commit 82a28c794f27aac17d7a3ebd7f14d731a11a5532
Merge: c1bad36... 84c4f2f...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:55:18 2008 -0700

    Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/hskinnemoen/avr32-2.6
    
    * 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/hskinnemoen/avr32-2.6:
      avr32: pm_standby low-power ram bug fix
      avr32: Fix lockup after Java stack underflow in user mode

commit c1bad36054828b6a625afea39deb83d0e66e4336
Merge: 6a23312... 4ff23fa...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:54:32 2008 -0700

    Merge branch 'merge' of git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
    
    * 'merge' of git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc:
      powerpc: Fix rare boot build breakage
      powerpc/spufs: Fix possible scheduling of a context to multiple SPEs
      powerpc/spufs: Fix race for a free SPU
      powerpc/spufs: Fix multiple get_spu_context()

commit 6a23312bd31878db555afad98b44705fc1590896
Merge: 4ced08b... f4c4cd6...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:51:12 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6:
      Revert "crypto: camellia - Use kernel-provided bitops, unaligned access helpers"

commit 4ced08b89f591521c3d2e3e87ab914016e6b7d94
Merge: e1d7bf1... 1ad77a8...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:50:19 2008 -0700

    Merge master.kernel.org:/home/rmk/linux-2.6-arm
    
    * master.kernel.org:/home/rmk/linux-2.6-arm:
      [ARM] 5241/1: provide ioremap_wc()
      [ARM] omap: fix virtual vs physical address space confusions
      [ARM] remove unused #include <version.h>
      [ARM] omap: fix build error in ohci-omap.c
      [ARM] omap: fix gpio.c build error

commit e1d7bf14999469b16e86889ac71c94a9d0d2f5f4
Merge: e228c1b... 291c54f...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:47:21 2008 -0700

    Merge branch 'sched-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
    
    * 'sched-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:
      sched: arch_reinit_sched_domains() must destroy domains to force rebuild
      sched, cpuset: rework sched domains and CPU hotplug handling (v4)

commit e228c1b51ef572843827630e643a682ef492b933
Merge: a46add7... 8e48b6b...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:46:56 2008 -0700

    Merge branch 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jgarzik/libata-dev
    
    * 'upstream-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jgarzik/libata-dev:
      ahci: RAID mode SATA patch for Intel Ibex Peak DeviceIDs
      pata_sil680: remove duplicate pcim_enable_device
      libata-sff: kill spurious WARN_ON() in ata_hsm_move()
      sata_nv: disable hardreset for generic
      ahci: disable PMP for marvell ahcis
      sata_mv: add RocketRaid 1720 PCI ID to driver
      ahci, pata_marvell: play nicely together

commit a46add72f79bb8196f07a860adddd312ca398eec
Author: Uwe Kleine-König <ukleinek@informatik.uni-freiburg.de>
Date:   Tue Sep 9 00:11:39 2008 +0200

    Fix format of MAINTAINERS
    
    ... one entry lacked a colon which broke one of my scripts.
    
    Signed-off-by: Uwe Kleine-König <ukleinek@informatik.uni-freiburg.de>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit bcbc713470283bc82d043fd23b02e41a9eb8dee5
Merge: b364e2f... 8d4698f...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:43:44 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6:
      bridge: don't allow setting hello time to zero
      netns : fix kernel panic in timewait socket destruction
      pkt_sched: Fix qdisc state in net_tx_action()
      netfilter: nf_conntrack_irc: make sure string is terminated before calling simple_strtoul
      netfilter: nf_conntrack_gre: nf_ct_gre_keymap_flush() fixlet
      netfilter: nf_conntrack_gre: more locking around keymap list
      netfilter: nf_conntrack_sip: de-static helper pointers

commit b364e2f5262e972e731a576dfc6ede0689a6c19e
Merge: 06dd881... 4d08461...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Mon Sep 8 15:43:02 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc-2.6:
      sparc64: Prevent sparc64 from invoking irq handlers on offline CPUs
      sparc64: Fix IPI call locking.

commit 06dd881f59b3c07a430cdcbef2197f9b6dc79ae8
Author: Jason Wessel <jason.wessel@windriver.com>
Date:   Mon Sep 8 14:53:37 2008 +0100

    usb: fix null deferences in low level usb serial
    
    The hw interface drivers for the usb serial devices deference the tty
    structure to set up the parameters for the initial console.  The tty
    structure should be passed as a parameter to the set_termios() call.
    
    Signed-off-by: Jason Wessel <jason.wessel@windriver.com>
    Signed-off-by: Alan Cox <alan@redhat.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit af904deaf6da3f3285eb0a06a3dc6a1af0251030
Author: Chuck Lever <chuck.lever@oracle.com>
Date:   Mon Sep 8 11:58:13 2008 -0400

    NFS: Restore missing hunk in NFS mount option parser
    
    Automounter maps can contain mount options valid for other NFS
    implementations but not for Linux.  The Linux automounter uses the
    mount command's "-s" command line option ("s" for "sloppy") so that
    mount requests containing such options are not rejected.
    
    Commit f45663ce5fb30f76a3414ab3ac69f4dd320e760a attempted to address a
    known regression with text-based NFS mount option parsing.  Unrecognized
    mount options would cause mount requests to fail, even if the "-s"
    option was used on the mount command line.
    
    Unfortunately, this commit was not complete as submitted.  It adds a
    new mount option, "sloppy".  But it is missing a hunk, so it now allows
    NFS mounts with unrecognized mount options, even if the "sloppy" option
    is not present.  This could be a problem if a required critical mount
    option such as "sync" is misspelled, for example, and is considered a
    regression from 2.6.26.
    
    This patch restores the missing hunk.  Now, the default behavior of
    text-based NFS mount options is as before: any unrecognized mount option
    will cause the mount to fail.
    
    Please include this in 2.6.27-rc.
    
    Thanks to Neil Brown for reporting this.
    
    Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
    Acked-by: J. Bruce Fields <bfields@citi.umich.edu>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 8d4698f7a54a492a1b96c505b30fe750ae3e61d5
Author: Stephen Hemminger <shemminger@vyatta.com>
Date:   Mon Sep 8 13:44:40 2008 -0700

    bridge: don't allow setting hello time to zero
    
    Dushan Tcholich reports that on his system ksoftirqd can consume
    between %6 to %10 of cpu time, and cause ~200 context switches per
    second.
    
    He then correlated this with a report by bdupree@techfinesse.com:
    
    	http://marc.info/?l=linux-kernel&m=119613299024398&w=2
    
    and the culprit cause seems to be starting the bridge interface.
    In particular, when starting the bridge interface, his scripts
    are specifying a hello timer interval of "0".
    
    The bridge hello time can't be safely set to values less than 1
    second, otherwise it is possible to end up with a runaway timer.
    
    Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit d315492b1a6ba29da0fa2860759505ae1b2db857
Author: Daniel Lezcano <dlezcano@fr.ibm.com>
Date:   Mon Sep 8 13:17:27 2008 -0700

    netns : fix kernel panic in timewait socket destruction
    
    How to reproduce ?
     - create a network namespace
     - use tcp protocol and get timewait socket
     - exit the network namespace
     - after a moment (when the timewait socket is destroyed), the kernel
       panics.
    
    # BUG: unable to handle kernel NULL pointer dereference at
    0000000000000007
    IP: [<ffffffff821e394d>] inet_twdr_do_twkill_work+0x6e/0xb8
    PGD 119985067 PUD 11c5c0067 PMD 0
    Oops: 0000 [1] SMP
    CPU 1
    Modules linked in: ipv6 button battery ac loop dm_mod tg3 libphy ext3 jbd
    edd fan thermal processor thermal_sys sg sata_svw libata dock serverworks
    sd_mod scsi_mod ide_disk ide_core [last unloaded: freq_table]
    Pid: 0, comm: swapper Not tainted 2.6.27-rc2 #3
    RIP: 0010:[<ffffffff821e394d>] [<ffffffff821e394d>]
    inet_twdr_do_twkill_work+0x6e/0xb8
    RSP: 0018:ffff88011ff7fed0 EFLAGS: 00010246
    RAX: ffffffffffffffff RBX: ffffffff82339420 RCX: ffff88011ff7ff30
    RDX: 0000000000000001 RSI: ffff88011a4d03c0 RDI: ffff88011ac2fc00
    RBP: ffffffff823392e0 R08: 0000000000000000 R09: ffff88002802a200
    R10: ffff8800a5c4b000 R11: ffffffff823e4080 R12: ffff88011ac2fc00
    R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000
    FS: 0000000041cbd940(0000) GS:ffff8800bff839c0(0000)
    knlGS:0000000000000000
    CS: 0010 DS: 0018 ES: 0018 CR0: 000000008005003b
    CR2: 0000000000000007 CR3: 00000000bd87c000 CR4: 00000000000006e0
    DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
    DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
    Process swapper (pid: 0, threadinfo ffff8800bff9e000, task
    ffff88011ff76690)
    Stack: ffffffff823392e0 0000000000000100 ffffffff821e3a3a
    0000000000000008
    0000000000000000 ffffffff821e3a61 ffff8800bff7c000 ffffffff8203c7e7
    ffff88011ff7ff10 ffff88011ff7ff10 0000000000000021 ffffffff82351108
    Call Trace:
    <IRQ> [<ffffffff821e3a3a>] ? inet_twdr_hangman+0x0/0x9e
    [<ffffffff821e3a61>] ? inet_twdr_hangman+0x27/0x9e
    [<ffffffff8203c7e7>] ? run_timer_softirq+0x12c/0x193
    [<ffffffff820390d1>] ? __do_softirq+0x5e/0xcd
    [<ffffffff8200d08c>] ? call_softirq+0x1c/0x28
    [<ffffffff8200e611>] ? do_softirq+0x2c/0x68
    [<ffffffff8201a055>] ? smp_apic_timer_interrupt+0x8e/0xa9
    [<ffffffff8200cad6>] ? apic_timer_interrupt+0x66/0x70
    <EOI> [<ffffffff82011f4c>] ? default_idle+0x27/0x3b
    [<ffffffff8200abbd>] ? cpu_idle+0x5f/0x7d
    
    
    Code: e8 01 00 00 4c 89 e7 41 ff c5 e8 8d fd ff ff 49 8b 44 24 38 4c 89 e7
    65 8b 14 25 24 00 00 00 89 d2 48 8b 80 e8 00 00 00 48 f7 d0 <48> 8b 04 d0
    48 ff 40 58 e8 fc fc ff ff 48 89 df e8 c0 5f 04 00
    RIP [<ffffffff821e394d>] inet_twdr_do_twkill_work+0x6e/0xb8
    RSP <ffff88011ff7fed0>
    CR2: 0000000000000007
    
    This patch provides a function to purge all timewait sockets related
    to a network namespace. The timewait sockets life cycle is not tied with
    the network namespace, that means the timewait sockets stay alive while
    the network namespace dies. The timewait sockets are for avoiding to
    receive a duplicate packet from the network, if the network namespace is
    freed, the network stack is removed, so no chance to receive any packets
    from the outside world. Furthermore, having a pending destruction timer
    on these sockets with a network namespace freed is not safe and will lead
    to an oops if the timer callback which try to access data belonging to
    the namespace like for example in:
    	inet_twdr_do_twkill_work
    		-> NET_INC_STATS_BH(twsk_net(tw), LINUX_MIB_TIMEWAITED);
    
    Purging the timewait sockets at the network namespace destruction will:
     1) speed up memory freeing for the namespace
     2) fix kernel panic on asynchronous timewait destruction
    
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    Acked-by: Denis V. Lunev <den@openvz.org>
    Acked-by: Eric W. Biederman <ebiederm@xmission.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 8e48b6b307085ce8a747cf94294742f7b7a11b18
Author: Seth Heasley <seth.heasley@intel.com>
Date:   Wed Aug 27 16:47:22 2008 -0700

    ahci: RAID mode SATA patch for Intel Ibex Peak DeviceIDs
    
    Add the Intel Ibex Peak (PCH) SATA RAID Controller DeviceIDs.
    
    Signed-off-by: Seth Heasley <seth.heasley@intel.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit de058cdea65842ed4bf17da6b50d6fe6b120a6ef
Author: David Milburn <dmilburn@redhat.com>
Date:   Fri Aug 29 10:36:28 2008 -0500

    pata_sil680: remove duplicate pcim_enable_device
    
    Remove duplicate call to pcim_enable_device in sil680_init_one.
    
    Signed-off-by: David Milburn <dmilburn@redhat.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 9c2676b61a5a4b6d99e65fb2f438fb3914302eda
Author: Tejun Heo <tj@kernel.org>
Date:   Fri Aug 29 16:27:43 2008 +0200

    libata-sff: kill spurious WARN_ON() in ata_hsm_move()
    
    On HSM_ST_ERR, ata_hsm_move() triggers WARN_ON() if AC_ERR_DEV or
    AC_ERR_HSM is not set.  PHY events may trigger HSM_ST_ERR with other
    error codes and, with or without it, there just isn't much reason to
    do WARN_ON() on it.  Even if error code is not set there, core EH
    logic won't have any problem dealing with the error condition.
    
    OSDL bz#11065 reports this problem.
    
    Signed-off-by: Tejun Heo <tj@kernel.org>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 2fd673ecf0378ddeeeb87b3605e50212e0c0ddc6
Author: Tejun Heo <tj@kernel.org>
Date:   Fri Aug 29 16:13:12 2008 +0200

    sata_nv: disable hardreset for generic
    
    of them being unifying probing, hotplug and EH reset paths uniform.
    Previously, broken hardreset could go unnoticed as it wasn't used
    during probing but when something goes wrong or after hotplug the
    problem will surface and bite hard.
    
    OSDL bug 11195 reports that sata_nv generic flavor falls into this
    category.  Hardreset itself succeeds but PHY stays offline after
    hardreset.  I tried longer debounce timing but the result was the
    same.
    
      http://bugzilla.kernel.org/show_bug.cgi?id=11195
    
    So, it seems we'll have to drop hardreset from the generic flavor.
    
    Signed-off-by: Tejun Heo <tj@kernel.org>
    Cc: Peer Chen <pchen@nvidia.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 17248461cb66103b87ff03bdee34aa61035cc93e
Author: Tejun Heo <tj@kernel.org>
Date:   Fri Aug 29 16:03:59 2008 +0200

    ahci: disable PMP for marvell ahcis
    
    Marvell ahcis don't play nicely with PMPs.  Disable it.
    
    Reported by KueiHuan Chen in the following thread.
    
      http://thread.gmane.org/gmane.linux.ide/33296
    
    Signed-off-by: Tejun Heo <tj@kernel.org>
    Cc: KueiHuan Chen <kueihuan.chen@gmail.com>
    Cc: Mark Lord <mlord@pobox.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 46c5784c8fa736c2bb42fe681189b86e99abdc2e
Author: Mark Lord <liml@rtr.ca>
Date:   Thu Sep 4 18:21:07 2008 -0400

    sata_mv: add RocketRaid 1720 PCI ID to driver
    
    Signed-off-by: Petr Jelen <petr.jelen@gmail.com>
    Signed-off-by: Mark Lord <mlord@pobox.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 5b66c829bf5c65663b2f68ee6b42f6e834cd39cd
Author: Alan Cox <alan@lxorguk.ukuu.org.uk>
Date:   Wed Sep 3 14:48:34 2008 +0100

    ahci, pata_marvell: play nicely together
    
    I've been chasing Jeff about this for months.  Jeff added the Marvell
    device identifiers to the ahci driver without making the AHCI driver
    handle the PATA port. This means a lot of users can't use current
    kernels and in most distro cases can't even install.
    
    This has been going on since March 2008 for the 6121 Marvell, and late 2007
    for the 6145!!!
    
    This was all pointed out at the time and repeatedly ignored. Bugs assigned
    to Jeff about this are ignored also.
    
    To quote Jeff in email
    
    > "Just switch the order of 'ahci' and 'pata_marvell' in
    > /etc/modprobe.conf, then use Fedora's tools regenerate the initrd.
    
    > See?  It's not rocket science, and the current configuration can be
    > easily made to work for Fedora users."
    
    (Which isn't trivial, isn't end user, shouldn't be needed, and as it usually
    breaks at install time is in fact impossible)
    
    To quote Jeff in August 2007
    
    > "   mv-ahci-pata
    > Marvell 6121/6141 PATA support.  Needs fixing in the 'PATA controller
    > command' area before it is usable, and can go upstream."
    
    Only he add the ids anyway later and caused regressions, adding a further
    id in March causing more regresions.
    
    The actual fix for the moment is very simple. If the user has included
    the pata_marvell driver let it drive the ports. If they've only selected
    for SATA support give them the AHCI driver which will run the port a fraction
    faster. Allow the user to control this decision via ahci.marvell_enable as
    a module parameter so that distributions can ship 'it works' defaults and
    smarter users (or config tools) can then flip it over it desired.
    
    Signed-off-by: Alan Cox <alan@redhat.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 4ff23fa93011e2367fea056e72c92709178972d9
Author: Hugh Dickins <hugh@veritas.com>
Date:   Sun Sep 7 00:35:48 2008 +0100

    powerpc: Fix rare boot build breakage
    
    A make -j20 powerpc kernel build broke a couple of months ago saying:
    In file included from arch/powerpc/boot/gunzip_util.h:13,
                     from arch/powerpc/boot/prpmc2800.c:21:
    arch/powerpc/boot/zlib.h:85: error: expected ‘:’, ‘,’, ‘;’, ‘}’ or ‘__attribute__’ before ‘*’ token
    arch/powerpc/boot/zlib.h:630: warning: type defaults to ‘int’ in declaration of ‘Byte’
    arch/powerpc/boot/zlib.h:630: error: expected ‘;’, ‘,’ or ‘)’ before ‘*’ token
    
    It happened again yesterday: too rare for me to confirm the fix, but
    it looks like the list of dependants on gunzip_util.h was incomplete.
    
    Signed-off-by: Hugh Dickins <hugh@veritas.com>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit f4c4cd6d14e3a3f638475f2f83e26765a7d3327b
Author: Herbert Xu <herbert@gondor.apana.org.au>
Date:   Mon Sep 8 14:29:54 2008 +1000

    Revert "crypto: camellia - Use kernel-provided bitops, unaligned access helpers"
    
    This reverts commit bd699f2df6dbc2f4cba528fe598bd63a4d3702c5,
    which causes camellia to fail the included self-test vectors.
    It has also been confirmed that it breaks existing encrypted
    disks using camellia.
    
    Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

commit e8a83e10d7dfe5d0841062780769b30f65417e15
Author: Jarek Poplawski <jarkao2@gmail.com>
Date:   Sun Sep 7 18:41:21 2008 -0700

    pkt_sched: Fix qdisc state in net_tx_action()
    
    net_tx_action() can skip __QDISC_STATE_SCHED bit clearing while qdisc
    is neither ran nor rescheduled, which may cause endless loop in
    dev_deactivate().
    
    Reported-by: Denys Fedoryshchenko <denys@visp.net.lb>
    Tested-by: Denys Fedoryshchenko <denys@visp.net.lb>
    Signed-off-by: Jarek Poplawski <jarkao2@gmail.com>
    Acked-by: Herbert Xu <herbert@gondor.apana.org.au>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit e3b802ba885b54f4050164c3cfd9e0ba9c73173a
Author: Patrick McHardy <kaber@trash.net>
Date:   Sun Sep 7 18:21:24 2008 -0700

    netfilter: nf_conntrack_irc: make sure string is terminated before calling simple_strtoul
    
    Alexey Dobriyan points out:
    
    1. simple_strtoul() silently accepts all characters for given base even
       if result won't fit into unsigned long. This is amazing stupidity in
       itself, but
    
    2. nf_conntrack_irc helper use simple_strtoul() for DCC request parsing.
       Data first copied into 64KB buffer, so theoretically nothing prevents
       reading past the end of it, since data comes from network given 1).
    
    This is not actually a problem currently since we're guaranteed to have
    a 0 byte in skb_shared_info or in the buffer the data is copied to, but
    to make this more robust, make sure the string is actually terminated.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 51807e91a76a531d059ec7ce3395c435e4df52a8
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Sun Sep 7 18:20:36 2008 -0700

    netfilter: nf_conntrack_gre: nf_ct_gre_keymap_flush() fixlet
    
    It does "kfree(list_head)" which looks wrong because entity that was
    allocated is definitely not list_head.
    
    However, this all works because list_head is first item in
    struct nf_ct_gre_keymap.
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 887464a41fde7e9e1e11ca86748338033c502446
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Sun Sep 7 18:20:08 2008 -0700

    netfilter: nf_conntrack_gre: more locking around keymap list
    
    gre_keymap_list should be protected in all places.
    (unless I'm misreading something)
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 66bf79182d6531c14c1f9a507b6bbf374a2ae4cd
Author: Alexey Dobriyan <adobriyan@gmail.com>
Date:   Sun Sep 7 18:19:25 2008 -0700

    netfilter: nf_conntrack_sip: de-static helper pointers
    
    Helper's ->help hook can run concurrently with itself, so iterating over
    SIP helpers with static pointer won't work reliably.
    
    Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com>
    Signed-off-by: Patrick McHardy <kaber@trash.net>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit b2e601d14deb2083e2a537b47869ab3895d23a28
Author: Andre Detsch <adetsch@br.ibm.com>
Date:   Thu Sep 4 21:16:27 2008 +0000

    powerpc/spufs: Fix possible scheduling of a context to multiple SPEs
    
    We currently have a race when scheduling a context to a SPE -
    after we have found a runnable context in spusched_tick, the same
    context may have been scheduled by spu_activate().
    
    This may result in a panic if we try to unschedule a context that has
    been freed in the meantime.
    
    This change exits spu_schedule() if the context has already been
    scheduled, so we don't end up scheduling it twice.
    
    Signed-off-by: Andre Detsch <adetsch@br.ibm.com>
    Signed-off-by: Jeremy Kerr <jk@ozlabs.org>

commit 7686ad5606f08d9dfb33a2087a36c8366366015b
Merge: 64f996f... 9ce1ca2...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 6 21:47:30 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
      Input: i8042 - make Lenovo 3000 N100 blacklist entry more specific
      Input: bcm5974 - add BTN_TOUCH event for mousedev benefit
      Input: bcm5974 - improve finger tracking and counting
      Input: bcm5974 - small formatting cleanup
      Input: bcm5974 - add maintainer entry

commit 64f996f670e9477072a43b226294ea1cc153f6ac
Merge: f532522... 23952a9...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 6 19:36:23 2008 -0700

    Merge branch 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
    
    * 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:
      x86: cpu_init(): fix memory leak when using CPU hotplug
      x86: pda_init(): fix memory leak when using CPU hotplug
      x86, xen: Use native_pte_flags instead of native_pte_val for .pte_flags
      x86: move mtrr cpu cap setting early in early_init_xxxx
      x86: delay early cpu initialization until cpuid is done
      x86: use X86_FEATURE_NOPL in alternatives
      x86: add NOPL as a synthetic CPU feature bit
      x86: boot: stub out unimplemented CPU feature words

commit f5325225658737e6c9cb8e24373e2c281a90be2a
Merge: 4747832... 4ab6a21...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 6 19:33:26 2008 -0700

    Merge branch 'timers-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
    
    * 'timers-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:
      clocksource, acpi_pm.c: check for monotonicity
      clocksource, acpi_pm.c: use proper read function also in errata mode
      ntp: fix calculation of the next jiffie to trigger RTC sync
      x86: HPET: read back compare register before reading counter
      x86: HPET fix moronic 32/64bit thinko
      clockevents: broadcast fixup possible waiters
      HPET: make minimum reprogramming delta useful
      clockevents: prevent endless loop lockup
      clockevents: prevent multiple init/shutdown
      clockevents: enforce reprogram in oneshot setup
      clockevents: prevent endless loop in periodic broadcast handler
      clockevents: prevent clockevent event_handler ending up handler_noop

commit 4747832b56a95dbeb0cef4714e6fcc766eed0a95
Merge: a22a9a9... 8a65649...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 6 19:33:10 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound-2.6
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound-2.6:
      Fix CONFIG_AC97_BUS dependency

commit a22a9a90cfbcc91c3e0f8dc8549535e2786d3e7e
Merge: 70bb089... 0011036...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sat Sep 6 19:32:21 2008 -0700

    Merge branch 'upstream' of git://ftp.linux-mips.org/pub/scm/upstream-linus
    
    * 'upstream' of git://ftp.linux-mips.org/pub/scm/upstream-linus:
      [MIPS] Probe initrd header only if explicitly specified
      [MIPS] TX39xx: Add missing local_flush_icache_range initialization
      [MIPS] TXx9: Fix txx9_pcode initialization
      [MIPS] Fix WARNING: at kernel/smp.c:290
      [MIPS] Fix data bus error recovery

commit 291c54ff764d12ecc9a916cb478a0bbb45c5990e
Merge: 4904862... dfb512e...
Author: Ingo Molnar <mingo@elte.hu>
Date:   Sat Sep 6 21:03:16 2008 +0200

    Merge branch 'sched/cpuset' into sched/urgent

commit 23952a96ae738277f3139b63d622e22984589031
Author: Andreas Herrmann <andreas.herrmann3@amd.com>
Date:   Wed Aug 6 10:29:37 2008 +0200

    x86: cpu_init(): fix memory leak when using CPU hotplug
    
    Exception stacks are allocated each time a CPU is set online.
    But the allocated space is never freed. Thus with one CPU hotplug
    offline/online cycle there is a memory leak of 24K (6 pages) for
    a CPU.
    
    Fix is to allocate exception stacks only once -- when the CPU is
    set online for the first time.
    
    Signed-off-by: Andreas Herrmann <andreas.herrmann3@amd.com>
    Cc: akpm@linux-foundation.org
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit d04ec773d7ca1bbc05a2768be95c1cebe2b07757
Author: Andreas Herrmann <andreas.herrmann3@amd.com>
Date:   Wed Aug 6 10:27:30 2008 +0200

    x86: pda_init(): fix memory leak when using CPU hotplug
    
    pda->irqstackptr is allocated whenever a CPU is set online.
    But it is never freed. This results in a memory leak of 16K
    for each CPU offline/online cycle.
    
    Fix is to allocate pda->irqstackptr only once.
    
    Signed-off-by: Andreas Herrmann <andreas.herrmann3@amd.com>
    Cc: akpm@linux-foundation.org
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit e4a6be4d2850da032a782b5296c07dfdf583af86
Author: Eduardo Habkost <ehabkost@redhat.com>
Date:   Thu Jul 24 12:15:45 2008 -0300

    x86, xen: Use native_pte_flags instead of native_pte_val for .pte_flags
    
    Using native_pte_val triggers the BUG_ON() in the paravirt_ops
    version of pte_flags().
    
    Signed-off-by: Eduardo Habkost <ehabkost@redhat.com>
    Acked-by: Jeremy Fitzhardinge <jeremy.fitzhardinge@citrix.com>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit dfb512ec4834116124da61d6c1ee10fd0aa32bd6
Author: Max Krasnyansky <maxk@qualcomm.com>
Date:   Fri Aug 29 13:11:41 2008 -0700

    sched: arch_reinit_sched_domains() must destroy domains to force rebuild
    
    What I realized recently is that calling rebuild_sched_domains() in
    arch_reinit_sched_domains() by itself is not enough when cpusets are enabled.
    partition_sched_domains() code is trying to avoid unnecessary domain rebuilds
    and will not actually rebuild anything if new domain masks match the old ones.
    
    What this means is that doing
         echo 1 > /sys/devices/system/cpu/sched_mc_power_savings
    on a system with cpusets enabled will not take affect untill something changes
    in the cpuset setup (ie new sets created or deleted).
    
    This patch fixes restore correct behaviour where domains must be rebuilt in
    order to enable MC powersaving flags.
    
    Test on quad-core Core2 box with both CONFIG_CPUSETS and !CONFIG_CPUSETS.
    Also tested on dual-core Core2 laptop. Lockdep is happy and things are working
    as expected.
    
    Signed-off-by: Max Krasnyansky <maxk@qualcomm.com>
    Tested-by: Vaidyanathan Srinivasan <svaidy@linux.vnet.ibm.com>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit dd786dd12c99634055a9066f25ea957f29991c22
Author: Yinghai Lu <yhlu.kernel@gmail.com>
Date:   Thu Sep 4 21:09:43 2008 +0200

    x86: move mtrr cpu cap setting early in early_init_xxxx
    
    Krzysztof Helt found MTRR is not detected on k6-2
    
    root cause:
    	we moved mtrr_bp_init() early for mtrr trimming,
    and in early_detect we only read the CPU capability from cpuid,
    so some cpu doesn't have that bit in cpuid.
    
    So we need to add early_init_xxxx to preset those bit before mtrr_bp_init
    for those earlier cpus.
    
    this patch is for v2.6.27
    
    Reported-by: Krzysztof Helt <krzysztof.h1@wp.pl>
    Signed-off-by: Yinghai Lu <yhlu.kernel@gmail.com>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 12cf105cd66d95cf32c73cfa847a50bd1b700f23
Author: Krzysztof Helt <krzysztof.h1@wp.pl>
Date:   Thu Sep 4 21:09:43 2008 +0200

    x86: delay early cpu initialization until cpuid is done
    
    Move early cpu initialization after cpu early get cap so the
    early cpu initialization can fix up cpu caps.
    
