linux-kernel - UBSAN: Undefined behaviour in drivers/usb/core/devio.c:1517:25

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:	Tue, 26 Jan 2016 10:11:01 +0000
From:	Chris Bainbridge <chris.bainbridge@...il.com>
To:	linux-kernel@...r.kernel.org
Cc:	aryabinin@...tuozzo.com, gregkh@...uxfoundation.org,
	stern@...land.harvard.edu, linux-usb@...r.kernel.org
Subject: UBSAN: Undefined behaviour in drivers/usb/core/devio.c:1517:25

Booting 4.5.0-rc1 with new UBSAN checker enabled:

[    4.556968] ================================================================================
[    4.556972] UBSAN: Undefined behaviour in drivers/usb/core/devio.c:1517:25
[    4.556975] shift exponent -1 is negative
[    4.556979] CPU: 2 PID: 3624 Comm: usb Not tainted 4.5.0-rc1 #252
[    4.556981] Hardware name: Apple Inc. MacBookPro10,2/Mac-AFD8A9D944EA4843, BIOS MBP102.88Z.0106.B0A.1509130955 09/13/2015
[    4.556984]  0000000000000000 0000000000000000 ffffffff845c6528 ffff8802493b3c68
[    4.556988]  ffffffff81b2e7d9 0000000000000007 ffff8802493b3c98 ffff8802493b3c80
[    4.556992]  ffffffff81bcb87d ffffffffffffffff ffff8802493b3d10 ffffffff81bcc1c1
[    4.556996] Call Trace:
[    4.557004]  [<ffffffff81b2e7d9>] dump_stack+0x45/0x6c
[    4.557010]  [<ffffffff81bcb87d>] ubsan_epilogue+0xd/0x40
[    4.557015]  [<ffffffff81bcc1c1>] __ubsan_handle_shift_out_of_bounds+0xf1/0x140
[    4.557020]  [<ffffffff81438f49>] ? __kmalloc+0x209/0x5f0
[    4.557025]  [<ffffffff8220a615>] ? usb_alloc_urb+0x15/0x40
[    4.557030]  [<ffffffff822247af>] ? proc_do_submiturb+0x9af/0x2c30
[    4.557034]  [<ffffffff82226794>] proc_do_submiturb+0x2994/0x2c30
[    4.557039]  [<ffffffff811eb821>] ? blocking_notifier_call_chain+0x11/0x20
[    4.557044]  [<ffffffff8222733b>] usbdev_do_ioctl+0x90b/0x2170
[    4.557049]  [<ffffffff81279fe4>] ? hrtimer_start_range_ns+0x274/0xc60
[    4.557053]  [<ffffffff82228bb9>] usbdev_ioctl+0x9/0x10
[    4.557059]  [<ffffffff8148a322>] do_vfs_ioctl+0xd2/0xcb0
[    4.557063]  [<ffffffff8148af74>] SyS_ioctl+0x74/0x80
[    4.557067]  [<ffffffff82b40a57>] entry_SYSCALL_64_fastpath+0x12/0x6a
[    4.557070] ================================================================================