Linux MultiMedia Card development
 help / color / mirror / Atom feed
From: Steven Rostedt <rostedt@goodmis.org>
To: Baolin Wang <baolin.wang@linaro.org>
Cc: ulf.hansson@linaro.org, mingo@redhat.com,
	adrian.hunter@intel.com, yangbo.lu@freescale.com,
	akpm@linux-foundation.org, JBottomley@Odin.com,
	lporzio@micron.com, jonathanh@nvidia.com, grundler@chromium.org,
	axboe@fb.com, fabf@skynet.be, yunpeng.gao@intel.com,
	dan.j.williams@intel.com, rabin.vincent@axis.com,
	chuanxiao.dong@intel.com, shawn.lin@rock-chips.com,
	heiko@sntech.de, dianders@chromium.org, david@protonic.nl,
	broonie@kernel.org, linus.walleij@linaro.org,
	takahiro.akashi@linaro.org, linux-kernel@vger.kernel.org,
	linux-mmc@vger.kernel.org
Subject: Re: [PATCH] mmc: Provide tracepoints for request processing
Date: Thu, 24 Mar 2016 11:13:03 -0400	[thread overview]
Message-ID: <20160324111303.03bf14be@gandalf.local.home> (raw)
In-Reply-To: <05d6338bddae751c1755e7825d4179658e78cc71.1458819912.git.baolin.wang@linaro.org>

On Thu, 24 Mar 2016 19:54:08 +0800
Baolin Wang <baolin.wang@linaro.org> wrote:


> +++ b/include/trace/events/mmc.h
> @@ -0,0 +1,188 @@
> +#undef TRACE_SYSTEM
> +#define TRACE_SYSTEM mmc
> +
> +#if !defined(_TRACE_MMC_H) || defined(TRACE_HEADER_MULTI_READ)
> +#define _TRACE_MMC_H
> +
> +#include <linux/blkdev.h>
> +#include <linux/mmc/core.h>
> +#include <linux/mmc/host.h>
> +#include <linux/tracepoint.h>
> +
> +DECLARE_EVENT_CLASS(mmc_request,
> +
> +	TP_PROTO(struct request *rq),
> +
> +	TP_ARGS(rq),
> +
> +	TP_STRUCT__entry(
> +		__field(sector_t,		sector)
> +		__field(unsigned int,		data_len)
> +		__field(int,			cmd_dir)
> +		__field(struct request *,	rq)
> +	),
> +
> +	TP_fast_assign(
> +		__entry->sector = blk_rq_pos(rq);
> +		__entry->data_len = blk_rq_bytes(rq);
> +		__entry->cmd_dir = rq_data_dir(rq);
> +		__entry->rq = rq;
> +	),
> +
> +	TP_printk("struct request[%p]:sector=%lu rw=%d len=%u",
> +		  (struct request *)__entry->rq,
> +		  (unsigned long)__entry->sector,
> +		  (int)__entry->cmd_dir,
> +		  (unsigned int)__entry->data_len)

Why the typecasts? __entry->rq is already of the type "struct request *"
as you declared it in the TP_STRUCT__entry(). Same for the other fields.


