From: Chris Bainbridge <chris.bainbridge@gmail.com>
To: linux-kernel@vger.kernel.org
Cc: aryabinin@virtuozzo.com, gregkh@linuxfoundation.org,
stern@rowland.harvard.edu, linux-usb@vger.kernel.org
Subject: UBSAN: Undefined behaviour in drivers/usb/core/devio.c:1517:25
Date: Tue, 26 Jan 2016 10:11:01 +0000 [thread overview]
Message-ID: <20160126101101.GB5054@localhost> (raw)
Booting 4.5.0-rc1 with new UBSAN checker enabled:
[ 4.556968] ================================================================================
[ 4.556972] UBSAN: Undefined behaviour in drivers/usb/core/devio.c:1517:25
[ 4.556975] shift exponent -1 is negative
[ 4.556979] CPU: 2 PID: 3624 Comm: usb Not tainted 4.5.0-rc1 #252
[ 4.556981] Hardware name: Apple Inc. MacBookPro10,2/Mac-AFD8A9D944EA4843, BIOS MBP102.88Z.0106.B0A.1509130955 09/13/2015
[ 4.556984] 0000000000000000 0000000000000000 ffffffff845c6528 ffff8802493b3c68
[ 4.556988] ffffffff81b2e7d9 0000000000000007 ffff8802493b3c98 ffff8802493b3c80
[ 4.556992] ffffffff81bcb87d ffffffffffffffff ffff8802493b3d10 ffffffff81bcc1c1
[ 4.556996] Call Trace:
[ 4.557004] [<ffffffff81b2e7d9>] dump_stack+0x45/0x6c
[ 4.557010] [<ffffffff81bcb87d>] ubsan_epilogue+0xd/0x40
[ 4.557015] [<ffffffff81bcc1c1>] __ubsan_handle_shift_out_of_bounds+0xf1/0x140
[ 4.557020] [<ffffffff81438f49>] ? __kmalloc+0x209/0x5f0
[ 4.557025] [<ffffffff8220a615>] ? usb_alloc_urb+0x15/0x40
[ 4.557030] [<ffffffff822247af>] ? proc_do_submiturb+0x9af/0x2c30
[ 4.557034] [<ffffffff82226794>] proc_do_submiturb+0x2994/0x2c30
[ 4.557039] [<ffffffff811eb821>] ? blocking_notifier_call_chain+0x11/0x20
[ 4.557044] [<ffffffff8222733b>] usbdev_do_ioctl+0x90b/0x2170
[ 4.557049] [<ffffffff81279fe4>] ? hrtimer_start_range_ns+0x274/0xc60
[ 4.557053] [<ffffffff82228bb9>] usbdev_ioctl+0x9/0x10
[ 4.557059] [<ffffffff8148a322>] do_vfs_ioctl+0xd2/0xcb0
[ 4.557063] [<ffffffff8148af74>] SyS_ioctl+0x74/0x80
[ 4.557067] [<ffffffff82b40a57>] entry_SYSCALL_64_fastpath+0x12/0x6a
[ 4.557070] ================================================================================
next reply other threads:[~2016-01-26 10:11 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-01-26 10:11 Chris Bainbridge [this message]
2016-01-26 15:25 ` UBSAN: Undefined behaviour in drivers/usb/core/devio.c:1517:25 Alan Stern
2016-01-26 16:03 ` Andrey Ryabinin
2016-01-26 16:43 ` Greg KH
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160126101101.GB5054@localhost \
--to=chris.bainbridge@gmail.com \
--cc=aryabinin@virtuozzo.com \
--cc=gregkh@linuxfoundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-usb@vger.kernel.org \
--cc=stern@rowland.harvard.edu \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox