| commit | d3c17d5e271ab688cb117330ec85e125ebf24d88 | [log] [tgz] |
|---|---|---|
| author | Greg Kroah-Hartman <[email protected]> | Tue Dec 14 19:46:21 2021 +0100 |
| committer | Greg Kroah-Hartman <[email protected]> | Wed Dec 15 21:25:04 2021 +0100 |
| tree | c3eaf999be40610dcc7804d3d9311cc78628ace4 | |
| parent | 2a09bcb0c25258b2fdffb2873ee62781c3d69ee0 [diff] |
FROMGIT: USB: gadget: bRequestType is a bitfield, not a enum
Szymon rightly pointed out that the previous check for the endpoint
direction in bRequestType was not looking at only the bit involved, but
rather the whole value. Normally this is ok, but for some request
types, bits other than bit 8 could be set and the check for the endpoint
length could not stall correctly.
Fix that up by only checking the single bit.
Fixes: 153a2d7e3350 ("USB: gadget: detect too-big endpoint 0 requests")
Cc: Felipe Balbi <[email protected]>
Reported-by: Szymon Heidrich <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Greg Kroah-Hartman <[email protected]>
(cherry picked from commit f08adf5add9a071160c68bb2a61d697f39ab0758
https://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb.git usb-linus)
Bug: 210292376
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Change-Id: I7e708b2b94433009c87f697346e0515d93454f48