- 09 Feb, 2005 4 commits
-
-
Ben Dooks authored
Patch from Ben Dooks stop compiler warning about uninitialised variable Signed-off-by: Ben Dooks Signed-off-by: Russell King
-
Ben Dooks authored
Patch from Ben Dooks remove a number of warnings from the default shark build Signed-off-by: Ben Dooks Signed-off-by: Russell King
-
Sascha Hauer authored
Patch from Sascha Hauer This patch fixes the membase/mapbase of serial ports 1-4 and actually enables them. Signed-off-by: Sascha Hauer Signed-off-by: Russell King
-
Ben Dooks authored
Patch from Ben Dooks Fix the include/asm-arm/arch-ipx2000/io.h to remove the warnings generated due to the IO addresses not being of the type `void __iomem *` Signed-off-by: Ben Dooks Signed-off-by: Russell King
-
- 08 Feb, 2005 3 commits
-
-
bk://bk.arm.linux.org.uk/linux-2.6-rmkLinus Torvalds authored
into ppc970.osdl.org:/home/torvalds/v2.6/linux
-
Lennert Buytenhek authored
Patch from Lennert Buytenhek Fix two typos in arch/arm/mm/tlb*.S Signed-off-by: Lennert Buytenhek Signed-off-by: Russell King
-
bk://drm.bkbits.net/drm-linusLinus Torvalds authored
into ppc970.osdl.org:/home/torvalds/v2.6/linux
-
- 09 Feb, 2005 3 commits
-
-
Dave Airlie authored
into starflyer.(none):/foo/airlied/bitkeeper/drm-latest
-
Dave Airlie authored
Close a race which could allow for privilege escalation by users with DRI privileges on Radeon hardware. Essentially, a malicious program could submit a packet containing an offset (possibly in main memory) to be rendered from/to, while a separate thread switched that offset in userspace rapidly between a valid value and an invalid one. radeon_check_and_fixup_offset() would pull the offset in from user space, check it, and spit it back out to user space to be copied in later by the emit code. It would sometimes catch the bad value, but sometimes the malicious program could modify it after the check and get an invalid offset rendered from/to. Fix this by allocating a temporary buffer and copying the data in at once. While here, make the cliprects stuff not do the VERIFYAREA_READ and COPY_FROM_USER_UNCHECKED gymnastics, avoiding a lock order reversal on FreeBSD. Performance impact is negligible -- no difference on r200 to ~1% improvement on rv200 in quake3 tests (P4 1Ghz, demofour at 1024x768, n=4 or 5) From: Eric Anholt <anholt@freebsd.org> Signed-off-by:Dave Airlie <airlied@linux.ie>
-
Dave Airlie authored
Bug fd.o 2489 Reporter: Aapo Tahkola <aet@rasterburn.org> Signed-off-by:
-
- 08 Feb, 2005 2 commits
-
-
David Howells authored
The attached patch adds documentation for the behaviour of the no-MMU mmap. Signed-Off-By:
David Howells <dhowells@redhat.com> Signed-Off-By:
Linus Torvalds <torvalds@osdl.org>
-
David Howells authored
The attached patch does two things: (1) We no longer check the return value of file->f_op->get_unmapped_area() unless we actually called it. We know addr is zero otherwise because we'd've given an error earlier if it wasn't. (2) If -ENOSYS was returned by that operation, then we assume we actually called a driver (such as the framebuffer driver) that might want to invoke the operation in a lower level driver (such as matroxfb) if one exists, and that it found that one didn't. We translate the -ENOSYS error into -ENODEV - the error we would have given if the operation was not supplied in the file ops. Doing this permits us an opportunity for arch_get_unmapped_area() or something else to be called if we want that to happen, particularly in the MMU case. Signed-Off-By:
-
- 07 Feb, 2005 28 commits
-
-
Linus Torvalds authored
More of the Guninski "copy_to_user() takes a size_t" series.
-
Neil Brown authored
Write access cannot safely be allowed as NFS doesn't support append, but read access should be ok. Signed-off-by:
Neil Brown <neilb@cse.unsw.edu.au> Signed-off-by:
Andrew Morton <akpm@osdl.org> Signed-off-by:
-
Neil Brown authored
As readdir returns the reply in a separate page, the cache code cannot find the reply (and it would probably be too big anyway) so flag readdir for NOCACHE Signed-off-by:
Olaf Kirch <okir@suse.de> Signed-off-by:
-
Neil Brown authored
If we detect an overlap, we set a flag and wait for a wakeup. When requests are handled, if the flag was set, we perform the wakeup. Note that the code currently in -mm is badly broken. With this patch applied, it passes tests the use O_DIRECT to cause lots of overlapping requests. Signed-off-by:
-
Neil Brown authored
copy_data currently loops over bio's in a list, but the caller also does the same looping, sometimes with extra work. So remove the loop from copy_data. Signed-off-by:
-
Neil Brown authored
If the resync checkpoint for an array is at the end of the array, It doesn't get set to MAX_SECTOR, so resyncing will be retried. By updating curr_resync early, this problem is fixed. Signed-off-by:
-
Neil Brown authored
- set ->devfs_name - create initial devfs names slightly differently so as not to conflict - re-read partition table when an array is assembled at boot time - not sure why this is needed, but it is. Signed-off-by:
-
Neil Brown authored
hot_add_disk and hot_remove_disk check mddev->pers before proceeding. set_disk_faulty should too. Signed-off-by:
-
Neil Brown authored
- off-by-one error - missing recalc of checksum Signed-off-by:
-
bk://kernel.bkbits.net/davem/sparc-2.6Linus Torvalds authored
into ppc970.osdl.org:/home/torvalds/v2.6/linux
-
David S. Miller authored
into kernel.bkbits.net:/home/davem/sparc-2.6
-
Andrew Vasquez authored
The qlogic driver complains about the use of smp_processor_id() in preemptible code. And it's right. But it's just for an affinity optimisation and we can validly quash the warning. Signed-off-by:
Andrew Vasquez <andrew.vasquez@qlogic.com> Signed-off-by:
-
Yoichi Yuasa authored
This patch had fixed the following warning. arch/mips/lib-32/dump_tlb.c: In function 'dump_tlb': arch/mips/lib-32/dump_tlb.c:69: warning: control may reach end of non-void function 'msk2str' being inlined This patch adds return value, when page size is not match. Signed-off-by:
Yoichi Yuasa <yuasa@hh.iij4u.or.jp> Signed-off-by:
-
Martin Kögler authored
We presently deadlock in low-latency mode because the receive code holds port.lock while calling into the tty code to perform echoing. The tty code calls back into the driver, which then takes port.lock. Fix that by dropping the lock around the echo call. Acked-by:
Russell King <rmk@arm.linux.org.uk> Signed-off-by:
-
Suresh B. Siddha authored
Add the missing "lock" prefix in switch_to macro. Signed-off-by:
Suresh Siddha <suresh.b.siddha@intel.com> Signed-off-by:
-
Paolo \'Blaisorblade\' Giarrusso authored
Frank Fricke reported that hostfs does not verify that a chmod +s, for instance, is done by a sufficiently privileged user, as long as the UML kernel itself can complete the operation on the host. So, for instance, if UML is run as root and under /mnt/host we have a hostfs mount, this works successfully: paolo@zion:~ (0)$ chmod 4755 /mnt/host/bin/bash paolo@zion:~ (0)$ ll /mnt/host/bin/bash -rwsr-xr-x 1 root root 662724 2004-10-20 02:15 /mnt/host/bin/bash* (bash refuses running as setuid, but you could have another shell on the host, as dash or whatever). In general, if UML is run as uid 500 on the host, a hostfs mount is done and under the hostfs mount there is a file with uid 500 on the host, I can freely make it setuid (if it's executable). This is especially bad when UML is run as root (which you should not do), but is a problem in general, since it allows any user to create setuid 500 (in this example) executables on the host filesystem. Finally, while I was looking at the chmod() implementation, I spotted a kludge in the code and explained it with a comment. Signed-off-by:
Paolo 'Blaisorblade' Giarrusso <blaisorblade@yahoo.it> Cc: Frank 'xraz' Fricke <xraz@rwxr-xr-x.de> Cc: Alexander Viro <viro@parcelfarce.linux.theplanet.co.uk> Signed-off-by:
-
Paolo \'Blaisorblade\' Giarrusso authored
Descend into arch/um/kernel/skas/util during make clean. Signed-off-by:
-
Ingo Molnar authored
Signed-off-by:
Ingo Molnar <mingo@elte.hu> Signed-off-by:
-
Nick Piggin authored
When a task is put to sleep, it is dequeued from the runqueue while it is still running. The problem is that one some arches that have non-atomic scheduling, the runqueue lock can be dropped and retaken in schedule() before the task actually schedules off, and wait_task_inactive did not account for this. Signed-off-by:
Nick Piggin <nickpiggin@yahoo.com.au> Signed-off-by:
-
Alex Yustasov authored
Fix for resume on i850. Maybe for i855GM. Signed-off by: Nigel Cunningham <ncunningham@linuxmail.org> Signed-off-by:
-
Christoph Hellwig authored
filemap_populate needs to be exported so that filesystems with their own vm_operations (like XFS) can use it. Cc: Nathan Scott <nathans@sgi.com> Signed-off-by:
-
David S. Miller authored
Signed-off-by:David S. Miller <davem@davemloft.net>
-
John Rose authored
Noted by David Woodhouse <dwmw2@infradead.org> Here's a fix for the ppc64 crash during boot. This corrects the offending function to use more conventional error codes. I'll follow up with return code cleanups for the entire module, and for RTAS code, since these are probably too big for 2.6.11. Signed-off-by:
John Rose <johnrose@austin.ibm.com> Signed-off-by:
-
David S. Miller authored
Signed-off-by: -
David S. Miller authored
into nuts.davemloft.net:/disk1/BK/sparc-2.6
-
David S. Miller authored
Noticed by Jurij Smakov <jurij@wooyd.org> Signed-off-by: -
Linus Torvalds authored
The fix was just trying to hide the real bug, which was in an old udev script. The change made matters worse. Cset exclude: pavenis@latnet.lv[torvalds]|ChangeSet|20050202164823|05506
-
Peter Osterlund authored
mousedev_packet() clears list->ready too early when called with "tail == head - 1". The effect is that the last mouse event from the hardware isn't reported to userspace until another hardware mouse event arrives. This can make the left mouse button get stuck when tapping on a touchpad. When this happens, the butten doesn't unstick until you interact with the touchpad again. Signed-off-by:
Peter Osterlund <petero2@telia.com> Signed-off-by:
-
