Clemens Ladisch aa73aec6c3 ALSA: rawmidi: fix oops (use after free) when unloading a driver module ... When a driver module is unloaded and the last still open file is a raw MIDI device, the card and its devices will be actually freed in the snd_card_file_remove() call when that file is closed. Afterwards, rmidi and rmidi->card point into freed memory, so the module pointer is likely to be garbage. (This was introduced by commit 9a1b64caac82aa02cb74587ffc798e6f42c6170a.) Signed-off-by: Clemens Ladisch <clemens@ladisch.de> Reported-by: Krzysztof Foltman <wdev@foltman.com> Cc: 2.6.30-2.6.35 <stable@kernel.org> Signed-off-by: Takashi Iwai <tiwai@suse.de>		2010-10-17 10:11:40 +02:00
..
aoa	of/device: Replace struct of_device with struct platform_device	2010-08-06 09:25:50 -06:00
arm	Merge remote branch 'alsa/devel' into topic/misc	2010-04-16 15:20:06 +02:00
atmel	ALSA: atmel: set "channel A event" output to debug	2010-06-08 16:42:02 +02:00
core	ALSA: rawmidi: fix oops (use after free) when unloading a driver module	2010-10-17 10:11:40 +02:00
drivers	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai/sound-2.6	2010-08-07 17:07:31 -07:00
i2c	ALSA: i2c/other/ak4xx-adda: Fix a compile warning with CONFIG_PROCFS=n	2010-09-30 22:59:12 +02:00
isa	ALSA: msnd-classic: Fix invalid cfg parameter	2010-09-08 09:58:12 +02:00
mips	sound: Add missing spin_unlock	2010-05-27 09:47:02 +02:00
oss	OSS: soundcard: locking bug in sound_ioctl()	2010-10-11 13:44:17 +02:00
parisc
pci	ALSA: hda - Add another HP DV6 quirk	2010-10-11 13:49:04 +02:00
pcmcia	pcmcia: do not use io_req_t when calling pcmcia_request_io()	2010-08-03 09:04:11 +02:00
ppc	sound: Remove pr_<level> uses of KERN_<level>	2010-09-13 23:40:29 +02:00
sh
soc	Merge branch 'fix/asoc' into for-linus	2010-09-25 17:57:49 +02:00
sparc	of/device: Replace struct of_device with struct platform_device	2010-08-06 09:25:50 -06:00
spi	ALSA: sound/spi: patch for the unuseful variable removal	2010-06-08 16:51:27 +02:00
synth
usb	ALSA: usb - Release capture substream URBs properly	2010-09-08 08:27:02 +02:00
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c	sound: push BKL into open functions	2010-07-12 17:41:05 +02:00
sound_firmware.c