Unverified Commit 1f405ae8 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!9411 kprobes: Fix possible use-after-free issue on kprobe registration 

Merge Pull Request from: @ci-robot 
 
PR sync from: Chen Zhongjin <chenzhongjin@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/N4HXEO4BXVOLERP36PXNHBKQ2DPR7RDU/ 
 
https://gitee.com/src-openeuler/kernel/issues/I9QRI5 
 
Link:https://gitee.com/openeuler/kernel/pulls/9411

 

Reviewed-by: default avatarYe Weihua <yeweihua4@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 26de58f7 19af13f2

kernel/kprobes.c

+12 −6
Original line number Diff line number Diff line
@@ -1639,10 +1639,17 @@ static int check_kprobe_address_safe(struct kprobe *p, 
	jump_label_lock();

	preempt_disable();



	/* Ensure it is not in reserved area nor out of text */

	if (!(core_kernel_text((unsigned long) p->addr) ||

	    is_module_text_address((unsigned long) p->addr)) ||

	    in_gate_area_no_mm((unsigned long) p->addr) ||

	/* Ensure the address is in a text area, and find a module if exists. */

	*probed_mod = NULL;

	if (!core_kernel_text((unsigned long) p->addr)) {

		*probed_mod = __module_text_address((unsigned long) p->addr);

		if (!(*probed_mod)) {

			ret = -EINVAL;

			goto out;

		}

	}

	/* Ensure it is not in reserved area. */

	if (in_gate_area_no_mm((unsigned long) p->addr) ||

	    within_kprobe_blacklist((unsigned long) p->addr) ||

	    jump_label_text_reserved(p->addr, p->addr) ||

	    static_call_text_reserved(p->addr, p->addr) ||
@@ -1651,8 +1658,7 @@ static int check_kprobe_address_safe(struct kprobe *p, 
		goto out;

	}



	/* Check if are we probing a module */

	*probed_mod = __module_text_address((unsigned long) p->addr);

	/* Get module refcount and reject __init functions for loaded modules. */

	if (*probed_mod) {

		/*

		 * We must hold a refcount of the probed module while updating