diff options
| author | Baoli.Zhang <baoli.zhang@linux.intel.com> | 2026-05-06 08:50:35 +0300 |
|---|---|---|
| committer | Vinod Koul <vkoul@kernel.org> | 2026-05-07 10:34:37 +0300 |
| commit | f772ff5a0e6758fd412803c09e03ba3bca5f5878 (patch) | |
| tree | 3a43aefa167a0aacf9dc97e25b582275a0dcee62 /scripts/git.orderFile | |
| parent | c368dd5cbd61ffab2b6f8a89b0d5775e2e16cde6 (diff) | |
| download | linux-f772ff5a0e6758fd412803c09e03ba3bca5f5878.tar.xz | |
soundwire: fix bug in sdw_add_element_group_count found by syzkaller
The original implementation caused an out-of-bounds memory access
in the sdw_add_element_group_count for-loop when i == num.
for (i = 0; i <= num; i++) {
if (rate == group->rates[i] && lane == group->lanes[i])
...
To fix this error, the function now checks for existing rate/lane
entries in the group(a function parameter) using a for-loop before
adding them.
No functional changes apart from this fix.
Fixes: 9026118f20e2 ("soundwire: Add generic bandwidth allocation algorithm")
Reviewed-by: Bard Liao <yung-chuan.liao@linux.intel.com>
Reviewed-by: Andy Shevchenko <andriy.shevchenko@linux.intel.com>
Signed-off-by: Baoli.Zhang <baoli.zhang@linux.intel.com>
Link: https://patch.msgid.link/20260506055039.3751028-2-baoli.zhang@linux.intel.com
Signed-off-by: Vinod Koul <vkoul@kernel.org>
Diffstat (limited to 'scripts/git.orderFile')
0 files changed, 0 insertions, 0 deletions