linux-stable/sound
Artemii Karasev 60d2c64e08 ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control()
commit 6a32425f95 upstream.

snd_emux_xg_control() can be called with an argument 'param' greater
than size of 'control' array. It may lead to accessing 'control'
array at a wrong index.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Signed-off-by: Artemii Karasev <karasev@ispras.ru>
Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20230207132026.2870-1-karasev@ispras.ru
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2023-02-22 12:47:16 +01:00
..
ac97 ALSA: ac97: fix PM reference leak in ac97_bus_remove() 2021-07-20 16:16:08 +02:00
aoa ALSA: aoa: Fix I2S device accounting 2022-11-03 23:52:33 +09:00
arm
atmel
core ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF 2023-01-18 11:30:52 +01:00
drivers ALSA: mts64: fix possible null-ptr-defer in snd_mts64_interrupt 2023-01-18 11:30:15 +01:00
firewire ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes 2022-05-12 12:20:23 +02:00
hda ALSA: hda: fix potential memleak in 'add_widget_node' 2022-11-25 17:40:18 +01:00
i2c
isa ALSA: wavefront: Proper check of get_user() error 2022-05-25 09:10:37 +02:00
mips
oss
parisc
pci ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() 2023-02-22 12:47:12 +01:00
pcmcia
ppc ALSA: ppc: fix error return code in snd_pmac_probe() 2021-07-20 16:16:09 +02:00
sh
soc ASoC: Intel: bytcr_rt5640: Add quirk for the Advantech MICA-071 tablet 2023-01-18 11:30:50 +01:00
sparc
spi ALSA: spi: Add check for clk_enable() 2022-04-15 14:14:45 +02:00
synth ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() 2023-02-22 12:47:16 +01:00
usb ALSA: line6: fix stack overflow in line6_midi_transmit 2023-01-18 11:30:40 +01:00
x86 ALSA: intel_hdmi: Fix reference to PCM buffer address 2022-03-08 19:04:07 +01:00
xen
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c