commit 188e1f81ba31af1b65a2f3611df4c670b092bbac Author: Linus Torvalds Date: Sat Jun 16 19:09:12 2007 -0700 Linux 2.6.22-rc5 The manatees, they are dancing! Signed-off-by: Linus Torvalds commit 9d66586f7723b73c5925c7c7819c260484627851 Author: Eric W. Biederman Date: Sat Jun 16 10:16:16 2007 -0700 shm: fix the filename of hugetlb sysv shared memory Some user space tools need to identify SYSV shared memory when examining /proc//maps. To do so they look for a block device with major zero, a dentry named SYSV, and having the minor of the internal sysv shared memory kernel mount. To help these tools and to make it easier for people just browsing /proc//maps this patch modifies hugetlb sysv shared memory to use the SYSV dentry naming convention. User space tools will still have to be aware that hugetlb sysv shared memory lives on a different internal kernel mount and so has a different block device minor number from the rest of sysv shared memory. Signed-off-by: Eric W. Biederman Cc: "Serge E. Hallyn" Cc: Albert Cahalan Cc: Badari Pulavarty Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 22741925d268e8479ef66312749bd8d96ed35365 Author: Adam Litke Date: Sat Jun 16 10:16:15 2007 -0700 hugetlb: fix get_policy for stacked shared memory files Here's another breakage as a result of shared memory stacked files :( The NUMA policy for a VMA is determined by checking the following (in the order given): 1) vma->vm_ops->get_policy() (if defined) 2) vma->vm_policy (if defined) 3) task->mempolicy (if defined) 4) Fall back to default_policy By switching to stacked files for shared memory, get_policy() is now always set to shm_get_policy which is a wrapper function. This causes us to stop at step 1, which yields NULL for hugetlb instead of task->mempolicy which was the previous (and correct) result. This patch modifies the shm_get_policy() wrapper to maintain steps 1-3 for the wrapped vm_ops. (akpm: the refcounting of mempolicies is busted and this patch does nothing to improve it) Signed-off-by: Adam Litke Acked-by: William Irwin Cc: dean gaudet Cc: Christoph Lameter Cc: Andi Kleen Cc: Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 74584ae509befc2ed711810e7df4b075473869b2 Author: Jan Kara Date: Sat Jun 16 10:16:14 2007 -0700 udf: fix possible leakage of blocks We have to take care that when we call udf_discard_prealloc() from udf_clear_inode() we have to write inode ourselves afterwards (otherwise, some changes might be lost leading to leakage of blocks, use of free blocks or improperly aligned extents). Also udf_discard_prealloc() does two different things - it removes preallocated blocks and truncates the last extent to exactly match i_size. We move the latter functionality to udf_truncate_tail_extent(), call udf_discard_prealloc() when last reference to a file is dropped and call udf_truncate_tail_extent() when inode is being removed from inode cache (udf_clear_inode() call). We cannot call udf_truncate_tail_extent() earlier as subsequent open+write would find the last block of the file mapped and happily write to the end of it, although the last extent says it's shorter. [akpm@linux-foundation.org: Make checkpatch.pl happier] Signed-off-by: Jan Kara Cc: Eric Sandeen Cc: Cyrill Gorcunov Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 4b356be019d0c28f67af02809df7072c1c8f7d32 Author: Christoph Lameter Date: Sat Jun 16 10:16:13 2007 -0700 SLUB: minimum alignment fixes If ARCH_KMALLOC_MINALIGN is set to a value greater than 8 (SLUBs smallest kmalloc cache) then SLUB may generate duplicate slabs in sysfs (yes again) because the object size is padded to reach ARCH_KMALLOC_MINALIGN. Thus the size of the small slabs is all the same. No arch sets ARCH_KMALLOC_MINALIGN larger than 8 though except mips which for some reason wants a 128 byte alignment. This patch increases the size of the smallest cache if ARCH_KMALLOC_MINALIGN is greater than 8. In that case more and more of the smallest caches are disabled. If we do that then the count of the active general caches that is displayed on boot is not correct anymore since we may skip elements of the kmalloc array. So count them separately. This approach was tested by Havard yesterday. Signed-off-by: Christoph Lameter Cc: Haavard Skinnemoen Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 8dab5241d06bfc9ee141ea78c56cde5070d7460d Author: Benjamin Herrenschmidt Date: Sat Jun 16 10:16:12 2007 -0700 Rework ptep_set_access_flags and fix sun4c Some changes done a while ago to avoid pounding on ptep_set_access_flags and update_mmu_cache in some race situations break sun4c which requires update_mmu_cache() to always be called on minor faults. This patch reworks ptep_set_access_flags() semantics, implementations and callers so that it's now responsible for returning whether an update is necessary or not (basically whether the PTE actually changed). This allow fixing the sparc implementation to always return 1 on sun4c. [akpm@linux-foundation.org: fixes, cleanups] Signed-off-by: Benjamin Herrenschmidt Cc: Hugh Dickins Cc: David Miller Cc: Mark Fortescue Acked-by: William Lee Irwin III Cc: "Luck, Tony" Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 679ce0ace6b1a07043bc3b405a34ddccad808886 Author: Matt Mackall Date: Sat Jun 16 10:16:11 2007 -0700 random: fix output buffer folding (As reported by linux@horizon.com) Folding is done to minimize the theoretical possibility of systematic weakness in the particular bits of the SHA1 hash output. The result of this bug is that 16 out of 80 bits are un-folded. Without a major new vulnerability being found in SHA1, this is harmless, but still worth fixing. Signed-off-by: Matt Mackall Cc: Cc: Theodore Ts'o Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 39a279026609c205d331ec39fea11b2fd470a054 Author: Jeff Dike Date: Sat Jun 16 10:16:10 2007 -0700 uml: kill x86_64 STACK_TOP_MAX The x86_64 a.out.h got a definition of STACK_TOP_MAX, which interferes with the UML version. So, just undef it like STACK_TOP. Signed-off-by: Jeff Dike Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit c539ab73070b381f0452dae791f891ec2515098e Author: Jeff Dike Date: Sat Jun 16 10:16:09 2007 -0700 uml: remove PAGE_SIZE from libc code Distros seem to be removing PAGE_SIZE from asm/page.h. So, the libc side of UML should stop using it. I replace it with UM_KERN_PAGE_SIZE, which is defined to be the same as PAGE_SIZE on the kernel side of the house. I could also use getpagesize(), but it's more important that UML have the same value of PAGE_SIZE everywhere. It's conceivable that it could be built with a larger PAGE_SIZE, and use of getpagesize() would break that badly. PAGE_MASK got the same treatment, as it is closely tied to PAGE_SIZE. Signed-off-by: Jeff Dike Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit f5a9c77df45b113d21b64cbc2bf6c72a0da48998 Author: David Brownell Date: Sat Jun 16 10:16:08 2007 -0700 spi doc updates Update two points in the SPI interface documentation: - Update description of the "chip stays selected after message ends" mode. In some cases it's required for correctness; it isn't just a performance tweak. (Yes: to use this mode on mult-device busses, another programming