[nrf fromtree] drivers: usb: udc_dwc2: Restrict TxFIFO to SPRAM size

Do not allocate TxFIFO in a way that could corrupt Endpoint Information Controller data (stored at DFIFO Depth address) or access locations outside the SPRAM. Signed-off-by: Tomasz Moń <[email protected]> (cherry picked from commit 6582529) Signed-off-by: Tomasz Moń <[email protected]>
nrfconnect · Sep 23, 2024 · ad923b1 · ad923b1
1 parent d7881c1
commit ad923b1
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/drivers/usb/udc/udc_dwc2.c b/drivers/usb/udc/udc_dwc2.c
@@ -1393,6 +1393,11 @@ static int dwc2_set_dedicated_fifo(const struct device *dev,
 			return -ENOMEM;
 		}
 
+		/* Do not allocate TxFIFO outside the SPRAM */
+		if (txfaddr + txfdep > priv->dfifodepth) {
+			return -ENOMEM;
+		}
+
 		/* Set FIFO depth (32-bit words) and address */
 		dwc2_set_txf(dev, ep_idx - 1, txfdep, txfaddr);
 	} else {