2022-08-22 15:36:19

by Johan Hovold

[permalink] [raw]
Subject: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

Commit d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint
type") tried to add an endpoint type sanity check for the single
isochronous endpoint but instead broke the driver by checking the wrong
descriptor or random data beyond the last endpoint descriptor.

Make sure to check the right endpoint descriptor.

Fixes: d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint type")
Cc: Oliver Neukum <[email protected]>
Cc: [email protected] # 5.9
Reported-by: Dongliang Mu <[email protected]>
Signed-off-by: Johan Hovold <[email protected]>
---

It's been two months and two completely ignored reminders so resending.

Can someone please pick this fix up and let me know when that has been
done?

Johan


drivers/media/usb/b2c2/flexcop-usb.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/media/usb/b2c2/flexcop-usb.c b/drivers/media/usb/b2c2/flexcop-usb.c
index 7835bb0f32fc..e012b21c4fd7 100644
--- a/drivers/media/usb/b2c2/flexcop-usb.c
+++ b/drivers/media/usb/b2c2/flexcop-usb.c
@@ -511,7 +511,7 @@ static int flexcop_usb_init(struct flexcop_usb *fc_usb)

if (fc_usb->uintf->cur_altsetting->desc.bNumEndpoints < 1)
return -ENODEV;
- if (!usb_endpoint_is_isoc_in(&fc_usb->uintf->cur_altsetting->endpoint[1].desc))
+ if (!usb_endpoint_is_isoc_in(&fc_usb->uintf->cur_altsetting->endpoint[0].desc))
return -ENODEV;

switch (fc_usb->udev->speed) {
--
2.35.1


2022-09-20 09:24:00

by Johan Hovold

[permalink] [raw]
Subject: Re: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

Mauro and Hans,

On Mon, Aug 22, 2022 at 05:10:27PM +0200, Johan Hovold wrote:
> Commit d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint
> type") tried to add an endpoint type sanity check for the single
> isochronous endpoint but instead broke the driver by checking the wrong
> descriptor or random data beyond the last endpoint descriptor.
>
> Make sure to check the right endpoint descriptor.
>
> Fixes: d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint type")
> Cc: Oliver Neukum <[email protected]>
> Cc: [email protected] # 5.9
> Reported-by: Dongliang Mu <[email protected]>
> Signed-off-by: Johan Hovold <[email protected]>
> ---
>
> It's been two months and two completely ignored reminders so resending.
>
> Can someone please pick this fix up and let me know when that has been
> done?

It's been another month so sending yet another reminder. This driver as
been broken since 5.9 and I posted this fix almost four months ago and
have sent multiple reminders since.

Can someone please pick this one and the follow-up cleanups up?

Johan

> drivers/media/usb/b2c2/flexcop-usb.c | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/drivers/media/usb/b2c2/flexcop-usb.c b/drivers/media/usb/b2c2/flexcop-usb.c
> index 7835bb0f32fc..e012b21c4fd7 100644
> --- a/drivers/media/usb/b2c2/flexcop-usb.c
> +++ b/drivers/media/usb/b2c2/flexcop-usb.c
> @@ -511,7 +511,7 @@ static int flexcop_usb_init(struct flexcop_usb *fc_usb)
>
> if (fc_usb->uintf->cur_altsetting->desc.bNumEndpoints < 1)
> return -ENODEV;
> - if (!usb_endpoint_is_isoc_in(&fc_usb->uintf->cur_altsetting->endpoint[1].desc))
> + if (!usb_endpoint_is_isoc_in(&fc_usb->uintf->cur_altsetting->endpoint[0].desc))
> return -ENODEV;
>
> switch (fc_usb->udev->speed) {

2022-09-22 08:59:51

by Greg Kroah-Hartman

[permalink] [raw]
Subject: Re: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

On Tue, Sep 20, 2022 at 11:00:35AM +0200, Johan Hovold wrote:
> Mauro and Hans,
>
> On Mon, Aug 22, 2022 at 05:10:27PM +0200, Johan Hovold wrote:
> > Commit d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint
> > type") tried to add an endpoint type sanity check for the single
> > isochronous endpoint but instead broke the driver by checking the wrong
> > descriptor or random data beyond the last endpoint descriptor.
> >
> > Make sure to check the right endpoint descriptor.
> >
> > Fixes: d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint type")
> > Cc: Oliver Neukum <[email protected]>
> > Cc: [email protected] # 5.9
> > Reported-by: Dongliang Mu <[email protected]>
> > Signed-off-by: Johan Hovold <[email protected]>
> > ---
> >
> > It's been two months and two completely ignored reminders so resending.
> >
> > Can someone please pick this fix up and let me know when that has been
> > done?
>
> It's been another month so sending yet another reminder. This driver as
> been broken since 5.9 and I posted this fix almost four months ago and
> have sent multiple reminders since.
>
> Can someone please pick this one and the follow-up cleanups up?

