You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Hui Peng e49b967f0b ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
`check_input_term` recursively calls itself with input from
device side (e.g., uac_input_terminal_descriptor.bCSourceID)
as argument (id). In `check_input_term`, if `check_input_term`
is called with the same `id` argument as the caller, it triggers
endless recursive call, resulting kernel space stack overflow.

This patch fixes the bug by adding a bitmap to `struct mixer_build`
to keep track of the checked ids and stop the execution if some id
has been checked (similar to how parse_audio_unit handles unitid
argument).

Change-Id: Ibc4ab23c7d7c2fc96ff85d7cf1a1205bbd632cb5
Reported-by: Hui Peng <benquike@gmail.com>
Reported-by: Mathias Payer <mathias.payer@nebelwelt.net>
Signed-off-by: Hui Peng <benquike@gmail.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
4 years ago
..
aoa
arm ASoC: fix broken pxa SoC support 9 years ago
atmel
core ALSA: timer: fix a missing goto 4 years ago
drivers ALSA: aloop: Fix racy hw constraints adjustment 5 years ago
firewire
i2c
isa
mips
oss sound/oss: fix deadlock in sequencer_ioctl(SNDCTL_SEQ_OUTOFBAND) 9 years ago
parisc
pci This is the 3.10.102 stable release 7 years ago
pcmcia
ppc
sh
soc soc: msm-pcm: Add missing mutex lock to protect prvt data 4 years ago
sparc
spi
synth ALSA: emux: Fix potential Spectre v1 vulnerabilities 5 years ago
usb ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term 4 years ago
Kconfig
Makefile
ac97_bus.c
last.c
sound_core.c sound: fix a memory leak bug 4 years ago
sound_firmware.c