[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] [PATCH RFC v4 5/7] migration: fix the multifd code
From: |
Fei Li |
Subject: |
[Qemu-devel] [PATCH RFC v4 5/7] migration: fix the multifd code |
Date: |
Wed, 26 Sep 2018 18:02:44 +0800 |
When multifd is used during migration, if there is an error before
the destination receives all new channels, the destination does not
exit but keeps waiting in our current code. However, a segmentaion
fault will occur in the source when multifd_save_cleanup() is called
again as the multifd_send_state has been freed earlier in the first
error handling. This can happen when migrate_fd_connect() fails and
multifd_fd_cleanup() is called, and then multifd_new_send_channel_
async() fails and multifd_save_cleanup() is called again.
If the QIOChannel *c of multifd_recv_state->params[i] (p->c) is not
initialized, there is no need to close the channel. Or else a
segmentation fault will occur in multifd_recv_terminate_threads()
when multifd_recv_initial_packet() fails.
Signed-off-by: Fei Li <address@hidden>
---
migration/ram.c | 22 ++++++++++++++++------
1 file changed, 16 insertions(+), 6 deletions(-)
diff --git a/migration/ram.c b/migration/ram.c
index f6fd8e5e09..1db080a696 100644
--- a/migration/ram.c
+++ b/migration/ram.c
@@ -904,6 +904,11 @@ static void multifd_send_terminate_threads(Error *err)
}
}
+ /* in case multifd_send_state has been freed earlier */
+ if (!multifd_send_state) {
+ return;
+ }
+
for (i = 0; i < migrate_multifd_channels(); i++) {
MultiFDSendParams *p = &multifd_send_state->params[i];
@@ -919,7 +924,7 @@ int multifd_save_cleanup(Error **errp)
int i;
int ret = 0;
- if (!migrate_use_multifd()) {
+ if (!migrate_use_multifd() || !multifd_send_state) {
return 0;
}
multifd_send_terminate_threads(NULL);
@@ -1128,7 +1133,7 @@ struct {
uint64_t packet_num;
} *multifd_recv_state;
-static void multifd_recv_terminate_threads(Error *err)
+static void multifd_recv_terminate_threads(Error *err, bool channel)
{
int i;
@@ -1142,6 +1147,11 @@ static void multifd_recv_terminate_threads(Error *err)
}
}
+ /* in case p->c is not initialized */
+ if (!channel) {
+ return;
+ }
+
for (i = 0; i < migrate_multifd_channels(); i++) {
MultiFDRecvParams *p = &multifd_recv_state->params[i];
@@ -1163,7 +1173,7 @@ int multifd_load_cleanup(Error **errp)
if (!migrate_use_multifd()) {
return 0;
}
- multifd_recv_terminate_threads(NULL);
+ multifd_recv_terminate_threads(NULL, true);
for (i = 0; i < migrate_multifd_channels(); i++) {
MultiFDRecvParams *p = &multifd_recv_state->params[i];
@@ -1266,7 +1276,7 @@ static void *multifd_recv_thread(void *opaque)
}
if (local_err) {
- multifd_recv_terminate_threads(local_err);
+ multifd_recv_terminate_threads(local_err, true);
}
qemu_mutex_lock(&p->mutex);
p->running = false;
@@ -1328,7 +1338,7 @@ bool multifd_recv_new_channel(QIOChannel *ioc)
id = multifd_recv_initial_packet(ioc, &local_err);
if (id < 0) {
- multifd_recv_terminate_threads(local_err);
+ multifd_recv_terminate_threads(local_err, false);
return false;
}
@@ -1336,7 +1346,7 @@ bool multifd_recv_new_channel(QIOChannel *ioc)
if (p->c != NULL) {
error_setg(&local_err, "multifd: received id '%d' already setup'",
id);
- multifd_recv_terminate_threads(local_err);
+ multifd_recv_terminate_threads(local_err, true);
return false;
}
p->c = ioc;
--
2.13.7
- [Qemu-devel] [PATCH RFC v4 0/7] qemu_thread_create: propagate errors to callers to check, Fei Li, 2018/09/26
- [Qemu-devel] [PATCH RFC v4 2/7] ui/vnc.c: polish vnc_init_func, Fei Li, 2018/09/26
- [Qemu-devel] [PATCH RFC v4 1/7] Fix segmentation fault when qemu_signal_init fails, Fei Li, 2018/09/26
- [Qemu-devel] [PATCH RFC v4 3/7] qemu_init_vcpu: add a new Error parameter to propagate, Fei Li, 2018/09/26
- [Qemu-devel] [PATCH RFC v4 4/7] qemu_thread_join: fix segmentation fault, Fei Li, 2018/09/26
- [Qemu-devel] [PATCH RFC v4 5/7] migration: fix the multifd code,
Fei Li <=
- [Qemu-devel] [PATCH RFC v4 6/7] migration: fix error handling, Fei Li, 2018/09/26
- [Qemu-devel] [PATCH RFC v4 7/7] qemu_thread_create: propagate the error to callers to handle, Fei Li, 2018/09/26