mirror of
https://github.com/torvalds/linux.git
synced 2024-11-10 06:01:57 +00:00
ALSA: asihpi: Fix potential OOB array access
ASIHPI driver stores some values in the static array upon a response from the driver, and its index depends on the firmware. We shouldn't trust it blindly. This patch adds a sanity check of the array index to fit in the array size. Link: https://patch.msgid.link/20240808091454.30846-1-tiwai@suse.de Signed-off-by: Takashi Iwai <tiwai@suse.de>
This commit is contained in:
parent
504dc9f5e6
commit
7b986c7430
@ -708,7 +708,7 @@ static u16 HPIMSGX__init(struct hpi_message *phm,
|
||||
phr->error = HPI_ERROR_PROCESSING_MESSAGE;
|
||||
return phr->error;
|
||||
}
|
||||
if (hr.error == 0) {
|
||||
if (hr.error == 0 && hr.u.s.adapter_index < HPI_MAX_ADAPTERS) {
|
||||
/* the adapter was created successfully
|
||||
save the mapping for future use */
|
||||
hpi_entry_points[hr.u.s.adapter_index] = entry_point_func;
|
||||
|
Loading…
Reference in New Issue
Block a user