e0ac8457d0
While the tracer accesses ptrace breakpoints, the child task may concurrently exit due to a SIGKILL and thus release its breakpoints at the same time. We can then dereference some freed pointers. To fix this, hold a reference on the child breakpoints before manipulating them. Reported-by: Oleg Nesterov <oleg@redhat.com> Signed-off-by: Frederic Weisbecker <fweisbec@gmail.com> Acked-by: Paul Mundt <lethal@linux-sh.org> Cc: Ingo Molnar <mingo@elte.hu> Cc: Peter Zijlstra <a.p.zijlstra@chello.nl> Cc: Will Deacon <will.deacon@arm.com> Cc: Prasad <prasad@linux.vnet.ibm.com> Link: http://lkml.kernel.org/r/1302284067-7860-6-git-send-email-fweisbec@gmail.com |
||
---|---|---|
.. | ||
cpu | ||
vsyscall | ||
.gitignore | ||
asm-offsets.c | ||
cpufreq.c | ||
crash_dump.c | ||
debugtraps.S | ||
disassemble.c | ||
dma-nommu.c | ||
dumpstack.c | ||
dwarf.c | ||
entry-common.S | ||
ftrace.c | ||
head_32.S | ||
head_64.S | ||
hw_breakpoint.c | ||
idle.c | ||
init_task.c | ||
io_trapped.c | ||
io.c | ||
iomap.c | ||
ioport.c | ||
irq_32.c | ||
irq_64.c | ||
irq.c | ||
kdebugfs.c | ||
kgdb.c | ||
kprobes.c | ||
localtimer.c | ||
machine_kexec.c | ||
machvec.c | ||
Makefile | ||
module.c | ||
nmi_debug.c | ||
perf_callchain.c | ||
perf_event.c | ||
process_32.c | ||
process_64.c | ||
process.c | ||
ptrace_32.c | ||
ptrace_64.c | ||
ptrace.c | ||
reboot.c | ||
relocate_kernel.S | ||
return_address.c | ||
setup.c | ||
sh_bios.c | ||
sh_ksyms_32.c | ||
sh_ksyms_64.c | ||
signal_32.c | ||
signal_64.c | ||
smp.c | ||
stacktrace.c | ||
swsusp.c | ||
sys_sh32.c | ||
sys_sh64.c | ||
sys_sh.c | ||
syscalls_32.S | ||
syscalls_64.S | ||
time.c | ||
topology.c | ||
traps_32.c | ||
traps_64.c | ||
traps.c | ||
unwinder.c | ||
vmlinux.lds.S |