kprobes/x86: Call BUG() when reentering probe into KPROBES_HIT_SS (e9afe9e1) · Commits · 戴 / test

Call BUG() when a probe have been hit on the way of kprobe processing path, because that kind of probes are currently unrecoverable (recovering it will cause an infinite loop and stack overflow). The original code seems to assume that it's caused by an int3 which another subsystem inserted on out-of-line singlestep buffer if the hitting probe is same as current probe. However, in that case, int3-hitting-address is on the out-of-line buffer and should be different from first (current) int3 address. Thus, I decided to remove the code. I also removes arch_disarm_kprobe() because it will involve other stuffs in text_poke(). Signed-off-by:

Masami Hiramatsu <mhiramat@redhat.com> Acked-by:

Ananth N Mavinakayanahalli <ananth@in.ibm.com> Cc: Ingo Molnar <mingo@elte.hu> LKML-Reference: <20090827172258.8246.61889.stgit@localhost.localdomain> Signed-off-by:

Frederic Weisbecker <fweisbec@gmail.com>

arch/x86/kernel/kprobes.c

+10 −16

Original line number	Diff line number	Diff line
		@@ -482,22 +482,16 @@ static int __kprobes reenter_kprobe(struct kprobe p, struct pt_regs regs,
		kcb->kprobe_status = KPROBE_REENTER;
		break;
		case KPROBE_HIT_SS:
		if (p == kprobe_running()) {
		regs->flags &= ~X86_EFLAGS_TF;
		regs->flags \|= kcb->kprobe_saved_flags;
		return 0;
		} else {
		/* A probe has been hit in the codepath leading up
		* to, or just after, single-stepping of a probed
		* instruction. This entire codepath should strictly
		* reside in .kprobes.text section.
		* Raise a BUG or we'll continue in an endless
		* reentering loop and eventually a stack overflow.
		/* A probe has been hit in the codepath leading up to, or just
		* after, single-stepping of a probed instruction. This entire
		* codepath should strictly reside in .kprobes.text section.
		* Raise a BUG or we'll continue in an endless reentering loop
		* and eventually a stack overflow.
		*/
		arch_disarm_kprobe(p);
		printk(KERN_WARNING "Unrecoverable kprobe detected at %p.\n",
		p->addr);
		dump_kprobe(p);
		BUG();
		}
		default:
		/* impossible cases */
		WARN_ON(1);

Admin message