linux-kernel - UBSAN: Undefined behaviour in drivers/usb/host/ehci-hub.c:877:47

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <alpine.LRH.2.20.1605121924390.4797@math.ut.ee>
Date:	Thu, 12 May 2016 19:38:00 +0300 (EEST)
From:	Meelis Roos <mroos@...ux.ee>
To:	Linux Kernel list <linux-kernel@...r.kernel.org>,
	linux-usb@...r.kernel.org,
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	Alan Stern <stern@...land.harvard.edu>
Subject: UBSAN: Undefined behaviour in drivers/usb/host/ehci-hub.c:877:47

I am seeing it on multiple different PC-s.

[    7.837957] ================================================================================
[    7.837959] UBSAN: Undefined behaviour in drivers/usb/host/ehci-hub.c:877:47
[    7.837961] index -1 is out of range for type 'u32 [1]'
[    7.837964] CPU: 3 PID: 213 Comm: systemd-udevd Not tainted 4.6.0-rc6 #202
[    7.837966] Hardware name:                  /DQ67OW, BIOS SWQ6710H.86A.0066.2012.1105.1504 11/05/2012
[    7.837968]  ffffc9000001e05c ffffffff8151261d 000000000000002b ffff8802332cf540
[    7.837971]  ffffffffffffffff ffffffff815697a9 ffffffffa01d0080 ffffffff81569e42
[    7.837974]  0000000000000202 ffffffff8100312d ffff8802332cf630 ffffffffa021fec2
[    7.837977] Call Trace:
[    7.837983]  [<ffffffff8151261d>] ? dump_stack+0x47/0x6a
[    7.837987]  [<ffffffff815697a9>] ? ubsan_epilogue+0x9/0x40
[    7.837989]  [<ffffffff81569e42>] ? __ubsan_handle_out_of_bounds+0x62/0x70
[    7.837993]  [<ffffffff8100312d>] ? syscall_trace_enter_phase2+0x10d/0x3d0
[    7.837997]  [<ffffffff8169a419>] ? dev_vprintk_emit+0xb9/0x2a0
[    7.838001]  [<ffffffffa01bda03>] ? ehci_hub_control+0xe43/0x10f0 [ehci_hcd]
[    7.838005]  [<ffffffff812b2900>] ? mmu_notifier_unregister+0x60/0x1a0
[    7.838012]  [<ffffffffa01ff5bb>] ? usb_hcd_submit_urb+0x84b/0xcf0 [usbcore]
[    7.838018]  [<ffffffffa02021ae>] ? usb_start_wait_urb+0x5e/0xf0 [usbcore]
[    7.838024]  [<ffffffffa02022fe>] ? usb_control_msg+0xbe/0x100 [usbcore]
[    7.838030]  [<ffffffffa01fa429>] ? hub_probe+0x429/0xf10 [usbcore]
[    7.838034]  [<ffffffff816b0cdb>] ? __pm_runtime_resume+0x4b/0x80
[    7.838040]  [<ffffffffa0208446>] ? usb_probe_interface+0x146/0x3e0 [usbcore]
[    7.838043]  [<ffffffff8169ff07>] ? driver_probe_device+0xf7/0x370
[    7.838045]  [<ffffffff816a0270>] ? __driver_attach+0xf0/0xf0
[    7.838049]  [<ffffffff8169d49e>] ? bus_for_each_drv+0x6e/0xd0
[    7.838051]  [<ffffffff8169fcce>] ? __device_attach+0xbe/0x150
[    7.838053]  [<ffffffff8169eaa5>] ? bus_probe_device+0xb5/0x120
[    7.838056]  [<ffffffff8169bc0c>] ? device_add+0x46c/0x620
[    7.838061]  [<ffffffffa020230e>] ? usb_control_msg+0xce/0x100 [usbcore]
[    7.838067]  [<ffffffffa0205172>] ? usb_set_configuration+0x542/0xb50 [usbcore]
[    7.838073]  [<ffffffffa02166b0>] ? generic_probe+0x30/0x90 [usbcore]
[    7.838075]  [<ffffffff8169ff07>] ? driver_probe_device+0xf7/0x370
[    7.838077]  [<ffffffff816a0270>] ? __driver_attach+0xf0/0xf0
[    7.838080]  [<ffffffff8169d49e>] ? bus_for_each_drv+0x6e/0xd0
[    7.838082]  [<ffffffff8169fcce>] ? __device_attach+0xbe/0x150
[    7.838084]  [<ffffffff8169eaa5>] ? bus_probe_device+0xb5/0x120
[    7.838087]  [<ffffffff8169bc0c>] ? device_add+0x46c/0x620
[    7.838090]  [<ffffffff8166abf0>] ? add_device_randomness+0xc0/0x140
[    7.838096]  [<ffffffffa01f7233>] ? usb_new_device+0x2f3/0xa30 [usbcore]
[    7.838102]  [<ffffffffa01fdaa8>] ? usb_add_hcd+0x678/0xa80 [usbcore]
[    7.838108]  [<ffffffffa0219bc8>] ? usb_hcd_pci_probe+0x488/0x760 [usbcore]
[    7.838112]  [<ffffffff8157dacd>] ? pci_device_probe+0xad/0x150
[    7.838114]  [<ffffffff8169ff07>] ? driver_probe_device+0xf7/0x370
[    7.838116]  [<ffffffff816a022c>] ? __driver_attach+0xac/0xf0
[    7.838118]  [<ffffffff816a0180>] ? driver_probe_device+0x370/0x370
[    7.838121]  [<ffffffff8169d3c8>] ? bus_for_each_dev+0x68/0xb0
[    7.838123]  [<ffffffff8169ee69>] ? bus_add_driver+0x159/0x2b0
[    7.838126]  [<ffffffffa01ac000>] ? 0xffffffffa01ac000
[    7.838128]  [<ffffffff816a100c>] ? driver_register+0x6c/0x110
[    7.838130]  [<ffffffff810003c8>] ? do_one_initcall+0x98/0x230
[    7.838132]  [<ffffffff812be782>] ? kmem_cache_alloc_trace+0x1c2/0x2f0
[    7.838136]  [<ffffffff8122187e>] ? do_init_module+0x95/0x264
[    7.838139]  [<ffffffff8116db33>] ? load_module+0x1e23/0x2fa0
[    7.838142]  [<ffffffff8116a480>] ? m_show+0x200/0x200
[    7.838146]  [<ffffffff812f48f4>] ? kernel_read_file_from_fd+0x44/0x70
[    7.838149]  [<ffffffff8116ee72>] ? SYSC_finit_module+0xa2/0xb0
[    7.838153]  [<ffffffff81987a9f>] ? entry_SYSCALL_64_fastpath+0x17/0x93
[    7.838154] ================================================================================


-- 
Meelis Roos (mroos@...ux.ee)