aboutsummaryrefslogtreecommitdiff
path: root/hw/usb.h
diff options
context:
space:
mode:
authorHans de Goede <hdegoede@redhat.com>2011-02-02 17:46:00 +0100
committerGerd Hoffmann <kraxel@redhat.com>2011-05-04 12:25:52 +0200
commit19f3322379c25a235eb1ec6335676549109fa625 (patch)
treed833d9d4e6e0d8f0cd7bbb9e57a554ed1c7d1e1a /hw/usb.h
parentbb6d5498c6756eba3d0779c7753fc8830a8a9078 (diff)
downloadqemu-19f3322379c25a235eb1ec6335676549109fa625.zip
qemu-19f3322379c25a235eb1ec6335676549109fa625.tar.gz
qemu-19f3322379c25a235eb1ec6335676549109fa625.tar.bz2
usb: control buffer fixes
Windows allows control transfers to pass up to 4k of data, so raise our control buffer size to 4k. For control out transfers the usb core code copies the control request data to a buffer before calling the device's handle_control callback. Add a check for overflowing the buffer before copying the data. Signed-off-by: Hans de Goede <hdegoede@redhat.com>
Diffstat (limited to 'hw/usb.h')
-rw-r--r--hw/usb.h2
1 files changed, 1 insertions, 1 deletions
diff --git a/hw/usb.h b/hw/usb.h
index d3d755d..22bb338 100644
--- a/hw/usb.h
+++ b/hw/usb.h
@@ -167,7 +167,7 @@ struct USBDevice {
int32_t state;
uint8_t setup_buf[8];
- uint8_t data_buf[1024];
+ uint8_t data_buf[4096];
int32_t remote_wakeup;
int32_t setup_state;
int32_t setup_len;