diff mbox series

[alsa-lib] control: ctlparse - use type-specific bound on element count

Message ID 20200616182930.480959-1-john@metanate.com (mailing list archive)
State New, archived
Headers show
Series [alsa-lib] control: ctlparse - use type-specific bound on element count | expand

Commit Message

John Keeping June 16, 2020, 6:29 p.m. UTC
Using a fixed bound of 128 means that too many values may be set for an
INTEGER64 type and that any elements past 128 are out of reach for BYTE
type controls.

Derive the maximum number of elements from the type so that the full
range is parsed for all types.

Signed-off-by: John Keeping <john@metanate.com>
---
 src/control/ctlparse.c | 24 +++++++++++++++++++++++-
 1 file changed, 23 insertions(+), 1 deletion(-)

Comments

Jaroslav Kysela June 16, 2020, 7:30 p.m. UTC | #1
Dne 16. 06. 20 v 20:29 John Keeping napsal(a):
> Using a fixed bound of 128 means that too many values may be set for an
> INTEGER64 type and that any elements past 128 are out of reach for BYTE
> type controls.
> 
> Derive the maximum number of elements from the type so that the full
> range is parsed for all types.
> 
> Signed-off-by: John Keeping <john@metanate.com>

Nice catch. Applied to the alsa-lib repository. Thank you.

			Jaroslav
diff mbox series

Patch

diff --git a/src/control/ctlparse.c b/src/control/ctlparse.c
index 1ac31bb9..ee1e0602 100644
--- a/src/control/ctlparse.c
+++ b/src/control/ctlparse.c
@@ -304,6 +304,25 @@  static int get_ctl_enum_item_index(snd_ctl_t *handle,
 	return -1;
 }
 
+static unsigned int get_ctl_type_max_elements(snd_ctl_elem_type_t type)
+{
+	struct snd_ctl_elem_value value;
+
+	switch (type) {
+	case SND_CTL_ELEM_TYPE_BOOLEAN:
+	case SND_CTL_ELEM_TYPE_INTEGER:
+		return ARRAY_SIZE(value.value.integer.value);
+	case SND_CTL_ELEM_TYPE_INTEGER64:
+		return ARRAY_SIZE(value.value.integer64.value);
+	case SND_CTL_ELEM_TYPE_ENUMERATED:
+		return ARRAY_SIZE(value.value.enumerated.item);
+	case SND_CTL_ELEM_TYPE_BYTES:
+		return ARRAY_SIZE(value.value.bytes.data);
+	default:
+		return 0;
+	}
+}
+
 /**
  * \brief parse ASCII string as CTL element value
  * \param handle CTL handle
@@ -331,8 +350,11 @@  int snd_ctl_ascii_value_parse(snd_ctl_t *handle,
 	type = snd_ctl_elem_info_get_type(info);
 	count = snd_ctl_elem_info_get_count(info);
 	snd_ctl_elem_value_set_id(dst, &myid);
+
+	if (count > get_ctl_type_max_elements(type))
+		count = get_ctl_type_max_elements(type);
 	
-	for (idx = 0; idx < count && idx < 128 && ptr && *ptr; idx++) {
+	for (idx = 0; idx < count && ptr && *ptr; idx++) {
 		if (*ptr == ',')
 			goto skip;
 		switch (type) {