public inbox for kernel-janitors@vger.kernel.org
 help / color / mirror / Atom feed
* [patch] ALSA: pcm: add more format names
@ 2010-08-27 19:28 Dan Carpenter
  2010-08-27 20:02 ` Dan Carpenter
  0 siblings, 1 reply; 3+ messages in thread
From: Dan Carpenter @ 2010-08-27 19:28 UTC (permalink / raw)
  To: kernel-janitors

There were some new formats added in commit 15c0cee6c809 "ALSA: pcm:
Define G723 3-bit and 5-bit formats".  That commit increased
SNDRV_PCM_FORMAT_LAST as well.  My concern is that there are a couple
places which do:

        for (i = 0; i < SNDRV_PCM_FORMAT_LAST; i++) {
                if (dummy->pcm_hw.formats & (1ULL << i))
                        snd_iprintf(buffer, " %s", snd_pcm_format_name(i));
        }

I haven't tested these but it looks like if "i" were equal to
SNDRV_PCM_FORMAT_G723_24 or higher then we might read past the end of
the array. 

Signed-off-by: Dan Carpenter <error27@gmail.com>

diff --git a/sound/core/pcm.c b/sound/core/pcm.c
index cbe815d..204af48 100644
--- a/sound/core/pcm.c
+++ b/sound/core/pcm.c
@@ -203,10 +203,16 @@ static char *snd_pcm_format_names[] = {
 	FORMAT(S18_3BE),
 	FORMAT(U18_3LE),
 	FORMAT(U18_3BE),
+	FORMAT(G723_24),
+	FORMAT(G723_24_1B),
+	FORMAT(G723_40),
+	FORMAT(G723_40_1B),
 };
 
 const char *snd_pcm_format_name(snd_pcm_format_t format)
 {
+	if (format >= ARRAY_SIZE(snd_pcm_format_names))
+		return "Unknown";
 	return snd_pcm_format_names[format];
 }
 EXPORT_SYMBOL_GPL(snd_pcm_format_name);

^ permalink raw reply related	[flat|nested] 3+ messages in thread

* [patch] ALSA: pcm: add more format names
  2010-08-27 19:28 [patch] ALSA: pcm: add more format names Dan Carpenter
@ 2010-08-27 20:02 ` Dan Carpenter
  2010-08-28 10:02   ` Takashi Iwai
  0 siblings, 1 reply; 3+ messages in thread
From: Dan Carpenter @ 2010-08-27 20:02 UTC (permalink / raw)
  To: Jaroslav Kysela
  Cc: alsa-devel, markgross, Takashi Iwai, Clemens Ladisch,
	kernel-janitors, Ben Collins

There were some new formats added in commit 15c0cee6c809 "ALSA: pcm:
Define G723 3-bit and 5-bit formats".  That commit increased
SNDRV_PCM_FORMAT_LAST as well.  My concern is that there are a couple
places which do:

        for (i = 0; i < SNDRV_PCM_FORMAT_LAST; i++) {
                if (dummy->pcm_hw.formats & (1ULL << i))
                        snd_iprintf(buffer, " %s", snd_pcm_format_name(i));
        }

I haven't tested these but it looks like if "i" were equal to
SNDRV_PCM_FORMAT_G723_24 or higher then we might read past the end of
the array. 

Signed-off-by: Dan Carpenter <error27@gmail.com>
---
Resending because I screwed up the CC lis on my first mail.

diff --git a/sound/core/pcm.c b/sound/core/pcm.c
index cbe815d..204af48 100644
--- a/sound/core/pcm.c
+++ b/sound/core/pcm.c
@@ -203,10 +203,16 @@ static char *snd_pcm_format_names[] = {
 	FORMAT(S18_3BE),
 	FORMAT(U18_3LE),
 	FORMAT(U18_3BE),
+	FORMAT(G723_24),
+	FORMAT(G723_24_1B),
+	FORMAT(G723_40),
+	FORMAT(G723_40_1B),
 };
 
 const char *snd_pcm_format_name(snd_pcm_format_t format)
 {
+	if (format >= ARRAY_SIZE(snd_pcm_format_names))
+		return "Unknown";
 	return snd_pcm_format_names[format];
 }
 EXPORT_SYMBOL_GPL(snd_pcm_format_name);


^ permalink raw reply related	[flat|nested] 3+ messages in thread

* Re: [patch] ALSA: pcm: add more format names
  2010-08-27 20:02 ` Dan Carpenter
@ 2010-08-28 10:02   ` Takashi Iwai
  0 siblings, 0 replies; 3+ messages in thread
From: Takashi Iwai @ 2010-08-28 10:02 UTC (permalink / raw)
  To: Dan Carpenter
  Cc: alsa-devel, markgross, Clemens Ladisch, kernel-janitors,
	Ben Collins

At Fri, 27 Aug 2010 22:02:15 +0200,
Dan Carpenter wrote:
> 
> There were some new formats added in commit 15c0cee6c809 "ALSA: pcm:
> Define G723 3-bit and 5-bit formats".  That commit increased
> SNDRV_PCM_FORMAT_LAST as well.  My concern is that there are a couple
> places which do:
> 
>         for (i = 0; i < SNDRV_PCM_FORMAT_LAST; i++) {
>                 if (dummy->pcm_hw.formats & (1ULL << i))
>                         snd_iprintf(buffer, " %s", snd_pcm_format_name(i));
>         }
> 
> I haven't tested these but it looks like if "i" were equal to
> SNDRV_PCM_FORMAT_G723_24 or higher then we might read past the end of
> the array. 
> 
> Signed-off-by: Dan Carpenter <error27@gmail.com>
> ---
> Resending because I screwed up the CC lis on my first mail.

Applied now.  Thanks.


Takashi

> 
> diff --git a/sound/core/pcm.c b/sound/core/pcm.c
> index cbe815d..204af48 100644
> --- a/sound/core/pcm.c
> +++ b/sound/core/pcm.c
> @@ -203,10 +203,16 @@ static char *snd_pcm_format_names[] = {
>  	FORMAT(S18_3BE),
>  	FORMAT(U18_3LE),
>  	FORMAT(U18_3BE),
> +	FORMAT(G723_24),
> +	FORMAT(G723_24_1B),
> +	FORMAT(G723_40),
> +	FORMAT(G723_40_1B),
>  };
>  
>  const char *snd_pcm_format_name(snd_pcm_format_t format)
>  {
> +	if (format >= ARRAY_SIZE(snd_pcm_format_names))
> +		return "Unknown";
>  	return snd_pcm_format_names[format];
>  }
>  EXPORT_SYMBOL_GPL(snd_pcm_format_name);
> 

^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2010-08-28 10:02 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2010-08-27 19:28 [patch] ALSA: pcm: add more format names Dan Carpenter
2010-08-27 20:02 ` Dan Carpenter
2010-08-28 10:02   ` Takashi Iwai

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox