commit 3759fa9c55923f719ae944a3f8fbb029b36f759d tree ca48147798cd6a02edf64290dcf14c7681ab88cc parent c33d4568aca9028a22857f94f5e0850012b6444b author Herbert Xu Mon, 13 Mar 2006 14:26:12 -0800 committer David S. Miller Mon, 13 Mar 2006 14:26:12 -0800 [TCP]: Fix zero port problem in IPv6 When we link a socket into the hash table, we need to make sure that we set the num/port fields so that it shows us with a non-zero port value in proc/netlink and on the wire. This code and comment is copied over from the IPv4 stack as is. Signed-off-by: Herbert Xu commit c33d4568aca9028a22857f94f5e0850012b6444b tree 7a33d918e4d35b0444820595cb2aaaae1f1f5bfa parent 31fe4d331729e9687db84521c3ceb8e43390efcf author Andi Kleen Sun, 12 Mar 2006 23:52:59 +0100 committer Linus Torvalds Sun, 12 Mar 2006 22:56:29 -0800 [PATCH] x86-64: Fix up handling of non canonical user RIPs EM64T CPUs have somewhat weird error reporting for non canonical RIPs in SYSRET. We can't handle any exceptions there because the exception handler would end up running on the user stack which is unsafe. To avoid problems any code that might end up with a user touched pt_regs should return using int_ret_from_syscall. int_ret_from_syscall ends up using IRET, which allows safe exceptions. Cc: Ernie Petrides Signed-off-by: Andi Kleen Signed-off-by: Linus Torvalds commit 31fe4d331729e9687db84521c3ceb8e43390efcf tree 3db1ef1a3daaf10d01ab18dbcc0f107857919eac parent baa829d8926f02ab04be6ec37780810d221c5b4b author Patrick McHardy Sun, 12 Mar 2006 20:40:43 -0800 committer David S. Miller Sun, 12 Mar 2006 20:40:43 -0800 [NETFILTER]: arp_tables: fix NULL pointer dereference The check is wrong and lets NULL-ptrs slip through since !IS_ERR(NULL) is true. Coverity #190 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit baa829d8926f02ab04be6ec37780810d221c5b4b tree 8c2236eba68bb65aa535ab78e58777ff51de6746 parent 4a1ff6e2bde56cdf176bd54d557b2e15e819f810 author Patrick McHardy Sun, 12 Mar 2006 20:35:12 -0800 committer David S. Miller Sun, 12 Mar 2006 20:39:40 -0800 [IPV4/6]: Fix UFO error propagation When ufo_append_data fails err is uninitialized, but returned back. Strangely gcc doesn't notice it. Coverity #901 and #902 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit 4a1ff6e2bde56cdf176bd54d557b2e15e819f810 tree c831cb72a76e69b3e781f070c510a59b06e39cb9 parent cc9a06cd8d6fbb69b4d3c46760c132cfe312fb85 author Patrick McHardy Sun, 12 Mar 2006 20:34:53 -0800 committer David S. Miller Sun, 12 Mar 2006 20:39:39 -0800 [TCP]: tcp_highspeed: fix AIMD table out-of-bounds access Covertiy #547 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit cc9a06cd8d6fbb69b4d3c46760c132cfe312fb85 tree c6dce78c5e845d9cd4d5baab7c8b29306fa77541 parent f8dc01f543f28253abeef649987249210d8db3cc author Patrick McHardy Sun, 12 Mar 2006 20:34:27 -0800 committer David S. Miller Sun, 12 Mar 2006 20:39:38 -0800 [NETLINK]: Fix use-after-free in netlink_recvmsg The skb given to netlink_cmsg_recv_pktinfo is already freed, move it up a few lines. Coverity #948 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit f8dc01f543f28253abeef649987249210d8db3cc tree fc7d4a013cb2e2cc2e12354c29c23e695de69862 parent f6e57464df7ba0e91a23b0854adb56852dcd58a7 author Patrick McHardy Sun, 12 Mar 2006 20:33:49 -0800 committer David S. Miller Sun, 12 Mar 2006 20:39:37 -0800 [XFRM]: Fix leak in ah6_input tmp_hdr is not freed when ipv6_clear_mutable_options fails. Coverity #650 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit f6e57464df7ba0e91a23b0854adb56852dcd58a7 tree 9dfee36ee4e5150a3af876b44bca7516554aa5ec parent 406dbfc9ae0e6b7eb4da4a52c0a6556a0d7e6a2f author Patrick McHardy Sun, 12 Mar 2006 20:33:22 -0800 committer David S. Miller Sun, 12 Mar 2006 20:39:36 -0800 [NET_SCHED]: act_api: fix skb leak in error path The skb is allocated by the function, so it needs to be freed instead of trimmed on overrun. Coverity #614 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit 406dbfc9ae0e6b7eb4da4a52c0a6556a0d7e6a2f tree 