Add missing bulk-in endpoint sanity check to prevent uninitialised stack
data from being reported to the system log and used as endpoint
addresses.
Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable
Reported-by: syzbot+5630ca7c3b2be5c9d...@syzkaller.appspotmail.com
Signed-off-by: Johan Hovold
-
On 01/04/2019 14:42, Andrej Shadura wrote:
> U2F Zero supports custom commands for blinking the LED and getting data
> from the internal hardware RNG. Expose the blinking function as a LED
> device, and the internal hardware RNG as an HWRNG so that it can be used
> to feed the enthropy pool.
>
> S
On Wed, Oct 02, 2019 at 08:45:28PM -0700, Guenter Roeck wrote:
> On 10/2/19 11:29 AM, Heikki Krogerus wrote:
> > On Wed, Oct 02, 2019 at 09:36:39AM -0700, Guenter Roeck wrote:
> > > port->cap->type used to be the role provided by the low level driver.
> > > That was static, and it was not possible
Am Donnerstag, den 03.10.2019, 09:09 +0200 schrieb Johan Hovold:
> Add missing bulk-in endpoint sanity check to prevent uninitialised stack
> data from being reported to the system log and used as endpoint
> addresses.
>
> Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
> Cc: stable
> Reported-by: syzbo
Hi Tony,
On Wed, Oct 2, 2019 at 6:52 PM Tony Lindgren wrote:
>
> * Yegor Yefremov [191002 06:57]:
> > On Wed, Oct 2, 2019 at 12:03 AM Tony Lindgren wrote:
> > > The other way to fix this would be to just wake up cpp41 in
> > > cppi41_dma_prep_slave_sg() and return NULL so that we can
> > > have
On 2.10.2019 15.28, Bernhard Gebetsberger wrote:
Hi,
There has been a regression in the xhci driver since kernel version 4.20, on
some systems some usb devices won't work until the system gets rebooted.
The error message in dmesg is "WARN Set TR Deq Ptr cmd failed due to incorrect slot
or ep s
On Mon, 2019-09-23 at 18:18 +0200, Bastien Nocera wrote:
> The Rio500 kernel driver has not been used by Rio500 owners since 2001
> not long after the rio500 project added support for a user-space USB stack
> through the very first versions of usbdevfs and then libusb.
>
> Support for the kernel d
On Wed, Oct 02, 2019 at 08:51:32PM -0700, Guenter Roeck wrote:
> On 10/2/19 12:16 PM, Heikki Krogerus wrote:
> > On Wed, Oct 02, 2019 at 07:06:55PM +0300, Heikki Krogerus wrote:
> > > This is a bit off topic, but that attribute file is really horrible.
> > > Right now there is no way to know the ac
On Thu, Oct 03, 2019 at 03:18:16PM +0200, Bastien Nocera wrote:
> On Mon, 2019-09-23 at 18:18 +0200, Bastien Nocera wrote:
> > The Rio500 kernel driver has not been used by Rio500 owners since 2001
> > not long after the rio500 project added support for a user-space USB stack
> > through the very f
Fix NULL-pointer dereferences on open() and write() which can be
triggered by a malicious USB device.
The current URB allocation helper would fail to initialise the newly
allocated URB if the device has unexpected endpoint descriptors,
something which could lead NULL-pointer dereferences in a numb
On Thu, 2019-10-03 at 15:42 +0200, Greg Kroah-Hartman wrote:
> On Thu, Oct 03, 2019 at 03:18:16PM +0200, Bastien Nocera wrote:
> > On Mon, 2019-09-23 at 18:18 +0200, Bastien Nocera wrote:
> > > The Rio500 kernel driver has not been used by Rio500 owners since
> > > 2001
> > > not long after the rio
Hi Ajay,
On Tue, Oct 01, 2019 at 06:36:25PM +, Ajay Gupta wrote:
> Hi Heikki
>
> > -Original Message-
> > From: Heikki Krogerus
> > Sent: Thursday, September 26, 2019 3:07 AM
> > To: Ajay Gupta
> > Cc: linux-usb@vger.kernel.org
> > Subject: [PATCH 00/14] usb: typec: UCSI driver over
I sent the instructions to one of the users in the bug tracker.
Here is the download link for his logs: https://www.sendspace.com/file/413hlj
- Bernhard
Am 03.10.19 um 12:23 schrieb Mathias Nyman:
> On 2.10.2019 15.28, Bernhard Gebetsberger wrote:
>> Hi,
>>
>> There has been a regression in the x
On Thu, 3 Oct 2019, Andrej Shadura wrote:
> On 01/04/2019 14:42, Andrej Shadura wrote:
> > U2F Zero supports custom commands for blinking the LED and getting data
> > from the internal hardware RNG. Expose the blinking function as a LED
> > device, and the internal hardware RNG as an HWRNG so that
Add support for the serial ports of Cinterion CLS8 devices.
T: Bus=01 Lev=03 Prnt=05 Port=01 Cnt=02 Dev#= 25 Spd=480 MxCh= 0
D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1
P: Vendor=1e2d ProdID=00b0 Rev= 3.18
S: Manufacturer=GEMALTO
S: Product=USB Modem
C:* #Ifs= 5 Cfg#= 1 Atr=8
Hi Heikki,
> -Original Message-
> From: Heikki Krogerus
> Sent: Thursday, October 3, 2019 7:25 AM
> To: Ajay Gupta
> Cc: linux-usb@vger.kernel.org
> Subject: Re: [PATCH 00/14] usb: typec: UCSI driver overhaul
>
> Hi Ajay,
>
> On Tue, Oct 01, 2019 at 06:36:25PM +, Ajay Gupta wrote:
>
The syzbot fuzzer found a slab-out-of-bounds write bug in the hid-gaff
driver. The problem is caused by the driver's assumption that the
device must have an input report. While this will be true for all
normal HID input devices, a suitably malicious device can violate the
assumption.
The same as
[This email was generated by a script. Let me know if you have any suggestions
to make it better, or if you want it re-generated with the latest status.]
Of the syzbot reports that have (re-)occurred in the last 7 days, I've manually
marked 67 of them as possibly being bugs in the usb subsystem.
On Thu, Oct 03, 2019 at 06:53:21PM +0200, Reinhard Speyerer wrote:
> Add support for the serial ports of Cinterion CLS8 devices.
>
> T: Bus=01 Lev=03 Prnt=05 Port=01 Cnt=02 Dev#= 25 Spd=480 MxCh= 0
> D: Ver= 2.00 Cls=00(>ifc ) Sub=00 Prot=00 MxPS=64 #Cfgs= 1
> P: Vendor=1e2d ProdID=00b0 Rev=
19 matches
Mail list logo