From 4b10c4e95f8c20063d1e349eee233c8f99308289 Mon Sep 17 00:00:00 2001 From: David Spickett Date: Mon, 6 Oct 2025 11:15:06 +0100 Subject: [PATCH 1/3] [lldb][test] Wait for a file before attempting to attach to lldb-server test inferior Fixes #161510 Addresses the Linux parts of #138085 The situation we have to handle here is systems where Yama ptrace_scope set to 1. > 1 - restricted ptrace: a process must have a predefined relationship > with the inferior it wants to call PTRACE_ATTACH on. By default, > this relationship is that of only its descendants when the above > classic criteria is also met. To change the relationship, an > inferior can call prctl(PR_SET_PTRACER, debugger, ...) to declare > an allowed debugger PID to call PTRACE_ATTACH on the inferior. > Using PTRACE_TRACEME is unchanged. (https://www.kernel.org/doc/Documentation/security/Yama.txt) The inferior was addressing this by calling this at the start of main(): prctl(PR_SET_PTRACER, PR_SET_PTRACER_ANY, 0, 0, 0); Which is ok if lldb-server tries to attach after that call has happened, but there was nothing to synchronise this. So if the system was heavily loaded, the inferior may be stalled, delaying the call, causing lldb-server to fail to attach with EPERM (permission denied). We were not using any mechanism to retry the attach or wait for some signal from the inferior. Except we do do this in other tests, even other lldb-server tests. So I have adopted that mechanism to these tests: * The inferior is launched with `syncfile:` as its first argument. * It creates this file at ``, at a point where we know attaching has been allowed. * The test framework launches the inferior then waits for the file to appear. * This check is retried a few times, increasing the delay each time and eventually giving up. * Only once it has seen the file does it start lldb-server and tell it to attach to the inferior. I have tested this by insterting a `sleep()` call before the attach enable call and running the test on a machine with ptrace_scope set to 1. I was able to increase the sleep to 6 seconds before tests failed (when running just these tests, single threaded). With OS scheduling, you could be stalled indefinitely, so we may have to increase this timeout but this is easy to do with wait_for_file_on_target. The alternative is to have the test runner check ptrace_scope and only enable these on systems where it's 0. Would be good to keep them running if we can though. --- .../test/tools/lldb-server/gdbremote_testcase.py | 11 +++++++++-- lldb/test/API/tools/lldb-server/main.cpp | 6 +++++- 2 files changed, 14 insertions(+), 3 deletions(-) diff --git a/lldb/packages/Python/lldbsuite/test/tools/lldb-server/gdbremote_testcase.py b/lldb/packages/Python/lldbsuite/test/tools/lldb-server/gdbremote_testcase.py index 19c766996292e..aea6b9fe36b2c 100644 --- a/lldb/packages/Python/lldbsuite/test/tools/lldb-server/gdbremote_testcase.py +++ b/lldb/packages/Python/lldbsuite/test/tools/lldb-server/gdbremote_testcase.py @@ -444,13 +444,20 @@ def launch_process_for_attach( if not exe_path: exe_path = self.getBuildArtifact("a.out") - args = [] + # This file will be created once the inferior has enabled attaching. + sync_file_path = lldbutil.append_to_process_working_directory( + self, "process_ready" + ) + args = [f"syncfile:{sync_file_path}"] if inferior_args: args.extend(inferior_args) if sleep_seconds: args.append("sleep:%d" % sleep_seconds) - return self.spawnSubprocess(exe_path, args) + inferior = self.spawnSubprocess(exe_path, args) + lldbutil.wait_for_file_on_target(self, sync_file_path) + + return inferior def prep_debug_monitor_and_inferior( self, diff --git a/lldb/test/API/tools/lldb-server/main.cpp b/lldb/test/API/tools/lldb-server/main.cpp index 0e9323cce88cf..688c17a360b13 100644 --- a/lldb/test/API/tools/lldb-server/main.cpp +++ b/lldb/test/API/tools/lldb-server/main.cpp @@ -6,6 +6,7 @@ #include #include #include +#include #include #include #include @@ -265,7 +266,10 @@ int main(int argc, char **argv) { // Process command line args. for (int i = 1; i < argc; ++i) { std::string arg = argv[i]; - if (consume_front(arg, "stderr:")) { + if (consume_front(arg, "syncfile:")) { + // Write to this file to tell test framework that attaching is now possible. + std::ofstream(arg).close(); + } else if (consume_front(arg, "stderr:")) { // Treat remainder as text to go to stderr. fprintf(stderr, "%s\n", arg.c_str()); } else if (consume_front(arg, "retval:")) { From e02c77ebf480f9e122fb6f5e2e131fed8e3aa9d5 Mon Sep 17 00:00:00 2001 From: David Spickett Date: Mon, 6 Oct 2025 11:50:37 +0100 Subject: [PATCH 2/3] format --- lldb/test/API/tools/lldb-server/main.cpp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lldb/test/API/tools/lldb-server/main.cpp b/lldb/test/API/tools/lldb-server/main.cpp index 688c17a360b13..463ffc468916e 100644 --- a/lldb/test/API/tools/lldb-server/main.cpp +++ b/lldb/test/API/tools/lldb-server/main.cpp @@ -267,7 +267,8 @@ int main(int argc, char **argv) { for (int i = 1; i < argc; ++i) { std::string arg = argv[i]; if (consume_front(arg, "syncfile:")) { - // Write to this file to tell test framework that attaching is now possible. + // Write to this file to tell test framework that attaching is now + // possible. std::ofstream(arg).close(); } else if (consume_front(arg, "stderr:")) { // Treat remainder as text to go to stderr. From 677dba53055c230278ee81689a6aa02d7a2818af Mon Sep 17 00:00:00 2001 From: David Spickett Date: Mon, 6 Oct 2025 11:57:08 +0100 Subject: [PATCH 3/3] format --- lldb/test/API/tools/lldb-server/main.cpp | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lldb/test/API/tools/lldb-server/main.cpp b/lldb/test/API/tools/lldb-server/main.cpp index 463ffc468916e..7e84552b0f25d 100644 --- a/lldb/test/API/tools/lldb-server/main.cpp +++ b/lldb/test/API/tools/lldb-server/main.cpp @@ -5,8 +5,8 @@ #include #include #include -#include #include +#include #include #include #include