Adrian Bunk said, This patch schedules obsolete OSS drivers (with ALSA drivers that support the same hardware) for removal. Thomas Sailer approved of the patch, while Jeff Garzik cautioned that before this patch was applied, it should be confirmed that the ALSA drivers really did support the same hardware in each case. He confirmed the via82cxxx driver himself, but said the i810_audio driver was not ready, because ALSA doesn't have all the PCI IDs (which must be verified -- you cannot just add the PCI IDs for some hardware). Adrian confirmed that he had tried to confirm each driver, though he admitted that he could have missed something.

Elsewhere, Lee Revell asked how many obsolete OSS drivers were included in Adrian's patch, and Adrian replied he hadn't counted them all.

Pavel Machek said, This adds support for powering Zaurus's video up and down. PDA without screen is kind of useless, so it is quite important... I'll have to figure out how to really control the frontlight, because LCD without that is quite hard to read. Andrew Morton asked if Pavel would maintain this code, and Pavel agreed.

Andrew Morton announced Linux 2.6.13-rc3-mm2, saying:

Sam Ravnborg asked if the mailing list were archived anywhere, and Andrew replied, Not to my knowledge.

Linus Torvalds announced Linux 2.6.13-rc4, saying:

Jesper Juhl said, For the bennefit of those of us who were not at LKS, could someone elaborate a bit on "the new release process" ? Andrew Morton gave a link to a Linux Weekly News summary of the process.

Brian Schau said:

        drivers/usb/Makefile                    (1 line)
        drivers/usb/input/Kconfig               (10 lines)
        drivers/usb/input/Makefile              (1 line)
        drivers/usb/input/hid-core.c            (2 lines)
        drivers/usb/input/wsl.c                 (224 lines)

Pavel Machek replied, Idea is good... but why don't you simply use bluetooth (built into many notebooks) and bluetooth-enabled phone? Probably could be done in userspace, too :-). Alistair John Strachan replied:

But Brian also replied to Pavel, saying:

Given the existence of the hardware, Brian's work mad sense to Pavel, and the thread petered out.

Jan Engelhardt said, I found out that you cannot mount an exported squash fs. The exports(5) fsid= parameter does not help it [like it did with unionfs]. Phillip Lougher replied, The exports(5) man page says fsid=num is necessary for filesystems on non-block devices - I don't know whether this includes loopback filesystems. Have you tried exporting a Squashfs filesystem mounted on a real block device? Jan said, Loopback is a real block device, and no, fsid= does not help it. I have talked with the unionfs people, because it works for them. After a short flash of idea and comparison, it turns out that squashfs is missing sb->s_export->get_parent (the only requirement as it seems). Includes that you have sb->s_export non-null, of course. sb->s_export can be set within fill_super(). Phillip replied, Ok, thanks. I'll try and get a fix for it in the next release.

Jim Keniston said, The enclosed patch creates Documentation/kprobes.txt, a guide to using the existing Kprobes facility for dynamic kernel instrumentation.

Chris Wright said:

The changelog entries were included at the top of each patch:

• [PATCH] kbuild: build TAGS problem with O=

  make O=/dir TAGS

  fails with:

  MAKE TAGS
  find: security/selinux/include: No such file or directory
  find: include: No such file or directory
  find: include/asm-i386: No such file or directory
  find: include/asm-generic: No such file or directory

  The problem is in this line:
  ifeq ($(KBUILD_OUTPUT),)

  KBUILD_OUTPUT is not defined (ever) after make reruns itself. This line is used in the TAGS, tags, and cscope makes.

• Correct handling of fc_remote_port_add() failure case.

  Immediately return if fc_remote_port_add() fails to allocate resources for the rport. Original code would result in NULL pointer dereference upon failure.

• If bailing out because there is nothing to receive in rp_do_receive(), tty_ldisc_deref is not called. Failure to do so increases the ref count=20 and causes release_dev() to hang since it can't get the ref count to 0.

