linux-kernel - Re: [PATCH] ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Tue, 07 Feb 2023 14:32:59 +0100
From:   Takashi Iwai <tiwai@...e.de>
To:     Artemii Karasev <karasev@...ras.ru>
Cc:     Jaroslav Kysela <perex@...ex.cz>, Takashi Iwai <tiwai@...e.com>,
        alsa-devel@...a-project.org, linux-kernel@...r.kernel.org,
        lvc-project@...uxtesting.org
Subject: Re: [PATCH] ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()

On Tue, 07 Feb 2023 14:20:26 +0100,
Artemii Karasev wrote:
> 
> snd_emux_xg_control() can be called with an argument 'param' greater
> than size of 'control' array. It may lead to accessing 'control'
> array at a wrong index.
> 
> Found by Linux Verification Center (linuxtesting.org) with SVACE.
> 
> Signed-off-by: Artemii Karasev <karasev@...ras.ru>
> Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")

Thanks, applied now.


Takashi