mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/
synced 2026-11-13 07:31:07 +00:00
In the DSP event handling code, a put_user() loop copies event data.
When the user buffer size is not aligned to 4 bytes, it could overwrite
beyond the buffer boundary.
Fix by adding a bounds check before put_user().
Suggested-by: Takashi Iwai <tiwai@suse.de>
Fixes:
|
History
|
|
|---|---|---|
| .. | ||
| amdtp-motu-trace.h | ||
| amdtp-motu.c | ||
| Makefile | ||
| motu-command-dsp-message-parser.c | ||
| motu-hwdep.c | ||
| motu-midi.c | ||
| motu-pcm.c | ||
| motu-proc.c | ||
| motu-protocol-v1.c | ||
| motu-protocol-v2.c | ||
| motu-protocol-v3.c | ||
| motu-register-dsp-message-parser.c | ||
| motu-stream.c | ||
| motu-transaction.c | ||
| motu.c | ||
| motu.h | ||