Bug 493636

Summary:	=gnome-extra/yelp-3.8.1 needs MPROTECT disabled
Product:	Gentoo Linux	Reporter:	Sean Santos <quantheory>
Component:	Hardened	Assignee:	The Gentoo Linux Hardened Team <hardened>
Status:	RESOLVED DUPLICATE
Severity:	normal	CC:	gnome
Priority:	Normal
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	output of emerge --info webkit-gtk yelp Backtrace printed after running yelp by hand with MPROTECT on

Description Sean Santos 2013-12-08 09:47:04 UTC

Haven't looked too closely at this, but I had to do paxctl -m /usr/bin/yelp in order for yelp to work. I'm expecting that someone else can reproduce this trivially by opening *any* help dialogue in GNOME 3, but if not I can provide more info.

Comment 1 Alexandre Rostovtsev (RETIRED) gentoo-dev

2014-01-05 17:32:12 UTC

Please attach your "emerge --info webkit-gtk yelp" output.

Comment 2 Sean Santos 2014-01-05 18:30:51 UTC

Created attachment 367106 [details]
output of emerge --info webkit-gtk yelp

Comment 3 Alexandre Rostovtsev (RETIRED) gentoo-dev

2014-01-05 18:37:36 UTC

(In reply to Sean Santos from comment #2)
> net-libs/webkit-gtk-2.0.4 was built with the following:
> USE="geoloc gstreamer introspection libsecret spell test webgl (-aqua) -coverage -debug -jit"

Interesting! You have webkit-gtk jit disabled, and I can't think of what else in yelp could hit mprotect.

Unfortunately, I don't have a hardened system any more. Do you have any additional debugging information about where/why yelp is failing pax mprotect? For example, in the main code, in a specific library, etc.?

Comment 4 Alexandre Rostovtsev (RETIRED) gentoo-dev

2014-01-05 18:53:57 UTC

Does www-client/epiphany work when you emerge it with -jit? Or do you also need to manually paxctl mark it?

Comment 5 Alexandre Rostovtsev (RETIRED) gentoo-dev

2014-01-05 18:56:56 UTC

Ah, I forgot - this is the regex jit problem in webkit-gtk that we haven't fixed yet :/

*** This bug has been marked as a duplicate of bug 484300 ***

Comment 6 Sean Santos 2014-01-05 18:58:06 UTC

Created attachment 367110 [details]
Backtrace printed after running yelp by hand with MPROTECT on

Well, I just ran yelp by hand and got a core file with the attached backtrace. At first glance it looks like webkit-gtk still is using JIT even with -jit.

Comment 7 Sean Santos 2014-01-05 18:59:48 UTC

Ah, yes. Looks like this is the same from my backtrace.