Zubin Mithra 8e41134a92 ALSA: pcm: fix divide error in snd_pcm_lib_ioctl ...

commit f3eef46f05 upstream.

Syzkaller reported a divide error in snd_pcm_lib_ioctl. fifo_size
is of type snd_pcm_uframes_t(unsigned long). If frame_size
is 0x100000000, the error occurs.

Fixes: a9960e6a29 ("ALSA: pcm: fix fifo_size frame calculation")
Signed-off-by: Zubin Mithra <zsm@chromium.org>
Reviewed-by: Guenter Roeck <groeck@chromium.org>
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20210827153735.789452-1-zsm@chromium.org
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2021-09-08 08:49:01 +02:00

..

oss

ALSA: pcm: oss: Fix a few more UBSAN fixes

2020-12-30 11:54:07 +01:00

seq

ALSA: seq: Fix racy deletion of subscriber

2021-08-12 13:22:01 +02:00

compress_offload.c

ALSA: compress_offload: remove redundant initialization

2020-09-03 09:26:27 +02:00

control_compat.c

ALSA: compat_ioctl: avoid compat_alloc_user_space

2020-09-21 10:37:07 +02:00

control.c

ALSA: ctl: fix error path at adding user-defined element set

2020-11-13 11:33:55 +01:00

ctljack.c

…

device.c

…

hrtimer.c

ALSA: timer: Replace tasklet with work

2020-09-09 18:32:52 +02:00

hwdep_compat.c

ALSA: compat_ioctl: avoid compat_alloc_user_space

2020-09-21 10:37:07 +02:00

hwdep.c

ALSA: compat_ioctl: avoid compat_alloc_user_space

2020-09-21 10:37:07 +02:00

info_oss.c

…

info.c

ALSA: info: Drop WARN_ON() from buffer NULL sanity check

2020-07-17 10:59:38 +02:00

init.c

ALSA: core: remove redundant spin_lock pair in snd_card_disconnect

2021-05-14 09:50:31 +02:00

isadma.c

…

jack.c

…

Kconfig

…

Makefile

…

memalloc.c

ALSA: core: memalloc: add page alignment for iram

2020-12-30 11:54:08 +01:00

memory.c

…

misc.c

…

pcm_compat.c

…

pcm_dmaengine.c

ALSA: fix kernel-doc markups

2020-10-26 15:26:31 +01:00

pcm_drm_eld.c

…

pcm_iec958.c

ALSA: core: pcm_iec958: fix kernel-doc

2020-07-07 10:22:33 +02:00

pcm_lib.c

ALSA: pcm: fix divide error in snd_pcm_lib_ioctl

2021-09-08 08:49:01 +02:00

pcm_local.h

ALSA: pcm: Call sync_stop at disconnection

2021-03-04 11:37:19 +01:00

pcm_memory.c

ALSA: core: pcm_memory: dereference pointer after NULL checks

2020-09-03 09:24:58 +02:00

pcm_misc.c

…

pcm_native.c

ALSA: pcm: Fix mmap breakage without explicit buffer setup

2021-08-15 14:00:26 +02:00

pcm_param_trace.h

…

pcm_timer.c

…

pcm_trace.h

…

pcm.c

ALSA: pcm: Call sync_stop at disconnection

2021-03-04 11:37:19 +01:00

rawmidi_compat.c

…

rawmidi.c

ALSA: rawmidi: Access runtime->avail always in spinlock

2021-01-06 14:56:52 +01:00

seq_device.c

…

sgbuf.c

ALSA: memalloc: Make SG-buffer helper usable for continuous buffer, too

2020-06-15 18:01:52 +02:00

sound_oss.c

…

sound.c

…

timer_compat.c

…

timer.c

ALSA: timer: Fix master timer notification

2021-06-10 13:39:25 +02:00

vmaster.c

ALSA: Replace the word "slave" in vmaster API

2020-07-20 10:10:47 +02:00