diff options
| author | Takashi Iwai <tiwai@suse.de> | 2018-12-19 14:36:27 +0300 |
|---|---|---|
| committer | Takashi Iwai <tiwai@suse.de> | 2019-01-07 12:46:26 +0300 |
| commit | f4351a199cc120ff9d59e06d02e8657d08e6cc46 (patch) | |
| tree | b3d38fbd367555c5a905dc37954a4af73dd74bf6 /include/linux/compiler_attributes.h | |
| parent | bfeffd155283772bbe78c6a05dec7c0128ee500c (diff) | |
| download | linux-f4351a199cc120ff9d59e06d02e8657d08e6cc46.tar.xz | |
ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
The parser for the processing unit reads bNrInPins field before the
bLength sanity check, which may lead to an out-of-bound access when a
malformed descriptor is given. Fix it by assignment after the bLength
check.
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Diffstat (limited to 'include/linux/compiler_attributes.h')
0 files changed, 0 insertions, 0 deletions