ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
Dan Carpenter authored
[ Upstream commit 158e1886 ]

This is harmless, but the "addr" comes from the user and it could lead
to a negative shift or to shift wrapping if it's too high.

Fixes: 0b00a561

 ("ALSA: hdac_ext: add hdac extended controller")
Signed-off-by: default avatarDan Carpenter <dan.carpenter@oracle.com>
Link: https://lore.kernel.org/r/20201103101807.GC1127762@mwanda

Signed-off-by: default avatarTakashi Iwai <tiwai@suse.de>
Signed-off-by: default avatarSasha Levin <sashal@kernel.org>
f1a6e0d0
Name Last commit Last update
..
aoa ALSA: aoa: onyx: always initialize register read value
arm ASoC: pxa: pxa-pcm-lib: switch over to snd-soc-dmaengine-pcm
atmel ALSA: sound/atmel/ac97c.c: remove unused variable
core ALSA: seq: oss: Avoid mutex lock for a long-time ioctl
drivers ALSA: opl3: fix infoleak in opl3
firewire ALSA: bebob: potential info leak in hwdep_read()
hda ALSA: hda: prevent undefined shift in snd_hdac_ext_bus_get_link()
i2c ALSA: i2c/cs8427: Fix int to char conversion
isa ALSA: isa/wavefront: prevent out of bounds write in ioctl
mips ALSA: mips: let SND_SGI_O2 select SND_PCM
oss sound: oss/sb_audio: use swap() in sb_audio_close()
parisc ALSA: Include linux/io.h instead of asm/io.h
pci ALSA: asihpi: fix iounmap in error handler
pcmcia ALSA: vxpocket: Fix invalid endian conversions
ppc ALSA: ppc/awacs: shut up maybe-uninitialized warning
sh ALSA: sh: Fix compile warning wrt const
soc ASoC: kirkwood: fix IRQ error handling
sparc ALSA: sparc: Fix invalid snd_free_pages() at error path
spi ALSA: spi: Convert to snd_card_new() with a device pointer
synth ALSA: emux: Fix potential Spectre v1 vulnerabilities
usb ALSA: usb-audio: Add implicit feedback quirk for Qu-16
Kconfig ALSA: hda - Make snd_hda_bus_type public
Makefile ALSA: hda - Make snd_hda_bus_type public
ac97_bus.c Merge tag 'asoc-v4.2-rc8' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/sound into for-linus
last.c ALSA: Remove the last mention of SNDRV_MAIN_OBJECT_FILE
sound_core.c sound: fix a memory leak bug
sound_firmware.c sound: sound_firmware: Fix invalid use of vfs_read()