diff options
| author | Linus Torvalds <torvalds@linux-foundation.org> | 2025-06-13 10:51:11 -0700 |
|---|---|---|
| committer | Linus Torvalds <torvalds@linux-foundation.org> | 2025-06-13 10:51:11 -0700 |
| commit | 3ca933aad0aca463512d2f54a79fc65b8ecb0f48 (patch) | |
| tree | 6d32c8c22aa3ded7c5f7e714f767db79e3bf21f8 /scripts/gdb/linux/device.py | |
| parent | dde63797055cf3615bdac744d641e19e165467bb (diff) | |
| parent | 8a157d8a00e815cab4432653cb50c9cedbbb4931 (diff) | |
Merge tag 'trace-v6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace
Pull tracing fix from Steven Rostedt:
- Do not free "head" variable in filter_free_subsystem_filters()
The first error path jumps to "free_now" label but first frees the
newly allocated "head" variable. But the "free_now" code checks this
variable, and if it is not NULL, it will iterate the list. As this
list variable was already initialized, the "free_now" code will not
do anything as it is empty. But freeing it will cause a UAF bug.
The error path should simply jump to the "free_now" label and leave
the "head" variable alone.
* tag 'trace-v6.16-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/trace/linux-trace:
tracing: Do not free "head" on error path of filter_free_subsystem_filters()
Diffstat (limited to 'scripts/gdb/linux/device.py')
0 files changed, 0 insertions, 0 deletions