diff options
| author | SeungJu Cheon <suunj1331@gmail.com> | 2026-04-26 20:12:39 +0900 |
|---|---|---|
| committer | Takashi Iwai <tiwai@suse.de> | 2026-04-27 14:24:41 +0200 |
| commit | d1f73f169c1014463b5060e3f60813e13ddc7b87 (patch) | |
| tree | 4cf5b995d2a5eebec4b083e4794092fc3e2d5510 /include/linux/timerqueue_types.h | |
| parent | 110189f0268d0eb85895721526328cac5804a739 (diff) | |
sound: ua101: fix division by zero at probe
Add a missing sanity check for bNrChannels in detect_usb_format()
to prevent a division by zero in playback_urb_complete() and
capture_urb_complete().
USB core does not validate class-specific descriptor fields such
as bNrChannels, so drivers must verify them before use. If a
device provides bNrChannels = 0, frame_bytes becomes zero and is
later used as a divisor in the URB completion handlers, leading
to a kernel crash.
Fixes: 63978ab3e3e9 ("sound: add Edirol UA-101 support")
Cc: stable@vger.kernel.org
Signed-off-by: SeungJu Cheon <suunj1331@gmail.com>
Link: https://patch.msgid.link/20260426111239.103296-1-suunj1331@gmail.com
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Diffstat (limited to 'include/linux/timerqueue_types.h')
0 files changed, 0 insertions, 0 deletions
