lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date:	Tue, 01 Apr 2008 22:24:36 +0200
From:	Hans de Goede <j.w.r.degoede@....nl>
To:	Boaz Harrosh <bharrosh@...asas.com>
CC:	Alan Stern <stern@...land.harvard.edu>,
	Oliver Neukum <oliver@...kum.org>,
	Sergey Dolgov <solkaa@...il.com>, linux-kernel@...r.kernel.org,
	linux-usb@...r.kernel.org
Subject: Re: usb-storage, error reading the last 8 sectors, regression in
 2.6.25-rc7

Boaz Harrosh wrote:
> On Tue, Apr 01 2008 at 18:53 +0300, Matthew Dharm <mdharm-kernel@...-eyed-alien.net> wrote:
>> On Tue, Apr 01, 2008 at 10:42:51AM -0400, Alan Stern wrote:
>>> On Tue, 1 Apr 2008, Matthew Dharm wrote:
>>>
>>>> On Tue, Apr 01, 2008 at 10:28:52AM -0400, Alan Stern wrote:
>>>>> On Tue, 1 Apr 2008, Oliver Neukum wrote:
>>>>>
>>>>>> Am Dienstag, 1. April 2008 03:58:31 schrieb Alan Stern:
>>>>>>> Nevertheless, it's clear that the problem has nothing to do with the 
>>>>>>> USB stack.  The real source of the problem lies in the device itself, 
>>>>>>> for reporting a bogus error when in fact nothing went wrong.  That may 
>>>>>>> also explain why you don't always see the problem -- sometimes the 
>>>>>>> device works the way it ought to.
>>>>>> Reminds me of the devices that can read the last sector but only if it is read
>>>>>> by itself. Do you reckon this device may have the "opposite" quirk?
>>>>> Could be something like that.
>>>> Didn't I see some SCSI patches go by to implement exactly this change?
>>>> That is, only read the last sector by itself?
>>> You are getting the two problems mixed up.  The older problem, which
>>> the SCSI patche addressed, was that the device would fail when
>>> accessing the last sector unless the transfer was 1 sector long.
>>>
>>> This problem is different.  When performing an 8-sector read that 
>>> includes the last sector, the device succeeds.  When performing a 
>>> 7-sector read starting from the same place (so not including the last 
>>> sector), the device fails.
>> I thought the patch I saw unconditionally re-wrote any access that included
>> the last sector into two accesses -- everything but the last sector, and
>> the last sector.
>>
>> In other words, the patch attempted to avoid problems on devices that
>> couldn't access the last sector unless the transfer was 1 sector long by
>> ONLY accessing the last sector in a single transfer.
>>
>> If I'm remembering correctly, that would explain the behavior change which
>> lead to the exposure of the bad behavior of this new device.  This new
>> device worked with the old code, but not with the new code.
>>
>> Basically, by avoiding a common error condition in device firmware, we've
>> found a device that has exactly the opposite bug.
>>
>> Presuming someone can find the patch in the archive, reverting it would
>> produce a good test case; it should restore this device to a working state.
>> Maybe we need some auto-detect logic here; try the new way, if it fails,
>> revert to the old behavior.  That's probably the safe order, as a lot of
>> the devices with the more 'classic' bug just die completely, whereas this
>> one appears to be recoverable.
>>

Reverting the patch is easy, edit drivers/usb/storage/scsiglue.c and remove the 
following line:
"                sdev->last_sector_bug = 1;"

Which should be close to line 193 (it is 193 in my source tree, but thats a bit 
stale).

> 
> The old way was not necessarily correct for this type of device bug. Only
> that it had a very high chance of not appearing.
> 
> When discussing the last bug, it was said to enable it by default for USB
> instead of using blacklists. It looks like this bug, or the other, needs a
> blacklist.
> 

If the splitting of the request is the cause, yes then it looks like that.

> But to me it looks like this is a 4k thing. I think Windows will always
> use 4k for FAT, though never triggering either of the bugs.
> 

I'm pretty sure the last sector must only be read by itself bug (for lack of a 
better name) is present under windows too, but won't be triggered as windows 
normally doesn't access the last sector, where as various pieces of Linux 
routinely probe the end of the disk, for detection of exotic partition types/ 
disklabes.etc.

> The one submitting the last sector patch was, I think, Hans de Goede (CCed)
> Hans ?

Correct I wrote the split up requests which touch the last sector changes to 
the scsi disk handling, and a seperate patch to always set the flag which 
enables the splitting for usb disks.

>   If I read last 8 sectors (4k) on a device that exhibits the "last sector bug"
>   Does it work? (Is 8 a magic number here)
> 

I just tried and I'm afraid not, an 8 sector read which includes at the last 
sector completely kills the device, no other transfers to / from the device 
will work until the sdcard is removed and reinserted (the troublesome device is 
a card reader build into a multi function printer, one gets what one pays for).

Regards,

Hans
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