Fix also cdc_msc example.

2025-01-22 21:24:14 +01:00
parent bd08753583
commit 19d28a9d15
1 changed files with 3 additions and 0 deletions
--- a/examples/device/cdc_msc/src/msc_disk.c
+++ b/examples/device/cdc_msc/src/msc_disk.c
@@ -192,6 +192,9 @@ int32_t tud_msc_read10_cb(uint8_t lun, uint32_t lba, uint32_t offset, void* buff
  // out of ramdisk
  if ( lba >= DISK_BLOCK_NUM ) return -1;

+  // Check for overflow of offset + bufsize
+  if ( offset + bufsize >= DISK_BLOCK_SIZE ) return -1;
+
  uint8_t const* addr = msc_disk[lba] + offset;
  memcpy(buffer, addr, bufsize);