mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2025-02-26 06:33:00 +07:00
8efd19bf75
[ Upstream commit 6cf23783f750634e10daeede48b0f5f5d64ebf3a ]
This tracepoint can crash when dereferencing snd_task because
when some transports connect, they put a cookie in that field
instead of a pointer to an rpc_task.
BUG: KASAN: use-after-free in trace_event_raw_event_xprt_writelock_event+0x141/0x18e [sunrpc]
Read of size 2 at addr ffff8881a83bd3a0 by task git/331872
CPU: 11 PID: 331872 Comm: git Tainted: G S 5.12.0-rc2-00007-g3ab6e585a7f9 #1453
Hardware name: Supermicro SYS-6028R-T/X10DRi, BIOS 1.1a 10/16/2015
Call Trace:
dump_stack+0x9c/0xcf
print_address_description.constprop.0+0x18/0x239
kasan_report+0x174/0x1b0
trace_event_raw_event_xprt_writelock_event+0x141/0x18e [sunrpc]
xprt_prepare_transmit+0x8e/0xc1 [sunrpc]
call_transmit+0x4d/0xc6 [sunrpc]
Fixes:
|
||
|---|---|---|
| .. | ||
| 9p.h | ||
| afs.h | ||
| alarmtimer.h | ||
| asoc.h | ||
| avc.h | ||
| bcache.h | ||
| block.h | ||
| bpf_test_run.h | ||
| bridge.h | ||
| btrfs.h | ||
| cachefiles.h | ||
| cgroup.h | ||
| clk.h | ||
| cma.h | ||
| compaction.h | ||
| context_tracking.h | ||
| cpuhp.h | ||
| devfreq.h | ||
| devlink.h | ||
| dma_fence.h | ||
| erofs.h | ||
| ext4.h | ||
| f2fs.h | ||
| fib6.h | ||
| fib.h | ||
| filelock.h | ||
| filemap.h | ||
| fs_dax.h | ||
| fscache.h | ||
| fsi_master_aspeed.h | ||
| fsi_master_ast_cf.h | ||
| fsi_master_gpio.h | ||
| fsi.h | ||
| gpio.h | ||
| gpu_mem.h | ||
| host1x.h | ||
| huge_memory.h | ||
| hwmon.h | ||
| i2c.h | ||
| ib_mad.h | ||
| ib_umad.h | ||
| initcall.h | ||
| intel_iommu.h | ||
| intel_ish.h | ||
| intel-sst.h | ||
| io_uring.h | ||
| iocost.h | ||
| iommu.h | ||
| ipi.h | ||
| irq_matrix.h | ||
| irq.h | ||
| iscsi.h | ||
| jbd2.h | ||
| kmem.h | ||
| kvm.h | ||
| kyber.h | ||
| libata.h | ||
| lock.h | ||
| mce.h | ||
| mdio.h | ||
| migrate.h | ||
| mlxsw.h | ||
| mmap.h | ||
| mmc.h | ||
| mmflags.h | ||
| module.h | ||
| napi.h | ||
| nbd.h | ||
| neigh.h | ||
| net_probe_common.h | ||
| net.h | ||
| nilfs2.h | ||
| nmi.h | ||
| objagg.h | ||
| oom.h | ||
| page_isolation.h | ||
| page_pool.h | ||
| page_ref.h | ||
| pagemap.h | ||
| percpu.h | ||
| power_cpu_migrate.h | ||
| power.h | ||
| preemptirq.h | ||
| printk.h | ||
| pwc.h | ||
| pwm.h | ||
| qdisc.h | ||
| qla.h | ||
| qrtr.h | ||
| random.h | ||
| rcu.h | ||
| rdma_core.h | ||
| rdma.h | ||
| regulator.h | ||
| rpcgss.h | ||
| rpcrdma.h | ||
| rpm.h | ||
| rseq.h | ||
| rtc.h | ||
| rxrpc.h | ||
| sched.h | ||
| scmi.h | ||
| scsi.h | ||
| sctp.h | ||
| signal.h | ||
| siox.h | ||
| skb.h | ||
| smbus.h | ||
| sock.h | ||
| spi.h | ||
| spmi.h | ||
| sunrpc.h | ||
| sunvnet.h | ||
| swiotlb.h | ||
| syscalls.h | ||
| target.h | ||
| task.h | ||
| tcp.h | ||
| tegra_apb_dma.h | ||
| thermal_power_allocator.h | ||
| thermal.h | ||
| thp.h | ||
| timer.h | ||
| tlb.h | ||
| udp.h | ||
| ufs.h | ||
| v4l2.h | ||
| vb2.h | ||
| vmscan.h | ||
| vsock_virtio_transport_common.h | ||
| wbt.h | ||
| workqueue.h | ||
| writeback.h | ||
| xdp.h | ||
| xen.h | ||