Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Date:   Thu, 10 Aug 2023 14:13:41 +0200
From:   Peter Zijlstra <peterz@infradead.org>
To:     =?iso-8859-1?Q?Andr=E9?= Almeida <andrealmeid@igalia.com>
Cc:     linux-kernel@vger.kernel.org, mingo@redhat.com,
        dvhart@infradead.org, dave@stgolabs.net, tglx@linutronix.de,
        axboe@kernel.dk, Andrew Morton <akpm@linux-foundation.org>,
        urezki@gmail.com, hch@infradead.org, lstoakes@gmail.com,
        Arnd Bergmann <arnd@arndb.de>, linux-api@vger.kernel.org,
        linux-mm@kvack.org, linux-arch@vger.kernel.org,
        malteskarupke@web.de, Geert Uytterhoeven <geert@linux-m68k.org>
Subject: Re: [PATCH v2 05/14] futex: Add sys_futex_wake()
Message-ID: <20230810121341.GX212435@hirez.programming.kicks-ass.net>
References: <20230807121843.710612856@infradead.org>
 <20230807123323.090897260@infradead.org>
 <071c02ae-a74d-46d8-990b-262264b62caf@igalia.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <071c02ae-a74d-46d8-990b-262264b62caf@igalia.com>
Precedence: bulk

On Wed, Aug 09, 2023 at 07:25:19PM -0300, Andr? Almeida wrote:
> Hi Peter,
> 
> Em 07/08/2023 09:18, Peter Zijlstra escreveu:
> > To complement sys_futex_waitv() add sys_futex_wake(). This syscall
> > implements what was previously known as FUTEX_WAKE_BITSET except it
> > uses 'unsigned long' for the bitmask and takes FUTEX2 flags.
> > 
> > The 'unsigned long' allows FUTEX2_SIZE_U64 on 64bit platforms.
> > 
> > Signed-off-by: Peter Zijlstra (Intel) <peterz@infradead.org>
> > Acked-by: Geert Uytterhoeven <geert@linux-m68k.org>
> > ---
> 
> [...]
> 
> > +/*
> > + * sys_futex_wake - Wake a number of futexes
> > + * @uaddr:	Address of the futex(es) to wake
> > + * @mask:	bitmask
> > + * @nr:		Number of the futexes to wake
> > + * @flags:	FUTEX2 flags
> > + *
> > + * Identical to the traditional FUTEX_WAKE_BITSET op, except it is part of the
> > + * futex2 family of calls.
> > + */
> > +
> > +SYSCALL_DEFINE4(futex_wake,
> > +		void __user *, uaddr,
> > +		unsigned long, mask,
> > +		int, nr,
> > +		unsigned int, flags)
> > +{
> 
> Do you think we could have a
> 
> 	if (!nr)
> 		return 0;
> 
> here? Otherwise, calling futex_wake(&f, 0, flags) will wake 1 futex (if
> available), which is a strange undocumented behavior in my opinion.

Oh 'cute' that.. yeah, but how about I put it ...

> > +	if (flags & ~FUTEX2_VALID_MASK)
> > +		return -EINVAL;
> > +
> > +	flags = futex2_to_flags(flags);
> > +	if (!futex_flags_valid(flags))
> > +		return -EINVAL;
> > +
> > +	if (!futex_validate_input(flags, mask))
> > +		return -EINVAL;

here, because otherwise we get:

	sys_futex_wake(&f, 0xFFFF, 0, FUTEX2_SIZE_U8)

to return 0, even though that is 'obviously' nonsensical and should
return -EINVAL. Or even garbage flags would be 'accepted'.

(because 0xFFFF is larger than U8 can accomodate)

> > +
> > +	return futex_wake(uaddr, flags, nr, mask);
> > +}