linux/sound/soc/renesas
Denis Rastyogin f9e437cddf
ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]
component_dais[RSND_MAX_COMPONENT] is initially zero-initialized
and later populated in rsnd_dai_of_node(). However, the existing boundary check:
  if (i >= RSND_MAX_COMPONENT)

does not guarantee that the last valid element remains zero. As a result,
the loop can rely on component_dais[RSND_MAX_COMPONENT] being zero,
which may lead to an out-of-bounds access.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 547b02f74e ("ASoC: rsnd: enable multi Component support for Audio Graph Card/Card2")
Signed-off-by: Denis Rastyogin <gerben@altlinux.org>
Acked-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
Link: https://patch.msgid.link/20260327103311.459239-1-gerben@altlinux.org
Signed-off-by: Mark Brown <broonie@kernel.org>
2026-04-03 13:37:20 +01:00
..
rcar ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] 2026-04-03 13:37:20 +01:00
dma-sh7760.c ASoC: renesas: Fix non-static global variable 2026-03-26 13:06:02 +00:00
fsi.c ASoC: renesas: name back to pcm_new()/pcm_free() 2026-03-16 13:37:58 +00:00
hac.c
Kconfig ASoC: renesas: Standardize ASoC menu 2025-06-24 01:01:35 +01:00
Makefile
migor.c ASoC: sh: migor: use inclusive language for SND_SOC_DAIFMT_CBx_CFx 2025-02-25 13:19:22 +00:00
rz-ssi.c ASoC: renesas: name back to pcm_new()/pcm_free() 2026-03-16 13:37:58 +00:00
sh7760-ac97.c
siu_dai.c Convert 'alloc_obj' family to use the new default GFP_KERNEL argument 2026-02-21 17:09:51 -08:00
siu_pcm.c ASoC: update outdated comments for removed snd_soc_new_pcms() 2026-03-24 19:52:27 +00:00
siu.h
ssi.c