diff options
| author | Takashi Iwai <tiwai@suse.de> | 2018-12-19 12:36:27 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2019-01-13 10:05:32 +0100 |
| commit | a5e09a908ea3c64bf522822b7923d2d8fc1a7af2 (patch) | |
| tree | 77c0dd01381335cce8d5680ad6a62a7943cf57fa /lib/debugobjects.c | |
| parent | 83f470ebd75e3fbe56e177763337dc9326af02a4 (diff) | |
ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit()
commit f4351a199cc120ff9d59e06d02e8657d08e6cc46 upstream.
The parser for the processing unit reads bNrInPins field before the
bLength sanity check, which may lead to an out-of-bound access when a
malformed descriptor is given. Fix it by assignment after the bLength
check.
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'lib/debugobjects.c')
0 files changed, 0 insertions, 0 deletions