andy/tinyUSB
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Fix buffer overrun at pipe_read_packet()

Browse Source
This commit is contained in:
kkitayam
2021-12-04 01:25:34 +09:00
parent 3e9bb3bee1
commit 7137a0a92f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/portable/mentor/musb/dcd_musb.c
View File

@@ -250,12 +250,12 @@ static void pipe_read_packet(void *buf, volatile void *fifo, unsigned len)
len -= 4; len -= 4;
} }
if (len >= 2) { if (len >= 2) {
*(uint32_t *)addr = reg->u16; *(uint16_t *)addr = reg->u16;
addr += 2; addr += 2;
len -= 2; len -= 2;
} }
if (len) { if (len) {
*(uint32_t *)addr = reg->u8; *(uint8_t *)addr = reg->u8;
} }
} }