Comment 1 for bug 607824

SRU Justification

Impact: The upstream process for stable tree updates is quite similar in scope to the Ubuntu SRU process, e.g., each patch has to demonstrably fix a bug, and each patch is vetted by upstream by originating either directly from Linus' tree or in a minimally backported form of that patch. The 2.6.32.16 upstream stable patch set is now available. It should be included in the Ubuntu kernel as well.

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.16
http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.32.16.bz2

TEST CASE: TBD

==========

The following 143 patches have been in 2.6.32.16:

* ixgbe: Fix return of invalid txq
* oprofile/x86: fix uninitialized counter usage during cpu hotplug
* oprofile: remove double ring buffering
* cpumask: fix compat getaffinity
* NFSD: don't report compiled-out versions as present
* sata_nv: use ata_pci_sff_activate_host() instead of ata_host_activate()
* ARCNET: Limit com20020 PCI ID matches for SOHARD cards
* rtl8180: fix tx status reporting
* Staging: add Add Sitecom WL-349 to rtl8192su
* staging: vt6655: Fix kernel BUG on driver wpa initialization
* Fix racy use of anon_inode_getfd() in perf_event.c
* posix_timer: Fix error path in timer_create
* libata: disable ATAPI AN by default
* libata: don't flush dcache on slab pages
* mutex: Fix optimistic spinning vs. BKL
* ALSA: hda: Fix model quirk for Dell M1730
* ALSA: hda: Use LPIB for Toshiba A100-259
* ALSA: hda: Use LPIB for Acer Aspire 5110
* ALSA: hda: Use LPIB for Sony VPCS11V9E
* ALSA: hda: Use LPIB for a Shuttle device
* ACPI: video: fix acpi_backlight=video
* V4L/DVB: gspca - stv06xx: Remove the 046d:08da from the stv06xx driver
* HID: Add the GYR4101US USB ID to hid-gyration
* ar9170usb: add a couple more USB IDs
* ar9170usb: fix panic triggered by undersized rxstream buffer
* USB: visor: fix memory leak
* USB: CP210x New Device IDs 11 New device IDs
* USB: kobil: fix memory leak
* USB: option: add PID for ZTE product
* USB: option.c: Add Pirelli VID/PID and indicate Pirelli's modem interface is 0xff
* USB: serial: option: add cinterion device id
* USB: option.c: OLIVETTI OLICARD100 support
* USB: ir-usb: fix double free
* USB: kl5usb105: fix memory leak
* USB: mxc: gadget: Fix bitfield for calculating maximum packet size
* USB: unusual-dev: Add bad sense flag for Appotech ax203 based picture frames
* USB: EHCI: clear PHCD before resuming
* USB: xhci: Fix issue with set interface after stall.
* USB: xhci: Fix check for room on the ring.
* USB: xHCI: Fix wrong usage of macro TRB_TYPE
* mac80211: give warning if building w/out rate ctrl algorithm
* mac80211: Fix robust management frame handling (MFP)
* mac80211: fix rts threshold check
* drivers/base/cpu.c: fix the output from /sys/devices/system/cpu/offline
* can: Fix SJA1000 command register writes on SMP systems
* PCI quirk: Disable MSI on VIA K8T890 systems
* PCI quirks: disable msi on AMD rs4xx internal gfx bridges
* PCI: Disable MSI for MCP55 on P5N32-E SLI
* virtio_net: Make delayed refill more reliable
* mm: hugetlb: fix clear_huge_page()
* powerpc: Fix handling of strncmp with zero len
* powerpc/pseries: Only call start-cpu when a CPU is stopped
* powerpc/pseries: Make query_cpu_stopped callable outside hotplug cpu
* powerpc/oprofile: fix potential buffer overrun in op_model_cell.c
* writeback: disable periodic old data writeback for !dirty_writeback_centisecs
* md/raid1: fix counting of write targets.
* md: Fix read balancing in RAID1 and RAID10 on drives > 2TB
* md: set mddev readonly flag on blkdev BLKROSET ioctl
* x86/amd-iommu: Fix suspend/resume with IOMMU
* exofs: confusion between kmap() and kmap_atomic() api
* mn10300: set ARCH_KMALLOC_MINALIGN
* m68k: set ARCH_KMALLOC_MINALIGN
* rtc-cmos: do dev_set_drvdata() earlier in the initialization
* rtc: s3c: initialize driver data before using it
* frv: set ARCH_KMALLOC_MINALIGN
* xtensa: set ARCH_KMALLOC_MINALIGN
* Blackfin: set ARCH_KMALLOC_MINALIGN
* tmpfs: insert tmpfs cache pages to inactive list at first
* mlx4_core: Fix possible chunk sg list overflow in mlx4_alloc_icm()
* ARM: 6166/1: Proper prefetch abort handling on pre-ARMv6
* ARM: 6164/1: Add kto and kfrom to input operands list.
* ARM: 6146/1: sa1111: Prevent deadlock in resume path
* ARM: 6144/1: TCM memory bug freeing bug
* ARM: VFP: Fix vfp_put_double() for d16-d31
* ASoC: Fix dB scales for WM835x
* ASoC: Fix dB scales for WM8400
* ASoC: Fix dB scales for WM8990
* hwmon: (ltc4245) Read only one GPIO pin
* signals: check_kill_permission(): don't check creds if same_thread_group()
* do_generic_file_read: clear page errors when issuing a fresh read of the page
* ipmi: handle run_to_completion properly in deliver_recv_msg()
* x86, setup: Phoenix BIOS fixup is needed on Dell Inspiron Mini 1012
* xen: ensure timer tick is resumed even on CPU driving the resume
* xen: avoid allocation causing potential swap activity on the resume path
* ALSA: hda: Use LPIB for an ASUS device
* ALSA: hda: Use mb31 quirk for an iMac model
* ALSA: hda: Use LPIB for another mainboard
* ALSA: hda: Use LPIB for ASUS M2V
* Staging: comedi - correct parameter gainlkup for DAQCard-6024E in driver ni_mio_cs.c
* clocksource: sh_cmt: compute mult and shift before registration
* ath5k: retain promiscuous setting
* ahci: add pci quirk for JMB362
* firewire: core: check for 1394a compliant IRM, fix inaccessibility of Sony camcorder
* perf_events: Fix resource leak in x86 __hw_perf_event_init()
* sata_nv: don't diddle with nIEN on mcp55
* sata_via: magic vt6421 fix for transmission problems w/ WD drives
* USB: mos7840: fix null-pointer dereference
* USB: xhci: Wait for host to start running.
* USB: xhci: Wait for controller to be ready after reset.
* USB: ftdi_sio: fix DTR/RTS line modes
* USB: cdc-acm: fix resource reclaim in error path of acm_probe
* p54usb: Add device ID for Dell WLA3310 USB
* atl1e: Allow TX checksum offload and TSO to be disabled and reenabled
* via-velocity: Give RX descriptors to the NIC later on open or MTU change
* dmfe/tulip: Let dmfe handle DM910x except for SPARC on-board chips
* Documentation/3c509: document ethtool support
* wireless: report reasonable bitrate for MCS rates through wext
* ath9k: add support for 802.11n bonded out AR2427
* wrong type for 'magic' argument in simple_fill_super()
* iwlwifi: check for aggregation frame and queue
* iwlwifi: recalculate average tpt if not current
* iwlwifi: update supported PCI_ID list for 5xx0 series
* wl1251: fix a memory leak in probe
* GFS2: Fix permissions checking for setflags ioctl()
* sctp: Fix skb_over_panic resulting from multiple invalid parameter errors (CVE-2010-1173) (v4)
* CIFS: Allow null nd (as nfs server uses) on create
* vfs: add NOFOLLOW flag to umount(2)
* l2tp: Fix oops in pppol2tp_xmit
* Btrfs: should add a permission check for setfacl
* ucc_geth: Fix empty TX queue processing
* ucc_geth: Fix netdev watchdog triggering on link changes
* ucc_geth: Fix full TX queue processing
* tipc: Fix oops on send prior to entering networked mode (v3)
* Input: psmouse - reset all types of mice before reconnecting
* KVM: s390: Fix possible memory leak of in kvm_arch_vcpu_create()
* KVM: PPC: Do not create debugfs if fail to create vcpu
* x86, paravirt: Add a global synchronization point for pvclock
* KVM: Don't allow lmsw to clear cr0.pe
* KVM: x86: Check LMA bit before set_efer
* KVM: MMU: Segregate shadow pages with different cr0.wp
* KVM: VMX: enable VMXON check with SMX enabled (Intel TXT)
* KVM: MMU: Don't read pdptrs with mmu spinlock held in mmu_alloc_roots
* KVM: Fix wallclock version writing race
* KVM: x86: Add missing locking to arch specific vcpu ioctls
* KVM: x86: Inject #GP with the right rip on efer writes
* jbd: jbd-debug and jbd2-debug should be writable
* parisc: clear floating point exception flag on SIGFPE signal
* dm snapshot: simplify sector_to_chunk expression
* KEYS: Return more accurate error codes
* KEYS: find_keyring_by_name() can gain access to a freed keyring
* qla2xxx: Disable MSI on qla24xx chips other than QLA2432.
* sctp: fix append error cause to ERROR chunk correctly
* Linux 2.6.32.16

Due to the fact that we are carrying the DRM backport from 2.6.33, all patches affecting DRM have been dropped from the 2.6.32.16 port and picked from 2.6.33.6 instead.

http://kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.33.6
http://kernel.org/pub/linux/kernel/v2.6/patch-2.6.33.6.bz2

The following 9 patches have been in 2.6.33.6:

* drm/i915: Fix 82854 PCI ID, and treat it like other 85X
* drm/i915: Reject bind_to_gtt() early if object > aperture
* drm/edid: Fix 1024x768@85Hz
* drm/radeon/kms: reset ddc_bus in object header parsing
* drm/radeon/kms/atom: fix typo in LVDS panel info parsing
* drm/radeon: r100/r200 ums: block ability for userspace app to trash 0 page and beyond
* drm/radeon: fix the r100/r200 ums block 0 page fix
* drm/i915: Rebind bo if currently bound with incorrect alignment.
* Linux 2.6.32.16+drm33.6