diff options
author | Namhyung Kim <namhyung.kim@lge.com> | 2012-09-19 02:58:42 -0400 |
---|---|---|
committer | Arnaldo Carvalho de Melo <acme@redhat.com> | 2012-09-24 11:01:21 -0400 |
commit | 41e51a289b3ca83e08395213f4488c9c7c6b2e29 (patch) | |
tree | e8d95edbf3b620a013744668e31dce041bd56acd /tools | |
parent | 1bce6e0fec28434fd66de585773a14bf4d2c3715 (diff) |
tools lib traceevent: Make sure that arg->op.right is set properly
When process_op failed, @arg will be freed on a caller with type of
PRINT_OP. Thus free_arg() will try to free ->op.right field which can
have stale value if something bad happens in the middle.
Signed-off-by: Namhyung Kim <namhyung@kernel.org>
Cc: Frederic Weisbecker <fweisbec@gmail.com>
Cc: Ingo Molnar <mingo@kernel.org>
Cc: Peter Zijlstra <a.p.zijlstra@chello.nl>
Cc: Steven Rostedt <rostedt@goodmis.org>
Link: http://lkml.kernel.org/r/1348037924-17568-3-git-send-email-namhyung@kernel.org
Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
Diffstat (limited to 'tools')
-rw-r--r-- | tools/lib/traceevent/event-parse.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/tools/lib/traceevent/event-parse.c b/tools/lib/traceevent/event-parse.c index 6270ee2e9830..27088c55af1b 100644 --- a/tools/lib/traceevent/event-parse.c +++ b/tools/lib/traceevent/event-parse.c | |||
@@ -1719,6 +1719,7 @@ process_op(struct event_format *event, struct print_arg *arg, char **tok) | |||
1719 | arg->op.left = left; | 1719 | arg->op.left = left; |
1720 | arg->op.prio = 0; | 1720 | arg->op.prio = 0; |
1721 | 1721 | ||
1722 | /* it will set arg->op.right */ | ||
1722 | type = process_cond(event, arg, tok); | 1723 | type = process_cond(event, arg, tok); |
1723 | 1724 | ||
1724 | } else if (strcmp(token, ">>") == 0 || | 1725 | } else if (strcmp(token, ">>") == 0 || |
@@ -1745,6 +1746,7 @@ process_op(struct event_format *event, struct print_arg *arg, char **tok) | |||
1745 | arg->type = PRINT_OP; | 1746 | arg->type = PRINT_OP; |
1746 | arg->op.op = token; | 1747 | arg->op.op = token; |
1747 | arg->op.left = left; | 1748 | arg->op.left = left; |
1749 | arg->op.right = NULL; | ||
1748 | 1750 | ||
1749 | if (set_op_prio(arg) == -1) { | 1751 | if (set_op_prio(arg) == -1) { |
1750 | event->flags |= EVENT_FL_FAILED; | 1752 | event->flags |= EVENT_FL_FAILED; |
@@ -1792,6 +1794,7 @@ process_op(struct event_format *event, struct print_arg *arg, char **tok) | |||
1792 | 1794 | ||
1793 | arg->op.prio = 0; | 1795 | arg->op.prio = 0; |
1794 | 1796 | ||
1797 | /* it will set arg->op.right */ | ||
1795 | type = process_array(event, arg, tok); | 1798 | type = process_array(event, arg, tok); |
1796 | 1799 | ||
1797 | } else { | 1800 | } else { |