Hello Greg,

On the discovery and testing: I manually reviewed the affected code and
used a userspace ASan harness based on the Greybus structures to exercise
the two length calculations.

The harness demonstrated the 2047-byte and 1983-byte copies into the
1600-byte and 320-byte destinations, respectively. It did not exercise a
live CAP ioctl or Greybus transport and did not produce an in-kernel
KASAN report.

I also built drivers/staging/greybus/authentication.o with W=1 on arm64,
and the submitted patch passed checkpatch without warnings. I do not
have access to real Greybus hardware, so the change has not been tested
on a physical device.

And yes, I omitted the Assisted-by tag. That was my mistake. I used
OpenAI Codex while analyzing, preparing, and validating the patch.

thanks,