From: Jan Kratochvil <jan.kratochvil@redhat.com>
To: Pedro Alves <palves@redhat.com>
Cc: Yao Qi <qiyaoltc@gmail.com>, gdb-patches@sourceware.org
Subject: Re: [patch] aarch64: PR 19806: watchpoints: false negatives -> false positives
Date: Sun, 19 Jun 2016 18:29:00 -0000 [thread overview]
Message-ID: <20160619182909.GA9883@host1.jankratochvil.net> (raw)
In-Reply-To: <380b5288-f46f-3e20-c9c3-8cc8738ee322@redhat.com>
On Wed, 08 Jun 2016 20:46:35 +0200, Pedro Alves wrote:
> I thought of a case where this is the wrong thing to do.
> (Alternative below.)
>
> The same example as before: e.g., a machine that only supports
> watching 32-bit-aligned words. Then with:
>
> union
> {
> char buf[4];
> uint32_t force_align;
> } global;
>
> (gdb) watch global.buf[1];
> Hardware watchpoint 1 ...
> (gdb) watch global.buf[3];
> Hardware watchpoint 2 ...
>
> ... if the program writes to global.buf[3], and the target
> reports a memory access to 'global.buf + 1' (because that's the
> first watchpoint in its own watchpoint list that overlaps
> the global.buf[0]..global.buf[3] range (what is really being
> watched)), gdb will believe that watchpoint 1 triggered, notice
> the value didn't change, and thus incorrectly ignore the watchpoint hit.
Here if the program really does 'global.buf[3] = 0xff;' then it still does
work as despite GDB places watchpoint at &global.buf[0] for 4 bytes aarch64
still reports the exact 1-byte location &global.buf[3]:
echo -e 'union { char buf[8]; unsigned long ul; } u; int main(void) {\n u.buf[3]=0xff;\n return 0; }'|gcc -Wall -g -x c -;./gdb -data-directory ./data-directory/ ./a.out -ex start -ex 'watch u.buf[1]' -ex 'watch u.buf[3]' -ex c -ex 'p u.buf[1]' -ex 'p u.buf[3]'
Hardware watchpoint 2: u.buf[1]
Hardware watchpoint 3: u.buf[3]
Continuing.
Hardware watchpoint 3: u.buf[3]
Old value = 0 '\000'
New value = 255 '\377'
main () at <stdin>:3
3 in <stdin>
$1 = 0 '\000'
$2 = 255 '\377'
But you are right the watchpoint gets missed if the program writes to
&global.buf[0] a 4-byte value not modifying the contents of global.buf[1] but
modifying the contents of global.buf[3]:
echo -e 'union { char buf[8]; unsigned long ul; } u; int main(void) {\n u.ul=0xff000000;\n return 0; }'|gcc -Wall -g -x c -;./gdb -data-directory ./data-directory/ ./a.out -ex start -ex 'watch u.buf[1]' -ex 'watch u.buf[3]' -ex 'b 3' -ex c -ex 'p u.buf[1]' -ex 'p u.buf[3]'
Hardware watchpoint 2: u.buf[1]
Hardware watchpoint 3: u.buf[3]
Breakpoint 4 at 0x400570: file <stdin>, line 3.
Continuing.
Breakpoint 4, main () at <stdin>:3
3 in <stdin>
$1 = 0 '\000'
$2 = 255 '\377'
I will follow with an add-on patch as I guess you think it makes sense to fix
GDB even for older kernels (assuming aarch64 kernel gets fixed in some time).
Thanks,
Jan
next prev parent reply other threads:[~2016-06-19 18:29 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-06-06 8:00 Jan Kratochvil
2016-06-07 13:23 ` Yao Qi
2016-06-07 13:41 ` Pedro Alves
2016-06-07 15:25 ` Yao Qi
2016-06-07 16:04 ` Pedro Alves
2016-06-08 16:42 ` Yao Qi
2016-06-08 17:54 ` Pedro Alves
2016-06-08 18:46 ` Pedro Alves
2016-06-10 8:11 ` Yao Qi
2016-06-19 18:29 ` Jan Kratochvil [this message]
2016-06-20 11:47 ` Pedro Alves
2016-06-20 14:12 ` Jan Kratochvil
2016-06-20 14:40 ` Pedro Alves
2017-03-27 21:11 ` obsolete: " Jan Kratochvil
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20160619182909.GA9883@host1.jankratochvil.net \
--to=jan.kratochvil@redhat.com \
--cc=gdb-patches@sourceware.org \
--cc=palves@redhat.com \
--cc=qiyaoltc@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox