Kernel 2.6.18.5 + tutorial (1 cd)
Rp.5,000
commit 291a77474631709cf3e68d3cb0e9241af4b26bad
Author: Chris Wright
Date: Fri Dec 1 16:13:05 2006 -0800
Linux 2.6.18.5
commit 3cb204502cafebf346cdb7d7db750811550fa53c
Author: Olaf Kirch
Date: Tue Nov 28 20:36:46 2006 -0800
[PATCH] UDP: Make udp_encap_rcv use pskb_may_pull
IPsec with NAT-T breaks on some notebooks using the latest e1000 chipset,
when header split is enabled. When receiving sufficiently large packets, the
driver puts everything up to and including the UDP header into the header
portion of the skb, and the rest goes into the paged part. udp_encap_rcv
forgets to use pskb_may_pull, and fails to decapsulate it. Instead, it
passes it up it to the IKE daemon.
Signed-off-by: Olaf Kirch
Signed-off-by: Jean Delvare
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit 3cc15f4f6e5dbd44a0994f3a1fb5346a0260b8c9
Author: Miklos Szeredi
Date: Sat Nov 25 11:09:20 2006 -0800
[PATCH] fuse: fix Oops in lookup
Fix bug in certain error paths of lookup routines. The request object was
reused for sending FORGET, which is illegal. This bug could cause an Oops
in 2.6.18. In earlier versions it might silently corrupt memory, but this
is very unlikely.
These error paths are never triggered by libfuse, so this wasn't noticed
even with the 2.6.18 kernel, only with a filesystem using the raw kernel
interface.
Thanks to Russ Cox for the bug report and test filesystem.
Signed-off-by: Miklos Szeredi
Cc:
Signed-off-by: Andrew Morton
[chrisw: backport to 2.6.18 -stable]
Signed-off-by: Chris Wright
commit 00e7bb6cc1034c0240c7e4474a79c51b6a1a8cbe
Author: Linus Torvalds
Date: Wed Nov 22 23:59:02 2006 +0000
[PATCH] AGP: Allocate AGP pages with GFP_DMA32 by default
Not all graphic page remappers support physical addresses over the 4GB
mark for remapping, so while some do (the AMD64 GART always did, and I
just fixed the i965 to do so properly), we're safest off just forcing
GFP_DMA32 allocations to make sure graphics pages get allocated in the
low 32-bit address space by default.
AGP sub-drivers that really care, and can do better, could just choose
to implement their own allocator (or we could add another "64-bit safe"
default allocator for their use), but quite frankly, you're not likely
to care in practice.
So for now, this trivial change means that we won't be allocating pages
that we can't map correctly by mistake on x86-64.
[ On traditional 32-bit x86, this could never happen, because GFP_KERNEL
would never allocate any highmem memory anyway ]
Acked-by: Andi Kleen
Acked-by: Dave Jones
Cc: Eric Anholt
Cc: Keith Packard
Signed-off-by: Linus Torvalds
Signed-off-by: Chris Wright
commit d04db24f10d11acdecc4a718b1f27afb91533dbf
Author: David S. Miller
Date: Wed Nov 22 02:59:08 2006 +0000
[PATCH] BLUETOOTH: Fix unaligned access in hci_send_to_sock.
The "u16 *" derefs of skb->data need to be wrapped inside of
a get_unaligned().
Thanks to Gustavo Zacarias for the bug report.
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit f0017a04c679278dcd6d6e042a967ea695b04eef
Author: Robin Holt
Date: Tue Nov 14 20:50:59 2006 -0600
[PATCH] IA64: bte_unaligned_copy() transfers one extra cache line.
When called to do a transfer that has a start offset within the cache
line which is uneven between source and destination and a length which
terminates the source of the copy exactly on a cache line, one extra
line gets copied into a temporary buffer. This is normally not an issue
since the buffer is a kernel buffer and only the requested information
gets copied into the user buffer.
The problem arises when the source ends at the very last physical page
of memory. That last cache line does not exist and results in the SHUB
chip raising an MCA.
