On Thu, Apr 21, 2016 at 11:45:23AM +0530, Vinod Koul wrote: > + num_entry = adsp_hdr->num_module_entries; > + > + tbl = devm_kzalloc(ctx->dev, > + num_entry * sizeof(struct uuid_tbl), GFP_KERNEL); > + > + if (!tbl) > + return -ENOMEM; I'm still not seeing any bounds checking to make sure we don't read beyond the end of the firmware file.
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ Alsa-devel mailing list Alsa-devel@xxxxxxxxxxxxxxxx http://mailman.alsa-project.org/mailman/listinfo/alsa-devel