369 lines
9.8 KiB
Go
369 lines
9.8 KiB
Go
// Copyright 2020 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
//go:build goexperiment.staticlockranking
|
|
|
|
package runtime
|
|
|
|
import (
|
|
"runtime/internal/atomic"
|
|
"unsafe"
|
|
)
|
|
|
|
// worldIsStopped is accessed atomically to track world-stops. 1 == world
|
|
// stopped.
|
|
var worldIsStopped uint32
|
|
|
|
// lockRankStruct is embedded in mutex
|
|
type lockRankStruct struct {
|
|
// static lock ranking of the lock
|
|
rank lockRank
|
|
// pad field to make sure lockRankStruct is a multiple of 8 bytes, even on
|
|
// 32-bit systems.
|
|
pad int
|
|
}
|
|
|
|
func lockInit(l *mutex, rank lockRank) {
|
|
l.rank = rank
|
|
}
|
|
|
|
func getLockRank(l *mutex) lockRank {
|
|
return l.rank
|
|
}
|
|
|
|
// lockWithRank is like lock(l), but allows the caller to specify a lock rank
|
|
// when acquiring a non-static lock.
|
|
//
|
|
// Note that we need to be careful about stack splits:
|
|
//
|
|
// This function is not nosplit, thus it may split at function entry. This may
|
|
// introduce a new edge in the lock order, but it is no different from any
|
|
// other (nosplit) call before this call (including the call to lock() itself).
|
|
//
|
|
// However, we switch to the systemstack to record the lock held to ensure that
|
|
// we record an accurate lock ordering. e.g., without systemstack, a stack
|
|
// split on entry to lock2() would record stack split locks as taken after l,
|
|
// even though l is not actually locked yet.
|
|
func lockWithRank(l *mutex, rank lockRank) {
|
|
if l == &debuglock || l == &paniclk {
|
|
// debuglock is only used for println/printlock(). Don't do lock
|
|
// rank recording for it, since print/println are used when
|
|
// printing out a lock ordering problem below.
|
|
//
|
|
// paniclk is only used for fatal throw/panic. Don't do lock
|
|
// ranking recording for it, since we throw after reporting a
|
|
// lock ordering problem. Additionally, paniclk may be taken
|
|
// after effectively any lock (anywhere we might panic), which
|
|
// the partial order doesn't cover.
|
|
lock2(l)
|
|
return
|
|
}
|
|
if rank == 0 {
|
|
rank = lockRankLeafRank
|
|
}
|
|
gp := getg()
|
|
// Log the new class.
|
|
systemstack(func() {
|
|
i := gp.m.locksHeldLen
|
|
if i >= len(gp.m.locksHeld) {
|
|
throw("too many locks held concurrently for rank checking")
|
|
}
|
|
gp.m.locksHeld[i].rank = rank
|
|
gp.m.locksHeld[i].lockAddr = uintptr(unsafe.Pointer(l))
|
|
gp.m.locksHeldLen++
|
|
|
|
// i is the index of the lock being acquired
|
|
if i > 0 {
|
|
checkRanks(gp, gp.m.locksHeld[i-1].rank, rank)
|
|
}
|
|
lock2(l)
|
|
})
|
|
}
|
|
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func printHeldLocks(gp *g) {
|
|
if gp.m.locksHeldLen == 0 {
|
|
println("<none>")
|
|
return
|
|
}
|
|
|
|
for j, held := range gp.m.locksHeld[:gp.m.locksHeldLen] {
|
|
println(j, ":", held.rank.String(), held.rank, unsafe.Pointer(gp.m.locksHeld[j].lockAddr))
|
|
}
|
|
}
|
|
|
|
// acquireLockRank acquires a rank which is not associated with a mutex lock
|
|
//
|
|
// This function may be called in nosplit context and thus must be nosplit.
|
|
//go:nosplit
|
|
func acquireLockRank(rank lockRank) {
|
|
gp := getg()
|
|
// Log the new class. See comment on lockWithRank.
|
|
systemstack(func() {
|
|
i := gp.m.locksHeldLen
|
|
if i >= len(gp.m.locksHeld) {
|
|
throw("too many locks held concurrently for rank checking")
|
|
}
|
|
gp.m.locksHeld[i].rank = rank
|
|
gp.m.locksHeld[i].lockAddr = 0
|
|
gp.m.locksHeldLen++
|
|
|
|
// i is the index of the lock being acquired
|
|
if i > 0 {
|
|
checkRanks(gp, gp.m.locksHeld[i-1].rank, rank)
|
|
}
|
|
})
|
|
}
|
|
|
|
// checkRanks checks if goroutine g, which has mostly recently acquired a lock
|
|
// with rank 'prevRank', can now acquire a lock with rank 'rank'.
|
|
//
|
|
//go:systemstack
|
|
func checkRanks(gp *g, prevRank, rank lockRank) {
|
|
rankOK := false
|
|
if rank < prevRank {
|
|
// If rank < prevRank, then we definitely have a rank error
|
|
rankOK = false
|
|
} else if rank == lockRankLeafRank {
|
|
// If new lock is a leaf lock, then the preceding lock can
|
|
// be anything except another leaf lock.
|
|
rankOK = prevRank < lockRankLeafRank
|
|
} else {
|
|
// We've now verified the total lock ranking, but we
|
|
// also enforce the partial ordering specified by
|
|
// lockPartialOrder as well. Two locks with the same rank
|
|
// can only be acquired at the same time if explicitly
|
|
// listed in the lockPartialOrder table.
|
|
list := lockPartialOrder[rank]
|
|
for _, entry := range list {
|
|
if entry == prevRank {
|
|
rankOK = true
|
|
break
|
|
}
|
|
}
|
|
}
|
|
if !rankOK {
|
|
printlock()
|
|
println(gp.m.procid, " ======")
|
|
printHeldLocks(gp)
|
|
throw("lock ordering problem")
|
|
}
|
|
}
|
|
|
|
// See comment on lockWithRank regarding stack splitting.
|
|
func unlockWithRank(l *mutex) {
|
|
if l == &debuglock || l == &paniclk {
|
|
// See comment at beginning of lockWithRank.
|
|
unlock2(l)
|
|
return
|
|
}
|
|
gp := getg()
|
|
systemstack(func() {
|
|
found := false
|
|
for i := gp.m.locksHeldLen - 1; i >= 0; i-- {
|
|
if gp.m.locksHeld[i].lockAddr == uintptr(unsafe.Pointer(l)) {
|
|
found = true
|
|
copy(gp.m.locksHeld[i:gp.m.locksHeldLen-1], gp.m.locksHeld[i+1:gp.m.locksHeldLen])
|
|
gp.m.locksHeldLen--
|
|
break
|
|
}
|
|
}
|
|
if !found {
|
|
println(gp.m.procid, ":", l.rank.String(), l.rank, l)
|
|
throw("unlock without matching lock acquire")
|
|
}
|
|
unlock2(l)
|
|
})
|
|
}
|
|
|
|
// releaseLockRank releases a rank which is not associated with a mutex lock
|
|
//
|
|
// This function may be called in nosplit context and thus must be nosplit.
|
|
//go:nosplit
|
|
func releaseLockRank(rank lockRank) {
|
|
gp := getg()
|
|
systemstack(func() {
|
|
found := false
|
|
for i := gp.m.locksHeldLen - 1; i >= 0; i-- {
|
|
if gp.m.locksHeld[i].rank == rank && gp.m.locksHeld[i].lockAddr == 0 {
|
|
found = true
|
|
copy(gp.m.locksHeld[i:gp.m.locksHeldLen-1], gp.m.locksHeld[i+1:gp.m.locksHeldLen])
|
|
gp.m.locksHeldLen--
|
|
break
|
|
}
|
|
}
|
|
if !found {
|
|
println(gp.m.procid, ":", rank.String(), rank)
|
|
throw("lockRank release without matching lockRank acquire")
|
|
}
|
|
})
|
|
}
|
|
|
|
// See comment on lockWithRank regarding stack splitting.
|
|
func lockWithRankMayAcquire(l *mutex, rank lockRank) {
|
|
gp := getg()
|
|
if gp.m.locksHeldLen == 0 {
|
|
// No possibility of lock ordering problem if no other locks held
|
|
return
|
|
}
|
|
|
|
systemstack(func() {
|
|
i := gp.m.locksHeldLen
|
|
if i >= len(gp.m.locksHeld) {
|
|
throw("too many locks held concurrently for rank checking")
|
|
}
|
|
// Temporarily add this lock to the locksHeld list, so
|
|
// checkRanks() will print out list, including this lock, if there
|
|
// is a lock ordering problem.
|
|
gp.m.locksHeld[i].rank = rank
|
|
gp.m.locksHeld[i].lockAddr = uintptr(unsafe.Pointer(l))
|
|
gp.m.locksHeldLen++
|
|
checkRanks(gp, gp.m.locksHeld[i-1].rank, rank)
|
|
gp.m.locksHeldLen--
|
|
})
|
|
}
|
|
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func checkLockHeld(gp *g, l *mutex) bool {
|
|
for i := gp.m.locksHeldLen - 1; i >= 0; i-- {
|
|
if gp.m.locksHeld[i].lockAddr == uintptr(unsafe.Pointer(l)) {
|
|
return true
|
|
}
|
|
}
|
|
return false
|
|
}
|
|
|
|
// assertLockHeld throws if l is not held by the caller.
|
|
//
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func assertLockHeld(l *mutex) {
|
|
gp := getg()
|
|
|
|
held := checkLockHeld(gp, l)
|
|
if held {
|
|
return
|
|
}
|
|
|
|
// Crash from system stack to avoid splits that may cause
|
|
// additional issues.
|
|
systemstack(func() {
|
|
printlock()
|
|
print("caller requires lock ", l, " (rank ", l.rank.String(), "), holding:\n")
|
|
printHeldLocks(gp)
|
|
throw("not holding required lock!")
|
|
})
|
|
}
|
|
|
|
// assertRankHeld throws if a mutex with rank r is not held by the caller.
|
|
//
|
|
// This is less precise than assertLockHeld, but can be used in places where a
|
|
// pointer to the exact mutex is not available.
|
|
//
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func assertRankHeld(r lockRank) {
|
|
gp := getg()
|
|
|
|
for i := gp.m.locksHeldLen - 1; i >= 0; i-- {
|
|
if gp.m.locksHeld[i].rank == r {
|
|
return
|
|
}
|
|
}
|
|
|
|
// Crash from system stack to avoid splits that may cause
|
|
// additional issues.
|
|
systemstack(func() {
|
|
printlock()
|
|
print("caller requires lock with rank ", r.String(), "), holding:\n")
|
|
printHeldLocks(gp)
|
|
throw("not holding required lock!")
|
|
})
|
|
}
|
|
|
|
// worldStopped notes that the world is stopped.
|
|
//
|
|
// Caller must hold worldsema.
|
|
//
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func worldStopped() {
|
|
if stopped := atomic.Xadd(&worldIsStopped, 1); stopped != 1 {
|
|
systemstack(func() {
|
|
print("world stop count=", stopped, "\n")
|
|
throw("recursive world stop")
|
|
})
|
|
}
|
|
}
|
|
|
|
// worldStarted that the world is starting.
|
|
//
|
|
// Caller must hold worldsema.
|
|
//
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func worldStarted() {
|
|
if stopped := atomic.Xadd(&worldIsStopped, -1); stopped != 0 {
|
|
systemstack(func() {
|
|
print("world stop count=", stopped, "\n")
|
|
throw("released non-stopped world stop")
|
|
})
|
|
}
|
|
}
|
|
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func checkWorldStopped() bool {
|
|
stopped := atomic.Load(&worldIsStopped)
|
|
if stopped > 1 {
|
|
systemstack(func() {
|
|
print("inconsistent world stop count=", stopped, "\n")
|
|
throw("inconsistent world stop count")
|
|
})
|
|
}
|
|
|
|
return stopped == 1
|
|
}
|
|
|
|
// assertWorldStopped throws if the world is not stopped. It does not check
|
|
// which M stopped the world.
|
|
//
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func assertWorldStopped() {
|
|
if checkWorldStopped() {
|
|
return
|
|
}
|
|
|
|
throw("world not stopped")
|
|
}
|
|
|
|
// assertWorldStoppedOrLockHeld throws if the world is not stopped and the
|
|
// passed lock is not held.
|
|
//
|
|
// nosplit to ensure it can be called in as many contexts as possible.
|
|
//go:nosplit
|
|
func assertWorldStoppedOrLockHeld(l *mutex) {
|
|
if checkWorldStopped() {
|
|
return
|
|
}
|
|
|
|
gp := getg()
|
|
held := checkLockHeld(gp, l)
|
|
if held {
|
|
return
|
|
}
|
|
|
|
// Crash from system stack to avoid splits that may cause
|
|
// additional issues.
|
|
systemstack(func() {
|
|
printlock()
|
|
print("caller requires world stop or lock ", l, " (rank ", l.rank.String(), "), holding:\n")
|
|
println("<no world stop>")
|
|
printHeldLocks(gp)
|
|
throw("no world stop or required lock!")
|
|
})
|
|
}
|