16 Oct, 2009

15 commits

  • Linus Torvalds
     
  • * 'docs-next' of git://git.lwn.net/linux-2.6:
    Update flex_arrays.txt

    Linus Torvalds
     
  • * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/teigland/dlm:
    dlm: fix socket fd translation
    dlm: fix lowcomms_connect_node for sctp

    Linus Torvalds
     
  • …git/tip/linux-2.6-tip

    * 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:
    Revert "x86: linker script syntax nits"
    x86, perf_event: Rename 'performance counter interrupt'

    Linus Torvalds
     
  • The destination keyring specified to request_key() and co. is made available to
    the process that instantiates the key (the slave process started by
    /sbin/request-key typically). This is passed in the request_key_auth struct as
    the dest_keyring member.

    keyctl_instantiate_key and keyctl_negate_key() call get_instantiation_keyring()
    to get the keyring to attach the newly constructed key to at the end of
    instantiation. This may be given a specific keyring into which a link will be
    made later, or it may be asked to find the keyring passed to request_key(). In
    the former case, it returns a keyring with the refcount incremented by
    lookup_user_key(); in the latter case, it returns the keyring from the
    request_key_auth struct - and does _not_ increment the refcount.

    The latter case will eventually result in an oops when the keyring prematurely
    runs out of references and gets destroyed. The effect may take some time to
    show up as the key is destroyed lazily.

    To fix this, the keyring returned by get_instantiation_keyring() must always
    have its refcount incremented, no matter where it comes from.

    This can be tested by setting /etc/request-key.conf to:

    #OP TYPE DESCRIPTION CALLOUT INFO PROGRAM ARG1 ARG2 ARG3 ...
    #====== ======= =============== =============== ===============================
    create * test:* * |/bin/false %u %g %d %{user:_display}
    negate * * * /bin/keyctl negate %k 10 @u

    and then doing:

    keyctl add user _display aaaaaaaa @u
    while keyctl request2 user test:x test:x @u &&
    keyctl list @u;
    do
    keyctl request2 user test:x test:x @u;
    sleep 31;
    keyctl list @u;
    done

    which will oops eventually. Changing the negate line to have @u rather than
    %S at the end is important as that forces the latter case by passing a special
    keyring ID rather than an actual keyring ID.

    Reported-by: Alexander Zangerl
    Signed-off-by: David Howells
    Tested-by: Alexander Zangerl
    Signed-off-by: Linus Torvalds

    David Howells
     
  • * 'merge' of git://git.kernel.org/pub/scm/linux/kernel/git/benh/powerpc:
    powerpc/pci: Fix MODPOST warning
    powerpc/oprofile: Add ppc750 CL as supported by oprofile
    powerpc: warning: allocated section `.data_nosave' not in segment
    powerpc/kgdb: Fix build failure caused by "kgdb.c: unused variable 'acc'"
    powerpc: Fix hypervisor TLB batching
    powerpc/mm: Fix hang accessing top of vmalloc space
    powerpc: Fix memory leak in axon_msi.c
    powerpc/pmac: Fix issues with sleep on some powerbooks
    powerpc64/ftrace: use PACA to retrieve TOC in mod_return_to_handler
    powerpc/ftrace: show real return addresses in modules

    Linus Torvalds
     
  • * 'release' of git://git.kernel.org/pub/scm/linux/kernel/git/lenb/linux-acpi-2.6:
    ACPI button: don't try to use a non-existent lid device
    ACPI: video: Loosen strictness of video bus detection code
    eeepc-laptop: Prevent a panic when disabling RT2860 wireless when associated
    eeepc-laptop: Properly annote eeepc_enable_camera().
    ACPI / PCI: Fix NULL pointer dereference in acpi_get_pci_dev() (rev. 2)
    fujitsu-laptop: address missed led-class ifdef fixup
    ACPI: Kconfig, fix proc aggregator text
    ACPI: add AC/DC notifier

