On Wed, Sep 20, 2017 at 9:33 PM, Mike Isely wrote:
Hi Mike!
>
> What you have here is way beyond just feeding random crap in via the
> syscall interface. To cause this you have to fake the presence of a
> pvrusb2 compatible *hardware* USB device and then lie about its endpoint
What you have here is way beyond just feeding random crap in via the
syscall interface. To cause this you have to fake the presence of a
pvrusb2 compatible *hardware* USB device and then lie about its endpoint
configuration. Is that really a concern here? Are we now saying that
any kernel
Hi!
I've got the following report while fuzzing the kernel with syzkaller.
On commit ebb2c2437d8008d46796902ff390653822af6cc4 (Sep 18).
There seems to be no check on endpoint type before submitting bulk urb
in pvr2_send_request_ex().
usb 1-1: New USB device found, idVendor=2040, idProduct=7500