123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384 |
- // SPDX-License-Identifier: GPL-2.0+
- (*
- * Copyright (C) 2015 Jade Alglave <[email protected]>,
- * Copyright (C) 2016 Luc Maranget <[email protected]> for Inria
- * Copyright (C) 2017 Alan Stern <[email protected]>,
- * Andrea Parri <[email protected]>
- *
- * An earlier version of this file appeared in the companion webpage for
- * "Frightening small children and disconcerting grown-ups: Concurrency
- * in the Linux kernel" by Alglave, Maranget, McKenney, Parri, and Stern,
- * which appeared in ASPLOS 2018.
- *)
- "Linux-kernel memory consistency model"
- enum Accesses = 'once (*READ_ONCE,WRITE_ONCE*) ||
- 'release (*smp_store_release*) ||
- 'acquire (*smp_load_acquire*) ||
- 'noreturn (* R of non-return RMW *)
- instructions R[{'once,'acquire,'noreturn}]
- instructions W[{'once,'release}]
- instructions RMW[{'once,'acquire,'release}]
- enum Barriers = 'wmb (*smp_wmb*) ||
- 'rmb (*smp_rmb*) ||
- 'mb (*smp_mb*) ||
- 'barrier (*barrier*) ||
- 'rcu-lock (*rcu_read_lock*) ||
- 'rcu-unlock (*rcu_read_unlock*) ||
- 'sync-rcu (*synchronize_rcu*) ||
- 'before-atomic (*smp_mb__before_atomic*) ||
- 'after-atomic (*smp_mb__after_atomic*) ||
- 'after-spinlock (*smp_mb__after_spinlock*) ||
- 'after-unlock-lock (*smp_mb__after_unlock_lock*)
- instructions F[Barriers]
- (* SRCU *)
- enum SRCU = 'srcu-lock || 'srcu-unlock || 'sync-srcu
- instructions SRCU[SRCU]
- (* All srcu events *)
- let Srcu = Srcu-lock | Srcu-unlock | Sync-srcu
- (* Compute matching pairs of nested Rcu-lock and Rcu-unlock *)
- let rcu-rscs = let rec
- unmatched-locks = Rcu-lock \ domain(matched)
- and unmatched-unlocks = Rcu-unlock \ range(matched)
- and unmatched = unmatched-locks | unmatched-unlocks
- and unmatched-po = [unmatched] ; po ; [unmatched]
- and unmatched-locks-to-unlocks =
- [unmatched-locks] ; po ; [unmatched-unlocks]
- and matched = matched | (unmatched-locks-to-unlocks \
- (unmatched-po ; unmatched-po))
- in matched
- (* Validate nesting *)
- flag ~empty Rcu-lock \ domain(rcu-rscs) as unbalanced-rcu-locking
- flag ~empty Rcu-unlock \ range(rcu-rscs) as unbalanced-rcu-locking
- (* Compute matching pairs of nested Srcu-lock and Srcu-unlock *)
- let srcu-rscs = let rec
- unmatched-locks = Srcu-lock \ domain(matched)
- and unmatched-unlocks = Srcu-unlock \ range(matched)
- and unmatched = unmatched-locks | unmatched-unlocks
- and unmatched-po = ([unmatched] ; po ; [unmatched]) & loc
- and unmatched-locks-to-unlocks =
- ([unmatched-locks] ; po ; [unmatched-unlocks]) & loc
- and matched = matched | (unmatched-locks-to-unlocks \
- (unmatched-po ; unmatched-po))
- in matched
- (* Validate nesting *)
- flag ~empty Srcu-lock \ domain(srcu-rscs) as unbalanced-srcu-locking
- flag ~empty Srcu-unlock \ range(srcu-rscs) as unbalanced-srcu-locking
- (* Check for use of synchronize_srcu() inside an RCU critical section *)
- flag ~empty rcu-rscs & (po ; [Sync-srcu] ; po) as invalid-sleep
- (* Validate SRCU dynamic match *)
- flag ~empty different-values(srcu-rscs) as srcu-bad-nesting
- (* Compute marked and plain memory accesses *)
- let Marked = (~M) | IW | Once | Release | Acquire | domain(rmw) | range(rmw) |
- LKR | LKW | UL | LF | RL | RU
- let Plain = M \ Marked
|