mm: no need to check return value of debugfs_create functions
Subsystems (7)
PATCH 1/1 mm: no need to check return value of debugfs_create functions
When calling debugfs functions, there is no need to ever check the return value. The function can work or not, but the code logic should never do something different based on this.
--- mm/cma_debug.c | 2 -- mm/failslab.c | 14 ++++---------- mm/gup_benchmark.c | 8 ++------ mm/huge_memory.c | 8 ++------ mm/memblock.c | 3 +-- mm/memory.c | 8 ++------ mm/page_alloc.c | 22 ++++++---------------- mm/page_owner.c | 8 +++----- mm/vmstat.c | 15 ++++----------- 9 files changed, 24 insertions(+), 64 deletions(-)
mm/cma_debug.c +0 -2
@@ -191,8 +191,6 @@ static int __init cma_debugfs_init(void)int i; cma_debugfs_root =debugfs_create_dir ("cma" ,NULL ); -if (!cma_debugfs_root) -return -ENOMEM ;for (i =0 ; i < cma_area_count; i++)cma_debugfs_add_one (&cma_areas[i], i);
mm/failslab.c +4 -10
@@ -48,18 +48,12 @@ static int __init failslab_debugfs_init(void)if (IS_ERR (dir))return PTR_ERR (dir); -if (!debugfs_create_bool ("ignore-gfp-wait" , mode, dir, - &failslab.ignore_gfp_reclaim)) - goto fail; -if (!debugfs_create_bool ("cache-filter" , mode, dir, - &failslab.cache_filter)) - goto fail; +debugfs_create_bool ("ignore-gfp-wait" , mode, dir, + &failslab.ignore_gfp_reclaim); +debugfs_create_bool ("cache-filter" , mode, dir, + &failslab.cache_filter);return 0 ; -fail: -debugfs_remove_recursive (dir); - -return -ENOMEM ; }late_initcall (failslab_debugfs_init);
mm/gup_benchmark.c +2 -6
@@ -122,12 +122,8 @@ static const struct file_operations gup_benchmark_fops = {static int gup_benchmark_init (void ) { -void *ret; - - ret =debugfs_create_file_unsafe ("gup_benchmark" ,0600 ,NULL ,NULL , - &gup_benchmark_fops); -if (!ret) -pr_warn ("Failed to create gup_benchmark in debugfs" ); +debugfs_create_file_unsafe ("gup_benchmark" ,0600 ,NULL ,NULL , + &gup_benchmark_fops);return 0 ; }
mm/huge_memory.c +2 -6
@@ -2886,12 +2886,8 @@ DEFINE_SIMPLE_ATTRIBUTE(split_huge_pages_fops, NULL, split_huge_pages_set,static int __init split_huge_pages_debugfs (void ) { -void *ret; - - ret =debugfs_create_file ("split_huge_pages" ,0200 ,NULL ,NULL , - &split_huge_pages_fops); -if (!ret) -pr_warn ("Failed to create split_huge_pages in debugfs" ); +debugfs_create_file ("split_huge_pages" ,0200 ,NULL ,NULL , + &split_huge_pages_fops);return 0 ; }late_initcall (split_huge_pages_debugfs);
mm/memblock.c +1 -2
@@ -1998,8 +1998,7 @@ DEFINE_SHOW_ATTRIBUTE(memblock_debug);static int __init memblock_init_debugfs (void ) {struct dentry *root =debugfs_create_dir ("memblock" ,NULL ); -if (!root) -return -ENXIO ; +debugfs_create_file ("memory" ,0444 , root, &memblock.memory, &memblock_debug_fops); debugfs_create_file("reserved", 0444, root,
mm/memory.c +2 -6
@@ -3321,12 +3321,8 @@ DEFINE_DEBUGFS_ATTRIBUTE(fault_around_bytes_fops,static int __init fault_around_debugfs (void ) { -void *ret; - - ret =debugfs_create_file_unsafe ("fault_around_bytes" ,0644 ,NULL ,NULL , - &fault_around_bytes_fops); -if (!ret) -pr_warn ("Failed to create fault_around_bytes in debugfs" ); +debugfs_create_file_unsafe ("fault_around_bytes" ,0644 ,NULL ,NULL , + &fault_around_bytes_fops);return 0 ; }late_initcall (fault_around_debugfs);
mm/page_alloc.c +6 -16
@@ -3161,24 +3161,14 @@ static int __init fail_page_alloc_debugfs(void) dir =fault_create_debugfs_attr ("fail_page_alloc" ,NULL , &fail_page_alloc.attr); -if (IS_ERR (dir)) -return PTR_ERR (dir); - -if (!debugfs_create_bool ("ignore-gfp-wait" , mode, dir, - &fail_page_alloc.ignore_gfp_reclaim)) - goto fail; -if (!debugfs_create_bool ("ignore-gfp-highmem" , mode, dir, - &fail_page_alloc.ignore_gfp_highmem)) - goto fail; -if (!debugfs_create_u32 ("min-order" , mode, dir, - &fail_page_alloc.min_order)) - goto fail; -return 0 ; -fail: -debugfs_remove_recursive (dir); +debugfs_create_bool ("ignore-gfp-wait" , mode, dir, + &fail_page_alloc.ignore_gfp_reclaim); +debugfs_create_bool ("ignore-gfp-highmem" , mode, dir, + &fail_page_alloc.ignore_gfp_highmem); +debugfs_create_u32 ("min-order" , mode, dir, &fail_page_alloc.min_order); -return -ENOMEM ; +return 0 ; }late_initcall (fail_page_alloc_debugfs);
mm/page_owner.c +3 -5
@@ -625,16 +625,14 @@ static const struct file_operations proc_page_owner_operations = {static int __init pageowner_init (void ) { -struct dentry *dentry; -if (!static_branch_unlikely (&page_owner_inited)) {pr_info ("page_owner is disabled\n" );return 0 ; } - dentry =debugfs_create_file ("page_owner" ,0400 ,NULL , -NULL , &proc_page_owner_operations); +debugfs_create_file ("page_owner" ,0400 ,NULL ,NULL , + &proc_page_owner_operations); -return PTR_ERR_OR_ZERO (dentry); +return 0 ; }late_initcall (pageowner_init)
mm/vmstat.c +4 -11
@@ -2121,21 +2121,14 @@ static int __init extfrag_debug_init(void)struct dentry *extfrag_debug_root; extfrag_debug_root =debugfs_create_dir ("extfrag" ,NULL ); -if (!extfrag_debug_root) -return -ENOMEM ; -if (!debugfs_create_file ("unusable_index" ,0444 , - extfrag_debug_root,NULL , &unusable_file_ops)) - goto fail; +debugfs_create_file ("unusable_index" ,0444 , extfrag_debug_root,NULL , + &unusable_file_ops); -if (!debugfs_create_file ("extfrag_index" ,0444 , - extfrag_debug_root,NULL , &extfrag_file_ops)) - goto fail; +debugfs_create_file ("extfrag_index" ,0444 , extfrag_debug_root,NULL , + &extfrag_file_ops);return 0 ; -fail: -debugfs_remove_recursive (extfrag_debug_root); -return -ENOMEM ; }module_init (extfrag_debug_init);
Signature · 1 line
2.20.1
On Tue 22-01-19 16:21:13, Greg KH wrote:
[...]
Quoted 5 lines
mm/memblock.c +0
-0
mm/memblock.c DEFINE_SHOW_ATTRIBUTE(memblock_debug); · line 2004
Quoted 9 lines
mm/memblock.c +1
-2@@ -1998,8 +1998,7 @@ DEFINE_SHOW_ATTRIBUTE(memblock_debug);static int __init memblock_init_debugfs (void ) {struct dentry *root =debugfs_create_dir ("memblock" ,NULL ); -if (!root) -return -ENXIO ; +debugfs_create_file ("memory" ,0444 , root, &memblock.memory, &memblock_debug_fops); debugfs_create_file("reserved", 0444, root,
I haven't really read the whole patch but this has just hit my eyes. Is this a correct behavior?
