summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDan Carpenter <dan.carpenter@oracle.com>2013-06-26 10:52:20 +0300
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>2014-04-14 06:44:30 -0700
commitc97105259b2691d182e53c854d9024e3740e75db (patch)
treecdb7306885e238658b3eac8ebf07ca1e9e5cf52e
parent775a5ddce6018428fd8143d519b9114a86fa4b60 (diff)
downloadlwn-c97105259b2691d182e53c854d9024e3740e75db.tar.gz
lwn-c97105259b2691d182e53c854d9024e3740e75db.zip
ALSA: ak4xx-adda: info leak in ak4xxx_capture_source_info()
commit bd5fe738e388ceaa32e5171481e0d3ec59f0ccfe upstream. "idx" is controled by the user and can be a negative offset into the input_names[] array. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Ben Hutchings <ben@decadent.org.uk> Cc: Weng Meiling <wengmeiling.weng@huawei.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
-rw-r--r--sound/i2c/other/ak4xxx-adda.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/sound/i2c/other/ak4xxx-adda.c b/sound/i2c/other/ak4xxx-adda.c
index cef813d23641..ed726d1569e8 100644
--- a/sound/i2c/other/ak4xxx-adda.c
+++ b/sound/i2c/other/ak4xxx-adda.c
@@ -571,7 +571,7 @@ static int ak4xxx_capture_source_info(struct snd_kcontrol *kcontrol,
struct snd_akm4xxx *ak = snd_kcontrol_chip(kcontrol);
int mixer_ch = AK_GET_SHIFT(kcontrol->private_value);
const char **input_names;
- int num_names, idx;
+ unsigned int num_names, idx;
num_names = ak4xxx_capture_num_inputs(ak, mixer_ch);
if (!num_names)