From af3a981a7a0be2d63b26e1db2d2ca9a437f9f679 Mon Sep 17 00:00:00 2001
From: sakumisu <1203593632@qq.com>
Date: Sat, 25 Jul 2026 23:29:27 +0800
Subject: fix(security): fix adb len check

Signed-off-by: sakumisu <1203593632@qq.com>
---
 class/adb/usbd_adb.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/class/adb/usbd_adb.c b/class/adb/usbd_adb.c
index dc664309..d147834f 100644
--- a/class/adb/usbd_adb.c
+++ b/class/adb/usbd_adb.c
@@ -115,7 +115,7 @@ void usbd_adb_bulk_out(uint8_t busid, uint8_t ep, uint32_t nbytes)
 
     if (adb_client.common_state == ADB_STATE_READ_MSG) {
         USB_ASSERT(nbytes == sizeof(struct adb_msg));
-        USB_ASSERT(rx_packet.msg.data_length <= sizeof(rx_packet.payload));
+        USB_ASSERT(rx_packet.msg.data_length < sizeof(rx_packet.payload));
 
         USB_LOG_DBG("command:%x arg0:%x arg1:%x len:%d\r\n",
                     rx_packet.msg.command,
-- 
cgit v1.3.1