vm_trace_hook() runs global hooks before running local hooks. Previously, we read the local hook list before running the global hooks which led to use-after-free when a global hook frees the local hook list. A global hook can do this by disabling a local TracePoint, for example.
Delay local hook list loading until after running the global hooks.
Added by alanwu (Alan Wu) over 3 years ago
Fix use-after-free with interacting TracePoints
vm_trace_hook()runs global hooks before running local hooks.Previously, we read the local hook list before running the global hooks
which led to use-after-free when a global hook frees the local hook
list. A global hook can do this by disabling a local TracePoint, for
example.
Delay local hook list loading until after running the global hooks.
Issue discovered by Jeremy Evans in GH-5862.
[Bug #18730]