RFR: 8345296: AArch64: VM crashes with SIGILL when prctl is disallowed [v3]

[Andrew Haley]

On Mon, 2 Dec 2024 16:37:03 GMT, Aleksey Shipilev <shade at openjdk.org> wrote:

>> We have caught this in some prod environments, where `prctl` is forbidden by the sandboxing mechanism. This fails the JVM, because we have the following code to check for SVE vector length:
>> 
>> 
>> int VM_Version::get_current_sve_vector_length() {
>>   assert(VM_Version::supports_sve(), "should not call this");
>>   return prctl(PR_SVE_GET_VL);
>> }
>> 
>> 
>> That code returns `-1` when `prctl` is disallowed, which JVM then blindly interprets as vector length, leading to `SIGILL`. I looked around other uses of `prctl` around Hotspot, and they all seem to handle the errors correctly.
>> 
>> Additional testing:
>>  - [x] Linux AArch64 server fastdebug, with seccomp reproducer
>>  - [ ] Linux AArch64 server fastdebug, `all`
>
> Aleksey Shipilev has updated the pull request incrementally with two additional commits since the last revision:
> 
>  - Handle zero too
>  - Check get_current_sve_vector_length more comprehensively

On 12/2/24 17:33, Evgeny Astigeevich wrote:
> Yes, our implementation of |is_power_of_2| returns |false| for 0.

Even if it does, callers shouldn't depend on that. Someone might fix it.

-------------

PR Comment: https://git.openjdk.org/jdk/pull/22479#issuecomment-2512249467