commit 7705a8792b0fc82fd7d4dd923724606bbfd9fb20 Author: Linus Torvalds Date: Sun Mar 19 21:53:29 2006 -0800 Linux 2.6.16 commit 2be1aaf988e8b6775eece8374f4fd195b21cc4c4 Author: Andrea Arcangeli Date: Sun Mar 19 19:04:17 2006 +0100 [PATCH] Remove obsolete CREDITS address This address is going to be obsolete, so I should update it. commit 4a29cc2e503b33a1e96db4c3f9a94165f153f259 Author: Michael Chan Date: Sun Mar 19 13:21:12 2006 -0800 [TG3]: 40-bit DMA workaround part 2 The 40-bit DMA workaround recently implemented for 5714, 5715, and 5780 needs to be expanded because there may be other tg3 devices behind the EPB Express to PCIX bridge in the 5780 class device. For example, some 4-port card or mother board designs have 5704 behind the 5714. All devices behind the EPB require the 40-bit DMA workaround. Thanks to Chris Elmquist again for reporting the problem and testing the patch. Signed-off-by: Michael Chan Signed-off-by: David S. Miller commit c7c694d196a39af6e644e24279953d04f30362db Author: Ralf Baechle DL5RB Date: Sun Mar 19 13:20:06 2006 -0800 [AX.25]: Fix potencial memory hole. If the AX.25 dialect chosen by the sysadmin is set to DAMA master / 3 (or DAMA slave / 2, if CONFIG_AX25_DAMA_SLAVE=n) ax25_kick() will fall through the switch statement without calling ax25_send_iframe() or any other function that would eventually free skbn thus leaking the packet. Fix by restricting the sysctl inferface to allow only actually supported AX.25 dialects. The system administration mistake needed for this to happen is rather unlikely, so this is an uncritical hole. Coverity #651. Signed-off-by: Ralf Baechle DL5RB Signed-off-by: David S. Miller commit 60a6dc55b93b3321afa52f650a149fb7e87fa85a Author: Michael Krufky Date: Wed Mar 15 02:36:13 2006 -0300 [PATCH] Kconfig: swap VIDEO_CX88_ALSA and VIDEO_CX88_DVB VIDEO_CX88_ALSA should not be between VIDEO_CX88_DVB and VIDEO_CX88_DVB_ALL_FRONTENDS When cx88-alsa was added to cx88/Kconfig, it was added in between VIDEO_CX88_DVB and VIDEO_CX88_DVB_ALL_FRONTENDS. This caused undesireable effects to the appearance of the menu options in menuconfig. This fix reorders cx88-alsa and cx88-dvb in Kconfig, to match saa7134, and restore the correct menuconfig appearance. Signed-off-by: Michael Krufky Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Linus Torvalds commit 7215fdb214ad8d76c9d667be07f870f0f0544959 Author: Markus Rechberger Date: Tue Feb 7 08:49:13 2006 -0200 [PATCH] Fixed em28xx based system lockup Fixed em28xx based system lockup, device needs to be initialized before starting the isoc transfer otherwise the system will completly lock up. Signed-off-by: Markus Rechberger Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Linus Torvalds commit 2d61b86775a5676a8fba2ba2f0f869564e35c630 Author: Oleg Nesterov Date: Sat Mar 18 20:41:10 2006 +0300 [PATCH] disable unshare(CLONE_VM) for now sys_unshare() does mmput(new_mm). This is not enough if we have mm->core_waiters. This patch is a temporary fix for soon to be released 2.6.16. Signed-off-by: Oleg Nesterov [ Checked with Uli: "I'm not planning to use unshare(CLONE_VM). It's not needed for any functionality planned so far. What we (as in Red Hat) need unshare() for now is the filesystem side." ] Signed-off-by: Linus Torvalds commit 9007c9a2b03ea325ee593a161dbf01dbb8222d7e Author: Ralf Baechle Date: Sat Mar 18 16:59:31 2006 +0000 [MIPS] SB1: Check for -mno-sched-prolog if building corelis debug kernel. Signed-off-by: Ralf Baechle commit a904f7478561464f9fe74929b81fec237b6ff4c3 Author: Ralf Baechle Date: Wed Mar 15 00:03:29 2006 +0000 [MIPS] Sibyte: Fix race in sb1250_gettimeoffset(). From Dave Johnson : sb1250_gettimeoffset() simply reads the current cpu 0 timer remaining value, however once this counter reaches 0 and the interrupt is raised, it immediately resets and begins to count down again. If sb1250_gettimeoffset() is called on cpu 1 via do_gettimeofday() after the timer has reset but prior to cpu 0 processing the interrupt and taking write_seqlock() in timer_interrupt() it will return a full value (or close to it) causing time to jump backwards 1ms. Once cpu 0 handles the interrupt and timer_interrupt() gets far enough along it will jump forward 1ms. Fix this problem by implementing mips_hpt_*() on sb1250 using a spare timer unrelated to the existing periodic interrupt timers. It runs at 1Mhz with a full 23bit counter. This eliminated the custom do_gettimeoffset() for sb1250 and allowed use of the generic fixed_rate_gettimeoffset() using mips_hpt_*() and timerhi/timerlo. Signed-off-by: Ralf Baechle commit 4308cb16286c96d980570cc5319173b524220c06 Author: Ralf Baechle Date: Tue Mar 14 23:52:47 2006 +0000 [MIPS] Sibyte: Fix interrupt timer off by one bug. From Dave Johnson : The timers need to be loaded with 1 less than the desired interval not the interval itself. Signed-off-by: Ralf Baechle commit a77f124294822203660b0926392b963cfa72fcf4 Author: Ralf Baechle Date: Tue Mar 14 23:47:35 2006 +0000 [MIPS] Sibyte: Fix M_SCD_TIMER_INIT and M_SCD_TIMER_CNT wrong field width. From Dave Johnson : Field width should be 23 bits not 20 bits. Signed-off-by: Ralf Baechle commit d6bd0e6b32ea72be91e5789b1e838c244f8a05d9 Author: Ralf Baechle Date: Tue Mar 14 23:46:58 2006 +0000 [MIPS] Protect more of timer_interrupt() by xtime_lock. From Dave Johnson : * do_timer() expects the arch-specific handler to take the lock as it modifies jiffies[_64] and xtime. * writing timerhi/lo in timer_interrupt() will mess up fixed_rate_gettimeoffset() which reads timerhi/lo. Signed-off-by: Ralf Baechle commit 966f4406d903a4214fdc74bec54710c6232a95b8 Author: Ralf Baechle Date: Wed Mar 15 11:36:31 2006 +0000 [MIPS] Work around bad code generation for . If a call to set_io_port_base() was being followed by usage of mips_io_port_base in the same function gcc was possibly using the old value due to some clever abuse of const. Adding a barrier will keep the optimization and result in correct code with latest gcc. Signed-off-by: Ralf Baechle commit 66a9a4ffda3474b193f36ed579cee06c597952f3 Author: Matej Kupljen Date: Wed Nov 30 10:20:01 2005 +0100 [MIPS] Simple patch to power off DBAU1200 Signed-off-by: Matej Kupljen Signed-off-by: Ralf Baechle commit 86dde15b3dc36dda4bbc32a8da607675ce63ef23 Author: Sergei Shtylylov Date: Tue Mar 14 07:20:00 2006 +0300 [MIPS] Fix DBAu1550 software power off. Signed-off-by: Sergei Shtylyov Signed-off-by: Ralf Baechle commit de62893bc0725f8b5f0445250577cd7a10b2d8f8 Author: Atsushi Nemoto Date: Mon Mar 13 18:23:03 2006 +0900 [MIPS] local_r4k_flush_cache_page fix If dcache_size != icache_size or dcache_size != scache_size, or set-associative cache, icache/scache does not flushed properly. Make blast_?cache_page_indexed() masks its index value correctly. Also, use physical address for physically indexed pcache/scache. Signed-off-by: Atsushi Nemoto Signed-off-by: Ralf Baechle commit a3c4946db4fe64cb21b66a09e89890678aac6d65 Author: Ralf Baechle Date: Mon Mar 13 16:16:29 2006 +0000 [MIPS] SB1: Fix interrupt disable hazard. The SB1 core has a three cycle interrupt disable hazard but we were wrongly treating it as fully interlocked. Signed-off-by: Ralf Baechle commit 3a2f735700332621274aca752be3b6f839fa47e7 Author: Ralf Baechle Date: Fri Mar 10 19:47:17 2006 +0000 [MIPS] Get rid of the IP22-specific code in arclib. This breaks the kernel build if sgiwd93 was configured as a module. Signed-off-by: Ralf Baechle commit 7425b3403131d652c24f5047574e6c21034813ed Author: Ralf Baechle Date: Fri Mar 10 13:47:21 2006 +0000 Update MAINTAINERS entry for MIPS. Signed-off-by: Ralf Baechle commit 265a92856b17524c87da0258ac0d3cec80ae1d35 Author: Alexey Kuznetsov Date: Fri Mar 17 16:05:43 2006 -0800 [NET]: Fix race condition in sk_wait_event(). It is broken, the condition is checked out of socket lock. It is wonderful the bug survived for so long time. [ This fixes bugzilla #6233: race condition in tcp_sendmsg when connection became established ] Signed-off-by: David S. Miller commit 6f5e6b9e69bf043074a0edabe3d271899c34eb79 Author: Hugh Dickins Date: Thu Mar 16 23:04:09 2006 -0800 [PATCH] fix free swap cache latency Lee Revell reported 28ms latency when process with lots of swapped memory exits. 2.6.15 introduced a latency regression when unmapping: in accounting the zap_work latency breaker, pte_none counted 1, pte_present PAGE_SIZE, but a swap entry counted nothing at all. We think of pages present as the slow case, but Lee's trace shows that free_swap_and_cache's radix tree lookup can make a lot of work - and we could have been doing it many thousands of times without a latency break. Move the zap_work update up to account swap entries like pages present. This does account non-linear pte_file entries, and unmap_mapping_range skipping over swap entries, by the same amount even though they're quick: but neither of those cases deserves complicating the code (and they're treated no worse than they were in 2.6.14). Signed-off-by: Hugh Dickins Acked-by: Nick Piggin Acked-by: Ingo Molnar Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 7670f023aabd976c25862e4c6fb9f6d9d2758153 Author: Sam Ravnborg Date: Thu Mar 16 23:04:08 2006 -0800 [PATCH] kbuild: fix buffer overflow in modpost Jiri Benc reported that modpost would stop with SIGABRT if used with long filepaths. The error looked like: > Building modules, stage 2. > MODPOST > *** glibc detected *** scripts/mod/modpost: realloc(): invalid next size: +0x0809f588 *** > [...] Fix this by allocating at least the required memory + SZ bytes each time. Before we sometimes ended up allocating too little memory resuting in the glibc detected bug above. Based on patch originally submitted by: Jiri Benc Signed-off-by: Sam Ravnborg Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 85c6932ef0c7a82c309f8728ddf29768001d794e Author: Peter Staubach Date: Thu Mar 16 23:04:02 2006 -0800 [PATCH] nfsservctl(): remove user-triggerable printk A user can use nfsservctl() to spam the logs. This can happen because the arguments to the nfsservctl() system call are versioned. This is a good thing. However, when a bad version is detected, the kernel prints a message and then returns an error. Signed-off-by: Peter Staubach Cc: Trond Myklebust Cc: Neil Brown Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 5b40dc780ed996162f3af8712eb03beb24dcdbef Author: Christoph Lameter Date: Thu Mar 16 23:04:07 2006 -0800 [PATCH] fix race in pagevec_strip? We can call try_to_release_page() with PagePrivate off and a valid page->mapping This may cause all sorts of trouble for the filesystem *_releasepage() handlers. XFS bombs out in that case. Lock the page before checking for page private. Signed-off-by: Christoph Lameter Cc: Nick Piggin Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 8ba32fde2c5be52865b2fd7e5e3752a46971fabe Author: Kevin Corry Date: Thu Mar 16 23:04:03 2006 -0800 [PATCH] dm stripe: Fix bounds The dm-stripe target currently does not enforce that the size of a stripe device be a multiple of the chunk-size. Under certain conditions, this can lead to I/O requests going off the end of an underlying device. This test-case shows one example. echo "0 100 linear /dev/hdb1 0" | dmsetup create linear0 echo "0 100 linear /dev/hdb1 100" | dmsetup create linear1 echo "0 200 striped 2 32 /dev/mapper/linear0 0 /dev/mapper/linear1 0" | \ dmsetup create stripe0 dd if=/dev/zero of=/dev/mapper/stripe0 bs=1k This will produce the output: dd: writing '/dev/mapper/stripe0': Input/output error 97+0 records in 96+0 records out And in the kernel log will be: attempt to access beyond end of device dm-0: rw=0, want=104, limit=100 The patch will check that the table size is a multiple of the stripe chunk-size when the table is created, which will prevent the above striped device from being created. This should not affect tools like LVM or EVMS, since in all the cases I can think of, striped devices are always created with the sizes being a multiple of the chunk-size. The size of a stripe device must be a multiple of its chunk-size. (akpm: that typecast is quite gratuitous) Signed-off-by: Kevin Corry Signed-off-by: Alasdair G Kergon Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 82c3c03a4096badd026c6e337f3c5dde020e9ec6 Author: Srivatsa Vaddagiri Date: Thu Mar 16 23:04:06 2006 -0800 [PATCH] x86: check for online cpus before bringing them up Bryce reported a bug wherein offlining CPU0 (on x86 box) and then subsequently onlining it resulted in a lockup. On x86, CPU0 is never offlined. The subsequent attempt to online CPU0 doesn't take that into account. It actually tries to bootup the already booted CPU. Following patch fixes the problem (as acknowledged by Bryce). Please consider for inclusion in 2.6.16. Check if cpu is already online. Signed-off-by: Srivatsa Vaddagiri Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 8532159f5521ba24e697f0d25970ae89ff62a1f2 Author: Eric Van Hensbergen Date: Thu Mar 16 23:04:04 2006 -0800 [PATCH] v9fs: fix overzealous dropping of dentry which breaks dcache There is a d_drop in dir_release which caused problems as it invalidates dcache entries too soon. This was likely a part of the wierd cwd behavior folks were seeing. Signed-off-by: Eric Van Hensbergen Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit a0a0c28c1a7109d7955815074c52cac079ab3ba5 Author: Roman Zippel Date: Thu Mar 16 23:04:01 2006 -0800 [PATCH] posix-timers: fix requeue accounting when signal is ignored When the posix-timer signal is ignored then the timer is rearmed by the callback function. The requeue pending accounting has to be fixed up else the state might be wrong. Signed-off-by: Roman Zippel Signed-off-by: Thomas Gleixner Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 67890d7084085e29c51afa2514036d42643fd3cf Author: Christoph Lameter Date: Thu Mar 16 23:04:00 2006 -0800 [PATCH] time_interpolator: add __read_mostly The pointer to the current time interpolator and the current list of time interpolators are typically only changed during bootup. Adding __read_mostly takes them away from possibly hot cachelines. Signed-off-by: Christoph Lameter Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 90036ee5938d89638e80f4d0d0700d0f2dbd4a6a Author: Christoph Lameter Date: Thu Mar 16 23:03:59 2006 -0800 [PATCH] page migration: Fail with error if swap not setup Currently the migration of anonymous pages will silently fail if no swap is setup. This patch makes page migration functions check for available swap and fail with -ENODEV if no swap space is available. Signed-off-by: Christoph Lameter Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit e0e8eb54d8ae0c4cfd1d297f6351b08a7f635c5f Author: Eric W. Biederman Date: Thu Mar 16 10:31:38 2006 -0700 [PATCH] unshare: Use rcu_assign_pointer when setting sighand The sighand pointer only needs the rcu_read_lock on the read side. So only depending on task_lock protection when setting this pointer is not enough. We also need a memory barrier to ensure the initialization is seen first. Use rcu_assign_pointer as it does this for us, and clearly documents that we are setting an rcu readable pointer. Signed-off-by: Eric W. Biederman Acked-by: Paul E. McKenney Signed-off-by: Linus Torvalds commit 232a347a444e687b5f8cf0f6485704db1c6024d3 Author: Scott Bardone Date: Thu Mar 16 19:20:40 2006 -0500 [netdrvr] fix array overflows in Chelsio driver Adrian Bunk wrote: > The Coverity checker spotted the following two array overflows in > drivers/net/chelsio/sge.c (in both cases, the arrays contain 3 > elements): [snip] This is a bug. The array should contain 2 elements. Here is the fix. Signed-off-by: Scott Bardone Signed-off-by: Jeff Garzik commit c3d7a3a4eb5e8f290d7b1d61430eed1ebedeb936 Author: David S. Miller Date: Wed Mar 15 14:26:28 2006 -0800 [PATCH] e1000 endianness bugs return -E_NO_BIG_ENDIAN_TESTING; [E1000]: Fix 4 missed endianness conversions on RX descriptor fields. Signed-off-by: David S. Miller Signed-off-by: Jeff Garzik commit 1ae5db3742a0cfaf347231ff0bf181132c64e883 Author: Paul Mackerras Date: Wed Mar 15 16:22:54 2006 +1100 powerpc: update defconfigs Signed-off-by: Paul Mackerras commit 92eb4602eb5c37db86cd9d2b1f4c8ca304fbc49f Author: John Rose Date: Tue Mar 14 17:46:45 2006 -0600 [PATCH] powerpc: properly configure DDR/P5IOC children devs The dynamic add path for PCI Host Bridges can fail to configure children adapters under P5IOC controllers. It fails to properly fixup bus/device resources, and it fails to properly enable EEH. Both of these steps need to occur before any children devices are enabled in pci_bus_add_devices(). Signed-off-by: John Rose Signed-off-by: Paul Mackerras commit 920573bd03bf690135967b5022362d34ede589c3 Author: Olaf Hering Date: Tue Mar 14 21:21:11 2006 +0100 [PATCH] powerpc: remove duplicate EXPORT_SYMBOLS remove warnings when building a 64bit kernel. smp_call_function triggers also with 