Commit d19f6529 authored by Takashi Iwai's avatar Takashi Iwai Committed by Sasha Levin

ALSA: timer: Reject user params with too small ticks

[ Upstream commit 71321eb3 ]

When a user sets a too small ticks with a fine-grained timer like
hrtimer, the kernel tries to fire up the timer irq too frequently.
This may lead to the condensed locks, eventually the kernel spinlock
lockup with warnings.

For avoiding such a situation, we define a lower limit of the
resolution, namely 1ms.  When the user passes a too small tick value
that results in less than that, the kernel returns -EINVAL now.
Reported-by: default avatarDmitry Vyukov <dvyukov@google.com>
Cc: <stable@vger.kernel.org>
Signed-off-by: default avatarTakashi Iwai <tiwai@suse.de>
Signed-off-by: default avatarSasha Levin <alexander.levin@verizon.com>
parent 3d35f442
...@@ -1695,9 +1695,21 @@ static int snd_timer_user_params(struct file *file, ...@@ -1695,9 +1695,21 @@ static int snd_timer_user_params(struct file *file,
return -EBADFD; return -EBADFD;
if (copy_from_user(&params, _params, sizeof(params))) if (copy_from_user(&params, _params, sizeof(params)))
return -EFAULT; return -EFAULT;
if (!(t->hw.flags & SNDRV_TIMER_HW_SLAVE) && params.ticks < 1) { if (!(t->hw.flags & SNDRV_TIMER_HW_SLAVE)) {
err = -EINVAL; u64 resolution;
goto _end;
if (params.ticks < 1) {
err = -EINVAL;
goto _end;
}
/* Don't allow resolution less than 1ms */
resolution = snd_timer_resolution(tu->timeri);
resolution *= params.ticks;
if (resolution < 1000000) {
err = -EINVAL;
goto _end;
}
} }
if (params.queue_size > 0 && if (params.queue_size > 0 &&
(params.queue_size < 32 || params.queue_size > 1024)) { (params.queue_size < 32 || params.queue_size > 1024)) {
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment