[Crash-utility] [PATCH]: double free in trace extension

Lai Jiangshan laijs at cn.fujitsu.com
Fri May 11 05:31:13 UTC 2012


> 
> Second, I believe there is a double free in the trace extension. When ftrace_init_pages() fails it will free
> 
>    cpu_buffer->pages
> 
> and
> 
>    cpu_buffer->linear_pages
> 
> But when ftrace_init_pages() fails, ftrace_init_buffers() will call ftrace_destroy_buffers() which also free's this space. For me this resulted in a segfault in a malloc() a little later.
> 
> 

Good.
Acked.

Thanks,
Lai




More information about the Crash-utility mailing list