commit a401aaf06f3bfa137381c2864bb41e9a92cac953
author jeron <jeron.susan@hi-p.com> Wed Jul 27 15:26:26 2016 +0800
committer Teemu Hukkanen <teemu@fairphone.com> Fri Aug 26 10:37:41 2016 +0200
tree 7345e086cbcc506baad8dda04330f2a4930391b3
parent 8faff7409c553a6d6e544702011ba36484e65203

FPII-2245: Elevation of privilege vulnerability in kernel sound component CVE-2016-2544 ANDROID-28695438

ALSA: seq: Fix race at timer setup and close
ALSA sequencer code has an open race between the timer setup ioctl and the close of the client.
This was triggered by syzkaller fuzzer, and a use-after-free was caught there as a result.
This patch papers over it by adding a proper queue->timer_mutex lock around the timer-related calls in the relevant code path.

Change-Id: Ibcceb8092d2e4293e1c93c4a1b388b388957fd39