]> git.alsa-project.org Git - tinycompress.git/commit
projects / tinycompress.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6d39f02) | patch
utils: sofprobeclient: fix OOB read on oversized probe data size
authorJaroslav Kysela <perex@perex.cz>
Fri, 23 Oct 2026 07:19:10 +0000 (09:19 +0200)
committerJaroslav Kysela <perex@perex.cz>
Fri, 23 Oct 2026 07:23:11 +0000 (09:23 +0200)
commitf42b48ac81382b9c595aaeb5117456d87abe14da
tree4d20d5947b9f8db073eb96d33f20b8ac0f9daa41tree | snapshot
parent6d39f020bdc4af9dc586b48cecfed3c2a4e235eacommit | diff
utils: sofprobeclient: fix OOB read on oversized probe data size

The data_size_bytes variable is taken from the untrusted probe stream
and was never capped. Reject large data_size_bytes, change total_data_to_copy
to size_t. Also drop/resync on a bad packet instead of aborting.

Link: https://lore.kernel.org/alsa-devel/CAOH03+3bBSMrvVdxH5qQB8nvnejJAtnS3gnH4b5mO2fPugeZuw@mail.gmail.com/
Signed-off-by: Jaroslav Kysela <perex@perex.cz>
src/utils/sofprobeclient/probes_demux.c diff | blob | history
A library to handle compressed formats like MP3 etc.