From owner-freebsd-ia64@FreeBSD.ORG  Mon Jan 16 10:09:48 2006
Return-Path: <owner-freebsd-ia64@FreeBSD.ORG>
X-Original-To: freebsd-ia64@freebsd.org
Delivered-To: freebsd-ia64@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0649616A41F;
	Mon, 16 Jan 2006 10:09:48 +0000 (GMT) (envelope-from dfr@rabson.org)
Received: from itchy.rabson.org (mailgate.nlsystems.com [80.177.232.242])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1303B43D45;
	Mon, 16 Jan 2006 10:09:46 +0000 (GMT) (envelope-from dfr@rabson.org)
Received: from herring.rabson.org (herring.rabson.org [80.177.232.250])
	by itchy.rabson.org (8.13.3/8.13.3) with ESMTP id k0GA9iq7084956;
	Mon, 16 Jan 2006 10:09:44 GMT (envelope-from dfr@rabson.org)
From: Doug Rabson <dfr@rabson.org>
To: freebsd-ia64@freebsd.org
Date: Mon, 16 Jan 2006 10:09:41 +0000
User-Agent: KMail/1.8.3
References: <200601160022.k0G0MosU079467@www.freebsd.org>
In-Reply-To: <200601160022.k0G0MosU079467@www.freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-6"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200601161009.42687.dfr@rabson.org>
X-Spam-Status: No, score=0.0 required=5.0 tests=UNPARSEABLE_RELAY 
	autolearn=failed version=3.1.0
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on itchy.rabson.org
X-Virus-Scanned: ClamAV 0.87.1/1243/Sun Jan 15 18:35:18 2006 on
	itchy.rabson.org
X-Virus-Status: Clean
Cc: freebsd-gnats-submit@freebsd.org
Subject: Re: ia64/91846: TLS: malloc(3) exposes DTLS bug in non-threaded
	applications
X-BeenThere: freebsd-ia64@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Porting FreeBSD to the IA-64 <freebsd-ia64.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ia64>,
	<mailto:freebsd-ia64-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-ia64>
List-Post: <mailto:freebsd-ia64@freebsd.org>
List-Help: <mailto:freebsd-ia64-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-ia64>,
	<mailto:freebsd-ia64-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jan 2006 10:09:48 -0000

On Monday 16 January 2006 00:22, Marcel Moolenaar wrote:
> >Number:         91846
> >Category:       ia64
> >Synopsis:       TLS: malloc(3) exposes DTLS bug in non-threaded
> > applications Confidential:   no
> >Severity:       serious
> >Priority:       medium
> >Responsible:    freebsd-ia64
> >State:          open
> >Quarter:
> >Keywords:
> >Date-Required:
> >Class:          sw-bug
> >Submitter-Id:   current-users
> >Arrival-Date:   Mon Jan 16 00:30:07 GMT 2006
> >Closed-Date:
> >Last-Modified:
> >Originator:     Marcel Moolenaar
> >Release:        7-CURRENT
> >Organization:
> >Environment:
>
> FreeBSD bigsur.pn.xcllnt.net 7.0-CURRENT FreeBSD 7.0-CURRENT #1: Fri
> Jan 13 16:26:27 PST 2006    
> marcel@bigsur.pn.xcllnt.net:/usr/obj/nfs/freebsd/7.x/src/sys/BIGSUR 
> ia64
>
> >Description:
>
> When NO_TLS is *not* defined in src/lib/libc/stdlib/malloc.c on ia64,
> then a SIGSEGV will result due to arenas_map being thread-local and
> it being referenced in choose_arena(). That reference causes a
> thread-local relocation to end up in tls_get_addr_common() in
> src/libexec/rtld-elf/rtld.c for which the dtvp argument is NULL. This
> pretty much means that __tls_get_addr() on ia64 does the wrong thing.
> In this case it assumes that r13 (aka TP) is non-NULL in all cases,
> which is false for non-threaded applications.

I don't understand this. Any dynamic application (threaded or 
non-threaded) should end up 
calling .../ia64/reloc.c:allocate_initial_tls() which sets r13 to point 
at the TLS block for the main thread (or only thread for non-threaded).