Re: [PATCH] Fix out of bound access of ep array.

2022-09-25 Thread Marek Vasut
On 9/22/22 06:01, Alison Huffman wrote: When processing USB_REQ_CLEAR_FEATURE, USB_REQ_SET_FEATURE, and USB_REQ_GET_STATUS packets in dwc2_ep0_setup an out of bounds access can occur. This is caused by the wIndex field of the usb control packet being used as an index into an array whose size is D

[PATCH] Fix out of bound access of ep array.

2022-09-22 Thread Alison Huffman
When processing USB_REQ_CLEAR_FEATURE, USB_REQ_SET_FEATURE, and USB_REQ_GET_STATUS packets in dwc2_ep0_setup an out of bounds access can occur. This is caused by the wIndex field of the usb control packet being used as an index into an array whose size is DWC2_MAX_ENDPOINTS (4). Signed-off-by: Ali