Re: [PATCH RESEND v1 1/3] soundwire: fix bug in sdw_add_element_group_count found by syzkaller

[Vinod Koul]

On Wed, 06 May 2026 13:50:35 +0800, Baoli Zhang wrote:
> The original implementation caused an out-of-bounds memory access
> in the sdw_add_element_group_count for-loop when i == num.
> 
> for (i = 0; i <= num; i++) {
>     if (rate == group->rates[i] && lane == group->lanes[i])
>         ...
> 
> [...]

Applied, thanks!

[1/3] soundwire: fix bug in sdw_add_element_group_count found by syzkaller
      commit: f772ff5a0e6758fd412803c09e03ba3bca5f5878
[2/3] soundwire: increase group->max_size after allocation
      commit: 654a7ae10b2ee6b07d5d9193c1c5465410781908
[3/3] soundwire: use krealloc_array to prevent integer overflow
      commit: 35a5ab8ef7f0f00b30eab9d917f3f0f4a2bec5d6

Best regards,
-- 
~Vinod