android_kernel_motorola_sm6375/sound
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Kuninori Morimoto 7f12f99b80 ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
[ Upstream commit 98e5eb110095ec77cb6d775051d181edbf9cd3cf ]

tuning_ctl_set() might have buffer overrun at (X) if it didn't break
from loop by matching (A).

	static int tuning_ctl_set(...)
	{
		for (i = 0; i < TUNING_CTLS_COUNT; i++)
(A)			if (nid == ca0132_tuning_ctls[i].nid)
				break;

		snd_hda_power_up(...);
(X)		dspio_set_param(..., ca0132_tuning_ctls[i].mid, ...);
		snd_hda_power_down(...);                ^

		return 1;
	}

We will get below error by cppcheck

	sound/pci/hda/patch_ca0132.c:4229:2: note: After for loop, i has value 12
	 for (i = 0; i < TUNING_CTLS_COUNT; i++)
	 ^
	sound/pci/hda/patch_ca0132.c:4234:43: note: Array index out of bounds
	 dspio_set_param(codec, ca0132_tuning_ctls[i].mid, 0x20,
	                                           ^
This patch cares non match case.

Signed-off-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
Link: https://lore.kernel.org/r/87sfe9eap7.wl-kuninori.morimoto.gx@renesas.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2023-04-05 11:16:42 +02:00
..
ac97
aoa ALSA: aoa: Fix I2S device accounting 2022-11-03 23:56:56 +09:00
arm
atmel
core ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF 2023-01-18 11:42:01 +01:00
drivers treewide: Replace DECLARE_TASKLET() with DECLARE_TASKLET_OLD() 2023-03-11 16:43:42 +01:00
firewire ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes 2022-05-12 12:23:40 +02:00
hda ALSA: hda: add snd_hdac_stop_streams() helper 2023-01-18 11:41:39 +01:00
i2c
isa ALSA: wavefront: Proper check of get_user() error 2022-05-25 09:14:34 +02:00
mips
oss
parisc
pci ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() 2023-04-05 11:16:42 +02:00
pcmcia
ppc
sh
soc ASoC: kirkwood: Iterate over array indexes instead of using pointer math 2023-03-11 16:43:57 +01:00
sparc
spi ALSA: spi: Add check for clk_enable() 2022-04-15 14:18:08 +02:00
synth ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() 2023-02-22 12:50:30 +01:00
usb ALSA: line6: fix stack overflow in line6_midi_transmit 2023-01-18 11:41:44 +01:00
x86 ALSA: intel_hdmi: Fix reference to PCM buffer address 2022-03-08 19:07:46 +01:00
xen
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c