1. 02 5月, 2013 1 次提交
  2. 10 4月, 2013 2 次提交
  3. 11 3月, 2013 1 次提交
    • T
      ALSA: seq: Fix missing error handling in snd_seq_timer_open() · 66efdc71
      Takashi Iwai 提交于
      snd_seq_timer_open() didn't catch the whole error path but let through
      if the timer id is a slave.  This may lead to Oops by accessing the
      uninitialized pointer.
      
       BUG: unable to handle kernel NULL pointer dereference at 00000000000002ae
       IP: [<ffffffff819b3477>] snd_seq_timer_open+0xe7/0x130
       PGD 785cd067 PUD 76964067 PMD 0
       Oops: 0002 [#4] SMP
       CPU 0
       Pid: 4288, comm: trinity-child7 Tainted: G      D W 3.9.0-rc1+ #100 Bochs Bochs
       RIP: 0010:[<ffffffff819b3477>]  [<ffffffff819b3477>] snd_seq_timer_open+0xe7/0x130
       RSP: 0018:ffff88006ece7d38  EFLAGS: 00010246
       RAX: 0000000000000286 RBX: ffff88007851b400 RCX: 0000000000000000
       RDX: 000000000000ffff RSI: ffff88006ece7d58 RDI: ffff88006ece7d38
       RBP: ffff88006ece7d98 R08: 000000000000000a R09: 000000000000fffe
       R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
       R13: ffff8800792c5400 R14: 0000000000e8f000 R15: 0000000000000007
       FS:  00007f7aaa650700(0000) GS:ffff88007f800000(0000) GS:0000000000000000
       CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
       CR2: 00000000000002ae CR3: 000000006efec000 CR4: 00000000000006f0
       DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
       DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
       Process trinity-child7 (pid: 4288, threadinfo ffff88006ece6000, task ffff880076a8a290)
       Stack:
        0000000000000286 ffffffff828f2be0 ffff88006ece7d58 ffffffff810f354d
        65636e6575716573 2065756575712072 ffff8800792c0030 0000000000000000
        ffff88006ece7d98 ffff8800792c5400 ffff88007851b400 ffff8800792c5520
       Call Trace:
        [<ffffffff810f354d>] ? trace_hardirqs_on+0xd/0x10
        [<ffffffff819b17e9>] snd_seq_queue_timer_open+0x29/0x70
        [<ffffffff819ae01a>] snd_seq_ioctl_set_queue_timer+0xda/0x120
        [<ffffffff819acb9b>] snd_seq_do_ioctl+0x9b/0xd0
        [<ffffffff819acbe0>] snd_seq_ioctl+0x10/0x20
        [<ffffffff811b9542>] do_vfs_ioctl+0x522/0x570
        [<ffffffff8130a4b3>] ? file_has_perm+0x83/0xa0
        [<ffffffff810f354d>] ? trace_hardirqs_on+0xd/0x10
        [<ffffffff811b95ed>] sys_ioctl+0x5d/0xa0
        [<ffffffff813663fe>] ? trace_hardirqs_on_thunk+0x3a/0x3f
        [<ffffffff81faed69>] system_call_fastpath+0x16/0x1b
      Reported-and-tested-by: NTommi Rantala <tt.rantala@gmail.com>
      Cc: <stable@vger.kernel.org>
      Signed-off-by: NTakashi Iwai <tiwai@suse.de>
      66efdc71
  4. 05 3月, 2013 1 次提交
    • T
      ALSA: vmaster: Fix slave change notification · 2069d483
      Takashi Iwai 提交于
      When a value of a vmaster slave control is changed, the ctl change
      notification is sometimes ignored.  This happens when the master
      control overrides, e.g. when the corresponding master control is
      muted.  The reason is that slave_put() returns the value of the actual
      slave put callback, and it doesn't reflect the virtual slave value
      change.
      
      This patch fixes the function just to return 1 whenever a slave value
      is changed.
      
      Cc: <stable@vger.kernel.org>
      Signed-off-by: NTakashi Iwai <tiwai@suse.de>
      2069d483
  5. 04 3月, 2013 1 次提交
    • D
      ALSA: seq: seq_oss_event: missing range checks · 85c50a58
      Dan Carpenter 提交于
      The "dev" variable could be out of bounds.  Calling
      snd_seq_oss_synth_is_valid() checks that it is is a valid device
      which has been opened.  We check this inside set_note_event() so
      this function can't succeed without a valid "dev".  But we need to
      do the check earlier to prevent invalid dereferences and memory
      corruption.
      
      One call tree where "dev" could be out of bounds is:
      -> snd_seq_oss_oob_user()
         -> snd_seq_oss_process_event()
            -> extended_event()
               -> note_on_event()
      Signed-off-by: NDan Carpenter <dan.carpenter@oracle.com>
      Signed-off-by: NTakashi Iwai <tiwai@suse.de>
      85c50a58
  6. 23 2月, 2013 1 次提交
  7. 14 2月, 2013 1 次提交
  8. 11 2月, 2013 1 次提交
  9. 21 11月, 2012 2 次提交
  10. 19 11月, 2012 1 次提交
  11. 14 11月, 2012 2 次提交
  12. 08 11月, 2012 1 次提交
  13. 30 10月, 2012 3 次提交
  14. 28 10月, 2012 1 次提交
  15. 23 10月, 2012 2 次提交
  16. 09 10月, 2012 1 次提交
    • K
      mm: kill vma flag VM_RESERVED and mm->reserved_vm counter · 314e51b9
      Konstantin Khlebnikov 提交于
      A long time ago, in v2.4, VM_RESERVED kept swapout process off VMA,
      currently it lost original meaning but still has some effects:
      
       | effect                 | alternative flags
      -+------------------------+---------------------------------------------
      1| account as reserved_vm | VM_IO
      2| skip in core dump      | VM_IO, VM_DONTDUMP
      3| do not merge or expand | VM_IO, VM_DONTEXPAND, VM_HUGETLB, VM_PFNMAP
      4| do not mlock           | VM_IO, VM_DONTEXPAND, VM_HUGETLB, VM_PFNMAP
      
      This patch removes reserved_vm counter from mm_struct.  Seems like nobody
      cares about it, it does not exported into userspace directly, it only
      reduces total_vm showed in proc.
      
