Bug#915968: mediastreamer2: Buffer overrun in alsa_card_detect()

[Magnus Holmgren]

Source: mediastreamer2
Version: 1:2.16.1-4
Severity: important
Tags: upstream

alsa_card_detect() has a limit (MAX_NUM_DEVICE_ID = 100) to the number of cards it can handle, because it stores card and device names in arrays of that fixed size, but it doesn't stop if hint_device_count goes beyond that limit. I appear to have more than 100 total recording and playback devices, which causes Linphone to crash on startup.

Of course, simply stopping enumeration after 100 devices could mean that a desired device is missed, so that's not quite satisfactory either.

-- System Information:
Debian Release: buster/sid
  APT prefers testing-debug
  APT policy: (500, 'testing-debug'), (500, 'stable-debug'), (500, 'testing'), (500, 'stable'), (500, 'oldstable'), (10, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=sv_SE.UTF-8, LC_CTYPE=sv_SE.UTF-8 (charmap=UTF-8), LANGUAGE= (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)