    Signed-off-by: Krzysztof Helt <krzysztof.h1@wp.pl>
    Signed-off-by: Yinghai Lu <yhlu.kernel@gmail.com>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 4ab6a219113197425ac112e35e1ec8062c69888e
Author: Dominik Brodowski <linux@dominikbrodowski.net>
Date:   Fri Sep 5 14:05:35 2008 -0700

    clocksource, acpi_pm.c: check for monotonicity
    
    The current check for monotonicity is way too weak: Andreas Mohr reports (
    http://lkml.org/lkml/2008/8/10/77 ) that on one of his test systems the
    current check only triggers in 50% of all cases, leading to catastrophic
    timer behaviour.  To fix this issue, expand the check for monotonicity by
    doing ten consecutive tests instead of one.
    
    Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit dfdf748a61a21b7397b9f57c83de722de71dc56a
Author: Dominik Brodowski <linux@dominikbrodowski.net>
Date:   Fri Sep 5 14:05:33 2008 -0700

    clocksource, acpi_pm.c: use proper read function also in errata mode
    
    On all hardware (some Intel ICH4, PIIX4 and PIIX4E chipsets) affected by a
    hardware errata there's about a 4.2% chance that initialization of the
    ACPI PMTMR fails.  On those chipsets, we need to read out the timer value
    at least three times to get a correct result, for every once in a while
    (i.e.  within a 3 ns window every 69.8 ns) the read returns a bogus
    result.  During normal operation we work around this issue, but during
    initialization reading a bogus value may lead to -EINVAL even though the
    hardware is usable.
    
    Thanks to Andreas Mohr for spotting this issue.
    
    Signed-off-by: Dominik Brodowski <linux@dominikbrodowski.net>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 4ff4b9e19a80b73959ebeb28d1df40176686f0a8
Author: Maciej W. Rozycki <macro@linux-mips.org>
Date:   Fri Sep 5 14:05:31 2008 -0700

    ntp: fix calculation of the next jiffie to trigger RTC sync
    
    We have a bug in the calculation of the next jiffie to trigger the RTC
    synchronisation.  The aim here is to run sync_cmos_clock() as close as
    possible to the middle of a second.  Which means we want this function to
    be called less than or equal to half a jiffie away from when now.tv_nsec
    equals 5e8 (500000000).
    
    If this is not the case for a given call to the function, for this purpose
    instead of updating the RTC we calculate the offset in nanoseconds to the
    next point in time where now.tv_nsec will be equal 5e8.  The calculated
    offset is then converted to jiffies as these are the unit used by the
    timer.
    
    Hovewer timespec_to_jiffies() used here uses a ceil()-type rounding mode,
    where the resulting value is rounded up.  As a result the range of
    now.tv_nsec when the timer will trigger is from 5e8 to 5e8 + TICK_NSEC
    rather than the desired 5e8 - TICK_NSEC / 2 to 5e8 + TICK_NSEC / 2.
    
    As a result if for example sync_cmos_clock() happens to be called at the
    time when now.tv_nsec is between 5e8 + TICK_NSEC / 2 and 5e8 to 5e8 +
    TICK_NSEC, it will simply be rescheduled HZ jiffies later, falling in the
    same range of now.tv_nsec again.  Similarly for cases offsetted by an
    integer multiple of TICK_NSEC.
    
    This change addresses the problem by subtracting TICK_NSEC / 2 from the
    nanosecond offset to the next point in time where now.tv_nsec will be
    equal 5e8, effectively shifting the following rounding in
    timespec_to_jiffies() so that it produces a rounded-to-nearest result.
    
    Signed-off-by: Maciej W. Rozycki <macro@linux-mips.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 1ad77a876da48331451698cc4172c90ab9b6372f
Author: Lennert Buytenhek <buytenh@wantstofly.org>
Date:   Fri Sep 5 13:17:11 2008 +0100

    [ARM] 5241/1: provide ioremap_wc()
    
    This patch provides an ARM implementation of ioremap_wc().
    
    We use different page table attributes depending on which CPU we
    are running on:
    
    - Non-XScale ARMv5 and earlier systems: The ARMv5 ARM documents four
      possible mapping types (CB=00/01/10/11).  We can't use any of the
      cached memory types (CB=10/11), since that breaks coherency with
      peripheral devices.  Both CB=00 and CB=01 are suitable for _wc, and
      CB=01 (Uncached/Buffered) allows the hardware more freedom than
      CB=00, so we'll use that.
    
      (The ARMv5 ARM seems to suggest that CB=01 is allowed to delay stores
      but isn't allowed to merge them, but there is no other mapping type
      we can use that allows the hardware to delay and merge stores, so
      we'll go with CB=01.)
    
    - XScale v1/v2 (ARMv5): same as the ARMv5 case above, with the slight
      difference that on these platforms, CB=01 actually _does_ allow
      merging stores.  (If you want noncoalescing bufferable behavior
      on Xscale v1/v2, you need to use XCB=101.)
    
    - Xscale v3 (ARMv5) and ARMv6+: on these systems, we use TEXCB=00100
      mappings (Inner/Outer Uncacheable in xsc3 parlance, Uncached Normal
      in ARMv6 parlance).
    
      The ARMv6 ARM explicitly says that any accesses to Normal memory can
      be merged, which makes Normal memory more suitable for _wc mappings
      than Device or Strongly Ordered memory, as the latter two mapping
      types are guaranteed to maintain transaction number, size and order.
      We use the Uncached variety of Normal mappings for the same reason
      that we can't use C=1 mappings on ARMv5.
    
      The xsc3 Architecture Specification documents TEXCB=00100 as being
      Uncacheable and allowing coalescing of writes, which is also just
      what we need.
    
    Signed-off-by: Lennert Buytenhek <buytenh@marvell.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 8a656496b21efd95fd55b66e0601c5ad41f9b156
Author: Takashi Iwai <tiwai@suse.de>
Date:   Sat Sep 6 11:43:41 2008 +0200

    Fix CONFIG_AC97_BUS dependency
    
    CONFIG_AC97_BUS is used from both sound and ucb1400 drivers.
    The recent change in Kconfig introduced the exclusive dependency on
    CONFIG_SOUND, and disabled the ucb1400 build without sound.
    This patch makes CONFIG_AC97_BUS independent.
    
    Signed-off-by: Takashi Iwai <tiwai@suse.de>
    Tested-by: Randy Dunlap <randy.dunlap@oracle.com>

commit 72d43d9bc9210d24d09202eaf219eac09e17b339
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Sat Sep 6 03:06:08 2008 +0200

    x86: HPET: read back compare register before reading counter
    
    After fixing the u32 thinko I sill had occasional hickups on ATI chipsets
    with small deltas. There seems to be a delay between writing the compare
    register and the transffer to the internal register which triggers the
    interrupt. Reading back the value makes sure, that it hit the internal
    match register befor we compare against the counter value.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>

commit f7676254f179eac6b5244a80195ec8ae0e9d4606
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Sat Sep 6 03:03:32 2008 +0200

    x86: HPET fix moronic 32/64bit thinko
    
    We use the HPET only in 32bit mode because:
    1) some HPETs are 32bit only
    2) on i386 there is no way to read/write the HPET atomic 64bit wide
    
    The HPET code unification done by the "moron of the year" did
    not take into account that unsigned long is different on 32 and
    64 bit.
    
    This thinko results in a possible endless loop in the clockevents
    code, when the return comparison fails due to the 64bit/332bit
    unawareness.
    
    unsigned long cnt = (u32) hpet_read() + delta can wrap over 32bit.
    but the final compare will fail and return -ETIME causing endless
    loops.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>

commit 7300711e8c6824fcfbd42a126980ff50439d8dd0
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Sat Sep 6 03:01:45 2008 +0200

    clockevents: broadcast fixup possible waiters
    
    Until the C1E patches arrived there where no users of periodic broadcast
    before switching to oneshot mode. Now we need to trigger a possible
    waiter for a periodic broadcast when switching to oneshot mode.
    Otherwise we can starve them for ever.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>

commit f31d731e4467e61de51d7f6d7115f3b712d9354c
Author: H. Peter Anvin <hpa@zytor.com>
Date:   Mon Aug 18 17:50:33 2008 -0700

    x86: use X86_FEATURE_NOPL in alternatives
    
    Use X86_FEATURE_NOPL to determine if it is safe to use P6 NOPs in
    alternatives.  Also, replace table and loop with simple if statement.
    
    Signed-off-by: H. Peter Anvin <hpa@zytor.com>

commit b6734c35af028f06772c0b2c836c7d579e6d4dad
Author: H. Peter Anvin <hpa@zytor.com>
Date:   Mon Aug 18 17:39:32 2008 -0700

    x86: add NOPL as a synthetic CPU feature bit
    
    The long noops ("NOPL") are supposed to be detected by family >= 6.
    Unfortunately, several non-Intel x86 implementations, both hardware
    and software, don't obey this dictum.  Instead, probe for NOPL
    directly by executing a NOPL instruction and see if we get #UD.
    
    Signed-off-by: H. Peter Anvin <hpa@zytor.com>

commit b74b06c5f6612a72298f37baa65460a59c26ca67
Author: H. Peter Anvin <hpa@zytor.com>
Date:   Fri Aug 15 15:36:31 2008 -0700

    x86: boot: stub out unimplemented CPU feature words
    
    The CPU feature detection code in the boot code is somewhat minimal,
    and doesn't include all possible CPUID words.  In particular, it
    doesn't contain the code for CPU feature words 2 (Transmeta),
    3 (Linux-specific), 5 (VIA), or 7 (scattered).  Zero them out, so we
    can still set those bits as known at compile time; in particular, this
    allows creating a Linux-specific NOPL flag and have it required (and
    therefore resolvable at compile time) in 64-bit mode.
    
    Signed-off-by: H. Peter Anvin <hpa@zytor.com>

commit 70bb08962ea9bd50797ae9f16b2493f5f7c65053
Author: Andrew Morton <akpm@linux-foundation.org>
Date:   Fri Sep 5 14:00:24 2008 -0700

    drivers/mmc/card/block.c: fix refcount leak in mmc_block_open()
    
    mmc_block_open() increments md->usage although it returns with -EROFS when
    default mounting a MMC/SD card with write protect switch on.  This
    reference counting bug prevents /dev/mmcblkX from being released on card
    removal, and situation worsen with reinsertion until the minor number
    range runs out.
    
    Reported-by: <sasin@solomon-systech.com>
    Acked-by: Pierre Ossman <drzeus-list@drzeus.cx>
    Cc: <stable@kernel.org>		[2.6.25.x, 2.6.26.x]
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 22f30168d296dbb54a21ebad44c9d735bca6f67b
Author: Roland McGrath <roland@redhat.com>
Date:   Fri Sep 5 14:00:23 2008 -0700

    tracehook: comment pasto fixes
    
    Fix some pasto's in comments in the new linux/tracehook.h and
    asm-generic/syscall.h files.
    
    Reported-by: Wenji Huang <wenji.huang@oracle.com>
    Signed-off-by: Roland McGrath <roland@redhat.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 34a35bddb9382fc2663e3137875ee58928f7d704
Author: Stanislaw Gruszka <stf_xl@wp.pl>
Date:   Fri Sep 5 14:00:22 2008 -0700

    atmel_lcdfb: fix oops in rmmod when framebuffer fails to register
    
    If framebuffer registration failed in platform driver ->probe() callback,
    dev_get_drvdata() points to freed memory region, but ->remove() function
    try to use it and the following oops occurs:
    
    Unable to handle kernel NULL pointer dereference at virtual address 00000228
    pgd = c3a20000
    [00000228] *pgd=23a2b031, *pte=00000000, *ppte=00000000
    Internal error: Oops: 17 [#1]
    Modules linked in: atmel_lcdfb(-) cfbcopyarea cfbimgblt cfbfillrect [last unloaded: atmel_lcdfb]
    CPU: 0    Not tainted  (2.6.27-rc2 #116)
    PC is at atmel_lcdfb_remove+0x14/0xf8 [atmel_lcdfb]
    LR is at platform_drv_remove+0x20/0x24
    pc : [<bf006bc4>]    lr : [<c0157d28>]    psr: a0000013
    sp : c3a45e84  ip : c3a45ea0  fp : c3a45e9c
    r10: 00000002  r9 : c3a44000  r8 : c0026c04
    r7 : 00000880  r6 : c02bb228  r5 : 00000000  r4 : c02bb230
    r3 : bf007e3c  r2 : c02bb230  r1 : 00000004  r0 : c02bb228
    Flags: NzCv  IRQs on  FIQs on  Mode SVC_32  ISA ARM  Segment user
    Control: 0005317f  Table: 23a20000  DAC: 00000015
    Process rmmod (pid: 6799, stack limit = 0xc3a44260)
    Stack: (0xc3a45e84 to 0xc3a46000)
    5e80:          c02bb230 bf007e3c bf007e3c c3a45eac c3a45ea0 c0157d28 bf006bc0
    5ea0: c3a45ec4 c3a45eb0 c0156d20 c0157d18 c02bb230 c02bb2d8 c3a45ee0 c3a45ec8
    5ec0: c0156da8 c0156cb8 bf007e3c bf007ee0 c02c8e14 c3a45efc c3a45ee4 c0156018
    5ee0: c0156d50 bf007e3c bf007ee0 00000000 c3a45f18 c3a45f00 c0157220 c0155f9c
    5f00: 00000000 bf007ee0 bf008000 c3a45f28 c3a45f1c c0157e34 c01571ec c3a45f38
    5f20: c3a45f2c bf006ba8 c0157e30 c3a45fa4 c3a45f3c c005772c bf006ba4 656d7461
    5f40: 636c5f6c 00626664 c004c988 c3a45f80 c3a45f5c 00000000 c3a45fb0 00000000
    5f60: ffffffff becaccd8 00000880 00000000 000a5e80 00000001 bf007ee0 00000880
    5f80: c3a45f84 00000000 becaccd4 00000002 000003df 00000081 00000000 c3a45fa8
    5fa0: c0026a60 c0057584 00000002 000003df 00900081 000a5e80 00000880 00000000
    5fc0: becaccd4 00000002 000003df 00000000 000a5e80 00000001 00000002 0000005f
    5fe0: 4004f5ec becacbe8 0001a158 4004f5fc 20000010 00900081 f9ffbadf 7bbfb2bb
    Backtrace:
    [<bf006bb0>] (atmel_lcdfb_remove+0x0/0xf8 [atmel_lcdfb]) from [<c0157d28>] (platform_drv_remove+0x20/0x24)
     r6:bf007e3c r5:bf007e3c r4:c02bb230
    [<c0157d08>] (platform_drv_remove+0x0/0x24) from [<c0156d20>] (__device_release_driver+0x78/0x98)
    [<c0156ca8>] (__device_release_driver+0x0/0x98) from [<c0156da8>] (driver_detach+0x68/0x90)
     r5:c02bb2d8 r4:c02bb230
    [<c0156d40>] (driver_detach+0x0/0x90) from [<c0156018>] (bus_remove_driver+0x8c/0xb4)
     r6:c02c8e14 r5:bf007ee0 r4:bf007e3c
    [<c0155f8c>] (bus_remove_driver+0x0/0xb4) from [<c0157220>] (driver_unregister+0x44/0x48)
     r6:00000000 r5:bf007ee0 r4:bf007e3c
    [<c01571dc>] (driver_unregister+0x0/0x48) from [<c0157e34>] (platform_driver_unregister+0x14/0x18)
     r6:bf008000 r5:bf007ee0 r4:00000000
    [<c0157e20>] (platform_driver_unregister+0x0/0x18) from [<bf006ba8>] (atmel_lcdfb_exit+0x14/0x1c [atmel_lcdfb])
    [<bf006b94>] (atmel_lcdfb_exit+0x0/0x1c [atmel_lcdfb]) from [<c005772c>] (sys_delete_module+0x1b8/0x22c)
    [<c0057574>] (sys_delete_module+0x0/0x22c) from [<c0026a60>] (ret_fast_syscall+0x0/0x2c)
     r7:00000081 r6:000003df r5:00000002 r4:becaccd4
    Code: e92dd870 e24cb004 e59050c4 e1a06000 (e5954228)
    ---[ end trace 85476b184d9e68d8 ]---
    
    This patch fixes the oops.
    
    Signed-off-by: Stanislaw Gruszka <stf_xl@wp.pl>
    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
    Acked-by: Krzysztof Helt <krzysztof.h1@wp.pl>
    Cc: Haavard Skinnemoen <hskinnemoen@atmel.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 3cb5599a84c557c0dd9a19feb63a3788268cf249
Author: Rafael J. Wysocki <rjw@sisk.pl>
Date:   Fri Sep 5 14:00:19 2008 -0700

    forcedeth: fix kexec regression
    
    Fix regression tracked as http://bugzilla.kernel.org/show_bug.cgi?id=11361
    and caused by commit f735a2a1a4f2a0f5cd823ce323e82675990469e2 ("[netdrvr]
    forcedeth: setup wake-on-lan before shutting down") that makes network
    adapters integrated into the NVidia MCP55 chipsets fail to work in kexeced
    kernels.  The problem appears to be that if the adapter is put into D3_hot
    during ->shutdown(), it cannot be brought back into D0 after kexec (ref.
    http://marc.info/?l=linux-kernel&m=121900062814967&w=4).  Therefore, only
    put forcedeth into D3 during ->shutdown() if the system is to be powered
    off.
    
    Signed-off-by: Rafael J. Wysocki <rjw@sisk.pl>
    Tested-by: Yinghai Lu <yhlu.kernel@gmail.com>
    Cc: Ayaz Abdulla <aabdulla@nvidia.com>
    Acked-by: Jeff Garzik <jeff@garzik.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 11d55d2cba6e867be8955e5ae011c54c556b849f
Author: Li Zefan <lizf@cn.fujitsu.com>
Date:   Fri Sep 5 14:00:18 2008 -0700

    res_counter: fix off-by-one bug in setting limit
    
    I found we can no longer set limit to 0 with 2.6.27-rcX:
     # mount -t cgroup -omemory xxx /mnt
     # mkdir /mnt/0
     # echo 0 > /mnt/0/memory.limit_in_bytes
     bash: echo: write error: Device or resource busy
    
    It turned out 'limit' can't be set to 'usage', which is wrong IMO.
    
    Signed-off-by: Li Zefan <lizf@cn.fujitsu.com>
    Acked-by: KAMEZAWA Hiroyuki <kamezawa.hiroyu@jp.fujitsu.com>
    Acked-by: Balbir Singh <balbir@linux.vnet.ibm.com>
    Acked-by: Pavel Emelyanov <xemul@openvz.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 7f621861fbdb1ea90c36b1a59a45cb84b4a2239f
Merge: 1c402c8... 4904862...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:37:15 2008 -0700

    Merge branch 'sched-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
    
    * 'sched-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:
      sched: fix process time monotonicity
      sched_clock: fix NOHZ interaction

commit 1c402c8cd1fb4d0524bab184f8609f7e098ccb2e
Merge: 45d866e... e6a5652...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:36:21 2008 -0700

    Merge branch 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
    
    * 'x86-fixes-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:
      x86: add io delay quirk for Presario F700

commit 45d866e1a06dba309f79dbb61ad1db964bb8ee8a
Merge: 6f74b18... de24125...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:35:56 2008 -0700

    Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/async_tx
    
    * 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/djbw/async_tx:
      async_tx: fix the bug in async_tx_run_dependencies

commit 6f74b1849bf04432c4a2fe21f594136e5b9d1fad
Merge: b693ffe... b35de67...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:31:54 2008 -0700

    Merge git://git.infradead.org/~dwmw2/dwmw2-2.6.27
    
    * git://git.infradead.org/~dwmw2/dwmw2-2.6.27:
      Revert "[ARM] use the new byteorder headers"
      Fix conditional export of kvh.h and a.out.h to userspace.
      [MTD] [NAND] tmio_nand: fix base address programming

commit b693ffe67363119199ffe9f2fac9119475968e8a
Merge: 14408c4... 4eb00c9...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:30:58 2008 -0700

    Merge branch 'sh/for-2.6.27' of git://git.kernel.org/pub/scm/linux/kernel/git/lethal/sh-2.6
    
    * 'sh/for-2.6.27' of git://git.kernel.org/pub/scm/linux/kernel/git/lethal/sh-2.6:
      i2c: fix i2c-sh_mobile timing issues
      sh64: resume_kernel fix for kernel oops built with CONFIG_BKL_PREEMPT=y.
      sh: resume_kernel fix for kernel oops built with CONFIG_BKL_PREEMPT=y.
      sh: fix semtimedop syscall
      sh: update AP325RXA defconfig
      sh: update Migo-R defconfig
      sh: fix platform_resource_setup_memory() section mismatch
      sh: fix kexec entry point for crash kernels
      sh: crash kernel resource fix
      sh: fix ptrace_64.c:user_disable_single_step()
      sh64: re-add the __strnlen_user() prototype

commit 14408c4f4172eafc26ff52bebb7a8ab85b1c5492
Merge: 54e2a32... 8561098...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:29:50 2008 -0700

    Merge branch 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/v4l-dvb
    
    * 'fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/mchehab/v4l-dvb: (98 commits)
      V4L/DVB (8881): gspca: After 'while (retry--) {...}', retry will be -1 but not 0.
      V4L/DVB (8880): PATCH: Fix parents on some webcam drivers
      V4L/DVB (8877): b2c2 and bt8xx: udelay to mdelay
      V4L/DVB (8876): budget: udelay changed to mdelay
      V4L/DVB (8874): gspca: Adjust hstart for sn9c103/ov7630 and update usb-id's.
      V4L/DVB (8873): gspca: Bad image offset with rev012a of spca561 and adjust exposure.
      V4L/DVB (8872): gspca: Bad image format and offset with rev072a of spca561.
      V4L/DVB (8870): gspca: Fix dark room problem with sonixb.
      V4L/DVB (8869): gspca: Move the Sonix webcams with TAS5110C1B from sn9c102 to gspca.
      V4L/DVB (8868): gspca: Support for vga modes with sif sensors in sonixb.
      V4L/DVB (8844): dabusb_fpga_download(): fix a memory leak
      V4L/DVB (8843): tda10048_firmware_upload(): fix a memory leak
      V4L/DVB (8842): vivi_release(): fix use-after-free
      V4L/DVB (8840): dib0700: add basic support for Hauppauge Nova-TD-500 (84xxx)
      V4L/DVB (8839): dib0700: add comment to identify 35th USB id pair
      V4L/DVB (8837): dvb: fix I2C adapters name size
      V4L/DVB (8835): gspca: Same pixfmt as the sn9c102 driver and raw Bayer added in sonixb.
      V4L/DVB (8834): gspca: Have a bigger buffer for sn9c10x compressed images.
      V4L/DVB (8833): gspca: Cleanup the sonixb code.
      V4L/DVB (8832): gspca: Bad pixelformat of vc0321 webcams.
      ...

commit 54e2a3270f4d5f50aefb08630a3c3c758b9c2723
Merge: 41c9229... 673d62c...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:28:19 2008 -0700

    Merge branch 'core/debugobjects' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip
    
    * 'core/debugobjects' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/linux-2.6-tip:
      debugobjects: fix lockdep warning

commit 41c9229498a2eb89db1c0a77321c61b448738de4
Merge: bf7394c... 5ed4591...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 14:27:12 2008 -0700

    Merge branch 'release-2.6.27' of git://git.kernel.org/pub/scm/linux/kernel/git/ak/linux-acpi-2.6
    
    * 'release-2.6.27' of git://git.kernel.org/pub/scm/linux/kernel/git/ak/linux-acpi-2.6:
      acer-wmi: remove debugfs entries upon unloading
      ACPI: Avoid bogus timeout about SMbus check
      fujitsu-laptop: fix regression for P8010 in 2.6.27-rc
      ACPI: Make Len Brown the ACPI maintainer again
      ACPI: thinkpad-acpi: wan radio control is not experimental
      PNPACPI: ignore the producer/consumer bit for extended IRQ descriptors
      acpi: add checking for NULL early param
      ACPI: Fix typo in "Disable MWAIT via DMI on broken Compal board"
      ACPI: Fix now signed module parameter.
      ACPI: Change package length error to warning
      ACPI: Fix now signed module parameter.

commit 0011036beeffeada15acd1936d67988de21ca65e
Author: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
Date:   Tue Aug 26 22:34:57 2008 +0900

    [MIPS] Probe initrd header only if explicitly specified
    
    Currently init_initrd() probes initrd header at the last page of kernel
    image, but it is valid only if addinitrd was used.  If addinitrd was not
    used, the area contains garbage so probing there might misdetect initrd
    header (magic number is not strictly robust).
    
    This patch introduces CONFIG_PROBE_INITRD_HEADER to explicitly enable this
    probing.
    
    Signed-off-by: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
    Signed-off-by: Ralf Baechle <ralf@linux-mips.org>

commit 3885ec8ca29e5e33e9a5f0ae9dc849d798634ec9
Author: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
Date:   Tue Aug 26 22:30:41 2008 +0900

    [MIPS] TX39xx: Add missing local_flush_icache_range initialization
    
    Commmit 59e39ecd933ba49eb6efe84cbfa5597a6c9ef18a ("Fix WARNING: at
    kernel/smp.c:290") introduced local_flush_icache_range but lacks
    initialization for some TX39 case.
    
    Signed-off-by: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
    Signed-off-by: Ralf Baechle <ralf@linux-mips.org>

commit 073828d078d3e55b23b2b5937a49dc1019c5907d
Author: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
Date:   Tue Aug 26 21:29:58 2008 +0900

    [MIPS] TXx9: Fix txx9_pcode initialization
    
    The txx9_pcode variable was introduced in commit
    fe1c2bc64f65003b39f331a8e4b0d15b235a4afd ("TXx9: Add 64-bit support")
    but was not initialized properly.
    
    Signed-off-by: Atsushi Nemoto <anemo@mba.ocn.ne.jp>
    Signed-off-by: Ralf Baechle <ralf@linux-mips.org>

commit e0cee3eea7875800451739ae38f99edcf11c133d
Author: Thomas Bogendoerfer <tsbogend@alpha.franken.de>
Date:   Mon Aug 4 20:53:57 2008 +0200

    [MIPS] Fix WARNING: at kernel/smp.c:290
    
    trap_init issues flush_icache_range(), which uses ipi functions to
    get icache flushing done on all cpus. But this is done before interrupts
    are enabled and caused WARN_ON messages. This changeset introduces
    a new local_flush_icache_range() and uses it before interrupts (and
    additional CPUs) are enabled to avoid this problem.
    
    Signed-off-by: Thomas Bogendoerfer <tsbogend@alpha.franken.de>
    Signed-off-by: Ralf Baechle <ralf@linux-mips.org>

commit 0510617b85758b6e66f3c602ceccea1826440470
Author: Thomas Bogendoerfer <tsbogend@alpha.franken.de>
Date:   Mon Aug 4 19:44:34 2008 +0200

    [MIPS] Fix data bus error recovery
    
    With -ffunction-section the entries in __dbe_table aren't no longer
    sorted, so the lookup of exception addresses in do_be() failed for
    some addresses. To avoid this we now sort __dbe_table.
    
    Signed-off-by: Thomas Bogendoerfer <tsbogend@alpha.franken.de>
    Signed-off-by: Ralf Baechle <ralf@linux-mips.org>

commit bf7394ccc13fe291d9258f01113b4c61214ddeae
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Sep 5 12:38:09 2008 -0700

    Revert "mac80211: Use IWEVASSOCREQIE instead of IWEVCUSTOM"
    
    This reverts commit 087d833e5a9f67ba933cb32eaf5a2279c1a5b47c, which was
    reported to break wireless at least in some combinations with 32bit user
    space and a 64bit kernel.  Alex Williamnson bisected it to this commit.
    
    Reported-and-bisected-by: Alex Williamson <alex.williamson@hp.com>
    Acked-by: John W. Linville <linville@tuxdriver.com>
    Cc: David Miller <davem@davemloft.net>
    Cc: Jouni Malinen <jouni.malinen@atheros.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 49048622eae698e5c4ae61f7e71200f265ccc529
Author: Balbir Singh <balbir@linux.vnet.ibm.com>
Date:   Fri Sep 5 18:12:23 2008 +0200

    sched: fix process time monotonicity
    
    Spencer reported a problem where utime and stime were going negative despite
    the fixes in commit b27f03d4bdc145a09fb7b0c0e004b29f1ee555fa. The suspected
    reason for the problem is that signal_struct maintains it's own utime and
    stime (of exited tasks), these are not updated using the new task_utime()
    routine, hence sig->utime can go backwards and cause the same problem
    to occur (sig->utime, adds tsk->utime and not task_utime()). This patch
    fixes the problem
    
    TODO: using max(task->prev_utime, derived utime) works for now, but a more
    generic solution is to implement cputime_max() and use the cputime_gt()
    function for comparison.
    
    Reported-by: spencer@bluehost.com
    Signed-off-by: Balbir Singh <balbir@linux.vnet.ibm.com>
    Signed-off-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 56c7426b3951e4f35a71d695f1c982989399d6fd
Author: Peter Zijlstra <a.p.zijlstra@chello.nl>
Date:   Mon Sep 1 16:44:23 2008 +0200

    sched_clock: fix NOHZ interaction
    
    If HLT stops the TSC, we'll fail to account idle time, thereby inflating the
    actual process times. Fix this by re-calibrating the clock against GTOD when
    leaving nohz mode.
    
    Signed-off-by: Peter Zijlstra <a.p.zijlstra@chello.nl>
    Tested-by: Avi Kivity <avi@qumranet.com>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit b35de672e74ceea6482b4f690ad053aec8465c5d
Author: David Woodhouse <David.Woodhouse@intel.com>
Date:   Fri Sep 5 16:01:15 2008 +0100

    Revert "[ARM] use the new byteorder headers"
    
    This reverts commit ae82cbfc8beaa69007aa09966d3983ac938c3577. It
    needs the new byteorder headers to be exported to userspace, and
    they aren't yet -- and probably shouldn't be, at this point in the
    2.6.27 release cycle (or ever, for that matter).
    
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>
    Acked-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit de24125dd0a452bfd4502fc448e3534c5d2e87aa
Author: Yuri Tikhonov <yur@emcraft.com>
Date:   Fri Sep 5 08:15:47 2008 -0700

    async_tx: fix the bug in async_tx_run_dependencies
    
    Should clear the next pointer of the TX if we are sure that the
    next TX (say NXT) will be submitted to the channel too. Overwise,
    we break the chain of descriptors, because we lose the information
    about the next descriptor to run. So next time, when invoke
    async_tx_run_dependencies() with TX, it's TX->next will be NULL, and
    NXT will be never submitted.
    
    Cc: <stable@kernel.org>		[2.6.26]
    Signed-off-by: Yuri Tikhonov <yur@emcraft.com>
    Signed-off-by: Ilya Yanok <yanok@emcraft.com>
    Signed-off-by: Dan Williams <dan.j.williams@intel.com>

commit afbc8d8e72daa5a5faf6a0242186bdfcc42b2427
Author: Khem Raj <raj.khem@gmail.com>
Date:   Thu Sep 4 23:11:01 2008 -0700

    Fix conditional export of kvh.h and a.out.h to userspace.
    
    Some architectures have moved the asm/ into arch/ and some have not.
    This patch checks for a.out.h and kvh.h in both places before exporting
    the corresponding file from linux/
    
    [dwmw2: simplified a little]
    Signed-off-by: Khem Raj <raj.khem@gmail.com>
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

commit 076c7f4c6c55c37975c8e04ae6827267794d5d2e
Author: Dmitry Baryshkov <dbaryshkov@gmail.com>
Date:   Thu Sep 4 13:28:33 2008 +0400

    [MTD] [NAND] tmio_nand: fix base address programming
    
    Fix offset of second word used for programming base address of memory
    window. Also program tmio with offset of the FCR, not with physical
    memory location.
    
    Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
    Cc: Ian Molton <spyro@f2s.com>
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

commit 7cfb0435330364f90f274a26ecdc5f47f738498c
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Wed Sep 3 21:37:24 2008 +0000

    HPET: make minimum reprogramming delta useful
    
    The minimum reprogramming delta was hardcoded in HPET ticks,
    which is stupid as it does not work with faster running HPETs.
    The C1E idle patches made this prominent on AMD/RS690 chipsets,
    where the HPET runs with 25MHz. Set it to 5us which seems to be
    a reasonable value and fixes the problems on the bug reporters
    machines. We have a further sanity check now in the clock events,
    which increases the delta when it is not sufficient.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Tested-by: Luiz Fernando N. Capitulino <lcapitulino@mandriva.com.br>
    Tested-by: Dmitry Nezhevenko <dion@inhex.net>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 1fb9b7d29d8e85ba3196eaa7ab871bf76fc98d36
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Wed Sep 3 21:37:14 2008 +0000

    clockevents: prevent endless loop lockup
    
    The C1E/HPET bug reports on AMDX2/RS690 systems where tracked down to a
    too small value of the HPET minumum delta for programming an event.
    
    The clockevents code needs to enforce an interrupt event on the clock event
    device in some cases. The enforcement code was stupid and naive, as it just
    added the minimum delta to the current time and tried to reprogram the device.
    When the minimum delta is too small, then this loops forever.
    
    Add a sanity check. Allow reprogramming to fail 3 times, then print a warning
    and double the minimum delta value to make sure, that this does not happen again.
    Use the same function for both tick-oneshot and tick-broadcast code.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 9c17bcda991000351cb2373f78be7e4b1c44caa3
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Wed Sep 3 21:37:08 2008 +0000

    clockevents: prevent multiple init/shutdown
    
    While chasing the C1E/HPET bugreports I went through the clock events
    code inch by inch and found that the broadcast device can be initialized
    and shutdown multiple times. Multiple shutdowns are not critical, but
    useless waste of time. Multiple initializations are simply broken. Another
    CPU might have the device in use already after the first initialization and
    the second init could just render it unusable again.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 7205656ab48da29a95d7f55e43a81db755d3cb3a
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Wed Sep 3 21:37:03 2008 +0000

    clockevents: enforce reprogram in oneshot setup
    
    In tick_oneshot_setup we program the device to the given next_event,
    but we do not check the return value. We need to make sure that the
    device is programmed enforced so the interrupt handler engine starts
    working. Split out the reprogramming function from tick_program_event()
    and call it with the device, which was handed in to tick_setup_oneshot().
    Set the force argument, so the devices is firing an interrupt.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit d4496b39559c6d43f83e4c08b899984f8b8089b5
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Wed Sep 3 21:36:57 2008 +0000

    clockevents: prevent endless loop in periodic broadcast handler
    
    The reprogramming of the periodic broadcast handler was broken,
    when the first programming returned -ETIME. The clockevents code
    stores the new expiry value in the clock events device next_event field
    only when the programming time has not been elapsed yet. The loop in
    question calculates the new expiry value from the next_event value
    and therefor never increases.
    
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 7c1e76897492d92b6a1c2d6892494d39ded9680c
Author: Venkatesh Pallipadi <venkatesh.pallipadi@intel.com>
Date:   Wed Sep 3 21:36:50 2008 +0000

    clockevents: prevent clockevent event_handler ending up handler_noop
    
    There is a ordering related problem with clockevents code, due to which
    clockevents_register_device() called after tickless/highres switch
    will not work. The new clockevent ends up with clockevents_handle_noop as
    event handler, resulting in no timer activity.
    
    The problematic path seems to be
    
    * old device already has hrtimer_interrupt as the event_handler
    * new clockevent device registers with a higher rating
    * tick_check_new_device() is called
      * clockevents_exchange_device() gets called
        * old->event_handler is set to clockevents_handle_noop
      * tick_setup_device() is called for the new device
        * which sets new->event_handler using the old->event_handler which is noop.
    
    Change the ordering so that new device inherits the proper handler.
    
    This does not have any issue in normal case as most likely all the clockevent
    devices are setup before the highres switch. But, can potentially be affecting
    some corner case where HPET force detect happens after the highres switch.
    This was a problem with HPET in MSI mode code that we have been experimenting
    with.
    
    Signed-off-by: Venkatesh Pallipadi <venkatesh.pallipadi@intel.com>
    Signed-off-by: Shaohua Li <shaohua.li@intel.com>
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 4eb00c9f92202a759aadbce73ea4a947b639b5e6
Author: Magnus Damm <damm@igel.co.jp>
Date:   Wed Aug 27 18:33:56 2008 +0900

    i2c: fix i2c-sh_mobile timing issues
    
    This patch teaches the i2c-sh_mobile driver to make use of wait irqs.
    Without this patch only dte irqs are used which may lead to overruns
    and cases of missing stop and extra bytes being read on the i2c bus.
    
    Use of wait irqs forces the hardware to pause and wait until the cpu
    is ready. Polling is also reworked in this patch to fix ms delay issues.
    
    Verified with bus analyzer and tested on MigoR and AP325RXA boards.
    
    Signed-off-by: Magnus Damm <damm@igel.co.jp>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit dbce1f649e3d22aa7ddc0fdbfa6a7470047b61bd
Author: Paul Mundt <lethal@linux-sh.org>
Date:   Fri Sep 5 14:51:28 2008 +0900

    sh64: resume_kernel fix for kernel oops built with CONFIG_BKL_PREEMPT=y.
    
    Follows the SH change.
    
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit 323b8c410a2453f15578c22b0eef50456359bbfc
Author: Carmelo Amoroso <carmelo.amoroso@st.com>
Date:   Fri Sep 5 14:42:16 2008 +0900

    sh: resume_kernel fix for kernel oops built with CONFIG_BKL_PREEMPT=y.
    
    This patch fixes a problem within the SH implementation of resume_kernel code,
    that implements in assembly the bulk of preempt_schedule_irq function without
    taking care of the extra code needed to handle the BKL preemptible.
    
    The patch basically consists of removing this asm code and calling the common
    C implementation (see kernel/sched.c) as other archs do.
    
    Another change is the missing 'cli' macro invocation at the beginning of
    the resume_kernel.
    
    Signed-off-by: Giuseppe Cavallaro <peppe.cavallaro@st.com>
    Signed-off-by: Carmelo Amoroso <carmelo.amoroso@st.com>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit 9ce1ca284a322ba6f9d691136a29c9cfe381e1fc
Author: Jiri Kosina <jkosina@suse.cz>
Date:   Thu Sep 4 22:28:48 2008 -0400

    Input: i8042 - make Lenovo 3000 N100 blacklist entry more specific
    
    Apparently, there are more different versions of Lenovo 3000 N100, some
    of them working properly with active mux, and some of them requiring it
    being switched off.
    
    This patch applies 'nomux' only to the specific product name that is
    reported to behave badly unless 'nomux' is specified.
    
    Signed-off-by: Jiri Kosina <jkosina@suse.cz>
    Signed-off-by: Dmitry Torokhov <dtor@mail.ru>

commit a6821f345fd508b17f5ce310b677b37aefb028dc
Author: Henrik Rydberg <rydberg@euromail.se>
Date:   Thu Sep 4 22:28:31 2008 -0400

    Input: bcm5974 - add BTN_TOUCH event for mousedev benefit
    
    The mousedev driver requires the use of BTN_TOUCH events to process
    ABS_X and ABS_Y events properly, which is what is needed for the
    bcm5974-based apple computers to have a functional pointer out-of-the-box.
    
    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
    Signed-off-by: Dmitry Torokhov <dtor@mail.ru>

commit 75e21e3f3bb2b4a41bb0646a4d54eef27eb36ca5
Author: Henrik Rydberg <rydberg@euromail.se>
Date:   Thu Sep 4 22:28:23 2008 -0400

    Input: bcm5974 - improve finger tracking and counting
    
    The problem of finger tracking, i.e., when to switch focus from one
    finger to another on the trackpad, has been improved by utilizing more
    information from the bcm5974 chip output. This results in less pointer
    hopping when many fingers are on the trackpad. In addition, a finger
    counting method based on pressure information from all fingers is
    introduced. Together with a pressure hysteresis window, this yields a
    more stable counting of the number of fingers on the trackpad.
    
    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
    Signed-off-by: Dmitry Torokhov <dtor@mail.ru>

commit 158e0fb6028a2329425d8287b1b2402a12ed4f28
Author: Henrik Rydberg <rydberg@euromail.se>
Date:   Thu Sep 4 22:20:10 2008 -0400

    Input: bcm5974 - small formatting cleanup
    
    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
    Signed-off-by: Dmitry Torokhov <dtor@mail.ru>

commit b65fe0356b5b732d7e1e0224c6a1cf2eb5255984
Author: Jeremy Kerr <jk@ozlabs.org>
Date:   Thu Sep 4 15:02:47 2008 +1000

    powerpc/spufs: Fix race for a free SPU
    
    We currently have a race for a free SPE. With one thread doing a
    spu_yield(), and another doing a spu_activate():
    
    thread 1				thread 2
    spu_yield(oldctx)			spu_activate(ctx)
      __spu_deactivate(oldctx)
      spu_unschedule(oldctx, spu)
      spu->alloc_state = SPU_FREE
    					spu = spu_get_idle(ctx)
    					    - searches for a SPE in
    					      state SPU_FREE, gets
    					      the context just
    					      freed by thread 1
    					spu_schedule(ctx, spu)
    					  spu->alloc_state = SPU_USED
    spu_schedule(newctx, spu)
      - assumes spu is still free
      - tries to schedule context on
        already-used spu
    
    This change introduces a 'free_spu' flag to spu_unschedule, to indicate
    whether or not the function should free the spu after descheduling the
    context. We only set this flag if we're not going to re-schedule
    another context on this SPU.
    
    Add a comment to document this behaviour.
    
    Signed-off-by: Jeremy Kerr <jk@ozlabs.org>

commit 9f43e3914dceb0f8191875b3cdf4325b48d0d70a
Author: Jeremy Kerr <jk@ozlabs.org>
Date:   Tue Sep 2 11:57:09 2008 +1000

    powerpc/spufs: Fix multiple get_spu_context()
    
    Commit 8d5636fbca202f61fdb808fc9e20c0142291d802 introduced a reference
    count on SPU contexts during find_victim, but this may cause a leak in
    the reference count if we later find a better contender for a context to
    unschedule.
    
    Change the reference to after we've found our victim context, so we
    don't do the extra get_spu_context().
    
    Signed-off-by: Jeremy Kerr <jk@ozlabs.org>

commit 8561098ff11d21f1a6a9a01fae2e68653928dbb5
Author: Li Zefan <lizf@cn.fujitsu.com>
Date:   Tue Sep 2 07:02:50 2008 -0300

    V4L/DVB (8881): gspca: After 'while (retry--) {...}', retry will be -1 but not 0.
    
    Signed-off-by: Li Zefan <lizf@cn.fujitsu.com>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 748c7f80acc266a54ade4d6863229402fd3cd363
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Mon Sep 1 15:28:23 2008 -0300

    V4L/DVB (8880): PATCH: Fix parents on some webcam drivers
    
    While doing some testing using Luca Risolia's sonix driver I noticed that
    the video device did not get ACL's set to allow access by locally logged in
    users, nor does it show up as a video device in lshal, causing cheese to not
    see it.
    
    This turns out to be caused by all of Luca Risolia's drivers not setting
    the parent member of the video_device struct. This patch fixes this.
    
    Cc: Luca Risolia <luca.risolia@studio.unibo.it>
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit c4e3fd940c7081a0332e9b4ea6485744075067b0
Author: Thierry MERLE <thierry.merle@free.fr>
Date:   Mon Sep 1 17:32:10 2008 -0300

    V4L/DVB (8877): b2c2 and bt8xx: udelay to mdelay
    
    b2c2-flexcop, dvb/bt8xx and video/bt8xx fails to build on ARM with:
    
    __bad_udelay is specifically designed on ARM to fail when udelay is
    called in a bad way.  arch/arm/include/asm/delay.h has this to say
    about __bad_udelay:
    
    /*
     * This function intentionally does not exist; if you see references to
     * it, it means that you're calling udelay() with an out of range value.
     *
     * With currently imposed limits, this means that we support a max delay
     * of 2000us. Further limits: HZ<=1000 and bogomips<=3355
     */
    extern void __bad_udelay(void);
    
    Solution is to replace udelay by a mdelay and udelay with value less than 2000
    
    Signed-off-by: Thierry MERLE <thierry.merle@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit db210426d48998ed412f267b28cf6e62ea0496a8
Author: Thierry MERLE <thierry.merle@free.fr>
Date:   Mon Sep 1 17:28:57 2008 -0300

    V4L/DVB (8876): budget: udelay changed to mdelay
    
    budget.ko fails to build on ARM with:
    
    ERROR: "__bad_udelay" [drivers/media/dvb/ttpci/budget.ko] undefined!
    make[1]: *** [__modpost] Error 1
    
    __bad_udelay is specifically designed on ARM to fail when udelay is
    called in a bad way.  arch/arm/include/asm/delay.h has this to say
    about __bad_udelay:
    
    /*
     * This function intentionally does not exist; if you see references to
     * it, it means that you're calling udelay() with an out of range value.
     *
     * With currently imposed limits, this means that we support a max delay
     * of 2000us. Further limits: HZ<=1000 and bogomips<=3355
     */
    extern void __bad_udelay(void);
    
    Solution is to replace udelay by a mdelay and udelay with value less than 2000
    
    Acked-by: Oliver Endriss <o.endriss@gmx.de>
    Signed-off-by: Thierry MERLE <thierry.merle@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 65846909d684d75906269df4f5f3474e1fef568b
Author: Russell King <rmk@dyn-67.arm.linux.org.uk>
Date:   Wed Sep 3 23:46:18 2008 +0100

    [ARM] omap: fix virtual vs physical address space confusions
    
    mcbsp is confused as to what takes a physical or virtual address.
    Fix the two instances where it gets it wrong.
    
    Acked-by: Tony Lindgren <tony@atomide.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit db0a2901a32c44510d7d429358d017143a649a70
Merge: d210baf... 4cce165...
Author: Mauro Carvalho Chehab <mchehab@redhat.com>
Date:   Thu Sep 4 16:24:02 2008 -0300

    Merge branch 'fixes_stg' of ../git_old into fixes

commit 4cce1655b26a4df1e619b2aa3d2eea1b7a6e906c
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Thu Sep 4 16:22:57 2008 -0300

    V4L/DVB (8874): gspca: Adjust hstart for sn9c103/ov7630 and update usb-id's.
    
    - Adjust hstart in ov7630 on sn9c103 initdata to shift bayer pattern, this is
     the same change as done for the other initdata tables in a previous patch.
    - Assign usb-id's for the ov7630 + sn9c103 to gspca if gspca and sn9c102
      drivers are both enabled.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 0fc23d20699a6a3b7e34b3be2cc5e60317ba7849
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Thu Sep 4 16:22:57 2008 -0300

    V4L/DVB (8873): gspca: Bad image offset with rev012a of spca561 and adjust exposure.
    
    -Make raw bayer header size change from 20 to 16 affect rev072a only, my 2
     rev012a cams both have a header size of 20
    -While testing this I also tested the new exposure setting (good work on
     finding the register JF), and after quite a bit of testing have found out the
     exact meaning of the register, this patch modifies setexposure to control
     the exposure over a much wider range.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit b77c0046a63e7aa87152f9978cf7c46e7bead7fc
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Thu Sep 4 16:22:56 2008 -0300

    V4L/DVB (8872): gspca: Bad image format and offset with rev072a of spca561.
    
    - have 2 pixfmt tables
    - offset of Bayer frames at 16 instead of 20.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit bf2a2202f75cda679303f09d150f9549f9835953
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Thu Sep 4 16:22:56 2008 -0300

    V4L/DVB (8870): gspca: Fix dark room problem with sonixb.
    
    When using the sonixb driver in a dark room and given that the autoexposure
    algorithm starts with a setting most suitable for daylight, the picture
    produced by the cam may actually be 100% black leading to a avg_lum value of 0,
    so an avg_lum value of 0 does not always signal an exposure settings change
    (which it normally does). This patch adds a check for the really black image
    case and stops dropping all frames as invalid in this case.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit a94a508691d16420ad10572a33db4d45115b5f75
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Thu Sep 4 16:22:55 2008 -0300

    V4L/DVB (8869): gspca: Move the Sonix webcams with TAS5110C1B from sn9c102 to gspca.
    
    This patch makes gspca claim the USB-ID for sn9c101/2 cams with a TAS5110C1B
    sensor even if both gspca and sn9c102 are enabled, as these cams are much
    better supported under gspca (and extensively tested with gspca).
    It also removes an usb-id from sn9c102 for one more unsupported bridge
    sensor combo.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 9362773624bcde3ccc198fefcf3c584e5058f645
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Thu Sep 4 16:20:12 2008 -0300

    V4L/DVB (8868): gspca: Support for vga modes with sif sensors in sonixb.
    
    - Add documentation for some known registers
    - Add support for vga modes (320x240, 160x120) for sif sensors
    - Remove F_RAW sensor flag raw mode should work on any sensor as its a bridge
       only thing and keeping the flag was becoming awkward.
    - Fixup ov6650 and pas106 auto exposure window settings
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit b380b0d4f7dffcc235c0facefa537d4655619101
Author: Al Viro <viro@ZenIV.linux.org.uk>
Date:   Thu Sep 4 17:05:57 2008 +0100

    forgotten refcount on sysctl root table
    
    We should've set refcount on the root sysctl table; otherwise we'll blow
    up the first time we get down to zero dynamically registered sysctl
    tables.
    
    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>
    Tested-by: James Bottomley <James.Bottomley@HansenPartnership.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 5ed459102d1e914972d65dd4ea9f26073143a4e9
Merge: 4fd2343... 7d964c3...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Thu Sep 4 14:41:02 2008 +0200

    Merge branch 'wmi-fix' into release-2.6.27

commit 7d964c352b06aabb895e39d3b479e105bd9d1ca0
Author: Russ Dill <russ.dill@gmail.com>
Date:   Tue Sep 2 14:35:40 2008 -0700

    acer-wmi: remove debugfs entries upon unloading
    
    The exit function neglects to remove debugfs entries, leading to a BUG
    on reload.
    
    [akpm@linux-foundation.org: cleanups]
    Signed-off-by: Russ Dill <Russ.Dill@gmail.com>
    Acked-by: Carlos Corbacho <carlos@strangeworlds.co.uk>
    Cc: Andi Kleen <ak@linux.intel.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit 4fd23436f1f414fea9a1a6050d4ed6de02cb91e5
Merge: 54cd314... 266feef... d8196a9...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Thu Sep 4 14:33:03 2008 +0200

    Merge branches 'smbus' and 'fujitsu-fix' into release-2.6.27

commit 266feefeb9ea2d846ac82eb6db1a54b230364ba4
Author: Zhao Yakui <yakui.zhao@intel.com>
Date:   Tue Aug 26 13:57:34 2008 +0800

    ACPI: Avoid bogus timeout about SMbus check
    
    In the function of wait_transaction_complete when the timeout happens,
    OS will try to check the status of SMbus again. If the status is what OS
    expected, it will be regarded as the bogus timeout. Otherwise it will be
    treated as ETIME.
    
    http://bugzilla.kernel.org/show_bug.cgi?id=10483
    
    Signed-off-by: Zhao Yakui <yakui.zhao@intel.com>
    tested-by    : Oldřich Jedlička < <oldium.pro@seznam.cz>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit d8196a93b1ce9a5abb410f39f9375912c9e53675
Author: Jonathan Woithe <jwoithe@physics.adelaide.edu.au>
Date:   Fri Aug 29 11:06:21 2008 +0930

    fujitsu-laptop: fix regression for P8010 in 2.6.27-rc
    
    The following patch (based on a patch from Stephen Gildea) fixes a
    regression with the LCD brightness keys on Fujitsu P8010 laptops which was
    observed with the 2.6.27-rc series (basically they stopped working due to
    changes within the fujitsu-laptop and video modules).  Please apply to
    2.6.27-rc and acpi git.
    
    A more complete solution for this laptop will be included in an upcoming
    patch, hopefully for 2.6.28.  In the meantime this restores most
    functionality for P8010 users.
    
    Signed-off-by: Stephen Gildea <stepheng+fujitsu-laptop@gildea.com>
    Signed-off-by: Jonathan Woithe <jwoithe@physics.adelaide.edu.au>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit 54cd3148a149f7413cc25cb832f42cf0dabcee29
Author: Andi Kleen <ak@linux.intel.com>
Date:   Thu Sep 4 13:30:07 2008 +0200

    ACPI: Make Len Brown the ACPI maintainer again
    
    Len is back!
    
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit 8b540fdcb7c445d61955991f071e956ef40a2f17
Author: Huang Weiyi <weiyi.huang@gmail.com>
Date:   Sat Aug 23 13:56:02 2008 +0800

    [ARM] remove unused #include <version.h>
    
    The driver(s) below do not use LINUX_VERSION_CODE nor KERNEL_VERSION.
      arch/arm/plat-mxc/clock.c
    
    This patch removes the said #include <version.h>.
    
    Signed-off-by: Huang Weiyi <weiyi.huang@gmail.com>
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit c3df1a2685004bce97827bdbe7a304734009849b
Author: Russell King <rmk@dyn-67.arm.linux.org.uk>
Date:   Wed Sep 3 23:59:23 2008 +0100

    [ARM] omap: fix build error in ohci-omap.c
    
    drivers/usb/host/ohci-omap.c: In function 'ohci_omap_init':
    drivers/usb/host/ohci-omap.c:228: error: 'start_hnp' undeclared (first use in this function)
    
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit 5f17cfce5776c566d64430f543a289e5cfa4538b
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Thu Sep 4 01:33:59 2008 -0700

    PCI: fix pbus_size_mem() resource alignment for CardBus controllers
    
    Commit 884525655d07fdee9245716b998ecdc45cdd8007 ("PCI: clean up resource
    alignment management") changed the resource handling to mark how a
    resource was aligned on a per-resource basis.
    
    Thus, instead of looking at the resource number to determine whether it
    was a bridge resource or a regular resource (they have different
    alignment rules), we should just ask the resource for its alignment
    directly.
    
    The reason this broke only cardbus resources was that for the other
    types of resources, the old way of deciding alignment actually still
    happened to work.  But CardBus bridge resources had been changed by
    commit 934b7024f0ed29003c95cef447d92737ab86dc4f ("Fix cardbus resource
    allocation") to look more like regular resources than PCI bridge
    resources from an alignment handling standpoint.
    
    Reported-and-tested-by: Andrew Morton <akpm@linux-foundation.org>
    Cc: Ivan Kokshaysky <ink@jurassic.park.msu.ru>
    Cc: Jesse Barnes <jbarnes@virtuousgeek.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit de014d617636d6a6bd5aef3b3d1f7f9a35669057
Author: Alok N Kataria <akataria@vmware.com>
Date:   Wed Sep 3 18:18:01 2008 -0700

    x86: Change warning message in TSC calibration.
    
    When calibration against PIT fails, the warning that we print is misleading.
    In a virtualized environment the VM may get descheduled while calibration
    or, the check in PIT calibration may fail due to other virtualization
    overheads.
    
    The warning message explicitly assumes that calibration failed due to SMI's
    which may not be the case. Change that to something proper.
    
    Signed-off-by: Alok N Kataria <akataria@vmware.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit ce36394269ccd9d1d286d6192ba09fa6894365e9
Author: Tejun Heo <tj@kernel.org>
Date:   Wed Sep 3 16:09:47 2008 +0200

    mmap: fix petty bug in anonymous shared mmap offset handling
    
    Anonymous mappings should ignore offset but shared anonymous mapping
    forgot to clear it and makes the following legit test program trigger
    SIGBUS.
    
     #include <sys/mman.h>
     #include <stdio.h>
     #include <errno.h>
    
     #define PAGE_SIZE	4096
    
     int main(void)
     {
    	 char *p;
    	 int i;
    
    	 p = mmap(NULL, 2 * PAGE_SIZE, PROT_READ|PROT_WRITE,
    		  MAP_SHARED|MAP_ANONYMOUS, -1, PAGE_SIZE);
    	 if (p == MAP_FAILED) {
    		 perror("mmap");
    		 return 1;
    	 }
    
    	 for (i = 0; i < 2; i++) {
    		 printf("page %d\n", i);
    		 p[i * 4096] = i;
    	 }
    	 return 0;
     }
    
    Fix it.
    
    Signed-off-by: Tejun Heo <tj@kernel.org>
    Acked-by: Hugh Dickins <hugh@veritas.com>
    Acked-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit d210baf53b699fc61aa891c177b71d7082d3b957
Merge: 3e25a2d... 8e531af...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Sep 3 17:57:55 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/security-testing-2.6:
      SELinux: memory leak in security_context_to_sid_core

commit 3e25a2d90e7e303168540c5ecb726297940cb172
Merge: 316343e... 7888bc2...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Sep 3 17:36:37 2008 -0700

    Merge branch 'merge' of git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc
    
    * 'merge' of git://git.kernel.org/pub/scm/linux/kernel/git/paulus/powerpc:
      powerpc: Fix for getting CPU number in power_save_ppc32_restore()
      powerpc: Fix build error with 64K pages and !hugetlbfs
      powerpc: Work around gcc's -fno-omit-frame-pointer bug
      powerpc: Make sure _etext is after all kernel text
      powerpc: Only make kernel text pages of linear mapping executable
      powerpc: Fix uninitialised variable in VSX alignment code

commit e6a5652fd156a286faadbf7a4062b5354d4e346e
Author: Chuck Ebbert <cebbert@redhat.com>
Date:   Wed Sep 3 19:33:14 2008 -0400

    x86: add io delay quirk for Presario F700
    
    Manually adding "io_delay=0xed" fixes system lockups in ioapic
    mode on this machine.
    
    System Information
    	Manufacturer: Hewlett-Packard
    	Product Name: Presario F700 (KA695EA#ABF)
    
    Base Board Information
    	Manufacturer: Quanta
    	Product Name: 30D3
    
    Reference:
    https://bugzilla.redhat.com/show_bug.cgi?id=459546
    
    Signed-off-by: Chuck Ebbert <cebbert@redhat.com>
    Signed-off-by: H. Peter Anvin <hpa@zytor.com>

commit 316343e2cfd9a4bb4c70d0e1991e7a74840fe29e
Merge: ec0c15a... fca1287...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Sep 3 16:21:02 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6:
      bnx2x: Accessing un-mapped page
      ath9k: Fix TX control flag use for no ACK and RTS/CTS
      ath9k: Fix TX status reporting
      iwlwifi: fix STATUS_EXIT_PENDING is not set on pci_remove
      iwlwifi: call apm stop on exit
      iwlwifi: fix Tx cmd memory allocation failure handling
      iwlwifi: fix rx_chain computation
      iwlwifi: fix station mimo power save values
      iwlwifi: remove false rxon if rx chain changes
      iwlwifi: fix hidden ssid discovery in passive channels
      iwlwifi: W/A for the TSF correction in IBSS
      netxen: Remove workaround for chipset quirk
      pcnet-cs, axnet_cs: add new IDs, remove dup ID with less info
      ixgbe: initialize interrupt throttle rate
      net/usb/pegasus: avoid hundreds of diagnostics
      tipc: Don't use structure names which easily globally conflict.

commit 8e531af90f3940615623dc0aa6c94866a6773601
Author: Eric Paris <eparis@redhat.com>
Date:   Wed Sep 3 11:49:47 2008 -0400

    SELinux: memory leak in security_context_to_sid_core
    
    Fix a bug and a philosophical decision about who handles errors.
    
    security_context_to_sid_core() was leaking a context in the common case.
    This was causing problems on fedora systems which recently have started
    making extensive use of this function.
    
