From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 52BB743C92; Tue, 12 Mar 2024 14:28:43 +0100 (CET) Received: from mails.dpdk.org (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 3815F402D8; Tue, 12 Mar 2024 14:28:43 +0100 (CET) Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by mails.dpdk.org (Postfix) with ESMTP id E213A40282 for ; Tue, 12 Mar 2024 14:28:41 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1710250121; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: in-reply-to:in-reply-to:references:references; bh=WPyMppdpKyqoCrowSpNVBotae5OJd0CpFWwzTUHGl+g=; b=U3FfoqqOegN8EsPYPXWRrWUc8jkQ8YqamSyxp4CthDFB7FEU33fV8sUFOhSsuxwexRI7t5 of+yolj8M8hZVixlvpZKgFqO/+q70+aKL7dOAcnPfJuk2hrsEzsYsRrgwUhvvYB74SaD3L bvSABJ6cv2rA7Q38hYM50pdaCYZrdNA= Received: from mimecast-mx02.redhat.com (mimecast-mx02.redhat.com [66.187.233.88]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id us-mta-479--ZJW1GHkN5OKD68CtxGxhg-1; Tue, 12 Mar 2024 09:28:40 -0400 X-MC-Unique: -ZJW1GHkN5OKD68CtxGxhg-1 Received: from smtp.corp.redhat.com (int-mx03.intmail.prod.int.rdu2.redhat.com [10.11.54.3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mimecast-mx02.redhat.com (Postfix) with ESMTPS id C56BE8007A3; Tue, 12 Mar 2024 13:28:39 +0000 (UTC) Received: from RHTPC1VM0NT (dhcp-17-72.bos.redhat.com [10.18.17.72]) by smtp.corp.redhat.com (Postfix) with ESMTPS id 8ECC4112132A; Tue, 12 Mar 2024 13:28:39 +0000 (UTC) From: Aaron Conole To: Ilya Maximets Cc: ovs-dev@openvswitch.org, Eelco Chaudron , Dumitru Ceara , David Marchand , ci@dpdk.org, dev@dpdk.org Subject: Re: [PATCH] github: Reduce ASLR entropy to be compatible with asan in llvm 14. References: <20240312114750.68295-1-i.maximets@ovn.org> Date: Tue, 12 Mar 2024 09:28:39 -0400 In-Reply-To: <20240312114750.68295-1-i.maximets@ovn.org> (Ilya Maximets's message of "Tue, 12 Mar 2024 12:47:49 +0100") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.3 (gnu/linux) MIME-Version: 1.0 X-Scanned-By: MIMEDefang 3.4.1 on 10.11.54.3 X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Type: text/plain X-BeenThere: ci@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK CI discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: ci-bounces@dpdk.org Ilya Maximets writes: > Starting with image version 20240310.1.0, GitHub runners are using > 32-bit entropy for ASLR: > > $ sudo sysctl -a | grep vm.mmap.rnd > vm.mmap_rnd_bits = 32 > vm.mmap_rnd_compat_bits = 16 > > This breaks all the asan-enabled builds, because older asan gets > confused by memory mappings and crashes with segmentation fault. > > The issue is fixed in newer releases of llvm: > https://github.com/llvm/llvm-project/commit/fb77ca05ffb4f8e666878f2f6718a9fb4d686839 > https://reviews.llvm.org/D148280 > > But these are not available in Ubuntu 22.04 image. > > This should be fixed by GitHub, but until new images are available > reducing ASLR entropy manually to 28 bits to make builds work. > > Reported-at: https://github.com/actions/runner-images/issues/9491 > Signed-off-by: Ilya Maximets > --- Acked-by: Aaron Conole We'll probably need something similar in other projects, too... What a mess.