Received: by 2002:a05:7412:251c:b0:e2:908c:2ebd with SMTP id w28csp1491638rda; Mon, 23 Oct 2023 14:26:18 -0700 (PDT) X-Google-Smtp-Source: AGHT+IGNOgv1amX1hMAftl1fG1C3jpWvEJ5fQ9Irp2rwSeU/F/Q+QI84S80mwSZ+V+3sPta8HaDZ X-Received: by 2002:a17:902:e88e:b0:1c4:65d5:34ce with SMTP id w14-20020a170902e88e00b001c465d534cemr19791177plg.31.1698096378120; Mon, 23 Oct 2023 14:26:18 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1698096378; cv=none; d=google.com; s=arc-20160816; b=RfzI3MHJlJDw+qP8bIrl/PLvIzxlm5Xclbhrekk1qmMbSI50C8G2Xr8b5u/QTuhnII UxBeJCJO5h0ZWceOGkgih4daH/6G0YJOigzqPafGpYuIx/7+2XR3arJIkpzS5rFbstBZ T1aaRS/19QbB8rRX9ZDh6S3oQTPpu0pbOyJhpbQiYB2W6xVvyVv0xvT3/KG/fVz9M4Dg HxuLCvXqOYtkRuBh6o8k0NDGrX5YK9zeyxmcLUESxhRO9Ii7R4FlPfXugbbwBNWIBm7s W2aRYKQgm0YtBqDvmmX1c32VlQ6oEOPOsiFBT5fC9+pDJIlNVYjEpJryGHEwK0/LbKMd MP3A== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:cc:to:subject :message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=fi/lKgniZUuLKgl9B9aJ0yNCeztsPozgNIRB0HC6oYk=; fh=leuw7y0lYxFHoem044qoUWaCyG8spBUehzRNAOmWbHM=; b=yy6a7CNvac8PZuG8eLCT8eUCxdAu5xUJZ2O4P/oJIfwvtvP4lf2XaHxz0EduWxeWwd G/ggkAQYShbLnUNaz0a9aadJ05K0UF2NWz70h5G9SkH5HAwXfjY1UajBriw8uzZjxQsD MSRzqlKtAtwggds2tIvDqZuvm8UmMNN+7YJOSmnU2Xdpoelkj4xlXuJutzmbl6t5WPlp Y0eTqHUHw/Pkb/KQO7zsAWDkwrkYK/5f47Nm0mt2DlUg295rHEnQpxqPlpGUVrearrfS BXZHcGOLEKO4nFgb0kf6UBv2XaOV31Qb2aOuQu/CSZ81ZWAZO58UdFoHsXGD3EGVeMcX u5gQ== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@google.com header.s=20230601 header.b=OvKfoYcd; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.33 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Return-Path: Received: from lipwig.vger.email (lipwig.vger.email. [23.128.96.33]) by mx.google.com with ESMTPS id m4-20020a170902db0400b001ca0b64f5a6si7189706plx.449.2023.10.23.14.26.17 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 23 Oct 2023 14:26:18 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.33 as permitted sender) client-ip=23.128.96.33; Authentication-Results: mx.google.com; dkim=pass header.i=@google.com header.s=20230601 header.b=OvKfoYcd; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.33 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=google.com Received: from out1.vger.email (depot.vger.email [IPv6:2620:137:e000::3:0]) by lipwig.vger.email (Postfix) with ESMTP id 69B5E8081BDF; Mon, 23 Oct 2023 14:26:15 -0700 (PDT) X-Virus-Status: Clean X-Virus-Scanned: clamav-milter 0.103.10 at lipwig.vger.email Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S231289AbjJWVZt (ORCPT + 99 others); Mon, 23 Oct 2023 17:25:49 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:49236 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S231187AbjJWVZr (ORCPT ); Mon, 23 Oct 2023 17:25:47 -0400 Received: from mail-ej1-x629.google.com (mail-ej1-x629.google.com [IPv6:2a00:1450:4864:20::629]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 539A910A for ; Mon, 23 Oct 2023 14:25:44 -0700 (PDT) Received: by mail-ej1-x629.google.com with SMTP id a640c23a62f3a-9b6559cbd74so578953366b.1 for ; Mon, 23 Oct 2023 14:25:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20230601; t=1698096343; x=1698701143; darn=vger.kernel.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=fi/lKgniZUuLKgl9B9aJ0yNCeztsPozgNIRB0HC6oYk=; b=OvKfoYcd29qJoc/8/kWzDv0zwc3ghu5t7ZsJhSdrOoCu/En63uRbYb7sToApH9FQox fvNxqvC23prxbUZ143QyA0epvLzx53L6OopmB2A/MpdWerkw8eYC4mqdmC2yTfhDo6cl t8wJZMK32dZwsOKyhRHvzhzbstdZ3xoAqDOErKPSwgOZNvZbHEryNUZ4A/v81HXyJZEU GXKXvNitrqK0zWcxodu2y8lFJNHwPkQbtpHbkEvyGPdzZ/KGTH4FPT/MwFqcRYtqZheE tJJmkFb9aY2kOsysP9/8rmi1Acn2PIcwud6CiiWMNyedu4kYBY96jc4+wxzB8hU8aRkW JDhw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1698096343; x=1698701143; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=fi/lKgniZUuLKgl9B9aJ0yNCeztsPozgNIRB0HC6oYk=; b=HDFzdseqylmYEHYoqjFPMCW2+hEelNYqXvPi7YdvB5R7sjWyKdl2/jfjEqhRMLsq9P wZPVoHVkm6qc8Tr78LDnvbFfyhTQzj3/UEr2ObwZMSQHW7flodLGxw+fwU4chynyOkBs