Re: [PATCH 1/4] usb: dwc2: initialize debugfs command buffer
From: Thinh Nguyen
Date: Tue Nov 03 2026 - 20:59:05 EST
(Removed some bounced emails)
On Wed, Oct 21, 2026, Jiale Yao wrote:
> testmode_write() copies user input into an uninitialized stack buffer
> and compares fixed command lengths. A short write matching a command
> prefix can make strncmp() inspect bytes that were not initialized.
>
> Zero-initialize the buffer so the copied input is always terminated.
>
> Fixes: f91eea447ac3 ("usb: dwc2: move debugfs code to a separate file")
This should be:
Fixes: 9e14d0a566f4 ("usb: dwc2: gadget: add TEST_MODE feature support")
How was this found? Please mention the tool in the commit message?
BR,
Thinh