LWN.net Logo

2.6.17-rc5 long-format changelog

commit a8bd60705aa17a998516837d9c1e503ad4cbd7fc
Author: Linus Torvalds <torvalds@g5.osdl.org>
Date:   Wed May 24 18:50:17 2006 -0700

    Linux 2.6.17-rc5

commit 4f3a151a11da3351e2149a401d4ee18426938de7
Author: Jean Delvare <khali@linux-fr.org>
Date:   Wed May 24 15:13:14 2006 -0300

    [PATCH] V4L/DVB (4045): Fixes recursive dependency for I2C
    
    Mixing "depends on I2C" and "select I2C" within the media subsystem
    leads to the following problem:
    Warning! Found recursive dependency: I2C DVB_BUDGET DVB_BUDGET_PATCH
    DVB_AV7110 VIDEO_SAA7146_VV VIDEO_SAA7146 I2C
    
    Signed-off-by: Jean Delvare <khali@linux-fr.org>
    Acked-by: Manu Abraham <manu@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 51c403274093767d6dc30703d67e9f0b255c7439
Author: Pierre Ossman <drzeus@drzeus.cx>
Date:   Wed May 24 10:20:45 2006 +0200

    [MMC] Fix premature use of md->disk
    
    md->disk was being used in a debug message before it was allocated.
    
    Signed-off-by: Pierre Ossman <drzeus@drzeus.cx>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit b964638ffd59b61c13f02b81e5118a6e573d91cd
Author: Dave Kleikamp <shaggy@austin.ibm.com>
Date:   Wed May 24 07:43:38 2006 -0500

    JFS: Fix multiple errors in metapage_releasepage
    
    It looks like metapage_releasepage was making in invalid assumption that
    the releasepage method would not be called on a dirty page.  Instead of
    issuing a warning and releasing the metapage, it should return 0, indicating
    that the private data for the page cannot be released.
    
    I also realized that metapage_releasepage had the return code all wrong.  If
    it is successful in releasing the private data, it should return 1, otherwise
    it needs to return 0.
    
    Lastly, there is no need to call wait_on_page_writeback, since
    try_to_release_page will not call us with a page in writback state.
    
    Signed-off-by: Dave Kleikamp <shaggy@austin.ibm.com>

commit bb31a8faa270beafcc51a65880c5564c6b718bd6
Author: Albert Lee <albertcc@tw.ibm.com>
Date:   Mon May 22 11:43:46 2006 +0800

    [PATCH] libata: add pio flush for via atapi (was: Re: TR: ASUS A8V Deluxe, x86_64)
    
    Backport the "pio flush" from the libata major update to 2.6.17 for via atapi.
    
    Signed-off-by: Albert Lee <albertcc@tw.ibm.com>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit a1433ac4ab46fb23ae77804c207a1f710a7b12f1
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Mon May 22 12:03:42 2006 -0700

    [PATCH] sky2: fix jumbo packet support
    
    The truncate threshold calculation to prevent receiver from getting stuck
    was incorrect, and it didn't take into account the upper limit on bits
    in the register so the jumbo packet support was broken.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 387e2b0439026aa738a9edca15a57e5c0bcb4dfc
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Tue May 23 15:20:25 2006 -0700

    [BRIDGE]: need to ref count the LLC sap
    
    Bridge will OOPS on removal if other application has the SAP open.
    The bridge SAP might be shared with other usages, so need
    to do reference counting on module removal rather than explicit
    close/delete.
    
    Since packet might arrive after or during removal, need to clear
    the receive function handle, so LLC only hands it to user (if any).
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 4a063739138e2c4e933188d641f1593e01ce8285
Author: Chris Wright <chrisw@sous-sol.org>
Date:   Tue May 23 15:08:13 2006 -0700

    [NETFILTER]: SNMP NAT: fix memleak in snmp_object_decode
    
    If kmalloc fails, error path leaks data allocated from asn1_oid_decode().
    
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 4d942d8b39bf7d43ce93d85964aeb63aeace0593
Author: Patrick McHardy <kaber@trash.net>
Date:   Tue May 23 15:07:46 2006 -0700

    [NETFILTER]: H.323 helper: fix sequence extension parsing
    
    When parsing unknown sequence extensions the "son"-pointer points behind
    the last known extension for this type, don't try to interpret it.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 7185989db4d926dbef1a2f638c464f35599c83e0
Author: Patrick McHardy <kaber@trash.net>
Date:   Tue May 23 15:07:07 2006 -0700

    [NETFILTER]: H.323 helper: fix parser error propagation
    
    The condition "> H323_ERROR_STOP" can never be true since H323_ERROR_STOP
    is positive and is the highest possible return code, while real errors are
    negative, fix the checks. Also only abort on real errors in some spots
    that were just interpreting any return value != 0 as error.
    
    Fixes crashes caused by use of stale data after a parsing error occured:
    
    BUG: unable to handle kernel paging request at virtual address bfffffff
     printing eip:
    c01aa0f8
    *pde = 1a801067
    *pte = 00000000
    Oops: 0000 [#1]
    PREEMPT
    Modules linked in: ip_nat_h323 ip_conntrack_h323 nfsd exportfs sch_sfq sch_red cls_fw sch_hfsc
xt_length ipt_owner xt_MARK iptable_mangle nfs lockd sunrpc pppoe pppoxx
    CPU:    0
    EIP:    0060:[<c01aa0f8>]    Not tainted VLI
    EFLAGS: 00210646   (2.6.17-rc4 #8)
    EIP is at memmove+0x19/0x22
    eax: d77264e9   ebx: d77264e9   ecx: e88d9b17   edx: d77264e9
    esi: bfffffff   edi: bfffffff   ebp: de6a7680   esp: c0349db8
    ds: 007b   es: 007b   ss: 0068
    Process asterisk (pid: 3765, threadinfo=c0349000 task=da068540)
    Stack: <0>00000006 c0349e5e d77264e3 e09a2b4e e09a38a0 d7726052 d7726124 00000491
           00000006 00000006 00000006 00000491 de6a7680 d772601e d7726032 c0349f74
           e09a2dc2 00000006 c0349e5e 00000006 00000000 d76dda28 00000491 c0349f74
    Call Trace:
     [<e09a2b4e>] mangle_contents+0x62/0xfe [ip_nat]
     [<e09a2dc2>] ip_nat_mangle_tcp_packet+0xa1/0x191 [ip_nat]
     [<e0a2712d>] set_addr+0x74/0x14c [ip_nat_h323]
     [<e0ad531e>] process_setup+0x11b/0x29e [ip_conntrack_h323]
     [<e0ad534f>] process_setup+0x14c/0x29e [ip_conntrack_h323]
     [<e0ad57bd>] process_q931+0x3c/0x142 [ip_conntrack_h323]
     [<e0ad5dff>] q931_help+0xe0/0x144 [ip_conntrack_h323]
    ...
    
    Found by the PROTOS c07-h2250v4 testsuite.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 09b74de9fff056a0a4058a0f14508acba89ea6fc
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:38 2006 -0700

    IB/ipath: deref correct pointer when using kernel SMA
    
    At this point, the core QP structure hasn't been initialized, so what's
    in there isn't valid.  Get the same information elsewhere.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 3977026462314dfbb237adf6a964d0f683b8e45d
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:37 2006 -0700

    IB/ipath: fix null deref during rdma ops
    
    The problem was that node A's sending thread, which handles sending RDMA
    read response data, would write the trigger word, the last packet would
    be sent, node B would send a new RDMA read request, node A's interrupt
    handler would initialize s_rdma_sge, then node A's sending thread would
    update s_rdma_sge.  This didn't happen very often naturally but was more
    frequent with 1 byte RDMA reads.  Rather than adding more locking or
    increasing the QP structure size and copying sge data, I modified the
    copy routine to update the pointers before writing the trigger word to
    avoid the update race.
    
    Signed-off-by: Ralph Campbell <ralphc@pathscale.com>
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 41c75a19bf4a0102f49763a686fb7e39780349f3
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:36 2006 -0700

    IB/ipath: register as IB device owner
    
    This fixes an oops.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 9dcc0e58e2913f7e6ffba64c27fe5c2f2c7b845c
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:35 2006 -0700

    IB/ipath: enable PE800 receive interrupts on user ports
    
    Fixed so it works on the PE-800.  It had not previously been updated to
    match PE-800 receive interrupt differences from HT-400.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit f2080fa3c6098dedfb9b599bdaedd07be2ea4646
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:34 2006 -0700

    IB/ipath: enable GPIO interrupt on HT-460
    
    This is required for even semi-decent performance on OpenIB.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit b0ff7c2005f7ec8dec10fb15e62b8e1acc172bbf
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:33 2006 -0700

    IB/ipath: fix NULL dereference during cleanup
    
    Fix NULL deref due to pcidev being clobbered before dd->ipath_f_cleanup()
    was called.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 94b8d9f98d7f535037eb9845b81396f667b4f727
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:32 2006 -0700

    IB/ipath: replace uses of LIST_POISON
    
    Per Andrew's request.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit eaf6733bc176742fb08def2269441684e963c275
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:31 2006 -0700

    IB/ipath: fix reporting of driver version to userspace
    
    Fix the interface version that gets exported to userspace.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit b228b43c491c53d1838e06f47a7470db9f84d899
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:30 2006 -0700

    IB/ipath: don't modify QP if changes fail
    
    Make sure modify_qp won't modify the QP if any of the changes failed.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit ebac3800e5652063aa9491ef7fb4d57e089eb385
Author: Bryan O'Sullivan <bos@pathscale.com>
Date:   Tue May 23 11:32:29 2006 -0700

    IB/ipath: fix spinlock recursion bug
    
    The local loopback path for RC can lock the rkey table lock without
    blocking interrupts.  The receive interrupt path can then call
    ipath_rkey_ok() and deadlock.  Remove the redundant lock.
    
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 14ba3e7b3103a12b6f6a1057a1ecbfb15e1b48c0
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Tue May 23 16:02:03 2006 -0300

    V4L/DVB (4041): Fix compilation on PPC 64
    
    Those functions don't exist on PPC64 architecture.
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 8b6c879c81e8f00077607f83e024eedf388839b4
Author: Jean Delvare <khali@linux-fr.org>
Date:   Tue May 23 15:56:50 2006 -0300

    V4L/DVB (4040a): Fix the following section warnings:
    
    reference to .init.text: from .text between 'dvb_bt8xx_probe'
    (at offset 0x122c) and 'dvb_bt8xx_remove'
    reference to .init.text: from .text between 'dvb_bt8xx_probe'
    (at offset 0x1267) and 'dvb_bt8xx_remove'
    
    Signed-off-by: Jean Delvare <khali@linux-fr.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 3c2c54910f277f3abd3763dbc64b9dbf8b4479e9
Author: Manu Abraham <abraham.manu@gmail.com>
Date:   Sat May 20 13:17:00 2006 -0300

    V4L/DVB (4037): Make the bridge devices that depend on I2C dependant on I2C
    
    Ref: Bugzilla 6179, 6589
    
    Signed-off-by: Manu Abraham <manu@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 9d8a51f80117a9d672b455d60901842ad50aa69f
Author: Adrian Bunk <bunk@stusta.de>
Date:   Tue May 23 15:56:20 2006 -0300

    V4L/DVB (3927): Fix VIDEO_DEV=m, VIDEO_V4L1_COMPAT=y
    
    If CONFIG_VIDEO_DEV=m and CONFIG_VIDEO_V4L1_COMPAT=y, v4l1-compat should
    be built as a module (currently, it isn't built at all leading to
    problems with modules using it).
    
    Signed-off-by: Adrian Bunk <bunk@stusta.de>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit fd0ff8aa1d95a896b3627bc62d42d6d002ac0bc3
Author: Jens Axboe <axboe@suse.de>
Date:   Tue May 23 11:23:49 2006 +0200

    [PATCH] blk: fix gendisk->in_flight accounting during barrier sequence
    
    While executing barrrier sequence, the bar_rq which carries actual
    write was accounted as normal IO on completion, while it wasn't on
    queueing.  This caused gendisk->in_flight to be decremented by 1 after
    each barrier thus messed up statistics.
    
    This patch makes bar_rq not accounted as normal IO.  As the containing
    barrier request as a whole is accounted, part of it shouldn't be.
    
    Signed-off-by: Tejun Heo <htejun@gmail.com>
    Signed-off-by: Jens Axboe <axboe@suse.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 0f0410823792ae0ecb45f2578598b115835ffdbb
Author: David Woodhouse <dwmw2@infradead.org>
Date:   Tue May 23 07:46:40 2006 -0700

    [PATCH] powerpc: wire up sys_[gs]et_robust_list
    
    Signed-off-by: David Woodhouse <dwmw2@infradead.org>
    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Acked-by: Paul Mackerras <paulus@samba.org>
    Cc: Arnd Bergmann <arnd@arndb.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit b471f55427ee94d6de2b33b88a7409f8cbc6b5dc
Author: David Woodhouse <dwmw2@infradead.org>
Date:   Tue May 23 07:46:39 2006 -0700

    [PATCH] powerpc: check Cell SPU syscall number range _before_ using it
    
    Signed-off-by: David Woodhouse <dwmw2@infradead.org>
    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Acked-by: Paul Mackerras <paulus@samba.org>
    Cc: Arnd Bergmann <arnd@arndb.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 5a4fa1639622b85d7e4422242308fc6cef7e503e
Author: David Woodhouse <dwmw2@infradead.org>
Date:   Tue May 23 07:46:38 2006 -0700

    [PATCH] powerpc: fill hole in Cell SPU syscall table
    
    Syscall number 224 was absent from the table, which I believe means that
    the SPU can cause an oops by attempting to use it.
    
    Signed-off-by: David Woodhouse <dwmw2@infradead.org>
    Cc: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Acked-by: Paul Mackerras <paulus@samba.org>
    Cc: Arnd Bergmann <arnd@arndb.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit bb6e093da23ace2724fdadd27738027468eb82b3
Author: Florin Malita <fmalita@gmail.com>
Date:   Mon May 22 22:35:30 2006 -0700

    [PATCH] orinoco: possible null pointer dereference in orinoco_rx_monitor()
    
    If the skb allocation fails, the current error path calls
    dev_kfree_skb_irq() with a NULL argument.  Also, 'err' is not being used.
    
    Coverity CID: 275.
    
    Signed-off-by: Florin Malita <fmalita@gmail.com>
    Cc: "John W. Linville" <linville@tuxdriver.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 30d6b2f3749e41ce37170ebc445948222b2db4ee
Author: Pavel Machek <pavel@ucw.cz>
Date:   Mon May 22 22:35:29 2006 -0700

    [PATCH] swsusp: fix typo in cr0 handling
    
    Writing cr0 to cr2 register can't be right.  This fixes the typo.  I wonder
    how it could survive so long.
    
    Signed-off-by: Pavel Machek <pavel@suse.cz>
    Cc: Zachary Amsden <zach@vmware.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ff4547f4aa9823908e9866495598fc65772c2a09
Author: Tobias Powalowski <t.powa@gmx.de>
Date:   Mon May 22 22:35:28 2006 -0700

    [PATCH] tty_insert_flip_string_flags() license fix
    
    We still don't have the tty layer licensing compatibility quite right.
    
    tty_insert_flip_char() used to be inlined in include/linux/tty_flip.h.  It
    is now out-of-lined and hence needs EXPORT_SYMBOL() to be back-compatible.
    
    One known offender is the Intel Modem driver.
    
    Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit a2eb0c101d24aca9d3d16c30c4f79f3a70c89208
Author: NeilBrown <neilb@suse.de>
Date:   Mon May 22 22:35:27 2006 -0700

    [PATCH] md: Make sure bi_max_vecs is set properly in bio_split
    
    Else a subsequent bio_clone might make a mess.
    
    Signed-off-by: Neil Brown <neilb@suse.de>
    Cc: "Don Dupuis" <dondster@gmail.com>
    Acked-by: Jens Axboe <axboe@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 5c4c33318d26620fa552f15bbb6d0f9775a1b4df
Author: NeilBrown <neilb@suse.de>
Date:   Mon May 22 22:35:26 2006 -0700

    [PATCH] md: fix possible oops when starting a raid0 array
    
    This loop that sets up the hash_table has problems.
    
    Careful examination will show that the last time through, everything but
    the first line is pointless.  This is because all it does is change 'cur'
    and 'size' and neither of these are used after the loop.  This should ring
    warning bells...  That last time through the loop,
    
            size += conf->strip_zone[cur].size
    
    can index off the end of the strip_zone array.  Depending on what it finds
    there, it might exit the loop cleanly, or it might spin going further and
    further beyond the array until it hits an unmapped address.
    
    This patch rearranges the code so that the last, pointless, iteration of
    the loop never happens.  i.e.  the one statement of the last loop that is
    needed is moved the the end of the previous loop - or to before the loop
    starts - and the loop counter starts from 1 instead of 0.
    
    Cc: "Don Dupuis" <dondster@gmail.com>
    Signed-off-by: Neil Brown <neilb@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit f2d395865faa2a7cd4620b07178e58cbb160ba08
Author: NeilBrown <neilb@suse.de>
Date:   Mon May 22 22:35:25 2006 -0700

    [PATCH] knfsd: Fix two problems that can cause rmmod nfsd to die
    
    Both cause the 'entries' count in the export cache to be non-zero at module
    removal time, so unregistering that cache fails and results in an oops.
    
    1/ exp_pseudoroot (used for NFSv4 only) leaks a reference to an export
       entry.
    2/ sunrpc_cache_update doesn't increment the entries count when it adds
       an entry.
    
    Thanks to "david m.  richter" <richterd@citi.umich.edu> for triggering the
    problem and finding one of the bugs.
    
    Cc: "david m. richter" <richterd@citi.umich.edu>
    Signed-off-by: Neil Brown <neilb@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit e46e490368f87032a6e54969194413339b35a385
Author: Andrew Morton <akpm@osdl.org>
Date:   Mon May 22 22:35:24 2006 -0700

    [PATCH] sys_sync_file_range(): move exported flags outside __KERNEL__
    
    These flags are needed by userspace - move them outside __KERNEL__
    
    (Pointed out by dwmw2)
    
    Cc: David Woodhouse <dwmw2@infradead.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 42f142371e48fbc44956d57b4e506bb6ce673cd7
Author: David S. Miller <davem@davemloft.net>
Date:   Tue May 23 02:07:22 2006 -0700

    [SPARC64]: Respect gfp_t argument to dma_alloc_coherent().
    
    Using asm-generic/dma-mapping.h does not work because pushing
    the call down to pci_alloc_coherent() causes the gfp_t argument
    of dma_alloc_coherent() to be ignored.
    
    Fix this by implementing things directly, and adding a gfp_t
    argument we can use in the internal call down to the PCI DMA
    implementation of pci_alloc_coherent().
    
    This fixes massive memory corruption when using the sound driver
    layer, which passes things like __GFP_COMP down into these
    routines and (correctly) expects that to work.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit f41d5bb1d9f49b03af7126d07a511facbe283a92
Author: Patrick McHardy <kaber@trash.net>
Date:   Mon May 22 16:55:14 2006 -0700

    [NETFILTER]: SNMP NAT: fix memory corruption
    
    Fix memory corruption caused by snmp_trap_decode:
    
    - When snmp_trap_decode fails before the id and address are allocated,
      the pointers contain random memory, but are freed by the caller
      (snmp_parse_mangle).
    
    - When snmp_trap_decode fails after allocating just the ID, it tries
      to free both address and ID, but the address pointer still contains
      random memory. The caller frees both ID and random memory again.
    
    - When snmp_trap_decode fails after allocating both, it frees both,
      and the callers frees both again.
    
    The corruption can be triggered remotely when the ip_nat_snmp_basic
    module is loaded and traffic on port 161 or 162 is NATed.
    
    Found by multiple testcases of the trap-app and trap-enc groups of the
    PROTOS c06-snmpv1 testsuite.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit f5565f4a90bdfea99e4bcd8411ff5272ebdbdbf8
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Mon May 22 16:54:30 2006 -0700

    [IRDA]: fixup type of ->lsap_state
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 405a42c5c8bd5731087c0ff01310731a3c1c9c24
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Mon May 22 16:54:08 2006 -0700

    [IRDA]: fix 16/32 bit confusion
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 4195f81453b9727f82bb8ceae03411b7fe52a994
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Mon May 22 16:53:22 2006 -0700

    [NET]: Fix "ntohl(ntohs" bugs
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit ae181bc44c65fdc93d0d2d908534b22e43f60f56
Author: Michael Chan <mchan@broadcom.com>
Date:   Mon May 22 16:39:20 2006 -0700

    [BNX2]: Use kmalloc instead of array
    
    Use kmalloc() instead of a local array in bnx2_nvram_write().
    
    Update version to 1.4.40.
    
    Signed-off-by: Michael Chan <mchan@broadcom.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit bae25761c92c5eec781b6ea72bbe7e98fc8382a0
Author: Michael Chan <mchan@broadcom.com>
Date:   Mon May 22 16:38:38 2006 -0700

    [BNX2]: Fix bug in bnx2_nvram_write()
    
    Fix a bug in bnx2_nvram_write() caused by a counter variable not
    correctly incremented by 4.
    
    Signed-off-by: Michael Chan <mchan@broadcom.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 463d305bc51b8f5d0750a17ec0c9caf5181ec6d4
Author: Michael Chan <mchan@broadcom.com>
Date:   Mon May 22 16:36:27 2006 -0700

    [TG3]: Add some missing rx error counters
    
    Add some missing rx error counters for 5705 and newer chips.
    
    Update version to 3.58.
    
    Signed-off-by: Michael Chan <mchan@broadcom.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 353b28bafd1b962359a866ff263a7fad833d29a1
Author: David S. Miller <davem@sunset.davemloft.net>
Date:   Sun May 21 21:22:53 2006 -0700

    [SPARC]: Add robust futex syscall entries.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 9a2a9bb2010ed7e56547e2bb2041dab14ab0510a
Author: Andrew Morton <akpm@osdl.org>
Date:   Mon May 15 14:10:11 2006 -0700

    [SUNSU]: Fix license.
    
    FATAL: modpost: GPL-incompatible module sunsu uses the GPL-only symbol
tty_insert_flip_string_flags
    
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit f1adad78dd2fc8edaa513e0bde92b4c64340245c
Author: Linus Torvalds <torvalds@g5.osdl.org>
Date:   Sun May 21 18:54:09 2006 -0700

    Revert "[PATCH] sched: fix interactive task starvation"
    
    This reverts commit 5ce74abe788a26698876e66b9c9ce7e7acc25413 (and its
    dependent commit 8a5bc075b8d8cf7a87b3f08fad2fba0f5d13295e), because of
    audio underruns.
    
