5 files changed, 64 insertions, 15 deletions

diff --git a/fs/aio.c b/fs/aio.c
index ee20fc4240e0..55991e4132a7 100644
--- a/fs/aio.c
+++ b/fs/aio.c
@@ -298,17 +298,23 @@ static void wait_for_all_aios(struct kioctx *ctx)
         struct task_struct *tsk = current;
         DECLARE_WAITQUEUE(wait, tsk);
 
+        spin_lock_irq(&ctx->ctx_lock);
         if (!ctx->reqs_active)
-                return;
+                goto out;
 
         add_wait_queue(&ctx->wait, &wait);
         set_task_state(tsk, TASK_UNINTERRUPTIBLE);
         while (ctx->reqs_active) {
+                spin_unlock_irq(&ctx->ctx_lock);
                 schedule();
                 set_task_state(tsk, TASK_UNINTERRUPTIBLE);
+                spin_lock_irq(&ctx->ctx_lock);
         }
         __set_task_state(tsk, TASK_RUNNING);
         remove_wait_queue(&ctx->wait, &wait);
+
+out:
+        spin_unlock_irq(&ctx->ctx_lock);
 }
 
 /* wait_on_sync_kiocb:
@@ -424,7 +430,6 @@ static struct kiocb fastcall *__aio_get_req(struct kioctx *ctx)
         ring = kmap_atomic(ctx->ring_info.ring_pages[0], KM_USER0);
         if (ctx->reqs_active < aio_ring_avail(&ctx->ring_info, ring)) {
                 list_add(&req->ki_list, &ctx->active_reqs);
-                get_ioctx(ctx);
                 ctx->reqs_active++;
                 okay = 1;
         }
@@ -536,8 +541,6 @@ int fastcall aio_put_req(struct kiocb *req)
         spin_lock_irq(&ctx->ctx_lock);
         ret = __aio_put_req(ctx, req);
         spin_unlock_irq(&ctx->ctx_lock);
-        if (ret)
-                put_ioctx(ctx);
         return ret;
 }
 
@@ -779,8 +782,7 @@ static int __aio_run_iocbs(struct kioctx *ctx)
                  */
                 iocb->ki_users++;       /* grab extra reference */
                 aio_run_iocb(iocb);
-                if (__aio_put_req(ctx, iocb))  /* drop extra ref */
-                        put_ioctx(ctx);
+                __aio_put_req(ctx, iocb);
         }
         if (!list_empty(&ctx->run_list))
                 return 1;
@@ -997,14 +999,10 @@ put_rq:
         /* everything turned out well, dispose of the aiocb. */
         ret = __aio_put_req(ctx, iocb);
 
-        spin_unlock_irqrestore(&ctx->ctx_lock, flags);
-
         if (waitqueue_active(&ctx->wait))
                 wake_up(&ctx->wait);
 
-        if (ret)
-                put_ioctx(ctx);
-
+        spin_unlock_irqrestore(&ctx->ctx_lock, flags);
         return ret;
 }
 
diff --git a/fs/block_dev.c b/fs/block_dev.c
index d9bdf2b3ade2..fc7028b685f2 100644
--- a/fs/block_dev.c
+++ b/fs/block_dev.c
@@ -129,6 +129,46 @@ blkdev_get_block(struct inode *inode, sector_t iblock,
         return 0;
 }
 
+static int
+blkdev_get_blocks(struct inode *inode, sector_t iblock,
+                struct buffer_head *bh, int create)
+{
+        sector_t end_block = max_block(I_BDEV(inode));
+        unsigned long max_blocks = bh->b_size >> inode->i_blkbits;
+
+        if ((iblock + max_blocks) > end_block) {
+                max_blocks = end_block - iblock;
+                if ((long)max_blocks <= 0) {
+                        if (create)
+                                return -EIO;    /* write fully beyond EOF */
+                        /*
+                         * It is a read which is fully beyond EOF.  We return
+                         * a !buffer_mapped buffer
+                         */
+                        max_blocks = 0;
+                }
+        }
+
+        bh->b_bdev = I_BDEV(inode);
+        bh->b_blocknr = iblock;
+        bh->b_size = max_blocks << inode->i_blkbits;
+        if (max_blocks)
+                set_buffer_mapped(bh);
+        return 0;
+}
+
+static ssize_t
+blkdev_direct_IO(int rw, struct kiocb *iocb, const struct iovec *iov,
+                        loff_t offset, unsigned long nr_segs)
+{
+        struct file *file = iocb->ki_filp;
+        struct inode *inode = file->f_mapping->host;
+
+        return blockdev_direct_IO_no_locking(rw, iocb, inode, I_BDEV(inode),
+                                iov, offset, nr_segs, blkdev_get_blocks, NULL);
+}
+
+#if 0
 static int blk_end_aio(struct bio *bio, unsigned int bytes_done, int error)
 {
         struct kiocb *iocb = bio->bi_private;
@@ -323,6 +363,7 @@ backout:
                 return PTR_ERR(page);
         goto completion;
 }
+#endif
 
 static int blkdev_writepage(struct page *page, struct writeback_control *wbc)
 {
diff --git a/fs/nfsd/nfsfh.c b/fs/nfsd/nfsfh.c
index 98338a569dc0..c59d6fbb7a6b 100644
--- a/fs/nfsd/nfsfh.c
+++ b/fs/nfsd/nfsfh.c
@@ -269,7 +269,7 @@ fh_verify(struct svc_rqst *rqstp, struct svc_fh *fhp, int type, int access)
                         "acc=%x, error=%d\n",
                         dentry->d_parent->d_name.name,
                         dentry->d_name.name,
-                        access, (error >> 24));
+                        access, ntohl(error));
         }
 out:
         if (exp && !IS_ERR(exp))
diff --git a/fs/ocfs2/journal.h b/fs/ocfs2/journal.h
index e1216364d191..d026b4f27757 100644
--- a/fs/ocfs2/journal.h
+++ b/fs/ocfs2/journal.h
@@ -306,8 +306,8 @@ int                  ocfs2_journal_dirty_data(handle_t *handle,
  * for the dinode, one for the new block. */
 #define OCFS2_SIMPLE_DIR_EXTEND_CREDITS (2)
 
-/* file update (nlink, etc) + dir entry block */
-#define OCFS2_LINK_CREDITS  (OCFS2_INODE_UPDATE_CREDITS + 1)
+/* file update (nlink, etc) + directory mtime/ctime + dir entry block */
+#define OCFS2_LINK_CREDITS  (2*OCFS2_INODE_UPDATE_CREDITS + 1)
 
 /* inode + dir inode (if we unlink a dir), + dir entry block + orphan
  * dir inode link */
diff --git a/fs/proc/base.c b/fs/proc/base.c
index ff7a66850602..1a979ea3b379 100644
--- a/fs/proc/base.c
+++ b/fs/proc/base.c
@@ -2328,13 +2328,23 @@ static int proc_task_readdir(struct file * filp, void * dirent, filldir_t filldi
 {
         struct dentry *dentry = filp->f_path.dentry;
         struct inode *inode = dentry->d_inode;
-        struct task_struct *leader = get_proc_task(inode);
+        struct task_struct *leader = NULL;
         struct task_struct *task;
         int retval = -ENOENT;
         ino_t ino;
         int tid;
         unsigned long pos = filp->f_pos;  /* avoiding "long long" filp->f_pos */
 
+        task = get_proc_task(inode);
+        if (!task)
+                goto out_no_task;
+        rcu_read_lock();
+        if (pid_alive(task)) {
+                leader = task->group_leader;
+                get_task_struct(leader);
+        }
+        rcu_read_unlock();
+        put_task_struct(task);
         if (!leader)
                 goto out_no_task;
         retval = 0;