git://git.onelab.eu
/
linux-2.6.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
vserver 1.9.3
[linux-2.6.git]
/
sound
/
isa
/
wavefront
/
wavefront_synth.c
diff --git
a/sound/isa/wavefront/wavefront_synth.c
b/sound/isa/wavefront/wavefront_synth.c
index
b4fab43
..
1d9ee96
100644
(file)
--- a/
sound/isa/wavefront/wavefront_synth.c
+++ b/
sound/isa/wavefront/wavefront_synth.c
@@
-1961,6
+1961,12
@@
wavefront_download_firmware (snd_wavefront_t *dev, char *path)
break;
}
break;
}
+ if (section_length < 0 || section_length > WF_SECTION_MAX) {
+ snd_printk ("invalid firmware section length %d\n",
+ section_length);
+ goto failure;
+ }
+
if (sys_read (fd, section, section_length) != section_length) {
snd_printk ("firmware section "
"read error.\n");
if (sys_read (fd, section, section_length) != section_length) {
snd_printk ("firmware section "
"read error.\n");