Badhri Jagan Sridharan d8f28269dd usb: typec: altmodes/displayport: fix pin_assignment_show ...

This patch fixes negative indexing of buf array in pin_assignment_show
when get_current_pin_assignments returns 0 i.e. no compatible pin
assignments are found.

BUG: KASAN: use-after-free in pin_assignment_show+0x26c/0x33c
...
Call trace:
dump_backtrace+0x110/0x204
dump_stack_lvl+0x84/0xbc
print_report+0x358/0x974
kasan_report+0x9c/0xfc
__do_kernel_fault+0xd4/0x2d4
do_bad_area+0x48/0x168
do_tag_check_fault+0x24/0x38
do_mem_abort+0x6c/0x14c
el1_abort+0x44/0x68
el1h_64_sync_handler+0x64/0xa4
el1h_64_sync+0x78/0x7c
pin_assignment_show+0x26c/0x33c
dev_attr_show+0x50/0xc0

Fixes: 0e3bb7d6894d ("usb: typec: Add driver for DisplayPort alternate mode")
Cc: stable@vger.kernel.org
Signed-off-by: Badhri Jagan Sridharan <badhri@google.com>
Reviewed-by: Heikki Krogerus <heikki.krogerus@linux.intel.com>
Link: https://lore.kernel.org/r/20230508214443.893436-1-badhri@google.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-13 18:45:56 +09:00

..

atm

usb: move from strlcpy with unused retval to strscpy

2022-08-19 11:08:54 +02:00

c67x00

USB: c67x00: remove unnecessary check of res

2022-05-12 11:36:46 +02:00

cdns3

Merge 6.3-rc6 into usb-next

2023-04-10 08:56:59 +02:00

chipidea

usb: chipidea: fix missing goto in ci_hdrc_probe

2023-04-20 11:16:42 +02:00

class

USB: usbtmc: Fix direction for 0-length ioctl control messages

2023-05-13 17:25:49 +09:00

common

Char/Misc drivers for 6.4-rc1

2023-04-27 12:07:50 -07:00

core

Driver core changes for 6.4-rc1

2023-04-27 11:53:57 -07:00

dwc2

usb: dwc2: platform: add support for utmi optional clock

2023-04-20 10:17:06 +02:00

dwc3

usb: dwc3: debugfs: Resume dwc3 before accessing registers

2023-05-13 17:56:22 +09:00

early

usb: early: xhci-dbc: Use memcpy_and_pad()

2023-01-31 10:40:54 +01:00

fotg210

USB: fotg210: fix memory leak with using debugfs_lookup()

2023-02-06 13:46:42 +01:00

gadget

Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started"

2023-05-13 18:08:09 +09:00

host

USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value

2023-05-13 17:55:45 +09:00

image

scsi: usb: uas: Declare two host templates and host template pointers const

2023-03-24 19:20:00 -04:00

isp1760

usb: isp1760: Fix out-of-bounds array access

2022-05-19 18:10:59 +02:00

misc

USB: sisusbvga: Add endpoint checks

2023-04-20 11:43:22 +02:00

mon

driver core: class: remove module * from class_create()

2023-03-17 15:16:33 +01:00

mtu3

usb: mtu3: add optional clock xhci_ck and frmcnt_ck

2023-04-20 11:17:05 +02:00

musb

usb: musb: ux500: Convert to platform remove callback returning void

2023-04-05 19:07:42 +02:00

phy

usb: phy: twl6030: Convert to platform remove callback returning void

2023-03-23 17:35:27 +01:00

renesas_usbhs

usb: renesas_usbhs: drop of_match_ptr for ID table

2023-03-16 12:15:23 +01:00

roles

driver core: class: remove module * from class_create()

2023-03-17 15:16:33 +01:00

serial

Driver core changes for 6.4-rc1

2023-04-27 11:53:57 -07:00

storage

SCSI misc on 20230426

2023-04-26 15:39:25 -07:00

typec

usb: typec: altmodes/displayport: fix pin_assignment_show

2023-05-13 18:45:56 +09:00

usbip

Including fixes from bpf, netfilter and can.

2022-12-21 08:41:32 -08:00

Kconfig

usb: move config USB_USS720 to usb's misc Kconfig

2023-03-29 10:34:08 +02:00

Makefile

usb: host: u132-hcd: Delete driver

2023-03-21 14:06:11 +01:00

usb-skeleton.c

usb: add usb_set_intfdata() documentation

2022-11-29 08:56:09 +01:00