android_kernel_samsung_a7y1.../drivers/usb
Mans Rullgard 299407a4c9 usb: musb: fix crash with highmen PIO and usbmon
commit 52974d94a206ce428d9d9b6eaa208238024be82a upstream.

When handling a PIO bulk transfer with highmem buffer, a temporary
mapping is assigned to urb->transfer_buffer.  After the transfer is
complete, an invalid address is left behind in this pointer.  This is
not ordinarily a problem since nothing touches that buffer before the
urb is released.  However, when usbmon is active, usbmon_urb_complete()
calls (indirectly) mon_bin_get_data() which does access the transfer
buffer if it is set.  To prevent an invalid memory access here, reset
urb->transfer_buffer to NULL when finished (musb_host_rx()), or do not
set it at all (musb_host_tx()).

Fixes: 8e8a55165469 ("usb: musb: host: Handle highmem in PIO mode")
Signed-off-by: Mans Rullgard <mans@mansr.com>
Cc: stable@vger.kernel.org
Signed-off-by: Bin Liu <b-liu@ti.com>
Link: https://lore.kernel.org/r/20200316211136.2274-8-b-liu@ti.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-04-07 14:24:45 +02:00
..
atm USB: atm: ueagle-atm: add missing endpoint check 2020-04-07 13:06:35 +02:00
c67x00 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
chipidea usb: chipidea: host: Disable port power only if previously enabled 2020-04-07 13:29:31 +02:00
class USB: cdc-acm: restore capability check order 2020-04-07 14:24:41 +02:00
common A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
core usb: quirks: add NO_LPM quirk for RTL8153 based ethernet adapters 2020-04-07 14:14:03 +02:00
dwc2 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
dwc3 usb: dwc3: turn off VBUS when leaving host mode 2020-04-07 13:48:29 +02:00
early A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
gadget usb: gadget: serial: fix Tx stall after buffer overflow 2020-04-07 14:09:55 +02:00
host usb: host: xhci-plat: add a shutdown 2020-04-07 14:14:07 +02:00
image USB: microtek: fix info-leak at probe 2020-04-07 08:09:23 +02:00
isp1760 A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
manager A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
misc USB: adutux: fix interface sanity check 2020-04-07 13:06:41 +02:00
mon usb: mon: Fix a deadlock in usbmon between mmap and read 2020-04-07 13:06:45 +02:00
musb usb: musb: fix crash with highmen PIO and usbmon 2020-04-07 14:24:45 +02:00
notify A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
phy A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
renesas_usbhs usb: renesas_usbhs: add suspend event support in gadget mode 2020-04-07 13:20:22 +02:00
serial USB: serial: io_edgeport: fix slab-out-of-bounds read in edge_interrupt_callback 2020-04-07 14:24:43 +02:00
storage usb: storage: Add quirk for Samsung Fit flash 2020-04-07 14:10:12 +02:00
typec A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
usbip usbip: Fix error path of vhci_recv_ret_submit() 2020-04-07 13:22:24 +02:00
wusbcore A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Kconfig A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
Makefile A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
README A750FXXU4CTBC 2020-03-27 21:51:54 +05:30
usb-skeleton.c USB: usb-skeleton: fix NULL-deref on disconnect 2020-04-07 08:08:38 +02:00

To understand all the Linux-USB framework, you'll use these resources:

    * This source code.  This is necessarily an evolving work, and
      includes kerneldoc that should help you get a current overview.
      ("make pdfdocs", and then look at "usb.pdf" for host side and
      "gadget.pdf" for peripheral side.)  Also, Documentation/usb has
      more information.

    * The USB 2.0 specification (from www.usb.org), with supplements
      such as those for USB OTG and the various device classes.
      The USB specification has a good overview chapter, and USB
      peripherals conform to the widely known "Chapter 9".

    * Chip specifications for USB controllers.  Examples include
      host controllers (on PCs, servers, and more); peripheral
      controllers (in devices with Linux firmware, like printers or
      cell phones); and hard-wired peripherals like Ethernet adapters.

    * Specifications for other protocols implemented by USB peripheral
      functions.  Some are vendor-specific; others are vendor-neutral
      but just standardized outside of the www.usb.org team.

Here is a list of what each subdirectory here is, and what is contained in
them.

core/		- This is for the core USB host code, including the
		  usbfs files and the hub class driver ("hub_wq").

host/		- This is for USB host controller drivers.  This
		  includes UHCI, OHCI, EHCI, and others that might
		  be used with more specialized "embedded" systems.

gadget/		- This is for USB peripheral controller drivers and
		  the various gadget drivers which talk to them.


Individual USB driver directories.  A new driver should be added to the
first subdirectory in the list below that it fits into.

image/		- This is for still image drivers, like scanners or
		  digital cameras.
../input/	- This is for any driver that uses the input subsystem,
		  like keyboard, mice, touchscreens, tablets, etc.
../media/	- This is for multimedia drivers, like video cameras,
		  radios, and any other drivers that talk to the v4l
		  subsystem.
../net/		- This is for network drivers.
serial/		- This is for USB to serial drivers.
storage/	- This is for USB mass-storage drivers.
class/		- This is for all USB device drivers that do not fit
		  into any of the above categories, and work for a range
		  of USB Class specified devices. 
misc/		- This is for all USB device drivers that do not fit
		  into any of the above categories.