32bit kernel. WARNING: vmlinux: duplicate symbol 'smp_call_function' previous definition was in vmlinux arch/powerpc/kernel/ppc_ksyms.c:164:EXPORT_SYMBOL(smp_call_function); arch/powerpc/kernel/smp.c:300:EXPORT_SYMBOL(smp_call_function); WARNING: vmlinux: duplicate symbol 'ioremap' previous definition was in vmlinux arch/powerpc/kernel/ppc_ksyms.c:113:EXPORT_SYMBOL(ioremap); arch/powerpc/mm/pgtable_64.c:321:EXPORT_SYMBOL(ioremap); WARNING: vmlinux: duplicate symbol '__ioremap' previous definition was in vmlinux arch/powerpc/kernel/ppc_ksyms.c:117:EXPORT_SYMBOL(__ioremap); arch/powerpc/mm/pgtable_64.c:322:EXPORT_SYMBOL(__ioremap); WARNING: vmlinux: duplicate symbol 'iounmap' previous definition was in vmlinux arch/powerpc/kernel/ppc_ksyms.c:118:EXPORT_SYMBOL(iounmap); arch/powerpc/mm/pgtable_64.c:323:EXPORT_SYMBOL(iounmap); Signed-off-by: Olaf Hering Signed-off-by: Paul Mackerras commit 0e8ed479125a6d246e17cfe6c24e140bfeb01972 Author: Michael Neuling Date: Tue Mar 14 17:11:51 2006 +1100 [PATCH] powerpc: RTC memory corruption We should be memset'ing the data we are pointing to, not the pointer itself. This is in an error path so we probably don't hit it much. Signed-off-by: Michael Neuling Signed-off-by: Paul Mackerras commit c6cb3b5f368bae67c0b258cfebc0b9dbd8e1d929 Author: Benjamin Herrenschmidt Date: Sun Mar 12 10:55:01 2006 +1100 [PATCH] powerpc: enable NAP only on cpus who support it to avoid memory corruption This patch fixes incorrect setting of powersave_nap to 1 on all PowerMacs, potentially causing memory corruption on some models. This bug was introuced by me during the 32/64 bits merge. Signed-off-by: Benjamin Herrenschmidt Signed-off-by: Paul Mackerras commit cd9c99d7e5f75e137c2ea0cf693773d63c8d945c Author: Michael Ellerman Date: Fri Mar 10 15:01:08 2006 +1100 [PATCH] powerpc: Clarify wording for CRASH_DUMP Kconfig option The wording of the CRASH_DUMP Kconfig option is not very clear. It gives you a kernel that can be used _as_ the kdump kernel, not a kernel that can boot into a kdump kernel. Signed-off-by: Michael Ellerman Signed-off-by: Paul Mackerras commit e2c552cc89287e31b0b2472866a69a44b150acd2 Author: Olaf Hering Date: Mon Mar 6 16:39:25 2006 +0100 [PATCH] powerpc/64: enable CONFIG_BLK_DEV_SL82C105 Enable the onboard IDE driver for p610, p615 and p630. They have the CD connected to this card. All other RS/6000 systems with this controller have no connectors and dont need this option. Signed-off-by: Olaf Hering Signed-off-by: Paul Mackerras commit eacb1962d4594b9d382b40acd73a9c9492718f74 Author: Olaf Hering Date: Sat Mar 4 13:15:40 2006 +0100 [PATCH] powerpc: correct cacheflush loop in zImage Correct the loop for cacheflush. No idea where I copied the code from, but the original does not work correct. Maybe the flush is not needed. Signed-off-by: Olaf Hering Signed-off-by: Paul Mackerras commit 0a45d4491d0f172e02126370f312405c5d473363 Author: Paul Mackerras Date: Wed Mar 15 13:47:15 2006 +1100 powerpc: Fix problem with time going backwards The recent changes to keep gettimeofday in sync with xtime had the side effect that it was occasionally possible for the time reported by gettimeofday to go back by a microsecond. There were two reasons: (1) when we recalculated the offsets used by gettimeofday every 2^31 timebase ticks, we lost an accumulated fractional microsecond, and (2) because the update is done some time after the notional start of jiffy, if ntp is slowing the clock, it is possible to see time go backwards when the timebase factor gets reduced. This fixes it by (a) slowing the gettimeofday clock by about 1us in 2^31 timebase ticks (a factor of less than 1 in 3.7 million), and (b) adjusting the timebase offsets in the rare case that the gettimeofday result could possibly go backwards (i.e. when ntp is slowing the clock and the timer interrupt is late). In this case the adjustment will reduce to zero eventually because of (a). Signed-off-by: Paul Mackerras commit 2d7f2ea9c989853310c7f6e8be52cc090cc8e66b Author: Al Viro Date: Wed Mar 15 21:41:59 2006 +0000 [PATCH] Fix ext2 readdir f_pos re-validation logic This fixes not one, but _two_, silly (but admittedly hard to hit) bugs in the ext2 filesystem "readdir()" function. It also cleans up the code to avoid the unnecessary goto mess. The bugs were related to re-valiating the f_pos value after somebody had either done an "lseek()" on the directory to an invalid offset, or when the offset had become invalid due to a file being unlinked in the directory. The code would not only set the f_version too eagerly, it would also not update f_pos appropriately for when the offset fixup took place. When that happened, we'd occasionally subsequently fail the readdir() even when we shouldn't (no real harm done, but an ugly printk, and obviously you would end up not necessarily seeing all entries). Thanks to Masoud Sharbiani who noticed the problem and had a test-case for it, and also fixed up a thinko in the first version of this patch. Signed-off-by: Al Viro Acked-by: Masoud Sharbiani Signed-off-by: Linus Torvalds commit 4333298965cd62585bec891a6a5c9f4c806fc6bd Author: Ben Dooks Date: Wed Mar 15 23:18:08 2006 +0000 [ARM] 3362/1: [cleanup] - duplicate decleration of mem_fclk_21285 Patch from Ben Dooks arch/arm/kernel/setup.c declares mem_fclk_21285 when this is already declared in include/asm-arm/system.h Signed-off-by: Ben Dooks Signed-off-by: Russell King commit 0fc1c832123493aca4c6a8600179132651f48bdc Author: Ben Dooks Date: Wed Mar 15 23:17:30 2006 +0000 [ARM] 3365/1: [cleanup] header for compat.c exported functions Patch from Ben Dooks arch/arm/kernel/compat.c exports two functions, convert_to_tag_list and squash_mem_tags which are not defined in any header files, and not used outside arch/arm/kernel. Signed-off-by: Ben Dooks Signed-off-by: Russell King commit dabaeff06cca86048cfa3f74ce59688bc3addba9 Author: Ben Dooks Date: Wed Mar 15 23:17:26 2006 +0000 [ARM] 3364/1: [cleanup] warning fix - definitions for enable_hlt and disable_hlt Patch from Ben Dooks The enable_hlt and disable_hlt should be declared in include/asm/setup.h. This fixes sparse errors from arch/arm/kernel/process.c Signed-off-by: Ben Dooks Signed-off-by: Russell King commit 84dff1a73013dbdd7d770c332ab84cbfed24741b Author: Ben Dooks Date: Wed Mar 15 23:17:23 2006 +0000 [ARM] 3363/1: [cleanup] process.c - fix warnings Patch from Ben Dooks Fix the following warnings from sparse: arch/arm/kernel/process.c:86:6: warning: symbol 'default_idle' was not declared. Should it be static? arch/arm/kernel/process.c:378:5: warning: symbol 'dump_fpu' was not declared. Should it be static? Include for dump_fpu() decleration, and make default_idle() static as it is not used outside the file. Signed-off-by: Ben Dooks Signed-off-by: Russell King commit 72df16f109b73be37977a26d342e9103e8851cb6 Author: Hong Liu Date: Wed Mar 8 10:50:20 2006 +0800 [PATCH] ieee80211: Fix QoS is not active problem Fix QoS is not active even the network and the card is QOS enabled. The problem is we pass the wrong ieee80211_network address to ipw_handle_beacon/ipw_handle_probe_response, thus the ieee80211_network->qos_data.active will not be set, causing the driver not sending QoS frames at all. Signed-off-by: Hong Liu Signed-off-by: Zhu Yi Signed-off-by: John W. Linville commit 0df7861240b3484dea52d1f5782c69fd95b6cf23 Author: Zhu Yi Date: Tue Feb 28 15:10:36 2006 +0800 [PATCH] ieee80211: Fix CCMP decryption problem when QoS is enabled Use the correct STYPE for Qos data. Signed-off-by: Zhu Yi Signed-off-by: John W. Linville commit aa49cdd93be6328113f0c146fc72be173d578d27 Author: Jesse Brandeburg Date: Wed Mar 15 10:55:24 2006 -0800 e100: fix eeh on pseries during ethtool -t Olaf Hering reported a problem on pseries with e100 where ethtool -t would cause a bus error, and the e100 driver would stop working. Due to the new load ucode command the cb list must be allocated before calling e100_init_hw, so remove the call and just let e100_up take care of it. Signed-off-by: Jesse Brandeburg commit f13b83580acef03a36c785dccc534ccdd7e43084 Author: Adrian Bunk Date: Wed Mar 15 17:37:32 2006 +0100 [PATCH] fs/namespace.c:dup_namespace(): fix a use after free The Coverity checker spotted the following bug in dup_namespace(): <-- snip --> if (!new_ns->root) { up_write(&namespace_sem); kfree(new_ns); goto out; } ... out: return new_ns; <-- snip --> Callers expect a non-NULL result to not be