[PATCH RFC v2 0/4] mm: Introduce MAP_BELOW_HINT

[Liam R. Howlett]

* Steven Price <steven.price at arm.com> [241021 09:23]:
> On 09/09/2024 10:46, Kirill A. Shutemov wrote:
> > On Thu, Sep 05, 2024 at 10:26:52AM -0700, Charlie Jenkins wrote:
> >> On Thu, Sep 05, 2024 at 09:47:47AM +0300, Kirill A. Shutemov wrote:
> >>> On Thu, Aug 29, 2024 at 12:15:57AM -0700, Charlie Jenkins wrote:
> >>>> Some applications rely on placing data in free bits addresses allocated
> >>>> by mmap. Various architectures (eg. x86, arm64, powerpc) restrict the
> >>>> address returned by mmap to be less than the 48-bit address space,
> >>>> unless the hint address uses more than 47 bits (the 48th bit is reserved
> >>>> for the kernel address space).
> >>>>
> >>>> The riscv architecture needs a way to similarly restrict the virtual
> >>>> address space. On the riscv port of OpenJDK an error is thrown if
> >>>> attempted to run on the 57-bit address space, called sv57 [1].  golang
> >>>> has a comment that sv57 support is not complete, but there are some
> >>>> workarounds to get it to mostly work [2].
> > 
> > I also saw libmozjs crashing with 57-bit address space on x86.
> > 
> >>>> These applications work on x86 because x86 does an implicit 47-bit
> >>>> restriction of mmap() address that contain a hint address that is less
> >>>> than 48 bits.
> >>>>
> >>>> Instead of implicitly restricting the address space on riscv (or any
> >>>> current/future architecture), a flag would allow users to opt-in to this
> >>>> behavior rather than opt-out as is done on other architectures. This is
> >>>> desirable because it is a small class of applications that do pointer
> >>>> masking.
> > 
> > You reiterate the argument about "small class of applications". But it
> > makes no sense to me.
> 
> Sorry to chime in late on this - I had been considering implementing
> something like MAP_BELOW_HINT and found this thread.
> 
> While the examples of applications that want to use high VA bits and get
> bitten by future upgrades is not very persuasive. It's worth pointing
> out that there are a variety of somewhat horrid hacks out there to work
> around this feature not existing.
> 
> E.g. from my brief research into other code:
> 
>   * Box64 seems to have a custom allocator based on reading 
>     /proc/self/maps to allocate a block of VA space with a low enough 
>     address [1]
> 
>   * PHP has code reading /proc/self/maps - I think this is to find a 
>     segment which is close enough to the text segment [2]
> 
>   * FEX-Emu mmap()s the upper 128TB of VA on Arm to avoid full 48 bit
>     addresses [3][4]

Can't the limited number of applications that need to restrict the upper
bound use an LD_PRELOAD compatible library to do this?

> 
>   * pmdk has some funky code to find the lowest address that meets 
>     certain requirements - this does look like an ALSR alternative and 
>     probably couldn't directly use MAP_BELOW_HINT, although maybe this 
>     suggests we need a mechanism to map without a VA-range? [5]
> 
>   * MIT-Scheme parses /proc/self/maps to find the lowest mapping within 
>     a range [6]
> 
>   * LuaJIT uses an approach to 'probe' to find a suitable low address 
>     for allocation [7]
> 

Although I did not take a deep dive into each example above, there are
some very odd things being done, we will never cover all the use cases
with an exact API match.  What we have today can be made to work for
these users as they have figured ways to do it.

Are they pretty? no.  Are they common? no.  I'm not sure it's worth
plumbing in new MM code in for these users.

> The biggest benefit I see of MAP_BELOW_HINT is that it would allow a
> library to get low addresses without causing any problems for the rest
> of the application. The use case I'm looking at is in a library and 
> therefore a personality mode wouldn't be appropriate (because I don't 
> want to affect the rest of the application). Reading /proc/self/maps
> is also problematic because other threads could be allocating/freeing
> at the same time.

As long as you don't exhaust the lower limit you are trying to allocate
within - which is exactly the issue riscv is hitting.

I understand that you are providing examples to prove that this is
needed, but I feel like you are better demonstrating the flexibility
exists to implement solutions in different ways using todays API.

I think it would be best to use the existing methods and work around the
issue that was created in riscv while future changes could mirror amd64
and arm64.

...
> 
> 
> [1] https://sources.debian.org/src/box64/0.3.0+dfsg-1/src/custommem.c/
> [2] https://sources.debian.org/src/php8.2/8.2.24-1/ext/opcache/shared_alloc_mmap.c/#L62
> [3] https://github.com/FEX-Emu/FEX/blob/main/FEXCore/Source/Utils/Allocator.cpp
> [4] https://github.com/FEX-Emu/FEX/commit/df2f1ad074e5cdfb19a0bd4639b7604f777fb05c
> [5] https://sources.debian.org/src/pmdk/1.13.1-1.1/src/common/mmap_posix.c/?hl=29#L29
> [6] https://sources.debian.org/src/mit-scheme/12.1-3/src/microcode/ux.c/#L826
> [7] https://sources.debian.org/src/luajit/2.1.0+openresty20240815-1/src/lj_alloc.c/
> 
...

Thanks,
Liam