[alsa-devel] snd-hda-intel: HG regression - NULL pointer dereference

[Ivan N. Zlatev]

When loading snd-hda-intel from Alsa HG I get a NULL pointer
dereference and the trace below. The card is with the following codec:

Codec: SigmaTel STAC9228
Address: 0
Vendor Id: 0x83847616
Subsystem Id: 0x10280227
Revision Id: 0x100201

The trace:

ALSA /home/ivanz/svn/alsa/alsa-driver/pci/hda/hda_codec.c:2792:
autoconfig: line_outs=1 (0xf/0x0/0x0/0x0/0x0)
ALSA /home/ivanz/svn/alsa/alsa-driver/pci/hda/hda_codec.c:2796:
speaker_outs=1 (0xd/0x0/0x0/0x0/0x0)
ALSA /home/ivanz/svn/alsa/alsa-driver/pci/hda/hda_codec.c:2800:
hp_outs=1 (0xa/0x0/0x0/0x0/0x0)
ALSA /home/ivanz/svn/alsa/alsa-driver/pci/hda/hda_codec.c:2808:
inputs: mic=0x13, fmic=0x0, line=0xe, fline=0x0, cd=0x0, aux=0x0
ALSA /home/ivanz/svn/alsa/alsa-driver/pci/hda/../../alsa-kernel/pci/hda/patch_sigmatel.c:2088:
dac_nids=2 (0x5/0x4/0x0/0x0/0x0)
BUG: unable to handle kernel NULL pointer dereference at virtual
address 00000000
 printing eip:
f91cfcb0
*pde = 00000000
Oops: 0000 [#1]
SMP
last sysfs file: /devices/pci0000:00/0000:00:1c.1/0000:0c:00.0/cmd
Modules linked in: snd_hda_intel snd_pcm snd_timer snd_page_alloc
snd_hwdep snd soundcore nls_iso8859_1 nls_cp437 vfat fat usb_storage
ide_core rndis_host cdc_ether usbnet mii aes_i586 ieee80211_crypt_ccmp
af_packet xt_tcpudp xt_pkttype ipt_LOG xt_limit vboxdrv ipt_REJECT
xt_state iptable_mangle iptable_nat nf_nat iptable_filter
nf_conntrack_ipv4 nf_conntrack nfnetlink ip_tables ip6_tables x_tables
cpufreq_conservative cpufreq_userspace cpufreq_powersave acpi_cpufreq
speedstep_lib microcode apparmor loop dm_mod rfcomm l2cap nvidia(P)
ipw3945 sdhci ohci1394 ieee1394 mmc_core ieee80211 hci_usb ac
ieee80211_crypt battery i2c_i801 button tg3 rtc_cmos bluetooth
rtc_core sr_mod rtc_lib cdrom intel_agp firmware_class i2c_core
agpgart sg usbhid hid ff_memless sd_mod ehci_hcd uhci_hcd usbcore edd
ext3 mbcache jbd fan ata_piix ahci libata scsi_mod thermal processor
CPU:    1
EIP:    0060:[<f91cfcb0>]    Tainted: P      N VLI
EFLAGS: 00010246   (2.6.22.13-0.3-default #1)
EIP is at stac92xx_dmux_enum_put+0x28/0x3c [snd_hda_intel]
eax: 00000000   ebx: 00000000   ecx: f54b7014   edx: d7e241ec
esi: d7e24014   edi: f71e6014   ebp: 00000000   esp: d9ea1ea0
ds: 007b   es: 007b   fs: 00d8  gs: 0033  ss: 0068
Process alsactl (pid: 25097, ti=d9ea0000 task=c7457030 task.ti=d9ea0000)
Stack: 00000000 d7e240a4 f54b7014 cbe43694 fffffff3 f911c2b3 cbe43694 c2175154
       df8a4c14 df8a4d60 df8a4c14 00000000 f54b7014 df8a4dc4 f911cd85 cb940b7c
       c03c5aec f52693c0 f52693c0 bf8ef020 c2175154 c0172331 c016e87a dfbef2c0
Call Trace:
 [<f911c2b3>] snd_ctl_elem_write+0xa6/0xe6 [snd]
 [<f911cd85>] snd_ctl_ioctl+0x494/0x7af [snd]
 [<c0172331>] chrdev_open+0x0/0x133
 [<c016e87a>] __dentry_open+0xe4/0x178
 [<c016e988>] nameidata_to_filp+0x24/0x33
 [<c016e9ce>] do_filp_open+0x37/0x3e
 [<f911c8f1>] snd_ctl_ioctl+0x0/0x7af [snd]
 [<c017a13d>] do_ioctl+0x21/0xa0
 [<c017a3f3>] vfs_ioctl+0x237/0x249
 [<c017a451>] sys_ioctl+0x4c/0x67
 [<c0104e22>] sysenter_past_esp+0x6b/0xa9
 [<c02c0000>] unix_bind+0x5e/0x28e
 =======================
Code: 31 c0 c3 57 89 d1 56 53 83 ec 08 8b 78 60 8b 5a 3c 2b 58 44 8b
77 4c 8d 84 9e 90 00 00 00 8b 96 8c 00 00 00 89 44 24 04 8b 46 6c <0f>
b7 04 58 89 04 24 89 f8 e8 99 24 ff ff 5f 5a 5b 5e 5f c3 53
EIP: [<f91cfcb0>] stac92xx_dmux_enum_put+0x28/0x3c [snd_hda_intel]
SS:ESP 0068:d9ea1ea0


-- 
Ivan N. Zlatev

Web: http://www.i-nZ.net
"It's all some kind of whacked out conspiracy."