Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 422525 - dev-java/icedtea-6.1.11.3 fails to build with PaX enabled kernel.
Summary: dev-java/icedtea-6.1.11.3 fails to build with PaX enabled kernel.
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Java (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Java team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-06-20 09:29 UTC by Nikoli
Modified: 2012-06-24 16:58 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
build.log (icedtea-6.1.11.3_build.log.xz,279.10 KB, application/octet-stream)
2012-06-20 09:29 UTC, Nikoli
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Nikoli 2012-06-20 09:29:09 UTC
Created attachment 315827 [details]
build.log

'Tue Jun 19 07:34:55 2012' dev-java/icedtea-6.1.11.2 emerged and passed tests fine, but today updating to 6.1.11.3 fails:
<<<Finished Recursively making jndi all @ Wed Jun 20 11:46:56 MSK 2012.
>>>Recursively making jmx all @ Wed Jun 20 11:46:56 MSK 2012 ...
make[6]: Entering directory `/var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk/jdk/make/com/sun/jmx'
/bin/mkdir -p /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/classes/javax/management/remote/rmi
rm -f /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/classes/javax/management/remote/rmi/RMIConnectionImpl_Stub.class
/var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/bin/java  -Xmx896m -Xms128m -XX:PermSize=32m -XX:MaxPermSize=160m -cp /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/classes sun.rmi.rmic.Main -classpath "/var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/classes"    \
                -d /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/classes              \
                -v1.2                           \
                -keepgenerated                  \
                javax.management.remote.rmi.RMIConnectionImpl
Error occurred during initialization of VM
Could not reserve enough space for code cache


dmesg:
grsec: denied RWX mmap of <anonymous mapping> by /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/bin/java[java:14471] uid/euid:250/250 gid/egid:250/250, parent /usr/bin/gmake[make:14397] uid/euid:250/250 gid/egid:250/250


Portage 2.1.10.49 (hardened/linux/amd64, gcc-4.5.3, glibc-2.14.1-r3, 3.4.3-hardened x86_64)
=================================================================
                        System Settings
=================================================================
Timestamp of tree: Wed, 20 Jun 2012 06:45:01 +0000
app-shells/bash:          4.2_p20
dev-java/java-config:     2.1.11-r3
dev-lang/python:          2.7.3-r2
dev-util/pkgconfig:       0.26
sys-apps/baselayout:      2.1-r1
sys-apps/openrc:          0.9.8.4
sys-apps/sandbox:         2.5
sys-devel/autoconf:       2.68
sys-devel/automake:       1.11.1
sys-devel/binutils:       2.21.1-r1
sys-devel/gcc:            4.5.3-r2
sys-devel/gcc-config:     1.6
sys-devel/libtool:        2.4-r1
sys-devel/make:           3.82-r1
sys-kernel/linux-headers: 3.1 (virtual/os-headers)
sys-libs/glibc:           2.14.1-r3
Repositories: gentoo nikoli
ACCEPT_KEYWORDS="amd64"
ACCEPT_LICENSE="* -@EULA"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=core2 -mtune=generic -mavx -maes -mpclmul -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa /usr/share/themes/oxygen-gtk/gtk-2.0"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=core2 -mtune=generic -mavx -maes -mpclmul -O2 -pipe"
DISTDIR="/var/package-manager/distfiles"
FCFLAGS="-O2 -pipe"
FEATURES="assume-digests binpkg-logs distlocks ebuild-locks fixlafiles news parallel-fetch protect-owned sandbox sfperms strict test unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-O2 -pipe"
LANG="en_US.UTF-8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LINGUAS="ru en"
MAKEOPTS="-j9"
PKGDIR="/var/package-manager/packages/corei7-avx_hardened"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTDIR="/var/package-manager/portage"
PORTDIR_OVERLAY="/var/lib/layman/nikoli"
USE="X a52 aac acl acpi aes-ni akonadi alsa amd64 amr atm audiofile avx bash-completion bluetooth bzip2 cairo caps cdda cddb cdio cdparanoia cdr celt cli consolekit cracklib crypt css cups cxx dbus djvu dri dts dv dvd dvdr encode exif fat ffmpeg flac fluidsynth fontconfig fortran gd geoip gif gimp gmp gnutls gphoto2 gpm graphviz gsm gstreamer gtk handbook hardened iconv icu id3tag idn ilbc imagemagick imap imlib ios ipod ipv6 jbig jpeg jpeg2k justify kde kipi kontact lame laptop lcms libass libnotify libproxy libsamplerate lm_sensors lzma lzo mac mad matroska mikmod mmx mmxext mng modplug modules mp3 mp4 mpeg mtp mudflap multilib musepack musicbrainz ncurses networkmanager nls nptl nptlonly ntfs ogg openal openexr opengl openmp pam pango pax_kernel pcre pdf pg-intdatetime phonon plasma pm-utils png policykit postscript pppd qt3support qt4 quicktime rar raw readline reiserfs replaygain rtmp sasl scanner schroedinger semantic-desktop session sid smp sndfile socks5 speex spell sqlite sse sse2 sse3 sse4_1 ssl ssse3 startup-notification svg symlink sysfs taglib theora threads thumbnail tiff truetype tta udev unicode upnp usb v4l v4l2 vaapi vcd vdpau vorbis vpx wavpack webkit webp wifi wma wmf wps x264 xattr xcb xcomposite xface xinerama xml xmp xorg xpm xscreensaver xv xvid xz zip zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan sheets stage tables krita karbon braindump" CAMERAS="*" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" GRUB_PLATFORMS="efi-64" INPUT_DEVICES="evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LINGUAS="ru en" NGINX_MODULES_HTTP="access auth_basic autoindex fastcgi gzip rewrite" PHP_TARGETS="php5-3" PYTHON_TARGETS="python3_2 python2_7" QEMU_SOFTMMU_TARGETS="i386 x86_64" QEMU_USER_TARGETS="i386 x86_64" RUBY_TARGETS="ruby18 ruby19" USERLAND="GNU" VIDEO_CARDS="radeon r600 vesa" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, LC_ALL, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, USE_PYTHON

=================================================================
                        Package Settings
=================================================================

dev-java/icedtea-6.1.11.2 was built with the following:
USE="X alsa cups jbootstrap (multilib) nsplugin nss pax_kernel source test webstart -cjk -debug -doc -examples -javascript -pulseaudio -systemtap"
Comment 1 Alon Bar-Lev 2012-06-22 20:10:13 UTC
This is dup of bug#389751.

bug#389751 comment#18:
---

Hello,
icedtea-7.2.2.1 has this again.

---
# /var/tmp/portage/dev-java/icedtea-7.2.2.1/work/icedtea-2.2.1/openjdk.build-boot/bin/java -XX:-PrintVMOptions -XX:+UnlockDiagnosticVMOptions -XX:-LogVMOutput -Xmx512m -Xms512m -XX:PermSize=32m -XX:MaxPermSize=160m -cp /var/tmp/portage/dev-java/icedtea-7.2.2.1/work/icedtea-2.2.1/openjdk.build-boot/classes sun.rmi.rmic.Main -classpath "/var/tmp/portage/dev-java/icedtea-7.2.2.1/work/icedtea-2.2.1/openjdk.build-boot/classes"                    -d /var/tmp/portage/dev-java/icedtea-7.2.2.1/work/icedtea-2.2.1/openjdk.build-boot/classes                              -v1.2                                           -keepgenerated                                  javax.management.remote.rmi.RMIConnectionImpl
Error occurred during initialization of VM
Could not reserve enough space for code cache
---

---
# paxctl -v /var/tmp/portage/dev-java/icedtea-7.2.2.1/work/icedtea-2.2.1/openjdk.build-boot/bin/java
PaX control v0.7
Copyright 2004,2005,2006,2007,2009,2010,2011,2012 PaX Team <pageexec@freemail.hu>

- PaX flags: -------x-e-- [/var/tmp/portage/dev-java/icedtea-7.2.2.1/work/icedtea-2.2.1/openjdk.build-boot/bin/java]
        RANDEXEC is disabled
        EMUTRAMP is disabled
---

Adding MPROTECT solves the issue.

Do you want to reopen or should I open a new bug?
Comment 2 Ralph Sennhauser (RETIRED) gentoo-dev 2012-06-24 08:31:12 UTC
It's not a dupe, but a new one. Thanks to Andrew John Hughes the PaX patches from back then were added to upstream icedtea 7. This time, the reason is a security patch which changed where a freshly built jdk is used first. Thanks for the report.

