From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-8.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,MENTIONS_GIT_HOSTING, SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id C9D3EC433E0 for ; Sun, 7 Feb 2021 02:26:38 +0000 (UTC) Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id ADF8364E30 for ; Sun, 7 Feb 2021 02:26:37 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org ADF8364E30 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=bugs.launchpad.net Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Received: from localhost ([::1]:51738 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1l8ZmW-00033n-NE for qemu-devel@archiver.kernel.org; Sat, 06 Feb 2021 21:26:36 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:56418) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1l8Zld-0002YH-Fp for qemu-devel@nongnu.org; Sat, 06 Feb 2021 21:25:41 -0500 Received: from indium.canonical.com ([91.189.90.7]:55172) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1l8Zlb-0003is-C8 for qemu-devel@nongnu.org; Sat, 06 Feb 2021 21:25:41 -0500 Received: from loganberry.canonical.com ([91.189.90.37]) by indium.canonical.com with esmtp (Exim 4.86_2 #2 (Debian)) id 1l8ZlY-0004Ob-Pq for ; Sun, 07 Feb 2021 02:25:36 +0000 Received: from loganberry.canonical.com (localhost [127.0.0.1]) by loganberry.canonical.com (Postfix) with ESMTP id A80152E8086 for ; Sun, 7 Feb 2021 02:25:36 +0000 (UTC) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Date: Sun, 07 Feb 2021 02:17:15 -0000 From: hikalium <1914849@bugs.launchpad.net> To: qemu-devel@nongnu.org X-Launchpad-Notification-Type: bug X-Launchpad-Bug: product=qemu; status=New; importance=Undecided; assignee=None; X-Launchpad-Bug-Tags: macos tcg X-Launchpad-Bug-Information-Type: Public X-Launchpad-Bug-Private: no X-Launchpad-Bug-Security-Vulnerability: no X-Launchpad-Bug-Commenters: hikalium roolebo tnishinaga X-Launchpad-Bug-Reporter: Toshifumi NISHINAGA (tnishinaga) X-Launchpad-Bug-Modifier: hikalium (hikalium) References: <161259505296.24527.7729976640303273029.malonedeb@wampee.canonical.com> Message-Id: <161266423509.2846.13019124961581445864.malone@gac.canonical.com> Subject: [Bug 1914849] Re: mprotect fails after MacOS 11.2 on arm mac X-Launchpad-Message-Rationale: Subscriber (QEMU) @qemu-devel-ml X-Launchpad-Message-For: qemu-devel-ml Precedence: bulk X-Generated-By: Launchpad (canonical.com); Revision="3d7abcb776ec05aa0a89112accc21bf8b41dfc24"; Instance="production" X-Launchpad-Hash: 114595eaab096ca0431c84f9d4efd4413077ba29 Received-SPF: none client-ip=91.189.90.7; envelope-from=bounces@canonical.com; helo=indium.canonical.com X-Spam_score_int: -65 X-Spam_score: -6.6 X-Spam_bar: ------ X-Spam_report: (-6.6 / 5.0 requ) BAYES_00=-1.9, HEADER_FROM_DIFFERENT_DOMAINS=0.25, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: Bug 1914849 <1914849@bugs.launchpad.net> Errors-To: qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Sender: "Qemu-devel" I hit the same problem and did some initial investigation with Toshifumi. Here is a more exhaustive test program I wrote based on the post on the Apple Developer Forums and the result shows that very interesting behavior of mmap and mprotect since macOS 11.2. https://gist.github.com/hikalium/75ae822466ee4da13cbbe486498a191f I and my friend confirmed that all mmap & following mprotect calls with any protection bit combinations are succeeded up to 11.1 on M1 Mac but starting from 11.2 mprotect starts failing if we call mmap with PROT_WRITE + PROT_EXEC. (Surprisingly, mmap itself is not failing even on those patterns.) It looks like the allocation of code gen buffer in QEMU uses this combinati= on at mmap call: https://github.com/qemu/qemu/blob/master/accel/tcg/translate-all.c#L1294 So maybe we need to specify PROT_NONE instead on the initial mmap and change it appropriately afterwards to make it working on M1 Mac after 11.2. (We tried to fix it but we have no sufficient knowledge about tcg... Could you take a look into it?) -- = You received this bug notification because you are a member of qemu- devel-ml, which is subscribed to QEMU. https://bugs.launchpad.net/bugs/1914849 Title: mprotect fails after MacOS 11.2 on arm mac Status in QEMU: New Bug description: I got the following error when I ran qemu on arm mac(MacOS 11.2). ``` $ ./qemu-system-x86_64 qemu-system-x86_64: qemu_mprotect__osdep: mprotect failed: Permission den= ied ** ERROR:../tcg/tcg.c:844:tcg_region_init: assertion failed: (!rc) Bail out! ERROR:../tcg/tcg.c:844:tcg_region_init: assertion failed: (!rc) [1] 34898 abort ./qemu-system-x86_64 ``` I tested the same version of qemu on intel mac(MacOS 11.2), but it works fine. And my friend told me that they did not have this error with MacOS 11.1. So, I think it is CPU architecture or an OS version dependent error. = Environment: Qemu commit id: d0dddab40e472ba62b5f43f11cc7dba085dabe71 OS: MacOS 11.2(20D64) Hardware: MacBook Air (M1, 2020) = How to build: ``` mkdir build/ cd build/ ../configure --target-list=3Daarch64-softmmu,x86_64-softmmu make ``` = How to reproduce: ``` ./qemu-system-x86_64 ``` = Error message: ``` $ ./qemu-system-x86_64 qemu-system-x86_64: qemu_mprotect__osdep: mprotect failed: Permission den= ied ** ERROR:../tcg/tcg.c:844:tcg_region_init: assertion failed: (!rc) Bail out! ERROR:../tcg/tcg.c:844:tcg_region_init: assertion failed: (!rc) [1] 34898 abort ./qemu-system-x86_64 ``` To manage notifications about this bug go to: https://bugs.launchpad.net/qemu/+bug/1914849/+subscriptions