freed. Signed-off-by: Adrian Bunk Signed-off-by: Linus Torvalds commit 66be0c30282bef9ef5ab1f89028834ea00f4b4ae Author: Albrecht Dreß Date: Wed Mar 15 16:03:05 2006 +0000 [ARM] 3358/1: [S3C2410] add missing SPI DMA resources Patch from Albrecht Dreß Add DMA resources to s3c2410 spi platform devices - dma_(alloc|free)_coherent should now work as expected. Signed-off-by: Albrecht Dreß Signed-off-by: Ben Dooks Signed-off-by: Russell King commit 4ebf2d00260bac5213c5dfb8d257e15e40503725 Author: Pavel Machek Date: Wed Mar 15 16:03:03 2006 +0000 [ARM] 3357/1: enable frontlight on collie Patch from Pavel Machek Enable frontlight during collie bootup, so that display is actually readable in anything other than bright sunlight. Signed-off-by: Pavel Machek Signed-off-by: Richard Purdie Signed-off-by: Russell King commit 17320a9644a45ccac51ce4ff4333276844abf72d Author: Russell King Date: Wed Mar 15 14:57:13 2006 +0000 [ARM] Fix "thead" typo Signed-off-by: Russell King commit 74c002410548c7cb1744b45d17a5fa21da515b63 Author: Christoph Lameter Date: Tue Mar 14 19:50:21 2006 -0800 [PATCH] Consistent capabilites associated with MPOL_MOVE_ALL It seems that setting scheduling policy and priorities is also the kind of thing that might be performed in apps that also use the NUMA API, so it would seem consistent to use CAP_SYS_NICE for NUMA also. So use CAP_SYS_NICE for controlling migration permissions. Signed-off-by: Christoph Lameter Cc: Michael Kerrisk Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit b4fb376628e63bfc8071fc915b921da3db4a3385 Author: Christoph Lameter Date: Tue Mar 14 19:50:20 2006 -0800 [PATCH] Page migration documentation update Update the documentation for page migration. - Fix up bits and pieces in cpusets.txt - Rework text in vm/page-migration to be clearer and reflect the final version of page migration in 2.6.16. Mention Andi Kleen's numactl package that contains user space tools for page migration via libnuma. Add reference to numa_maps and to the manpage in numactl. - Add todo list for outstanding issues Signed-off-by: Christoph Lameter Acked-by: Paul Jackson Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 4983da07f1e2e8dc81cb9d640fbf35b899cdbdf2 Author: Christoph Lameter Date: Tue Mar 14 19:50:19 2006 -0800 [PATCH] page migration: fail if page is in a vma flagged VM_LOCKED page migration currently simply retries a couple of times if try_to_unmap() fails without inspecting the return code. However, SWAP_FAIL indicates that the page is in a vma that has the VM_LOCKED flag set (if ignore_refs ==1). We can check for that return code and avoid retrying the migration. migrate_page_remove_references() now needs to return a reason why the failure occured. So switch migrate_page_remove_references to use -Exx style error messages. Signed-off-by: Christoph Lameter Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit e843e280cbe218fc8387339806d344708dee348a Author: Greg Smith Date: Tue Mar 14 19:50:17 2006 -0800 [PATCH] "s390: multiple subchannel sets support" fix It seems this patch got dropped (it was in addition to the `s390: improve response code handling in chsc_enable_facility()' patch). Acked-by: Cornelia Huck Cc: Martin Schwidefsky Cc: Heiko Carstens Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 3fb962bde48c413bfa419ec4413037e87955dcb6 Author: Nathan Scott Date: Wed Mar 15 15:14:45 2006 +1100 Fix a direct I/O locking issue revealed by the new mutex code. Affects only XFS (i.e. DIO_OWN_LOCKING case) - currently it is not possible to get i_mutex locking correct when using DIO_OWN direct I/O locking in a filesystem due to indeterminism in the possible return code/lock/unlock combinations. This can cause a direct read to attempt a double i_mutex unlock inside XFS. We're now ensuring __blockdev_direct_IO always exits with the inode i_mutex (still) held for a direct reader. Tested with the three different locking modes (via direct block device access, ext3 and XFS) - both reading and writing; cannot find any regressions resulting from this change, and it clearly fixes the mutex_unlock warning originally reported here: http://marc.theaimsgroup.com/?l=linux-kernel&m=114189068126253&w=2 Signed-off-by: Nathan Scott Acked-by: Christoph Hellwig commit a488edc914aa1d766a4e2c982b5ae03d5657ec1b Author: Dave Kleikamp Date: Tue Mar 14 13:44:00 2006 -0600 [PATCH] JFS: Take logsync lock before testing mp->lsn This fixes a race where lsn could be cleared before taking the lock Signed-off-by: Dave Kleikamp Signed-off-by: Linus Torvalds commit 67963132638e67ad3c5aa16765e6f3f2f3cdd85c Author: Maneesh Soni Date: Tue Mar 14 15:03:14 2006 +0530 [PATCH] Plug kdump shutdown race window lapic_shutdown() re-enables interrupts which is un-desirable for panic case, so use local_irq_save() and local_irq_restore() to keep the irqs disabled for kexec on panic case, and close a possible race window while kdump shutdown as shown in this stack trace -- BUG: spinlock lockup on CPU#1, bash/4396, c52781a0 [] _raw_spin_lock+0xb7/0xd2 [] _spin_lock+0x6/0x8 [] scheduler_tick+0xe7/0x328 [] update_process_times+0x51/0x5d [] smp_apic_timer_interrupt+0x4f/0x58 [] lapic_shutdown+0x76/0x7e [] apic_timer_interrupt+0x1c/0x30 [] lapic_shutdown+0x76/0x7e [] machine_crash_shutdown+0x83/0xaa [] crash_kexec+0xc1/0xe3 [] _spin_lock+0x6/0x8 [] crash_kexec+0xad/0xe3 [] __handle_sysrq+0x84/0xfd [] write_sysrq_trigger+0x2c/0x35 [] vfs_write+0xa2/0x13b [] sys_write+0x3b/0x64 [] syscall_call+0x7/0xb Signed-off-by: Maneesh Soni Signed-off-by: Linus Torvalds commit cbf0ec6ee001ab89471397ac84105b2e3b2fd986 Author: Linus Torvalds Date: Tue Mar 14 08:01:47 2006 -0800 Revert "[PATCH] x86-64: Fix up handling of non canonical user RIPs" This reverts commit c33d4568aca9028a22857f94f5e0850012b6444b. Andrew Clayton and Hugh Dickins report that it's broken for them and causes strange page table and slab corruption, and spontaneous reboots. Let's get it right next time. Cc: Andrew Clayton Cc: Hugh Dickins Cc: Andi Kleen Signed-off-by: Linus Torvalds commit ceb2ca9cb0bfd885127fa9a2c27127b3fe1c8f28 Author: Dave Peterson Date: Mon Mar 13 21:20:50 2006 -0800 [PATCH] EDAC: disable sysfs interface - Disable the EDAC sysfs code. The sysfs interface that EDAC presents to user space needs more thought, and is likely to change substantially. Therefore disable it for now so users don't start depending on it in its current form. - Disable the default behavior of calling panic() when an uncorrectible error is detected (since for now, there is no sysfs interface that allows the user to configure this behavior). Signed-off-by: David S. Peterson Cc: Greg KH Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 30f4e20a0d3492668f5065af582b5af2d1e4256b Author: Trond Myklebust Date: Mon Mar 13 21:20:49 2006 -0800 [PATCH] NLM: Ensure we do not Oops in the case of an unlock In theory, NLM specs assure us that the server will only reply LCK_GRANTED or LCK_DENIED_GRACE_PERIOD to our NLM_UNLOCK request. In practice, we should not assume this to be the case, and the code will currently Oops if we do. Signed-off-by: Trond Myklebust Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit e6d83d55698b73b4d5d55d3d7715a4c26030d577 Author: Trond Myklebust Date: Mon Mar 13 21:20:48 2006 -0800 [PATCH] SUNRPC: Fix potential deadlock in RPC code In rpc_wake_up() and rpc_wake_up_status(), it is possible for the call to __rpc_wake_up_task() to fail if another thread happens to be calling rpc_wake_up_task() on the same rpc_task. Problem noticed by Bruno Faccini. Signed-off-by: Trond Myklebust Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit c12e87f4652b1ba3be168b4f63a440399b941928 Author: Trond Myklebust Date: Mon Mar 13 21:20:47 2006 -0800 [PATCH] NFSv4: fix mount segfault on errors returned that are < -1000 It turns out that nfs4_proc_get_root() may return raw NFSv4 errors instead of mapping them to kernel errors. Problem spotted by Neil Horman Signed-off-by: Trond Myklebust Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 712917d1c002f820b177683f4fd491289bde3c32 Author: Adrian Bunk Date: Mon Mar 13 21:20:47 2006 -0800 [PATCH] SUNRPC: fix a NULL pointer dereference in net/sunrpc/clnt.c The Coverity checker spotted this possible NULL pointer dereference in rpc_new_client(). Signed-off-by: Adrian Bunk Signed-off-by: Trond Myklebust Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 143f412eb4c7cc48b9eb4381f9133b7d36c68075 Author: Trond Myklebust Date: Mon Mar 