mirror of
https://github.com/torvalds/linux.git
synced 2026-05-30 18:13:41 +02:00
component_dais[RSND_MAX_COMPONENT] is initially zero-initialized
and later populated in rsnd_dai_of_node(). However, the existing boundary check:
if (i >= RSND_MAX_COMPONENT)
does not guarantee that the last valid element remains zero. As a result,
the loop can rely on component_dais[RSND_MAX_COMPONENT] being zero,
which may lead to an out-of-bounds access.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
Fixes:
|
||
|---|---|---|
| .. | ||
| adg.c | ||
| cmd.c | ||
| core.c | ||
| ctu.c | ||
| debugfs.c | ||
| dma.c | ||
| dvc.c | ||
| gen.c | ||
| Makefile | ||
| mix.c | ||
| msiof.c | ||
| rsnd.h | ||
| src.c | ||
| ssi.c | ||
| ssiu.c | ||