Go to file
Adhemerval Zanella 461cab1de7 linux: Add support for getrandom vDSO
Linux 6.11 has getrandom() in vDSO. It operates on a thread-local opaque
state allocated with mmap using flags specified by the vDSO.

Multiple states are allocated at once, as many as fit into a page, and
these are held in an array of available states to be doled out to each
thread upon first use, and recycled when a thread terminates. As these
states run low, more are allocated.

To make this procedure async-signal-safe, a simple guard is used in the
LSB of the opaque state address, falling back to the syscall if there's
reentrancy contention.

Also, _Fork() is handled by blocking signals on opaque state allocation
(so _Fork() always sees a consistent state even if it interrupts a
getrandom() call) and by iterating over the thread stack cache on
reclaim_stack. Each opaque state will be in the free states list
(grnd_alloc.states) or allocated to a running thread.

The cancellation is handled by always using GRND_NONBLOCK flags while
calling the vDSO, and falling back to the cancellable syscall if the
kernel returns EAGAIN (would block). Since getrandom is not defined by
POSIX and cancellation is supported as an extension, the cancellation is
handled as 'may occur' instead of 'shall occur' [1], meaning that if
vDSO does not block (the expected behavior) getrandom will not act as a
cancellation entrypoint. It avoids a pthread_testcancel call on the fast
path (different than 'shall occur' functions, like sem_wait()).

It is currently enabled for x86_64, which is available in Linux 6.11,
and aarch64, powerpc32, powerpc64, loongarch64, and s390x, which are
available in Linux 6.12.

Link: https://pubs.opengroup.org/onlinepubs/9799919799/nframe.html [1]
Co-developed-by: Jason A. Donenfeld <Jason@zx2c4.com>
Tested-by: Jason A. Donenfeld <Jason@zx2c4.com> # x86_64
Tested-by: Adhemerval Zanella <adhemerval.zanella@linaro.org> # x86_64, aarch64
Tested-by: Xi Ruoyao <xry111@xry111.site> # x86_64, aarch64, loongarch64
Tested-by: Stefan Liebler <stli@linux.ibm.com> # s390x
2024-11-12 14:42:12 -03:00
advisories Document CVE-2024-33599, CVE-2024-33600, CVE-2024-33601, CVE-2024-33602 2024-05-06 15:12:31 -04:00
argp Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
assert assert: Mark __assert_fail as cold 2024-07-26 20:41:00 +08:00
benchtests benchtests: Add log10p1f benchmark 2024-11-01 11:17:20 -03:00
bits AArch64: Add vector logp1 alias for log1p 2024-09-19 17:53:34 +01:00
catgets Fix conditionals on mtrace-based tests (bug 31892) 2024-07-01 17:20:30 +02:00
ChangeLog.old Add ChangeLog file 2024-07-21 18:33:37 +02:00
conform Disable _TIME_BITS if the compiler defaults to it 2024-10-01 08:44:41 -03:00
csu Add crt1-2.0.o for glibc 2.0 compatibility tests 2024-05-06 07:49:40 -07:00
ctype ctype: Reformat Makefile. 2024-02-25 13:38:16 -05:00
debug stdlib: Make abort/_Exit AS-safe (BZ 26275) 2024-10-08 14:40:12 -03:00
dirent Linux: readdir64_r should not skip d_ino == 0 entries (bug 32126) 2024-09-21 19:32:34 +02:00
dlfcn dlfcn: Reformat Makefile. 2024-02-25 13:38:16 -05:00
elf linux: Add support for getrandom vDSO 2024-11-12 14:42:12 -03:00
gmon Define write_profiling functions only in profile library [BZ #31756] 2024-05-22 06:12:55 -07:00
gnulib Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
hesiod hesiod: Reformat Makefile. 2024-02-25 13:38:16 -05:00
htl hurd: Fix missing pthread_ compat symbol in libc 2024-08-01 23:58:51 +02:00
hurd x86_64 hurd: ensure we have a large enough buffer to receive exception_raise requests. 2024-07-30 16:59:12 +02:00
iconv iconv: Use $(run-program-prefix) for running iconv (bug 32197) 2024-09-24 12:35:40 +02:00
iconvdata iconv: Preserve iconv -c error exit on invalid inputs (bug 32046) 2024-09-20 13:51:09 +02:00
include Add feature test macro _ISOC2Y_SOURCE 2024-11-04 22:40:55 +00:00
inet Add IPPROTO_SMC from Linux 6.11 to netinet/in.h 2024-10-10 10:28:04 -03:00
intl locale: Fix some spelling typos 2024-10-14 15:38:26 +01:00
io io: Add setuid tests for faccessat 2024-11-12 10:19:58 -05:00
libio libio: Fix crash in fputws [BZ #20632] 2024-10-25 15:05:06 -03:00
locale locale: Fix some spelling typos 2024-10-14 15:38:26 +01:00
localedata Enable transliteration rules with two input characters in scn_IT [BZ #32280] 2024-10-16 17:15:39 +02:00
login login: Re-flow and sort multiline Makefile definitions 2024-08-07 11:02:03 -03:00
mach mach: Drop some unnecessary vm_param.h includes 2024-01-03 21:59:54 +01:00
malloc linux: Add support for getrandom vDSO 2024-11-12 14:42:12 -03:00
manual manual: Use more precise wording for memory protection keys 2024-11-06 13:11:33 +00:00
math replace tgammaf by the CORE-MATH implementation 2024-10-11 11:12:32 +02:00
mathvec Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
misc misc: Add support for Linux uio.h RWF_ATOMIC flag 2024-10-10 10:28:01 -03:00
nis Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nptl linux: Add support for getrandom vDSO 2024-11-12 14:42:12 -03:00
nptl_db Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
nscd nscd: Use time_t for return type of addgetnetgrentX 2024-05-02 18:59:29 +02:00
nss nss: Fix incorrect switch fall-through in tst-nss-gai-actions 2024-08-07 15:00:25 +02:00
po po/*: regenerate (only line number changes) 2024-07-21 17:50:35 +02:00
posix libio: Fix a deadlock after fork in popen 2024-10-23 13:40:16 +02:00
resolv resolv: Fix tst-resolv-short-response for older GCC (bug 32042) 2024-08-01 21:07:48 +02:00
resource Always define __USE_TIME_BITS64 when 64 bit time_t is used 2024-04-02 15:28:36 -03:00
rt rt: more clock_nanosleep tests addendum 2024-10-08 14:30:21 -04:00
scripts Use Linux 6.11 in build-many-glibcs.py 2024-10-10 10:27:47 -03:00
setjmp Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
signal stdlib: Make abort/_Exit AS-safe (BZ 26275) 2024-10-08 14:40:12 -03:00
socket Fix name space violation in fortify wrappers (bug 32052) 2024-08-05 16:49:58 +02:00
soft-fp soft-fp: Add brain format support 2024-02-01 19:06:54 +01:00
stdio-common stdio-common: Add tests for formatted vsnprintf output specifiers 2024-11-07 06:14:24 +00:00
stdlib linux: Add support for getrandom vDSO 2024-11-12 14:42:12 -03:00
string string: strerror, strsignal cannot use buffer after dlmopen (bug 32026) 2024-08-19 15:48:03 +02:00
sunrpc Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
support support: Add xdup 2024-11-12 10:19:58 -05:00
sysdeps linux: Add support for getrandom vDSO 2024-11-12 14:42:12 -03:00
sysvipc Always define __USE_TIME_BITS64 when 64 bit time_t is used 2024-04-02 15:28:36 -03:00
termios Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
time Link tst-clock_gettime with $(librt) 2024-10-31 17:43:52 +00:00
timezone timezone: sync to TZDB 2024b 2024-09-05 20:57:17 +00:00
wcsmbs Do not use -Wp to disable fortify (BZ 31928) 2024-10-01 08:44:40 -03:00
wctype Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
.b4-config Add .b4-config file 2024-10-21 14:26:42 +01:00
.clang-format Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
.gitattributes
.gitignore
abi-tags
aclocal.m4 Convert to autoconf 2.72 (vanilla release, no distribution patches) 2024-06-17 21:15:28 +02:00
config.h.in arc: Remove HAVE_ARC_BE macro and disable big-endian port 2024-09-25 11:25:22 +02:00
config.make.in manual: add syscalls 2024-07-09 11:54:29 +02:00
configure Disable _TIME_BITS if the compiler defaults to it 2024-10-01 08:44:41 -03:00
configure.ac Disable _TIME_BITS if the compiler defaults to it 2024-10-01 08:44:41 -03:00
CONTRIBUTED-BY crypt: Remove libcrypt support 2023-10-30 13:03:59 -03:00
COPYING
COPYING.LIB
extra-lib.mk
gen-locales.mk locale: Handle loading a missing locale twice (Bug 14247) 2024-04-22 16:03:00 -04:00
INSTALL install.texi: bump "latest verified" versions 2024-07-21 00:27:35 +02:00
libc-abis
libof-iterator.mk
LICENSES added license for sysdeps/ieee754/flt-32/e_gammaf_r.c 2024-11-04 08:55:07 +01:00
MAINTAINERS
Makeconfig Disable _TIME_BITS if the compiler defaults to it 2024-10-01 08:44:41 -03:00
Makefile Pass -nostdlib -nostartfiles together with -r [BZ #31753] 2024-05-19 16:29:02 -07:00
Makefile.help math: Add support for auto static math tests 2024-05-21 16:53:27 -03:00
Makefile.in
Makerules Support compiling .S files with additional options 2024-02-25 09:22:40 -08:00
NEWS linux: Add support for getrandom vDSO 2024-11-12 14:42:12 -03:00
o-iterator.mk
README Remove ia64-linux-gnu 2024-01-08 17:09:36 -03:00
Rules Implement run-built-tests=no for make xcheck, always build xtests 2024-09-21 00:29:55 +02:00
SECURITY.md Adapt the security policy for the security page 2023-12-05 09:15:10 -05:00
SHARED-FILES math: Use log10p1f from CORE-MATH 2024-11-01 11:27:40 -03:00
shlib-versions crypt: Remove libcrypt support 2023-10-30 13:03:59 -03:00
test-skeleton.c Update copyright dates with scripts/update-copyrights 2024-01-01 10:53:40 -08:00
version.h Increase version number to 2.40.9000 2024-07-21 18:49:35 +02:00

This directory contains the sources of the GNU C Library.
See the file "version.h" for what release version you have.

The GNU C Library is the standard system C library for all GNU systems,
and is an important part of what makes up a GNU system.  It provides the
system API for all programs written in C and C-compatible languages such
as C++ and Objective C; the runtime facilities of other programming
languages use the C library to access the underlying operating system.

In GNU/Linux systems, the C library works with the Linux kernel to
implement the operating system behavior seen by user applications.
In GNU/Hurd systems, it works with a microkernel and Hurd servers.

The GNU C Library implements much of the POSIX.1 functionality in the
GNU/Hurd system, using configurations i[4567]86-*-gnu and x86_64-gnu.

When working with Linux kernels, this version of the GNU C Library
requires Linux kernel version 3.2 or later.

Also note that the shared version of the libgcc_s library must be
installed for the pthread library to work correctly.

The GNU C Library supports these configurations for using Linux kernels:

	aarch64*-*-linux-gnu
	alpha*-*-linux-gnu
	arc*-*-linux-gnu
	arm-*-linux-gnueabi
	csky-*-linux-gnuabiv2
	hppa-*-linux-gnu
	i[4567]86-*-linux-gnu
	x86_64-*-linux-gnu	Can build either x86_64 or x32
	loongarch64-*-linux-gnu Hardware floating point, LE only.
	m68k-*-linux-gnu
	microblaze*-*-linux-gnu
	mips-*-linux-gnu
	mips64-*-linux-gnu
	or1k-*-linux-gnu
	powerpc-*-linux-gnu	Hardware or software floating point, BE only.
	powerpc64*-*-linux-gnu	Big-endian and little-endian.
	s390-*-linux-gnu
	s390x-*-linux-gnu
	riscv32-*-linux-gnu
	riscv64-*-linux-gnu
	sh[34]-*-linux-gnu
	sparc*-*-linux-gnu
	sparc64*-*-linux-gnu

If you are interested in doing a port, please contact the glibc
maintainers; see https://www.gnu.org/software/libc/ for more
information.

See the file INSTALL to find out how to configure, build, and install
the GNU C Library.  You might also consider reading the WWW pages for
the C library at https://www.gnu.org/software/libc/.

The GNU C Library is (almost) completely documented by the Texinfo manual
found in the `manual/' subdirectory.  The manual is still being updated
and contains some known errors and omissions; we regret that we do not
have the resources to work on the manual as much as we would like.  For
corrections to the manual, please file a bug in the `manual' component,
following the bug-reporting instructions below.  Please be sure to check
the manual in the current development sources to see if your problem has
already been corrected.

Please see https://www.gnu.org/software/libc/bugs.html for bug reporting
information.  We are now using the Bugzilla system to track all bug reports.
This web page gives detailed information on how to report bugs properly.

The GNU C Library is free software.  See the file COPYING.LIB for copying
conditions, and LICENSES for notices about a few contributions that require
these additional notices to be distributed.  License copyright years may be
listed using range notation, e.g., 1996-2015, indicating that every year in
the range, inclusive, is a copyrightable year that would otherwise be listed
individually.