user/sven/linux.git, branch v2.6.18.5

Linux 2.6.18.5

2006-12-02T00:13:05Z

[PATCH] UDP: Make udp_encap_rcv use pskb_may_pull

2006-12-02T00:12:37Z

IPsec with NAT-T breaks on some notebooks using the latest e1000 chipset, when header split is enabled. When receiving sufficiently large packets, the driver puts everything up to and including the UDP header into the header portion of the skb, and the rest goes into the paged part. udp_encap_rcv forgets to use pskb_may_pull, and fails to decapsulate it. Instead, it passes it up it to the IKE daemon. Signed-off-by: Olaf Kirch Signed-off-by: Jean Delvare Signed-off-by: David S. Miller Signed-off-by: Chris Wright

[PATCH] fuse: fix Oops in lookup

2006-12-02T00:12:37Z

Fix bug in certain error paths of lookup routines. The request object was reused for sending FORGET, which is illegal. This bug could cause an Oops in 2.6.18. In earlier versions it might silently corrupt memory, but this is very unlikely. These error paths are never triggered by libfuse, so this wasn't noticed even with the 2.6.18 kernel, only with a filesystem using the raw kernel interface. Thanks to Russ Cox for the bug report and test filesystem. Signed-off-by: Miklos Szeredi Cc: Signed-off-by: Andrew Morton [chrisw: backport to 2.6.18 -stable] Signed-off-by: Chris Wright

[PATCH] AGP: Allocate AGP pages with GFP_DMA32 by default

2006-12-02T00:12:37Z

Not all graphic page remappers support physical addresses over the 4GB mark for remapping, so while some do (the AMD64 GART always did, and I just fixed the i965 to do so properly), we're safest off just forcing GFP_DMA32 allocations to make sure graphics pages get allocated in the low 32-bit address space by default. AGP sub-drivers that really care, and can do better, could just choose to implement their own allocator (or we could add another "64-bit safe" default allocator for their use), but quite frankly, you're not likely to care in practice. So for now, this trivial change means that we won't be allocating pages that we can't map correctly by mistake on x86-64. [ On traditional 32-bit x86, this could never happen, because GFP_KERNEL would never allocate any highmem memory anyway ] Acked-by: Andi Kleen Acked-by: Dave Jones Cc: Eric Anholt Cc: Keith Packard Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright

[PATCH] BLUETOOTH: Fix unaligned access in hci_send_to_sock.

2006-12-02T00:12:37Z

The "u16 *" derefs of skb->data need to be wrapped inside of a get_unaligned(). Thanks to Gustavo Zacarias for the bug report. Signed-off-by: David S. Miller Signed-off-by: Chris Wright

[PATCH] IA64: bte_unaligned_copy() transfers one extra cache line.

2006-12-02T00:12:37Z

When called to do a transfer that has a start offset within the cache line which is uneven between source and destination and a length which terminates the source of the copy exactly on a cache line, one extra line gets copied into a temporary buffer. This is normally not an issue since the buffer is a kernel buffer and only the requested information gets copied into the user buffer. The problem arises when the source ends at the very last physical page of memory. That last cache line does not exist and results in the SHUB chip raising an MCA. Signed-off-by: Robin Holt Signed-off-by: Dean Nelson Signed-off-by: Tony Luck Signed-off-by: Chris Wright

[PATCH] IPV6: Fix address/interface handling in UDP and DCCP, according to the scoping architecture.

2006-12-02T00:12:37Z

TCP and RAW do not have this issue. Closes Bug #7432. Signed-off-by: YOSHIFUJI Hideaki Signed-off-by: David S. Miller Signed-off-by: Chris Wright

[PATCH] TG3: Add missing unlock in tg3_open() error path.

2006-12-02T00:12:37Z

Sparse noticed a locking imbalance in tg3_open(). This patch adds an unlock to one of the error paths, so that tg3_open() always exits without the lock held. Signed-off-by: Ira W. Snyder Signed-off-by: David S. Miller Signed-off-by: Chris Wright

[PATCH] softmac: fix a slab corruption in WEP restricted key association

2006-12-02T00:12:37Z

Fix a slab corruption in ieee80211softmac_auth(). The size of a buffer was miscomputed. see http://bugzilla.kernel.org/show_bug.cgi?id=7245 Acked-by: Daniel Drake Signed-off-by: Laurent Riffard Signed-off-by: John W. Linville Signed-off-by: Chris Wright

[PATCH] alpha: Fix ALPHA_EV56 dependencies typo

2006-12-02T00:12:36Z

There appears to be a typo in the EV56 config option. NORITAKE and PRIMO are be able to set a variation of either. Signed-off-by: Daniel Drake Cc: Richard Henderson Cc: Ivan Kokshaysky Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds Signed-off-by: Chris Wright