> Crude patch attached but i very much hope that someone other who > understands rndis better than me will come with a real solution soon.
I suspect the hardware is handing back a descriptor which is overlong. In which case the "correct" fix is probably to copy only as much as fits in the buffer (rather than the dummy string you do now)
