5.15-stable patches

added patches:
	alsa-usb-audio-fix-possible-null-pointer-dereference-in-snd_usb_pcm_has_fixed_rate.patch

diff --git a/queue-5.15/alsa-usb-audio-fix-possible-null-pointer-dereference-in-snd_usb_pcm_has_fixed_rate.patch b/queue-5.15/alsa-usb-audio-fix-possible-null-pointer-dereference-in-snd_usb_pcm_has_fixed_rate.patch
new file mode 100644 (file)
index 0000000..a717533
--- /dev/null
+++ b/queue-5.15/alsa-usb-audio-fix-possible-null-pointer-dereference-in-snd_usb_pcm_has_fixed_rate.patch
@@ -0,0 +1,40 @@
+From 92a9c0ad86d47ff4cce899012e355c400f02cfb8 Mon Sep 17 00:00:00 2001
+From: Jaroslav Kysela <perex@perex.cz>
+Date: Fri, 13 Jan 2023 09:53:11 +0100
+Subject: ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate()
+
+From: Jaroslav Kysela <perex@perex.cz>
+
+commit 92a9c0ad86d47ff4cce899012e355c400f02cfb8 upstream.
+
+The subs function argument may be NULL, so do not use it before the NULL check.
+
+Fixes: 291e9da91403 ("ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format()")
+Reported-by: coverity-bot <keescook@chromium.org>
+Link: https://lore.kernel.org/alsa-devel/202301121424.4A79A485@keescook/
+Signed-off-by: Jaroslav Kysela <perex@perex.cz>
+Link: https://lore.kernel.org/r/20230113085311.623325-1-perex@perex.cz
+Signed-off-by: Takashi Iwai <tiwai@suse.de>
+Signed-off-by: Sasha Levin <sashal@kernel.org>
+Signed-off-by: Harshvardhan Jha <harshvardhan.j.jha@oracle.com>
+Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
+---
+ sound/usb/pcm.c |    3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+--- a/sound/usb/pcm.c
++++ b/sound/usb/pcm.c
+@@ -160,11 +160,12 @@ find_substream_format(struct snd_usb_sub
+ bool snd_usb_pcm_has_fixed_rate(struct snd_usb_substream *subs)
+ {
+       const struct audioformat *fp;
+-      struct snd_usb_audio *chip = subs->stream->chip;
++      struct snd_usb_audio *chip;
+       int rate = -1;
+ 
+       if (!subs)
+               return false;
++      chip = subs->stream->chip;
+       if (!(chip->quirk_flags & QUIRK_FLAG_FIXED_RATE))
+               return false;
+       list_for_each_entry(fp, &subs->fmt_list, list) {

diff --git a/queue-5.15/series b/queue-5.15/series
index 5200611264d123e8b8ef59aa67c4c50462ebca6f..f2edb1aa89698b058794b9f205f16af4cd9f4dd3 100644 (file)
--- a/queue-5.15/series
+++ b/queue-5.15/series
@@ -589,3 +589,4 @@ ext4-fix-inode-tree-inconsistency-caused-by-enomem.patch
 vhost-scsi-null-ptr-dereference-in-vhost_scsi_get_req.patch
 perf-report-fix-segfault-when-sym-sort-key-is-not-used.patch
 clk-imx6ul-fix-failed-to-get-parent-error.patch
+alsa-usb-audio-fix-possible-null-pointer-dereference-in-snd_usb_pcm_has_fixed_rate.patch