      Thus VM_RESERVED can be replaced with VM_IO or pair VM_DONTEXPAND | VM_DONTDUMP.
      
      remap_pfn_range() and io_remap_pfn_range() set VM_IO|VM_DONTEXPAND|VM_DONTDUMP.
      remap_vmalloc_range() set VM_DONTEXPAND | VM_DONTDUMP.
      
      [akpm@linux-foundation.org: drivers/vfio/pci/vfio_pci.c fixup]
      Signed-off-by: NKonstantin Khlebnikov <khlebnikov@openvz.org>
      Cc: Alexander Viro <viro@zeniv.linux.org.uk>
      Cc: Carsten Otte <cotte@de.ibm.com>
      Cc: Chris Metcalf <cmetcalf@tilera.com>
      Cc: Cyrill Gorcunov <gorcunov@openvz.org>
      Cc: Eric Paris <eparis@redhat.com>
      Cc: H. Peter Anvin <hpa@zytor.com>
      Cc: Hugh Dickins <hughd@google.com>
      Cc: Ingo Molnar <mingo@redhat.com>
      Cc: James Morris <james.l.morris@oracle.com>
      Cc: Jason Baron <jbaron@redhat.com>
      Cc: Kentaro Takeda <takedakn@nttdata.co.jp>
      Cc: Matt Helsley <matthltc@us.ibm.com>
      Cc: Nick Piggin <npiggin@kernel.dk>
      Cc: Oleg Nesterov <oleg@redhat.com>
      Cc: Peter Zijlstra <a.p.zijlstra@chello.nl>
      Cc: Robert Richter <robert.richter@amd.com>
      Cc: Suresh Siddha <suresh.b.siddha@intel.com>
      Cc: Tetsuo Handa <penguin-kernel@I-love.SAKURA.ne.jp>
      Cc: Venkatesh Pallipadi <venki@google.com>
      Acked-by: NLinus Torvalds <torvalds@linux-foundation.org>
      Signed-off-by: NAndrew Morton <akpm@linux-foundation.org>
      Signed-off-by: NLinus Torvalds <torvalds@linux-foundation.org>
      314e51b9
  17. 27 9月, 2012 1 次提交
  18. 23 9月, 2012 1 次提交
  19. 17 9月, 2012 2 次提交
  20. 14 9月, 2012 1 次提交
  21. 13 9月, 2012 1 次提交
  22. 11 9月, 2012 2 次提交
  23. 07 9月, 2012 3 次提交
    • T
      ALSA: Remove VOLATILE flag from chmap ctls · 6e67683d
      Takashi Iwai 提交于
      The VOLATILE flag was added to control elements by
      snd_pcm_add_chmap_ctls() just because I didn't want to have a
      side-effect of "alsactl restore".  But now the set operation doesn't
      allow to change the value unless the PCM stream is in PREAPRED state,
      there is no reason to keep this flag.  Let's rip it off.
      Signed-off-by: NTakashi Iwai <tiwai@suse.de>
      6e67683d
    • T
      ALSA: control: Fix missing VOLATILE flag at creating controls · a8d372f1
      Takashi Iwai 提交于
      The SNDRV_CTL_ELEM_ACCESS_VOLATILE bit flag wasn't properly inherited
      at creating control elements via snd_ctl_new1().
      Signed-off-by: NTakashi Iwai <tiwai@suse.de>
      a8d372f1
    • T
      ALSA: PCM: channel mapping API implementation · 2d3391ec
      Takashi Iwai 提交于
      This patch implements the basic data types for the standard channel
      mapping API handling.
      
      - The definitions of the channel positions and the new TLV types are
        added in sound/asound.h and sound/tlv.h, so that they can be
        referred from user-space.
      
      - Introduced a new helper function snd_pcm_add_chmap_ctls() to create
        control elements representing the channel maps for each PCM
        (sub)stream.
      
      - Some standard pre-defined channel maps are provided for
        convenience.
      Signed-off-by: NTakashi Iwai <tiwai@suse.de>
      2d3391ec
  24. 04 9月, 2012 1 次提交
    • J
      ALSA: remove the main version information · 42662748
      Jaroslav Kysela 提交于
      Remove the main ALSA version number from the kernel ALSA driver.
      The ALSA driver package release diverges from the upstream. This may
      confuse users to see the same ALSA version for many kernel releases
      and this version lost it's original purpose and connection.
      
      The "ioctl" APIs have own version numbers, so the user space may check
      for specific API changes only.
      Signed-off-by: NJaroslav Kysela <perex@perex.cz>
      42662748
  25. 03 9月, 2012 1 次提交
  26. 20 8月, 2012 1 次提交
  27. 03 8月, 2012 1 次提交
  28. 31 7月, 2012 1 次提交
  29. 05 7月, 2012 1 次提交
  30. 18 6月, 2012 1 次提交