    Reported by Rene Herman <rene.herman@keyaccess.nl>, who also pinpointed
    the exact cause of the underruns:
    
      "Audio underruns galore, with only ogg123 and firefox (browsing the
       GIT tree online is also a nice trigger by the way).
    
       If I back it out, everything is fine for me again."
    
    Cc: Rene Herman <rene.herman@keyaccess.nl>
    Cc: Mike Galbraith <efault@gmx.de>
    Acked-by: Con Kolivas <kernel@kolivas.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit b307e8548921c686d2eb948ca418ab2941876daa
Author: Andrew Morton <akpm@osdl.org>
Date:   Sat May 20 15:00:36 2006 -0700

    [PATCH] ad1848 section fix
    
    WARNING: sound/oss/ad1848.o - Section mismatch: reference to .init.data:ad1848_isapnp_list from
.text between 'ad1848_init_generic' (at offset 0x46f0) and 'kmalloc'
    WARNING: sound/oss/ad1848.o - Section mismatch: reference to .init.data:ad1848_isapnp_list from
.text between 'ad1848_init_generic' (at offset 0x46f8) and 'kmalloc'
    WARNING: sound/oss/ad1848.o - Section mismatch: reference to .init.data:ad1848_isapnp_list from
.text between 'ad1848_init_generic' (at offset 0x4818) and 'kmalloc'
    
    Also,
    
    sound/oss/ad1848.c: In function `ad1848_init':
    sound/oss/ad1848.c:2029: warning: cast to pointer from integer of different size
    sound/oss/ad1848.c: In function `ad1848_unload':
    sound/oss/ad1848.c:2178: warning: cast to pointer from integer of different size
    sound/oss/ad1848.c: In function `adintr':
    sound/oss/ad1848.c:2207: warning: cast from pointer to integer of different size
    
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit db31419404e5ccc7e8e07000a5f1ac440a0eafa0
Author: Andrew Morton <akpm@osdl.org>
Date:   Sat May 20 15:00:35 2006 -0700

    [PATCH] nm256_audio section fix
    
    WARNING: sound/oss/nm256_audio.o - Section mismatch: reference to .init.text:nm256_peek_for_sig
from .text between 'nm256_install' (at offset 0x3ba4) and 'nm256_probe'
WARNING: sound/oss/nm256_audio.o - Section mismatch: reference to .init.text:nm256_peek_for_sig from .text between
'nm256_install' (at offset 0x3bac) and 'nm256_probe'
WARNING: sound/oss/nm256_audio.o - Section mismatch: reference to .init.text: from .text between 'nm256_install' (at offset 0x3dcc) and
'nm256_probe'           WARNING: sound/oss/nm256_audio.o - Section mismatch: reference to
.init.text: from .text between 'nm256_install' (at offset 0x3dd0) and 'nm256_probe'
    
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 1caef6aa97a3a43a82f238d8b31bf177de34a4bf
Author: Andrew Morton <akpm@osdl.org>
Date:   Sat May 20 15:00:35 2006 -0700

    [PATCH] es18xx build fix
    
    sound/isa/es18xx.c: In function `snd_es18xx_identify':
    sound/isa/es18xx.c:1606: warning: implicit declaration of function `udelay'
    
    Cc: Jaroslav Kysela <perex@suse.cz>
    Cc: Takashi Iwai <tiwai@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit fad43488b8c9b3914fcdc48ee3b8d30aeb49fa30
Author: Andrew Morton <akpm@osdl.org>
Date:   Sat May 20 15:00:34 2006 -0700

    [PATCH] mpu401 section fix
    
    WARNING: sound/drivers/mpu401/snd-mpu401.o - Section mismatch: reference to .init.text: from
.text between 'snd_mpu401_pnp_probe' (at offset 0x1f7) and 'snd_mpu401_pnp_remove'
    
    Cc: Jaroslav Kysela <perex@suse.cz>
    Cc: Takashi Iwai <tiwai@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 9e8a3d229b23c34adb9c20cc2875fc67dce12585
Author: Andrew Morton <akpm@osdl.org>
Date:   Sat May 20 15:00:33 2006 -0700

    [PATCH] i810 section fix
    
    WARNING: drivers/video/i810/i810fb.o - Section mismatch: reference to .init.data: from .text
between 'i810_fix_offsets' (at offset 0x1b88) and 'i810_alloc_agp_mem'
    WARNING: drivers/video/i810/i810fb.o - Section mismatch: reference to .init.data: from .text
between 'i810_fix_offsets' (at offset 0x1b8f) and 'i810_alloc_agp_mem'
    WARNING: drivers/video/i810/i810fb.o - Section mismatch: reference to .init.data: from .text
between 'i810_fix_offsets' (at offset 0x1ba3) and 'i810_alloc_agp_mem'
    WARNING: drivers/video/i810/i810fb.o - Section mismatch: reference to .init.data: from .text
between 'i810_fix_offsets' (at offset 0x1bb5) and 'i810_alloc_agp_mem'
    WARNING: drivers/video/i810/i810fb.o - Section mismatch: reference to .init.data: from .text
between 'i810_fix_offsets' (at offset 0x1bc6) and 'i810_alloc_agp_mem'
    WARNING: drivers/video/i810/i810fb.o - Section mismatch: reference to .init.data: from .text
between 'i810_init_defaults' (at offset 0x1dd8) and 'i810_init_device'
    WARNING: drivers/video/i810/i810fb.o - Section mismatch: reference to .init.data: from .text
between 'i810_init_defaults' (at offset 0x1dfb) and 'i810_init_device'
    
    Cc: "Antonino A. Daplas" <adaplas@pol.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 9781b8b055bd0a02a043ed80fb8d59d703a49daf
Author: Andrew Morton <akpm@osdl.org>
Date:   Sat May 20 15:00:32 2006 -0700

    [PATCH] pd6729 section fix
    
    WARNING: drivers/pcmcia/pd6729.o - Section mismatch: reference to .init.text: from .text
between 'pd6729_pci_probe' (at offset 0x9a8) and 'pd6729_pci_remove'
    
    Cc: Dominik Brodowski <linux@dominikbrodowski.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit e984bb43f7450312ba66fe0e67a99efa6be3b246
Author: Bob Picco <bob.picco@hp.com>
Date:   Sat May 20 15:00:31 2006 -0700

    [PATCH] Align the node_mem_map endpoints to a MAX_ORDER boundary
    
    Andy added code to buddy allocator which does not require the zone's
    endpoints to be aligned to MAX_ORDER.  An issue is that the buddy allocator
    requires the node_mem_map's endpoints to be MAX_ORDER aligned.  Otherwise
    __page_find_buddy could compute a buddy not in node_mem_map for partial
    MAX_ORDER regions at zone's endpoints.  page_is_buddy will detect that
    these pages at endpoints are not PG_buddy (they were zeroed out by bootmem
    allocator and not part of zone).  Of course the negative here is we could
    waste a little memory but the positive is eliminating all the old checks
    for zone boundary conditions.
    
    SPARSEMEM won't encounter this issue because of MAX_ORDER size constraint
    when SPARSEMEM is configured.  ia64 VIRTUAL_MEM_MAP doesn't need the logic
    either because the holes and endpoints are handled differently.  This
    leaves checking alloc_remap and other arches which privately allocate for
    node_mem_map.
    
    Signed-off-by: Bob Picco <bob.picco@hp.com>
    Acked-by: Mel Gorman <mel@csn.ul.ie>
    Cc: Dave Hansen <haveblue@us.ibm.com>
    Cc: Andy Whitcroft <apw@shadowen.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ae57a856429dd932c547530df1b234eb7e642297
Author: Greg Kroah-Hartman <gregkh@suse.de>
Date:   Sat May 20 15:00:30 2006 -0700

    [PATCH] kobject: quiet errors in kobject_add
    
    People don't like released kernels yelling at them, no matter how real the
    error might be.  So only report it if CONFIG_KOBJECT_DEBUG is enabled.
    
    Sent on request of Andrew Morton.
    
    (akpm: should bring this back post-2.6.17)
    
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit b3969e5831adac133b286600e74214e1ae42ec05
Author: Alessandro Zummo <alessandro.zummo@towertech.it>
Date:   Sat May 20 15:00:29 2006 -0700

    [PATCH] rtc subsystem: use ENOIOCTLCMD and ENOTTY where appropriate
    
    Appropriately use -ENOIOCTLCMD and -ENOTTY when the ioctl is not
    implemented by a driver.
    
    (akpm: we're not allowed to return -ENOIOCTLCMD to userspace.  This patch does
    the right thing).
    
    Signed-off-by: Alessandro Zummo <a.zummo@towertech.it>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit eae07ac607f317ee6781983d3f9d8f77ef144b45
Author: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
Date:   Sat May 20 15:00:28 2006 -0700

    [PATCH] kbuild: fix modpost segfault for 64bit mipsel kernel
    
    Here is an updated r_info layout fix.  Please apply "check SHT_REL
    sections" patch before this.
    
    64bit mips has different r_info layout.  This patch fixes modpost
    segfault for 64bit little endian mips kernel.
    
    Signed-off-by: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
    Cc: Sam Ravnborg <sam@ravnborg.org>
    Cc: Ralf Baechle <ralf@linux-mips.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 2c1a51f39d9551a514d7a089d01c23c0c3a54ab8
Author: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
Date:   Sat May 20 15:00:26 2006 -0700

    [PATCH] kbuild: check SHT_REL sections
    
    I found that modpost can not detect section mismatch on mips and i386.  On
    mips64, the modpost (with r_info layout fix) can detect it.  The current
    modpst only checks SHT_RELA section but I suppose SHT_REL section should be
    checked also.  This patch does not contain r_info layout fix.  I'll post an
    updated r_info layout fix on next mail.
    
    Check SHT_REL sections as like as SHT_RELA sections to detect section
    mismatch.
    
    Signed-off-by: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
    Cc: Sam Ravnborg <sam@ravnborg.org>
    Cc: Ralf Baechle <ralf@linux-mips.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 92f63cd000059366af18712367216d96180e0ec0
Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
Date:   Sat May 20 15:00:25 2006 -0700

    [PATCH] s390: next_timer_interrupt overflow in stop_hz_timer
    
    The 32 bit unsigned substraction (next - jiffies) in stop_hz_timer can
    overflow if jiffies gets advanced between next_timer_interrupt and the read
    under the xtime lock.  The cast to a u64 then results in a large value
    which causes the cpu to wait too long.  Fix this by casting next and
    jiffies independently to u64 before subtracting them.
    
    (Spotted by Zachary Amsden <zach@vmware.com>)
    
    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 0662b71322e211dba9a4bc0e6fbca7861a2b5a7d
Author: Zachary Amsden <zach@vmware.com>
Date:   Sat May 20 15:00:24 2006 -0700

    [PATCH] Fix a NO_IDLE_HZ timer bug
    
    Under certain timing conditions, a race during boot occurs where timer
    ticks are being processed on remote CPUs.  The remote timer ticks can
    increment jiffies, and if this happens during a window when a timeout is
    very close to expiring but a local tick has not yet been delivered, you can
    end up with
    
    1) No softirq pending
    2) A local timer wheel which is not synced to jiffies
    3) No high resolution timer active
    4) A local timer which is supposed to fire before the current jiffies value.
    
    In this circumstance, the comparison in next_timer_interrupt overflows,
    because the base of the comparison for high resolution timers is jiffies,
    but for the softirq timer wheel, it is relative the the current base of the
    wheel (jiffies_base).
    
    Signed-off-by: Zachary Amsden <zach@vmware.com>
    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
    Cc: Oleg Nesterov <oleg@tv-sign.ru>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 8b1ea24c6cc529f6860c458b1c0872f22e74c950
Author: Rene Herman <rene.herman@keyaccess.nl>
Date:   Sat May 20 15:00:22 2006 -0700

    [PATCH] missing newline in scsi/st.c
    
    st: Version 20050830, fixed bufsize 32768, s/g segs 256
    st 0:0:6:0: Attached scsi tape st0<4>st0: try direct i/o: yes (alignment 512 B)
    
    Cc: James Bottomley <James.Bottomley@steeleye.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit dc49e3445aa703eb7fd33c7ddb7e4a7bbcf06d30
Author: Satoshi Oshima <soshima@redhat.com>
Date:   Sat May 20 15:00:21 2006 -0700

    [PATCH] kprobes: bad manipulation of 2 byte opcode on x86_64
    
    Problem:
    
    If we put a probe onto a callq instruction and the probe is executed,
    kernel panic of Bad RIP value occurs.
    
    Root cause:
    
    If resume_execution() found 0xff at first byte of p->ainsn.insn, it must
    check the _second_ byte.  But current resume_execution check _first_ byte
    again.
    
    I changed it checks second byte of p->ainsn.insn.
    
    Kprobes on i386 don't have this problem, because the implementation is a
    little bit different from x86_64.
    
    Cc: Andi Kleen <ak@muc.de>
    Signed-off-by: Satoshi Oshima <soshima@redhat.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit be0d03f1c3d3612fe2b6aa451ae87a89382c9231
Author: Vivek Goyal <vgoyal@in.ibm.com>
Date:   Sat May 20 15:00:21 2006 -0700

    [PATCH] i386 kdump boot cpu physical apicid fix
    
    o Kdump second kernel boot fails after a system crash if second kernel
      is UP and acpi=off and if crash occurred on a non-boot cpu.
    
    o Issue here is that MP tables report boot cpu lapic id as 0 but second
      kernel is booting on a different processor and MP table data is stale
      in this context. Hence apic_id_registered() check fails in setup_local_APIC()
      when called from APIC_init_uniprocessor().
    
    o Problem is not seen if ACPI is enabled as in that case
      boot_cpu_physical_apicid is read from the LAPIC.
    
    o Problem is not seen with SMP kernels as well because in this case also
      boot_cpu_physical_apicid is read from LAPIC. (smp_boot_cpus()).
    
    o The problem is fixed by reading boot_cpu_physical_apicid from LAPIC
      if it is a UP kernel and CRASH_DUMP is enabled.
    
    Signed-off-by: Vivek Goyal <vgoyal@in.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 5daa3ba0c6a41a8bb4ba17ad8d5514172e103504
Author: Stephen Street <stephen@streetfiresound.com>
Date:   Sat May 20 15:00:19 2006 -0700

    [PATCH] pxa2xx-spi update
    
    Fix some outstanding issues with the pxa2xx_spi driver when running on a
    PXA270:
    
    - Wrong timeout calculation in the setup function due to different
      peripheral clock rates in the PXAxxx family.
    
    - Bad handling of SSSR_TFS interrupts in interrupt_transfer function.
    
    - Added locking to interface between the pump_messages workqueue and the
      pump_transfers tasklet.
    
    Much thanks to Juergen Beisert for the extensive testing on the PXA270.
    
    Signed-off-by: Stephen Street <stephen@streetfiresound.com>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Cc: Russell King <rmk@arm.linux.org.uk>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 7fba53402eb0fb4209c74469814c583b6455e096
Author: Ben Dooks <ben@trinity.fluff.org>
Date:   Sat May 20 15:00:18 2006 -0700

    [PATCH] S3C24XX: hardware SPI driver
    
    Hardware based SPI driver for Samsung S3C24XX SoC systems
    
    Signed-off-by: Ben Dooks <ben-linux@fluff.org>
    Cc: David Brownell <david-b@pacbell.net>
    Cc: Greg KH <greg@kroah.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 1fc7547d4bfe5c8c8c79e196b955b6fbaa21bfd2
Author: Ben Dooks <ben@trinity.fluff.org>
Date:   Sat May 20 15:00:17 2006 -0700

    [PATCH] S3C24XX: GPIO based SPI driver
    
    SPI driver for SPI by GPIO on the Samsung S3C24XX series of SoC processors.
    
    Signed-off-by: Ben Dooks <ben-linux@fluff.org>
    Cc: Greg KH <greg@kroah.com>
    Cc: David Brownell <david-b@pacbell.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 1b81d6637d27a0e6a0506ecef65493b50d859cfc
Author: Adrian Bunk <bunk@stusta.de>
Date:   Sat May 20 15:00:16 2006 -0700

    [PATCH] drivers/base/firmware_class.c: cleanups
    
    - remove the following global function that is both unused and
      unimplemented:
      - register_firmware()
    
    - make the following needlessly global function static:
      - firmware_class_uevent()
    
    Signed-off-by: Adrian Bunk <bunk@stusta.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ccf06998fe179ae2cc9517ed1d75433dc0b5032d
Author: Kumar Gala <galak@kernel.crashing.org>
Date:   Sat May 20 15:00:15 2006 -0700

    [PATCH] spi: add spi master driver for Freescale MPC83xx SPI controller
    
    This driver supports the SPI controller on the MPC83xx SoC devices from
    Freescale.  Note, this driver supports only the simple shift register SPI
    controller and not the descriptor based CPM or QUICCEngine SPI controller.
    
    Signed-off-by: Kumar Gala <galak@kernel.crashing.org>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Cc: Greg KH <greg@kroah.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ba1a051319dc2bec9f43b7cef11c6e5270107fd6
Author: dmitry pervushin <dpervushin@ru.mvista.com>
Date:   Sat May 20 15:00:14 2006 -0700

    [PATCH] minor SPI doc fix
    
    Because several developers asked me about referenced but missing
    spi_add_master(), I think that this patch should be applied ...  it
    corrects comments so they refer to spi_register_master() instead.
    
    Signed-off-by: dmitry pervushin <dpervushin@ru.mvista.com>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ae0718f8e3fcfa3e4863f63db90d24bbec6b14a2
Author: Theodore Tso <tytso@mit.edu>
Date:   Sat May 20 15:00:13 2006 -0700

    [PATCH] Update ext2/ext3/jbd MAINTAINERS entries
    
    Signed-off-by: "Theodore Ts'o" <tytso@mit.edu>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit c9ee133b914879e02796bccd840f75f185cf1bb7
Author: Alan Cox <alan@lxorguk.ukuu.org.uk>
Date:   Sat May 20 15:00:12 2006 -0700

    [PATCH] Clarify maintainers and include linux-security info
    
    Signed-off-by: Alan Cox <alan@redhat.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit a6a61c5494145c904bead0cceadd94080bd3a784
Author: Eric Sesterhenn <snakebyte@gmx.de>
Date:   Sat May 20 15:00:12 2006 -0700

    [PATCH] Overrun in isdn_tty.c
    
    This fixes coverity bug id #1237.  After the while loop, it is possible for
    i == ISDN_LMSNLEN.  If this happens the terminating '\0' is written after
    the end of the array.
    
    Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
    Cc: Karsten Keil <kkeil@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 92d1dbd27417c54c23aac6a84c285e256f6118b6
Author: Paul Jackson <pj@sgi.com>
Date:   Sat May 20 15:00:11 2006 -0700

    [PATCH] cpuset: might_sleep_if check in cpuset_zones_allowed
    
    It's too easy to incorrectly call cpuset_zone_allowed() in an atomic
    context without __GFP_HARDWALL set, and when done, it is not noticed until
    a tight memory situation forces allocations to be tried outside the current
    cpuset.
    
    Add a 'might_sleep_if()' check, to catch this earlier on, instead of
    waiting for a similar check in the mutex_lock() code, which is only rarely
    invoked.
    
    Signed-off-by: Paul Jackson <pj@sgi.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 36be57ffe39e03aab9fbe857f70c7a6a15bd9e08
Author: Paul Jackson <pj@sgi.com>
Date:   Sat May 20 15:00:10 2006 -0700

    [PATCH] cpuset: update cpuset_zones_allowed comment
    
    Update the kernel/cpuset.c:cpuset_zone_allowed() comment.
    
    The rule for when mm/page_alloc.c should call cpuset_zone_allowed()
    was intended to be:
    
      Don't call cpuset_zone_allowed() if you can't sleep, unless you
      pass in the __GFP_HARDWALL flag set in gfp_flag, which disables
      the code that might scan up ancestor cpusets and sleep.
    
    The explanation of this rule in the comment above cpuset_zone_allowed() was
    stale, as a result of a restructuring of some __alloc_pages() code in
    November 2005.
    
    Rewrite that comment ...
    
    Signed-off-by: Paul Jackson <pj@sgi.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit bdd804f478a0cc74bf7db8e9f9d5fd379d1b31ca
Author: Paul Jackson <pj@sgi.com>
Date:   Sat May 20 15:00:09 2006 -0700

    [PATCH] Cpuset: might sleep checking zones allowed fix
    
    Fix a couple of infrequently encountered 'sleeping function called from
    invalid context' in the cpuset hooks in __alloc_pages.  Could sleep while
    interrupts disabled.
    
    The routine cpuset_zone_allowed() is called by code in mm/page_alloc.c
    __alloc_pages() to determine if a zone is allowed in the current tasks
    cpuset.  This routine can sleep, for certain GFP_KERNEL allocations, if the
    zone is on a memory node not allowed in the current cpuset, but might be
    allowed in a parent cpuset.
    
    But we can't sleep in __alloc_pages() if in interrupt, nor if called for a
    GFP_ATOMIC request (__GFP_WAIT not set in gfp_flags).
    
    The rule was intended to be:
      Don't call cpuset_zone_allowed() if you can't sleep, unless you
      pass in the __GFP_HARDWALL flag set in gfp_flag, which disables
      the code that might scan up ancestor cpusets and sleep.
    
    This rule was being violated in a couple of places, due to a bogus change
    made (by myself, pj) to __alloc_pages() as part of the November 2005 effort
    to cleanup its logic, and also due to a later fix to constrain which swap
    daemons were awoken.
    
    The bogus change can be seen at:
      http://linux.derkeiler.com/Mailing-Lists/Kernel/2005-11/4...
      [PATCH 01/05] mm fix __alloc_pages cpuset ALLOC_* flags
    
    This was first noticed on a tight memory system, in code that was disabling
    interrupts and doing allocation requests with __GFP_WAIT not set, which
    resulted in __might_sleep() writing complaints to the log "Debug: sleeping
    function called ...", when the code in cpuset_zone_allowed() tried to take
    the callback_sem cpuset semaphore.
    
    We haven't seen a system hang on this 'might_sleep' yet, but we are at
    decent risk of seeing it fairly soon, especially since the additional
    cpuset_zone_allowed() check was added, conditioning wakeup_kswapd(), in
    March 2006.
    