    In discussion it was decided that if string_to_context_struct() had an
    error it was its own responsibility to clean up any mess it created
    along the way.
    
    Signed-off-by: Eric Paris <eparis@redhat.com>
    Acked-by:  Stephen Smalley <sds@tycho.nsa.gov>
    Signed-off-by: James Morris <jmorris@namei.org>

commit fca1287a3a9246d4facc27a0a455fada18fd1164
Merge: 437cf2f... 0b62afb...
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Sep 3 14:43:30 2008 -0700

    Merge branch 'davem-fixes' of master.kernel.org:/pub/scm/linux/kernel/git/jgarzik/netdev-2.6

commit 437cf2f1c5f05e34510f43e129af29a716b04ce6
Author: Eilon Greenstein <eilong@broadcom.com>
Date:   Wed Sep 3 14:38:00 2008 -0700

    bnx2x: Accessing un-mapped page
    
    The allocated RX buffer size was 64 bytes bigger than the PCI mapped
    size with no good reason. If the packet was actually using the buffer up
    to its limit and if the last 64 bytes of the buffer crossed 4KB boundary
    then an unmapped PCI page was accessed. The fix is to use only one
    parameter for the buffer size - there is no need to differentiate
    between the buffer size and the PCI mapping size since the extra 64
    bytes can actually be used by the FW to align the Ethernet payload to
    64 bytes.
    
    Also updating the driver version and date
    
    Signed-off-by: Eilon Greenstein <eilong@broadcom.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 5d8538c1c6d85a7979c955b34f0e66d03be43da4
Author: Adrian Bunk <bunk@kernel.org>
Date:   Wed Sep 3 17:12:25 2008 -0300

    V4L/DVB (8844): dabusb_fpga_download(): fix a memory leak
    
    This patch fixes a memory leak in an error path.
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 877b5f4eda501ece641adbbea5d1940cbbfd4f38
Author: Adrian Bunk <bunk@kernel.org>
Date:   Wed Sep 3 17:12:25 2008 -0300

    V4L/DVB (8843): tda10048_firmware_upload(): fix a memory leak
    
    This patch fixes a memory leak ("fw" wasn't freed).
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 8da9bae3292ea8aee803e7cda295877c361f0694
Author: Adrian Bunk <bunk@kernel.org>
Date:   Wed Sep 3 17:12:25 2008 -0300

    V4L/DVB (8842): vivi_release(): fix use-after-free
    
    video_device_release() does kfree(), which made the following printk()
    doing a use-after-free.
    
    printk() first and release then.
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 9a0c04a1ee3b4df6a30ae6975e13c558908df400
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 17:12:24 2008 -0300

    V4L/DVB (8840): dib0700: add basic support for Hauppauge Nova-TD-500 (84xxx)
    
    This adds basic support for the Hauppauge Nova-TD-500 84xxx series.
    
    A future patch will allow for one aerial input to supply both tuners.
    
    With the current code, an aerial must be plugged into each antannae input
    in order for both tuners to function.
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit af2a887c9aaca82306e9744d914ac335051ce987
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 17:12:24 2008 -0300

    V4L/DVB (8839): dib0700: add comment to identify 35th USB id pair
    
    This comment helps to make the code more readable.
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 1d434012f23effdc69d58a88229159b57256f6ba
Author: Jean Delvare <khali@linux-fr.org>
Date:   Wed Sep 3 17:12:23 2008 -0300

    V4L/DVB (8837): dvb: fix I2C adapters name size
    
    Some DVB drivers are incorrectly assuming that the size of
    i2c_adapter.name is I2C_NAME_SIZE.  Here's a fix.
    
    Also change strncpy to strlcpy, as the former is error-prone (and was
    indeed incorrectly used.)
    
    Signed-off-by: Jean Delvare <khali@linux-fr.org>
    Acked-by: Uwe Bugla <uwe.bugla@gmx.de>
    Reviewed-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Steven Toth <stoth@hauppauge.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit c437d657c59921b048997d5bc1f5733670112902
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:22 2008 -0300

    V4L/DVB (8835): gspca: Same pixfmt as the sn9c102 driver and raw Bayer added in sonixb.
    
    1) Lower the hstart setting for all sensor by 1 so that we generate
       (compressed) BGGR data just like sn9c102 does (instead of GBRG data)
    2) Add support for raw bayer output in the lowest resolutions (not enough
       bandwidth for higher resolutions), this should work with all sensors but
       to be sure only enable it for sensors where it has been tested.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 5c51518da2cabc08af535cf041c6a3697f9e931f
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:22 2008 -0300

    V4L/DVB (8834): gspca: Have a bigger buffer for sn9c10x compressed images.
    
    Under certain conditions sonixb compressed frame size can get bigger then
    the uncompressed size (seen with 0c45:6028), so make the buffers slightly
    bigger.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit f45f06b648bad82430c64a2e1ad67dc616eb54c6
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:21 2008 -0300

    V4L/DVB (8833): gspca: Cleanup the sonixb code.
    
    -the usb-id table caried several flags which were not usb-id specific but
     sensor specific, add a sensor_data array and move these flag there
    -fr_h_sz was being abused to store and check which bridge was being used
     instead add a bridge member to the sd struct
    -now that we have a sensor_data table use that to store pointers to
     init_sequences instead of using switch cases on sd->sensor
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 20122542df420a31532c8e2b5d4107e9846bac6b
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:20 2008 -0300

    V4L/DVB (8832): gspca: Bad pixelformat of vc0321 webcams.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 222a07ffd8e280b1bf4a6f7edab8b6fa27a5455a
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:20 2008 -0300

    V4L/DVB (8831): gspca: Resolve webcam conflicts between some drivers.
    
    -remove USB-id's from zc0301 for cams for which zc0301.c does not support
      the sensor
    -remove USB-id's from sn9c102 for cams where sn9c102 does not support the
      bridge sensor combination
    -no longer make inclusion of usb id's removed from zc0301 and sn9c102
      conditional in gspca
    -fix conditional inclusion of USB-id's in gspca to also work when the
      conflicting drivers are build as a module
    -add a number of USB-id's to gspca from various windows .inf files:
    0c45:608f from generic sonix sn9c103 inf file (+ ov7630 which we support)
    041e:4022 from creative webcam nx pro, same as already supported 041e:401e
    0ac8:0301 from generic zc0301 driver which supports many sensors
    10fd:804d from typhoon webshot driver (also FlyCAM-USB 300 plus)
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 271315a9b4363ed884024022f2cf799344548e8f
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:19 2008 -0300

    V4L/DVB (8830): gspca: Move some probe code to the new init function.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 8295d99ee5340f1e62b53c8adc979e0789299445
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:19 2008 -0300

    V4L/DVB (8829): gspca: Have a clean kmalloc-ated buffer for USB exchanges.
    
    The USB buffer may be used for DMA and there may be a caching problem
    if the buffer is part of the device structure.
    Thanks to Alan Stern.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 91de65ac00f976c972940bedd9dbfe38bb8bfec3
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:18 2008 -0300

    V4L/DVB (8828): gspca: Set the clock at the end of initialization in sonixj.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 038ec7c772cb093411b163c22f389787722cfd8e
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:18 2008 -0300

    V4L/DVB (8827): gspca: Stop pac7302 autogain oscillation.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 086272555d1b7936512de1e6d9efacdf87169cb0
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:17 2008 -0300

    V4L/DVB (8826): gspca: Webcam Labtec 2200 (093a:2626) added in pac7311.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 8a5b2e909d56a1d5edec5e8f8848e03aafbc588e
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:17 2008 -0300

    V4L/DVB (8825): gspca: More controls for pac73xx and new webcam 093a:2624.
    
    -Add usb id for 093a:2624 (pac7302)
    -Report some controls to userspace with 7302 only, as they are 7302 only
    -Add gain and exposure controls
    -Add autogain
    -Fix 7302 imaged being mirrored by default
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit a1e8288b1d80130119692818b46694660f28e03a
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:17 2008 -0300

    V4L/DVB (8824): gspca: Too much code removed in the suspend/resume changeset.
    
    - the stream must stop when the main application closes the device.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit de00448f708a2fd705f9c5ccdfa383dbf3dcef92
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:16 2008 -0300

    V4L/DVB (8823): gspca: H and V flips work for ov7670 only in ov519.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 012d6b029ec17f45374303bbdccd0bc206725751
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:16 2008 -0300

    V4L/DVB (8822): gspca: Change some subdriver functions for suspend/resume.
    
    - new function 'init' called on probe and resume
    - remove the functions 'open' and 'closed'
    - 'stopN' and 'stop0' are optional
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 66e4124f41808b50f6e1b6771621d6c7bf1c34a6
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:16 2008 -0300

    V4L/DVB (8820): gspca: Change initialization and gamma of zc3xx - pas106.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 4202f71ca1e52d73cab14f3695fdef6b6f010a0b
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:15 2008 -0300

    V4L/DVB (8819): gspca: Initialize the ov519 at open time and source cleanup.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 1e89e2da48070da8ac221c37fea8fa82da127c34
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:15 2008 -0300

    V4L/DVB (8818): gspca: Reinitialize the device on resume.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 65f33396ab57f3346fb07ddee8e3aa616d13386c
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:15 2008 -0300

    V4L/DVB (8817): gspca: LED and proble changes in sonixb.
    
    - turn the led of the cam off after plugging in the cam
    - move the probe code from open to config, so that if the probe fails
      we never register
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit e2ad2a54ad1e0f8d7c9e49c38b552a630e015af3
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:15 2008 -0300

    V4L/DVB (8816): gspca: Set disabled ctrls and fix a register pb with ovxxxx in sonixb.
    
    - set some controls as disabled instead of copying the device descr.
    - in the ov6650 / 7650 exposure code clamp reg 11 before (instead of after)
      using it to calculate reg 10.
    - disable brightness (instead of ignoring it) for the TAS5110.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 0f523c2ff6b5ab3b4412cf56dee77ac57be24103
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:14 2008 -0300

    V4L/DVB (8815): gspca: Fix problems with disabled controls.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit f50ba1bed3cfd65d6899afc4cb77299ee5c297ae
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:14 2008 -0300

    V4L/DVB (8814): gspca: Set DISABLED the disabled controls at query control time.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 221e7dbe55fe515ff786142bac64b507fa9f26de
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:14 2008 -0300

    V4L/DVB (8813): gspca: Adjust SOF detection for pac73xx.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 327c4abf74a4426676df6c359b2a3dea2a5d126e
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:14 2008 -0300

    V4L/DVB (8812): gspca: Do pac73xx webcams work.
    
    - documentation for some registers
    - some preparations for adding autogain_n_exposure functionality
    - various pac7311 fixes
    - disable brightness and colors controls for 7311
    - fix contrast control for 7311
    - add hflip and vflip controls for 7311
    - minimal jpeg header
    - proper SOF detection
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 62ee8eeebd1bf6c29977800ac18dfcecf584d42e
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 17:12:13 2008 -0300

    V4L/DVB (8810): gspca: Compile error when CONFIG_PM not defined.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit d6db35e89c420d867e9ffdf145ecf2cb1b91291b
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 17:12:13 2008 -0300

    V4L/DVB (8809): gspca: Revert commit 9a9335776548d01525141c6e8f0c12e86bbde982
    
    the previous patch (sensor upside down).
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 6d8976164dd7d10d25fe940b8546265f60ad52cd
Author: Steven Toth <stoth@hauppauge.com>
Date:   Wed Sep 3 17:12:12 2008 -0300

    V4L/DVB (8805): Steven Toth email address change
    
    I need this so I can better isolate my linux email from my
    corporate email.
    
    Signed-off-by: Steven Toth <stoth@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 5ca947a999c5ea5147cce3e42a9d790d3b87a246
Author: Steven Toth <stoth@hauppauge.com>
Date:   Wed Sep 3 17:12:12 2008 -0300

    V4L/DVB (8804): s5h1411: Enable QAM_AUTO mode
    
    If apps pass QAM_AUTO then we need to obey it.
    
    Signed-off-by: Steven Toth <stoth@hauppauge.com>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 4fc85c74b431ba6e9a8e295e090cd532667b984d
Author: Steven Toth <stoth@hauppauge.com>
Date:   Wed Sep 3 17:12:12 2008 -0300

    V4L/DVB (8803): s5h1409: Enable QAM_AUTO mode
    
    If apps pass QAM_AUTO then we need to obey it.
    
    Signed-off-by: Steven Toth <stoth@hauppauge.com>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit c5bf204f42423f49d7ea34f14eef92780204e168
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Wed Sep 3 17:12:09 2008 -0300

    V4L/DVB (8790): saa7115: call i2c_set_clientdata only when state != NULL
    
    Not a bug as such, but it looks really strange doing this before
    checking whether the state structure could be allocated.
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit dc60de338f4b2d445a24d4e36bbc994f3badb406
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Wed Sep 3 17:11:58 2008 -0300

    V4L/DVB (8779): v4l: fix more incorrect video_register_device result checks
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit cba99ae81901fe61ac4b0d65c697474af29dc4ea
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Wed Sep 3 17:11:58 2008 -0300

    V4L/DVB (8778): radio: fix incorrect video_register_device result check
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 6c9de52884aeafb05a935467c3a2c05a2d445ab7
Author: Andy Walls <awalls@radix.net>
Date:   Wed Sep 3 17:11:54 2008 -0300

    V4L/DVB (8769): cx18: Simplify queue flush logic to prevent oops in cx18_flush_queues()
    
    cx18: Simplify queue flush logic to prevent oops in cx18_flush_queues().
    If accounting of a queue is in error, logic borrowed from ivtv will cause
    an oops when flushing the queues for a stream.  This change greatly
    simplifies the queue flush logic, and sets the queue back to sane
    defaults on a flush.
    
    Signed-off-by: Andy Walls <awalls@radix.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit c6eb8eafdba4ad18b4520a0d28a38bc9e61883ea
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Wed Sep 3 17:11:54 2008 -0300

    V4L/DVB (8757): v4l-dvb: fix a bunch of sparse warnings
    
    Fixed a lot of sparse warnings: mostly warnings about shadowed variables
    and signed/unsigned mismatches.
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 980d4f17345fe420fda2a84cd4a28d5d41d73cef
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Wed Sep 3 17:11:53 2008 -0300

    V4L/DVB (8751): vivi: Fix some issues at vivi register routine
    
    This patch fixes several small issues at vivi register routines:
    
    1) minor and n_devs should be unsigned;
    2) n_devs = 0 were not properly handled;
    3) if n_devs specify a high number, the driver would just roll back and
    won't register any device. The proper behaviour is to keep all succeded
    devices registered;
    4) both n_devs and minor were using 0 as permissions. Better to have
    them with 0444.
    
    With the current patch, if n_devs specify a very large value, it will
    register all possible devices. For example, on a machine without any
    other V4L drivers loaded, with this patch, we will have something like:
    
    vivi: V4L2 device registered as /dev/video0
    vivi: V4L2 device registered as /dev/video1
    vivi: V4L2 device registered as /dev/video2
    	...
    vivi: V4L2 device registered as /dev/video31
    video_register_device_index: get_index failed
    Video Technology Magazine Virtual Video Capture Board ver 0.5.0 successfully loaded.
    
    5) The number of allocated devices on success is now kept at n_devs:
    
    $ cat /sys/module/vivi/parameters/n_devs
    32
    
    Thanks to Henne <henne@nachtwindheim.de> for pointing that there were
    some issues at vivi.
    
    Cc: Henne <henne@nachtwindheim.de>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit f3b9f50ef771670b5d94c568241d6766691c6c18
Author: Henrik Kretzschmar <henne@nachtwindheim.de>
Date:   Wed Sep 3 17:11:53 2008 -0300

    V4L/DVB (8750): V4L: check inval in video_register_device_index()
    
    Better check the video_device pointer before using it.
    
    Signed-off-by: Henrik Kretzschmar <henne@nachtwindheim.de>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 5b5aff83a549c8f1e425e06d46ec951eae950b37
Author: Mauro Carvalho Chehab <mchehab@infradead.org>
Date:   Wed Sep 3 17:11:52 2008 -0300

    V4L/DVB (8749): Fix error code, when camera is not turned on by sonypi
    
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 4ce0b659689a97bc356e96aeac813cad2d137339
Author: Rene Herman <rene.herman@keyaccess.nl>
Date:   Wed Sep 3 16:48:23 2008 -0300

    V4L/DVB (8728): 1-make-pms-not-autoprobe-when-builtin update
    
    On 10-08-08 23:37, Alan Cox wrote:
    >
    > Would probably make the printk "pms: not enabled, use pms.enable=1 to
    > probe"
    >
    > So you know
    > a) What is wittering about not being probed
    > b) How to undo it.
    >
    > But thats trivia really.
    
    Signed-off-by: Rene Herman <rene.herman@gmail.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit b54ff9398ac7d38a129167b580383943592b6f08
Author: Rene Herman <rene.herman@keyaccess.nl>
Date:   Wed Sep 3 16:48:21 2008 -0300

    V4L/DVB (8727): V4L1: make PMS not autoprobe when builtin.
    
    The old Mediavision Pro Movie Studio legacy ISA V4L1 driver was found to
    hang the boot during Ingo Molnar's testing of randconfig kernels.  Have it
    require a "pms.enable=1" kernel parameter to enable the driver when
    builtin which avoids such problems.
    
    This is a deprecated and, very likely, unused driver.  Nothing changes
    modular behaviour moreover.
    
    Signed-off-by: Rene Herman <rene.herman@gmail.com>
    Acked-by: Alan Cox <alan@redhat.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit f46466e7d6ff4871e5faae32d277175293a34c1f
Author: Simon Arlott <simon@fire.lp0.eu>
Date:   Wed Sep 3 16:48:20 2008 -0300

    V4L/DVB (8726): link tuner before saa7134
    
    If saa7134_init is run before v4l2_i2c_drv_init (tuner), then
    saa7134_board_init2 will try to set the tuner type for devices that don't
    exist yet.  This moves tuner to before all of the device-specific drivers
    so that it's loaded early enough on boot.
    
    Signed-off-by: Simon Arlott <simon@fire.lp0.eu>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 09a29b771535e0b8cef66946fdaeb43b0e545570
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 16:48:17 2008 -0300

    V4L/DVB (8722): sms1xxx: fix typo in license header
    
    This should have read, "GNU General Public License version 2"
    rather than, "GNU General Public License version 3"
    
    This was actually a typo mass-blunder -- this is not a change in licence,
    as the code was always GPLv2.
    
    Signed-off-by: Uri Shkolnik <uris@siano-ms.com>
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 89a44b8a690ff2d8639b72931d9c197a8db0c803
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 16:48:16 2008 -0300

    V4L/DVB (8720): gspca: V4L2_CAP_SENSOR_UPSIDE_DOWN added as a cap for some webcams.
    
    This patch adds a V4L2_CAP_SENSOR_UPSIDE_DOWN flag to the capabilities flags,
    and sets this flag for the Philips SPC200NC cam (which has its sensor installed
    upside down). The same flag is also needed and added for the Philips SPC300NC.
    
    Together with a patch to libv4l which adds flipping the image in software this
    fixes the upside down display with the SPC200NC cam.
    
    Signed-of-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit f9b4a377dc6601a3299171c7b24c2c5189c0c10b
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:14 2008 -0300

    V4L/DVB (8719): gspca: Have VIDIOC_QUERYCTRL more compliant to the spec.
    
    - return -EINVAL when control not supported.
    - start the private controls at V4L2_CID_PRIVATE_BASE.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 6a709749228c5f76f128c69c16f39a52d639bd96
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:10 2008 -0300

    V4L/DVB (8718): gspca: suspend/resume added.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 5d05294ac8f6b5d592ee3379fbddd0fb9d1b4c87
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:09 2008 -0300

    V4L/DVB (8717): gspca: Frame buffer too small for small resolutions (sonixj and t613).
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 5b064da80831500a6ac6ea501d2d0cb5e8323cc7
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:08 2008 -0300

    V4L/DVB (8716): gspca: Bad start of sn9c110 and sensor ov7630.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 142346bf9f2410b32cd219cf3f70a85ac56d5b85
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:07 2008 -0300

    V4L/DVB (8715): gspca: Change the name of some webcam in the gspca doc.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 4f30f6cf6b1baf2d19f6b575c4486ae6dc0c2a00
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:05 2008 -0300

    V4L/DVB (8714): gspca: Bad start of sn9c110 and sensor om6802.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 9c5f70f248ccce6d943904e6da687c6ec062f072
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:04 2008 -0300

    V4L/DVB (8713): gspca: Bad color control again in sonixj.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 759aa3c21ebbab6cc00fc4aebd09b3a7d63715d1
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:03 2008 -0300

    V4L/DVB (8712): gspca: Bad start of sonixj webcams since changeset a8779025e7e8.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 4a18625e88efef2b5a21695edcb2b21d98fdf71b
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:02 2008 -0300

    V4L/DVB (8711): gspca: Bad controls and quantization table of pac7311.
    
    Patch adapted from a gspca v1 patch by Thomas Kaiser.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit d55b83d3c4558d0d118bf20ef3f1fa65b1c75c3d
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:48:01 2008 -0300

    V4L/DVB (8710): gspca: Bad color control in sonixj.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 05b809c702bf297690c63ea78ee117c4dc909028
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:59 2008 -0300

    V4L/DVB (8709): gspca: Fix initialization and controls of sn9x110 - ov7630.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 41b469745f6218efb22bec4e3940b085ffb97216
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:58 2008 -0300

    V4L/DVB (8707): gspca: Colors, hflip and vflip controls added for pac7302.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit dff6d321d421c4c059aea72be70df3a8a200b8a3
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:57 2008 -0300

    V4L/DVB (8706): Make contrast and brightness work for pac7302.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 3a1ea7050345734acc3a33b2b00a611b9b7bf640
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:55 2008 -0300

    V4L/DVB (8705): gspca: Adjust some control limits in spca561.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit d698dc6b0477d3165a7f320b3ce36d1cbd361c94
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:51 2008 -0300

    V4L/DVB (8703): gspca: Do controls work for spca561 revision 12a.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 0058717a1ef0c87deeccbe0a3b17def173fee9a9
Author: Andy Walls <awalls@radix.net>
Date:   Wed Sep 3 16:47:50 2008 -0300

    V4L/DVB (8701): cx18: Add missing lock for when the irq handler manipulates the queues
    
    cx18: Add missing lock for when the irq handler manipulates the queues.  This
    was a potential source of stream queue corruption.  Also changed the name of
    cx18_queue_find_buf() to cx18_queue_get_buf_irq().
    
    Signed-off-by: Andy Walls <awalls@radix.net>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>

commit 46f2c21cfdb1a829a9a23e23562ffa66b007dc48
Author: Henrik Kretzschmar <henne@nachtwindheim.de>
Date:   Wed Sep 3 16:47:39 2008 -0300

    V4L/DVB (8682): V4L: fix return value of register video func
    
    If a wrong device type is used with video_register_device_index() it should
    better return an error number, instead of a constant.
    
    Signed-off-by: Henrik Kretzschmar <henne@nachtwindheim.de>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit b045979d61b235cd9cc8347760fcfb44fc8ecbd6
Author: Alexander Beregalov <a.beregalov@gmail.com>
Date:   Wed Sep 3 16:47:38 2008 -0300

    V4L/DVB (8681): v4l2-ioctl.c: fix warning
    
    drivers/media/video/v4l2-ioctl.c:496: warning: format '%08ld' expects
    type 'long int', but argument 5 has type 'suseconds_t'
    
    Signed-off-by: Alexander Beregalov <a.beregalov@gmail.com>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit c7087f56a42b0aa82b181d9a08a376c4add7a683
Author: Adrian Bunk <bunk@kernel.org>
Date:   Wed Sep 3 16:47:36 2008 -0300

    V4L/DVB (8678): Remove the dead CONFIG_RADIO_MIROPCM20{,_RDS} code
    
    The CONFIG_RADIO_MIROPCM20{,_RDS} code became dead code 1.5 years ago.
    
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit f75c4950bb6e677e89479192b2ecfbec0beab14e
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:35 2008 -0300

    V4L/DVB (8675): gspca: Pixmap PJPG (Pixart 73xx JPEG) added, generated by pac7311.
    
    The JPEG frames generated by the Pixart 73xx have:
    - special markers 'ff ff ff xx' every 1024/512 bytes,
    - unused 8 bits at end of JPEG blocks,
    and then ask for a new pixel format.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 6ab0b174d22b448d66058c9de0114fdfac5b7ccf
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:34 2008 -0300

    V4L/DVB (8674): gspca: Webcam 0c45:612e added in sonixj.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 285a4f6c8e518f03758c7b085bda13bb3795df0a
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:33 2008 -0300

    V4L/DVB (8673): gspca: Bad frame scanning again and bad init in pac7311.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 7879d459f1601be742d0d63930d17cd4aac956fd
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:32 2008 -0300

    V4L/DVB (8672): gspca: Big rewrite of spca561.
    
    Bug register/value inversions in USB exchanges.
    Exposure and gain controls added for rev 12a.
    Separate the functions and controls of the revisions 12a and 72a.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit a0b508c2d7d0de0e46555793e334e35381716825
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:31 2008 -0300

    V4L/DVB (8671): gspca: Remove the unused field 'dev_name' of the device structure.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 6c9d3c59e6fdb8dfadaf7ba38f1d0b64ff066b36
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:30 2008 -0300

    V4L/DVB (8669): gspca: Add white balance control for spca561 rev 012A.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 5bb0f21a46281b021897d2c56d50685c1939b5ee
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:29 2008 -0300

    V4L/DVB (8668): gspca: Conflict GSPCA / ET61X251 for the webcam 102c:6251.
    
    Fix a double handling of 102c:6251 and no handling of 102c:6151
    when both drivers GSPCA and ET61X251.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 3466234229e6535a061f5f63a87bfb12c833d96a
Author: Hans de Goede <j.w.r.degoede@hhs.nl>
Date:   Wed Sep 3 16:47:28 2008 -0300

    V4L/DVB (8667): gspca: Bad probe of Z-Star/Vimicro webcams with pas106 sensor.
    
    This patch moves the detection of the 2wr SIF pas106b sensor to before
    detecting other sensors.
    Patch change by jfm: Check SIF for identified webcams only.
    
    Signed-off-by: Hans de Goede <j.w.r.degoede@hhs.nl>
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 8559e8da31f37e2916195f44bbe79a61008782df
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:27 2008 -0300

    V4L/DVB (8666): gspca: Bad scanning of frames in pac7311.
    
    The previous change in packet scanning did not work,
    Also, autogain was no more treated at interrupt level.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 9d5c1251bfc10a0e864352f45e272331f65b3420
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:26 2008 -0300

    V4L/DVB (8665): gspca: Fix the 640x480 resolution of the webcam 093a:2621.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 49b57dba2f6425e9b42874b4dec2433b335fa69c
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:25 2008 -0300

    V4L/DVB (8664): gspca: The bridge/sensor of the webcam 093a:2621 is a PAC 7302.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit d2d16e9084ee44088974c3312b803d54dd9b46d7
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:23 2008 -0300

    V4L/DVB (8663): gspca: Webcam 0c45:6128 added in sonixj.
    
    Patch adapted from a patch to gspcav1 made by the google microdia group.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 23d9e4776b426d1f8a602e0e8d868154847f0dd4
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:22 2008 -0300

    V4L/DVB (8661): gspca: Bug in the previous changeset about pac7311.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit e52a5574de9d3bb297a26566871eabcbdfab13b5
Author: Jean-Francois Moine <moinejf@free.fr>
Date:   Wed Sep 3 16:47:21 2008 -0300

    V4L/DVB (8660): gspca: Simplify the scan of URB packets in pac7311.
    
    Signed-off-by: Jean-Francois Moine <moinejf@free.fr>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit d526afe06b285006c63ed8f2eba9589f04e3283a
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Wed Sep 3 16:47:14 2008 -0300

    V4L/DVB (8648): ivtv: improve CC support
    
    - change the work-queue to a single threaded high prio workqueue
    - use DMA instead of PIO for the sliced VBI data.
    - remove some incorrect tests
    - increase the internal VBI capture queue size for sliced VBI packets
    - ignore duplicate VBI lines
    
    With these changes it should finally be possible to get reliable closed
    captions.
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit c58dc0beaf70bce4d04ff53b82a7035a255a04e4
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Wed Sep 3 16:46:58 2008 -0300

    V4L/DVB (8633): ivtv: update ivtv version number
    
    Since for 2.6.27 ivtvfb uses DMA for write it is important that
    you can identify which ivtv version supports this and which doesn't.
    Increase the version number so we can tell the difference.
    
    Thanks to Ian Armstrong for pointing this out to me.
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 888fe747b5d134e2f3b5c2d3ecc25e1c6dcad4c3
Author: Hans Verkuil <hverkuil@xs4all.nl>
Date:   Wed Sep 3 16:46:50 2008 -0300

    V4L/DVB (8629): v4l2-ioctl: do not try to handle private V4L1 ioctls
    
    Some drivers (e.g. zoran) have private V4L1 ioctls. Do not try to
    pass them to v4l1_compat_translate because then the driver will
    never see them.
    
    Signed-off-by: Hans Verkuil <hverkuil@xs4all.nl>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit e908b6e34c1b799c830cae5f8e721f80534f9748
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 16:46:43 2008 -0300

    V4L/DVB (8600): au0828: explicitly set 6 MHz IF frequency in hauppauge_hvr950q_config
    
    Explicitly set 6 MHz IF frequency for VSB and QAM in
    hauppauge_hvr950q_config.
    
    The default value is 6 MHz, so this patch doesn't change anything --
    this only improves code readability and may prevent future bugs.
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 3e3e2a8f1f6837a4f29b1416db40c88d846ab066
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 16:46:41 2008 -0300

    V4L/DVB (8599): au8522: remove if frequency settings from vsb/qam modulation tables
    
    Since IF frequency is set after the vsb/qam modulation tables are written,
    remove the redundant register settings from the vsb/qam modulation tables.
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit df76de098de0118cdcf6ec0e60cb4063837f8def
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 16:46:40 2008 -0300

    V4L/DVB (8598): au8522: clean up function au8522_set_if
    
    re-write this function to make it simpler
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 8e8bd229eef385ab420d4fa51c611d4ddc7cb0c8
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 16:46:36 2008 -0300

    V4L/DVB (8556): au0828: add support for Hauppauge Woodbury
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 2e7acd75cba3b7afa4007f20f22a86dbbdb21753
Author: Michael Krufky <mkrufky@linuxtv.org>
Date:   Wed Sep 3 16:46:35 2008 -0300

    V4L/DVB (8555): au8522: add mechanism to configure IF frequency for vsb and qam
    
    Add a mechanism to configure IF frequency for vsb and qam.
    
    Signed-off-by: Michael Krufky <mkrufky@linuxtv.org>
    Signed-off-by: Mauro Carvalho Chehab <mchehab@infradead.org>

commit 56e9c0a6eb4918ae010aa4689e4481ab67986a0c
Merge: 6c00055... 9aab3e3...
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Sep 3 14:32:33 2008 -0700

    Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6

commit 9aab3e3ee6f256a1eaabc275e0748132966f963d
Author: Jouni Malinen <jouni.malinen@atheros.com>
Date:   Mon Aug 11 14:01:51 2008 +0300

    ath9k: Fix TX control flag use for no ACK and RTS/CTS
    
    Signed-off-by: Jouni Malinen <jouni.malinen@atheros.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 43f30ae0a6308fd5b862ee7851feca1fc18c72d0
Author: Jouni Malinen <jouni.malinen@atheros.com>
Date:   Mon Aug 11 14:01:49 2008 +0300

    ath9k: Fix TX status reporting
    
    Signed-off-by: Jouni Malinen <jouni.malinen@atheros.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 0b124c31838bcf0459708aa91ce859582c7d3ca1
Author: Gregory Greenman <gregory.greenman@intel.com>
Date:   Wed Sep 3 11:18:50 2008 +0800

    iwlwifi: fix STATUS_EXIT_PENDING is not set on pci_remove
    
    This patch sets STATUS_EXIT_PENDING on pci_remove. Otherwise
    iwl4965_down may fail to uninitialize the driver.
    
    Signed-off-by: Gregory Greenman <gregory.greenman@intel.com>
    Signed-off-by: Mohamed Abbas <mohamed.abbas@intel.com>
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit d535311ecbba0d692b5f1278b8bcb2581c3482e0
Author: Gregory Greenman <gregory.greenman@intel.com>
Date:   Wed Sep 3 11:18:49 2008 +0800

    iwlwifi: call apm stop on exit
    
    This patch calls apm stop on exit and suspend. Without this patch
    hardware consumes power even after driver is removed or suspended.
    
    Signed-off-by: Gregory Greenman <gregory.greenman@intel.com>
    Signed-off-by: Mohamed Abbas <mohamed.abbas@intel.com>
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 73b7d742519ab4cc1b7a12c7af15187fc0ede8e7
Author: Tomas Winkler <tomas.winkler@intel.com>
Date:   Wed Sep 3 11:18:48 2008 +0800

    iwlwifi: fix Tx cmd memory allocation failure handling
    
    This patch "iwlwifi: do not use GFP_DMA in iwl_tx_queue_init" removes
    GFP_DMA from allocation tx command buffers. GFP_DMA allows allocation
    only for memory under 16M which causes allocation problems
    suspend/resume flows.
    
    Using kmalloc is temporal solution and some consistent/coherent
    allocation schema will be more correct. Since iwlwifi hardware
    supports 64bit address this solution should work on x86 (32 and
    64bit) for now.
    
    This patch fixes memory freeing problem in the previous patch.
    
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Ian Schram <ischram@telenet.be>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 28a6b07a14bd5e63af2c0304306f35c5b963910b
Author: Tomas Winkler <tomas.winkler@intel.com>
Date:   Wed Sep 3 11:18:47 2008 +0800

    iwlwifi: fix rx_chain computation
    
    This patch fixes rx_chain computation. The code that adjusts number of
    rx chains to number supported by HW was missing. Miss configuration
    causes firmware error.  Note: iwlwifi supports HW with up to 3 RX
    chains (2x2, 2x3, 1x2, and 3x3 MIMO). This patch also simplifies the
    whole RX chain computation.
    
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Mohamed Abbas <mohamed.abbas@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 4834c73f055b92f719a23e29e275559fa8c29513
Author: Ron Rindjunsky <ron.rindjunsky@intel.com>
Date:   Wed Sep 3 11:18:46 2008 +0800

    iwlwifi: fix station mimo power save values
    
    This patch fixes the wrong use MIMO power save values. Our TX was
    configured with our MIMO power save values instead of peer's MIMO power
    save values, this may affect connectivity. The peer STA/AP may not sense
    our traffic at all as it doesn't have all RX chains opened.
    
    Signed-off-by: Ron Rindjunsky <ron.rindjunsky@intel.com>
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 545597036caefd4b438731abaca902efe004b1b4
Author: Mohamed Abbas <mohamed.abbas@intel.com>
Date:   Wed Sep 3 11:18:44 2008 +0800

    iwlwifi: remove false rxon if rx chain changes
    
    Rx chain might change during power save transitions but it doesn't
    require sending Full-ROXN command to the firmware. Full-RXON requires
    reconnection to an AP and thus affects user experience. The patch
    avoids the Full-RXON by removing the rx_chain modification check in
    iwl_full_rxon_required function.
    
    Signed-off-by: Mohamed Abbas <mohamed.abbas@intel.com
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 0ffe014a8c548f88694815ae7b25d6e86550917e
Author: Ron Rindjunsky <ron.rindjunsky@intel.com>
Date:   Wed Sep 3 11:18:43 2008 +0800

    iwlwifi: fix hidden ssid discovery in passive channels
    
    This enables sending of direct probes on passive channels, as long as
    traffic was detected on that channel. This enables connectivity to
    hidden/non broadcasting SSIDs APs on passive channels. Note 5000 HW
    declares all 5.2 spectrum as passive.
    
    Signed-off-by: Cahill Ben <ben.m.cahill@intel.com>
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Ron Rindjunsky <ron.rindjunsky@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit b94d8eea44df985ea22b1f51e402b4bbfdd6d793
Author: Assaf Krauss <assaf.krauss@intel.com>
Date:   Wed Sep 3 11:18:42 2008 +0800

    iwlwifi: W/A for the TSF correction in IBSS
    
    This patch is a W/A for the TSF sync issue in IBSS merging. HW is not
    capable to sync TSF (it's constantly little behind). This creates
    constant IBSS merging upon reception of each beacon, adding and removing
    station which in turn creates above 50% packet loss and thus dramatically
    degrade the throughput. The W/A simply stops the driver from declaring it
    has a reliable TSF value and thus eliminates IBSS merging.
    
    Signed-off-by: Assaf Krauss <assaf.krauss@intel.com>
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit ec0c15afb41fd9ad45b53468b60db50170e22346
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Wed Sep 3 07:30:13 2008 -0700

    Split up PIT part of TSC calibration from native_calibrate_tsc
    
    The TSC calibration function is still very complicated, but this makes
    it at least a little bit less so by moving the PIT part out into a
    helper function of its own.
    
    Tested-by: Larry Finger <Larry.Finger@lwfinger.net>
    Signed-of-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 0b62afb432d807482a6808508112d1baf29f3798
Author: Dhananjay Phadke <dhananjay@netxen.com>
Date:   Wed Aug 27 21:57:30 2008 -0700

    netxen: Remove workaround for chipset quirk
    
    Remove chipset-specific quirk workaround; the workaround caused
    unrecoverable DMA lockups when the driver was loaded following a
    PXE boot.
    
    Signed-off-by: Dhananjay Phadke <dhananjay@netxen.com>
    Signed-off-by: Michael Brown <mbrown@fensystems.co.uk>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 2dcc9ff7efc701f76883356bdbaf1134039e5fa5
Author: Komuro <komurojun-mbn@nifty.com>
Date:   Sat Aug 30 12:13:33 2008 +0900

    pcnet-cs, axnet_cs: add new IDs, remove dup ID with less info
    
    pcnet_cs:
        add new ID: "corega Ether PCC-TD".
        remove duplicate ID: "IC-CARD".
    
    axnet_cs:
        add new ID: "IO DATA ETXPCM".
    
    Signed-off-by: Komuro <komurojun-mbn@nifty.com>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 15e79f24b60c4b0bf8019423bda4e03a576b02f2
Author: Andy Gospodarek <andy@greyhouse.net>
Date:   Wed Aug 27 18:04:32 2008 -0700

    ixgbe: initialize interrupt throttle rate
    
    This commit dropped the setting of the default interrupt throttle rate.
    
    commit 021230d40ae0e6508d6c717b6e0d6d81cd77ac25
    Author: Ayyappan Veeraiyan <ayyappan.veeraiyan@intel.com>
    Date:   Mon Mar 3 15:03:45 2008 -0800
    
        ixgbe: Introduce MSI-X queue vector code
    
    The following patch adds it back.  Without this the default value of 0
    causes the performance of this card to be awful.  Restoring these to the
    default values yields much better performance.
    
    This regression has been around since 2.6.25.
    
    Signed-off-by: Andy Gospodarek <andy@greyhouse.net>
    Acked-by: Jesse Brandeburg <jesse.brandeburg@intel.com>
    Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
    CC: stable@kernel.org [2.6.25 and later]
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit e000ea13123a28108cff2d6b9856b414dfdcd1fa
Author: David Brownell <dbrownell@users.sourceforge.net>
Date:   Tue Sep 2 11:34:24 2008 -0700

    net/usb/pegasus: avoid hundreds of diagnostics
    
    Make the "pegasus" driver scream less loudly in the face of
    problems as it initializes, avoiding hundreds of messages:
    
     - ratelimit some key error messages
     - avoid some spurious diagnostics caused by strange codeflow
    
    And fix one instance of goofy indentation.
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Signed-off-by: Jeff Garzik <jgarzik@redhat.com>

commit 7888bc2b4778fda267a6e6422c4497dba865a47a
Author: Kumar Gala <galak@kernel.crashing.org>
Date:   Tue Aug 26 12:08:56 2008 +1000

    powerpc: Fix for getting CPU number in power_save_ppc32_restore()
    
    The calculation to get TI_CPU based off of SPRG3 was just plain wrong,
    meaning that we were getting garbage for the CPU number on 6xx/G3/G4
    based SMP boxes in this code.
    
    Just offset off the stack pointer (to get to thread_info) like all the
    other references to TI_CPU do.
    
    This was pointed out by Chen Gong <G.Chen@freescale.com>
    
    [paulus@samba.org - use rlwinm r12,r11,... instead of
     rlwinm r12,r1,...; tophys()]
    
    Signed-off-by: Kumar Gala <galak@kernel.crashing.org>
    Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 94ee815c05c9387931e549d83312d30009ed86e9
Author: Benjamin Herrenschmidt <benh@kernel.crashing.org>
Date:   Wed Sep 3 13:12:05 2008 +1000

    powerpc: Fix build error with 64K pages and !hugetlbfs
    
    HAVE_ARCH_UNMAPPED_AREA and HAVE_ARCH_UNMAPPED_AREA_TOPDOWN must
    be defined whenever CONFIG_PPC_MM_SLICES is enabled, not just when
    CONFIG_HUGETLB_PAGE is.  They used to be always defined together but
    this is no longer the case since 3a8247cc2c856930f34eafce33f6a039227ee175
    ("powerpc: Only demote individual slices rather than whole process").
    
    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 7563dc64585324f443f5ac107eb6d89ee813a2d2
Author: Tony Breeds <tony@bakeyournoodle.com>
Date:   Tue Sep 2 16:50:38 2008 +1000

    powerpc: Work around gcc's -fno-omit-frame-pointer bug
    
    This bug is causing random crashes
    (http://bugzilla.kernel.org/show_bug.cgi?id=11414).
    
    -fno-omit-frame-pointer is only needed on powerpc when -pg is also
    supplied, and there is a gcc bug that causes incorrect code generation
    on 32-bit powerpc when -fno-omit-frame-pointer is used---it uses stack
    locations below the stack pointer, which is not allowed by the ABI
    because those locations can and sometimes do get corrupted by an
    interrupt.
    
    This ensures that CONFIG_FRAME_POINTER is only selected by ftrace.
    When CONFIG_FTRACE is enabled we also pass -mno-sched-epilog to work
    around the gcc codegen bug.
    
    Patch based on work by:
    	Andreas Schwab <schwab@suse.de>
    	Segher Boessenkool <segher@kernel.crashing.org>
    
    Signed-off-by: Tony Breeds <tony@bakeyournoodle.com>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 303996dace16894710a5291327eeb79afdb8ed12
Author: Stephen Rothwell <sfr@canb.auug.org.au>
Date:   Tue Sep 2 15:04:09 2008 +1000

    powerpc: Make sure _etext is after all kernel text
    
    This makes core_kernel_text() (and therefore kernel_text_address())
    return the correct result.  Currently all the __devinit routines (at
    least) will not be considered to be kernel text.
    
    This is just a quick fix for 2.6.27 - hopefully we will be able to fix
    this better in 2.6.28.
    
    Signed-off-by: Stephen Rothwell <sfr@canb.auug.org.au>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 9e88ba4e45ecad2425c4cc4e0861a26f4e36c6da
Author: Paul Mackerras <paulus@samba.org>
Date:   Sat Aug 30 11:26:27 2008 +1000

    powerpc: Only make kernel text pages of linear mapping executable
    
    Commit bc033b63bbfeb6c4b4eb0a1d083c650e4a0d2af8 ("powerpc/mm: Fix
    attribute confusion with htab_bolt_mapping()") moved the check for
    whether we should make pages of the linear mapping executable from
    htab_bolt_mapping into its callers, including htab_initialize.
    A side-effect of this is that the decision is now made once for
    each contiguous section in the LMB array rather than for each page
    individually.  This can often mean that the whole of the linear
    mapping ends up being executable.
    
    This reverts to the previous behaviour, where individual pages are
    checked for being part of the kernel text or not, by moving the check
    back down into htab_bolt_mapping.
    
    Acked-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 78fbc824ed8225edd80cdc57771d5ca4f7aae95e
Author: Michael Neuling <mikey@neuling.org>
Date:   Thu Aug 28 14:57:39 2008 +1000

    powerpc: Fix uninitialised variable in VSX alignment code
    
    This fixes an uninitialised variable in the VSX alignment code.  It can
    cause warnings from GCC (noticed with gcc-4.1.1).  Gcc is actually
    correct in this instance, and this bug could cause the alignment
    interrupt handler to send a SIGSEGV to the process on a legitimate
    access.
    
    Signed-off-by: Michael Neuling <mikey@neuling.org>
    Signed-off-by: Paul Mackerras <paulus@samba.org>

commit 4d084617fb0d025c42c242362d1f27d337e2d407
Author: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
Date:   Wed Sep 3 02:15:30 2008 -0700

    sparc64: Prevent sparc64 from invoking irq handlers on offline CPUs
    
    Make sparc64 refrain from clearing a given to-be-offlined CPU's bit in the
    cpu_online_mask until it has processed pending irqs.  This change
    prevents other CPUs from being blindsided by an apparently offline CPU
    nevertheless changing globally visible state.
    
    Signed-off-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 69114a47af524badc73de8fc86959941a03f0600
Author: Russell King <rmk@dyn-67.arm.linux.org.uk>
Date:   Wed Sep 3 10:15:26 2008 +0100

    [ARM] omap: fix gpio.c build error
    
    arch/arm/plat-omap/gpio.c: In function '_omap_gpio_init':
    arch/arm/plat-omap/gpio.c:1492: error: 'omap_mpuio_device' undeclared (first use in this function)
    
    Signed-off-by: Russell King <rmk+kernel@arm.linux.org.uk>

commit e5bd1c3fdd06b6c0fa6dfb98ce31cea1820ce4e9
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Sep 3 02:14:39 2008 -0700

    sparc64: Fix IPI call locking.
    
    When I switched sparc64 over to the generic helpers for
    smp_call_function(), I didn't convert the dinky call_lock
    we had.
    
    Use ipi_call_lock() and ipi_call_unlock().
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 6c00055a819ce8a6e2c3af2f65d4ea1a8559c491
Author: David S. Miller <davem@davemloft.net>
Date:   Tue Sep 2 23:38:32 2008 -0700

    tipc: Don't use structure names which easily globally conflict.
    
    Andrew Morton reported a build failure on sparc32, because TIPC
    uses names like "struct node" and there is a like named data
    structure defined in linux/node.h
    
    This just regexp replaces "struct node*" to "struct tipc_node*"
    to avoid this and any future similar problems.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit d26acd92fa990764b72608a68224f46fac377032
Merge: fbb16e2... 37b08e3...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 21:02:14 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6:
      ipsec: Fix deadlock in xfrm_state management.
      ipv: Re-enable IP when MTU > 68
      net/xfrm: Use an IS_ERR test rather than a NULL test
      ath9: Fix ath_rx_flush_tid() for IRQs disabled kernel warning message.
      ath9k: Incorrect key used when group and pairwise ciphers are different.
      rt2x00: Compiler warning unmasked by fix of BUILD_BUG_ON
      mac80211: Fix debugfs union misuse and pointer corruption
      wireless/libertas/if_cs.c: fix memory leaks
      orinoco: Multicast to the specified addresses
      iwlwifi: fix 64bit platform firmware loading
      iwlwifi: fix apm_stop (wrong bit polarity for FLAG_INIT_DONE)
      iwlwifi: workaround interrupt handling no some platforms
      iwlwifi: do not use GFP_DMA in iwl_tx_queue_init
      net/wireless/Kconfig: clarify the description for CONFIG_WIRELESS_EXT_SYSFS
      net: Unbreak userspace usage of linux/mroute.h
      pkt_sched: Fix locking of qdisc_root with qdisc_root_sleeping_lock()
      ipv6: When we droped a packet, we should return NET_RX_DROP instead of 0

commit fbb16e243887332dd5754e48ffe5b963378f3cd2
Author: Thomas Gleixner <tglx@linutronix.de>
Date:   Wed Sep 3 00:54:47 2008 +0200

    [x86] Fix TSC calibration issues
    
    Larry Finger reported at http://lkml.org/lkml/2008/9/1/90:
    An ancient laptop of mine started throwing errors from b43legacy when
    I started using 2.6.27 on it. This has been bisected to commit bfc0f59
    "x86: merge tsc calibration".
    
    The unification of the TSC code adopted mostly the 64bit code, which
    prefers PMTIMER/HPET over the PIT calibration.
    
    Larrys system has an AMD K6 CPU. Such systems are known to have
    PMTIMER incarnations which run at double speed. This results in a
    miscalibration of the TSC by factor 0.5. So the resulting calibrated
    CPU/TSC speed is half of the real CPU speed, which means that the TSC
    based delay loop will run half the time it should run. That might
    explain why the b43legacy driver went berserk.
    
    On the other hand we know about systems, where the PIT based
    calibration results in random crap due to heavy SMI/SMM
    disturbance. On those systems the PMTIMER/HPET based calibration logic
    with SMI detection shows better results.
    
    According to Alok also virtualized systems suffer from the PIT
    calibration method.
    
    The solution is to use a more wreckage aware aproach than the current
    either/or decision.
    
    1) reimplement the retry loop which was dropped from the 32bit code
    during the merge. It repeats the calibration and selects the lowest
    frequency value as this is probably the closest estimate to the real
    frequency
    
    2) Monitor the delta of the TSC values in the delay loop which waits
    for the PIT counter to reach zero. If the maximum value is
    significantly different from the minimum, then we have a pretty safe
    indicator that the loop was disturbed by an SMI.
    
    3) keep the pmtimer/hpet reference as a backup solution for systems
    where the SMI disturbance is a permanent point of failure for PIT
    based calibration
    
    4) do the loop iteration for both methods, record the lowest value and
    decide after all iterations finished.
    
    5) Set a clear preference to PIT based calibration when the result
    makes sense.
    
    The implementation does the reference calibration based on
    HPET/PMTIMER around the delay, which is necessary for the PIT anyway,
    but keeps separate TSC values to ensure the "independency" of the
    resulting calibration values.
    
    Tested on various 32bit/64bit machines including Geode 266Mhz, AMD K6
    (affected machine with a double speed pmtimer which I grabbed out of
    the dump), Pentium class machines and AMD/Intel 64 bit boxen.
    
    Bisected-by:  Larry Finger <Larry.Finger@lwfinger.net>
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Tested-by: Larry Finger <Larry.Finger@lwfinger.net>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 37b08e34a98c664bea86e3fae718ac45a46b7276
Author: David S. Miller <davem@davemloft.net>
Date:   Tue Sep 2 20:14:15 2008 -0700

    ipsec: Fix deadlock in xfrm_state management.
    
    Ever since commit 4c563f7669c10a12354b72b518c2287ffc6ebfb3
    ("[XFRM]: Speed up xfrm_policy and xfrm_state walking") it is
    illegal to call __xfrm_state_destroy (and thus xfrm_state_put())
    with xfrm_state_lock held.  If we do, we'll deadlock since we
    have the lock already and __xfrm_state_destroy() tries to take
    it again.
    
    Fix this by pushing the xfrm_state_put() calls after the lock
    is dropped.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 8b76f46a2db29407fed66cf4aca19d61b3dcb3e1
Author: Andrew Morton <akpm@linux-foundation.org>
Date:   Tue Sep 2 14:36:14 2008 -0700

    drivers/char/random.c: fix a race which can lead to a bogus BUG()
    
    Fix a bug reported by and diagnosed by Aaron Straus.
    
    This is a regression intruduced into 2.6.26 by
    
        commit adc782dae6c4c0f6fb679a48a544cfbcd79ae3dc
        Author: Matt Mackall <mpm@selenic.com>
        Date:   Tue Apr 29 01:03:07 2008 -0700
    
            random: simplify and rename credit_entropy_store
    
    credit_entropy_bits() does:
    
    	spin_lock_irqsave(&r->lock, flags);
    	...
    	if (r->entropy_count > r->poolinfo->POOLBITS)
    		r->entropy_count = r->poolinfo->POOLBITS;
    
    so there is a time window in which this BUG_ON():
    
    static size_t account(struct entropy_store *r, size_t nbytes, int min,
    		      int reserved)
    {
    	unsigned long flags;
    
    	BUG_ON(r->entropy_count > r->poolinfo->POOLBITS);
    
    	/* Hold lock while accounting */
    	spin_lock_irqsave(&r->lock, flags);
    
    can trigger.
    
    We could fix this by moving the assertion inside the lock, but it seems
    safer and saner to revert to the old behaviour wherein
    entropy_store.entropy_count at no time exceeds
    entropy_store.poolinfo->POOLBITS.
    
    Reported-by: Aaron Straus <aaron@merfinllc.com>
    Cc: Matt Mackall <mpm@selenic.com>
    Cc: Theodore Ts'o <tytso@mit.edu>
    Cc: <stable@kernel.org>		[2.6.26.x]
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 9d3593574702ae1899e23a1535da1ac71f928042
Author: John Kacur <jkacur@gmail.com>
Date:   Tue Sep 2 14:36:13 2008 -0700

    pm_qos_requirement might sleep
    
    Make PM_QOS and CPU_IDLE play nicer when run with the RT-Preempt kernel.
    
    The purpose of the patch is to remove the spin_lock around the read in the
    function pm_qos_requirement - since spinlocks can sleep in -rt and this
    function is called from idle.
    
    CPU_IDLE polls the target_value's of some of the pm_qos parameters from
    the idle loop causing sleeping locking warnings.  Changing the
    target_value to an atomic avoids this issue.
    
    Remove the spinlock in pm_qos_requirement by making target_value an atomic
    type.
    
    Signed-off-by: mark gross <mgross@linux.intel.com>
    Signed-off-by: John Kacur <jkacur@gmail.com>
    Cc: Steven Rostedt <rostedt@goodmis.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 74c4633da7994eddcfcd2762a448c6889cc2b5bd
Author: Rafael J. Wysocki <rjw@sisk.pl>
Date:   Tue Sep 2 14:36:11 2008 -0700

    rtc-cmos: wake again from S5
    
    Update rtc-cmos shutdown handling to leave RTC alarms active, resolving
    http://bugzilla.kernel.org/show_bug.cgi?id=11411 on several boards.  There
    are still some systems where the ACPI event handling doesn't cooperate.
    (Possibly related to bugid 11312, reporting the spontaneous disabling of
    RTC events.)
    
    Bug 11411 reported that changes to work around some ACPI event issues
    broke wake-from-S5 handling, as used for DVR applications.  (They like to
    power off, then wake later to record programs.)
    
    [yakui.zhao@intel.com: add shutdown for PNP devices]
    [dbrownell@users.sourceforge.net: update comments]
    Signed-off-by: Rafael J. Wysocki <rjw@sisk.pl>
    Signed-off-by: Zhao Yakui <yakui.zhao@intel.com>
    Signed-off-by: Zhang Rui <rui.zhang@intel.com>
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Cc: Stefan Bauer <stefan.bauer@cs.tu-chemnitz.de>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 8b3a8944a9c0f2a3afc1678798b44f0442924a37
Author: Russ Anderson <rja@sgi.com>
Date:   Tue Sep 2 14:36:09 2008 -0700

    sysfs: document files in /sys/firmware/sgi_uv/
    
    Document files in /sys/firmware/sgi_uv/.
    
    Signed-off-by: Russ Anderson <rja@sgi.com>
    Cc: Jack Steiner <steiner@sgi.com>
    Cc: Ingo Molnar <mingo@elte.hu>
    Cc: Thomas Gleixner <tglx@linutronix.de>
    Acked-by: Greg Kroah-Hartman <gregkh@suse.de>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit bb8fb4e6840ecebdc61f7ebd0653187e7128dde5
Author: Mike Christie <michaelc@cs.wisc.edu>
Date:   Tue Sep 2 14:36:07 2008 -0700

    ibft: fix target info parsing in ibft module
    
    I got this patch through Red Hat's bugzilla from the bug submitter and
    patch creator.  I have just fixed it up so it applies without fuzz to
    upstream kernels.
    
    Original patch and description from Shyam kumar Iyer:
    
    The issue [ibft module not displaying targets with short names] is because
    of an offset calculatation error in the iscsi_ibft.c code.  Due to this
    error directory structure for the target in /sys/firmware/ibft does not
    get created and so the initiator is unable to connect to the target.
    
    Note that this bug surfaced only with an name that had a short section at
    the end.  eg: "iqn.1984-05.com.dell:dell".  It did not surface when the
    iqn's had a longer section at the end.  eg:
    "iqn.2001-04.com.example:storage.disk2.sys1.xyz"
    
    So, the eot_offset was calculated such that an extra 48 bytes i.e.  the
    size of the ibft_header which has already been accounted was subtracted
    twice.
    
    This was not evident with longer iqn names because they would overshoot
    the total ibft length more than 48 bytes and thus would escape the bug.
    
    Signed-off-by: Shyam Kumar Iyer <shyam_iyer@dell.com>
    Signed-off-by: Mike Christie <michaelc@cs.wisc.edu>
    Cc: Konrad Rzeszutek <konrad@virtualiron.com>
    Cc: Peter Jones <pjones@redhat.com>
    Cc: James Bottomley <James.Bottomley@HansenPartnership.com>
    Cc: Greg Kroah-Hartman <gregkh@suse.de>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 73442daf2ea85e2a779396b76b1a39b10188ecb5
Author: Jan Altenberg <jan.altenberg@linutronix.de>
Date:   Tue Sep 2 14:36:05 2008 -0700

    rtc_time_to_tm: fix signed/unsigned arithmetic
    
    commit 945185a69daa457c4c5e46e47f4afad7dcea734f ("rtc: rtc_time_to_tm: use
    unsigned arithmetic") changed the some types in rtc_time_to_tm() to
    unsigned:
    
     void rtc_time_to_tm(unsigned long time, struct rtc_time *tm)
     {
    -       register int days, month, year;
    +       unsigned int days, month, year;
    
    This doesn't work for all cases, because days is checked for < 0 later
    on:
    
    if (days < 0) {
    	year -= 1;
    	days += 365 + LEAP_YEAR(year);
    }
    
    I think the correct fix would be to keep days signed and do an appropriate
    cast later on.
    
