Commit: ee1aebb4a4bffe532d3112353e60d32cc61e8df9 Author: Adrian Bunk Sat, 17 Feb 2007 18:23:40 +0100 Linux 2.6.16.41 Commit: 72bfe8ab985e51ed4beb9ff3b68a3924ceb700f7 Author: Adrian Bunk Thu, 15 Feb 2007 13:56:49 +0100 Linux 2.6.16.41-rc1 Commit: 0ec7c9f826a86a2a24101192e6f5f804ed8d7021 Author: Jeff Dike Wed, 14 Feb 2007 20:37:44 +0100 uml: fix signal frame alignment Use the same signal frame alignment calculations as the underlying architecture. x86_64 appeared to do this, but the "- 8" was really subtracting 8 * sizeof(struct rt_sigframe) rather than 8 bytes. UML/i386 might have been OK, but I changed the calculation to match i386 just to be sure. Signed-off-by: Jeff Dike Signed-off-by: Adrian Bunk Commit: 419c9c25b8a75bd88d6014498a81610b2e658b08 Author: Adrian Bunk Wed, 14 Feb 2007 20:32:10 +0100 [ALSA] echo3g_dsp.c shouldn't include #include Despite being under linux/, linux/irq.h shouldn't be #include'd by arch independent code. Signed-off-by: Adrian Bunk Commit: e262fa806cb2da525fd9da2b6e534368e1219544 Author: Adrian Bunk Wed, 14 Feb 2007 14:00:41 +0100 Revert "[Bluetooth] Fix compat ioctl for BNEP, CMTP and HIDP" This reverts commit ac4d63dab8bb425f1ae037abf349090c12f16883. Does not work in 2.6.16. Commit: 2f6d2c9b7d870de96a915748178aa02596ac19c1 Author: Al Viro Wed, 14 Feb 2007 13:58:42 +0100 [TCP]: struct tcp_sack_block annotations Some of the instances of tcp_sack_block are host-endian, some - net-endian. Define struct tcp_sack_block_wire identical to struct tcp_sack_block with u32 replaced with __be32; annotate uses of tcp_sack_block replacing net-endian ones with tcp_sack_block_wire. Change is obviously safe since for cc(1) __be32 is typedefed to u32. Signed-off-by: Al Viro Signed-off-by: Adrian Bunk Commit: 844affa5745e38d3ac2e11d4cee79deed06df0e2 Author: Jiri Bohac Wed, 14 Feb 2007 09:40:31 +0100 [IPX]: Fix NULL pointer dereference on ipx unload Fixes a null pointer dereference when unloading the ipx module. On initialization of the ipx module, registering certain packet types can fail. When this happens, unloading the module later dereferences NULL pointers. This patch fixes that. Please apply. Signed-off-by: Jiri Bohac Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 587d7ce100bcfa2eabbc6664122d575acac2fb83 Author: Herbert Xu Wed, 14 Feb 2007 09:39:09 +0100 [NETFILTER]: Clear GSO bits for TCP reset packet The TCP reset packet is copied from the original. This includes all the GSO bits which do not apply to the new packet. So we should clear those bits. Spotted by Patrick McHardy. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: b455317374ac03ebc895723774d7b6359355a422 Author: John Heffner Wed, 14 Feb 2007 09:34:43 +0100 [TCP]: Don't apply FIN exception to full TSO segments. Signed-off-by: John Heffner Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: d87345bcbc5e636f60df56845a39e00d6ae22911 Author: Daniel Walker Wed, 14 Feb 2007 09:33:14 +0100 [ATM]: Fix for crash in adummy_init() This was reported by Ingo Molnar here, http://lkml.org/lkml/2006/12/18/119 The problem is that adummy_init() depends on atm_init() , but adummy_init() is called first. So I put atm_init() into subsys_initcall which seems appropriate, and it will still get module_init() if it becomes a module. Interesting to note that you could crash your system here if you just load the modules in the wrong order. Signed-off-by: Daniel Walker Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 8d406a21f39b1f5b30360f0c3a0113dc0bf47d51 Author: Masayuki Nakagawa Wed, 14 Feb 2007 09:31:02 +0100 TCP: skb is unexpectedly freed. I encountered a kernel panic with my test program, which is a very simple IPv6 client-server program. The server side sets IPV6_RECVPKTINFO on a listening socket, and the client side just sends a message to the server. Then the kernel panic occurs on the server. (If you need the test program, please let me know. I can provide it.) This problem happens because a skb is forcibly freed in tcp_rcv_state_process(). When a socket in listening state(TCP_LISTEN) receives a syn packet, then tcp_v6_conn_request() will be called from tcp_rcv_state_process(). If the tcp_v6_conn_request() successfully returns, the skb would be discarded by __kfree_skb(). However, in case of a listening socket which was already set IPV6_RECVPKTINFO, an address of the skb will be stored in treq->pktopts and a ref count of the skb will be incremented in tcp_v6_conn_request(). But, even if the skb is still in use, the skb will be freed. Then someone still using the freed skb will cause the kernel panic. I suggest to use kfree_skb() instead of __kfree_skb(). Signed-off-by: Masayuki Nakagawa Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 66a1b6727df52831abce2dc639aebcbb7a5a9d85 Author: Baruch Even Wed, 14 Feb 2007 09:29:14 +0100 TCP: Fix sorting of SACK blocks. The sorting of SACK blocks actually munges them rather than sort, causing the TCP stack to ignore some SACK information and breaking the assumption of ordered SACK blocks after sorting. The sort takes the data from a second buffer which isn't moved causing subsequent data moves to occur from the wrong location. The fix is to use a temporary buffer as a normal sort does. Signed-off-By: Baruch Even Signed-off-by: David S. Miller Commit: 396cdac3a693b34961d033a94672226b7c6c09d2 Author: David S. Miller Wed, 14 Feb 2007 09:25:18 +0100 AF_PACKET: Check device down state before hard header callbacks. If the device is down, invoking the device hard header callbacks is not legal, so check it early. Based upon a shaper OOPS report from Frederik Deweerdt. Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 4ff61ecf6949e0ab2c062b40e0111f39e3956a0d Author: Bob Breuer Wed, 14 Feb 2007 09:22:53 +0100 SPARC32: Fix over-optimization by GCC near ip_fast_csum. In some cases such as: iph->check = 0; iph->check = ip_fast_csum((unsigned char *)iph, iph->ihl); GCC may optimize out the previous store. Observed as a failure of NFS over udp (bad checksums on ip fragments) when compiled with GCC 3.4.2. Signed-off-by: Bob Breuer Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 50c6a34d4daa3a3867128df6f5734fd385b63feb Author: Eric W. Biederman Wed, 14 Feb 2007 09:02:36 +0100 DECNET: Handle a failure in neigh_parms_alloc (take 2) While enhancing the neighbour code to handle multiple network namespaces I noticed that decnet is assuming neigh_parms_alloc will allways succeed, which is clearly wrong. So handle the failure. Signed-off-by: Eric W. Biederman Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: b3d6856755b3d0380da5dda54ee273f20ee4a539 Author: Linus Torvalds Tue, 13 Feb 2007 13:14:45 +0100 Fix up CIFS for "test_clear_page_dirty()" removal This also adds he required page "writeback" flag handling, that cifs hasn't been doing and that the page dirty flag changes made obvious. Signed-off-by: Linus Torvalds Acked-by: Steve French Commit: 0e894923475e1f59dc7b58851e90c4114acf2e2f Author: Hugh Dickins Tue, 13 Feb 2007 13:10:20 +0100 fix umask when noACL kernel meets extN tuned for ACLs Fix insecure default behaviour reported by Tigran Aivazian: if an ext2 or ext3 filesystem is tuned to mount with "acl", but mounted by a kernel built without ACL support, then umask was ignored when creating inodes - though root or user has umask 022, touch creates files as 0666, and mkdir creates directories as 0777. This appears to have worked right until 2.6.11, when a fix to the default mode on symlinks (always 0777) assumed VFS applies umask: which it does, unless the mount is marked for ACLs; but ext[23] set MS_POSIXACL in s_flags according to s_mount_opt set according to def_mount_opts. We could revert to the 2.6.10 ext[23]_init_acl (adding an S_ISLNK test); but other filesystems only set MS_POSIXACL when ACLs are configured. We could fix this at another level; but it seems most robust to avoid setting the s_mount_opt flag in the first place (at the expense of more ifdefs). Likewise don't set the XATTR_USER flag when built without XATTR support. Signed-off-by: Hugh Dickins Signed-off-by: Adrian Bunk