interface will be needed. One draft has been circulated already.) - Clarify spi_setup(), highlighting that callers must ensure that no requests are queued (can't change configuration except between I/Os), and that the device must be deselected when this returns (which is a key part of why it's called during device init). Signed-off-by: David Brownell Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit ed45666271f4fafa95b9d8ad44050e9a9bd2376e Author: Mike Accetta Date: Sat Jun 16 10:16:07 2007 -0700 md: fix bug in error handling during raid1 repair If raid1/repair (which reads all block and fixes any differences it finds) hits a read error, it doesn't reset the bio for writing before writing correct data back, so the read error isn't fixed, and the device probably gets a zero-length write which it might complain about. Signed-off-by: Neil Brown Cc: Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit af03b8e4e81c3789e597632268940edd11ffe870 Author: NeilBrown Date: Sat Jun 16 10:16:06 2007 -0700 md: fix two raid10 bugs 1/ When resyncing a degraded raid10 which has more than 2 copies of each block, garbage can get synced on top of good data. 2/ We round the wrong way in part of the device size calculation, which can cause confusion. Signed-off-by: Neil Brown Cc: Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit edad01e2a1c527af3baf22dc6977aeb058881150 Author: Alexey Dobriyan Date: Sat Jun 16 10:16:05 2007 -0700 fuse: ->fs_flags fixlet fs/fuse/inode.c:658:3: error: Initializer entry defined twice fs/fuse/inode.c:661:3: also defined here Signed-off-by: Alexey Dobriyan Acked-by: Miklos Szeredi Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit da88ba17de990a4b0d18ecde2c40355700888750 Author: Björn Steinbrink Date: Sat Jun 16 10:16:04 2007 -0700 perfctr-watchdog: fix interchanged parameters to release_{evntsel,perfctr}_nmi Fix oops triggered during: echo 0 > /proc/sys/kernel/nmi_watchdog The culprit seems to be 09198e68501a7e34737cd9264d266f42429abcdc: [PATCH] i386: Clean up NMI watchdog code In two places, the parameters to release_{evntsel,perfctr}_nmi got interchanged during the cleanup. Fix interchanged parameters to release_{evntsel,perfctr}_nmi. Signed-off-by: Björn Steinbrink Cc: Stephane Eranian Cc: Andi Kleen Cc: Michal Piotrowski Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 2f41dddbbd7193fb5cdae0a24db4d378d56885fd Author: Rafael J. Wysocki Date: Sat Jun 16 10:16:03 2007 -0700 swsusp: Fix userland interface Fix oops caused by 'cat /dev/snapshot', reported by Arkadiusz Miskiewicz, and make it impossible to thaw tasks with the help of the swsusp userland interface while there is a snapshot image ready to save. Signed-off-by: Rafael J. Wysocki Acked-by: Pavel Machek Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit b1d93de3e4633c4cbfd622a3564d8268a116a46a Author: Randy Dunlap Date: Sat Jun 16 10:16:02 2007 -0700 toshiba_acpi: fix section mismatch in allyesconfig Fix section error (allyesconfig). The exit function is called from init, so functions that are called by the exit function cannot be marked __exit. WARNING: drivers/built-in.o(.text+0xe5bc6): Section mismatch: reference to .exit. text: (between 'toshiba_acpi_exit' and 'hci_raw') Signed-off-by: Randy Dunlap Cc: Len Brown Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 3e903e7b1605aff88d7f89a96fab5e43081b914f Author: Paul Jackson Date: Sat Jun 16 10:16:01 2007 -0700 cpuset: zero malloc - fix for old cpusets The cpuset code to present a list of tasks using a cpuset to user space could write to an array that it had kmalloc'd, after a kmalloc request of zero size. The problem was that the code didn't check for writes past the allocated end of the array until -after- the first write. This is a race condition that is likely rare -- it would only show up if a cpuset went from being empty to having a task in it, during the brief time between the allocation and the first write. Prior to roughly 2.6.22 kernels, this was also a benign problem, because a zero kmalloc returned a few usable bytes anyway, and no harm was done with the bogus write. With the 2.6.22 kernel changes to make issue a warning if code tries to write to the location returned from a zero size allocation, this problem is no longer benign. This cpuset code would occassionally trigger that warning. The fix is trivial -- check before storing into the array, not after, whether the array is big enough to hold the store. Cc: "Eric W. Biederman" Cc: "Serge E. Hallyn" Cc: Balbir Singh Cc: Dave Hansen Cc: Herbert Poetzl Cc: Kirill Korotaev Cc: Paul Menage Cc: Srivatsa Vaddagiri Cc: Christoph Lameter Signed-off-by: Paul Jackson Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit d6f8bb1310d4745ff1d0c74eeacae31e2a3eeff1 Author: Hugh Dickins Date: Sat Jun 16 10:15:59 2007 -0700 i386 mm: use pte_update() in ptep_test_and_clear_dirty() It is not safe to use pte_update_defer() in ptep_test_and_clear_young(): its only user, /proc//clear_refs, drops pte lock before flushing TLB. Use the safe though less efficient pte_update() paravirtop in its place. Likewise in ptep_test_and_clear_dirty(), though that has no current use. These are macros (header file dependency stops them from becoming inline functions), so be more liberal with the underscores and parentheses. Signed-off-by: Hugh Dickins Cc: Zachary Amsden Cc: David Rientjes Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 30475cc12a50816f290828fb7e3cd7036cd622df Author: Badari Pulavarty Date: Sat Jun 16 10:15:59 2007 -0700 Restore shmid as inode# to fix /proc/pid/maps ABI breakage shmid used to be stored as inode# for shared memory segments. Some of the proc-ps tools use this from /proc/pid/maps. Recent cleanups to newseg() changed it. This patch sets inode number back to shared memory id to fix breakage. Signed-off-by: Badari Pulavarty Cc: "Albert Cahalan" Cc: "Eric W. Biederman" Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit dd08c40e3e23f868eb0e49f638eb208736ec7e66 Author: Christoph Lameter Date: Sat Jun 16 10:15:57 2007 -0700 SLUB slab validation: Alloc while interrupts are disabled must use GFP_ATOMIC The data structure to manage the information gathered about functions allocating and freeing objects is allocated when the list_lock has already been taken. We need to allocate with GFP_ATOMIC instead of GFP_KERNEL. Signed-off-by: Christoph Lameter Cc: Mel Gorman Cc: Andy Whitcroft Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 54c6ed7562d59ab238df1ec9ff76d81d7d0f0842 Author: Björn Steinbrink Date: Sat Jun 16 10:15:56 2007 -0700 i386: use the right wrapper to disable the NMI watchdog When disabled through /proc/sys/kernel/nmi_watchdog, the NMI watchdog uses the stop() method directly, which does not decrement the activity counter, leading to a BUG(). Use the wrapper function instead to fix that. Signed-off-by: Björn Steinbrink Cc: Andi Kleen Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit faa4cfa6b334fc07c3386e620a2fb55de508c077 Author: Björn Steinbrink Date: Sat Jun 16 10:15:55 2007 -0700 i386: fix NMI watchdog not reserving its MSRs At system boot time, the NMI watchdog no longer reserved its MSRs, allowing other subsystems to mess with them. Fix that. Signed-off-by: Björn Steinbrink Cc: Andi Kleen Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit 38ad2ed08d89a4b830a03131fa73e4ef3e98d9f4 Author: Paul Fulghum Date: Sat Jun 16 10:15:55 2007 -0700 tty: restore locked ioctl file op Restore tty locked ioctl handler which was replaced with an unlocked ioctl handler in hung_up_tty_fops by the patch: commit e10cc1df1d2014f68a4bdcf73f6dd122c4561f94 Author: Paul Fulghum Date: Thu May 10 22:22:50 2007 -0700 tty: add compat_ioctl This was reported in: [Bug 8473] New: Oops: 0010 [1] SMP The bug is caused by switching to hung_up_tty_fops in do_tty_hangup. An ioctl call can be waiting on BLK after testing for existence of the locked ioctl handler in the normal tty fops, but before calling the locked ioctl handler. If a hangup occurs at that point, the locked ioctl fop is NULL and an oops occurs. (akpm: we can remove my debugging code from do_ioctl() now, but it'll be OK to do that for 2.6.23) Signed-off-by: Paul Fulghum Cc: Alan Cox Signed-off-by: Andrew Morton Signed-off-by: Linus Torvalds commit f4d2781731e846c2f01dd85e71883d120860c6dd Author: David Woodhouse Date: Sat Jun 16 10:48:19 2007 +0100 fix radeon setparam on 32/64 systems, harder. Commit 9b01bd5b284bbf519b726b39f1352023cb5e9e69 introduced a compat_ioctl handler for RADEON_SETPARAM, the sole purpose of which was to handle the fact that on i386, alignof(uint64_t)==4. Unfortunately, this handler was installed for _all_ 64-bit architectures, instead of only x86_64 and ia64. And thus it breaks 32-bit compatibility on every other arch, where 64-bit integers are aligned to 8 bytes in 32-bit mode just the same as in 64-bit mode. Arnd has a cunning plan to use 'compat_u64' with appropriate alignment attributes according to the 32-bit ABI, but for now let's just make the compat_radeon_cp_setparam routine entirely disappear on 64-bit machines whose 32-bit compat support isn't for i386. It would be a no-op with compat_u64 anyway. Signed-off-by: David Woodhouse Acked-by: Arnd Bergmann Cc: Benjamin Herrenschmidt Cc: Dave Airlie Signed-off-by: Linus Torvalds commit d1be0a8225f2cb1cdc356ebb0ae6800f023ce67d Author: Bartlomiej Zolnierkiewicz Date: Sat Jun 16 02:24:44 2007 +0200 ide-scsi: fix OOPS in idescsi_expiry() drive->driver_data contains pointer to Scsi_Host not idescsi_scsi_t. Signed-off-by: Bartlomiej Zolnierkiewicz commit ce9b2b0abbf019d5259eb089a1cc256852930f67 Author: Rafael J. Wysocki Date: Sat Jun 16 02:24:43 2007 +0200 Resume from RAM on HPC nx6325 broken generic_ide_resume() should check if dev->driver is not NULL before applying to_ide_driver() to it. Fix that. Signed-off-by: Rafael J. Wysocki Signed-off-by: Andrew Morton Signed-off-by: Bartlomiej Zolnierkiewicz commit d09c6b809432668371b5de9102f4f9aa6a7c79cc Author: Paul Mundt Date: Thu Jun 14 15:13:16 2007 +0900 mm: Fix memory/cpu hotplug section mismatch and oops. When building with memory hotplug enabled and cpu hotplug disabled, we end up with the following section mismatch: WARNING: mm/built-in.o(.text+0x4e58): Section mismatch: reference to .init.text: (between 'free_area_init_node' and '__build_all_zonelists') This happens as a result of: -> free_area_init_node() -> free_area_init_core() -> zone_pcp_init() <-- all __meminit up to this point -> zone_batchsize() <-- marked as __cpuinit fo This happens because CONFIG_HOTPLUG_CPU=n sets __cpuinit to __init, but CONFIG_MEMORY_HOTPLUG=y unsets __meminit. Changing zone_batchsize() to __devinit fixes this. __devinit is the only thing that is common between CONFIG_HOTPLUG_CPU=y and CONFIG_MEMORY_HOTPLUG=y. In the long run, perhaps this should be moved to another section identifier completely. Without this, memory hot-add of offline nodes (via hotadd_new_pgdat()) will oops if CPU hotplug is not also enabled. Signed-off-by: Paul Mundt Acked-by: Yasunori Goto Signed-off-by: Linus Torvalds -- mm/page_alloc.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) commit bc90ba093af2e5022b9d055a2148b54a6aa35bc9 Author: Tejun Heo Date: Fri Jun 15 13:24:28 2007 +0200 block: always requeue !fs requests at the front SCSI marks internal commands with REQ_PREEMPT and push it at the front of the request queue using blk_execute_rq(). When entering suspended or frozen state, SCSI devices are quiesced using scsi_device_quiesce(). In quiesced state, only REQ_PREEMPT requests are processed. This is how SCSI blocks other requests out while suspending and resuming. As all internal commands are pushed at the front of the queue, this usually works. Unfortunately, this interacts badly with ordered requeueing. To preserve request order on requeueing (due to busy device, active EH or other failures), requests are sorted according to ordered sequence on requeue if IO barrier is in progress. The following sequence deadlocks. 1. IO barrier sequence issues. 2. Suspend requested. Queue is quiesced with part or all of IO barrier sequence at the front. 3. During suspending or resuming, SCSI issues internal command which gets deferred and requeued for some reason. As the command is issued after the IO barrier in #1, ordered requeueing code puts the request after IO barrier sequence. 4. The device is ready to process requests again but still is in quiesced state and the first request of the queue isn't REQ_PREEMPT, so command processing is deadlocked - suspending/resuming waits for the issued request to complete while the request can't be processed till device is put back into running state by resuming. This can be fixed by always putting !fs requests at the front when requeueing. The following thread reports this deadlock. http://thread.gmane.org/gmane.linux.kernel/537473 Signed-off-by: Tejun Heo Acked-by: David Greaves Acked-by: Jeff Garzik Signed-off-by: Jens Axboe Signed-off-by: Linus Torvalds commit 16c61add51f2182140637c924687a2aab6b568f9 Author: Adrian Bunk Date: Fri Jun 15 15:15:43 2007 -0700 [RXRPC] net/rxrpc/ar-connection.c: fix NULL dereference This patch fixes a NULL dereference spotted by the Coverity checker. Signed-off-by: Adrian Bunk Signed-off-by: David S. Miller commit 7769f4064cd9f4fbae09f071578a051aae83e844 Author: Ilpo Järvinen Date: Fri Jun 15 15:14:04 2007 -0700 [TCP]: Fix logic breakage due to DSACK separation Commit 6f74651ae626ec672028587bc700538076dfbefb is found guilty of breaking DSACK counting, which should be done only for the SACK block reported by the DSACK instead of every SACK block that is received along with DSACK information. Signed-off-by: Ilpo Järvinen Signed-off-by: David S. Miller commit b9ce204f0a265f819d10c943a607746abb62f245 Author: Ilpo Järvinen Date: Fri Jun 15 15:08:43 2007 -0700 [TCP]: Congestion control API RTT sampling fix Commit 164891aadf1721fca4dce473bb0e0998181537c6 broke RTT sampling of congestion control modules. Inaccurate timestamps could be fed to them without providing any way for them to identify such cases. Previously RTT sampler was called only if FLAG_RETRANS_DATA_ACKED was not set filtering inaccurate timestamps nicely. In addition, the new behavior could give an invalid timestamp (zero) to RTT sampler if only skbs with TCPCB_RETRANS were ACKed. This solves both problems. Signed-off-by: Ilpo Järvinen