I've taken this one in my tree now. Which one were the "follow-up"
cleanups?

thanks,

greg k-h

2022-09-22 10:34:31

by Johan Hovold

[permalink] [raw]
Subject: Re: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

On Thu, Sep 22, 2022 at 10:41:43AM +0200, Greg Kroah-Hartman wrote:
> On Tue, Sep 20, 2022 at 11:00:35AM +0200, Johan Hovold wrote:
> > Mauro and Hans,
> >
> > On Mon, Aug 22, 2022 at 05:10:27PM +0200, Johan Hovold wrote:
> > > Commit d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint
> > > type") tried to add an endpoint type sanity check for the single
> > > isochronous endpoint but instead broke the driver by checking the wrong
> > > descriptor or random data beyond the last endpoint descriptor.
> > >
> > > Make sure to check the right endpoint descriptor.
> > >
> > > Fixes: d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint type")
> > > Cc: Oliver Neukum <[email protected]>
> > > Cc: [email protected] # 5.9
> > > Reported-by: Dongliang Mu <[email protected]>
> > > Signed-off-by: Johan Hovold <[email protected]>
> > > ---
> > >
> > > It's been two months and two completely ignored reminders so resending.
> > >
> > > Can someone please pick this fix up and let me know when that has been
> > > done?
> >
> > It's been another month so sending yet another reminder. This driver as
> > been broken since 5.9 and I posted this fix almost four months ago and
> > have sent multiple reminders since.
> >
> > Can someone please pick this one and the follow-up cleanups up?
>
> I've taken this one in my tree now. Which one were the "follow-up"
> cleanups?

Thanks. These are the follow-up cleanups:

https://lore.kernel.org/lkml/[email protected]/

Perhaps we should start taking USB related changes like this through the
USB tree by default. Posting patches to the media subsystem feels like
shooting patches at a black hole.

Johan

2022-09-22 11:00:37

by Greg Kroah-Hartman

[permalink] [raw]
Subject: Re: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

On Thu, Sep 22, 2022 at 11:37:36AM +0200, Johan Hovold wrote:
> On Thu, Sep 22, 2022 at 10:41:43AM +0200, Greg Kroah-Hartman wrote:
> > On Tue, Sep 20, 2022 at 11:00:35AM +0200, Johan Hovold wrote:
> > > Mauro and Hans,
> > >
> > > On Mon, Aug 22, 2022 at 05:10:27PM +0200, Johan Hovold wrote:
> > > > Commit d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint
> > > > type") tried to add an endpoint type sanity check for the single
> > > > isochronous endpoint but instead broke the driver by checking the wrong
> > > > descriptor or random data beyond the last endpoint descriptor.
> > > >
> > > > Make sure to check the right endpoint descriptor.
> > > >
> > > > Fixes: d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint type")
> > > > Cc: Oliver Neukum <[email protected]>
> > > > Cc: [email protected] # 5.9
> > > > Reported-by: Dongliang Mu <[email protected]>
> > > > Signed-off-by: Johan Hovold <[email protected]>
> > > > ---
> > > >
> > > > It's been two months and two completely ignored reminders so resending.
> > > >
> > > > Can someone please pick this fix up and let me know when that has been
> > > > done?
> > >
> > > It's been another month so sending yet another reminder. This driver as
> > > been broken since 5.9 and I posted this fix almost four months ago and
> > > have sent multiple reminders since.
> > >
> > > Can someone please pick this one and the follow-up cleanups up?
> >
> > I've taken this one in my tree now. Which one were the "follow-up"
> > cleanups?
>
> Thanks. These are the follow-up cleanups:
>
> https://lore.kernel.org/lkml/[email protected]/

Thanks, I'll take them after the first one was merged into Linus's tree.

> Perhaps we should start taking USB related changes like this through the
> USB tree by default. Posting patches to the media subsystem feels like
> shooting patches at a black hole.

I agree, there's been a bunch of patches sent there (some with security
fixes) that are not getting responded to :(

thanks,

greg k-h

2022-09-22 11:00:56

by Sean Young

[permalink] [raw]
Subject: Re: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

On Thu, Sep 22, 2022 at 12:12:24PM +0200, Greg Kroah-Hartman wrote:
> On Thu, Sep 22, 2022 at 11:37:36AM +0200, Johan Hovold wrote:
> > Thanks. These are the follow-up cleanups:
> >
> > https://lore.kernel.org/lkml/[email protected]/
>
> Thanks, I'll take them after the first one was merged into Linus's tree.
>
> > Perhaps we should start taking USB related changes like this through the
> > USB tree by default. Posting patches to the media subsystem feels like
> > shooting patches at a black hole.
>
> I agree, there's been a bunch of patches sent there (some with security
> fixes) that are not getting responded to :(

The patches were missed are all DVB related, which is Mauro's responsibility.

As far as I can see, other parts of the media subsystem are well looked after.


Sean

2022-09-22 11:06:38

by Greg Kroah-Hartman

[permalink] [raw]
Subject: Re: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

On Thu, Sep 22, 2022 at 11:39:27AM +0100, Sean Young wrote:
> On Thu, Sep 22, 2022 at 12:12:24PM +0200, Greg Kroah-Hartman wrote:
> > On Thu, Sep 22, 2022 at 11:37:36AM +0200, Johan Hovold wrote:
> > > Thanks. These are the follow-up cleanups:
> > >
> > > https://lore.kernel.org/lkml/[email protected]/
> >
> > Thanks, I'll take them after the first one was merged into Linus's tree.
> >
> > > Perhaps we should start taking USB related changes like this through the
> > > USB tree by default. Posting patches to the media subsystem feels like
> > > shooting patches at a black hole.
> >
> > I agree, there's been a bunch of patches sent there (some with security
> > fixes) that are not getting responded to :(
>
> The patches were missed are all DVB related, which is Mauro's responsibility.
>
> As far as I can see, other parts of the media subsystem are well looked after.

That's good, it's hard to know who is responsible for which parts at
times.

Hopefully Mauro comes back soon...

greg k-h

2022-09-26 09:37:03

by Greg Kroah-Hartman

[permalink] [raw]
Subject: Re: [PATCH RESEND] media: flexcop-usb: fix endpoint type check

On Thu, Sep 22, 2022 at 12:12:24PM +0200, Greg Kroah-Hartman wrote:
> On Thu, Sep 22, 2022 at 11:37:36AM +0200, Johan Hovold wrote:
> > On Thu, Sep 22, 2022 at 10:41:43AM +0200, Greg Kroah-Hartman wrote:
> > > On Tue, Sep 20, 2022 at 11:00:35AM +0200, Johan Hovold wrote:
> > > > Mauro and Hans,
> > > >
> > > > On Mon, Aug 22, 2022 at 05:10:27PM +0200, Johan Hovold wrote:
> > > > > Commit d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint
> > > > > type") tried to add an endpoint type sanity check for the single
> > > > > isochronous endpoint but instead broke the driver by checking the wrong
> > > > > descriptor or random data beyond the last endpoint descriptor.
> > > > >
> > > > > Make sure to check the right endpoint descriptor.
> > > > >
> > > > > Fixes: d725d20e81c2 ("media: flexcop-usb: sanity checking of endpoint type")
> > > > > Cc: Oliver Neukum <[email protected]>
> > > > > Cc: [email protected] # 5.9
> > > > > Reported-by: Dongliang Mu <[email protected]>
> > > > > Signed-off-by: Johan Hovold <[email protected]>
> > > > > ---
> > > > >
> > > > > It's been two months and two completely ignored reminders so resending.
> > > > >
> > > > > Can someone please pick this fix up and let me know when that has been
> > > > > done?
> > > >
> > > > It's been another month so sending yet another reminder. This driver as
> > > > been broken since 5.9 and I posted this fix almost four months ago and
> > > > have sent multiple reminders since.
> > > >
> > > > Can someone please pick this one and the follow-up cleanups up?
> > >
> > > I've taken this one in my tree now. Which one were the "follow-up"
> > > cleanups?
> >
> > Thanks. These are the follow-up cleanups:
> >
> > https://lore.kernel.org/lkml/[email protected]/
>
> Thanks, I'll take them after the first one was merged into Linus's tree.

All now queued up, thanks.

greg k-h