)]}'
{
  "log": [
    {
      "commit": "489f7ab6c18cdd64a2d444e056d60a0e722f4ad7",
      "tree": "2c7ed6a0042dc15c91ece08c5a3866f610ddca6d",
      "parents": [
        "b322b7816908487c08b89b72f838174c37d8c836",
        "82d27b2b2f3a80ffa7759a49b9cba39e47df476e"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Jun 14 13:46:25 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Jun 14 13:46:25 2009 -0700"
      },
      "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jikos/trivial: (31 commits)\n  trivial: remove the trivial patch monkey\u0027s name from SubmittingPatches\n  trivial: Fix a typo in comment of addrconf_dad_start()\n  trivial: usb: fix missing space typo in doc\n  trivial: pci hotplug: adding __init/__exit macros to sgi_hotplug\n  trivial: Remove the hyphen from git commands\n  trivial: fix ETIMEOUT -\u003e ETIMEDOUT typos\n  trivial: Kconfig: .ko is normally not included in module names\n  trivial: SubmittingPatches: fix typo\n  trivial: Documentation/dell_rbu.txt: fix typos\n  trivial: Fix Pavel\u0027s address in MAINTAINERS\n  trivial: ftrace:fix description of trace directory\n  trivial: unnecessary (void*) cast removal in sound/oss/msnd.c\n  trivial: input/misc: Fix typo in Kconfig\n  trivial: fix grammo in bus_for_each_dev() kerneldoc\n  trivial: rbtree.txt: fix rb_entry() parameters in sample code\n  trivial: spelling fix in ppc code comments\n  trivial: fix typo in bio_alloc kernel doc\n  trivial: Documentation/rbtree.txt: cleanup kerneldoc of rbtree.txt\n  trivial: Miscellaneous documentation typo fixes\n  trivial: fix typo milisecond/millisecond for documentation and source comments.\n  ...\n"
    },
    {
      "commit": "590a9887a23b60d9c6ff5a82da757371037edbd4",
      "tree": "e099c93d7046f2d4b7477bdfc607b974510ea999",
      "parents": [
        "6e2216895421b4f83d2ebac15c9d9506dc105cff"
      ],
      "author": {
        "name": "Masatake YAMATO",
        "email": "yamato@redhat.com",
        "time": "Tue Jun 09 10:41:12 2009 +0900"
      },
      "committer": {
        "name": "Jiri Kosina",
        "email": "jkosina@suse.cz",
        "time": "Fri Jun 12 18:01:51 2009 +0200"
      },
      "message": "trivial: Fix a typo in comment of addrconf_dad_start()\n\nSigned-off-by: Masatake YAMATO \u003cyamato@redhat.com\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\n"
    },
    {
      "commit": "4737f0978d6e64eae468e01fa181abf6499e6b84",
      "tree": "44871914422157121d4a68d376e60d1b1e7f1f92",
      "parents": [
        "3226224039c8f8cb840d236b5f27d2a1104789e2"
      ],
      "author": {
        "name": "Pavel Machek",
        "email": "pavel@ucw.cz",
        "time": "Fri Jun 05 00:44:53 2009 +0200"
      },
      "committer": {
        "name": "Jiri Kosina",
        "email": "jkosina@suse.cz",
        "time": "Fri Jun 12 18:01:50 2009 +0200"
      },
      "message": "trivial: Kconfig: .ko is normally not included in module names\n\n.ko is normally not included in Kconfig help, make it consistent.\n\nSigned-off-by: Pavel Machek \u003cpavel@ucw.cz\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\n"
    },
    {
      "commit": "6d60f9dfc8d437e914d46fa355c50c695cad24e7",
      "tree": "b9e1d84faf19965eb8efe802d25b40b36c27fc64",
      "parents": [
        "7ea2ac9b6632038377cb488c7d1cb60b88164d4d"
      ],
      "author": {
        "name": "Martin Olsson",
        "email": "mnemo@minimum.se",
        "time": "Tue Apr 07 10:30:24 2009 +0200"
      },
      "committer": {
        "name": "Jiri Kosina",
        "email": "jkosina@suse.cz",
        "time": "Fri Jun 12 18:01:46 2009 +0200"
      },
      "message": "trivial: Fix paramater/parameter typo in dmesg and source comments\n\nSigned-off-by: Martin Olsson \u003cmartin@minimum.se\u003e\nSigned-off-by: Jiri Kosina \u003cjkosina@suse.cz\u003e\n"
    },
    {
      "commit": "d2a7ddda9ffb1c8961abff6714b0f1eb925c120f",
      "tree": "1090884fd260d042255255467367e4e6b6193e5d",
      "parents": [
        "9499f5e7ed5224c40706f0cec6542a9916bc7606"
      ],
      "author": {
        "name": "Michael S. Tsirkin",
        "email": "mst@redhat.com",
        "time": "Fri Jun 12 22:16:36 2009 -0600"
      },
      "committer": {
        "name": "Rusty Russell",
        "email": "rusty@rustcorp.com.au",
        "time": "Fri Jun 12 22:16:36 2009 +0930"
      },
      "message": "virtio: find_vqs/del_vqs virtio operations\n\nThis replaces find_vq/del_vq with find_vqs/del_vqs virtio operations,\nand updates all drivers. This is needed for MSI support, because MSI\nneeds to know the total number of vectors upfront.\n\nSigned-off-by: Michael S. Tsirkin \u003cmst@redhat.com\u003e\nSigned-off-by: Rusty Russell \u003crusty@rustcorp.com.au\u003e (+ lguest/9p compile fixes)\n"
    },
    {
      "commit": "9499f5e7ed5224c40706f0cec6542a9916bc7606",
      "tree": "3e4e1b36d3d549ea356e88e6e44359a887c6ee01",
      "parents": [
        "ef688e151c00e5d529703be9a04fd506df8bc54e"
      ],
      "author": {
        "name": "Rusty Russell",
        "email": "rusty@rustcorp.com.au",
        "time": "Fri Jun 12 22:16:35 2009 -0600"
      },
      "committer": {
        "name": "Rusty Russell",
        "email": "rusty@rustcorp.com.au",
        "time": "Fri Jun 12 22:16:36 2009 +0930"
      },
      "message": "virtio: add names to virtqueue struct, mapping from devices to queues.\n\nAdd a linked list of all virtqueues for a virtio device: this helps for\ndebugging and is also needed for upcoming interface change.\n\nAlso, add a \"name\" field for clearer debug messages.\n\nSigned-off-by: Rusty Russell \u003crusty@rustcorp.com.au\u003e\n"
    },
    {
      "commit": "862366118026a358882eefc70238dbcc3db37aac",
      "tree": "4eb62bc10327a5afac064a95a091ea05ecd2acc1",
      "parents": [
        "57eee9ae7bbcfb692dc96c739a5184adb6349733",
        "511b01bdf64ad8a38414096eab283c7784aebfc4"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Jun 10 19:53:40 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Jun 10 19:53:40 2009 -0700"
      },
      "message": "Merge branch \u0027tracing-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip\n\n* \u0027tracing-for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip: (244 commits)\n  Revert \"x86, bts: reenable ptrace branch trace support\"\n  tracing: do not translate event helper macros in print format\n  ftrace/documentation: fix typo in function grapher name\n  tracing/events: convert block trace points to TRACE_EVENT(), fix !CONFIG_BLOCK\n  tracing: add protection around module events unload\n  tracing: add trace_seq_vprint interface\n  tracing: fix the block trace points print size\n  tracing/events: convert block trace points to TRACE_EVENT()\n  ring-buffer: fix ret in rb_add_time_stamp\n  ring-buffer: pass in lockdep class key for reader_lock\n  tracing: add annotation to what type of stack trace is recorded\n  tracing: fix multiple use of __print_flags and __print_symbolic\n  tracing/events: fix output format of user stack\n  tracing/events: fix output format of kernel stack\n  tracing/trace_stack: fix the number of entries in the header\n  ring-buffer: discard timestamps that are at the start of the buffer\n  ring-buffer: try to discard unneeded timestamps\n  ring-buffer: fix bug in ring_buffer_discard_commit\n  ftrace: do not profile functions when disabled\n  tracing: make trace pipe recognize latency format flag\n  ...\n"
    },
    {
      "commit": "fd4d34295b36c5d9a1aba3d3f2764d721db093be",
      "tree": "8fc6069c00b156519c78fc3644a7eed4105a7bab",
      "parents": [
        "4d11eff66889e65e9351111b1cc39f066f9f9729",
        "52ea3a56a3268bc2a5a7c75e98c81463004e38ef"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Jun 09 08:47:27 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Jun 09 08:47:27 2009 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6:\n  cls_cgroup: Fix oops when user send improperly \u0027tc filter add\u0027 request\n  r8169: fix crash when large packets are received\n"
    },
    {
      "commit": "52ea3a56a3268bc2a5a7c75e98c81463004e38ef",
      "tree": "4f99bbf8015d252c1a145a1b610db9eddb192f98",
      "parents": [
        "fdd7b4c3302c93f6833e338903ea77245eb510b4"
      ],
      "author": {
        "name": "Minoru Usui",
        "email": "usui@mxm.nes.nec.co.jp",
        "time": "Tue Jun 09 04:03:09 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Jun 09 04:03:09 2009 -0700"
      },
      "message": "cls_cgroup: Fix oops when user send improperly \u0027tc filter add\u0027 request\n\nI found a bug in cls_cgroup_change() in cls_cgroup.c.\ncls_cgroup_change() expected tca[TCA_OPTIONS] was set from user space properly,\nbut tc in iproute2-2.6.29-1 (which I used) didn\u0027t set it.\n\nIn the current source code of tc in git, it set tca[TCA_OPTIONS].\n\n  git://git.kernel.org/pub/scm/linux/kernel/git/shemminger/iproute2.git\n\nIf we always use a newest iproute2 in git when we use cls_cgroup, \nwe don\u0027t face this oops probably.\nBut I think, kernel shouldn\u0027t panic regardless of use program\u0027s behaviour. \n\nSigned-off-by: Minoru Usui \u003cusui@mxm.nes.nec.co.jp\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ca55bd7e2905d344bf697f7c2cc347cb42999e7a",
      "tree": "f2b45dcfd55e72398d29320d2b3b9c3bace94a85",
      "parents": [
        "4157fd85fc794bb7896b65c0cf686aa89d711d57",
        "12186be7d2e1106cede1cc728526e3d7998cbe94"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Jun 02 09:49:06 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Jun 02 09:49:06 2009 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6:\n  net_cls: fix unconfigured struct tcf_proto keeps chaining and avoid kernel panic when we use cls_cgroup\n  e1000: add missing length check to e1000 receive routine\n  forcedeth: add phy_power_down parameter, leave phy powered up by default (v2)\n  Bluetooth: Remove useless flush_work() causing lockdep warnings\n"
    },
    {
      "commit": "12186be7d2e1106cede1cc728526e3d7998cbe94",
      "tree": "a27e9c1cf720fbd31d67c27ea1426a0ae891733b",
      "parents": [
        "ea30e11970a96cfe5e32c03a29332554573b4a10"
      ],
      "author": {
        "name": "Minoru Usui",
        "email": "usui@mxm.nes.nec.co.jp",
        "time": "Tue Jun 02 02:17:34 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Jun 02 02:17:34 2009 -0700"
      },
      "message": "net_cls: fix unconfigured struct tcf_proto keeps chaining and avoid kernel panic when we use cls_cgroup\n\nThis patch fixes a bug which unconfigured struct tcf_proto keeps\nchaining in tc_ctl_tfilter(), and avoids kernel panic in\ncls_cgroup_classify() when we use cls_cgroup.\n\nWhen we execute \u0027tc filter add\u0027, tcf_proto is allocated, initialized\nby classifier\u0027s init(), and chained.  After it\u0027s chained,\ntc_ctl_tfilter() calls classifier\u0027s change().  When classifier\u0027s\nchange() fails, tc_ctl_tfilter() does not free and keeps tcf_proto.\n\nIn addition, cls_cgroup is initialized in change() not in init().  It\naccesses unconfigured struct tcf_proto which is chained before\nchange(), then hits Oops.\n\nSigned-off-by: Minoru Usui \u003cusui@mxm.nes.nec.co.jp\u003e\nSigned-off-by: Jarek Poplawski \u003cjarkao2@gmail.com\u003e\nSigned-off-by: Jamal Hadi Salim \u003chadi@cyberus.ca\u003e\nTested-by: Minoru Usui \u003cusui@mxm.nes.nec.co.jp\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "fc23ffe075365d2f21b1046048ad0d342bbb41be",
      "tree": "164889c120908fbfeae36790f7bbee0271a30873",
      "parents": [
        "cf9f6e21c155d5add733b969c695837ead79eeab",
        "4c713189485dbea875aecd1990daed74908e181d"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Jun 01 14:32:08 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Jun 01 14:32:08 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/holtmann/bluetooth-2.6\n"
    },
    {
      "commit": "6e429101849416551150dad451f7e8625317ae09",
      "tree": "8b677b7b56e0f8ede9e8c11368b1dc6c666dd2e6",
      "parents": [
        "c4e51e465796e60b8416d05572bee57a25e000ae",
        "cf9f6e21c155d5add733b969c695837ead79eeab"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Jun 01 08:02:05 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Jun 01 08:02:05 2009 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6:\n  3c509: Add missing EISA IDs\n  MAINTAINERS: take maintainership of the cpmac Ethernet driver\n  net/firmare: Ignore .cis files\n  ath1e: add new device id for asus hardware\n  mlx4_en: Fix a kernel panic when waking tx queue\n  rtl8187: add USB ID for Linksys WUSB54GC-EU v2 USB wifi dongle\n  at76c50x-usb: avoid mutex deadlock in at76_dwork_hw_scan\n  mac8390: fix build with NET_POLL_CONTROLLER\n  cxgb3: link fault fixes\n  cxgb3: fix dma mapping regression\n  netfilter: nfnetlink_log: fix wrong skbuff size\tcalculation\n  netfilter: xt_hashlimit does a wrong SEQ_SKIP\n  bfin_mac: fix build error due to net_device_ops convert\n  atlx: move modinfo data from atlx.h to atl1.c\n  gianfar: fix babbling rx error event bug\n  cls_cgroup: read classid atomically in classifier\n  netfilter: nf_ct_dccp: add missing DCCP protocol changes in event cache\n  netfilter: nf_ct_tcp: fix accepting invalid RST segments\n"
    },
    {
      "commit": "c8bce3d3bdedc7d187fa222a3b36d149bd940d0e",
      "tree": "47f335f6faaca36eed1dceb64dc0366ef68ec875",
      "parents": [
        "5f789cd8bae9b6315b7bf93e24ec1ac85f5a13b9",
        "98779be861a05c4cb75bed916df72ec0cba8b53d"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri May 29 08:49:09 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri May 29 08:49:09 2009 -0700"
      },
      "message": "Merge branch \u0027for-2.6.30\u0027 of git://linux-nfs.org/~bfields/linux\n\n* \u0027for-2.6.30\u0027 of git://linux-nfs.org/~bfields/linux:\n  svcrdma: dma unmap the correct length for the RPCRDMA header page.\n  nfsd: Revert \"svcrpc: take advantage of tcp autotuning\"\n  nfsd: fix hung up of nfs client while sync write data to nfs server\n"
    },
    {
      "commit": "98779be861a05c4cb75bed916df72ec0cba8b53d",
      "tree": "6c7f51832c835cc3e98796fff83abc440edb3255",
      "parents": [
        "7f4218354fe312b327af06c3d8c95ed5f214c8ca"
      ],
      "author": {
