Home
last modified time | relevance | path

Searched hist:"97 ed3e509ee6d098730d137759c627a8d674cf55" (Results 1 – 2 of 2) sorted by relevance

/linux/sound/soc/codecs/
H A Dmax98390.hdiff 97ed3e509ee6d098730d137759c627a8d674cf55 Thu Jun 04 07:47:31 CEST 2020 Steve Lee <steves.lee@maximintegrated.com> ASoC: max98390: Fix potential crash during param fw loading

malformed firmware file can cause out-of-bound access and crash
during dsm_param bin loading.
- add MIN/MAX param size to avoid out-of-bound access.
- read start addr and size of param and check bound.
- add condition that fw->size > param_size + _PAYLOAD_OFFSET
to confirm enough data.

Signed-off-by: Steve Lee <steves.lee@maximintegrated.com>
Link: https://lore.kernel.org/r/20200604054731.21140-1-steves.lee@maximintegrated.com
Signed-off-by: Mark Brown <broonie@kernel.org>
H A Dmax98390.cdiff 97ed3e509ee6d098730d137759c627a8d674cf55 Thu Jun 04 07:47:31 CEST 2020 Steve Lee <steves.lee@maximintegrated.com> ASoC: max98390: Fix potential crash during param fw loading

malformed firmware file can cause out-of-bound access and crash
during dsm_param bin loading.
- add MIN/MAX param size to avoid out-of-bound access.
- read start addr and size of param and check bound.
- add condition that fw->size > param_size + _PAYLOAD_OFFSET
to confirm enough data.

Signed-off-by: Steve Lee <steves.lee@maximintegrated.com>
Link: https://lore.kernel.org/r/20200604054731.21140-1-steves.lee@maximintegrated.com
Signed-off-by: Mark Brown <broonie@kernel.org>