linux-kernel - Re: 2.6.33 bugs (USBFS, Intel graphic)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Fri, 26 Feb 2010 20:29:28 -0800 (PST)
From:	Linus Torvalds <torvalds@...ux-foundation.org>
To:	Greg KH <greg@...ah.com>
cc:	Markus Rechberger <mrechberger@...il.com>,
	linux-usb@...r.kernel.org, werner@...ane.dyn-o-saur.com,
	Marcus Meissner <meissner@...e.de>,
	linux-kernel@...r.kernel.org
Subject: Re: 2.6.33 bugs (USBFS, Intel graphic)

On Fri, 26 Feb 2010, Greg KH wrote:
> 
> Yes, and that patch didn't touch the iso frames.  That happens later on
> in the functions that were modified.  The patch should not have had any
> affect on iso transfers.  Unless I'm missing something?

Hmm. What seems to happen is that for an isochronous transfer, the buffer 
is split for each microframe. No?

So the total length may be in 'urb->actual_length', but the actual data in 
the buffer may not be contiguous, because it's created from multiple 
smaller frames, some of which might not be full length?

I dunno. That would explain the problem - actual_length is correct, but 
the 'copy_to_user()' still doesn't copy all the data, because it's 
fragmented.

		Linus
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/