Re: [PATCH] USB: gadget: fix illegal array access in binding with UDC

2020-05-09 Thread Felipe Balbi
Kyungtae Kim writes: > FuzzUSB (a variant of syzkaller) found an illegal array access > using an incorrect index while binding a gadget with UDC. > > Reference: https://www.spinics.net/lists/linux-usb/msg194331.html > > This bug occurs when a size variable used for a buffer > is misused to access

[PATCH] USB: gadget: fix illegal array access in binding with UDC

2020-05-05 Thread Kyungtae Kim
FuzzUSB (a variant of syzkaller) found an illegal array access using an incorrect index while binding a gadget with UDC. Reference: https://www.spinics.net/lists/linux-usb/msg194331.html This bug occurs when a size variable used for a buffer is misused to access its strcpy-ed buffer. Given a buff