linux/sound/isa/wavefront
Junrui Luo 5588b7c86e ALSA: wavefront: Fix integer overflow in sample size validation
commit 0c4a13ba88 upstream.

The wavefront_send_sample() function has an integer overflow issue
when validating sample size. The header->size field is u32 but gets
cast to int for comparison with dev->freemem

Fix by using unsigned comparison to avoid integer overflow.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Junrui Luo <moonafterrain@outlook.com>
Link: https://patch.msgid.link/SYBPR01MB7881B47789D1B060CE8BF4C3AFC2A@SYBPR01MB7881.ausprd01.prod.outlook.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
History 2025-12-18 13:55:23 +01:00
..
Makefile ALSA: isa: Use *-y instead of *-objs in Makefile 2024-05-08 18:17:48 +02:00
wavefront.c ALSA: wavefront: Use standard print API 2024-08-08 07:49:46 +02:00
wavefront_fx.c ALSA: wavefront: Use standard print API 2024-08-08 07:49:46 +02:00
wavefront_midi.c ALSA: wavefront: Use standard print API 2024-08-08 07:49:46 +02:00
wavefront_synth.c ALSA: wavefront: Fix integer overflow in sample size validation 2025-12-18 13:55:23 +01:00