1. 24 4月, 2012 5 次提交
  2. 21 4月, 2012 1 次提交
  3. 15 4月, 2012 2 次提交
  4. 13 4月, 2012 9 次提交
  5. 15 3月, 2012 1 次提交
  6. 25 2月, 2012 1 次提交
  7. 22 2月, 2012 6 次提交
  8. 15 2月, 2012 2 次提交
  9. 08 2月, 2012 1 次提交
  10. 11 1月, 2012 1 次提交
  11. 09 1月, 2012 2 次提交
  12. 08 1月, 2012 1 次提交
    • X
      ALSA: usb-audio: fix possible hang and overflow in parse_uac2_sample_rate_range() · 4fa0e81b
      Xi Wang 提交于
      A malicious USB device may feed in carefully crafted min/max/res values,
      so that the inner loop in parse_uac2_sample_rate_range() could run for
      a long time or even never terminate, e.g., given max = INT_MAX.
      
      Also nr_rates could be a large integer, which causes an integer overflow
      in the subsequent call to kmalloc() in parse_audio_format_rates_v2().
      Thus, kmalloc() would allocate a smaller buffer than expected, leading
      to a memory corruption.
      
      To exploit the two vulnerabilities, an attacker needs physical access
      to the machine to plug in a malicious USB device.
      
      This patch makes two changes.
      
      1) The type of "rate" is changed to unsigned int, so that the loop could
         stop once "rate" is larger than INT_MAX.
      
      2) Limit nr_rates to 1024.
      Suggested-by: NTakashi Iwai <tiwai@suse.de>
      Signed-off-by: NXi Wang <xi.wang@gmail.com>
      Signed-off-by: NTakashi Iwai <tiwai@suse.de>
      4fa0e81b
  13. 19 12月, 2011 1 次提交
  14. 12 12月, 2011 1 次提交
  15. 29 11月, 2011 1 次提交
  16. 19 11月, 2011 1 次提交
    • G
      USB: convert sound/* to use module_usb_driver() · 424f0750
      Greg Kroah-Hartman 提交于
      This converts the drivers in sound/* to use the
      module_usb_driver() macro which makes the code smaller and a bit
      simpler.
      
      Added bonus is that it removes some unneeded kernel log messages about
      drivers loading and/or unloading.
      
      Cc: Jaroslav Kysela <perex@perex.cz>
      Cc: Takashi Iwai <tiwai@suse.de>
      Cc: Daniel Mack <zonque@gmail.com>
      Cc: Clemens Ladisch <clemens@ladisch.de>
      Cc: Torsten Schenk <torsten.schenk@zoho.com>
      Cc: Paul Gortmaker <paul.gortmaker@windriver.com>
      Cc: Karsten Wiese <fzu@wemgehoertderstaat.de>
      Signed-off-by: NGreg Kroah-Hartman <gregkh@suse.de>
      424f0750
  17. 11 11月, 2011 1 次提交
  18. 09 11月, 2011 2 次提交
  19. 06 11月, 2011 1 次提交