linux-stable/sound
Fabio M. De Francesco 97345c9023 ALSA: pcm: Test for "silence" field in struct "pcm_format_data"
commit 2f7a26abb8 upstream.

Syzbot reports "KASAN: null-ptr-deref Write in
snd_pcm_format_set_silence".[1]

It is due to missing validation of the "silence" field of struct
"pcm_format_data" in "pcm_formats" array.

Add a test for valid "pat" and, if it is not so, return -EINVAL.

[1] https://lore.kernel.org/lkml/000000000000d188ef05dc2c7279@google.com/

Reported-and-tested-by: syzbot+205eb15961852c2c5974@syzkaller.appspotmail.com
Signed-off-by: Fabio M. De Francesco <fmdefrancesco@gmail.com>
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20220409012655.9399-1-fmdefrancesco@gmail.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2022-04-20 09:36:25 +02:00
..
ac97
aoa
arm
atmel
core ALSA: pcm: Test for "silence" field in struct "pcm_format_data" 2022-04-20 09:36:25 +02:00
drivers ALSA: mtpav: Don't call card private_free at probe error path 2022-04-20 09:36:16 +02:00
firewire ALSA: firewire-lib: fix uninitialized flag for AV/C deferred transaction 2022-04-08 13:57:50 +02:00
hda ALSA: intel-dspconfig: add ES8336 support for CNL 2022-04-08 13:58:46 +02:00
i2c
isa ALSA: sc6000: Fix the missing snd_card_free() call at probe error 2022-04-20 09:36:11 +02:00
mips
oss
parisc
pci ALSA: hda/realtek: add quirk for Lenovo Thinkpad X12 speakers 2022-04-20 09:36:25 +02:00
pcmcia
ppc ALSA: ppc: beep: fix clang -Wimplicit-fallthrough 2021-12-07 15:36:56 +01:00
sh
soc ASoC: topology: Allow TLV control to be either read or write 2022-04-08 13:59:02 +02:00
sparc ALSA: sparc: no need to initialise statics to 0 2021-12-12 10:01:04 +01:00
spi ALSA: spi: Add check for clk_enable() 2022-04-08 13:57:49 +02:00
synth ALSA: synth: missing check for possible NULL after the call to kstrdup 2021-11-09 07:18:50 +01:00
usb ALSA: usb-audio: Limit max buffer and period sizes per time 2022-04-20 09:36:17 +02:00
virtio virtio: wrap config->reset calls 2022-01-14 18:50:52 -05:00
x86 ALSA: intel_hdmi: Fix the missing snd_card_free() call at probe error 2022-04-20 09:36:10 +02:00
xen xen: flag xen_snd_front to be not essential for system boot 2021-11-23 13:43:54 -06:00
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c