diff options
| author | Xiao Guangrong <xiaoguangrong@cn.fujitsu.com> | 2009-12-07 12:06:29 +0800 | 
|---|---|---|
| committer | Ingo Molnar <mingo@elte.hu> | 2009-12-07 06:26:24 +0100 | 
| commit | d8bd9e0aedabcb47887712497bc386a06ddcbd12 (patch) | |
| tree | b8fbdb8987323a3b572554ebe00487d444abfec4 /tools/perf/builtin-sched.c | |
| parent | c0777c5aa835a97ccc77d82e55388940f0140a61 (diff) | |
| download | olio-linux-3.10-d8bd9e0aedabcb47887712497bc386a06ddcbd12.tar.xz olio-linux-3.10-d8bd9e0aedabcb47887712497bc386a06ddcbd12.zip  | |
perf_event: Fix raw event processing
We use 'data.raw_data' parameter to call process_raw_event(),
but data.raw_data buffer not include data size. it can make perf
tool crash.
This bug was introduced by commit 180f95e29a ("perf: Make common
SAMPLE_EVENT parser").
Signed-off-by: Xiao Guangrong <xiaoguangrong@cn.fujitsu.com>
Cc: Pekka Enberg <penberg@cs.helsinki.fi>
Cc: Eduard - Gabriel Munteanu <eduard.munteanu@linux360.ro>
Cc: Frederic Weisbecker <fweisbec@gmail.com>
Cc: Paul Mackerras <paulus@samba.org>
Cc: OGAWA Hirofumi <hirofumi@mail.parknet.co.jp>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Li Zefan <lizf@cn.fujitsu.com>
LKML-Reference: <4B1C7F45.5080105@cn.fujitsu.com>
Signed-off-by: Ingo Molnar <mingo@elte.hu>
Diffstat (limited to 'tools/perf/builtin-sched.c')
| -rw-r--r-- | tools/perf/builtin-sched.c | 11 | 
1 files changed, 8 insertions, 3 deletions
diff --git a/tools/perf/builtin-sched.c b/tools/perf/builtin-sched.c index 7481ebdb17e..4655e16b929 100644 --- a/tools/perf/builtin-sched.c +++ b/tools/perf/builtin-sched.c @@ -1570,13 +1570,17 @@ process_sched_migrate_task_event(struct raw_event_sample *raw,  }  static void -process_raw_event(event_t *raw_event __used, void *more_data, +process_raw_event(event_t *raw_event __used, u32 size, void *data,  		  int cpu, u64 timestamp, struct thread *thread)  { -	struct raw_event_sample *raw = more_data; +	struct raw_event_sample *raw;  	struct event *event;  	int type; +	raw = malloc_or_die(sizeof(*raw)+size); +	raw->size = size; +	memcpy(raw->data, data, size); +  	type = trace_parse_common_type(raw->data);  	event = trace_find_event(type); @@ -1629,7 +1633,8 @@ static int process_sample_event(event_t *event)  	if (profile_cpu != -1 && profile_cpu != (int)data.cpu)  		return 0; -	process_raw_event(event, data.raw_data, data.cpu, data.time, thread); +	process_raw_event(event, data.raw_size, data.raw_data, data.cpu, +			  data.time, thread);  	return 0;  }  |