user/sven/linux.git, branch v2.6.18.4

Linux 2.6.18.4

2006-11-29T19:28:40Z

[PATCH] bridge: fix possible overflow in get_fdb_entries (CVE-2006-5751)

2006-11-29T19:28:24Z

Make sure to properly clamp maxnum to avoid overflow (CVE-2006-5751). Signed-off-by: Chris Wright Acked-by: Eugene Teo Acked-by: Marcel Holtmann Signed-off-by: Linus Torvalds

Linux 2.6.18.3

2006-11-19T03:28:22Z

[PATCH] CIFS: New POSIX locking code not setting rc properly to zero on successful

2006-11-19T03:28:05Z

unlock in case where server does not support POSIX locks and nobrl is not specified. Signed-off-by: Steve French Signed-off-by: Chris Wright

[PATCH] CIFS: report rename failure when target file is locked by Windows

2006-11-19T03:28:05Z

Fixes Samba bugzilla bug # 4182 Rename by handle failures (retry after rename by path) were not being returned back. Signed-off-by: Steve French [chrisw: trivial backport in CHANGES] Signed-off-by: Chris Wright

[PATCH] cciss: fix iostat

2006-11-19T03:28:05Z

cciss needs to call disk_stat_add() for iostat to work. Signed-off-by: Jens Axboe Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright

[PATCH] cpqarray: fix iostat

2006-11-19T03:28:05Z

cpqarray needs to call disk_stat_add() for iostat to work. Signed-off-by: Jens Axboe Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright

[PATCH] Char: isicom, fix close bug

2006-11-19T03:28:05Z

port is dereferenced even if it is NULL. Dereference it _after_ the check if (!port)... Thanks Eric for reporting this. This fixes http://bugzilla.kernel.org/show_bug.cgi?id=7527 Signed-off-by: Jiri Slaby Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright

[PATCH] block: Fix bad data direction in SG_IO

2006-11-19T03:28:05Z

Contrary to what the name misleads you to believe, SG_DXFER_TO_FROM_DEV is really just a normal read seen from the device side. This patch fixes http://lkml.org/lkml/2006/10/13/100 Signed-off-by: Jens Axboe Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright

[PATCH] pci: don't try to remove sysfs files before they are setup.

2006-11-19T03:28:04Z

The PCI sysfs attributes are created after the initial PCI bus scan. With the addition of more return value checking and assertions in the device and sysfs layers we now can get dumps like this on sparc64: [ 20.135032] Call Trace: [ 20.135042] [0000000000537f88] pci_remove_bus_device+0x30/0xc0 [ 20.135076] [000000000078f890] pci_fill_in_pbm_cookies+0x98/0x440 [ 20.135109] [000000000042e828] sabre_scan_bus+0x230/0x400 [ 20.135139] [000000000078c710] pcibios_init+0x58/0xa0 [ 20.135159] [0000000000416f14] init+0x9c/0x2e0 [ 20.135190] [0000000000417a50] kernel_thread+0x38/0x60 [ 20.135211] [0000000000417170] rest_init+0x18/0x40 [ 20.135514] PCI0(PBMB): Bus running at 33MHz It's triggering because removal of the "config" PCI sysfs file for the device fails. On sparc64, after probing the device, we'll delete the PCI device via pci_remove_bus_device() if we cannot find the firmware device tree node corresponding to it. This is fine, but at this point the sysfs files for the PCI device won't be setup yet. So we should not try to do anything in pci_remove_sysfs_dev_files() if pci_sysfs_init() has not run yet. Signed-off-by: David S. Miller Acked-by: Greg Kroah-Hartman Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright