linux-toradex.git/drivers, branch v2.6.16.28-rc2

cdrom: fix bad cgc.buflen assignment (CVE-2006-2935)

2006-08-18T19:42:43+00:00

The code really means to mask off the high bits, not assign 0xff.

Reported by Marcus Meissner .

Signed-off-by: Jens Axboe 
Signed-off-by: Adrian Bunk

ide-io: increase timeout value to allow for slave wakeup

2006-08-18T19:30:53+00:00

During an STR resume cycle, the ide master disk times-out when there is
also a slave present (especially CD).  Increasing the timeout in ide-io
from 10,000 to 100,000 fixes this problem.

Acked-by: Alan Cox 
Signed-off-by: Adrian Bunk

ieee1394: sbp2: enable auto spin-up for Maxtor disks

2006-08-11T21:42:30+00:00

At least Maxtor OneTouch III require a "start stop unit" command after
auto spin-down before the next access can proceed.  This patch activates
the responsible code in scsi_mod for all Maxtor SBP-2 disks.
https://bugzilla.novell.com/show_bug.cgi?id=183011

Maybe that should be done for all SBP-2 disks, but better be cautious.

Signed-off-by: Stefan Richter 
Signed-off-by: Adrian Bunk

Fix broken suspend/resume in ohci1394

2006-08-11T21:41:52+00:00

I've been experimenting to track down the cause of suspend/resume problems
on my Compaq Presario X1050 laptop:

http://bugzilla.kernel.org/show_bug.cgi?id=6075

Essentially the ACPI Embedded Controller and keyboard controller would
get into a bizarre, confused state after resume.

I found that unloading the ohci1394 module before suspend and reloading it
after resume made the problem go away. Diffing the dmesg output from
resume, with and without the module loaded, I found that with the module
loaded I was missing these:

PM: Writing back config space on device 0000:02:00.0 at offset 1. (Was 2100080, writing 2100007)
PM: Writing back config space on device 0000:02:00.0 at offset 3. (Was 0, writing 8008)
PM: Writing back config space on device 0000:02:00.0 at offset 4. (Was 0, writing 90200000)
PM: Writing back config space on device 0000:02:00.0 at offset 5. (Was 1, writing 2401)
PM: Writing back config space on device 0000:02:00.0 at offset f. (Was 20000100, writing 2000010a)

The default PCI driver performs the pci_restore_state when no driver is
loaded for the device. When the ohci1394 driver is loaded, it is supposed
to do this, however it appears not to do so.

I created the patch below and tested it, and it appears to resolve the
suspend problems I was having with the module loaded. I only added in the
pci_save_state and pci_restore_state - however, though I know little of
this hardware, surely the driver should really be doing more than this when
suspending and resuming? Currently it does almost nothing, what if there
are commands in progress, etc?

Signed-off-by: Robert Hancock
Signed-off-by: Stefan Richter
Signed-off-by: Adrian Bunk

[AGPGART] Fix Nforce3 suspend on amd64.

2006-08-09T22:03:27+00:00

kernel.org bugzilla #6206

Based on patch from Serge Belyshev 

Signed-off-by: Dave Jones 
Signed-off-by: Adrian Bunk

IB/mthca: restore missing PCI registers after reset

2006-08-07T17:04:22+00:00

mthca does not restore the following PCI-X/PCI Express registers after reset:
  PCI-X device: PCI-X command register
  PCI-X bridge: upstream and downstream split transaction registers
  PCI Express : PCI Express device control and link control registers

This causes instability and/or bad performance on systems where one of
these registers is set to a non-default value by BIOS.

Signed-off-by: Michael S. Tsirkin 
Signed-off-by: Adrian Bunk

[PATCH] USB serial ftdi_sio: Prevent userspace DoS (CVE-2006-2936)

2006-07-17T13:54:20+00:00

This patch limits the amount of outstanding 'write' data that can be
queued up for the ftdi_sio driver, to prevent userspace DoS attacks (or
simple accidents) that use up all the system memory by writing lots of
data to the serial port.

Signed-off-by: Ian Abbott 
Signed-off-by: Greg Kroah-Hartman

[PATCH] revert PARPORT_SERIAL should depend on SERIAL_8250_PCI patch

2006-06-30T21:06:52+00:00

Should have not been applied to 2.6.16

Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

[PATCH] powernow-k8 crash workaround

2006-06-22T19:16:12+00:00

Work around the oops reported in
http://bugzilla.kernel.org/show_bug.cgi?id=6478.

Thanks to Ralf Hildebrandt  for testing and
reporting.

Acked-by: Dave Jones 
Cc: "Brown, Len" 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

[PATCH] I2O: Bugfixes to get I2O working again

2006-06-22T19:16:12+00:00

- Fixed locking of struct i2o_exec_wait in Executive-OSM

- Removed LCT Notify in i2o_exec_probe() which caused freeing memory and
  accessing freed memory during first enumeration of I2O devices

- Added missing locking in i2o_exec_lct_notify()

- removed put_device() of I2O controller in i2o_iop_remove() which caused
  the controller structure get freed to early

- Fixed size of mempool in i2o_iop_alloc()

- Fixed access to freed memory in i2o_msg_get()

See http://bugzilla.kernel.org/show_bug.cgi?id=6561

Signed-off-by: Markus Lidel 
Signed-off-by: Andrew Morton 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman