]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ALSA: wavefront: Fix integer overflow in sample size validation
authorJunrui Luo <moonafterrain@outlook.com>
Tue, 16 Dec 2025 11:59:20 +0000 (06:59 -0500)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 19 Jan 2026 12:12:02 +0000 (13:12 +0100)
commit488bf86d60077f52810c60dbdf7468c277880167
tree6f9fd3a736ccf7d308a3fe0ccba73d52c2136c1e
parent5f274246e2cdeda98e95afc3e0b2f0af1e2e182a
ALSA: wavefront: Fix integer overflow in sample size validation

[ Upstream commit 0c4a13ba88594fd4a27292853e736c6b4349823d ]

The wavefront_send_sample() function has an integer overflow issue
when validating sample size. The header->size field is u32 but gets
cast to int for comparison with dev->freemem

Fix by using unsigned comparison to avoid integer overflow.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Cc: stable@vger.kernel.org
Signed-off-by: Junrui Luo <moonafterrain@outlook.com>
Link: https://patch.msgid.link/SYBPR01MB7881B47789D1B060CE8BF4C3AFC2A@SYBPR01MB7881.ausprd01.prod.outlook.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
[ Adjust context ]
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
sound/isa/wavefront/wavefront_synth.c