Dongxiang Ke 9190487037 ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface() ...

commit e53f47f6c1a56d2af728909f1cb894da6b43d9bf upstream.

There may be a bad USB audio device with a USB ID of (0x04fa, 0x4201) and
the number of it's interfaces less than 4, an out-of-bounds read bug occurs
when parsing the interface descriptor for this device.

Fix this by checking the number of interfaces.

Signed-off-by: Dongxiang Ke <kdx.glider@gmail.com>
Link: https://lore.kernel.org/r/20220906024928.10951-1-kdx.glider@gmail.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-09-15 12:23:52 +02:00

..

aoa

ALSA: aoa: onyx: always initialize register read value

2020-01-27 14:46:41 +01:00

arm

…

atmel

…

core

ALSA: seq: Fix data-race at module auto-loading

2022-09-15 12:23:51 +02:00

drivers

ALSA: aloop: Fix random zeros in capture data when using jiffies timer

2022-09-15 12:23:52 +02:00

firewire

ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes

2022-05-12 12:17:09 +02:00

hda

ALSA: hda: avoid write to STATESTS if controller is in reset

2021-10-27 09:51:41 +02:00

i2c

ALSA: i2c/cs8427: Fix int to char conversion

2019-12-01 09:13:39 +01:00

isa

ALSA: wavefront: Proper check of get_user() error

2022-05-25 08:41:19 +02:00

mips

…

oss

…

parisc

…

pci

ALSA: emu10k1: Fix out of bounds access in snd_emu10k1_pcm_channel_alloc()

2022-09-15 12:23:52 +02:00

pcmcia

ALSA: vxpocket: Fix invalid endian conversions

2018-08-22 07:46:10 +02:00

ppc

ALSA: ppc: fix error return code in snd_pmac_probe()

2021-07-20 16:17:50 +02:00

sh

ALSA: sh: Fix compile warning wrt const

2020-02-28 16:36:02 +01:00

soc

ASoC: mediatek: mt8173-rt5650: Fix refcount leak in mt8173_rt5650_dev_probe

2022-08-25 11:11:23 +02:00

sparc

ALSA: sparc: Fix invalid snd_free_pages() at error path

2018-12-05 19:41:24 +01:00

spi

ALSA: spi: Add check for clk_enable()

2022-04-20 09:08:14 +02:00

synth

ALSA: synth: missing check for possible NULL after the call to kstrdup

2021-11-26 11:40:21 +01:00

usb

ALSA: usb-audio: Fix an out-of-bounds bug in __snd_usb_parse_audio_interface()

2022-09-15 12:23:52 +02:00

x86

ALSA: intel_hdmi: Fix reference to PCM buffer address

2022-03-08 19:01:56 +01:00

ac97_bus.c

…

Kconfig

…

last.c

…

Makefile

…

sound_core.c

sound: fix a memory leak bug

2019-08-16 10:13:46 +02:00