Skip to content

Fix.loader.dynamic #644

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
oinoom wants to merge 75 commits into
base: fix.so
Choose a base branch
from
Draft

Fix.loader.dynamic #644

oinoom wants to merge 75 commits into from

Conversation

@oinoom
Copy link
Contributor

@oinoom oinoom commented Nov 5, 2025

No description provided.

oinoom added 30 commits October 10, 2025 18:17
@oinoom
runtime: gate loader paths for PartitionAlloc + MPK tagging
0a57592 
- introduce ia2_loader gate TLS flag and counters so PartitionAlloc can detect loader allocations and force pkey 1 (see docs/loader_partitionalloc_mpk_summary.md)
- wrap dlopen/dlsym/mmap/mremap to enter the loader gate and retag anonymous mappings with pkey 1 using pkey_mprotect
- add ia2_tag_link_map retag API plus tests that ensure ld.so stays on pkey 1 and loader operations increment the new counters
@oinoom
loader: add telemetry for libdl wrappers and consolidate docs
88b9b9a
@oinoom
runtime: auto-retag system DSOs to loader compartment
844f6b7 
Filter dlopen/dlmopen by basename to retag system libs to pkey 1, preserve app compartments
@oinoom
runtime: drop loader gate before user constructors
6fd2060
@oinoom
runtime: preserve errno for loader mmap failures
9c73b03
@oinoom
runtime: gate loader mmap wrappers on x86_64
e77f964
@oinoom
runtime: move loader telemetry increments out of gate
24ccf1b
@oinoom
tests: add mmap wrapper regression test for file-backed mappings
67d4699 
Validates that file-backed DSO mappings loaded via dlopen retain their
default pkey instead of being retagged to the loader's pkey 1.
@oinoom
runtime: respect registered compartments in loader retag
986aaf4
@oinoom
cleanup
080e604
@oinoom
improvements
d015166
@oinoom
runtime: add bootstrap loader shim and PKRU interceptors
403b060
@oinoom
loader: remove pkru cache scaffolding
a6bb332
@oinoom
refactor: eliminate mmap/mmap64 wrapper duplication
964702d
@oinoom
refactor: make PKRU gates unconditional for loader compartmentalization
9a4ab8e
@oinoom
runtime: harden loader PKRU gating
87c8af4
@oinoom
cleanup
0f2d09a
@oinoom
docs + cleanup
387cc85
@oinoom
docs + cleanup
a221426
@oinoom
docs + cleanup
67bc378
@oinoom
docs + cleanup
fa0114f
@oinoom
docs + cleanup
fbc8334
@oinoom
runtime/tools: share libc compartment id
9f657ff
@oinoom
runtime: remove ia2_callgate_exit declaration (assembly-only)
90d9c86
@oinoom
runtime: inline ia2_callgate_{enter,exit} into __wrap___cxa_finalize
a6c030c
@oinoom
runtime: remove unnecessary alignment directive from asm block
b5c4f27
@oinoom
runtime: use IA2_STR macro from ia2_internal.h instead of redefining
16d43db
@oinoom
runtime: consolidate exit_callgates_x86_64.c into exit_callgates.c
a01dd83
@oinoom
docs + cleanup
b21b8fd
@oinoom
simplify IA2_EXIT_PKRU
e9d74ca
oinoom and others added 27 commits December 3, 2025 11:29
@oinoom
runtime: gate loader wrappers behind libc flag
e3f8712
@oinoom
cmake: disable libc compartment flag on aarch64
38a06d3
@oinoom
aarch64: hard-disable libc compartment runtime paths
569327b
@oinoom
cmake: force IA2_LIBC_COMPARTMENT=OFF in aarch64 toolchain
c1633fe
@oinoom
cmake: block libc compartment flag for all aarch64 targets
a83004e
@oinoom
libia2: only build loader wrappers when libc compartment is on
8658d52
@oinoom
runtime: stub loader gate on aarch64
192cca9
@oinoom
runtime: guard pkru debug log on arm
97ef42c
@oinoom
runtime: keep pkru gates disabled on arm and export stub counters
63718c1
@oinoom
ci: add libc compartment coverage row
bd70c01
@oinoom
ci: label pkru matrix rows with libc-on/off
124360a
@oinoom
ci: document matrix job label with libc flag
5ec0dbe
@oinoom
tests: temporarily drop mbstowcs libc case from libc-check
c56a27b
@oinoom
ci: run libc job via dl_debug runner and prune target list
a53c2c7
@oinoom
tests: align libc compartment ctests
7ed1bd7
@oinoom
tests: drop bootstrap shim ctest entry
a608b22
@oinoom
tests: include exit_callgate_standalone in libc compartment suite
8995231
@oinoom
ci: filter libc compartment tests via ctest label
4b64cb1
@oinoom
tests: disable aarch64 pthread_join flake in terminating_threads
c665a56
@oinoom
ci/tests: update libc compartment comments
082070b
@oinoom
ci: clarify pkru matrix job label
4e5cf9c
@oinoom
ci: simplify pkru job name comment
7521754
@oinoom
tests: add libc-only mode for libc compartment suites
4ea96b4
@oinoom
tests: make libc compartment builds libc-only
e0e2c6f
@oinoom
Merge pull request #648 from immunant/feat.test.libc
c400734 
ci: add libc compartment coverage row
@oinoom
Merge branch 'main' into fix.loader.dynamic
bac4f31
@oinoom
add new tests to ci
edf0d28
@oinoom oinoom force-pushed the fix.loader.dynamic branch 3 times, most recently from 2ef2f07 to edf0d28 Compare December 8, 2025 20:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@oinoom