qmk/qmk_firmware
[Bug] A potential bug may exist in usb_lld_init_endpoint in ChibiOS in melgeek firmware
开放
#22,514 创建于 2023年11月20日
bughelp wanted
仓库指标
- 星标
- (20,368 个星标)
- PR 合并指标
- (平均合并 20天 9小时) (30 天内合并 27 个 PR)
描述
Describe the Bug
In function usb_lld_init_endpoint, it reads a device register value and as an offset to fetch data. However, this value is not checked thus result in arbitrary memory read. This is a problem caused by ChibiOS. I don't know how to fix it.
Keyboard Used
melgeek
Link to product page (if applicable)
No response
Operating System
No response
qmk doctor Output
No response
Is AutoHotKey / Karabiner installed
- AutoHotKey (Windows)
- Karabiner (macOS)
Other keyboard-related software installed
No response
Additional Context
No response