Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 01, 2016 at 10:34:23PM +0900, Takashi Sakamoto wrote: > Well, I don't mind to receive them because it's a good information for > me to get current state of ALSA core functionality. If I had some > spare time, I was also going to fix it. But currently I have little > time for it due to

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 01, 2016 at 10:34:23PM +0900, Takashi Sakamoto wrote: > Well, I don't mind to receive them because it's a good information for > me to get current state of ALSA core functionality. If I had some > spare time, I was also going to fix it. But currently I have little > time for it due to

Re: sound: use-after-free in snd_seq_deliver_single_event

On Feb 01 2016 21:20, Mark Brown wrote: > On Mon, Feb 01, 2016 at 12:22:18PM +0100, Dmitry Vyukov wrote: >> On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > >>> I'm not sure how you're working out who to send these to but all these >>> reports you've been sending have been for ALSA core

Re: sound: use-after-free in snd_seq_deliver_single_event

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Feb 01 2016 21:20, Mark Brown wrote: > On Mon, Feb 01, 2016 at 12:22:18PM +0100, Dmitry Vyukov wrote: >> On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown >> wrote: > >>> I'm not sure how you're working out who to send these to but >>> all these

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 01, 2016 at 12:22:18PM +0100, Dmitry Vyukov wrote: > On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > > I'm not sure how you're working out who to send these to but all these > > reports you've been sending have been for ALSA core which I rarely look > > at closely, I mostly look

Re: [alsa-devel] sound: use-after-free in snd_seq_deliver_single_event

On Mon, 01 Feb 2016 12:22:18 +0100, Dmitry Vyukov wrote: > > On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > > On Mon, Feb 01, 2016 at 11:26:57AM +0100, Dmitry Vyukov wrote: > > > >> The following program triggers use-after-free in > >> snd_seq_deliver_single_event (run in a tight parallel

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, 01 Feb 2016 12:12:21 +0100, Dmitry Vyukov wrote: > > > Looks like a race at closing virmidi device. > > Does the patch below fix it? > > > This seems to help. Thanks for a quick test. FWIW, below is the final patch I'm going to queue. Takashi -- 8< -- From: Takashi Iwai Subject:

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > On Mon, Feb 01, 2016 at 11:26:57AM +0100, Dmitry Vyukov wrote: > >> The following program triggers use-after-free in >> snd_seq_deliver_single_event (run in a tight parallel loop): > > I'm not sure how you're working out who to send these to

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 01, 2016 at 11:26:57AM +0100, Dmitry Vyukov wrote: > The following program triggers use-after-free in > snd_seq_deliver_single_event (run in a tight parallel loop): I'm not sure how you're working out who to send these to but all these reports you've been sending have been for ALSA

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 1, 2016 at 11:57 AM, Takashi Iwai wrote: > On Mon, 01 Feb 2016 11:26:57 +0100, > Dmitry Vyukov wrote: >> >> Hello, >> >> The following program triggers use-after-free in >> snd_seq_deliver_single_event (run in a tight parallel loop): >> >> // autogenerated by syzkaller

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, 01 Feb 2016 11:26:57 +0100, Dmitry Vyukov wrote: > > Hello, > > The following program triggers use-after-free in > snd_seq_deliver_single_event (run in a tight parallel loop): > > // autogenerated by syzkaller (http://github.com/google/syzkaller) > #include > #include > #include >

sound: use-after-free in snd_seq_deliver_single_event

Hello, The following program triggers use-after-free in snd_seq_deliver_single_event (run in a tight parallel loop): // autogenerated by syzkaller (http://github.com/google/syzkaller) #include #include #include #include #include #ifndef SYS_mmap #define SYS_mmap 9 #endif #ifndef

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, 01 Feb 2016 11:26:57 +0100, Dmitry Vyukov wrote: > > Hello, > > The following program triggers use-after-free in > snd_seq_deliver_single_event (run in a tight parallel loop): > > // autogenerated by syzkaller (http://github.com/google/syzkaller) > #include > #include > #include >

sound: use-after-free in snd_seq_deliver_single_event

Hello, The following program triggers use-after-free in snd_seq_deliver_single_event (run in a tight parallel loop): // autogenerated by syzkaller (http://github.com/google/syzkaller) #include #include #include #include #include #ifndef SYS_mmap #define SYS_mmap 9 #endif #ifndef

Re: sound: use-after-free in snd_seq_deliver_single_event

On Feb 01 2016 21:20, Mark Brown wrote: > On Mon, Feb 01, 2016 at 12:22:18PM +0100, Dmitry Vyukov wrote: >> On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > >>> I'm not sure how you're working out who to send these to but all these >>> reports you've been sending have

Re: sound: use-after-free in snd_seq_deliver_single_event

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi, On Feb 01 2016 21:20, Mark Brown wrote: > On Mon, Feb 01, 2016 at 12:22:18PM +0100, Dmitry Vyukov wrote: >> On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown >> wrote: > >>> I'm not sure how you're working out who to send these

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 01, 2016 at 11:26:57AM +0100, Dmitry Vyukov wrote: > The following program triggers use-after-free in > snd_seq_deliver_single_event (run in a tight parallel loop): I'm not sure how you're working out who to send these to but all these reports you've been sending have been for ALSA

Re: [alsa-devel] sound: use-after-free in snd_seq_deliver_single_event

On Mon, 01 Feb 2016 12:22:18 +0100, Dmitry Vyukov wrote: > > On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > > On Mon, Feb 01, 2016 at 11:26:57AM +0100, Dmitry Vyukov wrote: > > > >> The following program triggers use-after-free in > >> snd_seq_deliver_single_event (run

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > On Mon, Feb 01, 2016 at 11:26:57AM +0100, Dmitry Vyukov wrote: > >> The following program triggers use-after-free in >> snd_seq_deliver_single_event (run in a tight parallel loop): > > I'm not sure how you're working out who

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 1, 2016 at 11:57 AM, Takashi Iwai wrote: > On Mon, 01 Feb 2016 11:26:57 +0100, > Dmitry Vyukov wrote: >> >> Hello, >> >> The following program triggers use-after-free in >> snd_seq_deliver_single_event (run in a tight parallel loop): >> >> // autogenerated by syzkaller

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, 01 Feb 2016 12:12:21 +0100, Dmitry Vyukov wrote: > > > Looks like a race at closing virmidi device. > > Does the patch below fix it? > > > This seems to help. Thanks for a quick test. FWIW, below is the final patch I'm going to queue. Takashi -- 8< -- From: Takashi Iwai

Re: sound: use-after-free in snd_seq_deliver_single_event

On Mon, Feb 01, 2016 at 12:22:18PM +0100, Dmitry Vyukov wrote: > On Mon, Feb 1, 2016 at 12:16 PM, Mark Brown wrote: > > I'm not sure how you're working out who to send these to but all these > > reports you've been sending have been for ALSA core which I rarely look > > at