Fix #3033: Increase array bounds and test for overflow
This commit is contained in:
		| @@ -254,7 +254,8 @@ bool midih_open(uint8_t rhport, uint8_t dev_addr, tusb_desc_interface_t const *d | ||||
|             TU_LOG_DRV("  Jack %s %s descriptor \r\n", | ||||
|                        tu_desc_subtype(p_desc) == MIDI_CS_INTERFACE_IN_JACK ? "IN" : "OUT", | ||||
|                        p_desc[3] == MIDI_JACK_EXTERNAL ? "External" : "Embedded"); | ||||
|             desc_cb.desc_jack[desc_cb.jack_num++] = p_desc; | ||||
|             if (desc_cb.jack_num < TU_ARRAY_SIZE(desc_cb.desc_jack)) | ||||
|                 desc_cb.desc_jack[desc_cb.jack_num++] = p_desc; | ||||
|             break; | ||||
|           } | ||||
|  | ||||
|   | ||||
| @@ -69,7 +69,7 @@ typedef struct { | ||||
|   const tusb_desc_endpoint_t* desc_epout; // endpoint OUT descriptor, CS_ENDPOINT is right after | ||||
|  | ||||
|   uint8_t jack_num; | ||||
|   const uint8_t* desc_jack[16]; // list of jack descriptors (embedded + external) | ||||
|   const uint8_t* desc_jack[32]; // list of jack descriptors (embedded + external) | ||||
| } tuh_midi_descriptor_cb_t; | ||||
|  | ||||
| typedef struct { | ||||
|   | ||||
		Reference in New Issue
	
	Block a user
	 rppicomidi
					rppicomidi