On Wed, May 23, 2018 at 04:03:37PM +0100, Dave P Martin wrote: > On Wed, May 23, 2018 at 03:56:57PM +0100, Catalin Marinas wrote: > > On Wed, May 23, 2018 at 02:31:59PM +0100, Dave P Martin wrote: > > > On Wed, May 23, 2018 at 01:48:12PM +0200, Christoffer Dall wrote: > > > > On Tue, May 22, 2018 at 05:05:08PM +0100, Dave Martin wrote: > > > > > This is true by construction however: TIF_FOREIGN_FPSTATE is never > > > > > cleared except when returning to userspace or returning from a > > > > > signal: thus, for a true kernel thread no FPSIMD context is ever > > > > > loaded, TIF_FOREIGN_FPSTATE will remain set and no context will > > > > > ever be saved. > > > > > > > > I don't understand this construction proof; from looking at the patch > > > > below it is not obvious to me why fpsimd_thread_switch() can never have > > > > !wrong_task && !wrong_cpu and therefore clear TIF_FOREIGN_FPSTATE for a > > > > kernel thread? > > > > > > Looking at this again, I think it is poorly worded. This patch aims to > > > make it true by construction, but it isn't prior to the patch. > > > > > > I'm tempted to delete the paragraph: the assertion of both untrue and > > > not the best way to justify that this patch works. > > > > > > > > > How about: > > > > > > -8<- > > > > > > The context switch logic already isolates user threads from each other. > > > This, it is sufficient for isolating user threads from the kernel, > > > since the goal either way is to ensure that code executing in userspace > > > cannot see any FPSIMD state except its own. Thus, there is no special > > > property of kernel threads that we care about except that it is > > > pointless to save or load FPSIMD register state for them. > > > > > > At worst, the removal of all the kernel thread special cases by this > > > patch would thus spuriously load and save state for kernel threads when > > > unnecessary. > > > > > > But the context switch logic is already deliberately optimised to defer > > > reloads of the regs until ret_to_user (or sigreturn as a special case), > > > which kernel threads by definition never reach. > > > > > > ->8- > > > > The "at worst" paragraph makes it look like it could happen (at least > > until you reach the last paragraph). Maybe you can just say that > > wrong_task and wrong_cpu (with the fpsimd_cpu = NR_CPUS addition) are > > always true for kernel threads. You should probably mention this in a > > comment in the code as well. > > What if I just delete the second paragraph, and remove the "But" from > the start of the third, and append: > > "As a result, the wrong_task and wrong_cpu tests in > fpsimd_thread_switch() will always yield false for kernel threads." > > ...with a similar comment in the code? Sounds fine. With that, feel free to add: Reviewed-by: Catalin Marinas <catalin.marinas@xxxxxxx> _______________________________________________ kvmarm mailing list kvmarm@xxxxxxxxxxxxxxxxxxxxx https://lists.cs.columbia.edu/mailman/listinfo/kvmarm