Signed-off-by: David S. Miller commit 02676e5aee271c1f20d7d44249d26741aef1e846 Author: Jens Axboe Date: Fri Jun 15 13:16:13 2007 +0200 splice: only check do_wakeup in splice_to_pipe() for a real pipe We only ever set do_wakeup to non-zero if the pipe has an inode backing, so it's pointless to check outside the pipe->inode check. Signed-off-by: Jens Axboe commit 00de00bdad278783b3664ad2969954a707f5944a Author: Jens Axboe Date: Fri Jun 15 13:14:22 2007 +0200 splice: fix leak of pages on short splice to pipe If the destination pipe is full and we already transferred data, we break out instead of waiting for more pipe room. The exit logic looks at spd->nr_pages to see if we moved everything inside the spd container, but we decrement that variable in the loop to decide when spd has emptied. Instead we want to compare to the original page count in the spd, so cache that in a local variable. Signed-off-by: Jens Axboe commit 17ee4f49ab2c802c7818fa71c4e7e351a7230b86 Author: Jens Axboe Date: Fri Jun 15 13:10:37 2007 +0200 splice: adjust balance_dirty_pages_ratelimited() call As we have potentially dirtied more than 1 page, we should indicate as such to the dirty page balancing. So call balance_dirty_pages_ratelimited_nr() and pass in the approximate number of pages we dirtied. Signed-off-by: Jens Axboe commit 7702fd1f6fea57921f2e643d27a23a2d0394499c Author: Avi Kivity Date: Thu Jun 14 16:27:40 2007 +0300 KVM: Prevent guest fpu state from leaking into the host The lazy fpu changes did not take into account that some vmexit handlers can sleep. Move loading the guest state into the inner loop so that it can be reloaded if necessary, and move loading the host state into vmx_vcpu_put() so it can be performed whenever we relinquish the vcpu. Signed-off-by: Avi Kivity commit 8888985144db8f4cb7e56154b31bdf233d3550bf Author: Wang Zhenyu Date: Thu Jun 14 10:01:04 2007 +0800 [AGPGART] intel_agp: fix device probe This patch trys to fix device probe in two cases. First we should correctly detect device if integrated graphics device is not enabled or exists, like an add-in card is plugged. Second on some type of intel GMCH, it might have multiple graphic chip models, like 945GME case, so we should be sure the detect works through the whole table. Signed-off-by: Wang Zhenyu Signed-off-by: Dave Jones commit 74235a25c673f80147c1f975304888e8212a14d5 Author: Herbert Xu Date: Thu Jun 14 13:02:55 2007 -0700 [IPV6] addrconf: Fix IPv6 on tuntap tunnels The recent patch that added ipv6_hwtype is broken on tuntap tunnels. Indeed, it's broken on any device that does not pass the ipv6_hwtype test. The reason is that the original test only applies to autoconfiguration, not IPv6 support. IPv6 support is allowed on any device. In fact, even with the ipv6_hwtype patch applied you can still add IPv6 addresses to any interface that doesn't pass thw ipv6_hwtype test provided that they have a sufficiently large MTU. This is a serious problem because come deregistration time these devices won't be cleaned up properly. I've gone back and looked at the rationale for the patch. It appears that the real problem is that we were creating IPv6 devices even if the MTU was too small. So here's a patch which fixes that and reverts the ipv6_hwtype stuff. Thanks to Kanru Chen for reporting this issue. Signed-off-by: Herbert Xu Signed-off-by: David S. Miller commit d7ea5b91fad553e445bbe5d958b6a7b16222c092 Author: Ilpo Järvinen Date: Thu Jun 14 12:58:26 2007 -0700 [TCP]: Add missing break to TCP option parsing code This flaw does not affect any behavior (currently). Signed-off-by: Ilpo Järvinen Signed-off-by: David S. Miller commit 7b4f4ec21038ac13c63d130357d1c3015ec3f3e8 Author: Chris Dearman Date: Thu May 24 22:46:25 2007 +0100 [MIPS] Fix builds where MSC01E_xxx is undefined. Signed-off-by: Chris Dearman Signed-off-by: Ralf Baechle commit ffe9ee4709cf513fb80e9b7e04d214dd8b76a10d Author: Chris Dearman Date: Thu May 24 22:24:20 2007 +0100 [MIPS] Separate performance counter interrupts Support for performance counter overflow interrupt that is on a separate interrupt from the timer. Signed-off-by: Chris Dearman Signed-off-by: Ralf Baechle commit b72c05262298cc2ac92edb657f5ea3a97ad5ea3d Author: Chris Dearman Date: Fri Apr 27 15:58:41 2007 +0100 [MIPS] Malta: Fix for SOCitSC based Maltas And an attempt to tidy up the core/controller differences. Signed-off-by: Chris Dearman Signed-off-by: Ralf Baechle commit 093d0faf57e59feee224217273f944e10e4e3562 Author: Haavard Skinnemoen Date: Mon Jun 11 17:17:14 2007 +0200 [AVR32] Define ARCH_KMALLOC_MINALIGN to L1_CACHE_BYTES This allows SLUB debugging to be used without fear of messing up DMA transfers. SPI is one example that easily breaks without this patch. Signed-off-by: Haavard Skinnemoen commit 2fdfe8d9a2687718b07a35196b89fbf48ba0c82f Author: Haavard Skinnemoen Date: Tue May 29 21:33:37 2007 +0200 [AVR32] STK1000: Set SPI_MODE_3 in the ltv350qv board info In the latest incarnation of the ltv350qv driver the call to spi_setup() has been removed. So we need to initialize things more carefully in the board info struct. Signed-off-by: Haavard Skinnemoen commit 2ae795b02aa46a99d845958ae8d7bc8afa04292b Author: David Brownell Date: Thu May 24 13:52:08 2007 -0700 [AVR32] gpio_*_cansleep() fix The AVR32 was missing the gpio_*_cansleep() calls, breaking compilation for some code using them. Signed-off-by: David Brownell Signed-off-by: Haavard Skinnemoen commit 126187f1e00048abec4d4a2eb3eeae396fbaa944 Author: Andrea Righi Date: Wed May 23 14:14:52 2007 -0700 [AVR32] ratelimit segfault reporting rate Limit the rate of the kernel logging for the segfaults of user applications, to avoid potential message floods or denial-of-service attacks. Signed-off-by: Andrea Righi Signed-off-by: Andrew Morton Signed-off-by: Haavard Skinnemoen commit 220ddc0847ebd42d18ee78c7e1c2f4c2e3be637d Author: Milton Miller Date: Sun Jun 10 14:32:43 2007 +1000 [POWERPC] Fix console output getting dropped on platforms without udbg_putc Previously, registering this early console would just result in dropping early buffered printk output until a udbg_putc was registered. However, commit 69331af79cf29e26d1231152a172a1a10c2df511 clears the CON_PRINTBUFFER flag on the main console when a CON_BOOT (early) console has been registered, resulting in the buffered messages never being displayed to the user. This fixes the problem by making sure we don't register udbg_console on platforms that don't implement udbg_putc. Signed-off-by: Milton Miller Acked-by: Mark A. Greer Signed-off-by: Paul Mackerras commit c63c4faa8cf055319c7ed557d2050c1c3776fac5 Author: Paul Mackerras Date: Thu Jun 7 22:42:19 2007 +1000 [POWERPC] Fix per-cpu allocation on oldworld SMP powermacs The per-cpu area(a) for the secondary CPU(s) isn't getting allocated on old SMP powermacs that don't have the secondary CPU(s) listed in the device tree, as per-cpu areas are now only allocated for CPUs in the cpu_possible_map, and we aren't setting the bits for the secondary CPU(s) until smp_prepare_cpus(), which is after per-cpu allocation. Therefore this sets the bits for CPUs 1..3 in cpu_possible_map in pmac_setup_arch, so they get per-cpu data allocated. Signed-off-by: Paul Mackerras commit 06ad391919b2078ec2e012f0593014b88e7a6c4e Author: Vlad Yasevich Date: Tue Jun 12 15:26:22 2007 -0400 [SCTP] Don't disable PMTU discovery when mtu is small Right now, when we receive a mtu estimate smaller then minim threshold in the ICMP message, we disable the path mtu discovery on the transport. This leads to the never increasing sctp fragmentation point even when the real path mtu has increased. Signed-off-by: Vlad Yasevich commit 8a4794914f9cf2681235ec2311e189fe307c28c7 Author: Vlad Yasevich Date: Thu Jun 7 14:21:05 2007 -0400 [SCTP] Flag a pmtu change request Currently, if the socket is owned by the user, we drop the ICMP message. As a result SCTP forgets that path MTU changed and never adjusting it's estimate. This causes all subsequent packets to be fragmented. With this patch, we'll flag the association that it needs to udpate it's estimate based on the already updated routing information. Signed-off-by: Vlad Yasevich Acked-by: Sridhar Samudrala commit c910b47e1811b3f8b184108c48de3d7af3e2999b Author: Vlad Yasevich Date: Thu Jun 7 13:47:03 2007 -0400 [SCTP] Update pmtu handling to be similar to tcp Introduce new function sctp_transport_update_pmtu that updates the transports and destination caches view of the path mtu. Signed-off-by: Vlad Yasevich Acked-by: Sridhar Samudrala commit fe979ac169970b3d12facd6565766735862395c5 Author: Vlad Yasevich Date: Wed May 23 11:11:37 2007 -0400 [SCTP] Fix leak in sctp_getsockopt_local_addrs when copy_to_user fails If the copy_to_user or copy_user calls fail in sctp_getsockopt_local_addrs(), the function should free locally allocated storage before returning error. Spotted by Coverity. Signed-off-by: Vlad Yasevich Acked-by: Sridhar Samudrala commit 8b35805693e1915829355723537f99f1b8bc9cc0 Author: Vlad Yasevich Date: Tue May 15 17:14:58 2007 -0400 [SCTP]: Allow unspecified port in sctp_bindx() Allow sctp_bindx() to accept multiple address with unspecified port. In this case, all addresses inherit the first bound port. We still catch full mis-matches. Signed-off-by: Vlad Yasevich Acked-by: Sridhar Samudrala commit d570ee490fb18220262cfe41284d7aede797ed4f Author: Vlad Yasevich Date: Tue May 15 16:32:39 2007 -0400 [SCTP]: Correctly set daddr for IPv6 sockets during peeloff During peeloff of AF_INET6 socket, the inet6_sk(sk)->daddr wasn't set correctly since the code was assuming IPv4 only. Now we use a correct call to set the destination address. Signed-off-by: Vlad Yasevich Acked-by: Sridhar Samudrala commit c3bff2ec10b8bf2f53c954e370f9bdae93064472 Author: Pierre Ossman Date: Wed Jun 13 19:06:03 2007 +0200 mmc: get back read-only switch function Somehow the code to read the read-only switch of SD cards got lost in the reorganisation. Signed-off-by: Pierre Ossman commit 0107a4b32e36dccd4456e2c5e34c5cd22c94e094 Author: Ragner Magalhaes Date: Wed Jun 13 19:09:28 2007 +0200 mmc-omap: fix sd response type 6 vs. 1 Ignoring OMAP_MMC_STAT_CARD_ERR, treating it as if the command completed correctly. Signed-off-by: Ragner Magalhaes Signed-off-by: Carlos Eduardo Aguiar Signed-off-by: Pierre Ossman commit 66e1e3b20cbbf99da63e6c1af0fc6d39c2ed099a Author: David S. Miller Date: Wed Jun 13 01:03:53 2007 -0700 [TCP]: Set initial_ssthresh default to zero in Cubic and BIC. Because of the current default of 100, Cubic and BIC perform very poorly compared to standard Reno. In the worst case, this change makes Cubic and BIC as aggressive as Reno. So this change should be very safe. Signed-off-by: David S. Miller commit fc395f8d589f4f0b3fcdd9b8bb84b7cacf711a4f Author: David S. Miller Date: Tue Jun 12 23:56:52 2007 -0700 [SPARC64]: Fix args to sun4v_ldc_revoke(). First argument is LDC channel ID, then mapping cookie, then the MTE revoke cookie. Signed-off-by: David S. Miller commit f467b998eeae933029a83db8ad860da3879acd63 Author: David S. Miller Date: Tue Jun 12 23:53:03 2007 -0700 [SPARC64]: Really fix parport. We were passing a "struct pci_dev *" instead of a "struct device *" to the parport registry routines. No wonder things exploded. The ebus_bus_type hacks can be backed out from asm-sparc64/dma-mapping.h, those were wrong. Signed-off-by: David S. Miller commit 56f5c0bd50e948408ac0fd587b5c89fa7e2a1b6e Author: David S. Miller Date: Tue Jun 12 16:54:08 2007 -0700 [SPARC64]: Fix IO/MEM space sizing for PCI. In pci_determine_mem_io_space(), do not hard code the region sizes. Instead, use the values given to us in the ranges property. Thanks goes to Mikael Petterson for the original Xorg failure bug repoert, and strace dumps from Mikael and Dmitry Artamonow. Signed-off-by: David S. Miller commit 4a907dec9845001dc2b117a0ed2a2150384a4cea Author: David S. Miller Date: Wed Jun 13 00:01:04 2007 -0700 [SPARC64]: Wire up cookie based sun4v interrupt registry. This will be used for logical domain channel interrupts. Signed-off-by: David S. Miller commit 893e7c2db05f14032f2390ef7c59a499fc25ccae Author: Dmitry Torokhov Date: Wed Jun 13 01:49:58 2007 -0400 Input: move input-polldev to drivers/input To work around deficiences in Kconfig that allows to "select" a symbol without automatically selecting all dependencies for that symbol move input-polldev from drivers/input/misc to drivers/input thus removing extra dependency on CONFIG_INPUT_MISC. Signed-off-by: Dmitry Torokhov commit af15cc7b858c7653443ab64db2e41b69506450ee Author: Ilpo Järvinen Date: Tue Jun 12 16:16:44 2007 -0700 [TCP]: Fix left_out setting during FRTO Without FRTO, the tcp_try_to_open is never called with lost_out > 0 (see tcp_time_to_recover). However, when FRTO is enabled, the !tp->lost condition is not used until end of FRTO because that way TCP avoids premature entry to fast recovery during FRTO. Signed-off-by: Ilpo Järvinen Signed-off-by: David S. Miller commit dd14cbc994709a1c5a64ed3621f583c49a27e521 Author: Tejun Heo Date: Mon Jun 11 14:04:01 2007 +0900 sysfs: fix race condition around sd->s_dentry, take#2 Allowing attribute and symlink dentries to be reclaimed means sd->s_dentry can change dynamically. However, updates to the field are unsynchronized leading to race conditions. This patch adds sysfs_lock and use it to synchronize updates to sd->s_dentry. Due to the locking around ->d_iput, the check in sysfs_drop_dentry() is complex. sysfs_lock only protect sd->s_dentry pointer itself. The validity of the dentry is protected by dcache_lock, so whether dentry is alive or not can only be tested while holding both locks. This is minimal backport of sysfs_drop_dentry() rewrite in devel branch. Signed-off-by: Tejun Heo Signed-off-by: Greg Kroah-Hartman commit 6aa054aadfea613a437ad0b15d38eca2b963fc0a Author: Tejun Heo Date: Mon Jun 11 14:03:27 2007 +0900 sysfs: fix condition check in sysfs_drop_dentry() The condition check doesn't make much sense as it basically always succeeds. This causes NULL dereferencing on certain cases. It seems that parentheses are put in the wrong place. Fix it. Signed-off-by: Tejun Heo Signed-off-by: Greg Kroah-Hartman commit dc351252b33f8fede396d6173dba117bcb933607 Author: Eric Sandeen Date: Mon Jun 11 14:02:45 2007 +0900 sysfs: store sysfs inode nrs in s_ino to avoid readdir oopses Backport of ftp://ftp.kernel.org/pub/linux/kernel/people/akpm/patches/2.6/2.6.22-rc1/2.6.22-rc1-mm1/broken-out/gregkh-driver-sysfs-allocate-inode-number-using-ida.patch For regular files in sysfs, sysfs_readdir wants to traverse sysfs_dirent->s_dentry->d_inode->i_ino to get to the inode number. But, the dentry can be reclaimed under memory pressure, and there is no synchronization with readdir. This patch follows Tejun's scheme of allocating and storing an inode number in the new s_ino member of a sysfs_dirent, when dirents are created, and retrieving it from there for readdir, so that the pointer chain doesn't have to be traversed. Tejun's upstream patch uses a new-ish "ida" allocator which brings along some extra complexity; this -stable patch has a brain-dead incrementing counter which does not guarantee uniqueness, but because sysfs doesn't hash inodes as iunique expects, uniqueness wasn't guaranteed today anyway. Signed-off-by: Eric Sandeen Signed-off-by: Tejun Heo Signed-off-by: Greg Kroah-Hartman commit 6f8a7c66e2dc8080950d28edc0259f37739aead9 Author: Brice Goglin Date: Mon Jun 11 20:27:07 2007 +0200 myri10ge: update driver version Update myri10ge driver version to 1.3.1-1.248. Signed-off-by: Brice Goglin Signed-off-by: Jeff Garzik commit 798a95dbd38b113a0f6f3bfe8a2769b261046d09 Author: Brice Goglin Date: Mon Jun 11 20:26:50 2007 +0200 myri10ge: report when the link partner is running in Myrinet mode Since Myri-10G boards may also run in Myrinet mode instead of Ethernet, add a message when we detect that the link partner is not running in the right mode. Signed-off-by: Brice Goglin Signed-off-by: Jeff Garzik commit f181137f9d70dc851dcb418cdad4df7888a0bfd3 Author: Brice Goglin Date: Mon Jun 11 20:26:31 2007 +0200 myri10ge: limit the number of recoveries Limit the number of recoveries from a NIC hw watchdog reset to 1 by default. It enables detection of defective NICs immediately since these memory parity errors are expected to happen very rarely (less than once per century*NIC). Signed-off-by: Brice Goglin Signed-off-by: Jeff Garzik commit c27e672172def41924ea8410398554c49c17b3c1 Author: Mithlesh Thukral Date: Mon Jun 11 03:30:58 2007 -0700 NetXen: Fix link status messages NetXen: Fix incorrect link status even with switch turned OFF. NetXen driver failed to accurately indicate when a link is up or down. This was encountered during failover testing, when the first port indicated that the link was up even when the 10G switch it was assigned to in the Bladecenter was turned off completely. Signed-off by: Wen Xiong Signed-off by: Mithlesh Thukral Signed-off-by: Jeff Garzik commit ca93ca428b8e09973f19e2725bf19cb3f1836034 Author: Jeff Garzik Date: Tue Jun 12 18:52:31 2007 -0400 Revert "[netdrvr e100] experiment with doing RX in a similar manner to eepro100" This reverts commit d52df4a35af569071fda3f4eb08e47cc7023f094. This patch attempted to fix e100 for non-cache coherent memory architectures by using the cb style code that eepro100 had and using the EL and s bits from the RFD list. Unfortunately the hardware doesn't work exactly like this and therefore this patch actually breaks e100. Reverting the change brings it back to the previously known good state for 2.6.22. The pending rewrite in progress to this code can then be safely merged later. Signed-off-by: Auke Kok Signed-off-by: Jeff Garzik commit 3d7dbeac58d0669c37e35a3b91bb41c0146395ce Author: David S. Miller Date: Tue Jun 12 14:36:42 2007 -0700 [TCP]: Disable TSO if MD5SIG is enabled. Signed-off-by: David S. Miller commit 606f585e363527da9feaed79465132c0c661fd9e Author: Konstantin Sharlaimov Date: Tue Jun 12 14:16:59 2007 -0700 [PPP_MPPE]: Fix "osize too small" check. Prevent mppe_decompress() from generating "osize too small" errors when checking for output buffer size. When receiving a packet of mru size the output buffer for decrypted data is 1 byte too small since mppe_decompress() tries to account for possible PFC, however later in code it is assumed no PFC. Adjusting the check prevented these errors from occurring. Signed-off-by: Konstantin Sharlaimov Signed-off-by: Andrew Morton Signed-off-by: David S. Miller commit 82fde74b94f11eee1e9c30e43fb162f80a5e63c0 Author: Luis Carlos Date: Thu Jun 7 16:40:59 2007 -0400 [PATCH] libertas: convert libertas_mpp into anycast_mask With firmware 5.220.11.p5, this allows to specify the anycast addresses the device will listen to. The anycast address range is C0:27:C0:27:C0:XX where XX goes from 00 to 1F (or 0 to 31 in dec). The value to write on anycast_mask will specify which addresses the device listens to. Bits in a 32 bit int are numbered from 0 (least significative bit) to 31. A specific address ending in YY will be listened to if bit YY in the value is set to one. Examples: 0x00000000 : do not listen to any anycast address 0xFFFFFFFF : listen to every anycast address from :00 to :1F 0x00000013 : listen to anycast addresses :00, :01 and :04 Signed-off-by: Luis Carlos Cobo Signed-off-by: John W. Linville commit 2fb3bd6a23e5d37889a78b6a13a124fa7c586009 Author: Dan Williams Date: Mon Jun 4 20:05:23 2007 -0400 [PATCH] libertas: actually send mesh frames to mesh netdev Found by Luis; got broken during module split. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit fff47f108d7bd9f80b223cd187e09dbb0cb89114 Author: Luis Carlos Cobo Rus Date: Wed May 30 12:16:13 2007 -0400 [PATCH] libertas: deauthenticate from AP in channel switch This avoids channel mismatch between driver and firmware in case we change channel while associated to an AP. Signed-off-by: Luis Carlos Cobo Rus Signed-off-by: John W. Linville commit b8bedefd8fe589ff87a681e20583c8317030491d Author: Luis Carlos Cobo Rus Date: Wed May 30 12:14:34 2007 -0400 [PATCH] libertas: pull current channel from firmware on mesh autostart Signed-off-by: Luis Carlos Cobo Rus Signed-off-by: John W. Linville commit 462b529f91b618f4bd144bbc6184f616dfb58a1e Author: Grant Grundler Date: Sun Jun 10 16:31:41 2007 -0600 [PARISC] remove global_ack_eiem Kudos to Thibaut Varene for spotting the (mis)use of appropriately named global_ack_eiem. This took a long time to figure out and both insight from myself, Kyle McMartin, and James Bottomley were required to narrow down which bit of code could have this race condition. The symptom was interrupts stopped getting delivered while some workload was generating IO interrupts on two different CPUs. One of the interrupt sources would get masked off and stay unmasked. Problem was global_ack_eiem was accessed with read/modified/write sequence and not protected by a spinlock. PA-RISC doesn't need a global ack flag though. External Interrupts are _always_ delivered to a single CPU (except for "global broadcast interrupt" which AFAIK currently is not used.) So we don't have to worry about any given IRQ vector getting delivered to more than one CPU. Tested on a500 and rp34xx boxen. rsync to/from gsyprf11 (a500) would lock up the box since NIC (tg3) interrupt and SCSI (sym2) were on "opposite" CPUs (2 CPU system). Put them on the same CPU or apply this patch and 10GB of data would rsync completely. Please apply the following critical patch. thanks, grant Signed-off-by: Grant Grundler Acked-by: Thibaut VARENE Signed-off-by: Kyle McMartin commit 8c4df74e02b0853ad86d1595fb6065d6c26fb196 Author: Dmitry Torokhov Date: Tue Jun 12 00:33:32 2007 -0400 Input: i8042 - add ULI EV4873 to noloop list The box does not implement AUX LOOP command properly and so we can't test for AUX IRQ delivery so blacklist it via DMI and assume that AUX port is present. Signed-off-by: Dmitry Torokhov commit 90245c17d3170438a0445614cbc5f72c1717d583 Author: Dmitry Torokhov Date: Tue Jun 12 00:33:27 2007 -0400 Input: i8042 - add ASUS P65UP5 to the noloop list This board does not raise AUX IRQ in response to AUX LOOP command which interferes with our test for proper AUX IRQ wiring. Put it in the blacklist and assume mouse is present. Signed-off-by: Dmitry Torokhov commit c6f8d7066d18ac86ff88627d858b749d9ba168bc Author: Ondrej Zary Date: Tue Jun 12 00:33:13 2007 -0400 Input: usbtouchscreen - fix fallout caused by move from drivers/usb During the move from drivers/usb/input into drivers/input/touchscreen Kconfig variables were shuffled a bit to use a new namespace (CONFIG_TOUCHSCREEN) while usbtouchscreen was still using old ones. Also noticed by Robert P. J. Day Signed-off-by: Ondrej Zary Signed-off-by: Daniel Ritz Signed-off-by: Dmitry Torokhov commit 14042cbefce4af12f7ca35d2604686154d803291 Author: Mattias Nissler Date: Fri Jun 8 15:31:13 2007 +0200 [PATCH] mac80211: Don't stop tx queue on master device while scanning. mac80211 stops the tx queues during scans. This is wrong with respect to the master deivce tx queue, since stopping it prevents any probes from being sent during the scan. Instead, they accumulate in the queue and are only sent after the scan is finished, which is obviously wrong. Signed-off-by: Mattias Nissler Signed-off-by: John W. Linville commit 0107136c04290ddd765adc568fe7a335d355d17e Author: Johannes Berg Date: Mon Jun 11 08:07:13 2007 +0200 [PATCH] mac80211: fix debugfs tx power reduction output This patch fixes a typo in mac80211's debugfs.c. Signed-off-by: Johannes Berg Signed-off-by: John W. Linville commit c9aca9da026036306aa00a928f6acb4b94eb3c33 Author: David Lamparter Date: Mon Jun 4 00:06:51 2007 +0200 [PATCH] cfg80211: fix signed macaddress in sysfs Fix signedness mixup making mac addresses show up strangely (like 00:11:22:33:44:ffffffaa) in /sys/class/ieee80211/*/macaddress. Signed-off-by: David Lamparter Acked-by: Johannes Berg Signed-off-by: John W. Linville commit 2648a53acf16a837e11836203aadb219bd951a1e Author: Sam Ravnborg Date: Mon Jun 11 21:52:04 2007 +0200 kbuild: fix sh64 section mismatch problems There's a special .cranges section that is almost always generated, with data being moved to the appropriate section by the linker at a later stage. To give a bit of background, sh64 has both a native SHmedia instruction set (32-bit instructions) and SHcompact (which is compatability with normal SH -- 16-bit, a massively reduced register set, etc.). code ranges are emitted when we're using the 32-bit ABI, but not the 64-bit one. It is a special staging section used solely by binutils where code with different flags get placed (more specifically differing flags for input and output sections), before being lazily merged by the linker. The closest I've been able to find to documentation is: http://sources.redhat.com/cgi-bin/cvsweb.cgi/src/ld/emultempl/sh64elf.em?rev=1.10&content-type=text/x-cvsweb-markup&cvsroot=src It's an array of 8-byte Elf32_CRange structure given in http://sources.redhat.com/cgi-bin/cvsweb.cgi/src/bfd/elf32-sh64.h?rev=1.4&content-type=text/x-cvsweb-markup&cvsroot=src that describes for which ISA a range is used. Silence the warnings by allowing references from .init.text to .cranges. The following warnings are fixed: WARNING: init/built-in.o(.cranges+0x0): Section mismatch: reference to .init.text: WARNING: init/built-in.o(.cranges+0xa): Section mismatch: reference to .init.text: WARNING: init/built-in.o(.cranges+0x14): Section mismatch: reference to .init.text: WARNING: init/built-in.o(.cranges+0x1e): Section mismatch: reference to .init.text: WARNING: init/built-in.o(.cranges+0x28): Section mismatch: reference to .init.text: WARNING: init/built-in.o(.cranges+0x32): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x50): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x5a): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x64): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0xfa): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x104): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x10e): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x14a): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x154): Section mismatch: reference to .init.text: WARNING: kernel/built-in.o(.cranges+0x15e): Section mismatch: reference to .init.text: WARNING: mm/built-in.o(.cranges+0x6e): Section mismatch: reference to .init.text: WARNING: mm/built-in.o(.cranges+0x78): Section mismatch: reference to .init.text: WARNING: mm/built-in.o(.cranges+0x82): Section mismatch: reference to .init.text: WARNING: mm/built-in.o(.cranges+0xaa): Section mismatch: reference to .init.text: WARNING: fs/built-in.o(.cranges+0x136): Section mismatch: reference to .init.text: WARNING: fs/built-in.o(.cranges+0x140): Section mismatch: reference to .init.text: WARNING: fs/built-in.o(.cranges+0x14a): Section mismatch: reference to .init.text: WARNING: fs/built-in.o(.cranges+0x168): Section mismatch: reference to .init.text: WARNING: fs/built-in.o(.cranges+0x1f4): Section mismatch: reference to .init.text: WARNING: fs/built-in.o(.cranges+0x1fe): Section mismatch: reference to .init.text: WARNING: net/built-in.o(.cranges+0x302): Section mismatch: reference to .init.text: WARNING: net/built-in.o(.cranges+0x30c): Section mismatch: reference to .init.text: WARNING: net/built-in.o(.cranges+0x316): Section mismatch: reference to .init.text: WARNING: net/built-in.o(.cranges+0x3a2): Section mismatch: reference to .init.text: WARNING: net/built-in.o(.cranges+0x3ac): Section mismatch: reference to .init.text: WARNING: net/built-in.o(.cranges+0x4ce): Section mismatch: reference to .init.text: WARNING: net/built-in.o(.cranges+0x4d8): Section mismatch: reference to .init.text: Signed-off-by: Paul Mundt Cc: Kaz Kojima Signed-off-by: Sam Ravnborg commit 717c9339202a42ae7bec7d3c4b84deecdcae9f81 Author: Dan Williams Date: Tue May 29 00:03:31 2007 -0400 [PATCH] libertas: reduce SSID and BSSID mixed-case abuse Kill mixed case function names from scan.c/scan.h. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 8cf1dc098fda226a0c3baa27ec737ce041acbb46 Author: Dan Williams Date: Mon May 28 23:56:10 2007 -0400 [PATCH] libertas: remove WPA_SUPPLICANT structure Unused. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit d8efea254887128d710cc1475505514da004932c Author: Dan Williams Date: Mon May 28 23:54:55 2007 -0400 [PATCH] libertas: remove structure WLAN_802_11_SSID and libertas_escape_essid Replace WLAN_802_11_SSID with direct 'ssid' and 'ssid_len' members like ieee80211. In the process, remove private libertas_escape_essid and depend on the ieee80211 implementation of escape_essid instead. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 785e8f2679ce9ae703f1c737aa4d48b315d511ca Author: Dan Williams Date: Fri May 25 23:51:12 2007 -0400 [PATCH] libertas: tweak association debug output Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 707985b3850f6ff168340e20b7f6b783782fb8ed Author: David Woodhouse Date: Fri May 25 23:41:16 2007 -0400 [PATCH] libertas: fix big-endian associate command. Byte-swapping length fields and then passing them to memcpy() considered harmful. Signed-off-by: David Woodhouse Signed-off-by: John W. Linville commit e5b3d472ad4eaa9013fd9f67f7a1b132f3ec910c Author: David Woodhouse Date: Fri May 25 23:40:21 2007 -0400 [PATCH] libertas: don't byte-swap firmware version number. It's a byte array. Signed-off-by: David Woodhouse Signed-off-by: John W. Linville commit 86760088a7c51ccc263ec3b8039ec9a7400a6d70 Author: David Woodhouse Date: Fri May 25 23:39:34 2007 -0400 [PATCH] libertas: more endianness fixes, in tx.c this time Now we finally get connectivity. For a while, before something else dies... Signed-off-by: David Woodhouse Signed-off-by: John W. Linville commit bb793e2bfc25b8891b84b8fe3cb4b77cd4619814 Author: David Woodhouse Date: Fri May 25 23:38:14 2007 -0400 [PATCH] libertas: More endianness fixes. Now it at least manages to load the firmware. Signed-off-by: David Woodhouse Signed-off-by: John W. Linville commit 981f187b7c4b237011d4175cae0120d5d203c0fd Author: David Woodhouse Date: Fri May 25 23:36:54 2007 -0400 [PATCH] libertas: first pass at fixing up endianness issues Signed-off-by: David Woodhouse Signed-off-by: John W. Linville commit 123e0e044091ca35a4766b38ae15032f2d41bcd6 Author: Dan Williams Date: Fri May 25 23:23:43 2007 -0400 [PATCH] libertas: sparse fixes Fix various issues reported by sparse. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 0e8a5bd9502f709ddd1ea441ef0362fad3e4a4a1 Author: David Woodhouse Date: Fri May 25 23:15:27 2007 -0400 [PATCH] libertas: fix character set in README Signed-off-by: David Woodhouse Signed-off-by: John W. Linville commit 7d8d28b31d16875f868889264efbba1f6c516860 Author: Luis Carlos Cobo Rus Date: Fri May 25 23:12:19 2007 -0400 [PATCH] libertas: support for mesh autostart on firmware 5.220.11 Signed-off-by: Luis Carlos Cobo Rus Signed-off-by: John W. Linville commit f5e05b697d2105e5c3f9d837046a8c33ee5b7e14 Author: Luis Carlos Cobo Rus Date: Fri May 25 23:08:34 2007 -0400 [PATCH] libertas: split wext for eth and msh Separate wireless handlers of mshX and ethX. ethX remains as before. For mshX, it has been disabled set/get essid, wap and set mode. Get mode always returns "Repeater" and by now we use the Nickname to show if the mesh is active ("Mesh") or not (empty). The rest remains as before. Signed-off-by: Luis Carlos Cobo Rus Signed-off-by: John W. Linville commit 0a0d08aca5d0a77da4b66de289acfd891a3e72e1 Author: Luis Carlos Cobo Rus Date: Fri May 25 23:05:27 2007 -0400 [PATCH] libertas: make mac address configuration work with mesh interface too Signed-off-by: Luis Carlos Cobo Rus Signed-off-by: John W. Linville commit a23c58a3ac4090a41e63ae5b69af87b409abe019 Author: Luis Carlos Cobo Rus Date: Fri May 25 23:04:13 2007 -0400 [PATCH] libertas: updated readme file Fix some wording and blinding table command options, clarify argument list for fwt_add and fwt_list, simplify fwt_list_route Signed-off-by: Luis Carlos Cobo Rus Signed-off-by: John W. Linville commit 90a42210f275e1f828eb6c08bf8252c2d6a774e0 Author: Dan Williams Date: Fri May 25 23:01:24 2007 -0400 [PATCH] libertas: Make WPA work through supplicant handshake Fix WPA so it works up through the supplicant 4-Way handshake process. Doesn't successfully pass traffic yet; may be problems installing the GTK to the firmware. - RSN needs to be enabled before the association command is sent - Use keys from the association request not the adapter structure - cmd_act_mac_strict_protection_enable != IW_AUTH_DROP_UNENCRYPTED - Fix network filtering logic in is_network_compatible() WPA helpers Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 45f43de829981e9b9de56d6098d00d511b4fb56c Author: Dan Williams Date: Fri May 25 22:58:55 2007 -0400 [PATCH] libertas: add more verbose debugging to libertas_cmd_80211_authenticate Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 57361c6edc5801636eeeef0100d3071ab0b5c573 Author: Dan Williams Date: Fri May 25 22:54:50 2007 -0400 [PATCH] libertas: debug print spacing fixes in assoc.c Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit d9ad2f5df89c66b5eae6ac5aaabe62508baba4ef Author: Dan Williams Date: Fri May 25 22:38:41 2007 -0400 [PATCH] libertas: send SIOCGIWSCAN event after partial scans too Any time the driver gets new scan results, even from partial scans, it should send the scan event to userspace. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit aeea0ab45ae3d761064ca926863bb41f0ad167ce Author: Dan Williams Date: Fri May 25 22:30:48 2007 -0400 [PATCH] libertas: honor specific channel requests during association Previously if a fixed channel was specified along with an SSID, the channel request would be ignored during the association process. Instead, when searching for an adhoc or infrastructure network to join, allow filtering results based on channel so that the driver doesn't pick a BSS on a different channel than requested. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit ac26f81ccecc23ad5d8c20ebe1dd482fa395298b Author: Dan Williams Date: Fri May 25 22:19:59 2007 -0400 [PATCH] libertas: fix default adhoc channel Inadvertently removed on a previous commit; causes the first adhoc start to fail if a channel has not been set or no other association has been made. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 80e78ef74dffb2195e2a1164c18579180a76fd5b Author: Dan Williams Date: Fri May 25 22:18:47 2007 -0400 [PATCH] libertas: fix deadlock SIOCGIWSCAN handler Update signal quality before the locked scan result translation loop, because calling libertas_prepare_and_send_command() with the 'waitforrsp' option grabs adapter->lock in the command return processing, leading to the deadlock. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 94b23855c034ffa50e1f94f43ef4500520e4c36e Author: Dan Williams Date: Fri May 25 21:59:29 2007 -0400 [PATCH] libertas: correct error report paths for wlan_fwt_list_ioctl Ensure the leave debug print gets triggered when necessary. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 6cfb00823872d0181c5c72c2d457de93518d96e7 Author: Dan Williams Date: Fri May 25 17:33:28 2007 -0400 [PATCH] libertas: correctly balance locking in libertas_process_rx_command adapter->lock should released after unlocking adapter->driver_lock to balance the order in which they were locked at the top of the function. Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 24d443b5d568c6e11b07267e2d784f5f04aa5dac Author: Dan Williams Date: Fri May 25 17:29:34 2007 -0400 [PATCH] libertas: fix debug enter/leave prints for libertas_execute_next_command Signed-off-by: Dan Williams Signed-off-by: John W. Linville commit 3cf20931fa8ffd765a95f72d7539ab34770684d9 Author: Dan Williams Date: Fri May 25 17:28:30 2007 -0400 [PATCH] libertas: use compare_ether_addr() rather than memcmp() where appropriate Signed-off-by: Dan Williams