linux-kernel - Re: [PATCH v1 3/3] Revert "usb: gadget: f_uac2/u

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <87mtp65ash.fsf@kernel.org>
Date:   Wed, 25 Aug 2021 08:54:28 +0300
From:   Felipe Balbi <balbi@...nel.org>
To:     Ferry Toth <ftoth@...londelft.nl>
Cc:     Greg Kroah-Hartman <gregkh@...uxfoundation.org>,
        Jerome Brunet <jbrunet@...libre.com>,
        Ruslan Bilovol <ruslan.bilovol@...il.com>,
        Oded Gabbay <oded.gabbay@...il.com>,
        Cezary Rojewski <cezary.rojewski@...el.com>,
        Mauro Carvalho Chehab <mchehab+huawei@...nel.org>,
        Pawel Laszczak <pawell@...ence.com>,
        Jack Pham <jackp@...eaurora.org>, linux-kernel@...r.kernel.org,
        linux-usb@...r.kernel.org, linux-doc@...r.kernel.org,
        Jonathan Corbet <corbet@....net>,
        Lorenzo Colitti <lorenzo@...gle.com>,
        Wesley Cheng <wcheng@...eaurora.org>, robh+dt@...nel.org,
        agross@...nel.org, bjorn.andersson@...aro.org,
        frowand.list@...il.com, devicetree@...r.kernel.org,
        linux-arm-msm@...r.kernel.org, heikki.krogerus@...ux.intel.com,
        Thinh Nguyen <Thinh.Nguyen@...opsys.com>,
        Andy Shevchenko <andy.shevchenko@...il.com>,
        Pavel Hofman <pavel.hofman@...tera.com>,
        Ferry Toth <fntoth@...il.com>
Subject: Re: [PATCH v1 3/3] Revert "usb: gadget: f_uac2/u_audio: add
 feedback endpoint support"


Ferry Toth <ftoth@...londelft.nl> writes:

> This reverts commit 24f779dac8f3efb9629adc0e486914d93dc45517.
>
> The commit is part of a series with commit
> 24f779dac8f3efb9629adc0e486914d93dc45517 causing a BUG on dwc3
> hardware, at least on Intel Merrifield platform when configured
> through configfs:
> BUG: kernel NULL pointer dereference, address: 0000000000000008
> ...
> RIP: 0010:dwc3_gadget_del_and_unmap_request+0x19/0xe0
> ...
> Call Trace:
>  dwc3_remove_requests.constprop.0+0x12f/0x170
>  __dwc3_gadget_ep_disable+0x7a/0x160
>  dwc3_gadget_ep_disable+0x3d/0xd0
>  usb_ep_disable+0x1c/0x70
>  u_audio_stop_capture+0x79/0x120 [u_audio]
>  afunc_set_alt+0x73/0x80 [usb_f_uac2]
>  composite_setup+0x224/0x1b90 [libcomposite]
>
> Pavel's suggestion to add
> `echo "adaptive" > functions/uac2.usb0/c_sync` to the configfs script
> resolves the issue.
> Thinh suggests "the crash is probably because of f_uac2 prematurely
> freeing feedback request before its completion. usb_ep_dequeue() is
> asynchronous. dwc2() may treat it as a synchronous call so you didn't
> get a crash."
>
> Revert as this is a regression and the kernel shouldn't crash depending
> on configuration parameters.
>
> Reported-by: Ferry Toth <fntoth@...il.com>

Signed-off-by?

-- 
balbi