From: Shuai Xue <xueshuai@linux.alibaba.com>
To: Greg KH <gregkh@linuxfoundation.org>
Cc: stable@vger.kernel.org, linux-kernel@vger.kernel.org,
linux-perf-users@vger.kernel.org, acme@kernel.org,
adrian.hunter@intel.com, alexander.shishkin@linux.intel.com,
irogers@google.com, mark.rutland@arm.com, namhyung@kernel.org,
peterz@infradead.org, acme@redhat.com, kprateek.nayak@amd.com,
ravi.bangoria@amd.com, sandipan.das@amd.com,
anshuman.khandual@arm.com, german.gomez@arm.com,
james.clark@arm.com, terrelln@fb.com, seanjc@google.com,
changbin.du@huawei.com, liuwenyu7@huawei.com,
yangjihong1@huawei.com, mhiramat@kernel.org, ojeda@kernel.org,
song@kernel.org, leo.yan@linaro.org, kjain@linux.ibm.com,
ak@linux.intel.com, kan.liang@linux.intel.com,
atrajeev@linux.vnet.ibm.com, siyanteng@loongson.cn,
liam.howlett@oracle.com, pbonzini@redhat.com, jolsa@kernel.org
Subject: Re: [PATCH 5.10.y 0/2] Fixed perf abort when taken branch stack sampling enabled
Date: Sun, 10 Nov 2024 18:26:30 +0800 [thread overview]
Message-ID: <7a0fc6f4-f185-4d5e-b532-c9e04b0a48c4@linux.alibaba.com> (raw)
In-Reply-To: <2024111029-gorged-humiliate-f0bb@gregkh>
在 2024/11/10 13:12, Greg KH 写道:
> On Mon, Nov 04, 2024 at 07:27:34PM +0800, Shuai Xue wrote:
>> On x86 platform, kernel v5.10.228, perf-report command aborts due to "free():
>> invalid pointer" when perf-record command is run with taken branch stack
>> sampling enabled. This regression can be reproduced with the following steps:
>>
>> - sudo perf record -b
>> - sudo perf report
>>
>> The root cause is that bi[i].to.ms.maps does not always point to thread->maps,
>> which is a buffer dynamically allocated by maps_new(). Instead, it may point to
>> &machine->kmaps, while kmaps is not a pointer but a variable. The original
>> upstream commit c1149037f65b ("perf hist: Add missing puts to
>> hist__account_cycles") worked well because machine->kmaps had been refactored to
>> a pointer by the previous commit 1a97cee604dc ("perf maps: Use a pointer for
>> kmaps").
>>
>> The memory leak issue, which the reverted patch intended to fix, has been solved
>> by commit cf96b8e45a9b ("perf session: Add missing evlist__delete when deleting
>> a session"). The root cause is that the evlist is not being deleted on exit in
>> perf-report, perf-script, and perf-data. Consequently, the reference count of
>> the thread increased by thread__get() in hist_entry__init() is not decremented
>> in hist_entry__delete(). As a result, thread->maps is not properly freed.
>>
>> To this end,
>>
>> - PATCH 1/2 reverts commit a83fc293acd5c5050a4828eced4a71d2b2fffdd3 to fix the
>> abort regression.
>> - PATCH 2/2 backports cf96b8e45a9b ("perf session: Add missing evlist__delete
>> when deleting a session") to fix memory leak issue.
>>
>> Riccardo Mancini (1):
>> perf session: Add missing evlist__delete when deleting a session
>>
>> Shuai Xue (1):
>> Revert "perf hist: Add missing puts to hist__account_cycles"
>>
>> tools/perf/util/hist.c | 10 +++-------
>> tools/perf/util/session.c | 5 ++++-
>> 2 files changed, 7 insertions(+), 8 deletions(-)
>
> perf actually works and builds on this kernel tree? That's news to me,
> but hey, I'll take these now as obviously someone is still trying to run
> it.
Yes, it does. Commit cf96b8e45a9b ("perf session: Add missing evlist__delete
when deleting a session") addresses a memory leak issue but is not applicable
for the 5.10-stable tree.
> But why not just use the latest version of perf instead?
Yes, the lastest verison of perf works well. There are many distribution are
based on the upstream 5.10-stable tree, and this issue breaks the perf usage.
So IMHO, it could be fixed in upstream.
Best Regards,
Shuai
prev parent reply other threads:[~2024-11-10 10:26 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-11-04 11:27 [PATCH 5.10.y 0/2] Fixed perf abort when taken branch stack sampling enabled Shuai Xue
2024-11-04 11:27 ` [PATCH 5.10.y 1/2] Revert "perf hist: Add missing puts to hist__account_cycles" Shuai Xue
2024-11-04 11:27 ` [PATCH 5.10.y 2/2] perf session: Add missing evlist__delete when deleting a session Shuai Xue
2024-11-10 5:12 ` [PATCH 5.10.y 0/2] Fixed perf abort when taken branch stack sampling enabled Greg KH
2024-11-10 10:26 ` Shuai Xue [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=7a0fc6f4-f185-4d5e-b532-c9e04b0a48c4@linux.alibaba.com \
--to=xueshuai@linux.alibaba.com \
--cc=acme@kernel.org \
--cc=acme@redhat.com \
--cc=adrian.hunter@intel.com \
--cc=ak@linux.intel.com \
--cc=alexander.shishkin@linux.intel.com \
--cc=anshuman.khandual@arm.com \
--cc=atrajeev@linux.vnet.ibm.com \
--cc=changbin.du@huawei.com \
--cc=german.gomez@arm.com \
--cc=gregkh@linuxfoundation.org \
--cc=irogers@google.com \
--cc=james.clark@arm.com \
--cc=jolsa@kernel.org \
--cc=kan.liang@linux.intel.com \
--cc=kjain@linux.ibm.com \
--cc=kprateek.nayak@amd.com \
--cc=leo.yan@linaro.org \
--cc=liam.howlett@oracle.com \
--cc=linux-kernel@vger.kernel.org \
--cc=linux-perf-users@vger.kernel.org \
--cc=liuwenyu7@huawei.com \
--cc=mark.rutland@arm.com \
--cc=mhiramat@kernel.org \
--cc=namhyung@kernel.org \
--cc=ojeda@kernel.org \
--cc=pbonzini@redhat.com \
--cc=peterz@infradead.org \
--cc=ravi.bangoria@amd.com \
--cc=sandipan.das@amd.com \
--cc=seanjc@google.com \
--cc=siyanteng@loongson.cn \
--cc=song@kernel.org \
--cc=stable@vger.kernel.org \
--cc=terrelln@fb.com \
--cc=yangjihong1@huawei.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox