lkml.org 
[lkml]   [2020]   [Dec]   [9]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    Date
    From
    Subject[tip: x86/urgent] membarrier: Explicitly sync remote cores when SYNC_CORE is requested
    The following commit has been merged into the x86/urgent branch of tip:

    Commit-ID: 758c9373d84168dc7d039cf85a0e920046b17b41
    Gitweb: https://git.kernel.org/tip/758c9373d84168dc7d039cf85a0e920046b17b41
    Author: Andy Lutomirski <luto@kernel.org>
    AuthorDate: Thu, 03 Dec 2020 21:07:05 -08:00
    Committer: Thomas Gleixner <tglx@linutronix.de>
    CommitterDate: Wed, 09 Dec 2020 09:37:43 +01:00

    membarrier: Explicitly sync remote cores when SYNC_CORE is requested

    membarrier() does not explicitly sync_core() remote CPUs; instead, it
    relies on the assumption that an IPI will result in a core sync. On x86,
    this may be true in practice, but it's not architecturally reliable. In
    particular, the SDM and APM do not appear to guarantee that interrupt
    delivery is serializing. While IRET does serialize, IPI return can
    schedule, thereby switching to another task in the same mm that was
    sleeping in a syscall. The new task could then SYSRET back to usermode
    without ever executing IRET.

    Make this more robust by explicitly calling sync_core_before_usermode()
    on remote cores. (This also helps people who search the kernel tree for
    instances of sync_core() and sync_core_before_usermode() -- one might be
    surprised that the core membarrier code doesn't currently show up in a
    such a search.)

    Fixes: 70216e18e519 ("membarrier: Provide core serializing command, *_SYNC_CORE")
    Signed-off-by: Andy Lutomirski <luto@kernel.org>
    Signed-off-by: Thomas Gleixner <tglx@linutronix.de>
    Reviewed-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
    Cc: stable@vger.kernel.org
    Link: https://lore.kernel.org/r/776b448d5f7bd6b12690707f5ed67bcda7f1d427.1607058304.git.luto@kernel.org

    ---
    kernel/sched/membarrier.c | 18 ++++++++++++++++++
    1 file changed, 18 insertions(+)

    diff --git a/kernel/sched/membarrier.c b/kernel/sched/membarrier.c
    index 7d98ef5..1c278df 100644
    --- a/kernel/sched/membarrier.c
    +++ b/kernel/sched/membarrier.c
    @@ -38,6 +38,23 @@ static void ipi_mb(void *info)
    smp_mb(); /* IPIs should be serializing but paranoid. */
    }

    +static void ipi_sync_core(void *info)
    +{
    + /*
    + * The smp_mb() in membarrier after all the IPIs is supposed to
    + * ensure that memory on remote CPUs that occur before the IPI
    + * become visible to membarrier()'s caller -- see scenario B in
    + * the big comment at the top of this file.
    + *
    + * A sync_core() would provide this guarantee, but
    + * sync_core_before_usermode() might end up being deferred until
    + * after membarrier()'s smp_mb().
    + */
    + smp_mb(); /* IPIs should be serializing but paranoid. */
    +
    + sync_core_before_usermode();
    +}
    +
    static void ipi_rseq(void *info)
    {
    /*
    @@ -162,6 +179,7 @@ static int membarrier_private_expedited(int flags, int cpu_id)
    if (!(atomic_read(&mm->membarrier_state) &
    MEMBARRIER_STATE_PRIVATE_EXPEDITED_SYNC_CORE_READY))
    return -EPERM;
    + ipi_func = ipi_sync_core;
    } else if (flags == MEMBARRIER_FLAG_RSEQ) {
    if (!IS_ENABLED(CONFIG_RSEQ))
    return -EINVAL;
    \
     
     \ /
      Last update: 2020-12-09 09:47    [W:5.004 / U:0.232 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site