Re: sound: use-after-free in hrtimer_cancel

2016-06-24 Thread Takashi Iwai
On Fri, 24 Jun 2016 15:33:35 +0200, Dmitry Vyukov wrote: > > On Fri, Jun 24, 2016 at 3:32 PM, Takashi Iwai wrote: > > On Tue, 21 Jun 2016 20:26:48 +0200, > > Dmitry Vyukov wrote: > >> > >> On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: > >> > On Sat, 04 Jun 2016 20:27:50 +0200, > >> > Dmitr

Re: sound: use-after-free in hrtimer_cancel

2016-06-24 Thread Takashi Iwai
On Fri, 24 Jun 2016 15:48:53 +0200, Dmitry Vyukov wrote: > > On Fri, Jun 24, 2016 at 3:33 PM, Takashi Iwai wrote: > > On Tue, 21 Jun 2016 19:41:28 +0200, > > Dmitry Vyukov wrote: > >> > >> On Mon, Jun 6, 2016 at 6:39 PM, Takashi Iwai wrote: > >> > On Mon, 06 Jun 2016 18:29:25 +0200, > >> > Dmitr

Re: sound: use-after-free in hrtimer_cancel

2016-06-24 Thread Dmitry Vyukov
On Fri, Jun 24, 2016 at 3:33 PM, Takashi Iwai wrote: > On Tue, 21 Jun 2016 19:41:28 +0200, > Dmitry Vyukov wrote: >> >> On Mon, Jun 6, 2016 at 6:39 PM, Takashi Iwai wrote: >> > On Mon, 06 Jun 2016 18:29:25 +0200, >> > Dmitry Vyukov wrote: >> >> >> >> On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai

Re: sound: use-after-free in hrtimer_cancel

2016-06-24 Thread Takashi Iwai
On Tue, 21 Jun 2016 19:41:28 +0200, Dmitry Vyukov wrote: > > On Mon, Jun 6, 2016 at 6:39 PM, Takashi Iwai wrote: > > On Mon, 06 Jun 2016 18:29:25 +0200, > > Dmitry Vyukov wrote: > >> > >> On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: > >> > On Sat, 04 Jun 2016 20:27:50 +0200, > >> > Dmitry

Re: sound: use-after-free in hrtimer_cancel

2016-06-24 Thread Dmitry Vyukov
On Fri, Jun 24, 2016 at 3:32 PM, Takashi Iwai wrote: > On Tue, 21 Jun 2016 20:26:48 +0200, > Dmitry Vyukov wrote: >> >> On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: >> > On Sat, 04 Jun 2016 20:27:50 +0200, >> > Dmitry Vyukov wrote: >> >> >> >> On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov

Re: sound: use-after-free in hrtimer_cancel

2016-06-24 Thread Takashi Iwai
On Tue, 21 Jun 2016 20:26:48 +0200, Dmitry Vyukov wrote: > > On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: > > On Sat, 04 Jun 2016 20:27:50 +0200, > > Dmitry Vyukov wrote: > >> > >> On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov wrote: > >> > Hello, > >> > > >> > The following program trigg

Re: sound: use-after-free in hrtimer_cancel

2016-06-21 Thread Dmitry Vyukov
On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: > On Sat, 04 Jun 2016 20:27:50 +0200, > Dmitry Vyukov wrote: >> >> On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov wrote: >> > Hello, >> > >> > The following program triggers use-after-free: >> >> Forget to mention that you need to run it in a tig

Re: sound: use-after-free in hrtimer_cancel

2016-06-21 Thread Dmitry Vyukov
On Mon, Jun 6, 2016 at 6:39 PM, Takashi Iwai wrote: > On Mon, 06 Jun 2016 18:29:25 +0200, > Dmitry Vyukov wrote: >> >> On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: >> > On Sat, 04 Jun 2016 20:27:50 +0200, >> > Dmitry Vyukov wrote: >> >> >> >> On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov

Re: sound: use-after-free in hrtimer_cancel

2016-06-06 Thread Takashi Iwai
On Mon, 06 Jun 2016 18:29:25 +0200, Dmitry Vyukov wrote: > > On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: > > On Sat, 04 Jun 2016 20:27:50 +0200, > > Dmitry Vyukov wrote: > >> > >> On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov wrote: > >> > Hello, > >> > > >> > The following program trigg

Re: sound: use-after-free in hrtimer_cancel

2016-06-06 Thread Dmitry Vyukov
On Mon, Jun 6, 2016 at 4:11 PM, Takashi Iwai wrote: > On Sat, 04 Jun 2016 20:27:50 +0200, > Dmitry Vyukov wrote: >> >> On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov wrote: >> > Hello, >> > >> > The following program triggers use-after-free: >> >> Forget to mention that you need to run it in a tig

Re: sound: use-after-free in hrtimer_cancel

2016-06-06 Thread Takashi Iwai
On Sat, 04 Jun 2016 20:27:50 +0200, Dmitry Vyukov wrote: > > On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov wrote: > > Hello, > > > > The following program triggers use-after-free: > > Forget to mention that you need to run it in a tight parallel loop. It > takes around 5 minutes to reproduce for

Re: sound: use-after-free in hrtimer_cancel

2016-06-04 Thread Dmitry Vyukov
On Sat, Jun 4, 2016 at 8:00 PM, Dmitry Vyukov wrote: > Hello, > > The following program triggers use-after-free: Forget to mention that you need to run it in a tight parallel loop. It takes around 5 minutes to reproduce for me.

sound: use-after-free in hrtimer_cancel

2016-06-04 Thread Dmitry Vyukov
Hello, The following program triggers use-after-free: // autogenerated by syzkaller (http://github.com/google/syzkaller) #include #include #include #include #include long r[20]; void* thr(void* arg) { switch ((long)arg) { case 0: break; case 1: r[2] = syscall(SYS_open, "/dev/