[all-commits] [llvm/llvm-project] 43c84e: [libunwind, EHABI, ARM] Fix get/set of RA_AUTH_CODE.

Simon Tatham via All-commits all-commits at lists.llvm.org
Mon Jun 27 01:36:53 PDT 2022


  Branch: refs/heads/main
  Home:   https://github.com/llvm/llvm-project
  Commit: 43c84e463426ca35fe9fc2d38063d75fed944f23
      https://github.com/llvm/llvm-project/commit/43c84e463426ca35fe9fc2d38063d75fed944f23
  Author: Simon Tatham <simon.tatham at arm.com>
  Date:   2022-06-27 (Mon, 27 Jun 2022)

  Changed paths:
    M libunwind/src/Unwind-EHABI.cpp

  Log Message:
  -----------
  [libunwind,EHABI,ARM] Fix get/set of RA_AUTH_CODE.

According to EHABI32 ยง8.5.2, the PAC for the return address of a
function described in an exception table is supposed to be addressed
in the _Unwind_VRS_{Get,Set} API by setting regclass=_UVRSC_PSEUDO and
regno=0. (The space of 'regno' values is independent for each
regclass, and for _UVRSC_PSEUDO, there is only one valid regno so far.)

That is indeed what libunwind's _Unwind_VRS_{Get,Set} functions expect
to receive. But at two call sites, the wrong values are passed in:
regno is being set to UNW_ARM_RA_AUTH_CODE (0x8F) instead of 0, and in
one case, regclass is _UVRSC_CORE instead of _UVRSC_PSEUDO.

As a result, those calls to _Unwind_VRS_{Get,Set} return
_UVRSR_FAILED, which their callers ignore. So if you compile in the
AUTG instruction that actually validates the PAC, it will try to
validate what's effectively an uninitialised register as an
authentication code, and trigger a CPU fault even on correct exception
unwinding.

Reviewed By: danielkiss

Differential Revision: https://reviews.llvm.org/D128522




More information about the All-commits mailing list