On macOS 11 copyfile API called from EndpointSecurity open auth callback results in deadlock on network shares

Hi,
Our product in some cases requires taking snapshot of files being opened (especially in write mode).
With endpoint security we are observing deadlock on macOS 11
  • open a file from smb share using Finder

  • in application, in open auth callback use copyfile api with COPYFILE_ALL flag

this copyfile api is stuck until the open auth callback is not responded to.
spindump shows copyfile stuck in kernel in smbfs stack.

copyfile with COPYFILE_METADATA i.e. just metadata seems to work fine.

we are seeing more such issues on smb/nfs network shares. The same code works well on macOS 10.15.

Is anyone else seeing similar issues?
Are there significant changes in network shares in macOS 11?

Thanks.

The same code works well on macOS 10.15.

Regardless of what else you do, you should file a bug about this. Please post your bug number, just for the record.

Share and Enjoy

Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@apple.com"
Thanks, I have created a bug FB8722387.
On macOS 11 copyfile API called from EndpointSecurity open auth callback results in deadlock on network shares
 
 
Q