mirror of
https://github.com/hanzoai/visor.git
synced 2026-09-24 17:04:14 +00:00
Andrei VaginandgVisor bot
39676d0eaa
The user-space bluepill introduced the issue. With that change, we use a per-vcpu stack to run bluepillHandler. BluepillHanlder releases a vcpu before calling sigreturn, so it is still running on the vcpu stack. The race looks like this: one thread releases a vcpu, another thread takes it and starts using its stack, the first thread calls sigreturn with a corrupted signal frame.  PiperOrigin-RevId: 684992950
60 lines
1.7 KiB
Go
60 lines
1.7 KiB
Go
// Copyright 2024 The gVisor Authors.
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
//go:build amd64
|
|
// +build amd64
|
|
|
|
package sigframe
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"golang.org/x/sys/unix"
|
|
"gvisor.dev/gvisor/pkg/abi/linux"
|
|
"gvisor.dev/gvisor/pkg/hostarch"
|
|
"gvisor.dev/gvisor/pkg/sentry/arch"
|
|
)
|
|
|
|
func TestUserSignalHandler(t *testing.T) {
|
|
addr, _, _ := unix.Syscall6(unix.SYS_MMAP, 0, hostarch.PageSize*4, uintptr(unix.PROT_READ|unix.PROT_WRITE),
|
|
uintptr(unix.MAP_PRIVATE|unix.MAP_ANONYMOUS),
|
|
0, 0)
|
|
stack := linux.SignalStack{
|
|
Addr: uint64(addr),
|
|
Size: hostarch.PageSize * 4,
|
|
}
|
|
set := linux.MakeSignalSet(linux.SIGURG)
|
|
CallWithSignalFrame(&stack, addrOfUserHandler(), &set, 0)
|
|
}
|
|
|
|
func BenchmarkUserSigHandler(b *testing.B) {
|
|
addr, _, _ := unix.Syscall6(unix.SYS_MMAP, 0, hostarch.PageSize*4, uintptr(unix.PROT_READ|unix.PROT_WRITE),
|
|
uintptr(unix.MAP_PRIVATE|unix.MAP_ANONYMOUS),
|
|
0, 0)
|
|
stack := linux.SignalStack{
|
|
Addr: uint64(addr),
|
|
Size: hostarch.PageSize * 4,
|
|
}
|
|
set := linux.MakeSignalSet(linux.SIGURG)
|
|
for i := 0; i < b.N; i++ {
|
|
CallWithSignalFrame(&stack, addrOfUserHandler(), &set, 0)
|
|
}
|
|
}
|
|
|
|
func addrOfUserHandler() uintptr
|
|
|
|
func userHandler(sigframe *arch.UContext64) {
|
|
Sigreturn(sigframe)
|
|
}
|