usb: dwc2: avoid out of bounds access
authorStefan Brüns <stefan.bruens@rwth-aachen.de>
Tue, 22 Dec 2015 00:21:48 +0000 (01:21 +0100)
committerMarek Vasut <marex@denx.de>
Thu, 31 Dec 2015 09:05:31 +0000 (10:05 +0100)
commit5253aded464f99734698bffd33c662f1ac071fd0
treeacdf8e8e03aa39d560a65a74a994eacbbffeab92
parentc75f57fba4712fed1b0f7b9b10c2bbfdb9ede449
usb: dwc2: avoid out of bounds access

flush_dcache_range may access data after priv->aligned_buffer end if
len > DWC2_DATA_BUF_SIZE.
memcpy may access data after buffer end if done > 0

Signed-off-by: Stefan Brüns <stefan.bruens@rwth-aachen.de>
Acked-by: Marek Vasut <marex@denx.de>
Acked-by: Stephen Warren <swarren@wwwdotorg.org>
drivers/usb/host/dwc2.c