From mboxrd@z Thu Jan 1 00:00:00 1970 Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.remote-ip=46.101.248.176 ARC-Seal: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; cv=none; t=1794571498; b=ELw7Hf6AGQMujqPlsTEL5WpbO6TgsDtmwYmZmPeWqvoCYlPH4JXMmPloLGcIOWS1cA0t OuJRzPJhNPZHvpP3UvDQ4MhkNeUXjkaxPm4rMN806G2/c0ukVXzLCShYQyjSzJbeEtMRG mDEAm5/KiS5my2lGv9Go5WeCATTq7zFenaCLQP/S8TBbHMN70sRhNjOU3AOkfn/7TKG3r Z25rxbSBuhRqdh9Ao/+zPhE8S1JdiK3h2mg+gQ8o4e++RbKwoVqjePimQyilWzwgmCRqX engEaTwZziRhdbyW/iSvK1fhfwZtIYsdYLTUKjdXW3gGUryNd2Lk8bXN6Jk3En19q5w== ARC-Message-Signature: i=1; d=subspace.kernel.org; s=arc20261015; a=rsa-sha256; c=relaxed/relaxed; t=1794571498; h=DMARC-Filter:Received:X-Originating-IP:Date:X-CM-HeaderCharset:From: To:Cc:Subject:X-Priority:X-Mailer:In-Reply-To:References: X-CM-CTRLMSGS:Content-Transfer-Encoding:Content-Type:MIME-Version: Message-ID:X-Coremail-Locale:X-CM-TRANSID:X-CM-SenderInfo: X-Coremail-Antispam; bh=TWlneyLjsjHFwo90UkXetICp3xXnDo84KfAk9d6ufrQ=; b=n7Q0jU4Tol581uQR56B70i+b8z7fm9oTbe/ppojeP3j0w8uzlfg32XORlVBrAhokpavg bEx0MUqvCS+CmxhEnW886UGqBIdkyJe8o26mnvqGdyphlawZau5L+i30R0dWZRSDgLA9D gwMKb4q5Sfq63UJw2b2//HIvFqm6SyLA1RwJXOfPHmV9Mnxnfzuj15UVH700776ZlAzV4 I6DbZ730NlYwUMh42lTx2YgZiheBqx80jI1AN6cpjdzc7uUdtt7Aa6Eh/IoZSB5jQJ0Fp Mek7RXZGFzRuLxxb5UXyKMcG0uzJY8B1d689rAkpnAb04Ieev4h8mfTpoSa2bFO40uw== ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=none header.from=hust.edu.cn; spf=pass smtp.mailfrom=hust.edu.cn; arc=none smtp.remote-ip=46.101.248.176 Received: from zg8tndyumtaxlji0oc4xnzya.icoremail.net (zg8tndyumtaxlji0oc4xnzya.icoremail.net [46.101.248.176]) by smtp.subspace.kernel.org (Postfix) with ESMTP id 02507606A8AC; Fri, 13 Nov 2026 12:04:56 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.4.2 smtp.subspace.kernel.org 02507606A8AC Authentication-Results: smtp.subspace.kernel.org; dmarc=none (p=none dis=none) header.from=hust.edu.cn Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=hust.edu.cn Received: from xuhx$hust.edu.cn ( [10.12.190.107] ) by ajax-webmail-app1 (Coremail) ; Fri, 13 Nov 2026 20:04:48 +0800 (GMT+08:00) Date: Fri, 13 Nov 2026 20:04:48 +0800 (GMT+08:00) X-CM-HeaderCharset: UTF-8 From: =?UTF-8?B?5b6Q5pmX57+U?= To: perex@perex.cz, tiwai@suse.com Cc: linux-sound@vger.kernel.org, linux-kernel@vger.kernel.org Subject: ALSA: asihpi: free IRQ before snd_card_free()/HPI delete on HPI6205 removal (UAF) X-Priority: 3 X-Mailer: Coremail Webmail Server Version 2025.3-cmXT6 build 20260810(6c94e3b5) Copyright (c) 2002-2026 www.mailtech.cn hust In-Reply-To: <2026102727-data-sequel-ce41@gregkh> References: <4c7f9772.192e1.1a17d5c2ed5.Coremail.xuhx@hust.edu.cn> <2026102727-data-sequel-ce41@gregkh> X-CM-CTRLMSGS: =?B?2g8qRDiH6nJ5xwDR7hwMki1N8jM= Content-Transfer-Encoding: base64 Content-Type: text/plain; charset=UTF-8 X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 Message-ID: <358caed8.262e3.1a1d4cbccec.Coremail.xuhx@hust.edu.cn> X-Coremail-Locale: zh_CN X-CM-TRANSID:IAEQrMAm72rg_PZqqPZGAA--.13381W X-CM-SenderInfo: bgsqjkayqyjmo6kx23oohg3hdfq/1tbiAQQKB2r15u1-uAACsZ X-Coremail-Antispam: 1Ur529EdanIXcx71UUUUU7IcSsGvfJ3iIAIbVAYjsxI4VWDJw CS07vEb4IE77IF4wCS07vE1I0E4x80FVAKz4kxMIAIbVAFxVCaYxvI4VCIwcAKzIAtYxBI daVFxhVjvjDU= YHNuZF9hc2locGlfcmVtb3ZlKClgIGZyZWVzIHRoZSBBTFNBIGNhcmQgYW5kIHRoZW4gc2VuZHMg SFBJX0FEQVBURVJfREVMRVRFCih3aGljaCBmcmVlcyB0aGUgSFBJNjIwNSBgcGh3YCkgYmVmb3Jl IGBmcmVlX2lycSgpYC4gIEJvdGggdGhlIHByaW1hcnkgSVJRCmhhbmRsZXIgYW5kIHRoZSB0aHJl YWRlZCBoYW5kbGVyIGNhbiB0aGVyZWZvcmUgcnVuIGFnYWluc3QgZnJlZWQgbWVtb3J5Ogp0aGUg cHJpbWFyeSBoYW5kbGVyIGRlcmVmZXJlbmNlcyBgcGh3LT5wckhTUmAgdGhyb3VnaApgYWRhcHRl cl9pcnFfcXVlcnlfYW5kX2NsZWFyKClgLCBhbmQgdGhlIHRocmVhZGVkIGNhbGxiYWNrIGRlcmVm ZXJlbmNlcwpgYS0+c25kX2NhcmQtPnByaXZhdGVfZGF0YWAgYWZ0ZXIgdGhlIGNhcmQgcHJpdmF0 ZSBhcmVhIGhhcyBiZWVuIGZyZWVkLgoKVGhlIGRldGFpbGVkIGRlc2NyaXB0aW9uOgoKKiBUZXN0 IGVudmlyb25tZW50IC8gYWZmZWN0ZWQgdmVyc2lvbgoKICBMaW51eCA3LjMuMCBzb3VyY2UgdHJl ZS4gIEFmZmVjdGVkIGhhcmR3YXJlIHBhdGg6IEFTSTYyMDUvSFBJNjIwNSBpbgogIGludGVycnVw dCBtb2RlIChgbG93X2xhdGVuY3lfbW9kZSAmJiBpcnFfc3VwcG9ydGVkYCwgYGludGVycnVwdF9t b2RlPTFgKS4KICBIUEk2MDAwIGRvZXMgbm90IHNldCBgaXJxX3F1ZXJ5X2FuZF9jbGVhcmAgYW5k IGlzIHBvbGxlZCwgc28gaXQgaXMgbm90IHBhcnQKICBvZiB0aGlzIHJlcG9ydC4KCiogTWVjaGFu aXNtCgogIGBzbmRfYXNpaHBpX3JlbW92ZSgpYCAoYHNvdW5kL3BjaS9hc2locGkvYXNpaHBpLmM6 MjkxOS0yOTMzYCk6CgogICAgaHBpLT5pbnRlcnJ1cHRfY2FsbGJhY2sgPSBOVUxMOyAgICAgICAg ICAvKiBpZiBpbnRlcnJ1cHRfbW9kZSAqLwogICAgLi4uIHNlbmQgSFBJIElSUSByYXRlIDAgLi4u CiAgICBzbmRfY2FyZF9mcmVlKGhwaS0+c25kX2NhcmQpOyAgICAgICAgICAgIC8qIGxpbmUgMjkz MCAqLwogICAgaHBpLT5zbmRfY2FyZCA9IE5VTEw7ICAgICAgICAgICAgICAgICAgICAvKiBsaW5l IDI5MzEgKi8KICAgIGFzaWhwaV9hZGFwdGVyX3JlbW92ZShwY2lfZGV2KTsgICAgICAgICAgLyog bGluZSAyOTMyICovCgogIGBhc2locGlfYWRhcHRlcl9yZW1vdmUoKWAgKGBocGlvY3RsLmM6NTIw LTU1NWApIHRoZW4gc2VuZHMgSVJRIHJhdGUgMCwKICBzZW5kcyBgSFBJX0FEQVBURVJfREVMRVRF YCAoNTM3LTU0MCksIGFuZCBvbmx5IGFmdGVyd2FyZHMgY2FsbHMKICBgZnJlZV9pcnEocGEtPmly cSwgcGEpYCAoNTQyLTU0MykuCgogIEhQSTYyMDUgYGFkYXB0ZXJfZGVsZXRlKClgIChgaHBpNjIw NS5jOjQ5MS01MTBgKSAtPiBgZGVsZXRlX2FkYXB0ZXJfb2JqKClgCiAgKGBocGk2MjA1LmM6Njc1 LTcwNGApIGRvZXMgYGtmcmVlKHBodylgIGF0IDcwMyB3aXRob3V0IGNsZWFyaW5nCiAgYHBhby0+ cHJpdmAsIHRoZW4gYGhwaV9kZWxldGVfYWRhcHRlcigpYCAoYGhwaWNtbi5jOjk2LTEwOGApIG1l bXNldHMgdGhlCiAgcmVnaXN0cnkgb2JqZWN0IGF0IDEwNi4gIFRoZSBwcmltYXJ5IGhhbmRsZXIg YGFzaWhwaV9pc3IoKWAKICAoYGhwaW9jdGwuYzozMTEtMzM1YCkgY2hlY2tzIGBhLT5hZGFwdGVy LT5pcnFfcXVlcnlfYW5kX2NsZWFyYCBhbmQgY2FsbHMKICBpdDsgSFBJNjIwNSBpbnN0YWxscyB0 aGF0IGhhbmRsZXIgYXQgYGhwaTYyMDUuYzo2NjJgLCBhbmQKICBgYWRhcHRlcl9pcnFfcXVlcnlf YW5kX2NsZWFyKClgIChgaHBpNjIwNS5jOjcwOC03MjJgKSBkb2VzCiAgYGlvcmVhZDMyKHBody0+ cHJIU1IpYCBhdCA3MTQuCgogIFdpbmRvdyBBIChwaHcgVUFGKTogdGhlIGhhbmRsZXIgbG9hZHMg dGhlIGZ1bmN0aW9uIHBvaW50ZXIgYmVmb3JlCiAgYGRlbGV0ZV9hZGFwdGVyX29iaigpYCBmcmVl cyBgcGh3YCwgYW5kIGV4ZWN1dGVzIGFmdGVyIHRoZSBmcmVlLgoKICBXaW5kb3cgQiAoTlVMTCBk ZXJlZik6IHRoZSBoYW5kbGVyIGV4ZWN1dGVzIGFmdGVyIGBocGlfZGVsZXRlX2FkYXB0ZXIoKWAK ICBtZW1zZXRzIHRoZSByZWdpc3RyeSwgc28gYHBhby0+cHJpdmAgaXMgTlVMTCBhbmQgYHBody0+ cHJIU1JgIGlzIGEgTlVMTAogIGRlcmVmZXJlbmNlLgoKICBXaW5kb3cgQyAoY2FyZCBwcml2YXRl IFVBRik6IGBhc2locGlfaXNyX3RocmVhZCgpYCAoYGhwaW9jdGwuYzozMzctMzQ0YCkKICBjYWxs cyBgYS0+aW50ZXJydXB0X2NhbGxiYWNrKGEpYDsgYHNuZF9jYXJkX2FzaWhwaV9pc3IoKWAKICAo YGFzaWhwaS5jOjg5OC05MDdgKSByZWFkcyBgYS0+c25kX2NhcmQtPnByaXZhdGVfZGF0YWAgYW5k CiAgYGFzaWhwaS0+bGxtb2RlX3N0cmVhbXByaXZgLiAgVGhlIGNhcmQgcHJpdmF0ZSBhcmVhIGlz IGFsbG9jYXRlZCBieQogIGBzbmRfY2FyZF9uZXcoLi4uLCBzaXplb2Yoc3RydWN0IHNuZF9jYXJk X2FzaWhwaSksIC4uLilgCiAgKGBhc2locGkuYzoyNzk0LTI3OTlgKSBhbmQgZnJlZWQgYnkgYHNu ZF9jYXJkX2RvX2ZyZWUoKWAKICAoYHNvdW5kL2NvcmUvaW5pdC5jOjU4NC02MTFgLCBga2ZyZWUo Y2FyZClgIGF0IDYxMCkuICBBZnRlcgogIGBocGktPnNuZF9jYXJkID0gTlVMTGAsIHRoZSBzYW1l IGNhbGxiYWNrIGNhbiBhbHNvIHJldHVybiBOVUxMIGZyb20gdGhlCiAgYHNuZF9jYXJkYCBsb2Fk IGFuZCBoaXQgdGhlIFdBUk5fT04vTlVMTCBwYXRoLgoKKiBXaHkgZXhpc3Rpbmcgc3luY2hyb25p emF0aW9uIGRvZXMgbm90IGNsb3NlIHRoZSB3aW5kb3cKCiAgYXNpaHBpIG5ldmVyIHNldHMgYGNh cmQtPnN5bmNfaXJxYCwgc28gYHNuZF9jYXJkX2Rpc2Nvbm5lY3QoKWAgZG9lcyBub3QgY2FsbAog IGBzeW5jaHJvbml6ZV9pcnEoKWAuICBgc25kX2NhcmRfZnJlZSgpYCB3YWl0cyBmb3Igb3BlbiBm aWxlcyBhbmQgdGhlIGNhcmQKICByZWxlYXNlIGNvbXBsZXRpb24sIG5vdCBmb3IgdGhlIElSUSBo YW5kbGVyL3RocmVhZC4gIGBmcmVlX2lycSgpYCBpcyB0aGUKICBmaXJzdCBvcGVyYXRpb24gdGhh dCBxdWllc2NlcyB0aGUgSVJRLCBhbmQgaXQgaGFwcGVucyBhZnRlciBgc25kX2NhcmRfZnJlZSgp YAogIGFuZCBhZnRlciBIUElfQURBUFRFUl9ERUxFVEUgaGFzIGZyZWVkIGBwaHdgLgoKKiBUcmln Z2VyIG1vZGVsCgogIEhQSTYyMDUgZGV2aWNlIGluIElSUSBtb2RlOyByZW1vdmUvdW5iaW5kIHRo ZSBQQ0kgZGV2aWNlLiAgUm9vdCBpcyBuZWVkZWQKICBmb3IgdW5iaW5kL3JlbW92ZS4gIENvbnNl cXVlbmNlOiBVQUYvTlVMTCBkZXJlZiBpbiBoYXJkIElSUSBvciB0aHJlYWRlZCBJUlEKICBjb250 ZXh0OyBjcmFzaCBvciBtZW1vcnkgY29ycnVwdGlvbi4gIFRoZSByZXBvcnQgZG9lcyBub3QgY2xh aW0gYQogIGNvbmN1cnJlbnQgdXNlciBpb2N0bCBwYXRoOiB0aGUgY2FyZCBmaWxlIGRyYWluIHBy ZXZlbnRzIHRoYXQsIGFuZCBvbmx5IHRoZQogIHNpbmdsZSByZW1vdmUgcGF0aCBzZW5kcyBIUElf QURBUFRFUl9ERUxFVEUuCgoqIFN1Z2dlc3RlZCBkaXJlY3Rpb24gCgogIEZyZWUvcXVpZXNjZSB0 aGUgSVJRIGJlZm9yZSBgc25kX2NhcmRfZnJlZSgpYCBhbmQgYmVmb3JlIHNlbmRpbmcKICBIUElf QURBUFRFUl9ERUxFVEU6CgogICAgaWYgKGhwaS0+aXJxKSB7CiAgICAgICAgZnJlZV9pcnEoaHBp LT5pcnEsIGhwaSk7CiAgICAgICAgaHBpLT5pcnEgPSAwOwogICAgfQogICAgc25kX2NhcmRfZnJl ZShocGktPnNuZF9jYXJkKTsKCiAgS2VlcCB0aGUgZXhpc3RpbmcgYGlmIChwYS0+aXJxKWAgZ3Vh cmQgaW4gYGFzaWhwaV9hZGFwdGVyX3JlbW92ZSgpYCB0byBhdm9pZAogIGEgZG91YmxlIGZyZWUu ICBBbHRlcm5hdGl2ZWx5IHNldCBgY2FyZC0+c3luY19pcnFgIGFuZCBwZXJmb3JtIGFuIGV4cGxp Y2l0CiAgYHN5bmNocm9uaXplX2lycSgpYCBiZWZvcmUgcmVsZWFzaW5nIHRoZSBjYXJkIHByaXZh dGUgZGF0YSwgYnV0IGZyZWVpbmcgdGhlCiAgSVJRIGZpcnN0IGlzIHNpbXBsZXIgYW5kIGFsc28g Y292ZXJzIHRoZSBgcGh3YCB3aW5kb3cuCgoKClBsZWFzZSBrZWVwIG1lIGluIENjOyBJIGFtIG5v dCBzdWJzY3JpYmVkIHRvIHRoZSBsaXN0cy4KCgpSZWdhcmRzLApIYW54aWFuZyBYdQp4dWh4QGh1 c3QuZWR1LmNuCg==