2.6.16.4 release

diff --git a/2.6.16.4/__group_complete_signal-remove-bogus-bug_on.patch b/2.6.16.4/__group_complete_signal-remove-bogus-bug_on.patch
new file mode 100644 (file)
index 0000000..8778dad
--- /dev/null
+++ b/2.6.16.4/__group_complete_signal-remove-bogus-bug_on.patch
@@ -0,0 +1,35 @@
+From linux-kernel-owner+greg=40kroah.com-S1750849AbWDKOWT@vger.kernel.org Tue Apr 11 07:23:19 2006
+Date: Tue, 11 Apr 2006 22:18:58 +0400
+From: Oleg Nesterov <oleg@tv-sign.ru>
+To: linux-kernel@vger.kernel.org
+Cc: Roland McGrath <roland@redhat.com>, "Eric W. Biederman" <ebiederm@xmission.com>, Ingo Molnar <mingo@elte.hu>, "Paul E. McKenney" <paulmck@us.ibm.com>, Linus Torvalds <torvalds@osdl.org>, Andrew Morton <akpm@osdl.org>
+Subject: [PATCH] __group_complete_signal: remove bogus BUG_ON [CVE-2006-1523]
+Message-ID: <20060411181858.GA110@oleg>
+Content-Disposition: inline
+
+[PATCH] RCU signal handling
+
+made this BUG_ON() unsafe. This code runs under ->siglock,
+while switch_exec_pids() takes tasklist_lock.
+
+Signed-off-by: Oleg Nesterov <oleg@tv-sign.ru>
+Signed-off-by: Linus Torvalds <torvalds@osdl.org>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+
+--- 2.6.16/kernel/signal.c~    2006-02-13 21:47:19.000000000 +0300
++++ 2.6.16/kernel/signal.c     2006-04-11 21:53:03.000000000 +0400
+@@ -975,7 +975,6 @@ __group_complete_signal(int sig, struct 
+               if (t == NULL)
+                       /* restart balancing at this thread */
+                       t = p->signal->curr_target = p;
+-              BUG_ON(t->tgid != p->tgid);
+ 
+               while (!wants_signal(sig, t)) {
+                       t = next_thread(t);
+
+-
+To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
+the body of a message to majordomo@vger.kernel.org
+More majordomo info at  http://vger.kernel.org/majordomo-info.html
+Please read the FAQ at  http://www.tux.org/lkml/
+