From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from psmtp.com (na3sys010amx133.postini.com [74.125.245.133]) by kanga.kvack.org (Postfix) with SMTP id 5C5626B0006 for ; Wed, 3 Apr 2013 11:29:38 -0400 (EDT) Date: Wed, 3 Apr 2013 17:29:34 +0200 From: Michal Hocko Subject: Re: [RFC][PATCH 1/7] memcg: use css_get in sock_update_memcg() Message-ID: <20130403152934.GL16471@dhcp22.suse.cz> References: <515BF233.6070308@huawei.com> <515BF249.50607@huawei.com> <515C2788.90907@parallels.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <515C2788.90907@parallels.com> Sender: owner-linux-mm@kvack.org List-ID: To: Glauber Costa Cc: Li Zefan , linux-mm@kvack.org, LKML , Cgroups , Tejun Heo , KAMEZAWA Hiroyuki , Johannes Weiner On Wed 03-04-13 16:58:48, Glauber Costa wrote: > On 04/03/2013 01:11 PM, Li Zefan wrote: > > Use css_get/css_put instead of mem_cgroup_get/put. > > > > Note, if at the same time someone is moving @current to a different > > cgroup and removing the old cgroup, css_tryget() may return false, > > and sock->sk_cgrp won't be initialized. > > > > Signed-off-by: Li Zefan > > --- > > mm/memcontrol.c | 8 ++++---- > > 1 file changed, 4 insertions(+), 4 deletions(-) > > > > diff --git a/mm/memcontrol.c b/mm/memcontrol.c > > index 23d0f6e..43ca91d 100644 > > --- a/mm/memcontrol.c > > +++ b/mm/memcontrol.c > > @@ -536,15 +536,15 @@ void sock_update_memcg(struct sock *sk) > > */ > > if (sk->sk_cgrp) { > > BUG_ON(mem_cgroup_is_root(sk->sk_cgrp->memcg)); > > - mem_cgroup_get(sk->sk_cgrp->memcg); > > + css_get(&sk->sk_cgrp->memcg->css); I am not sure I understand this one. So we have a goup here (which means that somebody already took a reference on it, right?) and we are taking another reference. If this is released by sock_release_memcg then who releases the previous one? It is not directly related to the patch because this has been done previously already. Could you clarify Glauber, please? > > return; > > } > > > > rcu_read_lock(); > > memcg = mem_cgroup_from_task(current); > > cg_proto = sk->sk_prot->proto_cgroup(memcg); > > - if (!mem_cgroup_is_root(memcg) && memcg_proto_active(cg_proto)) { > > - mem_cgroup_get(memcg); > > + if (!mem_cgroup_is_root(memcg) && > > + memcg_proto_active(cg_proto) && css_tryget(&memcg->css)) { > > sk->sk_cgrp = cg_proto; > > } > > What happens if this tryget fails ? Won't we leak a reference here? We > will put regardless when the socket is released, and this may go > negative. No? AFAICS sock_release_memcg releases the reference only if sk->sk_cgrp and that one wouldn't be set if css_tryget fails. -- Michal Hocko SUSE Labs -- To unsubscribe, send a message with 'unsubscribe linux-mm' in the body to majordomo@kvack.org. For more info on Linux MM, see: http://www.linux-mm.org/ . Don't email: email@kvack.org