diff options
| author |   Thinh Nguyen <Thinh.Nguyen@synopsys.com> | 2020-08-06 19:46:23 -0700 |
|---|---|---|
| committer |   Felipe Balbi <balbi@kernel.org> | 2020-08-17 15:19:02 +0300 |
| commit | 5d187c0454ef4c5e046a81af36882d4d515922ec (patch) | |
| tree | f0d1347b1baf9fb91dcb9f0bda032a62d3b2c2da /tools/perf/scripts/python/export-to-postgresql.py | |
| parent | usb: gadget: f_tcm: Fix some resource leaks in some error paths (diff) | |
| download | wireguard-linux-5d187c0454ef4c5e046a81af36882d4d515922ec.tar.xz wireguard-linux-5d187c0454ef4c5e046a81af36882d4d515922ec.zip | |
usb: dwc3: gadget: Don't setup more than requested
The SG list may be set up with entry size more than the requested
length. Check the usb_request->length and make sure that we don't setup
the TRBs to send/receive more than requested. This case may occur when
the SG entry is allocated up to a certain minimum size, but the request
length is less than that. It can also occur when the request is reused
for a different request length.
Cc: <stable@vger.kernel.org> # v4.18+
Fixes: a31e63b608ff ("usb: dwc3: gadget: Correct handling of scattergather lists")
Signed-off-by: Thinh Nguyen <thinhn@synopsys.com>
Signed-off-by: Felipe Balbi <balbi@kernel.org>
Diffstat (limited to '')
0 files changed, 0 insertions, 0 deletions