[Crash-utility] [PATCH]: double free in trace extension
Lai Jiangshan
laijs at cn.fujitsu.com
Fri May 11 05:31:13 UTC 2012
>
> Second, I believe there is a double free in the trace extension. When ftrace_init_pages() fails it will free
>
> cpu_buffer->pages
>
> and
>
> cpu_buffer->linear_pages
>
> But when ftrace_init_pages() fails, ftrace_init_buffers() will call ftrace_destroy_buffers() which also free's this space. For me this resulted in a segfault in a malloc() a little later.
>
>
Good.
Acked.
Thanks,
Lai
More information about the Crash-utility
mailing list