eventstat: sometimes detection of a kernel thread is wrong

[Colin Ian King]

eventstat checks to see if a process is a kernel thread by checking /proc/$pid/exe - however, sometimes processes die before we can open /proc/$pid/exe and it defaults to assuming the exe was not found and hence it was a kernel thread rather than that it was a normal userland process.

Instead, it should open /proc/$pid and if does not exist, assume it was a short lived process (which is more likely). If this opens OK, then it should check if /proc/$pid/exe exists or not. To avoid TOUTOC (time of check, time of use) races, use openat on /proc/pid

[Colin Ian King (colin-king)]

Fix committed, http://kernel.ubuntu.com/git?p=cking/eventstat.git;a=commit;h=8165e5ee6c25428f779e8f0be1c59a504bb6490e

[Launchpad Janitor (janitor)]

This bug was fixed in the package eventstat - 0.01.27-1

---------------
eventstat (0.01.27-1) unstable; urgency=low

  * Makefile: bump version
  * eventstat: fix kernel thread detection issue (LP: #1226787)

 -- Colin King <email address hidden> Thu, 19 Sep 2013 16:05:06 +0100