usb: sandbox: Bounds check read from buffer
authorAndrew Scull <ascull@google.com>
Sun, 3 Apr 2022 10:39:12 +0000 (10:39 +0000)
committerTom Rini <trini@konsulko.com>
Fri, 29 Apr 2022 15:11:36 +0000 (11:11 -0400)
commitbeb341ae7f43a4424ca321315a25fe9133030de2
treed4711e35c4775e52f435e888abf03e16a8198bc2
parent62120155b67313509b673e051155075383a8a33a
usb: sandbox: Bounds check read from buffer

The buffer is 512 bytes but read requests can be 800 bytes. Limit the
request to the size of the buffer.

Signed-off-by: Andrew Scull <ascull@google.com>
Cc: Simon Glass <sjg@chromium.org>
Cc: Marek Vasut <marex@denx.de>
Reviewed-by: Simon Glass <sjg@chromium.org>
drivers/usb/emul/sandbox_flash.c