]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
tracing/probe: reject non-closed empty immediate strings
authorPengpeng Hou <pengpeng@iscas.ac.cn>
Wed, 1 Apr 2026 16:03:15 +0000 (00:03 +0800)
committerMasami Hiramatsu (Google) <mhiramat@kernel.org>
Mon, 6 Apr 2026 00:22:42 +0000 (09:22 +0900)
commit4346be6577aaa04586167402ae87bbdbe32484a4
tree5f31244aeedc7bab1a516892858ec7b1604ca369
parent591cd656a1bf5ea94a222af5ef2ee76df029c1d2
tracing/probe: reject non-closed empty immediate strings

parse_probe_arg() accepts quoted immediate strings and passes the body
after the opening quote to __parse_imm_string(). That helper currently
computes strlen(str) and immediately dereferences str[len - 1], which
underflows when the body is empty and not closed with double-quotation.

Reject empty non-closed immediate strings before checking for the closing quote.

Link: https://lore.kernel.org/all/20260401160315.88518-1-pengpeng@iscas.ac.cn/
Fixes: a42e3c4de964 ("tracing/probe: Add immediate string parameter support")
Signed-off-by: Pengpeng Hou <pengpeng@iscas.ac.cn>
Reviewed-by: Steven Rostedt (Google) <rostedt@goodmis.org>
Signed-off-by: Masami Hiramatsu (Google) <mhiramat@kernel.org>
kernel/trace/trace_probe.c