jerpelea opened a new pull request, #19342:
URL: https://github.com/apache/nuttx/pull/19342

   ## Summary
   
   When several RNDIS responses are queued, the control request handler sends 
one complete response if the host wLength is smaller than the whole queue. If 
the first queued response is also larger than wLength, copying hdr->msglen 
bytes would overrun the requested transfer and the completion path would 
consume a partial message.
   
   Return EMSGSIZE before copying in that case so the queued response remains 
intact for a retry with a large enough wLength.
   
   ## Impact
   
   RELEASE
   
   ## Testing
   
   CI


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to