r1362 - trunk/src/target/u-boot/patches

[werner at sita.openmoko.org]

Author: werner
Date: 2007-03-14 12:45:30 +0100 (Wed, 14 Mar 2007)
New Revision: 1362

Modified:
   trunk/src/target/u-boot/patches/uboot-dfu.patch
Log:
drivers/usbdfu.c (handle_upload): work around memory corruption caused by
  copying to too small buffer in URB



Modified: trunk/src/target/u-boot/patches/uboot-dfu.patch
===================================================================
--- trunk/src/target/u-boot/patches/uboot-dfu.patch	2007-03-14 11:12:58 UTC (rev 1361)
+++ trunk/src/target/u-boot/patches/uboot-dfu.patch	2007-03-14 11:45:30 UTC (rev 1362)
@@ -99,7 +99,7 @@
 ===================================================================
 --- /dev/null
 +++ u-boot/drivers/usbdfu.c
-@@ -0,0 +1,1042 @@
+@@ -0,0 +1,1043 @@
 +/*
 + * (C) 2007 by OpenMoko, Inc.
 + * Author: Harald Welte <laforge at openmoko.org>
@@ -586,7 +586,8 @@
 +			remain = len;
 +
 +		debug("copying %u bytes ", remain);
-+		memcpy(urb->buffer, ds->ptr, remain);
++//		memcpy(urb->buffer, ds->ptr, remain);
++		urb->buffer = ds->ptr;
 +		ds->ptr += remain;
 +		urb->actual_length = remain;
 +