From patchwork Thu Jan 25 04:53:37 2018 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Carlos O'Donell X-Patchwork-Id: 25527 Received: (qmail 86708 invoked by alias); 25 Jan 2018 04:53:47 -0000 Mailing-List: contact libc-alpha-help@sourceware.org; run by ezmlm Precedence: bulk List-Id: List-Unsubscribe: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: libc-alpha-owner@sourceware.org Delivered-To: mailing list libc-alpha@sourceware.org Received: (qmail 86696 invoked by uid 89); 25 Jan 2018 04:53:46 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-24.9 required=5.0 tests=AWL, BAYES_00, GIT_PATCH_0, GIT_PATCH_1, GIT_PATCH_2, GIT_PATCH_3, KAM_LOTSOFHASH, KAM_SHORT, RCVD_IN_DNSWL_NONE, URIBL_RED autolearn=ham version=3.3.2 spammy=reservation, faults, Reservation X-HELO: mail-qt0-f176.google.com X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:subject:to:references:from:organization :message-id:date:user-agent:mime-version:in-reply-to :content-language; bh=qkfwrPXg5i/EABBDy+vV/EiXayK4MGagzTEup3/niM8=; b=L7ii0rc2MtRaDFa9Z03qxJg/X+717By2mnRP+Of+vaasiVZZd8SWQj0gamDgYzhvbq EjfX8ooGvaQuwXzabnGSDFMvjlg+VSOkXJCngh2ko1vojh8A2RzvgYCgFg1nBicmFkur xMekDqya6COM57TYJIUYwc3q8b4hoBO54YJhoZo9aPEhXhSDKV0j4w2ZSdL+E6zTeojP fgy5HYh3hhHN0e4FoeKWgZoLmUV4Ei3IWkN+9KMxMLzZxBsK/aRcDBUilwPwU6O6uPbL UtGp1vtYYFr8FR4dux5lXKYgTwQEWh7dI7CmGUfIis3gG1yCP5K2JuPvPpDKR3b7xklb DUMg== X-Gm-Message-State: AKwxytdoTdDQmva60YtENMO0VlkAzczU9XkJgWhbu8wIYjKIbWoNfcxg egPEDuS2chfVufKcET34Dyy09z7C/z8= X-Google-Smtp-Source: AH8x226g3XEamzbVJVbjJZnhiZanRT9pWuHaf2dPOFG8HBVAJPV/+QMYylZmO9BAXys2rkyfcf1Z4w== X-Received: by 10.200.36.130 with SMTP id s2mr14063258qts.0.1516856021663; Wed, 24 Jan 2018 20:53:41 -0800 (PST) Subject: [PATCH] Revert Intel CET changes to __jmp_buf_tag (Bug 22743) To: "H.J. Lu" , Florian Weimer , "Senkevich, Andrew" , Andreas Schwab , GNU C Library References: <20180121161557.GA31477@aurel32.net> <146fe611-dbc4-af4d-f737-194712daa835@redhat.com> <20180125014816.GA5754@altlinux.org> From: Carlos O'Donell Message-ID: Date: Wed, 24 Jan 2018 20:53:37 -0800 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 In-Reply-To: <20180125014816.GA5754@altlinux.org> On 01/24/2018 05:48 PM, Dmitry V. Levin wrote: > I'm afraid by Monday it will be too late for 2.27 as we will get very > little testing before the release. Before reverting: [carlos@athas tst-cleanup1]$ /home/carlos/build/glibc/elf/ld.so --library-path /home/carlos/build/glibc:/home/carlos/build/glibc/elf:/home/carlos/build/glibc/dlfcn:/home/carlos/build/glibc/nptl ./tst-cleanup1 ch (3) ch (2) ch (1) Didn't expect signal from child: got `Segmentation fault' After reverting: [carlos@athas tst-cleanup1]$ /home/carlos/build/glibc-reverted/elf/ld.so --library-path /home/carlos/build/glibc-reverted:/home/carlos/build/glibc-reverted/elf:/home/carlos/build/glibc-reverted/dlfcn:/home/carlos/build/glibc-reverted/nptl ./tst-cleanup1 ch (3) ch (2) ch (1) ~~~ Commit message ~~~ In commit cba595c350e52194e10c0006732e1991e3d0803b and commit f81ddabffd76ac9dd600b02adbf3e1dac4bb10ec, ABI compatibility with applications was