> +);
> +
> +DEFINE_EVENT(mmc_request, mmc_queue_fetch,
> +
> +	TP_PROTO(struct request *rq),
> +
> +	TP_ARGS(rq)
> +
> +);
> +
> +DEFINE_EVENT(mmc_request, mmc_block_packed_req,
> +
> +	TP_PROTO(struct request *rq),
> +
> +	TP_ARGS(rq)
> +
> +);
> +
> +DEFINE_EVENT(mmc_request, mmc_block_req_done,
> +
> +	TP_PROTO(struct request *rq),
> +
> +	TP_ARGS(rq)
> +
> +);
> +
> +TRACE_EVENT(mmc_request_start,
> +
> +	TP_PROTO(struct mmc_host *host, struct mmc_request *mrq),
> +
> +	TP_ARGS(host, mrq),
> +
> +	TP_STRUCT__entry(
> +		__field(u32,			cmd_opcode)
> +		__field(u32,			cmd_arg)
> +		__field(unsigned int,		cmd_flags)
> +		__field(u32,			stop_opcode)
> +		__field(u32,			stop_arg)
> +		__field(unsigned int,		stop_flags)
> +		__field(u32,			sbc_opcode)
> +		__field(u32,			sbc_arg)
> +		__field(unsigned int,		sbc_flags)
> +		__field(unsigned int,		blocks)
> +		__field(unsigned int,		blksz)
> +		__field(unsigned int,		data_flags)
> +		__field(struct mmc_request *,	mrq)
> +		__field(struct mmc_host *,	host)
> +	),
> +
> +	TP_fast_assign(
> +		__entry->cmd_opcode = mrq->cmd->opcode;
> +		__entry->cmd_arg = mrq->cmd->arg;
> +		__entry->cmd_flags = mrq->cmd->flags;
> +		__entry->stop_opcode = mrq->stop ? mrq->stop->opcode : 0;
> +		__entry->stop_arg = mrq->stop ? mrq->stop->arg : 0;
> +		__entry->stop_flags = mrq->stop ? mrq->stop->flags : 0;
> +		__entry->sbc_opcode = mrq->sbc ? mrq->sbc->opcode : 0;
> +		__entry->sbc_arg = mrq->sbc ? mrq->sbc->arg : 0;
> +		__entry->sbc_flags = mrq->sbc ? mrq->sbc->flags : 0;
> +		__entry->blksz = mrq->data ? mrq->data->blksz : 0;
> +		__entry->blocks = mrq->data ? mrq->data->blocks : 0;
> +		__entry->data_flags = mrq->data ? mrq->data->flags : 0;
> +		__entry->mrq = mrq;
> +		__entry->host = host;
> +	),
> +
> +	TP_printk("%s: start struct mmc_request[%p]: "
> +		  "cmd_opcode=%u cmd_arg=0x%x cmd_flags=0x%x "
> +		  "stop_opcode=%u stop_arg=0x%x stop_flags=0x%x "
> +		  "sbc_opcode=%u sbc_arg=0x%x sbc_flags=0x%x "
> +		  "blocks=%u blksz=%u data_flags=0x%x",
> +		  mmc_hostname((struct mmc_host *)__entry->host),

Is this safe? I see mmc_hostname() defined as:

 dev_name(&(x)->class_dev)

Which would be here:

 dev_name(&(__entry->host)->class_dev)

How what happens if ater you trace a host, you free it? Then the old
pointer will still be in the buffer. If the user reads the trace data
and this is called, then __entry->host will be pointing to freed data,
and the dereference could cause a system crash.


> +		  (struct mmc_request *)__entry->mrq,
> +		  (u32)__entry->cmd_opcode, (u32)__entry->cmd_arg,
> +		  (unsigned int)__entry->cmd_flags,
> +		  (u32)__entry->stop_opcode, (u32)__entry->stop_arg,
> +		  (unsigned int)__entry->stop_flags,
> +		  (u32)__entry->sbc_opcode, (u32)__entry->sbc_arg,
> +		  (unsigned int)__entry->sbc_flags,
> +		  (unsigned int)__entry->blocks,
> +		  (unsigned int)__entry->blksz,
> +		  (unsigned int)__entry->data_flags)
> +);
> +
> +TRACE_EVENT(mmc_request_done,
> +
> +	TP_PROTO(struct mmc_host *host, struct mmc_request *mrq),
> +
> +	TP_ARGS(host, mrq),
> +
> +	TP_STRUCT__entry(
> +		__field(u32,		cmd_opcode)
> +		__field(int,		cmd_err)
> +		__array(u32,		cmd_resp,	4)
> +		__field(u32,		stop_opcode)
> +		__field(int,		stop_err)
> +		__array(u32,		stop_resp,	4)
> +		__field(u32,		sbc_opcode)
> +		__field(int,		sbc_err)
> +		__array(u32,		sbc_resp,	4)
> +		__field(unsigned int,		bytes_xfered)
> +		__field(int,			data_err)
> +		__field(struct mmc_request *,	mrq)
> +		__field(struct mmc_host *,	host)
> +	),
> +
> +	TP_fast_assign(
> +		__entry->cmd_opcode = mrq->cmd->opcode;
> +		__entry->cmd_err = mrq->cmd->error;
> +		memcpy(__entry->cmd_resp, mrq->cmd->resp, 4);
> +		__entry->stop_opcode = mrq->stop ? mrq->stop->opcode : 0;
> +		__entry->stop_err = mrq->stop ? mrq->stop->error : 0;
> +		__entry->stop_resp[0] = mrq->stop ? mrq->stop->resp[0] : 0;
> +		__entry->stop_resp[1] = mrq->stop ? mrq->stop->resp[1] : 0;
> +		__entry->stop_resp[2] = mrq->stop ? mrq->stop->resp[2] : 0;
> +		__entry->stop_resp[3] = mrq->stop ? mrq->stop->resp[3] : 0;
> +		__entry->sbc_opcode = mrq->sbc ? mrq->sbc->opcode : 0;
> +		__entry->sbc_err = mrq->sbc ? mrq->sbc->error : 0;
> +		__entry->sbc_resp[0] = mrq->sbc ? mrq->sbc->resp[0] : 0;
> +		__entry->sbc_resp[1] = mrq->sbc ? mrq->sbc->resp[1] : 0;
> +		__entry->sbc_resp[2] = mrq->sbc ? mrq->sbc->resp[2] : 0;
> +		__entry->sbc_resp[3] = mrq->sbc ? mrq->sbc->resp[3] : 0;
> +		__entry->bytes_xfered = mrq->data ? mrq->data->bytes_xfered : 0;
> +		__entry->data_err = mrq->data ? mrq->data->error : 0;
> +		__entry->host = host;
> +		__entry->mrq = mrq;
> +	),
> +
> +	TP_printk("%s: end struct mmc_request[%p]: "
> +		  "cmd_opcode=%u cmd_err=%d cmd_resp=0x%x 0x%x 0x%x 0x%x "
> +		  "stop_opcode=%u stop_err=%d stop_resp=0x%x 0x%x 0x%x 0x%x "
> +		  "sbc_opcode=%u sbc_err=%d sbc_resp=0x%x 0x%x 0x%x 0x%x "
> +		  "bytes_xfered=%u data_err=%d",
> +		  mmc_hostname((struct mmc_host *)__entry->host),

