[GIT PULL] USB driver fixes for 4.15-rc4

[Greg KH <gregkh@linuxfoundation.org>]

The following changes since commit 50c4c4e268a2d7a3e58ebb698ac74da0de40ae36:

  Linux 4.15-rc3 (2017-12-10 17:56:26 -0800)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git/ tags/usb-4.15-rc4

for you to fetch changes up to 48a4ff1c7bb5a32d2e396b03132d20d552c0eca7:

  USB: core: prevent malicious bNumInterfaces overflow (2017-12-13 12:28:43 +0100)

----------------------------------------------------------------
USB fixes for 4.15-rc4

Here are some USB fixes for 4.15-rc4.

There is the usual handful gadget/dwc2/dwc3 fixes as always, for
reported issues.  But the most important things in here is the core fix
from Alan Stern to resolve a nasty security bug (my first attempt is
reverted, Alan's was much cleaner), as well as a number of usbip fixes
from Shuah Khan to resolve those reported security issues.

All of these have been in linux-next with no reported issues.

Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

----------------------------------------------------------------
Alan Stern (1):
      USB: core: prevent malicious bNumInterfaces overflow

Andreas Platschek (1):
      usb: dwc3: of-simple: fix missing clk_disable_unprepare

Andrey Konovalov (1):
      USB: core: only clean up what we allocated

Arnd Bergmann (1):
      usb: gadget: webcam: fix V4L2 Kconfig dependency

Bin Liu (1):
      usb: musb: da8xx: fix babble condition handling

Chunfeng Yun (1):
      usb: xhci: fix TDS for MTK xHCI1.1

David Kozub (1):
      USB: uas and storage: Add US_FL_BROKEN_FUA for another JMicron JMS567 ID

Felipe Balbi (1):
      Revert "usb: gadget: allow to enable legacy drivers without USB_ETH"

Greg Kroah-Hartman (2):
      Merge tag 'fixes-for-v4.15-rc4' of git://git.kernel.org/.../balbi/usb into usb-linus
      Revert "USB: core: only clean up what we allocated"

Julien BOIBESSOT (1):
      tools/usbip: fixes potential (minor) "buffer overflow" (detected on recent gcc with -Werror)

Manu Gautam (1):
      usb: dwc3: gadget: Fix PCM1 for ISOC EP with ep->mult less than 3

Masahiro Yamada (1):
      usb: dwc3: of-simple: set dev_pm_ops

Mathias Nyman (1):
      xhci: Don't add a virt_dev to the devs array before it's fully allocated

Minas Harutyunyan (1):
      usb: dwc2: Fix TxFIFOn sizes and total TxFIFO size issues

Shuah Khan (4):
      usbip: fix stub_rx: get_pipe() to validate endpoint number
      usbip: fix stub_rx: harden CMD_SUBMIT path to handle malicious input
      usbip: prevent vhci_hcd driver from leaking a socket pointer address
      usbip: fix stub_send_ret_submit() vulnerability to null transfer_buffer

Vincent Pelletier (1):
      usb: dwc3: gadget: Wait longer for controller to end command processing

 drivers/usb/core/config.c            |  4 ++-
 drivers/usb/dwc2/core.h              |  4 +++
 drivers/usb/dwc2/gadget.c            | 42 ++---------------------------
 drivers/usb/dwc2/params.c            | 29 +++++++++++++-------
 drivers/usb/dwc3/dwc3-of-simple.c    |  5 +++-
 drivers/usb/dwc3/gadget.c            |  4 +--
 drivers/usb/gadget/Kconfig           |  4 +--
 drivers/usb/gadget/legacy/Kconfig    | 12 +--------
 drivers/usb/host/xhci-mem.c          | 15 ++++++++---
 drivers/usb/host/xhci-ring.c         |  6 ++---
 drivers/usb/musb/da8xx.c             | 10 ++++++-
 drivers/usb/storage/unusual_devs.h   |  7 +++++
 drivers/usb/storage/unusual_uas.h    |  7 +++++
 drivers/usb/usbip/stub_rx.c          | 51 +++++++++++++++++++++++++++++-------
 drivers/usb/usbip/stub_tx.c          |  7 +++++
 drivers/usb/usbip/usbip_common.h     |  1 +
 drivers/usb/usbip/vhci_sysfs.c       | 25 +++++++++++-------
 tools/usb/usbip/libsrc/vhci_driver.c | 10 +++----
 18 files changed, 144 insertions(+), 99 deletions(-)