Received: by 2002:a05:6a10:a852:0:0:0:0 with SMTP id d18csp476538pxy; Wed, 5 May 2021 06:50:38 -0700 (PDT) X-Google-Smtp-Source: ABdhPJw4wOM1G+askN6C8VeeY737kGjGhYJhE2AWkZd/0e/YY77CMkRBv9FViT8M9/29ntZuz4+B X-Received: by 2002:a62:65c7:0:b029:278:e19f:f838 with SMTP id z190-20020a6265c70000b0290278e19ff838mr28962148pfb.64.1620222638050; Wed, 05 May 2021 06:50:38 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1620222638; cv=none; d=google.com; s=arc-20160816; b=mBudfWCHK7MNWI+98Z1dkSsp+u9OaKEDggVPFr5Qhz9hJEXtumuNA1iwQLKBkf9SW5 FjQXwDHhqBfd5ZdT1xHZTmKrbW28uriGAkAfpgMVrEaCBzQ4OrEOmQpLMshqS8GgV5/c riT12YmLNA02gNPyU52dotGsj3epatX1rtZemHCWETdCpeFKD4TywNWK9kvWRSoXV64Z SZy0e6kmyNTvfrGFNBE7RtOoYON8Bbgw+4WEE1Pvnhh6q/ut0EumNDd1gUWAuWmWBJ7J w76pfhiznUZGYQoDgXVjbBbBWeCUREoU/ZoKcOwgT8+ukZTKM+6+Z7O9Lg46K9O45RKw keEQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:cc:to:subject:message-id:date:from:in-reply-to :references:mime-version:dkim-signature; bh=Y66UDdCQVyt6iTD3be2pNfjrnjlN1nlgdtRgR8WWsZk=; b=J5k3fzb6B4tWXXoFZujxeyWL4OalK7GLbIkgamGp4gcqZXO8pHRWPpu/18Mxk5voDB b45NaI7eW0fTRBcRl9yR9GtKIFPzldi/OrnuQh4UY06sMCQh3o2EwYlg93hsJddblkkf apUQ+MctEub3xkgf5APdI6owde/191LKEMFQ//xwYj+jxteD1j+RFPHtG7fCi2YMi2eU trEQGIs6ryU7RrRpPWOYQp5f6DFr6iNZ0zKn40JYnaOctRvFARlSolqM5UDg65XF/t5A XfMir4liwe0xu4zLdtWk3ujS/zssM0fIr6RWuB7F9mxq/LXms26aDRLD+ZwU2tA0V9Ms JscQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b="EEz2WFJ/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id u3si24198911pjf.151.2021.05.05.06.50.24; Wed, 05 May 2021 06:50:38 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; dkim=pass header.i=@redhat.com header.s=mimecast20190719 header.b="EEz2WFJ/"; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=redhat.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S233035AbhEENsv (ORCPT + 99 others); Wed, 5 May 2021 09:48:51 -0400 Received: from us-smtp-delivery-124.mimecast.com ([170.10.133.124]:58361 "EHLO us-smtp-delivery-124.mimecast.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S232671AbhEENsq (ORCPT ); Wed, 5 May 2021 09:48:46 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1620222470; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=Y66UDdCQVyt6iTD3be2pNfjrnjlN1nlgdtRgR8WWsZk=; b=EEz2WFJ/t91suY0PGU04xtescAbSj62ELoYOhW4wWN96wL4C1ek0PBGXwchJSzEj8eoFaR KICBkW+dACBQJ6EZlSgniXtBBZ5JSukOsCQscxVP7WRkZHtSlK3XWLQMgKOaIVrpFnvVSs JLCL8fgNOBRpJejMIBbjwY6XX0nkTaM= Received: from mail-pf1-f197.google.com (mail-pf1-f197.google.com [209.85.210.197]) (Using TLS) by relay.mimecast.com with ESMTP id us-mta-258-nh-c7lL-PgeNjSVUqGEFcA-1; Wed, 05 May 2021 09:47:48 -0400 X-MC-Unique: nh-c7lL-PgeNjSVUqGEFcA-1 Received: by mail-pf1-f197.google.com with SMTP id o129-20020a6292870000b0290241fe341603so1450774pfd.14 for ; Wed, 05 May 2021 06:47:48 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=Y66UDdCQVyt6iTD3be2pNfjrnjlN1nlgdtRgR8WWsZk=; b=s+2ZHOPRf68VFFrtagedGms/U/qaI5mWbrTM+PM6RxYGuFDAIV0Y7r6dJmYZTljeOV SzV2V96Ap9BzxNyIjqDquGY9Sb/0O1LGB/rpEBbOg73SP/m82Ua8B/naEXS98NWgOTSo TVNwwGE+FhefBXNg2vfh8g1MO1OXlN3UVr42Y37+VRCs5qpEyHZBYoGXC9dmp/jhjRdc 0KQka6Ife/Tp9yUpjfitbxhPn18zxFiJawEmFiShs6BmJrjEPKYzSwDYz8dQMFNSEywA Imaz0mI6F6/GKIYWnE5bNHJsox71MvNXFkrrqUxInesqotMP11jvyrMd8nL/lAOCqzJ/ qnEg== X-Gm-Message-State: AOAM5332iI6U8bWtgkjDVbKqcgGvCeBTy6KbdWQADlrO96CpmK9Lvjcp 7PL6H9F/f+GHRFW49Rq4bSr2I7whJmNpV3XtvwrAyFoeG/1gNiiEhkP1Hjd1C88GFmg+g0E4BT1 ZbKSlHPPO/nxzt7b4fDzgM7dpBBymANy6YEGoQYoM X-Received: by 2002:a62:bd13:0:b029:25c:5ec4:c2f3 with SMTP id a19-20020a62bd130000b029025c5ec4c2f3mr28336997pff.35.1620222467041; Wed, 05 May 2021 06:47:47 -0700 (PDT) X-Received: by 2002:a62:bd13:0:b029:25c:5ec4:c2f3 with SMTP id a19-20020a62bd130000b029025c5ec4c2f3mr28336975pff.35.1620222466853; Wed, 05 May 2021 06:47:46 -0700 (PDT) MIME-Version: 1.0 References: <20210425173353.10231-1-mail@anirudhrb.com> In-Reply-To: From: Benjamin Tissoires Date: Wed, 5 May 2021 15:47:36 +0200 Message-ID: Subject: Re: [PATCH] usbhid: fix info leak in hid_submit_ctrl To: Jiri Kosina Cc: Anirudh Rayabharam , Greg Kroah-Hartman , linux-kernel-mentees@lists.linuxfoundation.org, syzbot+7c2bb71996f95a82524c@syzkaller.appspotmail.com, Linux USB Mailing List , "open list:HID CORE LAYER" , lkml Content-Type: text/plain; charset="UTF-8" Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Wed, May 5, 2021 at 3:28 PM Jiri Kosina wrote: > > On Wed, 5 May 2021, Benjamin Tissoires wrote: > > > I don't have a reproducer like syzbot has for the exact bug here, as I > > am relying on one real USB device to check if usbhid is not too broken. > > However, the test suite should catch if there is an error implied by the > > hid_report_len() change. > > Yes, that was exactly what I wanted to check, sorry for not being verbose > enough :) > > > Anyway, I manually started the job and will report when it is done. > Heh, no problems. "Job succeeded" \o/ Given that you are on a spree: Acked-by: Benjamin Tissoires Cheers, Benjamin