ChangeSet@1.1530, 2003-12-16 07:51:55-08:00, axboe@suse.de
[PATCH] Fix IDE bus reset and DMA disable when reading blank DVD-R
From Jon Burgess:
There is a problems with blank DVD media using the ide-cd driver.
When we attempt to read the blank disk, the drive responds to the read
request by returning a "blank media" error. The kernel doesn't have
any special case handling for this sense value and retries the request
a couple of times, then gives up and does a bus reset and disables DMA
to the device.
Which obviously doesn't help the situation.
The sense key value of 8 isn't listed in ide-cd.h, but it is listed in
scsi.h as a "BLANK_CHECK" error.
This trivial patch treats this error condition as a reason to abort
the request. This behaviour is the same as what we do with a blank CD-R.
It looks like the same fix might be desired for 2.4 as well, although
is perhaps not so important since scsi-ide is normally used instead.
ChangeSet@1.1515.1.8, 2003-12-15 16:35:56-08:00, neilb@cse.unsw.edu.au
[PATCH] Fix possible bio corruption with RAID5
1/ make sure raid5 doesn't try to handle multiple overlaping
requests at the same time as this would confuse things badly.
Currently it justs BUGs if this is attempted.
2/ Fix a possible data-loss-on-write problem. If two or
more bio's that write to the same page are processed at the
same time, only the first was actually commited to storage.
3/ Fix a use-after-free bug. raid5 keeps the bio's it is given
in linked lists when more than one bio touch a single page.
In some cases the tail of this list can be freed, and
the current test for 'are we at the end' isn't reliable.
This patch strengths the test to make it reliable.
ChangeSet@1.1515.1.7, 2003-12-14 18:28:27-08:00, torvalds@home.osdl.org
Fix thread group leader zombie leak
Petr Vandrovec noticed a problem where the thread group leader
would not be properly reaped if the parent of the thread group
was ignoring SIGCHLD, and the thread group leader had exited
before the last sub-thread.
Fixed by Ingo Molnar.
ChangeSet@1.1515.1.6, 2003-12-13 21:36:30-08:00, torvalds@home.osdl.org
More subtle SMP bugs in prepare_to_wait()/finish_wait().
This time we have a SMP memory ordering issue in prepare_to_wait(),
where we really need to make sure that subsequent tests for the
event we are waiting for can not migrate up to before the wait
queue has been set up.
ChangeSet@1.1515.1.5, 2003-12-13 11:45:10-08:00, l.s.r@web.de
[PATCH] HPFS: missing lock_kernel() in hpfs_readdir()
In 2.5.x, the BKL was pushed from vfs_readdir() into the filesystem
specific functions. But only the unlock_kernel() made it into the HPFS
code, lock_kernel() got lost on the way. This rendered the filesystem
unusable.
This adds the missing lock_kernel(). It's been tested by Timo Maier who
also reported the problem earlier today.
ChangeSet@1.1515.1.4, 2003-12-13 11:42:12-08:00, axboe@suse.de
[PATCH] no bio unmap on cdb copy failure
The previous scsi_ioctl.c patch didn't cleanup the buffer/bio in the
error case.
Fix it by copying the command data earlier.
ChangeSet@1.1515.1.3, 2003-12-12 14:20:08-08:00, torvalds@home.osdl.org
Fix subtle bug in "finish_wait()", which can cause kernel stack
corruption on SMP because of another CPU still accessing a waitqueue
even after it was de-allocated.
Use a careful version of the list emptiness check to make sure we
don't de-allocate the stack frame before the waitqueue is all done.
ChangeSet@1.1528, 2003-12-11 09:49:24-08:00, greg@kroah.com
kobject: fix bug where a parent could be deleted before a child device.
ChangeSet@1.1526, 2003-12-10 16:00:53-08:00, arvidjaar@mail.ru
[PATCH] USB: prevent catch-all USB aliases in modules.alias
visor.c defines one empty slot in USB ids table that can be filled in at
runtime using module parameters. file2alias generates catch-all alias for it:
alias usb:v*p*dl*dh*dc*dsc*dp*ic*isc*ip* visor
patch adds the same sanity check as in depmod to scripts/file2alias.
ChangeSet@1.1525, 2003-12-10 14:39:48-08:00, greg@kroah.com
[PATCH] USB: fix bug for multiple opens on ttyUSB devices.
This patch fixes the bug where running ppp over a ttyUSB device would fail.
ChangeSet@1.1524, 2003-12-09 17:40:44-08:00, herbert@gondor.apana.org.au
[PATCH] USB: Fix connect/disconnect race
This patch was integrated by you in 2.4 six months ago. Unfortunately
it never got into 2.5. Without it you can end up with crashes such
as http://bugs.debian.org/218670
ChangeSet@1.1523, 2003-12-09 15:41:57-08:00, stern@rowland.harvard.edu
[PATCH] USB: fix bug not setting device state following usb_device_reset()
ChangeSet@1.1522, 2003-12-09 10:18:07-08:00, oliver@neukum.org
[PATCH] USB: fix race with signal delivery in usbfs
apart from locking bugs, there are other races. This fixes one with
signal delivery. The signal should be delivered _before_ the reciever
is woken.
ChangeSet@1.1521, 2003-12-09 10:00:49-08:00, oliver@neukum.org
[PATCH] USB: fix sleping in interrupt bug in auerswald driver
this fixes two instances of GFP_KERNEL from completion handlers.
ChangeSet@1.1520, 2003-12-09 09:42:34-08:00, trini@kernel.crashing.org
[PATCH] USB: mark the scanner driver as obsolete
On Mon, Dec 01, 2003 at 11:21:58AM -0800, Greg KH wrote:
> Can't you use xsane without the scanner kernel driver? I thought the
> latest versions used libusb/usbfs to talk directly to the hardware.
> Because of this, the USB scanner driver is marked to be removed from the
> kernel sometime in the near future.
After a bit of mucking around (and possibly finding a bug with debian's
libusb/xsane/hotplug interaction, nothing seems to run
/etc/hotplug/usb/libusbscanner and thus only root can scan, anyone whose
got this working please let me know), the problem does not exist if I
only use libusb xsane.
How about the following:
ChangeSet@1.1519, 2003-12-09 09:35:37-08:00, mdharm-usb@one-eyed-alien.net
[PATCH] USB storage: fix for jumpshot and datafab devices
This patch fixes some obvious errors in the jumpshot and datafab drivers.
This should close out Bugzilla bug #1408
> Date: Mon, 1 Dec 2003 12:14:53 -0500 (EST)
> From: Alan Stern <stern@rowland.harvard.edu>
> Subject: Patch from Eduard Hasenleithner
> To: Matthew Dharm <mdharm-usb@one-eyed-alien.net>
> cc: USB Storage List <usb-storage@one-eyed-alien.net>
>
> Matt:
>
> Did you see this patch? It was posted to the usb-development mailing list
> about a week ago, before I started making all my changes. It is clearly
> correct and necessary.
>
> Alan Stern
ChangeSet@1.1515.1.2, 2003-12-09 09:03:05-08:00, axboe@suse.de
[PATCH] scsi_ioctl memcpy'ing user address
James reported a bug in scsi_ioctl.c where it mem copies a user pointer
instead of using copy_from_user(). I inadvertently introduced this one
when getting rid of CDROM_SEND_PACKET. Here's a trivial patch to fix it.
ChangeSet@1.1515.1.1, 2003-12-08 21:40:01-08:00, acme@conectiva.com.br
[IPV6]: Fix TCP socket leak.
TCP IPV6 ->hash() method should not grab a socket reference.
ChangeSet@1.1518, 2003-12-08 13:58:14-08:00, greg@kroah.com
[PATCH] USB: fix race with hub devices disconnecting while stuff is still happening to them.
ChangeSet@1.1517, 2003-12-08 13:28:46-08:00, david-b@pacbell.net
[PATCH] USB: fix remove device after set_configuration
If a device can't be configured, the current test9 code forgets
to clean it out of sysfs. This resolves that issue, so the retry
in usb_new_device() stands a chance of working.
The enumeration code still doesn't handle such errors well, but
at least this way that hub port can be used for another device.
ChangeSet@1.1516, 2003-12-08 11:10:51-08:00, greg@kroah.com
[PATCH] USB: register usb-serial ports in the proper place in sysfs
They should be bound to the interface the driver is attached to, not
the device.
ChangeSet@1.1515, 2003-12-07 21:57:40-08:00, James_McMechan@hotmail.com
[PATCH] tmpfs oops fix
The problem was that the cursor was in the list being walked, and when
the pointer pointed to the cursor the list_del/list_add_tail pair would
oops trying to find the entry pointed to by the prev pointer of the
deleted cursor element.
The solution I found was to move the list_del earlier, before the
beginning of the list walk. since it is not used during the list walk and
should not count in the list enumeration it can be deleted, then the
list pointer cannot point to it so it can be added safely with the
list_add_tail without oopsing, and everything works as expected.
I am unable to oops this version with any of my test programs.
Patch acked by Al Viro.
ChangeSet@1.1512.1.2, 2003-12-07 19:33:36-08:00, devik@cdi.cz
[PKT_SCHED]: In HTB, filters must be destroyed before the classes.
ChangeSet@1.1512.1.1, 2003-12-07 19:31:37-08:00, davem@nuts.ninka.net
[PKT_SCHED]: Do not dereference the special pointer value 'HTB_DIRECT'.
Based upon a patch from devik.
ChangeSet@1.1513, 2003-12-07 11:00:48-08:00, jgarzik@pobox.com
[PATCH] wireless airo oops fix
From Javier Achirica:
Delay MIC activation to prevent Oops
ChangeSet@1.1512, 2003-12-06 14:34:40-08:00, torvalds@home.osdl.org
Fix the PROT_EXEC breakage on anonymous mmap.
Clean up the tests while at it.
ChangeSet@1.1511, 2003-12-05 23:35:35-08:00, jgarzik@pobox.com
[PATCH] remove manual driver poisoning of net_device
From: Al Viro <viro@parcelfarce.linux.theplanet.co.uk>
Such poisoning can cause oopses either because the refcount is not
zero when the poisoning occurs, or due to kernel debugging options
being enabled.
ChangeSet@1.1510, 2003-12-05 23:34:00-08:00, jgarzik@pobox.com
[PATCH] fix oops on unload in pcnet32
The driver was calling pci_unregister_driver for each _device_, and then
again at the end of the module unload routine. Remove the call that's
inside the loop, pci_unregister_driver should only be called once.
Caught by Don Fry (and many others)
ChangeSet@1.1509, 2003-12-05 23:32:14-08:00, jgarzik@pobox.com
[PATCH] fix use-after-free in libata
Fixes oops some were seeing on module unload.
Caught by Jon Burgess.
ChangeSet@1.1506.1.2, 2003-12-05 12:41:31-08:00, ja@ssi.bg
[BRIDGE]: Provide correct TOS value to IPv4 routing.
ChangeSet@1.1506.1.1, 2003-12-05 12:34:00-08:00, davem@nuts.ninka.net
[NETFILTER]: In conntrack, do not fragment TSO packets by accident.
ChangeSet@1.1507, 2003-12-04 22:26:06-08:00, drepper@redhat.com
[PATCH] Fix 'noexec' behaviour
We should not allow mmap() with PROT_EXEC on mounts marked "noexec",
since otherwise there is no way for user-supplied executable loaders
(like ld.so and emulator environments) to properly honour the
"noexec"ness of the target.
ChangeSet@1.1504.1.1, 2003-12-04 14:14:33-08:00, khali@linux-fr.org
[PATCH] I2C: fix i2c_smbus_write_byte() for i2c-nforce2
This patch fixes i2c_smbus_write_byte() being broken for i2c-nforce2.
This causes trouble when that module is used together with eeprom (which
is also in 2.6). We have had three user reports about the problem.
Credits go to Mark D. Studebaker for finding and fixing the problem.
ChangeSet@1.1505, 2003-12-04 07:53:31-08:00, axboe@suse.de
[PATCH] fix broken x86_64 rdtscll
The scheduler is completed b0rked on x86_64, and I finally found out
why. sched_clock() always returned 0, because rdtscll() always returned
0. The 'a' in the macro doesn't agree with the 'a' in the function,
yippe :-)
This is a show stopper for x86_64.
ChangeSet@1.1500.1.1, 2003-12-03 12:59:12-08:00, mingo@elte.hu
[PATCH] Fix /proc access to dead thread group list oops
The pid_alive() check within the loop is incorrect. If we are within
the tasklist lock and the thread group leader is valid then the thread
chain will be fully intact.
Instead, the check should be _outside_ the loop, since if the group
leader no longer exists, the whole list is gone and we must not try
to access it.
Move the check around, and add comment.
Bug-hunting and fix by Srivatsa Vaddagiri
ChangeSet@1.1503, 2003-12-03 11:57:38-08:00, pavlin@icir.org
[RTNETLINK]: Add RTPROT_XORP.
ChangeSet@1.1502, 2003-12-03 11:57:05-08:00, laforge@netfilter.org
[NETFILTER]: Sanitize ip_ct_tcp_timeout_close_wait value, from 2.4.x
ChangeSet@1.1501, 2003-12-03 11:56:26-08:00, yoshfuji@linux-ipv6.org
[IPV6]: Fix ipv4 mapped address calculation in udpv6_sendmsg().
ChangeSet@1.1500, 2003-12-02 19:04:01-08:00, torvalds@home.osdl.org
Fix ide-scsi.c uninitialized variable
ChangeSet@1.1499, 2003-12-02 18:41:48-08:00, torvalds@home.osdl.org
Fix x86 kernel page fault error codes
ChangeSet@1.1498, 2003-12-01 16:51:30-08:00, mingo@elte.hu
[PATCH] Fix lost wakeups problem
When doing sync wakeups we must not skip the notification of other cpus
if the task is not on this runqueue.
ChangeSet@1.1497, 2003-12-01 10:40:47-08:00, hirofumi@mail.parknet.co.jp
[PATCH] Missing initialization of /proc/net/tcp seq_file
We need to initialize st->state in tcp_seq_start(). Otherwise
tcp_seq_stop() is run with previous st->state, and it calls the unneeded
unlock etc, causing a kernel crash.
ChangeSet@1.1496, 2003-11-26 12:38:22-08:00, torvalds@home.osdl.org
Linux 2.6.0-test11
TAG: v2.6.0-test11