Re: [BUG] UBSAN: Array-Index-Out-of-Bounds in usbhid_parse (HID) on 6.14.0-rc4

From: Terry Junge
Date: Thu Mar 20 2025 - 00:42:41 EST




On 3/4/25 7:14 AM, Alan Stern wrote:
> On Tue, Mar 04, 2025 at 10:21:03AM +0800, Strforexc yn wrote:
>> I hadn’t come across this patch earlier—thanks for sharing it! After
>> reviewing it, I can see that it addresses the UBSAN
>> array-index-out-of-bounds issue
>>
>> Alan Stern <stern@xxxxxxxxxxxxxxxxxxx> 于2025年3月4日周二 00:02写道:
>>> Have you seen this patch or tried to test it?
>>>
>>> https://lore.kernel.org/linux-usb/20250131151600.410242-1-n.zhandarovich@xxxxxxxxxx/
>
> You might want to work with Nikita on testing, improving, or
> resubmitting the patch, because it hasn't been merged into the kernel
> yet (as far as I know).
>
> Alan Stern
>

You may also want to try this patch that addresses the same issue by eliminating the for loop.

https://lore.kernel.org/linux-input/20250312222333.2296363-1-linuxhid@xxxxxxxxxxxxxxxxxxxxxx/

Terry Junge