From: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Date: Sun, 2 May 2021 11:25:39 +0000 (+0200)
Subject: 4.14-stable patches
X-Git-Tag: v4.19.190~53
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=fec5db375df45faac71048ea30e3827040668171;p=thirdparty%2Fkernel%2Fstable-queue.git

4.14-stable patches

added patches:
	net-usb-ax88179_178a-initialize-local-variables-before-use.patch
---

diff --git a/queue-4.14/net-usb-ax88179_178a-initialize-local-variables-before-use.patch b/queue-4.14/net-usb-ax88179_178a-initialize-local-variables-before-use.patch
new file mode 100644
index 00000000000..359985c2e1c
--- /dev/null
+++ b/queue-4.14/net-usb-ax88179_178a-initialize-local-variables-before-use.patch
@@ -0,0 +1,39 @@
+From bd78980be1a68d14524c51c4b4170782fada622b Mon Sep 17 00:00:00 2001
+From: Phillip Potter <phil@philpotter.co.uk>
+Date: Thu, 1 Apr 2021 23:36:07 +0100
+Subject: net: usb: ax88179_178a: initialize local variables before use
+
+From: Phillip Potter <phil@philpotter.co.uk>
+
+commit bd78980be1a68d14524c51c4b4170782fada622b upstream.
+
+Use memset to initialize local array in drivers/net/usb/ax88179_178a.c, and
+also set a local u16 and u32 variable to 0. Fixes a KMSAN found uninit-value bug
+reported by syzbot at:
+https://syzkaller.appspot.com/bug?id=00371c73c72f72487c1d0bfe0cc9d00de339d5aa
+
+Reported-by: syzbot+4993e4a0e237f1b53747@syzkaller.appspotmail.com
+Signed-off-by: Phillip Potter <phil@philpotter.co.uk>
+Signed-off-by: David S. Miller <davem@davemloft.net>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+---
+ drivers/net/usb/ax88179_178a.c |    4 ++--
+ 1 file changed, 2 insertions(+), 2 deletions(-)
+
+--- a/drivers/net/usb/ax88179_178a.c
++++ b/drivers/net/usb/ax88179_178a.c
+@@ -307,12 +307,12 @@ static int ax88179_read_cmd(struct usbne
+ 	int ret;
+ 
+ 	if (2 == size) {
+-		u16 buf;
++		u16 buf = 0;
+ 		ret = __ax88179_read_cmd(dev, cmd, value, index, size, &buf, 0);
+ 		le16_to_cpus(&buf);
+ 		*((u16 *)data) = buf;
+ 	} else if (4 == size) {
+-		u32 buf;
++		u32 buf = 0;
+ 		ret = __ax88179_read_cmd(dev, cmd, value, index, size, &buf, 0);
+ 		le32_to_cpus(&buf);
+ 		*((u32 *)data) = buf;
diff --git a/queue-4.14/series b/queue-4.14/series
index 2375d92c506..66ead32ffd9 100644
--- a/queue-4.14/series
+++ b/queue-4.14/series
@@ -3,3 +3,4 @@ acpi-tables-x86-reserve-memory-occupied-by-acpi-tables.patch
 acpi-x86-call-acpi_boot_table_init-after-acpi_table_upgrade.patch
 bpf-fix-backport-of-bpf-restrict-unknown-scalars-of-mixed-signed-bounds-for-unprivileged.patch
 bpf-fix-up-selftests-after-backports-were-fixed.patch
+net-usb-ax88179_178a-initialize-local-variables-before-use.patch