From: Steven Rostedt <[email protected]>

There's several locations that free a ftrace hash pointer but may be
referenced again. Reset them to EMPTY_HASH so that a u-a-f bug doesn't
happen.

Fixes: 0ae6b8ce200d ("ftrace: Fix accounting of subop hashes")
Signed-off-by: Steven Rostedt (Google) <[email protected]>
---
 kernel/trace/ftrace.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kernel/trace/ftrace.c b/kernel/trace/ftrace.c
index 66bf4512ec04..39ccbb3b9693 100644
--- a/kernel/trace/ftrace.c
+++ b/kernel/trace/ftrace.c
@@ -1297,6 +1297,8 @@ void ftrace_free_filter(struct ftrace_ops *ops)
                return;
        free_ftrace_hash(ops->func_hash->filter_hash);
        free_ftrace_hash(ops->func_hash->notrace_hash);
+       ops->func_hash->filter_hash = EMPTY_HASH;
+       ops->func_hash->notrace_hash = EMPTY_HASH;
 }
 EXPORT_SYMBOL_GPL(ftrace_free_filter);
 
@@ -3443,6 +3445,7 @@ static int add_next_hash(struct ftrace_hash 
**filter_hash, struct ftrace_hash **
                                  size_bits);
                if (ret < 0) {
                        free_ftrace_hash(*filter_hash);
+                       *filter_hash = EMPTY_HASH;
                        return ret;
                }
        }
@@ -3472,6 +3475,7 @@ static int add_next_hash(struct ftrace_hash 
**filter_hash, struct ftrace_hash **
                                     subops_hash->notrace_hash);
                if (ret < 0) {
                        free_ftrace_hash(*notrace_hash);
+                       *notrace_hash = EMPTY_HASH;
                        return ret;
                }
        }
-- 
2.47.2


Reply via email to