Re: perf/tracepoint: another fuzzer generated lockup
From: Vince Weaver
Date: Thu Nov 14 2013 - 12:12:31 EST
possibly not an issue with your patch, but found in nearby code:
in perf_trace_init:
int event_id = p_event->attr.config;
...
if (tp_event->event.type == event_id &&
note that "attr.config" is 64-bit but "event_id" is only 32-bit,
so things like 0xffffffff00000018 will map to irq_work_exit.
I'm not sure if your PERM code properly handles this case, I don't have
time to work through the macro-magic in your patch.
Vince
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/