From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-16.8 required=3.0 tests=BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,INCLUDES_CR_TRAILER,INCLUDES_PATCH, MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS,URIBL_BLOCKED,USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 08722C71156 for ; Mon, 30 Nov 2020 13:17:55 +0000 (UTC) Received: from lists.gnu.org (lists.gnu.org [209.51.188.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id 69E47206F9 for ; Mon, 30 Nov 2020 13:17:54 +0000 (UTC) DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org 69E47206F9 Authentication-Results: mail.kernel.org; dmarc=none (p=none dis=none) header.from=huawei.com Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Received: from localhost ([::1]:47888 helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1kjj3x-0000gz-Bt for qemu-devel@archiver.kernel.org; Mon, 30 Nov 2020 08:17:53 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]:59318) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kjiyA-0004ZA-3b; Mon, 30 Nov 2020 08:11:55 -0500 Received: from szxga04-in.huawei.com ([45.249.212.190]:2873) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1kjixz-0007hp-GO; Mon, 30 Nov 2020 08:11:52 -0500 Received: from DGGEMS411-HUB.china.huawei.com (unknown [172.30.72.58]) by szxga04-in.huawei.com (SkyGuard) with ESMTP id 4Cl5G20mDPz15VHM; Mon, 30 Nov 2020 21:11:06 +0800 (CST) Received: from DESKTOP-5IS4806.china.huawei.com (10.174.187.37) by DGGEMS411-HUB.china.huawei.com (10.3.19.211) with Microsoft SMTP Server id 14.3.487.0; Mon, 30 Nov 2020 21:11:22 +0800 From: Keqian Zhu To: Peter Maydell , Paolo Bonzini , "Dr . David Alan Gilbert" , "Fam Zheng" , Stefan Hajnoczi Subject: [PATCH v2 2/2] ramlist: Resize dirty bitmap blocks after remove ramblock Date: Mon, 30 Nov 2020 21:11:04 +0800 Message-ID: <20201130131104.10600-3-zhukeqian1@huawei.com> X-Mailer: git-send-email 2.8.4.windows.1 In-Reply-To: <20201130131104.10600-1-zhukeqian1@huawei.com> References: <20201130131104.10600-1-zhukeqian1@huawei.com> MIME-Version: 1.0 Content-Type: text/plain X-Originating-IP: [10.174.187.37] X-CFilter-Loop: Reflected Received-SPF: pass client-ip=45.249.212.190; envelope-from=zhukeqian1@huawei.com; helo=szxga04-in.huawei.com X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-BeenThere: qemu-devel@nongnu.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: wanghaibin.wang@huawei.com, qemu-arm@nongnu.org, Keqian Zhu , qemu-devel@nongnu.org, kuhn.chenqun@huawei.com Errors-To: qemu-devel-bounces+qemu-devel=archiver.kernel.org@nongnu.org Sender: "Qemu-devel" Use the new "dirty_memory_resize" interface to reduce dirty bitmap blocks after we remove a ramblock from ramlist. This bug is found by ASAN after executing several qmp commands about object-add/object-del of memory-backend-ram. After applying this patch, the memory leak is not reported anymore. ================================================================= ==qemu-system-aarch64==1720167==ERROR: LeakSanitizer: detected memory leaks Direct leak of 2359296 byte(s) in 9 object(s) allocated from: #0 0xfffeedf3e938 in __interceptor_calloc (/lib64/libasan.so.5+0xee938) #1 0xaaaaf6f1e740 in bitmap_new /qemu/include/qemu/bitmap.h:101 #2 0xaaaaf6f1e81c in dirty_memory_extend ../exec.c:2212 #3 0xaaaaf6f22524 in ram_block_add ../exec.c:2261 #4 0xaaaaf6f22988 in qemu_ram_alloc_internal ../exec.c:2434 #5 0xaaaaf6f8ae70 in memory_region_init_ram_shared_nomigrate ../softmmu/memory.c:1513 #6 0xaaaaf66edee0 in ram_backend_memory_alloc ../backends/hostmem-ram.c:30 #7 0xaaaaf660d03c in host_memory_backend_memory_complete ../backends/hostmem.c:333 #8 0xaaaaf70f6968 in user_creatable_complete ../qom/object_interfaces.c:23 #9 0xaaaaf70f6dac in user_creatable_add_type ../qom/object_interfaces.c:93 #10 0xaaaaf70f7030 in user_creatable_add_dict ../qom/object_interfaces.c:134 #11 0xaaaaf7340174 in do_qmp_dispatch_bh ../qapi/qmp-dispatch.c:110 #12 0xaaaaf732da30 in aio_bh_poll ../util/async.c:164 #13 0xaaaaf735c9a8 in aio_dispatch ../util/aio-posix.c:381 #14 0xaaaaf732d2ec in aio_ctx_dispatch ../util/async.c:306 #15 0xfffeecb029d8 in g_main_context_dispatch (/lib64/libglib-2.0.so.0+0x529d8) #16 0xaaaaf733bb78 in os_host_main_loop_wait ../util/main-loop.c:244 #17 0xaaaaf733beac in main_loop_wait ../util/main-loop.c:520 #18 0xaaaaf70802a4 in qemu_main_loop ../softmmu/vl.c:1677 #19 0xaaaaf655786c in main ../softmmu/main.c:50 #20 0xfffeec043f5c in __libc_start_main (/lib64/libc.so.6+0x23f5c) #21 0xaaaaf656a198 (/qemu/build/qemu-system-aarch64+0x9ba198) SUMMARY: AddressSanitizer: 2359296 byte(s) leaked in 9 allocation(s). Reported-by: Euler Robot Signed-off-by: Keqian Zhu ---- little concern: According to code, my bugfix can solve two problems: 1. Lose reference to dirty bitmap of deleted ramblock, because the reference is covered by dirty bitmap of newly added ramblock. 2. All dirty bitmap is not freed before qemu exit. However, ASAN do not report memory leak for point 2. Any thoughts or explanations? --- softmmu/physmem.c | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/softmmu/physmem.c b/softmmu/physmem.c index 3e4f29f126..8c5f910677 100644 --- a/softmmu/physmem.c +++ b/softmmu/physmem.c @@ -2132,6 +2132,8 @@ static void reclaim_ramblock(RAMBlock *block) void qemu_ram_free(RAMBlock *block) { + ram_addr_t old_ram_size, new_ram_size; + if (!block) { return; } @@ -2141,12 +2143,18 @@ void qemu_ram_free(RAMBlock *block) } qemu_mutex_lock_ramlist(); + + old_ram_size = last_ram_page(); QLIST_REMOVE_RCU(block, next); + new_ram_size = last_ram_page(); + dirty_memory_resize(old_ram_size, new_ram_size); + ram_list.mru_block = NULL; /* Write list before version */ smp_wmb(); ram_list.version++; call_rcu(block, reclaim_ramblock, rcu); + qemu_mutex_unlock_ramlist(); } -- 2.23.0