• malicious 32bit app can have an elf section at 0xffffe000. During exec of this app, we will have a memory leak as insert_vm_struct() is not checking for return value in syscall32_setup_pages() and thus not freeing the vma allocated for the vsyscall page.

  Check the return value and free the vma incase of failure.

• This is the code to load packet data into a register:

                          k = fentry->k;
                          if (k < 0) {
  ...
                          } else {
                                  u32 _tmp, *p;
                                  p = skb_header_pointer(skb, k, 4, &_tmp);
                                  if (p != NULL) {
                                          A = ntohl(*p);
                                          continue;
                                  }
                          }

  skb_header_pointer checks if the requested data is within the linear area:

          int hlen = skb_headlen(skb);
  
          if (offset + len <= hlen)
                  return skb->data + offset;

  When offset is within [INT_MAX-len+1..INT_MAX] the addition will result in a negative number which is <= hlen.

  I couldn't trigger a crash on my AMD64 with 2GB of memory, but a coworker tried on his x86 machine and it crashed immediately.

  This patch fixes the check in skb_header_pointer to handle large positive offsets similar to skb_copy_bits. Invalid data can still be accessed using negative offsets (also similar to skb_copy_bits), anyone using negative offsets needs to verify them himself.

  Thanks to Thomas V?gtle <thomas.voegtle@coreworks.de> for verifying the problem by crashing his machine and providing me with an Oops.

• [NETFILTER]: Fix deadlock in ip6_queue

  Already fixed in ip_queue, ip6_queue was missed.

• [NETFILTER]: Fix potential memory corruption in NAT code (aka memory NAT)

  The portptr pointing to the port in the conntrack tuple is declared static, which could result in memory corruption when two packets of the same protocol are NATed at the same time and one conntrack goes away.

• [NETFILTER]: Wait until all references to ip_conntrack_untracked are dropped on unload

  Fixes a crash when unloading ip_conntrack.

• [XFRM]: Fix possible overflow of sock->sk_policy

  Spotted by, and original patch by, Balazs Scheidler.

• [PATCH] bio_clone fix

  Fix bug introduced in 2.6.11-rc2: when we clone a BIO we need to copy over the current index into it as well.

  It corrupts data with some MD setups.

  See http://bugzilla.kernel.org/show_bug.cgi?id=4946

  Huuuuuuuuge thanks to Matthew Stapleton <matthew4196@gmail.com> for doggedly chasing this one down.

• sys_get_thread_area does not memset to 0 its struct user_desc info before copying it to user space... since sizeof(struct user_desc) is 16 while the actual datas which are filled are only 12 bytes + 9 bits (across the bitfields), there is a (small) information leak.i

  This was already committed to Linus' repository.

• [VLAN]: Fix early vlan adding leads to not functional device

  OK, I can see what's happening here. eth0 doesn't detect link-up until after a few seconds, so when the vlan interface is opened immediately after eth0 has been opened, it inherits the link-down state. Subsequently the vlan interface is never properly activated and are thus unable to transmit any packets.

  dev->state bits are not supposed to be manipulated directly. Something similar is probably needed for the netif_device_present() bit, although I don't know how this is meant to work for a virtual device.

• powernow-k8 requires that a data structure for each core be created in the _cpu_init function call. The cpufreq infrastructure doesn't call _cpu_init for the second core in each processor. Some systems crashed when _get was called with an odd-numbered core because it tried to dereference a NULL pointer since the data structure had not been created.

  The attached patch solves the problem by initializing data structures for all shared cores in the _cpu_init function. It should apply to 2.6.12-rc6 and has been tested by AMD and Sun.

Several people posted their approval of various patches; no one had any objections.

Adrian Bunk asked:

Tvrtko A. Ursulin replied, It probably won't help you much, but I had the same problem few months ago. There was a bug in smbfs which I tried to discuss with someone, and after failing to contact the maintainer, I sent the fix to Linus. I don't think even he managed to get a response from Urban or someone else. The fix went in so I stopped chasing it. So it looks like smbfs is not maintained.