On Tue, 05 Dec 2017 20:29:07 +0100,
Kees Cook wrote:
>
> On Tue, Dec 5, 2017 at 11:14 AM, Takashi Iwai wrote:
> > On Tue, 05 Dec 2017 18:16:55 +0100,
> > Nick Desaulniers wrote:
> >>
> >> From: Robb Glasser
> >>
> >> When the device descriptor is closed, the
On Tue, 05 Dec 2017 20:29:07 +0100,
Kees Cook wrote:
>
> On Tue, Dec 5, 2017 at 11:14 AM, Takashi Iwai wrote:
> > On Tue, 05 Dec 2017 18:16:55 +0100,
> > Nick Desaulniers wrote:
> >>
> >> From: Robb Glasser
> >>
> >> When the device descriptor is closed, the `substream->runtime` pointer
> >> is
On Tue, Dec 5, 2017 at 11:14 AM, Takashi Iwai wrote:
> On Tue, 05 Dec 2017 18:16:55 +0100,
> Nick Desaulniers wrote:
>>
>> From: Robb Glasser
>>
>> When the device descriptor is closed, the `substream->runtime` pointer
>> is freed. But another thread may be in
On Tue, Dec 5, 2017 at 11:14 AM, Takashi Iwai wrote:
> On Tue, 05 Dec 2017 18:16:55 +0100,
> Nick Desaulniers wrote:
>>
>> From: Robb Glasser
>>
>> When the device descriptor is closed, the `substream->runtime` pointer
>> is freed. But another thread may be in the ioctl handler, case
>>
On Tue, 05 Dec 2017 18:16:55 +0100,
Nick Desaulniers wrote:
>
> From: Robb Glasser
>
> When the device descriptor is closed, the `substream->runtime` pointer
> is freed. But another thread may be in the ioctl handler, case
> SNDRV_CTL_IOCTL_PCM_INFO. This case calls
On Tue, 05 Dec 2017 18:16:55 +0100,
Nick Desaulniers wrote:
>
> From: Robb Glasser
>
> When the device descriptor is closed, the `substream->runtime` pointer
> is freed. But another thread may be in the ioctl handler, case
> SNDRV_CTL_IOCTL_PCM_INFO. This case calls snd_pcm_info_user() which
>
On Tue, Dec 05, 2017 at 09:19:32AM -0800, Nick Desaulniers wrote:
> + stable
>
> On Tue, Dec 5, 2017 at 9:16 AM, Nick Desaulniers
> wrote:
> > From: Robb Glasser
> >
> > When the device descriptor is closed, the `substream->runtime` pointer
> > is
On Tue, Dec 05, 2017 at 09:19:32AM -0800, Nick Desaulniers wrote:
> + stable
>
> On Tue, Dec 5, 2017 at 9:16 AM, Nick Desaulniers
> wrote:
> > From: Robb Glasser
> >
> > When the device descriptor is closed, the `substream->runtime` pointer
> > is freed. But another thread may be in the ioctl
+ stable
On Tue, Dec 5, 2017 at 9:16 AM, Nick Desaulniers
wrote:
> From: Robb Glasser
>
> When the device descriptor is closed, the `substream->runtime` pointer
> is freed. But another thread may be in the ioctl handler, case
>
+ stable
On Tue, Dec 5, 2017 at 9:16 AM, Nick Desaulniers
wrote:
> From: Robb Glasser
>
> When the device descriptor is closed, the `substream->runtime` pointer
> is freed. But another thread may be in the ioctl handler, case
> SNDRV_CTL_IOCTL_PCM_INFO. This case calls snd_pcm_info_user() which
From: Robb Glasser
When the device descriptor is closed, the `substream->runtime` pointer
is freed. But another thread may be in the ioctl handler, case
SNDRV_CTL_IOCTL_PCM_INFO. This case calls snd_pcm_info_user() which
calls snd_pcm_info() which accesses the now freed
From: Robb Glasser
When the device descriptor is closed, the `substream->runtime` pointer
is freed. But another thread may be in the ioctl handler, case
SNDRV_CTL_IOCTL_PCM_INFO. This case calls snd_pcm_info_user() which
calls snd_pcm_info() which accesses the now freed `substream->runtime`.
12 matches
Mail list logo