Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 92410027 authored by Linux Build Service Account's avatar Linux Build Service Account Committed by Gerrit - the friendly Code Review server
Browse files

Merge "ALSA: info: Check for integer overflow in snd_info_entry_write()"

parents 0b34e680 0b4b8d7e

sound/core/info.c

+3 −1
Original line number Diff line number Diff line
@@ -253,6 +253,7 @@ static ssize_t snd_info_entry_write(struct file *file, const char __user *buffer 
	struct snd_info_buffer *buf;

	ssize_t size = 0;

	loff_t pos;

	unsigned long realloc_size;



	data = file->private_data;

	if (snd_BUG_ON(!data))
@@ -261,7 +262,8 @@ static ssize_t snd_info_entry_write(struct file *file, const char __user *buffer 
	pos = *offset;

	if (pos < 0 || (long) pos != pos || (ssize_t) count < 0)

		return -EIO;

	if ((unsigned long) pos + (unsigned long) count < (unsigned long) pos)

	realloc_size = (unsigned long) pos + (unsigned long) count;

	if (realloc_size < (unsigned long) pos || realloc_size > UINT_MAX)

		return -EIO;

	switch (entry->content) {

	case SNDRV_INFO_CONTENT_TEXT: