Searched hist:"97 ed3e509ee6d098730d137759c627a8d674cf55" (Results 1 – 2 of 2) sorted by relevance
/linux/sound/soc/codecs/ |
H A D | max98390.h | diff 97ed3e509ee6d098730d137759c627a8d674cf55 Thu Jun 04 07:47:31 CEST 2020 Steve Lee <steves.lee@maximintegrated.com> ASoC: max98390: Fix potential crash during param fw loading
malformed firmware file can cause out-of-bound access and crash during dsm_param bin loading. - add MIN/MAX param size to avoid out-of-bound access. - read start addr and size of param and check bound. - add condition that fw->size > param_size + _PAYLOAD_OFFSET to confirm enough data.
Signed-off-by: Steve Lee <steves.lee@maximintegrated.com> Link: https://lore.kernel.org/r/20200604054731.21140-1-steves.lee@maximintegrated.com Signed-off-by: Mark Brown <broonie@kernel.org>
|
H A D | max98390.c | diff 97ed3e509ee6d098730d137759c627a8d674cf55 Thu Jun 04 07:47:31 CEST 2020 Steve Lee <steves.lee@maximintegrated.com> ASoC: max98390: Fix potential crash during param fw loading
malformed firmware file can cause out-of-bound access and crash during dsm_param bin loading. - add MIN/MAX param size to avoid out-of-bound access. - read start addr and size of param and check bound. - add condition that fw->size > param_size + _PAYLOAD_OFFSET to confirm enough data.
Signed-off-by: Steve Lee <steves.lee@maximintegrated.com> Link: https://lore.kernel.org/r/20200604054731.21140-1-steves.lee@maximintegrated.com Signed-off-by: Mark Brown <broonie@kernel.org>
|