From: Takashi Iwai <tiwai@suse.de>
To: alsa-devel@alsa-project.org
Cc: Andrey Konovalov <andreyknvl@google.com>, linux-usb@vger.kernel.org
Subject: [PATCH 0/9] sound: Add sanity checks for invalid EPs
Date: Tue, 10 Oct 2017 15:38:10 +0200 [thread overview]
Message-ID: <20171010133819.10567-1-tiwai@suse.de> (raw)
Hi,
this is a patchset to cover the codes that may submit URBs containing
invalid EPs without validation, which result in the kernel warning
from the USB core. The first patch adds a new helper for simplifying
the EP check, and the rest applies it at needed places.
USB devs: could you check the first patch? I tried
usb_find_common_endpoints() and friends at first, but it made the code
more complex in the end, because we're dealing with the fixed
endpoints and the validation is required for them.
The original issues were spotted by syzkaller, and I put a few others
for covering more similar cases.
thanks,
Takashi
===
Takashi Iwai (9):
usb: core: Add a helper function to check the validity of EP type in
URB
ALSA: bcd2000: Add a sanity check for invalid EPs
ALSA: caiaq: Add a sanity check for invalid EPs
ALSA: line6: Add a sanity check for invalid EPs
ALSA: usb-audio: Add sanity checks for invalid EPs
ALSA: usx2y: Add sanity checks for invalid EPs
ALSA: hiface: Add sanity checks for invalid EPs
ALSA: caiaq: Add yet more sanity checks for invalid EPs
ALSA: line6: Add yet more sanity checks for invalid EPs
drivers/usb/core/urb.c | 28 +++++++++++++++++++++++++---
include/linux/usb.h | 2 ++
sound/usb/bcd2000/bcd2000.c | 7 +++++++
sound/usb/caiaq/device.c | 7 +++++++
sound/usb/caiaq/input.c | 9 +++++++++
sound/usb/hiface/pcm.c | 9 +++++++--
sound/usb/line6/driver.c | 30 ++++++++++++++++++++++--------
sound/usb/line6/midi.c | 17 +++++++++++------
sound/usb/midi.c | 38 ++++++++++++++++++++++++++++++--------
sound/usb/usx2y/usbusx2y.c | 8 ++++++++
sound/usb/usx2y/usbusx2yaudio.c | 3 +++
11 files changed, 131 insertions(+), 27 deletions(-)
--
2.14.2
next reply other threads:[~2017-10-10 13:38 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-10-10 13:38 Takashi Iwai [this message]
[not found] ` <20171010133819.10567-1-tiwai-l3A5Bk7waGM@public.gmane.org>
2017-10-10 13:38 ` [PATCH 1/9] usb: core: Add a helper function to check the validity of EP type in URB Takashi Iwai
[not found] ` <20171010133819.10567-2-tiwai-l3A5Bk7waGM@public.gmane.org>
2017-10-10 13:53 ` Greg KH
2017-10-10 13:55 ` Takashi Iwai
2017-10-10 13:38 ` [PATCH 2/9] ALSA: bcd2000: Add a sanity check for invalid EPs Takashi Iwai
[not found] ` <20171010133819.10567-3-tiwai-l3A5Bk7waGM@public.gmane.org>
2017-10-10 14:00 ` Andrey Konovalov
2017-10-10 14:33 ` Takashi Iwai
2017-10-10 18:20 ` Andrey Konovalov
2017-10-10 13:38 ` [PATCH 3/9] ALSA: caiaq: " Takashi Iwai
2017-10-10 13:38 ` [PATCH 4/9] ALSA: line6: " Takashi Iwai
2017-10-10 13:38 ` [PATCH 6/9] ALSA: usx2y: Add sanity checks " Takashi Iwai
2017-10-10 13:38 ` [PATCH 8/9] ALSA: caiaq: Add yet more " Takashi Iwai
2017-10-10 13:38 ` [PATCH 9/9] ALSA: line6: " Takashi Iwai
2017-10-10 13:38 ` [PATCH 5/9] ALSA: usb-audio: Add " Takashi Iwai
2017-10-10 13:38 ` [PATCH 7/9] ALSA: hiface: " Takashi Iwai
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20171010133819.10567-1-tiwai@suse.de \
--to=tiwai@suse.de \
--cc=alsa-devel@alsa-project.org \
--cc=andreyknvl@google.com \
--cc=linux-usb@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).