W6N8mQ0kyJRoWCN7SxzmOsjSq+8shH/1eQCXAOPhztKu57yHJ7EiKIl3Gg8STMgRMT8E HSM/pVbC2gk8dTNfic7MpcqSG2c96en5izxqEPd2bi8ayu07RabgVFs3QnfmopObcotC W2TP3DMZPL96QIdnPJ1uOPYVtJCPNU9sZ6LQjqoIfzSE+5+BPMXmZCWU9Xms/lr2uSnd Mc3g== X-Gm-Message-State: AOJu0Yzt/hQZh1hQQ3ewQJzXu89alwx38B0vGvZrRg1N9oj/oHKwilr8 HKR5BzCVAdkCj0IK7I9K2kdS7Ju6vQeCEeDW1C5qgg== X-Received: by 2002:a17:907:7fa7:b0:9ae:701a:6efa with SMTP id qk39-20020a1709077fa700b009ae701a6efamr10411814ejc.69.1698096342652; Mon, 23 Oct 2023 14:25:42 -0700 (PDT) MIME-Version: 1.0 References: <20231019185319.2714000-5-arakesh@google.com> <202310200457.GwPPFuHX-lkp@intel.com> <738df245-e7d1-4fc0-9076-3ac5afebaa44@google.com> <2023102103-casually-wavy-6a54@gregkh> In-Reply-To: <2023102103-casually-wavy-6a54@gregkh> From: Avichal Rakesh Date: Mon, 23 Oct 2023 14:25:30 -0700 Message-ID: Subject: Re: [PATCH v6 4/4] usb: gadget: uvc: Fix use-after-free for inflight usb_requests To: Greg KH Cc: etalvala@google.com, jchowdhary@google.com, linux-kernel@vger.kernel.org, linux-usb@vger.kernel.org, dan.scally@ideasonboard.com, laurent.pinchart@ideasonboard.com, m.grzeschik@pengutronix.de Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-8.4 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,USER_IN_DEF_DKIM_WL autolearn=unavailable autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lipwig.vger.email Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org X-Greylist: Sender passed SPF test, not delayed by milter-greylist-4.6.4 (lipwig.vger.email [0.0.0.0]); Mon, 23 Oct 2023 14:26:15 -0700 (PDT) On Sat, Oct 21, 2023 at 3:05=E2=80=AFAM Greg KH wrote: > > On Thu, Oct 19, 2023 at 03:30:00PM -0700, Avichal Rakesh wrote: > > > > > > On 10/19/23 13:32, kernel test robot wrote: > > > Hi Avichal, > > > > > > kernel test robot noticed the following build warnings: > > > > > > [auto build test WARNING on usb/usb-testing] > > > [also build test WARNING on usb/usb-next usb/usb-linus linus/master v= 6.6-rc6 next-20231019] > > > [If your patch is applied to the wrong git tree, kindly drop us a not= e. > > > And when submitting patch, we suggest to use '--base' as documented i= n > > > https://git-scm.com/docs/git-format-patch#_base_tree_information] > > > > > > url: https://github.com/intel-lab-lkp/linux/commits/Avichal-Rakesh= /usb-gadget-uvc-prevent-use-of-disabled-endpoint/20231020-025512 > > > base: https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.gi= t usb-testing > > > patch link: https://lore.kernel.org/r/20231019185319.2714000-5-ara= kesh%40google.com > > > patch subject: [PATCH v6 4/4] usb: gadget: uvc: Fix use-after-free fo= r inflight usb_requests > > > config: m68k-allyesconfig (https://download.01.org/0day-ci/archive/20= 231020/202310200457.GwPPFuHX-lkp@intel.com/config) > > > compiler: m68k-linux-gcc (GCC) 13.2.0 > > > reproduce (this is a W=3D1 build): (https://download.01.org/0day-ci/a= rchive/20231020/202310200457.GwPPFuHX-lkp@intel.com/reproduce) > > > > > > If you fix the issue in a separate patch/commit (i.e. not just a new = version of > > > the same patch/commit), kindly add following tags > > > | Reported-by: kernel test robot > > > | Closes: https://lore.kernel.org/oe-kbuild-all/202310200457.GwPPFuHX= -lkp@intel.com/ > > > > > > All warnings (new ones prefixed by >>): > > > > > >>> drivers/usb/gadget/function/uvc_video.c:231: warning: This comment = starts with '/**', but isn't a kernel-doc comment. Refer Documentation/doc-= guide/kernel-doc.rst > > > * Must be called with req_lock held as it modifies the list ureq = is held in > > > > > > > > > > Greg, apologies for the newb question: do you want me to upload > > the fix for this as a reply to [PATCH v6 4/4], or upload a new chain of > > v7s with this patch fixed? > > A whole new v7 series please. > Had a feeling, so sent out v7 series preemptively. Let me know if that doesn't work. v7: https://lore.kernel.org/20231020173626.2978356-1-arakesh@google.com/ Thank you! - Avi