RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1764581 - Please enable pointer authentication (PAC) support in glibc for forward compatibility with RHEL8
Summary: Please enable pointer authentication (PAC) support in glibc for forward compa...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: glibc
Version: 7.0
Hardware: aarch64
OS: Linux
unspecified
medium
Target Milestone: rc
: ---
Assignee: glibc team
QA Contact: qe-baseos-tools-bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-10-23 11:50 UTC by Jeremy Linton (ARM)
Modified: 2019-10-29 18:25 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-10-29 18:25:09 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Jeremy Linton (ARM) 2019-10-23 11:50:14 UTC
Description of problem: The glibc exception unwinder in RHEL7 doesn't understand PAC pointers. Potentially this library can be linked into containers/etc which may be used on RHEL8+ machines . As such this functionality should be back-ported into RHEL7 to avoid future problems.


Actual results:
At the moment its believed that various combinations of OS/glibc and PAC will cause application crashes rather than correctly handling exceptions.

Upstream patches:

https://sourceware.org/ml/libc-alpha/2019-06/msg00499.html

Comment 2 Florian Weimer 2019-10-23 12:01:48 UTC
Jeremy, the patch has not been merged upstream. My understanding was that the PAC PLT was abandoned, given that it is possible to get much better hardening using BIND_NOW and full RELRO. Would you please clarify? Thanks.

Comment 3 Carlos O'Donell 2019-10-29 18:15:49 UTC
The bug we were expecting from Arm was a bug against gcc for libgcc to be fixed in rhel-7.6.z to support the overlapping unwinding op with the old sparc unwind opcode.

Comment 4 Jeremy Linton (ARM) 2019-10-29 18:25:09 UTC
Lets blame this one on me not reading all the email threads, and close it. I will open another one against the correct component, but I have to track down the right commits.


Note You need to log in before you can comment on or make changes to this bug.