On Tue, Sep 01, 2026 at 01:56:00PM -0500, Yudi Yang wrote:
intf_name and dir are 32-byte buffers. Parsing a module-provided AIF stream name with unbounded %s conversions can cause buffer-overwrites. Limit each conversion to 31 characters.
How was this issue found?
thanks,
greg k-h