From: Oded Gabbay <email@example.com> To: Jason Gunthorpe <firstname.lastname@example.org>, Daniel Vetter <email@example.com> Cc: "Linux-Kernel@Vger. Kernel. Org" <firstname.lastname@example.org>, "Greg Kroah-Hartman" <email@example.com>, "Christian König" <firstname.lastname@example.org>, "Gal Pressman" <email@example.com>, "Yossi Leybovich" <firstname.lastname@example.org>, "Maling list - DRI developers" <email@example.com>, linux-rdma <firstname.lastname@example.org>, "Linux Media Mailing List" <email@example.com>, "Doug Ledford" <firstname.lastname@example.org>, "Dave Airlie" <email@example.com>, "Alex Deucher" <firstname.lastname@example.org>, "Leon Romanovsky" <email@example.com>, "Christoph Hellwig" <firstname.lastname@example.org>, "amd-gfx list" <email@example.com>, "moderated list:DMA BUFFER SHARING FRAMEWORK" <firstname.lastname@example.org> Subject: Re: [PATCH v6 0/2] Add p2p via dmabuf to habanalabs Date: Sat, 18 Sep 2021 11:38:42 +0300 [thread overview] Message-ID: <CAFCwf12o-+wtbk8J8k8hP4_k0a8Lco4m9f4s1vBobkQwNtn39w@mail.gmail.com> (raw) In-Reply-To: <YUSKSHBC9uI49wZZ@phenom.ffwll.local> On Fri, Sep 17, 2021 at 3:30 PM Daniel Vetter <email@example.com> wrote: > > On Thu, Sep 16, 2021 at 10:10:14AM -0300, Jason Gunthorpe wrote: > > On Thu, Sep 16, 2021 at 02:31:34PM +0200, Daniel Vetter wrote: > > > On Wed, Sep 15, 2021 at 10:45:36AM +0300, Oded Gabbay wrote: > > > > On Tue, Sep 14, 2021 at 7:12 PM Jason Gunthorpe <firstname.lastname@example.org> wrote: > > > > > > > > > > On Tue, Sep 14, 2021 at 04:18:31PM +0200, Daniel Vetter wrote: > > > > > > On Sun, Sep 12, 2021 at 07:53:07PM +0300, Oded Gabbay wrote: > > > > > > > Hi, > > > > > > > Re-sending this patch-set following the release of our user-space TPC > > > > > > > compiler and runtime library. > > > > > > > > > > > > > > I would appreciate a review on this. > > > > > > > > > > > > I think the big open we have is the entire revoke discussions. Having the > > > > > > option to let dma-buf hang around which map to random local memory ranges, > > > > > > without clear ownership link and a way to kill it sounds bad to me. > > > > > > > > > > > > I think there's a few options: > > > > > > - We require revoke support. But I've heard rdma really doesn't like that, > > > > > > I guess because taking out an MR while holding the dma_resv_lock would > > > > > > be an inversion, so can't be done. Jason, can you recap what exactly the > > > > > > hold-up was again that makes this a no-go? > > > > > > > > > > RDMA HW can't do revoke. > > > > > > Like why? I'm assuming when the final open handle or whatever for that MR > > > is closed, you do clean up everything? Or does that MR still stick around > > > forever too? > > > > It is a combination of uAPI and HW specification. > > > > revoke here means you take a MR object and tell it to stop doing DMA > > without causing the MR object to be destructed. > > > > All the drivers can of course destruct the MR, but doing such a > > destruction without explicit synchronization with user space opens > > things up to a serious use-after potential that could be a security > > issue. > > > > When the open handle closes the userspace is synchronized with the > > kernel and we can destruct the HW objects safely. > > > > So, the special HW feature required is 'stop doing DMA but keep the > > object in an error state' which isn't really implemented, and doesn't > > extend very well to other object types beyond simple MRs. > > Yeah revoke without destroying the MR doesn't work, and it sounds like > revoke by destroying the MR just moves the can of worms around to another > place. > > > > 1. User A opens gaudi device, sets up dma-buf export > > > > > > 2. User A registers that with RDMA, or anything else that doesn't support > > > revoke. > > > > > > 3. User A closes gaudi device > > > > > > 4. User B opens gaudi device, assumes that it has full control over the > > > device and uploads some secrets, which happen to end up in the dma-buf > > > region user A set up > > > > I would expect this is blocked so long as the DMABUF exists - eg the > > DMABUF will hold a fget on the FD of #1 until the DMABUF is closed, so > > that #3 can't actually happen. > > > > > It's not mlocked memory, it's mlocked memory and I can exfiltrate > > > it. > > > > That's just bug, don't make buggy drivers :) > > Well yeah, but given that habanalabs hand rolled this I can't just check > for the usual things we have to enforce this in drm. And generally you can > just open chardevs arbitrarily, and multiple users fighting over each > another. The troubles only start when you have private state or memory > allocations of some kind attached to the struct file (instead of the > underlying device), or something else that requires device exclusivity. > There's no standard way to do that. > > Plus in many cases you really want revoke on top (can't get that here > unfortunately it seems), and the attempts to get towards a generic > revoke() just never went anywhere. So again it's all hand-rolled > per-subsystem. *insert lament about us not having done this through a > proper subsystem* > > Anyway it sounds like the code takes care of that. > -Daniel Daniel, Jason, Thanks for reviewing this code. Can I get an R-B / A-B from you for this patch-set ? Thanks, Oded
next prev parent reply other threads:[~2021-09-18 8:39 UTC|newest] Thread overview: 24+ messages / expand[flat|nested] mbox.gz Atom feed top 2021-09-12 16:53 Oded Gabbay 2021-09-12 16:53 ` [PATCH v6 1/2] habanalabs: define uAPI to export FD for DMA-BUF Oded Gabbay 2021-09-28 17:13 ` Jason Gunthorpe 2021-09-28 19:12 ` Oded Gabbay 2021-09-12 16:53 ` [PATCH v6 2/2] habanalabs: add support for dma-buf exporter Oded Gabbay 2021-09-28 17:36 ` Jason Gunthorpe 2021-09-28 21:17 ` Oded Gabbay 2021-09-30 12:46 ` Oded Gabbay 2021-10-01 14:52 ` Jason Gunthorpe 2021-10-01 14:50 ` Jason Gunthorpe 2021-09-14 14:18 ` [PATCH v6 0/2] Add p2p via dmabuf to habanalabs Daniel Vetter 2021-09-14 14:58 ` Oded Gabbay 2021-09-14 16:12 ` Jason Gunthorpe 2021-09-15 7:45 ` Oded Gabbay 2021-09-16 12:31 ` Daniel Vetter 2021-09-16 12:44 ` Oded Gabbay 2021-09-16 13:16 ` Oded Gabbay 2021-09-17 12:25 ` Daniel Vetter 2021-09-16 13:10 ` Jason Gunthorpe 2021-09-17 12:30 ` Daniel Vetter 2021-09-18 8:38 ` Oded Gabbay [this message] 2021-09-23 9:22 ` Oded Gabbay 2021-09-28 7:04 ` Oded Gabbay 2021-09-30 9:13 ` Daniel Vetter
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=CAFCwf12o-+wtbk8J8k8hP4_k0a8Lco4m9f4s1vBobkQwNtn39w@mail.gmail.com \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --email@example.com \ --firstname.lastname@example.org \ --subject='Re: [PATCH v6 0/2] Add p2p via dmabuf to habanalabs' \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).