Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix heap-use-after-free in L1TMuonDQMOffline::analyze #21282

Merged
merged 1 commit into from
Nov 14, 2017

Conversation

davidlt
Copy link
Contributor

@davidlt davidlt commented Nov 12, 2017

This resolves #21280

Call L1TMuonDQMOffline::getMuonGmtPairs was saving pointers to local
copies in m_MuonGmtPairs. Use previously unused gmtContainer to
extends the lifetime of objects.

Signed-off-by: David Abdurachmanov David.Abdurachmanov@cern.ch

@cmsbuild
Copy link
Contributor

The code-checks are being triggered in jenkins.

@cmsbuild
Copy link
Contributor

+code-checks

Logs: https://cmssdt.cern.ch/SDT/code-checks/PR-21282/1960

@cmsbuild
Copy link
Contributor

A new Pull Request was created by @davidlt for master.

It involves the following packages:

DQMOffline/L1Trigger

@vazzolini, @kmaeshima, @dmitrijus, @cmsbuild, @rekovic, @jfernan2, @vanbesien, @mulhearn can you please review it and eventually sign? Thanks.
@kreczko, @thomreis, @rociovilar this is something you requested to watch as well.
@davidlange6, @slava77 you are the release manager for this.

cms-bot commands are listed here

@jfernan2
Copy link
Contributor

please test

@cmsbuild
Copy link
Contributor

cmsbuild commented Nov 12, 2017

The tests are being triggered in jenkins.
https://cmssdt.cern.ch/jenkins/job/ib-any-integration/24383/console Started: 2017/11/12 08:09

@Dr15Jones
Copy link
Contributor

I don’t believe there is a need to create a std::vector<l1t::Muon> just to hold copies of l1t::Muon. Why not just get the address of the const l1t::Muon from the l1t::MuonBxCollection? That might not work if the code can’t deal with a const.

@davidlt
Copy link
Contributor Author

davidlt commented Nov 12, 2017

It should work with const as we don't modify it ever (just extra phi, eta, etc). It should work l1t::MuonBxCollection is class BXVector which implements container interface. Which provide at and operator[] with const T& return values. I will check this.

@cmsbuild
Copy link
Contributor

@cmsbuild
Copy link
Contributor

Comparison job queued.

@cmsbuild
Copy link
Contributor

Comparison is ready
https://cmssdt.cern.ch/SDT/jenkins-artifacts/pull-request-integration/PR-21282/24383/summary.html

Comparison Summary:

  • No significant changes to the logs found
  • Reco comparison results: 0 differences found in the comparisons
  • DQMHistoTests: Total files compared: 27
  • DQMHistoTests: Total histograms compared: 2832699
  • DQMHistoTests: Total failures: 1
  • DQMHistoTests: Total nulls: 0
  • DQMHistoTests: Total successes: 2832520
  • DQMHistoTests: Total skipped: 178
  • DQMHistoTests: Total Missing objects: 0
  • DQMHistoSizes: Histogram memory added: 1.27000000013 KiB( 23 files compared)
  • Checked 111 log files, 8 edm output root files, 27 DQM output files

This resolves cms-sw#21280

Call `L1TMuonDQMOffline::getMuonGmtPairs` was saving pointers to local
copies in `m_MuonGmtPairs`. Use directly
`edm::Handle<l1t::MuonBxCollection>` instead of making any copies to
`std::vector`.

Signed-off-by: David Abdurachmanov <David.Abdurachmanov@cern.ch>
@cmsbuild
Copy link
Contributor

The code-checks are being triggered in jenkins.

@cmsbuild
Copy link
Contributor

+code-checks

Logs: https://cmssdt.cern.ch/SDT/code-checks/PR-21282/1964

@cmsbuild
Copy link
Contributor

Pull request #21282 was updated. @vazzolini, @kmaeshima, @dmitrijus, @cmsbuild, @rekovic, @jfernan2, @vanbesien, @mulhearn can you please check and sign again.

@jfernan2
Copy link
Contributor

please test

@cmsbuild
Copy link
Contributor

cmsbuild commented Nov 12, 2017

The tests are being triggered in jenkins.
https://cmssdt.cern.ch/jenkins/job/ib-any-integration/24385/console Started: 2017/11/12 21:24

@cmsbuild
Copy link
Contributor

@cmsbuild
Copy link
Contributor

Comparison job queued.

@cmsbuild
Copy link
Contributor

Comparison is ready
https://cmssdt.cern.ch/SDT/jenkins-artifacts/pull-request-integration/PR-21282/24385/summary.html

Comparison Summary:

  • No significant changes to the logs found
  • Reco comparison results: 4 differences found in the comparisons
  • DQMHistoTests: Total files compared: 27
  • DQMHistoTests: Total histograms compared: 2832699
  • DQMHistoTests: Total failures: 1
  • DQMHistoTests: Total nulls: 0
  • DQMHistoTests: Total successes: 2832520
  • DQMHistoTests: Total skipped: 178
  • DQMHistoTests: Total Missing objects: 0
  • DQMHistoSizes: Histogram memory added: 0.630000000128 KiB( 23 files compared)
  • Checked 111 log files, 8 edm output root files, 27 DQM output files

@dmitrijus
Copy link
Contributor

+1

@davidlange6
Copy link
Contributor

merge

@cmsbuild cmsbuild merged commit a7551b2 into cms-sw:master Nov 14, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

heap-use-after-free, read of 8 bytes, L1TMuonDQMOffline::analyze
6 participants