[GIT PULL] USB driver fixes for 4.15-rc4

From: Greg KH
Date: Fri Dec 15 2017 - 14:01:05 EST


The following changes since commit 50c4c4e268a2d7a3e58ebb698ac74da0de40ae36:

Linux 4.15-rc3 (2017-12-10 17:56:26 -0800)

are available in the Git repository at:

git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git/ tags/usb-4.15-rc4

for you to fetch changes up to 48a4ff1c7bb5a32d2e396b03132d20d552c0eca7:

USB: core: prevent malicious bNumInterfaces overflow (2017-12-13 12:28:43 +0100)

----------------------------------------------------------------
USB fixes for 4.15-rc4

Here are some USB fixes for 4.15-rc4.

There is the usual handful gadget/dwc2/dwc3 fixes as always, for
reported issues. But the most important things in here is the core fix
from Alan Stern to resolve a nasty security bug (my first attempt is
reverted, Alan's was much cleaner), as well as a number of usbip fixes
from Shuah Khan to resolve those reported security issues.

All of these have been in linux-next with no reported issues.

Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>

----------------------------------------------------------------
Alan Stern (1):
USB: core: prevent malicious bNumInterfaces overflow

Andreas Platschek (1):
usb: dwc3: of-simple: fix missing clk_disable_unprepare

Andrey Konovalov (1):
USB: core: only clean up what we allocated

Arnd Bergmann (1):
usb: gadget: webcam: fix V4L2 Kconfig dependency

Bin Liu (1):
usb: musb: da8xx: fix babble condition handling

Chunfeng Yun (1):
usb: xhci: fix TDS for MTK xHCI1.1

David Kozub (1):
USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID

Felipe Balbi (1):
Revert "usb: gadget: allow to enable legacy drivers without USB_ETH"

Greg Kroah-Hartman (2):
Merge tag 'fixes-for-v4.15-rc4' of git://git.kernel.org/.../balbi/usb into usb-linus
Revert "USB: core: only clean up what we allocated"

Julien BOIBESSOT (1):
tools/usbip: fixes potential (minor) "buffer overflow" (detected on recent gcc with -Werror)

Manu Gautam (1):
usb: dwc3: gadget: Fix PCM1 for ISOC EP with ep->mult less than 3

Masahiro Yamada (1):
usb: dwc3: of-simple: set dev_pm_ops

Mathias Nyman (1):
xhci: Don't add a virt_dev to the devs array before it's fully allocated

Minas Harutyunyan (1):
usb: dwc2: Fix TxFIFOn sizes and total TxFIFO size issues

Shuah Khan (4):
usbip: fix stub_rx: get_pipe() to validate endpoint number
usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input
usbip: prevent vhci_hcd driver from leaking a socket pointer address
usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer

Vincent Pelletier (1):
usb: dwc3: gadget: Wait longer for controller to end command processing

drivers/usb/core/config.c | 4 ++-
drivers/usb/dwc2/core.h | 4 +++
drivers/usb/dwc2/gadget.c | 42 ++---------------------------
drivers/usb/dwc2/params.c | 29 +++++++++++++-------
drivers/usb/dwc3/dwc3-of-simple.c | 5 +++-
drivers/usb/dwc3/gadget.c | 4 +--
drivers/usb/gadget/Kconfig | 4 +--
drivers/usb/gadget/legacy/Kconfig | 12 +--------
drivers/usb/host/xhci-mem.c | 15 ++++++++---
drivers/usb/host/xhci-ring.c | 6 ++---
drivers/usb/musb/da8xx.c | 10 ++++++-
drivers/usb/storage/unusual_devs.h | 7 +++++
drivers/usb/storage/unusual_uas.h | 7 +++++
drivers/usb/usbip/stub_rx.c | 51 +++++++++++++++++++++++++++++-------
drivers/usb/usbip/stub_tx.c | 7 +++++
drivers/usb/usbip/usbip_common.h | 1 +
drivers/usb/usbip/vhci_sysfs.c | 25 +++++++++++-------
tools/usb/usbip/libsrc/vhci_driver.c | 10 +++----
18 files changed, 144 insertions(+), 99 deletions(-)