Signed-off-by: Robin Holt
Signed-off-by: Dean Nelson
Signed-off-by: Tony Luck
Signed-off-by: Chris Wright
commit 984db69c4ecafdb6b69d46641bd84e93f9152c9a
Author: YOSHIFUJI Hideaki
Date: Wed Nov 22 02:59:09 2006 +0000
[PATCH] IPV6: Fix address/interface handling in UDP and DCCP, according to the scoping architecture.
TCP and RAW do not have this issue. Closes Bug #7432.
Signed-off-by: YOSHIFUJI Hideaki
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit 0832d6b41e42dc682a53b2ab0417e6d285a1d523
Author: Ira W. Snyder
Date: Wed Nov 22 02:59:09 2006 +0000
[PATCH] TG3: Add missing unlock in tg3_open() error path.
Sparse noticed a locking imbalance in tg3_open(). This patch adds an
unlock to one of the error paths, so that tg3_open() always exits
without the lock held.
Signed-off-by: Ira W. Snyder
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit e8203cf3c3824105a01b0e7476b01d389710631c
Author: Laurent Riffard
Date: Thu Oct 12 00:17:36 2006 +0200
[PATCH] softmac: fix a slab corruption in WEP restricted key association
Fix a slab corruption in ieee80211softmac_auth(). The size of a buffer
was miscomputed.
see http://bugzilla.kernel.org/show_bug.cgi?id=7245
Acked-by: Daniel Drake
Signed-off-by: Laurent Riffard
Signed-off-by: John W. Linville
Signed-off-by: Chris Wright
commit 542975fee3541dff69a4f064ad459940f54f1c32
Author: Fernando J. Pereda
Date: Mon Nov 20 12:04:19 2006 -0500
[PATCH] alpha: Fix ALPHA_EV56 dependencies typo
There appears to be a typo in the EV56 config option. NORITAKE and PRIMO are
be able to set a variation of either.
Signed-off-by: Daniel Drake
Cc: Richard Henderson
Cc: Ivan Kokshaysky
Signed-off-by: Andrew Morton
Signed-off-by: Linus Torvalds
Signed-off-by: Chris Wright
commit 44b3e3dc001b3aad89409a55f9ce2a83e047fb7d
Author: Shaohua Li
Date: Mon Nov 20 12:02:46 2006 -0500
[PATCH] x86 microcode: don't check the size
IA32 manual says if micorcode update's size is 0, then the size is
default size (2048 bytes). But this doesn't suggest all microcode
update's size should be above 2048 bytes to me. We actually had a
microcode update whose size is 1024 bytes. The patch just removed the
check.
Backported to 2.6.18 by Daniel Drake.
Signed-off-by: Daniel Drake
Signed-off-by: Chris Wright
commit 93d97b9255d51d6d03014867abaa230fb6771255
Author: Maciej W. Rozycki
Date: Sun Nov 19 22:17:31 2006 -0500
[PATCH] V4L: Do not enable VIDEO_V4L2 unconditionally
V4L: Do not enable VIDEO_V4L2 unconditionally
The VIDEO_V4L2 config setting is enabled unconditionally, even for
configurations with no support for this subsystem whatsoever. The
following patch adds the necessary dependency.
Signed-off-by: Maciej W. Rozycki
Signed-off-by: Mauro Carvalho Chehab
Signed-off-by: Michael Krufky
Signed-off-by: Chris Wright
commit 159226d1940245a918b8dc8ebe65ad5827ab8f82
Author: Daniel Ritz
Date: Sat Nov 18 22:19:34 2006 -0800
[PATCH] pcmcia: fix 'rmmod pcmcia' with unbound devices
Having unbound PCMCIA devices: doing a 'find /sys' after a 'rmmod pcmcia'
gives an oops because the pcmcia_device is not unregisterd from the driver
core.
fixes bugzilla #7481
Signed-off-by: Daniel Ritz
Acked-by: Dominik Brodowski
Cc: Pavol Gono
Cc:
Signed-off-by: Andrew Morton
Signed-off-by: Linus Torvalds
[chrisw: add subsequent mutex fix]
Signed-off-by: Chris Wright
commit a5812a61ad72c94afdad2aa81dda5ffa7838f3d5
Author: Patrick McHardy
Date: Fri Nov 17 21:08:11 2006 +0100
[PATCH] NETFILTER: H.323 conntrack: fix crash with CONFIG_IP_NF_CT_ACCT
H.323 connection tracking code calls ip_ct_refresh_acct() when
processing RCFs and URQs but passes NULL as the skb.
