Re: [PATCH] usb: musb: Fix musb_gadget.c rxstate overflow bug

From: gregkh@xxxxxxxxxxxxxxxxxxx
Date: Mon Sep 05 2022 - 03:19:20 EST


On Mon, Sep 05, 2022 at 09:02:12AM +0800, guoweibin wrote:
> From: guoweibin <guoweibin@xxxxxxxxxx>
> Date: Mon, 25 Jul 2022 19:27:49 +0800
> Subject: [PATCH] usb: musb: Fix musb_gadget.c rxstate overflow bug

Odd, this shouldn't be in the body of the email if you use 'git
send-email', how did you send it?

>
> when the rxstate function executes the 'goto buffer_aint_mapped' code
> branch, it will always copy the fifocnt bytes data to request->buf,
> which may cause request->buf out of bounds..
>
> Fix it by add the length check :
> fifocnt = min_t(unsigned, request->length - request->actual, fifocnt);
>
> Signed-off-by: guoweibin <guoweibin@xxxxxxxxxx>

I need a "full" name, not just an email alias as a name for a
signed-off-by: Please fix that up and resend a v2.

And what commit does this fix?

thanks,

greg k-h