3.6.7-stable review

This is the start of the stable review cycle for the 3.6.7 release. There are 66 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sat Nov 17 04:09:27 UTC 2012. Anything received after that time might be too late.

The whole patch series can be found in one patch at:

	kernel.org/pub/linux/kernel/v3.0/stable-review/patch-3.6.7-rc1.gz

and the diffstat can be found below.

thanks,

greg k-h

-------------
Pseudo-Shortlog of commits:

Greg Kroah-Hartman <[email protected]>

    Linux 3.6.7-rc1

Dave Chinner <[email protected]>
xfs: fix buffer shudown reference count mismatch

Dave Chinner <[email protected]>
xfs: fix reading of wrapped log data

Benjamin Marzinski <[email protected]>
GFS2: Test bufdata with buffer locked and gfs2_log_lock held

Alex Deucher <[email protected]>
drm/radeon/si: add some missing regs to the VM reg checker

Alex Deucher <[email protected]>
drm/radeon/cayman: add some missing regs to the VM reg checker

Thomas Hellstrom <[email protected]>
drm/vmwgfx: Fix a case where the code would BUG when trying to pin GMR memory

Thomas Hellstrom <[email protected]>
drm/vmwgfx: Fix hibernation device reset

Chris Ball <[email protected]>
mmc: sdhci: fix NULL dereference in sdhci_request() tuning

Guennadi Liakhovetski <[email protected]>
mmc: sh_mmcif: fix use after free

Thomas Gleixner <[email protected]>
futex: Handle futex_pi OWNER_DIED take over correctly

Hannes Frederic Sowa <[email protected]>
ipv6: send unsolicited neighbour advertisements to all-nodes

Eric Leblond <[email protected]>
af-packet: fix oops when socket is not present

Cyrill Gorcunov <[email protected]>
net: inet_diag -- Return error code if protocol handler is missed

Pavel Emelyanov <[email protected]>
tcp-repair: Handle zero-length data put in rcv queue

Tom Parkin <[email protected]>
l2tp: fix oops in l2tp_eth_create() error path

Peter Senna Tschudin <[email protected]>
drivers/net/ethernet/nxp/lpc_eth.c: Call mdiobus_unregister before mdiobus_free

Jesper Dangaard Brouer <[email protected]>
net: fix divide by zero in tcp algorithm illinois

Hemant Kumar <[email protected]>
net: usb: Fix memory leak on Tx data path

Li RongQing <[email protected]>
ipv6: Set default hoplimit as zero.

Eric Dumazet <[email protected]>
net: fix secpath kmemleak

Eric Dumazet <[email protected]>
tcp: fix FIONREAD/SIOCINQ

Eric Dumazet <[email protected]>
netlink: use kfree_rcu() in netlink_release()

Steffen Klassert <[email protected]>
ipv4: Fix flushing of cached routing informations

Zijie Pan <[email protected]>
sctp: fix call to SCTP_CMD_PROCESS_SACK in sctp_cmd_interpreter()

Takashi Iwai <[email protected]>
ALSA: Avoid endless sleep after disconnect

Takashi Iwai <[email protected]>
ALSA: Add a reference counter to card instance

Takashi Iwai <[email protected]>
ALSA: usb-audio: Fix races at disconnection in mixer_quirks.c

Takashi Iwai <[email protected]>
ALSA: usb-audio: Use rwsem for disconnect protection

Takashi Iwai <[email protected]>
ALSA: usb-audio: Fix races at disconnection

Takashi Iwai <[email protected]>
ALSA: PCM: Fix some races at disconnection

Jean Delvare <[email protected]>
hwmon: (w83627ehf) Force initial bank selection

Ilija Hadzic <[email protected]>
drm: set dev_mapping before calling drm_open_helper

Ilija Hadzic <[email protected]>
drm: restore open_count if drm_setup fails

Linus Lüssing <[email protected]>
batman-adv: Fix broadcast packet CRC calculation

NeilBrown <[email protected]>
NFS: fix bug in legacy DNS resolver.

Bryan Schumaker <[email protected]>
NFS: Wait for session recovery to finish before returning

Trond Myklebust <[email protected]>
NFSv4.1: We must release the sequence id when we fail to get a session slot

Trond Myklebust <[email protected]>
NFSv4: nfs4_locku_done must release the sequence id

Ben Hutchings <[email protected]>

    nfs: Show original device name verbatim in /proc/*/mount{s,info}

Scott Mayhew <[email protected]>
nfsv3: Make v3 mounts fail with ETIMEDOUTs instead EIO on mountd timeouts

Antonio Quartulli <[email protected]>
mac80211: fix SSID copy on IBSS JOIN

Johannes Berg <[email protected]>
mac80211: make sure data is accessible in EAPOL check

Johannes Berg <[email protected]>
mac80211: verify that skb data is present

Johannes Berg <[email protected]>
mac80211: check management frame header length

Chris Wilson <[email protected]>
drm/i915: Only kick out vesafb if we takeover the fbcon with KMS

Daniel Vetter <[email protected]>

    drm/i915: fix overlay on i830M

Daniel Vetter <[email protected]>
drm/i915: clear the entire sdvo infoframe buffer

Dave Airlie <[email protected]>

    drm/udl: fix stride issues scanning out stride != width*bpp

Egbert Eich <[email protected]>
DRM/Radeon: Fix Load Detection on legacy primary DAC.

Javier Cardona <[email protected]>
mac80211: don't inspect Sequence Control field on control frames

Javier Cardona <[email protected]>
mac80211: Only process mesh config header on frames that RA_MATCH

Johannes Berg <[email protected]>
mac80211: use blacklist for duplicate IE check

Johannes Berg <[email protected]>
wireless: drop invalid mesh address extension frames

Felix Fietkau <[email protected]>
cfg80211: fix antenna gain handling

Nicholas Bellinger <[email protected]>
target: Re-add explict zeroing of INQUIRY bounce buffer memory

Steve Hodgson <[email protected]>
target: Fix incorrect usage of nested IRQ spinlocks in ABORT_TASK path

Roland Dreier <[email protected]>
iscsi-target: Fix missed wakeup race in TX thread

Roland Dreier <[email protected]>
target: Avoid integer overflow in se_dev_align_max_sectors()

Roland Dreier <[email protected]>
target: Don't return success from module_init() if setup fails

Stanislaw Gruszka <[email protected]>
rt2800: validate step value for temperature compensation

Sven Eckelmann <[email protected]>
ath9k: Test for TID only in BlockAcks while checking tx status

Felix Fietkau <[email protected]>
ath9k: fix stale pointers potentially causing access to free'd skbs

Rolf Eike Beer <[email protected]>
Input: tsc40 - remove wrong announcement of pressure support

Jacob Keller <[email protected]>
ixgbe: PTP get_ts_info missing software support

Konrad Rzeszutek Wilk <[email protected]>
xen/mmu: Use Xen specific TLB flush instead of the generic one.

David Vrabel <[email protected]>
xen/gntdev: don't leak memory from IOCTL_GNTDEV_MAP_GRANT_REF

-------------

Diffstat:

 Makefile                                         |  4 +-
 arch/x86/xen/mmu.c                               | 21 ++++++-
 drivers/gpu/drm/drm_fops.c                       | 44 ++++++++++-----
 drivers/gpu/drm/i915/i915_dma.c                  |  3 +-
 drivers/gpu/drm/i915/intel_overlay.c             | 14 ++++-
 drivers/gpu/drm/i915/intel_sdvo.c                | 62 +++++++++++++-------
 drivers/gpu/drm/i915/intel_sdvo_regs.h           |  2 +
 drivers/gpu/drm/radeon/evergreen_cs.c            |  3 +
 drivers/gpu/drm/radeon/evergreend.h              |  4 ++
 drivers/gpu/drm/radeon/radeon_legacy_encoders.c  |  1 +
 drivers/gpu/drm/radeon/si.c                      |  1 +
 drivers/gpu/drm/radeon/sid.h                     |  1 +
 drivers/gpu/drm/udl/udl_drv.h                    |  2 +-
 drivers/gpu/drm/udl/udl_fb.c                     | 12 ++--
 drivers/gpu/drm/udl/udl_transfer.c               |  5 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_dmabuf.c           |  2 +-
 drivers/gpu/drm/vmwgfx/vmwgfx_drv.c              |  5 ++
 drivers/hwmon/w83627ehf.c                        |  1 +
 drivers/input/touchscreen/tsc40.c                |  1 -
 drivers/mmc/host/sdhci.c                         | 23 ++++----
 drivers/mmc/host/sh_mmcif.c                      |  2 +-
 drivers/net/ethernet/intel/ixgbe/ixgbe_ethtool.c |  3 +
 drivers/net/ethernet/nxp/lpc_eth.c               |  1 +
 drivers/net/usb/usbnet.c                         |  3 +
 drivers/net/wireless/ath/ath9k/xmit.c            | 10 +++-
 drivers/net/wireless/rt2x00/rt2800lib.c          |  2 +-
 drivers/target/iscsi/iscsi_target.c              |  4 +-
 drivers/target/iscsi/iscsi_target_core.h         |  1 +
 drivers/target/iscsi/iscsi_target_login.c        |  1 +
 drivers/target/iscsi/iscsi_target_util.c         | 22 +++++++-
 drivers/target/iscsi/iscsi_target_util.h         |  1 +
 drivers/target/target_core_configfs.c            |  3 +-
 drivers/target/target_core_device.c              | 18 +++---
 drivers/target/target_core_spc.c                 |  2 +
 drivers/target/target_core_tmr.c                 |  6 +-
 drivers/xen/gntdev.c                             | 36 ++++++------
 fs/gfs2/lops.c                                   | 14 +----
 fs/gfs2/trans.c                                  |  8 +++
 fs/nfs/dns_resolve.c                             |  5 +-
 fs/nfs/internal.h                                |  5 +-
 fs/nfs/mount_clnt.c                              |  2 +-
 fs/nfs/namespace.c                               | 19 +++++--
 fs/nfs/nfs4namespace.c                           |  3 +-
 fs/nfs/nfs4proc.c                                | 40 ++++++++-----
 fs/nfs/super.c                                   |  2 +-
 fs/xfs/xfs_buf_item.c                            | 18 ++++++
 fs/xfs/xfs_log_recover.c                         |  2 +-
 include/net/cfg80211.h                           |  9 +++
 include/sound/core.h                             |  3 +
 include/trace/events/xen.h                       |  8 +++
 kernel/futex.c                                   | 41 +++++++-------
 net/batman-adv/bridge_loop_avoidance.c           |  8 +--
 net/batman-adv/routing.c                         |  8 ++-
 net/core/dev.c                                   |  2 +-
 net/core/skbuff.c                                |  6 +-
 net/ipv4/inet_diag.c                             |  5 +-
 net/ipv4/route.c                                 |  9 ++-
 net/ipv4/tcp.c                                   |  8 +--
 net/ipv4/tcp_illinois.c                          |  8 ++-
 net/ipv4/tcp_input.c                             |  3 +
 net/ipv6/ndisc.c                                 |  3 +-
 net/ipv6/route.c                                 |  4 +-
 net/l2tp/l2tp_eth.c                              |  1 +
 net/mac80211/ibss.c                              |  2 +-
 net/mac80211/rx.c                                | 72 ++++++++++++++++++------
 net/mac80211/util.c                              | 42 +++++++++++---
 net/netlink/af_netlink.c                         | 19 +++++--
 net/sctp/sm_sideeffect.c                         |  3 +-
 net/wireless/core.c                              |  3 +-
 net/wireless/util.c                              | 14 +++--
 sound/core/compress_offload.c                    |  9 ++-
 sound/core/control.c                             |  5 ++
 sound/core/hwdep.c                               | 12 +++-
 sound/core/init.c                                | 50 +++++++++-------
 sound/core/oss/mixer_oss.c                       | 10 +++-
 sound/core/oss/pcm_oss.c                         |  6 ++
 sound/core/pcm.c                                 | 13 ++++-
 sound/core/pcm_native.c                          | 33 +++++++++--
 sound/core/rawmidi.c                             | 26 ++++++++-
 sound/core/sound.c                               | 11 +++-
 sound/core/sound_oss.c                           | 10 +++-
 sound/usb/card.c                                 | 12 ++--
 sound/usb/card.h                                 |  1 +
 sound/usb/mixer.c                                | 65 +++++++++++++--------
 sound/usb/mixer_quirks.c                         | 58 ++++++++++++++++---
 sound/usb/pcm.c                                  | 49 +++++++++++-----
 sound/usb/proc.c                                 |  4 +-
 sound/usb/stream.c                               |  1 +
 sound/usb/usbaudio.h                             |  2 +-
 89 files changed, 794 insertions(+), 308 deletions(-)