When CONFIG_IP_NF_CT_ACCT is enabled, the connection tracking core tries
to derefence the skb, which results in an obvious panic.
A similar fix was applied on the SIP connection tracking code some time
ago.
Signed-off-by: Faidon Liambotis
Signed-off-by: Patrick McHardy
Signed-off-by: Chris Wright
commit 5cecaf35edb8cc6c65b64c276dc778ed8210044e
Author: Michael Buesch
Date: Sun Nov 5 15:34:36 2006 -0600
[PATCH] bcm43xx: Drain TX status before starting IRQs
Drain the Microcode TX-status-FIFO before we enable IRQs.
This is required, because the FIFO may still have entries left
from a previous run. Those would immediately fire after enabling
IRQs and would lead to an oops in the DMA TXstatus handling code.
Cc: "John W. Linville"
Signed-off-by: Michael Buesch
Signed-off-by: Larry Finger
Signed-off-by: Chris Wright
commit 60bfda8425497a590e75a71e783de89dec9c299b
Author: Patrick McHardy
Date: Fri Nov 17 06:35:50 2006 +0100
[PATCH] NETFILTER: xt_CONNSECMARK: fix Kconfig dependencies
CONNSECMARK needs conntrack, add missing dependency to fix linking error
with CONNSECMARK=y and CONNTRACK=m.
Reported by Toralf Förster .
Signed-off-by: Patrick McHardy
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit 96fba05bc0c49720732ea15ddcbcdc6e95a03599
Author: Patrick McHardy
Date: Fri Nov 17 06:35:49 2006 +0100
[PATCH] NETFILTER: Kconfig: fix xt_physdev dependencies
xt_physdev depends on bridge netfilter, which is a boolean, but can still
be built modular because of special handling in the bridge makefile. Add
a dependency on BRIDGE to prevent XT_MATCH_PHYSDEV=y, BRIDGE=m.
Signed-off-by: Patrick McHardy
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit faed318ca83f5401c91e74b297fbe06ae719606e
Author: Patrick McHardy
Date: Fri Nov 17 06:35:48 2006 +0100
[PATCH] NETFILTER: Honour source routing for LVS-NAT
For policy routing, packets originating from this machine itself may be
routed differently to packets passing through. We want this packet to be
routed as if it came from this machine itself. So re-compute the routing
information using ip_route_me_harder().
This patch is derived from work by Ken Brownfield
This patch (-stable version) also includes commit
b4c4ed175ff0ee816df48571cfa9b73f521964b6 ([NETFILTER]: add type parameter
to ip_route_me_harder), which is a precondition for the fix.
Cc: Ken Brownfield
Signed-off-by: Simon Horman
Signed-off-by: Patrick McHardy
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit 61706f0a27bb5f68be0dbbb8cbffa31c4b986e40
Author: Patrick McHardy
Date: Fri Nov 17 06:35:46 2006 +0100
[PATCH] NETFILTER: arp_tables: missing unregistration on module unload
Signed-off-by: Patrick McHardy
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit fec748200becfd75894a643fe907fc9795bd07bf
Author: Patrick McHardy
Date: Tue Nov 21 11:34:39 2006 +0100
[PATCH] NETFILTER: Missed and reordered checks in {arp,ip,ip6}_tables
Backport fix for missing ruleset validation in {arp,ip,ip6}_tables
and a fix on top which fixes a regression in the first patch.
There is a number of issues in parsing user-provided table in
translate_table(). Malicious user with CAP_NET_ADMIN may crash system by
passing special-crafted table to the *_tables.
