diff options
| author | Alison Huffman <alisn@google.com> | 2022-09-22 04:01:32 +0000 |
|---|---|---|
| committer | Marek Vasut <marex@denx.de> | 2022-09-26 01:49:36 +0200 |
| commit | 206af3dec00071ec96c0fdec6c8dda3a039c07cf (patch) | |
| tree | 0049fa5ea0ac297a99765643d2a40d3128874af8 /fs/btrfs/disk-io.c | |
| parent | 693765a720ba4f116923372deb0c32488f031cf8 (diff) | |
Fix out of bound access of ep array.
When processing USB_REQ_CLEAR_FEATURE, USB_REQ_SET_FEATURE, and
USB_REQ_GET_STATUS packets in dwc2_ep0_setup an out of bounds access
can occur. This is caused by the wIndex field of the usb control packet
being used as an index into an array whose size is DWC2_MAX_ENDPOINTS (4).
Signed-off-by: Alison Huffman <alisn@google.com>
Diffstat (limited to 'fs/btrfs/disk-io.c')
0 files changed, 0 insertions, 0 deletions