linux-kernel - Re: [PATCH V9 09/17] rust: cpu: Add from

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <Z_lAyGy1o80MPVOC@yury>
Date: Fri, 11 Apr 2025 12:18:26 -0400
From: Yury Norov <yury.norov@...il.com>
To: Viresh Kumar <viresh.kumar@...aro.org>
Cc: "Rafael J. Wysocki" <rafael@...nel.org>,
	Miguel Ojeda <miguel.ojeda.sandonis@...il.com>,
	Danilo Krummrich <dakr@...hat.com>, Miguel Ojeda <ojeda@...nel.org>,
	Alex Gaynor <alex.gaynor@...il.com>,
	Boqun Feng <boqun.feng@...il.com>, Gary Guo <gary@...yguo.net>,
	Björn Roy Baron <bjorn3_gh@...tonmail.com>,
	Benno Lossin <benno.lossin@...ton.me>,
	Andreas Hindborg <a.hindborg@...nel.org>,
	Alice Ryhl <aliceryhl@...gle.com>, Trevor Gross <tmgross@...ch.edu>,
	Danilo Krummrich <dakr@...nel.org>,
	Thomas Gleixner <tglx@...utronix.de>,
	Peter Zijlstra <peterz@...radead.org>, linux-pm@...r.kernel.org,
	Vincent Guittot <vincent.guittot@...aro.org>,
	Stephen Boyd <sboyd@...nel.org>, Nishanth Menon <nm@...com>,
	rust-for-linux@...r.kernel.org,
	Manos Pitsidianakis <manos.pitsidianakis@...aro.org>,
	Erik Schilling <erik.schilling@...aro.org>,
	Alex Bennée <alex.bennee@...aro.org>,
	Joakim Bech <joakim.bech@...aro.org>, Rob Herring <robh@...nel.org>,
	Burak Emir <bqe@...gle.com>,
	Rasmus Villemoes <linux@...musvillemoes.dk>,
	Russell King <linux@...linux.org.uk>, linux-clk@...r.kernel.org,
	Michael Turquette <mturquette@...libre.com>,
	linux-kernel@...r.kernel.org
Subject: Re: [PATCH V9 09/17] rust: cpu: Add from_cpu()

On Fri, Apr 11, 2025 at 04:25:08PM +0530, Viresh Kumar wrote:
> This implements cpu::from_cpu(), which returns a reference to
> Device for a CPU. The C struct is created at initialization time for
> CPUs and is never freed and so ARef isn't returned from this function.
> 
> The new helper will be used by Rust based cpufreq drivers.
> 
> Signed-off-by: Viresh Kumar <viresh.kumar@...aro.org>
> ---
>  MAINTAINERS                     |  1 +
>  rust/bindings/bindings_helper.h |  1 +
>  rust/kernel/cpu.rs              | 31 +++++++++++++++++++++++++++++++
>  rust/kernel/lib.rs              |  1 +
>  4 files changed, 34 insertions(+)
>  create mode 100644 rust/kernel/cpu.rs
> 
> diff --git a/MAINTAINERS b/MAINTAINERS
> index 12cde55579a0..475abf72869c 100644
> --- a/MAINTAINERS
> +++ b/MAINTAINERS
> @@ -6155,6 +6155,7 @@ F:	include/linux/cpuhotplug.h
>  F:	include/linux/smpboot.h
>  F:	kernel/cpu.c
>  F:	kernel/smpboot.*
> +F:	rust/kernel/cpu.rs
>  
>  CPU IDLE TIME MANAGEMENT FRAMEWORK
>  M:	"Rafael J. Wysocki" <rafael@...nel.org>
> diff --git a/rust/bindings/bindings_helper.h b/rust/bindings/bindings_helper.h
> index f53d6e1a21f2..ac92c67d2c38 100644
> --- a/rust/bindings/bindings_helper.h
> +++ b/rust/bindings/bindings_helper.h
> @@ -11,6 +11,7 @@
>  #include <linux/blk_types.h>
>  #include <linux/blkdev.h>
>  #include <linux/clk.h>
> +#include <linux/cpu.h>
>  #include <linux/cpumask.h>
>  #include <linux/cred.h>
>  #include <linux/device/faux.h>
> diff --git a/rust/kernel/cpu.rs b/rust/kernel/cpu.rs
> new file mode 100644
> index 000000000000..3054165d3818
> --- /dev/null
> +++ b/rust/kernel/cpu.rs
> @@ -0,0 +1,31 @@
> +// SPDX-License-Identifier: GPL-2.0
> +
> +//! Generic CPU definitions.
> +//!
> +//! C header: [`include/linux/cpu.h`](srctree/include/linux/cpu.h)
> +
> +use crate::{bindings, device::Device, error::Result, prelude::ENODEV};
> +
> +/// Creates a new instance of CPU's device.
> +///
> +/// # Safety
> +///
> +/// Reference counting is not implemented for the CPU device in the C code. When a CPU is
> +/// hot-unplugged, the corresponding CPU device is unregistered, but its associated memory
> +/// is not freed.
> +///
> +/// Callers must ensure that the CPU device is not used after it has been unregistered.
> +/// This can be achieved, for example, by registering a CPU hotplug notifier and removing
> +/// any references to the CPU device within the notifier's callback.
> +pub unsafe fn from_cpu(cpu: u32) -> Result<&'static Device> {
> +    // SAFETY: The pointer returned by `get_cpu_device()`, if not `NULL`, is a valid pointer to
> +    // a `struct device` and is never freed by the C code.
> +    let ptr = unsafe { bindings::get_cpu_device(cpu) };
> +    if ptr.is_null() {
> +        return Err(ENODEV);
> +    }
> +
> +    // SAFETY: The pointer returned by `get_cpu_device()`, if not `NULL`, is a valid pointer to
> +    // a `struct device` and is never freed by the C code.

If you think that writing the same thing twice would help in SAFETY
department, I'd recommend you to write it for a couple more times.

> +    Ok(unsafe { Device::as_ref(ptr) })
> +}
> diff --git a/rust/kernel/lib.rs b/rust/kernel/lib.rs
> index f4dcfefe94be..db372f806875 100644
> --- a/rust/kernel/lib.rs
> +++ b/rust/kernel/lib.rs
> @@ -44,6 +44,7 @@
>  pub mod build_assert;
>  #[cfg(CONFIG_COMMON_CLK)]
>  pub mod clk;
> +pub mod cpu;
>  pub mod cpumask;
>  pub mod cred;
>  pub mod device;
> -- 
> 2.31.1.272.g89b43f80a514