snd_seq_ev_set_ump_data() stack smashing

[symdeb]

snd_seq_ev_set_ump_data(&umpev, buffer, len);

When called with len > 4 causes stack smashing. A ump messages is maximum four 32bit values. Proposal solution, return error when len > 4 ?

[tiwai]

Yes, a range check makes sense.