LKML Archive on lore.kernel.org
help / color / mirror / Atom feed
From: Oleg Nesterov <oleg@tv-sign.ru>
To: "Eric W. Biederman" <ebiederm@xmission.com>
Cc: Andrew Morton <akpm@linux-foundation.org>,
	Ingo Molnar <mingo@elte.hu>,
	"Paul E. McKenney" <paulmck@linux.vnet.ibm.com>,
	Pavel Emelyanov <xemul@openvz.org>,
	linux-kernel@vger.kernel.org
Subject: Re: [PATCH] fix tasklist + find_pid() with CONFIG_PREEMPT_RCU
Date: Wed, 30 Jan 2008 12:30:18 +0300	[thread overview]
Message-ID: <20080130093018.GA88@tv-sign.ru> (raw)
In-Reply-To: <m1ir1cgfmm.fsf@ebiederm.dsl.xmission.com>

On 01/29, Eric W. Biederman wrote:
>
> Oleg Nesterov <oleg@tv-sign.ru> writes:
>
> > With CONFIG_PREEMPT_RCU read_lock(tasklist_lock) doesn't imply rcu_read_lock(),
> > but find_pid_ns()->hlist_for_each_entry_rcu() should be safe under tasklist.
> >
> > Usually it is, detach_pid() is always called under write_lock(tasklist_lock),
> > but copy_process() calls free_pid() lockless.
> >
> > "#ifdef CONFIG_PREEMPT_RCU" is added mostly as documentation, perhaps it is
> > too ugly and should be removed.
> >
> > Signed-off-by: Oleg Nesterov <oleg@tv-sign.ru>
> >
> > --- MM/kernel/fork.c~PR_RCU	2008-01-27 17:09:47.000000000 +0300
> > +++ MM/kernel/fork.c	2008-01-29 19:23:44.000000000 +0300
> > @@ -1335,8 +1335,19 @@ static struct task_struct *copy_process(
> >  	return p;
> >
> >  bad_fork_free_pid:
> > -	if (pid != &init_struct_pid)
> > +	if (pid != &init_struct_pid) {
> > +#ifdef CONFIG_PREEMPT_RCU
> > +		/*
> > +		 * read_lock(tasklist_lock) doesn't imply rcu_read_lock(),
> > +		 * make sure find_pid() is safe under read_lock(tasklist).
> > +		 */
> > +		write_lock_irq(&tasklist_lock);
> > +#endif
> >  		free_pid(pid);
> > +#ifdef CONFIG_PREEMPT_RCU
> > +		write_unlock_irq(&tasklist_lock);
> > +#endif
> > +	}
> >  bad_fork_cleanup_namespaces:
> >  	exit_task_namespaces(p);
> >  bad_fork_cleanup_keys:
>
> Ok. I believe I see what problem you are trying to fix.  That
> a pid returned from find_pid might disappear if we are not rcu
> protected.

Not only.

Any find_pid() is unsafe under tasklist, even the find_pid(1).
Because free_pid() mangles the pid_hash[hash] while find_pid()
scans the same list.

> This patch in the simplest form is wrong because it is confusing.
>
> We currently appear to have two options.
> 1) Force all pid hash table access and pid accesses that
>    do not get a count to be covered under rcu_read_lock.

I agree, we can (and should) convert most of these read_lock(tasklist)'s
to rcu_read_lock(). But we have a lot of them.

> 2) To modify the locking requirements for free_pid to require
>    the tasklist_lock.
>
>    However this second approach is horribly brittle, as it
>    will break if we ever have intermediate entries in the
>    hash table protected by pidmap_lock.
>
> Using the tasklist_lock to still guarantee we see the list, the entire
> list, and exactly the list for proper implementation of kill to
> process groups and sessions still seems sane.

And this means that attach_pid() and detach_pid() need write_lock(tasklist)
anyway.

So copy_process()->free_pid() is the only case when we modify the pid_hash[]
list without tasklist.

> So let's just remove the guarantee of find_pid being usable with
> just the tasklist_lock held.
>
> Eric
>
> diff --git a/include/linux/pid.h b/include/linux/pid.h
> index e29a900..0ffb8cc 100644
> --- a/include/linux/pid.h
> +++ b/include/linux/pid.h
> @@ -100,8 +100,7 @@ struct pid_namespace;
>  extern struct pid_namespace init_pid_ns;
>
>  /*
> - * look up a PID in the hash table. Must be called with the tasklist_lock
> - * or rcu_read_lock() held.
> + * look up a PID in the hash table. Must be called with the rcu_read_lock() held.

Imho, we should first fix all users of read_lock(tasklist)+find_..._pid().

So I still think this patch makes sense as a trivial fix for now, until
we add the necessary rcu_read_lock()s. However this race is very unlikely,
perhaps we can live with it.

Oleg.


  parent reply	other threads:[~2008-01-30  9:27 UTC|newest]

Thread overview: 15+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2008-01-29 16:40 Oleg Nesterov
2008-01-29 23:02 ` Andrew Morton
2008-01-30 14:17   ` Peter Zijlstra
2008-01-31 13:32   ` Ingo Molnar
2008-01-29 23:08 ` Andrew Morton
2008-01-30  2:16   ` Eric W. Biederman
2008-01-30  4:56     ` Paul E. McKenney
2008-01-30  3:24 ` Eric W. Biederman
2008-01-30  5:00   ` Paul E. McKenney
2008-01-30  9:20     ` Eric W. Biederman
2008-01-30  9:48       ` Oleg Nesterov
2008-01-30  9:30   ` Oleg Nesterov [this message]
2008-01-30 18:28     ` Eric W. Biederman
2008-01-31  9:31       ` Oleg Nesterov
2009-12-14  2:15 Tetsuo Handa

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20080130093018.GA88@tv-sign.ru \
    --to=oleg@tv-sign.ru \
    --cc=akpm@linux-foundation.org \
    --cc=ebiederm@xmission.com \
    --cc=linux-kernel@vger.kernel.org \
    --cc=mingo@elte.hu \
    --cc=paulmck@linux.vnet.ibm.com \
    --cc=xemul@openvz.org \
    --subject='Re: [PATCH] fix tasklist + find_pid() with CONFIG_PREEMPT_RCU' \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).