From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <SRS0=F/Af=7W=vger.kernel.org=linux-kernel-owner@kernel.org>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
	aws-us-west-2-korg-lkml-1.web.codeaurora.org
X-Spam-Level: 
X-Spam-Status: No, score=-0.8 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS,
	MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS autolearn=no autolearn_force=no
	version=3.4.0
Received: from mail.kernel.org (mail.kernel.org [198.145.29.99])
	by smtp.lore.kernel.org (Postfix) with ESMTP id 41BB5C433DF
	for <linux-kernel@archiver.kernel.org>; Tue,  9 Jun 2020 15:12:49 +0000 (UTC)
Received: from vger.kernel.org (vger.kernel.org [23.128.96.18])
	by mail.kernel.org (Postfix) with ESMTP id 22105207ED
	for <linux-kernel@archiver.kernel.org>; Tue,  9 Jun 2020 15:12:49 +0000 (UTC)
Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand
        id S1730704AbgFIPMr (ORCPT
        <rfc822;linux-kernel@archiver.kernel.org>);
        Tue, 9 Jun 2020 11:12:47 -0400
Received: from mx2.suse.de ([195.135.220.15]:38748 "EHLO mx2.suse.de"
        rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP
        id S1728082AbgFIPMn (ORCPT <rfc822;linux-kernel@vger.kernel.org>);
        Tue, 9 Jun 2020 11:12:43 -0400
X-Virus-Scanned: by amavisd-new at test-mx.suse.de
Received: from relay2.suse.de (unknown [195.135.220.254])
        by mx2.suse.de (Postfix) with ESMTP id B30BBAE0A;
        Tue,  9 Jun 2020 15:12:45 +0000 (UTC)
Date:   Tue, 09 Jun 2020 17:12:41 +0200
Message-ID: <s5hr1uogtna.wl-tiwai@suse.de>
From:   Takashi Iwai <tiwai@suse.de>
To:     "Alex Xu (Hello71)" <alex_y_xu@yahoo.ca>
Cc:     Christoph Hellwig <hch@lst.de>, <alsa-devel@alsa-project.org>,
        <bp@alien8.de>, <hch@infradead.org>, <hpa@zytor.com>,
        <linux-kernel@vger.kernel.org>, <mingo@redhat.com>,
        Pavel Machek <pavel@ucw.cz>, <perex@perex.cz>,
        <rientjes@google.com>, <tglx@linutronix.de>, <tiwai@suse.com>,
        <x86@kernel.org>
Subject: Re: next-0519 on thinkpad x60: sound related? window manager crash
In-Reply-To: <20200609114733.GA1621@lst.de>
References: <20200520111136.GA3802@amd>
        <1591545088.74ii116nf2.none@localhost>
        <20200608061950.GA17476@lst.de>
        <1591624340.z01ejtod28.none@localhost>
        <20200609114733.GA1621@lst.de>
User-Agent: Wanderlust/2.15.9 (Almost Unreal) SEMI/1.14.6 (Maruoka)
 FLIM/1.14.9 (=?UTF-8?B?R29qxY0=?=) APEL/10.8 Emacs/25.3
 (x86_64-suse-linux-gnu) MULE/6.0 (HANACHIRUSATO)
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=US-ASCII
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-kernel.vger.kernel.org>
X-Mailing-List: linux-kernel@vger.kernel.org

On Tue, 09 Jun 2020 13:47:33 +0200,
Christoph Hellwig wrote:
> 
> Alex, can you try this patch?

Also could you check whether just papering over the memset() call
alone avoids the crash like below?  For PulseAudio and dmix/dsnoop,
it's the only code path that accesses the vmapped buffer, I believe.

If this works more or less, I'll cook a more comprehensive fix.


thanks,

Takashi

--- a/sound/core/pcm_native.c
+++ b/sound/core/pcm_native.c
@@ -754,9 +754,11 @@ static int snd_pcm_hw_params(struct snd_pcm_substream *substream,
 	while (runtime->boundary * 2 <= LONG_MAX - runtime->buffer_size)
 		runtime->boundary *= 2;
 
+#if 0
 	/* clear the buffer for avoiding possible kernel info leaks */
 	if (runtime->dma_area && !substream->ops->copy_user)
 		memset(runtime->dma_area, 0, runtime->dma_bytes);
+#endif
 
 	snd_pcm_timer_resolution_change(substream);
 	snd_pcm_set_state(substream, SNDRV_PCM_STATE_SETUP);