Re: [PATCH] ASoC: tas2781: reject too-short writes to acoustic_ctl debugfs
From: Mark Brown
Date: Sat May 09 2026 - 21:27:23 EST
On Sun, May 10, 2026 at 01:51:54AM +0800, 杨弋 wrote:
> The acoustic_ctl_write debugfs handler allocates a buffer via
> memdup_user(from, count) but only validates that count is not too
> large. It then accesses src[0] through src[6] without ensuring
> count >= 7.
>
> Add a minimum-size check of 7 bytes.
>
> Signed-off-by: Yi Yang <yangyi@xxxxxxxx>
> Assisted-by: kimi-cli:kimi-k2.6
You haven't provided a good signoff here, the name and email you're
using here don't obviously correspond to those used in the email body.
Please see Documentation/process/submitting-patches.rst for details
on what this is and why it's important.
Attachment:
signature.asc
Description: PGP signature