ASoC: wcd934x: Fix out of bounds for mad input value
Add check in tavil_mad_input_put function to
return error on out of bounds access using
mad input value.
CRs-fixed: 1100336
Change-Id: Icf424df0c0a0a774d43896e2d598d713004217db
Signed-off-by: Karthikeyan Mani <kmani@codeaurora.org>
diff --git a/sound/soc/codecs/wcd934x/wcd934x.c b/sound/soc/codecs/wcd934x/wcd934x.c
index c589d8c..724d961 100644
--- a/sound/soc/codecs/wcd934x/wcd934x.c
+++ b/sound/soc/codecs/wcd934x/wcd934x.c
@@ -5204,6 +5204,14 @@
tavil_mad_input = ucontrol->value.integer.value[0];
+ if (tavil_mad_input >= sizeof(tavil_conn_mad_text)/
+ sizeof(tavil_conn_mad_text[0])) {
+ dev_err(codec->dev,
+ "%s: tavil_mad_input = %d out of bounds\n",
+ __func__, tavil_mad_input);
+ return -EINVAL;
+ }
+
if (strnstr(tavil_conn_mad_text[tavil_mad_input], "NOTUSED",
sizeof("NOTUSED"))) {
dev_dbg(codec->dev,