This is called from snd_ctl_elem_write() with user supplied data so we
need to add some bounds checking.
Signed-off-by: NDan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: NMark Brown <broonie@linaro.org>
Cc: stable@vger.kernel.org