Documentations says:
* @parent: a pointer to the parent dentry for this file. This should be a
* directory dentry if set. If this parameter is NULL, then the
* file will be created in the root of the debugfs filesystem.
so in case of failure we would get those debugfs files outside of their intended scope. I believe it is much more correct to simply not create anything, no?
Signature · 2 lines
Michal Hocko SUSE Labs
Quoted 20 lines · Michal Hocko
On Tue 22-01-19 16:21:13, Greg KH wrote:
[...]Quoted 5 lines
mm/memblock.c +0
-0mm/memblock.c DEFINE_SHOW_ATTRIBUTE(memblock_debug); · line 2004
Quoted 9 lines
mm/memblock.c +1
-2@@ -1998,8 +1998,7 @@ DEFINE_SHOW_ATTRIBUTE(memblock_debug);static int __init memblock_init_debugfs (void ) {struct dentry *root =debugfs_create_dir ("memblock" ,NULL ); -if (!root) -return -ENXIO ; +debugfs_create_file ("memory" ,0444 , root, &memblock.memory, &memblock_debug_fops); debugfs_create_file("reserved", 0444, root,I haven't really read the whole patch but this has just hit my eyes. Is this a correct behavior?
Quoted 8 lines
Documentations says:
* @parent: a pointer to the parent dentry for this file. This should be a
* directory dentry if set. If this parameter is NULL, then the
* file will be created in the root of the debugfs filesystem.so in case of failure we would get those debugfs files outside of their intended scope. I believe it is much more correct to simply not create anything, no?
If debugfs_create_dir() returns NULL, then something is really wrong (you passed it an invalid pointer as the parent dentry, or free memory is gone), so there's nothing you can do except keep moving forward and take that result and pass it as any parent pointer you want to. Your code logic should never care if a debugfs file is created or not, it is "fire and forget".
And any result of a debugfs call, like this one, that is to be passed into another debugfs call, will work just fine if the first one failed (the second one usually will also fail, which is fine.)
Also, and this is the biggest problem, everyone gets the return value check wrong thinking NULL will be an error, it is one type of error, but other ones are also returned and no one checks them properly. So just don't check at all, that is the design goal here.
hope this helps,
greg k-h
Quoted 30 lines · Greg KH
Quoted 20 lines · Michal Hocko
On Tue 22-01-19 16:21:13, Greg KH wrote:
[...]Quoted 5 lines
mm/memblock.c +0
-0mm/memblock.c DEFINE_SHOW_ATTRIBUTE(memblock_debug); · line 2004
Quoted 9 lines
mm/memblock.c +1
-2@@ -1998,8 +1998,7 @@ DEFINE_SHOW_ATTRIBUTE(memblock_debug);static int __init memblock_init_debugfs (void ) {struct dentry *root =debugfs_create_dir ("memblock" ,NULL ); -if (!root) -return -ENXIO ; +debugfs_create_file ("memory" ,0444 , root, &memblock.memory, &memblock_debug_fops); debugfs_create_file("reserved", 0444, root,I haven't really read the whole patch but this has just hit my eyes. Is this a correct behavior?
Quoted 8 lines
Documentations says:
* @parent: a pointer to the parent dentry for this file. This should be a
* directory dentry if set. If this parameter is NULL, then the
* file will be created in the root of the debugfs filesystem.so in case of failure we would get those debugfs files outside of their intended scope. I believe it is much more correct to simply not create anything, no?
Quoted 6 lines
If
debugfs_create_dir()returns NULL, then something is really wrong (you passed it an invalid pointer as the parent dentry, or free memory is gone), so there's nothing you can do except keep moving forward and take that result and pass it as any parent pointer you want to. Your code logic should never care if a debugfs file is created or not, it is "fire and forget".
