diff options
| author | Takashi Iwai <tiwai@suse.de> | 2017-02-08 14:35:39 +0300 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2017-03-16 05:27:11 +0300 |
| commit | fbe20cd70e1b964cc4959ba28765e06b5b25d038 (patch) | |
| tree | 8e5f16d69eae81c26ee3f0fe1807a92576b0fc44 /lib/Makefile | |
| parent | 0c68b1b69d50a97df1947684637c7a60f15f08e8 (diff) | |
| download | linux-fbe20cd70e1b964cc4959ba28765e06b5b25d038.tar.xz | |
ALSA: seq: Fix race at creating a queue
commit 4842e98f26dd80be3623c4714a244ba52ea096a8 upstream.
When a sequencer queue is created in snd_seq_queue_alloc(),it adds the
new queue element to the public list before referencing it. Thus the
queue might be deleted before the call of snd_seq_queue_use(), and it
results in the use-after-free error, as spotted by syzkaller.
The fix is to reference the queue object at the right time.
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'lib/Makefile')
0 files changed, 0 insertions, 0 deletions