]> www.infradead.org Git - users/dwmw2/linux.git/commit
ALSA: isa/wavefront: prevent out of bounds write in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 1 May 2020 09:40:11 +0000 (12:40 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 24 Jun 2020 15:48:20 +0000 (17:48 +0200)
commit9ab21eb86cc0e411876cf28d5a1b93f6cbdeb29c
tree0252945557f94556fdd3d33a2392e9443d1aac6b
parentace05ed6d9564627e2b239b67b1de3605f147c6b
ALSA: isa/wavefront: prevent out of bounds write in ioctl

[ Upstream commit 7f0d5053c5a9d23fe5c2d337495a9d79038d267b ]

The "header->number" comes from the ioctl and it needs to be clamped to
prevent out of bounds writes.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20200501094011.GA960082@mwanda
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
sound/isa/wavefront/wavefront_synth.c