diff options
| author | Florian Weimer <fweimer@redhat.com> | 2019-02-15 19:09:00 +0100 |
|---|---|---|
| committer | Florian Weimer <fweimer@redhat.com> | 2019-02-15 19:09:00 +0100 |
| commit | bc10e22c90e42613bd5dafb77b80a9ea1759dd1b (patch) | |
| tree | 6a4ad2ab7ea72292e1733e7a4ef7f70eb4fc8c09 /ChangeLog | |
| parent | 8a11f97062ec7f1a2fed4aefa36c7bebecf87181 (diff) | |
| download | glibc-bc10e22c90e42613bd5dafb77b80a9ea1759dd1b.tar.gz glibc-bc10e22c90e42613bd5dafb77b80a9ea1759dd1b.tar.xz glibc-bc10e22c90e42613bd5dafb77b80a9ea1759dd1b.zip | |
nptl: Fix invalid Systemtap probe in pthread_join [BZ #24211]
After commit f1ac7455831546e5dca0ed98fe8af2686fae7ce6 ("arm: Use "nr"
constraint for Systemtap probes [BZ #24164]"), we load pd->result into
a register in the probe below:
/* Free the TCB. */
__free_tcb (pd);
}
else
pd->joinid = NULL;
LIBC_PROBE (pthread_join_ret, 3, threadid, result, pd->result);
However, at this point, the thread descriptor has been freed. If the
thread stack does not fit into the thread stack cache, the memory will
have been unmapped, and the program will crash in the probe.
Diffstat (limited to 'ChangeLog')
| -rw-r--r-- | ChangeLog | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/ChangeLog b/ChangeLog index fee6c0fd2d..39d44fd671 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,9 @@ +2019-02-15 Florian Weimer <fweimer@redhat.com> + + [BZ #24211] + * nptl/pthread_join_common.c (__pthread_timedjoin_ex): Do not read + pd->result after the thread descriptor has been freed. + 2019-02-15 Joseph Myers <joseph@codesourcery.com> * sunrpc/tst-svc_register.c (rpcbind_address): Remove qualifier |