From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 20192 invoked by alias); 13 Dec 2018 17:31:15 -0000 Mailing-List: contact libc-stable-help@sourceware.org; run by ezmlm Precedence: bulk List-Post: List-Help: List-Subscribe: List-Archive: Sender: libc-stable-owner@sourceware.org Received: (qmail 20127 invoked by uid 89); 13 Dec 2018 17:31:13 -0000 Authentication-Results: sourceware.org; auth=none X-Virus-Checked: by ClamAV 0.100.2 on sourceware.org X-Virus-Found: No X-Spam-SWARE-Status: No, score=-26.9 required=5.0 tests=BAYES_00,GIT_PATCH_0,GIT_PATCH_1,GIT_PATCH_2,GIT_PATCH_3,KAM_SHORT,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy= X-Spam-Status: No, score=-26.9 required=5.0 tests=BAYES_00,GIT_PATCH_0,GIT_PATCH_1,GIT_PATCH_2,GIT_PATCH_3,KAM_SHORT,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on sourceware.org X-Spam-Level: X-HELO: mail-qt1-f179.google.com Received: from mail-qt1-f179.google.com (HELO mail-qt1-f179.google.com) (209.85.160.179) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Thu, 13 Dec 2018 17:31:09 +0000 Received: by mail-qt1-f179.google.com with SMTP id e5so3008669qtr.12 for ; Thu, 13 Dec 2018 09:31:09 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:openpgp:organization:message-id :date:user-agent:mime-version:content-language :content-transfer-encoding; bh=QYgIkqRMobEvDMLsMpnBXG+5QP1FQUu58uA4mMhPKlk=; b=PeI0Vt0MEDqLAsUDLfInR1YGAzAc8qddzZqq6qMU4Bsj1VhnoZWuvk9K8f+dqFSu5s yqEK5UKTpxqUPlTqUOYstY8lzxOpCPtGQpHxMg0gb0MSn+M3sW+yEqsQjQ2k+62yE4l7 TH0UjhFSEpfE3daXLlCUdMdnh3LA7xDb62VuzUWxGwZzv8SDHdRnNq7cVbCDJx5/39fN ZCJ+1HFGz3poF6xVBGhFJEbcFhAY+oNrwz62d8KtITtSYO/ukmxiag0ULN0gkfwzTVB/ e3FK3qylwfDGUtcC3icgHSz6rHBRYChm6r/hrudqZRXDRdF4MDQT6XEqut/jMM9xTnwo HPUA== X-Gm-Message-State: AA+aEWZ0phw5YtfeGOEtIb+iZvYPqV4pSSRvtIQsjWTNX1SzDX9sfVJr 69F4A1YUXp5K1gBolYTNf5FyGoyC2bGkcg== X-Google-Smtp-Source: AFSGD/XaoWoA5jJB6pWL1m8Ee8pt5M09MLzTq2rgWUllp/JKmI2ERF49Rf45hHGWSeSvqJQLc7sWhA== X-Received: by 2002:a0c:8164:: with SMTP id 91mr23767688qvc.100.1544722267854; Thu, 13 Dec 2018 09:31:07 -0800 (PST) Received: from [10.150.73.190] (122.sub-174-228-2.myvzw.com. [174.228.2.122]) by smtp.gmail.com with ESMTPSA id c12sm2321616qka.42.2018.12.13.09.31.06 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 13 Dec 2018 09:31:07 -0800 (PST) To: "GNU C Library (Stable)" From: Carlos O'Donell Subject: [2.27 COMMITTED] Fix rwlock stall with PREFER_WRITER_NONRECURSIVE_NP (bug, 23861) Openpgp: preference=signencrypt Organization: Red Hat Message-ID: <769f2dad-964b-ee5d-2ee0-5d84b55905df@redhat.com> Date: Mon, 01 Jan 2018 00:00:00 -0000 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.3.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 7bit X-SW-Source: 2018-12/txt/msg00018.txt.bz2 In the read lock function (__pthread_rwlock_rdlock_full) there was a code path which would fail to reload __readers while waiting for PTHREAD_RWLOCK_RWAITING to change. This failure to reload __readers into a local value meant that various conditionals used the old value of __readers and with only two threads left it could result in an indefinite stall of one of the readers (waiting for PTHREAD_RWLOCK_RWAITING to go to zero, but it never would). (cherry picked from commit f21e8f8ca466320fed38bdb71526c574dae98026) --- ChangeLog | 9 ++++ nptl/Makefile | 3 +- nptl/pthread_rwlock_common.c | 4 +- nptl/tst-rwlock-pwn.c | 87 ++++++++++++++++++++++++++++++++++++ 4 files changed, 100 insertions(+), 3 deletions(-) create mode 100644 nptl/tst-rwlock-pwn.c diff --git a/ChangeLog b/ChangeLog index edd595c60e..23b1e6f056 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,12 @@ +2018-12-13 Andreas Schwab + + [BZ #23861] + * nptl/pthread_rwlock_common.c: Reindent. Fix typos. + (__pthread_rwlock_rdlock_full): Update expected value for + __readers while waiting on PTHREAD_RWLOCK_RWAITING. + * nptl/tst-rwlock-pwn.c: New file. + * nptl/Makefile (tests): Add tst-rwlock-pwn. + 2018-12-12 Tulio Magno Quites Machado Filho [BZ #23614] diff --git a/nptl/Makefile b/nptl/Makefile index cf2ee23d22..8d88bf2514 100644 --- a/nptl/Makefile +++ b/nptl/Makefile @@ -309,7 +309,8 @@ tests = tst-attr1 tst-attr2 tst-attr3 tst-default-attr \ tst-thread_local1 tst-mutex-errorcheck tst-robust10 \ tst-robust-fork tst-create-detached tst-memstream \ tst-thread-exit-clobber tst-minstack-cancel tst-minstack-exit \ - tst-minstack-throw + tst-minstack-throw \ + tst-rwlock-pwn tests-internal := tst-rwlock19 tst-rwlock20 \ tst-sem11 tst-sem12 tst-sem13 \ diff --git a/nptl/pthread_rwlock_common.c b/nptl/pthread_rwlock_common.c index a290d08332..9ce36d1026 100644 --- a/nptl/pthread_rwlock_common.c +++ b/nptl/pthread_rwlock_common.c @@ -314,8 +314,8 @@ __pthread_rwlock_rdlock_full (pthread_rwlock_t *rwlock, harmless because the flag is just about the state of __readers, and all threads set the flag under the same conditions. */ - while ((atomic_load_relaxed (&rwlock->__data.__readers) - & PTHREAD_RWLOCK_RWAITING) != 0) + while (((r = atomic_load_relaxed (&rwlock->__data.__readers)) + & PTHREAD_RWLOCK_RWAITING) != 0) { int private = __pthread_rwlock_get_private (rwlock); int err = futex_abstimed_wait (&rwlock->__data.__readers, diff --git a/nptl/tst-rwlock-pwn.c b/nptl/tst-rwlock-pwn.c new file mode 100644 index 0000000000..c39dd70973 --- /dev/null +++ b/nptl/tst-rwlock-pwn.c @@ -0,0 +1,87 @@ +/* Test rwlock with PREFER_WRITER_NONRECURSIVE_NP (bug 23861). + Copyright (C) 2018 Free Software Foundation, Inc. + This file is part of the GNU C Library. + + The GNU C Library is free software; you can redistribute it and/or + modify it under the terms of the GNU Lesser General Public + License as published by the Free Software Foundation; either + version 2.1 of the License, or (at your option) any later version. + + The GNU C Library is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU + Lesser General Public License for more details. + + You should have received a copy of the GNU Lesser General Public + License along with the GNU C Library; if not, see + . */ + +#include +#include +#include +#include +#include + +/* We choose 10 iterations because this happens to be able to trigger the + stall on contemporary hardware. */ +#define LOOPS 10 +/* We need 3 threads to trigger bug 23861. One thread as a writer, and + two reader threads. The test verifies that the second-to-last reader + is able to notify the *last* reader that it should be done waiting. + If the second-to-last reader fails to notify the last reader or does + so incorrectly then the last reader may stall indefinitely. */ +#define NTHREADS 3 + +_Atomic int do_exit; +pthread_rwlockattr_t mylock_attr; +pthread_rwlock_t mylock; + +void * +run_loop (void *a) +{ + while (!do_exit) + { + if (random () & 1) + { + xpthread_rwlock_wrlock (&mylock); + xpthread_rwlock_unlock (&mylock); + } + else + { + xpthread_rwlock_rdlock (&mylock); + xpthread_rwlock_unlock (&mylock); + } + } + return NULL; +} + +int +do_test (void) +{ + xpthread_rwlockattr_init (&mylock_attr); + xpthread_rwlockattr_setkind_np (&mylock_attr, + PTHREAD_RWLOCK_PREFER_WRITER_NONRECURSIVE_NP); + xpthread_rwlock_init (&mylock, &mylock_attr); + + for (int n = 0; n < LOOPS; n++) + { + pthread_t tids[NTHREADS]; + do_exit = 0; + for (int i = 0; i < NTHREADS; i++) + tids[i] = xpthread_create (NULL, run_loop, NULL); + /* Let the threads run for some time. */ + sleep (1); + printf ("Exiting..."); + fflush (stdout); + do_exit = 1; + for (int i = 0; i < NTHREADS; i++) + xpthread_join (tids[i]); + printf ("done.\n"); + } + pthread_rwlock_destroy (&mylock); + pthread_rwlockattr_destroy (&mylock_attr); + return 0; +} + +#define TIMEOUT (DEFAULT_TIMEOUT + 3 * LOOPS) +#include -- 2.19.2 -- Cheers, Carlos.