Re: [PATCH] xen/usb: harden xen_hcd against malicious backends

2022-03-16 Thread Greg Kroah-Hartman
On Wed, Mar 16, 2022 at 06:29:00AM +0100, Juergen Gross wrote: > On 15.03.22 18:41, Greg Kroah-Hartman wrote: > > On Fri, Mar 11, 2022 at 11:35:09AM +0100, Juergen Gross wrote: > > > Make sure a malicious backend can't cause any harm other than wrong > > > I/O data. > > > > > > Missing are verific

Re: [PATCH] xen/usb: harden xen_hcd against malicious backends

2022-03-15 Thread Juergen Gross
On 15.03.22 18:41, Greg Kroah-Hartman wrote: On Fri, Mar 11, 2022 at 11:35:09AM +0100, Juergen Gross wrote: Make sure a malicious backend can't cause any harm other than wrong I/O data. Missing are verification of the request id in a response, sanitizing the reported actual I/O length, and prot

Re: [PATCH] xen/usb: harden xen_hcd against malicious backends

2022-03-15 Thread Greg Kroah-Hartman
On Fri, Mar 11, 2022 at 11:35:09AM +0100, Juergen Gross wrote: > Make sure a malicious backend can't cause any harm other than wrong > I/O data. > > Missing are verification of the request id in a response, sanitizing > the reported actual I/O length, and protection against interrupt storms > from

[PATCH] xen/usb: harden xen_hcd against malicious backends

2022-03-11 Thread Juergen Gross
Make sure a malicious backend can't cause any harm other than wrong I/O data. Missing are verification of the request id in a response, sanitizing the reported actual I/O length, and protection against interrupt storms from the backend. Signed-off-by: Juergen Gross --- drivers/usb/host/xen-hcd.