Fabio M. De Francesco 2f7a26abb8 ALSA: pcm: Test for "silence" field in struct "pcm_format_data" ... Syzbot reports "KASAN: null-ptr-deref Write in snd_pcm_format_set_silence".[1] It is due to missing validation of the "silence" field of struct "pcm_format_data" in "pcm_formats" array. Add a test for valid "pat" and, if it is not so, return -EINVAL. [1] https://lore.kernel.org/lkml/000000000000d188ef05dc2c7279@google.com/ Reported-and-tested-by: syzbot+205eb15961852c2c5974@syzkaller.appspotmail.com Signed-off-by: Fabio M. De Francesco <fmdefrancesco@gmail.com> Cc: <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20220409012655.9399-1-fmdefrancesco@gmail.com Signed-off-by: Takashi Iwai <tiwai@suse.de>		2022-04-11 09:27:56 +02:00
..
oss	Merge branch 'for-next' into for-linus	2022-03-21 16:18:34 +01:00
seq	ALSA: seq: oss: fix typo	2022-03-14 07:51:22 +01:00
compress_offload.c	ALSA: compress: Initialize mutex in snd_compress_new()	2021-07-15 10:22:38 +02:00
control.c	ALSA: control: Minor optimization for SNDRV_CTL_IOCTL_POWER_STATE	2021-05-25 08:49:06 +02:00
control_compat.c	ALSA: ctl: Fix copy of updated id with element read/write	2021-12-02 16:41:07 +01:00
control_led.c	ALSA: led: Use restricted type for iface assignment	2021-11-23 18:12:05 +01:00
ctljack.c	ALSA: Convert strlcpy to strscpy when return value is unused	2021-01-08 09:30:05 +01:00
device.c	ALSA: core: Add snd_device_get_state() helper	2020-03-23 18:09:19 +01:00
hrtimer.c	ALSA: timer: Replace tasklet with work	2020-09-09 18:32:52 +02:00
hwdep.c	ALSA: core: Fix assignment in if condition	2021-06-09 17:30:22 +02:00
hwdep_compat.c	ALSA: compat_ioctl: avoid compat_alloc_user_space	2020-09-21 10:37:07 +02:00
info.c	proc: remove PDE_DATA() completely	2022-01-22 08:33:37 +02:00
info_oss.c	ALSA: oss: remove useless NULL check before kfree	2021-12-06 10:08:13 +01:00
init.c	ALSA: core: Simplify snd_power_ref_and_wait() with the standard macro	2022-01-19 17:26:04 +01:00
isadma.c	ALSA: core: Add device-managed request_dma()	2021-07-19 16:16:34 +02:00
jack.c	Merge branch 'for-next' into for-linus	2022-01-05 15:38:34 +01:00
Kconfig	ALSA: core: Fix typo in 'PCM Timer Interface' help	2022-03-18 09:19:37 +01:00
Makefile	ALSA: memalloc: Unify x86 SG-buffer handling (take#3)	2021-11-16 08:34:29 +01:00
memalloc.c	ALSA: memalloc: invalidate SG pages before sync	2022-02-10 13:36:53 +01:00
memalloc_local.h	ALSA: memalloc: Support for non-contiguous page allocation	2021-10-18 13:32:10 +02:00
memory.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 156	2019-05-30 11:26:35 -07:00
misc.c	ALSA: core: Fix SSID quirk lookup for subvendor=0	2022-01-17 09:59:32 +01:00
pcm.c	ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock	2022-03-30 14:29:49 +02:00
pcm_compat.c	ALSA: memalloc: Support for non-contiguous page allocation	2021-10-18 13:32:10 +02:00
pcm_dmaengine.c	ASoC: dai_dma: remove slave_id field	2021-12-17 11:23:56 +05:30
pcm_drm_eld.c	treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500	2019-06-19 17:09:55 +02:00
pcm_iec958.c	ALSA: iec958: Split status creation and fill	2021-06-08 17:05:41 +02:00
pcm_lib.c	ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock	2022-03-30 14:29:49 +02:00
pcm_local.h	ALSA: memalloc: Support for non-contiguous page allocation	2021-10-18 13:32:10 +02:00
pcm_memory.c	ALSA: pcm: Fix races among concurrent prealloc proc writes	2022-03-22 20:56:58 +01:00
pcm_misc.c	ALSA: pcm: Test for "silence" field in struct "pcm_format_data"	2022-04-11 09:27:56 +02:00
pcm_native.c	ALSA: pcm: Fix potential AB/BA lock with buffer_mutex and mmap_lock	2022-03-30 14:29:49 +02:00
pcm_param_trace.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
pcm_timer.c	ALSA: timer: Constify snd_timer_hardware definitions	2020-01-03 09:24:07 +01:00
pcm_trace.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
rawmidi.c	ALSA: rawmidi - fix the uninitalized user_pversion	2021-12-22 20:18:27 +01:00
rawmidi_compat.c	ALSA: rawmidi: Add framing mode	2021-05-17 16:02:44 +02:00
seq_device.c	ALSA: seq: Fix a potential UAF by wrong private_free call order	2021-09-30 14:13:22 +02:00
sound.c	ALSA: core: Fix assignment in if condition	2021-06-09 17:30:22 +02:00
sound_oss.c	ALSA: core: Fix assignment in if condition	2021-06-09 17:30:22 +02:00
timer.c	ALSA: timer: Unconditionally unlink slave instances, too	2021-11-05 11:27:27 +01:00
timer_compat.c	ALSA: Convert strlcpy to strscpy when return value is unused	2021-01-08 09:30:05 +01:00
vmaster.c	ALSA: Replace the word "slave" in vmaster API	2020-07-20 10:10:47 +02:00