From 999a1d81abfa5003331c3ff4125a950cfbc8f539 Mon Sep 17 00:00:00 2001 From: Salvatore Bonaccorso Date: Fri, 9 Mar 2018 11:58:43 +0100 Subject: [PATCH] Correct commit id reference, actually take from linus tree Gbp-Dch: Ignore --- .../all/ALSA-seq-Fix-racy-pool-initializations.patch | 7 ++----- 1 file changed, 2 insertions(+), 5 deletions(-) diff --git a/debian/patches/bugfix/all/ALSA-seq-Fix-racy-pool-initializations.patch b/debian/patches/bugfix/all/ALSA-seq-Fix-racy-pool-initializations.patch index 130984ed5..62b095fa5 100644 --- a/debian/patches/bugfix/all/ALSA-seq-Fix-racy-pool-initializations.patch +++ b/debian/patches/bugfix/all/ALSA-seq-Fix-racy-pool-initializations.patch @@ -4,11 +4,9 @@ Subject: ALSA: seq: Fix racy pool initializations MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit -Origin: https://git.kernel.org/linus/3b8e84c8373de4e068e282102425d498d992e49b +Origin: https://git.kernel.org/linus/d15d662e89fc667b90cd294b0eb45694e33144da Bug-Debian-Security: https://security-tracker.debian.org/tracker/CVE-2018-7566 -commit d15d662e89fc667b90cd294b0eb45694e33144da upstream. - ALSA sequencer core initializes the event pool on demand by invoking snd_seq_pool_init() when the first write happens and the pool is empty. Meanwhile user can reset the pool size manually via ioctl @@ -23,13 +21,12 @@ mutex, we can avoid the race. Reported-by: 范龙飞 Cc: Signed-off-by: Takashi Iwai -Signed-off-by: Greg Kroah-Hartman --- sound/core/seq/seq_clientmgr.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/sound/core/seq/seq_clientmgr.c b/sound/core/seq/seq_clientmgr.c -index d01913404581..a42cbbf2c8d9 100644 +index 60db32785f62..04d4db44fae5 100644 --- a/sound/core/seq/seq_clientmgr.c +++ b/sound/core/seq/seq_clientmgr.c @@ -1003,7 +1003,7 @@ static ssize_t snd_seq_write(struct file *file, const char __user *buf,