perf tools: Pre-check sample size before parsing
Check that the total size of the sample fields having a fixed size do not exceed the one of the whole event. This robustifies the sample parsing. Signed-off-by: Frederic Weisbecker <fweisbec@gmail.com> Cc: Ingo Molnar <mingo@elte.hu> Cc: Peter Zijlstra <a.p.zijlstra@chello.nl> Cc: Arnaldo Carvalho de Melo <acme@redhat.com> Cc: Stephane Eranian <eranian@google.com>
This commit is contained in:
@@ -304,7 +304,8 @@ static int perf_event__parse_id_sample(const union perf_event *event, u64 type,
|
||||
}
|
||||
|
||||
int perf_event__parse_sample(const union perf_event *event, u64 type,
|
||||
bool sample_id_all, struct perf_sample *data)
|
||||
int sample_size, bool sample_id_all,
|
||||
struct perf_sample *data)
|
||||
{
|
||||
const u64 *array;
|
||||
|
||||
@@ -319,6 +320,9 @@ int perf_event__parse_sample(const union perf_event *event, u64 type,
|
||||
|
||||
array = event->sample.array;
|
||||
|
||||
if (sample_size + sizeof(event->header) > event->header.size)
|
||||
return -EFAULT;
|
||||
|
||||
if (type & PERF_SAMPLE_IP) {
|
||||
data->ip = event->ip.ip;
|
||||
array++;
|
||||
|
Reference in New Issue
Block a user