commit 68f0bab75566bffed72085fa83e560eecc97b463
Author: Greg Kroah-Hartman <gregkh@suse.de>
Date:   Mon Aug 15 19:02:10 2011 -0700

    Linux 2.6.33.18

commit 64a8b9aa752d3a658d5aad9b42efa9384c537139
Author: Anton Blanchard <anton@samba.org>
Date:   Tue Jul 26 18:15:03 2011 +0000

    powerpc: pseries: Fix kexec on machines with more than 4TB of RAM
    
    commit bed9a31527af8ff3dfbad62a1a42815cef4baab7 upstream.
    
    On a box with 8TB of RAM the MMU hashtable is 64GB in size. That
    means we have 4G PTEs. pSeries_lpar_hptab_clear was using a signed
    int to store the index which will overflow at 2G.
    
    Signed-off-by: Anton Blanchard <anton@samba.org>
    Acked-by: Michael Neuling <mikey@neuling.org>
    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit b54b07357a79418d202bcc8fa0156841c3565a16
Author: Anton Blanchard <anton@samba.org>
Date:   Mon Jul 25 20:47:07 2011 +0000

    powerpc: Fix device tree claim code
    
    commit 966728dd88b4026ec58fee169ccceaeaf56ef120 upstream.
    
    I have a box that fails in OF during boot with:
    
    DEFAULT CATCH!, exception-handler=fff00400
    at   %SRR0: 49424d2c4c6f6768   %SRR1: 800000004000b002
    
    ie "IBM,Logh". OF got corrupted with a device tree string.
    
    Looking at make_room and alloc_up, we claim the first chunk (1 MB)
    but we never claim any more. mem_end is always set to alloc_top
    which is the top of our available address space, guaranteeing we will
    never call alloc_up and claim more memory.
    
    Also alloc_up wasn't setting alloc_bottom to the bottom of the
    available address space.
    
    This doesn't help the box to boot, but we at least fail with
    an obvious error. We could relocate the device tree in a future
    patch.
    
    Signed-off-by: Anton Blanchard <anton@samba.org>
    Signed-off-by: Benjamin Herrenschmidt <benh@kernel.crashing.org>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 2aa30110a99b9770297e2542cb310f3a8fc7d0f3
Author: Daniel Mack <zonque@gmail.com>
Date:   Sat Aug 6 09:13:08 2011 +0200

    ALSA: snd-usb-caiaq: Fix keymap for RigKontrol3
    
    commit f4389489b5cbe60b3441869c68bb4afe760969c4 upstream.
    
    Signed-off-by: Daniel Mack <zonque@gmail.com>
    Reported-by: Renato <naretobh@gmail.com>
    Signed-off-by: Takashi Iwai <tiwai@suse.de>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 0ef6e5ad8910506f865cf5d4d6399035b9d92aa5
Author: Takashi Iwai <tiwai@suse.de>
Date:   Mon Aug 8 12:24:46 2011 +0200

    ALSA: timer - Fix Oops at closing slave timer
    
    commit 0584ffa548b6e59aceb027112f23a55f0133400e upstream.
    
    A slave-timer instance has no timer reference, and this results in
    NULL-dereference at stopping the timer, typically called at closing
    the device.
    
    Reference: https://bugzilla.kernel.org/show_bug.cgi?id=40682
    
    Signed-off-by: Takashi Iwai <tiwai@suse.de>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 4f92dd0dba4a3000b7ce3a7dfbe2be1ffbeb2bd1
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Aug 3 20:50:44 2011 -0700

    net: Compute protocol sequence numbers and fragment IDs using MD5.
    
    Computers have become a lot faster since we compromised on the
    partial MD4 hash which we use currently for performance reasons.
    
    MD5 is a much safer choice, and is inline with both RFC1948 and
    other ISS generators (OpenBSD, Solaris, etc.)
    
    Furthermore, only having 24-bits of the sequence number be truly
    unpredictable is a very serious limitation.  So the periodic
    regeneration and 8-bit counter have been removed.  We compute and
    use a full 32-bit sequence number.
    
    For ipv6, DCCP was found to use a 32-bit truncated initial sequence
    number (it needs 43-bits) and that is fixed here as well.
    
    Reported-by: Dan Kaminsky <dan@doxpara.com>
    Tested-by: Willy Tarreau <w@1wt.eu>
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>

commit 3f77dab7c5fa1cde0139e85ff33d7ee5875f1371
Author: David S. Miller <davem@davemloft.net>
Date:   Wed Aug 3 19:45:10 2011 -0700

    crypto: Move md5_transform to lib/md5.c
    
    We are going to use this for TCP/IP sequence number and fragment ID
    generation.
    
    Signed-off-by: David S. Miller <davem@davemloft.net>
    Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>