  24 Jun 2012; Ralph Sennhauser <sera@gentoo.org> icedtea-6.1.11.3.ebuild,
  files/icedtea-6_pax_kernel_support.patch, icedtea-7.2.1.1.ebuild,
  +files/icedtea-7.2.1.1-pax_mark_rmic_java.patch, icedtea-7.2.2.1.ebuild,
  +files/icedtea-7.2.2.1-pax_mark_rmic_java.patch:
  Fix building with PaX enabled kernels. #422525
Comment 3 Nikoli 2012-06-24 16:58:00 UTC
Thanks, now it builds fine and most tests work fine.

But there are grsec errors in dmesg:
Jun 24 17:19:31 core kernel: [419815.423365] grsec: denied RWX mmap of <anonymous mapping> by /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/test/hotspot/JTwork/scratch/invoke[invoke:2219] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:2087] uid/euid:250/250 gid/egid:250/250
Jun 24 17:20:22 core kernel: [419866.937914] grsec: denied resource overstep by requesting 4096 for RLIMIT_CORE against limit 0 for /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/jre/bin/java[java:5181] uid/euid:250/250 gid/egid:250/250, parent /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/java[java:5177] uid/euid:250/250 gid/egid:250/250
Jun 24 18:20:09 core kernel: [423449.935816] grsec: denied resource overstep by requesting 4096 for RLIMIT_NOFILE against limit 4096 for /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/java[java:5011] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:4985] uid/euid:250/250 gid/egid:250/250
Jun 24 20:04:49 core kernel: [429723.358308] grsec: denied ptrace of /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/java(java:4654) by /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/jinfo[jinfo:4694] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:4649] uid/euid:250/250 gid/egid:250/250
Jun 24 20:04:49 core kernel: [429723.543229] grsec: denied ptrace of /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/java(java:4654) by /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/jinfo[jinfo:4714] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:4649] uid/euid:250/250 gid/egid:250/250
Jun 24 20:04:49 core kernel: [429723.732436] grsec: denied ptrace of /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/java(java:4654) by /var/tmp/portage/dev-java/icedtea-6.1.11.3/work/icedtea6-1.11.3/openjdk.build/j2sdk-image/bin/jinfo[jinfo:4734] uid/euid:250/250 gid/egid:250/250, parent /bin/bash[sh:4649] uid/euid:250/250 gid/egid:250/250


and some tests fail:
--------------- jtreg console summary for jdk ---------------
FAILED: com/sun/awt/SecurityWarning/GetSizeShouldNotReturnZero.java
Error:  java/awt/dnd/FileListBetweenJVMsTest/FileListBetweenJVMsTest.html
FAILED: java/awt/Focus/ActualFocusedWindowTest/ActualFocusedWindowBlockingTest.java
FAILED: java/awt/Focus/ActualFocusedWindowTest/ActualFocusedWindowRetaining.java
FAILED: java/awt/Focus/CloseDialogActivateOwnerTest/CloseDialogActivateOwnerTest.java
FAILED: java/awt/Focus/ToFrontFocusTest/ToFrontFocus.html
FAILED: java/awt/Focus/TranserFocusToWindow/TranserFocusToWindow.java
FAILED: java/awt/font/InternationalFonts/InternationalFontsRendering.java
FAILED: java/awt/font/InternationalFonts/InternationalFontsStyles.java
FAILED: java/awt/Frame/MaximizedToIconified/MaximizedToIconified.java
FAILED: java/awt/Graphics2D/DrawString/RotTransText.java
FAILED: java/awt/GraphicsDevice/CloneConfigsTest.java
FAILED: java/awt/KeyboardFocusmanager/TypeAhead/TestDialogTypeAhead.html
FAILED: java/awt/Modal/ModalInternalFrameTest/ModalInternalFrameTest.java
FAILED: java/awt/Mouse/TitleBarDoubleClick/TitleBarDoubleClick.html
FAILED: java/awt/print/PrinterJob/ExceptionTest.java
FAILED: java/awt/TextArea/UsingWithMouse/SelectionAutoscrollTest.html
FAILED: java/awt/Window/GrabSequence/GrabSequence.java
FAILED: java/awt/xembed/server/RunTestXEmbed.java
FAILED: java/beans/XMLEncoder/javax_swing_tree_TreePath.java
FAILED: java/io/File/GetXSpace.java
FAILED: java/lang/Double/ToString.java
Error:  java/lang/management/MemoryMXBean/CollectionUsageThresholdConcMarkSweepGC.sh
FAILED: java/lang/ProcessBuilder/Basic.java
FAILED: java/net/DatagramSocket/B6411513.java
FAILED: java/net/InetAddress/GetLocalHostWithSM.java
FAILED: java/net/MulticastSocket/SetLoopbackMode.java
FAILED: java/net/MulticastSocket/Test.java
FAILED: java/net/Socket/Bindv6Only.java
FAILED: java/net/URL/TestHttps.java
FAILED: java/nio/channels/DatagramChannel/IsBound.java
FAILED: java/nio/channels/Selector/Alias.java
FAILED: java/nio/channels/Selector/BasicConnect.java
FAILED: java/nio/channels/Selector/Connect.java
FAILED: java/nio/channels/Selector/ConnectWrite.java
FAILED: java/nio/channels/Selector/OpRead.java
FAILED: java/nio/channels/SocketChannel/AdaptSocket.java
FAILED: java/nio/channels/SocketChannel/Basic.java
FAILED: java/nio/channels/SocketChannel/Connect.java
FAILED: java/nio/channels/SocketChannel/ConnectState.java
FAILED: java/nio/channels/SocketChannel/FinishConnect.java
FAILED: java/nio/channels/SocketChannel/IsConnectable.java
FAILED: java/nio/channels/SocketChannel/LocalAddress.java
FAILED: java/nio/channels/SocketChannel/Shutdown.java
FAILED: java/nio/channels/SocketChannel/Stream.java
FAILED: java/nio/channels/SocketChannel/VectorParams.java
FAILED: java/nio/charset/Charset/NIOCharsetAvailabilityTest.java
FAILED: java/security/KeyPairGenerator/Failover.java
Error:  javax/swing/UIDefaults/6795356/bug6795356.java
FAILED: sun/java2d/cmm/ColorConvertOp/ColConvCCMTest.java
FAILED: sun/java2d/cmm/ColorConvertOp/ColConvDCMTest.java
FAILED: sun/java2d/cmm/ColorConvertOp/MTColConvTest.java
Error:  sun/java2d/OpenGL/GradientPaints.java
FAILED: sun/java2d/SunGraphics2D/DrawImageBilinear.java
FAILED: sun/java2d/SunGraphics2D/PolyVertTest.java
FAILED: sun/java2d/SunGraphics2D/SimplePrimQuality.java
FAILED: sun/nio/cs/TestSJIS0213.java
FAILED: sun/rmi/transport/proxy/EagerHttpFallback.java
FAILED: sun/security/krb5/auto/IgnoreChannelBinding.java
FAILED: sun/security/pkcs11/ec/ReadCertificates.java
FAILED: sun/security/pkcs11/ec/ReadPKCS12.java
FAILED: sun/security/pkcs11/ec/TestCurves.java
FAILED: sun/security/pkcs11/ec/TestECDH.java
FAILED: sun/security/pkcs11/ec/TestECDSA.java
FAILED: sun/security/pkcs11/ec/TestECGenSpec.java
FAILED: sun/security/pkcs11/ec/TestKeyFactory.java
FAILED: sun/security/pkcs11/Signature/TestRSAKeyLength.java
FAILED: sun/security/pkcs11/sslecc/ClientJSSEServerJSSE.java
FAILED: sun/security/ssl/javax/net/ssl/NewAPIs/SSLEngine/TestAllSuites.java
FAILED: sun/security/ssl/sanity/ciphersuites/CheckCipherSuites.java
FAILED: sun/security/ssl/sanity/interop/ClientJSSEServerJSSE.java
Error:  sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/B6216082.java
Error:  sun/security/ssl/sun/net/www/protocol/https/HttpsURLConnection/B6226610.java
FAILED: sun/security/validator/CertReplace.java
FAILED: sun/tools/jinfo/Basic.sh
FAILED: sun/tools/jrunscript/Testjrunscript.java
Test results: passed: 3,344; failed: 70; error: 6
--------------- jtreg console summary for langtools ---------------
Test results: passed: 1,418
: # kill testsuite processes still hanging
killing processes...