diff options
| author | Takashi Iwai <tiwai@suse.de> | 2018-12-19 14:04:47 +0100 |
|---|---|---|
| committer | Takashi Iwai <tiwai@suse.de> | 2019-01-07 10:46:27 +0100 |
| commit | 0bfe5e434e6665b3590575ec3c5e4f86a1ce51c9 (patch) | |
| tree | 870ae33ee380a572e2faed76bdb7694b04f5b489 /lib/locking-selftest-softirq.h | |
| parent | ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() (diff) | |
| download | linux-0bfe5e434e6665b3590575ec3c5e4f86a1ce51c9.tar.xz linux-0bfe5e434e6665b3590575ec3c5e4f86a1ce51c9.zip | |
ALSA: usb-audio: Check mixer unit descriptors more strictly
We've had some sanity checks of the mixer unit descriptors but they
are too loose and some corner cases are overlooked. Add more strict
checks in uac_mixer_unit_get_channels() for avoiding possible OOB
accesses by malformed descriptors.
This also changes the semantics of uac_mixer_unit_get_channels()
slightly. Now it returns zero for the cases where the descriptor
lacks of bmControls instead of -EINVAL. Then the caller side skips
the mixer creation for such unit while it keeps parsing it.
This corresponds to the case like Maya44.
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Diffstat (limited to 'lib/locking-selftest-softirq.h')
0 files changed, 0 insertions, 0 deletions