[greybus-dev] Re: [PATCH] staging: greybus: audio_codec: fix stack overflow in stream name parsing

On Tue, Sep 01, 2026 at 01:56:00PM -0500, Yudi Yang wrote:

intf_name and dir are 32-byte buffers. Parsing a module-provided AIF stream name with unbounded %s conversions can cause buffer-overwrites. Limit each conversion to 31 characters.

Fixes: 60e7327d54b2 ("greybus: audio: Find data connection based on id") Cc: stable@vger.kernel.org Signed-off-by: Yudi Yang 2000jedi@gmail.com

---

drivers/staging/greybus/audio_codec.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

How was this found and tested?

thanks,

greg k-h