[alsa-devel] [PATCH] ALSA: fireface: Off by one in latter_handle_midi_msg()
Dan Carpenter
dan.carpenter at oracle.com
Fri Jan 25 13:44:18 CET 2019
The > should be >= or otherwise we potentially read one element beyond
the end of the ff->tx_midi_substreams[] array.
Fixes: 73f5537fb209 ("ALSA: fireface: support tx MIDI functionality of Fireface UCX")
Signed-off-by: Dan Carpenter <dan.carpenter at oracle.com>
---
sound/firewire/fireface/ff-protocol-latter.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/sound/firewire/fireface/ff-protocol-latter.c b/sound/firewire/fireface/ff-protocol-latter.c
index 817af4447349..438aeed9a1ab 100644
--- a/sound/firewire/fireface/ff-protocol-latter.c
+++ b/sound/firewire/fireface/ff-protocol-latter.c
@@ -275,7 +275,7 @@ static void latter_handle_midi_msg(struct snd_ff *ff, unsigned int offset,
struct snd_rawmidi_substream *substream;
unsigned int len;
- if (index > ff->spec->midi_in_ports)
+ if (index >= ff->spec->midi_in_ports)
return;
switch (data & 0x0000000f) {
--
2.17.1
More information about the Alsa-devel
mailing list