commit f102b5f5348772181d23d514315e090c53d0b84d Author: Chris Wright Date: Thu Nov 24 14:10:21 2005 -0800 Linux 2.6.14.3 commit 4e980ac962bc77d292ad4039631553dd2a88d47f Author: Jean Delvare Date: Mon Nov 21 19:22:16 2005 +0100 [PATCH] hwmon: Fix missing it87 fan div init Fix a bug where setting the low fan speed limits will not work if no data was ever read through the sysfs interface and the fan clock dividers have not been explicitely set yet either. The reason is that data->fan_div[nr] may currently be used before it is initialized from the chip register values. The fix is to explicitely initialize data->fan_div[nr] before using it. Bug reported, and fix tested, by Nicolas Mailhot. Signed-off-by: Jean Delvare Signed-off-by: Greg Kroah-Hartman Signed-off-by: Chris Wright commit ce79890ea55a84b3600bbee421be78117c2532bb Author: Jean Delvare Date: Mon Nov 14 23:11:45 2005 +0100 [PATCH] hwmon: Fix lm78 VID conversion Fix the lm78 VID reading, which I accidentally broke while making this driver use the common vid_from_reg function rather than reimplementing its own in 2.6.14-rc1. I'm not proud of it, trust me. Signed-off-by: Jean Delvare Signed-off-by: Greg Kroah-Hartman Signed-off-by: Chris Wright commit 30b2b8ee1866188c1f86aefe7dedca4b9681772f Author: Yuan Mu Date: Mon Nov 14 23:08:38 2005 +0100 [PATCH] hwmon: Fix missing boundary check when setting W83627THF in0 limits Add SENSORS_LIMIT in store VCore limit functions. This fixes a potential u8 overflow on out-of-range user input. Signed-off-by: Jean Delvare Signed-off-by: Greg Kroah-Hartman Signed-off-by: Chris Wright commit fb69773ded08e5b679db97a84aa7ce371c5f6208 Author: Adrian Bunk Date: Sat Nov 19 08:58:12 2005 +0100 [PATCH] drivers/isdn/hardware/eicon/os_4bri.c: correct the xdiLoadFile() signature It's not good if caller and callee disagree regarding the type of the arguments. In this case, this could cause problems on 64bit architectures. Signed-off-by: Adrian Bunk Signed-off-by: Armin Schindler Signed-off-by: Greg Kroah-Hartman Signed-off-by: Chris Wright commit 067d66baa9df5b9e6bf7e442fc4ee7140ef3cc74 Author: Andi Kleen Date: Sun Oct 30 01:49:38 2005 -0500 [PATCH] x86_64/i386: Compute correct MTRR mask on early Noconas Force correct address space size for MTRR on some 64bit Intel Xeons They report 40bit, but only have 36bits of physical address space. This caused problems with setting up the correct masks for MTRR, resulting in incorrect MTRRs. CPUID workaround for steppings 0F33h(supporting x86) and 0F34h(supporting x86 and EM64T). Detail info can be found at: http://download.intel.com/design/Xeon/specupdt/30240216.pdf http://download.intel.com/design/Pentium4/specupdt/30235221.pdf Signed-off-by: Shaohua Li Signed-off-by: Andi Kleen Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 4b490b0c8d0541d5857cb3f390607aa06ad876e7 Author: YOSHIFUJI Hideaki Date: Mon Nov 21 19:07:40 2005 +0900 [PATCH] Fix sending extension headers before and including routing header. Based on suggestion from Masahide Nakamura . Signed-off-by: YOSHIFUJI Hideaki Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 32f947c4a41a39dbb70ca0924331014fe768698c Author: Ville Nuorvala Date: Mon Nov 21 19:07:33 2005 +0900 [PATCH] Fix calculation of AH length during filling ancillary data. Signed-off-by: YOSHIFUJI Hideaki Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 0527c1095dbf42535c9dbffc12e8c41f59d46f86 Author: YOSHIFUJI Hideaki Date: Mon Nov 21 19:07:25 2005 +0900 [PATCH] Fix memory management error during setting up new advapi sockopts. Signed-off-by: YOSHIFUJI Hideaki Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit ebf1bbfda5eaf2f1124328941ae4869e63315a00 Author: Harald Welte Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] ip_conntrack: fix ftp/irc/tftp helpers on ports >= 32768 Since we've converted the ftp/irc/tftp helpers to use the new module_parm_array() some time ago, we ware accidentially using signed data types - thus preventing those modules from being used on ports >= 32768. This patch fixes it by using 'ushort' module parameters. Thanks to Jan Nijs for reporting this bug. Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 1369d380d305a9d883e878af958c4c9a0ea5b174 Author: Vlad Drukker Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] ip_conntrack TCP: Accept SYN+PUSH like SYN Some devices (e.g. Qlogic iSCSI HBA hardware like QLA4010 up to firmware 3.0.0.4) initiates TCP with SYN and PUSH flags set. The Linux TCP/IP stack deals fine with that, but the connection tracking code doesn't. This patch alters TCP connection tracking to accept SYN+PUSH as a valid flag combination. Signed-off-by: Vlad Drukker Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit ae77af5fdb07f075c3b833cc378f92dcf361627e Author: Krzysztof Piotr Oledzki Date: Wed Nov 23 07:59:21 2005 +0100 [PATCH] ctnetlink: Fix oops when no ICMP ID info in message This patch fixes an userspace triggered oops. If there is no ICMP_ID info the reference to attr will be NULL. Signed-off-by: Krzysztof Piotr Oledzki Signed-off-by: Pablo Neira Ayuso Signed-off-by: Harald Welte Signed-off-by: Chris Wright commit e9e2c792141e83778cc46eb501fc13b786f26263 Author: Philip Craig Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] PPTP helper: fix PNS-PAC expectation call id The reply tuple of