[Bug 220272] Latent race condition in USB code unveiled with optimized memset_64.S

[bugzilla-daemon@kernel.org]

https://bugzilla.kernel.org/show_bug.cgi?id=220272

--- Comment #29 from Alan Stern (stern@rowland.harvard.edu) ---
As far as I can tell, the buffer is not cleared each time the URB is submitted.
 The hid_irq_in() routine in drivers/hid/usbhid/hid-core.c doesn't do anything
to the buffer.

Marcus, you could try modifying that routine to have it store some test data in
urb->transfer_buffer immediately before the call to usb_submit_urb().  Maybe
the test values will show up in the usbmon trace, but maybe not.

-- 
You may reply to this email to add a comment.

You are receiving this mail because:
You are watching the assignee of the bug.