[Crash-utility] [PATCH]: double free in trace extension

Dave Anderson anderson at redhat.com
Fri May 11 14:07:32 UTC 2012



----- Original Message -----
> 
> > 
> > Second, I believe there is a double free in the trace extension.
> > When ftrace_init_pages() fails it will free
> > 
> >    cpu_buffer->pages
> > 
> > and
> > 
> >    cpu_buffer->linear_pages
> > 
> > But when ftrace_init_pages() fails, ftrace_init_buffers() will call
> > ftrace_destroy_buffers() which also free's this space. For me this
> > resulted in a segfault in a malloc() a little later.
> > 
> > 
> 
> Good.
> Acked.
> 
> Thanks,
> Lai

The patch is queued for crash-6.0.7.

I've also updated the version found on:

   http://people.redhat.com/anderson/extensions.html

Thanks,
  Dave




More information about the Crash-utility mailing list