Bug #77447 [Csd]: PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2
| From: | hanno at hboeck dot de | Date: | Wed, 16 Jan 2019 17:54:09 +0000 |
| Subject: | Bug #77447 [Csd]: PHP 7.3 built with ASAN crashes in zend_cpu_supports_avx2 | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-219015@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=77447&edit=1
ID: 77447
User updated by: hanno at hboeck dot de
Reported by: hanno at hboeck dot de
Summary: PHP 7.3 built with ASAN crashes in
zend_cpu_supports_avx2
Status: Closed
Type: Bug
Package: Reproducible crash
Operating System: Linux
PHP Version: 7.3.1
Assigned To: nikic
Block user comment: N
Private report: N
New Comment:
I did, it was a completely fresh build.
Is it possible it's using the headers from the system-wide installed version instead of from
the source code?
Previous Comments:
------------------------------------------------------------------------
[2019-01-16 15:33:59] nikic@php.net
Did you do a full rebuild after applying the change? The header change will not be picked up in an
incremental build.
------------------------------------------------------------------------
[2019-01-16 11:56:57] hanno at hboeck dot de
I tried patching 7.3.1 with that commit and it still crashes for me, so I don't believe this is
fixed.
------------------------------------------------------------------------
[2019-01-14 10:45:44] nikic@php.net
Automatic comment on behalf of nikita.ppv@gmail.com
Revision: http://git.php.net/?p=php-src.git;a=commit;h=c8c5a3ab8afdaa4692784a54a678cc565ecd1834
Log: Fixed bug #77447
------------------------------------------------------------------------
[2019-01-14 10:31:47] nikic@php.net
Looks like asan being incompatible with ifunc resolvers is a longstanding problem: https://github.com/google/sanitizers/issues/342
We might be able to work around it with some __attribute__((no_sanitize_address)) attributes.
------------------------------------------------------------------------
[2019-01-14 10:24:35] nikic@php.net
0x555555c21f56 <zend_cpu_supports_sse42+4> callq 0x555555832560
<__cpu_indicator_init>
0x555555c21f5b <zend_cpu_supports_sse42+9> lea 0xb6971e(%rip),%rax
0x555555c21f62 <zend_cpu_supports_sse42+16> lea 0xc(%rax),%rax
0x555555c21f66 <zend_cpu_supports_sse42+20> mov %rax,%rdx
0x555555c21f69 <zend_cpu_supports_sse42+23> shr $0x3,%rdx
0x555555c21f6d <zend_cpu_supports_sse42+27> add $0x7fff8000,%rdx
> 0x555555c21f74 <zend_cpu_supports_sse42+34> movzbl (%rdx),%edx
(gdb) p &__cpu_model
$8 = (<data variable, no debug info> *) 0x55555678b680 <__cpu_model>
(gdb) p/x $rax
$9 = 0x55555678b68c
(gdb) p/x $rdx
$10 = 0xaab2ace96d1
From what I gathered (addr>>3)+0x7fff8000 is the shadow address used by asan, and apparently
it is not mapped.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=77447
--
Edit this bug report at https://bugs.php.net/bug.php?id=77447&edit=1