From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.ozlabs.org (lists.ozlabs.org [112.213.38.117]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DAA62606A321 for ; Tue, 10 Nov 2026 22:26:27 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key, unprotected) header.d=nxp.com header.i=@nxp.com header.a=rsa-sha256 header.s=selector1 header.b=Wi3ZFcQp Received: from boromir.ozlabs.org (localhost [127.0.0.1]) by lists.ozlabs.org (Postfix) with ESMTP id 4jPLpn5sGrz2y2h; Wed, 11 Nov 2026 09:26:25 +1100 (AEDT) Authentication-Results: lists.ozlabs.org; arc=pass smtp.remote-ip="2a01:111:f403:c200::3" arc.chain=microsoft.com ARC-Seal: i=2; a=rsa-sha256; d=lists.ozlabs.org; s=201707; t=1794312489; cv=pass; b=kSgYx3V4eFZRHbne+Azk6hlaskiiUv8VvJHr1CLnwHEhk3Txj43WqGrDvd1Tr5gezHnekp2nZ6zH00JzgEajlYCLa7q7Pygs8Dsq1RPjJ+UtUjMb+R5riWUumbcNhmF3riXITjrh1EDUW63ooz1xOY2OKJ/VKu8+ksbcGDgSuNAsRcLstwITo9ELH7rlPojFOYlouYYi381UL669Q+h+rEmTir0lweSSSENsClecKFACIDnB7A3QD03maNSLy2g/dHWUjXnJikGv401TiRp07f9+5GXccvBPeKVT4hrPookq4jA14sycOriUDNDjoY2gBgzZHsPDseu474q4yjE6jQ== ARC-Message-Signature: i=2; a=rsa-sha256; d=lists.ozlabs.org; s=201707; t=1794312489; c=relaxed/relaxed; bh=L9BDAmKDm6+rN3ClNskIkdLiVDtW4yfZGmFhqdyf3AE=; h=From:To:Cc:Subject:Date:Message-Id:Content-Type:MIME-Version; b=Ut/DWN/6ADUEVtmGbQxAzPt6KmjRSV4eXF5Em/oVx3q2CPAhhEajgOpvrME2TiDeKDogHJAerIyAaCEnoLZQFDATZRKZ0Op9sAiSc+41Slskdnfe6Ov/jL0nIfleeEWsUkaN9JfRhIkjQgTWvLqBiFmxqB3RbqWgzIV1D5n+Tf5AwYwxNOLQjcK+i+gTViawSJSTErfttVkn/vqLdjOPTOOubLZYQ1C4qsHlEaCLjWyKrxCFYo9d10dSMS/YSXfTKh9q1zPbCpKfLn555d/Yrspetf/ZE17os0Jqam0MydvDrdlR08Co3k3BQIJ+0aHC4GiLrn4/l/giZxQbcwaHVw== ARC-Authentication-Results: i=2; lists.ozlabs.org; dmarc=pass (p=none dis=none) header.from=nxp.com; dkim=pass (2048-bit key; unprotected) header.d=nxp.com header.i=@nxp.com header.a=rsa-sha256 header.s=selector1 header.b=Wi3ZFcQp; dkim-atps=neutral; spf=permerror (client-ip=2a01:111:f403:c200::3; helo=du2pr03cu002.outbound.protection.outlook.com; envelope-from=stefan.ghetu@nxp.com; receiver=lists.ozlabs.org) smtp.mailfrom=nxp.com Authentication-Results: lists.ozlabs.org; dmarc=pass (p=none dis=none) header.from=nxp.com Authentication-Results: lists.ozlabs.org; dkim=pass (2048-bit key; unprotected) header.d=nxp.com header.i=@nxp.com header.a=rsa-sha256 header.s=selector1 header.b=Wi3ZFcQp; dkim-atps=neutral Authentication-Results: lists.ozlabs.org; spf=permerror (SPF Permanent Error: Void lookup limit of 2 exceeded) smtp.mailfrom=nxp.com (client-ip=2a01:111:f403:c200::3; helo=du2pr03cu002.outbound.protection.outlook.com; envelope-from=stefan.ghetu@nxp.com; receiver=lists.ozlabs.org) Received: from DU2PR03CU002.outbound.protection.outlook.com (mail-northeuropeazlp170110003.outbound.protection.outlook.com [IPv6:2a01:111:f403:c200::3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange secp256r1 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by lists.ozlabs.org (Postfix) with ESMTPS id 4jP55L6qK1z2x9N for ; Tue, 10 Nov 2026 23:08:06 +1100 (AEDT) ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=VW1AHC8jtcHdI8SSbqKdTVhLvGTrVxym1DQdDMsaLNst+yOPmP5fYNDIfc66nTc79Rp/qa+i81Q9HYoYGxciQw9ztRoGevo88tawJpk4L9mqvsOG/DzJ0Gk3DxZQa/sgZVlxumexw4GFU3nfAy/6MnN0XynxyiBbRWmY9DC6WTDxALgCqoHPjfyh0B8DRd3b8SnstmXW+WhoN68TvArzS3Utx2JkJ/B/oOGSqwAde2HIVpDr6dJcROnFQa5jlcjGz8j9czOZYi2UxYzhKw3xl6qXfzb4+QAhTO1pJzPMATj86IgccdbDV0I/R+JdupvZKLgr7HqBQ67jQqKf0XYjrQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=L9BDAmKDm6+rN3ClNskIkdLiVDtW4yfZGmFhqdyf3AE=; b=qjIdILLGcuIqpu2ezHLQf8jIimx+ug67O2O3nQdYBHKmObMvywgUoWvVHWsnAQ5Mq4oTsxrs2IrcDh28h5FATcxZQ8dmZey86lYFIzdxcScyYWiKcySWJQk5gA/C9WfmIDfTWmehle0k4uZLCjr8lKKUpx06G64kyCkgK79WZBE3jjBdE9q7mthTyj3kFqzqzO/+CLQAV4dJJPS8E88M5E9iXSyQfP+/lkbZUCdeK/ztE7W/1bQm19/pqCjR2cypEihQuFgE0dzqvH0cptYs0h3ULHqjszlI0m2wLoazzjD1aF727X6sJ1E417QV8vONVH+ySCpeLdE8fDqAIvYCkQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nxp.com; dmarc=pass action=none header.from=nxp.com; dkim=pass header.d=nxp.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nxp.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=L9BDAmKDm6+rN3ClNskIkdLiVDtW4yfZGmFhqdyf3AE=; b=Wi3ZFcQprM6ohcGBSulxf+iCfjCk+djN+y4yE7EYAv9uzWnnLiQWbpLCTgmWEDiIqnb8PhmHRA5sIQGOFg6oalHfhSyvpawsYuNXAGvTsteCmydOadoFNbg1t3pAWyeEz10Jne4qYnZAgQTWzYWLNGQf0L9JzwtxWySYJAfeSib2prbyOOJTON4H9HdLRZyXMyEVus29q/3af1UCgDeEPcYFSh4LaKOW9xRbDfeua2ELJTM2M11ho/0kMUV8OJ0MlT1i9/PC6cOpv5XqBPJ+7N6U8MS7hF/rJ/dxlbAzdFT0LrjdUTCEhG+BwVzPxYK12RYw352LG4ZrOuy46+QVyw== Authentication-Results: mx.microsoft.com 1; dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=nxp.com; Received: from AM6PR04MB4472.eurprd04.prod.outlook.com (2603:10a6:20b:23::20) by VI3PR04MB572389.eurprd04.prod.outlook.com (2603:10a6:800:377::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.615.8; Tue, 10 Nov 2026 12:07:48 +0000 Received: from AM6PR04MB4472.eurprd04.prod.outlook.com ([fe80::aed9:e8b9:c352:9ba0]) by AM6PR04MB4472.eurprd04.prod.outlook.com ([fe80::aed9:e8b9:c352:9ba0%6]) with mapi id 