]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
ALSA: ua101: Reject too-short USB descriptors
authorCássio Gabriel <cassiogabrielcontato@gmail.com>
Tue, 19 May 2026 03:32:15 +0000 (00:32 -0300)
committerTakashi Iwai <tiwai@suse.de>
Tue, 19 May 2026 06:08:41 +0000 (08:08 +0200)
commitb59d5c51bb328a60749b4dd5fe7e649bfb4089b4
treea39ed5d8d6614c419c88e36560fd34673d58552f
parent9e5fb6098d21e1f9be9982b46c3e5b8329d4e7d2
ALSA: ua101: Reject too-short USB descriptors

find_format_descriptor() walks the class-specific interface extras by
advancing with bLength. It rejects descriptors that extend past the
remaining buffer, but it does not reject descriptor lengths smaller than
a USB descriptor header.

Reject too-short descriptors before using bLength to advance the local
scan. This keeps the UA-101 parser robust against malformed descriptor
data and matches the usual USB descriptor walking rules.

Fixes: 63978ab3e3e9 ("sound: add Edirol UA-101 support")
Cc: stable@vger.kernel.org
Signed-off-by: Cássio Gabriel <cassiogabrielcontato@gmail.com>
Link: https://patch.msgid.link/20260519-alsa-ua101-desc-len-v1-1-4307d1a5e054@gmail.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/usb/misc/ua101.c