[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#995269: marked as done (glibc-source: Please enable MTE (heap) checking on arm64)



Your message dated Sun, 05 Dec 2021 18:33:46 +0000
with message-id <E1mtwKY-0000gy-Ij@fasolo.debian.org>
and subject line Bug#995269: fixed in glibc 2.33-0experimental3
has caused the Debian Bug report #995269,
regarding glibc-source: Please enable MTE (heap) checking on arm64
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
995269: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=995269
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: glibc-source
Severity: wishlist
Tags: patch

glibc 2.33 onwards has support for 'Memory Tagging Extension' on
arm64. Could you please enable this feature (by setting
--enable-memory-tagging in the config).

The effect is to add colouring bits into heap pointers so that typical
illegal accesses (either temporally or spatially) can be detected and
faulted. Glibc just has the userspace heap tagging - there is also
corresponding kernel support.

The functionality operates on arm ISA 8.5 or later, which has extra
instructions to manipulate the tag bits in pointers.

The details are explained in
https://developer.arm.com/-/media/Arm%20Developer%20Community/PDF/Arm_Memory_Tagging_Extension_Whitepaper.pdf

The implementation has been designed so that it is safe to enable in
distros (which makes a change!). ifunc and HWCAP are used to link
MTE-ready versions of relevant functions on hardware supporting
ARMv8.5 instruction set or later. On eailer hardware things will work
just as they do now.

Here is the (trivial) patch:
diff -u debian/sysdeps/arm64.mk~ debian/sysdeps/arm64.mk
--- debian/sysdeps/arm64.mk~	2021-08-24 14:31:06.000000000 +0000
+++ debian/sysdeps/arm64.mk	2021-09-28 19:43:58.782118977 +0000
@@ -1,2 +1,2 @@
 # configuration options for all flavours
-extra_config_options = --enable-multi-arch --enable-static-pie
+extra_config_options = --enable-multi-arch --enable-static-pie --enable-memory-tagging


--
Wookey

--- End Message ---
--- Begin Message ---
Source: glibc
Source-Version: 2.33-0experimental3
Done: Aurelien Jarno <aurel32@debian.org>

We believe that the bug you reported is fixed in the latest version of
glibc, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 995269@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Aurelien Jarno <aurel32@debian.org> (supplier of updated glibc package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 05 Dec 2021 19:12:47 +0100
Source: glibc
Architecture: source
Version: 2.33-0experimental3
Distribution: experimental
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Closes: 971273 995269
Changes:
 glibc (2.33-0experimental3) experimental; urgency=medium
 .
   [ Samuel Thibault ]
   * debian/testsuite-xfail-debian.mk: Update hurd tests.
   * debian/debhelper.in/libc.preinst: Require gnumach kernel >=
     1.8+git20210923 for the xrstor fix, needed for the ifunc-optimized memcpy
     etc.
   * debian/patches/hurd-i386/git-htl-init_sigset.diff: Fix sudo.
 .
   [ Aurelien Jarno ]
   * debian/debhelper.in/libc-dev{,-alt}.install, debian/rules.d/build.mk:
     install an empty libpthread_nonshared.a to support broken closed source
     software.  Closes: #971273.
   * debian/sysdeps/arm64.mk: enable Memory Tagging Extension (MTE) (heap)
     checking on arm64.  Closes: #995269.
   * debian/patches/git-updates.diff: update from upstream stable branch.
   * debian/patches/any/local-revert-bz13979.diff: re-add patch removed in
     2.33-0experimental0, but limited to removing the warning when
     optimizations are disabled and _FORTIFY_SOURCE > 0. At least cgo and
     gnucobol3 always invoke the compiler with _FORTIFY_SOURCE > 0, even when
     the optimizations are disabled.
Checksums-Sha1:
 f188cf2e1b505b68c2f8b2356c0ff8cb04029197 9670 glibc_2.33-0experimental3.dsc
 ac178afbffa384221bf3d1c2d78f571c7792af84 809032 glibc_2.33-0experimental3.debian.tar.xz
 e4fa930cee500533843a83382d7be1d773dcfa14 8868 glibc_2.33-0experimental3_source.buildinfo
Checksums-Sha256:
 3722971d6f5fbf792d07f5328884196a31080bdb49a3b2f00e61a3f86db775bb 9670 glibc_2.33-0experimental3.dsc
 9e7496c471ab10646986b4ff7bf874292a6b427aa6987a3091a8b481773fa4a2 809032 glibc_2.33-0experimental3.debian.tar.xz
 4582c85c25fa51d92841d1231a30d67c703a4501a179ce86e188436d5ae1f1b7 8868 glibc_2.33-0experimental3_source.buildinfo
Files:
 54569366fc3d58b05b213676b7b80eb6 9670 libs required glibc_2.33-0experimental3.dsc
 a34831d7abd9ac80588ed274e55826b0 809032 libs required glibc_2.33-0experimental3.debian.tar.xz
 30605b03e683bd9180024d3c7cf4c395 8868 libs required glibc_2.33-0experimental3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=V48f
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: