public inbox for libc-alpha@sourceware.org
 help / color / mirror / Atom feed
* [PATCH] powerpc64: Workaround sigtramp vdso return call.
@ 2021-01-26 13:05 Raoni Fassina Firmino
  2021-01-26 13:08 ` Raoni Fassina Firmino
                   ` (3 more replies)
  0 siblings, 4 replies; 11+ messages in thread
From: Raoni Fassina Firmino @ 2021-01-26 13:05 UTC (permalink / raw)
  To: libc-alpha; +Cc: fweimer

Hi all,

There was some initial discussions on the mailing list about the
failing misc/tst-sigcontext-get_pc[1], and I made some suggestions of
possible solutions.  As the window for the release is closing I want
to sent the more simple one of them ASAP for consideration (others
would not make it in time)

o/
Raoni

[1] https://sourceware.org/pipermail/libc-alpha/2021-January/121933.html

---- 8< ----

A not so recent kernel change[1] changed how the trampoline
`__kernel_sigtramp_rt64` is used to call signal handlers.

This was exposed on the test misc/tst-sigcontext-get_pc

Before kernel 5.9, the kernel set LR to the trampoline address and
jumped directly to the signal handler, and at the end the signal
handler, as any other function, would `blr` to the address set.  In
other words, the trampoline was executed just at the end of the signal
handler and the only thing it did was call sigreturn.  But since
kernel 5.9 the kernel set CTRL to the signal handler and calls to the
trampoline code, the trampoline then `bctrl` to the address in CTRL,
setting the LR to the next instruction in the middle of the
trampoline, when the signal handler returns, the rest of the
trampoline code executes the same code as before.

Here is the full trampoline code as of kernel 5.11.0-rc5 for
reference:

    V_FUNCTION_BEGIN(__kernel_sigtramp_rt64)
    .Lsigrt_start:
            bctrl▸  /* call the handler */
            addi▸   r1, r1, __SIGNAL_FRAMESIZE
            li▸     r0,__NR_rt_sigreturn
            sc
    .Lsigrt_end:
    V_FUNCTION_END(__kernel_sigtramp_rt64)

This new behavior breaks how `backtrace()` uses to detect the
trampoline frame to correctly reconstruct the stack frame when it is
called from inside a signal handling.

This workaround rely on the fact that the trampoline code is at very
least two (maybe 3?) instructions in size (as it is in the 32 bits
version, only on `li` and `sc`), so it is safe to check the return
address be in the range __kernel_sigtramp_rt64 .. + 4.

[1] subject: powerpc/64/signal: Balance return predictor stack in signal trampoline
    commit: 0138ba5783ae0dcc799ad401a1e8ac8333790df9
    url: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0138ba5783ae0dcc799ad401a1e8ac8333790df9
---
 sysdeps/powerpc/powerpc64/backtrace.c | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/sysdeps/powerpc/powerpc64/backtrace.c b/sysdeps/powerpc/powerpc64/backtrace.c
index ae64c5d7a5..5540085436 100644
--- a/sysdeps/powerpc/powerpc64/backtrace.c
+++ b/sysdeps/powerpc/powerpc64/backtrace.c
@@ -54,11 +54,20 @@ struct signal_frame_64 {
   /* We don't care about the rest, since the IP value is at 'uc' field.  */
 };
 
+/* Test if the address match to the inside the trampoline code.  We cannot
+ * count on the return address be the beginning of sigtramp, the kernel may jump
+ * to the trampoline and the trampoline jump to the signal handler and in this
+ * case the address will be somewhere in the middle of the trampoline.  This is
+ * a workaround while we cannot know the sigtramp size.  It will be at least two
+ * instructions long since it needs at least to load the syscall number for
+ * sigreturn and call it.
+ */
 static inline bool
 is_sigtramp_address (void *nip)
 {
 #ifdef HAVE_SIGTRAMP_RT64
-  if (nip == GLRO (dl_vdso_sigtramp_rt64))
+  void *sigtramp_addr = GLRO (dl_vdso_sigtramp_rt64);
+  if (nip >= sigtramp_addr && nip <= sigtramp_addr + 4)
     return true;
 #endif
   return false;
-- 
2.26.2


^ permalink raw reply	[flat|nested] 11+ messages in thread

end of thread, other threads:[~2021-01-28 13:04 UTC | newest]

Thread overview: 11+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-01-26 13:05 [PATCH] powerpc64: Workaround sigtramp vdso return call Raoni Fassina Firmino
2021-01-26 13:08 ` Raoni Fassina Firmino
2021-01-26 14:12 ` Florian Weimer
2021-01-26 14:45   ` Paul E Murphy
2021-01-27 16:21     ` Raoni Fassina Firmino
2021-01-28  5:38       ` Nicholas Piggin
2021-01-26 16:36 ` Adhemerval Zanella
2021-01-27 19:22   ` Raoni Fassina Firmino
2021-01-27 19:31     ` Adhemerval Zanella
2021-01-28  8:54 ` Andreas Schwab
2021-01-28 13:03   ` Raoni Fassina Firmino

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).