linux/sound/oss
Dan Carpenter 57220bc1f5 sound: sequencer: cap array index in seq_chn_common_event()
"chn" here is a number between 0 and 255, but ->chn_info[] only has
16 elements so there is a potential write beyond the end of the
array.

If the seq_mode isn't SEQ_2 then we let the individual drivers
(either opl3.c or midi_synth.c) handle it.  Those functions all
do a bounds check on "chn" so I haven't changed anything here.
The opl3.c driver has up to 18 channels and not 16.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
2013-03-15 07:45:20 +01:00
..
dmasound Fix common misspellings 2011-03-31 11:26:23 -03:00
.gitignore oss: remove maui_boot.h from .gitignore and dontdiff 2012-09-01 08:36:09 -07:00
ad1848_mixer.h
ad1848.c sound: oss: remove __dev* attributes 2012-12-07 07:30:49 +01:00
ad1848.h
aedsp16.c
audio.c sound: Remove unnecessary semicolon 2012-10-06 16:47:53 +02:00
bin2hex.c
CHANGELOG
coproc.h
dev_table.c
dev_table.h sound/oss: remove offset from load_patch callbacks 2011-03-23 22:47:46 +01:00
dmabuf.c
hex2hex.c
kahlua.c sound: oss: remove __dev* attributes 2012-12-07 07:30:49 +01:00
Kconfig sound: Kconfig: drop unknown symbol ARCH_CLPS7500 2011-11-22 23:28:23 +01:00
Makefile SOUND: OSS: Remove Au1550 driver. 2011-05-20 11:33:39 +02:00
midi_ctrl.h
midi_synth.c sound/oss: remove offset from load_patch callbacks 2011-03-23 22:47:46 +01:00
midi_synth.h sound/oss: remove offset from load_patch callbacks 2011-03-23 22:47:46 +01:00
midibuf.c Fix common misspellings 2011-03-31 11:26:23 -03:00
mpu401.c
mpu401.h
msnd_classic.c
msnd_classic.h
msnd_pinnacle.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
msnd_pinnacle.h
msnd.c
msnd.h
opl3_hw.h
opl3.c sound: Remove unnecessary semicolon 2012-10-06 16:47:53 +02:00
os.h Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
pas2_card.c sound: oss/pas2: Fix possible access out of array 2013-01-04 10:38:27 +01:00
pas2_midi.c
pas2_mixer.c
pas2_pcm.c sound: oss/pas2: Remove CLOCK_TICK_RATE dependency from PAS16 driver 2011-08-04 15:23:32 +02:00
pas2.h
pss.c sound: Remove unnecessary semicolon 2012-10-06 16:47:53 +02:00
README.FIRST
sb_audio.c sound: oss/sb_audio: cap value in sb201_audio_set_speed() 2012-11-18 10:24:49 +01:00
sb_card.c Fix common misspellings 2011-03-31 11:26:23 -03:00
sb_card.h
sb_common.c
sb_ess.c sound: Remove unnecessary semicolon 2012-10-06 16:47:53 +02:00
sb_ess.h
sb_midi.c
sb_mixer.c sound: Remove unnecessary semicolon 2012-10-06 16:47:53 +02:00
sb_mixer.h
sb.h
sequencer.c sound: sequencer: cap array index in seq_chn_common_event() 2013-03-15 07:45:20 +01:00
sound_calls.h
sound_config.h
sound_firmware.h
sound_timer.c sound: oss: use strlcpy() in sound_timer_init() 2011-09-29 08:12:33 +02:00
soundcard.c new helper: file_inode(file) 2013-02-22 23:31:31 -05:00
soundvers.h
swarm_cs4297a.c sound: swarm_cs4297: Provide definitions for AC97 registers 2012-06-20 08:38:27 +02:00
sys_timer.c sound: Remove unnecessary semicolon 2012-10-06 16:47:53 +02:00
trix.c ALSA: module_param: make bool parameters really bool 2011-12-19 10:34:41 +01:00
tuning.h
uart401.c
uart6850.c sound: Remove unnecessary semicolon 2012-10-06 16:47:53 +02:00
ulaw.h
v_midi.c
v_midi.h
vidc_fill.S
vidc.c Remove all #inclusions of asm/system.h 2012-03-28 18:30:03 +01:00
vidc.h
vwsnd.c Fix comment typo multipy -> multiply 2012-06-03 12:04:08 +02:00
waveartist.c ARM: footbridge: nw_gpio_lock is raw_spin_lock 2012-10-07 10:33:12 +02:00
waveartist.h

The modular sound driver patches were funded by Red Hat Software 
(www.redhat.com). The sound driver here is thus a modified version of 
Hannu's code. Please bear that in mind when considering the appropriate
forums for bug reporting. 

Alan Cox