        "name": "Steve Wise",
        "email": "swise@opengridcomputing.com",
        "time": "Thu May 14 16:34:28 2009 -0500"
      },
      "committer": {
        "name": "J. Bruce Fields",
        "email": "bfields@citi.umich.edu",
        "time": "Wed May 27 18:57:24 2009 -0400"
      },
      "message": "svcrdma: dma unmap the correct length for the RPCRDMA header page.\n\nThe svcrdma module was incorrectly unmapping the RPCRDMA header page.\nOn IBM pserver systems this causes a resource leak that results in\nrunning out of bus address space (10 cthon iterations will reproduce it).\nThe code was mapping the full page but only unmapping the actual header\nlength.  The fix is to only map the header length.\n\nI also cleaned up the use of ib_dma_map_page() calls since the unmap\nlogic always uses ib_dma_unmap_single().  I made these symmetrical.\n\nSigned-off-by: Steve Wise \u003cswise@opengridcomputing.com\u003e\nSigned-off-by: Tom Tucker \u003ctom@opengridcomputing.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@citi.umich.edu\u003e\n"
    },
    {
      "commit": "4d3383d0adb6d1047fb9ee3edd9dc05e4d2184f0",
      "tree": "b9eabfb61d9b74d87e75c073c79edc92d9612ed8",
      "parents": [
        "b63dc8fef7ca5c51d163295d824e78c770d48ccf",
        "eeff9beec3d2563c42cca41e66d4169592bb5475"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 27 15:51:25 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 27 15:51:25 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-2.6\n"
    },
    {
      "commit": "7f4218354fe312b327af06c3d8c95ed5f214c8ca",
      "tree": "545cd2ae14e2e4329f2bf1b5248079197d0a914c",
      "parents": [
        "a0d24b295aed7a9daf4ca36bd4784e4d40f82303"
      ],
      "author": {
        "name": "J. Bruce Fields",
        "email": "bfields@citi.umich.edu",
        "time": "Wed May 27 18:51:06 2009 -0400"
      },
      "committer": {
        "name": "J. Bruce Fields",
        "email": "bfields@citi.umich.edu",
        "time": "Wed May 27 18:51:06 2009 -0400"
      },
      "message": "nfsd: Revert \"svcrpc: take advantage of tcp autotuning\"\n\nThis reverts commit 47a14ef1af48c696b214ac168f056ddc79793d0e \"svcrpc:\ntake advantage of tcp autotuning\", which uncovered some further problems\nin the server rpc code, causing significant performance regressions in\ncommon cases.\n\nWe will likely reinstate this patch after releasing 2.6.30 and applying\nsome work on the underlying fixes to the problem (developed by Trond).\n\nReported-by: Jeff Moyer \u003cjmoyer@redhat.com\u003e\nCc: Olga Kornievskaia \u003caglo@citi.umich.edu\u003e\nCc: Jim Rees \u003crees@umich.edu\u003e\nCc: Trond Myklebust \u003ctrond.myklebust@fys.uio.no\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@citi.umich.edu\u003e\n"
    },
    {
      "commit": "eeff9beec3d2563c42cca41e66d4169592bb5475",
      "tree": "d727bae7008d9ec4a412f2aebc3bfd9f485c6f01",
      "parents": [
        "683a04cebc63819a36b1db19843bd17771f05b55"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Wed May 27 15:49:11 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Wed May 27 15:49:11 2009 +0200"
      },
      "message": "netfilter: nfnetlink_log: fix wrong skbuff size\tcalculation\n\nThis problem was introduced in 72961ecf84d67d6359a1b30f9b2a8427f13e1e71\nsince no space was reserved for the new attributes NFULA_HWTYPE,\nNFULA_HWLEN and NFULA_HWHEADER.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "683a04cebc63819a36b1db19843bd17771f05b55",
      "tree": "1d8770a96cdb13de12e297a99d03c6063320030d",
      "parents": [
        "b38b1f616867c832301f24eaf259889494d495b3"
      ],
      "author": {
        "name": "Jesper Dangaard Brouer",
        "email": "hawk@comx.dk",
        "time": "Wed May 27 15:45:34 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Wed May 27 15:45:34 2009 +0200"
      },
      "message": "netfilter: xt_hashlimit does a wrong SEQ_SKIP\n\nThe function dl_seq_show() returns 1 (equal to SEQ_SKIP) in case\na seq_printf() call return -1.  It should return -1.\n\nThis SEQ_SKIP behavior brakes processing the proc file e.g. via a\npipe or just through less.\n\nSigned-off-by: Jesper Dangaard Brouer \u003chawk@comx.dk\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "4c713189485dbea875aecd1990daed74908e181d",
      "tree": "848424eb6d47b136126f5beff3193774ba06eefa",
      "parents": [
        "7682455ec36fce70bdbad9f739de05060dedfa27"
      ],
      "author": {
        "name": "Dave Young",
        "email": "hidave.darkstar@gmail.com",
        "time": "Wed May 27 09:10:28 2009 +0200"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Wed May 27 09:15:57 2009 +0200"
      },
      "message": "Bluetooth: Remove useless flush_work() causing lockdep warnings\n\nThe calls to flush_work() are pointless in a single thread workqueue\nand they are actually causing a lockdep warning.\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[ INFO: possible recursive locking detected ]\n2.6.30-rc6-02911-gbb803cf #16\n---------------------------------------------\nbluetooth/2518 is trying to acquire lock:\n (bluetooth){+.+.+.}, at: [\u003cc0130c14\u003e] flush_work+0x28/0xb0\n\nbut task is already holding lock:\n (bluetooth){+.+.+.}, at: [\u003cc0130424\u003e] worker_thread+0x149/0x25e\n\nother info that might help us debug this:\n2 locks held by bluetooth/2518:\n #0:  (bluetooth){+.+.+.}, at: [\u003cc0130424\u003e] worker_thread+0x149/0x25e\n #1:  (\u0026conn-\u003ework_del){+.+...}, at: [\u003cc0130424\u003e] worker_thread+0x149/0x25e\n\nstack backtrace:\nPid: 2518, comm: bluetooth Not tainted 2.6.30-rc6-02911-gbb803cf #16\nCall Trace:\n [\u003cc03d64d9\u003e] ? printk+0xf/0x11\n [\u003cc0140d96\u003e] __lock_acquire+0x7ce/0xb1b\n [\u003cc0141173\u003e] lock_acquire+0x90/0xad\n [\u003cc0130c14\u003e] ? flush_work+0x28/0xb0\n [\u003cc0130c2e\u003e] flush_work+0x42/0xb0\n [\u003cc0130c14\u003e] ? flush_work+0x28/0xb0\n [\u003cf8b84966\u003e] del_conn+0x1c/0x84 [bluetooth]\n [\u003cc0130469\u003e] worker_thread+0x18e/0x25e\n [\u003cc0130424\u003e] ? worker_thread+0x149/0x25e\n [\u003cf8b8494a\u003e] ? del_conn+0x0/0x84 [bluetooth]\n [\u003cc0133843\u003e] ? autoremove_wake_function+0x0/0x33\n [\u003cc01302db\u003e] ? worker_thread+0x0/0x25e\n [\u003cc013355a\u003e] kthread+0x45/0x6b\n [\u003cc0133515\u003e] ? kthread+0x0/0x6b\n [\u003cc01034a7\u003e] kernel_thread_helper+0x7/0x10\n\nBased on a report by Oliver Hartkopp \u003coliver@hartkopp.net\u003e\n\nSigned-off-by: Dave Young \u003chidave.darkstar@gmail.com\u003e\nTested-by: Oliver Hartkopp \u003coliver@hartkopp.net\u003e\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n"
    },
    {
      "commit": "e65fcfd63a9a62baa5708484ff8edbe56eb3e7ec",
      "tree": "0d21a21c2b87ef1c8db600d6abed3ba3e22cdaef",
      "parents": [
        "7682455ec36fce70bdbad9f739de05060dedfa27"
      ],
      "author": {
        "name": "Paul Menage",
        "email": "menage@google.com",
        "time": "Tue May 26 20:47:02 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue May 26 20:47:02 2009 -0700"
      },
      "message": "cls_cgroup: read classid atomically in classifier\n\nAvoid reading the unsynchronized value cs-\u003eclassid multiple times,\nsince it could change concurrently from non-zero to zero; this would\nresult in the classifier returning a positive result with a bogus\n(zero) classid.\n\nSigned-off-by: Paul Menage \u003cmenage@google.com\u003e\nReviewed-by: Li Zefan \u003clizf@cn.fujitsu.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e2a1b9ee2335c35e0e34c88a024481b194b3c9cc",
      "tree": "641d51c6ae677077964d4d9db283a808650269b9",
      "parents": [
        "878a4f521bfe83c49694ac990058080fbe090812",
        "95baa25c7321eb8613246acbf61b97911cc748d3"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue May 26 12:15:35 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue May 26 12:15:35 2009 -0700"
      },
      "message": "Merge branch \u0027bugfixes\u0027 of git://git.linux-nfs.org/projects/trondmy/nfs-2.6\n\n* \u0027bugfixes\u0027 of git://git.linux-nfs.org/projects/trondmy/nfs-2.6:\n  NFSv4: Fix the case where NFSv4 renewal fails\n  nfs: fix build error in nfsroot with initconst\n  XPRTRDMA: fix client rpcrdma FRMR registration on mlx4 devices\n"
    },
    {
      "commit": "68743082b560067e3e93eab8b2568f238e486865",
      "tree": "b907dd1a170e6be38e4ab5fb61733f642532bf9c",
      "parents": [
        "b18f1e21993f73f072b1e0859f942fb11afddcb1"
      ],
      "author": {
        "name": "Vu Pham",
        "email": "vu@mellanox.com",
        "time": "Tue May 26 14:51:00 2009 -0400"
      },
      "committer": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Tue May 26 14:51:00 2009 -0400"
      },
      "message": "XPRTRDMA: fix client rpcrdma FRMR registration on mlx4 devices\n\nmlx4/connectX FRMR requires local write enable together with remote\nrdma write enable. This fixes NFS/RDMA operation over the ConnectX\nInfiniband HCA in the default memreg mode.\n\nSigned-off-by: Vu Pham \u003cvu@mellanox.com\u003e\nSigned-off-by: Tom Talpey \u003ctmtalpey@gmail.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\n"
    },
    {
      "commit": "c80a5cdfc5ca6533cb893154f546370da1fdb8f0",
      "tree": "963fef5f697a5953469441d5eaafbbad99fc64a8",
      "parents": [
        "217cbfa856dc1cbc2890781626c4032d9e3ec59f"
      ],
      "author": {
        "name": "Doug Leith",
        "email": "doug.leith@nuim.ie",
        "time": "Mon May 25 22:44:59 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon May 25 22:44:59 2009 -0700"
      },
      "message": "tcp: tcp_vegas ssthresh bugfix\n\nThis patch fixes ssthresh accounting issues in tcp_vegas when cwnd decreases\n\nSigned-off-by: Doug Leith \u003cdoug.leith@nuim.ie\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b38b1f616867c832301f24eaf259889494d495b3",
      "tree": "6c1d5eebb768ac242cae86f165816a4915b662c5",
      "parents": [
        "bfcaa50270e18f35220a11d46e98fc6232c24606"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "Pablo Neira Ayuso",
        "time": "Mon May 25 17:29:43 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon May 25 17:29:43 2009 +0200"
      },
      "message": "netfilter: nf_ct_dccp: add missing DCCP protocol changes in event cache\n\nThis patch adds the missing protocol state-change event reporting\nfor DCCP.\n\n$ sudo conntrack -E\n    [NEW] dccp     33 240 src\u003d192.168.0.2 dst\u003d192.168.1.2 sport\u003d57040 dport\u003d5001 [UNREPLIED] src\u003d192.168.1.2 dst\u003d192.168.1.100 sport\u003d5001 dport\u003d57040\n\nWith this patch:\n\n$ sudo conntrack -E\n    [NEW] dccp     33 240 REQUEST src\u003d192.168.0.2 dst\u003d192.168.1.2 sport\u003d57040 dport\u003d5001 [UNREPLIED] src\u003d192.168.1.2 dst\u003d192.168.1.100 sport\u003d5001 dport\u003d57040\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "bfcaa50270e18f35220a11d46e98fc6232c24606",
      "tree": "dd06bf91db9aff84adf442b6c8aa6be58c923ec0",
      "parents": [
        "fecc1133b66af6e0cd49115a248f34bbb01f180a"
      ],
      "author": {
        "name": "Jozsef Kadlecsik",
        "email": "kadlec@blackhole.kfki.hu",
        "time": "Mon May 25 17:23:15 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Mon May 25 17:23:15 2009 +0200"
      },
      "message": "netfilter: nf_ct_tcp: fix accepting invalid RST segments\n\nRobert L Mathews discovered that some clients send evil TCP RST segments,\nwhich are accepted by netfilter conntrack but discarded by the\ndestination. Thus the conntrack entry is destroyed but the destination\nretransmits data until timeout.\n\nThe same technique, i.e. sending properly crafted RST segments, can easily\nbe used to bypass connlimit/connbytes based restrictions (the sample\nscript written by Robert can be found in the netfilter mailing list\narchives).\n\nThe patch below adds a new flag and new field to struct ip_ct_tcp_state so\nthat checking RST segments can be made more strict and thus TCP conntrack\ncan catch the invalid ones: the RST segment is accepted only if its\nsequence number higher than or equal to the highest ack we seen from the\nother direction. (The last_ack field cannot be reused because it is used\nto catch resent packets.)\n\nSigned-off-by: Jozsef Kadlecsik \u003ckadlec@blackhole.kfki.hu\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "0975ecba3b670df7c488a5e0e6fe9f1f370a8ad8",
      "tree": "fc1470042a6c52fbd1332fe12b57105d35fcf9e2",
      "parents": [
        "3ed18d76d959e5cbfa5d70c8f7ba95476582a556"
      ],
      "author": {
        "name": "Dan Carpenter",
        "email": "error27@gmail.com",
        "time": "Thu May 21 15:22:02 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu May 21 15:22:02 2009 -0700"
      },
      "message": "RxRPC: Error handling for rxrpc_alloc_connection()\n\nrxrpc_alloc_connection() doesn\u0027t return an error code on failure, it just\nreturns NULL.  IS_ERR(NULL) is false.\n\nSigned-off-by: Dan Carpenter \u003cerror27@gmail.com\u003e\nSigned-off-by: David Howells \u003cdhowells@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3ed18d76d959e5cbfa5d70c8f7ba95476582a556",
      "tree": "9fbd15b820b43627440fd6961f687c30e8d4e130",
      "parents": [
        "5b5f792a6a9a2f9ae812d151ed621f72e99b1725"
      ],
      "author": {
        "name": "Robert Olsson",
        "email": "robert.olsson@its.uu.se",
        "time": "Thu May 21 15:20:59 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu May 21 15:20:59 2009 -0700"
      },
      "message": "ipv4: Fix oops with FIB_TRIE\n\nIt seems we can fix this by disabling preemption while we re-balance the \ntrie. This is with the CONFIG_CLASSIC_RCU. It\u0027s been stress-tested at high \nloads continuesly taking a full BGP table up/down via iproute -batch.\n\nNote. fib_trie is not updated for CONFIG_PREEMPT_RCU\n\nReported-by: Andrei Popa\nSigned-off-by: Robert Olsson \u003crobert.olsson@its.uu.se\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5b5f792a6a9a2f9ae812d151ed621f72e99b1725",
      "tree": "5fe7c961a9f7a14cdae342311fa9a00e8155cb86",
      "parents": [
        "c40499e04b2005e61f989824251f9343b55f96bb"
      ],
      "author": {
        "name": "Florian Westphal",
        "email": "fw@strlen.de",
        "time": "Thu May 21 15:07:12 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu May 21 15:07:12 2009 -0700"
      },
      "message": "pktgen: do not access flows[] beyond its length\n\ntypo -- pkt_dev-\u003enflows is for stats only, the number of concurrent\nflows is stored in cflows.\n\nReported-By: Vladimir Ivashchenko \u003chazard@francoudi.com\u003e\nSigned-off-by: Florian Westphal \u003cfw@strlen.de\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4f72427998b105392e60bae7a6798a0c96fe4f0a",
      "tree": "30a90df6c1a8dbb5bceda668a703f1a8958f41d5",
      "parents": [
        "86c2fe1e3adacec9204c03f2b056b49534ecf0ed"
      ],
      "author": {
        "name": "Jean-Mickael Guerin",
        "email": "jean-mickael.guerin@6wind.com",
        "time": "Wed May 20 17:38:59 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 20 17:38:59 2009 -0700"
      },
      "message": "IPv6: set RTPROT_KERNEL to initial route\n\nThe use of unspecified protocol in IPv6 initial route prevents quagga to\ninstall IPv6 default route:\n# show ipv6 route\nS   ::/0 [1/0] via fe80::1, eth1_0\nK\u003e* ::/0 is directly connected, lo, rej\nC\u003e* ::1/128 is directly connected, lo\nC\u003e* fe80::/64 is directly connected, eth1_0\n\n# ip -6 route\nfe80::/64 dev eth1_0  proto kernel  metric 256  mtu 1500 advmss 1440\nhoplimit -1\nff00::/8 dev eth1_0  metric 256  mtu 1500 advmss 1440 hoplimit -1\nunreachable default dev lo  proto none  metric -1  error -101 hoplimit 255\n\nThe attached patch ensures RTPROT_KERNEL to the default initial route\nand fixes the problem for quagga.\nThis is similar to \"ipv6: protocol for address routes\"\nf410a1fba7afa79d2992620e874a343fdba28332.\n\n# show ipv6 route\nS\u003e* ::/0 [1/0] via fe80::1, eth1_0\nC\u003e* ::1/128 is directly connected, lo\nC\u003e* fe80::/64 is directly connected, eth1_0\n\n# ip -6 route\nfe80::/64 dev eth1_0  proto kernel  metric 256  mtu 1500 advmss 1440\nhoplimit -1\nfe80::/64 dev eth1_0  proto kernel  metric 256  mtu 1500 advmss 1440\nhoplimit -1\nff00::/8 dev eth1_0  metric 256  mtu 1500 advmss 1440 hoplimit -1\ndefault via fe80::1 dev eth1_0  proto zebra  metric 1024  mtu 1500\nadvmss 1440 hoplimit -1\nunreachable default dev lo  proto kernel  metric -1  error -101 hoplimit 255\n\nSigned-off-by: Jean-Mickael Guerin \u003cjean-mickael.guerin@6wind.com\u003e\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "86c2fe1e3adacec9204c03f2b056b49534ecf0ed",
      "tree": "9d6a2c3f3802cd83d5a266df1d2576bd77aaad93",
      "parents": [
        "1ddbcb005c395518c2cd0df504cff3d4b5c85853",
        "a6c67339784db5763d6f20ae1881aeebe8c5a9f4"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 20 17:31:25 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 20 17:31:25 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6\n"
    },
    {
      "commit": "1ddbcb005c395518c2cd0df504cff3d4b5c85853",
      "tree": "03567b8b50d3094ae13c64b44890f9c0d53361b7",
      "parents": [
        "cf8da764fc6959b7efb482f375dfef9830e98205"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "dada1@cosmosbay.com",
        "time": "Tue May 19 20:14:28 2009 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 20 17:18:02 2009 -0700"
      },
      "message": "net: fix rtable leak in net/ipv4/route.c\n\nAlexander V. Lukyanov found a regression in 2.6.29 and made a complete\nanalysis found in http://bugzilla.kernel.org/show_bug.cgi?id\u003d13339\nQuoted here because its a perfect one :\n\nbegin_of_quotation\n 2.6.29 patch has introduced flexible route cache rebuilding. Unfortunately the\n patch has at least one critical flaw, and another problem.\n\n rt_intern_hash calculates rthi pointer, which is later used for new entry\n insertion. The same loop calculates cand pointer which is used to clean the\n list. If the pointers are the same, rtable leak occurs, as first the cand is\n removed then the new entry is appended to it.\n\n This leak leads to unregister_netdevice problem (usage count \u003e 0).\n\n Another problem of the patch is that it tries to insert the entries in certain\n order, to facilitate counting of entries distinct by all but QoS parameters.\n Unfortunately, referencing an existing rtable entry moves it to list beginning,\n to speed up further lookups, so the carefully built order is destroyed.\n\n For the first problem the simplest patch it to set rthi\u003d0 when rthi\u003d\u003dcand, but\n it will also destroy the ordering.\nend_of_quotation\n\nProblematic commit is 1080d709fb9d8cd4392f93476ee46a9d6ea05a5b\n(net: implement emergency route cache rebulds when gc_elasticity is exceeded)\n\nTrying to keep dst_entries ordered is too complex and breaks the fact that\norder should depend on the frequency of use for garbage collection.\n\nA possible fix is to make rt_intern_hash() simpler, and only makes\nrt_check_expire() a litle bit smarter, being able to cope with an arbitrary\nentries order. The added loop is running on cache hot data, while cpu\nis prefetching next object, so should be unnoticied.\n\nReported-and-analyzed-by: Alexander V. Lukyanov \u003clav@yar.ru\u003e\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "cf8da764fc6959b7efb482f375dfef9830e98205",
      "tree": "701e4c42f6563cdb50153485015f0c4b439294ec",
      "parents": [
        "bc8a5397433e4effbaddfa7e462d10b3c060cabb"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "dada1@cosmosbay.com",
        "time": "Tue May 19 18:54:22 2009 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 20 17:18:01 2009 -0700"
      },
      "message": "net: fix length computation in rt_check_expire()\n\nrt_check_expire() computes average and standard deviation of chain lengths,\nbut not correclty reset length to 0 at beginning of each chain.\nThis probably gives overflows for sum2 (and sum) on loaded machines instead\nof meaningful results.\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5078b2e32ad4b1f753b1c837c15892202f753c97",
      "tree": "e4d2f9a3ff9d4ec605980700af92b682421908f7",
      "parents": [
        "267d493b322b05984048aef8ea9b5b213490bbe0"
      ],
      "author": {
        "name": "Luis R. Rodriguez",
        "email": "lrodriguez@atheros.com",
        "time": "Wed May 13 17:04:42 2009 -0400"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Wed May 20 14:29:54 2009 -0400"
      },
      "message": "cfg80211: fix race between core hint and driver\u0027s custom apply\n\nIts possible for cfg80211 to have scheduled the work and for\nthe global workqueue to not have kicked in prior to a cfg80211\ndriver\u0027s regulatory hint or wiphy_apply_custom_regulatory().\n\nAlthough this is very unlikely its possible and should fix\nthis race. When this race would happen you are expected to have\nhit a null pointer dereference panic.\n\nCc: stable@kernel.org\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nTested-by: Alan Jenkins \u003calan-jenkins@tuffmail.co.uk\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "88f16db7a2fa63b9242e8a0fbc40d51722f2e2f9",
      "tree": "ea9ffbf2e1e595070c599486bfc5e9db394b46d5",
      "parents": [
        "2b611cb6eed04062d0a9861c82248e02c844ba3f"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Wed May 13 12:04:30 2009 +0200"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Wed May 20 14:07:50 2009 -0400"
      },
      "message": "wext: verify buffer size for SIOCSIWENCODEEXT\n\nAnother design flaw in wireless extensions (is anybody\nsurprised?) in the way it handles the iw_encode_ext\nstructure: The structure is part of the \u0027extra\u0027 memory\nbut contains the key length explicitly, instead of it\njust being the length of the extra buffer - size of\nthe struct and using the explicit key length only for\nthe get operation (which only writes it).\n\nTherefore, we have this layout:\n\nextra: +-------------------------+\n       | struct iw_encode_ext  { |\n       |     ...                 |\n       |     u16 key_len;        |\n       |     u8 key[0];          |\n       | };                      |\n       +-------------------------+\n       | key material            |\n       +-------------------------+\n\nNow, all drivers I checked use ext-\u003ekey_len without\nchecking that both key_len and the struct fit into the\nextra buffer that has been copied from userspace. This\nleads to a buffer overrun while reading that buffer,\ndepending on the driver it may be possible to specify\narbitrary key_len or it may need to be a proper length\nfor the key algorithm specified.\n\nThankfully, this is only exploitable by root, but root\ncan actually cause a segfault or use kernel memory as\na key (which you can even get back with siocgiwencode\nor siocgiwencodeext from the key buffer).\n\nFix this by verifying that key_len fits into the buffer\nalong with struct iw_encode_ext.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "bc8a5397433e4effbaddfa7e462d10b3c060cabb",
      "tree": "8eb8ad8fecf937006a6f1d8bb70f368821442577",
      "parents": [
        "995b337952cdf7e05d288eede580257b632a8343"
      ],
      "author": {
        "name": "Frans Pop",
        "email": "elendil@planet.nl",
        "time": "Mon May 18 21:48:38 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon May 18 21:48:38 2009 -0700"
      },
      "message": "ipv4: make default for INET_LRO consistent with help text\n\nCommit e81963b1 (\"ipv4: Make INET_LRO a bool instead of tristate.\")\nchanged this config from tristate to bool.  Add default so that it is\nconsistent with the help text.\n\nSigned-off-by: Frans Pop \u003celendil@planet.nl\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "995b337952cdf7e05d288eede580257b632a8343",
      "tree": "478904bce184ab3e600d80c5ea6835f173bad932",
      "parents": [
        "511e11e396dc596825ce04d53d7f6d579404bc01"
      ],
      "author": {
        "name": "Thomas Chenault",
        "email": "thomas_chenault@dell.com",
        "time": "Mon May 18 21:43:27 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon May 18 21:43:27 2009 -0700"
      },
      "message": "net: fix skb_seq_read returning wrong offset/length for page frag data\n\nWhen called with a consumed value that is less than skb_headlen(skb)\nbytes into a page frag, skb_seq_read() incorrectly returns an\noffset/length relative to skb-\u003edata. Ensure that data which should come\nfrom a page frag does.\n\nSigned-off-by: Thomas Chenault \u003cthomas_chenault@dell.com\u003e\nTested-by: Shyam Iyer \u003cshyam_iyer@dell.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "511e11e396dc596825ce04d53d7f6d579404bc01",
      "tree": "236f3316d5577d9a4abd9ee15d4479ac7ec113b0",
      "parents": [
        "c4ca2374312b4de819dd700e72a68395eddb5fcb"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "dada1@cosmosbay.com",
        "time": "Mon May 18 19:26:37 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon May 18 19:26:37 2009 -0700"
      },
      "message": "pkt_sched: gen_estimator: use 64 bit intermediate counters for bps\n\ngen_estimator can overflow bps (bytes per second) with Gb links, while\nit was designed with a u32 API, with a theorical limit of 34360Mbit\n(2^32 bytes)\n\nUsing 64 bit intermediate avbps/brate counters can allow us to reach\nthis theorical limit.\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: Jarek Poplawski \u003cjarkao2@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c0f84d0d4be3f7d818b4ffb04d27f9bae64397f0",
      "tree": "e36a3f3e2d5cdbc9dfdbd2c5dd4857d93d8776b9",
      "parents": [
        "775273131810caa41dfc7f9e552ea5d8508caf40"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "dada1@cosmosbay.com",
        "time": "Mon May 18 15:12:31 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon May 18 15:12:31 2009 -0700"
      },
      "message": "sch_teql: should not dereference skb after ndo_start_xmit()\n\nIt is illegal to dereference a skb after a successful ndo_start_xmit()\ncall. We must store skb length in a local variable instead.\n\nBug was introduced in 2.6.27 by commit 0abf77e55a2459aa9905be4b226e4729d5b4f0cb\n(net_sched: Add accessor function for packet length for qdiscs)\n\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "775273131810caa41dfc7f9e552ea5d8508caf40",
      "tree": "38ee8e4815d614c483be352524134c6f7fc163c3",
      "parents": [
        "705efc3b03cbee449e4d83b230423894152f7982"
      ],
      "author": {
        "name": "Ilpo Järvinen",
        "email": "ilpo.jarvinen@helsinki.fi",
        "time": "Sun May 10 20:32:34 2009 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon May 18 15:05:40 2009 -0700"
      },
      "message": "tcp: fix MSG_PEEK race check\n\nCommit 518a09ef11 (tcp: Fix recvmsg MSG_PEEK influence of\nblocking behavior) lets the loop run longer than the race check\ndid previously expect, so we need to be more careful with this\ncheck and consider the work we have been doing.\n\nI tried my best to deal with urg hole madness too which happens\nhere:\n\tif (!sock_flag(sk, SOCK_URGINLINE)) {\n\t\t++*seq;\n\t\t...\nby using additional offset by one but I certainly have very\nlittle interest in testing that part.\n\nSigned-off-by: Ilpo Järvinen \u003cilpo.jarvinen@helsinki.fi\u003e\nTested-by: Frans Pop \u003celendil@planet.nl\u003e\nTested-by: Ian Zimmermann \u003citz@buug.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "1079cac0f4eb7d968395378b1625979d4c818dd6",
      "tree": "d261058d95d27fe7250511d5fad69db30dc17731",
      "parents": [
        "5872144f64b34a5942f6b4acedc90b02de72c58b",
        "1406de8e11eb043681297adf86d6892ff8efc27a"
      ],
      "author": {
        "name": "Ingo Molnar",
        "email": "mingo@elte.hu",
        "time": "Mon May 18 10:15:09 2009 +0200"
      },
      "committer": {
        "name": "Ingo Molnar",
        "email": "mingo@elte.hu",
        "time": "Mon May 18 10:15:35 2009 +0200"
      },
      "message": "Merge commit \u0027v2.6.30-rc6\u0027 into tracing/core\n\nMerge reason: we were on an -rc4 base, sync up to -rc6\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n"
    },
    {
      "commit": "4f0611af47e25807cf18cd2b4d4e94206c75b29e",
      "tree": "b82d92125470b76caa4e2cf014abdc45ba7510d3",
      "parents": [
        "a598f6aebea2481531b0757ed90cfb0d8cf1d8f5"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@vyatta.com",
        "time": "Fri May 15 06:11:58 2009 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun May 17 21:12:55 2009 -0700"
      },
      "message": "bridge: fix initial packet flood if !STP\n\nIf bridge is configured with no STP and forwarding delay of 0 (which\nis typical for virtualization) then when link starts it will flood all\npackets for the first 20 seconds.\n\nThis bug was introduced by a combination of earlier changes:\n  * forwarding database uses hold time of zero to indicate\n    user wants to always flood packets\n  * optimzation of the case of forwarding delay of 0 avoids the initial\n    timer tick\n\nThe fix is to just skip all the topology change detection code if\nkernel STP is not being used.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a598f6aebea2481531b0757ed90cfb0d8cf1d8f5",
      "tree": "8e1b255bf66b68c01e784a0e4b3e3179945bd3d2",
      "parents": [
        "a8f492c6ac6072d6c5bce4b2f13dc44612991051"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@vyatta.com",
        "time": "Fri May 15 06:10:13 2009 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun May 17 21:12:54 2009 -0700"
      },
      "message": "bridge: relay bridge multicast pkgs if !STP\n\nCurrently the bridge catches all STP packets; even if STP is turned\noff.  This prevents other systems (which do have STP turned on)\nfrom being able to detect loops in the network.\n\nWith this patch, if STP is off, then any packet sent to the STP\nmulticast group address is forwarded to all ports.\n\nBased on earlier patch by Joakim Tjernlund with changes\nto go through forwarding (not local chain), and optimization\nthat only last octet needs to be checked.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2513dfb83fc775364fe85803d3a84d7ebe5763a5",
      "tree": "157003b5c1b88c1eb95b1307db9835ddd610fb02",
      "parents": [
        "5e392739d6ab72f7c35040aa07f4097904bce6e7"
      ],
      "author": {
        "name": "Chris Friesen",
        "email": "cfriesen@nortel.com",
        "time": "Sun May 17 20:39:33 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun May 17 20:39:33 2009 -0700"
      },
      "message": "ipconfig: handle case of delayed DHCP server\n\nIf a DHCP server is delayed, it\u0027s possible for the client to receive the \nDHCPOFFER after it has already sent out a new DHCPDISCOVER message from \na second interface.  The client then sends out a DHCPREQUEST from the \nsecond interface, but the server doesn\u0027t recognize the device and \nrejects the request.\n\nThis patch simply tracks the current device being configured and throws \naway the OFFER if it is not intended for the current device.  A more \nsophisticated approach would be to put the OFFER information into the \nstruct ic_device rather than storing it globally.\n\nSigned-off-by: Chris Friesen \u003ccfriesen@nortel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5e392739d6ab72f7c35040aa07f4097904bce6e7",
      "tree": "3c363f0733de8f6f843280f84c68ee57695f0c39",
      "parents": [
        "74392592bbf7e93ef383588e21aea0c1450d6f12"
      ],
      "author": {
        "name": "Pavel Emelyanov",
        "email": "xemul@openvz.org",
        "time": "Mon May 11 00:36:35 2009 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun May 17 20:37:55 2009 -0700"
      },
      "message": "netpoll: don\u0027t dereference NULL dev from np\n\nIt looks like the dev in netpoll_poll can be NULL - at lease it\u0027s\nchecked at the function beginning. Thus the dev-\u003enetde_ops dereference\nlooks dangerous.\n\nSigned-off-by: Pavel Emelyanov \u003cxemul@openvz.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7c7327d9664280cad833da1f14bad13a3ea8f0bf",
      "tree": "8af1f200310281054bfbaf76a7c90eaebefe5c51",
      "parents": [
        "40f293ff833f4054de880d105bda0dbb5e2468db",
        "3d7a9d1c7ee251a04095d43eec5a3f4ff3f710a8"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri May 15 14:29:53 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri May 15 14:30:02 2009 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/holtmann/bluetooth-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/holtmann/bluetooth-2.6:\n  Bluetooth: Don\u0027t trigger disconnect timeout for security mode 3 pairing\n  Bluetooth: Don\u0027t use hci_acl_connect_cancel() for incoming connections\n  Bluetooth: Fix wrong module refcount when connection setup fails\n\nAnother case of me handling the fallout from Davem\u0027s unfortunate\naddiction to shuffleboard.\n\nWon\u0027t anybody think of the children? Join the anti-shuffleboard league\ntoday!\n"
    },
    {
      "commit": "3346857f6fab1d6d1237a3ec7cfa159ec9b52db5",
      "tree": "9468318835176cdb6e51a8ec4c8c87340c080611",
      "parents": [
        "5d41343ac88eeddd25dc4ffb7050c9095c41a70d",
        "542cc7937e6af73cb2edc455a0e456d22e254abb"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri May 15 12:01:59 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Fri May 15 12:02:06 2009 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6:\n  iwlwifi: fix device id registration for 6000 series 2x2 devices\n  ath5k: update channel in sw state after stopping RX and TX\n  rtl8187: use DMA-aware buffers with usb_control_msg\n  mac80211: avoid NULL ptr deref when finding max_rates in PID and minstrel\n  airo: airo_get_encode{,ext} potential buffer overflow\n\nPulled directly by Linus because Davem is off playing shuffle-board at\nsome Alaskan cruise, and the NULL ptr deref issue hits people and should\nget merged sooner rather than later.\n\nDavid - make us proud on the shuffle-board tournament!\n"
    },
    {
      "commit": "2ea3f868487dcee0bfd91055f1c42bb172efc507",
      "tree": "ab8386aba340269f36c402c59ca77234ac1db7a6",
      "parents": [
        "bfe3891a5f5d3b78146a45f40e435d14f5ae39dd",
        "8daed1e549b55827758b3af7b8132a73fc51526f"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue May 12 17:11:56 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue May 12 17:11:56 2009 -0700"
      },
      "message": "Merge branch \u0027for-2.6.30\u0027 of git://linux-nfs.org/~bfields/linux\n\n* \u0027for-2.6.30\u0027 of git://linux-nfs.org/~bfields/linux:\n  nfsd: silence lockdep warning\n  lockd: fix list corruption on lockd restart\n  nfsd4: check for negative dentry before use in nfsv4 readdir\n  nfsd41: slots are freed with session\n  svcrdma: clean up error paths.\n  svcrdma: Fix dma map direction for rdma read targets\n"
    },
    {
      "commit": "621ad7c96aa138cfeab53cd4debc5a4e08b2189b",
      "tree": "1759dce722d8b8798698540d1db11c2027c27ecf",
      "parents": [
        "aedec9226809ae9d1972f8f8079fc70206ee7a88"
      ],
      "author": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Tue May 05 15:18:26 2009 -0400"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 11 15:07:01 2009 -0400"
      },
      "message": "mac80211: avoid NULL ptr deref when finding max_rates in PID and minstrel\n\n\"There is another problem with this piece of code. The sband will be NULL\nafter second iteration on single band device and cause null pointer\ndereference. Everything is working with dual band card. Sorry, but i\ndon\u0027t know how to explain this clearly in English. I have looked on the\nsecond patch for pid algorithm and found similar bug.\"\n\nReported-by: Karol Szuster \u003cqflon@o2.pl\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "2ad20802b759cc2d16dc9470fa15874610d21714",
      "tree": "f9a0d657a3162bb87ff31d0c580b7910938fd9d1",
      "parents": [
        "091bf7624d1c90cec9e578a18529f615213ff847",
        "e1cc1c578055d20d36e084e324001fb5e0355a71"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun May 10 10:46:45 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun May 10 10:46:45 2009 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6: (26 commits)\n  bonding: fix panic if initialization fails\n  IXP4xx: complete Ethernet netdev setup before calling register_netdev().\n  IXP4xx: use \"ENODEV\" instead of \"ENOSYS\" in module initialization.\n  ipvs: Fix IPv4 FWMARK virtual services\n  ipv4: Make INET_LRO a bool instead of tristate.\n  net: remove stale reference to fastroute from Kconfig help text\n  net: update skb_recycle_check() for hardware timestamping changes\n  bnx2: Fix panic in bnx2_poll_work().\n  net-sched: fix bfifo default limit\n  igb: resolve panic on shutdown when SR-IOV is enabled\n  wimax: oops: wimax_dev_add() is the only one that can initialize the state\n  wimax: fix oops if netlink fails to add attribute\n  Bluetooth: Move dev_set_name() to a context that can sleep\n  netfilter: ctnetlink: fix wrong message type in user updates\n  netfilter: xt_cluster: fix use of cluster match with 32 nodes\n  netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE\n  netfilter: add missing linux/types.h include to xt_LED.h\n  mac80211: pid, fix memory corruption\n  mac80211: minstrel, fix memory corruption\n  cfg80211: fix comment on regulatory hint processing\n  ...\n"
    },
    {
      "commit": "3d7a9d1c7ee251a04095d43eec5a3f4ff3f710a8",
      "tree": "f3d6641ca09d1fee1cebe0b153da4a199c99e14a",
      "parents": [
        "1b0336bb36f88976f1210a65b62f6a3e9578ee7b"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sat May 09 12:09:21 2009 -0700"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sat May 09 18:09:52 2009 -0700"
      },
      "message": "Bluetooth: Don\u0027t trigger disconnect timeout for security mode 3 pairing\n\nA remote device in security mode 3 that tries to connect will require\nthe pairing during the connection setup phase. The disconnect timeout\nis now triggered within 10 milliseconds and causes the pairing to fail.\n\nIf a connection is not fully established and a PIN code request is\nreceived, don\u0027t trigger the disconnect timeout. The either successful\nor failing connection complete event will make sure that the timeout\nis triggered at the right time.\n\nThe biggest problem with security mode 3 is that many Bluetooth 2.0\ndevice and before use a temporary security mode 3 for dedicated\nbonding.\n\nBased on a report by Johan Hedberg \u003cjohan.hedberg@nokia.com\u003e\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nTested-by: Johan Hedberg \u003cjohan.hedberg@nokia.com\u003e\n"
    },
    {
      "commit": "1b0336bb36f88976f1210a65b62f6a3e9578ee7b",
      "tree": "bcf2a8413090c43ab6513b55e145bddf8fe87da6",
      "parents": [
        "384943ec1bb462e410390ad8f108ff1474cd882d"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sat May 09 12:04:08 2009 -0700"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sat May 09 18:09:45 2009 -0700"
      },
      "message": "Bluetooth: Don\u0027t use hci_acl_connect_cancel() for incoming connections\n\nThe connection setup phase takes around 2 seconds or longer and in\nthat time it is possible that the need for an ACL connection is no\nlonger present. If that happens then, the connection attempt will\nbe canceled.\n\nThis only applies to outgoing connections, but currently it can also\nbe triggered by incoming connection. Don\u0027t call hci_acl_connect_cancel()\non incoming connection since these have to be either accepted or rejected\nin this state. Once they are successfully connected they need to be\nfully disconnected anyway.\n\nAlso remove the wrong hci_acl_disconn() call for SCO and eSCO links\nsince at this stage they can\u0027t be disconnected either, because the\nconnection handle is still unknown.\n\nBased on a report by Johan Hedberg \u003cjohan.hedberg@nokia.com\u003e\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nTested-by: Johan Hedberg \u003cjohan.hedberg@nokia.com\u003e\n"
    },
    {
      "commit": "384943ec1bb462e410390ad8f108ff1474cd882d",
      "tree": "df2fba9cebf66d5617bda674b4bbb997f01e8016",
      "parents": [
        "e1cc1c578055d20d36e084e324001fb5e0355a71"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Fri May 08 18:20:43 2009 -0700"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sat May 09 18:09:38 2009 -0700"
      },
      "message": "Bluetooth: Fix wrong module refcount when connection setup fails\n\nThe module refcount is increased by hci_dev_hold() call in hci_conn_add()\nand decreased by hci_dev_put() call in del_conn(). In case the connection\nsetup fails, hci_dev_put() is never called.\n\nProcedure to reproduce the issue:\n\n  # hciconfig hci0 up\n  # lsmod | grep btusb                   -\u003e \"used by\" refcount \u003d 1\n\n  # hcitool cc \u003cnon-exisiting bdaddr\u003e    -\u003e will get timeout\n\n  # lsmod | grep btusb                   -\u003e \"used by\" refcount \u003d 2\n  # hciconfig hci0 down\n  # lsmod | grep btusb                   -\u003e \"used by\" refcount \u003d 1\n  # rmmod btusb                          -\u003e ERROR: Module btusb is in use\n\nThe hci_dev_put() call got moved into del_conn() with the 2.6.25 kernel\nto fix an issue with hci_dev going away before hci_conn. However that\nchange was wrong and introduced this problem.\n\nWhen calling hci_conn_del() it has to call hci_dev_put() after freeing\nthe connection details. This handling should be fully symmetric. The\nexecution of del_conn() is done in a work queue and needs it own calls\nto hci_dev_hold() and hci_dev_put() to ensure that the hci_dev stays\nuntil the connection cleanup has been finished.\n\nBased on a report by Bing Zhao \u003cbzhao@marvell.com\u003e\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nTested-by: Bing Zhao \u003cbzhao@marvell.com\u003e\n"
    },
    {
      "commit": "be8be9eccbf2d908a7e56b3f7a71105cd88da06b",
      "tree": "0046061772516257c3bc6b63fdacee12dcd34e5d",
      "parents": [
        "e81963b180ac502fda0326edf059b1e29cdef1a2"
      ],
      "author": {
        "name": "Simon Horman",
        "email": "horms@verge.net.au",
        "time": "Wed May 06 15:02:29 2009 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri May 08 14:54:47 2009 -0700"
      },
      "message": "ipvs: Fix IPv4 FWMARK virtual services\n\nThis fixes the use of fwmarks to denote IPv4 virtual services\nwhich was unfortunately broken as a result of the integration\nof IPv6 support into IPVS, which was included in 2.6.28.\n\nThe problem arises because fwmarks are stored in the 4th octet\nof a union nf_inet_addr .all, however in the case of IPv4 only\nthe first octet, corresponding to .ip, is assigned and compared.\n\nIn other words, using .all \u003d { 0, 0, 0, htonl(svc-\u003efwmark) always\nresults in a value of 0 (32bits) being stored for IPv4. This means\nthat one fwmark can be used, as it ends up being mapped to 0, but things\nbreak down when multiple fwmarks are used, as they all end up being mapped\nto 0.\n\nAs fwmarks are 32bits a reasonable fix seems to be to just store the fwmark\nin .ip, and comparing and storing .ip when fwmarks are used.\n\nThis patch makes the assumption that in calls to ip_vs_ct_in_get()\nand ip_vs_sched_persist() if the proto parameter is IPPROTO_IP then\nwe are dealing with an fwmark. I believe this is valid as ip_vs_in()\ndoes fairly strict filtering on the protocol and IPPROTO_IP should\nnot be used in these calls unless explicitly passed when making\nthese calls for fwmarks in ip_vs_sched_persist().\n\nTested-by: Fabien Duchêne \u003cfabien.duchene@student.uclouvain.be\u003e\nCc: Joseph Mack NA3T \u003cjmack@wm7d.net\u003e\nCc: Julius Volz \u003cjulius.volz@gmail.com\u003e\nSigned-off-by: Simon Horman \u003chorms@verge.net.au\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e81963b180ac502fda0326edf059b1e29cdef1a2",
      "tree": "47b8b84acbaa45bc683a51e97c236eb35975aa0d",
      "parents": [
        "9b05126baa146fc3f41360164141d4e1b3ea93c4"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri May 08 12:45:26 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri May 08 12:45:26 2009 -0700"
      },
      "message": "ipv4: Make INET_LRO a bool instead of tristate.\n\nThis code is used as a library by several device drivers,\nwhich select INET_LRO.\n\nIf some are modules and some are statically built into the\nkernel, we get build failures if INET_LRO is modular.\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "9b05126baa146fc3f41360164141d4e1b3ea93c4",
      "tree": "560f3d061fe13ce49b11b10651f3128da35f68d3",
      "parents": [
        "b805007545813d276c844f0f6d6c825b07c6aec6"
      ],
      "author": {
        "name": "Ashish Karkare",
        "email": "akarkare@marvell.com",
        "time": "Thu May 07 16:31:01 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu May 07 16:31:01 2009 -0700"
      },
      "message": "net: remove stale reference to fastroute from Kconfig help text\n\nSigned-off-by: Ashish Karkare \u003cakarkare@marvell.com\u003e\nSigned-off-by: Lennert Buytenhek \u003cbuytenh@marvell.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "44347d947f628060b92449702071bfe1d31dfb75",
      "tree": "c6ed74610d5b3295df4296659f80f5feb94b28cc",
      "parents": [
        "d94fc523f3c35bd8013f04827e94756cbc0212f4",
        "413f81eba35d6ede9289b0c8a920c013a84fac71"
      ],
      "author": {
        "name": "Ingo Molnar",
        "email": "mingo@elte.hu",
        "time": "Thu May 07 11:17:13 2009 +0200"
      },
      "committer": {
        "name": "Ingo Molnar",
        "email": "mingo@elte.hu",
        "time": "Thu May 07 11:17:34 2009 +0200"
      },
      "message": "Merge branch \u0027linus\u0027 into tracing/core\n\nMerge reason: tracing/core was on a .30-rc1 base and was missing out on\n              on a handful of tracing fixes present in .30-rc5-almost.\n\nSigned-off-by: Ingo Molnar \u003cmingo@elte.hu\u003e\n"
    },
    {
      "commit": "b805007545813d276c844f0f6d6c825b07c6aec6",
      "tree": "e84739b18617b42e8d372dd9f68f2fbd0b636cb2",
      "parents": [
        "581daf7e00c5e766f26aff80a61a860a17b0d75a"
      ],
      "author": {
        "name": "Lennert Buytenhek",
        "email": "buytenh@wantstofly.org",
        "time": "Wed May 06 16:49:18 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 06 16:49:18 2009 -0700"
      },
      "message": "net: update skb_recycle_check() for hardware timestamping changes\n\nCommit ac45f602ee3d1b6f326f68bc0c2591ceebf05ba4 (\"net: infrastructure\nfor hardware time stamping\") added two skb initialization actions to\n__alloc_skb(), which need to be added to skb_recycle_check() as well.\n\nSigned-off-by: Lennert Buytenhek \u003cbuytenh@wantstofly.org\u003e\nSigned-off-by: Patrick Ohly \u003cpatrick.ohly@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6473990c7f0565fca2007f8662395d122e30f0d8",
      "tree": "07ffb4657f49dc3fc6e53167da5053e15c2492ef",
      "parents": [
        "77a22941f9ed052a0fdaa92753b1a1ab8072ee76"
      ],
      "author": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Wed May 06 16:45:07 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 06 16:45:07 2009 -0700"
      },
      "message": "net-sched: fix bfifo default limit\n\nWhen no limit is given, the bfifo uses a default of tx_queue_len * mtu.\nPackets handled by qdiscs include the link layer header, so this should\nbe taken into account, similar to what other qdiscs do.\n\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a860820dce09080dc3df05064b659e931ff35a29",
      "tree": "3a13abb743ed5235313f41f4cf33eb190d7d476a",
      "parents": [
        "457ca7bb6bdf39d0832d3f88c65fa367a3b20de6",
        "94c7f2d49521b0bb3ab91cbeb3518ac34355d47f"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 06 16:42:19 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed May 06 16:42:19 2009 -0700"
      },
      "message": "Merge branch \u0027linux-2.6.30.y\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/inaky/wimax\n"
    },
    {
      "commit": "94c7f2d49521b0bb3ab91cbeb3518ac34355d47f",
      "tree": "a2824d07c85cfc985811ff2237eb093e540b294f",
      "parents": [
        "d1a2627a29667fe7c4a9d06e1579a2d65bd39bba"
      ],
      "author": {
        "name": "Inaky Perez-Gonzalez",
        "email": "inaky@linux.intel.com",
        "time": "Sat May 02 02:30:28 2009 -0700"
      },
      "committer": {
        "name": "Inaky Perez-Gonzalez",
        "email": "inaky@linux.intel.com",
        "time": "Wed May 06 13:48:37 2009 -0700"
      },
      "message": "wimax: oops: wimax_dev_add() is the only one that can initialize the state\n\nWhen a new wimax_dev is created, it\u0027s state has to be __WIMAX_ST_NULL\nuntil wimax_dev_add() is succesfully called. This allows calls into\nthe stack that happen before said time to be rejected.\n\nUntil now, the state was being set (by mistake) to UNINITIALIZED,\nwhich was allowing calls such as wimax_report_rfkill_hw() to go\nthrough even when a call to wimax_dev_add() had failed; that was\ncausing an oops when touching uninitialized data.\n\nThis situation is normal when the device starts reporting state before\nthe whole initialization has been completed. It just has to be dealt\nwith.\n\nSigned-off-by: Inaky Perez-Gonzalez \u003cinaky@linux.intel.com\u003e\n"
    },
    {
      "commit": "d1a2627a29667fe7c4a9d06e1579a2d65bd39bba",
      "tree": "903881c40ed4d5c6f8c9664bc6f189baedcdef5b",
      "parents": [
        "356d6c2d55b71303a17910ea2cce3eba8e44bd29"
      ],
      "author": {
        "name": "Inaky Perez-Gonzalez",
        "email": "inaky@linux.intel.com",
        "time": "Mon Mar 30 17:50:17 2009 -0700"
      },
      "committer": {
        "name": "Inaky Perez-Gonzalez",
        "email": "inaky@linux.intel.com",
        "time": "Wed May 06 13:48:36 2009 -0700"
      },
      "message": "wimax: fix oops if netlink fails to add attribute\n\nWhen sending a message to user space using wimax_msg(), if nla_put()\nfails, correctly interpret the return code from wimax_msg_alloc() as\nan err ptr and return the error code instead of crashing (as it is\nassuming than non-NULL means the pointer is ok).\n\nSigned-off-by: Inaky Perez-Gonzalez \u003cinaky@linux.intel.com\u003e\n"
    },
    {
      "commit": "457ca7bb6bdf39d0832d3f88c65fa367a3b20de6",
      "tree": "0a126a886bf1626db70bc6a23b8b4277bd8750ae",
      "parents": [
        "356d6c2d55b71303a17910ea2cce3eba8e44bd29"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Tue May 05 13:09:01 2009 -0700"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Tue May 05 13:26:08 2009 -0700"
      },
      "message": "Bluetooth: Move dev_set_name() to a context that can sleep\n\nSetting the name of a sysfs device has to be done in a context that can\nactually sleep. It allocates its memory with GFP_KERNEL. Previously it\nwas a static (size limited) string and that got changed to accommodate\nlonger device names. So move the dev_set_name() just before calling\ndevice_add() which is executed in a work queue.\n\nThis fixes the following error:\n\n[  110.012125] BUG: sleeping function called from invalid context at mm/slub.c:1595\n[  110.012135] in_atomic(): 1, irqs_disabled(): 0, pid: 0, name: swapper\n[  110.012141] 2 locks held by swapper/0:\n[  110.012145]  #0:  (hci_task_lock){++.-.+}, at: [\u003cffffffffa01f822f\u003e] hci_rx_task+0x2f/0x2d0 [bluetooth]\n[  110.012173]  #1:  (\u0026hdev-\u003elock){+.-.+.}, at: [\u003cffffffffa01fb9e2\u003e] hci_event_packet+0x72/0x25c0 [bluetooth]\n[  110.012198] Pid: 0, comm: swapper Tainted: G        W 2.6.30-rc4-g953cdaa #1\n[  110.012203] Call Trace:\n[  110.012207]  \u003cIRQ\u003e  [\u003cffffffff8023eabd\u003e] __might_sleep+0x14d/0x170\n[  110.012228]  [\u003cffffffff802cfbe1\u003e] __kmalloc+0x111/0x170\n[  110.012239]  [\u003cffffffff803c2094\u003e] kvasprintf+0x64/0xb0\n[  110.012248]  [\u003cffffffff803b7a5b\u003e] kobject_set_name_vargs+0x3b/0xa0\n[  110.012257]  [\u003cffffffff80465326\u003e] dev_set_name+0x76/0xa0\n[  110.012273]  [\u003cffffffffa01fb9e2\u003e] ? hci_event_packet+0x72/0x25c0 [bluetooth]\n[  110.012289]  [\u003cffffffffa01ffc1d\u003e] hci_conn_add_sysfs+0x3d/0x70 [bluetooth]\n[  110.012303]  [\u003cffffffffa01fba2c\u003e] hci_event_packet+0xbc/0x25c0 [bluetooth]\n[  110.012312]  [\u003cffffffff80516eb0\u003e] ? sock_def_readable+0x80/0xa0\n[  110.012328]  [\u003cffffffffa01fee0c\u003e] ? hci_send_to_sock+0xfc/0x1c0 [bluetooth]\n[  110.012343]  [\u003cffffffff80516eb0\u003e] ? sock_def_readable+0x80/0xa0\n[  110.012347]  [\u003cffffffff805e88c5\u003e] ? _read_unlock+0x75/0x80\n[  110.012354]  [\u003cffffffffa01fee0c\u003e] ? hci_send_to_sock+0xfc/0x1c0 [bluetooth]\n[  110.012360]  [\u003cffffffffa01f8403\u003e] hci_rx_task+0x203/0x2d0 [bluetooth]\n[  110.012365]  [\u003cffffffff80250ab5\u003e] tasklet_action+0xb5/0x160\n[  110.012369]  [\u003cffffffff8025116c\u003e] __do_softirq+0x9c/0x150\n[  110.012372]  [\u003cffffffff805e850f\u003e] ? _spin_unlock+0x3f/0x80\n[  110.012376]  [\u003cffffffff8020cbbc\u003e] call_softirq+0x1c/0x30\n[  110.012380]  [\u003cffffffff8020f01d\u003e] do_softirq+0x8d/0xe0\n[  110.012383]  [\u003cffffffff80250df5\u003e] irq_exit+0xc5/0xe0\n[  110.012386]  [\u003cffffffff8020e71d\u003e] do_IRQ+0x9d/0x120\n[  110.012389]  [\u003cffffffff8020c3d3\u003e] ret_from_intr+0x0/0xf\n[  110.012391]  \u003cEOI\u003e  [\u003cffffffff80431832\u003e] ? acpi_idle_enter_bm+0x264/0x2a6\n[  110.012399]  [\u003cffffffff80431828\u003e] ? acpi_idle_enter_bm+0x25a/0x2a6\n[  110.012403]  [\u003cffffffff804f50d5\u003e] ? cpuidle_idle_call+0xc5/0x130\n[  110.012407]  [\u003cffffffff8020a4b4\u003e] ? cpu_idle+0xc4/0x130\n[  110.012411]  [\u003cffffffff805d2268\u003e] ? rest_init+0x88/0xb0\n[  110.012416]  [\u003cffffffff807e2fbd\u003e] ? start_kernel+0x3b5/0x412\n[  110.012420]  [\u003cffffffff807e2281\u003e] ? x86_64_start_reservations+0x91/0xb5\n[  110.012424]  [\u003cffffffff807e2394\u003e] ? x86_64_start_kernel+0xef/0x11b\n\nBased on a report by Davide Pesavento \u003cdavidepesa@gmail.com\u003e\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nTested-by: Hugo Mildenberger \u003chugo.mildenberger@namir.de\u003e\nTested-by: Bing Zhao \u003cbzhao@marvell.com\u003e\n"
    },
    {
      "commit": "356d6c2d55b71303a17910ea2cce3eba8e44bd29",
      "tree": "1a55442d61782eabab5682f9a10b4d8694ae650e",
      "parents": [
        "86b698b8cba723fc7e7db50f664ccf0d7da57ee1",
        "fecc1133b66af6e0cd49115a248f34bbb01f180a"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue May 05 12:00:53 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue May 05 12:00:53 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-2.6\n"
    },
    {
      "commit": "86b698b8cba723fc7e7db50f664ccf0d7da57ee1",
      "tree": "4c6ec16665caf24b55f8fb6f327c01e3b63f5723",
      "parents": [
        "bc83871e8325bb17da2930a76c2a3806377a76c5",
        "6909268dc93ae4b0b8e1ebb4b2fa70b1a47dd347"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue May 05 11:56:07 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue May 05 11:56:07 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6\n"
    },
    {
      "commit": "fecc1133b66af6e0cd49115a248f34bbb01f180a",
      "tree": "3d1520735b58e63db4d2f7a2aa8e84f796ca38f0",
      "parents": [
        "280f37afa2c270ff029cb420b34396aa002909c3"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Tue May 05 17:48:26 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue May 05 17:48:26 2009 +0200"
      },
      "message": "netfilter: ctnetlink: fix wrong message type in user updates\n\nThis patch fixes the wrong message type that are triggered by\nuser updates, the following commands:\n\n(term1)# conntrack -I -p tcp -s 1.1.1.1 -d 2.2.2.2 -t 10 --sport 10 --dport 20 --state LISTEN\n(term1)# conntrack -U -p tcp -s 1.1.1.1 -d 2.2.2.2 -t 10 --sport 10 --dport 20 --state SYN_SENT\n(term1)# conntrack -U -p tcp -s 1.1.1.1 -d 2.2.2.2 -t 10 --sport 10 --dport 20 --state SYN_RECV\n\nonly trigger event message of type NEW, when only the first is NEW\nwhile others should be UPDATE.\n\n(term2)# conntrack -E\n    [NEW] tcp      6 10 LISTEN src\u003d1.1.1.1 dst\u003d2.2.2.2 sport\u003d10 dport\u003d20 [UNREPLIED] src\u003d2.2.2.2 dst\u003d1.1.1.1 sport\u003d20 dport\u003d10 mark\u003d0\n    [NEW] tcp      6 10 SYN_SENT src\u003d1.1.1.1 dst\u003d2.2.2.2 sport\u003d10 dport\u003d20 [UNREPLIED] src\u003d2.2.2.2 dst\u003d1.1.1.1 sport\u003d20 dport\u003d10 mark\u003d0\n    [NEW] tcp      6 10 SYN_RECV src\u003d1.1.1.1 dst\u003d2.2.2.2 sport\u003d10 dport\u003d20 [UNREPLIED] src\u003d2.2.2.2 dst\u003d1.1.1.1 sport\u003d20 dport\u003d10 mark\u003d0\n\nThis patch also removes IPCT_REFRESH from the bitmask since it is\nnot of any use.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "280f37afa2c270ff029cb420b34396aa002909c3",
