From owner-freebsd-hackers@FreeBSD.ORG Sat Oct 31 02:00:00 2009 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 5CE08106566C; Sat, 31 Oct 2009 02:00:00 +0000 (UTC) (envelope-from a_best01@uni-muenster.de) Received: from zivm-exrelay2.uni-muenster.de (ZIVM-EXRELAY2.UNI-MUENSTER.DE [128.176.192.15]) by mx1.freebsd.org (Postfix) with ESMTP id 7BD198FC1A; Sat, 31 Oct 2009 01:59:59 +0000 (UTC) X-IronPort-AV: E=Sophos;i="4.44,657,1249250400"; d="scan'208";a="227686808" Received: from zivmaildisp1.uni-muenster.de (HELO ZIVMAILUSER01.UNI-MUENSTER.DE) ([128.176.188.85]) by zivm-relay2.uni-muenster.de with ESMTP; 31 Oct 2009 02:59:46 +0100 Received: by ZIVMAILUSER01.UNI-MUENSTER.DE (Postfix, from userid 149459) id 6C3BB1B0766; Sat, 31 Oct 2009 02:59:46 +0100 (CET) Date: Sat, 31 Oct 2009 02:59:46 +0100 (CET) From: Alexander Best Sender: Organization: Westfaelische Wilhelms-Universitaet Muenster To: John Baldwin , Message-ID: In-Reply-To: <200910211340.39872.jhb@freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: Alexander Best , Robert Watson , Nate Eldredge Subject: Re: mmap(2) segaults with certain len values and MAP_ANON|MAP_FIXED X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 31 Oct 2009 02:00:00 -0000 John Baldwin schrieb am 2009-10-21: > On Wednesday 21 October 2009 11:30:51 am Alexander Best wrote: > > Robert Watson schrieb am 2009-10-21: > > > On Wed, 21 Oct 2009, Alexander Best wrote: > > > >this code serves only one purpose: to trigger a segfault. i > > > >don't > > > >use the code for any other purpose. i was under the impression > > > >that > > > >mmap() should either succeed or fail (tertium non datur). mmap's > > > >manual doesn't say anything about mmap() causing segfaults. > > > Have you tried ktracing the application? I think you'll find > > > that > > > mmap(2) system call succeeded fine, and that the segfault comes > > > from > > > attempting to execute the address in libc on return to userspace, > > > as > > > a result of libc not being at that address anymore (since you > > > removed its mapping). You can use procstat -v to inspect address > > > space use by processes, but as a general rule you don't want to > > > pass > > > anything other than an address of 0x0 to mmap(2) unless you're > > > very > > > carefully managing the address space of the process. Many > > > userspace > > > libraries are involved in using that address space, but > > > especially > > > the runtime linker which begins execution in userspace when a > > > binary > > > is started. > > > Robert N M Watson > > > Computer Laboratory > > > University of Cambridge > > you're right. this kdump shows that the segfault isn't being caused > > by the > > mmap() call: > > 88343 mmap_test CALL > > mmap(0x1000,0x80047000,PROT_NONE,MAP_FIXED|MAP_ANON,0xffffffff,0,0) > > 88343 mmap_test RET mmap 4096/0x1000 > > 88343 mmap_test PSIG SIGSEGV SIG_DFL > > 88343 mmap_test NAMI "mmap_test.core" > > thanks for clearing things up. > > however i stil think mentioning this situation in the mmap(2) > > manual (maybe in > > section MAP_FIXED) would be a good idea. > I'm not sure it is useful to attempt to enumerate all the possible > ways one > can shoot one's own foot using mmap(2) in the manual page. The list > would be > quite long and would require a large amount of imagination. In > effect, you > are asking for a manual page to document all the possible bugs one > could have > and manual pages in general do not do that. you're probably right. documenting all things one can do wrong using mmap isn't what the manual is supposed to do. thanks for the help. alex