summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGeorge Kadianakis <desnacked@riseup.net>2019-09-30 13:47:53 +0300
committerGeorge Kadianakis <desnacked@riseup.net>2019-09-30 13:47:53 +0300
commitae8d36db313a548d9828384f2131f481640c6173 (patch)
tree424a7c540b55a4f3c2e8258f548a04c6d0797651
parentfc760c5088394741ac8c83706be6b737aef79beb (diff)
parent749c2e1761c753992fb2549e7ee912e568f563d6 (diff)
downloadtor-ae8d36db313a548d9828384f2131f481640c6173.tar.gz
tor-ae8d36db313a548d9828384f2131f481640c6173.zip
Merge branch 'tor-github/pr/1302'
-rw-r--r--changes/bug316149
-rw-r--r--src/lib/err/backtrace.c26
-rw-r--r--src/lib/log/log.c5
-rw-r--r--src/lib/sandbox/sandbox.c1
4 files changed, 37 insertions, 4 deletions
diff --git a/changes/bug31614 b/changes/bug31614
new file mode 100644
index 0000000000..c425a9fcd4
--- /dev/null
+++ b/changes/bug31614
@@ -0,0 +1,9 @@
+ o Minor bugfixes (logging):
+ - Disable backtrace signal handlers when shutting down tor.
+ Fixes bug 31614; bugfix on 0.2.5.2-alpha.
+ - Add a missing check for HAVE_PTHREAD_H, because the backtrace code uses
+ mutexes. Fixes bug 31614; bugfix on 0.2.5.2-alpha.
+ o Documentation:
+ - Explain why we can't destroy the backtrace buffer mutex. Explain why
+ we don't need to destroy the log mutex.
+ Closes ticket 31736.
diff --git a/src/lib/err/backtrace.c b/src/lib/err/backtrace.c
index c2011285c0..8bc7e6965c 100644
--- a/src/lib/err/backtrace.c
+++ b/src/lib/err/backtrace.c
@@ -57,7 +57,8 @@
#include "lib/err/torerr.h"
#if defined(HAVE_EXECINFO_H) && defined(HAVE_BACKTRACE) && \
- defined(HAVE_BACKTRACE_SYMBOLS_FD) && defined(HAVE_SIGACTION)
+ defined(HAVE_BACKTRACE_SYMBOLS_FD) && defined(HAVE_SIGACTION) && \
+ defined(HAVE_PTHREAD_H)
#define USE_BACKTRACE
#endif
@@ -190,13 +191,15 @@ dump_stack_symbols_to_error_fds(void)
backtrace_symbols_fd(cb_buf, (int)depth, fds[i]);
}
+/* The signals that we want our backtrace handler to trap */
+static int trap_signals[] = { SIGSEGV, SIGILL, SIGFPE, SIGBUS, SIGSYS,
+ SIGIO, -1 };
+
/** Install signal handlers as needed so that when we crash, we produce a
* useful stack trace. Return 0 on success, -errno on failure. */
static int
install_bt_handler(void)
{
- int trap_signals[] = { SIGSEGV, SIGILL, SIGFPE, SIGBUS, SIGSYS,
- SIGIO, -1 };
int i, rv=0;
struct sigaction sa;
@@ -232,6 +235,23 @@ install_bt_handler(void)
static void
remove_bt_handler(void)
{
+ int i;
+
+ struct sigaction sa;
+
+ memset(&sa, 0, sizeof(sa));
+ sa.sa_handler = SIG_DFL;
+ sigfillset(&sa.sa_mask);
+
+ for (i = 0; trap_signals[i] >= 0; ++i) {
+ /* remove_bt_handler() is called on shutdown, from low-level code.
+ * It's not a fatal error, so we just ignore it. */
+ (void)sigaction(trap_signals[i], &sa, NULL);
+ }
+
+ /* cb_buf_mutex is statically initialised, so we can not destroy it.
+ * If we destroy it, and then re-initialise tor, all our backtraces will
+ * fail. */
}
#endif /* defined(USE_BACKTRACE) */
diff --git a/src/lib/log/log.c b/src/lib/log/log.c
index 4463bff618..d2002f6eae 100644
--- a/src/lib/log/log.c
+++ b/src/lib/log/log.c
@@ -832,7 +832,10 @@ logs_free_all(void)
}
/* We _could_ destroy the log mutex here, but that would screw up any logs
- * that happened between here and the end of execution. */
+ * that happened between here and the end of execution.
+ * If tor is re-initialized, log_mutex_initialized will still be 1. So we
+ * won't trigger any undefined behaviour by trying to re-initialize the
+ * log mutex. */
}
/** Close signal-safe log files.
diff --git a/src/lib/sandbox/sandbox.c b/src/lib/sandbox/sandbox.c
index b652397f5a..faaf463f29 100644
--- a/src/lib/sandbox/sandbox.c
+++ b/src/lib/sandbox/sandbox.c
@@ -294,6 +294,7 @@ sb_rt_sigaction(scmp_filter_ctx ctx, sandbox_cfg_t *filter)
unsigned i;
int rc;
int param[] = { SIGINT, SIGTERM, SIGPIPE, SIGUSR1, SIGUSR2, SIGHUP, SIGCHLD,
+ SIGSEGV, SIGILL, SIGFPE, SIGBUS, SIGSYS, SIGIO,
#ifdef SIGXFSZ
SIGXFSZ
#endif