diff options
| author |   anton <anton@openbsd.org> | 2020-10-10 07:07:46 +0000 |
|---|---|---|
| committer | anton <anton@openbsd.org> | 2020-10-10 07:07:46 +0000 |
| commit | c6fb730a13746fd6bf1723d640e54b251fbe76a4 (patch) | |
| tree | fba67ee37ebeb037e472d5496ad48a1f5ffe607b /sys/dev/kcov.c | |
| parent | Unbreak the powerpc64 kernel build. (diff) | |
| download | wireguard-openbsd-c6fb730a13746fd6bf1723d640e54b251fbe76a4.tar.xz wireguard-openbsd-c6fb730a13746fd6bf1723d640e54b251fbe76a4.zip | |
Clear the kcov device for the current thread before freeing the same
kcov device. Prevents a use-after-free, note I've never seen this one in
practice.
Diffstat (limited to 'sys/dev/kcov.c')
| -rw-r--r-- | sys/dev/kcov.c | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/sys/dev/kcov.c b/sys/dev/kcov.c index 39d7d863337..8e9822b4533 100644 --- a/sys/dev/kcov.c +++ b/sys/dev/kcov.c @@ -1,4 +1,4 @@ -/* $OpenBSD: kcov.c,v 1.35 2020/10/04 18:49:22 anton Exp $ */ +/* $OpenBSD: kcov.c,v 1.36 2020/10/10 07:07:46 anton Exp $ */ /* * Copyright (c) 2018 Anton Lindqvist <anton@openbsd.org> @@ -436,14 +436,15 @@ kcov_exit(struct proc *p) } if (kd->kd_state == KCOV_STATE_DYING) { + p->p_kd = NULL; kd_free(kd); } else { kd->kd_state = KCOV_STATE_READY; kd->kd_mode = KCOV_MODE_NONE; if (kd->kd_kr != NULL) kr_barrier(kd->kd_kr); + p->p_kd = NULL; } - p->p_kd = NULL; mtx_leave(&kcov_mtx); } |