xpmem: Make sure vm_range is used under memory_range_lock
Refs: #1330 Change-Id: I87a0d6042a2c388fbd260d8dff5d109106478872
This commit is contained in:
@ -1133,16 +1133,18 @@ static int xpmem_attach(
|
||||
existing_vmr = lookup_process_memory_range(vm, vaddr,
|
||||
vaddr + size);
|
||||
|
||||
ihk_mc_spinlock_unlock_noirq(&vm->memory_range_lock);
|
||||
|
||||
for (; existing_vmr && existing_vmr->start < vaddr + size;
|
||||
existing_vmr = next_process_memory_range(vm,
|
||||
existing_vmr)) {
|
||||
if (xpmem_is_private_data(existing_vmr)) {
|
||||
ret = -EINVAL;
|
||||
ihk_mc_spinlock_unlock_noirq(
|
||||
&vm->memory_range_lock);
|
||||
goto out_2;
|
||||
}
|
||||
}
|
||||
|
||||
ihk_mc_spinlock_unlock_noirq(&vm->memory_range_lock);
|
||||
}
|
||||
|
||||
flags |= MAP_ANONYMOUS;
|
||||
@ -1414,20 +1416,18 @@ static void xpmem_detach_att(
|
||||
|
||||
XPMEM_DEBUG("detaching att->vm=0x%p", (void *)att->vm);
|
||||
|
||||
vm = att->vm;
|
||||
|
||||
ihk_mc_spinlock_lock_noirq(&vm->memory_range_lock);
|
||||
|
||||
mcs_rwlock_writer_lock(&att->at_lock, &at_lock);
|
||||
|
||||
if (att->flags & XPMEM_FLAG_DESTROYING) {
|
||||
mcs_rwlock_writer_unlock(&att->at_lock, &at_lock);
|
||||
ihk_mc_spinlock_unlock_noirq(&vm->memory_range_lock);
|
||||
XPMEM_DEBUG("return: XPMEM_FLAG_DESTROYING");
|
||||
return;
|
||||
}
|
||||
att->flags |= XPMEM_FLAG_DESTROYING;
|
||||
|
||||
vm = att->vm;
|
||||
ihk_mc_spinlock_lock_noirq(&vm->memory_range_lock);
|
||||
|
||||
range = lookup_process_memory_range(vm,
|
||||
att->at_vaddr, att->at_vaddr + 1);
|
||||
|
||||
@ -1667,10 +1667,8 @@ int xpmem_remove_process_memory_range(
|
||||
mcs_rwlock_writer_lock(&att->at_lock, &at_lock);
|
||||
|
||||
if (att->flags & XPMEM_FLAG_DESTROYING) {
|
||||
mcs_rwlock_writer_unlock(&att->at_lock, &at_lock);
|
||||
xpmem_att_deref(att);
|
||||
XPMEM_DEBUG("already cleaned up");
|
||||
return 0;
|
||||
goto out;
|
||||
}
|
||||
|
||||
if (vmr->start == att->at_vaddr &&
|
||||
@ -2019,10 +2017,6 @@ static int xpmem_remap_pte(
|
||||
seg_vmr = lookup_process_memory_range(seg_tg->vm, seg_vaddr,
|
||||
seg_vaddr + 1);
|
||||
|
||||
if (is_remote_vm(seg_tg->vm)) {
|
||||
ihk_mc_spinlock_unlock_noirq(&seg_tg->vm->memory_range_lock);
|
||||
}
|
||||
|
||||
if (!seg_vmr) {
|
||||
ret = -EFAULT;
|
||||
ekprintf("%s: ERROR: lookup_process_memory_range() failed\n",
|
||||
@ -2033,6 +2027,7 @@ static int xpmem_remap_pte(
|
||||
seg_pte = ihk_mc_pt_lookup_pte(seg_tg->vm->address_space->page_table,
|
||||
(void *)seg_vaddr, seg_vmr->pgshift, &seg_pgaddr, &seg_pgsize,
|
||||
&seg_p2align);
|
||||
|
||||
if (!seg_pte) {
|
||||
ret = -EFAULT;
|
||||
ekprintf("%s: ERROR: ihk_mc_pt_lookup_pte() failed\n",
|
||||
@ -2080,6 +2075,10 @@ static int xpmem_remap_pte(
|
||||
}
|
||||
|
||||
out:
|
||||
if (is_remote_vm(seg_tg->vm)) {
|
||||
ihk_mc_spinlock_unlock_noirq(&seg_tg->vm->memory_range_lock);
|
||||
}
|
||||
|
||||
XPMEM_DEBUG("return: ret=%d", ret);
|
||||
|
||||
return ret;
|
||||
|
||||
Reference in New Issue
Block a user