From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from alsa0.perex.cz (alsa0.perex.cz [77.48.224.243]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id CAE36CC6B33 for ; Thu, 15 Oct 2026 14:54:46 +0000 (UTC) Received: from alsa1.perex.cz (alsa1.perex.cz [45.14.194.44]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by alsa0.perex.cz (Postfix) with ESMTPS id 7366B60232; Thu, 15 Oct 2026 16:54:34 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 alsa0.perex.cz 7366B60232 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=alsa-project.org; s=default; t=1792076084; bh=MIqnukO7yMniWeSvG44oIUlc+vFXD94F6Y39TJsDiNw=; h=From:To:In-Reply-To:References:Subject:Date:List-Id:List-Archive: List-Help:List-Owner:List-Post:List-Subscribe:List-Unsubscribe: From; b=BO5kxdBXwDop48qeAPYbmfj1EKiiuP5yB90Ap7JRCGMtlHg4kgdo4qDWyDspp8+SA 0rjDPI2w1YhK1dau0aIpXPB5r1gAG97z85ydPpI/zOxRSg+GrlxTXth5TPwTnG/dBd 27hU0ejsHzkeTakmZmqwlO1BJUBzxPh+O/8IZsMs= Received: by alsa1.perex.cz (Postfix, from userid 50401) id A0B84F805F6; Thu, 15 Oct 2026 16:54:11 +0200 (CEST) Received: from mailman-core.alsa-project.org (mailman-core.alsa-project.org [10.254.200.10]) by alsa1.perex.cz (Postfix) with ESMTP id 221BBF805FB; Thu, 15 Oct 2026 16:54:11 +0200 (CEST) Received: by alsa1.perex.cz (Postfix, from userid 50401) id 78500F804CF; Thu, 15 Oct 2026 16:54:05 +0200 (CEST) Authentication-Results: alsa1.perex.cz; arc=none smtp.remote-ip=45.14.194.44 ARC-Seal: i=1; d=alsa-project.org; s=arc; a=rsa-sha256; cv=none; t=1792076044; b=AJ9wRYNnPE6q4VeiXvtUYpqxJxYwBwMifJlD/TADjb562t9m8VccU3WZI+qcRQz+/8Fl +MxFC5xb1Wh6TklJLMsSy92p/DADiHkXwgPhlyF27iFOTaAnP7v4EsVnojcIgsYuzvnsq mgL++05KoC/EqHbaHMXjcnzUnoLWzcklpbGVf6jW+WvX1UTm6rv4HvgDZLPf3mSa+Xj3P 8RYifKm1rHCR28V2Dq/wdcXeQW/bsFaZgai5XuOrEe7ilMjZystOlBXCK1dre2cszlrnm AuD9VtBJ1iy/hWe1VE/3LJBqwqbjglabx87L1f3ag9i7aTotJEkJnEfE6Qt6zL1o6Gg== ARC-Message-Signature: i=1; d=alsa-project.org; s=arc; a=rsa-sha256; c=relaxed/simple; t=1792076044; h=MIME-Version:From:To:Message-Id:Subject; bh=MIqnukO7yMniWeSvG44oIUlc+vFXD94F6Y39TJsDiNw=; b=ll4WF1qFs12xzAZlicDFfPfBTw2btSuzD7KYxeJPNbwH22aPOp7oZhNMgTof9uj4jSZs zF5FeBEgIW/WYaqyKxsluV5CS/gF0goBNEQeKacXL88I6PwgK9q/t0lLyWRNEDZFebA6+ 1Qke29Ibo/nXsGV/uXJPyoP9wIo1sX5l0NmNEjcXcRJBji5Q1UKZCJ+MH1MOgngaIF2U5 7+MvA8JzsBblpowq8JnNBqucEtSPKxA++FG/dyXJAkTX+RsJDxsLU6A+TyJF17Jycnn0m rWTZRL2PtnFoQHjOy2AJO1Gtjqk6+w01OXhSPWmGXP+tKyiTg8Utmc+iPqzcZNbEt1w== ARC-Authentication-Results: i=1; alsa1.perex.cz; arc=none smtp.remote-ip=45.14.194.44 Received: from webhooks-bot.alsa-project.org (vmi2259423.contaboserver.net [45.14.194.44]) by alsa1.perex.cz (Postfix) with ESMTP id 6C490F800FA for ; Thu, 15 Oct 2026 16:54:02 +0200 (CEST) DKIM-Filter: OpenDKIM Filter v2.11.0 alsa1.perex.cz 6C490F800FA Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: GitHub pull_request - reopened To: alsa-devel@alsa-project.org Message-Id: <18debbaa59af8900-webhooks-bot@alsa-project.org> In-Reply-To: References: Subject: =?utf-8?q?alsa-lib=3A_security_hardening_=E2=80=94_UCM=2C_conf_parser=2C_topology=2C_PCM_plugins_=286_findings=29?= Date: Thu, 15 Oct 2026 16:54:05 +0200 (CEST) Message-ID-Hash: MLJYMJUY2WSK3C46CNLRWPDMZAZGOOTF X-Message-ID-Hash: MLJYMJUY2WSK3C46CNLRWPDMZAZGOOTF X-MailFrom: github@alsa-project.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; loop; banned-address; header-match-alsa-devel.alsa-project.org-0; header-match-alsa-devel.alsa-project.org-1; emergency; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.10 Precedence: list List-Id: "Alsa-devel mailing list for ALSA developers - http://www.alsa-project.org" Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: YWxzYS1wcm9qZWN0L2Fsc2EtbGliIHB1bGwgcmVxdWVzdCAjNTI3IHdhcyByZW9wZW5lZCBmcm9t IEhhcnNoUmFqU2luZ2hhbmlhOgoKVGhpcyBQUiBhZGRyZXNzZXMgKipzaXggaW5kZXBlbmRlbnRs eS10cmlnZ2VyZWQgc2VjdXJpdHkgaGFyZGVuaW5nIGlzc3VlcyoqIGZvdW5kIGR1cmluZyBhIHNv