linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Paul Gortmaker <paul.gortmaker@windriver.com>
To: stable@kernel.org, linux-kernel@vger.kernel.org
Cc: stable-review@kernel.org,
	Linus Torvalds <torvalds@linux-foundation.org>,
	Mauro Carvalho Chehab <mchehab@infradead.org>,
	Paul Gortmaker <paul.gortmaker@windriver.com>
Subject: [34-longterm 176/260] v4l1: fix 32-bit compat microcode loading translation
Date: Sun,  2 Jan 2011 02:17:52 -0500	[thread overview]
Message-ID: <1293952756-15010-177-git-send-email-paul.gortmaker@windriver.com> (raw)
In-Reply-To: <1293952756-15010-1-git-send-email-paul.gortmaker@windriver.com>

From: Linus Torvalds <torvalds@linux-foundation.org>

commit 3e645d6b485446c54c6745c5e2cf5c528fe4deec upstream.

The compat code for the VIDIOCSMICROCODE ioctl is totally buggered.
It's only used by the VIDEO_STRADIS driver, and that one is scheduled to
staging and eventually removed unless somebody steps up to maintain it
(at which point it should use request_firmware() rather than some magic
ioctl).  So we'll get rid of it eventually.

But in the meantime, the compatibility ioctl code is broken, and this
tries to get it to at least limp along (even if Mauro suggested just
deleting it entirely, which may be the right thing to do - I don't think
the compatibility translation code has ever worked unless you were very
lucky).

Reported-by: Kees Cook <kees.cook@canonical.com>
Cc: Mauro Carvalho Chehab <mchehab@infradead.org>
Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Signed-off-by: Paul Gortmaker <paul.gortmaker@windriver.com>
---
 drivers/media/video/v4l2-compat-ioctl32.c |   32 +++++++++++++++++++----------
 1 files changed, 21 insertions(+), 11 deletions(-)

diff --git a/drivers/media/video/v4l2-compat-ioctl32.c b/drivers/media/video/v4l2-compat-ioctl32.c
index f77f84b..e6a5d55 100644
--- a/drivers/media/video/v4l2-compat-ioctl32.c
+++ b/drivers/media/video/v4l2-compat-ioctl32.c
@@ -193,17 +193,24 @@ static int put_video_window32(struct video_window *kp, struct video_window32 __u
 struct video_code32 {
 	char		loadwhat[16];	/* name or tag of file being passed */
 	compat_int_t	datasize;
-	unsigned char	*data;
+	compat_uptr_t	data;
 };
 
-static int get_microcode32(struct video_code *kp, struct video_code32 __user *up)
+static struct video_code __user *get_microcode32(struct video_code32 *kp)
 {
-	if (!access_ok(VERIFY_READ, up, sizeof(struct video_code32)) ||
-		copy_from_user(kp->loadwhat, up->loadwhat, sizeof(up->loadwhat)) ||
-		get_user(kp->datasize, &up->datasize) ||
-		copy_from_user(kp->data, up->data, up->datasize))
-			return -EFAULT;
-	return 0;
+	struct video_code __user *up;
+
+	up = compat_alloc_user_space(sizeof(*up));
+
+	/*
+	 * NOTE! We don't actually care if these fail. If the
+	 * user address is invalid, the native ioctl will do
+	 * the error handling for us
+	 */
+	(void) copy_to_user(up->loadwhat, kp->loadwhat, sizeof(up->loadwhat));
+	(void) put_user(kp->datasize, &up->datasize);
+	(void) put_user(compat_ptr(kp->data), &up->data);
+	return up;
 }
 
 #define VIDIOCGTUNER32		_IOWR('v', 4, struct video_tuner32)
@@ -744,7 +751,7 @@ static long do_video_ioctl(struct file *file, unsigned int cmd, unsigned long ar
 		struct video_tuner vt;
 		struct video_buffer vb;
 		struct video_window vw;
-		struct video_code vc;
+		struct video_code32 vc;
 		struct video_audio va;
 #endif
 		struct v4l2_format v2f;
@@ -823,8 +830,11 @@ static long do_video_ioctl(struct file *file, unsigned int cmd, unsigned long ar
 		break;
 
 	case VIDIOCSMICROCODE:
-		err = get_microcode32(&karg.vc, up);
-		compatible_arg = 0;
+		/* Copy the 32-bit "video_code32" to kernel space */
+		if (copy_from_user(&karg.vc, up, sizeof(karg.vc)))
+			return -EFAULT;
+		/* Convert the 32-bit version to a 64-bit version in user space */
+		up = get_microcode32(&karg.vc);
 		break;
 
 	case VIDIOCSFREQ:
-- 
1.7.3.3


  parent reply	other threads:[~2011-01-02  7:38 UTC|newest]

