Clemens Ladisch aa73aec6c3 ALSA: rawmidi: fix oops (use after free) when unloading a driver module ... When a driver module is unloaded and the last still open file is a raw MIDI device, the card and its devices will be actually freed in the snd_card_file_remove() call when that file is closed. Afterwards, rmidi and rmidi->card point into freed memory, so the module pointer is likely to be garbage. (This was introduced by commit 9a1b64caac82aa02cb74587ffc798e6f42c6170a.) Signed-off-by: Clemens Ladisch <clemens@ladisch.de> Reported-by: Krzysztof Foltman <wdev@foltman.com> Cc: 2.6.30-2.6.35 <stable@kernel.org> Signed-off-by: Takashi Iwai <tiwai@suse.de>		2010-10-17 10:11:40 +02:00
..
aoa
arm
atmel
core	ALSA: rawmidi: fix oops (use after free) when unloading a driver module	2010-10-17 10:11:40 +02:00
drivers
i2c	ALSA: i2c/other/ak4xx-adda: Fix a compile warning with CONFIG_PROCFS=n	2010-09-30 22:59:12 +02:00
isa	ALSA: msnd-classic: Fix invalid cfg parameter	2010-09-08 09:58:12 +02:00
mips
oss	OSS: soundcard: locking bug in sound_ioctl()	2010-10-11 13:44:17 +02:00
parisc
pci	ALSA: hda - Add another HP DV6 quirk	2010-10-11 13:49:04 +02:00
pcmcia
ppc	sound: Remove pr_<level> uses of KERN_<level>	2010-09-13 23:40:29 +02:00
sh
soc	Merge branch 'fix/asoc' into for-linus	2010-09-25 17:57:49 +02:00
sparc
spi
synth
usb	ALSA: usb - Release capture substream URBs properly	2010-09-08 08:27:02 +02:00
ac97_bus.c
Kconfig
last.c
Makefile
sound_core.c
sound_firmware.c