Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6

Conflicts:
	arch/microblaze/include/asm/socket.h

3 files changed, 34 insertions, 22 deletions

diff --git a/drivers/ide/ide-disk.c b/drivers/ide/ide-disk.c
index 695181120cdb..7f878017b736 100644
--- a/drivers/ide/ide-disk.c
+++ b/drivers/ide/ide-disk.c
@@ -455,6 +455,7 @@ static void idedisk_prepare_flush(struct request_queue *q, struct request *rq)
 
         rq->cmd_type = REQ_TYPE_ATA_TASKFILE;
         rq->special = cmd;
+        cmd->rq = rq;
 }
 
 ide_devset_get(multcount, mult_count);
diff --git a/drivers/ide/ide-io.c b/drivers/ide/ide-io.c
index d5f3c77beadd..db96138fefcd 100644
--- a/drivers/ide/ide-io.c
+++ b/drivers/ide/ide-io.c
@@ -466,14 +466,10 @@ void do_ide_request(struct request_queue *q)
 
         if (!ide_lock_port(hwif)) {
                 ide_hwif_t *prev_port;
+
+                WARN_ON_ONCE(hwif->rq);
 repeat:
                 prev_port = hwif->host->cur_port;
-
-                if (drive->dev_flags & IDE_DFLAG_BLOCKED)
-                        rq = hwif->rq;
-                else
-                        WARN_ON_ONCE(hwif->rq);
-
                 if (drive->dev_flags & IDE_DFLAG_SLEEPING &&
                     time_after(drive->sleep, jiffies)) {
                         ide_unlock_port(hwif);
@@ -500,29 +496,43 @@ repeat:
                 hwif->cur_dev = drive;
                 drive->dev_flags &= ~(IDE_DFLAG_SLEEPING | IDE_DFLAG_PARKED);
 
-                if (rq == NULL) {
-                        spin_unlock_irq(&hwif->lock);
-                        spin_lock_irq(q->queue_lock);
-                        /*
-                         * we know that the queue isn't empty, but this can
-                         * happen if ->prep_rq_fn() decides to kill a request
-                         */
+                spin_unlock_irq(&hwif->lock);
+                spin_lock_irq(q->queue_lock);
+                /*
+                 * we know that the queue isn't empty, but this can happen
+                 * if the q->prep_rq_fn() decides to kill a request
+                 */
+                if (!rq)
                         rq = blk_fetch_request(drive->queue);
-                        spin_unlock_irq(q->queue_lock);
-                        spin_lock_irq(&hwif->lock);
 
-                        if (rq == NULL) {
-                                ide_unlock_port(hwif);
-                                goto out;
-                        }
+                spin_unlock_irq(q->queue_lock);
+                spin_lock_irq(&hwif->lock);
+
+                if (!rq) {
+                        ide_unlock_port(hwif);
+                        goto out;
                 }
 
                 /*
                  * Sanity: don't accept a request that isn't a PM request
-                 * if we are currently power managed.
+                 * if we are currently power managed. This is very important as
+                 * blk_stop_queue() doesn't prevent the blk_fetch_request()
+                 * above to return us whatever is in the queue. Since we call
+                 * ide_do_request() ourselves, we end up taking requests while
+                 * the queue is blocked...
+                 * 
+                 * We let requests forced at head of queue with ide-preempt
+                 * though. I hope that doesn't happen too much, hopefully not
+                 * unless the subdriver triggers such a thing in its own PM
+                 * state machine.
                  */
-                BUG_ON((drive->dev_flags & IDE_DFLAG_BLOCKED) &&
-                       blk_pm_request(rq) == 0);
+                if ((drive->dev_flags & IDE_DFLAG_BLOCKED) &&
+                    blk_pm_request(rq) == 0 &&
+                    (rq->cmd_flags & REQ_PREEMPT) == 0) {
+                        /* there should be no pending command at this point */
+                        ide_unlock_port(hwif);
+                        goto plug_device;
+                }
 
                 hwif->rq = rq;
 
diff --git a/drivers/ide/ide-tape.c b/drivers/ide/ide-tape.c
index 013dc595fab6..bc5fb12b913c 100644
--- a/drivers/ide/ide-tape.c
+++ b/drivers/ide/ide-tape.c
@@ -1064,6 +1064,7 @@ static int idetape_blkdev_ioctl(ide_drive_t *drive, unsigned int cmd,
                 tape->best_dsc_rw_freq = config.dsc_rw_frequency;
                 break;
         case 0x0350:
+                memset(&config, 0, sizeof(config));
                 config.dsc_rw_frequency = (int) tape->best_dsc_rw_freq;
                 config.nr_stages = 1;
                 if (copy_to_user(argp, &config, sizeof(config)))