Thread (9 messages) 9 messages, 4 authors, 2023-03-17

Re: [PATCH v2] hvc/xen: prevent concurrent accesses to the shared ring

From: Michael Ellerman <mpe@ellerman.id.au>
Date: 2023-03-09 23:01:59
Also in: lkml, xen-devel

Roger Pau Monné [off-list ref] writes:
On Mon, Dec 12, 2022 at 01:36:48PM +0100, Roger Pau Monné wrote:
quoted
On Fri, Dec 02, 2022 at 12:40:05PM +0100, Roger Pau Monné wrote:
quoted
On Wed, Nov 30, 2022 at 05:08:06PM -0800, Stefano Stabellini wrote:
quoted
On Wed, 30 Nov 2022, Roger Pau Monne wrote:
quoted
The hvc machinery registers both a console and a tty device based on
the hv ops provided by the specific implementation.  Those two
interfaces however have different locks, and there's no single locks
that's shared between the tty and the console implementations, hence
the driver needs to protect itself against concurrent accesses.
Otherwise concurrent calls using the split interfaces are likely to
corrupt the ring indexes, leaving the console unusable.

Introduce a lock to xencons_info to serialize accesses to the shared
ring.  This is only required when using the shared memory console,
concurrent accesses to the hypercall based console implementation are
not an issue.

Note the conditional logic in domU_read_console() is slightly modified
so the notify_daemon() call can be done outside of the locked region:
it's an hypercall and there's no need for it to be done with the lock
held.
For domU_read_console: I don't mean to block this patch but we need to
be sure about the semantics of hv_ops.get_chars. Either it is expected
to be already locked, then we definitely shouldn't add another lock to
domU_read_console. Or it is not expected to be already locked, then we
should add the lock.

My impression is that it is expected to be already locked, but I think
we need Greg or Jiri to confirm one way or the other.
Let me move both to the 'To:' field then.

My main concern is the usage of hv_ops.get_chars hook in
hvc_poll_get_char(), as it's not obvious to me that callers of
tty->poll_get_char hook as returned by tty_find_polling_driver() will
always do so with the tty lock held (in fact the only user right now
doesn't seem to hold the tty lock).
quoted
Aside from that the rest looks fine.
I guess I could reluctantly remove the lock in the get_chars hook,
albeit I'm not convinced at all the lock is not needed there.
I don't know the xen driver, but other HVC backends have a lock around
their private state in their get_chars() implementations.

See eg. hvterm_raw_get_chars().

cheers
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help