Commit 14bafc54 authored by Markus Armbruster's avatar Markus Armbruster Committed by Kevin Wolf
Browse files

blockdev: Clean up automatic drive deletion 



We automatically delete blockdev host parts on unplug of the guest
device.  Too much magic, but we can't change that now.

The delete happens early in the guest device teardown, before the
connection to the host part is severed.  Thus, the guest part's
pointer to the host part dangles for a brief time.  No actual harm
comes from this, but we'll catch such dangling pointers a few commits
down the road.  Clean up the dangling pointers by delaying the
automatic deletion until the guest part's pointer is gone.

Device usb-storage deliberately makes two qdev properties refer to the
same drive, because it automatically creates a second device.  Again,
too much magic we can't change now.  Multiple references worked okay
before, but now free_drive() dies for the second one.  Zap the extra
reference.

Signed-off-by: default avatarMarkus Armbruster <armbru@redhat.com>
Signed-off-by: default avatarKevin Wolf <kwolf@redhat.com>
parent e4700e59

blockdev.c

+23 −0
Original line number Diff line number Diff line
@@ -17,6 +17,29 @@ 


static QTAILQ_HEAD(drivelist, DriveInfo) drives = QTAILQ_HEAD_INITIALIZER(drives);



/*

 * We automatically delete the drive when a device using it gets

 * unplugged.  Questionable feature, but we can't just drop it.

 * Device models call blockdev_mark_auto_del() to schedule the

 * automatic deletion, and generic qdev code calls blockdev_auto_del()

 * when deletion is actually safe.

 */

void blockdev_mark_auto_del(BlockDriverState *bs)

{

    DriveInfo *dinfo = drive_get_by_blockdev(bs);



    dinfo->auto_del = 1;

}



void blockdev_auto_del(BlockDriverState *bs)

{

    DriveInfo *dinfo = drive_get_by_blockdev(bs);



    if (dinfo->auto_del) {

        drive_uninit(dinfo);

    }

}



QemuOpts *drive_add(const char *file, const char *fmt, ...)

{

    va_list ap;

blockdev.h

+4 −0
Original line number Diff line number Diff line
@@ -13,6 +13,9 @@ 
#include "block.h"

#include "qemu-queue.h"



void blockdev_mark_auto_del(BlockDriverState *bs);

void blockdev_auto_del(BlockDriverState *bs);



typedef enum {

    IF_NONE,

    IF_IDE, IF_SCSI, IF_FLOPPY, IF_PFLASH, IF_MTD, IF_SD, IF_VIRTIO, IF_XEN,
@@ -28,6 +31,7 @@ typedef struct DriveInfo { 
    BlockInterfaceType type;

    int bus;

    int unit;

    int auto_del;               /* see blockdev_mark_auto_del() */

    QemuOpts *opts;

    char serial[BLOCK_SERIAL_STRLEN + 1];

    QTAILQ_ENTRY(DriveInfo) next;

hw/qdev-properties.c

+10 −0
Original line number Diff line number Diff line
@@ -313,6 +313,15 @@ static int parse_drive(DeviceState *dev, Property *prop, const char *str) 
    return 0;

}



static void free_drive(DeviceState *dev, Property *prop)

{

    DriveInfo **ptr = qdev_get_prop_ptr(dev, prop);



    if (*ptr) {

        blockdev_auto_del((*ptr)->bdrv);

    }

}



static int print_drive(DeviceState *dev, Property *prop, char *dest, size_t len)

{

    DriveInfo **ptr = qdev_get_prop_ptr(dev, prop);
@@ -325,6 +334,7 @@ PropertyInfo qdev_prop_drive = { 
    .size  = sizeof(DriveInfo*),

    .parse = parse_drive,

    .print = print_drive,

    .free  = free_drive,

};



/* --- character device --- */

hw/scsi-disk.c

+1 −1
Original line number Diff line number Diff line
@@ -1043,7 +1043,7 @@ static void scsi_destroy(SCSIDevice *dev) 
    SCSIDiskState *s = DO_UPCAST(SCSIDiskState, qdev, dev);



    scsi_disk_purge_requests(s);

    drive_uninit(s->qdev.conf.dinfo);

    blockdev_mark_auto_del(s->qdev.conf.dinfo->bdrv);

}



static int scsi_disk_initfn(SCSIDevice *dev)

hw/scsi-generic.c

+1 −1
Original line number Diff line number Diff line
@@ -453,7 +453,7 @@ static void scsi_destroy(SCSIDevice *d) 
        r = DO_UPCAST(SCSIGenericReq, req, QTAILQ_FIRST(&s->qdev.requests));

        scsi_remove_request(r);

    }

    drive_uninit(s->qdev.conf.dinfo);

    blockdev_mark_auto_del(s->qdev.conf.dinfo->bdrv);

}



static int scsi_generic_initfn(SCSIDevice *dev)