Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Linux] ctypes packs bitfields Incorrectly #73939

Closed
CharlesMachalow mannequin opened this issue Mar 8, 2017 · 24 comments
Closed

[Linux] ctypes packs bitfields Incorrectly #73939

CharlesMachalow mannequin opened this issue Mar 8, 2017 · 24 comments
Labels
3.9 only security fixes 3.10 only security fixes 3.11 only security fixes topic-ctypes type-bug An unexpected behavior, bug, or error

Comments

@CharlesMachalow
Copy link
Mannequin

CharlesMachalow mannequin commented Mar 8, 2017

BPO 29753
Nosy @terryjreedy, @amauryfa, @jaraco, @abalkin, @meadori, @eryksun, @ztane, @pablogsal, @mleroy003, @miss-islington, @shihai1991, @karlding, @FFY00, @thesamprice
PRs
  • bpo-29753: fix merging packed bitfields in ctypes struct/union #19850
  • bpo-29753: revert 0d7ad9f (GH-19850) #27085
  • [3.10] bpo-29753: revert 0d7ad9f (GH-19850) (GH-27085) #27086
  • Files
  • test.py: File to test with
  • ctypes-bitfields-bug.tar.gz: tar file containing a test program in C and Python 3, plus a makefile. to tets : make rebuild ; make test
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = None
    closed_at = None
    created_at = <Date 2017-03-08.00:36:40.502>
    labels = ['ctypes', 'type-bug', '3.9', '3.10', '3.11']
    title = '[Linux] ctypes packs bitfields Incorrectly'
    updated_at = <Date 2021-07-17.02:08:19.325>
    user = 'https://bugs.python.org/CharlesMachalow'

    bugs.python.org fields:

    activity = <Date 2021-07-17.02:08:19.325>
    actor = 'terry.reedy'
    assignee = 'none'
    closed = False
    closed_date = None
    closer = None
    components = ['ctypes']
    creation = <Date 2017-03-08.00:36:40.502>
    creator = 'Charles Machalow'
    dependencies = []
    files = ['46708', '47511']
    hgrepos = []
    issue_num = 29753
    keywords = ['patch']
    message_count = 21.0
    messages = ['289193', '289209', '289211', '289212', '301020', '306410', '306434', '306466', '314778', '343998', '363440', '367950', '387821', '392460', '397255', '397257', '397259', '397260', '397261', '397262', '397679']
    nosy_count = 15.0
    nosy_names = ['terry.reedy', 'amaury.forgeotdarc', 'jaraco', 'belopolsky', 'meador.inge', 'eryksun', 'ztane', 'Charles Machalow', 'pablogsal', 'mleroy003', 'miss-islington', 'shihai1991', 'karlding', 'FFY00', 'thesamprice']
    pr_nums = ['19850', '27085', '27086']
    priority = 'normal'
    resolution = None
    stage = 'patch review'
    status = 'open'
    superseder = None
    type = 'behavior'
    url = 'https://bugs.python.org/issue29753'
    versions = ['Python 3.9', 'Python 3.10', 'Python 3.11']

    Linked PRs

    @CharlesMachalow
    Copy link
    Mannequin Author

    CharlesMachalow mannequin commented Mar 8, 2017

    There appears to be a bug related to sizing/packing of ctypes Structures on Linux. I'm not quite sure how, but this structure:

    class MyStructure(Structure):
        _pack_      = 1
        _fields_    = [ 
                          ("P",       c_uint16),    # 2 Bytes
                          ("L",       c_uint16, 9),
                          ("Pro",     c_uint16, 1),
                          ("G",       c_uint16, 1),
                          ("IB",      c_uint16, 1),
                          ("IR",      c_uint16, 1),
                          ("R",       c_uint16, 3), # 4 Bytes
                          ("T",       c_uint32, 10),
                          ("C",       c_uint32, 20),
                          ("R2",      c_uint32, 2)  # 8 Bytes
                      ]

    Gives back a sizeof of 8 on Windows and 10 on Linux. The inconsistency makes it difficult to have code work cross-platform.

    Running the given test.py file will print out the size of the structure on your platform.

    Tested with Python 2.7.6 and Python 3.4.3 (builtin to Ubuntu 14.04), Python 2.7.13, (built from source) both on Ubuntu 14.04. On Linux all Python builds were 32 bit.

    On Windows I tried with 2.7.7 (both 32 and 64 bit).

    I believe on both platforms it should return a sizeof 8.

    @CharlesMachalow CharlesMachalow mannequin added topic-ctypes type-bug An unexpected behavior, bug, or error labels Mar 8, 2017
    @CharlesMachalow
    Copy link
    Mannequin Author

    CharlesMachalow mannequin commented Mar 8, 2017

    Took a quick look at the c code for this. The area at fault appears to be this section in cfield.c:

    #ifndef MS_WIN32
        } else if (bitsize /* this is a bitfield request */
            && *pfield_size /* we have a bitfield open */
            && dict->size * 8 >= *pfield_size
            && (*pbitofs + bitsize) <= dict->size * 8) {
            /* expand bit field */
            fieldtype = EXPAND_BITFIELD;
    #endif

    The problem seems to be after the end of the 2nd c_uint16, it seems to think that the next 10 bytes should extend that c_uint16 to a c_uint32 instead of taking the type as the beginning of a new c_uint32. So I guess it is making the structure something like this:

                      ("P",       c_uint16),
                      ("L",       c_uint32, 9),
                      ("Pro",     c_uint32, 1),
                      ("G",       c_uint32, 1),
                      ("IB",      c_uint32, 1),
                      ("IR",      c_uint32, 1),
                      ("R",       c_uint32, 3),
                      ("T",       c_uint32, 10),
                      # And now this needs an extra 6 bits of padding to fill the c_uint32
                      ("C",       c_uint32, 20),
                      ("R2",      c_uint32, 2)
                      # And now this needs an extra 10 bits of padding to fill the c_uint32.
    

    I guess that is how we get to 10... instead of the expected 8 bytes. I don't believe that this behavior is desired nor really makes logical sense.

    @CharlesMachalow
    Copy link
    Mannequin Author

    CharlesMachalow mannequin commented Mar 8, 2017

    Some more debug with print statements in the c code seems to confirm my suspicion:

    bitsize, pfield_size, bitofs, dict->size prints were added just above the if chain to determine fieldtype and fieldtype was just after that if chain. That code looks something like this:

    printf("bitsize: %d\n" , (int)bitsize);
    printf("pfield_size: %u\n", (size_t)*pfield_size);
    printf("bitofs: %d\n", (int)*pbitofs);
    printf("dict->size: %d\n", (int)dict->size);
        if (bitsize /* this is a bitfield request */
            && *pfield_size /* we have a bitfield open */
    #ifdef MS_WIN32
            /* MSVC, GCC with -mms-bitfields */
            && dict->size * 8 == *pfield_size
    #else
            /* GCC */
            && dict->size * 8 <= *pfield_size
    #endif
            && (*pbitofs + bitsize) <= *pfield_size) {
            /* continue bit field */
            fieldtype = CONT_BITFIELD;
    #ifndef MS_WIN32
        } else if (bitsize /* this is a bitfield request */
            && *pfield_size /* we have a bitfield open */
            && dict->size * 8 >= *pfield_size
            && (*pbitofs + bitsize) <= dict->size * 8) {
            /* expand bit field */
            fieldtype = EXPAND_BITFIELD;
    #endif
        } else if (bitsize) {
            /* start new bitfield */
            fieldtype = NEW_BITFIELD;
            *pbitofs = 0;
            *pfield_size = dict->size * 8;
        } else {
            /* not a bit field */
            fieldtype = NO_BITFIELD;
            *pbitofs = 0;
            *pfield_size = 0;
        }
    
    printf("Fieldtype: %d\n------\n", fieldtype);

    And the run with the custom-built Python 2.7.13:

