Re: [PATCH] net: usb: sr9700: validate receive packet extent

On Sun, Jul 05, 2026 at 04:37:24PM +0800, Pengpeng Hou wrote:

sr9700_rx_fixup() copies len bytes from skb->data + SR_RX_OVERHEAD when
a URB contains multiple packets. The old check compared len against
skb->len, but the source pointer has already skipped SR_RX_OVERHEAD
bytes.

Validate len against the remaining bytes after SR_RX_OVERHEAD before the
copy and cursor advance.

Please fix the Subject: line.

    Andrew

---
pw-bot: cr