I agree with that having a C reproducer would be much better. Now I'm working on it. I will immediately let you know once I get the C reproducer.
Thank you.
Best regards, DaeRyong Jeong On 24 Jul 2018, 4:00 PM +0900, Takashi Iwai tiwai@suse.de, wrote:
On Tue, 24 Jul 2018 05:59:56 +0200, DaeRyong Jeong wrote:
I just realized that the crash has been spotted by Syzkaller a few days before. (https://syzkaller.appspot.com/bug?id=3490860a465e6b39227c6906f0ef2d40ad4d5bb...)
I'm CC'ing Syzkaller's mailing list.
It's very likely a false-positive sanity check, and if so, nothing serious at all. We may simply remove two snd_BUG_ON() lines.
But I'd love to have a C reproducer to confirm my understanding is correct...
thanks,
Takashi
--- a/sound/core/seq/seq_ports.c +++ b/sound/core/seq/seq_ports.c @@ -272,9 +272,6 @@ static int port_delete(struct snd_seq_client *client, if (port->private_free) port->private_free(port->private_data);
- snd_BUG_ON(port->c_src.count != 0);
- snd_BUG_ON(port->c_dest.count != 0);
kfree(port); return 0; }