Peter Zijlstra ede271b059 perf/x86/intel: Fix memory corruption ...

Through:

  validate_event()
    x86_pmu.get_event_constraints(.idx=-1)
      tfa_get_event_constraints()
        dyn_constraint()

cpuc->constraint_list[-1] is used, which is an obvious out-of-bound access.

In this case, simply skip the TFA constraint code, there is no event
constraint with just PMC3, therefore the code will never result in the
empty set.

Fixes: 400816f60c ("perf/x86/intel: Implement support for TSX Force Abort")
Reported-by: Tony Jones <tonyj@suse.com>
Reported-by: "DSouza, Nelson" <nelson.dsouza@intel.com>
Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
Tested-by: Tony Jones <tonyj@suse.com>
Tested-by: "DSouza, Nelson" <nelson.dsouza@intel.com>
Cc: eranian@google.com
Cc: jolsa@redhat.com
Cc: stable@kernel.org
Link: https://lkml.kernel.org/r/20190314130705.441549378@infradead.org

2019-03-15 12:22:51 +01:00

..

alpha

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-03-14 09:28:12 -07:00

arc

memblock: drop memblock_alloc_*_nopanic() variants

2019-03-12 10:04:02 -07:00

arm

Merge tag 'clk-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/clk/linux

2019-03-14 08:46:17 -07:00

arm64

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

c6x

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

csky

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

h8300

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

hexagon

Merge tag 'y2038-syscall-abi' of git://git.kernel.org/pub/scm/linux/kernel/git/arnd/playground into timers/2038

2019-02-27 21:45:27 +01:00

ia64

ia64: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:01 -07:00

m68k

Merge branch 'akpm' (patches from Andrew)

2019-03-12 10:39:53 -07:00

microblaze

Merge tag 'microblaze-v5.1-rc1' of git://git.monstr.eu/linux-2.6-microblaze

2019-03-14 10:27:47 -07:00

mips

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-03-14 09:28:12 -07:00

nds32

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

nios2

Merge tag 'nios2-v5.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/lftan/nios2

2019-03-10 10:13:37 -07:00

openrisc

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

parisc

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-03-14 09:28:12 -07:00

powerpc

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

riscv

Merge tag 'dma-mapping-5.1' of git://git.infradead.org/users/hch/dma-mapping

2019-03-10 11:54:48 -07:00

s390

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

sh

memblock: drop memblock_alloc_*_nopanic() variants

2019-03-12 10:04:02 -07:00

sparc

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2019-03-14 09:28:12 -07:00

um

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

unicore32

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

x86

perf/x86/intel: Fix memory corruption

2019-03-15 12:22:51 +01:00

xtensa

treewide: add checks for the return value of memblock_alloc*()

2019-03-12 10:04:02 -07:00

.gitignore

…

Kconfig

Merge tag 'char-misc-5.1-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2019-03-06 14:18:59 -08:00