linux-kernel - Re: [PATCH v2 0/2] Add a generic virtual thermal sensor

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <CAJZ5v0iJCS+nRcnHXiprtJsBf6Q4=k4TFcUV2ma_GiK=MttFug@mail.gmail.com>
Date:   Tue, 5 Oct 2021 18:45:10 +0200
From:   "Rafael J. Wysocki" <rafael@...nel.org>
To:     Daniel Lezcano <daniel.lezcano@...aro.org>
Cc:     Alexandre Bailon <abailon@...libre.com>,
        "Zhang, Rui" <rui.zhang@...el.com>,
        Amit Kucheria <amitk@...nel.org>,
        "Rafael J. Wysocki" <rafael@...nel.org>,
        Linux PM <linux-pm@...r.kernel.org>,
        Linux Kernel Mailing List <linux-kernel@...r.kernel.org>,
        ben.tseng@...iatek.com, Kevin Hilman <khilman@...libre.com>,
        Matthias Kaehlcke <mka@...omium.org>
Subject: Re: [PATCH v2 0/2] Add a generic virtual thermal sensor

On Mon, Oct 4, 2021 at 3:42 PM Daniel Lezcano <daniel.lezcano@...aro.org> wrote:
>
> On 04/10/2021 12:24, Alexandre Bailon wrote:
> >
> > On 9/22/21 10:10 AM, Daniel Lezcano wrote:
> >> On 20/09/2021 15:12, Alexandre Bailon wrote:
> >>> On 9/17/21 4:03 PM, Daniel Lezcano wrote:
> >>>> On 17/09/2021 15:33, Alexandre Bailon wrote:
> >>>>> Hi Daniel,
> >>>>>
> >>>>> On 9/17/21 2:41 PM, Daniel Lezcano wrote:
> >>>>>> On 17/09/2021 09:27, Alexandre Bailon wrote:
> >>>>>>> This series add a virtual thermal sensor.
> >>>>>>> It could be used to get a temperature using some thermal sensors.
> >>>>>>> Currently, the supported operations are max, min and avg.
> >>>>>>> The virtual sensor could be easily extended to support others
> >>>>>>> operations.
> >>>>>>>
> >>>>>>> Note:
> >>>>>>> Currently, thermal drivers must explicitly register their sensors to
> >>>>>>> make them
> >>>>>>> available to the virtual sensor.
> >>>>>>> This doesn't seem a good solution to me and I think it would be
> >>>>>>> preferable to
> >>>>>>> update the framework to register the list of each available sensors.
> >>>>>> Why must the drivers do that ?
> >>>>> Because there are no central place where thermal sensor are
> >>>>> registered.
> >>>>> The only other way I found was to update thermal_of.c,
> >>>>> to register the thermal sensors and make them available later to the
> >>>>> virtual thermal sensor.
> >>>>>
> >>>>> To work, the virtual thermal need to get the sensor_data the ops from
> >>>>> the thermal sensor.
> >>>>> And as far I know, this is only registered in thermal_of.c, in the
> >>>>> thermal zone data
> >>>>> but I can't access it directly from the virtual thermal sensor.
> >>>>>
> >>>>> How would you do it ?
> >>>> Via the phandles when registering the virtual sensor ?
> >>> As far I know, we can't get the ops or the sensor_data from the phandle
> >>> of a thermal sensor.
> >>> The closest solution I found so far would be to aggregate the thermal
> >>> zones instead of thermal sensors.
> >>> thermal_zone_device has the data needed and a thermal zone could be find
> >>> easily using its name.
> >> Yeah, the concept of the thermal zone and the sensor are very close.
> >>
> >> There is the function in thermal_core.h:
> >>
> >>   -> for_each_thermal_zone()
> >>
> >> You should be able for each 'slave' sensor, do a lookup to find the
> >> corresponding thermal_zone_device_ops.
> >>
> >>> But, using a thermal_zone_device, I don't see how to handle module
> >>> unloading.
> >> I think try_module_get() / module_put() are adequate for this situation
> >> as it is done on an external module and we can not rely on the exported
> >> symbols.
> > I don't see how it would be possible to use these functions.
> > The thermal zone doesn't have the data required to use it.
>
> Actually I was able to crash the kernel by doing:
>
> console 1:
>
> while $(true); do insmod <module> && rmmod <module>; done
>
> console 2:
>
> while $(true); cat /sys/class/thermal/thermal_zone0/temp; done
>
> So there is something wrong already in the thermal framework.

Hmmm.

> IMO, the first thing would be to fix this critical issue by getting the
> sensor module refcount when the thermal zone is enabled and dropping it
> when it is disabled.
>
> With that fixed, perhaps it will possible to get the device associated
> with the sensor and then try_module_get(dev->driver->owner)
>
> > Maybe a more easier way is to use the thermal_zone_device mutex.
> > If I get a lock before to use the thermal_zone_device ops, I have the
> > guaranty that module won't be unloaded.

That would be my approach too.

> > When a "thermal of sensor" is unloaded, it calls
> > thermal_zone_of_sensor_unregister which takes a lock before
> > update ops.
>
> I'm not sure to understand. The goal is to have the refcount on the
> modules to be incremented when the virtual sensor is using them.

IMO the goal is to prevent the code from crashing when modules get
unloaded.  I'm not really sure if refcounts alone are sufficient for
that.

> Until the virtual sensor is registered, it will prevent the other
> modules to be unloaded.

Unless they are forced to unload that is, AFAICS.

IMO it would be better to make the code survive unloading of a module.