ALSA: aloop: Add missing cable lock to ctl API callbacks
authorTakashi Iwai <tiwai@suse.de>
Mon, 30 Apr 2018 08:06:48 +0000 (10:06 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 9 May 2018 07:51:50 +0000 (09:51 +0200)
commitbd0e2aec5686bc5aa9b93f5609d35b483321f751
tree9da94378980b34ea9fe3b7d28d310363c79d1637
parent4e3460ae33c6a10d4908e3235070cbe0a7a3a280
ALSA: aloop: Add missing cable lock to ctl API callbacks

commit 76b3421b39bd610546931fc923edcf90c18fa395 upstream.

Some control API callbacks in aloop driver are too lazy to take the
loopback->cable_lock and it results in possible races of cable access
while it's being freed.  It eventually lead to a UAF, as reported by
fuzzer recently.

This patch covers such control API callbacks and add the proper mutex
locks.

Reported-by: DaeRyong Jeong <threeearcat@gmail.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
sound/drivers/aloop.c