)]}'
{
  "commit": "07ffc4b90f0c2b4ec13ba804fdffc56d49dff93c",
  "tree": "53b1d261522bb45a9cd6258d18aba7b4729f1a83",
  "parents": [
    "d71c3d305980b38c6e6794da7401172ac0fec891"
  ],
  "author": {
    "name": "Peter Maydell",
    "email": "peter.maydell@linaro.org",
    "time": "Fri Aug 18 16:58:46 2023 +0100"
  },
  "committer": {
    "name": "Peter Maydell",
    "email": "peter.maydell@linaro.org",
    "time": "Thu Sep 21 16:07:14 2023 +0100"
  },
  "message": "audio/jackaudio: Avoid dynamic stack allocation in qjack_process()\n\nAvoid a dynamic stack allocation in qjack_process().  Since this\nfunction is a JACK process callback, we are not permitted to malloc()\nhere, so we allocate a working buffer in qjack_client_init() instead.\n\nThe codebase has very few VLAs, and if we can get rid of them all we\ncan make the compiler error on new additions.  This is a defensive\nmeasure against security bugs where an on-stack dynamic allocation\nisn\u0027t correctly size-checked (e.g.  CVE-2021-3527).\n\nSigned-off-by: Peter Maydell \u003cpeter.maydell@linaro.org\u003e\nReviewed-by: Marc-André Lureau \u003cmarcandre.lureau@redhat.com\u003e\nReviewed-by: Francisco Iglesias \u003cfrasse.iglesias@gmail.com\u003e\nReviewed-by: Christian Schoenebeck \u003cqemu_oss@crudebyte.com\u003e\nMessage-id: 20230818155846.1651287-3-peter.maydell@linaro.org\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "7cb2a49f97144b22cce922a841f074bde2e5065f",
      "old_mode": 33188,
      "old_path": "audio/jackaudio.c",
      "new_id": "e1eaa3477dc67f9a3e63850d9eee5dd922680608",
      "new_mode": 33188,
      "new_path": "audio/jackaudio.c"
    }
  ]
}