20 Oct
2021
20 Oct
'21
8:31 p.m.
On 20. 10. 21 18:48, Takashi Iwai wrote:
The OSS mixer can reassign the mapping slots dynamically via proc file. Although the addition and deletion of those slots are protected by mixer->reg_mutex, the access to slots aren't, hence this may cause UAF when the slots in use are deleted concurrently.
This patch applies the mixer->reg_mutex in all appropriate code paths (i.e. the ioctl functions) that may access slots.
Reviewed-by: Jaroslav Kysela perex@perex.cz
Thanks, Jaroslav
--
Jaroslav Kysela perex@perex.cz
Linux Sound Maintainer; ALSA Project; Red Hat, Inc.