Takashi Iwai 2eabc5ec8a ALSA: seq: Fix race of get-subscription call vs port-delete ioctls ... The snd_seq_ioctl_get_subscription() retrieves the port subscriber information as a pointer, while the object isn't protected, hence it may be deleted before the actual reference. This race was spotted by syzkaller and may lead to a UAF. The fix is simply copying the data in the lookup function that performs in the rwsem to protect against the deletion. Reported-by: syzbot+9437020c82413d00222d@syzkaller.appspotmail.com Signed-off-by: Takashi Iwai <tiwai@suse.de>		2019-04-09 18:54:13 +02:00
..
oss	ALSA: seq: oss: Use the standard fall-through annotation	2018-10-12 09:31:29 +02:00
Kconfig	…
Makefile	…
seq.c	ALSA: seq: Fix leftovers at probe error path	2018-08-01 22:54:36 +02:00
seq_clientmgr.c	ALSA: seq: Fix race of get-subscription call vs port-delete ioctls	2019-04-09 18:54:13 +02:00
seq_clientmgr.h	…
seq_compat.c	…
seq_dummy.c	…
seq_fifo.c	ALSA: seq: Remove superfluous irqsave flags	2019-04-09 17:22:46 +02:00
seq_fifo.h	…
seq_info.c	ALSA: seq: Fix leftovers at probe error path	2018-08-01 22:54:36 +02:00
seq_info.h	ALSA: seq: Fix leftovers at probe error path	2018-08-01 22:54:36 +02:00
seq_lock.c	…
seq_lock.h	…
seq_memory.c	ALSA: seq: Remove superfluous irqsave flags	2019-04-09 17:22:46 +02:00
seq_memory.h	ALSA: seq: Remove dead codes	2018-08-01 22:54:35 +02:00
seq_midi.c	ALSA: seq: Minor cleanup of MIDI event parser helpers	2018-08-01 22:54:35 +02:00
seq_midi_emul.c	ALSA: seq: Mark expected switch fall-through	2018-08-04 08:30:36 +02:00
seq_midi_event.c	ALSA: seq: Remove dead codes	2018-08-01 22:54:35 +02:00
seq_ports.c	ALSA: seq: Fix race of get-subscription call vs port-delete ioctls	2019-04-09 18:54:13 +02:00
seq_ports.h	ALSA: seq: Fix race of get-subscription call vs port-delete ioctls	2019-04-09 18:54:13 +02:00
seq_prioq.c	ALSA: seq: Fix possible UAF in snd_seq_check_queue()	2018-03-10 17:29:49 +01:00
seq_prioq.h	ALSA: seq: Fix possible UAF in snd_seq_check_queue()	2018-03-10 17:29:49 +01:00
seq_queue.c	ALSA: seq: Fix leftovers at probe error path	2018-08-01 22:54:36 +02:00
seq_queue.h	ALSA: seq: Drop unused 64bit division macros	2018-08-01 22:54:37 +02:00
seq_system.c	ALSA: seq: Do error checks at creating system ports	2018-08-28 12:52:02 +02:00
seq_system.h	…
seq_timer.c	ALSA: seq: Avoid open-code for getting timer resolution	2018-05-18 08:49:13 +02:00
seq_timer.h	ALSA: seq: Process queue tempo/ppq change in a shot	2018-01-15 16:48:36 +01:00
seq_virmidi.c	ALSA: rawmidi: A lightweight function to discard pending bytes	2018-10-04 20:13:17 +02:00