From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753824AbdJICnL (ORCPT ); Sun, 8 Oct 2017 22:43:11 -0400 Received: from m12-13.163.com ([220.181.12.13]:57652 "EHLO m12-13.163.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751397AbdJICnK (ORCPT ); Sun, 8 Oct 2017 22:43:10 -0400 To: perex@perex.cz, tiwai@suse.com, o-takashi@sakamocchi.jp, mingo@kernel.org, danielmentz@google.com Cc: alsa-devel@alsa-project.org, linux-kernel@vger.kernel.org From: Jia-Ju Bai Subject: [BUG] sound/core/seq: A possible sleep-in-atomic bug in snd_virmidi_dev_receive_event Message-ID: Date: Mon, 9 Oct 2017 10:42:15 +0800 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US X-CM-TRANSID: DcCowAAnQ1QK4tpZ3xi3MQ--.36942S2 X-Coremail-Antispam: 1Uf129KBjDUn29KB7ZKAUJUUUUU529EdanIXcx71UUUUU7v73 VFW2AGmfu7bjvjm3AaLaJ3UbIYCTnIWIevJa73UjIFyTuYvjxUkhSdDUUUU X-Originating-IP: [166.111.70.12] X-CM-SenderInfo: xedlyx5dmximizq6il2tof0z/1tbiVgpselWBaLmk+wAAsQ Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org According to seq_virmidi.c, the driver may sleep under a read spinlock. The function call path is: snd_virmidi_dev_receive_event (acquire the spinlock) snd_seq_dump_var_event copy_from_user --> may sleep This bug is found by my static analysis tool and my code review. Thanks, Jia-Ju Bai