Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 23.128.96.34 as permitted sender) client-ip=23.128.96.34;
Date:   Wed, 13 Sep 2023 23:30:57 +0200 (CEST)
From:   Sebastian Ott <sebott@redhat.com>
To:     Willy Tarreau <w@1wt.eu>
cc:     =?ISO-8859-15?Q?Thomas_Wei=DFschuh?= <linux@weissschuh.net>,
        Mark Brown <broonie@kernel.org>, linux-kernel@vger.kernel.org
Subject: Re: aarch64 binaries using nolibc segfault before reaching the entry
 point
In-Reply-To: <20230913205838.GA21038@1wt.eu>
Message-ID: <57707201-b8a6-1389-d451-033e9e13fe1c@redhat.com>
References: <5d49767a-fbdc-fbe7-5fb2-d99ece3168cb@redhat.com> <2da5ce29-e0de-4715-aa77-453ff3cc48aa@t-8ch.de> <20230913205838.GA21038@1wt.eu>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="-1463795790-1700873777-1694640661=:19348"
Precedence: bulk

  This message is in MIME format.  The first part should be readable text,
  while the remaining parts are likely unreadable without MIME-aware tools.

---1463795790-1700873777-1694640661=:19348
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: 8BIT

On Wed, 13 Sep 2023, Willy Tarreau wrote:
> On Wed, Sep 13, 2023 at 10:19:00PM +0200, Thomas Wei?schuh wrote:
>>> All on aarch64 running fedora37 + upstream kernel. Any hints on what could
>>> be borken here or how to actually fix it?
>>
>> I reduced it to the following reproducer:
>>
>>     $ cat test.c
>>     int foo;  /* It works when deleting this variable */
>>
>>     void __attribute__((weak, noreturn, optimize("Os", "omit-frame-pointer"))) _start(void)
>>     {
>>     	__asm__ volatile (
>>     		"mov x8, 93\n"       /* NR_exit == 93 */
>>     		"svc #0\n"
>>     	);
>>     	__builtin_unreachable();
>>     }
>>
>>     $ aarch64-linux-gnu-gcc -Os -static -fno-stack-protector -Wall -nostdlib test.c
>>     $ ./a.out
>>     Segmentation fault
>>
>> Also when running under gdb the error message is:
>>
>>     During startup program terminated with signal SIGSEGV, Segmentation fault.
>>
>> So it seems the error already happens during loading.
>>
>> Could be a compiler or kernel bug?
>
> I tried here with gcc-11.4.0 native on an ubuntu-22.04 and using a
> cross gcc-9.5 executed on another box and couldn't reproduce the issue
> at all. It could be that the compiler inserts whatever, did someone
> try to disassemble de resulting program to see what it looks like ?
> Maybe we're even dealing with issues related to random stack alignment
> that causes issues past a function call due to some garbage being placed
> at the wrong place in the stack. Also, dmesg should generally report
> what (and where) the segv happened. Similarly, gdb with "info reg"
> and "disassemble $pc" should report some info.

Sadly there is no kernel output for this I guess this happens just too
early. gdb just reports "The program has no registers now."

Sebastian
---1463795790-1700873777-1694640661=:19348--