ALSA: pcm: oss: Fix negative period/buffer sizes
authorTakashi Iwai <tiwai@suse.de>
Wed, 1 Dec 2021 07:36:04 +0000 (08:36 +0100)
committerTakashi Iwai <tiwai@suse.de>
Thu, 2 Dec 2021 08:01:46 +0000 (09:01 +0100)
commit9d2479c960875ca1239bcb899f386970c13d9cfe
treed3e390812b7c0c029dd805367618f9417a935c3f
parent289047db1143c42c81820352f195a393ff639a52
ALSA: pcm: oss: Fix negative period/buffer sizes

The period size calculation in OSS layer may receive a negative value
as an error, but the code there assumes only the positive values and
handle them with size_t.  Due to that, a too big value may be passed
to the lower layers.

This patch changes the code to handle with ssize_t and adds the proper
error checks appropriately.

Reported-by: syzbot+bb348e9f9a954d42746f@syzkaller.appspotmail.com
Reported-by: Bixuan Cui <cuibixuan@linux.alibaba.com>
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/1638270978-42412-1-git-send-email-cuibixuan@linux.alibaba.com
Link: https://lore.kernel.org/r/20211201073606.11660-2-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/core/oss/pcm_oss.c