diff options
| author | Takashi Iwai <[email protected]> | 2017-10-29 10:02:04 +0000 |
|---|---|---|
| committer | Takashi Iwai <[email protected]> | 2017-10-31 07:28:16 +0000 |
| commit | 79fb0518fec8c8b4ea7f1729f54f293724b3dbb0 (patch) | |
| tree | 18d39bf1e0f6241a4ec148415b423e1f3f940251 /net/switchdev/switchdev.c | |
| parent | ALSA: hda - fix headset mic problem for Dell machines with alc236 (diff) | |
| download | kernel-79fb0518fec8c8b4ea7f1729f54f293724b3dbb0.tar.gz kernel-79fb0518fec8c8b4ea7f1729f54f293724b3dbb0.zip | |
ALSA: timer: Add missing mutex lock for compat ioctls
The races among ioctl and other operations were protected by the
commit af368027a49a ("ALSA: timer: Fix race among timer ioctls") and
later fixes, but one code path was forgotten in the scenario: the
32bit compat ioctl. As syzkaller recently spotted, a very similar
use-after-free may happen with the combination of compat ioctls.
The fix is simply to apply the same ioctl_lock to the compat_ioctl
callback, too.
Fixes: af368027a49a ("ALSA: timer: Fix race among timer ioctls")
Reference: http://lkml.kernel.org/r/[email protected]
Reported-by: syzbot <bot+e5f3c9783e7048a74233054febbe9f1bdf54b6da@syzkaller.appspotmail.com>
Cc: <[email protected]>
Signed-off-by: Takashi Iwai <[email protected]>
Diffstat (limited to 'net/switchdev/switchdev.c')
0 files changed, 0 insertions, 0 deletions