mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/chenhuacai/linux-loongson
synced 2025-08-28 00:19:36 +00:00

rcuref_read() returns the number of references that are currently held. If 0 is returned then it is not safe to assume that the object ca be scheduled for deconstruction because it is marked DEAD. This happens if the return value of rcuref_put() is ignored and assumptions are made. If 0 is returned then the counter transitioned from 0 to RCUREF_NOREF. If rcuref_put() did not return to the caller then the counter did not yet transition from RCUREF_NOREF to RCUREF_DEAD. This means that there is still a chance that the counter will transition from RCUREF_NOREF to 0 meaning it is still valid and must not be deconstructed. In this brief window rcuref_read() will return 0. Provide rcuref_is_dead() to determine if the counter is marked as RCUREF_DEAD. Signed-off-by: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org> Link: https://lore.kernel.org/r/20250416162921.513656-2-bigeasy@linutronix.de
179 lines
5.4 KiB
C
179 lines
5.4 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
#ifndef _LINUX_RCUREF_H
|
|
#define _LINUX_RCUREF_H
|
|
|
|
#include <linux/atomic.h>
|
|
#include <linux/bug.h>
|
|
#include <linux/limits.h>
|
|
#include <linux/lockdep.h>
|
|
#include <linux/preempt.h>
|
|
#include <linux/rcupdate.h>
|
|
|
|
#define RCUREF_ONEREF 0x00000000U
|
|
#define RCUREF_MAXREF 0x7FFFFFFFU
|
|
#define RCUREF_SATURATED 0xA0000000U
|
|
#define RCUREF_RELEASED 0xC0000000U
|
|
#define RCUREF_DEAD 0xE0000000U
|
|
#define RCUREF_NOREF 0xFFFFFFFFU
|
|
|
|
/**
|
|
* rcuref_init - Initialize a rcuref reference count with the given reference count
|
|
* @ref: Pointer to the reference count
|
|
* @cnt: The initial reference count typically '1'
|
|
*/
|
|
static inline void rcuref_init(rcuref_t *ref, unsigned int cnt)
|
|
{
|
|
atomic_set(&ref->refcnt, cnt - 1);
|
|
}
|
|
|
|
/**
|
|
* rcuref_read - Read the number of held reference counts of a rcuref
|
|
* @ref: Pointer to the reference count
|
|
*
|
|
* Return: The number of held references (0 ... N). The value 0 does not
|
|
* indicate that it is safe to schedule the object, protected by this reference
|
|
* counter, for deconstruction.
|
|
* If you want to know if the reference counter has been marked DEAD (as
|
|
* signaled by rcuref_put()) please use rcuread_is_dead().
|
|
*/
|
|
static inline unsigned int rcuref_read(rcuref_t *ref)
|
|
{
|
|
unsigned int c = atomic_read(&ref->refcnt);
|
|
|
|
/* Return 0 if within the DEAD zone. */
|
|
return c >= RCUREF_RELEASED ? 0 : c + 1;
|
|
}
|
|
|
|
/**
|
|
* rcuref_is_dead - Check if the rcuref has been already marked dead
|
|
* @ref: Pointer to the reference count
|
|
*
|
|
* Return: True if the object has been marked DEAD. This signals that a previous
|
|
* invocation of rcuref_put() returned true on this reference counter meaning
|
|
* the protected object can safely be scheduled for deconstruction.
|
|
* Otherwise, returns false.
|
|
*/
|
|
static inline bool rcuref_is_dead(rcuref_t *ref)
|
|
{
|
|
unsigned int c = atomic_read(&ref->refcnt);
|
|
|
|
return (c >= RCUREF_RELEASED) && (c < RCUREF_NOREF);
|
|
}
|
|
|
|
extern __must_check bool rcuref_get_slowpath(rcuref_t *ref);
|
|
|
|
/**
|
|
* rcuref_get - Acquire one reference on a rcuref reference count
|
|
* @ref: Pointer to the reference count
|
|
*
|
|
* Similar to atomic_inc_not_zero() but saturates at RCUREF_MAXREF.
|
|
*
|
|
* Provides no memory ordering, it is assumed the caller has guaranteed the
|
|
* object memory to be stable (RCU, etc.). It does provide a control dependency
|
|
* and thereby orders future stores. See documentation in lib/rcuref.c
|
|
*
|
|
* Return:
|
|
* False if the attempt to acquire a reference failed. This happens
|
|
* when the last reference has been put already
|
|
*
|
|
* True if a reference was successfully acquired
|
|
*/
|
|
static inline __must_check bool rcuref_get(rcuref_t *ref)
|
|
{
|
|
/*
|
|
* Unconditionally increase the reference count. The saturation and
|
|
* dead zones provide enough tolerance for this.
|
|
*/
|
|
if (likely(!atomic_add_negative_relaxed(1, &ref->refcnt)))
|
|
return true;
|
|
|
|
/* Handle the cases inside the saturation and dead zones */
|
|
return rcuref_get_slowpath(ref);
|
|
}
|
|
|
|
extern __must_check bool rcuref_put_slowpath(rcuref_t *ref, unsigned int cnt);
|
|
|
|
/*
|
|
* Internal helper. Do not invoke directly.
|
|
*/
|
|
static __always_inline __must_check bool __rcuref_put(rcuref_t *ref)
|
|
{
|
|
int cnt;
|
|
|
|
RCU_LOCKDEP_WARN(!rcu_read_lock_held() && preemptible(),
|
|
"suspicious rcuref_put_rcusafe() usage");
|
|
/*
|
|
* Unconditionally decrease the reference count. The saturation and
|
|
* dead zones provide enough tolerance for this.
|
|
*/
|
|
cnt = atomic_sub_return_release(1, &ref->refcnt);
|
|
if (likely(cnt >= 0))
|
|
return false;
|
|
|
|
/*
|
|
* Handle the last reference drop and cases inside the saturation
|
|
* and dead zones.
|
|
*/
|
|
return rcuref_put_slowpath(ref, cnt);
|
|
}
|
|
|
|
/**
|
|
* rcuref_put_rcusafe -- Release one reference for a rcuref reference count RCU safe
|
|
* @ref: Pointer to the reference count
|
|
*
|
|
* Provides release memory ordering, such that prior loads and stores are done
|
|
* before, and provides an acquire ordering on success such that free()
|
|
* must come after.
|
|
*
|
|
* Can be invoked from contexts, which guarantee that no grace period can
|
|
* happen which would free the object concurrently if the decrement drops
|
|
* the last reference and the slowpath races against a concurrent get() and
|
|
* put() pair. rcu_read_lock()'ed and atomic contexts qualify.
|
|
*
|
|
* Return:
|
|
* True if this was the last reference with no future references
|
|
* possible. This signals the caller that it can safely release the
|
|
* object which is protected by the reference counter.
|
|
*
|
|
* False if there are still active references or the put() raced
|
|
* with a concurrent get()/put() pair. Caller is not allowed to
|
|
* release the protected object.
|
|
*/
|
|
static inline __must_check bool rcuref_put_rcusafe(rcuref_t *ref)
|
|
{
|
|
return __rcuref_put(ref);
|
|
}
|
|
|
|
/**
|
|
* rcuref_put -- Release one reference for a rcuref reference count
|
|
* @ref: Pointer to the reference count
|
|
*
|
|
* Can be invoked from any context.
|
|
*
|
|
* Provides release memory ordering, such that prior loads and stores are done
|
|
* before, and provides an acquire ordering on success such that free()
|
|
* must come after.
|
|
*
|
|
* Return:
|
|
*
|
|
* True if this was the last reference with no future references
|
|
* possible. This signals the caller that it can safely schedule the
|
|
* object, which is protected by the reference counter, for
|
|
* deconstruction.
|
|
*
|
|
* False if there are still active references or the put() raced
|
|
* with a concurrent get()/put() pair. Caller is not allowed to
|
|
* deconstruct the protected object.
|
|
*/
|
|
static inline __must_check bool rcuref_put(rcuref_t *ref)
|
|
{
|
|
bool released;
|
|
|
|
preempt_disable();
|
|
released = __rcuref_put(ref);
|
|
preempt_enable();
|
|
return released;
|
|
}
|
|
|
|
#endif
|