bianbu-repo-mirror/bianbu-linux-6.6
1
0
Fork 0
mirror of https://gitee.com/bianbu-linux/linux-6.6 synced 2025-04-24 14:07:52 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

ALSA: asihpi: Fix potential OOB array access

Browse source 
[ Upstream commit 7b986c7430a6bb68d523dac7bfc74cbd5b44ef96 ]

ASIHPI driver stores some values in the static array upon a response
from the driver, and its index depends on the firmware.  We shouldn't
trust it blindly.

This patch adds a sanity check of the array index to fit in the array
size.

Link: https://patch.msgid.link/20240808091454.30846-1-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>
This commit is contained in:
Takashi Iwai 2024-08-08 11:14:42 +02:00 • committed by Greg Kroah-Hartman
parent ddd52c9fe9
commit 7a55740996
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
sound/pci/asihpi/hpimsgx.c
View file

@ -708,7 +708,7 @@ static u16 HPIMSGX__init(struct hpi_message *phm,
phr->error = HPI_ERROR_PROCESSING_MESSAGE; phr->error = HPI_ERROR_PROCESSING_MESSAGE;
return phr->error; return phr->error;
} }
if (hr.error == 0) { if (hr.error == 0 && hr.u.s.adapter_index < HPI_MAX_ADAPTERS) {
/* the adapter was created successfully /* the adapter was created successfully
save the mapping for future use */ save the mapping for future use */
hpi_entry_points[hr.u.s.adapter_index] = entry_point_func; hpi_entry_points[hr.u.s.adapter_index] = entry_point_func;