)]}'
{
  "log": [
    {
      "commit": "f2530dc71cf0822f90bb63ea4600caaef33a66bb",
      "tree": "182473ca3a295cdbd907826aa22bae94c52fa486",
      "parents": [
        "cfb63bafdb87bbcdc5d6dbbca623d3f69475f118"
      ],
      "author": {
        "name": "Thomas Gleixner",
        "email": "tglx@linutronix.de",
        "time": "Tue Apr 09 09:33:34 2013 +0200"
      },
      "committer": {
        "name": "Thomas Gleixner",
        "email": "tglx@linutronix.de",
        "time": "Fri Apr 12 14:18:43 2013 +0200"
      },
      "message": "kthread: Prevent unpark race which puts threads on the wrong cpu\n\nThe smpboot threads rely on the park/unpark mechanism which binds per\ncpu threads on a particular core. Though the functionality is racy:\n\nCPU0\t       \t \tCPU1  \t     \t    CPU2\nunpark(T)\t\t\t\t    wake_up_process(T)\n  clear(SHOULD_PARK)\tT runs\n\t\t\tleave parkme() due to !SHOULD_PARK  \n  bind_to(CPU2)\t\tBUG_ON(wrong CPU)\t\t\t\t\t\t    \n\nWe cannot let the tasks move themself to the target CPU as one of\nthose tasks is actually the migration thread itself, which requires\nthat it starts running on the target cpu right away.\n\nThe solution to this problem is to prevent wakeups in park mode which\nare not from unpark(). That way we can guarantee that the association\nof the task to the target cpu is working correctly.\n\nAdd a new task state (TASK_PARKED) which prevents other wakeups and\nuse this state explicitly for the unpark wakeup.\n\nPeter noticed: Also, since the task state is visible to userspace and\nall the parked tasks are still in the PID space, its a good hint in ps\nand friends that these tasks aren\u0027t really there for the moment.\n\nThe migration thread has another related issue.\n\nCPU0\t      \t     \t CPU1\nBring up CPU2\ncreate_thread(T)\npark(T)\n wait_for_completion()\n\t\t\t parkme()\n\t\t\t complete()\nsched_set_stop_task()\n\t\t\t schedule(TASK_PARKED)\n\nThe sched_set_stop_task() call is issued while the task is on the\nrunqueue of CPU1 and that confuses the hell out of the stop_task class\non that cpu. So we need the same synchronizaion before\nsched_set_stop_task().\n\nReported-by: Dave Jones \u003cdavej@redhat.com\u003e\nReported-and-tested-by: Dave Hansen \u003cdave@sr71.net\u003e\nReported-and-tested-by: Borislav Petkov \u003cbp@alien8.de\u003e\nAcked-by: Peter Ziljstra \u003cpeterz@infradead.org\u003e\nCc: Srivatsa S. Bhat \u003csrivatsa.bhat@linux.vnet.ibm.com\u003e\nCc: dhillf@gmail.com\nCc: Ingo Molnar \u003cmingo@kernel.org\u003e\nCc: stable@vger.kernel.org\nLink: http://lkml.kernel.org/r/alpine.LFD.2.02.1304091635430.21884@ionos\nSigned-off-by: Thomas Gleixner \u003ctglx@linutronix.de\u003e\n\n"
    },
    {
      "commit": "cfb63bafdb87bbcdc5d6dbbca623d3f69475f118",
      "tree": "6bc2f07f7818b0a6aafc08058ace24322c7bf5cd",
      "parents": [
        "a3ab02b4c5d2ba0eff137a9442b80944ce2d9366",
        "765024697807ad1e1cac332aa891253ca4a339da"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 20:35:11 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 20:35:11 2013 -0700"
      },
      "message": "Merge branch \u0027fixes\u0027 of git://git.infradead.org/users/vkoul/slave-dma\n\nPull slave-dmaengine fixes from Vinod Koul:\n \"The first one fixes issue in pl330 to check for DT compatible and\n  the second one fixes omap-dma to start without delay\"\n\n* \u0027fixes\u0027 of git://git.infradead.org/users/vkoul/slave-dma:\n  dmaengine: omap-dma: Start DMA without delay for cyclic channels\n  DMA: PL330: Add check if device tree compatible\n"
    },
    {
      "commit": "a3ab02b4c5d2ba0eff137a9442b80944ce2d9366",
      "tree": "236fb818fd1bde59c61a1a7b89851e480573a343",
      "parents": [
        "89a132ac273815c3f573684f7a79840e8930d3e1",
        "6f389a8f1dd22a24f3d9afc2812b30d639e94625"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 20:33:38 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 20:33:38 2013 -0700"
      },
      "message": "Merge tag \u0027pm-3.9-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm\n\nPull power management fixes from Rafael Wysocki:\n\n - System reboot/halt fix related to CPU offline ordering from Huacai\n   Chen.\n\n - intel_pstate driver fix for a delay time computation error\n   occasionally crashing systems using it from Dirk Brandewie.\n\n* tag \u0027pm-3.9-rc7\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:\n  PM / reboot: call syscore_shutdown() after disable_nonboot_cpus()\n  cpufreq / intel_pstate: Set timer timeout correctly\n"
    },
    {
      "commit": "89a132ac273815c3f573684f7a79840e8930d3e1",
      "tree": "68ef31fc4ab30f45adac07835caa15103d07033d",
      "parents": [
        "ee8b890e1e7fd5fc8258a713d7c868324e67b8c0",
        "51a246aa5c0a14b3d34a5c6d3c9e271c784b127f"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 18:22:20 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 18:22:20 2013 -0700"
      },
      "message": "Merge tag \u0027regmap-v3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap\n\nPull regmap revert from Mark Brown:\n \"regmap: Back out work buffer fix\n\n  This reverts commit bc8ce4 (regmap: don\u0027t corrupt work buffer in\n  _regmap_raw_write()) since it turns out that it can cause issues when\n  taken in isolation from the other changes in -next that lead to its\n  discovery.  On the basis that nobody noticed the problems for quite\n  some time without that subsequent work let\u0027s drop it from v3.9.\"\n\n* tag \u0027regmap-v3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regmap:\n  regmap: Back out work buffer fix\n"
    },
    {
      "commit": "ee8b890e1e7fd5fc8258a713d7c868324e67b8c0",
      "tree": "b1a0683e2100df71f6418ac21402b2b6500f7682",
      "parents": [
        "ce6fbaf160628df62ec953c701d5fc547484257a",
        "e7a7f972f9120a7985d38a2be8c540047c94392f"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 18:21:45 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 18:21:45 2013 -0700"
      },
      "message": "Merge tag \u0027gpio-fixes-v3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio\n\nPull GPIO fix from Linus Walleij:\n \"Oneliner fix for the PCA 953x driver.\"\n\n* tag \u0027gpio-fixes-v3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linusw/linux-gpio:\n  gpio: pca953x: fix irq_domain_add_simple usage\n"
    },
    {
      "commit": "ce6fbaf160628df62ec953c701d5fc547484257a",
      "tree": "c9c12ddffdd2208b4408d97a1ad56af629e87976",
      "parents": [
        "7ee32a6d30d1c8a3b7a07a6269da8f0a08662927",
        "71bd98aff05a644a2cfc3ac6ca848a586fa210b9"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 18:20:31 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Thu Apr 11 18:20:31 2013 -0700"
      },
      "message": "Merge tag \u0027arm-soc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc\n\nPull ARM SoC bug fixes from Arnd Bergmann:\n \"A little later during the week than the last few pull requests, since\n  there was very little that came in before 3.9-rc6.  At least things\n  have calmed down again here.\n\n  Some important bug fixes that came in over the last 10 days, mostly\n  mvebu and imx:\n\n   - Multiple regressions on i.mx following the conversion of the clock\n     code, hopefully the last we are seeing of those.\n   - a regression in the mvebu irq handling code\n   - An incorrect register offset in the rewritten s3c24xx irq code.\n   - Two bugs in setting up the iomega_ix2_200 machine\n   - Turning on an extra bus clock on imx\n   - A MAINTAINERS file entry for Roland Stigge\"\n\n* tag \u0027arm-soc-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/arm/arm-soc:\n  arm: mvebu: Fix the irq map function in SMP mode\n  Fix GE0/GE1 init on ix2-200 as GE0 has no PHY\n  ARM: S3C24XX: Fix interrupt pending register offset of the EINT controller\n  ARM: S3C24XX: Correct NR_IRQS definition for s3c2440\n  ARM i.MX6: Fix ldb_di clock selection\n  ARM: imx: provide twd clock lookup from device tree\n  ARM: imx35 Bugfix admux clock\n  ARM: clk-imx35: Bugfix iomux clock\n  ARM: mxs: Slow down the I2C clock speed\n  MAINTAINERS: Add maintainer for LPC32xx\n  ARM: Kirkwood: Fix typo in the definition of ix2-200 rebuild LED\n"
    },
    {
      "commit": "e7a7f972f9120a7985d38a2be8c540047c94392f",
      "tree": "7b054a5e516a0ea9fbaa701ecf74878c92a1ea3c",
      "parents": [
        "31880c37c11e28cb81c70757e38392b42e695dc6"
      ],
      "author": {
        "name": "Alexandre Belloni",
        "email": "alexandre.belloni@free-electrons.com",
        "time": "Wed Apr 03 19:40:14 2013 +0200"
      },
      "committer": {
        "name": "Linus Walleij",
        "email": "linus.walleij@linaro.org",
        "time": "Thu Apr 11 19:01:19 2013 +0200"
      },
      "message": "gpio: pca953x: fix irq_domain_add_simple usage\n\nWe actually have to pass chip as the host_data parameter of\nirq_domain_add_simple() as later on, it is used to initialize chip_data\nin pca953x_gpio_irq_map(). Failing to do so is leading to a NULL pointer\ndereference after calling irq_data_get_irq_chip_data() in\npca953x_irq_mask(), pca953x_irq_unmask(), pca953x_irq_bus_lock(),\npca953x_irq_bus_sync_unlock() and pca953x_irq_set_type().\n\nFixes regression introduced by commit\n0e8f2fdacf1d44651aa7e57063c76142d1f4988b (gpio: pca953x: use simple\nirqdomain)\n\nSigned-off-by: Alexandre Belloni \u003calexandre.belloni@free-electrons.com\u003e\nAcked-by: Maxime Ripard \u003cmaxime.ripard@free-electrons.com\u003e\nSigned-off-by: Linus Walleij \u003clinus.walleij@linaro.org\u003e\n"
    },
    {
      "commit": "71bd98aff05a644a2cfc3ac6ca848a586fa210b9",
      "tree": "684205cbeee855f673eec247057ce31bebb4a946",
      "parents": [
        "b94db2ac9e6aad2bdb51ae086b2806c2ceabd5b3",
        "600468d0686096ddc1000c8a2e69475931084414"
      ],
      "author": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Thu Apr 11 16:55:29 2013 +0200"
      },
      "committer": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Thu Apr 11 16:55:29 2013 +0200"
      },
      "message": "Merge tag \u0027mvebu_fixes_for_v3.9_round3\u0027 of git://git.infradead.org/users/jcooper/linux into fixes\n\nFrom Jason Cooper \u003cjason@lakedaemon.net\u003e:\n\nmvebu fixes for v3.9 round 3\n\n - Kirkwood\n    - a couple of small fixes for the Iomega ix2-200 board (ether and led)\n - mvebu\n    - allow GPIO button to work on Mirabox when running SMP\n\n* tag \u0027mvebu_fixes_for_v3.9_round3\u0027 of git://git.infradead.org/users/jcooper/linux:\n  arm: mvebu: Fix the irq map function in SMP mode\n  Fix GE0/GE1 init on ix2-200 as GE0 has no PHY\n  ARM: Kirkwood: Fix typo in the definition of ix2-200 rebuild LED\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n"
    },
    {
      "commit": "7ee32a6d30d1c8a3b7a07a6269da8f0a08662927",
      "tree": "abcd40a1fee2c28b82ed86a3d0bd2f947af11cfb",
      "parents": [
        "7a92bc3856ec7e995ea9a0fb48c25e79ad395ea3",
        "6d4f0139d642c45411a47879325891ce2a7c164a"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 16:00:53 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 16:00:53 2013 -0700"
      },
      "message": "Merge tag \u0027char-misc-3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc\n\nPull char/misc fix from Greg Kroah-Hartman:\n \"Here is a single Kconfig dependancy build fix for 3.9.\n\n  It\u0027s been in linux-next for a while, and fixes a problem that has been\n  reported multiple times.\"\n\n* tag \u0027char-misc-3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc:\n  misc/vmw_vmci: Add dependency on CONFIG_NET\n"
    },
    {
      "commit": "7a92bc3856ec7e995ea9a0fb48c25e79ad395ea3",
      "tree": "62220bffa5641eae4ab27efcefe807241e588ff8",
      "parents": [
        "722aacb28588c7d0326493d1a0700d6a886be7b9",
        "1b581f173992cded311f810346378f763a1f1e5d"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 15:59:12 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 15:59:12 2013 -0700"
      },
      "message": "Merge tag \u0027tty-3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty\n\nPull tty/serial fixes from Greg Kroah-Hartman:\n \"Here are 4 small tty/serial fixes for 3.9.\n\n  One fixes a bug where we broke the documentation build, and the others\n  fix reported problems in some serial drivers.\n\n  All have been in linux-next for a while\"\n\n* tag \u0027tty-3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty:\n  tty: mxser: fix cycle termination condition in mxser_probe() and mxser_module_init()\n  Revert \"tty/8250_pnp: serial port detection regression since v3.7\"\n  OMAP/serial: Revert bad fix of Rx FIFO threshold granularity\n  tty: Documentation: fix a path in a DocBook template\n"
    },
    {
      "commit": "722aacb28588c7d0326493d1a0700d6a886be7b9",
      "tree": "e189617d87b6aa349f3d8c30d5d882cac1982022",
      "parents": [
        "9baba6660bb616ca6272314a62febe8f6726ad30",
        "b22227944b8fe92b19150b4c36421e37979d9a16"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 15:57:33 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 15:57:33 2013 -0700"
      },
      "message": "Merge tag \u0027stable/for-linus-3.9-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen\n\nPull Xen fixes from Konrad Rzeszutek Wilk:\n \"Two bug-fixes:\n   - Early bootup issue found on DL380 machines\n   - Fix for the timer interrupt not being processed right awaym leading\n     to quite delayed time skew on certain workloads\"\n\n* tag \u0027stable/for-linus-3.9-rc6-tag\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/konrad/xen:\n  xen/mmu: On early bootup, flush the TLB when changing RO-\u003eRW bits Xen provided pagetables.\n  xen/events: Handle VIRQ_TIMER before any other hardirq in event loop.\n"
    },
    {
      "commit": "9baba6660bb616ca6272314a62febe8f6726ad30",
      "tree": "66d79a8ab8301e65b55ad402750fc4860e36820a",
      "parents": [
        "fe2971a01762963c62e9872bfcf0632546342c0f",
        "83e03b3fe4daffdebbb42151d5410d730ae50bd1"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 15:56:57 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 15:56:57 2013 -0700"
      },
      "message": "Merge tag \u0027trace-fixes-3.9-rc-v2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace\n\nPull tracing fix from Steven Rostedt:\n \"Namhyung Kim fixed a long standing bug that can cause a kernel panic.\n\n  If the function profiler fails to allocate memory for everything, it\n  will do a double free on the same pointer which can cause a panic\"\n\n* tag \u0027trace-fixes-3.9-rc-v2\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:\n  tracing: Fix double free when function profile init failed\n"
    },
    {
      "commit": "fe2971a01762963c62e9872bfcf0632546342c0f",
      "tree": "eb4b2442b5fa5b1a98de7c3f7509c9749133a90a",
      "parents": [
        "eb02db38ee6da074628685971042b847dee05d43",
        "6b07a24fc38476e04f591cc17594bc1835b9efdd"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 14:15:27 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 14:15:27 2013 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net\n\nPull networking fixes from David Miller:\n\n 1) cfg80211_conn_scan() must be called with the sched_scan_mutex, fix\n    from Artem Savkov.\n\n 2) Fix regression in TCP ICMPv6 processing, we do not want to treat\n    redirects as socket errors, from Christoph Paasch.\n\n 3) Fix several recvmsg() msg_name kernel memory leaks into userspace,\n    in ATM, AX25, Bluetooth, CAIF, IRDA, s390 IUCV, L2TP, LLC, Netrom,\n    NFC, Rose, TIPC, and VSOCK.  From Mathias Krause and Wei Yongjun.\n\n 4) Fix AF_IUCV handling of segmented SKBs in recvmsg(), from Ursula\n    Braun and Eric Dumazet.\n\n 5) CAN gw.c code does kfree() on SLAB cache memory, use\n    kmem_cache_free() instead.  Fix from Wei Yongjun.\n\n 6) Fix LSM regression on TCP SYN/ACKs, some LSMs such as SELINUX want\n    an skb-\u003esk socket context available for these packets, but nothing\n    else requires it.  From Eric Dumazet and Paul Moore.\n\n 7) Fix ipv4 address lifetime processing so that we don\u0027t perform\n    sleepable acts inside of rcu_read_lock() sections, do them in an\n    rtnl_lock() section instead.  From Jiri Pirko.\n\n 8) mvneta driver accidently sets HW features after device registry, it\n    should do so beforehand.  Fix from Willy Tarreau.\n\n 9) Fix bonding unload races more correctly, from Nikolay Aleksandrov\n    and Veaceslav Falico.\n\n10) rtnl_dump_ifinfo() and rtnl_calcit() invoke nlmsg_parse() with wrong\n    header size argument.  Fix from Michael Riesch.\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/davem/net: (44 commits)\n  lsm: add the missing documentation for the security_skb_owned_by() hook\n  bnx2x: Prevent null pointer dereference in AFEX mode\n  e100: Add dma mapping error check\n  selinux: add a skb_owned_by() hook\n  can: gw: use kmem_cache_free() instead of kfree()\n  netrom: fix invalid use of sizeof in nr_recvmsg()\n  qeth: fix qeth_wait_for_threads() deadlock for OSN devices\n  af_iucv: fix recvmsg by replacing skb_pull() function\n  rtnetlink: Call nlmsg_parse() with correct header length\n  bonding: fix bonding_masters race condition in bond unloading\n  Revert \"bonding: remove sysfs before removing devices\"\n  net: mvneta: enable features before registering the driver\n  hyperv: Fix RNDIS send_completion code path\n  hyperv: Fix a kernel warning from netvsc_linkstatus_callback()\n  net: ipv4: fix schedule while atomic bug in check_lifetime()\n  net: ipv4: reset check_lifetime_work after changing lifetime\n  bnx2x: Fix KR2 rapid link flap\n  sctp: remove \u0027sridhar\u0027 from maintainers list\n  VSOCK: Fix missing msg_namelen update in vsock_stream_recvmsg()\n  VSOCK: vmci - fix possible info leak in vmci_transport_dgram_dequeue()\n  ...\n"
    },
    {
      "commit": "eb02db38ee6da074628685971042b847dee05d43",
      "tree": "08088abca80269e5ccc86203a3d6cb9de3ee4e56",
      "parents": [
        "51de01700707167209f92a269ddf85433d29fcb3",
        "f934af05cb1bf20558542185299394a69060b829"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 14:14:27 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 14:14:27 2013 -0700"
      },
      "message": "Merge tag \u0027for-linus\u0027 of git://linux-c6x.org/git/projects/linux-c6x-upstreaming\n\nPull C6X fix from Mark Salter.\n\nFinal (?) fix from the barrier discussion.\n\n* tag \u0027for-linus\u0027 of git://linux-c6x.org/git/projects/linux-c6x-upstreaming:\n  add memory barrier to arch_local_irq_restore\n"
    },
    {
      "commit": "6b07a24fc38476e04f591cc17594bc1835b9efdd",
      "tree": "6c8cb322a5782f7b6fae5e4c1bd7f7c2c55ec165",
      "parents": [
        "fea75645342c7ad574214497a78e562db12dfd7b"
      ],
      "author": {
        "name": "Paul Moore",
        "email": "pmoore@redhat.com",
        "time": "Wed Apr 10 15:34:14 2013 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Apr 10 15:40:39 2013 -0400"
      },
      "message": "lsm: add the missing documentation for the security_skb_owned_by() hook\n\nUnfortunately we didn\u0027t catch the missing comments earlier when the\npatch was merged.\n\nSigned-off-by: Paul Moore \u003cpmoore@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "fea75645342c7ad574214497a78e562db12dfd7b",
      "tree": "bca5264257c1fa9ae2c00172f01bac66712ab031",
      "parents": [
        "61a0f6efc8932e9914e1782ff3a027e23c687fc6"
      ],
      "author": {
        "name": "Yuval Mintz",
        "email": "yuvalmin@broadcom.com",
        "time": "Wed Apr 10 13:34:39 2013 +0300"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Apr 10 15:27:04 2013 -0400"
      },
      "message": "bnx2x: Prevent null pointer dereference in AFEX mode\n\nThe cnic module is responsible for initializing various bnx2x structs\nvia callbacks provided by the bnx2x module.\nOne such struct is the queue object for the FCoE queue.\n\nIf a device is working in AFEX mode and its configuration allows FCoE yet\nthe cnic module is not loaded, it\u0027s very likely a null pointer dereference\nwill occur, as the bnx2x will erroneously access the FCoE\u0027s queue object.\n\nPrevent said access until cnic properly registers itself.\n\nSigned-off-by: Yuval Mintz \u003cyuvalmin@broadcom.com\u003e\nSigned-off-by: Ariel Elior \u003cariele@broadcom.com\u003e\nSigned-off-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "61a0f6efc8932e9914e1782ff3a027e23c687fc6",
      "tree": "492e54a279b710d9ff0631d70d809bfbe6572062",
      "parents": [
        "7b9a035f0ce08e7a77831075e8ac6bf971d0f637"
      ],
      "author": {
        "name": "Neil Horman",
        "email": "nhorman@tuxdriver.com",
        "time": "Tue Apr 09 23:19:00 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Wed Apr 10 15:25:15 2013 -0400"
      },
      "message": "e100: Add dma mapping error check\n\ne100 uses pci_map_single, but fails to check for a dma mapping error after its\nuse, resulting in a stack trace:\n\n[   46.656594] ------------[ cut here ]------------\n[   46.657004] WARNING: at lib/dma-debug.c:933 check_unmap+0x47b/0x950()\n[   46.657004] Hardware name: To Be Filled By O.E.M.\n[   46.657004] e100 0000:00:0e.0: DMA-API: device driver failed to check map\nerror[device address\u003d0x000000007a4540fa] [size\u003d90 bytes] [mapped as single]\n[   46.657004] Modules linked in:\n[   46.657004]  w83627hf hwmon_vid snd_via82xx ppdev snd_ac97_codec ac97_bus\nsnd_seq snd_pcm snd_mpu401 snd_mpu401_uart ns558 snd_rawmidi gameport parport_pc\ne100 snd_seq_device parport snd_page_alloc snd_timer snd soundcore skge shpchp\nk8temp mii edac_core i2c_viapro edac_mce_amd nfsd auth_rpcgss nfs_acl lockd\nsunrpc binfmt_misc uinput ata_generic pata_acpi radeon i2c_algo_bit\ndrm_kms_helper ttm firewire_ohci drm firewire_core pata_via sata_via i2c_core\nsata_promise crc_itu_t\n[   46.657004] Pid: 792, comm: ip Not tainted 3.8.0-0.rc6.git0.1.fc19.x86_64 #1\n[   46.657004] Call Trace:\n[   46.657004]  \u003cIRQ\u003e  [\u003cffffffff81065ed0\u003e] warn_slowpath_common+0x70/0xa0\n[   46.657004]  [\u003cffffffff81065f4c\u003e] warn_slowpath_fmt+0x4c/0x50\n[   46.657004]  [\u003cffffffff81364cfb\u003e] check_unmap+0x47b/0x950\n[   46.657004]  [\u003cffffffff8136522f\u003e] debug_dma_unmap_page+0x5f/0x70\n[   46.657004]  [\u003cffffffffa030f0f0\u003e] ? e100_tx_clean+0x30/0x210 [e100]\n[   46.657004]  [\u003cffffffffa030f1a8\u003e] e100_tx_clean+0xe8/0x210 [e100]\n[   46.657004]  [\u003cffffffffa030fc6f\u003e] e100_poll+0x56f/0x6c0 [e100]\n[   46.657004]  [\u003cffffffff8159dce1\u003e] ? net_rx_action+0xa1/0x370\n[   46.657004]  [\u003cffffffff8159ddb2\u003e] net_rx_action+0x172/0x370\n[   46.657004]  [\u003cffffffff810703bf\u003e] __do_softirq+0xef/0x3d0\n[   46.657004]  [\u003cffffffff816e4ebc\u003e] call_softirq+0x1c/0x30\n[   46.657004]  [\u003cffffffff8101c485\u003e] do_softirq+0x85/0xc0\n[   46.657004]  [\u003cffffffff81070885\u003e] irq_exit+0xd5/0xe0\n[   46.657004]  [\u003cffffffff816e5756\u003e] do_IRQ+0x56/0xc0\n[   46.657004]  [\u003cffffffff816dacb2\u003e] common_interrupt+0x72/0x72\n[   46.657004]  \u003cEOI\u003e  [\u003cffffffff816da1eb\u003e] ?\n_raw_spin_unlock_irqrestore+0x3b/0x70\n[   46.657004]  [\u003cffffffff816d124d\u003e] __slab_free+0x58/0x38b\n[   46.657004]  [\u003cffffffff81214424\u003e] ? fsnotify_clear_marks_by_inode+0x34/0x120\n[   46.657004]  [\u003cffffffff811b0417\u003e] ? kmem_cache_free+0x97/0x320\n[   46.657004]  [\u003cffffffff8157fc14\u003e] ? sock_destroy_inode+0x34/0x40\n[   46.657004]  [\u003cffffffff8157fc14\u003e] ? sock_destroy_inode+0x34/0x40\n[   46.657004]  [\u003cffffffff811b0692\u003e] kmem_cache_free+0x312/0x320\n[   46.657004]  [\u003cffffffff8157fc14\u003e] sock_destroy_inode+0x34/0x40\n[   46.657004]  [\u003cffffffff811e8c28\u003e] destroy_inode+0x38/0x60\n[   46.657004]  [\u003cffffffff811e8d5e\u003e] evict+0x10e/0x1a0\n[   46.657004]  [\u003cffffffff811e9605\u003e] iput+0xf5/0x180\n[   46.657004]  [\u003cffffffff811e4338\u003e] dput+0x248/0x310\n[   46.657004]  [\u003cffffffff811ce0e1\u003e] __fput+0x171/0x240\n[   46.657004]  [\u003cffffffff811ce26e\u003e] ____fput+0xe/0x10\n[   46.657004]  [\u003cffffffff8108d54c\u003e] task_work_run+0xac/0xe0\n[   46.657004]  [\u003cffffffff8106c6ed\u003e] do_exit+0x26d/0xc30\n[   46.657004]  [\u003cffffffff8109eccc\u003e] ? finish_task_switch+0x7c/0x120\n[   46.657004]  [\u003cffffffff816dad58\u003e] ? retint_swapgs+0x13/0x1b\n[   46.657004]  [\u003cffffffff8106d139\u003e] do_group_exit+0x49/0xc0\n[   46.657004]  [\u003cffffffff8106d1c4\u003e] sys_exit_group+0x14/0x20\n[   46.657004]  [\u003cffffffff816e3b19\u003e] system_call_fastpath+0x16/0x1b\n[   46.657004] ---[ end trace 4468c44e2156e7d1 ]---\n[   46.657004] Mapped at:\n[   46.657004]  [\u003cffffffff813663d1\u003e] debug_dma_map_page+0x91/0x140\n[   46.657004]  [\u003cffffffffa030e8eb\u003e] e100_xmit_prepare+0x12b/0x1c0 [e100]\n[   46.657004]  [\u003cffffffffa030c924\u003e] e100_exec_cb+0x84/0x140 [e100]\n[   46.657004]  [\u003cffffffffa030e56a\u003e] e100_xmit_frame+0x3a/0x190 [e100]\n[   46.657004]  [\u003cffffffff8159ee89\u003e] dev_hard_start_xmit+0x259/0x6c0\n\nEasy fix, modify the cb paramter to e100_exec_cb to return an error, and do the\ndma_mapping_error check in the obvious place\n\nThis was reported previously here:\nhttp://article.gmane.org/gmane.linux.network/257893\n\nBut nobody stepped up and fixed it.\n\nCC: Josh Boyer \u003cjwboyer@redhat.com\u003e\nCC: e1000-devel@lists.sourceforge.net\nSigned-off-by: Neil Horman \u003cnhorman@tuxdriver.com\u003e\nReported-by: Michal Jaegermann \u003cmichal@harddata.com\u003e\nTested-by: Aaron Brown \u003caaron.f.brown@intel.com\u003e\nSigned-off-by: Jeff Kirsher \u003cjeffrey.t.kirsher@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "51de01700707167209f92a269ddf85433d29fcb3",
      "tree": "782e91db310e51c63bba76b477deec752e400566",
      "parents": [
        "f94eeb423bd6061fe68c490dcb11c74e5267f6a2",
        "eb04e0ac198cec3bab407ad220438dfa65c19c67"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 10:26:49 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 10:26:49 2013 -0700"
      },
      "message": "Merge tag \u0027nfs-for-3.9-5\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs\n\nPull another nfs fixlet from Trond Myklebust:\n \"I suddenly noticed that a one-line issue that I _thought_ I had fixed\n  with the nfs41_walk_client_list patch was apparently still there in\n  the pull request I sent earlier today.  I\u0027m very sorry for not\n  catching that in time.\n\n   - Fix a brain fart in nfs41_walk_client_list\"\n\n* tag \u0027nfs-for-3.9-5\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs:\n  NFSv4: Doh! Typo in the fix to nfs41_walk_client_list\n"
    },
    {
      "commit": "600468d0686096ddc1000c8a2e69475931084414",
      "tree": "15255c410dcba84bcb7e26a9211625eb5b4a7b91",
      "parents": [
        "aaaf165b247a1a8ea5cd2936d9fd1eefe5e580f9"
      ],
      "author": {
        "name": "Gregory CLEMENT",
        "email": "gregory.clement@free-electrons.com",
        "time": "Fri Apr 05 14:32:52 2013 +0200"
      },
      "committer": {
        "name": "Jason Cooper",
        "email": "jason@lakedaemon.net",
        "time": "Wed Apr 10 16:59:14 2013 +0000"
      },
      "message": "arm: mvebu: Fix the irq map function in SMP mode\n\nThis patch fix the regression introduced by the commit 3202bf0157ccb\n\"arm: mvebu: Improve the SMP support of the interrupt controller\":\nGPIO IRQ were no longer delivered to the CPUs.\n\nTo be delivered to a CPU an interrupt must be enabled at CPU level and\nat interrupt source level. Before the offending patch, all the\ninterrupts were enabled at source level during map() function. Mask()\nand unmask() was done by handling the per-CPU part. It was fine when\nrunning in UP with only one CPU.\n\nThe offending patch added support for SMP, in this case mask() and\nunmask() was done by handling the interrupt source level part. The\nper-CPU level part was handled by the affinity API to select the CPU\nwhich will receive the interrupt. (Due to some hardware limitation\nonly one CPU at a time can received a given interrupt).\n\nFor \"normal\" interrupt __setup_irq() was called when an irq was\nregistered. irq_set_affinity() is called from this function, which\nenabled the interrupt on one of the CPUs. Whereas for GPIO IRQ which\nwere chained interrupts, the irq_set_affinity() was never called and\nnone of the CPUs was selected to receive the interrupt.\n\nWith this patch all the interrupt are enable on the current CPU during\nmap() function. Enabling the interrupts on a CPU doesn\u0027t depend\nanymore on irq_set_affinity() and then the chained irq are not anymore\na special case. However the CPU which will receive the irq can still\nbe modify later using irq_set_affinity().\n\nTested with Mirabox (A370) and Openblocks AX3 (AXP), rootfs mounted\nover NFS, compiled with CONFIG_SMP\u003dy/N.\n\nSigned-off-by: Gregory CLEMENT \u003cgregory.clement@free-electrons.com\u003e\nReported-by: Ryan Press \u003cryan@presslab.us\u003e\nInvestigated-by: Ezequiel Garcia \u003cezequiel.garcia@free-electrons.com\u003e\nTested-by: Ezequiel Garcia \u003cezequiel.garcia@free-electrons.com\u003e\nTested-by: Ryan Press \u003cryan@presslab.us\u003e\nSigned-off-by: Jason Cooper \u003cjason@lakedaemon.net\u003e\n"
    },
    {
      "commit": "eb04e0ac198cec3bab407ad220438dfa65c19c67",
      "tree": "3decd90ccd1d0d8aecb99e8c0fe0275ce05784d0",
      "parents": [
        "fa332941c0c7c00e3420078268b7558d0ef792b5"
      ],
      "author": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Wed Apr 10 12:44:18 2013 -0400"
      },
      "committer": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Wed Apr 10 12:57:29 2013 -0400"
      },
      "message": "NFSv4: Doh! Typo in the fix to nfs41_walk_client_list\n\nMake sure that we set the status to 0 on success. Missed in testing\nbecause it never appears when doing multiple mounts to _different_\nservers.\n\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e # 3.7.x: 7b1f1fd: NFSv4/4.1: Fix bugs in nfs4[01]_walk_client_list\n"
    },
    {
      "commit": "aaaf165b247a1a8ea5cd2936d9fd1eefe5e580f9",
      "tree": "d944606a4de38c2d1b7ec1d4b346f362d95a7dc5",
      "parents": [
        "8f08d6667287241f6818d35e02b223fb5df97cf1"
      ],
      "author": {
        "name": "Nigel Roberts",
        "email": "nigel@nobiscuit.com",
        "time": "Sun Mar 31 15:13:24 2013 +1100"
      },
      "committer": {
        "name": "Jason Cooper",
        "email": "jason@lakedaemon.net",
        "time": "Wed Apr 10 16:50:58 2013 +0000"
      },
      "message": "Fix GE0/GE1 init on ix2-200 as GE0 has no PHY\n\nSigned-off-by: Jason Cooper \u003cjason@lakedaemon.net\u003e\n"
    },
    {
      "commit": "f94eeb423bd6061fe68c490dcb11c74e5267f6a2",
      "tree": "ba13b23b29246af462c709761b361f0b2092ea4b",
      "parents": [
        "d02a9a89db3437467de45a451739e520877f4a48",
        "fa332941c0c7c00e3420078268b7558d0ef792b5"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 09:00:51 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Wed Apr 10 09:00:51 2013 -0700"
      },
      "message": "Merge tag \u0027nfs-for-3.9-4\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs\n\nPull NFS client bugfixes from Trond Myklebust:\n - fix for memory corruption issues in nfs4[01]_walk_client_list (stable)\n - fix for an Oopsable bug in rpc_clone_client (stable)\n - another state manager deadlock in the NFSv4 open code\n - memory leaks in nfs4_discover_server_trunking and rpc_new_client\n\n* tag \u0027nfs-for-3.9-4\u0027 of git://git.linux-nfs.org/projects/trondmy/linux-nfs:\n  NFSv4: Fix another potential state manager deadlock\n  SUNRPC: Fix a potential memory leak in rpc_new_client\n  NFSv4/4.1: Fix bugs in nfs4[01]_walk_client_list\n  NFSv4: Fix a memory leak in nfs4_discover_server_trunking\n  SUNRPC: Remove extra xprt_put()\n"
    },
    {
      "commit": "765024697807ad1e1cac332aa891253ca4a339da",
      "tree": "11f93e7ecd27a427b6e5253f5fca8b32d883d830",
      "parents": [
        "0b94c57717054811dd836d582585d3fb4856b43f"
      ],
      "author": {
        "name": "Peter Ujfalusi",
        "email": "peter.ujfalusi@ti.com",
        "time": "Tue Apr 09 16:33:06 2013 +0200"
      },
      "committer": {
        "name": "Vinod Koul",
        "email": "vinod.koul@intel.com",
        "time": "Wed Apr 10 10:33:30 2013 +0530"
      },
      "message": "dmaengine: omap-dma: Start DMA without delay for cyclic channels\n\ncyclic DMA is only used by audio which needs DMA to be started without a\ndelay.\nIf the DMA for audio is started using the tasklet we experience random\nchannel switch (to be more precise: channel shift).\n\nReported-by: Peter Meerwald \u003cpmeerw@pmeerw.net\u003e\nCC: stable@vger.kernel.org  # v3.7+\nSigned-off-by: Peter Ujfalusi \u003cpeter.ujfalusi@ti.com\u003e\nAcked-by: Santosh Shilimkar \u003csantosh.shilimkar@ti.com\u003e\nAcked-by: Russell King \u003crmk+kernel@arm.linux.org.uk\u003e\nSigned-off-by: Vinod Koul \u003cvinod.koul@intel.com\u003e\n"
    },
    {
      "commit": "d02a9a89db3437467de45a451739e520877f4a48",
      "tree": "a5cbd992bb3ee41470fbe6d5bbd16d4fdb960ef2",
      "parents": [
        "49b442caa4ed719aa7e2522cdd5c8abf8607b860",
        "d47cbd5bcee7c7a08fc0283dda465375fa1b1fda"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 20:19:50 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 20:19:50 2013 -0700"
      },
      "message": "Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6\n\nPull crypto fixes from Herbert Xu:\n \"This fixes a GCM bug that breaks IPsec and a compile problem in\n  ux500.\"\n\n* git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:\n  crypto: ux500 - add missing comma\n  crypto: gcm - fix assumption that assoc has one segment\n"
    },
    {
      "commit": "49b442caa4ed719aa7e2522cdd5c8abf8607b860",
      "tree": "dcc105e45ae1b7669302731a9e4574fb853b4128",
      "parents": [
        "e8f2b548de7ae65e17ee911e54712a3f26f69c60",
        "1812a3db0874be1d1524086da9e84397b800f546"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 17:41:26 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 17:41:26 2013 -0700"
      },
      "message": "Merge branch \u0027drm-fixes\u0027 of git://people.freedesktop.org/~airlied/linux\n\nPull drm fixes from Dave Airlie:\n \"Just a spare semicolon in nouveau that caused some issues, and an\n  mgag200 fix\"\n\n* \u0027drm-fixes\u0027 of git://people.freedesktop.org/~airlied/linux:\n  drm/mgag200: Index 24 in extended CRTC registers is 24 in hex, not decimal.\n  drm/nouveau: fix unconditional return waiting on memory\n"
    },
    {
      "commit": "1812a3db0874be1d1524086da9e84397b800f546",
      "tree": "e4ebd15239d6c877859357eab373136efd31c10c",
      "parents": [
        "c9cdee17653409dedeb65c0733a253f6fe3fc7d6"
      ],
      "author": {
        "name": "Christopher Harvey",
        "email": "charvey@matrox.com",
        "time": "Fri Apr 05 10:51:15 2013 -0400"
      },
      "committer": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Wed Apr 10 09:48:24 2013 +1000"
      },
      "message": "drm/mgag200: Index 24 in extended CRTC registers is 24 in hex, not decimal.\n\nThis change properly enables the \"requester\" in G200ER cards that is\nresponsible for getting pixels out of memory and clocking them out to\nthe screen.\n\nSigned-off-by: Christopher Harvey \u003ccharvey@matrox.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Dave Airlie \u003cairlied@redhat.com\u003e\n"
    },
    {
      "commit": "83e03b3fe4daffdebbb42151d5410d730ae50bd1",
      "tree": "007c3030b619ba28965c60e3e8fa57dd9bbc236e",
      "parents": [
        "395b97a3aeff0b8d949ee3e67bf8c11c5ffd6861"
      ],
      "author": {
        "name": "Namhyung Kim",
        "email": "namhyung.kim@lge.com",
        "time": "Mon Apr 01 21:46:23 2013 +0900"
      },
      "committer": {
        "name": "Steven Rostedt",
        "email": "rostedt@goodmis.org",
        "time": "Tue Apr 09 18:54:04 2013 -0400"
      },
      "message": "tracing: Fix double free when function profile init failed\n\nOn the failure path, stat-\u003estart and stat-\u003epages will refer same page.\nSo it\u0027ll attempt to free the same page again and get kernel panic.\n\nLink: http://lkml.kernel.org/r/1364820385-32027-1-git-send-email-namhyung@kernel.org\n\nCc: Frederic Weisbecker \u003cfweisbec@gmail.com\u003e\nCc: Namhyung Kim \u003cnamhyung.kim@lge.com\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Namhyung Kim \u003cnamhyung@kernel.org\u003e\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\n"
    },
    {
      "commit": "f934af05cb1bf20558542185299394a69060b829",
      "tree": "c1d2c18ae43895bcec30e25411b2c2e5bf2dbe5e",
      "parents": [
        "31880c37c11e28cb81c70757e38392b42e695dc6"
      ],
      "author": {
        "name": "Mark Salter",
        "email": "msalter@redhat.com",
        "time": "Tue Apr 09 15:35:46 2013 -0400"
      },
      "committer": {
        "name": "Mark Salter",
        "email": "msalter@redhat.com",
        "time": "Tue Apr 09 15:35:46 2013 -0400"
      },
      "message": "add memory barrier to arch_local_irq_restore\n\narch_local_irq_save() and friends are required to act as compiler\nmemory barriers. This patch adds a \"memory\" clobber to the inline\nasm code in arch_local_irq_restore() which is used as the building\nblock for other functions needing to set/clear the interrupt enable\nin the CSR register.\n\nSigned-off-by: Mark Salter \u003cmsalter@redhat.com\u003e\n"
    },
    {
      "commit": "e8f2b548de7ae65e17ee911e54712a3f26f69c60",
      "tree": "0b332c254088effc61d832f9e95d65861251214e",
      "parents": [
        "43ecdb0d31cf63d99d060af0585bf59be7fafcb2",
        "e9c5d8a562f01b211926d70443378eb14b29a676"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 12:22:49 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 12:22:49 2013 -0700"
      },
      "message": "Merge branch \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs\n\nPull vfs fixes from Al Viro:\n \"A nasty bug in fs/namespace.c caught by Andrey + a couple of less\n  serious unpleasantness - ecryptfs misc device playing hopeless games\n  with try_module_get() and palinfo procfs support being...  not quite\n  correctly done, to be polite.\"\n\n* \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs:\n  mnt: release locks on error path in do_loopback\n  palinfo fixes\n  procfs: add proc_remove_subtree()\n  ecryptfs: close rmmod race\n"
    },
    {
      "commit": "43ecdb0d31cf63d99d060af0585bf59be7fafcb2",
      "tree": "cc2892b7c810ea4b03db93f1177f498fcdc166a8",
      "parents": [
        "27387dd8c62d24140d80382918aff69d4e0821ce",
        "904c680c7bf016a8619a045850937427f8d7368c"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 12:07:01 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 12:07:01 2013 -0700"
      },
      "message": "Merge tag \u0027vfio-v3.9-rc7\u0027 of git://github.com/awilliam/linux-vfio\n\nPull vfio overflow fix from Alex Williamson.\n\n* tag \u0027vfio-v3.9-rc7\u0027 of git://github.com/awilliam/linux-vfio:\n  vfio-pci: Fix possible integer overflow\n"
    },
    {
      "commit": "27387dd8c62d24140d80382918aff69d4e0821ce",
      "tree": "328486d6856a8d7a22f09314c8c28a0f33d7671e",
      "parents": [
        "386afc91144b36b42117b0092893f15bc8798a80",
        "c2fccc1c9f7c81700cbac2120a4ad5441dd37004"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 12:05:41 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 12:05:41 2013 -0700"
      },
      "message": "Merge tag \u0027for-linus-20130409\u0027 of git://git.kernel.dk/linux-block\n\nPull block fixes from Jens Axboe:\n \"I\u0027ve got a few smaller fixes queued up for 3.9 that should go in.  The\n  major one is the loop regression, the others are nice fixes on their\n  own though.  It contains:\n\n   - Fix for unitialized var in the block sysfs code, courtesy of Arnd\n     and gcc-4.8.\n\n   - Two fixes for mtip32xx, fixing probe and command timeout.  Also a\n     debug measure that could have waited for 3.10, but it\u0027s driver\n     only, so I let it slip in.\n\n   - Revert the loop partition cleanup fix, it could cause a deadlock on\n     auto-teardown as part of umount.  The fix is clear, but at this\n     point we just want to revert it and get a real fix in for 3.10.\"\n\n* tag \u0027for-linus-20130409\u0027 of git://git.kernel.dk/linux-block:\n  Revert \"loop: cleanup partitions when detaching loop device\"\n  mtip32xx: fix two smatch warnings\n  mtip32xx: Add debugfs entry device_status\n  mtip32xx: return 0 from pci probe in case of rebuild\n  mtip32xx: recovery from command timeout\n  block: avoid using uninitialized value in from queue_var_store\n"
    },
    {
      "commit": "e9c5d8a562f01b211926d70443378eb14b29a676",
      "tree": "7cd74c19415b6390b44110ec3fe756deaabd15d3",
      "parents": [
        "ccf932042fa7785832d8989ba1369cd7c7f5d7a1"
      ],
      "author": {
        "name": "Andrey Vagin",
        "email": "avagin@openvz.org",
        "time": "Tue Apr 09 17:33:29 2013 +0400"
      },
      "committer": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Tue Apr 09 14:09:50 2013 -0400"
      },
      "message": "mnt: release locks on error path in do_loopback\n\ndo_loopback calls lock_mount(path) and forget to unlock_mount\nif clone_mnt or copy_mnt fails.\n\n[   77.661566] \u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n[   77.662939] [ BUG: lock held when returning to user space! ]\n[   77.664104] 3.9.0-rc5+ #17 Not tainted\n[   77.664982] ------------------------------------------------\n[   77.666488] mount/514 is leaving the kernel with locks still held!\n[   77.668027] 2 locks held by mount/514:\n[   77.668817]  #0:  (\u0026sb-\u003es_type-\u003ei_mutex_key#7){+.+.+.}, at: [\u003cffffffff811cca22\u003e] lock_mount+0x32/0xe0\n[   77.671755]  #1:  (\u0026namespace_sem){+++++.}, at: [\u003cffffffff811cca3a\u003e] lock_mount+0x4a/0xe0\n\nSigned-off-by: Andrey Vagin \u003cavagin@openvz.org\u003e\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n"
    },
    {
      "commit": "ccf932042fa7785832d8989ba1369cd7c7f5d7a1",
      "tree": "2325aef9ad5c7f08212f1cfad3e29c84a2185732",
      "parents": [
        "8ce584c7416d8a85a6f3edc17d1cddefe331e87e"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Sun Mar 31 22:34:37 2013 -0400"
      },
      "committer": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Tue Apr 09 14:09:44 2013 -0400"
      },
      "message": "palinfo fixes\n\n\t* check for proc_mkdir() failures\n\t* fix buffer overrun - sizeof(format string) is *not* enough to\nhold sprintf() result.\n\t* use proc_remove_subtree(); life\u0027s much easier with it\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n"
    },
    {
      "commit": "8ce584c7416d8a85a6f3edc17d1cddefe331e87e",
      "tree": "4fe64bd588ba8e2239cfa893e1bddb3e3b30c232",
      "parents": [
        "52f21999c7b921a0390708b66ed286282c2e4bee"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Sat Mar 30 20:13:46 2013 -0400"
      },
      "committer": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Tue Apr 09 14:09:17 2013 -0400"
      },
      "message": "procfs: add proc_remove_subtree()\n\njust what it sounds like; do that only to procfs subtrees you\u0027ve\ncreated - doing that to something shared with another driver is\nnot only antisocial, but might cause interesting races with\nproc_create() and its ilk.\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n"
    },
    {
      "commit": "52f21999c7b921a0390708b66ed286282c2e4bee",
      "tree": "ff7cfd9652e1e0384a17615b21dc37ffc0c3a5c5",
      "parents": [
        "de55eb1d60d2ed0f1ba5e13226d91b3bfbe1c108"
      ],
      "author": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Thu Mar 28 13:30:23 2013 -0400"
      },
      "committer": {
        "name": "Al Viro",
        "email": "viro@zeniv.linux.org.uk",
        "time": "Tue Apr 09 14:08:16 2013 -0400"
      },
      "message": "ecryptfs: close rmmod race\n\nSigned-off-by: Al Viro \u003cviro@zeniv.linux.org.uk\u003e\n"
    },
    {
      "commit": "386afc91144b36b42117b0092893f15bc8798a80",
      "tree": "1323fff10c28d7d802bb57d7e11e11907afe7cc0",
      "parents": [
        "3e2e0d2c222bdf5bafd722dec1618fa6073ef372"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 10:48:33 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 10:48:33 2013 -0700"
      },
      "message": "spinlocks and preemption points need to be at least compiler barriers\n\nIn UP and non-preempt respectively, the spinlocks and preemption\ndisable/enable points are stubbed out entirely, because there is no\nregular code that can ever hit the kind of concurrency they are meant to\nprotect against.\n\nHowever, while there is no regular code that can cause scheduling, we\n_do_ end up having some exceptional (literally!) code that can do so,\nand that we need to make sure does not ever get moved into the critical\nregion by the compiler.\n\nIn particular, get_user() and put_user() is generally implemented as\ninline asm statements (even if the inline asm may then make a call\ninstruction to call out-of-line), and can obviously cause a page fault\nand IO as a result.  If that inline asm has been scheduled into the\nmiddle of a preemption-safe (or spinlock-protected) code region, we\nobviously lose.\n\nNow, admittedly this is *very* unlikely to actually ever happen, and\nwe\u0027ve not seen examples of actual bugs related to this.  But partly\nexactly because it\u0027s so hard to trigger and the resulting bug is so\nsubtle, we should be extra careful to get this right.\n\nSo make sure that even when preemption is disabled, and we don\u0027t have to\ngenerate any actual *code* to explicitly tell the system that we are in\na preemption-disabled region, we need to at least tell the compiler not\nto move things around the critical region.\n\nThis patch grew out of the same discussion that caused commits\n79e5f05edcbf (\"ARC: Add implicit compiler barrier to raw_local_irq*\nfunctions\") and 3e2e0d2c222b (\"tile: comment assumption about\n__insn_mtspr for \u003casm/irqflags.h\u003e\") to come about.\n\nNote for stable: use discretion when/if applying this.  As mentioned,\nthis bug may never have actually bitten anybody, and gcc may never have\ndone the required code motion for it to possibly ever trigger in\npractice.\n\nCc: stable@vger.kernel.org\nCc: Steven Rostedt \u003csrostedt@redhat.com\u003e\nCc: Peter Zijlstra \u003cpeterz@infradead.org\u003e\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "7b9a035f0ce08e7a77831075e8ac6bf971d0f637",
      "tree": "efa23041f8511d55c4fab7a6fa7c4a849da85114",
      "parents": [
        "ca10b9e9a8ca7342ee07065289cbe74ac128c169",
        "3480a2125923e4b7a56d79efc76743089bf273fc"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Apr 09 13:24:35 2013 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Apr 09 13:24:35 2013 -0400"
      },
      "message": "Merge branch \u0027fixes-for-3.9\u0027 of git://gitorious.org/linux-can/linux-can\n\nMarc Kleine-Budde says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nhere\u0027s a fix for the v3.9 release cycle, if not too late:\n\nWei Yongjun contributes a patch for the can-gw protocoll. The patch fixes the\nmemory allocated with kmem_cache_alloc(), is now freed using kmem_cache_free(),\nnot kfree().\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ca10b9e9a8ca7342ee07065289cbe74ac128c169",
      "tree": "33842f41a127f9da904ddd5d61839590e986e420",
      "parents": [
        "c802d759623acbd6e1ee9fbdabae89159a513913"
      ],
      "author": {
        "name": "Eric Dumazet",
        "email": "edumazet@google.com",
        "time": "Mon Apr 08 17:58:11 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Tue Apr 09 13:23:11 2013 -0400"
      },
      "message": "selinux: add a skb_owned_by() hook\n\nCommit 90ba9b1986b5ac (tcp: tcp_make_synack() can use alloc_skb())\nbroke certain SELinux/NetLabel configurations by no longer correctly\nassigning the sock to the outgoing SYNACK packet.\n\nCost of atomic operations on the LISTEN socket is quite big,\nand we would like it to happen only if really needed.\n\nThis patch introduces a new security_ops-\u003eskb_owned_by() method,\nthat is a void operation unless selinux is active.\n\nReported-by: Miroslav Vadkerti \u003cmvadkert@redhat.com\u003e\nDiagnosed-by: Paul Moore \u003cpmoore@redhat.com\u003e\nSigned-off-by: Eric Dumazet \u003cedumazet@google.com\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: linux-security-module@vger.kernel.org\nAcked-by: James Morris \u003cjames.l.morris@oracle.com\u003e\nTested-by: Paul Moore \u003cpmoore@redhat.com\u003e\nAcked-by: Paul Moore \u003cpmoore@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "fa332941c0c7c00e3420078268b7558d0ef792b5",
      "tree": "d1063f53f5b19de2575c9007df4054773098f411",
      "parents": [
        "f05c124a70a4953a66acbd6d6c601ea1eb5d0fa7"
      ],
      "author": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Tue Apr 09 12:56:52 2013 -0400"
      },
      "committer": {
        "name": "Trond Myklebust",
        "email": "Trond.Myklebust@netapp.com",
        "time": "Tue Apr 09 13:19:35 2013 -0400"
      },
      "message": "NFSv4: Fix another potential state manager deadlock\n\nDon\u0027t hold the NFSv4 sequence id while we check for open permission.\nThe call to ACCESS may block due to reboot recovery.\n\nSigned-off-by: Trond Myklebust \u003cTrond.Myklebust@netapp.com\u003e\n"
    },
    {
      "commit": "3e2e0d2c222bdf5bafd722dec1618fa6073ef372",
      "tree": "04ea03bb23d59080ce52012095591874cad6cf49",
      "parents": [
        "84ee9805bc7406bee35f2d62001440c81059f073"
      ],
      "author": {
        "name": "Chris Metcalf",
        "email": "cmetcalf@tilera.com",
        "time": "Tue Apr 09 12:33:07 2013 -0400"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Tue Apr 09 10:08:14 2013 -0700"
      },
      "message": "tile: comment assumption about __insn_mtspr for \u003casm/irqflags.h\u003e\n\nThe arch_local_irq_save(), etc., routines are required to function\nas compiler barriers.  They do, but it\u0027s subtle and requires knowing\nthat the gcc builtin __insn_mtspr() is marked as a memory clobber.\nProvide a comment explaining the assumption.\n\nSigned-off-by: Chris Metcalf \u003ccmetcalf@tilera.com\u003e\n[ This came about from me wondering about the synchronization rules of\n  __insn_mtspr()   - Linus ]\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "51a246aa5c0a14b3d34a5c6d3c9e271c784b127f",
      "tree": "da3de8af869c4262a0d983c4c20e5a3d9d31b1f5",
      "parents": [
        "31880c37c11e28cb81c70757e38392b42e695dc6"
      ],
      "author": {
        "name": "Mark Brown",
        "email": "broonie@opensource.wolfsonmicro.com",
        "time": "Tue Apr 09 18:03:25 2013 +0100"
      },
      "committer": {
        "name": "Mark Brown",
        "email": "broonie@opensource.wolfsonmicro.com",
        "time": "Tue Apr 09 18:03:25 2013 +0100"
      },
      "message": "regmap: Back out work buffer fix\n\nThis reverts commit bc8ce4 (regmap: don\u0027t corrupt work buffer in\n_regmap_raw_write()) since it turns out that it can cause issues when\ntaken in isolation from the other changes in -next that lead to its\ndiscovery.  On the basis that nobody noticed the problems for quite some\ntime without that subsequent work let\u0027s drop it from v3.9.\n\nSigned-off-by: Mark Brown \u003cbroonie@opensource.wolfsonmicro.com\u003e\n"
    },
    {
      "commit": "b94db2ac9e6aad2bdb51ae086b2806c2ceabd5b3",
      "tree": "a7ad5e0655b004ffcbceb620204a8c0e9a3dc080",
      "parents": [
        "0a01216c452d092b16c5a559cca339ad60193457",
        "646dd2f0a980949b05042792fbadd72b735c3eda"
      ],
      "author": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Tue Apr 09 17:27:06 2013 +0200"
      },
      "committer": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Tue Apr 09 17:27:06 2013 +0200"
      },
      "message": "Merge tag \u0027samsung-fixes-for-v3.9\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung into fixes\n\nFrom Kukjin Kim \u003ckgene.kim@samsung.com\u003e:\n\nsamsung fixes can support s3c24xx for v3.9\n\n* tag \u0027samsung-fixes-for-v3.9\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/kgene/linux-samsung:\n  ARM: S3C24XX: Fix interrupt pending register offset of the EINT controller\n  ARM: S3C24XX: Correct NR_IRQS definition for s3c2440\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n"
    },
    {
      "commit": "646dd2f0a980949b05042792fbadd72b735c3eda",
      "tree": "372fb8673199a4157235ffbbf4d66e3f0a55b10e",
      "parents": [
        "b530f742ac27460d41d35b638ad6aad92044a982"
      ],
      "author": {
        "name": "Sylwester Nawrocki",
        "email": "s.nawrocki@samsung.com",
        "time": "Tue Apr 09 23:52:21 2013 +0900"
      },
      "committer": {
        "name": "Kukjin Kim",
        "email": "kgene.kim@samsung.com",
        "time": "Wed Apr 10 00:09:30 2013 +0900"
      },
      "message": "ARM: S3C24XX: Fix interrupt pending register offset of the EINT controller\n\nThe external pending interrupt register address (EINTPEND) offset is\n0xa8, not 0x08. Without this patch the external interrupts are not\nproperly acknowledged, which may lead to an interrupt storm and the\nsystem hang as soon as any external interrupt is requested.\n\nSigned-off-by: Sylwester Nawrocki \u003cs.nawrocki@samsung.com\u003e\nReviewed-by: Heiko Stuebner \u003cheiko@sntech.de\u003e\nSigned-off-by: Kukjin Kim \u003ckgene.kim@samsung.com\u003e\n"
    },
    {
      "commit": "b530f742ac27460d41d35b638ad6aad92044a982",
      "tree": "264303972571c98115df10127943576d4e1c3a53",
      "parents": [
        "31880c37c11e28cb81c70757e38392b42e695dc6"
      ],
      "author": {
        "name": "Sylwester Nawrocki",
        "email": "s.nawrocki@samsung.com",
        "time": "Mon Apr 08 21:39:45 2013 +0900"
      },
      "committer": {
        "name": "Kukjin Kim",
        "email": "kgene.kim@samsung.com",
        "time": "Tue Apr 09 23:46:37 2013 +0900"
      },
      "message": "ARM: S3C24XX: Correct NR_IRQS definition for s3c2440\n\nDue to NR_IRQS being incorrectly defined not all IRQ domains can\nbe registered for S3C2440. It causes following errors on a s3c2440\nSoC based board:\n\nNR_IRQS:89\nS3C2440: IRQ Support\nirq: clearing pending status 00000002\n------------[ cut here ]------------\nWARNING: at kernel/irq/irqdomain.c:234 0xc0056ed0()\n...\nirq: could not create irq-domain\n...\ns3c2410-wdt s3c2410-wdt: failed to install irq (-22)\ns3c2410-wdt: probe of s3c2410-wdt failed with error -22\n...\nsamsung-uart s3c2440-uart.0: cannot get irq 74\n\nFix this by increasing NR_IRQS to at least (IRQ_S3C2443_AC97 + 1)\nif CPU_S3C2440 is selected, so the subintc IRQ domain gets properly\nregistered.\n\nSigned-off-by: Tomasz Figa \u003ctomasz.figa@gmail.com\u003e\nSigned-off-by: Sylwester Nawrocki \u003cs.nawrocki@samsung.com\u003e\nAcked-by: Heiko Stuebner \u003cheiko@sntech.de\u003e\nSigned-off-by: Kukjin Kim \u003ckgene.kim@samsung.com\u003e\n"
    },
    {
      "commit": "0a01216c452d092b16c5a559cca339ad60193457",
      "tree": "10a2dac7501ee889f5b0b1634abd16c81d3952d0",
      "parents": [
        "81211c4cc04ca33f7c3ae10de547113e34d9a59e",
        "e8094b2c17126c7dfdeafa296f206a4a3b122d23"
      ],
      "author": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Tue Apr 09 14:56:08 2013 +0200"
      },
      "committer": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Tue Apr 09 14:56:08 2013 +0200"
      },
      "message": "Merge tag \u0027imx-fixes-3.9-5\u0027 of git://git.linaro.org/people/shawnguo/linux-2.6 into fixes\n\nFrom Shawn Guo \u003cshawn.guo@linaro.org\u003e:\n\nThe imx fixes for 3.9, take 5:\n\n* A couple imx35 clock fixes for regressions caused by common clock\n  framework conversion.  The admux and iomux get disabled by common\n  clock framework late initcall, and hence causes problems.\n* Add missing twd clock lookup in device tree.  This becomes required\n  since commit bd60345 (ARM: use device tree to get smp_twd clock)\n  forces all DT boot to find lookup from device tree.\n* Fix imx6q ldb_di clock parents mismatch per reference manual.\n\n* tag \u0027imx-fixes-3.9-5\u0027 of git://git.linaro.org/people/shawnguo/linux-2.6: (217 commits)\n  ARM i.MX6: Fix ldb_di clock selection\n  ARM: imx: provide twd clock lookup from device tree\n  ARM: imx35 Bugfix admux clock\n  ARM: clk-imx35: Bugfix iomux clock\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n"
    },
    {
      "commit": "e8094b2c17126c7dfdeafa296f206a4a3b122d23",
      "tree": "d3a26bcdc5d852c71d245118abc16d36ef43a508",
      "parents": [
        "2bb4b70b1dbb45f0c1a3ba98066e6635d8aa3fe0"
      ],
      "author": {
        "name": "Dirk Behme",
        "email": "dirk.behme@de.bosch.com",
        "time": "Thu Apr 04 16:03:29 2013 +0200"
      },
      "committer": {
        "name": "Shawn Guo",
        "email": "shawn.guo@linaro.org",
        "time": "Tue Apr 09 19:48:09 2013 +0800"
      },
      "message": "ARM i.MX6: Fix ldb_di clock selection\n\nAccording to the recent i.MX6 Quad technical reference manual, mode 0x4 (100b)\nof the CCM_CS2DCR register (address 0x020C402C) bits [11-9] and [14-12] select\nthe PLL3 clock, and not the PLL3 PFD1 540M clock. In our code, the PLL3 root\nclock is named \u0027pll3_usb_otg\u0027, select this instead of the 540M clock.\n\nSigned-off-by: Dirk Behme \u003cdirk.behme@de.bosch.com\u003e\nSigned-off-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\n"
    },
    {
      "commit": "2bb4b70b1dbb45f0c1a3ba98066e6635d8aa3fe0",
      "tree": "46a5a30942800d75aa72ccfb4890568d6f610359",
      "parents": [
        "75498083e25e96932ad998ffdeadb17234c68d3a"
      ],
      "author": {
        "name": "Shawn Guo",
        "email": "shawn.guo@linaro.org",
        "time": "Wed Apr 03 23:50:09 2013 +0800"
      },
      "committer": {
        "name": "Shawn Guo",
        "email": "shawn.guo@linaro.org",
        "time": "Tue Apr 09 19:46:31 2013 +0800"
      },
      "message": "ARM: imx: provide twd clock lookup from device tree\n\nWhile booting from device tree, imx6q used to provide twd clock lookup\nby calling clk_register_clkdev() in clock driver.  However, the commit\nbd60345 (ARM: use device tree to get smp_twd clock) forces DT boot to\nlook up the clock from device tree.  It causes the failure below when\ntwd driver tries to get the clock, and hence kernel has to calibrate the\nlocal timer frequency.\n\n smp_twd: clock not found -2\n ...\n Calibrating local timer... 396.13MHz.\n\nFix the regression by providing twd clock lookup from device tree, and\nremove the unused twd clk_register_clkdev() call from clock driver.\n\nSigned-off-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\n"
    },
    {
      "commit": "75498083e25e96932ad998ffdeadb17234c68d3a",
      "tree": "f03b72b32ee8509f1aa64cf0250ef825003529a9",
      "parents": [
        "cab1e0a36c9dd0b0671fb84197ed294513f5adc1"
      ],
      "author": {
        "name": "Markus Pargmann",
        "email": "mpa@pengutronix.de",
        "time": "Fri Mar 29 16:20:10 2013 +0100"
      },
      "committer": {
        "name": "Shawn Guo",
        "email": "shawn.guo@linaro.org",
        "time": "Tue Apr 09 19:46:30 2013 +0800"
      },
      "message": "ARM: imx35 Bugfix admux clock\n\nThe admux clock seems to be the audmux clock as tests show. audmux does\nnot work without this clock enabled. Currently imx35 does not register a\nclock device for audmux. This patch adds this registration. imx-audmux\ndriver already handles a clock device, so no changes are necessary\nthere.\n\nSigned-off-by: Markus Pargmann \u003cmpa@pengutronix.de\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Sascha Hauer \u003cs.hauer@pengutronix.de\u003e\nSigned-off-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\n"
    },
    {
      "commit": "cab1e0a36c9dd0b0671fb84197ed294513f5adc1",
      "tree": "843e2c364cf5ef5a00592a605b2794313aa0e914",
      "parents": [
        "31880c37c11e28cb81c70757e38392b42e695dc6"
      ],
      "author": {
        "name": "Markus Pargmann",
        "email": "mpa@pengutronix.de",
        "time": "Fri Mar 29 16:20:09 2013 +0100"
      },
      "committer": {
        "name": "Shawn Guo",
        "email": "shawn.guo@linaro.org",
        "time": "Tue Apr 09 19:46:30 2013 +0800"
      },
      "message": "ARM: clk-imx35: Bugfix iomux clock\n\nThis patch enables iomuxc_gate clock. It is necessary to be able to\nreconfigure iomux pads. Without this clock enabled, the\nclk_disable_unused function will disable this clock and the iomux pads\nare not configurable anymore. This happens at every boot. After a reboot\n(watchdog system reset) the clock is not enabled again, so all iomux pad\nreconfigurations in boot code are without effect.\n\nThe iomux pads should be always configurable, so this patch always\nenables it.\n\nSigned-off-by: Markus Pargmann \u003cmpa@pengutronix.de\u003e\nCc: stable@vger.kernel.org\nSigned-off-by: Sascha Hauer \u003cs.hauer@pengutronix.de\u003e\nSigned-off-by: Shawn Guo \u003cshawn.guo@linaro.org\u003e\n"
    },
    {
      "commit": "3480a2125923e4b7a56d79efc76743089bf273fc",
      "tree": "6d2e241d497ef497aa637f8ee4a4b218c4161512",
      "parents": [
        "c802d759623acbd6e1ee9fbdabae89159a513913"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yongjun_wei@trendmicro.com.cn",
        "time": "Tue Apr 09 14:16:04 2013 +0800"
      },
      "committer": {
        "name": "Marc Kleine-Budde",
        "email": "mkl@pengutronix.de",
        "time": "Tue Apr 09 09:58:44 2013 +0200"
      },
      "message": "can: gw: use kmem_cache_free() instead of kfree()\n\nMemory allocated by kmem_cache_alloc() should be freed using\nkmem_cache_free(), not kfree().\n\nCc: linux-stable \u003cstable@vger.kernel.org\u003e # \u003e\u003d v3.2\nSigned-off-by: Wei Yongjun \u003cyongjun_wei@trendmicro.com.cn\u003e\nAcked-by: Oliver Hartkopp \u003csocketcan@hartkopp.net\u003e\nSigned-off-by: Marc Kleine-Budde \u003cmkl@pengutronix.de\u003e\n"
    },
    {
      "commit": "c802d759623acbd6e1ee9fbdabae89159a513913",
      "tree": "627b07cea49875faf40e508ce4392242a26d74a5",
      "parents": [
        "65d8013cbdc661f9cb7645148de1facfe3d0c88a"
      ],
      "author": {
        "name": "Wei Yongjun",
        "email": "yongjun_wei@trendmicro.com.cn",
        "time": "Tue Apr 09 10:07:19 2013 +0800"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 22:49:23 2013 -0400"
      },
      "message": "netrom: fix invalid use of sizeof in nr_recvmsg()\n\nsizeof() when applied to a pointer typed expression gives the size of the\npointer, not that of the pointed data.\nIntroduced by commit 3ce5ef(netrom: fix info leak via msg_name in nr_recvmsg)\n\nSigned-off-by: Wei Yongjun \u003cyongjun_wei@trendmicro.com.cn\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "84ee9805bc7406bee35f2d62001440c81059f073",
      "tree": "bbfdb4adce2ee9011ac2c3f266d19d777db1b3c0",
      "parents": [
        "76dfee409dea5ef6085c9411b75a482504ee6abd",
        "c10b90d85a5126d25c89cbaa50dc9fdd1c4d001a"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 18:53:57 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 18:53:57 2013 -0700"
      },
      "message": "Merge tag \u0027hwspinlock-3.9-fix\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ohad/hwspinlock\n\nPull a hwspinlock fix from Ohad Ben-Cohen:\n \"An hwspinlock fix from Li Fei, taking care of a faulty error path.\"\n\n* tag \u0027hwspinlock-3.9-fix\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ohad/hwspinlock:\n  hwspinlock: fix __hwspin_lock_request error path\n"
    },
    {
      "commit": "76dfee409dea5ef6085c9411b75a482504ee6abd",
      "tree": "77849ed367dd97f6615bb90c6dd9171fd71f60da",
      "parents": [
        "f011a08c804d50eeff4abf2d308cdce492f015aa",
        "c7426bce5933d16b492a34e42ae77e26fceddff6"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 18:53:13 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 18:53:13 2013 -0700"
      },
      "message": "Merge tag \u0027remoteproc-3.9-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ohad/remoteproc\n\nPull remoteproc fixes from Ohad Ben-Cohen:\n \"Four small remoteproc fixes:\n   - Suman fixed an issue that crawled in with the move to the new\n     idr_alloc interface in 3.9\n   - Dmitry fixed an STE specific memory leak\n   - Sjur fixed an error path in the core\n   - Rob fixed a Kconfig typo\"\n\n* tag \u0027remoteproc-3.9-fixes\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/ohad/remoteproc:\n  remoteproc: fix FW_CONFIG typo\n  remoteproc: fix error path of handle_vdev\n  remoteproc/ste: fix memory leak on shutdown\n  remoteproc: fix the error check for idr_alloc\n"
    },
    {
      "commit": "c9cdee17653409dedeb65c0733a253f6fe3fc7d6",
      "tree": "e41b1a684421cf52a2db271ab3c34a4fe9ff7bbe",
      "parents": [
        "f011a08c804d50eeff4abf2d308cdce492f015aa",
        "b1ea3e6e3883c5191caa5be72b3a5b9c32812e38"
      ],
      "author": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Tue Apr 09 09:28:55 2013 +1000"
      },
      "committer": {
        "name": "Dave Airlie",
        "email": "airlied@redhat.com",
        "time": "Tue Apr 09 09:28:55 2013 +1000"
      },
      "message": "Merge branch \u0027drm-nouveau-fixes-3.9\u0027 of git://anongit.freedesktop.org/git/nouveau/linux-2.6 into drm-fixes\n\ntoo many semicolons.\n\n* \u0027drm-nouveau-fixes-3.9\u0027 of git://anongit.freedesktop.org/git/nouveau/linux-2.6:\n  drm/nouveau: fix unconditional return waiting on memory\n"
    },
    {
      "commit": "b1ea3e6e3883c5191caa5be72b3a5b9c32812e38",
      "tree": "7106fa43ce888e04fd1bbae458dc160e37fbd71e",
      "parents": [
        "e4604d8fe8492f8120cf92d4b60b3cc90ba87bd0"
      ],
      "author": {
        "name": "Calvin Owens",
        "email": "jcalvinowens@gmail.com",
        "time": "Sun Apr 07 21:01:19 2013 -0500"
      },
      "committer": {
        "name": "Ben Skeggs",
        "email": "bskeggs@redhat.com",
        "time": "Tue Apr 09 09:16:15 2013 +1000"
      },
      "message": "drm/nouveau: fix unconditional return waiting on memory\n\nTypo in nv50_display_flip_wait allows page flipping to run ahead before\nmemory has time to settle.\n\nSigned-off-by: Calvin Owens \u003cjcalvinowens@gmail.com\u003e\nSigned-off-by: Ben Skeggs \u003cbskeggs@redhat.com\u003e\n"
    },
    {
      "commit": "f011a08c804d50eeff4abf2d308cdce492f015aa",
      "tree": "6be5b5c702e042b4fbdaf3a85d3ab1f9c18d9ce9",
      "parents": [
        "79e5f05edcbf85825d19eb8a425cd6c36c6c66f1",
        "9fb2640159f9d4f5a2a9d60e490482d4cbecafdb"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 16:10:43 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 16:10:43 2013 -0700"
      },
      "message": "Merge tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sfr/next-fixes\n\nPull powerpc bugfix from Stephen Rothwell:\n \"A single BUG_ON fix for a condition that could happen for machines\n  with certain hardware installed.\"\n\n* tag \u0027for-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/sfr/next-fixes:\n  powerpc: pSeries_lpar_hpte_remove fails from Adjunct partition being performed before the ANDCOND test\n"
    },
    {
      "commit": "79e5f05edcbf85825d19eb8a425cd6c36c6c66f1",
      "tree": "974c779a234e6a993fc7d98d93307130fa801221",
      "parents": [
        "f465d40d85fa49dd247035c87f519c7c949fbe1d"
      ],
      "author": {
        "name": "Christian Ruppert",
        "email": "christian.ruppert@abilis.com",
        "time": "Mon Apr 08 13:05:30 2013 +0530"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 16:10:26 2013 -0700"
      },
      "message": "ARC: Add implicit compiler barrier to raw_local_irq* functions\n\nARC irqsave/restore macros were missing the compiler barrier, causing a\nstale load in irq-enabled region be used in irq-safe region, despite\nbeing changed, because the register holding the value was still live.\n\nThe problem manifested as random crashes in timer code when stress\ntesting ARCLinux (3.9-rc3) on a !SMP \u0026\u0026 !PREEMPT_COUNT\n\nHere\u0027s the exact sequence which caused this:\n (0). tv1[x] \u003c----\u003e t1 \u003c---\u003e t2\n (1). mod_timer(t1) interrupted after it calls timer_pending()\n (2). mod_timer(t2) completes\n (3). mod_timer(t1) resumes but messes up the list\n (4). __runt_timers( ) uses bogus timer_list entry / crashes in\n      timer-\u003efunction\n\nEssentially mod_timer() was racing against itself and while the spinlock\nserialized the tv1[] timer link list, timer_pending() called outside the\nspinlock, cached timer link list element in a register.\nWith low register pressure (and a deep register file), lack of barrier\nin raw_local_irqsave() as well as preempt_disable (!PREEMPT_COUNT\nversion), there was nothing to force gcc to reload across the spinlock,\ncausing a stale value in reg be used for link list manipulation - ensuing\na corruption.\n\nARcompact disassembly which shows the culprit generated code:\n\nmod_timer:\n    push_s blink\n    mov_s r13,r0\t# timer, timer\n..\n    ###### timer_pending( )\n    ld_s r3,[r13]       # \u003c------ \u003cvariable\u003e.entry.next LOADED\n    brne r3, 0, @.L163\n\n.L163:\n..\n    ###### spin_lock_irq( )\n    lr  r5, [status32]  # flags\n    bic r4, r5, 6       # temp, flags,\n    and.f 0, r5, 6      # flags,\n    flag.nz r4\n\n    ###### detach_if_pending( ) begins\n\n    tst_s r3,r3  \u003c--------------\n\t\t\t# timer_pending( ) checks timer-\u003eentry.next\n                        # r3 is NOT reloaded by gcc, using stale value\n    beq.d @.L169\n    mov.eq r0,0\n\n    #####  detach_timer( ): __list_del( )\n\n    ld r4,[r13,4]    \t# \u003cvariable\u003e.entry.prev, D.31439\n    st r4,[r3,4]     \t# \u003cvariable\u003e.prev, D.31439\n    st r3,[r4]       \t# \u003cvariable\u003e.next, D.30246\n\nWe initially tried to fix this by adding barrier() to preempt_* macros\nfor !PREEMPT_COUNT but Linus clarified that it was anything but wrong.\nhttp://www.spinics.net/lists/kernel/msg1512709.html\n\n[vgupta: updated commitlog]\n\nReported-by/Signed-off-by: Christian Ruppert \u003cchristian.ruppert@abilis.com\u003e\nCc: Christian Ruppert \u003cchristian.ruppert@abilis.com\u003e\nCc: Pierrick Hascoet \u003cpierrick.hascoet@abilis.com\u003e\nDebugged-by/Signed-off-by: Vineet Gupta \u003cvgupta@synopsys.com\u003e\n\nSigned-off-by: Linus Torvalds \u003ctorvalds@linux-foundation.org\u003e\n"
    },
    {
      "commit": "f465d40d85fa49dd247035c87f519c7c949fbe1d",
      "tree": "d57fb3cfe2497afc01300e6dd0c23223d57a3ab7",
      "parents": [
        "5f2f280f87fe9755dba915f1ade149840885fd91",
        "6d3bfc7be6f80d0c6ee6800d58d573343bf6e260"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 15:15:22 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 15:15:22 2013 -0700"
      },
      "message": "Merge tag \u0027upstream-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jgarzik/libata-dev\n\nPull libata fixes from Jeff Garzik:\n \"The HDIO_DRIVE_* fix is really the biggie.\n\n  1) Fix ATAPI regression, noticed mainly on tape drives, due to a\n     commit which mistakenly changed an \u0027int\u0027 return type to a \u0027bool\u0027.\n     Broken by commit 4dce8ba94c75 (\"libata: Use \u0027bool\u0027 return value for\n     ata_id_XXX\")\n\n  2) Add Slimtype DVD A DS8A8SH ATAPI quirk\n\n  3) ata_piix: Intel Haswell platform quirk\n\n  4) Avoid DMA\u0027ing to stack buffer, when obtaining DEVSLP timings.  IMO\n     a mild regression, given that libata previously did not DMA to a\n     stack buffer.  Broken by commit commit 803739d25c23 (\"[libata]\n     replace sata_settings with devslp_timing\")\n\n  5) Fix regression impacting SMART and smartd, broken by commit\n     84a9a8cd9d0a (\"[libata] Set proper SK when CK_COND is set\")\"\n\n* tag \u0027upstream-linus\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/jgarzik/libata-dev:\n  [libata] Fix HDIO_DRIVE_* ioctl() Linux 3.9 regression\n  libata: fix DMA to stack in reading devslp_timing parameters\n  ata_piix: Fix DVD not dectected at some Haswell platforms\n  libata: Set max sector to 65535 for Slimtype DVD A DS8A8SH drive\n  libata: Use integer return value for atapi_command_packet_set\n"
    },
    {
      "commit": "5f2f280f87fe9755dba915f1ade149840885fd91",
      "tree": "31c8564dfd1fcb0ea0023a23c3aefd8108d7b2de",
      "parents": [
        "31880c37c11e28cb81c70757e38392b42e695dc6",
        "395b97a3aeff0b8d949ee3e67bf8c11c5ffd6861"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 15:14:11 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Mon Apr 08 15:14:11 2013 -0700"
      },
      "message": "Merge tag \u0027trace-fixes-3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace\n\nPull tracing fixes from Steven Rostedt:\n \"This includes three fixes.  Two fix features added in 3.9 and one\n  fixes a long time minor bug.\n\n  The first patch fixes a race that can happen if the user switches from\n  the irqsoff tracer to another tracer.  If a irqs off latency is\n  detected, it will try to use the snapshot buffer, but the new tracer\n  wont have it allocated.  There\u0027s a nasty warning that gets printed and\n  the trace is ignored.  Nothing crashes, just a nasty WARN_ON is shown.\n\n  The second patch fixes an issue where if the sysctl is used to disable\n  and enable function tracing, it can put the function tracing into an\n  unstable state.\n\n  The third patch fixes an issue with perf using the function tracer.\n  An update was done, where the stub function could be called during the\n  perf function tracing, and that stub function wont have the \"control\"\n  flag set and cause a nasty warning when running perf.\"\n\n* tag \u0027trace-fixes-3.9-rc6\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/rostedt/linux-trace:\n  ftrace: Do not call stub functions in control loop\n  ftrace: Consistently restore trace function on sysctl enabling\n  tracing: Fix race with update_max_tr_single and changing tracers\n"
    },
    {
      "commit": "65d8013cbdc661f9cb7645148de1facfe3d0c88a",
      "tree": "e2a977f555e08b420b9f4c926792d21cd10aba8a",
      "parents": [
        "f9c41a62bba3f3f7ef3541b2a025e3371bcbba97"
      ],
      "author": {
        "name": "Stefan Raspl",
        "email": "raspl@linux.vnet.ibm.com",
        "time": "Sun Apr 07 22:19:27 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 17:16:57 2013 -0400"
      },
      "message": "qeth: fix qeth_wait_for_threads() deadlock for OSN devices\n\nAny recovery thread will deadlock when calling qeth_wait_for_threads(), most\nnotably when triggering a recovery on an OSN device.\nThis patch will store the recovery thread\u0027s task pointer on recovery\ninvocation and check in qeth_wait_for_threads() respectively to avoid\ndeadlocks.\n\nSigned-off-by: Stefan Raspl \u003craspl@linux.vnet.ibm.com\u003e\nSigned-off-by: Frank Blaschka \u003cblaschka@linux.vnet.ibm.com\u003e\nReviewed-by: Ursula Braun \u003cursula.braun@de.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "f9c41a62bba3f3f7ef3541b2a025e3371bcbba97",
      "tree": "39aa5a3b8a584cff0d1974e60d22015a26d04e41",
      "parents": [
        "88c5b5ce5cb57af6ca2a7cf4d5715fa320448ff9"
      ],
      "author": {
        "name": "Ursula Braun",
        "email": "ursula.braun@de.ibm.com",
        "time": "Sun Apr 07 22:19:26 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 17:16:57 2013 -0400"
      },
      "message": "af_iucv: fix recvmsg by replacing skb_pull() function\n\nWhen receiving data messages, the \"BUG_ON(skb-\u003elen \u003c skb-\u003edata_len)\" in\nthe skb_pull() function triggers a kernel panic.\n\nReplace the skb_pull logic by a per skb offset as advised by\nEric Dumazet.\n\nSigned-off-by: Ursula Braun \u003cursula.braun@de.ibm.com\u003e\nSigned-off-by: Frank Blaschka \u003cblaschka@linux.vnet.ibm.com\u003e\nReviewed-by: Hendrik Brueckner \u003cbrueckner@linux.vnet.ibm.com\u003e\nAcked-by: Eric Dumazet \u003cedumazet@google.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "88c5b5ce5cb57af6ca2a7cf4d5715fa320448ff9",
      "tree": "58ed73ef75a5de3ed76c5364374c6884098fee0e",
      "parents": [
        "69b0216ac255f523556fa3d4ff030d857eaaa37f"
      ],
      "author": {
        "name": "Michael Riesch",
        "email": "michael.riesch@omicron.at",
        "time": "Mon Apr 08 05:45:26 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 17:12:26 2013 -0400"
      },
      "message": "rtnetlink: Call nlmsg_parse() with correct header length\n\nSigned-off-by: Michael Riesch \u003cmichael.riesch@omicron.at\u003e\nCc: \"David S. Miller\" \u003cdavem@davemloft.net\u003e\nCc: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\nCc: Jiri Benc \u003cjbenc@redhat.com\u003e\nCc: \"Theodore Ts\u0027o\" \u003ctytso@mit.edu\u003e\nCc: linux-kernel@vger.kernel.org\nAcked-by: Mark Rustad \u003cmark.d.rustad@intel.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "69b0216ac255f523556fa3d4ff030d857eaaa37f",
      "tree": "45138d6eae10f05815b353556fa62d57ceea35db",
      "parents": [
        "ffcdedb667b6db8ee31c7efa76a3ec59d9c3b0fc"
      ],
      "author": {
        "name": "nikolay@redhat.com",
        "email": "nikolay@redhat.com",
        "time": "Sat Apr 06 00:54:38 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 16:45:09 2013 -0400"
      },
      "message": "bonding: fix bonding_masters race condition in bond unloading\n\nWhile the bonding module is unloading, it is considered that after\nrtnl_link_unregister all bond devices are destroyed but since no\nsynchronization mechanism exists, a new bond device can be created\nvia bonding_masters before unregister_pernet_subsys which would\nlead to multiple problems (e.g. NULL pointer dereference, wrong RIP,\nlist corruption).\n\nThis patch fixes the issue by removing any bond devices left in the\nnetns after bonding_masters is removed from sysfs.\n\nSigned-off-by: Nikolay Aleksandrov \u003cnikolay@redhat.com\u003e\nAcked-by: Veaceslav Falico \u003cvfalico@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ffcdedb667b6db8ee31c7efa76a3ec59d9c3b0fc",
      "tree": "6fc19386e085c0bff5930acc5256bd975ec6272d",
      "parents": [
        "0f27f575f9e0d9eb43247da5d90a0f93574a0790"
      ],
      "author": {
        "name": "nikolay@redhat.com",
        "email": "nikolay@redhat.com",
        "time": "Sat Apr 06 00:54:37 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 16:45:09 2013 -0400"
      },
      "message": "Revert \"bonding: remove sysfs before removing devices\"\n\nThis reverts commit 4de79c737b200492195ebc54a887075327e1ec1d.\n\nThis patch introduces a new bug which causes access to freed memory.\nIn bond_uninit: list_del(\u0026bond-\u003ebond_list);\nbond_list is linked in bond_net\u0027s dev_list which is freed by\nunregister_pernet_subsys.\n\nSigned-off-by: Nikolay Aleksandrov \u003cnikolay@redhat.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "0f27f575f9e0d9eb43247da5d90a0f93574a0790",
      "tree": "59faf25665e51414479b138a3c2e3bc8b388a9ed",
      "parents": [
        "b50b72de2f2feed4adfbd8e18610a393b5a04cc7",
        "64e5751918b4d03015b185750a46ecd050e1ce77"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 16:39:55 2013 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 16:39:55 2013 -0400"
      },
      "message": "Merge branch \u0027wireless\u0027\n\nJohn W. Linville says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\nFor the cfg80211 fix, Johannes says:\n\n\"I have another straggler for 3.9, adding locking forgotten in a previous\nfix.\"\n\nOn top of that:\n\nBing Zhao provides an mwifiex fix to properly order a scan completion.\n\nFranky Lin gives us a brcmfmac fix to fail at the firmware loading\nstage if the nvram cannot be downloaded.\n\nGabor Juhos brings what at first looks like a rather big rt2x00 patch.\nI think it is OK because it is really just reorganizing some code\nwithin the rt2x00 driver in order to fix a build failure.\n\nHante Meuleman offers a trio of brcmfmac fixes related to running in\nAP mode.\n\nRobert Shade sends an ath9k fix to reenable interrupts even if a\nchannel change fails.\n\nTim Gardner gives us an rt2x00 fix to cut-down on some log SPAM.\n\nPlease let me know if there are problems!\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "6f389a8f1dd22a24f3d9afc2812b30d639e94625",
      "tree": "8b175282bdf49043dc57711e121ee603be8cb188",
      "parents": [
        "ec376a2ab97ec3be52ca282dc6ac102e805d1005"
      ],
      "author": {
        "name": "Huacai Chen",
        "email": "chenhc@lemote.com",
        "time": "Sun Apr 07 02:14:14 2013 +0000"
      },
      "committer": {
        "name": "Rafael J. Wysocki",
        "email": "rafael.j.wysocki@intel.com",
        "time": "Mon Apr 08 22:10:40 2013 +0200"
      },
      "message": "PM / reboot: call syscore_shutdown() after disable_nonboot_cpus()\n\nAs commit 40dc166c (PM / Core: Introduce struct syscore_ops for core\nsubsystems PM) say, syscore_ops operations should be carried with one\nCPU on-line and interrupts disabled. However, after commit f96972f2d\n(kernel/sys.c: call disable_nonboot_cpus() in kernel_restart()),\nsyscore_shutdown() is called before disable_nonboot_cpus(), so break\nthe rules. We have a MIPS machine with a 8259A PIC, and there is an\nexternal timer (HPET) linked at 8259A. Since 8259A has been shutdown\ntoo early (by syscore_shutdown()), disable_nonboot_cpus() runs without\ntimer interrupt, so it hangs and reboot fails. This patch call\nsyscore_shutdown() a little later (after disable_nonboot_cpus()) to\navoid reboot failure, this is the same way as poweroff does.\n\nFor consistency, add disable_nonboot_cpus() to kernel_halt().\n\nSigned-off-by: Huacai Chen \u003cchenhc@lemote.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n"
    },
    {
      "commit": "ec376a2ab97ec3be52ca282dc6ac102e805d1005",
      "tree": "e1460a4faa9b35cc82bb9b397deffab8319a2af7",
      "parents": [
        "31880c37c11e28cb81c70757e38392b42e695dc6"
      ],
      "author": {
        "name": "Dirk Brandewie",
        "email": "dirk.brandewie@gmail.com",
        "time": "Thu Apr 04 10:35:35 2013 -0700"
      },
      "committer": {
        "name": "Rafael J. Wysocki",
        "email": "rafael.j.wysocki@intel.com",
        "time": "Mon Apr 08 22:09:23 2013 +0200"
      },
      "message": "cpufreq / intel_pstate: Set timer timeout correctly\n\nThe current calculation of the delay time is wrong and a cut and\npaste error from a previous experimental driver.  This can result in\nthe timeout being set to jiffies + 1 which setup the driver to race\nwith itself if the APIC timer interrupt happens at just the right\ntime.\n\nReferences: https://bugzilla.redhat.com/show_bug.cgi?id\u003d920289\nReported-by: Adam Williamson \u003cawilliam@redhat.com\u003e\nReported-and-tested-by: Parag Warudkar \u003cparag.lkml@gmail.com\u003e\nSigned-off-by: Dirk Brandewie \u003cdirk.j.brandewie@intel.com\u003e\nSigned-off-by: Rafael J. Wysocki \u003crafael.j.wysocki@intel.com\u003e\n"
    },
    {
      "commit": "1b581f173992cded311f810346378f763a1f1e5d",
      "tree": "84ef80845e97f17fcc4daeb3338721807910c28c",
      "parents": [
        "c12f9ea28e9fbe7b1f4cefc953bee33298370683"
      ],
      "author": {
        "name": "Alexey Khoroshilov",
        "email": "khoroshilov@ispras.ru",
        "time": "Sun Apr 07 23:46:47 2013 +0400"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 08 11:30:04 2013 -0700"
      },
      "message": "tty: mxser: fix cycle termination condition in mxser_probe() and mxser_module_init()\n\nThere is a bug in resources deallocation code in mxser_probe() and\nmxser_module_init().  As soon as variable \u0027i\u0027 is unsigned int, cycle\ntermination condition i \u003e\u003d 0 is always true.  The patch fixes the issue.\n\nSigned-off-by: Alexey Khoroshilov \u003ckhoroshilov@ispras.ru\u003e\nAcked-by: Jiri Slaby \u003cjslaby@suse.cz\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "c12f9ea28e9fbe7b1f4cefc953bee33298370683",
      "tree": "914490bb91ef1ab8c9cd5081940e6a4ae9337d7e",
      "parents": [
        "1f66396682a0be92e1c141bff4b006d7654832e1"
      ],
      "author": {
        "name": "Sean Young",
        "email": "sean@mess.org",
        "time": "Sun Apr 07 20:47:18 2013 +0100"
      },
      "committer": {
        "name": "Greg Kroah-Hartman",
        "email": "gregkh@linuxfoundation.org",
        "time": "Mon Apr 08 11:30:04 2013 -0700"
      },
      "message": "Revert \"tty/8250_pnp: serial port detection regression since v3.7\"\n\nThis reverts commit 77e372a3d82e5e4878ce1962207edd766773cc76.\n\nChecking for disabled resources board breaks detection pnp on another\nboard \"AMI UEFI implementation (Version: 0406 Release Date: 06/06/2012)\".\nI\u0027m working with the reporter of the original bug to write and test\na better fix.\n\nhttps://bugzilla.redhat.com/show_bug.cgi?id\u003d928246\n\nSigned-off-by: Sean Young \u003csean@mess.org\u003e\nCc: stable \u003cstable@kernel.org\u003e\nSigned-off-by: Greg Kroah-Hartman \u003cgregkh@linuxfoundation.org\u003e\n"
    },
    {
      "commit": "64e5751918b4d03015b185750a46ecd050e1ce77",
      "tree": "59faf25665e51414479b138a3c2e3bc8b388a9ed",
      "parents": [
        "b50b72de2f2feed4adfbd8e18610a393b5a04cc7",
        "69a2bac8984c4e6dba78b330ed183fd580c65e99"
      ],
      "author": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon Apr 08 14:26:57 2013 -0400"
      },
      "committer": {
        "name": "John W. Linville",
        "email": "linville@tuxdriver.com",
        "time": "Mon Apr 08 14:26:57 2013 -0400"
      },
      "message": "Merge branch \u0027master\u0027 of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless into for-davem\n"
    },
    {
      "commit": "395b97a3aeff0b8d949ee3e67bf8c11c5ffd6861",
      "tree": "719c1519cc536a5ec0118b107f0edc90bd312fe6",
      "parents": [
        "5000c418840b309251c5887f0b56503aae30f84c"
      ],
      "author": {
        "name": "Steven Rostedt (Red Hat)",
        "email": "rostedt@goodmis.org",
        "time": "Wed Mar 27 09:31:28 2013 -0400"
      },
      "committer": {
        "name": "Steven Rostedt",
        "email": "rostedt@rostedt.homelinux.com",
        "time": "Mon Apr 08 12:24:23 2013 -0400"
      },
      "message": "ftrace: Do not call stub functions in control loop\n\nThe function tracing control loop used by perf spits out a warning\nif the called function is not a control function. This is because\nthe control function references a per cpu allocated data structure\non struct ftrace_ops that is not allocated for other types of\nfunctions.\n\ncommit 0a016409e42 \"ftrace: Optimize the function tracer list loop\"\n\nHad an optimization done to all function tracing loops to optimize\nfor a single registered ops. Unfortunately, this allows for a slight\nrace when tracing starts or ends, where the stub function might be\ncalled after the current registered ops is removed. In this case we\nget the following dump:\n\nroot# perf stat -e ftrace:function sleep 1\n[   74.339105] WARNING: at include/linux/ftrace.h:209 ftrace_ops_control_func+0xde/0xf0()\n[   74.349522] Hardware name: PRIMERGY RX200 S6\n[   74.357149] Modules linked in: sg igb iTCO_wdt ptp pps_core iTCO_vendor_support i7core_edac dca lpc_ich i2c_i801 coretemp edac_core crc32c_intel mfd_core ghash_clmulni_intel dm_multipath acpi_power_meter pcspk\nr microcode vhost_net tun macvtap macvlan nfsd kvm_intel kvm auth_rpcgss nfs_acl lockd sunrpc uinput xfs libcrc32c sd_mod crc_t10dif sr_mod cdrom mgag200 i2c_algo_bit drm_kms_helper ttm qla2xxx mptsas ahci drm li\nbahci scsi_transport_sas mptscsih libata scsi_transport_fc i2c_core mptbase scsi_tgt dm_mirror dm_region_hash dm_log dm_mod\n[   74.446233] Pid: 1377, comm: perf Tainted: G        W    3.9.0-rc1 #1\n[   74.453458] Call Trace:\n[   74.456233]  [\u003cffffffff81062e3f\u003e] warn_slowpath_common+0x7f/0xc0\n[   74.462997]  [\u003cffffffff810fbc60\u003e] ? rcu_note_context_switch+0xa0/0xa0\n[   74.470272]  [\u003cffffffff811041a2\u003e] ? __unregister_ftrace_function+0xa2/0x1a0\n[   74.478117]  [\u003cffffffff81062e9a\u003e] warn_slowpath_null+0x1a/0x20\n[   74.484681]  [\u003cffffffff81102ede\u003e] ftrace_ops_control_func+0xde/0xf0\n[   74.491760]  [\u003cffffffff8162f400\u003e] ftrace_call+0x5/0x2f\n[   74.497511]  [\u003cffffffff8162f400\u003e] ? ftrace_call+0x5/0x2f\n[   74.503486]  [\u003cffffffff8162f400\u003e] ? ftrace_call+0x5/0x2f\n[   74.509500]  [\u003cffffffff810fbc65\u003e] ? synchronize_sched+0x5/0x50\n[   74.516088]  [\u003cffffffff816254d5\u003e] ? _cond_resched+0x5/0x40\n[   74.522268]  [\u003cffffffff810fbc65\u003e] ? synchronize_sched+0x5/0x50\n[   74.528837]  [\u003cffffffff811041a2\u003e] ? __unregister_ftrace_function+0xa2/0x1a0\n[   74.536696]  [\u003cffffffff816254d5\u003e] ? _cond_resched+0x5/0x40\n[   74.542878]  [\u003cffffffff8162402d\u003e] ? mutex_lock+0x1d/0x50\n[   74.548869]  [\u003cffffffff81105c67\u003e] unregister_ftrace_function+0x27/0x50\n[   74.556243]  [\u003cffffffff8111eadf\u003e] perf_ftrace_event_register+0x9f/0x140\n[   74.563709]  [\u003cffffffff816254d5\u003e] ? _cond_resched+0x5/0x40\n[   74.569887]  [\u003cffffffff8162402d\u003e] ? mutex_lock+0x1d/0x50\n[   74.575898]  [\u003cffffffff8111e94e\u003e] perf_trace_destroy+0x2e/0x50\n[   74.582505]  [\u003cffffffff81127ba9\u003e] tp_perf_event_destroy+0x9/0x10\n[   74.589298]  [\u003cffffffff811295d0\u003e] free_event+0x70/0x1a0\n[   74.595208]  [\u003cffffffff8112a579\u003e] perf_event_release_kernel+0x69/0xa0\n[   74.602460]  [\u003cffffffff816254d5\u003e] ? _cond_resched+0x5/0x40\n[   74.608667]  [\u003cffffffff8112a640\u003e] put_event+0x90/0xc0\n[   74.614373]  [\u003cffffffff8112a740\u003e] perf_release+0x10/0x20\n[   74.620367]  [\u003cffffffff811a3044\u003e] __fput+0xf4/0x280\n[   74.625894]  [\u003cffffffff811a31de\u003e] ____fput+0xe/0x10\n[   74.631387]  [\u003cffffffff81083697\u003e] task_work_run+0xa7/0xe0\n[   74.637452]  [\u003cffffffff81014981\u003e] do_notify_resume+0x71/0xb0\n[   74.643843]  [\u003cffffffff8162fa92\u003e] int_signal+0x12/0x17\n\nTo fix this a new ftrace_ops flag is added that denotes the ftrace_list_end\nftrace_ops stub as just that, a stub. This flag is now checked in the\ncontrol loop and the function is not called if the flag is set.\n\nThanks to Jovi for not just reporting the bug, but also pointing out\nwhere the bug was in the code.\n\nLink: http://lkml.kernel.org/r/514A8855.7090402@redhat.com\nLink: http://lkml.kernel.org/r/1364377499-1900-15-git-send-email-jovi.zhangwei@huawei.com\n\nTested-by: WANG Chao \u003cchaowang@redhat.com\u003e\nReported-by: WANG Chao \u003cchaowang@redhat.com\u003e\nReported-by: zhangwei(Jovi) \u003cjovi.zhangwei@huawei.com\u003e\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\n"
    },
    {
      "commit": "5000c418840b309251c5887f0b56503aae30f84c",
      "tree": "dd6b37707670ac5eaaba9f395c999328904dd38b",
      "parents": [
        "2930e04d00e113ae24bb2b7c2b58de7b648a62c7"
      ],
      "author": {
        "name": "Jan Kiszka",
        "email": "jan.kiszka@siemens.com",
        "time": "Tue Mar 26 17:53:03 2013 +0100"
      },
      "committer": {
        "name": "Steven Rostedt",
        "email": "rostedt@rostedt.homelinux.com",
        "time": "Mon Apr 08 12:24:22 2013 -0400"
      },
      "message": "ftrace: Consistently restore trace function on sysctl enabling\n\nIf we reenable ftrace via syctl, we currently set ftrace_trace_function\nbased on the previous simplistic algorithm. This is inconsistent with\nwhat update_ftrace_function does. So better call that helper instead.\n\nLink: http://lkml.kernel.org/r/5151D26F.1070702@siemens.com\n\nCc: stable@vger.kernel.org\nSigned-off-by: Jan Kiszka \u003cjan.kiszka@siemens.com\u003e\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\n"
    },
    {
      "commit": "2930e04d00e113ae24bb2b7c2b58de7b648a62c7",
      "tree": "60dc173d8370ec69d48f04f074ca78fb152d0c1f",
      "parents": [
        "fd4a5aef002bb57e8a35ed34d8a878034b9bde94"
      ],
      "author": {
        "name": "Steven Rostedt (Red Hat)",
        "email": "rostedt@goodmis.org",
        "time": "Tue Mar 26 17:33:00 2013 -0400"
      },
      "committer": {
        "name": "Steven Rostedt",
        "email": "rostedt@rostedt.homelinux.com",
        "time": "Mon Apr 08 12:24:22 2013 -0400"
      },
      "message": "tracing: Fix race with update_max_tr_single and changing tracers\n\nThe commit 34600f0e9 \"tracing: Fix race with max_tr and changing tracers\"\nfixed the updating of the main buffers with the race of changing\ntracers, but left out the fix to the updating of just a per cpu buffer.\n\nSigned-off-by: Steven Rostedt \u003crostedt@goodmis.org\u003e\n"
    },
    {
      "commit": "b50b72de2f2feed4adfbd8e18610a393b5a04cc7",
      "tree": "92c6341d0517a7036a02ae3f871af0fac6ee013b",
      "parents": [
        "f1ea3cd70110d482ef1ce6ef158df113aa366f43"
      ],
      "author": {
        "name": "willy tarreau",
        "email": "w@1wt.eu",
        "time": "Sat Apr 06 08:47:01 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 12:16:38 2013 -0400"
      },
      "message": "net: mvneta: enable features before registering the driver\n\nIt seems that the reason why the dev features were ignored was because\nthey were enabled after registeration.\n\nSigned-off-by: Willy Tarreau \u003cw@1wt.eu\u003e\nAcked-by: Thomas Petazzoni \u003cthomas.petazzoni@free-electrons.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "f1ea3cd70110d482ef1ce6ef158df113aa366f43",
      "tree": "ead600ab71402db00476255f4ed7f1d723eacdd3",
      "parents": [
        "fd5c07a8d6a10c7112b19f3b0d428627c62b06ab"
      ],
      "author": {
        "name": "Haiyang Zhang",
        "email": "haiyangz@microsoft.com",
        "time": "Fri Apr 05 11:44:40 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 12:15:17 2013 -0400"
      },
      "message": "hyperv: Fix RNDIS send_completion code path\n\nIn some cases, the VM_PKT_COMP message can arrive later than RNDIS completion\nmessage, which will free the packet memory. This may cause panic due to access\nto freed memory in netvsc_send_completion().\n\nThis patch fixes this problem by removing rndis_filter_send_request_completion()\nfrom the code path. The function was a no-op.\n\nReported-by: Long Li \u003clongli@microsoft.com\u003e\nTested-by: Long Li \u003clongli@microsoft.com\u003e\nSigned-off-by: Haiyang Zhang \u003chaiyangz@microsoft.com\u003e\nReviewed-by: K. Y. Srinivasan \u003ckys@microsoft.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "fd5c07a8d6a10c7112b19f3b0d428627c62b06ab",
      "tree": "49a8fa87998a4d935b1239c4f6653a107fc89a15",
      "parents": [
        "c988d1e8cbf722e34ee6124b8b89d47fec655b51"
      ],
      "author": {
        "name": "Haiyang Zhang",
        "email": "haiyangz@microsoft.com",
        "time": "Fri Apr 05 11:44:39 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 12:15:17 2013 -0400"
      },
      "message": "hyperv: Fix a kernel warning from netvsc_linkstatus_callback()\n\nThe warning about local_bh_enable inside IRQ happens when disconnecting a\nvirtual NIC.\n\nThe reason for the warning is -- netif_tx_disable() is called when the NIC\nis disconnected. And it\u0027s called within irq context. netif_tx_disable() calls\nlocal_bh_enable() which displays warning if in irq.\n\nThe fix is to remove the unnecessary netif_tx_disable \u0026 wake_queue() in the\nnetvsc_linkstatus_callback().\n\nReported-by: Richard Genoud \u003crichard.genoud@gmail.com\u003e\nTested-by: Long Li \u003clongli@microsoft.com\u003e\nTested-by: Richard Genoud \u003crichard.genoud@gmail.com\u003e\nSigned-off-by: Haiyang Zhang \u003chaiyangz@microsoft.com\u003e\nReviewed-by: K. Y. Srinivasan \u003ckys@microsoft.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c988d1e8cbf722e34ee6124b8b89d47fec655b51",
      "tree": "553fb6ec2f3869c34c33a8639c347041573eb2a4",
      "parents": [
        "05a324b9c50c3edbe0ce48ee3e37b210859ef1ae"
      ],
      "author": {
        "name": "Jiri Pirko",
        "email": "jiri@resnulli.us",
        "time": "Thu Apr 04 23:39:39 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 12:04:51 2013 -0400"
      },
      "message": "net: ipv4: fix schedule while atomic bug in check_lifetime()\n\nmove might_sleep operations out of the rcu_read_lock() section.\nAlso fix iterating over ifa_dev-\u003eifa_list\n\nIntroduced by: commit 5c766d642bcaf \"ipv4: introduce address lifetime\"\n\nSigned-off-by: Jiri Pirko \u003cjiri@resnulli.us\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "05a324b9c50c3edbe0ce48ee3e37b210859ef1ae",
      "tree": "aaadda8e7a1ca69d919afe84b76de8108ff27790",
      "parents": [
        "cb28ea3b13b86fb23448525f34720e659bda7aa8"
      ],
      "author": {
        "name": "Jiri Pirko",
        "email": "jiri@resnulli.us",
        "time": "Thu Apr 04 23:39:38 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Mon Apr 08 12:04:51 2013 -0400"
      },
      "message": "net: ipv4: reset check_lifetime_work after changing lifetime\n\nThis will result in calling check_lifetime in nearest opportunity and\nthat function will adjust next time to call check_lifetime correctly.\nWithout this, check_lifetime is called in time computed by previous run,\nnot affecting modified lifetime.\n\nIntroduced by: commit 5c766d642bcaf \"ipv4: introduce address lifetime\"\n\nSigned-off-by: Jiri Pirko \u003cjiri@resnulli.us\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "81211c4cc04ca33f7c3ae10de547113e34d9a59e",
      "tree": "974df8aac30b4dfaa8bd2f8caddb6611bcb19ae4",
      "parents": [
        "b62d7946b2dd04e07734313a450cb0a8b440f206",
        "55985e15b80beb339d3e332f00a26003deff14e6"
      ],
      "author": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Mon Apr 08 17:46:16 2013 +0200"
      },
      "committer": {
        "name": "Arnd Bergmann",
        "email": "arnd@arndb.de",
        "time": "Mon Apr 08 17:46:16 2013 +0200"
      },
      "message": "Merge tag \u0027mxs-fixes-3.9-4\u0027 of git://git.linaro.org/people/shawnguo/linux-2.6 into fixes\n\nFrom Shawn Guo \u003cshawn.guo@linaro.org\u003e:\n\nThe mxs fixes for 3.9, take 4:\n - A couple mxs boards that run I2C at 400 kHz experience some unstable\n   issue occasionally.  Slow down the clock speed to have I2C work\n   reliably.\n\n* tag \u0027mxs-fixes-3.9-4\u0027 of git://git.linaro.org/people/shawnguo/linux-2.6:\n  ARM: mxs: Slow down the I2C clock speed\n\nSigned-off-by: Arnd Bergmann \u003carnd@arndb.de\u003e\n"
    },
    {
      "commit": "c2fccc1c9f7c81700cbac2120a4ad5441dd37004",
      "tree": "196f7a05401e936bfaa368721acebf34cf2e0dc1",
      "parents": [
        "c66bb3f075cfe2d17b2427e96e043622db02759c"
      ],
      "author": {
        "name": "Jens Axboe",
        "email": "axboe@kernel.dk",
        "time": "Mon Apr 08 10:12:11 2013 +0200"
      },
      "committer": {
        "name": "Jens Axboe",
        "email": "axboe@kernel.dk",
        "time": "Mon Apr 08 10:12:11 2013 +0200"
      },
      "message": "Revert \"loop: cleanup partitions when detaching loop device\"\n\nThis reverts commit 8761a3dc1f07b163414e2215a2cadbb4cfe2a107.\n\nThere are situations where the destruction path is called\nwith the bdev-\u003ebd_mutex already held, which then deadlocks in\nloop_clr_fd(). The normal partition cleanup does a trylock()\non the mutex, but it\u0027d be nice to have a more bullet proof\nmethod in loop. So punt this more involved fix to the next\nmerge window, and just back out this buggy fix for now.\n\nSigned-off-by: Jens Axboe \u003caxboe@kernel.dk\u003e\n"
    },
    {
      "commit": "9fb2640159f9d4f5a2a9d60e490482d4cbecafdb",
      "tree": "998b11ffa8907dd592f5f9b1156fd9301019ec82",
      "parents": [
        "875b7679abbb232b584f2eec59fa6e45690dd6c4"
      ],
      "author": {
        "name": "Michael Wolf",
        "email": "mjw@linux.vnet.ibm.com",
        "time": "Fri Apr 05 10:41:40 2013 +0000"
      },
      "committer": {
        "name": "Stephen Rothwell",
        "email": "sfr@canb.auug.org.au",
        "time": "Mon Apr 08 15:19:09 2013 +1000"
      },
      "message": "powerpc: pSeries_lpar_hpte_remove fails from Adjunct partition being performed before the ANDCOND test\n\nSome versions of pHyp will perform the adjunct partition test before the\nANDCOND test.  The result of this is that H_RESOURCE can be returned and\ncause the BUG_ON condition to occur. The HPTE is not removed.  So add a\ncheck for H_RESOURCE, it is ok if this HPTE is not removed as\npSeries_lpar_hpte_remove is looking for an HPTE to remove and not a\nspecific HPTE to remove.  So it is ok to just move on to the next slot\nand try again.\n\nCc: stable@vger.kernel.org\nSigned-off-by: Michael Wolf \u003cmjw@linux.vnet.ibm.com\u003e\nSigned-off-by: Stephen Rothwell \u003csfr@canb.auug.org.au\u003e\n"
    },
    {
      "commit": "31880c37c11e28cb81c70757e38392b42e695dc6",
      "tree": "11e65971909ac17584dad2ed18058be944556768",
      "parents": [
        "875b7679abbb232b584f2eec59fa6e45690dd6c4"
      ],
      "author": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Apr 07 20:49:54 2013 -0700"
      },
      "committer": {
        "name": "Linus Torvalds",
        "email": "torvalds@linux-foundation.org",
        "time": "Sun Apr 07 20:49:54 2013 -0700"
      },
      "message": "Linux 3.9-rc6\n"
    },
    {
      "commit": "cb28ea3b13b86fb23448525f34720e659bda7aa8",
      "tree": "3ce7eac60107ce61c40cc0bc93d69e2ed9f851a8",
      "parents": [
        "259c9a1f9e0fa6610c5d7c15ba658dd4fd007bf5"
      ],
      "author": {
        "name": "Yaniv Rosner",
        "email": "yanivr@broadcom.com",
        "time": "Sun Apr 07 05:36:23 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 17:17:00 2013 -0400"
      },
      "message": "bnx2x: Fix KR2 rapid link flap\n\nCheck KR2 recovery time at the beginning of the work-around function.\n\nSigned-off-by: Yaniv Rosner \u003cyanivr@broadcom.com\u003e\nSigned-off-by: Eilon Greenstein \u003ceilong@broadcom.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "259c9a1f9e0fa6610c5d7c15ba658dd4fd007bf5",
      "tree": "79a8c128c37dca3d8a499f2c5bb409af6f689b9f",
      "parents": [
        "f89e8a6432409c6cbd5c2b6bb90ea694fd558de3"
      ],
      "author": {
        "name": "Sridhar Samudrala",
        "email": "sri@us.ibm.com",
        "time": "Tue Apr 02 12:35:31 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 17:00:54 2013 -0400"
      },
      "message": "sctp: remove \u0027sridhar\u0027 from maintainers list\n\nUpdate SCTP maintainers list.\n\nSigned-off-by: Sridhar Samudrala \u003csri@us.ibm.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "f89e8a6432409c6cbd5c2b6bb90ea694fd558de3",
      "tree": "01aaa7cb29147cba0fcc1202a03bbf1af598be62",
      "parents": [
        "50a75a8914539c5dcd441c5f54d237a666a426fd",
        "d5e0d0f607a7a029c6563a0470d88255c89a8d11"
      ],
      "author": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:42:40 2013 -0400"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:42:40 2013 -0400"
      },
      "message": "Merge branch \u0027infoleaks\u0027\n\nMathias Krause says:\n\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\na few more info leak fixes in the recvmsg path. The error pattern here\nis the protocol specific recvmsg function is missing the msg_namelen\nassignment -- either completely or in early exit paths that do not\nresult in errors in __sys_recvmsg()/sys_recvfrom() and, in turn, make\nthem call move_addr_to_user(), leaking the then still uninitialized\nsockaddr_storage stack variable to userland.\n\nMy audit was initiated by a rather coarse fix of the leak that can be\nfound in the grsecurity patch, putting a penalty on protocols complying\nto the rules of recvmsg. So credits for finding the leak in the recvmsg\npath in __sys_recvmsg() should go to Brad!\n\nThe buggy protocols/subsystems are rather obscure anyway. As a missing\nassignment of msg_namelen coupled with a missing filling of msg_name\nwould only result in garbage -- the leak -- in case userland would care\nabout that information, i.e. would provide a msg_name pointer. But\nobviously current userland does not.\n\nWhile auditing the code for the above pattern I found a few more\n\u0027uninitialized members\u0027 kind of leaks related to the msg_name filling.\nThose are fixed in this series, too.\n\nI have to admit, I failed to test all of the patches due to missing\nhardware, e.g. iucv depends on S390 -- hardware I\u0027ve no access to :/\n\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d5e0d0f607a7a029c6563a0470d88255c89a8d11",
      "tree": "01aaa7cb29147cba0fcc1202a03bbf1af598be62",
      "parents": [
        "680d04e0ba7e926233e3b9cee59125ce181f66ba"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:52:02 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:02 2013 -0400"
      },
      "message": "VSOCK: Fix missing msg_namelen update in vsock_stream_recvmsg()\n\nThe code misses to update the msg_namelen member to 0 and therefore\nmakes net/socket.c leak the local, uninitialized sockaddr_storage\nvariable to userland -- 128 bytes of kernel stack memory.\n\nCc: Andy King \u003cacking@vmware.com\u003e\nCc: Dmitry Torokhov \u003cdtor@vmware.com\u003e\nCc: George Zhang \u003cgeorgezhang@vmware.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "680d04e0ba7e926233e3b9cee59125ce181f66ba",
      "tree": "bd075aa2f2b87d1b6f019baaee2cbb89cb4ba388",
      "parents": [
        "60085c3d009b0df252547adb336d1ccca5ce52ec"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:52:01 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:02 2013 -0400"
      },
      "message": "VSOCK: vmci - fix possible info leak in vmci_transport_dgram_dequeue()\n\nIn case we received no data on the call to skb_recv_datagram(), i.e.\nskb-\u003edata is NULL, vmci_transport_dgram_dequeue() will return with 0\nwithout updating msg_namelen leading to net/socket.c leaking the local,\nuninitialized sockaddr_storage variable to userland -- 128 bytes of\nkernel stack memory.\n\nFix this by moving the already existing msg_namelen assignment a few\nlines above.\n\nCc: Andy King \u003cacking@vmware.com\u003e\nCc: Dmitry Torokhov \u003cdtor@vmware.com\u003e\nCc: George Zhang \u003cgeorgezhang@vmware.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "60085c3d009b0df252547adb336d1ccca5ce52ec",
      "tree": "df28e7547fc540f59df2afc7e6e66cd0df42f265",
      "parents": [
        "4a184233f21645cf0b719366210ed445d1024d72"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:52:00 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:02 2013 -0400"
      },
      "message": "tipc: fix info leaks via msg_name in recv_msg/recv_stream\n\nThe code in set_orig_addr() does not initialize all of the members of\nstruct sockaddr_tipc when filling the sockaddr info -- namely the union\nis only partly filled. This will make recv_msg() and recv_stream() --\nthe only users of this function -- leak kernel stack memory as the\nmsg_name member is a local variable in net/socket.c.\n\nAdditionally to that both recv_msg() and recv_stream() fail to update\nthe msg_namelen member to 0 while otherwise returning with 0, i.e.\n\"success\". This is the case for, e.g., non-blocking sockets. This will\nlead to a 128 byte kernel stack leak in net/socket.c.\n\nFix the first issue by initializing the memory of the union with\nmemset(0). Fix the second one by setting msg_namelen to 0 early as it\nwill be updated later if we\u0027re going to fill the msg_name member.\n\nCc: Jon Maloy \u003cjon.maloy@ericsson.com\u003e\nCc: Allan Stephens \u003callan.stephens@windriver.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4a184233f21645cf0b719366210ed445d1024d72",
      "tree": "e42640b4410b0a4d19ae8b8fb3b767bd73e70a16",
      "parents": [
        "d26d6504f23e803824e8ebd14e52d4fc0a0b09cb"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:59 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:02 2013 -0400"
      },
      "message": "rose: fix info leak via msg_name in rose_recvmsg()\n\nThe code in rose_recvmsg() does not initialize all of the members of\nstruct sockaddr_rose/full_sockaddr_rose when filling the sockaddr info.\nNor does it initialize the padding bytes of the structure inserted by\nthe compiler for alignment. This will lead to leaking uninitialized\nkernel stack bytes in net/socket.c.\n\nFix the issue by initializing the memory used for sockaddr info with\nmemset(0).\n\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "d26d6504f23e803824e8ebd14e52d4fc0a0b09cb",
      "tree": "d0f8ff1e99ec304f1857b2efc397aa7c99cb11da",
      "parents": [
        "3ce5efad47b62c57a4f5c54248347085a750ce0e"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:58 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:02 2013 -0400"
      },
      "message": "NFC: llcp: fix info leaks via msg_name in llcp_sock_recvmsg()\n\nThe code in llcp_sock_recvmsg() does not initialize all the members of\nstruct sockaddr_nfc_llcp when filling the sockaddr info. Nor does it\ninitialize the padding bytes of the structure inserted by the compiler\nfor alignment.\n\nAlso, if the socket is in state LLCP_CLOSED or is shutting down during\nreceive the msg_namelen member is not updated to 0 while otherwise\nreturning with 0, i.e. \"success\". The msg_namelen update is also\nmissing for stream and seqpacket sockets which don\u0027t fill the sockaddr\ninfo.\n\nBoth issues lead to the fact that the code will leak uninitialized\nkernel stack bytes in net/socket.c.\n\nFix the first issue by initializing the memory used for sockaddr info\nwith memset(0). Fix the second one by setting msg_namelen to 0 early.\nIt will be updated later if we\u0027re going to fill the msg_name member.\n\nCc: Lauro Ramos Venancio \u003clauro.venancio@openbossa.org\u003e\nCc: Aloisio Almeida Jr \u003caloisio.almeida@openbossa.org\u003e\nCc: Samuel Ortiz \u003csameo@linux.intel.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "3ce5efad47b62c57a4f5c54248347085a750ce0e",
      "tree": "6ea783a53cab3815f147b9ade4bda5b3ad09b177",
      "parents": [
        "c77a4b9cffb6215a15196ec499490d116dfad181"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:57 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:02 2013 -0400"
      },
      "message": "netrom: fix info leak via msg_name in nr_recvmsg()\n\nIn case msg_name is set the sockaddr info gets filled out, as\nrequested, but the code fails to initialize the padding bytes of\nstruct sockaddr_ax25 inserted by the compiler for alignment. Also\nthe sax25_ndigis member does not get assigned, leaking four more\nbytes.\n\nBoth issues lead to the fact that the code will leak uninitialized\nkernel stack bytes in net/socket.c.\n\nFix both issues by initializing the memory with memset(0).\n\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c77a4b9cffb6215a15196ec499490d116dfad181",
      "tree": "b665eaa37c14642af498b26499824248da6c9fd2",
      "parents": [
        "b860d3cc62877fad02863e2a08efff69a19382d2"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:56 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:01 2013 -0400"
      },
      "message": "llc: Fix missing msg_namelen update in llc_ui_recvmsg()\n\nFor stream sockets the code misses to update the msg_namelen member\nto 0 and therefore makes net/socket.c leak the local, uninitialized\nsockaddr_storage variable to userland -- 128 bytes of kernel stack\nmemory. The msg_namelen update is also missing for datagram sockets\nin case the socket is shutting down during receive.\n\nFix both issues by setting msg_namelen to 0 early. It will be\nupdated later if we\u0027re going to fill the msg_name member.\n\nCc: Arnaldo Carvalho de Melo \u003cacme@ghostprotocols.net\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "b860d3cc62877fad02863e2a08efff69a19382d2",
      "tree": "e654b34c09acf71de2864416e5d13cb3cd0c10f3",
      "parents": [
        "a5598bd9c087dc0efc250a5221e5d0e6f584ee88"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:55 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:01 2013 -0400"
      },
      "message": "l2tp: fix info leak in l2tp_ip6_recvmsg()\n\nThe L2TP code for IPv6 fails to initialize the l2tp_conn_id member of\nstruct sockaddr_l2tpip6 and therefore leaks four bytes kernel stack\nin l2tp_ip6_recvmsg() in case msg_name is set.\n\nInitialize l2tp_conn_id with 0 to avoid the info leak.\n\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "a5598bd9c087dc0efc250a5221e5d0e6f584ee88",
      "tree": "ac7da3efc4748e0a2efb8e27aad0b4aae58e2c2e",
      "parents": [
        "5ae94c0d2f0bed41d6718be743985d61b7f5c47d"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:54 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:01 2013 -0400"
      },
      "message": "iucv: Fix missing msg_namelen update in iucv_sock_recvmsg()\n\nThe current code does not fill the msg_name member in case it is set.\nIt also does not set the msg_namelen member to 0 and therefore makes\nnet/socket.c leak the local, uninitialized sockaddr_storage variable\nto userland -- 128 bytes of kernel stack memory.\n\nFix that by simply setting msg_namelen to 0 as obviously nobody cared\nabout iucv_sock_recvmsg() not filling the msg_name in case it was set.\n\nCc: Ursula Braun \u003cursula.braun@de.ibm.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "5ae94c0d2f0bed41d6718be743985d61b7f5c47d",
      "tree": "9c2fa1836abb56a44492a41b56121a7dd9e6e6b3",
      "parents": [
        "2d6fbfe733f35c6b355c216644e08e149c61b271"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:53 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:01 2013 -0400"
      },
      "message": "irda: Fix missing msg_namelen update in irda_recvmsg_dgram()\n\nThe current code does not fill the msg_name member in case it is set.\nIt also does not set the msg_namelen member to 0 and therefore makes\nnet/socket.c leak the local, uninitialized sockaddr_storage variable\nto userland -- 128 bytes of kernel stack memory.\n\nFix that by simply setting msg_namelen to 0 as obviously nobody cared\nabout irda_recvmsg_dgram() not filling the msg_name in case it was\nset.\n\nCc: Samuel Ortiz \u003csamuel@sortiz.org\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "2d6fbfe733f35c6b355c216644e08e149c61b271",
      "tree": "b68553f2ddc2564bf17b4e28c1c7ee363dd40517",
      "parents": [
        "c8c499175f7d295ef867335bceb9a76a2c3cdc38"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:52 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:01 2013 -0400"
      },
      "message": "caif: Fix missing msg_namelen update in caif_seqpkt_recvmsg()\n\nThe current code does not fill the msg_name member in case it is set.\nIt also does not set the msg_namelen member to 0 and therefore makes\nnet/socket.c leak the local, uninitialized sockaddr_storage variable\nto userland -- 128 bytes of kernel stack memory.\n\nFix that by simply setting msg_namelen to 0 as obviously nobody cared\nabout caif_seqpkt_recvmsg() not filling the msg_name in case it was\nset.\n\nCc: Sjur Braendeland \u003csjur.brandeland@stericsson.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "c8c499175f7d295ef867335bceb9a76a2c3cdc38",
      "tree": "c2b85141bea5d315819650ce72f6413edcf30d0e",
      "parents": [
        "e11e0455c0d7d3d62276a0c55d9dfbc16779d691"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:51 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:01 2013 -0400"
      },
      "message": "Bluetooth: SCO - Fix missing msg_namelen update in sco_sock_recvmsg()\n\nIf the socket is in state BT_CONNECT2 and BT_SK_DEFER_SETUP is set in\nthe flags, sco_sock_recvmsg() returns early with 0 without updating the\npossibly set msg_namelen member. This, in turn, leads to a 128 byte\nkernel stack leak in net/socket.c.\n\nFix this by updating msg_namelen in this case. For all other cases it\nwill be handled in bt_sock_recvmsg().\n\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "e11e0455c0d7d3d62276a0c55d9dfbc16779d691",
      "tree": "7e3f51263eb0f889a47b7384e3408a912eb5a022",
      "parents": [
        "4683f42fde3977bdb4e8a09622788cc8b5313778"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:50 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:00 2013 -0400"
      },
      "message": "Bluetooth: RFCOMM - Fix missing msg_namelen update in rfcomm_sock_recvmsg()\n\nIf RFCOMM_DEFER_SETUP is set in the flags, rfcomm_sock_recvmsg() returns\nearly with 0 without updating the possibly set msg_namelen member. This,\nin turn, leads to a 128 byte kernel stack leak in net/socket.c.\n\nFix this by updating msg_namelen in this case. For all other cases it\nwill be handled in bt_sock_stream_recvmsg().\n\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "4683f42fde3977bdb4e8a09622788cc8b5313778",
      "tree": "37e0e2bd2666e7bcedd6630b029d88f740b3ddc7",
      "parents": [
        "ef3313e84acbf349caecae942ab3ab731471f1a1"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:49 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:00 2013 -0400"
      },
      "message": "Bluetooth: fix possible info leak in bt_sock_recvmsg()\n\nIn case the socket is already shutting down, bt_sock_recvmsg() returns\nwith 0 without updating msg_namelen leading to net/socket.c leaking the\nlocal, uninitialized sockaddr_storage variable to userland -- 128 bytes\nof kernel stack memory.\n\nFix this by moving the msg_namelen assignment in front of the shutdown\ntest.\n\nCc: Marcel Holtmann \u003cmarcel@holtmann.org\u003e\nCc: Gustavo Padovan \u003cgustavo@padovan.org\u003e\nCc: Johan Hedberg \u003cjohan.hedberg@gmail.com\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    },
    {
      "commit": "ef3313e84acbf349caecae942ab3ab731471f1a1",
      "tree": "9b2fd9a7ce55f7e08fd9d51a5e8525d6bbb9e4c6",
      "parents": [
        "9b3e617f3df53822345a8573b6d358f6b9e5ed87"
      ],
      "author": {
        "name": "Mathias Krause",
        "email": "minipli@googlemail.com",
        "time": "Sun Apr 07 01:51:48 2013 +0000"
      },
      "committer": {
        "name": "David S. Miller",
        "email": "davem@davemloft.net",
        "time": "Sun Apr 07 16:28:00 2013 -0400"
      },
      "message": "ax25: fix info leak via msg_name in ax25_recvmsg()\n\nWhen msg_namelen is non-zero the sockaddr info gets filled out, as\nrequested, but the code fails to initialize the padding bytes of struct\nsockaddr_ax25 inserted by the compiler for alignment. Additionally the\nmsg_namelen value is updated to sizeof(struct full_sockaddr_ax25) but is\nnot always filled up to this size.\n\nBoth issues lead to the fact that the code will leak uninitialized\nkernel stack bytes in net/socket.c.\n\nFix both issues by initializing the memory with memset(0).\n\nCc: Ralf Baechle \u003cralf@linux-mips.org\u003e\nSigned-off-by: Mathias Krause \u003cminipli@googlemail.com\u003e\nSigned-off-by: David S. Miller \u003cdavem@davemloft.net\u003e\n"
    }
  ],
  "next": "9b3e617f3df53822345a8573b6d358f6b9e5ed87"
}