Takashi Iwai c1cfd9025c ALSA: rawmidi: Avoid racy info ioctl via ctl device ... The rawmidi also allows to obtaining the information via ioctl of ctl API. It means that user can issue an ioctl to the rawmidi device even when it's being removed as long as the control device is present. Although the code has some protection via the global register_mutex, its range is limited to the search of the corresponding rawmidi object, and the mutex is already unlocked at accessing the rawmidi object. This may lead to a use-after-free. For avoiding it, this patch widens the application of register_mutex to the whole snd_rawmidi_info_select() function. We have another mutex per rawmidi object, but this operation isn't very hot path, so it shouldn't matter from the performance POV. Cc: <stable@vger.kernel.org> Signed-off-by: Takashi Iwai <tiwai@suse.de>		2017-12-14 16:52:31 +01:00
..
oss	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
seq	ALSA: seq: Remove spurious WARN_ON() at timer check	2017-11-30 10:08:28 +01:00
compress_offload.c	ALSA: compress: Remove unused variable	2017-09-18 15:45:01 +02:00
control_compat.c	ALSA: Get rid of card power_lock	2017-08-30 20:44:29 +02:00
control.c	ALSA: Get rid of card power_lock	2017-08-30 20:44:29 +02:00
ctljack.c	ALSA: declare snd_kcontrol_new structures as const	2017-05-30 10:29:25 +02:00
device.c	ALSA: core: Use %pS printk format for direct addresses	2017-09-07 10:36:02 +02:00
hrtimer.c	Merge branch 'for-next' into for-linus	2017-11-13 15:43:13 +01:00
hwdep_compat.c	[PATCH] hwdep_compat missed __user annotations	2006-10-10 15:37:21 -07:00
hwdep.c	ALSA: hwdep: prevent a harmless shift wrapping bug	2017-09-18 15:42:00 +02:00
info_oss.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
info.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
init.c	ALSA: add snd_card_disconnect_sync()	2017-10-11 15:06:10 +02:00
isadma.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
jack.c	ALSA: fix kernel-doc build warning	2017-10-30 08:10:07 +01:00
Kconfig	ALSA: seq: Allow the modular sequencer registration	2017-06-12 08:43:33 +02:00
Makefile	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
memalloc.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
memory.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
misc.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
pcm_compat.c	ALSA: pcm: Fix structure definition for X32 ABI	2017-09-22 11:23:48 +02:00
pcm_dmaengine.c	ASoC: dmaengine_pcm: Add support for packed transfers	2016-04-27 17:34:11 +01:00
pcm_drm_eld.c	ALSA: pcm: use helper function to refer parameter as read-only	2017-05-17 07:24:39 +02:00
pcm_iec958.c	ALSA: pcm: Allow 32 bit sample format in IEC958 channel status helper	2016-04-06 14:33:38 -07:00
pcm_lib.c	ALSA: pcm: update tstamp only if audio_tstamp changed	2017-11-21 13:59:19 +01:00
pcm_local.h	ALSA: pcm: unify codes to operate application-side position on PCM buffer	2017-06-12 08:49:22 +02:00
pcm_memory.c	ALSA: pcm: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:18:58 +02:00
pcm_misc.c	ALSA: pcm: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:18:58 +02:00
pcm_native.c	ALSA: pcm: remove redundant variable runtime	2017-10-16 13:35:36 +02:00
pcm_param_trace.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
pcm_timer.c	ALSA: pcm: include pcm_local.h and remove some extraneous tabs	2017-05-30 18:04:47 +02:00
pcm_trace.h	License cleanup: add SPDX GPL-2.0 license identifier to files with no license	2017-11-02 11:10:55 +01:00
pcm.c	ALSA: pcm: prevent UAF in snd_pcm_info	2017-12-05 23:28:08 +01:00
rawmidi_compat.c	ALSA: rawmidi: Fix ioctls X32 ABI	2016-02-28 17:44:51 +01:00
rawmidi.c	ALSA: rawmidi: Avoid racy info ioctl via ctl device	2017-12-14 16:52:31 +01:00
seq_device.c	ALSA: seq: Cancel pending autoload work at unbinding device	2017-09-12 12:41:20 +02:00
sgbuf.c	ALSA: core: Deletion of unnecessary checks before two function calls	2014-11-21 20:06:57 +01:00
sound_oss.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
sound.c	ALSA: core: Follow standard EXPORT_SYMBOL() declarations	2017-06-16 16:19:16 +02:00
timer_compat.c	ALSA: timer: Remove kernel warning at compat ioctl error paths	2017-11-21 16:36:11 +01:00
timer.c	Merge branch 'for-next' into for-linus	2017-11-13 15:43:13 +01:00
vmaster.c	ALSA: hda - Fix yet remaining issue with vmaster 0dB initialization	2017-11-22 12:34:56 +01:00