On Wed, 2021-05-05 at 10:41 +0000, David Laight wrote: > > That's nice and seems to work today as expected, but there's one problem: > > unaligned access is UB according to the ISO C standard, ... > > The C standard isn't relevant. Forget that I mentioned it. Unaligned access is UB for GCC, no matter the architecture. Please check all the comments in this WONTFIX bug: https://gcc.gnu.org/bugzilla/show_bug.cgi?id=93031 > That doesn't help you at all. As I mentioned, TODAY that is not a problem. But as the GCC guys insist that they consider it UB, one morning we might wake up and discover that with the latest version of GCC, the kernel is misbehaving. > If the compiler is given any hint that the address is aligned > it will use potentially misaligned memory accesses. > So if the above was: > *(int __attribute__((packed)) *)p = val; > and the caller had: > int *p = maybe_unaligned(); > put_unaligned_le32(0, p); > Yeah, but you changed the code. That's what I'm talking about. The code that I quoted is *current* code existing in the kernel that still works because GCC doesn't have *yet* an optimization that breaks it. The GCC guys explicitly claim we should NOT write code like that, not even on architectures that support unaligned access natively, because it's UB and they might break it any moment. > Then gcc will generate a 32bit write even on sparc. > __builtin_memcpy() will expand to exactly the same 32bit write. I don't understand what you want mean with that comparison other than it's possible to achieve the same result in another way. __builtin_memcpy() does what we want it to do, and doesn't require maybe_unaligned() nor __attribute__((packed)), nor it emits more instructions. Therefore, it looks to me that put_unaligned_le32() could be re-implemented with __builtin_memcpy() without any drawbacks. > This is nothing new - at least 20 years. > > Basically, the C standard only allows you to cast a pointer > to 'void *' and then back to its original type. > GCC makes use of this for various optimisations and will > track the alignment through (void *) casts. The compiler cannot track the alignment across function calls in different translation units. It can only assume that the alignment is already correct (ehm, runtime checking is out of the table of course, except for UBSAN). Today, when we read/write an integer, GCC emits a MOV instruction (on x86) and it doesn't care about the alignment. That's why it works and, honestly, I wish it to continue to work like that. But, that's not necessarily what will happen. > I believe that, even for the simd instructions, gcc will pick > the 'misalign supporting' version if the data is marked > with the relevant alignment. > > Oh - and the loop vectorisation code is a pile of crap. > You almost never want it - look at the code it generates > for a loop you go round a few times. > It you are doing 10000 iteractions you'll need to unroll > it yourself to get decent performance. In kernel we don't care about the SIMD case, because such instructions are disabled. I just mentioned it, for the sake of completeness. When compiling user applications, SIMD instruction are normally allowed and some of them have alignment requirements that the compiler might assume as given instead of checking, because dereferencing unaligned pointers is UB. -- Vladislav Valtchev (vvaltchev)
