diff options
| author | Takashi Iwai <tiwai@suse.de> | 2018-12-19 14:36:27 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-01-13 12:01:05 +0300 |
| commit | 1117b7a380f4b4f575d90a318a43d2e168c01fbd (patch) | |
| tree | 0e4f49b7bcacdf9ec7eae593f96486bdb10688af /sound/firewire | |
| parent | 89c7ba90185dc9af684a17027300899e189039cd (diff) | |
| download | linux-1117b7a380f4b4f575d90a318a43d2e168c01fbd.tar.xz | |
ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
commit f4351a199cc120ff9d59e06d02e8657d08e6cc46 upstream.
The parser for the processing unit reads bNrInPins field before the
bLength sanity check, which may lead to an out-of-bound access when a
malformed descriptor is given. Fix it by assignment after the bLength
check.
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'sound/firewire')
0 files changed, 0 insertions, 0 deletions