davidlt/kernel-ark
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
85c50a5899
kernel-ark/sound/core
History
Dan Carpenter 85c50a5899 ALSA: seq: seq_oss_event: missing range checks 
The "dev" variable could be out of bounds.  Calling
snd_seq_oss_synth_is_valid() checks that it is is a valid device
which has been opened.  We check this inside set_note_event() so
this function can't succeed without a valid "dev".  But we need to
do the check earlier to prevent invalid dereferences and memory
corruption.

One call tree where "dev" could be out of bounds is:
-> snd_seq_oss_oob_user()
   -> snd_seq_oss_process_event()
      -> extended_event()
         -> note_on_event()

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
2013-03-04 16:39:50 +01:00
..
oss ALSA: core: fix NULL checking in snd_pcm_plug_slave_size() 2012-11-14 08:03:31 +01:00
seq ALSA: seq: seq_oss_event: missing range checks 2013-03-04 16:39:50 +01:00
compress_offload.c ALSA: compress: add support for gapless playback 2013-02-14 12:30:22 +01:00
control_compat.c ALSA: control: add support for ENUMERATED user space controls 2011-10-09 09:09:11 +02:00
control.c ALSA: Avoid endless sleep after disconnect 2012-10-30 11:07:15 +01:00
ctljack.c ALSA: hda - Add missing inclusion of linux/export.h 2011-11-16 14:28:33 +01:00
device.c sound: Add export.h for THIS_MODULE/EXPORT_SYMBOL where needed 2011-10-31 19:31:22 -04:00
hrtimer.c ALSA: hrtimer: remove superfluous tasklet invocation 2011-02-10 18:53:32 +01:00
hwdep_compat.c
hwdep.c ALSA: Avoid endless sleep after disconnect 2012-10-30 11:07:15 +01:00
info_oss.c ALSA: remove the main version information 2012-09-04 11:38:32 +02:00
info.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
init.c ALSA: Add a reference counter to card instance 2012-10-30 11:07:10 +01:00
isadma.c sound: Add export.h for THIS_MODULE/EXPORT_SYMBOL where needed 2011-10-31 19:31:22 -04:00
jack.c ALSA: jack: Update documention to reflect other userspace interfaces 2012-05-07 18:11:37 +02:00
Kconfig Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound 2012-01-17 10:48:13 -08:00
Makefile Merge branch 'topic/hda' into for-linus 2012-01-12 09:59:18 +01:00
memalloc.c treewide: Correct spelling of successfully in comments 2011-09-27 18:08:04 +02:00
memory.c sound: Add export.h for THIS_MODULE/EXPORT_SYMBOL where needed 2011-10-31 19:31:22 -04:00
misc.c sound: use printk_get_level and printk_skip_level 2012-07-30 17:25:14 -07:00
pcm_compat.c ALSA: core: fix 64-bit SNDRV_PCM_IOCTL_STATUS ABI breakage 2012-10-28 09:52:37 +01:00
pcm_lib.c ALSA: core: add hooks for audio timestamps 2012-10-23 16:13:48 +02:00
pcm_memory.c ALSA: Make snd_sgbuf_get_{ptr|addr}() available for non-SG cases 2012-09-23 11:24:42 +02:00
pcm_misc.c ALSA: pcm: Add snd_pcm_rate_bit_to_rate() 2012-06-18 09:38:58 +02:00
pcm_native.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
pcm_timer.c ALSA: sound/core/pcm_timer.c: use lib/gcd.c 2009-12-22 08:24:35 +01:00
pcm.c ALSA: PCM: Remove redundant null check before kfree 2012-11-21 10:43:26 +01:00
rawmidi_compat.c
rawmidi.c ALSA: Avoid endless sleep after disconnect 2012-10-30 11:07:15 +01:00
rtctimer.c ALSA: rtctimer.c needs module.h 2011-07-30 08:03:35 +02:00
sgbuf.c ALSA: Make snd_sgbuf_get_{ptr|addr}() available for non-SG cases 2012-09-23 11:24:42 +02:00
sound_oss.c ALSA: Fix card refcount unbalance 2012-11-08 14:36:18 +01:00
sound.c ALSA: Fix card refcount unbalance 2012-11-08 14:36:18 +01:00
timer_compat.c
timer.c device.h: cleanup users outside of linux/include (C files) 2012-03-11 14:27:37 -04:00
vmaster.c ALSA: fix core/vmaster.c kernel-doc warning 2012-04-18 07:56:15 +02:00