linux-toradex.git/drivers/char, branch v2.6.22.13

i915: fix vbl swap allocation size.

2007-11-02T15:44:15+00:00

This is upstream as 54583bf4efda79388fc13163e35c016c8bc5de81

Oops...

Signed-off-by: Dave Airlie 
Signed-off-by: Greg Kroah-Hartman

Fix TCP initial sequence number selection.

2007-11-02T15:44:11+00:00

changeset 162f6690a65075b49f242d3c8cdb5caaa959a060 in mainline.

TCP V4 sequence numbers are 32bits, and RFC 793 assumed a 250 KHz clock.
In order to follow network speed increase, we can use a faster clock, but
we should limit this clock so that the delay between two rollovers is
greater than MSL (TCP Maximum Segment Lifetime : 2 minutes)

Choosing a 64 nsec clock should be OK, since the rollovers occur every
274 seconds.

Problem spotted by Denys Fedoryshchenko

[ This bug was introduced by f85958151900f9d30fa5ff941b0ce71eaa45a7de ]

Signed-off-by: Eric Dumazet 
Signed-off-by: David S. Miller 
Signed-off-by: Greg Kroah-Hartman

random: fix bound check ordering (CVE-2007-3105)

2007-08-15T16:25:09+00:00

If root raised the default wakeup threshold over the size of the
output pool, the pool transfer function could overflow the stack with
RNG bytes, causing a DoS or potential privilege escalation.

(Bug reported by the PaX Team )

Cc: Theodore Tso 
Cc: Willy Tarreau 
Signed-off-by: Matt Mackall 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

sx: switch subven and subid values

2007-08-09T21:27:47+00:00

sx.c is failing to locate Graham's card.

Signed-off-by: Jiri Slaby 
Cc: Graham Murray 
Signed-off-by: Andrew Morton 
Signed-off-by: Greg Kroah-Hartman

drm/i915: Fix i965 secured batchbuffer usage (CVE-2007-3851)

2007-08-09T21:27:32+00:00

This 965G and above chipsets moved the batch buffer non-secure bits to
another place. This means that previous drm's allowed in-secure batchbuffers
to be submitted to the hardware from non-privileged users who are logged
into X and and have access to direct rendering.

Signed-off-by: Dave Airlie 
Signed-off-by: Linus Torvalds 
Signed-off-by: Greg Kroah-Hartman

Add support SiS based XGI chips to SiS DRM.

2007-06-27T16:54:49+00:00

This adds support for some of the XGI Volari family that are based on the
SiS.

Signed-off-by: Dave Airlie 
Signed-off-by: Linus Torvalds

Char: stallion, fix oops during init with ISA cards

2007-06-24T15:59:11+00:00

The stallion driver oopses while initializing ISA cards due to an
uninitialized variable.  This patch changes the initialisation order to
match the PCI code path.

Signed-off-by: Ingo Korb 
Acked-by: Jiri Slaby 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

console UTF-8 fixes (fix)

2007-06-24T15:59:10+00:00

Recently my console UTF-8 patch went mainline.  Here is an additional patch
that fixes two nasty issues and improves a third one, namely:

1. My patch changed the behavior if a glyph is not found in the Unicode
   mapping table. Previously for Unicode values less than 256 or 512 the
   kernel tried to display the glyph from that position of the glyph table,
   which could lead to a different accented letter being displayed. I
   removed this fallback possibility and changed it to display the
   replacement symbol.

   As Behdad pointed out, some fonts (e.g. sun12x22 from the kbd package)
   lack Unicode mapping information, hence all you get is lots of question
   marks. Though theoretically it's actually a user-space bug (the font
   should be fixed), Behdad and I both believe that it'd be good to work
   around in the kernel by re-introducing the fallback solution for ASCII
   characters only. This sounds a quite reasonable decision, since all fonts
   ship the ASCII characters in the first 128 positions. This way users
   won't be surprised by lots of question marks just because s/he issued a
   not-so-perfectly parameterized setfont command. As this fallback is only
   re-introduced for code points below 128, you still won't see an accented
   letter replaced by another, but at least you'll always get the English
   letters right.

2. My patch introduced "question mark with inverted color attributes" as a
   last resort fallback glyph. Though it perfectly works on VGA console, on
   framebuffer you may end up with question marks that are highlighed but
   shouldn't be, and normal characters that are accidentally highlighed.
   This is caused by missing FLUSHes when changing the color attribute.

3. I've updated the table of double-width character based on Markus's
   updated version. Only ten new code poings (one interval) is added.

Signed-off-by: Egmont Koblinger 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[AGPGART] intel_agp: don't load if no IGD and AGP port

2007-06-21T16:49:11+00:00

After i915 chip, GMCH has no AGP port. Origin bridge driver in device
table will try to access illegal regs like APBASE, APSIZE, etc. This
may cause problem.

So mark them as NULL in the table, we won't load if no IGD got detect
and bridge has no AGP port.

Signed-off-by: Wang Zhenyu 
Signed-off-by: Dave Jones

random: fix output buffer folding

2007-06-16T20:16:16+00:00

(As reported by linux@horizon.com)

Folding is done to minimize the theoretical possibility of systematic
weakness in the particular bits of the SHA1 hash output.  The result of
this bug is that 16 out of 80 bits are un-folded.  Without a major new
vulnerability being found in SHA1, this is harmless, but still worth
fixing.

Signed-off-by: Matt Mackall 
Cc: 
Cc: Theodore Ts'o 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds