iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/drivers
History
Johan Hovold f376dd8a40 i2c: robotfuzz-osif: fix control-request directions 
commit 4ca070ef0dd885616ef294d269a9bf8e3b258e1a upstream.

The direction of the pipe argument must match the request-type direction
bit or control requests may fail depending on the host-controller-driver
implementation.

Control transfers without a data stage are treated as OUT requests by
the USB stack and should be using usb_sndctrlpipe(). Failing to do so
will now trigger a warning.

Fix the OSIFI2C_SET_BIT_RATE and OSIFI2C_STOP requests which erroneously
used the osif_usb_read() helper and set the IN direction bit.

Reported-by: syzbot+9d7dadd15b8819d73f41@syzkaller.appspotmail.com
Fixes: 83e53a8f120f ("i2c: Add bus driver for for OSIF USB i2c device.")
Cc: stable@vger.kernel.org      # 3.14
Signed-off-by: Johan Hovold <johan@kernel.org>
Signed-off-by: Wolfram Sang <wsa@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-06-30 08:48:34 -04:00
..
accessibility
…
acpi
ACPI: EC: Look for ECDT EC after calling acpi_load_tables()
2021-06-10 13:24:09 +02:00
amba
amba: Fix resource leak for drivers without .remove
2021-03-04 09:39:46 +01:00
android
binder: fix UAF when releasing todo list
2020-10-29 09:54:56 +01:00
ata
ata: libahci_platform: fix IRQ check
2021-05-22 10:59:33 +02:00
atm
atm: idt77252: fix null-ptr-dereference
2021-03-30 14:36:58 +02:00
auxdisplay
auxdisplay: ht16k33: Fix refresh rate handling
2021-03-04 09:39:45 +01:00
base
regmap: set debugfs_name to NULL after it is freed
2021-05-22 10:59:28 +02:00
bcma
…
block
drivers/block/null_blk/main: Fix a double free in null_init.
2021-05-22 10:59:34 +02:00
bluetooth
Bluetooth: hci_h5: Set HCI_QUIRK_SIMULTANEOUS_DISCOVERY for btrtl
2021-03-07 12:18:57 +01:00
bus
bus: qcom: Put child node before return
2021-05-22 10:59:29 +02:00
cdrom
cdrom: gdrom: initialize global variable at init time
2021-05-26 11:48:34 +02:00
char
char: hpet: add checks after calling ioremap
2021-06-03 08:38:09 +02:00
clk
clk: exynos7: Mark aclk_fsys1_200 as critical
2021-05-22 10:59:47 +02:00
clocksource
clocksource/drivers/mxs_timer: Add missing semicolon when DEBUG is defined
2021-03-04 09:39:44 +01:00
connector
…
cpufreq
cpufreq: armada-37xx: Fix determining base CPU frequency
2021-05-22 10:59:31 +02:00
cpuidle
cpuidle: Fixup IRQ state
2020-09-09 19:04:23 +02:00
crypto
crypto: qat - Fix a double free in adf_create_ring
2021-05-22 10:59:30 +02:00
dax
…
dca
…
devfreq
PM / devfreq: tegra30: Fix integer overflow on CPU's freq max out
2020-10-01 13:14:26 +02:00
dio
…
dma
dmaengine: pl330: fix wrong usage of spinlock flags in dma_cyclc
2021-06-30 08:48:25 -04:00
dma-buf
dma-fence: Serialise signal enabling (dma_fence_enable_sw_signaling)
2020-10-01 13:14:24 +02:00
edac
EDAC/amd64: Fix PCI component registration
2020-12-30 11:26:10 +01:00
eisa
…
extcon
extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged
2021-05-22 10:59:16 +02:00
firewire
firewire: nosy: Fix a use-after-free bug in nosy_ioctl()
2021-04-07 12:48:50 +02:00
firmware
efi: cper: fix snprintf() use in cper_dimm_err_location()
2021-06-10 13:24:04 +02:00
fmc
…
fpga
fpga: dfl: fix bug in port reset handshake
2020-07-29 10:16:48 +02:00
fsi
…
gnss
…
gpio
gpiolib: acpi: Add quirk to ignore EC wakeups on Dell Venue 10 Pro 5055
2021-05-22 10:59:49 +02:00
gpu
drm/radeon: wait for moving fence after pinning
2021-06-30 08:48:28 -04:00
hid
HID: gt683r: add missing MODULE_DEVICE_TABLE
2021-06-30 08:48:11 -04:00
hsi
HSI: core: fix resource leaks in hsi_add_client_from_dt()
2021-05-22 10:59:34 +02:00
hv
Drivers: hv: vmbus: Increase wait time for VMbus unload
2021-05-22 10:59:32 +02:00
hwmon
hwmon: (scpi-hwmon) shows the negative temperature properly
2021-06-30 08:48:22 -04:00
hwspinlock
…
hwtracing
intel_th: pci: Add Alder Lake-M support
2021-05-22 10:59:20 +02:00
i2c
i2c: robotfuzz-osif: fix control-request directions
2021-06-30 08:48:34 -04:00
ide
block: genhd: add 'groups' argument to device_add_disk
2021-03-11 14:04:59 +01:00
idle
…
iio
iio: adc: ad7793: Add missing error code in ad7793_setup()
2021-06-03 08:38:04 +02:00
infiniband
IB/mlx5: Fix initializing CQ fragments buffer
2021-06-16 11:55:01 +02:00
input
Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state
2021-05-22 10:59:48 +02:00
iommu
iommu/vt-d: Fix sysfs leak in alloc_iommu()
2021-06-03 08:38:02 +02:00
ipack
…
irqchip
irqchip/gic-v3: Fix OF_BAD_ADDR error handling
2021-05-22 10:59:30 +02:00
isdn
isdn: mISDN: netjet: Fix crash in nj_probe:
2021-06-16 11:54:57 +02:00
leds
leds: lp5523: check return value of lp5xx_read and jump to cleanup code
2021-05-26 11:48:35 +02:00
lightnvm
lightnvm: select CONFIG_CRC32
2021-01-17 14:04:22 +01:00
macintosh
…
mailbox
mailbox: avoid timer start from callback
2020-10-30 10:38:21 +01:00
mcb
…
md
dm snapshot: properly fix a crash when an origin has no snapshots
2021-06-03 08:38:04 +02:00
media
media: gspca: properly check for errors in po1030_probe()
2021-06-03 08:38:10 +02:00
memory
memory: gpmc: fix out of bounds read and dereference on gpmc_cs[]
2021-05-22 10:59:27 +02:00
memstick
block: genhd: add 'groups' argument to device_add_disk
2021-03-11 14:04:59 +01:00
message
scsi: mptfusion: Fix null pointer dereferences in mptscsih_remove()
2020-11-05 11:08:47 +01:00
mfd
mfd: stm32-timers: Avoid clearing auto reload register
2021-05-22 10:59:34 +02:00
misc
platform/x86: hp_accel: Avoid invoking _INI to speed up resume
2021-06-03 08:38:09 +02:00
mmc
mmc: core: Set read only for SD cards with permanent write protect bit
2021-05-22 10:59:13 +02:00
mtd
mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init
2021-05-22 10:59:30 +02:00
mux
…
net
net: ll_temac: Avoid ndo_start_xmit returning NETDEV_TX_BUSY
2021-06-30 08:48:33 -04:00
nfc
nfc: pn533: prevent potential memory corruption
2021-05-22 10:59:35 +02:00
ntb
NTB: hw: amd: fix an issue about leak system resources
2020-10-30 10:38:25 +01:00
nubus
…
nvdimm
block: genhd: add 'groups' argument to device_add_disk
2021-03-11 14:04:59 +01:00
nvme
nvme-loop: check for NVME_LOOP_Q_LIVE in nvme_loop_destroy_admin_queue()
2021-06-30 08:48:12 -04:00
nvmem
…
of
Revert "fdt: Properly handle "no-map" field in the memory region"
2021-05-22 10:59:39 +02:00
opp
…
oprofile
…
parisc
parisc: mask out enable and reserved bits from sba imask
2020-08-19 08:15:07 +02:00
parport
…
pci
Revert "PCI: PM: Do not read power state in pci_enable_device_flags()"
2021-06-30 08:48:29 -04:00
pcmcia
…
perf
perf/arm_pmu_platform: Fix error handling
2021-05-22 10:59:15 +02:00
phy
phy: marvell: ARMADA375_USBCLUSTER_PHY should not default to y, unconditionally
2021-05-22 10:59:29 +02:00
pinctrl
pinctrl: stm32: fix the reported number of GPIO lines per bank
2021-06-30 08:48:34 -04:00
platform
platform/x86: intel_punit_ipc: Append MODULE_DEVICE_TABLE for ACPI
2021-06-03 08:38:10 +02:00
pnp
…
power
power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove()
2021-05-22 10:59:17 +02:00
powercap
powercap: restrict energy meter to root access
2020-11-10 21:11:27 +01:00
pps
…
ps3
powerpc/ps3: use dma_mapping_error()
2020-12-30 11:26:04 +01:00
ptp
ptp: improve max_adj check against unreasonable values
2021-06-30 08:48:19 -04:00
pwm
pwm: rockchip: rockchip_pwm_probe(): Remove superfluous clk_unprepare()
2021-03-04 09:39:48 +01:00
rapidio
rapidio: handle create_workqueue() failure
2021-05-26 11:48:33 +02:00
ras
…
regulator
regulator: max77620: Use device_set_of_node_from_dev()
2021-06-16 11:55:00 +02:00
remoteproc
remoteproc: qcom_q6v5_mss: Validate MBA firmware size before load
2021-02-13 13:51:14 +01:00
reset
…
rpmsg
rpmsg: qcom_glink_native: fix error return code of qcom_glink_rx_data()
2021-05-22 10:59:42 +02:00
rtc
rtc: ds1307: Fix wday settings for rx8130
2021-05-22 10:59:43 +02:00
s390
s390/dasd: fix hanging IO request during DASD driver unbind
2021-03-17 16:43:47 +01:00
sbus
…
scsi
scsi: scsi_devinfo: Add blacklist entry for HPE OPEN-V
2021-06-30 08:48:12 -04:00
sfi
…
sh
…
siox
…
slimbus
slimbus: qcom-ngd-ctrl: Avoid sending power requests without QMI
2020-12-30 11:25:57 +01:00
sn
…
soc
soc: qcom: mdt_loader: Detect truncated read of segments
2021-05-22 10:59:30 +02:00
soundwire
soundwire: stream: fix memory leak in stream config error path
2021-05-22 10:59:30 +02:00
spi
spi: gpio: Don't leak SPI master in probe error path
2021-06-03 08:38:07 +02:00
spmi
…
ssb
…
staging
pinctrl: ralink: rt2880: avoid to error in calls is pin is already enabled
2021-06-30 08:48:21 -04:00
target
scsi: target: core: Fix warning on realtime kernels
2021-06-30 08:48:11 -04:00
tc
…
tee
tee: optee: do not check memref size on return from Secure World
2021-05-22 10:59:15 +02:00
thermal
thermal/core/fair share: Lock the thermal zone while looping over instances
2021-05-22 10:59:47 +02:00
thunderbolt
thunderbolt: dma_port: Fix NVM read buffer bounds and offset issue
2021-06-03 08:38:04 +02:00
tty
serial: max310x: unregister uart driver in case of failure and abort
2021-06-03 08:38:09 +02:00
uio
uio: Fix use-after-free in uio_unregister_device()
2020-11-18 19:18:49 +01:00
usb
usb: dwc3: core: fix kernel panic when do reboot
2021-06-30 08:48:27 -04:00
uwb
…
vfio
vfio/platform: fix module_put call in error flow
2021-06-10 13:24:04 +02:00
vhost
vhost: Fix vhost_vq_reset()
2021-04-07 12:48:48 +02:00
video
video: hgafb: correctly handle card detect failure during probe
2021-05-26 11:48:35 +02:00
virt
drivers/virt/fsl_hypervisor: Fix error handling path
2020-10-29 09:55:09 +01:00
virtio
virtio_ring: Avoid loop when vq is broken in virtqueue_poll
2020-08-26 10:31:01 +02:00
visorbus
…
vlynq
…
vme
…
w1
w1: mxc_w1: Fix timeout resolution problem leading to bus error
2020-11-05 11:08:47 +01:00
watchdog
watchdog: mei_wdt: request stop on unregister
2021-03-04 09:39:55 +01:00
xen
xen-pciback: redo VF placement in the virtual topology
2021-06-10 13:24:09 +02:00
zorro
…
Kconfig
…
Makefile
…