From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([208.118.235.92]:46734) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UZJXw-0008Na-6N for qemu-devel@nongnu.org; Mon, 06 May 2013 07:25:33 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1UZJXv-0005KG-6j for qemu-devel@nongnu.org; Mon, 06 May 2013 07:25:32 -0400 Received: from thoth.sbs.de ([192.35.17.2]:20195) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1UZJXu-0005Jv-Sx for qemu-devel@nongnu.org; Mon, 06 May 2013 07:25:31 -0400 Message-ID: <51879326.9040607@siemens.com> Date: Mon, 06 May 2013 13:25:26 +0200 From: Jan Kiszka MIME-Version: 1.0 References: <1353808984-22368-1-git-send-email-qemulist@gmail.com> <1353808984-22368-6-git-send-email-qemulist@gmail.com> <51879242.7030402@redhat.com> In-Reply-To: <51879242.7030402@redhat.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Subject: Re: [Qemu-devel] [PATCH v7 5/7] memory: make mmio dispatch able to be out of biglock List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Paolo Bonzini Cc: Peter Maydell , "gleb@redhat.com" , Stefan Hajnoczi , Marcelo Tosatti , Liu Ping Fan , "qemu-devel@nongnu.org" , Anthony Liguori On 2013-05-06 13:21, Paolo Bonzini wrote: > Il 25/11/2012 03:03, Liu Ping Fan ha scritto: >> @@ -3550,12 +3668,11 @@ void *address_space_map(AddressSpace *as, >> target_phys_addr_t *plen, >> bool is_write) >> { >> - AddressSpaceDispatch *d = as->dispatch; >> target_phys_addr_t len = *plen; >> target_phys_addr_t todo = 0; >> int l; >> target_phys_addr_t page; >> - MemoryRegionSection *section; >> + MemoryRegionSection *section, mr_obj; >> ram_addr_t raddr = RAM_ADDR_MAX; >> ram_addr_t rlen; >> void *ret; >> @@ -3565,7 +3682,8 @@ void *address_space_map(AddressSpace *as, >> l = (page + TARGET_PAGE_SIZE) - addr; >> if (l > len) >> l = len; >> - section = phys_page_find(d, page >> TARGET_PAGE_BITS); >> + address_space_section_lookup_ref(as, page >> TARGET_PAGE_BITS, &mr_obj); >> + section = &mr_obj; >> >> if (!(memory_region_is_ram(section->mr) && !section->readonly)) { >> if (todo || bounce.buffer) { >> @@ -3579,6 +3697,7 @@ void *address_space_map(AddressSpace *as, >> } >> >> *plen = l; >> + memory_region_section_unref(&mr_obj); >> return bounce.buffer; >> } >> if (!todo) { >> @@ -3589,6 +3708,7 @@ void *address_space_map(AddressSpace *as, >> len -= l; >> addr += l; >> todo += l; >> + memory_region_section_unref(&mr_obj); >> } >> rlen = todo; >> ret = qemu_ram_ptr_length(raddr, &rlen); > > I think this unref is wrong. You need to delay it to the > address_space_unmap, and this in turns requires changing the signature > of address_space_map. Can't RAMBlock hold a reference to the associated region? Then this could be retrieved on unmap without bothering the caller. Jan -- Siemens AG, Corporate Technology, CT RTC ITP SDP-DE Corporate Competence Center Embedded Linux