openkylin
/
linux
mirror of https://gitee.com/openkylin/linux.git
9
0
Fork 0
Code Issues Projects Releases Wiki Activity

ALSA: aloop: Fix inconsistent format due to incomplete rule 

The extra hw constraint rule for the formats the aloop driver
introduced has a slight flaw, where it doesn't return a positive value
when the mask got changed.  It came from the fact that it's basically
a copy&paste from snd_hw_constraint_mask64().  The original code is
supposed to be a single-shot and it modifies the mask bits only once
and never after, while what we need for aloop is the dynamic hw rule
that limits the mask bits.

This difference results in the inconsistent state, as the hw_refine
doesn't apply the dependencies fully.  The worse and surprisingly
result is that it causes a crash in OSS emulation when multiple
full-duplex reads/writes are performed concurrently (I leave why it
triggers Oops to readers as a homework).

For fixing this, replace a few open-codes with the standard
snd_mask_*() macros.

Reported-by: syzbot+3902b5220e8ca27889ca@syzkaller.appspotmail.com
Fixes: b1c73fc8e6 ("ALSA: snd-aloop: Fix hw_params restrictions and checking")
Cc: <stable@vger.kernel.org>
Signed-off-by: Takashi Iwai <tiwai@suse.de>
This commit is contained in:
Takashi Iwai 2018-01-05 16:15:33 +01:00
parent 9685347aa0
commit b088b53e20
1 changed files with 6 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
sound/drivers/aloop.c
View File

@ -39,6 +39,7 @@
#include <sound/core.h> #include <sound/core.h>
#include <sound/control.h> #include <sound/control.h>
#include <sound/pcm.h> #include <sound/pcm.h>
#include <sound/pcm_params.h>
#include <sound/info.h> #include <sound/info.h>
#include <sound/initval.h> #include <sound/initval.h>
@ -622,14 +623,12 @@ static int rule_format(struct snd_pcm_hw_params *params,
{ {
struct snd_pcm_hardware *hw = rule->private; struct snd_pcm_hardware *hw = rule->private;
struct snd_mask *maskp = hw_param_mask(params, rule->var); struct snd_mask m;
maskp->bits[0] &= (u_int32_t)hw->formats; snd_mask_none(&m);
maskp->bits[1] &= (u_int32_t)(hw->formats >> 32); m.bits[0] = (u_int32_t)hw->formats;
memset(maskp->bits + 2, 0, (SNDRV_MASK_MAX-64) / 8); /* clear rest */ m.bits[1] = (u_int32_t)(hw->formats >> 32);
if (! maskp->bits[0] && ! maskp->bits[1]) return snd_mask_refine(hw_param_mask(params, rule->var), &m);
return -EINVAL;
return 0;
} }
static int rule_rate(struct snd_pcm_hw_params *params, static int rule_rate(struct snd_pcm_hw_params *params,