Re: perf/tracepoint: another fuzzer generated lockup

From: Vince Weaver
Date: Thu Nov 14 2013 - 12:12:31 EST



possibly not an issue with your patch, but found in nearby code:

in perf_trace_init:

int event_id = p_event->attr.config;

...

if (tp_event->event.type == event_id &&


note that "attr.config" is 64-bit but "event_id" is only 32-bit,
so things like 0xffffffff00000018 will map to irq_work_exit.

I'm not sure if your PERM code properly handles this case, I don't have
time to work through the macro-magic in your patch.

Vince


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/