- 13 Mar, 2006 4 commits
-
-
Patrick McHardy authored
tmp_hdr is not freed when ipv6_clear_mutable_options fails. Coverity #650 Signed-off-by:
Patrick McHardy <kaber@trash.net> Signed-off-by:
David S. Miller <davem@davemloft.net>
-
Patrick McHardy authored
The skb is allocated by the function, so it needs to be freed instead of trimmed on overrun. Coverity #614 Signed-off-by:
-
Patrick McHardy authored
Fix NULL-ptr dereference when a config message for a non-existant queue containing only an NFQA_CFG_PARAMS attribute is received. Coverity #433 Signed-off-by:
-
Linus Torvalds authored
* 'upstream-fixes' of master.kernel.org:/pub/scm/linux/kernel/git/jgarzik/libata-dev: [PATCH] ahci: fix NULL pointer dereference detected by Coverity
-
- 12 Mar, 2006 9 commits
-
-
Linus Torvalds authored
* master.kernel.org:/home/rmk/linux-2.6-arm: [ARM] iwmmxt thread state alignment [ARM] 3350/1: Enable 1-wire on ARM [ARM] 3356/1: Workaround for the ARM1136 I-cache invalidation problem [ARM] 3355/1: NSLU2: remove propmt depends [ARM] 3354/1: NAS100d: fix power led handling [ARM] Fix muldi3.S
-
Russell King authored
This patch removes the reliance of iwmmxt on hand coded alignments. Since thread_info is always 8K aligned, specifying that fpstate is 8-byte aligned achieves the same effect without needing to resort to hand coded alignments. Signed-off-by:Russell King <rmk+kernel@arm.linux.org.uk>
-
David S. Miller authored
That's >= a full sized TSO frame, so we should always return 0 in that case. Based upon a report and initial patch from Lachlan Andrew, final patch suggested by Herbert Xu. Signed-off-by: -
Gregor Maier authored
Signed-off-by:
Gregor Maier <gregor@net.in.tum.de> Signed-off-by:
-
Brian Haley authored
The scope element in the ipv6_saddr_score struct used in ipv6_dev_get_saddr() is an unsigned integer, but __ipv6_addr_src_scope() returns a signed integer (and can return -1). Signed-off-by:
Brian Haley <brian.haley@hp.com> Acked-by:
YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org> Signed-off-by:
-
Adrian Bunk authored
The Coverity checker spotted this dead code (note that (clock_ctrl == 7) is already handled above). Signed-off-by:
Adrian Bunk <bunk@stusta.de> Signed-off-by:
-
Dave Jones authored
We're leaking an skb in a failure path in this function. Coverity #632 Signed-off-by:
Dave Jones <davej@redhat.com> Signed-off-by:
-
Jeff Garzik authored
-
Tejun Heo authored
Fix NULL pointer dereference detected by the Coverity checker. Kill dev -> pdev -> dev conversion while at it. Signed-off-by:
Tejun Heo <htejun@gmail.com> Cc: Adrian Bunk <bunk@stusta.de> Signed-off-by:
Jeff Garzik <jeff@garzik.org>
-
- 11 Mar, 2006 27 commits
-
-
Linus Torvalds authored
Gaah. Delayed. But all the better for it!
-
Andrew Morton authored
- Don't call eisa_driver_unregister() if eisa_driver_register() failed. - Properly propagate error values. Signed-off-by:
Andrew Morton <akpm@osdl.org> Signed-off-by:
-
Sam Ravnborg authored
In latest -mm de620 gave following warning: WARNING: drivers/net/de620.o - Section mismatch: reference to \ .init.text:de620_probe from .text between 'init_module' (at offset \ 0x1682) and 'cleanup_module' init_module() call de620_probe() which is declared __init. Fix is to declare init_module() __init too. Signed-off-by:
Sam Ravnborg <sam@ravnborg.org> Signed-off-by:
-
Jesper Juhl authored
Improve reference to PCI NE2K support in ISA NE2K documentation. Original 2.4 patch From: Ged Haywood <ged@jubileegroup.co.uk> Signed-off-by:
Jesper Juhl <jesper.juhl@gmail.com> Signed-off-by:
-
Jon Mason authored
This patch fixes an error in the dl2k driver's DMA mapping/unmapping. The adapter uses the upper 16bits of the DMA address for the buffer size. However, this is not masked off when referencing the DMA address, and can lead to errors by trying to free a DMA address out of range. Thanks, Jon Signed-off-by:
Jon Mason <jdmason@us.ibm.com> Signed-off-by:
-
David S. Miller authored
For some reason, E1000's ->hard_start_xmit() routine returns -EFAULT instead of one of the NETDEV_TX_* error codes. In fact, it frees up the SKB before returning this. This makes the queueing layer think the packet should be requeued and subsequently we corrupt a freed object. Signed-off-by:
-
-
Antonino A. Daplas authored
radeonfb_parse_monitor_layout() will produce an array overrun if passed with a substring of length higher than 4 (ie, "XXXXX,YYYYYY"). Coverity Bug 494 Signed-off-by:
Antonino Daplas <adaplas@pol.net> Signed-off-by:
Linus Torvalds <torvalds@osdl.org>
