From: Dan Carpenter Date: Fri, 15 Mar 2013 06:14:22 +0000 (+0300) Subject: sound: sequencer: cap array index in seq_chn_common_event() X-Git-Tag: v3.9-rc3~7^2~1 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=57220bc1f5924c869d8fc049e50169915ca0cb24;p=pandora-kernel.git sound: sequencer: cap array index in seq_chn_common_event() "chn" here is a number between 0 and 255, but ->chn_info[] only has 16 elements so there is a potential write beyond the end of the array. If the seq_mode isn't SEQ_2 then we let the individual drivers (either opl3.c or midi_synth.c) handle it. Those functions all do a bounds check on "chn" so I haven't changed anything here. The opl3.c driver has up to 18 channels and not 16. Signed-off-by: Dan Carpenter Signed-off-by: Takashi Iwai --- Reading git-diff-tree failed