ALSA: seq: Fix potential concurrent access to the deleted pool
authorTakashi Iwai <tiwai@suse.de>
Sun, 25 Aug 2019 07:21:44 +0000 (09:21 +0200)
committerTakashi Iwai <tiwai@suse.de>
Sun, 25 Aug 2019 07:31:10 +0000 (09:31 +0200)
commit75545304eba6a3d282f923b96a466dc25a81e359
tree0b05723013a1044e1518b8b2612fe6f4f1cd5135
parentf9f0e9ed350e15d51ad07364b4cf910de50c472a
ALSA: seq: Fix potential concurrent access to the deleted pool

The input pool of a client might be deleted via the resize ioctl, the
the access to it should be covered by the proper locks.  Currently the
only missing place is the call in snd_seq_ioctl_get_client_pool(), and
this patch papers over it.

Reported-by: syzbot+4a75454b9ca2777f35c7@syzkaller.appspotmail.com
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/core/seq/seq_clientmgr.c
sound/core/seq/seq_fifo.c
sound/core/seq/seq_fifo.h