From mboxrd@z Thu Jan 1 00:00:00 1970 From: Lukasz Majewski Date: Tue, 18 Aug 2020 13:24:13 +0200 Subject: [PATCH v2 3/7] f_sdp: Fix wrong usb request size In-Reply-To: <20200818101649.16509-4-peng.fan@nxp.com> References: <20200818101649.16509-1-peng.fan@nxp.com> <20200818101649.16509-4-peng.fan@nxp.com> Message-ID: <20200818132413.3ce35e57@jawa> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: u-boot@lists.denx.de On Tue, 18 Aug 2020 18:16:45 +0800 Peng Fan wrote: > From: Ye Li > > Because the buffer length of sdp usb request is 65, we have to > allocate 65 bytes not 64 bytes. Otherwise there is potential buffer > overflow. > > Signed-off-by: Ye Li > Signed-off-by: Peng Fan > --- > drivers/usb/gadget/f_sdp.c | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/drivers/usb/gadget/f_sdp.c b/drivers/usb/gadget/f_sdp.c > index f971ccdeca..eec7560fc2 100644 > --- a/drivers/usb/gadget/f_sdp.c > +++ b/drivers/usb/gadget/f_sdp.c > @@ -548,7 +548,7 @@ static struct usb_request *sdp_start_ep(struct > usb_ep *ep) { > struct usb_request *req; > > - req = alloc_ep_req(ep, 64); > + req = alloc_ep_req(ep, 65); > debug("%s: ep:%p req:%p\n", __func__, ep, req); > > if (!req) Reviewed-by: Lukasz Majewski Best regards, Lukasz Majewski -- DENX Software Engineering GmbH, Managing Director: Wolfgang Denk HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany Phone: (+49)-8142-66989-59 Fax: (+49)-8142-66989-80 Email: lukma at denx.de -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 488 bytes Desc: OpenPGP digital signature URL: