lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date:   Thu, 31 Mar 2022 10:46:26 +0200
From:   Marc Kleine-Budde <>
Subject: [PATCH net 0/n] pull-request: can 2022-03-31

Hello Jakub, hello David,

this is a pull request of 8 patches for net/master.

The first patch is by Oliver Hartkopp and fixes MSG_PEEK feature in
the CAN ISOTP protocol (broken in net-next for v5.18 only).

Tom Rix's patch for the mcp251xfd driver fixes the propagation of an
error value in case of an error.

A patch by me for the m_can driver fixes a use-after-free in the xmit
handler for m_can IP cores v3.0.x.

Hangyu Hua contributes 3 patches fixing the same double free in the
error path of the xmit handler in the ems_usb, usb_8dev and mcba_usb
USB CAN driver.

Pavel Skripkin contributes a patch for the mcba_usb driver to properly
check the endpoint type.

The last patch is by me and fixes a mem leak in the gs_usb, which was
introduced in net-next for v5.18.



The following changes since commit f9512d654f62604664251dedd437a22fe484974a:

  net: sparx5: uses, depends on BRIDGE or !BRIDGE (2022-03-30 19:16:27 -0700)

are available in the Git repository at:

  git:// tags/linux-can-fixes-for-5.18-20220331

for you to fetch changes up to 50d34a0d151dc7abbdbec781bd7f09f2b3cbf01a:

  can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration (2022-03-31 09:55:27 +0200)


Hangyu Hua (3):
      can: ems_usb: ems_usb_start_xmit(): fix double dev_kfree_skb() in error path
      can: usb_8dev: usb_8dev_start_xmit(): fix double dev_kfree_skb() in error path
      can: mcba_usb: mcba_usb_start_xmit(): fix double dev_kfree_skb in error path

Marc Kleine-Budde (2):
      can: m_can: m_can_tx_handler(): fix use after free of skb
      can: gs_usb: gs_make_candev(): fix memory leak for devices with extended bit timing configuration

Oliver Hartkopp (1):
      can: isotp: restore accidentally removed MSG_PEEK feature

Pavel Skripkin (1):
      can: mcba_usb: properly check endpoint type

Tom Rix (1):
      can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix return of error value

 drivers/net/can/m_can/m_can.c                  |  5 +++--
 drivers/net/can/spi/mcp251xfd/mcp251xfd-core.c |  2 +-
 drivers/net/can/usb/ems_usb.c                  |  1 -
 drivers/net/can/usb/gs_usb.c                   |  2 ++
 drivers/net/can/usb/mcba_usb.c                 | 27 +++++++++++++----------
 drivers/net/can/usb/usb_8dev.c                 | 30 ++++++++++++--------------
 net/can/isotp.c                                |  2 +-
 7 files changed, 37 insertions(+), 32 deletions(-)

Powered by blists - more mailing lists