linux-kernel - Re: [BUG} usb-serial regression in 2.6.21-rc2-git3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <45F57F63.7010308@rtr.ca>
Date:	Mon, 12 Mar 2007 12:27:15 -0400
From:	Mark Lord <lkml@....ca>
To:	Greg KH <greg@...ah.com>
Cc:	Oliver Neukum <oneukum@...e.de>, Adrian Bunk <bunk@...sta.de>,
	Andrew Morton <akpm@...ux-foundation.org>,
	Linux Kernel Mailing List <linux-kernel@...r.kernel.org>
Subject: Re: [BUG} usb-serial regression in 2.6.21-rc2-git3

Mark Lord wrote:
> ..and here is a retest with linux-2.6.21-rc3-git7
> of simply plug/wait/unplug a USB hub/serial/parallel/PS2 gizmo.
> 
> I have two of these, with different serial port hardware in each,
> and doing this with either of them produces an ooops.
> 
...
> 12:12:06 kernel: mct_u232 ttyUSB2: MCT U232 converter now disconnected 
> from ttyUSB2
> 12:12:06 kernel: BUG: unable to handle kernel NULL pointer dereference 
> at virtual address 00000168
> 12:12:06 kernel:  printing eip:
> 12:12:06 kernel: f8ca6542
> 12:12:06 kernel: *pde = 00000000
> 12:12:06 kernel: Oops: 0000 [#2]

Okay, from that part (above), the problem is obvious:
in that the "MCT U232 converter now disconnected" appears,
and then we continue to try and call the driver's method.. Oops!

The hack patch below "fixes" this, but it really just hides whatever
the real problem underneath was:

Signed-off-by:  Mark Lord <mlord@...ox.com>
---
--- linux/include/linux/usb/serial.h.orig	2007-03-12 12:18:48.000000000 -0400
+++ linux/include/linux/usb/serial.h	2007-03-12 12:18:23.000000000 -0400
@@ -99,11 +99,19 @@
 /* get and set the port private data pointer helper functions */
 static inline void *usb_get_serial_port_data (struct usb_serial_port *port)
 {
+	if (!port) {
+		WARN_ON(1);
+		return NULL;
+	}
 	return dev_get_drvdata(&port->dev);
 }
 
 static inline void usb_set_serial_port_data (struct usb_serial_port *port, void *data)
 {
+	if (!port) {
+		WARN_ON(1);
+		return;
+	}
 	dev_set_drvdata(&port->dev, data);
 }
 
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/