Dario Faggioli
367937cadb
- Fix virtiofs crashing with glibc >= 2.35, due to rseq syscall (bsc#1196924) * Patches added: tools-virtiofsd-Add-rseq-syscall-to-the-.patch - Avoid warnings caused by a GCC 12 bug, see https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98503 (bsc#1197018) * Patches added: hw-i386-amd_iommu-Fix-maybe-uninitialize.patch Silence-GCC-12-spurious-warnings.patch Ignore-spurious-GCC-12-warning.patch OBS-URL: https://build.opensuse.org/request/show/964331 OBS-URL: https://build.opensuse.org/package/show/Virtualization/qemu?expand=0&rev=696
58 lines
2.2 KiB
Diff
58 lines
2.2 KiB
Diff
From: Christian Ehrhardt <christian.ehrhardt@canonical.com>
|
|
Date: Wed, 9 Feb 2022 12:14:56 +0100
|
|
Subject: tools/virtiofsd: Add rseq syscall to the seccomp allowlist
|
|
|
|
Git-commit: 7b223e38603de3a75602e14914d26f9d4baf52eb
|
|
References: bsc#1196924
|
|
|
|
The virtiofsd currently crashes when used with glibc 2.35.
|
|
That is due to the rseq system call being added to every thread
|
|
creation [1][2].
|
|
|
|
[1]: https://www.efficios.com/blog/2019/02/08/linux-restartable-sequences/
|
|
[2]: https://sourceware.org/pipermail/libc-alpha/2022-February/136040.html
|
|
|
|
This happens not at daemon start, but when a guest connects
|
|
|
|
/usr/lib/qemu/virtiofsd -f --socket-path=/tmp/testvfsd -o sandbox=chroot \
|
|
-o source=/var/guests/j-virtiofs --socket-group=kvm
|
|
virtio_session_mount: Waiting for vhost-user socket connection...
|
|
# start ok, now guest will connect
|
|
virtio_session_mount: Received vhost-user socket connection
|
|
virtio_loop: Entry
|
|
fv_queue_set_started: qidx=0 started=1
|
|
fv_queue_set_started: qidx=1 started=1
|
|
Bad system call (core dumped)
|
|
|
|
We have to put rseq on the seccomp allowlist to avoid that the daemon
|
|
is crashing in this case.
|
|
|
|
Reported-by: Michael Hudson-Doyle <michael.hudson@canonical.com>
|
|
Signed-off-by: Christian Ehrhardt <christian.ehrhardt@canonical.com>
|
|
Reviewed-by: Dr. David Alan Gilbert <dgilbert@redhat.com>
|
|
Message-id: 20220209111456.3328420-1-christian.ehrhardt@canonical.com
|
|
|
|
[Moved rseq to its alphabetically ordered position in the seccomp
|
|
allowlist.
|
|
--Stefan]
|
|
Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com>
|
|
Signed-off-by: Dario Faggioli <dfaggioli@suse.com>
|
|
---
|
|
tools/virtiofsd/passthrough_seccomp.c | 3 +++
|
|
1 file changed, 3 insertions(+)
|
|
|
|
diff --git a/tools/virtiofsd/passthrough_seccomp.c b/tools/virtiofsd/passthrough_seccomp.c
|
|
index a3ce9f898d2d5cb30153b9301c1c..2bc0127b69ad72a0505bb45c1fcd 100644
|
|
--- a/tools/virtiofsd/passthrough_seccomp.c
|
|
+++ b/tools/virtiofsd/passthrough_seccomp.c
|
|
@@ -91,6 +91,9 @@ static const int syscall_allowlist[] = {
|
|
SCMP_SYS(renameat2),
|
|
SCMP_SYS(removexattr),
|
|
SCMP_SYS(restart_syscall),
|
|
+#ifdef __NR_rseq
|
|
+ SCMP_SYS(rseq), /* required since glibc 2.35 */
|
|
+#endif
|
|
SCMP_SYS(rt_sigaction),
|
|
SCMP_SYS(rt_sigprocmask),
|
|
SCMP_SYS(rt_sigreturn),
|