[greybus-dev] Re: staging: greybus: audio: possible out of bounds read in the topology parser

On Fri, Jun 19, 2026 at 10:36:10AM +0800, Maoyi Xie wrote:

Hi all,

I think the Greybus audio topology parser in drivers/staging/greybus/audio_topology.c can read past the topology blob when a module reports inconsistent counts.

The kernel trusts the hardware, and the drivers have never been reviewed or audited for if the hardware does not report the correct data. I'm sure there are lots of code paths that are buggy if the hardware starts to do odd things. If this is a threat model you worry about, and wish to address, wonderful, there should be lots of code to change :)

But for now, Linux assumes that the hardware is trustworthy once a driver is bound to a device.

thanks,

greg k-h