Old-Ding opened a new pull request, #19323:
URL: https://github.com/apache/nuttx/pull/19323

   ## Summary
   - reject RNDIS encapsulated response reads when host wLength cannot hold the 
first queued response
   - keep the response queue intact instead of copying and consuming a partial 
response
   
   ## Rationale
   The handler already falls back from the whole response queue to the first 
queued message when wLength is smaller than the queue. If that first message is 
also larger than wLength, copying hdr->msglen bytes can exceed the requested 
control transfer and the completion path would later account only for the 
truncated transfer length. Returning EMSGSIZE before memcpy avoids both cases.
   
   ## Testing
   - git diff --check
   - git show --check --stat --oneline HEAD
   - not run: local C compiler is not installed on this Windows host


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to