13 21:20:46 2006 -0800 [PATCH] NFS: Fix a potential panic in O_DIRECT Based on an original patch by Mike O'Connor and Greg Banks of SGI. Mike states: A normal user can panic an NFS client and cause a local DoS with 'judicious'(?) use of O_DIRECT. Any O_DIRECT write to an NFS file where the user buffer starts with a valid mapped page and contains an unmapped page, will crash in this way. I haven't followed the code, but O_DIRECT reads with similar user buffers will probably also crash albeit in different ways. Details: when nfs_get_user_pages() calls get_user_pages(), it detects and correctly handles get_user_pages() returning an error, which happens if the first page covered by the user buffer's address range is unmapped. However, if the first page is mapped but some subsequent page isn't, get_user_pages() will return a positive number which is less than the number of pages requested (this behaviour is sort of analagous to a short write() call and appears to be intentional). nfs_get_user_pages() doesn't detect this and hands off the array of pages (whose last few elements are random rubbish from the newly allocated array memory) to it's caller, whence they go to nfs_direct_write_seg(), which then totally ignores the nr_pages it's given, and calculates its own idea of how many pages are in the array from the user buffer length. Needless to say, when it comes to transmit those uninitialised page* pointers, we see a crash in the network stack. Signed-off-by: Trond Myklebust Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit f9a3879abf2f1a27c39915e6074b8ff15a24cb55 Author: GOTO Masanori Date: Mon Mar 13 21:20:44 2006 -0800 [PATCH] Fix sigaltstack corruption among cloned threads This patch fixes alternate signal stack corruption among cloned threads with CLONE_SIGHAND (and CLONE_VM) for linux-2.6.16-rc6. The value of alternate signal stack is currently inherited after a call of clone(... CLONE_SIGHAND | CLONE_VM). But if sigaltstack is set by a parent thread, and then if multiple cloned child threads (+ parent threads) call signal handler at the same time, some threads may be conflicted - because they share to use the same alternative signal stack region. Finally they get sigsegv. It's an undesirable race condition. Note that child threads created from NPTL pthread_create() also hit this conflict when the parent thread uses sigaltstack, without my patch. To fix this problem, this patch clears the child threads' sigaltstack information like exec(). This behavior follows the SUSv3 specification. In SUSv3, pthread_create() says "The alternate stack shall not be inherited (when new threads are initialized)". It means that sigaltstack should be cleared when sigaltstack memory space is shared by cloned threads with CLONE_SIGHAND. Note that I chose "if (clone_flags & CLONE_SIGHAND)" line because: - If clone_flags line is not existed, fork() does not inherit sigaltstack. - CLONE_VM is another choice, but vfork() does not inherit sigaltstack. - CLONE_SIGHAND implies CLONE_VM, and it looks suitable. - CLONE_THREAD is another candidate, and includes CLONE_SIGHAND + CLONE_VM, but this flag has a bit different semantics. I decided to use CLONE_SIGHAND. [ Changed to test for CLONE_VM && !CLONE_VFORK after discussion --Linus ] Signed-off-by: GOTO Masanori Cc: Roland McGrath Cc: Ingo Molnar Acked-by: Linus Torvalds Cc: Ulrich Drepper Cc: Jakub Jelinek Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 63e1fd41c7127650d355e7db7dd92890edf5523b Author: Benjamin Herrenschmidt Date: Mon Mar 13 21:20:42 2006 -0800 [PATCH] macintosh: correct AC Power info in /proc/pmu/info Report AC Power present in /proc/pmu/info if there is no battery. Signed-off-by: Olaf Hering Signed-off-by: Benjamin Herrenschmidt , Cc: Paul Mackerras Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 6acaba8e22bb355409e06d9e7ce4e7bef1bcaa04 Author: Michael Hunold Date: Mon Mar 13 21:20:41 2006 -0800 [PATCH] Restore tuning capabilities in V4L2 MXB driver The behaviour of the all-in-one Video4Linux tuner driver apparently changed. It now wants to know the tv standard, otherwise it refuses to tune. Restore tuning functionality in my driver for the "Multimedia eXtension Board". The all-in-one tuner driver apparently changed its behaviour. Signed-off-by: Michael Hunold Cc: Mauro Carvalho Chehab Cc: Johannes Stezenbach Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 3cb4f09fc2e98bbf26f8c900a94bf3910cd4d823 Author: David Brownell Date: Mon Mar 13 21:20:40 2006 -0800 [PATCH] mtd_dataflash, fix block vs page erase Fix a bug in the block-erase optimization for Dataflash; it was using block erase even for smaller segments that need page erase. That wouldn't matter for JFFS2, which never erases less than one block (sometimes several blocks), but for other callers it might. Signed-off-by: David Brownell Acked-by: David Woodhouse Acked-by: Thomas Gleixner Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 82dfdcae0d57c842e02f037758687eef42fb7af6 Author: Paul Mackerras Date: Tue Mar 14 11:35:37 2006 +1100 powerpc: Disallow lparcfg being a module The lparcfg code needs several things which are pretty arcane internal details and which we don't want to export, which means that lparcfg doesn't work when built as a module. This makes it a bool instead of a tristate in the Kconfig so that users can't try to build it as a module. Signed-off-by: Paul Mackerras commit 3759fa9c55923f719ae944a3f8fbb029b36f759d Author: Herbert Xu Date: Mon Mar 13 14:26:12 2006 -0800 [TCP]: Fix zero port problem in IPv6 When we link a socket into the hash table, we need to make sure that we set the num/port fields so that it shows us with a non-zero port value in proc/netlink and on the wire. This code and comment is copied over from the IPv4 stack as is. Signed-off-by: Herbert Xu commit c33d4568aca9028a22857f94f5e0850012b6444b Author: Andi Kleen Date: Sun Mar 12 23:52:59 2006 +0100 [PATCH] x86-64: Fix up handling of non canonical user RIPs EM64T CPUs have somewhat weird error reporting for non canonical RIPs in SYSRET. We can't handle any exceptions there because the exception handler would end up running on the user stack which is unsafe. To avoid problems any code that might end up with a user touched pt_regs should return using int_ret_from_syscall. int_ret_from_syscall ends up using IRET, which allows safe exceptions. Cc: Ernie Petrides Signed-off-by: Andi Kleen Signed-off-by: Linus Torvalds commit 31fe4d331729e9687db84521c3ceb8e43390efcf Author: Patrick McHardy Date: Sun Mar 12 20:40:43 2006 -0800 [NETFILTER]: arp_tables: fix NULL pointer dereference The check is wrong and lets NULL-ptrs slip through since !IS_ERR(NULL) is true. Coverity #190 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit baa829d8926f02ab04be6ec37780810d221c5b4b Author: Patrick McHardy Date: Sun Mar 12 20:35:12 2006 -0800 [IPV4/6]: Fix UFO error propagation When ufo_append_data fails err is uninitialized, but returned back. Strangely gcc doesn't notice it. Coverity #901 and #902 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit 4a1ff6e2bde56cdf176bd54d557b2e15e819f810 Author: Patrick McHardy Date: Sun Mar 12 20:34:53 2006 -0800 [TCP]: tcp_highspeed: fix AIMD table out-of-bounds access Covertiy #547 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit cc9a06cd8d6fbb69b4d3c46760c132cfe312fb85 Author: Patrick McHardy Date: Sun Mar 12 20:34:27 2006 -0800 [NETLINK]: Fix use-after-free in netlink_recvmsg The skb given to netlink_cmsg_recv_pktinfo is already freed, move it up a few lines. Coverity #948 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit f8dc01f543f28253abeef649987249210d8db3cc Author: Patrick McHardy Date: Sun Mar 12 20:33:49 2006 -0800 [XFRM]: Fix leak in ah6_input tmp_hdr is not freed when ipv6_clear_mutable_options fails. Coverity #650 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit f6e57464df7ba0e91a23b0854adb56852dcd58a7 Author: Patrick McHardy Date: Sun Mar 12 20:33:22 2006 -0800 [NET_SCHED]: act_api: fix skb leak in error path The skb is allocated by the function, so it needs to be freed instead of trimmed on overrun. Coverity #614 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit 406dbfc9ae0e6b7eb4da4a52c0a6556a0d7e6a2f Author: Patrick McHardy Date: Sun Mar 12 20:32:47 2006 -0800 [NETFILTER]: nfnetlink_queue: fix possible NULL-ptr dereference Fix NULL-ptr dereference when a config message for a non-existant queue containing only