the PNS->PAC expectation was using the wrong call id. So we had the following situation: - PNS behind NAT firewall - PNS call id requires NATing - PNS->PAC gre packet arrives first then the PNS->PAC expectation is matched, and the other expectation is deleted, but the PAC->PNS gre packets do not match the gre conntrack because the call id is wrong. We also cannot use ip_nat_follow_master(). Signed-off-by: Philip Craig Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 36f73ff25328f8a99c8a30f8a89b27b87440e0d1 Author: Harald Welte Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] ctnetlink: check if protoinfo is present This fixes an oops triggered from userspace. If we don't pass information about the private protocol info, the reference to attr will be NULL. This is likely to happen in update messages. Signed-off-by: Pablo Neira Ayuso Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit c28dddc5dd4c34476b937aaff9065cdeb89ad555 Author: Yasuyuki Kozakai Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] refcount leak of proto when ctnetlink dumping tuple Signed-off-by: Yasuyuki Kozakai Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 32e7dfa8a64420eff76dfedda3f6fec170f0b4d8 Author: Harald Welte Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] nf_queue: Fix Ooops when no queue handler registered With the new nf_queue generalization in 2.6.14, we've introduced a bug that causes an oops as soon as a packet is queued but no queue handler registered. This patch fixes it. Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 0012c3a76ba77f505ac94be3780f010926bef3ee Author: Rusty Rusty Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] NAT: Fix module refcount dropping too far The unknown protocol is used as a fallback when a protocol isn't known. Hence we cannot handle it failing, so don't set ".me". It's OK, since we only grab a reference from within the same module (iptable_nat.ko), so we never take the module refcount from 0 to 1. Also, remove the "protocol is NULL" test: it's never NULL. Signed-off-by: Rusty Rusty Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 63cb535137220bc764b2c6def34843acb53e99f3 Author: Harald Welte Date: Tue Nov 15 13:32:36 2005 +0100 [PATCH] PPTP helper: Fix endianness bug in GRE key / CallID NAT This endianness bug slipped through while changing the 'gre.key' field in the conntrack tuple from 32bit to 16bit. None of my tests caught the problem, since the linux pptp client always has '0' as call id / gre key. Only windows clients actually trigger the bug. Signed-off-by: Harald Welte Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit e193ed753d6f1301a06b797e512e01e3c569fec8 Author: Krzysztof Halasa Date: Fri Nov 11 01:54:14 2005 +0100 [PATCH] Generic HDLC WAN drivers - disable netif_carrier_off() As we are currently unable to fix the problem with carrier and protocol state signaling in net core I've to disable netif_carrier_off() calls used by WAN protocol drivers. The attached patch should make them working again. The remaining netif_carrier_*() calls in hdlc_fr.c are fine as they don't touch the physical device. Signed-off-by: Krzysztof Halasa Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit b3834f71cb794d4dba1f9ed2fec8bc7ee2f40b7e Author: J. Bruce Fields Date: Thu Nov 10 19:08:00 2005 -0500 [PATCH] VFS: Fix memory leak with file leases The patch http://linux.bkbits.net:8080/linux-2.6/diffs/fs/locks.c@1.70??nav=index.html introduced a pretty nasty memory leak in the lease code. When freeing the lease, the code in locks_delete_lock() will correctly clean up the fasync queue, but when we return to fcntl_setlease(), the freed fasync entry will be reinstated. This patch ensures that we skip the call to fasync_helper() when we're freeing up the lease. Signed-off-by: J. Bruce Fields Signed-off-by: Trond Myklebust Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 9761be89f5a057bf2bae57ca98990f89ad5edbe2 Author: Peter Osterlund Date: Sun Nov 13 16:06:36 2005 -0800 [PATCH] packet writing oops fix There is an old bug in the pkt_count_states() function that causes stack corruption. When compiling with gcc 3.x or 2.x it is harmless, but gcc 4 allocates local variables differently, which makes the bug visible. Signed-off-by: Peter Osterlund Cc: Signed-off-by: Andrew Morton Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit d8122124872548142e3df57d274444f484f318a2 Author: Takashi Iwai Date: Fri Nov 11 19:47:28 2005 +0100 [PATCH] Fix soft lockup with ALSA rtc-timer Fixed the soft lockup of ALSA rtc-timer due to the wrong irq handling in rtc_control(). The call of rtc_control() can be atomic. Signed-off-by: Takashi Iwai Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 423885efc678eec81b59e4c200417be58ede9d2f Author: Oleg Nesterov Date: Thu Nov 10 17:22:18 2005 +0300 [PATCH] Don't auto-reap traced children If a task is being traced we never auto-reap it even if it might look like its parent doesn't care. The tracer obviously _does_ care. Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman commit 5bd05b9592a18a05f3d3b508281e7b0a093e1cda Author: Joel Schopp Date: Wed Nov 9 17:35:02 2005 -0600 [PATCH] ppc64 memory model depends on NUMA Signed-off-by: Andy Whitcroft Signed-off-by: Joel Schopp Signed-off-by: Chris Wright Signed-off-by: Greg Kroah-Hartman