Skip to content

Conversation

@github-actions
Copy link
Contributor

@github-actions github-actions bot commented Sep 17, 2020

Backport of #42307 to release/5.0-rc2

/cc @davmason

Customer Impact

There is a use after free bug in the EventPipe disable path, specifically in the code that deals with filter data. If a session specifies filter data for a provider they have a chance that the runtime could crash when disabling the session.

Testing

To test this change I modified the runtime to purposefully overwrite the filter data string immediately before it was freed in the destructor of EventPipeSessionProvider. Before this change you can see the modified string, after my change the filter data is unchanged.

Risk

Low - the fix is small, easy to reason about, and well understood.

Copy link
Member

@jeffschwMSFT jeffschwMSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. Please ask @noahfalk to do a cr.

@jeffschwMSFT jeffschwMSFT added the Servicing-consider Issue for next servicing release review label Sep 17, 2020
@jeffschwMSFT jeffschwMSFT added this to the 5.0.0 milestone Sep 17, 2020
@jeffschwMSFT jeffschwMSFT added Servicing-approved Approved for servicing release and removed Servicing-consider Issue for next servicing release review labels Sep 17, 2020
@jeffschwMSFT
Copy link
Member

Approved for RC2 via email

Copy link
Member

@noahfalk noahfalk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@davmason davmason merged commit 202cef0 into release/5.0-rc2 Sep 18, 2020
@jkotas jkotas deleted the backport/pr-42307-to-release/5.0-rc2 branch September 19, 2020 16:59
@ghost ghost locked as resolved and limited conversation to collaborators Dec 7, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

area-Tracing-coreclr Servicing-approved Approved for servicing release

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants