Bug 572092 – sys-apps/sandbox-2.10-r1 compilation: cc1 segfault when using pch under hardened kernels

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Damien GOUJU 2016-01-16 13:55:46 UTC]

Created attachment 423048 [details]
Build.log

Hello team,

cc1 segfaults when compiling src/debug.lo and src/string.lo on this version. I tried with -j5 and -j1 (with -j1, it fails on debug.lo). In dmesg I got:

[6755998.384776] cc1[23085]: segfault at 3a48e3f1838 ip 0000000000e7a417 sp 000003ab1eb0d740 error 4 in cc1[400000+f40000]
[6756668.156031] cc1[4342]: segfault at 390f2907238 ip 0000000000e7a417 sp 000003cb073f5540 error 4 in cc1[400000+f40000]
[6756668.187730] cc1[4352]: segfault at 390f2907238 ip 0000000000e7a417 sp 000003bf9b346a00 error 4 in cc1[400000+f40000]
[6756669.160997] cc1[4488]: segfault at 390f2907238 ip 0000000000e7a417 sp 000003fe1ee7bf00 error 4 in cc1[400000+f40000]

I'm attaching the logs and requested elements.

Best regards,
Damien

  CC       sb_proc.lo
  CC       sb_memory.lo
  CC       src/debug.lo
  CC       src/string.lo
  CC       src/file.lo

x86_64-pc-linux-gnu-gcc: internal compiler error: Segmentation fault (program cc1)
Please submit a full bug report,
with preprocessed source if appropriate.
See <https://bugs.gentoo.org/> for instructions.

Makefile:520: recipe for target 'src/string.lo' failed
make[2]: *** [src/string.lo] Error 1
make[2]: *** Waiting for unfinished jobs....
x86_64-pc-linux-gnu-gcc: internal compiler error: Segmentation fault (program cc1)
Please submit a full bug report,
with preprocessed source if appropriate.
See <https://bugs.gentoo.org/> for instructions.
Makefile:520: recipe for target 'src/debug.lo' failed
make[2]: *** [src/debug.lo] Error 1

x86_64-pc-linux-gnu-gcc: internal compiler error: Segmentation fault (program cc1)
Please submit a full bug report,
with preprocessed source if appropriate.
See <https://bugs.gentoo.org/> for instructions.
Makefile:520: recipe for target 'src/file.lo' failed
make[2]: *** [src/file.lo] Error 1
Makefile:484: recipe for target 'all-recursive' failed
make[1]: *** [all-recursive] Error 1
Makefile:396: recipe for target 'all' failed
make: *** [all] Error 2
emake failed

[Comment 1 Damien GOUJU 2016-01-16 13:56:19 UTC]

Created attachment 423050 [details]
Emerge --info

[Comment 2 Damien GOUJU 2016-01-16 13:56:37 UTC]

Created attachment 423052 [details]
emerge -pqv

[Comment 3 Damien GOUJU 2016-01-16 13:56:55 UTC]

Created attachment 423054 [details]
environment

[Comment 4 Martin Lindquist 2016-01-17 09:07:39 UTC]

*** Bug 572132 has been marked as a duplicate of this bug. ***

[Comment 5 Martin Lindquist 2016-01-17 18:35:14 UTC]

As reported in my duplicate bug, I'm having the exact same issue. It is being reported by gresc as a resource overstep:

grsec: From REDACTED: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /usr/libexec/gcc/x86_64-pc-linux-gnu/4.9.3/cc1[cc1:47792] uid/euid:250/250 gid/egid:250/250, parent /usr/x86_64-pc-linux-gnu/gcc-bin/4.9.3/x86_64-pc-linux-gnu-gcc[x86_64-pc-linux:47787] uid/euid:250/250 gid/egid:250/250

This obviously has to do with uid 250 (portage) not being allowed the resources gcc needs for this particular build, but other ebuilds build fine. Running 'FEATURES=-sandbox emerge sandbox' yields the same result.

[Comment 6 SpanKY 2016-01-18 09:54:46 UTC]

Damien: you need to attach full build logs when reporting bugs.  small snippets are not sufficient.

i'm going to assume your build matches Martin's build.log though which he included in bug 572132.
https://572132.bugs.gentoo.org/attachment.cgi?id=423084

[Comment 7 SpanKY 2016-01-18 09:58:29 UTC]

should be fixed by:
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=ef76ca9f6b6f055125a297942527272fd7b8e5e5

[Comment 8 Damien GOUJU 2016-01-18 10:10:40 UTC]

(In reply to SpanKY from comment #6)
> Damien: you need to attach full build logs when reporting bugs.  small
> snippets are not sufficient.
> 
> i'm going to assume your build matches Martin's build.log though which he
> included in bug 572132.
> https://572132.bugs.gentoo.org/attachment.cgi?id=423084

Hi,

Full build.log is already attached: https://572092.bugs.gentoo.org/attachment.cgi?id=423048

Best regards,

[Comment 9 Martin Lindquist 2016-01-18 11:17:24 UTC]

(In reply to SpanKY from comment #7)
> should be fixed by:
> https://gitweb.gentoo.org/repo/gentoo.git/commit/
> ?id=ef76ca9f6b6f055125a297942527272fd7b8e5e5

Confirmed.

[Comment 10 SpanKY 2016-01-18 11:51:20 UTC]

(In reply to Damien GOUJU from comment #8)

so it was.  i missed the file since it blends into the initial comment and i only saw the follow ups.  sorry about that.