bybrooklyn/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-04-18 14:53:58 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
83964553e8a94217edf961994ea0ca722d297447
linux/drivers/comedi/drivers
History
Deepanshu Kartikey 93853512f5 comedi: dt2815: add hardware detection to prevent crash 
The dt2815 driver crashes when attached to I/O ports without actual
hardware present. This occurs because syzkaller or users can attach
the driver to arbitrary I/O addresses via COMEDI_DEVCONFIG ioctl.

When no hardware exists at the specified port, inb() operations return
0xff (floating bus), but outb() operations can trigger page faults due
to undefined behavior, especially under race conditions:

  BUG: unable to handle page fault for address: 000000007fffff90
  #PF: supervisor write access in kernel mode
  #PF: error_code(0x0002) - not-present page
  RIP: 0010:dt2815_attach+0x6e0/0x1110

Add hardware detection by reading the status register before attempting
any write operations. If the read returns 0xff, assume no hardware is
present and fail the attach with -ENODEV. This prevents crashes from
outb() operations on non-existent hardware.

Reported-by: syzbot+72f94b474d6e50b71ffc@syzkaller.appspotmail.com
Cc: stable <stable@kernel.org>
Closes: https://syzkaller.appspot.com/bug?extid=72f94b474d6e50b71ffc
Tested-by: syzbot+72f94b474d6e50b71ffc@syzkaller.appspotmail.com
Reviewed-by: Ian Abbott <abbotti@mev.co.uk>
Signed-off-by: Deepanshu Kartikey <kartikey406@gmail.com>
Link: [https://lore.kernel.org/all/20260126070458.10974-1-kartikey406@gmail.com/T/]
Link: [https://lore.kernel.org/all/20260126070458.10974-1-kartikey406@gmail.com/T/
Link: https://patch.msgid.link/20260309104859.503529-1-kartikey406@gmail.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2026-04-02 14:40:27 +02:00
..
ni_routing
comedi: ni_routing: tools: Check when the file could not be opened
2024-09-11 16:03:28 +02:00
tests
comedi: remove editor modelines and cruft (again)
2021-05-13 20:31:44 +02:00
8255_pci.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
8255.c
comedi: 8255: Fail to attach if fail to request I/O port region
2025-11-26 14:20:20 +01:00
addi_apci_3xxx.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_16xx.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_1032.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_1500.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_1516.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_1564.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_2032.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
addi_apci_2200.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_3120.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_apci_3501.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_tcw.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
addi_watchdog.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
addi_watchdog.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
adl_pci7x3x.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
adl_pci6208.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
adl_pci7250.c
comedi: Add new driver for ADLink PCI-7250 series
2025-09-06 16:03:25 +02:00
adl_pci8164.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
adl_pci9111.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
adl_pci9118.c
comedi: drivers: adl_pci9118.c: Edit file so that checkpatch.pl has 0 typo errors
2025-05-08 20:24:14 +02:00
adq12b.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
adv_pci1710.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
adv_pci1720.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
adv_pci1723.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
adv_pci1724.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
adv_pci1760.c
comedi: adv_pci1760: Fix PWM instruction handling
2023-01-19 17:24:47 +01:00
adv_pci_dio.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
aio_aio12_8.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
aio_iiro_16.c
comedi: aio_iiro_16: Fix bit shift out of bounds
2025-07-16 15:02:44 +02:00
amcc_s5933.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
amplc_dio200_common.c
comedi: amplc_dio200_common: Conditionally remove I/O port support
2023-10-05 13:34:04 +02:00
amplc_dio200_pci.c
comedi: amplc_dio200_pci: Conditionally remove devices that use port I/O
2023-10-05 13:34:04 +02:00
amplc_dio200.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
amplc_dio200.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
amplc_pc236_common.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
amplc_pc236.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
amplc_pc236.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
amplc_pc263.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
amplc_pci224.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
amplc_pci230.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
amplc_pci236.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
amplc_pci263.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
c6xdigio.c
comedi: c6xdigio: Fix invalid PNP driver unregistration
2025-11-26 13:57:16 +01:00
cb_das16_cs.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
cb_pcidas64.c
comedi: remove unused helper function dma_chain_flag_bits
2024-04-11 15:12:07 +02:00
cb_pcidas.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
cb_pcidda.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
cb_pcimdas.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
cb_pcimdda.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
comedi_8254.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
comedi_8255.c
comedi: comedi_8255: Correct error in subdevice initialization
2024-03-05 14:21:42 +00:00
comedi_bond.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
comedi_isadma.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
comedi_parport.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
comedi_test.c
comedi: comedi_test: add a DIO subdevice
2026-01-16 16:33:13 +01:00
contec_pci_dio.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
dac02.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
daqboard2000.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
das08_cs.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
das08_isa.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
das08_pci.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
das08.c
comedi: remove redundant assignment to variable range
2024-02-18 19:17:11 +01:00
das08.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
das16.c
treewide, timers: Rename from_timer() to timer_container_of()
2025-06-08 09:07:37 +02:00
das16m1.c
comedi: das16m1: Fix bit shift out of bounds
2025-07-16 15:02:26 +02:00
das800.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
das1800.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
das6402.c
comedi: das6402: Fix bit shift out of bounds
2025-07-16 15:02:44 +02:00
dmm32at.c
comedi: dmm32at: serialize use of paged registers
2026-01-16 16:43:51 +01:00
dt282x.c
comedi: Move "comedi_isadma.h" to <linux/comedi/comedi_isadma.h>
2021-11-26 16:48:59 +01:00
dt2801.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
dt2811.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
dt2814.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
dt2815.c
comedi: dt2815: add hardware detection to prevent crash
2026-04-02 14:40:27 +02:00
dt2817.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
dt3000.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
dt9812.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
dyna_pci10xx.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
fl512.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
gsc_hpdi.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
icp_multi.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ii_pci20kc.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
jr3_pci.c
kernel.h: drop hex.h and update all hex.h users
2026-01-20 19:44:19 -08:00
jr3_pci.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
ke_counter.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
Makefile
comedi: Add new driver for ADLink PCI-7250 series
2025-09-06 16:03:25 +02:00
me4000.c
comedi: me4000: Fix potential overrun of firmware buffer
2026-04-02 14:39:21 +02:00
me_daq.c
comedi: me_daq: Fix potential overrun of firmware buffer
2026-04-02 14:39:29 +02:00
mf6x4.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
mite.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
mite.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
mpc624.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
multiq3.c
comedi: multiq3: sanitize config options in multiq3_attach()
2025-11-26 14:19:00 +01:00
ni_65xx.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_660x.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_670x.c
Convert more 'alloc_obj' cases to default GFP_KERNEL arguments
2026-02-21 20:03:00 -08:00
ni_6527.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_at_a2150.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
ni_at_ao.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
ni_atmio16d.c
comedi: ni_atmio16d: Fix invalid clean-up after failed attach
2026-04-02 14:38:28 +02:00
ni_atmio.c
comedi: ni_atmio: avoid warning for unused device_ids[] table
2025-04-17 10:56:11 +02:00
ni_daq_700.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_daq_dio24.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
ni_labpc_common.c
comedi: ni_labpc_common: Conditionally remove I/O port support
2023-10-05 13:34:04 +02:00
ni_labpc_cs.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_labpc_isadma.c
comedi: Move "comedi_isadma.h" to <linux/comedi/comedi_isadma.h>
2021-11-26 16:48:59 +01:00
ni_labpc_isadma.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
ni_labpc_pci.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_labpc_regs.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
ni_labpc.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_labpc.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
ni_mio_common.c
comedi: ni_*: do not declare unused variable range_ni_E_ao_ext
2024-07-31 13:11:43 +02:00
ni_mio_cs.c
comedi: Move and rename "8255.h" to <linux/comedi/comedi_8255.h>
2021-11-26 16:48:59 +01:00
ni_pcidio.c
comedi: ni_pcidio: Do not bother filling buffer with 0xaa byte values
2025-04-25 15:53:18 +02:00
ni_pcimio.c
comedi: ni_*: do not declare unused variable range_ni_E_ao_ext
2024-07-31 13:11:43 +02:00
ni_routes.c
comedi: drivers: ni_routes: Use strcmp() instead of memcmp()
2022-02-25 12:08:52 +01:00
ni_routes.h
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_stc.h
comedi: ni_*: do not declare unused variable range_ni_E_ao_ext
2024-07-31 13:11:43 +02:00
ni_tio_internal.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
ni_tio.c
Convert remaining multi-line kmalloc_obj/flex GFP_KERNEL uses
2026-02-22 08:26:33 -08:00
ni_tio.h
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
ni_tiocmd.c
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
ni_usb6501.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
pcl711.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
pcl724.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
pcl726.c
comedi: pcl726: Prevent invalid irq number
2025-08-19 12:56:16 +02:00
pcl730.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
pcl812.c
comedi: pcl812: Fix bit shift out of bounds
2025-07-16 15:02:44 +02:00
pcl816.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
pcl818.c
comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()
2025-11-26 14:19:15 +01:00
pcm3724.c
comedi: comedi_8255: Rework subdevice initialization functions
2023-10-05 13:34:04 +02:00
pcmad.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
pcmda12.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
pcmmio.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
pcmuio.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
plx9052.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
plx9080.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
quatech_daqp_cs.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
rtd520.c
comedi: comedi_8254: Replace comedi_8254_init() and comedi_8254_mm_init()
2023-10-05 13:34:04 +02:00
rti800.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
rti802.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
s526.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
s626.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
s626.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00
ssv_dnp.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
usbdux.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
usbduxfast.c
comedi: Move the main COMEDI headers
2021-11-26 16:48:59 +01:00
usbduxsigma.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
vmk80xx.c
comedi: vmk80xx: fix incomplete endpoint checking
2024-04-11 15:16:23 +02:00
z8536.h
staging: comedi: move out of staging directory
2021-04-15 09:26:25 +02:00