Skip to content

Commit a892b70

Browse files
perexgtiwai
authored andcommitted
ALSA: pcm: Fix id copying in snd_pcm_set_sync_per_card()
Avoid to use strncpy and do proper length limiting (12 bytes) to avoid out of array access. Fixes: d712c58 ("ALSA: pcm: optimize and clarify stream synchronization ID API") Reported-by: kernel test robot <lkp@intel.com> Closes: https://lore.kernel.org/oe-kbuild-all/202407050501.o5Z3bibi-lkp@intel.com/ Signed-off-by: Jaroslav Kysela <perex@perex.cz> Link: https://patch.msgid.link/20240705075828.19746-1-perex@perex.cz Signed-off-by: Takashi Iwai <tiwai@suse.de>
1 parent bc7540b commit a892b70

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

sound/core/pcm_lib.c

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -543,8 +543,8 @@ void snd_pcm_set_sync_per_card(struct snd_pcm_substream *substream,
543543
const unsigned char *id, unsigned int len)
544544
{
545545
*(__u32 *)params->sync = cpu_to_le32(substream->pcm->card->number);
546-
len = max(12, len);
547-
strncpy(params->sync + 4, id, len);
546+
len = min(12, len);
547+
memcpy(params->sync + 4, id, len);
548548
memset(params->sync + 4 + len, 0, 12 - len);
549549
}
550550
EXPORT_SYMBOL_GPL(snd_pcm_set_sync_per_card);

0 commit comments

Comments
 (0)