Takashi Iwai 80f6a124a3 ALSA: seq: Fix race at closing in virmidi driver ... commit 2d1b5c08366acd46c35a2e9aba5d650cb5bf5c19 upstream. The virmidi driver has an open race at closing its assigned rawmidi device, and this may lead to use-after-free in snd_seq_deliver_single_event(). Plug the hole by properly protecting the linked list deletion and calling in the right order in snd_virmidi_input_close(). BugLink: http://lkml.kernel.org/r/CACT4Y+Zd66+w12fNN85-425cVQT=K23kWbhnCEcMB8s3us-Frw@mail.gmail.com Reported-by: Dmitry Vyukov <dvyukov@google.com> Tested-by: Dmitry Vyukov <dvyukov@google.com> Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2016-02-17 12:30:59 -08:00
..
aoa
arm
atmel
core	ALSA: seq: Fix race at closing in virmidi driver	2016-02-17 12:30:59 -08:00
drivers	ALSA: dummy: Disable switching timer backend via sysfs	2016-02-17 12:30:58 -08:00
firewire	ALSA: bebob: Use a signed return type for get_formation_index	2016-02-17 12:30:58 -08:00
hda	ALSA: hda - Add / fix kernel doc comments	2015-10-28 12:37:29 +01:00
i2c
isa	ALSA: Add missing dependency on CONFIG_SND_TIMER	2016-02-17 12:30:58 -08:00
mips
oss
parisc
pci	ALSA: hda/realtek - Support Dell headset mode for ALC225	2016-02-17 12:30:59 -08:00
pcmcia
ppc
sh
soc	ASoC: dpcm: fix the BE state on hw_free	2016-02-17 12:30:59 -08:00
sparc	ALSA: Add missing dependency on CONFIG_SND_TIMER	2016-02-17 12:30:58 -08:00
spi
synth	ALSA: synth: Fix conflicting OSS device registration on AWE32	2015-10-05 16:55:09 +02:00
usb	ALSA: usb-audio: avoid freeing umidi object twice	2016-02-17 12:30:58 -08:00
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c	sound: fix check for error condition of register_chrdev()	2015-11-07 11:14:30 +01:00
sound_firmware.c