mirror of
https://github.com/torvalds/linux.git
synced 2026-05-30 10:04:04 +02:00
component_dais[RSND_MAX_COMPONENT] is initially zero-initialized
and later populated in rsnd_dai_of_node(). However, the existing boundary check:
if (i >= RSND_MAX_COMPONENT)
does not guarantee that the last valid element remains zero. As a result,
the loop can rely on component_dais[RSND_MAX_COMPONENT] being zero,
which may lead to an out-of-bounds access.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes:
|
||
|---|---|---|
| .. | ||
| rcar | ||
| dma-sh7760.c | ||
| fsi.c | ||
| hac.c | ||
| Kconfig | ||
| Makefile | ||
| migor.c | ||
| rz-ssi.c | ||
| sh7760-ac97.c | ||
| siu_dai.c | ||
| siu_pcm.c | ||
| siu.h | ||
| ssi.c | ||