Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

The JIT'spatch_aarch64_33rx relocation isn't safe #146128

Open
Assignees
brandtbucher
Labels
3.13bugs and security fixes3.14bugs and security fixes3.15new features, bugs and security fixesinterpreter-core(Objects, Python, Grammar, and Parser dirs)topic-JITtype-crashA hard crash of the interpreter, possibly with a core dump
@brandtbucher

Description

@brandtbucher

We can't just combinepatch_aarch64_21r andpatch_aarch64_12 into one relaxed relocation without a deeper understanding of the control flow, unfortunately. The issue is that the code can can jump into the middle of the two instructions involved in the relocation, and the combined relaxation changes the meaning of that.

This happens with_IS_NONE on debug 3.13 builds for AArch64 Linux, so it's a legitimate concern. We just dodged the bullet because_IS_NONE is never actually emitted (we turn it into a guard).

I think the best course of action is to remove thepatch_aarch64_33rx from3.13,3.14, andmain. Something like this probably belongs in the textual assembly optimization pass, since we actually reason about control flow there.

I'll open the PRs to remove the bug first. If somebody (perhaps from Arm@diegorusso@markshannon?) can prove this relaxation is valuable and wants to add it back onmain in that earlier pass, then feel free to do so.

Linked PRs

Metadata

Metadata

Assignees

Labels

3.13bugs and security fixes3.14bugs and security fixes3.15new features, bugs and security fixesinterpreter-core(Objects, Python, Grammar, and Parser dirs)topic-JITtype-crashA hard crash of the interpreter, possibly with a core dump

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions


    [8]ページ先頭

    ©2009-2026 Movatter.jp