1. 05 Aug, 2020 1 commit
    • Takashi Iwai's avatar
      ALSA: seq: oss: Serialize ioctls · 80982c7e
      Takashi Iwai authored
      Some ioctls via OSS sequencer API may race and lead to UAF when the
      port create and delete are performed concurrently, as spotted by a
      couple of syzkaller cases.  This patch is an attempt to address it by
      serializing the ioctls with the existing register_mutex.
      
      Basically OSS sequencer API is an obsoleted interface and was designed
      without much consideration of the concurrency.  There are very few
      applications with it, and the concurrent performance isn't asked,
      hence this "big hammer" approach should be good enough.
      
      Reported-by: syzbot+1a54a94bd32716796edd@syzkaller.appspotmail.com
      Reported-by: syzbot+9d2abfef257f3e2d4713@syzkaller.appspotmail.com
      Suggested-by: default avatarHillf Danton <hdanton@sina.com>
      Cc: <stable@vger.kernel.org>
      Link: https://lore.kernel.org/r/20200804185815.2453-1-tiwai@suse.deSigned-off-by: default avatarTakashi Iwai <tiwai@suse.de>
      80982c7e
  2. 04 Aug, 2020 2 commits
  3. 03 Aug, 2020 7 commits
  4. 02 Aug, 2020 1 commit
  5. 01 Aug, 2020 2 commits
  6. 31 Jul, 2020 10 commits
  7. 30 Jul, 2020 17 commits