an NFQA_CFG_PARAMS attribute is received. Coverity #433 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit cdaabbd74b15296acf09215355a7f3b07b92b83e Author: Russell King Date: Sun Mar 12 22:36:06 2006 +0000 [ARM] iwmmxt thread state alignment This patch removes the reliance of iwmmxt on hand coded alignments. Since thread_info is always 8K aligned, specifying that fpstate is 8-byte aligned achieves the same effect without needing to resort to hand coded alignments. Signed-off-by: Russell King commit ba244fe9005323452428fee4b4b7d0c70a06b627 Author: David S. Miller Date: Sat Mar 11 18:51:49 2006 -0800 [TCP]: Fix tcp_tso_should_defer() when limit>=65536 That's >= a full sized TSO frame, so we should always return 0 in that case. Based upon a report and initial patch from Lachlan Andrew, final patch suggested by Herbert Xu. Signed-off-by: David S. Miller commit c12743764129e40dc8461afc1096cf175c7c25f2 Author: Gregor Maier Date: Sat Mar 11 18:51:25 2006 -0800 [NETFILTER]: Fix wrong option spelling in Makefile for CONFIG_BRIDGE_EBT_ULOG Signed-off-by: Gregor Maier Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit 0d27b42739ee432a66104793e51a23807b372928 Author: Brian Haley Date: Sat Mar 11 18:50:14 2006 -0800 [IPV6]: fix ipv6_saddr_score struct element The scope element in the ipv6_saddr_score struct used in ipv6_dev_get_saddr() is an unsigned integer, but __ipv6_addr_src_scope() returns a signed integer (and can return -1). Signed-off-by: Brian Haley Acked-by: YOSHIFUJI Hideaki Signed-off-by: David S. Miller commit 0ade309be739eceedc4812798da09d698a59867d Author: Adrian Bunk Date: Sat Mar 11 18:49:38 2006 -0800 [TG3] tg3_bus_string(): remove dead code The Coverity checker spotted this dead code (note that (clock_ctrl == 7) is already handled above). Signed-off-by: Adrian Bunk Signed-off-by: David S. Miller commit 8f22757ee84da64d4f662f1dd03dae95358a1efe Author: Dave Jones Date: Sat Mar 11 18:49:13 2006 -0800 [TUN]: Fix leak in tun_get_user() We're leaking an skb in a failure path in this function. Coverity #632 Signed-off-by: Dave Jones Signed-off-by: David S. Miller commit 6971ed1fbbc80cae54e082aae153d5b063885d0a Author: Tejun Heo Date: Sat Mar 11 12:47:54 2006 +0900 [PATCH] ahci: fix NULL pointer dereference detected by Coverity Fix NULL pointer dereference detected by the Coverity checker. Kill dev -> pdev -> dev conversion while at it. Signed-off-by: Tejun Heo Cc: Adrian Bunk Signed-off-by: Jeff Garzik commit 535744878e34d01a53f946f26dfbca37186f2cf8 Author: Linus Torvalds Date: Sat Mar 11 14:12:55 2006 -0800 Linux 2.6.16-rc6 Gaah. Delayed. But all the better for it! commit 0992a5d029181421877a716eaf99145828ff7eae Author: Andrew Morton Date: Wed Mar 8 00:06:27 2006 -0800 [PATCH] 3c509: bus registration fix - Don't call eisa_driver_unregister() if eisa_driver_register() failed. - Properly propagate error values. Signed-off-by: Andrew Morton Signed-off-by: Jeff Garzik commit b2cba5b5777123c53852639c6a17e87709e055be Author: Sam Ravnborg Date: Wed Mar 8 00:06:33 2006 -0800 [PATCH] de620: fix section mismatch warning In latest -mm de620 gave following warning: WARNING: drivers/net/de620.o - Section mismatch: reference to \ .init.text:de620_probe from .text between 'init_module' (at offset \ 0x1682) and 'cleanup_module' init_module() call de620_probe() which is declared __init. Fix is to declare init_module() __init too. Signed-off-by: Sam Ravnborg Signed-off-by: Andrew Morton Signed-off-by: Jeff Garzik commit 28beaf651b8620b04bc6dec03e22ed5af8114936 Author: Jesper Juhl Date: Wed Mar 8 00:06:31 2006 -0800 [PATCH] NE2000 Kconfig help entry improvement Improve reference to PCI NE2K support in ISA NE2K documentation. Original 2.4 patch From: Ged Haywood Signed-off-by: Jesper Juhl Signed-off-by: Andrew Morton Signed-off-by: Jeff Garzik commit 9ee09d9cd4f57bae9cd95ea7ae5f41c29a166361 Author: Jon Mason Date: Fri Mar 10 15:12:10 2006 -0600 [PATCH] dl2k: DMA freeing error This patch fixes an error in the dl2k driver's DMA mapping/unmapping. The adapter uses the upper 16bits of the DMA address for the buffer size. However, this is not masked off when referencing the DMA address, and can lead to errors by trying to free a DMA address out of range. Thanks, Jon Signed-off-by: Jon Mason Signed-off-by: Jeff Garzik commit 9e927fb6186b6913d47d33068160088a084d568e Author: David S. Miller Date: Fri Mar 10 18:08:09 2006 -0800 [PATCH] Wrong return value corrupts free object in e1000 driver For some reason, E1000's ->hard_start_xmit() routine returns -EFAULT instead of one of the NETDEV_TX_* error codes. In fact, it frees up the SKB before returning this. This makes the queueing layer think the packet should be requeued and subsequently we corrupt a freed object. Signed-off-by: David S. Miller Signed-off-by: Jeff Garzik commit ed62178589929d248a0aaf4018ca3867e2f96d9d Author: Antonino A. Daplas Date: Sat Mar 11 03:27:28 2006 -0800 [PATCH] radeonfb: Fix static array overrun radeonfb_parse_monitor_layout() will produce an array overrun if passed with a substring of length higher than 4 (ie, "XXXXX,YYYYYY"). Coverity Bug 494 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 8e6509876c5cb079f56dbe334aafaae9a293c886 Author: Antonino A. Daplas Date: Sat Mar 11 03:27:27 2006 -0800 [PATCH] aty128fb: Fix array overrun Fix static array overrun Coverity Bug 556 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 54243cefdd3ab8133ebe7d3d705f35ca1d0b59eb Author: Antonino A. Daplas Date: Sat Mar 11 03:27:26 2006 -0800 [PATCH] tdfxfb: Fix buffer overrun The pseudo_palette has room only for 16 entries, but tdfxfb_setcolreg may attempt to write more. Coverity Bug 557 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit d301524772be3eef5fae1bcd5ca76fac69bb3b6e Author: Antonino A. Daplas Date: Sat Mar 11 03:27:26 2006 -0800 [PATCH] intelfb: Fix buffer overrun The pseudo_palette has room only for 16 entries, but intelfb_setcolreg will attempt to write more. Coverity Bug 558 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 8d57f2210e72e0168734bd1503b9e52a71f53d65 Author: Antonino A. Daplas Date: Sat Mar 11 03:27:25 2006 -0800 [PATCH] savagefb: Fix kfree before use par->edid is kfree'd before using in fb_edid_to_monspecs() Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 91bc89cf98f8aa83c64e14a8939d4f5d0790cf24 Author: Antonino A. Daplas Date: Sat Mar 11 03:27:24 2006 -0800 [PATCH] imsttfb: Fix resource leak The struct info and device resource may not be released in the driver's error path. Fix. Coverity Bug 671 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 98365f5eb47e23d6ac1244da556984a74260021e Author: Antonino A. Daplas Date: Sat Mar 11 03:27:23 2006 -0800 [PATCH] s1d13xxxfb: Fix resource leak struct info may not be released in the driver's error path. Coverity Bug 672 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 939205b27312b7d7c4c55624ba785e554b39ecbb Author: Antonino A. Daplas Date: Sat Mar 11 03:27:23 2006 -0800 [PATCH] arcfb: Fix dereference before NULL check info->par is dereferenced before info is checked for NULL. Fix. Coverity Bug 833 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 16afe814a856e271628c5dfb4abbc318ec6b6f5f Author: Antonino A. Daplas Date: Sat Mar 11 03:27:22 2006 -0800 [PATCH] kyrofb: Fix uninitialized value Initialize Variable 'count' in DisableVGA to zero. Coverity Bug 874 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 604cc999fda36d6ff840e03dbc70244d2d17eee2 Author: Antonino A. Daplas Date: Sat Mar 11 03:27:21 2006 -0800 [PATCH] arcfb: Fix uninitialized value Remove insignificant and uninitialized variable "count" from arcfb_lcd_update_page. Coverity Bug 894 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 6af7ffc414828cda880a4e99e20f4f07880281e7 Author: Antonino A. Daplas Date: Sat Mar 11 03:27:20 2006 -0800 [PATCH] neofb: Fix uninitialized value Remove insignificant and unitialized variable "waitcycles" from neo2200_sync. Coverity Bug 895 Signed-off-by: Antonino Daplas Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 1a4520bea65f9205a240bbfa473547af1c77ab19 Author: Chris Wright Date: Sat Mar 11 03:27:20 2006 -0800 [PATCH] LSM mail list has moved LSM mail list has moved. Signed-off-by: Chris Wright Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 692a2061f6f2c360188af72f1f3404a5e7f0efce Author: Chris Wright Date: Sat Mar 11 03:27:19 2006 -0800 [PATCH] update email address Update email address. Signed-off-by: Chris Wright Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 7cd9013be6c22f3ff6f777354f766c8c0b955e17 Author: Christoph Hellwig Date: Sat Mar 11 03:27:18 2006 -0800 [PATCH] remove __put_task_struct_cb export again The patch '[PATCH] RCU signal handling' [1] added an export for __put_task_struct_cb, a put_task_struct helper newly introduced in that patch. But the put_task_struct couldn't be used modular previously as __put_task_struct wasn't exported. There are not callers of it in modular code, and it shouldn't be exported because we don't want drivers to hold references to task_structs. This patch removes the export and folds __put_task_struct into __put_task_struct_cb as there's no other caller. [1] http://www2.kernel.org/git/gitweb.cgi?