linux.git/drivers/usb, branch v2.6.17.10

UHCI: Fix handling of short last packet

2006-08-07T03:52:14+00:00

This patch (as753) fixes the way uhci-hcd handles a short packet when it
is the last packet of an URB.  Right now the driver handles short packets
the same no matter when they occur.  However, the controller stops
transferring packets when the short packet is not the last one (otherwise
it would be reading beyond the end of the device's data) and needs to be
restarted, whereas no such need occurs when the short packet is the last
one.

The result of the bug is that USB endpoint queues experience intermittent
hangs, a regression in 2.6.17 with respect to earlier kernels.  The bug
was raised in Bugzilla #6752 and this patch fixed it.

Signed-off-by: Alan Stern 
Signed-off-by: Greg Kroah-Hartman

USB serial ftdi_sio: Prevent userspace DoS (CVE-2006-2936)

2006-07-25T03:35:25+00:00

This patch limits the amount of outstanding 'write' data that can be
queued up for the ftdi_sio driver, to prevent userspace DoS attacks (or
simple accidents) that use up all the system memory by writing lots of
data to the serial port.

The original patch was by Guillaume Autran, who in turn based it on the
same mechanism implemented in the 'visor' driver.  I (Ian Abbott)
re-targeted the patch to the latest sources, fixed a couple of errors,
renamed his new structure members, and updated the implementations of
the 'write_room' and 'chars_in_buffer' methods to take account of the
number of outstanding 'write' bytes.  It seems to work fine, though at
low baud rates it is still possible to queue up an amount of data that
takes an age to shift (a job for another day!).

Signed-off-by: Ian Abbott 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: Whiteheat: fix firmware spurious errors

2006-06-30T00:17:14+00:00

Attached patch fixes spurious errors during firmware load.

Signed-off-by: Stuart MacDonald 
Signed-off-by: Greg Kroah-Hartman 
Signed-off-by: Chris Wright

[ARM] 3547/1: PXA-OHCI: Allow platforms to specify a power budget

2006-06-08T21:44:07+00:00

Patch from Richard Purdie

Add a power budget variable to the PXA OHCI platform data and add a
default value for the spitz platform(s) which prevents known failures
with certain USB devices.

Signed-off-by: Richard Purdie 
Signed-off-by: Russell King

[PATCH] HID read busywait fix

2006-05-21T19:59:17+00:00

Make a read of a HID device block until data is available.  Without it, the
read goes into a busy-wait loop until data is available.

Cc: Greg KH 
Acked-by: Vojtech Pavlik 
Cc: Dmitry Torokhov 
Signed-off-by: Andrew Morton 
Signed-off-by: Linus Torvalds

[PATCH] USB: fix omninet driver bug

2006-05-12T18:58:10+00:00

I introduced this way back in 2.6.13 when adding the port lock logic.
This device talks out through different "ports" all at the same time, so
the lock logic was wrong, preventing any data from ever being sent
properly.

Thanks a lot to Bernhard Reiter  for being
patient and helping with debugging this.

Cc: Bernhard Reiter 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: add ark3116 usb to serial driver

2006-05-12T18:58:09+00:00

Based on Simon's original driver, with some minor code cleanups and
tidying by me.

Cc: Simon Schulz 
Signed-off-by: Greg Kroah-Hartman

[PATCH] usbserial: Fixes leak in serial_open() error path.

2006-05-12T18:58:09+00:00

If serial_open() fails at the port assignment or mutex_lock_interruptible()
is interrupted, the 'serial' object will never be freed.

We should call kref_put() when those errors happens.

Signed-off-by: Luiz Fernando N. Capitulino 
Signed-off-by: Greg Kroah-Hartman

[PATCH] usbserial: Fixes use-after-free in serial_open().

2006-05-12T18:58:09+00:00

If the device is disconnected while serial_open() is executing and
either try_module_get() or the device specific open function fails, the
kref_put() call in the 'bailout_kref_put' label will free the memory
pointed out by 'port'.

The subsequent dereferences in the 'bailout_kref_put' label will be
invalid.

The fix is just to assure kref_put() is called after any 'port' usage.

Signed-off-by: Luiz Fernando N. Capitulino 
Signed-off-by: Greg Kroah-Hartman

[PATCH] USB: Emagic USB firmware loading fixes

2006-05-12T18:58:09+00:00

It's become apparent as machines get faster that the emagic kernel firmware
loaders (based on the ezusb loader) have a reset race.  a 400MHz TiBook
never tripped it, but a 2GHz Pentium M seems to hit it about 30% of the
time.  The bug is seen as a hung USB box and the kernel error:

drivers/usb/misc/emi62.c: emi62_load_firmware - error loading firmware:
error = -110

The patch below inserts a delay after deasserting reset to allow the box to
settle before a new command is issued.  This affects only device startup.

Signed-off-by: Andrew Morton 
Signed-off-by: Greg Kroah-Hartman