ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits()

Add check of input value's range in fsl_easrc_iec958_put_bits(),
otherwise the wrong value may be written from user space.

Fixes: 955ac624058f ("ASoC: fsl_easrc: Add EASRC ASoC CPU DAI drivers")
Signed-off-by: Shengjiu Wang <shengjiu.wang@nxp.com>
Link: https://patch.msgid.link/20260401094226.2900532-10-shengjiu.wang@nxp.com
Signed-off-by: Mark Brown <broonie@kernel.org>

diff --git a/sound/soc/fsl/fsl_easrc.c b/sound/soc/fsl/fsl_easrc.c
index 6c56134c60cc810ef5ead528dafcf1550f0a349b..6de1e1d3d8dc8de4854df3639ad8efe167615ee9 100644 (file)
--- a/sound/soc/fsl/fsl_easrc.c
+++ b/sound/soc/fsl/fsl_easrc.c
@@ -54,6 +54,9 @@ static int fsl_easrc_iec958_put_bits(struct snd_kcontrol *kcontrol,
        unsigned int regval = ucontrol->value.integer.value[0];
        int ret;
 
+       if (regval < EASRC_WIDTH_16_BIT || regval > EASRC_WIDTH_24_BIT)
+               return -EINVAL;
+
        ret = (easrc_priv->bps_iec958[mc->regbase] != regval);
 
        easrc_priv->bps_iec958[mc->regbase] = regval;