Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/longterm/longterm-queue-2.6.32

Conflicts:
	queue-2.6.32/series

48 files changed, 578 insertions, 71 deletions

diff --git a/queue-2.6.32/asoc-fix-blackfin-i2s-_pointer-implementation-return-in.patch b/queue-2.6.32/asoc-fix-blackfin-i2s-_pointer-implementation-return-in.patch
new file mode 100644
index 0000000..fd4ecf1
--- /dev/null
+++ b/queue-2.6.32/asoc-fix-blackfin-i2s-_pointer-implementation-return-in.patch
@@ -0,0 +1,49 @@
+From e999dc50404d401150a5429b6459473a691fd1a0 Mon Sep 17 00:00:00 2001
+From: Mark Brown <broonie@opensource.wolfsonmicro.com>
+Date: Mon, 13 Jun 2011 12:14:07 +0100
+Subject: ASoC: Fix Blackfin I2S _pointer() implementation return in bounds values
+
+From: Mark Brown <broonie@opensource.wolfsonmicro.com>
+
+commit e999dc50404d401150a5429b6459473a691fd1a0 upstream.
+
+The Blackfin DMA controller can report one frame beyond the end of the
+buffer in the wraparound case but ALSA requires that the pointer always
+be in the buffer. Do the wraparound to handle this. A similar bug is
+likely to apply to the other Blackfin PCM drivers but the code is less
+obvious to inspection and I don't have a user to test.
+
+Reported-by: Kieran O'Leary <Kieran.O'Leary@wolfsonmicro.com>
+Acked-by: Liam Girdwood <lrg@ti.com>
+Signed-off-by: Mark Brown <broonie@opensource.wolfsonmicro.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ sound/soc/blackfin/bf5xx-i2s-pcm.c |   13 +++++++++++--
+ 1 file changed, 11 insertions(+), 2 deletions(-)
+
+--- a/sound/soc/blackfin/bf5xx-i2s-pcm.c
++++ b/sound/soc/blackfin/bf5xx-i2s-pcm.c
+@@ -139,11 +139,20 @@ static snd_pcm_uframes_t bf5xx_pcm_point
+ 	pr_debug("%s enter\n", __func__);
+ 	if (substream->stream == SNDRV_PCM_STREAM_PLAYBACK) {
+ 		diff = sport_curr_offset_tx(sport);
+-		frames = bytes_to_frames(substream->runtime, diff);
+ 	} else {
+ 		diff = sport_curr_offset_rx(sport);
+-		frames = bytes_to_frames(substream->runtime, diff);
+ 	}
++
++	/*
++	 * TX at least can report one frame beyond the end of the
++	 * buffer if we hit the wraparound case - clamp to within the
++	 * buffer as the ALSA APIs require.
++	 */
++	if (diff == snd_pcm_lib_buffer_bytes(substream))
++		diff = 0;
++
++	frames = bytes_to_frames(substream->runtime, diff);
++
+ 	return frames;
+ }
+ 
diff --git a/queue-2.6.32/ath9k-fix-suspend-resume-when-no-interface-is-up.patch b/queue-2.6.32/ath9k-fix-suspend-resume-when-no-interface-is-up.patch
deleted file mode 100644
index 8b29b22..0000000
--- a/queue-2.6.32/ath9k-fix-suspend-resume-when-no-interface-is-up.patch
+++ /dev/null
@@ -1,36 +0,0 @@
-From c31eb8e926835582cd186b33a7a864880a4c0c79 Mon Sep 17 00:00:00 2001
-From: Rajkumar Manoharan <rmanohar@qca.qualcomm.com>
-Date: Tue, 28 Jun 2011 18:21:19 +0530
-Subject: ath9k: Fix suspend/resume when no interface is UP
-
-From: Rajkumar Manoharan <rmanohar@qca.qualcomm.com>
-
-commit c31eb8e926835582cd186b33a7a864880a4c0c79 upstream.
-
-When no interface has been brought up, the chip's power
-state continued as AWAKE. So during resume, the chip never
-been powered up.
-
-Signed-off-by: Rajkumar Manoharan <rmanohar@qca.qualcomm.com>
-Signed-off-by: John W. Linville <linville@tuxdriver.com>
-Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
-
----
- drivers/net/wireless/ath/ath9k/pci.c |    6 ++++++
- 1 file changed, 6 insertions(+)
-
---- a/drivers/net/wireless/ath/ath9k/pci.c
-+++ b/drivers/net/wireless/ath/ath9k/pci.c
-@@ -276,6 +276,12 @@ static int ath_pci_resume(struct pci_dev
- 			    AR_GPIO_OUTPUT_MUX_AS_OUTPUT);
- 	ath9k_hw_set_gpio(sc->sc_ah, sc->sc_ah->led_pin, 1);
- 
-+	/* The device has to be moved to FULLSLEEP forcibly.
-+	 * Otherwise the chip never moved to full sleep,
-+	 * when no interface is up.
-+	 */
-+	ath9k_hw_setpower(sc->sc_ah, ATH9K_PM_FULL_SLEEP);
-+
- 	return 0;
- }
- 
diff --git a/queue-2.6.32/bttv-fix-s_tuner-for-radio.patch b/queue-2.6.32/bttv-fix-s_tuner-for-radio.patch
new file mode 100644
index 0000000..0f5264c
--- /dev/null
+++ b/queue-2.6.32/bttv-fix-s_tuner-for-radio.patch
@@ -0,0 +1,32 @@
+From a024c1a6b274e11596d124619e43c25560f64c01 Mon Sep 17 00:00:00 2001
+From: Hans Verkuil <hans.verkuil@cisco.com>
+Date: Sun, 12 Jun 2011 07:02:43 -0300
+Subject: [media] bttv: fix s_tuner for radio
+
+From: Hans Verkuil <hans.verkuil@cisco.com>
+
+commit a024c1a6b274e11596d124619e43c25560f64c01 upstream.
+
+Fix typo: g_tuner should have been s_tuner.
+
+Tested with a bttv card.
+
+Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ drivers/media/video/bt8xx/bttv-driver.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/drivers/media/video/bt8xx/bttv-driver.c
++++ b/drivers/media/video/bt8xx/bttv-driver.c
+@@ -3532,7 +3532,7 @@ static int radio_s_tuner(struct file *fi
+ 	if (0 != t->index)
+ 		return -EINVAL;
+ 
+-	bttv_call_all(btv, tuner, g_tuner, t);
++	bttv_call_all(btv, tuner, s_tuner, t);
+ 	return 0;
+ }
+ 
diff --git a/queue-2.6.32/fs-partitions-efi.c-corrupted-guid-partition-tables-can-cause-kernel-oops.patch b/queue-2.6.32/fs-partitions-efi.c-corrupted-guid-partition-tables-can-cause-kernel-oops.patch
new file mode 100644
index 0000000..7df6df2
--- /dev/null
+++ b/queue-2.6.32/fs-partitions-efi.c-corrupted-guid-partition-tables-can-cause-kernel-oops.patch
@@ -0,0 +1,61 @@
+From 3eb8e74ec72736b9b9d728bad30484ec89c91dde Mon Sep 17 00:00:00 2001
+From: Timo Warns <Warns@pre-sense.de>
+Date: Thu, 26 May 2011 16:25:57 -0700
+Subject: fs/partitions/efi.c: corrupted GUID partition tables can cause kernel oops
+
+From: Timo Warns <Warns@pre-sense.de>
+
+commit 3eb8e74ec72736b9b9d728bad30484ec89c91dde upstream.
+
+The kernel automatically evaluates partition tables of storage devices.
+The code for evaluating GUID partitions (in fs/partitions/efi.c) contains
+a bug that causes a kernel oops on certain corrupted GUID partition
+tables.
+
+This bug has security impacts, because it allows, for example, to
+prepare a storage device that crashes a kernel subsystem upon connecting
+the device (e.g., a "USB Stick of (Partial) Death").
+
+	crc = efi_crc32((const unsigned char *) (*gpt), le32_to_cpu((*gpt)->header_size));
+
+computes a CRC32 checksum over gpt covering (*gpt)->header_size bytes.
+There is no validation of (*gpt)->header_size before the efi_crc32 call.
+
+A corrupted partition table may have large values for (*gpt)->header_size.
+ In this case, the CRC32 computation access memory beyond the memory
+allocated for gpt, which may cause a kernel heap overflow.
+
+Validate value of GUID partition table header size.
+
+[akpm@linux-foundation.org: fix layout and indenting]
+Signed-off-by: Timo Warns <warns@pre-sense.de>
+Cc: Matt Domsch <Matt_Domsch@dell.com>
+Cc: Eugene Teo <eugeneteo@kernel.sg>
+Cc: Dave Jones <davej@codemonkey.org.uk>
+Signed-off-by: Andrew Morton <akpm@linux-foundation.org>
+Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+Cc: Moritz Muehlenhoff <jmm@debian.org>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ fs/partitions/efi.c |    9 +++++++++
+ 1 file changed, 9 insertions(+)
+
+--- a/fs/partitions/efi.c
++++ b/fs/partitions/efi.c
+@@ -311,6 +311,15 @@ is_gpt_valid(struct block_device *bdev,
+ 		goto fail;
+ 	}
+ 
++	/* Check the GUID Partition Table header size */
++	if (le32_to_cpu((*gpt)->header_size) >
++			bdev_logical_block_size(state->bdev)) {
++		pr_debug("GUID Partition Table Header size is wrong: %u > %u\n",
++			le32_to_cpu((*gpt)->header_size),
++			bdev_logical_block_size(state->bdev));
++		goto fail;
++	}
++
+ 	/* Check the GUID Partition Table CRC */
+ 	origcrc = le32_to_cpu((*gpt)->header_crc32);
+ 	(*gpt)->header_crc32 = 0;
diff --git a/queue-2.6.32/hwmon-asus_atk0110-fix-memory-leak.patch b/queue-2.6.32/hwmon-asus_atk0110-fix-memory-leak.patch
new file mode 100644
index 0000000..8ef0f2d
--- /dev/null
+++ b/queue-2.6.32/hwmon-asus_atk0110-fix-memory-leak.patch
@@ -0,0 +1,30 @@
+From 0b8e77f12cb6bfe2e5a67f2cdc8c7af23abc4ccf Mon Sep 17 00:00:00 2001
+From: Luca Tettamanti <kronos.it@gmail.com>
+Date: Sun, 17 Jul 2011 18:39:18 +0200
+Subject: hwmon: (asus_atk0110) Fix memory leak
+
+From: Luca Tettamanti <kronos.it@gmail.com>
+
+commit 0b8e77f12cb6bfe2e5a67f2cdc8c7af23abc4ccf upstream.
+
+The object returned by atk_gitm is dynamically allocated and must be
+freed.
+
+Signed-off-by: Luca Tettamanti <kronos.it@gmail.com>
+Signed-off-by: Jean Delvare <khali@linux-fr.org>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ drivers/hwmon/asus_atk0110.c |    1 +
+ 1 file changed, 1 insertion(+)
+
+--- a/drivers/hwmon/asus_atk0110.c
++++ b/drivers/hwmon/asus_atk0110.c
+@@ -621,6 +621,7 @@ static int atk_read_value(struct atk_sen
+ 		err = 0;
+ 	}
+ 
++	ACPI_FREE(ret);
+ 	return err;
+ }
+ 
diff --git a/queue-2.6.32/hwmon-max1111-fix-race-condition-causing-null-pointer-exception.patch b/queue-2.6.32/hwmon-max1111-fix-race-condition-causing-null-pointer-exception.patch
new file mode 100644
index 0000000..a91641f
--- /dev/null
+++ b/queue-2.6.32/hwmon-max1111-fix-race-condition-causing-null-pointer-exception.patch
@@ -0,0 +1,80 @@
+From d3f684f2820a7f42acef68bea6622d9032127fb2 Mon Sep 17 00:00:00 2001
+From: Pavel Herrmann <morpheus.ibis@gmail.com>
+Date: Sun, 17 Jul 2011 18:39:19 +0200
+Subject: hwmon: (max1111) Fix race condition causing NULL pointer exception
+
+From: Pavel Herrmann <morpheus.ibis@gmail.com>
+
+commit d3f684f2820a7f42acef68bea6622d9032127fb2 upstream.
+
+spi_sync call uses its spi_message parameter to keep completion information,
+using a drvdata structure is not thread-safe. Use a mutex to prevent
+multiple access to shared driver data.
