original_kernel

History

Dan Carpenter 57220bc1f5 sound: sequencer: cap array index in seq_chn_common_event() "chn" here is a number between 0 and 255, but ->chn_info[] only has 16 elements so there is a potential write beyond the end of the array. If the seq_mode isn't SEQ_2 then we let the individual drivers (either opl3.c or midi_synth.c) handle it. Those functions all do a bounds check on "chn" so I haven't changed anything here. The opl3.c driver has up to 18 channels and not 16. Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Takashi Iwai <tiwai@suse.de>		2013-03-15 07:45:20 +01:00
..
dmasound	…
.gitignore	…
CHANGELOG	…
Kconfig	…
Makefile	…
README.FIRST	…
ad1848.c	…
ad1848.h	…
ad1848_mixer.h	…
aedsp16.c	…
audio.c	…
bin2hex.c	…
coproc.h	…
dev_table.c	…
dev_table.h	…
dmabuf.c	…
hex2hex.c	…
kahlua.c	…
midi_ctrl.h	…
midi_synth.c	…
midi_synth.h	…
midibuf.c	…
mpu401.c	…
mpu401.h	…
msnd.c	…
msnd.h	…
msnd_classic.c	…
msnd_classic.h	…
msnd_pinnacle.c	new helper: file_inode(file)	2013-02-22 23:31:31 -05:00
msnd_pinnacle.h	…
opl3.c	…
opl3_hw.h	…
os.h	…
pas2.h	…
pas2_card.c	sound: oss/pas2: Fix possible access out of array	2013-01-04 10:38:27 +01:00
pas2_midi.c	…
pas2_mixer.c	…
pas2_pcm.c	…
pss.c	…
sb.h	…
sb_audio.c	…
sb_card.c	…
sb_card.h	…
sb_common.c	…
sb_ess.c	…
sb_ess.h	…
sb_midi.c	…
sb_mixer.c	…
sb_mixer.h	…
sequencer.c	sound: sequencer: cap array index in seq_chn_common_event()	2013-03-15 07:45:20 +01:00
sound_calls.h	…
sound_config.h	…
sound_firmware.h	…
sound_timer.c	…
soundcard.c	new helper: file_inode(file)	2013-02-22 23:31:31 -05:00
soundvers.h	…
swarm_cs4297a.c	…
sys_timer.c	…
trix.c	…
tuning.h	…
uart401.c	…
uart6850.c	…
ulaw.h	…
v_midi.c	…
v_midi.h	…
vidc.c	…
vidc.h	…
vidc_fill.S	…
vwsnd.c	…
waveartist.c	…
waveartist.h	…

README.FIRST

The modular sound driver patches were funded by Red Hat Software 
(www.redhat.com). The sound driver here is thus a modified version of 
Hannu's code. Please bear that in mind when considering the appropriate
forums for bug reporting. 

Alan Cox