In the unregister path we use __in_uprobe_trampoline check with
current->mm for the VMA lookup, which is wrong, because we are
in the tracer context, not the traced process.

Add mm_struct pointer argument to __in_uprobe_trampoline and
changing related callers to pass proper mm_struct pointer.

Fixes: ba2bfc97b462 ("uprobes/x86: Add support to optimize uprobes")
Signed-off-by: Jiri Olsa <[email protected]>
---
 arch/x86/kernel/uprobes.c | 14 +++++++-------
 1 file changed, 7 insertions(+), 7 deletions(-)

diff --git a/arch/x86/kernel/uprobes.c b/arch/x86/kernel/uprobes.c
index ebb1baf1eb1d..2be6707e3320 100644
--- a/arch/x86/kernel/uprobes.c
+++ b/arch/x86/kernel/uprobes.c
@@ -761,9 +761,9 @@ void arch_uprobe_clear_state(struct mm_struct *mm)
                destroy_uprobe_trampoline(tramp);
 }
 
-static bool __in_uprobe_trampoline(unsigned long ip)
+static bool __in_uprobe_trampoline(struct mm_struct *mm, unsigned long ip)
 {
-       struct vm_area_struct *vma = vma_lookup(current->mm, ip);
+       struct vm_area_struct *vma = vma_lookup(mm, ip);
 
        return vma && vma_is_special_mapping(vma, &tramp_mapping);
 }
@@ -776,14 +776,14 @@ static bool in_uprobe_trampoline(unsigned long ip)
 
        rcu_read_lock();
        if (mmap_lock_speculate_try_begin(mm, &seq)) {
-               found = __in_uprobe_trampoline(ip);
+               found = __in_uprobe_trampoline(mm, ip);
                retry = mmap_lock_speculate_retry(mm, seq);
        }
        rcu_read_unlock();
 
        if (retry) {
                mmap_read_lock(mm);
-               found = __in_uprobe_trampoline(ip);
+               found = __in_uprobe_trampoline(mm, ip);
                mmap_read_unlock(mm);
        }
        return found;
@@ -1044,7 +1044,7 @@ static int copy_from_vaddr(struct mm_struct *mm, unsigned 
long vaddr, void *dst,
        return 0;
 }
 
-static bool __is_optimized(uprobe_opcode_t *insn, unsigned long vaddr)
+static bool __is_optimized(struct mm_struct *mm, uprobe_opcode_t *insn, 
unsigned long vaddr)
 {
        struct __packed __arch_relative_insn {
                u8 op;
@@ -1053,7 +1053,7 @@ static bool __is_optimized(uprobe_opcode_t *insn, 
unsigned long vaddr)
 
        if (!is_call_insn(insn))
                return false;
-       return __in_uprobe_trampoline(vaddr + 5 + call->raddr);
+       return __in_uprobe_trampoline(mm, vaddr + 5 + call->raddr);
 }
 
 static int is_optimized(struct mm_struct *mm, unsigned long vaddr)
@@ -1064,7 +1064,7 @@ static int is_optimized(struct mm_struct *mm, unsigned 
long vaddr)
        err = copy_from_vaddr(mm, vaddr, &insn, 5);
        if (err)
                return err;
-       return __is_optimized((uprobe_opcode_t *)&insn, vaddr);
+       return __is_optimized(mm, (uprobe_opcode_t *)&insn, vaddr);
 }
 
 static bool should_optimize(struct arch_uprobe *auprobe)
-- 
2.53.0


Reply via email to