+
+Signed-off-by: Pavel Herrmann <morpheus.ibis@gmail.com>
+Acked-by: Russell King <rmk+kernel@arm.linux.org.uk>
+Acked-by: Pavel Machek <pavel@ucw.cz>
+Acked-by: Marek Vasut <marek.vasut@gmail.com>
+Acked-by: Cyril Hrubis <metan@ucw.cz>
+Tested-by: Stanislav Brabec <utx@penguin.cz>
+Signed-off-by: Jean Delvare <khali@linux-fr.org>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ drivers/hwmon/max1111.c |   11 +++++++++++
+ 1 file changed, 11 insertions(+)
+
+--- a/drivers/hwmon/max1111.c
++++ b/drivers/hwmon/max1111.c
+@@ -39,6 +39,8 @@ struct max1111_data {
+ 	struct spi_transfer	xfer[2];
+ 	uint8_t *tx_buf;
+ 	uint8_t *rx_buf;
++	struct mutex		drvdata_lock;
++	/* protect msg, xfer and buffers from multiple access */
+ };
+ 
+ static int max1111_read(struct device *dev, int channel)
+@@ -47,6 +49,9 @@ static int max1111_read(struct device *d
+ 	uint8_t v1, v2;
+ 	int err;
+ 
++	/* writing to drvdata struct is not thread safe, wait on mutex */
++	mutex_lock(&data->drvdata_lock);
++
+ 	data->tx_buf[0] = (channel << MAX1111_CTRL_SEL_SH) |
+ 		MAX1111_CTRL_PD0 | MAX1111_CTRL_PD1 |
+ 		MAX1111_CTRL_SGL | MAX1111_CTRL_UNI | MAX1111_CTRL_STR;
+@@ -54,12 +59,15 @@ static int max1111_read(struct device *d
+ 	err = spi_sync(data->spi, &data->msg);
+ 	if (err < 0) {
+ 		dev_err(dev, "spi_sync failed with %d\n", err);
++		mutex_unlock(&data->drvdata_lock);
+ 		return err;
+ 	}
+ 
+ 	v1 = data->rx_buf[0];
+ 	v2 = data->rx_buf[1];
+ 
++	mutex_unlock(&data->drvdata_lock);
++
+ 	if ((v1 & 0xc0) || (v2 & 0x3f))
+ 		return -EINVAL;
+ 
+@@ -175,6 +183,8 @@ static int __devinit max1111_probe(struc
+ 	if (err)
+ 		goto err_free_data;
+ 
++	mutex_init(&data->drvdata_lock);
++
+ 	data->spi = spi;
+ 	spi_set_drvdata(spi, data);
+ 
+@@ -212,6 +222,7 @@ static int __devexit max1111_remove(stru
+ 
+ 	hwmon_device_unregister(data->hwmon_dev);
+ 	sysfs_remove_group(&spi->dev.kobj, &max1111_attr_group);
++	mutex_destroy(&data->drvdata_lock);
+ 	kfree(data->rx_buf);
+ 	kfree(data->tx_buf);
+ 	kfree(data);
diff --git a/queue-2.6.32/nfsv4.1-update-nfs4_fattr_bitmap_maxsz.patch b/queue-2.6.32/nfsv4.1-update-nfs4_fattr_bitmap_maxsz.patch
new file mode 100644
index 0000000..0c63ccf
--- /dev/null
+++ b/queue-2.6.32/nfsv4.1-update-nfs4_fattr_bitmap_maxsz.patch
@@ -0,0 +1,31 @@
+From e5012d1f3861d18c7f3814e757c1c3ab3741dbcd Mon Sep 17 00:00:00 2001
+From: Andy Adamson <andros@netapp.com>
+Date: Mon, 11 Jul 2011 17:17:42 -0400
+Subject: NFSv4.1: update nfs4_fattr_bitmap_maxsz
+
+From: Andy Adamson <andros@netapp.com>
+
+commit e5012d1f3861d18c7f3814e757c1c3ab3741dbcd upstream.
+
+Attribute IDs assigned in RFC 5661 now require three bitmaps.
+Fixes hitting a BUG_ON in xdr_shrink_bufhead when getting ACLs.
+
+Signed-off-by: Andy Adamson <andros@netapp.com>
+Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ fs/nfs/nfs4xdr.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/fs/nfs/nfs4xdr.c
++++ b/fs/nfs/nfs4xdr.c
+@@ -88,7 +88,7 @@ static int nfs4_stat_to_errno(int);
+ #define encode_getfh_maxsz      (op_encode_hdr_maxsz)
+ #define decode_getfh_maxsz      (op_decode_hdr_maxsz + 1 + \
+ 				((3+NFS4_FHSIZE) >> 2))
+-#define nfs4_fattr_bitmap_maxsz 3
++#define nfs4_fattr_bitmap_maxsz 4
+ #define encode_getattr_maxsz    (op_encode_hdr_maxsz + nfs4_fattr_bitmap_maxsz)
+ #define nfs4_name_maxsz		(1 + ((3 + NFS4_MAXNAMLEN) >> 2))
+ #define nfs4_path_maxsz		(1 + ((3 + NFS4_MAXPATHLEN) >> 2))
diff --git a/queue-2.6.32/pvrusb2-fix-g-s_tuner-support.patch b/queue-2.6.32/pvrusb2-fix-g-s_tuner-support.patch
new file mode 100644
index 0000000..5221ab1
--- /dev/null
+++ b/queue-2.6.32/pvrusb2-fix-g-s_tuner-support.patch
@@ -0,0 +1,45 @@
+From 50e9efd60b213ce43ad6979bfc18e25eec2d8413 Mon Sep 17 00:00:00 2001
+From: Hans Verkuil <hans.verkuil@cisco.com>
+Date: Sun, 12 Jun 2011 06:39:52 -0300
+Subject: [media] pvrusb2: fix g/s_tuner support
+
+From: Hans Verkuil <hans.verkuil@cisco.com>
+
+commit 50e9efd60b213ce43ad6979bfc18e25eec2d8413 upstream.
+
+The tuner-core subdev requires that the type field of v4l2_tuner is
+filled in correctly. This is done in v4l2-ioctl.c, but pvrusb2 doesn't
+use that yet, so we have to do it manually based on whether the current
+input is radio or not.
+
+Tested with my pvrusb2.
+
+Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+Acked-by: Mike Isely <isely@pobox.com>
+Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ drivers/media/video/pvrusb2/pvrusb2-hdw.c |    4 ++++
+ 1 file changed, 4 insertions(+)
+
+--- a/drivers/media/video/pvrusb2/pvrusb2-hdw.c
++++ b/drivers/media/video/pvrusb2/pvrusb2-hdw.c
+@@ -2979,6 +2979,8 @@ static void pvr2_subdev_update(struct pv
+ 	if (hdw->input_dirty || hdw->audiomode_dirty || hdw->force_dirty) {
+ 		struct v4l2_tuner vt;
+ 		memset(&vt, 0, sizeof(vt));
++		vt.type = (hdw->input_val == PVR2_CVAL_INPUT_RADIO) ?
++			V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
+ 		vt.audmode = hdw->audiomode_val;
+ 		v4l2_device_call_all(&hdw->v4l2_dev, 0, tuner, s_tuner, &vt);
+ 	}
+@@ -5064,6 +5066,8 @@ void pvr2_hdw_status_poll(struct pvr2_hd
+ {
+ 	struct v4l2_tuner *vtp = &hdw->tuner_signal_info;
+ 	memset(vtp, 0, sizeof(*vtp));
++	vtp->type = (hdw->input_val == PVR2_CVAL_INPUT_RADIO) ?
++		V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
+ 	hdw->tuner_signal_stale = 0;
+ 	/* Note: There apparently is no replacement for VIDIOC_CROPCAP
+ 	   using v4l2-subdev - therefore we can't support that AT ALL right
diff --git a/queue-2.6.32/series b/queue-2.6.32/series
index 378d0ae..436b974 100644
--- a/queue-2.6.32/series
+++ b/queue-2.6.32/series
@@ -1,38 +1,14 @@
-ksm-fix-null-pointer-dereference-in.patch
-migrate-don-t-account-swapcache-as-shmem.patch
-xen-partially-revert-xen-set-max_pfn_mapped-to-the-last.patch
-clocksource-make-watchdog-robust-vs.-interruption.patch
-tty-ldisc-do-not-close-until-there-are-readers.patch
-xhci-reject-double-add-of-active-endpoints.patch
-pm-free-memory-bitmaps-if-opening-dev-snapshot-fails.patch
-ath5k-fix-memory-leak-when-fewer-than-n_pd_curves-are-in.patch
-ath9k-fix-suspend-resume-when-no-interface-is-up.patch
-mm-fix-negative-commitlimit-when-gigantic-hugepages-are.patch
-uvcvideo-remove-buffers-from-the-queues-when.patch
-watchdog-mtx1-wdt-request-gpio-before-using-it.patch
-debugobjects-fix-boot-crash-when-kmemleak-and-debugobjects.patch
-cfq-iosched-fix-locking-around-ioc-ioc_data-assignment.patch
-cfq-iosched-fix-a-rcu-warning.patch
-i2c-taos-evm-fix-log-messages.patch
-md-avoid-endless-recovery-loop-when-waiting-for-fail-device.patch
-sunrpc-ensure-the-rpc-client-only-quits-on-fatal-signals.patch
-6pack-mkiss-fix-lock-inconsistency.patch
-taskstats-don-t-allow-duplicate-entries-in-listener-mode.patch
-usb-don-t-let-errors-prevent-system-sleep.patch
-usb-don-t-let-the-hub-driver-prevent-system-sleep.patch
-uml-fix-config_static_link-y-build-failure-with-newer-glibc.patch
-um-os-linux-mem.c-needs-sys-stat.h.patch
-netlink-make-nlmsg_find_attr-take-a-const-nlmsghdr.patch
-inet_diag-fix-inet_diag_bc_audit.patch
-pm-hibernate-avoid-hitting-oom-during-preallocation-of-memory.patch
-pm-hibernate-fix-free_unnecessary_pages.patch
-bug.h-add-warn_ratelimit.patch
-net-filter-use-warn_ratelimit.patch
-af_packet-prevent-information-leak.patch
-net-ipv4-check-for-mistakenly-passed-in-non-ipv4-address.patch
-ipv6-udp-use-the-correct-variable-to-determine-non-blocking-condition.patch
-udp-recvmsg-clear-msg_trunc-flag-when-starting-over-for-a-new-packet.patch
-mm-prevent-concurrent-unmap_mapping_range-on-the-same.patch
+asoc-fix-blackfin-i2s-_pointer-implementation-return-in.patch
+v4l2-ioctl.c-prefill-tuner-type-for-g_frequency-and.patch
+pvrusb2-fix-g-s_tuner-support.patch
+bttv-fix-s_tuner-for-radio.patch
+fs-partitions-efi.c-corrupted-guid-partition-tables-can-cause-kernel-oops.patch
+nfsv4.1-update-nfs4_fattr_bitmap_maxsz.patch
+sunrpc-fix-a-race-between-work-queue-and-rpc_killall_tasks.patch
+sunrpc-fix-use-of-static-variable-in-rpcb_getport_async.patch
+si4713-i2c-avoid-potential-buffer-overflow-on-si4713.patch
+hwmon-asus_atk0110-fix-memory-leak.patch
+hwmon-max1111-fix-race-condition-causing-null-pointer-exception.patch
 bridge-send-proper-message_age-in-config-bpdu.patch
 davinci-dm365-evm-fix-video-input-mux-bits.patch
 libata-fix-unexpectedly-frozen-port-after-ata_eh_reset.patch
diff --git a/queue-2.6.32/si4713-i2c-avoid-potential-buffer-overflow-on-si4713.patch b/queue-2.6.32/si4713-i2c-avoid-potential-buffer-overflow-on-si4713.patch
new file mode 100644
index 0000000..d99c471
--- /dev/null
+++ b/queue-2.6.32/si4713-i2c-avoid-potential-buffer-overflow-on-si4713.patch
@@ -0,0 +1,48 @@
+From dc6b845044ccb7e9e6f3b7e71bd179b3cf0223b6 Mon Sep 17 00:00:00 2001
+From: Mauro Carvalho Chehab <mchehab@redhat.com>
+Date: Sun, 17 Jul 2011 00:24:37 -0300
+Subject: si4713-i2c: avoid potential buffer overflow on si4713
+MIME-Version: 1.0
+Content-Type: text/plain; charset=UTF-8
+Content-Transfer-Encoding: 8bit
+
+From: Mauro Carvalho Chehab <mchehab@redhat.com>
+
+commit dc6b845044ccb7e9e6f3b7e71bd179b3cf0223b6 upstream.
+
+While compiling it with Fedora 15, I noticed this issue:
+
+  inlined from ‘si4713_write_econtrol_string’ at drivers/media/radio/si4713-i2c.c:1065:24:
+  arch/x86/include/asm/uaccess_32.h:211:26: error: call to ‘copy_from_user_overflow’ declared with attribute error: copy_from_user() buffer size is not provably correct
+
+Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+Acked-by: Sakari Ailus <sakari.ailus@maxwell.research.nokia.com>
+Acked-by: Eduardo Valentin <edubezval@gmail.com>
+Reviewed-by: Eugene Teo <eugeneteo@kernel.sg>
+Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ drivers/media/radio/si4713-i2c.c |    4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+--- a/drivers/media/radio/si4713-i2c.c
++++ b/drivers/media/radio/si4713-i2c.c
+@@ -1003,7 +1003,7 @@ static int si4713_write_econtrol_string(
+ 		char ps_name[MAX_RDS_PS_NAME + 1];
+ 
+ 		len = control->size - 1;
+-		if (len > MAX_RDS_PS_NAME) {
++		if (len < 0 || len > MAX_RDS_PS_NAME) {
+ 			rval = -ERANGE;
+ 			goto exit;
+ 		}
+@@ -1025,7 +1025,7 @@ static int si4713_write_econtrol_string(
+ 		char radio_text[MAX_RDS_RADIO_TEXT + 1];
+ 
+ 		len = control->size - 1;
+-		if (len > MAX_RDS_RADIO_TEXT) {
++		if (len < 0 || len > MAX_RDS_RADIO_TEXT) {
+ 			rval = -ERANGE;
+ 			goto exit;
+ 		}
diff --git a/queue-2.6.32/sunrpc-fix-a-race-between-work-queue-and-rpc_killall_tasks.patch b/queue-2.6.32/sunrpc-fix-a-race-between-work-queue-and-rpc_killall_tasks.patch
new file mode 100644
index 0000000..a908ece
--- /dev/null
+++ b/queue-2.6.32/sunrpc-fix-a-race-between-work-queue-and-rpc_killall_tasks.patch
@@ -0,0 +1,65 @@
+From b55c59892e1f3b6c7d4b9ccffb4263e1486fb990 Mon Sep 17 00:00:00 2001
+From: Trond Myklebust <Trond.Myklebust@netapp.com>
+Date: Wed, 6 Jul 2011 19:58:23 -0400
+Subject: SUNRPC: Fix a race between work-queue and rpc_killall_tasks
+
+From: Trond Myklebust <Trond.Myklebust@netapp.com>
+
+commit b55c59892e1f3b6c7d4b9ccffb4263e1486fb990 upstream.
+
+Since rpc_killall_tasks may modify the rpc_task's tk_action field
+without any locking, we need to be careful when dereferencing it.
+
+Reported-by: Ben Greear <greearb@candelatech.com>
+Tested-by: Ben Greear <greearb@candelatech.com>
+Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ net/sunrpc/sched.c |   27 +++++++++++----------------
+ 1 file changed, 11 insertions(+), 16 deletions(-)
+
+--- a/net/sunrpc/sched.c
++++ b/net/sunrpc/sched.c
+@@ -613,30 +613,25 @@ static void __rpc_execute(struct rpc_tas
+ 	BUG_ON(RPC_IS_QUEUED(task));
+ 
+ 	for (;;) {
++		void (*do_action)(struct rpc_task *);
+ 
+ 		/*
+-		 * Execute any pending callback.
++		 * Execute any pending callback first.
+ 		 */
+-		if (task->tk_callback) {
+-			void (*save_callback)(struct rpc_task *);
+-
+-			/*
+-			 * We set tk_callback to NULL before calling it,
+-			 * in case it sets the tk_callback field itself:
+-			 */
+-			save_callback = task->tk_callback;
+-			task->tk_callback = NULL;
+-			save_callback(task);
+-		} else {
++		do_action = task->tk_callback;
++		task->tk_callback = NULL;
++		if (do_action == NULL) {
+ 			/*
+ 			 * Perform the next FSM step.
+-			 * tk_action may be NULL when the task has been killed
+-			 * by someone else.
++			 * tk_action may be NULL if the task has been killed.
++			 * In particular, note that rpc_killall_tasks may
++			 * do this at any time, so beware when dereferencing.
+ 			 */
+-			if (task->tk_action == NULL)
++			do_action = task->tk_action;
++			if (do_action == NULL)
+ 				break;
+-			task->tk_action(task);
+ 		}
++		do_action(task);
+ 
+ 		/*
+ 		 * Lockless check for whether task is sleeping or not.
diff --git a/queue-2.6.32/sunrpc-fix-use-of-static-variable-in-rpcb_getport_async.patch b/queue-2.6.32/sunrpc-fix-use-of-static-variable-in-rpcb_getport_async.patch
new file mode 100644
index 0000000..87528aa
--- /dev/null
+++ b/queue-2.6.32/sunrpc-fix-use-of-static-variable-in-rpcb_getport_async.patch
@@ -0,0 +1,37 @@
+From ec0dd267bf7d08cb30e321e45a75fd40edd7e528 Mon Sep 17 00:00:00 2001
+From: Ben Greear <greearb@candelatech.com>
+Date: Tue, 12 Jul 2011 10:27:55 -0700
+Subject: SUNRPC: Fix use of static variable in rpcb_getport_async
+
+From: Ben Greear <greearb@candelatech.com>
+
+commit ec0dd267bf7d08cb30e321e45a75fd40edd7e528 upstream.
+
+Because struct rpcbind_args *map was declared static, if two
+threads entered this method at the same time, the values
+assigned to map could be sent two two differen tasks.
+This could cause all sorts of problems, include use-after-free
+and double-free of memory.
+
+Fix this by removing the static declaration so that the map
+pointer is on the stack.
+
+Signed-off-by: Ben Greear <greearb@candelatech.com>
+Signed-off-by: Trond Myklebust <Trond.Myklebust@netapp.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ net/sunrpc/rpcb_clnt.c |    2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+--- a/net/sunrpc/rpcb_clnt.c
++++ b/net/sunrpc/rpcb_clnt.c
+@@ -533,7 +533,7 @@ void rpcb_getport_async(struct rpc_task
+ 	u32 bind_version;
+ 	struct rpc_xprt *xprt;
+ 	struct rpc_clnt	*rpcb_clnt;
+-	static struct rpcbind_args *map;
++	struct rpcbind_args *map;
+ 	struct rpc_task	*child;
+ 	struct sockaddr_storage addr;
+ 	struct sockaddr *sap = (struct sockaddr *)&addr;
diff --git a/queue-2.6.32/v4l2-ioctl.c-prefill-tuner-type-for-g_frequency-and.patch b/queue-2.6.32/v4l2-ioctl.c-prefill-tuner-type-for-g_frequency-and.patch
new file mode 100644
index 0000000..11b85c0
--- /dev/null
+++ b/queue-2.6.32/v4l2-ioctl.c-prefill-tuner-type-for-g_frequency-and.patch
@@ -0,0 +1,55 @@
+From 227690df75382e46a4f6ea1bbc5df855a674b47f Mon Sep 17 00:00:00 2001
+From: Hans Verkuil <hans.verkuil@cisco.com>
+Date: Sun, 12 Jun 2011 06:36:41 -0300
+Subject: [media] v4l2-ioctl.c: prefill tuner type for g_frequency and g/s_tuner
+
+From: Hans Verkuil <hans.verkuil@cisco.com>
+
+commit 227690df75382e46a4f6ea1bbc5df855a674b47f upstream.
+
+The subdevs are supposed to receive a valid tuner type for the g_frequency
+and g/s_tuner subdev ops. Some drivers do this, others don't. So prefill
+this in v4l2-ioctl.c based on whether the device node from which this is
+called is a radio node or not.
+
+The spec does not require applications to fill in the type, and if they
+leave it at 0 then the 'check_mode' call in tuner-core.c will return
+an error and the ioctl does nothing.