    Linus Torvalds
     
  • …/git/tmlind/linux-omap-2.6

    * 'omap-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tmlind/linux-omap-2.6:
    OMAP2xxx clock: set up clockdomain pointer in struct clk
    OMAP: Fix race condition with autodeps
    omap: McBSP: Fix incorrect receiver stop in omap_mcbsp_stop
    omap: Initialization of SDRC params on Zoom2
    omap: RX-51: Drop I2C-1 speed to 2200
    omap: SDMA: Fixing bug in omap_dma_set_global_params()
    omap: CONFIG_ISP1301_OMAP redefined in Beagle defconfig

    Linus Torvalds
     
  • * 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/mason/btrfs-unstable:
    Btrfs: always pin metadata in discard mode
    Btrfs: enable discard support
    Btrfs: add -o discard option
    Btrfs: properly wait log writers during log sync
    Btrfs: fix possible ENOSPC problems with truncate
    Btrfs: fix btrfs acl #ifdef checks
    Btrfs: streamline tree-log btree block writeout
    Btrfs: avoid tree log commit when there are no changes
    Btrfs: only write one super copy during fsync

    Linus Torvalds
     
  • * git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty-2.6:
    tty: fix vt_compat_ioctl

    Linus Torvalds
     
  • * git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/driver-core-2.6:
    sysfs: Allow sysfs_notify_dirent to be called from interrupt context.
    sysfs: Allow sysfs_move_dir(..., NULL) again.

    Linus Torvalds
     
  • * git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb-2.6:
    USB: gadget: Fix EEM driver comments and VID/PID
    usb-storage: Workaround devices with bogus sense size
    USB: ehci: Fix IST boundary checking interval math.
    USB: option: Support for AIRPLUS MCD650 Datacard
    USB: whci-hcd: always do an update after processing a halted qTD
    USB: whci-hcd: handle early deletion of endpoints
    USB: wusb: don't use the stack to read security descriptor
    USB: rename Documentation/ABI/.../sysfs-class-usb_host

    Linus Torvalds
     
  • * git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging-2.6:
    Staging: rt2860sta: prevent a panic when disabling when associated
    staging: more sched.h fixes
    Staging: et131x: Fix the add_10bit macro
    Staging: et131x: Correct WRAP bit handling
    staging: Complete sched.h removal from interrupt.h
    Staging: vme: fix sched.h build breakage
    Staging: poch: fix sched.h build breakage
    Staging: b3dfg: fix sched.h build breakage
    Staging: comedi: fix sched.h build breakage
    Staging: iio: Fix missing include

    Linus Torvalds
     
  • * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6: (53 commits)
    vmxnet: fix 2 build problems
    net: add support for STMicroelectronics Ethernet controllers.
    net: ks8851_mll uses mii interfaces
    net/fec_mpc52xx: Fix kernel panic on FEC error
    net: Fix OF platform drivers coldplug/hotplug when compiled as modules
    TI DaVinci EMAC: Clear statistics register properly.
    r8169: partial support and phy init for the 8168d
    irda/sa1100_ir: check return value of startup hook
    udp: Fix udp_poll() and ioctl()
    WAN: fix Cisco HDLC handshaking.
    tcp: fix tcp_defer_accept to consider the timeout
    3c574_cs: spin_lock the set_multicast_list function
    net: Teach pegasus driver to ignore bluetoother adapters with clashing Vendor:Product IDs
    netxen: fix pci bar mapping
    ethoc: fix warning from 32bit build
    libertas: fix build
    net: VMware virtual Ethernet NIC driver: vmxnet3
    net: Fix IXP 2000 network driver building.
    libertas: fix build
    mac80211: document ieee80211_rx() context requirement
    ...

    Linus Torvalds
     
  • * branch 'tty-fixes'
    tty: use the new 'flush_delayed_work()' helper to do ldisc flush
    workqueue: add 'flush_delayed_work()' to run and wait for delayed work
    tty: Make flush_to_ldisc() locking more robust

    Linus Torvalds
     

15 Oct, 2009

25 commits