Searched hist:"0 e50d999903c009b6a9cd2277c82d6798d982e31" (Results 1 – 2 of 2) sorted by relevance
| /openbmc/linux/net/rxrpc/ |
| H A D | recvmsg.c | diff 0e50d999903c009b6a9cd2277c82d6798d982e31 Sat Dec 24 08:49:00 CST 2022 David Howells <dhowells@redhat.com> rxrpc: Fix a couple of potential use-after-frees
At the end of rxrpc_recvmsg(), if a call is found, the call is put and then
a trace line is emitted referencing that call in a couple of places - but
the call may have been deallocated by the time those traces happen.
Fix this by stashing the call debug_id in a variable and passing that to
the tracepoint rather than the call pointer.
Fixes: 849979051cbc ("rxrpc: Add a tracepoint to follow what recvmsg does")
Signed-off-by: David Howells <dhowells@redhat.com>
cc: Marc Dionne <marc.dionne@auristor.com>
cc: linux-afs@lists.infradead.org
Signed-off-by: David S. Miller <davem@davemloft.net>
|
| /openbmc/linux/include/trace/events/ |
| H A D | rxrpc.h | diff 0e50d999903c009b6a9cd2277c82d6798d982e31 Sat Dec 24 08:49:00 CST 2022 David Howells <dhowells@redhat.com> rxrpc: Fix a couple of potential use-after-frees
At the end of rxrpc_recvmsg(), if a call is found, the call is put and then
a trace line is emitted referencing that call in a couple of places - but
the call may have been deallocated by the time those traces happen.
Fix this by stashing the call debug_id in a variable and passing that to
the tracepoint rather than the call pointer.
Fixes: 849979051cbc ("rxrpc: Add a tracepoint to follow what recvmsg does")
Signed-off-by: David Howells <dhowells@redhat.com>
cc: Marc Dionne <marc.dionne@auristor.com>
cc: linux-afs@lists.infradead.org
Signed-off-by: David S. Miller <davem@davemloft.net>
|