Thread overview: 272+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-01-02  7:14 [34-longterm 000/260] v2.6.34.8 longterm review Paul Gortmaker
2011-01-02  7:14 ` [34-longterm 001/260] sctp: fix append error cause to ERROR chunk correctly Paul Gortmaker
2011-01-02  7:14 ` [34-longterm 002/260] KEYS: Return more accurate error codes Paul Gortmaker
2011-01-02  7:14 ` [34-longterm 003/260] ath5k: drop warning on jumbo frames Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 004/260] ext4: check missed return value in ext4_sync_file() Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 005/260] ext4: fix memory leaks in error path handling of ext4_ext_zeroout() Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 006/260] ext4: Remove unnecessary call to ext4_get_group_desc() in mballoc Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 007/260] ext4: rename ext4_mb_release_desc() to ext4_mb_unload_buddy() Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 008/260] ext4: allow defrag (EXT4_IOC_MOVE_EXT) in 32bit compat mode Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 009/260] ext4: fix quota accounting in case of fallocate Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 010/260] ext4: don't return to userspace after freezing the fs with a mutex held Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 011/260] ext4: stop issuing discards if not supported by device Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 012/260] ext4: don't scan/accumulate more pages than mballoc will allocate Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 013/260] ext4: Do not zero out uninitialized extents beyond i_size Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 014/260] ext4: clean up inode bitmaps manipulation in ext4_free_inode Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 015/260] ext4: init statistics after journal recovery Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 016/260] ext4: Remove extraneous newlines in ext4_msg() calls Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 017/260] ext4: Prevent creation of files larger than RLIMIT_FSIZE using fallocate Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 018/260] ext4: check for a good block group before loading buddy pages Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 019/260] ext4: Show journal_checksum option Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 020/260] ext4: Use bitops to read/modify i_flags in struct ext4_inode_info Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 021/260] ext4: Avoid crashing on NULL ptr dereference on a filesystem error Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 022/260] ext4: Clear the EXT4_EOFBLOCKS_FL flag only when warranted Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 023/260] ext4: restart ext4_ext_remove_space() after transaction restart Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 024/260] ext4: Conditionally define compat ioctl numbers Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 025/260] ext4: Fix compat EXT4_IOC_ADD_GROUP Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 026/260] ext4: Make fsync sync new parent directories in no-journal mode Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 027/260] CIFS: Remove __exit mark from cifs_exit_dns_resolver() Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 028/260] ext4: fix freeze deadlock under IO Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 029/260] hwmon: (k8temp) Differentiate between AM2 and ASB1 Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 030/260] xen: handle events as edge-triggered Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 031/260] xen: use percpu interrupts for IPIs and VIRQs Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 032/260] ALSA: hda - Rename iMic to Int Mic on Lenovo NB0763 Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 033/260] sata_mv: fix broken DSM/TRIM support (v2) Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 034/260] x86, tsc, sched: Recompute cyc2ns_offset's during resume from sleep states Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 035/260] PCI: MSI: Remove unsafe and unnecessary hardware access Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 036/260] PCI: MSI: Restore read_msi_msg_desc(); add get_cached_msi_msg_desc() Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 037/260] staging: hv: Fix missing functions for net_device_ops Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 038/260] staging: hv: Fixed bounce kmap problem by using correct index Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 039/260] staging: hv: Fixed the value of the 64bit-hole inside ring buffer Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 040/260] staging: hv: Increased storvsc ringbuffer and max_io_requests Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 041/260] staging: hv: Fixed lockup problem with bounce_buffer scatter list Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 042/260] fuse: flush background queue on connection close Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 043/260] ath9k_hw: fix parsing of HT40 5 GHz CTLs Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 044/260] ocfs2: Fix incorrect checksum validation error Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 045/260] USB: ehci-ppc-of: problems in unwind Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 046/260] USB: Fix kernel oops with g_ether and Windows Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 047/260] USB: CP210x Add new device ID Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 048/260] USB: cp210x: Add B&G H3000 link cable ID Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 049/260] USB: ftdi_sio: Added custom PIDs for ChamSys products Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 050/260] usb: serial: mos7840: Add USB ID to support the B&B Electronics USOPTL4-2P Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 051/260] usb: serial: mos7840: Add USB IDs to support more B&B USB/RS485 converters Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 