Igloo kernel https://git.etezian.org/cgit.cgi/snowball/igloo-kernel.git/atom?h=v2.6.36-rc5 2010-09-20T23:56:53+00:00 2010-09-20T23:56:53+00:00 Linus Torvalds torvalds@linux-foundation.org 2010-09-20T23:56:53+00:00 urn:sha1:b30a3f6257ed2105259b404d419b4964e363928c 2010-09-20T23:45:08+00:00 Linus Torvalds torvalds@linux-foundation.org 2010-09-20T23:45:08+00:00 urn:sha1:6b3d2cc4e07a609fc7354daba2889a260053e5d6 * git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/staging-2.6: Staging: vt6655: fix buffer overflow Revert: "Staging: batman-adv: Adding netfilter-bridge hooks" 2010-09-20T23:44:40+00:00 Linus Torvalds torvalds@linux-foundation.org 2010-09-20T23:44:40+00:00 urn:sha1:0c4ab3453aae7bba4d76a3eb4b289aa53a9f9a60 * git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb-2.6: USB: musb: MAINTAINERS: Fix my mail address USB: serial/mos*: prevent reading uninitialized stack memory USB: otg: twl4030: fix phy initialization(v1) USB: EHCI: Disable langwell/penwell LPM capability usb: musb_debugfs: don't use the struct file private_data field with seq_files 2010-09-20T23:44:24+00:00 Linus Torvalds torvalds@linux-foundation.org 2010-09-20T23:44:24+00:00 urn:sha1:36ff4a5517779355f4bd62030cdb8498c3954f29 * git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/tty-2.6: serial: mfd: fix bug in serial_hsu_remove() serial: amba-pl010: fix set_ldisc 2010-09-20T23:31:54+00:00 Dan Carpenter error27@gmail.com 2010-09-06T12:32:30+00:00 urn:sha1:dd173abfead903c7df54e977535973f3312cd307 "param->u.wpa_associate.wpa_ie_len" comes from the user. We should check it so that the copy_from_user() doesn't overflow the buffer. Also further down in the function, we assume that if "param->u.wpa_associate.wpa_ie_len" is set then "abyWPAIE[0]" is initialized. To make that work, I changed the test here to say that if "wpa_ie_len" is set then "wpa_ie" has to be a valid pointer or we return -EINVAL. Oddly, we only use the first element of the abyWPAIE[] array. So I suspect there may be some other issues in this function. Signed-off-by: Dan Carpenter <error27@gmail.com> Cc: stable <stable@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> 2010-09-20T23:31:54+00:00 Sven Eckelmann sven.eckelmann@gmx.de 2010-09-04T23:58:18+00:00 urn:sha1:350aede603f7db7a9b4c1a340fbe89ccae6523a2 This reverts commit 96d592ed599434d2d5f339a1d282871bc6377d2c. The netfilter hook seems to be misused and may leak skbs in situations when NF_HOOK returns NF_STOLEN. It may not filter everything as expected. Also the ethernet bridge tables are not yet capable to understand batman-adv packet correctly. It was only added for testing purposes and can be removed again. Reported-by: Vasiliy Kulikov <segooon@gmail.com> Signed-off-by: Sven Eckelmann <sven.eckelmann@gmx.de> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> 2010-09-20T23:30:00+00:00 Feng Tang feng.tang@intel.com 2010-09-06T12:41:02+00:00 urn:sha1:e3671ac429fe50cf0c1b4f1dc4b7237207f1d956 Medfield HSU driver deal with 4 pci devices(3 uart ports + 1 dma controller), so in pci remove func, we need handle them differently Signed-off-by: Feng Tang <feng.tang@intel.com> Signed-off-by: Alan Cox <alan@linux.intel.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> 2010-09-20T23:30:00+00:00 Mika Westerberg mika.westerberg@iki.fi 2010-09-04T07:23:23+00:00 urn:sha1:476f771cb9b6cd4845dcd18f16a2f03a89ee63fc Commit d87d9b7d1 ("tty: serial - fix tty referencing in set_ldisc") changed set_ldisc to take ldisc number as parameter. This patch fixes AMBA PL010 driver according the new prototype. Signed-off-by: Mika Westerberg <mika.westerberg@iki.fi> Cc: Alan Cox <alan@linux.intel.com> Cc: Russell King <rmk+kernel@arm.linux.org.uk> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> 2010-09-20T23:05:01+00:00 Felipe Balbi balbi@ti.com 2010-09-09T06:04:25+00:00 urn:sha1:f299470a15ab3057afbf598cec59246a90ade449 If we don't, contributors to musb and any USB OMAP code will be sending mails to an unexistent inbox. Signed-off-by: Felipe Balbi <balbi@ti.com> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de> 2010-09-20T23:05:00+00:00 Dan Rosenberg drosenberg@vsecurity.com 2010-09-15T21:44:16+00:00 urn:sha1:a0846f1868b11cd827bdfeaf4527d8b1b1c0b098 The TIOCGICOUNT device ioctl in both mos7720.c and mos7840.c allows unprivileged users to read uninitialized stack memory, because the "reserved" member of the serial_icounter_struct struct declared on the stack is not altered or zeroed before being copied back to the user. This patch takes care of it. Signed-off-by: Dan Rosenberg <dan.j.rosenberg@gmail.com> Cc: stable <stable@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>