Rabin Vincent 9922dba85d tracing/syscalls: Ignore numbers outside NR_syscalls' range ... commit 086ba77a6d upstream. ARM has some private syscalls (for example, set_tls(2)) which lie outside the range of NR_syscalls. If any of these are called while syscall tracing is being performed, out-of-bounds array access will occur in the ftrace and perf sys_{enter,exit} handlers. # trace-cmd record -e raw_syscalls:* true && trace-cmd report ... true-653 [000] 384.675777: sys_enter: NR 192 (0, 1000, 3, 4000022, ffffffff, 0) true-653 [000] 384.675812: sys_exit: NR 192 = 1995915264 true-653 [000] 384.675971: sys_enter: NR 983045 (76f74480, 76f74000, 76f74b28, 76f74480, 76f76f74, 1) true-653 [000] 384.675988: sys_exit: NR 983045 = 0 ... # trace-cmd record -e syscalls:* true [ 17.289329] Unable to handle kernel paging request at virtual address aaaaaace [ 17.289590] pgd = 9e71c000 [ 17.289696] [aaaaaace] *pgd=00000000 [ 17.289985] Internal error: Oops: 5 [#1] PREEMPT SMP ARM [ 17.290169] Modules linked in: [ 17.290391] CPU: 0 PID: 704 Comm: true Not tainted 3.18.0-rc2+ #21 [ 17.290585] task: 9f4dab00 ti: 9e710000 task.ti: 9e710000 [ 17.290747] PC is at ftrace_syscall_enter+0x48/0x1f8 [ 17.290866] LR is at syscall_trace_enter+0x124/0x184 Fix this by ignoring out-of-NR_syscalls-bounds syscall numbers. Commit cd0980fc8a "tracing: Check invalid syscall nr while tracing syscalls" added the check for less than zero, but it should have also checked for greater than NR_syscalls. Link: http://lkml.kernel.org/p/1414620418-29472-1-git-send-email-rabin@rab.in Fixes: cd0980fc8a "tracing: Check invalid syscall nr while tracing syscalls" Signed-off-by: Rabin Vincent <rabin@rab.in> Signed-off-by: Steven Rostedt <rostedt@goodmis.org> [lizf: Backported to 3.4: adjust context] Signed-off-by: Zefan Li <lizefan@huawei.com>		2015-02-02 17:05:09 +08:00
..
debug	kdb,vt_console: Fix missed data due to pager overruns	2012-10-21 09:27:59 -07:00
events	perf: Handle compat ioctl	2014-12-01 18:02:42 +08:00
gcov
irq	genirq: Sanitize spurious interrupt detection of threaded irqs	2014-06-30 20:01:33 -07:00
power	PM / Sleep: fix recovery during resuming from hibernation	2015-02-02 17:05:05 +08:00
sched	printk: rename printk_sched to printk_deferred	2014-08-07 12:00:10 -07:00
time	alarmtimer: Lock k_itimer during timer callback	2014-12-01 18:02:31 +08:00
trace	tracing/syscalls: Ignore numbers outside NR_syscalls' range	2015-02-02 17:05:09 +08:00
.gitignore
acct.c	Merge branch 'for-linus2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2012-01-08 12:19:57 -08:00
async.c	Fix a dead loop in async_synchronize_full()	2012-10-02 10:30:35 -07:00
audit.c	audit: wait_for_auditd() should use TASK_UNINTERRUPTIBLE	2014-04-14 06:44:15 -07:00
audit.h	audit: remove AUDIT_SETUP_CONTEXT as it isn't used	2012-01-17 16:16:57 -05:00
audit_tree.c	kernel/audit_tree.c: tree will leak memory when failure occurs in audit_trim_trees()	2013-05-11 13:48:14 -07:00
audit_watch.c
auditfilter.c	audit: allow interfield comparison in audit rules	2012-01-17 16:17:01 -05:00
auditsc.c	auditsc: audit_krule mask accesses need bounds checking	2014-06-16 13:45:46 -07:00
backtracetest.c
bounds.c
capability.c	Revert "capabitlies: ns_capable can use the cap helpers rather than lsm call"	2012-01-17 10:19:41 -08:00
cgroup.c	cgroup: reject cgroup names with ' '	2014-12-01 18:02:23 +08:00
cgroup_freezer.c	cgroup: cgroup_subsys->fork() should be called after the task is added to css_set	2014-03-11 16:10:03 -07:00
compat.c	compat: Fix RT signal mask corruption via sigprocmask	2012-05-10 08:58:33 -07:00
configs.c
cpu.c	sched: Fix hotplug vs. set_cpus_allowed_ptr()	2014-06-11 12:04:11 -07:00
cpu_pm.c
cpuset.c	cpuset: PF_SPREAD_PAGE and PF_SPREAD_SLAB should be atomic flags	2014-12-01 18:02:38 +08:00
crash_dump.c
cred.c	cred: copy_process() should clear child->replacement_session_keyring	2012-04-11 08:20:11 -07:00
delayacct.c
dma.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
elfcore.c
exec_domain.c
exit.c	introduce for_each_thread() to replace the buggy while_each_thread()	2015-02-02 17:04:55 +08:00
extable.c
fork.c	introduce for_each_thread() to replace the buggy while_each_thread()	2015-02-02 17:04:55 +08:00
freezer.c	freezer: Do not freeze tasks killed by OOM killer	2015-02-02 17:04:54 +08:00
futex.c	futex: Fix a race condition between REQUEUE_PI and task death	2015-02-02 17:05:05 +08:00
futex_compat.c	futex: Revert "futex: Mark get_robust_list as deprecated"	2013-02-28 06:59:01 -08:00
groups.c
hrtimer.c	hrtimer: Set expiry time before switch_hrtimer_base()	2014-06-07 16:02:01 -07:00
hung_task.c	hung_task: fix the broken rcu_lock_break() logic	2012-03-05 15:49:42 -08:00
irq_work.c	irq_work: fix compile failure on tile from missing include	2012-04-13 13:15:16 -04:00
itimer.c	itimer: Use printk_once instead of WARN_ONCE	2012-04-10 11:00:30 +02:00
jump_label.c	static keys: Inline the static_key_enabled() function	2012-02-28 20:01:08 +01:00
kallsyms.c
Kconfig.freezer
Kconfig.hz
Kconfig.locks	locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage	2012-03-23 13:18:57 +01:00
Kconfig.preempt	locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage	2012-03-23 13:18:57 +01:00
kexec.c	Merge branch 'akpm' (Andrew's patch-bomb)	2012-03-28 17:19:28 -07:00
kfifo.c
kmod.c	usermodehelper: check subprocess_info->path != NULL	2013-05-19 10:54:50 -07:00
kprobes.c	kprobes: return proper error code from register_kprobe()	2012-03-05 15:49:42 -08:00
ksysfs.c
kthread.c	kthread_worker: reimplement flush_kthread_work() to allow freeing the work item being executed	2012-10-02 10:30:40 -07:00
latencytop.c
lockdep.c	lockdep: Add CPU-idle/offline warning to lockdep-RCU splat	2012-02-21 09:06:06 -08:00
lockdep_internals.h
lockdep_proc.c
lockdep_states.h
Makefile	sysctl: Move the implementation into fs/proc/proc_sysctl.c	2012-01-24 16:37:54 -08:00
module.c	ftrace/module: Hardcode ftrace_module_init() call into load_module()	2014-06-07 16:02:00 -07:00
mutex-debug.c
mutex-debug.h
mutex.c	sched/rt: Use schedule_preempt_disabled()	2012-03-01 10:28:03 +01:00
mutex.h
notifier.c
nsproxy.c
padata.c	padata: Fix cpu hotplug	2012-03-29 19:52:46 +08:00
panic.c	panic: fix a possible deadlock in panic()	2013-04-12 09:38:47 -07:00
params.c	params: <level>_initcall-like kernel parameters	2012-03-26 12:50:51 +10:30
pid.c	vfs: fix panic in __d_lookup() with high dentry hashtable counts	2012-02-13 20:45:38 -05:00
pid_namespace.c	pidns: add reboot_pid_ns() to handle the reboot syscall	2012-03-28 17:14:36 -07:00
posix-cpu-timers.c	posix-cpu-timers: Fix nanosleep task_struct leak	2013-02-28 06:58:59 -08:00
posix-timers.c	posix-timers: Fix stack info leak in timer_create()	2015-02-02 17:05:05 +08:00
