Re: [PATCH] usb: musb: Fix musb_gadget.c rxstate overflow bug
From: gregkh@xxxxxxxxxxxxxxxxxxx
Date: Mon Sep 05 2022 - 03:19:20 EST
On Mon, Sep 05, 2022 at 09:02:12AM +0800, guoweibin wrote:
> From: guoweibin <guoweibin@xxxxxxxxxx>
> Date: Mon, 25 Jul 2022 19:27:49 +0800
> Subject: [PATCH] usb: musb: Fix musb_gadget.c rxstate overflow bug
Odd, this shouldn't be in the body of the email if you use 'git
send-email', how did you send it?
>
> when the rxstate function executes the 'goto buffer_aint_mapped' code
> branch, it will always copy the fifocnt bytes data to request->buf,
> which may cause request->buf out of bounds..
>
> Fix it by add the length check :
> fifocnt = min_t(unsigned, request->length - request->actual, fifocnt);
>
> Signed-off-by: guoweibin <guoweibin@xxxxxxxxxx>
I need a "full" name, not just an email alias as a name for a
signed-off-by: Please fix that up and resend a v2.
And what commit does this fix?
thanks,
greg k-h