ALSA: isa/wavefront: prevent out of bounds write in ioctl
authorDan Carpenter <dan.carpenter@oracle.com>
Fri, 1 May 2020 09:40:11 +0000 (12:40 +0300)
committerTakashi Iwai <tiwai@suse.de>
Fri, 1 May 2020 10:25:49 +0000 (12:25 +0200)
commit7f0d5053c5a9d23fe5c2d337495a9d79038d267b
tree33deaf6b3ec97c70419f47bc3fcece72baf0747f
parent0127f59794b39debf2daf3c7ff755236630198ed
ALSA: isa/wavefront: prevent out of bounds write in ioctl

The "header->number" comes from the ioctl and it needs to be clamped to
prevent out of bounds writes.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20200501094011.GA960082@mwanda
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/isa/wavefront/wavefront_synth.c