Unverified Commit 71cb30a6 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!542 fix CVE-2023-0266 

Merge Pull Request from: @barry19901226 
 
fix CVE-2023-0266 
 
Link:https://gitee.com/openeuler/kernel/pulls/542

 

Reviewed-by: default avatarZucheng Zheng <zhengzucheng@huawei.com>
Reviewed-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents d3d549aa 83e0673d

sound/core/control_compat.c

+4 −0
Original line number Diff line number Diff line
@@ -304,7 +304,9 @@ static int ctl_elem_read_user(struct snd_card *card, 
	err = snd_power_wait(card, SNDRV_CTL_POWER_D0);

	if (err < 0)

		goto error;

	down_read(&card->controls_rwsem);

	err = snd_ctl_elem_read(card, data);

	up_read(&card->controls_rwsem);

	if (err < 0)

		goto error;

	err = copy_ctl_value_to_user(userdata, valuep, data, type, count);
@@ -332,7 +334,9 @@ static int ctl_elem_write_user(struct snd_ctl_file *file, 
	err = snd_power_wait(card, SNDRV_CTL_POWER_D0);

	if (err < 0)

		goto error;

	down_write(&card->controls_rwsem);

	err = snd_ctl_elem_write(card, file, data);

	up_write(&card->controls_rwsem);

	if (err < 0)

		goto error;

	err = copy_ctl_value_to_user(userdata, valuep, data, type, count);