tracing: Fix some alloc_event_probe() error handling bugs
authorDan Carpenter <dan.carpenter@oracle.com>
Tue, 24 Aug 2021 11:51:50 +0000 (14:51 +0300)
committerSteven Rostedt (VMware) <rostedt@goodmis.org>
Wed, 8 Sep 2021 00:58:23 +0000 (20:58 -0400)
There are two bugs in this code.  First, if the kzalloc() fails it leads
to a NULL dereference of "ep" on the next line.  Second, if the
alloc_event_probe() function returns an error then it leads to an
error pointer dereference in the caller.

Link: https://lkml.kernel.org/r/20210824115150.GI31143@kili
Fixes: 1a327be3f20f ("tracing: Add a probe that attaches to trace events")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Steven Rostedt (VMware) <rostedt@goodmis.org>
kernel/trace/trace_eprobe.c

index 56a96e9750cf53fedf2374c8b6977bdaab104c4c..3044b762cbd733545ee25a83c91760e28a4825b9 100644 (file)
@@ -151,7 +151,7 @@ static struct trace_eprobe *alloc_event_probe(const char *group,
 
        ep = kzalloc(struct_size(ep, tp.args, nargs), GFP_KERNEL);
        if (!ep) {
-               trace_event_put_ref(ep->event);
+               trace_event_put_ref(event);
                goto error;
        }
        ep->event = event;
@@ -851,7 +851,8 @@ static int __trace_eprobe_create(int argc, const char *argv[])
                ret = PTR_ERR(ep);
                /* This must return -ENOMEM, else there is a bug */
                WARN_ON_ONCE(ret != -ENOMEM);
-               goto error;     /* We know ep is not allocated */
+               ep = NULL;
+               goto error;
        }
 
        argc -= 2; argv += 2;