]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
ALSA: off by one bug in snd_riptide_joystick_probe()
authorDan Carpenter <dan.carpenter@oracle.com>
Mon, 9 Feb 2015 13:51:40 +0000 (16:51 +0300)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 6 Mar 2015 22:52:49 +0000 (14:52 -0800)
commit72753a3d9c7517c837c7852f9f889fc732b9a93e
tree481a49f94171e5e8104a8273c35b5979b2be4514
parent74945cb5fd143e0f3bfefbb4b53f802b38a5b78d
ALSA: off by one bug in snd_riptide_joystick_probe()

commit e4940626defdf6c92da1052ad3f12741c1a28c90 upstream.

The problem here is that we check:

if (dev >= SNDRV_CARDS)

Then we increment "dev".

       if (!joystick_port[dev++])

Then we use it as an offset into a array with SNDRV_CARDS elements.

if (!request_region(joystick_port[dev], 8, "Riptide gameport")) {

This has 3 effects:
1) If you use the module option to specify the joystick port then it has
   to be shifted one space over.
2) The wrong error message will be printed on failure if you have over
   32 cards.
3) Static checkers will correctly complain that are off by one.

Fixes: db1005ec6ff8 ('ALSA: riptide - Fix joystick resource handling')
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
sound/pci/riptide/riptide.c