Spooky. I predicted the double descriptor read bug before actually seeing the code. I am not an expert, and I definitely haven't written my own USB stack. St

Spooky. I predicted the double descriptor read bug before actually seeing the code. I am not an expert, and I definitely haven't written my own USB stack. Still, I wonder why the original code had this problem, given that this seems to be the classical example of how to attack a USB stack. Somehow reminds me what happened when Cisco started to ship a HTTP server with some switches. One of the first bugs was a buffer overflow on URLs longer then 255 bytes ...