qiurui/Centos-kernel-stream-10
1
0
Fork 0
mirror of https://gitlab.com/redhat/centos-stream/src/kernel/centos-stream-10.git synced 2026-09-09 00:07:04 +08:00
Code Issues Packages Projects Releases Wiki Activity

ALSA: asihpi: Fix potential OOB array access at reading cache

Browse Source 
JIRA: https://issues.redhat.com/browse/RHEL-183295

commit 7b7d6572145c1dab2dd9bfb550b188e5f0ff3c3f
Author: Takashi Iwai <tiwai@suse.de>
Date: Fri May 15 10:55:58 2026 +0200

    ALSA: asihpi: Fix potential OOB array access at reading cache

    find_control() to retrieve a cached info accesses the array with the
    given index blindly, which may lead to an OOB array access.
    Add a sanity check for avoiding it.

    Link: https://sashiko.dev/#/patchset/20260511230121.28606-1-rosenp%40gmail.com
    Cc: <stable@vger.kernel.org>
    Link: https://patch.msgid.link/20260515085606.242284-1-tiwai@suse.de
    Signed-off-by: Takashi Iwai <tiwai@suse.de>

Signed-off-by: Jaroslav Kysela <jkysela@redhat.com>
This commit is contained in:
Jaroslav Kysela
2026-06-23 17:46:05 +02:00
parent 1adacd75c5
commit c3cf7cb763
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sound/pci/asihpi/hpicmn.c
+6
View File
@@ -276,6 +276,12 @@ static short find_control(u16 control_index,
return 0;
}
if (control_index >= p_cache->control_count) {
HPI_DEBUG_LOG(VERBOSE, "control_index out of bounce %d\n",
control_index);
return 0;
}
*pI = p_cache->p_info[control_index];
if (!*pI) {
HPI_DEBUG_LOG(VERBOSE, "Uncached Control %d\n",