Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 14 Feb 2022 11:03:47 +0000
From:      Amit kumar <akamit91@hotmail.com>
To:        "freebsd-dtrace@FreeBSD.org" <freebsd-dtrace@FreeBSD.org>, "freebsd-arch@freebsd.org" <freebsd-arch@freebsd.org>
Cc:        "markj@FreeBSD.org" <markj@FreeBSD.org>
Subject:   dtrace fails to trace on FreeBSD-14(CURRENT) with ASLR and W^X
Message-ID:  <SJ0PR18MB49326C3D1DF915EB841CC2D8DC339@SJ0PR18MB4932.namprd18.prod.outlook.com>

next in thread | raw e-mail | index | archive | help
--_000_SJ0PR18MB49326C3D1DF915EB841CC2D8DC339SJ0PR18MB4932namp_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Encountered this issue while running https://github.com/freebsd/freebsd-src=
/blob/main/cddl/contrib/opensolaris/cmd/dtrace/test/tst/common/pid/tst.empt=
ystack.d

a somewhat simpler method to reproduce

configuration
file /usr/bin/find
/usr/bin/find: ELF 64-bit LSB shared object, x86-64, <.....>

kern.elf64.allow_wx: 0
kern.elf64.aslr.pie_enable: 1
kern.elf64.aslr.enable: 1

# dtrace -n pid92817:::entry
dtrace: description 'pid92817:::entry' matched 4380 probes
[2]  + trace trap (core dumped)  exec find / > /dev/null 2>&1

# exec find / > /dev/null 2>&1 &
[1] 85293
# dtrace -n pid85293:a.out::
dtrace: description 'pid85293:a.out::' matched 6828 probes
[1] + trace trap (core dumped) exec find / > /dev/null 2>&1
CPU ID FUNCTION:NAME
1 89149 find_execute:1f8

looking at find core in gdb
(gdb) p $_siginfo
$1 =3D {
  si_signo =3D 5,
  si_errno =3D 0,
  si_code =3D 3,
  .
  .
  .

Can someone help me understand why am I seeing core due to SIGTRAP TRAP_DTR=
ACE ?

Regards
Amit

--_000_SJ0PR18MB49326C3D1DF915EB841CC2D8DC339SJ0PR18MB4932namp_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html>
<head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo=
ttom:0;} </style>
</head>
<body dir=3D"ltr">
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
Encountered this issue while running&nbsp;<a href=3D"https://github.com/fre=
ebsd/freebsd-src/blob/main/cddl/contrib/opensolaris/cmd/dtrace/test/tst/com=
mon/pid/tst.emptystack.d" id=3D"LPNoLPOWALinkPreview">https://github.com/fr=
eebsd/freebsd-src/blob/main/cddl/contrib/opensolaris/cmd/dtrace/test/tst/co=
mmon/pid/tst.emptystack.d</a></div>
<div class=3D"_Entity _EType_OWALinkPreview _EId_OWALinkPreview _EReadonly_=
1"></div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
a somewhat simpler method to reproduce&nbsp;</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
configuration</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<span style=3D"margin:0px;font-size:12pt">file&nbsp;<span style=3D"margin:0=
px;background-color:rgb(255, 255, 255);display:inline !important">/usr/bin/=
find</span></span><br>
<span style=3D"margin:0px;font-size:12pt">/usr/bin/find: ELF 64-bit LSB sha=
red object, x86-64, &lt;.....&gt;</span><br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<span style=3D"margin:0px;font-size:12pt"><br>
</span></div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
kern.elf64.allow_wx: 0
<div>kern.elf64.aslr.pie_enable: 1<br>
</div>
<div>kern.elf64.aslr.enable: 1</div>
<div><br>
</div>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
# dtrace -n pid92817:::entry
<div>dtrace: description 'pid92817:::entry' matched 4380 probes</div>
<span>[2] &nbsp;+ trace trap (core dumped) &nbsp;exec find / &gt; /dev/null=
 2&gt;&amp;1</span><br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<span><br>
</span></div>
<div style=3D""><span style=3D"display: inline !important; font-family: Cal=
ibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"># exec =
find / &gt; /dev/null 2&gt;&amp;1 &amp;</span><br>
<span style=3D"display: inline !important; font-family: Calibri, Helvetica,=
 sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">[1] 85293</span><br sty=
le=3D"box-sizing: border-box;">
<span style=3D"display: inline !important; font-family: Calibri, Helvetica,=
 sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"># dtrace -n pid85293:a.=
out::</span><br style=3D"box-sizing: border-box;">
<span style=3D"display: inline !important; font-family: Calibri, Helvetica,=
 sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">dtrace: description 'pi=
d85293:a.out::' matched 6828 probes</span><br style=3D"box-sizing: border-b=
ox;">
<span style=3D"display: inline !important; font-family: Calibri, Helvetica,=
 sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">[1] + trace trap (core =
dumped) exec find / &gt; /dev/null 2&gt;&amp;1</span><br style=3D"box-sizin=
g: border-box;">
<span style=3D"display: inline !important; font-family: Calibri, Helvetica,=
 sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">CPU ID FUNCTION:NAME</s=
pan><br style=3D"box-sizing: border-box;">
<span style=3D"display: inline !important; font-family: Calibri, Helvetica,=
 sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">1 89149 find_execute:1f=
8</span><br>
</div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<span><br>
</span></div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<span>looking at find core in gdb</span></div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<span>(gdb) p $_siginfo
<div>$1 =3D {</div>
<div>&nbsp; si_signo =3D 5,</div>
<div>&nbsp; si_errno =3D 0,</div>
<div>&nbsp; si_code =3D 3,</div>
<div>&nbsp; .<br>
</div>
<div>&nbsp; .</div>
<div>&nbsp; .</div>
</span></div>
<div>
<div style=3D"font-family: Calibri, Helvetica, sans-serif; font-size: 12pt;=
 color: rgb(0, 0, 0);">
<br>
</div>
<div style=3D""><span style=3D"font-family: Calibri, Helvetica, sans-serif;=
 font-size: 12pt; color: rgb(0, 0, 0);">Can someone help me understand why =
am I seeing core due to&nbsp;</span><span style=3D"font-family: Calibri, He=
lvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">SIGTRAP
 TRAP_DTRACE ?</span></div>
<div id=3D"Signature">
<div style=3D""><br>
</div>
<div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col=
or:rgb(0,0,0)">
Regards</div>
<div style=3D"font-family:Calibri,Helvetica,sans-serif; font-size:12pt; col=
or:rgb(0,0,0)">
Amit</div>
</div>
</div>
</body>
</html>

--_000_SJ0PR18MB49326C3D1DF915EB841CC2D8DC339SJ0PR18MB4932namp_--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?SJ0PR18MB49326C3D1DF915EB841CC2D8DC339>