Commit e139d14
committed
rtnr: reject out-of-range control switch element counts
The SWITCH control get and set handlers looped over a host-supplied
element count while reading/writing the control channel array, which
could run past the IPC payload. Reject counts larger than the maximum
channel count in both handlers before the loop.
Signed-off-by: Liam Girdwood <liam.r.girdwood@linux.intel.com>1 parent 3f7738d commit e139d14
3 files changed
Lines changed: 67945 additions & 0 deletions
0 commit comments