Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP
Commits on Jan 31, 2006
  1. @gregkh

    Linux 2.6.15.2

    gregkh authored
  2. @ralfbaechle @gregkh

    [PATCH] Fix mkiss locking bug

    ralfbaechle authored gregkh committed
    ax_encaps() forgot to drop the bufferlock at the end of the function.
    Patch is already in 2.6.16-rc1.
    
    Signed-off-by: Ralf Baechle DL5RB <ralf@linux-mips.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  3. @gregkh

    [PATCH] Fix i2o_scsi oops on abort

    Markus Lidel authored gregkh committed
    >From http://bugzilla.kernel.org/show_bug.cgi?id=5923
    
    When a scsi command failed, an oops would result.
    
    Back-to-back SMART queries would make the Seagate drives unhappy.  The
    second SMART query would timeout, and the command would be aborted.
    
    From: Markus Lidel <Markus.Lidel@shadowconnect.com>
    Cc: Kenny Simpson <theonetruekenny@yahoo.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  4. @gregkh

    [PATCH] Someone broke reiserfs v3 mount options and this fixes it

    Vitaly Fertman authored gregkh committed
    Signed-off-by: Hans Reiser <reiser@namesys.com>
    Signed-off-by: Vitaly Fertman <vitaly@namesys.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  5. @gregkh

    [PATCH] Mask off GFP flags before swiotlb_alloc_coherent

    Andi Kleen authored gregkh committed
    Mask off GFP flags before swiotlb_alloc_coherent
    
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Chris Wright <chris@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  6. @davem330 @gregkh

    [PATCH] Make second arg to skb_reserved() signed.

    davem330 authored gregkh committed
    Some subsystems, such as PPP, can send negative values
    here.  It just happened to work correctly on 32-bit with
    an unsigned value, but on 64-bit this explodes.
    
    Figured out by Paul Mackerras based upon several PPP crash
    reports.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  7. @oldelvet @gregkh

    [PATCH] Fix timekeeping on sparc64 ultra-IIe machines

    oldelvet authored gregkh committed
    [SPARC64]: Eliminate race condition reading Hummingbird STICK register
    
    Ensure a consistent value is read from the STICK register by ensuring
    that both high and low are read without high changing due to a roll
    over of the low register.
    
    Various Debian/SPARC users (myself include) have noticed problems with
    Hummingbird based systems. The symptoms are that the system time is
    seen to jump forward 3 days, 6 hours, 11 minutes give or take a few
    seconds. In many cases the system then hangs some time afterwards.
    
    I've spotted a race condition in the code to read the STICK register.
    I could not work out why 3d, 6h, 11m is important but guess that it is
    due to the 2^32 jump of STICK (forwards on one read and then the next
    read will seem to be backwards) during a timer interrupt. I'm guessing
    that a change of -2^32 will get converted to a large unsigned
    increment after the arithmetic manipulation between STICK,
    nanoseconds, jiffies etc.
    
    I did a test where I modified __hbird_read_stick to artificially
    inject rollover faults forcefully every few seconds. With this I saw
    the clock jump over 6 times in 12 hours compared to once every month
    or so.
    
    Signed-off-by: Richard Mortimer <richm@oldelvet.org.uk>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  8. @Dushistov @gregkh

    [PATCH] Fix oops in ufs_fill_super at mount time

    Dushistov authored gregkh committed
    There's a lack of parenthesis in fs/ufs/utils.h, so instead of the 512th
    byte of buffer, the usb2 pointer will point to the nth structure of type
    ufs_super_block_second.
    
    This can cause a mount-time oops if you're unlucky (especially with
    DEBUG_PAGEALLOC, which is how Alexey Dobriyan saw this problem)
    
    Signed-off-by: Evgeniy Dushistov <dushistov@mail.ru>
    Acked-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  9. @gregkh

    [PATCH] Fix double decrement of mqueue_mnt->mnt_count in sys_mq_open …

    Alexander Viro authored gregkh committed
    …(CVE-2005-3356)
    
    Fixed the refcounting on failure exits in sys_mq_open() and
    cleaned the logics up.  Rules are actually pretty simple - dentry_open()
    expects vfsmount and dentry to be pinned down and it either transfers
    them into created struct file or drops them.  Old code had been very
    confused in that area - if dentry_open() had failed either in do_open()
    or do_create(), we ended up dentry and mqueue_mnt dropped twice, once
    by dentry_open() cleanup and then by sys_mq_open().
    
    Fix consists of making the rules for do_create() and do_open()
    same as for dentry_open() and updating the sys_mq_open() accordingly;
    that actually leads to more straightforward code and less work on
    normal path.
    
    Signed-off-by: Al Viro <aviro@redhat.com>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  10. @gregkh

    [PATCH] Input: HID - fix an oops in PID initialization code

    Dmitry Torokhov authored gregkh committed
    Input: HID - fix an oops in PID initialization code
    
    Signed-off-by: Dmitry Torokhov <dtor@mail.ru>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  11. @gregkh

    [PATCH] Kill blk_attempt_remerge()

    Jens Axboe authored gregkh committed
    [BLOCK] Kill blk_attempt_remerge()
    
    It's a broken interface, it's done way too late. And apparently it triggers
    slab problems in recent kernels as well (most likely after the generic dispatch
    code was merged). So kill it, ide-cd is the only user of it.
    
    Signed-off-by: Jens Axboe <axboe@suse.de>
    chrisw: backport to 2.6.15 tree
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  12. @cladisch @gregkh

    [PATCH] usb-audio: don't use empty packets at start of playback

    cladisch authored gregkh committed
    Some widespread USB interface chips with adaptive iso endpoints hang
    after receiving a series of empty packets when they expect data.  This
    completely disables audio playback on those devices.  To avoid this, we
    have to send packets containing silence (zero samples) instead.
    
    ALSA bug: http://bugtrack.alsa-project.org/alsa-bug/view.php?id=1585
    
    Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Commits on Jan 15, 2006
  1. @chriswright

    Linux 2.6.15.1

    chriswright authored
  2. @AdrianBunk @chriswright

    [PATCH] arch/sparc64/Kconfig: fix HUGETLB_PAGE_SIZE_64K dependencies

    AdrianBunk authored chriswright committed
    This patch fixes a typo in the dependencies of HUGETLB_PAGE_SIZE_64K.
    
    This bug was reported by Jean-Luc Leger <reiga@dspnet.fr.eu.org>.
    
    Signed-off-by: Adrian Bunk <bunk@stusta.de>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  3. @arvidjaar @chriswright

    [PATCH] fix /sys/class/net/<if>/wireless without dev->get_wireless_stats

    arvidjaar authored chriswright committed
    dev->get_wireless_stats is deprecated but removing it also removes wireless
    subdirectory in sysfs. This patch puts it back.
    
    akpm: I don't know what's happening here.  This might be appropriate as a
    2.6.15.x compatibility backport.  Waiting to hear from Jeff.
    
    Signed-off-by: Andrey Borzenkov <arvidjaar@mail.ru>
    Cc: "David S. Miller" <davem@davemloft.net>
    Cc: Jeff Garzik <jgarzik@pobox.com>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  4. @chriswright

    [PATCH] moxa serial: add proper capability check

    Alan Cox authored chriswright committed
    This requires the proper capabilities for the moxa bios update ioctl's.
    
    Signed-off-by: Alan Cox <alan@redhat.com>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  5. @chriswright

    [PATCH] Fix DoS in netlink_rcv_skb() (CVE-2006-0035)

    Martin Murray authored chriswright committed
    Sanity check nlmsg_len during netlink_rcv_skb.  An nlmsg_len == 0 can
    cause infinite loop in kernel, effectively DoSing machine.  Noted by
    Martin Murray.
    
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: David S. Miller <davem@davemloft.net>
  6. @davem330 @chriswright

    [PATCH] Fix sys_fstat64() entry in 64-bit syscall table.

    davem330 authored chriswright committed
    Noticed by Jakub Jelinek.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  7. @oldelvet @chriswright

    [PATCH] Fix ptrace/strace

    oldelvet authored chriswright committed
    Don't clobber register %l0 while checking TI_SYS_NOERROR value in
    syscall return path.  This bug was introduced by:
    
    db7d9a4
    
    Problem narrowed down by Luis F. Ortiz and Richard Mortimer.
    
    I tried using %l2 as suggested by Luis and that works for me.
    
