From 66ad172c4af96d4bb055206da7d81fe1130c3dd8 Mon Sep 17 00:00:00 2001 From: Guennadi Liakhovetski Date: Fri, 21 Aug 2026 13:00:55 +0200 Subject: [PATCH] audio: mux: fix a blob size check Before dereferencing the data blob make sure that it matches the expected size, not just isn't exceeding the maximum size. Signed-off-by: Guennadi Liakhovetski --- src/audio/mux/mux_ipc4.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/audio/mux/mux_ipc4.c b/src/audio/mux/mux_ipc4.c index f5ead3a93368..8f33e44ea1ae 100644 --- a/src/audio/mux/mux_ipc4.c +++ b/src/audio/mux/mux_ipc4.c @@ -148,7 +148,7 @@ int mux_params(struct processing_module *mod) int ret; cfg = comp_get_data_blob(cd->model_handler, &blob_size, NULL); - if (!cfg || blob_size > MUX_BLOB_MAX_SIZE) { + if (!cfg || blob_size != sizeof(*cfg)) { comp_err(mod->dev, "illegal blob size %zu", blob_size); return -EINVAL; }