Commit: 4d840dbb4d5912e419822cbf5b6bd79abe4e2103 Author: Adrian Bunk Wed, 30 May 2007 22:36:59 +0200 Linux 2.6.16.52 Commit: 40234cbbdc1f1c1ef8f2ec25c29ab91fb49027ed Author: Adrian Bunk Thu, 24 May 2007 17:24:58 +0200 Linux 2.6.16.52-rc1 Commit: 2900960ba205f09ce3bfe2fd168dce048b061b25 Author: Jamal Hadi Salim Wed, 23 May 2007 01:03:30 +0200 [NET_SCHED]: prio qdisc boundary condition This fixes an out-of-boundary condition when the classified band equals q->bands. Caught by Alexey Signed-off-by: Jamal Hadi Salim Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 9bf4eae1b5a9787d5321478e6bac6e66c37b4d3e Author: Corey Mutter Wed, 23 May 2007 01:01:53 +0200 [IPV6]: Reverse sense of promisc tests in ip6_mc_input Reverse the sense of the promiscuous-mode tests in ip6_mc_input(). Signed-off-by: Corey Mutter Signed-off-by: David L Stevens Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: a36aa221e62ffce68819f97844494c2d5f86d011 Author: David L Stevens Wed, 23 May 2007 00:55:49 +0200 [IPV6]: Send ICMPv6 error on scope violations. When an IPv6 router is forwarding a packet with a link-local scope source address off-link, RFC 4007 requires it to send an ICMPv6 destination unreachable with code 2 ("not neighbor"), but Linux doesn't. Fix below. Signed-off-by: David L Stevens Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: bba669f7618ba72c6b17faed7c6ca6c6bec8cb72 Author: Srinivas Aji Wed, 23 May 2007 00:54:10 +0200 [TCP]: zero out rx_opt in tcp_disconnect() When the server drops its connection, NFS client reconnects using the same socket after disconnecting. If the new connection's SYN,ACK doesn't contain the TCP timestamp option and the old connection's did, tp->tcp_header_len is recomputed assuming no timestamp header but tp->rx_opt.tstamp_ok remains set. Then tcp_build_and_update_options() adds in a timestamp option past the end of the allocated TCP header, overwriting TCP data, or when the data is in skb_shinfo(skb)->frags[], overwriting skb_shinfo(skb) causing a crash soon after. (The issue was debugged from such a crash.) Similarly, wscale_ok and sack_ok also get set based on the SYN,ACK packet but not reset on disconnect, since they are zeroed out at initialization. The patch zeroes out the entire tp->rx_opt struct in tcp_disconnect() to avoid this sort of problem. Signed-off-by: Srinivas Aji Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 00fd81fe55fbf464a952a43fd4dc3248601a5f87 Author: Sergei Shtylyov Wed, 23 May 2007 00:43:37 +0200 [NETPOLL]: Remove CONFIG_NETPOLL_RX Get rid of the CONFIG_NETPOLL_RX option completely since all the dependencies have been removed long ago... Signed-off-by: Sergei Shtylyov Acked-by: Jeff Garzik Acked-by: Matt Mackall Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: eb9c87a4768bd759c80026e41fa5540ee110131e Author: Sergei Shtylyov Wed, 23 May 2007 00:41:22 +0200 [NETPOLL]: Fix TX queue overflow in trapped mode. CONFIG_NETPOLL_TRAP causes the TX queue controls to be completely bypassed in the netpoll's "trapped" mode which easily causes overflows in the drivers with short TX queues (most notably, in 8139too with its 4-deep queue). So, make this option more sensible by making it only bypass the TX softirq wakeup. Signed-off-by: Sergei Shtylyov Acked-by: Jeff Garzik Acked-by: Tom Rini Acked-by: Matt Mackall Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 57b0c610b81c58e77299c7a0d96048a593183a98 Author: Stephen Hemminger Wed, 23 May 2007 00:39:52 +0200 [IPV6]: Track device renames in snmp6. When network device's are renamed, the IPV6 snmp6 code gets confused. It doesn't track name changes so it will OOPS when network device's are removed. The fix is trivial, just unregister/re-register in notify handler. Signed-off-by: Stephen Hemminger Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: dffa279e109e2462068b8a22f3783e3cbd930d81 Author: Eric Sesterhenn Wed, 23 May 2007 00:38:17 +0200 [IPV6]: Fix slab corruption running ip6sic Signed-off-by: Andrew Morton Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: 4eedb20374aadf2e4c8781a47a349b8897a43074 Author: Andrew Morton Tue, 22 May 2007 23:50:21 +0200 gcc-4.1.0 is bust Keith says Compiling 2.6.19-rc6 with gcc version 4.1.0 (SUSE Linux), wait_hpet_tick is optimized away to a never ending loop and the kernel hangs on boot in timer setup. 0000001a : 1a: 55 push %ebp 1b: 89 e5 mov %esp,%ebp 1d: eb fe jmp 1d This is not a problem with gcc 3.3.5. Adding barrier() calls to wait_hpet_tick does not help, making the variables volatile does. And the consensus is that gcc-4.1.0 is busted. Adrian Bunk: Changed from a #warning to an #error for 2.6.16. Signed-off-by: Andrew Morton Signed-off-by: Adrian Bunk