6 files changed, 48 insertions, 25 deletions

diff --git a/sound/drivers/vx/vx_cmd.c b/sound/drivers/vx/vx_cmd.c
index 7a221349f285..9529e3bf2866 100644
--- a/sound/drivers/vx/vx_cmd.c
+++ b/sound/drivers/vx/vx_cmd.c
@@ -20,7 +20,6 @@
  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
  */
 
-#include <sound/driver.h>
 #include <sound/core.h>
 #include <sound/pcm.h>
 #include <sound/vx_core.h>
diff --git a/sound/drivers/vx/vx_core.c b/sound/drivers/vx/vx_core.c
index ed19bc17400b..99538862e342 100644
--- a/sound/drivers/vx/vx_core.c
+++ b/sound/drivers/vx/vx_core.c
@@ -20,7 +20,6 @@
  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
  */
 
-#include <sound/driver.h>
 #include <linux/delay.h>
 #include <linux/slab.h>
 #include <linux/interrupt.h>
diff --git a/sound/drivers/vx/vx_hwdep.c b/sound/drivers/vx/vx_hwdep.c
index 9a8154c9416e..1dfe6948e6ff 100644
--- a/sound/drivers/vx/vx_hwdep.c
+++ b/sound/drivers/vx/vx_hwdep.c
@@ -20,7 +20,6 @@
  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
  */
 
-#include <sound/driver.h>
 #include <linux/device.h>
 #include <linux/firmware.h>
 #include <linux/vmalloc.h>
diff --git a/sound/drivers/vx/vx_mixer.c b/sound/drivers/vx/vx_mixer.c
index b8fcd79a7e11..5a347321f8c0 100644
--- a/sound/drivers/vx/vx_mixer.c
+++ b/sound/drivers/vx/vx_mixer.c
@@ -20,7 +20,6 @@
  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
  */
 
-#include <sound/driver.h>
 #include <sound/core.h>
 #include <sound/control.h>
 #include <sound/tlv.h>
@@ -439,14 +438,19 @@ static int vx_output_level_put(struct snd_kcontrol *kcontrol, struct snd_ctl_ele
 {
         struct vx_core *chip = snd_kcontrol_chip(kcontrol);
         int codec = kcontrol->id.index;
+        unsigned int val[2], vmax;
+
+        vmax = chip->hw->output_level_max;
+        val[0] = ucontrol->value.integer.value[0];
+        val[1] = ucontrol->value.integer.value[1];
+        if (val[0] > vmax || val[1] > vmax)
+                return -EINVAL;
         mutex_lock(&chip->mixer_mutex);
-        if (ucontrol->value.integer.value[0] != chip->output_level[codec][0] ||
-            ucontrol->value.integer.value[1] != chip->output_level[codec][1]) {
-                vx_set_analog_output_level(chip, codec,
-                                           ucontrol->value.integer.value[0],
-                                           ucontrol->value.integer.value[1]);
-                chip->output_level[codec][0] = ucontrol->value.integer.value[0];
-                chip->output_level[codec][1] = ucontrol->value.integer.value[1];
+        if (val[0] != chip->output_level[codec][0] ||
+            val[1] != chip->output_level[codec][1]) {
+                vx_set_analog_output_level(chip, codec, val[0], val[1]);
+                chip->output_level[codec][0] = val[0];
+                chip->output_level[codec][1] = val[1];
                 mutex_unlock(&chip->mixer_mutex);
                 return 1;
         }
@@ -506,6 +510,14 @@ static int vx_audio_src_get(struct snd_kcontrol *kcontrol, struct snd_ctl_elem_v
 static int vx_audio_src_put(struct snd_kcontrol *kcontrol, struct snd_ctl_elem_value *ucontrol)
 {
         struct vx_core *chip = snd_kcontrol_chip(kcontrol);
+
+        if (chip->type >= VX_TYPE_VXPOCKET) {
+                if (ucontrol->value.enumerated.item[0] > 2)
+                        return -EINVAL;
+        } else {
+                if (ucontrol->value.enumerated.item[0] > 1)
+                        return -EINVAL;
+        }
         mutex_lock(&chip->mixer_mutex);
         if (chip->audio_source_target != ucontrol->value.enumerated.item[0]) {
                 chip->audio_source_target = ucontrol->value.enumerated.item[0];
@@ -554,6 +566,9 @@ static int vx_clock_mode_get(struct snd_kcontrol *kcontrol, struct snd_ctl_elem_
 static int vx_clock_mode_put(struct snd_kcontrol *kcontrol, struct snd_ctl_elem_value *ucontrol)
 {
         struct vx_core *chip = snd_kcontrol_chip(kcontrol);
+
+        if (ucontrol->value.enumerated.item[0] > 2)
+                return -EINVAL;
         mutex_lock(&chip->mixer_mutex);
         if (chip->clock_mode != ucontrol->value.enumerated.item[0]) {
                 chip->clock_mode = ucontrol->value.enumerated.item[0];
@@ -603,12 +618,17 @@ static int vx_audio_gain_put(struct snd_kcontrol *kcontrol, struct snd_ctl_elem_
         struct vx_core *chip = snd_kcontrol_chip(kcontrol);
         int audio = kcontrol->private_value & 0xff;
         int capture = (kcontrol->private_value >> 8) & 1;
+        unsigned int val[2];
 