OK, but does it make any sense to continue creating files when you know that the parent directory has failed to create? What kind of advantage does this have?
Quoted 8 lines
And any result of a debugfs call, like this one, that is to be passed into another debugfs call, will work just fine if the first one failed (the second one usually will also fail, which is fine.)
Also, and this is the biggest problem, everyone gets the return value check wrong thinking NULL will be an error, it is one type of error, but other ones are also returned and no one checks them properly. So just don't check at all, that is the design goal here.
sounds like a poor design goal to me but not mine code to maintain so...
Signature · 2 lines
Michal Hocko SUSE Labs
Quoted 38 lines · Michal Hocko
Quoted 30 lines · Greg KH
Quoted 20 lines · Michal Hocko
On Tue 22-01-19 16:21:13, Greg KH wrote:
[...]Quoted 5 lines
mm/memblock.c +0
-0mm/memblock.c DEFINE_SHOW_ATTRIBUTE(memblock_debug); · line 2004
Quoted 9 lines
mm/memblock.c +1
-2@@ -1998,8 +1998,7 @@ DEFINE_SHOW_ATTRIBUTE(memblock_debug);static int __init memblock_init_debugfs (void ) {struct dentry *root =debugfs_create_dir ("memblock" ,NULL ); -if (!root) -return -ENXIO ; +debugfs_create_file ("memory" ,0444 , root, &memblock.memory, &memblock_debug_fops); debugfs_create_file("reserved", 0444, root,I haven't really read the whole patch but this has just hit my eyes. Is this a correct behavior?
Quoted 8 lines
Documentations says:
* @parent: a pointer to the parent dentry for this file. This should be a
* directory dentry if set. If this parameter is NULL, then the
* file will be created in the root of the debugfs filesystem.so in case of failure we would get those debugfs files outside of their intended scope. I believe it is much more correct to simply not create anything, no?
Quoted 6 lines
If
debugfs_create_dir()returns NULL, then something is really wrong (you passed it an invalid pointer as the parent dentry, or free memory is gone), so there's nothing you can do except keep moving forward and take that result and pass it as any parent pointer you want to. Your code logic should never care if a debugfs file is created or not, it is "fire and forget".
Quoted 3 lines
OK, but does it make any sense to continue creating files when you know that the parent directory has failed to create? What kind of advantage does this have?
It has no advantage or disadvantage. And again, it can't really happen unless the system is out of memory and in that case, everything else just crashed anyway.
Quoted 10 lines
Quoted 8 lines
And any result of a debugfs call, like this one, that is to be passed into another debugfs call, will work just fine if the first one failed (the second one usually will also fail, which is fine.)
Also, and this is the biggest problem, everyone gets the return value check wrong thinking NULL will be an error, it is one type of error, but other ones are also returned and no one checks them properly. So just don't check at all, that is the design goal here.
sounds like a poor design goal to me but not mine code to maintain so...
The design goal was to make it as simple as possible to use, and that includes "you do not care about the return value". Now we do have to return a value because some people need that for when they want to make a subdirectory, or remove the file later on, otherwise I would have just had everything be a void return function :)
thanks,
greg k-h
Quoted 1 line · Greg KH
On Tue, Jan 22, 2019 at 05:07:01PM +0100, Michal Hocko wrote:
[...]
Quoted 7 lines
Quoted 1 line
sounds like a poor design goal to me but not mine code to maintain so...
The design goal was to make it as simple as possible to use, and that includes "you do not care about the return value". Now we do have to return a value because some people need that for when they want to make a subdirectory, or remove the file later on, otherwise I would have just had everything be a void return function :)
I suspect that you are making assumptions which might change in the future and this whole mess will be unfixable. But whatever I do not care about debugfs at all.
Signature · 2 lines
Michal Hocko SUSE Labs