Update of /cvsroot/alsa/alsa-kernel/isa/wavefront
In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv18993

Modified Files:
        wavefront_synth.c 
Log Message:
fix possible buffer overflow in wavefront_download_firmware()

Index: wavefront_synth.c
===================================================================
RCS file: /cvsroot/alsa/alsa-kernel/isa/wavefront/wavefront_synth.c,v
retrieving revision 1.17
retrieving revision 1.18
diff -u -r1.17 -r1.18
--- wavefront_synth.c   24 May 2004 13:25:30 -0000      1.17
+++ wavefront_synth.c   25 May 2004 12:10:48 -0000      1.18
@@ -1965,6 +1965,12 @@
                        break;
                }
 
+               if (section_length < 0 || section_length > WF_SECTION_MAX) {
+                       snd_printk ("invalid firmware section length %d\n",
+                                   section_length);
+                       goto failure;
+               }
+
                if (sys_read (fd, section, section_length) != section_length) {
                        snd_printk ("firmware section "
                                "read error.\n");



-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. 
Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Alsa-cvslog mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/alsa-cvslog

Reply via email to