Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 4909a0ca authored by Jiri Slaby's avatar Jiri Slaby Committed by Takashi Iwai
Browse files

ALSA: usb/quirks, fix out-of-bounds access 



bootresponse in snd_usb_mbox2_boot_quirk is only 12 (decimal) u8's
long, but i9s passed to snd_usb_ctl_msg as it would be 0x12 (hexa)
long. Fix that by having proper size of the array, i.e. 0x12.

Signed-off-by: default avatarJiri Slaby <jslaby@suse.cz>
Cc: <stable@vger.kernel.org>
Signed-off-by: default avatarTakashi Iwai <tiwai@suse.de>
parent c881f80b

sound/usb/quirks.c

+1 −1
Original line number Diff line number Diff line
@@ -533,7 +533,7 @@ static int snd_usb_mbox2_boot_quirk(struct usb_device *dev) 
{

	struct usb_host_config *config = dev->actconfig;

	int err;

	u8 bootresponse[12];

	u8 bootresponse[0x12];

	int fwsize;

	int count;