printk.c	printk: rename printk_sched to printk_deferred	2014-08-07 12:00:10 -07:00
profile.c
ptrace.c	exec/ptrace: fix get_dumpable() incorrect tests	2013-11-29 10:50:34 -08:00
range.c
rcu.h	rcu: Allow nesting of rcu_idle_enter() and rcu_idle_exit()	2012-02-21 09:06:12 -08:00
rcupdate.c	rcu: Check for illegal use of RCU from offlined CPUs	2012-02-21 09:06:03 -08:00
rcutiny.c	rcu: Add RCU_NONIDLE() for idle-loop RCU read-side critical sections	2012-02-21 09:06:13 -08:00
rcutiny_plugin.h	rcu: Simplify unboosting checks	2012-02-21 09:03:43 -08:00
rcutorture.c	PTR_ERR should be called before its argument is cleared.	2012-02-21 09:06:10 -08:00
rcutree.c	rcu: Fix batch-limit size problem	2012-12-17 10:37:46 -08:00
rcutree.h	rcu: Rework detection of use of RCU by offline CPUs	2012-02-21 09:06:07 -08:00
rcutree_plugin.h	rcu: Hold off RCU_FAST_NO_HZ after timer posted	2012-02-21 09:42:30 -08:00
rcutree_trace.c	rcu: Rework detection of use of RCU by offline CPUs	2012-02-21 09:06:07 -08:00
relay.c	splice: fix racy pipe->buffers uses	2012-07-16 09:04:42 -07:00
res_counter.c	net: introduce res_counter_charge_nofail() for socket allocations	2012-01-22 15:08:46 -05:00
resource.c	kernel/resource.c: fix stack overflow in __reserve_region_with_split()	2013-02-14 10:48:53 -08:00
rtmutex-debug.c
rtmutex-debug.h	rtmutex: Handle deadlock detection smarter	2014-07-17 15:39:50 -07:00
rtmutex-tester.c	rtmutex-tester: convert sysdev_class to a regular subsystem	2011-12-14 14:54:22 -08:00
rtmutex.c	rtmutex: Plug slow unlock race	2014-07-17 15:39:50 -07:00
rtmutex.h	rtmutex: Handle deadlock detection smarter	2014-07-17 15:39:50 -07:00
rtmutex_common.h
rwsem.c	Remove all #inclusions of asm/system.h	2012-03-28 18:30:03 +01:00
seccomp.c	seccomp: audit abnormal end to a process due to seccomp	2012-01-17 16:16:55 -05:00
semaphore.c
signal.c	kernel/signal.c: stop info leak via the tkill and the tgkill syscalls	2013-04-25 21:19:54 -07:00
smp.c	smp: Fix SMP function call empty cpu mask race	2013-02-03 18:24:42 -06:00
softirq.c	Merge branch 'timers-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2012-03-20 10:32:09 -07:00
spinlock.c	locking/kconfig: Simplify INLINE_SPIN_UNLOCK usage	2012-03-23 13:18:57 +01:00
srcu.c	rcu: Call out dangers of expedited RCU primitives	2012-02-21 09:06:08 -08:00
stacktrace.c
stop_machine.c
sys.c	reboot: rigrate shutdown/reboot to boot cpu	2013-06-20 11:58:45 -07:00
sys_ni.c
sysctl.c	hung_task: check the value of "sysctl_hung_task_timeout_sec"	2014-05-06 07:51:45 -07:00
sysctl_binary.c	sysctl: fix null checking in bin_dn_node_address()	2013-03-04 06:06:41 +08:00
taskstats.c
test_kprobes.c
time.c	jiffies: Fix timeval conversion to jiffies	2014-12-01 18:02:32 +08:00
timeconst.pl	timeconst.pl: Eliminate Perl warning	2013-02-28 06:58:58 -08:00
timer.c	timer: Prevent overflow in apply_slack	2014-06-07 16:02:00 -07:00
tracepoint.c	tracepoint: Do not waste memory on mods with no tracepoints	2014-05-18 05:25:56 -07:00
tsacct.c	[S390] cputime: add sparse checking and cleanup	2011-12-15 14:56:19 +01:00
uid16.c
up.c
user-return-notifier.c
user.c
user_namespace.c
utsname.c
utsname_sysctl.c
wait.c	lockdep/waitqueues: Add better annotation	2011-12-21 10:07:39 +01:00
watchdog.c	watchdog: using u64 in get_sample_period()	2012-12-03 11:47:17 -08:00
workqueue.c	workqueue: cond_resched() after processing each work item	2014-04-14 06:44:16 -07:00
workqueue_sched.h