| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Fri, 18 Dec 2015 19:58:16 +0000 (UTC)
From: Mathieu Desnoyers <mathieu.desnoyers@...icios.com>
To: Helge Deller <deller@....de>
Cc: "Paul E. McKenney" <paulmck@...ux.vnet.ibm.com>,
Jon Bernard <jbernard@...ian.org>,
Michael Jeanson <mjeanson@...icios.com>,
Ralf Baechle <ralf@...ux-mips.org>,
linux-mips <linux-mips@...ux-mips.org>,
linux-kernel@...r.kernel.org,
"James E.J. Bottomley" <jejb@...isc-linux.org>,
linux-parisc <linux-parisc@...r.kernel.org>,
Ed Swierk <eswierk@...portsystems.com>,
Greg Kroah-Hartman <gregkh@...uxfoundation.org>
Subject: Re: Aw: Re: [RFC PATCH urcu on mips, parisc] Fix: compat_futex
should work-around futex signal-restart kernel bug
----- On Dec 17, 2015, at 11:22 AM, Helge Deller deller@....de wrote:
> Hello Mathieu,
>
>> > When testing liburcu on a 3.18 Linux kernel, 2-core MIPS (cpu model :
>> > Ingenic JZRISC V4.15 FPU V0.0), we notice that a blocked sys_futex
>> > FUTEX_WAIT returns -1, errno=ENOSYS when interrupted by a SA_RESTART
>> > signal handler. This spurious ENOSYS behavior causes hangs in liburcu
>> > 0.9.x. Running a MIPS 3.18 kernel under a QEMU emulator exhibits the
>> > same behavior. This might affect earlier kernels.
>> >
>> > This issue appears to be fixed in 3.18.y stable kernels and 3.19, but
>> > nevertheless, we should try to handle this kernel bug more gracefully
>> > than a user-space hang due to unexpected spurious ENOSYS return value.
>>
>> It's actually fixed in 3.19, but not in 3.18.y stable kernels. The
>> Linux kernel upstream fix commit is:
>> e967ef02 "MIPS: Fix restart of indirect syscalls"
>
> But that patch fixes mips only.
Indeed, I do not expect this commit to have any effect on parisc.
>
>> I've created a small test program that could also be used on parisc
>> to check if it suffers from the same issue (see attached).
>>
>> On bogus mips kernels, we see the following output:
>> [OK] Test program with pid: 5748 SIGUSR1 handler
>> [FAIL] futex returns -1, Function not implemented
>
> I tested it on a recent 4.2 kernel on parisc.
> It fails as you describe:
>
> Testing futex sigrestart. Stop with CTRL-c.
> [OK] Test program with pid: 1361 SIGUSR1 handler
> [OK] Test program with pid: 1361 SIGUSR1 handler
> [FAIL] futex returns -1, Function not implemented
> [OK] Test program with pid: 1361 SIGUSR1 handler
> [FAIL] futex returns -1, Function not implemented
>
> strace gives:
> [pid 1329] futex(0x1210c, FUTEX_WAIT, -1, NULL <unfinished ...>
> [pid 1328] nanosleep({1, 0}, <unfinished ...>
> [pid 1329] <... futex resumed> ) = ? ERESTARTSYS (To be restarted if
> SA_RESTART is set)
> [pid 1329] write(2, "[FAIL] futex returns -1, Functio"..., 50[FAIL] futex
> returns -1, Function not implemented)
Looks like parisc has an issue very similar to the one that
has been fixed on MIPS by e967ef02 "MIPS: Fix restart of indirect syscalls".
>
>
>> > Therefore, fallback on the "async-safe" version of compat_futex in those
>> > situations where FUTEX_WAIT returns ENOSYS. This async-safe fallback has
>> > the nice property of being OK to use concurrently with other FUTEX_WAKE
>> > and FUTEX_WAIT futex() calls, because it's simply a busy-wait scheme.
>> >
>> > We suspect that parisc might be affected by a similar issue (Debian
>> > build bots reported a similar hang on both mips and parisc), but we do
>> > not have access to the hardware required to test this hypothesis.
>
> If you want access to a machine, let me know.
> I'll try the patch below as well..
This would be very useful indeed, just to make sure our approach to
futex fallback in liburcu works fine on parisc.
I'm no parisc assembly expert though, but I suspect the issue
would be quite similar to the one already fixed on MIPS. The
existing fix for MIPS would be a good starting point to see if
something similar is missing on parisc.
When time allows, we should consider cleaning up my test case for
restart of indirect system calls and add it to kselftest. It's
the second architecture that has the same defect, which means this
behavior is seldom tested.
Thanks,
Mathieu
>
>> > Signed-off-by: Mathieu Desnoyers <mathieu.desnoyers@...icios.com>
>> > CC: Michael Jeanson <mjeanson@...icios.com>
>> > CC: Paul E. McKenney <paulmck@...ux.vnet.ibm.com>
>> > CC: Ralf Baechle <ralf@...ux-mips.org>
>> > CC: linux-mips@...ux-mips.org
>> > CC: linux-kernel@...r.kernel.org
>> > CC: "James E.J. Bottomley" <jejb@...isc-linux.org>
>> > CC: Helge Deller <deller@....de>
>> > CC: linux-parisc@...r.kernel.org
>> > ---
>> > compat_futex.c | 2 ++
>> > urcu/futex.h | 12 +++++++++++-
>> > 2 files changed, 13 insertions(+), 1 deletion(-)
>> >
>> > diff --git a/compat_futex.c b/compat_futex.c
>> > index b7f78f0..9e918fe 100644
>> > --- a/compat_futex.c
>> > +++ b/compat_futex.c
>> > @@ -111,6 +111,8 @@ end:
>> > * _ASYNC SIGNAL-SAFE_.
>> > * For now, timeout, uaddr2 and val3 are unused.
>> > * Waiter will busy-loop trying to read the condition.
>> > + * It is OK to use compat_futex_async() on a futex address on which
>> > + * futex() WAKE operations are also performed.
>> > */
>> >
>> > int compat_futex_async(int32_t *uaddr, int op, int32_t val,
>> > diff --git a/urcu/futex.h b/urcu/futex.h
>> > index 4d16cfa..a17eda8 100644
>> > --- a/urcu/futex.h
>> > +++ b/urcu/futex.h
>> > @@ -73,7 +73,17 @@ static inline int futex_noasync(int32_t *uaddr, int op,
>> > int32_t val,
>> >
>> > ret = futex(uaddr, op, val, timeout, uaddr2, val3);
>> > if (caa_unlikely(ret < 0 && errno == ENOSYS)) {
>> > - return compat_futex_noasync(uaddr, op, val, timeout,
>> > + /*
>> > + * The fallback on ENOSYS is the async-safe version of
>> > + * the compat futex implementation, because the
>> > + * async-safe compat implementation allows being used
>> > + * concurrently with calls to futex(). Indeed, sys_futex
>> > + * FUTEX_WAIT, on some architectures (e.g. mips), within
>> > + * a given process, spuriously return ENOSYS due to
>> > + * signal restart bugs on some kernel versions (e.g.
>> > + * Linux kernel 3.18 and possibly earlier).
>> > + */
>> > + return compat_futex_async(uaddr, op, val, timeout,
>> > uaddr2, val3);
>> > }
> > > return ret;
--
Mathieu Desnoyers
EfficiOS Inc.
http://www.efficios.com
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists