linux-stable.git/drivers/usb/serial, branch linux-2.6.17.y

USB serial ftdi_sio: Prevent userspace DoS (CVE-2006-2936)

2006-07-25T03:35:25+00:00

This patch limits the amount of outstanding 'write' data that can be
queued up for the ftdi_sio driver, to prevent userspace DoS attacks (or
simple accidents) that use up all the system memory by writing lots of
data to the serial port.

The original patch was by Guillaume Autran, who in turn based it on the
same mechanism implemented in the 'visor' driver.  I (Ian Abbott)
re-targeted the patch to the latest sources, fixed a couple of errors,
renamed his new structure members, and updated the implementations of
the 'write_room' and 'chars_in_buffer' methods to take account of the
number of outstanding 'write' bytes.  It seems to work fine, though at
low baud rates it is still possible to queue up an amount of data that
takes an age to shift (a job for another day!).

Signed-off-by: Ian Abbott 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: Whiteheat: fix firmware spurious errors

2006-06-30T00:17:14+00:00

Attached patch fixes spurious errors during firmware load.

Signed-off-by: Stuart MacDonald 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Chris Wright

[PATCH] USB: fix omninet driver bug

2006-05-12T18:58:10+00:00

I introduced this way back in 2.6.13 when adding the port lock logic.
This device talks out through different "ports" all at the same time, so
the lock logic was wrong, preventing any data from ever being sent
properly.

Thanks a lot to Bernhard Reiter  for being
patient and helping with debugging this.

Cc: Bernhard Reiter 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: add ark3116 usb to serial driver

2006-05-12T18:58:09+00:00

Based on Simon's original driver, with some minor code cleanups and
tidying by me.

Cc: Simon Schulz 
Signed-off-by: Greg Kroah-Hartman

[PATCH] usbserial: Fixes leak in serial_open() error path.

2006-05-12T18:58:09+00:00

If serial_open() fails at the port assignment or mutex_lock_interruptible()
is interrupted, the 'serial' object will never be freed.

We should call kref_put() when those errors happens.

Signed-off-by: Luiz Fernando N. Capitulino 
Signed-off-by: Greg Kroah-Hartman

[PATCH] usbserial: Fixes use-after-free in serial_open().

2006-05-12T18:58:09+00:00

If the device is disconnected while serial_open() is executing and
either try_module_get() or the device specific open function fails, the
kref_put() call in the 'bailout_kref_put' label will free the memory
pointed out by 'port'.

The subsequent dereferences in the 'bailout_kref_put' label will be
invalid.

The fix is just to assure kref_put() is called after any 'port' usage.

Signed-off-by: Luiz Fernando N. Capitulino 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: Add Sieraa Wireless 580 evdo card to airprime.c

2006-05-12T18:58:08+00:00

This adds the Sierra Wireless card to airprime.c.

I tested this on my laptop.

Signed-off-by: Ken Brush 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: ftdi_sio: add device id for ACT Solutions HomePro ZWave interface

2006-05-09T06:43:56+00:00

Signed-off-by: Razvan Gavril 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: ftdi_sio: Add support for HCG HF Dual ISO RFID Reader

2006-05-09T06:43:55+00:00

This patch adds support for ACG Identification Technologies GmbH's HF
Dual ISO Reader (an RFID tag reader) to the ftdi_sio driver's device ID
table.  The product ID was supplied by anotonios (anton at goto10 dot
org) on the ftdi-usb-sio-devel list and subsequently verified by myself
(Ian Abbott).

Signed-off-by: Ian Abbott 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: ftdi_sio: add support for ASK RDR 400 series card reader

2006-04-27T17:28:59+00:00

This patch adds support for an ASK RDR 400 series contactless card
reader  to
the ftdi_sio driver's device ID table.  The product ID was supplied by
Adriano Couto on the ftdi-usb-sio-devel list.

Signed-off-by: Ian Abbott 
Signed-off-by: Greg Kroah-Hartman