Page MenuHomeFreeBSD

libthr: work around an ASAN false-positive
ClosedPublic

Authored by arichardson on Jul 6 2021, 8:37 AM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Oct 22, 6:08 AM
Unknown Object (File)
Thu, Oct 17, 6:12 PM
Unknown Object (File)
Oct 4 2024, 2:06 AM
Unknown Object (File)
Oct 3 2024, 1:31 AM
Unknown Object (File)
Sep 27 2024, 9:48 AM
Unknown Object (File)
Sep 25 2024, 6:01 AM
Unknown Object (File)
Sep 23 2024, 7:03 PM
Unknown Object (File)
Sep 23 2024, 7:03 PM
Subscribers

Details

Summary

I got the following error with an ASAN-instrument libthr:

803==ERROR: AddressSanitizer: stack-buffer-overflow on address 0x7fffffffcdb0 at pc 0x000801863396 bp 0x7ff8

READ of size 4 at 0x7fffffffcdb0 thread T0

#0 0x801863395 in handle_signal /local/scratch/alr48/cheri/freebsd/lib/libthr/thread/thr_sig.c:262:2
#1 0x801860da2 in thr_sighandler /local/scratch/alr48/cheri/freebsd/lib/libthr/thread/thr_sig.c:246:2

Address 0x7fffffffcdb0 is located in stack of thread T0 at offset 208 in frame

  #0 0x80186080f in thr_sighandler /local/scratch/alr48/cheri/freebsd/lib/libthr/thread/thr_sig.c:213

This frame has 1 object(s):
  [32, 64) 'act' (line 216) <== Memory access at offset 208 overflows this variable

HINT: this may be a false positive if your program uses some custom stack

This seems like a false-positive since the line in question is
SIGSETOR(actp->sa_mask, ucp->uc_sigmask); and it complains about a read
operation (from the ucontext_t argument) so this indicates to me that ASAN
does not understand that thr_sighandler() is a signal handler.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable