commit 2fcaa8d5377c8def2e668c4e841cf1f2ab9732bf tree 7b2d53db27f3e8b0af857ca6cd65d1ca48efc367 parent 61dd5c3368db90edf32a5ceb4dde76cc18f34009 author Adrian Bunk Tue, 17 Oct 2006 14:52:16 +0200 committer Adrian Bunk Tue, 17 Oct 2006 14:52:16 +0200 Linux 2.6.16.30-rc1 commit 61dd5c3368db90edf32a5ceb4dde76cc18f34009 tree 0914b29b7cbe8dc2c1d833ca8e9dc954cea527b3 parent 08f8337b2930f9b0924e6c0e362b11f7216766c0 author Stephane Eranian Tue, 17 Oct 2006 14:50:56 +0200 committer Adrian Bunk Tue, 17 Oct 2006 14:50:56 +0200 [IA64] correct file descriptor reference counting in perfmon (CVE-2006-3741) Fix a bug in sys_perfmonctl() whereby it was not correctly decrementing the file descriptor reference count. Signed-off-by: Stephane Eranian Signed-off-by: Tony Luck Signed-off-by: Adrian Bunk commit 08f8337b2930f9b0924e6c0e362b11f7216766c0 tree b4cd1c748dba77065be395615ec2a6a78584523b parent 1ecb731506c27cb63f54979fac57895b12164615 author Michal Ostrowski Sat, 14 Oct 2006 19:20:16 +0200 committer Adrian Bunk Sat, 14 Oct 2006 19:20:16 +0200 [PPPOE]: Advertise PPPoE MTU PPPoE must advertise the underlying device's MTU via the ppp channel descriptor structure, as multilink functionality depends on it. Signed-off-by: Michal Ostrowski Signed-off-by: Adrian Bunk commit 1ecb731506c27cb63f54979fac57895b12164615 tree 4e66a0c3e7bfdddabe22b5a5d714e45848cfb523 parent 1b85ee3ead96f0ad706cd794e2fa60a42b278713 author Kim Nordlund Sat, 14 Oct 2006 10:39:40 +0200 committer Adrian Bunk Sat, 14 Oct 2006 10:39:40 +0200 PKT_SCHED: cls_basic: Use unsigned int when generating handle Prevents filters from being added if the first generated handle already exists. Signed-off-by: Kim Nordlund Signed-off-by: Thomas Graf Signed-off-by: Adrian Bunk commit 1b85ee3ead96f0ad706cd794e2fa60a42b278713 tree 803b80e387a53bb63b7f31ea154f43da7e2670db parent 88ca8e7402aa6899de20ddc8e708831225583f8d author David S. Miller Sat, 14 Oct 2006 10:35:26 +0200 committer Adrian Bunk Sat, 14 Oct 2006 10:35:26 +0200 [SPARC64]: Kill bogus check from bootmem_init(). There is an ancient and totally incorrect sanity check being done on the ramdisk location. The check assumes that the kernel is always loaded to physical address zero, which is wrong. It was trying to validate the ramdisk value by saying that if it fell within the kernel image address range it must be wrong. Anyways, kill this because it actually creates problems. The 'ramdisk_image' should always be adjusted down by KERNBASE. SILO can easily put the ramdisk in a location which causes this test to trigger, breaking things. [ Based almost entirely upon a patch from Ben Collins. ] Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk commit 88ca8e7402aa6899de20ddc8e708831225583f8d tree 052cb8902109e1974d9f7832c4a73ae2a371b4ca parent 5360ce880ede2fd89dd4aad73af627879faae122 author David S. Miller Sat, 14 Oct 2006 10:33:10 +0200 committer Adrian Bunk Sat, 14 Oct 2006 10:33:10 +0200 [SPARC64]: Fix sched_clock() wrapping every ~17 seconds. Unfortunately, sparc64 doesn't have an easy way to do a "64 X 64 --> 128" bit multiply like PowerPC and IA64 do. We were doing a "64 X 64 --> 64" bit multiple which causes overflow very quickly with a 30-bit quotient shift. So use a quotientshift count of 10 instead of 30, just like x86 and ARM do. This also fixes the wrapping of printk timestamp values every ~17 seconds. Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk commit 5360ce880ede2fd89dd4aad73af627879faae122 tree d62c3e03d5ff0e5756a926932374f0915bed1eb5 parent fd21c69ab8ab3e175f62fc09b38b1ab64e787f72 author Rafael J. Wysocki Sat, 14 Oct 2006 10:12:26 +0200 committer Adrian Bunk Sat, 14 Oct 2006 10:12:26 +0200 [CIFS] Allow cifsd to suspend if connection is lost Make cifsd allow us to suspend if it has lost the connection with a server Ref: http://bugzilla.kernel.org/show_bug.cgi?id=6811 Signed-off-by: Rafael J. Wysocki Signed-off-by: Steve French Signed-off-by: Adrian Bunk commit fd21c69ab8ab3e175f62fc09b38b1ab64e787f72 tree 86c4b16f250383e553af7ca2e18fde331814ae5c parent a59ce20e0e4ed46c633d284cad159af84a8f2822 author Steve French Sat, 14 Oct 2006 10:11:47 +0200 committer Adrian Bunk Sat, 14 Oct 2006 10:11:47 +0200 [CIFS] Fix typo in earlier cifs_unlink change and protect one extra path. Since cifs_unlink can also be called from rename path and there was one report of oops am making the extra check for null inode. Signed-off-by: Steve French Signed-off-by: Adrian Bunk commit a59ce20e0e4ed46c633d284cad159af84a8f2822 tree 7b3bbc06af6d8a39e00e79b2ca2eae87d4b8542c parent e0326df174d475bdd3da6d0a8730af3a7a347e61 author Steve French Sat, 14 Oct 2006 10:11:16 +0200 committer Adrian Bunk Sat, 14 Oct 2006 10:11:16 +0200 [CIFS] Fix unlink oops when indirectly called in rename error path under heavy stress. Signed-off-by: Steve French Signed-off-by: Adrian Bunk commit e0326df174d475bdd3da6d0a8730af3a7a347e61 tree 2bdaa7e332c88ef1d3300eec1ed74472845225b2 parent cffa5ffe7214563e25b1cd72b229b4e6a709eb71 author Steve French Sat, 14 Oct 2006 10:10:45 +0200 committer Adrian Bunk Sat, 14 Oct 2006 10:10:45 +0200 [CIFS] fs/cifs/dir.c: fix possible NULL dereference Signed-off-by: Steve French Signed-off-by: Adrian Bunk commit cffa5ffe7214563e25b1cd72b229b4e6a709eb71 tree 05dc3963c154698ead9364445d7ba892be8f1082 parent 601c7cf7254ea9544d74381b8ee022b7fb207535 author YOSHIFUJI Hideaki Sat, 14 Oct 2006 01:13:36 +0200 committer Adrian Bunk Sat, 14 Oct 2006 01:13:36 +0200 [ATM] CLIP: Do not refer freed skbuff in clip_mkip() (CVE-2006-4997) In clip_mkip(), skb->dev is dereferenced after clip_push(), which frees up skb. Advisory: AD_LAB-06009 (). Signed-off-by: YOSHIFUJI Hideaki Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk commit 601c7cf7254ea9544d74381b8ee022b7fb207535 tree 2aa72dfebe28b33abc3cad96e142b9b679cf5c18 parent 84668d934e388ecc55c91e725681563c20f2006e author Olaf Hering Fri, 13 Oct 2006 18:16:26 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:16:26 +0200 fbdev: add modeline for 1680x1050@60 Add a modeline for the Philips 200W display. aty128fb does not do DDC, it picks 1920x1440 or similar. It works ok with nvidiafb because it can ask for DDC data. mode "1680x1050-60" # D: 146.028 MHz, H: 65.191 kHz, V: 59.863 Hz geometry 1680 1050 1680 1050 16 timings 6848 280 104 30 3 176 6 hsync high vsync high rgba 5/11,6/5,5/0,0/0 endmode hwinfo --monitor 20: None 00.0: 10000 Monitor [Created at monitor.206] Unique ID: rdCR.pzUFTofo1S4 Parent ID: 002j.bJRsY88eNSC Hardware Class: monitor Model: "PHILIPS Philips 200W" Vendor: PHL "PHILIPS" Device: eisa 0x0832 "Philips 200W" Serial ID: "VN 016596" Resolution: 720x400@70Hz Resolution: 640x480@60Hz Resolution: 640x480@67Hz Resolution: 640x480@72Hz Resolution: 640x480@75Hz Resolution: 800x600@56Hz Resolution: 800x600@60Hz Resolution: 800x600@72Hz Resolution: 800x600@75Hz Resolution: 832x624@75Hz Resolution: 1024x768@60Hz Resolution: 1024x768@70Hz Resolution: 1024x768@75Hz Resolution: 1280x1024@75Hz Resolution: 1152x864@70Hz Resolution: 1152x864@75Hz Resolution: 1280x960@60Hz Resolution: 1280x1024@60Hz Resolution: 1680x1050@60Hz Size: 433x271 mm Driver Info #0: Max. Resolution: 1680x1050 Vert. Sync Range: 56-85 Hz Hor. Sync Range: 30-93 kHz Config Status: cfg=new, avail=yes, need=no, active=unknown Attached to: #5 (VGA compatible controller) Signed-off-by: Olaf Hering Signed-off-by: Adrian Bunk commit 84668d934e388ecc55c91e725681563c20f2006e tree b3d5cc2ec2fe77d600828271d7c73705b05d1237 parent 7a07c009521a64b62bd3e7ba8fd7559d8de187d3 author Stephen Hemminger Fri, 13 Oct 2006 18:13:23 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:13:23 +0200 sky2: accept flow control Don't program the GMAC to reject flow control packets. This maybe the cause of some of the transmit hangs. Signed-off-by: Stephen Hemminger Signed-off-by: Adrian Bunk commit 7a07c009521a64b62bd3e7ba8fd7559d8de187d3 tree 48b248a7242c47717cf28b6ffaa685b0aadcedb2 parent 60ae1edc99701dbee1e04ba41f407770b24fc6ac author Stephen Hemminger Fri, 13 Oct 2006 18:12:36 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:12:36 +0200 sky2: fix fiber support Fix support for fiber based devices. Needed to keep track of PMD type to add workaround in setup. Add support for gigabit half duplex fiber. Signed-off-by: Stephen Hemminger Signed-off-by: Adrian Bunk commit 60ae1edc99701dbee1e04ba41f407770b24fc6ac tree 35d86ddba443ca38e3b348ad226690768723f4d1 parent d45acfec5e696e1b621752cfc7235f68245f43b2 author Stephen Hemminger Fri, 13 Oct 2006 18:11:59 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:11:59 +0200 sky2: use dev_alloc_skb for receive buffers Several code paths assume an additional 16 bytes of header padding on the receive path. Use dev_alloc_skb to get that padding. Signed-off-by: Stephen Hemminger Signed-off-by: Adrian Bunk commit d45acfec5e696e1b621752cfc7235f68245f43b2 tree 13707b9ac7c75a45eb8049662d854101514bddba parent 940baccd4191ea4e15fc9848fac97951152d9570 author Oliver Endriss Fri, 13 Oct 2006 18:05:48 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:05:48 +0200 v4l/dvb: Backport the budget driver DISEQC instability fix Backport the budget driver DISEQC instability fix. Signed-off-by: Oliver Endriss Signed-off-by: Andrew de Quincey Signed-off-by: Michael Krufky commit 940baccd4191ea4e15fc9848fac97951152d9570 tree 1ef68e5e0367e0be805267329ac9f3a4f81831db parent 814b3886285b0fac985107bf4843914fb8484a36 author Andrew de Quincey Fri, 13 Oct 2006 18:03:38 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:03:38 +0200 v4l/dvb: Backport fix to artec USB DVB devices Backport fix to artec USB DVB devices Signed-off-by: Andrew de Quincey Signed-off-by: Michael Krufky Signed-off-by: Adrian Bunk commit 814b3886285b0fac985107bf4843914fb8484a36 tree 49449229899c6c97630a96852ef4da7d40f9123c parent 1d82cce6f3d3119c33aed88ed8c94f93341f995a author Andrew de Quincey Fri, 13 Oct 2006 18:02:49 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:02:49 +0200 v4l/dvb: Fix budget-av frontend detection The budget-av needs this GPIO set low for most cards to work. Signed-off-by: Andrew de Quincey Signed-off-by: Michael Krufky Signed-off-by: Adrian Bunk commit 1d82cce6f3d3119c33aed88ed8c94f93341f995a tree dac375939d4320d0880ab29e34b1b3338954dc39 parent cc3c0a32e3ed8d40a8d14522bfb3efe62c11c0af author Ang Way Chuang Fri, 13 Oct 2006 18:01:44 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:01:44 +0200 dvb-core: Proper handling ULE SNDU length of 0 (CVE-2006-4623) ULE (Unidirectional Lightweight Encapsulation RFC 4326) decapsulation code has a bug that allows an attacker to send a malformed ULE packet with SNDU length of 0 and bring down the receiving machine. This patch fix the bug and has been tested on version 2.6.17.11. This bug is 100% reproducible and the modified source code (GPL) used to produce this bug will be posted on http://nrg.cs.usm.my/downloads.htm shortly. The kernel will produce a dump during CRC32 checking on faulty ULE packet. Signed-off-by: Ang Way Chuang Signed-off-by: Adrian Bunk commit cc3c0a32e3ed8d40a8d14522bfb3efe62c11c0af tree 8399e087ac06c603f37357c400b573b940d1aba9 parent e2e103083eb3af79fd5976763251d116366f7ef0 author YOSHIFUJI Hideaki Fri, 13 Oct 2006 18:00:31 +0200 committer Adrian Bunk Fri, 13 Oct 2006 18:00:31 +0200 IPV6: Sum real space for RTAs. This patch fixes RTNLGRP_IPV6_IFINFO netlink notifications. Issue pointed out by Patrick McHardy . Signed-off-by: YOSHIFUJI Hideaki Acked-by: Patrick McHardy Signed-off-by: Adrian Bunk commit e2e103083eb3af79fd5976763251d116366f7ef0 tree 4e28833a35ce547a0daa416e136a1dd5a1936cca parent 196be852be1148e604086eccff9c40df8207925d author Kirill Korotaev Fri, 13 Oct 2006 17:58:30 +0200 committer Adrian Bunk Fri, 13 Oct 2006 17:58:30 +0200 fix fdset leakage When found, it is obvious. nfds calculated when allocating fdsets is rewritten by calculation of size of fdtable, and when we are unlucky, we try to free fdsets of wrong size. Found due to OpenVZ resource management (User Beancounters). Signed-off-by: Alexey Kuznetsov Signed-off-by: Kirill Korotaev Signed-off-by: Adrian Bunk