DivestOS/Patches/Linux_CVEs/CVE-2017-7369/3.18/1.patch

51 lines
1.4 KiB
Diff
Raw Normal View History

2017-10-29 14:23:02 -04:00
From ae8f1d5f60644983aba7fbab469d0e542a187c6e Mon Sep 17 00:00:00 2001
From: Walter Yang <yandongy@codeaurora.org>
Date: Thu, 2 Mar 2017 12:13:34 +0800
Subject: ASoC: Add backend user count checking
Add backend user count checking to protect the index
boundary.
Change-Id: Ic1b61d1f7130252cc54da0b16553858714988dbd
CRs-Fixed: 2009216
Signed-off-by: Walter Yang <yandongy@codeaurora.org>
---
sound/soc/soc-compress.c | 5 +++++
sound/soc/soc-pcm.c | 4 ++++
2 files changed, 9 insertions(+)
diff --git a/sound/soc/soc-compress.c b/sound/soc/soc-compress.c
2017-10-29 14:23:02 -04:00
index 832f221f..a56e2e5 100644
--- a/sound/soc/soc-compress.c
+++ b/sound/soc/soc-compress.c
2017-10-29 14:23:02 -04:00
@@ -533,6 +533,11 @@ static int soc_compr_set_params_fe(struct snd_compr_stream *cstream,
cstream, &async_domain);
} else {
be_list[j++] = be;
+ if (j == DPCM_MAX_BE_USERS) {
+ dev_dbg(fe->dev,
+ "ASoC: MAX backend users!\n");
+ break;
+ }
}
}
for (i = 0; i < j; i++) {
diff --git a/sound/soc/soc-pcm.c b/sound/soc/soc-pcm.c
2017-10-29 14:23:02 -04:00
index 6c44757..e6de6ad 100644
--- a/sound/soc/soc-pcm.c
+++ b/sound/soc/soc-pcm.c
2017-10-29 14:23:02 -04:00
@@ -2320,6 +2320,10 @@ void dpcm_be_dai_prepare_async(struct snd_soc_pcm_runtime *fe, int stream,
dpcm, domain);
} else {
dpcm_async[i++] = dpcm;
+ if (i == DPCM_MAX_BE_USERS) {
+ dev_dbg(fe->dev, "ASoC: MAX backend users!\n");
+ break;
+ }
}
}
--
cgit v1.1