Commit: 6b0daf99dd2392b024bdca05530e4e761bc3cdae Author: Adrian Bunk Mon, 21 Jul 2008 22:48:10 +0300 Linux 2.6.16.62 Commit: 7c82f54c180ae68d0fa2886dc48e63e6024afb60 Author: Adrian Bunk Sat, 19 Jul 2008 23:54:55 +0300 Linux 2.6.16.62-rc1 Commit: 53250a38ef49e477f412015caa18e25a4dc58a98 Author: Adrian Bunk Sat, 19 Jul 2008 23:52:28 +0300 kconfig: move the option SCSI_HPTIOP to a better place Signed-off-by: Adrian Bunk Commit: 1cd89cf10141ba63da2696db80727e753331d0ab Author: Tony Luck Sat, 19 Jul 2008 23:45:33 +0300 [IA64] Fix unaligned handler for floating point instructions with base update The compiler team did the hard work for this distilling a problem in large fortran application which showed up when applied to a 290MB input data set down to this instruction: ldfd f34=[r17],-8 Which they noticed incremented r17 by 0x10 rather than decrementing it by 8 when the value in r17 caused an unaligned data fault. I tracked it down to some bad instruction decoding in unaligned.c. The code assumes that the 'x' bit can determine whether the instruction is an "ldf" or "ldfp" ... which it is for opcode=6 (see table 4-29 on page 3:302 of the SDM). But for opcode=7 the 'x' bit is irrelevent, all variants are "ldf" instructions (see table 4-36 on page 3:306). Note also that interpreting the instruction as "ldfp" means that the "paired" floating point register (f35 in the example here) will also be corrupted. Signed-off-by: Tony Luck Signed-off-by: Adrian Bunk Commit: 2f586e5589ef42afa60778aaab6641c99f9bc16a Author: Ian Pickworth Sat, 19 Jul 2008 23:39:40 +0300 V4L/DVB (3393): Cx88: reduce excessive logging - fix temporary debug code by changing printk to dprintk at level 1. - move CORE_IOCTL messages from level 1 to level 2. - this should help with selective debugging, while not filling people's logs up during normal use. Signed-off-by: Ian Pickworth Signed-off-by: Michael Krufky Signed-off-by: Mauro Carvalho Chehab Signed-off-by: Adrian Bunk Commit: 423044bed36af8792ea9e861a2fa33ed52a8fcbd Author: David S. Miller Sat, 19 Jul 2008 23:30:57 +0300 sctp: Make sure N * sizeof(union sctp_addr) does not overflow. (CVE-2008-2826) As noticed by Gabriel Campana, the kmalloc() length arg passed in by sctp_getsockopt_local_addrs_old() can overflow if ->addr_num is large enough. Therefore, enforce an appropriate limit. Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk Commit: a203d3ccd131487b38094c3f5f4fb4f2fed593d7 Author: Nick Piggin Sat, 19 Jul 2008 23:29:02 +0300 mm: trim more holes (CVE-2008-0598) If prepare_write fails with AOP_TRUNCATED_PAGE, or if commit_write fails, then we may have failed the write operation despite prepare_write having instantiated blocks past i_size. Fix this, and consolidate the trimming into one place. Signed-off-by: Nick Piggin Signed-off-by: Adrian Bunk Commit: 06a2539978d97915d82c4d405528f8f92db0faaf Author: Alan Stern Sat, 19 Jul 2008 22:46:12 +0300 USB: remove short initial timeout for device descriptor fetch This patch (as905) removes a micro-optimization from the hub port initialization code. Previously we had been using a short timeout on the first attempt the read the device descriptor; now we will use the standard timeout length. It's not clear that the short timeout ever provided any benefit. And now we know of one case where it actually hurts: The device can't meet the short timeout and then it gets terminally confused. This fixes Bugzilla #8444. Signed-off-by: Alan Stern Signed-off-by: Greg Kroah-Hartman Signed-off-by: Adrian Bunk Commit: 30cf9e8ec698e2ae4c0d9aaa918dbf35c1f611f6 Author: Ivan Kokshaysky Sat, 19 Jul 2008 16:15:43 +0300 alpha: build fixes - force architecture Override compiler .arch directive for generic kernel build. Signed-off-by: Ivan Kokshaysky Signed-off-by: Richard Henderson Signed-off-by: Adrian Bunk Commit: 63278e95f80eef7d2d9868571949c459f9b02a09 Author: Ivan Kokshaysky Sat, 19 Jul 2008 15:57:03 +0300 moduleparam: fix alpha, ia64 and ppc64 compile failures On alpha, ia64 and ppc64 only relocations to local data can go into read-only sections. The vast majority of module parameters use the global generic param_set_*/param_get_* functions, so the 'const' attribute for struct kernel_param is not only useless, but it also causes compile failures due to 'section type conflict' in those rare cases where param_set/get are local functions. This fixes http://bugzilla.kernel.org/show_bug.cgi?id=8964 Signed-off-by: Ivan Kokshaysky Signed-off-by: Adrian Bunk Commit: 23a22510e95a7dafa38bbdd076daa0bb28b18ff8 Author: Adrian Bunk Sat, 19 Jul 2008 15:56:06 +0300 unexport gameport_{cooked_read,set_name} static inline functions mustn't be exported. Signed-off-by: Adrian Bunk Commit: a278f98520443a002579778bb3fb9242130443a5 Author: Adrian Bunk Sat, 19 Jul 2008 15:31:38 +0300 unexport swap_page static functions mustn't be exported. Signed-off-by: Adrian Bunk