208366b1977eca0f2abad59e1c608fbf50fcbb21 parent 57ddd5c1803859d977c5a31a267d2c805ffe6e11 author Patrick McHardy Sun, 12 Mar 2006 20:32:47 -0800 committer David S. Miller Sun, 12 Mar 2006 20:39:35 -0800 [NETFILTER]: nfnetlink_queue: fix possible NULL-ptr dereference Fix NULL-ptr dereference when a config message for a non-existant queue containing only an NFQA_CFG_PARAMS attribute is received. Coverity #433 Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit 57ddd5c1803859d977c5a31a267d2c805ffe6e11 tree bbc3e2a406f5ab2ddeb0ba0273867bee95b41612 parent 7cafae52381395d24b83996eca7a7b53ab6a8827 parent ed071adc97a69785686a37fb88e100f41b482b94 author Linus Torvalds Sun, 12 Mar 2006 16:41:27 -0800 committer Linus Torvalds Sun, 12 Mar 2006 16:41:27 -0800 Merge branch 'upstream-fixes' of master.kernel.org:/pub/scm/linux/kernel/git/jgarzik/libata-dev * 'upstream-fixes' of master.kernel.org:/pub/scm/linux/kernel/git/jgarzik/libata-dev: [PATCH] ahci: fix NULL pointer dereference detected by Coverity commit 7cafae52381395d24b83996eca7a7b53ab6a8827 tree 05b3cfb71c7131aaabe3b78b6f0278e91cba5147 parent ba244fe9005323452428fee4b4b7d0c70a06b627 parent cdaabbd74b15296acf09215355a7f3b07b92b83e author Linus Torvalds Sun, 12 Mar 2006 14:56:02 -0800 committer Linus Torvalds Sun, 12 Mar 2006 14:56:02 -0800 Merge master.kernel.org:/home/rmk/linux-2.6-arm * master.kernel.org:/home/rmk/linux-2.6-arm: [ARM] iwmmxt thread state alignment [ARM] 3350/1: Enable 1-wire on ARM [ARM] 3356/1: Workaround for the ARM1136 I-cache invalidation problem [ARM] 3355/1: NSLU2: remove propmt depends [ARM] 3354/1: NAS100d: fix power led handling [ARM] Fix muldi3.S commit cdaabbd74b15296acf09215355a7f3b07b92b83e tree da2e2ce07a31eb10cb3649005479a9588ba22809 parent 04916c0ef482335cb0ae575dbc5a1d97619840cd author Russell King Sun, 12 Mar 2006 22:36:06 +0000 committer Russell King Sun, 12 Mar 2006 22:36:06 +0000 [ARM] iwmmxt thread state alignment This patch removes the reliance of iwmmxt on hand coded alignments. Since thread_info is always 8K aligned, specifying that fpstate is 8-byte aligned achieves the same effect without needing to resort to hand coded alignments. Signed-off-by: Russell King commit ba244fe9005323452428fee4b4b7d0c70a06b627 tree a2f64703eeb1cae57ea3d4b5d2dd481614ae82d1 parent c12743764129e40dc8461afc1096cf175c7c25f2 author David S. Miller Sat, 11 Mar 2006 18:51:49 -0800 committer David S. Miller Sat, 11 Mar 2006 18:51:49 -0800 [TCP]: Fix tcp_tso_should_defer() when limit>=65536 That's >= a full sized TSO frame, so we should always return 0 in that case. Based upon a report and initial patch from Lachlan Andrew, final patch suggested by Herbert Xu. Signed-off-by: David S. Miller commit c12743764129e40dc8461afc1096cf175c7c25f2 tree 080df077769b53cfae033849ab87cbd95f39c4b7 parent 0d27b42739ee432a66104793e51a23807b372928 author Gregor Maier Sat, 11 Mar 2006 18:51:25 -0800 committer David S. Miller Sat, 11 Mar 2006 18:51:25 -0800 [NETFILTER]: Fix wrong option spelling in Makefile for CONFIG_BRIDGE_EBT_ULOG Signed-off-by: Gregor Maier Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller commit 0d27b42739ee432a66104793e51a23807b372928 tree d23986eff26122d06f6493029428a8748ff90040 parent 0ade309be739eceedc4812798da09d698a59867d author Brian Haley Sat, 11 Mar 2006 18:50:14 -0800 committer David S. Miller Sat, 11 Mar 2006 18:50:14 -0800 [IPV6]: fix ipv6_saddr_score struct element The scope element in the ipv6_saddr_score struct used in ipv6_dev_get_saddr() is an unsigned integer, but __ipv6_addr_src_scope() returns a signed integer (and can return -1). Signed-off-by: Brian Haley Acked-by: YOSHIFUJI Hideaki Signed-off-by: David S. Miller commit 0ade309be739eceedc4812798da09d698a59867d tree 3d16e848a4f7202fbd8999117571706caccef8b7 parent 8f22757ee84da64d4f662f1dd03dae95358a1efe author Adrian Bunk Sat, 11 Mar 2006 18:49:38 -0800 committer David S. Miller Sat, 11 Mar 2006 18:49:38 -0800 [TG3] tg3_bus_string(): remove dead code The Coverity checker spotted this dead code (note that (clock_ctrl == 7) is already handled above). Signed-off-by: Adrian Bunk Signed-off-by: David S. Miller commit 8f22757ee84da64d4f662f1dd03dae95358a1efe tree ebbf96d3c733c5cad9ab002740f1d4b829e07a4e parent 535744878e34d01a53f946f26dfbca37186f2cf8 author Dave Jones Sat, 11 Mar 2006 18:49:13 -0800 committer David S. Miller Sat, 11 Mar 2006 18:49:13 -0800 [TUN]: Fix leak in tun_get_user() We're leaking an skb in a failure path in this function. Coverity #632 Signed-off-by: Dave Jones Signed-off-by: David S. Miller commit ed071adc97a69785686a37fb88e100f41b482b94 tree 75be27a48365aab9cfe6531f7d1f5516e6602307 parent 6971ed1fbbc80cae54e082aae153d5b063885d0a parent 535744878e34d01a53f946f26dfbca37186f2cf8 author Jeff Garzik Sat, 11 Mar 2006 19:55:26 -0500 committer Jeff Garzik Sat, 11 Mar 2006 19:55:26 -0500 Merge branch 'master' commit 6971ed1fbbc80cae54e082aae153d5b063885d0a tree 164d950b587badb59dc2e2415ab74c2210accff7 parent ed62178589929d248a0aaf4018ca3867e2f96d9d author Tejun Heo Sat, 11 Mar 2006 12:47:54 +0900 committer Jeff Garzik Sat, 11 Mar 2006 19:06:02 -0500 [PATCH] ahci: fix NULL pointer dereference detected by Coverity Fix NULL pointer dereference detected by the Coverity checker. Kill dev -> pdev -> dev conversion while at it. Signed-off-by: Tejun Heo Cc: Adrian Bunk Signed-off-by: Jeff Garzik commit 04916c0ef482335cb0ae575dbc5a1d97619840cd tree e311fe75fd072232380eb1f4ed5e675442409d7a parent 141fa40cff90881ac4d81f6afa27bc283fe7acca author Alessandro Zummo Fri, 10 Mar 2006 22:30:01 +0000 committer Russell King Fri, 10 Mar 2006 22:30:01 +0000 [ARM] 3350/1: Enable 1-wire on ARM Patch from Alessandro Zummo This patches add the 1-wire drivers to the ARM Kconfig. Signed-off-by: Alessandro Zummo Signed-off-by: Russell King commit 141fa40cff90881ac4d81f6afa27bc283fe7acca tree 7991b0f3910dafb58e1ef92044153e5383b01850 parent e7fcdb79ecaa01e2eba06e3fb64e10455bdb5aa7 author Catalin Marinas Fri, 10 Mar 2006 22:26:47 +0000 committer Russell King Fri, 10 Mar 2006 22:26:47 +0000 [ARM] 3356/1: Workaround for the ARM1136 I-cache invalidation problem Patch from Catalin Marinas ARM1136 erratum 371025 (category 2) specifies that, under rare conditions, an invalidate I-cache by MVA (line or range) operation can fail to invalidate a cache line. The recommended workaround is to either invalidate the entire I-cache or invalidate the range by set/way rather than MVA. Note that for a 16K cache size, invalidating a 4K page by set/way is equivalent to invalidating the entire I-cache. Signed-off-by: Catalin Marinas Signed-off-by: Russell King commit e7fcdb79ecaa01e2eba06e3fb64e10455bdb5aa7 tree d0ce941930b18115c9a5ef91680fbfb6e298d5d6 parent dcc8fa50ebc251a1394a2c8561eee7d79cc5f437 author Alessandro Zummo Wed, 08 Mar 2006 23:45:12 +0000 committer Russell King Wed, 08 Mar 2006 23:45:12 +0000 [ARM] 3355/1: NSLU2: remove propmt depends Patch from Alessandro Zummo The patch that would have made the NSLU2 kernel non compatible with other ixp4xx machs never entered the kernel. So it is actually safe to remove the prompt dependencies. Signed-off-by: Alessandro Zummo Signed-off-by: Russell King commit dcc8fa50ebc251a1394a2c8561eee7d79cc5f437 tree 6830942f3721060f61227e7058fdfe1b4ab972d0 parent 3c8fdae78cf5d73c6739912a1ff087c0f23b2a47 author Alessandro Zummo Wed, 08 Mar 2006 23:45:10 +0000 committer Russell King Wed, 08 Mar 2006 23:45:10 +0000 [ARM] 3354/1: NAS100d: fix power led handling Patch from Alessandro Zummo Disable GPIO clocks to allow the power led to work properly. Signed-off-by: Alessandro Zummo Signed-off-by: Russell King commit 3c8fdae78cf5d73c6739912a1ff087c0f23b2a47 tree 85203dba56f72d897ffa073aa53fb03b011f4e52 parent 7986824e4e31d6c66f39d2f11ab93fcfed21f593 author Russell King Wed, 08 Mar 2006 17:25:33 +0000 committer Russell King Wed, 08 Mar 2006 17:25:33 +0000 [ARM] Fix muldi3.S When shifting the low-parts of signed numbers, a logical shift should be used to avoid sign-extending a bit which isn't a sign bit. Signed-off-by: Russell King