[lkml]   [2010]   [Dec]   [8]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
    SubjectRe: questions regarding possible violation of AHCI spec in AHCI driver

    On 12/08/2010 07:14 PM, Jian Peng wrote:
    > The problem happened as follow:
    > After power up, inside ahci_init_one(), it will call ahci_power_up()
    > to toggle PxCMD.SUD bit first, then HBA will send COMRESET to
    > device, and device will send first D2H FIS back. Here it will call
    > ahci_start_engine() to turn on PxCMD.ST to process command. In this
    > case, it may run into race condition that transaction triggered by
    > toggling PxCMD.SUD is not completed yet, and that is the reason why
    > extra check is required by spec to guarantee that HBA already
    > received FIS and in sane state.
    > In most HBA, either staggered spin-up feature was not supported, or
    > time required for transaction is less than that between two function
    > calls, it may work. IMHO, this is a clear violation of spec, and not
    > robust against all HBA design.
    > The major concern is that ahci_start_engine() is used widely in EH
    > and it does not return result to reflect whether ST bit was set or
    > not, this may cause trouble in some cases. I am working on verifying
    > those cases with different HBAs now.

    I see, so it's not that the controller actually failed but you
    observed the race condition. During EH, ahci_start_engine() is used
    rather liberally when the driver wants the controller in working
    condition. The assumption is that even if the driver tries to set ST
    with the incorrect condition, the controller wouldn't go crazy where
    it can't be restarted later, which _must_ be true as there's no atomic
    way to check the condition and set ST.

    The driver at the same time guarantees that if the whole
    initialization protocol succeeds, the last ahci_start_engine() is
    called after hardreset is sucessfully completed and thus all the
    prerequisites are met.

    So, yeap, the driver might set ST when the conditions are not met but
    that can't be avoided completely anyway so the controller shouldn't go
    completely bonkers for that (it's okay to fail in recoverable way) and
    the driver will do the last ST setting after all the conditions are
    met on the success path.



     \ /
      Last update: 2010-12-08 19:27    [W:0.023 / U:47.768 seconds]
    ©2003-2017 Jasper Spaans. hosted at Digital OceanAdvertise on this site