971128 - [Gonk][seccomp] seccomp violation: __NR_sched_yield

Status: RESOLVED FIXED

(Firefox OS Graveyard :: GonkIntegration, defect)

Description

[Rob Fletcher [:omerta]]

When using the Camera app to take a video, we get the following seccomp violation:
E/Sandbox ( 7722): seccomp sandbox violation: pid 7722, syscall 158, args 1 129 1 3030679552 3018134368 4294967295.  Killing process.

syscall 158 appears to be __NR_sched_yield

Device: Nexus 4
Branch: 1.4.0.0-prerelease
Git commit info: a504e2e0
gecko: 893735910eb5db1d9b69575160d0e53d3be7402a
gaia:  a504e2e01335167275e47f35ddc5b89bb858a892

Comment 1

[Christiane Ruetten [INACTIVE]]

Just FYI, camera operation does not trigger a violation on Keon or Peak.

Comment 2

[Stephanie Ouillon [:arroway] (needinfo me)]

I've got the same error when trying to capture a video on a buri device.

Comment 3

[Dave Hylands [:dhylands]]

Here is at least one place that calls sched_yield():
https://www.codeaurora.org/cgit/quic/la/platform/frameworks/base/tree/media/libstagefright/OMXCodec.cpp?h=b2g_ics_1.2#n3303

Comment 4

[Guillaume Destuynder [:kang] [this account is no longer active]]

i would say whitelist it - it doesn't take argument and also doesn't cause any sec issue

Comment 5

[Jed Davis [:jld] ⟨⏰|UTC-7⟩ ⟦he/him⟧]

Attachment: bug971128-seccomp-sched_yield-hg0.diff

Tested on Nexus 4.

Comment 6

[Jed Davis [:jld] ⟨⏰|UTC-7⟩ ⟦he/him⟧]

https://hg.mozilla.org/integration/b2g-inbound/rev/0500e2d9eb7e

Comment 7

[Phil Ringnalda (:philor)]

https://hg.mozilla.org/mozilla-central/rev/0500e2d9eb7e