c6943b9b1831c2bf4893aaa5868", "parents": [ "11ca5d15e7a84181788c01adc4049a36e387dd84" ], "author": { "name": "Gerd Hoffmann", "email": "kraxel@redhat.com", "time": "Tue Jun 19 09:54:48 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "Revert \"usb/uas: make sure data urb is gone if we receive status before that\"\n\ncommit c621a81edecdee85da32c566c21836332c764fda upstream.\n\nThis reverts commit e4d8318a85779b25b880187b1b1c44e797bd7d4b.\n\nThis patch makes uas.c call usb_unlink_urb on data urbs. The data urbs\nget freed in the completion callback. This is illegal according to the\nusb_unlink_urb documentation.\n\nThis patch also makes the code expect the data completion callback\nbeing called before the status completion callback. This isn\u0027t\nguaranteed to be the case, even though the actual data transfer should\nbe finished by the time the status is received.\n\nBackground: The ehci irq handler for example only know that there are\nfinished transfers, it then has go check the QHs \u0026 TDs to see which\ntransfers did actually finish. It has no way to figure in which order\nthe transfers did complete. The xhci driver can call the callbacks in\ncompletion order thanks to the event queue. This does nicely explain\nwhy the driver is solid on a (usb2) xhci port whereas it goes crazy on\nehci in my testing.\n\nSigned-off-by: Gerd Hoffmann \u003ckraxel@redhat.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "11ca5d15e7a84181788c01adc4049a36e387dd84", "tree": "541cd724d4eb393442506d0958e805af2dafad4a", "parents": [ "2cfe89c15298554d5cf9160bf6d8eef290d34041" ], "author": { "name": "Bjørn Mork", "email": "bjorn@mork.no", "time": "Thu Jul 12 12:37:32 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "USB: option: add ZTE MF821D\n\ncommit 09110529780890804b22e997ae6b4fe3f0b3b158 upstream.\n\nSold by O2 (telefonica germany) under the name \"LTE4G\"\n\nTested-by: Thomas Schäfer \u003ctschaefer@t-online.de\u003e\nSigned-off-by: Bjørn Mork \u003cbjorn@mork.no\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2cfe89c15298554d5cf9160bf6d8eef290d34041", "tree": "14549cacadfec2c21b171a38d531969dff7c23a9", "parents": [ "2af3ad34568307d037dc7ab8f923b51e068b33c4" ], "author": { "name": "Kevin Cernekee", "email": "cernekee@gmail.com", "time": "Sun Jun 24 21:11:22 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "usb: gadget: Fix g_ether interface link status\n\ncommit 31bde1ceaa873bcaecd49e829bfabceacc4c512d upstream.\n\nA \"usb0\" interface that has never been connected to a host has an unknown\noperstate, and therefore the IFF_RUNNING flag is (incorrectly) asserted\nwhen queried by ifconfig, ifplugd, etc. This is a result of calling\nnetif_carrier_off() too early in the probe function; it should be called\nafter register_netdev().\n\nSimilar problems have been fixed in many other drivers, e.g.:\n\n e826eafa6 (bonding: Call netif_carrier_off after register_netdevice)\n 0d672e9f8 (drivers/net: Call netif_carrier_off at the end of the probe)\n 6a3c869a6 (cxgb4: fix reported state of interfaces without link)\n\nFix is to move netif_carrier_off() to the end of the function.\n\nSigned-off-by: Kevin Cernekee \u003ccernekee@gmail.com\u003e\nSigned-off-by: Felipe Balbi \u003cbalbi@ti.com\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "2af3ad34568307d037dc7ab8f923b51e068b33c4", "tree": "37db7c658978c5a4b79b1187563512470ce5aec4", "parents": [ "761f186a0f94f7bd1c9c844f96cf0b8bbb6e2abb" ], "author": { "name": "Hans de Goede", "email": "hdegoede@redhat.com", "time": "Wed Jul 04 09:18:01 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:29 2012 -0700" }, "message": "usbdevfs: Correct amount of data copied to user in processcompl_compat\n\ncommit 2102e06a5f2e414694921f23591f072a5ba7db9f upstream.\n\niso data buffers may have holes in them if some packets were short, so for\niso urbs we should always copy the entire buffer, just like the regular\nprocesscompl does.\n\nSigned-off-by: Hans de Goede \u003chdegoede@redhat.com\u003e\nAcked-by: Alan Stern \u003cstern@rowland.harvard.edu\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "761f186a0f94f7bd1c9c844f96cf0b8bbb6e2abb", "tree": "fa35d1b37970b5ff03049ce62559da6975c23b6c", "parents": [ "4e613aa6c586c99341a3ca40fd7f872b7dee1749" ], "author": { "name": "Dylan Reid", "email": "dgreid@chromium.org", "time": "Thu Jul 19 17:52:58 2012 -0700" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:28 2012 -0700" }, "message": "ALSA: hda - Turn on PIN_OUT from hdmi playback prepare.\n\ncommit 9e76e6d031482194a5b24d8e9ab88063fbd6b4b5 upstream.\n\nTurn on the pin widget\u0027s PIN_OUT bit from playback prepare. The pin is\nenabled in open, but is disabled in hdmi_init_pin which is called during\nsystem resume. This causes a system suspend/resume during playback to\nmute HDMI/DP. Enabling the pin in prepare instead of open allows calling\nsnd_pcm_prepare after a system resume to restore audio.\n\nSigned-off-by: Dylan Reid \u003cdgreid@chromium.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" }, { "commit": "4e613aa6c586c99341a3ca40fd7f872b7dee1749", "tree": "c4a9e594bcbecddf34b0b1f0438c6383368de09a", "parents": [ "8f1b438887c47d3b65fc64ca23821d69ba69ddd7" ], "author": { "name": "David Henningsson", "email": "david.henningsson@canonical.com", "time": "Wed Jul 18 07:38:46 2012 +0200" }, "committer": { "name": "Greg Kroah-Hartman", "email": "gregkh@linuxfoundation.org", "time": "Thu Aug 09 08:31:28 2012 -0700" }, "message": "ALSA: hda - Add support for Realtek ALC282\n\ncommit 4e01ec636e64707d202a1ca21a47bbc6d53085b7 upstream.\n\nThis codec has a separate dmic path (separate dmic only ADC),\nand thus it looks mostly like ALC275.\n\nBugLink: https://bugs.launchpad.net/bugs/1025377\nTested-by: Ray Chen \u003cray.chen@canonical.com\u003e\nSigned-off-by: David Henningsson \u003cdavid.henningsson@canonical.com\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n\n" } ], "next": "8f1b438887c47d3b65fc64ca23821d69ba69ddd7" }