OpenVZ-legacy
  1. OpenVZ-legacy

linux-2.6.18-openvz

Public
AuthorCommitMessageCommit dateIssues
OpenVZ teamOpenVZ team
efa7785ea91linux-2.6.18-028stab050 released
Vitaliy GusevVitaliy Gusev
bd4ecf20168[PATCH] Alt-sysrq-p: do synchronous NMI IPI Wait for completion of the NMI IPI callbacks then do sysrq_handle_showregs(). Otherwise nested bust_spinlocks() calls may occur.Bug #94875
Evgeny KravtsunovEvgeny Kravtsunov
6ca8bf20617[PATCH] CPT: fix tun/tap dev flags restoredev flags were corrupted in rst_restore_tuntap. As a result dev->qdisc->enqueue was not set to &pfifo_fast_enqueue but stayed to be &noop_enqueue after restore. noop_enqueue drops all the skbs. Bug #94879
Alexandr AndreevAlexandr Andreev
052a71d4013[PATCH] fairsched: increase max VCPU timeslice Increase default MAX VCPU timeslice, this increases performance under high load. (vConsolidate test)FYI: VMware uses VCPU timeslice much bigger, 50ms.
Kirill KorotaevKirill Korotaev
341629663a3[PATCH] CPT: fix misprint in Andrey changesCompilation fix: misprint in Andrey patch.
Kirill KorotaevKirill Korotaev
ee7bf74378a[PATCH] ioacct: don't mangle VE0 statistics Instead show whole node I/O stats as VE0 one.http://bugzilla.openvz.org/show_bug.cgi?id=731
Pavel EmelianovPavel Emelianov
947f3672a56[PATCH] taskstats: consider the pid, coming from the user-space to be a virtual one When the user send a netlink message to get the taskstats it can validly be a virtual one, but the find_task_by_pid_all() (which is used to convert this pid to task) assumes (with the appropriate BUG_ON) that his pid is global.Fix it by using the find_task_by_pid_ve() searching routine. The rest of the taskstats.c code seems to handle pids properly. http://bugzilla.openvz.org/show_bug.cgi?id=730 Signed-off-by: Pavel Emelyanov <xemul@openvz.org>
Andrey MirkinAndrey Mirkin
6e5280fd8b5[PATCH] CPT: improve dst capabilities checks1. Return different error codes in case of unsupported features and insufficient cpu capabilities. 2. Print error messages with prefix "Error: ". This should improve checks of dst node capabilities.
Jeff LaytonJeff Layton
e0303a88736[CIFS] fix bad handling of EAGAIN error on kernel_recvmsg in cifs_demultiplex_threadIt's a part of the following commit from mainstream --------------------------------------------------- When kernel_recvmsg returns -EAGAIN or -ERESTARTSYS, then cifs_demultiplex_thread sleeps for a bit and then tries the read again. When it does this, it's not zeroing out the length and that throws off the value of total_read. Fix it to zero out the length. Can cause memory corruption: If ke...
Roland McGrathRoland McGrath
a9346af262fwait_task_stopped: Check p->exit_state instead of TASK_TRACED (CVE-2007-5500)patch a3474224e6a01924be40a8255636ea5522c1023a in mainline The original meaning of the old test (p->state > TASK_STOPPED) was "not dead", since it was before TASK_TRACED existed and before the state/exit_state split. It was a wrong correction in commit 14bf01bb0599c89fc7f426d20353b76e12555308 to make this test for TASK_TRACED instead. It should have been changed when TASK_TRACED was introduc...CVE-2007
OpenVZ teamOpenVZ team
585c4a53e10linux-2.6.18-028stab049 released
Kirill KorotaevKirill Korotaev
db78563b62a[PATCH] netfilter: fix compats compilation on ppcppc has no linux/compat.h included by default
Kirill KorotaevKirill Korotaev
e6efcacb4e5[PATCH] CPT: TUN/TAP fix patch fuzz errorpatch fuzz played a bad joke and inserted a hunk in the wrong place. Move it where it should be.
Konstantin KhorenkoKonstantin Khorenko
5d9265b1183[PATCH] netfilter: add ipt_hashlimit 32bit compat ipt_hashlimit doesn't have the compat function while its entry structure (ipt_hashlimit_info) requires it.The patch introduces compat function and fixes an oops while trying to use ipt_hashlimit module from inside 32bit VE on a 64bit host HN. http://bugzilla.openvz.org/show_bug.cgi?id=707
Konstantin KhorenkoKonstantin Khorenko
805fb89719b[PATCH] netfilter: add xt_conntrack 32bit compatxt_conntrack doesn't have the compat function while its entry structure (xt_conntrack_info) requires it.
Konstantin KhorenkoKonstantin Khorenko
89a43ba470a[PATCH] netfilter: add xt_connmark 32bit compat ipt_connmark doesn't have the compat function while its entry structure (xt_connmark_info) requires it.Bug #93543
Konstantin KhorenkoKonstantin Khorenko
f9ff89c74dc[PATCH] netfilter: add xt_mark 32bit compat xt_mark doesn't have the compat function while its entry structure (xt_mark_info) requires it.Bug #93543
Konstantin KhorenkoKonstantin Khorenko
c9e86b2b387[PATCH] netfilter: add xt_CONNMARK 32bit compat xt_CONNMARK doesn't have the compat function while its entry structure (xt_connmark_target_info) requires it.Bug #93689
Konstantin KhorenkoKonstantin Khorenko
2591aa080d5[PATCH] netfilter: add xt_MARK 32bit compatxt_MARK doesn't have the compat function while its entry structure (xt_mark_target_info_v1) requires it. Note: ipv6 correctness is not tested. TODO Note 1: /* Version 0 */ struct xt_mark_target_info { unsigned long mark; }; So the struct size differs for 32bit/64bit nodes, but mainstream does not have a compat for it. ipv6 variant uses xt_mark_target_info (v0) so the testing will sho...
Dmitry MishinDmitry Mishin
fdb5314095b[NETFILTER]: ip_tables: fix compat related crash check_compat_entry_size_and_hooks iterates over the matches and calls compat_check_calc_match, which loads the match and calculates the compat offsets, but unlike the non-compat version, doesn't call ->checkentry yet. On error however it calls cleanup_matches, which in turn calls ->destroy, which can result in crashes if the destroy function (validly) expects to only get called after the ...
Evgeny KravtsunovEvgeny Kravtsunov
fd711ae7974[PATCH] VE: virtualize ipt_recent Patch virtualizes ipt_recent module in the following way:1) Introduced struct ve_ipt_recent and corresponding _ipt_recent entry in ve_struct. ve_ipt_recent contains global variables from ipt_recent module. 2) Functions init_ipt_recent, fini_ipt_recent implemented. Current functions designed to be called from ipt_recent_init/fini and ipt_recent_checkentry/destroy in purpose to alloc ve_ipt_recent structure and initialize/cleanup _ipt_recent entry in...
Evgeny KravtsunovEvgeny Kravtsunov
326c9813336[PATCH] CPT: TUN/TAP support in checkpointingNow live migration of VE with openvpn inside is supported. 1) tun/tap driver updated: - Field void *bind_file added to tun_struct. Field is used for storing pointer to open /dev/net/tun file. This pointer is to be written to dumpfile: on restore it is necessary to carry out binding of created tun_struct to open file /dev/net/tun. 2) dump: - Introduced struct cpt_tuntap_image for storing...
Evgeny KravtsunovEvgeny Kravtsunov
30fac7b4433[PATCH] TUN: add core changes for CPT support
Evgeny KravtsunovEvgeny Kravtsunov
946a62ecb0f[PATCH] VE: fix ip_conntrack compilation in case CONFIG_VE_IPTABLES=n With CONFIG_VE_IPTABLES off the following compilation error takes place:CONFIG_VE=y CONFIG_VE_CALLS=m CONFIG_VZ_GENCALLS=y CONFIG_VE_NETDEV=m CONFIG_VE_ETHDEV=m CONFIG_VZ_DEV=m CONFIG_VZ_WDOG=m CONFIG_VZ_CHECKPOINT=m ..... CC [M] net/ipv4/netfilter/ip_conntrack_core.o net/ipv4/netfilter/ip_conntrack_core.c:77: error: static declaration of helpers� follows non-static declaration include/linux/netfilter_ipv4/ip_conntrack_helper.h:47: error: previous declaration o...
Evgeny KravtsunovEvgeny Kravtsunov
971252140a8[PATCH] CPT: fix compilation in case CONFIG_VE_IPTABLES=n With CONFIG_VE_IPTABLES off the following compilation error takes place:CONFIG_VE=y CONFIG_VE_CALLS=m CONFIG_VZ_GENCALLS=y CONFIG_VE_NETDEV=m CONFIG_VE_ETHDEV=m CONFIG_VZ_DEV=m CONFIG_VZ_WDOG=m CONFIG_VZ_CHECKPOINT=m ...... CC [M] kernel/cpt/cpt_net.o kernel/cpt/cpt_net.c: In function �cpt_dump_iptables�: kernel/cpt/cpt_net.c:365: error: �struct ve_struct� has no member named �_iptables_modules� make[2]: *** [kernel/cpt/cpt_net.o] Error 1 make[1]: *** [kernel/cp...
Denis V. LunevDenis V. Lunev
042e29fe560[PATCH] VE: fix fib rules insert to empty listfix crash when fib rules are added to empty list http://bugzilla.openvz.org/show_bug.cgi?id=685
Kirill KorotaevKirill Korotaev
24334d7e2c9[PATCH] VE: fix a minor misprint in the warninghttp://bugzilla.openvz.org/show_bug.cgi?id=634
Kirill KorotaevKirill Korotaev
2c452db35ed[PATCH] CPT: compilation warn fix
Kirill KorotaevKirill Korotaev
27d6c943524[PATCH] VZDQ: compilation warn fixes
Denis V. LunevDenis V. Lunev
d5cc498ed0b[PATCH] fix oops in dump_trace() in NMI This patch fixes OOPS of dump_trace in NMI. If one is running 32 bit task and NMI tries to dump_stack() OOPS happens, since user space stack is tried to be dumped. Backport of patch from mainstream.Bug #93558
Michael StolerMichael Stoler
a0c75563058[PATCH] VZDQ: small cleanup to avoid hardcoded string lengthsmall cleanup to avoid hardcoded string length and future errors like we had before
Alexey DobriyanAlexey Dobriyan
e5aabd966ca[PATCH] VE: mark venet as vlan-incapable Many places in vlan code assume ethernet underlying device, which is not working for venet. So mark vene as vlan-incapable.http://bugzilla.openvz.org/show_bug.cgi?id=703
Jan BeulichJan Beulich
095b46e0fd2[PATCH] x86-64: Fix ENOSYS in system call tracing This patch:- out of range system calls failing to return -ENOSYS under system call tracing [AK: split out from another patch by Jan as separate bugfix] Signed-off-by: Jan Beulich <jbeulich@novell.com> Signed-off-by: Andi Kleen <ak@suse.de> cc7d479fe56133e79840beffe9cb4fd193af93aa
Michael StolerMichael Stoler
d4a7166f4be[PATCH] VE: introduce OVZ version in oops output and in /proc/vz/versionIntroduce OVZ-specific build version in /proc/vz/version file and print it in oops messages. This should help OVZ developers to identify OVZ patch version in different distros like Debian/ALTLinux.
Michael StolerMichael Stoler
3d422a091cd[PATCH] VE: restore back find_task_by_pid() for ATI video driver find_task_by_pid_all() and macro find_task_by_pid() are returned back, since ATI binary driver is using it (what for???). Print a big warning when this function is used still.http://bugzilla.openvz.org/show_bug.cgi?id=634
Kirill KorotaevKirill Korotaev
c45ba417832[PATCH] grsecurity: fix compilation when GRSEC=ngrsecurity: fix compilation when GRSEC=n http://bugzilla.openvz.org/show_bug.cgi?id=716
Kirill KorotaevKirill Korotaev
e474dc92a03[PATCH] grsecurity: fix compilation with GRSEC, but w/o GRSEC_TPEfix compilation with GRSEC, but w/o GRSEC_TPE config option. http://bugzilla.openvz.org/show_bug.cgi?id=718
Paolo 'Blaisorblade' GiarrussoPaolo 'Blaisorblade' Giarrusso
02acd8e0e26[PATCH] Fix boot code head.S warningWhen compiling a 64-bit kernel on an Ubuntu 6.06 32bit system (whose GCC is also a cross-compiler for x86_64) I've seen that head.o is compiled as a 64-bit file (while it should not) and ld complaining about this during linking: [AK: it happens on all systems with new binutils] ld: warning: i386:x86-64 architecture of input file `arch/x86_64/boot/compressed/head.o' is incompatible with i386 ou...
OpenVZ teamOpenVZ team
4cb59f391e3linux-2.6.18-028stab048 released
Alexander Y. FomichevAlexander Y. Fomichev
705b7dce882[PATCH] fix NFS compilation when NFS_FS=n and NFSD=yWhen CONFIG_NFS_FS is disabled and CONFIG_NFSD is enabled in .config the following compilation error occurs: ..... CC [M] fs/lockd/host.o fs/lockd/host.c: In function �nlm_bind_host�: fs/lockd/host.c:204: error: �struct ve_struct� has no member named �_nlmsvc_timeout� make[2]: *** [fs/lockd/host.o] Error 1 make[1]: *** [fs/lockd] Error 2 make: *** [fs] Error 2
Alexander Y. FomichevAlexander Y. Fomichev
0a17273c35f[PATCH] Fix compilation issues in vpid code Patch fixes compilation issue in kernel/pid.c: ... kernel/pid.c: In function 'free_pid': kernel/pid.c:197: error: dereferencing pointer to incomplete type kernel/pid.c: In function 'alloc_pid': kernel/pid.c:233: error: dereferencing pointer to incomplete type make[2]: *** [kernel/pid.o] Error 1 make[1]: *** [kernel] Error 2If linux/kmem_cache is not included kmem_cache type is undefined. http://bugzilla.openvz.org/show_bug.cgi?id=689
Andrey MirkinAndrey Mirkin
3aa1f18bc93[PATCH] ia64: fix kernel thread exit codeCPT during restore creates kernel thread to start iptables-restore. On ia64 start_kernel_thread is used for kernel thread creation. GLOBAL_ENTRY(start_kernel_thread) .prologue .save rp, r0 // this is the end of the call-chain .body alloc r2 = ar.pfs, 0, 0, 2, 0 mov out0 = r9 mov out1 = r11;; br.call.sptk.many rp...
OpenVZ teamOpenVZ team
d4d70e70f76linux-2.6.18-028stab047 released
Kirill KorotaevKirill Korotaev
b54c6e358be[PATCH] grsecurity: fix x8664 compilation
Denis V. LunevDenis V. Lunev
9027c9182ea[PATCH] Exit from OOMed process ASAP rather then dig in try_to_free_pages(). it can spend really lots of time in try_to_free_pages() (up to minutes), while process selected for OOM should die ASAP.Bug #79344
Alexandr AndreevAlexandr Andreev
6fdffe00684[PATCH] grsecurity: TPE feature virtualization
Alexandr AndreevAlexandr Andreev
9e9e333b937[PATCH] grsecurity: TPE feature This patch is a part of big grsecure-2.1.10 patch.This patch doesn't contain virtualization support, and source code looks like original grsecure source as much as possible. V2 - added TPE check in mmap()/mprotect() V3 - removed exec_file; added grsec_lock feature
Vitaliy GusevVitaliy Gusev
14dcb363ff5[PATCH] fix bust_spinlocks() race when doing Alt-SysRq-P via NMI IPI Fix bust_spinlocks() race when doing Alt-SysRq-P via NMI IPI smp_show_regs() function calls bust_spinlocks() which is not protected by any lock. Just call bust_spinlocks() under smp_show_regs lock.Bug #92669
Evgeny KravtsunovEvgeny Kravtsunov
dc5777aae48[PATCH] hide global /proc/asound entry from VEcreate_proc_entry() in sound/core/info.c is called with gobal parent == &proc_root, thus /proc/asound is global. Make it VE0 local. Bug #92723
Alexey KuznetsovAlexey Kuznetsov
646ff2e80ae[CPT] warning in cpt_restore_process()