      "tree": "6d90560f2210c7ddb4da5640a2d190357c4f41b4",
      "parents": [
        "b98b4947cb79d670fceca0e951c092eea93e9baa"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Tue May 05 17:46:07 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue May 05 17:46:07 2009 +0200"
      },
      "message": "netfilter: xt_cluster: fix use of cluster match with 32 nodes\n\nThis patch fixes a problem when you use 32 nodes in the cluster\nmatch:\n\n% iptables -I PREROUTING -t mangle -i eth0 -m cluster \\\n  --cluster-total-nodes  32  --cluster-local-node  32 \\\n  --cluster-hash-seed 0xdeadbeef -j MARK --set-mark 0xffff\niptables: Invalid argument. Run `dmesg\u0027 for more information.\n% dmesg | tail -1\nxt_cluster: this node mask cannot be higher than the total number of nodes\n\nThe problem is related to this checking:\n\nif (info-\u003enode_mask \u003e\u003d (1 \u003c\u003c info-\u003etotal_nodes)) {\n\tprintk(KERN_ERR \"xt_cluster: this node mask cannot be \"\n\t\t\t\"higher than the total number of nodes\\n\");\n\treturn false;\n}\n\n(1 \u003c\u003c 32) is 1. Thus, the checking fails.\n\nBTW, I said this before but I insist: I have only tested the cluster\nmatch with 2 nodes getting ~45% extra performance in an active-active setup.\nThe maximum limit of 32 nodes is still completely arbitrary. I\u0027d really\nappreciate if people that have more nodes in their setups let me know.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "80445de57764b45fc26315c19fe7dc9fc57c2c65",
      "tree": "dc288dd1fbf94dae32e08ac9549ed814c2463f99",
      "parents": [
        "32bc66d8d0edc9b04dea9ebac299bdb7ad781d6b",
        "bc83871e8325bb17da2930a76c2a3806377a76c5"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue May 05 08:26:10 2009 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue May 05 08:26:10 2009 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6: (30 commits)\n  e1000: fix virtualization bug\n  bonding: fix alb mode locking regression\n  Bluetooth: Fix issue with sysfs handling for connections\n  usbnet: CDC EEM support (v5)\n  tcp: Fix tcp_prequeue() to get correct rto_min value\n  ehea: fix invalid pointer access\n  ne2k-pci: Do not register device until initialized.\n  Subject: [PATCH] br2684: restore net_dev initialization\n  net: Only store high 16 bits of kernel generated filter priorities\n  virtio_net: Fix function name typo\n  virtio_net: Cleanup command queue scatterlist usage\n  bonding: correct the cleanup in bond_create()\n  virtio: add missing include to virtio_net.h\n  smsc95xx: add support for LAN9512 and LAN9514\n  smsc95xx: configure LED outputs\n  netconsole: take care of NETDEV_UNREGISTER event\n  xt_socket: checks for the state of nf_conntrack\n  bonding: bond_slave_info_query() fix\n  cxgb3: fixing gcc 4.4 compiler warning: suggest parentheses around operand of ‘!’\n  netfilter: use likely() in xt_info_rdlock_bh()\n  ...\n"
    },
    {
      "commit": "b98b4947cb79d670fceca0e951c092eea93e9baa",
      "tree": "4daddb336ddbab1e7ac7a6b10e68add36ab908ac",
      "parents": [
        "a7ca7fccacc029958fd09985e7f3529b90ec791d"
      ],
      "author": {
        "name": "Christoph Paasch",
        "email": "christoph.paasch@gmail.com",
        "time": "Tue May 05 15:32:16 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Tue May 05 15:32:16 2009 +0200"
      },
      "message": "netfilter: ip6t_ipv6header: fix match on packets ending with NEXTHDR_NONE\n\nAs packets ending with NEXTHDR_NONE don\u0027t have a last extension header,\nthe check for the length needs to be after the check for NEXTHDR_NONE.\n\nSigned-off-by: Christoph Paasch \u003cchristoph.paasch@gmail.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "a67e899cf38ae542d1a028ccd021f9189f76fb74",
      "tree": "d0bb79ccbdd5737745e99acbc569605bc74bc446",
      "parents": [
        "9f722c0978b04acba209f8ca1896ad05814bc3a3"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sat May 02 18:24:06 2009 -0700"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Mon May 04 14:29:02 2009 -0700"
      },
      "message": "Bluetooth: Fix issue with sysfs handling for connections\n\nDue to a semantic changes in flush_workqueue() the current approach of\nsynchronizing the sysfs handling for connections doesn\u0027t work anymore. The\nwhole approach is actually fully broken and based on assumptions that are\nno longer valid.\n\nWith the introduction of Simple Pairing support, the creation of low-level\nACL links got changed. This change invalidates the reason why in the past\ntwo independent work queues have been used for adding/removing sysfs\ndevices. The adding of the actual sysfs device is now postponed until the\nhost controller successfully assigns an unique handle to that link. So\nthe real synchronization happens inside the controller and not the host.\n\nThe only left-over problem is that some internals of the sysfs device\nhandling are not initialized ahead of time. This leaves potential access\nto invalid data and can cause various NULL pointer dereferences. To fix\nthis a new function makes sure that all sysfs details are initialized\nwhen an connection attempt is made. The actual sysfs device is only\nregistered when the connection has been successfully established. To\navoid a race condition with the registration, the check if a device is\nregistered has been moved into the removal work.\n\nAs an extra protection two flush_work() calls are left in place to\nmake sure a previous add/del work has been completed first.\n\nBased on a report by Marc Pignat \u003cmarc.pignat@hevs.ch\u003e\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nTested-by: Justin P. Mattock \u003cjustinmattock@gmail.com\u003e\nTested-by: Roger Quadros \u003cext-roger.quadros@nokia.com\u003e\nTested-by: Marc Pignat \u003cmarc.pignat@hevs.ch\u003e\n"
    },
    {
      "commit": "6909268dc93ae4b0b8e1ebb4b2fa70b1a47dd347",
      "tree": "d4410166db411f73939560f9cd9e1b7bdeae09c1",
      "parents": [
        "8e532175277d9a5eae49768ed086555081f741a7"
      ],
      "author": {
        "name": "Jiri Slaby",
        "email": "jirislaby@gmail.com",
        "time": "Mon May 04 18:10:28 2009 +0200"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 04 16:22:16 2009 -0400"
      },
      "message": "mac80211: pid, fix memory corruption\n\npid doesn\u0027t count with some band having more bitrates than the one\nassociated the first time.\nFix that by counting the maximal available bitrate count and allocate\nbig enough space.\n\nSecondly, fix touching uninitialized memory which causes panics.\nIndex sucked from this random memory points to the hell.\nThe fix is to sort the rates on each band change.\n\nSigned-off-by: Jiri Slaby \u003cjirislaby@gmail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "8e532175277d9a5eae49768ed086555081f741a7",
      "tree": "b073a0fec60be2fcffcf959d03e670190f29adef",
      "parents": [
        "30a548c727514484b08ac06edf0a7eb0f7fd70bf"
      ],
      "author": {
        "name": "Jiri Slaby",
        "email": "jirislaby@gmail.com",
        "time": "Mon May 04 18:04:55 2009 +0200"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 04 16:22:15 2009 -0400"
      },
      "message": "mac80211: minstrel, fix memory corruption\n\nminstrel doesn\u0027t count max rate count in fact, since it doesn\u0027t use\na loop variable `i\u0027 and hence allocs space only for bitrates found in\nthe first band.\n\nFix it by involving the `i\u0027 as an index so that it traverses all the\nbands now and finds the real max bitrate count.\n\nSigned-off-by: Jiri Slaby \u003cjirislaby@gmail.com\u003e\nCc: Felix Fietkau \u003cnbd@openwrt.org\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "30a548c727514484b08ac06edf0a7eb0f7fd70bf",
      "tree": "531126337e3f6318a269cda96bbb52de1f42d2e7",
      "parents": [
        "b1ed8ddd21a2d7acf8efbb60a112ea5c9f914159"
      ],
      "author": {
        "name": "Luis R. Rodriguez",
        "email": "lrodriguez@atheros.com",
        "time": "Sat May 02 01:17:27 2009 -0400"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 04 16:22:14 2009 -0400"
      },
      "message": "cfg80211: fix comment on regulatory hint processing\n\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "b1ed8ddd21a2d7acf8efbb60a112ea5c9f914159",
      "tree": "3e39b43a2b4a8454e8e718153fd51fabff4a9da1",
      "parents": [
        "ac46d48e00349c63650b3cc6f9460fcc183da6a6"
      ],
      "author": {
        "name": "Luis R. Rodriguez",
        "email": "lrodriguez@atheros.com",
        "time": "Sat May 02 00:34:15 2009 -0400"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 04 16:22:13 2009 -0400"
      },
      "message": "cfg80211: fix bug while trying to process beacon hints on init\n\nDuring initialization we would not have received any beacons\nso skip processing reg beacon hints, also adds a check to\nreg_is_world_roaming() for last_request before accessing its\nfields.\n\nThis should fix this:\n\nBUG: unable to handle kernel NULL pointer dereference at\n\nIP: [\u003ce0171332\u003e] wiphy_update_regulatory+0x20f/0x295\n\n*pdpt \u003d 0000000008bf1001 *pde \u003d 0000000000000000\nOops: 0000 [#1]\nlast sysfs file: /sys/class/backlight/eeepc/brightness\nModules linked in: ath5k(+) mac80211 led_class cfg80211\ngo_bit cfbcopyarea cfbimgblt cfbfillrect ipv6\nydev usual_tables(P) snd_hda_codec_realtek snd_hda_intel\nnd_hwdep uhci_hcd snd_pcm_oss snd_mixer_oss i2c_i801\ne serio_raw i2c_core pcspkr atl2 snd_pcm intel_agp\nre agpgart eeepc_laptop snd_page_alloc ac video backlight\nrfkill button processor evdev thermal fan ata_generic\n\nPid: 2909, comm: modprobe Tainted: Pc #112) 701\nEIP: 0060:[\u003ce0171332\u003e] EFLAGS: 00010246 CPU: 0\nEIP is at wiphy_update_regulatory+0x20f/0x295 [cfg80211]\nEAX: 00000000 EBX: c5da0000 ECX: 00000000 EDX: c5da0060\nESI: 0000001a EDI: c5da0060 EBP: df3bdd70 ESP: df3bdd40\n DS: 007b ES: 007b FS: 0000 GS: 0033 SS: 0068\nProcess modprobe (pid: 2909, ti\u003ddf3bc000 task\u003dc5d030000)\nStack:\n df3bdd90 c5da0060 c04277e0 00000001 00000044 c04277e402\n 00000002 c5da0000 0000001a c5da0060 df3bdda8 e01706a2 02\n 00000282 000080d0 00000068 c5d53500 00000080 0000028240\nCall Trace:\n [\u003ce01706a2\u003e] ? wiphy_register+0x122/0x1b7 [cfg80211]\n [\u003ce0328e02\u003e] ? ieee80211_register_hw+0xd8/0x346\n [\u003ce06a7c9f\u003e] ? ath5k_hw_set_bssid_mask+0x71/0x78 [ath5k]\n [\u003ce06b0c52\u003e] ? ath5k_pci_probe+0xa5c/0xd0a [ath5k]\n [\u003cc01a6037\u003e] ? sysfs_find_dirent+0x16/0x27\n [\u003cc01fec95\u003e] ? local_pci_probe+0xe/0x10\n [\u003cc01ff526\u003e] ? pci_device_probe+0x48/0x66\n [\u003cc024c9fd\u003e] ? driver_probe_device+0x7f/0xf2\n [\u003cc024cab3\u003e] ? __driver_attach+0x43/0x5f\n [\u003cc024c0af\u003e] ? bus_for_each_dev+0x39/0x5a\n [\u003cc024c8d0\u003e] ? driver_attach+0x14/0x16\n [\u003cc024ca70\u003e] ? __driver_attach+0x0/0x5f\n [\u003cc024c5b3\u003e] ? bus_add_driver+0xd7/0x1e7\n [\u003cc024ccb9\u003e] ? driver_register+0x7b/0xd7\n [\u003cc01ff827\u003e] ? __pci_register_driver+0x32/0x85\n [\u003ce00a8018\u003e] ? init_ath5k_pci+0x18/0x30 [ath5k]\n [\u003cc0101131\u003e] ? _stext+0x49/0x10b\n [\u003ce00a8000\u003e] ? init_ath5k_pci+0x0/0x30 [ath5k]\n [\u003cc012f452\u003e] ? __blocking_notifier_call_chain+0x40/0x4c\n [\u003cc013a714\u003e] ? sys_init_module+0x87/0x18b\n [\u003cc0102804\u003e] ? sysenter_do_call+0x12/0x22\nCode: b8 da 17 e0 83 c0 04 e8 92 f9 ff ff 84 c0 75 2a 8b\n85 c0 74 0c 83 c0 04 e8 7c f9 ff ff 84 c0 75 14 a1 bc da\n4 03 74 66 8b 4d d4 80 79 08 00 74 5d a1 e0 d2 17 e0 48\nEIP: [\u003ce0171332\u003e] wiphy_update_regulatory+0x20f/0x295\nSP 0068:df3bdd40\nCR2: 0000000000000004\n---[ end trace 830f2dd2a95fd1a8 ]---\n\nThis issue is hard to reproduce, but it was noticed and discussed on\nthis thread:\n\nhttp://marc.info/?t\u003d123938022700005\u0026r\u003d1\u0026w\u003d2\n\nCc: stable@kernel.org\nReported-by: Alan Jenkins \u003calan-jenkins@tuffmail.co.uk\u003e\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "ac46d48e00349c63650b3cc6f9460fcc183da6a6",
      "tree": "a6516d0c1e62e3b32baad0bcee0db6a3f3d7cd73",
      "parents": [
        "299f5462087f3bc2141e6bc83ba7e2b15d8a07d2"
      ],
      "author": {
        "name": "Luis R. Rodriguez",
        "email": "lrodriguez@atheros.com",
        "time": "Fri May 01 18:44:50 2009 -0400"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 04 16:22:12 2009 -0400"
      },
      "message": "cfg80211: fix race condition with wiphy_apply_custom_regulatory()\n\nWe forgot to lock using the cfg80211_mutex in\nwiphy_apply_custom_regulatory(). Without the lock\nthere is possible race between processing a reply from CRDA\nand a driver calling wiphy_apply_custom_regulatory(). During\nthe processing of the reply from CRDA we free last_request and\nwiphy_apply_custom_regulatory() eventually accesses an\nelement from last_request in the through freq_reg_info_regd().\n\nThis is very difficult to reproduce (I haven\u0027t), it takes us\n3 hours and you need to be banging hard, but the race is obvious\nby looking at the code.\n\nThis should only affect those who use this caller, which currently\nis ath5k, ath9k, and ar9170.\n\nEIP: 0060:[\u003cf8ebec50\u003e] EFLAGS: 00210282 CPU: 1\nEIP is at freq_reg_info_regd+0x24/0x121 [cfg80211]\nEAX: 00000000 EBX: f7ca0060 ECX: f5183d94 EDX: 0024cde0\nESI: f8f56edc EDI: 00000000 EBP: 00000000 ESP: f5183d44\nDS: 007b ES: 007b FS: 00d8 GS: 0033 SS: 0068\nProcess modprobe (pid: 14617, ti\u003df5182000 task\u003df3934d10 task.ti\u003df5182000)\nStack: c0505300 f7ca0ab4 f5183d94 0024cde0 f8f403a6 f8f63160 f7ca0060 00000000\n00000000 f8ebedf8 f5183d90 f8f56edc 00000000 00000004 00000f40 f8f56edc\nf7ca0060 f7ca1234 00000000 00000000 00000000 f7ca14f0 f7ca0ab4 f7ca1289\nCall Trace:\n[\u003cf8ebedf8\u003e] wiphy_apply_custom_regulatory+0x8f/0x122 [cfg80211]\n[\u003cf8f3f798\u003e] ath_attach+0x707/0x9e6 [ath9k]\n[\u003cf8f45e46\u003e] ath_pci_probe+0x18d/0x29a [ath9k]\n[\u003cc023c7ba\u003e] pci_device_probe+0xa3/0xe4\n[\u003cc02a860b\u003e] really_probe+0xd7/0x1de\n[\u003cc02a87e7\u003e] __driver_attach+0x37/0x55\n[\u003cc02a7eed\u003e] bus_for_each_dev+0x31/0x57\n[\u003cc02a83bd\u003e] driver_attach+0x16/0x18\n[\u003cc02a78e6\u003e] bus_add_driver+0xec/0x21b\n[\u003cc02a8959\u003e] driver_register+0x85/0xe2\n[\u003cc023c9bb\u003e] __pci_register_driver+0x3c/0x69\n[\u003cf8e93043\u003e] ath9k_init+0x43/0x68 [ath9k]\n[\u003cc010112b\u003e] _stext+0x3b/0x116\n[\u003cc014a872\u003e] sys_init_module+0x8a/0x19e\n[\u003cc01049ad\u003e] sysenter_do_call+0x12/0x21\n[\u003cffffe430\u003e] 0xffffe430\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nCode: 0f 94 c0 c3 31 c0 c3 55 57 56 53 89 c3 83 ec 14 8b 74 24 2c 89 54 24 0c 89 4c 24 08 85 f6 75\n06 8b 35 c8 bb ec f8 a1 cc bb ec f8 \u003c8b\u003e 40 04 83 f8 03 74 3a 48 74 37 8b 43 28 85 c0 74 30 89 c6\n8b\nEIP: [\u003cf8ebec50\u003e] freq_reg_info_regd+0x24/0x121 [cfg80211] SS:ESP 0068:f5183d44\n\nCc: stable@kernel.org\nReported-by: Nataraj Sadasivam \u003cNataraj.Sadasivam@Atheros.com\u003e\nReported-by: Vivek Natarajan \u003cVivek.Natarajan@Atheros.com\u003e\nSigned-off-by: Luis R. Rodriguez \u003clrodriguez@atheros.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "c0f0aac05fa84b37ed46db8cf6c8bee9a67bbcca",
