ALSA: firewire-motu: add bounds check in put_user loop for DSP events
authorJunrui Luo <moonafterrain@outlook.com>
Tue, 9 Dec 2025 05:16:41 +0000 (13:16 +0800)
committerTakashi Iwai <tiwai@suse.de>
Tue, 9 Dec 2025 07:08:02 +0000 (08:08 +0100)
commit298e753880b6ea99ac30df34959a7a03b0878eed
tree1ff25e065fa273a3086775f319cabe1ee1aea460
parent9a97857db0c5655b8932f86b5d18bb959079b0ee
ALSA: firewire-motu: add bounds check in put_user loop for DSP events

In the DSP event handling code, a put_user() loop copies event data.
When the user buffer size is not aligned to 4 bytes, it could overwrite
beyond the buffer boundary.

Fix by adding a bounds check before put_user().

Suggested-by: Takashi Iwai <tiwai@suse.de>
Fixes: 634ec0b2906e ("ALSA: firewire-motu: notify event for parameter change in register DSP model")
Signed-off-by: Junrui Luo <moonafterrain@outlook.com>
Link: https://patch.msgid.link/SYBPR01MB788112C72AF8A1C8C448B4B8AFA3A@SYBPR01MB7881.ausprd01.prod.outlook.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/firewire/motu/motu-hwdep.c