dXJjZSBhdWRpdCBvZiBjb21taXQgYGY4NGNkNGNgLCBhbGwgdmVyaWZpZWQgd2l0aCBwcm9vZi1v Zi1jb25jZXB0IHByb2dyYW1zLgoKQTMgKGBzaGVsbGAvYHN5c3RlbSgpYCkgYW5kIEE2IChQQ00g ZmlsZSBgcG9wZW5gKSBhcmUgaW50ZW50aW9uYWwgZmVhdHVyZXMgYW5kIGFyZSBub3QgcGF0Y2hl ZCBoZXJlIOKAlCBoYXJkZW5pbmcgc3VnZ2VzdGlvbnMgbm90ZWQgaW5saW5lIGZvciBtYWludGFp bmVyIGNvbnNpZGVyYXRpb24uCgotLS0KCiMjIyBBMSDigJQgVUNNIGBzeXN3YCBwYXRoIHRyYXZl cnNhbCAoQ1dFLTIyKSDCtyBgc3JjL3VjbS9tYWluLmNgCmBleGVjdXRlX3N5c3coKWAgY29uY2F0 ZW5hdGVzIHRoZSBzeXNmcyByb290IHdpdGggYSBjYWxsZXItc3VwcGxpZWQgc3RyaW5nIHZpYSBg c25wcmludGYoKWAgd2l0aCBubyBgLi5gIHJlamVjdGlvbiBvciBgcmVhbHBhdGgoKWAgY29uZmlu ZW1lbnQuIEEgVUNNIHBhdGggbGlrZSBgLi4vLi4vZXRjL2Nyb24uZC94OnZhbHVlYCB3cml0ZXMg dG8gYW4gYXJiaXRyYXJ5IGZpbGVzeXN0ZW0gbG9jYXRpb24uICoqRml4OioqIGByZWFscGF0aCgp YCBjb25maW5lbWVudCDigJQgcmVqZWN0IGlmIHJlc29sdmVkIHBhdGggZG9lcyBub3QgcmVtYWlu IHdpdGhpbiB0aGUgc3lzZnMgcm9vdC4KCiMjIyBBMiDigJQgVUNNIGBjZmctc2F2ZWAgdW5yZXN0 cmljdGVkIHBhdGggKENXRS03MykgwrcgYHNyYy91Y20vbWFpbi5jYApgZXhlY3V0ZV9jZmdzYXZl KClgIGNhbGxzIGBzbmRfb3V0cHV0X3N0ZGlvX29wZW4oJm91dCwgZmlsZSwgIncrIilgIHdpdGgg YSByYXcgY2FsbGVyLXN1cHBsaWVkIGBmaWxlYCBhbmQgbm8gcmVzdHJpY3Rpb24uIEFueSB3cml0 YWJsZSBwYXRoIChlLmcuIGB+Ly5zc2gvYXV0aG9yaXplZF9rZXlzYCkgaXMgcmVhY2hhYmxlLiAq KkZpeDoqKiBgcmVhbHBhdGgoKWAgY2hlY2sg4oCUIGNvbmZpbmUgdG8gYFhER19SVU5USU1FX0RJ UmAgKGZhbGxiYWNrIGAvdG1wYCkuCgojIyMgQTQg4oCUIENvbmZpZyBwYXJzZXIgYWJzb2x1dGUg aW5jbHVkZSB0cmF2ZXJzYWwgKENXRS0yMikgwrcgYHNyYy9jb25mLmNgCmBpbnB1dF9zdGRpb19v cGVuKClgIGltbWVkaWF0ZWx5IG9wZW5zIGFueSBhYnNvbHV0ZSBwYXRoIChgZmlsZVswXT09Jy8n YCkgd2l0aG91dCBjaGVja2luZyBmb3IgYC4uYCBjb21wb25lbnRzLiBBIHBsYW50ZWQgY29uZmln IHdpdGggYDwvLi4vLi4vZXRjL3NoYWRvdz5gIGNhbiByZWFkIGFyYml0cmFyeSBmaWxlcy4gKipG aXg6KiogcmVqZWN0IHBhdGhzIGNvbnRhaW5pbmcgYC8uLi9gLgoKIyMjIEE1IOKAlCBUb3BvbG9n eSBjb250cm9sIGB1aW50MzJfdGAgaW50ZWdlciBvdmVyZmxvdyAoQ1dFLTE5MCkgwrcgYHNyYy90 b3BvbG9neS9jdGwuY2AKYHNpemUyID0geC0+c2l6ZSArIHgtPnByaXYuc2l6ZWAgaXMgY29tcHV0 ZWQgaW4gMzItYml0IHVuc2lnbmVkIGFyaXRobWV0aWMgYmVmb3JlIGJlaW5nIHdpZGVuZWQgdG8g