ASoC: max98390: Fix potential crash during param fw loading
authorSteve Lee <steves.lee@maximintegrated.com>
Thu, 4 Jun 2020 05:47:31 +0000 (14:47 +0900)
committerMark Brown <broonie@kernel.org>
Thu, 4 Jun 2020 14:04:30 +0000 (15:04 +0100)
commit97ed3e509ee6d098730d137759c627a8d674cf55
tree7882c3fd83288bd028efc71061439ddf7d3060e3
parent678916ec54f38406032462dc466fd36cdfea4e3c
ASoC: max98390: Fix potential crash during param fw loading

 malformed firmware file can cause out-of-bound access and crash
 during dsm_param bin loading.
  - add MIN/MAX param size to avoid out-of-bound access.
  - read start addr and size of param and check bound.
  - add condition that fw->size > param_size + _PAYLOAD_OFFSET
    to confirm enough data.

Signed-off-by: Steve Lee <steves.lee@maximintegrated.com>
Link: https://lore.kernel.org/r/20200604054731.21140-1-steves.lee@maximintegrated.com
Signed-off-by: Mark Brown <broonie@kernel.org>
sound/soc/codecs/max98390.c
sound/soc/codecs/max98390.h