mirror of
https://github.com/jart/cosmopolitan.git
synced 2025-01-31 11:37:35 +00:00
ec480f5aa0
- Every unit test now passes on Apple Silicon. The final piece of this puzzle was porting our POSIX threads cancelation support, since that works differently on ARM64 XNU vs. AMD64. Our semaphore support on Apple Silicon is also superior now compared to AMD64, thanks to the grand central dispatch library which lets *NSYNC locks go faster. - The Cosmopolitan runtime is now more stable, particularly on Windows. To do this, thread local storage is mandatory at all runtime levels, and the innermost packages of the C library is no longer being built using ASAN. TLS is being bootstrapped with a 128-byte TIB during the process startup phase, and then later on the runtime re-allocates it either statically or dynamically to support code using _Thread_local. fork() and execve() now do a better job cooperating with threads. We can now check how much stack memory is left in the process or thread when functions like kprintf() / execve() etc. call alloca(), so that ENOMEM can be raised, reduce a buffer size, or just print a warning. - POSIX signal emulation is now implemented the same way kernels do it with pthread_kill() and raise(). Any thread can interrupt any other thread, regardless of what it's doing. If it's blocked on read/write then the killer thread will cancel its i/o operation so that EINTR can be returned in the mark thread immediately. If it's doing a tight CPU bound operation, then that's also interrupted by the signal delivery. Signal delivery works now by suspending a thread and pushing context data structures onto its stack, and redirecting its execution to a trampoline function, which calls SetThreadContext(GetCurrentThread()) when it's done. - We're now doing a better job managing locks and handles. On NetBSD we now close semaphore file descriptors in forked children. Semaphores on Windows can now be canceled immediately, which means mutexes/condition variables will now go faster. Apple Silicon semaphores can be canceled too. We're now using Apple's pthread_yield() funciton. Apple _nocancel syscalls are now used on XNU when appropriate to ensure pthread_cancel requests aren't lost. The MbedTLS library has been updated to support POSIX thread cancelations. See tool/build/runitd.c for an example of how it can be used for production multi-threaded tls servers. Handles on Windows now leak less often across processes. All i/o operations on Windows are now overlapped, which means file pointers can no longer be inherited across dup() and fork() for the time being. - We now spawn a thread on Windows to deliver SIGCHLD and wakeup wait4() which means, for example, that posix_spawn() now goes 3x faster. POSIX spawn is also now more correct. Like Musl, it's now able to report the failure code of execve() via a pipe although our approach favors using shared memory to do that on systems that have a true vfork() function. - We now spawn a thread to deliver SIGALRM to threads when setitimer() is used. This enables the most precise wakeups the OS makes possible. - The Cosmopolitan runtime now uses less memory. On NetBSD for example, it turned out the kernel would actually commit the PT_GNU_STACK size which caused RSS to be 6mb for every process. Now it's down to ~4kb. On Apple Silicon, we reduce the mandatory upstream thread size to the smallest possible size to reduce the memory overhead of Cosmo threads. The examples directory has a program called greenbean which can spawn a web server on Linux with 10,000 worker threads and have the memory usage of the process be ~77mb. The 1024 byte overhead of POSIX-style thread-local storage is now optional; it won't be allocated until the pthread_setspecific/getspecific functions are called. On Windows, the threads that get spawned which are internal to the libc implementation use reserve rather than commit memory, which shaves a few hundred kb. - sigaltstack() is now supported on Windows, however it's currently not able to be used to handle stack overflows, since crash signals are still generated by WIN32. However the crash handler will still switch to the alt stack, which is helpful in environments with tiny threads. - Test binaries are now smaller. Many of the mandatory dependencies of the test runner have been removed. This ensures many programs can do a better job only linking the the thing they're testing. This caused the test binaries for LIBC_FMT for example, to decrease from 200kb to 50kb - long double is no longer used in the implementation details of libc, except in the APIs that define it. The old code that used long double for time (instead of struct timespec) has now been thoroughly removed. - ShowCrashReports() is now much tinier in MODE=tiny. Instead of doing backtraces itself, it'll just print a command you can run on the shell using our new `cosmoaddr2line` program to view the backtrace. - Crash report signal handling now works in a much better way. Instead of terminating the process, it now relies on SA_RESETHAND so that the default SIG_IGN behavior can terminate the process if necessary. - Our pledge() functionality has now been fully ported to AARCH64 Linux.
185 lines
5.7 KiB
C
185 lines
5.7 KiB
C
#ifndef COSMOPOLITAN_LIBC_RUNTIME_MEMTRACK_H_
|
|
#define COSMOPOLITAN_LIBC_RUNTIME_MEMTRACK_H_
|
|
#include "ape/sections.internal.h"
|
|
#include "libc/dce.h"
|
|
#include "libc/macros.internal.h"
|
|
#include "libc/nt/version.h"
|
|
#include "libc/runtime/runtime.h"
|
|
#include "libc/runtime/stack.h"
|
|
#include "libc/sysv/consts/ss.h"
|
|
#include "libc/thread/tls.h"
|
|
#if !(__ASSEMBLER__ + __LINKER__ + 0)
|
|
COSMOPOLITAN_C_START_
|
|
|
|
#define kAutomapStart 0x100080040000
|
|
#define kAutomapSize (kMemtrackStart - kAutomapStart)
|
|
#define kMemtrackStart 0x1fe7fffc0000
|
|
#define kMemtrackSize (0x1ffffffc0000 - kMemtrackStart)
|
|
#define kFixedmapStart 0x300000040000
|
|
#define kFixedmapSize (0x400000040000 - kFixedmapStart)
|
|
#define kMemtrackFdsStart 0x6fe000040000
|
|
#define kMemtrackFdsSize (0x6feffffc0000 - kMemtrackFdsStart)
|
|
#define kMemtrackZiposStart 0x6fd000040000
|
|
#define kMemtrackZiposSize (0x6fdffffc0000 - kMemtrackZiposStart)
|
|
#define kMemtrackGran (!IsAsan() ? FRAMESIZE : FRAMESIZE * 8)
|
|
|
|
struct MemoryInterval {
|
|
int x;
|
|
int y;
|
|
long h;
|
|
long size;
|
|
long offset;
|
|
int flags;
|
|
char prot;
|
|
bool iscow;
|
|
bool readonlyfile;
|
|
};
|
|
|
|
struct MemoryIntervals {
|
|
size_t i, n;
|
|
struct MemoryInterval *p;
|
|
struct MemoryInterval s[16];
|
|
};
|
|
|
|
extern struct MemoryIntervals _mmi;
|
|
|
|
void __mmi_lock(void);
|
|
void __mmi_unlock(void);
|
|
bool IsMemtracked(int, int);
|
|
void PrintSystemMappings(int);
|
|
unsigned __find_memory(const struct MemoryIntervals *, int) nosideeffect;
|
|
bool __check_memtrack(const struct MemoryIntervals *) nosideeffect;
|
|
void PrintMemoryIntervals(int, const struct MemoryIntervals *);
|
|
int __track_memory(struct MemoryIntervals *, int, int, long, int, int, bool,
|
|
bool, long, long);
|
|
int __untrack_memory(struct MemoryIntervals *, int, int,
|
|
void (*)(struct MemoryIntervals *, int, int));
|
|
void __release_memory_nt(struct MemoryIntervals *, int, int);
|
|
int __untrack_memories(void *, size_t);
|
|
size_t __get_memtrack_size(struct MemoryIntervals *);
|
|
|
|
#ifdef __x86_64__
|
|
/*
|
|
* AMD64 has 48-bit signed pointers (PML4T)
|
|
* AMD64 is trying to go bigger, i.e. 57-bit (PML5T)
|
|
* LINUX forbids userspace from leveraging negative pointers
|
|
* Q-EMU may impose smaller vaspaces emulating AMD on non-AMD
|
|
*
|
|
* Having "signed pointers" means these top sixteen bits
|
|
*
|
|
* 0x0000000000000000
|
|
* ^^^^
|
|
*
|
|
* must be
|
|
*
|
|
* - 0000 for positive pointers
|
|
* - FFFF for negative pointers
|
|
*
|
|
* otherwise the instruction using the faulty pointer will fault.
|
|
*/
|
|
#define IsLegalPointer(p) \
|
|
(-0x800000000000 <= (intptr_t)(p) && (intptr_t)(p) <= 0x7fffffffffff)
|
|
#define ADDR_32_TO_48(x) (intptr_t)((uint64_t)(int)(x) << 16)
|
|
#elif defined(__aarch64__)
|
|
/*
|
|
* ARM64 has 48-bit unsigned pointers (Armv8.0-A)
|
|
* ARM64 can possibly go bigger, i.e. 52-bit (Armv8.2-A)
|
|
* ARM64 can impose arbitrarily smaller vaspaces, e.g. 40/44-bit
|
|
* APPLE in their limitless authoritarianism forbids 32-bit pointers
|
|
*/
|
|
#define IsLegalPointer(p) ((uintptr_t)(p) <= 0xffffffffffff)
|
|
#define ADDR_32_TO_48(x) (uintptr_t)((uint64_t)(uint32_t)(x) << 16)
|
|
#else
|
|
/* RISC-V Sipeed Nezha has 39-bit vaspace */
|
|
#error "unsupported architecture"
|
|
#endif
|
|
|
|
forceinline pureconst bool IsLegalSize(uint64_t n) {
|
|
/* subtract frame size so roundup is safe */
|
|
return n <= 0x800000000000 - FRAMESIZE;
|
|
}
|
|
|
|
forceinline pureconst bool IsAutoFrame(int x) {
|
|
return (int)(kAutomapStart >> 16) <= x &&
|
|
x <= (int)((kAutomapStart + kAutomapSize - 1) >> 16);
|
|
}
|
|
|
|
forceinline pureconst bool IsMemtrackFrame(int x) {
|
|
return (int)(kAutomapStart >> 16) <= x &&
|
|
x <= (int)((kAutomapStart + kAutomapSize - 1) >> 16);
|
|
}
|
|
|
|
forceinline pureconst bool IsGfdsFrame(int x) {
|
|
return (int)(kMemtrackFdsStart >> 16) <= x &&
|
|
x <= (int)((kMemtrackFdsStart + kMemtrackFdsSize - 1) >> 16);
|
|
}
|
|
|
|
forceinline pureconst bool IsZiposFrame(int x) {
|
|
return (int)(kMemtrackZiposStart >> 16) <= x &&
|
|
x <= (int)((kMemtrackZiposStart + kMemtrackZiposSize - 1) >> 16);
|
|
}
|
|
|
|
forceinline pureconst bool IsShadowFrame(int x) {
|
|
return 0x7fff <= x && x < 0x10008000;
|
|
}
|
|
|
|
forceinline pureconst bool IsStaticStackFrame(int x) {
|
|
intptr_t stack = GetStaticStackAddr(0);
|
|
return (int)(stack >> 16) <= x &&
|
|
x <= (int)((stack + (GetStackSize() - FRAMESIZE)) >> 16);
|
|
}
|
|
|
|
forceinline pureconst bool IsStackFrame(int x) {
|
|
intptr_t stack = GetStackAddr();
|
|
return (int)(stack >> 16) <= x &&
|
|
x <= (int)((stack + (GetStackSize() - FRAMESIZE)) >> 16);
|
|
}
|
|
|
|
forceinline pureconst bool IsOldStack(const void *x) {
|
|
size_t foss_stack_size = 8ul * 1024 * 1024;
|
|
uintptr_t top = __oldstack + foss_stack_size;
|
|
uintptr_t bot = __oldstack - foss_stack_size;
|
|
return bot <= (uintptr_t)x && (uintptr_t)x < top;
|
|
}
|
|
|
|
forceinline pureconst bool IsOldStackFrame(int x) {
|
|
size_t foss_stack_size = 8ul * 1024 * 1024;
|
|
uintptr_t top = __oldstack + foss_stack_size;
|
|
uintptr_t bot = __oldstack - foss_stack_size;
|
|
return (int)(bot >> 16) <= x && x <= (int)((top >> 16) - 1);
|
|
}
|
|
|
|
forceinline pureconst bool IsFixedFrame(int x) {
|
|
return (kFixedmapStart >> 16) <= x &&
|
|
x <= ((kFixedmapStart + (kFixedmapSize - 1)) >> 16);
|
|
}
|
|
|
|
forceinline pureconst bool OverlapsImageSpace(const void *p, size_t n) {
|
|
const unsigned char *BegA, *EndA, *BegB, *EndB;
|
|
if (n) {
|
|
BegA = p;
|
|
EndA = BegA + (n - 1);
|
|
BegB = __executable_start;
|
|
EndB = _end - 1;
|
|
return MAX(BegA, BegB) < MIN(EndA, EndB);
|
|
} else {
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
forceinline pureconst bool OverlapsShadowSpace(const void *p, size_t n) {
|
|
intptr_t BegA, EndA, BegB, EndB;
|
|
if (n) {
|
|
BegA = (intptr_t)p;
|
|
EndA = BegA + (n - 1);
|
|
BegB = 0x7fff0000;
|
|
EndB = 0x10007fffffff;
|
|
return MAX(BegA, BegB) < MIN(EndA, EndB);
|
|
} else {
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
COSMOPOLITAN_C_END_
|
|
#endif /* !(__ASSEMBLER__ + __LINKER__ + 0) */
|
|
#endif /* COSMOPOLITAN_LIBC_RUNTIME_MEMTRACK_H_ */
|