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e56d090310d7625ecb43a1eeebd479f04affb48b Signed-off-by: Christoph Hellwig Acked-by: Paul E. McKenney Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 27d162e26a873883937b64526445877bd3341d23 Author: Pat Gefre Date: Sat Mar 11 03:27:17 2006 -0800 [PATCH] Altix: small ioc4 oversight Get rid of the local 'flip' variable and no need to 'trim' the buffer. Signed-off-by: Patrick Gefre Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 341c2d806b71cc3596afeb2d9bd26cd718e75202 Author: Stephen Smalley Date: Sat Mar 11 03:27:16 2006 -0800 [PATCH] selinux: tracer SID fix Fix SELinux to not reset the tracer SID when the child is already being traced, since selinux_ptrace is also called by proc for access checking outside of the context of a ptrace attach. Signed-off-by: Stephen Smalley Acked-by: James Morris Acked-by: Chris Wright Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 4136cabff33d6d73b8daf2f2612670cc0296f844 Author: Arjan van de Ven Date: Sat Mar 11 03:27:15 2006 -0800 [PATCH] edac: disable a few sysfs files to avoid them becoming an ABI Disable (via ugly #if 0's) the 3 sysfs files that I think by now we all agree are very much wrong. These files shouldn't become part of the ABI by the 2.6.16 release, so I rather have this minimal patch merged to disable them for now, the real fix can then come during the 2.6.17 devel window. Signed-off-by: Arjan van de Ven Signed-off-by: Greg Kroah-Hartman Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit cd6ef84e6ac9454080707f2f338360f5d7e556fc Author: Badari Pulavarty Date: Sat Mar 11 03:27:14 2006 -0800 [PATCH] ext3: fix nobh mode for chattr +j inodes One can do "chattr +j" on a file to change its journalling mode. Fix writeback mode with "nobh" handling for it. Even though, we mount ext3 filesystem in writeback mode with "nobh" option, some one can do "chattr +j" on a single file to force it to do journalled mode. In order to do journaling, ext3_block_truncate_page() need to fallback to default case of creating buffers and adding them to transaction etc. Signed-off-by: Badari Pulavarty Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 0adb25d2e71ab047423d6fc63d5d184590d0a66f Author: Kirill Korotaev Date: Sat Mar 11 03:27:13 2006 -0800 [PATCH] ext3: ext3_symlink should use GFP_NOFS allocations inside This patch fixes illegal __GFP_FS allocation inside ext3 transaction in ext3_symlink(). Such allocation may re-enter ext3 code from try_to_free_pages. But JBD/ext3 code keeps a pointer to current journal handle in task_struct and, hence, is not reentrable. This bug led to "Assertion failure in journal_dirty_metadata()" messages. http://bugzilla.openvz.org/show_bug.cgi?id=115 Signed-off-by: Andrey Savochkin Signed-off-by: Kirill Korotaev Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 8bd0ee93fef9733c72fef1817330b3ee2b71cf9d Author: Dmitry Torokhov Date: Sat Mar 11 00:23:38 2006 -0500 [PATCH] Input: psmouse - disable autoresync Automatic resynchronization in psmouse driver causes problems on some hardware so disable it by default for now. People with KVM switches that require resync can still enable it via module parameter or sysfs attribute. Signed-off-by: Dmitry Torokhov Signed-off-by: Linus Torvalds commit 44f329ab69b742194e48f66e87064cff70fb52b8 Author: Jan Beulich Date: Wed Feb 22 13:29:04 2006 +0100 [PATCH] kbuild: version.h should depend on .kernelrelease Rebuilding a previously built tree while using make's -j option from time to time results in the version.h check running at the same time as the updating of .kernelrelease, resulting in UTS_RELEASE remaining an empty string (and as a side effect causing the entire kernel to be rebuilt). Signed-Off-By: Jan Beulich Signed-off-by: Sam Ravnborg Signed-off-by: Linus Torvalds commit 04916c0ef482335cb0ae575dbc5a1d97619840cd Author: Alessandro Zummo Date: Fri Mar 10 22:30:01 2006 +0000 [ARM] 3350/1: Enable 1-wire on ARM Patch from Alessandro Zummo This patches add the 1-wire drivers to the ARM Kconfig. Signed-off-by: Alessandro Zummo Signed-off-by: Russell King commit 141fa40cff90881ac4d81f6afa27bc283fe7acca Author: Catalin Marinas Date: Fri Mar 10 22:26:47 2006 +0000 [ARM] 3356/1: Workaround for the ARM1136 I-cache invalidation problem Patch from Catalin Marinas ARM1136 erratum 371025 (category 2) specifies that, under rare conditions, an invalidate I-cache by MVA (line or range) operation can fail to invalidate a cache line. The recommended workaround is to either invalidate the entire I-cache or invalidate the range by set/way rather than MVA. Note that for a 16K cache size, invalidating a 4K page by set/way is equivalent to invalidating the entire I-cache. Signed-off-by: Catalin Marinas Signed-off-by: Russell King commit 4ceadbf519c6820b236a9a213255260eb825974b Author: Hugh Dickins Date: Fri Mar 10 21:13:44 2006 +0000 [PATCH] fix pcmcia_device_probe oops Fix pcmcia_device_probe NULL pointer dereference at startup. Signed-off-by: Hugh Dickins Signed-off-by: Linus Torvalds commit 8fce4d8e3b9e3cf47cc8afeb6077e22ab795d989 Author: Christoph Lameter Date: Thu Mar 9 17:33:54 2006 -0800 [PATCH] slab: Node rotor for freeing alien caches and remote per cpu pages. The cache reaper currently tries to free all alien caches and all remote per cpu pages in each pass of cache_reap. For a machines with large number of nodes (such as Altix) this may lead to sporadic delays of around ~10ms. Interrupts are disabled while reclaiming creating unacceptable delays. This patch changes that behavior by adding a per cpu reap_node variable. Instead of attempting to free all caches, we free only one alien cache and the per cpu pages from one remote node. That reduces the time spend in cache_reap. However, doing so will lengthen the time it takes to completely drain all remote per cpu pagesets and all alien caches. The time needed will grow with the number of nodes in the system. All caches are drained when they overflow their respective capacity. So the drawback here is only that a bit of memory may be wasted for awhile longer. Details: 1. Rename drain_remote_pages to drain_node_pages to allow the specification of the node to drain of pcp pages. 2. Add additional functions init_reap_node, next_reap_node for NUMA that manage a per cpu reap_node counter. 3. Add a reap_alien function that reaps only from the current reap_node. For us this seems to be a critical issue. Holdoffs of an average of ~7ms cause some HPC benchmarks to slow down significantly. F.e. NAS parallel slows down dramatically. NAS parallel has a 12-16 seconds runtime w/o rotor compared to 5.8 secs with the rotor patches. It gets down to 5.05 secs with the additional interrupt holdoff reductions. Signed-off-by: Christoph Lameter Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 7b61fcda8a640bb87be23f9f09c1f24357b5c6e1 Author: Roman Zippel Date: Thu Mar 9 17:33:53 2006 -0800 [PATCH] m68k: fix cmpxchg compile errors if CONFIG_RMW_INSNS=n We require that all archs implement atomic_cmpxchg(), for the generic version of atomic_add_unless(). Signed-off-by: Roman Zippel Cc: Geert Uytterhoeven Cc: Adrian Bunk Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit b707dbe6c52e143a9afea06aa8f84103135ca873 Author: Horst Hummel Date: Thu Mar 9 17:33:52 2006 -0800 [PATCH] s390: dasd proc interface typo This fixes a typo introduced with 90f0094dc607abe384a412bfb7199fb667ab0735. Signed-off-by: Horst Hummel Signed-off-by: Heiko Carstens Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit f2937be5895dbae23ff66767a2fc17793e63159c Author: Yasunori Goto Date: Thu Mar 9 17:33:51 2006 -0800 [PATCH] memory hotadd: pgdat->node_present_pages fix When pages are