ALSA: seq: Fix potential concurrent access to the deleted pool
authorTakashi Iwai <tiwai@suse.de>
Sun, 25 Aug 2019 07:21:44 +0000 (09:21 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 6 Sep 2019 08:19:46 +0000 (10:19 +0200)
commit104c5131890f7e4a7b69eea9646425a606867685
tree4b33cd0ac3941d3159c854d8cd689b2af22dfe63
parentf595a1260357480136375b19ca7cb8f494b57ad9
ALSA: seq: Fix potential concurrent access to the deleted pool

commit 75545304eba6a3d282f923b96a466dc25a81e359 upstream.

The input pool of a client might be deleted via the resize ioctl, the
the access to it should be covered by the proper locks.  Currently the
only missing place is the call in snd_seq_ioctl_get_client_pool(), and
this patch papers over it.

Reported-by: syzbot+4a75454b9ca2777f35c7@syzkaller.appspotmail.com
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
sound/core/seq/seq_clientmgr.c
sound/core/seq/seq_fifo.c
sound/core/seq/seq_fifo.h