From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pl1-f174.google.com (mail-pl1-f174.google.com [209.85.214.174]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 4D59A331A43 for ; Sun, 16 Aug 2026 07:30:27 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.174 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786865428; cv=none; b=JToxqAXIkI0JPPf4Wl441cuRhM5qe2/7+SPNUkV0u2QaSVZ27rjeKwy31voUyGjnNIz0RpIsxBlgn5ArbJrAZAL9jEo8Er1FO1Y8Rw4qpSf+YQtwGtaAz6A8CcYKjZVVP/Vyqjt9q2OfMVLgwqVyH4cZRpqyevD1zEm/PdyuRwE= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1786865428; c=relaxed/simple; bh=VkHWzzFjFsD0isDX4WgpLMmqZFoGCz5MQKudd+quF54=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=XPTndhPyONkKs+FrT6QSrMpWK2hdFJP6DZMJDs/D0xP22AZj76xX0z1A1LbuL2dYM3l4U0F4PwD6+0rIZXwgNa39n17lt42/q/QmPSKOzrpQYP9ZlxbOxvfIn2pWS7x2kbDyN4ou8Z7UmGgHkFWtmGlqbmX3H4Zs6WHoskKGRvQ= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Kucmo9XZ; arc=none smtp.client-ip=209.85.214.174 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Kucmo9XZ" Received: by mail-pl1-f174.google.com with SMTP id d9443c01a7336-2cee9b74ee1so17583925ad.3 for ; Sun, 16 Aug 2026 00:30:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1786865426; x=1787470226; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to:content-type; bh=HUjLyrFKXdxo7BCne8VLDtxVKKQrN8yD6zGh8EQT42c=; b=Kucmo9XZKnz1T3hMlf1XTybcNW3t/Zf891w0VuznqZwrUBMcuX16pKOvp3bugFWUBd 97LgeL1cWypKOM0ONf8t1BlI1cvVtvLObxTIL6YuKqVUntHwFpjeC8uPsHr6MwL34Fq4 1cz0Jpa+6NwYh0g/JFpp83iSooHHuX7pyV8xXV2HIZpDFvjkFqXJpxoOC0bMzjUJb8RS x6rAn9EdKj6GvbgXBrw0+GjpkGeY3BTW3BLOUtjfvdfXWWRUN9sqHfpWDlnIr4eN/5Rf eJQMUZpxiG9+3vcvdtn1FeEv4nxWl/Fmb2TtGzQ/EwiGtHO0lUG3AnUbbstywAxmnkGl fRyg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1786865426; x=1787470226; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to:content-type; bh=HUjLyrFKXdxo7BCne8VLDtxVKKQrN8yD6zGh8EQT42c=; b=Rql7T6nI+e/0jxNYVW1q3VO3r5/JerdOBKAjlmNRvAeGzYoSJkuzBghCkI6d3vTRAs oCY5kHZK4EMqleDZaXQahEsqrKhQEuvyDrQTUnZxKkhHiJ74NAoi3+ZotXMPAJCQD7GU 0LdC1GafL+aoVwReiJXGZgG7zgBORU25vvb29lNK/WDIHGoF43NCVanBZRpxnVzhJbFU x5JrmV/LAvZQwji+DB9HR52IlCzHOhY3MCH2+PKyp365s9yL8qU/V94cncX8M+d07BJ0 zK4fpy7/nyYXdTVjQmhkxx3pHU4wGLZj+RNu4UtWNuZq3j7kB+yAWCAaJfuLCNfJ9D3s Uh4Q== X-Forwarded-Encrypted: i=1; AHgh+Rpm1Y2YcGAI9FsbmQiK8uj0Sk1JK6MAjXJwY7qbNO65bq6fpJgW91hJlh5agCFT1z10u6hnq1iM9/DI4nE=@vger.kernel.org X-Gm-Message-State: AOJu0YwXx5TBCq52mC2ZhMKuPMueE6f3USzcAjxtQAUrvzqz63KPuXT7 ydWEVw8qGGm8BxUFHPvmpxPRkHaMBda75PWDQOsyNF49c7BBTnPhXj7B X-Gm-Gg: AR+sD117iyu2PqsAQpkKuzZVeDUV5Xjex62VEnOizksOWTD9M4+L2Gbus97ua00ZWaE GSKhLoR8ZDN1pnThQJSRHKSFUeOS1+/1FjV9rPfC8oLjTBqKxJ0WDLyqqaqWjvdOwUXHnJOyNb9 W8yBVXkHp6RqnpbCrR1XFwhwSBQKLmJ6BJuMITIG1ZvSlw2jOc28hRC2WHmHU7MWqFVm/EEd4h7 DHNYkiozNOrfQlPiyU6gp9dYgZcusFSDM3yrf3fVV5L54BGeQfLR+I7RNrT90NfqCtIGDXIlXIM AHcwvVdCcFJAoURsDr6SzcKxDS5fGwIo8Gc7P0dr5R1pLFs5teE2DDXsh2/pxaVXpc5PA+S/fFw tTs0VZDgGnj8MMtvVKr+aeM4siQ8WmeB6BK9Q/oX02xwVwsH9t5DyktNqAc06BXkUY5dm2QY0t7 ZKlkNsuTY6VsrbqUJ9wFQCtz+hEDrTz59lYPnJutsq4jvFMDMP6WbcOw3p/rnmjuETjpZFzbDPi 7aku2T7XTrah6YTq2pVhGoU X-Received: by 2002:a17:902:da8b:b0:2ce:f9db:a9e0 with SMTP id d9443c01a7336-2d3b0e99809mr174012975ad.16.1786865426532; Sun, 16 Aug 2026 00:30:26 -0700 (PDT) Received: from OMEN ([103.148.21.25]) by smtp.gmail.com with ESMTPSA id 5a478bee46e88-320d5bd9fe0sm37303832eec.1.2026.08.16.00.30.23 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 16 Aug 2026 00:30:26 -0700 (PDT) From: George Emmanuel Thomas To: pengpeng@iscas.ac.cn Cc: mchehab@kernel.org, linux-media@vger.kernel.org, linux-kernel@vger.kernel.org, George Emmanuel Thomas Subject: Re: [PATCH v2] media: ttusb-dec: validate command request and response lengths Date: Sun, 16 Aug 2026 13:00:06 +0530 Message-ID: <20260816073006.255739-1-georgeemmanuelthomas@gmail.com> X-Mailer: git-send-email 2.53.0 In-Reply-To: <20260813150758.16500-1-pengpeng@iscas.ac.cn> References: <20260813150758.16500-1-pengpeng@iscas.ac.cn> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Hi Pengpeng, I tested this patch with a malformed USB response that previously triggered a KASAN slab-out-of-bounds in ttusb_dec_send_command() with a reported read size of 75 bytes. With this patch applied, the same reproducer reports: ttusb_dec_send_command: invalid result length 75 ttusb-dec 1-1:1.0: probe with driver ttusb-dec failed with error -71 There is no KASAN report, and the reproducer exits normally. Tested-by: George Emmanuel Thomas Thanks, George