Live data from Hacker News

I think I found a Mac kernel bug (2018)

jvns.ca

51–60 of 71 posts

Re: I think I found a Mac kernel bug (2018)

#51

Earlier quoted context omitted.

If it doesn't end up with the relevant people, that's Apple's problem.

It does eventually. If you want a prompt response you should contact product security.

Shouldn't Apple be the ones who really want to respond promptly? Why should we work around bugs in Apple's issue reporting system?

Re: I think I found a Mac kernel bug (2018)

#53
post #11
post #7

Earlier quoted context omitted.

Do you know what the underlying problematic instruction sequence is? Or the precise location where it halts?

I have no idea how I could find that, given that the system freezes completely. Maybe tracing the CPU instructions using LLDB might be possible, but the bug is most likely in the kernel code so this would not help much.

The best public kernel debugger for Apple Silicon is m1n1 from the Asahi project.

Re: I think I found a Mac kernel bug (2018)

#54

Earlier quoted context omitted.

It does eventually. If you want a prompt response you should contact product security.

Shouldn't Apple be the ones who really want to respond promptly? Why should we work around bugs in Apple's issue reporting system?

I don’t really see the problem with getting faster responses by contacting Apple’s security team directly for potential vulnerabilities when compared to the general-purpose bug tracker.

Re: I think I found a Mac kernel bug (2018)

#55
post #52
post #5

My naïve guess is that this is probably some sort of lock contention thing.

Lock contention usually impacts performance, but not liveness.

Usually, but in truly pathological cases you may starve something important essentially indefinitely.

Re: I think I found a Mac kernel bug (2018)

#56

It's very easy to freeze a system as a non-root user; cause too many interrupts, consume too many resources, etc. Many kinds of infinite loop will lock a system hard. Hell, you can crash systems with too many packets . And it's very easy to cause ps to hang. Many different kernel syscalls hang / are blocking. Mostly you see this with kernel features dependent on a resource that doesn't resolve itself, like a stuck di…

[deleted]

Re: I think I found a Mac kernel bug (2018)

#57

Earlier quoted context omitted.

It does eventually. If you want a prompt response you should contact product security.

Shouldn't Apple be the ones who really want to respond promptly? Why should we work around bugs in Apple's issue reporting system?

Usually big companies such as Discord give perks to the bug hunters who find bugs. Apparently Apple doesn't have that. There are probably people at Apple who won't admit that they have bugs, when every operating system has bugs, the code is too big to not create a single bug or exploit.

Re: I think I found a Mac kernel bug (2018)

#58

Earlier quoted context omitted.

Shouldn't Apple be the ones who really want to respond promptly? Why should we work around bugs in Apple's issue reporting system?

I don’t really see the problem with getting faster responses by contacting Apple’s security team directly for potential vulnerabilities when compared to the general-purpose bug tracker.

By an hour or two, maybe. But since the last version of the OS? No.

Re: I think I found a Mac kernel bug (2018)

#59
post #6

Coincidentally, I also stumbled upon a way to make the kernel of Apple Silicon Macs panic and restart while developing the https://lowtechguys.com website. I distilled the problem in a repo so it can be reproduced with a single command: https://github.com/alin23/m1-panic I found it while on Monterey and reported it 2 times through Feedback Assistant, but it still happens on Ventura. NOTE: Don't try it without saving…

Might have been better to report it to the security people. This sort of thing can be exploitable.

I have found 2 crashes in osX back in Yosemite. I have reported them with every release since.

I have no idea of they work on the arm Macs, but I will have the ability to check in a couple of days. Probably nothing exploitable, but still a hard crash.

Re: I think I found a Mac kernel bug (2018)

#60

It's very easy to freeze a system as a non-root user; cause too many interrupts, consume too many resources, etc. Many kinds of infinite loop will lock a system hard. Hell, you can crash systems with too many packets . And it's very easy to cause ps to hang. Many different kernel syscalls hang / are blocking. Mostly you see this with kernel features dependent on a resource that doesn't resolve itself, like a stuck di…

While what you say is true, these are nonetheless kernel bugs. The kernel should never let any user process consume so many resources as to cause a system freeze. The kernel must not only be able to preempt any user process at any time, stopping it to consume all CPU time, but it must also prevent any user process to completely fill a SSD or HDD, because that can prevent many programs from starting.

A computer's job is to do whatever you ask it to do; that includes using all disk or memory up, if that's what you really want. There's not really a way to prevent breaking the OS (or just using up the battery) without preventing you from using all the computer you bought.

A phone is different since it always has to be able to make phone calls.

Post reply on HN