sergiotarxz/nuttx
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

usbhost/enumerate: fix possible buffer overwrite

Browse Source
This commit is contained in:
Janne Rosberg 2016-10-18 08:15:19 -06:00 committed by Gregory Nutt
parent f01c5b79fc
commit 72f13db4bf
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
drivers/usbhost/usbhost_enumerate.c
View File

@ -469,6 +469,14 @@ int usbhost_enumerate(FAR struct usbhost_hubport_s *hport,
cfglen = (unsigned int)usbhost_getle16(((struct usb_cfgdesc_s *)buffer)->totallen); cfglen = (unsigned int)usbhost_getle16(((struct usb_cfgdesc_s *)buffer)->totallen);
uinfo("sizeof config data: %d\n", cfglen); uinfo("sizeof config data: %d\n", cfglen);
if (cfglen > maxlen)
{
uerr("ERROR: Configuration doesn't fit in buffer, length=%d, maxlen=%d\n",
cfglen, maxlen);
ret = -E2BIG;
goto errout;
}
/* Get all of the configuration descriptor data, index == 0 (Should not be /* Get all of the configuration descriptor data, index == 0 (Should not be
* hard-coded!) * hard-coded!)
*/ */