pcm: ioplug: Limit transfer size to buffer boundary

GitHub pull_request - opened github at alsa-project.org
Fri Nov 27 12:23:57 CET 2020


alsa-project/alsa-lib pull request #103 was opened from aditpape:

Commit 1714332719fc91507ca24dd3567e50d7094b3001 introduced 2nd transfer()
call to transfer all remaining available frames.
If the prior calculated avail value exceeds the buffer size a too large size value
is passed to the underlaying plugin and results in memory corruption if not blocked by plugin internally.
Avail values > buffer size can happen if e.g. xrun detection is disabled,
as avail is calculated by pure difference between hw and app position.
This patch limits 2nd transfer call to remaining rest of a buffer size.

Signed-off-by: Andreas Pape <apape at de.adit-jv.com>

Request URL   : https://github.com/alsa-project/alsa-lib/pull/103
Patch URL     : https://github.com/alsa-project/alsa-lib/pull/103.patch
Repository URL: https://github.com/alsa-project/alsa-lib


More information about the Alsa-devel mailing list