summaryrefslogtreecommitdiff
path: root/drivers/usb/gadget
diff options
context:
space:
mode:
authorYe Li <ye.li@nxp.com>2020-08-18 13:16:45 +0300
committerMarek Vasut <marex@denx.de>2020-09-01 15:47:43 +0300
commit5dee7f0b0233f8b4e43e1212a6a96cdee835a8e6 (patch)
tree7155ed79b7378a7cb496e37cfe363da62230b134 /drivers/usb/gadget
parentd10d429112b78c69099c57fa219230539502e543 (diff)
downloadu-boot-5dee7f0b0233f8b4e43e1212a6a96cdee835a8e6.tar.xz
f_sdp: Fix wrong usb request size
Because the buffer length of sdp usb request is 65, we have to allocate 65 bytes not 64 bytes. Otherwise there is potential buffer overflow. Signed-off-by: Ye Li <ye.li@nxp.com> Signed-off-by: Peng Fan <peng.fan@nxp.com> Reviewed-by: Lukasz Majewski <lukma@denx.de>
Diffstat (limited to 'drivers/usb/gadget')
-rw-r--r--drivers/usb/gadget/f_sdp.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/drivers/usb/gadget/f_sdp.c b/drivers/usb/gadget/f_sdp.c
index f971ccdeca..eec7560fc2 100644
--- a/drivers/usb/gadget/f_sdp.c
+++ b/drivers/usb/gadget/f_sdp.c
@@ -548,7 +548,7 @@ static struct usb_request *sdp_start_ep(struct usb_ep *ep)
{
struct usb_request *req;
- req = alloc_ep_req(ep, 64);
+ req = alloc_ep_req(ep, 65);
debug("%s: ep:%p req:%p\n", __func__, ep, req);
if (!req)