Bug 262100

Summary:

[GTK] webkit2gtk crashes at runtime when GDS mitigation is enabled

Product:

WebKit

Reporter:

CodingCellist <thomas-e-hansen+webkitbugzilla>

Component:

WebKit2

Assignee:

Nobody <webkit-unassigned>

Status:

NEW

Severity:

Major

CC:

kkinnunen

Priority:

Version:

Other

Hardware:

OS:

Linux

Attachments:

Description	Flags
systemd-logs of a crashing startup (GDS mitigation enabled) using builtins for avx(2) detection (behaviour is the same on unmodified install)	none
Attempted, NON-FIXING patch	none

CodingCellist

Reported 2023-09-26 00:40:22 PDT

Created attachment 467871 [details] systemd-logs of a crashing startup (GDS mitigation enabled) using builtins for avx(2) detection (behaviour is the same on unmodified install) When the Gather Data Sampling (GDS) mitigation in the Linux kernel is enabled, webkit2gtk will crash due to incomplete AVX2 enumeration. The mitigation is known to cause problems in these cases [1]. I tried rebuilding webkit2gtk while using the `__builtin_cpu_supports` functions instead of the bitshift checks in `JavaScriptCore/assembler/MacroAssemblerX86Common.cpp:collectCPUFeatures`, but unfortunately this does not seem to be sufficient to fix the issue. There are some further logs and discussion on the Arch bug tracker [2]. [1]: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=553a5c03e90a6087e88f8ff878335ef0621536fb [2]: https://bugs.archlinux.org/task/79444

Attachments
systemd-logs of a crashing startup (GDS mitigation enabled) using builtins for avx(2) detection (behaviour is the same on unmodified install) (3.87 KB, text/x-log) 2023-09-26 00:40 PDT, CodingCellist	no flags	Details
Attempted, NON-FIXING patch (1.76 KB, patch) 2023-09-26 00:42 PDT, CodingCellist	no flags	Details Formatted Diff Diff
View All Add attachment proposed patch, testcase, etc.

CodingCellist

Comment 1 2023-09-26 00:42:51 PDT

Created attachment 467872 [details] Attempted, NON-FIXING patch

Note You need to log in before you can comment on or make changes to this bug.