+        val[0] = ucontrol->value.integer.value[0];
+        val[1] = ucontrol->value.integer.value[1];
+        if (val[0] > CVAL_MAX || val[1] > CVAL_MAX)
+                return -EINVAL;
         mutex_lock(&chip->mixer_mutex);
-        if (ucontrol->value.integer.value[0] != chip->audio_gain[capture][audio] ||
-            ucontrol->value.integer.value[1] != chip->audio_gain[capture][audio+1]) {
-                vx_set_audio_gain(chip, audio, capture, ucontrol->value.integer.value[0]);
-                vx_set_audio_gain(chip, audio+1, capture, ucontrol->value.integer.value[1]);
+        if (val[0] != chip->audio_gain[capture][audio] ||
+            val[1] != chip->audio_gain[capture][audio+1]) {
+                vx_set_audio_gain(chip, audio, capture, val[0]);
+                vx_set_audio_gain(chip, audio+1, capture, val[1]);
                 mutex_unlock(&chip->mixer_mutex);
                 return 1;
         }
@@ -632,13 +652,19 @@ static int vx_audio_monitor_put(struct snd_kcontrol *kcontrol, struct snd_ctl_el
 {
         struct vx_core *chip = snd_kcontrol_chip(kcontrol);
         int audio = kcontrol->private_value & 0xff;
+        unsigned int val[2];
+
+        val[0] = ucontrol->value.integer.value[0];
+        val[1] = ucontrol->value.integer.value[1];
+        if (val[0] > CVAL_MAX || val[1] > CVAL_MAX)
+                return -EINVAL;
 
         mutex_lock(&chip->mixer_mutex);
-        if (ucontrol->value.integer.value[0] != chip->audio_monitor[audio] ||
-            ucontrol->value.integer.value[1] != chip->audio_monitor[audio+1]) {
-                vx_set_monitor_level(chip, audio, ucontrol->value.integer.value[0],
+        if (val[0] != chip->audio_monitor[audio] ||
+            val[1] != chip->audio_monitor[audio+1]) {
+                vx_set_monitor_level(chip, audio, val[0],
                                      chip->audio_monitor_active[audio]);
-                vx_set_monitor_level(chip, audio+1, ucontrol->value.integer.value[1],
+                vx_set_monitor_level(chip, audio+1, val[1],
                                      chip->audio_monitor_active[audio+1]);
                 mutex_unlock(&chip->mixer_mutex);
                 return 1;
@@ -669,8 +695,10 @@ static int vx_audio_sw_put(struct snd_kcontrol *kcontrol, struct snd_ctl_elem_va
         mutex_lock(&chip->mixer_mutex);
         if (ucontrol->value.integer.value[0] != chip->audio_active[audio] ||
             ucontrol->value.integer.value[1] != chip->audio_active[audio+1]) {
-                vx_set_audio_switch(chip, audio, ucontrol->value.integer.value[0]);
-                vx_set_audio_switch(chip, audio+1, ucontrol->value.integer.value[1]);
+                vx_set_audio_switch(chip, audio,
+                                    !!ucontrol->value.integer.value[0]);
+                vx_set_audio_switch(chip, audio+1,
+                                    !!ucontrol->value.integer.value[1]);
                 mutex_unlock(&chip->mixer_mutex);
                 return 1;
         }
@@ -699,9 +727,9 @@ static int vx_monitor_sw_put(struct snd_kcontrol *kcontrol, struct snd_ctl_elem_
         if (ucontrol->value.integer.value[0] != chip->audio_monitor_active[audio] ||
             ucontrol->value.integer.value[1] != chip->audio_monitor_active[audio+1]) {
                 vx_set_monitor_level(chip, audio, chip->audio_monitor[audio],
-                                     ucontrol->value.integer.value[0]);
+                                     !!ucontrol->value.integer.value[0]);
                 vx_set_monitor_level(chip, audio+1, chip->audio_monitor[audio+1],
-                                     ucontrol->value.integer.value[1]);
+                                     !!ucontrol->value.integer.value[1]);
                 mutex_unlock(&chip->mixer_mutex);
                 return 1;
         }
diff --git a/sound/drivers/vx/vx_pcm.c b/sound/drivers/vx/vx_pcm.c
index 7e65a103fbb2..fdbf86571b1f 100644
--- a/sound/drivers/vx/vx_pcm.c
+++ b/sound/drivers/vx/vx_pcm.c
@@ -45,7 +45,6 @@
  *  - scheduled action on the stream.
  */
 
-#include <sound/driver.h>
 #include <linux/slab.h>
 #include <linux/vmalloc.h>
 #include <linux/delay.h>
diff --git a/sound/drivers/vx/vx_uer.c b/sound/drivers/vx/vx_uer.c
index 7400306b7f28..fb8932af888d 100644
--- a/sound/drivers/vx/vx_uer.c
+++ b/sound/drivers/vx/vx_uer.c
@@ -20,7 +20,6 @@
  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307 USA
  */
 
-#include <sound/driver.h>
 #include <linux/delay.h>
 #include <sound/core.h>
 #include <sound/vx_core.h>