-
Antonino A. Daplas authored
Fix static array overrun Coverity Bug 556 Signed-off-by:
-
Antonino A. Daplas authored
The pseudo_palette has room only for 16 entries, but tdfxfb_setcolreg may attempt to write more. Coverity Bug 557 Signed-off-by:
-
Antonino A. Daplas authored
The pseudo_palette has room only for 16 entries, but intelfb_setcolreg will attempt to write more. Coverity Bug 558 Signed-off-by:
-
Antonino A. Daplas authored
par->edid is kfree'd before using in fb_edid_to_monspecs() Signed-off-by:
-
Antonino A. Daplas authored
The struct info and device resource may not be released in the driver's error path. Fix. Coverity Bug 671 Signed-off-by:
-
Antonino A. Daplas authored
struct info may not be released in the driver's error path. Coverity Bug 672 Signed-off-by:
-
Antonino A. Daplas authored
info->par is dereferenced before info is checked for NULL. Fix. Coverity Bug 833 Signed-off-by:
-
Antonino A. Daplas authored
Initialize Variable 'count' in DisableVGA to zero. Coverity Bug 874 Signed-off-by:
-
Antonino A. Daplas authored
Remove insignificant and uninitialized variable "count" from arcfb_lcd_update_page. Coverity Bug 894 Signed-off-by:
-
Antonino A. Daplas authored
Remove insignificant and unitialized variable "waitcycles" from neo2200_sync. Coverity Bug 895 Signed-off-by:
-
Chris Wright authored
LSM mail list has moved. Signed-off-by:
Chris Wright <chrisw@sous-sol.org> Signed-off-by:
-
Chris Wright authored
Update email address. Signed-off-by:
-
Christoph Hellwig authored
The patch '[PATCH] RCU signal handling' [1] added an export for __put_task_struct_cb, a put_task_struct helper newly introduced in that patch. But the put_task_struct couldn't be used modular previously as __put_task_struct wasn't exported. There are not callers of it in modular code, and it shouldn't be exported because we don't want drivers to hold references to task_structs. This patch removes the export and folds __put_task_struct into __put_task_struct_cb as there's no other caller. [1] http://www2.kernel.org/git/gitweb.cgi?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e56d090310d7625ecb43a1eeebd479f04affb48bSigned-off-by:
Christoph Hellwig <hch@lst.de> Acked-by:
Paul E. McKenney <paulmck@us.ibm.com> Signed-off-by:
-
Pat Gefre authored
Get rid of the local 'flip' variable and no need to 'trim' the buffer. Signed-off-by:
Patrick Gefre <pfg@sgi.com> Signed-off-by:
-
Stephen Smalley authored
Fix SELinux to not reset the tracer SID when the child is already being traced, since selinux_ptrace is also called by proc for access checking outside of the context of a ptrace attach. Signed-off-by:
Stephen Smalley <sds@tycho.nsa.gov> Acked-by:
James Morris <jmorris@namei.org> Acked-by:
-
Arjan van de Ven authored
Disable (via ugly #if 0's) the 3 sysfs files that I think by now we all agree are very much wrong. These files shouldn't become part of the ABI by the 2.6.16 release, so I rather have this minimal patch merged to disable them for now, the real fix can then come during the 2.6.17 devel window. Signed-off-by:
Arjan van de Ven <arjan@linux.intel.com> Signed-off-by:
Greg Kroah-Hartman <gregkh@suse.de> Signed-off-by:
-
Badari Pulavarty authored
One can do "chattr +j" on a file to change its journalling mode. Fix writeback mode with "nobh" handling for it. Even though, we mount ext3 filesystem in writeback mode with "nobh" option, some one can do "chattr +j" on a single file to force it to do journalled mode. In order to do journaling, ext3_block_truncate_page() need to fallback to default case of creating buffers and adding them to transaction etc. Signed-off-by:
Badari Pulavarty <pbadari@us.ibm.com> Signed-off-by:
-
Kirill Korotaev authored
This patch fixes illegal __GFP_FS allocation inside ext3 transaction in ext3_symlink(). Such allocation may re-enter ext3 code from try_to_free_pages. But JBD/ext3 code keeps a pointer to current journal handle in task_struct and, hence, is not reentrable. This bug led to "Assertion failure in journal_dirty_metadata()" messages. http://bugzilla.openvz.org/show_bug.cgi?id=115Signed-off-by:
Andrey Savochkin <saw@saw.sw.com.sg> Signed-off-by:
Kirill Korotaev <dev@openvz.org> Signed-off-by:
-
Dmitry Torokhov authored
Automatic resynchronization in psmouse driver causes problems on some hardware so disable it by default for now. People with KVM switches that require resync can still enable it via module parameter or sysfs attribute. Signed-off-by:
Dmitry Torokhov <dtor@mail.ru> Signed-off-by:
-
