ALSA: control: Take card->controls_rwsem in snd_ctl_rename()
authorTakashi Iwai <tiwai@suse.de>
Tue, 18 Jul 2023 14:12:54 +0000 (16:12 +0200)
committerTakashi Iwai <tiwai@suse.de>
Thu, 20 Jul 2023 08:00:02 +0000 (10:00 +0200)
snd_ctl_rename() expects that card->controls_rwsem is held in the
caller side for avoiding possible races, but actually no one really
did that.  It's likely because this operation is done usually only at
the device initialization where no race can happen.  But, it's still
safer to take a lock, so we just take the lock inside snd_ctl_rename()
like most of other API functions do.

Link: https://lore.kernel.org/r/20230718141304.1032-2-tiwai@suse.de
Signed-off-by: Takashi Iwai <tiwai@suse.de>
sound/core/control.c

index 8386b53acdcd430fc0e7fa50d2ec17f51a6fb32a..a41d19c46df29f7f10ff25647ba3bd12baeb351e 100644 (file)
@@ -769,11 +769,12 @@ EXPORT_SYMBOL(snd_ctl_rename_id);
  *
  * Renames the specified control on the card to the new name.
  *
- * Make sure to take the control write lock - down_write(&card->controls_rwsem).
+ * Note that this function takes card->controls_rwsem lock internally.
  */
 void snd_ctl_rename(struct snd_card *card, struct snd_kcontrol *kctl,
                    const char *name)
 {
+       down_write(&card->controls_rwsem);
        remove_hash_entries(card, kctl);
 
        if (strscpy(kctl->id.name, name, sizeof(kctl->id.name)) < 0)
@@ -781,6 +782,7 @@ void snd_ctl_rename(struct snd_card *card, struct snd_kcontrol *kctl,
                        name, kctl->id.name);
 
        add_hash_entries(card, kctl);
+       up_write(&card->controls_rwsem);
 }
 EXPORT_SYMBOL(snd_ctl_rename);