Re: [PATCH v12 2/3] rust: add dma coherent allocator abstraction.

[Greg Kroah-Hartman <gregkh@linuxfoundation.org>]

On Fri, Mar 07, 2025 at 06:30:13PM +0100, Danilo Krummrich wrote:
> On Fri, Mar 07, 2025 at 10:38:21AM -0400, Jason Gunthorpe wrote:
> Devres puts the pci::Bar in a Revocable and sets up the devres callback. Once
> the devres callback is called the embedded pci::Bar is dropped, which calls
> pci_iounmap() and pci_release_region().
> 
> Subsequently, the access to the pci::Bar for the owner of the Devres<pci::Bar>
> object is revoked, since the pointer to the memory mapping within the pci::Bar
> just became invalid.
> 
> The latter is the only additional step the Rust abstraction does, in order to
> not leave drivers with an invalid pointer. However, this additional safety
> aspect is *not* a change of the driver model itself.

Correct, it's one that the C driver model code wishes it could have :)

Danilo is totally right here.  There's many things "wrong" with the
driver model that we have today when dealing with resources that can
span multiple reference counted devices.  It's always been that way,
heck the original coding style document warned about that very thing way
back in the early 2000's!  The rust code here is a step forward in
making those issues go away, which is a good thing, and should not be
chastised because somehow it doesn't solve _all_ of our problems.

Let's try this out for now.  If it doesn't work out, great, we'll fix it
and update the drivers and move on.  It's not like we haven't been doing
that for the past 30+ years now, nothing different here at all.

thanks,

greg k-h