Received: by 2002:ab2:69cc:0:b0:1fd:c486:4f03 with SMTP id n12csp397299lqp; Tue, 11 Jun 2024 07:42:45 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCWV80QwZwx8au0imyQStNT21o2EXSMwPO/k3jvM6hLCxTY191H+M1Jn4NOEttVPKRnt8BAH9GQwnbIya5L+WDT6vWzWpq369sucwUM2LA== X-Google-Smtp-Source: AGHT+IH25B8kY/lYb2r0Wl2XB+VEPQGD3IBXEWoV2xps1TG8xS8bx8cGGd8GJ2iEM0jVzhv0UhdR X-Received: by 2002:a9d:6e11:0:b0:6f9:6a9c:2632 with SMTP id 46e09a7af769-6f96a9c27demr9491418a34.36.1718116965036; Tue, 11 Jun 2024 07:42:45 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1718116965; cv=pass; d=google.com; s=arc-20160816; b=cb8YnI+v8LS7ckTZPc03geB04vqQukzBtKXubPxvwDIEiabTWRuFaJsWs519+KMers +vlV+xUROP6Fquk0tVQkNKj3LHCd5P8rsmGtFVlY6vfu3VarcUVfcQI6hlrYF1A8Za1T xdA0i7Z4lXDBMFJx98ca/4R3L5KSbRK6g+RlZaWUxmVJYc9Ptfrb4qRpSUrqNoYFB3ns i9GJu6x4n6XG9+fcZi8ocHr+inEsKywJxDPzZg1ROVlPIEQjMaiVGHxAM+VwhD7bqDGQ 7guBm59ywvkX6LMDmKNfU27/ZFHRSEwaaCRd0J5W3em8sCv15udhpHpgYZmkfng/LVtK oOiQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-disposition:mime-version:list-unsubscribe:list-subscribe :list-id:precedence:message-id:subject:cc:to:from:date; bh=5rt6O5fUXXUo/f6qyxo2P81mWoM+rNrU59emQ5beLgY=; fh=nSIBTOuQoYgnrBT1iRW1UNgj+B+LQVK9YtHakozJUTY=; b=vskxXdXwpLg+cBvAZGGph5Oyig5uYX6JR02DdF4p/pp3pTj4OwUV+RZcOOkcubSShu ANPfTQ6qdMgWjN6Lmcx6xonkR7c/vKdjdEW8CjS/PuGPMCxLUhlFQ0oU1rq4jcPftOOR BGYb0D8UofvhoYvXsS2vh6DW9IVS1EsR3n4fV3BGG757SLjI/Qi2teeXLcR6otfDGO5P xLF2w4faYTZitRXxeBV+NecxP+qXJlr+Ihiqg7X4dokFgrNU7d3NlVbYzlo64iCx7M6i t1sB2BbGQqK+PAzu6LKVPVQVOJAmPI8UtxFdE10iaJHS704RwZ4ZtQD5+7NhszkJp5xn ybOw==; dara=google.com ARC-Authentication-Results: i=2; mx.google.com; arc=pass (i=1 spf=pass spfdomain=netrider.rowland.org); spf=pass (google.com: domain of linux-kernel+bounces-210074-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-210074-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=harvard.edu Return-Path: Received: from ny.mirrors.kernel.org (ny.mirrors.kernel.org. [147.75.199.223]) by mx.google.com with ESMTPS id af79cd13be357-797c115f657si233162185a.353.2024.06.11.07.42.44 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 11 Jun 2024 07:42:45 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel+bounces-210074-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223; Authentication-Results: mx.google.com; arc=pass (i=1 spf=pass spfdomain=netrider.rowland.org); spf=pass (google.com: domain of linux-kernel+bounces-210074-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) smtp.mailfrom="linux-kernel+bounces-210074-linux.lists.archive=gmail.com@vger.kernel.org"; dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=harvard.edu Received: from smtp.subspace.kernel.org (wormhole.subspace.kernel.org [52.25.139.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ny.mirrors.kernel.org (Postfix) with ESMTPS id DCBD91C22F94 for ; Tue, 11 Jun 2024 14:42:43 +0000 (UTC) Received: from localhost.localdomain (localhost.localdomain [127.0.0.1]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 754B817DE10; Tue, 11 Jun 2024 14:42:38 +0000 (UTC) Received: from netrider.rowland.org (netrider.rowland.org [192.131.102.5]) by smtp.subspace.kernel.org (Postfix) with SMTP id 9ECC75336D for ; Tue, 11 Jun 2024 14:42:35 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=192.131.102.5 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718116958; cv=none; b=QsrEEkJ+yHASFFb2rQL0zzAF7XV+pTj5DY8EmYjf9CrA2SSiwvK2+yXNTLhJCN5dLxxE0ujVe7XkhMYSpfny2aub6rNB4Iz0fQepk3R7Yhz7J0p1Wi+/I1dRoh68phVKIHxhl6vzoIhwKRll+6HRzPVAS3Qp7eRL58xrHfP9ER8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1718116958; c=relaxed/simple; bh=lpL6QNJjXCBFbtv3R8mkFrzu5fnUyyaC2qtaiWa87M8=; h=Date:From:To:Cc:Subject:Message-ID:MIME-Version:Content-Type: Content-Disposition; b=Q7UsXdUcSTuMqbTo441rTwKEu7Ue95YedXt+oUPxdVkpT9pJNZN1mivDPYnauC0uLDJ7zKxMynaoFMRH24NSCOVIVTCONuM87omlEp11LmJRFmlkkmPa6tm/ejcT78wNtc0v4w0Sob68zsso3rWUNhEoLfuANQ3Lm+rVPIhVbTo= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=rowland.harvard.edu; spf=pass smtp.mailfrom=netrider.rowland.org; arc=none smtp.client-ip=192.131.102.5 Authentication-Results: smtp.subspace.kernel.org; dmarc=fail (p=none dis=none) header.from=rowland.harvard.edu Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=netrider.rowland.org Received: (qmail 187946 invoked by uid 1000); 11 Jun 2024 10:35:12 -0400 Date: Tue, 11 Jun 2024 10:35:12 -0400 From: Alan Stern To: Greg KH , Oliver Neukum Cc: USB mailing list , Kernel development list Subject: USB Denial Of Service Message-ID: <40dfa45b-5f21-4eef-a8c1-51a2f320e267@rowland.harvard.edu> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Greg, Oliver, or anyone else: Questions: If a broken or malicious device causes a USB class driver to add a thousand (or more) error messages per second to the kernel log, indefinitely, would that be considered a form of DOS? Should the driver be fixed? What is an acceptable rate for an unending stream of error messages? Once a second? Once a minute? At what point should the driver give up and stop trying to communicate with the device? (These are not moot questions. There are indeed drivers, and probably not just in the USB subsystem, subject to this sort of behavior.) Alan Stern