Page MenuHomeFreeBSD

Better locking in prison_deref, and hide invalid prisons.
ClosedPublic

Authored by jamie on Feb 2 2021, 5:41 AM.
Tags
None
Referenced Files
F80163172: D28458.diff
Thu, Mar 28, 6:33 PM
Unknown Object (File)
Jan 30 2024, 8:25 PM
Unknown Object (File)
Dec 23 2023, 10:02 AM
Unknown Object (File)
Dec 10 2023, 10:43 PM
Unknown Object (File)
Nov 21 2023, 2:31 AM
Unknown Object (File)
Nov 21 2023, 12:53 AM
Unknown Object (File)
Oct 10 2023, 7:45 PM
Unknown Object (File)
Oct 7 2023, 1:13 AM
Subscribers
None

Details

Summary

Change the flow of prison_deref() so it doesn't let go of allprison_lock until it's completely done using it (except for a possible drop as part of an upgrade on its first try). Before this patch, it's possible to unlock and relock allprison_lock multiple times, typically when removing a prison removes its parent.

I'm not sure this is a necessary condition for the next change but it certainly doesn't hurt: add just a little more locking in kern_jail_set(), and now invalid prisons are never seen by any thread holding allprison_lock (except of course the ones creating and destroying prisons). This makes prison_isvalid() redundant, and able to be removed almost everywhere. But instead of removing it, I mostly turned the tests into asserts.

This builds on D27876.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable