Skip to content

Commit 7b3c36f

Browse files
oleg-nesterovtorvalds
authored andcommitted
ptrace: fix task_join_group_stop() for the case when current is traced
This testcase #include <stdio.h> #include <unistd.h> #include <signal.h> #include <sys/ptrace.h> #include <sys/wait.h> #include <pthread.h> #include <assert.h> void *tf(void *arg) { return NULL; } int main(void) { int pid = fork(); if (!pid) { kill(getpid(), SIGSTOP); pthread_t th; pthread_create(&th, NULL, tf, NULL); return 0; } waitpid(pid, NULL, WSTOPPED); ptrace(PTRACE_SEIZE, pid, 0, PTRACE_O_TRACECLONE); waitpid(pid, NULL, 0); ptrace(PTRACE_CONT, pid, 0,0); waitpid(pid, NULL, 0); int status; int thread = waitpid(-1, &status, 0); assert(thread > 0 && thread != pid); assert(status == 0x80137f); return 0; } fails and triggers WARN_ON_ONCE(!signr) in do_jobctl_trap(). This is because task_join_group_stop() has 2 problems when current is traced: 1. We can't rely on the "JOBCTL_STOP_PENDING" check, a stopped tracee can be woken up by debugger and it can clone another thread which should join the group-stop. We need to check group_stop_count || SIGNAL_STOP_STOPPED. 2. If SIGNAL_STOP_STOPPED is already set, we should not increment sig->group_stop_count and add JOBCTL_STOP_CONSUME. The new thread should stop without another do_notify_parent_cldstop() report. To clarify, the problem is very old and we should blame ptrace_init_task(). But now that we have task_join_group_stop() it makes more sense to fix this helper to avoid the code duplication. Reported-by: [email protected] Signed-off-by: Oleg Nesterov <[email protected]> Signed-off-by: Andrew Morton <[email protected]> Cc: Jens Axboe <[email protected]> Cc: Christian Brauner <[email protected]> Cc: "Eric W . Biederman" <[email protected]> Cc: Zhiqiang Liu <[email protected]> Cc: Tejun Heo <[email protected]> Cc: <[email protected]> Link: https://lkml.kernel.org/r/[email protected] Signed-off-by: Linus Torvalds <[email protected]>
1 parent 3f08842 commit 7b3c36f

File tree

1 file changed

+10
-9
lines changed

1 file changed

+10
-9
lines changed

kernel/signal.c

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -391,16 +391,17 @@ static bool task_participate_group_stop(struct task_struct *task)
391391

392392
void task_join_group_stop(struct task_struct *task)
393393
{
394+
unsigned long mask = current->jobctl & JOBCTL_STOP_SIGMASK;
395+
struct signal_struct *sig = current->signal;
396+
397+
if (sig->group_stop_count) {
398+
sig->group_stop_count++;
399+
mask |= JOBCTL_STOP_CONSUME;
400+
} else if (!(sig->flags & SIGNAL_STOP_STOPPED))
401+
return;
402+
394403
/* Have the new thread join an on-going signal group stop */
395-
unsigned long jobctl = current->jobctl;
396-
if (jobctl & JOBCTL_STOP_PENDING) {
397-
struct signal_struct *sig = current->signal;
398-
unsigned long signr = jobctl & JOBCTL_STOP_SIGMASK;
399-
unsigned long gstop = JOBCTL_STOP_PENDING | JOBCTL_STOP_CONSUME;
400-
if (task_set_jobctl_pending(task, signr | gstop)) {
401-
sig->group_stop_count++;
402-
}
403-
}
404+
task_set_jobctl_pending(task, mask | JOBCTL_STOP_PENDING);
404405
}
405406

406407
/*

0 commit comments

Comments
 (0)