android/android_kernel_xiaomi_sm8450
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
android_kernel_xiaomi_sm8450/kernel/trace
History
Prateek Sood 6b1340cc00 tracing: Fix race in perf_trace_buf initialization 
A race condition exists while initialiazing perf_trace_buf from
perf_trace_init() and perf_kprobe_init().

      CPU0                                        CPU1
perf_trace_init()
  mutex_lock(&event_mutex)
    perf_trace_event_init()
      perf_trace_event_reg()
        total_ref_count == 0
	buf = alloc_percpu()
        perf_trace_buf[i] = buf
        tp_event->class->reg() //fails       perf_kprobe_init()
	goto fail                              perf_trace_event_init()
                                                 perf_trace_event_reg()
        fail:
	  total_ref_count == 0

                                                   total_ref_count == 0
                                                   buf = alloc_percpu()
                                                   perf_trace_buf[i] = buf
                                                   tp_event->class->reg()
                                                   total_ref_count++

          free_percpu(perf_trace_buf[i])
          perf_trace_buf[i] = NULL

Any subsequent call to perf_trace_event_reg() will observe total_ref_count > 0,
causing the perf_trace_buf to be always NULL. This can result in perf_trace_buf
getting accessed from perf_trace_buf_alloc() without being initialized. Acquiring
event_mutex in perf_kprobe_init() before calling perf_trace_event_init() should
fix this race.

The race caused the following bug:

 Unable to handle kernel paging request at virtual address 0000003106f2003c
 Mem abort info:
   ESR = 0x96000045
   Exception class = DABT (current EL), IL = 32 bits
   SET = 0, FnV = 0
   EA = 0, S1PTW = 0
 Data abort info:
   ISV = 0, ISS = 0x00000045
   CM = 0, WnR = 1
 user pgtable: 4k pages, 39-bit VAs, pgdp = ffffffc034b9b000
 [0000003106f2003c] pgd=0000000000000000, pud=0000000000000000
 Internal error: Oops: 96000045 [#1] PREEMPT SMP
 Process syz-executor (pid: 18393, stack limit = 0xffffffc093190000)
 pstate: 80400005 (Nzcv daif +PAN -UAO)
 pc : __memset+0x20/0x1ac
 lr : memset+0x3c/0x50
 sp : ffffffc09319fc50

  __memset+0x20/0x1ac
  perf_trace_buf_alloc+0x140/0x1a0
  perf_trace_sys_enter+0x158/0x310
  syscall_trace_enter+0x348/0x7c0
  el0_svc_common+0x11c/0x368
  el0_svc_handler+0x12c/0x198
  el0_svc+0x8/0xc

Ramdumps showed the following:
  total_ref_count = 3
  perf_trace_buf = (
      0x0 -> NULL,
      0x0 -> NULL,
      0x0 -> NULL,
      0x0 -> NULL)

Link: http://lkml.kernel.org/r/1571120245-4186-1-git-send-email-prsood@codeaurora.org

Cc: stable@vger.kernel.org
Fixes: e12f03d7031a9 ("perf/core: Implement the 'perf_kprobe' PMU")
Acked-by: Song Liu <songliubraving@fb.com>
Signed-off-by: Prateek Sood <prsood@codeaurora.org>
Signed-off-by: Steven Rostedt (VMware) <rostedt@goodmis.org>
2019-10-21 19:38:28 -04:00
..
blktrace.c
blktrace: no need to check return value of debugfs_create functions
2019-06-03 15:39:39 +02:00
bpf_trace.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2019-09-28 17:47:33 -07:00
fgraph.c
ftrace: Look up the address of return_to_handler() using helpers
2019-09-18 12:24:47 +10:00
ftrace_internal.h
treewide: Rename rcu_dereference_raw_notrace() to _check()
2019-08-01 14:16:21 -07:00
ftrace.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
Kconfig
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2019-09-18 12:34:53 -07:00
Makefile
tracing: Add unified dynamic event framework
2018-12-08 20:54:09 -05:00
power-traces.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
preemptirq_delay_test.c
tracing: Use trace_clock_local() for looping in preemptirq_delay_test.c
2018-10-17 15:35:33 -04:00
ring_buffer_benchmark.c
tracing: Use CONFIG_PREEMPTION
2019-07-31 19:03:35 +02:00
ring_buffer.c
ring-buffer: Remove HAVE_64BIT_ALIGNED_ACCESS
2019-05-28 09:36:19 -04:00
rpm-traces.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
trace_benchmark.c
rcu: Rename cond_resched_rcu_qs() to cond_resched_tasks_rcu_qs()
2018-05-15 10:27:29 -07:00
trace_benchmark.h
tracing: Fix SPDX format headers to use C++ style comments
2018-08-16 19:08:06 -04:00
trace_branch.c
x86/uaccess, ftrace: Fix ftrace_likely_update() vs. SMAP
2019-04-03 11:02:24 +02:00
trace_clock.c
tracing: Add SPDX License format tags to tracing files
2018-08-16 19:08:06 -04:00
trace_dynevent.c
tracing: Add tracing_check_open_get_tr()
2019-10-12 20:44:07 -04:00
trace_dynevent.h
tracing/dynevent: Pass extra arguments to match operation
2019-08-31 12:19:38 -04:00
trace_entries.h
tracing: Change the function format to display function names by perf
2019-02-11 14:53:43 -05:00
trace_event_perf.c
tracing: Fix race in perf_trace_buf initialization
2019-10-21 19:38:28 -04:00
trace_events_filter_test.h
tracing: Fix SPDX format headers to use C++ style comments
2018-08-16 19:08:06 -04:00
trace_events_filter.c
tracing: Have error path in predicate_parse() free its allocated memory
2019-09-28 17:13:39 -04:00
trace_events_hist.c
tracing: Fix "gfp_t" format for synthetic events
2019-10-18 14:42:53 -04:00
trace_events_trigger.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
trace_events.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
trace_export.c
tracing: Add trigger file for trace_markers tracefs/ftrace/print
2018-05-29 08:28:53 -04:00
trace_functions_graph.c
fgraph: Remove redundant ftrace_graph_notrace_addr() test
2019-07-30 21:50:03 -04:00
trace_functions.c
tracing: Update stack trace skipping for ORC unwinder
2018-01-23 15:57:00 -05:00
trace_hwlat.c
tracing/hwlat: Don't ignore outer-loop duration when calculating max_latency
2019-10-12 20:49:33 -04:00
trace_irqsoff.c
The biggest change for this release is in the histogram code.
2019-03-11 17:01:32 -07:00
trace_kdb.c
tracing: Silence GCC 9 array bounds warning
2019-05-25 23:04:30 -04:00
trace_kprobe_selftest.c
selftest/ftrace: Move kprobe selftest function to separate compile unit
2018-07-30 18:41:04 -04:00
trace_kprobe_selftest.h
tracing: Fix SPDX format headers to use C++ style comments
2018-08-16 19:08:06 -04:00
trace_kprobe.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
trace_mmiotrace.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
trace_nop.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
trace_output.c
tracing: Be more clever when dumping hex in __print_hex()
2019-09-17 11:21:28 -04:00
trace_output.h
tracing: Fix SPDX format headers to use C++ style comments
2018-08-16 19:08:06 -04:00
trace_preemptirq.c
kprobes: Prohibit probing on hardirq tracers
2019-02-13 08:16:40 +01:00
trace_printk.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
trace_probe_tmpl.h
tracing/probe: Support user-space dereference
2019-05-25 23:04:42 -04:00
trace_probe.c
tracing/probe: Fix to check the difference of nr_args before adding probe
2019-09-28 17:07:53 -04:00
trace_probe.h
tracing/probe: Reject exactly same probe event
2019-09-19 11:09:16 -04:00
trace_sched_switch.c
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
trace_sched_wakeup.c
sched/core: Convert get_task_struct() to return the task
2019-07-25 15:51:54 +02:00
trace_selftest_dynamic.c
ftrace: Mark function tracer test functions noinline/noclone
2018-01-23 15:57:29 -05:00
trace_selftest.c
function_graph: Have selftest also emulate tr->reset() as it did with tr->init()
2019-04-21 19:46:56 -04:00
trace_seq.c
tracing: Add SPDX License format tags to tracing files
2018-08-16 19:08:06 -04:00
trace_stack.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
trace_stat.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
trace_stat.h
tracing: Fix SPDX format headers to use C++ style comments
2018-08-16 19:08:06 -04:00
trace_syscalls.c
syscalls: Remove start and number from syscall_get_arguments() args
2019-04-05 09:26:43 -04:00
trace_uprobe.c
tracing: Add locked_down checks to the open calls of files created for tracefs
2019-10-12 20:48:06 -04:00
trace.c
tracing: Initialize iter->seq after zeroing in tracing_read_pipe()
2019-10-12 20:49:34 -04:00
trace.h
tracing: Add tracing_check_open_get_tr()
2019-10-12 20:44:07 -04:00
tracing_map.c
tracing: Add SPDX License format tags to tracing files
2018-08-16 19:08:06 -04:00
tracing_map.h
tracing: Fix SPDX format headers to use C++ style comments
2018-08-16 19:08:06 -04:00