+
+Signed-off-by: Hans Verkuil <hans.verkuil@cisco.com>
+Signed-off-by: Mauro Carvalho Chehab <mchehab@redhat.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+---
+ drivers/media/video/v4l2-ioctl.c |    6 ++++++
+ 1 file changed, 6 insertions(+)
+
+--- a/drivers/media/video/v4l2-ioctl.c
++++ b/drivers/media/video/v4l2-ioctl.c
+@@ -1600,6 +1600,8 @@ static long __video_do_ioctl(struct file
+ 		if (!ops->vidioc_g_tuner)
+ 			break;
+ 
++		p->type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
++			V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
+ 		ret = ops->vidioc_g_tuner(file, fh, p);
+ 		if (!ret)
+ 			dbgarg(cmd, "index=%d, name=%s, type=%d, "
+@@ -1618,6 +1620,8 @@ static long __video_do_ioctl(struct file
+ 
+ 		if (!ops->vidioc_s_tuner)
+ 			break;
++		p->type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
++			V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
+ 		dbgarg(cmd, "index=%d, name=%s, type=%d, "
+ 				"capability=0x%x, rangelow=%d, "
+ 				"rangehigh=%d, signal=%d, afc=%d, "
+@@ -1636,6 +1640,8 @@ static long __video_do_ioctl(struct file
+ 		if (!ops->vidioc_g_frequency)
+ 			break;
+ 
++		p->type = (vfd->vfl_type == VFL_TYPE_RADIO) ?
++			V4L2_TUNER_RADIO : V4L2_TUNER_ANALOG_TV;
+ 		ret = ops->vidioc_g_frequency(file, fh, p);
+ 		if (!ret)
+ 			dbgarg(cmd, "tuner=%d, type=%d, frequency=%d\n",
diff --git a/queue-2.6.32/6pack-mkiss-fix-lock-inconsistency.patch b/releases/2.6.32.43/6pack-mkiss-fix-lock-inconsistency.patch
index c37ab07..c37ab07 100644
--- a/queue-2.6.32/6pack-mkiss-fix-lock-inconsistency.patch
+++ b/releases/2.6.32.43/6pack-mkiss-fix-lock-inconsistency.patch
diff --git a/queue-2.6.32/af_packet-prevent-information-leak.patch b/releases/2.6.32.43/af_packet-prevent-information-leak.patch
index 6ea78ad..6ea78ad 100644
--- a/queue-2.6.32/af_packet-prevent-information-leak.patch
+++ b/releases/2.6.32.43/af_packet-prevent-information-leak.patch
diff --git a/queue-2.6.32/ath5k-fix-memory-leak-when-fewer-than-n_pd_curves-are-in.patch b/releases/2.6.32.43/ath5k-fix-memory-leak-when-fewer-than-n_pd_curves-are-in.patch
index c074926..c074926 100644
--- a/queue-2.6.32/ath5k-fix-memory-leak-when-fewer-than-n_pd_curves-are-in.patch
+++ b/releases/2.6.32.43/ath5k-fix-memory-leak-when-fewer-than-n_pd_curves-are-in.patch
diff --git a/queue-2.6.32/bug.h-add-warn_ratelimit.patch b/releases/2.6.32.43/bug.h-add-warn_ratelimit.patch
index 8196701..8196701 100644
--- a/queue-2.6.32/bug.h-add-warn_ratelimit.patch
+++ b/releases/2.6.32.43/bug.h-add-warn_ratelimit.patch
diff --git a/queue-2.6.32/cfq-iosched-fix-a-rcu-warning.patch b/releases/2.6.32.43/cfq-iosched-fix-a-rcu-warning.patch
index d403999..d403999 100644
--- a/queue-2.6.32/cfq-iosched-fix-a-rcu-warning.patch
+++ b/releases/2.6.32.43/cfq-iosched-fix-a-rcu-warning.patch
diff --git a/queue-2.6.32/cfq-iosched-fix-locking-around-ioc-ioc_data-assignment.patch b/releases/2.6.32.43/cfq-iosched-fix-locking-around-ioc-ioc_data-assignment.patch
index 726d187..726d187 100644
--- a/queue-2.6.32/cfq-iosched-fix-locking-around-ioc-ioc_data-assignment.patch
+++ b/releases/2.6.32.43/cfq-iosched-fix-locking-around-ioc-ioc_data-assignment.patch
diff --git a/queue-2.6.32/clocksource-make-watchdog-robust-vs.-interruption.patch b/releases/2.6.32.43/clocksource-make-watchdog-robust-vs.-interruption.patch
index 940413a..940413a 100644
--- a/queue-2.6.32/clocksource-make-watchdog-robust-vs.-interruption.patch
+++ b/releases/2.6.32.43/clocksource-make-watchdog-robust-vs.-interruption.patch
diff --git a/queue-2.6.32/debugobjects-fix-boot-crash-when-kmemleak-and-debugobjects.patch b/releases/2.6.32.43/debugobjects-fix-boot-crash-when-kmemleak-and-debugobjects.patch
index 638cd03..638cd03 100644
--- a/queue-2.6.32/debugobjects-fix-boot-crash-when-kmemleak-and-debugobjects.patch
+++ b/releases/2.6.32.43/debugobjects-fix-boot-crash-when-kmemleak-and-debugobjects.patch
diff --git a/queue-2.6.32/i2c-taos-evm-fix-log-messages.patch b/releases/2.6.32.43/i2c-taos-evm-fix-log-messages.patch
index 97e7933..97e7933 100644
--- a/queue-2.6.32/i2c-taos-evm-fix-log-messages.patch
+++ b/releases/2.6.32.43/i2c-taos-evm-fix-log-messages.patch
diff --git a/queue-2.6.32/inet_diag-fix-inet_diag_bc_audit.patch b/releases/2.6.32.43/inet_diag-fix-inet_diag_bc_audit.patch
index c47ee5f..c47ee5f 100644
--- a/queue-2.6.32/inet_diag-fix-inet_diag_bc_audit.patch
+++ b/releases/2.6.32.43/inet_diag-fix-inet_diag_bc_audit.patch
diff --git a/queue-2.6.32/ipv6-udp-use-the-correct-variable-to-determine-non-blocking-condition.patch b/releases/2.6.32.43/ipv6-udp-use-the-correct-variable-to-determine-non-blocking-condition.patch
index be74468..be74468 100644
--- a/queue-2.6.32/ipv6-udp-use-the-correct-variable-to-determine-non-blocking-condition.patch
+++ b/releases/2.6.32.43/ipv6-udp-use-the-correct-variable-to-determine-non-blocking-condition.patch
diff --git a/queue-2.6.32/ksm-fix-null-pointer-dereference-in.patch b/releases/2.6.32.43/ksm-fix-null-pointer-dereference-in.patch
index e91ae95..e91ae95 100644
--- a/queue-2.6.32/ksm-fix-null-pointer-dereference-in.patch
+++ b/releases/2.6.32.43/ksm-fix-null-pointer-dereference-in.patch
diff --git a/queue-2.6.32/md-avoid-endless-recovery-loop-when-waiting-for-fail-device.patch b/releases/2.6.32.43/md-avoid-endless-recovery-loop-when-waiting-for-fail-device.patch
index 918d4bc..918d4bc 100644
--- a/queue-2.6.32/md-avoid-endless-recovery-loop-when-waiting-for-fail-device.patch
+++ b/releases/2.6.32.43/md-avoid-endless-recovery-loop-when-waiting-for-fail-device.patch
diff --git a/queue-2.6.32/migrate-don-t-account-swapcache-as-shmem.patch b/releases/2.6.32.43/migrate-don-t-account-swapcache-as-shmem.patch
index 481b676..481b676 100644
--- a/queue-2.6.32/migrate-don-t-account-swapcache-as-shmem.patch
+++ b/releases/2.6.32.43/migrate-don-t-account-swapcache-as-shmem.patch
diff --git a/queue-2.6.32/mm-fix-negative-commitlimit-when-gigantic-hugepages-are.patch b/releases/2.6.32.43/mm-fix-negative-commitlimit-when-gigantic-hugepages-are.patch
index d137544..d137544 100644
--- a/queue-2.6.32/mm-fix-negative-commitlimit-when-gigantic-hugepages-are.patch
+++ b/releases/2.6.32.43/mm-fix-negative-commitlimit-when-gigantic-hugepages-are.patch
diff --git a/queue-2.6.32/mm-prevent-concurrent-unmap_mapping_range-on-the-same.patch b/releases/2.6.32.43/mm-prevent-concurrent-unmap_mapping_range-on-the-same.patch
index 2eda01b..2eda01b 100644
--- a/queue-2.6.32/mm-prevent-concurrent-unmap_mapping_range-on-the-same.patch
+++ b/releases/2.6.32.43/mm-prevent-concurrent-unmap_mapping_range-on-the-same.patch
diff --git a/queue-2.6.32/net-filter-use-warn_ratelimit.patch b/releases/2.6.32.43/net-filter-use-warn_ratelimit.patch
index af7fa85..af7fa85 100644
--- a/queue-2.6.32/net-filter-use-warn_ratelimit.patch
+++ b/releases/2.6.32.43/net-filter-use-warn_ratelimit.patch
diff --git a/queue-2.6.32/net-ipv4-check-for-mistakenly-passed-in-non-ipv4-address.patch b/releases/2.6.32.43/net-ipv4-check-for-mistakenly-passed-in-non-ipv4-address.patch
index 8e6187f..8e6187f 100644
--- a/queue-2.6.32/net-ipv4-check-for-mistakenly-passed-in-non-ipv4-address.patch
+++ b/releases/2.6.32.43/net-ipv4-check-for-mistakenly-passed-in-non-ipv4-address.patch
diff --git a/queue-2.6.32/netlink-make-nlmsg_find_attr-take-a-const-nlmsghdr.patch b/releases/2.6.32.43/netlink-make-nlmsg_find_attr-take-a-const-nlmsghdr.patch
index 281ed3e..281ed3e 100644
--- a/queue-2.6.32/netlink-make-nlmsg_find_attr-take-a-const-nlmsghdr.patch
+++ b/releases/2.6.32.43/netlink-make-nlmsg_find_attr-take-a-const-nlmsghdr.patch
diff --git a/queue-2.6.32/pm-free-memory-bitmaps-if-opening-dev-snapshot-fails.patch b/releases/2.6.32.43/pm-free-memory-bitmaps-if-opening-dev-snapshot-fails.patch
index 9ff8188..9ff8188 100644
--- a/queue-2.6.32/pm-free-memory-bitmaps-if-opening-dev-snapshot-fails.patch
+++ b/releases/2.6.32.43/pm-free-memory-bitmaps-if-opening-dev-snapshot-fails.patch
diff --git a/queue-2.6.32/pm-hibernate-avoid-hitting-oom-during-preallocation-of-memory.patch b/releases/2.6.32.43/pm-hibernate-avoid-hitting-oom-during-preallocation-of-memory.patch
index f229460..f229460 100644
--- a/queue-2.6.32/pm-hibernate-avoid-hitting-oom-during-preallocation-of-memory.patch
+++ b/releases/2.6.32.43/pm-hibernate-avoid-hitting-oom-during-preallocation-of-memory.patch
diff --git a/queue-2.6.32/pm-hibernate-fix-free_unnecessary_pages.patch b/releases/2.6.32.43/pm-hibernate-fix-free_unnecessary_pages.patch
index 94e5c12..94e5c12 100644
--- a/queue-2.6.32/pm-hibernate-fix-free_unnecessary_pages.patch
+++ b/releases/2.6.32.43/pm-hibernate-fix-free_unnecessary_pages.patch
diff --git a/releases/2.6.32.43/series b/releases/2.6.32.43/series
new file mode 100644
index 0000000..4f44332
--- /dev/null
+++ b/releases/2.6.32.43/series
@@ -0,0 +1,34 @@
+ksm-fix-null-pointer-dereference-in.patch
+migrate-don-t-account-swapcache-as-shmem.patch
+xen-partially-revert-xen-set-max_pfn_mapped-to-the-last.patch
+clocksource-make-watchdog-robust-vs.-interruption.patch
+tty-ldisc-do-not-close-until-there-are-readers.patch
+xhci-reject-double-add-of-active-endpoints.patch
+pm-free-memory-bitmaps-if-opening-dev-snapshot-fails.patch
+ath5k-fix-memory-leak-when-fewer-than-n_pd_curves-are-in.patch
+mm-fix-negative-commitlimit-when-gigantic-hugepages-are.patch
+uvcvideo-remove-buffers-from-the-queues-when.patch
+watchdog-mtx1-wdt-request-gpio-before-using-it.patch
+debugobjects-fix-boot-crash-when-kmemleak-and-debugobjects.patch
+cfq-iosched-fix-locking-around-ioc-ioc_data-assignment.patch
+cfq-iosched-fix-a-rcu-warning.patch
+i2c-taos-evm-fix-log-messages.patch
+md-avoid-endless-recovery-loop-when-waiting-for-fail-device.patch
+sunrpc-ensure-the-rpc-client-only-quits-on-fatal-signals.patch
+6pack-mkiss-fix-lock-inconsistency.patch
+taskstats-don-t-allow-duplicate-entries-in-listener-mode.patch
+usb-don-t-let-errors-prevent-system-sleep.patch
+usb-don-t-let-the-hub-driver-prevent-system-sleep.patch
+uml-fix-config_static_link-y-build-failure-with-newer-glibc.patch
+um-os-linux-mem.c-needs-sys-stat.h.patch
+netlink-make-nlmsg_find_attr-take-a-const-nlmsghdr.patch
+inet_diag-fix-inet_diag_bc_audit.patch
+pm-hibernate-avoid-hitting-oom-during-preallocation-of-memory.patch
+pm-hibernate-fix-free_unnecessary_pages.patch
+bug.h-add-warn_ratelimit.patch
+net-filter-use-warn_ratelimit.patch
+af_packet-prevent-information-leak.patch
+net-ipv4-check-for-mistakenly-passed-in-non-ipv4-address.patch
+ipv6-udp-use-the-correct-variable-to-determine-non-blocking-condition.patch
+udp-recvmsg-clear-msg_trunc-flag-when-starting-over-for-a-new-packet.patch
+mm-prevent-concurrent-unmap_mapping_range-on-the-same.patch
diff --git a/queue-2.6.32/sunrpc-ensure-the-rpc-client-only-quits-on-fatal-signals.patch b/releases/2.6.32.43/sunrpc-ensure-the-rpc-client-only-quits-on-fatal-signals.patch
index 73dab33..73dab33 100644
--- a/queue-2.6.32/sunrpc-ensure-the-rpc-client-only-quits-on-fatal-signals.patch
+++ b/releases/2.6.32.43/sunrpc-ensure-the-rpc-client-only-quits-on-fatal-signals.patch
diff --git a/queue-2.6.32/taskstats-don-t-allow-duplicate-entries-in-listener-mode.patch b/releases/2.6.32.43/taskstats-don-t-allow-duplicate-entries-in-listener-mode.patch
index 3b31476..3b31476 100644
--- a/queue-2.6.32/taskstats-don-t-allow-duplicate-entries-in-listener-mode.patch
+++ b/releases/2.6.32.43/taskstats-don-t-allow-duplicate-entries-in-listener-mode.patch
diff --git a/queue-2.6.32/tty-ldisc-do-not-close-until-there-are-readers.patch b/releases/2.6.32.43/tty-ldisc-do-not-close-until-there-are-readers.patch
index a6f023b..a6f023b 100644
--- a/queue-2.6.32/tty-ldisc-do-not-close-until-there-are-readers.patch
+++ b/releases/2.6.32.43/tty-ldisc-do-not-close-until-there-are-readers.patch
diff --git a/queue-2.6.32/udp-recvmsg-clear-msg_trunc-flag-when-starting-over-for-a-new-packet.patch b/releases/2.6.32.43/udp-recvmsg-clear-msg_trunc-flag-when-starting-over-for-a-new-packet.patch
index 42351f3..42351f3 100644
--- a/queue-2.6.32/udp-recvmsg-clear-msg_trunc-flag-when-starting-over-for-a-new-packet.patch
+++ b/releases/2.6.32.43/udp-recvmsg-clear-msg_trunc-flag-when-starting-over-for-a-new-packet.patch
diff --git a/queue-2.6.32/um-os-linux-mem.c-needs-sys-stat.h.patch b/releases/2.6.32.43/um-os-linux-mem.c-needs-sys-stat.h.patch
index f78b7c2..f78b7c2 100644
--- a/queue-2.6.32/um-os-linux-mem.c-needs-sys-stat.h.patch
+++ b/releases/2.6.32.43/um-os-linux-mem.c-needs-sys-stat.h.patch
diff --git a/queue-2.6.32/uml-fix-config_static_link-y-build-failure-with-newer-glibc.patch b/releases/2.6.32.43/uml-fix-config_static_link-y-build-failure-with-newer-glibc.patch
index 7cb52f5..7cb52f5 100644
--- a/queue-2.6.32/uml-fix-config_static_link-y-build-failure-with-newer-glibc.patch
+++ b/releases/2.6.32.43/uml-fix-config_static_link-y-build-failure-with-newer-glibc.patch
diff --git a/queue-2.6.32/usb-don-t-let-errors-prevent-system-sleep.patch b/releases/2.6.32.43/usb-don-t-let-errors-prevent-system-sleep.patch
index 389a5e3..389a5e3 100644
--- a/queue-2.6.32/usb-don-t-let-errors-prevent-system-sleep.patch
+++ b/releases/2.6.32.43/usb-don-t-let-errors-prevent-system-sleep.patch
diff --git a/queue-2.6.32/usb-don-t-let-the-hub-driver-prevent-system-sleep.patch b/releases/2.6.32.43/usb-don-t-let-the-hub-driver-prevent-system-sleep.patch
index 02d2097..02d2097 100644
--- a/queue-2.6.32/usb-don-t-let-the-hub-driver-prevent-system-sleep.patch
+++ b/releases/2.6.32.43/usb-don-t-let-the-hub-driver-prevent-system-sleep.patch
diff --git a/queue-2.6.32/uvcvideo-remove-buffers-from-the-queues-when.patch b/releases/2.6.32.43/uvcvideo-remove-buffers-from-the-queues-when.patch
index 2abcf25..2abcf25 100644
--- a/queue-2.6.32/uvcvideo-remove-buffers-from-the-queues-when.patch
+++ b/releases/2.6.32.43/uvcvideo-remove-buffers-from-the-queues-when.patch
diff --git a/queue-2.6.32/watchdog-mtx1-wdt-request-gpio-before-using-it.patch b/releases/2.6.32.43/watchdog-mtx1-wdt-request-gpio-before-using-it.patch
index 1660190..1660190 100644
--- a/queue-2.6.32/watchdog-mtx1-wdt-request-gpio-before-using-it.patch
+++ b/releases/2.6.32.43/watchdog-mtx1-wdt-request-gpio-before-using-it.patch
diff --git a/queue-2.6.32/xen-partially-revert-xen-set-max_pfn_mapped-to-the-last.patch b/releases/2.6.32.43/xen-partially-revert-xen-set-max_pfn_mapped-to-the-last.patch
index 441e0d6..441e0d6 100644
--- a/queue-2.6.32/xen-partially-revert-xen-set-max_pfn_mapped-to-the-last.patch
+++ b/releases/2.6.32.43/xen-partially-revert-xen-set-max_pfn_mapped-to-the-last.patch
diff --git a/queue-2.6.32/xhci-reject-double-add-of-active-endpoints.patch b/releases/2.6.32.43/xhci-reject-double-add-of-active-endpoints.patch
index c9c2949..c9c2949 100644
--- a/queue-2.6.32/xhci-reject-double-add-of-active-endpoints.patch
+++ b/releases/2.6.32.43/xhci-reject-double-add-of-active-endpoints.patch