PR/59624 CVS commit: src/sys/dev/usb

["Taylor R Campbell" <riastradh%netbsd.org@localhost>]

The following reply was made to PR install/59624; it has been noted by GNATS.

From: "Taylor R Campbell" <riastradh%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/59624 CVS commit: src/sys/dev/usb
Date: Sun, 5 Oct 2025 20:41:04 +0000

 Module Name:	src
 Committed By:	riastradh
 Date:		Sun Oct  5 20:41:04 UTC 2025
 
 Modified Files:
 	src/sys/dev/usb: usb_subr.c
 
 Log Message:
 usb(9): Use ud_configidx, not ud_config, to see if unconfigured.
 
 ud_config is a device-provided quantity in the config descriptor's
 bConfigurationValue, and a faulty (or malicious) device can provide 0
 for that value, which coincides with our software sentinel value
 USBD_UNCONFIG_NO of 0.
 
 Instead of testing ud_config, test ud_configidx, which is an index in
 [0, bNumConfigurations) or -1, for which the device cannot confuse us
 by a value that coincides with the sentinel -1.
 
 PR kern/59185: panic over KASSERTMSG(dev->ud_ifaces == NULL) on Dell
 Latitude 7490
 
 PR kern/59624: Booting NetBSD-11 from USB on my Dell machine panics
 and hangs
 
 PR kern/57447: HEAD fails to probe USB devices and fails to boot up
 
 Reported-by: syzbot+017911f90e0f9766bc71%syzkaller.appspotmail.com@localhost
 https://syzkaller.appspot.com/bug?id=e6d4449a128e73a9a88100a5cc833e5cae9fecae
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.280 -r1.281 src/sys/dev/usb/usb_subr.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.