diff options
| author | Takashi Iwai <tiwai@suse.de> | 2017-06-02 16:03:38 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-06-14 16:06:04 +0300 |
| commit | 66e982d8f1a1f5e151377fe37612e9151e552dc9 (patch) | |
| tree | d5237c04cd2f70590198a39ce4a10726856b7cf1 /sound/soc/soc-core.c | |
| parent | aae14f569f5dbd13f9a7f34db8110e1658ef2c48 (diff) | |
| download | linux-66e982d8f1a1f5e151377fe37612e9151e552dc9.tar.xz | |
ALSA: timer: Fix race between read and ioctl
commit d11662f4f798b50d8c8743f433842c3e40fe3378 upstream.
The read from ALSA timer device, the function snd_timer_user_tread(),
may access to an uninitialized struct snd_timer_user fields when the
read is concurrently performed while the ioctl like
snd_timer_user_tselect() is invoked. We have already fixed the races
among ioctls via a mutex, but we seem to have forgotten the race
between read vs ioctl.
This patch simply applies (more exactly extends the already applied
range of) tu->ioctl_lock in snd_timer_user_tread() for closing the
race window.
Reported-by: Alexander Potapenko <glider@google.com>
Tested-by: Alexander Potapenko <glider@google.com>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'sound/soc/soc-core.c')
0 files changed, 0 insertions, 0 deletions