    Looking at the code I wonder if it makes sense to simplify the code
    a little bit. The following works for me but I'm not sure how to
    exercise the "NOERROR" codepath.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  8. @chriswright

    [PATCH] Don't match tcp/udp source/destination port for IP fragments

    Bart De Schuymer authored chriswright committed
    Signed-off-by: Bart De Schuymer <bdschuym@pandora.be>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  9. @kaber @chriswright

    [PATCH] Fix another crash in ip_nat_pptp (CVE-2006-0037)

    kaber authored chriswright committed
    The PPTP NAT helper calculates the offset at which the packet needs
    to be mangled as difference between two pointers to the header. With
    non-linear skbs however the pointers may point to two seperate buffers
    on the stack and the calculation results in a wrong offset beeing
    used.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  10. @kaber @chriswright

    [PATCH] Fix crash in ip_nat_pptp (CVE-2006-0036)

    kaber authored chriswright committed
    When an inbound PPTP_IN_CALL_REQUEST packet is received the
    PPTP NAT helper uses a NULL pointer in pointer arithmentic to
    calculate the offset in the packet which needs to be mangled
    and corrupts random memory or crashes.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  11. @chriswright

    [PATCH] netlink oops fix due to incorrect error code

    Kirill Korotaev authored chriswright committed
    Fixed oops after failed netlink socket creation.
    Wrong parathenses in if() statement caused err to be 1,
    instead of negative value.
    Trivial fix, not trivial to find though.
    
    Signed-Off-By: Dmitry Mishin <dim@sw.ru>
    Signed-Off-By: Kirill Korotaev <dev@openvz.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  12. @nathanlynch @chriswright

    [PATCH] fix workqueue oops during cpu offline

    nathanlynch authored chriswright committed
    Use first_cpu(cpu_possible_map) for the single-thread workqueue case.  We
    used to hardcode 0, but that broke on systems where !cpu_possible(0) when
    workqueue_struct->cpu_workqueue_struct was changed from a static array to
    alloc_percpu.
    
    Commit id bce61dd ("Fix hardcoded cpu=0 in
    workqueue for per_cpu_ptr() calls") fixed that for Ben's funky sparc64
    system, but it regressed my Power5.  Offlining cpu 0 oopses upon the next
    call to queue_work for a single-thread workqueue, because now we try to
    manipulate per_cpu_ptr(wq->cpu_wq, 1), which is uninitialized.
    
    So we need to establish an unchanging "slot" for single-thread workqueues
    which will have a valid percpu allocation.  Since alloc_percpu keys off of
    cpu_possible_map, which must not change after initialization, make this
    slot == first_cpu(cpu_possible_map).
    
    Signed-off-by: Nathan Lynch <ntl@pobox.com>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  13. @sthibaul @chriswright

    [PATCH] vgacon: fix doublescan mode

    sthibaul authored chriswright committed
    When doublescan mode is in use, scanlines must be doubled.
    
    Thanks to Jason Dravet <dravet@hotmail.com> for reporting and testing.
    
    Signed-off-by: Samuel Thibault <samuel.thibault@ens-lyon.org>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  14. @chriswright

    [PATCH] ppc32: Re-add embed_config.c to ml300/ep405

    Peter Korsgaard authored chriswright committed
    Commit 3e9e7c1 (ppc32: cleanup AMCC PPC40x
    eval boards to support U-Boot) broke the kernel for ML300 / EP405.
    
    It still compiles as there's a weak definition of the function in
    misc-embedded.c, but the kernel crashes as the bd_t fixup isn't performed.
    
    Signed-off-by: Peter Korsgaard <jacmet@sunsite.dk>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  15. @chriswright

    [PATCH] Fix onboard video on SPARC Blade 100 for 2.6.{13,14,15}

    Luis F. Ortiz authored chriswright committed
    	I have recently been switching from using 2.4.32 on my trusty
    old Sparc Blade 100 to using 2.6.15 .  Some of the problems I ran into
    were distorted video when the console was active (missing first
    character, skipped dots) and when running X windows (colored snow,
    stripes, missing pixels).  A quick examination of the 2.6 versus 2.4
    source for the ATY driver revealed alot of changes.
    
             A closer look at the code/data for the 64GR/XL chip revealed
    two minor "typos" that the rewriter(s) of the code made.  The first is
    a incorrect clock value (230 .vs. 235) and the second is a missing
    flag (M64F_SDRAM_MAGIC_PLL).  Making both these changes seems to have
    fixed my problem.  I tend to think the 235 value is the correct one,
    as there is a 29.4 Mhz clock crystal close to the video chip and 235.2
    (29.4*8) is too close to 235 to make it a coincidence.
    
