31 Jul, 2010

4 commits


23 Jul, 2010

7 commits

  • Linus Torvalds
     
  • * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
    Input: synaptics - relax capability ID checks on newer hardware
    Input: twl40300-keypad - fix handling of "all ground" rows
    Input: gamecon - reference correct pad in gc_psx_command()
    Input: gamecon - reference correct input device in NES mode
    Input: w90p910_keypad - change platfrom driver name to 'nuc900-kpi'
    Input: i8042 - add Gigabyte Spring Peak to dmi_noloop_table
    Input: qt2160 - rename kconfig symbol name

    Linus Torvalds
     
  • * 'drm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6:
    drm/radeon/kms: add quirk to make HP DV5000 laptop resume
    drm/radeon/kms: fix RADEON_INFO_CRTC_FROM_ID info ioctl
    Fix ttm_page_alloc.c build breakage
    drm/radeon/kms: fix legacy LVDS dpms sequence
    drm/radeon/kms: drop taking lock around crtc lookup.

    Linus Torvalds
     
  • * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
    crypto: talitos - fix bug in sg_copy_end_to_buffer

    Linus Torvalds
     
  • …/frob/linux-2.6-roland

    * 'x86/auditsyscall' of git://git.kernel.org/pub/scm/linux/kernel/git/frob/linux-2.6-roland:
    x86: auditsyscall: fix fastpath return value after reschedule

    Linus Torvalds
     
  • * 'for_linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jwessel/linux-2.6-kgdb:
    sysrq,kdb: Use __handle_sysrq() for kdb's sysrq function
    debug_core,kdb: fix kgdb_connected bit set in the wrong place
    Fix merge regression from external kdb to upstream kdb
    repair gdbstub to match the gdbserial protocol specification
    kdb: break out of kdb_ll() when command is terminated

    Linus Torvalds
     
  • Fix the security problem in the CIFS filesystem DNS lookup code in which a
    malicious redirect could be installed by a random user by simply adding a
    result record into one of their keyrings with add_key() and then invoking a
    CIFS CFS lookup [CVE-2010-2524].

    This is done by creating an internal keyring specifically for the caching of
    DNS lookups. To enforce the use of this keyring, the module init routine
    creates a set of override credentials with the keyring installed as the thread
    keyring and instructs request_key() to only install lookup result keys in that
    keyring.

    The override is then applied around the call to request_key().

    This has some additional benefits when a kernel service uses this module to
    request a key:

    (1) The result keys are owned by root, not the user that caused the lookup.

    (2) The result keys don't pop up in the user's keyrings.

    (3) The result keys don't come out of the quota of the user that caused the
    lookup.

    The keyring can be viewed as root by doing cat /proc/keys:

    2a0ca6c3 I----- 1 perm 1f030000 0 0 keyring .dns_resolver: 1/4

    It can then be listed with 'keyctl list' by root.

    # keyctl list 0x2a0ca6c3
    1 key in keyring:
    726766307: --alswrv 0 0 dns_resolver: foo.bar.com

    Signed-off-by: David Howells
    Reviewed-and-Tested-by: Jeff Layton
    Acked-by: Steve French
    Signed-off-by: Linus Torvalds

    David Howells
     

22 Jul, 2010

17 commits


21 Jul, 2010

12 commits

  • Up to 2.6.34 pcmcia_release_irq() reset p_dev->_irq to 0 after releasing
    the irq. The IRQ is now released in pcmcia_disable_device(), however
    p_dev->_irq is not reset, triggering a warning in pcmcia_device_remove().

    Signed-off-by: Patrick McHardy
    Signed-off-by: Andrew Morton
    Signed-off-by: Dominik Brodowski

    Patrick McHardy
     
  • Add the shrinkers missed in the first conversion of the API in
    commit 7f8275d0d660c146de6ee3017e1e2e594c49e820 ("mm: add context argument to
    shrinker callback").

    Signed-off-by: Dave Chinner

    Dave Chinner
     
  • The Nokia RX51 board code (arch/arm/mach-omap2/board-rx51-peripherals.c)
    defines a key map for the matrix keypad keyboard. The hardware seems to
    use all of the 8 rows and 8 columns of the keypad, although not all
    possible locations are used.

