Takashi Iwai 220345e98f ALSA: usb-audio: Fix OOB access of mixer element list ... The USB-audio mixer code holds a linked list of usb_mixer_elem_list, and several operations are performed for each mixer element. A few of them (snd_usb_mixer_notify_id() and snd_usb_mixer_interrupt_v2()) assume each mixer element being a usb_mixer_elem_info object that is a subclass of usb_mixer_elem_list, cast via container_of() and access it members. This may result in an out-of-bound access when a non-standard list element has been added, as spotted by syzkaller recently. This patch adds a new field, is_std_info, in usb_mixer_elem_list to indicate that the element is the usb_mixer_elem_info type or not, and skip the access to such an element if needed. Reported-by: syzbot+fb14314433463ad51625@syzkaller.appspotmail.com Reported-by: syzbot+2405ca3401e943c538b5@syzkaller.appspotmail.com Cc: <stable@vger.kernel.org> Link: https://lore.kernel.org/r/20200624122340.9615-1-tiwai@suse.de Signed-off-by: Takashi Iwai <tiwai@suse.de>		2020-06-24 14:24:29 +02:00
..
6fire	ALSA: usb: Constify snd_kcontrol_new items	2020-01-03 09:24:34 +01:00
bcd2000	ALSA: bcd2000: More constifications	2020-01-05 16:14:49 +01:00
caiaq	ALSA: caiaq: More constifications	2020-01-05 16:14:37 +01:00
hiface	ALSA: usb: Drop superfluous ioctl PCM ops	2019-12-11 07:25:34 +01:00
line6	Merge branch 'for-linus' into for-next	2020-05-28 10:08:50 +02:00
misc	ALSA: usb: Drop superfluous ioctl PCM ops	2019-12-11 07:25:34 +01:00
usx2y	ALSA: Replace zero-length array with flexible-array	2020-05-07 22:30:36 +02:00
card.c	ALSA: usb-audio: Manage auto-pm of all bundled interfaces	2020-06-08 19:34:49 +02:00
card.h	ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback	2020-05-15 19:14:29 +02:00
clock.c	ALSA: usb-audio: Add support for MOTU MicroBook IIc	2020-03-06 09:03:17 +01:00
clock.h	ALSA: usb-audio: Add clock validity quirk for Denon MC7000/MCX8000	2020-02-13 07:18:58 +01:00
debug.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
endpoint.c	ALSA: usb-audio: Add duplex sound support for USB devices using implicit feedback	2020-05-15 19:14:29 +02:00
endpoint.h	ALSA: usb-audio: Improve frames size computation	2020-04-24 08:25:24 +02:00
format.c	ALSA: usb-audio: Set 48 kHz rate for Rodecaster	2020-06-15 08:47:05 +02:00
format.h	ALSA: usb: initial USB Audio Device Class 3.0 support	2018-03-21 11:46:33 +01:00
helper.c	ALSA: usb-audio: Fix gpf in snd_usb_pipe_sanity_check	2019-07-30 12:32:21 +02:00
helper.h	ALSA: usb-audio: More validations of descriptor units	2019-08-22 10:35:59 +02:00
Kconfig	sound: Fix Kconfig indentation	2019-10-07 03:53:03 +02:00
Makefile	ALSA: usb-audio: Add support for Presonus Studio 1810c	2020-02-15 09:46:16 +01:00
media.c	media: sound/usb: Use Media Controller API to share media resources	2019-04-22 11:21:06 -04:00
media.h	media: sound/usb: Use Media Controller API to share media resources	2019-04-22 11:21:06 -04:00
midi.c	ALSA: usb-audio: Fix case when USB MIDI interface has more than one extra endpoint descriptor	2020-03-31 14:34:28 +02:00
midi.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
mixer_maps.c	ALSA: usb-audio: Quirks for Gigabyte TRX40 Aorus Master onboard audio	2020-05-27 08:10:57 +02:00
mixer_quirks.c	ALSA: usb-audio: Fix OOB access of mixer element list	2020-06-24 14:24:29 +02:00
mixer_quirks.h	ALSA: usb-audio: Initialize Dell Dock playback volumes	2018-05-02 16:02:32 +02:00
mixer_s1810c.c	ALSA: usb-audio: Fix missing braces in some struct inits	2020-03-06 10:14:43 +01:00
mixer_s1810c.h	ALSA: usb-audio: Add support for Presonus Studio 1810c	2020-02-15 09:46:16 +01:00
mixer_scarlett_gen2.c	ALSA: usb-audio: Annotate endianess in Scarlett gen2 quirk	2020-02-01 09:06:24 +01:00
mixer_scarlett_gen2.h	ALSA: usb-audio: Scarlett Gen 2 mixer interface	2019-07-28 17:47:48 +02:00
mixer_scarlett.c	ALSA: usb-audio: More constifications	2020-01-05 16:14:34 +01:00
mixer_scarlett.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
mixer_us16x08.c	ALSA: usb: Constify snd_kcontrol_new items	2020-01-03 09:24:34 +01:00
mixer_us16x08.h	ALSA: usb: Constify snd_kcontrol_new items	2020-01-03 09:24:34 +01:00
mixer.c	ALSA: usb-audio: Fix OOB access of mixer element list	2020-06-24 14:24:29 +02:00
mixer.h	ALSA: usb-audio: Fix OOB access of mixer element list	2020-06-24 14:24:29 +02:00
pcm.c	ALSA: usb-audio: Fix potential use-after-free of streams	2020-06-17 10:08:12 +02:00
pcm.h	ALSA: usb-audio: Add UAC3 Power Domains to suspend/resume	2018-07-31 15:01:36 +02:00
power.c	ALSA: usb-audio: More validations of descriptor units	2019-08-22 10:35:59 +02:00
power.h	ALSA: usb-audio: Initial Power Domain support	2018-07-31 15:01:22 +02:00
proc.c	ALSA: usb-audio: Fix a limit check in proc_dump_substream_formats()	2020-04-22 11:29:15 +02:00
proc.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
quirks-table.h	ALSA: usb-audio: Use the new macro for HP Dock rename quirks	2020-06-08 09:15:51 +02:00
quirks.c	ALSA: usb-audio: add quirk for Samsung USBC Headset (AKG)	2020-06-23 16:13:49 +02:00
quirks.h	ALSA: usb-audio: Rewrite registration quirk handling	2020-03-26 10:47:00 +01:00
stream.c	ALSA: usb-audio: Inform devices that need delayed registration	2020-03-26 10:49:08 +01:00
stream.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
usbaudio.h	ALSA: usb-audio: Manage auto-pm of all bundled interfaces	2020-06-08 19:34:49 +02:00
validate.c	ALSA: usb-audio: Fix endianess in descriptor validation	2020-02-01 09:06:11 +01:00