From: Alex Bennée Date: Thu, 13 Jan 2022 16:55:50 +0000 (+0000) Subject: linux-user: expand reserved brk space for 64bit guests X-Git-Tag: v7.0.0-rc0~83^2~6 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=11d3672788b48548811810bdc0f3f7969662572d;p=thirdparty%2Fqemu.git linux-user: expand reserved brk space for 64bit guests A recent change to fix commpage allocation issues on 32bit hosts revealed another intermittent issue on s390x. The root cause was the headroom we give for the brk space wasn't enough causing the guest to attempt to map something on top of QEMUs own pages. We do not currently do anything to protect from this (see #555). By inspection the brk mmap moves around and top of the address range has been measured as far as 19Mb away from the top of the binary. As we chose a smallish number to keep 32bit on 32 bit feasible we only increase the gap for 64 bit guests. This does mean that 64-on-32 static binaries are more likely to fail to find a hole in the address space but that is hopefully a fairly rare situation. Signed-off-by: Alex Bennée Reviewed-by: Thomas Huth Message-Id: <20220113165550.4184455-1-alex.bennee@linaro.org> --- diff --git a/linux-user/elfload.c b/linux-user/elfload.c index d3274edfdb7..fc23a6dcf6d 100644 --- a/linux-user/elfload.c +++ b/linux-user/elfload.c @@ -2783,11 +2783,17 @@ static void load_elf_image(const char *image_name, int image_fd, * and the stack, lest they be placed immediately after * the data segment and block allocation from the brk. * - * 16MB is chosen as "large enough" without being so large - * as to allow the result to not fit with a 32-bit guest on - * a 32-bit host. + * 16MB is chosen as "large enough" without being so large as + * to allow the result to not fit with a 32-bit guest on a + * 32-bit host. However some 64 bit guests (e.g. s390x) + * attempt to place their heap further ahead and currently + * nothing stops them smashing into QEMUs address space. */ +#if TARGET_LONG_BITS == 64 + info->reserve_brk = 32 * MiB; +#else info->reserve_brk = 16 * MiB; +#endif hiaddr += info->reserve_brk; if (ehdr->e_type == ET_EXEC) {