alistair23-linux/sound
Takashi Iwai 1990603db1 ALSA: seq: Fix racy access for queue timer in proc read
commit 60adcfde92 upstream.

snd_seq_info_timer_read() reads the information of the timer assigned
for each queue, but it's done in a racy way which may lead to UAF as
spotted by syzkaller.

This patch applies the missing q->timer_mutex lock while accessing the
timer object as well as a slight code change to adapt the standard
coding style.

Reported-by: syzbot+2b2ef983f973e5c40943@syzkaller.appspotmail.com
Cc: <stable@vger.kernel.org>
Link: https://lore.kernel.org/r/20200115203733.26530-1-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2020-01-23 08:22:31 +01:00
..
ac97
aoa
arm
atmel
core ALSA: seq: Fix racy access for queue timer in proc read 2020-01-23 08:22:31 +01:00
drivers
firewire ALSA: dice: fix fallback from protocol extension into limited functionality 2020-01-23 08:22:30 +01:00
hda ALSA: hda: Fix regression by strip mask fix 2019-12-21 11:05:23 +01:00
i2c
isa ALSA: cs4236: fix error return comparison of an unsigned integer 2020-01-09 10:20:00 +01:00
mips
oss
parisc
pci ALSA: hda/realtek - Add quirk for the bass speaker on Lenovo Yoga X1 7th gen 2020-01-14 20:08:20 +01:00
pcmcia
ppc
sh
soc ASoC: Intel: bytcht_es8316: Fix Irbis NB41 netbook quirk 2020-01-23 08:22:30 +01:00
sparc
spi
synth
usb ALSA: usb-audio: Apply the sample rate quirk for Bose Companion 5 2020-01-14 20:08:19 +01:00
x86
xen
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c