ALSA: usb-audio: Fix potential out-of-bounce access in MIDI EP parser
authorTakashi Iwai <tiwai@suse.de>
Tue, 11 May 2021 09:05:00 +0000 (11:05 +0200)
committerTakashi Iwai <tiwai@suse.de>
Tue, 11 May 2021 09:10:37 +0000 (11:10 +0200)
commit91e02557f377b6837d4f82b14229d92cae231001
treef57cc299de657a8e6e23a1c5b316d30fbbd59f07
parente84749a78dc82bc545f12ce009e3dbcc2c5a8a91
ALSA: usb-audio: Fix potential out-of-bounce access in MIDI EP parser

The recently introduced MIDI endpoint parser code has an access to the
field without the size validation, hence it might lead to
out-of-bounce access.  Add the sanity checks for the descriptor
sizes.

Fixes: eb596e0fd13c ("ALSA: usb-audio: generate midi streaming substream names from jack names")
Link: https://lore.kernel.org/r/20210511090500.2637-1-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/usb/midi.c