    	The flag for M64F_SDRAM_MAGIC_PLL was dropped during the
    changes made by adaplas in file revision 1.72 on the old bitkeeper
    repository.
    
    	The change relating to the clock rate has been there forever,
    at least in the 2.6 tree.  I'm not sure where to look for the old 2.5
    tree or if anyone cares when it happened.
    
    On SPARC Blades 100's, which use the ATY MACH64GR video chipset, the
    clock crystal frequency is 235.2 Mhz, not 230 Mhz.  The chipset also
    requires the use of M64F_SDRAM_MAGIC_PLL in order to setup the PLL
    properly for the DRAM.
    
    Signed-off-by: Luis F. Ortiz <lfo@Polyad.Org>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
  16. @chriswright

    [PATCH] skge: handle out of memory on ring changes

    Stephen Hemminger authored chriswright committed
    Please consider this for 2.6.15.1; it fixes several cases where
    the skge driver can get in a bad state and later crash; if an
    admin operation that causes a restart fails from out of memory.
    Such as changing the MTU or increasing the ring size.
    
    The fixes involve checking the return value and doing necessary
    unwinds. Or in some cases avoiding doing a full restart.
    
    The same code is the netdev-2.6 tree for 2.6.16 but as separate pieces
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  17. @chriswright

    [PATCH] UFS: inode->i_sem is not released in error path

    Evgeniy Polyakov authored chriswright committed
    Signed-off-by: Evgeniy Polyakov <johnpol@2ka.mipt.ru>
    Cc: <stable@kernel.org>
    akpm: obviously correct, OK for -stable immediately.
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
  18. @chriswright

    [PATCH] BRIDGE: Fix faulty check in br_stp_recalculate_bridge_id()

    Stephen Hemminger authored chriswright committed
    There is a regression in 2.6.15.
    One of the conversions from memcmp to compare_ether_addr is incorrect.
    We need to do relative comparison to determine min MAC address to
    use in bridge id. This will cause the wrong bridge id to be chosen
    which violates 802.1d Spanning Tree Protocol, and may create forwarding
    loops.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
Commits on Jan 3, 2006
  1. Linux v2.6.15

    Linus Torvalds authored
    Hey, it's fifteen years today since I bought the machine that got Linux
    started.  January 2nd is a good date.
  2. [PATCH] Make sure interleave masks have at least one node set

    Andi Kleen authored Linus Torvalds committed
    Otherwise a bad mem policy system call can confuse the interleaving
    code into referencing undefined nodes.
    
    Originally reported by Doug Chapman
    
    I was told it's CVE-2005-3358
    (one has to love these security people - they make everything sound important)
    
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Commits on Jan 2, 2006
  1. [PATCH] Avoid namespace pollution in <asm/param.h>

    Dag-Erling Sm�rgrav authored Linus Torvalds committed
    In commit 3D59121003721a8fad11ee72e646fd9d3076b5679c, the x86 and x86-64
    <asm/param.h> was changed to include <linux/config.h> for the
    configurable timer frequency.
    
    However, asm/param.h is sometimes used in userland (it is included
    indirectly from <sys/param.h>), so your commit pollutes the userland
    namespace with tons of CONFIG_FOO macros.  This greatly confuses
    software packages (such as BusyBox) which use CONFIG_FOO macros
    themselves to control the inclusion of optional features.
    
    After a short exchange, Christoph approved this patch
    
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
  2. @ozbenh

    [PATCH] powerpc: more g5 overtemp problem fix

    ozbenh authored Linus Torvalds committed
    Some G5s still occasionally experience shutdowns due to overtemp
    conditions despite the recent fix. After analyzing logs from such
    machines, it appears that the overtemp code is a bit too quick at
    shutting the machine down when reaching the critical temperature (tmax +
    8) and doesn't leave the fan enough time to actually cool it down. This
    happens if the temperature of a CPU suddenly rises too high in a very
    short period of time, or occasionally on boot (that is the CPUs are
    already overtemp by the time the driver loads).
    
    This patches makes the code a bit more relaxed, leaving a few seconds to
    the fans to do their job before kicking the machine shutown.
    
    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Commits on Jan 1, 2006
  1. [PATCH] x86: teach dump_task_regs() about the -8 offset.

    Stas Sergeev authored Linus Torvalds committed
    This should fix multi-threaded core-files
    
    Signed-off-by: stsp@aknet.ru
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>
Something went wrong with that request. Please try again.