USB device.  All class drivers.  There needs to be a check to make sure that the size of a returned string does not exceed the size of an allocated request buffer

Local sockets: Local stream sockets had problem of double releasing pipes (both server and client attempt release), which causes wrong pipe pair being closed in multi-client case. Solve by adding per connection instance ID to pipe names.  From  Jussi Kivilinna (2015-05-12).

Correct some network lock logic:  Two error conditions where the network was not being unlocked and one where it was getting unlocked twice.  From Jussi Kivilinna.

Remove duplicate prototype of statfs from stdio.h.  Belongs in sys/statfs.h only.  Note by Michael Hope

The test for data partially transferred is incorrectec: chan->xfrd != xfrlen
Should be chan->xfrd > 0

From Ronly XLN.

Increase the size of the number of bytes sent from uint16_t to uint32_t in order to avoid TCP errors with long sessions.  For exmple:

int hello_main(int argc, char *argv[])
{
   uint32_t i;
   for(i = 0; i < 65536; i++)
    {
      printf("Hello, World!!\n");
    }

  printf("press any key!!\n");
  if (getchar()=='t')
    return 0;
  else
    return 1;
}

When ran in a Telnet session, the "press any key" is not displayed because the tcp session closed unexpectedly with:

tcp_input: ERROR: conn->sndseq xx, conn->unacked xx"

This is fixed by increasing the width of conn->sent to 32-bits to prevent overflow.

From Rony XLN

OHCI:  Fix length calculation in all OHCI drivers:  CBP==0 means that the entire buffer was transferred, not that a null packet was tranaferred