| commit | f4351a199cc120ff9d59e06d02e8657d08e6cc46 | [log] [tgz] |
|---|---|---|
| author | Takashi Iwai <tiwai@suse.de> | Wed Dec 19 12:36:27 2018 +0100 |
| committer | Takashi Iwai <tiwai@suse.de> | Mon Jan 07 10:46:26 2019 +0100 |
| tree | b3d38fbd367555c5a905dc37954a4af73dd74bf6 | |
| parent | bfeffd155283772bbe78c6a05dec7c0128ee500c [diff] |
ALSA: usb-audio: Avoid access before bLength check in build_audio_procunit() The parser for the processing unit reads bNrInPins field before the bLength sanity check, which may lead to an out-of-bound access when a malformed descriptor is given. Fix it by assignment after the bLength check. Cc: <stable@vger.kernel.org> Signed-off-by: Takashi Iwai <tiwai@suse.de>