Red Bear OS
7f7f29b4d4
The PSIC field in xHCI Supported Protocol Capability is 4 bits, so its value is 0-15. Using an unbounded psic() for slicing risks OOB reads if a buggy controller reports 15 but the actual data is shorter (or absent). Cap at 15 per xHCI spec §7.2 and §4.16.1.1. This matches Linux 7.1 xhci_create_port_array() which uses kcalloc_node with the count for proper allocation.