The first issue is that mark_source_chains() function is called before entry
content checks. In case of standard target, mark_source_chains() function
uses t->verdict field in order to determine new position. But the check, that
this field leads no further, than the table end, is in check_entry(), which
is called later, than mark_source_chains().
The second issue, that there is no check that target_offset points inside
entry. If so, *_ITERATE_MATCH macro will follow further, than the entry
ends. As a result, we'll have oops or memory disclosure.
And the third issue, that there is no check that the target is completely
inside entry. Results are the same, as in previous issue.
Upstream commit 590bdf7fd2292b47c428111cb1360e312eff207e introduced a
regression in match/target hook validation. mark_source_chains builds
a bitmask for each rule representing the hooks it can be reached from,
which is then used by the matches and targets to make sure they are
only called from valid hooks. The patch moved the match/target specific
validation before the mark_source_chains call, at which point the mask
is always zero.
This patch returns back to the old order and moves the standard checks
to mark_source_chains. This allows to get rid of a special case for
standard targets as a nice side-effect.
Signed-off-by: Patrick McHardy
Signed-off-by: Chris Wright
commit 76f0a94ed26ea5c768a57c8456ae4ffcce288c70
Author: Patrick McHardy
Date: Fri Nov 17 06:35:44 2006 +0100
[PATCH] NETFILTER: ip_tables: fix module refcount leaks in compat error paths
Based on patch by myself with additional fixes from Dmitry Mishin .
Signed-off-by: Dmitry Mishin
Acked-by: Vasily Averin
Acked-by: Kirill Korotaev
Signed-off-by: Patrick McHardy
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit 5b9322ae885f4f7dd08dd8b6c12e759ed05d636d
Author: Patrick McHardy
Date: Fri Nov 17 06:35:42 2006 +0100
[PATCH] NETFILTER: ip_tables: compat error way cleanup
This patch adds forgotten compat_flush_offset() call to error way of
translate_compat_table(). May lead to table corruption on the next
compat_do_replace().
Signed-off-by: Vasily Averin
Acked-by: Dmitry Mishin
Acked-by: Kirill Korotaev
Signed-off-by: Patrick McHardy
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit e4cb788a4c160fe69f8b4d770ce03ab62bdefb06
Author: Patrick McHardy
Date: Fri Nov 17 06:35:41 2006 +0100
[PATCH] NETFILTER: Missing check for CAP_NET_ADMIN in iptables compat layer
The 32bit compatibility layer has no CAP_NET_ADMIN check in
compat_do_ipt_get_ctl, which for example allows to list the current
iptables rules even without having that capability (the non-compat
version requires it). Other capabilities might be required to exploit
the bug (eg. CAP_NET_RAW to get the nfnetlink socket?), so a plain user
can't exploit it, but a setup actually using the posix capability system
might very well hit such a constellation of granted capabilities.
Signed-off-by: Björn Steinbrink
Signed-off-by: Patrick McHardy
Signed-off-by: David S. Miller
Signed-off-by: Chris Wright
commit 6ae616ea9dda7f6f5932dbaed31922fd27a83420
Author: Tejun Heo
Date: Thu Nov 16 01:19:31 2006 -0800
[PATCH] scsi: clear garbage after CDBs on SG_IO
ATAPI devices transfer fixed number of bytes for CDBs (12 or 16). Some
ATAPI devices choke when shorter CDB is used and the left bytes contain
garbage. Block SG_IO cleared left bytes but SCSI SG_IO didn't. This patch
makes SCSI SG_IO clear it and simplify CDB clearing in block SG_IO.
Signed-off-by: Tejun Heo
Cc: Mathieu Fluhr
Cc: James Bottomley
Cc: Douglas Gilbert
Acked-by: Jens Axboe
Cc:
Acked-by: Jeff Garzik
Signed-off-by: Andrew Morton
Signed-off-by: Chris Wright
copywrong all rights reversed - © 2005-2030
no reg, no bs
Jual Kernel 2.6.18.5 + tutorial (1 cd) ★★★★★ beli di Toko Baliwae Linux, Shop Baliwae Linux di Denpasar Bali
