Star64_linux/sound
Hui Peng 19bce474c4 ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term
`check_input_term` recursively calls itself with input from
device side (e.g., uac_input_terminal_descriptor.bCSourceID)
as argument (id). In `check_input_term`, if `check_input_term`
is called with the same `id` argument as the caller, it triggers
endless recursive call, resulting kernel space stack overflow.

This patch fixes the bug by adding a bitmap to `struct mixer_build`
to keep track of the checked ids and stop the execution if some id
has been checked (similar to how parse_audio_unit handles unitid
argument).

Reported-by: Hui Peng <benquike@gmail.com>
Reported-by: Mathias Payer <mathias.payer@nebelwelt.net>
Signed-off-by: Hui Peng <benquike@gmail.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
2019-08-15 21:48:52 +02:00
..
ac97 ALSA: ac97: Fix double free of ac97_codec_device 2019-07-23 14:16:11 +02:00
aoa
arm
atmel
core ALSA: pcm: fix lost wakeup event scenarios in snd_pcm_drain 2019-07-29 19:05:42 +02:00
drivers
firewire ALSA: firewire: fix a memory leak bug 2019-08-08 11:12:26 +02:00
hda ALSA: hda: Fix 1-minute detection delay when i915 module is not available 2019-07-27 08:31:46 +02:00
i2c
isa
mips
oss
parisc
pci ALSA: hda - Add a generic reboot_notify 2019-08-14 08:38:23 +02:00
pcmcia
ppc ALSA: ps3: Remove Unneeded variable: "ret" 2019-07-10 11:53:31 +02:00
sh
soc ASoC: Fixes for v5.3 2019-08-06 12:28:28 +02:00
sparc
spi
synth
usb ALSA: usb-audio: Fix a stack buffer overflow bug in check_input_term 2019-08-15 21:48:52 +02:00
x86
xen ASoC: Updates for v5.3 2019-07-08 14:45:34 +02:00
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c sound: fix a memory leak bug 2019-08-08 08:18:32 +02:00