Takashi Iwai 104c513189 ALSA: seq: Fix potential concurrent access to the deleted pool ...

commit 75545304eb upstream.

The input pool of a client might be deleted via the resize ioctl, the
the access to it should be covered by the proper locks.  Currently the
only missing place is the call in snd_seq_ioctl_get_client_pool(), and
this patch papers over it.

Reported-by: syzbot+4a75454b9ca2777f35c7@syzkaller.appspotmail.com
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2019-09-06 10:19:46 +02:00

..

oss

ALSA: seq: fix incorrect order of dest_client/dest_ports arguments

2019-07-10 09:55:45 +02:00

Kconfig

ALSA: clean up the logic for building sequencer modules

2009-05-29 11:49:42 +02:00

Makefile

ALSA: core: Fix randconfig build wrt CONFIG_PROC_FS

2015-05-29 07:21:02 +02:00

seq_clientmgr.c

ALSA: seq: Fix potential concurrent access to the deleted pool

2019-09-06 10:19:46 +02:00

seq_clientmgr.h

ALSA: seq: Make ioctls race-free

2018-01-23 19:57:04 +01:00

seq_compat.c

ALSA: seq: fix passing wrong pointer in function call of compatibility layer

2016-10-12 20:09:36 +02:00

seq_device.c

ALSA: seq: Cancel pending autoload work at unbinding device

2017-11-18 11:22:24 +01:00

seq_dummy.c

ALSA: seq: Drop snd_seq_autoload_lock() and _unlock()

2015-02-12 14:42:31 +01:00

seq_fifo.c

ALSA: seq: Fix potential concurrent access to the deleted pool

2019-09-06 10:19:46 +02:00

seq_fifo.h

ALSA: seq: Fix potential concurrent access to the deleted pool

2019-09-06 10:19:46 +02:00

seq_info.c

ALSA: core: Build conditionally and remove superfluous ifdefs

2015-04-24 17:31:07 +02:00

seq_info.h

ALSA: replace CONFIG_PROC_FS with CONFIG_SND_PROC_FS

2015-05-27 21:25:19 +02:00

seq_lock.c

ALSA: seq: Enable 'use' locking in all configurations

2017-10-27 10:38:07 +02:00

seq_lock.h

ALSA: seq: Enable 'use' locking in all configurations

2017-10-27 10:38:07 +02:00

seq_memory.c

ALSA: seq: More protection for concurrent write and ioctl races

2018-03-18 11:18:51 +01:00

seq_memory.h

ALSA: seq: More protection for concurrent write and ioctl races

2018-03-18 11:18:51 +01:00

seq_midi_emul.c

ALSA: seq: potential out of bounds in do_control()

2015-02-12 11:07:48 +01:00

seq_midi_event.c

sound: Add module.h to the previously silent sound users

2011-10-31 19:31:21 -04:00

seq_midi.c

ALSA: seq: Drop snd_seq_autoload_lock() and _unlock()

2015-02-12 14:42:31 +01:00

seq_ports.c

ALSA: seq: Fix race of get-subscription call vs port-delete ioctls

2019-06-22 08:17:19 +02:00

seq_ports.h

ALSA: seq: Fix race of get-subscription call vs port-delete ioctls

2019-06-22 08:17:19 +02:00

seq_prioq.c

ALSA: seq: Fix possible UAF in snd_seq_check_queue()

2018-03-22 09:17:59 +01:00

seq_prioq.h

ALSA: seq: Fix possible UAF in snd_seq_check_queue()

2018-03-22 09:17:59 +01:00

seq_queue.c

ALSA: seq: Fix possible UAF in snd_seq_check_queue()

2018-03-22 09:17:59 +01:00

seq_queue.h

ALSA: seq: 2nd attempt at fixing race creating a queue

2017-08-24 17:12:19 -07:00

seq_system.c

sound: Add export.h for THIS_MODULE/EXPORT_SYMBOL where needed

2011-10-31 19:31:22 -04:00

seq_system.h

[ALSA] Remove xxx_t typedefs: Sequencer

2006-01-03 12:17:52 +01:00

seq_timer.c

ALSA: seq: Remove spurious WARN_ON() at timer check

2017-12-14 09:28:13 +01:00

seq_timer.h

ALSA: seq_timer: use monotonic times internally

2016-06-17 22:56:13 +02:00

seq_virmidi.c

ALSA: virmidi: Fix too long output trigger loop

2018-08-22 07:47:14 +02:00

seq.c

ALSA: timer: remove legacy rtctimer

2016-04-25 10:41:46 +02:00