    >>> from test import *
    bitsize: 0
    pfield_size: 0
    bitofs: 255918304
    dict->size: 2
    Fieldtype: 0

    bitsize: 9
    pfield_size: 0
    bitofs: 0
    dict->size: 2
    Fieldtype: 1
    ------
    bitsize: 1
    pfield_size: 16
    bitofs: 9
    dict->size: 2
    Fieldtype: 2
    ------
    bitsize: 1
    pfield_size: 16
    bitofs: 10
    dict->size: 2
    Fieldtype: 2
    ------
    bitsize: 1
    pfield_size: 16
    bitofs: 11
    dict->size: 2
    Fieldtype: 2
    ------
    bitsize: 1
    pfield_size: 16
    bitofs: 12
    dict->size: 2
    Fieldtype: 2
    ------
    bitsize: 3
    pfield_size: 16
    bitofs: 13
    dict->size: 2
    Fieldtype: 2
    ------
    bitsize: 10
    pfield_size: 16
    bitofs: 16
    dict->size: 4
    Fieldtype: 3
    ------
    bitsize: 20
    pfield_size: 32
    bitofs: 26
    dict->size: 4
    Fieldtype: 1
    ------
    bitsize: 2
    pfield_size: 32
    bitofs: 20
    dict->size: 4
    Fieldtype: 2
    ------

    10
    >>> MyStructure.P
    <Field type=c_ushort, ofs=0, size=2>
    >>> MyStructure.T
    <Field type=c_uint, ofs=2:16, bits=10>
    >>> MyStructure.R
    <Field type=c_ushort, ofs=2:13, bits=3>
    >>> MyStructure.P
    <Field type=c_ushort, ofs=0, size=2>
    >>> MyStructure.L
    <Field type=c_ushort, ofs=2:0, bits=9>
    >>> MyStructure.Pro
    <Field type=c_ushort, ofs=2:9, bits=1>
    >>> MyStructure.R
    <Field type=c_ushort, ofs=2:13, bits=3>
    >>> MyStructure.T
    <Field type=c_uint, ofs=2:16, bits=10>
    >>> MyStructure.C
    <Field type=c_uint, ofs=6:0, bits=20>

    @eryksun
    Copy link
    Contributor

    eryksun commented Mar 8, 2017

    To make it simpler to diagram the fields, I've rewritten your structure using field names A-J:

        import ctypes
    
        class MyStructure(ctypes.Structure):
            _pack_ = 1
            _fields_ = (('A', ctypes.c_uint16),     # 2 bytes
                        ('B', ctypes.c_uint16, 9),
                        ('C', ctypes.c_uint16, 1),
                        ('D', ctypes.c_uint16, 1),
                        ('E', ctypes.c_uint16, 1),
                        ('F', ctypes.c_uint16, 1),
                        ('G', ctypes.c_uint16, 3),  # 4 bytes
                        ('H', ctypes.c_uint32, 10),
                        ('I', ctypes.c_uint32, 20),
                        ('J', ctypes.c_uint32, 2))  # 8 bytes

    ctypes is attempting to extend the bitfield for H by switching to a c_uint storage unit with an offset of 2 bytes and adding H field with a 16-bit offset:

        >>> MyStructure.H
        <Field type=c_uint, ofs=2:16, bits=10>

    Here's the correct layout:

    |     uint16    |     uint16    |            uint32             
    |------16-------|------16-------|---10----|--------20---------|-
    A---------------B--------CDEFG--H---------I-------------------J-
    

    and here's the layout that ctypes creates, which wastes 2 bytes:

                    |             uint32            |
    |     uint16    |     uint16    |               |             uint32            
    |------16-------|------16-------|---10----|--6--|--------20---------|-|---10\----
    A---------------B--------CDEFG--H---------------I-------------------J\-----------
    

    The current strategy for extending bitfields to work like gcc on Linux is obviously failing us here. Hopefully someone can flesh out the exact rules to make this code accurate. Bitfields are such a pain.

    @eryksun eryksun added the 3.7 (EOL) end of life label Mar 8, 2017
    @ztane
    Copy link
    Mannequin

    ztane mannequin commented Aug 30, 2017

    To Charles first: "Gives back a sizeof of 8 on Windows and 10 on Linux. The inconsistency makes it difficult to have code work cross-platform."

    The bitfields in particular and ctypes in general have *never* been meant to be cross-platform - instead they just must need to match the particular C compiler behaviour of the platform, thus the use of these for cross platform work is ill-advised - perhaps you should just use the struct module instead.

    However, that said, on Linux, sizeof these structures - packed or not - do not match the output from GCC; unpacked one has sizeof 12 and packed 10 on my Python 3.5, but they're both 8 bytes on GCC. This is a real bug.

    GCC says that the bitfield behaviour is: https://gcc.gnu.org/onlinedocs/gcc-4.9.1/gcc/Structures-unions-enumerations-and-bit-fields-implementation.html

    Whether a bit-field can straddle a storage-unit boundary (C90 6.5.2.1, C99 and C11 6.7.2.1).

    Determined by ABI.
    The order of allocation of bit-fields within a unit (C90 6.5.2.1, C99 and C11 6.7.2.1).

    Determined by ABI.
    The alignment of non-bit-field members of structures (C90 6.5.2.1, C99 and C11 6.7.2.1).

    Determined by ABI.

    Thus, the actual behaviour need to be checked from the API documentation of the relevant platform. However - at least for unpacked structs - the x86-64 behaviour is that a bitfield may not cross an addressable unit.

    @ztane ztane mannequin changed the title Ctypes Packing Incorrectly - Linux Ctypes Packing Bitfields Incorrectly - Linux Aug 30, 2017
    @CharlesMachalow
    Copy link
    Mannequin Author

    CharlesMachalow mannequin commented Nov 17, 2017

    Antti, is there a place in the ctypes documentation that explicitly says ctypes is not meant to be used cross-platform? If not, shouldn't that be mentioned?

    I think ultimately ctypes should default to standard OS/compiler behavior, but should allow the flexibility for one to override for cross-platform interchangeability.

    In the C++ code here, the code is explicitly checking if Windows (or GCC) to choose behavior. In theory, that could be changed to allow runtime-choice for packing behavior.

    Of course, that is probably best for a feature issue. For this one, I'd just like to have the behavior on Linux match GCC, as that is the definitive bug here as our example has shown.

    @ztane
    Copy link
    Mannequin

    ztane mannequin commented Nov 17, 2017

    "Antti, is there a place in the ctypes documentation that explicitly says ctypes is not meant to be used cross-platform? If not, shouldn't that be mentioned?"

    I don't know about that, but the thing is nowhere does it say that it is meant to be used cross-platform. It just says it allows defining C types. It is somewhat implied that C types are not cross-platform at binary level, at all.

    @CharlesMachalow
    Copy link
    Mannequin Author

    CharlesMachalow mannequin commented Nov 18, 2017

    All of Python is implicitly cross platform. If something isn't actually cross platform, it should be mentioned explicitly in the documentation. For example see the mmap documentation, it explicitly say on Unix it does X, on Windows it does Y. We should be as explicit as possible for ctypes to say on Windows we expect packing like X (GCC) and on Linux we expect packing like Y (VC++).

    @mleroy003
    Copy link
    Mannequin

    mleroy003 mannequin commented Apr 1, 2018

    No solution found to solve this issue ?
    The anomaly is not a cross platform inconsistency, it is an inconsistency between the behaviours of GCC and ctypes, both under Linux or Cygwin, when defining packed structures :

    [Marc@I7-860 ~/dev/python/ctypes-bitfields-bug] make test
    ./bitfield_test1
    sizeof(BF32) = 12 ; Memory dump of BF32 = 0xffffffffffffffffffffffff
    sizeof(BF64) = 12 ; Memory dump of BF64 = 0xffffffffffffffffffffffff
    python3 bitfield_test1.py
    sizeof(BF32) = 16 ; Memory dump of BF32 = 0xffffff00ffffff00ffffff00ffffff00
    sizeof(BF64) = 16 ; Memory dump of BF64 = 0xffffffffffff0000ffffffffffff0000

    @karlding
    Copy link
    Mannequin

    karlding mannequin commented May 30, 2019

    I believe the example can be simplified to the following:

            class MyStructure(ctypes.Structure):
                _pack_ = 1
                _fields_ = [('A', ctypes.c_uint32, 8)]
        assert ctypes.sizeof(MyStructure) == 1
    

    Here, ctypes.sizeof returns 4 on my machine (64-bit Ubuntu 18.04 LTS), while I would expect it to return 1 like GCC. This is using a tree checked out at 33ce3f0, if it makes a difference.

    If we compile the equivalent C code (on 64-bit Ubuntu 18.04 LTS):

            #include <stdio.h>
            #include <stdint.h>
            #include <stdalign.h>
    
            struct my_structure_uint32 {
              uint32_t a : 8;
            } __attribute__((packed));
    
            int main(int argc, char *argv[]) {
              printf("sizeof(struct my_structure_uint32): %d\n", sizeof(struct my_structure_uint32));
              printf("alignof(struct my_structure_uint32): %d\n", alignof(struct my_structure_uint32));
              return 0;
            }

    Using the following GCC invocation:

        gcc temp.c -o test && ./test
    

    We get the following result:

        sizeof(struct my_structure_uint32): 1
        alignof(struct my_structure_uint32): 1
    

    However, if I compile with MSVC bitfields:

        gcc -mms-bitfields test.c -o test && ./test
    

    We get the following result:

        sizeof(struct my_structure_uint32): 4
        alignof(struct my_structure_uint32): 1
    

    Similarly, adding a second and third 8-bit wide bitfield member fails and returns 4, instead of the expected 2 and 3.

    This is not just c_uint32, c_uint16 and c_int also exhibit the same behaviour:

            class MyStructure(ctypes.Structure):
                _pack_ = 1
                _fields_ = [('A', ctypes.c_uint16, 8)]
        assert ctypes.sizeof(MyStructure) == 1
    

    @thesamprice
    Copy link
    Mannequin

    thesamprice mannequin commented Mar 5, 2020

    I ran into this bug on mac and submitted a duplicate issue of 39858

    If you add the check *pfield_size != *pbitofs it fixes this bug.

    #ifndef MS_WIN32
        } else if (bitsize /* this is a bitfield request */
            && *pfield_size /* we have a bitfield open */
            && *pfield_size != *pbitofs /* Current field has been filled, start new one */
            && dict->size * 8 >= *pfield_size
            && (*pbitofs + bitsize) <= dict->size * 8) {
            /* expand bit field */
            fieldtype = EXPAND_BITFIELD;
    #endif
    
    
    However this would not fix the results where you expand a bitfield around 3 bytes.
    clang produces the 3 bytes if you try and expand around.
    #include <stdint.h>
    #include <stdio.h>
    typedef struct testA{
        uint8_t a0 : 7;
        uint8_t a1 : 7;
        uint8_t a2 : 7;
        uint8_t a3 : 3;
    }  __attribute__((packed)) testA;
    
    int main(){
        printf("%d\n", sizeof(testA)); /* Prints out 3 */
        return 0;
    }
    python prints out a size of 4.

    @FFY00
    Copy link
    Member

    FFY00 commented May 3, 2020

    My patches should resolve this fully. Please test it to make sure I did not miss any corner case.

    #19850

    @pitrou pitrou added 3.8 (EOL) end of life 3.9 only security fixes labels Jun 29, 2020
    @miss-islington
    Copy link
    Contributor

    New changeset 0d7ad9f by Filipe Laíns in branch 'master':
    bpo-29753: fix merging packed bitfields in ctypes struct/union (GH-19850)
    0d7ad9f

    @eryksun eryksun added 3.10 only security fixes and removed 3.7 (EOL) end of life labels Mar 30, 2021
    @eryksun eryksun changed the title Ctypes Packing Bitfields Incorrectly - Linux [Linux] ctypes packs bitfields Incorrectly Mar 30, 2021
    @FFY00
    Copy link
    Member

    FFY00 commented Apr 30, 2021

    I forgot to ping here, the patch went in and should be available in 3.10, so this can be closed now.

    @jaraco jaraco closed this as completed Apr 30, 2021
    @FFY00
    Copy link
    Member

    FFY00 commented Jul 11, 2021

    Unfortunately, the fix has some unforeseen side-effects, so we'll have to revert it :/

    @FFY00 FFY00 added the 3.11 only security fixes label Jul 11, 2021
    @FFY00 FFY00 reopened this Jul 11, 2021
    @pablogsal
    Copy link
    Member

    New changeset e14d5ae by Filipe Laíns in branch 'main':
    bpo-29753: revert 0d7ad9f (GH-19850) (GH-27085)
    e14d5ae

    @miss-islington
    Copy link
    Contributor

    New changeset 42da46e by Miss Islington (bot) in branch '3.10':
    bpo-29753: revert 0d7ad9f (GH-19850) (GH-27085)
    42da46e

    @CharlesMachalow
    Copy link
    Mannequin Author

    CharlesMachalow mannequin commented Jul 11, 2021

    Maybe we need to add a __packing__ option to specify how packing should
    work and default to legacy behavior. Then allow users to specify if they
    want similar behavior cross-os.

    Otherwise changing this does change packing for existing users and can lead
    to breakages.

    What exactly was the hit regression here?

    On Sun, Jul 11, 2021, 10:47 AM miss-islington <report@bugs.python.org>
    wrote:

    miss-islington <mariatta.wijaya+miss-islington@gmail.com> added the
    comment:

    New changeset 42da46e by Miss Islington
    (bot) in branch '3.10':
    bpo-29753: revert 0d7ad9f (GH-19850) (GH-27085)

    42da46e

    ----------


    Python tracker <report@bugs.python.org>
    <https://bugs.python.org/issue29753\>


    @thesamprice
    Copy link
    Mannequin

    thesamprice mannequin commented Jul 11, 2021

    I’ve been looking forward to this fix. The old implementation did not
    match what my LLVM compiler generated.

    On Sun, Jul 11, 2021 at 2:52 PM Charles Machalow <report@bugs.python.org>
    wrote:

    Charles Machalow <csm10495@gmail.com> added the comment:

    Maybe we need to add a __packing__ option to specify how packing should
    work and default to legacy behavior. Then allow users to specify if they
    want similar behavior cross-os.

    Otherwise changing this does change packing for existing users and can lead
    to breakages.

    What exactly was the hit regression here?

    On Sun, Jul 11, 2021, 10:47 AM miss-islington <report@bugs.python.org>
    wrote:

    >
    > miss-islington <mariatta.wijaya+miss-islington@gmail.com> added the
    > comment:
    >
    >
    > New changeset 42da46e by Miss Islington
    > (bot) in branch '3.10':
    > bpo-29753: revert 0d7ad9f (GH-19850) (GH-27085)
    >
    >
    42da46e
    >
    >
    > ----------
    >
    > _______________________________________
    > Python tracker <report@bugs.python.org>
    > <https://bugs.python.org/issue29753\>
    > _______________________________________
    >

    ----------


    Python tracker <report@bugs.python.org>
    <https://bugs.python.org/issue29753\>


    --
    Thank you,

    Sam Price
    (707) 742-3726

    @FFY00
    Copy link
    Member

    FFY00 commented Jul 11, 2021

    Sorry for not posting a link here, see #19850 (comment).

    The issue is not legacy behavior, it's that the fix messed up the functionality and that was not caught by tests. I don't have much time to look into why that happened right now, but I will when I get a chance. Sorry!

    @terryjreedy
    Copy link
    Member

    Charles and Sam: In the future, when responding by email, please delete the email you are responding to, except maybe for a line. When your response is posted to web page, the quote is redundant and distracting.

    @matthiasgoergens
    Copy link
    Contributor

    matthiasgoergens commented Oct 9, 2022

    @FFY00 The current code is buggy, but both your fix and @CharlesMachalow misunderstand what _pack_ is supposed to do. At least according to the docs. See https://github.com/python/cpython/pull/97702/files#r990785728

    It's not trivial to add support for GCC's packing.

    @matthiasgoergens
    Copy link
    Contributor

    I’ve been looking forward to this fix. The old implementation did not match what my LLVM compiler generated.

    You might like my fix in #97702

    @encukou
    Copy link
    Member

    encukou commented Sep 10, 2024

    Fixed in #97702, the reproducer is now part of tests (as the Example_gh_73939 classe)

    @encukou encukou closed this as completed Sep 10, 2024
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Labels
    3.9 only security fixes 3.10 only security fixes 3.11 only security fixes topic-ctypes type-bug An unexpected behavior, bug, or error
    Projects
    None yet
    Development

    No branches or pull requests

    9 participants