    Special thanks to Dave Chinner, for figuring this out, and a tip of the hat
    to Nick Piggin who warned me of this back in Nov 2005, before I was ready
    to listen.
    
    Signed-off-by: Paul Jackson <pj@sgi.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 593ee20766921fec643194dff829e17f30552220
Author: Kristen Accardi <kristen.c.accardi@intel.com>
Date:   Sat May 20 15:00:08 2006 -0700

    [PATCH] pci: correctly allocate return buffers for osc calls
    
    The OSC set and query functions do not allocate enough space for return
    values, and set the output buffer length to a false, too large value.  This
    causes the acpi-ca code to assume that the output buffer is larger than it
    actually is, and overwrite memory when copying acpi return buffers into
    this caller provided buffer.  In some cases this can cause kernel oops if
    the memory that is overwritten is a pointer.  This patch will change these
    calls to use a dynamically allocated output buffer, thus allowing the
    acpi-ca code to decide how much space is needed.
    
    Signed-off-by: Kristen Carlson Accardi <kristen.c.accardi@intel.com>
    Cc: "Brown, Len" <len.brown@intel.com>
    Cc: "Yu, Luming" <luming.yu@intel.com>
    Cc: Greg KH <greg@kroah.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit d66fd908acc8ba88541ecc570d89b0243f947c5e
Author: Amy Griffis <amy.griffis@hp.com>
Date:   Sat May 20 15:00:07 2006 -0700

    [PATCH] fix NULL dereference in inotify_ignore
    
    Don't reassign to watch.  If idr_find() returns NULL, then
    put_inotify_watch() will choke.
    
    Signed-off-by: Amy Griffis <amy.griffis@hp.com>
    Cc: John McCutchan <john@johnmccutchan.com>
    Cc: Robert Love <rlove@rlove.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 66055a4e7334b05354c835123ff621c5f700e56a
Author: Amy Griffis <amy.griffis@hp.com>
Date:   Sat May 20 15:00:06 2006 -0700

    [PATCH] fix race in inotify_release
    
    While doing some inotify stress testing, I hit the following race.  In
    inotify_release(), it's possible for a watch to be removed from the lists
    in between dropping dev->mutex and taking inode->inotify_mutex.  The
    reference we hold prevents the watch from being freed, but not from being
    removed.
    
    Checking the dev's idr mapping will prevent a double list_del of the
    same watch.
    
    Signed-off-by: Amy Griffis <amy.griffis@hp.com>
    Acked-by: John McCutchan <john@johnmccutchan.com>
    Cc: Robert Love <rml@novell.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 12783b002db1f02c29353c8f698a85514420b9f4
Author: Mike Kravetz <kravetz@us.ibm.com>
Date:   Sat May 20 15:00:05 2006 -0700

    [PATCH] SPARSEMEM incorrectly calculates section number
    
    A bad calculation/loop in __section_nr() could result in incorrect section
    information being put into sysfs memory entries.  This primarily impacts
    memory add operations as the sysfs information is used while onlining new
    memory.
    
    Fix suggested by Dave Hansen.
    
    Note that the bug may not be obvious from the patch.  It actually occurs in
    the function's return statement:
    
    	return (root_nr * SECTIONS_PER_ROOT) + (ms - root);
    
    In the existing code, root_nr has already been multiplied by
    SECTIONS_PER_ROOT.
    
    Signed-off-by: Mike Kravetz <kravetz@us.ibm.com>
    Cc: Dave Hansen <haveblue@us.ibm.com>
    Cc: Andy Whitcroft <apw@shadowen.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ad8f5797302ed389476debcc51b4630f387618b9
Author: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>
Date:   Sat May 20 15:00:03 2006 -0700

    [PATCH] build fix: CONFIG_MEMORY_HOTPLUG=y on i386
    
    typo in #ifdefs.  Fixes http://bugme.osdl.org/show_bug.cgi?id=6538
    
    Signed-off-by: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>
    Cc: Andi Kleen <ak@muc.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit d4e9dc63dca91cd89086b5a686d7f7635c8319e5
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Sat May 20 15:00:02 2006 -0700

    [PATCH] selinux: endian fix
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Cc: Stephen Smalley <sds@tycho.nsa.gov>
    Acked-by: James Morris <jmorris@namei.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit df88912a2165f56a7402db80126cf8ea075221fe
Author: Andrew Morton <akpm@osdl.org>
Date:   Sat May 20 15:00:01 2006 -0700

    [PATCH] binfmt_flat: don't check for EMFILE
    
    Bernd Schmidt points out that binfmt_flat is now leaving the exec file open
    while the application runs.  This offsets all the application's fd numbers.
    We should have closed the file within exec(), not at exit()-time.
    
    But there doesn't seem to be a lot of point in doing all this just to avoid
    going over RLIMIT_NOFILE by one fd for a few microseconds.  So take the EMFILE
    checking out again.  This will cause binfmt_flat to again fail LTP's
    exec-should-return-EMFILE-when-fdtable-is-full test.  That test appears to be
    wrong anyway - Open Group specs say nothing about exec() returning EMFILE.
    
    Cc: Bernd Schmidt <bernd.schmidt@analog.com>
    Cc: Greg Ungerer <gerg@uclinux.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 48d705522da4fa04bb0169a7ca3c9ab92e28b613
Author: Micon, David <DMicon@pelco.com>
Date:   Sat May 20 14:59:59 2006 -0700

    [PATCH] HID read busywait fix
    
    Make a read of a HID device block until data is available.  Without it, the
    read goes into a busy-wait loop until data is available.
    
    Cc: Greg KH <greg@kroah.com>
    Acked-by: Vojtech Pavlik <vojtech@suse.cz>
    Cc: Dmitry Torokhov <dtor_core@ameritech.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 9ccfc29c671c9d0a83c2a114d4bc5f85f3cd749d
Author: Florin Malita <fmalita@gmail.com>
Date:   Sat May 20 14:59:58 2006 -0700

    [PATCH] nfsd: sign conversion obscuring errors in nfsd_set_posix_acl()
    
    Assigning the result of posix_acl_to_xattr() to an unsigned data type
    (size/size_t) obscures possible errors.
    
    Coverity CID: 1206.
    
    Signed-off-by: Florin Malita <fmalita@gmail.com>
    Acked-by: NeilBrown <neilb@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 2adc7d47c4dbf684e69ee3980c158ff684dc170e
Author: NeilBrown <neilb@suse.de>
Date:   Sat May 20 14:59:57 2006 -0700

    [PATCH] md: Fix inverted test for 'repair' directive.
    
    We should be able to write 'repair' to /sys/block/mdX/md/sync_action,
    however due to and inverted test, that always given EINVAL.
    
    Signed-off-by: Neil Brown <neilb@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 8c7b389e532e964f07057dac8a56c43465544759
Author: Peter Staubach <staubach@redhat.com>
Date:   Sat May 20 14:59:56 2006 -0700

    [PATCH] NFS server subtree_check returns dubious value
    
    Address a problem found when a Linux NFS server uses the "subtree_check"
    export option.
    
    The "subtree_check" NFS export option was designed to prohibit a client
    from using a file handle for which it should not have permission.  The
    algorithm used is to ensure that the entire path to the file being
    referenced is accessible to the user attempting to use the file handle.  If
    some part of the path is not accessible, then the operation is aborted and
    the appropriate version of ESTALE is returned to the NFS client.
    
    The error, ESTALE, is unfortunate in that it causes NFS clients to make
    certain assumptions about the continued existence of the file.  They assume
    that the file no longer exists and refuse to attempt to access it again.
    In this case, the file really does exist, but access was denied by the
    server for a particular user.
    
    A better error to return would be an EACCES sort of error.  This would
    inform the client that the particular operation that it was attempting was
    not allowed, without the nasty side effects of the ESTALE error.
    
    Signed-off-by: Peter Staubach <staubach@redhat.com>
    Acked-By: NeilBrown <neilb@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ea6c20891eb25e4884b852c040136f44cb173f3e
Author: Vivek Goyal <vgoyal@in.ibm.com>
Date:   Sat May 20 14:59:55 2006 -0700

    [PATCH] Kdump maintainer info update
    
    Update MAINTAINERS file for info regarding kdump maintainership.
    
    Signed-off-by: Vivek Goyal <vgoyal@in.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 22192ccd6d1dfea2a41e40442997ccad5b7b160e
Author: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Date:   Sat May 20 14:59:53 2006 -0700

    [PATCH] powerpc: Fix ide-pmac sysfs entry
    
    It looks like the generic ide code now wants ide_init_hwif_ports() to set
    the parent struct device into the ide_hw structure (new field ?).  Without
    this, the mac ide code can cause the ide probing code to explode in flames
    in sysfs registration due to what looks like a stale pointer in there
    (happens when removing/re-inserting one of the hotswap media bays on some
    laptops).
    
    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Cc: Bartlomiej Zolnierkiewicz <B.Zolnierkiewicz@elka.pw.edu.pl>
    Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit c44b20d51142acdc9c66108b758c0454a7e2ce11
Author: Chuck Ebbert <76306.1226@compuserve.com>
Date:   Sat May 20 14:59:52 2006 -0700

    [PATCH] i386: remove junk from stack dump
    
    i386 stack dump has a "<0>" in the middle of the line and an extra space
    between columns in multicolumn mode.  Remove those and also remove an extra
    blank line of source code.
    
    Signed-off-by: Chuck Ebbert <76306.1226@compuserve.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 6d39bedc47fbf18a940f5843981767c221d22cfe
Author: Paul A. Clarke <pc@us.ibm.com>
Date:   Sat May 20 14:59:51 2006 -0700

    [PATCH] matroxfb: fix DVI setup to be more compatible
    
    There has been a longstanding problem with the Matrox G450 and perhaps
    other similar cards, with modes "above" 1280x1024-60 on ppc/ppc64 boxes
    running Linux.  Higher resolutions and/or higher refresh rates resulted in
    a very noticably "jittery" display, and sometimes no display, depending on
    the physical monitor.  This patch fixes that problem on the systems I have
    easy access to...
    
    I've tested with SLES9SP3 (2.6.5+ kernel) and 2.6.16-rc6 custom kernels on
    an IBM eServer p5 520 w/G450 (a.k.a GXT135P on IBM's ppc64 systems), and a
    colleague of mine (Ian Romanick) tested it successfully on an Apple ppc32
    box (w/GXT135P).  I also tested it on IA32 box I have with a GXT135P to
    verify that it didn't obviously break anything.  In my testing, I covered
    single-card, single and dual-head setups using both HD15 and DVI-D signals,
    on both the IA32 and ppc64 boxes.  While everything appeared fine on both
    boxes, I did encounter one problem: I can't get any signal on the DVI-D
    output on the ppc64 box.  However, this is also the case without my patch.
    
    I just noticed that screen-blanking only occurs on the primary display as
    well.
    
    Signed-off-by: Paul A. Clarke <pc@us.ibm.com>
    Signed-off-by: Ian Romanick <idr@us.ibm.com>
    Signed-off-by: Petr Vandrovec <petr@vandrovec.name>
    Cc: "Antonino A. Daplas" <adaplas@pol.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit d64b1c878fc1e384ae53d1d40034239bc33848f4
Author: Lin Feng Shen <shenlinf@cn.ibm.com>
Date:   Sat May 20 14:59:49 2006 -0700

    [PATCH] NFS: fix error handling on access_ok in compat_sys_nfsservctl
    
    Functions compat_nfs_svc_trans, compat_nfs_clnt_trans,
    compat_nfs_exp_trans, compat_nfs_getfd_trans and compat_nfs_getfs_trans,
    which are called by compat_sys_nfsservctl(fs/compat.c), don't handle the
    return value of access_ok properly.  access_ok return 1 when the addr is
    valid, and 0 when it's not, but these functions have the reversed
    understanding.  When the address is valid, they always return -EFAULT to
    compat_sys_nfsservctl.
    
    An example is to run /usr/sbin/rpc.nfsd(32bit program on Power5).  It
    doesn't function as expected.  strace showes that nfsservctl returns
    -EFAULT.
    
    The patch fixes this by correcting the error handling on the return value
    of access_ok in the five functions.
    
    Signed-off-by: Lin Feng Shen <shenlinf@cn.ibm.com>
    Cc: Trond Myklebust <trond.myklebust@fys.uio.no>
    Acked-by: Neil Brown <neilb@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 84b3932bf0fd8cdc8c75a5be77e1dded1e6479c6
Author: Ayaz Abdulla <aabdulla@nvidia.com>
Date:   Sat May 20 14:59:48 2006 -0700

    [PATCH] forcedeth: fix multi irq issues
    
    With Manfred Spraul <manfred@colorfullife.com> and
         Andrew Morton <akpm@osdl.org>
    
    Bring back this recently-reverted patch, only fixed.
    
    Original changelog:
    
        From: Ayaz Abdulla <aabdulla@nvidia.com>
    
        This patch fixes the issues with multiple irqs.
    
        I am resending based on feedback. I decoupled the dma mask for
        consistent memory and fixed leak with multiple irq in error path.
    
        Thanks to Manfred for catching the spin lock problem.
    
    Fix it:
    
        From: Manfred Spraul <manfred@colorfullife.com>
    
        Fix bug introduced by ebf34c9b6fcd22338ef764b039b3ac55ed0e297b, covered in
        http://bugzilla.kernel.org/show_bug.cgi?id=6568.
    
        Remove second instance of the request_irq() calls: they were moved
        from nv_open into nv_request_irq.
    
        Thanks to Alistair Strachan <alistair@devzero.co.uk> for reporting and
        persisting.
    
    Signed-off-by: Ayaz Abdulla <aabdulla@nvidia.com>
    Signed-off-by: Manfred Spraul <manfred@colorfullife.com>
    Cc: Jeff Garzik <jeff@garzik.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit e2a7f77a7b4ab298a38c8d1f624628456069bdb0
Author: Randy Dunlap <rdunlap@xenotime.net>
Date:   Thu May 18 10:50:18 2006 -0700

    [PATCH] libata-core: fix current kernel-doc warnings
    
    Fix all current kernel-doc warnings.
    
    Signed-off-by: Randy Dunlap <rdunlap@xenotime.net>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 63a25355cd5cd9a2d19a7c50eed4f0a8aa622f72
Author: Mark Lord <liml@rtr.ca>
Date:   Fri May 19 16:41:27 2006 -0400

    [PATCH] sata_mv: version bump
    
    Increment the version number inside sata_mv.c.
    
    Signed-off-by: Mark Lord <liml@rtr.ca>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 559eedad7f7764dacca33980127b4615011230e4
Author: Mark Lord <liml@rtr.ca>
Date:   Fri May 19 16:40:15 2006 -0400

    [PATCH] sata_mv: endian fix
    
    This fixes a byte-swap issue on PPC, found by Zang Roy-r61911
    on the powerpc platform.  His original patch also had some other
    platform-specific changes in #ifdef's, but I'm not sure yet how to
    incorporate them.  Look for another patch for those (soon).
    
    Signed-off-by: Mark Lord <liml@rtr.ca>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit a6432436c5e14b416f27c8f87c5bf0bc36771f49
Author: Mark Lord <liml@rtr.ca>
Date:   Fri May 19 16:36:36 2006 -0400

    [PATCH] sata_mv: remove local copy of queue indexes
    
    The driver currently keeps local copies of the hardware request/response queue indexes.
    But it expends significant effort ensuring consistency between the two views,
    and still gets it wrong after an error or reset occurs.
    
    This patch removes the local copies, in favour of just accessing the hardware
    whenever we need them.  Eventually this may need to be tweaked again for NCQ,
    but for now this works and solves problems some users were seeing.
    
    Signed-off-by: Mark Lord <liml@rtr.ca>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit e857f141945f29c16f72ffcfdbce097f8be6c4e9
Author: Mark Lord <liml@rtr.ca>
Date:   Fri May 19 16:33:03 2006 -0400

    [PATCH] sata_mv: spurious interrupt workaround
    
    The 60xx chips, and possibly others, incorrectly assert DEV_IRQ interrupts
    on a regular basis.  The cause of this is under investigation (by me and
    in theory by Marvell also), but regardless we do need to deal with these events.
    
    This patch tidies up some interrupt handler code, and ensures that we ignore
    DEV_IRQ interrupts when the drive still  has ATA_BUSY asserted.
    
    Signed-off-by: Mark Lord <liml@rtr.ca>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit eb46d684600ac145501805a294c94675e82eab2e
Author: Mark Lord <liml@rtr.ca>
Date:   Fri May 19 16:29:21 2006 -0400

    [PATCH] sata_mv: chip initialization fixes
    
    The interface control register of the 60xx (and later) Marvell chip
    requires certain bits to always be set when writing to it.  These bits
    incorrectly read-back as zeros, so the pattern must be ORed in
    with each write of the register.  Also, bit 12 should NOT be set
    (note that Marvell's own driver also had bit-12 wrong here).
    
    While we're at it, we also now do pci_set_master() in the init code.
    
    Signed-off-by: Mark Lord <liml@rtr.ca>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 615ab95342f6245026d8974b9724f7ea57d9a184
Author: Mark Lord <liml@rtr.ca>
Date:   Fri May 19 16:24:56 2006 -0400

    [PATCH] sata_mv: deal with interrupt coalescing interrupts
    
    In some systems, it is possible that the BIOS may have enabled interrupt coalescing
    for the Marvell controllers which support it.  This patch adds code to detect/ack
    interrupts from the chip's coalescing (combing) logic.
    
    Signed-off-by: Mark Lord <liml@rtr.ca>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 9b358e305c1d783c8a4ebf00344e95deb9e38f3d
Author: Mark Lord <liml@rtr.ca>
Date:   Fri May 19 16:21:03 2006 -0400

    [PATCH] sata_mv: prevent unnecessary double-resets
    
    The mv_err_intr() function is invoked from the driver's interrupt handler,
    as well as from the timeout function.  This patch prevents it from triggering
    a one-after-the-other double reset of the controller when invoked
    from the timeout function.
    
    This also adds a check for a timeout race condition that has been observed
    to occur with this driver in earlier kernels.  This should not be needed,
    in theory, but in practice it has caught bugs.  Maybe nuke it at a later date.
    
    Signed-off-by: Mark Lord <liml@rtr.ca>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit bb02aacc02c6002143a1cfc313d144a413eec8d0
Author: Erling A. Jacobsen <linuxcub@email.dk>
Date:   Sun Apr 30 21:46:56 2006 +0200

    [PATCH] winbond-840-remove-badness-in-pci_map_single
    
    Call pci_map_single() with the actual size of the receive
    buffers, not 0 (which skb->len is initialized to by dev_alloc_skb()).
    
    Signed-off-by: Erling A. Jacobsen <linuxcub@email.dk>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit f905703a93b7014a0fd95d0edac2b734bf0d1522
Author: Komuro <komurojun-mbn@nifty.com>
Date:   Sun Apr 30 09:54:13 2006 +0900

    [PATCH] network: axnet_cs: bug fix multicast code (support older ax88190 chipset)
    
    Dear Jeff
    
    axnet_cs: bug fix multicast code (support older ax88190 chipset)
    
    Signed-off-by: komurojun-mbn@nifty.com
    
    Best Regards
    Komuro
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit a06631cbdc09fe33892f08238be498eaa84892ee
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Mon May 15 16:32:39 2006 -0700

    [PATCH] skge: don't allow transmit ring to be too small
    
    The driver will get stuck (permanent transmit timeout), if the transmit
    ring size is set too small.  It needs to have enough ring elements to
    hold one maximum size transmit.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 20e777a2a7dc9fad3d0b016c662c2fb60e6b20e7
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Mon May 15 16:30:25 2006 -0700

    [PATCH] skge: bad checksums on big-endian platforms
    
    Skge driver always causes  bad checksums on big-endian.
    The checksum in the receive control block was being swapped
    when it doesn't need to be.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit c9b84dcac6e20ec8e5424f3dff853daa863bfdd0
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Wed May 17 14:37:07 2006 -0700

    [PATCH] sky2 version 1.4
    
    Need to track impact of this group of changes.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 86fba6342dee30a1533b14da284d79e4eb66de26
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Wed May 17 14:37:06 2006 -0700

    [PATCH] sky2: force NAPI repoll if busy
    
    If the status ring processing can't keep up with the incoming frames,
    it is more efficient to have NAPI keep scheduling the poll routine
    rather than causing another interrupt.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 86a31a759f2117816b8c78a049c41ead3ef9ef1c
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Wed May 17 14:37:05 2006 -0700

    [PATCH] sky2: more fixes for Yukon Ultra
    
    Logic error in the phy initialization code. Also, turn on wake on lan
    bit in status control.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 2d2a387199bf38c6628adb9c6184d7ab6e306148
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Wed May 17 14:37:04 2006 -0700

    [PATCH] Subjec: sky2, skge: correct PCI id for DGE-560T
    
    The Dlink DGE-560T uses Yukon2 chipset so it needs sky2 driver; and
    the DGE-530T uses Yukon1 so it uses skge driver.
    
    Bug: http://bugzilla.kernel.org/show_bug.cgi?id=6544
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit ee7abb04df92b444069be8fe47d66d809de23782
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Thu May 18 11:16:21 2006 -0700

    [PATCH] sky2: allow dual port usage
    
    If both ports are receiving on the SysKonnect dual port cards,
    then it appears the bus interface unit can give an interrupt status
    for frame before DMA has completed.  This leads to bogus frames
    and general confusion. This is why receive checksumming is also
    messed up on dual port cards.
    
    A workaround for the out of order receive problem is to eliminating
    split transactions on PCI-X.
    
    This version is based of the current linux-2.6.git including earlier
    patch to disable dual ports.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit 38bb6b288bf4fb954a3793e57c7339774c842a54
Author: John W. Linville <linville@tuxdriver.com>
Date:   Fri May 19 10:51:21 2006 -0400

    [PATCH] via-rhine: revert "change mdelay to msleep and remove from ISR path"
    
    Revert previous patch with subject "change mdelay to msleep and remove
    from ISR path".  This patch seems to have caused bigger problems than
    it solved, and it didn't solve much of a problem to begin with...
    
    Discussion about backing-out this patch can be found here:
    
    	http://marc.theaimsgroup.com/?l=linux-netdev&m=114321...
    
    The git commit associated w/ the original patch is:
    
    	6ba98d311d0a4ff7dc36d8f435ce60174f4c30ec
    
    Signed-off-by: John W. Linville <linville@tuxdriver.com
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit f34ba4e1edd82272dbc192e488c7dc9e56c4ec62
Author: Andrew Morton <akpm@osdl.org>
Date:   Fri May 19 02:13:21 2006 -0700

    [PATCH] revert "forcedeth: fix multi irq issues"
    
    Revert ebf34c9b6fcd22338ef764b039b3ac55ed0e297b.  Maybe.  Due to crashes
    at shutdown - see http://bugzilla.kernel.org/show_bug.cgi?id=6568.
    
    Cc: Ayaz Abdulla <aabdulla@nvidia.com>
    Cc: Manfred Spraul <manfred@colorfullife.com>
    Cc: Jeff Garzik <jeff@garzik.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Jeff Garzik <jeff@garzik.org>

commit b89498a1c2941c00889dd025f52dcb653a5083bc
Author: Vladislav Yasevich <vladislav.yasevich@hp.com>
Date:   Fri May 19 14:32:06 2006 -0700

    [SCTP]: Allow linger to abort 1-N style sockets.
    
    Enable SO_LINGER functionality for 1-N style sockets. The socket API
    draft will be clarfied to allow for this functionality. The linger
    settings will apply to all associations on a given socket.
    
    Signed-off-by: Vladislav Yasevich <vladislav.yasevich@hp.com>
    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

commit a601266e4f3c479790f373c2e3122a766d123652
Author: Vladislav Yasevich <vladislav.yasevich@hp.com>
Date:   Fri May 19 14:25:53 2006 -0700

    [SCTP]: Validate the parameter length in HB-ACK chunk.
    
    If SCTP receives a badly formatted HB-ACK chunk, it is possible
    that we may access invalid memory and potentially have a buffer
    overflow.  We should really make sure that the chunk format is
    what we expect, before attempting to touch the data.
    
    Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

commit c2a4c40651e08e465d3a6130bd9f6dcc1ce21d83
Author: Catalin Marinas <catalin.marinas@arm.com>
Date:   Fri May 19 21:55:35 2006 +0100

    [ARM] 3533/1: Implement the __raw_(read|write)_can_lock functions on ARM
    
    Patch from Catalin Marinas
    
    Recent patches introduced the write_can_lock() call in the kernel/ptrace.c
    file. Implement the __raw_* variants on ARM (SMP) as well.
    
    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 2c171bf13423dc5293188cea7f6c2da1720926e2
Author: Pavel Pisa <ppisa@pikron.com>
Date:   Fri May 19 21:48:03 2006 +0100

    [ARM] 3531/1: i.MX/MX1 SD/MMC ensure, that clock are stopped before new command and cleanups
    
    Patch from Pavel Pisa
    
    There has been problems that for some paths that clock are not stopped
    during new command programming and initiation. Result is issuing
    of incorrect command to the card. Some other problems are cleaned too.
    Noisy report of known ERRATUM #4 has been suppressed.
    
    Signed-off-by: Pavel Pisa <pisa@cmp.felk.cvut.cz>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit dd2d1c6f2958d027e4591ca5d2a04dfe36ca6512
Author: Vladislav Yasevich <vladislav.yasevich@hp.com>
Date:   Fri May 19 11:52:20 2006 -0700

    [SCTP]: Respect the real chunk length when walking parameters.
    
    When performing bound checks during the parameter processing, we
    want to use the real chunk and paramter lengths for bounds instead
    of the rounded ones.  This prevents us from potentially walking of
    the end if the chunk length was miscalculated.  We still use rounded
    lengths when advancing the pointer. This was found during a
    conformance test that changed the chunk length without modifying
    parameters.
    
    Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

commit 61c9fed41638249f8b6ca5345064eb1beb50179f
Author: Vladislav Yasevich <vladislav.yasevich@hp.com>
Date:   Fri May 19 11:01:18 2006 -0700

    [SCTP]: A better solution to fix the race between sctp_peeloff() and
    sctp_rcv().
    
    The goal is to hold the ref on the association/endpoint throughout the
    state-machine process.  We accomplish like this:
    
      /* ref on the assoc/ep is taken during lookup */
    
      if owned_by_user(sk)
     	sctp_add_backlog(skb, sk);
      else
     	inqueue_push(skb, sk);
    
      /* drop the ref on the assoc/ep */
    
    However, in sctp_add_backlog() we take the ref on assoc/ep and hold it
    while the skb is on the backlog queue.  This allows us to get rid of the
    sock_hold/sock_put in the lookup routines.
    
    Now sctp_backlog_rcv() needs to account for potential association move.
    In the unlikely event that association moved, we need to retest if the
    new socket is locked by user.  If we don't this, we may have two packets
    racing up the stack toward the same socket and we can't deal with it.
    If the new socket is still locked, we'll just add the skb to its backlog
    continuing to hold the ref on the association.  This get's rid of the
    need to move packets from one backlog to another and it also safe in
    case new packets arrive on the same backlog queue.
    
    The last step, is to lock the new socket when we are moving the
    association to it.  This is needed in case any new packets arrive on
    the association when it moved.  We want these to go to the backlog since
    we would like to avoid the race between this new packet and a packet
    that may be sitting on the backlog queue of the old socket toward the
    same association.
    
    Signed-off-by: Vladislav Yasevich <vladislav.yasevich@hp.com>
    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

commit 8de8c8738086501bbe3057ed6f4b70dded657488
Author: Sridhar Samudrala <sri@us.ibm.com>
Date:   Fri May 19 10:58:12 2006 -0700

    [SCTP]: Set sk_err so that poll wakes up after a non-blocking connect failure.
    
    Also fix some other cases where sk_err is not set for 1-1 style sockets.
    
    Signed-off-by: Sridhar Samudrala <sri@us.ibm.com>

commit ee433530d96a7b0af24ab616e5b51f1d89f9ae38
Author: Patrick McHardy <kaber@trash.net>
Date:   Fri May 19 02:17:18 2006 -0700

    [NETFILTER]: nfnetlink_log: fix byteorder confusion
    
    flags is a u16, so use htons instead of htonl. Also avoid double
    conversion.
    
    Noticed by Alexey Dobriyan <adobriyan@gmail.com>
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 2c8ac66bb2ff89e759f0d632a27cc64205e9ddd9
Author: Solar Designer <solar@openwall.com>
Date:   Fri May 19 02:16:52 2006 -0700

    [NETFILTER]: Fix do_add_counters race, possible oops or info leak (CVE-2006-0039)
    
    Solar Designer found a race condition in do_add_counters(). The beginning
    of paddc is supposed to be the same as tmp which was sanity-checked
    above, but it might not be the same in reality. In case the integer
    overflow and/or the race condition are triggered, paddc->num_counters
    might not match the allocation size for paddc. If the check below
    (t->private->number != paddc->num_counters) nevertheless passes (perhaps
    this requires the race condition to be triggered), IPT_ENTRY_ITERATE()
    would read kernel memory beyond the allocation size, potentially causing
    an oops or leaking sensitive data (e.g., passwords from host system or
    from another VPS) via counter increments. This requires CAP_NET_ADMIN.
    
    Signed-off-by: Solar Designer <solar@openwall.com>
    Signed-off-by: Kirill Korotaev <dev@openvz.org>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit a467704dcb4fa45da48079486f1b0e6baffb12d2
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Fri May 19 02:16:29 2006 -0700

    [NETFILTER]: GRE conntrack: fix htons/htonl confusion
    
    GRE keys are 16 bit.
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 5c170a09d9092e63af1658179f29867d32d56b55
Author: Philip Craig <philipc@snapgear.com>
Date:   Fri May 19 02:15:47 2006 -0700

    [NETFILTER]: fix format specifier for netfilter log targets
    
    The prefix argument for nf_log_packet is a format specifier,
    so don't pass the user defined string directly to it.
    
    Signed-off-by: Philip Craig <philipc@snapgear.com>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 493e2428aa1db0e592736ad15885c6ed1e81b8af
Author: Jesper Juhl <jesper.juhl@gmail.com>
Date:   Fri May 19 02:15:13 2006 -0700

    [NETFILTER]: Fix memory leak in ipt_recent
    
    The Coverity checker spotted that we may leak 'hold' in
    net/ipv4/netfilter/ipt_recent.c::checkentry() when the following
    is true:
      if (!curr_table->status_proc) {
        ...
        if(!curr_table) {
        ...
          return 0;  <-- here we leak.
    Simply moving an existing vfree(hold); up a bit avoids the possible leak.
    
    Signed-off-by: Jesper Juhl <jesper.juhl@gmail.com>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 23f3bc0f2c1e26215b671499c07047c325d54d9c
Author: Michael S. Tsirkin <mst@mellanox.co.il>
Date:   Thu May 18 18:32:54 2006 +0300

    IB/mthca: Fix posting lists of 256 receive requests for Tavor
    
    If we post a list of length 256 exactly, nreq in doorbell gets set to
    256 which is wrong: it should be encoded by 0.  This is because we
    only zero it out on the next WR, which may not be there.  The solution
    is to ring the doorbell after posting a WQE, not before posting the
    next one.
    
    Signed-off-by: Michael S. Tsirkin <mst@mellanox.co.il>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 0cb4fe8d2658dc0bd1accfbb74ee288a9d6788f4
Author: Roland Dreier <rolandd@cisco.com>
Date:   Wed May 17 22:20:50 2006 -0700

    IB/uverbs: Don't leak ref to mm on error path
    
    In ib_umem_release_on_close(), if the kmalloc() fails, then a
    reference to current->mm will be leaked.  Fix this by adding a mmput()
    instead of just returning on kmalloc() failure.
    
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit a54c9d30dbb06391ec4422aaf0e1dc2c8c53bd3e
Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
Date:   Mon May 15 22:09:46 2006 +0200

    [PATCH] ohci1394, sbp2: fix "scsi_add_device failed" with PL-3507 based devices
    
    Re-enable posted writes for status FIFO.
    
    Besides bringing back a very minor bandwidth tweak from Linux 2.6.15.x
    and older, this also fixes an interoperability regression since 2.6.16:
    
       http://bugzilla.kernel.org/show_bug.cgi?id=6356
       (sbp2: scsi_add_device failed. IEEE1394 HD is not working anymore.)
    
    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
    Tested-by: Vanei Heidemann <linux@javanei.com.br>
    Tested-by: Martin Putzlocher <mputzi@gmx.de> (chip type unconfirmed)
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 679c0cd2dd61c825ab910fdbf347a8b7d1dddec4
Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
Date:   Mon May 15 22:08:09 2006 +0200

    [PATCH] sbp2: add ability to override hardwired blacklist
    
    In case the blacklist with workarounds for device bugs yields a false
    positive, the module load parameter can now also be used as an override
    instead of an addition to the blacklist.
    
    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit e9a1c52c7b19d10342226c12f170d7ab644427e2
Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
Date:   Mon May 15 22:06:37 2006 +0200

    [PATCH] sbp2: add read_capacity workaround for iPod
    
    Apple decided to copy some USB stupidity over to FireWire.
    
    The sector number returned by iPods from read_capacity is one too many.
    This may cause I/O errors, especially if the kernel is configured for EFI
    partition support. We use the same workaround as usb-storage but have to
    check for different model IDs.
    
    	http://marc.theaimsgroup.com/?t=114233262300001
    	https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=187409
    
    Acknowledgements:
      Diagnosis and therapy by Mathieu Chouquet-Stringer <ml2news@free.fr>,
      additional data about affected and unaffected Apple hardware from
      Vladimir Kotal, Sander De Graaf, Bryan Olmstead and Hugh Dixon.
    
    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 24d3bf884e093f9de52d31c97187f4b9b4ad7dcb
Author: Stefan Richter <stefanr@s5r6.in-berlin.de>
Date:   Mon May 15 22:04:59 2006 +0200

    [PATCH] sbp2: consolidate workarounds
    
    Grand unification of the three types of workarounds we have so far.
    
    The "skip mode page 8" workaround is now limited to devices which
    pretend to be of TYPE_DISK instead of TYPE_RBC. This workaround is no
    longer enabled for Initio bridges.
    
    Patch update in anticipation of more workarounds:
     - Add module parameter "workarounds".
     - Deprecate parameter "force_inquiry_hack".
     - Compose the blacklist of a compound type for better readability and
       extensibility.
     - Remove a now unused #define.
    
    Signed-off-by: Stefan Richter <stefanr@s5r6.in-berlin.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit cef0893dcf1fdf22943aa49e75ee1eb3bfffe5f5
Author: Joel Becker <joel.becker@oracle.com>
Date:   Wed May 3 11:38:53 2006 -0700

    configfs: Make sure configfs_init() is called before consumers.
    
    configfs_init() needs to be called first to register configfs before anyconsumers try to access
it.  Move up configfs in fs/Makefile to make
    sure it is initialized early.
    
    Signed-off-by: Joel Becker <joel.becker@oracle.com>
    Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>

commit eed7a0db460595b139428d252798a83f1e1ce1d3
Author: Joel Becker <joel.becker@oracle.com>
Date:   Tue Apr 11 21:37:20 2006 -0700

    configfs: configfs_mkdir() failed to cleanup linkage.
    
    If configfs_mkdir() errored in certain ways after the parent<->child
    linkage was already created, it would not undo the linkage.  Also,
    comment the reference counting for clarity.
    
    Signed-off-by: Joel Becker <joel.becker@oracle.com>
    Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>

commit 84efad1a53dd05969094f9a2562b4e6666571c00
Author: Joel Becker <joel.becker@oracle.com>
Date:   Mon Mar 27 18:46:09 2006 -0800

    configfs: Fix a reference leak in configfs_mkdir().
    
    configfs_mkdir() failed to release the working parent reference in most
    exit paths.  Also changed the exit path for readability.
    
    Signed-off-by: Joel Becker <joel.becker@oracle.com>
    Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>

commit afae00ab45ea71d89086f924ebee6ca51c81e48e
Author: Sunil Mushran <sunil.mushran@oracle.com>
Date:   Wed Apr 12 14:37:00 2006 -0700

    ocfs2: fix gfp mask in some file system paths
    
    We were using GFP_KERNEL in a handful of places which really wanted
    GFP_NOFS. Fix this.
    
    Signed-off-by: Sunil Mushran <sunil.mushran@oracle.com>
    Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>

commit dd4a2c2bfe159cc39e9672e875c8314563699764
Author: Mark Fasheh <mark.fasheh@oracle.com>
Date:   Wed Apr 12 14:24:05 2006 -0700

    ocfs2: Don't populate uptodate cache in ocfs2_force_read_journal()
    
    This greatly reduces the amount of memory useded during recovery.
    
    Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>

commit c4374f8a6093fbee42ac4368b3ca180d1d0c7c6d
Author: Mark Fasheh <mark.fasheh@oracle.com>
Date:   Fri May 5 19:04:35 2006 -0700

    ocfs2: take meta data lock in ocfs2_file_aio_read()
    
    Temporarily take the meta data lock in ocfs2_file_aio_read() to allow us to
    update our inode fields.
    
    Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>

commit 53013cba4118a5cfe8f7c7ea5e5bc1c48b160f76
Author: Mark Fasheh <mark.fasheh@oracle.com>
Date:   Fri May 5 19:04:03 2006 -0700

    ocfs2: take data locks around extend
    
    We need to take a data lock around extends to protect the pages that
    ocfs2_zero_extend is going to be pulling into the page cache. Otherwise an
    extend on one node might populate the page cache with data pages that have
    no lock coverage.
    
    Signed-off-by: Mark Fasheh <mark.fasheh@oracle.com>

commit ec64152fee25e2a63f06d40d32c7b4cb62eab9a3
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Wed May 17 20:14:29 2006 +0100

    [ARM] 3530/1: PXA Mainstone: prevent double enable_irq() in pcmcia
    
    Patch from Thomas Gleixner
    
    The mainstone board pcmcia interrupt have been enabled via setup_irq()
    and the following socket check calls enable_irq again. Set the NOAUTOEN flag so the interrupt
is not automatically enabled in setup_irq()
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Acked-by: Nicolas Pitre <nico@cam.org>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit bc519f30eb039f023c15167663d5a8a14fed7dcb
Author: David Woodhouse <dwmw2@infradead.org>
Date:   Fri May 5 17:38:27 2006 +0100

    [PATCH] bcm43xx: associate on 'ifconfig up'
    
    I still need this hack to work around the fact that softmac doesn't
    attempt to associate when we bring the device up...
    
    Signed-off-by: David Woodhouse <dwmw2@infradead.org>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 093beac189e4295d968f0d38787b46f76cb0eaaa
Author: Ishai Rabinovitz <ishai@mellanox.co.il>
Date:   Wed May 17 09:20:48 2006 -0700

    IB/srp: Complete correct SCSI commands on device reset
    
    When flushing out queued commands after a successful device reset,
    make sure that SRP completes the right commands, instead of calling
    scsi_done on the command passed into the device reset handler over and
    over.
    
    Signed-off-by: Ishai Rabinovitz <ishai@mellanox.co.il>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit ec2d7208494fe599a5ff13b40a0a20c9881f2737
Author: Roland Dreier <rolandd@cisco.com>
Date:   Wed May 17 09:16:03 2006 -0700

    IB/srp: Get rid of extra scsi_host_put()s if reconnection fails
    
    If a reconnection attempt fails, then SRP does two scsi_host_put()s.
    This is a historical relic from an earlier version of the driver that
    took a reference on the scsi_host before trying to reconnect, so get
    rid of the extra scsi_host_put().
    
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit e65810566f3e613d9baa5512b8724ebde42ace0f
Author: Roland Dreier <rolandd@cisco.com>
Date:   Wed May 17 09:13:21 2006 -0700

    IB/srp: Don't wait for disconnection if sending DREQ fails
    
    Sending a DREQ may fail, for example because the remote target has
    already broken the connection.  If so, then SRP should not wait for
    the disconnection to complete, because it never will.
    
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit c3fb04162a1c8ddcf6caa6e19020da3f0fd23103
Author: Dimitry Andric <dimitry@andric.com>
Date:   Wed May 17 16:31:11 2006 +0100

    [ARM] 3529/1: s3c24xx: fix restoring control register with undefined instruction
    
    Patch from Dimitry Andric
    
    In arch/arm/mach-s3c2410/sleep.S, the coprocessor registers are saved at
    suspend time, and restored at resume time. However, an undefined
    instruction is used when attempting to restore a non-existent "auxiliary
    control register".  This leads to a crash on S3C2412, which has an ARM926
    core instead of an ARM920.
    
    At suspend time, the following fragment runs:
    
    	mrc	p15, 0, r7, c2, c0, 0	@ translation table base address
    	mrc	p15, 0, r8, c2, c0, 0	@ auxiliary control register
    	mrc	p15, 0, r9, c1, c0, 0	@ control register
    
    and at resume time, the following fragment runs:
    
    	mcr	p15, 0, r7, c2, c0, 0		@ translation table base
    	mcr	p15, 0, r8, c1, c1, 0		@ auxilliary control
    	...
    	mcr	p15, 0, r9, c1, c0, 0		@ turn on MMU, etc
    
    There are several problems with these fragments:
    1. The ARM920 and ARM926 cores don't have any "auxiliary control
       register", at least not according to the ARM920 and ARM926 TRM's.
    2. The 2nd line of suspend erroneously saves the c2 register again.
    3. This saved c2 value is restored using an undefined instruction.  For
       some reason this does not crash on ARM920, but does crash on ARM926.
    
    The following patch fixes all these problems.
    
    Signed-off-by: Dimitry Andric <dimitry@andric.com>
    Yes, this looks sensible
    
    Signed-off-by: Ben Dooks <ben-linux@fluff.org>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 1db76c14d215c8b26024dd532de3dcaf66ea30f7
Author: Roland Dreier <rolandd@cisco.com>
Date:   Wed May 17 07:48:07 2006 -0700

    IB/mthca: Make fw_cmd_doorbell default to 0
    
    Setting fw_cmd_doorbell allows FW command to be queued using posted
    writes instead of requiring polling on a "go" bit, so it should be a
    performance boost.  However, the option causes problems with at least
    some device/firmware combinations, so set the default to 0 until we
    understand what's going on better.
    
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 4c31ce8fea9760961a2d1b1d6c84b7590c17ae38
Author: Chen, Kenneth W <kenneth.w.chen@intel.com>
Date:   Tue May 16 16:34:57 2006 -0700

    [IA64] one-line cleanup on set_irq_affinity_info
    
    Calls to set_irq_info in set_irq_affinity_info() is redundant because
    irq_affinity mask was set just one line immediately above it.  Remove
    that duplicate call.
    
    Signed-off-by: Ken Chen <kenneth.w.chen@intel.com>
    Signed-off-by: Tony Luck <tony.luck@intel.com>

commit 41503def5d83bada6a2fd792e636ccc28a285f38
Author: Chen, Kenneth W <kenneth.w.chen@intel.com>
Date:   Tue May 16 16:29:00 2006 -0700

    [IA64] fix broken irq affinity
    
    When CONFIG_PCI_MSI is set, move_irq() is an empty function, causing
    grief when sys admin tries to bind interrupt to CPU.
    
    Signed-off-by: Ken Chen <kenneth.w.chen@intel.com>
    Signed-off-by: Tony Luck <tony.luck@intel.com>

commit 1101ece44e00cfe31a2fd9d3222d05f927b00ef8
Author: Jes Sorensen <jes@sgi.com>
Date:   Mon May 15 05:07:54 2006 -0400

    [IA64] sn2 defconfig
    
    Set node shift to 10 on SN2 and disable mutex debugging.
    
    Signed-off-by: Jes Sorensen <jes@sgi.com>
    Signed-off-by: Tony Luck <tony.luck@intel.com>

commit 8872d8e1c4311dd7e5086975df9c76120a0be83b
Author: Angelo P. Castellani <angelo.castellani+lkml@gmail.com>
Date:   Tue May 16 21:42:11 2006 -0700

    [TCP]: reno sacked_out count fix
    
    From: "Angelo P. Castellani" <angelo.castellani+lkml@gmail.com>
    
    Using NewReno, if a sk_buff is timed out and is accounted as lost_out,
    it should also be removed from the sacked_out.
    
    This is necessary because recovery using NewReno fast retransmit could
    take up to a lot RTTs and the sk_buff RTO can expire without actually
    being really lost.
    
    left_out = sacked_out + lost_out
    in_flight = packets_out - left_out + retrans_out
    
    Using NewReno without this patch, on very large network losses,
    left_out becames bigger than packets_out + retrans_out (!!).
    
    For this reason unsigned integer in_flight overflows to 2^32 - something.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit d8fd0a73169e90022dc3ccf3083ca24573b44b5c
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Tue May 16 15:24:41 2006 -0700

    [IPV6]: Endian fix in net/ipv6/netfilter/ip6t_eui64.c:match().
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 6599519e9c6c56ff0f9a4ffd53f90c5b65b902f4
Author: Adrian Bunk <bunk@stusta.de>
Date:   Tue May 16 15:23:40 2006 -0700

    [TR]: Remove an unused export.
    
    This patch removes the unused EXPORT_SYMBOL(tr_source_route).
    
    (Note, the usage in net/llc/llc_output.c can't be modular.)
    
    Signed-off-by: Adrian Bunk <bunk@stusta.de>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 4ac396c0467993853d3d58c0975151515700c07b
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Tue May 16 15:17:49 2006 -0700

    [IPX]: Correct return type of ipx_map_frame_type().
    
    Casting BE16 to int and back may or may not work. Correct, to be sure.
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 53d42f541278b6c97724465b19bae4730d7a85c8
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Tue May 16 15:07:28 2006 -0700

    [IPX]: Correct argument type of ipxrtr_delete().
    
    A single caller passes __u32. Inside function "net" is compared with
    __u32 (__be32 really, just wasn't annotated).
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 338f7566e5c26a9547e25d54863ae4e4e5c856d1
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Tue May 16 15:02:12 2006 -0700

    [PKT_SCHED]: Potential jiffy wrap bug in dev_watchdog().
    
    There is a potential jiffy wraparound bug in the transmit watchdog
    that is easily avoided by using time_after().
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 1e316d7566b63767aa18902235c719e9e95465d0
Author: David Brownell <david-b@pacbell.net>
Date:   Thu Apr 6 22:25:56 2006 -0700

    [PATCH] SPI: spi_bitbang: clocking fixes
    
    This fixes two problems triggered by the MMC stack updating clocks:
    
     - SPI masters driver should accept a max clock speed of zero; that's one
       convention for marking idle devices.  (Presumably that helps controllers
       that don't autogate clocks to "off" when not in use.)
    
     - There are more than 1000 nanoseconds per millisecond; setting the clock
       down to 125 KHz now works properly.
    
    Showing once again that Zero (http://en.wikipedia.org/wiki/Zero) is still
    an inexhaustible number of bugs.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 9708c121c38fe864eb6f5a119f7525729686e095
Author: Stephen Street <stephen@streetfiresound.com>
Date:   Tue Mar 28 14:05:23 2006 -0800

    [PATCH] spi: Update to PXA2xx SPI Driver
    
    Fix two outstanding issues with the pxa2xx_spi driver:
    
    1) Bad cast in the function u32_writer. Thanks to Henrik Bechmann
    2) Adds support for per transfer changes to speed and bits per word
    
    Signed-off-by: Stephen Street <stephen@streetfiresound.com>
    Cc: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit a020ed7521a9737bcf3e34eb880867c60c3c68d0
Author: David Brownell <david-b@pacbell.net>
Date:   Mon Apr 3 15:49:04 2006 -0700

    [PATCH] SPI: busnum == 0 needs to work
    
    We need to be able to have a "SPI bus 0" matching chip numbering; but
    that number was wrongly used to flag dynamic allocation of a bus number.
    
    This patch resolves that issue; now negative numbers trigger dynamic alloc.
    
    It also updates the how-to-write-a-controller-driver overview to mention
    this stuff.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit ccf77cc4af5b048e20cfd9327fcc286cb69c34cc
Author: David Brownell <david-b@pacbell.net>
Date:   Mon Apr 3 15:46:22 2006 -0700

    [PATCH] SPI: devices can require LSB-first encodings
    
    Add spi_device hook for LSB-first word encoding, and update all the
    (in-tree) controller drivers to reject such devices.  Eventually,
    some controller drivers will be updated to support lsb-first encodings
    on the wire; no current drivers need this.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit ff9f4771b5f017ee0f57629488b6cd7a6ef3d19b
Author: Kumar Gala <galak@kernel.crashing.org>
Date:   Sun Apr 2 16:06:35 2006 -0500

    [PATCH] SPI: Renamed bitbang_transfer_setup to spi_bitbang_setup_transfer and export it
    
    Renamed bitbang_transfer_setup to follow convention of other exported symbols
    from spi-bitbang.  Exported spi_bitbang_setup_transfer to allow users of
    spi-bitbang to use the function in their own setup_transfer.
    
    Signed-off-by: Kumar Gala <galak@kernel.crashing.org>
    Cc: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 025c398710ac24456f0288fc7e64f426c5c5508f
Author: Kumar Gala <galak@kernel.crashing.org>
Date:   Sun Apr 2 16:05:54 2006 -0500

    [PATCH] SPI: Add David as the SPI subsystem maintainer
    
    Add David as the SPI subsystem maintainer
    
    Signed-off-by: Kumar Gala <galak@kernel.crashing.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit a9948b6194b46e489aa3b4d111d6dfd786c39c4b
Author: David Brownell <david-b@pacbell.net>
Date:   Sun Apr 2 10:37:40 2006 -0800

    [PATCH] SPI: spi bounce buffer has a minimum length
    
    Make sure that spi_write_then_read() can always handle at least 32 bytes
    of transfer (total, both directions), minimizing one portability issue.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 747d844ee9a183ff3067bb1181f2a25c50649538
Author: David Brownell <david-b@pacbell.net>
Date:   Sun Apr 2 10:33:37 2006 -0800

    [PATCH] SPI: spi whitespace fixes
    
    This removes superfluous whitespace in the <linux/spi/spi.h> header.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit e0c9905e87ac1bc56c9ea8f5b2934aeee53dce26
Author: Stephen Street <stephen@streetfiresound.com>
Date:   Tue Mar 7 23:53:24 2006 -0800

    [PATCH] SPI: add PXA2xx SSP SPI Driver
    
    This driver turns a PXA2xx synchronous serial port (SSP) into a SPI master
    controller (see Documentation/spi/spi_summary).  The driver has the following
    features:
    
    - Support for any PXA2xx SSP
    - SSP PIO and SSP DMA data transfers.
    - External and Internal (SSPFRM) chip selects.
    - Per slave device (chip) configuration.
    - Full suspend, freeze, resume support.
    
    Signed-off-by: Stephen Street <stephen@streetfiresound.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Cc: David Brownell <david-b@pacbell.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 4cff33f94fefcce1b3c01a9d1da6bb85fe3cbdfa
Author: Imre Deak <imre.deak@nokia.com>
Date:   Fri Feb 17 10:02:18 2006 -0800

    [PATCH] SPI: per-transfer overrides for wordsize and clocking
    
    Some protocols (like one for some bitmap displays) require different clock
    speed or word size settings for each transfer in an SPI message. This adds
    those parameters to struct spi_transfer.  They are to be used when they are
    nonzero; otherwise the defaults from spi_device are to be used.
    
    The patch also adds a setup_transfer callback to spi_bitbang, uses it for
    messages that use those overrides, and implements it so that the pure
    bitbanging code can help resolve any questions about how it should work.
    
    Signed-off-by: Imre Deak <imre.deak@nokia.com>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 3170a5e80be7db29ab5ccb6b4145cf28b4a156de
Author: Adrian Bunk <bunk@stusta.de>
Date:   Tue May 16 22:09:46 2006 +0100

    [ARM] arch/arm/kernel/dma-isa.c: named initializers
    
    This patch converts struct dma_resources to named initializers.
    
    Besides fixing a compile error in -mm, it didn't sound like a bad idea.
    
    Signed-off-by: Adrian Bunk <bunk@stusta.de>
    Acked-by: Alexander Schulz <alex@shark-linux.de>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit bb1a2aa617e67e2d60f22052b13422c7caeaf798
Author: Harry Fearnhamm <Harry.Fearnhamm@arm.com>
Date:   Tue May 16 16:50:21 2006 +0100

    [ARM] 3527/1: MPCore Boot Lockup Fix
    
    Patch from Harry Fearnhamm
    
    This patch fixes the occasional lockup seen in early boot stage
    on RealView MPCore system.
    
    Signed-off-by: Harry Fearnhamm <Harry.Fearnhamm@arm.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit a4523a8b38089478f93bc053c31f678c63f5ee1b
Author: Roland Dreier <rdreier@cisco.com>
Date:   Mon May 15 11:41:00 2006 -0700

    [PATCH] slab: Fix kmem_cache_destroy() on NUMA
    
    With CONFIG_NUMA set, kmem_cache_destroy() may fail and say "Can't
    free all objects."  The problem is caused by sequences such as the
    following (suppose we are on a NUMA machine with two nodes, 0 and 1):
    
     * Allocate an object from cache on node 0.
     * Free the object on node 1.  The object is put into node 1's alien
       array_cache for node 0.
     * Call kmem_cache_destroy(), which ultimately ends up in __cache_shrink().
     * __cache_shrink() does drain_cpu_caches(), which loops through all nodes.
       For each node it drains the shared array_cache and then handles the
       alien array_cache for the other node.
    
    However this means that node 0's shared array_cache will be drained,
    and then node 1 will move the contents of its alien[0] array_cache
    into that same shared array_cache.  node 0's shared array_cache is
    never looked at again, so the objects left there will appear to be in
    use when __cache_shrink() calls __node_shrink() for node 0.  So
    __node_shrink() will return 1 and kmem_cache_destroy() will fail.
    
    This patch fixes this by having drain_cpu_caches() do
    drain_alien_cache() on every node before it does drain_array() on the
    nodes' shared array_caches.
    
    The problem was originally reported by Or Gerlitz <ogerlitz@voltaire.com>.
    
    Signed-off-by: Roland Dreier <rolandd@cisco.com>
    Acked-by: Christoph Lameter <clameter@sgi.com>
    Acked-by: Pekka Enberg <penberg@cs.helsinki.fi>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 40e59a61669a3cab9e0bd24644e29155d6b00970
Author: Andi Kleen <ak@suse.de>
Date:   Mon May 15 18:19:47 2006 +0200

    [PATCH] x86_64: Don't schedule on exception stack on preemptive kernels
    
    Extends an earlier patch from John Blackwood to more exception handlers
    that also run on the exception stacks.
    
    Expand the use of preempt_conditional_{sti,cli} to all cases where
    interrupts are to be re-enabled during exception handling while running
    on an IST stack.
    
    Based on original patch from Jan Beulich.
    
    Cc: John Blackwood <john.blackwood@ccur.com>
    Cc: jbeulich@novell.com
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit fad7906d16e8c4926aeb5b0f1756eb9f55b2837d
Author: Andi Kleen <ak@suse.de>
Date:   Mon May 15 18:19:44 2006 +0200

    [PATCH] x86_64: Fix memory hotadd heuristics
    
    This fixes some boot failures on Dell and Unisys systems with memory
    hotadd added.
    
     - Set hotadd_percent to 0 by default.  This means anybody using hotadd
       memory needs to specify the value on the command line.  That's
       because there are lots of Intel boxes which have a bogus hotplug area
       in their SRAT and they would waste a lot of memory before.
     - Fix calculation of how much memory to use when the hotplug area
       exceeds hotadd_percent
     - Fix fallback when the
     - Fix fallback if memory hotadd is not compiled in.
    
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 5491d0f3e206beb95eeb506510d62a1dab462df1
Author: Andi Kleen <ak@suse.de>
Date:   Mon May 15 18:19:41 2006 +0200

    [PATCH] i386/x86_64: Force pci=noacpi on HP XW9300
    
    This is needed to see all devices.
    
    The system has multiple PCI segments and we don't handle that properly
    yet in PCI and ACPI. Short term before this is fixed blacklist it to
    pci=noacpi.
    
    Acked-by: len.brown@intel.com
    Cc: gregkh@suse.de
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit f0fdabf8bf187c9aafeb139a828c530ef45cf022
Author: Andi Kleen <ak@suse.de>
Date:   Mon May 15 18:19:38 2006 +0200

    [PATCH] x86_64: Don't warn for overflow in nommu case when dma_mask is < 32bit
    
    This triggers for b44's 1GB DMA workaround which tries to map
    first and then bounces.
    
    The 32bit heuristic is reasonable because the IOMMU doesn't attempt
    to handle < 32bit masks anyways.
    
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 639b421b911bbde1e3fb5ed037a4f8c85a5bffcb
Author: Andi Kleen <ak@suse.de>
Date:   Mon May 15 18:19:35 2006 +0200

    [PATCH] x86_64: Check for bad dma address in b44 1GB DMA workaround
    
    Needed for interaction with the nommu code in x86-64 which
    will return bad_dma_address if the address exceeds dma_mask.
    
    Cc: netdev@vger.kernel.org
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit cb6b2eb9bcf2f61e84dc0b55ef7e3d4923842313
Author: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Date:   Mon May 15 15:46:03 2006 +1000

    [PATCH] Fix pSeries identification in prom_init.c
    
    The OF trampoline code prom_init.c still needs to identify IBM pSeries
    (PAPR) machines in order to run some platform specific code on them like
    instanciating the TCE tables. The code doing that detection was changed
    recently in 2.6.17 early stages but was done slightly incorrectly. It
    should be testing for an exact match of "chrp" and it currently tests
    for anything that begins with "chrp". That means it will incorrectly
    match with platforms using Maple-like device-trees and have open
    firmware. This fixes it by using strcmp instead of strncmp to match what
    the actual platform detection code does.
    
    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 3de620e8394406fd01f450b8c6e3e74464e81a78
Author: Anton Blanchard <anton@samba.org>
Date:   Wed May 10 13:05:54 2006 +1000

    [PATCH] powerpc: fix kernel version display on pseries boxes
    
    We are displaying the wrong thing on the operator panel (2x40
    character LCD).  This got broken in commit cebb21b5, when UTS_RELEASE
    got changed to system_utsname.version.
    
    Signed-off-by: Anton Blanchard <anton@samba.org>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 9d494ccb9ca297f80dc61a0d6357e88c86f44e92
Author: Russell King <rmk@dyn-67.arm.linux.org.uk>
Date:   Tue May 16 11:33:15 2006 +0100

    [ARM] arch/arm/kernel/process.c: Fix warning
    
    arch/arm/kernel/process.c:314: warning: assignment makes integer from pointer without a cast
    
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 478922c2b3c4ec8844ff2dec7eb1eba6f89a10ee
Author: Catalin Marinas <catalin.marinas@arm.com>
Date:   Tue May 16 11:30:26 2006 +0100

    [ARM] 3526/1: ioremap should use vunmap instead of vfree on ARM
    
    Patch from Catalin Marinas
    
    This patch modifies the __ioremap_pfn and __iounmap functions in
    arch/arm/mm/ioremap.c to use vunmap instead of vfree.
    
    Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 1d6760a3ac6b5691e4914a3333b48fee5c2e275d
Author: Nicolas Pitre <nico@cam.org>
Date:   Tue May 16 11:29:46 2006 +0100

    [ARM] 3524/1: ARM EABI: more 64-bit aligned stack fixes
    
    Patch from Nicolas Pitre
    
    Assembly code that calls C code must ensure the C code sees a 64-bit
    aligned stack pointer.
    
    Signed-off-by: Nicolas Pitre <nico@cam.org>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 2ceec0c8c6e2780d58dece91b4b787729405d9e7
Author: Uwe Zeisberger <Uwe_Zeisberger@digi.com>
Date:   Wed May 10 18:11:05 2006 +0100

    [ARM] 3517/1: move definition of PROC_INFO_SZ from procinfo.h to asm-offsets.h
    
    Patch from Uwe Zeisberger
    
    The symbol is only used in arch/arm/kernel/head-common.S.  This in turn
    is included from arch/arm/kernel/head.S and arch/arm/kernel/head-nommu.S
    which include asm-offsets.h .
    
    Signed-off-by: Uwe Zeisberger <Uwe_Zeisberger@digi.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 1281e36027a9119356bd93b5e7853c72c35dd462
Author: Andrew Victor <andrew@sanpeople.com>
Date:   Tue May 16 11:28:49 2006 +0100

    [ARM] 3523/1: Serial core pm_state
    
    Patch from Andrew Victor
    
    The serial_core already manages the power state of the UARTs, and
    therefore it shouldn't suspend a UART which was previously suspended.
    
    This patch modifies serial_core only call the UART-specific
    power-management function if the PM state is actually changing.
    
    Signed-off-by: Andrew Victor <andrew@sanpeople.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 655516c80ccb3ab2ba2d3063715889b00552a8b3
Author: Ben Dooks <ben-linux@fluff.org>
Date:   Wed Apr 19 23:02:56 2006 +0100

    [WATCHDOG] s3c2410_wdt.c stop watchdog after boot
    
    If the s3c2410 watchdog timer is not enabled by
    the driver at startup, ensure that it is stopped
    in-case the boot process has enabled it.
    
    Signed-off-by: Ben Dooks <ben-linux@fluff.org>
    Signed-off-by: Wim Van Sebroeck <wim@iguana.be>
    Signed-off-by: Andrew Morton <akpm@osdl.org>

commit 03a8e359cf760a876f4da9b5c0c165c49564f95a
Author: Wim Van Sebroeck <wim@iguana.be>
Date:   Sun Apr 16 12:52:35 2006 +0200

    [WATCHDOG] i8xx_tco.c - remove support for ICH6 + ICH7
    
    Temporary remove support for ICH6 + ICH7. In these newer TCO's
    the watchdog timer has changed: the TCO_TMR register is not at
    the TCOBASE+0x1 offset, but changed it's place to TCOBASE+0x12
    and became 10 bit long [0:9]. (Kernel BUG 6031).
    
    ICH6 + ICH7 support will be added in a new driver. Code is
    under test.
    
    Signed-off-by: Wim Van Sebroeck <wim@iguana.be>
    Signed-off-by: Andrew Morton <akpm@osdl.org>

commit 92930d9e8121223e14131809c6e9959ee9e0c43f
Author: Randy Dunlap <rdunlap@xenotime.net>
Date:   Tue Apr 4 20:17:26 2006 -0700

    [WATCHDOG] Documentation/watchdog/watchdog-api.txt - fix watchdog daemon
    
    Fix the simple watchdog daemon program in Doc/watchdog/watchdog-api.txt
    to build cleanly.
    
    Signed-off-by: Randy Dunlap <rdunlap@xenotime.net>
    Signed-off-by: Wim Van Sebroeck <wim@iguana.be>
    Signed-off-by: Andrew Morton <akpm@osdl.org>

commit 7071e522a58cb1b3469e4cd8664ef03a32076349
Author: Dave Jones <davej@redhat.com>
Date:   Mon Apr 3 16:04:48 2006 -0700

    [WATCHDOG] sc1200wdt.c printk fix
    
    Fix printk output.
    
    sc1200wdt: build 20020303<3>sc1200wdt: io parameter must be specified
    
    Signed-off-by: Dave Jones <davej@redhat.com>
    Signed-off-by: Wim Van Sebroeck <wim@iguana.be>
    Signed-off-by: Andrew Morton <akpm@osdl.org>

commit 843a46f423a508b3a443a08baa903c6da02f3297
Author: Stephen Hemminger <shemminger@osdl.org>
Date:   Thu May 11 15:07:28 2006 -0700

    sky2: prevent dual port receiver problems
    
    When both ports are receiving simultaneously, the receive logic gets confused
    and may pass up a packet before it is full. This causes hangs, and IP will see
    lots of garbage packets. There is even the potential for data corruption if
    a later arriving packet DMA's into freed memory.
    
    It looks like a hardware bug because status arrives for a packet but no
    data is there. Until this bug is worked out, block the user from bringing
    up both ports at once.
    
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>

commit de54bc0f00c23a805f4ad2146c5a1fd5e2abe1e9
Author: Andi Kleen <ak@suse.de>
Date:   Mon May 15 18:19:35 2006 +0200

    x86_64: Check for bad dma address in b44 1GB DMA workaround
    
    Needed for interaction with the nommu code in x86-64 which
    will return bad_dma_address if the address exceeds dma_mask.
    
    Cc: netdev@vger.kernel.org
    
    Signed-off-by: Andi Kleen <ak@suse.de>
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>

commit 1ea739a5f9f469a57d804ebcf70514b8a5efe9da
Author: Lennert Buytenhek <buytenh@wantstofly.org>
Date:   Mon May 15 12:25:29 2006 -0700

    The ixp2000 driver for the enp2611 was developed on a board with
    three gigabit ports, but some enp2611 models only have two ports
    (and only one onboard PM3386.)  The current driver assumes there
    are always three ports and so it doesn't work on the two-port
    version of the board at all.
    
    This patch adds a bit of logic to the enp2611 driver to limit the
    number of ports to 2 if the second PM3386 isn't detected.
    
    Signed-off-by: Lennert Buytenhek <buytenh@wantstofly.org>
    Signed-off-by: Stephen Hemminger <shemminger@osdl.org>

commit c4694c76ce28dd7e415b4f3014d8c6e580b5f3d2
Author: Andrew Morton <akpm@osdl.org>
Date:   Mon May 15 09:44:43 2006 -0700

    [PATCH] dl2k needs dma-mapping.h
    
    On alpha:
    
    drivers/net/dl2k.c: In function `rio_free_tx':
    drivers/net/dl2k.c:768: error: `DMA_48BIT_MASK' undeclared (first use in this function)
    drivers/net/dl2k.c:768: error: (Each undeclared identifier is reported only once
    drivers/net/dl2k.c:768: error: for each function it appears in.)
    drivers/net/dl2k.c: In function `receive_packet':
    drivers/net/dl2k.c:896: error: `DMA_48BIT_MASK' undeclared (first use in this function)
    drivers/net/dl2k.c: In function `rio_close':
    drivers/net/dl2k.c:1803: error: `DMA_48BIT_MASK' undeclared (first use in this function)
    
    Cc: Jeff Garzik <jeff@garzik.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 194a61b8e09ac526c33777a688ee2a1504d7fbc3
Author: Andrew Morton <akpm@osdl.org>
Date:   Mon May 15 09:44:42 2006 -0700

    [PATCH] jffs2 warning fixes
    
    fs/jffs2/nodelist.c: In function `check_node_data':
    fs/jffs2/nodelist.c:441: warning: unsigned int format, different type arg (arg 4)
    fs/jffs2/nodelist.c:464: warning: int format, different type arg (arg 5)
    
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit d3779e7989cfdba854b843fe605f8df9e991cd18
Author: Peter Osterlund <petero2@telia.com>
Date:   Mon May 15 09:44:40 2006 -0700

    [PATCH] devices.txt: remove pktcdvd entry
    
    Changing the driver to use dynamic device numbers was one of the many
    changes that were made in order to have the driver accepted into the
    mainline kernel.  Therefore I would say that the entry in devices.txt is
    obsolete.  This patch removes it.
    