broken by increasing the size of the on-stack allocated __pthread_unwind_buf_t beyond the oringal size. Applications only have the origianl space available for __pthread_unwind_register, and __pthread_unwind_next to use, any increase in the size of __pthread_unwind_buf_t causes these functions to write beyond the original structure into other on-stack variables leading to segmentation faults in common applications like vlc. The only workaround is to version those functions which operate on the old sized objects, but this must happen in glibc 2.28. Thank you to Andrew Senkevich, H.J. Lu, and Aurelien Jarno, for submitting reports and tracking the issue down. The commit reverts the above mentioned commits and testing on x86_64 shows that the ABI compatibility is restored. A tst-cleanup1 regression test linked with an older glibc now passes when run with the newly built glibc. Previously a tst-cleanup1 linked with an older glibc would segfault when run with an affected glibc build. Tested on x86_64 with no regressions. Signed-off-by: Carlos O'Donell ~~~ Patch attached. OK to commit? This fixes the last blocker for glibc 2.27. From 440f414842b61923dc8219b26df10d2a12de0f82 Mon Sep 17 00:00:00 2001 From: Carlos O'Donell Date: Wed, 24 Jan 2018 20:35:22 -0800 Subject: [PATCH] Revert Intel CET changes to __jmp_buf_tag (Bug 22743) In commit cba595c350e52194e10c0006732e1991e3d0803b and commit f81ddabffd76ac9dd600b02adbf3e1dac4bb10ec, ABI compatibility with applications was broken by increasing the size of the on-stack allocated __pthread_unwind_buf_t beyond the oringal size. Applications only have the origianl space available for __pthread_unwind_register, and __pthread_unwind_next to use, any increase in the size of __pthread_unwind_buf_t causes these functions to write beyond the original structure into other on-stack variables leading to segmentation faults in common applications like vlc. The only workaround is to version those functions which operate on the old sized objects, but this must happen in glibc 2.28. Thank you to Andrew Senkevich, H.J. Lu, and Aurelien Jarno, for submitting reports and tracking the issue down. The commit reverts the above mentioned commits and testing on x86_64 shows that the ABI compatibility is restored. A tst-cleanup1 regression test linked with an older glibc now passes when run with the newly built glibc. Previously a tst-cleanup1 linked with an older glibc would segfault when run with an affected glibc build. Tested on x86_64 with no regressions. Signed-off-by: Carlos O'Donell --- ChangeLog | 30 ++++++++++++++++++ bits/types/__cancel_jmp_buf_tag.h | 28 ----------------- nptl/Makefile | 3 +- nptl/descr.h | 3 -- sysdeps/i386/nptl/tcb-offsets.sym | 1 - sysdeps/i386/nptl/tls.h | 4 --- sysdeps/nptl/pthread.h | 7 +++-- sysdeps/unix/sysv/linux/hppa/pthread.h | 7 +++-- .../linux/x86/bits/types/__cancel_jmp_buf_tag.h | 31 ------------------- sysdeps/unix/sysv/linux/x86/nptl/pthreadP.h | 36 ---------------------- sysdeps/unix/sysv/linux/x86/pthreaddef.h | 22 ------------- sysdeps/x86_64/nptl/tcb-offsets.sym | 1 - sysdeps/x86_64/nptl/tls.h | 5 +-- 13 files changed, 42 insertions(+), 136 deletions(-) delete mode 100644 bits/types/__cancel_jmp_buf_tag.h delete mode 100644 sysdeps/unix/sysv/linux/x86/bits/types/__cancel_jmp_buf_tag.h delete mode 100644 sysdeps/unix/sysv/linux/x86/nptl/pthreadP.h delete mode 100644 sysdeps/unix/sysv/linux/x86/pthreaddef.h diff --git a/ChangeLog b/ChangeLog index 002839213f..fb287d8e75 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,33 @@ +2018-01-24 Carlos O'Donll + + Revert: + + 2017-12-19 H.J. Lu + + [BZ #22563] + * sysdeps/i386/nptl/tcb-offsets.sym (FEATURE_1_OFFSET): New. + * sysdeps/i386/nptl/tls.h (tcbhead_t): Add feature_1. + * sysdeps/x86_64/nptl/tcb-offsets.sym (FEATURE_1_OFFSET): New. + * sysdeps/x86_64/nptl/tls.h (tcbhead_t): Rename __glibc_unused1 + to feature_1. + + 2017-12-19 H.J. Lu + + [BZ #22563] + * bits/types/__cancel_jmp_buf_tag.h: New file. + * sysdeps/unix/sysv/linux/x86/bits/types/__cancel_jmp_buf_tag.h + * sysdeps/unix/sysv/linux/x86/pthreaddef.h: Likewise. + * sysdeps/unix/sysv/linux/x86/nptl/pthreadP.h: Likewise. + * nptl/Makefile (headers): Add + bits/types/__cancel_jmp_buf_tag.h. + * nptl/descr.h [NEED_SAVED_MASK_IN_CANCEL_JMP_BUF] + (pthread_unwind_buf): Add saved_mask to cancel_jmp_buf. + * sysdeps/nptl/pthread.h: Include + . + (__pthread_unwind_buf_t): Use struct __cancel_jmp_buf_tag with + __cancel_jmp_buf. + * sysdeps/unix/sysv/linux/hppa/pthread.h: Likewise. + 2018-01-24 Joseph Myers * sysdeps/unix/sysv/linux/m68k/jmp_buf-macros.h: Move to .... diff --git a/bits/types/__cancel_jmp_buf_tag.h b/bits/types/__cancel_jmp_buf_tag.h deleted file mode 100644 index 62f5c61f83..0000000000 --- a/bits/types/__cancel_jmp_buf_tag.h +++ /dev/null @@ -1,28 +0,0 @@ -/* Define struct __cancel_jmp_buf_tag. - Copyright (C) 2017-2018 Free Software Foundation, Inc. - This file is part of the GNU C Library. - - The GNU C Library is free software; you can redistribute it and/or - modify it under the terms of the GNU Lesser General Public - License as published by the Free Software Foundation; either - version 2.1 of the License, or (at your option) any later version. - - The GNU C Library is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with the GNU C Library; if not, see - . */ - -#ifndef ____cancel_jmp_buf_tag_defined -#define ____cancel_jmp_buf_tag_defined 1 - -struct __cancel_jmp_buf_tag - { - __jmp_buf __cancel_jmp_buf; - int __mask_was_saved; - }; - -#endif diff --git a/nptl/Makefile b/nptl/Makefile index 7940b3d26b..6fc2c8bb6a 100644 --- a/nptl/Makefile +++ b/nptl/Makefile @@ -22,8 +22,7 @@ subdir := nptl include ../Makeconfig -headers := pthread.h semaphore.h bits/semaphore.h \ - bits/types/__cancel_jmp_buf_tag.h +headers := pthread.h semaphore.h bits/semaphore.h extra-libs := libpthread extra-libs-others := $(extra-libs) diff --git a/nptl/descr.h b/nptl/descr.h index 1cc6b09d1e..64ba29e1cb 100644 --- a/nptl/descr.h +++ b/nptl/descr.h @@ -65,9 +65,6 @@ struct pthread_unwind_buf { __jmp_buf jmp_buf; int mask_was_saved; -#ifdef NEED_SAVED_MASK_IN_CANCEL_JMP_BUF - __sigset_t saved_mask; -#endif } cancel_jmp_buf[1]; union