)]}' { "log": [ { "commit": "7b1b3fd74e3a8a63858fc5382af90d2a19f4afb8", "tree": "c65082c666b1a790de559b5854b6e36795ba894e", "parents": [ "112ccff716ae74ffa5f30266b29c4d72aab4074b", "5a3da1fe9561828d0ca7eca664b16ec2b9bf0055" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 19 13:20:51 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 19 13:20:51 2013 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) Fix ARM BPF JIT handling of negative \u0027k\u0027 values, from Chen Gang.\n\n 2) Insufficient space reserved for bridge netlink values, fix from\n Stephen Hemminger.\n\n 3) Some dst_neigh_lookup*() callers don\u0027t interpret error pointer\n correctly, fix from Zhouyi Zhou.\n\n 4) Fix transport match in SCTP active_path loops, from Xugeng Zhang.\n\n 5) Fix qeth driver handling of multi-order SKB frags, from Frank\n Blaschka.\n\n 6) fec driver is missing napi_disable() call, resulting in crashes on\n unload, from Georg Hofmann.\n\n 7) Don\u0027t try to handle PMTU events on a listening socket, fix from Eric\n Dumazet.\n\n 8) Fix timestamp location calculations in IP option processing, from\n David Ward.\n\n 9) FIB_TABLE_HASHSZ setting is not controlled by the correct kconfig\n tests, from Denis V Lunev.\n\n10) Fix TX descriptor push handling in SFC driver, from Ben Hutchings.\n\n11) Fix isdn/hisax and tulip/de4x5 kconfig dependencies, from Arnd\n Bergmann.\n\n12) bnx2x statistics don\u0027t handle 4GB rollover correctly, fix from\n Maciej Żenczykowski.\n\n13) Openvswitch bug fixes for vport del/new error reporting, missing\n genlmsg_end() call in netlink processing, and mis-parsing of\n LLC/SNAP ethernet types. From Rich Lane.\n\n14) SKB pfmemalloc state should only be propagated from the head page of\n a compound page, fix from Pavel Emelyanov.\n\n15) Fix link handling in tg3 driver for 5715 chips when autonegotation\n is disabled. From Nithin Sujir.\n\n16) Fix inverted test of cpdma_check_free_tx_desc return value in\n davinci_emac driver, from Mugunthan V N.\n\n17) vlan_depth is incorrectly calculated in skb_network_protocol(), from\n Li RongQing.\n\n18) Fix probing of Gobi 1K devices in qmi_wwan driver, and fix NCM\n device mode backwards compat in cdc_ncm driver. From Bjørn Mork.\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (52 commits)\n inet: limit length of fragment queue hash table bucket lists\n qeth: Fix scatter-gather regression\n qeth: Fix invalid router settings handling\n qeth: delay feature trace\n tcp: dont handle MTU reduction on LISTEN socket\n bnx2x: fix occasional statistics off-by-4GB error\n vhost/net: fix heads usage of ubuf_info\n bridge: Add support for setting BR_ROOT_BLOCK flag.\n bnx2x: add missing napi deletion in error path\n drivers: net: ethernet: ti: davinci_emac: fix usage of cpdma_check_free_tx_desc()\n ethernet/tulip: DE4x5 needs VIRT_TO_BUS\n isdn: hisax: netjet requires VIRT_TO_BUS\n net: cdc_ncm, cdc_mbim: allow user to prefer NCM for backwards compatibility\n rtnetlink: Mask the rta_type when range checking\n Revert \"ip_gre: make ipgre_tunnel_xmit() not parse network header as IP unconditionally\"\n Fix dst_neigh_lookup/dst_neigh_lookup_skb return value handling bug\n smsc75xx: configuration help incorrectly mentions smsc95xx\n net: fec: fix missing napi_disable call\n net: fec: restart the FEC when PHY speed changes\n skb: Propagate pfmemalloc on skb from head page only\n ...\n" }, { "commit": "5a3da1fe9561828d0ca7eca664b16ec2b9bf0055", "tree": "b7bbaabf1271af7d912e9bdbb7f5810d2d0a5d3e", "parents": [ "271648b4c610eed540daaf9ff366209825757565" ], "author": { "name": "Hannes Frederic Sowa", "email": "hannes@stressinduktion.org", "time": "Fri Mar 15 11:32:30 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 19 10:28:36 2013 -0400" }, "message": "inet: limit length of fragment queue hash table bucket lists\n\nThis patch introduces a constant limit of the fragment queue hash\ntable bucket list lengths. Currently the limit 128 is choosen somewhat\narbitrary and just ensures that we can fill up the fragment cache with\nempty packets up to the default ip_frag_high_thresh limits. It should\njust protect from list iteration eating considerable amounts of cpu.\n\nIf we reach the maximum length in one hash bucket a warning is printed.\nThis is implemented on the caller side of inet_frag_find to distinguish\nbetween the different users of inet_fragment.c.\n\nI dropped the out of memory warning in the ipv4 fragment lookup path,\nbecause we already get a warning by the slab allocator.\n\nCc: Eric Dumazet \u003ceric.dumazet@gmail.com\u003e\nCc: Jesper Dangaard Brouer \u003cjbrouer@redhat.com\u003e\nSigned-off-by: Hannes Frederic Sowa \u003channes@stressinduktion.org\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0d4f0608619de59fd8169dd8e72aadc28d80e715", "tree": "22a078ce17e33c82c1809594ce1b761c9e30a3d3", "parents": [ "b009aac12cd0fe34293c68af8ac48b85be3bd858" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Mon Mar 18 07:01:28 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 18 13:31:28 2013 -0400" }, "message": "tcp: dont handle MTU reduction on LISTEN socket\n\nWhen an ICMP ICMP_FRAG_NEEDED (or ICMPV6_PKT_TOOBIG) message finds a\nLISTEN socket, and this socket is currently owned by the user, we\nset TCP_MTU_REDUCED_DEFERRED flag in listener tsq_flags.\n\nThis is bad because if we clone the parent before it had a chance to\nclear the flag, the child inherits the tsq_flags value, and next\ntcp_release_cb() on the child will decrement sk_refcnt.\n\nResult is that we might free a live TCP socket, as reported by\nDormando.\n\nIPv4: Attempt to release TCP socket in state 1\n\nFix this issue by testing sk_state against TCP_LISTEN early, so that we\nset TCP_MTU_REDUCED_DEFERRED on appropriate sockets (not a LISTEN one)\n\nThis bug was introduced in commit 563d34d05786\n(tcp: dont drop MTU reduction indications)\n\nReported-by: dormando \u003cdormando@rydia.net\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3d84fa98aca7f05f7010022bc45acb1b50326332", "tree": "a30d0863f76e2ca259011bf1eccfc84f3e835ef8", "parents": [ "722c6f585088a2c392b4c5d01b87a584bb8fb73f" ], "author": { "name": "Vlad Yasevich", "email": "vyasevic@redhat.com", "time": "Fri Mar 15 06:39:12 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 17 12:41:29 2013 -0400" }, "message": "bridge: Add support for setting BR_ROOT_BLOCK flag.\n\nMost of the support was already there. The only thing that was missing\nwas the call to set the flag. Add this call.\n\nSigned-off-by: Vlad Yasevich \u003cvyasevic@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c62dce61261c9bb90f74a493f55b35ae2480c8ae", "tree": "fe4a13fb12cafeed6145bf260384e9b758f1debe", "parents": [ "75b9b61bb8a18e75afe7b10dd55681e748fa27df", "f3a3440063d6b01470507ecde9cf8ed0b033362a" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 17 12:26:18 2013 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 17 12:26:18 2013 -0400" }, "message": "Merge branch \u0027for-davem\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless\n\nJohn W. Linville says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nOn the NFC bits, Samuel says:\n\n\"With this one we have:\n\n- A fix for properly decreasing socket ack log.\n- A timer and works cleanup upon NFC device removal.\n- A monitoroing socket cleanup round from llcp_socket_release.\n- A proper error report to pending sockets upon NFC device removal.\"\n\nRegarding the Bluetooth bits, Gustavo says:\n\n\"I have these two patches for 3.9, these add support for two more devices to\nthe bluetooth drivers.\"\n\nAlong with those, we have a few wireless driver fixes...\n\nBing Zhao provides an mwifiex to prevent an out-of-bounds memory\naccess.\n\nJohn Crispin offers a Kconfig fix to enable some otherwise dead code\nin rt2x00. The correct symbols were added in -rc1 through a different\ntree, but the symbols for enabling the wireless driver didn\u0027t match.\n\nLarry Finger brings an rtlwifi fix for a scheduling while atomic bug,\nand another fix for a reassociation problem caused by failing to\nclear the BSSID after a disconnect.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a5b8db91442fce9c9713fcd656c3698f1adde1d6", "tree": "e3e6a4d6315a36ca81a5a431f087579baac6510f", "parents": [ "8c6216d7f118a128678270824b6a1286a63863ca" ], "author": { "name": "Vlad Yasevich", "email": "vyasevic@redhat.com", "time": "Wed Mar 13 04:18:58 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 17 11:43:40 2013 -0400" }, "message": "rtnetlink: Mask the rta_type when range checking\n\nRange/validity checks on rta_type in rtnetlink_rcv_msg() do\nnot account for flags that may be set. This causes the function\nto return -EINVAL when flags are set on the type (for example\nNLA_F_NESTED).\n\nSigned-off-by: Vlad Yasevich \u003cvyasevic@redhat.com\u003e\nAcked-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8c6216d7f118a128678270824b6a1286a63863ca", "tree": "e158488e36eb37a7731ce9d19ff3e61b4c4ae064", "parents": [ "aaa0c23cb90141309f5076ba5e3bfbd39544b985" ], "author": { "name": "Timo Teräs", "email": "timo.teras@iki.fi", "time": "Wed Mar 13 02:37:49 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sat Mar 16 23:00:41 2013 -0400" }, "message": "Revert \"ip_gre: make ipgre_tunnel_xmit() not parse network header as IP unconditionally\"\n\nThis reverts commit 412ed94744d16806fbec3bd250fd94e71cde5a1f.\n\nThe commit is wrong as tiph points to the outer IPv4 header which is\ninstalled at ipgre_header() and not the inner one which is protocol dependant.\n\nThis commit broke succesfully opennhrp which use PF_PACKET socket with\nETH_P_NHRP protocol. Additionally ssl_addr is set to the link-layer\nIPv4 address. This address is written by ipgre_header() to the skb\nearlier, and this is the IPv4 header tiph should point to - regardless\nof the inner protocol payload.\n\nSigned-off-by: Timo Teräs \u003ctimo.teras@iki.fi\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f3a3440063d6b01470507ecde9cf8ed0b033362a", "tree": "11376f47f8db09adec4f80056137b07a811f0407", "parents": [ "aaa0c23cb90141309f5076ba5e3bfbd39544b985", "9437a248e7cac427c898bdb11bd1ac6844a1ead4" ], "author": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Mar 15 10:44:36 2013 -0400" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Mar 15 10:44:36 2013 -0400" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem\n" }, { "commit": "296b60109e0a2dfae4d22b393744634ca6322822", "tree": "88bd4277e8fc4d9b9fa35c6414c9a7e05ccb45a2", "parents": [ "3f104c38259dcb3e5443c246f0805bc04d887cc3", "d176ca2a48ff2b5d7becfacdcbd1d72c73bd22d1" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 15 09:00:39 2013 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 15 09:00:39 2013 -0400" }, "message": "Merge branch \u0027fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch\n\nJesse Gross says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nA few different bug fixes, including several for issues with userspace\ncommunication that have gone unnoticed up until now. These are intended\nfor net/3.9.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "16fad69cfe4adbbfa813de516757b87bcae36d93", "tree": "5b16184db33e16e398fa88ca1dcbb4f054fdaffa", "parents": [ "b701f16dd490d3f346724050f17d60beda094998" ], "author": { "name": "Eric Dumazet", "email": "edumazet@google.com", "time": "Thu Mar 14 05:40:32 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 14 11:49:45 2013 -0400" }, "message": "tcp: fix skb_availroom()\n\nChrome OS team reported a crash on a Pixel ChromeBook in TCP stack :\n\nhttps://code.google.com/p/chromium/issues/detail?id\u003d182056\n\ncommit a21d45726acac (tcp: avoid order-1 allocations on wifi and tx\npath) did a poor choice adding an \u0027avail_size\u0027 field to skb, while\nwhat we really needed was a \u0027reserved_tailroom\u0027 one.\n\nIt would have avoided commit 22b4a4f22da (tcp: fix retransmit of\npartially acked frames) and this commit.\n\nCrash occurs because skb_split() is not aware of the \u0027avail_size\u0027\nmanagement (and should not be aware)\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nReported-by: Mukesh Agrawal \u003cquiche@chromium.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "aea8b5d1e5c5482e7cdda849dc16d728f7080289", "tree": "56433efdf8b93a2ee431430234c3f10c933e28b9", "parents": [ "842d223f28c4a4a6fe34df2d613049d4e47446c1", "fa7614ddd6c2368b8cd54cc67ab4b767af0a2a50" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 13 15:47:50 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Mar 13 15:47:50 2013 -0700" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace\n\nPull namespace bugfixes from Eric Biederman:\n \"This tree includes a partial revert for \"fs: Limit sys_mount to only\n request filesystem modules.\" When I added the new style module aliases\n to the filesystems I deleted the old ones. A bad move. It turns out\n that distributions like Arch linux use module aliases when\n constructing ramdisks. Which meant ultimately that an ext3 filesystem\n mounted with ext4 would not result in the ext4 module being put into\n the ramdisk.\n\n The other change in this tree adds a handful of filesystem module\n alias I simply failed to add the first time. Which inconvinienced a\n few folks using cifs.\n\n I don\u0027t want to inconvinience folks any longer than I have to so here\n are these trivial fixes.\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace:\n fs: Readd the fs module aliases.\n fs: Limit sys_mount to only request filesystem modules. (Part 3)\n" }, { "commit": "2317f449af30073cfa6ec8352e4a65a89e357bdd", "tree": "c49db4463d586cf5ace0139acb293af54fa101e3", "parents": [ "f2815633504b442ca0b0605c16bf3d88a3a0fcea" ], "author": { "name": "Xufeng Zhang", "email": "xufeng.zhang@windriver.com", "time": "Thu Mar 07 21:39:37 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 13 10:09:55 2013 -0400" }, "message": "sctp: don\u0027t break the loop while meeting the active_path so as to find the matched transport\n\nsctp_assoc_lookup_tsn() function searchs which transport a certain TSN\nwas sent on, if not found in the active_path transport, then go search\nall the other transports in the peer\u0027s transport_addr_list, however, we\nshould continue to the next entry rather than break the loop when meet\nthe active_path transport.\n\nSigned-off-by: Xufeng Zhang \u003cxufeng.zhang@windriver.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f2815633504b442ca0b0605c16bf3d88a3a0fcea", "tree": "fe66c3fb3d62c59767f056cd358ba35a833b4736", "parents": [ "7c6cdead7cc9a99650d15497aae47d7472217eb1" ], "author": { "name": "Vlad Yasevich", "email": "vyasevich@gmail.com", "time": "Tue Mar 12 15:53:23 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 13 09:59:21 2013 -0400" }, "message": "sctp: Use correct sideffect command in duplicate cookie handling\n\nWhen SCTP is done processing a duplicate cookie chunk, it tries\nto delete a newly created association. For that, it has to set\nthe right association for the side-effect processing to work.\nHowever, when it uses the SCTP_CMD_NEW_ASOC command, that performs\nmore work then really needed (like hashing the associationa and\nassigning it an id) and there is no point to do that only to\ndelete the association as a next step. In fact, it also creates\nan impossible condition where an association may be found by\nthe getsockopt() call, and that association is empty. This\ncauses a crash in some sctp getsockopts.\n\nThe solution is rather simple. We simply use SCTP_CMD_SET_ASOC\ncommand that doesn\u0027t have all the overhead and does exactly\nwhat we need.\n\nReported-by: Karl Heiss \u003ckheiss@gmail.com\u003e\nTested-by: Karl Heiss \u003ckheiss@gmail.com\u003e\nCC: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fa7614ddd6c2368b8cd54cc67ab4b767af0a2a50", "tree": "75cea4b4e4d0fcf6a4c0d4914993d85623fc3061", "parents": [ "3e64fe5b21852375f2f53e7244ba697f1fee2fcf" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Tue Mar 12 18:27:41 2013 -0700" }, "committer": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Tue Mar 12 18:55:21 2013 -0700" }, "message": "fs: Readd the fs module aliases.\n\nI had assumed that the only use of module aliases for filesystems\nprior to \"fs: Limit sys_mount to only request filesystem modules.\"\nwas in request_module. It turns out I was wrong. At least mkinitcpio\nin Arch linux uses these aliases.\n\nSo readd the preexising aliases, to keep from breaking userspace.\n\nUserspace eventually will have to follow and use the same aliases the\nkernel does. So at some point we may be delete these aliases without\nproblems. However that day is not today.\n\nSigned-off-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\n" }, { "commit": "368edaadc0f68712848d761c9bcbb12480b61a39", "tree": "a5e82a3cab1e556ab3f1b100c69d54864f402c9f", "parents": [ "5b22b1848b7b5c28af8c7e916bbef08d4292a509", "d6c0dd6b0c196979fa7b34c1d99432fcb1b7e1df" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 12 09:22:42 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 12 09:22:42 2013 -0700" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client\n\nPull Ceph fix from Sage Weil:\n \"This fixes a bug in the new message decoding that just went in during\n the last window.\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:\n libceph: fix decoding of pgids\n" }, { "commit": "5b22b1848b7b5c28af8c7e916bbef08d4292a509", "tree": "01d93ad5e1393fe92978dae6ca51459d2afa43c8", "parents": [ "a930d8790552658140d7d0d2e316af4f0d76a512", "190b1ecf257be308f0053c371fa7afa1ba5f4932" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 12 09:20:58 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 12 09:20:58 2013 -0700" }, "message": "Merge branch \u0027for-3.9\u0027 of git://linux-nfs.org/~bfields/linux\n\nPull nfsd bugfixes from Bruce Fields:\n \"Some minor fallout from the user-namespace work broke most krb5 mounts\n to nfsd, and I screwed up a change to the AF_LOCAL rpc code.\"\n\n* \u0027for-3.9\u0027 of git://linux-nfs.org/~bfields/linux:\n sunrpc: don\u0027t attempt to cancel unitialized work\n nfsd: fix krb5 handling of anonymous principals\n" }, { "commit": "c80a8512ee3a8e1f7c3704140ea55f21dc6bd651", "tree": "5f0f6c5728e8794905031bd2110d70cdc0a4cb10", "parents": [ "45549a68a592dd1daed72aaf4df2295931b93138" ], "author": { "name": "Li RongQing", "email": "roy.qing.li@gmail.com", "time": "Mon Mar 11 20:30:44 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 12 11:47:40 2013 -0400" }, "message": "net/core: move vlan_depth out of while loop in skb_network_protocol()\n\n[ Bug added added in commit 05e8ef4ab2d8087d (net: factor out\n skb_mac_gso_segment() from skb_gso_segment() ) ]\n\nmove vlan_depth out of while loop, or else vlan_depth always is ETH_HLEN,\ncan not be increased, and lead to infinite loop when frame has two vlan headers.\n\nSigned-off-by: Li RongQing \u003croy.qing.li@gmail.com\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3da889b616164bde76a37350cf28e0d17a94e979", "tree": "50641ef3e2c77dc3025429893aaea68281fae99e", "parents": [ "2230e0c1934af5779e6feda663b1b756cef7d3c2" ], "author": { "name": "stephen hemminger", "email": "stephen@networkplumber.org", "time": "Mon Mar 11 13:52:17 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 12 05:38:29 2013 -0400" }, "message": "bridge: reserve space for IFLA_BRPORT_FAST_LEAVE\n\nThe bridge multicast fast leave feature was added sufficient space\nwas not reserved in the netlink message. This means the flag may be\nlost in netlink events and results of queries.\n\nFound by observation while looking up some netlink stuff for discussion with Vlad.\nProblem introduced by commit c2d3babfafbb9f6629cfb47139758e59a5eb0d80\nAuthor: David S. Miller \u003cdavem@davemloft.net\u003e\nDate: Wed Dec 5 16:24:45 2012 -0500\n\n bridge: implement multicast fast leave\n\nSigned-off-by: Stephen Hemminger \u003cstephen@networkplumber.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2230e0c1934af5779e6feda663b1b756cef7d3c2", "tree": "2f2aa510f4e9bed31bfbe37843982210c7511d69", "parents": [ "4660c7f498c07c43173142ea95145e9dac5a6d14", "b47506d91259c29b9c75c404737eb6525556f9b4" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 12 05:36:52 2013 -0400" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 12 05:36:52 2013 -0400" }, "message": "Merge tag \u0027batman-adv-fix-for-davem\u0027 of git://git.open-mesh.org/linux-merge\n\nIncluded changes ares:\n- fix packet parsing routine to avoid to read beyond the packet boundary\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "4660c7f498c07c43173142ea95145e9dac5a6d14", "tree": "b995abcd1c104744fc87346a7cb47542ee95a2ea", "parents": [ "47ce9c4821fa41ef72c1004e1a362d08334cd717" ], "author": { "name": "David Ward", "email": "david.ward@ll.mit.edu", "time": "Mon Mar 11 10:43:39 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Tue Mar 12 05:35:39 2013 -0400" }, "message": "net/ipv4: Ensure that location of timestamp option is stored\n\nThis is needed in order to detect if the timestamp option appears\nmore than once in a packet, to remove the option if the packet is\nfragmented, etc. My previous change neglected to store the option\nlocation when the router addresses were prespecified and Pointer \u003e\nLength. But now the option location is also stored when Flag is an\nunrecognized value, to ensure these option handling behaviors are\nstill performed.\n\nSigned-off-by: David Ward \u003cdavid.ward@ll.mit.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "b47506d91259c29b9c75c404737eb6525556f9b4", "tree": "c23e5fb025c23fc7a19a0c5fdf4fdcd411596a9f", "parents": [ "7c6baa304b841673d3a55ea4fcf9a5cbf7a1674b" ], "author": { "name": "Marek Lindner", "email": "lindner_marek@yahoo.de", "time": "Mon Mar 04 10:39:49 2013 +0800" }, "committer": { "name": "Antonio Quartulli", "email": "ordex@autistici.org", "time": "Mon Mar 11 22:59:47 2013 +0100" }, "message": "batman-adv: verify tt len does not exceed packet len\n\nbatadv_iv_ogm_process() accesses the packet using the tt_num_changes\nattribute regardless of the real packet len (assuming the length check\nwas done before). Therefore a length check is needed to avoid reading\nrandom memory.\n\nSigned-off-by: Marek Lindner \u003clindner_marek@yahoo.de\u003e\nSigned-off-by: Antonio Quartulli \u003cordex@autistici.org\u003e\n" }, { "commit": "d6c0dd6b0c196979fa7b34c1d99432fcb1b7e1df", "tree": "f9bdfa272649c1890bf65cf2fc36e97562149950", "parents": [ "83ca14fdd35821554058e5fd4fa7b118ee504a33" ], "author": { "name": "Sage Weil", "email": "sage@inktank.com", "time": "Wed Mar 06 14:57:03 2013 -0800" }, "committer": { "name": "Sage Weil", "email": "sage@inktank.com", "time": "Mon Mar 11 14:31:00 2013 -0700" }, "message": "libceph: fix decoding of pgids\n\nIn 4f6a7e5ee1393ec4b243b39dac9f36992d161540 we effectively dropped support\nfor the legacy encoding for the OSDMap and incremental. However, we didn\u0027t\nfix the decoding for the pgid.\n\nSigned-off-by: Sage Weil \u003csage@inktank.com\u003e\nReviewed-by: Yehuda Sadeh \u003cyehuda@inktank.com\u003e\n" }, { "commit": "0cb77508252e2d0e00c5ec7e57b4be9b3f7eb24d", "tree": "cb7ed9fbc7f8fdc6e727d60e2627799a7fd7a8cc", "parents": [ "ffb6a445e7cdc03d67f8b9fb2f5afaafd8260b4b", "9026c4927254f5bea695cc3ef2e255280e6a3011" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 11 07:51:59 2013 -0700" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Mon Mar 11 07:51:59 2013 -0700" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) Missing cancel of work items in mac80211 MLME, from Ben Greear.\n\n 2) Fix DMA mapping handling in iwlwifi by using coherent DMA for\n command headers, from Johannes Berg.\n\n 3) Decrease the amount of pressure on the page allocator by using order\n 1 pages less in iwlwifi, from Emmanuel Grumbach.\n\n 4) Fix mesh PS broadcast OOPS in mac80211, from Marco Porsch.\n\n 5) Don\u0027t forget to recalculate idle state in mac80211 monitor\n interface, from Felix Fietkau.\n\n 6) Fix varargs in netfilter conntrack handler, from Joe Perches.\n\n 7) Need to reset entire chip when command queue fills up in iwlwifi,\n from Emmanuel Grumbach.\n\n 8) The TX antenna value must be valid when calibrations are performed\n in iwlwifi, fix from Dor Shaish.\n\n 9) Don\u0027t generate netfilter audit log entries when audit is disabled,\n from Gao Feng.\n\n10) Deal with DMA unit hang on e1000e during power state transitions,\n from Bruce Allan.\n\n11) Remove BUILD_BUG_ON check from igb driver, from Alexander Duyck.\n\n12) Fix lockdep warning on i2c handling of igb driver, from Carolyn\n Wyborny.\n\n13) Fix several TTY handling issues in IRDA ircomm tty driver, from\n Peter Hurley.\n\n14) Several QFQ packet scheduler fixes from Paolo Valente.\n\n15) When VXLAN encapsulates on transmit, we have to reset the netfilter\n state. From Zang MingJie.\n\n16) Fix jiffie check in net_rx_action() so that we really cap the\n processing at 2HZ. From Eric Dumazet.\n\n17) Fix erroneous trigger of IP option space exhaustion, when routers\n are pre-specified and we are looking to see if we can insert a\n timestamp, we will have the space. From David Ward.\n\n18) Fix various issues in benet driver wrt waiting for firmware to\n finish POST after resets or errors. From Gavin Shan and Sathya\n Perla.\n\n19) Fix TX locking in SFC driver, from Ben Hutchings.\n\n20) Like the VXLAN fix above, when we encap in a TUN device we have to\n reset the netfilter state. This should fix several strange crashes\n reported by Dave Jones and others. From Eric Dumazet.\n\n21) Don\u0027t forget to clean up MAC address resources when shutting down a\n port in mlx4 driver, from Yan Burman.\n\n22) Fix divide by zero in vmxnet3 driver, from Bhavesh Davda.\n\n23) Fix device statistic regression in tg3 when the driver is using\n phylib, from Nithin Sujir.\n\n24) Fix info leak in several netlink handlers, from Mathias Krause.\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (79 commits)\n 6lowpan: Fix endianness issue in is_addr_link_local().\n rrunner.c: fix possible memory leak in rr_init_one()\n dcbnl: fix various netlink info leaks\n rtnl: fix info leak on RTM_GETLINK request for VF devices\n bridge: fix mdb info leaks\n tg3: Update link_up flag for phylib devices\n ipv6: stop multicast forwarding to process interface scoped addresses\n bridging: fix rx_handlers return code\n netlabel: fix build problems when CONFIG_IPV6\u003dn\n drivers/isdn: checkng length to be sure not memory overflow\n net/rds: zero last byte for strncpy\n bnx2x: Fix SFP+ misconfiguration in iSCSI boot scenario\n bnx2x: Fix intermittent long KR2 link up time\n macvlan: Set IFF_UNICAST_FLT flag to prevent unnecessary promisc mode.\n team: unsyc the devices addresses when port is removed\n bridge: add missing vid to br_mdb_get()\n Fix: sparse warning in inet_csk_prepare_forced_close\n afkey: fix a typo\n MAINTAINERS: Update qlcnic maintainers list\n netlabel: correctly list all the static label mappings\n ...\n" }, { "commit": "9026c4927254f5bea695cc3ef2e255280e6a3011", "tree": "5551c57fb197eea9ad2fe16430d75d9ef0f31d34", "parents": [ "fef4c86e59a76f2ec1a77d5732f40752700bd5dd" ], "author": { "name": "YOSHIFUJI Hideaki / 吉藤英明", "email": "yoshfuji@linux-ipv6.org", "time": "Sat Mar 09 09:11:57 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 10 16:49:35 2013 -0400" }, "message": "6lowpan: Fix endianness issue in is_addr_link_local().\n\nSigned-off-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "29cd8ae0e1a39e239a3a7b67da1986add1199fc0", "tree": "b3e9cf667e8f13d15bc2fb76d8f44557a6f65202", "parents": [ "84d73cd3fb142bf1298a8c13fd4ca50fd2432372" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sat Mar 09 05:52:21 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 10 05:19:26 2013 -0400" }, "message": "dcbnl: fix various netlink info leaks\n\nThe dcb netlink interface leaks stack memory in various places:\n* perm_addr[] buffer is only filled at max with 12 of the 32 bytes but\n copied completely,\n* no in-kernel driver fills all fields of an IEEE 802.1Qaz subcommand,\n so we\u0027re leaking up to 58 bytes for ieee_ets structs, up to 136 bytes\n for ieee_pfc structs, etc.,\n* the same is true for CEE -- no in-kernel driver fills the whole\n struct,\n\nPrevent all of the above stack info leaks by properly initializing the\nbuffers/structures involved.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "84d73cd3fb142bf1298a8c13fd4ca50fd2432372", "tree": "8575649889787ab0ba141927e4e1d3c1d0c43f68", "parents": [ "c085c49920b2f900ba716b4ca1c1a55ece9872cc" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sat Mar 09 05:52:20 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 10 05:19:26 2013 -0400" }, "message": "rtnl: fix info leak on RTM_GETLINK request for VF devices\n\nInitialize the mac address buffer with 0 as the driver specific function\nwill probably not fill the whole buffer. In fact, all in-kernel drivers\nfill only ETH_ALEN of the MAX_ADDR_LEN bytes, i.e. 6 of the 32 possible\nbytes. Therefore we currently leak 26 bytes of stack memory to userland\nvia the netlink interface.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c085c49920b2f900ba716b4ca1c1a55ece9872cc", "tree": "49fd1e2b997335fbe8a8d49c1f9549043e2fb4d0", "parents": [ "84421b99cedc3443e76d2a594f3c815d5cb9a8e1" ], "author": { "name": "Mathias Krause", "email": "minipli@googlemail.com", "time": "Sat Mar 09 05:52:19 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 10 05:19:25 2013 -0400" }, "message": "bridge: fix mdb info leaks\n\nThe bridging code discloses heap and stack bytes via the RTM_GETMDB\nnetlink interface and via the notify messages send to group RTNLGRP_MDB\nafer a successful add/del.\n\nFix both cases by initializing all unset members/padding bytes with\nmemset(0).\n\nCc: Stephen Hemminger \u003cstephen@networkplumber.org\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "72932611b4b05bbd89fafa369d564ac8e449809b", "tree": "10c55c8fef383cf72059f796b82a36efae058384", "parents": [ "8343bce195da8bb4d5a652ee085474a5cc62983f", "db04dc679bcc780ad6907943afe24a30de974a1b" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 09 16:51:13 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 09 16:51:13 2013 -0800" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace\n\nPull namespace bugfixes from Eric Biederman:\n \"This is three simple fixes against 3.9-rc1. I have tested each of\n these fixes and verified they work correctly.\n\n The userns oops in key_change_session_keyring and the BUG_ON triggered\n by proc_ns_follow_link were found by Dave Jones.\n\n I am including the enhancement for mount to only trigger requests of\n filesystem modules here instead of delaying this for the 3.10 merge\n window because it is both trivial and the kind of change that tends to\n bit-rot if left untouched for two months.\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace:\n proc: Use nd_jump_link in proc_ns_follow_link\n fs: Limit sys_mount to only request filesystem modules (Part 2).\n fs: Limit sys_mount to only request filesystem modules.\n userns: Stop oopsing in key_change_session_keyring\n" }, { "commit": "190b1ecf257be308f0053c371fa7afa1ba5f4932", "tree": "da69e19c64f4f2c2ec2cdaa47f54c9a7b8c942f5", "parents": [ "3c34ae11fac3b30629581d0bfaf80f58e82cfbfb" ], "author": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Fri Mar 08 13:13:08 2013 -0500" }, "committer": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Sat Mar 09 12:43:42 2013 -0500" }, "message": "sunrpc: don\u0027t attempt to cancel unitialized work\n\nAs of dc107402ae06286a9ed33c32daf3f35514a7cb8d \"SUNRPC: make AF_LOCAL connect synchronous\", we no longer initialize connect_worker in the\nAF_LOCAL case, resulting in warnings like:\n\n WARNING: at lib/debugobjects.c:261 debug_print_object+0x8c/0xb0() Hardware name: Bochs\n ODEBUG: assert_init not available (active state 0) object type: timer_list hint: stub_timer+0x0/0x20\n Modules linked in: iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi nfsd auth_rpcgss nfs_acl lockd sunrpc\n Pid: 4816, comm: nfsd Tainted: G W 3.8.0-rc2-00049-gdc10740 #801\n Call Trace:\n [\u003cffffffff8156ec00\u003e] ? free_obj_work+0x60/0xa0\n [\u003cffffffff81046aaf\u003e] warn_slowpath_common+0x7f/0xc0\n [\u003cffffffff81046ba6\u003e] warn_slowpath_fmt+0x46/0x50\n [\u003cffffffff8156eccc\u003e] debug_print_object+0x8c/0xb0\n [\u003cffffffff81055030\u003e] ? timer_debug_hint+0x10/0x10\n [\u003cffffffff8156f7e3\u003e] debug_object_assert_init+0xe3/0x120\n [\u003cffffffff81057ebb\u003e] del_timer+0x2b/0x80\n [\u003cffffffff8109c4e6\u003e] ? mark_held_locks+0x86/0x110\n [\u003cffffffff81065a29\u003e] try_to_grab_pending+0xd9/0x150\n [\u003cffffffff81065b57\u003e] __cancel_work_timer+0x27/0xc0\n [\u003cffffffff81065c03\u003e] cancel_delayed_work_sync+0x13/0x20\n [\u003cffffffffa0007067\u003e] xs_destroy+0x27/0x80 [sunrpc]\n [\u003cffffffffa00040d8\u003e] xprt_destroy+0x78/0xa0 [sunrpc]\n [\u003cffffffffa0006241\u003e] xprt_put+0x21/0x30 [sunrpc]\n [\u003cffffffffa00030cf\u003e] rpc_free_client+0x10f/0x1a0 [sunrpc]\n [\u003cffffffffa0002ff3\u003e] ? rpc_free_client+0x33/0x1a0 [sunrpc]\n [\u003cffffffffa0002f7e\u003e] rpc_release_client+0x6e/0xb0 [sunrpc]\n [\u003cffffffffa000325d\u003e] rpc_shutdown_client+0xfd/0x1b0 [sunrpc]\n [\u003cffffffffa0017196\u003e] rpcb_put_local+0x106/0x130 [sunrpc]\n ...\n\nAcked-by: \"Myklebust, Trond\" \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\n" }, { "commit": "dc893e19b5800d7743fb58235877bfa9091805ff", "tree": "56d2de512a83e9883dace8f4a6be26eddddfa6f7", "parents": [ "2e1c9b2867656ff9a469d23e1dfe90cf77ec0c72" ], "author": { "name": "Arnd Bergmann", "email": "arnd@arndb.de", "time": "Fri Mar 08 12:43:31 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Fri Mar 08 15:05:34 2013 -0800" }, "message": "Revert parts of \"hlist: drop the node parameter from iterators\"\n\nCommit b67bfe0d42ca (\"hlist: drop the node parameter from iterators\")\ndid a lot of nice changes but also contains two small hunks that seem to\nhave slipped in accidentally and have no apparent connection to the\nintent of the patch.\n\nThis reverts the two extraneous changes.\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\nCc: Peter Senna Tschudin \u003cpeter.senna@gmail.com\u003e\nCc: Paul E. McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e\nCc: Sasha Levin \u003csasha.levin@oracle.com\u003e\nCc: Thomas Gleixner \u003ctglx@linutronix.de\u003e\nCc: Rusty Russell \u003crusty@rustcorp.com.au\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "ddf64354af4a702ee0b85d0a285ba74c7278a460", "tree": "b2cf6d7df6fab2af9a512b027e6cf2604236027c", "parents": [ "3bc1b1add7a8484cc4a261c3e128dbe1528ce01f" ], "author": { "name": "Hannes Frederic Sowa", "email": "hannes@stressinduktion.org", "time": "Fri Mar 08 02:07:23 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 08 12:28:20 2013 -0500" }, "message": "ipv6: stop multicast forwarding to process interface scoped addresses\n\nv2:\na) used struct ipv6_addr_props\n\nv3:\na) reverted changes for ipv6_addr_props\n\nv4:\na) do not use __ipv6_addr_needs_scope_id\n\nCc: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: Hannes Frederic Sowa \u003channes@stressinduktion.org\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3bc1b1add7a8484cc4a261c3e128dbe1528ce01f", "tree": "cfe45cd4e2280b0cf84053b5f3838d9076f5b878", "parents": [ "a6a8fe950e1b8596bb06f2c89c3a1a4bf2011ba9" ], "author": { "name": "Cristian Bercaru", "email": "B43982@freescale.com", "time": "Fri Mar 08 07:03:38 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 08 12:19:59 2013 -0500" }, "message": "bridging: fix rx_handlers return code\n\nThe frames for which rx_handlers return RX_HANDLER_CONSUMED are no longer\ncounted as dropped. They are counted as successfully received by\n\u0027netif_receive_skb\u0027.\n\nThis allows network interface drivers to correctly update their RX-OK and\nRX-DRP counters based on the result of \u0027netif_receive_skb\u0027.\n\nSigned-off-by: Cristian Bercaru \u003cB43982@freescale.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3bbc0ceb7ac2bf694d31362eea2c71a680e5deeb", "tree": "c03c9ab518bbab232da3b035a956254e87e44ed1", "parents": [ "e6a3a4bb856a6fba551b43376c80f45836132710" ], "author": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Thu Feb 21 17:01:06 2013 +0100" }, "committer": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Fri Mar 08 17:35:22 2013 +0100" }, "message": "NFC: llcp: Report error to pending sockets when a device is removed\n\nSigned-off-by: Samuel Ortiz \u003csameo@linux.intel.com\u003e\n" }, { "commit": "e6a3a4bb856a6fba551b43376c80f45836132710", "tree": "a2643a0723382e9f8c82d65a3980ad64a27d5f71", "parents": [ "3536da06db0baa675f32de608c0a4c0f5ef0e9ff" ], "author": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Thu Feb 21 16:33:30 2013 +0100" }, "committer": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Fri Mar 08 17:34:57 2013 +0100" }, "message": "NFC: llcp: Clean raw sockets from nfc_llcp_socket_release\n\nSigned-off-by: Samuel Ortiz \u003csameo@linux.intel.com\u003e\n" }, { "commit": "a6a8fe950e1b8596bb06f2c89c3a1a4bf2011ba9", "tree": "df6f1ef8df68b39407b6d6a3b40677e6ca72f358", "parents": [ "f39479363e0361c8bb4397481c01a7c3a1a3c8ac" ], "author": { "name": "Paul Moore", "email": "pmoore@redhat.com", "time": "Fri Mar 08 09:45:39 2013 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 08 11:33:51 2013 -0500" }, "message": "netlabel: fix build problems when CONFIG_IPV6\u003dn\n\nMy last patch to solve a problem where the static/fallback labels were\nnot fully displayed resulted in build problems when IPv6 was disabled.\nThis patch resolves the IPv6 build problems; sorry for the screw-up.\n\nPlease queue for -stable or simply merge with the previous patch.\n\nReported-by: Kbuild Test Robot \u003cfengguang.wu@intel.com\u003e\nSigned-off-by: Paul Moore \u003cpmoore@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3536da06db0baa675f32de608c0a4c0f5ef0e9ff", "tree": "584815bbafbb526300b00671d226744f0e411e2b", "parents": [ "b141e811a0763bb107af4cd99d456193ccdb8053" ], "author": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Thu Feb 21 15:40:04 2013 +0100" }, "committer": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Fri Mar 08 14:25:04 2013 +0100" }, "message": "NFC: llcp: Clean local timers and works when removing a device\n\nWhenever an adapter is removed we must clean all the local structures,\nespecially the timers and scheduled work. Otherwise those asynchronous\nthreads will eventually try to access the freed nfc_dev pointer if an LLCP\nlink is up.\n\nSigned-off-by: Samuel Ortiz \u003csameo@linux.intel.com\u003e\n" }, { "commit": "b141e811a0763bb107af4cd99d456193ccdb8053", "tree": "47ee1d81202a4e125b86f38250f5d71c7c5faacd", "parents": [ "930df2dfc7073c9ed2d0b47a08e47027ae83c545" ], "author": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Thu Feb 21 11:04:45 2013 +0100" }, "committer": { "name": "Samuel Ortiz", "email": "sameo@linux.intel.com", "time": "Fri Mar 08 14:25:04 2013 +0100" }, "message": "NFC: llcp: Decrease socket ack log when accepting a connection\n\nThis is really difficult to test with real NFC devices, but without\nthis fix an LLCP server will eventually refuse new connections.\n\nSigned-off-by: Samuel Ortiz \u003csameo@linux.intel.com\u003e\n" }, { "commit": "2e85d67690cf3ea3f074a6e872f675226883fe7f", "tree": "12412103c1a5bfde782c1692231bd40844267c73", "parents": [ "d9169323308a63fdd967920b9c63a00394ae7c85" ], "author": { "name": "Chen Gang", "email": "gang.chen@asianux.com", "time": "Thu Mar 07 17:19:32 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 08 00:35:44 2013 -0500" }, "message": "net/rds: zero last byte for strncpy\n\nfor NUL terminated string, need be always sure \u0027\\0\u0027 in the end.\n\nadditional info:\n strncpy will pads with zeroes to the end of the given buffer.\n should initialise every bit of memory that is going to be copied to userland\n\nSigned-off-by: Chen Gang \u003cgang.chen@asianux.com\u003e\nSigned-off-by: Ben Hutchings \u003cbhutchings@solarflare.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "fbca58a2242ef2b84049365786d501ee512aefcf", "tree": "1dc4a5867e92c1bb7bd037aac4cf021bc5a0969f", "parents": [ "c10cb5fc0fc9fa605e01f715118bde5ba5a98616" ], "author": { "name": "Cong Wang", "email": "amwang@redhat.com", "time": "Thu Mar 07 03:05:33 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 07 16:32:19 2013 -0500" }, "message": "bridge: add missing vid to br_mdb_get()\n\nObviously, vid should be considered when searching for multicast\ngroup.\n\nCc: Vlad Yasevich \u003cvyasevic@redhat.com\u003e\nCc: Stephen Hemminger \u003cstephen@networkplumber.org\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nSigned-off-by: Cong Wang \u003camwang@redhat.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "c10cb5fc0fc9fa605e01f715118bde5ba5a98616", "tree": "e3e36d63d4e8d015c600d3b1a08d36a084bf729b", "parents": [ "d0d79c3fd77abe39654c2e594149f1f9ef1eeb05" ], "author": { "name": "Christoph Paasch", "email": "christoph.paasch@uclouvain.be", "time": "Thu Mar 07 02:34:33 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 07 16:31:29 2013 -0500" }, "message": "Fix: sparse warning in inet_csk_prepare_forced_close\n\nIn e337e24d66 (inet: Fix kmemleak in tcp_v4/6_syn_recv_sock and\ndccp_v4/6_request_recv_sock) I introduced the function\ninet_csk_prepare_forced_close, which does a call to bh_unlock_sock().\nThis produces a sparse-warning.\n\nThis patch adds the missing __releases.\n\nSigned-off-by: Christoph Paasch \u003cchristoph.paasch@uclouvain.be\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d0d79c3fd77abe39654c2e594149f1f9ef1eeb05", "tree": "b4a7c7c2202b1b34b52b16a6b609dde9b313ca01", "parents": [ "195ca382ca253431cc02c82bca61126c8a7ae155" ], "author": { "name": "Junwei Zhang", "email": "junwei.zhang@6wind.com", "time": "Wed Mar 06 20:48:47 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 07 16:26:45 2013 -0500" }, "message": "afkey: fix a typo\n\nSigned-off-by: Martin Zhang \u003cmartinbj2008@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0c1233aba1e948c37f6dc7620cb7c253fcd71ce9", "tree": "50cb5865bd1ffc0f92a5ee1a75cdce5cf82879b3", "parents": [ "260055bb1f1f8b5328601816c50fd7e0dfda7dff" ], "author": { "name": "Paul Moore", "email": "pmoore@redhat.com", "time": "Wed Mar 06 11:45:24 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 07 16:20:23 2013 -0500" }, "message": "netlabel: correctly list all the static label mappings\n\nWhen we have a large number of static label mappings that spill across\nthe netlink message boundary we fail to properly save our state in the\nnetlink_callback struct which causes us to repeat the same listings.\nThis patch fixes this problem by saving the state correctly between\ncalls to the NetLabel static label netlink \"dumpit\" routines.\n\nSigned-off-by: Paul Moore \u003cpmoore@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "43b18db8a27fcd28c2bd290adf031ca04ea573ce", "tree": "b9159b5319822a962edb018b651e5be69d72f542", "parents": [ "8b4cd8a0535706ab3f47dd52f5650b11152080b3", "9df9e7832391cf699abbf39fc8d95d7e78297462" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 07 15:20:02 2013 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Mar 07 15:20:02 2013 -0500" }, "message": "Merge branch \u0027master\u0027 of git://1984.lsi.us.es/nf\n\nPablo Neira Ayuso says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nThe following patchset contains Netfilter fixes for your net tree,\nthey are:\n\n* Don\u0027t generate audit log message if audit is not enabled, from Gao Feng.\n\n* Fix logging formatting for packets dropped by helpers, by Joe Perches.\n\n* Fix a compilation warning in nfnetlink if CONFIG_PROVE_RCU is not set,\n from Paul Bolle.\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "32cdd592b723fc88ecca699e550197cd48bb4ad6", "tree": "f6e45b4630abb47fa352b53fdc546aec27eb5cda", "parents": [ "66d29cbc59433ba538922a9e958495156b31b83b", "4f21e7e4414c91cc9a3e37b93574aa98db66894d" ], "author": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Mar 06 10:21:17 2013 -0500" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Wed Mar 06 10:21:17 2013 -0500" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem\n" }, { "commit": "3c34ae11fac3b30629581d0bfaf80f58e82cfbfb", "tree": "7561f10ec0905678ab822ddb176b520d037c2edb", "parents": [ "6dbe51c251a327e012439c4772097a13df43c5b8" ], "author": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Mon Mar 04 08:44:01 2013 -0500" }, "committer": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Wed Mar 06 10:11:08 2013 -0500" }, "message": "nfsd: fix krb5 handling of anonymous principals\n\nkrb5 mounts started failing as of\n683428fae8c73d7d7da0fa2e0b6beb4d8df4e808 \"sunrpc: Update svcgss xdr\nhandle to rpsec_contect cache\".\n\nThe problem is that mounts are usually done with some host principal\nwhich isn\u0027t normally mapped to any user, in which case svcgssd passes\ndown uid -1, which the kernel is then expected to map to the\nexport-specific anonymous uid or gid.\n\nThe new uid_valid/gid_valid checks were therefore causing that downcall\nto fail.\n\n(Note the regression may not have been seen with older userspace that\ntended to map unknown principals to an anonymous id on their own rather\nthan leaving it to the kernel.)\n\nReviewed-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\n" }, { "commit": "fa2b04f4502d74659e4e4b1294c6d88e08ece032", "tree": "8bf9cb65b82803d3d799d95d6a125237af8906fa", "parents": [ "d1f41b67ff7735193bc8b418b98ac99a448833e2" ], "author": { "name": "David Ward", "email": "david.ward@ll.mit.edu", "time": "Tue Mar 05 17:06:32 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:06 2013 -0500" }, "message": "net/ipv4: Timestamp option cannot overflow with prespecified addresses\n\nWhen a router forwards a packet that contains the IPv4 timestamp option,\nif there is no space left in the option for the router to add its own\ntimestamp, then the router increments the Overflow value in the option.\n\nHowever, if the addresses of the routers are prespecified in the option,\nthen the overflow condition cannot happen: the option is structured so\nthat each prespecified router has a place to write its timestamp. Other\nrouters do not add a timestamp, so there will never be a lack of space.\n\nThis fix ensures that the Overflow value in the IPv4 timestamp option is\nnot incremented when the addresses of the routers are prespecified, even\nif the Pointer value is greater than the Length value.\n\nSigned-off-by: David Ward \u003cdavid.ward@ll.mit.edu\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d1f41b67ff7735193bc8b418b98ac99a448833e2", "tree": "9491bf2f4dbf0617d7b2f6cecc08c54f62bf1c31", "parents": [ "691b3b7e1329141acf1e5ed44d8b468cea065fe3" ], "author": { "name": "Eric Dumazet", "email": "edumazt@google.com", "time": "Tue Mar 05 07:15:13 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:06 2013 -0500" }, "message": "net: reduce net_rx_action() latency to 2 HZ\n\nWe should use time_after_eq() to get maximum latency of two ticks,\ninstead of three.\n\nBug added in commit 24f8b2385 (net: increase receive packet quantum)\n\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "691b3b7e1329141acf1e5ed44d8b468cea065fe3", "tree": "2299ff82994b16243c4b4cf9a92b0e5381fe750f", "parents": [ "88c4c066c6b4db26dc4909ee94e6bf377e8e8e81" ], "author": { "name": "Randy Dunlap", "email": "rdunlap@infradead.org", "time": "Mon Mar 04 12:32:43 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:06 2013 -0500" }, "message": "net: fix new kernel-doc warnings in net core\n\nFix new kernel-doc warnings in net/core/dev.c:\n\nWarning(net/core/dev.c:4788): No description found for parameter \u0027new_carrier\u0027\nWarning(net/core/dev.c:4788): Excess function parameter \u0027new_carries\u0027 description in \u0027dev_change_carrier\u0027\n\nSigned-off-by: Randy Dunlap \u003crdunlap@infradead.org\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "76e4cb0d3a583900f844f1704b19b7e8c5df8837", "tree": "369d82628a81e3d903b80fcc425569abc34322e5", "parents": [ "40dd2d546198e7bbb8d3fe718957b158caa3fe52" ], "author": { "name": "Paolo Valente", "email": "paolo.valente@unimore.it", "time": "Tue Mar 05 08:05:02 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:05 2013 -0500" }, "message": "pkt_sched: sch_qfq: remove a useless invocation of qfq_update_eligible\n\nQFQ+ can select for service only \u0027eligible\u0027 aggregates, i.e.,\naggregates that would have started to be served also in the emulated\nideal system. As a consequence, for QFQ+ to be work conserving, at\nleast one of the active aggregates must be eligible when it is time to\nchoose the next aggregate to serve.\n\nThe set of eligible aggregates is updated through the function\nqfq_update_eligible(), which does guarantee that, after its\ninvocation, at least one of the active aggregates is eligible.\nBecause of this property, this function is invoked in\nqfq_deactivate_agg() to guarantee that at least one of the active\naggregates is still eligible after an aggregate has been deactivated.\nIn particular, the critical case is when there are other active\naggregates, but the aggregate being deactivated happens to be the only\none eligible.\n\nHowever, this precaution is not needed for QFQ+ to be work conserving,\nbecause update_eligible() is always invoked also at the beginning of\nqfq_choose_next_agg(). This patch removes the additional invocation of\nupdate_eligible() in qfq_deactivate_agg().\n\nSigned-off-by: Paolo Valente \u003cpaolo.valente@unimore.it\u003e\nReviewed-by: Fabio Checconi \u003cfchecconi@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "40dd2d546198e7bbb8d3fe718957b158caa3fe52", "tree": "4a4683d08a970fd286309ad1a5ca507bdd7916c9", "parents": [ "a0143efa96671dc51dab9bba776a66f9bfa1757f" ], "author": { "name": "Paolo Valente", "email": "paolo.valente@unimore.it", "time": "Tue Mar 05 08:05:01 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:05 2013 -0500" }, "message": "pkt_sched: sch_qfq: do not allow virtual time to jump if an aggregate is in service\n\nBy definition of (the algorithm of) QFQ+, the system virtual time must\nbe pushed up only if there is no \u0027eligible\u0027 aggregate, i.e. no\naggregate that would have started to be served also in the ideal\nsystem emulated by QFQ+. QFQ+ serves only eligible aggregates, hence\nthe aggregate currently in service is eligible. As a consequence, to\ndecide whether there is no eligible aggregate, QFQ+ must also check\nwhether there is no aggregate in service.\n\nSigned-off-by: Paolo Valente \u003cpaolo.valente@unimore.it\u003e\nReviewed-by: Fabio Checconi \u003cfchecconi@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a0143efa96671dc51dab9bba776a66f9bfa1757f", "tree": "7e690ce2c71fa569c7d18b70ee889695e8877d26", "parents": [ "2f3b89a1fe0823fceb544856c9eeb036a75ff091" ], "author": { "name": "Paolo Valente", "email": "paolo.valente@unimore.it", "time": "Tue Mar 05 08:05:00 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:05 2013 -0500" }, "message": "pkt_sched: sch_qfq: prevent budget from wrapping around after a dequeue\n\nAggregate budgets are computed so as to guarantee that, after an\naggregate has been selected for service, that aggregate has enough\nbudget to serve at least one maximum-size packet for the classes it\ncontains. For this reason, after a new aggregate has been selected\nfor service, its next packet is immediately dequeued, without any\nfurther control.\n\nThe maximum packet size for a class, lmax, can be changed through\nqfq_change_class(). In case the user sets lmax to a lower value than\nthe the size of some of the still-to-arrive packets, QFQ+ will\nautomatically push up lmax as it enqueues these packets. This\nautomatic push up is likely to happen with TSO/GSO.\n\nIn any case, if lmax is assigned a lower value than the size of some\nof the packets already enqueued for the class, then the following\nproblem may occur: the size of the next packet to dequeue for the\nclass may happen to be larger than lmax, after the aggregate to which\nthe class belongs has been just selected for service. In this case,\neven the budget of the aggregate, which is an unsigned value, may be\nlower than the size of the next packet to dequeue. After dequeueing\nthis packet and subtracting its size from the budget, the latter would\nwrap around.\n\nThis fix prevents the budget from wrapping around after any packet\ndequeue.\n\nSigned-off-by: Paolo Valente \u003cpaolo.valente@unimore.it\u003e\nReviewed-by: Fabio Checconi \u003cfchecconi@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2f3b89a1fe0823fceb544856c9eeb036a75ff091", "tree": "7f44914069b1af78b69ac40fbf2be6f4fd18429e", "parents": [ "624b85fb96206879c8146abdba071222bbd25259" ], "author": { "name": "Paolo Valente", "email": "paolo.valente@unimore.it", "time": "Tue Mar 05 08:04:59 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:05 2013 -0500" }, "message": "pkt_sched: sch_qfq: serve activated aggregates immediately if the scheduler is empty\n\nIf no aggregate is in service, then the function qfq_dequeue() does\nnot dequeue any packet. For this reason, to guarantee QFQ+ to be work\nconserving, a just-activated aggregate must be set as in service\nimmediately if it happens to be the only active aggregate.\nThis is done by the function qfq_enqueue().\n\nUnfortunately, the function qfq_add_to_agg(), used to add a class to\nan aggregate, does not perform this important additional operation.\nIn particular, if: 1) qfq_add_to_agg() is invoked to complete the move\nof a class from a source aggregate, becoming, for this move, inactive,\nto a destination aggregate, becoming instead active, and 2) the\ndestination aggregate becomes the only active aggregate, then this\naggregate is not however set as in service. QFQ+ remains then in a\nnon-work-conserving state until a new invocation of qfq_enqueue()\nrecovers the situation.\n\nThis fix solves the problem by moving the logic for setting an\naggregate as in service directly into the function qfq_activate_agg().\nHence, from whatever point qfq_activate_aggregate() is invoked, QFQ+\nremains work conserving. Since the more-complex logic of this new\nversion of activate_aggregate() is not necessary, in qfq_dequeue(), to\nreschedule an aggregate that finishes its budget, then the aggregate\nis now rescheduled by invoking directly the functions needed.\n\nSigned-off-by: Paolo Valente \u003cpaolo.valente@unimore.it\u003e\nReviewed-by: Fabio Checconi \u003cfchecconi@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "624b85fb96206879c8146abdba071222bbd25259", "tree": "e6fbd60c1cea8682333422ae797fd9ff83f83ce6", "parents": [ "9b99b7e90bf5cd9a88823c49574ba80d92a98262" ], "author": { "name": "Paolo Valente", "email": "paolo.valente@unimore.it", "time": "Tue Mar 05 08:04:58 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:05 2013 -0500" }, "message": "pkt_sched: sch_qfq: fix the update of eligible-group sets\n\nBetween two invocations of make_eligible, the system virtual time may\nhappen to grow enough that, in its binary representation, a bit with\nhigher order than 31 flips. This happens especially with\nTSO/GSO. Before this fix, the mask used in make_eligible was computed\nas (1UL\u003c\u003cindex_of_last_flipped_bit)-1, whose value is well defined on\na 64-bit architecture, because index_of_flipped_bit \u003c\u003d 63, but is in\ngeneral undefined on a 32-bit architecture if index_of_flipped_bit \u003e 31.\nThe fix just replaces 1UL with 1ULL.\n\nSigned-off-by: Paolo Valente \u003cpaolo.valente@unimore.it\u003e\nReviewed-by: Fabio Checconi \u003cfchecconi@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9b99b7e90bf5cd9a88823c49574ba80d92a98262", "tree": "8ec812a0bd4a5848722470d5ec21b784c127ee75", "parents": [ "f74861ca87264e594e0134e8ac14db06be77fe6f" ], "author": { "name": "Paolo Valente", "email": "paolo.valente@unimore.it", "time": "Tue Mar 05 08:04:57 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:05 2013 -0500" }, "message": "pkt_sched: sch_qfq: properly cap timestamps in charge_actual_service\n\nQFQ+ schedules the active aggregates in a group using a bucket list\n(one list per group). The bucket in which each aggregate is inserted\ndepends on the aggregate\u0027s timestamps, and the number\nof buckets in a group is enough to accomodate the possible (range of)\nvalues of the timestamps of all the aggregates in the group. For this\nproperty to hold, timestamps must however be computed correctly. One\nnecessary condition for computing timestamps correctly is that the\nnumber of bits dequeued for each aggregate, while the aggregate is in\nservice, does not exceed the maximum budget budgetmax assigned to the\naggregate.\n\nFor each aggregate, budgetmax is proportional to the number of classes\nin the aggregate. If the number of classes of the aggregate is\ndecreased through qfq_change_class(), then budgetmax is decreased\nautomatically as well. Problems may occur if the aggregate is in\nservice when budgetmax is decreased, because the current remaining\nbudget of the aggregate and/or the service already received by the\naggregate may happen to be larger than the new value of budgetmax. In\nthis case, when the aggregate is eventually deselected and its\ntimestamps are updated, the aggregate may happen to have received an\namount of service larger than budgetmax. This may cause the aggregate\nto be assigned a higher virtual finish time than the maximum\nacceptable value for the last bucket in the bucket list of the group.\n\nThis fix introduces a cap that addresses this issue.\n\nSigned-off-by: Paolo Valente \u003cpaolo.valente@unimore.it\u003e\nReviewed-by: Fabio Checconi \u003cfchecconi@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "f74861ca87264e594e0134e8ac14db06be77fe6f", "tree": "1892fd9ca51aa7984f5f6146811b22da4b1610ae", "parents": [ "0b176ce3a7cbfa92eceddf3896f1a504877d974a" ], "author": { "name": "Peter Hurley", "email": "peter@hurleysoftware.com", "time": "Tue Mar 05 06:09:07 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:05 2013 -0500" }, "message": "net/irda: Raise dtr in non-blocking open\n\nDTR/RTS need to be raised, regardless of the open() mode, but not\nif the port has already shutdown.\n\nSigned-off-by: Peter Hurley \u003cpeter@hurleysoftware.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "0b176ce3a7cbfa92eceddf3896f1a504877d974a", "tree": "fe3b0e5154f51ba4a8a87dc6bd4dbd00e47270b6", "parents": [ "2f7c069b96ed7b1f6236f2fa7b0bc06f4f54f2d9" ], "author": { "name": "Peter Hurley", "email": "peter@hurleysoftware.com", "time": "Tue Mar 05 06:09:06 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:04 2013 -0500" }, "message": "net/irda: Use barrier to set task state\n\nWithout a memory and compiler barrier, the task state change\ncan migrate relative to the condition testing in a blocking loop.\nHowever, the task state change must be visible across all cpus\nprior to testing those conditions. Failing to do this can result\nin the familiar \u0027lost wakeup\u0027 and this task will hang until killed.\n\nSigned-off-by: Peter Hurley \u003cpeter@hurleysoftware.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "2f7c069b96ed7b1f6236f2fa7b0bc06f4f54f2d9", "tree": "51aef4f367dfd5676e1eefaaf3f0ba6b8425e5d7", "parents": [ "a4ed2e737cb73e4405a3649f8aef7619b99fecae" ], "author": { "name": "Peter Hurley", "email": "peter@hurleysoftware.com", "time": "Tue Mar 05 06:09:05 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:04 2013 -0500" }, "message": "net/irda: Hold port lock while bumping blocked_open\n\nAlthough tty_lock() already protects concurrent update to\nblocked_open, that fails to meet the separation-of-concerns between\ntty_port and tty.\n\nSigned-off-by: Peter Hurley \u003cpeter@hurleysoftware.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "a4ed2e737cb73e4405a3649f8aef7619b99fecae", "tree": "6cc188dc7dd206790023fb360af4b1a886611855", "parents": [ "0305d0689efd35b4c9f88bb560c104ed118d2277" ], "author": { "name": "Peter Hurley", "email": "peter@hurleysoftware.com", "time": "Tue Mar 05 06:09:04 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Mar 06 02:47:04 2013 -0500" }, "message": "net/irda: Fix port open counts\n\nSaving the port count bump is unsafe. If the tty is hung up while\nthis open was blocking, the port count is zeroed.\n\nExplicitly check if the tty was hung up while blocking, and correct\nthe port count if not.\n\nSigned-off-by: Peter Hurley \u003cpeter@hurleysoftware.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9da060d0ed571bbff434c4a1ef3e48db99a37ee0", "tree": "084194657e0bae0eaec74c0049da97af4352dde0", "parents": [ "e3b59518c10e08eeb06215abf06f50e8f83b51dc", "aab2b4bf224ef8358d262f95b568b8ad0cecf0a0" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 05 18:42:29 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Mar 05 18:42:29 2013 -0800" }, "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n \"A moderately sized pile of fixes, some specifically for merge window\n introduced regressions although others are for longer standing items\n and have been queued up for -stable.\n\n I\u0027m kind of tired of all the RDS protocol bugs over the years, to be\n honest, it\u0027s way out of proportion to the number of people who\n actually use it.\n\n 1) Fix missing range initialization in netfilter IPSET, from Jozsef\n Kadlecsik.\n\n 2) ieee80211_local-\u003etim_lock needs to use BH disabling, from Johannes\n Berg.\n\n 3) Fix DMA syncing in SFC driver, from Ben Hutchings.\n\n 4) Fix regression in BOND device MAC address setting, from Jiri\n Pirko.\n\n 5) Missing usb_free_urb in ISDN Hisax driver, from Marina Makienko.\n\n 6) Fix UDP checksumming in bnx2x driver for 57710 and 57711 chips,\n fix from Dmitry Kravkov.\n\n 7) Missing cfgspace_lock initialization in BCMA driver.\n\n 8) Validate parameter size for SCTP assoc stats getsockopt(), from\n Guenter Roeck.\n\n 9) Fix SCTP association hangs, from Lee A Roberts.\n\n 10) Fix jumbo frame handling in r8169, from Francois Romieu.\n\n 11) Fix phy_device memory leak, from Petr Malat.\n\n 12) Omit trailing FCS from frames received in BGMAC driver, from Hauke\n Mehrtens.\n\n 13) Missing socket refcount release in L2TP, from Guillaume Nault.\n\n 14) sctp_endpoint_init should respect passed in gfp_t, rather than use\n GFP_KERNEL unconditionally. From Dan Carpenter.\n\n 15) Add AISX AX88179 USB driver, from Freddy Xin.\n\n 16) Remove MAINTAINERS entries for drivers deleted during the merge\n window, from Cesar Eduardo Barros.\n\n 17) RDS protocol can try to allocate huge amounts of memory, check\n that the user\u0027s request length makes sense, from Cong Wang.\n\n 18) SCTP should use the provided KMALLOC_MAX_SIZE instead of it\u0027s own,\n bogus, definition. From Cong Wang.\n\n 19) Fix deadlocks in FEC driver by moving TX reclaim into NAPI poll,\n from Frank Li. Also, fix a build error introduced in the merge\n window.\n\n 20) Fix bogus purging of default routes in ipv6, from Lorenzo Colitti.\n\n 21) Don\u0027t double count RTT measurements when we leave the TCP receive\n fast path, from Neal Cardwell.\"\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (61 commits)\n tcp: fix double-counted receiver RTT when leaving receiver fast path\n CAIF: fix sparse warning for caif_usb\n rds: simplify a warning message\n net: fec: fix build error in no MXC platform\n net: ipv6: Don\u0027t purge default router if accept_ra\u003d2\n net: fec: put tx to napi poll function to fix dead lock\n sctp: use KMALLOC_MAX_SIZE instead of its own MAX_KMALLOC_SIZE\n rds: limit the size allocated by rds_message_alloc()\n MAINTAINERS: remove eexpress\n MAINTAINERS: remove drivers/net/wan/cycx*\n MAINTAINERS: remove 3c505\n caif_dev: fix sparse warnings for caif_flow_cb\n ax88179_178a: ASIX AX88179_178A USB 3.0/2.0 to gigabit ethernet adapter driver\n sctp: use the passed in gfp flags instead GFP_KERNEL\n ipv[4|6]: correct dropwatch false positive in local_deliver_finish\n l2tp: Restore socket refcount when sendmsg succeeds\n net/phy: micrel: Disable asymmetric pause for KSZ9021\n bgmac: omit the fcs\n phy: Fix phy_device_free memory leak\n bnx2x: Fix KR2 work-around condition\n ...\n" }, { "commit": "aab2b4bf224ef8358d262f95b568b8ad0cecf0a0", "tree": "e16e5214f01f53975cb214dc98d153c9c96fe7db", "parents": [ "d2123be0e55101742dacd6dae60cdd0f1e2ef302" ], "author": { "name": "Neal Cardwell", "email": "ncardwell@google.com", "time": "Mon Mar 04 06:23:05 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 04 14:12:07 2013 -0500" }, "message": "tcp: fix double-counted receiver RTT when leaving receiver fast path\n\nWe should not update ts_recent and call tcp_rcv_rtt_measure_ts() both\nbefore and after going to step5. That wastes CPU and double-counts the\nreceiver-side RTT sample.\n\nSigned-off-by: Neal Cardwell \u003cncardwell@google.com\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d2123be0e55101742dacd6dae60cdd0f1e2ef302", "tree": "7c1f5403e952fbec15f3865adf47bad91114ee55", "parents": [ "7dac1b514a00817ddb43704068c14ffd8b8fba19" ], "author": { "name": "Silviu-Mihai Popescu", "email": "silviupopescu1990@gmail.com", "time": "Sun Mar 03 21:09:31 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 04 14:12:07 2013 -0500" }, "message": "CAIF: fix sparse warning for caif_usb\n\nThis fixes the following sparse warning:\nnet/caif/caif_usb.c:84:16: warning: symbol \u0027cfusbl_create\u0027 was not\ndeclared. Should it be static?\n\nSigned-off-by: Silviu-Mihai Popescu \u003csilviupopescu1990@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "7dac1b514a00817ddb43704068c14ffd8b8fba19", "tree": "2d526dced6203f4443c4009616f90188c7364594", "parents": [ "acac8406cd523a3afbd6c6db31e9f763644bf6ba" ], "author": { "name": "Cong Wang", "email": "amwang@redhat.com", "time": "Sun Mar 03 20:57:18 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 04 14:12:07 2013 -0500" }, "message": "rds: simplify a warning message\n\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Venkat Venkatsubra \u003cvenkat.x.venkatsubra@oracle.com\u003e\nSigned-off-by: Cong Wang \u003camwang@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3e8b0ac3e41e3c882222a5522d5df7212438ab51", "tree": "62a9dff04de443b60e6936de850c4483e63b372a", "parents": [ "de5fb0a053482d89262c3284b67884cd2c621adc" ], "author": { "name": "Lorenzo Colitti", "email": "lorenzo@google.com", "time": "Sun Mar 03 20:46:46 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 04 14:12:07 2013 -0500" }, "message": "net: ipv6: Don\u0027t purge default router if accept_ra\u003d2\n\nSetting net.ipv6.conf.\u003cinterface\u003e.accept_ra\u003d2 causes the kernel\nto accept RAs even when forwarding is enabled. However, enabling\nforwarding purges all default routes on the system, breaking\nconnectivity until the next RA is received. Fix this by not\npurging default routes on interfaces that have accept_ra\u003d2.\n\nSigned-off-by: Lorenzo Colitti \u003clorenzo@google.com\u003e\nAcked-by: YOSHIFUJI Hideaki \u003cyoshfuji@linux-ipv6.org\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "3f736868b47687d1336fe88185560b22bb92021e", "tree": "6fbd420fb8762de6b951f1ee51ccacce75ea9791", "parents": [ "ece6b0a2b25652d684a7ced4ae680a863af041e0" ], "author": { "name": "Cong Wang", "email": "amwang@redhat.com", "time": "Sun Mar 03 16:28:27 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 04 14:12:06 2013 -0500" }, "message": "sctp: use KMALLOC_MAX_SIZE instead of its own MAX_KMALLOC_SIZE\n\nDon\u0027t definite its own MAX_KMALLOC_SIZE, use the one\ndefined in mm.\n\nCc: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nCc: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nCc: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nSigned-off-by: Cong Wang \u003camwang@redhat.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "ece6b0a2b25652d684a7ced4ae680a863af041e0", "tree": "f4059f182ef11226ba53c3826a1eea722348ce2c", "parents": [ "b711c12113620081708c6ccd43768b5a2501e2ab" ], "author": { "name": "Cong Wang", "email": "amwang@redhat.com", "time": "Sun Mar 03 16:18:11 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Mon Mar 04 14:12:06 2013 -0500" }, "message": "rds: limit the size allocated by rds_message_alloc()\n\nDave Jones reported the following bug:\n\n\"When fed mangled socket data, rds will trust what userspace gives it,\nand tries to allocate enormous amounts of memory larger than what\nkmalloc can satisfy.\"\n\nWARNING: at mm/page_alloc.c:2393 __alloc_pages_nodemask+0xa0d/0xbe0()\nHardware name: GA-MA78GM-S2H\nModules linked in: vmw_vsock_vmci_transport vmw_vmci vsock fuse bnep dlci bridge 8021q garp stp mrp binfmt_misc l2tp_ppp l2tp_core rfcomm s\nPid: 24652, comm: trinity-child2 Not tainted 3.8.0+ #65\nCall Trace:\n [\u003cffffffff81044155\u003e] warn_slowpath_common+0x75/0xa0\n [\u003cffffffff8104419a\u003e] warn_slowpath_null+0x1a/0x20\n [\u003cffffffff811444ad\u003e] __alloc_pages_nodemask+0xa0d/0xbe0\n [\u003cffffffff8100a196\u003e] ? native_sched_clock+0x26/0x90\n [\u003cffffffff810b2128\u003e] ? trace_hardirqs_off_caller+0x28/0xc0\n [\u003cffffffff810b21cd\u003e] ? trace_hardirqs_off+0xd/0x10\n [\u003cffffffff811861f8\u003e] alloc_pages_current+0xb8/0x180\n [\u003cffffffff8113eaaa\u003e] __get_free_pages+0x2a/0x80\n [\u003cffffffff811934fe\u003e] kmalloc_order_trace+0x3e/0x1a0\n [\u003cffffffff81193955\u003e] __kmalloc+0x2f5/0x3a0\n [\u003cffffffff8104df0c\u003e] ? local_bh_enable_ip+0x7c/0xf0\n [\u003cffffffffa0401ab3\u003e] rds_message_alloc+0x23/0xb0 [rds]\n [\u003cffffffffa04043a1\u003e] rds_sendmsg+0x2b1/0x990 [rds]\n [\u003cffffffff810b21cd\u003e] ? trace_hardirqs_off+0xd/0x10\n [\u003cffffffff81564620\u003e] sock_sendmsg+0xb0/0xe0\n [\u003cffffffff810b2052\u003e] ? get_lock_stats+0x22/0x70\n [\u003cffffffff810b24be\u003e] ? put_lock_stats.isra.23+0xe/0x40\n [\u003cffffffff81567f30\u003e] sys_sendto+0x130/0x180\n [\u003cffffffff810b872d\u003e] ? trace_hardirqs_on+0xd/0x10\n [\u003cffffffff816c547b\u003e] ? _raw_spin_unlock_irq+0x3b/0x60\n [\u003cffffffff816cd767\u003e] ? sysret_check+0x1b/0x56\n [\u003cffffffff810b8695\u003e] ? trace_hardirqs_on_caller+0x115/0x1a0\n [\u003cffffffff81341d8e\u003e] ? trace_hardirqs_on_thunk+0x3a/0x3f\n [\u003cffffffff816cd742\u003e] system_call_fastpath+0x16/0x1b\n---[ end trace eed6ae990d018c8b ]---\n\nReported-by: Dave Jones \u003cdavej@redhat.com\u003e\nCc: Dave Jones \u003cdavej@redhat.com\u003e\nCc: David S. Miller \u003cdavem@davemloft.net\u003e\nCc: Venkat Venkatsubra \u003cvenkat.x.venkatsubra@oracle.com\u003e\nSigned-off-by: Cong Wang \u003camwang@redhat.com\u003e\nAcked-by: Venkat Venkatsubra \u003cvenkat.x.venkatsubra@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9df9e7832391cf699abbf39fc8d95d7e78297462", "tree": "110f1cd48ae34fb8c236f15ac58e153a5d05153a", "parents": [ "ed018fa4dfc3d26da56b9ee7dc75e9d39a39a02b" ], "author": { "name": "Paul Bolle", "email": "pebolle@tiscali.nl", "time": "Mon Mar 04 02:45:41 2013 +0000" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Mon Mar 04 14:45:36 2013 +0100" }, "message": "netfilter: nfnetlink: silence warning if CONFIG_PROVE_RCU isn\u0027t set\n\nSince commit c14b78e7decd0d1d5add6a4604feb8609fe920a9 (\"netfilter:\nnfnetlink: add mutex per subsystem\") building nefnetlink.o without\nCONFIG_PROVE_RCU set, triggers this GCC warning:\n net/netfilter/nfnetlink.c:65:22: warning: ‘nfnl_get_lock’ defined but not used [-Wunused-function]\n\nThe cause of that warning is, in short, that rcu_lockdep_assert()\ncompiles away if CONFIG_PROVE_RCU is not set. Silence this warning by\nopen coding nfnl_get_lock() in the sole place it was called, which\nallows to remove that function.\n\nSigned-off-by: Paul Bolle \u003cpebolle@tiscali.nl\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "ed018fa4dfc3d26da56b9ee7dc75e9d39a39a02b", "tree": "ecb910ff5080b35dc1fdae81337bbdb1d2b54841", "parents": [ "f9caed59f801f77a2844ab04d2dea8df33ac862b" ], "author": { "name": "Gao feng", "email": "gaofeng@cn.fujitsu.com", "time": "Mon Mar 04 00:29:12 2013 +0000" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Mon Mar 04 14:45:25 2013 +0100" }, "message": "netfilter: xt_AUDIT: only generate audit log when audit enabled\n\nWe should stop generting audit log if audit is disabled.\n\nSigned-off-by: Gao feng \u003cgaofeng@cn.fujitsu.com\u003e\nAcked-by: Thomas Graf \u003ctgraf@suug.ch\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "7f78e0351394052e1a6293e175825eb5c7869507", "tree": "76493af33d02bd3f411e69f95b0bcdfff50412b4", "parents": [ "ba0e3427b03c3d1550239779eca5c1c5a53a2152" ], "author": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Sat Mar 02 19:39:14 2013 -0800" }, "committer": { "name": "Eric W. Biederman", "email": "ebiederm@xmission.com", "time": "Sun Mar 03 19:36:31 2013 -0800" }, "message": "fs: Limit sys_mount to only request filesystem modules.\n\nModify the request_module to prefix the file system type with \"fs-\"\nand add aliases to all of the filesystems that can be built as modules\nto match.\n\nA common practice is to build all of the kernel code and leave code\nthat is not commonly needed as modules, with the result that many\nusers are exposed to any bug anywhere in the kernel.\n\nLooking for filesystems with a fs- prefix limits the pool of possible\nmodules that can be loaded by mount to just filesystems trivially\nmaking things safer with no real cost.\n\nUsing aliases means user space can control the policy of which\nfilesystem modules are auto-loaded by editing /etc/modprobe.d/*.conf\nwith blacklist and alias directives. Allowing simple, safe,\nwell understood work-arounds to known problematic software.\n\nThis also addresses a rare but unfortunate problem where the filesystem\nname is not the same as it\u0027s module name and module auto-loading\nwould not work. While writing this patch I saw a handful of such\ncases. The most significant being autofs that lives in the module\nautofs4.\n\nThis is relevant to user namespaces because we can reach the request\nmodule in get_fs_type() without having any special permissions, and\npeople get uncomfortable when a user specified string (in this case\nthe filesystem type) goes all of the way to request_module.\n\nAfter having looked at this issue I don\u0027t think there is any\nparticular reason to perform any filtering or permission checks beyond\nmaking it clear in the module request that we want a filesystem\nmodule. The common pattern in the kernel is to call request_module()\nwithout regards to the users permissions. In general all a filesystem\nmodule does once loaded is call register_filesystem() and go to sleep.\nWhich means there is not much attack surface exposed by loading a\nfilesytem module unless the filesystem is mounted. In a user\nnamespace filesystems are not mounted unless .fs_flags \u003d FS_USERNS_MOUNT,\nwhich most filesystems do not set today.\n\nAcked-by: Serge Hallyn \u003cserge.hallyn@canonical.com\u003e\nAcked-by: Kees Cook \u003ckeescook@chromium.org\u003e\nReported-by: Kees Cook \u003ckeescook@google.com\u003e\nSigned-off-by: \"Eric W. Biederman\" \u003cebiederm@xmission.com\u003e\n" }, { "commit": "d6e89c0b7660bd725a0948126f9db1a327f48d76", "tree": "a7670aeb7cd3e2918115fdd5bf19f9a11f858c0c", "parents": [ "e2ca90c276e1fc410d7cd3c1a4eee245ec902a20" ], "author": { "name": "Silviu-Mihai Popescu", "email": "silviupopescu1990@gmail.com", "time": "Sat Mar 02 09:45:19 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Sun Mar 03 01:43:48 2013 -0500" }, "message": "caif_dev: fix sparse warnings for caif_flow_cb\n\nThis fixed the following sparse warning:\nnet/caif/caif_dev.c:121:6: warning: symbol \u0027caif_flow_cb\u0027 was not\ndeclared. Should it be static?\n\nSigned-off-by: Silviu-Mihai Popescu \u003csilviupopescu1990@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8d05b3771da8775799673212b57d62f57c70d68a", "tree": "ebce0455032cec54428227022c92a480fa726da0", "parents": [ "b695188dd39162a1a6bff11fdbcc4c0b65b933ab", "512e4b291c0e97af24619a91f3e8963697da00d8" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 02 16:46:07 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Sat Mar 02 16:46:07 2013 -0800" }, "message": "Merge tag \u0027nfs-for-3.9-2\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs\n\nPull NFS client bugfixes from Trond Myklebust:\n \"We\u0027ve just concluded another Connectathon interoperability testing\n week, and so here are the fixes for the bugs that were discovered:\n\n - Don\u0027t allow NFS silly-renamed files to be deleted\n - Don\u0027t start the retransmission timer when out of socket space\n - Fix a couple of pnfs-related Oopses.\n - Fix one more NFSv4 state recovery deadlock\n - Don\u0027t loop forever when LAYOUTGET returns NFS4ERR_LAYOUTTRYLATER\"\n\n* tag \u0027nfs-for-3.9-2\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs:\n SUNRPC: One line comment fix\n NFSv4.1: LAYOUTGET EDELAY loops timeout to the MDS\n SUNRPC: add call to get configured timeout\n PNFS: set the default DS timeout to 60 seconds\n NFSv4: Fix another open/open_recovery deadlock\n nfs: don\u0027t allow nfs_find_actor to match inodes of the wrong type\n NFSv4.1: Hold reference to layout hdr in layoutget\n pnfs: fix resend_to_mds for directio\n SUNRPC: Don\u0027t start the retransmission timer when out of socket space\n NFS: Don\u0027t allow NFS silly-renamed files to be deleted, no signal\n" }, { "commit": "512e4b291c0e97af24619a91f3e8963697da00d8", "tree": "b9ea33c54cd17170c2876e8a30cb9c1d1cf0cac2", "parents": [ "3000512137602b84d1ad5fd89d62984993a19bb6" ], "author": { "name": "Trond Myklebust", "email": "Trond.Myklebust@netapp.com", "time": "Sat Mar 02 15:54:11 2013 -0800" }, "committer": { "name": "Trond Myklebust", "email": "Trond.Myklebust@netapp.com", "time": "Sat Mar 02 15:54:11 2013 -0800" }, "message": "SUNRPC: One line comment fix\n\nReported-by: Weston Andros Adamson \u003cdros@netapp.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\n" }, { "commit": "f9caed59f801f77a2844ab04d2dea8df33ac862b", "tree": "ac8f191a9df83cd7911a6434634d989f9eb77210", "parents": [ "114a6f8b52163c0232fbcd7f3808ff04dc61a9b5" ], "author": { "name": "Joe Perches", "email": "joe@perches.com", "time": "Mon Feb 18 21:51:07 2013 +0000" }, "committer": { "name": "Pablo Neira Ayuso", "email": "pablo@netfilter.org", "time": "Sat Mar 02 22:44:45 2013 +0100" }, "message": "netfilter: nf_ct_helper: Fix logging for dropped packets\n\nUpdate nf_ct_helper_log to emit args along with the format.\n\nSigned-off-by: Joe Perches \u003cjoe@perches.com\u003e\nSigned-off-by: Pablo Neira Ayuso \u003cpablo@netfilter.org\u003e\n" }, { "commit": "801d929ca7d935ee199fd61d8ef914f51e892270", "tree": "8f242f50b25e120744ef717121555968bada870c", "parents": [ "24af717c35189f7a83c34e637256ccb7295a617b" ], "author": { "name": "Felix Fietkau", "email": "nbd@openwrt.org", "time": "Sat Mar 02 19:05:47 2013 +0100" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Sat Mar 02 21:24:42 2013 +0100" }, "message": "mac80211: another fix for idle handling in monitor mode\n\nWhen setting a monitor interface up or down, the idle state needs to be\nrecalculated, otherwise the hardware will just stay in its previous idle\nstate.\n\nSigned-off-by: Felix Fietkau \u003cnbd@openwrt.org\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "81ce0dbc119fa31af21d02febde1cf923022d4d6", "tree": "d30a6bbde6b47679115f5eb1f84f79eabbc5c58f", "parents": [ "d8c6f4b9b7848bca8babfc0ae43a50c8ab22fbb9" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Thu Feb 28 19:27:43 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 01 15:59:56 2013 -0500" }, "message": "sctp: use the passed in gfp flags instead GFP_KERNEL\n\nThis patch doesn\u0027t change how the code works because in the current\nkernel gfp is always GFP_KERNEL. But gfp was obviously intended\ninstead of GFP_KERNEL.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d8c6f4b9b7848bca8babfc0ae43a50c8ab22fbb9", "tree": "c354b5edc7c4c335bea3d9dcf4e977646ed012a0", "parents": [ "9e0aab86496295efdf6c2f57eaac3497e1c721a2" ], "author": { "name": "Neil Horman", "email": "nhorman@tuxdriver.com", "time": "Fri Mar 01 07:44:08 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 01 15:56:29 2013 -0500" }, "message": "ipv[4|6]: correct dropwatch false positive in local_deliver_finish\n\nI had a report recently of a user trying to use dropwatch to localise some frame\nloss, and they were getting false positives. Turned out they were using a user\nspace SCTP stack that used raw sockets to grab frames. When we don\u0027t have a\nregistered protocol for a given packet, we record it as a drop, even if a raw\nsocket receieves the frame. We should only record the drop in the event a raw\nsocket doesnt exist to receive the frames\n\nTested by the reported successfully\n\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nReported-by: William Reich \u003creich@ulticom.com\u003e\nTested-by: William Reich \u003creich@ulticom.com\u003e\nCC: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCC: William Reich \u003creich@ulticom.com\u003e\nCC: eric.dumazet@gmail.com\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "9e0aab86496295efdf6c2f57eaac3497e1c721a2", "tree": "3c474f66bac0eb95cfe35d4aa8591876bd8cf636", "parents": [ "8b82547e33e85fc24d4d172a93c796de1fefa81a", "98b7ff9a4977e4f4f451c30288b197ad79e5ab7f" ], "author": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 01 15:54:12 2013 -0500" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 01 15:54:12 2013 -0500" }, "message": "Merge branch \u0027for-davem\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless\n\nJohn W. Linville says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nThis is another flurry of fixes intended for the 3.9 stream...\n\nA mac80211 pull from Johannes:\n\n\"Seth fixes a stupid bug I introduced into one of his earlier patches,\nChun-Yeow fixes mesh forwarding and Felix fixes monitor mode. I myself\nfixed a small locking issue and, the biggest change here, removed some\nnl80211 information with which sometimes the per wiphy information was\ngetting too large for the typical 4k-minus-overhead. In my -next tree I\nhave a patch to allow splitting that and add back the information\nremoved now.\"\n\nAn iwlwifi pull from Johannes:\n\n\"I have a fix for a pretty important bug regarding DMA mapping, that\ncould cause the DMA engine to overwrite data we wanted to send to it, so\nthat the next time we send it it would be bad. This particularly affects\ncalibration results. Other than that, three little fixes for the MVM\ndriver.\"\n\nBut wait, there\u0027s more!\n\nAvinash Patil fixes an incorrectly timed delay in mwifiex.\n\nBing Zhao prevents a crash in SD8688 caused by failing to properly\nset a flag before issuing a command.\n\nFelix Fietkau is the big here this time, providing a trio of minor\nath9k fixes and correcting the advertised interface combinations for\nrt2x00 when mesh support is disabled.\n\nFinally, Hauke Mehrtens gives us a patch that correctlin initializes\na spin lock in the bcma code.\n\nPlease let me know if there are problems!\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "8b82547e33e85fc24d4d172a93c796de1fefa81a", "tree": "549b58a0e731a1aa6a028c0200d065c125a1080d", "parents": [ "32fcafbcd1c9f6c7013016a22a5369b4acb93577" ], "author": { "name": "Guillaume Nault", "email": "g.nault@alphalink.fr", "time": "Fri Mar 01 05:02:02 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Fri Mar 01 14:13:09 2013 -0500" }, "message": "l2tp: Restore socket refcount when sendmsg succeeds\n\nThe sendmsg() syscall handler for PPPoL2TP doesn\u0027t decrease the socket\nreference counter after successful transmissions. Any successful\nsendmsg() call from userspace will then increase the reference counter\nforever, thus preventing the kernel\u0027s session and tunnel data from\nbeing freed later on.\n\nThe problem only happens when writing directly on L2TP sockets.\nPPP sockets attached to L2TP are unaffected as the PPP subsystem\nuses pppol2tp_xmit() which symmetrically increase/decrease reference\ncounters.\n\nThis patch adds the missing call to sock_put() before returning from\npppol2tp_sendmsg().\n\nSigned-off-by: Guillaume Nault \u003cg.nault@alphalink.fr\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "98b7ff9a4977e4f4f451c30288b197ad79e5ab7f", "tree": "b0aae5739f08a2c3fd822e2b86dd1a369fd2e0a2", "parents": [ "32fcafbcd1c9f6c7013016a22a5369b4acb93577", "466026989f112e0546ca39ab00a759af82dbe83a" ], "author": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Mar 01 13:52:03 2013 -0500" }, "committer": { "name": "John W. Linville", "email": "linville@tuxdriver.com", "time": "Fri Mar 01 13:52:03 2013 -0500" }, "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem\n" }, { "commit": "24af717c35189f7a83c34e637256ccb7295a617b", "tree": "df93dfde818c78651882c8303095de0a23f0179f", "parents": [ "7cbf9d017dbb5e3276de7d527925d42d4c11e732" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Fri Mar 01 17:33:18 2013 +0100" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Fri Mar 01 19:20:25 2013 +0100" }, "message": "mac80211: fix VHT MCS calculation\n\nThe VHT MCSes we advertise to the AP were supposed to\nbe restricted to the AP, but due to a bug in the logic\nmac80211 will advertise rates to the AP that aren\u0027t\neven supported by the local device. To fix this skip\nany adjustment if the NSS isn\u0027t supported at all.\n\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "7cbf9d017dbb5e3276de7d527925d42d4c11e732", "tree": "aad788e8252266b5cbeafffce5efece12f7b908b", "parents": [ "645e77def93f1dd0e211c7244fbe152dac8a7100" ], "author": { "name": "Marco Porsch", "email": "marco@cozybit.com", "time": "Fri Mar 01 16:01:18 2013 +0100" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Fri Mar 01 16:09:41 2013 +0100" }, "message": "mac80211: fix oops on mesh PS broadcast forwarding\n\nIntroduced with de74a1d9032f4d37ea453ad2a647e1aff4cd2591\n\"mac80211: fix WPA with VLAN on AP side with ps-sta\".\nApparently overwrites the sdata pointer with non-valid data in\nthe case of mesh.\nFix this by checking for IFTYPE_AP_VLAN.\n\nSigned-off-by: Marco Porsch \u003cmarco@cozybit.com\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "645e77def93f1dd0e211c7244fbe152dac8a7100", "tree": "319be421ebcaa108bfaf0f07de0820f42ba6cee3", "parents": [ "feda30271e5455394c57e35eba66db88d1b15077" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Fri Mar 01 14:03:49 2013 +0100" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Fri Mar 01 15:05:19 2013 +0100" }, "message": "nl80211: increase wiphy dump size dynamically\n\nGiven a device with many channels capabilities the wiphy\ninformation can still overflow even though its size in\n3.9 was reduced to 3.8 levels. For new userspace and\nkernel 3.10 we\u0027re going to implement a new \"split dump\"\nprotocol that can use multiple messages per wiphy.\n\nFor now though, add a workaround to be able to send more\ninformation to userspace. Since generic netlink doesn\u0027t\nhave a way to set the minimum dump size globally, and we\nwouldn\u0027t really want to set it globally anyway, increase\nthe size only when needed, as described in the comments.\nAs userspace might not be prepared for large buffers, we\ncan only use 4k.\n\nAlso increase the size for the get_wiphy command.\n\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "b6669737d3db7df79fad07180837c23dbe581db5", "tree": "671a9d13fe5ab00d6a3c7c5c5c466802ca96d38a", "parents": [ "1cf0209c431fa7790253c532039d53b0773193aa", "dc107402ae06286a9ed33c32daf3f35514a7cb8d" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 28 18:02:55 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 28 18:02:55 2013 -0800" }, "message": "Merge branch \u0027for-3.9\u0027 of git://linux-nfs.org/~bfields/linux\n\nPull nfsd changes from J Bruce Fields:\n \"Miscellaneous bugfixes, plus:\n\n - An overhaul of the DRC cache by Jeff Layton. The main effect is\n just to make it larger. This decreases the chances of intermittent\n errors especially in the UDP case. But we\u0027ll need to watch for any\n reports of performance regressions.\n\n - Containerized nfsd: with some limitations, we now support\n per-container nfs-service, thanks to extensive work from Stanislav\n Kinsbursky over the last year.\"\n\nSome notes about conflicts, since there were *two* non-data semantic\nconflicts here:\n\n - idr_remove_all() had been added by a memory leak fix, but has since\n become deprecated since idr_destroy() does it for us now.\n\n - xs_local_connect() had been added by this branch to make AF_LOCAL\n connections be synchronous, but in the meantime Trond had changed the\n calling convention in order to avoid a RCU dereference.\n\nThere were a couple of more obvious actual source-level conflicts due to\nthe hlist traversal changes and one just due to code changes next to\neach other, but those were trivial.\n\n* \u0027for-3.9\u0027 of git://linux-nfs.org/~bfields/linux: (49 commits)\n SUNRPC: make AF_LOCAL connect synchronous\n nfsd: fix compiler warning about ambiguous types in nfsd_cache_csum\n svcrpc: fix rpc server shutdown races\n svcrpc: make svc_age_temp_xprts enqueue under sv_lock\n lockd: nlmclnt_reclaim(): avoid stack overflow\n nfsd: enable NFSv4 state in containers\n nfsd: disable usermode helper client tracker in container\n nfsd: use proper net while reading \"exports\" file\n nfsd: containerize NFSd filesystem\n nfsd: fix comments on nfsd_cache_lookup\n SUNRPC: move cache_detail-\u003ecache_request callback call to cache_read()\n SUNRPC: remove \"cache_request\" argument in sunrpc_cache_pipe_upcall() function\n SUNRPC: rework cache upcall logic\n SUNRPC: introduce cache_detail-\u003ecache_request callback\n NFS: simplify and clean cache library\n NFS: use SUNRPC cache creation and destruction helper for DNS cache\n nfsd4: free_stid can be static\n nfsd: keep a checksum of the first 256 bytes of request\n sunrpc: trim off trailing checksum before returning decrypted or integrity authenticated buffer\n sunrpc: fix comment in struct xdr_buf definition\n ...\n" }, { "commit": "1cf0209c431fa7790253c532039d53b0773193aa", "tree": "24310eaaf4c9583988d9098f6c85a4a34970b5b9", "parents": [ "de1a2262b006220dae2561a299a6ea128c46f4fe", "83ca14fdd35821554058e5fd4fa7b118ee504a33" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 28 17:43:09 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Thu Feb 28 17:43:09 2013 -0800" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client\n\nPull Ceph updates from Sage Weil:\n \"A few groups of patches here. Alex has been hard at work improving\n the RBD code, layout groundwork for understanding the new formats and\n doing layering. Most of the infrastructure is now in place for the\n final bits that will come with the next window.\n\n There are a few changes to the data layout. Jim Schutt\u0027s patch fixes\n some non-ideal CRUSH behavior, and a set of patches from me updates\n the client to speak a newer version of the protocol and implement an\n improved hashing strategy across storage nodes (when the server side\n supports it too).\n\n A pair of patches from Sam Lang fix the atomicity of open+create\n operations. Several patches from Yan, Zheng fix various mds/client\n issues that turned up during multi-mds torture tests.\n\n A final set of patches expose file layouts via virtual xattrs, and\n allow the policies to be set on directories via xattrs as well\n (avoiding the awkward ioctl interface and providing a consistent\n interface for both kernel mount and ceph-fuse users).\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client: (143 commits)\n libceph: add support for HASHPSPOOL pool flag\n libceph: update osd request/reply encoding\n libceph: calculate placement based on the internal data types\n ceph: update support for PGID64, PGPOOL3, OSDENC protocol features\n ceph: update \"ceph_features.h\"\n libceph: decode into cpu-native ceph_pg type\n libceph: rename ceph_pg -\u003e ceph_pg_v1\n rbd: pass length, not op for osd completions\n rbd: move rbd_osd_trivial_callback()\n libceph: use a do..while loop in con_work()\n libceph: use a flag to indicate a fault has occurred\n libceph: separate non-locked fault handling\n libceph: encapsulate connection backoff\n libceph: eliminate sparse warnings\n ceph: eliminate sparse warnings in fs code\n rbd: eliminate sparse warnings\n libceph: define connection flag helpers\n rbd: normalize dout() calls\n rbd: barriers are hard\n rbd: ignore zero-length requests\n ...\n" }, { "commit": "edddbb1eda61753c886a3c5e159293a7b3a9e30a", "tree": "2771abd18c39df234420c332158bfb4f09085401", "parents": [ "eb97cbb459c656b542101091f67ce112b3e56183" ], "author": { "name": "Weston Andros Adamson", "email": "dros@netapp.com", "time": "Thu Feb 28 20:30:09 2013 -0500" }, "committer": { "name": "Trond Myklebust", "email": "Trond.Myklebust@netapp.com", "time": "Thu Feb 28 17:35:20 2013 -0800" }, "message": "SUNRPC: add call to get configured timeout\n\nReturns the configured timeout for the xprt of the rpc client.\n\nSigned-off-by: Weston Andros Adamson \u003cdros@netapp.com\u003e\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\n" }, { "commit": "d003b41b801124b96337973b01eada6a83673d23", "tree": "726fb6ef8bff813011a19098dd374ce1707edae4", "parents": [ "95ac7b859f508b1b3e6adf7dce307864e4384a69" ], "author": { "name": "Lee A. Roberts", "email": "lee.roberts@hp.com", "time": "Thu Feb 28 04:37:30 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 28 15:34:27 2013 -0500" }, "message": "sctp: fix association hangs due to partial delivery errors\n\nIn sctp_ulpq_tail_data(), use return values 0,1 to indicate whether\na complete event (with MSG_EOR set) was delivered. A return value\nof -ENOMEM continues to indicate an out-of-memory condition was\nencountered.\n\nIn sctp_ulpq_retrieve_partial() and sctp_ulpq_retrieve_first(),\ncorrect message reassembly logic for SCTP partial delivery.\nChange logic to ensure that as much data as possible is sent\nwith the initial partial delivery and that following partial\ndeliveries contain all available data.\n\nIn sctp_ulpq_partial_delivery(), attempt partial delivery only\nif the data on the head of the reassembly queue is at or before\nthe cumulative TSN ACK point.\n\nIn sctp_ulpq_renege(), use the modified return values from\nsctp_ulpq_tail_data() to choose whether to attempt partial\ndelivery or to attempt to drain the reassembly queue as a\nmeans to reduce memory pressure. Remove call to\nsctp_tsnmap_mark(), as this is handled correctly in call to\nsctp_ulpq_tail_data().\n\nSigned-off-by: Lee A. Roberts \u003clee.roberts@hp.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\n" }, { "commit": "95ac7b859f508b1b3e6adf7dce307864e4384a69", "tree": "5e1c0cad931d5440c0434da15ef52ed2eaf002ab", "parents": [ "e67f85ecd83de66d4f25f2e0f90bb0d01a52ddd8" ], "author": { "name": "Lee A. Roberts", "email": "lee.roberts@hp.com", "time": "Thu Feb 28 04:37:29 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 28 15:34:26 2013 -0500" }, "message": "sctp: fix association hangs due to errors when reneging events from the ordering queue\n\nIn sctp_ulpq_renege_list(), events being reneged from the\nordering queue may correspond to multiple TSNs. Identify\nall affected packets; sum freed space and renege from the\ntsnmap.\n\nSigned-off-by: Lee A. Roberts \u003clee.roberts@hp.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\n" }, { "commit": "e67f85ecd83de66d4f25f2e0f90bb0d01a52ddd8", "tree": "9d9fbfbefad6f9aecfa0200d52c26b7aa5115c3b", "parents": [ "70fc69bc5a54d9776ace7c99d46eb533f8fb6e89" ], "author": { "name": "Lee A. Roberts", "email": "lee.roberts@hp.com", "time": "Thu Feb 28 04:37:28 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 28 15:34:26 2013 -0500" }, "message": "sctp: fix association hangs due to reneging packets below the cumulative TSN ACK point\n\nIn sctp_ulpq_renege_list(), do not renege packets below the\ncumulative TSN ACK point.\n\nSigned-off-by: Lee A. Roberts \u003clee.roberts@hp.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\n" }, { "commit": "70fc69bc5a54d9776ace7c99d46eb533f8fb6e89", "tree": "8720e9ed3e8d91b80dac204d95cf81a3774ba43a", "parents": [ "726bc6b092da4c093eb74d13c07184b18c1af0f1" ], "author": { "name": "Lee A. Roberts", "email": "lee.roberts@hp.com", "time": "Thu Feb 28 04:37:27 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Thu Feb 28 15:34:26 2013 -0500" }, "message": "sctp: fix association hangs due to off-by-one errors in sctp_tsnmap_grow()\n\nIn sctp_tsnmap_mark(), correct off-by-one error when calculating\nsize value for sctp_tsnmap_grow().\n\nIn sctp_tsnmap_grow(), correct off-by-one error when copying\nand resizing the tsnmap. If max_tsn_seen is in the LSB of the\nword, this bit can be lost, causing the corresponding packet\nto be transmitted again and to be entered as a duplicate into\nthe SCTP reassembly/ordering queues. Change parameter name\nfrom \"gap\" (zero-based index) to \"size\" (one-based) to enhance\ncode readability.\n\nSigned-off-by: Lee A. Roberts \u003clee.roberts@hp.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\n" }, { "commit": "dc107402ae06286a9ed33c32daf3f35514a7cb8d", "tree": "771882a1a62e2c56ae2c262764690417cecd776a", "parents": [ "56edc86b5a72bdbc86358e57fb09165136baf0b8" ], "author": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Wed Feb 20 17:52:19 2013 -0500" }, "committer": { "name": "J. Bruce Fields", "email": "bfields@redhat.com", "time": "Thu Feb 28 09:47:17 2013 -0800" }, "message": "SUNRPC: make AF_LOCAL connect synchronous\n\nIt doesn\u0027t appear that anyone actually needs to connect asynchronously.\n\nAlso, using a workqueue for the connect means we lose the namespace\ninformation from the original process. This is a problem since there\u0027s\nno way to explicitly pass in a filesystem namespace for resolution of an\nAF_LOCAL address.\n\nAcked-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nSigned-off-by: J. Bruce Fields \u003cbfields@redhat.com\u003e\n" }, { "commit": "feda30271e5455394c57e35eba66db88d1b15077", "tree": "89a948ff65091e39c0dc3e9ce7f01728798916f0", "parents": [ "d0ae708d1acd4bf6ad5b9937d9da44d16ca18f13" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Thu Feb 28 09:59:22 2013 +0100" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Thu Feb 28 09:59:22 2013 +0100" }, "message": "mac80211: really fix monitor mode channel reporting\n\nAfter Felix\u0027s patch it was still broken in case you\nused more than just a single monitor interface. Fix\nit better now.\n\nReported-by: Sujith Manoharan \u003csujith@msujith.org\u003e\nTested-by: Sujith Manoharan \u003csujith@msujith.org\u003e\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "b67bfe0d42cac56c512dd5da4b1b347a23f4b70a", "tree": "3d465aea12b97683f26ffa38eba8744469de9997", "parents": [ "1e142b29e210b5dfb2deeb6ce2210b60af16d2a6" ], "author": { "name": "Sasha Levin", "email": "sasha.levin@oracle.com", "time": "Wed Feb 27 17:06:00 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 27 19:10:24 2013 -0800" }, "message": "hlist: drop the node parameter from iterators\n\nI\u0027m not sure why, but the hlist for each entry iterators were conceived\n\n list_for_each_entry(pos, head, member)\n\nThe hlist ones were greedy and wanted an extra parameter:\n\n hlist_for_each_entry(tpos, pos, head, member)\n\nWhy did they need an extra pos parameter? I\u0027m not quite sure. Not only\nthey don\u0027t really need it, it also prevents the iterator from looking\nexactly like the list iterator, which is unfortunate.\n\nBesides the semantic patch, there was some manual work required:\n\n - Fix up the actual hlist iterators in linux/list.h\n - Fix up the declaration of other iterators based on the hlist ones.\n - A very small amount of places were using the \u0027node\u0027 parameter, this\n was modified to use \u0027obj-\u003emember\u0027 instead.\n - Coccinelle didn\u0027t handle the hlist_for_each_entry_safe iterator\n properly, so those had to be fixed up manually.\n\nThe semantic patch which is mostly the work of Peter Senna Tschudin is here:\n\n@@\niterator name hlist_for_each_entry, hlist_for_each_entry_continue, hlist_for_each_entry_from, hlist_for_each_entry_rcu, hlist_for_each_entry_rcu_bh, hlist_for_each_entry_continue_rcu_bh, for_each_busy_worker, ax25_uid_for_each, ax25_for_each, inet_bind_bucket_for_each, sctp_for_each_hentry, sk_for_each, sk_for_each_rcu, sk_for_each_from, sk_for_each_safe, sk_for_each_bound, hlist_for_each_entry_safe, hlist_for_each_entry_continue_rcu, nr_neigh_for_each, nr_neigh_for_each_safe, nr_node_for_each, nr_node_for_each_safe, for_each_gfn_indirect_valid_sp, for_each_gfn_sp, for_each_host;\n\ntype T;\nexpression a,c,d,e;\nidentifier b;\nstatement S;\n@@\n\n-T b;\n \u003c+... when !\u003d b\n(\nhlist_for_each_entry(a,\n- b,\nc, d) S\n|\nhlist_for_each_entry_continue(a,\n- b,\nc) S\n|\nhlist_for_each_entry_from(a,\n- b,\nc) S\n|\nhlist_for_each_entry_rcu(a,\n- b,\nc, d) S\n|\nhlist_for_each_entry_rcu_bh(a,\n- b,\nc, d) S\n|\nhlist_for_each_entry_continue_rcu_bh(a,\n- b,\nc) S\n|\nfor_each_busy_worker(a, c,\n- b,\nd) S\n|\nax25_uid_for_each(a,\n- b,\nc) S\n|\nax25_for_each(a,\n- b,\nc) S\n|\ninet_bind_bucket_for_each(a,\n- b,\nc) S\n|\nsctp_for_each_hentry(a,\n- b,\nc) S\n|\nsk_for_each(a,\n- b,\nc) S\n|\nsk_for_each_rcu(a,\n- b,\nc) S\n|\nsk_for_each_from\n-(a, b)\n+(a)\nS\n+ sk_for_each_from(a) S\n|\nsk_for_each_safe(a,\n- b,\nc, d) S\n|\nsk_for_each_bound(a,\n- b,\nc) S\n|\nhlist_for_each_entry_safe(a,\n- b,\nc, d, e) S\n|\nhlist_for_each_entry_continue_rcu(a,\n- b,\nc) S\n|\nnr_neigh_for_each(a,\n- b,\nc) S\n|\nnr_neigh_for_each_safe(a,\n- b,\nc, d) S\n|\nnr_node_for_each(a,\n- b,\nc) S\n|\nnr_node_for_each_safe(a,\n- b,\nc, d) S\n|\n- for_each_gfn_sp(a, c, d, b) S\n+ for_each_gfn_sp(a, c, d) S\n|\n- for_each_gfn_indirect_valid_sp(a, c, d, b) S\n+ for_each_gfn_indirect_valid_sp(a, c, d) S\n|\nfor_each_host(a,\n- b,\nc) S\n|\nfor_each_host_safe(a,\n- b,\nc, d) S\n|\nfor_each_mesh_entry(a,\n- b,\nc, d) S\n)\n ...+\u003e\n\n[akpm@linux-foundation.org: drop bogus change from net/ipv4/raw.c]\n[akpm@linux-foundation.org: drop bogus hunk from net/ipv6/raw.c]\n[akpm@linux-foundation.org: checkpatch fixes]\n[akpm@linux-foundation.org: fix warnings]\n[akpm@linux-foudnation.org: redo intrusive kvm changes]\nTested-by: Peter Senna Tschudin \u003cpeter.senna@gmail.com\u003e\nAcked-by: Paul E. McKenney \u003cpaulmck@linux.vnet.ibm.com\u003e\nSigned-off-by: Sasha Levin \u003csasha.levin@oracle.com\u003e\nCc: Wu Fengguang \u003cfengguang.wu@intel.com\u003e\nCc: Marcelo Tosatti \u003cmtosatti@redhat.com\u003e\nCc: Gleb Natapov \u003cgleb@redhat.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "94960e8c2e69d1e4c01c10c7b00bc0f7eba49fa1", "tree": "a5b5cedf37c74644277c86d3f6e2514920ecde24", "parents": [ "9475af6e44d2c17583243c253e2464467b52fa50" ], "author": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Wed Feb 27 17:05:00 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 27 19:10:20 2013 -0800" }, "message": "sctp: convert to idr_alloc()\n\nConvert to the much saner new idr interface.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nAcked-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nCc: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "9475af6e44d2c17583243c253e2464467b52fa50", "tree": "573f01d006774828e0b39102ee31525cc5b4dbcb", "parents": [ "19a101a02ec65400233459ee7cef7037dbe8f15b" ], "author": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Wed Feb 27 17:04:59 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 27 19:10:20 2013 -0800" }, "message": "mac80211: convert to idr_alloc()\n\nConvert to the much saner new idr interface.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nAcked-by: Johannes Berg \u003cjohannes@sipsolutions.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "19a101a02ec65400233459ee7cef7037dbe8f15b", "tree": "4166d34c37ba10d1b288a9dc037cf03c03eb3a3a", "parents": [ "ee94d523bf92d3b8b2de166943d48ac7fd695e10" ], "author": { "name": "Tejun Heo", "email": "tj@kernel.org", "time": "Wed Feb 27 17:04:57 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Wed Feb 27 19:10:20 2013 -0800" }, "message": "net/9p: convert to idr_alloc()\n\nConvert to the much saner new idr interface.\n\nSigned-off-by: Tejun Heo \u003ctj@kernel.org\u003e\nCc: Eric Van Hensbergen \u003cericvh@gmail.com\u003e\nCc: Ron Minnich \u003crminnich@sandia.gov\u003e\nCc: Latchesar Ionkov \u003clucho@ionkov.net\u003e\nSigned-off-by: Andrew Morton \u003cakpm@linux-foundation.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n" }, { "commit": "726bc6b092da4c093eb74d13c07184b18c1af0f1", "tree": "4895b99cab1b958007b0b71d4dd49947f41e234a", "parents": [ "45af3fb4a018ef84bf1c9f2dfbd887a41242e77f" ], "author": { "name": "Guenter Roeck", "email": "linux@roeck-us.net", "time": "Wed Feb 27 10:57:31 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Feb 27 16:09:19 2013 -0500" }, "message": "net/sctp: Validate parameter size for SCTP_GET_ASSOC_STATS\n\nBuilding sctp may fail with:\n\nIn function ‘copy_from_user’,\n inlined from ‘sctp_getsockopt_assoc_stats’ at\n net/sctp/socket.c:5656:20:\narch/x86/include/asm/uaccess_32.h:211:26: error: call to\n ‘copy_from_user_overflow’ declared with attribute error: copy_from_user()\n buffer size is not provably correct\n\nif built with W\u003d1 due to a missing parameter size validation\nbefore the call to copy_from_user.\n\nSigned-off-by: Guenter Roeck \u003clinux@roeck-us.net\u003e\nAcked-by: Vlad Yasevich \u003cvyasevich@gmail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "90c7881ecee1f08e0a49172cf61371cf2509ee4a", "tree": "c2caac0d94e2d4d75090947c2e45be0e359adb65", "parents": [ "e70ab977991964a5a7ad1182799451d067e62669" ], "author": { "name": "Dan Carpenter", "email": "dan.carpenter@oracle.com", "time": "Tue Feb 26 19:15:02 2013 +0000" }, "committer": { "name": "David S. Miller", "email": "davem@davemloft.net", "time": "Wed Feb 27 13:10:35 2013 -0500" }, "message": "irda: small read beyond end of array in debug code\n\ncharset comes from skb-\u003edata. It\u0027s a number in the 0-255 range.\nIf we have debugging turned on then this could cause a read beyond\nthe end of the array.\n\nSigned-off-by: Dan Carpenter \u003cdan.carpenter@oracle.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n" }, { "commit": "d0ae708d1acd4bf6ad5b9937d9da44d16ca18f13", "tree": "bc2d3567685de66bb125ce04c33593c8973035e4", "parents": [ "499218595a2e8296b7492af32fcca141b7b8184a" ], "author": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Wed Feb 27 15:08:28 2013 +0100" }, "committer": { "name": "Johannes Berg", "email": "johannes.berg@intel.com", "time": "Wed Feb 27 15:31:05 2013 +0100" }, "message": "nl80211: remove channel width and extended capa advertising\n\nThis is another case of data increasing the size of the\nwiphy information significantly with a new feature, for\nnow remove this as well.\n\nSigned-off-by: Johannes Berg \u003cjohannes.berg@intel.com\u003e\n" }, { "commit": "d895cb1af15c04c522a25c79cc429076987c089b", "tree": "895dc9157e28f603d937a58be664e4e440d5530c", "parents": [ "9626357371b519f2b955fef399647181034a77fe", "d3d009cb965eae7e002ea5badf603ea8f4c34915" ], "author": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Feb 26 20:16:07 2013 -0800" }, "committer": { "name": "Linus Torvalds", "email": "torvalds@linux-foundation.org", "time": "Tue Feb 26 20:16:07 2013 -0800" }, "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs\n\nPull vfs pile (part one) from Al Viro:\n \"Assorted stuff - cleaning namei.c up a bit, fixing -\u003ed_name/-\u003ed_parent\n locking violations, etc.\n\n The most visible changes here are death of FS_REVAL_DOT (replaced with\n \"has -\u003ed_weak_revalidate()\") and a new helper getting from struct file\n to inode. Some bits of preparation to xattr method interface changes.\n\n Misc patches by various people sent this cycle *and* ocfs2 fixes from\n several cycles ago that should\u0027ve been upstream right then.\n\n PS: the next vfs pile will be xattr stuff.\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs: (46 commits)\n saner proc_get_inode() calling conventions\n proc: avoid extra pde_put() in proc_fill_super()\n fs: change return values from -EACCES to -EPERM\n fs/exec.c: make bprm_mm_init() static\n ocfs2/dlm: use GFP_ATOMIC inside a spin_lock\n ocfs2: fix possible use-after-free with AIO\n ocfs2: Fix oops in ocfs2_fast_symlink_readpage() code path\n get_empty_filp()/alloc_file() leave both -\u003ef_pos and -\u003ef_version zero\n target: writev() on single-element vector is pointless\n export kernel_write(), convert open-coded instances\n fs: encode_fh: return FILEID_INVALID if invalid fid_type\n kill f_vfsmnt\n vfs: kill FS_REVAL_DOT by adding a d_weak_revalidate dentry op\n nfsd: handle vfs_getattr errors in acl protocol\n switch vfs_getattr() to struct path\n default SET_PERSONALITY() in linux/elf.h\n ceph: prepopulate inodes only when request is aborted\n d_hash_and_lookup(): export, switch open-coded instances\n 9p: switch v9fs_set_create_acl() to inode+fid, do it before d_instantiate()\n 9p: split dropping the acls from v9fs_set_create_acl()\n ...\n" }, { "commit": "83ca14fdd35821554058e5fd4fa7b118ee504a33", "tree": "8f105c71b91854c68db4281f255723356e709ccd", "parents": [ "1b83bef24c6746a146d39915a18fb5425f2facb0" ], "author": { "name": "Sage Weil", "email": "sage@inktank.com", "time": "Tue Feb 26 10:39:09 2013 -0800" }, "committer": { "name": "Sage Weil", "email": "sage@inktank.com", "time": "Tue Feb 26 15:03:06 2013 -0800" }, "message": "libceph: add support for HASHPSPOOL pool flag\n\nThe legacy behavior adds the pgid seed and pool together as the input for\nCRUSH. That is problematic because each pool\u0027s PGs end up mapping to the\nsame OSDs: 1.5 \u003d\u003d 2.4 \u003d\u003d 3.3 \u003d\u003d ...\n\nInstead, if the HASHPSPOOL flag is set, we has the ps and pool together and\nfeed that into CRUSH. This ensures that two adjacent pools will map to\nan independent pseudorandom set of OSDs.\n\nAdvertise our support for this via a protocol feature flag.\n\nSigned-off-by: Sage Weil \u003csage@inktank.com\u003e\nReviewed-by: Alex Elder \u003celder@inktank.com\u003e\n" }, { "commit": "1b83bef24c6746a146d39915a18fb5425f2facb0", "tree": "a765aeb136f4c7e354c01314e5fdfb776d503fb7", "parents": [ "2169aea649c08374bec7d220a3b8f64712275356" ], "author": { "name": "Sage Weil", "email": "sage@inktank.com", "time": "Mon Feb 25 16:11:12 2013 -0800" }, "committer": { "name": "Sage Weil", "email": "sage@inktank.com", "time": "Tue Feb 26 15:02:50 2013 -0800" }, "message": "libceph: update osd request/reply encoding\n\nUse the new version of the encoding for osd requests and replies. In the\nprocess, update the way we are tracking request ops and reply lengths and\nresults in the struct ceph_osd_request. Update the rbd and fs/ceph users\nappropriately.\n\nThe main changes are:\n - we keep pointers into the request memory for fields we need to update\n each time the request is sent out over the wire\n - we keep information about the result in an array in the request struct\n where the users can easily get at it.\n\nSigned-off-by: Sage Weil \u003csage@inktank.com\u003e\nReviewed-by: Alex Elder \u003celder@inktank.com\u003e\n" } ], "next": "2169aea649c08374bec7d220a3b8f64712275356" }