https://github.com/ojhunt created https://github.com/llvm/llvm-project/pull/184041
It turns out making the CFI check a release mode abort causes many, if not the majority, of JITs to fail during unwinding as they do not set up CFI sections for their generated code. As a result any JITs that do nominally support unwinding (and catching) through their JIT or assembly frames trip this abort. rdar://170862047 >From 89498e2f395d6738b42a8e22a1eb512ae46bcc36 Mon Sep 17 00:00:00 2001 From: Oliver Hunt <[email protected]> Date: Sun, 1 Mar 2026 13:28:10 -0800 Subject: [PATCH] [libunwind][PAC] Defang ptrauth's PC in valid CFI range abort It turns out making the CFI check a release mode abort causes many, if not the majority, of JITs to fail during unwinding as they do not set up CFI sections for their generated code. As a result any JITs that do nominally support unwinding (and catching) through their JIT or assembly frames trip this abort. rdar://170862047 --- libunwind/src/libunwind.cpp | 27 ++++++++++----------------- 1 file changed, 10 insertions(+), 17 deletions(-) diff --git a/libunwind/src/libunwind.cpp b/libunwind/src/libunwind.cpp index a795e68c57859..166074a8f76e4 100644 --- a/libunwind/src/libunwind.cpp +++ b/libunwind/src/libunwind.cpp @@ -131,23 +131,16 @@ _LIBUNWIND_HIDDEN int __unw_set_reg(unw_cursor_t *cursor, unw_regnum_t regNum, { // It is only valid to set the IP within the current function. This is // important for ptrauth, otherwise the IP cannot be correctly signed. - // The current signature of `value` is via the schema: - // __ptrauth(ptrauth_key_return_address, <<sp>>, 0) - // For this to be generally usable we manually re-sign it to the - // directly supported schema: - // __ptrauth(ptrauth_key_return_address, 1, 0) - unw_word_t - __unwind_ptrauth_restricted_intptr(ptrauth_key_return_address, 1, - 0) authenticated_value; - unw_word_t opaque_value = (uint64_t)ptrauth_auth_and_resign( - (void *)value, ptrauth_key_return_address, sp, - ptrauth_key_return_address, &authenticated_value); - memmove(reinterpret_cast<void *>(&authenticated_value), - reinterpret_cast<void *>(&opaque_value), - sizeof(authenticated_value)); - if (authenticated_value < info.start_ip || - authenticated_value > info.end_ip) - _LIBUNWIND_ABORT("PC vs frame info mismatch"); + // + // However many JITs do not configure CFI frames, so we cannot actually + // enforce this - at least not without an extremely expensive syscall. + // + // For the forseeable future this will need to be a debug only assertion + // so we just strip and assert to avoid the unnecessary auths in release + // builds. + unw_word_t stripped_value = + (unw_word_t)ptrauth_strip((void *)value, ptrauth_key_return_address); + assert(stripped_value >= info.start_ip && stripped_value <= info.end_ip); // PC should have been signed with the sp, so we verify that // roundtripping does not fail. The `ptrauth_auth_and_resign` is _______________________________________________ cfe-commits mailing list [email protected] https://lists.llvm.org/cgi-bin/mailman/listinfo/cfe-commits