YHNpemVfdGAuIE9uIGEgNjQtYml0IGhvc3QsIGAweEZGRkZGRkYwICsgMHgyMCA9IDB4MTBgICh3 cmFwcyksIGJ5cGFzc2luZyB0aGUgc3Vic2VxdWVudCBgc2l6ZTIgPiBzaXplYCBndWFyZC4gVGhy ZWUgc2l0ZXM6IGB0cGxnX2RlY29kZV9jb250cm9sX21peGVyYCwgYHRwbGdfZGVjb2RlX2NvbnRy b2xfZW51bWAsIGB0cGxnX2RlY29kZV9jb250cm9sX2J5dGVzYCAoZGlzdGluY3QgZnJvbSBDVkUt MjAyNi0yNTA2OCB3aGljaCB3YXMgYHRwbGdfZGVjb2RlX2NvbnRyb2xfbWl4ZXIxYCkuICoqRml4 OioqIHByZS1jaGVjayBmb3Igb3ZlcmZsb3csIHRoZW4gYChzaXplX3QpeC0+c2l6ZSArIChzaXpl X3QpeC0+cHJpdi5zaXplYC4KCiMjIyBBNyDigJQgUENNIGByb3V0ZWAgcGx1Z2luIHVuYm91bmRl ZCBgdHRhYmxlYCBhbGxvY2F0aW9uIChDV0UtNzcwKSDCtyBgc3JjL3BjbS9wY21fcm91dGUuY2AK YGNzaXplYC9gc3NpemVgIGdyb3cgZnJvbSBjb25maWctc3VwcGxpZWQgY2hhbm5lbCBpbmRpY2Vz IHdpdGggbm8gdXBwZXIgYm91bmQgYmVmb3JlIGBtYWxsb2MoY3NpemUgKiBzc2l6ZSAqIHNpemVv ZihlbnRyeSkpYC4gSW5kZXggYDEwNzM3NDE4MjNgIOKGkiBgbWFsbG9jKDggR0IpYC4gKipGaXg6 KiogY2FwIGJvdGggYXQgMTAyNCAoY29uc2lzdGVudCB3aXRoIGBkbWl4YCwgYHNvZnR2b2xgLCBv dGhlciBQQ00gcGx1Z2lucykuCgojIyMgQTgg4oCUIFBDTSBgbXVsdGlgIHNwYXJzZSBiaW5kaW5n cyBPT0IgYXNzZXJ0IChDV0UtNjE3KSDCtyBgc3JjL3BjbS9wY21fbXVsdGkuY2AKU3BhcnNlIGJp bmRpbmcgbWFwcyBsZWF2ZSBgc2lkeHNbaV0gPT0gLTFgIGZvciBnYXAgaW5kaWNlcy4gYGFzc2Vy dChzY2hhbm5lbHNbaV0gPCBzY2hhbm5lbHNfY291bnRbc2lkeHNbaV1dKWAgdGhlbiBkZXJlZmVy ZW5jZXMgYHNjaGFubmVsc19jb3VudFstMV1gIOKGkiBTSUdBQlJUIChkZWJ1ZykgLyBPT0IgcmVh ZCAoTkRFQlVHKS4gKipGaXg6KiogcmVwbGFjZSBib3RoIGBhc3NlcnQoKWBzIHdpdGggZXhwbGlj aXQgYC1FSU5WQUxgIHJldHVybnMgd2l0aCBib3VuZHMgYW5kIHNpZ24gY2hlY2tzLgoKLS0tCgoq KlZlcmlmaWVkOioqIGFsbCBzaXggUG9DIHByb2dyYW1zIGNvbmZpcm1lZCBvbiBgbGliYXNvdW5k MiAxLjIuMTRgIC8gYGdjYyAxNC4yYCwgY29tbWl0IGBmODRjZDRjYC4KCioqU2lnbmVkLW9mZi1i eToqKiBIYXJzaCBSYWogU2luZ2hhbmlhIDxyYWouaGFyc2hyYXV0QGdtYWlsLmNvbT4KClJlcXVl c3QgVVJMICAgOiBodHRwczovL2dpdGh1Yi5jb20vYWxzYS1wcm9qZWN0L2Fsc2EtbGliL3B1bGwv NTI3ClBhdGNoIFVSTCAgICAgOiBodHRwczovL2dpdGh1Yi5jb20vYWxzYS1wcm9qZWN0L2Fsc2Et bGliL3B1bGwvNTI3LnBhdGNoClJlcG9zaXRvcnkgVVJMOiBodHRwczovL2dpdGh1Yi5jb20vYWxz YS1wcm9qZWN0L2Fsc2EtbGliCg==