Page MenuHomeFreeBSD
Differential D44544

sound: Drain buffer selinfo in sndbuf_free()
ClosedPublic
Actions

Authored by christos on Mar 28 2024, 5:15 AM.
Tags
None
Referenced Files
F111439407: D44544.id136327.diff
Mon, Mar 3, 6:54 PM
F111418081: D44544.diff
Mon, Mar 3, 12:45 PM
Unknown Object (File)
Fri, Feb 21, 11:06 PM
Unknown Object (File)
Dec 17 2024, 3:08 PM
Unknown Object (File)
Dec 10 2024, 12:10 PM
Unknown Object (File)
Nov 28 2024, 7:33 PM
Unknown Object (File)
Nov 25 2024, 5:04 AM
Unknown Object (File)
Nov 24 2024, 4:48 PM
View All 64 Files
Subscribers
None

Details

Reviewers
markj
emaste
dev_submerge.ch
imp
Commits
rGea2275e72cda: sound: Drain buffer selinfo in sndbuf_free()
rGfba54d0179aa: sound: Drain buffer selinfo in sndbuf_free()
Summary

Prevent a use-after-free in kern_poll() by making sure the buffer's
selinfo is drained.

Reported by: KASAN
Sponsored by: The FreeBSD Foundation
MFC after: 2 weeks

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped
Build Status
Buildable 56818
Build 53706: arc lint + arc unit

Event Timeline

christos requested review of this revision.Mar 28 2024, 5:15 AM
christos created this revision.
Harbormaster completed remote builds in B56818: Diff 136299.Mar 28 2024, 5:15 AM
christos mentioned this in D43545: sound: Implement asynchronous device detach.Mar 28 2024, 5:16 AM
christos added a child revision: D43545: sound: Implement asynchronous device detach.
christos retitled this revision from sound: drain buffer selinfo during sndbuf_free() to sound: Drain buffer selinfo in sndbuf_free().Mar 28 2024, 5:18 AM
markj accepted this revision.Mar 29 2024, 2:43 PM

In the commit message, you should note that this is only required with async detach.

This revision is now accepted and ready to land.Mar 29 2024, 2:43 PM
Closed by commit rGfba54d0179aa: sound: Drain buffer selinfo in sndbuf_free() (authored by christos). · Explain WhyMar 29 2024, 3:33 PM
This revision was automatically updated to reflect the committed changes.
christos added a commit: rGfba54d0179aa: sound: Drain buffer selinfo in sndbuf_free().
christos removed a child revision: D43545: sound: Implement asynchronous device detach.Apr 11 2024, 4:13 PM
christos added a commit: rGea2275e72cda: sound: Drain buffer selinfo in sndbuf_free().Apr 12 2024, 1:13 AM

Revision Contents
Changeset List

PathSize
sys/
dev/
sound/
pcm/
1 line

Diff 136299

View Options

sys/dev/sound/pcm/buffer.c

Loading...