Bibo Mao <maob...@loongson.cn> writes:
> In function virt_cpu_plug(), it will send cpu plug message to interrupt
> controller extioi and ipi irqchip. If there is problem in this function,
> system should continue to run and keep state the same before cpu is
> added.
>
> Object cpuslot::cpu is set at last only when there is no any error.
> If there is, send cpu unplug message to extioi and ipi irqchip, and then
> return immediately.
>
> Fixes: ab9935d2991e (hw/loongarch/virt: Implement cpu plug interface)
> Signed-off-by: Bibo Mao <maob...@loongson.cn>
> ---
> hw/loongarch/virt.c | 17 +++++++++++++++--
> 1 file changed, 15 insertions(+), 2 deletions(-)
>
> diff --git a/hw/loongarch/virt.c b/hw/loongarch/virt.c
> index a5840ff968..5118f01e4b 100644
> --- a/hw/loongarch/virt.c
> +++ b/hw/loongarch/virt.c
> @@ -981,8 +981,6 @@ static void virt_cpu_plug(HotplugHandler *hotplug_dev,
> LoongArchVirtMachineState *lvms = LOONGARCH_VIRT_MACHINE(hotplug_dev);
> Error *err = NULL;
>
> - cpu_slot = virt_find_cpu_slot(MACHINE(lvms), cpu->phy_id);
> - cpu_slot->cpu = CPU(dev);
> if (lvms->ipi) {
> hotplug_handler_plug(HOTPLUG_HANDLER(lvms->ipi), dev, &err);
> if (err) {
> @@ -995,6 +993,10 @@ static void virt_cpu_plug(HotplugHandler *hotplug_dev,
> hotplug_handler_plug(HOTPLUG_HANDLER(lvms->extioi), dev, &err);
> if (err) {
> error_propagate(errp, err);
> + if (lvms->ipi) {
> + /* Send unplug message to restore, discard error here */
> + hotplug_handler_unplug(HOTPLUG_HANDLER(lvms->ipi), dev,
> NULL);
> + }
> return;
> }
> }
> @@ -1003,9 +1005,20 @@ static void virt_cpu_plug(HotplugHandler *hotplug_dev,
> hotplug_handler_plug(HOTPLUG_HANDLER(lvms->acpi_ged), dev, &err);
> if (err) {
> error_propagate(errp, err);
> + if (lvms->ipi) {
> + hotplug_handler_unplug(HOTPLUG_HANDLER(lvms->ipi), dev,
> NULL);
> + }
> +
> + if (lvms->extioi) {
> + hotplug_handler_unplug(HOTPLUG_HANDLER(lvms->extioi),
> + dev, NULL);
> + }
> + return;
> }
> }
>
> + cpu_slot = virt_find_cpu_slot(MACHINE(lvms), cpu->phy_id);
> + cpu_slot->cpu = CPU(dev);
> return;
> }
Hmm.
You're right about the problem: virt_cpu_plug() neglects to revert
changes when it fails.
You're probably right to move the assignment to cpu_slot->cpu to the
end. Anything you can delay until success is assured you don't have to
revert. I say "probably" because the code that now runs before the
assignment might theoretically "see" the assignment, and I didn't
examine it to exclude that.
Where I have doubts is the code to revert changes.
The hotplug_handler_plug() error checkign suggests it can fail.
Can hotplug_handler_unplug() fail, too? The error checking in
virt_cpu_unplug() right above suggests it can.
What happens if it fails in virt_cpu_plug()?
