Page MenuHomeFreeBSD

rtld: mask signals for default read locks
ClosedPublic

Authored by kib on Aug 31 2022, 1:11 AM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Apr 23, 7:20 AM
Unknown Object (File)
Feb 19 2024, 4:16 PM
Unknown Object (File)
Jan 31 2024, 1:29 AM
Unknown Object (File)
Jan 31 2024, 1:28 AM
Unknown Object (File)
Jan 31 2024, 1:28 AM
Unknown Object (File)
Jan 31 2024, 1:28 AM
Unknown Object (File)
Jan 29 2024, 5:56 PM
Unknown Object (File)
Jan 6 2024, 1:51 AM
Subscribers

Details

Summary
Rtld locks from libthr defer signals delivery, which means that binding
is not possible while a signal handler is executed.

Binding might upgrade read-locked rtld_bind_lock to write-lock, if
symbol resolution requires loading filters.  If a signal would be delivered
while rtld is in read-locked section, and signal handler needs binding
which upgrades the lock, for non-threaded image that uses default rtld
locks, we get the rtld data structures modified under the top-level
active rtld frame.

To correct the problem, Mask signals for read-locking of default locks
in addition to the write-locking.  It is very cheap now with
sigfastblock(2).

Note that the global state is used to track pre-locked state of either
sigfastblock(2) or signal mask (if sigfastblock(2) is administratively
disabled).  It is fine for non-threaded images since there are no other
threads.  But I believe that it is fine for threaded images using libc_r
as well, since masking signals disables preemption (I did not tested
it).

NetBSD PR:      https://gnats.netbsd.org/56979
Reported by:    tmunro

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

kib requested review of this revision.Aug 31 2022, 1:11 AM
markj added inline comments.
libexec/rtld-elf/rtld_lock.c
148

Is _rel really needed here?

This revision is now accepted and ready to land.Sep 3 2022, 2:20 PM
kib marked an inline comment as done.Sep 3 2022, 2:30 PM
kib added inline comments.
libexec/rtld-elf/rtld_lock.c
148

No. And _add_acq can be further optimized by removing _acq and only doing fence_acq when WAFLAG is not set, but I decided to not bother.

kib marked an inline comment as done.

Remove one _rel

This revision now requires review to proceed.Sep 3 2022, 2:31 PM
This revision is now accepted and ready to land.Sep 3 2022, 2:54 PM