The 'end' member of struct dwarf_fde denotes one byte past the end of
the CFA instruction stream for an FDE. The value of 'end' was being
calcualted incorrectly, it was being set too high. This resulted in
dwarf_cfa_execute_insns() interpreting data past the end of valid
instructions, thus causing all sorts of weird crashes.
Signed-off-by: Matt Fleming <matt@console-pimps.org>
}
static int dwarf_parse_fde(void *entry, u32 entry_type,
}
static int dwarf_parse_fde(void *entry, u32 entry_type,
- void *start, unsigned long len)
+ void *start, unsigned long len,
+ unsigned char *end)
{
struct dwarf_fde *fde;
struct dwarf_cie *cie;
{
struct dwarf_fde *fde;
struct dwarf_cie *cie;
/* Call frame instructions. */
fde->instructions = p;
/* Call frame instructions. */
fde->instructions = p;
- fde->end = start + len;
/* Add to list. */
spin_lock_irqsave(&dwarf_fde_lock, flags);
/* Add to list. */
spin_lock_irqsave(&dwarf_fde_lock, flags);
else
c_entries++;
} else {
else
c_entries++;
} else {
- err = dwarf_parse_fde(entry, entry_type, p, len);
+ err = dwarf_parse_fde(entry, entry_type, p, len, end);
if (err < 0)
goto out;
else
if (err < 0)
goto out;
else