diff options
author | Steven Rostedt (VMware) <rostedt@goodmis.org> | 2019-08-28 15:05:28 -0400 |
---|---|---|
committer | Arnaldo Carvalho de Melo <acme@redhat.com> | 2019-08-29 07:36:12 -0400 |
commit | b0215e2d6a18d8331b2d4a8b38ccf3eff783edb1 (patch) | |
tree | 5d7ede7efab7142f7132a71ad67e00c4418c76a2 | |
parent | b397f8468fa27f08b83b348ffa56a226f72453af (diff) |
tools lib traceevent: Do not free tep->cmdlines in add_new_comm() on failure
If the re-allocation of tep->cmdlines succeeds, then the previous
allocation of tep->cmdlines will be freed. If we later fail in
add_new_comm(), we must not free cmdlines, and also should assign
tep->cmdlines to the new allocation. Otherwise when freeing tep, the
tep->cmdlines will be pointing to garbage.
Fixes: a6d2a61ac653a ("tools lib traceevent: Remove some die() calls")
Signed-off-by: Steven Rostedt (VMware) <rostedt@goodmis.org>
Cc: Andrew Morton <akpm@linux-foundation.org>
Cc: Jiri Olsa <jolsa@redhat.com>
Cc: Namhyung Kim <namhyung@kernel.org>
Cc: linux-trace-devel@vger.kernel.org
Cc: stable@vger.kernel.org
Link: http://lkml.kernel.org/r/20190828191819.970121417@goodmis.org
Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
-rw-r--r-- | tools/lib/traceevent/event-parse.c | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/tools/lib/traceevent/event-parse.c b/tools/lib/traceevent/event-parse.c index b36b536a9fcb..13fd9fdf91e0 100644 --- a/tools/lib/traceevent/event-parse.c +++ b/tools/lib/traceevent/event-parse.c | |||
@@ -269,10 +269,10 @@ static int add_new_comm(struct tep_handle *tep, | |||
269 | errno = ENOMEM; | 269 | errno = ENOMEM; |
270 | return -1; | 270 | return -1; |
271 | } | 271 | } |
272 | tep->cmdlines = cmdlines; | ||
272 | 273 | ||
273 | cmdlines[tep->cmdline_count].comm = strdup(comm); | 274 | cmdlines[tep->cmdline_count].comm = strdup(comm); |
274 | if (!cmdlines[tep->cmdline_count].comm) { | 275 | if (!cmdlines[tep->cmdline_count].comm) { |
275 | free(cmdlines); | ||
276 | errno = ENOMEM; | 276 | errno = ENOMEM; |
277 | return -1; | 277 | return -1; |
278 | } | 278 | } |
@@ -283,7 +283,6 @@ static int add_new_comm(struct tep_handle *tep, | |||
283 | tep->cmdline_count++; | 283 | tep->cmdline_count++; |
284 | 284 | ||
285 | qsort(cmdlines, tep->cmdline_count, sizeof(*cmdlines), cmdline_cmp); | 285 | qsort(cmdlines, tep->cmdline_count, sizeof(*cmdlines), cmdline_cmp); |
286 | tep->cmdlines = cmdlines; | ||
287 | 286 | ||
288 | return 0; | 287 | return 0; |
289 | } | 288 | } |