linux-kernel - Re: [PATCH] usb: echi-hcd: Add ehci_setup check before echi

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:	Thu, 19 May 2016 16:20:50 -0500
From:	Andy Gross <andy.gross@...aro.org>
To:	Srinivas Kandagatla <srinivas.kandagatla@...aro.org>
Cc:	Alan Stern <stern@...land.harvard.edu>,
	Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
	linux-usb@...r.kernel.org,
	Linux Kernel list <linux-kernel@...r.kernel.org>,
	linux-arm-kernel@...ts.infradead.org
Subject: Re: [PATCH] usb: echi-hcd: Add ehci_setup check before echi_shutdown

On 19 May 2016 at 05:12, Srinivas Kandagatla
<srinivas.kandagatla@...aro.org> wrote:

<snip>

> +++ b/drivers/usb/host/ehci-hcd.c
> @@ -368,6 +368,15 @@ static void ehci_shutdown(struct usb_hcd *hcd)
>  {
>         struct ehci_hcd *ehci = hcd_to_ehci(hcd);
>
> +       /**
> +        * Protect the system from crashing at system shutdown in cases where
> +        * usb host is not added yet from OTG controller driver.
> +        * As ehci_setup() not done yet, so stop accessing registers or
> +        * variables initialized in ehci_setup()
> +        */
> +       if (!ehci->sbrn)
> +               return;
> +
>         spin_lock_irq(&ehci->lock);
>         ehci->shutdown = true;
>         ehci->rh_state = EHCI_RH_STOPPING;


Should we also not check this in ehci_suspend and ehci_resume?  If I
do suspend/resume, it crashes in a similar manner.  I know this goes
beyond the problem scope of the patch.  Perhaps I should send in an
additional patch with the code?

Are there any other places in the ehci-hcd where this needs to be checked?

Regards,

Andy