[binutils-gdb] gdb/dwarf: fix internal error when FDEs do not describe the CFA
Simon Marchi via Gdb-cvs <[email protected]>
| Newsgroups | gmane.comp.gdb.cvs |
|---|---|
| Message-ID | <[email protected]> |
https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=a910478f65a596817fde3ad4ee727e41ec8e0513 commit a910478f65a596817fde3ad4ee727e41ec8e0513 Author: Simon Marchi <[email protected]> Date: Wed Mar 18 16:27:23 2026 -0400 gdb/dwarf: fix internal error when FDEs do not describe the CFA New in v2: change how undefined_retaddr is set, to avoid regressions on AArch64 (among possibly others). This patch fixes an internal error problem that happens when a frame description entry does not define the Canonical Frame Address (CFA). This problem was initially reported downstream as a ROCgdb issue (see Bug trailer below), but I wrote a reproducer that uses the .debug_frame functionality added to the DWARF assembler in the previous patch. The error is: /home/smarchi/src/binutils-gdb/gdb/dwarf2/frame.c:1046: internal-error: Unknown CFA rule. The original bug was encountered while debugging a GPU kernel written with Triton [1]. From what I understand, the generated kernel does not really use a stack, so the .debug_frame contents generated is quite bare: $ readelf --debug-dump=frames k Contents of the .debug_frame section: 00000000 000000000000000c ffffffff CIE Version: 4 Augmentation: "" Pointer Size: 8 Segment Size: 0 Code alignment factor: 4 Data alignment factor: 4 Return address column: 16 DW_CFA_nop 00000010 0000000000000014 00000000 FDE cie=00000000 pc=0000000000001600..0000000000001704 For those who don't speak fluent .debug_frame, what we see here is a Frame Description Entry (FDE) that doesn't define any register rule, referring to a Common Information Entry (CIE) that also doesn't define any initial register rule. This is equivalent to having no unwind information at all. One question is: why generate these at all? I suppose that this is an edge case, that the compiler is written in a way that that presumes there will always be some unwind info. That there is no "if unwind info is empty, skip emitting the FDE" check. Anyway, the important thing for us is that these can be found in the wild, so GDB shouldn't crash. The fix consists of handling CFA_UNSET in the dwarf2_frame_cache switch. CFA_UNSET is the initial state when we start interpreting a CFA program, meaning that we don't know yet how the CFA is defined. In our case, it remains unset after interpreting the CFA program. With just the fix above, we get: (gdb) bt #0 0x000055555555511d in main () Backtrace stopped: previous frame identical to this frame (corrupt stack?) Which is good (better than crashing), but it would be good to avoid the error. To do so, set the undefined_retaddr flag to true. This has two effects: - dwarf2_frame_this_id won't try to build a frame id from the CFA (which is good, we don't have a CFA) - dwarf2_frame_unwind_stop_reason will return UNWIND_OUTERMOST, which is the most accurate thing we can return here (there is no outer frame) The result is the expected: (gdb) bt #0 0x000055555555511d in main () My initial implementation changed this condition: if (fs.retaddr_column < fs.regs.reg.size () && fs.regs.reg[fs.retaddr_column].how == DWARF2_FRAME_REG_UNDEFINED) cache->undefined_retaddr = true; such that we would enter it if fs.retaddr_column <+ fs.regs.reg.size () However, this broke the unwinding on AArch64 (and possibly others). Add a test case written using the DWARF assembler that reproduces the issue. [1] https://triton-lang.org/ Change-Id: I67c717ff03a41c0630a73ce9549d88ff363e8cea Bug: https://github.com/ROCm/ROCgdb/issues/47 Approved-By: Tom Tromey <[email protected]> Diff: --- gdb/dwarf2/frame.c | 4 ++ gdb/testsuite/gdb.dwarf2/debug-frame-no-cfa.exp | 54 +++++++++++++++++++++++++ 2 files changed, 58 insertions(+) diff --git a/gdb/dwarf2/frame.c b/gdb/dwarf2/frame.c index 152bebef0e3..2301d914637 100644 --- a/gdb/dwarf2/frame.c +++ b/gdb/dwarf2/frame.c @@ -962,6 +962,10 @@ dwarf2_frame_cache (const frame_info_ptr &this_frame, void **this_cache) /* Calculate the CFA. */ switch (fs.regs.cfa_how) { + case CFA_UNSET: + cache->undefined_retaddr = true; + return cache; + case CFA_REG_OFFSET: cache->cfa = read_addr_from_reg (this_frame, fs.regs.cfa_reg); if (fs.armcc_cfa_offsets_reversed) diff --git a/gdb/testsuite/gdb.dwarf2/debug-frame-no-cfa.exp b/gdb/testsuite/gdb.dwarf2/debug-frame-no-cfa.exp new file mode 100644 index 00000000000..8442b5c3ddb --- /dev/null +++ b/gdb/testsuite/gdb.dwarf2/debug-frame-no-cfa.exp @@ -0,0 +1,54 @@ +# Copyright 2026 Free Software Foundation, Inc. + +# This program is free software; you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation; either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see <http://www.gnu.org/licenses/>. + +# Test GDB against an FDE in the .debug_frame section that doesn't set a rule +# for the CFA. + +load_lib dwarf.exp + +require dwarf2_support is_x86_64_m64_target + +standard_testfile main.c -dw.S + +set asm_file [standard_output_file $srcfile2] +Dwarf::assemble $asm_file { + get_func_info main + + frame { + declare_labels cie_label + + cie_label: CIE { + return_address_register 16 + } {} + + FDE $cie_label $main_start $main_len {} { + } + } +} + +if { [prepare_for_testing "failed to prepare" ${testfile} \ + [list $srcfile $asm_file] {nodebug}] } { + return +} + +if { ![runto_main] } { + return +} + +# This would cause an internal error in dwarf2_frame_cache. +# +# Make sure to match a single line, so that the test fails if an error +# about stack unwind is printed after frame 0. +gdb_test "backtrace" "^#0 \[^\r\n\]* main \[^\r\n\]*"