qmk/qmk_firmware
[Bug] A potential bug may exist in usb_lld_init_endpoint in ChibiOS in melgeek firmware
オープン
#22,514 opened on 2023/11/20
bughelp wanted
Repository metrics
- Stars
- (20,368 個のスター)
- PR merge metrics
- (平均マージ 20d 9h) (30d で 27 merged PRs)
説明
Describe the Bug
In function usb_lld_init_endpoint, it reads a device register value and as an offset to fetch data. However, this value is not checked thus result in arbitrary memory read. This is a problem caused by ChibiOS. I don't know how to fix it.
Keyboard Used
melgeek
Link to product page (if applicable)
No response
Operating System
No response
qmk doctor Output
No response
Is AutoHotKey / Karabiner installed
- AutoHotKey (Windows)
- Karabiner (macOS)
Other keyboard-related software installed
No response
Additional Context
No response