CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2026/11/13 00:08:30
Modified files:
sys/dev : audio.c
Log message:
audio: Check the AUDIO_MIXER_* ioctl's index for negative values
While most drivers check their input (ex. azalia, uaudio, cmpci, envy
do), a driver like utvfu(4) may allow the AUDIO_MIXER_WRITE ioctl to
trigger an out-of-bounds heap write. This fix ensures that any
present or future low-level audio driver gets an index in its
supported range.
Report and proposed fix by Franz Bettag <[email protected]>. Thanks!
