android_kernel_sony_msm8994.../sound
Takashi Iwai 186947a654
ALSA: timer: Fix double unlink of active_list
commit ee8413b01045c74340aa13ad5bdf905de32be736 upstream.

ALSA timer instance object has a couple of linked lists and they are
unlinked unconditionally at snd_timer_stop().  Meanwhile
snd_timer_interrupt() unlinks it, but it calls list_del() which leaves
the element list itself unchanged.  This ends up with unlinking twice,
and it was caught by syzkaller fuzzer.

The fix is to use list_del_init() variant properly there, too.

Change-Id: I7517f64f648f53eee6af10a8534a0ea457bd206d
Reported-by: Dmitry Vyukov <dvyukov@google.com>
Tested-by: Dmitry Vyukov <dvyukov@google.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
2017-09-16 23:30:23 +02:00
..
aoa
arm
atmel
core ALSA: timer: Fix double unlink of active_list 2017-09-16 23:30:23 +02:00
drivers
firewire
i2c ALSA: ak411x: Fix stall in work callback 2015-02-11 14:48:17 +08:00
isa Kconfig: rename HAS_IOPORT to HAS_IOPORT_MAP 2014-08-15 11:41:43 -07:00
mips
oss sound/oss: fix deadlock in sequencer_ioctl(SNDCTL_SEQ_OUTOFBAND) 2015-05-17 09:51:33 -07:00
parisc
pci This is the 3.10.84 stable release 2015-08-13 14:38:09 -07:00
pcmcia
ppc
sh
soc ASoC: msm: qdsp6v2: Change audio drivers to use %pK 2017-09-14 17:05:43 +02:00
sparc
spi
synth ALSA: emux: Fix mutex deadlock in OSS emulation 2015-05-13 05:15:41 -07:00
usb ALSA: usb-audio: avoid freeing umidi object twice 2017-09-02 18:04:03 +02:00
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c
sound_firmware.c