]> www.infradead.org Git - users/dwmw2/linux.git/commit
ALSA: aloop: Add missing cable lock to ctl API callbacks
authorTakashi Iwai <tiwai@suse.de>
Mon, 30 Apr 2018 08:06:48 +0000 (10:06 +0200)
committerSasha Levin <alexander.levin@microsoft.com>
Wed, 23 May 2018 01:36:39 +0000 (21:36 -0400)
commitc9347b74016cf5390ba00ab67db85b96b6b277df
tree0f7beb5532d8acd87ffd6dfd19a7fc742a05e4c0
parente36ac3498fdb362ca74880f02694cb8fddcde2c2
ALSA: aloop: Add missing cable lock to ctl API callbacks

[ Upstream commit 76b3421b39bd610546931fc923edcf90c18fa395 ]

Some control API callbacks in aloop driver are too lazy to take the
loopback->cable_lock and it results in possible races of cable access
while it's being freed.  It eventually lead to a UAF, as reported by
fuzzer recently.

This patch covers such control API callbacks and add the proper mutex
locks.

Reported-by: DaeRyong Jeong <threeearcat@gmail.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
sound/drivers/aloop.c