| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 18 Jan 2012 15:07:20 +0100 (CET)
From: Guennadi Liakhovetski <g.liakhovetski@....de>
To: Paul Mundt <lethal@...ux-sh.org>
cc: linux-kernel@...r.kernel.org, linux-sh@...r.kernel.org,
Vinod Koul <vinod.koul@...el.com>,
Magnus Damm <magnus.damm@...il.com>,
"Shimoda, Yoshihiro" <yoshihiro.shimoda.uh@...esas.com>
Subject: Re: [PATCH 1/7] dma: add a simple dma library
Hi Paul
Thanks for the review!
On Wed, 18 Jan 2012, Paul Mundt wrote:
> On Wed, Jan 18, 2012 at 11:22:18AM +0100, Guennadi Liakhovetski wrote:
> > This patch adds a library of functions, helping to implement dmaengine
> > drivers for hardware, unable to handle scatter-gather lists natively.
> > The first version of this driver only supports memcpy and slave DMA
> > operation.
> >
> > Signed-off-by: Guennadi Liakhovetski <g.liakhovetski@....de>
>
> While I like the direction this is going there are just a few minor
> things that have popped up.
>
> > +/*
> > + * For slave DMA we assume, that there is a finate number of DMA slaves in the
> > + * system, and that each such slave can only use a finate number of channels.
> > + * We use slave channel IDs to make sure, that no such slave channel ID is
> > + * allocated more than once.
> > + */
> Presumably you meant finite.
I think so too:)
> > +static unsigned int slave_num = 256;
> > +module_param(slave_num, uint, 0444);
> > +
> > +/* A bitmask with slave_num bits */
> > +static unsigned long *simple_slave_used;
> > +
> The shdma code explicitly used BITS_TO_LONGS here which explicitly
> requires a defined (or max) size, but this could all presumably be buried
> under DECLARE_BITMAP().
I didn't want to put any fixed limit on the bitmap size. Do you really
think we should use one?
> > + BUG_ON(tx->cookie > 0 && tx->cookie != desc->cookie);
> > + BUG_ON(desc->mark != DESC_SUBMITTED &&
> > + desc->mark != DESC_COMPLETED &&
> > + desc->mark != DESC_WAITING);
> > +
> ..
> > + BUG_ON(desc->chunks != 1);
> ..
> > + BUG_ON(tx->cookie < 0);
>
> This seems to depend on BUG_ON() as its primary assert/sanity check path,
> which seems a bit excessive. Drivers get fed garbage all the time,
> some effort to provide meaningful debug output or less fatal error
> handling would be nice. As it is, one misbehaving user can pretty much
> grind everything else to a halt for things that aren't really that big of
> a deal.
These have been certainly brought over from the shdma.c driver, their
purpose is to catch really bad _internal_ _algorithmic_ errors, not API
abuses. If any of these triggers this means, that the driver has hit an
internal bug. But ok, I'll revisit them and see whether all of them are
really reasonable.
> > +/*
> > + * simple_chan_ld_cleanup - Clean up link descriptors
> > + *
> > + * Clean up the ld_queue of DMA channel.
> > + */
> > +static void simple_chan_ld_cleanup(struct dma_simple_chan *schan, bool all)
> > +{
> > + while (__ld_cleanup(schan, all))
> > + ;
> > +}
> > +
> cpu_relax()
Well, I thought, there was enough relaxing going on in __ld_cleanup(), why
do we need cpu_relax() here?
> > +/*
> > + * simple_free_chan_resources - Free all resources of the channel.
> > + */
> > +static void simple_free_chan_resources(struct dma_chan *chan)
> > +{
> > + struct dma_simple_chan *schan = to_simple_chan(chan);
> > + struct dma_simple_dev *sdev = to_simple_dev(chan->device);
> > + const struct dma_simple_ops *ops = sdev->ops;
> > + LIST_HEAD(list);
> > +
> > + /* Protect against ISR */
> > + spin_lock_irq(&schan->chan_lock);
> > + ops->halt_channel(schan);
> > + spin_unlock_irq(&schan->chan_lock);
> > +
> > + /* Now no new interrupts will occur */
> > +
> > + /* Prepared and not submitted descriptors can still be on the queue */
> > + if (!list_empty(&schan->ld_queue))
> > + simple_chan_ld_cleanup(schan, true);
> > +
> Why doesn't simple_chan_ld_cleanup() do a list_empty test instead?
because it removes entries from it.
> > +int __devinit dma_simple_init(struct device *dev, struct dma_simple_dev *sdev,
> > + int chan_num)
> > +{
> ..
> > +}
> > +EXPORT_SYMBOL(dma_simple_init);
> > +
> > +void __devexit dma_simple_cleanup(struct dma_simple_dev *sdev)
> > +{
> ..
> > +}
> > +EXPORT_SYMBOL(dma_simple_cleanup);
> > +
> __devinit/exit on exported symbols? You could try __init_or_module, but I
> think it's more trouble than it is worth.
Well, these routines are supposed to be called from client driver .probe()
and .remove() methods... But probably you're right, better drop them.
> > +static int __init dma_simple_enter(void)
> > +{
> > + simple_slave_used = kzalloc(DIV_ROUND_UP(slave_num, BITS_PER_BYTE),
> > + GFP_KERNEL);
> > + if (!simple_slave_used)
> > + return -ENOMEM;
>
> Pretty weird way to do BITS_PER_LONGS, and as noted above can just be
> handled by DECLARE_BITMAP() if the max case isn't too outlandish.
I don't think it's weird - for dynamic allocation you need bytes anyway,
or you'll have to use BITS_TO_LONGS (or DECLARE_BITMAP()) and sizeof(long)
somewhere. But the above is actually buggy - it only rounds up to the next
byte, whereas it should round up to the next long. Will fix.
> > +module_init(dma_simple_enter);
> > +
> > +static void __exit dma_simple_exit(void)
> > +{
> > + kfree(simple_slave_used);
> > +}
> > +module_exit(dma_simple_exit);
> > +
> At which point these can probably just go away completely.
You really think we should use a fixed-size bitmask?
> > +static inline void dma_simple_lock(struct dma_simple_chan *schan)
> > +{
> > + spin_lock(&schan->chan_lock);
> > +}
> > +
> > +static inline void dma_simple_unlock(struct dma_simple_chan *schan)
> > +{
> > + spin_unlock(&schan->chan_lock);
> > +}
> > +
> These deserve to die a violent death, it's ok for driver writers to
> handle a spinlock on their own, or so one hopes.
Well, it's the same spinlock, as the one, used internally by the
dma-simple driver... I'll see if I come up with a better idea.
> > +void dma_simple_chan_remove(struct dma_simple_chan *schan);
> > +int dma_simple_init(struct device *dev, struct dma_simple_dev *sdev,
> > + int chan_num) __devinit;
> > +void dma_simple_cleanup(struct dma_simple_dev *sdev) __devexit;
> > +
> Not really convinced about the section annotations here, either.
These are the same functions, as above.
Thanks
Guennadi
---
Guennadi Liakhovetski, Ph.D.
Freelance Open-Source Software Developer
http://www.open-technology.de/
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists