13 Jan
2020
13 Jan
'20
6:26 p.m.
On Mon, Jan 13, 2020 at 06:18:18PM +0100, Johan Hovold wrote:
The driver was issuing synchronous uninterruptible control requests without using a timeout. This could lead to the driver hanging on various user requests due to a malfunctioning (or malicious) device until the device is physically disconnected.
The USB upper limit of five seconds per request should be more than enough.
Fixes: f3d27f34fdd7 ("[media] usbtv: Add driver for Fushicai USBTV007 video frame grabber") Fixes: c53a846c48f2 ("[media] usbtv: add video controls") Cc: stable stable@vger.kernel.org # 3.11 Cc: Lubomir Rintel lkundrak@v3.sk Signed-off-by: Johan Hovold johan@kernel.org
Reviewed-by: Greg Kroah-Hartman gregkh@linuxfoundation.org