From: Sergey Kaplun via Tarantool-patches <tarantool-patches@dev.tarantool.org> To: Sergey Bronnikov <sergeyb@tarantool.org> Cc: tarantool-patches@dev.tarantool.org Subject: Re: [Tarantool-patches] [PATCH luajit] Prevent down-recursion for side traces. Date: Wed, 3 Apr 2024 09:12:54 +0300 [thread overview] Message-ID: <ZgzzZki_Io1D0yOg@root> (raw) In-Reply-To: <b27cb112-cef8-4f78-b516-2238b2d98da0@tarantool.org> Hi, Sergey! Thanks for the review! I've fixed your comments, rebased the branch on the current tarantool/master, and force-pushed it. On 26.03.24, Sergey Bronnikov wrote: > Sergey, > > thanks for the patch. LGTM with three minor comments below. > > Sergey > > On 3/19/24 19:41, Sergey Kaplun wrote: > > From: Mike Pall <mike> > > > > Thanks to Sergey Kaplun. > > > > (cherry picked from commit cae361187e7e1e3545353fb560c032cdace32d5f) > > > > Assume we have the root trace that uses some spill slots with the > > corresponding stack adjustment. Then its side trace will restore stack > s/stack/the stack/ Fixed, thanks. > > only at its tail. It may look like the following: > > > > | ---- TRACE 4 mcode 1247 > > | 55557f7df953 mov rax, [r14-0xe28] > > | 55557f7df95a mov rax, [rax+0x30] > > | 55557f7df95e sub rax, rdx > > | 55557f7df961 cmp rax, +0x68 > > | 55557f7df965 jb 0x55557f7d004c ->0 > > | 55557f7df96b add rsp, -0x10 > > | ... > > | 55557f6efa71 cmp dword [rdx+0x4], -0x05 > > | 55557f6efa75 jnz 0x55557f6e004c ->0 > > | ... > > | 55557f7dfe29 add rsp, +0x10 > > | 55557f7dfe2d jmp 0x5555556fe573 > > | ---- TRACE 4 stop -> stitch > > | > > | ---- TRACE 5 start 4/0 > > | ---- TRACE 5 mcode 101 > > | 55557f6ef9d4 mov dword [0x40000518], 0x5 > > | ... > > | 55557f6efa30 add rsp, +0x10 > > | 55557f6efa34 jmp 0x55557f6ef9d4 > > | ---- TRACE 5 stop -> down-recursion > > > > Such side traces have no stack addjustment at their heads since their > s/addjustment/adjustment/ Fixed, thanks! > > stack addjustment is inherited from the parent trace. The issue occurs > > if the side trace has a down-recursion, as mentioned above. Before any > > exit, we can jump back to the start of the trace several times with > > growing `rsp`. In that case, the `rsp` is restored incorrectly after > > exiting from the trace. > > > > This patch forbids down-recursion for non-root traces. > > > > Sergey Kaplun: > > * added the description and the test for the problem > > > > Part of tarantool/tarantool#9595 > > --- > > > > Branch: https://github.com/tarantool/luajit/tree/skaplun/lj-1169-down-rec-side > > Related issues: > > * https://github.com/tarantool/tarantool/issues/9595 > > * https://github.com/LuaJIT/LuaJIT/issues/1169 <snipped> > > + > > +-- If a parent trace has more than the default amount of spill > > +-- slots, the `rsp` register is adjusted at the start of the trace > > +-- and restored after. If there is a side trace created, it > > +-- modifies the stack only at exit (since adjustment is inherited > > +-- from a parent trace). If the side trace has down-recursion (for > s/own-recursion/a down-recursion/ Fixed, see the iterative patch below. =================================================================== diff --git a/test/tarantool-tests/lj-1169-down-rec-side.test.lua b/test/tarantool-tests/lj-1169-down-rec-side.test.lua index 63f9925f..6363edd7 100644 --- a/test/tarantool-tests/lj-1169-down-rec-side.test.lua +++ b/test/tarantool-tests/lj-1169-down-rec-side.test.lua @@ -22,10 +22,10 @@ test:plan(1) -- slots, the `rsp` register is adjusted at the start of the trace -- and restored after. If there is a side trace created, it -- modifies the stack only at exit (since adjustment is inherited --- from a parent trace). If the side trace has down-recursion (for --- now only down-recursion to itself is used), `rsp` may be --- modified several times before exit, so the host stack becomes --- corrupted. +-- from a parent trace). If the side trace has a down-recursion +-- (for now only the down-recursion to itself is used), `rsp` may +-- be modified several times before exit, so the host stack +-- becomes corrupted. -- -- This test provides the example of a side trace (5) with -- down-recursion. =================================================================== > > +-- now only down-recursion to itself is used), `rsp` may be <snipped> -- Best regards, Sergey Kaplun
next prev parent reply other threads:[~2024-04-03 6:16 UTC|newest] Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top 2024-03-19 16:41 Sergey Kaplun via Tarantool-patches 2024-03-21 10:41 ` Maxim Kokryashkin via Tarantool-patches 2024-03-26 15:08 ` Sergey Bronnikov via Tarantool-patches 2024-04-03 6:12 ` Sergey Kaplun via Tarantool-patches [this message] 2024-04-03 14:19 ` Sergey Bronnikov via Tarantool-patches 2024-04-11 17:03 ` Sergey Kaplun via Tarantool-patches
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=ZgzzZki_Io1D0yOg@root \ --to=tarantool-patches@dev.tarantool.org \ --cc=sergeyb@tarantool.org \ --cc=skaplun@tarantool.org \ --subject='Re: [Tarantool-patches] [PATCH luajit] Prevent down-recursion for side traces.' \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox