Received-SPF: pass (google.com: best guess record for domain of linux-kernel-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
From:   "Tokunori Ikegami" <ikegami.t@gmail.com>
To:     "'Vignesh Raghavendra'" <vigneshr@ti.com>,
        "'Boris Brezillon'" <boris.brezillon@collabora.com>,
        "'liujian \(CE\)'" <liujian56@huawei.com>
Cc:     "'Tokunori Ikegami'" <ikegami.t@gmail.com>,
        <keescook@chromium.org>, <bbrezillon@kernel.org>,
        <ikegami@allied-telesis.co.jp>, <richard@nod.at>,
        <linux-kernel@vger.kernel.org>, <marek.vasut@gmail.com>,
        <linux-mtd@lists.infradead.org>, <computersforpeace@gmail.com>,
        <dwmw2@infradead.org>
References: <1551189648-58073-1-git-send-email-liujian56@huawei.com> <016001d4cf71$865e7b60$931b7220$@gmail.com> <4F88C5DDA1E80143B232E89585ACE27D0264F137@DGGEMM528-MBX.china.huawei.com> <20190228164228.734ede80@collabora.com> <005a01d4d03e$39b0e0f0$ad12a2d0$@yahoo.co.jp> <4b3bc01a-3632-5dde-f683-94744ee7179d@ti.com>
In-Reply-To: <4b3bc01a-3632-5dde-f683-94744ee7179d@ti.com>
Subject: RE: [PATCH v3] cfi: fix deadloop in cfi_cmdset_0002.c do_write_buffer
Date:   Sat, 2 Mar 2019 01:59:41 +0900
Message-ID: <000501d4d050$38eca160$aac5e420$@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain;
        charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Content-Language: ja
Thread-Index: AQHOptjmAmqem5WpXlLpfOi8uScBsQIgzkq5Atg5CjYCPRAs9gF4c9/ZAXvgv0ulsf4HgA==
Sender: linux-kernel-owner@vger.kernel.org
Precedence: bulk

> [...]
> >>>>> In function do_write_buffer(), in the for loop, there is a case
> >>>>> chip_ready() returns 1 while chip_good() returns 0, so it never =
break
> >>>>> the loop.
> >>>>> To fix this, chip_good() is enough and it should timeout if it =
stay
> >>>>> bad for a while.
> >>>>>
> >>>>> Fixes: dfeae1073583("mtd: cfi_cmdset_0002: Change write buffer =
to
> >>>>> check correct value")
> >>>>> Signed-off-by: Yi Huaijie <yihuaijie@huawei.com>
> >>>>> Signed-off-by: Liu Jian <liujian56@huawei.com>
> >>>>> Reviewed-by: Tokunori Ikegami <ikegami_to@yahoo.co.jp>
> >>>>> ---
> >>>>> v2->v3:
> >>>>> Follow Vignesh's advice:
> >>>>> add one more check for check_good() even when time_after() =
returns
> >> true.
> >>>>>
> >>>>>  drivers/mtd/chips/cfi_cmdset_0002.c | 2 +-
> >>>>>  1 file changed, 1 insertion(+), 1 deletion(-)
> >>>>>
> >>>>> diff --git a/drivers/mtd/chips/cfi_cmdset_0002.c
> >>>>> b/drivers/mtd/chips/cfi_cmdset_0002.c
> >>>>> index 72428b6..3da2376 100644
> >>>>> --- a/drivers/mtd/chips/cfi_cmdset_0002.c
> >>>>> +++ b/drivers/mtd/chips/cfi_cmdset_0002.c
> >>>>> @@ -1876,7 +1876,7 @@ static int __xipram do_write_buffer(struct
> >>>>> map_info *map, struct flchip *chip,
> >>>>>  			continue;
> >>>>>  		}
> >>>>>
> >>>>> -		if (time_after(jiffies, timeo) && !chip_ready(map, adr))
> >>>>> +		if (time_after(jiffies, timeo) && !chip_good(map, adr,
> >>>>> datum))
> >>>>
> >>>>   Just another idea to understand easily.
> >>>>
> >>>>     unsigned long now =3D jiffies;
> >>>>
> >>>>     if (chip_good(map, adr, datum)) {
> >>>>         xip_enable(map, chip, adr);
> >>>>         goto op_done;
> >>>>     }
> >>>>
> >>>>     if (time_after(now, timeo) {
> >>>>         break;
> >>>>     }
> >>>>
> >>>
> >>> Thank you~. It is more easier to understand=EF=BC=81
> >>> If there are no other comments, I will send new patch again ):
> >>
> >> Except this version no longer does what Vignesh suggested. See how =
you
> >> no longer test if chip_good() is true if time_after() returns true. =
So,
> >> imagine the thread entering this function is preempted just after =
the
> >> first chip_good() test, and resumed a few ms later. time_after() =
will
> >> return true, but chip_good() might also return true, and you ignore =
it.
> >
> > I think that the following 3 versions will be worked for =
time_after()
> as a same result and follow the Vignesh-san suggestion.
> >
>=20
> As Boris explained above version 3 does not really follow my
> suggestion... Please see below
>=20
> > 1. Original Vignesh-san suggestion
> >
> > 	if (chip_good(map, adr, datum)) {
> > 		xip_enable(map, chip, adr);
> > 		goto op_done;
> > 	}
> >
> > 	if (time_after(jiffies, timeo)) {
> > 		/* Test chip_good() if TRUE incorrectly again so write
> failure by time_after() can be avoided. */
> > 		if (chip_good(map, adr, datum)) {
> > 			xip_enable(map, chip, adr);
> > 			goto op_done;
> > 		}
> > 		break;
> > 	}
> >
>=20
>=20
> Right, here we check chip_good() once _even when time_after() is true_
> to avoid _spurious_ timeout
>=20
> > 2. Liujian-san v3 patch
> >
> > 	/* Test chip_good() if FALSE correctly so write failure by
> time_after() can be avoided. */
> > 	if (time_after(jiffies, timeo) && !chip_good(map, adr))
> > 		break;
> >
> > 	if (chip_good(map, adr, datum)) {
> > 		xip_enable(map, chip, adr);
> > 		goto op_done;
> > 	}
> >
>=20
> This is a better version of 1
>=20
> > 3. My idea
> >
> > 	/* Save current jiffies value before chip_good() to avoid write
> failure by time_after() without testing chip_good() again. */
> > 	unsigned long now =3D jiffies;
> >
> > 	if (chip_good(map, adr, datum)) {
> > 		xip_enable(map, chip, adr);
> > 		goto op_done;
> > 	}
> >
>=20
> What if thread gets pre-empted at this point and is re-scheduled =
exactly
> after timeo jiffies have elapsed? Below check would be true and exit =
loop

  I think that the jiffies value now is save before chip_good() so below =
check would be false and not exit loop.

Regards,
Ikegami

>=20
> > 	if (time_after(now, timeo))
> > 		break;
> >
>=20
> So, code does not check for check chip_good() after timeoout has
> elapsed. But chip_good() might be true at this point. Therefore =
leading
> to spurious timeout.  So this version is still not right.
>=20
> >           Note: Some brackets have been fixed from the previous =
mail.
> >
>=20
> ______________________________________________________
> Linux MTD discussion mailing list
> http://lists.infradead.org/mailman/listinfo/linux-mtd/