Update of /cvsroot/alsa/alsa-kernel/isa/wavefront In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv18993
Modified Files: wavefront_synth.c Log Message: fix possible buffer overflow in wavefront_download_firmware() Index: wavefront_synth.c =================================================================== RCS file: /cvsroot/alsa/alsa-kernel/isa/wavefront/wavefront_synth.c,v retrieving revision 1.17 retrieving revision 1.18 diff -u -r1.17 -r1.18 --- wavefront_synth.c 24 May 2004 13:25:30 -0000 1.17 +++ wavefront_synth.c 25 May 2004 12:10:48 -0000 1.18 @@ -1965,6 +1965,12 @@ break; } + if (section_length < 0 || section_length > WF_SECTION_MAX) { + snd_printk ("invalid firmware section length %d\n", + section_length); + goto failure; + } + if (sys_read (fd, section, section_length) != section_length) { snd_printk ("firmware section " "read error.\n"); ------------------------------------------------------- This SF.Net email is sponsored by: Oracle 10g Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE. http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click _______________________________________________ Alsa-cvslog mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/alsa-cvslog