linux-toradex.git/drivers, branch v2.6.16.61

3w-xxxx: Prevent data corruption

2008-07-14T18:09:24+00:00

Use default DMA data direction to prevent data corruption
when using SWIOTLB with 4GB+ on EM64T.

http://www.3ware.com/KB/article.aspx?id=15243&cNode=6I1C6S

Acked-by: Jean Delvare 
Signed-off-by: Adrian Bunk

USB: race on disconnect in mdc800

2008-03-19T20:43:12+00:00

I overlooked one. Setting the flag and killing the URBs must be under the lo
so that no URB is submitted after usb_kill_urb()

Adrian Bunk:
Backported to 2.6.16.

Signed-off-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Adrian Bunk

I4L: fix isdn_ioctl memory overrun vulnerability (CVE-2007-6151)

2008-01-21T00:14:20+00:00

Fix possible memory overrun issue in the isdn ioctl code.

Found by ADLAB 

Signed-off-by: Karsten Keil 
Signed-off-by: Adrian Bunk

isdn: avoid copying overly-long strings (CVE-2007-6063)

2008-01-21T00:14:19+00:00

Addresses http://bugzilla.kernel.org/show_bug.cgi?id=9416

Signed-off-by: Karsten Keil 
Signed-off-by: Adrian Bunk

drivers/scsi/BusLogic.c: #ifdef MODULE BusLogic_pci_tbl[]

2008-01-21T00:14:17+00:00

Signed-off-by: Adrian Bunk

[BusLogic] Add pci dev table for auto module loading.

2008-01-21T00:14:16+00:00

Signed-off-by: Ben Collins 
Signed-off-by: Adrian Bunk

[CASSINI]: Set skb->truesize properly on receive packets.

2008-01-20T20:02:20+00:00

[ Upstream commit: d011a231675b240157a3c335dd53e9b849d7d30d ]

skb->truesize was not being incremented at all to
reflect the page based data added to RX SKBs.

Signed-off-by: David S. Miller 
Signed-off-by: Adrian Bunk

[CASSINI]: Fix endianness bug.

2008-01-20T20:00:26+00:00

[ Upstream commit: e5e025401f6e926c1d9dc3f3f2813cf98a2d8708 ]

Here's proposed fix for RX checksum handling in cassini; it affects
little-endian working with half-duplex gigabit, but obviously needs
testing on big-endian too.

The problem is, we need to convert checksum to fixed-endian *before*
correcting for (unstripped) FCS.  On big-endian it won't matter
(conversion is no-op), on little-endian it will, but only if FCS is
not stripped by hardware; i.e. in half-duplex gigabit mode when
->crc_size is set.

cassini.c part is that fix, cassini.h one consists of trivial
endianness annotations.  With that applied the sucker is endian-clean,
according to sparse.

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller 
Signed-off-by: Adrian Bunk

[ATM]: [nicstar] delay irq setup until card is configured

2008-01-20T19:43:46+00:00

[ Upstream commit: 52961955aa180959158faeb9fd6b4f8a591450f5 ]

Adrian Bunk:
Backported to 2.6.16.

Signed-off-by: Chas Williams 
Signed-off-by: David S. Miller 
Signed-off-by: Adrian Bunk

raw: don't allow the creation of a raw device with minor number 0

2008-01-20T19:31:32+00:00

Minor number 0 (under the raw major) is reserved for the rawctl device
file, which is used to query, set, and unset raw device bindings.  However,
the ioctl interface does not protect the user from specifying a raw device
with minor number 0:

$ sudo ./raw /dev/raw/raw0 /dev/VolGroup00/swap
/dev/raw/raw0:  bound to major 253, minor 2
$ ls -l /dev/rawctl
ls: /dev/rawctl: No such file or directory
$ ls -l /dev/raw/raw0
crw------- 1 root root 162, 0 Jan 12 10:51 /dev/raw/raw0
$ sudo ./raw -qa
Cannot open master raw device '/dev/rawctl' (No such file or directory)

As you can see, this prevents any further raw operations from
succeeding.  The fix (from Steve Fernandez) is quite simple - do not
allow the allocation of minor number 0.

Signed-off-by: Jeff Moyer 
Signed-off-by: Adrian Bunk