android_kernel_samsung_msm8976/sound/core
Takashi Iwai 61d13e61ac ALSA: timer: Fix race among timer ioctls
ALSA timer ioctls have an open race and this may lead to a
use-after-free of timer instance object.  A simplistic fix is to make
each ioctl exclusive.  We have already tread_sem for controlling the
tread, and extend this as a global mutex to be applied to each ioctl.

The downside is, of course, the worse concurrency.  But these ioctls
aren't to be parallel accessible, in anyway, so it should be fine to
serialize there.

b/28694392
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Tested-by: Dmitry Vyukov <dvyukov@google.com>
Cc: <stable@vger.kernel.org>
Git-commit: af368027a49a751d6ff4ee9e3f9961f35bb4fede
Git-repo: http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Dennis Cagle <d-cagle@codeaurora.org>
(cherry picked from commit af368027a49a751d6ff4ee9e3f9961f35bb4fede)
Change-Id: I9d45e3d142b42d5dee6ae54c25e78504c871eef8
2016-09-09 07:15:42 -07:00
..
oss
seq
compress_offload.c
control.c ASoC: Fix freed memory access of pcm stream kctl 2016-08-10 11:03:43 -07:00
control_compat.c
ctljack.c
device.c
hrtimer.c
hwdep.c
hwdep_compat.c
info.c
info_oss.c
init.c
isadma.c
jack.c
Kconfig
Makefile
memalloc.c
memory.c
misc.c
pcm.c ASoC: Fix freed memory access of pcm stream kctl 2016-08-10 11:03:43 -07:00
pcm_compat.c
pcm_lib.c
pcm_memory.c
pcm_misc.c
pcm_native.c
pcm_timer.c
rawmidi.c
rawmidi_compat.c
rtctimer.c
sgbuf.c
sound.c
sound_oss.c
timer.c ALSA: timer: Fix race among timer ioctls 2016-09-09 07:15:42 -07:00
timer_compat.c
vmaster.c