linux-kernel - Re: [PATCH v2] x86/resctrl: Preserve CDP enable over cpuhp

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <6e9f1a93-9665-6bef-7285-5f4de920471a@intel.com>
Date:   Fri, 21 Feb 2020 09:06:41 -0800
From:   Reinette Chatre <reinette.chatre@...el.com>
To:     James Morse <james.morse@....com>
Cc:     x86@...nel.org, linux-kernel@...r.kernel.org,
        Fenghua Yu <fenghua.yu@...el.com>,
        Thomas Gleixner <tglx@...utronix.de>,
        Ingo Molnar <mingo@...hat.com>, Borislav Petkov <bp@...en8.de>,
        "H . Peter Anvin" <hpa@...or.com>
Subject: Re: [PATCH v2] x86/resctrl: Preserve CDP enable over cpuhp

Hi James,

On 2/21/2020 7:25 AM, James Morse wrote:
> Hi Reinette,
> 
> On 14/02/2020 19:24, Reinette Chatre wrote:
>> On 2/14/2020 10:16 AM, James Morse wrote:
>>> Resctrl assumes that all CPUs are online when the filesystem is
>>> mounted, and that CPUs remember their CDP-enabled state over CPU
>>> hotplug.
>>>
>>> This goes wrong when resctrl's CDP-enabled state changes while all
>>> the CPUs in a domain are offline.
>>>
>>> When a domain comes online, enable (or disable!) CDP to match resctrl's
>>> current setting.
> 
>>> diff --git a/arch/x86/kernel/cpu/resctrl/rdtgroup.c b/arch/x86/kernel/cpu/resctrl/rdtgroup.c
>>> index 064e9ef44cd6..5967320a1951 100644
>>> --- a/arch/x86/kernel/cpu/resctrl/rdtgroup.c
>>> +++ b/arch/x86/kernel/cpu/resctrl/rdtgroup.c
>>> @@ -1831,6 +1831,9 @@ static int set_cache_qos_cfg(int level, bool enable)
>>>  	struct rdt_domain *d;
>>>  	int cpu;
>>>  
>>> +	 /* CDP state is restored during cpuhp, which takes this lock */
>>> +	lockdep_assert_held(&rdtgroup_mutex);
>>> +
>>
>> I think this hunk can be dropped. (1) The code path where this
>> annotation is added is not part of this fix. (2) The comment implies
>> that the taking of the mutex is something new/unique added in the CPU
>> hotplug path but that is not accurate since this mutex is also taken in
>> the only other existing call path of this snippet that is handling the
>> mounting of the filesystem.
> 
> These things answer the question: "what stops rdt_domain_reconfigure_cdp() racing with
> set_cache_qos_cfg() on the mount path, causing the wrong value to be restored?".
> 
> We can try and answer that in the commit message, or comments, but these will quickly be
> lost, stale, or wrong.
> 
> These annotations serve as a comment, and let lockdep check its still true.
> (I think you can never have enough lockdep annotations!)

I agree that lockdep annotations are valuable. My comment was specific
to this one hunk, not all lockdep annotations in your patch. Please
consider my comment in the spirit of patch guidance (per
Documentation/process/submitting-patches.rst) noting that all logical
changes should be in separate patches. This specific hunk is unrelated
to the bug being fixed in this patch but can surely be done in a
separate patch submitted together with this fix.

>> You do mention that these annotations is helpful for the MPAM work.
> 
> Indeed, it splits up the, er, "big RDT mutex", these annotations mean lockdep catches me
> out if I do something wrong, and makes it very clear when changing something subtle.
> 
> 
>> Could the annotations instead be added as a separate patch forming part
>> of that work?
> 
> Ideally these things are there from the beginning. Adding them over time as part of other
> reviewed patches works. I don't think adding them in one go before refactoring helps: you
> wouldn't have the confidence that they were correct in the first place.
> 
> I'll drop these.

My comment was just specific to the one lockdep annotation added to an
area that was unrelated to the bugfix. I noticed that you removed all
annotations in your new version, that was not my intention. You could
surely keep the lockdep annotation that is in the new code path
introduced in this fix and a separate patch with the other lockdep
annotation would also be welcome (with accurate comment).

Thank you

Reinette