Re: [PATCH v2] x86/therm_throt.c: Fix error handling in thermal_throttle_add_dev

[Jean Delvare <khali@linux-fr.org>]

Hi Guenter,

On Fri, 10 Sep 2010 06:56:57 -0700, Guenter Roeck wrote:
> On Fri, Sep 10, 2010 at 04:19:37AM -0400, Jean Delvare wrote:
> > On Tue,  7 Sep 2010 17:25:50 -0700, Fenghua Yu wrote:
> > > From: Fenghua Yu <fenghua.yu@intel.com>
> > > 
> > > When sysfs_add_file_to_group fails, thermal_throttle_add_dev removes the
> > > created group and returns with the error code and the driver cleans up and
> > > returns with the error code. Thus the driver either installs all devices
> > > successfully or doesn't install any device at all.
> > 
> > I don't think this makes any sense. While I generally agree with the
> > idea that a given device (actually, CPU feature) should either be fully
> > available or not available at all, I don't get the point of preventing
> > the driver from loading because one device couldn't be initialized for
> > whatever reason. I don't know of any other driver behaving this way.
> > 
> > What's the rationale? I think Ingo's wording was inaccurate and when he
> > wrote "we should either initialize a driver fully - or not intialize it
> > at all" he really meant "device" not "driver. Ingo?
> 
> Question is what happens if an error is returned from device initialization.
> If it causes the driver not to be loaded, it will have to clean up first.
> To avoid that, it would have to drop the error from individual device
> initializations, like it did before.
> 
> As such, it really comes down to philosophy and personal preference.
> Mine would be to return the error and fail driver installation (after all,
> something must really be wrong for that to happen), but then philosopy
> isn't really my field ... so I'll yield to others.

I beg to disagree. The Linux 2.6 device driver model focuses on clear
separation between device instantiation and driver initialization. When
you properly stick to the model, both steps are totally separate, and
even happen in different modules, so device instantiation and
initialization can have no effect on the driver, which can even
pre-exist.

The code we have here is different because there's no device instances
being created, and no device driver binding taking place. But following
the spirit of the model, device initialization should still not affect
the success of driver loading.

Note BTW: Fenghua's patch will have to be rebased, as the following fix
went in the way meanwhile:
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commitdiff;h=51e3c1b558b31b11bf5fc66d3c6f5adacf3573f7

-- 
Jean Delvare