<feed xmlns='http://www.w3.org/2005/Atom'>
<title>linux.git/drivers/infiniband/core, branch v2.6.14</title>
<subtitle>Linux kernel source tree</subtitle>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/'/>
<entry>
<title>[PATCH] gfp flags annotations - part 1</title>
<updated>2005-10-08T22:00:57+00:00</updated>
<author>
<name>Al Viro</name>
<email>viro@ftp.linux.org.uk</email>
</author>
<published>2005-10-07T06:46:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=dd0fc66fb33cd610bc1a5db8a5e232d34879b4d7'/>
<id>dd0fc66fb33cd610bc1a5db8a5e232d34879b4d7</id>
<content type='text'>
 - added typedef unsigned int __nocast gfp_t;

 - replaced __nocast uses for gfp flags with gfp_t - it gives exactly
   the same warnings as far as sparse is concerned, doesn't change
   generated code (from gcc point of view we replaced unsigned int with
   typedef) and documents what's going on far better.

Signed-off-by: Al Viro &lt;viro@zeniv.linux.org.uk&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@osdl.org&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
 - added typedef unsigned int __nocast gfp_t;

 - replaced __nocast uses for gfp flags with gfp_t - it gives exactly
   the same warnings as far as sparse is concerned, doesn't change
   generated code (from gcc point of view we replaced unsigned int with
   typedef) and documents what's going on far better.

Signed-off-by: Al Viro &lt;viro@zeniv.linux.org.uk&gt;
Signed-off-by: Linus Torvalds &lt;torvalds@osdl.org&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[IB] uverbs: Close some exploitable races</title>
<updated>2005-09-26T20:01:03+00:00</updated>
<author>
<name>Roland Dreier</name>
<email>rolandd@cisco.com</email>
</author>
<published>2005-09-26T20:01:03+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=63c47c286d062d93e0501d60797274c84a587e97'/>
<id>63c47c286d062d93e0501d60797274c84a587e97</id>
<content type='text'>
Al Viro pointed out that the current IB userspace verbs interface
allows userspace to cause mischief by closing file descriptors before
we're ready, or issuing the same command twice at the same time.  This
patch closes those races, and fixes other obvious problems such as a
module reference leak.

Some other interface bogosities will require an ABI change to fix
properly, so I'm deferring those fixes until 2.6.15.

Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Al Viro pointed out that the current IB userspace verbs interface
allows userspace to cause mischief by closing file descriptors before
we're ready, or issuing the same command twice at the same time.  This
patch closes those races, and fixes other obvious problems such as a
module reference leak.

Some other interface bogosities will require an ABI change to fix
properly, so I'm deferring those fixes until 2.6.15.

Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[IB] Fix RMPP receive length calculation</title>
<updated>2005-09-21T19:33:09+00:00</updated>
<author>
<name>Hal Rosenstock</name>
<email>halr@voltaire.com</email>
</author>
<published>2005-09-21T19:33:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=f2065e4242e5078d53c521b973c5cd4eae91eca2'/>
<id>f2065e4242e5078d53c521b973c5cd4eae91eca2</id>
<content type='text'>
Based on simplification idea from Sean Hefty &lt;sean.hefty@intel.com&gt;

Signed-off-by: Hal Rosenstock &lt;halr@voltaire.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Based on simplification idea from Sean Hefty &lt;sean.hefty@intel.com&gt;

Signed-off-by: Hal Rosenstock &lt;halr@voltaire.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[IB] Add MAD data field size definitions</title>
<updated>2005-09-21T19:31:26+00:00</updated>
<author>
<name>Sean Hefty</name>
<email>sean.hefty@intel.com</email>
</author>
<published>2005-09-21T19:31:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=972d512a17c1bb7c4b784a9da2ca75745fcc6989'/>
<id>972d512a17c1bb7c4b784a9da2ca75745fcc6989</id>
<content type='text'>
Clean up code by using enums instead of hard-coded magic numbers.

Signed-off-by: Sean Hefty &lt;sean.hefty@intel.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Clean up code by using enums instead of hard-coded magic numbers.

Signed-off-by: Sean Hefty &lt;sean.hefty@intel.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[PATCH] IB: Fix data length for RMPP SA sends</title>
<updated>2005-09-19T20:51:01+00:00</updated>
<author>
<name>Hal Rosenstock</name>
<email>halr@voltaire.com</email>
</author>
<published>2005-09-19T20:51:01+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=eff4c654b1a4a5e5493fbdc3affa6dd48765c085'/>
<id>eff4c654b1a4a5e5493fbdc3affa6dd48765c085</id>
<content type='text'>
We need to subtract off the header length from our payload
length when sending multi-packet SA messages.

Signed-off-by: Hal Rosenstock &lt;halr@voltaire.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
We need to subtract off the header length from our payload
length when sending multi-packet SA messages.

Signed-off-by: Hal Rosenstock &lt;halr@voltaire.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge master.kernel.org:/pub/scm/linux/kernel/git/roland/infiniband </title>
<updated>2005-09-11T17:16:07+00:00</updated>
<author>
<name>Linus Torvalds</name>
<email>torvalds@g5.osdl.org</email>
</author>
<published>2005-09-11T17:16:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=9fe66dfd8846706ff11ed7990d06c92644973bd8'/>
<id>9fe66dfd8846706ff11ed7990d06c92644973bd8</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>[PATCH] IB: fix CM use-after-free</title>
<updated>2005-09-10T03:52:00+00:00</updated>
<author>
<name>Roland Dreier</name>
<email>roland@eddore.topspincom.com</email>
</author>
<published>2005-09-10T03:52:00+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=1b205c2d2464bfecbba80227e74b412596dc5521'/>
<id>1b205c2d2464bfecbba80227e74b412596dc5521</id>
<content type='text'>
If the CM REQ handling function gets to error2, then it frees
cm_id_priv-&gt;timewait_info.  But the next line goes through
ib_destroy_cm_id() -&gt; ib_send_cm_rej() -&gt; cm_reset_to_idle(),
which ends up calling cm_cleanup_timewait(), which dereferences the
pointer we just freed.  Make sure we clear cm_id_priv-&gt;timewait_info
after freeing it, so that doesn't happen.

Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
If the CM REQ handling function gets to error2, then it frees
cm_id_priv-&gt;timewait_info.  But the next line goes through
ib_destroy_cm_id() -&gt; ib_send_cm_rej() -&gt; cm_reset_to_idle(),
which ends up calling cm_cleanup_timewait(), which dereferences the
pointer we just freed.  Make sure we clear cm_id_priv-&gt;timewait_info
after freeing it, so that doesn't happen.

Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[PATCH] IB CM: support CM redir</title>
<updated>2005-09-10T01:23:32+00:00</updated>
<author>
<name>John Kingman</name>
<email>kingman@storagegear.com</email>
</author>
<published>2005-09-10T01:23:32+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=354ba39cf96e439149541acf3c6c7c0df0a3ef25'/>
<id>354ba39cf96e439149541acf3c6c7c0df0a3ef25</id>
<content type='text'>
Changes to CM to support CM and port redirection (REJ reason 24).

Signed-off-by: John Kingman &lt;kingman &lt;at&gt; storagegear.com&gt;
Signed-off-by: Sean Hefty &lt;sean.hefty@intel.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Changes to CM to support CM and port redirection (REJ reason 24).

Signed-off-by: John Kingman &lt;kingman &lt;at&gt; storagegear.com&gt;
Signed-off-by: Sean Hefty &lt;sean.hefty@intel.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>Make sure that userspace does not retrieve stale asynchronous or</title>
<updated>2005-09-09T22:55:08+00:00</updated>
<author>
<name>Roland Dreier</name>
<email>roland@eddore.topspincom.com</email>
</author>
<published>2005-09-09T22:55:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=63aaf647529e8a56bdf31fd8f2979d4371c6a332'/>
<id>63aaf647529e8a56bdf31fd8f2979d4371c6a332</id>
<content type='text'>
completion events after destroying a CQ, QP or SRQ.  We do this by
sweeping the event lists before returning from a destroy calls, and
then return the number of events already reported before the destroy
call.  This allows userspace wait until it has processed all events
for an object returned from the kernel before it frees its context for
the object.

The ABI of the destroy CQ, destroy QP and destroy SRQ commands has to
change to return the event count, so bump the ABI version from 1 to 2.
The userspace libibverbs library has already been updated to handle
both the old and new ABI versions.

Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
completion events after destroying a CQ, QP or SRQ.  We do this by
sweeping the event lists before returning from a destroy calls, and
then return the number of events already reported before the destroy
call.  This allows userspace wait until it has processed all events
for an object returned from the kernel before it frees its context for
the object.

The ABI of the destroy CQ, destroy QP and destroy SRQ commands has to
change to return the event count, so bump the ABI version from 1 to 2.
The userspace libibverbs library has already been updated to handle
both the old and new ABI versions.

Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
<entry>
<title>[PATCH] IB: Move SA attributes to ib_sa.h</title>
<updated>2005-09-09T22:24:04+00:00</updated>
<author>
<name>Hal Rosenstock</name>
<email>halr@voltaire.com</email>
</author>
<published>2005-09-09T22:24:04+00:00</published>
<link rel='alternate' type='text/html' href='https://git.tavy.me/linux.git/commit/?id=fbed8eee70cf7e11fbf231afafc0ccb313acc62e'/>
<id>fbed8eee70cf7e11fbf231afafc0ccb313acc62e</id>
<content type='text'>
SA: Move SA attributes to ib_sa.h so are accessible to more than
sa_query.c. Also, remove deprecated attributes and add one missing one.

Signed-off-by: Hal Rosenstock &lt;halr@voltaire.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
SA: Move SA attributes to ib_sa.h so are accessible to more than
sa_query.c. Also, remove deprecated attributes and add one missing one.

Signed-off-by: Hal Rosenstock &lt;halr@voltaire.com&gt;
Signed-off-by: Roland Dreier &lt;rolandd@cisco.com&gt;
</pre>
</div>
</content>
</entry>
</feed>
