fpc: Prevent a buffer-overflow on data reading

Reported by: Keith Linneman (LinnemanLabs)
This commit is contained in:
Marco Trevisan (Treviño)
2026-07-13 08:13:46 +00:00
committed by Marco Trevisan
parent 092c0dfc31
commit 3cc0ae79e7
+9
View File
@@ -173,6 +173,15 @@ fpc_cmd_receive_cb (FpiUsbTransfer *transfer,
return;
}
if (transfer->actual_length > sizeof (fpc_cmd_response_t))
{
fp_err ("%s recv evt data length (%ld) exceeds buffer size (%ld)",
G_STRFUNC, transfer->actual_length, sizeof (fpc_cmd_response_t));
fpi_ssm_mark_failed (transfer->ssm,
fpi_device_error_new (FP_DEVICE_ERROR_DATA_INVALID));
return;
}
data->resp_len = transfer->actual_length;
if (data->callback)