]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]
authorDenis Rastyogin <gerben@altlinux.org>
Fri, 27 Mar 2026 10:33:11 +0000 (13:33 +0300)
committerMark Brown <broonie@kernel.org>
Fri, 3 Apr 2026 12:37:20 +0000 (13:37 +0100)
commitf9e437cddf6cf9e603bdaefe148c1f4792aaf39c
tree973c320f055499c5548255899fdcddd8437542d0
parent0178e64123129f56fc153b9d53121318fd71bdfc
ASoC: rsnd: Fix potential out-of-bounds access of component_dais[]

component_dais[RSND_MAX_COMPONENT] is initially zero-initialized
and later populated in rsnd_dai_of_node(). However, the existing boundary check:
  if (i >= RSND_MAX_COMPONENT)

does not guarantee that the last valid element remains zero. As a result,
the loop can rely on component_dais[RSND_MAX_COMPONENT] being zero,
which may lead to an out-of-bounds access.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Fixes: 547b02f74e4a ("ASoC: rsnd: enable multi Component support for Audio Graph Card/Card2")
Signed-off-by: Denis Rastyogin <gerben@altlinux.org>
Acked-by: Kuninori Morimoto <kuninori.morimoto.gx@renesas.com>
Link: https://patch.msgid.link/20260327103311.459239-1-gerben@altlinux.org
Signed-off-by: Mark Brown <broonie@kernel.org>
sound/soc/renesas/rcar/core.c