Patch "perf trace: Fix off by ones in memset() after realloc() in arches using libaudit" has been added to the 5.8-stable tree

[Sasha Levin <sashal@xxxxxxxxxx>]

This is a note to let you know that I've just added the patch titled

    perf trace: Fix off by ones in memset() after realloc() in arches using libaudit

to the 5.8-stable tree which can be found at:
    http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary

The filename of the patch is:
     perf-trace-fix-off-by-ones-in-memset-after-realloc-i.patch
and it can be found in the queue-5.8 subdirectory.

If you, or anyone else, feels it should not be added to the stable tree,
please let <stable@xxxxxxxxxxxxxxx> know about it.



commit 9eebb9e32f80655be9a0103d679defc0285f1150
Author: Jiri Slaby <jslaby@xxxxxxx>
Date:   Thu Oct 1 11:34:19 2020 +0200

    perf trace: Fix off by ones in memset() after realloc() in arches using libaudit
    
    [ Upstream commit f3013f7ed465479e60c1ab1921a5718fc541cc3b ]
    
    'perf trace ls' started crashing after commit d21cb73a9025 on
    !HAVE_SYSCALL_TABLE_SUPPORT configs (armv7l here) like this:
    
      0  strlen () at ../sysdeps/arm/armv6t2/strlen.S:126
      1  0xb6800780 in __vfprintf_internal (s=0xbeff9908, s@entry=0xbeff9900, format=0xa27160 "]: %s()", ap=..., mode_flags=<optimized out>) at vfprintf-internal.c:1688
      ...
      5  0x0056ecdc in fprintf (__fmt=0xa27160 "]: %s()", __stream=<optimized out>) at /usr/include/bits/stdio2.h:100
      6  trace__sys_exit (trace=trace@entry=0xbeffc710, evsel=evsel@entry=0xd968d0, event=<optimized out>, sample=sample@entry=0xbeffc3e8) at builtin-trace.c:2475
      7  0x00566d40 in trace__handle_event (sample=0xbeffc3e8, event=<optimized out>, trace=0xbeffc710) at builtin-trace.c:3122
      ...
      15 main (argc=2, argv=0xbefff6e8) at perf.c:538
    
    It is because memset in trace__read_syscall_info zeroes wrong memory:
    
    1) when initializing for the first time, it does not reset the last id.
    
    2) in other cases, it resets the last id of previous buffer.
    
    ad 1) it causes the crash above as sc->name used in the fprintf above
          contains garbage.
    
    ad 2) it sets nonexistent from true back to false for id 11 here. Not
          sure, what the consequences are.
    
    So fix it by introducing a special case for the initial initialization
    and do the right +1 in both cases.
    
    Fixes: d21cb73a9025 ("perf trace: Grow the syscall table as needed when using libaudit")
    Signed-off-by: Jiri Slaby <jslaby@xxxxxxx>
    Cc: Adrian Hunter <adrian.hunter@xxxxxxxxx>
    Cc: Jiri Olsa <jolsa@xxxxxxxxxx>
    Cc: Namhyung Kim <namhyung@xxxxxxxxxx>
    Cc: Peter Zijlstra <peterz@xxxxxxxxxxxxx>
    Link: http://lore.kernel.org/lkml/20201001093419.15761-1-jslaby@xxxxxxx
    Signed-off-by: Arnaldo Carvalho de Melo <acme@xxxxxxxxxx>
    Signed-off-by: Sasha Levin <sashal@xxxxxxxxxx>

diff --git a/tools/perf/builtin-trace.c b/tools/perf/builtin-trace.c
index 4cbb64edc9983..83e8cd663b4e4 100644
--- a/tools/perf/builtin-trace.c
+++ b/tools/perf/builtin-trace.c
@@ -1762,7 +1762,11 @@ static int trace__read_syscall_info(struct trace *trace, int id)
 		if (table == NULL)
 			return -ENOMEM;
 
-		memset(table + trace->sctbl->syscalls.max_id, 0, (id - trace->sctbl->syscalls.max_id) * sizeof(*sc));
+		// Need to memset from offset 0 and +1 members if brand new
+		if (trace->syscalls.table == NULL)
+			memset(table, 0, (id + 1) * sizeof(*sc));
+		else
+			memset(table + trace->sctbl->syscalls.max_id + 1, 0, (id - trace->sctbl->syscalls.max_id) * sizeof(*sc));
 
 		trace->syscalls.table	      = table;
 		trace->sctbl->syscalls.max_id = id;