    Signed-off-by: Jan Altenberg <jan.altenberg@linutronix.de>
    Cc: Maciej W. Rozycki <macro@linux-mips.org>
    Cc: Alessandro Zummo <a.zummo@towertech.it>
    Cc: David Brownell <david-b@pacbell.net>
    Cc: Dmitri Vorobiev <dmitri.vorobiev@gmail.com>
    Cc: <stable@kernel.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit b4a49b12e879ce79f495cc318c4b33caec6922e8
Author: Krzysztof Helt <krzysztof.h1@wp.pl>
Date:   Tue Sep 2 14:36:04 2008 -0700

    tdfxfb: fix frame buffer name overrun
    
    If there are more then one graphics card handled by the tdfxfb driver the
    name of the frame buffer overruns reserved size.
    
    Signed-off-by: Krzysztof Helt <krzysztof.h1@wp.pl>
    Cc: Geert Uytterhoeven <geert@linux-m68k.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit bf6910c0afb1e416a99ad5b2296e088449fbe481
Author: Krzysztof Helt <krzysztof.h1@wp.pl>
Date:   Tue Sep 2 14:36:03 2008 -0700

    tdfxfb: fix SDRAM memory size detection
    
    Fix memory detection on Voodoo3 cards with SDRAM memory.
    
    Signed-off-by: Krzysztof Helt <krzysztof.h1@wp.pl>
    Cc: Geert Uytterhoeven <geert@linux-m68k.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit a8823aefd142d2a9c4b3661bf8712ccd2da1b220
Author: Matthew Garrett <mjg59@srcf.ucam.org>
Date:   Tue Sep 2 14:36:03 2008 -0700

    hp-wmi: add proper hotkey support
    
    It turns out that event 0x4 merely indcates that a hotkey has been
    pressed, not which one.  A further query is required in order to determine
    the actual keypress.  The following patch adds support for that along with
    the known keycodes.
    
    Signed-off-by: Matthew Garrett <mjg@redhat.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 3f6e2f137c5b83c3c2d48fae971e845c3450cc7c
Author: Matthew Garrett <mjg59@srcf.ucam.org>
Date:   Tue Sep 2 14:36:00 2008 -0700

    hp-wmi: update to match current rfkill semantics
    
    hp-wmi currently changes the RFKill state by altering the struct members
    rather than using the dedicated interface, meaning that update events
    won't be pushed to userspace.  This patch fixes that, along with fixing
    the declared type of the WWAN kill switch.  It also ensures that rfkill
    interfaces are only registered for hardware that exists.
    
    Signed-off-by: Matthew Garrett <mjg@redhat.com>
    Acked-by: Henrique de Moraes Holschuh <hmh@hmh.eng.br>
    Cc: Ivo van Doorn <ivdoorn@gmail.com>
    Cc: Dave Young <hidave.darkstar@gmail.com>
    Cc: Marcel Holtmann <marcel@holtmann.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 61e55d0576d0e7eb4fecaeb25b3618e035de5be1
Author: Nadia Derbey <Nadia.Derbey@bull.net>
Date:   Tue Sep 2 14:35:59 2008 -0700

    ipc: document the new auto_msgmni proc file
    
    Update Documentation/filesystems/proc.txt: it describes the file
    auto_msgmni intoduced to enable/disable msgmni automatic recomputing upon
    memory add/remove (see thread http://lkml.org/lkml/2008/7/4/27).  Also
    added a description for msgmni (this filex is only listed in
    Documentation/sysctl/kernel.txt).
    
    Signed-off-by: Nadia Derbey <Nadia.Derbey@bull.net>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit b954185214c3b562c3fcc651e9ec69d421d76bfa
Author: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
Date:   Tue Sep 2 14:35:58 2008 -0700

    mm: size of quicklists shouldn't be proportional to the number of CPUs
    
    Quicklists store pages for each CPU as caches.  (Each CPU can cache
    node_free_pages/16 pages)
    
    It is used for page table cache.  exit() will increase the cache size,
    while fork() consumes it.
    
    So for example if an apache-style application runs (one parent and many
    child model), one CPU process will fork() while another CPU will process
    the middleware work and exit().
    
    At that time, the CPU on which the parent runs doesn't have page table
    cache at all.  Others (on which children runs) have maximum caches.
    
    	QList_max = (#ofCPUs - 1) x Free / 16
    	=> QList_max / (Free + QList_max) = (#ofCPUs - 1) / (16 + #ofCPUs - 1)
    
    So, How much quicklist memory is used in the maximum case?
    
    This is proposional to # of CPUs because the limit of per cpu quicklist
    cache doesn't see the number of cpus.
    
    Above calculation mean
    
    	 Number of CPUs per node            2    4    8   16
    	 ==============================  ====================
    	 QList_max / (Free + QList_max)   5.8%  16%  30%  48%
    
    Wow! Quicklist can spend about 50% memory at worst case.
    
    My demonstration program is here
    --------------------------------------------------------------------------------
    #define _GNU_SOURCE
    
    #include <stdio.h>
    #include <errno.h>
    #include <stdlib.h>
    #include <string.h>
    #include <sched.h>
    #include <unistd.h>
    #include <sys/mman.h>
    #include <sys/wait.h>
    
    #define BUFFSIZE 512
    
    int max_cpu(void)	/* get max number of logical cpus from /proc/cpuinfo */
    {
      FILE *fd;
      char *ret, buffer[BUFFSIZE];
      int cpu = 1;
    
      fd = fopen("/proc/cpuinfo", "r");
      if (fd == NULL) {
        perror("fopen(/proc/cpuinfo)");
        exit(EXIT_FAILURE);
      }
      while (1) {
        ret = fgets(buffer, BUFFSIZE, fd);
        if (ret == NULL)
          break;
        if (!strncmp(buffer, "processor", 9))
          cpu = atoi(strchr(buffer, ':') + 2);
      }
      fclose(fd);
      return cpu;
    }
    
    void cpu_bind(int cpu)	/* bind current process to one cpu */
    {
      cpu_set_t mask;
      int ret;
    
      CPU_ZERO(&mask);
      CPU_SET(cpu, &mask);
      ret = sched_setaffinity(0, sizeof(mask), &mask);
      if (ret == -1) {
        perror("sched_setaffinity()");
        exit(EXIT_FAILURE);
      }
      sched_yield();	/* not necessary */
    }
    
    #define MMAP_SIZE (10 * 1024 * 1024)	/* 10 MB */
    #define FORK_INTERVAL 1	/* 1 second */
    
    main(int argc, char *argv[])
    {
      int cpu_max, nextcpu;
      long pagesize;
      pid_t pid;
    
      /* set max number of logical cpu */
      if (argc > 1)
        cpu_max = atoi(argv[1]) - 1;
      else
        cpu_max = max_cpu();
    
      /* get the page size */
      pagesize = sysconf(_SC_PAGESIZE);
      if (pagesize == -1) {
        perror("sysconf(_SC_PAGESIZE)");
        exit(EXIT_FAILURE);
      }
    
      /* prepare parent process */
      cpu_bind(0);
      nextcpu = cpu_max;
    
    loop:
    
      /* select destination cpu for child process by round-robin rule */
      if (++nextcpu > cpu_max)
        nextcpu = 1;
    
      pid = fork();
    
      if (pid == 0) { /* child action */
    
        char *p;
        int i;
    
        /* consume page tables */
        p = mmap(0, MMAP_SIZE, PROT_WRITE, MAP_PRIVATE | MAP_ANONYMOUS, 0, 0);
        i = MMAP_SIZE / pagesize;
        while (i-- > 0) {
          *p = 1;
          p += pagesize;
        }
    
        /* move to other cpu */
        cpu_bind(nextcpu);
    /*
        printf("a child moved to cpu%d after mmap().\n", nextcpu);
        fflush(stdout);
     */
    
        /* back page tables to pgtable_quicklist */
        exit(0);
    
      } else if (pid > 0) { /* parent action */
    
        sleep(FORK_INTERVAL);
        waitpid(pid, NULL, WNOHANG);
    
      }
    
      goto loop;
    }
    ----------------------------------------
    
    When above program which does task migration runs, my 8GB box spends
    800MB of memory for quicklist.  This is not memory leak but doesn't seem
    good.
    
    % cat /proc/meminfo
    
    MemTotal:        7701568 kB
    MemFree:         4724672 kB
    (snip)
    Quicklists:       844800 kB
    
    because
    
    - My machine spec is
    	number of numa node: 2
    	number of cpus:      8 (4CPU x2 node)
            total mem:           8GB (4GB x2 node)
            free mem:            about 5GB
    
    - Then, 4.7GB x 16% ~= 880MB.
      So, Quicklist can use 800MB.
    
    So, if following spec machine run that program
    
       CPUs: 64 (8cpu x 8node)
       Mem:  1TB (128GB x8node)
    
    Then, quicklist can waste 300GB (= 1TB x 30%).  It is too large.
    
    So, I don't like cache policies which is proportional to # of cpus.
    
    My patch changes the number of caches
    from:
       per-cpu-cache-amount = memory_on_node / 16
    to
       per-cpu-cache-amount = memory_on_node / 16 / number_of_cpus_on_node.
    
    Signed-off-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Cc: Keiichiro Tokunaga <tokunaga.keiich@jp.fujitsu.com>
    Acked-by: Christoph Lameter <cl@linux-foundation.org>
    Tested-by: David Miller <davem@davemloft.net>
    Acked-by: Mike Travis <travis@sgi.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 4b8561521dbaa3d766b198496b220e984e3bf756
Author: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
Date:   Tue Sep 2 14:35:53 2008 -0700

    mm: show quicklist usage in /proc/meminfo
    
    Quicklists can consume several GB of memory.  We should provide a means of
    monitoring this.
    
    After this patch is applied, /proc/meminfo will output the following:
    
    % cat /proc/meminfo
    
    MemTotal:      7715392 kB
    MemFree:       5401600 kB
    Buffers:         80384 kB
    Cached:         300800 kB
    SwapCached:          0 kB
    Active:         235584 kB
    Inactive:       262656 kB
    SwapTotal:     2031488 kB
    SwapFree:      2031488 kB
    Dirty:            3520 kB
    Writeback:           0 kB
    AnonPages:      117696 kB
    Mapped:          38528 kB
    Slab:          1589952 kB
    SReclaimable:    23104 kB
    SUnreclaim:    1566848 kB
    PageTables:      14656 kB
    NFS_Unstable:        0 kB
    Bounce:              0 kB
    WritebackTmp:        0 kB
    CommitLimit:   5889152 kB
    Committed_AS:   393152 kB
    VmallocTotal: 17592177655808 kB
    VmallocUsed:     29056 kB
    VmallocChunk: 17592177626432 kB
    Quicklists:     130944 kB
    HugePages_Total:     0
    HugePages_Free:      0
    HugePages_Rsvd:      0
    HugePages_Surp:      0
    Hugepagesize:    262144 kB
    
    Signed-off-by: KOSAKI Motohiro <kosaki.motohiro@jp.fujitsu.com>
    Cc: Christoph Lameter <cl@linux-foundation.org>
    Cc: Keiichiro Tokunaga <tokunaga.keiich@jp.fujitsu.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 36fd71d293898a59b14e49da1f6e81c1a58f2035
Author: Li Zefan <lizf@cn.fujitsu.com>
Date:   Tue Sep 2 14:35:52 2008 -0700

    devcgroup: fix race against rmdir()
    
    During the use of a dev_cgroup, we should guarantee the corresponding
    cgroup won't be deleted (i.e.  via rmdir).  This can be done through
    css_get(&dev_cgroup->css), but here we can just get and use the dev_cgroup
    under rcu_read_lock.
    
    And also remove checking NULL dev_cgroup, it won't be NULL since a task
    always belongs to a cgroup.
    
    Signed-off-by: Li Zefan <lizf@cn.fujitsu.com>
    Acked-by: Serge Hallyn <serue@us.ibm.com>
    Cc: Paul Menage <menage@google.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 09a2910e54646f7a334702fbafa7a6129dc072e6
Author: Krzysztof Helt <krzysztof.h1@wp.pl>
Date:   Tue Sep 2 14:35:51 2008 -0700

    cirrusfb: check_par fixes
    
    1. Check if virtual resolution fits into memory.
       Otherwise, Linux hangs during panning.
    2. When selected use all available memory to
        maximize yres_virtual to speed up panning
       (previously also xres_virtual was increased).
    3. Simplify memory restriction calculations.
    
    Signed-off-by: Krzysztof Helt <krzysztof.h1@poczta.fm>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 950bbabb5a804690a0201190de5c22837f72f83f
Author: Oleg Nesterov <oleg@tv-sign.ru>
Date:   Tue Sep 2 14:35:49 2008 -0700

    pid_ns: (BUG 11391) change ->child_reaper when init->group_leader exits
    
    We don't change pid_ns->child_reaper when the main thread of the
    subnamespace init exits.  As Robert Rex <robert.rex@exasol.com> pointed
    out this is wrong.
    
    Yes, the re-parenting itself works correctly, but if the reparented task
    exits it needs ->parent->nsproxy->pid_ns in do_notify_parent(), and if the
    main thread is zombie its ->nsproxy was already cleared by
    exit_task_namespaces().
    
    Introduce the new function, find_new_reaper(), which finds the new
    ->parent for the re-parenting and changes ->child_reaper if needed.  Kill
    the now unneeded exit_child_reaper().
    
    Also move the changing of ->child_reaper from zap_pid_ns_processes() to
    find_new_reaper(), this consolidates the games with ->child_reaper and
    makes it stable under tasklist_lock.
    
    Addresses http://bugzilla.kernel.org/show_bug.cgi?id=11391
    
    Reported-by: Robert Rex <robert.rex@exasol.com>
    Signed-off-by: Oleg Nesterov <oleg@tv-sign.ru>
    Acked-by: Serge Hallyn <serue@us.ibm.com>
    Acked-by: Pavel Emelyanov <xemul@openvz.org>
    Acked-by: Sukadev Bhattiprolu <sukadev@linux.vnet.ibm.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit add0d4dfd660e9e4fd0af3eac3cad23583c9558f
Author: Oleg Nesterov <oleg@tv-sign.ru>
Date:   Tue Sep 2 14:35:48 2008 -0700

    pid_ns: zap_pid_ns_processes: fix the ->child_reaper changing
    
    zap_pid_ns_processes() sets pid_ns->child_reaper = NULL, this is wrong.
    
    Yes, we have already killed all tasks in this namespace, and sys_wait4()
    doesn't see any child.  But this doesn't mean ->children list is empty, we
    may have EXIT_DEAD tasks which are not visible to do_wait().  In that case
    the subsequent forget_original_parent() will crash the kernel because it
    will try to re-parent these tasks to the NULL reaper.
    
    Even if there are no childs, it is not good that forget_original_parent()
    uses reaper == NULL.
    
    Change the code to set ->child_reaper = init_pid_ns.child_reaper instead.
    We could use pid_ns->parent->child_reaper as well, I think this does not
    really matter.  These EXIT_DEAD tasks are not visible to the new ->parent
    after re-parenting, they will silently do release_task() eventually.
    
    Note that we must change ->child_reaper, otherwise
    forget_original_parent() will use reaper == father, and in that case we
    will hit the (correct) BUG_ON(!list_empty(&father->children)).
    
    Signed-off-by: Oleg Nesterov <oleg@tv-sign.ru>
    Acked-by: Serge Hallyn <serue@us.ibm.com>
    Acked-by: Sukadev Bhattiprolu <sukadev@linux.vnet.ibm.com>
    Acked-by: Pavel Emelyanov <xemul@openvz.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit e385ea63f44b475e034a78b6d8bc6bb50caf72ca
Author: David Brownell <dbrownell@users.sourceforge.net>
Date:   Tue Sep 2 14:35:46 2008 -0700

    mmc: at91_mci: don't use coherent dma buffers
    
    At91_mci is abusing dma_free_coherent(), which may not be called with IRQs
    disabled.  I saw "mkfs.ext3" on an MMC card objecting voluminously as each
    write completed:
    
     WARNING: at arch/arm/mm/consistent.c:368 dma_free_coherent+0x2c/0x224()
     [<c002726c>] (dump_stack+0x0/0x14) from [<c00387d4>] (warn_on_slowpath+0x4c/0x68)
     [<c0038788>] (warn_on_slowpath+0x0/0x68) from [<c0028768>] (dma_free_coherent+0x2c/0x224)
      r6:00008008 r5:ffc06000 r4:00000000
     [<c002873c>] (dma_free_coherent+0x0/0x224) from [<c01918ac>] (at91_mci_irq+0x374/0x420)
     [<c0191538>] (at91_mci_irq+0x0/0x420) from [<c0065d9c>] (handle_IRQ_event+0x2c/0x6c)
     ...
    
    This bug has been around for a LONG time.  The MM warning is from late
    2005, but the driver merged a year later ...  so I'm puzzled why nobody
    noticed this before now.
    
    The fix involves noting that this buffer shouldn't be DMA-coherent; it's
    just used for normal DMA writes.  So replace it with standard kmalloc()
    buffering and DMA mapping calls.
    
    This is the quickie fix.  A better one would not rely on allocating large
    bounce buffers.  (Note that dma_alloc_coherent could have failed too, but
    that case was ignored...  kmalloc is a bit more likely to fail though.)
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    Acked-by: Pierre Ossman <drzeus-mmc@drzeus.cx>
    Cc: Andrew Victor <linux@maxim.org.za>
    Acked-by: Nicolas Ferre <nicolas.ferre@atmel.com>
    Cc: Russell King <rmk@arm.linux.org.uk>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 363f66fe06c75270b669c88e321e6b354ba0201e
Author: Will Newton <will.newton@gmail.com>
Date:   Tue Sep 2 14:35:44 2008 -0700

    8250: improve workaround for UARTs that don't re-assert THRE correctly
    
    Recent changes to tighten the check for UARTs that don't correctly
    re-assert THRE (01c194d9278efc15d4785ff205643e9c0bdcef53: "serial 8250:
    tighten test for using backup timer") caused problems when such a UART was
    opened for the second time - the bug could only successfully be detected
    at first initialization.  For users of this version of this particular
    UART IP it is fatal.
    
    This patch stores the information about the bug in the bugs field of the
    port structure when the port is first started up so subsequent opens can
    check this bit even if the test for the bug fails.
    
    David Brownell: "My own exposure to this is that the UART on DaVinci
    hardware, which TI allegedly derived from its original 16550 logic, has
    periodically gone from working to unusable with the mainline 8250.c ...
    and back and forth a bunch.  Currently it's "unusable", a regression from
    some previous versions.  With this patch from Will, it's usable."
    
    Signed-off-by: Will Newton <will.newton@gmail.com>
    Acked-by: Alex Williamson <alex.williamson@hp.com>
    Cc: Alan Cox <alan@lxorguk.ukuu.org.uk>
    Cc: David Brownell <david-b@pacbell.net>
    Cc: <stable@kernel.org>		[2.6.26.x]
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit bd7aa4b2dafd8e653df265479d99c80747602a50
Author: Henrik Rydberg <rydberg@euromail.se>
Date:   Tue Sep 2 14:35:43 2008 -0700

    MAINTAINERS: add a maintainer for the BCM5974 multitouch driver
    
    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
    Cc: Dmitry Torokhov <dtor@mail.ru>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 527655835ebac8f58a8f800a10700712a4c2affd
Author: Marcin Slusarz <marcin.slusarz@gmail.com>
Date:   Tue Sep 2 14:35:41 2008 -0700

    mm/bootmem: silence section mismatch warning - contig_page_data/bootmem_node_data
    
    WARNING: vmlinux.o(.data+0x1f5c0): Section mismatch in reference from the variable contig_page_data to the variable .init.data:bootmem_node_data
    The variable contig_page_data references
    the variable __initdata bootmem_node_data
    If the reference is valid then annotate the
    variable with __init* (see linux/init.h) or name the variable:
    *driver, *_template, *_timer, *_sht, *_ops, *_probe, *_probe_one, *_console,
    
    Signed-off-by: Marcin Slusarz <marcin.slusarz@gmail.com>
    Cc: Johannes Weiner <hannes@saeurebad.de>
    Cc: Sean MacLennan <smaclennan@pikatech.com>
    Cc: Sam Ravnborg <sam@ravnborg.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 39dbbb4523754df4a822c69191a848a03e556dc7
Author: Russ Dill <russ.dill@gmail.com>
Date:   Tue Sep 2 14:35:40 2008 -0700

    acer-wmi: remove debugfs entries upon unloading
    
    The exit function neglects to remove debugfs entries, leading to a BUG
    on reload.
    
    [akpm@linux-foundation.org: cleanups]
    Signed-off-by: Russ Dill <Russ.Dill@gmail.com>
    Acked-by: Carlos Corbacho <carlos@strangeworlds.co.uk>
    Cc: Andi Kleen <ak@linux.intel.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 6ccfa806a9cfbbf1cd43d5b6aa47ef2c0eb518fd
Author: Hisashi Hifumi <hifumi.hisashi@oss.ntt.co.jp>
Date:   Tue Sep 2 14:35:40 2008 -0700

    VFS: fix dio write returning EIO when try_to_release_page fails
    
    Dio write returns EIO when try_to_release_page fails because bh is
    still referenced.
    
    The patch
    
        commit 3f31fddfa26b7594b44ff2b34f9a04ba409e0f91
        Author: Mingming Cao <cmm@us.ibm.com>
        Date:   Fri Jul 25 01:46:22 2008 -0700
    
            jbd: fix race between free buffer and commit transaction
    
    was merged into 2.6.27-rc1, but I noticed that this patch is not enough
    to fix the race.
    
    I did fsstress test heavily to 2.6.27-rc1, and found that dio write still
    sometimes got EIO through this test.
    
    The patch above fixed race between freeing buffer(dio) and committing
    transaction(jbd) but I discovered that there is another race, freeing
    buffer(dio) and ext3/4_ordered_writepage.
    
    : background_writeout()
         ->write_cache_pages()
           ->ext3_ordered_writepage()
         	   walk_page_buffers() -> take a bh ref
     	   block_write_full_page() -> unlock_page
    		: <- end_page_writeback
                    : <- race! (dio write->try_to_release_page fails)
          	   walk_page_buffers() ->release a bh ref
    
    ext3_ordered_writepage holds bh ref and does unlock_page remaining
    taking a bh ref, so this causes the race and failure of
    try_to_release_page.
    
    To fix this race, I used the approach of falling back to buffered
    writes if try_to_release_page() fails on a page.
    
    [akpm@linux-foundation.org: cleanups]
    Signed-off-by: Hisashi Hifumi <hifumi.hisashi@oss.ntt.co.jp>
    Cc: Chris Mason <chris.mason@oracle.com>
    Cc: Jan Kara <jack@suse.cz>
    Cc: Mingming Cao <cmm@us.ibm.com>
    Cc: Zach Brown <zach.brown@oracle.com>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 344c790e3821dac37eb742ddd0b611a300f78b9a
Author: Adam Litke <agl@us.ibm.com>
Date:   Tue Sep 2 14:35:38 2008 -0700

    mm: make setup_zone_migrate_reserve() aware of overlapping nodes
    
    I have gotten to the root cause of the hugetlb badness I reported back on
    August 15th.  My system has the following memory topology (note the
    overlapping node):
    
                Node 0 Memory: 0x8000000-0x44000000
                Node 1 Memory: 0x0-0x8000000 0x44000000-0x80000000
    
    setup_zone_migrate_reserve() scans the address range 0x0-0x8000000 looking
    for a pageblock to move onto the MIGRATE_RESERVE list.  Finding no
    candidates, it happily continues the scan into 0x8000000-0x44000000.  When
    a pageblock is found, the pages are moved to the MIGRATE_RESERVE list on
    the wrong zone.  Oops.
    
    setup_zone_migrate_reserve() should skip pageblocks in overlapping nodes.
    
    Signed-off-by: Adam Litke <agl@us.ibm.com>
    Acked-by: Mel Gorman <mel@csn.ul.ie>
    Cc: Dave Hansen <dave@linux.vnet.ibm.com>
    Cc: Nishanth Aravamudan <nacc@us.ibm.com>
    Cc: Andy Whitcroft <apw@shadowen.org>
    Cc: <stable@kernel.org>		[2.6.25.x, 2.6.26.x]
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 169ccbd44eb20f5bb7e4352451eba25397e29749
Author: Adrian Bunk <bunk@kernel.org>
Date:   Tue Sep 2 14:35:37 2008 -0700

    NTFS: update homepage
    
    Update the location of the NTFS homepage in several files.
    
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Cc: Jeff Garzik <jeff@garzik.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 06770843c2f0f929a6e0c758dc433902a01aabfb
Author: Breno Leitao <leitao@linux.vnet.ibm.com>
Date:   Tue Sep 2 17:28:58 2008 -0700

    ipv: Re-enable IP when MTU > 68
    
    Re-enable IP when the MTU gets back to a valid size.
    
    This patch just checks if the in_dev is NULL on a NETDEV_CHANGEMTU event
    and if MTU is valid (bigger than 68), then re-enable in_dev.
    
    Also a function that checks valid MTU size was created.
    
    Signed-off-by: Breno Leitao <leitao@linux.vnet.ibm.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 9d7d74029e0f5fde3b88b39892b9b9cfdf4ea10a
Author: Julien Brunel <brunel@diku.dk>
Date:   Tue Sep 2 17:24:28 2008 -0700

    net/xfrm: Use an IS_ERR test rather than a NULL test
    
    In case of error, the function xfrm_bundle_create returns an ERR
    pointer, but never returns a NULL pointer. So a NULL test that comes
    after an IS_ERR test should be deleted.
    
    The semantic match that finds this problem is as follows:
    (http://www.emn.fr/x-info/coccinelle/)
    
    // <smpl>
    @match_bad_null_test@
    expression x, E;
    statement S1,S2;
    @@
    x =  xfrm_bundle_create(...)
    ... when != x = E
    *  if (x != NULL)
    S1 else S2
    // </smpl>
    
    Signed-off-by: Julien Brunel <brunel@diku.dk>
    Signed-off-by: Julia Lawall <julia@diku.dk>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 773b4e02be28220e9ead80a5fdb180031361439a
Author: Senthil Balasubramanian <senthilkumar@atheros.com>
Date:   Mon Sep 1 19:58:20 2008 +0530

    ath9: Fix ath_rx_flush_tid() for IRQs disabled kernel warning message.
    
    This patch addresses an issue with the locking order. ath_rx_flush_tid()
    uses spin_lock/unlock_bh when IRQs are disabled in sta_notify by mac80211.
    
    As node clean up is still pending with ath9k and this problematic portion
    of the code is expected to change anyway, thinking of a proper fix may not
    be worthwhile. So having this interim fix helps the users to get rid of the
    kernel warning message.
    
    Pasted the kernel warning message for reference.
    
    kernel: ath0: No ProbeResp from current AP 00:1b:11:60:7a:3d - assume out of range
    kernel: ------------[ cut here ]------------
    kernel: WARNING: at kernel/softirq.c:136 local_bh_enable+0x3c/0xab()
    kernel: Pid: 1029, comm: ath9k Not tainted 2.6.27-rc4-wt-w1fi-wl
    kernel:
    kernel: Call Trace:
    kernel:  [<ffffffff802278d8>] warn_on_slowpath+0x51/0x77
    kernel:  [<ffffffff80224c51>] check_preempt_wakeup+0xf3/0x123
    kernel:  [<ffffffff80239658>] autoremove_wake_function+0x9/0x2e
    kernel:  [<ffffffff8022c281>] local_bh_enable+0x3c/0xab
    kernel:  [<ffffffffa01ab75a>] ath_rx_node_cleanup+0x38/0x6e [ath9k]
    kernel:  [<ffffffffa01b2280>] ath_node_detach+0x3b/0xb6 [ath9k]
    kernel:  [<ffffffffa01ab09f>] ath9k_sta_notify+0x12b/0x165 [ath9k]
    kernel:  [<ffffffff802366cf>] queue_work+0x1d/0x49
    kernel:  [<ffffffffa018c3fc>] add_todo+0x70/0x99 [mac80211]
    kernel:  [<ffffffffa017de76>] __sta_info_unlink+0x16b/0x19e [mac80211]
    kernel:  [<ffffffffa017e6ed>] sta_info_unlink+0x18/0x43 [mac80211]
    kernel:  [<ffffffffa0182732>] ieee80211_associated+0xaa/0x16d [mac80211]
    kernel:  [<ffffffffa0184a1a>] ieee80211_sta_work+0x4fb/0x6b4 [mac80211]
    kernel:  [<ffffffff80469c58>] thread_return+0x30/0xa9
    kernel:  [<ffffffffa018451f>] ieee80211_sta_work+0x0/0x6b4 [mac80211]
    kernel:  [<ffffffff802362c2>] run_workqueue+0xb1/0x17a
    kernel:  [<ffffffff80236be9>] worker_thread+0xd0/0xdb
    kernel:  [<ffffffff8023964f>] autoremove_wake_function+0x0/0x2e
    kernel:  [<ffffffff80236b19>] worker_thread+0x0/0xdb
    kernel:  [<ffffffff8023954a>] kthread+0x47/0x75
    kernel:  [<ffffffff80223121>] schedule_tail+0x18/0x50
    kernel:  [<ffffffff8020bc49>] child_rip+0xa/0x11
    kernel:  [<ffffffff80239503>] kthread+0x0/0x75
    kernel:  [<ffffffff8020bc3f>] child_rip+0x0/0x11
    kernel:
    kernel: ---[ end trace e9bb5da661055827 ]---
    
    Signed-off-by: Senthil Balasubramanian <senthilkumar@atheros.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 1b96175b7e5801a908718d8b5270a4f7d94fed28
Author: Senthil Balasubramanian <senthilkumar@atheros.com>
Date:   Mon Sep 1 19:45:21 2008 +0530

    ath9k: Incorrect key used when group and pairwise ciphers are different.
    
