)]}'
{
  "commit": "644a76b2a3b8b9e3528ed389b4dcc625c281b019",
  "tree": "ff4ef98a2359dde6557823213998955ebc726902",
  "parents": [
    "bcf876870b95592b52519ed4aafcf9d95999bc9c"
  ],
  "author": {
    "name": "Takashi Iwai",
    "email": "tiwai@suse.de",
    "time": "Tue Aug 04 13:58:50 2020 +0200"
  },
  "committer": {
    "name": "Takashi Iwai",
    "email": "tiwai@suse.de",
    "time": "Tue Aug 04 13:58:50 2020 +0200"
  },
  "message": "ALSA: seq: oss: Serialize ioctls\n\nSome ioctls via OSS sequencer API may race and lead to UAF when the\nport create and delete are performed concurrently, as spotted by a\ncouple of syzkaller cases.  This patch is an attempt to address it by\nserializing the ioctls with the existing register_mutex.\n\nBasically OSS sequencer API is an obsoleted interface and was designed\nwithout much consideration of the concurrency.  There are very few\napplications with it, and the concurrent performance isn\u0027t asked,\nhence this \"big hammer\" approach should be good enough.\n\nReported-by: syzbot+1a54a94bd32716796edd@syzkaller.appspotmail.com\nReported-by: syzbot+9d2abfef257f3e2d4713@syzkaller.appspotmail.com\nSuggested-by: Hillf Danton \u003chdanton@sina.com\u003e\nCc: \u003cstable@vger.kernel.org\u003e\nSigned-off-by: Takashi Iwai \u003ctiwai@suse.de\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "17f913657304399fa3775fe377d93082833cb4fb",
      "old_mode": 33188,
      "old_path": "sound/core/seq/oss/seq_oss.c",
      "new_id": "c8b9c0b315d8f5a931677df2d59671953caf4448",
      "new_mode": 33188,
      "new_path": "sound/core/seq/oss/seq_oss.c"
    }
  ]
}
