tree 82ca848d43781892264c14548e7bfc85c18d79bb
parent 50456c9b5eb3fdb8c7ef997c7face8bad8cb8ea6
author Andrew Scull <ascull@google.com> 1648982353 +0000
committer Tom Rini <trini@konsulko.com> 1651245096 -0400

sound: Fix buffer overflow in square wave generation

Data is written for each channel but is only tracked as having one
channel written. This resulted in a buffer overflow and corruption of
the allocator's metadata which caused further problems when the buffer
was later freed. This could be observed with sandbox unit tests.

Resolve the overflow by tracking the writes for each channel.

Fixes: f987177db9 ("dm: sound: Use the correct number of channels for sound")
Signed-off-by: Andrew Scull <ascull@google.com>
Cc: Simon Glass <sjg@chromium.org>
Reviewed-by: Simon Glass <sjg@chromium.org>