Skip to content
Commit 206af3de authored by Alison Huffman's avatar Alison Huffman Committed by Marek Vasut
Browse files

Fix out of bound access of ep array.



When processing USB_REQ_CLEAR_FEATURE, USB_REQ_SET_FEATURE, and
USB_REQ_GET_STATUS packets in dwc2_ep0_setup an out of bounds access
can occur. This is caused by the wIndex field of the usb control packet
being used as an index into an array whose size is DWC2_MAX_ENDPOINTS (4).

Signed-off-by: default avatarAlison Huffman <alisn@google.com>
parent 693765a7
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment