Re: [PATCH] net: usb: sr9700: validate receive packet extent

[Andrew Lunn]

On Sun, Jul 05, 2026 at 04:37:24PM +0800, Pengpeng Hou wrote:
> sr9700_rx_fixup() copies len bytes from skb->data + SR_RX_OVERHEAD when
> a URB contains multiple packets. The old check compared len against
> skb->len, but the source pointer has already skipped SR_RX_OVERHEAD
> bytes.
> 
> Validate len against the remaining bytes after SR_RX_OVERHEAD before the
> copy and cursor advance.

Please fix the Subject: line.

    Andrew

---
pw-bot: cr