Trying Xenomai3.2 and has some web browser problem

* Trying Xenomai3.2 and has some web browser problem
@ 2021-11-10  6:33 Ando Yuta
  2021-11-10 11:15 ` Jan Kiszka
  0 siblings, 1 reply; 8+ messages in thread
From: Ando Yuta @ 2021-11-10  6:33 UTC (permalink / raw)
  To: xenomai

Hello

We are now testing xenomai3.2 with dovetail core(kernel ver5.10.70)
The kernel build was successful with some modifications to the ipipe configuration we had been using.
Building our application was also successful without any problems, just by slightly changing the flags in cmake.
So our application is working well, except for one thing.

When using xenomai 3.1 with ipipe patch 5.4.77, there was no problem,
but when using 5.10.70 dovetail, the web browser started to crash.

Firefox didn't work at all.
When using Google Chrome and chromium, some pages don't crash and some,
in particular, video sites like youtube and sites that require login such as github did.

Attached below are the results of strace when using chrome.
The problem seems to be around seccomp.

If we follow this web(https://chromium.googlesource.com/chromium/src/+/refs/heads/main/docs/linux/sandboxing.md)
and specify --disable-seccomp-filter-sandbox, the crash was apparently avoided.
However, this option disables sandbox, which causes a security problem.
Therefore, we do not want to disable sandbox if possible.

This browser crash does not occur on the same 5.10.70 kernel unless we enable the dovetail realtime kernel, so
It seems to be an issue with a system call related to dovetail's seccomp.
Is there any way to solve this problem?

The strace results are as follows

set_robust_list(0x7f81172e19e0, 24) = 0
gettid() = 17
stat("/sys/fs/cgroup/cpuset/chrome", 0x7f81172e07c0) = -1 ENOSYS (Function not implemented)
setpriority(PRIO_PROCESS, 0, 0) = 0
getpid() = 1
prctl(PR_SET_NAME, "ServiceWorker t"...) = 0
mmap(0x196a00000000, 4294967296, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x196a00000000
mprotect(0x196a00000000, 4096, PROT_READ|PROT_WRITE) = 0
sched_getaffinity(17, 32, <unfinished ...>
--- SIGSYS {si_signo=SIGSYS, si_code=SYS_SECCOMP, si_errno=ENXIO, si_call_addr=0x7f8131c01c33, si_syscall=__NR_sched_getaffinity, si_arch=AUDIT_ARCH_X86_64} ---
0x3ed603ae9440) = -1 ENOSYS (Function not implemented)
write(2, "Sanity checks are failing after "..., 49) = -1 ENOSYS (Function not implemented)
write(2, "\n", 1) = -1 ENOSYS (Function not implemented)
rt_sigprocmask(SIG_UNBLOCK, [ABRT], NULL, 8) = -1 ENOSYS (Function not implemented)
rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], 0x7f81172df6e0, 8) = -1 ENOSYS (Function not implemented)
getpid() = -38
gettid() = -38
tgkill(1, 17, SIGABRT) = -1 ENOSYS (Function not implemented)
rt_sigprocmask(SIG_SETMASK, [], <unfinished ...>
--- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=1, si_uid=1000} ---
NULL, 8) = -1 ENOSYS (Function not implemented)
gettid() = -38
prctl(PR_GET_DUMPABLE) = -1 ENOSYS (Function not implemented)
rt_sigprocmask(SIG_BLOCK, [CONT], 0x7f81172de810, 8) = -1 ENOSYS (Function not implemented)
sendmsg(18, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\1\0\0\0\1\0\0\0\10\351-\27\201\177\0\0\10\246\32\0\326>\0\0\0\0\0\0\0\0\0\0"..., iov_len=40}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigtimedwait([CONT], 0x7f81172de820, {tv_sec=5, tv_nsec=0}, 8) = -1 ENOSYS (Function not implemented)
rt_sigprocmask(SIG_SETMASK, [ABRT], NULL, 8) = -1 ENOSYS (Function not implemented)
rt_sigaction(SIGABRT, {sa_handler=0x56013b2b5688, sa_mask=[], sa_flags=SA_RESTORER, sa_restorer=0x7f8131c01980}, NULL, 8) = -1 ENOSYS (Function not implemented)
rt_sigprocmask(SIG_BLOCK, ~[RTMIN RT_1], 0x7f81172de810, 8) = -1 ENOSYS (Function not implemented)
getpid() = -38
gettid() = -38
tgkill(1, 17, SIGABRT) = -1 ENOSYS (Function not implemented)
rt_sigprocmask(SIG_SETMASK, [ABRT], NULL, 8) = -1 ENOSYS (Function not implemented)
syscall_0xffffffffffffffff(0x2, 0x7f81172df6e0, 0, 0x8, 0, 0x7f81172df6e0 <unfinished ...>
--- SIGABRT {si_signo=SIGABRT, si_code=SI_TKILL, si_pid=1, si_uid=1000} ---
) = -1 (errno 38)
+++ exited with 250 +++

Yuta Ando

^ permalink raw reply	[flat|nested] 8+ messages in thread