Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 19 Mar 2026 14:57:46 +0000
From:      Shawn Webb <shawn.webb@hardenedbsd.org>
To:        Warner Losh <imp@bsdimp.com>
Cc:        Martin Matuska <mm@freebsd.org>, src-committers@freebsd.org,  dev-commits-src-all@freebsd.org, dev-commits-src-main@freebsd.org
Subject:   Re: git: 8a62a2a5659d - main - zfs: merge openzfs/zfs@f8e5af53e
Message-ID:  <wryftbwxvsc3mhm6iglbx3ikzentaoewo3ldiw4knyqkckmhmo@hnmn3nosgawc>
In-Reply-To: <hqup3oiorbdgvtputen566fcajjoucurqpk7je6qchixat3i6c@zmfpxouvy7vs>
References:  <69b561ff.39ea9.b797d91@gitrepo.freebsd.org> <2jb2vg6baofimu5xkxf62o5ogaq7fu5pk4o3vzhpegy446bppf@fzwtj6wtwk53> <CANCZdfpaKyzMDL0%2BMk3tSEeqsSU_C-OoWo1Dwwjg%2BG%2BrxiV2Eg@mail.gmail.com> <hqup3oiorbdgvtputen566fcajjoucurqpk7je6qchixat3i6c@zmfpxouvy7vs>

index | next in thread | previous in thread | raw e-mail

[-- Attachment #1 --]
On Tue, Mar 17, 2026 at 04:52:16PM +0000, Shawn Webb wrote:
> On Tue, Mar 17, 2026 at 10:44:59AM -0600, Warner Losh wrote:
> > On Tue, Mar 17, 2026 at 10:36 AM Shawn Webb <shawn.webb@hardenedbsd.org>
> > wrote:
> > 
> > > Hey Martin,
> > >
> > > On Sat, Mar 14, 2026 at 01:26:23PM +0000, Martin Matuska wrote:
> > > > The branch main has been updated by mm:
> > > >
> > > > URL:
> > > https://cgit.FreeBSD.org/src/commit/?id=8a62a2a5659d1839d8799b4274c04469d7f17c78
> > > >
> > > > commit 8a62a2a5659d1839d8799b4274c04469d7f17c78
> > > > Merge: f91464171d61 f8e5af53e92f
> > > > Author:     Martin Matuska <mm@FreeBSD.org>
> > > > AuthorDate: 2026-03-14 12:14:56 +0000
> > > > Commit:     Martin Matuska <mm@FreeBSD.org>
> > > > CommitDate: 2026-03-14 12:14:56 +0000
> > > >
> > > > [snip for brevity]
> > > >
> > > >     Obtained from:  OpenZFS
> > > >     OpenZFS commit: f8e5af53e92fa7c03393fbd4922cb9c1d0c15920
> > >
> > > This commit seems to cause issues when building boot loader related
> > > code:
> > >
> > > ==== BEGIN LOG ====
> > > 114232 bytes available
> > > btxld -v -f aout -e 0x200000 -o loader_simp -l
> > > /usr/obj/usr/src/amd64.amd64/stand/i386/btx/btxldr/btxldr  -b
> > > /usr/obj/usr/src/amd64.amd64/stand/i386/btx/btx/btx loader_simp.bin
> > > kernel: ver=1.02 size=690 load=9000 entry=9010 map=16M pgctl=0:58
> > > client: fmt=elf size=5e2e8 text=57930 data=514c bss=7470 entry=0
> > > output: fmt=aout size=61000 text=1000 data=5f000 org=200000 entry=200000
> > > ===> stand/i386/pxeldr (all)
> > > -560 bytes available
> > > *** Error code 1
> > >
> > 
> > What all do you have enabled? The defaults aren't even close to running out
> > of space (though I've not looked at this).
> 
> Hey Warner,
> 
> Thanks for reaching out! I've uploaded `make showconfig` here:
> https://hardenedbsd.org/~shawn/2026-03-17_srcconf-r01.txt
> 
> The following options are specific to HardenedBSD (in no particular
> order):
> 
> 1. MK_HBSD_UPDATE
> 2. MK_HBSDCONTROL
> 3. MK_PIE
> 4. MK_RELRO
> 5. MK_SHLIBRANDOM
> 6. MK_ZERO_REGS
> 7. MK_SPECTREV1_FIX
> 8. MK_SAFESTACK
> 9. MK_RETPOLINE
> 10. MK_LTOLIB
> 11. MK_CFI

MK_RETPOLINE was the culprit. Something about this ZFS commit causes
LLVM to emit more retpoline entries than before--too many for a little
bootloader. That might be something to investigate later, but only to
satisfy a curious mind, not to actuall fix anything (since nothing's
actually broken.)

Since it doesn't really make sense to apply speculative execution
mitigations to a bootloader, I disabled retpoline for a components
in stand/.

Good to go.

-- 
Shawn Webb
Cofounder / Security Engineer
HardenedBSD

Signal Username:  shawn_webb.74
Tor-ified Signal: +1 303-901-1600 / shawn_webb_opsec.50
https://git.hardenedbsd.org/hardenedbsd/pubkeys/-/raw/master/Shawn_Webb/03A4CBEBB82EA5A67D9F3853FF2E67A277F8E1FA.pub.asc

[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
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=2zon
-----END PGP SIGNATURE-----
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?wryftbwxvsc3mhm6iglbx3ikzentaoewo3ldiw4knyqkckmhmo>