linux-stable.git/drivers/usb/class, branch v4.7.7

Revert "usbtmc: convert to devm_kzalloc"

2016-10-07T13:21:28+00:00

commit ab21b63e8aedfc73565dd9cdd51eb338341177cb upstream.

This reverts commit e6c7efdcb76f11b04e3d3f71c8d764ab75c9423b.

Turns out it was totally wrong.  The memory is supposed to be bound to
the kref, as the original code was doing correctly, not the
device/driver binding as the devm_kzalloc() would cause.

This fixes an oops when read would be called after the device was
unbound from the driver.

Reported-by: Ladislav Michl 
Cc: Andy Shevchenko 
Signed-off-by: Greg Kroah-Hartman

cdc-acm: added sanity checking for probe()

2016-09-15T06:20:26+00:00

This is an alternative to eccf2a4e6b64d249929acc1f7aaa2ab0fb199d3d
which inadvertedly fixes an oops in probe by a device returning
malformed descriptors. The problem allows a malicious device to
attack the kernel.
That patch in v4.8 is too extensive to backport to stable.
Thus this alternative fix is needed up to v4.7

Signed-off-by: Oliver Neukum 
Reported-by: Binyamin Sharet 
Tested-by: Binyamin Sharet 
Signed-off-by: Greg Kroah-Hartman

cdc-acm: fix wrong pipe type on rx interrupt xfers

2016-09-07T06:34:52+00:00

commit add125054b8727103631dce116361668436ef6a7 upstream.

This fixes the "BOGUS urb xfer" warning logged by usb_submit_urb().

Signed-off-by: Gavin Li 
Acked-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

tty: Replace ASYNC_INITIALIZED bit and update atomically

2016-04-30T16:26:55+00:00

Replace ASYNC_INITIALIZED bit in the tty_port::flags field with
TTY_PORT_INITIALIZED bit in the tty_port::iflags field. Introduce helpers
tty_port_set_initialized() and tty_port_initialized() to abstract
atomic bit ops.

Note: the transforms for test_and_set_bit() and test_and_clear_bit()
are unnecessary as the state transitions are already mutually exclusive;
the tty lock prevents concurrent open/close/hangup.

Signed-off-by: Peter Hurley 
Signed-off-by: Greg Kroah-Hartman

cdc-acm: fix crash if flushed with nothing buffered

2016-04-13T18:53:07+00:00

Under some circumstances acm_tty_flush_chars() is called
with no buffer to flush. We simply need to do nothing.

Signed-off-by: Oliver Neukum 
Reported-by: Torsten Hilbrich 
Signed-off-by: Greg Kroah-Hartman

USB: cdc-acm: more sanity checking

2016-03-18T16:19:02+00:00

An attack has become available which pretends to be a quirky
device circumventing normal sanity checks and crashes the kernel
by an insufficient number of interfaces. This patch adds a check
to the code path for quirky devices.

Signed-off-by: Oliver Neukum 
CC: stable@vger.kernel.org
Signed-off-by: Greg Kroah-Hartman

usb: usbtmc: Fix disconnect/poll interaction

2016-02-21T04:21:53+00:00

When the device is disconnected poll waiters were not being woken.

Changes for v2:
  - add commit summary
  - add Fixes and Reported-by tags

Fixes: eb6b92ecc0f9 ("Add support for receiving USBTMC USB488 SRQ notifications via poll/select")
Reported-by: Oliver Neukum 
Signed-off-by: Dave Penkler 
Signed-off-by: Greg Kroah-Hartman

cdc-acm: implement put_char() and flush_chars()

2016-02-15T01:06:43+00:00

This should cut down latencies and waste if the tty layer writes single bytes.

Signed-off-by: Oliver Neukum >oneukum@suse.com>
Signed-off-by: Greg Kroah-Hartman

Add ioctls to enable and disable local controls on an instrument

2016-02-03T21:54:06+00:00

These ioctls provide support for the USBTMC-USB488 control requests
for REN_CONTROL, GO_TO_LOCAL and LOCAL_LOCKOUT

Signed-off-by: Dave Penkler 
Signed-off-by: Greg Kroah-Hartman

Add ioctl to retrieve USBTMC-USB488 capabilities

2016-02-03T21:54:06+00:00

This is a convenience function to obtain an instrument's
capabilities from its file descriptor without having to access sysfs
from the user program.

Signed-off-by: Dave Penkler 
Signed-off-by: Greg Kroah-Hartman