diff options
author | Takashi Iwai <tiwai@suse.de> | 2016-02-08 19:26:58 +0300 |
---|---|---|
committer | Ben Hutchings <ben@decadent.org.uk> | 2016-02-27 17:28:48 +0300 |
commit | c65409e6175adaaf9430a8b12111afcda58c7dce (patch) | |
tree | 47a9a712f36b7aeaf2c3a4e054937a77e625690a /net/lapb/lapb_timer.c | |
parent | 8470405c5ed05d9b916801e54fd36acd909a4e6f (diff) | |
download | linux-c65409e6175adaaf9430a8b12111afcda58c7dce.tar.xz |
ALSA: timer: Fix race at concurrent reads
commit 4dff5c7b7093b19c19d3a100f8a3ad87cb7cd9e7 upstream.
snd_timer_user_read() has a potential race among parallel reads, as
qhead and qused are updated outside the critical section due to
copy_to_user() calls. Move them into the critical section, and also
sanitize the relevant code a bit.
Signed-off-by: Takashi Iwai <tiwai@suse.de>
[bwh: Backported to 3.2: there's no check for tu->connected to fix up]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'net/lapb/lapb_timer.c')
0 files changed, 0 insertions, 0 deletions