linux, branch v2.6.16.28

Linux 2.6.16.28

2006-08-25T20:51:14Z

Linux 2.6.16.28-rc3

2006-08-23T17:29:05Z

1394: fix for recently added firewire patch that breaks things on ppc

2006-08-23T17:28:41Z

Recently a patch was added for preliminary suspend/resume handling on !PPC_PMAC. However, this broke both suspend and firewire on powerpc because it saves the pci state after the device has already been disabled. This moves the save state to before the pmac specific code. Signed-off-by: Danny Tholen Acked-by: Benjamin Herrenschmidt Signed-off-by: Andrew Morton Signed-off-by: Stefan Richter Signed-off-by: Adrian Bunk

Fix sctp privilege elevation (CVE-2006-3745)

2006-08-23T16:01:55Z

sctp_make_abort_user() now takes the msg_len along with the msg so that we don't have to recalculate the bytes in iovec. It also uses memcpy_fromiovec() so that we don't go beyond the length allocated. It is good to have this fix even if verify_iovec() is fixed to return error on overflow. Signed-off-by: Sridhar Samudrala Acked-by: David Miller Signed-off-by: Adrian Bunk

Fix possible UDF deadlock and memory corruption (CVE-2006-4145)

2006-08-23T16:00:30Z

UDF code is not really ready to handle extents larger that 1GB. This is the easy way to forbid creating those. Also truncation code did not count with the case when there are no extents in the file and we are extending the file. Signed-off-by: Jan Kara Signed-off-by: Adrian Bunk

Linux 2.6.16.28-rc2

2006-08-22T15:48:30Z

powerpc: Clear HID0 attention enable on PPC970 at boot time (CVE-2006-4093)

2006-08-18T19:44:57Z

Clear HID0[en_attn] at CPU init time on PPC970. Closes CVE-2006-4093. Signed-off-by: Olof Johansson Signed-off-by: Paul Mackerras Signed-off-by: Adrian Bunk

cdrom: fix bad cgc.buflen assignment (CVE-2006-2935)

2006-08-18T19:42:43Z

The code really means to mask off the high bits, not assign 0xff. Reported by Marcus Meissner . Signed-off-by: Jens Axboe Signed-off-by: Adrian Bunk

ide-io: increase timeout value to allow for slave wakeup

2006-08-18T19:30:53Z

During an STR resume cycle, the ide master disk times-out when there is also a slave present (especially CD). Increasing the timeout in ide-io from 10,000 to 100,000 fixes this problem. Acked-by: Alan Cox Signed-off-by: Adrian Bunk

SPARC64: Fix quad-float multiply emulation.

2006-08-18T19:28:03Z

Something is wrong with the 3-multiply (vs. 4-multiply) optimized version of _FP_MUL_MEAT_2_*(), so just use the slower version which actually computes correct values. Noticed by Rene Rebe Signed-off-by: David S. Miller Signed-off-by: Adrian Bunk