1. 04 11月, 2014 1 次提交
  2. 10 7月, 2014 1 次提交
  3. 28 5月, 2014 18 次提交
  4. 17 4月, 2014 2 次提交
  5. 13 1月, 2014 1 次提交
    • B
      usb: cdc-wdm: resp_count can be 0 even if WDM_READ is set · f563926f
      Bjørn Mork 提交于
      Do not decrement resp_count if it's already 0.
      
      We set resp_count to 0 when the device is closed.  The next open and
      read will try to clear the WDM_READ flag if there was leftover data
      in the read buffer. This fix is necessary to prevent resubmitting
      the read URB in a tight loop because resp_count becomes negative.
      
      The bug can easily be triggered from userspace by not reading all
      data in the read buffer, and then closing and reopening the chardev.
      
      Fixes: 8dd5cd53 ("usb: cdc-wdm: avoid hanging on zero length reads")
      Cc: <stable@vger.kernel.org> # 3.13
      Signed-off-by: NBjørn Mork <bjorn@mork.no>
      Signed-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      f563926f
  6. 09 1月, 2014 1 次提交
  7. 21 12月, 2013 1 次提交
    • B
      usb: cdc-wdm: avoid hanging on zero length reads · 8dd5cd53
      Bjørn Mork 提交于
      commit 73e06865 ("USB: cdc-wdm: support back-to-back
      USB_CDC_NOTIFY_RESPONSE_AVAILABLE notifications") implemented
      queued response handling. This added a new requirement: The read
      urb must be resubmitted every time we clear the WDM_READ flag if
      the response counter indicates that the device is waiting for a
      read.
      
      Fix by factoring out the code handling the WMD_READ clearing and
      possible urb submission, calling it everywhere we clear the flag.
      
      Without this fix, the driver ends up in a state where the read urb
      is inactive, but the response counter is positive after a zero
      length read.  This prevents the read urb from ever being submitted
      again and the driver appears to be hanging.
      
      Fixes: 73e06865 ("USB: cdc-wdm: support back-to-back USB_CDC_NOTIFY_RESPONSE_AVAILABLE notifications")
      Cc: Greg Suarez <gsuarez@smithmicro.com>
      Signed-off-by: NBjørn Mork <bjorn@mork.no>
      Cc: stable <stable@vger.kernel.org> # 3.13
      Signed-off-by: NGreg Kroah-Hartman <gregkh@linuxfoundation.org>
      8dd5cd53
  8. 10 12月, 2013 1 次提交
  9. 05 12月, 2013 1 次提交
  10. 04 12月, 2013 3 次提交
  11. 30 10月, 2013 2 次提交
  12. 26 8月, 2013 1 次提交
  13. 13 8月, 2013 2 次提交
  14. 26 7月, 2013 5 次提交