onlined, not only zone->present_pages but also pgdat->node_present_pages should be refreshed. This parameter is used to show information at /sys/device/system/node/nodeX/meminfo via si_meminfo_node(). So, it shows strange value for MemUsed which is calculated (node_present_pages - all zones free pages). Signed-off-by: Yasunori Goto Cc: Dave Hansen Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 57c432b54bc34f0afacda7d9da0528ee22e78dec Author: Tim Small Date: Thu Mar 9 17:33:50 2006 -0800 [PATCH] edac: mark as experimental EDAC is still causing a few problems and the code is relatively green. Mark it as experimental until thing settle down. Also, provide some documentation pointers in Kconfig help. Signed-off-by: Tim Small Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 96567161de0ceed45cd2eb0e5380e3c797f5c0f4 Author: Christian Ehrhardt Date: Thu Mar 9 17:33:49 2006 -0800 [PATCH] s390: Increase spinlock retry code performance Currently the code tries up to spin_retry times to grab a lock using the cs instruction. The cs instruction has exclusive access to a memory region and therefore invalidates the appropiate cache line of all other cpus. If there is contention on a lock this leads to cache line trashing. This can be avoided if we first check wether a cs instruction is likely to succeed before the instruction gets actually executed. Signed-off-by: Christian Ehrhardt Signed-off-by: Martin Schwidefsky Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 6a88231fc7da311e4da4ce2011d1a132c80c145a Author: Max Asbock Date: Thu Mar 9 17:33:48 2006 -0800 [PATCH] ibmasm: use after free fix The kobject_put() can free the memory at *cmd, but cmd->lock points to a persistent lock that is not freed with cmd. Signed-off-by: Max Asbock Cc: Vernon Mauery Cc: Srihari Vijayaraghavan Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit a6bf527091b1dd40f1b6a496812ce7520621c282 Author: Christoph Lameter Date: Thu Mar 9 17:33:47 2006 -0800 [PATCH] vmscan: no zone_reclaim if PF_MALLOC is set If the process has already set PF_MALLOC and is already using current->reclaim_state then do not try to reclaim memory from the zone. This is set by kswapd and/or synchrononous global reclaim which will not take it lightly if we zap the reclaim_state. Signed-off-by: Christoph Lameter Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 04b857f74cec5efc7730e9db47e291310f4708a4 Author: NeilBrown Date: Thu Mar 9 17:33:46 2006 -0800 [PATCH] md: Fix several raid1 bugs which cause a memory leak - wrong test for 'is this a BARRIER bio' - not freeing on all possible paths. - using r1_bio after freeing it. Signed-off-by: Neil Brown Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 628de616ba760b7b1d5e3d95dbe40a988fbf8ca5 Author: Adrian Bunk Date: Thu Mar 9 17:33:45 2006 -0800 [PATCH] xtensa must set RWSEM_GENERIC_SPINLOCK=y /usr/src/ctest/git/kernel/mm/rmap.c: In function `page_referenced_one': /usr/src/ctest/git/kernel/mm/rmap.c:354: warning: implicit declaration of function `rwsem_is_locked' Signed-off-by: Adrian Bunk Cc: Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 38fb9428db627559a8ba0505d21a5ff23bf84034 Author: Adrian Bunk Date: Thu Mar 9 17:33:44 2006 -0800 [PATCH] arch/sh/Kconfig: don't source non-existing Kconfig files arch/sh/Kconfig shouldn't source non-existing Kconfig files. Signed-off-by: Adrian Bunk Cc: Paul Mundt Cc: Kazumoto Kojima Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 0ef675d491bd65028fa838015ebc6ce8abefab6f Author: Atsushi Nemoto Date: Thu Mar 9 17:33:38 2006 -0800 [PATCH] mtd: 64 bit fixes Fix some bugs in mtd/jffs2 on 64bit platform. The MEMGETBADBLOCK/MEMSETBADBLOCK ioctl are not listed in compat_ioctl.h. And some variables in jffs2 are declared as uint32_t but used to hold size_t values. Signed-off-by: Atsushi Nemoto Cc: Thomas Gleixner Acked-by: David Woodhouse Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit eff2c2f6f569267aa52e2431844cec30637d7ade Author: Ivan Kokshaysky Date: Thu Mar 9 17:33:37 2006 -0800 [PATCH] alpha: fix IRQ handling lockup Fix a lockup which was introduced during the conversion to the generic IRQ framework. Cc: Richard Henderson Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 10ad1b7363090c0eec2b4054a5a3b82d2cc09ee5 Author: Jean Delvare Date: Thu Mar 9 17:33:36 2006 -0800 [PATCH] Fix error handling in backlight drivers ERR_PTR() is supposed to be passed a negative value. Signed-off-by: Jean Delvare Signed-off-by: Adrian Bunk Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 435a80f610b2ac38a4b5334a7ae22672de3f06bd Author: Doug Warzecha Date: Thu Mar 9 17:33:35 2006 -0800 [PATCH] dcdbas: dcdbas_pdev referenced after platform_device_unregister on exit smi_data_buf_free() references dcdbas_pdev when calling dma_free_coherent(). In dcdbas_exit(), smi_data_buf_free() is called after platform_device_unregister(dcdbas_pdev). This patch moves platform_device_unregister(dcdbas_pdev) after smi_data_buf_free() in dcdbas_exit(). Signed-off-by: Doug Warzecha Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 85a6cd03a97f04ffff7bfedfa3172894ca9a617b Author: Hugh Dickins Date: Thu Mar 9 17:33:34 2006 -0800 [PATCH] page_add_file_rmap(): remove BUG_ON()s Remove two early-development BUG_ONs from page_add_file_rmap. The pfn_valid test (originally useful for checking that nobody passed an artificial struct page) comes too late, since we already have the struct page. The PageAnon test (useful when anon was first distinguished from file rmap) prevents ->nopage implementations from reusing ->mapping, which would otherwise be available. Signed-off-by: Hugh Dickins Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit ad58f7dbeb6f5ea82679962f18985f16b660a2d9 Author: Andreas Herrmann Date: Fri Mar 10 00:56:16 2006 +0100 [SCSI] zfcp: fix device registration issues The patch fixes following issues: (1) Replace scsi_add_device with scsi_scan_target. (Thus the rport instead of the scsi_host becomes parent of a scsi_target again.) (2) Avoid scsi_device allocation during registration of an remote port. (Would be done during fc_scsi_scan_rport.) (3) Fix queuecommand behaviour when an zfcp unit is blocked. (Call scsi_done with DID_NO_CONNECT instead of returning SCSI_MLQUEUE_DEVICE_BUSY otherwise we might end up waiting for completion in blk_execute_rq for ever.) Signed-off-by: Andreas Herrmann Signed-off-by: James Bottomley commit 70f1be4812a833ac856818c3149e432ff6a84c2e Author: Stephen Hemminger Date: Tue Mar 7 11:06:37 2006 -0800 sky2: truncate oversize packets Turn on truncation to prevent getting choked by frames larger than expected. Without this fix, driver hangs after receiving an oversize packet. Signed-off-by: Stephen Hemminger commit b19666d92009ad2aa8e12d25f2cab59fb32421eb Author: Stephen Hemminger Date: Tue Mar 7 11:06:36 2006 -0800 sky2: force early transmit interrupts Avoid premature transmit ring full conditions. Force a transmit status interrupt if transmit ring gets nearly full and after a TSO send. Allow more entries in transmit ring to be used if dma_addr is 32 bits Signed-off-by: Stephen Hemminger commit 28a31860191c0d5710d42f85510daac0a3c26a01 Author: Stephen Hemminger Date: Tue Mar 7 11:06:35 2006 -0800 sky2: not random enough Don't use sky2 to seed random pool beacause the network packet arrival time will not be truly random due to NAPI and interrupt mitigation. Signed-off-by: Stephen Hemminger commit 39bf4295bb4bcb0c108f74b72dd2eb5b9b9dfacc Author: Francois Romieu Date: Wed Mar 8 22:45:52 2006 +0100 de2104x: fix the TX watchdog Insert de_init_rings() to reinit the rings before de_init_hw() tries to access them again. Signed-off-by: Francois Romieu commit 3f735b76a4e654bee652cbbeb405b9b3ef950316 Author: Francois Romieu Date: Wed Mar 8 22:41:15 2006 +0100 de2104x: prevent interrupt before the interrupt handler is registered de_init_hw enables the irq thus it must be issued after request_irq. Signed-off-by: Martin Michlmayr Signed-off-by: Francois Romieu commit 6218cf4410cfce7bc7e89834e73525b124625d4c Author: Ralf Baechle Date: Wed Mar 8 17:14:49 2006 +0000 [MIPS] Always pass -msoft-float. Some people still haven't heared that fp in the kernel is forbidden. Signed-off-by: Ralf Baechle commit fd2a4f1183d1e6802457d70cea067396236ed64b Author: Ralf Baechle Date: Wed Mar 8 16:04:32 2006 +0000 [MIPS] Undefine scr_writew and scr_readw in . This is gluing the build of cirrusfb but really the mess that would need cleaning and fixing is