    Signed-off-by: Peter Osterlund <petero2@telia.com>
    Cc: Torben Mathiasen <device@lanana.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 264a341231e8af2c2e35ac15d26de76f1198525b
Author: Thomas Kleffel <tk@maintech.de>
Date:   Mon May 15 09:44:37 2006 -0700

    [PATCH] ide_cs: Add IBM microdrive to known IDs
    
    Add the IBM microdrive to the known PCMCIA IDs for ide_cs.
    
    Signed-off-by: Thomas Kleffel <tk@maintech.de>
    Cc: Bartlomiej Zolnierkiewicz <B.Zolnierkiewicz@elka.pw.edu.pl>
    Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
    Cc: Dominik Brodowski <linux@dominikbrodowski.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 79afecfaabbe42e2a8a7e28880517f1721f2f3a7
Author: Aneesh Kumar <aneesh.kumar@gmail.com>
Date:   Mon May 15 09:44:36 2006 -0700

    [PATCH] Fix typos in Documentation/memory-barriers.txt
    
    Fix some typos in Documentation/memory-barriers.txt
    
    Signed-off-by: Aneesh Kumar K.V <aneesh.kumar@gmail.com>
    Cc: David Howells <dhowells@redhat.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit bfe2e9349f318883c036607c64b6205d573a28ff
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Mon May 15 09:44:35 2006 -0700

    [PATCH] gigaset: endian fix
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Cc: Hansjoerg Lipp <hjlipp@web.de>
    Cc: Tilman Schmidt <tilman@imap.cc>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit b2d596d8e08099b47e0a75aa4b7f82aae780e851
Author: Pavel Machek <pavel@ucw.cz>
Date:   Mon May 15 09:44:34 2006 -0700

    [PATCH] fix hotplug kconfig help
    
    HOTPLUG_CPU entry says "Say Y..." then "Say N.".  Slightly ugly, so I fixed
    it up, and added remark about suspend on SMP as a bonus.
    
    Signed-off-by: Pavel Machek <pavel@suse.cz>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ce007ea59729d627f62bb5fa8c1a81e25653a0ad
Author: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006@gmx.net>
Date:   Mon May 15 09:44:33 2006 -0700

    [PATCH] smbus unhiding kills thermal management
    
    Do not enable the SMBus device on Asus boards if suspend is used.  We do
    not reenable the device on resume, leading to all sorts of undesirable
    effects, the worst being a total fan failure after resume on Samsung P35
    laptop.
    
    Signed-off-by: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006@gmx.net>
    Signed-off-by: Pavel Machek <pavel@suse.cz>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit eee391a66d774e644bf3cbb35403562e09d88bb2
Author: Andrew Morton <akpm@osdl.org>
Date:   Mon May 15 09:44:30 2006 -0700

    [PATCH] revert "vfs: propagate mnt_flags into do_loopback/vfsmount"
    
    Revert commit f6422f17d3a480f21917a3895e2a46b968f56a08, due to
    
    Valdis.Kletnieks@vt.edu wrote:
    >
    > There seems to have been a bug introduced in this changeset:
    >
    > Am running 2.6.17-rc3-mm1.  When this changeset is applied, 'mount --bind'
    > misbehaves:
    >
    > > # mkdir /foo
    > > # mount -t tmpfs -o rw,nosuid,nodev,noexec,noatime,nodiratime none /foo
    > > # mkdir /foo/bar
    > > # mount --bind /foo/bar /foo
    > > # tail -2 /proc/mounts
    > > none /foo tmpfs rw,nosuid,nodev,noexec,noatime,nodiratime 0 0
    > > none /foo tmpfs rw 0 0
    >
    > Reverting this changeset causes both mounts to have the same options.
    >
    > (Thanks to Stephen Smalley for tracking down the changeset...)
    >
    
    Cc: Herbert Poetzl <herbert@13thfloor.at>
    Cc: Christoph Hellwig <hch@infradead.org>
    Cc: <Valdis.Kletnieks@vt.edu>
    Cc: Stephen Smalley <sds@tycho.nsa.gov>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit be6e028b6422878df2e799a74609a03a553c7dad
Author: Andy Whitcroft <apw@shadowen.org>
Date:   Mon May 15 09:44:29 2006 -0700

    [PATCH] root mount failure: emit filesystems attempted
    
    When we fail to mount from a valid root device list out the filesystems we
    have tried to mount it with.  This gives the user vital diagnostics as to
    what is missing from their kernel.
    
    For example in the fragment below the kernel does not have CRAMFS compiled
    into the kernel and yet appears to recognise it at the RAMDISK detect
    stage.  Later the mount fails as we don't have the filesystem.
    
      RAMDISK: cramfs filesystem found at block 0
      RAMDISK: Loading 1604KiB [1 disk] into ram disk... done.
      XFS: bad magic number
      XFS: SB validate failed
      No filesystem could mount root, tried: reiserfs ext3 ext2 msdos vfat
        iso9660 jfs xfs
      Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(8,1)
    
    Signed-off-by: Andy Whitcroft <apw@shadowen.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 3835a9bd07778d87dea37fbf190f70883515e8fc
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Mon May 15 09:44:27 2006 -0700

    [PATCH] fs/compat.c: fix 'if (a |= b )' typo
    
    Mentioned by Mark Armbrust somewhere on Usenet.
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Cc: David Woodhouse <dwmw2@infradead.org>
    Cc: Ulrich Drepper <drepper@redhat.com>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit bb53a76116a8af13ee2581c85c02fe40e0c1a599
Author: Daniel Walker <dwalker@mvista.com>
Date:   Mon May 15 09:44:27 2006 -0700

    [PATCH] tpm_register_hardware gcc 4.1 warning fix
    
    drivers/char/tpm/tpm.c: In function 'tpm_register_hardware':
    drivers/char/tpm/tpm.c:1157: warning: assignment from incompatible pointer type
    
    Signed-off-by: Daniel Walker <dwalker@mvista.com>
    Acked-by: Kylene Hall <kjhall@us.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 655fdeab809a5612b0eab6aee873b00d26404ca7
Author: Alan Cox <alan@lxorguk.ukuu.org.uk>
Date:   Mon May 15 09:44:26 2006 -0700

    [PATCH] Final rio polish
    
    Signed-off-by: Alan Cox <alan@redhat.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 2a7362f52a17e8dbeab57c00c3c45fcfeb0dff54
Author: Kylene Jo Hall <kjhall@us.ibm.com>
Date:   Mon May 15 09:44:25 2006 -0700

    [PATCH] tpm: fix constant
    
    Fix the constant used for the base address when it cannot be determined
    from ACPI.  It was off by one order of magnitude.
    
    Signed-off-by: Kylene Hall <kjhall@us.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 64471ebe534dc6cedd72849b2324b52cb5249eb9
Author: Benjamin LaHaise <bcrl@kvack.org>
Date:   Mon May 15 09:44:24 2006 -0700

    [PATCH] Add Core Solo and Core Duo support to oprofile
    
    Add support to oprofile for the Intel Core Solo and Core Duo processors.
    See also the patch to add support to oprofile-0.9.1-8.1.1 at
    http://www.kvack.org/~bcrl/patches/oprofile/oprofile-core... .
    
    Signed-off-by: Benjamin LaHaise <benjamin.c.lahaise@intel.com>
    Cc: Philippe Elie <phil.el@wanadoo.fr>
    Cc: John Levon <levon@movementarian.org>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit e6333fd4ddf7a583480017f535b9ea53c116ab81
Author: Hua Zhong <hzhong@gmail.com>
Date:   Mon May 15 09:44:22 2006 -0700

    [PATCH] fix can_share_swap_page() when !CONFIG_SWAP
    
    can_share_swap_page() is used to check if the page has the last reference.
    This avoids allocating a new page for COW if it's the last page.
    
    However, if CONFIG_SWAP is not set, can_share_swap_page() is defined as 0,
    thus always causes a copy for the last COW page.  The below simple patch
    fixes it.
    
    Signed-off-by: Hua Zhong <hzhong@gmail.com>
    Cc: David Howells <dhowells@redhat.com>
    Cc: Hugh Dickins <hugh@veritas.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 41e5a6ac80c600e1f8bda0a4871f0b797e097d78
Author: Latchesar Ionkov <lucho@ionkov.net>
Date:   Mon May 15 09:44:21 2006 -0700

    [PATCH] v9fs: signal handling fixes
    
    Multiple races can happen when v9fs is interrupted by a signal and Tflush
    message is sent to the server.  After v9fs sends Tflush it doesn't wait
    until it receives Rflush, and possibly the response of the original
    message.  This behavior may confuse v9fs what fids are allocated by the
    file server.
    
    This patch fixes the races and the fid allocation.
    
    Signed-off-by: Latchesar Ionkov <lucho@ionkov.net>
    Cc: Eric Van Hensbergen <ericvh@hera.kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 343f1fe6f2e3fb4912db241e639b0721c2e14f2e
Author: Latchesar Ionkov <lucho@ionkov.net>
Date:   Mon May 15 09:44:18 2006 -0700

    [PATCH] v9fs: Twalk memory leak
    
    v9fs leaks memory if the file server responds with Rerror to a Twalk
    message.  The patch fixes the leak.
    
    Signed-off-by: Latchesar Ionkov <lucho@ionkov.net>
    Cc: Eric Van Hensbergen <ericvh@hera.kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 3dc7b82ea7649356bf027fba50c16ca50cec31e2
Author: Richard Purdie <rpurdie@rpsys.net>
Date:   Mon May 15 09:44:17 2006 -0700

    [PATCH] LED: Fix sysfs store function error handling
    
    Fix the error handling of some LED _store functions.  This corrects them to
    return -EINVAL if the value is not numeric with an optional byte of trailing
    whitespace.
    
    Signed-off-by: Richard Purdie <rpurdie@rpsys.net>
    Cc: Greg KH <greg@kroah.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 263de9b582b0f9b6ad5a0651b7df884fe80d6c3c
Author: Richard Purdie <rpurdie@rpsys.net>
Date:   Mon May 15 09:44:16 2006 -0700

    [PATCH] LED: Add maintainer entry for the LED subsystem
    
    Add a MAINTAINERS entry for the LED subsystem.
    
    Signed-off-by: Richard Purdie <rpurdie@rpsys.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 68673afd443c5eeb4cebfb9026e3675f43d79f2b
Author: Richard Purdie <rpurdie@rpsys.net>
Date:   Mon May 15 09:44:15 2006 -0700

    [PATCH] Backlight/LCD Class: Fix sysfs _store error handling
    
    The backlight and LCD class _store functions currently accept values like "34
    some random strings" without error.  This corrects them to return -EINVAL if
    the value is not numeric with an optional byte of trailing whitespace.
    
    Signed-off-by: Richard Purdie <rpurdie@rpsys.net>
    Cc: Greg KH <greg@kroah.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit a8d2e7d95229db9999682113bfac40b49978f212
Author: Richard Purdie <rpurdie@rpsys.net>
Date:   Mon May 15 09:44:14 2006 -0700

    [PATCH] LED: Improve Kconfig information
    
    Improve the NEW_LEDS Kconfig information to say what it does as well as what
    it doesn't.
    
    Signed-off-by: Richard Purdie <rpurdie@rpsys.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 39d24e64263cd3211705d3b61ea4171c65030921
Author: Mike Kravetz <kravetz@us.ibm.com>
Date:   Mon May 15 09:44:13 2006 -0700

    [PATCH] add slab_is_available() routine for boot code
    
    slab_is_available() indicates slab based allocators are available for use.
    SPARSEMEM code needs to know this as it can be called at various times
    during the boot process.
    
    Signed-off-by: Mike Kravetz <kravetz@us.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 48564e628bd7662d7a0b3ac81c41cd0e4cc36dae
Author: Jan Niehusmann <jan@gondor.com>
Date:   Mon May 15 09:44:12 2006 -0700

    [PATCH] smbfs: Fix slab corruption in samba error path
    
    Yesterday, I got the following error with 2.6.16.13 during a file copy from
    a smb filesystem over a wireless link.  I guess there was some error on the
    wireless link, which in turn caused an error condition for the smb
    filesystem.
    
    In the log, smb_file_read reports error=4294966784 (0xfffffe00), which also
    shows up in the slab dumps, and also is -ERESTARTSYS.  Error code 27499
    corresponds to 0x6b6b, so the rq_errno field seems to be the only one being
    set after freeing the slab.
    
    In smb_add_request (which is the only place in smbfs where I found
    ERESTARTSYS), I found the following:
    
            if (!timeleft || signal_pending(current)) {
                    /*
                     * On timeout or on interrupt we want to try and remove the
                     * request from the recvq/xmitq.
                     */
                    smb_lock_server(server);
                    if (!(req->rq_flags & SMB_REQ_RECEIVED)) {
                            list_del_init(&req->rq_queue);
                            smb_rput(req);
                    }
                    smb_unlock_server(server);
            }
    	[...]
            if (signal_pending(current))
                    req->rq_errno = -ERESTARTSYS;
    
    I guess that some codepath like smbiod_flush() caused the request to be
    removed from the queue, and smb_rput(req) be called, without
    SMB_REQ_RECEIVED being set.  This violates an asumption made by the quoted
    code.
    
    Then, the above code calls smb_rput(req) again, the req gets freed, and
    req->rq_errno = -ERESTARTSYS writes into the already freed slab.  As
    list_del_init doesn't cause an error if called multiple times, that does
    cause the observed behaviour (freed slab with rq_errno=-ERESTARTSYS).
    
    If this observation is correct, the following patch should fix it.
    
    I wonder why the smb code uses list_del_init everywhere - using list_del
    instead would catch such situations by poisoning the next and prev
    pointers.
    
    May  4 23:29:21 knautsch kernel: [17180085.456000] ipw2200: Firmware error detected.
Restarting.
    May  4 23:29:21 knautsch kernel: [17180085.456000] ipw2200: Sysfs 'error' log captured.
    May  4 23:33:02 knautsch kernel: [17180306.316000] ipw2200: Firmware error detected.
Restarting.
    May  4 23:33:02 knautsch kernel: [17180306.316000] ipw2200: Sysfs 'error' log already exists.
    May  4 23:33:02 knautsch kernel: [17180306.968000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:34:18 knautsch kernel: [17180383.256000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:34:18 knautsch kernel: [17180383.284000] SMB connection re-established (-5)
    May  4 23:37:19 knautsch kernel: [17180563.956000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:40:09 knautsch kernel: [17180733.636000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:40:26 knautsch kernel: [17180750.700000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:43:02 knautsch kernel: [17180907.304000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:43:08 knautsch kernel: [17180912.324000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:43:34 knautsch kernel: [17180938.416000] smb_errno: class Unknown, code 27499 from
command 0x6b
    May  4 23:43:34 knautsch kernel: [17180938.416000] Slab corruption: start=c4ebe09c, len=244
    May  4 23:43:34 knautsch kernel: [17180938.416000] Redzone: 0x5a2cf071/0x5a2cf071.
    May  4 23:43:34 knautsch kernel: [17180938.416000] Last user: [<e087b903>](smb_rput+0x53/0x90
[smbfs])
    May  4 23:43:34 knautsch kernel: [17180938.416000] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6a 6b 6b 6b 6b
6b 6b 6b
    May  4 23:43:34 knautsch kernel: [17180938.416000] 0f0: 00 fe ff ff
    May  4 23:43:34 knautsch kernel: [17180938.416000] Next obj: start=c4ebe19c, len=244
    May  4 23:43:34 knautsch kernel: [17180938.416000] Redzone: 0x5a2cf071/0x5a2cf071.
    May  4 23:43:34 knautsch kernel: [17180938.416000] Last user:
[<00000000>](_stext+0x3feffde0/0x30)
    May  4 23:43:34 knautsch kernel: [17180938.416000] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
6b 6b 6b
    May  4 23:43:34 knautsch kernel: [17180938.416000] 010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
6b 6b 6b
    May  4 23:43:34 knautsch kernel: [17180938.460000] SMB connection re-established (-5)
    May  4 23:43:42 knautsch kernel: [17180946.292000] ipw2200: Firmware error detected.
Restarting.
    May  4 23:43:42 knautsch kernel: [17180946.292000] ipw2200: Sysfs 'error' log already exists.
    May  4 23:45:04 knautsch kernel: [17181028.752000] ipw2200: Firmware error detected.
Restarting.
    May  4 23:45:04 knautsch kernel: [17181028.752000] ipw2200: Sysfs 'error' log already exists.
    May  4 23:45:05 knautsch kernel: [17181029.868000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:45:36 knautsch kernel: [17181060.984000] smb_errno: class Unknown, code 27499 from
command 0x6b
    May  4 23:45:36 knautsch kernel: [17181060.984000] Slab corruption: start=c4ebe09c, len=244
    May  4 23:45:36 knautsch kernel: [17181060.984000] Redzone: 0x5a2cf071/0x5a2cf071.
    May  4 23:45:36 knautsch kernel: [17181060.984000] Last user: [<e087b903>](smb_rput+0x53/0x90
[smbfs])
    May  4 23:45:36 knautsch kernel: [17181060.984000] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6a 6b 6b 6b 6b
6b 6b 6b
    May  4 23:45:36 knautsch kernel: [17181060.984000] 0f0: 00 fe ff ff
    May  4 23:45:36 knautsch kernel: [17181060.984000] Next obj: start=c4ebe19c, len=244
    May  4 23:45:36 knautsch kernel: [17181060.984000] Redzone: 0x5a2cf071/0x5a2cf071.
    May  4 23:45:36 knautsch kernel: [17181060.984000] Last user:
[<00000000>](_stext+0x3feffde0/0x30)
    May  4 23:45:36 knautsch kernel: [17181060.984000] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
6b 6b 6b
    May  4 23:45:36 knautsch kernel: [17181060.984000] 010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
6b 6b 6b
    May  4 23:45:36 knautsch kernel: [17181061.024000] SMB connection re-established (-5)
    May  4 23:46:17 knautsch kernel: [17181102.132000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:47:46 knautsch kernel: [17181190.468000] smb_errno: class Unknown, code 27499 from
command 0x6b
    May  4 23:47:46 knautsch kernel: [17181190.468000] Slab corruption: start=c4ebe09c, len=244
    May  4 23:47:46 knautsch kernel: [17181190.468000] Redzone: 0x5a2cf071/0x5a2cf071.
    May  4 23:47:46 knautsch kernel: [17181190.468000] Last user: [<e087b903>](smb_rput+0x53/0x90
[smbfs])
    May  4 23:47:46 knautsch kernel: [17181190.468000] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6a 6b 6b 6b 6b
6b 6b 6b
    May  4 23:47:46 knautsch kernel: [17181190.468000] 0f0: 00 fe ff ff
    May  4 23:47:46 knautsch kernel: [17181190.468000] Next obj: start=c4ebe19c, len=244
    May  4 23:47:46 knautsch kernel: [17181190.468000] Redzone: 0x5a2cf071/0x5a2cf071.
    May  4 23:47:46 knautsch kernel: [17181190.468000] Last user:
[<00000000>](_stext+0x3feffde0/0x30)
    May  4 23:47:46 knautsch kernel: [17181190.468000] 000: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
6b 6b 6b
    May  4 23:47:46 knautsch kernel: [17181190.468000] 010: 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b
6b 6b 6b
    May  4 23:47:46 knautsch kernel: [17181190.492000] SMB connection re-established (-5)
    May  4 23:49:20 knautsch kernel: [17181284.828000] smb_file_read: //some_file validation
failed, error=4294966784
    May  4 23:49:39 knautsch kernel: [17181303.896000] smb_file_read: //some_file validation
failed, error=4294966784
    
    Signed-off-by: Jan Niehusmann <jan@gondor.com>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 2e367a82fc2da335455984a7722c721dd3fa782b
Author: Marcelo Tosatti <marcelo@kvack.org>
Date:   Mon May 15 09:44:08 2006 -0700

    [PATCH] Marcelo has moved
    
    Signed-off-by: Marcelo Tosatti <marcelo@kvack.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 5e376613899076396d0c97de67ad072587267370
Author: Trent Piepho <xyzzy@speakeasy.org>
Date:   Mon May 15 09:44:06 2006 -0700

    [PATCH] symbol_put_addr() locks kernel
    
    Even since a previous patch:
    
    Fix race between CONFIG_DEBUG_SLABALLOC and modules
    Sun, 27 Jun 2004 17:55:19 +0000 (17:55 +0000)

http://www.kernel.org/git/?p=linux/kernel/git/torvalds/ol...
    
    The function symbol_put_addr() will deadlock the kernel.
    
    symbol_put_addr() would acquire modlist_lock, then while holding the lock call
    two functions kernel_text_address() and module_text_address() which also try
    to acquire the same lock.  This deadlocks the kernel of course.
    
    This patch changes symbol_put_addr() to not acquire the modlist_lock, it
    doesn't need it since it never looks at the module list directly.  Also, it
    now uses core_kernel_text() instead of kernel_text_address().  The latter has
    an additional check for addr inside a module, but we don't need to do that
    since we call module_text_address() (the same function kernel_text_address
    uses) ourselves.
    
    Signed-off-by: Trent Piepho <xyzzy@speakeasy.org>
    Cc: Zwane Mwaikambo <zwane@fsmlabs.com>
    Acked-by: Rusty Russell <rusty@rustcorp.com.au>
    Cc: Johannes Stezenbach <js@linuxtv.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 0159677857c5ada0a0a2c03a4dd59312382b73d0
Author: Martin Schwidefsky <schwidefsky@de.ibm.com>
Date:   Mon May 15 09:44:05 2006 -0700

    [PATCH] s390: add vmsplice system call
    
    Add new vmsplice system call and add missing __NR_xxx defines for
    sys_set_robust_list, sys_get_robust_list, sys_splice, sys_sync_file_range
    and sys_tee.
    
    Signed-off-by: Martin Schwidefsky <schwidefsky@de.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 6a050da45b5d855b48b057446847ff1542977b52
Author: Mark Huang <mlhuang@CS.Princeton.EDU>
Date:   Mon May 15 09:44:03 2006 -0700

    [PATCH] initramfs: fix CPIO hardlink check
    
    Copy the filenames of hardlinks when inserting them into the hash, since
    the "name" pointer may point to scratch space (name_buf).  Not doing so
    results in corruption if the scratch space is later overwritten: the wrong
    file may be hardlinked, or, if the scratch space contains garbage, the link
    will fail and a 0-byte file will be created instead.
    
