[lttng-dev] [PATCH babeltrace-1.5 1/6] Fix: lttng-live: use-after-free in get_next_index()
Mathieu Desnoyers
mathieu.desnoyers at efficios.com
Thu Dec 5 01:58:04 EST 2019
Running babeltrace under valgrind with a test-cases doing per-pid
lttng tracing in live mode triggers this use-after-free in
get_next_index() when stream is hung up.
Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers at efficios.com>
---
formats/lttng-live/lttng-live-comm.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/formats/lttng-live/lttng-live-comm.c b/formats/lttng-live/lttng-live-comm.c
index 33a78029..96817f5e 100644
--- a/formats/lttng-live/lttng-live-comm.c
+++ b/formats/lttng-live/lttng-live-comm.c
@@ -1108,8 +1108,8 @@ retry:
viewer_stream->in_trace = 0;
bt_list_del(&viewer_stream->trace_stream_node);
bt_list_del(&viewer_stream->session_stream_node);
- g_free(viewer_stream);
*stream_id = be64toh(rp->stream_id);
+ g_free(viewer_stream);
break;
case LTTNG_VIEWER_INDEX_ERR:
fprintf(stderr, "[error] get_next_index: error\n");
--
2.17.1
More information about the lttng-dev
mailing list