RIOT-OS/RIOT
RIOT-OS/RIOT
1
0
Fork 0
mirror of https://github.com/RIOT-OS/RIOT.git synced 2024-12-29 04:50:03 +01:00
Code Releases Activity

usbus/hid: fix buffer overflow in hid_io

Browse Source
This commit is contained in:
Ollrogge 2022-11-10 20:33:29 +01:00
parent e402e3f57a
commit 0f9577df60
1 changed files with 3 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
sys/usb/usbus/hid/hid_io.c
View File

@ -1,5 +1,5 @@
/*
* Copyright (C) 2021 Nils Ollrogge
* Copyright (C) 2021-2022 Nils Ollrogge
*
* This file is subject to the terms and conditions of the GNU Lesser
* General Public License v2.1. See the file LICENSE in the top level
@ -57,14 +57,13 @@ void usb_hid_io_write(const void *buffer, size_t len)
while (len) {
mutex_lock(&hid.in_lock);
if (len > max_size) {
memmove(buffer_ep + offset, (uint8_t *)buffer + offset, max_size);
memmove(buffer_ep, (uint8_t *)buffer + offset, max_size);
offset += max_size;
hid.occupied = max_size;
len -= max_size;
}
else {
memmove(buffer_ep + offset, (uint8_t *)buffer + offset, len);
offset += len;
memmove(buffer_ep, (uint8_t *)buffer + offset, len);
hid.occupied = len;
len = 0;
}