    Signed-off-by: Mark Huang <mlhuang@cs.princeton.edu>
    Acked-by: Al Viro <viro@zeniv.linux.org.uk>
    Cc: "H. Peter Anvin" <hpa@zytor.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 698d070746770aaaec78ab4ffa3ab1f1d5c6abe8
Author: Greg Smith <gsmith@nc.rr.com>
Date:   Mon May 15 09:44:02 2006 -0700

    [PATCH] s390: lcs incorrect test
    
    While debugging why our LCS emulator is having some problems I noticed the
    following weirdness in drivers/s390/net/lcs.c routine lcs_irq.  The `if'
    statement is always true since SCHN_STAT_PCI is defined as 0x80.
    
    Cc: Martin Schwidefsky <schwidefsky@de.ibm.com>
    Cc: Heiko Carstens <heiko.carstens@de.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit ac924c6034d9095f95ee889f7e31bbb9145da0c2
Author: Andrew Morton <akpm@osdl.org>
Date:   Mon May 15 09:43:59 2006 -0700

    [PATCH] setup_per_zone_pages_min() overflow fix
    
    As pointed out in http://bugzilla.kernel.org/show_bug.cgi?id=6490, this
    function can experience overflows on 32-bit machines, causing our response to
    changed values of min_free_kbytes to go whacky.
    
    Fixing it efficiently is all too hard, so fix it with 64-bit math instead.
    
    Cc: Ake Sandgren <ake.sandgren@hpc2n.umu.se>
    Cc: Martin Bligh <mbligh@google.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 5afdbd6e84c7fbdaa7cfde4cbee0d3a5f4f56da2
Author: Heiko Carstens <heiko.carstens@de.ibm.com>
Date:   Mon May 15 09:43:59 2006 -0700

    [PATCH] s390: exploit rcu_needs_cpu() interface
    
    Exploit rcu_needs_cpu() interface to keep the cpu 'ticking' if necessary.
    
    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 986733e01d258c26107f1da9d8d47c718349ad2f
Author: Heiko Carstens <heiko.carstens@de.ibm.com>
Date:   Mon May 15 09:43:58 2006 -0700

    [PATCH] RCU: introduce rcu_needs_cpu() interface
    
    With "Paul E. McKenney" <paulmck@us.ibm.com>
    
    Introduce rcu_needs_cpu() interface.  This can be used to tell if there
    will be a new rcu batch on a cpu soon by looking at the curlist pointer.
    This can be used to avoid to enter a tickless idle state where the cpu
    would miss that a new batch is ready when rcu_start_batch would be called
    on a different cpu.
    
    Signed-off-by: Heiko Carstens <heiko.carstens@de.ibm.com>
    Cc: "Paul E. McKenney" <paulmck@us.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 3b7c8108273bed41a2fc04533cc9f2026ff38c8e
Author: Olaf Kirch <okir@suse.de>
Date:   Mon May 15 09:43:57 2006 -0700

    [PATCH] smbfs chroot issue (CVE-2006-1864)
    
    Mark Moseley reported that a chroot environment on a SMB share can be left
    via "cd ..\\".  Similar to CVE-2006-1863 issue with cifs, this fix is for
    smbfs.
    
    Steven French <sfrench@us.ibm.com> wrote:
    
    Looks fine to me.  This should catch the slash on lookup or equivalent,
    which will be all obvious paths of interest.
    
    Signed-off-by: Chris Wright <chrisw@sous-sol.org>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit a7b862f663d81858531dfccc0537bc9d8a2a4121
Author: Chris Wedgwood <cw@f00f.org>
Date:   Mon May 15 09:43:55 2006 -0700

    [PATCH] VIA quirk fixup, additional PCI IDs
    
    An earlier commit (75cf7456dd87335f574dcd53c4ae616a2ad71a11) changed an
    overly-zealous PCI quirk to only poke those VIA devices that need it.
    However, some PCI devices were not included in what I hope is now the full
    list.  Consequently we're failing to run the quirk on all machines which need
    it, causing IRQ routing failures.
    
    This should I hope correct this.
    
    Thanks to Masoud Sharbiani <masouds@masoud.ir> for pointing this out
    and testing the fix.
    
    Signed-off-by: Chris Wedgwood <cw@f00f.org>
    Cc: Greg KH <greg@kroah.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 73d58588091e81e5ee4266488e2fb09a410f1512
Author: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Date:   Mon May 15 09:43:53 2006 -0700

    [PATCH] pcmcia Oopses fixes
    
    Fix some NULL dereferences in the pcmcia code when using old userland
    tools.
    
    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Acked-by: Dominik Brodowski <linux@dominikbrodowski.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 94585136606e0598a93ec145d9a899c8ec9b2208
Author: Kylene Jo Hall <kjhall@us.ibm.com>
Date:   Mon May 15 09:43:53 2006 -0700

    [PATCH] tpm: update module dependencies
    
    The TIS driver is dependent upon information from the ACPI table for device
    discovery thus it compiles but does no actual work without this dependency.
    
    Signed-off-by: Kylene Hall <kjhall@us.ibm.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 90d5ede5985f3b172cc3ccd89bf8c52a209088a5
Author: Stefan Schweizer <genstef@gentoo.org>
Date:   Mon May 15 09:43:52 2006 -0700

    [PATCH] Fix capi reload by unregistering the correct major
    
    I am having the bug FATAL: Error inserting capi ([..]/capi.ko): Device or
    resource busy when I try to reload capi after loading it.  in dmesg:
    capi20: unable to get major 68
    
    Fix the issue which is caused by setting the major to zero when registering
    the chrdev succeeded.
    
    (akpm: this means that we can again not use `major=0' (dynamic major
    allocation) for this driver).
    
    Cc: Karsten Keil <kkeil@suse.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit a5370553952a9a414860d878b67c49eff11313bd
Author: Ian Kent <raven@themaw.net>
Date:   Mon May 15 09:43:51 2006 -0700

    [PATCH] autofs4: NFY_NONE wait race fix
    
    This patch fixes two problems.
    
    First, the comparison of entries in the waitq.c was incorrect.
    
    Second, the NFY_NONE check was incorrect. The test of whether the dentry
    is mounted if ineffective, for example, if an expire fails then we could
    wait forever on a non existant expire. The bug was identified by Jeff
    Moyer.
    
    The patch changes autofs4 to wait on expires only as this is all that's
    needed.  If there is no existing wait when autofs4_wait is call with a type
    of NFY_NONE it delays until either a wait appears or the the expire flag is
    cleared.
    
    Signed-off-by: Ian Kent <raven@themaw.net>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 6aff5cb8ec270db569800b1bb59bd20003a76f07
Author: Adrian Bunk <bunk@stusta.de>
Date:   Mon May 15 09:43:50 2006 -0700

    [PATCH] fs/open.c: unexport sys_openat
    
    Remove the unused EXPORT_SYMBOL_GPL(sys_openat).
    
    Signed-off-by: Adrian Bunk <bunk@stusta.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 0cccca06f9870eb6daa89357b8a99ad041865553
Author: Serge E. Hallyn <serue@us.ibm.com>
Date:   Mon May 15 09:43:48 2006 -0700

    [PATCH] selinux: check for failed kmalloc in security_sid_to_context()
    
    Check for NULL kmalloc return value before writing to it.
    
    Signed-off-by: Serge E. Hallyn <serue@us.ibm.com>
    Acked-by: James Morris <jmorris@namei.org>
    Cc: Stephen Smalley <sds@tycho.nsa.gov>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 9be2f7c38e0bd64e8a0f74ea68df1e73e2ddfcc3
Author: Linus Torvalds <torvalds@g5.osdl.org>
Date:   Sat May 13 08:01:23 2006 -0700

    Revert "[PATCH] i386: export: memory more than 4G through /proc/iomem"
    
    This reverts commit 10dbe196a8da6b3196881269c6639c0ec11c36cb.
    
    The resource struct is still 32-bit, so trying to save a 64-bit memory
    size there obviously won't work.
    
    When we merge the 64-bit resource series, we can re-enable this.
    
    Thanks to Sachin Sant and Maneesh Soni for debugging
    
    Cc: Maneesh Soni <maneesh@in.ibm.com>
    Cc: Sachin Sant <sachinp@in.ibm.com>
    Cc: Russell King <rmk+lkml@arm.linux.org.uk>
    Cc: Sharyathi Nagesh <sharyath@in.ibm.com>
    Cc: Arjan van de Ven <arjan@infradead.org>
    Cc: Vivek Goyal <vgoyal@in.ibm.com>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 032ebf2620ef99a4fedaa0f77dc2272095ac5863
Author: Linus Torvalds <torvalds@g5.osdl.org>
Date:   Fri May 12 18:42:09 2006 -0700

    Alternative fix for MMC oops on unmount after removal
    
    Make sure to clear the driverfs_dev pointer when we do del_gendisk() (on
    disk removal), so that other users that may still have a ref to the disk
    won't try to use the stale pointer.
    
    Also move the KOBJ_REMOVE uevent handler up, so that the uevent still
    has access to the driverfs_dev data.
    
    This all should hopefully fix the problems with MMC umounts after device
    removals that caused commit 56cf6504fc1c0c221b82cebc16a444b684140fb7 and
    its reversal (1a2acc9e9214699a99389e323e6686e9e0e2ca67).
    
    Original problem reported by Todd Blumer and others.
    
    Acked-by: Greg KH <gregkh@suse.de>
    Cc: Russell King <rmk+lkml@arm.linux.org.uk>
    Cc: James Bottomley <James.Bottomley@SteelEye.com>
    Cc: Erik Mouw <erik@harddisk-recovery.com>
    Cc: Andrew Vasquez <andrew.vasquez@qlogic.com>
    Cc: Todd Blumer <todd@sdgsystems.com>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit 8a2ae70a9b4dc88c83b4644c58d06d74f2cb70c9
Author: Ingo Molnar <mingo@elte.hu>
Date:   Tue May 2 09:00:31 2006 -0300

    V4L/DVB (3965): Fix CONFIG_VIDEO_VIVI=y build bug
    
    CONFIG_VIDEO_VIVI depends on CONFIG_VIDEO_BUF.
    
    Signed-off-by: Ingo Molnar <mingo@elte.hu>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 68a26aecb3829d013f612def3c8995efdbad3306
Author: Adrian Bunk <bunk@stusta.de>
Date:   Fri Apr 28 10:48:41 2006 -0300

    V4L/DVB (3964): Bt8xx/bttv-cards.c: fix off-by-one errors
    
    This patch fixes two off-by-one errors spotted by the Coverity checker.
    
    Signed-off-by: Adrian Bunk <bunk@stusta.de>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 1095136dee95d27d27cebc52bd502f7facee8600
Author: Andrew Morton <akpm@osdl.org>
Date:   Thu Apr 27 10:10:58 2006 -0300

    V4L/DVB (3914): Vivi build fix
    
    drivers/media/video/vivi.c: In function `vivi_map_sg':
    drivers/media/video/vivi.c:799: error: `DMA_NONE' undeclared (first use in this function)
    drivers/media/video/vivi.c:799: error: (Each undeclared identifier is reported only once
    drivers/media/video/vivi.c:799: error: for each function it appears in.)
    
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 765bf9770fda950e6615451ad1a4b8866bda7dfa
Author: Andrew Morton <akpm@osdl.org>
Date:   Thu Apr 27 10:09:27 2006 -0300

    V4L/DVB (3912): Sparc32 vivi fix
    
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit ba5f0a4e15e736d99d698ce498bd6f1f16d014cf
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Sun Apr 23 01:55:38 2006 -0300

    V4L/DVB (3832): Get_dvb_firmware: download nxt2002 firmware from new driver location
    
    BBTI has updated their driver, and removed the old one from their website.
    This patch updates the get_dvb_firmware script to download the firmware
    from the new driver location.
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit dd31d5ac7345b2c728bf7eb37b06383776174232
Author: Rusty Scott <rustys@ieee.org>
Date:   Sat Apr 22 16:15:07 2006 -0300

    V4L/DVB (3829): Fix frequency values in the ranges structures of the LG TDVS H06xF tuners
    
    Frequency range values in the current driver for the LG TDVS H06xF tuners
    appear to have been a transposing of the 5 in the mid range 160-455 instead
    of 165-450.
    This patch corrects the pll programming for these tuners as per the datasheet.
    
    Signed-off-by: Rusty Scott <rustys@ieee.org>
    Signed-off-by: Mac Michaels <wmichaels1@earthlink.net>
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 7bbbc0a28e6cfcef66e2180206257b959dad2006
Author: Mikhail Gusarov <dottedmag@dottedmag.net>
Date:   Thu Apr 20 13:18:50 2006 -0300

    V4L/DVB (3826): Saa7134: Missing 'break' in Terratec Cinergy 400 TV initialization
    
    There is a missing break in card initialization function. Might screw
    up initialization of Terratec Cinergy 400 TV.
    
    Signed-off-by: Mikhail Gusarov <dottedmag@dottedmag.net>
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 7d16eaa3d0d41a6e871e5c82720bcd006b202d55
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Sun Apr 23 05:54:56 2006 -0300

    V4L/DVB (3825): Remove broken 'fast firmware load' from cx25840.
    
    The fast firmware load hack in cx25840 uses private data. In fact, it
    breaks pvrusb2 and doesn't work at all with ivtv. It is a unsafe
    implementation and so it is removed.
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 5691c8473936508c51639b6ff8467e55d8b129c1
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Apr 19 20:40:01 2006 -0300

    V4L/DVB (3819): Cxusb-bluebird: bug-fix: power down corrupts frontend
    
    This patch prevents a bug where the frontend is unable to tune after waking
    from powered down state. Now, the device remains powered on until it is
    disconnected, just like the windows driver. It seems that the bluebird
    firmware is unable to successfully handle tuning after a powered down state.
    This patch fixes all of the FusionHDTV Bluebird USB2 devices. The Medion
    MD95700 will still behave as before, since it was unaffected by this bug.
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 7157e2b6ff6fdd24d7e54d9856aa24ea88527ca9
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Sun Apr 16 17:17:42 2006 -0300

    V4L/DVB (3813): Add support for TCL M2523_5N_E tuner.
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 70047f9cca231126981f360c79cde98ea30410b2
Author: Yeasah Pell <yeasah@schwide.net>
Date:   Thu Apr 13 17:26:22 2006 -0300

    V4L/DVB (3804): Tweak bandselect setup fox cx24123
    
    *) Allow forcing the bandselect value with a module parameter to
    facilitate determining the correct bandselect frequencies.
    *) Changes the bandselect frequency thresholds based on experiments
    with the above parameter in conjunction with the values in the spec.
    
    Signed-off-by: Yeasah Pell <yeasah at schwide.net>
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 0e4558ab4a89a127e0de36746552da9353e35f10
Author: Yeasah Pell <yeasah@schwide.net>
Date:   Thu Apr 13 17:24:13 2006 -0300

    V4L/DVB (3803): Various correctness fixes to tuning.
    
    *) Sets an additional tuner parameter (demodulator sample gain) that
    wasn't being set before.
    *) Removes the low symbol rate tuner parameter tweaks in the previous
    patch -- it appears those tweaks are not necessary with the demodulator
    sample gain set correctly.
    *) Cleanup and document the demodulator register initialization sequence.
    *) Change set_fec routine to disable FEC auto scan when a specific code
    rate is selected.
    *) Remove error message when reported FEC is invalid (which happens
    sometimes when the card has no signal)
    
    Signed-off-by: Yeasah Pell <yeasah at schwide.net>
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit dce1dfc2a5736bfc82df5d3fd6396022c7bbbbd8
Author: Yeasah Pell <yeasah@schwide.com>
Date:   Thu Apr 13 11:40:59 2006 -0300

    V4L/DVB (3797): Always wait for diseqc queue to become ready before transmitting a diseqc
message
    
    The previous DISEQC code didn't wait, so it was unreliable
    
    Signed-off-by: Yeasah Pell <yeasah at schwide.net>
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit caf970e09c42843eb3b8456fc0e815f9b5385873
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Thu Apr 13 11:29:13 2006 -0300

    V4L/DVB (3796): Add several debug messages to cx24123 code
    
    Current debug messages at cx24123 are next to useless, since they don't
    print the values sent/read to registers. With this patch, debug=1 will
    show comprehensive messages. debug=2 will show also read/write operations
    at I2C bus.
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>

commit a74b51fca9d9b6774413d700ade1e9ae1f0c0e75
Author: Vadim Catana <skystar@moldova.cc>
Date:   Thu Apr 13 10:19:52 2006 -0300

    V4L/DVB (3795): Fix for CX24123 & low symbol rates
    
    - fixed the reception of channels with low symbol rates.
      ( The VGA1 and VGA2 offsets recommended by cx24109 docs for
      symbol rates from 1 to 5 MSps do not work. I changed them
      to values found experimentally. The charge pump current
      and FILTUNE voltage are now set to values recommended in
      the docs. This improves reception for symbol rates < 15 MSps.
      The values written in the SYSSymbolRate registers are calculated
      with better precision. )
    
    - fixed the cx24123_get_fec() function. It was returning the values
      for DCII mode.
    - removed some unused variables
    
    Signed-off-by: Vadim Catana <skystar at moldova.cc>
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 3a63fc4bfd8579bda1f6a03b3fcb792f59cb15f8
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Tue Apr 11 18:16:22 2006 -0300

    V4L/DVB (3792): Kbuild: DVB_BT8XX must select DVB_ZL10353
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 7c908fbb0139fa1080412d0590189abfe2df87eb
Author: Eric Sesterhenn <snakebyte@gmx.de>
Date:   Tue Apr 11 18:19:33 2006 -0300

    V4L/DVB (3790): Use after free in drivers/media/video/em28xx/em28xx-video.c
    
    In several places we use dev->devno right after we kfree() dev.  This fixes
    coverity bug id #1065
    
    Signed-off-by: Eric Sesterhenn <snakebyte@gmx.de>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit b37492be25be5ff0551bff8b479e783498ebe838
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Tue Apr 11 18:07:49 2006 -0300

    V4L/DVB (3788): Fix compilation with V4L1_COMPAT
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 4fff598fc700a9f2089a3351a54e049d79faa631
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Sun Apr 9 16:20:19 2006 -0300

    V4L/DVB (3782): Removed uneeded stuff from pwc Makefile
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit c1d1ea9e0f83a89d7afa1c84fac8312e2e08c85e
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Sun Apr 9 15:51:18 2006 -0300

    V4L/DVB (3775): Add VIVI Kconfig stuff
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit cd41e28e2d0f198ad56840bf8ba13cb41b129bab
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Sun Apr 9 15:43:41 2006 -0300

    V4L/DVB (3774): Create V4L1 config options
    
    V4L1 API is depreciated and should be removed soon from kernel. This patch
    adds two new options, one to disable V4L1 drivers, and another to disable
    V4L1 compat module. This way, it would be easy to check what still depends
    on V4L1 stuff, allowing also to test if app works fine with V4L2 only support.
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit ea76ce526ec1af3e07f3dd9107ca93f0c82fc9c9
Author: Jose Alberto Reguero <jareguero@telefonica.net>
Date:   Tue Apr 11 10:19:25 2006 -0300

    V4L/DVB (3767): Pvr350 tv out (saa7127)
    
    Witout this patch tv out don't work properly with my pvr350 card.
    
    Signed-off-by: Jose Alberto Reguero <jareguero@telefonica.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit bba3ad76a82eb458d31b136fa2414216e20c99cc
Author: Duncan Sands <duncan.sands@math.u-psud.fr>
Date:   Tue Apr 11 10:18:57 2006 -0300

    V4L/DVB (3766): Correct buffer size calculations in cx88-core.c
    
    The computation in cx88_risc_buffer suffers from the mistake:
    a non-zero padding value can cause more page borders to be crossed,
    leading to big buffer over-runs.
    This patch changes the additive constant from 3 + 4 to 4
    It also changees the constant in cx88_risc_databuffer from 3 + 4 to 2,
    because 2 dwords are the correct vaule.
    
    Signed-off-by: Duncan Sands <baldrick@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 9175b8544ff7b73b158df370acc1d828b28b80b7
Author: Trent Piepho <xyzzy@speakeasy.org>
Date:   Mon Apr 10 09:40:37 2006 -0300

    V4L/DVB (3763): Bug fix: Wrong tuner was used pcHDTV HD-3000 card
    
    It looks like the HD3000 was prototyped with the 7610 tuner when
    the driver was developed, but the cards appear to have always shipped
    with the 7612 tuner and the driver was never adjusted for it.
    The definition needs to be corrected.
    - The HD-3000 was prototyped with a Thomson DTT7610,
      but production versions used a DTT7612 tuner.
    - This patch changes both dvb-pll settings and V4L tuner type.
    
    Signed-off-by: Trent Piepho <xyzzy@speakeasy.org>
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit f1de3e7c5c9d8e65937addce83b42331bdad15a1
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Fri Apr 7 18:50:09 2006 -0300

    V4L/DVB (3745): Fix a bug at pluto2 Makefile
    
    When pluto2 were selected, all other module dependencies were
    just discarded.
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit a064fad337e27cfe74c04509e88ef4d2c9138ec2
Author: Andrew de Quincey <adq_dvb@lidskialf.net>
Date:   Thu Apr 6 17:05:46 2006 -0300

    V4L/DVB (3743): Fix some more potential oopses
    
    Spotted a couple more places where it fails to check if
    dvb_register_adapter() fails.
    
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 6445401673fe486ba15a39370d41100df6d73b1f
Author: Andrew de Quincey <adq_dvb@lidskialf.net>
Date:   Thu Apr 6 14:32:23 2006 -0300

    V4L/DVB (3742): Set tone/voltage again if the frontend was reinitialised
    
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 71a8dffb07ae40af87b2f7b93dcd5810e2c558bf
Author: Andrew de Quincey <adq_dvb@lidskialf.net>
Date:   Thu Apr 6 09:42:46 2006 -0300

    V4L/DVB (3740): Fix oops in budget-av with CI
    
    Now that the CI code reinitialises the frontend, need to move the CI
    initialisation to after the frontend init in order to ensure the frontend is
    always in a good state. Fixes an oops caused by the frontend being NULL as
    well.
    
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 7a766f9ddd74b50d6069f054a3004ece0439f5c1
Author: Sergey Vlasov <vsu@altlinux.ru>
Date:   Fri Apr 7 10:04:56 2006 -0300

    V4L/DVB (3738): Saa7134: Fix oops with disable_ir=1
    
    When disable_ir=1 parameter is used, or when saa7134_input_init1()
    fails for any other reason, dev->remote will remain NULL, and the
    driver will oops in saa7134_hwinit2().  Therefore dev->remote must be
    checked before dereferencing.
    
    Signed-off-by: Sergey Vlasov <vsu@altlinux.ru>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit a7286033f951ebc78527e63f335516ea2f95e142
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Tue Apr 4 22:23:04 2006 -0300

    V4L/DVB (3731): Kbuild: drivers/media/video/bt8xx: remove $(src) from include path
    
    - replaced '$(src)/..' with 'drivers/media/video'
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 96b194c12e1206e5cdccf55ea71bb38ce1124bd9
Author: Andrew de Quincey <adq_dvb@lidskialf.net>
Date:   Wed Apr 5 14:09:45 2006 -0300

    V4L/DVB (3726): Fix TT budget-ci 1.1 CI slots
    
    It turns out the firmware on the TT budget-ci 1.1 slots doesn't generate
    interrupts. This patch adds support for this using polling mode on these
    slots.
    
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit f47f4763cde162656448fcd1ada9d5e8101a00d2
Author: Andrew de Quincey <adq_dvb@lidskialf.net>
Date:   Tue Apr 4 09:41:47 2006 -0300

    V4L/DVB (3725): Fix mutex in dvb_register_device to work.
    
    This mutex is meant to stop two devices getting the same ID. dvbdev_get_free_id()
    scans the list of already allocated devices to find a free id.
    Unfortunately, since the mutex is unlocked before the card is added to the
    above list, it is still possible for two of them to get the same id.
    Its debatable whether this mutex lock is actually needed, but I'm unwilling
    to just remove it in case something does depend on it.
    
    Signed-off-by: Andrew de Quincey <adq_dvb@lidskialf.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 3203f94a25ea04b3052d22c7be9518538862d88f
Author: Duncan Sands <baldrick@free.fr>
Date:   Sun Apr 2 04:14:57 2006 -0300

    V4L/DVB (3704): Fix some errors on bttv_risc_overlay
    
    There are tree mistakes on bttv_risc_overlay.
    1) When skip_odd is true, the number of lines for which
    instructions are written is (height+1)/2, not height/2.
    2) This occurs when clipping: the number of instruction bytes
    written can be as much as 8 + 12*nclips, not 8 + 8*nclips, as
    currently estimated.
    3) Coverity check were wrong with nskips=0, since it means that
    it can clipped at most one line.
    
    Signed-off-by: Duncan Sands <baldrick@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 1b52fa98edd1c3e663ea4a06519e3d20976084a8
Author: Sean Hefty <mshefty@ichips.intel.com>
Date:   Fri May 12 14:57:52 2006 -0700

    IB: refcount race fixes
    
    Fix race condition during destruction calls to avoid possibility of
    accessing object after it has been freed.  Instead of waking up a wait
    queue directly, which is susceptible to a race where the object is
    freed between the reference count going to 0 and the wake_up(), use a
    completion to wait in the function doing the freeing.
    
    Signed-off-by: Sean Hefty <sean.hefty@intel.com>
    Signed-off-by: Roland Dreier <rolandd@cisco.com>

commit 6f4bb3d8205d943acafa2f536f37131777524b67
Author: Roland Dreier <rolandd@cisco.com>
Date:   Fri May 12 14:57:52 2006 -0700

    IB/ipath: Properly terminate PCI ID table
    
    The ipath driver's table of PCI IDs needs a { 0, } entry at the end.
    This makes all of the device aliases visible to userspace so hotplug
    loads the module for all supported devices.  Without the patch,
    modinfo ipath_core only shows:
    
        alias:          pci:v00001FC1d0000000Dsv*sd*bc*sc*i*
    
    instead of the correct:
    
        alias:          pci:v00001FC1d00000010sv*sd*bc*sc*i*
        alias:          pci:v00001FC1d0000000Dsv*sd*bc*sc*i*
    
    Signed-off-by: Roland Dreier <rolandd@cisco.com>
    Signed-off-by: Bryan O'Sullivan <bos@pathscale.com>

commit bd89efc532fe41f867f848144cc8b42054ddf6f9
Author: Simon Kelley <simon@thekelleys.org.uk>
Date:   Fri May 12 14:56:08 2006 -0700

    [NEIGH]: Fix IP-over-ATM and ARP interaction.
    
    The classical IP over ATM code maintains its own IPv4 <-> <ATM stuff>
    ARP table, using the standard neighbour-table code. The
    neigh_table_init function adds this neighbour table to a linked list
    of all neighbor tables which is used by the functions neigh_delete()
    neigh_add() and neightbl_set(), all called by the netlink code.
    
    Once the ATM neighbour table is added to the list, there are two
    tables with family == AF_INET there, and ARP entries sent via netlink
    go into the first table with matching family. This is indeterminate
    and often wrong.
    
    To see the bug, on a kernel with CLIP enabled, create a standard IPv4
    ARP entry by pinging an unused address on a local subnet. Then attempt
    to complete that entry by doing
    
    ip neigh replace <ip address> lladdr <some mac address> nud reachable
    
    Looking at the ARP tables by using
    
    ip neigh show
    
    will reveal two ARP entries for the same address. One of these can be
    found in /proc/net/arp, and the other in /proc/net/atm/arp.
    
    This patch adds a new function, neigh_table_init_no_netlink() which
    does everything the neigh_table_init() does, except add the table to
    the netlink all-arp-tables chain. In addition neigh_table_init() has a
    check that all tables on the chain have a distinct address family.
    The init call in clip.c is changed to call
    neigh_table_init_no_netlink().
    
    Since ATM ARP tables are rather more complicated than can currently be
    handled by the available rtattrs in the netlink protocol, no
    functionality is lost by this patch, and non-ATM ARP manipulation via
    netlink is rescued. A more complete solution would involve a rtattr
    for ATM ARP entries and some way for the netlink code to give
    neigh_add and friends more information than just address family with
    which to find the correct ARP table.
    
    [ I've changed the assertion checking in neigh_table_init() to not
      use BUG_ON() while holding neigh_tbl_lock.  Instead we remember that
      we found an existing tbl with the same family, and after dropping
      the lock we'll give a diagnostic kernel log message and a stack dump.
      -DaveM ]
    
    Signed-off-by: Simon Kelley <simon@thekelleys.org.uk>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 586152560ae8df2a9babf1a8b667d7a145cb8208
Author: Martin Habets <errandir_news@mph.eclipse.co.uk>
Date:   Fri May 12 12:53:59 2006 -0700

    [SPARC]: Fix warning on prom_getproperty in openprom.c
    
    Signed-off-by: Martin Habets <errandir_news@mph.eclipse.co.uk>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit ef34814426862c41c061520d4ac833be5914b5ba
Author: Karsten Keil <kkeil@suse.de>
Date:   Fri May 12 12:49:08 2006 -0700

    [TG3]: ethtool always report port is TP.
    
    Even with fiber cards ethtool reports that the connected port is TP,
    the patch fix this.
    
    Signed-off-by: Karsten Keil <kkeil@suse.de>
    Acked-by: Michael Chan <mchan@broadcom.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 06a1be167ea77c436657587e26cd4d7d6401784c
Author: David S. Miller <davem@sunset.davemloft.net>
Date:   Fri May 12 12:45:50 2006 -0700

    [SPARC]: Handle UNWIND_INFO properly.
    
    For sparc32 we need R_SPARC_UA32 relocation support, for
    sparc64 we need the handle R_SPARC_DISP32 relocations.
    
    Based upon reports and initial patch by Martin Habets.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 1a2acc9e9214699a99389e323e6686e9e0e2ca67
Author: Linus Torvalds <torvalds@g5.osdl.org>
Date:   Fri May 12 12:08:46 2006 -0700

    Revert "[BLOCK] Fix oops on removal of SD/MMC card"
    
    This reverts commit 56cf6504fc1c0c221b82cebc16a444b684140fb7.
    
    Both Erik Mouw and Andrew Vasquez independently pinpointed this commit
    as causing problems, where the slab cache for a driver is never released
    (most obviously causing problems when immediately re-loading that
    driver, resulting in a "kmem_cache_create: duplicate cache <xyz>"
    message, but it can also cause other trouble).
    
    James Bottomley dug into it, and reports:
    
      "OK, here's the scoop.  The problem patch adds a get of driverfs_dev in
       add_disk(), but doesn't put it again until disk_release() (which occurs
       on final put_disk() of the gendisk).
    
       However, in SCSI, the driverfs_dev is the sdev_gendev.  That means
       there's a reference held on sdev_gendev  until final disk put.
       Unfortunately, we use the driver model driver_remove to trigger
       del_gendisk (which removes the gendisk from visibility and decrements
       the refcount), so we've introduced an unbreakable deadlock in the
       reference counting with this.
    
       I suggest simply reversing this patch at the moment.  If Russell and
       Jens can tell me what they're trying to do I'll see if there's another
       way to do it."
    
    so hereby the patch gets reverted, waiting for a better fix.
    
    Cc: Jens Axboe <axboe@suse.de>
    Cc: Russell King <rmk@arm.linux.org.uk>
    Cc: James Bottomley <James.Bottomley@SteelEye.com>
    Cc: Erik Mouw <erik@harddisk-recovery.com>
    Cc: Andrew Vasquez <andrew.vasquez@qlogic.com>
    Signed-off-by: Linus Torvalds <torvalds@osdl.org>

commit df3fccb14ad02c5fabe095a104a0323c223f2833
Author: Greg Kroah-Hartman <gregkh@suse.de>
Date:   Tue May 2 08:44:45 2006 +0200

    [PATCH] USB: fix omninet driver bug
    
    I introduced this way back in 2.6.13 when adding the port lock logic.
    This device talks out through different "ports" all at the same time, so
    the lock logic was wrong, preventing any data from ever being sent
    properly.
    
    Thanks a lot to Bernhard Reiter <bernhard@intevation.de> for being
    patient and helping with debugging this.
    
    Cc: Bernhard Reiter <bernhard@intevation.de>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 815ddc99dd8108908d14c699a37d0f5974da6def
Author: Greg Kroah-Hartman <gregkh@suse.de>
Date:   Fri May 12 11:05:29 2006 -0700

    [PATCH] USB: add ark3116 usb to serial driver
    
    Based on Simon's original driver, with some minor code cleanups and
    tidying by me.
    
    Cc: Simon Schulz <simon@auctionant.de>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 71a84163ca6b4e36744978385e94150af32f9d75
Author: Luiz Fernando Capitulino <lcapitulino@mandriva.com.br>
Date:   Thu May 11 22:34:24 2006 -0300

    [PATCH] usbserial: Fixes leak in serial_open() error path.
    
    If serial_open() fails at the port assignment or mutex_lock_interruptible()
    is interrupted, the 'serial' object will never be freed.
    
    We should call kref_put() when those errors happens.
    
    Signed-off-by: Luiz Fernando N. Capitulino <lcapitulino@mandriva.com.br>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 704936a25bda9bb12e35bb222d5e3f26186dc279
Author: Luiz Fernando Capitulino <lcapitulino@mandriva.com.br>
Date:   Thu May 11 22:34:17 2006 -0300

    [PATCH] usbserial: Fixes use-after-free in serial_open().
    
    If the device is disconnected while serial_open() is executing and
    either try_module_get() or the device specific open function fails, the
    kref_put() call in the 'bailout_kref_put' label will free the memory
    pointed out by 'port'.
    
    The subsequent dereferences in the 'bailout_kref_put' label will be
    invalid.
    
    The fix is just to assure kref_put() is called after any 'port' usage.
    
    Signed-off-by: Luiz Fernando N. Capitulino <lcapitulino@mandriva.com.br>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 16c23f7d88cbcce491f9370b2846fad66e8ef319
Author: Monty <xiphmont@xiph.org>
Date:   Tue May 9 12:37:22 2006 -0700

    [PATCH] USB: Emagic USB firmware loading fixes
    
    It's become apparent as machines get faster that the emagic kernel firmware
    loaders (based on the ezusb loader) have a reset race.  a 400MHz TiBook
    never tripped it, but a 2GHz Pentium M seems to hit it about 30% of the
    time.  The bug is seen as a hung USB box and the kernel error:
    
    drivers/usb/misc/emi62.c: emi62_load_firmware - error loading firmware:
    error = -110
    
    The patch below inserts a delay after deasserting reset to allow the box to
    settle before a new command is issued.  This affects only device startup.
    
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 332bbf613868a5d5938ad9fb7436b2beae72d53d
Author: Olaf Hering <olh@suse.de>
Date:   Fri May 5 11:07:21 2006 +0200

    [PATCH] USB: add an IBM USB keyboard to the HID_QUIRK_NOGET blacklist
    
    After recent changes, the USB keyboard as shipped with IBM pSeries systems
    does not work anymore, unless the keyboard is replugged after reboot.
    Adding this model to the blacklist fixes it.
    
    Signed-off-by: Olaf Hering <olh@suse.de>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit b68f7de02ae380ddb4e5e457e3fe945ddfd0aa08
Author: Ken Brush <ken@new.cgi101.com>
Date:   Mon May 8 20:24:12 2006 -0500

    [PATCH] USB: Add Sieraa Wireless 580 evdo card to airprime.c
    
    This adds the Sierra Wireless card to airprime.c.
    
    I tested this on my laptop.
    
    Signed-off-by: Ken Brush <ken@cgi101.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 95563d343fec8d3e2f667c95230ac4ab7674b757
Author: Jordan Crouse <jordan.crouse@amd.com>
Date:   Fri Apr 28 22:53:30 2006 +0200

    [PATCH] scx200_acb: Fix for the CS5535 errata
    
    This is a fix for the CS5535 errata 111:
    
    When the SMBus controller tries to access a non-existing device, it sets
    the NEGACK bit, SMBus I/O offset 01h[4], to 1 after it detects no
    acknowledge at the ninth clock.  The specification states that the bit
    can be cleared by writing a 1 to it, but under certain circumstances it
    is possible for this bit to not clear.
    
    Writing a 0 to the bit resets the internal state machine and clears the
    issue.
    
    Since all writable bits in ACBST are W1C bits (write-one-to-clear) the
    second write doesn't affect any other logic except the buggy NEGACK
    state machine. The second write clears an internal register which is
    responsible for "overwriting" the NEGACK bit in ACBST.
    
    Signed-off-by: Jordan Crouse <jordan.crouse@amd.com>
    Signed-off-by: Andrew Morton <akpm@osdl.org>
    Signed-off-by: Jean Delvare <khali@linux-fr.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit b33d0798e6cfae1fcee75afc808fe5690a48a814
Author: Jean Delvare <khali@linux-fr.org>
Date:   Wed Apr 26 23:00:16 2006 +0200

    [PATCH] scx200_acb: Fix resource name use after free
    
    We can't pass a string on the stack to request_region. As soon as we
    leave the function that stack is gone and the string is lost. Let's
    use the same string we identify the i2c_adapter with instead, it's
    more simple, more consistent, and just works.
    
    This is the second half of fix to bug #6445.
    
    Signed-off-by: Jean Delvare <khali@linux-fr.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 6f9c2963888e60e46a9e0bd09a25740abce29262
Author: Jean Delvare <khali@linux-fr.org>
Date:   Wed Apr 26 22:50:32 2006 +0200

    [PATCH] scx200_acb: Fix return on init error
    
    The scx200_acb driver shouldn't return failure after initialization
    if it successfully registered at least one i2c_adapter, else we are
    leaking resources. The driver was OK in that respect up to 2.6.16, a
    recent change broke it.
    
    This is part of the fix to bug #6445.
    
    Signed-off-by: Jean Delvare <khali@linux-fr.org>
    Cc: Ben Gardner <bgardner@wabtec.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 72a9f958421a519e69b3e7b409948c3a294f4a32
Author: Razvan Gavril <razvan.g@plutohome.com>
Date:   Thu May 4 11:35:49 2006 +0300

    [PATCH] USB: ftdi_sio: add device id for ACT Solutions HomePro ZWave interface
    
    Signed-off-by: Razvan Gavril <razvan.g@plutohome.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 20a0f47e18c646bcc772282512fc59e56b2fc968
Author: Ian Abbott <abbotti@mev.co.uk>
Date:   Thu May 4 11:34:25 2006 +0100

    [PATCH] USB: ftdi_sio: Add support for HCG HF Dual ISO RFID Reader
    
    This patch adds support for ACG Identification Technologies GmbH's HF
    Dual ISO Reader (an RFID tag reader) to the ftdi_sio driver's device ID
    table.  The product ID was supplied by anotonios (anton at goto10 dot
    org) on the ftdi-usb-sio-devel list and subsequently verified by myself
    (Ian Abbott).
    
    Signed-off-by: Ian Abbott <abbotti@mev.co.uk>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 77ef6c4d6e23653a79eedacdd6d1d0da7083e59c
Author: Pete Zaitcev <zaitcev@redhat.com>
Date:   Wed May 3 00:16:00 2006 -0700

    [PATCH] USB: ub oops in block_uevent
    
    In kernel 2.6.16, if a mounted storage device is removed, an oops happens
    because ub supplies an interface device (and kobject) to the block layer,
    but neglects to pin it. And apparently, the block layer expects its users
    to pin device structures.
    
    The code in ub was broken this way for years. But the bug was exposed only
    by 2.6.16 when it started to call block_uevent on close, which traverses
    device structures (kobjects actually).
    
    Signed-off-by: Pete Zaitcev <zaitcev@redhat.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 436f5762bcd4929825a0725d4bc78337e6fc0d8f
Author: Alan Stern <stern@rowland.harvard.edu>
Date:   Tue May 2 15:22:41 2006 -0400

    [PATCH] USB: usbcore: don't check the device's power source
    
    The choose_configuration() routine contains code the determine the
    device's power source, so that configurations requiring external power
    can be ruled out if the device is running on bus power.  Unfortunately
    it turns out that some devices have errors in their config descriptors
    and other devices don't like the GET_DEVICE_STATUS request.
    
    Since that information wasn't used for anything else, this patch (as673)
    removes the code, leaving only a comment.  It fixes bugzilla entry
    #6448.
    
    Signed-off-by: Alan Stern <stern@rowland.harvard.edu>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit db4cefaaea4c6d67cdaebfd315abc791c5c9d22f
Author: David Brownell <david-b@pacbell.net>
Date:   Mon May 1 22:07:13 2006 -0700

    [PATCH] USB: fix OHCI PM regression
    
    This fixes a small regression in USB controller power usage for many
    OHCI controllers, notably including every non-PCI version of OHCI:  on
    those systems, the runtime autosuspend mechanism is no longer enabled.
    
    The change moves to saner defaults.  All root hubs are expected to handle
    remote wakeup (and hence autosuspend), although drivers for buggy silicon
    may override that default.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 7e713b825610de9a9584c189c72e2d9f2326359c
Author: David Brownell <david-b@pacbell.net>
Date:   Mon May 1 14:02:45 2006 -0700

    [PATCH] USB: pegasus fixes (logstorm, suspend)
    
    Teach "pegasus" to handle a few of the disconnect fault paths
    without hundreds of usless syslog messages.
    
    Handle the carrier check workqueue entry even if the driver has
    not been opened.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 6275cdfa0fe032208937a3567ebb8bcfd42d20b1
Author: Duncan Sands <duncan.sands@math.u-psud.fr>
Date:   Fri Apr 28 18:52:16 2006 +0200

    [PATCH] USBATM: fix modinfo output
    
    Because of the way stringify works, using an expression
    like 64 * 1024 for UDSL_MAX_BUF_SIZE results in 64 * 1024
    turning up in the modinfo output instead of 65536.  So use
    65536 directly (this was the only way I found of fixing this).
    
    Signed-off-by: Duncan Sands <baldrick@free.fr>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 67c752b41a4238c1a2d7eebcd061ff8c1127d3e9
Author: Duncan Sands <duncan.sands@math.u-psud.fr>
Date:   Fri Apr 28 18:44:06 2006 +0200

    [PATCH] USBATM: change the default speedtouch iso altsetting
    
    The maximum possible bandwidth for a speedtouch modem is about 7Mbaud.
    You can only get this by using isochronous urbs (enable_isoc=1) and
    altsetting 3.  With the current default altsetting of 2, the modem
    maxes out at about 4Mbaud.  So change the default altsetting to 3
    when using isochronous urbs.  It would be nice to base the altsetting
    on the detected line speed, but that's hard given the current design.
    
    Signed-off-by: Duncan Sands <baldrick@free.fr>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 839ab1d4ce4dfd7e6c189391a82c584292488b41
Author: David Brownell <david-b@pacbell.net>
Date:   Wed Apr 26 14:39:11 2006 -0700

    [PATCH] USB: fix bug in ohci-hcd.c ohci_restart()
    
    A loop on a power-lost resume path used the wrong index.
    I suspect khubd has been working around such bugs.
    Noticed by Andreas Mohr <andi@rhlx01.fht-esslingen.de>.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 1f8aa2f66b7253d1a42ead0142c7a00d2df5ac89
Author: David S. Miller <davem@sunset.davemloft.net>
Date:   Mon May 8 15:13:14 2006 -0700

    [SPARC64]: Update defconfig.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 4cfbd7eb24975e942c3b6c0119c953c3a7a5f787
Author: Martin Habets <errandir_news@mph.eclipse.co.uk>
Date:   Sun May 7 23:43:19 2006 -0700

    [SPARC]: show device name in /proc/dvma_map
    
    This patch will set the device name in a resource, which will be shown
    in /proc/dvma_map.
    
    Signed-off-by: Martin Habets <errandir_news@mph.eclipse.co.uk>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit bb3426ad6659282d9244d4909e69aa639d0360d0
Author: Martin Habets <errandir_news@mph.eclipse.co.uk>
Date:   Sun May 7 23:04:06 2006 -0700

    [SPARC]: Remove duplicate symbol exports
    
    This patch resolves the following build warnings seen in 2.6.17-rc3:
    WARNING: vmlinux: 'sys_close' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'memchr' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strstr' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strnlen' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strrchr' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strchr' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strcmp' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strncat' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strcat' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strncpy' exported twice. Previous export was in vmlinux
    WARNING: vmlinux: 'strcpy' exported twice. Previous export was in vmlinux
    
    Signed-off-by: Martin Habets <errandir_news@mph.eclipse.co.uk>
    Signed-off-by: David S. Miller <davem@davemloft.net>



(Log in to post comments)

Copyright © 2006, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds