evie/android_kernel_oneplus_msm8998
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

ASoC: wcd9335: Fix out of bounds for mad input value

Browse source 
Add check in tasha_mad_input_put function to
return error on out of bounds access using
mad input value.

CRs-fixed: 1096799
Change-Id: Iddaa3fef362f7cb1919aa3bd8dd4b83133fe7c97
Signed-off-by: Karthikeyan Mani <kmani@codeaurora.org>
This commit is contained in:
Karthikeyan Mani 2016-12-14 11:46:35 -08:00
parent 3c45c2a8a2
commit 26b68f7558
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
sound/soc/codecs/wcd9335.c
View file

@ -7931,6 +7931,13 @@ static int tasha_mad_input_put(struct snd_kcontrol *kcontrol,
tasha_mad_input = ucontrol->value.integer.value[0]; tasha_mad_input = ucontrol->value.integer.value[0];
if (tasha_mad_input >= ARRAY_SIZE(tasha_conn_mad_text)) {
dev_err(codec->dev,
"%s: tasha_mad_input = %d out of bounds\n",
__func__, tasha_mad_input);
return -EINVAL;
}
if (!strcmp(tasha_conn_mad_text[tasha_mad_input], "NOTUSED1") || if (!strcmp(tasha_conn_mad_text[tasha_mad_input], "NOTUSED1") ||
!strcmp(tasha_conn_mad_text[tasha_mad_input], "NOTUSED2") || !strcmp(tasha_conn_mad_text[tasha_mad_input], "NOTUSED2") ||
!strcmp(tasha_conn_mad_text[tasha_mad_input], "NOTUSED3") || !strcmp(tasha_conn_mad_text[tasha_mad_input], "NOTUSED3") ||