diff --git a/sysdeps/i386/nptl/tcb-offsets.sym b/sysdeps/i386/nptl/tcb-offsets.sym index 250f1a6e13..695a810386 100644 --- a/sysdeps/i386/nptl/tcb-offsets.sym +++ b/sysdeps/i386/nptl/tcb-offsets.sym @@ -15,4 +15,3 @@ POINTER_GUARD offsetof (tcbhead_t, pointer_guard) #ifndef __ASSUME_PRIVATE_FUTEX PRIVATE_FUTEX offsetof (tcbhead_t, private_futex) #endif -FEATURE_1_OFFSET offsetof (tcbhead_t, feature_1) diff --git a/sysdeps/i386/nptl/tls.h b/sysdeps/i386/nptl/tls.h index 30643d452a..fcda135b7c 100644 --- a/sysdeps/i386/nptl/tls.h +++ b/sysdeps/i386/nptl/tls.h @@ -50,10 +50,6 @@ typedef struct void *__private_tm[4]; /* GCC split stack support. */ void *__private_ss; - /* Bit 0: IBT. - Bit 1: SHSTK. - */ - unsigned int feature_1; } tcbhead_t; # define TLS_MULTIPLE_THREADS_IN_TCB 1 diff --git a/sysdeps/nptl/pthread.h b/sysdeps/nptl/pthread.h index c8ba5a75c5..df049abf74 100644 --- a/sysdeps/nptl/pthread.h +++ b/sysdeps/nptl/pthread.h @@ -27,7 +27,6 @@ #include #include #include -#include /* Detach state. */ @@ -524,7 +523,11 @@ extern void pthread_testcancel (void); typedef struct { - struct __cancel_jmp_buf_tag __cancel_jmp_buf[1]; + struct + { + __jmp_buf __cancel_jmp_buf; + int __mask_was_saved; + } __cancel_jmp_buf[1]; void *__pad[4]; } __pthread_unwind_buf_t __attribute__ ((__aligned__)); diff --git a/sysdeps/unix/sysv/linux/hppa/pthread.h b/sysdeps/unix/sysv/linux/hppa/pthread.h index 3df5e7c2ac..11a024db59 100644 --- a/sysdeps/unix/sysv/linux/hppa/pthread.h +++ b/sysdeps/unix/sysv/linux/hppa/pthread.h @@ -27,7 +27,6 @@ #include #include #include -#include /* Detach state. */ @@ -500,7 +499,11 @@ extern void pthread_testcancel (void); typedef struct { - struct __cancel_jmp_buf_tag __cancel_jmp_buf[1]; + struct + { + __jmp_buf __cancel_jmp_buf; + int __mask_was_saved; + } __cancel_jmp_buf[1]; void *__pad[4]; } __pthread_unwind_buf_t __attribute__ ((__aligned__)); diff --git a/sysdeps/unix/sysv/linux/x86/bits/types/__cancel_jmp_buf_tag.h b/sysdeps/unix/sysv/linux/x86/bits/types/__cancel_jmp_buf_tag.h deleted file mode 100644 index 70efbb190c..0000000000 --- a/sysdeps/unix/sysv/linux/x86/bits/types/__cancel_jmp_buf_tag.h +++ /dev/null @@ -1,31 +0,0 @@ -/* Define struct __cancel_jmp_buf_tag. - Copyright (C) 2017-2018 Free Software Foundation, Inc. - This file is part of the GNU C Library. - - The GNU C Library is free software; you can redistribute it and/or - modify it under the terms of the GNU Lesser General Public - License as published by the Free Software Foundation; either - version 2.1 of the License, or (at your option) any later version. - - The GNU C Library is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with the GNU C Library; if not, see - . */ - -#ifndef ____cancel_jmp_buf_tag_defined -#define ____cancel_jmp_buf_tag_defined 1 - -#include - -struct __cancel_jmp_buf_tag - { - __jmp_buf __cancel_jmp_buf; - int __mask_was_saved; - __sigset_t __saved_mask; - }; - -#endif diff --git a/sysdeps/unix/sysv/linux/x86/nptl/pthreadP.h b/sysdeps/unix/sysv/linux/x86/nptl/pthreadP.h deleted file mode 100644 index 247a62e9a0..0000000000 --- a/sysdeps/unix/sysv/linux/x86/nptl/pthreadP.h +++ /dev/null @@ -1,36 +0,0 @@ -/* Internal pthread header. Linux/x86 version. - Copyright (C) 2017-2018 Free Software Foundation, Inc. - This file is part of the GNU C Library. - - The GNU C Library is free software; you can redistribute it and/or - modify it under the terms of the GNU Lesser General Public - License as published by the Free Software Foundation; either - version 2.1 of the License, or (at your option) any later version. - - The GNU C Library is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with the GNU C Library; if not, see - . */ - -#include_next - -#ifndef _PTHREADP_H_X86 -#define _PTHREADP_H_X86 1 - -extern struct pthread_unwind_buf ____pthread_unwind_buf_private; - -_Static_assert (sizeof (____pthread_unwind_buf_private.cancel_jmp_buf) - >= sizeof (struct __jmp_buf_tag), - "size of cancel_jmp_buf < sizeof __jmp_buf_tag"); - -extern __pthread_unwind_buf_t ____pthread_unwind_buf; - -_Static_assert (sizeof (____pthread_unwind_buf.__cancel_jmp_buf) - >= sizeof (struct __jmp_buf_tag), - "size of __cancel_jmp_buf < sizeof __jmp_buf_tag"); - -#endif diff --git a/sysdeps/unix/sysv/linux/x86/pthreaddef.h b/sysdeps/unix/sysv/linux/x86/pthreaddef.h deleted file mode 100644 index a405a65666..0000000000 --- a/sysdeps/unix/sysv/linux/x86/pthreaddef.h +++ /dev/null @@ -1,22 +0,0 @@ -/* Pthread macros. Linux/x86 version. - Copyright (C) 2017-2018 Free Software Foundation, Inc. - This file is part of the GNU C Library. - - The GNU C Library is free software; you can redistribute it and/or - modify it under the terms of the GNU Lesser General Public - License as published by the Free Software Foundation; either - version 2.1 of the License, or (at your option) any later version. - - The GNU C Library is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU - Lesser General Public License for more details. - - You should have received a copy of the GNU Lesser General Public - License along with the GNU C Library; if not, see - . */ - -#include_next - -/* Need saved_mask in cancel_jmp_buf. */ -#define NEED_SAVED_MASK_IN_CANCEL_JMP_BUF 1 diff --git a/sysdeps/x86_64/nptl/tcb-offsets.sym b/sysdeps/x86_64/nptl/tcb-offsets.sym index 03b6dba5c3..8a25c482cb 100644 --- a/sysdeps/x86_64/nptl/tcb-offsets.sym +++ b/sysdeps/x86_64/nptl/tcb-offsets.sym @@ -15,7 +15,6 @@ VGETCPU_CACHE_OFFSET offsetof (tcbhead_t, vgetcpu_cache) #ifndef __ASSUME_PRIVATE_FUTEX PRIVATE_FUTEX offsetof (tcbhead_t, private_futex) #endif -FEATURE_1_OFFSET offsetof (tcbhead_t, feature_1) -- Not strictly offsets, but these values are also used in the TCB. TCB_CANCELSTATE_BITMASK CANCELSTATE_BITMASK diff --git a/sysdeps/x86_64/nptl/tls.h b/sysdeps/x86_64/nptl/tls.h index 7f0b292f42..bdd02376f9 100644 --- a/sysdeps/x86_64/nptl/tls.h +++ b/sysdeps/x86_64/nptl/tls.h @@ -56,10 +56,7 @@ typedef struct # else int __glibc_reserved1; # endif - /* Bit 0: IBT. - Bit 1: SHSTK. - */ - unsigned int feature_1; + int __glibc_unused1; /* Reservation of some values for the TM ABI. */ void *__private_tm[4]; /* GCC split stack support. */ -- 2.14.3