      "tree": "c0748d3ba37d5d1666c5d7eaa91cc7af6a10acbe",
      "parents": [
        "8ccd8f21122dcc30a665516d43aa8b4aa8ae51f6"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Thu Apr 30 20:09:56 2009 +0200"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 04 16:22:10 2009 -0400"
      },
      "message": "cfg80211: fix truncated IEs\n\nAnother bug in the \"cfg80211: do not replace BSS structs\" patch,\na forgotten length update leads to bogus data being stored and\npassed to userspace, often truncated.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "8ccd8f21122dcc30a665516d43aa8b4aa8ae51f6",
      "tree": "27c9984baf7f1224ffd09c9070f4b5afcb473944",
      "parents": [
        "3ee59f8d0dcab2e114546038b2b224776c82b7f7"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Wed Apr 29 23:35:56 2009 +0200"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon May 04 16:22:08 2009 -0400"
      },
      "message": "mac80211: correct fragmentation threshold check\n\nThe fragmentation threshold is defined to be including the\nFCS, and the code that sets the TX_FRAGMENTED flag correctly\naccounts for those four bytes. The code that verifies this\ndoesn\u0027t though, which could lead to spurious warnings and\nframes being dropped although everything is ok. Correct the\ncode by accounting for the FCS.\n\n(JWL -- The problem is described here:\n http://article.gmane.org/gmane.linux.kernel.wireless.general/32205 )\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "0c266898b42fe4e4e2f9edfc9d3474c10f93aa6a",
      "tree": "d964259d2fdd67f22f005852b1770c40ba4d6474",
      "parents": [
        "0b2febf38a33d7c40fb7bb4a58c113a1fa33c412"
      ],
      "author": {
        "name": "Satoru SATOH",
        "email": "satoru.satoh@gmail.com",
        "time": "Mon May 04 11:11:01 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon May 04 11:11:01 2009 -0700"
      },
      "message": "tcp: Fix tcp_prequeue() to get correct rto_min value\n\ntcp_prequeue() refers to the constant value (TCP_RTO_MIN) regardless of\nthe actual value might be tuned. The following patches fix this and make\ntcp_prequeue get the actual value returns from tcp_rto_min().\n\nSigned-off-by: Satoru SATOH \u003csatoru.satoh@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "21515e46bc6a6279dd13f6c01898ada9720100a3",
      "tree": "12acd677f3d1b7e615d3887a20f46bceb02438f9",
      "parents": [
        "d0687be7c7ae21461da4438d5fd059b48487bfe1"
      ],
      "author": {
        "name": "Steve Wise",
        "email": "swise@opengridcomputing.com",
        "time": "Wed Apr 29 14:14:00 2009 -0500"
      },
      "committer": {
        "name": "J. Bruce Fields",
        "email": "bfields@citi.umich.edu",
        "time": "Sun May 03 14:19:10 2009 -0400"
      },
      "message": "svcrdma: clean up error paths.\n\nThese fixes resolved crashes due to resource leak BUG_ON checks. The\nresource leaks were detected by introducing asynchronous transport errors.\n\nSigned-off-by: Steve Wise \u003cswise@opengridcomputing.com\u003e\nSigned-off-by: Tom Tucker \u003ctom@opengridcomputing.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@citi.umich.edu\u003e\n"
    },
    {
      "commit": "902e5ea15f8471a3213a37b11b98196f3406aeaf",
      "tree": "cd8538075d504800868fb32c7f5f77fbef1f655c",
      "parents": [
        "d0ab8ff81bf1b01bae7d6b92ca067badbbb02cc9"
      ],
      "author": {
        "name": "Rabin Vincent",
        "email": "rabin@rab.in",
        "time": "Sat May 02 13:49:36 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat May 02 13:49:36 2009 -0700"
      },
      "message": "Subject: [PATCH] br2684: restore net_dev initialization\n\nCommit 0ba25ff4c669e5395110ba6ab4958a97a9f96922 (\"br2684: convert to\nnet_device_ops\") inadvertently deleted the initialization of the net_dev\npointer in the br2684_dev structure, leading to crashes.  This patch\nadds it back.\n\nReported-by: Mikko Vinni \u003cmmvinni@yahoo.com\u003e\nTested-by: Mikko Vinni \u003cmmvinni@yahoo.com\u003e\nSigned-off-by: Rabin Vincent \u003crabin@rab.in\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d0ab8ff81bf1b01bae7d6b92ca067badbbb02cc9",
      "tree": "872f9521e3f51018be9afd9492e7509e42478621",
      "parents": [
        "1824a9897473fda5e5e42f991ddc674c175e3a09"
      ],
      "author": {
        "name": "Robert Love",
        "email": "robert.w.love@intel.com",
        "time": "Sat May 02 13:48:32 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat May 02 13:48:32 2009 -0700"
      },
      "message": "net: Only store high 16 bits of kernel generated filter priorities\n\nThe kernel should only be using the high 16 bits of a kernel\ngenerated priority. Filter priorities in all other cases only\nuse the upper 16 bits of the u32 \u0027prio\u0027 field of \u0027struct tcf_proto\u0027,\nbut when the kernel generates the priority of a filter is saves all\n32 bits which can result in incorrect lookup failures when a filter\nneeds to be deleted or modified.\n\nSigned-off-by: Robert Love \u003crobert.w.love@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "acda074390270ca9e28f2a9729f7b835e2ad6da4",
      "tree": "ebce90f2a5e91ab7c4a2467c58abbc67091e1da3",
      "parents": [
        "689c96cca7ec3d2ba7fba00481810f99f1803c63"
      ],
      "author": {
        "name": "Laszlo Attila Toth",
        "email": "panther@balabit.hu",
        "time": "Fri May 01 15:23:10 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri May 01 15:23:10 2009 -0700"
      },
      "message": "xt_socket: checks for the state of nf_conntrack\n\nxt_socket can use connection tracking, and checks whether it is a module.\n\nSigned-off-by: Laszlo Attila Toth \u003cpanther@balabit.hu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ec581f6a42bbbea5271c66da9769a41b46c74e10",
      "tree": "608636f6519789f3504fd4d0077568cc25d89b5a",
      "parents": [
        "7a67e56fd362d3edfde1f19170893508c3940d3a"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "dada1@cosmosbay.com",
        "time": "Fri May 01 09:05:06 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Fri May 01 09:05:06 2009 -0700"
      },
      "message": "net: Fix skb_tx_hash() for forwarding workloads.\n\nWhen skb_rx_queue_recorded() is true, we dont want to use jash distribution\nas the device driver exactly told us which queue was selected at RX time.\njhash makes a statistical shuffle, but this wont work with 8 static inputs.\n\nLater improvements would be to compute reciprocal value of real_num_tx_queues\nto avoid a divide here. But this computation should be done once,\nwhen real_num_tx_queues is set. This needs a separate patch, and a new\nfield in struct net_device.\n\nReported-by: Andrew Dickinson \u003candrew@whydna.net\u003e\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "7a67e56fd362d3edfde1f19170893508c3940d3a",
      "tree": "9bbddde4ab62836ab6d488f98ca653d56d6cb142",
      "parents": [
        "93af7aca44f0e82e67bda10a0fb73d383edcc8bd"
      ],
      "author": {
        "name": "Jarek Poplawski",
        "email": "jarkao2@gmail.com",
        "time": "Thu Apr 30 05:41:19 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Thu Apr 30 05:41:19 2009 -0700"
      },
      "message": "net: Fix oops when splicing skbs from a frag_list.\n\nLennert Buytenhek wrote:\n\u003e Since 4fb669948116d928ae44262ab7743732c574630d (\"net: Optimize memory\n\u003e usage when splicing from sockets.\") I\u0027m seeing this oops (e.g. in\n\u003e 2.6.30-rc3) when splicing from a TCP socket to /dev/null on a driver\n\u003e (mv643xx_eth) that uses LRO in the skb mode (lro_receive_skb) rather\n\u003e than the frag mode:\n\nMy patch incorrectly assumed skb-\u003esk was always valid, but for\n\"frag_listed\" skbs we can only use skb-\u003esk of their parent.\n\nReported-by: Lennert Buytenhek \u003cbuytenh@wantstofly.org\u003e\nDebugged-by: Lennert Buytenhek \u003cbuytenh@wantstofly.org\u003e\nTested-by: Lennert Buytenhek \u003cbuytenh@wantstofly.org\u003e\nSigned-off-by: Jarek Poplawski \u003cjarkao2@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ddc9f824b09d790e93a800ba29ff3462f8fb5d0b",
      "tree": "9cfa54ece40eaed3de7fcfbaf0f01db284e97c16",
      "parents": [
        "ac7c992cac0c8f276aa8e4a8273204a6db707bb3",
        "c428c89201a57a0ce24c37ed79e540d1f4101cf3"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Apr 29 15:52:56 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Apr 29 15:52:56 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6\n"
    },
    {
      "commit": "c428c89201a57a0ce24c37ed79e540d1f4101cf3",
      "tree": "e08f3f9f431c7e43c8c2d6c8049358ed43e56306",
      "parents": [
        "d4c4a9a1bce1912ed5681251f0037fd4f2364a3e"
      ],
      "author": {
        "name": "Johannes Berg",
        "email": "johannes@sipsolutions.net",
        "time": "Wed Apr 29 00:28:18 2009 +0200"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Wed Apr 29 16:48:33 2009 -0400"
      },
      "message": "mac80211: default to automatic power control\n\nIn \"mac80211: correct wext transmit power handler\"\nI fixed the wext handler, but forgot to make the default of the\nuser_power_level -1 (aka \"auto\"), so that now the transmit power\nis always set to 0, causing associations to time out and similar\nproblems since we\u0027re transmitting with very little power. Correct\nthis by correcting the default user_power_level to -1.\n\nSigned-off-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nBisected-by: Niel Lambrechts \u003cniel.lambrechts@gmail.com\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "d4c4a9a1bce1912ed5681251f0037fd4f2364a3e",
      "tree": "85c5631e48bf75bfdb3e52634a983e4f7c46f06d",
      "parents": [
        "b7fcb5c4a4c27da2f6d86cb03d18687e537442cf"
      ],
      "author": {
        "name": "Alan Jenkins",
        "email": "alan-jenkins@tuffmail.co.uk",
        "time": "Wed Apr 29 11:41:24 2009 +0100"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Wed Apr 29 16:48:33 2009 -0400"
      },
      "message": "mac80211: fix modprobe deadlock by not calling wep_init under rtnl_lock\n\n- ieee80211_wep_init(), which is called with rtnl_lock held, blocks in\n   request_module() [waiting for modprobe to load a crypto module].\n\n - modprobe blocks in a call to flush_workqueue(), when it closes a TTY\n   [presumably when it exits].\n\n - The workqueue item linkwatch_event() blocks on rtnl_lock.\n\nThere\u0027s no reason for wep_init() to be called with rtnl_lock held, so\njust move it outside the critical section.\n\nSigned-off-by: Alan Jenkins \u003calan-jenkins@tuffmail.co.uk\u003e\nSigned-off-by: John W. Linville \u003clinville@tuxdriver.com\u003e\n"
    },
    {
      "commit": "bf0de3e9c87fda3d1fc55ac2914948f3ca32ff9b",
      "tree": "289f4ea835c270de9af81d75d6caae1d1bc00f75",
      "parents": [
        "942e4a2bd680c606af0211e64eb216be2e19bf61",
        "3fdca1e1370ffe89980927cdef0583bebcd8caaf"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Apr 28 22:40:49 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Apr 28 22:40:49 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/holtmann/bluetooth-2.6\n"
    },
    {
      "commit": "942e4a2bd680c606af0211e64eb216be2e19bf61",
      "tree": "a83af49242d4a8d53aa0f3b5814eb17da72edc09",
      "parents": [
        "bf368e4e70cd4e0f880923c44e95a4273d725ab4"
      ],
      "author": {
        "name": "Stephen Hemminger",
        "email": "shemminger@vyatta.com",
        "time": "Tue Apr 28 22:36:33 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Apr 28 22:36:33 2009 -0700"
      },
      "message": "netfilter: revised locking for x_tables\n\nThe x_tables are organized with a table structure and a per-cpu copies\nof the counters and rules. On older kernels there was a reader/writer \nlock per table which was a performance bottleneck. In 2.6.30-rc, this\nwas converted to use RCU and the counters/rules which solved the performance\nproblems for do_table but made replacing rules much slower because of\nthe necessary RCU grace period.\n\nThis version uses a per-cpu set of spinlocks and counters to allow to\ntable processing to proceed without the cache thrashing of a global\nreader lock and keeps the same performance for table updates.\n\nSigned-off-by: Stephen Hemminger \u003cshemminger@vyatta.com\u003e\nAcked-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3fdca1e1370ffe89980927cdef0583bebcd8caaf",
      "tree": "30ec395081409d7cea5338cf4f486eaabd14e53d",
      "parents": [
        "052b30b0a8eec8db5b18ad49effdf2a9ba4c1e1a"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Tue Apr 28 09:04:55 2009 -0700"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Tue Apr 28 09:31:39 2009 -0700"
      },
      "message": "Bluetooth: Fix connection establishment with low security requirement\n\nThe Bluetooth 2.1 specification introduced four different security modes\nthat can be mapped using Legacy Pairing and Simple Pairing. With the\nusage of Simple Pairing it is required that all connections (except\nthe ones for SDP) are encrypted. So even the low security requirement\nmandates an encrypted connection when using Simple Pairing. When using\nLegacy Pairing (for Bluetooth 2.0 devices and older) this is not required\nsince it causes interoperability issues.\n\nTo support this properly the low security requirement translates into\ndifferent host controller transactions depending if Simple Pairing is\nsupported or not. However in case of Simple Pairing the command to\nswitch on encryption after a successful authentication is not triggered\nfor the low security mode. This patch fixes this and actually makes\nthe logic to differentiate between Simple Pairing and Legacy Pairing\na lot simpler.\n\nBased on a report by Ville Tervo \u003cville.tervo@nokia.com\u003e\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n"
    },
    {
      "commit": "052b30b0a8eec8db5b18ad49effdf2a9ba4c1e1a",
      "tree": "a7e772ecb7b13ef1d67e75e62ae00bb68cdf398c",
      "parents": [
        "f3784d834c71689336fa272df420b45345cb6b84"
      ],
      "author": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Sun Apr 26 20:01:22 2009 +0200"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Tue Apr 28 09:31:38 2009 -0700"
      },
      "message": "Bluetooth: Add different pairing timeout for Legacy Pairing\n\nThe Bluetooth stack uses a reference counting for all established ACL\nlinks and if no user (L2CAP connection) is present, the link will be\nterminated to save power. The problem part is the dedicated pairing\nwhen using Legacy Pairing (Bluetooth 2.0 and before). At that point\nno user is present and pairing attempts will be disconnected within\n10 seconds or less. In previous kernel version this was not a problem\nsince the disconnect timeout wasn\u0027t triggered on incoming connections\nfor the first time. However this caused issues with broken host stacks\nthat kept the connections around after dedicated pairing. When the\nsupport for Simple Pairing got added, the link establishment procedure\nneeded to be changed and now causes issues when using Legacy Pairing\n\nWhen using Simple Pairing it is possible to do a proper reference\ncounting of ACL link users. With Legacy Pairing this is not possible\nsince the specification is unclear in some areas and too many broken\nBluetooth devices have already been deployed. So instead of trying to\ndeal with all the broken devices, a special pairing timeout will be\nintroduced that increases the timeout to 60 seconds when pairing is\ntriggered.\n\nIf a broken devices now puts the stack into an unforeseen state, the\nworst that happens is the disconnect timeout triggers after 120 seconds\ninstead of 4 seconds. This allows successful pairings with legacy and\nbroken devices now.\n\nBased on a report by Johan Hedberg \u003cjohan.hedberg@nokia.com\u003e\n\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n"
    },
    {
      "commit": "f3784d834c71689336fa272df420b45345cb6b84",
      "tree": "bfed4c21b3b3360bab0eb8123595e911adfbfdcf",
      "parents": [
        "bf368e4e70cd4e0f880923c44e95a4273d725ab4"
      ],
      "author": {
        "name": "Roger Quadros",
        "email": "ext-roger.quadros@nokia.com",
        "time": "Thu Apr 23 14:50:54 2009 +0300"
      },
      "committer": {
        "name": "Marcel Holtmann",
        "email": "marcel@holtmann.org",
        "time": "Tue Apr 28 09:31:38 2009 -0700"
      },
      "message": "Bluetooth: Ensure that HCI sysfs add/del is preempt safe\n\nUse a different work_struct variables for add_conn() and del_conn() and\nuse single work queue instead of two for adding and deleting connections.\n\nIt eliminates the following error on a preemptible kernel:\n\n[  204.358032] Unable to handle kernel NULL pointer dereference at virtual address 0000000c\n[  204.370697] pgd \u003d c0004000\n[  204.373443] [0000000c] *pgd\u003d00000000\n[  204.378601] Internal error: Oops: 17 [#1] PREEMPT\n[  204.383361] Modules linked in: vfat fat rfcomm sco l2cap sd_mod scsi_mod iphb pvr2d drm omaplfb ps\n[  204.438537] CPU: 0    Not tainted  (2.6.28-maemo2 #1)\n[  204.443664] PC is at klist_put+0x2c/0xb4\n[  204.447601] LR is at klist_put+0x18/0xb4\n[  204.451568] pc : [\u003cc0270f08\u003e]    lr : [\u003cc0270ef4\u003e]    psr: a0000113\n[  204.451568] sp : cf1b3f10  ip : cf1b3f10  fp : cf1b3f2c\n[  204.463104] r10: 00000000  r9 : 00000000  r8 : bf08029c\n[  204.468353] r7 : c7869200  r6 : cfbe2690  r5 : c78692c8  r4 : 00000001\n[  204.474945] r3 : 00000001  r2 : cf1b2000  r1 : 00000001  r0 : 00000000\n[  204.481506] Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM Segment kernel\n[  204.488861] Control: 10c5387d  Table: 887fc018  DAC: 00000017\n[  204.494628] Process btdelconn (pid: 515, stack limit \u003d 0xcf1b22e0)\n\nSigned-off-by: Roger Quadros \u003cext-roger.quadros@nokia.com\u003e\nSigned-off-by: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\n"
    },
    {
      "commit": "bf368e4e70cd4e0f880923c44e95a4273d725ab4",
      "tree": "43c8cd772aa17ca1dd852682ca489ccc7ab3fcd6",
      "parents": [
        "37b607c5ac3b7c92a6a3624bb29f1cdcdcf7044a"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "dada1@cosmosbay.com",
        "time": "Tue Apr 28 02:24:21 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Apr 28 02:24:21 2009 -0700"
      },
      "message": "net: Avoid extra wakeups of threads blocked in wait_for_packet()\n\nIn 2.6.25 we added UDP mem accounting.\n\nThis unfortunatly added a penalty when a frame is transmitted, since\nwe have at TX completion time to call sock_wfree() to perform necessary\nmemory accounting. This calls sock_def_write_space() and utimately\nscheduler if any thread is waiting on the socket.\nThread(s) waiting for an incoming frame was scheduled, then had to sleep\nagain as event was meaningless.\n\n(All threads waiting on a socket are using same sk_sleep anchor)\n\nThis adds lot of extra wakeups and increases latencies, as noted\nby Christoph Lameter, and slows down softirq handler.\n\nReference : http://marc.info/?l\u003dlinux-netdev\u0026m\u003d124060437012283\u0026w\u003d2 \n\nFortunatly, Davide Libenzi recently added concept of keyed wakeups\ninto kernel, and particularly for sockets (see commit\n37e5540b3c9d838eb20f2ca8ea2eb8072271e403 \nepoll keyed wakeups: make sockets use keyed wakeups)\n\nDavide goal was to optimize epoll, but this new wakeup infrastructure\ncan help non epoll users as well, if they care to setup an appropriate\nhandler.\n\nThis patch introduces new DEFINE_WAIT_FUNC() helper and uses it\nin wait_for_packet(), so that only relevant event can wakeup a thread\nblocked in this function.\n\nTrace of function calls from bnx2 TX completion bnx2_poll_work() is :\n__kfree_skb()\n skb_release_head_state()\n  sock_wfree()\n   sock_def_write_space()\n    __wake_up_sync_key()\n     __wake_up_common()\n      receiver_wake_function() : Stops here since thread is waiting for an INPUT\n\n\nReported-by: Christoph Lameter \u003ccl@linux.com\u003e\nSigned-off-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c9503e0fe052020e0294cd07d0ecd982eb7c9177",
      "tree": "aa0425fc1f30ebdf8d7455cf59db5c3ea2c7dfd0",
      "parents": [
        "2296e5a0136f7ba64c99f3a48a55a687aa9abcc8"
      ],
      "author": {
        "name": "Anton Blanchard",
        "email": "anton@samba.org",
        "time": "Mon Apr 27 05:42:24 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 27 05:42:24 2009 -0700"
      },
      "message": "ipv4: Limit size of route cache hash table\n\nRight now we have no upper limit on the size of the route cache hash table.\nOn a 128GB POWER6 box it ends up as 32MB:\n\n    IP route cache hash table entries: 4194304 (order: 9, 33554432 bytes)\n\nIt would be nice to cap this for memory consumption reasons, but a massive\nhashtable also causes a significant spike when measuring OS jitter.\n\nWith a 32MB hashtable and 4 million entries, rt_worker_func is taking\n5 ms to complete. On another system with more memory it\u0027s taking 14 ms.\nEven though rt_worker_func does call cond_sched() to limit its impact,\nin an HPC environment we want to keep all sources of OS jitter to a minimum.\n\nWith the patch applied we limit the number of entries to 512k which\ncan still be overriden by using the rt_entries boot option:\n\n    IP route cache hash table entries: 524288 (order: 6, 4194304 bytes)\n\nWith this patch rt_worker_func now takes 0.460 ms on the same system.\n\nSigned-off-by: Anton Blanchard \u003canton@samba.org\u003e\nAcked-by: Eric Dumazet \u003cdada1@cosmosbay.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6a783c9067e3f71aac61a9262fe42c1f68efd4fc",
      "tree": "a1bc0c5f7625dfc71e777dba2ebb546df820be02",
      "parents": [
        "8f955d7f042e4ac44891a400d5000928f8db9f58"
      ],
      "author": {
        "name": "Nicolas Dichtel",
        "email": "nicolas.dichtel@6wind.com",
        "time": "Mon Apr 27 02:58:59 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 27 02:58:59 2009 -0700"
      },
      "message": "xfrm: wrong hash value for temporary SA\n\nWhen kernel inserts a temporary SA for IKE, it uses the wrong hash\nvalue for dst list. Two hash values were calcultated before: one with\nsource address and one with a wildcard source address.\n\nBug hinted by Junwei Zhang \u003cjunwei.zhang@6wind.com\u003e\nSigned-off-by: Nicolas Dichtel \u003cnicolas.dichtel@6wind.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "adc667e84f086aa110d810f3476c494e48eaabaa",
      "tree": "4a1267f1d2aa44893e2dc6c779ae686a01db409d",
      "parents": [
        "1c41e238e0beaac530c5c9d629e8dfbbadc4a099"
      ],
      "author": {
        "name": "Jay Vosburgh",
        "email": "fubar@us.ibm.com",
        "time": "Sat Apr 25 18:03:35 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 25 18:03:35 2009 -0700"
      },
      "message": "vlan: update vlan carrier state for admin up/down\n\n\tCurrently, the VLAN event handler does not adjust the VLAN\ndevice\u0027s carrier state when the real device or the VLAN device is set\nadministratively up or down.\n\n\tThe following patch adds a transfer of operating state from the\nreal device to the VLAN device when the real device is administratively\nset up or down, and sets the carrier state up or down during init, open\nand close of the VLAN device.\n\n\tThis permits observers above the VLAN device that care about the\ncarrier state (bonding\u0027s link monitor, for example) to receive updates\nfor administrative changes by more closely mimicing the behavior of real\ndevices.\n\nSigned-off-by: Jay Vosburgh \u003cfubar@us.ibm.com\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "1c41e238e0beaac530c5c9d629e8dfbbadc4a099",
      "tree": "4cfada93058fe1b8902ca8cda090fa71cd332133",
      "parents": [
        "29fe1b481283a1bada994a69f65736db4ae6f35f",
        "37e55cf0ceb8803256bf69a3e45bd668bf90b76f"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 25 17:46:34 2009 -0700"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sat Apr 25 17:46:34 2009 -0700"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kaber/nf-2.6\n"
    },
    {
      "commit": "d0687be7c7ae21461da4438d5fd059b48487bfe1",
      "tree": "06036d8b604f6470a52a121aecd41f6e4a4cec23",
      "parents": [
        "091069740304c979f957ceacec39c461d0192158"
      ],
      "author": {
        "name": "Steve Wise",
        "email": "swise@opengridcomputing.com",
        "time": "Fri Apr 03 15:18:24 2009 -0500"
      },
      "committer": {
        "name": "J. Bruce Fields",
        "email": "bfields@citi.umich.edu",
        "time": "Sat Apr 25 18:11:14 2009 -0400"
      },
      "message": "svcrdma: Fix dma map direction for rdma read targets\n\nThe nfs server rdma transport was mapping rdma read target pages for\nTO_DEVICE instead of FROM_DEVICE.  This causes data corruption on non\ncache-coherent systems if frmrs are used.\n\nSigned-off-by: Steve Wise \u003cswise@opengridcomputing.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@citi.umich.edu\u003e\n"
    },
    {
      "commit": "37e55cf0ceb8803256bf69a3e45bd668bf90b76f",
      "tree": "9e6315efab07d0c70be0a4e7a5d27f6a554ea238",
      "parents": [
        "71951b64a5a87c09eb6fde59ce51aaab2fdaeab2"
      ],
      "author": {
        "name": "Jan Engelhardt",
        "email": "jengelh@medozas.de",
        "time": "Fri Apr 24 17:05:21 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Fri Apr 24 17:05:21 2009 +0200"
      },
      "message": "netfilter: xt_recent: fix stack overread in compat code\n\nRelated-to: commit 325fb5b4d26038cba665dd0d8ee09555321061f0\n\nThe compat path suffers from a similar problem. It only uses a __be32\nwhen all of the recent code uses, and expects, an nf_inet_addr\neverywhere. As a result, addresses stored by xt_recents were\nfilled with whatever other stuff was on the stack following the be32.\n\nSigned-off-by: Jan Engelhardt \u003cjengelh@medozas.de\u003e\n\nWith a minor compile fix from Roman.\n\nReported-and-tested-by: Roman Hoog Antink \u003crha@open.ch\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    },
    {
      "commit": "71951b64a5a87c09eb6fde59ce51aaab2fdaeab2",
      "tree": "1359fc0af814b525bdeec70d3413b39dd84d2bed",
      "parents": [
        "4b0706624930dc75c3b0d0df463d89759ef7de29"
      ],
      "author": {
        "name": "Pablo Neira Ayuso",
        "email": "pablo@netfilter.org",
        "time": "Fri Apr 24 16:58:41 2009 +0200"
      },
      "committer": {
        "name": "Patrick McHardy",
        "email": "kaber@trash.net",
        "time": "Fri Apr 24 16:58:41 2009 +0200"
      },
      "message": "netfilter: nf_ct_dccp: add missing role attributes for DCCP\n\nThis patch adds missing role attribute to the DCCP type, otherwise\nthe creation of entries is not of any use.\n\nThe attribute added is CTA_PROTOINFO_DCCP_ROLE which contains the\nrole of the conntrack original tuple.\n\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\nSigned-off-by: Patrick McHardy \u003ckaber@trash.net\u003e\n"
    }
  ],
  "next": "4b0706624930dc75c3b0d0df463d89759ef7de29"
}
