perf session: Fix double free in perf_data__close
authorJiri Olsa <jolsa@kernel.org>
Tue, 5 Mar 2019 15:25:35 +0000 (16:25 +0100)
committerArnaldo Carvalho de Melo <acme@redhat.com>
Wed, 6 Mar 2019 21:20:33 +0000 (18:20 -0300)
We can't call perf_data__close and subsequently perf_session__delete,
because it will call perf_data__close again and cause double free for
data->file.path.

  $ perf report -i .
  incompatible file format (rerun with -v to learn more)
  free(): double free detected in tcache 2
  Aborted (core dumped)

In fact we don't need to call perf_data__close at all, because at the
time the got out_close is reached, session->data is already initialized,
so the perf_data__close call will be triggered from
perf_session__delete.

Signed-off-by: Jiri Olsa <jolsa@kernel.org>
Cc: Alexander Shishkin <alexander.shishkin@linux.intel.com>
Cc: Andi Kleen <ak@linux.intel.com>
Cc: Jonas Rabenstein <jonas.rabenstein@studium.uni-erlangen.de>
Cc: Nageswara R Sastry <nasastry@in.ibm.com>
Cc: Namhyung Kim <namhyung@kernel.org>
Cc: Peter Zijlstra <peterz@infradead.org>
Cc: Ravi Bangoria <ravi.bangoria@linux.ibm.com>
Fixes: 2d4f27999b88 ("perf data: Add global path holder")
Link: http://lkml.kernel.org/r/20190305152536.21035-8-jolsa@kernel.org
Signed-off-by: Arnaldo Carvalho de Melo <acme@redhat.com>
tools/perf/util/session.c

index c764bbc910095123f77fb8337f52477253100104..db643f3c2b9544d5bc12ce439b1a86817de6af5d 100644 (file)
@@ -140,7 +140,7 @@ struct perf_session *perf_session__new(struct perf_data *data,
 
                if (perf_data__is_read(data)) {
                        if (perf_session__open(session) < 0)
-                               goto out_close;
+                               goto out_delete;
 
                        /*
                         * set session attributes that are present in perf.data
@@ -181,8 +181,6 @@ struct perf_session *perf_session__new(struct perf_data *data,
 
        return session;
 
- out_close:
-       perf_data__close(data);
  out_delete:
        perf_session__delete(session);
  out: