07ffc4b90f
Avoid a dynamic stack allocation in qjack_process(). Since this function is a JACK process callback, we are not permitted to malloc() here, so we allocate a working buffer in qjack_client_init() instead. The codebase has very few VLAs, and if we can get rid of them all we can make the compiler error on new additions. This is a defensive measure against security bugs where an on-stack dynamic allocation isn't correctly size-checked (e.g. CVE-2021-3527). Signed-off-by: Peter Maydell <peter.maydell@linaro.org> Reviewed-by: Marc-André Lureau <marcandre.lureau@redhat.com> Reviewed-by: Francisco Iglesias <frasse.iglesias@gmail.com> Reviewed-by: Christian Schoenebeck <qemu_oss@crudebyte.com> Message-id: 20230818155846.1651287-3-peter.maydell@linaro.org |
||
|---|---|---|
| .. | ||
| alsaaudio.c | ||
| audio_int.h | ||
| audio_legacy.c | ||
| audio_template.h | ||
| audio_win_int.c | ||
| audio_win_int.h | ||
| audio-hmp-cmds.c | ||
| audio.c | ||
| audio.h | ||
| coreaudio.m | ||
| dbusaudio.c | ||
| dsound_template.h | ||
| dsoundaudio.c | ||
| jackaudio.c | ||
| meson.build | ||
| mixeng_template.h | ||
| mixeng.c | ||
| mixeng.h | ||
| noaudio.c | ||
| ossaudio.c | ||
| paaudio.c | ||
| pwaudio.c | ||
| rate_template.h | ||
| sdlaudio.c | ||
| sndioaudio.c | ||
| spiceaudio.c | ||
| trace-events | ||
| trace.h | ||
| wavaudio.c | ||
| wavcapture.c | ||