[PATCH v4] usb: gadget: aspeed_udc: validate endpoint index for ast udc

Markus Elfring Markus.Elfring at web.de
Tue Jun 25 22:00:15 AEST 2024


> We should verify the bound of the array to assure that host
> may not manipulate the index to point past endpoint array.

Why did you not choose an imperative wording for your change description?
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/tree/Documentation/process/submitting-patches.rst?h=v6.10-rc5#n94


> Found by static analysis.

Were any special tools involved?


How do you think about to add any tags (like “Fixes” and “Cc”) accordingly?

Regards,
Markus


More information about the Linux-aspeed mailing list