Blame SOURCES/kvm-address_space_write-address_space_to_flatview-needs-.patch

c7c90d
From 2f3881255e6a50d9821f390972b07c1e9d9de626 Mon Sep 17 00:00:00 2001
c7c90d
From: Paolo Bonzini <pbonzini@redhat.com>
c7c90d
Date: Thu, 8 Mar 2018 15:58:15 +0100
c7c90d
Subject: [PATCH 02/17] address_space_write: address_space_to_flatview needs
c7c90d
 RCU lock
c7c90d
c7c90d
RH-Author: Paolo Bonzini <pbonzini@redhat.com>
c7c90d
Message-id: <20180308155819.20598-3-pbonzini@redhat.com>
c7c90d
Patchwork-id: 79191
c7c90d
O-Subject: [RHEL7.5 qemu-kvm-rhev PATCH 2/6] address_space_write: address_space_to_flatview needs RCU lock
c7c90d
Bugzilla: 1554930
c7c90d
RH-Acked-by: Cornelia Huck <cohuck@redhat.com>
c7c90d
RH-Acked-by: Thomas Huth <thuth@redhat.com>
c7c90d
RH-Acked-by: Laurent Vivier <lvivier@redhat.com>
c7c90d
c7c90d
address_space_write is calling address_space_to_flatview but it can
c7c90d
be called outside the RCU lock.  To fix it, push the rcu_read_lock/unlock
c7c90d
pair up from flatview_write to address_space_write.
c7c90d
c7c90d
Reviewed-by: Alexey Kardashevskiy <aik@ozlabs.ru>
c7c90d
Signed-off-by: Paolo Bonzini <pbonzini@redhat.com>
c7c90d
(cherry pick from commit 4c6ebbb364aa6f42c5d8e83e932e967eb83f0e44)
c7c90d
c7c90d
Signed-off-by: Miroslav Rezanina <mrezanin@redhat.com>
c7c90d
---
c7c90d
 exec.c | 37 ++++++++++++++++++++++---------------
c7c90d
 1 file changed, 22 insertions(+), 15 deletions(-)
c7c90d
c7c90d
diff --git a/exec.c b/exec.c
c7c90d
index 5a12e55..8b50133 100644
c7c90d
--- a/exec.c
c7c90d
+++ b/exec.c
c7c90d
@@ -2942,6 +2942,7 @@ static MemTxResult flatview_write_continue(FlatView *fv, hwaddr addr,
c7c90d
     return result;
c7c90d
 }
c7c90d
 
c7c90d
+/* Called from RCU critical section.  */
c7c90d
 static MemTxResult flatview_write(FlatView *fv, hwaddr addr, MemTxAttrs attrs,
c7c90d
                                   const uint8_t *buf, int len)
c7c90d
 {
c7c90d
@@ -2950,25 +2951,14 @@ static MemTxResult flatview_write(FlatView *fv, hwaddr addr, MemTxAttrs attrs,
c7c90d
     MemoryRegion *mr;
c7c90d
     MemTxResult result = MEMTX_OK;
c7c90d
 
c7c90d
-    if (len > 0) {
c7c90d
-        rcu_read_lock();
c7c90d
-        l = len;
c7c90d
-        mr = flatview_translate(fv, addr, &addr1, &l, true);
c7c90d
-        result = flatview_write_continue(fv, addr, attrs, buf, len,
c7c90d
-                                         addr1, l, mr);
c7c90d
-        rcu_read_unlock();
c7c90d
-    }
c7c90d
+    l = len;
c7c90d
+    mr = flatview_translate(fv, addr, &addr1, &l, true);
c7c90d
+    result = flatview_write_continue(fv, addr, attrs, buf, len,
c7c90d
+                                     addr1, l, mr);
c7c90d
 
c7c90d
     return result;
c7c90d
 }
c7c90d
 
c7c90d
-MemTxResult address_space_write(AddressSpace *as, hwaddr addr,
c7c90d
-                                              MemTxAttrs attrs,
c7c90d
-                                              const uint8_t *buf, int len)
c7c90d
-{
c7c90d
-    return flatview_write(address_space_to_flatview(as), addr, attrs, buf, len);
c7c90d
-}
c7c90d
-
c7c90d
 /* Called within RCU critical section.  */
c7c90d
 MemTxResult flatview_read_continue(FlatView *fv, hwaddr addr,
c7c90d
                                    MemTxAttrs attrs, uint8_t *buf,
c7c90d
@@ -3077,6 +3067,23 @@ MemTxResult address_space_rw(AddressSpace *as, hwaddr addr,
c7c90d
                        addr, attrs, buf, len, is_write);
c7c90d
 }
c7c90d
 
c7c90d
+MemTxResult address_space_write(AddressSpace *as, hwaddr addr,
c7c90d
+                                MemTxAttrs attrs,
c7c90d
+                                const uint8_t *buf, int len)
c7c90d
+{
c7c90d
+    MemTxResult result = MEMTX_OK;
c7c90d
+    FlatView *fv;
c7c90d
+
c7c90d
+    if (len > 0) {
c7c90d
+        rcu_read_lock();
c7c90d
+        fv = address_space_to_flatview(as);
c7c90d
+        result = flatview_write(fv, addr, attrs, buf, len);
c7c90d
+        rcu_read_unlock();
c7c90d
+    }
c7c90d
+
c7c90d
+    return result;
c7c90d
+}
c7c90d
+
c7c90d
 void cpu_physical_memory_rw(hwaddr addr, uint8_t *buf,
c7c90d
                             int len, int is_write)
c7c90d
 {
c7c90d
-- 
c7c90d
1.8.3.1
c7c90d