15.21.0592.012; Tue, 10 Nov 2026 12:07:48 +0000 From: Stefan Ghetu To: Shengjiu Wang , Mark Brown , linux-sound@vger.kernel.org Cc: daniel.baluta@nxp.com, Stefan Ghetu , Xiubo Li , Fabio Estevam , Nicolin Chen , Liam Girdwood , Jaroslav Kysela , Takashi Iwai , linuxppc-dev@lists.ozlabs.org, linux-kernel@vger.kernel.org Subject: [PATCH 0/5] ASoC: fsl_asrc/fsl_easrc: fix memory safety issues Date: Tue, 10 Nov 2026 14:07:38 +0200 Message-Id: <20261110120743.6301-1-stefan.ghetu@nxp.com> X-Mailer: git-send-email 2.34.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: FR4P281CA0419.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:d0::18) To AM6PR04MB4472.eurprd04.prod.outlook.com (2603:10a6:20b:23::20) X-Mailing-List: linuxppc-dev@lists.ozlabs.org List-Id: List-Help: List-Owner: List-Post: List-Archive: , List-Subscribe: , , Precedence: list X-Archived-By: MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: AM6PR04MB4472:EE_|VI3PR04MB572389:EE_ X-MS-Office365-Filtering-Correlation-Id: f4cec6d0-342b-4e65-a281-08df3f233c6a X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|19092799006|366016|376014|1800799024|23010399003|7416014|6133799003|18002099003|3023799007|261026140227099003|56012099006|11063799006|261022105027099003|261028144727099003|261021121427099003|261009221727099003|261009221227099003|261102123227099003|261009223327099003|261009220027099003|261021123027099003|261009223027099003|10067099003|261022075727099003|261026121527099003|260925021311599003|260925021911599003|260925022911599003; X-Microsoft-Antispam-Message-Info: v9c7VHR7Q5V5tVMHptlsHqaM+rta3f0ElYJoKxjOuQ0JYw+VhVBPxFwCC+QU2U8bOd0Ki/klAkybBtfPK7Z9sHg15ElTKRMO88mcc9kEQFgIJMbIuv7gKvXIBDJLAM25hZMAC2wa4UeMYlq9IXLKiOw6W7hbgw9HtBBjSi8frIwOENpkxHR5L5sixCg9bpsuxrva+8rk/OtcyG8dq9Q0aORsVsM8kQBDPiHHbrwWXveOG05X5U5IaxqP4o/f3oSblmimN0uXvS1993qcwEJvI2ujN6cWgQWsyL1Bbxr8eg7F/ZGGgdnOZ8DpCkf/o9FsD0pKDjeNcWjkB4AySuk76qNKynHD0QYXCwxWnEFFVB8+gs5+KbNA4gmez50cdN45egqMYTc0N84GDWBvgz86NBCWELNdiTFpdC+dvLkHVHZRdrFy2l5sLt06NeX41YwMVEQB6Bsbq7wkpTnmHAE7UixjD1CNoamHyx6vSdLieZXSg4LzBiQ2cdeitrDecVZW5DxCWSfWIk5GfO4NgTFyYyV52XDJm3tN1b157bIiwrzzYm9EEqR6Wal7Qq+mYyaxgJDR8402wi8duABPUAK1MsISvVMNjh2QWY1PmYXUmeO1B3YzqEPg56tMKGuABHHyrEAl1nyENr1f5Rxp5QdP8GUST566vml0EOun82laj3g= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM6PR04MB4472.eurprd04.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(19092799006)(366016)(376014)(1800799024)(23010399003)(7416014)(6133799003)(18002099003)(3023799007)(261026140227099003)(56012099006)(11063799006)(261022105027099003)(261028144727099003)(261021121427099003)(261009221727099003)(261009221227099003)(261102123227099003)(261009223327099003)(261009220027099003)(261021123027099003)(261009223027099003)(10067099003)(261022075727099003)(261026121527099003)(260925021311599003)(260925021911599003)(260925022911599003);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Zj0JGTjDN3VHn5xvT0Dnigqw72mgPOz8lTF53jA60Wxg2AWjI0C28+d/icgW?= =?us-ascii?Q?Ps49+goC4SNXPIn0smEv8TLolRwGuJGFN+tUUXkLtdib5sPOCMjgcGZkXvh3?= =?us-ascii?Q?F2UwH6R6vmp1VIxSbuKeYuiInuSC3kbKvogrRlas49rbgOP1g7uh2Y0M4fag?= =?us-ascii?Q?hunXtcbakE9UFc4bi7lK6HIoXHvd+Ml7RsfZpSk3ikWEHVemwiHURJ+QsECI?= =?us-ascii?Q?P03lHLlNQtd20Uw5eDBJJin7CD1mJ8pK3XJqkjN/gGw6Ql5AIHrHzg+tH4N4?= =?us-ascii?Q?1brIbgvBMrvu4YtigtK6AirT549LKp9VHs/Z8gM8tjbmWwJvrzJ4ZT1MbP5P?= =?us-ascii?Q?qf35sECVLs/LDVgN7bi6TZsC0BSBC9nV+MS/Z1liFULqyITA/w6jBHEXwHsT?= =?us-ascii?Q?VvhYsMxxbrV/ym3dLZgLOZzHaDuFjaQZKhRlLdzCKQl35Jkls7nInfucDO8z?= =?us-ascii?Q?6vdMvcbDqKJNuCUrN2dQWtc+viYaCU8W/JaoKsofrAWvEN/ud0Gztje+6yCX?= =?us-ascii?Q?41M565w3ryu8IICI1qiYTZxobr1hWvxQJ1tfjD6ASXtGll8Y2KoCWl7HvR8F?= =?us-ascii?Q?96mj1hPHajHsTWc0bG0iE3eeXWGauiSh+6Z2dYGAofqYSBgKl05w+tytMy9V?= =?us-ascii?Q?/eVjz7sR/5RHhN6f0UDTbS8EBrRWmF8B+db0ms4ZtewYmrDJgf+olYYcngNw?= =?us-ascii?Q?qk1YiDU2im96I5Xe2sfjpckIgX0mj7oQlelclpzawgDIlS+Q0yhGMNPCR6yu?= =?us-ascii?Q?YtpD9TtFkgmdkHWqgY+HlCnO5GrMd0gsM5AeMx4fVt7WAYNANuy/xR7oUuXJ?= =?us-ascii?Q?NM5n0yrVRCEBqHXBFUPwimRv6xuDyJO/4nXX7SCwNQj2jai+PThX6AQ1K9ZK?= =?us-ascii?Q?RxPGlH5dMqYgfB/SCDeuEDlFi1YrFEeuF+1T6WrI6NDjO1KwbTbtom4HBdUT?= =?us-ascii?Q?PfwiqJ+lNcqyc7qPsv+rlbGfbZC8BMlXT6N5XxDu1AVxD7n2K9r3lSI8PaEx?= =?us-ascii?Q?ZboyViypuYMmzSBxGHC0Gj0DPRlxgnKaSRSrbAcbTuxjTX/EQq6kiUylc+aJ?= =?us-ascii?Q?bJQyYifhaP5vcm7UYSSfV0QSiz0WVQTJBzeKVzM9o74iEyB5oHK3wk6k+nR6?= =?us-ascii?Q?70HrfD9cId9pP42yYbRQfbmx58QCR7T+nOXs8lxBjNTOa0UhLMYcYOagzgo9?= =?us-ascii?Q?VgFWftQsX60eZcTUD9MJ5Y9Ed9vz8a+f6nlTGHw/6z5OAnAgR3jj/No/Cs4o?= =?us-ascii?Q?Zr9+6U4idM3TlTtWhavUqTXMbCHjbiWvktnX+11kMB7AR6vf6yZtHSBZbzTq?= =?us-ascii?Q?5DgDEokt/RQ3OjltSaJTewp+fpFt5dJnIf04MCwlXxtHwbqned83cdfM4ecM?= =?us-ascii?Q?atqkPtGNcLEBO3cq6fmTEtuNIdKnbaBvP6PogRGjZBXspwZORMcSrjVopZsk?= =?us-ascii?Q?BrqnJHwOCnIHHi6GJJgjy950Q2UHuPNlp9Qy4c9IGNbB31SJWAPVMlu+4cPL?= =?us-ascii?Q?m/1b4j5AjabpJekRFwPbTuGgzzVBAUDaHmdA2M0hUbsXGz8gCxfxkdiAP2x5?= =?us-ascii?Q?mMGYXXVYTkog3Y1Ps9P28QFEaE4t5IriD4AzSZAHioubHvr2vI2SEpGNad5b?= =?us-ascii?Q?jD4o7LltQrUy13bioe5QZJuVWtdciFCJ0Qbbq0nj9Ao6RguKpl3xYij0OOJZ?= =?us-ascii?Q?tAfkeYtmcpI0J7XFZFuLjmlGUrwogZUz132f9YBYd/YO1giXI7rF6yEGXlyo?= =?us-ascii?Q?Kys7QWeSvA=3D=3D?= X-OriginatorOrg: nxp.com X-MS-Exchange-CrossTenant-Network-Message-Id: f4cec6d0-342b-4e65-a281-08df3f233c6a X-MS-Exchange-CrossTenant-AuthSource: AM6PR04MB4472.eurprd04.prod.outlook.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 10 Nov 2026 12:07:48.1270 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 686ea1d3-bc2b-4c6f-a92c-d99c5c301635 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: lxF4XOT7UTo5Ydyk92N37EnXgyptI58u0grBnFLasBfHBfth35WQnNHsKWeeDGrrafqRMLhEPskH0XcqEyjFew== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI3PR04MB572389 X-Spam-Status: No, score=-13.8 required=3.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_PASS,SPF_PASS,USER_AGENT_GIT autolearn=ham autolearn_force=no version=4.0.1 X-Spam-Checker-Version: SpamAssassin 4.0.1 (2024-03-26) on aws-us-west-2-korg-listserv-alma10-1 This series fixes memory safety issues in the ASRC and EASRC drivers that can be triggered by a user with access to their PCM or compress devices: 1. fsl_asrc_m2m: the output FIFO drain can write past the end of the output buffer. 2. fsl_asrc: a repeated hw_params() leaves a stale asrc->pair[] entry that points to freed memory after close, and hw_free() after a failed hw_params() can release the pair of another stream. 3. fsl_asrc_dma: DMA channels are leaked on a repeated hw_params(), and released twice after a Back-End configuration error. 4. fsl_easrc: the same repeated hw_params() issue for EASRC contexts. 5. fsl_asrc_m2m: more than one task per compress stream leads to double DMA channel release and a stale pair entry. Patches 2 and 4 make the pair/context release ownership-checked; patch 5 relies on them. Please apply in order. Validated on i.MX8MP (EASRC) and i.MX8QM (ASRC). Stefan Ghetu (5): ASoC: fsl_asrc_m2m: fix out-of-bounds write when draining the output FIFO ASoC: fsl_asrc: fix pair ownership on repeated or failed hw_params ASoC: fsl_asrc_dma: release DMA channels on repeated hw_params ASoC: fsl_easrc: fix context ownership on repeated hw_params ASoC: fsl_asrc_m2m: allow only one task at a time per stream sound/soc/fsl/fsl_asrc.c | 22 ++++++++++++++++++++++ sound/soc/fsl/fsl_asrc_dma.c | 27 ++++++++++++++++++--------- sound/soc/fsl/fsl_asrc_m2m.c | 25 +++++++++++++++++-------- sound/soc/fsl/fsl_easrc.c | 10 ++++++++++ 4 files changed, 67 insertions(+), 17 deletions(-) base-commit: b810335a0699d1810683796b0e3ffe8827ddfe6c -- 2.53.0