linux-toradex.git/include/uapi/linux/usb/ch9.h, branch v4.14-rc7

USB: fix out-of-bounds in usb_set_configuration

2017-09-19T15:27:16+00:00

Andrey Konovalov reported a possible out-of-bounds problem for a USB interface
association descriptor.  He writes:
	It seems there's no proper size check of a USB_DT_INTERFACE_ASSOCIATION
	descriptor. It's only checked that the size is >= 2 in
	usb_parse_configuration(), so find_iad() might do out-of-bounds access
	to intf_assoc->bInterfaceCount.

And he's right, we don't check for crazy descriptors of this type very well, so
resolve this problem.  Yet another issue found by syzkaller...

Reported-by: Andrey Konovalov 
Tested-by: Andrey Konovalov 
Cc: stable 
Signed-off-by: Greg Kroah-Hartman

usb: fix some references for /proc/bus/usb

2017-04-18T14:54:19+00:00

Since when we got rid of usbfs, the /proc/bus/usb is now
elsewhere. Fix references for it.

Signed-off-by: Mauro Carvalho Chehab 
Acked-by: Serge Hallyn 
Signed-off-by: Greg Kroah-Hartman

usb: ch9: make usb_endpoint_maxp() return only packet size

2016-11-03T08:38:22+00:00

Now that we have a helper to gather periodic
endpoints' multiplier bits from wMaxPacketSize and
every driver is using it, we can safely make sure
that usb_endpoint_maxp() returns only bits 10:0 of
wMaxPacketSize which is where the actual packet size
lies.

Signed-off-by: Felipe Balbi

usb: add helper to extract bits 12:11 of wMaxPacketSize

2016-10-31T09:15:33+00:00

According to USB Specification 2.0 table 9-4,
wMaxPacketSize is a bitfield. Endpoint's maxpacket
is laid out in bits 10:0. For high-speed,
high-bandwidth isochronous endpoints, bits 12:11
contain a multiplier to tell us how many
transactions we want to try per uframe.

This means that if we want an isochronous endpoint
to issue 3 transfers of 1024 bytes per uframe,
wMaxPacketSize should contain the value:

	1024 | (2 << 11)

or 5120 (0x1400). In order to make Host and
Peripheral controller drivers' life easier, we're
adding a helper which returns bits 12:11. Note that
no care is made WRT to checking endpoint type and
gadget's speed. That's left for drivers to handle.

Signed-off-by: Felipe Balbi

USB: PD: additional feature selectors

2016-04-18T19:33:15+00:00

This adds the feature selectors from Table 9-8

Signed-off-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

USB: PD: define specific requests

2016-04-18T19:33:15+00:00

This takes the definitions of requests from chapter 9.3.1
of the USB Power Delivery spec.

Signed-off-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

USB: add descriptors from USB Power Delivery spec

2016-04-18T19:33:15+00:00

Adding the descriptors of chapter 9.2 of the Power Delivery spec.

Signed-off-by: Oliver Neukum 
Signed-off-by: Greg Kroah-Hartman

usb: ch9: Fix SSP Device Cap wFunctionalitySupport type

2016-03-29T10:26:04+00:00

The wFunctionalitySupport field should be __le16.

Signed-off-by: John Youn 
Signed-off-by: Felipe Balbi

usb: add OTG status selector definition for HNP polling

2016-03-04T13:14:35+00:00

A host is required to use the GetStatus command, with wIndex set to the
OTG status selector(F000H) to request the Host request flag from the
peripheral.

Acked-by: Peter Chen 
Signed-off-by: Li Jun 
Signed-off-by: Felipe Balbi

usb: ch9: Add size macro for SSP dev cap descriptor

2016-03-04T13:14:22+00:00

The SuperspeedPlus Device Capability Descriptor has a variable size
depending on the number of sublink speed attributes.

This patch adds a macro to calculate that size. The macro takes one
argument, the Sublink Speed Attribute Count (SSAC) as reported by the
descriptor in bmAttributes[4:0].

See USB 3.1 9.6.2.5, Table 9-19.

Signed-off-by: John Youn 
Signed-off-by: Felipe Balbi