Same here, and please get rid of all the redundant typecasts.

-- Steve

> +		  (struct mmc_request *)__entry->mrq,
> +		  (u32)__entry->cmd_opcode, (int)__entry->cmd_err,
> +		  (u32)__entry->cmd_resp[0], (u32)__entry->cmd_resp[1],
> +		  (u32)__entry->cmd_resp[2], (u32)__entry->cmd_resp[3],
> +		  (u32)__entry->stop_opcode, (int)__entry->stop_err,
> +		  (u32)__entry->stop_resp[0], (u32)__entry->stop_resp[1],
> +		  (u32)__entry->stop_resp[2], (u32)__entry->stop_resp[3],
> +		  (u32)__entry->sbc_opcode, (int)__entry->sbc_err,
> +		  (u32)__entry->sbc_resp[0], (u32)__entry->sbc_resp[1],
> +		  (u32)__entry->sbc_resp[2], (u32)__entry->sbc_resp[3],
> +		  (unsigned int)__entry->bytes_xfered,
> +		  (int)__entry->data_err)
> +);
> +
> +#endif /* _TRACE_MMC_H */
> +
> +/* This part must be outside protection */
> +#include <trace/define_trace.h>

  parent reply	other threads:[~2016-03-24 15:13 UTC|newest]

Thread overview: 9+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-03-24 11:54 [PATCH] mmc: Provide tracepoints for request processing Baolin Wang
2016-03-24 14:02 ` kbuild test robot
2016-03-24 14:08 ` Jens Axboe
2016-03-25  7:32   ` Baolin Wang
2016-03-25 14:07     ` Jens Axboe
2016-03-28  4:55       ` Baolin Wang
2016-03-24 14:53 ` kbuild test robot
2016-03-24 15:13 ` Steven Rostedt [this message]
2016-03-25  7:58   ` Baolin Wang

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20160324111303.03bf14be@gandalf.local.home \
    --to=rostedt@goodmis.org \
    --cc=JBottomley@Odin.com \
    --cc=adrian.hunter@intel.com \
    --cc=akpm@linux-foundation.org \
    --cc=axboe@fb.com \
    --cc=baolin.wang@linaro.org \
    --cc=broonie@kernel.org \
    --cc=chuanxiao.dong@intel.com \
    --cc=dan.j.williams@intel.com \
    --cc=david@protonic.nl \
    --cc=dianders@chromium.org \
    --cc=fabf@skynet.be \
    --cc=grundler@chromium.org \
    --cc=heiko@sntech.de \
    --cc=jonathanh@nvidia.com \
    --cc=linus.walleij@linaro.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=linux-mmc@vger.kernel.org \
    --cc=lporzio@micron.com \
    --cc=mingo@redhat.com \
    --cc=rabin.vincent@axis.com \
    --cc=shawn.lin@rock-chips.com \
    --cc=takahiro.akashi@linaro.org \
    --cc=ulf.hansson@linaro.org \
    --cc=yangbo.lu@freescale.com \
    --cc=yunpeng.gao@intel.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox