On: The getrandom(2) system call was requested by the LibreSSL Portable developers

[tcoppi]

Seems like that functionality would better be included as separate madvise() advice than a new syscall, but probably a good addition either way.

[ramidarigaz → tcoppi]

The next email in that thread suggests using madvise() as well.

[panzi → ramidarigaz]

I'm a noob concerning all of this, but how would it be different to MADV_DONTFORK? Or why can't MADV_DONTFORK be used for the same task?

[simcop2387 → panzi]

MADV_DONTFORK ends up working a bit different, when the forked process tries to read the page it ends up as a segmentation fault because the page wasn't carried over. It can be made to work but that ends up more difficult since you have to trap that signal and be able to prove you aren't going to catch a real one. Adding something like INHERITZERO would end up giving you a new blank page which would be much nicer to deal with in the userspace.

[JoshTriplett → simcop2387]

> MADV_DONTFORK ends up working a bit different, when the forked process tries to read the page it ends up as a segmentation fault because the page wasn't carried over. It can be made to work but that ends up more difficult since you have to trap that signal and be able to prove you aren't going to catch a real one.

Doubly difficult from within library code that needs to work in arbitrary programs, and thus cannot mess with signal handling.

[glandium → JoshTriplett]

There's a real need for per-memory-range segfault handlers.

[panzi → JoshTriplett]

I see.