[GIT PULL] USB driver fixes for 4.15-rc4
From: Greg KH
Date: Fri Dec 15 2017 - 14:01:05 EST
The following changes since commit 50c4c4e268a2d7a3e58ebb698ac74da0de40ae36:
Linux 4.15-rc3 (2017-12-10 17:56:26 -0800)
are available in the Git repository at:
git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git/ tags/usb-4.15-rc4
for you to fetch changes up to 48a4ff1c7bb5a32d2e396b03132d20d552c0eca7:
USB: core: prevent malicious bNumInterfaces overflow (2017-12-13 12:28:43 +0100)
----------------------------------------------------------------
USB fixes for 4.15-rc4
Here are some USB fixes for 4.15-rc4.
There is the usual handful gadget/dwc2/dwc3 fixes as always, for
reported issues. But the most important things in here is the core fix
from Alan Stern to resolve a nasty security bug (my first attempt is
reverted, Alan's was much cleaner), as well as a number of usbip fixes
from Shuah Khan to resolve those reported security issues.
All of these have been in linux-next with no reported issues.
Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
----------------------------------------------------------------
Alan Stern (1):
USB: core: prevent malicious bNumInterfaces overflow
Andreas Platschek (1):
usb: dwc3: of-simple: fix missing clk_disable_unprepare
Andrey Konovalov (1):
USB: core: only clean up what we allocated
Arnd Bergmann (1):
usb: gadget: webcam: fix V4L2 Kconfig dependency
Bin Liu (1):
usb: musb: da8xx: fix babble condition handling
Chunfeng Yun (1):
usb: xhci: fix TDS for MTK xHCI1.1
David Kozub (1):
USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID
Felipe Balbi (1):
Revert "usb: gadget: allow to enable legacy drivers without USB_ETH"
Greg Kroah-Hartman (2):
Merge tag 'fixes-for-v4.15-rc4' of git://git.kernel.org/.../balbi/usb into usb-linus
Revert "USB: core: only clean up what we allocated"
Julien BOIBESSOT (1):
tools/usbip: fixes potential (minor) "buffer overflow" (detected on recent gcc with -Werror)
Manu Gautam (1):
usb: dwc3: gadget: Fix PCM1 for ISOC EP with ep->mult less than 3
Masahiro Yamada (1):
usb: dwc3: of-simple: set dev_pm_ops
Mathias Nyman (1):
xhci: Don't add a virt_dev to the devs array before it's fully allocated
Minas Harutyunyan (1):
usb: dwc2: Fix TxFIFOn sizes and total TxFIFO size issues
Shuah Khan (4):
usbip: fix stub_rx: get_pipe() to validate endpoint number
usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input
usbip: prevent vhci_hcd driver from leaking a socket pointer address
usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer
Vincent Pelletier (1):
usb: dwc3: gadget: Wait longer for controller to end command processing
drivers/usb/core/config.c | 4 ++-
drivers/usb/dwc2/core.h | 4 +++
drivers/usb/dwc2/gadget.c | 42 ++---------------------------
drivers/usb/dwc2/params.c | 29 +++++++++++++-------
drivers/usb/dwc3/dwc3-of-simple.c | 5 +++-
drivers/usb/dwc3/gadget.c | 4 +--
drivers/usb/gadget/Kconfig | 4 +--
drivers/usb/gadget/legacy/Kconfig | 12 +--------
drivers/usb/host/xhci-mem.c | 15 ++++++++---
drivers/usb/host/xhci-ring.c | 6 ++---
drivers/usb/musb/da8xx.c | 10 ++++++-
drivers/usb/storage/unusual_devs.h | 7 +++++
drivers/usb/storage/unusual_uas.h | 7 +++++
drivers/usb/usbip/stub_rx.c | 51 +++++++++++++++++++++++++++++-------
drivers/usb/usbip/stub_tx.c | 7 +++++
drivers/usb/usbip/usbip_common.h | 1 +
drivers/usb/usbip/vhci_sysfs.c | 25 +++++++++++-------
tools/usb/usbip/libsrc/vhci_driver.c | 10 +++----
18 files changed, 144 insertions(+), 99 deletions(-)