diff options
| author | Takashi Iwai <tiwai@suse.de> | 2017-06-02 15:03:38 +0200 |
|---|---|---|
| committer | Sean McCreary <mccreary@mcwest.org> | 2017-07-17 05:11:28 +0000 |
| commit | 383328af7afb960739522c523b54ed985169486a (patch) | |
| tree | 5e3fee3264318a7c7cb820ede904456355756e44 /lib/mpi/mpiutil.c | |
| parent | 0fad9715422b043358164125aebd5ac276c2caed (diff) | |
ALSA: timer: Fix race between read and ioctl
The read from ALSA timer device, the function snd_timer_user_tread(),
may access to an uninitialized struct snd_timer_user fields when the
read is concurrently performed while the ioctl like
snd_timer_user_tselect() is invoked. We have already fixed the races
among ioctls via a mutex, but we seem to have forgotten the race
between read vs ioctl.
This patch simply applies (more exactly extends the already applied
range of) tu->ioctl_lock in snd_timer_user_tread() for closing the
race window.
Change-Id: I3b539d6e01d86d5b9cbe813e2616894e6202225f
Reported-by: Alexander Potapenko <glider@google.com>
Tested-by: Alexander Potapenko <glider@google.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Diffstat (limited to 'lib/mpi/mpiutil.c')
0 files changed, 0 insertions, 0 deletions