From patchwork Tue Mar 19 12:18:47 2013 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Maarten Lankhorst X-Patchwork-Id: 2300311 Return-Path: X-Original-To: patchwork-dri-devel@patchwork.kernel.org Delivered-To: patchwork-process-083081@patchwork1.kernel.org Received: from gabe.freedesktop.org (gabe.freedesktop.org [131.252.210.177]) by patchwork1.kernel.org (Postfix) with ESMTP id C2C7E3FC8A for ; Tue, 19 Mar 2013 12:19:39 +0000 (UTC) Received: from gabe.freedesktop.org (localhost [127.0.0.1]) by gabe.freedesktop.org (Postfix) with ESMTP id AF6E1E64CF for ; Tue, 19 Mar 2013 05:19:39 -0700 (PDT) X-Original-To: dri-devel@lists.freedesktop.org Delivered-To: dri-devel@lists.freedesktop.org Received: from youngberry.canonical.com (youngberry.canonical.com [91.189.89.112]) by gabe.freedesktop.org (Postfix) with ESMTP id 45571E5C91; Tue, 19 Mar 2013 05:18:49 -0700 (PDT) Received: from 5ed48cef.cm-7-5c.dynamic.ziggo.nl ([94.212.140.239] helo=[192.168.1.128]) by youngberry.canonical.com with esmtpsa (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1UHvV9-00073y-R6; Tue, 19 Mar 2013 12:18:47 +0000 Message-ID: <514857A7.3020704@canonical.com> Date: Tue, 19 Mar 2013 13:18:47 +0100 From: Maarten Lankhorst User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130308 Thunderbird/17.0.4 MIME-Version: 1.0 To: Dave Airlie Subject: Re: [PATCH v2 0/7] xfree86: Handle drm race condition References: <1363639911-21239-1-git-send-email-bryce@canonical.com> <20130319092146.GC3872@cantiga.alporthouse.com> <514837A6.5010301@canonical.com> <20130319102707.GD3872@cantiga.alporthouse.com> <51484307.3040906@canonical.com> In-Reply-To: Cc: "X.Org Devel List" , intel-gfx@lists.freedesktop.org, "dri-devel@lists.freedesktop.org" X-BeenThere: dri-devel@lists.freedesktop.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: Direct Rendering Infrastructure - Development List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: dri-devel-bounces+patchwork-dri-devel=patchwork.kernel.org@lists.freedesktop.org Errors-To: dri-devel-bounces+patchwork-dri-devel=patchwork.kernel.org@lists.freedesktop.org Op 19-03-13 12:10, Dave Airlie schreef: >> Because of the delayed fput in recent kernels, it is possible for plymouth to exit and not drop master right away. >> It's put onto a workqueue to be freed slightly later. Xorg-server starts in the meantime, opens a fd, but because the fd >> hasn't been closed by plymouth yet, it didn't get implicitly authenticated and it didn't get drm master either. >> > I thought plymouth explicitly dropped master, and closed later. I know > we "ab"use that fact on Fedora so X can grab the bo from plymouth > before it exits. > > Dave. > _______________________________________________ > xorg-devel@lists.x.org: X.Org development > Archives: http://lists.x.org/archives/xorg-devel > Info: http://lists.x.org/mailman/listinfo/xorg-devel > Well from trying the dropmaster kernel patch, it simply looks like there are just too many places that could get affected by this assumption. Lets just try something ugly in the flush callback that's called before final fput instead, that should fix all our problems! XXX: the big if is duplicated from drm_release, and it should probably be split into a separate function. However if you're hit by the plymouth race, this might be a good thing to try. The fix for drivers other than radeon/i915 is left as an excercise for the reader. diff --git a/drivers/gpu/drm/drm_fops.c b/drivers/gpu/drm/drm_fops.c index f369429..ecf8689 100644 --- a/drivers/gpu/drm/drm_fops.c +++ b/drivers/gpu/drm/drm_fops.c @@ -177,6 +177,50 @@ err: } EXPORT_SYMBOL(drm_open); +int drm_flush(struct file *filp, fl_owner_t id) +{ + struct drm_file *file_priv = filp->private_data; + struct drm_device *dev = file_priv->minor->dev; + + if (atomic_long_read(&filp->f_count) != 1 || !file_priv->is_master) + return 0; + + mutex_lock(&dev->struct_mutex); + + if (file_priv->is_master) { + struct drm_master *master = file_priv->master; + struct drm_file *temp; + list_for_each_entry(temp, &dev->filelist, lhead) { + if ((temp->master == file_priv->master) && + (temp != file_priv)) + temp->authenticated = 0; + } + + /** + * Since the master is disappearing, so is the + * possibility to lock. + */ + + if (master->lock.hw_lock) { + if (dev->sigdata.lock == master->lock.hw_lock) + dev->sigdata.lock = NULL; + master->lock.hw_lock = NULL; + master->lock.file_priv = NULL; + wake_up_interruptible_all(&master->lock.lock_queue); + } + + if (file_priv->minor->master == file_priv->master) { + /* drop the reference held my the minor */ + if (dev->driver->master_drop) + dev->driver->master_drop(dev, file_priv, true); + drm_master_put(&file_priv->minor->master); + } + } + mutex_unlock(&dev->struct_mutex); + return 0; +} +EXPORT_SYMBOL(drm_flush); + /** * File \c open operation. * diff --git a/drivers/gpu/drm/i915/i915_drv.c b/drivers/gpu/drm/i915/i915_drv.c index 62aaf8d..6dcfec3 100644 --- a/drivers/gpu/drm/i915/i915_drv.c +++ b/drivers/gpu/drm/i915/i915_drv.c @@ -1018,6 +1018,7 @@ static const struct vm_operations_struct i915_gem_vm_ops = { static const struct file_operations i915_driver_fops = { .owner = THIS_MODULE, .open = drm_open, + .flush = drm_flush, .release = drm_release, .unlocked_ioctl = drm_ioctl, .mmap = drm_gem_mmap, diff --git a/drivers/gpu/drm/radeon/radeon_drv.c b/drivers/gpu/drm/radeon/radeon_drv.c index 5cdd684..2c439f9 100644 --- a/drivers/gpu/drm/radeon/radeon_drv.c +++ b/drivers/gpu/drm/radeon/radeon_drv.c @@ -361,6 +361,7 @@ radeon_pci_resume(struct pci_dev *pdev) static const struct file_operations radeon_driver_kms_fops = { .owner = THIS_MODULE, .open = drm_open, + .flush = drm_flush, .release = drm_release, .unlocked_ioctl = drm_ioctl, .mmap = radeon_mmap, diff --git a/include/drm/drmP.h b/include/drm/drmP.h index 6cd30db..2a4f97d 100644 --- a/include/drm/drmP.h +++ b/include/drm/drmP.h @@ -1320,6 +1320,8 @@ extern int drm_stub_open(struct inode *inode, struct file *filp); extern int drm_fasync(int fd, struct file *filp, int on); extern ssize_t drm_read(struct file *filp, char __user *buffer, size_t count, loff_t *offset); + +extern int drm_flush(struct file *filp, fl_owner_t id); extern int drm_release(struct inode *inode, struct file *filp); /* Mapping support (drm_vm.h) */