    The TWL4030 supports keypads with at most 8 rows and 8 columns. Most keys
    are defined with a row and column number between 0 and 7, except

    KEY(0xff, 2, KEY_F9),
    KEY(0xff, 4, KEY_F10),
    KEY(0xff, 5, KEY_F11),

    which represent keycodes that should be emitted when entire row is
    connected to the ground. since the driver handles this case as if we
    had an extra column in the key matrix. Unfortunately we do not allocate
    enough space and end up owerwriting some random memory.

    Reported-and-tested-by: Laurent Pinchart
    Cc: stable@kernel.org
    Signed-off-by: Dmitry Torokhov

    Dmitry Torokhov
     
  • Otherwise we won't see any events from the gamepad.
    Addresses https://bugzilla.kernel.org/show_bug.cgi?id=16408

    Reported-and-tested-by: Eugene Yudin
    Cc: stable@kernel.org
    Signed-off-by: Dmitry Torokhov

    Dmitry Torokhov
     
  • We moved input devices from 'struct gc' to individial pads (struct
    gc-pad), but gc_nes_process_packet() was still trying to use old
    ones and crashing.

    Cc: stable@kernel.org
    Signed-off-by: Dmitry Torokhov

    Dmitry Torokhov
     
  • The kernel's math-emu code contains a macro _FP_FROM_INT() which is
    used to convert an integer to a raw normalized floating-point value.
    It does this basically in three steps:

    1. Compute the exponent from the number of leading zero bits.
    2. Downshift large fractions to put the MSB in the right position
    for normalized fractions.
    3. Upshift small fractions to put the MSB in the right position.

    There is an boundary error in step 2, causing a fraction with its
    MSB exactly one bit above the normalized MSB position to not be
    downshifted. This results in a non-normalized raw float, which when
    packed becomes a massively inaccurate representation for that input.

    The impact of this depends on a number of arch-specific factors,
    but it is known to have broken emulation of FXTOD instructions
    on UltraSPARC III, which was originally reported as GCC bug 44631
    .

    Any arch which uses math-emu to emulate conversions from integers to
    same-size floats may be affected.

    The fix is simple: the exponent comparison used to determine if the
    fraction should be downshifted must be "
    Signed-off-by: David S. Miller

    Mikael Pettersson
     
  • * 'drm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6:
    drm/r600: fix possible NULL pointer derefernce
    drm/radeon/kms: add quirk for ASUS HD 3600 board
    include/linux/vgaarb.h: add missing part of include guard
    drm/nouveau: Fix crashes during fbcon init on single head cards.
    drm/nouveau: fix pcirom vbios shadow breakage from acpi rom patch
    drm/radeon/kms: fix shared ddc harder
    drm/i915: enable low power render writes on GEN3 hardware.
    drm/i915: Define MI_ARB_STATE bits
    vmwgfx: return -EFAULT if copy_to_user fails
    fb: handle allocation failure in alloc_apertures()
    drm: radeon: check kzalloc() result
    drm/ttm: Fix build on architectures without AGP
    drm/radeon/kms: fix gtt MC base alignment on rs4xx/rs690/rs740 asics
    drm/radeon/kms: fix possible mis-detection of sideport on rs690/rs740
    drm/radeon/kms: fix legacy tv-out pal mode

    Linus Torvalds
     
  • Reported-by: Alexander Y. Fomichev
    Signed-off-by: Alex Deucher
    Signed-off-by: Dave Airlie

    Alex Deucher
     
  • Connector is actually DVI rather than HDMI.

    Reported-by: trapDoor
    Signed-off-by: Alex Deucher
    Cc: stable@kernel.org
    Signed-off-by: Dave Airlie

    Alex Deucher
     
  • vgaarb.h was missing the #define of the #ifndef at the top for the guard
    to prevent multiple #include's from causing re-define errors

    Signed-off-by: Doug Goldstein
    Cc: Dave Airlie
    Cc: Jesse Barnes
    Signed-off-by: Andrew Morton
    Signed-off-by: Dave Airlie

    Doug Goldstein
     
  • * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/sage/ceph-client:
    ceph: do not include cap/dentry releases in replayed messages
    ceph: reuse request message when replaying against recovering mds
    ceph: fix creation of ipv6 sockets
    ceph: fix parsing of ipv6 addresses
    ceph: fix printing of ipv6 addrs
    ceph: add kfree() to error path
    ceph: fix leak of mon authorizer
    ceph: fix message revocation

    Linus Torvalds
     
  • * 'linuxdocs' of git://git.kernel.org/pub/scm/linux/kernel/git/rdunlap/linux-docs:
    documentation: fix almost duplicate filenames (IO/io-mapping.txt)

    Linus Torvalds