linux-next/sound
Benoît Sevens b909df18ce ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices
A bogus device can provide a bNumConfigurations value that exceeds the
initial value used in usb_get_configuration for allocating dev->config.

This can lead to out-of-bounds accesses later, e.g. in
usb_destroy_configuration.

Signed-off-by: Benoît Sevens <bsevens@google.com>
Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Cc: stable@kernel.org
Link: https://patch.msgid.link/20241120124144.3814457-1-bsevens@google.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
2024-11-20 14:18:37 +01:00
..
ac97 ALSA: ac97: bus: Fix the mistake in the comment 2024-11-20 12:42:01 +01:00
aoa
arm sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
atmel sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
core ALSA: ump: Fix the wrong format specifier 2024-11-14 14:38:40 +01:00
drivers sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
firewire Merge branch 'for-linus' into for-next 2024-11-05 13:03:12 +01:00
hda ASoC: Fixes for v6.12 2024-10-30 14:46:35 +01:00
i2c
isa
mips sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
oss sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
parisc
pci ALSA: hda/realtek: Update ALC256 depop procedure 2024-11-20 12:42:53 +01:00
pcmcia
ppc sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
sh sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
soc ASoC: hdmi-codec: reorder channel allocation list 2024-11-15 13:43:00 +00:00
sparc sound: Switch back to struct platform_driver::remove() 2024-10-30 14:47:59 +01:00
spi
synth
usb ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devices 2024-11-20 14:18:37 +01:00
virtio
x86
xen
ac97_bus.c
Kconfig sound: Make CONFIG_SND depend on INDIRECT_IOMEM instead of UML 2024-10-10 16:11:18 +02:00
last.c
Makefile
sound_core.c