Skip to content
Snippets Groups Projects
Commit 2dbf7df6 authored by y00230200's avatar y00230200 Committed by Hongliang Yang
Browse files

ALSA: seq: Fix use-after-free at creating a port

CVE-2017-15265

There is a potential race window opened at creating and deleting a
port via ioctl, as spotted by fuzzing.  snd_seq_create_port() creates
a port object and returns its pointer, but it doesn't take the
refcount, thus it can be deleted immediately by another thread.
parent fc750ea7
Branches android-msm-bullhead-3.10-o-preview-1
Tags android-o-preview-1_r0.2
No related merge requests found
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment