Apply fix for use-after-free in Envoy ThreadLocal Slot. #111
Conversation
|
So is this a cherry-pick of envoyproxy#8290? |
|
Seems it's envoyproxy#8290 + envoyproxy#8135 |
|
I'm OK as long as it's cherry-pick from upstream, @jplevyak can you include upstream references in commit message? |
|
|
|
If you'd like to include this into 1.3.3, this needs to get merged today, and the SHAs updated in istio/proxy and istio/istio. |
|
Jean-Rémy Bancel is going to test. |
…n O(1… (envoyproxy#7979) Signed-off-by: Xin Zhuang <stevenzzz@google.com>
|
RE: cherry-picks. We also need part of envoyproxy#7979, but it is not possible to cherry-pick all these because of changes to other bits of code which would require more cherry-picks, etc. Instead for this patch, I simply upgraded the thread_local code which is well encapsulated and the associated tests and then used the new API which is thread-safe for RDS. It is clear from the backtraces on istio/istio#17699 that RdsRouteConfigSubscription is the source of the problem. @lizan are there other places I should apply the new thread-safe API? |
…llThreads interface to Slot. (envoyproxy#8135) See the issue in envoyproxy#7902, this PR is to make the SlotImpl detachable from its owner, by introducing a Booker object wraps around a SlotImpl, which bookkeeps all the on-the-fly update callbacks. And on its destruction, if there are still on-the-fly callbacks, move the SlotImpl to an deferred-delete queue, instead of destructing the SlotImpl which may cause an SEGV error. More importantly, introduce a new runOnAllThreads(ThreadLocal::UpdateCb cb) API to Slot, which requests a Slot Owner to not assume that the Slot or its owner will out-live (in Main thread) the fired on-the-fly update callbacks, and should not capture the Slot or its owner in the update_cb. Picked RDS and config-providers-framework as examples to demonstrate that this change works. {i.e., changed from the runOnAllThreads(Event::PostCb) to the new runOnAllThreads(TLS::UpdateCb) interface. } Risk Level: Medium Testing: unit test Docs Changes: N/A Release Notes: N/A [Optional Fixes #Issue] envoyproxy#7902 Signed-off-by: Xin Zhuang <stevenzzz@google.com> Signed-off-by: John Plevyak <jplevyak@gmail.com>
…8290) Signed-off-by: Xin Zhuang <stevenzzz@google.com>
|
@lizan spoke too soon, I can get the cherry picks to merge.... stay tuned. |
jplevyak
force-pushed
the
release-1.3-use-after-free
branch
from
2ac505a to
4a11108
Compare
|
Updated to include the cherry picks. The first required a patch, so they are not completely clean, but at least we have the history. |
|
I tested it and I didn't see any segfault running the Knative E2E tests (it would consistently segfaults 3-4 times before the fix) 👍 |
|
Do we have cherrypicks for 1.2 and 1.1 on this ? |
Apply fix for use-after-free in Envoy ThreadLocal Slot. Signed-off-by: John Plevyak <jplevyak@gmail.com>
Apply fix for use-after-free in Envoy ThreadLocal Slot. Signed-off-by: John Plevyak <jplevyak@gmail.com>
Merge pull request #111 from jplevyak/release-1.3-use-after-free
Merge pull request #111 from jplevyak/release-1.3-use-after-free
add termlist link
Signed-off-by: John Plevyak jplevyak@gmail.com
For an explanation of how to fill out the fields, please see the relevant section
in PULL_REQUESTS.md
Description: Import thread local changes from envoyproxy/master and apply to RDS in the same manner as was applied in envoyproxy/master in order to address a segfault.
Risk Level:
Testing: unit tests (e2e in future)
Docs Changes:
Release Notes:
[Optional Fixes #Issue] istio/istio#17699
[Optional Deprecated:]