linux-kernel.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Josh Poimboeuf <jpoimboe@redhat.com>
To: Vito Caputo <vcaputo@pengaru.com>
Cc: linux-kernel <linux-kernel@vger.kernel.org>,
	x86@kernel.org, Qi Zheng <zhengqi.arch@bytedance.com>,
	peterz@infradead.org, luto@kernel.org, jannh@google.com,
	Kees Cook <keescook@chromium.org>
Subject: Re: CONFIG_ORC_UNWINDER=y breaks get_wchan()?
Date: Tue, 21 Sep 2021 17:15:37 -0700	[thread overview]
Message-ID: <20210922001537.4ktg3r2ky3b3r6yp@treble> (raw)
In-Reply-To: <20210921193249.el476vlhg5k6lfcq@shells.gnugeneration.com>

On Tue, Sep 21, 2021 at 12:32:49PM -0700, Vito Caputo wrote:
> Is this an oversight of the ORC_UNWINDER implementation?  It's
> arguably a regression to completely break wchans for tools like `ps -o
> wchan` and `top`, or my window manager and its separate monitoring
> utility.  Presumably there are other tools out there sampling wchans
> for monitoring as well, there's also an internal use of get_chan() in
> kernel/sched/fair.c for sleep profiling.
> 
> I've occasionally seen when monitoring at a high sample rate (60hz) on
> something churny like a parallel kernel or systemd build, there's a
> spurious non-zero sample coming out of /proc/[pid]/wchan containing a
> hexadecimal address like 0xffffa9ebc181bcf8.  This all smells broken,
> is get_wchan() occasionally spitting out random junk here kallsyms
> can't resolve, because get_chan() is completely ignorant of
> ORC_UNWINDER's effects?

Hi Vito,

Thanks for reporting this.  Does this patch fix your issue?

  https://lkml.kernel.org/r/20210831083625.59554-1-zhengqi.arch@bytedance.com

Though, considering wchan has been silently broken for four years, I do
wonder what the impact would be if we were to just continue to show "0"
(and change frame pointers to do the same).

The kernel is much more cautious than it used to be about exposing this
type of thing.  Can you elaborate on your use case?

If we do keep it, we might want to require CAP_SYS_ADMIN anyway, for
similar reasons as 

  f8a00cef1720 ("proc: restrict kernel stack dumps to root")

... since presumably proc_pid_wchan()'s use of '%ps' can result in an
actual address getting printed if the unwind gets confused, thanks to
__sprint_symbol()'s backup option if kallsyms_lookup_buildid() doesn't
find a name.

Though, instead of requiring CAP_SYS_ADMIN, maybe we can just fix
__sprint_symbol() to not expose addresses?

Or is there some other reason for needing CAP_SYS_ADMIN?  Jann?

-- 
Josh


  reply	other threads:[~2021-09-22  0:15 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2021-09-21 19:32 CONFIG_ORC_UNWINDER=y breaks get_wchan()? Vito Caputo
2021-09-22  0:15 ` Josh Poimboeuf [this message]
2021-09-22  3:04   ` Kees Cook
2021-09-23 23:59     ` Jann Horn
2021-09-25 19:07       ` David Laight
2021-09-22  3:30   ` Qi Zheng
2021-10-05  0:51     ` Andy Lutomirski
2021-09-24  5:46   ` Vito Caputo

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20210922001537.4ktg3r2ky3b3r6yp@treble \
    --to=jpoimboe@redhat.com \
    --cc=jannh@google.com \
    --cc=keescook@chromium.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=luto@kernel.org \
    --cc=peterz@infradead.org \
    --cc=vcaputo@pengaru.com \
    --cc=x86@kernel.org \
    --cc=zhengqi.arch@bytedance.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).