Steven Rostedt (VMware)
2d349b0a69
tracing / histogram: Fix NULL pointer dereference on strcmp() on NULL event name
[ Upstream commit 5acce0bff2 ]
The following commands:
# echo 'read_max u64 size;' > synthetic_events
# echo 'hist:keys=common_pid:count=count:onmax($count).trace(read_max,count)' > events/syscalls/sys_enter_read/trigger
Causes:
BUG: kernel NULL pointer dereference, address: 0000000000000000
#PF: supervisor read access in kernel mode
#PF: error_code(0x0000) - not-present page
PGD 0 P4D 0
Oops: 0000 [#1] PREEMPT SMP
CPU: 4 PID: 1763 Comm: bash Not tainted 5.14.0-rc2-test+ #155
Hardware name: Hewlett-Packard HP Compaq Pro 6300 SFF/339A, BIOS K01
v03.03 07/14/2016
RIP: 0010:strcmp+0xc/0x20
Code: 75 f7 31 c0 0f b6 0c 06 88 0c 02 48 83 c0 01 84 c9 75 f1 4c 89 c0
c3 0f 1f 80 00 00 00 00 31 c0 eb 08 48 83 c0 01 84 d2 74 0f <0f> b6 14 07
3a 14 06 74 ef 19 c0 83 c8 01 c3 31 c0 c3 66 90 48 89
RSP: 0018:ffffb5fdc0963ca8 EFLAGS: 00010246
RAX: 0000000000000000 RBX: ffffffffb3a4e040 RCX: 0000000000000000
RDX: 0000000000000000 RSI: ffff9714c0d0b640 RDI: 0000000000000000
RBP: 0000000000000000 R08: 00000022986b7cde R09: ffffffffb3a4dff8
R10: 0000000000000000 R11: 0000000000000000 R12: ffff9714c50603c8
R13: 0000000000000000 R14: ffff97143fdf9e48 R15: ffff9714c01a2210
FS: 00007f1fa6785740(0000) GS:ffff9714da400000(0000)
knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000002d863004 CR4: 00000000001706e0
Call Trace:
__find_event_file+0x4e/0x80
action_create+0x6b7/0xeb0
? kstrdup+0x44/0x60
event_hist_trigger_func+0x1a07/0x2130
trigger_process_regex+0xbd/0x110
event_trigger_write+0x71/0xd0
vfs_write+0xe9/0x310
ksys_write+0x68/0xe0
do_syscall_64+0x3b/0x90
entry_SYSCALL_64_after_hwframe+0x44/0xae
RIP: 0033:0x7f1fa6879e87
The problem was the "trace(read_max,count)" where the "count" should be
"$count" as "onmax()" only handles variables (although it really should be
able to figure out that "count" is a field of sys_enter_read). But there's
a path that does not find the variable and ends up passing a NULL for the
event, which ends up getting passed to "strcmp()".
Add a check for NULL to return and error on the command with:
# cat error_log
hist:syscalls:sys_enter_read: error: Couldn't create or find variable
Command: hist:keys=common_pid:count=count:onmax($count).trace(read_max,count)
^
Link: https://lkml.kernel.org/r/20210808003011.4037f8d0@oasis.local.home
Cc: Masami Hiramatsu <mhiramat@kernel.org>
Cc: stable@vger.kernel.org
Fixes: 50450603ec tracing: Add 'onmax' hist trigger action support
Reviewed-by: Tom Zanussi <zanussi@kernel.org>
Signed-off-by: Steven Rostedt (VMware) <rostedt@goodmis.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2021-08-26 08:36:47 -04:00
..
2021-08-15 13:05:04 +02:00
2021-06-16 11:54:59 +02:00
2021-03-04 09:39:31 +01:00
2020-11-18 19:18:51 +01:00
2021-06-16 11:55:01 +02:00
2020-09-17 13:45:31 +02:00
2021-08-26 08:36:40 -04:00
2021-05-26 11:48:32 +02:00
2021-02-03 23:23:24 +01:00
2021-03-04 09:39:57 +01:00
2021-07-28 11:13:44 +02:00
2021-07-20 16:15:46 +02:00
2021-08-26 08:36:47 -04:00
2020-10-01 13:14:33 +02:00
2020-06-22 09:05:13 +02:00
2020-06-22 09:05:13 +02:00
2020-06-22 09:05:13 +02:00
2020-06-22 09:04:58 +02:00
2020-06-22 09:05:28 +02:00
2021-07-20 16:16:04 +02:00
2021-01-30 13:32:11 +01:00
2020-11-24 13:27:23 +01:00
2021-01-30 13:32:11 +01:00
2021-07-11 12:49:30 +02:00
2021-03-04 09:39:30 +01:00
2020-07-16 08:17:26 +02:00
2021-02-03 23:23:23 +01:00
2021-05-22 10:59:44 +02:00
2020-04-17 10:48:52 +02:00
2021-02-13 13:51:13 +01:00
2021-07-11 12:49:31 +02:00
2021-02-10 09:21:06 +01:00
2021-06-30 08:48:28 -04:00
2020-03-25 08:06:13 +01:00
2021-08-08 08:54:30 +02:00
2021-05-26 11:48:32 +02:00
2020-11-18 19:18:52 +01:00
2020-08-26 10:30:59 +02:00
2021-03-04 09:39:54 +01:00
2020-11-10 12:35:53 +01:00
2021-05-22 10:59:39 +02:00
2021-02-07 14:48:38 +01:00
2020-10-01 13:14:29 +02:00
2021-02-07 14:48:37 +01:00
2021-07-20 16:15:42 +02:00
2020-10-14 10:31:21 +02:00
2021-05-22 10:59:39 +02:00
2021-07-31 08:22:37 +02:00