    Updating sc_keytype multiple times when groupwise and pairwise
    ciphers are different results in incorrect pairwise key type
    assumed for TX control and normal ping fails. This works fine
    for cases where both groupwise and pairwise ciphers are same.
    
    Also use mac80211 provided enums for key length calculation.
    
    Signed-off-by: Senthil Balasubramanian <senthilkumar@atheros.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 445df54fec7c1924f44018c4db2a9613b877f10e
Author: Boaz Harrosh <bharrosh@panasas.com>
Date:   Mon Sep 1 14:47:19 2008 +0300

    rt2x00: Compiler warning unmasked by fix of BUILD_BUG_ON
    
    A "Set" to a sign-bit in an "&" operation causes a compiler warning.
    Make calculations unsigned.
    
    [ The warning was masked by the old definition of BUILD_BUG_ON() ]
    
    Also remove __builtin_constant_p from FIELD_CHECK since BUILD_BUG_ON
    no longer permits non-const values.
    
    Signed-off-by: Boaz Harrosh <bharrosh@panasas.com>
    CC: Ingo Molnar <mingo@elte.hu>
    CC: Rusty Russell <rusty@rustcorp.com.au>
    Acked-by: Ivo van Doorn <IvDoorn@gmail.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 2b58b209399844995ad48e421267e359e16c03db
Author: Jouni Malinen <jouni.malinen@atheros.com>
Date:   Thu Aug 28 15:12:06 2008 +0300

    mac80211: Fix debugfs union misuse and pointer corruption
    
    debugfs union in struct ieee80211_sub_if_data is misused by including a
    common default_key dentry as a union member. This ends occupying the same
    memory area with the first dentry in other union members (structures;
    usually drop_unencrypted). Consequently, debugfs operations on
    default_key symlinks and drop_unencrypted entry are using the same
    dentry pointer even though they are supposed to be separate ones. This
    can lead to removing entries incorrectly or potentially leaving
    something behind since one of the dentry pointers gets lost.
    
    Fix this by moving the default_key dentry to a new struct
    (common_debugfs) that contains dentries (more to be added in future)
    that are shared by all vif types. The debugfs union must only be used
    for vif type-specific entries to avoid this type of pointer corruption.
    
    Signed-off-by: Jouni Malinen <jouni.malinen@atheros.com>
    Acked-by: Johannes Berg <johannes@sipsolutions.net>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 9a52028e534b0567913a4144060e774891c00a37
Author: Adrian Bunk <bunk@kernel.org>
Date:   Thu Aug 28 01:05:08 2008 +0300

    wireless/libertas/if_cs.c: fix memory leaks
    
    The leak in if_cs_prog_helper() is obvious.
    
    It looks a bit as if not freeing "fw" in if_cs_prog_real() was done
    intentionally, but I'm not seeing why it shouldn't be freed.
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Acked-by: Holger Schurig <hs4233@mail.mn-solutions.de>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 667d41008eb8a0e1d495d6c0a6143b43fe587c98
Author: David Kilroy <kilroyd@gmail.com>
Date:   Sat Aug 23 19:03:34 2008 +0100

    orinoco: Multicast to the specified addresses
    
    When multicasting the driver sets the number of group addresses using
    the count from the previous set multicast command. In general this means
    you have to set the multicast addresses twice to get the behaviour you
    want.
    
    If we were multicasting, and reduce the number of addresses we are
    multicasting to, then the driver would write uninitialised data from the
    stack into the group addresses to multicast to.
    
    Only write the multicast addresses we have specifically set.
    
    Signed-off-by: David Kilroy <kilroyd@gmail.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit f0b9f5cb4adcec9424142592ca7bf024fe6c91a9
Author: Tomas Winkler <tomas.winkler@intel.com>
Date:   Thu Aug 28 17:25:10 2008 +0800

    iwlwifi: fix 64bit platform firmware loading
    
    This patch fixes loading firmware from memory above 32bit.
    
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Emmanuel Grumbach <emmanuel.grumbach@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Acked-by: Marcel Holtmann <holtmann@linux.intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 1d3e6c61342292140dfe1b921991ee793ec1e0ae
Author: Mohamed Abbas <mohamed.abbas@intel.com>
Date:   Thu Aug 28 17:25:05 2008 +0800

    iwlwifi: fix apm_stop (wrong bit polarity for FLAG_INIT_DONE)
    
    The patch fixes CSR_GP_CNTRL_REG_FLAG_INIT_DONE was set instead of
    cleared which disabled moving device to D0U state.
    
    Signed-off-by: Mohamed Abbas <mohamed.abbas@intel.com>
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit cf88c433bf64b6f7395a39f840bec88a8c58b58b
Author: Tomas Winkler <tomas.winkler@intel.com>
Date:   Thu Aug 28 17:25:04 2008 +0800

    iwlwifi: workaround interrupt handling no some platforms
    
    This patch adds workaround for an interrupt related hardware bug on
    some platforms.  (Apparently these platforms boot-up w/ INTX_DISABLED
    set. -- JWL)
    
    Signed-off-by: Tomas Winkler <tomas.winkler@intel.com>
    Signed-off-by: Zhu Yi <yi.zhu@intel.com>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit 49898852e6aa8a6de9a5bc0bab2cf305b3583bbf
Author: John W. Linville <linville@tuxdriver.com>
Date:   Tue Sep 2 15:07:18 2008 -0400

    iwlwifi: do not use GFP_DMA in iwl_tx_queue_init
    
    GFP_DMA is not necessary for the iwlwifi hardware and it can cause
    allocation failures and/or invoke the OOM killer on lots of systems.
    
    For reference:
    
    	https://bugzilla.redhat.com/show_bug.cgi?id=459709
    
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit d9664741e0e2216770d6e52646474d3982b8eb55
Author: Florian Mickler <florian@mickler.org>
Date:   Tue Sep 2 15:26:34 2008 +0200

    net/wireless/Kconfig: clarify the description for CONFIG_WIRELESS_EXT_SYSFS
    
    Current setup with hal and NetworkManager will fail to work
    without newest hal version with this config option disabled.
    
    Although this will solve itself by time, at the moment it is
    dishonest to say that we don't know any software that uses it,
    if there are many many people relying on old hal versions.
    
    Signed-off-by: Florian Mickler <florian@mickler.org>
    Signed-off-by: John W. Linville <linville@tuxdriver.com>

commit afa153fd7b6afcd55dd6df6aea06bb53aa1d3608
Merge: ba6271e... 5a61dd9...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 11:44:11 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/bart/ide-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/bart/ide-2.6:
      ide/Kconfig: mark ide-scsi as deprecated
      ide-disk: remove stale init_idedisk_capacity() documentation
      palm_bk3710: improve IDE registration
      ide: fix hwif_to_node()
      IDE: palm_bk3710: fix compile warning for unused variable
      IDE: compile fix for sff_dma_ops

commit 5a61dd9ec8c5a8e14fbccda3ab042555b692b9b2
Author: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>
Date:   Tue Sep 2 20:18:48 2008 +0200

    ide/Kconfig: mark ide-scsi as deprecated
    
    Mark ide-scsi as deprecated and remove stale/bogus documentation.
    
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit ab1b67a6230648cf65b0342d9887fee890160ca8
Author: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>
Date:   Tue Sep 2 20:18:47 2008 +0200

    ide-disk: remove stale init_idedisk_capacity() documentation
    
    Acked-by: Sergei Shtylyov <sshtylyov@ru.mvista.com>
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit bfc2f01fc83f982344f09f491f7c18a6b9a16aa8
Author: David Brownell <dbrownell@users.sourceforge.net>
Date:   Tue Sep 2 20:18:47 2008 +0200

    palm_bk3710: improve IDE registration
    
    * fix device tree ... don't forget to set the parent device
    
    * let init/exit code be removed where practical
    
    Signed-off-by: David Brownell <dbrownell@users.sourceforge.net>
    [bart: splitted it from bigger DaVinci patch, s/hw.parent/hw.dev/]
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit 96f80219b738f84f90e449385bdede90f2910521
Author: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>
Date:   Tue Sep 2 20:18:47 2008 +0200

    ide: fix hwif_to_node()
    
    hwif_to_node() incorrectly assumes that hwif->dev always belongs to
    a PCI device.  This results in ide-cs oopsing in init_irq() after
    commit c56c5648a3bd15ff14c50f284b261140cd5b5472 accidentally fixed
    device tree registration for ide-cs.  Fix it by using dev_to_node().
    
    Thanks to Martin Michlmayr and Larry Finger for help with debugging
    the issue.
    
    Reported-by: Martin Michlmayr <tbm@cyrius.com>
    Tested-by: Martin Michlmayr <tbm@cyrius.com>
    Cc: Larry Finger <Larry.Finger@lwfinger.net>
    Cc: Dominik Brodowski <linux@dominikbrodowski.net>
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit a1aee8622293138867e7dbd1dd214dfb34cd89d2
Author: Kevin Hilman <khilman@deeprootsystems.com>
Date:   Tue Sep 2 20:18:47 2008 +0200

    IDE: palm_bk3710: fix compile warning for unused variable
    
    Signed-off-by: Kevin Hilman <khilman@deeprootsystems.com>
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit 71fc9fcc70e6ad96215510c1dbcbade05cd95e41
Author: Kevin Hilman <khilman@deeprootsystems.com>
Date:   Tue Sep 2 20:18:46 2008 +0200

    IDE: compile fix for sff_dma_ops
    
    The sff_dma_ops struct should be wrapped by BLK_DEV_IDEDMA_SFF instead
    of BLK_DEV_IDEDMA_PCI.
    
    Signed-off-by: Kevin Hilman <khilman@deeprootsystems.com>
    Cc: Sergei Shtylyov <sshtylyov@ru.mvista.com>
    Signed-off-by: Bartlomiej Zolnierkiewicz <bzolnier@gmail.com>

commit ba6271ea6324decab4c47c4a55de95188d930792
Merge: 99039e1... ee979a1...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 11:05:42 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound-2.6
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound-2.6:
      ALSA: hda - Add mic-boost controls to ALC662/663 auto configuration
      ALSA: hda - Fix ALC663 auto-probe
      ALSA: ASoC: fix pxa2xx-i2s clk_get call
      ALSA: hda: Distortion fix for dell_m6_core_init

commit 99039e1352fa451bd46e2c020dc78bcaf2a159d9
Merge: 72a8d12... c4bacef...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 11:04:47 2008 -0700

    Merge branch 'audit.b57' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/audit-current
    
    * 'audit.b57' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/audit-current:
      [PATCH] audit: Moved variable declaration to beginning of function

commit 72a8d129cf5811b77f0d6c8acef9ac34a12bccf4
Merge: 7ed77e8... b2d2c4c...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 11:04:09 2008 -0700

    Merge branch 'for-linus' of git://neil.brown.name/md
    
    * 'for-linus' of git://neil.brown.name/md:
      Fix problem with waiting while holding rcu read lock in md/bitmap.c
      Remove invalidate_partition call from do_md_stop.

commit 7ed77e804650b9095f862a0cfeecaa955224a73e
Author: Arjan van de Ven <arjan@infradead.org>
Date:   Mon Sep 1 15:09:51 2008 -0700

    don't diff generated firmware files
    
    With the new firmware infrastructure in 2.6.27, some files are generated and shouldn't be
    diffed; add these 2 to the "dontdiff" file
    
    Signed-off-by: Arjan van de Ven <arjan@Linux.intel.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 3df8a905ed09341041a3d1c6309fdb18cc809297
Author: Dennis Jansen <dennis.jansen@web.de>
Date:   Fri Aug 15 01:28:57 2008 +0200

    ACPI: Fix typo in "Disable MWAIT via DMI on broken Compal board"
    
    This fixes a typo in commit 2a2a64714d9c40f7705c4de1e79a5b855c7211a9 "Disable MWAIT via DMI on broken Compal board".
    
    It allows the nomwait dmi check to actually detect the Acer 5220.
    
    Signed-off-by: Dennis Jansen <dennis.jansen@web.de>
    Tested-by: Dennis Jansen <dennis.jansen@web.de>
    Acked-by: Zhao Yakui <yakui.zhao@intel.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 919fae1686881ed3922ea9de5b0c0a4feff3069e
Merge: e77295d... b67c5f8...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 10:59:27 2008 -0700

    Merge git://git.infradead.org/users/dwmw2/random-2.6
    
    * git://git.infradead.org/users/dwmw2/random-2.6:
      [MTD] mtdchar.c: Fix regression in MEMGETREGIONINFO ioctl()
      dabusb_fpga_download(): fix a memory leak
      Remove '#include <stddef.h>' from mm/page_isolation.c
      Fix modules_install on RO nfs-exported trees.

commit e77295dc9e6b52281ae85af4068f13752524e9f4
Merge: 1136cf1... 91b8096...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 10:58:11 2008 -0700

    Merge branch 'for-2.6.27' of git://linux-nfs.org/~bfields/linux
    
    * 'for-2.6.27' of git://linux-nfs.org/~bfields/linux:
      nfsd: fix buffer overrun decoding NFSv4 acl
      sunrpc: fix possible overrun on read of /proc/sys/sunrpc/transports
      nfsd: fix compound state allocation error handling
      svcrdma: Fix race between svc_rdma_recvfrom thread and the dto_tasklet

commit 1136cf11066a32d4ac2a476dac302858d763703d
Author: Michael Schmitz <schmitz@biophys.uni-duesseldorf.de>
Date:   Mon Sep 1 20:27:02 2008 +0200

    m68k: atari_keyb_init operator precedence fix
    
    Fix operator precedence bug in atari_keyb_init, which caused a failure on CT60
    
    Signed-off-by: Michael Schmitz <schmitz@debian.org>
    Signed-off-by: Geert Uytterhoeven <geert@linux-m68k.org>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 2ecbf813d5e6361eb7c7520a6f5e6afa168df39a
Author: Stephen Rothwell <sfr@canb.auug.org.au>
Date:   Tue Sep 2 03:43:27 2008 +1000

    fix typo in arch/parisc/hpux/fs.c
    
    A parisc allmodconfig build produces this:
    
    arch/parisc/hpux/fs.c:107: error: 'buffer' undeclared (first use in this function)
    
    Introduced by commit da574983de9f9283ba35662c8723627096e160de ("[PATCH]
    fix hpux_getdents()").
    
    Helge Dille also reported this in bugzilla 11461:
    
    	http://bugzilla.kernel.org/show_bug.cgi?id=11461
    
    and he posted an identical patch.
    
    Signed-off-by: Stephen Rothwell <sfr@canb.auug.org.au>
    Signed-off-by: Helge Deller <deller@gmx.de>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit cbaed698f37494b30b2449b51c728ae48630cb2b
Author: Oleg Nesterov <oleg@tv-sign.ru>
Date:   Sat Aug 30 21:08:40 2008 +0400

    softlockup: minor cleanup, don't check task->state twice
    
    The recent commit 16d9679f33caf7e683471647d1472bfe133d858 changed
    check_hung_task() to filter out the TASK_KILLABLE tasks. We can
    move this check to the caller which has to test t->state anyway.
    
    Signed-off-by: Oleg Nesterov <oleg@tv-sign.ru>
    Acked-by: Andi Kleen <ak@linux.intel.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 6781f4ae30bbb8ebf31187b3c9304be16966f5a0
Author: Randy Dunlap <randy.dunlap@oracle.com>
Date:   Sun Aug 31 20:31:55 2008 -0700

    kernel/resource.c: fix new kernel-doc warning
    
    Fix kernel-doc warning for new function:
    
    Warning(linux-2.6.27-rc5-git2//kernel/resource.c:448): No description found for parameter 'root'
    
    Signed-off-by: Randy Dunlap <randy.dunlap@oracle.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 6b9886a173ff6c9ed528979c4d0a3566c1f61013
Merge: 6ffbb19... 6c7be29...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 10:46:56 2008 -0700

    Merge branch 'drm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6
    
    * 'drm-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/airlied/drm-2.6:
      drm/radeon: downgrade debug message from info to debug.

commit 6ffbb1964afe1236951f7ac30aa0ed202673e374
Merge: 1586553... c76da9d...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 10:45:59 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/sfrench/cifs-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/sfrench/cifs-2.6:
      [CIFS] Turn off Unicode during session establishment for plaintext authentication
      [CIFS] update cifs change log
      cifs: fix O_APPEND on directio mounts
      [CIFS] Fix plaintext authentication

commit 1586553bc840e17c321f244fc264ea8312678faf
Merge: 44e7ed3... ddef43a...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 10:45:01 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.dk/linux-2.6-block
    
    * 'for-linus' of git://git.kernel.dk/linux-2.6-block:
      block: restore original behavior of /proc/partition when there's no partition
      remove blk_register_filter and blk_unregister_filter in gendisk

commit 44e7ed396114a0c43bb2494877aceeb7782e084a
Merge: 011fec7... dbb8c35...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 10:43:38 2008 -0700

    Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc-2.6
    
    * git://git.kernel.org/pub/scm/linux/kernel/git/davem/sparc-2.6:
      sparc64: setup_valid_addr_bitmap_from_pavail() should be __init
      sparc: Fix resource flags for PCI children in OF device tree.
      sparc32: Implement smp_call_function_single().

commit 011fec7486028977e2b4012afb84235759c6ad82
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Tue Sep 2 10:38:28 2008 -0700

    Un-break printk strings in x86 PCI probing code
    
    Breaking lines due to some imaginary problem with a long line length is
    often stupid and wrong, but never more so when it splits a string that
    is printed out into multiple lines.  This really ended up making it much
    harder to find where some error strings were printed out, because a
    simple 'grep' didn't work.
    
    I'm sure there is tons more of this particular idiocy hiding in other
    places, but this particular case hit me once more last week. So fix it.
    
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit ee979a143cfd999adea8a9e272649a3cd9ec84bc
Author: Takashi Iwai <tiwai@suse.de>
Date:   Tue Sep 2 15:42:20 2008 +0200

    ALSA: hda - Add mic-boost controls to ALC662/663 auto configuration
    
    Signed-off-by: Takashi Iwai <tiwai@suse.de>

commit 24fb9173815045ab3f85a670d7df8af5af6ff3be
Author: Takashi Iwai <tiwai@suse.de>
Date:   Tue Sep 2 14:48:20 2008 +0200

    ALSA: hda - Fix ALC663 auto-probe
    
    Fix the wrong DAC assignment for NID 0x17 mono-pin on ALC663.
    
    Signed-off-by: Takashi Iwai <tiwai@suse.de>

commit b67c5f87c13f398ec3f4d6b455cb0bbeda8d7ac0
Author: Zev Weiss <zevweiss@gmail.com>
Date:   Mon Sep 1 05:02:12 2008 -0700

    [MTD] mtdchar.c: Fix regression in MEMGETREGIONINFO ioctl()
    
    The MEMGETREGIONINFO ioctl() in mtdchar.c was clobbering user memory by
    overwriting more than intended, due the size of struct mtd_erase_region_info
    changing in commit 0ecbc81adfcb9f15f86b05ff576b342ce81bbef8 ('Support
    for auto locking flash on power up').
    
    Fix avoids this by copying struct members one by one with put_user(), as there
    is no longer a convenient struct to use the size of as the length argument to
    copy_to_user().
    
    Signed-off-by: Zev Weiss <zevweiss@gmail.com>
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

commit 02c0267a40c876a4d70f2000f21fe9ff89fb988e
Author: Adrian Bunk <bunk@kernel.org>
Date:   Thu Aug 28 01:04:30 2008 +0300

    dabusb_fpga_download(): fix a memory leak
    
    This patch fixes a memory leak in an error path.
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

commit 0ed97ee470c36e05bcaad36c4fb4c501f383ce63
Author: David Woodhouse <David.Woodhouse@intel.com>
Date:   Mon Sep 1 11:10:28 2008 +0100

    Remove '#include <stddef.h>' from mm/page_isolation.c
    
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

commit 1cede1affb3cc5a9520fdbc75b3fbaa6432cbc5a
Author: David Woodhouse <David.Woodhouse@intel.com>
Date:   Mon Sep 1 10:54:46 2008 +0100

    Fix modules_install on RO nfs-exported trees.
    
    Fixes http://bugzilla.kernel.org/show_bug.cgi?id=11355 by avoiding a
    needless rebuild of the firmware/ihex2fw tool.
    
    Signed-off-by: David Woodhouse <David.Woodhouse@intel.com>

commit c4bacefb7aaf49da11a695f29d85d40909f17693
Author: Cordelia <cordsam@linux.vnet.ibm.com>
Date:   Mon Aug 18 09:45:51 2008 -0700

    [PATCH] audit: Moved variable declaration to beginning of function
    
    got rid of compilation warning:
    ISO C90 forbids mixed declarations and code
    
    Signed-off-by: Cordelia Sam <cordesam@gmail.com>
    Signed-off-by: Al Viro <viro@zeniv.linux.org.uk>

commit 91b80969ba466ba4b915a4a1d03add8c297add3f
Author: J. Bruce Fields <bfields@citi.umich.edu>
Date:   Fri Aug 29 19:18:45 2008 -0400

    nfsd: fix buffer overrun decoding NFSv4 acl
    
    The array we kmalloc() here is not large enough.
    
    Thanks to Johann Dahm and David Richter for bug report and testing.
    
    Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>
    Cc: David Richter <richterd@citi.umich.edu>
    Tested-by: Johann Dahm <jdahm@umich.edu>

commit 27df6f25ff218072e0e879a96beeb398a79cdbc8
Author: Cyrill Gorcunov <gorcunov@gmail.com>
Date:   Sun Aug 31 19:25:49 2008 +0400

    sunrpc: fix possible overrun on read of /proc/sys/sunrpc/transports
    
    Vegard Nossum reported
    ----------------------
    > I noticed that something weird is going on with /proc/sys/sunrpc/transports.
    > This file is generated in net/sunrpc/sysctl.c, function proc_do_xprt(). When
    > I "cat" this file, I get the expected output:
    >    $ cat /proc/sys/sunrpc/transports
    >    tcp 1048576
    >    udp 32768
    
    > But I think that it does not check the length of the buffer supplied by
    > userspace to read(). With my original program, I found that the stack was
    > being overwritten by the characters above, even when the length given to
    > read() was just 1.
    
    David Wagner added (among other things) that copy_to_user could be
    probably used here.
    
    Ingo Oeser suggested to use simple_read_from_buffer() here.
    
    The conclusion is that proc_do_xprt doesn't check for userside buffer
    size indeed so fix this by using Ingo's suggestion.
    
    Reported-by: Vegard Nossum <vegard.nossum@gmail.com>
    Signed-off-by: Cyrill Gorcunov <gorcunov@gmail.com>
    CC: Ingo Oeser <ioe-lkml@rameria.de>
    Cc: Neil Brown <neilb@suse.de>
    Cc: Chuck Lever <chuck.lever@oracle.com>
    Cc: Greg Banks <gnb@sgi.com>
    Cc: Tom Tucker <tom@opengridcomputing.com>
    Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>

commit c228c24bf1138d4757dbe20615df655815446da3
Author: Andy Adamson <andros@netapp.com>
Date:   Thu Aug 21 08:42:16 2008 -0400

    nfsd: fix compound state allocation error handling
    
    Move the cstate_alloc call so that if it fails, the response is setup to
    encode the NFS error. The out label now means that the
    nfsd4_compound_state has not been allocated.
    
    Signed-off-by: Andy Adamson <andros@netapp.com>
    Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>

commit 84c4f2f21a8e6e6d4bdfff95bf5ddc7925df4e01
Author: Humphrey Bucknell <hbucknell@saitek.com>
Date:   Fri Aug 29 16:27:00 2008 +0100

    avr32: pm_standby low-power ram bug fix
    
    The value stored into the SDRAMC LPR register should be the current
    value of the register with the Self-refresh value set in the lower bit
    field.
    
    The bug involved only the Self-refresh value being written to the
    register, thus over writing any low-power ram settings.
    
    Signed-off-by: Humphrey Bucknell <hbucknell@saitek.com>
    Signed-off-by: Haavard Skinnemoen <haavard.skinnemoen@atmel.com>

commit 9e3f544d792fd2ff7e31ca4a72e5194f1491ed14
Author: Haavard Skinnemoen <haavard.skinnemoen@atmel.com>
Date:   Wed Aug 20 15:46:24 2008 +0200

    avr32: Fix lockup after Java stack underflow in user mode
    
    When using the Java Extension Module hardware, a Java stack underflow or
    overflow trap may cause the system to enter an infinite exception loop.
    Although there's no kernel support for the Java hardware yet, we need to
    be able to recover from this situation and keep the system running.
    
    This patch adds code to detect and fixup this situation in the critical
    exception handler and terminate the faulting process. We may have to
    rethink how to handle this more gracefully when the necessary kernel
    support for hardware-accelerated Java is added.
    
    Reported-by: Guennadi Liakhovetski <g.liakhovetski@gmx.de>
    Signed-off-by: Haavard Skinnemoen <haavard.skinnemoen@atmel.com>

commit 673d62cc5ea6fca046650f17f77985b112c62322
Author: Vegard Nossum <vegard.nossum@gmail.com>
Date:   Sun Aug 31 23:39:21 2008 +0200

    debugobjects: fix lockdep warning
    
    Daniel J. Blueman reported:
    > =======================================================
    > [ INFO: possible circular locking dependency detected ]
    > 2.6.27-rc4-224c #1
    > -------------------------------------------------------
    > hald/4680 is trying to acquire lock:
    >  (&n->list_lock){++..}, at: [<ffffffff802bfa26>] add_partial+0x26/0x80
    >
    > but task is already holding lock:
    >  (&obj_hash[i].lock){++..}, at: [<ffffffff8041cfdc>]
    > debug_object_free+0x5c/0x120
    
    We fix it by moving the actual freeing to outside the lock (the lock
    now only protects the list).
    
    The pool lock is also promoted to irq-safe (suggested by Dan). It's
    necessary because free_pool is now called outside the irq disabled
    region. So we need to protect against an interrupt handler which calls
    debug_object_init().
    
    [tglx@linutronix.de: added hlist_move_list helper to avoid looping
    		     through the list twice]
    
    Reported-by: Daniel J Blueman <daniel.blueman@gmail.com>
    Signed-off-by: Vegard Nossum <vegard.nossum@gmail.com>
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>

commit ddef43a843f620c6742a06633739887a901ec06b
Author: Tejun Heo <tj@kernel.org>
Date:   Mon Sep 1 08:55:10 2008 +0200

    block: restore original behavior of /proc/partition when there's no partition
    
    /proc/partitions didn't use to write out the header if there was no
    partition.  However, recent commit 66c64afe changed the behavior.
    This is nothing major but there's no reason to change user visible
    behavior without a good rationale.  Restore the original behavior.
    
    Note that 2.6.28 has clean up changes scheduled which will replace
    this rather hacky implementation.
    
    Signed-off-by: Tejun Heo <tj@kernel.org>
    Cc: Greg KH <greg@kroah.com>
    Cc: Kay Sievers <kay.sievers@vrfy.org>
    Signed-off-by: Jens Axboe <jens.axboe@oracle.com>

commit 6e5ea7015c62b672020ee0a7c2764942fe63fa25
Author: Dmitry Baryshkov <dbaryshkov@gmail.com>
Date:   Sun Aug 31 00:45:02 2008 +0400

    ALSA: ASoC: fix pxa2xx-i2s clk_get call
    
    pxa2xx-i2s: probe actual device and use it for clk_get call
    thus fixing error during startup hook
    
    Signed-off-by: Dmitry Baryshkov <dbaryshkov@gmail.com>
    Acked-by: Mark Brown <broonie@opensource.wolfsonmicro.com>
    Signed-off-by: Takashi Iwai <tiwai@suse.de>

commit 20f5f95ded9cdab62c26efb146967a75e12533ec
Author: Matthew Ranostay <mranostay@embeddedalley.com>
Date:   Mon Sep 1 08:17:56 2008 +0200

    ALSA: hda: Distortion fix for dell_m6_core_init
    
    Added the EQ distortion fix to the dell_m6_core_init.
    
    Signed-off-by: Matthew Ranostay <mranostay@embeddedalley.com>
    Signed-off-by: Takashi Iwai <tiwai@suse.de>

commit b2d2c4ceaddc3098f19637a732f74b820a81a9e7
Author: NeilBrown <neilb@suse.de>
Date:   Mon Sep 1 12:48:13 2008 +1000

    Fix problem with waiting while holding rcu read lock in md/bitmap.c
    
    A recent patch to protect the rdev list with rcu locking leaves us
    with a problem because we can sleep on memalloc while holding the
    rcu lock.
    
    The rcu lock is only needed while walking the linked list as
    uninteresting devices (failed or spares) can be removed at any time.
    
    So only take the rcu lock while actually walking the linked list.
    Take a refcount on the rdev during the time when we drop the lock
    and do the memalloc to start IO.
    When we return to the locked code, all the interesting devices
    on the list will not have moved, so we can simply use
    list_for_each_continue_rcu to pick up where we left off.
    
    Signed-off-by: NeilBrown <neilb@suse.de>

commit 271f5a9b8f8ae0db95de72779d115c9d0b9d3cc5
Author: NeilBrown <neilb@suse.de>
Date:   Mon Sep 1 12:32:52 2008 +1000

    Remove invalidate_partition call from do_md_stop.
    
    When stopping an md array, or just switching to read-only, we
    currently call invalidate_partition while holding the mddev lock.
    The main reason for this is probably to ensure all dirty buffers
    are flushed (invalidate_partition calls fsync_bdev).
    
    However if any dirty buffers are found, it will almost certainly cause
    a deadlock as starting writeout will require an update to the
    superblock, and performing that updates requires taking the mddev
    lock - which is already held.
    
    This deadlock can be demonstrated by running "reboot -f -n" with
    a root filesystem on md/raid, and some dirty buffers in memory.
    
    All other calls to stop an array should already happen after a flush.
    The normal sequence is to stop using the array (e.g. umount) which
    will cause __blkdev_put to call sync_blockdev.  Then open the
    array and issue the STOP_ARRAY ioctl while the buffers are all still
    clean.
    
    So this invalidate_partition is normally a no-op, except for one case
    where it will cause a deadlock.
    
    So remove it.
    
    This patch possibly addresses the regression recored in
       http://bugzilla.kernel.org/show_bug.cgi?id=11460
    and
       http://bugzilla.kernel.org/show_bug.cgi?id=11452
    
    though it isn't yet clear how it ever worked.
    
    
    Signed-off-by: NeilBrown <neilb@suse.de>

commit 6c7be29810dd85b4fe75588ec536446c1579d492
Author: Dave Airlie <airlied@redhat.com>
Date:   Mon Sep 1 08:51:52 2008 +1000

    drm/radeon: downgrade debug message from info to debug.
    
    If this triggers its bad, however some machines seem to have been
    triggering it for ages and we didn't know until we added the debug.
    
    So downgrade the debug now so people don't call this a regression.
    
    Signed-off-by: Dave Airlie <airlied@redhat.com>

commit dbb8c35d9063fe233626865cc836fbc102fa083b
Author: David S. Miller <davem@davemloft.net>
Date:   Sat Aug 30 02:04:45 2008 -0700

    sparc64: setup_valid_addr_bitmap_from_pavail() should be __init
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit bef69ea0dcce574a425feb0a5aa4c63dd108b9a6
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Aug 29 20:18:31 2008 -0700

    Resource handling: add 'insert_resource_expand_to_fit()' function
    
    Not used anywhere yet, but this complements the existing plain
    'insert_resource()' functionality with a version that can expand the
    resource we are adding in order to fix up any conflicts it has with
    existing resources.
    
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 00aeb429a0f2daeb21979873060b81095cafe4bd
Merge: 316d967... df91bc2...
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Aug 29 14:46:49 2008 -0700

    Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound-2.6
    
    * 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound-2.6:
      ALSA: oxygen: fix distorted output on AK4396-based cards
      Revert "ALSA: hda - Added model selection for iMac 24""

commit 316d9679f33caf7e683471647d1472bfe133d858
Author: Andi Kleen <andi@firstfloor.org>
Date:   Fri Aug 29 20:06:23 2008 +0200

    Don't trigger softlockup detector on network fs blocked tasks
    
    Pulling the ethernet cable on a 2.6.27-rc system with NFS mounts
    currently leads to an ongoing flood of soft lockup detector backtraces
    for all tasks blocked on the NFS mounts when the hickup takes
    longer than 120s.
    
    I don't think NFS problems should be all that noisy.
    
    Luckily there's a reasonably easy way to distingush this case.
    
    Don't report task softlockup warnings for tasks in TASK_KILLABLE
    state, which is used by the network file systems.
    
    I believe this patch is a 2.6.27 candidate.
    
    Signed-off-by: Andi Kleen <ak@linux.intel.com>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit b4609472116bb806a95e98d04767189406c74c70
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Fri Aug 29 14:38:03 2008 -0700

    Revert "x86: fix HPET regression in 2.6.26 versus 2.6.25, check hpet against BAR, v3"
    
    This reverts commit a2bd7274b47124d2fc4dfdb8c0591f545ba749dd.
    
    It wasn't really right to begin with (there's a better fix for the
    problem with e820 reservations clashing with PCI BAR's pending), but it
    also actually causes more regressions, so it should be reverted even
    before the better fix is finalized.
    
    Rafael reports that this commit broke AHCI detection, and thus causes
    the kernel to not boot on his quad core test box.
    
    Reported-and-bisected-by: Rafael J. Wysocki <rjw@sisk.pl>
    Cc: Yinghai Lu <yhlu.kernel@gmail.com>
    Cc: David Witbrodt <dawitbro@sbcglobal.net>
    Cc: Ingo Molnar <mingo@elte.hu>
    Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>

commit 7c19a3d280297d43ef5ff7c6b205dc208a16d3d1
Author: David S. Miller <davem@davemloft.net>
Date:   Fri Aug 29 14:37:23 2008 -0700

    net: Unbreak userspace usage of linux/mroute.h
    
    Nothing in linux/pim.h should be exported to userspace.
    
    This should fix the XORP build failure reported by
    Jose Calhariz, the debain package maintainer.
    
    Nothing originally in linux/mroute.h was exported to userspace
    ever, but some of this stuff started to be when it was moved into
    this new linux/pim.h, and that was wrong.  If we didn't provide these
    definitions for 10 years we can reasonably expect that applications
    defined this stuff locally or used GLIBC headers providing the
    protocol definitions.  And as such the only result of this can
    be conflict and userland build breakage.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 102396ae65108b026e4e1868e30fa013f45a169e
Author: Jarek Poplawski <jarkao2@gmail.com>
Date:   Fri Aug 29 14:21:52 2008 -0700

    pkt_sched: Fix locking of qdisc_root with qdisc_root_sleeping_lock()
    
    Use qdisc_root_sleeping_lock() instead of qdisc_root_lock() where
    appropriate. The only difference is while dev is deactivated, when
    currently we can use a sleeping qdisc with the lock of noop_qdisc.
    This shouldn't be dangerous since after deactivation root lock could
    be used only by gen_estimator code, but looks wrong anyway.
    
    Signed-off-by: Jarek Poplawski <jarkao2@gmail.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 3cc76caa98b092a8fb3e7b4303c70f847db0651f
Author: Yang Hongyang <yanghy@cn.fujitsu.com>
Date:   Fri Aug 29 14:06:51 2008 -0700

    ipv6: When we droped a packet, we should return NET_RX_DROP instead of 0
    
    Signed-off-by: Yang Hongyang <yanghy@cn.fujitsu.com>
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit df91bc23dcb052ff2da71b3482bf3c5fbf4b8a53
Author: Clemens Ladisch <clemens@ladisch.de>
Date:   Fri Aug 29 13:08:34 2008 +0200

    ALSA: oxygen: fix distorted output on AK4396-based cards
    
    When changing the sample rate, the CMI8788's master clock output becomes
    unstable for a short time.  The AK4396 needs the master clock to do SPI
    writes, so writing to an AK4396 control register directly after a sample
    rate change will garble the value.  In our case, this leads to the DACs
    being misconfigured to I2S sample format, which results in a wrong
    output level and horrible distortions on samples louder than -6 dB.
    
    To fix this, we need to wait until the new master clock signal has
    become stable before doing SPI writes.
    
    Signed-off-by: Clemens Ladisch <clemens@ladisch.de>
    Signed-off-by: Takashi Iwai <tiwai@suse.de>

commit bb23b431db7405f6d79f989ad0236bf6428ba1cb
Author: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
Date:   Fri Aug 29 11:47:07 2008 +0200

    remove blk_register_filter and blk_unregister_filter in gendisk
    
    This patch remove blk_register_filter and blk_unregister_filter in
    gendisk, and adds them to sd.c, sr.c. and ide-cd.c
    
    The commit abf5439370491dd6fbb4fe1a7939680d2a9bc9d4 moved cmdfilter
    from gendisk to request_queue. It turned out that in some subsystems
    multiple gendisks share a single request_queue. So we get:
    
    Using physmap partition information
    Creating 3 MTD partitions on "physmap-flash":
    0x00000000-0x01c00000 : "User FS"
    0x01c00000-0x01c40000 : "booter"
    kobject (8511c410): tried to init an initialized object, something is seriously wrong.
    Call Trace:
    [<8036644c>] dump_stack+0x8/0x34
    [<8021f050>] kobject_init+0x50/0xcc
    [<8021fa18>] kobject_init_and_add+0x24/0x58
    [<8021d20c>] blk_register_filter+0x4c/0x64
    [<8021c194>] add_disk+0x78/0xe0
    [<8027d14c>] add_mtd_blktrans_dev+0x254/0x278
    [<8027c8f0>] blktrans_notify_add+0x40/0x78
    [<80279c00>] add_mtd_device+0xd0/0x150
    [<8027b090>] add_mtd_partitions+0x568/0x5d8
    [<80285458>] physmap_flash_probe+0x2ac/0x334
    [<802644f8>] driver_probe_device+0x12c/0x244
    [<8026465c>] __driver_attach+0x4c/0x84
    [<80263c64>] bus_for_each_dev+0x58/0xac
    [<802633ec>] bus_add_driver+0xc4/0x24c
    [<802648e0>] driver_register+0xcc/0x184
    [<80100460>] _stext+0x60/0x1bc
    
    In the long term, we need to fix such subsystems but we need a quick
    fix now. This patch add the command filter support to only sd and sr
    though it might be useful for other SG_IO users (such as cciss).
    
    Signed-off-by: FUJITA Tomonori <fujita.tomonori@lab.ntt.co.jp>
    Reported-by: Manuel Lauss <mano@roarinelk.homelinux.net>
    Signed-off-by: Jens Axboe <jens.axboe@oracle.com>

commit e3c71a32915fabb095de7108c22672e457631a08
Author: David S. Miller <davem@davemloft.net>
Date:   Thu Aug 28 21:02:58 2008 -0700

    sparc: Fix resource flags for PCI children in OF device tree.
    
    When a device is under an EBUS or ISA bus, the resource flags
    don't get set properly.
    
    Fix this by re-evaluating the resource flags at each level of
    bus as we apply ranges on the way to the root.  And let PCI
    override any existing flags setting, but don't let the
    default flags calculator make such overrides.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 9d5e88bcdd8d814a65dfeb6b55a5a7cef61630d4
Merge: 4eb57c9... 9662e08...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Thu Aug 28 19:25:21 2008 +0200

    Merge branch 'wan' into release-2.6.27

commit 9662e0802445a1f56cef11bbd0d520b07238424a
Author: Jeremy Fitzhardinge <jeremy@goop.org>
Date:   Wed Aug 27 21:04:49 2008 -0700

    ACPI: thinkpad-acpi: wan radio control is not experimental
    
    The WWAN radio control has been working well for over three years,
    and is no longer experimental.
    
    Signed-off-by: Jeremy Fitzhardinge <jeremy@goop.org>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit c76da9da1fffa6de263486df54950eb328d58f71
Author: Steve French <sfrench@us.ibm.com>
Date:   Thu Aug 28 15:32:22 2008 +0000

    [CIFS] Turn off Unicode during session establishment for plaintext authentication
    
    LANMAN session setup did not support Unicode (after session setup, unicode can
    still be used though).
    
    Fixes samba bug# 5319
    
    CC: Jeff Layton <jlayton@redhat.com>
    CC: Stable Kernel <stable@vger.kernel.org>
    Signed-off-by: Steve French <sfrench@us.ibm.com>

commit 2e655021b8d50b5d90ce442f3de6bf3667729910
Author: Steve French <sfrench@us.ibm.com>
Date:   Thu Aug 28 15:30:06 2008 +0000

    [CIFS] update cifs change log
    
    Signed-off-by: Steve French <sfrench@us.ibm.com>

commit 838726c4756813576078203eb7e1e219db0da870
Author: Jeff Layton <jlayton@redhat.com>
Date:   Thu Aug 28 07:54:59 2008 -0400

    cifs: fix O_APPEND on directio mounts
    
    The direct I/O write codepath for CIFS is done through
    cifs_user_write(). That function does not currently call
    generic_write_checks() so the file position isn't being properly set
    when the file is opened with O_APPEND.  It's also not doing the other
    "normal" checks that should be done for a write call.
    
    The problem is currently that when you open a file with O_APPEND on a
    mount with the directio mount option, the file position is set to the
    beginning of the file. This makes any subsequent writes clobber the data
    in the file starting at the beginning.
    
    This seems to fix the problem in cursory testing. It is, however
    important to note that NFS disallows the combination of
    (O_DIRECT|O_APPEND). If my understanding is correct, the concern is
    races with multiple clients appending to a file clobbering each others'
    data. Since the write model for CIFS and NFS is pretty similar in this
    regard, CIFS is probably subject to the same sort of races. What's
    unclear to me is why this is a particular problem with O_DIRECT and not
    with buffered writes...
    
    Regardless, disallowing O_APPEND on an entire mount is probably not
    reasonable, so we'll probably just have to deal with it and reevaluate
    this flag combination when we get proper support for O_DIRECT. In the
    meantime this patch at least fixes the existing problem.
    
    Signed-off-by: Jeff Layton <jlayton@redhat.com>
    Cc: Stable Tree <stable@kernel.org>
    Signed-off-by: Steve French <sfrench@us.ibm.com>

commit 3c31bf73134038a417a9ae3fa3c02c279b42c550
Author: Yoshihiro Shimoda <shimoda.yoshihiro@renesas.com>
Date:   Wed Aug 27 20:16:46 2008 +0900

    sh: fix semtimedop syscall
    
    fix the problem that cannot work semtimedop system call.
    
    Signed-off-by: Yoshihiro Shimoda <shimoda.yoshihiro@renesas.com>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit f9bed3f2040b2ed44f0d1b7f0280458533c5d2a0
Author: Magnus Damm <damm@igel.co.jp>
Date:   Wed Aug 27 18:23:52 2008 +0900

    sh: update AP325RXA defconfig
    
    This patch updates the AP325RXA defconfig to include the recently merged
    uio_pdrv_genirq driver.
    
    Signed-off-by: Magnus Damm <damm@igel.co.jp>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit be8c129f1a853daac9085d81256c9d4bd38c6a11
Author: Magnus Damm <damm@igel.co.jp>
Date:   Wed Aug 27 18:22:49 2008 +0900

    sh: update Migo-R defconfig
    
    This patch updates the MigoR defconfig to include the recently merged
    uio_pdrv_genirq driver.
    
    Signed-off-by: Magnus Damm <damm@igel.co.jp>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit c773d8af8ebccb723e9843c1e73840b2c5e00572
Author: Magnus Damm <damm@igel.co.jp>
Date:   Wed Aug 27 18:21:29 2008 +0900

    sh: fix platform_resource_setup_memory() section mismatch
    
    This patch kills a section mismatch for platform_resource_setup_memory().
    
    Signed-off-by: Magnus Damm <damm@igel.co.jp>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit 5734493bac88b28d8d7e2f262305fd6e83545ac5
Author: Magnus Damm <damm@igel.co.jp>
Date:   Wed Aug 27 18:19:01 2008 +0900

    sh: fix kexec entry point for crash kernels
    
    The crash kernel entry point is currently checked by the kexec kernel
    code and only physical addresses in the reserved memory window are
    accepted. This means that we can't pass P2 or P1 addresses as entry
    points in the case of crash kernels. This patch makes sure we can start
    crash kernels by adding support for physical address entry points.
    
    Signed-off-by: Magnus Damm <damm@igel.co.jp>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit 34894c7843e00972d88b3592027703d4e05a06a7
Author: Magnus Damm <damm@igel.co.jp>
Date:   Wed Aug 27 18:15:43 2008 +0900

    sh: crash kernel resource fix
    
    The reserved crash kernel memory range is currently missing from
    /proc/iomem. crashk_res is mistakenly setup after __add_active_range().
    Reorder things to make sure the resource shows up in /proc/iomem.
    
    Signed-off-by: Magnus Damm <damm@igel.co.jp>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit 66e4f8c076f8803e83879d986a7803a918b2129e
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Aug 27 20:03:22 2008 -0700

    sparc32: Implement smp_call_function_single().
    
    Reported by Stephen Rothwell.
    
    Needed to fix the build when CONFIG_RELAY is enabled.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>

commit 6405c9cd9bf7b1c35ed76ef8ee3e217056285702
Merge: bcc55c6... 4c246ed...
Author: Steve French <sfrench@us.ibm.com>
Date:   Thu Aug 28 02:47:00 2008 +0000

    Merge branch 'master' of /pub/scm/linux/kernel/git/torvalds/linux-2.6

commit bcc55c6664a90146149ba0fd93052adc94287b9f
Author: Steve French <sfrench@us.ibm.com>
Date:   Wed Aug 27 21:30:22 2008 +0000

    [CIFS] Fix plaintext authentication
    
    The last eight bytes of the password field were not cleared when doing lanman plaintext password authentication. This patch fixes that.
    
    I tested it with Samba by setting password
    encryption to no in the server's smb.conf.  Other servers also can be
    configured to force plaintext authentication.    Note that plaintexti
    authentication requires setting /proc/fs/cifs/SecurityFlags to 0x30030
    on the client (enabling both LANMAN and also plaintext password support).
    Also note that LANMAN support (and thus plaintext password support) requires
    CONFIG_CIFS_WEAK_PW_HASH to be enabled in menuconfig.
    
    CC: Jeff Layton <jlayton@redhat.com>
    CC: Stable Kernel <stable@vger.kernel.org>
    Signed-off-by: Steve French <sfrench@us.ibm.com>

commit 93a1a5eb70be5cc14990b97ef2460212e32658dc
Author: Takashi Iwai <tiwai@suse.de>
Date:   Wed Aug 27 07:56:43 2008 +0200

    Revert "ALSA: hda - Added model selection for iMac 24""
    
    This reverts commit 3e0e469fa216ec70c93b1593821b759d19ee2e6b.
    
    The patch introduced a wrong detection of other intel Macs with
    ALC88* codec because they share the same PCI SSID (but have different
    codec subsystem-IDs).  See http://lkml.org/lkml/2008/8/24/143
    
    Reported-and-tested-by: Guillaume Chazarain <guichaz@gmail.com>
    Signed-off-by: Takashi Iwai <tiwai@suse.de>

commit 4eb57c98b8d2a812441b33911ca3cf9602699654
Merge: 321a058... 6b791e9...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Mon Aug 25 12:15:30 2008 +0200

    Merge branch 'release-2.6.27' of ssh://master.kernel.org/pub/scm/linux/kernel/git/ak/linux-acpi-2.6 into release-2.6.27

commit 321a0580d17e58254e48820fe15a583a6409529c
Merge: f54538c... de82ff7...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Mon Aug 25 12:05:02 2008 +0200

    Merge branch 'pnp-fix' into release-2.6.27

commit de82ff783bcb2b52353a7c99b4a8524ae739da73
Author: Bjorn Helgaas <bjorn.helgaas@hp.com>
Date:   Fri Aug 22 09:47:17 2008 -0600

    PNPACPI: ignore the producer/consumer bit for extended IRQ descriptors
    
    The Extended Interrupt descriptor has a producer/consumer bit, but
    it's not clear what that would mean, and existing BIOSes use the bit
    inconsistently.  This patch makes Linux PNPACPI ignore the bit.
    
    The ACPI spec contains examples of PCI Interrupt Link devices marked
    as ResourceProducers, but many BIOSes mark them as ResourceConsumers.
    
    I also checked with a Windows contact, who said:
    
        Windows uses only "resource consumer" when dealing with
        interrupts.  There's no useful way of looking at a resource
        producer of interrupts.
    
        ... NT-based Windows largely infers the producer/consumer stuff
        from the device type and ignores the bits in the namespace.  This
        was necessary because Windows 98 ignored them and early namespaces
        contained random junk.
    
    The reason I want to change this is because if PNPACPI devices exclude
    ResourceProducer IRQ resources, we can't write PNP drivers for those
    devices.
    
    For example, on machines such as the the HP rx7620, rx7640, rx8620,
    rx8640, and Superdome, HPET interrupts are ResourceProducers.  The
    HPET driver currently has to use acpi_bus_register_driver() and do its
    own _CRS parsing, even though it requires absolutely no ACPI-specific
    functionality.
    
    It would be better if the HPET driver were a PNP driver and took
    advantage of the _CRS parsing built into PNPACPI.
    
    This producer/consumer check was originally added here:
        http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=2b8de5f50e4a302b83ebcd5b0120621336d50bd6
    
    to fix this bug:
        http://bugzilla.kernel.org/show_bug.cgi?id=6292
    
    However, the bug was related only to memory and I/O port resources,
    where the distinction is sensible and important to Linux.  Given that
    the distinction is muddled for IRQ resources, I think it was a mistake
    to add the check there.
    
    Signed-off-by: Bjorn Helgaas <bjorn.helgaas@hp.com>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit e311be521fa9daedd8959d1a89f5e9bc5b54bb40
Author: Adrian Bunk <bunk@kernel.org>
Date:   Fri Aug 22 18:20:36 2008 +0300

    sh: fix ptrace_64.c:user_disable_single_step()
    
    This patch fixes the following compile error caused by
    commit c459dbf294b4a3d70490a468a7ca3907fb2c2f57
    (sh: ptrace single stepping cleanups.):
    
    <--  snip  -->
    
    ...
      CC      arch/sh/kernel/ptrace_64.o
    arch/sh/kernel/ptrace_64.c: In function 'user_disable_single_step':
    arch/sh/kernel/ptrace_64.c:134: error: 'regs' undeclared (first use in this function)
    arch/sh/kernel/ptrace_64.c:134: error: (Each undeclared identifier is reported only once
    arch/sh/kernel/ptrace_64.c:134: error: for each function it appears in.)
    ...
    make[2]: *** [arch/sh/kernel/ptrace_64.o] Error 1
    
    <--  snip  -->
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit a1068264522cb0a9b863d5357ade844e490bea41
Author: Adrian Bunk <bunk@kernel.org>
Date:   Fri Aug 22 18:20:29 2008 +0300

    sh64: re-add the __strnlen_user() prototype
    
    Commit 42fd3b142d8867f5b58d6fb75592cd20fd654c1b
    (sh: Initial consolidation of the _32/_64 uaccess split.)
    mistakenly removed the sh64 __strnlen_user() prototype,
    resulting in the following compile error:
    
    <--  snip  -->
    
    ...
      CC      init/main.o
    In file included from include/linux/poll.h:13,
                     from include/linux/rtc.h:113,
                     from include/linux/efi.h:19,
                     from init/main.c:43:
    arch/sh/include/asm/uaccess.h: In function 'strnlen_user':
    arch/sh/include/asm/uaccess.h:213: error: implicit declaration of function '__strnlen_user'
    ...
    make[2]: *** [init/main.o] Error 1
    
    <--  snip  -->
    
    Reported-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Adrian Bunk <bunk@kernel.org>
    Signed-off-by: Paul Mundt <lethal@linux-sh.org>

commit 2338263e2cb3cd2f77cdc3fcab0312b6c7fc02c3
Author: Henrik Rydberg <rydberg@euromail.se>
Date:   Fri Aug 22 16:18:22 2008 -0400

    Input: bcm5974 - add maintainer entry
    
    Signed-off-by: Henrik Rydberg <rydberg@euromail.se>
    Signed-off-by: Dmitry Torokhov <dtor@mail.ru>

commit f54538c3a01004a783b13f294ca39cffdc0bc0e1
Merge: f385386... f0df2d6...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Thu Aug 21 08:46:25 2008 +0200

    Merge branch 'acpica-release-fixes' into release-2.6.27

commit f0df2d6b52ad7db5edf56909509d51be66fe90be
Author: Cyrill Gorcunov <gorcunov@gmail.com>
Date:   Wed Aug 20 16:41:45 2008 -0700

    acpi: add checking for NULL early param
    
    The early_param handling function could recieve NULL pointer as argument
    in case if user didn't enter parameter value.  So we have to be ready for
    a such situation and do check for NULL pointer if needed.
    
    Signed-off-by: Cyrill Gorcunov <gorcunov@gmail.com>
    Cc: Andi Kleen <andi@firstfloor.org>
    Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit f3853863b03519a18e1e38f55089544870d4b79c
Merge: 613e5f3... 79c4375...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Thu Aug 21 08:44:21 2008 +0200

    Merge branch 'compal-fix' into release-2.6.27

commit 79c4375bf2df96d725475e0c061a4d78c3bd0884
Author: Dennis Jansen <Dennis.Jansen@web.de>
Date:   Wed Aug 20 16:44:03 2008 +0200

    ACPI: Fix typo in "Disable MWAIT via DMI on broken Compal board"
    
    This fixes a typo in commit 2a2a64714d9c40f7705c4de1e79a5b855c7211a9
    "Disable MWAIT via DMI on broken Compal board".
    
    It allows the nomwait dmi check to actually detect the Acer 5220.
    
    Signed-off-by: Dennis Jansen <dennis.jansen@web.de>
    Tested-by: Dennis Jansen <dennis.jansen@web.de>
    Acked-by: Zhao Yakui <yakui.zhao@intel.com>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit 613e5f3376e48bd48494cf780b79b97b057d49a7
Author: Milan Broz <mbroz@redhat.com>
Date:   Sat Aug 16 02:11:28 2008 +0200

    ACPI: Fix now signed module parameter.
    
    Signed-off-by: Milan Broz <mbroz@redhat.com>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit 1371c893ff9de0d57fa5b5cf0255d66b8849e13d
Author: Ming Ling <ming.m.lin@intel.com>
Date:   Mon Aug 18 04:14:59 2008 +0200

    ACPI: Change package length error to warning
    
    The condition is harmless and no need to scare the user
    
    http://bugzilla.kernel.org/show_bug.cgi?id=11245
    
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit 6b791e936c15ccace22dc2e4cb6d7d7196423ba7
Merge: 22d9aac... 924e61a...
Author: Andi Kleen <ak@linux.intel.com>
Date:   Sat Aug 16 03:25:04 2008 +0200

    Merge branch 'thermal-fix' into release-2.6.27

commit 924e61a90f61b1c22fcb51aaf3afc065399cec81
Author: Milan Broz <mbroz@redhat.com>
Date:   Sat Aug 16 02:11:28 2008 +0200

    ACPI: Fix now signed module parameter.
    
    Signed-off-by: Milan Broz <mbroz@redhat.com>
    Signed-off-by: Andi Kleen <ak@linux.intel.com>

commit cf417141cbb3a4ceb5cca15b2c1f099bd0a6603c
Author: Max Krasnyansky <maxk@qualcomm.com>
Date:   Mon Aug 11 14:33:53 2008 -0700

    sched, cpuset: rework sched domains and CPU hotplug handling (v4)
    
    This is an updated version of my previous cpuset patch on top of
    the latest mainline git.
    The patch fixes CPU hotplug handling issues in the current cpusets code.
    Namely circular locking in rebuild_sched_domains() and unsafe access to
    the cpu_online_map in the cpuset cpu hotplug handler.
    
    This version includes changes suggested by Paul Jackson (naming, comments,
    style, etc). I also got rid of the separate workqueue thread because it is
    now safe to call get_online_cpus() from workqueue callbacks.
    
    Here are some more details:
    
    rebuild_sched_domains() is the only way to rebuild sched domains
    correctly based on the current cpuset settings. What this means
    is that we need to be able to call it from different contexts,
    like cpu hotplug for example.
    Also latest scheduler code in -tip now calls rebuild_sched_domains()
    directly from functions like arch_reinit_sched_domains().
    
    In order to support that properly we need to rework cpuset locking
    rules to avoid circular dependencies, which is what this patch does.
    New lock nesting rules are explained in the comments.
    We can now safely call rebuild_sched_domains() from virtually any
    context. The only requirement is that it needs to be called under
    get_online_cpus(). This allows cpu hotplug handlers and the scheduler
    to call rebuild_sched_domains() directly.
    The rest of the cpuset code now offloads sched domains rebuilds to
    a workqueue (async_rebuild_sched_domains()).
    
    This version of the patch addresses comments from the previous review.
    I fixed all miss-formated comments and trailing spaces.
    
    I also factored out the code that builds domain masks and split up CPU and
    memory hotplug handling. This was needed to simplify locking, to avoid unsafe
    access to the cpu_online_map from mem hotplug handler, and in general to make
    things cleaner.
    
    The patch passes moderate testing (building kernel with -j 16, creating &
    removing domains and bringing cpus off/online at the same time) on the
    quad-core2 based machine.
    
    It passes lockdep checks, even with preemptable RCU enabled.
    This time I also tested in with suspend/resume path and everything is working
    as expected.
    
    Signed-off-by: Max Krasnyansky <maxk@qualcomm.com>
    Acked-by: Paul Jackson <pj@sgi.com>
    Cc: menage@google.com
    Cc: a.p.zijlstra@chello.nl
    Cc: vegard.nossum@gmail.com
    Signed-off-by: Ingo Molnar <mingo@elte.hu>

commit 24b8b44780a2c53ecb738f4a1c08d114f5eda27c
Author: Tom Tucker <tom@opengridcomputing.com>
Date:   Wed Aug 13 11:05:41 2008 -0500

    svcrdma: Fix race between svc_rdma_recvfrom thread and the dto_tasklet
    
    RDMA_READ completions are kept on a separate queue from the general
    I/O request queue. Since a separate lock is used to protect the RDMA_READ
    completion queue, a race exists between the dto_tasklet and the
    svc_rdma_recvfrom thread where the dto_tasklet sets the XPT_DATA
    bit and adds I/O to the read-completion queue. Concurrently, the
    recvfrom thread checks the generic queue, finds it empty and resets
    the XPT_DATA bit. A subsequent svc_xprt_enqueue will fail to enqueue
    the transport for I/O and cause the transport to "stall".
    
    The fix is to protect both lists with the same lock and set the XPT_DATA
    bit with this lock held.
    
    Signed-off-by: Tom Tucker <tom@opengridcomputing.com>
    Signed-off-by: J. Bruce Fields <bfields@citi.umich.edu>