Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Thu, 19 Jan 2023 11:29:42 +0100
Message-ID: <87wn5irf55.wl-tiwai@suse.de>
From:   Takashi Iwai <tiwai@suse.de>
To:     Artemii Karasev <karasev@ispras.ru>
Cc:     Jaroslav Kysela <perex@perex.cz>, Takashi Iwai <tiwai@suse.com>,
        Xiang wangx <wangxiang@cdjrlc.com>,
        alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org,
        lvc-project@linuxtesting.org
Subject: Re: [PATCH] ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path()
In-Reply-To: <20230119082259.3634-1-karasev@ispras.ru>
References: <20230119082259.3634-1-karasev@ispras.ru>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) Emacs/27.2 Mule/6.0
MIME-Version: 1.0 (generated by SEMI-EPG 1.14.7 - "Harue")
Content-Type: text/plain; charset=US-ASCII
Precedence: bulk

On Thu, 19 Jan 2023 09:22:59 +0100,
Artemii Karasev wrote:
> 
> snd_hda_get_connections() can return a negative error code.
> It may lead to accessing 'conn' array at a negative index.
> 
> Found by Linux Verification Center (linuxtesting.org) with SVACE.
> 
> Signed-off-by: Artemii Karasev <karasev@ispras.ru>
> Fixes: 30b4503378c9 ("ALSA: hda - Expose secret DAC-AA connection of some VIA codecs")

Thanks, applied.


Takashi