052/260] USB: Expose vendor-specific ACM channel on Nokia 5230 Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 053/260] USB: cdc-acm: Adding second ACM channel support for various Nokia and one Samsung phones Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 054/260] USB: cdc-acm: Add pseudo modem without AT command capabilities Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 055/260] USB: cdc-acm: Fixing crash when ACM probing interfaces with no endpoint descriptors Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 056/260] ALSA: seq/oss - Fix double-free at error path of snd_seq_oss_open() Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 057/260] sysfs: checking for NULL instead of ERR_PTR Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 058/260] oprofile: fix crash when accessing freed task structs Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 059/260] oprofile, x86: fix init_sysfs error handling Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 060/260] oprofile, x86: fix init_sysfs() function stub Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 061/260] libata: skip EH autopsy and recovery during suspend Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 062/260] tracing: Fix a race in function profile Paul Gortmaker
2011-01-02  7:15 ` [34-longterm 063/260] tracing: Do not allow llseek to set_ftrace_filter Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 064/260] tracing: t_start: reset FTRACE_ITER_HASH in case of seek/pread Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 065/260] irda: off by one Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 066/260] gcov: fix null-pointer dereference for certain module types Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 067/260] tmio_mmc: don't clear unhandled pending interrupts Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 068/260] mmc: fix the use of kunmap_atomic() in tmio_mmc.h Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 069/260] bounce: call flush_dcache_page() after bounce_copy_vec() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 070/260] kernel/groups.c: fix integer overflow in groups_search Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 071/260] binfmt_misc: fix binfmt_misc priority Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 072/260] Input: i8042 - fix device removal on unload Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 073/260] memory hotplug: fix next block calculation in is_removable Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 074/260] perf: Initialize callchains roots's childen hits Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 075/260] p54: fix tx feedback status flag check Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 076/260] ath5k: check return value of ieee80211_get_tx_rate Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 077/260] wireless extensions: fix kernel heap content leak Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 078/260] x86, tsc: Fix a preemption leak in restore_sched_clock_state() Paul Gortmaker
2011-01-02 10:17   ` 2.6.37-rc7: screen black after several suspends Nico Schottelius
2011-01-03  8:03     ` [34-longterm 078/260] x86, tsc: Fix a preemption leak in restore_sched_clock_state() Nico Schottelius
2011-01-13 15:09     ` 2.6.37-rc7: screen black after several suspends Nico Schottelius
2011-01-02  7:16 ` [34-longterm 079/260] x86-64, compat: Test %rax for the syscall number, not %eax Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 080/260] compat: Make compat_alloc_user_space() incorporate the access_ok() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 081/260] x86-64, compat: Retruncate rax after ia32 syscall entry tracing Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 082/260] sched: Kill the broken and deadlockable cpuset_lock/cpuset_cpus_allowed_locked code Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 083/260] sched: move_task_off_dead_cpu(): Take rq->lock around select_fallback_rq() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 084/260] sched: move_task_off_dead_cpu(): Remove retry logic Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 085/260] sched: sched_exec(): Remove the select_fallback_rq() logic Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 086/260] sched: _cpu_down(): Don't play with current->cpus_allowed Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 087/260] sched: Make select_fallback_rq() cpuset friendly Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 088/260] sched: Fix TASK_WAKING vs fork deadlock Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 089/260] sched: Optimize task_rq_lock() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 090/260] sched: Fix nr_uninterruptible count Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 091/260] sched: Fix rq->clock synchronization when migrating tasks Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 092/260] rcu: apply RCU protection to wake_affine() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 093/260] sched: Fix select_idle_sibling() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 094/260] sched: Pre-compute cpumask_weight(sched_domain_span(sd)) Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 095/260] sched: Fix select_idle_sibling() logic in select_task_rq_fair() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 096/260] ALSA: hda - Handle missing NID 0x1b on ALC259 codec Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 097/260] ALSA: hda - Handle pin NID 0x1a on ALC259/269 Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 098/260] arm: fix really nasty sigreturn bug Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 099/260] hwmon: (f75375s) Shift control mode to the correct bit position Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 100/260] hwmon: (f75375s) Do not overwrite values read from registers Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 101/260] apm_power: Add missing break statement Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 102/260] NFS: Fix a typo in nfs_sockaddr_match_ipaddr6 Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 103/260] SUNRPC: Fix race corrupting rpc upcall Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 104/260] i915: return -EFAULT if copy_to_user fails Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 105/260] " Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 106/260] drm/i915: Prevent double dpms on Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 107/260] drm: Only decouple the old_fb from the crtc is we call mode_set* Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 108/260] tun: Don't add sysfs attributes to devices without sysfs directories Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 109/260] USB: serial/mos*: prevent reading uninitialized stack memory Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 110/260] gro: fix different skb headrooms Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 111/260] gro: Re-fix " Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 112/260] irda: Correctly clean up self->ias_obj on irda_bind() failure Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 113/260] tcp: select(writefds) don't hang up when a peer close connection Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 114/260] tcp: Combat per-cpu skew in orphan tests Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 115/260] tcp: fix three tcp sysctls tuning Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 116/260] bridge: Clear IPCB before possible entry into IP stack Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 117/260] bridge: Clear INET control block of SKBs passed into ip_fragment() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 118/260] rds: fix a leak of kernel memory Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 119/260] tcp: Prevent overzealous packetization by SWS logic Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 120/260] UNIX: Do not loop forever at unix_autobind() Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 121/260] sparc64: Get rid of indirect p1275 PROM call buffer Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 122/260] drivers/net/usb/hso.c: prevent reading uninitialized memory Paul Gortmaker
2011-01-02  7:16 ` [34-longterm 123/260] drivers/net/cxgb3/cxgb3_main.c: prevent reading uninitialized stack memory Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 124/260] drivers/net/eql.c: " Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 125/260] bonding: correctly process non-linear skbs Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 126/260] Staging: vt6655: fix buffer overflow Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 127/260] net/llc: make opt unsigned in llc_ui_setsockopt() Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 128/260] pid: make setpgid() system call use RCU read-side critical section Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 129/260] sched: Fix user time incorrectly accounted as system time on 32-bit Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 130/260] oprofile: Add Support for Intel CPU Family 6 / Model 22 (Intel Celeron 540) Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 131/260] char: Mark /dev/zero and /dev/kmem as not capable of writeback Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 132/260] drivers/pci/intel-iommu.c: fix build with older gcc's Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 133/260] drivers/video/sis/sis_main.c: prevent reading uninitialized stack memory Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 134/260] percpu: fix pcpu_last_unit_cpu Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 135/260] aio: check for multiplication overflow in do_io_submit Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 136/260] inotify: send IN_UNMOUNT events Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 137/260] mptsas: fix hangs caused by ATA pass-through Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 138/260] ext4: Fix remaining racy updates of EXT4_I(inode)->i_flags Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 139/260] fix siglock Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 140/260] Optimize ticket spinlocks in fsys_rt_sigprocmask Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 141/260] KEYS: Fix RCU no-lock warning in keyctl_session_to_parent() Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 142/260] KEYS: Fix bug in keyctl_session_to_parent() if parent has no session keyring Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 143/260] xfs: prevent reading uninitialized stack memory Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 144/260] drivers/video/via/ioctl.c: " Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 145/260] AT91: change dma resource index Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 146/260] mm: page allocator: drain per-cpu lists after direct reclaim allocation fails Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 147/260] mm: page allocator: calculate a better estimate of NR_FREE_PAGES when memory is low and kswapd is awake Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 148/260] mm: page allocator: update free page counters after pages are placed on the free list Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 149/260] guard page for stacks that grow upwards Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 150/260] Fix unprotected access to task credentials in waitid() Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 151/260] sctp: Do not reset the packet during sctp_packet_config() Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 152/260] dasd: use correct label location for diag fba disks Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 153/260] hostap_pci: set dev->base_addr during probe Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 154/260] inotify: fix inotify oneshot support Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 155/260] MIPS: Quit using undefined behavior of ADDU in 64-bit atomic operations Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 156/260] MIPS: Set io_map_base for several PCI bridges lacking it Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 157/260] sis-agp: Remove SIS 760, handled by amd64-agp Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 158/260] alpha: Fix printk format errors Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 159/260] x86, cpu: After uncapping CPUID, re-run CPU feature detection Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 160/260] ALSA: sound/pci/rme9652: prevent reading uninitialized stack memory Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 161/260] ALSA: oxygen: fix analog capture on Claro halo cards Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 162/260] ALSA: hda - Add Dell Latitude E6400 model quirk Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 163/260] ALSA: prevent heap corruption in snd_ctl_new() Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 164/260] ALSA: rawmidi: fix oops (use after free) when unloading a driver module Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 165/260] USB: fix bug in initialization of interface minor numbers Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 166/260] usb: musb: gadget: fix kernel panic if using out ep with FIFO_TXRX style Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 167/260] usb: musb: gadget: restart request on clearing endpoint halt Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 168/260] oprofile: Add Support for Intel CPU Family 6 / Model 29 Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 169/260] RDMA/cxgb3: Turn off RX coalescing for iWARP connections Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 170/260] mmc: sdhci-s3c: fix NULL ptr access in sdhci_s3c_remove Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 171/260] x86/amd-iommu: Set iommu configuration flags in enable-loop Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 172/260] x86/amd-iommu: Fix rounding-bug in __unmap_single Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 173/260] x86/amd-iommu: Work around S3 BIOS bug Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 174/260] tracing/x86: Don't use mcount in pvclock.c Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 175/260] tracing/x86: Don't use mcount in kvmclock.c Paul Gortmaker
2011-01-02  7:17 ` Paul Gortmaker [this message]
2011-01-02  7:17 ` [34-longterm 177/260] V4L/DVB: cx231xx: Avoid an OOPS when card is unknown (card=0) Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 178/260] Input: joydev - fix JSIOCSAXMAP ioctl Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 179/260] x86, hpet: Fix bogus error check in hpet_assign_irq() Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 180/260] x86, irq: Plug memory leak in sparse irq Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 181/260] ubd: fix incorrect sector handling during request restart Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 182/260] ring-buffer: Fix typo of time extends per page Paul Gortmaker
2011-01-02  7:17 ` [34-longterm 183/260] dmaengine: fix interrupt clearing for mv_xor Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 184/260] hrtimer: Preserve timer state in remove_hrtimer() Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 185/260] i2c-pca: Fix waitforcompletion() return value Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 186/260] ocfs2: Don't walk off the end of fast symlinks Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 187/260] wext: fix potential private ioctl memory content leak Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 188/260] atl1: fix resume Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 189/260] x86, AMD, MCE thresholding: Fix the MCi_MISCj iteration order Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 190/260] De-pessimize rds_page_copy_user Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 191/260] drm/radeon: fix PCI ID 5657 to be an RV410 Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 192/260] xfrm4: strip ECN bits from tos field Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 193/260] tcp: Fix >4GB writes on 64-bit Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 194/260] net: Fix the condition passed to sk_wait_event() Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 195/260] Phonet: Correct header retrieval after pskb_may_pull Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 196/260] net: Fix IPv6 PMTU disc. w/ asymmetric routes Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 197/260] ip: fix truesize mismatch in ip fragmentation Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 198/260] net: clear heap allocations for privileged ethtool actions Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 199/260] tcp: Fix race in tcp_poll Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 200/260] netxen: dont set skb->truesize Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 201/260] rose: Fix signedness issues wrt. digi count Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 202/260] net: blackhole route should always be recalculated Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 203/260] skge: add quirk to limit DMA Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 204/260] r8169: allocate with GFP_KERNEL flag when able to sleep Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 205/260] bsg: fix incorrect device_status value Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 206/260] powerpc: Initialise paca->kstack before early_setup_secondary Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 207/260] powerpc: Don't use kernel stack with translation off Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 208/260] b44: fix carrier detection on bind Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 209/260] ACPI: enable repeated PCIEXP wakeup by clearing PCIEXP_WAKE_STS on resume Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 210/260] intel_idle: PCI quirk to prevent Lenovo Ideapad s10-3 boot hang Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 211/260] ACPI: EC: add Vista incompatibility DMI entry for Toshiba Satellite L355 Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 212/260] ACPI: delete ZEPTO idle=nomwait DMI quirk Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 213/260] ACPI: Disable Windows Vista compatibility for Toshiba P305D Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 214/260] x86: detect scattered cpuid features earlier Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 215/260] setup_arg_pages: diagnose excessive argument size Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 216/260] execve: improve interactivity with large arguments Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 217/260] execve: make responsive to SIGKILL " Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 218/260] mm: Move vma_stack_continue into mm.h Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 219/260] staging: usbip: Notify usb core of port status changes Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 220/260] staging: usbip: Process event flags without delay Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 221/260] powerpc/perf: Fix sampling enable for PPC970 Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 222/260] pcmcia: synclink_cs: fix information leak to userland Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 223/260] sched: Fix string comparison in /proc/sched_features Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 224/260] bluetooth: Fix missing NULL check Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 225/260] futex: Fix errors in nested key ref-counting Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 226/260] mm, x86: Saving vmcore with non-lazy freeing of vmas Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 227/260] x86, cpu: Fix renamed, not-yet-shipping AMD CPUID feature bit Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 228/260] x86, kexec: Make sure to stop all CPUs before exiting the kernel Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 229/260] x86, olpc: Don't retry EC commands forever Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 230/260] x86, mtrr: Assume SYS_CFG[Tom2ForceMemTypeWB] exists on all future AMD CPUs Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 231/260] x86, intr-remap: Set redirection hint in the IRTE Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 232/260] x86, kdump: Change copy_oldmem_page() to use cached addressing Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 233/260] KVM: MMU: fix direct sp's access corrupted Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 234/260] KVM: MMU: fix conflict access permissions in direct sp Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 235/260] KVM: VMX: Fix host GDT.LIMIT corruption Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 236/260] KVM: x86: Fix SVM VMCB reset Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 237/260] KVM: x86: Move TSC reset out of vmcb_init Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 238/260] KVM: Fix fs/gs reload oops with invalid ldt Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 239/260] pipe: fix failure to return error code on ->confirm() Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 240/260] p54usb: fix off-by-one on !CONFIG_PM Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 241/260] p54usb: add five more USBIDs Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 242/260] drivers/net/wireless/p54/eeprom.c: Return -ENOMEM on memory allocation failure Paul Gortmaker
2011-01-02  7:18 ` [34-longterm 243/260] USB: ftdi_sio: Add PID for accesio products Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 244/260] USB: add PID for FTDI based OpenDCC hardware Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 245/260] USB: ftdi_sio: new VID/PIDs for various Papouch devices Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 246/260] USB: ftdi_sio: add device ids for ScienceScope Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 247/260] usb: musb: blackfin: call gpio_free() on error path in musb_platform_init() Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 248/260] USB: option: Add more ZTE modem USB id's Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 249/260] USB: cp210x: Add Renesas RX-Stick device ID Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 250/260] USB: cp210x: Add WAGO 750-923 Service Cable " Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 251/260] USB: atmel_usba_udc: force vbus_pin at -EINVAL when gpio_request failled Paul Gortmaker
2011-01-05 18:59   ` Jean-Christophe PLAGNIOL-VILLARD
2011-01-05 21:29     ` Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 252/260] USB: disable endpoints after unbinding interfaces, not before Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 253/260] USB: opticon: Fix long-standing bugs in opticon driver Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 254/260] USB: accept some invalid ep0-maxpacket values Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 255/260] sd name space exhaustion causes system hang Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 256/260] libsas: fix NCQ mixing with non-NCQ Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 257/260] gdth: integer overflow in ioctl Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 258/260] Fix race when removing SCSI devices Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 259/260] Fix regressions in scsi_internal_device_block Paul Gortmaker
2011-01-02  7:19 ` [34-longterm 260/260] sgi-xp: incoming XPC channel messages can come in after the channel's partition structures have been torn down Paul Gortmaker
2011-01-02  7:57 ` [34-longterm 000/260] v2.6.34.8 longterm review Ted Ts'o
2011-01-02 10:46   ` Paul Gortmaker
2011-01-03 10:41 ` Jiri Slaby
2011-01-04 19:11   ` Paul Gortmaker
2011-01-06 12:47     ` Jiri Slaby
2011-01-06 15:53       ` Paul Gortmaker

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1293952756-15010-177-git-send-email-paul.gortmaker@windriver.com \
    --to=paul.gortmaker@windriver.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=mchehab@infradead.org \
    --cc=stable-review@kernel.org \
    --cc=stable@kernel.org \
    --cc=torvalds@linux-foundation.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).