#ifndef SQUASHFS_FS_SB #define SQUASHFS_FS_SB /* * Squashfs * * Copyright (c) 2002, 2003, 2004, 2005, 2006, 2007, 2008 * Phillip Lougher * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2, * or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. * * squashfs_fs_sb.h */ #include "squashfs_fs.h" struct squashfs_cache { char *name; int entries; int curr_blk; int next_blk; int num_waiters; int unused; int block_size; int pages; spinlock_t lock; wait_queue_head_t wait_queue; struct squashfs_cache_entry *entry; }; struct squashfs_cache_entry { u64 block; int length; int refcount; u64 next_index; int pending; int error; int num_waiters; wait_queue_head_t wait_queue; struct squashfs_cache *cache; void **data; struct squashfs_page_actor *actor; }; struct squashfs_sb_info { const struct squashfs_decompressor *decompressor; int devblksize; int devblksize_log2; struct squashfs_cache *block_cache; struct squashfs_cache *fragment_cache; struct squashfs_cache *read_page; int next_meta_index; __le64 *id_table; __le64 *fragment_index; __le64 *xattr_id_table; struct mutex meta_index_mutex; struct meta_index *meta_index; struct squashfs_stream *stream; __le64 *inode_lookup_table; u64 inode_table; u64 directory_table; u64 xattr_table; unsigned int block_size; unsigned short block_log; long long bytes_used; unsigned int inodes; int xattr_ids; }; #endif cgi/linux/net-next.git/log/sound/pci/hda'>
path: root/sound/pci/hda
diff options
context:
space:
mode:
authorPeter Zijlstra <peterz@infradead.org>2017-01-26 16:39:55 +0100
committerIngo Molnar <mingo@kernel.org>2017-01-30 11:41:25 +0100
commita76a82a3e38c8d3fb6499e3dfaeb0949241ab588 (patch)
treeb5bc906278fe1ac66d75de984d26bf59b43b3ed8 /sound/pci/hda
parent566cf877a1fcb6d6dc0126b076aad062054c2637 (diff)
perf/core: Fix use-after-free bug
Dmitry reported a KASAN use-after-free on event->group_leader. It turns out there's a hole in perf_remove_from_context() due to event_function_call() not calling its function when the task associated with the event is already dead. In this case the event will have been detached from the task, but the grouping will have been retained, such that group operations might still work properly while there are live child events etc. This does however mean that we can miss a perf_group_detach() call when the group decomposes, this in turn can then lead to use-after-free. Fix it by explicitly doing the group detach if its still required. Reported-by: Dmitry Vyukov <dvyukov@google.com> Tested-by: Dmitry Vyukov <dvyukov@google.com> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Cc: Alexander Shishkin <alexander.shishkin@linux.intel.com> Cc: Arnaldo Carvalho de Melo <acme@kernel.org> Cc: Arnaldo Carvalho de Melo <acme@redhat.com> Cc: Jiri Olsa <jolsa@redhat.com> Cc: Linus Torvalds <torvalds@linux-foundation.org> Cc: Mathieu Desnoyers <mathieu.desnoyers@efficios.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Thomas Gleixner <tglx@linutronix.de> Cc: stable@vger.kernel.org # v4.5+ Cc: syzkaller <syzkaller@googlegroups.com> Fixes: 63b6da39bb38 ("perf: Fix perf_event_exit_task() race") Link: http://lkml.kernel.org/r/20170126153955.GD6515@twins.programming.kicks-ass.net Signed-off-by: Ingo Molnar <mingo@kernel.org>
Diffstat (limited to 'sound/pci/hda')