| commit | d09c06c6fc240261dde65198774b279d89c35459 | |
| author | Takashi Iwai <tiwai@suse.de> | |
| Thu, 13 Oct 2011 06:19:09 +0000 (13 08:19 +0200) | ||
| committer | Takashi Iwai <tiwai@suse.de> | |
| Thu, 13 Oct 2011 06:19:09 +0000 (13 08:19 +0200) | ||
| tree | efd2c6881892a6b0ced0b29743a85d814721af17 | treesnapshot (tar.gz zip) |
| parent | e653510a27e63b41a5bae3c46eb093375e17ca2d | commitdiff |
ALSA: usb-audio - Fix possible access over audio_feature_info[] array
The audio_feature_info[] array should contain all entries for UAC2_FU_*,
but currently a few last entries are missing. Even though, the driver
tries to probe these entries in parse_audio_feature_unit() and may
access the range over the array. This patch fixes the bug by limiting
the loop size properly using ARRAY_SIZE() instead of a hard-coded
magic number.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
The audio_feature_info[] array should contain all entries for UAC2_FU_*,
but currently a few last entries are missing. Even though, the driver
tries to probe these entries in parse_audio_feature_unit() and may
access the range over the array. This patch fixes the bug by limiting
the loop size properly using ARRAY_SIZE() instead of a hard-coded
magic number.
Reported-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
| sound/usb/mixer.c | diffblobblamehistory |