Takashi Iwai 8a56ef4f3f ALSA: rawmidi: Fix missing input substream checks in compat ioctls ...

Some rawmidi compat ioctls lack of the input substream checks
(although they do check only for rfile->output).  This many eventually
lead to an Oops as NULL substream is passed to the rawmidi core
functions.

Fix it by adding the proper checks before each function call.

The bug was spotted by syzkaller.

Reported-by: syzbot+f7a0348affc3b67bc617@syzkaller.appspotmail.com
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>

2018-04-19 18:16:15 +02:00

..

oss

ALSA: pcm: Fix endless loop for XRUN recovery in OSS emulation

2018-04-07 13:10:11 +02:00

seq

ALSA: seq: Clear client entry before deleting else at closing

2018-03-10 17:30:01 +01:00

compress_offload.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

control_compat.c

…

control.c

ALSA: control: Fix a bunch of whitespace errors

2018-02-28 08:18:26 +01:00

ctljack.c

…

device.c

…

hrtimer.c

…

hwdep_compat.c

…

hwdep.c

…

info_oss.c

…

info.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

init.c

ALSA: Use scnprintf() instead of snprintf() for show

2018-02-27 09:16:52 +01:00

isadma.c

…

jack.c

…

Kconfig

…

Makefile

…

memalloc.c

…

memory.c

…

misc.c

…

pcm_compat.c

…

pcm_dmaengine.c

…

pcm_drm_eld.c

…

pcm_iec958.c

…

pcm_lib.c

ALSA: pcm: Use krealloc() for resizing the rules array

2018-03-13 15:37:58 +01:00

pcm_local.h

…

pcm_memory.c

…

pcm_misc.c

…

pcm_native.c

ALSA: pcm: Remove WARN_ON() at snd_pcm_hw_params() error

2018-04-09 17:39:31 +02:00

pcm_param_trace.h

…

pcm_timer.c

…

pcm_trace.h

…

pcm.c

ALSA: pcm: Fix UAF at PCM release via PCM timer access

2018-04-03 08:36:40 +02:00

rawmidi_compat.c

ALSA: rawmidi: Fix missing input substream checks in compat ioctls

2018-04-19 18:16:15 +02:00

rawmidi.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

seq_device.c

…

sgbuf.c

…

sound_oss.c

…

sound.c

…

timer_compat.c

…

timer.c

vfs: do bulk POLL* -> EPOLL* replacement

2018-02-11 14:34:03 -08:00

vmaster.c

ALSA: vmaster: Zero-clear ctl before calling slave get

2018-03-08 08:41:13 +01:00